@askexenow/exe-os 0.9.144 → 0.9.145

package/dist/{chunk-AV77PUPD.js → chunk-32LFUJVG.js}

@@ -1,19 +1,19 @@
 import {
   getCachedLicenseGate
-} from "./chunk-LXX2UDWL.js";
+} from "./chunk-HV75RBMK.js";
 import {
   getToolUsageStats
-} from "./chunk-VKFBVBAN.js";
+} from "./chunk-F3ULERRZ.js";
 import {
   AUTO_WAKE_MAX_RETRIES
-} from "./chunk-YRLMCI3J.js";
+} from "./chunk-CDDRSIGK.js";
 import {
   getToolCapabilityIndex
-} from "./chunk-CO7XAJJ2.js";
+} from "./chunk-AAVODJ4F.js";
 import {
   isRerankerAvailable,
   rerankWithScores
-} from "./chunk-TBO4RYRU.js";
+} from "./chunk-5F3EXHT7.js";
 import {
   getEntityByName,
   getEntityNeighbors,
@@ -28,7 +28,7 @@ import {
 } from "./chunk-E6ORBQHP.js";
 import {
   listRecentSessionEvents
-} from "./chunk-KX3KLDG7.js";
+} from "./chunk-IPSFAUK5.js";
 import {
   analyzeBlastRadius,
   buildCodeContextIndex,
@@ -37,68 +37,66 @@ import {
   searchCodeContext,
   searchCodeContextSemantic,
   traceCodeSymbol
-} from "./chunk-EYRQWVPQ.js";
+} from "./chunk-X7DJ2QZW.js";
 import {
   runDriftProbes
-} from "./chunk-EVP2WD5S.js";
+} from "./chunk-JUITBJ7J.js";
 import {
   exportOrchestration,
   importOrchestration,
   validatePackage
-} from "./chunk-DUXNECD3.js";
+} from "./chunk-65UQ7H5U.js";
 import {
   loadOrchestrationPhase,
   setOrchestrationPhase
-} from "./chunk-A46SAHYB.js";
+} from "./chunk-MUVPQCQA.js";
 import {
-  createOrRefreshResumeTask,
-  init_capacity_monitor
-} from "./chunk-TLXIKKEG.js";
+  createOrRefreshResumeTask
+} from "./chunk-I4WAKJ6W.js";
 import {
   registerCompleteReminder
-} from "./chunk-XMAP37LE.js";
+} from "./chunk-NT6R4ATM.js";
 import {
   registerDeactivateBehavior
-} from "./chunk-TGR3H3DM.js";
+} from "./chunk-SR6D65DA.js";
 import {
   registerSendMessage
-} from "./chunk-7YZJUTQ4.js";
+} from "./chunk-56T5TMNK.js";
 import {
   registerCreateTask
-} from "./chunk-AV4RLRM2.js";
+} from "./chunk-XQ2ZBOAD.js";
 import {
   registerListTasks
-} from "./chunk-C54PGWHV.js";
+} from "./chunk-KQTGSD23.js";
 import {
   registerUpdateTask
-} from "./chunk-76R35J76.js";
+} from "./chunk-XAHIVBTU.js";
 import {
   registerCreateReminder
-} from "./chunk-5JIVAJJU.js";
+} from "./chunk-GK5VMHSN.js";
 import {
   registerListReminders
-} from "./chunk-VH2CK32C.js";
+} from "./chunk-RWURKLS3.js";
 import {
   completeReminder,
   createReminder,
   listReminders
-} from "./chunk-VISRYICE.js";
+} from "./chunk-7PTII6F4.js";
 import {
   status
-} from "./chunk-EHF676BW.js";
+} from "./chunk-VXQDZH5T.js";
 import {
   TOKENS_PER_IDLE_MINUTE,
   countKillsSince,
-  init_session_kill_telemetry,
   sumTokensSavedSince
-} from "./chunk-AYUYBWGD.js";
+} from "./chunk-NE6RPW5C.js";
 import {
   getAgentSpend
-} from "./chunk-3RT5V3M4.js";
+} from "./chunk-7KR5PV4P.js";
 import {
   createSchedule,
   parseHumanCron
-} from "./chunk-ZK3WQY7Q.js";
+} from "./chunk-BHV7PX5V.js";
 import {
   exportGraphHTML,
   generateGraphReport
@@ -106,90 +104,86 @@ import {
 import {
   entityId,
   mergeEntities
-} from "./chunk-QUPRWJKI.js";
+} from "./chunk-WLEVAIL5.js";
 import {
   formatReport,
   runAudit
-} from "./chunk-SRQXDGUO.js";
+} from "./chunk-OYCQ6PFC.js";
 import {
   runHealthCheck
-} from "./chunk-NCVFW4JS.js";
+} from "./chunk-O7CTVDC3.js";
 import {
   hasFailures,
   runHealth,
   runTest
-} from "./chunk-IUQL3KZV.js";
+} from "./chunk-K3PSCQLK.js";
 import {
   findSimilarTrajectories,
-  hashSignature,
-  init_skill_learning
-} from "./chunk-CNNT4QSN.js";
+  hashSignature
+} from "./chunk-K6MMN6AW.js";
 import {
   deactivateBehavior,
-  init_behaviors,
   listBehaviorsByDomain,
+  listSharedSkills,
   storeBehavior
-} from "./chunk-BNH4LWKE.js";
+} from "./chunk-RWJY7KMP.js";
 import {
   countUnconsolidated,
   groupMemories,
   runConsolidation,
   selectUnconsolidated
-} from "./chunk-SI5TLMB6.js";
+} from "./chunk-C4EVFN7J.js";
 import {
   renderClientCOOTemplate
-} from "./chunk-ZCYQZQTA.js";
+} from "./chunk-53VUIKOE.js";
 import {
   deactivateGlobalProcedure,
   loadGlobalProcedures,
   storeGlobalProcedure
-} from "./chunk-52LCN4JK.js";
+} from "./chunk-ER3UJ2VL.js";
 import {
   PLATFORM_PROCEDURES
-} from "./chunk-WZDI6UJ6.js";
+} from "./chunk-MPXPPKJ4.js";
 import {
   clearCloudReuploadRequired,
   cloudSync,
   getCloudReuploadRequired,
   markCloudReuploadRequired
-} from "./chunk-ROTT6N5K.js";
+} from "./chunk-UXDQ4ERA.js";
 import {
-  crypto_exports,
-  init_crypto
-} from "./chunk-HJMM4QMY.js";
+  encryptSyncBlob,
+  isSyncCryptoInitialized
+} from "./chunk-HOKOOBDL.js";
 import {
   createARecord
 } from "./chunk-X2Z5GT3V.js";
 import {
-  embed,
-  init_embedder
-} from "./chunk-T2WBLUN7.js";
+  embed
+} from "./chunk-BY4OTURZ.js";
 import {
   readMcpHttpEvents,
   summarizeMcpTransport,
   writeMcpTransportSummary
-} from "./chunk-HHKKLWAI.js";
+} from "./chunk-DCJ42FEN.js";
 import {
-  init_tasks,
   updateTask
-} from "./chunk-47MZMRQZ.js";
+} from "./chunk-AJ2XDY27.js";
 import {
   fastDbInit
-} from "./chunk-TDIUACZ6.js";
+} from "./chunk-UVH6FA5E.js";
 import {
   MAX_CONCURRENT_WORKERS
-} from "./chunk-3XUWTXNC.js";
+} from "./chunk-QSSABSCM.js";
 import {
-  getProjectName,
-  init_project_name
-} from "./chunk-TOR5ZPKF.js";
+  getProjectName
+} from "./chunk-OPU3NYOO.js";
 import {
   hybridSearch,
   recentRecords
-} from "./chunk-EZY3BNIW.js";
+} from "./chunk-NQAZ2CP7.js";
 import {
   getActiveAgent
-} from "./chunk-HLYXFVVT.js";
+} from "./chunk-BXCJOACQ.js";
 import {
   attachDocumentMetadata,
   flushBatch,
@@ -197,43 +191,35 @@ import {
   reserveVersions,
   vectorToBlob,
   writeMemory
-} from "./chunk-MI4RRRX5.js";
+} from "./chunk-7APRWURX.js";
 import {
-  init_task_scope,
-  init_tasks_crud,
-  init_tmux_routing,
+  getMySession,
   resolveExeSession,
   resolveTask,
   sessionScopeFilter,
-  strictSessionScopeFilter,
-  tmux_routing_exports,
   updateTaskStatus,
   writeCheckpoint
-} from "./chunk-V3YNF3JK.js";
+} from "./chunk-H4YONWQX.js";
 import {
-  init_session_registry,
   listSessions
-} from "./chunk-KRLOFIPI.js";
+} from "./chunk-64WZEXXA.js";
 import {
   DEFAULT_MODELS,
   KNOWN_RUNTIMES,
   RUNTIME_LABELS,
   getAgentRuntime,
-  init_agent_config,
   loadAgentConfig,
   setAgentRuntime
-} from "./chunk-VTQRACP7.js";
+} from "./chunk-G3VR3MJI.js";
 import {
-  DEFAULT_RUNTIME,
-  init_runtime_table
-} from "./chunk-JT76KRZQ.js";
+  DEFAULT_RUNTIME
+} from "./chunk-NGP6LSV2.js";
 import {
   PlanLimitError,
   assertEmployeeLimit,
   assertFeature,
-  assertMemoryLimit,
-  init_plan_limits
-} from "./chunk-67WOKLTZ.js";
+  assertMemoryLimit
+} from "./chunk-XEA6DSLR.js";
 import {
   getAccountByName,
   getDefaultAccount
@@ -241,22 +227,21 @@ import {
 import {
   createNewTrigger,
   isScheduledTrigger,
-  loadTriggers
-} from "./chunk-QBLI377G.js";
+  loadTriggers,
+  sanitizeParam
+} from "./chunk-WJW564IP.js";
 import {
   pushConversationToCRM
 } from "./chunk-GCNWCYJI.js";
 import {
   EMPLOYEES_PATH,
   addEmployee,
+  baseAgentName,
   canCoordinate,
-  employees_exports,
+  canManage,
   getClient,
   getEmployee,
   getIdentity,
-  init_database,
-  init_employees,
-  init_identity,
   isCoordinatorName,
   isCoordinatorRole,
   listIdentities,
@@ -264,32 +249,28 @@ import {
   loadEmployeesSync,
   saveEmployees,
   updateIdentity
-} from "./chunk-WLW7QV2C.js";
+} from "./chunk-NA3MXUU6.js";
 import {
   getMasterKey
-} from "./chunk-YGHMRSH5.js";
+} from "./chunk-6D23UNXU.js";
 import {
   checkForUpdate
 } from "./chunk-MZIGUUDQ.js";
 import {
   PLAN_LIMITS,
   checkLicense,
-  init_license,
   isFeatureAllowed,
   loadDeviceId,
   loadLicense,
   readCachedLicenseToken,
   saveLicense,
   validateLicense
-} from "./chunk-AFEXRICE.js";
+} from "./chunk-I5VJNTDL.js";
 import {
   EXE_AI_DIR,
   init_config,
   loadConfig
-} from "./chunk-QASVYG2B.js";
-import {
-  __toCommonJS
-} from "./chunk-KFQGP6VL.js";
+} from "./chunk-KHV55ME4.js";
 
 // src/mcp/tools/memory.ts
 import { z as z10 } from "zod";
@@ -399,7 +380,7 @@ function registerRecallMyMemory(server) {
         include_source: z.boolean().optional().default(false).describe(
           "When true, attach parent document metadata (filename, mime, source_type) to each result. Default false."
         ),
-        retrieval_mode: z.enum(RETRIEVAL_MODES).optional().default("all").describe(`Typed retrieval mode. ${formatRetrievalModes()}`),
+        retrieval_mode: z.enum(RETRIEVAL_MODES).optional().default("no_raw").describe(`Typed retrieval mode. ${formatRetrievalModes()}`),
         kind: z.string().optional().describe(
           "Filter by memory_type: decision, procedure, observation, raw, conversation, behavior."
         ),
@@ -504,7 +485,6 @@ ${formatted}`
 
 // src/mcp/tools/ask-team-memory.ts
 import { z as z2 } from "zod";
-init_employees();
 function formatMemoryBody2(rawText, maxChars) {
   if (rawText.length <= maxChars) return rawText;
   const marker = ` \u2026 [truncated; +${rawText.length - maxChars} chars \u2014 re-call with max_chars up to 20000 for more]`;
@@ -604,12 +584,10 @@ ${formatted}`
 }
 
 // src/mcp/tools/store-memory.ts
-init_embedder();
 import { z as z3 } from "zod";
 import crypto from "crypto";
 import { writeFileSync } from "fs";
 import path from "path";
-init_plan_limits();
 function registerStoreMemory(server) {
   server.registerTool(
     "store_memory",
@@ -699,13 +677,10 @@ function registerStoreMemory(server) {
 }
 
 // src/mcp/tools/commit-memory.ts
-init_embedder();
 import { z as z4 } from "zod";
 import crypto2 from "crypto";
 import { writeFileSync as writeFileSync2 } from "fs";
 import path2 from "path";
-init_plan_limits();
-init_employees();
 function registerCommitMemory(server) {
   server.registerTool(
     "commit_to_long_term_memory",
@@ -880,7 +855,7 @@ async function searchConversations(query, limit) {
 }
 async function searchWiki(query, limit) {
   try {
-    const { createWikiClient, chatInWorkspace, listWorkspaces } = await import("./wiki-client-TDZ74RHN.js");
+    const { createWikiClient, chatInWorkspace, listWorkspaces } = await import("./wiki-client-EUDJA7O2.js");
     const client = await createWikiClient();
     if (!client) return [];
     const workspaces = await listWorkspaces(client);
@@ -1043,7 +1018,6 @@ ${formatted.join("\n\n---\n\n")}`
 }
 
 // src/mcp/tools/get-session-context.ts
-init_database();
 import { z as z6 } from "zod";
 function formatMemoryBody3(rawText, maxChars) {
   if (rawText.length <= maxChars) return rawText;
@@ -1134,7 +1108,6 @@ ${formatted}`
 }
 
 // src/mcp/tools/get-memory-by-id.ts
-init_database();
 import { z as z7 } from "zod";
 function asString(value) {
   return value == null ? "" : String(value);
@@ -1206,7 +1179,6 @@ ${asString(row.raw_text)}`
 }
 
 // src/mcp/tools/consolidate-memories.ts
-init_database();
 import { z as z8 } from "zod";
 function registerConsolidateMemories(server) {
   server.registerTool(
@@ -1269,7 +1241,6 @@ Consolidated summaries stored as tier-1 (importance=9) memories.`
 }
 
 // src/mcp/tools/get-memory-cardinality.ts
-init_database();
 import { z as z9 } from "zod";
 function registerGetMemoryCardinality(server) {
   server.registerTool(
@@ -1425,7 +1396,7 @@ async function handleSupersede(input) {
   }
   try {
     const { getClient: getClient2 } = await import("./lib/database.js");
-    const { getActiveAgent: getActiveAgent2 } = await import("./active-agent-NVYSMA2V.js");
+    const { getActiveAgent: getActiveAgent2 } = await import("./active-agent-GJOJUEMF.js");
     const { writeMemory: writeMemory2, flushBatch: flushBatch2 } = await import("./lib/store.js");
     const { randomUUID: randomUUID2 } = await import("crypto");
     const client = getClient2();
@@ -1443,7 +1414,7 @@ async function handleSupersede(input) {
     });
     const { agentId, agentRole } = getActiveAgent2();
     const sessionId = process.env.SESSION_ID ?? "manual";
-    const { getProjectName: getProjectName2 } = await import("./project-name-7G6XPXQ6.js");
+    const { getProjectName: getProjectName2 } = await import("./project-name-OBIDABHE.js");
     const projectName = input.project_name ?? getProjectName2();
     const newId = randomUUID2();
     await writeMemory2({
@@ -1534,9 +1505,9 @@ function registerMemory(server) {
         return handleSupersede(input);
       }
       if (action === "core_get" || action === "core_set" || action === "core_delete") {
-        const { getActiveAgent: getActiveAgent2 } = await import("./active-agent-NVYSMA2V.js");
+        const { getActiveAgent: getActiveAgent2 } = await import("./active-agent-GJOJUEMF.js");
         const { agentId } = getActiveAgent2();
-        const { getCoreMemory, setCoreMemory, deleteCoreMemory, formatCoreMemoryBlock } = await import("./core-memory-N2SN7CF5.js");
+        const { getCoreMemory, setCoreMemory, deleteCoreMemory, formatCoreMemoryBlock } = await import("./core-memory-JZ34WT5R.js");
         if (action === "core_get") {
           const entries = await getCoreMemory(agentId);
           const block = formatCoreMemoryBlock(entries);
@@ -1566,7 +1537,7 @@ function registerMemory(server) {
         legacyArgs.limit ??= 10;
         legacyArgs.include_archived ??= false;
         legacyArgs.include_source ??= false;
-        legacyArgs.retrieval_mode ??= "all";
+        legacyArgs.retrieval_mode ??= "no_raw";
         if (!legacyArgs.recent && !legacyArgs.query) {
           return errorResult('memory action "recall" requires query unless recent=true');
         }
@@ -1575,7 +1546,7 @@ function registerMemory(server) {
         legacyArgs.limit ??= 10;
         legacyArgs.include_archived ??= false;
         legacyArgs.include_raw ??= false;
-        legacyArgs.retrieval_mode ??= "all";
+        legacyArgs.retrieval_mode ??= "no_raw";
       }
       if (action === "store") {
         legacyArgs.tool_name ??= "manual";
@@ -1603,7 +1574,6 @@ function registerMemory(server) {
 }
 
 // src/mcp/tools/query-relationships.ts
-init_database();
 import { z as z11 } from "zod";
 function registerQueryRelationships(server) {
   server.registerTool(
@@ -1716,13 +1686,9 @@ ${typeBreakdown}`
 }
 
 // src/mcp/tools/task.ts
-import { z as z16 } from "zod";
+import { z as z17 } from "zod";
 
 // src/mcp/tools/get-task.ts
-init_tasks();
-init_database();
-init_task_scope();
-init_employees();
 import { z as z12 } from "zod";
 async function diagnoseMissingTask(client, identifier) {
   const shortUuid = /^[a-f0-9]{7,12}$/i.test(identifier);
@@ -1880,10 +1846,7 @@ function registerGetTask(server) {
 }
 
 // src/mcp/tools/close-task.ts
-init_tasks();
 import { z as z13 } from "zod";
-init_tmux_routing();
-init_employees();
 var CLOSE_TASK_ALLOWED_ROLES = /* @__PURE__ */ new Set(["CTO"]);
 function registerCloseTask(server) {
   server.registerTool(
@@ -2010,27 +1973,38 @@ File: ${task.taskFile}`;
               try {
                 const { isMultiInstance } = await import("./lib/employees.js");
                 if (isMultiInstance(assignee)) {
-                  const { resolveExeSession: resolveExeSession2, employeeSessionName, ensureEmployee } = await import("./lib/tmux-routing.js");
-                  const exeSession = resolveExeSession2();
-                  if (exeSession) {
-                    const oldSession = employeeSessionName(assignee, exeSession);
-                    const { execSync } = await import("child_process");
-                    try {
-                      execSync(`tmux kill-session -t ${oldSession} 2>/dev/null`, { timeout: 3e3 });
-                    } catch {
-                    }
-                    const baseName = assignee.replace(/\d+$/, "") || assignee;
+                  respawnNote = `
+
+\u{1F504} Auto-respawn: ${assignee} has ${count} more task(s). Respawn scheduled (deferred to avoid MCP disruption).`;
+                  const _assignee = assignee;
+                  const _baseDir = baseDir;
+                  setTimeout(async () => {
                     try {
-                      execSync(`git worktree remove .worktrees/${baseName} --force 2>/dev/null`, { timeout: 5e3, cwd: baseDir });
-                      process.stderr.write(`[close-task] Pruned worktree .worktrees/${baseName}
+                      const { resolveExeSession: resolveExeSession2, employeeSessionName, ensureEmployee } = await import("./lib/tmux-routing.js");
+                      const { shouldAutoInstance } = await import("./lib/employees.js");
+                      const exeSession = resolveExeSession2();
+                      if (!exeSession) return;
+                      const oldSession = employeeSessionName(_assignee, exeSession);
+                      const { execSync } = await import("child_process");
+                      try {
+                        execSync(`tmux kill-session -t ${oldSession} 2>/dev/null`, { timeout: 3e3 });
+                      } catch {
+                      }
+                      const baseName = _assignee.replace(/\d+$/, "") || _assignee;
+                      try {
+                        execSync(`git worktree remove .worktrees/${baseName} --force 2>/dev/null`, { timeout: 5e3, cwd: _baseDir });
+                        process.stderr.write(`[close-task] Pruned worktree .worktrees/${baseName}
+`);
+                      } catch {
+                      }
+                      const result4 = ensureEmployee(_assignee, exeSession, _baseDir, shouldAutoInstance(_assignee));
+                      process.stderr.write(`[close-task] Deferred respawn complete: ${result4.sessionName ?? "fresh instance"}
+`);
+                    } catch (e) {
+                      process.stderr.write(`[close-task] Deferred respawn failed: ${e instanceof Error ? e.message : String(e)}
 `);
-                    } catch {
                     }
-                    const result4 = ensureEmployee(assignee, exeSession, baseDir, { autoInstance: true });
-                    respawnNote = `
-
-\u{1F504} Auto-respawn: ${assignee} has ${count} more task(s). Killed old session, spawned ${result4.sessionName ?? "fresh instance"} with clean worktree.`;
-                  }
+                  }, 500);
                 }
               } catch {
               }
@@ -2068,7 +2042,6 @@ All tasks complete. No more open tasks in your queue.`;
 }
 
 // src/mcp/tools/checkpoint-task.ts
-init_tasks();
 import { z as z14 } from "zod";
 function registerCheckpointTask(server) {
   server.registerTool(
@@ -2103,10 +2076,6 @@ function registerCheckpointTask(server) {
 }
 
 // src/mcp/tools/resume-employee.ts
-init_capacity_monitor();
-init_database();
-init_task_scope();
-init_tasks_crud();
 import { z as z15 } from "zod";
 var RESUME_CONTEXT_TASK_LIMIT = 10;
 function registerResumeEmployee(server) {
@@ -2144,7 +2113,7 @@ function registerResumeEmployee(server) {
         };
       }
       try {
-        const { isTmuxSessionAlive } = await import("./tasks-crud-E4B3ORQX.js");
+        const { isTmuxSessionAlive } = await import("./tasks-crud-W2XPUGKK.js");
         const now = (/* @__PURE__ */ new Date()).toISOString();
         for (const row of openTasks.rows) {
           const status2 = String(row.status);
@@ -2180,10 +2149,8 @@ function registerResumeEmployee(server) {
         const { ensureEmployee, resolveExeSession: resolveExeSession2 } = await import("./lib/tmux-routing.js");
         const exeSession = resolveExeSession2();
         if (!exeSession) throw new Error("No coordinator session found");
-        const { isMultiInstance } = await import("./lib/employees.js");
-        const result3 = ensureEmployee(agent_id, exeSession, process.cwd(), {
-          autoInstance: isMultiInstance(agent_id)
-        });
+        const { shouldAutoInstance } = await import("./lib/employees.js");
+        const result3 = ensureEmployee(agent_id, exeSession, process.cwd(), shouldAutoInstance(agent_id));
         switch (result3.status) {
           case "intercom_sent":
             dispatchStatus = `
@@ -2216,6 +2183,175 @@ Open tasks surfaced: ${openTasks.rows.length}${dispatchStatus}`;
   );
 }
 
+// src/mcp/tools/dependency-tree.ts
+import { z as z16 } from "zod";
+async function queryDependencyTasks() {
+  const client = getClient();
+  const scope = sessionScopeFilter();
+  const result3 = await client.execute({
+    sql: `SELECT id, title, status, priority, assigned_to, blocked_by, parent_task_id
+          FROM tasks
+          WHERE (blocked_by IS NOT NULL OR id IN (SELECT blocked_by FROM tasks WHERE blocked_by IS NOT NULL))
+            ${scope.sql}
+          ORDER BY priority ASC, created_at DESC
+          LIMIT 5000`,
+    args: [...scope.args]
+  });
+  return result3.rows.map((r) => ({
+    id: String(r.id),
+    title: String(r.title),
+    status: String(r.status),
+    priority: String(r.priority),
+    assignedTo: String(r.assigned_to),
+    blockedBy: r.blocked_by !== null && r.blocked_by !== void 0 ? String(r.blocked_by) : null,
+    parentTaskId: r.parent_task_id !== null && r.parent_task_id !== void 0 ? String(r.parent_task_id) : null
+  }));
+}
+function buildAdjacencyList(tasks) {
+  const adj = /* @__PURE__ */ new Map();
+  for (const task of tasks) {
+    if (task.blockedBy) {
+      const children = adj.get(task.blockedBy) ?? [];
+      children.push(task);
+      adj.set(task.blockedBy, children);
+    }
+  }
+  return adj;
+}
+function findRoots(tasks, adj) {
+  const taskMap = new Map(tasks.map((t) => [t.id, t]));
+  const blockerIds = new Set(adj.keys());
+  const rootIds = /* @__PURE__ */ new Set();
+  for (const id of blockerIds) {
+    const task = taskMap.get(id);
+    if (task && !task.blockedBy) {
+      rootIds.add(id);
+    }
+  }
+  for (const task of tasks) {
+    if (task.blockedBy && !taskMap.has(task.blockedBy) && !rootIds.has(task.id)) {
+      rootIds.add(task.id);
+    }
+  }
+  return [...rootIds].map((id) => taskMap.get(id)).filter(Boolean);
+}
+function renderTree(task, adj, taskMap, prefix, isLast, visited) {
+  if (visited.has(task.id)) {
+    return [`${prefix}${isLast ? "\u2514\u2500\u2500 " : "\u251C\u2500\u2500 "}[CYCLE] ${task.title} (${task.id.slice(0, 8)})`];
+  }
+  visited.add(task.id);
+  const shortId = task.id.slice(0, 8);
+  const line = `${prefix}${isLast ? "\u2514\u2500\u2500 " : "\u251C\u2500\u2500 "}[${task.priority.toUpperCase()}] ${task.title} (${task.status}) \u2192 ${task.assignedTo} [${shortId}]`;
+  const lines = [line];
+  const children = adj.get(task.id) ?? [];
+  const childPrefix = prefix + (isLast ? "    " : "\u2502   ");
+  for (let i = 0; i < children.length; i++) {
+    const child = children[i];
+    const childIsLast = i === children.length - 1;
+    lines.push(...renderTree(child, adj, taskMap, childPrefix, childIsLast, visited));
+  }
+  return lines;
+}
+function findDeadBlockers(tasks) {
+  const taskMap = new Map(tasks.map((t) => [t.id, t]));
+  const deadBlockers = [];
+  for (const task of tasks) {
+    if (task.blockedBy && task.status === "blocked") {
+      const blocker = taskMap.get(task.blockedBy);
+      if (blocker && (blocker.status === "done" || blocker.status === "closed" || blocker.status === "cancelled")) {
+        deadBlockers.push({ blocked: task, blocker });
+      }
+    }
+  }
+  return deadBlockers;
+}
+function renderSingleTree(rootTask, adj, taskMap) {
+  const visited = /* @__PURE__ */ new Set();
+  const rootLine = `[${rootTask.priority.toUpperCase()}] ${rootTask.title} (${rootTask.status}) \u2192 ${rootTask.assignedTo} [${rootTask.id.slice(0, 8)}]`;
+  const lines = [rootLine];
+  const children = adj.get(rootTask.id) ?? [];
+  for (let i = 0; i < children.length; i++) {
+    const child = children[i];
+    const isLast = i === children.length - 1;
+    visited.add(rootTask.id);
+    lines.push(...renderTree(child, adj, taskMap, "", isLast, visited));
+  }
+  return lines;
+}
+function registerDependencyTree(server) {
+  server.registerTool(
+    "dependency_tree",
+    {
+      title: "Task Dependency Tree",
+      description: "Visualize task dependency graph from blocked_by relationships. Shows tree view of task chains. Flags dead blockers (blocker done but blocked task not unblocked). Pass task_id to see tree rooted at one task, or omit for all trees.",
+      inputSchema: {
+        task_id: z16.string().optional().describe("Root task ID to show tree for. Omit for all dependency trees.")
+      }
+    },
+    async ({ task_id }) => {
+      try {
+        const tasks = await queryDependencyTasks();
+        if (tasks.length === 0) {
+          return {
+            content: [{ type: "text", text: "No task dependencies found." }]
+          };
+        }
+        const taskMap = new Map(tasks.map((t) => [t.id, t]));
+        const adj = buildAdjacencyList(tasks);
+        const output = [];
+        if (task_id) {
+          const rootTask = taskMap.get(task_id);
+          if (!rootTask) {
+            const match = tasks.find((t) => t.id.startsWith(task_id) || t.title.toLowerCase().includes(task_id.toLowerCase()));
+            if (!match) {
+              return {
+                content: [{ type: "text", text: `Task not found: ${task_id}` }],
+                isError: true
+              };
+            }
+            output.push("## Dependency Tree", "");
+            output.push(...renderSingleTree(match, adj, taskMap));
+          } else {
+            output.push("## Dependency Tree", "");
+            output.push(...renderSingleTree(rootTask, adj, taskMap));
+          }
+        } else {
+          const roots = findRoots(tasks, adj);
+          if (roots.length === 0) {
+            return {
+              content: [{ type: "text", text: "No dependency trees found (no root tasks)." }]
+            };
+          }
+          output.push(`## Dependency Trees (${roots.length} root(s), ${tasks.length} task(s))`, "");
+          for (const root of roots) {
+            output.push(...renderSingleTree(root, adj, taskMap));
+            output.push("");
+          }
+        }
+        const deadBlockers = findDeadBlockers(tasks);
+        if (deadBlockers.length > 0) {
+          output.push("", "## Dead Blockers (blocker completed but blocked task not unblocked)", "");
+          for (const { blocked, blocker } of deadBlockers) {
+            output.push(
+              `- [${blocked.priority.toUpperCase()}] ${blocked.title} (${blocked.status}) \u2192 ${blocked.assignedTo} [${blocked.id.slice(0, 8)}]`,
+              `  Blocked by: ${blocker.title} (${blocker.status}) [${blocker.id.slice(0, 8)}]`
+            );
+          }
+        }
+        return {
+          content: [{ type: "text", text: output.join("\n") }]
+        };
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return {
+          content: [{ type: "text", text: `Failed to build dependency tree: ${msg}` }],
+          isError: true
+        };
+      }
+    }
+  );
+}
+
 // src/mcp/tools/task.ts
 var ACTION_TO_LEGACY_TOOL2 = {
   create: "create_task",
@@ -2224,7 +2360,8 @@ var ACTION_TO_LEGACY_TOOL2 = {
   update: "update_task",
   close: "close_task",
   checkpoint: "checkpoint_task",
-  resume: "resume_employee"
+  resume: "resume_employee",
+  dependency_tree: "dependency_tree"
 };
 var REQUIRED_FIELDS2 = {
   create: ["title", "assigned_to", "project_name", "context"],
@@ -2233,7 +2370,8 @@ var REQUIRED_FIELDS2 = {
   update: ["task_id", "status"],
   close: ["task_id", "result"],
   checkpoint: ["task_id", "step", "context_summary"],
-  resume: ["agent_id"]
+  resume: ["agent_id"],
+  dependency_tree: []
 };
 function errorResult2(text3) {
   return {
@@ -2258,6 +2396,7 @@ function buildLegacyTaskHandlers() {
   registerCloseTask(localServer);
   registerCheckpointTask(localServer);
   registerResumeEmployee(localServer);
+  registerDependencyTree(localServer);
   return tools;
 }
 function registerTask(server) {
@@ -2266,29 +2405,30 @@ function registerTask(server) {
     "task",
     {
       title: "Task",
-      description: "Consolidated task domain tool. Use action=create/list/get/update/close/checkpoint/resume instead of separate task tools. Legacy task tools remain available during migration.",
+      description: "Consolidated task domain tool. Use action=create/list/get/update/close/checkpoint/resume/dependency_tree instead of separate task tools. Legacy task tools remain available during migration.",
       inputSchema: {
-        action: z16.enum(["create", "list", "get", "update", "close", "checkpoint", "resume"]).describe("Task operation to perform"),
-        task_id: z16.string().optional().describe("Task identifier \u2014 UUID, slug, filename fragment, or title substring"),
-        title: z16.string().optional().describe("Task title for action=create"),
-        assigned_to: z16.string().optional().describe("Employee name for action=create/list filter"),
-        project_name: z16.string().optional().describe("Project name. Use project_name='all' for action=list across projects."),
-        priority: z16.enum(["p0", "p1", "p2"]).optional().describe("Priority for create or list filter"),
-        complexity: z16.enum(["routine", "standard", "complex", "critical"]).optional().describe("Task complexity for action=create"),
-        context: z16.string().optional().describe("Full task description for action=create"),
-        blocked_by: z16.string().optional().describe("Blocking task ID/slug for action=create"),
-        parent_task_id: z16.string().optional().describe("Parent task ID/slug for action=create"),
-        reviewer: z16.string().optional().describe("Reviewer for action=create"),
-        budget_tokens: z16.number().optional().describe("Max token budget for action=create"),
-        budget_fallback_model: z16.string().optional().describe("Fallback model for action=create"),
-        spawn_runtime: z16.string().optional().describe("Override runtime for spawned session (e.g., 'claude', 'codex', 'opencode') for action=create"),
-        spawn_model: z16.string().optional().describe("Override model for spawned session (e.g., 'claude-sonnet-4.6') for action=create"),
-        status: z16.enum(["open", "in_progress", "done", "needs_review", "blocked", "cancelled", "closed"]).optional().describe("Status for action=update/list/close"),
-        result: z16.string().optional().describe("Result summary for action=update or action=close"),
-        step: z16.string().optional().describe("Checkpoint step for action=checkpoint"),
-        context_summary: z16.string().optional().describe("Checkpoint summary for action=checkpoint"),
-        files_touched: z16.array(z16.string()).optional().describe("Files touched for action=checkpoint"),
-        agent_id: z16.string().optional().describe("Employee name for action=resume")
+        action: z17.enum(["create", "list", "get", "update", "close", "checkpoint", "resume", "dependency_tree"]).describe("Task operation to perform"),
+        task_id: z17.string().optional().describe("Task identifier \u2014 UUID, slug, filename fragment, or title substring"),
+        title: z17.string().optional().describe("Task title for action=create"),
+        assigned_to: z17.string().optional().describe("Employee name for action=create/list filter"),
+        project_name: z17.string().optional().describe("Project name. Use project_name='all' for action=list across projects."),
+        priority: z17.enum(["p0", "p1", "p2"]).optional().describe("Priority for create or list filter"),
+        complexity: z17.enum(["routine", "standard", "complex", "critical"]).optional().describe("Task complexity for action=create"),
+        context: z17.string().optional().describe("Full task description for action=create"),
+        blocked_by: z17.string().optional().describe("Blocking task ID/slug for action=create"),
+        parent_task_id: z17.string().optional().describe("Parent task ID/slug for action=create"),
+        reviewer: z17.string().optional().describe("Reviewer for action=create"),
+        budget_tokens: z17.number().optional().describe("Max token budget for action=create"),
+        budget_fallback_model: z17.string().optional().describe("Fallback model for action=create"),
+        spawn_runtime: z17.string().optional().describe("Override runtime for spawned session (e.g., 'claude', 'codex', 'opencode') for action=create"),
+        spawn_model: z17.string().optional().describe("Override model for spawned session (e.g., 'claude-sonnet-4.6') for action=create"),
+        status: z17.enum(["open", "in_progress", "done", "needs_review", "blocked", "cancelled", "closed"]).optional().describe("Status for action=update/list/close"),
+        result: z17.string().optional().describe("Result summary for action=update or action=close"),
+        step: z17.string().optional().describe("Checkpoint step for action=checkpoint"),
+        context_summary: z17.string().optional().describe("Checkpoint summary for action=checkpoint"),
+        files_touched: z17.array(z17.string()).optional().describe("Files touched for action=checkpoint"),
+        agent_id: z17.string().optional().describe("Employee name for action=resume"),
+        cross_session: z17.boolean().optional().describe("When true, action=list returns tasks from ALL coordinator sessions (read-only). Default: false.")
       }
     },
     async (input, extra) => {
@@ -2323,9 +2463,7 @@ function registerTask(server) {
 }
 
 // src/mcp/tools/store-behavior.ts
-init_behaviors();
-import { z as z17 } from "zod";
-init_project_name();
+import { z as z18 } from "zod";
 function registerStoreBehavior(server) {
   server.registerTool(
     "store_behavior",
@@ -2333,11 +2471,11 @@ function registerStoreBehavior(server) {
       title: "Store Behavior",
       description: "Store a behavioral pattern, correction, or reusable procedure for an employee. Use for corrections ('don't do X'), preferences ('always use Y'), AND procedures ('here is how to do Z step by step'). After completing a complex multi-step task (5+ tool calls), consider storing the successful approach as a reusable procedure. Persists across sessions and projects.",
       inputSchema: {
-        content: z17.string().max(500).describe("The behavioral instruction \u2014 one clear sentence"),
-        domain: z17.string().optional().describe("Category: workflow, code-style, tool-use, communication, architecture, testing"),
-        priority: z17.enum(["p0", "p1", "p2"]).optional().describe("Priority tier. p0 = always included (orchestration rules, hard gates). p1 = standard (default). p2 = nice-to-have."),
-        agent_id: z17.string().optional().describe("Employee name. Defaults to current agent."),
-        project_name: z17.string().optional().describe("Defaults to current project. Pass 'global' for a behavior that applies everywhere.")
+        content: z18.string().max(500).describe("The behavioral instruction \u2014 one clear sentence"),
+        domain: z18.string().optional().describe("Category: workflow, code-style, tool-use, communication, architecture, testing"),
+        priority: z18.enum(["p0", "p1", "p2"]).optional().describe("Priority tier. p0 = always included (orchestration rules, hard gates). p1 = standard (default). p2 = nice-to-have."),
+        agent_id: z18.string().optional().describe("Employee name. Defaults to current agent."),
+        project_name: z18.string().optional().describe("Defaults to current project. Pass 'global' for a behavior that applies everywhere.")
       }
     },
     async ({ content, domain, priority, agent_id, project_name }) => {
@@ -2345,16 +2483,19 @@ function registerStoreBehavior(server) {
       const resolvedAgent = agent_id ?? activeAgent.agentId;
       if (agent_id && agent_id !== activeAgent.agentId) {
         try {
-          const { canCoordinate: canCoordinate2 } = await import("./lib/employees.js");
-          if (!canCoordinate2(activeAgent.agentId, activeAgent.agentRole ?? "employee")) {
+          const { canManage: canManage2, baseAgentName: baseAgentName2, loadEmployeesSync: loadEmployeesSync2 } = await import("./lib/employees.js");
+          const roster = loadEmployeesSync2();
+          const callerBase = baseAgentName2(activeAgent.agentId, roster);
+          const targetBase = baseAgentName2(agent_id, roster);
+          if (callerBase !== targetBase && !canManage2(callerBase, activeAgent.agentRole ?? "employee", targetBase, roster)) {
             return {
-              content: [{ type: "text", text: `Authorization denied: only coordinators can write behaviors for other agents. You (${activeAgent.agentId}) cannot write behaviors for ${agent_id}.` }],
+              content: [{ type: "text", text: `Authorization denied: your role (${activeAgent.agentRole ?? "unknown"}) cannot write behaviors for ${agent_id}. Chain of command: COO \u2192 anyone, CTO \u2192 engineers, CMO \u2192 content.` }],
               isError: true
             };
           }
         } catch {
           return {
-            content: [{ type: "text", text: `Authorization denied: unable to verify coordinator role for ${activeAgent.agentId}. Cross-agent behavior writes require roster validation.` }],
+            content: [{ type: "text", text: `Authorization denied: unable to verify role for ${activeAgent.agentId}. Cross-agent behavior writes require roster validation.` }],
             isError: true
           };
         }
@@ -2368,10 +2509,10 @@ function registerStoreBehavior(server) {
         resolvedProject = getProjectName();
       }
       try {
-        const { loadEmployeesSync: loadEmployeesSync2, baseAgentName } = await import("./lib/employees.js");
+        const { loadEmployeesSync: loadEmployeesSync2, baseAgentName: baseAgentName2 } = await import("./lib/employees.js");
         const roster = loadEmployeesSync2();
         if (roster.length > 0) {
-          const base = baseAgentName(resolvedAgent, roster);
+          const base = baseAgentName2(resolvedAgent, roster);
           if (!roster.some((e) => e.name === resolvedAgent || e.name === base)) {
             return {
               content: [{
@@ -2418,11 +2559,9 @@ Use /exe-forget to remove any that this supersedes.`;
 }
 
 // src/mcp/tools/message.ts
-import { z as z18 } from "zod";
+import { z as z19 } from "zod";
 
 // src/mcp/tools/acknowledge-messages.ts
-init_database();
-init_task_scope();
 function registerAcknowledgeMessages(server) {
   server.registerTool(
     "acknowledge_messages",
@@ -2435,7 +2574,7 @@ function registerAcknowledgeMessages(server) {
       const agent = getActiveAgent();
       const agentId = agent.agentId || "default";
       const client = getClient();
-      const scope = strictSessionScopeFilter();
+      const scope = sessionScopeFilter();
       const result3 = await client.execute({
         sql: `UPDATE messages SET status = 'acknowledged', processed_at = datetime('now')
               WHERE target_agent = ? AND status IN ('pending', 'delivered')${scope.sql}`,
@@ -2472,12 +2611,12 @@ function registerMessage(server) {
     title: "Message",
     description: "Consolidated inter-agent message tool. Actions: send, acknowledge. Legacy message tools remain available during migration.",
     inputSchema: {
-      action: z18.enum(["send", "acknowledge"]).describe("Message operation to perform"),
-      target_agent: z18.string().optional().describe("Recipient agent for action=send"),
-      content: z18.string().optional().describe("Message content for action=send"),
-      target_project: z18.string().optional().describe("Project context for action=send"),
-      priority: z18.enum(["normal", "urgent"]).optional().describe("Priority for action=send"),
-      target_device: z18.string().optional().describe("Target device ID for action=send")
+      action: z19.enum(["send", "acknowledge"]).describe("Message operation to perform"),
+      target_agent: z19.string().optional().describe("Recipient agent for action=send"),
+      content: z19.string().optional().describe("Message content for action=send"),
+      target_project: z19.string().optional().describe("Project context for action=send"),
+      priority: z19.enum(["normal", "urgent"]).optional().describe("Priority for action=send"),
+      target_device: z19.string().optional().describe("Target device ID for action=send")
     }
   }, async (input, extra) => {
     const action = input.action;
@@ -2494,9 +2633,7 @@ function registerMessage(server) {
 }
 
 // src/mcp/tools/list-behaviors.ts
-init_database();
-import { z as z19 } from "zod";
-init_project_name();
+import { z as z20 } from "zod";
 function rowToBehavior(r) {
   return {
     id: String(r.id),
@@ -2522,9 +2659,9 @@ function registerListBehaviors(server) {
       title: "List Behaviors",
       description: "Query stored behavioral patterns and corrections. Useful for reviewing what rules are active for an agent mid-session.",
       inputSchema: {
-        agent_id: z19.string().optional().describe("Agent name. Defaults to current agent. Pass 'all' to see everyone's."),
-        domain: z19.string().optional().describe("Filter by domain: workflow, code-style, tool-use, communication, architecture, testing"),
-        project_name: z19.string().optional().describe("Filter by project. Defaults to current project + global behaviors.")
+        agent_id: z20.string().optional().describe("Agent name. Defaults to current agent. Pass 'all' to see everyone's."),
+        domain: z20.string().optional().describe("Filter by domain: workflow, code-style, tool-use, communication, architecture, testing"),
+        project_name: z20.string().optional().describe("Filter by project. Defaults to current project + global behaviors.")
       }
     },
     async ({ agent_id, domain, project_name }) => {
@@ -2583,11 +2720,10 @@ ${lines.join("\n")}`
 }
 
 // src/mcp/tools/identity.ts
-import { z as z22 } from "zod";
+import { z as z23 } from "zod";
 
 // src/mcp/tools/get-identity.ts
-init_identity();
-import { z as z20 } from "zod";
+import { z as z21 } from "zod";
 function registerGetIdentity(server) {
   server.registerTool(
     "get_identity",
@@ -2595,7 +2731,7 @@ function registerGetIdentity(server) {
       title: "Get Identity",
       description: "Read an agent's exe.md identity \u2014 their permanent role definition, responsibilities, and non-negotiables. Defaults to your own identity. All agents can read all identities.",
       inputSchema: {
-        agent_id: z20.string().optional().describe("Agent to read. Defaults to self. Pass 'all' to list all identities.")
+        agent_id: z21.string().optional().describe("Agent to read. Defaults to self. Pass 'all' to list all identities.")
       }
     },
     async ({ agent_id }) => {
@@ -2637,9 +2773,7 @@ ${identity.body}`
 }
 
 // src/mcp/tools/update-identity.ts
-init_identity();
-import { z as z21 } from "zod";
-init_employees();
+import { z as z22 } from "zod";
 function registerUpdateIdentity(server) {
   server.registerTool(
     "update_identity",
@@ -2647,8 +2781,8 @@ function registerUpdateIdentity(server) {
       title: "Update Identity",
       description: "Write an agent's exe.md identity. RESTRICTED: only coordinator or founder sessions can use this. Agents cannot rewrite their own identity. Content should be markdown with YAML frontmatter.",
       inputSchema: {
-        agent_id: z21.string().describe("Target agent whose identity to write"),
-        content: z21.string().describe(
+        agent_id: z22.string().describe("Target agent whose identity to write"),
+        content: z22.string().describe(
           "Full markdown content with YAML frontmatter. Must include ---\\nrole: ...\\ntitle: ...\\n---\\n and body sections."
         )
       }
@@ -2706,9 +2840,9 @@ function registerIdentity(server) {
     title: "Identity",
     description: "Consolidated identity domain tool. Actions: get, update. Legacy identity tools remain available during migration.",
     inputSchema: {
-      action: z22.enum(["get", "update"]).describe("Identity operation to perform"),
-      agent_id: z22.string().optional().describe("Agent to read/update. For get, omit for self or pass 'all'."),
-      content: z22.string().optional().describe("Full exe.md content for action=update")
+      action: z23.enum(["get", "update"]).describe("Identity operation to perform"),
+      agent_id: z23.string().optional().describe("Agent to read/update. For get, omit for self or pass 'all'."),
+      content: z23.string().optional().describe("Full exe.md content for action=update")
     }
   }, async (input, extra) => {
     const action = input.action;
@@ -2724,14 +2858,12 @@ function registerIdentity(server) {
 }
 
 // src/mcp/tools/document.ts
-import { z as z28 } from "zod";
+import { z as z29 } from "zod";
 
 // src/mcp/tools/ingest-document.ts
-import { z as z23 } from "zod";
+import { z as z24 } from "zod";
 
 // src/lib/documents.ts
-init_database();
-init_embedder();
 import crypto3 from "crypto";
 var WIKI_AGENT_ID = "wiki";
 var WIKI_AGENT_ROLE = "Knowledge";
@@ -2884,7 +3016,7 @@ async function ingestDocument(input) {
   const userId = input.user_id ?? null;
   const documentMetadata = input.document_metadata != null ? JSON.stringify(input.document_metadata) : null;
   const chunkIds = input.chunks.map(() => crypto3.randomUUID());
-  const versions = reserveVersions(input.chunks.length);
+  const versions = await reserveVersions(input.chunks.length);
   const documentStmt = {
     sql: `INSERT INTO documents
             (id, workspace_id, filename, mime, source_type, user_id, uploaded_at, metadata)
@@ -2987,24 +3119,24 @@ function registerIngestDocument(server) {
       title: "Ingest Document",
       description: "Bulk-upload a document and its chunks to wiki memory in a single round-trip. Lazily creates the workspace if missing. Falls back to NULL vectors when the embedding daemon is offline (backfill job will fill them later).",
       inputSchema: {
-        workspace_id: z23.string().describe("Workspace UUID or slug \u2014 created lazily if not found"),
-        filename: z23.string().describe("Document filename"),
-        mime: z23.string().optional().describe("MIME type (e.g. application/pdf)"),
-        source_type: z23.enum(["upload", "url", "manual", "paste"]).optional().describe("How the document was added"),
-        user_id: z23.string().optional().describe("AnythingLLM User.id (uploader). Null = shared."),
-        chunks: z23.array(z23.object({
-          text: z23.string(),
-          char_offset: z23.number().optional(),
-          page_number: z23.number().optional(),
-          metadata: z23.record(z23.string(), z23.unknown()).optional()
+        workspace_id: z24.string().describe("Workspace UUID or slug \u2014 created lazily if not found"),
+        filename: z24.string().describe("Document filename"),
+        mime: z24.string().optional().describe("MIME type (e.g. application/pdf)"),
+        source_type: z24.enum(["upload", "url", "manual", "paste"]).optional().describe("How the document was added"),
+        user_id: z24.string().optional().describe("AnythingLLM User.id (uploader). Null = shared."),
+        chunks: z24.array(z24.object({
+          text: z24.string(),
+          char_offset: z24.number().optional(),
+          page_number: z24.number().optional(),
+          metadata: z24.record(z24.string(), z24.unknown()).optional()
         })).describe("Document chunks to ingest"),
-        document_metadata: z23.record(z23.string(), z23.unknown()).optional().describe("Optional metadata stored on the document row")
+        document_metadata: z24.record(z24.string(), z24.unknown()).optional().describe("Optional metadata stored on the document row")
       }
     },
     async (input) => {
       try {
-        const { assertFeature: assertFeature2 } = await import("./plan-limits-TK4424RV.js");
-        const { assertMemoryLimit: assertMemoryLimit2 } = await import("./plan-limits-TK4424RV.js");
+        const { assertFeature: assertFeature2 } = await import("./plan-limits-7L75PB33.js");
+        const { assertMemoryLimit: assertMemoryLimit2 } = await import("./plan-limits-7L75PB33.js");
         await assertFeature2("wiki");
         await assertMemoryLimit2();
         const result3 = await ingestDocument(input);
@@ -3030,7 +3162,7 @@ function registerIngestDocument(server) {
 }
 
 // src/mcp/tools/list-documents.ts
-import { z as z24 } from "zod";
+import { z as z25 } from "zod";
 function registerListDocuments(server) {
   server.registerTool(
     "list_documents",
@@ -3038,9 +3170,9 @@ function registerListDocuments(server) {
       title: "List Documents",
       description: "List documents in a wiki workspace, newest first, with chunk counts. Paginated via limit/offset.",
       inputSchema: {
-        workspace_id: z24.string().describe("Workspace id (UUID). Use resolveWorkspace / ingest_document to create one."),
-        limit: z24.number().int().positive().optional().describe(`Max rows to return (default ${DEFAULT_LIST_LIMIT}).`),
-        offset: z24.number().int().nonnegative().optional().describe("Rows to skip (default 0).")
+        workspace_id: z25.string().describe("Workspace id (UUID). Use resolveWorkspace / ingest_document to create one."),
+        limit: z25.number().int().positive().optional().describe(`Max rows to return (default ${DEFAULT_LIST_LIMIT}).`),
+        offset: z25.number().int().nonnegative().optional().describe("Rows to skip (default 0).")
       }
     },
     async ({ workspace_id, limit, offset }) => {
@@ -3062,7 +3194,7 @@ function registerListDocuments(server) {
 }
 
 // src/mcp/tools/purge-document.ts
-import { z as z25 } from "zod";
+import { z as z26 } from "zod";
 function registerPurgeDocument(server) {
   server.registerTool(
     "purge_document",
@@ -3070,7 +3202,7 @@ function registerPurgeDocument(server) {
       title: "Purge Document",
       description: "Delete a wiki document and all its chunks in a single transaction. Idempotent: non-existent document returns deleted_chunks=0.",
       inputSchema: {
-        document_id: z25.string().describe("Document id (UUID) to purge.")
+        document_id: z26.string().describe("Document id (UUID) to purge.")
       }
     },
     async ({ document_id }) => {
@@ -3095,7 +3227,7 @@ function registerPurgeDocument(server) {
 }
 
 // src/mcp/tools/set-document-importance.ts
-import { z as z26 } from "zod";
+import { z as z27 } from "zod";
 function registerSetDocumentImportance(server) {
   server.registerTool(
     "set_document_importance",
@@ -3103,8 +3235,8 @@ function registerSetDocumentImportance(server) {
       title: "Set Document Importance",
       description: `Bulk-update importance (${MIN_IMPORTANCE}-${MAX_IMPORTANCE}) on all chunks of a wiki document. Higher = surfaces earlier in search.`,
       inputSchema: {
-        document_id: z26.string().describe("Document id (UUID)."),
-        importance: z26.number().int().min(MIN_IMPORTANCE).max(MAX_IMPORTANCE).describe(`Importance score ${MIN_IMPORTANCE}-${MAX_IMPORTANCE} (inclusive).`)
+        document_id: z27.string().describe("Document id (UUID)."),
+        importance: z27.number().int().min(MIN_IMPORTANCE).max(MAX_IMPORTANCE).describe(`Importance score ${MIN_IMPORTANCE}-${MAX_IMPORTANCE} (inclusive).`)
       }
     },
     async ({ document_id, importance }) => {
@@ -3122,7 +3254,7 @@ function registerSetDocumentImportance(server) {
 }
 
 // src/mcp/tools/rerank-documents.ts
-import { z as z27 } from "zod";
+import { z as z28 } from "zod";
 var MAX_CANDIDATES = 50;
 function registerRerankDocuments(server) {
   server.registerTool(
@@ -3131,14 +3263,14 @@ function registerRerankDocuments(server) {
       title: "Rerank Documents",
       description: "Score candidate texts against a query using the local Jina Reranker v3 cross-encoder. Returns candidates sorted by relevance with per-item scores and original indices. Useful for agent tool selection, pointwise re-ranking, or any flow that already has candidates and only needs scoring.",
       inputSchema: {
-        query: z27.string().min(1, "query must not be empty").describe("The query to score candidates against."),
-        candidates: z27.array(z27.string()).min(1, "candidates must contain at least one text").max(
+        query: z28.string().min(1, "query must not be empty").describe("The query to score candidates against."),
+        candidates: z28.array(z28.string()).min(1, "candidates must contain at least one text").max(
           MAX_CANDIDATES,
           `candidates may contain at most ${MAX_CANDIDATES} items`
         ).describe(
           `Ordered list of candidate texts to score (up to ${MAX_CANDIDATES}).`
         ),
-        top_k: z27.coerce.number().int().positive().optional().describe(
+        top_k: z28.coerce.number().int().positive().optional().describe(
           "Max number of top-ranked results to return. Omit to return all candidates scored and sorted."
         )
       }
@@ -3206,26 +3338,26 @@ function registerDocument(server) {
       title: "Document",
       description: "Consolidated document domain tool. Actions: ingest, list, purge, set_importance, rerank. Legacy document tools remain available during migration.",
       inputSchema: {
-        action: z28.enum(["ingest", "list", "purge", "set_importance", "rerank"]).describe("Document operation to perform"),
-        workspace_id: z28.string().optional().describe("Workspace UUID or slug"),
-        filename: z28.string().optional().describe("Document filename for action=ingest"),
-        mime: z28.string().optional().describe("MIME type for action=ingest"),
-        source_type: z28.enum(["upload", "url", "manual", "paste"]).optional().describe("Source type for action=ingest"),
-        user_id: z28.string().optional().describe("Uploader user ID for action=ingest"),
-        chunks: z28.array(z28.object({
-          text: z28.string(),
-          char_offset: z28.number().optional(),
-          page_number: z28.number().optional(),
-          metadata: z28.record(z28.string(), z28.unknown()).optional()
+        action: z29.enum(["ingest", "list", "purge", "set_importance", "rerank"]).describe("Document operation to perform"),
+        workspace_id: z29.string().optional().describe("Workspace UUID or slug"),
+        filename: z29.string().optional().describe("Document filename for action=ingest"),
+        mime: z29.string().optional().describe("MIME type for action=ingest"),
+        source_type: z29.enum(["upload", "url", "manual", "paste"]).optional().describe("Source type for action=ingest"),
+        user_id: z29.string().optional().describe("Uploader user ID for action=ingest"),
+        chunks: z29.array(z29.object({
+          text: z29.string(),
+          char_offset: z29.number().optional(),
+          page_number: z29.number().optional(),
+          metadata: z29.record(z29.string(), z29.unknown()).optional()
         })).optional().describe("Document chunks for action=ingest"),
-        document_metadata: z28.record(z28.string(), z28.unknown()).optional().describe("Document metadata for action=ingest"),
-        document_id: z28.string().optional().describe("Document ID for purge/set_importance"),
-        importance: z28.number().int().min(1).max(10).optional().describe("Importance for action=set_importance"),
-        query: z28.string().optional().describe("Query for action=rerank"),
-        candidates: z28.array(z28.string()).optional().describe("Candidate texts for action=rerank"),
-        top_k: z28.coerce.number().int().positive().optional().describe("Top K for action=rerank"),
-        limit: z28.number().int().positive().optional().describe("Limit for action=list"),
-        offset: z28.number().int().nonnegative().optional().describe("Offset for action=list")
+        document_metadata: z29.record(z29.string(), z29.unknown()).optional().describe("Document metadata for action=ingest"),
+        document_id: z29.string().optional().describe("Document ID for purge/set_importance"),
+        importance: z29.number().int().min(1).max(10).optional().describe("Importance for action=set_importance"),
+        query: z29.string().optional().describe("Query for action=rerank"),
+        candidates: z29.array(z29.string()).optional().describe("Candidate texts for action=rerank"),
+        top_k: z29.coerce.number().int().positive().optional().describe("Top K for action=rerank"),
+        limit: z29.number().int().positive().optional().describe("Limit for action=list"),
+        offset: z29.number().int().nonnegative().optional().describe("Offset for action=list")
       }
     },
     async (input, extra) => {
@@ -3251,14 +3383,13 @@ function registerDocument(server) {
 }
 
 // src/mcp/tools/gateway.ts
-import { z as z33 } from "zod";
+import { z as z34 } from "zod";
 
 // src/mcp/tools/send-whatsapp.ts
-import { z as z29 } from "zod";
+import { z as z30 } from "zod";
 import { existsSync, readFileSync } from "fs";
 import { homedir } from "os";
 import { join } from "path";
-init_plan_limits();
 var GRAPH_API_VERSION = "v21.0";
 var GRAPH_API_BASE = `https://graph.facebook.com/${GRAPH_API_VERSION}`;
 var DEFAULT_GATEWAY_SEND_URL = "http://127.0.0.1:3100/api/send";
@@ -3389,9 +3520,9 @@ function registerSendWhatsapp(server) {
       title: "Send WhatsApp",
       description: "Send a WhatsApp message to one or more recipients. Recipients can be phone numbers or names (looked up in CRM).",
       inputSchema: {
-        recipients: z29.array(z29.string()).describe("Names to look up in CRM, or phone numbers directly"),
-        message: z29.string().describe("Message text to send"),
-        account: z29.string().optional().describe(
+        recipients: z30.array(z30.string()).describe("Names to look up in CRM, or phone numbers directly"),
+        message: z30.string().describe("Message text to send"),
+        account: z30.string().optional().describe(
           "Which WhatsApp account to send from (e.g., 'lenny'). Falls back to default account."
         )
       }
@@ -3473,31 +3604,30 @@ function registerSendWhatsapp(server) {
 }
 
 // src/mcp/tools/query-conversations.ts
-init_database();
-import { z as z31 } from "zod";
+import { z as z32 } from "zod";
 
 // src/lib/unified-query.ts
-import { z as z30 } from "zod";
+import { z as z31 } from "zod";
 var PaginationSchema = {
-  limit: z30.coerce.number().int().min(1).max(100).optional().describe("Max results to return (default 25, max 100)"),
-  offset: z30.coerce.number().int().min(0).optional().describe("Number of results to skip for pagination")
+  limit: z31.coerce.number().int().min(1).max(100).optional().describe("Max results to return (default 25, max 100)"),
+  offset: z31.coerce.number().int().min(0).optional().describe("Number of results to skip for pagination")
 };
 var DateRangeSchema = {
-  date_from: z30.string().optional().describe("Filter records created/updated after this ISO date (inclusive)"),
-  date_to: z30.string().optional().describe("Filter records created/updated before this ISO date (inclusive)")
+  date_from: z31.string().optional().describe("Filter records created/updated after this ISO date (inclusive)"),
+  date_to: z31.string().optional().describe("Filter records created/updated before this ISO date (inclusive)")
 };
 var TextSearchSchema = {
-  text_search: z30.string().optional().describe("Full-text search across relevant fields")
+  text_search: z31.string().optional().describe("Full-text search across relevant fields")
 };
 var SortSchema = {
-  sort_by: z30.string().optional().describe("Field to sort by (tool-specific, default varies)"),
-  sort_order: z30.enum(["asc", "desc"]).optional().describe("Sort direction (default desc)")
+  sort_by: z31.string().optional().describe("Field to sort by (tool-specific, default varies)"),
+  sort_order: z31.enum(["asc", "desc"]).optional().describe("Sort direction (default desc)")
 };
 var SourceFilterSchema = {
-  source: z30.string().optional().describe("Filter by data source/platform")
+  source: z31.string().optional().describe("Filter by data source/platform")
 };
 var StructuredFiltersSchema = {
-  structured_filters: z30.record(z30.string(), z30.unknown()).optional().describe(
+  structured_filters: z31.record(z31.string(), z31.unknown()).optional().describe(
     "Structured field filters: { field: value } for equality, or { field: { op: 'gt'|'lt'|'gte'|'lte'|'contains'|'neq', value: ... } }"
   )
 };
@@ -3576,13 +3706,13 @@ function registerQueryConversations(server) {
       title: "Query Conversations",
       description: "Search across all adapter messages by content, sender, date range, or platform. Returns messages with source attribution (platform, sender, timestamp).",
       inputSchema: {
-        query: z31.string().optional().describe("Full-text search query across message content and responses"),
-        sender: z31.string().optional().describe("Filter by sender ID or name (partial match)"),
-        platform: z31.string().optional().describe("Filter by platform: whatsapp, signal, telegram, discord, imessage, slack, email, webchat"),
-        after: z31.string().optional().describe("Filter messages after this ISO 8601 date (alias for date_from)"),
-        before: z31.string().optional().describe("Filter messages before this ISO 8601 date (alias for date_to)"),
-        channel_id: z31.string().optional().describe("Filter by channel/chat ID"),
-        thread_id: z31.string().optional().describe("Filter by conversation thread ID"),
+        query: z32.string().optional().describe("Full-text search query across message content and responses"),
+        sender: z32.string().optional().describe("Filter by sender ID or name (partial match)"),
+        platform: z32.string().optional().describe("Filter by platform: whatsapp, signal, telegram, discord, imessage, slack, email, webchat"),
+        after: z32.string().optional().describe("Filter messages after this ISO 8601 date (alias for date_from)"),
+        before: z32.string().optional().describe("Filter messages before this ISO 8601 date (alias for date_to)"),
+        channel_id: z32.string().optional().describe("Filter by channel/chat ID"),
+        thread_id: z32.string().optional().describe("Filter by conversation thread ID"),
         ...DateRangeSchema,
         ...SortSchema,
         ...PaginationSchema
@@ -3694,10 +3824,10 @@ function registerQueryConversations(server) {
 
 // src/mcp/tools/query-company-brain.ts
 init_config();
-import { z as z32 } from "zod";
+import { z as z33 } from "zod";
 var FETCH_TIMEOUT_MS = 1e4;
-var QUERY_SCOPE = z32.enum(["raw", "crm", "wiki", "memory", "gateway", "all", "cross"]);
-var QUERY_ACTION = z32.enum(["search", "list_sources", "sql"]);
+var QUERY_SCOPE = z33.enum(["raw", "crm", "wiki", "memory", "gateway", "all", "cross"]);
+var QUERY_ACTION = z33.enum(["search", "list_sources", "sql"]);
 var LOCAL_GATEWAY_HTTP_HOSTS = /^(localhost|127\.0\.0\.1|::1|exe-gateway|gateway)$/i;
 function assertSecureGatewayUrlForToken(gatewayUrl, authToken) {
   if (!authToken) return;
@@ -3733,10 +3863,10 @@ function registerQueryCompanyBrain(server) {
       description: "Search the Company Brain \u2014 queries across all data (raw events, wiki docs, agent memories, gateway messages).",
       inputSchema: {
         action: QUERY_ACTION.default("search").describe("search = search exe-db; list_sources = list available sources; sql = run read-only SQL through gateway"),
-        query: z32.string().optional().describe("Search text. Required for action=search."),
-        sql: z32.string().optional().describe("Read-only SELECT/WITH SQL. Required for action=sql."),
+        query: z33.string().optional().describe("Search text. Required for action=search."),
+        sql: z33.string().optional().describe("Read-only SELECT/WITH SQL. Required for action=sql."),
         scope: QUERY_SCOPE.default("all").describe("Which data scope to search/read (raw, crm, wiki, memory, gateway, all)"),
-        source: z32.string().optional().describe("Filter raw events by source (shopify, asana, etc.)"),
+        source: z33.string().optional().describe("Filter raw events by source (shopify, asana, etc.)"),
         ...PaginationSchema,
         ...DateRangeSchema,
         ...SortSchema
@@ -3932,22 +4062,22 @@ function registerGateway(server) {
     title: "Gateway",
     description: "Consolidated gateway/customer communication tool. Actions: send_whatsapp, query_conversations, query_company_brain. Legacy gateway tools remain available during migration.",
     inputSchema: {
-      action: z33.enum(["send_whatsapp", "query_conversations", "query_company_brain"]).describe("Gateway operation to perform"),
-      recipients: z33.array(z33.string()).optional().describe("Names or phone numbers for action=send_whatsapp"),
-      message: z33.string().optional().describe("WhatsApp message text"),
-      account: z33.string().optional().describe("WhatsApp account name"),
-      query: z33.string().optional().describe("Search query"),
-      sender: z33.string().optional().describe("Conversation sender filter"),
-      platform: z33.string().optional().describe("Conversation platform filter"),
-      after: z33.string().optional().describe("Conversation lower date bound"),
-      before: z33.string().optional().describe("Conversation upper date bound"),
-      channel_id: z33.string().optional().describe("Conversation channel filter"),
-      thread_id: z33.string().optional().describe("Conversation thread filter"),
-      limit: z33.coerce.number().int().min(1).max(100).optional().describe("Max results"),
-      scope: z33.enum(["raw", "wiki", "memory", "gateway", "all"]).optional().describe("Company Brain scope"),
-      source: z33.string().optional().describe("Company Brain raw event source filter"),
-      auth_token: z33.string().optional().describe("GoTrue JWT for user authentication"),
-      user_id: z33.string().optional().describe("GoTrue user ID (admin lookup fallback)")
+      action: z34.enum(["send_whatsapp", "query_conversations", "query_company_brain"]).describe("Gateway operation to perform"),
+      recipients: z34.array(z34.string()).optional().describe("Names or phone numbers for action=send_whatsapp"),
+      message: z34.string().optional().describe("WhatsApp message text"),
+      account: z34.string().optional().describe("WhatsApp account name"),
+      query: z34.string().optional().describe("Search query"),
+      sender: z34.string().optional().describe("Conversation sender filter"),
+      platform: z34.string().optional().describe("Conversation platform filter"),
+      after: z34.string().optional().describe("Conversation lower date bound"),
+      before: z34.string().optional().describe("Conversation upper date bound"),
+      channel_id: z34.string().optional().describe("Conversation channel filter"),
+      thread_id: z34.string().optional().describe("Conversation thread filter"),
+      limit: z34.coerce.number().int().min(1).max(100).optional().describe("Max results"),
+      scope: z34.enum(["raw", "wiki", "memory", "gateway", "all"]).optional().describe("Company Brain scope"),
+      source: z34.string().optional().describe("Company Brain raw event source filter"),
+      auth_token: z34.string().optional().describe("GoTrue JWT for user authentication"),
+      user_id: z34.string().optional().describe("GoTrue user ID (admin lookup fallback)")
     }
   }, async (input, extra) => {
     const action = input.action;
@@ -3986,11 +4116,10 @@ function registerGateway(server) {
 }
 
 // src/mcp/tools/graph.ts
-import { z as z40 } from "zod";
+import { z as z41 } from "zod";
 
 // src/mcp/tools/get-entity-neighbors.ts
-init_database();
-import { z as z34 } from "zod";
+import { z as z35 } from "zod";
 function registerGetEntityNeighbors(server) {
   server.registerTool(
     "get_entity_neighbors",
@@ -3998,8 +4127,8 @@ function registerGetEntityNeighbors(server) {
       title: "Get Entity Neighbors",
       description: "Get connected entities for a given entity name. Returns neighbors with relationship types, directions, and weights.",
       inputSchema: {
-        entity_name: z34.string().describe("Name of the entity to find neighbors for"),
-        as_of: z34.string().optional().describe("ISO 8601 timestamp for time-travel. Returns only relationships valid at that point in time.")
+        entity_name: z35.string().describe("Name of the entity to find neighbors for"),
+        as_of: z35.string().optional().describe("ISO 8601 timestamp for time-travel. Returns only relationships valid at that point in time.")
       }
     },
     async ({ entity_name, as_of }) => {
@@ -4067,8 +4196,7 @@ function registerGetEntityNeighbors(server) {
 }
 
 // src/mcp/tools/get-hot-entities.ts
-init_database();
-import { z as z35 } from "zod";
+import { z as z36 } from "zod";
 var PERIOD_MS = {
   "24h": 24 * 60 * 60 * 1e3,
   "7d": 7 * 24 * 60 * 60 * 1e3,
@@ -4081,8 +4209,8 @@ function registerGetHotEntities(server) {
       title: "Get Hot Entities",
       description: "Get trending entities \u2014 those with the most new relationships in a time period. Surfaces what's most active in the knowledge graph.",
       inputSchema: {
-        period: z35.enum(["24h", "7d", "30d"]).default("7d").describe("Time period to look back"),
-        limit: z35.number().int().min(1).max(50).default(10).describe("Max entities to return")
+        period: z36.enum(["24h", "7d", "30d"]).default("7d").describe("Time period to look back"),
+        limit: z36.number().int().min(1).max(50).default(10).describe("Max entities to return")
       }
     },
     async ({ period, limit }) => {
@@ -4129,8 +4257,7 @@ function registerGetHotEntities(server) {
 }
 
 // src/mcp/tools/get-graph-stats.ts
-init_database();
-import { z as z36 } from "zod";
+import { z as z37 } from "zod";
 function registerGetGraphStats(server) {
   server.registerTool(
     "get_graph_stats",
@@ -4138,7 +4265,7 @@ function registerGetGraphStats(server) {
       title: "Get Graph Stats",
       description: "Get knowledge graph summary statistics: entity count, relationship count, and entity type breakdown.",
       inputSchema: {
-        _dummy: z36.string().optional().describe("Unused \u2014 no input required")
+        _dummy: z37.string().optional().describe("Unused \u2014 no input required")
       }
     },
     async () => {
@@ -4178,8 +4305,7 @@ function registerGetGraphStats(server) {
 }
 
 // src/mcp/tools/export-graph.ts
-init_database();
-import { z as z37 } from "zod";
+import { z as z38 } from "zod";
 function registerExportGraph(server) {
   server.registerTool(
     "export_graph",
@@ -4187,7 +4313,7 @@ function registerExportGraph(server) {
       title: "Export Graph",
       description: "Export the knowledge graph as a markdown report (inline) or an interactive HTML visualization (writes file, returns path).",
       inputSchema: {
-        format: z37.enum(["html", "markdown"]).default("markdown").describe("Export format: markdown (inline) or html (file)")
+        format: z38.enum(["html", "markdown"]).default("markdown").describe("Export format: markdown (inline) or html (file)")
       }
     },
     async ({ format: format2 }) => {
@@ -4236,8 +4362,7 @@ Open in a browser to explore interactively.`
 }
 
 // src/mcp/tools/merge-entities.ts
-init_database();
-import { z as z38 } from "zod";
+import { z as z39 } from "zod";
 function registerMergeEntities(server) {
   server.registerTool(
     "merge_entities",
@@ -4245,10 +4370,10 @@ function registerMergeEntities(server) {
       title: "Merge Entities",
       description: 'Merge duplicate GraphRAG entities. Moves all relationships and memory links from source to target entity, registers source name as alias, deletes source. Use when "Lenny" and "Leonard" should be the same entity.',
       inputSchema: {
-        source_name: z38.string().describe("Name of the entity to merge FROM (will be deleted)"),
-        source_type: z38.string().describe('Entity type (e.g., "person", "company", "product")'),
-        target_name: z38.string().describe("Name of the entity to merge INTO (will be kept)"),
-        target_type: z38.string().describe("Entity type of the target")
+        source_name: z39.string().describe("Name of the entity to merge FROM (will be deleted)"),
+        source_type: z39.string().describe('Entity type (e.g., "person", "company", "product")'),
+        target_name: z39.string().describe("Name of the entity to merge INTO (will be kept)"),
+        target_type: z39.string().describe("Entity type of the target")
       }
     },
     async ({ source_name, source_type, target_name, target_type }) => {
@@ -4293,8 +4418,7 @@ function registerMergeEntities(server) {
 }
 
 // src/mcp/tools/find-similar-trajectories.ts
-init_skill_learning();
-import { z as z39 } from "zod";
+import { z as z40 } from "zod";
 function registerFindSimilarTrajectories(server) {
   server.registerTool(
     "find_similar_trajectories",
@@ -4302,7 +4426,7 @@ function registerFindSimilarTrajectories(server) {
       title: "Find Similar Trajectories",
       description: 'Find past task trajectories that match a described tool sequence. Input a comma-separated tool sequence (e.g. "Read, Edit, Bash, Read") to find similar past workflows.',
       inputSchema: {
-        description: z39.string().describe(
+        description: z40.string().describe(
           'Tool sequence to match \u2014 comma-separated tool names (e.g. "Read, Grep, Edit, Bash:npm, Bash:git")'
         )
       }
@@ -4406,24 +4530,24 @@ function registerGraph(server) {
     title: "Graph",
     description: "Consolidated GraphRAG tool. Actions: query_relationships, entity_neighbors, hot_entities, stats, export, merge_entities, similar_trajectories.",
     inputSchema: {
-      action: z40.enum(["query_relationships", "entity_neighbors", "hot_entities", "stats", "export", "merge_entities", "similar_trajectories"]).describe("Graph operation"),
-      query: z40.string().optional().describe("Query text for relationship or trajectory search"),
-      entity: z40.string().optional().describe("Entity name for entity_neighbors"),
-      entity_id: z40.string().optional().describe("Entity id for entity_neighbors/merge"),
-      from_entity: z40.string().optional().describe("Source entity for relationship query"),
-      to_entity: z40.string().optional().describe("Target entity for relationship query"),
-      source_id: z40.string().optional().describe("Source entity id for merge_entities"),
-      target_id: z40.string().optional().describe("Target entity id for merge_entities"),
-      entity_type: z40.string().optional().describe("Entity type filter"),
-      project_name: z40.string().optional().describe("Project filter"),
-      relationship_type: z40.string().optional().describe("Relationship type filter"),
-      since: z40.string().optional().describe("ISO lower-bound timestamp"),
-      as_of: z40.string().optional().describe("ISO 8601 timestamp for time-travel queries. Returns relationships valid at that point in time. Omit for current relationships only."),
-      limit: z40.coerce.number().int().min(1).max(200).optional().describe("Result limit"),
-      depth: z40.coerce.number().int().min(1).max(3).optional().describe("Neighbor traversal depth"),
-      output_path: z40.string().optional().describe("Path for export_graph output"),
-      format: z40.enum(["json", "graphml"]).optional().describe("Export format"),
-      min_count: z40.coerce.number().int().min(1).optional().describe("Minimum count for hot_entities")
+      action: z41.enum(["query_relationships", "entity_neighbors", "hot_entities", "stats", "export", "merge_entities", "similar_trajectories"]).describe("Graph operation"),
+      query: z41.string().optional().describe("Query text for relationship or trajectory search"),
+      entity: z41.string().optional().describe("Entity name for entity_neighbors"),
+      entity_id: z41.string().optional().describe("Entity id for entity_neighbors/merge"),
+      from_entity: z41.string().optional().describe("Source entity for relationship query"),
+      to_entity: z41.string().optional().describe("Target entity for relationship query"),
+      source_id: z41.string().optional().describe("Source entity id for merge_entities"),
+      target_id: z41.string().optional().describe("Target entity id for merge_entities"),
+      entity_type: z41.string().optional().describe("Entity type filter"),
+      project_name: z41.string().optional().describe("Project filter"),
+      relationship_type: z41.string().optional().describe("Relationship type filter"),
+      since: z41.string().optional().describe("ISO lower-bound timestamp"),
+      as_of: z41.string().optional().describe("ISO 8601 timestamp for time-travel queries. Returns relationships valid at that point in time. Omit for current relationships only."),
+      limit: z41.coerce.number().int().min(1).max(200).optional().describe("Result limit"),
+      depth: z41.coerce.number().int().min(1).max(3).optional().describe("Neighbor traversal depth"),
+      output_path: z41.string().optional().describe("Path for export_graph output"),
+      format: z41.enum(["json", "graphml"]).optional().describe("Export format"),
+      min_count: z41.coerce.number().int().min(1).optional().describe("Minimum count for hot_entities")
     }
   }, async (input, extra) => {
     const action = input.action;
@@ -4449,13 +4573,10 @@ function registerGraph(server) {
 }
 
 // src/mcp/tools/config.ts
-import { z as z67 } from "zod";
+import { z as z68 } from "zod";
 
 // src/mcp/tools/set-agent-config.ts
-import { z as z41 } from "zod";
-init_agent_config();
-init_runtime_table();
-init_employees();
+import { z as z42 } from "zod";
 function registerSetAgentConfig(server) {
   server.registerTool(
     "set_agent_config",
@@ -4463,11 +4584,11 @@ function registerSetAgentConfig(server) {
       title: "Set Agent Config",
       description: "Set or view per-agent runtime, model, and MCP configuration. Controls which runtime (claude, codex, opencode), model, and MCP servers each agent uses when dispatched. COO-only. Omit runtime/model to view current config for an agent or all agents. Pass mcps to restrict which MCP servers an agent loads (exe-os always included).",
       inputSchema: {
-        agent_id: z41.string().optional().describe("Agent name, or 'default' for org-wide default. Omit to view all agents."),
-        runtime: z41.string().optional().describe(`Runtime: ${Object.keys(KNOWN_RUNTIMES).join(", ")}`),
-        model: z41.string().optional().describe("Model name (e.g. claude-opus-4, gpt-5.4, anthropic/claude-sonnet-4-6)"),
-        reasoning_effort: z41.string().optional().describe("Codex reasoning effort: low, medium, high, xhigh. Per-agent override for thinking/reasoning depth."),
-        mcps: z41.array(z41.string()).optional().describe("MCP server allowlist. Only these servers load for this agent. exe-os always included. Omit to load all MCPs.")
+        agent_id: z42.string().optional().describe("Agent name, or 'default' for org-wide default. Omit to view all agents."),
+        runtime: z42.string().optional().describe(`Runtime: ${Object.keys(KNOWN_RUNTIMES).join(", ")}`),
+        model: z42.string().optional().describe("Model name (e.g. claude-opus-4, gpt-5.4, anthropic/claude-sonnet-4-6)"),
+        reasoning_effort: z42.string().optional().describe("Codex reasoning effort: low, medium, high, xhigh. Per-agent override for thinking/reasoning depth."),
+        mcps: z42.array(z42.string()).optional().describe("MCP server allowlist. Only these servers load for this agent. exe-os always included. Omit to load all MCPs.")
       }
     },
     async ({ agent_id, runtime, model, reasoning_effort, mcps }) => {
@@ -4479,14 +4600,12 @@ function registerSetAgentConfig(server) {
         } catch {
         }
         try {
-          const { getMySession } = (init_tmux_routing(), __toCommonJS(tmux_routing_exports));
           const session = getMySession();
-          if (session && !session.includes("-")) return true;
+          if (session && !session.includes("-") && isCoordinatorName(agentId)) return true;
         } catch {
         }
         try {
-          const { isCoordinatorName: isCoordinatorName2 } = (init_employees(), __toCommonJS(employees_exports));
-          if (isCoordinatorName2(agentId)) return true;
+          if (isCoordinatorName(agentId)) return true;
         } catch {
         }
         return false;
@@ -4586,9 +4705,7 @@ function registerSetAgentConfig(server) {
 }
 
 // src/mcp/tools/list-employees.ts
-init_employees();
-init_agent_config();
-import { z as z42 } from "zod";
+import { z as z43 } from "zod";
 function registerListEmployees(server) {
   server.registerTool(
     "list_employees",
@@ -4596,7 +4713,7 @@ function registerListEmployees(server) {
       title: "List Employees",
       description: "List all AI employees in the organization with their role, runtime, and model configuration. Use to see who's on the team and how they're configured.",
       inputSchema: {
-        role: z42.string().optional().describe("Filter by role (case-insensitive)")
+        role: z43.string().optional().describe("Filter by role (case-insensitive)")
       }
     },
     async ({ role }) => {
@@ -4652,7 +4769,7 @@ function registerListEmployees(server) {
 }
 
 // src/mcp/tools/get-agent-spend.ts
-import { z as z43 } from "zod";
+import { z as z44 } from "zod";
 function estimateCost(input, output, cacheRead) {
   const inputCost = input / 1e6 * 15;
   const outputCost = output / 1e6 * 75;
@@ -4666,8 +4783,8 @@ function registerGetAgentSpend(server) {
       title: "Get Agent Spend",
       description: "Get per-agent token spend attribution. Shows input, output, and cache tokens consumed by each agent over a time period, with estimated cost.",
       inputSchema: {
-        period: z43.enum(["24h", "7d", "30d"]).default("7d").describe("Time period to query"),
-        agent_id: z43.string().optional().describe("Filter to a specific agent (e.g. 'tom', 'yoshi')")
+        period: z44.enum(["24h", "7d", "30d"]).default("7d").describe("Time period to query"),
+        agent_id: z44.string().optional().describe("Filter to a specific agent (e.g. 'tom', 'yoshi')")
       }
     },
     async ({ period, agent_id }) => {
@@ -4731,8 +4848,7 @@ function registerGetAgentSpend(server) {
 }
 
 // src/mcp/tools/list-agent-sessions.ts
-init_session_registry();
-import { z as z44 } from "zod";
+import { z as z45 } from "zod";
 function registerListAgentSessions(server) {
   server.registerTool(
     "list_agent_sessions",
@@ -4740,7 +4856,7 @@ function registerListAgentSessions(server) {
       title: "List Agent Sessions",
       description: "List all registered agent sessions with their agent ID, project, PID, and registration time.",
       inputSchema: {
-        _placeholder: z44.string().optional().describe("No input required")
+        _placeholder: z45.string().optional().describe("No input required")
       }
     },
     async () => {
@@ -4786,8 +4902,7 @@ function registerListAgentSessions(server) {
 }
 
 // src/mcp/tools/get-session-kills.ts
-init_session_kill_telemetry();
-import { z as z45 } from "zod";
+import { z as z46 } from "zod";
 var PERIOD_MS2 = {
   "24h": 24 * 60 * 60 * 1e3,
   "7d": 7 * 24 * 60 * 60 * 1e3,
@@ -4803,7 +4918,7 @@ function registerGetSessionKills(server) {
       title: "Get Session Kills",
       description: "Get session kill telemetry: how many idle/TTL sessions were killed, tokens saved, and estimated cost savings over a time period.",
       inputSchema: {
-        period: z45.enum(["24h", "7d", "30d"]).default("7d").describe("Time period to query")
+        period: z46.enum(["24h", "7d", "30d"]).default("7d").describe("Time period to query")
       }
     },
     async ({ period }) => {
@@ -4842,7 +4957,7 @@ function registerGetSessionKills(server) {
 }
 
 // src/mcp/tools/get-daemon-health.ts
-import { z as z46 } from "zod";
+import { z as z47 } from "zod";
 import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
 import path3 from "path";
 import { homedir as homedir2 } from "os";
@@ -4873,7 +4988,7 @@ function registerGetDaemonHealth(server) {
       title: "Get Daemon Health",
       description: "Check the embedding daemon (exed) health: whether it's running, its PID, uptime, and requests served.",
       inputSchema: {
-        _placeholder: z46.string().optional().describe("No input required")
+        _placeholder: z47.string().optional().describe("No input required")
       }
     },
     async () => {
@@ -4905,6 +5020,14 @@ function registerGetDaemonHealth(server) {
           lines.push(`| Uptime | ${formatUptime(health.uptime)} |`);
           lines.push(`| Requests served | ${health.requests_served.toLocaleString()} |`);
         }
+        try {
+          const { getQueryCacheStats } = await import("./self-query-router-TRPHL54X.js");
+          const cache = getQueryCacheStats();
+          lines.push(`| Query cache size | ${cache.size} / ${cache.maxSize} |`);
+          lines.push(`| Query cache hit rate | ${cache.hitRate} |`);
+          lines.push(`| Query cache TTL | ${Math.round(cache.ttlMs / 6e4)}m |`);
+        } catch {
+        }
         const events = readMcpHttpEvents(50);
         const summary = summarizeMcpTransport(events);
         const lastEvent = events.at(-1);
@@ -4947,7 +5070,7 @@ function registerGetDaemonHealth(server) {
 import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
 import path4 from "path";
 import { homedir as homedir3 } from "os";
-import { z as z47 } from "zod";
+import { z as z48 } from "zod";
 var PID_PATH2 = path4.join(homedir3(), ".exe-os", "exed.pid");
 function isDaemonAlive2() {
   try {
@@ -4967,7 +5090,7 @@ function registerMcpPing(server) {
       title: "MCP Ping",
       description: "Safe local MCP synthetic probe: daemon liveness plus privacy-safe transport/session summary.",
       inputSchema: {
-        _placeholder: z47.string().optional().describe("No input required")
+        _placeholder: z48.string().optional().describe("No input required")
       }
     },
     async () => {
@@ -5000,11 +5123,7 @@ function registerMcpPing(server) {
 }
 
 // src/mcp/tools/get-auto-wake-status.ts
-init_database();
-init_session_registry();
-import { z as z48 } from "zod";
-init_employees();
-init_task_scope();
+import { z as z49 } from "zod";
 function registerGetAutoWakeStatus(server) {
   server.registerTool(
     "get_auto_wake_status",
@@ -5012,7 +5131,7 @@ function registerGetAutoWakeStatus(server) {
       title: "Get Auto-Wake Status",
       description: "Check auto-wake status: orphaned tasks (assigned agent has no running session), tasks blocked by auto-wake retry limit, and session activity.",
       inputSchema: {
-        _placeholder: z48.string().optional().describe("No input required")
+        _placeholder: z49.string().optional().describe("No input required")
       }
     },
     async () => {
@@ -5091,7 +5210,7 @@ function registerGetAutoWakeStatus(server) {
 }
 
 // src/mcp/tools/get-worker-gate.ts
-import { z as z49 } from "zod";
+import { z as z50 } from "zod";
 import { readdirSync, existsSync as existsSync4 } from "fs";
 import path5 from "path";
 init_config();
@@ -5128,7 +5247,7 @@ async function getAgentSessionLoad() {
   try {
     const { listSessions: listSessions2 } = await import("./lib/session-registry.js");
     const { listTmuxSessions } = await import("./lib/tmux-status.js");
-    const { isCoordinatorName: isCoordinatorName2, baseAgentName } = await import("./lib/employees.js");
+    const { isCoordinatorName: isCoordinatorName2, baseAgentName: baseAgentName2 } = await import("./lib/employees.js");
     const { isExeSession } = await import("./lib/tmux-routing.js");
     const registered = listSessions2();
     const liveTmux = new Set(listTmuxSessions());
@@ -5139,11 +5258,11 @@ async function getAgentSessionLoad() {
       return { sessions: [], totalLive: 0, busySessions: 0, idleSessions: 0 };
     }
     const { getClient: getClient2 } = await import("./lib/database.js");
-    const { sessionScopeFilter: sessionScopeFilter2 } = await import("./task-scope-YIPIPEVK.js");
+    const { sessionScopeFilter: sessionScopeFilter2 } = await import("./task-scope-V2CTRHG7.js");
     const client = getClient2();
     const scope = sessionScopeFilter2();
     for (const s of liveAgentSessions) {
-      const agent = baseAgentName(s.agentId);
+      const agent = baseAgentName2(s.agentId);
       const result3 = await client.execute({
         sql: `SELECT COUNT(*) as cnt FROM tasks
               WHERE assigned_to = ? AND status IN ('open', 'in_progress')${scope.sql}`,
@@ -5170,7 +5289,7 @@ function registerGetWorkerGate(server) {
       title: "Get Worker Gate",
       description: "Check worker concurrency gate and agent session utilization. Reports embed/summary worker slots AND live agent sessions with task load. Idle sessions (alive tmux, zero tasks) are excluded from the effective session count \u2014 they should not block new dispatches.",
       inputSchema: {
-        _placeholder: z49.string().optional().describe("No input required")
+        _placeholder: z50.string().optional().describe("No input required")
       }
     },
     async () => {
@@ -5227,8 +5346,7 @@ function registerGetWorkerGate(server) {
 }
 
 // src/mcp/tools/run-memory-audit.ts
-init_database();
-import { z as z50 } from "zod";
+import { z as z51 } from "zod";
 function registerRunMemoryAudit(server) {
   server.registerTool(
     "run_memory_audit",
@@ -5236,8 +5354,8 @@ function registerRunMemoryAudit(server) {
       title: "Run Memory Audit",
       description: "Run a memory health audit: total counts, per-agent breakdown, null vectors, duplicates, FTS sync status, bloated records, and conflict detection (contradictory/superseded memories).",
       inputSchema: {
-        agent_id: z50.string().optional().describe("Filter audit to a specific agent"),
-        project_name: z50.string().optional().describe("Filter audit to a specific project")
+        agent_id: z51.string().optional().describe("Filter audit to a specific agent"),
+        project_name: z51.string().optional().describe("Filter audit to a specific project")
       }
     },
     async ({ agent_id, project_name }) => {
@@ -5272,8 +5390,7 @@ function registerRunMemoryAudit(server) {
 }
 
 // src/mcp/tools/run-consolidation.ts
-init_database();
-import { z as z51 } from "zod";
+import { z as z52 } from "zod";
 init_config();
 function registerRunConsolidation(server) {
   server.registerTool(
@@ -5282,7 +5399,7 @@ function registerRunConsolidation(server) {
       title: "Run Consolidation",
       description: "Run memory consolidation \u2014 synthesizes unconsolidated memories into meta-insights. Use dry_run=true (default) to preview without executing.",
       inputSchema: {
-        dry_run: z51.boolean().default(true).describe("Preview mode \u2014 show what would be consolidated without doing it")
+        dry_run: z52.boolean().default(true).describe("Preview mode \u2014 show what would be consolidated without doing it")
       }
     },
     async ({ dry_run }) => {
@@ -5350,9 +5467,8 @@ function registerRunConsolidation(server) {
 }
 
 // src/mcp/tools/cloud-sync.ts
-import { z as z52 } from "zod";
+import { z as z53 } from "zod";
 init_config();
-init_database();
 function result(text3, isError = false) {
   return { content: [{ type: "text", text: text3 }], ...isError ? { isError: true } : {} };
 }
@@ -5433,9 +5549,9 @@ function registerCloudSync(server) {
       title: "Cloud Sync",
       description: "Consolidated Exe Cloud tool. Supports read-only status, normal sync-now, and explicitly confirmed post-key-rotation re-upload. Does not reveal recovery phrases and does not rotate keys.",
       inputSchema: {
-        action: z52.enum(["status", "sync", "reupload"]).default("sync").describe("Cloud operation. status is read-only; sync is normal sync-now; reupload repairs cloud after key rotation."),
-        force: z52.boolean().default(false).describe("Reserved for sync compatibility; normal cloud sync already runs when requested."),
-        confirm_local_db_source_of_truth: z52.string().optional().describe('Required for action=reupload. Must exactly equal "LOCAL DB IS SOURCE OF TRUTH".')
+        action: z53.enum(["status", "sync", "reupload"]).default("sync").describe("Cloud operation. status is read-only; sync is normal sync-now; reupload repairs cloud after key rotation."),
+        force: z53.boolean().default(false).describe("Reserved for sync compatibility; normal cloud sync already runs when requested."),
+        confirm_local_db_source_of_truth: z53.string().optional().describe('Required for action=reupload. Must exactly equal "LOCAL DB IS SOURCE OF TRUTH".')
       }
     },
     async ({ action = "sync", confirm_local_db_source_of_truth }) => {
@@ -5507,7 +5623,7 @@ function registerCloudSync(server) {
 }
 
 // src/mcp/tools/orchestration-phase.ts
-import { z as z53 } from "zod";
+import { z as z54 } from "zod";
 function render(info, prefix) {
   return [
     prefix,
@@ -5526,8 +5642,8 @@ function registerOrchestrationPhase(server) {
       title: "Orchestration Phase",
       description: "View or change the customer-owned orchestration maturity phase. MCP parity for `exe-os org phase`, `exe-os org unlock executives`, and `exe-os org unlock parallel`. This is a recommendation layer, not a blocker; it never exposes recovery phrases or secrets.",
       inputSchema: {
-        action: z53.enum(["status", "set", "unlock_executives", "unlock_parallel"]).default("status"),
-        phase: z53.enum(["phase_1_coo", "phase_2_executives", "phase_3_parallel_org", "1", "2", "3"]).optional().describe("Phase to set when action='set'.")
+        action: z54.enum(["status", "set", "unlock_executives", "unlock_parallel"]).default("status"),
+        phase: z54.enum(["phase_1_coo", "phase_2_executives", "phase_3_parallel_org", "1", "2", "3"]).optional().describe("Phase to set when action='set'.")
       }
     },
     async ({ action = "status", phase }) => {
@@ -5567,7 +5683,7 @@ function registerOrchestrationPhase(server) {
 }
 
 // src/mcp/tools/backup-vps.ts
-import { z as z54 } from "zod";
+import { z as z55 } from "zod";
 
 // src/lib/vps-backup.ts
 import { createCipheriv, createDecipheriv, randomBytes } from "crypto";
@@ -5892,43 +6008,43 @@ function registerBackupVps(server) {
     {
       title: "VPS Backup",
       description: "Run VPS Postgres backup/restore workflows and check status.",
-      inputSchema: z54.discriminatedUnion("action", [
-        z54.object({
-          action: z54.literal("backup"),
-          databaseUrl: z54.string().min(1).describe("Postgres DATABASE_URL to dump from"),
-          encryptionKeyB64: z54.string().min(1).max(4096).optional().describe(
+      inputSchema: z55.discriminatedUnion("action", [
+        z55.object({
+          action: z55.literal("backup"),
+          databaseUrl: z55.string().min(1).describe("Postgres DATABASE_URL to dump from"),
+          encryptionKeyB64: z55.string().min(1).max(4096).optional().describe(
             "Base64 AES-256 key (defaults to local master key if omitted)"
           ),
-          r2Bucket: z54.string().min(1).describe("R2 bucket name"),
-          r2Endpoint: z54.string().min(1).describe("R2 endpoint URL"),
-          r2AccessKeyId: z54.string().min(1).describe("R2 access key ID"),
-          r2SecretAccessKey: z54.string().min(1).describe("R2 secret access key")
+          r2Bucket: z55.string().min(1).describe("R2 bucket name"),
+          r2Endpoint: z55.string().min(1).describe("R2 endpoint URL"),
+          r2AccessKeyId: z55.string().min(1).describe("R2 access key ID"),
+          r2SecretAccessKey: z55.string().min(1).describe("R2 secret access key")
         }),
-        z54.object({
-          action: z54.literal("restore"),
-          databaseUrl: z54.string().min(1).describe("Target Postgres DATABASE_URL for restore"),
-          backupKey: z54.string().min(1).describe("R2 object key to restore from"),
-          encryptionKeyB64: z54.string().min(1).max(4096).optional().describe(
+        z55.object({
+          action: z55.literal("restore"),
+          databaseUrl: z55.string().min(1).describe("Target Postgres DATABASE_URL for restore"),
+          backupKey: z55.string().min(1).describe("R2 object key to restore from"),
+          encryptionKeyB64: z55.string().min(1).max(4096).optional().describe(
             "Base64 AES-256 key (defaults to local master key if omitted)"
           ),
-          r2Bucket: z54.string().min(1).describe("R2 bucket name"),
-          r2Endpoint: z54.string().min(1).describe("R2 endpoint URL"),
-          r2AccessKeyId: z54.string().min(1).describe("R2 access key ID"),
-          r2SecretAccessKey: z54.string().min(1).describe("R2 secret access key")
+          r2Bucket: z55.string().min(1).describe("R2 bucket name"),
+          r2Endpoint: z55.string().min(1).describe("R2 endpoint URL"),
+          r2AccessKeyId: z55.string().min(1).describe("R2 access key ID"),
+          r2SecretAccessKey: z55.string().min(1).describe("R2 secret access key")
         }),
-        z54.object({
-          action: z54.literal("list"),
-          r2Bucket: z54.string().min(1).describe("R2 bucket name"),
-          r2Endpoint: z54.string().min(1).describe("R2 endpoint URL"),
-          r2AccessKeyId: z54.string().min(1).describe("R2 access key ID"),
-          r2SecretAccessKey: z54.string().min(1).describe("R2 secret access key")
+        z55.object({
+          action: z55.literal("list"),
+          r2Bucket: z55.string().min(1).describe("R2 bucket name"),
+          r2Endpoint: z55.string().min(1).describe("R2 endpoint URL"),
+          r2AccessKeyId: z55.string().min(1).describe("R2 access key ID"),
+          r2SecretAccessKey: z55.string().min(1).describe("R2 secret access key")
         }),
-        z54.object({
-          action: z54.literal("health"),
-          r2Bucket: z54.string().min(1).describe("R2 bucket name"),
-          r2Endpoint: z54.string().min(1).describe("R2 endpoint URL"),
-          r2AccessKeyId: z54.string().min(1).describe("R2 access key ID"),
-          r2SecretAccessKey: z54.string().min(1).describe("R2 secret access key")
+        z55.object({
+          action: z55.literal("health"),
+          r2Bucket: z55.string().min(1).describe("R2 bucket name"),
+          r2Endpoint: z55.string().min(1).describe("R2 endpoint URL"),
+          r2AccessKeyId: z55.string().min(1).describe("R2 access key ID"),
+          r2SecretAccessKey: z55.string().min(1).describe("R2 secret access key")
         })
       ])
     },
@@ -6066,7 +6182,7 @@ async function resolveEncryptionKey(providedB64) {
 }
 
 // src/mcp/tools/deploy-client.ts
-import { z as z55 } from "zod";
+import { z as z56 } from "zod";
 import { execFile } from "child_process";
 import { promisify } from "util";
 import path6 from "path";
@@ -6240,12 +6356,12 @@ function registerDeployClient(server) {
       title: "Deploy Client",
       description: "Provision a Hostinger VPS and deploy exe-os for a client. Creates VPS, waits for ready state, runs Ansible playbook, verifies health.",
       inputSchema: {
-        client_name: z55.string().min(1).describe("Client name (used for hostname and identification)"),
-        domain: z55.string().min(1).describe("Domain name for the deployment (e.g., client.exe.ai)"),
-        region: z55.string().default("jakarta").describe("VPS region (default: jakarta)"),
-        plan: z55.string().default("kvm-2").describe("Hostinger VPS plan (default: kvm-2)"),
-        ssl_email: z55.string().email().describe("Email for Let's Encrypt SSL certificate"),
-        user_id: z55.string().min(1).describe("User/customer ID for inventory tracking")
+        client_name: z56.string().min(1).describe("Client name (used for hostname and identification)"),
+        domain: z56.string().min(1).describe("Domain name for the deployment (e.g., client.exe.ai)"),
+        region: z56.string().default("jakarta").describe("VPS region (default: jakarta)"),
+        plan: z56.string().default("kvm-2").describe("Hostinger VPS plan (default: kvm-2)"),
+        ssl_email: z56.string().email().describe("Email for Let's Encrypt SSL certificate"),
+        user_id: z56.string().min(1).describe("User/customer ID for inventory tracking")
       }
     },
     async ({ client_name, domain, region, plan, ssl_email, user_id }) => {
@@ -6406,8 +6522,7 @@ function buildInventoryRecord(params) {
 }
 
 // src/mcp/tools/get-license-status.ts
-init_license();
-import { z as z56 } from "zod";
+import { z as z57 } from "zod";
 var FEATURES = [
   "cloud_sync",
   "external_agents",
@@ -6421,7 +6536,7 @@ function registerGetLicenseStatus(server) {
       title: "Get License Status",
       description: "Get current license status: plan, validity, feature gates, limits, and expiry.",
       inputSchema: {
-        _dummy: z56.string().optional().describe("Unused \u2014 no input required")
+        _dummy: z57.string().optional().describe("Unused \u2014 no input required")
       }
     },
     async () => {
@@ -6473,13 +6588,12 @@ function registerGetLicenseStatus(server) {
 }
 
 // src/mcp/tools/create-license.ts
-init_license();
 import os from "os";
 import path7 from "path";
 import { randomBytes as randomBytes2, randomUUID } from "crypto";
 import { createRequire } from "module";
 import { pathToFileURL } from "url";
-import { z as z57 } from "zod";
+import { z as z58 } from "zod";
 var prismaPromise = null;
 function loadPrisma() {
   if (!prismaPromise) {
@@ -6512,10 +6626,10 @@ function registerCreateLicense(server) {
       title: "Create License",
       description: "Generate an exe_sk_* license key for a user. Stores in billing.licenses. Returns the key to give to the customer.",
       inputSchema: {
-        email: z57.string().email().describe("Customer email address"),
-        name: z57.string().optional().describe("Customer name"),
-        plan: z57.enum(["free", "pro", "team", "agency", "enterprise"]).default("pro").describe("License plan tier"),
-        expires_in_days: z57.number().int().positive().default(365).describe("Days until expiration (default 365)")
+        email: z58.string().email().describe("Customer email address"),
+        name: z58.string().optional().describe("Customer name"),
+        plan: z58.enum(["free", "pro", "team", "agency", "enterprise"]).default("pro").describe("License plan tier"),
+        expires_in_days: z58.number().int().positive().default(365).describe("Days until expiration (default 365)")
       }
     },
     async ({ email, name, plan, expires_in_days }) => {
@@ -6570,7 +6684,7 @@ import os2 from "os";
 import path8 from "path";
 import { createRequire as createRequire2 } from "module";
 import { pathToFileURL as pathToFileURL2 } from "url";
-import { z as z58 } from "zod";
+import { z as z59 } from "zod";
 var prismaPromise2 = null;
 function loadPrisma2() {
   if (!prismaPromise2) {
@@ -6600,7 +6714,7 @@ function registerListLicenses(server) {
       title: "List Licenses",
       description: "List all issued licenses with status (active/expired/revoked). Optionally filter by plan.",
       inputSchema: {
-        plan: z58.enum(["free", "pro", "team", "agency", "enterprise"]).optional().describe("Filter by plan tier (omit for all)")
+        plan: z59.enum(["free", "pro", "team", "agency", "enterprise"]).optional().describe("Filter by plan tier (omit for all)")
       }
     },
     async ({ plan }) => {
@@ -6650,8 +6764,7 @@ function registerListLicenses(server) {
 }
 
 // src/mcp/tools/activate-license.ts
-init_license();
-import { z as z59 } from "zod";
+import { z as z60 } from "zod";
 function registerActivateLicense(server) {
   server.registerTool(
     "activate_license",
@@ -6659,7 +6772,7 @@ function registerActivateLicense(server) {
       title: "Activate License",
       description: "Activate an exe_sk_* license key on this device. Writes to ~/.exe-os/license.key, validates against Postgres, and caches the result.",
       inputSchema: {
-        key: z59.string().startsWith("exe_sk_").describe("License key (exe_sk_*)")
+        key: z60.string().startsWith("exe_sk_").describe("License key (exe_sk_*)")
       }
     },
     async ({ key }) => {
@@ -6705,15 +6818,15 @@ Key saved to ~/.exe-os/license.key. Device ID: ${deviceId}`);
 }
 
 // src/mcp/tools/create-trigger.ts
-import { z as z60 } from "zod";
-var conditionSchema = z60.object({
-  field: z60.string().describe("Dot-path field to evaluate, e.g., 'stage' or 'amount'"),
-  op: z60.enum(["eq", "neq", "gt", "lt", "gte", "lte", "contains", "not_contains"]).describe("Comparison operator"),
-  value: z60.string().or(z60.number()).or(z60.boolean()).describe("Value to compare against")
+import { z as z61 } from "zod";
+var conditionSchema = z61.object({
+  field: z61.string().describe("Dot-path field to evaluate, e.g., 'stage' or 'amount'"),
+  op: z61.enum(["eq", "neq", "gt", "lt", "gte", "lte", "contains", "not_contains"]).describe("Comparison operator"),
+  value: z61.string().or(z61.number()).or(z61.boolean()).describe("Value to compare against")
 });
-var actionSchema = z60.object({
-  type: z60.enum(["send_whatsapp", "send_message", "create_task", "mcp_tool"]).describe("Action type to execute"),
-  params: z60.record(z60.string(), z60.string()).describe(
+var actionSchema = z61.object({
+  type: z61.enum(["send_whatsapp", "send_message", "create_task", "mcp_tool"]).describe("Action type to execute"),
+  params: z61.record(z61.string(), z61.string()).describe(
     "Action parameters. Supports {{record.field}} templates for dynamic values."
   )
 });
@@ -6724,24 +6837,24 @@ function registerCreateTrigger(server) {
       title: "Create Trigger",
       description: "Create a CRM event trigger or scheduled automation. When matching events occur (e.g., Deal.updated with stage=won), configured actions fire automatically (send_whatsapp, create_task, etc.).",
       inputSchema: {
-        name: z60.string().describe("Human-readable trigger name"),
-        event: z60.string().describe(
+        name: z61.string().describe("Human-readable trigger name"),
+        event: z61.string().describe(
           'CRM event to match, e.g., "Deal.updated", "Order.created", "*" for all'
         ),
-        conditions: z60.array(conditionSchema).default([]).describe("Conditions that must all match (AND logic)"),
-        actions: z60.array(actionSchema).min(1).describe("Actions to execute when trigger fires"),
-        project: z60.string().optional().describe("Scope trigger to a specific project"),
-        enabled: z60.boolean().default(true).describe("Whether trigger is active"),
-        schedule: z60.string().optional().describe(
+        conditions: z61.array(conditionSchema).default([]).describe("Conditions that must all match (AND logic)"),
+        actions: z61.array(actionSchema).min(1).describe("Actions to execute when trigger fires"),
+        project: z61.string().optional().describe("Scope trigger to a specific project"),
+        enabled: z61.boolean().default(true).describe("Whether trigger is active"),
+        schedule: z61.string().optional().describe(
           'Cron schedule for time-based triggers, e.g., "0 9 * * *" or "Monday 9am"'
         ),
-        query: z60.string().optional().describe(
+        query: z61.string().optional().describe(
           "CRM GraphQL query to run on schedule (required if schedule is set)"
         )
       }
     },
     async ({ name, event, conditions, actions, project, enabled, schedule, query }) => {
-      const { assertFeature: assertFeature2 } = await import("./plan-limits-TK4424RV.js");
+      const { assertFeature: assertFeature2 } = await import("./plan-limits-7L75PB33.js");
       const gatedActions = {
         send_whatsapp: "external_agents",
         update_wiki: "wiki"
@@ -6760,7 +6873,14 @@ function registerCreateTrigger(server) {
           ]
         };
       }
-      const typedActions = actions;
+      const typedActions = actions.map(
+        (a) => ({
+          ...a,
+          params: Object.fromEntries(
+            Object.entries(a.params).map(([k, v]) => [k, sanitizeParam(String(v))])
+          )
+        })
+      );
       const typedConditions = conditions;
       const triggerInput = {
         name,
@@ -6808,7 +6928,7 @@ Enabled: ${trigger.enabled}` + scheduleInfo;
 }
 
 // src/mcp/tools/list-triggers.ts
-import { z as z61 } from "zod";
+import { z as z62 } from "zod";
 function registerListTriggers(server) {
   server.registerTool(
     "list_triggers",
@@ -6816,7 +6936,7 @@ function registerListTriggers(server) {
       title: "List Triggers",
       description: "List configured CRM event triggers and scheduled automations.",
       inputSchema: {
-        project: z61.string().optional().describe("Filter triggers by project name")
+        project: z62.string().optional().describe("Filter triggers by project name")
       }
     },
     async ({ project }) => {
@@ -6851,7 +6971,7 @@ function registerListTriggers(server) {
 }
 
 // src/mcp/tools/apply-starter-pack.ts
-import { z as z62 } from "zod";
+import { z as z63 } from "zod";
 
 // src/automation/starter-packs/index.ts
 import { readFileSync as readFileSync4, readdirSync as readdirSync2, existsSync as existsSync6 } from "fs";
@@ -6974,9 +7094,6 @@ function applyPack(industry, project) {
 init_config();
 import { existsSync as existsSync7, mkdirSync, writeFileSync as writeFileSync3 } from "fs";
 import path10 from "path";
-init_employees();
-init_behaviors();
-init_plan_limits();
 var ClientCOOClobberError = class extends Error {
   constructor(agentName, identityPath) {
     super(
@@ -7037,17 +7154,17 @@ function registerApplyStarterPack(server) {
       title: "Apply Starter Pack",
       description: "Apply an industry starter pack to a project. Sets up CRM custom objects, pre-wired automation triggers, and wiki seed content. When the pack creates a Client COO (e.g. distribution) and agent_name, company_name, founder_name are all provided, also provisions the COO identity, roster entry, and feedback-loop behavior. Available packs: distribution. More coming.",
       inputSchema: {
-        industry: z62.string().describe(
+        industry: z63.string().describe(
           'Industry pack to apply (e.g., "distribution"). Use without args to list available packs.'
         ),
-        project: z62.string().describe("Project name to scope the triggers to"),
-        agent_name: z62.string().optional().describe(
+        project: z63.string().describe("Project name to scope the triggers to"),
+        agent_name: z63.string().optional().describe(
           "Optional. Lowercase alphanumeric name for the Client COO agent. Required (alongside company_name and founder_name) to provision a COO."
         ),
-        company_name: z62.string().optional().describe(
+        company_name: z63.string().optional().describe(
           "Optional. The client company the COO serves. Required to provision a COO."
         ),
-        founder_name: z62.string().optional().describe(
+        founder_name: z63.string().optional().describe(
           "Optional. The founder the COO reports to. Required to provision a COO."
         )
       }
@@ -7192,7 +7309,7 @@ ${err.message}`
 }
 
 // src/mcp/tools/load-skill.ts
-import { z as z63 } from "zod";
+import { z as z64 } from "zod";
 import { readFileSync as readFileSync5, readdirSync as readdirSync3, statSync } from "fs";
 import path11 from "path";
 import { homedir as homedir4 } from "os";
@@ -7222,7 +7339,7 @@ function registerLoadSkill(server) {
       title: "Load Skill",
       description: "Load domain-specific guidance into your context. Use when you need specialized knowledge for a task (e.g., load_skill('seo') before doing SEO work, load_skill('code-reviewer') before reviewing code). Pass skill_name='list' to see all available skills.",
       inputSchema: {
-        skill_name: z63.string().describe(
+        skill_name: z64.string().describe(
           "Skill to load (e.g. 'seo', 'code-reviewer', 'frontend-design'). Pass 'list' to see all available skills."
         )
       }
@@ -7279,7 +7396,7 @@ ${available.map((s) => `- ${s}`).join("\n")}` : "\n\nNo skills found in ~/.claud
 // src/mcp/tools/export-orchestration.ts
 import { mkdirSync as mkdirSync2, writeFileSync as writeFileSync4 } from "fs";
 import path12 from "path";
-import { z as z64 } from "zod";
+import { z as z65 } from "zod";
 function registerExportOrchestration(server) {
   server.registerTool(
     "export_orchestration",
@@ -7287,7 +7404,7 @@ function registerExportOrchestration(server) {
       title: "Export Orchestration",
       description: "Export roster, identities, behaviors, and customer procedures to a JSON package.",
       inputSchema: {
-        output_path: z64.string().describe("File path to write the JSON package")
+        output_path: z65.string().describe("File path to write the JSON package")
       }
     },
     async ({ output_path }) => {
@@ -7318,8 +7435,7 @@ function registerExportOrchestration(server) {
 
 // src/mcp/tools/import-orchestration.ts
 import { readFileSync as readFileSync6 } from "fs";
-import { z as z65 } from "zod";
-init_employees();
+import { z as z66 } from "zod";
 function registerImportOrchestration(server) {
   server.registerTool(
     "import_orchestration",
@@ -7327,8 +7443,8 @@ function registerImportOrchestration(server) {
       title: "Import Orchestration",
       description: "Import roster, identities, behaviors, and procedures from an orchestration package. Restricted to coordinator/founder.",
       inputSchema: {
-        package_path: z65.string().describe("Path to the orchestration package JSON file"),
-        merge_strategy: z65.enum(["replace", "merge"]).default("merge").describe("How to apply the package: both strategies are additive-only \u2014 existing data is never deleted or overwritten")
+        package_path: z66.string().describe("Path to the orchestration package JSON file"),
+        merge_strategy: z66.enum(["replace", "merge"]).default("merge").describe("How to apply the package: both strategies are additive-only \u2014 existing data is never deleted or overwritten")
       }
     },
     async ({ package_path, merge_strategy }) => {
@@ -7368,9 +7484,7 @@ function registerImportOrchestration(server) {
 }
 
 // src/mcp/tools/global-procedure.ts
-import { z as z66 } from "zod";
-init_database();
-init_employees();
+import { z as z67 } from "zod";
 function registerCompanyProcedureTool(server, toolName) {
   server.registerTool(
     toolName,
@@ -7378,12 +7492,12 @@ function registerCompanyProcedureTool(server, toolName) {
       title: "Company Procedure",
       description: "Manage company procedures (customer-owned Layer 0 rules) that supersede identity, expertise, and experience. Actions: store (create new, restricted), list (view all, open), deactivate (soft-delete, restricted).",
       inputSchema: {
-        action: z66.enum(["store", "list", "deactivate"]).describe("Action to perform"),
-        title: z66.string().optional().describe("Short title for the procedure (store)"),
-        content: z66.string().max(500).optional().describe("The procedure content \u2014 clear, actionable instruction (store)"),
-        priority: z66.enum(["p0", "p1", "p2"]).optional().describe("Priority tier. p0 = always (default). p1 = standard. p2 = nice-to-have."),
-        domain: z66.string().optional().describe("Category: workflow, code-style, communication, architecture, testing, security"),
-        procedure_id: z66.string().optional().describe("UUID of the company procedure (deactivate)")
+        action: z67.enum(["store", "list", "deactivate"]).describe("Action to perform"),
+        title: z67.string().optional().describe("Short title for the procedure (store)"),
+        content: z67.string().max(500).optional().describe("The procedure content \u2014 clear, actionable instruction (store)"),
+        priority: z67.enum(["p0", "p1", "p2"]).optional().describe("Priority tier. p0 = always (default). p1 = standard. p2 = nice-to-have."),
+        domain: z67.string().optional().describe("Category: workflow, code-style, communication, architecture, testing, security"),
+        procedure_id: z67.string().optional().describe("UUID of the company procedure (deactivate)")
       }
     },
     async ({ action, title, content, priority, domain, procedure_id }) => {
@@ -7579,45 +7693,45 @@ function registerConfig(server) {
     title: "Config",
     description: "Consolidated COO/admin tool for runtime config, system health, licensing, triggers, orchestration import/export, and company procedures.",
     inputSchema: {
-      action: z67.enum(Object.keys(ACTION_TO_TOOL2)).describe("Admin/config operation"),
-      agent_id: z67.string().optional().describe("Agent id for set_agent_config/agent_spend/session queries/hire"),
-      role: z67.string().optional().describe("Role template for action=hire: coo, cto, cmo, gm, principal-engineer, content-specialist, ai-specialist, staff-code-reviewer"),
-      runtime: z67.string().optional().describe("Runtime for set_agent_config"),
-      model: z67.string().optional().describe("Model for set_agent_config"),
-      reasoning_effort: z67.string().optional().describe("Reasoning effort for Codex agents"),
-      dry_run: z67.boolean().optional().describe("Preview without applying where supported"),
-      fix: z67.boolean().optional().describe("Apply fixes for memory_audit where supported"),
-      verbose: z67.boolean().optional().describe("Verbose output where supported"),
-      project_name: z67.string().optional().describe("Project filter/name"),
-      since: z67.string().optional().describe("ISO lower-bound timestamp"),
-      limit: z67.coerce.number().optional().describe("Result limit"),
-      output_path: z67.string().optional().describe("Output path for export/backup"),
-      input_path: z67.string().optional().describe("Input path for import_orchestration"),
-      strategy: z67.enum(["merge", "replace"]).optional().describe("Import strategy; replace must still be additive-only per platform rules"),
-      license_key: z67.string().optional().describe("License key for activation/status"),
-      email: z67.string().optional().describe("Customer email for license creation"),
-      plan: z67.string().optional().describe("License plan"),
-      name: z67.string().optional().describe("Trigger/starter pack/procedure/client name"),
-      event: z67.string().optional().describe("Trigger event"),
-      conditions: z67.array(z67.record(z67.string(), z67.unknown())).optional().describe("Trigger conditions"),
-      actions: z67.array(z67.record(z67.string(), z67.unknown())).optional().describe("Trigger actions"),
-      enabled: z67.boolean().optional().describe("Trigger enabled flag"),
-      schedule: z67.string().optional().describe("Trigger schedule"),
-      query: z67.string().optional().describe("Trigger query or filter"),
-      skill_name: z67.string().optional().describe("Skill name for load_skill"),
-      pack_name: z67.string().optional().describe("Starter pack name"),
-      title: z67.string().optional().describe("Procedure title"),
-      content: z67.string().optional().describe("Procedure content"),
-      priority: z67.enum(["p0", "p1", "p2"]).optional().describe("Procedure priority"),
-      domain: z67.string().optional().describe("Procedure domain"),
-      procedure_id: z67.string().optional().describe("Procedure id for deactivate"),
-      subaction: z67.enum(["store", "list", "deactivate"]).optional().describe("Nested action for company_procedure/global_procedure"),
-      max_clusters: z67.coerce.number().optional().describe("Consolidation max clusters"),
-      force: z67.boolean().optional().describe("Force operation where supported"),
-      cloud_action: z67.enum(["status", "sync", "reupload"]).optional().describe("Nested operation for action=cloud_sync"),
-      confirm_local_db_source_of_truth: z67.string().optional().describe("Required for cloud_action=reupload; must exactly equal LOCAL DB IS SOURCE OF TRUTH"),
-      domain_name: z67.string().optional().describe("Client deployment domain"),
-      phase: z67.enum(["phase_1_coo", "phase_2_executives", "phase_3_parallel_org", "1", "2", "3"]).optional().describe("Orchestration phase for orchestration_phase action")
+      action: z68.enum(Object.keys(ACTION_TO_TOOL2)).describe("Admin/config operation"),
+      agent_id: z68.string().optional().describe("Agent id for set_agent_config/agent_spend/session queries/hire"),
+      role: z68.string().optional().describe("Role template for action=hire: coo, cto, cmo, gm, principal-engineer, content-specialist, ai-specialist, staff-code-reviewer"),
+      runtime: z68.string().optional().describe("Runtime for set_agent_config"),
+      model: z68.string().optional().describe("Model for set_agent_config"),
+      reasoning_effort: z68.string().optional().describe("Reasoning effort for Codex agents"),
+      dry_run: z68.boolean().optional().describe("Preview without applying where supported"),
+      fix: z68.boolean().optional().describe("Apply fixes for memory_audit where supported"),
+      verbose: z68.boolean().optional().describe("Verbose output where supported"),
+      project_name: z68.string().optional().describe("Project filter/name"),
+      since: z68.string().optional().describe("ISO lower-bound timestamp"),
+      limit: z68.coerce.number().optional().describe("Result limit"),
+      output_path: z68.string().optional().describe("Output path for export/backup"),
+      input_path: z68.string().optional().describe("Input path for import_orchestration"),
+      strategy: z68.enum(["merge", "replace"]).optional().describe("Import strategy; replace must still be additive-only per platform rules"),
+      license_key: z68.string().optional().describe("License key for activation/status"),
+      email: z68.string().optional().describe("Customer email for license creation"),
+      plan: z68.string().optional().describe("License plan"),
+      name: z68.string().optional().describe("Trigger/starter pack/procedure/client name"),
+      event: z68.string().optional().describe("Trigger event"),
+      conditions: z68.array(z68.record(z68.string(), z68.unknown())).optional().describe("Trigger conditions"),
+      actions: z68.array(z68.record(z68.string(), z68.unknown())).optional().describe("Trigger actions"),
+      enabled: z68.boolean().optional().describe("Trigger enabled flag"),
+      schedule: z68.string().optional().describe("Trigger schedule"),
+      query: z68.string().optional().describe("Trigger query or filter"),
+      skill_name: z68.string().optional().describe("Skill name for load_skill"),
+      pack_name: z68.string().optional().describe("Starter pack name"),
+      title: z68.string().optional().describe("Procedure title"),
+      content: z68.string().optional().describe("Procedure content"),
+      priority: z68.enum(["p0", "p1", "p2"]).optional().describe("Procedure priority"),
+      domain: z68.string().optional().describe("Procedure domain"),
+      procedure_id: z68.string().optional().describe("Procedure id for deactivate"),
+      subaction: z68.enum(["store", "list", "deactivate"]).optional().describe("Nested action for company_procedure/global_procedure"),
+      max_clusters: z68.coerce.number().optional().describe("Consolidation max clusters"),
+      force: z68.boolean().optional().describe("Force operation where supported"),
+      cloud_action: z68.enum(["status", "sync", "reupload"]).optional().describe("Nested operation for action=cloud_sync"),
+      confirm_local_db_source_of_truth: z68.string().optional().describe("Required for cloud_action=reupload; must exactly equal LOCAL DB IS SOURCE OF TRUTH"),
+      domain_name: z68.string().optional().describe("Client deployment domain"),
+      phase: z68.enum(["phase_1_coo", "phase_2_executives", "phase_3_parallel_org", "1", "2", "3"]).optional().describe("Orchestration phase for orchestration_phase action")
     }
   }, async (input, extra) => {
     const action = input.action;
@@ -7645,7 +7759,7 @@ function registerConfig(server) {
         const existing = loadEmployeesSync2();
         if (existing.some((e) => e.name === employeeName)) return errorResult8(`Employee "${employeeName}" already exists.`);
         try {
-          const { assertEmployeeLimit: assertEmployeeLimit2 } = await import("./plan-limits-TK4424RV.js");
+          const { assertEmployeeLimit: assertEmployeeLimit2 } = await import("./plan-limits-7L75PB33.js");
           await assertEmployeeLimit2();
         } catch (e) {
           return errorResult8(e instanceof Error ? e.message : "Employee limit reached.");
@@ -7686,7 +7800,7 @@ You are ${employeeName}. Role: ${role}.`, "utf-8");
         }
         try {
           const { generateSessionWrappers } = await import("./lib/session-wrappers.js");
-          const { resolvePackageRoot } = await import("./installer-2O362XY7.js");
+          const { resolvePackageRoot } = await import("./installer-SSR2OOLO.js");
           generateSessionWrappers(resolvePackageRoot());
         } catch {
         }
@@ -7705,10 +7819,10 @@ You are ${employeeName}. Role: ${role}.`, "utf-8");
 }
 
 // src/mcp/tools/wiki.ts
-import { z as z70 } from "zod";
+import { z as z71 } from "zod";
 
 // src/mcp/tools/list-wiki-pages.ts
-import { z as z68 } from "zod";
+import { z as z69 } from "zod";
 var FETCH_TIMEOUT_MS2 = 1e4;
 function registerListWikiPages(server) {
   server.registerTool(
@@ -7717,12 +7831,12 @@ function registerListWikiPages(server) {
       title: "List Wiki Pages",
       description: "List documents in an exe-wiki workspace. Optionally filter by folder.",
       inputSchema: {
-        workspace: z68.string().describe('Wiki workspace slug (e.g., "hygo")'),
-        folder: z68.string().optional().describe("Filter by folder path")
+        workspace: z69.string().describe('Wiki workspace slug (e.g., "hygo")'),
+        folder: z69.string().optional().describe("Filter by folder path")
       }
     },
     async ({ workspace, folder }) => {
-      const { assertFeature: assertFeature2 } = await import("./plan-limits-TK4424RV.js");
+      const { assertFeature: assertFeature2 } = await import("./plan-limits-7L75PB33.js");
       await assertFeature2("wiki");
       const apiUrl = process.env.EXE_WIKI_API_URL;
       const apiKey = process.env.EXE_WIKI_API_KEY;
@@ -7807,7 +7921,7 @@ function registerListWikiPages(server) {
 }
 
 // src/mcp/tools/get-wiki-page.ts
-import { z as z69 } from "zod";
+import { z as z70 } from "zod";
 var FETCH_TIMEOUT_MS3 = 1e4;
 function registerGetWikiPage(server) {
   server.registerTool(
@@ -7816,13 +7930,13 @@ function registerGetWikiPage(server) {
       title: "Get Wiki Page",
       description: "Read a wiki page by document ID or title. Returns content, metadata, and folder path. Use title search when you know the page name but not the ID.",
       inputSchema: {
-        workspace: z69.string().describe('Wiki workspace slug (e.g., "hygo")'),
-        document_id: z69.string().optional().describe("Specific document ID (exact lookup)"),
-        title: z69.string().optional().describe("Search by title (fuzzy match)")
+        workspace: z70.string().describe('Wiki workspace slug (e.g., "hygo")'),
+        document_id: z70.string().optional().describe("Specific document ID (exact lookup)"),
+        title: z70.string().optional().describe("Search by title (fuzzy match)")
       }
     },
     async ({ workspace, document_id, title }) => {
-      const { assertFeature: assertFeature2 } = await import("./plan-limits-TK4424RV.js");
+      const { assertFeature: assertFeature2 } = await import("./plan-limits-7L75PB33.js");
       await assertFeature2("wiki");
       const apiUrl = process.env.EXE_WIKI_API_URL;
       const apiKey = process.env.EXE_WIKI_API_KEY;
@@ -8000,15 +8114,15 @@ function registerWiki(server) {
       title: "Wiki",
       description: "Consolidated wiki domain tool. Actions: list, get. Wiki writes flow through raw data ingestion/projection into the curated wiki store; direct create/update MCP tools have been removed.",
       inputSchema: {
-        action: z70.enum(["list", "get"]).describe("Wiki read operation. Writes use raw-data ingestion/projection, not direct MCP writes."),
-        workspace: z70.string().optional().describe("Wiki workspace slug"),
-        title: z70.string().optional().describe("Fuzzy page title lookup for get"),
-        content: z70.string().optional().describe("Reserved; wiki writes use raw-data ingestion/projection"),
-        folder: z70.string().optional().describe("Optional folder path for list"),
-        document_id: z70.string().optional().describe("Document ID for get"),
-        mode: z70.enum(["replace", "append"]).optional().describe("Reserved; direct wiki updates are removed"),
-        section: z70.string().optional().describe("Reserved; direct wiki updates are removed"),
-        user_id: z70.string().optional().describe("User ID for ACL enforcement. When set, workspace access is checked against wiki_acl table.")
+        action: z71.enum(["list", "get"]).describe("Wiki read operation. Writes use raw-data ingestion/projection, not direct MCP writes."),
+        workspace: z71.string().optional().describe("Wiki workspace slug"),
+        title: z71.string().optional().describe("Fuzzy page title lookup for get"),
+        content: z71.string().optional().describe("Reserved; wiki writes use raw-data ingestion/projection"),
+        folder: z71.string().optional().describe("Optional folder path for list"),
+        document_id: z71.string().optional().describe("Document ID for get"),
+        mode: z71.enum(["replace", "append"]).optional().describe("Reserved; direct wiki updates are removed"),
+        section: z71.string().optional().describe("Reserved; direct wiki updates are removed"),
+        user_id: z71.string().optional().describe("User ID for ACL enforcement. When set, workspace access is checked against wiki_acl table.")
       }
     },
     async (input, extra) => {
@@ -8017,7 +8131,7 @@ function registerWiki(server) {
       if (!legacyToolName) return errorResult9(`Unknown wiki action: ${String(input.action)}`);
       const { action: _action, user_id, ...legacyArgs } = input;
       if (user_id && legacyArgs.workspace) {
-        const { checkWikiAccess } = await import("./wiki-acl-OSBQJD2E.js");
+        const { checkWikiAccess } = await import("./wiki-acl-R4IIHICT.js");
         const { allowed } = await checkWikiAccess(
           String(user_id),
           String(legacyArgs.workspace),
@@ -8042,11 +8156,7 @@ function registerWiki(server) {
 }
 
 // src/mcp/tools/behavior.ts
-init_behaviors();
-import { z as z71 } from "zod";
-init_project_name();
-init_database();
-init_employees();
+import { z as z72 } from "zod";
 function rowToBehavior2(r) {
   return {
     id: String(r.id),
@@ -8071,22 +8181,47 @@ function registerBehavior(server) {
       title: "Behavior",
       description: "Manage behavioral patterns, corrections, and reusable procedures for employees. Actions: store (create new), list (query existing), audit (creation context), deactivate (soft-delete, restricted).",
       inputSchema: {
-        action: z71.enum(["store", "list", "deactivate", "audit"]).describe("Action to perform"),
-        content: z71.string().max(500).optional().describe("The behavioral instruction \u2014 one clear sentence (store)"),
-        domain: z71.string().optional().describe("Category: workflow, code-style, tool-use, communication, architecture, testing"),
-        priority: z71.enum(["p0", "p1", "p2"]).optional().describe("Priority tier. p0 = always included. p1 = standard (default). p2 = nice-to-have."),
-        agent_id: z71.string().optional().describe("Employee name. Defaults to current agent. Pass 'all' to list everyone's (list only)."),
-        project_name: z71.string().optional().describe("Defaults to current project. Pass 'global' for a behavior that applies everywhere (store)."),
-        behavior_id: z71.string().optional().describe("UUID of the behavior (deactivate)")
+        action: z72.enum(["store", "list", "deactivate", "audit"]).describe("Action to perform"),
+        content: z72.string().max(500).optional().describe("The behavioral instruction \u2014 one clear sentence (store)"),
+        domain: z72.string().optional().describe("Category: workflow, code-style, tool-use, communication, architecture, testing"),
+        priority: z72.enum(["p0", "p1", "p2"]).optional().describe("Priority tier. p0 = always included. p1 = standard (default). p2 = nice-to-have."),
+        agent_id: z72.string().optional().describe("Employee name. Defaults to current agent. Pass 'all' to list everyone's (list only)."),
+        project_name: z72.string().optional().describe("Defaults to current project. Pass 'global' for a behavior that applies everywhere (store)."),
+        behavior_id: z72.string().optional().describe("UUID of the behavior (deactivate)"),
+        shared_skills: z72.boolean().optional().describe("When true with action=list, include skills (domain='skill') from ALL agents. Default: false.")
       }
     },
-    async ({ action, content, domain, priority, agent_id, project_name, behavior_id }) => {
+    async ({ action, content, domain, priority, agent_id, project_name, behavior_id, shared_skills }) => {
       if (action === "list") {
+        if (shared_skills) {
+          const currentAgent = agent_id ?? getActiveAgent().agentId;
+          const proj = project_name || getProjectName();
+          const skills = await listSharedSkills(currentAgent, proj);
+          if (skills.length === 0) {
+            return {
+              content: [{ type: "text", text: "No shared skills found." }]
+            };
+          }
+          const lines2 = skills.map((b) => {
+            const scope = b.project_name ?? "global";
+            const sharedTag = b.shared ? " [shared]" : " [own]";
+            return `- [${b.agent_id}] (${scope})${sharedTag} ${b.content}  
+  ID: ${b.id}`;
+          });
+          return {
+            content: [{
+              type: "text",
+              text: `${skills.length} skill(s):
+${lines2.join("\n")}`
+            }]
+          };
+        }
         const client2 = getClient();
         const conditions = ["active = 1"];
         const args = [];
         if (agent_id !== "all") {
-          const resolvedAgent = agent_id ?? getActiveAgent().agentId;
+          const rawListAgent = agent_id ?? getActiveAgent().agentId;
+          const resolvedAgent = baseAgentName(rawListAgent, loadEmployeesSync());
           conditions.push("agent_id = ?");
           args.push(resolvedAgent);
         }
@@ -8142,44 +8277,33 @@ ${lines.join("\n")}`
             isError: true
           };
         }
-        const resolvedAgent = agent_id ?? getActiveAgent().agentId;
-        const isCrossAgentWrite = agent_id != null && agent_id !== getActiveAgent().agentId;
+        const caller2 = getActiveAgent();
+        const roster = loadEmployeesSync();
+        const rawAgent = agent_id ?? caller2.agentId;
+        const resolvedAgent = baseAgentName(rawAgent, roster);
+        const callerBase = baseAgentName(caller2.agentId, roster);
+        const isCrossAgentWrite = resolvedAgent !== callerBase;
         if (isCrossAgentWrite) {
-          const caller2 = getActiveAgent();
-          const allowed2 = canCoordinate(caller2.agentId, caller2.agentRole);
+          const allowed2 = canManage(callerBase, caller2.agentRole, resolvedAgent, roster);
           if (!allowed2) {
             return {
               content: [{
                 type: "text",
-                text: `Permission denied. Only the coordinator or founder sessions can store behaviors for other agents. You are "${caller2.agentId}".`
+                text: `Permission denied. Your role cannot write behaviors for "${resolvedAgent}". Chain of command: COO \u2192 anyone, CTO \u2192 engineers, CMO \u2192 content specialists. You are "${caller2.agentId}" (${caller2.agentRole ?? "unknown"}).`
               }],
               isError: true
             };
           }
         }
         if (resolvedAgent && resolvedAgent !== "default") {
-          try {
-            const { loadEmployeesSync: loadEmployeesSync2 } = await import("./lib/employees.js");
-            const roster = loadEmployeesSync2();
-            if (!roster.some((e) => e.name === resolvedAgent)) {
-              return {
-                content: [{
-                  type: "text",
-                  text: `Agent "${resolvedAgent}" not found in roster. Create the employee first with /exe-new-employee.`
-                }],
-                isError: true
-              };
-            }
-          } catch {
-            if (isCrossAgentWrite) {
-              return {
-                content: [{
-                  type: "text",
-                  text: `Unable to verify agent "${resolvedAgent}" \u2014 roster file unavailable. Cannot store cross-agent behavior without roster validation.`
-                }],
-                isError: true
-              };
-            }
+          if (roster.length > 0 && !roster.some((e) => e.name === resolvedAgent)) {
+            return {
+              content: [{
+                type: "text",
+                text: `Agent "${resolvedAgent}" not found in roster. Create the employee first with /exe-new-employee.`
+              }],
+              isError: true
+            };
           }
         }
         let resolvedProject;
@@ -8306,7 +8430,7 @@ Content: ${row.content}`
 }
 
 // src/mcp/tools/reminder.ts
-import { z as z72 } from "zod";
+import { z as z73 } from "zod";
 function registerReminder(server) {
   server.registerTool(
     "reminder",
@@ -8314,11 +8438,11 @@ function registerReminder(server) {
       title: "Reminder",
       description: "Manage reminders for the founder. Shown in the boot brief every session. Actions: create (set new), list (view active), complete (mark done).",
       inputSchema: {
-        action: z72.enum(["create", "list", "complete"]).describe("Action to perform"),
-        text: z72.string().optional().describe("What to remind about (create)"),
-        due_date: z72.string().optional().describe("Optional due date \u2014 ISO date (2026-04-01) or null for persistent (create)"),
-        reminder_id: z72.string().optional().describe("Reminder UUID or text substring to match (complete)"),
-        include_completed: z72.boolean().optional().default(false).describe("Include completed reminders (list)")
+        action: z73.enum(["create", "list", "complete"]).describe("Action to perform"),
+        text: z73.string().optional().describe("What to remind about (create)"),
+        due_date: z73.string().optional().describe("Optional due date \u2014 ISO date (2026-04-01) or null for persistent (create)"),
+        reminder_id: z73.string().optional().describe("Reminder UUID or text substring to match (complete)"),
+        include_completed: z73.boolean().optional().default(false).describe("Include completed reminders (list)")
       }
     },
     async ({ action, text: text3, due_date, reminder_id, include_completed }) => {
@@ -8371,8 +8495,7 @@ function registerReminder(server) {
 }
 
 // src/mcp/tools/store-global-procedure.ts
-import { z as z73 } from "zod";
-init_employees();
+import { z as z74 } from "zod";
 function registerStoreGlobalProcedure(server) {
   server.registerTool(
     "store_global_procedure",
@@ -8380,10 +8503,10 @@ function registerStoreGlobalProcedure(server) {
       title: "Store Company Procedure (use global_procedure instead)",
       description: "DEPRECATED \u2014 use global_procedure with action='store'. Create a company procedure (customer-owned Layer 0 rule). RESTRICTED: only coordinator or founder sessions.",
       inputSchema: {
-        title: z73.string().describe("Short title for the procedure"),
-        content: z73.string().max(500).describe("The procedure content \u2014 clear, actionable instruction"),
-        priority: z73.enum(["p0", "p1", "p2"]).optional().describe("Priority tier. p0 = always (default)."),
-        domain: z73.string().optional().describe("Category: workflow, code-style, communication, architecture, testing, security")
+        title: z74.string().describe("Short title for the procedure"),
+        content: z74.string().max(500).describe("The procedure content \u2014 clear, actionable instruction"),
+        priority: z74.enum(["p0", "p1", "p2"]).optional().describe("Priority tier. p0 = always (default)."),
+        domain: z74.string().optional().describe("Category: workflow, code-style, communication, architecture, testing, security")
       }
     },
     async ({ title, content, priority, domain }) => {
@@ -8455,9 +8578,7 @@ ${lines.join("\n\n")}`
 }
 
 // src/mcp/tools/deactivate-global-procedure.ts
-import { z as z74 } from "zod";
-init_database();
-init_employees();
+import { z as z75 } from "zod";
 function registerDeactivateGlobalProcedure(server) {
   server.registerTool(
     "deactivate_global_procedure",
@@ -8465,7 +8586,7 @@ function registerDeactivateGlobalProcedure(server) {
       title: "Deactivate Company Procedure (use global_procedure instead)",
       description: "DEPRECATED \u2014 use global_procedure with action='deactivate'. Soft-delete a company procedure. RESTRICTED: only coordinator or founder sessions.",
       inputSchema: {
-        procedure_id: z74.string().describe("UUID of the company procedure to deactivate")
+        procedure_id: z75.string().describe("UUID of the company procedure to deactivate")
       }
     },
     async ({ procedure_id }) => {
@@ -8520,11 +8641,8 @@ Content: ${row.content}`
 }
 
 // src/mcp/tools/store-decision.ts
-init_embedder();
-import { z as z75 } from "zod";
+import { z as z76 } from "zod";
 import crypto4 from "crypto";
-init_database();
-init_plan_limits();
 function registerStoreDecision(server) {
   server.registerTool(
     "store_decision",
@@ -8532,13 +8650,13 @@ function registerStoreDecision(server) {
       title: "Store Decision",
       description: "Store an authoritative decision keyed by domain. Use this when a decision is made that should be canonical \u2014 future lookups via get_decision return the latest decision for that domain. Supports supersession chains.",
       inputSchema: {
-        domain: z75.string().describe(
+        domain: z76.string().describe(
           "Domain key, e.g. 'auth-strategy', 'db-migration-approach', 'api-versioning'"
         ),
-        decision: z75.string().describe("The decision text \u2014 what was decided"),
-        rationale: z75.string().optional().describe("Why this decision was made \u2014 constraints, trade-offs, context"),
-        supersedes: z75.string().optional().describe("UUID of the decision this supersedes (previous decision for this domain)"),
-        project_name: z75.string().optional().describe("Project name")
+        decision: z76.string().describe("The decision text \u2014 what was decided"),
+        rationale: z76.string().optional().describe("Why this decision was made \u2014 constraints, trade-offs, context"),
+        supersedes: z76.string().optional().describe("UUID of the decision this supersedes (previous decision for this domain)"),
+        project_name: z76.string().optional().describe("Project name")
       }
     },
     async ({ domain, decision, rationale, supersedes, project_name }) => {
@@ -8605,8 +8723,7 @@ Supersedes: ${supersedes}` : ""}`
 }
 
 // src/mcp/tools/get-decision.ts
-init_database();
-import { z as z76 } from "zod";
+import { z as z77 } from "zod";
 function registerGetDecision(server) {
   server.registerTool(
     "get_decision",
@@ -8614,7 +8731,7 @@ function registerGetDecision(server) {
       title: "Get Decision",
       description: "Retrieve the latest authoritative decision for a domain. Returns the current active decision and the supersession history.",
       inputSchema: {
-        domain: z76.string().describe(
+        domain: z77.string().describe(
           "Domain key to look up, e.g. 'auth-strategy', 'db-migration-approach'"
         )
       }
@@ -8677,7 +8794,7 @@ function registerGetDecision(server) {
 }
 
 // src/mcp/tools/people-roster.ts
-import { z as z77 } from "zod";
+import { z as z78 } from "zod";
 
 // src/lib/people.ts
 init_config();
@@ -8725,10 +8842,10 @@ function registerAddPerson(server) {
       title: "Add Person",
       description: "Add or update a key human in the people roster. Used for co-founders, partners, customers \u2014 anyone agents need to know about.",
       inputSchema: {
-        name: z77.string().describe("Person's name"),
-        role: z77.string().describe("Their role (e.g. co-founder, customer, partner)"),
-        relationship: z77.string().describe("Relationship to the organization (e.g. co-founder, early adopter, investor)"),
-        notes: z77.string().optional().describe("Additional context about this person")
+        name: z78.string().describe("Person's name"),
+        role: z78.string().describe("Their role (e.g. co-founder, customer, partner)"),
+        relationship: z78.string().describe("Relationship to the organization (e.g. co-founder, early adopter, investor)"),
+        notes: z78.string().optional().describe("Additional context about this person")
       }
     },
     async ({ name, role, relationship, notes }) => {
@@ -8774,7 +8891,7 @@ function registerGetPerson(server) {
       title: "Get Person",
       description: "Look up a specific person by name from the people roster.",
       inputSchema: {
-        name: z77.string().describe("Person's name to look up")
+        name: z78.string().describe("Person's name to look up")
       }
     },
     async ({ name }) => {
@@ -8798,7 +8915,7 @@ Notes: ${person.notes}` : ""}`
 }
 
 // src/mcp/tools/crm.ts
-import { z as z78 } from "zod";
+import { z as z79 } from "zod";
 
 // src/lib/exe-db-read.ts
 import path14 from "path";
@@ -8815,7 +8932,7 @@ async function getExeDbReadClient() {
       const readonlyUrl = process.env.MCP_READONLY_DATABASE_URL;
       if (readonlyUrl) {
         const { Pool } = await import("pg");
-        const { pgSslConfig } = await import("./pg-ssl-KFHNJPGO.js");
+        const { pgSslConfig } = await import("./pg-ssl-4ZNXKUNH.js");
         const pool = new Pool({ connectionString: readonlyUrl, ...pgSslConfig() });
         return {
           async $queryRawUnsafe(query, ...values) {
@@ -8869,10 +8986,10 @@ function registerCrm(server) {
     title: "CRM",
     description: "Read-only CRM access from exe-db crm schema. Actions: list_people, get_person, list_tables, describe_table.",
     inputSchema: {
-      action: z78.enum(["list_people", "get_person", "list_tables", "describe_table"]).describe("CRM read operation"),
-      id: z78.string().optional().describe("CRM row/person id for get_person"),
-      query: z78.string().optional().describe("Text search for list_people/get_person"),
-      table: z78.string().optional().describe("crm schema table name for describe_table"),
+      action: z79.enum(["list_people", "get_person", "list_tables", "describe_table"]).describe("CRM read operation"),
+      id: z79.string().optional().describe("CRM row/person id for get_person"),
+      query: z79.string().optional().describe("Text search for list_people/get_person"),
+      table: z79.string().optional().describe("crm schema table name for describe_table"),
       ...PaginationSchema,
       ...DateRangeSchema,
       ...TextSearchSchema,
@@ -8972,7 +9089,7 @@ function registerCrm(server) {
 }
 
 // src/mcp/tools/raw-data.ts
-import { z as z79 } from "zod";
+import { z as z80 } from "zod";
 function text2(content, isError = false) {
   return { content: [{ type: "text", text: content }], ...isError ? { isError: true } : {} };
 }
@@ -8981,14 +9098,14 @@ function registerRawData(server) {
     title: "Raw Data",
     description: "Read-only access to exe-db raw.raw_events landing pad. Actions: list_sources, query, get. Results are capped because raw payloads can consume many tokens.",
     inputSchema: {
-      action: z79.enum(["list_sources", "query", "get"]).describe("Raw data read operation"),
-      id: z79.string().optional().describe("raw.raw_events id for action=get"),
-      source: z79.string().optional().describe("Filter by raw source"),
-      event_type: z79.string().optional().describe("Filter by event_type"),
-      query: z79.string().optional().describe("Search payload/metadata text"),
-      processed: z79.boolean().optional().describe("Filter processed_at IS NULL/NOT NULL"),
+      action: z80.enum(["list_sources", "query", "get"]).describe("Raw data read operation"),
+      id: z80.string().optional().describe("raw.raw_events id for action=get"),
+      source: z80.string().optional().describe("Filter by raw source"),
+      event_type: z80.string().optional().describe("Filter by event_type"),
+      query: z80.string().optional().describe("Search payload/metadata text"),
+      processed: z80.boolean().optional().describe("Filter processed_at IS NULL/NOT NULL"),
       ...PaginationSchema,
-      include_payload: z79.boolean().optional().describe("Include full payload JSON. Default false to save tokens."),
+      include_payload: z80.boolean().optional().describe("Include full payload JSON. Default false to save tokens."),
       ...DateRangeSchema,
       ...SortSchema,
       ...StructuredFiltersSchema
@@ -9064,9 +9181,9 @@ function registerRawData(server) {
 
 // src/mcp/tools/company-actions.ts
 init_config();
-import { z as z80 } from "zod";
+import { z as z81 } from "zod";
 var FETCH_TIMEOUT_MS4 = 15e3;
-var ACTION = z80.enum(["list_connectors", "describe_connector", "preview", "execute", "list_runs", "get_run"]);
+var ACTION = z81.enum(["list_connectors", "describe_connector", "preview", "execute", "list_runs", "get_run"]);
 function format(payload) {
   return ["# Company Actions", "", JSON.stringify(payload, null, 2)].join("\n");
 }
@@ -9078,13 +9195,13 @@ function registerCompanyActions(server) {
       description: "Preview and execute external connector actions (Asana, WhatsApp) through exe-gateway with audit/safety gates.",
       inputSchema: {
         action: ACTION.describe("list_connectors, describe_connector, preview, execute, list_runs, get_run"),
-        connector: z80.string().optional().describe("Connector to use, e.g. asana, whatsapp, airtable, notion"),
-        connector_ref: z80.string().optional().describe("Exact connector ref from list_connectors when connector names overlap"),
-        operation: z80.string().optional().describe("Connector operation, e.g. create_task or send_message"),
-        payload: z80.record(z80.string(), z80.unknown()).optional().describe("Operation payload"),
-        idempotency_key: z80.string().optional().describe("Stable key to prevent duplicate execution"),
-        confirm_token: z80.string().optional().describe("Optional future approval token"),
-        run_id: z80.string().optional().describe("Run id for get_run")
+        connector: z81.string().optional().describe("Connector to use, e.g. asana, whatsapp, airtable, notion"),
+        connector_ref: z81.string().optional().describe("Exact connector ref from list_connectors when connector names overlap"),
+        operation: z81.string().optional().describe("Connector operation, e.g. create_task or send_message"),
+        payload: z81.record(z81.string(), z81.unknown()).optional().describe("Operation payload"),
+        idempotency_key: z81.string().optional().describe("Stable key to prevent duplicate execution"),
+        confirm_token: z81.string().optional().describe("Optional future approval token"),
+        run_id: z81.string().optional().describe("Run id for get_run")
       }
     },
     async (input) => {
@@ -9129,8 +9246,8 @@ function registerCompanyActions(server) {
 }
 
 // src/mcp/tools/workflow.ts
-import { z as z81 } from "zod";
-var ACTION2 = z81.enum([
+import { z as z82 } from "zod";
+var ACTION2 = z82.enum([
   "create_workflow",
   "start_workflow",
   "get_workflow_status",
@@ -9138,23 +9255,23 @@ var ACTION2 = z81.enum([
   "list_workflows",
   "list_instances"
 ]);
-var StepSchema = z81.object({
-  name: z81.string().describe("Human-readable step name"),
-  type: z81.enum(["execute_action", "wait_for_approval", "conditional"]).describe("Step type"),
-  action: z81.object({
-    type: z81.enum(["send_whatsapp", "send_message", "create_task", "update_wiki", "mcp_tool"]),
-    params: z81.record(z81.string(), z81.string()),
-    requires_approval: z81.boolean().optional()
+var StepSchema = z82.object({
+  name: z82.string().describe("Human-readable step name"),
+  type: z82.enum(["execute_action", "wait_for_approval", "conditional"]).describe("Step type"),
+  action: z82.object({
+    type: z82.enum(["send_whatsapp", "send_message", "create_task", "update_wiki", "mcp_tool"]),
+    params: z82.record(z82.string(), z82.string()),
+    requires_approval: z82.boolean().optional()
   }).optional().describe("Action to execute (for execute_action steps)"),
-  connector: z81.string().optional().describe("Connector name (e.g., asana, whatsapp)"),
-  operation: z81.string().optional().describe("Connector operation (e.g., create_task)"),
-  payload: z81.record(z81.string(), z81.unknown()).optional().describe("Operation payload"),
-  condition: z81.object({
-    expression: z81.string().describe("Expression like '{{step.1.result.status}} == completed'"),
-    then_step: z81.number().optional(),
-    else_step: z81.number().optional()
+  connector: z82.string().optional().describe("Connector name (e.g., asana, whatsapp)"),
+  operation: z82.string().optional().describe("Connector operation (e.g., create_task)"),
+  payload: z82.record(z82.string(), z82.unknown()).optional().describe("Operation payload"),
+  condition: z82.object({
+    expression: z82.string().describe("Expression like '{{step.1.result.status}} == completed'"),
+    then_step: z82.number().optional(),
+    else_step: z82.number().optional()
   }).optional().describe("Condition for conditional steps"),
-  approval_message: z81.string().optional().describe("Message shown when waiting for approval")
+  approval_message: z82.string().optional().describe("Message shown when waiting for approval")
 });
 function registerWorkflowTool(server) {
   server.registerTool(
@@ -9164,14 +9281,14 @@ function registerWorkflowTool(server) {
       description: "Create, run, and manage multi-step workflows that chain actions with approval gates. Steps reference previous outputs via {{step.N.result}}. Actions: create_workflow, start_workflow, get_workflow_status, approve_workflow_step, list_workflows, list_instances.",
       inputSchema: {
         action: ACTION2.describe("create_workflow | start_workflow | get_workflow_status | approve_workflow_step | list_workflows | list_instances"),
-        name: z81.string().optional().describe("Workflow name (for create_workflow)"),
-        description: z81.string().optional().describe("Workflow description (for create_workflow)"),
-        steps: z81.array(StepSchema).optional().describe("Workflow steps (for create_workflow)"),
-        definition_id: z81.string().optional().describe("Workflow definition ID (for start_workflow)"),
-        instance_id: z81.string().optional().describe("Workflow instance ID (for get_workflow_status, approve_workflow_step)"),
-        context: z81.record(z81.string(), z81.unknown()).optional().describe("Initial context/record (for start_workflow)"),
-        approved: z81.boolean().optional().describe("Approve (true) or reject (false) the step (for approve_workflow_step)"),
-        status_filter: z81.string().optional().describe("Filter instances by status (for list_instances)")
+        name: z82.string().optional().describe("Workflow name (for create_workflow)"),
+        description: z82.string().optional().describe("Workflow description (for create_workflow)"),
+        steps: z82.array(StepSchema).optional().describe("Workflow steps (for create_workflow)"),
+        definition_id: z82.string().optional().describe("Workflow definition ID (for start_workflow)"),
+        instance_id: z82.string().optional().describe("Workflow instance ID (for get_workflow_status, approve_workflow_step)"),
+        context: z82.record(z82.string(), z82.unknown()).optional().describe("Initial context/record (for start_workflow)"),
+        approved: z82.boolean().optional().describe("Approve (true) or reject (false) the step (for approve_workflow_step)"),
+        status_filter: z82.string().optional().describe("Filter instances by status (for list_instances)")
       }
     },
     async (input) => {
@@ -9184,7 +9301,7 @@ function registerWorkflowTool(server) {
         getWorkflowInstance,
         listWorkflowInstances,
         approveWorkflowStep
-      } = await import("./workflow-engine-2XZK77ZX.js");
+      } = await import("./workflow-engine-GISKRYSO.js");
       try {
         switch (input.action) {
           case "create_workflow": {
@@ -9307,10 +9424,24 @@ function formatInstanceStatus(inst, def) {
 }
 
 // src/mcp/tools/file-copy.ts
-import { z as z82 } from "zod";
+import { z as z83 } from "zod";
 import { copyFileSync, existsSync as existsSync9, lstatSync, mkdirSync as mkdirSync3, realpathSync, statSync as statSync2 } from "fs";
 import path15 from "path";
 import os4 from "os";
+var DEFAULT_MAX_SIZE = 50 * 1024 * 1024;
+function getMaxSize() {
+  const envVal = process.env.EXE_FILE_COPY_MAX_SIZE;
+  if (envVal) {
+    const parsed = parseInt(envVal, 10);
+    if (!isNaN(parsed) && parsed > 0) return parsed;
+  }
+  return DEFAULT_MAX_SIZE;
+}
+function humanSize(bytes) {
+  if (bytes < 1024) return `${bytes} B`;
+  if (bytes < 1024 * 1024) return `${(bytes / 1024).toFixed(1)} KB`;
+  return `${(bytes / (1024 * 1024)).toFixed(2)} MB`;
+}
 function getAllowedRoots() {
   const roots = [];
   roots.push(path15.resolve(process.cwd()));
@@ -9334,9 +9465,9 @@ function registerFileCopy(server) {
       title: "File Copy",
       description: "Copy a file from source to destination without streaming through the LLM. Saves tokens for literal file copies.",
       inputSchema: {
-        source: z82.string().describe("Source file path (absolute or relative to cwd)"),
-        destination: z82.string().describe("Destination file path (absolute or relative to cwd)"),
-        overwrite: z82.boolean().optional().default(false).describe("Overwrite destination if it exists")
+        source: z83.string().describe("Source file path (absolute or relative to cwd)"),
+        destination: z83.string().describe("Destination file path (absolute or relative to cwd)"),
+        overwrite: z83.boolean().optional().default(false).describe("Overwrite destination if it exists")
       }
     },
     async ({ source, destination, overwrite }) => {
@@ -9361,6 +9492,13 @@ function registerFileCopy(server) {
         if (!srcStat.isFile()) {
           return { content: [{ type: "text", text: `Source is not a file: ${srcPath}` }], isError: true };
         }
+        const maxSize = getMaxSize();
+        if (srcStat.size > maxSize) {
+          return {
+            content: [{ type: "text", text: `File too large: ${humanSize(srcStat.size)} exceeds limit of ${humanSize(maxSize)}. Set EXE_FILE_COPY_MAX_SIZE to increase.` }],
+            isError: true
+          };
+        }
         const allowedRoots = getAllowedRoots();
         if (!isWithinBoundary(srcPath, allowedRoots)) {
           return {
@@ -9377,16 +9515,27 @@ function registerFileCopy(server) {
         if (existsSync9(dstPath) && !overwrite) {
           return { content: [{ type: "text", text: `Destination already exists: ${dstPath}. Set overwrite=true to replace.` }], isError: true };
         }
+        if (existsSync9(dstPath) && overwrite) {
+          try {
+            const existingSize = statSync2(dstPath).size;
+            process.stderr.write(
+              `[file-copy] Overwriting ${dstPath} (${existingSize} bytes) with ${srcPath} (${srcStat.size} bytes)
+`
+            );
+          } catch {
+          }
+        }
         const dstDir = path15.dirname(dstPath);
         if (!existsSync9(dstDir)) {
           mkdirSync3(dstDir, { recursive: true });
         }
         copyFileSync(srcPath, dstPath);
-        const sizeMB = (srcStat.size / (1024 * 1024)).toFixed(2);
+        const sizeStr = humanSize(srcStat.size);
+        const filename = path15.basename(srcPath);
         return {
           content: [{
             type: "text",
-            text: `Copied ${srcPath} \u2192 ${dstPath} (${sizeMB} MB)`
+            text: `Copied ${filename} (${sizeStr}): ${srcPath} \u2192 ${dstPath}`
           }]
         };
       } catch (err) {
@@ -9400,20 +9549,18 @@ function registerFileCopy(server) {
 }
 
 // src/mcp/tools/create-bug-report.ts
-init_embedder();
-import { z as z83 } from "zod";
+import { z as z84 } from "zod";
 import crypto5 from "crypto";
 import { mkdir as mkdir2, writeFile as writeFile2 } from "fs/promises";
 import path16 from "path";
 init_config();
-init_license();
-var CLASSIFICATION = z83.enum([
+var CLASSIFICATION = z84.enum([
   "upstream_bug",
   "customer_customization",
   "emergency_hotfix",
   "unclear"
 ]);
-var SEVERITY = z83.enum(["p0", "p1", "p2", "p3"]);
+var SEVERITY = z84.enum(["p0", "p1", "p2", "p3"]);
 function slugify(input) {
   return input.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 80) || "bug-report";
 }
@@ -9465,7 +9612,6 @@ function prepareUpstreamPayload(payload) {
   }
   delete redacted.agent_role;
   try {
-    const { encryptSyncBlob, isSyncCryptoInitialized } = (init_crypto(), __toCommonJS(crypto_exports));
     if (isSyncCryptoInitialized()) {
       const jsonBuf = Buffer.from(JSON.stringify(redacted), "utf-8");
       const encrypted = encryptSyncBlob(jsonBuf);
@@ -9516,23 +9662,23 @@ function registerCreateBugReport(server) {
       title: "Create Bug Report",
       description: "Classify and file an exe-os issue as upstream_bug, customer_customization, emergency_hotfix, or unclear. Writes a local report, stores memory, and optionally sends to AskExe support when a support endpoint is configured.",
       inputSchema: {
-        title: z83.string().min(3).describe("Short descriptive title"),
+        title: z84.string().min(3).describe("Short descriptive title"),
         classification: CLASSIFICATION.describe(
           "upstream_bug = platform defect; customer_customization = local preference; emergency_hotfix = temporary local patch; unclear = needs maintainer triage"
         ),
         severity: SEVERITY.default("p2").describe("p0 critical \u2192 p3 low"),
-        summary: z83.string().min(10).describe("What happened and why it matters"),
-        customer_impact: z83.string().optional().describe("How this affects the customer/founder"),
-        reproduction_steps: z83.array(z83.string()).optional().describe("Steps to reproduce"),
-        expected: z83.string().optional().describe("Expected behavior"),
-        actual: z83.string().optional().describe("Actual behavior"),
-        files_changed: z83.array(z83.string()).optional().describe("Files changed or suspected"),
-        workaround: z83.string().optional().describe("Temporary local workaround/hotfix, if any"),
-        local_patch_diff: z83.string().optional().describe("Small local diff or patch summary"),
-        product: z83.string().optional().describe("Product this bug is for: exe-os, exe-create, exe-wiki, exe-gateway, exe-crm, exe-build. Defaults to exe-os."),
-        package_version: z83.string().optional().describe("Installed package version"),
-        project_name: z83.string().optional().describe("Project/customer context"),
-        send_upstream: z83.boolean().default(true).describe("Attempt to POST to configured AskExe support endpoint")
+        summary: z84.string().min(10).describe("What happened and why it matters"),
+        customer_impact: z84.string().optional().describe("How this affects the customer/founder"),
+        reproduction_steps: z84.array(z84.string()).optional().describe("Steps to reproduce"),
+        expected: z84.string().optional().describe("Expected behavior"),
+        actual: z84.string().optional().describe("Actual behavior"),
+        files_changed: z84.array(z84.string()).optional().describe("Files changed or suspected"),
+        workaround: z84.string().optional().describe("Temporary local workaround/hotfix, if any"),
+        local_patch_diff: z84.string().optional().describe("Small local diff or patch summary"),
+        product: z84.string().optional().describe("Product this bug is for: exe-os, exe-create, exe-wiki, exe-gateway, exe-crm, exe-build. Defaults to exe-os."),
+        package_version: z84.string().optional().describe("Installed package version"),
+        project_name: z84.string().optional().describe("Project/customer context"),
+        send_upstream: z84.boolean().default(true).describe("Attempt to POST to configured AskExe support endpoint")
       }
     },
     async ({
@@ -9654,20 +9800,18 @@ Upstream status: ${upstreamStatus}`
 }
 
 // src/mcp/tools/create-feature-request.ts
-init_embedder();
-import { z as z84 } from "zod";
+import { z as z85 } from "zod";
 import crypto6 from "crypto";
 import { mkdir as mkdir3, writeFile as writeFile3 } from "fs/promises";
 import path17 from "path";
 init_config();
-init_license();
-var CATEGORY = z84.enum([
+var CATEGORY = z85.enum([
   "upstream_feature",
   "local_customization",
   "integration",
   "unclear"
 ]);
-var PRIORITY = z84.enum(["p0", "p1", "p2", "p3"]);
+var PRIORITY = z85.enum(["p0", "p1", "p2", "p3"]);
 function slugify2(input) {
   return input.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 80) || "feature-request";
 }
@@ -9735,20 +9879,20 @@ function registerCreateFeatureRequest(server) {
       title: "Create Feature Request",
       description: "File a feature request for exe-os: upstream_feature (requires platform changes), local_customization (configurable in customer layers), integration (third-party), or unclear. Writes a local report, stores memory, and optionally sends to AskExe.",
       inputSchema: {
-        title: z84.string().min(3).describe("Short descriptive title"),
+        title: z85.string().min(3).describe("Short descriptive title"),
         category: CATEGORY.describe(
           "upstream_feature = platform capability change; local_customization = configurable in customer layers; integration = third-party connector; unclear = needs product triage"
         ),
         priority: PRIORITY.default("p2").describe("p0 critical \u2192 p3 low"),
-        description: z84.string().min(10).describe("What capability is needed and why"),
-        use_case: z84.string().optional().describe("Concrete scenario where this feature would be used"),
-        current_workaround: z84.string().optional().describe("How the need is currently addressed, if at all"),
-        proposed_solution: z84.string().optional().describe("Suggested implementation approach"),
-        business_impact: z84.string().optional().describe("Impact on business/workflow if this ships"),
-        product: z84.string().optional().describe("Product this feature is for: exe-os, exe-create, exe-wiki, exe-gateway, exe-crm, exe-build. Defaults to exe-os."),
-        package_version: z84.string().optional().describe("Installed package version"),
-        project_name: z84.string().optional().describe("Project/customer context"),
-        send_upstream: z84.boolean().default(true).describe("Attempt to POST to configured AskExe support endpoint")
+        description: z85.string().min(10).describe("What capability is needed and why"),
+        use_case: z85.string().optional().describe("Concrete scenario where this feature would be used"),
+        current_workaround: z85.string().optional().describe("How the need is currently addressed, if at all"),
+        proposed_solution: z85.string().optional().describe("Suggested implementation approach"),
+        business_impact: z85.string().optional().describe("Impact on business/workflow if this ships"),
+        product: z85.string().optional().describe("Product this feature is for: exe-os, exe-create, exe-wiki, exe-gateway, exe-crm, exe-build. Defaults to exe-os."),
+        package_version: z85.string().optional().describe("Installed package version"),
+        project_name: z85.string().optional().describe("Project/customer context"),
+        send_upstream: z85.boolean().default(true).describe("Attempt to POST to configured AskExe support endpoint")
       }
     },
     async ({
@@ -9850,8 +9994,7 @@ Upstream status: ${upstreamStatus}`
 }
 
 // src/mcp/tools/support.ts
-import { z as z85 } from "zod";
-init_license();
+import { z as z86 } from "zod";
 function formatRows(rows, mode) {
   const lines = [`exe-os support ${mode}`, ""];
   for (const row of rows) {
@@ -9892,7 +10035,7 @@ function registerSupportTools(server) {
       title: "Support Test",
       description: "End-to-end support intake smoke test. Files a clearly marked test report upstream and auto-closes it on AskExe machines with admin credentials.",
       inputSchema: {
-        project: z85.string().default("support-smoke").describe("Customer/project name, e.g. hygo")
+        project: z86.string().default("support-smoke").describe("Customer/project name, e.g. hygo")
       }
     },
     async ({ project }) => {
@@ -9910,8 +10053,8 @@ function registerSupportTools(server) {
       title: "My Bug Reports",
       description: "List bug reports you've filed, scoped to your license. Shows status (open/triaged/fixed/closed), severity, and fixed_version so you know when to update.",
       inputSchema: {
-        status: z85.enum(["all", "open", "triaged", "fixed", "closed", "wontfix"]).default("all").describe("Filter by status. Default: all"),
-        limit: z85.number().min(1).max(50).default(25).describe("Max results")
+        status: z86.enum(["all", "open", "triaged", "fixed", "closed", "wontfix"]).default("all").describe("Filter by status. Default: all"),
+        limit: z86.number().min(1).max(50).default(25).describe("Max results")
       }
     },
     async ({ status: status2, limit }) => {
@@ -9976,8 +10119,8 @@ function registerSupportTools(server) {
       title: "My Feature Requests",
       description: "List feature requests you've filed, scoped to your license. Shows status (open/planned/in_progress/shipped/closed), priority, and shipped_version so you know when to update.",
       inputSchema: {
-        status: z85.enum(["all", "open", "planned", "in_progress", "shipped", "closed", "wontdo"]).default("all").describe("Filter by status. Default: all"),
-        limit: z85.number().min(1).max(50).default(25).describe("Max results")
+        status: z86.enum(["all", "open", "planned", "in_progress", "shipped", "closed", "wontdo"]).default("all").describe("Filter by status. Default: all"),
+        limit: z86.number().min(1).max(50).default(25).describe("Max results")
       }
     },
     async ({ status: status2, limit }) => {
@@ -10042,7 +10185,7 @@ function registerSupportTools(server) {
 // src/mcp/tools/cli-parity.ts
 import { execFile as execFile2 } from "child_process";
 import { promisify as promisify2 } from "util";
-import { z as z86 } from "zod";
+import { z as z87 } from "zod";
 var execFileAsync2 = promisify2(execFile2);
 async function runCommand(command, args, timeout = 6e4) {
   const printable = [command, ...args].join(" ");
@@ -10078,12 +10221,12 @@ function registerCliParityTools(server) {
     title: "Doctor",
     description: "Run exe-os doctor audit. Defaults to read-only diagnostics; optional dry-run/fix flags mirror CLI.",
     inputSchema: {
-      agent: z86.string().optional(),
-      project: z86.string().optional(),
-      verbose: z86.boolean().default(false),
-      conflicts: z86.boolean().default(false),
-      dry_run: z86.boolean().default(false),
-      fix: z86.boolean().default(false)
+      agent: z87.string().optional(),
+      project: z87.string().optional(),
+      verbose: z87.boolean().default(false),
+      conflicts: z87.boolean().default(false),
+      dry_run: z87.boolean().default(false),
+      fix: z87.boolean().default(false)
     }
   }, async ({ agent, project, verbose, conflicts, dry_run, fix }) => {
     const args = [];
@@ -10100,9 +10243,9 @@ function registerCliParityTools(server) {
     title: "Rename Employee",
     description: "Rename an employee using the same path as `exe-os rename <old> <new>`. Use for customer roster/identity renames.",
     inputSchema: {
-      old_name: z86.string().min(1),
-      new_name: z86.string().min(1),
-      dry_run: z86.boolean().default(false)
+      old_name: z87.string().min(1),
+      new_name: z87.string().min(1),
+      dry_run: z87.boolean().default(false)
     }
   }, async ({ old_name, new_name, dry_run }) => {
     if (dry_run) {
@@ -10115,7 +10258,7 @@ function registerCliParityTools(server) {
   server.registerTool("status_brief", {
     title: "Status Brief",
     description: "Return current employee/tmux status. Mirrors `exe-status` and supports optional deep view for one employee.",
-    inputSchema: { employee: z86.string().optional() }
+    inputSchema: { employee: z87.string().optional() }
   }, async ({ employee }) => {
     const text3 = await status(employee);
     return result2(text3, { ok: true, employee: employee ?? null });
@@ -10123,7 +10266,7 @@ function registerCliParityTools(server) {
   server.registerTool("pending_work_summary", {
     title: "Pending Work Summary",
     description: "Return pending reviews, messages, and notifications using the same summaries as the CLI tools.",
-    inputSchema: { agent: z86.string().optional() }
+    inputSchema: { agent: z87.string().optional() }
   }, async ({ agent }) => {
     const settled = await Promise.allSettled([
       runCommand("exe-pending-reviews", [], 3e4),
@@ -10147,7 +10290,7 @@ function registerCliParityTools(server) {
   server.registerTool("key_rotation_preflight", {
     title: "Key Rotation Preflight",
     description: "Dry-run key rotation/update preflight. No destructive changes.",
-    inputSchema: { mode: z86.enum(["rotate", "update"]).default("rotate") }
+    inputSchema: { mode: z87.enum(["rotate", "update"]).default("rotate") }
   }, async ({ mode }) => {
     const out = await runCommand("exe-os", ["key", mode, "--dry-run"], 6e4);
     return result2(out.text, { ok: out.ok, command: out.command, mode }, !out.ok);
@@ -10166,11 +10309,11 @@ function registerCliParityTools(server) {
     title: "Stack Update Check",
     description: "Plan/check a customer stack update without applying Docker changes. Mirrors `exe-os stack-update --check`.",
     inputSchema: {
-      target: z86.string().optional(),
-      manifest: z86.string().optional(),
-      compose_file: z86.string().optional(),
-      env_file: z86.string().optional(),
-      deployment_persona: z86.enum(["customer", "askexe-control-plane"]).default("customer")
+      target: z87.string().optional(),
+      manifest: z87.string().optional(),
+      compose_file: z87.string().optional(),
+      env_file: z87.string().optional(),
+      deployment_persona: z87.enum(["customer", "askexe-control-plane"]).default("customer")
     }
   }, async ({ target, manifest, compose_file, env_file, deployment_persona }) => {
     const args = ["stack-update", "--check", "--deployment-persona", deployment_persona];
@@ -10192,8 +10335,8 @@ function registerCliParityTools(server) {
 }
 
 // src/mcp/tools/get-session-events.ts
-import { z as z87 } from "zod";
-var EVENT_TYPE = z87.enum([
+import { z as z88 } from "zod";
+var EVENT_TYPE = z88.enum([
   "user_prompt",
   "assistant_response",
   "tool_call",
@@ -10223,11 +10366,11 @@ function registerGetSessionEvents(server) {
       title: "Get Session Events",
       description: "Return exact recent chronological user prompts, assistant responses, and tool calls from the append-only session journal. Use this when asked what happened last, not semantic memory search.",
       inputSchema: {
-        agent_id: z87.string().optional().describe("Agent to inspect. Defaults to active agent. COO/CTO may inspect others."),
-        session_id: z87.string().optional().describe("Optional exact runtime session id."),
+        agent_id: z88.string().optional().describe("Agent to inspect. Defaults to active agent. COO/CTO may inspect others."),
+        session_id: z88.string().optional().describe("Optional exact runtime session id."),
         event_type: EVENT_TYPE.optional().describe("Filter to one event type."),
-        project_name: z87.string().optional().describe("Optional project filter. Pass 'all' for all projects."),
-        limit: z87.number().int().min(1).max(100).default(20).describe("Number of events to return.")
+        project_name: z88.string().optional().describe("Optional project filter. Pass 'all' for all projects."),
+        limit: z88.number().int().min(1).max(100).default(20).describe("Number of events to return.")
       }
     },
     async ({ agent_id, session_id, event_type, project_name, limit }) => {
@@ -10263,8 +10406,8 @@ function registerGetLastAssistantResponse(server) {
       title: "Get Last Assistant Response",
       description: "Return the exact last assistant response for an agent from the session event journal. Use for 'what was the last thing you said?'",
       inputSchema: {
-        agent_id: z87.string().optional().describe("Agent to inspect. Defaults to active agent. COO/CTO may inspect others."),
-        project_name: z87.string().optional().describe("Optional project filter. Pass 'all' for all projects.")
+        agent_id: z88.string().optional().describe("Agent to inspect. Defaults to active agent. COO/CTO may inspect others."),
+        project_name: z88.string().optional().describe("Optional project filter. Pass 'all' for all projects.")
       }
     },
     async ({ agent_id, project_name }) => {
@@ -10294,7 +10437,7 @@ function registerGetLastAssistantResponse(server) {
 }
 
 // src/mcp/tools/code-context.ts
-import { z as z88 } from "zod";
+import { z as z89 } from "zod";
 function errorResult10(text3) {
   return { content: [{ type: "text", text: text3 }], isError: true };
 }
@@ -10306,20 +10449,20 @@ function registerCodeContext(server) {
     title: "Code Context",
     description: "Persistent codebase context engine with semantic vector search. One consolidated tool to avoid MCP bloat. Actions: index (structural only), index_embed (structural + vector embeddings), search (semantic+lexical hybrid), trace, blast_radius, stats. Search uses RRF fusion of Jina v5 embeddings (cosine similarity) + lexical scoring. Falls back to lexical if daemon unavailable.",
     inputSchema: {
-      action: z88.enum(["index", "index_embed", "search", "trace", "blast_radius", "stats"]).describe("Code context operation. index_embed = index + generate embeddings for semantic search."),
-      project_root: z88.string().optional().describe("Repository root. Defaults to current working directory."),
-      query: z88.string().optional().describe("Natural language search query (e.g. 'authentication logic', 'database migration'). Semantic search finds conceptual matches, not just keywords."),
-      symbol: z88.string().optional().describe("Symbol/function/class/type name for trace or blast_radius"),
-      file_path: z88.string().optional().describe("File path for blast_radius"),
-      force: z88.boolean().optional().describe("Force rebuild before answering"),
-      limit: z88.coerce.number().int().min(1).max(100).optional().describe("Max results"),
-      offset: z88.coerce.number().int().min(0).optional().describe("Search pagination offset"),
-      refresh_index: z88.boolean().optional().describe("Refresh/rebuild index before searching"),
-      languages: z88.array(z88.string()).optional().describe('Language filters, e.g. ["python", "typescript"]'),
-      paths: z88.array(z88.string()).optional().describe("Path/glob filters"),
-      depth: z88.coerce.number().int().min(1).max(5).optional().describe("Dependent traversal depth for blast_radius"),
-      max_files: z88.coerce.number().int().min(1).max(1e4).optional().describe("Max code files to index"),
-      lexical_only: z88.boolean().optional().describe("Force lexical-only search (skip vector similarity). Default: false \u2014 uses semantic hybrid search.")
+      action: z89.enum(["index", "index_embed", "search", "trace", "blast_radius", "stats"]).describe("Code context operation. index_embed = index + generate embeddings for semantic search."),
+      project_root: z89.string().optional().describe("Repository root. Defaults to current working directory."),
+      query: z89.string().optional().describe("Natural language search query (e.g. 'authentication logic', 'database migration'). Semantic search finds conceptual matches, not just keywords."),
+      symbol: z89.string().optional().describe("Symbol/function/class/type name for trace or blast_radius"),
+      file_path: z89.string().optional().describe("File path for blast_radius"),
+      force: z89.boolean().optional().describe("Force rebuild before answering"),
+      limit: z89.coerce.number().int().min(1).max(100).optional().describe("Max results"),
+      offset: z89.coerce.number().int().min(0).optional().describe("Search pagination offset"),
+      refresh_index: z89.boolean().optional().describe("Refresh/rebuild index before searching"),
+      languages: z89.array(z89.string()).optional().describe('Language filters, e.g. ["python", "typescript"]'),
+      paths: z89.array(z89.string()).optional().describe("Path/glob filters"),
+      depth: z89.coerce.number().int().min(1).max(5).optional().describe("Dependent traversal depth for blast_radius"),
+      max_files: z89.coerce.number().int().min(1).max(1e4).optional().describe("Max code files to index"),
+      lexical_only: z89.boolean().optional().describe("Force lexical-only search (skip vector similarity). Default: false \u2014 uses semantic hybrid search.")
     }
   }, async ({ action, project_root, query, symbol, file_path, force, limit, offset, refresh_index, languages, paths, depth, max_files, lexical_only }) => {
     const opts = { projectRoot: project_root, force, maxFiles: max_files };
@@ -10395,9 +10538,9 @@ function registerCodeContext(server) {
 }
 
 // src/mcp/tools/support-inbox.ts
-import { z as z89 } from "zod";
+import { z as z90 } from "zod";
 var DEFAULT_ENDPOINT = "https://cloud.askexe.com/admin/support/bug-reports";
-var STATUS = z89.enum(["open", "triaged", "fixed", "closed", "wontfix"]);
+var STATUS = z90.enum(["open", "triaged", "fixed", "closed", "wontfix"]);
 function adminToken() {
   return process.env.ASKEXE_SUPPORT_ADMIN_TOKEN || process.env.EXE_SUPPORT_ADMIN_TOKEN;
 }
@@ -10436,9 +10579,9 @@ function registerListBugReports(server) {
       title: "List Bug Reports",
       description: "AskExe-internal only: list incoming customer bug reports from the support inbox.",
       inputSchema: {
-        status: z89.enum(["all", "open", "triaged", "fixed", "closed", "wontfix"]).default("open"),
-        severity: z89.enum(["p0", "p1", "p2", "p3"]).optional(),
-        limit: z89.number().int().min(1).max(100).default(25)
+        status: z90.enum(["all", "open", "triaged", "fixed", "closed", "wontfix"]).default("open"),
+        severity: z90.enum(["p0", "p1", "p2", "p3"]).optional(),
+        limit: z90.number().int().min(1).max(100).default(25)
       }
     },
     async ({ status: status2, severity, limit }) => {
@@ -10457,7 +10600,7 @@ function registerGetBugReport(server) {
     {
       title: "Get Bug Report",
       description: "AskExe-internal only: fetch one customer bug report with full markdown payload.",
-      inputSchema: { id: z89.string().min(8) }
+      inputSchema: { id: z90.string().min(8) }
     },
     async ({ id }) => {
       const data = await requestJson(`${endpoint()}/${encodeURIComponent(id)}`);
@@ -10472,12 +10615,12 @@ function registerTriageBugReport(server) {
       title: "Triage Bug Report",
       description: "AskExe-internal only: update bug report status and link task/commit/release metadata.",
       inputSchema: {
-        id: z89.string().min(8),
+        id: z90.string().min(8),
         status: STATUS.optional(),
-        triage_notes: z89.string().optional(),
-        linked_task_id: z89.string().optional(),
-        linked_commit: z89.string().optional(),
-        fixed_version: z89.string().optional()
+        triage_notes: z90.string().optional(),
+        linked_task_id: z90.string().optional(),
+        linked_commit: z90.string().optional(),
+        fixed_version: z90.string().optional()
       }
     },
     async ({ id, status: status2, triage_notes, linked_task_id, linked_commit, fixed_version }) => {
@@ -10490,7 +10633,7 @@ function registerTriageBugReport(server) {
     }
   );
 }
-var FEATURE_STATUS = z89.enum(["open", "planned", "in_progress", "shipped", "closed", "wontdo"]);
+var FEATURE_STATUS = z90.enum(["open", "planned", "in_progress", "shipped", "closed", "wontdo"]);
 function featureEndpoint() {
   return endpoint().replace(/\/bug-reports\/?$/, "/feature-requests");
 }
@@ -10501,9 +10644,9 @@ function registerListFeatureRequests(server) {
       title: "List Feature Requests",
       description: "AskExe-internal only: list incoming customer feature requests from the support inbox.",
       inputSchema: {
-        status: z89.enum(["all", "open", "planned", "in_progress", "shipped", "closed", "wontdo"]).default("open"),
-        priority: z89.enum(["p0", "p1", "p2", "p3"]).optional(),
-        limit: z89.number().int().min(1).max(100).default(25)
+        status: z90.enum(["all", "open", "planned", "in_progress", "shipped", "closed", "wontdo"]).default("open"),
+        priority: z90.enum(["p0", "p1", "p2", "p3"]).optional(),
+        limit: z90.number().int().min(1).max(100).default(25)
       }
     },
     async ({ status: status2, priority, limit }) => {
@@ -10522,7 +10665,7 @@ function registerGetFeatureRequest(server) {
     {
       title: "Get Feature Request",
       description: "AskExe-internal only: fetch one customer feature request with full payload.",
-      inputSchema: { id: z89.string().min(8) }
+      inputSchema: { id: z90.string().min(8) }
     },
     async ({ id }) => {
       const data = await requestJson(`${featureEndpoint()}/${encodeURIComponent(id)}`);
@@ -10537,11 +10680,11 @@ function registerTriageFeatureRequest(server) {
       title: "Triage Feature Request",
       description: "AskExe-internal only: update feature request status, response notes, and version metadata.",
       inputSchema: {
-        id: z89.string().min(8),
+        id: z90.string().min(8),
         status: FEATURE_STATUS.optional(),
-        response_notes: z89.string().optional(),
-        target_version: z89.string().optional(),
-        shipped_version: z89.string().optional()
+        response_notes: z90.string().optional(),
+        target_version: z90.string().optional(),
+        shipped_version: z90.string().optional()
       }
     },
     async ({ id, status: status2, response_notes, target_version, shipped_version }) => {
@@ -10556,7 +10699,7 @@ function registerTriageFeatureRequest(server) {
 }
 
 // src/mcp/tools/decision.ts
-import { z as z90 } from "zod";
+import { z as z91 } from "zod";
 function buildHandlers6() {
   const tools = /* @__PURE__ */ new Map();
   const fake = {
@@ -10580,12 +10723,12 @@ function registerDecision(server) {
       title: "Decision",
       description: "Store or retrieve authoritative decisions. Actions: store (persist a decision by domain), get (look up a decision by domain/query).",
       inputSchema: {
-        action: z90.enum(["store", "get"]).describe("Decision operation"),
-        domain: z90.string().optional().describe("Decision domain (e.g. 'architecture', 'hiring')"),
-        decision: z90.string().optional().describe("Decision text for action=store"),
-        rationale: z90.string().optional().describe("Why this decision was made (action=store)"),
-        query: z90.string().optional().describe("Search query for action=get"),
-        limit: z90.coerce.number().optional().describe("Max results for action=get")
+        action: z91.enum(["store", "get"]).describe("Decision operation"),
+        domain: z91.string().optional().describe("Decision domain (e.g. 'architecture', 'hiring')"),
+        decision: z91.string().optional().describe("Decision text for action=store"),
+        rationale: z91.string().optional().describe("Why this decision was made (action=store)"),
+        query: z91.string().optional().describe("Search query for action=get"),
+        limit: z91.coerce.number().optional().describe("Max results for action=get")
       }
     },
     async (input, extra) => {
@@ -10601,7 +10744,7 @@ function registerDecision(server) {
 }
 
 // src/mcp/tools/session.ts
-import { z as z91 } from "zod";
+import { z as z92 } from "zod";
 function buildHandlers7() {
   const tools = /* @__PURE__ */ new Map();
   const fake = {
@@ -10625,9 +10768,9 @@ function registerSession(server) {
       title: "Session",
       description: "Session inspection tools. Actions: events (get session event log), last_response (get the most recent assistant response text).",
       inputSchema: {
-        action: z91.enum(["events", "last_response"]).describe("Session operation"),
-        session_id: z91.string().optional().describe("Session ID for action=events"),
-        limit: z91.coerce.number().optional().describe("Max events for action=events")
+        action: z92.enum(["events", "last_response"]).describe("Session operation"),
+        session_id: z92.string().optional().describe("Session ID for action=events"),
+        limit: z92.coerce.number().optional().describe("Max events for action=events")
       }
     },
     async (input, extra) => {
@@ -10643,7 +10786,7 @@ function registerSession(server) {
 }
 
 // src/mcp/tools/support-consolidated.ts
-import { z as z92 } from "zod";
+import { z as z93 } from "zod";
 function buildHandlers8() {
   const tools = /* @__PURE__ */ new Map();
   const fake = {
@@ -10684,7 +10827,7 @@ function registerSupportConsolidated(server) {
       title: "Support",
       description: "Bug reports, feature requests, and support system. Actions: create_bug, create_feature, list_my_bugs, list_my_features, list_bugs, get_bug, triage_bug, list_features, get_feature, triage_feature, health, test. Use 'product' param to file bugs for any AskExe product (exe-os, exe-create, exe-wiki, etc.).",
       inputSchema: {
-        action: z92.enum([
+        action: z93.enum([
           "create_bug",
           "create_feature",
           "list_my_bugs",
@@ -10698,26 +10841,26 @@ function registerSupportConsolidated(server) {
           "health",
           "test"
         ]).describe("Support operation"),
-        title: z92.string().optional().describe("Bug/feature title"),
-        description: z92.string().optional().describe("Bug/feature description"),
-        steps_to_reproduce: z92.string().optional().describe("Steps to reproduce (bugs)"),
-        expected_behavior: z92.string().optional().describe("Expected behavior (bugs)"),
-        actual_behavior: z92.string().optional().describe("Actual behavior (bugs)"),
-        severity: z92.string().optional().describe("Severity: p0/p1/p2/p3"),
-        product: z92.string().optional().describe("Product: exe-os (default), exe-create, exe-wiki, exe-gateway, exe-crm, exe-build"),
-        use_case: z92.string().optional().describe("Use case (features)"),
-        proposed_solution: z92.string().optional().describe("Proposed solution (features)"),
-        priority: z92.string().optional().describe("Priority (features)"),
-        id: z92.string().optional().describe("Bug/feature ID for get/triage"),
-        status: z92.string().optional().describe("Filter by status"),
-        classification: z92.string().optional().describe("Triage classification"),
-        resolution: z92.string().optional().describe("Triage resolution"),
-        notes: z92.string().optional().describe("Triage notes (mapped to triage_notes for bug/feature triage)"),
-        triage_notes: z92.string().optional().describe("Triage notes (legacy field name)"),
-        linked_task_id: z92.string().optional().describe("Linked task ID for triage"),
-        linked_commit: z92.string().optional().describe("Linked commit hash for triage"),
-        fixed_version: z92.string().optional().describe("Version that fixes this bug"),
-        limit: z92.coerce.number().optional().describe("Max results")
+        title: z93.string().optional().describe("Bug/feature title"),
+        description: z93.string().optional().describe("Bug/feature description"),
+        steps_to_reproduce: z93.string().optional().describe("Steps to reproduce (bugs)"),
+        expected_behavior: z93.string().optional().describe("Expected behavior (bugs)"),
+        actual_behavior: z93.string().optional().describe("Actual behavior (bugs)"),
+        severity: z93.string().optional().describe("Severity: p0/p1/p2/p3"),
+        product: z93.string().optional().describe("Product: exe-os (default), exe-create, exe-wiki, exe-gateway, exe-crm, exe-build"),
+        use_case: z93.string().optional().describe("Use case (features)"),
+        proposed_solution: z93.string().optional().describe("Proposed solution (features)"),
+        priority: z93.string().optional().describe("Priority (features)"),
+        id: z93.string().optional().describe("Bug/feature ID for get/triage"),
+        status: z93.string().optional().describe("Filter by status"),
+        classification: z93.string().optional().describe("Triage classification"),
+        resolution: z93.string().optional().describe("Triage resolution"),
+        notes: z93.string().optional().describe("Triage notes (mapped to triage_notes for bug/feature triage)"),
+        triage_notes: z93.string().optional().describe("Triage notes (legacy field name)"),
+        linked_task_id: z93.string().optional().describe("Linked task ID for triage"),
+        linked_commit: z93.string().optional().describe("Linked commit hash for triage"),
+        fixed_version: z93.string().optional().describe("Version that fixes this bug"),
+        limit: z93.coerce.number().optional().describe("Max results")
       }
     },
     async (input, extra) => {
@@ -10779,7 +10922,7 @@ function registerSupportConsolidated(server) {
 }
 
 // src/mcp/tools/diagnostics.ts
-import { z as z93 } from "zod";
+import { z as z94 } from "zod";
 function buildHandlers9() {
   const tools = /* @__PURE__ */ new Map();
   const fake = {
@@ -10793,21 +10936,24 @@ function buildHandlers9() {
 function registerDiagnostics(server) {
   const handlers = buildHandlers9();
   const toolNames = Array.from(handlers.keys());
-  toolNames.push("tool_search", "drift");
+  toolNames.push("tool_search", "drift", "merge_agent_memories");
   server.registerTool(
     "diagnostics",
     {
       title: "Diagnostics",
-      description: `System diagnostics and admin operations. Actions: ${toolNames.join(", ")}. Covers health checks, update status, cloud status, key management, employee rename, semantic tool discovery (tool_search), and identity drift detection (drift).`,
+      description: `System diagnostics and admin operations. Actions: ${toolNames.join(", ")}. Covers health checks, update status, cloud status, key management, employee rename, semantic tool discovery (tool_search), identity drift detection (drift), and agent memory reassignment (merge_agent_memories).`,
       inputSchema: {
-        action: z93.string().describe(`Diagnostic operation: ${toolNames.join(", ")}`),
+        action: z94.string().describe(`Diagnostic operation: ${toolNames.join(", ")}`),
         // Pass-through params used by various sub-tools
-        agent_id: z93.string().optional().describe("Agent to probe (drift). Defaults to all agents."),
-        name: z93.string().optional().describe("Employee name (rename_employee)"),
-        new_name: z93.string().optional().describe("New employee name (rename_employee)"),
-        query: z93.string().optional().describe("Search/filter query, or natural language for tool_search"),
-        format: z93.string().optional().describe("Output format"),
-        limit: z93.coerce.number().int().min(1).max(100).optional().describe("Max results for tool_search (default 20)")
+        agent_id: z94.string().optional().describe("Agent to probe (drift). Defaults to all agents."),
+        name: z94.string().optional().describe("Employee name (rename_employee)"),
+        new_name: z94.string().optional().describe("New employee name (rename_employee)"),
+        query: z94.string().optional().describe("Search/filter query, or natural language for tool_search"),
+        format: z94.string().optional().describe("Output format"),
+        limit: z94.coerce.number().int().min(1).max(100).optional().describe("Max results for tool_search (default 20)"),
+        from_agent_id: z94.string().optional().describe("Source agent ID to merge from (merge_agent_memories)"),
+        to_agent_id: z94.string().optional().describe("Target agent ID to merge into (merge_agent_memories)"),
+        dry_run: z94.boolean().optional().default(true).describe("Preview mode \u2014 show count without changing (merge_agent_memories). Default: true")
       }
     },
     async (input, extra) => {
@@ -10818,6 +10964,9 @@ function registerDiagnostics(server) {
       if (action === "drift") {
         return handleDrift(input);
       }
+      if (action === "merge_agent_memories") {
+        return handleMergeAgentMemories(input);
+      }
       if (action === "audit_trail") {
         try {
           const { getClient: getClient2 } = await import("./lib/database.js");
@@ -10845,6 +10994,88 @@ function registerDiagnostics(server) {
     }
   );
 }
+async function handleMergeAgentMemories(input) {
+  const fromAgentId = input.from_agent_id;
+  const toAgentId = input.to_agent_id;
+  const dryRun = input.dry_run !== false;
+  if (!fromAgentId || !toAgentId) {
+    return {
+      content: [{
+        type: "text",
+        text: JSON.stringify({ error: "Both from_agent_id and to_agent_id are required" })
+      }],
+      isError: true
+    };
+  }
+  if (fromAgentId === toAgentId) {
+    return {
+      content: [{
+        type: "text",
+        text: JSON.stringify({ error: "from_agent_id and to_agent_id must be different" })
+      }],
+      isError: true
+    };
+  }
+  try {
+    const { getClient: getClient2 } = await import("./lib/database.js");
+    const client = await getClient2();
+    const countResult = await client.execute({
+      sql: "SELECT COUNT(*) as cnt FROM memories WHERE agent_id = ?",
+      args: [fromAgentId]
+    });
+    const count = Number(countResult.rows[0]?.cnt ?? 0);
+    if (dryRun) {
+      return {
+        content: [{
+          type: "text",
+          text: JSON.stringify({
+            preview: true,
+            from_agent_id: fromAgentId,
+            to_agent_id: toAgentId,
+            memories_to_reassign: count,
+            message: count > 0 ? `Would reassign ${count} memories from "${fromAgentId}" to "${toAgentId}". Call with dry_run=false to execute.` : `No memories found for agent_id "${fromAgentId}". Nothing to do.`
+          }, null, 2)
+        }]
+      };
+    }
+    if (count === 0) {
+      return {
+        content: [{
+          type: "text",
+          text: JSON.stringify({
+            from_agent_id: fromAgentId,
+            to_agent_id: toAgentId,
+            reassigned: 0,
+            message: `No memories found for agent_id "${fromAgentId}".`
+          }, null, 2)
+        }]
+      };
+    }
+    await client.execute({
+      sql: "UPDATE memories SET agent_id = ? WHERE agent_id = ?",
+      args: [toAgentId, fromAgentId]
+    });
+    return {
+      content: [{
+        type: "text",
+        text: JSON.stringify({
+          from_agent_id: fromAgentId,
+          to_agent_id: toAgentId,
+          reassigned: count,
+          message: `Successfully reassigned ${count} memories from "${fromAgentId}" to "${toAgentId}".`
+        }, null, 2)
+      }]
+    };
+  } catch (err) {
+    return {
+      content: [{
+        type: "text",
+        text: `merge_agent_memories failed: ${err instanceof Error ? err.message : String(err)}`
+      }],
+      isError: true
+    };
+  }
+}
 async function handleToolSearch(input) {
   const query = input.query ?? "";
   const limit = input.limit ?? 20;
@@ -10964,10 +11195,13 @@ var ALWAYS_ALLOWED = /* @__PURE__ */ new Set([
 function registerAllTools(server, license, hasKey) {
   const originalRegisterTool = server.registerTool.bind(server);
   server.registerTool = (toolName, config, handler) => {
-    const wrappedHandler = handler ? (args, extra) => {
+    if (!handler) {
+      return originalRegisterTool(toolName, config);
+    }
+    const wrappedHandler = (args, extra) => {
       mcpRateLimiter.check(toolName, resolveAgentIdForRateLimit());
       return handler(args, extra);
-    } : void 0;
+    };
     return originalRegisterTool(toolName, config, wrappedHandler);
   };
   const gate = (name, fn) => {
@@ -11031,6 +11265,7 @@ function registerAllTools(server, license, hasKey) {
     gate("registerGetTask", registerGetTask);
     gate("registerCheckpointTask", registerCheckpointTask);
     gate("registerResumeEmployee", registerResumeEmployee);
+    gate("registerDependencyTree", registerDependencyTree);
   }
   gate("registerBehavior", registerBehavior);
   if (exposeConsolidatedMessages) {