@askexenow/exe-os 0.9.102 → 0.9.104

package/dist/tui/App.js

@@ -2494,9 +2494,79 @@ __export(database_exports, {
   isInitialized: () => isInitialized,
   setExternalClient: () => setExternalClient
 });
-import { chmodSync as chmodSync2 } from "fs";
+import { chmodSync as chmodSync2, existsSync as existsSync10, statSync as statSync2, copyFileSync, unlinkSync as unlinkSync3, openSync as openSync2, closeSync as closeSync2, mkdirSync as mkdirSync4 } from "fs";
 import { createClient } from "@libsql/client";
+import { homedir } from "os";
+import { join } from "path";
+function logCatchDebug(context, err) {
+  if (_debugDb) {
+    process.stderr.write(
+      `[database] ${context}: ${err instanceof Error ? err.message : String(err)}
+`
+    );
+  }
+}
+function acquireDbLock() {
+  mkdirSync4(join(homedir(), ".exe-os"), { recursive: true });
+  try {
+    _lockFd = openSync2(DB_LOCK_PATH, "wx");
+  } catch (err) {
+    if (err && typeof err === "object" && "code" in err && err.code === "EEXIST") {
+      try {
+        const lockStat = statSync2(DB_LOCK_PATH);
+        if (Date.now() - lockStat.mtimeMs > 6e4) {
+          unlinkSync3(DB_LOCK_PATH);
+          _lockFd = openSync2(DB_LOCK_PATH, "wx");
+          return;
+        }
+      } catch (e) {
+        logCatchDebug("stale lock check", e);
+      }
+      process.stderr.write(
+        "[database] WARN: Another process holds db.lock \u2014 waiting briefly then proceeding.\n"
+      );
+      return;
+    }
+    throw err;
+  }
+}
+function releaseDbLock() {
+  if (_lockFd !== null) {
+    try {
+      closeSync2(_lockFd);
+    } catch (e) {
+      logCatchDebug("lock close", e);
+    }
+    _lockFd = null;
+  }
+  try {
+    unlinkSync3(DB_LOCK_PATH);
+  } catch (e) {
+    logCatchDebug("lock unlink", e);
+  }
+}
 async function initDatabase(config) {
+  acquireDbLock();
+  if (existsSync10(config.dbPath)) {
+    const dbStat = statSync2(config.dbPath);
+    if (dbStat.size === 0) {
+      const walPath = config.dbPath + "-wal";
+      if (existsSync10(walPath) && statSync2(walPath).size > 0) {
+        const backupPath = config.dbPath + ".zeroed-" + Date.now();
+        copyFileSync(config.dbPath, backupPath);
+        unlinkSync3(config.dbPath);
+        process.stderr.write(
+          `[database] CRITICAL: DB was 0 bytes. Moved to ${backupPath}, attempting WAL recovery.
+`
+        );
+      } else {
+        process.stderr.write(
+          `[database] CRITICAL: DB is 0 bytes and no WAL available for recovery. Data may be lost. Check backups at ${config.dbPath}.bak
+`
+        );
+      }
+    }
+  }
   if (_walCheckpointTimer) {
     clearInterval(_walCheckpointTimer);
     _walCheckpointTimer = null;
@@ -2523,10 +2593,8 @@ async function initDatabase(config) {
   _client = createClient(opts);
   _resilientClient = wrapWithRetry(_client);
   _adapterClient = _resilientClient;
-  _client.execute("PRAGMA busy_timeout = 30000").catch(() => {
-  });
-  _client.execute("PRAGMA journal_mode = WAL").catch(() => {
-  });
+  await _client.execute("PRAGMA busy_timeout = 30000");
+  await _client.execute("PRAGMA journal_mode = WAL");
   if (_walCheckpointTimer) clearInterval(_walCheckpointTimer);
   _walCheckpointTimer = setInterval(() => {
     _client?.execute("PRAGMA wal_checkpoint(PASSIVE)").catch(() => {
@@ -2541,11 +2609,16 @@ async function initDatabase(config) {
     for (const suffix of ["-wal", "-shm"]) {
       try {
         chmodSync2(config.dbPath + suffix, 384);
-      } catch {
+      } catch (chmodErr) {
+        process.stderr.write(`[database] chmod ${suffix} failed: ${chmodErr instanceof Error ? chmodErr.message : String(chmodErr)}
+`);
       }
     }
-  } catch {
+  } catch (chmodErr) {
+    process.stderr.write(`[database] chmod db failed: ${chmodErr instanceof Error ? chmodErr.message : String(chmodErr)}
+`);
   }
+  releaseDbLock();
 }
 function isInitialized() {
   return _adapterClient !== null || _client !== null;
@@ -2600,7 +2673,8 @@ async function ensureSchema() {
   await client.execute("PRAGMA wal_autocheckpoint = 1000");
   try {
     await client.execute("PRAGMA libsql_vector_search_ef = 128");
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   await client.executeMultiple(`
     CREATE TABLE IF NOT EXISTS memories (
@@ -2665,6 +2739,23 @@ async function ensureSchema() {
       INSERT INTO memories_fts(memories_fts, rowid, raw_text) VALUES('delete', old.rowid, old.raw_text);
     END;
   `);
+  try {
+    await client.execute("SELECT COUNT(*) FROM memories_fts LIMIT 1");
+  } catch (ftsErr) {
+    process.stderr.write(
+      `[database] WARN: memories_fts corrupted (${ftsErr instanceof Error ? ftsErr.message : String(ftsErr)}) \u2014 rebuilding FTS index.
+`
+    );
+    try {
+      await client.execute("INSERT INTO memories_fts(memories_fts) VALUES('rebuild')");
+      process.stderr.write("[database] FTS index rebuilt successfully.\n");
+    } catch (rebuildErr) {
+      process.stderr.write(
+        `[database] ERROR: FTS rebuild failed: ${rebuildErr instanceof Error ? rebuildErr.message : String(rebuildErr)}
+`
+      );
+    }
+  }
   await client.executeMultiple(`
     CREATE TABLE IF NOT EXISTS sync_meta (
       key   TEXT PRIMARY KEY,
@@ -2723,35 +2814,40 @@ async function ensureSchema() {
         });
       }
     }
-  } catch {
+  } catch (seedErr) {
+    logCatchDebug("behavior seed", seedErr);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE behaviors ADD COLUMN priority TEXT DEFAULT 'p1'`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE behaviors ADD COLUMN vector F32_BLOB(${EMBEDDING_DIM})`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE tasks ADD COLUMN blocked_by TEXT`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE tasks ADD COLUMN parent_task_id TEXT`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
@@ -2760,98 +2856,112 @@ async function ensureSchema() {
               WHERE parent_task_id IS NOT NULL`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `UPDATE tasks SET status = 'done' WHERE status = 'completed'`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE tasks ADD COLUMN reviewer TEXT`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE tasks ADD COLUMN context TEXT`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE tasks ADD COLUMN result TEXT`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE tasks ADD COLUMN assigned_tmux TEXT`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE tasks ADD COLUMN checkpoint TEXT`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE tasks ADD COLUMN checkpoint_count INTEGER NOT NULL DEFAULT 0`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE tasks ADD COLUMN complexity TEXT NOT NULL DEFAULT 'standard'`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE tasks ADD COLUMN session_scope TEXT`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE memories ADD COLUMN task_id TEXT`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE memories ADD COLUMN consolidated INTEGER NOT NULL DEFAULT 0`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE memories ADD COLUMN author_device_id TEXT`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE memories ADD COLUMN scope TEXT NOT NULL DEFAULT 'business'`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   await client.executeMultiple(`
     CREATE TABLE IF NOT EXISTS consolidations (
@@ -2956,14 +3066,16 @@ async function ensureSchema() {
       sql: `ALTER TABLE notifications ADD COLUMN session_scope TEXT`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE messages ADD COLUMN session_scope TEXT`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   await client.executeMultiple(`
     CREATE INDEX IF NOT EXISTS idx_notifications_agent_scope_read
@@ -2989,7 +3101,8 @@ async function ensureSchema() {
       sql: `UPDATE tasks SET project_name = 'exe-os' WHERE project_name = 'worker'`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   await client.executeMultiple(`
     CREATE TABLE IF NOT EXISTS trajectories (
@@ -3013,7 +3126,8 @@ async function ensureSchema() {
   `);
   try {
     await client.execute("ALTER TABLE trajectories ADD COLUMN skill_id TEXT");
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   await client.executeMultiple(`
     CREATE TABLE IF NOT EXISTS consolidations (
@@ -3050,63 +3164,72 @@ async function ensureSchema() {
       sql: `ALTER TABLE memories ADD COLUMN consolidated INTEGER NOT NULL DEFAULT 0`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE memories ADD COLUMN importance INTEGER DEFAULT 5`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE memories ADD COLUMN status TEXT DEFAULT 'active'`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE memories ADD COLUMN deleted_at TEXT`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE memories ADD COLUMN confidence REAL DEFAULT 0.7`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE memories ADD COLUMN last_accessed TEXT`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `UPDATE memories SET last_accessed = timestamp WHERE last_accessed IS NULL`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE memories ADD COLUMN wiki_synced INTEGER DEFAULT 0`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE memories ADD COLUMN graph_extracted INTEGER DEFAULT 0`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   for (const col of [
     "ALTER TABLE memories ADD COLUMN content_hash TEXT",
@@ -3114,14 +3237,16 @@ async function ensureSchema() {
   ]) {
     try {
       await client.execute(col);
-    } catch {
+    } catch (e) {
+      logCatchDebug("migration", e);
     }
   }
   try {
     await client.execute(
       `CREATE INDEX IF NOT EXISTS idx_memories_content_hash ON memories(content_hash, agent_id)`
     );
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute(
@@ -3129,7 +3254,8 @@ async function ensureSchema() {
          ON memories(content_hash, agent_id, project_name, memory_type)
          WHERE content_hash IS NOT NULL`
     );
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   await client.executeMultiple(`
     CREATE TABLE IF NOT EXISTS entities (
@@ -3205,7 +3331,8 @@ async function ensureSchema() {
   `);
   try {
     await client.execute("INSERT INTO entities_fts(entities_fts) VALUES('rebuild')");
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   await client.executeMultiple(`
     CREATE TABLE IF NOT EXISTS entity_aliases (
@@ -3220,14 +3347,16 @@ async function ensureSchema() {
   ]) {
     try {
       await client.execute(col);
-    } catch {
+    } catch (e) {
+      logCatchDebug("migration", e);
     }
   }
   try {
     await client.execute(
       `CREATE INDEX IF NOT EXISTS idx_memories_status ON memories(status)`
     );
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   await client.executeMultiple(`
     CREATE TABLE IF NOT EXISTS identity (
@@ -3326,7 +3455,8 @@ async function ensureSchema() {
         sql: `ALTER TABLE memories ADD COLUMN ${column}`,
         args: []
       });
-    } catch {
+    } catch (e) {
+      logCatchDebug("migration", e);
     }
   }
   for (const col of [
@@ -3335,7 +3465,8 @@ async function ensureSchema() {
   ]) {
     try {
       await client.execute(col);
-    } catch {
+    } catch (e) {
+      logCatchDebug("migration", e);
     }
   }
   await client.executeMultiple(`
@@ -3520,56 +3651,64 @@ async function ensureSchema() {
         args: []
       });
     }
-  } catch {
+  } catch (e) {
+    logCatchDebug("session_agent_map backfill", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE session_agent_map ADD COLUMN cache_cold_count INTEGER NOT NULL DEFAULT 0`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE tasks ADD COLUMN budget_tokens INTEGER`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE tasks ADD COLUMN budget_fallback_model TEXT`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE tasks ADD COLUMN tokens_used INTEGER DEFAULT 0`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE tasks ADD COLUMN tokens_warned_at INTEGER`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE tasks ADD COLUMN spawn_runtime TEXT`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE tasks ADD COLUMN spawn_model TEXT`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   await client.executeMultiple(`
     CREATE VIRTUAL TABLE IF NOT EXISTS conversations_fts USING fts5(
@@ -3768,13 +3907,15 @@ async function ensureSchema() {
       sql: `ALTER TABLE memories ADD COLUMN tier INTEGER DEFAULT 3`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute(
       `CREATE INDEX IF NOT EXISTS idx_memories_tier ON memories(tier)`
     );
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
@@ -3785,20 +3926,23 @@ async function ensureSchema() {
       sql: `UPDATE memories SET tier = 2 WHERE tool_name IN ('store_memory', 'manual') AND importance >= 5 AND tier = 3`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE memories ADD COLUMN supersedes_id TEXT`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute(
       `CREATE INDEX IF NOT EXISTS idx_memories_supersedes ON memories(supersedes_id) WHERE supersedes_id IS NOT NULL`
     );
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   for (const col of [
     "ALTER TABLE tasks ADD COLUMN checkpoint TEXT",
@@ -3806,7 +3950,8 @@ async function ensureSchema() {
   ]) {
     try {
       await client.execute(col);
-    } catch {
+    } catch (e) {
+      logCatchDebug("migration", e);
     }
   }
   try {
@@ -3814,13 +3959,15 @@ async function ensureSchema() {
       sql: `ALTER TABLE memories ADD COLUMN draft INTEGER DEFAULT 0`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute(
       `CREATE INDEX IF NOT EXISTS idx_memories_draft ON memories(draft) WHERE draft = 1`
     );
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   for (const col of [
     "ALTER TABLE memories ADD COLUMN valid_from TEXT",
@@ -3828,7 +3975,8 @@ async function ensureSchema() {
   ]) {
     try {
       await client.execute(col);
-    } catch {
+    } catch (e) {
+      logCatchDebug("migration", e);
     }
   }
   try {
@@ -3836,27 +3984,31 @@ async function ensureSchema() {
       sql: `UPDATE memories SET valid_from = timestamp WHERE valid_from IS NULL`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE memories ADD COLUMN memory_type TEXT DEFAULT 'raw'`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute(
       `CREATE INDEX IF NOT EXISTS idx_memories_type ON memories(memory_type)`
     );
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `ALTER TABLE memories ADD COLUMN trajectory TEXT`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   for (const col of [
     "ALTER TABLE memories ADD COLUMN intent TEXT",
@@ -3877,7 +4029,8 @@ async function ensureSchema() {
   ]) {
     try {
       await client.execute(col);
-    } catch {
+    } catch (e) {
+      logCatchDebug("migration", e);
     }
   }
   try {
@@ -3885,14 +4038,16 @@ async function ensureSchema() {
       sql: `ALTER TABLE memories ADD COLUMN procedure_for TEXT`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
   try {
     await client.execute({
       sql: `UPDATE tasks SET status = 'closed' WHERE status = 'done' AND result IS NOT NULL`,
       args: []
     });
-  } catch {
+  } catch (e) {
+    logCatchDebug("migration", e);
   }
 }
 async function disposeDatabase() {
@@ -3903,7 +4058,8 @@ async function disposeDatabase() {
   if (_client) {
     try {
       await _client.execute("PRAGMA wal_checkpoint(PASSIVE)");
-    } catch {
+    } catch (e) {
+      logCatchDebug("WAL checkpoint", e);
     }
   }
   if (_daemonClient) {
@@ -3919,8 +4075,9 @@ async function disposeDatabase() {
     _client = null;
     _resilientClient = null;
   }
+  releaseDbLock();
 }
-var _client, _resilientClient, _walCheckpointTimer, _daemonClient, _adapterClient, initTurso, SOFT_DELETE_RETENTION_DAYS, disposeTurso;
+var _debugDb, _client, _resilientClient, _walCheckpointTimer, _daemonClient, _adapterClient, _lockFd, DB_LOCK_PATH, initTurso, SOFT_DELETE_RETENTION_DAYS, disposeTurso;
 var init_database = __esm({
   "src/lib/database.ts"() {
     "use strict";
@@ -3928,11 +4085,14 @@ var init_database = __esm({
     init_employees();
     init_database_adapter();
     init_memory();
+    _debugDb = process.env.EXE_DEBUG === "1";
     _client = null;
     _resilientClient = null;
     _walCheckpointTimer = null;
     _daemonClient = null;
     _adapterClient = null;
+    _lockFd = null;
+    DB_LOCK_PATH = join(homedir(), ".exe-os", "db.lock");
     initTurso = initDatabase;
     SOFT_DELETE_RETENTION_DAYS = 7;
     disposeTurso = disposeDatabase;
@@ -3957,7 +4117,7 @@ __export(license_exports, {
   stopLicenseRevalidation: () => stopLicenseRevalidation,
   validateLicense: () => validateLicense
 });
-import { readFileSync as readFileSync9, writeFileSync as writeFileSync6, existsSync as existsSync10, mkdirSync as mkdirSync4 } from "fs";
+import { readFileSync as readFileSync9, writeFileSync as writeFileSync6, existsSync as existsSync11, mkdirSync as mkdirSync5 } from "fs";
 import { randomUUID as randomUUID2 } from "crypto";
 import { createRequire as createRequire2 } from "module";
 import { pathToFileURL as pathToFileURL2 } from "url";
@@ -3975,34 +4135,34 @@ async function fetchRetry(url, init) {
 function loadDeviceId() {
   const deviceJsonPath = path9.join(EXE_AI_DIR, "device.json");
   try {
-    if (existsSync10(deviceJsonPath)) {
+    if (existsSync11(deviceJsonPath)) {
       const data = JSON.parse(readFileSync9(deviceJsonPath, "utf8"));
       if (data.deviceId) return data.deviceId;
     }
   } catch {
   }
   try {
-    if (existsSync10(DEVICE_ID_PATH)) {
+    if (existsSync11(DEVICE_ID_PATH)) {
       const id2 = readFileSync9(DEVICE_ID_PATH, "utf8").trim();
       if (id2) return id2;
     }
   } catch {
   }
   const id = randomUUID2();
-  mkdirSync4(EXE_AI_DIR, { recursive: true });
+  mkdirSync5(EXE_AI_DIR, { recursive: true });
   writeFileSync6(DEVICE_ID_PATH, id, "utf8");
   return id;
 }
 function loadLicense() {
   try {
-    if (!existsSync10(LICENSE_PATH)) return null;
+    if (!existsSync11(LICENSE_PATH)) return null;
     return readFileSync9(LICENSE_PATH, "utf8").trim();
   } catch {
     return null;
   }
 }
 function saveLicense(apiKey) {
-  mkdirSync4(EXE_AI_DIR, { recursive: true });
+  mkdirSync5(EXE_AI_DIR, { recursive: true });
   writeFileSync6(LICENSE_PATH, apiKey.trim(), { encoding: "utf8", mode: 384 });
 }
 async function verifyLicenseJwt(token) {
@@ -4029,7 +4189,7 @@ async function verifyLicenseJwt(token) {
 }
 async function getCachedLicense() {
   try {
-    if (!existsSync10(CACHE_PATH)) return null;
+    if (!existsSync11(CACHE_PATH)) return null;
     const raw = JSON.parse(readFileSync9(CACHE_PATH, "utf8"));
     if (!raw.token || typeof raw.token !== "string") return null;
     return await verifyLicenseJwt(raw.token);
@@ -4039,7 +4199,7 @@ async function getCachedLicense() {
 }
 function readCachedLicenseToken() {
   try {
-    if (!existsSync10(CACHE_PATH)) return null;
+    if (!existsSync11(CACHE_PATH)) return null;
     const raw = JSON.parse(readFileSync9(CACHE_PATH, "utf8"));
     return typeof raw.token === "string" ? raw.token : null;
   } catch {
@@ -4083,7 +4243,7 @@ function loadPrismaForLicense() {
   const dbUrl = process.env.DATABASE_URL;
   if (!dbUrl) {
     const exeDbRoot = process.env.EXE_DB_ROOT ?? path9.join(os7.homedir(), "exe-db");
-    if (!existsSync10(path9.join(exeDbRoot, "package.json"))) {
+    if (!existsSync11(path9.join(exeDbRoot, "package.json"))) {
       _prismaFailed = true;
       return null;
     }
@@ -4187,7 +4347,7 @@ async function validateLicense(apiKey, deviceId) {
   const cached = await getCachedLicense();
   if (cached) return cached;
   try {
-    if (existsSync10(CACHE_PATH)) {
+    if (existsSync11(CACHE_PATH)) {
       const raw = JSON.parse(readFileSync9(CACHE_PATH, "utf8"));
       if (raw.pgLicense && raw.ts && Date.now() - raw.ts < 7 * 24 * 60 * 60 * 1e3) {
         return raw.pgLicense;
@@ -4201,8 +4361,8 @@ async function validateLicense(apiKey, deviceId) {
 }
 function getCacheAgeMs() {
   try {
-    const { statSync: statSync4 } = __require("fs");
-    const s = statSync4(CACHE_PATH);
+    const { statSync: statSync5 } = __require("fs");
+    const s = statSync5(CACHE_PATH);
     return Date.now() - s.mtimeMs;
   } catch {
     return Infinity;
@@ -4213,7 +4373,7 @@ async function checkLicense() {
   if (!key) {
     try {
       const configPath = path9.join(EXE_AI_DIR, "config.json");
-      if (existsSync10(configPath)) {
+      if (existsSync11(configPath)) {
         const raw = JSON.parse(readFileSync9(configPath, "utf8"));
         const cloud = raw.cloud;
         if (cloud?.apiKey) {
@@ -4407,11 +4567,11 @@ MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEeHztAMOpR/ZMh+rWuOASjEZ54CGY
 });
 
 // src/lib/plan-limits.ts
-import { readFileSync as readFileSync10, existsSync as existsSync11 } from "fs";
+import { readFileSync as readFileSync10, existsSync as existsSync12 } from "fs";
 import path10 from "path";
 function getLicenseSync() {
   try {
-    if (!existsSync11(CACHE_PATH2)) return freeLicense();
+    if (!existsSync12(CACHE_PATH2)) return freeLicense();
     const raw = JSON.parse(readFileSync10(CACHE_PATH2, "utf8"));
     if (!raw.token || typeof raw.token !== "string") return freeLicense();
     const parts = raw.token.split(".");
@@ -4450,7 +4610,7 @@ function assertEmployeeLimitSync(rosterPath) {
   const filePath = rosterPath ?? EMPLOYEES_PATH;
   let count = 0;
   try {
-    if (existsSync11(filePath)) {
+    if (existsSync12(filePath)) {
       const raw = readFileSync10(filePath, "utf8");
       const employees = JSON.parse(raw);
       count = Array.isArray(employees) ? employees.length : 0;
@@ -4488,9 +4648,9 @@ var init_plan_limits = __esm({
 import os8 from "os";
 import path11 from "path";
 import {
-  existsSync as existsSync12,
+  existsSync as existsSync13,
   lstatSync,
-  mkdirSync as mkdirSync5,
+  mkdirSync as mkdirSync6,
   readlinkSync as readlinkSync2,
   symlinkSync as symlinkSync2
 } from "fs";
@@ -4506,8 +4666,8 @@ function claudeAgentLinkPath(homeDir, agentId) {
 function ensureAgentSymlink(agentId, homeDir = os8.homedir()) {
   const target = identitySourcePath(homeDir, agentId);
   const link = claudeAgentLinkPath(homeDir, agentId);
-  mkdirSync5(claudeAgentsDir(homeDir), { recursive: true });
-  if (existsSync12(link)) {
+  mkdirSync6(claudeAgentsDir(homeDir), { recursive: true });
+  if (existsSync13(link)) {
     let stat;
     try {
       stat = lstatSync(link);
@@ -4555,8 +4715,8 @@ import os9 from "os";
 import {
   readFileSync as readFileSync11,
   readdirSync,
-  unlinkSync as unlinkSync3,
-  existsSync as existsSync13,
+  unlinkSync as unlinkSync4,
+  existsSync as existsSync14,
   rmdirSync
 } from "fs";
 async function writeNotification(notification) {
@@ -4820,7 +4980,7 @@ import path14 from "path";
 import os10 from "os";
 import { execSync as execSync7 } from "child_process";
 import { mkdir as mkdir3, writeFile as writeFile3, appendFile } from "fs/promises";
-import { existsSync as existsSync14, readFileSync as readFileSync12 } from "fs";
+import { existsSync as existsSync15, readFileSync as readFileSync12 } from "fs";
 async function writeCheckpoint(input) {
   const client = getClient();
   const row = await resolveTask(client, input.taskId);
@@ -5061,7 +5221,7 @@ ${scopeMismatchWarning}` : scopeMismatchWarning;
       const EXE_OS_DIR = path14.join(os10.homedir(), ".exe-os");
       const mdPath = path14.join(EXE_OS_DIR, taskFile);
       const mdDir = path14.dirname(mdPath);
-      if (!existsSync14(mdDir)) await mkdir3(mdDir, { recursive: true });
+      if (!existsSync15(mdDir)) await mkdir3(mdDir, { recursive: true });
       const reviewer = input.reviewer ?? input.assignedBy;
       const mdContent = `# ${input.title}
 
@@ -5367,7 +5527,7 @@ async function deleteTaskCore(taskId, _baseDir) {
 async function ensureArchitectureDoc(baseDir, projectName) {
   const archPath = path14.join(baseDir, "exe", "ARCHITECTURE.md");
   try {
-    if (existsSync14(archPath)) return;
+    if (existsSync15(archPath)) return;
     const template = [
       `# ${projectName} \u2014 System Architecture`,
       "",
@@ -5402,7 +5562,7 @@ async function ensureArchitectureDoc(baseDir, projectName) {
 async function ensureGitignoreExe(baseDir) {
   const gitignorePath = path14.join(baseDir, ".gitignore");
   try {
-    if (existsSync14(gitignorePath)) {
+    if (existsSync15(gitignorePath)) {
       const content = readFileSync12(gitignorePath, "utf-8");
       if (/^\/?exe\/?$/m.test(content)) return;
       await appendFile(gitignorePath, "\n# Employee task assignments (private)\n/exe/\n");
@@ -5447,7 +5607,7 @@ __export(tasks_review_exports, {
   listPendingReviews: () => listPendingReviews
 });
 import path15 from "path";
-import { existsSync as existsSync15, readdirSync as readdirSync2, unlinkSync as unlinkSync4 } from "fs";
+import { existsSync as existsSync16, readdirSync as readdirSync2, unlinkSync as unlinkSync5 } from "fs";
 function formatAge(isoTimestamp) {
   if (!isoTimestamp) return "";
   const ms = Date.now() - new Date(isoTimestamp).getTime();
@@ -5717,10 +5877,10 @@ async function cleanupReviewFile(row, taskFile, _baseDir) {
   }
   try {
     const cacheDir = path15.join(EXE_AI_DIR, "session-cache");
-    if (existsSync15(cacheDir)) {
+    if (existsSync16(cacheDir)) {
       for (const f of readdirSync2(cacheDir)) {
         if (f.startsWith("review-notified-")) {
-          unlinkSync4(path15.join(cacheDir, f));
+          unlinkSync5(path15.join(cacheDir, f));
         }
       }
     }
@@ -5943,10 +6103,10 @@ async function disposeEmbedder() {
 async function embedDirect(text) {
   const llamaCpp = await import("node-llama-cpp");
   const { MODELS_DIR: MODELS_DIR2 } = await Promise.resolve().then(() => (init_config(), config_exports));
-  const { existsSync: existsSync19 } = await import("fs");
+  const { existsSync: existsSync20 } = await import("fs");
   const path29 = await import("path");
   const modelPath = path29.join(MODELS_DIR2, "jina-embeddings-v5-small-q4_k_m.gguf");
-  if (!existsSync19(modelPath)) {
+  if (!existsSync20(modelPath)) {
     throw new Error(`Embedding model not found at ${modelPath}. Run '/exe-setup' to download it.`);
   }
   const llama = await llamaCpp.getLlama();
@@ -6313,7 +6473,7 @@ __export(tasks_exports, {
   writeCheckpoint: () => writeCheckpoint
 });
 import path17 from "path";
-import { writeFileSync as writeFileSync7, mkdirSync as mkdirSync6, unlinkSync as unlinkSync5 } from "fs";
+import { writeFileSync as writeFileSync7, mkdirSync as mkdirSync7, unlinkSync as unlinkSync6 } from "fs";
 async function createTask(input) {
   const result = await createTaskCore(input);
   if (!input.skipDispatch && result.status !== "blocked" && !process.env.VITEST) {
@@ -6335,11 +6495,11 @@ async function updateTask(input) {
     const cacheDir = path17.join(EXE_AI_DIR, "session-cache");
     const cachePath = path17.join(cacheDir, `current-task-${agent}.json`);
     if (input.status === "in_progress") {
-      mkdirSync6(cacheDir, { recursive: true });
+      mkdirSync7(cacheDir, { recursive: true });
       writeFileSync7(cachePath, JSON.stringify({ taskId, title: String(row.title) }));
     } else if (input.status === "done" || input.status === "blocked" || input.status === "cancelled" || input.status === "closed") {
       try {
-        unlinkSync5(cachePath);
+        unlinkSync6(cachePath);
       } catch {
       }
     }
@@ -6807,11 +6967,11 @@ __export(tmux_routing_exports, {
   verifyPaneAtCapacity: () => verifyPaneAtCapacity
 });
 import { execFileSync as execFileSync3, execSync as execSync8 } from "child_process";
-import { readFileSync as readFileSync13, writeFileSync as writeFileSync8, mkdirSync as mkdirSync7, existsSync as existsSync16, appendFileSync, readdirSync as readdirSync3 } from "fs";
+import { readFileSync as readFileSync13, writeFileSync as writeFileSync8, mkdirSync as mkdirSync8, existsSync as existsSync17, appendFileSync, readdirSync as readdirSync3 } from "fs";
 import path18 from "path";
 import os11 from "os";
 import { fileURLToPath as fileURLToPath2 } from "url";
-import { unlinkSync as unlinkSync6 } from "fs";
+import { unlinkSync as unlinkSync7 } from "fs";
 function spawnLockPath(sessionName) {
   return path18.join(SPAWN_LOCK_DIR, `${sessionName}.lock`);
 }
@@ -6824,11 +6984,11 @@ function isProcessAlive(pid) {
   }
 }
 function acquireSpawnLock2(sessionName) {
-  if (!existsSync16(SPAWN_LOCK_DIR)) {
-    mkdirSync7(SPAWN_LOCK_DIR, { recursive: true });
+  if (!existsSync17(SPAWN_LOCK_DIR)) {
+    mkdirSync8(SPAWN_LOCK_DIR, { recursive: true });
   }
   const lockFile = spawnLockPath(sessionName);
-  if (existsSync16(lockFile)) {
+  if (existsSync17(lockFile)) {
     try {
       const lock = JSON.parse(readFileSync13(lockFile, "utf8"));
       const age = Date.now() - lock.timestamp;
@@ -6843,7 +7003,7 @@ function acquireSpawnLock2(sessionName) {
 }
 function releaseSpawnLock2(sessionName) {
   try {
-    unlinkSync6(spawnLockPath(sessionName));
+    unlinkSync7(spawnLockPath(sessionName));
   } catch {
   }
 }
@@ -6856,7 +7016,7 @@ function resolveBehaviorsExporterScript() {
       "bin",
       "exe-export-behaviors.js"
     );
-    return existsSync16(scriptPath) ? scriptPath : null;
+    return existsSync17(scriptPath) ? scriptPath : null;
   } catch {
     return null;
   }
@@ -6922,8 +7082,8 @@ function extractRootExe(name) {
   return parts.length > 0 ? parts[parts.length - 1] : null;
 }
 function registerParentExe(sessionKey, parentExe, dispatchedBy) {
-  if (!existsSync16(SESSION_CACHE)) {
-    mkdirSync7(SESSION_CACHE, { recursive: true });
+  if (!existsSync17(SESSION_CACHE)) {
+    mkdirSync8(SESSION_CACHE, { recursive: true });
   }
   const rootExe = extractRootExe(parentExe) ?? parentExe;
   const filePath = path18.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`);
@@ -6953,11 +7113,13 @@ function getDispatchedBy(sessionKey) {
   }
 }
 function resolveExeSession() {
-  if (process.env.EXE_SESSION_NAME) {
-    return extractRootExe(process.env.EXE_SESSION_NAME) ?? process.env.EXE_SESSION_NAME;
-  }
   const mySession = getMySession();
-  if (!mySession) return null;
+  if (!mySession) {
+    if (process.env.EXE_SESSION_NAME) {
+      return extractRootExe(process.env.EXE_SESSION_NAME) ?? process.env.EXE_SESSION_NAME;
+    }
+    return null;
+  }
   const fromSessionName = extractRootExe(mySession);
   let candidate = null;
   try {
@@ -7052,7 +7214,7 @@ async function verifyPaneAtCapacity(sessionName) {
 }
 function readDebounceState() {
   try {
-    if (!existsSync16(DEBOUNCE_FILE)) return {};
+    if (!existsSync17(DEBOUNCE_FILE)) return {};
     const raw = JSON.parse(readFileSync13(DEBOUNCE_FILE, "utf8"));
     const state = {};
     for (const [key, val] of Object.entries(raw)) {
@@ -7069,7 +7231,7 @@ function readDebounceState() {
 }
 function writeDebounceState(state) {
   try {
-    if (!existsSync16(SESSION_CACHE)) mkdirSync7(SESSION_CACHE, { recursive: true });
+    if (!existsSync17(SESSION_CACHE)) mkdirSync8(SESSION_CACHE, { recursive: true });
     writeFileSync8(DEBOUNCE_FILE, JSON.stringify(state));
   } catch {
   }
@@ -7170,7 +7332,7 @@ function sendIntercom(targetSession) {
         const rawAgent = targetSession.split("-")[0] ?? targetSession;
         const agent = baseAgentName(rawAgent);
         const markerPath = path18.join(SESSION_CACHE, `current-task-${agent}.json`);
-        if (existsSync16(markerPath)) {
+        if (existsSync17(markerPath)) {
           logIntercom(`SKIP \u2192 ${targetSession} (has in_progress task marker + not idle \u2014 will auto-chain)`);
           return "debounced";
         }
@@ -7181,7 +7343,7 @@ function sendIntercom(targetSession) {
       const rawAgent = targetSession.split("-")[0] ?? targetSession;
       const agent = baseAgentName(rawAgent);
       const taskDir = path18.join(process.cwd(), "exe", agent);
-      if (existsSync16(taskDir)) {
+      if (existsSync17(taskDir)) {
         const files = readdirSync3(taskDir).filter(
           (f) => f.endsWith(".md") && f !== "DONE.txt"
         );
@@ -7342,15 +7504,15 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   const instanceLabel = opts?.instance != null && opts.instance > 0 ? `${employeeName}${opts.instance}` : employeeName;
   const logDir = path18.join(os11.homedir(), ".exe-os", "session-logs");
   const logFile = path18.join(logDir, `${instanceLabel}-${Date.now()}.log`);
-  if (!existsSync16(logDir)) {
-    mkdirSync7(logDir, { recursive: true });
+  if (!existsSync17(logDir)) {
+    mkdirSync8(logDir, { recursive: true });
   }
   transport.kill(sessionName);
   let cleanupSuffix = "";
   try {
     const thisFile = fileURLToPath2(import.meta.url);
     const cleanupScript = path18.join(path18.dirname(thisFile), "..", "bin", "exe-session-cleanup.js");
-    if (existsSync16(cleanupScript)) {
+    if (existsSync17(cleanupScript)) {
       cleanupSuffix = `; ${process.execPath} "${cleanupScript}" "${employeeName}" "${exeSession}"`;
     }
   } catch {
@@ -7405,7 +7567,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
     if (changed) {
       perms.allow = allow;
       settings.permissions = perms;
-      mkdirSync7(projSettingsDir, { recursive: true });
+      mkdirSync8(projSettingsDir, { recursive: true });
       writeFileSync8(settingsPath, JSON.stringify(settings, null, 2) + "\n");
     }
   } catch {
@@ -7443,7 +7605,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
 `
         );
       }
-    } else if (existsSync16(identityPath)) {
+    } else if (existsSync17(identityPath)) {
       identityFlag = ` --append-system-prompt-file ${identityPath}`;
       legacyFallbackWarned = true;
     }
@@ -7465,7 +7627,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   let sessionContextFlag = "";
   try {
     const ctxDir = path18.join(os11.homedir(), ".exe-os", "session-cache");
-    mkdirSync7(ctxDir, { recursive: true });
+    mkdirSync8(ctxDir, { recursive: true });
     const ctxFile = path18.join(ctxDir, `session-context-${sessionName}.md`);
     const ctxContent = [
       `## Session Context`,
@@ -9128,6 +9290,18 @@ var init_platform_procedures = __esm({
         priority: "p0",
         content: "create_task is dispatch + delivery. Task lifecycle: open \u2192 in_progress (you start) \u2192 done (update_task when finished) \u2192 needs_review (reviewer nudged) \u2192 closed (COO only via close_task). DB is the reliable delivery \u2014 intercom is just a speedup nudge. If you finish a task, self-chain: check for next task immediately (step 7). Never wait for a nudge. Never say 'standing by.'"
       },
+      {
+        title: "Review chain \u2014 managers must actively pull completed work, never wait for nudges",
+        domain: "workflow",
+        priority: "p0",
+        content: "When you dispatch work, you OWN the review. Check list_tasks(status='needs_review') on EVERY prompt \u2014 don't wait for intercom nudges (they're unreliable). When a task shows needs_review: (1) read the deliverable (git diff in worktree, exe/output/ files, or task result summary), (2) verify it works (tsc, build, run), (3) close_task if good or create a fix task if not. Reviews sitting >30 minutes is a pipeline stall. The whole chain: worker calls update_task(done) \u2192 system flags needs_review \u2192 manager pulls and verifies \u2192 close_task \u2192 COO reviews manager's work \u2192 merge to main. Every level actively pulls \u2014 nobody waits."
+      },
+      {
+        title: "Bug fix lifecycle \u2014 triage upstream after every verified fix so customers see the status",
+        domain: "workflow",
+        priority: "p0",
+        content: "When a bug from support(action='list_bugs') is fixed and verified, the reviewer MUST triage it upstream: support(action='triage_bug', id='<bug-id>', notes='<what was fixed>', fixed_version='<version>', linked_commit='<hash>'). This closes the bug in the customer's view \u2014 their COO checks list_my_bugs and sees status change from open \u2192 closed with the fix version. Without triage, customers see 'open' forever even after the fix ships. Same for feature requests: support(action='triage_feature', ..., shipped_version='<version>'). Triage is part of the review gate \u2014 a fix is not done until the upstream report is closed."
+      },
       {
         title: "Intercom is a speedup, not delivery \u2014 DB is the source of truth",
         domain: "architecture",
@@ -10952,7 +11126,7 @@ __export(keychain_exports, {
   setMasterKey: () => setMasterKey
 });
 import { readFile as readFile4, writeFile as writeFile5, unlink, mkdir as mkdir4, chmod as chmod2 } from "fs/promises";
-import { existsSync as existsSync17, statSync as statSync2 } from "fs";
+import { existsSync as existsSync18, statSync as statSync3 } from "fs";
 import { execSync as execSync10 } from "child_process";
 import path27 from "path";
 import os13 from "os";
@@ -10987,7 +11161,7 @@ function isRootOnlyTrustedServerKeyFile(keyPath) {
   if (process.platform !== "linux") return false;
   try {
     const uid = typeof os13.userInfo().uid === "number" ? os13.userInfo().uid : -1;
-    const st = statSync2(keyPath);
+    const st = statSync3(keyPath);
     if (!st.isFile() || (st.mode & 63) !== 0) return false;
     if (uid === 0) return true;
     const exeOsDir = process.env.EXE_OS_DIR;
@@ -11188,7 +11362,7 @@ async function getMasterKey() {
     }
   }
   const keyPath = getKeyPath();
-  if (!existsSync17(keyPath)) {
+  if (!existsSync18(keyPath)) {
     process.stderr.write(
       `[keychain] Key not found at ${keyPath} (HOME=${os13.homedir()}, EXE_OS_DIR=${process.env.EXE_OS_DIR ?? "unset"})
 `
@@ -11296,7 +11470,7 @@ async function getKeyStorageInfo() {
     }
   }
   const keyPath = getKeyPath();
-  if (!existsSync17(keyPath)) {
+  if (!existsSync18(keyPath)) {
     return {
       kind: "missing",
       secure: false,
@@ -11392,7 +11566,7 @@ async function deleteMasterKey() {
     }
   }
   const keyPath = getKeyPath();
-  if (existsSync17(keyPath)) {
+  if (existsSync18(keyPath)) {
     await unlink(keyPath);
   }
 }
@@ -12038,18 +12212,54 @@ __export(shard_manager_exports, {
   shardExists: () => shardExists
 });
 import path28 from "path";
-import { existsSync as existsSync18, mkdirSync as mkdirSync8, readdirSync as readdirSync4, renameSync as renameSync4, statSync as statSync3 } from "fs";
+import { existsSync as existsSync19, mkdirSync as mkdirSync9, readdirSync as readdirSync4, renameSync as renameSync4, statSync as statSync4 } from "fs";
 import { createClient as createClient2 } from "@libsql/client";
 function initShardManager(encryptionKey) {
   _encryptionKey = encryptionKey;
-  if (!existsSync18(SHARDS_DIR)) {
-    mkdirSync8(SHARDS_DIR, { recursive: true });
+  _keyValidated = false;
+  _keyValidationPromise = null;
+  if (!existsSync19(SHARDS_DIR)) {
+    mkdirSync9(SHARDS_DIR, { recursive: true });
+  }
+  const existingShards = readdirSync4(SHARDS_DIR).filter((f) => f.endsWith(".db"));
+  if (existingShards.length === 0) {
+    _keyValidated = true;
   }
   _shardingEnabled = true;
   if (_evictionTimer) clearInterval(_evictionTimer);
   _evictionTimer = setInterval(evictIdleShards, EVICTION_INTERVAL_MS);
   _evictionTimer.unref();
 }
+async function validateEncryptionKey() {
+  if (_keyValidated) return true;
+  if (!_encryptionKey) return false;
+  const existingShards = readdirSync4(SHARDS_DIR).filter((f) => f.endsWith(".db"));
+  if (existingShards.length === 0) {
+    _keyValidated = true;
+    return true;
+  }
+  for (const shardFile of existingShards.slice(0, 3)) {
+    const dbPath = path28.join(SHARDS_DIR, shardFile);
+    const testClient = createClient2({ url: `file:${dbPath}`, encryptionKey: _encryptionKey });
+    try {
+      await testClient.execute("SELECT COUNT(*) FROM sqlite_schema");
+      testClient.close();
+      _keyValidated = true;
+      return true;
+    } catch {
+      try {
+        testClient.close();
+      } catch {
+      }
+    }
+  }
+  process.stderr.write(
+    `[shard-manager] WARNING: encryption key cannot read any existing shards (${existingShards.length} found). New shard creation disabled to prevent stranded files. Run /exe-doctor to audit.
+`
+  );
+  _shardingEnabled = false;
+  return false;
+}
 function isShardingEnabled() {
   return _shardingEnabled;
 }
@@ -12083,13 +12293,13 @@ function getShardClient(projectName) {
 }
 function shardExists(projectName) {
   const safeName = safeShardName(projectName);
-  return existsSync18(path28.join(SHARDS_DIR, `${safeName}.db`));
+  return existsSync19(path28.join(SHARDS_DIR, `${safeName}.db`));
 }
 function safeShardName(projectName) {
   return projectName.replace(/[^a-zA-Z0-9_-]/g, "_");
 }
 function listShards() {
-  if (!existsSync18(SHARDS_DIR)) return [];
+  if (!existsSync19(SHARDS_DIR)) return [];
   return readdirSync4(SHARDS_DIR).filter((f) => f.endsWith(".db")).map((f) => f.replace(".db", ""));
 }
 async function auditShardHealth(options = {}) {
@@ -12102,7 +12312,7 @@ async function auditShardHealth(options = {}) {
   const shards = [];
   for (const name of names) {
     const dbPath = path28.join(SHARDS_DIR, `${name}.db`);
-    const stat = statSync3(dbPath);
+    const stat = statSync4(dbPath);
     const item = {
       name,
       path: dbPath,
@@ -12342,6 +12552,17 @@ async function ensureShardSchema(client) {
   }
 }
 async function getReadyShardClient(projectName) {
+  if (!_keyValidated) {
+    if (!_keyValidationPromise) {
+      _keyValidationPromise = validateEncryptionKey();
+    }
+    const valid = await _keyValidationPromise;
+    if (!valid) {
+      throw new Error(
+        `Shard creation blocked: encryption key mismatch with existing shards. Run /exe-doctor to audit.`
+      );
+    }
+  }
   const safeName = safeShardName(projectName);
   let client = getShardClient(projectName);
   try {
@@ -12354,8 +12575,8 @@ async function getReadyShardClient(projectName) {
     _shards.delete(safeName);
     _shardLastAccess.delete(safeName);
     const dbPath = path28.join(SHARDS_DIR, `${safeName}.db`);
-    if (existsSync18(dbPath)) {
-      const stat = statSync3(dbPath);
+    if (existsSync19(dbPath)) {
+      const stat = statSync4(dbPath);
       const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
       const archivedPath = path28.join(SHARDS_DIR, `${safeName}.db.broken-${stamp}`);
       renameSync4(dbPath, archivedPath);
@@ -12420,7 +12641,7 @@ function disposeShards() {
   _shardingEnabled = false;
   _encryptionKey = null;
 }
-var SHARDS_DIR, SHARD_IDLE_MS, MAX_OPEN_SHARDS, EVICTION_INTERVAL_MS, _shards, _shardLastAccess, _evictionTimer, _encryptionKey, _shardingEnabled;
+var SHARDS_DIR, SHARD_IDLE_MS, MAX_OPEN_SHARDS, EVICTION_INTERVAL_MS, _shards, _shardLastAccess, _evictionTimer, _encryptionKey, _shardingEnabled, _keyValidated, _keyValidationPromise;
 var init_shard_manager = __esm({
   "src/lib/shard-manager.ts"() {
     "use strict";
@@ -12434,6 +12655,8 @@ var init_shard_manager = __esm({
     _evictionTimer = null;
     _encryptionKey = null;
     _shardingEnabled = false;
+    _keyValidated = false;
+    _keyValidationPromise = null;
   }
 });
 
@@ -12881,6 +13104,20 @@ __export(store_exports, {
   vectorToBlob: () => vectorToBlob,
   writeMemory: () => writeMemory
 });
+function logStoreDebug(context, err) {
+  if (_debugStore) {
+    process.stderr.write(
+      `[store] ${context}: ${err instanceof Error ? err.message : String(err)}
+`
+    );
+  }
+}
+function logStoreWarn(context, err) {
+  process.stderr.write(
+    `[store] WARN ${context}: ${err instanceof Error ? err.message : String(err)}
+`
+  );
+}
 function isBusyError2(err) {
   if (err instanceof Error) {
     const msg = err.message.toLowerCase();
@@ -12935,13 +13172,15 @@ async function initStore(options) {
   try {
     const { initDaemonClient: initDaemonClient2 } = await Promise.resolve().then(() => (init_database(), database_exports));
     await initDaemonClient2();
-  } catch {
+  } catch (e) {
+    logStoreWarn("catch", e);
   }
   if (!options?.lightweight) {
     try {
       const { initShardManager: initShardManager2 } = await Promise.resolve().then(() => (init_shard_manager(), shard_manager_exports));
       initShardManager2(hexKey);
-    } catch {
+    } catch (e) {
+      logStoreWarn("catch", e);
     }
     const client = getClient();
     const vResult = await retryOnBusy2(
@@ -12952,7 +13191,8 @@ async function initStore(options) {
     try {
       const { loadGlobalProcedures: loadGlobalProcedures2 } = await Promise.resolve().then(() => (init_global_procedures(), global_procedures_exports));
       await loadGlobalProcedures2();
-    } catch {
+    } catch (e) {
+      logStoreWarn("catch", e);
     }
   }
 }
@@ -13012,7 +13252,8 @@ async function writeMemory(record) {
       memoryType
     });
     if (existing) return;
-  } catch {
+  } catch (e) {
+    logStoreWarn("catch", e);
   }
   const dbRow = {
     id: record.id,
@@ -13213,12 +13454,14 @@ async function flushBatch() {
     try {
       const { insertMemoryCardsForBatch: insertMemoryCardsForBatch2 } = await Promise.resolve().then(() => (init_memory_cards(), memory_cards_exports));
       await insertMemoryCardsForBatch2(batch);
-    } catch {
+    } catch (e) {
+      logStoreWarn("catch", e);
     }
     try {
       const { insertOntologyForBatch: insertOntologyForBatch2 } = await Promise.resolve().then(() => (init_agentic_ontology(), agentic_ontology_exports));
       await insertOntologyForBatch2(batch);
-    } catch {
+    } catch (e) {
+      logStoreWarn("catch", e);
     }
     schedulePostWriteMemoryHygiene(batch.map((row) => row.id));
     _pendingRecords.splice(0, batch.length);
@@ -13257,7 +13500,8 @@ ${err.stack.split("\n").slice(1, 3).join("\n")}` : ""}` : String(err);
           }
         }
       }
-    } catch {
+    } catch (e) {
+      logStoreWarn("catch", e);
     }
     return batch.length;
   } finally {
@@ -13299,7 +13543,8 @@ async function searchMemories(queryVector, agentId, options) {
     } else {
       client = getClient();
     }
-  } catch {
+  } catch (e) {
+    logStoreDebug("shard routing fallback", e);
     client = getClient();
   }
   const limit = options?.limit ?? 10;
@@ -13415,7 +13660,8 @@ async function attachDocumentMetadata(records) {
       if (!record.document_id) continue;
       record.document_metadata = byId.get(record.document_id) ?? null;
     }
-  } catch {
+  } catch (e) {
+    logStoreWarn("catch", e);
   }
   return records;
 }
@@ -13476,11 +13722,12 @@ async function getMemoryCardinality(agentId) {
       args: [agentId]
     });
     return Number(result.rows[0]?.cnt) || 0;
-  } catch {
+  } catch (e) {
+    logStoreWarn("getMemoryCardinality", e);
     return 0;
   }
 }
-var INIT_MAX_RETRIES, INIT_RETRY_DELAY_MS, _pendingRecords, _batchSize, _flushIntervalMs, _flushTimer, _flushing, _nextVersion;
+var _debugStore, INIT_MAX_RETRIES, INIT_RETRY_DELAY_MS, _pendingRecords, _batchSize, _flushIntervalMs, _flushTimer, _flushing, _nextVersion;
 var init_store = __esm({
   "src/lib/store.ts"() {
     "use strict";
@@ -13490,6 +13737,7 @@ var init_store = __esm({
     init_config();
     init_state_bus();
     init_memory_write_governor();
+    _debugStore = process.env.EXE_DEBUG === "1";
     INIT_MAX_RETRIES = 3;
     INIT_RETRY_DELAY_MS = 1e3;
     _pendingRecords = [];
@@ -19429,11 +19677,11 @@ function Footer() {
       } catch {
       }
       try {
-        const { existsSync: existsSync19 } = await import("fs");
-        const { join } = await import("path");
+        const { existsSync: existsSync20 } = await import("fs");
+        const { join: join2 } = await import("path");
         const home = process.env.HOME ?? "";
-        const pidPath = join(home, ".exe-os", "exed.pid");
-        setDaemon(existsSync19(pidPath) ? "running" : "stopped");
+        const pidPath = join2(home, ".exe-os", "exed.pid");
+        setDaemon(existsSync20(pidPath) ? "running" : "stopped");
       } catch {
         setDaemon("unknown");
       }
@@ -19516,7 +19764,7 @@ function Footer() {
 import { useState as useState6, useEffect as useEffect8, useMemo as useMemo4, useCallback as useCallback4, useRef as useRef4 } from "react";
 import TextInput from "ink-text-input";
 import path25 from "path";
-import { homedir } from "os";
+import { homedir as homedir2 } from "os";
 
 // src/tui/components/StatusDot.tsx
 import React16 from "react";
@@ -20303,13 +20551,13 @@ function CommandCenterView({
         const { createPermissionsFromPreset: createPermissionsFromPreset2, EMPLOYEE_PERMISSIONS: EMPLOYEE_PERMISSIONS2 } = await Promise.resolve().then(() => (init_permissions(), permissions_exports));
         const { getPresetByRole: getPresetByRole2 } = await Promise.resolve().then(() => (init_permission_presets(), permission_presets_exports));
         const { createDefaultHooks: createDefaultHooks2 } = await Promise.resolve().then(() => (init_hooks(), hooks_exports));
-        const { readFileSync: readFileSync14, existsSync: existsSync19 } = await import("fs");
-        const { join } = await import("path");
-        const { homedir: homedir3 } = await import("os");
-        const configPath = join(homedir3(), ".exe-os", "config.json");
+        const { readFileSync: readFileSync14, existsSync: existsSync20 } = await import("fs");
+        const { join: join2 } = await import("path");
+        const { homedir: homedir4 } = await import("os");
+        const configPath = join2(homedir4(), ".exe-os", "config.json");
         let failoverChain = ["anthropic", "opencode", "gemini", "openai"];
         let providerConfigs = {};
-        if (existsSync19(configPath)) {
+        if (existsSync20(configPath)) {
           try {
             const raw = JSON.parse(readFileSync14(configPath, "utf8"));
             if (Array.isArray(raw.failoverChain)) failoverChain = raw.failoverChain;
@@ -20369,10 +20617,10 @@ function CommandCenterView({
         registry.register(BashTool2);
         let agentRole = "CTO";
         try {
-          const markerDir = join(homedir3(), ".exe-os", "session-cache");
+          const markerDir = join2(homedir4(), ".exe-os", "session-cache");
           const agentFiles = (await import("fs")).readdirSync(markerDir).filter((f) => f.startsWith("active-agent-"));
           for (const f of agentFiles) {
-            const data = JSON.parse(readFileSync14(join(markerDir, f), "utf8"));
+            const data = JSON.parse(readFileSync14(join2(markerDir, f), "utf8"));
             if (data.agentRole) {
               agentRole = data.agentRole;
               break;
@@ -20517,7 +20765,7 @@ function CommandCenterView({
       const demoEntries = DEMO_PROJECTS.map((p) => ({
         projectName: p.projectName,
         exeSession: p.exeSession,
-        projectDir: path25.join(homedir(), p.projectName),
+        projectDir: path25.join(homedir2(), p.projectName),
         employeeCount: p.employees.length,
         activeCount: p.employees.filter((e) => e.status === "active").length,
         memoryCount: p.employees.length * 4e3,
@@ -20555,8 +20803,8 @@ function CommandCenterView({
         const { listSessions: listSessions2 } = await Promise.resolve().then(() => (init_session_registry(), session_registry_exports));
         const { listTmuxSessions: listTmuxSessions2, inTmux: inTmux2 } = await Promise.resolve().then(() => (init_tmux_status(), tmux_status_exports));
         const { loadEmployees: loadEmployees2 } = await Promise.resolve().then(() => (init_employees(), employees_exports));
-        const { existsSync: existsSync19 } = await import("fs");
-        const { join } = await import("path");
+        const { existsSync: existsSync20 } = await import("fs");
+        const { join: join2 } = await import("path");
         const client = getClient2();
         if (!client) {
           setDbError(true);
@@ -20626,7 +20874,7 @@ function CommandCenterView({
           }
           const memoryCount = memoryCounts.get(name) ?? 0;
           const openTaskCount = openTaskCounts.get(name) ?? 0;
-          const hasGit = projectDir ? existsSync19(join(projectDir, ".git")) : false;
+          const hasGit = projectDir ? existsSync20(join2(projectDir, ".git")) : false;
           const type = hasGit ? "code" : memoryCount > 0 ? "code" : "automation";
           projectList.push({
             projectName: name,
@@ -20650,8 +20898,8 @@ function CommandCenterView({
         const totalResult = await client.execute("SELECT COUNT(*) as cnt FROM memories");
         setHealth((h) => ({ ...h, memories: Number(totalResult.rows[0]?.cnt ?? 0) }));
         try {
-          const pidPath = join(process.env.HOME ?? "", ".exe-os", "exed.pid");
-          setHealth((h) => ({ ...h, daemon: existsSync19(pidPath) ? "running" : "stopped" }));
+          const pidPath = join2(process.env.HOME ?? "", ".exe-os", "exed.pid");
+          setHealth((h) => ({ ...h, daemon: existsSync20(pidPath) ? "running" : "stopped" }));
         } catch {
         }
         const activityResult = await client.execute(
@@ -20867,7 +21115,7 @@ function ChatMessageRow({ msg }) {
 // src/tui/views/Sessions.tsx
 import React19, { useState as useState9, useEffect as useEffect11, useCallback as useCallback6 } from "react";
 import path26 from "path";
-import { homedir as homedir2 } from "os";
+import { homedir as homedir3 } from "os";
 
 // src/tui/components/TmuxPane.tsx
 import React18, { useState as useState7, useEffect as useEffect9 } from "react";
@@ -21170,7 +21418,7 @@ function SessionsView({
     if (demo) {
       setProjects(DEMO_PROJECTS.map((p) => ({
         ...p,
-        projectDir: path26.join(homedir2(), p.projectName),
+        projectDir: path26.join(homedir3(), p.projectName),
         employees: p.employees.map((e) => ({ ...e, attached: e.status === "active" }))
       })));
       return;
@@ -22051,11 +22299,11 @@ async function loadGatewayConfig() {
     state.running = false;
   }
   try {
-    const { existsSync: existsSync19, readFileSync: readFileSync14 } = await import("fs");
-    const { join } = await import("path");
+    const { existsSync: existsSync20, readFileSync: readFileSync14 } = await import("fs");
+    const { join: join2 } = await import("path");
     const home = process.env.HOME ?? "";
-    const configPath = join(home, ".exe-os", "gateway.json");
-    if (existsSync19(configPath)) {
+    const configPath = join2(home, ".exe-os", "gateway.json");
+    if (existsSync20(configPath)) {
       const raw = JSON.parse(readFileSync14(configPath, "utf8"));
       state.port = raw.port ?? 3100;
       state.gatewayUrl = raw.gatewayUrl ?? "";
@@ -22556,11 +22804,11 @@ function TeamView({ onBack, onViewSessions }) {
         setMembers(teamData);
         setDbError(null);
         try {
-          const { existsSync: existsSync19, readFileSync: readFileSync14 } = await import("fs");
-          const { join } = await import("path");
+          const { existsSync: existsSync20, readFileSync: readFileSync14 } = await import("fs");
+          const { join: join2 } = await import("path");
           const home = process.env.HOME ?? "";
-          const gatewayConfig = join(home, ".exe-os", "gateway.json");
-          if (existsSync19(gatewayConfig)) {
+          const gatewayConfig = join2(home, ".exe-os", "gateway.json");
+          if (existsSync20(gatewayConfig)) {
             const raw = JSON.parse(readFileSync14(gatewayConfig, "utf8"));
             if (raw.agents && raw.agents.length > 0) {
               setExternals(raw.agents.map((a) => ({
@@ -23209,12 +23457,12 @@ function SettingsView({ onBack }) {
     }
     setProviders(providerList);
     try {
-      const { existsSync: existsSync19 } = await import("fs");
-      const { join } = await import("path");
+      const { existsSync: existsSync20 } = await import("fs");
+      const { join: join2 } = await import("path");
       const { loadConfig: loadConfig2 } = await Promise.resolve().then(() => (init_config(), config_exports));
       const cfg = await loadConfig2();
       const home = process.env.HOME ?? "";
-      const hasKey = existsSync19(join(home, ".exe-os", "master.key"));
+      const hasKey = existsSync20(join2(home, ".exe-os", "master.key"));
       if (cfg.cloud) {
         setCloud({
           configured: true,
@@ -23224,10 +23472,10 @@ function SettingsView({ onBack }) {
       } else {
         setCloud({ configured: false, endpoint: "", apiKey: "" });
       }
-      const pidPath = join(home, ".exe-os", "exed.pid");
+      const pidPath = join2(home, ".exe-os", "exed.pid");
       let daemon = "unknown";
       try {
-        daemon = existsSync19(pidPath) ? "running" : "stopped";
+        daemon = existsSync20(pidPath) ? "running" : "stopped";
       } catch {
       }
       let version = "unknown";