@askexenow/exe-os 0.9.10 → 0.9.12

package/dist/bin/exe-gateway.js

@@ -448,13 +448,13 @@ __export(config_exports, {
 });
 import { readFile, writeFile } from "fs/promises";
 import { readFileSync, existsSync as existsSync2, renameSync } from "fs";
-import path from "path";
-import os from "os";
+import path2 from "path";
+import os2 from "os";
 function resolveDataDir() {
   if (process.env.EXE_OS_DIR) return process.env.EXE_OS_DIR;
   if (process.env.EXE_MEM_DIR) return process.env.EXE_MEM_DIR;
-  const newDir = path.join(os.homedir(), ".exe-os");
-  const legacyDir = path.join(os.homedir(), ".exe-mem");
+  const newDir = path2.join(os2.homedir(), ".exe-os");
+  const legacyDir = path2.join(os2.homedir(), ".exe-mem");
   if (!existsSync2(newDir) && existsSync2(legacyDir)) {
     try {
       renameSync(legacyDir, newDir);
@@ -519,9 +519,9 @@ function normalizeAutoUpdate(raw) {
 async function loadConfig() {
   const dir = process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? EXE_AI_DIR;
   await ensurePrivateDir(dir);
-  const configPath = path.join(dir, "config.json");
+  const configPath = path2.join(dir, "config.json");
   if (!existsSync2(configPath)) {
-    return { ...DEFAULT_CONFIG, dbPath: path.join(dir, "memories.db") };
+    return { ...DEFAULT_CONFIG, dbPath: path2.join(dir, "memories.db") };
   }
   const raw = await readFile(configPath, "utf-8");
   try {
@@ -540,20 +540,20 @@ async function loadConfig() {
     normalizeScalingRoadmap(migratedCfg);
     normalizeSessionLifecycle(migratedCfg);
     normalizeAutoUpdate(migratedCfg);
-    const config2 = { ...DEFAULT_CONFIG, dbPath: path.join(dir, "memories.db"), ...migratedCfg };
+    const config2 = { ...DEFAULT_CONFIG, dbPath: path2.join(dir, "memories.db"), ...migratedCfg };
     if (config2.dbPath.startsWith("~")) {
-      config2.dbPath = config2.dbPath.replace(/^~/, os.homedir());
+      config2.dbPath = config2.dbPath.replace(/^~/, os2.homedir());
     }
     return config2;
   } catch {
-    return { ...DEFAULT_CONFIG, dbPath: path.join(dir, "memories.db") };
+    return { ...DEFAULT_CONFIG, dbPath: path2.join(dir, "memories.db") };
   }
 }
 function loadConfigSync() {
   const dir = process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? EXE_AI_DIR;
-  const configPath = path.join(dir, "config.json");
+  const configPath = path2.join(dir, "config.json");
   if (!existsSync2(configPath)) {
-    return { ...DEFAULT_CONFIG, dbPath: path.join(dir, "memories.db") };
+    return { ...DEFAULT_CONFIG, dbPath: path2.join(dir, "memories.db") };
   }
   try {
     const raw = readFileSync(configPath, "utf-8");
@@ -563,15 +563,15 @@ function loadConfigSync() {
     normalizeScalingRoadmap(migratedCfg);
     normalizeSessionLifecycle(migratedCfg);
     normalizeAutoUpdate(migratedCfg);
-    return { ...DEFAULT_CONFIG, dbPath: path.join(dir, "memories.db"), ...migratedCfg };
+    return { ...DEFAULT_CONFIG, dbPath: path2.join(dir, "memories.db"), ...migratedCfg };
   } catch {
-    return { ...DEFAULT_CONFIG, dbPath: path.join(dir, "memories.db") };
+    return { ...DEFAULT_CONFIG, dbPath: path2.join(dir, "memories.db") };
   }
 }
 async function saveConfig(config2) {
   const dir = process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? EXE_AI_DIR;
   await ensurePrivateDir(dir);
-  const configPath = path.join(dir, "config.json");
+  const configPath = path2.join(dir, "config.json");
   await writeFile(configPath, JSON.stringify(config2, null, 2) + "\n");
   await enforcePrivateFile(configPath);
 }
@@ -595,10 +595,10 @@ var init_config = __esm({
     "use strict";
     init_secure_files();
     EXE_AI_DIR = resolveDataDir();
-    DB_PATH = path.join(EXE_AI_DIR, "memories.db");
-    MODELS_DIR = path.join(EXE_AI_DIR, "models");
-    CONFIG_PATH = path.join(EXE_AI_DIR, "config.json");
-    LEGACY_LANCE_PATH = path.join(EXE_AI_DIR, "local.lance");
+    DB_PATH = path2.join(EXE_AI_DIR, "memories.db");
+    MODELS_DIR = path2.join(EXE_AI_DIR, "models");
+    CONFIG_PATH = path2.join(EXE_AI_DIR, "config.json");
+    LEGACY_LANCE_PATH = path2.join(EXE_AI_DIR, "local.lance");
     CURRENT_CONFIG_VERSION = 1;
     DEFAULT_CONFIG = {
       config_version: CURRENT_CONFIG_VERSION,
@@ -711,7 +711,7 @@ __export(agent_config_exports, {
   setAgentRuntime: () => setAgentRuntime
 });
 import { readFileSync as readFileSync2, writeFileSync, existsSync as existsSync3 } from "fs";
-import path2 from "path";
+import path3 from "path";
 function loadAgentConfig() {
   if (!existsSync3(AGENT_CONFIG_PATH)) return {};
   try {
@@ -721,7 +721,7 @@ function loadAgentConfig() {
   }
 }
 function saveAgentConfig(config2) {
-  const dir = path2.dirname(AGENT_CONFIG_PATH);
+  const dir = path3.dirname(AGENT_CONFIG_PATH);
   ensurePrivateDirSync(dir);
   writeFileSync(AGENT_CONFIG_PATH, JSON.stringify(config2, null, 2) + "\n", "utf-8");
   enforcePrivateFileSync(AGENT_CONFIG_PATH);
@@ -765,7 +765,7 @@ var init_agent_config = __esm({
     init_config();
     init_runtime_table();
     init_secure_files();
-    AGENT_CONFIG_PATH = path2.join(EXE_AI_DIR, "agent-config.json");
+    AGENT_CONFIG_PATH = path3.join(EXE_AI_DIR, "agent-config.json");
     KNOWN_RUNTIMES = {
       claude: ["claude-opus-4", "claude-sonnet-4", "claude-haiku-4.5"],
       codex: ["gpt-5.4", "gpt-5.5", "gpt-5.3-codex-spark", "o3", "o4-mini"],
@@ -814,8 +814,8 @@ __export(employees_exports, {
 import { readFile as readFile2, writeFile as writeFile2, mkdir as mkdir2 } from "fs/promises";
 import { existsSync as existsSync4, symlinkSync, readlinkSync, readFileSync as readFileSync3, renameSync as renameSync2, unlinkSync, writeFileSync as writeFileSync2 } from "fs";
 import { execSync } from "child_process";
-import path3 from "path";
-import os2 from "os";
+import path4 from "path";
+import os3 from "os";
 function normalizeRole(role) {
   return (role ?? "").trim().toLowerCase();
 }
@@ -862,7 +862,7 @@ async function loadEmployees(employeesPath = EMPLOYEES_PATH) {
   }
 }
 async function saveEmployees(employees, employeesPath = EMPLOYEES_PATH) {
-  await mkdir2(path3.dirname(employeesPath), { recursive: true });
+  await mkdir2(path4.dirname(employeesPath), { recursive: true });
   await writeFile2(employeesPath, JSON.stringify(employees, null, 2) + "\n", "utf-8");
 }
 function loadEmployeesSync(employeesPath = EMPLOYEES_PATH) {
@@ -913,7 +913,7 @@ function addEmployee(employees, employee) {
 function appendToCoordinatorTeam(employee) {
   const coordinator = getCoordinatorEmployee(loadEmployeesSync());
   if (!coordinator) return;
-  const idPath = path3.join(IDENTITY_DIR, `${coordinator.name}.md`);
+  const idPath = path4.join(IDENTITY_DIR, `${coordinator.name}.md`);
   if (!existsSync4(idPath)) return;
   const content = readFileSync3(idPath, "utf-8");
   if (content.includes(`**${capitalize(employee.name)}`)) return;
@@ -965,9 +965,9 @@ async function normalizeRosterCase(rosterPath) {
       emp.name = emp.name.toLowerCase();
       changed = true;
       try {
-        const identityDir = path3.join(os2.homedir(), ".exe-os", "identity");
-        const oldPath = path3.join(identityDir, `${oldName}.md`);
-        const newPath = path3.join(identityDir, `${emp.name}.md`);
+        const identityDir = path4.join(os3.homedir(), ".exe-os", "identity");
+        const oldPath = path4.join(identityDir, `${oldName}.md`);
+        const newPath = path4.join(identityDir, `${emp.name}.md`);
         if (existsSync4(oldPath) && !existsSync4(newPath)) {
           renameSync2(oldPath, newPath);
         } else if (existsSync4(oldPath) && oldPath !== newPath) {
@@ -1002,7 +1002,7 @@ function registerBinSymlinks(name) {
     errors.push("Could not find 'exe-os' in PATH");
     return { created, skipped, errors };
   }
-  const binDir = path3.dirname(exeBinPath);
+  const binDir = path4.dirname(exeBinPath);
   let target;
   try {
     target = readlinkSync(exeBinPath);
@@ -1012,7 +1012,7 @@ function registerBinSymlinks(name) {
   }
   for (const suffix of ["", "-opencode"]) {
     const linkName = `${name}${suffix}`;
-    const linkPath = path3.join(binDir, linkName);
+    const linkPath = path4.join(binDir, linkName);
     if (existsSync4(linkPath)) {
       skipped.push(linkName);
       continue;
@@ -1031,20 +1031,20 @@ var init_employees = __esm({
   "src/lib/employees.ts"() {
     "use strict";
     init_config();
-    EMPLOYEES_PATH = path3.join(EXE_AI_DIR, "exe-employees.json");
+    EMPLOYEES_PATH = path4.join(EXE_AI_DIR, "exe-employees.json");
     DEFAULT_COORDINATOR_TEMPLATE_NAME = "exe";
     COORDINATOR_ROLE = "COO";
     MULTI_INSTANCE_ROLES = /* @__PURE__ */ new Set(["principal engineer", "content production specialist", "staff code reviewer"]);
-    IDENTITY_DIR = path3.join(EXE_AI_DIR, "identity");
+    IDENTITY_DIR = path4.join(EXE_AI_DIR, "identity");
     TEAM_SECTION_RE = /^## Team\b.*$/m;
   }
 });
 
 // src/lib/database-adapter.ts
-import os3 from "os";
-import path4 from "path";
-import { createRequire } from "module";
-import { pathToFileURL } from "url";
+import os4 from "os";
+import path5 from "path";
+import { createRequire as createRequire2 } from "module";
+import { pathToFileURL as pathToFileURL2 } from "url";
 function quotedIdentifier(identifier) {
   return `"${identifier.replace(/"/g, '""')}"`;
 }
@@ -1346,17 +1346,17 @@ async function loadPrismaClient() {
     prismaClientPromise = (async () => {
       const explicitPath = process.env.EXE_OS_PRISMA_CLIENT_PATH;
       if (explicitPath) {
-        const module2 = await import(pathToFileURL(explicitPath).href);
+        const module2 = await import(pathToFileURL2(explicitPath).href);
         const PrismaClient2 = module2.PrismaClient ?? module2.default?.PrismaClient;
         if (!PrismaClient2) {
           throw new Error(`No PrismaClient export found at ${explicitPath}`);
         }
         return new PrismaClient2();
       }
-      const exeDbRoot = process.env.EXE_DB_ROOT ?? path4.join(os3.homedir(), "exe-db");
-      const requireFromExeDb = createRequire(path4.join(exeDbRoot, "package.json"));
+      const exeDbRoot = process.env.EXE_DB_ROOT ?? path5.join(os4.homedir(), "exe-db");
+      const requireFromExeDb = createRequire2(path5.join(exeDbRoot, "package.json"));
       const prismaEntry = requireFromExeDb.resolve("@prisma/client");
-      const module = await import(pathToFileURL(prismaEntry).href);
+      const module = await import(pathToFileURL2(prismaEntry).href);
       const PrismaClient = module.PrismaClient ?? module.default?.PrismaClient;
       if (!PrismaClient) {
         throw new Error(`No PrismaClient export found in ${prismaEntry}`);
@@ -2690,7 +2690,7 @@ var init_memory = __esm({
 
 // src/lib/daemon-auth.ts
 import crypto from "crypto";
-import path5 from "path";
+import path6 from "path";
 import { existsSync as existsSync5, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
 function normalizeToken(token) {
   if (!token) return null;
@@ -2721,17 +2721,17 @@ var init_daemon_auth = __esm({
     "use strict";
     init_config();
     init_secure_files();
-    DAEMON_TOKEN_PATH = path5.join(EXE_AI_DIR, "exed.token");
+    DAEMON_TOKEN_PATH = path6.join(EXE_AI_DIR, "exed.token");
   }
 });
 
 // src/lib/exe-daemon-client.ts
 import net from "net";
-import os4 from "os";
+import os5 from "os";
 import { spawn } from "child_process";
 import { randomUUID } from "crypto";
 import { existsSync as existsSync6, unlinkSync as unlinkSync2, readFileSync as readFileSync5, openSync, closeSync, statSync } from "fs";
-import path6 from "path";
+import path7 from "path";
 import { fileURLToPath } from "url";
 function handleData(chunk) {
   _buffer += chunk.toString();
@@ -2782,17 +2782,17 @@ function cleanupStaleFiles() {
   }
 }
 function findPackageRoot() {
-  let dir = path6.dirname(fileURLToPath(import.meta.url));
-  const { root } = path6.parse(dir);
+  let dir = path7.dirname(fileURLToPath(import.meta.url));
+  const { root } = path7.parse(dir);
   while (dir !== root) {
-    if (existsSync6(path6.join(dir, "package.json"))) return dir;
-    dir = path6.dirname(dir);
+    if (existsSync6(path7.join(dir, "package.json"))) return dir;
+    dir = path7.dirname(dir);
   }
   return null;
 }
 function spawnDaemon() {
-  const freeGB = os4.freemem() / (1024 * 1024 * 1024);
-  const totalGB = os4.totalmem() / (1024 * 1024 * 1024);
+  const freeGB = os5.freemem() / (1024 * 1024 * 1024);
+  const totalGB = os5.totalmem() / (1024 * 1024 * 1024);
   if (totalGB <= 8) {
     process.stderr.write(
       `[exed-client] SKIP: ${totalGB.toFixed(0)}GB system \u2014 embedding daemon disabled. Using keyword search only. Minimum 16GB recommended for vector search.
@@ -2812,7 +2812,7 @@ function spawnDaemon() {
     process.stderr.write("[exed-client] WARN: cannot find package root\n");
     return;
   }
-  const daemonPath = path6.join(pkgRoot, "dist", "lib", "exe-daemon.js");
+  const daemonPath = path7.join(pkgRoot, "dist", "lib", "exe-daemon.js");
   if (!existsSync6(daemonPath)) {
     process.stderr.write(`[exed-client] WARN: daemon script not found at ${daemonPath}
 `);
@@ -2822,7 +2822,7 @@ function spawnDaemon() {
   const daemonToken = ensureDaemonToken(process.env[DAEMON_TOKEN_ENV] ?? null);
   process.stderr.write(`[exed-client] Spawning daemon: ${resolvedPath}
 `);
-  const logPath = path6.join(path6.dirname(SOCKET_PATH), "exed.log");
+  const logPath = path7.join(path7.dirname(SOCKET_PATH), "exed.log");
   let stderrFd = "ignore";
   try {
     stderrFd = openSync(logPath, "a");
@@ -3112,9 +3112,9 @@ var init_exe_daemon_client = __esm({
     "use strict";
     init_config();
     init_daemon_auth();
-    SOCKET_PATH = process.env.EXE_DAEMON_SOCK ?? process.env.EXE_EMBED_SOCK ?? path6.join(EXE_AI_DIR, "exed.sock");
-    PID_PATH = process.env.EXE_DAEMON_PID ?? process.env.EXE_EMBED_PID ?? path6.join(EXE_AI_DIR, "exed.pid");
-    SPAWN_LOCK_PATH = path6.join(EXE_AI_DIR, "exed-spawn.lock");
+    SOCKET_PATH = process.env.EXE_DAEMON_SOCK ?? process.env.EXE_EMBED_SOCK ?? path7.join(EXE_AI_DIR, "exed.sock");
+    PID_PATH = process.env.EXE_DAEMON_PID ?? process.env.EXE_EMBED_PID ?? path7.join(EXE_AI_DIR, "exed.pid");
+    SPAWN_LOCK_PATH = path7.join(EXE_AI_DIR, "exed-spawn.lock");
     SPAWN_LOCK_STALE_MS = 3e4;
     CONNECT_TIMEOUT_MS = 15e3;
     REQUEST_TIMEOUT_MS = 3e4;
@@ -3171,8 +3171,8 @@ async function embedDirect(text) {
   const llamaCpp = await import("node-llama-cpp");
   const { MODELS_DIR: MODELS_DIR2 } = await Promise.resolve().then(() => (init_config(), config_exports));
   const { existsSync: existsSync19 } = await import("fs");
-  const path23 = await import("path");
-  const modelPath = path23.join(MODELS_DIR2, "jina-embeddings-v5-small-q4_k_m.gguf");
+  const path24 = await import("path");
+  const modelPath = path24.join(MODELS_DIR2, "jina-embeddings-v5-small-q4_k_m.gguf");
   if (!existsSync19(modelPath)) {
     throw new Error(`Embedding model not found at ${modelPath}. Run '/exe-setup' to download it.`);
   }
@@ -3204,13 +3204,13 @@ var init_embedder = __esm({
 // src/lib/keychain.ts
 import { readFile as readFile3, writeFile as writeFile3, unlink, mkdir as mkdir3, chmod as chmod2 } from "fs/promises";
 import { existsSync as existsSync7 } from "fs";
-import path7 from "path";
-import os5 from "os";
+import path8 from "path";
+import os6 from "os";
 function getKeyDir() {
-  return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path7.join(os5.homedir(), ".exe-os");
+  return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path8.join(os6.homedir(), ".exe-os");
 }
 function getKeyPath() {
-  return path7.join(getKeyDir(), "master.key");
+  return path8.join(getKeyDir(), "master.key");
 }
 async function tryKeytar() {
   try {
@@ -3233,7 +3233,7 @@ async function getMasterKey() {
   const keyPath = getKeyPath();
   if (!existsSync7(keyPath)) {
     process.stderr.write(
-      `[keychain] Key not found at ${keyPath} (HOME=${os5.homedir()}, EXE_OS_DIR=${process.env.EXE_OS_DIR ?? "unset"})
+      `[keychain] Key not found at ${keyPath} (HOME=${os6.homedir()}, EXE_OS_DIR=${process.env.EXE_OS_DIR ?? "unset"})
 `
     );
     return null;
@@ -3272,7 +3272,7 @@ __export(shard_manager_exports, {
   listShards: () => listShards,
   shardExists: () => shardExists
 });
-import path8 from "path";
+import path9 from "path";
 import { existsSync as existsSync8, mkdirSync as mkdirSync2, readdirSync } from "fs";
 import { createClient as createClient2 } from "@libsql/client";
 function initShardManager(encryptionKey) {
@@ -3307,7 +3307,7 @@ function getShardClient(projectName) {
   while (_shards.size >= MAX_OPEN_SHARDS) {
     evictLRU();
   }
-  const dbPath = path8.join(SHARDS_DIR, `${safeName}.db`);
+  const dbPath = path9.join(SHARDS_DIR, `${safeName}.db`);
   const client = createClient2({
     url: `file:${dbPath}`,
     encryptionKey: _encryptionKey
@@ -3318,7 +3318,7 @@ function getShardClient(projectName) {
 }
 function shardExists(projectName) {
   const safeName = projectName.replace(/[^a-zA-Z0-9_-]/g, "_");
-  return existsSync8(path8.join(SHARDS_DIR, `${safeName}.db`));
+  return existsSync8(path9.join(SHARDS_DIR, `${safeName}.db`));
 }
 function listShards() {
   if (!existsSync8(SHARDS_DIR)) return [];
@@ -3568,7 +3568,7 @@ var init_shard_manager = __esm({
   "src/lib/shard-manager.ts"() {
     "use strict";
     init_config();
-    SHARDS_DIR = path8.join(EXE_AI_DIR, "shards");
+    SHARDS_DIR = path9.join(EXE_AI_DIR, "shards");
     SHARD_IDLE_MS = 5 * 60 * 1e3;
     MAX_OPEN_SHARDS = 10;
     EVICTION_INTERVAL_MS = 60 * 1e3;
@@ -4346,8 +4346,8 @@ __export(wiki_client_exports, {
   listDocuments: () => listDocuments,
   listWorkspaces: () => listWorkspaces
 });
-async function wikiFetch(config2, path23, method = "GET", body) {
-  const url = `${config2.baseUrl}/api/v1${path23}`;
+async function wikiFetch(config2, path24, method = "GET", body) {
+  const url = `${config2.baseUrl}/api/v1${path24}`;
   const headers = {
     Authorization: `Bearer ${config2.apiKey}`,
     "Content-Type": "application/json"
@@ -4380,7 +4380,7 @@ async function wikiFetch(config2, path23, method = "GET", body) {
       }
     }
     if (!response.ok) {
-      throw new Error(`Wiki API ${method} ${path23}: ${response.status} ${response.statusText}`);
+      throw new Error(`Wiki API ${method} ${path24}: ${response.status} ${response.statusText}`);
     }
     return response.json();
   } finally {
@@ -5411,10 +5411,10 @@ __export(license_exports, {
 });
 import { readFileSync as readFileSync6, writeFileSync as writeFileSync4, existsSync as existsSync9, mkdirSync as mkdirSync3 } from "fs";
 import { randomUUID as randomUUID3 } from "crypto";
-import { createRequire as createRequire2 } from "module";
-import { pathToFileURL as pathToFileURL2 } from "url";
-import os6 from "os";
-import path9 from "path";
+import { createRequire as createRequire3 } from "module";
+import { pathToFileURL as pathToFileURL3 } from "url";
+import os7 from "os";
+import path10 from "path";
 import { jwtVerify, importSPKI } from "jose";
 async function fetchRetry(url, init) {
   try {
@@ -5425,7 +5425,7 @@ async function fetchRetry(url, init) {
   }
 }
 function loadDeviceId() {
-  const deviceJsonPath = path9.join(EXE_AI_DIR, "device.json");
+  const deviceJsonPath = path10.join(EXE_AI_DIR, "device.json");
   try {
     if (existsSync9(deviceJsonPath)) {
       const data = JSON.parse(readFileSync6(deviceJsonPath, "utf8"));
@@ -5534,8 +5534,8 @@ function loadPrismaForLicense() {
   if (_prismaFailed) return null;
   const dbUrl = process.env.DATABASE_URL;
   if (!dbUrl) {
-    const exeDbRoot = process.env.EXE_DB_ROOT ?? path9.join(os6.homedir(), "exe-db");
-    if (!existsSync9(path9.join(exeDbRoot, "package.json"))) {
+    const exeDbRoot = process.env.EXE_DB_ROOT ?? path10.join(os7.homedir(), "exe-db");
+    if (!existsSync9(path10.join(exeDbRoot, "package.json"))) {
       _prismaFailed = true;
       return null;
     }
@@ -5544,15 +5544,15 @@ function loadPrismaForLicense() {
     _prismaPromise = (async () => {
       const explicitPath = process.env.EXE_OS_PRISMA_CLIENT_PATH;
       if (explicitPath) {
-        const mod2 = await import(pathToFileURL2(explicitPath).href);
+        const mod2 = await import(pathToFileURL3(explicitPath).href);
         const Ctor2 = mod2.PrismaClient ?? mod2.default?.PrismaClient;
         if (!Ctor2) throw new Error(`No PrismaClient at ${explicitPath}`);
         return new Ctor2();
       }
-      const exeDbRoot = process.env.EXE_DB_ROOT ?? path9.join(os6.homedir(), "exe-db");
-      const req = createRequire2(path9.join(exeDbRoot, "package.json"));
+      const exeDbRoot = process.env.EXE_DB_ROOT ?? path10.join(os7.homedir(), "exe-db");
+      const req = createRequire3(path10.join(exeDbRoot, "package.json"));
       const entry = req.resolve("@prisma/client");
-      const mod = await import(pathToFileURL2(entry).href);
+      const mod = await import(pathToFileURL3(entry).href);
       const Ctor = mod.PrismaClient ?? mod.default?.PrismaClient;
       if (!Ctor) throw new Error(`No PrismaClient in ${entry}`);
       return new Ctor();
@@ -5664,7 +5664,7 @@ async function checkLicense() {
   let key = loadLicense();
   if (!key) {
     try {
-      const configPath = path9.join(EXE_AI_DIR, "config.json");
+      const configPath = path10.join(EXE_AI_DIR, "config.json");
       if (existsSync9(configPath)) {
         const raw = JSON.parse(readFileSync6(configPath, "utf8"));
         const cloud = raw.cloud;
@@ -5825,9 +5825,9 @@ var init_license = __esm({
   "src/lib/license.ts"() {
     "use strict";
     init_config();
-    LICENSE_PATH = path9.join(EXE_AI_DIR, "license.key");
-    CACHE_PATH = path9.join(EXE_AI_DIR, "license-cache.json");
-    DEVICE_ID_PATH = path9.join(EXE_AI_DIR, "device-id");
+    LICENSE_PATH = path10.join(EXE_AI_DIR, "license.key");
+    CACHE_PATH = path10.join(EXE_AI_DIR, "license-cache.json");
+    DEVICE_ID_PATH = path10.join(EXE_AI_DIR, "device-id");
     API_BASE = "https://askexe.com/cloud";
     RETRY_DELAY_MS = 500;
     LICENSE_PUBLIC_KEY_PEM = `-----BEGIN PUBLIC KEY-----
@@ -6727,16 +6727,16 @@ __export(imessage_exports, {
 });
 import { execFile } from "child_process";
 import { promisify } from "util";
-import os7 from "os";
-import path10 from "path";
+import os8 from "os";
+import path11 from "path";
 var execFileAsync, POLL_INTERVAL_MS, MESSAGES_DB_PATH, IMessageAdapter;
 var init_imessage = __esm({
   "src/gateway/adapters/imessage.ts"() {
     "use strict";
     execFileAsync = promisify(execFile);
     POLL_INTERVAL_MS = 5e3;
-    MESSAGES_DB_PATH = path10.join(
-      process.env.HOME ?? os7.homedir(),
+    MESSAGES_DB_PATH = path11.join(
+      process.env.HOME ?? os8.homedir(),
       "Library/Messages/chat.db"
     );
     IMessageAdapter = class {
@@ -7049,9 +7049,9 @@ __export(webhook_exports, {
   WebhookAdapter: () => WebhookAdapter
 });
 import { randomUUID as randomUUID7 } from "crypto";
-function resolvePath(obj, path23) {
+function resolvePath(obj, path24) {
   let current = obj;
-  for (const segment of path23.split(".")) {
+  for (const segment of path24.split(".")) {
     if (current == null || typeof current !== "object") return void 0;
     current = current[segment];
   }
@@ -7201,10 +7201,10 @@ var init_whatsapp_accounts = __esm({
 
 // src/lib/session-registry.ts
 import { readFileSync as readFileSync8, writeFileSync as writeFileSync5, mkdirSync as mkdirSync5, existsSync as existsSync10 } from "fs";
-import path11 from "path";
-import os8 from "os";
+import path12 from "path";
+import os9 from "os";
 function registerSession(entry) {
-  const dir = path11.dirname(REGISTRY_PATH);
+  const dir = path12.dirname(REGISTRY_PATH);
   if (!existsSync10(dir)) {
     mkdirSync5(dir, { recursive: true });
   }
@@ -7229,7 +7229,7 @@ var REGISTRY_PATH;
 var init_session_registry = __esm({
   "src/lib/session-registry.ts"() {
     "use strict";
-    REGISTRY_PATH = path11.join(os8.homedir(), ".exe-os", "session-registry.json");
+    REGISTRY_PATH = path12.join(os9.homedir(), ".exe-os", "session-registry.json");
   }
 });
 
@@ -7491,10 +7491,10 @@ __export(intercom_queue_exports, {
   readQueue: () => readQueue
 });
 import { readFileSync as readFileSync9, writeFileSync as writeFileSync6, renameSync as renameSync3, existsSync as existsSync11, mkdirSync as mkdirSync6 } from "fs";
-import path12 from "path";
-import os9 from "os";
+import path13 from "path";
+import os10 from "os";
 function ensureDir() {
-  const dir = path12.dirname(QUEUE_PATH);
+  const dir = path13.dirname(QUEUE_PATH);
   if (!existsSync11(dir)) mkdirSync6(dir, { recursive: true });
 }
 function readQueue() {
@@ -7600,16 +7600,16 @@ var QUEUE_PATH, MAX_RETRIES2, TTL_MS, INTERCOM_LOG;
 var init_intercom_queue = __esm({
   "src/lib/intercom-queue.ts"() {
     "use strict";
-    QUEUE_PATH = path12.join(os9.homedir(), ".exe-os", "intercom-queue.json");
+    QUEUE_PATH = path13.join(os10.homedir(), ".exe-os", "intercom-queue.json");
     MAX_RETRIES2 = 5;
     TTL_MS = 60 * 60 * 1e3;
-    INTERCOM_LOG = path12.join(os9.homedir(), ".exe-os", "intercom.log");
+    INTERCOM_LOG = path13.join(os10.homedir(), ".exe-os", "intercom.log");
   }
 });
 
 // src/lib/plan-limits.ts
 import { readFileSync as readFileSync10, existsSync as existsSync12 } from "fs";
-import path13 from "path";
+import path14 from "path";
 function getLicenseSync() {
   try {
     if (!existsSync12(CACHE_PATH2)) return freeLicense();
@@ -7681,7 +7681,7 @@ var init_plan_limits = __esm({
         this.name = "PlanLimitError";
       }
     };
-    CACHE_PATH2 = path13.join(EXE_AI_DIR, "license-cache.json");
+    CACHE_PATH2 = path14.join(EXE_AI_DIR, "license-cache.json");
   }
 });
 
@@ -7720,8 +7720,8 @@ var init_task_scope = __esm({
 
 // src/lib/notifications.ts
 import crypto4 from "crypto";
-import path14 from "path";
-import os10 from "os";
+import path15 from "path";
+import os11 from "os";
 import {
   readFileSync as readFileSync11,
   readdirSync as readdirSync2,
@@ -7811,7 +7811,7 @@ var init_session_kill_telemetry = __esm({
 
 // src/lib/project-name.ts
 import { execSync as execSync4 } from "child_process";
-import path15 from "path";
+import path16 from "path";
 function getProjectName(cwd) {
   const dir = cwd ?? process.cwd();
   if (_cached2 && _cachedCwd === dir) return _cached2;
@@ -7824,7 +7824,7 @@ function getProjectName(cwd) {
         timeout: 2e3,
         stdio: ["pipe", "pipe", "pipe"]
       }).trim();
-      repoRoot = path15.dirname(gitCommonDir);
+      repoRoot = path16.dirname(gitCommonDir);
     } catch {
       repoRoot = execSync4("git rev-parse --show-toplevel", {
         cwd: dir,
@@ -7833,11 +7833,11 @@ function getProjectName(cwd) {
         stdio: ["pipe", "pipe", "pipe"]
       }).trim();
     }
-    _cached2 = path15.basename(repoRoot);
+    _cached2 = path16.basename(repoRoot);
     _cachedCwd = dir;
     return _cached2;
   } catch {
-    _cached2 = path15.basename(dir);
+    _cached2 = path16.basename(dir);
     _cachedCwd = dir;
     return _cached2;
   }
@@ -7915,8 +7915,8 @@ var init_session_scope = __esm({
 
 // src/lib/tasks-crud.ts
 import crypto6 from "crypto";
-import path16 from "path";
-import os11 from "os";
+import path17 from "path";
+import os12 from "os";
 import { execSync as execSync5 } from "child_process";
 import { mkdir as mkdir4, writeFile as writeFile4, appendFile } from "fs/promises";
 import { existsSync as existsSync14, readFileSync as readFileSync12 } from "fs";
@@ -8113,8 +8113,8 @@ ${scopeMismatchWarning}` : scopeMismatchWarning;
   }
   if (input.baseDir) {
     try {
-      await mkdir4(path16.join(input.baseDir, "exe", "output"), { recursive: true });
-      await mkdir4(path16.join(input.baseDir, "exe", "research"), { recursive: true });
+      await mkdir4(path17.join(input.baseDir, "exe", "output"), { recursive: true });
+      await mkdir4(path17.join(input.baseDir, "exe", "research"), { recursive: true });
       await ensureArchitectureDoc(input.baseDir, input.projectName);
       await ensureGitignoreExe(input.baseDir);
     } catch {
@@ -8150,9 +8150,9 @@ ${scopeMismatchWarning}` : scopeMismatchWarning;
   });
   if (input.baseDir) {
     try {
-      const EXE_OS_DIR = path16.join(os11.homedir(), ".exe-os");
-      const mdPath = path16.join(EXE_OS_DIR, taskFile);
-      const mdDir = path16.dirname(mdPath);
+      const EXE_OS_DIR = path17.join(os12.homedir(), ".exe-os");
+      const mdPath = path17.join(EXE_OS_DIR, taskFile);
+      const mdDir = path17.dirname(mdPath);
       if (!existsSync14(mdDir)) await mkdir4(mdDir, { recursive: true });
       const reviewer = input.reviewer ?? input.assignedBy;
       const mdContent = `# ${input.title}
@@ -8453,7 +8453,7 @@ async function deleteTaskCore(taskId, _baseDir) {
   return { taskFile, assignedTo, assignedBy, taskSlug };
 }
 async function ensureArchitectureDoc(baseDir, projectName) {
-  const archPath = path16.join(baseDir, "exe", "ARCHITECTURE.md");
+  const archPath = path17.join(baseDir, "exe", "ARCHITECTURE.md");
   try {
     if (existsSync14(archPath)) return;
     const template = [
@@ -8488,7 +8488,7 @@ async function ensureArchitectureDoc(baseDir, projectName) {
   }
 }
 async function ensureGitignoreExe(baseDir) {
-  const gitignorePath = path16.join(baseDir, ".gitignore");
+  const gitignorePath = path17.join(baseDir, ".gitignore");
   try {
     if (existsSync14(gitignorePath)) {
       const content = readFileSync12(gitignorePath, "utf-8");
@@ -8522,8 +8522,35 @@ var init_tasks_crud = __esm({
 });
 
 // src/lib/tasks-review.ts
-import path17 from "path";
+var tasks_review_exports = {};
+__export(tasks_review_exports, {
+  cleanupOrphanedReviews: () => cleanupOrphanedReviews,
+  cleanupReviewFile: () => cleanupReviewFile,
+  countNewPendingReviewsSince: () => countNewPendingReviewsSince,
+  countPendingReviews: () => countPendingReviews,
+  createReviewForCompletedTask: () => createReviewForCompletedTask,
+  formatAge: () => formatAge,
+  getReviewChecklist: () => getReviewChecklist,
+  isStale: () => isStale,
+  listPendingReviews: () => listPendingReviews
+});
+import path18 from "path";
 import { existsSync as existsSync15, readdirSync as readdirSync3, unlinkSync as unlinkSync4 } from "fs";
+function formatAge(isoTimestamp) {
+  if (!isoTimestamp) return "";
+  const ms = Date.now() - new Date(isoTimestamp).getTime();
+  if (ms < 0) return "just now";
+  const minutes = Math.floor(ms / 6e4);
+  if (minutes < 60) return `${minutes}m ago`;
+  const hours = Math.floor(minutes / 60);
+  if (hours < 24) return `${hours}h ago`;
+  const days = Math.floor(hours / 24);
+  return `${days}d ago`;
+}
+function isStale(isoTimestamp) {
+  if (!isoTimestamp) return false;
+  return Date.now() - new Date(isoTimestamp).getTime() > 24 * 60 * 60 * 1e3;
+}
 async function countPendingReviews(sessionScope) {
   const client = getClient();
   const scope = strictSessionScopeFilter(
@@ -8644,6 +8671,95 @@ function getReviewChecklist(role, agent, taskSlug) {
     ]
   };
 }
+async function createReviewForCompletedTask(row, result, _baseDir, now) {
+  const taskFile = String(row.task_file);
+  const employees = await loadEmployees();
+  const coordinatorName = getCoordinatorName(employees);
+  if (isCoordinatorName(String(row.assigned_to), employees)) return;
+  if (String(row.title).startsWith("Review:")) return;
+  const fileName = taskFile.split("/").pop() ?? "";
+  if (fileName.startsWith("review-") && String(row.assigned_by) === "system") return;
+  if (fileName.startsWith("review-") && String(row.assigned_to) === "system") return;
+  const client = getClient();
+  const agent = String(row.assigned_to);
+  const rawReviewer = row.reviewer || row.assigned_by;
+  const reviewer = rawReviewer ? String(rawReviewer) : coordinatorName;
+  const currentStatus = String(row.status ?? "");
+  if (currentStatus === "done") return;
+  const existingResult = String(row.result ?? "");
+  if (existingResult.includes("## Review notes")) return;
+  let reviewerRole = "unknown";
+  try {
+    const emp = getEmployee(employees, reviewer);
+    if (emp) reviewerRole = emp.role;
+  } catch {
+  }
+  const taskTitle = String(row.title);
+  const taskSlug = taskFile.split("/").pop()?.replace(".md", "") ?? "unknown";
+  const { lens, checklist } = getReviewChecklist(reviewerRole, agent, taskSlug);
+  process.stderr.write(
+    `[review] Annotating "${taskTitle}" for review by ${reviewer} (${reviewerRole})
+`
+  );
+  const reviewNotes = [
+    `
+---
+## Review notes`,
+    `Review lens: ${lens}`,
+    `Reviewer: **${reviewer}** (${reviewerRole})`,
+    "",
+    "### Checklist",
+    ...checklist,
+    "",
+    "### Verdict",
+    "- **Approved:** mark this task as done",
+    "- **Needs work:** re-open with notes"
+  ].join("\n");
+  const originalTaskId = String(row.id);
+  const updatedResult = (result ?? "No result summary provided") + reviewNotes;
+  await client.execute({
+    sql: `UPDATE tasks SET result = ?, status = 'needs_review', updated_at = ?
+          WHERE id = ?`,
+    args: [updatedResult, now, originalTaskId]
+  });
+  orgBus.emit({
+    type: "review_created",
+    reviewId: originalTaskId,
+    employee: agent,
+    reviewer,
+    timestamp: now
+  });
+  await writeNotification({
+    agentId: agent,
+    agentRole: String(row.assigned_to),
+    event: "task_complete",
+    project: String(row.project_name),
+    summary: `completed "${taskTitle}" \u2014 ready for review`,
+    taskFile
+  });
+  const originalPriority = String(row.priority).toLowerCase();
+  const autoApprove = originalPriority === "p2" && result?.toLowerCase().includes("tests pass");
+  if (!autoApprove) {
+    try {
+      const key = getSessionKey();
+      const exeSession = getParentExe(key);
+      if (exeSession) {
+        sendIntercom(exeSession);
+      }
+    } catch {
+    }
+  }
+  if (autoApprove) {
+    process.stderr.write(
+      `[review] Auto-approving "${taskTitle}" (P2 + tests pass)
+`
+    );
+    await client.execute({
+      sql: "UPDATE tasks SET status = 'done', updated_at = ? WHERE id = ?",
+      args: [now, originalTaskId]
+    });
+  }
+}
 async function cleanupReviewFile(row, taskFile, _baseDir) {
   if (String(row.assigned_by) !== "system" || !taskFile.includes("review-")) return;
   try {
@@ -8688,11 +8804,11 @@ async function cleanupReviewFile(row, taskFile, _baseDir) {
     );
   }
   try {
-    const cacheDir = path17.join(EXE_AI_DIR, "session-cache");
+    const cacheDir = path18.join(EXE_AI_DIR, "session-cache");
     if (existsSync15(cacheDir)) {
       for (const f of readdirSync3(cacheDir)) {
         if (f.startsWith("review-notified-")) {
-          unlinkSync4(path17.join(cacheDir, f));
+          unlinkSync4(path18.join(cacheDir, f));
         }
       }
     }
@@ -8714,7 +8830,7 @@ var init_tasks_review = __esm({
 });
 
 // src/lib/tasks-chain.ts
-import path18 from "path";
+import path19 from "path";
 import { readFile as readFile4, writeFile as writeFile5 } from "fs/promises";
 async function cascadeUnblock(taskId, baseDir, now) {
   const client = getClient();
@@ -8731,7 +8847,7 @@ async function cascadeUnblock(taskId, baseDir, now) {
     });
     for (const ur of unblockedRows.rows) {
       try {
-        const ubFile = path18.join(baseDir, String(ur.task_file));
+        const ubFile = path19.join(baseDir, String(ur.task_file));
         let ubContent = await readFile4(ubFile, "utf-8");
         ubContent = ubContent.replace(/\*\*Status:\*\* blocked/, "**Status:** open");
         ubContent = ubContent.replace(/\n\*\*Blocked by:\*\*.*\n/, "\n");
@@ -9195,7 +9311,7 @@ __export(tasks_exports, {
   updateTaskStatus: () => updateTaskStatus,
   writeCheckpoint: () => writeCheckpoint
 });
-import path19 from "path";
+import path20 from "path";
 import { writeFileSync as writeFileSync7, mkdirSync as mkdirSync7, unlinkSync as unlinkSync5 } from "fs";
 async function createTask(input) {
   const result = await createTaskCore(input);
@@ -9215,8 +9331,8 @@ async function updateTask(input) {
   const { row, taskFile, now, taskId } = await updateTaskStatus(input);
   try {
     const agent = String(row.assigned_to);
-    const cacheDir = path19.join(EXE_AI_DIR, "session-cache");
-    const cachePath = path19.join(cacheDir, `current-task-${agent}.json`);
+    const cacheDir = path20.join(EXE_AI_DIR, "session-cache");
+    const cachePath = path20.join(cacheDir, `current-task-${agent}.json`);
     if (input.status === "in_progress") {
       mkdirSync7(cacheDir, { recursive: true });
       writeFileSync7(cachePath, JSON.stringify({ taskId, title: String(row.title) }));
@@ -9688,12 +9804,12 @@ __export(tmux_routing_exports, {
 });
 import { execFileSync as execFileSync2, execSync as execSync6 } from "child_process";
 import { readFileSync as readFileSync13, writeFileSync as writeFileSync8, mkdirSync as mkdirSync8, existsSync as existsSync16, appendFileSync, readdirSync as readdirSync4 } from "fs";
-import path20 from "path";
-import os12 from "os";
+import path21 from "path";
+import os13 from "os";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { unlinkSync as unlinkSync6 } from "fs";
 function spawnLockPath(sessionName) {
-  return path20.join(SPAWN_LOCK_DIR, `${sessionName}.lock`);
+  return path21.join(SPAWN_LOCK_DIR, `${sessionName}.lock`);
 }
 function isProcessAlive(pid) {
   try {
@@ -9730,8 +9846,8 @@ function releaseSpawnLock2(sessionName) {
 function resolveBehaviorsExporterScript() {
   try {
     const thisFile = fileURLToPath2(import.meta.url);
-    const scriptPath = path20.join(
-      path20.dirname(thisFile),
+    const scriptPath = path21.join(
+      path21.dirname(thisFile),
       "..",
       "bin",
       "exe-export-behaviors.js"
@@ -9806,7 +9922,7 @@ function registerParentExe(sessionKey, parentExe, dispatchedBy) {
     mkdirSync8(SESSION_CACHE, { recursive: true });
   }
   const rootExe = extractRootExe(parentExe) ?? parentExe;
-  const filePath = path20.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`);
+  const filePath = path21.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`);
   writeFileSync8(filePath, JSON.stringify({
     parentExe: rootExe,
     dispatchedBy: dispatchedBy || rootExe,
@@ -9815,7 +9931,7 @@ function registerParentExe(sessionKey, parentExe, dispatchedBy) {
 }
 function getParentExe(sessionKey) {
   try {
-    const data = JSON.parse(readFileSync13(path20.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`), "utf8"));
+    const data = JSON.parse(readFileSync13(path21.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`), "utf8"));
     return data.parentExe || null;
   } catch {
     return null;
@@ -9824,7 +9940,7 @@ function getParentExe(sessionKey) {
 function getDispatchedBy(sessionKey) {
   try {
     const data = JSON.parse(readFileSync13(
-      path20.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`),
+      path21.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`),
       "utf8"
     ));
     return data.dispatchedBy ?? data.parentExe ?? null;
@@ -10007,20 +10123,22 @@ function sendIntercom(targetSession) {
       logIntercom(`QUEUED \u2192 ${targetSession} (session busy)${batched2 > 0 ? ` [${batched2} batched]` : ""}`);
       return "queued";
     }
-    try {
-      const rawAgent = targetSession.split("-")[0] ?? targetSession;
-      const agent = baseAgentName(rawAgent);
-      const markerPath = path20.join(SESSION_CACHE, `current-task-${agent}.json`);
-      if (existsSync16(markerPath)) {
-        logIntercom(`SKIP \u2192 ${targetSession} (has in_progress task marker \u2014 will auto-chain)`);
-        return "debounced";
+    if (sessionState !== "idle") {
+      try {
+        const rawAgent = targetSession.split("-")[0] ?? targetSession;
+        const agent = baseAgentName(rawAgent);
+        const markerPath = path21.join(SESSION_CACHE, `current-task-${agent}.json`);
+        if (existsSync16(markerPath)) {
+          logIntercom(`SKIP \u2192 ${targetSession} (has in_progress task marker + not idle \u2014 will auto-chain)`);
+          return "debounced";
+        }
+      } catch {
       }
-    } catch {
     }
     try {
       const rawAgent = targetSession.split("-")[0] ?? targetSession;
       const agent = baseAgentName(rawAgent);
-      const taskDir = path20.join(process.cwd(), "exe", agent);
+      const taskDir = path21.join(process.cwd(), "exe", agent);
       if (existsSync16(taskDir)) {
         const files = readdirSync4(taskDir).filter(
           (f) => f.endsWith(".md") && f !== "DONE.txt"
@@ -10086,6 +10204,24 @@ function notifyCoordinatorTaskCompletion(coordinatorSession, agentName, taskTitl
   try {
     const sessions = transport.listSessions();
     if (!sessions.includes(coordinatorSession)) return false;
+    try {
+      const { countPendingReviews: countPendingReviews2 } = (init_tasks_review(), __toCommonJS(tasks_review_exports));
+      const pending = countPendingReviews2(coordinatorSession);
+      if (pending instanceof Promise) {
+        pending.then((count) => {
+          if (count > 0) {
+            execSync6(
+              `tmux send-keys -t ${JSON.stringify(coordinatorSession)} '/exe-intercom' Enter`,
+              { timeout: 3e3 }
+            );
+            logIntercom(`COMPLETION \u2192 ${coordinatorSession} (${agentName} completed "${taskTitle.slice(0, 50)}", ${count} reviews pending)`);
+          }
+        }).catch(() => {
+        });
+        return true;
+      }
+    } catch {
+    }
     execSync6(
       `tmux send-keys -t ${JSON.stringify(coordinatorSession)} '/exe-intercom' Enter`,
       { timeout: 3e3 }
@@ -10169,8 +10305,8 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   const transport = getTransport();
   const sessionName = employeeSessionName(employeeName, exeSession, opts?.instance);
   const instanceLabel = opts?.instance != null && opts.instance > 0 ? `${employeeName}${opts.instance}` : employeeName;
-  const logDir = path20.join(os12.homedir(), ".exe-os", "session-logs");
-  const logFile = path20.join(logDir, `${instanceLabel}-${Date.now()}.log`);
+  const logDir = path21.join(os13.homedir(), ".exe-os", "session-logs");
+  const logFile = path21.join(logDir, `${instanceLabel}-${Date.now()}.log`);
   if (!existsSync16(logDir)) {
     mkdirSync8(logDir, { recursive: true });
   }
@@ -10178,14 +10314,14 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   let cleanupSuffix = "";
   try {
     const thisFile = fileURLToPath2(import.meta.url);
-    const cleanupScript = path20.join(path20.dirname(thisFile), "..", "bin", "exe-session-cleanup.js");
+    const cleanupScript = path21.join(path21.dirname(thisFile), "..", "bin", "exe-session-cleanup.js");
     if (existsSync16(cleanupScript)) {
       cleanupSuffix = `; ${process.execPath} "${cleanupScript}" "${employeeName}" "${exeSession}"`;
     }
   } catch {
   }
   try {
-    const claudeJsonPath = path20.join(os12.homedir(), ".claude.json");
+    const claudeJsonPath = path21.join(os13.homedir(), ".claude.json");
     let claudeJson = {};
     try {
       claudeJson = JSON.parse(readFileSync13(claudeJsonPath, "utf8"));
@@ -10200,10 +10336,10 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   } catch {
   }
   try {
-    const settingsDir = path20.join(os12.homedir(), ".claude", "projects");
+    const settingsDir = path21.join(os13.homedir(), ".claude", "projects");
     const normalizedKey = (opts?.cwd ?? projectDir).replace(/\//g, "-").replace(/^-/, "");
-    const projSettingsDir = path20.join(settingsDir, normalizedKey);
-    const settingsPath = path20.join(projSettingsDir, "settings.json");
+    const projSettingsDir = path21.join(settingsDir, normalizedKey);
+    const settingsPath = path21.join(projSettingsDir, "settings.json");
     let settings = {};
     try {
       settings = JSON.parse(readFileSync13(settingsPath, "utf8"));
@@ -10250,8 +10386,8 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   let behaviorsFlag = "";
   let legacyFallbackWarned = false;
   if (!useExeAgent && !useBinSymlink) {
-    const identityPath = path20.join(
-      os12.homedir(),
+    const identityPath = path21.join(
+      os13.homedir(),
       ".exe-os",
       "identity",
       `${employeeName}.md`
@@ -10266,7 +10402,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
     }
     const behaviorsFile = exportBehaviorsSync(
       employeeName,
-      path20.basename(spawnCwd),
+      path21.basename(spawnCwd),
       sessionName
     );
     if (behaviorsFile) {
@@ -10281,9 +10417,9 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   }
   let sessionContextFlag = "";
   try {
-    const ctxDir = path20.join(os12.homedir(), ".exe-os", "session-cache");
+    const ctxDir = path21.join(os13.homedir(), ".exe-os", "session-cache");
     mkdirSync8(ctxDir, { recursive: true });
-    const ctxFile = path20.join(ctxDir, `session-context-${sessionName}.md`);
+    const ctxFile = path21.join(ctxDir, `session-context-${sessionName}.md`);
     const ctxContent = [
       `## Session Context`,
       `You are running in tmux session: ${sessionName}.`,
@@ -10367,7 +10503,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   transport.pipeLog(sessionName, logFile);
   try {
     const mySession = getMySession();
-    const dispatchInfo = path20.join(SESSION_CACHE, `dispatch-info-${sessionName}.json`);
+    const dispatchInfo = path21.join(SESSION_CACHE, `dispatch-info-${sessionName}.json`);
     writeFileSync8(dispatchInfo, JSON.stringify({
       dispatchedBy: mySession,
       rootExe: exeSession,
@@ -10442,15 +10578,15 @@ var init_tmux_routing = __esm({
     init_intercom_queue();
     init_plan_limits();
     init_employees();
-    SPAWN_LOCK_DIR = path20.join(os12.homedir(), ".exe-os", "spawn-locks");
-    SESSION_CACHE = path20.join(os12.homedir(), ".exe-os", "session-cache");
+    SPAWN_LOCK_DIR = path21.join(os13.homedir(), ".exe-os", "spawn-locks");
+    SESSION_CACHE = path21.join(os13.homedir(), ".exe-os", "session-cache");
     BEHAVIORS_EXPORT_TIMEOUT_MS = 1e4;
     VALID_SESSION_NAME = /^[a-z]+\d*-[a-zA-Z0-9_]+$/;
     VERIFY_PANE_LINES = 200;
     INTERCOM_DEBOUNCE_MS = 3e4;
     CODEX_DEBOUNCE_MS = 12e4;
-    INTERCOM_LOG2 = path20.join(os12.homedir(), ".exe-os", "intercom.log");
-    DEBOUNCE_FILE = path20.join(SESSION_CACHE, "intercom-debounce.json");
+    INTERCOM_LOG2 = path21.join(os13.homedir(), ".exe-os", "intercom.log");
+    DEBOUNCE_FILE = path21.join(SESSION_CACHE, "intercom-debounce.json");
     DEBOUNCE_CLEANUP_AGE_MS = 5 * 60 * 1e3;
     BUSY_PATTERN = /[✻✽✶✳·].*…|Running…|• Working|• Ran |• Explored|• Called|esc to interrupt/;
   }
@@ -10732,8 +10868,8 @@ var init_messaging = __esm({
 // src/automation/trigger-engine.ts
 import { readFileSync as readFileSync14, writeFileSync as writeFileSync9, existsSync as existsSync17, mkdirSync as mkdirSync9 } from "fs";
 import { randomUUID as randomUUID8 } from "crypto";
-import path21 from "path";
-import os13 from "os";
+import path22 from "path";
+import os14 from "os";
 function substituteTemplate(template, record) {
   return template.replace(
     /\{\{(\w+(?:\.\w+)*)\}\}/g,
@@ -11028,7 +11164,7 @@ var TRIGGERS_PATH, GRAPH_API_VERSION;
 var init_trigger_engine = __esm({
   "src/automation/trigger-engine.ts"() {
     "use strict";
-    TRIGGERS_PATH = path21.join(os13.homedir(), ".exe-os", "triggers.json");
+    TRIGGERS_PATH = path22.join(os14.homedir(), ".exe-os", "triggers.json");
     GRAPH_API_VERSION = "v21.0";
   }
 });
@@ -11092,18 +11228,215 @@ var init_crm_webhook = __esm({
 
 // src/bin/exe-gateway.ts
 import { existsSync as existsSync18, readFileSync as readFileSync15 } from "fs";
-import path22 from "path";
-import os14 from "os";
+import path23 from "path";
+import os15 from "os";
 
 // src/gateway/webhook-server.ts
 import {
   createServer
 } from "http";
+
+// src/gateway/query-handler.ts
+import os from "os";
+import path from "path";
+import { createRequire } from "module";
+import { pathToFileURL } from "url";
+var DEFAULT_LIMIT = 20;
+var MAX_LIMIT = 100;
+var DEFAULT_SCOPE = "all";
+var ALL_SCOPES = ["raw", "wiki", "memory", "gateway", "all"];
+var SCOPE_ORDER = ["raw", "memory", "wiki", "gateway"];
+var UNKNOWN_TIMESTAMP = (/* @__PURE__ */ new Date(0)).toISOString();
+var prismaPromise = null;
+function loadPrisma() {
+  if (!prismaPromise) {
+    prismaPromise = (async () => {
+      const explicitPath = process.env.EXE_OS_PRISMA_CLIENT_PATH;
+      if (explicitPath) {
+        const mod2 = await import(pathToFileURL(explicitPath).href);
+        const Ctor2 = mod2.PrismaClient ?? mod2.default?.PrismaClient;
+        if (!Ctor2) throw new Error(`No PrismaClient at ${explicitPath}`);
+        return new Ctor2();
+      }
+      const exeDbRoot = process.env.EXE_DB_ROOT ?? path.join(os.homedir(), "exe-db");
+      const req = createRequire(path.join(exeDbRoot, "package.json"));
+      const entry = req.resolve("@prisma/client");
+      const mod = await import(pathToFileURL(entry).href);
+      const Ctor = mod.PrismaClient ?? mod.default?.PrismaClient;
+      if (!Ctor) throw new Error(`No PrismaClient in ${entry}`);
+      return new Ctor();
+    })();
+  }
+  return prismaPromise;
+}
+var QueryValidationError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "QueryValidationError";
+  }
+};
+var QueryHandler = class {
+  constructor(getPrisma = loadPrisma) {
+    this.getPrisma = getPrisma;
+  }
+  parseParams(input) {
+    const url = typeof input === "string" ? new URL(input, "http://localhost") : input;
+    const q = url.searchParams.get("q")?.trim() ?? "";
+    if (!q) {
+      throw new QueryValidationError("Query parameter 'q' is required");
+    }
+    const scope = url.searchParams.get("scope")?.trim().toLowerCase() ?? DEFAULT_SCOPE;
+    if (!ALL_SCOPES.includes(scope)) {
+      throw new QueryValidationError("Invalid scope");
+    }
+    const rawLimit = url.searchParams.get("limit");
+    const parsedLimit = rawLimit ? Number.parseInt(rawLimit, 10) : DEFAULT_LIMIT;
+    const limit = Number.isFinite(parsedLimit) && parsedLimit > 0 ? Math.min(parsedLimit, MAX_LIMIT) : DEFAULT_LIMIT;
+    const source = url.searchParams.get("source")?.trim() || void 0;
+    return { q, scope, source, limit };
+  }
+  async query(params) {
+    const prisma = await this.getPrisma();
+    const scopes = params.scope === "all" ? SCOPE_ORDER : [params.scope];
+    const searchTerm = `%${params.q}%`;
+    const results = (await Promise.all(
+      scopes.map((scope) => this.queryScope(prisma, scope, searchTerm, params))
+    )).flat();
+    return {
+      results,
+      count: results.length,
+      scopes_searched: scopes
+    };
+  }
+  async queryScope(prisma, scope, searchTerm, params) {
+    switch (scope) {
+      case "raw":
+        return this.queryRaw(prisma, searchTerm, params.source, params.limit);
+      case "memory":
+        return this.queryMemory(prisma, searchTerm, params.limit);
+      case "wiki":
+        return this.queryWiki(prisma, searchTerm, params.limit);
+      case "gateway":
+        return this.queryGateway(prisma, searchTerm, params.limit);
+    }
+  }
+  async queryRaw(prisma, searchTerm, source, limit) {
+    const rows = await prisma.$queryRawUnsafe(
+      `SELECT "id", "source", "event_type", substring("payload"::text, 1, 200) as snippet, "timestamp"
+       FROM "raw"."raw_events"
+       WHERE ("payload"::text ILIKE $1 OR "metadata"::text ILIKE $1)
+         AND ($2::text IS NULL OR "source" = $2)
+       ORDER BY "timestamp" DESC
+       LIMIT $3`,
+      searchTerm,
+      source ?? null,
+      limit
+    );
+    return rows.map((row) => ({
+      scope: "raw",
+      type: "event",
+      snippet: sanitizeSnippet(row.snippet),
+      timestamp: toIsoTimestamp(row.timestamp),
+      metadata: {
+        id: row.id,
+        source: row.source,
+        event_type: row.event_type
+      }
+    }));
+  }
+  async queryMemory(prisma, searchTerm, limit) {
+    const rows = await prisma.$queryRawUnsafe(
+      `SELECT "id", "agent_id", "tool_name", substring("raw_text", 1, 200) as snippet, "timestamp", "project_name"
+       FROM "memory"."memory_records"
+       WHERE "raw_text" ILIKE $1 AND "status" = 'active'
+       ORDER BY "timestamp" DESC
+       LIMIT $2`,
+      searchTerm,
+      limit
+    );
+    return rows.map((row) => ({
+      scope: "memory",
+      type: "memory",
+      snippet: sanitizeSnippet(row.snippet),
+      timestamp: toIsoTimestamp(row.timestamp),
+      metadata: {
+        id: row.id,
+        agent_id: row.agent_id,
+        tool_name: row.tool_name,
+        project_name: row.project_name
+      }
+    }));
+  }
+  async queryWiki(prisma, searchTerm, limit) {
+    const rows = await prisma.$queryRawUnsafe(
+      `SELECT d."doc_id", d."filename", d."docpath", w."name" as workspace_name
+       FROM "wiki"."workspace_documents" d
+       JOIN "wiki"."workspaces" w ON w."id" = d."workspace_id"
+       WHERE d."filename" ILIKE $1 OR d."docpath" ILIKE $1
+       LIMIT $2`,
+      searchTerm,
+      limit
+    );
+    return rows.map((row) => ({
+      scope: "wiki",
+      type: "document",
+      snippet: sanitizeSnippet([row.filename, row.docpath].filter(Boolean).join(" \u2014 ")),
+      timestamp: UNKNOWN_TIMESTAMP,
+      metadata: {
+        doc_id: row.doc_id,
+        filename: row.filename,
+        docpath: row.docpath,
+        workspace_name: row.workspace_name
+      }
+    }));
+  }
+  async queryGateway(prisma, searchTerm, limit) {
+    const rows = await prisma.$queryRawUnsafe(
+      `SELECT m."id", m."text", m."from_jid", m."timestamp", c."display_name", c."platform"
+       FROM "gateway"."messages" m
+       JOIN "gateway"."threads" t ON t."id" = m."thread_id"
+       JOIN "gateway"."contacts" c ON c."id" = t."contact_id"
+       WHERE m."text" ILIKE $1
+       ORDER BY m."timestamp" DESC
+       LIMIT $2`,
+      searchTerm,
+      limit
+    );
+    return rows.map((row) => ({
+      scope: "gateway",
+      type: "message",
+      snippet: sanitizeSnippet(row.text),
+      timestamp: toIsoTimestamp(row.timestamp),
+      metadata: {
+        id: row.id,
+        from_jid: row.from_jid,
+        display_name: row.display_name,
+        platform: row.platform
+      }
+    }));
+  }
+};
+function sanitizeSnippet(value) {
+  return String(value ?? "").slice(0, 200);
+}
+function toIsoTimestamp(value) {
+  if (value instanceof Date) return value.toISOString();
+  if (typeof value === "string" || typeof value === "number") {
+    const parsed = new Date(value);
+    if (!Number.isNaN(parsed.getTime())) {
+      return parsed.toISOString();
+    }
+  }
+  return UNKNOWN_TIMESTAMP;
+}
+
+// src/gateway/webhook-server.ts
 var DEFAULT_HOST = process.env.EXE_WEBHOOK_HOST || "127.0.0.1";
 var BODY_SIZE_LIMIT = 1048576;
 var WebhookServer = class {
-  constructor(config2) {
+  constructor(config2, queryHandler = new QueryHandler()) {
     this.config = config2;
+    this.queryHandler = queryHandler;
     if (process.env.NODE_ENV === "production" && !config2.authToken) {
       throw new Error(
         "[webhook-server] authToken is required in production. Set it in ~/.exe-os/gateway.json or pass it in WebhookServerConfig."
@@ -11155,6 +11488,10 @@ var WebhookServer = class {
       this.handleHealth(res);
       return;
     }
+    if (method === "GET" && isRoute(url, "/query")) {
+      await this.handleQuery(req, res);
+      return;
+    }
     if (method === "GET" && url.startsWith("/webhook/whatsapp")) {
       this.handleWhatsAppVerification(req, res);
       return;
@@ -11173,6 +11510,31 @@ var WebhookServer = class {
       handlers: [...this.handlers.keys()]
     });
   }
+  async handleQuery(req, res) {
+    if (this.config.authToken && !this.verifyAuth(req)) {
+      sendJson(res, 401, { error: "Unauthorized" });
+      return;
+    }
+    try {
+      const url = new URL(
+        req.url ?? "/query",
+        `http://${req.headers.host ?? "localhost"}`
+      );
+      const params = this.queryHandler.parseParams(url);
+      const result = await this.queryHandler.query(params);
+      sendJson(res, 200, result);
+    } catch (err) {
+      if (err instanceof QueryValidationError) {
+        sendJson(res, 400, { error: err.message });
+        return;
+      }
+      console.error(
+        "[webhook-server] Query error:",
+        err instanceof Error ? err.message : err
+      );
+      sendJson(res, 503, { error: "Database unavailable" });
+    }
+  }
   handleWhatsAppVerification(req, res) {
     const url = new URL(req.url ?? "/", `http://${req.headers.host ?? "localhost"}`);
     const mode = url.searchParams.get("hub.mode");
@@ -11234,6 +11596,9 @@ function extractPlatform(url) {
   const match = url.match(/^\/webhook\/([a-zA-Z0-9_-]+)/);
   return match?.[1] ?? null;
 }
+function isRoute(url, path24) {
+  return url === path24 || url.startsWith(`${path24}?`);
+}
 function readBody(req) {
   return new Promise((resolve, reject) => {
     const chunks = [];
@@ -12059,8 +12424,8 @@ var BotRegistry = class {
 
 // src/bin/exe-gateway.ts
 init_employees();
-var CONFIG_DIR = process.env.EXE_GATEWAY_HOME || path22.join(os14.homedir(), ".exe-os");
-var CONFIG_PATH3 = process.env.EXE_GATEWAY_CONFIG || path22.join(CONFIG_DIR, "gateway.json");
+var CONFIG_DIR = process.env.EXE_GATEWAY_HOME || path23.join(os15.homedir(), ".exe-os");
+var CONFIG_PATH3 = process.env.EXE_GATEWAY_CONFIG || path23.join(CONFIG_DIR, "gateway.json");
 var DEFAULT_PORT = 3100;
 function loadConfig2() {
   if (!existsSync18(CONFIG_PATH3)) {