@askexenow/exe-os 0.9.145 → 0.9.147

package/dist/{chunk-CWPE6QVM.js → chunk-GNHN5HRQ.js}

@@ -1,11 +1,9 @@
 import {
   enforcePrivateFileSync,
-  ensurePrivateDirSync,
-  init_secure_files
-} from "./chunk-GCMT6RWI.js";
+  ensurePrivateDirSync
+} from "./chunk-LYH5HE24.js";
 
 // src/lib/preferences.ts
-init_secure_files();
 import { existsSync, readFileSync, writeFileSync } from "fs";
 import path from "path";
 import os from "os";

package/dist/{chunk-WLEVAIL5.js → chunk-GP6G6EQI.js}

@@ -4,7 +4,7 @@ import {
 import {
   chunkSourceFile,
   languageForFile
-} from "./chunk-O7YD7JYE.js";
+} from "./chunk-I7AW4237.js";
 
 // src/lib/graph-rag.ts
 import crypto from "crypto";

package/dist/{chunk-KLRP6ZG3.js → chunk-HHMHL4FB.js}

@@ -2,7 +2,7 @@ import {
   listWorkflowDefinitions,
   runWorkflow,
   startWorkflow
-} from "./chunk-V4O2APMI.js";
+} from "./chunk-LL5EY6OQ.js";
 import {
   initCRMBridge
 } from "./chunk-GCNWCYJI.js";
@@ -11,7 +11,7 @@ import {
 } from "./chunk-MP2AFCGL.js";
 import {
   getClient
-} from "./chunk-NA3MXUU6.js";
+} from "./chunk-TH6HTK2L.js";
 
 // src/gateway/router.ts
 function matchesPlatform(msgPlatform, matchPlatform) {
@@ -214,6 +214,172 @@ function buildDegradationMessage() {
   return "I'm having trouble right now. Let me get a human to help you.";
 }
 
+// src/gateway/types.ts
+var FULL_ACCESS = {
+  canRead: true,
+  canWrite: true,
+  canExecute: true
+};
+var READ_ONLY = {
+  canRead: true,
+  canWrite: false,
+  canExecute: false
+};
+var READ_TOOLS = [
+  "ask_team_memory",
+  "recall_my_memory",
+  "list_tasks",
+  "get_session_context",
+  "get_memory_by_id",
+  "list_reminders",
+  "query_conversations"
+];
+var WRITE_TOOLS = [
+  "create_task",
+  "update_task",
+  "send_message",
+  "store_memory",
+  "store_behavior",
+  "create_reminder",
+  "complete_reminder"
+];
+var EXECUTE_TOOLS = ["close_task"];
+
+// src/gateway/permission-guard.ts
+var TOOL_CLASSIFICATION = /* @__PURE__ */ new Map();
+for (const tool of READ_TOOLS) TOOL_CLASSIFICATION.set(tool, "canRead");
+for (const tool of WRITE_TOOLS) TOOL_CLASSIFICATION.set(tool, "canWrite");
+for (const tool of EXECUTE_TOOLS) TOOL_CLASSIFICATION.set(tool, "canExecute");
+function classifyTool(toolName) {
+  return TOOL_CLASSIFICATION.get(toolName) ?? null;
+}
+function checkToolPermission(toolName, permissions) {
+  const classification = classifyTool(toolName);
+  if (!classification) {
+    return {
+      allowed: false,
+      tool: toolName,
+      requiredPermission: "canExecute",
+      reason: `Unknown tool "${toolName}" is not in the allowed tool list`
+    };
+  }
+  const allowed = permissions[classification];
+  return {
+    allowed,
+    tool: toolName,
+    requiredPermission: classification,
+    reason: allowed ? void 0 : `Tool "${toolName}" requires ${classification} permission, which is not granted on this channel`
+  };
+}
+function guardToolUseBlocks(blocks, permissions) {
+  const allowed = [];
+  const blocked = [];
+  for (const block of blocks) {
+    const result = checkToolPermission(block.name, permissions);
+    if (result.allowed) {
+      allowed.push(block);
+    } else {
+      blocked.push({ block, check: result });
+    }
+  }
+  return { allowed, blocked };
+}
+function checkSenderAllowlist(senderId, config) {
+  if (!config || config.allowlist.length === 0) {
+    return { allowed: true, mode: "none" };
+  }
+  const normalizedSender = senderId.trim().toLowerCase();
+  const isAllowed = config.allowlist.some(
+    (id) => id.trim().toLowerCase() === normalizedSender
+  );
+  if (isAllowed) {
+    return { allowed: true, mode: config.allowlist_mode };
+  }
+  if (config.allowlist_mode === "log") {
+    console.warn(
+      `[sender-allowlist] Unknown sender "${senderId}" \u2014 logging (mode=log)`
+    );
+    return { allowed: true, mode: "log", reason: "Unknown sender (logged)" };
+  }
+  return {
+    allowed: false,
+    mode: "strict",
+    reason: config.reject_message ?? "This service is not available to you."
+  };
+}
+var BOUNDARY_MARKER = "--- EXTERNAL USER MESSAGE (untrusted input) ---";
+var INJECTION_PATTERNS = [
+  /ignore\s+(all\s+)?previous\s+instructions/gi,
+  /ignore\s+(all\s+)?prior\s+instructions/gi,
+  /you\s+are\s+now\b/gi,
+  /^system\s*:/gim,
+  /^ADMIN\s*:/gim,
+  /^DEVELOPER\s*:/gim,
+  /^ASSISTANT\s*:/gim,
+  /^HUMAN\s*:/gim,
+  /\bdo\s+not\s+follow\s+(your|the)\s+(rules|instructions|guidelines)\b/gi,
+  /\boverride\s+(your|all|the)\s+(rules|instructions|constraints)\b/gi,
+  /\bforget\s+(your|all|previous)\s+(rules|instructions|context)\b/gi,
+  /\bnew\s+instructions?\s*:/gi,
+  /\<\/?system\>/gi,
+  /\[\s*SYSTEM\s*\]/gi
+];
+function sanitizeInboundMessage(text) {
+  let sanitized = text;
+  for (const pattern of INJECTION_PATTERNS) {
+    pattern.lastIndex = 0;
+    sanitized = sanitized.replace(pattern, "[FILTERED]");
+  }
+  return `${BOUNDARY_MARKER}
+${sanitized}`;
+}
+var OutboundRateLimiter = class {
+  contacts = /* @__PURE__ */ new Map();
+  maxPerMinute;
+  constructor(maxPerMinute = 5) {
+    this.maxPerMinute = maxPerMinute;
+  }
+  /**
+   * Check if an outbound message to this contact is allowed.
+   * Returns true if under the rate limit.
+   */
+  check(contactId) {
+    const now = Date.now();
+    const windowMs = 6e4;
+    let entry = this.contacts.get(contactId);
+    if (!entry) {
+      entry = { timestamps: [] };
+      this.contacts.set(contactId, entry);
+    }
+    entry.timestamps = entry.timestamps.filter((t) => now - t < windowMs);
+    if (entry.timestamps.length >= this.maxPerMinute) {
+      return { allowed: false, remaining: 0 };
+    }
+    entry.timestamps.push(now);
+    return {
+      allowed: true,
+      remaining: this.maxPerMinute - entry.timestamps.length
+    };
+  }
+  /** Reset limiter state (for testing) */
+  reset() {
+    this.contacts.clear();
+  }
+};
+function buildPermissionContext(platform, permissions) {
+  if (permissions.canRead && permissions.canWrite && permissions.canExecute) {
+    return `[FULL ACCESS \u2014 you can read, write, and execute via ${platform}]`;
+  }
+  if (permissions.canRead && !permissions.canWrite && !permissions.canExecute) {
+    return `[READ-ONLY \u2014 this ${platform} channel cannot create tasks, send messages, or execute commands. Tell the founder to use Signal for commands.]`;
+  }
+  const parts = [];
+  if (permissions.canRead) parts.push("read");
+  if (permissions.canWrite) parts.push("write");
+  if (permissions.canExecute) parts.push("execute");
+  return `[${platform.toUpperCase()} \u2014 allowed: ${parts.join(", ")}]`;
+}
+
 // src/lib/pipeline-router.ts
 import crypto from "crypto";
 async function sinkConversationStore(msg, agentResponse, agentName) {
@@ -294,7 +460,7 @@ async function sinkMemory(msg, agentResponse, agentName) {
 }
 async function sinkCRM(msg, agentResponse, agentName) {
   try {
-    const { isCRMBridgeEnabled, pushConversationToCRM, pushInboundMessageToCRM } = await import("./crm-bridge-27QVOWPI.js");
+    const { isCRMBridgeEnabled, pushConversationToCRM, pushInboundMessageToCRM } = await import("./crm-bridge-4QZRMOF7.js");
     if (!isCRMBridgeEnabled()) return false;
     if (agentResponse) {
       await pushConversationToCRM({
@@ -328,12 +494,12 @@ async function sinkCRM(msg, agentResponse, agentName) {
 }
 async function sinkWiki(msg, agentResponse) {
   try {
-    const { createWikiClient } = await import("./wiki-client-EUDJA7O2.js");
+    const { createWikiClient } = await import("./wiki-client-MMVRPTPK.js");
     const client = await createWikiClient();
     if (!client) return false;
     const content = msg.text ?? "";
     if (content.length < 50) return false;
-    const { chatInWorkspace } = await import("./wiki-client-EUDJA7O2.js");
+    const { chatInWorkspace } = await import("./wiki-client-MMVRPTPK.js");
     const ingestText = [
       `[${msg.platform}] Message from ${msg.senderName ?? msg.senderId} (${msg.timestamp}):`,
       content,
@@ -352,8 +518,8 @@ Agent response: ${agentResponse}` : ""
 }
 async function sinkEntityExtraction(msg, agentResponse, agentName) {
   try {
-    const { extractFromConversation } = await import("./conversation-entity-extractor-IZ3ECP4A.js");
-    const { storeExtraction } = await import("./graph-rag-2YLGRBW5.js");
+    const { extractFromConversation } = await import("./conversation-entity-extractor-EYSI4DKM.js");
+    const { storeExtraction } = await import("./graph-rag-G3EG5Q6L.js");
     if ((msg.text?.length ?? 0) < 20) return false;
     if (msg.isHistorical) return false;
     const extraction = await extractFromConversation(msg, agentResponse, agentName);
@@ -361,7 +527,7 @@ async function sinkEntityExtraction(msg, agentResponse, agentName) {
     const client = getClient();
     const memoryId = `conv:${msg.messageId}`;
     await storeExtraction(client, extraction, memoryId, msg.timestamp);
-    import("./conversation-wiki-populator-K4BQXHHO.js").then(
+    import("./conversation-wiki-populator-RSJ44BRO.js").then(
       ({ populateWikiFromExtraction }) => populateWikiFromExtraction(extraction, msg, agentResponse, agentName)
     ).catch((err) => {
       process.stderr.write(
@@ -598,6 +764,9 @@ var Gateway = class {
   failover;
   customerStore;
   startedAt = 0;
+  outboundLimiters = /* @__PURE__ */ new Map();
+  /** Queued outbound messages awaiting coordinator approval (Tier 3) */
+  outboundQueue = [];
   constructor(options) {
     this.config = options.config;
     this.platformConfigs = options.platformConfigs;
@@ -660,6 +829,22 @@ var Gateway = class {
         return;
       }
     }
+    const platformConfig = this.platformConfigs.get(msg.platform);
+    const senderCheck = checkSenderAllowlist(
+      msg.senderId,
+      platformConfig?.senderAllowlist
+    );
+    if (!senderCheck.allowed) {
+      console.warn(
+        `[gateway] Sender rejected by allowlist: ${msg.senderId} on ${msg.platform}`
+      );
+      const adapter2 = this.adapters.get(msg.platform);
+      if (adapter2 && senderCheck.reason) {
+        await adapter2.sendText(msg.channelId, senderCheck.reason);
+      }
+      return;
+    }
+    msg.text = sanitizeInboundMessage(msg.text);
     this.customerStore?.resolve(msg.platform, msg.senderId);
     uploadMediaAttachments(msg).catch((err) => {
       console.error("[gateway] Media R2 upload error:", err);
@@ -727,9 +912,35 @@ var Gateway = class {
         true
       );
       this.alertMonitor?.recordEvent(latencyMs, true);
-      await adapter.sendText(msg.channelId, response, {
-        replyToMessageId: msg.messageId
-      });
+      const outboundConfig = platformConfig?.outboundConfirm;
+      if (outboundConfig?.enabled) {
+        this.outboundQueue.push({
+          platform: msg.platform,
+          channelId: msg.channelId,
+          text: response,
+          replyToMessageId: msg.messageId,
+          queuedAt: Date.now()
+        });
+        console.log(
+          `[gateway] Outbound queued for approval (${this.outboundQueue.length} pending): ${msg.platform}/${msg.channelId}`
+        );
+      } else {
+        let limiter = this.outboundLimiters.get(msg.platform);
+        if (!limiter) {
+          const maxPerMin = outboundConfig?.rate_limit_per_minute ?? 5;
+          limiter = new OutboundRateLimiter(maxPerMin);
+          this.outboundLimiters.set(msg.platform, limiter);
+        }
+        const rateCheck = limiter.check(msg.senderId);
+        if (!rateCheck.allowed) {
+          console.warn(
+            `[gateway] Outbound rate-limited for ${msg.senderId} on ${msg.platform}`
+          );
+        }
+        await adapter.sendText(msg.channelId, response, {
+          replyToMessageId: msg.messageId
+        });
+      }
       ingest(msg, response, route.employee).catch((err) => {
         console.error("[gateway] Pipeline conversation ingest error:", err);
       });
@@ -752,6 +963,34 @@ var Gateway = class {
       );
     }
   }
+  /** Get pending outbound messages awaiting approval (Tier 3) */
+  getOutboundQueue() {
+    return this.outboundQueue.map((item, index) => ({
+      platform: item.platform,
+      channelId: item.channelId,
+      text: item.text,
+      queuedAt: item.queuedAt,
+      index
+    }));
+  }
+  /** Approve and send a queued outbound message (Tier 3) */
+  async approveOutbound(index) {
+    if (index < 0 || index >= this.outboundQueue.length) return false;
+    const item = this.outboundQueue[index];
+    const adapter = this.adapters.get(item.platform);
+    if (!adapter) return false;
+    await adapter.sendText(item.channelId, item.text, {
+      replyToMessageId: item.replyToMessageId
+    });
+    this.outboundQueue.splice(index, 1);
+    return true;
+  }
+  /** Reject a queued outbound message (Tier 3) */
+  rejectOutbound(index) {
+    if (index < 0 || index >= this.outboundQueue.length) return false;
+    this.outboundQueue.splice(index, 1);
+    return true;
+  }
   /** Health check all adapters + provider health */
   async healthCheck() {
     const adapterHealth = /* @__PURE__ */ new Map();
@@ -769,90 +1008,6 @@ var Gateway = class {
   }
 };
 
-// src/gateway/types.ts
-var FULL_ACCESS = {
-  canRead: true,
-  canWrite: true,
-  canExecute: true
-};
-var READ_ONLY = {
-  canRead: true,
-  canWrite: false,
-  canExecute: false
-};
-var READ_TOOLS = [
-  "ask_team_memory",
-  "recall_my_memory",
-  "list_tasks",
-  "get_session_context",
-  "get_memory_by_id",
-  "list_reminders",
-  "query_conversations"
-];
-var WRITE_TOOLS = [
-  "create_task",
-  "update_task",
-  "send_message",
-  "store_memory",
-  "store_behavior",
-  "create_reminder",
-  "complete_reminder"
-];
-var EXECUTE_TOOLS = ["close_task"];
-
-// src/gateway/permission-guard.ts
-var TOOL_CLASSIFICATION = /* @__PURE__ */ new Map();
-for (const tool of READ_TOOLS) TOOL_CLASSIFICATION.set(tool, "canRead");
-for (const tool of WRITE_TOOLS) TOOL_CLASSIFICATION.set(tool, "canWrite");
-for (const tool of EXECUTE_TOOLS) TOOL_CLASSIFICATION.set(tool, "canExecute");
-function classifyTool(toolName) {
-  return TOOL_CLASSIFICATION.get(toolName) ?? null;
-}
-function checkToolPermission(toolName, permissions) {
-  const classification = classifyTool(toolName);
-  if (!classification) {
-    return {
-      allowed: false,
-      tool: toolName,
-      requiredPermission: "canExecute",
-      reason: `Unknown tool "${toolName}" is not in the allowed tool list`
-    };
-  }
-  const allowed = permissions[classification];
-  return {
-    allowed,
-    tool: toolName,
-    requiredPermission: classification,
-    reason: allowed ? void 0 : `Tool "${toolName}" requires ${classification} permission, which is not granted on this channel`
-  };
-}
-function guardToolUseBlocks(blocks, permissions) {
-  const allowed = [];
-  const blocked = [];
-  for (const block of blocks) {
-    const result = checkToolPermission(block.name, permissions);
-    if (result.allowed) {
-      allowed.push(block);
-    } else {
-      blocked.push({ block, check: result });
-    }
-  }
-  return { allowed, blocked };
-}
-function buildPermissionContext(platform, permissions) {
-  if (permissions.canRead && permissions.canWrite && permissions.canExecute) {
-    return `[FULL ACCESS \u2014 you can read, write, and execute via ${platform}]`;
-  }
-  if (permissions.canRead && !permissions.canWrite && !permissions.canExecute) {
-    return `[READ-ONLY \u2014 this ${platform} channel cannot create tasks, send messages, or execute commands. Tell the founder to use Signal for commands.]`;
-  }
-  const parts = [];
-  if (permissions.canRead) parts.push("read");
-  if (permissions.canWrite) parts.push("write");
-  if (permissions.canExecute) parts.push("execute");
-  return `[${platform.toUpperCase()} \u2014 allowed: ${parts.join(", ")}]`;
-}
-
 // src/gateway/bot-errors.ts
 var FatalBotError = class extends Error {
   constructor(message, cause) {
@@ -1367,7 +1522,6 @@ export {
   validateGatewayConfig,
   retryWithBackoff,
   CircuitBreaker,
-  Gateway,
   FULL_ACCESS,
   READ_ONLY,
   READ_TOOLS,
@@ -1376,6 +1530,7 @@ export {
   checkToolPermission,
   guardToolUseBlocks,
   buildPermissionContext,
+  Gateway,
   FatalBotError,
   RecoverableBotError,
   MaxStepsError,

package/dist/{chunk-O7YD7JYE.js → chunk-I7AW4237.js}

@@ -138,6 +138,10 @@ function chunkTypeScriptLike(source, fileName) {
   chunks.sort((a, b) => a.startLine - b.startLine);
   return chunks.length > 0 ? chunks : chunkByWindows(source, 80);
 }
+function indentLevel(line) {
+  const match = line.match(/^(\s*)/);
+  return match ? match[1].length : 0;
+}
 function chunkGenericSource(source, _fileName, language) {
   const lines = source.split("\n");
   if (source.trim().length === 0) return [];
@@ -148,6 +152,7 @@ function chunkGenericSource(source, _fileName, language) {
     { kind: "class", regex: /^\s*class\s+([A-Za-z_][\w]*)\b/, name: (m) => m[1] },
     { kind: "function", regex: /^\s*(?:pub\s+)?fn\s+([A-Za-z_][\w]*)\s*[<(]/, name: (m) => m[1] },
     { kind: "class", regex: /^\s*(?:pub\s+)?(?:struct|enum|trait)\s+([A-Za-z_][\w]*)\b/, name: (m) => m[1] },
+    { kind: "class", regex: /^\s*(?:pub\s+)?impl(?:<[^>]+>)?\s+([A-Za-z_][\w]*(?:<[^>]+>)?)\b/, name: (m) => m[1] },
     { kind: "function", regex: /^\s*func\s+(?:\([^)]*\)\s*)?([A-Za-z_][\w]*)\s*\(/, name: (m) => m[1] },
     { kind: "function", regex: /^\s*(?:public|private|protected|static|final|suspend|fun|override|open|internal|export|async|func|function|subroutine)\s+.*?([A-Za-z_][\w]*)\s*\(/, name: (m) => m[1] },
     { kind: "function", regex: /^\s*function\s+([A-Za-z_][\w]*)\s*\(/, name: (m) => m[1] },
@@ -160,15 +165,24 @@ function chunkGenericSource(source, _fileName, language) {
     for (const pattern of patterns) {
       const match = line.match(pattern.regex);
       if (match) {
-        starts.push({ line: i + 1, kind: pattern.kind, name: pattern.name(match) });
+        starts.push({ line: i + 1, kind: pattern.kind, name: pattern.name(match), indent: indentLevel(line) });
         break;
       }
     }
   }
   if (starts.length === 0) return chunkByWindows(source, 80);
-  for (let i = 0; i < starts.length; i++) {
-    const start = starts[i];
-    const next = starts[i + 1]?.line ?? lines.length + 1;
+  const isPython = language === "python";
+  const isRust = language === "rust";
+  let topLevelStarts;
+  if (isPython || isRust) {
+    topLevelStarts = starts.filter((s) => s.indent === 0);
+    if (topLevelStarts.length === 0) topLevelStarts = starts;
+  } else {
+    topLevelStarts = starts;
+  }
+  for (let i = 0; i < topLevelStarts.length; i++) {
+    const start = topLevelStarts[i];
+    const next = topLevelStarts[i + 1]?.line ?? lines.length + 1;
     const endLine = Math.max(start.line, next - 1);
     chunks.push({
       kind: start.kind,

package/dist/{chunk-TFZZL3QF.js → chunk-ICKEGWWP.js}

@@ -1,10 +1,8 @@
 import {
-  EXE_AI_DIR,
-  init_config
-} from "./chunk-KHV55ME4.js";
+  EXE_AI_DIR
+} from "./chunk-TOWAZ5IV.js";
 
 // src/lib/shard-manager.ts
-init_config();
 import path from "path";
 import { existsSync, mkdirSync, readdirSync, renameSync, statSync } from "fs";
 import { createClient } from "@libsql/client";

package/dist/{chunk-SR6D65DA.js → chunk-IFACD7E6.js}

@@ -1,13 +1,13 @@
 import {
   deactivateBehavior
-} from "./chunk-RWJY7KMP.js";
+} from "./chunk-ARGBV4PP.js";
 import {
   getActiveAgent
-} from "./chunk-BXCJOACQ.js";
+} from "./chunk-NFHFNPTN.js";
 import {
   canCoordinate,
   getClient
-} from "./chunk-NA3MXUU6.js";
+} from "./chunk-TH6HTK2L.js";
 
 // src/mcp/tools/deactivate-behavior.ts
 import { z } from "zod";

package/dist/{chunk-I4WAKJ6W.js → chunk-J4RAXKTC.js}

@@ -1,11 +1,11 @@
 import {
   recordSessionKill
-} from "./chunk-NE6RPW5C.js";
+} from "./chunk-PMWDO5FR.js";
 import {
   sessionScopeFilter,
   verifyPaneAtCapacity,
   writeNotification
-} from "./chunk-H4YONWQX.js";
+} from "./chunk-ONMRBKAX.js";
 import {
   listSessions
 } from "./chunk-64WZEXXA.js";
@@ -15,7 +15,7 @@ import {
 import {
   getClient,
   isCoordinatorName
-} from "./chunk-NA3MXUU6.js";
+} from "./chunk-TH6HTK2L.js";
 
 // src/lib/capacity-monitor.ts
 var CAPACITY_PATTERNS = [

package/dist/{chunk-65UQ7H5U.js → chunk-JF3Q5YKI.js}

@@ -1,19 +1,17 @@
 import {
   PLATFORM_PROCEDURE_TITLES
-} from "./chunk-MPXPPKJ4.js";
+} from "./chunk-XWQKCCCO.js";
 import {
   getClient,
   getIdentity,
   listIdentities,
   updateIdentity
-} from "./chunk-NA3MXUU6.js";
+} from "./chunk-TH6HTK2L.js";
 import {
-  atomicWriteJsonSync,
-  init_secure_files
-} from "./chunk-GCMT6RWI.js";
+  atomicWriteJsonSync
+} from "./chunk-LYH5HE24.js";
 
 // src/lib/orchestration-package.ts
-init_secure_files();
 import { randomUUID } from "crypto";
 import { copyFileSync, existsSync, mkdirSync, readFileSync } from "fs";
 import os from "os";

package/dist/{chunk-RWURKLS3.js → chunk-JH7Z2AZ7.js}

@@ -1,6 +1,6 @@
 import {
   listReminders
-} from "./chunk-7PTII6F4.js";
+} from "./chunk-2OATM2JZ.js";
 
 // src/mcp/tools/list-reminders.ts
 import { z } from "zod";

package/dist/{chunk-5WTYETQO.js → chunk-K4KAPZC7.js}

@@ -1,16 +1,12 @@
 import {
-  EXE_AI_DIR,
-  init_config
-} from "./chunk-KHV55ME4.js";
+  EXE_AI_DIR
+} from "./chunk-TOWAZ5IV.js";
 import {
   enforcePrivateFileSync,
-  ensurePrivateDirSync,
-  init_secure_files
-} from "./chunk-GCMT6RWI.js";
+  ensurePrivateDirSync
+} from "./chunk-LYH5HE24.js";
 
 // src/lib/daemon-auth.ts
-init_config();
-init_secure_files();
 import crypto from "crypto";
 import path from "path";
 import { existsSync, readFileSync, writeFileSync } from "fs";

package/dist/{chunk-G3VR3MJI.js → chunk-KIUU4PNX.js}

@@ -3,20 +3,16 @@ import {
   RUNTIME_TABLE
 } from "./chunk-NGP6LSV2.js";
 import {
-  EXE_AI_DIR,
-  init_config
-} from "./chunk-KHV55ME4.js";
+  EXE_AI_DIR
+} from "./chunk-TOWAZ5IV.js";
 import {
   atomicWriteJsonSync,
-  ensurePrivateDirSync,
-  init_secure_files
-} from "./chunk-GCMT6RWI.js";
+  ensurePrivateDirSync
+} from "./chunk-LYH5HE24.js";
 
 // src/lib/agent-config.ts
-init_config();
 import { readFileSync, existsSync } from "fs";
 import path from "path";
-init_secure_files();
 var AGENT_CONFIG_PATH = path.join(EXE_AI_DIR, "agent-config.json");
 var KNOWN_RUNTIMES = {
   claude: ["claude-opus-4.6", "claude-opus-4", "claude-sonnet-4.6", "claude-sonnet-4", "claude-haiku-4.5"],

package/dist/{chunk-4F56OUR7.js → chunk-LC53LVOT.js}

@@ -4,10 +4,10 @@ import {
   resolveExeSession,
   sendIntercom,
   strictSessionScopeFilter
-} from "./chunk-H4YONWQX.js";
+} from "./chunk-ONMRBKAX.js";
 import {
   getClient
-} from "./chunk-NA3MXUU6.js";
+} from "./chunk-TH6HTK2L.js";
 
 // src/lib/messaging.ts
 import crypto from "crypto";

package/dist/{chunk-W7NQE65M.js → chunk-LJML7HT2.js}

@@ -1,6 +1,6 @@
 import {
   isCoordinatorRole
-} from "./chunk-NA3MXUU6.js";
+} from "./chunk-TH6HTK2L.js";
 
 // src/lib/task-router.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-V4O2APMI.js → chunk-LL5EY6OQ.js}

@@ -1,7 +1,7 @@
 import {
   executeAction,
   substituteTemplate
-} from "./chunk-WJW564IP.js";
+} from "./chunk-ZBA74MMX.js";
 
 // src/automation/workflow-engine.ts
 import { randomUUID } from "crypto";