@askexenow/exe-os 0.9.136 → 0.9.138

package/dist/{chunk-A63V4QMR.js → chunk-NFMNO3XE.js}

@@ -1,18 +1,22 @@
+import {
+  getToolCapabilityIndex
+} from "./chunk-ISPV5JR2.js";
 import {
   getCachedLicenseGate
 } from "./chunk-JXYZVTBX.js";
 import {
   getToolUsageStats
-} from "./chunk-M6FENV7U.js";
+} from "./chunk-GMARURIG.js";
 import {
   AUTO_WAKE_MAX_RETRIES
-} from "./chunk-T65APBMF.js";
+} from "./chunk-7TW5HR4E.js";
 import {
-  getToolCapabilityIndex
-} from "./chunk-ISPV5JR2.js";
+  isToolAllowed,
+  isToolAllowedForPlan
+} from "./chunk-E6ORBQHP.js";
 import {
   listRecentSessionEvents
-} from "./chunk-O2ENLWKX.js";
+} from "./chunk-MSFSQSJO.js";
 import {
   isRerankerAvailable,
   rerankWithScores
@@ -25,10 +29,6 @@ import {
   getRelationships,
   searchEntities
 } from "./chunk-6LKDJ5WX.js";
-import {
-  isToolAllowed,
-  isToolAllowedForPlan
-} from "./chunk-X3KJ3TT7.js";
 import {
   analyzeBlastRadius,
   buildCodeContextIndex,
@@ -42,10 +42,10 @@ import {
   exportOrchestration,
   importOrchestration,
   validatePackage
-} from "./chunk-G2HJSPM4.js";
+} from "./chunk-Z36IJ3XX.js";
 import {
   runDriftProbes
-} from "./chunk-TERS54YJ.js";
+} from "./chunk-TIJYLKNW.js";
 import {
   loadOrchestrationPhase,
   setOrchestrationPhase
@@ -53,52 +53,52 @@ import {
 import {
   createOrRefreshResumeTask,
   init_capacity_monitor
-} from "./chunk-TXRDECEW.js";
+} from "./chunk-BUHXM7ZL.js";
 import {
   registerCompleteReminder
-} from "./chunk-S67DRFRK.js";
+} from "./chunk-2ISCJ5PQ.js";
 import {
   registerDeactivateBehavior
-} from "./chunk-YMMTBQQY.js";
+} from "./chunk-7V3BJHG6.js";
 import {
   registerSendMessage
-} from "./chunk-E2XB56OH.js";
+} from "./chunk-F63ZHBZY.js";
 import {
   registerCreateTask
-} from "./chunk-3BVZNKAZ.js";
+} from "./chunk-7GOVGBBM.js";
 import {
   registerListTasks
-} from "./chunk-IUKRBQ2B.js";
+} from "./chunk-TT3ND3MM.js";
 import {
   registerUpdateTask
-} from "./chunk-FM4UBRBE.js";
+} from "./chunk-JN2RIMLI.js";
 import {
   registerCreateReminder
-} from "./chunk-NFRFF6QS.js";
+} from "./chunk-VOA7GHIO.js";
 import {
   registerListReminders
-} from "./chunk-AVUQCUZC.js";
+} from "./chunk-LPIY2AUD.js";
 import {
   completeReminder,
   createReminder,
   listReminders
-} from "./chunk-QKBDAHFM.js";
+} from "./chunk-PFGFOALA.js";
 import {
   status
-} from "./chunk-ZNWYU3VE.js";
+} from "./chunk-EZTYTAVU.js";
 import {
   TOKENS_PER_IDLE_MINUTE,
   countKillsSince,
   init_session_kill_telemetry,
   sumTokensSavedSince
-} from "./chunk-ARQQ4T47.js";
+} from "./chunk-K7W7UJ6Z.js";
 import {
   getAgentSpend
-} from "./chunk-5DZTDWFU.js";
+} from "./chunk-BYNEC472.js";
 import {
   createSchedule,
   parseHumanCron
-} from "./chunk-XK3P2PRN.js";
+} from "./chunk-VGOFRIAI.js";
 import {
   exportGraphHTML,
   generateGraphReport
@@ -110,7 +110,7 @@ import {
 import {
   formatReport,
   runAudit
-} from "./chunk-MPZRPM5X.js";
+} from "./chunk-AHQDWRSM.js";
 import {
   runHealthCheck
 } from "./chunk-XEZ64YCS.js";
@@ -123,27 +123,27 @@ import {
   findSimilarTrajectories,
   hashSignature,
   init_skill_learning
-} from "./chunk-5NLZS5KX.js";
+} from "./chunk-5QCIPC7Z.js";
 import {
   deactivateBehavior,
   init_behaviors,
   listBehaviorsByDomain,
   storeBehavior
-} from "./chunk-NSVI6RZ5.js";
+} from "./chunk-N2ZX27ID.js";
 import {
   countUnconsolidated,
   groupMemories,
   runConsolidation,
   selectUnconsolidated
-} from "./chunk-GU2Z6K2T.js";
+} from "./chunk-MQNM4FW4.js";
 import {
   renderClientCOOTemplate
-} from "./chunk-VIONSYFC.js";
+} from "./chunk-7FYOTSJP.js";
 import {
   deactivateGlobalProcedure,
   loadGlobalProcedures,
   storeGlobalProcedure
-} from "./chunk-3UKHLUXH.js";
+} from "./chunk-BQ5YXRBI.js";
 import {
   PLATFORM_PROCEDURES
 } from "./chunk-N7GFMJSF.js";
@@ -152,7 +152,7 @@ import {
   cloudSync,
   getCloudReuploadRequired,
   markCloudReuploadRequired
-} from "./chunk-NBJIGVPG.js";
+} from "./chunk-LEVPSCVX.js";
 import {
   createARecord
 } from "./chunk-X2Z5GT3V.js";
@@ -168,15 +168,15 @@ import {
 import {
   init_tasks,
   updateTask
-} from "./chunk-J7LFCZMQ.js";
+} from "./chunk-WTPYZG4I.js";
 import {
   fastDbInit
-} from "./chunk-FR5FFQ6G.js";
+} from "./chunk-KJMSHBWT.js";
 import {
   getIdentity,
   listIdentities,
   updateIdentity
-} from "./chunk-KHUJEI3A.js";
+} from "./chunk-BOPKW4AV.js";
 import {
   MAX_CONCURRENT_WORKERS
 } from "./chunk-BI3COBMQ.js";
@@ -187,7 +187,7 @@ import {
 import {
   hybridSearch,
   recentRecords
-} from "./chunk-XDWCEQLH.js";
+} from "./chunk-EBMHOMN2.js";
 import {
   getActiveAgent
 } from "./chunk-TCOTFMDP.js";
@@ -198,11 +198,11 @@ import {
   reserveVersions,
   vectorToBlob,
   writeMemory
-} from "./chunk-4ADWX7S6.js";
+} from "./chunk-OVFU26ZD.js";
 import {
   resolveTask,
   writeCheckpoint
-} from "./chunk-GISRZK6K.js";
+} from "./chunk-EZ2TJX6O.js";
 import {
   init_task_scope,
   init_tmux_routing,
@@ -210,7 +210,7 @@ import {
   sessionScopeFilter,
   strictSessionScopeFilter,
   tmux_routing_exports
-} from "./chunk-CTEENZVZ.js";
+} from "./chunk-FQZY4M45.js";
 import {
   init_session_registry,
   listSessions
@@ -234,7 +234,7 @@ import {
   assertFeature,
   assertMemoryLimit,
   init_plan_limits
-} from "./chunk-ARZWYVYC.js";
+} from "./chunk-GRLQJ27R.js";
 import {
   getAccountByName,
   getDefaultAccount
@@ -243,14 +243,14 @@ import {
   createNewTrigger,
   isScheduledTrigger,
   loadTriggers
-} from "./chunk-RCKUCKED.js";
+} from "./chunk-N6BE2CUT.js";
 import {
   pushConversationToCRM
 } from "./chunk-GCNWCYJI.js";
 import {
   getClient,
   init_database
-} from "./chunk-ZJ7N6BNZ.js";
+} from "./chunk-2G6QGXVX.js";
 import {
   EMPLOYEES_PATH,
   addEmployee,
@@ -317,7 +317,7 @@ function applyRetrievalMode(base, mode) {
   const next = { ...base };
   switch (mode) {
     case "decisions_only":
-      next.memoryTypes = ["decision", "adr"];
+      next.memoryTypes = ["decision", "adr", "constraint", "goal"];
       next.includeRaw = false;
       break;
     case "behaviors_only":
@@ -336,7 +336,7 @@ function applyRetrievalMode(base, mode) {
       next.includeRaw = false;
       break;
     case "recent_high_value":
-      next.memoryTypes = ["decision", "adr", "behavior", "procedure"];
+      next.memoryTypes = ["decision", "adr", "behavior", "procedure", "insight", "skill", "fact"];
       next.includeRaw = false;
       break;
     default:
@@ -720,10 +720,11 @@ function registerCommitMemory(server) {
         current_state: z4.string().optional().describe("What is true NOW \u2014 snapshot of current system state"),
         historical_context: z4.string().optional().describe("What led here \u2014 decisions, trade-offs, prior approaches"),
         importance: z4.number().min(1).max(10).optional().describe("Override importance (default 9)"),
-        supersedes_id: z4.string().optional().describe("UUID of memory this replaces \u2014 old memory will be archived")
+        supersedes_id: z4.string().optional().describe("UUID of memory this replaces \u2014 old memory will be archived"),
+        kind: z4.enum(["decision", "procedure", "observation", "fact", "preference", "skill", "constraint", "insight", "correction", "goal", "episode", "context", "relationship"]).optional().describe("Semantic memory type. Defaults to 'decision' for coordinators, 'observation' for others. Enables typed retrieval via recall(kind=X).")
       }
     },
-    async ({ summary, project, key_decisions, metadata_tags, topic, current_state, historical_context, importance: importanceOverride, supersedes_id }) => {
+    async ({ summary, project, key_decisions, metadata_tags, topic, current_state, historical_context, importance: importanceOverride, supersedes_id, kind }) => {
       const { agentId, agentRole } = getActiveAgent();
       const parts = [`CONTEXT COMMIT [${agentId}]:`, ""];
       if (topic) parts.push(`## ${topic}`, "");
@@ -753,7 +754,7 @@ function registerCommitMemory(server) {
       }
       const memoryId = crypto2.randomUUID();
       await assertMemoryLimit();
-      const memoryType = canCoordinate(agentId, agentRole) ? "adr" : "raw";
+      const memoryType = kind ?? (canCoordinate(agentId, agentRole) ? "decision" : "observation");
       await writeMemory({
         id: memoryId,
         agent_id: agentId,
@@ -1366,7 +1367,10 @@ var ACTION_TO_LEGACY_TOOL = {
   get_by_id: "get_memory_by_id",
   consolidate: "consolidate_memories",
   cardinality: "get_memory_cardinality",
-  supersede: "__inline_supersede__"
+  supersede: "__inline_supersede__",
+  core_get: "__inline_core__",
+  core_set: "__inline_core__",
+  core_delete: "__inline_core__"
 };
 var REQUIRED_FIELDS = {
   recall: [],
@@ -1378,7 +1382,12 @@ var REQUIRED_FIELDS = {
   get_by_id: ["id"],
   consolidate: [],
   cardinality: [],
-  supersede: ["old_id", "text"]
+  supersede: ["old_id", "text"],
+  core_get: [],
+  core_set: ["query"],
+  // query = key, text = value
+  core_delete: ["query"]
+  // query = key
 };
 function errorResult(text3) {
   return {
@@ -1474,7 +1483,7 @@ function registerMemory(server) {
       title: "Memory",
       description: "Consolidated memory domain tool. Actions: recall, ask_team, store, commit, search, session_context, get_by_id, consolidate, cardinality, supersede. Legacy memory tools remain available during migration.",
       inputSchema: {
-        action: z10.enum(["recall", "ask_team", "store", "commit", "search", "session_context", "consolidate", "cardinality", "supersede"]).describe("Memory operation to perform"),
+        action: z10.enum(["recall", "ask_team", "store", "commit", "search", "session_context", "consolidate", "cardinality", "supersede", "core_get", "core_set", "core_delete"]).describe("Memory operation to perform. core_get/core_set/core_delete manage always-in-context key facts."),
         query: z10.string().optional().describe("Search query. Also accepted as store text alias."),
         text: z10.string().optional().describe("Memory text for action=store"),
         summary: z10.string().optional().describe("High-importance summary for action=commit"),
@@ -1523,6 +1532,29 @@ function registerMemory(server) {
       if (action === "supersede") {
         return handleSupersede(input);
       }
+      if (action === "core_get" || action === "core_set" || action === "core_delete") {
+        const { getActiveAgent: getActiveAgent2 } = await import("./active-agent-EFZ6YZIM.js");
+        const { agentId } = getActiveAgent2();
+        const { getCoreMemory, setCoreMemory, deleteCoreMemory, formatCoreMemoryBlock } = await import("./core-memory-DUENM2P6.js");
+        if (action === "core_get") {
+          const entries = await getCoreMemory(agentId);
+          const block = formatCoreMemoryBlock(entries);
+          return { content: [{ type: "text", text: block ?? "No core memory entries." }] };
+        }
+        if (action === "core_set") {
+          const key = input.query;
+          const value = input.text ?? "";
+          if (!key || !value) return errorResult("core_set requires query (key) and text (value)");
+          await setCoreMemory(agentId, key, value);
+          return { content: [{ type: "text", text: `Core memory set: **${key}** = ${value}` }] };
+        }
+        if (action === "core_delete") {
+          const key = input.query;
+          if (!key) return errorResult("core_delete requires query (key)");
+          const deleted = await deleteCoreMemory(agentId, key);
+          return { content: [{ type: "text", text: deleted ? `Core memory deleted: ${key}` : `Key "${key}" not found` }] };
+        }
+      }
       const { action: _action, ...legacyArgs } = input;
       const missing = missingRequiredFields(legacyArgs, REQUIRED_FIELDS[action]);
       if (missing.length > 0) {
@@ -2009,7 +2041,7 @@ function registerResumeEmployee(server) {
         };
       }
       try {
-        const { isTmuxSessionAlive } = await import("./tasks-crud-DUNJJUV3.js");
+        const { isTmuxSessionAlive } = await import("./tasks-crud-MDCY6JHU.js");
         const now = (/* @__PURE__ */ new Date()).toISOString();
         for (const row of openTasks.rows) {
           const status2 = String(row.status);
@@ -2832,8 +2864,8 @@ function registerIngestDocument(server) {
     },
     async (input) => {
       try {
-        const { assertFeature: assertFeature2 } = await import("./plan-limits-UQTXKXJQ.js");
-        const { assertMemoryLimit: assertMemoryLimit2 } = await import("./plan-limits-UQTXKXJQ.js");
+        const { assertFeature: assertFeature2 } = await import("./plan-limits-3FXBGHWT.js");
+        const { assertMemoryLimit: assertMemoryLimit2 } = await import("./plan-limits-3FXBGHWT.js");
         await assertFeature2("wiki");
         await assertMemoryLimit2();
         const result3 = await ingestDocument(input);
@@ -3080,7 +3112,7 @@ function registerDocument(server) {
 }
 
 // src/mcp/tools/gateway.ts
-import { z as z32 } from "zod";
+import { z as z33 } from "zod";
 
 // src/mcp/tools/send-whatsapp.ts
 import { z as z29 } from "zod";
@@ -3426,10 +3458,86 @@ function registerQueryConversations(server) {
 
 // src/mcp/tools/query-company-brain.ts
 init_config();
+import { z as z32 } from "zod";
+
+// src/lib/unified-query.ts
 import { z as z31 } from "zod";
+var PaginationSchema = {
+  limit: z31.coerce.number().int().min(1).max(100).optional().describe("Max results to return (default 25, max 100)"),
+  offset: z31.coerce.number().int().min(0).optional().describe("Number of results to skip for pagination")
+};
+var DateRangeSchema = {
+  date_from: z31.string().optional().describe("Filter records created/updated after this ISO date (inclusive)"),
+  date_to: z31.string().optional().describe("Filter records created/updated before this ISO date (inclusive)")
+};
+var TextSearchSchema = {
+  text_search: z31.string().optional().describe("Full-text search across relevant fields")
+};
+var SortSchema = {
+  sort_by: z31.string().optional().describe("Field to sort by (tool-specific, default varies)"),
+  sort_order: z31.enum(["asc", "desc"]).optional().describe("Sort direction (default desc)")
+};
+var SourceFilterSchema = {
+  source: z31.string().optional().describe("Filter by data source/platform")
+};
+var StructuredFiltersSchema = {
+  structured_filters: z31.record(z31.string(), z31.unknown()).optional().describe(
+    "Structured field filters: { field: value } for equality, or { field: { op: 'gt'|'lt'|'gte'|'lte'|'contains'|'neq', value: ... } }"
+  )
+};
+var UnifiedQuerySchema = {
+  ...PaginationSchema,
+  ...DateRangeSchema,
+  ...TextSearchSchema,
+  ...SortSchema,
+  ...SourceFilterSchema,
+  ...StructuredFiltersSchema
+};
+function buildStructuredFilterClauses(filters, columnMapping) {
+  if (!filters) return [];
+  const clauses = [];
+  for (const [field, value] of Object.entries(filters)) {
+    const column = columnMapping?.[field] ?? field;
+    if (value === null || value === void 0) continue;
+    if (typeof value === "object" && !Array.isArray(value)) {
+      const filter = value;
+      if (!filter.op || filter.value === void 0) continue;
+      switch (filter.op) {
+        case "eq":
+          clauses.push({ sql: `${column} = ?`, args: [filter.value] });
+          break;
+        case "neq":
+          clauses.push({ sql: `${column} != ?`, args: [filter.value] });
+          break;
+        case "gt":
+          clauses.push({ sql: `${column} > ?`, args: [filter.value] });
+          break;
+        case "lt":
+          clauses.push({ sql: `${column} < ?`, args: [filter.value] });
+          break;
+        case "gte":
+          clauses.push({ sql: `${column} >= ?`, args: [filter.value] });
+          break;
+        case "lte":
+          clauses.push({ sql: `${column} <= ?`, args: [filter.value] });
+          break;
+        case "contains":
+          clauses.push({ sql: `${column} LIKE ?`, args: [`%${filter.value}%`] });
+          break;
+        default:
+          break;
+      }
+    } else {
+      clauses.push({ sql: `${column} = ?`, args: [value] });
+    }
+  }
+  return clauses;
+}
+
+// src/mcp/tools/query-company-brain.ts
 var FETCH_TIMEOUT_MS = 1e4;
-var QUERY_SCOPE = z31.enum(["raw", "crm", "wiki", "memory", "gateway", "all"]);
-var QUERY_ACTION = z31.enum(["search", "list_sources", "sql"]);
+var QUERY_SCOPE = z32.enum(["raw", "crm", "wiki", "memory", "gateway", "all"]);
+var QUERY_ACTION = z32.enum(["search", "list_sources", "sql"]);
 var LOCAL_GATEWAY_HTTP_HOSTS = /^(localhost|127\.0\.0\.1|::1|exe-gateway|gateway)$/i;
 function assertSecureGatewayUrlForToken(gatewayUrl, authToken) {
   if (!authToken) return;
@@ -3465,14 +3573,16 @@ function registerQueryCompanyBrain(server) {
       description: "Search the Company Brain \u2014 queries across all data (raw events, wiki docs, agent memories, gateway messages).",
       inputSchema: {
         action: QUERY_ACTION.default("search").describe("search = search exe-db; list_sources = list available sources; sql = run read-only SQL through gateway"),
-        query: z31.string().optional().describe("Search text. Required for action=search."),
-        sql: z31.string().optional().describe("Read-only SELECT/WITH SQL. Required for action=sql."),
+        query: z32.string().optional().describe("Search text. Required for action=search."),
+        sql: z32.string().optional().describe("Read-only SELECT/WITH SQL. Required for action=sql."),
         scope: QUERY_SCOPE.default("all").describe("Which data scope to search/read (raw, crm, wiki, memory, gateway, all)"),
-        source: z31.string().optional().describe("Filter raw events by source (shopify, asana, etc.)"),
-        limit: z31.coerce.number().int().min(1).max(100).default(20).describe("Max results per scope")
+        source: z32.string().optional().describe("Filter raw events by source (shopify, asana, etc.)"),
+        limit: z32.coerce.number().int().min(1).max(100).default(20).describe("Max results per scope"),
+        ...DateRangeSchema,
+        ...SortSchema
       }
     },
-    async ({ action, query, sql, scope, source, limit }) => {
+    async ({ action, query, sql, scope, source, limit, date_from, date_to, sort_by, sort_order }) => {
       const resolvedAction = action ?? "search";
       if (resolvedAction === "search" && !query?.trim()) {
         return {
@@ -3534,6 +3644,10 @@ function registerQueryCompanyBrain(server) {
         url.searchParams.set("scope", scope);
         if (source) url.searchParams.set("source", source);
         url.searchParams.set("limit", String(limit));
+        if (date_from) url.searchParams.set("date_from", date_from);
+        if (date_to) url.searchParams.set("date_to", date_to);
+        if (sort_by) url.searchParams.set("sort_by", sort_by);
+        if (sort_order) url.searchParams.set("sort_order", sort_order);
       }
       try {
         const response = await fetch(url.toString(), {
@@ -3602,20 +3716,20 @@ function registerGateway(server) {
     title: "Gateway",
     description: "Consolidated gateway/customer communication tool. Actions: send_whatsapp, query_conversations, query_company_brain. Legacy gateway tools remain available during migration.",
     inputSchema: {
-      action: z32.enum(["send_whatsapp", "query_conversations", "query_company_brain"]).describe("Gateway operation to perform"),
-      recipients: z32.array(z32.string()).optional().describe("Names or phone numbers for action=send_whatsapp"),
-      message: z32.string().optional().describe("WhatsApp message text"),
-      account: z32.string().optional().describe("WhatsApp account name"),
-      query: z32.string().optional().describe("Search query"),
-      sender: z32.string().optional().describe("Conversation sender filter"),
-      platform: z32.string().optional().describe("Conversation platform filter"),
-      after: z32.string().optional().describe("Conversation lower date bound"),
-      before: z32.string().optional().describe("Conversation upper date bound"),
-      channel_id: z32.string().optional().describe("Conversation channel filter"),
-      thread_id: z32.string().optional().describe("Conversation thread filter"),
-      limit: z32.coerce.number().int().min(1).max(100).optional().describe("Max results"),
-      scope: z32.enum(["raw", "wiki", "memory", "gateway", "all"]).optional().describe("Company Brain scope"),
-      source: z32.string().optional().describe("Company Brain raw event source filter")
+      action: z33.enum(["send_whatsapp", "query_conversations", "query_company_brain"]).describe("Gateway operation to perform"),
+      recipients: z33.array(z33.string()).optional().describe("Names or phone numbers for action=send_whatsapp"),
+      message: z33.string().optional().describe("WhatsApp message text"),
+      account: z33.string().optional().describe("WhatsApp account name"),
+      query: z33.string().optional().describe("Search query"),
+      sender: z33.string().optional().describe("Conversation sender filter"),
+      platform: z33.string().optional().describe("Conversation platform filter"),
+      after: z33.string().optional().describe("Conversation lower date bound"),
+      before: z33.string().optional().describe("Conversation upper date bound"),
+      channel_id: z33.string().optional().describe("Conversation channel filter"),
+      thread_id: z33.string().optional().describe("Conversation thread filter"),
+      limit: z33.coerce.number().int().min(1).max(100).optional().describe("Max results"),
+      scope: z33.enum(["raw", "wiki", "memory", "gateway", "all"]).optional().describe("Company Brain scope"),
+      source: z33.string().optional().describe("Company Brain raw event source filter")
     }
   }, async (input, extra) => {
     const action = input.action;
@@ -3642,11 +3756,11 @@ function registerGateway(server) {
 }
 
 // src/mcp/tools/graph.ts
-import { z as z39 } from "zod";
+import { z as z40 } from "zod";
 
 // src/mcp/tools/get-entity-neighbors.ts
 init_database();
-import { z as z33 } from "zod";
+import { z as z34 } from "zod";
 function registerGetEntityNeighbors(server) {
   server.registerTool(
     "get_entity_neighbors",
@@ -3654,7 +3768,7 @@ function registerGetEntityNeighbors(server) {
       title: "Get Entity Neighbors",
       description: "Get connected entities for a given entity name. Returns neighbors with relationship types, directions, and weights.",
       inputSchema: {
-        entity_name: z33.string().describe("Name of the entity to find neighbors for")
+        entity_name: z34.string().describe("Name of the entity to find neighbors for")
       }
     },
     async ({ entity_name }) => {
@@ -3722,7 +3836,7 @@ function registerGetEntityNeighbors(server) {
 
 // src/mcp/tools/get-hot-entities.ts
 init_database();
-import { z as z34 } from "zod";
+import { z as z35 } from "zod";
 var PERIOD_MS = {
   "24h": 24 * 60 * 60 * 1e3,
   "7d": 7 * 24 * 60 * 60 * 1e3,
@@ -3735,8 +3849,8 @@ function registerGetHotEntities(server) {
       title: "Get Hot Entities",
       description: "Get trending entities \u2014 those with the most new relationships in a time period. Surfaces what's most active in the knowledge graph.",
       inputSchema: {
-        period: z34.enum(["24h", "7d", "30d"]).default("7d").describe("Time period to look back"),
-        limit: z34.number().int().min(1).max(50).default(10).describe("Max entities to return")
+        period: z35.enum(["24h", "7d", "30d"]).default("7d").describe("Time period to look back"),
+        limit: z35.number().int().min(1).max(50).default(10).describe("Max entities to return")
       }
     },
     async ({ period, limit }) => {
@@ -3784,7 +3898,7 @@ function registerGetHotEntities(server) {
 
 // src/mcp/tools/get-graph-stats.ts
 init_database();
-import { z as z35 } from "zod";
+import { z as z36 } from "zod";
 function registerGetGraphStats(server) {
   server.registerTool(
     "get_graph_stats",
@@ -3792,7 +3906,7 @@ function registerGetGraphStats(server) {
       title: "Get Graph Stats",
       description: "Get knowledge graph summary statistics: entity count, relationship count, and entity type breakdown.",
       inputSchema: {
-        _dummy: z35.string().optional().describe("Unused \u2014 no input required")
+        _dummy: z36.string().optional().describe("Unused \u2014 no input required")
       }
     },
     async () => {
@@ -3833,7 +3947,7 @@ function registerGetGraphStats(server) {
 
 // src/mcp/tools/export-graph.ts
 init_database();
-import { z as z36 } from "zod";
+import { z as z37 } from "zod";
 function registerExportGraph(server) {
   server.registerTool(
     "export_graph",
@@ -3841,7 +3955,7 @@ function registerExportGraph(server) {
       title: "Export Graph",
       description: "Export the knowledge graph as a markdown report (inline) or an interactive HTML visualization (writes file, returns path).",
       inputSchema: {
-        format: z36.enum(["html", "markdown"]).default("markdown").describe("Export format: markdown (inline) or html (file)")
+        format: z37.enum(["html", "markdown"]).default("markdown").describe("Export format: markdown (inline) or html (file)")
       }
     },
     async ({ format: format2 }) => {
@@ -3855,12 +3969,12 @@ function registerExportGraph(server) {
         }
         const html = await exportGraphHTML(client);
         const fs = await import("fs");
-        const path17 = await import("path");
+        const path18 = await import("path");
         const os4 = await import("os");
-        const outDir = path17.join(os4.homedir(), ".exe-os", "exports");
+        const outDir = path18.join(os4.homedir(), ".exe-os", "exports");
         fs.mkdirSync(outDir, { recursive: true });
         const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-").slice(0, 19);
-        const filePath = path17.join(outDir, `graph-${timestamp}.html`);
+        const filePath = path18.join(outDir, `graph-${timestamp}.html`);
         fs.writeFileSync(filePath, html, "utf-8");
         return {
           content: [
@@ -3891,7 +4005,7 @@ Open in a browser to explore interactively.`
 
 // src/mcp/tools/merge-entities.ts
 init_database();
-import { z as z37 } from "zod";
+import { z as z38 } from "zod";
 function registerMergeEntities(server) {
   server.registerTool(
     "merge_entities",
@@ -3899,10 +4013,10 @@ function registerMergeEntities(server) {
       title: "Merge Entities",
       description: 'Merge duplicate GraphRAG entities. Moves all relationships and memory links from source to target entity, registers source name as alias, deletes source. Use when "Lenny" and "Leonard" should be the same entity.',
       inputSchema: {
-        source_name: z37.string().describe("Name of the entity to merge FROM (will be deleted)"),
-        source_type: z37.string().describe('Entity type (e.g., "person", "company", "product")'),
-        target_name: z37.string().describe("Name of the entity to merge INTO (will be kept)"),
-        target_type: z37.string().describe("Entity type of the target")
+        source_name: z38.string().describe("Name of the entity to merge FROM (will be deleted)"),
+        source_type: z38.string().describe('Entity type (e.g., "person", "company", "product")'),
+        target_name: z38.string().describe("Name of the entity to merge INTO (will be kept)"),
+        target_type: z38.string().describe("Entity type of the target")
       }
     },
     async ({ source_name, source_type, target_name, target_type }) => {
@@ -3948,7 +4062,7 @@ function registerMergeEntities(server) {
 
 // src/mcp/tools/find-similar-trajectories.ts
 init_skill_learning();
-import { z as z38 } from "zod";
+import { z as z39 } from "zod";
 function registerFindSimilarTrajectories(server) {
   server.registerTool(
     "find_similar_trajectories",
@@ -3956,7 +4070,7 @@ function registerFindSimilarTrajectories(server) {
       title: "Find Similar Trajectories",
       description: 'Find past task trajectories that match a described tool sequence. Input a comma-separated tool sequence (e.g. "Read, Edit, Bash, Read") to find similar past workflows.',
       inputSchema: {
-        description: z38.string().describe(
+        description: z39.string().describe(
           'Tool sequence to match \u2014 comma-separated tool names (e.g. "Read, Grep, Edit, Bash:npm, Bash:git")'
         )
       }
@@ -4060,23 +4174,23 @@ function registerGraph(server) {
     title: "Graph",
     description: "Consolidated GraphRAG tool. Actions: query_relationships, entity_neighbors, hot_entities, stats, export, merge_entities, similar_trajectories.",
     inputSchema: {
-      action: z39.enum(["query_relationships", "entity_neighbors", "hot_entities", "stats", "export", "merge_entities", "similar_trajectories"]).describe("Graph operation"),
-      query: z39.string().optional().describe("Query text for relationship or trajectory search"),
-      entity: z39.string().optional().describe("Entity name for entity_neighbors"),
-      entity_id: z39.string().optional().describe("Entity id for entity_neighbors/merge"),
-      from_entity: z39.string().optional().describe("Source entity for relationship query"),
-      to_entity: z39.string().optional().describe("Target entity for relationship query"),
-      source_id: z39.string().optional().describe("Source entity id for merge_entities"),
-      target_id: z39.string().optional().describe("Target entity id for merge_entities"),
-      entity_type: z39.string().optional().describe("Entity type filter"),
-      project_name: z39.string().optional().describe("Project filter"),
-      relationship_type: z39.string().optional().describe("Relationship type filter"),
-      since: z39.string().optional().describe("ISO lower-bound timestamp"),
-      limit: z39.coerce.number().int().min(1).max(200).optional().describe("Result limit"),
-      depth: z39.coerce.number().int().min(1).max(3).optional().describe("Neighbor traversal depth"),
-      output_path: z39.string().optional().describe("Path for export_graph output"),
-      format: z39.enum(["json", "graphml"]).optional().describe("Export format"),
-      min_count: z39.coerce.number().int().min(1).optional().describe("Minimum count for hot_entities")
+      action: z40.enum(["query_relationships", "entity_neighbors", "hot_entities", "stats", "export", "merge_entities", "similar_trajectories"]).describe("Graph operation"),
+      query: z40.string().optional().describe("Query text for relationship or trajectory search"),
+      entity: z40.string().optional().describe("Entity name for entity_neighbors"),
+      entity_id: z40.string().optional().describe("Entity id for entity_neighbors/merge"),
+      from_entity: z40.string().optional().describe("Source entity for relationship query"),
+      to_entity: z40.string().optional().describe("Target entity for relationship query"),
+      source_id: z40.string().optional().describe("Source entity id for merge_entities"),
+      target_id: z40.string().optional().describe("Target entity id for merge_entities"),
+      entity_type: z40.string().optional().describe("Entity type filter"),
+      project_name: z40.string().optional().describe("Project filter"),
+      relationship_type: z40.string().optional().describe("Relationship type filter"),
+      since: z40.string().optional().describe("ISO lower-bound timestamp"),
+      limit: z40.coerce.number().int().min(1).max(200).optional().describe("Result limit"),
+      depth: z40.coerce.number().int().min(1).max(3).optional().describe("Neighbor traversal depth"),
+      output_path: z40.string().optional().describe("Path for export_graph output"),
+      format: z40.enum(["json", "graphml"]).optional().describe("Export format"),
+      min_count: z40.coerce.number().int().min(1).optional().describe("Minimum count for hot_entities")
     }
   }, async (input, extra) => {
     const action = input.action;
@@ -4102,10 +4216,10 @@ function registerGraph(server) {
 }
 
 // src/mcp/tools/config.ts
-import { z as z66 } from "zod";
+import { z as z67 } from "zod";
 
 // src/mcp/tools/set-agent-config.ts
-import { z as z40 } from "zod";
+import { z as z41 } from "zod";
 init_agent_config();
 init_runtime_table();
 init_employees();
@@ -4116,11 +4230,11 @@ function registerSetAgentConfig(server) {
       title: "Set Agent Config",
       description: "Set or view per-agent runtime, model, and MCP configuration. Controls which runtime (claude, codex, opencode), model, and MCP servers each agent uses when dispatched. COO-only. Omit runtime/model to view current config for an agent or all agents. Pass mcps to restrict which MCP servers an agent loads (exe-os always included).",
       inputSchema: {
-        agent_id: z40.string().optional().describe("Agent name, or 'default' for org-wide default. Omit to view all agents."),
-        runtime: z40.string().optional().describe(`Runtime: ${Object.keys(KNOWN_RUNTIMES).join(", ")}`),
-        model: z40.string().optional().describe("Model name (e.g. claude-opus-4, gpt-5.4, anthropic/claude-sonnet-4-6)"),
-        reasoning_effort: z40.string().optional().describe("Codex reasoning effort: low, medium, high, xhigh. Per-agent override for thinking/reasoning depth."),
-        mcps: z40.array(z40.string()).optional().describe("MCP server allowlist. Only these servers load for this agent. exe-os always included. Omit to load all MCPs.")
+        agent_id: z41.string().optional().describe("Agent name, or 'default' for org-wide default. Omit to view all agents."),
+        runtime: z41.string().optional().describe(`Runtime: ${Object.keys(KNOWN_RUNTIMES).join(", ")}`),
+        model: z41.string().optional().describe("Model name (e.g. claude-opus-4, gpt-5.4, anthropic/claude-sonnet-4-6)"),
+        reasoning_effort: z41.string().optional().describe("Codex reasoning effort: low, medium, high, xhigh. Per-agent override for thinking/reasoning depth."),
+        mcps: z41.array(z41.string()).optional().describe("MCP server allowlist. Only these servers load for this agent. exe-os always included. Omit to load all MCPs.")
       }
     },
     async ({ agent_id, runtime, model, reasoning_effort, mcps }) => {
@@ -4241,7 +4355,7 @@ function registerSetAgentConfig(server) {
 // src/mcp/tools/list-employees.ts
 init_employees();
 init_agent_config();
-import { z as z41 } from "zod";
+import { z as z42 } from "zod";
 function registerListEmployees(server) {
   server.registerTool(
     "list_employees",
@@ -4249,7 +4363,7 @@ function registerListEmployees(server) {
       title: "List Employees",
       description: "List all AI employees in the organization with their role, runtime, and model configuration. Use to see who's on the team and how they're configured.",
       inputSchema: {
-        role: z41.string().optional().describe("Filter by role (case-insensitive)")
+        role: z42.string().optional().describe("Filter by role (case-insensitive)")
       }
     },
     async ({ role }) => {
@@ -4305,7 +4419,7 @@ function registerListEmployees(server) {
 }
 
 // src/mcp/tools/get-agent-spend.ts
-import { z as z42 } from "zod";
+import { z as z43 } from "zod";
 function estimateCost(input, output, cacheRead) {
   const inputCost = input / 1e6 * 15;
   const outputCost = output / 1e6 * 75;
@@ -4319,8 +4433,8 @@ function registerGetAgentSpend(server) {
       title: "Get Agent Spend",
       description: "Get per-agent token spend attribution. Shows input, output, and cache tokens consumed by each agent over a time period, with estimated cost.",
       inputSchema: {
-        period: z42.enum(["24h", "7d", "30d"]).default("7d").describe("Time period to query"),
-        agent_id: z42.string().optional().describe("Filter to a specific agent (e.g. 'tom', 'yoshi')")
+        period: z43.enum(["24h", "7d", "30d"]).default("7d").describe("Time period to query"),
+        agent_id: z43.string().optional().describe("Filter to a specific agent (e.g. 'tom', 'yoshi')")
       }
     },
     async ({ period, agent_id }) => {
@@ -4385,7 +4499,7 @@ function registerGetAgentSpend(server) {
 
 // src/mcp/tools/list-agent-sessions.ts
 init_session_registry();
-import { z as z43 } from "zod";
+import { z as z44 } from "zod";
 function registerListAgentSessions(server) {
   server.registerTool(
     "list_agent_sessions",
@@ -4393,7 +4507,7 @@ function registerListAgentSessions(server) {
       title: "List Agent Sessions",
       description: "List all registered agent sessions with their agent ID, project, PID, and registration time.",
       inputSchema: {
-        _placeholder: z43.string().optional().describe("No input required")
+        _placeholder: z44.string().optional().describe("No input required")
       }
     },
     async () => {
@@ -4440,7 +4554,7 @@ function registerListAgentSessions(server) {
 
 // src/mcp/tools/get-session-kills.ts
 init_session_kill_telemetry();
-import { z as z44 } from "zod";
+import { z as z45 } from "zod";
 var PERIOD_MS2 = {
   "24h": 24 * 60 * 60 * 1e3,
   "7d": 7 * 24 * 60 * 60 * 1e3,
@@ -4456,7 +4570,7 @@ function registerGetSessionKills(server) {
       title: "Get Session Kills",
       description: "Get session kill telemetry: how many idle/TTL sessions were killed, tokens saved, and estimated cost savings over a time period.",
       inputSchema: {
-        period: z44.enum(["24h", "7d", "30d"]).default("7d").describe("Time period to query")
+        period: z45.enum(["24h", "7d", "30d"]).default("7d").describe("Time period to query")
       }
     },
     async ({ period }) => {
@@ -4495,7 +4609,7 @@ function registerGetSessionKills(server) {
 }
 
 // src/mcp/tools/get-daemon-health.ts
-import { z as z45 } from "zod";
+import { z as z46 } from "zod";
 import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
 import path3 from "path";
 import { homedir as homedir2 } from "os";
@@ -4526,7 +4640,7 @@ function registerGetDaemonHealth(server) {
       title: "Get Daemon Health",
       description: "Check the embedding daemon (exed) health: whether it's running, its PID, uptime, and requests served.",
       inputSchema: {
-        _placeholder: z45.string().optional().describe("No input required")
+        _placeholder: z46.string().optional().describe("No input required")
       }
     },
     async () => {
@@ -4600,7 +4714,7 @@ function registerGetDaemonHealth(server) {
 import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
 import path4 from "path";
 import { homedir as homedir3 } from "os";
-import { z as z46 } from "zod";
+import { z as z47 } from "zod";
 var PID_PATH2 = path4.join(homedir3(), ".exe-os", "exed.pid");
 function isDaemonAlive2() {
   try {
@@ -4620,7 +4734,7 @@ function registerMcpPing(server) {
       title: "MCP Ping",
       description: "Safe local MCP synthetic probe: daemon liveness plus privacy-safe transport/session summary.",
       inputSchema: {
-        _placeholder: z46.string().optional().describe("No input required")
+        _placeholder: z47.string().optional().describe("No input required")
       }
     },
     async () => {
@@ -4655,7 +4769,7 @@ function registerMcpPing(server) {
 // src/mcp/tools/get-auto-wake-status.ts
 init_database();
 init_session_registry();
-import { z as z47 } from "zod";
+import { z as z48 } from "zod";
 init_employees();
 init_task_scope();
 function registerGetAutoWakeStatus(server) {
@@ -4665,7 +4779,7 @@ function registerGetAutoWakeStatus(server) {
       title: "Get Auto-Wake Status",
       description: "Check auto-wake status: orphaned tasks (assigned agent has no running session), tasks blocked by auto-wake retry limit, and session activity.",
       inputSchema: {
-        _placeholder: z47.string().optional().describe("No input required")
+        _placeholder: z48.string().optional().describe("No input required")
       }
     },
     async () => {
@@ -4744,7 +4858,7 @@ function registerGetAutoWakeStatus(server) {
 }
 
 // src/mcp/tools/get-worker-gate.ts
-import { z as z48 } from "zod";
+import { z as z49 } from "zod";
 import { readdirSync, existsSync as existsSync4 } from "fs";
 import path5 from "path";
 init_config();
@@ -4792,7 +4906,7 @@ async function getAgentSessionLoad() {
       return { sessions: [], totalLive: 0, busySessions: 0, idleSessions: 0 };
     }
     const { getClient: getClient2 } = await import("./lib/database.js");
-    const { sessionScopeFilter: sessionScopeFilter2 } = await import("./task-scope-7XCYEZAG.js");
+    const { sessionScopeFilter: sessionScopeFilter2 } = await import("./task-scope-2L5DLU6T.js");
     const client = getClient2();
     const scope = sessionScopeFilter2();
     for (const s of liveAgentSessions) {
@@ -4823,7 +4937,7 @@ function registerGetWorkerGate(server) {
       title: "Get Worker Gate",
       description: "Check worker concurrency gate and agent session utilization. Reports embed/summary worker slots AND live agent sessions with task load. Idle sessions (alive tmux, zero tasks) are excluded from the effective session count \u2014 they should not block new dispatches.",
       inputSchema: {
-        _placeholder: z48.string().optional().describe("No input required")
+        _placeholder: z49.string().optional().describe("No input required")
       }
     },
     async () => {
@@ -4881,7 +4995,7 @@ function registerGetWorkerGate(server) {
 
 // src/mcp/tools/run-memory-audit.ts
 init_database();
-import { z as z49 } from "zod";
+import { z as z50 } from "zod";
 function registerRunMemoryAudit(server) {
   server.registerTool(
     "run_memory_audit",
@@ -4889,8 +5003,8 @@ function registerRunMemoryAudit(server) {
       title: "Run Memory Audit",
       description: "Run a memory health audit: total counts, per-agent breakdown, null vectors, duplicates, FTS sync status, bloated records, and conflict detection (contradictory/superseded memories).",
       inputSchema: {
-        agent_id: z49.string().optional().describe("Filter audit to a specific agent"),
-        project_name: z49.string().optional().describe("Filter audit to a specific project")
+        agent_id: z50.string().optional().describe("Filter audit to a specific agent"),
+        project_name: z50.string().optional().describe("Filter audit to a specific project")
       }
     },
     async ({ agent_id, project_name }) => {
@@ -4926,7 +5040,7 @@ function registerRunMemoryAudit(server) {
 
 // src/mcp/tools/run-consolidation.ts
 init_database();
-import { z as z50 } from "zod";
+import { z as z51 } from "zod";
 init_config();
 function registerRunConsolidation(server) {
   server.registerTool(
@@ -4935,7 +5049,7 @@ function registerRunConsolidation(server) {
       title: "Run Consolidation",
       description: "Run memory consolidation \u2014 synthesizes unconsolidated memories into meta-insights. Use dry_run=true (default) to preview without executing.",
       inputSchema: {
-        dry_run: z50.boolean().default(true).describe("Preview mode \u2014 show what would be consolidated without doing it")
+        dry_run: z51.boolean().default(true).describe("Preview mode \u2014 show what would be consolidated without doing it")
       }
     },
     async ({ dry_run }) => {
@@ -5003,7 +5117,7 @@ function registerRunConsolidation(server) {
 }
 
 // src/mcp/tools/cloud-sync.ts
-import { z as z51 } from "zod";
+import { z as z52 } from "zod";
 init_config();
 init_database();
 function result(text3, isError = false) {
@@ -5086,9 +5200,9 @@ function registerCloudSync(server) {
       title: "Cloud Sync",
       description: "Consolidated Exe Cloud tool. Supports read-only status, normal sync-now, and explicitly confirmed post-key-rotation re-upload. Does not reveal recovery phrases and does not rotate keys.",
       inputSchema: {
-        action: z51.enum(["status", "sync", "reupload"]).default("sync").describe("Cloud operation. status is read-only; sync is normal sync-now; reupload repairs cloud after key rotation."),
-        force: z51.boolean().default(false).describe("Reserved for sync compatibility; normal cloud sync already runs when requested."),
-        confirm_local_db_source_of_truth: z51.string().optional().describe('Required for action=reupload. Must exactly equal "LOCAL DB IS SOURCE OF TRUTH".')
+        action: z52.enum(["status", "sync", "reupload"]).default("sync").describe("Cloud operation. status is read-only; sync is normal sync-now; reupload repairs cloud after key rotation."),
+        force: z52.boolean().default(false).describe("Reserved for sync compatibility; normal cloud sync already runs when requested."),
+        confirm_local_db_source_of_truth: z52.string().optional().describe('Required for action=reupload. Must exactly equal "LOCAL DB IS SOURCE OF TRUTH".')
       }
     },
     async ({ action = "sync", confirm_local_db_source_of_truth }) => {
@@ -5160,7 +5274,7 @@ function registerCloudSync(server) {
 }
 
 // src/mcp/tools/orchestration-phase.ts
-import { z as z52 } from "zod";
+import { z as z53 } from "zod";
 function render(info, prefix) {
   return [
     prefix,
@@ -5179,8 +5293,8 @@ function registerOrchestrationPhase(server) {
       title: "Orchestration Phase",
       description: "View or change the customer-owned orchestration maturity phase. MCP parity for `exe-os org phase`, `exe-os org unlock executives`, and `exe-os org unlock parallel`. This is a recommendation layer, not a blocker; it never exposes recovery phrases or secrets.",
       inputSchema: {
-        action: z52.enum(["status", "set", "unlock_executives", "unlock_parallel"]).default("status"),
-        phase: z52.enum(["phase_1_coo", "phase_2_executives", "phase_3_parallel_org", "1", "2", "3"]).optional().describe("Phase to set when action='set'.")
+        action: z53.enum(["status", "set", "unlock_executives", "unlock_parallel"]).default("status"),
+        phase: z53.enum(["phase_1_coo", "phase_2_executives", "phase_3_parallel_org", "1", "2", "3"]).optional().describe("Phase to set when action='set'.")
       }
     },
     async ({ action = "status", phase }) => {
@@ -5220,7 +5334,7 @@ function registerOrchestrationPhase(server) {
 }
 
 // src/mcp/tools/backup-vps.ts
-import { z as z53 } from "zod";
+import { z as z54 } from "zod";
 
 // src/lib/vps-backup.ts
 import { createCipheriv, createDecipheriv, randomBytes } from "crypto";
@@ -5545,43 +5659,43 @@ function registerBackupVps(server) {
     {
       title: "VPS Backup",
       description: "Run VPS Postgres backup/restore workflows and check status.",
-      inputSchema: z53.discriminatedUnion("action", [
-        z53.object({
-          action: z53.literal("backup"),
-          databaseUrl: z53.string().min(1).describe("Postgres DATABASE_URL to dump from"),
-          encryptionKeyB64: z53.string().min(1).max(4096).optional().describe(
+      inputSchema: z54.discriminatedUnion("action", [
+        z54.object({
+          action: z54.literal("backup"),
+          databaseUrl: z54.string().min(1).describe("Postgres DATABASE_URL to dump from"),
+          encryptionKeyB64: z54.string().min(1).max(4096).optional().describe(
             "Base64 AES-256 key (defaults to local master key if omitted)"
           ),
-          r2Bucket: z53.string().min(1).describe("R2 bucket name"),
-          r2Endpoint: z53.string().min(1).describe("R2 endpoint URL"),
-          r2AccessKeyId: z53.string().min(1).describe("R2 access key ID"),
-          r2SecretAccessKey: z53.string().min(1).describe("R2 secret access key")
+          r2Bucket: z54.string().min(1).describe("R2 bucket name"),
+          r2Endpoint: z54.string().min(1).describe("R2 endpoint URL"),
+          r2AccessKeyId: z54.string().min(1).describe("R2 access key ID"),
+          r2SecretAccessKey: z54.string().min(1).describe("R2 secret access key")
         }),
-        z53.object({
-          action: z53.literal("restore"),
-          databaseUrl: z53.string().min(1).describe("Target Postgres DATABASE_URL for restore"),
-          backupKey: z53.string().min(1).describe("R2 object key to restore from"),
-          encryptionKeyB64: z53.string().min(1).max(4096).optional().describe(
+        z54.object({
+          action: z54.literal("restore"),
+          databaseUrl: z54.string().min(1).describe("Target Postgres DATABASE_URL for restore"),
+          backupKey: z54.string().min(1).describe("R2 object key to restore from"),
+          encryptionKeyB64: z54.string().min(1).max(4096).optional().describe(
             "Base64 AES-256 key (defaults to local master key if omitted)"
           ),
-          r2Bucket: z53.string().min(1).describe("R2 bucket name"),
-          r2Endpoint: z53.string().min(1).describe("R2 endpoint URL"),
-          r2AccessKeyId: z53.string().min(1).describe("R2 access key ID"),
-          r2SecretAccessKey: z53.string().min(1).describe("R2 secret access key")
+          r2Bucket: z54.string().min(1).describe("R2 bucket name"),
+          r2Endpoint: z54.string().min(1).describe("R2 endpoint URL"),
+          r2AccessKeyId: z54.string().min(1).describe("R2 access key ID"),
+          r2SecretAccessKey: z54.string().min(1).describe("R2 secret access key")
         }),
-        z53.object({
-          action: z53.literal("list"),
-          r2Bucket: z53.string().min(1).describe("R2 bucket name"),
-          r2Endpoint: z53.string().min(1).describe("R2 endpoint URL"),
-          r2AccessKeyId: z53.string().min(1).describe("R2 access key ID"),
-          r2SecretAccessKey: z53.string().min(1).describe("R2 secret access key")
+        z54.object({
+          action: z54.literal("list"),
+          r2Bucket: z54.string().min(1).describe("R2 bucket name"),
+          r2Endpoint: z54.string().min(1).describe("R2 endpoint URL"),
+          r2AccessKeyId: z54.string().min(1).describe("R2 access key ID"),
+          r2SecretAccessKey: z54.string().min(1).describe("R2 secret access key")
         }),
-        z53.object({
-          action: z53.literal("health"),
-          r2Bucket: z53.string().min(1).describe("R2 bucket name"),
-          r2Endpoint: z53.string().min(1).describe("R2 endpoint URL"),
-          r2AccessKeyId: z53.string().min(1).describe("R2 access key ID"),
-          r2SecretAccessKey: z53.string().min(1).describe("R2 secret access key")
+        z54.object({
+          action: z54.literal("health"),
+          r2Bucket: z54.string().min(1).describe("R2 bucket name"),
+          r2Endpoint: z54.string().min(1).describe("R2 endpoint URL"),
+          r2AccessKeyId: z54.string().min(1).describe("R2 access key ID"),
+          r2SecretAccessKey: z54.string().min(1).describe("R2 secret access key")
         })
       ])
     },
@@ -5719,7 +5833,7 @@ async function resolveEncryptionKey(providedB64) {
 }
 
 // src/mcp/tools/deploy-client.ts
-import { z as z54 } from "zod";
+import { z as z55 } from "zod";
 import { execFile } from "child_process";
 import { promisify } from "util";
 import path6 from "path";
@@ -5771,9 +5885,9 @@ var HostingerApiClient = class {
     }
     this.lastRequestTime = Date.now();
   }
-  async request(method, path17, body) {
+  async request(method, path18, body) {
     await this.rateLimit();
-    const url = `${this.baseUrl}${path17}`;
+    const url = `${this.baseUrl}${path18}`;
     const headers = {
       Authorization: `Bearer ${this.apiKey}`,
       "Content-Type": "application/json",
@@ -5893,12 +6007,12 @@ function registerDeployClient(server) {
       title: "Deploy Client",
       description: "Provision a Hostinger VPS and deploy exe-os for a client. Creates VPS, waits for ready state, runs Ansible playbook, verifies health.",
       inputSchema: {
-        client_name: z54.string().min(1).describe("Client name (used for hostname and identification)"),
-        domain: z54.string().min(1).describe("Domain name for the deployment (e.g., client.exe.ai)"),
-        region: z54.string().default("jakarta").describe("VPS region (default: jakarta)"),
-        plan: z54.string().default("kvm-2").describe("Hostinger VPS plan (default: kvm-2)"),
-        ssl_email: z54.string().email().describe("Email for Let's Encrypt SSL certificate"),
-        user_id: z54.string().min(1).describe("User/customer ID for inventory tracking")
+        client_name: z55.string().min(1).describe("Client name (used for hostname and identification)"),
+        domain: z55.string().min(1).describe("Domain name for the deployment (e.g., client.exe.ai)"),
+        region: z55.string().default("jakarta").describe("VPS region (default: jakarta)"),
+        plan: z55.string().default("kvm-2").describe("Hostinger VPS plan (default: kvm-2)"),
+        ssl_email: z55.string().email().describe("Email for Let's Encrypt SSL certificate"),
+        user_id: z55.string().min(1).describe("User/customer ID for inventory tracking")
       }
     },
     async ({ client_name, domain, region, plan, ssl_email, user_id }) => {
@@ -6060,7 +6174,7 @@ function buildInventoryRecord(params) {
 
 // src/mcp/tools/get-license-status.ts
 init_license();
-import { z as z55 } from "zod";
+import { z as z56 } from "zod";
 var FEATURES = [
   "cloud_sync",
   "external_agents",
@@ -6074,7 +6188,7 @@ function registerGetLicenseStatus(server) {
       title: "Get License Status",
       description: "Get current license status: plan, validity, feature gates, limits, and expiry.",
       inputSchema: {
-        _dummy: z55.string().optional().describe("Unused \u2014 no input required")
+        _dummy: z56.string().optional().describe("Unused \u2014 no input required")
       }
     },
     async () => {
@@ -6132,7 +6246,7 @@ import path7 from "path";
 import { randomBytes as randomBytes2, randomUUID } from "crypto";
 import { createRequire } from "module";
 import { pathToFileURL } from "url";
-import { z as z56 } from "zod";
+import { z as z57 } from "zod";
 var prismaPromise = null;
 function loadPrisma() {
   if (!prismaPromise) {
@@ -6165,10 +6279,10 @@ function registerCreateLicense(server) {
       title: "Create License",
       description: "Generate an exe_sk_* license key for a user. Stores in billing.licenses. Returns the key to give to the customer.",
       inputSchema: {
-        email: z56.string().email().describe("Customer email address"),
-        name: z56.string().optional().describe("Customer name"),
-        plan: z56.enum(["free", "pro", "team", "agency", "enterprise"]).default("pro").describe("License plan tier"),
-        expires_in_days: z56.number().int().positive().default(365).describe("Days until expiration (default 365)")
+        email: z57.string().email().describe("Customer email address"),
+        name: z57.string().optional().describe("Customer name"),
+        plan: z57.enum(["free", "pro", "team", "agency", "enterprise"]).default("pro").describe("License plan tier"),
+        expires_in_days: z57.number().int().positive().default(365).describe("Days until expiration (default 365)")
       }
     },
     async ({ email, name, plan, expires_in_days }) => {
@@ -6223,7 +6337,7 @@ import os2 from "os";
 import path8 from "path";
 import { createRequire as createRequire2 } from "module";
 import { pathToFileURL as pathToFileURL2 } from "url";
-import { z as z57 } from "zod";
+import { z as z58 } from "zod";
 var prismaPromise2 = null;
 function loadPrisma2() {
   if (!prismaPromise2) {
@@ -6253,7 +6367,7 @@ function registerListLicenses(server) {
       title: "List Licenses",
       description: "List all issued licenses with status (active/expired/revoked). Optionally filter by plan.",
       inputSchema: {
-        plan: z57.enum(["free", "pro", "team", "agency", "enterprise"]).optional().describe("Filter by plan tier (omit for all)")
+        plan: z58.enum(["free", "pro", "team", "agency", "enterprise"]).optional().describe("Filter by plan tier (omit for all)")
       }
     },
     async ({ plan }) => {
@@ -6304,7 +6418,7 @@ function registerListLicenses(server) {
 
 // src/mcp/tools/activate-license.ts
 init_license();
-import { z as z58 } from "zod";
+import { z as z59 } from "zod";
 function registerActivateLicense(server) {
   server.registerTool(
     "activate_license",
@@ -6312,7 +6426,7 @@ function registerActivateLicense(server) {
       title: "Activate License",
       description: "Activate an exe_sk_* license key on this device. Writes to ~/.exe-os/license.key, validates against Postgres, and caches the result.",
       inputSchema: {
-        key: z58.string().startsWith("exe_sk_").describe("License key (exe_sk_*)")
+        key: z59.string().startsWith("exe_sk_").describe("License key (exe_sk_*)")
       }
     },
     async ({ key }) => {
@@ -6358,15 +6472,15 @@ Key saved to ~/.exe-os/license.key. Device ID: ${deviceId}`);
 }
 
 // src/mcp/tools/create-trigger.ts
-import { z as z59 } from "zod";
-var conditionSchema = z59.object({
-  field: z59.string().describe("Dot-path field to evaluate, e.g., 'stage' or 'amount'"),
-  op: z59.enum(["eq", "neq", "gt", "lt", "gte", "lte", "contains", "not_contains"]).describe("Comparison operator"),
-  value: z59.string().or(z59.number()).or(z59.boolean()).describe("Value to compare against")
+import { z as z60 } from "zod";
+var conditionSchema = z60.object({
+  field: z60.string().describe("Dot-path field to evaluate, e.g., 'stage' or 'amount'"),
+  op: z60.enum(["eq", "neq", "gt", "lt", "gte", "lte", "contains", "not_contains"]).describe("Comparison operator"),
+  value: z60.string().or(z60.number()).or(z60.boolean()).describe("Value to compare against")
 });
-var actionSchema = z59.object({
-  type: z59.enum(["send_whatsapp", "send_message", "create_task", "mcp_tool"]).describe("Action type to execute"),
-  params: z59.record(z59.string(), z59.string()).describe(
+var actionSchema = z60.object({
+  type: z60.enum(["send_whatsapp", "send_message", "create_task", "mcp_tool"]).describe("Action type to execute"),
+  params: z60.record(z60.string(), z60.string()).describe(
     "Action parameters. Supports {{record.field}} templates for dynamic values."
   )
 });
@@ -6377,24 +6491,24 @@ function registerCreateTrigger(server) {
       title: "Create Trigger",
       description: "Create a CRM event trigger or scheduled automation. When matching events occur (e.g., Deal.updated with stage=won), configured actions fire automatically (send_whatsapp, create_task, etc.).",
       inputSchema: {
-        name: z59.string().describe("Human-readable trigger name"),
-        event: z59.string().describe(
+        name: z60.string().describe("Human-readable trigger name"),
+        event: z60.string().describe(
           'CRM event to match, e.g., "Deal.updated", "Order.created", "*" for all'
         ),
-        conditions: z59.array(conditionSchema).default([]).describe("Conditions that must all match (AND logic)"),
-        actions: z59.array(actionSchema).min(1).describe("Actions to execute when trigger fires"),
-        project: z59.string().optional().describe("Scope trigger to a specific project"),
-        enabled: z59.boolean().default(true).describe("Whether trigger is active"),
-        schedule: z59.string().optional().describe(
+        conditions: z60.array(conditionSchema).default([]).describe("Conditions that must all match (AND logic)"),
+        actions: z60.array(actionSchema).min(1).describe("Actions to execute when trigger fires"),
+        project: z60.string().optional().describe("Scope trigger to a specific project"),
+        enabled: z60.boolean().default(true).describe("Whether trigger is active"),
+        schedule: z60.string().optional().describe(
           'Cron schedule for time-based triggers, e.g., "0 9 * * *" or "Monday 9am"'
         ),
-        query: z59.string().optional().describe(
+        query: z60.string().optional().describe(
           "CRM GraphQL query to run on schedule (required if schedule is set)"
         )
       }
     },
     async ({ name, event, conditions, actions, project, enabled, schedule, query }) => {
-      const { assertFeature: assertFeature2 } = await import("./plan-limits-UQTXKXJQ.js");
+      const { assertFeature: assertFeature2 } = await import("./plan-limits-3FXBGHWT.js");
       const gatedActions = {
         send_whatsapp: "external_agents",
         update_wiki: "wiki"
@@ -6461,7 +6575,7 @@ Enabled: ${trigger.enabled}` + scheduleInfo;
 }
 
 // src/mcp/tools/list-triggers.ts
-import { z as z60 } from "zod";
+import { z as z61 } from "zod";
 function registerListTriggers(server) {
   server.registerTool(
     "list_triggers",
@@ -6469,7 +6583,7 @@ function registerListTriggers(server) {
       title: "List Triggers",
       description: "List configured CRM event triggers and scheduled automations.",
       inputSchema: {
-        project: z60.string().optional().describe("Filter triggers by project name")
+        project: z61.string().optional().describe("Filter triggers by project name")
       }
     },
     async ({ project }) => {
@@ -6504,7 +6618,7 @@ function registerListTriggers(server) {
 }
 
 // src/mcp/tools/apply-starter-pack.ts
-import { z as z61 } from "zod";
+import { z as z62 } from "zod";
 
 // src/automation/starter-packs/index.ts
 import { readFileSync as readFileSync4, readdirSync as readdirSync2, existsSync as existsSync6 } from "fs";
@@ -6690,17 +6804,17 @@ function registerApplyStarterPack(server) {
       title: "Apply Starter Pack",
       description: "Apply an industry starter pack to a project. Sets up CRM custom objects, pre-wired automation triggers, and wiki seed content. When the pack creates a Client COO (e.g. distribution) and agent_name, company_name, founder_name are all provided, also provisions the COO identity, roster entry, and feedback-loop behavior. Available packs: distribution. More coming.",
       inputSchema: {
-        industry: z61.string().describe(
+        industry: z62.string().describe(
           'Industry pack to apply (e.g., "distribution"). Use without args to list available packs.'
         ),
-        project: z61.string().describe("Project name to scope the triggers to"),
-        agent_name: z61.string().optional().describe(
+        project: z62.string().describe("Project name to scope the triggers to"),
+        agent_name: z62.string().optional().describe(
           "Optional. Lowercase alphanumeric name for the Client COO agent. Required (alongside company_name and founder_name) to provision a COO."
         ),
-        company_name: z61.string().optional().describe(
+        company_name: z62.string().optional().describe(
           "Optional. The client company the COO serves. Required to provision a COO."
         ),
-        founder_name: z61.string().optional().describe(
+        founder_name: z62.string().optional().describe(
           "Optional. The founder the COO reports to. Required to provision a COO."
         )
       }
@@ -6845,7 +6959,7 @@ ${err.message}`
 }
 
 // src/mcp/tools/load-skill.ts
-import { z as z62 } from "zod";
+import { z as z63 } from "zod";
 import { readFileSync as readFileSync5, readdirSync as readdirSync3, statSync } from "fs";
 import path11 from "path";
 import { homedir as homedir4 } from "os";
@@ -6875,7 +6989,7 @@ function registerLoadSkill(server) {
       title: "Load Skill",
       description: "Load domain-specific guidance into your context. Use when you need specialized knowledge for a task (e.g., load_skill('seo') before doing SEO work, load_skill('code-reviewer') before reviewing code). Pass skill_name='list' to see all available skills.",
       inputSchema: {
-        skill_name: z62.string().describe(
+        skill_name: z63.string().describe(
           "Skill to load (e.g. 'seo', 'code-reviewer', 'frontend-design'). Pass 'list' to see all available skills."
         )
       }
@@ -6932,7 +7046,7 @@ ${available.map((s) => `- ${s}`).join("\n")}` : "\n\nNo skills found in ~/.claud
 // src/mcp/tools/export-orchestration.ts
 import { mkdirSync as mkdirSync2, writeFileSync as writeFileSync4 } from "fs";
 import path12 from "path";
-import { z as z63 } from "zod";
+import { z as z64 } from "zod";
 function registerExportOrchestration(server) {
   server.registerTool(
     "export_orchestration",
@@ -6940,7 +7054,7 @@ function registerExportOrchestration(server) {
       title: "Export Orchestration",
       description: "Export roster, identities, behaviors, and customer procedures to a JSON package.",
       inputSchema: {
-        output_path: z63.string().describe("File path to write the JSON package")
+        output_path: z64.string().describe("File path to write the JSON package")
       }
     },
     async ({ output_path }) => {
@@ -6971,7 +7085,7 @@ function registerExportOrchestration(server) {
 
 // src/mcp/tools/import-orchestration.ts
 import { readFileSync as readFileSync6 } from "fs";
-import { z as z64 } from "zod";
+import { z as z65 } from "zod";
 init_employees();
 function registerImportOrchestration(server) {
   server.registerTool(
@@ -6980,8 +7094,8 @@ function registerImportOrchestration(server) {
       title: "Import Orchestration",
       description: "Import roster, identities, behaviors, and procedures from an orchestration package. Restricted to coordinator/founder.",
       inputSchema: {
-        package_path: z64.string().describe("Path to the orchestration package JSON file"),
-        merge_strategy: z64.enum(["replace", "merge"]).default("merge").describe("How to apply the package: both strategies are additive-only \u2014 existing data is never deleted or overwritten")
+        package_path: z65.string().describe("Path to the orchestration package JSON file"),
+        merge_strategy: z65.enum(["replace", "merge"]).default("merge").describe("How to apply the package: both strategies are additive-only \u2014 existing data is never deleted or overwritten")
       }
     },
     async ({ package_path, merge_strategy }) => {
@@ -7021,7 +7135,7 @@ function registerImportOrchestration(server) {
 }
 
 // src/mcp/tools/global-procedure.ts
-import { z as z65 } from "zod";
+import { z as z66 } from "zod";
 init_database();
 init_employees();
 function registerCompanyProcedureTool(server, toolName) {
@@ -7031,12 +7145,12 @@ function registerCompanyProcedureTool(server, toolName) {
       title: "Company Procedure",
       description: "Manage company procedures (customer-owned Layer 0 rules) that supersede identity, expertise, and experience. Actions: store (create new, restricted), list (view all, open), deactivate (soft-delete, restricted).",
       inputSchema: {
-        action: z65.enum(["store", "list", "deactivate"]).describe("Action to perform"),
-        title: z65.string().optional().describe("Short title for the procedure (store)"),
-        content: z65.string().max(500).optional().describe("The procedure content \u2014 clear, actionable instruction (store)"),
-        priority: z65.enum(["p0", "p1", "p2"]).optional().describe("Priority tier. p0 = always (default). p1 = standard. p2 = nice-to-have."),
-        domain: z65.string().optional().describe("Category: workflow, code-style, communication, architecture, testing, security"),
-        procedure_id: z65.string().optional().describe("UUID of the company procedure (deactivate)")
+        action: z66.enum(["store", "list", "deactivate"]).describe("Action to perform"),
+        title: z66.string().optional().describe("Short title for the procedure (store)"),
+        content: z66.string().max(500).optional().describe("The procedure content \u2014 clear, actionable instruction (store)"),
+        priority: z66.enum(["p0", "p1", "p2"]).optional().describe("Priority tier. p0 = always (default). p1 = standard. p2 = nice-to-have."),
+        domain: z66.string().optional().describe("Category: workflow, code-style, communication, architecture, testing, security"),
+        procedure_id: z66.string().optional().describe("UUID of the company procedure (deactivate)")
       }
     },
     async ({ action, title, content, priority, domain, procedure_id }) => {
@@ -7231,44 +7345,44 @@ function registerConfig(server) {
     title: "Config",
     description: "Consolidated COO/admin tool for runtime config, system health, licensing, triggers, orchestration import/export, and company procedures.",
     inputSchema: {
-      action: z66.enum(Object.keys(ACTION_TO_TOOL2)).describe("Admin/config operation"),
-      agent_id: z66.string().optional().describe("Agent id for set_agent_config/agent_spend/session queries"),
-      runtime: z66.string().optional().describe("Runtime for set_agent_config"),
-      model: z66.string().optional().describe("Model for set_agent_config"),
-      reasoning_effort: z66.string().optional().describe("Reasoning effort for Codex agents"),
-      dry_run: z66.boolean().optional().describe("Preview without applying where supported"),
-      fix: z66.boolean().optional().describe("Apply fixes for memory_audit where supported"),
-      verbose: z66.boolean().optional().describe("Verbose output where supported"),
-      project_name: z66.string().optional().describe("Project filter/name"),
-      since: z66.string().optional().describe("ISO lower-bound timestamp"),
-      limit: z66.coerce.number().optional().describe("Result limit"),
-      output_path: z66.string().optional().describe("Output path for export/backup"),
-      input_path: z66.string().optional().describe("Input path for import_orchestration"),
-      strategy: z66.enum(["merge", "replace"]).optional().describe("Import strategy; replace must still be additive-only per platform rules"),
-      license_key: z66.string().optional().describe("License key for activation/status"),
-      email: z66.string().optional().describe("Customer email for license creation"),
-      plan: z66.string().optional().describe("License plan"),
-      name: z66.string().optional().describe("Trigger/starter pack/procedure/client name"),
-      event: z66.string().optional().describe("Trigger event"),
-      conditions: z66.array(z66.record(z66.string(), z66.unknown())).optional().describe("Trigger conditions"),
-      actions: z66.array(z66.record(z66.string(), z66.unknown())).optional().describe("Trigger actions"),
-      enabled: z66.boolean().optional().describe("Trigger enabled flag"),
-      schedule: z66.string().optional().describe("Trigger schedule"),
-      query: z66.string().optional().describe("Trigger query or filter"),
-      skill_name: z66.string().optional().describe("Skill name for load_skill"),
-      pack_name: z66.string().optional().describe("Starter pack name"),
-      title: z66.string().optional().describe("Procedure title"),
-      content: z66.string().optional().describe("Procedure content"),
-      priority: z66.enum(["p0", "p1", "p2"]).optional().describe("Procedure priority"),
-      domain: z66.string().optional().describe("Procedure domain"),
-      procedure_id: z66.string().optional().describe("Procedure id for deactivate"),
-      subaction: z66.enum(["store", "list", "deactivate"]).optional().describe("Nested action for company_procedure/global_procedure"),
-      max_clusters: z66.coerce.number().optional().describe("Consolidation max clusters"),
-      force: z66.boolean().optional().describe("Force operation where supported"),
-      cloud_action: z66.enum(["status", "sync", "reupload"]).optional().describe("Nested operation for action=cloud_sync"),
-      confirm_local_db_source_of_truth: z66.string().optional().describe("Required for cloud_action=reupload; must exactly equal LOCAL DB IS SOURCE OF TRUTH"),
-      domain_name: z66.string().optional().describe("Client deployment domain"),
-      phase: z66.enum(["phase_1_coo", "phase_2_executives", "phase_3_parallel_org", "1", "2", "3"]).optional().describe("Orchestration phase for orchestration_phase action")
+      action: z67.enum(Object.keys(ACTION_TO_TOOL2)).describe("Admin/config operation"),
+      agent_id: z67.string().optional().describe("Agent id for set_agent_config/agent_spend/session queries"),
+      runtime: z67.string().optional().describe("Runtime for set_agent_config"),
+      model: z67.string().optional().describe("Model for set_agent_config"),
+      reasoning_effort: z67.string().optional().describe("Reasoning effort for Codex agents"),
+      dry_run: z67.boolean().optional().describe("Preview without applying where supported"),
+      fix: z67.boolean().optional().describe("Apply fixes for memory_audit where supported"),
+      verbose: z67.boolean().optional().describe("Verbose output where supported"),
+      project_name: z67.string().optional().describe("Project filter/name"),
+      since: z67.string().optional().describe("ISO lower-bound timestamp"),
+      limit: z67.coerce.number().optional().describe("Result limit"),
+      output_path: z67.string().optional().describe("Output path for export/backup"),
+      input_path: z67.string().optional().describe("Input path for import_orchestration"),
+      strategy: z67.enum(["merge", "replace"]).optional().describe("Import strategy; replace must still be additive-only per platform rules"),
+      license_key: z67.string().optional().describe("License key for activation/status"),
+      email: z67.string().optional().describe("Customer email for license creation"),
+      plan: z67.string().optional().describe("License plan"),
+      name: z67.string().optional().describe("Trigger/starter pack/procedure/client name"),
+      event: z67.string().optional().describe("Trigger event"),
+      conditions: z67.array(z67.record(z67.string(), z67.unknown())).optional().describe("Trigger conditions"),
+      actions: z67.array(z67.record(z67.string(), z67.unknown())).optional().describe("Trigger actions"),
+      enabled: z67.boolean().optional().describe("Trigger enabled flag"),
+      schedule: z67.string().optional().describe("Trigger schedule"),
+      query: z67.string().optional().describe("Trigger query or filter"),
+      skill_name: z67.string().optional().describe("Skill name for load_skill"),
+      pack_name: z67.string().optional().describe("Starter pack name"),
+      title: z67.string().optional().describe("Procedure title"),
+      content: z67.string().optional().describe("Procedure content"),
+      priority: z67.enum(["p0", "p1", "p2"]).optional().describe("Procedure priority"),
+      domain: z67.string().optional().describe("Procedure domain"),
+      procedure_id: z67.string().optional().describe("Procedure id for deactivate"),
+      subaction: z67.enum(["store", "list", "deactivate"]).optional().describe("Nested action for company_procedure/global_procedure"),
+      max_clusters: z67.coerce.number().optional().describe("Consolidation max clusters"),
+      force: z67.boolean().optional().describe("Force operation where supported"),
+      cloud_action: z67.enum(["status", "sync", "reupload"]).optional().describe("Nested operation for action=cloud_sync"),
+      confirm_local_db_source_of_truth: z67.string().optional().describe("Required for cloud_action=reupload; must exactly equal LOCAL DB IS SOURCE OF TRUTH"),
+      domain_name: z67.string().optional().describe("Client deployment domain"),
+      phase: z67.enum(["phase_1_coo", "phase_2_executives", "phase_3_parallel_org", "1", "2", "3"]).optional().describe("Orchestration phase for orchestration_phase action")
     }
   }, async (input, extra) => {
     const action = input.action;
@@ -7292,10 +7406,10 @@ function registerConfig(server) {
 }
 
 // src/mcp/tools/wiki.ts
-import { z as z69 } from "zod";
+import { z as z70 } from "zod";
 
 // src/mcp/tools/list-wiki-pages.ts
-import { z as z67 } from "zod";
+import { z as z68 } from "zod";
 var FETCH_TIMEOUT_MS2 = 1e4;
 function registerListWikiPages(server) {
   server.registerTool(
@@ -7304,12 +7418,12 @@ function registerListWikiPages(server) {
       title: "List Wiki Pages",
       description: "List documents in an exe-wiki workspace. Optionally filter by folder.",
       inputSchema: {
-        workspace: z67.string().describe('Wiki workspace slug (e.g., "hygo")'),
-        folder: z67.string().optional().describe("Filter by folder path")
+        workspace: z68.string().describe('Wiki workspace slug (e.g., "hygo")'),
+        folder: z68.string().optional().describe("Filter by folder path")
       }
     },
     async ({ workspace, folder }) => {
-      const { assertFeature: assertFeature2 } = await import("./plan-limits-UQTXKXJQ.js");
+      const { assertFeature: assertFeature2 } = await import("./plan-limits-3FXBGHWT.js");
       await assertFeature2("wiki");
       const apiUrl = process.env.EXE_WIKI_API_URL;
       const apiKey = process.env.EXE_WIKI_API_KEY;
@@ -7394,7 +7508,7 @@ function registerListWikiPages(server) {
 }
 
 // src/mcp/tools/get-wiki-page.ts
-import { z as z68 } from "zod";
+import { z as z69 } from "zod";
 var FETCH_TIMEOUT_MS3 = 1e4;
 function registerGetWikiPage(server) {
   server.registerTool(
@@ -7403,13 +7517,13 @@ function registerGetWikiPage(server) {
       title: "Get Wiki Page",
       description: "Read a wiki page by document ID or title. Returns content, metadata, and folder path. Use title search when you know the page name but not the ID.",
       inputSchema: {
-        workspace: z68.string().describe('Wiki workspace slug (e.g., "hygo")'),
-        document_id: z68.string().optional().describe("Specific document ID (exact lookup)"),
-        title: z68.string().optional().describe("Search by title (fuzzy match)")
+        workspace: z69.string().describe('Wiki workspace slug (e.g., "hygo")'),
+        document_id: z69.string().optional().describe("Specific document ID (exact lookup)"),
+        title: z69.string().optional().describe("Search by title (fuzzy match)")
       }
     },
     async ({ workspace, document_id, title }) => {
-      const { assertFeature: assertFeature2 } = await import("./plan-limits-UQTXKXJQ.js");
+      const { assertFeature: assertFeature2 } = await import("./plan-limits-3FXBGHWT.js");
       await assertFeature2("wiki");
       const apiUrl = process.env.EXE_WIKI_API_URL;
       const apiKey = process.env.EXE_WIKI_API_KEY;
@@ -7587,15 +7701,15 @@ function registerWiki(server) {
       title: "Wiki",
       description: "Consolidated wiki domain tool. Actions: list, get. Wiki writes flow through raw data ingestion/projection into the curated wiki store; direct create/update MCP tools have been removed.",
       inputSchema: {
-        action: z69.enum(["list", "get"]).describe("Wiki read operation. Writes use raw-data ingestion/projection, not direct MCP writes."),
-        workspace: z69.string().optional().describe("Wiki workspace slug"),
-        title: z69.string().optional().describe("Fuzzy page title lookup for get"),
-        content: z69.string().optional().describe("Reserved; wiki writes use raw-data ingestion/projection"),
-        folder: z69.string().optional().describe("Optional folder path for list"),
-        document_id: z69.string().optional().describe("Document ID for get"),
-        mode: z69.enum(["replace", "append"]).optional().describe("Reserved; direct wiki updates are removed"),
-        section: z69.string().optional().describe("Reserved; direct wiki updates are removed"),
-        user_id: z69.string().optional().describe("User ID for ACL enforcement. When set, workspace access is checked against wiki_acl table.")
+        action: z70.enum(["list", "get"]).describe("Wiki read operation. Writes use raw-data ingestion/projection, not direct MCP writes."),
+        workspace: z70.string().optional().describe("Wiki workspace slug"),
+        title: z70.string().optional().describe("Fuzzy page title lookup for get"),
+        content: z70.string().optional().describe("Reserved; wiki writes use raw-data ingestion/projection"),
+        folder: z70.string().optional().describe("Optional folder path for list"),
+        document_id: z70.string().optional().describe("Document ID for get"),
+        mode: z70.enum(["replace", "append"]).optional().describe("Reserved; direct wiki updates are removed"),
+        section: z70.string().optional().describe("Reserved; direct wiki updates are removed"),
+        user_id: z70.string().optional().describe("User ID for ACL enforcement. When set, workspace access is checked against wiki_acl table.")
       }
     },
     async (input, extra) => {
@@ -7604,7 +7718,7 @@ function registerWiki(server) {
       if (!legacyToolName) return errorResult9(`Unknown wiki action: ${String(input.action)}`);
       const { action: _action, user_id, ...legacyArgs } = input;
       if (user_id && legacyArgs.workspace) {
-        const { checkWikiAccess } = await import("./wiki-acl-QY5EXWEQ.js");
+        const { checkWikiAccess } = await import("./wiki-acl-RVCO4WSP.js");
         const { allowed } = await checkWikiAccess(
           String(user_id),
           String(legacyArgs.workspace),
@@ -7630,7 +7744,7 @@ function registerWiki(server) {
 
 // src/mcp/tools/behavior.ts
 init_behaviors();
-import { z as z70 } from "zod";
+import { z as z71 } from "zod";
 init_project_name();
 init_database();
 init_employees();
@@ -7658,13 +7772,13 @@ function registerBehavior(server) {
       title: "Behavior",
       description: "Manage behavioral patterns, corrections, and reusable procedures for employees. Actions: store (create new), list (query existing), audit (creation context), deactivate (soft-delete, restricted).",
       inputSchema: {
-        action: z70.enum(["store", "list", "deactivate", "audit"]).describe("Action to perform"),
-        content: z70.string().max(500).optional().describe("The behavioral instruction \u2014 one clear sentence (store)"),
-        domain: z70.string().optional().describe("Category: workflow, code-style, tool-use, communication, architecture, testing"),
-        priority: z70.enum(["p0", "p1", "p2"]).optional().describe("Priority tier. p0 = always included. p1 = standard (default). p2 = nice-to-have."),
-        agent_id: z70.string().optional().describe("Employee name. Defaults to current agent. Pass 'all' to list everyone's (list only)."),
-        project_name: z70.string().optional().describe("Defaults to current project. Pass 'global' for a behavior that applies everywhere (store)."),
-        behavior_id: z70.string().optional().describe("UUID of the behavior (deactivate)")
+        action: z71.enum(["store", "list", "deactivate", "audit"]).describe("Action to perform"),
+        content: z71.string().max(500).optional().describe("The behavioral instruction \u2014 one clear sentence (store)"),
+        domain: z71.string().optional().describe("Category: workflow, code-style, tool-use, communication, architecture, testing"),
+        priority: z71.enum(["p0", "p1", "p2"]).optional().describe("Priority tier. p0 = always included. p1 = standard (default). p2 = nice-to-have."),
+        agent_id: z71.string().optional().describe("Employee name. Defaults to current agent. Pass 'all' to list everyone's (list only)."),
+        project_name: z71.string().optional().describe("Defaults to current project. Pass 'global' for a behavior that applies everywhere (store)."),
+        behavior_id: z71.string().optional().describe("UUID of the behavior (deactivate)")
       }
     },
     async ({ action, content, domain, priority, agent_id, project_name, behavior_id }) => {
@@ -7885,7 +7999,7 @@ Content: ${row.content}`
 }
 
 // src/mcp/tools/reminder.ts
-import { z as z71 } from "zod";
+import { z as z72 } from "zod";
 function registerReminder(server) {
   server.registerTool(
     "reminder",
@@ -7893,11 +8007,11 @@ function registerReminder(server) {
       title: "Reminder",
       description: "Manage reminders for the founder. Shown in the boot brief every session. Actions: create (set new), list (view active), complete (mark done).",
       inputSchema: {
-        action: z71.enum(["create", "list", "complete"]).describe("Action to perform"),
-        text: z71.string().optional().describe("What to remind about (create)"),
-        due_date: z71.string().optional().describe("Optional due date \u2014 ISO date (2026-04-01) or null for persistent (create)"),
-        reminder_id: z71.string().optional().describe("Reminder UUID or text substring to match (complete)"),
-        include_completed: z71.boolean().optional().default(false).describe("Include completed reminders (list)")
+        action: z72.enum(["create", "list", "complete"]).describe("Action to perform"),
+        text: z72.string().optional().describe("What to remind about (create)"),
+        due_date: z72.string().optional().describe("Optional due date \u2014 ISO date (2026-04-01) or null for persistent (create)"),
+        reminder_id: z72.string().optional().describe("Reminder UUID or text substring to match (complete)"),
+        include_completed: z72.boolean().optional().default(false).describe("Include completed reminders (list)")
       }
     },
     async ({ action, text: text3, due_date, reminder_id, include_completed }) => {
@@ -7950,7 +8064,7 @@ function registerReminder(server) {
 }
 
 // src/mcp/tools/store-global-procedure.ts
-import { z as z72 } from "zod";
+import { z as z73 } from "zod";
 init_employees();
 function registerStoreGlobalProcedure(server) {
   server.registerTool(
@@ -7959,10 +8073,10 @@ function registerStoreGlobalProcedure(server) {
       title: "Store Company Procedure (use global_procedure instead)",
       description: "DEPRECATED \u2014 use global_procedure with action='store'. Create a company procedure (customer-owned Layer 0 rule). RESTRICTED: only coordinator or founder sessions.",
       inputSchema: {
-        title: z72.string().describe("Short title for the procedure"),
-        content: z72.string().max(500).describe("The procedure content \u2014 clear, actionable instruction"),
-        priority: z72.enum(["p0", "p1", "p2"]).optional().describe("Priority tier. p0 = always (default)."),
-        domain: z72.string().optional().describe("Category: workflow, code-style, communication, architecture, testing, security")
+        title: z73.string().describe("Short title for the procedure"),
+        content: z73.string().max(500).describe("The procedure content \u2014 clear, actionable instruction"),
+        priority: z73.enum(["p0", "p1", "p2"]).optional().describe("Priority tier. p0 = always (default)."),
+        domain: z73.string().optional().describe("Category: workflow, code-style, communication, architecture, testing, security")
       }
     },
     async ({ title, content, priority, domain }) => {
@@ -8034,7 +8148,7 @@ ${lines.join("\n\n")}`
 }
 
 // src/mcp/tools/deactivate-global-procedure.ts
-import { z as z73 } from "zod";
+import { z as z74 } from "zod";
 init_database();
 init_employees();
 function registerDeactivateGlobalProcedure(server) {
@@ -8044,7 +8158,7 @@ function registerDeactivateGlobalProcedure(server) {
       title: "Deactivate Company Procedure (use global_procedure instead)",
       description: "DEPRECATED \u2014 use global_procedure with action='deactivate'. Soft-delete a company procedure. RESTRICTED: only coordinator or founder sessions.",
       inputSchema: {
-        procedure_id: z73.string().describe("UUID of the company procedure to deactivate")
+        procedure_id: z74.string().describe("UUID of the company procedure to deactivate")
       }
     },
     async ({ procedure_id }) => {
@@ -8100,7 +8214,7 @@ Content: ${row.content}`
 
 // src/mcp/tools/store-decision.ts
 init_embedder();
-import { z as z74 } from "zod";
+import { z as z75 } from "zod";
 import crypto4 from "crypto";
 init_database();
 init_plan_limits();
@@ -8111,13 +8225,13 @@ function registerStoreDecision(server) {
       title: "Store Decision",
       description: "Store an authoritative decision keyed by domain. Use this when a decision is made that should be canonical \u2014 future lookups via get_decision return the latest decision for that domain. Supports supersession chains.",
       inputSchema: {
-        domain: z74.string().describe(
+        domain: z75.string().describe(
           "Domain key, e.g. 'auth-strategy', 'db-migration-approach', 'api-versioning'"
         ),
-        decision: z74.string().describe("The decision text \u2014 what was decided"),
-        rationale: z74.string().optional().describe("Why this decision was made \u2014 constraints, trade-offs, context"),
-        supersedes: z74.string().optional().describe("UUID of the decision this supersedes (previous decision for this domain)"),
-        project_name: z74.string().optional().describe("Project name")
+        decision: z75.string().describe("The decision text \u2014 what was decided"),
+        rationale: z75.string().optional().describe("Why this decision was made \u2014 constraints, trade-offs, context"),
+        supersedes: z75.string().optional().describe("UUID of the decision this supersedes (previous decision for this domain)"),
+        project_name: z75.string().optional().describe("Project name")
       }
     },
     async ({ domain, decision, rationale, supersedes, project_name }) => {
@@ -8185,7 +8299,7 @@ Supersedes: ${supersedes}` : ""}`
 
 // src/mcp/tools/get-decision.ts
 init_database();
-import { z as z75 } from "zod";
+import { z as z76 } from "zod";
 function registerGetDecision(server) {
   server.registerTool(
     "get_decision",
@@ -8193,7 +8307,7 @@ function registerGetDecision(server) {
       title: "Get Decision",
       description: "Retrieve the latest authoritative decision for a domain. Returns the current active decision and the supersession history.",
       inputSchema: {
-        domain: z75.string().describe(
+        domain: z76.string().describe(
           "Domain key to look up, e.g. 'auth-strategy', 'db-migration-approach'"
         )
       }
@@ -8256,7 +8370,7 @@ function registerGetDecision(server) {
 }
 
 // src/mcp/tools/people-roster.ts
-import { z as z76 } from "zod";
+import { z as z77 } from "zod";
 
 // src/lib/people.ts
 init_config();
@@ -8304,10 +8418,10 @@ function registerAddPerson(server) {
       title: "Add Person",
       description: "Add or update a key human in the people roster. Used for co-founders, partners, customers \u2014 anyone agents need to know about.",
       inputSchema: {
-        name: z76.string().describe("Person's name"),
-        role: z76.string().describe("Their role (e.g. co-founder, customer, partner)"),
-        relationship: z76.string().describe("Relationship to the organization (e.g. co-founder, early adopter, investor)"),
-        notes: z76.string().optional().describe("Additional context about this person")
+        name: z77.string().describe("Person's name"),
+        role: z77.string().describe("Their role (e.g. co-founder, customer, partner)"),
+        relationship: z77.string().describe("Relationship to the organization (e.g. co-founder, early adopter, investor)"),
+        notes: z77.string().optional().describe("Additional context about this person")
       }
     },
     async ({ name, role, relationship, notes }) => {
@@ -8353,7 +8467,7 @@ function registerGetPerson(server) {
       title: "Get Person",
       description: "Look up a specific person by name from the people roster.",
       inputSchema: {
-        name: z76.string().describe("Person's name to look up")
+        name: z77.string().describe("Person's name to look up")
       }
     },
     async ({ name }) => {
@@ -8377,7 +8491,7 @@ Notes: ${person.notes}` : ""}`
 }
 
 // src/mcp/tools/crm.ts
-import { z as z77 } from "zod";
+import { z as z78 } from "zod";
 
 // src/lib/exe-db-read.ts
 import path14 from "path";
@@ -8448,14 +8562,16 @@ function registerCrm(server) {
     title: "CRM",
     description: "Read-only CRM access from exe-db crm schema. Actions: list_people, get_person, list_tables, describe_table.",
     inputSchema: {
-      action: z77.enum(["list_people", "get_person", "list_tables", "describe_table"]).describe("CRM read operation"),
-      id: z77.string().optional().describe("CRM row/person id for get_person"),
-      query: z77.string().optional().describe("Text search for list_people/get_person"),
-      table: z77.string().optional().describe("crm schema table name for describe_table"),
-      limit: z77.coerce.number().int().min(1).max(50).optional().describe("Max rows, capped at 50"),
-      offset: z77.coerce.number().int().min(0).optional().describe("Rows to skip")
-    }
-  }, async ({ action, id, query, table, limit, offset }) => {
+      action: z78.enum(["list_people", "get_person", "list_tables", "describe_table"]).describe("CRM read operation"),
+      id: z78.string().optional().describe("CRM row/person id for get_person"),
+      query: z78.string().optional().describe("Text search for list_people/get_person"),
+      table: z78.string().optional().describe("crm schema table name for describe_table"),
+      ...PaginationSchema,
+      ...DateRangeSchema,
+      ...TextSearchSchema,
+      ...SortSchema
+    }
+  }, async ({ action, id, query, table, limit, offset, date_from, date_to, text_search, sort_by, sort_order }) => {
     try {
       if (action === "get_person" && !id && !query) return text('crm action "get_person" requires id or query', true);
       if (action === "describe_table" && !table) return text('crm action "describe_table" requires table', true);
@@ -8494,15 +8610,28 @@ function registerCrm(server) {
         );
         return rows2.length === 0 ? text("No CRM person found.") : text(JSON.stringify(rows2[0]?.person ?? rows2[0], null, 2));
       }
-      const rows = query ? await prisma.$queryRawUnsafe(
-        `SELECT to_jsonb(p) AS person FROM ${relation} p WHERE to_jsonb(p)::text ILIKE $1 ORDER BY (p.id)::text LIMIT $2 OFFSET $3`,
-        `%${query}%`,
-        lim,
-        off
-      ) : await prisma.$queryRawUnsafe(
-        `SELECT to_jsonb(p) AS person FROM ${relation} p ORDER BY (p.id)::text LIMIT $1 OFFSET $2`,
-        lim,
-        off
+      const searchTerm = text_search || query;
+      const clauses = [];
+      const args = [];
+      if (searchTerm) {
+        args.push(`%${searchTerm}%`);
+        clauses.push(`to_jsonb(p)::text ILIKE $${args.length}`);
+      }
+      if (date_from) {
+        args.push(date_from);
+        clauses.push(`p.created_at >= $${args.length}`);
+      }
+      if (date_to) {
+        args.push(date_to);
+        clauses.push(`p.created_at <= $${args.length}`);
+      }
+      const where = clauses.length > 0 ? `WHERE ${clauses.join(" AND ")}` : "";
+      const orderCol = sort_by && /^[a-zA-Z_]+$/.test(sort_by) ? `p.${sort_by}` : "(p.id)::text";
+      const orderDir = sort_order === "asc" ? "ASC" : "DESC";
+      args.push(lim, off);
+      const rows = await prisma.$queryRawUnsafe(
+        `SELECT to_jsonb(p) AS person FROM ${relation} p ${where} ORDER BY ${orderCol} ${orderDir} LIMIT $${args.length - 1} OFFSET $${args.length}`,
+        ...args
       );
       return text(JSON.stringify({ people: rows.map((r) => r.person ?? r) }, null, 2));
     } catch (err) {
@@ -8512,7 +8641,7 @@ function registerCrm(server) {
 }
 
 // src/mcp/tools/raw-data.ts
-import { z as z78 } from "zod";
+import { z as z79 } from "zod";
 function text2(content, isError = false) {
   return { content: [{ type: "text", text: content }], ...isError ? { isError: true } : {} };
 }
@@ -8521,21 +8650,19 @@ function registerRawData(server) {
     title: "Raw Data",
     description: "Read-only access to exe-db raw.raw_events landing pad. Actions: list_sources, query, get. Results are capped because raw payloads can consume many tokens.",
     inputSchema: {
-      action: z78.enum(["list_sources", "query", "get"]).describe("Raw data read operation"),
-      id: z78.string().optional().describe("raw.raw_events id for action=get"),
-      source: z78.string().optional().describe("Filter by raw source"),
-      event_type: z78.string().optional().describe("Filter by event_type"),
-      query: z78.string().optional().describe("Search payload/metadata text"),
-      processed: z78.boolean().optional().describe("Filter processed_at IS NULL/NOT NULL"),
-      limit: z78.coerce.number().int().min(1).max(50).optional().describe("Max rows, capped at 50"),
-      offset: z78.coerce.number().int().min(0).optional().describe("Rows to skip"),
-      include_payload: z78.boolean().optional().describe("Include full payload JSON. Default false to save tokens."),
-      date_from: z78.string().optional().describe("Filter events after this ISO date (inclusive)"),
-      date_to: z78.string().optional().describe("Filter events before this ISO date (inclusive)"),
-      sort_by: z78.string().optional().describe("Sort field: timestamp (default), source, event_type"),
-      sort_order: z78.enum(["asc", "desc"]).optional().describe("Sort direction (default desc)")
-    }
-  }, async ({ action, id, source, event_type, query, processed, limit, offset, include_payload, date_from, date_to, sort_by, sort_order }) => {
+      action: z79.enum(["list_sources", "query", "get"]).describe("Raw data read operation"),
+      id: z79.string().optional().describe("raw.raw_events id for action=get"),
+      source: z79.string().optional().describe("Filter by raw source"),
+      event_type: z79.string().optional().describe("Filter by event_type"),
+      query: z79.string().optional().describe("Search payload/metadata text"),
+      processed: z79.boolean().optional().describe("Filter processed_at IS NULL/NOT NULL"),
+      ...PaginationSchema,
+      include_payload: z79.boolean().optional().describe("Include full payload JSON. Default false to save tokens."),
+      ...DateRangeSchema,
+      ...SortSchema,
+      ...StructuredFiltersSchema
+    }
+  }, async ({ action, id, source, event_type, query, processed, limit, offset, include_payload, date_from, date_to, sort_by, sort_order, structured_filters }) => {
     try {
       if (action === "get" && !id) return text2('raw_data action "get" requires id', true);
       if (!await relationExists("raw", "raw_events")) {
@@ -8576,6 +8703,14 @@ function registerRawData(server) {
       if (processed !== void 0) clauses.push(processed ? "processed_at IS NOT NULL" : "processed_at IS NULL");
       if (date_from) add("timestamp >= ?", date_from);
       if (date_to) add("timestamp <= ?", date_to);
+      const sfClauses = buildStructuredFilterClauses(
+        structured_filters,
+        { timestamp: "timestamp", source: "source", event_type: "event_type" }
+      );
+      for (const sf of sfClauses) {
+        args.push(...sf.args);
+        clauses.push(sf.sql.replace(/\?/g, () => `$${args.length}`));
+      }
       const lim = Math.min(limit ?? 25, 50);
       const off = offset ?? 0;
       const payloadSelect = include_payload ? "payload," : "jsonb_typeof(payload) AS payload_type,";
@@ -8598,9 +8733,9 @@ function registerRawData(server) {
 
 // src/mcp/tools/company-actions.ts
 init_config();
-import { z as z79 } from "zod";
+import { z as z80 } from "zod";
 var FETCH_TIMEOUT_MS4 = 15e3;
-var ACTION = z79.enum(["list_connectors", "describe_connector", "preview", "execute", "list_runs", "get_run"]);
+var ACTION = z80.enum(["list_connectors", "describe_connector", "preview", "execute", "list_runs", "get_run"]);
 function format(payload) {
   return ["# Company Actions", "", JSON.stringify(payload, null, 2)].join("\n");
 }
@@ -8612,13 +8747,13 @@ function registerCompanyActions(server) {
       description: "Preview and execute external connector actions (Asana, WhatsApp) through exe-gateway with audit/safety gates.",
       inputSchema: {
         action: ACTION.describe("list_connectors, describe_connector, preview, execute, list_runs, get_run"),
-        connector: z79.string().optional().describe("Connector to use, e.g. asana, whatsapp, airtable, notion"),
-        connector_ref: z79.string().optional().describe("Exact connector ref from list_connectors when connector names overlap"),
-        operation: z79.string().optional().describe("Connector operation, e.g. create_task or send_message"),
-        payload: z79.record(z79.string(), z79.unknown()).optional().describe("Operation payload"),
-        idempotency_key: z79.string().optional().describe("Stable key to prevent duplicate execution"),
-        confirm_token: z79.string().optional().describe("Optional future approval token"),
-        run_id: z79.string().optional().describe("Run id for get_run")
+        connector: z80.string().optional().describe("Connector to use, e.g. asana, whatsapp, airtable, notion"),
+        connector_ref: z80.string().optional().describe("Exact connector ref from list_connectors when connector names overlap"),
+        operation: z80.string().optional().describe("Connector operation, e.g. create_task or send_message"),
+        payload: z80.record(z80.string(), z80.unknown()).optional().describe("Operation payload"),
+        idempotency_key: z80.string().optional().describe("Stable key to prevent duplicate execution"),
+        confirm_token: z80.string().optional().describe("Optional future approval token"),
+        run_id: z80.string().optional().describe("Run id for get_run")
       }
     },
     async (input) => {
@@ -8663,8 +8798,8 @@ function registerCompanyActions(server) {
 }
 
 // src/mcp/tools/workflow.ts
-import { z as z80 } from "zod";
-var ACTION2 = z80.enum([
+import { z as z81 } from "zod";
+var ACTION2 = z81.enum([
   "create_workflow",
   "start_workflow",
   "get_workflow_status",
@@ -8672,23 +8807,23 @@ var ACTION2 = z80.enum([
   "list_workflows",
   "list_instances"
 ]);
-var StepSchema = z80.object({
-  name: z80.string().describe("Human-readable step name"),
-  type: z80.enum(["execute_action", "wait_for_approval", "conditional"]).describe("Step type"),
-  action: z80.object({
-    type: z80.enum(["send_whatsapp", "send_message", "create_task", "update_wiki", "mcp_tool"]),
-    params: z80.record(z80.string(), z80.string()),
-    requires_approval: z80.boolean().optional()
+var StepSchema = z81.object({
+  name: z81.string().describe("Human-readable step name"),
+  type: z81.enum(["execute_action", "wait_for_approval", "conditional"]).describe("Step type"),
+  action: z81.object({
+    type: z81.enum(["send_whatsapp", "send_message", "create_task", "update_wiki", "mcp_tool"]),
+    params: z81.record(z81.string(), z81.string()),
+    requires_approval: z81.boolean().optional()
   }).optional().describe("Action to execute (for execute_action steps)"),
-  connector: z80.string().optional().describe("Connector name (e.g., asana, whatsapp)"),
-  operation: z80.string().optional().describe("Connector operation (e.g., create_task)"),
-  payload: z80.record(z80.string(), z80.unknown()).optional().describe("Operation payload"),
-  condition: z80.object({
-    expression: z80.string().describe("Expression like '{{step.1.result.status}} == completed'"),
-    then_step: z80.number().optional(),
-    else_step: z80.number().optional()
+  connector: z81.string().optional().describe("Connector name (e.g., asana, whatsapp)"),
+  operation: z81.string().optional().describe("Connector operation (e.g., create_task)"),
+  payload: z81.record(z81.string(), z81.unknown()).optional().describe("Operation payload"),
+  condition: z81.object({
+    expression: z81.string().describe("Expression like '{{step.1.result.status}} == completed'"),
+    then_step: z81.number().optional(),
+    else_step: z81.number().optional()
   }).optional().describe("Condition for conditional steps"),
-  approval_message: z80.string().optional().describe("Message shown when waiting for approval")
+  approval_message: z81.string().optional().describe("Message shown when waiting for approval")
 });
 function registerWorkflowTool(server) {
   server.registerTool(
@@ -8698,14 +8833,14 @@ function registerWorkflowTool(server) {
       description: "Create, run, and manage multi-step workflows that chain actions with approval gates. Steps reference previous outputs via {{step.N.result}}. Actions: create_workflow, start_workflow, get_workflow_status, approve_workflow_step, list_workflows, list_instances.",
       inputSchema: {
         action: ACTION2.describe("create_workflow | start_workflow | get_workflow_status | approve_workflow_step | list_workflows | list_instances"),
-        name: z80.string().optional().describe("Workflow name (for create_workflow)"),
-        description: z80.string().optional().describe("Workflow description (for create_workflow)"),
-        steps: z80.array(StepSchema).optional().describe("Workflow steps (for create_workflow)"),
-        definition_id: z80.string().optional().describe("Workflow definition ID (for start_workflow)"),
-        instance_id: z80.string().optional().describe("Workflow instance ID (for get_workflow_status, approve_workflow_step)"),
-        context: z80.record(z80.string(), z80.unknown()).optional().describe("Initial context/record (for start_workflow)"),
-        approved: z80.boolean().optional().describe("Approve (true) or reject (false) the step (for approve_workflow_step)"),
-        status_filter: z80.string().optional().describe("Filter instances by status (for list_instances)")
+        name: z81.string().optional().describe("Workflow name (for create_workflow)"),
+        description: z81.string().optional().describe("Workflow description (for create_workflow)"),
+        steps: z81.array(StepSchema).optional().describe("Workflow steps (for create_workflow)"),
+        definition_id: z81.string().optional().describe("Workflow definition ID (for start_workflow)"),
+        instance_id: z81.string().optional().describe("Workflow instance ID (for get_workflow_status, approve_workflow_step)"),
+        context: z81.record(z81.string(), z81.unknown()).optional().describe("Initial context/record (for start_workflow)"),
+        approved: z81.boolean().optional().describe("Approve (true) or reject (false) the step (for approve_workflow_step)"),
+        status_filter: z81.string().optional().describe("Filter instances by status (for list_instances)")
       }
     },
     async (input) => {
@@ -8718,7 +8853,7 @@ function registerWorkflowTool(server) {
         getWorkflowInstance,
         listWorkflowInstances,
         approveWorkflowStep
-      } = await import("./workflow-engine-A6K4MHN3.js");
+      } = await import("./workflow-engine-7W4MSNBF.js");
       try {
         switch (input.action) {
           case "create_workflow": {
@@ -8840,21 +8975,73 @@ function formatInstanceStatus(inst, def) {
   return lines.join("\n");
 }
 
+// src/mcp/tools/file-copy.ts
+import { z as z82 } from "zod";
+import { copyFileSync, existsSync as existsSync9, mkdirSync as mkdirSync3, statSync as statSync2 } from "fs";
+import path15 from "path";
+function registerFileCopy(server) {
+  server.registerTool(
+    "file_copy",
+    {
+      title: "File Copy",
+      description: "Copy a file from source to destination without streaming through the LLM. Saves tokens for literal file copies.",
+      inputSchema: {
+        source: z82.string().describe("Source file path (absolute or relative to cwd)"),
+        destination: z82.string().describe("Destination file path (absolute or relative to cwd)"),
+        overwrite: z82.boolean().optional().default(false).describe("Overwrite destination if it exists")
+      }
+    },
+    async ({ source, destination, overwrite }) => {
+      try {
+        const srcPath = path15.resolve(source);
+        const dstPath = path15.resolve(destination);
+        if (!existsSync9(srcPath)) {
+          return { content: [{ type: "text", text: `Source file not found: ${srcPath}` }], isError: true };
+        }
+        const srcStat = statSync2(srcPath);
+        if (!srcStat.isFile()) {
+          return { content: [{ type: "text", text: `Source is not a file: ${srcPath}` }], isError: true };
+        }
+        if (existsSync9(dstPath) && !overwrite) {
+          return { content: [{ type: "text", text: `Destination already exists: ${dstPath}. Set overwrite=true to replace.` }], isError: true };
+        }
+        const dstDir = path15.dirname(dstPath);
+        if (!existsSync9(dstDir)) {
+          mkdirSync3(dstDir, { recursive: true });
+        }
+        copyFileSync(srcPath, dstPath);
+        const sizeMB = (srcStat.size / (1024 * 1024)).toFixed(2);
+        return {
+          content: [{
+            type: "text",
+            text: `Copied ${srcPath} \u2192 ${dstPath} (${sizeMB} MB)`
+          }]
+        };
+      } catch (err) {
+        return {
+          content: [{ type: "text", text: `File copy failed: ${err instanceof Error ? err.message : String(err)}` }],
+          isError: true
+        };
+      }
+    }
+  );
+}
+
 // src/mcp/tools/create-bug-report.ts
 init_embedder();
-import { z as z81 } from "zod";
+import { z as z83 } from "zod";
 import crypto5 from "crypto";
 import { mkdir as mkdir2, writeFile as writeFile2 } from "fs/promises";
-import path15 from "path";
+import path16 from "path";
 init_config();
 init_license();
-var CLASSIFICATION = z81.enum([
+var CLASSIFICATION = z83.enum([
   "upstream_bug",
   "customer_customization",
   "emergency_hotfix",
   "unclear"
 ]);
-var SEVERITY = z81.enum(["p0", "p1", "p2", "p3"]);
+var SEVERITY = z83.enum(["p0", "p1", "p2", "p3"]);
 function slugify(input) {
   return input.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 80) || "bug-report";
 }
@@ -8935,23 +9122,23 @@ function registerCreateBugReport(server) {
       title: "Create Bug Report",
       description: "Classify and file an exe-os issue as upstream_bug, customer_customization, emergency_hotfix, or unclear. Writes a local report, stores memory, and optionally sends to AskExe support when a support endpoint is configured.",
       inputSchema: {
-        title: z81.string().min(3).describe("Short descriptive title"),
+        title: z83.string().min(3).describe("Short descriptive title"),
         classification: CLASSIFICATION.describe(
           "upstream_bug = platform defect; customer_customization = local preference; emergency_hotfix = temporary local patch; unclear = needs maintainer triage"
         ),
         severity: SEVERITY.default("p2").describe("p0 critical \u2192 p3 low"),
-        summary: z81.string().min(10).describe("What happened and why it matters"),
-        customer_impact: z81.string().optional().describe("How this affects the customer/founder"),
-        reproduction_steps: z81.array(z81.string()).optional().describe("Steps to reproduce"),
-        expected: z81.string().optional().describe("Expected behavior"),
-        actual: z81.string().optional().describe("Actual behavior"),
-        files_changed: z81.array(z81.string()).optional().describe("Files changed or suspected"),
-        workaround: z81.string().optional().describe("Temporary local workaround/hotfix, if any"),
-        local_patch_diff: z81.string().optional().describe("Small local diff or patch summary"),
-        product: z81.string().optional().describe("Product this bug is for: exe-os, exe-create, exe-wiki, exe-gateway, exe-crm, exe-build. Defaults to exe-os."),
-        package_version: z81.string().optional().describe("Installed package version"),
-        project_name: z81.string().optional().describe("Project/customer context"),
-        send_upstream: z81.boolean().default(true).describe("Attempt to POST to configured AskExe support endpoint")
+        summary: z83.string().min(10).describe("What happened and why it matters"),
+        customer_impact: z83.string().optional().describe("How this affects the customer/founder"),
+        reproduction_steps: z83.array(z83.string()).optional().describe("Steps to reproduce"),
+        expected: z83.string().optional().describe("Expected behavior"),
+        actual: z83.string().optional().describe("Actual behavior"),
+        files_changed: z83.array(z83.string()).optional().describe("Files changed or suspected"),
+        workaround: z83.string().optional().describe("Temporary local workaround/hotfix, if any"),
+        local_patch_diff: z83.string().optional().describe("Small local diff or patch summary"),
+        product: z83.string().optional().describe("Product this bug is for: exe-os, exe-create, exe-wiki, exe-gateway, exe-crm, exe-build. Defaults to exe-os."),
+        package_version: z83.string().optional().describe("Installed package version"),
+        project_name: z83.string().optional().describe("Project/customer context"),
+        send_upstream: z83.boolean().default(true).describe("Attempt to POST to configured AskExe support endpoint")
       }
     },
     async ({
@@ -9003,9 +9190,9 @@ function registerCreateBugReport(server) {
         filesChanged: files_changed,
         projectName: project_name
       });
-      const outDir = path15.join(EXE_AI_DIR, "bug-reports");
+      const outDir = path16.join(EXE_AI_DIR, "bug-reports");
       await mkdir2(outDir, { recursive: true });
-      const reportPath = path15.join(outDir, `${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}-${slugify(title)}-${id.slice(0, 8)}.md`);
+      const reportPath = path16.join(outDir, `${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}-${slugify(title)}-${id.slice(0, 8)}.md`);
       await writeFile2(reportPath, markdown, "utf-8");
       let vector = null;
       try {
@@ -9074,19 +9261,19 @@ Upstream status: ${upstreamStatus}`
 
 // src/mcp/tools/create-feature-request.ts
 init_embedder();
-import { z as z82 } from "zod";
+import { z as z84 } from "zod";
 import crypto6 from "crypto";
 import { mkdir as mkdir3, writeFile as writeFile3 } from "fs/promises";
-import path16 from "path";
+import path17 from "path";
 init_config();
 init_license();
-var CATEGORY = z82.enum([
+var CATEGORY = z84.enum([
   "upstream_feature",
   "local_customization",
   "integration",
   "unclear"
 ]);
-var PRIORITY = z82.enum(["p0", "p1", "p2", "p3"]);
+var PRIORITY = z84.enum(["p0", "p1", "p2", "p3"]);
 function slugify2(input) {
   return input.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 80) || "feature-request";
 }
@@ -9154,20 +9341,20 @@ function registerCreateFeatureRequest(server) {
       title: "Create Feature Request",
       description: "File a feature request for exe-os: upstream_feature (requires platform changes), local_customization (configurable in customer layers), integration (third-party), or unclear. Writes a local report, stores memory, and optionally sends to AskExe.",
       inputSchema: {
-        title: z82.string().min(3).describe("Short descriptive title"),
+        title: z84.string().min(3).describe("Short descriptive title"),
         category: CATEGORY.describe(
           "upstream_feature = platform capability change; local_customization = configurable in customer layers; integration = third-party connector; unclear = needs product triage"
         ),
         priority: PRIORITY.default("p2").describe("p0 critical \u2192 p3 low"),
-        description: z82.string().min(10).describe("What capability is needed and why"),
-        use_case: z82.string().optional().describe("Concrete scenario where this feature would be used"),
-        current_workaround: z82.string().optional().describe("How the need is currently addressed, if at all"),
-        proposed_solution: z82.string().optional().describe("Suggested implementation approach"),
-        business_impact: z82.string().optional().describe("Impact on business/workflow if this ships"),
-        product: z82.string().optional().describe("Product this feature is for: exe-os, exe-create, exe-wiki, exe-gateway, exe-crm, exe-build. Defaults to exe-os."),
-        package_version: z82.string().optional().describe("Installed package version"),
-        project_name: z82.string().optional().describe("Project/customer context"),
-        send_upstream: z82.boolean().default(true).describe("Attempt to POST to configured AskExe support endpoint")
+        description: z84.string().min(10).describe("What capability is needed and why"),
+        use_case: z84.string().optional().describe("Concrete scenario where this feature would be used"),
+        current_workaround: z84.string().optional().describe("How the need is currently addressed, if at all"),
+        proposed_solution: z84.string().optional().describe("Suggested implementation approach"),
+        business_impact: z84.string().optional().describe("Impact on business/workflow if this ships"),
+        product: z84.string().optional().describe("Product this feature is for: exe-os, exe-create, exe-wiki, exe-gateway, exe-crm, exe-build. Defaults to exe-os."),
+        package_version: z84.string().optional().describe("Installed package version"),
+        project_name: z84.string().optional().describe("Project/customer context"),
+        send_upstream: z84.boolean().default(true).describe("Attempt to POST to configured AskExe support endpoint")
       }
     },
     async ({
@@ -9204,9 +9391,9 @@ function registerCreateFeatureRequest(server) {
         businessImpact: business_impact,
         projectName: project_name
       });
-      const outDir = path16.join(EXE_AI_DIR, "feature-requests");
+      const outDir = path17.join(EXE_AI_DIR, "feature-requests");
       await mkdir3(outDir, { recursive: true });
-      const reportPath = path16.join(outDir, `${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}-${slugify2(title)}-${id.slice(0, 8)}.md`);
+      const reportPath = path17.join(outDir, `${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}-${slugify2(title)}-${id.slice(0, 8)}.md`);
       await writeFile3(reportPath, markdown, "utf-8");
       let vector = null;
       try {
@@ -9269,7 +9456,7 @@ Upstream status: ${upstreamStatus}`
 }
 
 // src/mcp/tools/support.ts
-import { z as z83 } from "zod";
+import { z as z85 } from "zod";
 init_license();
 function formatRows(rows, mode) {
   const lines = [`exe-os support ${mode}`, ""];
@@ -9311,7 +9498,7 @@ function registerSupportTools(server) {
       title: "Support Test",
       description: "End-to-end support intake smoke test. Files a clearly marked test report upstream and auto-closes it on AskExe machines with admin credentials.",
       inputSchema: {
-        project: z83.string().default("support-smoke").describe("Customer/project name, e.g. hygo")
+        project: z85.string().default("support-smoke").describe("Customer/project name, e.g. hygo")
       }
     },
     async ({ project }) => {
@@ -9329,8 +9516,8 @@ function registerSupportTools(server) {
       title: "My Bug Reports",
       description: "List bug reports you've filed, scoped to your license. Shows status (open/triaged/fixed/closed), severity, and fixed_version so you know when to update.",
       inputSchema: {
-        status: z83.enum(["all", "open", "triaged", "fixed", "closed", "wontfix"]).default("all").describe("Filter by status. Default: all"),
-        limit: z83.number().min(1).max(50).default(25).describe("Max results")
+        status: z85.enum(["all", "open", "triaged", "fixed", "closed", "wontfix"]).default("all").describe("Filter by status. Default: all"),
+        limit: z85.number().min(1).max(50).default(25).describe("Max results")
       }
     },
     async ({ status: status2, limit }) => {
@@ -9395,8 +9582,8 @@ function registerSupportTools(server) {
       title: "My Feature Requests",
       description: "List feature requests you've filed, scoped to your license. Shows status (open/planned/in_progress/shipped/closed), priority, and shipped_version so you know when to update.",
       inputSchema: {
-        status: z83.enum(["all", "open", "planned", "in_progress", "shipped", "closed", "wontdo"]).default("all").describe("Filter by status. Default: all"),
-        limit: z83.number().min(1).max(50).default(25).describe("Max results")
+        status: z85.enum(["all", "open", "planned", "in_progress", "shipped", "closed", "wontdo"]).default("all").describe("Filter by status. Default: all"),
+        limit: z85.number().min(1).max(50).default(25).describe("Max results")
       }
     },
     async ({ status: status2, limit }) => {
@@ -9461,7 +9648,7 @@ function registerSupportTools(server) {
 // src/mcp/tools/cli-parity.ts
 import { execFile as execFile2 } from "child_process";
 import { promisify as promisify2 } from "util";
-import { z as z84 } from "zod";
+import { z as z86 } from "zod";
 var execFileAsync2 = promisify2(execFile2);
 async function runCommand(command, args, timeout = 6e4) {
   const printable = [command, ...args].join(" ");
@@ -9497,12 +9684,12 @@ function registerCliParityTools(server) {
     title: "Doctor",
     description: "Run exe-os doctor audit. Defaults to read-only diagnostics; optional dry-run/fix flags mirror CLI.",
     inputSchema: {
-      agent: z84.string().optional(),
-      project: z84.string().optional(),
-      verbose: z84.boolean().default(false),
-      conflicts: z84.boolean().default(false),
-      dry_run: z84.boolean().default(false),
-      fix: z84.boolean().default(false)
+      agent: z86.string().optional(),
+      project: z86.string().optional(),
+      verbose: z86.boolean().default(false),
+      conflicts: z86.boolean().default(false),
+      dry_run: z86.boolean().default(false),
+      fix: z86.boolean().default(false)
     }
   }, async ({ agent, project, verbose, conflicts, dry_run, fix }) => {
     const args = [];
@@ -9519,9 +9706,9 @@ function registerCliParityTools(server) {
     title: "Rename Employee",
     description: "Rename an employee using the same path as `exe-os rename <old> <new>`. Use for customer roster/identity renames.",
     inputSchema: {
-      old_name: z84.string().min(1),
-      new_name: z84.string().min(1),
-      dry_run: z84.boolean().default(false)
+      old_name: z86.string().min(1),
+      new_name: z86.string().min(1),
+      dry_run: z86.boolean().default(false)
     }
   }, async ({ old_name, new_name, dry_run }) => {
     if (dry_run) {
@@ -9534,7 +9721,7 @@ function registerCliParityTools(server) {
   server.registerTool("status_brief", {
     title: "Status Brief",
     description: "Return current employee/tmux status. Mirrors `exe-status` and supports optional deep view for one employee.",
-    inputSchema: { employee: z84.string().optional() }
+    inputSchema: { employee: z86.string().optional() }
   }, async ({ employee }) => {
     const text3 = await status(employee);
     return result2(text3, { ok: true, employee: employee ?? null });
@@ -9542,7 +9729,7 @@ function registerCliParityTools(server) {
   server.registerTool("pending_work_summary", {
     title: "Pending Work Summary",
     description: "Return pending reviews, messages, and notifications using the same summaries as the CLI tools.",
-    inputSchema: { agent: z84.string().optional() }
+    inputSchema: { agent: z86.string().optional() }
   }, async ({ agent }) => {
     const settled = await Promise.allSettled([
       runCommand("exe-pending-reviews", [], 3e4),
@@ -9566,7 +9753,7 @@ function registerCliParityTools(server) {
   server.registerTool("key_rotation_preflight", {
     title: "Key Rotation Preflight",
     description: "Dry-run key rotation/update preflight. No destructive changes.",
-    inputSchema: { mode: z84.enum(["rotate", "update"]).default("rotate") }
+    inputSchema: { mode: z86.enum(["rotate", "update"]).default("rotate") }
   }, async ({ mode }) => {
     const out = await runCommand("exe-os", ["key", mode, "--dry-run"], 6e4);
     return result2(out.text, { ok: out.ok, command: out.command, mode }, !out.ok);
@@ -9585,11 +9772,11 @@ function registerCliParityTools(server) {
     title: "Stack Update Check",
     description: "Plan/check a customer stack update without applying Docker changes. Mirrors `exe-os stack-update --check`.",
     inputSchema: {
-      target: z84.string().optional(),
-      manifest: z84.string().optional(),
-      compose_file: z84.string().optional(),
-      env_file: z84.string().optional(),
-      deployment_persona: z84.enum(["customer", "askexe-control-plane"]).default("customer")
+      target: z86.string().optional(),
+      manifest: z86.string().optional(),
+      compose_file: z86.string().optional(),
+      env_file: z86.string().optional(),
+      deployment_persona: z86.enum(["customer", "askexe-control-plane"]).default("customer")
     }
   }, async ({ target, manifest, compose_file, env_file, deployment_persona }) => {
     const args = ["stack-update", "--check", "--deployment-persona", deployment_persona];
@@ -9611,8 +9798,8 @@ function registerCliParityTools(server) {
 }
 
 // src/mcp/tools/get-session-events.ts
-import { z as z85 } from "zod";
-var EVENT_TYPE = z85.enum([
+import { z as z87 } from "zod";
+var EVENT_TYPE = z87.enum([
   "user_prompt",
   "assistant_response",
   "tool_call",
@@ -9642,11 +9829,11 @@ function registerGetSessionEvents(server) {
       title: "Get Session Events",
       description: "Return exact recent chronological user prompts, assistant responses, and tool calls from the append-only session journal. Use this when asked what happened last, not semantic memory search.",
       inputSchema: {
-        agent_id: z85.string().optional().describe("Agent to inspect. Defaults to active agent. COO/CTO may inspect others."),
-        session_id: z85.string().optional().describe("Optional exact runtime session id."),
+        agent_id: z87.string().optional().describe("Agent to inspect. Defaults to active agent. COO/CTO may inspect others."),
+        session_id: z87.string().optional().describe("Optional exact runtime session id."),
         event_type: EVENT_TYPE.optional().describe("Filter to one event type."),
-        project_name: z85.string().optional().describe("Optional project filter. Pass 'all' for all projects."),
-        limit: z85.number().int().min(1).max(100).default(20).describe("Number of events to return.")
+        project_name: z87.string().optional().describe("Optional project filter. Pass 'all' for all projects."),
+        limit: z87.number().int().min(1).max(100).default(20).describe("Number of events to return.")
       }
     },
     async ({ agent_id, session_id, event_type, project_name, limit }) => {
@@ -9682,8 +9869,8 @@ function registerGetLastAssistantResponse(server) {
       title: "Get Last Assistant Response",
       description: "Return the exact last assistant response for an agent from the session event journal. Use for 'what was the last thing you said?'",
       inputSchema: {
-        agent_id: z85.string().optional().describe("Agent to inspect. Defaults to active agent. COO/CTO may inspect others."),
-        project_name: z85.string().optional().describe("Optional project filter. Pass 'all' for all projects.")
+        agent_id: z87.string().optional().describe("Agent to inspect. Defaults to active agent. COO/CTO may inspect others."),
+        project_name: z87.string().optional().describe("Optional project filter. Pass 'all' for all projects.")
       }
     },
     async ({ agent_id, project_name }) => {
@@ -9713,7 +9900,7 @@ function registerGetLastAssistantResponse(server) {
 }
 
 // src/mcp/tools/code-context.ts
-import { z as z86 } from "zod";
+import { z as z88 } from "zod";
 function errorResult10(text3) {
   return { content: [{ type: "text", text: text3 }], isError: true };
 }
@@ -9725,20 +9912,20 @@ function registerCodeContext(server) {
     title: "Code Context",
     description: "Persistent codebase context engine with semantic vector search. One consolidated tool to avoid MCP bloat. Actions: index (structural only), index_embed (structural + vector embeddings), search (semantic+lexical hybrid), trace, blast_radius, stats. Search uses RRF fusion of Jina v5 embeddings (cosine similarity) + lexical scoring. Falls back to lexical if daemon unavailable.",
     inputSchema: {
-      action: z86.enum(["index", "index_embed", "search", "trace", "blast_radius", "stats"]).describe("Code context operation. index_embed = index + generate embeddings for semantic search."),
-      project_root: z86.string().optional().describe("Repository root. Defaults to current working directory."),
-      query: z86.string().optional().describe("Natural language search query (e.g. 'authentication logic', 'database migration'). Semantic search finds conceptual matches, not just keywords."),
-      symbol: z86.string().optional().describe("Symbol/function/class/type name for trace or blast_radius"),
-      file_path: z86.string().optional().describe("File path for blast_radius"),
-      force: z86.boolean().optional().describe("Force rebuild before answering"),
-      limit: z86.coerce.number().int().min(1).max(100).optional().describe("Max results"),
-      offset: z86.coerce.number().int().min(0).optional().describe("Search pagination offset"),
-      refresh_index: z86.boolean().optional().describe("Refresh/rebuild index before searching"),
-      languages: z86.array(z86.string()).optional().describe('Language filters, e.g. ["python", "typescript"]'),
-      paths: z86.array(z86.string()).optional().describe("Path/glob filters"),
-      depth: z86.coerce.number().int().min(1).max(5).optional().describe("Dependent traversal depth for blast_radius"),
-      max_files: z86.coerce.number().int().min(1).max(1e4).optional().describe("Max code files to index"),
-      lexical_only: z86.boolean().optional().describe("Force lexical-only search (skip vector similarity). Default: false \u2014 uses semantic hybrid search.")
+      action: z88.enum(["index", "index_embed", "search", "trace", "blast_radius", "stats"]).describe("Code context operation. index_embed = index + generate embeddings for semantic search."),
+      project_root: z88.string().optional().describe("Repository root. Defaults to current working directory."),
+      query: z88.string().optional().describe("Natural language search query (e.g. 'authentication logic', 'database migration'). Semantic search finds conceptual matches, not just keywords."),
+      symbol: z88.string().optional().describe("Symbol/function/class/type name for trace or blast_radius"),
+      file_path: z88.string().optional().describe("File path for blast_radius"),
+      force: z88.boolean().optional().describe("Force rebuild before answering"),
+      limit: z88.coerce.number().int().min(1).max(100).optional().describe("Max results"),
+      offset: z88.coerce.number().int().min(0).optional().describe("Search pagination offset"),
+      refresh_index: z88.boolean().optional().describe("Refresh/rebuild index before searching"),
+      languages: z88.array(z88.string()).optional().describe('Language filters, e.g. ["python", "typescript"]'),
+      paths: z88.array(z88.string()).optional().describe("Path/glob filters"),
+      depth: z88.coerce.number().int().min(1).max(5).optional().describe("Dependent traversal depth for blast_radius"),
+      max_files: z88.coerce.number().int().min(1).max(1e4).optional().describe("Max code files to index"),
+      lexical_only: z88.boolean().optional().describe("Force lexical-only search (skip vector similarity). Default: false \u2014 uses semantic hybrid search.")
     }
   }, async ({ action, project_root, query, symbol, file_path, force, limit, offset, refresh_index, languages, paths, depth, max_files, lexical_only }) => {
     const opts = { projectRoot: project_root, force, maxFiles: max_files };
@@ -9814,9 +10001,9 @@ function registerCodeContext(server) {
 }
 
 // src/mcp/tools/support-inbox.ts
-import { z as z87 } from "zod";
+import { z as z89 } from "zod";
 var DEFAULT_ENDPOINT = "https://askexe.com/admin/support/bug-reports";
-var STATUS = z87.enum(["open", "triaged", "fixed", "closed", "wontfix"]);
+var STATUS = z89.enum(["open", "triaged", "fixed", "closed", "wontfix"]);
 function adminToken() {
   return process.env.ASKEXE_SUPPORT_ADMIN_TOKEN || process.env.EXE_SUPPORT_ADMIN_TOKEN;
 }
@@ -9855,9 +10042,9 @@ function registerListBugReports(server) {
       title: "List Bug Reports",
       description: "AskExe-internal only: list incoming customer bug reports from the support inbox.",
       inputSchema: {
-        status: z87.enum(["all", "open", "triaged", "fixed", "closed", "wontfix"]).default("open"),
-        severity: z87.enum(["p0", "p1", "p2", "p3"]).optional(),
-        limit: z87.number().int().min(1).max(100).default(25)
+        status: z89.enum(["all", "open", "triaged", "fixed", "closed", "wontfix"]).default("open"),
+        severity: z89.enum(["p0", "p1", "p2", "p3"]).optional(),
+        limit: z89.number().int().min(1).max(100).default(25)
       }
     },
     async ({ status: status2, severity, limit }) => {
@@ -9876,7 +10063,7 @@ function registerGetBugReport(server) {
     {
       title: "Get Bug Report",
       description: "AskExe-internal only: fetch one customer bug report with full markdown payload.",
-      inputSchema: { id: z87.string().min(8) }
+      inputSchema: { id: z89.string().min(8) }
     },
     async ({ id }) => {
       const data = await requestJson(`${endpoint()}/${encodeURIComponent(id)}`);
@@ -9891,12 +10078,12 @@ function registerTriageBugReport(server) {
       title: "Triage Bug Report",
       description: "AskExe-internal only: update bug report status and link task/commit/release metadata.",
       inputSchema: {
-        id: z87.string().min(8),
+        id: z89.string().min(8),
         status: STATUS.optional(),
-        triage_notes: z87.string().optional(),
-        linked_task_id: z87.string().optional(),
-        linked_commit: z87.string().optional(),
-        fixed_version: z87.string().optional()
+        triage_notes: z89.string().optional(),
+        linked_task_id: z89.string().optional(),
+        linked_commit: z89.string().optional(),
+        fixed_version: z89.string().optional()
       }
     },
     async ({ id, status: status2, triage_notes, linked_task_id, linked_commit, fixed_version }) => {
@@ -9909,7 +10096,7 @@ function registerTriageBugReport(server) {
     }
   );
 }
-var FEATURE_STATUS = z87.enum(["open", "planned", "in_progress", "shipped", "closed", "wontdo"]);
+var FEATURE_STATUS = z89.enum(["open", "planned", "in_progress", "shipped", "closed", "wontdo"]);
 function featureEndpoint() {
   return endpoint().replace(/\/bug-reports\/?$/, "/feature-requests");
 }
@@ -9920,9 +10107,9 @@ function registerListFeatureRequests(server) {
       title: "List Feature Requests",
       description: "AskExe-internal only: list incoming customer feature requests from the support inbox.",
       inputSchema: {
-        status: z87.enum(["all", "open", "planned", "in_progress", "shipped", "closed", "wontdo"]).default("open"),
-        priority: z87.enum(["p0", "p1", "p2", "p3"]).optional(),
-        limit: z87.number().int().min(1).max(100).default(25)
+        status: z89.enum(["all", "open", "planned", "in_progress", "shipped", "closed", "wontdo"]).default("open"),
+        priority: z89.enum(["p0", "p1", "p2", "p3"]).optional(),
+        limit: z89.number().int().min(1).max(100).default(25)
       }
     },
     async ({ status: status2, priority, limit }) => {
@@ -9941,7 +10128,7 @@ function registerGetFeatureRequest(server) {
     {
       title: "Get Feature Request",
       description: "AskExe-internal only: fetch one customer feature request with full payload.",
-      inputSchema: { id: z87.string().min(8) }
+      inputSchema: { id: z89.string().min(8) }
     },
     async ({ id }) => {
       const data = await requestJson(`${featureEndpoint()}/${encodeURIComponent(id)}`);
@@ -9956,11 +10143,11 @@ function registerTriageFeatureRequest(server) {
       title: "Triage Feature Request",
       description: "AskExe-internal only: update feature request status, response notes, and version metadata.",
       inputSchema: {
-        id: z87.string().min(8),
+        id: z89.string().min(8),
         status: FEATURE_STATUS.optional(),
-        response_notes: z87.string().optional(),
-        target_version: z87.string().optional(),
-        shipped_version: z87.string().optional()
+        response_notes: z89.string().optional(),
+        target_version: z89.string().optional(),
+        shipped_version: z89.string().optional()
       }
     },
     async ({ id, status: status2, response_notes, target_version, shipped_version }) => {
@@ -9975,7 +10162,7 @@ function registerTriageFeatureRequest(server) {
 }
 
 // src/mcp/tools/decision.ts
-import { z as z88 } from "zod";
+import { z as z90 } from "zod";
 function buildHandlers6() {
   const tools = /* @__PURE__ */ new Map();
   const fake = {
@@ -9999,12 +10186,12 @@ function registerDecision(server) {
       title: "Decision",
       description: "Store or retrieve authoritative decisions. Actions: store (persist a decision by domain), get (look up a decision by domain/query).",
       inputSchema: {
-        action: z88.enum(["store", "get"]).describe("Decision operation"),
-        domain: z88.string().optional().describe("Decision domain (e.g. 'architecture', 'hiring')"),
-        decision: z88.string().optional().describe("Decision text for action=store"),
-        rationale: z88.string().optional().describe("Why this decision was made (action=store)"),
-        query: z88.string().optional().describe("Search query for action=get"),
-        limit: z88.coerce.number().optional().describe("Max results for action=get")
+        action: z90.enum(["store", "get"]).describe("Decision operation"),
+        domain: z90.string().optional().describe("Decision domain (e.g. 'architecture', 'hiring')"),
+        decision: z90.string().optional().describe("Decision text for action=store"),
+        rationale: z90.string().optional().describe("Why this decision was made (action=store)"),
+        query: z90.string().optional().describe("Search query for action=get"),
+        limit: z90.coerce.number().optional().describe("Max results for action=get")
       }
     },
     async (input, extra) => {
@@ -10020,7 +10207,7 @@ function registerDecision(server) {
 }
 
 // src/mcp/tools/session.ts
-import { z as z89 } from "zod";
+import { z as z91 } from "zod";
 function buildHandlers7() {
   const tools = /* @__PURE__ */ new Map();
   const fake = {
@@ -10044,9 +10231,9 @@ function registerSession(server) {
       title: "Session",
       description: "Session inspection tools. Actions: events (get session event log), last_response (get the most recent assistant response text).",
       inputSchema: {
-        action: z89.enum(["events", "last_response"]).describe("Session operation"),
-        session_id: z89.string().optional().describe("Session ID for action=events"),
-        limit: z89.coerce.number().optional().describe("Max events for action=events")
+        action: z91.enum(["events", "last_response"]).describe("Session operation"),
+        session_id: z91.string().optional().describe("Session ID for action=events"),
+        limit: z91.coerce.number().optional().describe("Max events for action=events")
       }
     },
     async (input, extra) => {
@@ -10062,7 +10249,7 @@ function registerSession(server) {
 }
 
 // src/mcp/tools/support-consolidated.ts
-import { z as z90 } from "zod";
+import { z as z92 } from "zod";
 function buildHandlers8() {
   const tools = /* @__PURE__ */ new Map();
   const fake = {
@@ -10103,7 +10290,7 @@ function registerSupportConsolidated(server) {
       title: "Support",
       description: "Bug reports, feature requests, and support system. Actions: create_bug, create_feature, list_my_bugs, list_my_features, list_bugs, get_bug, triage_bug, list_features, get_feature, triage_feature, health, test. Use 'product' param to file bugs for any AskExe product (exe-os, exe-create, exe-wiki, etc.).",
       inputSchema: {
-        action: z90.enum([
+        action: z92.enum([
           "create_bug",
           "create_feature",
           "list_my_bugs",
@@ -10117,26 +10304,26 @@ function registerSupportConsolidated(server) {
           "health",
           "test"
         ]).describe("Support operation"),
-        title: z90.string().optional().describe("Bug/feature title"),
-        description: z90.string().optional().describe("Bug/feature description"),
-        steps_to_reproduce: z90.string().optional().describe("Steps to reproduce (bugs)"),
-        expected_behavior: z90.string().optional().describe("Expected behavior (bugs)"),
-        actual_behavior: z90.string().optional().describe("Actual behavior (bugs)"),
-        severity: z90.string().optional().describe("Severity: p0/p1/p2/p3"),
-        product: z90.string().optional().describe("Product: exe-os (default), exe-create, exe-wiki, exe-gateway, exe-crm, exe-build"),
-        use_case: z90.string().optional().describe("Use case (features)"),
-        proposed_solution: z90.string().optional().describe("Proposed solution (features)"),
-        priority: z90.string().optional().describe("Priority (features)"),
-        id: z90.string().optional().describe("Bug/feature ID for get/triage"),
-        status: z90.string().optional().describe("Filter by status"),
-        classification: z90.string().optional().describe("Triage classification"),
-        resolution: z90.string().optional().describe("Triage resolution"),
-        notes: z90.string().optional().describe("Triage notes (mapped to triage_notes for bug/feature triage)"),
-        triage_notes: z90.string().optional().describe("Triage notes (legacy field name)"),
-        linked_task_id: z90.string().optional().describe("Linked task ID for triage"),
-        linked_commit: z90.string().optional().describe("Linked commit hash for triage"),
-        fixed_version: z90.string().optional().describe("Version that fixes this bug"),
-        limit: z90.coerce.number().optional().describe("Max results")
+        title: z92.string().optional().describe("Bug/feature title"),
+        description: z92.string().optional().describe("Bug/feature description"),
+        steps_to_reproduce: z92.string().optional().describe("Steps to reproduce (bugs)"),
+        expected_behavior: z92.string().optional().describe("Expected behavior (bugs)"),
+        actual_behavior: z92.string().optional().describe("Actual behavior (bugs)"),
+        severity: z92.string().optional().describe("Severity: p0/p1/p2/p3"),
+        product: z92.string().optional().describe("Product: exe-os (default), exe-create, exe-wiki, exe-gateway, exe-crm, exe-build"),
+        use_case: z92.string().optional().describe("Use case (features)"),
+        proposed_solution: z92.string().optional().describe("Proposed solution (features)"),
+        priority: z92.string().optional().describe("Priority (features)"),
+        id: z92.string().optional().describe("Bug/feature ID for get/triage"),
+        status: z92.string().optional().describe("Filter by status"),
+        classification: z92.string().optional().describe("Triage classification"),
+        resolution: z92.string().optional().describe("Triage resolution"),
+        notes: z92.string().optional().describe("Triage notes (mapped to triage_notes for bug/feature triage)"),
+        triage_notes: z92.string().optional().describe("Triage notes (legacy field name)"),
+        linked_task_id: z92.string().optional().describe("Linked task ID for triage"),
+        linked_commit: z92.string().optional().describe("Linked commit hash for triage"),
+        fixed_version: z92.string().optional().describe("Version that fixes this bug"),
+        limit: z92.coerce.number().optional().describe("Max results")
       }
     },
     async (input, extra) => {
@@ -10198,7 +10385,7 @@ function registerSupportConsolidated(server) {
 }
 
 // src/mcp/tools/diagnostics.ts
-import { z as z91 } from "zod";
+import { z as z93 } from "zod";
 function buildHandlers9() {
   const tools = /* @__PURE__ */ new Map();
   const fake = {
@@ -10219,14 +10406,14 @@ function registerDiagnostics(server) {
       title: "Diagnostics",
       description: `System diagnostics and admin operations. Actions: ${toolNames.join(", ")}. Covers health checks, update status, cloud status, key management, employee rename, semantic tool discovery (tool_search), and identity drift detection (drift).`,
       inputSchema: {
-        action: z91.string().describe(`Diagnostic operation: ${toolNames.join(", ")}`),
+        action: z93.string().describe(`Diagnostic operation: ${toolNames.join(", ")}`),
         // Pass-through params used by various sub-tools
-        agent_id: z91.string().optional().describe("Agent to probe (drift). Defaults to all agents."),
-        name: z91.string().optional().describe("Employee name (rename_employee)"),
-        new_name: z91.string().optional().describe("New employee name (rename_employee)"),
-        query: z91.string().optional().describe("Search/filter query, or natural language for tool_search"),
-        format: z91.string().optional().describe("Output format"),
-        limit: z91.coerce.number().int().min(1).max(100).optional().describe("Max results for tool_search (default 20)")
+        agent_id: z93.string().optional().describe("Agent to probe (drift). Defaults to all agents."),
+        name: z93.string().optional().describe("Employee name (rename_employee)"),
+        new_name: z93.string().optional().describe("New employee name (rename_employee)"),
+        query: z93.string().optional().describe("Search/filter query, or natural language for tool_search"),
+        format: z93.string().optional().describe("Output format"),
+        limit: z93.coerce.number().int().min(1).max(100).optional().describe("Max results for tool_search (default 20)")
       }
     },
     async (input, extra) => {
@@ -10554,6 +10741,7 @@ function registerAllTools(server, license, hasKey) {
     gate("registerCompanyActions", registerCompanyActions);
     gate("registerWorkflowTool", registerWorkflowTool);
   }
+  gate("registerFileCopy", registerFileCopy);
 }
 
 export {