@askexenow/exe-os 0.9.140 → 0.9.142

package/dist/{chunk-4ITOWLHX.js → chunk-MRX42FAS.js}

@@ -1,10 +1,10 @@
 import {
   fastDbInit
-} from "./chunk-ELXPFTBJ.js";
+} from "./chunk-7A2YCQNM.js";
 import {
   init_task_scope,
   sessionScopeFilter
-} from "./chunk-YWCPAQBH.js";
+} from "./chunk-AOJHEMHE.js";
 import {
   formatStatusAll,
   formatStatusDeep,
@@ -14,13 +14,11 @@ import {
 } from "./chunk-DC4ZD76Y.js";
 import {
   getClient,
-  init_database
-} from "./chunk-UEWGUOXB.js";
-import {
+  init_database,
   init_employees,
   isCoordinatorRole,
   loadEmployees
-} from "./chunk-ZHJNMC4W.js";
+} from "./chunk-55LEDLDE.js";
 import {
   isMainModule
 } from "./chunk-6Y4B3QF6.js";

package/dist/{chunk-UCNCSKGH.js → chunk-N5MH3CN2.js}

@@ -1,15 +1,15 @@
 import {
   init_behaviors,
   storeBehavior
-} from "./chunk-QCJ3Y52V.js";
+} from "./chunk-NFX6MDEO.js";
 import {
   getClient,
   init_database
-} from "./chunk-UEWGUOXB.js";
+} from "./chunk-55LEDLDE.js";
 import {
   init_config,
   loadConfig
-} from "./chunk-IG5XFUYJ.js";
+} from "./chunk-VA42PIIY.js";
 import {
   __esm
 } from "./chunk-KFQGP6VL.js";

package/dist/{chunk-QCJ3Y52V.js → chunk-NFX6MDEO.js}

@@ -1,7 +1,7 @@
 import {
   getClient,
   init_database
-} from "./chunk-UEWGUOXB.js";
+} from "./chunk-55LEDLDE.js";
 import {
   __esm
 } from "./chunk-KFQGP6VL.js";

package/dist/{chunk-F6PIXTHZ.js → chunk-NMG76472.js}

@@ -1,23 +1,21 @@
 import {
+  EMPLOYEES_PATH,
   getClient,
   init_database,
-  isInitialized
-} from "./chunk-UEWGUOXB.js";
-import {
-  EMPLOYEES_PATH,
   init_employees,
+  isInitialized,
   loadEmployees
-} from "./chunk-ZHJNMC4W.js";
+} from "./chunk-55LEDLDE.js";
 import {
   PLAN_LIMITS,
   checkLicense,
   init_license,
   isFeatureAllowed
-} from "./chunk-KNS5ETKF.js";
+} from "./chunk-GLVF7ENO.js";
 import {
   EXE_AI_DIR,
   init_config
-} from "./chunk-IG5XFUYJ.js";
+} from "./chunk-VA42PIIY.js";
 import {
   __esm
 } from "./chunk-KFQGP6VL.js";

package/dist/{chunk-LUOLBU54.js → chunk-NMT6QFEE.js}

@@ -1,7 +1,7 @@
 import {
   EXE_AI_DIR,
   init_config
-} from "./chunk-IG5XFUYJ.js";
+} from "./chunk-VA42PIIY.js";
 
 // src/lib/mcp-transport-health.ts
 init_config();

package/dist/{chunk-DEHYRM3I.js → chunk-NWUWTV7B.js}

@@ -1,6 +1,6 @@
 import {
   processCRMEvent
-} from "./chunk-VEGDNUBO.js";
+} from "./chunk-72O7CSKA.js";
 
 // src/gateway/adapters/crm-webhook.ts
 function parseTwentyWebhook(payload) {

package/dist/{chunk-2XUXMKX5.js → chunk-OC7FNHGA.js}

@@ -111,13 +111,13 @@ function buildFirstBootBrief(employees, dateStr, sessionTag) {
   }
   bodyLines.push("");
   bodyLines.push(" \u{1F9ED} Orchestration:");
-  bodyLines.push("  \u2022 Phase 1 \u2014 COO / Chief of Staff mode");
+  bodyLines.push("  \u2022 Phase 1 \u2014 Coordinator / Chief of Staff mode");
   bodyLines.push("  \u2022 Recommended start: build company context first");
   bodyLines.push("  \u2022 You can unlock executives or parallel mode anytime");
   bodyLines.push("");
   bodyLines.push(" \u{1F4A1} Quick start:");
   bodyLines.push("  \u2022 Run `exe-os backfill-conversations` to import Claude Code history");
-  bodyLines.push("  \u2022 Say `/exe` to launch your COO with a full status brief");
+  bodyLines.push("  \u2022 Say `/exe` to launch your coordinator with a full status brief");
   bodyLines.push("  \u2022 Say `/exe-team` to manage your team");
   let maxW = 0;
   for (const line of [...lines, ...bodyLines]) {
@@ -196,7 +196,7 @@ function buildOrchestrationPhase(data, employees) {
     return [
       "\u{1F9ED} ORCHESTRATION",
       "  Phase 2 \u2014 Executive bench",
-      "  Focus: COO works with CTO/CMO/domain executives before specialist fan-out",
+      "  Focus: Coordinator works with CTO/CMO/domain executives before specialist fan-out",
       "  You can switch phases anytime: exe-os org phase"
     ];
   }
@@ -210,7 +210,7 @@ function buildOrchestrationPhase(data, employees) {
   }
   return [
     "\u{1F9ED} ORCHESTRATION",
-    "  Phase 1 \u2014 COO / Chief of Staff mode",
+    "  Phase 1 \u2014 Coordinator / Chief of Staff mode",
     "  Focus: building company context before delegation",
     phase1Signal ? "  Signal: repeated domain work detected. Consider: exe-os org unlock executives" : "  Ready later? exe-os org unlock executives"
   ];

package/dist/{chunk-SPKE5ANC.js → chunk-OI3REUP5.js}

@@ -2,7 +2,7 @@ import {
   enforcePrivateFileSync,
   ensurePrivateDirSync,
   init_secure_files
-} from "./chunk-X2IMCCM5.js";
+} from "./chunk-FZ23OZL3.js";
 
 // src/lib/preferences.ts
 init_secure_files();

package/dist/{chunk-FLVDAA3Z.js → chunk-P2YTTKPR.js}

@@ -1,7 +1,7 @@
 import {
   EXE_AI_DIR,
   init_config
-} from "./chunk-IG5XFUYJ.js";
+} from "./chunk-VA42PIIY.js";
 
 // src/lib/background-jobs.ts
 init_config();

package/dist/{chunk-NX4WEVG6.js → chunk-Q53ZYTIU.js}

@@ -1,20 +1,25 @@
 import {
   PLATFORM_PROCEDURE_TITLES
-} from "./chunk-DMFM77DV.js";
+} from "./chunk-WZDI6UJ6.js";
 import {
+  getClient,
   getIdentity,
+  init_database,
+  init_identity,
   listIdentities,
   updateIdentity
-} from "./chunk-MQV4UKTS.js";
+} from "./chunk-55LEDLDE.js";
 import {
-  getClient,
-  init_database
-} from "./chunk-UEWGUOXB.js";
+  atomicWriteJsonSync,
+  init_secure_files
+} from "./chunk-FZ23OZL3.js";
 
 // src/lib/orchestration-package.ts
+init_secure_files();
 init_database();
+init_identity();
 import { randomUUID } from "crypto";
-import { copyFileSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
+import { copyFileSync, existsSync, mkdirSync, readFileSync } from "fs";
 import os from "os";
 import path from "path";
 var PACKAGE_VERSION = "1.0";
@@ -112,8 +117,7 @@ function writeRosterFile(roster) {
     }
     copyFileSync(rosterPath, getBackupPath());
   }
-  writeFileSync(rosterPath, `${JSON.stringify(roster, null, 2)}
-`, "utf-8");
+  atomicWriteJsonSync(rosterPath, roster);
 }
 function buildImportedRosterEntries(roster, timestamp) {
   return roster.map((entry) => ({

package/dist/{chunk-NTIWZFOJ.js → chunk-RZK7BZHP.js}

@@ -1,7 +1,7 @@
 import {
   init_employees,
   isCoordinatorRole
-} from "./chunk-ZHJNMC4W.js";
+} from "./chunk-55LEDLDE.js";
 
 // src/lib/task-router.ts
 init_employees();

package/dist/{chunk-5WIEDLGY.js → chunk-S3FDCJNF.js}

@@ -589,7 +589,7 @@ function auditHookOwnership() {
 }
 async function auditShards() {
   try {
-    const { auditShardHealth } = await import("./shard-manager-CIDCCPJ4.js");
+    const { auditShardHealth } = await import("./shard-manager-3MDFLDOZ.js");
     const report = await auditShardHealth();
     return {
       total: report.total,
@@ -605,7 +605,7 @@ async function auditShards() {
 async function auditKeyHealth() {
   try {
     const { getMasterKey } = await import("./lib/keychain.js");
-    const { getKeyBackupStatus } = await import("./key-backup-status-6BBOUM2S.js");
+    const { getKeyBackupStatus } = await import("./key-backup-status-M4W77D3P.js");
     const key = await getMasterKey();
     const backup = getKeyBackupStatus();
     return {
@@ -830,7 +830,7 @@ function formatReport(report, flags) {
   return lines.join("\n");
 }
 async function fixNullVectors() {
-  const { tryAcquireWorkerSlot, registerWorkerPid } = await import("./worker-gate-H43H32OF.js");
+  const { tryAcquireWorkerSlot, registerWorkerPid } = await import("./worker-gate-WM2RGEZE.js");
   if (!tryAcquireWorkerSlot()) {
     process.stderr.write("[exe-doctor] Worker gate full \u2014 waiting for existing backfill workers to finish\n");
     await new Promise((r) => setTimeout(r, 5e3));
@@ -914,7 +914,7 @@ async function fixBloated(client, bloated, dryRun) {
   return chunksCreated;
 }
 async function fixShards(dryRun) {
-  const { auditShardHealth } = await import("./shard-manager-CIDCCPJ4.js");
+  const { auditShardHealth } = await import("./shard-manager-3MDFLDOZ.js");
   const report = await auditShardHealth({ repair: true, dryRun });
   return {
     total: report.total,
@@ -951,7 +951,7 @@ function splitAtSentences(text, maxChunkSize) {
 }
 async function main(argv = process.argv.slice(2)) {
   const flags = parseFlags(argv);
-  const { fastDbInit } = await import("./fast-db-init-6SRLEIFS.js");
+  const { fastDbInit } = await import("./fast-db-init-ADRYLHUA.js");
   const client = await fastDbInit();
   const report = await runAudit(client, flags);
   console.log(formatReport(report, flags));
@@ -962,7 +962,7 @@ ${mode} Applying repairs...
 `);
     if (!flags.dryRun) {
       try {
-        const { createBackup } = await import("./db-backup-R4DLUO4C.js");
+        const { createBackup } = await import("./db-backup-YHDR4SXR.js");
         const backupPath = createBackup("pre-fix");
         if (backupPath) {
           console.log(`  Backup created: ${backupPath.split("/").pop()}`);

package/dist/{chunk-SL47NHTE.js → chunk-SDYBAMPW.js}

@@ -1,12 +1,12 @@
 import {
   EXE_AI_DIR,
   init_config
-} from "./chunk-IG5XFUYJ.js";
+} from "./chunk-VA42PIIY.js";
 import {
   enforcePrivateFileSync,
   ensurePrivateDirSync,
   init_secure_files
-} from "./chunk-X2IMCCM5.js";
+} from "./chunk-FZ23OZL3.js";
 import {
   __esm
 } from "./chunk-KFQGP6VL.js";

package/dist/{chunk-2ZWYALO4.js → chunk-SFURTBMT.js}

@@ -1,7 +1,7 @@
 import {
   getClient,
   init_database
-} from "./chunk-UEWGUOXB.js";
+} from "./chunk-55LEDLDE.js";
 
 // src/lib/token-spend.ts
 init_database();

package/dist/{chunk-HHV26QTD.js → chunk-SOHGHGWU.js}

@@ -6,12 +6,12 @@ import {
 import {
   EXE_AI_DIR,
   init_config
-} from "./chunk-IG5XFUYJ.js";
+} from "./chunk-VA42PIIY.js";
 import {
-  enforcePrivateFileSync,
+  atomicWriteJsonSync,
   ensurePrivateDirSync,
   init_secure_files
-} from "./chunk-X2IMCCM5.js";
+} from "./chunk-FZ23OZL3.js";
 import {
   __esm,
   __export
@@ -32,7 +32,7 @@ __export(agent_config_exports, {
   setAgentMcps: () => setAgentMcps,
   setAgentRuntime: () => setAgentRuntime
 });
-import { readFileSync, writeFileSync, existsSync } from "fs";
+import { readFileSync, existsSync } from "fs";
 import path from "path";
 function loadAgentConfig() {
   if (!existsSync(AGENT_CONFIG_PATH)) return {};
@@ -45,8 +45,7 @@ function loadAgentConfig() {
 function saveAgentConfig(config) {
   const dir = path.dirname(AGENT_CONFIG_PATH);
   ensurePrivateDirSync(dir);
-  writeFileSync(AGENT_CONFIG_PATH, JSON.stringify(config, null, 2) + "\n", "utf-8");
-  enforcePrivateFileSync(AGENT_CONFIG_PATH);
+  atomicWriteJsonSync(AGENT_CONFIG_PATH, config);
 }
 function getAgentRuntime(agentId) {
   const config = loadAgentConfig();

package/dist/{chunk-73JE5PVU.js → chunk-TJI7DMBT.js}

@@ -2,7 +2,7 @@ import {
   listWorkflowDefinitions,
   runWorkflow,
   startWorkflow
-} from "./chunk-5PB6BRLA.js";
+} from "./chunk-E2KEN3PG.js";
 import {
   initCRMBridge
 } from "./chunk-GCNWCYJI.js";
@@ -13,7 +13,7 @@ import {
 import {
   getClient,
   init_database
-} from "./chunk-UEWGUOXB.js";
+} from "./chunk-55LEDLDE.js";
 
 // src/gateway/router.ts
 function matchesPlatform(msgPlatform, matchPlatform) {
@@ -334,12 +334,12 @@ async function sinkCRM(msg, agentResponse, agentName) {
 }
 async function sinkWiki(msg, agentResponse) {
   try {
-    const { createWikiClient } = await import("./wiki-client-UFR4R7YH.js");
+    const { createWikiClient } = await import("./wiki-client-NGWOSMCV.js");
     const client = await createWikiClient();
     if (!client) return false;
     const content = msg.text ?? "";
     if (content.length < 50) return false;
-    const { chatInWorkspace } = await import("./wiki-client-UFR4R7YH.js");
+    const { chatInWorkspace } = await import("./wiki-client-NGWOSMCV.js");
     const ingestText = [
       `[${msg.platform}] Message from ${msg.senderName ?? msg.senderId} (${msg.timestamp}):`,
       content,
@@ -358,8 +358,8 @@ Agent response: ${agentResponse}` : ""
 }
 async function sinkEntityExtraction(msg, agentResponse, agentName) {
   try {
-    const { extractFromConversation } = await import("./conversation-entity-extractor-HKSNDF4L.js");
-    const { storeExtraction } = await import("./graph-rag-ZE5N7C65.js");
+    const { extractFromConversation } = await import("./conversation-entity-extractor-FJNOZ4DO.js");
+    const { storeExtraction } = await import("./graph-rag-V3JU7GYG.js");
     if ((msg.text?.length ?? 0) < 20) return false;
     if (msg.isHistorical) return false;
     const extraction = await extractFromConversation(msg, agentResponse, agentName);
@@ -367,7 +367,7 @@ async function sinkEntityExtraction(msg, agentResponse, agentName) {
     const client = getClient();
     const memoryId = `conv:${msg.messageId}`;
     await storeExtraction(client, extraction, memoryId, msg.timestamp);
-    import("./conversation-wiki-populator-7M5YYPXH.js").then(
+    import("./conversation-wiki-populator-HAW3EQD5.js").then(
       ({ populateWikiFromExtraction }) => populateWikiFromExtraction(extraction, msg, agentResponse, agentName)
     ).catch((err) => {
       process.stderr.write(

package/dist/{chunk-O2RVWP3S.js → chunk-TSPBIMZV.js}

@@ -1,6 +1,6 @@
 import {
   listReminders
-} from "./chunk-3TTJPQAE.js";
+} from "./chunk-BKEJSHDE.js";
 
 // src/mcp/tools/list-reminders.ts
 import { z } from "zod";

package/dist/{chunk-BZHXUKVC.js → chunk-U3Q3WNGY.js}

@@ -8,11 +8,11 @@ import {
   connectEmbedDaemon,
   embedBatchViaClient,
   init_exe_daemon_client
-} from "./chunk-POU4ZLBM.js";
+} from "./chunk-UKCSMGNM.js";
 import {
   EXE_AI_DIR,
   init_config
-} from "./chunk-IG5XFUYJ.js";
+} from "./chunk-VA42PIIY.js";
 
 // src/lib/code-context-index.ts
 init_config();

package/dist/{chunk-Z6BTUUPK.js → chunk-U7M7ZURS.js}

@@ -1,10 +1,10 @@
 import {
   vectorToBlob
-} from "./chunk-IU3CXV4S.js";
+} from "./chunk-LR3QFARI.js";
 import {
   init_employees,
   isCoordinatorName
-} from "./chunk-ZHJNMC4W.js";
+} from "./chunk-55LEDLDE.js";
 
 // src/lib/consolidation.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-34O6PRWE.js → chunk-UB7E2FEB.js}

@@ -1,7 +1,7 @@
 import {
   init_session_kill_telemetry,
   recordSessionKill
-} from "./chunk-QUG6EMZQ.js";
+} from "./chunk-EZUWMBWA.js";
 import {
   init_notifications,
   init_task_scope,
@@ -9,7 +9,7 @@ import {
   sessionScopeFilter,
   verifyPaneAtCapacity,
   writeNotification
-} from "./chunk-YWCPAQBH.js";
+} from "./chunk-AOJHEMHE.js";
 import {
   init_session_registry,
   listSessions
@@ -20,12 +20,10 @@ import {
 } from "./chunk-57HCNSFO.js";
 import {
   getClient,
-  init_database
-} from "./chunk-UEWGUOXB.js";
-import {
+  init_database,
   init_employees,
   isCoordinatorName
-} from "./chunk-ZHJNMC4W.js";
+} from "./chunk-55LEDLDE.js";
 import {
   __esm
 } from "./chunk-KFQGP6VL.js";

package/dist/{chunk-POU4ZLBM.js → chunk-UKCSMGNM.js}

@@ -2,11 +2,11 @@ import {
   ensureDaemonToken,
   init_daemon_auth,
   readDaemonToken
-} from "./chunk-SL47NHTE.js";
+} from "./chunk-SDYBAMPW.js";
 import {
   EXE_AI_DIR,
   init_config
-} from "./chunk-IG5XFUYJ.js";
+} from "./chunk-VA42PIIY.js";
 import {
   __esm
 } from "./chunk-KFQGP6VL.js";

package/dist/{chunk-BBVMIH76.js → chunk-UYFPFO6Q.js}

@@ -1,14 +1,14 @@
 import {
   getMasterKey,
   setMasterKey
-} from "./chunk-XUHFQHGZ.js";
+} from "./chunk-4JZNDVZH.js";
 import {
   LEGACY_LANCE_PATH,
   MODELS_DIR,
   init_config,
   loadConfig,
   saveConfig
-} from "./chunk-IG5XFUYJ.js";
+} from "./chunk-VA42PIIY.js";
 import {
   __require
 } from "./chunk-KFQGP6VL.js";
@@ -337,7 +337,7 @@ async function runSetupWizard(opts = {}) {
             "Setup cancelled: recovery phrase was not confirmed. Save the 24-word phrase before continuing \u2014 it is required to recover encrypted memories."
           );
         }
-        const { markKeyBackupConfirmed } = await import("./key-backup-status-6BBOUM2S.js");
+        const { markKeyBackupConfirmed } = await import("./key-backup-status-M4W77D3P.js");
         markKeyBackupConfirmed("setup-wizard");
       }
       state.completedSteps.push(1);
@@ -485,7 +485,7 @@ async function runSetupWizard(opts = {}) {
       if (cloudConfig) {
         config.cloud = cloudConfig;
       }
-      const { applyDefaultOrchestrationPhase } = await import("./orchestration-phase-SBCILK4O.js");
+      const { applyDefaultOrchestrationPhase } = await import("./orchestration-phase-365P32CD.js");
       applyDefaultOrchestrationPhase(config);
       await saveConfig(config);
       log("");
@@ -511,7 +511,7 @@ async function runSetupWizard(opts = {}) {
       log("Step 5 already complete \u2014 skipping.");
     }
     if (!state.completedSteps.includes(55)) {
-      const { savePreferences, loadPreferences: loadPrefs } = await import("./preferences-MW3BYTQ5.js");
+      const { savePreferences, loadPreferences: loadPrefs } = await import("./preferences-M7KQYRR2.js");
       const existingPrefs = loadPrefs();
       const prefs = { ...existingPrefs };
       log("=== Config Defaults ===");
@@ -660,7 +660,7 @@ async function runSetupWizard(opts = {}) {
     } else if (!state.completedSteps.includes(6)) {
       log("=== Your First Hire ===");
       log("");
-      log("Your new COO will hold all your vision, your roadmap, all your");
+      log("Your new coordinator will hold all your vision, your roadmap, all your");
       log("projects and everything you think about in business, life and beyond.");
       log("They can call and hire new employees, executives, and coordinate");
       log("your entire team. Engineers, marketers, specialists, all working");
@@ -668,7 +668,7 @@ async function runSetupWizard(opts = {}) {
       log("");
       const cooNameInput = await ask(
         rl,
-        `Name your COO (default: ${DEFAULT_COORDINATOR_TEMPLATE_NAME}): `
+        `Name your coordinator (default: ${DEFAULT_COORDINATOR_TEMPLATE_NAME}): `
       );
       cooName = (cooNameInput || DEFAULT_COORDINATOR_TEMPLATE_NAME).toLowerCase();
       let employees = await loadEmployees(EMPLOYEES_PATH).catch(() => []);
@@ -768,7 +768,7 @@ async function runSetupWizard(opts = {}) {
       log("  Phase 3: Parallel org \u2014 specialists execute in parallel with reviews");
       log("");
       const unlockExecutives = (await ask(rl, "Unlock Phase 2 executives now? (y/N): ")).toLowerCase() === "y";
-      const { setOrchestrationPhase } = await import("./orchestration-phase-SBCILK4O.js");
+      const { setOrchestrationPhase } = await import("./orchestration-phase-365P32CD.js");
       if (!unlockExecutives) {
         await setOrchestrationPhase("phase_1_coo", "setup-wizard");
         log("");

package/dist/{chunk-HIOFKHTO.js → chunk-UYNFWD54.js}

@@ -1,6 +1,6 @@
 import {
   routeTask
-} from "./chunk-NTIWZFOJ.js";
+} from "./chunk-RZK7BZHP.js";
 import {
   createTaskCore,
   employeeSessionName,
@@ -12,12 +12,12 @@ import {
   isEmployeeAlive,
   sessionScopeFilter,
   updateTaskStatus
-} from "./chunk-YWCPAQBH.js";
+} from "./chunk-AOJHEMHE.js";
 import {
   DEFAULT_COORDINATOR_TEMPLATE_NAME,
   getCoordinatorName,
   init_employees
-} from "./chunk-ZHJNMC4W.js";
+} from "./chunk-55LEDLDE.js";
 
 // src/runtime/orchestrator.ts
 init_employees();

package/dist/{chunk-IG5XFUYJ.js → chunk-VA42PIIY.js}

@@ -1,8 +1,8 @@
 import {
-  enforcePrivateFile,
+  atomicWriteJson,
   ensurePrivateDir,
   init_secure_files
-} from "./chunk-X2IMCCM5.js";
+} from "./chunk-FZ23OZL3.js";
 import {
   __esm,
   __export
@@ -122,7 +122,27 @@ async function loadConfig() {
   if (!existsSync(configPath)) {
     return { ...DEFAULT_CONFIG, dbPath: path.join(dir, "memories.db") };
   }
-  const raw = await readFile(configPath, "utf-8");
+  let raw;
+  try {
+    raw = await readFile(configPath, "utf-8");
+    JSON.parse(raw);
+  } catch {
+    const bakPath = configPath + ".bak";
+    if (existsSync(bakPath)) {
+      process.stderr.write("[exe-os] config.json corrupt \u2014 restoring from config.json.bak\n");
+      try {
+        raw = await readFile(bakPath, "utf-8");
+        JSON.parse(raw);
+        await writeFile(configPath, raw);
+      } catch {
+        process.stderr.write("[exe-os] config.json.bak also corrupt \u2014 using defaults\n");
+        return { ...DEFAULT_CONFIG, dbPath: path.join(dir, "memories.db") };
+      }
+    } else {
+      process.stderr.write("[exe-os] config.json corrupt, no backup available \u2014 using defaults\n");
+      return { ...DEFAULT_CONFIG, dbPath: path.join(dir, "memories.db") };
+    }
+  }
   try {
     let parsed = JSON.parse(raw);
     parsed = migrateLegacyConfig(parsed);
@@ -131,8 +151,7 @@ async function loadConfig() {
       process.stderr.write(`[exe-os] Config migrated from v${fromVersion} to v${migratedCfg.config_version}
 `);
       try {
-        await writeFile(configPath, JSON.stringify(migratedCfg, null, 2) + "\n");
-        await enforcePrivateFile(configPath);
+        await atomicWriteJson(configPath, migratedCfg);
       } catch {
       }
     }
@@ -189,8 +208,7 @@ async function saveConfig(config) {
   const dir = process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? EXE_AI_DIR;
   await ensurePrivateDir(dir);
   const configPath = path.join(dir, "config.json");
-  await writeFile(configPath, JSON.stringify(config, null, 2) + "\n");
-  await enforcePrivateFile(configPath);
+  await atomicWriteJson(configPath, config);
 }
 async function loadConfigFrom(configPath) {
   const raw = await readFile(configPath, "utf-8");

package/dist/{chunk-DMFM77DV.js → chunk-WZDI6UJ6.js}

@@ -260,7 +260,7 @@ var PLATFORM_PROCEDURES = [
     title: "MCP disconnect \u2014 ask the user, never work around it",
     domain: "workflow",
     priority: "p0",
-    content: "If MCP tools are unavailable, disconnected, or returning connection errors: STOP. Tell the user clearly: 'MCP server is disconnected. Please run /mcp to reconnect.' Do NOT attempt workarounds \u2014 no raw Node imports, no direct DB access, no CLI hacks, no daemon socket calls. MCP is the ONLY data interface. Working around it wastes time, hits bundling issues, and bypasses the contract boundary. Ask once, wait, proceed when reconnected."
+    content: "If MCP tools are unavailable, disconnected, or returning connection errors: STOP. Tell the user clearly: 'MCP server is disconnected. Please run /mcp to reconnect.' Do NOT attempt workarounds \u2014 no raw Node imports, no direct DB access, no CLI hacks, no daemon socket calls, no tmux send-keys to other sessions, no cross-session intercoms. MCP is the ONLY data interface AND the ONLY dispatch path. When MCP is down, you cannot create tasks, send messages, or coordinate agents. Falling back to tmux send-keys bypasses session scoping, task tracking, and review gates. Ask once, wait, proceed when reconnected."
   },
   // --- MCP Tool Catalog (Layer 0 — every agent knows what tools exist) ---
   {