@askexenow/exe-os 0.9.16 → 0.9.18

package/dist/mcp/server.js

@@ -313,7 +313,7 @@ var init_config = __esm({
 });
 
 // src/lib/daemon-auth.ts
-import crypto2 from "crypto";
+import crypto from "crypto";
 import path2 from "path";
 import { existsSync as existsSync3, readFileSync as readFileSync2, writeFileSync } from "fs";
 function normalizeToken(token) {
@@ -332,7 +332,7 @@ function readDaemonToken() {
 function ensureDaemonToken(seed) {
   const existing = readDaemonToken();
   if (existing) return existing;
-  const token = normalizeToken(seed) ?? crypto2.randomBytes(32).toString("hex");
+  const token = normalizeToken(seed) ?? crypto.randomBytes(32).toString("hex");
   ensurePrivateDirSync(EXE_AI_DIR);
   writeFileSync(DAEMON_TOKEN_PATH, `${token}
 `, "utf8");
@@ -850,8 +850,8 @@ async function embedDirect(text) {
   const llamaCpp = await import("node-llama-cpp");
   const { MODELS_DIR: MODELS_DIR2 } = await Promise.resolve().then(() => (init_config(), config_exports));
   const { existsSync: existsSync34 } = await import("fs");
-  const path45 = await import("path");
-  const modelPath = path45.join(MODELS_DIR2, "jina-embeddings-v5-small-q4_k_m.gguf");
+  const path44 = await import("path");
+  const modelPath = path44.join(MODELS_DIR2, "jina-embeddings-v5-small-q4_k_m.gguf");
   if (!existsSync34(modelPath)) {
     throw new Error(`Embedding model not found at ${modelPath}. Run '/exe-setup' to download it.`);
   }
@@ -929,9 +929,9 @@ var MAX_RETRIES, BASE_DELAY_MS, MAX_JITTER_MS;
 var init_db_retry = __esm({
   "src/lib/db-retry.ts"() {
     "use strict";
-    MAX_RETRIES = 3;
-    BASE_DELAY_MS = 200;
-    MAX_JITTER_MS = 300;
+    MAX_RETRIES = 5;
+    BASE_DELAY_MS = 250;
+    MAX_JITTER_MS = 400;
   }
 });
 
@@ -1034,7 +1034,7 @@ var init_agent_config = __esm({
     init_secure_files();
     AGENT_CONFIG_PATH = path4.join(EXE_AI_DIR, "agent-config.json");
     KNOWN_RUNTIMES = {
-      claude: ["claude-opus-4", "claude-sonnet-4", "claude-haiku-4.5"],
+      claude: ["claude-opus-4.6", "claude-opus-4", "claude-sonnet-4.6", "claude-sonnet-4", "claude-haiku-4.5"],
       codex: ["gpt-5.4", "gpt-5.5", "gpt-5.3-codex-spark", "o3", "o4-mini"],
       opencode: ["anthropic/claude-sonnet-4-6", "openai/gpt-5.4", "google/gemini-2.5-pro", "deepseek/deepseek-r3", "minimax/minimax-m2.5"]
     };
@@ -1044,7 +1044,7 @@ var init_agent_config = __esm({
       opencode: "OpenCode (open source)"
     };
     DEFAULT_MODELS = {
-      claude: "claude-opus-4",
+      claude: "claude-opus-4.6",
       codex: RUNTIME_TABLE.codex?.defaultModel ?? "gpt-5.4",
       opencode: RUNTIME_TABLE.opencode?.defaultModel ?? "anthropic/claude-sonnet-4-6"
     };
@@ -1993,7 +1993,7 @@ function createDaemonDbClient(fallbackClient) {
       });
       if (response.error) {
         const errMsg = String(response.error);
-        if (errMsg === "Not connected" || errMsg === "Request timeout" || errMsg === "Write failed") {
+        if (errMsg === "Not connected" || errMsg === "Request timeout" || errMsg === "Write failed" || errMsg === "DB not initialized") {
           process.stderr.write(`[db-daemon] Transport error (${errMsg}), falling back to direct
 `);
           return fallbackClient.execute(stmt);
@@ -2018,7 +2018,7 @@ function createDaemonDbClient(fallbackClient) {
       });
       if (response.error) {
         const errMsg = String(response.error);
-        if (errMsg === "Not connected" || errMsg === "Request timeout" || errMsg === "Write failed") {
+        if (errMsg === "Not connected" || errMsg === "Request timeout" || errMsg === "Write failed" || errMsg === "DB not initialized") {
           process.stderr.write(`[db-daemon] Batch transport error (${errMsg}), falling back to direct
 `);
           return fallbackClient.batch(stmts, mode);
@@ -2141,7 +2141,7 @@ async function initDatabase(config2) {
     });
   }, 3e4);
   _walCheckpointTimer.unref();
-  if (process.env.DATABASE_URL) {
+  if (process.env.DATABASE_URL && process.env.EXE_USE_POSTGRES === "1") {
     _adapterClient = await createPrismaDbAdapter(_resilientClient);
   }
 }
@@ -2152,7 +2152,7 @@ function getClient() {
   if (!_adapterClient) {
     throw new Error("Database client not initialized. Call initDatabase() first.");
   }
-  if (process.env.DATABASE_URL) {
+  if (process.env.DATABASE_URL && process.env.EXE_USE_POSTGRES === "1") {
     return _adapterClient;
   }
   if (process.env.EXE_IS_DAEMON === "1") {
@@ -2164,9 +2164,11 @@ function getClient() {
   return _resilientClient;
 }
 async function initDaemonClient() {
-  if (process.env.DATABASE_URL) return;
+  if (process.env.DATABASE_URL && process.env.EXE_USE_POSTGRES === "1") return;
   if (process.env.EXE_IS_DAEMON === "1") return;
+  if (process.env.VITEST) return;
   if (!_resilientClient) return;
+  if (_daemonClient) return;
   try {
     const { initDaemonDbClient: initDaemonDbClient2 } = await Promise.resolve().then(() => (init_db_daemon_client(), db_daemon_client_exports));
     _daemonClient = await initDaemonDbClient2(_resilientClient);
@@ -2315,6 +2317,13 @@ async function ensureSchema() {
     });
   } catch {
   }
+  try {
+    await client.execute({
+      sql: `ALTER TABLE behaviors ADD COLUMN vector F32_BLOB(${EMBEDDING_DIM})`,
+      args: []
+    });
+  } catch {
+  }
   try {
     await client.execute({
       sql: `ALTER TABLE tasks ADD COLUMN blocked_by TEXT`,
@@ -3185,6 +3194,7 @@ var init_database = __esm({
     init_db_retry();
     init_employees();
     init_database_adapter();
+    init_memory();
     _client = null;
     _resilientClient = null;
     _walCheckpointTimer = null;
@@ -3803,6 +3813,68 @@ var init_platform_procedures = __esm({
         domain: "architecture",
         priority: "p0",
         content: "Tasks live in the DB. Intercom (tmux send-keys) is fire-and-forget \u2014 it may fail, get garbled, or arrive mid-work. Never rely on intercom for task delivery. The UserPromptSubmit hook checks the DB for new tasks on every prompt. Your operating procedures step 7 says check for next work. The daemon nudges idle agents as a speedup. If you have no tasks, you found them all."
+      },
+      // --- MCP is the ONLY data interface ---
+      {
+        title: "MCP disconnect \u2014 ask the user, never work around it",
+        domain: "workflow",
+        priority: "p0",
+        content: "If MCP tools are unavailable, disconnected, or returning connection errors: STOP. Tell the user clearly: 'MCP server is disconnected. Please run /mcp to reconnect.' Do NOT attempt workarounds \u2014 no raw Node imports, no direct DB access, no CLI hacks, no daemon socket calls. MCP is the ONLY data interface. Working around it wastes time, hits bundling issues, and bypasses the contract boundary. Ask once, wait, proceed when reconnected."
+      },
+      // --- MCP Tool Catalog (Layer 0 — every agent knows what tools exist) ---
+      {
+        title: "MCP tools \u2014 memory and search",
+        domain: "tool-use",
+        priority: "p1",
+        content: "recall_my_memory: search your own memories (semantic + FTS). ask_team_memory: search a colleague's memories by agent name. store_memory: persist a memory (decisions, summaries, context). commit_memory: high-importance memory that survives consolidation. search_everything: unified search across memories, tasks, entities, conversations. get_session_context: temporal window of memories around a timestamp. consolidate_memories: merge duplicate/related memories into insights. get_memory_cardinality: count memories per agent (health check)."
+      },
+      {
+        title: "MCP tools \u2014 task orchestration",
+        domain: "tool-use",
+        priority: "p1",
+        content: "create_task: dispatch work to an employee (auto-spawns session). The ONLY dispatch path. list_tasks: query tasks by status, assignee, project. get_task: fetch full task details by ID. update_task: change status (in_progress, done, blocked, cancelled) + add result summary. close_task: finalize a reviewed task (COO only). checkpoint_task: save progress state for crash recovery. resume_employee: re-spawn an employee session for an existing task."
+      },
+      {
+        title: "MCP tools \u2014 knowledge graph (GraphRAG)",
+        domain: "tool-use",
+        priority: "p1",
+        content: "query_relationships: find connections between entities in the knowledge graph. get_entity_neighbors: explore an entity's direct connections. get_hot_entities: find most-referenced entities (trending topics). get_graph_stats: graph health \u2014 entity/relationship counts, density. export_graph: export graph data for visualization. merge_entities: deduplicate entities (alias resolution). find_similar_trajectories: match tool-call patterns to past task solutions."
+      },
+      {
+        title: "MCP tools \u2014 identity, behavior, and decisions",
+        domain: "tool-use",
+        priority: "p1",
+        content: "get_identity: read an agent's exe.md (Layer 1 identity). update_identity: write an agent's exe.md. Identity > behavior \u2014 use for permanent rules. store_behavior: record a correction or pattern for an agent (Layer 2 expertise). list_behaviors: view an agent's active behaviors. deactivate_behavior: soft-delete a stale or conflicting behavior. store_decision: record an ADR (architectural decision record). get_decision: retrieve a past decision by query."
+      },
+      {
+        title: "MCP tools \u2014 communication and messaging",
+        domain: "tool-use",
+        priority: "p1",
+        content: "send_message: send supplementary context to another agent (NOT for actionable work \u2014 use create_task). acknowledge_messages: mark messages as read. send_whatsapp: send WhatsApp message via gateway (customer-facing alerts). query_conversations: search ingested conversations across all channels (WhatsApp, email, etc.)."
+      },
+      {
+        title: "MCP tools \u2014 wiki, documents, and content",
+        domain: "tool-use",
+        priority: "p1",
+        content: "create_wiki_page: create a wiki page in exe-wiki. list_wiki_pages: browse wiki pages. get_wiki_page: read a wiki page. update_wiki_page: edit a wiki page. ingest_document: import a file (PDF, MD, etc.) into memory as chunks. list_documents: browse ingested documents by workspace. purge_document: remove a document and its memory chunks. set_document_importance: adjust chunk importance scores. rerank_documents: re-score document relevance for a query."
+      },
+      {
+        title: "MCP tools \u2014 system, operations, and admin",
+        domain: "tool-use",
+        priority: "p1",
+        content: "get_agent_spend: token usage per agent/session (cost tracking). list_agent_sessions: view agent session history. get_session_kills: audit log of killed sessions. get_daemon_health: check exed daemon status. get_auto_wake_status: daemon auto-wake configuration. get_worker_gate: check worker deployment gates. run_memory_audit: health check \u2014 duplicates, null vectors, orphaned rows. run_consolidation: trigger sleep-time memory consolidation. cloud_sync: force a cloud sync cycle. backup_vps: trigger VPS backup."
+      },
+      {
+        title: "MCP tools \u2014 config, licensing, and team",
+        domain: "tool-use",
+        priority: "p1",
+        content: "set_agent_config: view/change per-agent runtime and model settings. list_employees: view the employee roster. add_person: add a person to the CRM contacts roster. list_people: browse CRM contacts. get_person: fetch contact details. get_license_status: check license validity. create_license: generate a new license key (admin). list_licenses: view all issued licenses. activate_license: activate a license on a device."
+      },
+      {
+        title: "MCP tools \u2014 advanced (triggers, skills, orchestration)",
+        domain: "tool-use",
+        priority: "p1",
+        content: "create_trigger: set up a scheduled recurring agent job (cron). list_triggers: view active triggers. load_skill: load a slash-command skill dynamically. apply_starter_pack: import a pre-built behavior + identity pack for a role. export_orchestration: export full org state (tasks, behaviors, identities) as portable JSON. import_orchestration: import org state into a new instance. deploy_client: deploy a customer client instance. query_company_brain: unified RAG query across all company knowledge. create_reminder: set a text reminder (shown in boot brief). list_reminders: view pending reminders. complete_reminder: mark a reminder done. global_procedure: manage Layer 0 procedures (actions: store, list, deactivate). Legacy aliases: store_global_procedure, list_global_procedures, deactivate_global_procedure."
       }
     ];
     PLATFORM_PROCEDURE_TITLES = new Set(
@@ -3952,6 +4024,11 @@ async function initStore(options) {
     encryptionKey: hexKey
   });
   await retryOnBusy2(() => ensureSchema(), "ensureSchema");
+  try {
+    const { initDaemonClient: initDaemonClient2 } = await Promise.resolve().then(() => (init_database(), database_exports));
+    await initDaemonClient2();
+  } catch {
+  }
   if (!options?.lightweight) {
     try {
       const { initShardManager: initShardManager2 } = await Promise.resolve().then(() => (init_shard_manager(), shard_manager_exports));
@@ -4742,7 +4819,7 @@ __export(file_grep_exports, {
 import { execSync as execSync3 } from "child_process";
 import { readFileSync as readFileSync6, readdirSync as readdirSync2, statSync as statSync2, existsSync as existsSync10 } from "fs";
 import path11 from "path";
-import crypto3 from "crypto";
+import crypto2 from "crypto";
 function hasRipgrep() {
   if (_hasRg === null) {
     try {
@@ -4775,7 +4852,7 @@ async function grepProjectFiles(query, projectRoot, options) {
     const chunkCtx = getChunkContext(hit.filePath, hit.lineNumber);
     const prefix = chunkCtx ? `[file: ${hit.filePath}:${hit.lineNumber} in ${chunkCtx}]` : `[file: ${hit.filePath}:${hit.lineNumber}]`;
     return {
-      id: crypto3.createHash("sha256").update(`${hit.filePath}:${hit.lineNumber}`).digest("hex").slice(0, 36),
+      id: crypto2.createHash("sha256").update(`${hit.filePath}:${hit.lineNumber}`).digest("hex").slice(0, 36),
       agent_id: "project",
       agent_role: "file",
       session_id: "file-grep",
@@ -5714,10 +5791,10 @@ async function hybridSearch(queryText, agentId, options) {
     };
     try {
       const fs = await import("fs");
-      const path45 = await import("path");
-      const os19 = await import("os");
-      const logPath = path45.join(os19.homedir(), ".exe-os", "search-quality.jsonl");
-      fs.mkdirSync(path45.dirname(logPath), { recursive: true });
+      const path44 = await import("path");
+      const os18 = await import("os");
+      const logPath = path44.join(os18.homedir(), ".exe-os", "search-quality.jsonl");
+      fs.mkdirSync(path44.dirname(logPath), { recursive: true });
       fs.appendFileSync(logPath, JSON.stringify(logEntry) + "\n");
     } catch {
     }
@@ -5812,7 +5889,7 @@ function rrfMergeMulti(lists, limit, k = RRF_K, weights) {
     const importance = normalizedImportance(e.record.importance);
     const confidence = sourceConfidence(e.record);
     const frecency = frecencyBoost(e.record.last_accessed, e.record.timestamp);
-    const baseScore = e.rrfScore * 0.35 + recency * 0.14 + importance * 0.21 + confidence * 0.3;
+    const baseScore = e.rrfScore * 0.45 + recency * 0.24 + importance * 0.21 + confidence * 0.1;
     const finalScore = baseScore * (1 + 0.3 * frecency);
     return { score: finalScore, record: e.record };
   });
@@ -7324,7 +7401,7 @@ var init_intercom_queue = __esm({
 });
 
 // src/lib/session-kill-telemetry.ts
-import crypto6 from "crypto";
+import crypto5 from "crypto";
 async function recordSessionKill(input) {
   try {
     const client = getClient();
@@ -7334,7 +7411,7 @@ async function recordSessionKill(input) {
                ticks_idle, estimated_tokens_saved)
             VALUES (?, ?, ?, ?, ?, ?, ?)`,
       args: [
-        crypto6.randomUUID(),
+        crypto5.randomUUID(),
         input.sessionName,
         input.agentId,
         (/* @__PURE__ */ new Date()).toISOString(),
@@ -8295,7 +8372,7 @@ function isSessionBusy(sessionName) {
 function isExeSession(sessionName) {
   const matchesBaseWithInstance = (baseName) => sessionName === baseName || sessionName.startsWith(baseName) && /^\d+$/.test(sessionName.slice(baseName.length));
   const coordinatorName = getCoordinatorName();
-  return matchesBaseWithInstance(coordinatorName) || matchesBaseWithInstance("exe");
+  return matchesBaseWithInstance(coordinatorName);
 }
 function sendIntercom(targetSession) {
   const transport = getTransport();
@@ -8833,7 +8910,7 @@ var init_task_scope = __esm({
 });
 
 // src/lib/notifications.ts
-import crypto7 from "crypto";
+import crypto6 from "crypto";
 import path21 from "path";
 import os10 from "os";
 import {
@@ -8846,7 +8923,7 @@ import {
 async function writeNotification(notification) {
   try {
     const client = getClient();
-    const id = crypto7.randomUUID();
+    const id = crypto6.randomUUID();
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const sessionScope = notification.sessionScope === void 0 ? getCurrentSessionScope() : notification.sessionScope;
     await client.execute({
@@ -8968,7 +9045,7 @@ __export(tasks_crud_exports, {
   updateTaskStatus: () => updateTaskStatus,
   writeCheckpoint: () => writeCheckpoint
 });
-import crypto8 from "crypto";
+import crypto7 from "crypto";
 import path22 from "path";
 import os11 from "os";
 import { execSync as execSync8 } from "child_process";
@@ -9089,7 +9166,7 @@ async function resolveTask(client, identifier, scopeSession) {
 }
 async function createTaskCore(input) {
   const client = getClient();
-  const id = crypto8.randomUUID();
+  const id = crypto7.randomUUID();
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const slug = slugify(input.title);
   let earlySessionScope = null;
@@ -9098,15 +9175,20 @@ async function createTaskCore(input) {
     const { resolveExeSession: resolveExeSession2 } = await Promise.resolve().then(() => (init_tmux_routing(), tmux_routing_exports));
     const resolved = resolveExeSession2();
     if (resolved && input.projectName) {
-      const { getSessionProject: getSessionProject2 } = await Promise.resolve().then(() => (init_session_scope(), session_scope_exports));
-      const sessionProject = getSessionProject2(resolved);
-      if (sessionProject && sessionProject !== input.projectName) {
-        scopeMismatchWarning = `session/project mismatch: session "${resolved}" owns "${sessionProject}" but task targets "${input.projectName}". Routed to default scope.`;
-        process.stderr.write(`[create_task] ${scopeMismatchWarning}
-`);
-        earlySessionScope = null;
-      } else {
+      const isCoordinatorSession = !resolved.includes("-");
+      if (isCoordinatorSession) {
         earlySessionScope = resolved;
+      } else {
+        const { getSessionProject: getSessionProject2 } = await Promise.resolve().then(() => (init_session_scope(), session_scope_exports));
+        const sessionProject = getSessionProject2(resolved);
+        if (sessionProject && sessionProject !== input.projectName) {
+          scopeMismatchWarning = `session/project mismatch: session "${resolved}" owns "${sessionProject}" but task targets "${input.projectName}". Routed to default scope.`;
+          process.stderr.write(`[create_task] ${scopeMismatchWarning}
+`);
+          earlySessionScope = null;
+        } else {
+          earlySessionScope = resolved;
+        }
       }
     } else {
       earlySessionScope = resolved;
@@ -9683,6 +9765,10 @@ async function dispatchTaskToEmployee(input) {
     if (transport.isAlive(sessionName)) {
       const result = sendIntercom(sessionName);
       const dispatched = result === "acknowledged" || result === "debounced" || result === "queued" ? "verified" : result === "delivered" ? "sent_unverified" : "session_dead";
+      process.stderr.write(
+        `[dispatch-audit] intercom \u2192 ${sessionName} | task="${input.title}" [${input.priority}] | result=${dispatched} (sendIntercom=${result})
+`
+      );
       return { dispatched, session: sessionName, crossProject };
     } else {
       const projectDir = input.projectDir ?? process.cwd();
@@ -9691,11 +9777,15 @@ async function dispatchTaskToEmployee(input) {
       });
       if (result.status === "failed") {
         process.stderr.write(
-          `[dispatch] Failed to spawn ${input.assignedTo}: ${result.error}
+          `[dispatch-audit] SPAWN FAILED \u2192 ${input.assignedTo} | task="${input.title}" [${input.priority}] | error=${result.error}
 `
         );
         return { dispatched: "session_missing" };
       }
+      process.stderr.write(
+        `[dispatch-audit] SPAWNED \u2192 ${result.sessionName} | task="${input.title}" [${input.priority}]
+`
+      );
       return { dispatched: "spawned", session: result.sessionName, crossProject };
     }
   } catch {
@@ -9705,7 +9795,13 @@ async function dispatchTaskToEmployee(input) {
 function notifyTaskDone() {
   try {
     const key = getSessionKey();
-    if (key && !process.env.VITEST) notifyParentExe(key);
+    if (key && !process.env.VITEST) {
+      notifyParentExe(key);
+      process.stderr.write(
+        `[dispatch-audit] notifyTaskDone \u2192 parent coordinator (session=${key})
+`
+      );
+    }
   } catch {
   }
 }
@@ -9727,22 +9823,29 @@ var init_tasks_notify = __esm({
 });
 
 // src/lib/behaviors.ts
-import crypto9 from "crypto";
+import crypto8 from "crypto";
 async function storeBehavior(opts) {
   const client = getClient();
-  const id = crypto9.randomUUID();
+  const id = crypto8.randomUUID();
   const now = (/* @__PURE__ */ new Date()).toISOString();
+  let vector = null;
+  try {
+    const { embed: embed2 } = await Promise.resolve().then(() => (init_embedder(), embedder_exports));
+    const vec = await embed2(opts.content);
+    vector = new Float32Array(vec);
+  } catch {
+  }
   await client.execute({
-    sql: `INSERT INTO behaviors (id, agent_id, project_name, domain, priority, content, active, created_at, updated_at)
-          VALUES (?, ?, ?, ?, ?, ?, 1, ?, ?)`,
-    args: [id, opts.agentId, opts.projectName ?? null, opts.domain ?? null, opts.priority ?? "p1", opts.content, now, now]
+    sql: `INSERT INTO behaviors (id, agent_id, project_name, domain, priority, content, active, created_at, updated_at, vector)
+          VALUES (?, ?, ?, ?, ?, ?, 1, ?, ?, ?)`,
+    args: [id, opts.agentId, opts.projectName ?? null, opts.domain ?? null, opts.priority ?? "p1", opts.content, now, now, vector ? vector.buffer : null]
   });
   return id;
 }
 async function listBehaviorsByDomain(agentId, domain) {
   const client = getClient();
   const result = await client.execute({
-    sql: `SELECT id, agent_id, project_name, domain, priority, content, active, created_at, updated_at
+    sql: `SELECT id, agent_id, project_name, domain, priority, content, active, created_at, updated_at, vector
           FROM behaviors
           WHERE agent_id = ? AND domain = ? AND active = 1`,
     args: [agentId, domain]
@@ -9756,7 +9859,8 @@ async function listBehaviorsByDomain(agentId, domain) {
     content: String(r.content),
     active: Number(r.active),
     created_at: String(r.created_at),
-    updated_at: String(r.updated_at)
+    updated_at: String(r.updated_at),
+    vector: r.vector ? Array.from(new Float32Array(r.vector)) : null
   }));
 }
 async function deactivateBehavior(id) {
@@ -9787,7 +9891,7 @@ __export(skill_learning_exports, {
   storeTrajectory: () => storeTrajectory,
   sweepTrajectories: () => sweepTrajectories
 });
-import crypto10 from "crypto";
+import crypto9 from "crypto";
 async function extractTrajectory(taskId, agentId) {
   const client = getClient();
   const result = await client.execute({
@@ -9816,11 +9920,11 @@ async function extractTrajectory(taskId, agentId) {
   return signature;
 }
 function hashSignature(signature) {
-  return crypto10.createHash("sha256").update(signature.join("|")).digest("hex").slice(0, 16);
+  return crypto9.createHash("sha256").update(signature.join("|")).digest("hex").slice(0, 16);
 }
 async function storeTrajectory(opts) {
   const client = getClient();
-  const id = crypto10.randomUUID();
+  const id = crypto9.randomUUID();
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const signatureHash = hashSignature(opts.signature);
   await client.execute({
@@ -10943,10 +11047,10 @@ ${PLAN_MODE_COMPAT}
 });
 
 // src/lib/messaging.ts
-import crypto11 from "crypto";
+import crypto10 from "crypto";
 function generateUlid() {
   const timestamp = Date.now().toString(36).padStart(10, "0");
-  const random = crypto11.randomBytes(10).toString("hex").slice(0, 16);
+  const random = crypto10.randomBytes(10).toString("hex").slice(0, 16);
   return (timestamp + random).toUpperCase();
 }
 function rowToMessage(row) {
@@ -11157,7 +11261,6 @@ async function selectUnconsolidated(client, limit = 200) {
     sql: `SELECT id, agent_id, project_name, tool_name, raw_text, timestamp
           FROM memories
           WHERE consolidated = 0
-            AND timestamp >= datetime('now', '-7 days')
           ORDER BY timestamp DESC
           LIMIT ?`,
     args: [limit]
@@ -11212,11 +11315,12 @@ function groupMemories(memories) {
   }
   return clusters;
 }
-function buildConsolidationPrompt(cluster) {
+function buildConsolidationPrompt(cluster, agentRole) {
   const snippets = cluster.memories.map((m, i) => {
     const text = m.raw_text.length > 200 ? m.raw_text.slice(0, 200) + "..." : m.raw_text;
     return `${i + 1}. [${m.tool_name}] ${text}`;
   }).join("\n");
+  const rolePrompt = agentRole && ROLE_PROMPTS[agentRole] || DEFAULT_ROLE_PROMPT;
   return `You are reviewing a set of work memories from an AI coding agent.
 These are raw tool call records from ${cluster.dateRange}.
 
@@ -11225,19 +11329,15 @@ Agent: ${cluster.agentId} | Project: ${cluster.projectName} | Date: ${cluster.da
 MEMORIES:
 ${snippets}
 
-Extract EXACTLY THREE types of insights:
-
-1. KEY DECISIONS \u2014 choices that were made and why (at most 3)
-2. RECURRING PATTERNS \u2014 actions or approaches that repeated (at most 3)
-3. OPEN QUESTIONS \u2014 things that seem unresolved or risky (at most 2)
+${rolePrompt}
 
 Format each as a single sentence. Be specific \u2014 include file names,
 function names, and concrete details. Skip if no insight for a category.`;
 }
-async function consolidateCluster(cluster, model) {
+async function consolidateCluster(cluster, model, agentRole) {
   const Anthropic = (await import("@anthropic-ai/sdk")).default;
   const client = new Anthropic();
-  const prompt = buildConsolidationPrompt(cluster);
+  const prompt = buildConsolidationPrompt(cluster, agentRole);
   const response = await client.messages.create({
     model,
     max_tokens: 300,
@@ -11380,6 +11480,15 @@ async function runConsolidation(client, options) {
   if (memories.length < 20) {
     return { clustersProcessed: 0, memoriesConsolidated: 0 };
   }
+  let roleMap = {};
+  try {
+    const { loadEmployeesSync: loadEmployeesSync2 } = await Promise.resolve().then(() => (init_employees(), employees_exports));
+    const employees = loadEmployeesSync2();
+    for (const e of employees) {
+      roleMap[e.name] = e.role;
+    }
+  } catch {
+  }
   const clusters = groupMemories(memories);
   let clustersProcessed = 0;
   let memoriesConsolidated = 0;
@@ -11388,21 +11497,27 @@ async function runConsolidation(client, options) {
     if (cluster.memories.length < 3) continue;
     try {
       const isCoordinator = isCoordinatorName(cluster.agentId);
-      if (isCoordinator) {
-        const synthesis = await consolidateCluster(cluster, options.model);
-        if (!synthesis.trim()) continue;
-        const result = await storeConsolidation(client, cluster, synthesis, options.embedFn);
-        if (options.wikiConfig) {
-          await pushToWiki(
-            { ...result, projectName: cluster.projectName },
-            options.wikiConfig
-          ).catch((err) => {
-            process.stderr.write(
-              `[consolidation] Wiki push error (non-fatal): ${err instanceof Error ? err.message : String(err)}
+      const agentRole = roleMap[cluster.agentId];
+      const dedupCount = await dedupCluster(client, cluster, options.embedFn);
+      memoriesConsolidated += dedupCount;
+      const synthesis = await consolidateCluster(cluster, options.model, agentRole);
+      if (!synthesis.trim()) {
+        if (dedupCount > 0) clustersProcessed++;
+        continue;
+      }
+      const result = await storeConsolidation(client, cluster, synthesis, options.embedFn);
+      if (isCoordinator && options.wikiConfig) {
+        await pushToWiki(
+          { ...result, projectName: cluster.projectName },
+          options.wikiConfig
+        ).catch((err) => {
+          process.stderr.write(
+            `[consolidation] Wiki push error (non-fatal): ${err instanceof Error ? err.message : String(err)}
 `
-            );
-          });
-        }
+          );
+        });
+      }
+      if (isCoordinator) {
         const sourceIds = result.sourceIds;
         if (sourceIds.length > 0) {
           const placeholders = sourceIds.map(() => "?").join(",");
@@ -11411,13 +11526,9 @@ async function runConsolidation(client, options) {
             args: sourceIds
           });
         }
-      } else {
-        const dedupCount = await dedupCluster(client, cluster, options.embedFn);
-        memoriesConsolidated += dedupCount;
-        if (dedupCount === 0) continue;
       }
       clustersProcessed++;
-      memoriesConsolidated += isCoordinator ? cluster.memories.length : 0;
+      memoriesConsolidated += cluster.memories.length;
     } catch (err) {
       process.stderr.write(
         `[consolidation] Cluster failed (${cluster.projectName}/${cluster.dateRange}): ${err instanceof Error ? err.message : String(err)}
@@ -11493,18 +11604,47 @@ async function isUserIdle(client, idleMinutes = 30) {
 async function countUnconsolidated(client) {
   const result = await client.execute({
     sql: `SELECT COUNT(*) as cnt FROM memories
-          WHERE consolidated = 0
-            AND timestamp >= datetime('now', '-7 days')`,
+          WHERE consolidated = 0`,
     args: []
   });
   return Number(result.rows[0]?.cnt ?? 0);
 }
-var WIKI_FETCH_TIMEOUT_MS;
+var ROLE_PROMPTS, DEFAULT_ROLE_PROMPT, WIKI_FETCH_TIMEOUT_MS;
 var init_consolidation = __esm({
   "src/lib/consolidation.ts"() {
     "use strict";
     init_store();
     init_employees();
+    ROLE_PROMPTS = {
+      "COO": `Extract EXACTLY THREE types of insights:
+1. KEY DECISIONS \u2014 choices that were made and why (at most 3)
+2. RECURRING PATTERNS \u2014 actions or approaches that repeated (at most 3)
+3. OPEN QUESTIONS \u2014 things that seem unresolved or risky (at most 2)`,
+      "CTO": `Extract EXACTLY THREE types of insights:
+1. ARCHITECTURE DECISIONS \u2014 design choices, tradeoffs, delegation patterns (at most 3)
+2. REVIEW OUTCOMES \u2014 what was approved, rejected, or flagged during code review (at most 3)
+3. TECHNICAL DEBT \u2014 unresolved issues, deferred work, risks identified (at most 2)`,
+      "Principal Engineer": `Extract EXACTLY THREE types of insights:
+1. CODE DECISIONS \u2014 implementation choices, patterns used, bugs fixed (at most 3)
+2. FILE CHANGES \u2014 key files modified and why (at most 3)
+3. BLOCKERS \u2014 things that slowed down or prevented progress (at most 2)`,
+      "Staff Code Reviewer": `Extract EXACTLY THREE types of insights:
+1. AUDIT FINDINGS \u2014 issues found, severity, fix status (at most 3)
+2. RECURRING ISSUES \u2014 patterns that keep appearing across reviews (at most 3)
+3. QUALITY SIGNALS \u2014 areas of the codebase that are strong or weak (at most 2)`,
+      "CMO": `Extract EXACTLY THREE types of insights:
+1. DESIGN DECISIONS \u2014 brand, layout, typography, or content choices made (at most 3)
+2. CONTENT STRATEGY \u2014 messaging, SEO, platform-specific decisions (at most 3)
+3. BRAND ALIGNMENT \u2014 consistency issues or guidelines established (at most 2)`,
+      "AI Product Lead": `Extract EXACTLY THREE types of insights:
+1. RESEARCH FINDINGS \u2014 tools, repos, or models evaluated with conclusions (at most 3)
+2. COMPETITIVE GAPS \u2014 features or patterns worth adopting from competitors (at most 3)
+3. BUILD RECOMMENDATIONS \u2014 what to build, skip, or watch (at most 2)`
+    };
+    DEFAULT_ROLE_PROMPT = `Extract EXACTLY THREE types of insights:
+1. KEY DECISIONS \u2014 choices that were made and why (at most 3)
+2. RECURRING PATTERNS \u2014 actions or approaches that repeated (at most 3)
+3. OPEN QUESTIONS \u2014 things that seem unresolved or risky (at most 2)`;
     WIKI_FETCH_TIMEOUT_MS = 1e4;
   }
 });
@@ -11518,8 +11658,8 @@ __export(wiki_client_exports, {
   listDocuments: () => listDocuments,
   listWorkspaces: () => listWorkspaces
 });
-async function wikiFetch(config2, path45, method = "GET", body) {
-  const url = `${config2.baseUrl}/api/v1${path45}`;
+async function wikiFetch(config2, path44, method = "GET", body) {
+  const url = `${config2.baseUrl}/api/v1${path44}`;
   const headers = {
     Authorization: `Bearer ${config2.apiKey}`,
     "Content-Type": "application/json"
@@ -11552,7 +11692,7 @@ async function wikiFetch(config2, path45, method = "GET", body) {
       }
     }
     if (!response.ok) {
-      throw new Error(`Wiki API ${method} ${path45}: ${response.status} ${response.statusText}`);
+      throw new Error(`Wiki API ${method} ${path44}: ${response.status} ${response.statusText}`);
     }
     return response.json();
   } finally {
@@ -11995,7 +12135,7 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { spawn as spawn4 } from "child_process";
 import { existsSync as existsSync33, openSync as openSync3, mkdirSync as mkdirSync17, closeSync as closeSync3 } from "fs";
-import path44 from "path";
+import path43 from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
 
 // src/mcp/tools/recall-my-memory.ts
@@ -12304,7 +12444,7 @@ init_store();
 init_active_agent();
 init_plan_limits();
 import { z as z4 } from "zod";
-import crypto4 from "crypto";
+import crypto3 from "crypto";
 import { writeFileSync as writeFileSync6 } from "fs";
 import path15 from "path";
 function registerStoreMemory(server2) {
@@ -12355,7 +12495,7 @@ function registerStoreMemory(server2) {
         vector = null;
         needsBackfill = true;
       }
-      const memoryId = crypto4.randomUUID();
+      const memoryId = crypto3.randomUUID();
       await writeMemory({
         id: memoryId,
         agent_id: agentId,
@@ -12398,7 +12538,7 @@ init_plan_limits();
 init_active_agent();
 init_employees();
 import { z as z5 } from "zod";
-import crypto5 from "crypto";
+import crypto4 from "crypto";
 import { writeFileSync as writeFileSync7 } from "fs";
 import path16 from "path";
 function registerCommitMemory(server2) {
@@ -12447,7 +12587,7 @@ function registerCommitMemory(server2) {
         vector = null;
         needsBackfill = true;
       }
-      const memoryId = crypto5.randomUUID();
+      const memoryId = crypto4.randomUUID();
       await assertMemoryLimit();
       const memoryType = canCoordinate(agentId, agentRole) ? "adr" : "raw";
       await writeMemory({
@@ -13383,10 +13523,10 @@ import { z as z16 } from "zod";
 
 // src/lib/reminders.ts
 init_database();
-import crypto12 from "crypto";
+import crypto11 from "crypto";
 async function createReminder(text, dueDate) {
   const client = getClient();
-  const id = crypto12.randomUUID();
+  const id = crypto11.randomUUID();
   const now = (/* @__PURE__ */ new Date()).toISOString();
   await client.execute({
     sql: `INSERT INTO reminders (id, text, created_at, due_date) VALUES (?, ?, ?, ?)`,
@@ -13523,7 +13663,9 @@ function rowToBehavior(r) {
     priority: r.priority ? String(r.priority) : "p1",
     active: Number(r.active),
     created_at: String(r.created_at),
-    updated_at: String(r.updated_at)
+    updated_at: String(r.updated_at),
+    vector: null
+    // Not needed for listing
   };
 }
 function registerListBehaviors(server2) {
@@ -13770,7 +13912,7 @@ import { z as z23 } from "zod";
 init_database();
 init_embedder();
 init_store();
-import crypto13 from "crypto";
+import crypto12 from "crypto";
 var WIKI_AGENT_ID = "wiki";
 var WIKI_AGENT_ROLE = "Knowledge";
 var WIKI_TOOL_NAME = "ingest_document";
@@ -13824,7 +13966,7 @@ async function resolveWorkspace(slug_or_id, name) {
   if (existing.rows.length > 0) {
     return rowToWorkspace(existing.rows[0]);
   }
-  const id = crypto13.randomUUID();
+  const id = crypto12.randomUUID();
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const resolvedName = name ?? slug_or_id;
   await client.execute({
@@ -13915,13 +14057,13 @@ async function ingestDocument(input) {
   }));
   const vectors = await embedTexts(enrichedChunks.map((c) => c.text));
   const client = getClient();
-  const documentId = crypto13.randomUUID();
+  const documentId = crypto12.randomUUID();
   const uploadedAt = (/* @__PURE__ */ new Date()).toISOString();
   const mime = input.mime ?? null;
   const sourceType = input.source_type ?? DEFAULT_SOURCE_TYPE;
   const userId = input.user_id ?? null;
   const documentMetadata = input.document_metadata != null ? JSON.stringify(input.document_metadata) : null;
-  const chunkIds = input.chunks.map(() => crypto13.randomUUID());
+  const chunkIds = input.chunks.map(() => crypto12.randomUUID());
   const versions = reserveVersions(input.chunks.length);
   const documentStmt = {
     sql: `INSERT INTO documents
@@ -14593,8 +14735,18 @@ function isScheduledTrigger(trigger) {
 // src/lib/schedules.ts
 init_database();
 init_store();
-import crypto14 from "crypto";
+import crypto13 from "crypto";
 import { execSync as execSync9 } from "child_process";
+var CRON_FIELD = /^[\d*/,\-]+$/;
+function isValidCron(cron) {
+  const fields = cron.trim().split(/\s+/);
+  if (fields.length !== 5) return false;
+  return fields.every((f) => CRON_FIELD.test(f));
+}
+var SAFE_ID = /^[a-zA-Z0-9_\-]+$/;
+function isValidScheduleId(id) {
+  return SAFE_ID.test(id) && id.length <= 128;
+}
 async function ensureDb() {
   if (!isInitialized()) {
     await initStore();
@@ -14660,9 +14812,12 @@ function parseHumanCron(input) {
   return `${minute} ${hour} * * ${dow}`;
 }
 async function createSchedule(input) {
+  if (!isValidCron(input.cron)) {
+    throw new Error(`Invalid cron expression: ${input.cron}. Must be 5 fields with only digits, *, /, -, comma.`);
+  }
   await ensureDb();
   const client = getClient();
-  const id = crypto14.randomUUID().slice(0, 8);
+  const id = crypto13.randomUUID().slice(0, 8);
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const prompt = input.prompt ?? input.description;
   await client.execute({
@@ -14697,6 +14852,12 @@ async function createSchedule(input) {
   };
 }
 function addToCrontab(id, cron, prompt, projectDir) {
+  if (!isValidCron(cron)) {
+    throw new Error(`Invalid cron expression: ${cron}`);
+  }
+  if (!isValidScheduleId(id)) {
+    throw new Error(`Invalid schedule ID: ${id}`);
+  }
   try {
     const cwd = projectDir ? `cd ${JSON.stringify(projectDir)} && ` : "";
     const escapedPrompt = prompt.replace(/"/g, '\\"');
@@ -14705,7 +14866,8 @@ function addToCrontab(id, cron, prompt, projectDir) {
       `(crontab -l 2>/dev/null; echo ${JSON.stringify(entry)}) | crontab -`,
       { timeout: 5e3, stdio: "ignore" }
     );
-  } catch {
+  } catch (err) {
+    if (err instanceof Error && err.message.startsWith("Invalid")) throw err;
   }
 }
 
@@ -15320,7 +15482,7 @@ init_database();
 import { z as z32 } from "zod";
 
 // src/lib/graph-rag.ts
-import crypto15 from "crypto";
+import crypto14 from "crypto";
 
 // src/lib/code-chunker.ts
 import ts from "typescript";
@@ -15331,7 +15493,7 @@ function normalizeEntityName(name) {
 }
 function entityId(name, type) {
   const normalized = normalizeEntityName(name);
-  return crypto15.createHash("sha256").update(`${normalized}::${type.toLowerCase()}`).digest("hex").slice(0, 16);
+  return crypto14.createHash("sha256").update(`${normalized}::${type.toLowerCase()}`).digest("hex").slice(0, 16);
 }
 async function registerAlias(client, alias, canonicalEntityId) {
   const normalized = normalizeEntityName(alias);
@@ -16065,9 +16227,9 @@ var HostingerApiClient = class {
     }
     this.lastRequestTime = Date.now();
   }
-  async request(method, path45, body) {
+  async request(method, path44, body) {
     await this.rateLimit();
-    const url = `${this.baseUrl}${path45}`;
+    const url = `${this.baseUrl}${path44}`;
     const headers = {
       Authorization: `Bearer ${this.apiKey}`,
       "Content-Type": "application/json",
@@ -16140,8 +16302,8 @@ async function requestCloudflare(cfApiToken, zoneId, options) {
   }
   return envelope.result;
 }
-function buildUrl(zoneId, path45 = "/dns_records", query) {
-  const normalizedPath = path45.startsWith("/") ? path45 : `/${path45}`;
+function buildUrl(zoneId, path44 = "/dns_records", query) {
+  const normalizedPath = path44.startsWith("/") ? path44 : `/${path44}`;
   const url = new URL(
     `${CLOUDFLARE_API_BASE_URL}/zones/${zoneId}${normalizedPath}`
   );
@@ -17164,65 +17326,467 @@ Consolidated summaries stored as tier-1 (importance=9) memories.`
   );
 }
 
-// src/mcp/tools/store-global-procedure.ts
-init_global_procedures();
+// src/mcp/tools/behavior.ts
+init_behaviors();
 init_active_agent();
+init_project_name();
+init_database();
 init_employees();
 import { z as z43 } from "zod";
-function registerStoreGlobalProcedure(server2) {
+function rowToBehavior2(r) {
+  return {
+    id: String(r.id),
+    agent_id: String(r.agent_id),
+    project_name: r.project_name ? String(r.project_name) : null,
+    domain: r.domain ? String(r.domain) : null,
+    content: String(r.content),
+    priority: r.priority ? String(r.priority) : "p1",
+    active: Number(r.active),
+    created_at: String(r.created_at),
+    updated_at: String(r.updated_at),
+    vector: null
+  };
+}
+function registerBehavior(server2) {
   server2.registerTool(
-    "store_global_procedure",
+    "behavior",
     {
-      title: "Store Global Procedure",
-      description: "Create an organization-wide procedure (Layer 0) that supersedes identity, expertise, and experience. Use for hard rules that every employee must follow. RESTRICTED: only coordinator or founder sessions.",
+      title: "Behavior",
+      description: "Manage behavioral patterns, corrections, and reusable procedures for employees. Actions: store (create new), list (query existing), deactivate (soft-delete, restricted).",
       inputSchema: {
-        title: z43.string().describe("Short title for the procedure"),
-        content: z43.string().max(500).describe("The procedure content \u2014 clear, actionable instruction"),
-        priority: z43.enum(["p0", "p1", "p2"]).optional().describe("Priority tier. p0 = always (default). p1 = standard. p2 = nice-to-have."),
-        domain: z43.string().optional().describe("Category: workflow, code-style, communication, architecture, testing, security")
+        action: z43.enum(["store", "list", "deactivate"]).describe("Action to perform"),
+        content: z43.string().max(500).optional().describe("The behavioral instruction \u2014 one clear sentence (store)"),
+        domain: z43.string().optional().describe("Category: workflow, code-style, tool-use, communication, architecture, testing"),
+        priority: z43.enum(["p0", "p1", "p2"]).optional().describe("Priority tier. p0 = always included. p1 = standard (default). p2 = nice-to-have."),
+        agent_id: z43.string().optional().describe("Employee name. Defaults to current agent. Pass 'all' to list everyone's (list only)."),
+        project_name: z43.string().optional().describe("Defaults to current project. Pass 'global' for a behavior that applies everywhere (store)."),
+        behavior_id: z43.string().optional().describe("UUID of the behavior (deactivate)")
       }
     },
-    async ({ title, content, priority, domain }) => {
+    async ({ action, content, domain, priority, agent_id, project_name, behavior_id }) => {
+      if (action === "list") {
+        const client2 = getClient();
+        const conditions = ["active = 1"];
+        const args = [];
+        if (agent_id !== "all") {
+          const resolvedAgent = agent_id ?? getActiveAgent().agentId;
+          conditions.push("agent_id = ?");
+          args.push(resolvedAgent);
+        }
+        if (domain) {
+          conditions.push("domain = ?");
+          args.push(domain);
+        }
+        if (project_name) {
+          conditions.push("(project_name IS NULL OR project_name = ?)");
+          args.push(project_name);
+        } else if (!agent_id || agent_id !== "all") {
+          const proj = getProjectName();
+          conditions.push("(project_name IS NULL OR project_name = ?)");
+          args.push(proj);
+        }
+        const where = conditions.join(" AND ");
+        const result2 = await client2.execute({
+          sql: `SELECT id, agent_id, project_name, domain, content, active, created_at, updated_at
+                FROM behaviors
+                WHERE ${where}
+                ORDER BY agent_id, domain, updated_at DESC
+                LIMIT 50`,
+          args
+        });
+        const behaviors = result2.rows.map((r) => rowToBehavior2(r));
+        if (behaviors.length === 0) {
+          return {
+            content: [{ type: "text", text: "No behaviors found." }]
+          };
+        }
+        const lines = behaviors.map((b) => {
+          const scope = b.project_name ?? "global";
+          const dom = b.domain ?? "general";
+          return `- [${b.agent_id}] [${dom}] (${scope}) ${b.content}  
+  ID: ${b.id}`;
+        });
+        return {
+          content: [{
+            type: "text",
+            text: `${behaviors.length} behavior(s):
+${lines.join("\n")}`
+          }]
+        };
+      }
+      if (action === "store") {
+        if (!content) {
+          return {
+            content: [{
+              type: "text",
+              text: "Missing required field: content is required for store action."
+            }],
+            isError: true
+          };
+        }
+        const resolvedAgent = agent_id ?? getActiveAgent().agentId;
+        if (agent_id) {
+          const caller2 = getActiveAgent();
+          if (agent_id !== caller2.agentId) {
+            const allowed2 = canCoordinate(caller2.agentId, caller2.agentRole);
+            if (!allowed2) {
+              return {
+                content: [{
+                  type: "text",
+                  text: `Permission denied. Only the coordinator or founder sessions can store behaviors for other agents. You are "${caller2.agentId}".`
+                }],
+                isError: true
+              };
+            }
+          }
+        }
+        let resolvedProject;
+        if (project_name === "global" || project_name === null) {
+          resolvedProject = void 0;
+        } else if (project_name) {
+          resolvedProject = project_name;
+        } else {
+          resolvedProject = getProjectName();
+        }
+        const id = await storeBehavior({
+          agentId: resolvedAgent,
+          content,
+          domain: domain ?? void 0,
+          projectName: resolvedProject,
+          priority: priority ?? void 0
+        });
+        let responseText = `Behavior stored for ${resolvedAgent}. ID: ${id}`;
+        if (domain) {
+          const existing = await listBehaviorsByDomain(resolvedAgent, domain);
+          const others = existing.filter((b) => b.id !== id);
+          if (others.length > 0) {
+            const list = others.map((b) => `  - [${b.id}] ${b.content}`).join("\n");
+            responseText += `
+
+Existing behaviors in [${domain}] domain:
+${list}
+Use /exe-forget to remove any that this supersedes.`;
+          }
+        }
+        return {
+          content: [{ type: "text", text: responseText }]
+        };
+      }
       const caller = getActiveAgent();
       const allowed = canCoordinate(caller.agentId, caller.agentRole);
       if (!allowed) {
         return {
           content: [{
             type: "text",
-            text: `Permission denied. Only the coordinator or founder sessions can create global procedures. You are "${caller.agentId}".`
+            text: `Permission denied. Only the coordinator or founder sessions can deactivate behaviors. You are "${caller.agentId}".`
           }],
           isError: true
         };
       }
-      const id = await storeGlobalProcedure({
-        title,
-        content,
-        priority: priority ?? "p0",
-        domain: domain ?? void 0
+      if (!behavior_id) {
+        return {
+          content: [{
+            type: "text",
+            text: "Missing required field: behavior_id is required for deactivate action."
+          }],
+          isError: true
+        };
+      }
+      const client = getClient();
+      const result = await client.execute({
+        sql: "SELECT id, agent_id, content, domain, priority FROM behaviors WHERE id = ?",
+        args: [behavior_id]
       });
+      if (result.rows.length === 0) {
+        return {
+          content: [{
+            type: "text",
+            text: `Behavior not found: ${behavior_id}`
+          }],
+          isError: true
+        };
+      }
+      const row = result.rows[0];
+      const wasActive = await deactivateBehavior(behavior_id);
+      if (!wasActive) {
+        return {
+          content: [{
+            type: "text",
+            text: `Behavior ${behavior_id} was already inactive.`
+          }]
+        };
+      }
       return {
         content: [{
           type: "text",
-          text: `Global procedure stored.
-ID: ${id}
-Title: ${title}
-Priority: ${priority ?? "p0"}
-Domain: ${domain ?? "none"}`
+          text: `Deactivated behavior for ${row.agent_id}.
+ID: ${row.id}
+Domain: ${row.domain ?? "none"}
+Priority: ${row.priority}
+Content: ${row.content}`
         }]
       };
     }
   );
 }
 
-// src/mcp/tools/list-global-procedures.ts
-init_global_procedures();
-init_platform_procedures();
-function registerListGlobalProcedures(server2) {
+// src/mcp/tools/reminder.ts
+import { z as z44 } from "zod";
+function registerReminder(server2) {
   server2.registerTool(
-    "list_global_procedures",
+    "reminder",
     {
-      title: "List Global Procedures",
-      description: "List all active organization-wide procedures (Layer 0). Shows platform procedures (shipped with exe-os, updated via exe-os update) and customer procedures (stored in DB, cloud-synced). These supersede identity, expertise, and experience.",
+      title: "Reminder",
+      description: "Manage reminders for the founder. Shown in the boot brief every session. Actions: create (set new), list (view active), complete (mark done).",
+      inputSchema: {
+        action: z44.enum(["create", "list", "complete"]).describe("Action to perform"),
+        text: z44.string().optional().describe("What to remind about (create)"),
+        due_date: z44.string().optional().describe("Optional due date \u2014 ISO date (2026-04-01) or null for persistent (create)"),
+        reminder_id: z44.string().optional().describe("Reminder UUID or text substring to match (complete)"),
+        include_completed: z44.boolean().optional().default(false).describe("Include completed reminders (list)")
+      }
+    },
+    async ({ action, text, due_date, reminder_id, include_completed }) => {
+      if (action === "create") {
+        if (!text) {
+          return {
+            content: [{ type: "text", text: "Missing required field: text is required for create action." }],
+            isError: true
+          };
+        }
+        const reminder2 = await createReminder(text, due_date);
+        const dueStr = reminder2.dueDate ? ` (due: ${reminder2.dueDate})` : "";
+        return {
+          content: [{ type: "text", text: `Reminder set: "${reminder2.text}"${dueStr}` }]
+        };
+      }
+      if (action === "list") {
+        const reminders = await listReminders(include_completed);
+        if (reminders.length === 0) {
+          return {
+            content: [{ type: "text", text: "No active reminders." }]
+          };
+        }
+        const lines = reminders.map((r) => {
+          const due = r.dueDate ? ` (due: ${r.dueDate})` : "";
+          const done = r.completedAt ? " [DONE]" : "";
+          return `\u2022 ${r.text}${due}${done}  [id: ${r.id.slice(0, 8)}]`;
+        });
+        return {
+          content: [{ type: "text", text: lines.join("\n") }]
+        };
+      }
+      if (!reminder_id) {
+        return {
+          content: [{ type: "text", text: "Missing required field: reminder_id is required for complete action." }],
+          isError: true
+        };
+      }
+      const reminder = await completeReminder(reminder_id);
+      if (!reminder) {
+        return {
+          content: [{ type: "text", text: `No active reminder matching "${reminder_id}".` }]
+        };
+      }
+      return {
+        content: [{ type: "text", text: `Reminder completed: "${reminder.text}"` }]
+      };
+    }
+  );
+}
+
+// src/mcp/tools/global-procedure.ts
+init_global_procedures();
+init_platform_procedures();
+init_active_agent();
+init_database();
+init_employees();
+import { z as z45 } from "zod";
+function registerGlobalProcedure(server2) {
+  server2.registerTool(
+    "global_procedure",
+    {
+      title: "Global Procedure",
+      description: "Manage organization-wide procedures (Layer 0) that supersede identity, expertise, and experience. Actions: store (create new, restricted), list (view all, open), deactivate (soft-delete, restricted).",
+      inputSchema: {
+        action: z45.enum(["store", "list", "deactivate"]).describe("Action to perform"),
+        title: z45.string().optional().describe("Short title for the procedure (store)"),
+        content: z45.string().max(500).optional().describe("The procedure content \u2014 clear, actionable instruction (store)"),
+        priority: z45.enum(["p0", "p1", "p2"]).optional().describe("Priority tier. p0 = always (default). p1 = standard. p2 = nice-to-have."),
+        domain: z45.string().optional().describe("Category: workflow, code-style, communication, architecture, testing, security"),
+        procedure_id: z45.string().optional().describe("UUID of the global procedure (deactivate)")
+      }
+    },
+    async ({ action, title, content, priority, domain, procedure_id }) => {
+      if (action === "list") {
+        const customerProcs = await loadGlobalProcedures();
+        if (customerProcs.length === 0) {
+          return {
+            content: [{
+              type: "text",
+              text: `No custom procedures. ${PLATFORM_PROCEDURES.length} platform procedures are active (shipped with exe-os, not editable).
+Use global_procedure with action "store" to add org-specific rules.`
+            }]
+          };
+        }
+        const lines = customerProcs.map(
+          (p) => `[${p.id}] (${p.priority}) ${p.title}${p.domain ? ` [${p.domain}]` : ""}
+  ${p.content}`
+        );
+        return {
+          content: [{
+            type: "text",
+            text: `Custom procedures (${customerProcs.length}) + ${PLATFORM_PROCEDURES.length} platform procedures (built-in):
+
+${lines.join("\n\n")}`
+          }]
+        };
+      }
+      const caller = getActiveAgent();
+      const allowed = canCoordinate(caller.agentId, caller.agentRole);
+      if (!allowed) {
+        return {
+          content: [{
+            type: "text",
+            text: `Permission denied. Only the coordinator or founder sessions can ${action} global procedures. You are "${caller.agentId}".`
+          }],
+          isError: true
+        };
+      }
+      if (action === "store") {
+        if (!title || !content) {
+          return {
+            content: [{
+              type: "text",
+              text: "Missing required fields: title and content are required for store action."
+            }],
+            isError: true
+          };
+        }
+        const id = await storeGlobalProcedure({
+          title,
+          content,
+          priority: priority ?? "p0",
+          domain: domain ?? void 0
+        });
+        return {
+          content: [{
+            type: "text",
+            text: `Global procedure stored.
+ID: ${id}
+Title: ${title}
+Priority: ${priority ?? "p0"}
+Domain: ${domain ?? "none"}`
+          }]
+        };
+      }
+      if (!procedure_id) {
+        return {
+          content: [{
+            type: "text",
+            text: "Missing required field: procedure_id is required for deactivate action."
+          }],
+          isError: true
+        };
+      }
+      const client = getClient();
+      const result = await client.execute({
+        sql: "SELECT id, title, content, priority, domain FROM global_procedures WHERE id = ?",
+        args: [procedure_id]
+      });
+      if (result.rows.length === 0) {
+        return {
+          content: [{
+            type: "text",
+            text: `Global procedure not found: ${procedure_id}`
+          }],
+          isError: true
+        };
+      }
+      const row = result.rows[0];
+      const wasActive = await deactivateGlobalProcedure(procedure_id);
+      if (!wasActive) {
+        return {
+          content: [{
+            type: "text",
+            text: `Global procedure ${procedure_id} was already inactive.`
+          }]
+        };
+      }
+      return {
+        content: [{
+          type: "text",
+          text: `Deactivated global procedure.
+ID: ${row.id}
+Title: ${row.title}
+Priority: ${row.priority}
+Domain: ${row.domain ?? "none"}
+Content: ${row.content}`
+        }]
+      };
+    }
+  );
+}
+
+// src/mcp/tools/store-global-procedure.ts
+init_global_procedures();
+init_active_agent();
+init_employees();
+import { z as z46 } from "zod";
+function registerStoreGlobalProcedure(server2) {
+  server2.registerTool(
+    "store_global_procedure",
+    {
+      title: "Store Global Procedure (use global_procedure instead)",
+      description: "DEPRECATED \u2014 use global_procedure with action='store'. Create an organization-wide procedure (Layer 0). RESTRICTED: only coordinator or founder sessions.",
+      inputSchema: {
+        title: z46.string().describe("Short title for the procedure"),
+        content: z46.string().max(500).describe("The procedure content \u2014 clear, actionable instruction"),
+        priority: z46.enum(["p0", "p1", "p2"]).optional().describe("Priority tier. p0 = always (default)."),
+        domain: z46.string().optional().describe("Category: workflow, code-style, communication, architecture, testing, security")
+      }
+    },
+    async ({ title, content, priority, domain }) => {
+      const caller = getActiveAgent();
+      const allowed = canCoordinate(caller.agentId, caller.agentRole);
+      if (!allowed) {
+        return {
+          content: [{
+            type: "text",
+            text: `Permission denied. Only the coordinator or founder sessions can create global procedures. You are "${caller.agentId}".`
+          }],
+          isError: true
+        };
+      }
+      const id = await storeGlobalProcedure({
+        title,
+        content,
+        priority: priority ?? "p0",
+        domain: domain ?? void 0
+      });
+      return {
+        content: [{
+          type: "text",
+          text: `Global procedure stored.
+ID: ${id}
+Title: ${title}
+Priority: ${priority ?? "p0"}
+Domain: ${domain ?? "none"}`
+        }]
+      };
+    }
+  );
+}
+
+// src/mcp/tools/list-global-procedures.ts
+init_global_procedures();
+init_platform_procedures();
+function registerListGlobalProcedures(server2) {
+  server2.registerTool(
+    "list_global_procedures",
+    {
+      title: "List Global Procedures (use global_procedure instead)",
+      description: "DEPRECATED \u2014 use global_procedure with action='list'. List all active organization-wide procedures (Layer 0).",
       inputSchema: {}
     },
     async () => {
@@ -17232,7 +17796,7 @@ function registerListGlobalProcedures(server2) {
           content: [{
             type: "text",
             text: `No custom procedures. ${PLATFORM_PROCEDURES.length} platform procedures are active (shipped with exe-os, not editable).
-Use store_global_procedure to add org-specific rules.`
+Use global_procedure with action "store" to add org-specific rules.`
           }]
         };
       }
@@ -17257,15 +17821,15 @@ init_global_procedures();
 init_active_agent();
 init_database();
 init_employees();
-import { z as z44 } from "zod";
+import { z as z47 } from "zod";
 function registerDeactivateGlobalProcedure(server2) {
   server2.registerTool(
     "deactivate_global_procedure",
     {
-      title: "Deactivate Global Procedure",
-      description: "Soft-delete a global procedure by setting active = 0. RESTRICTED: only coordinator or founder sessions. Use list_global_procedures to find the procedure ID first.",
+      title: "Deactivate Global Procedure (use global_procedure instead)",
+      description: "DEPRECATED \u2014 use global_procedure with action='deactivate'. Soft-delete a global procedure. RESTRICTED: only coordinator or founder sessions.",
       inputSchema: {
-        procedure_id: z44.string().describe("UUID of the global procedure to deactivate")
+        procedure_id: z47.string().describe("UUID of the global procedure to deactivate")
       }
     },
     async ({ procedure_id }) => {
@@ -17320,7 +17884,7 @@ Content: ${row.content}`
 }
 
 // src/mcp/tools/search-everything.ts
-import { z as z45 } from "zod";
+import { z as z48 } from "zod";
 
 // src/lib/unified-search.ts
 var DEFAULT_LIMIT = 10;
@@ -17487,11 +18051,11 @@ function registerSearchEverything(server2) {
       title: "Search Everything",
       description: "Search across all data stores \u2014 memories, conversations, and wiki \u2014 in one query. Returns merged results sorted by relevance with entity links.",
       inputSchema: {
-        query: z45.string().describe("What to search for across all data stores"),
-        sources: z45.array(z45.enum(["memory", "conversations", "wiki"])).optional().describe(
+        query: z48.string().describe("What to search for across all data stores"),
+        sources: z48.array(z48.enum(["memory", "conversations", "wiki"])).optional().describe(
           "Which sources to search (default: all). Options: memory, conversations, wiki"
         ),
-        limit: z45.coerce.number().int().min(1).max(50).optional().default(10).describe("Max results to return (default 10, max 50)")
+        limit: z48.coerce.number().int().min(1).max(50).optional().default(10).describe("Max results to return (default 10, max 50)")
       }
     },
     async (params) => {
@@ -17552,8 +18116,8 @@ init_store();
 init_active_agent();
 init_database();
 init_plan_limits();
-import { z as z46 } from "zod";
-import crypto16 from "crypto";
+import { z as z49 } from "zod";
+import crypto15 from "crypto";
 function registerStoreDecision(server2) {
   server2.registerTool(
     "store_decision",
@@ -17561,13 +18125,13 @@ function registerStoreDecision(server2) {
       title: "Store Decision",
       description: "Store an authoritative decision keyed by domain. Use this when a decision is made that should be canonical \u2014 future lookups via get_decision return the latest decision for that domain. Supports supersession chains.",
       inputSchema: {
-        domain: z46.string().describe(
+        domain: z49.string().describe(
           "Domain key, e.g. 'auth-strategy', 'db-migration-approach', 'api-versioning'"
         ),
-        decision: z46.string().describe("The decision text \u2014 what was decided"),
-        rationale: z46.string().optional().describe("Why this decision was made \u2014 constraints, trade-offs, context"),
-        supersedes: z46.string().optional().describe("UUID of the decision this supersedes (previous decision for this domain)"),
-        project_name: z46.string().optional().describe("Project name")
+        decision: z49.string().describe("The decision text \u2014 what was decided"),
+        rationale: z49.string().optional().describe("Why this decision was made \u2014 constraints, trade-offs, context"),
+        supersedes: z49.string().optional().describe("UUID of the decision this supersedes (previous decision for this domain)"),
+        project_name: z49.string().optional().describe("Project name")
       }
     },
     async ({ domain, decision, rationale, supersedes, project_name }) => {
@@ -17591,7 +18155,7 @@ function registerStoreDecision(server2) {
       } catch {
         vector = null;
       }
-      const memoryId = crypto16.randomUUID();
+      const memoryId = crypto15.randomUUID();
       if (supersedes) {
         try {
           const client = getClient();
@@ -17635,7 +18199,7 @@ Supersedes: ${supersedes}` : ""}`
 
 // src/mcp/tools/get-decision.ts
 init_database();
-import { z as z47 } from "zod";
+import { z as z50 } from "zod";
 function registerGetDecision(server2) {
   server2.registerTool(
     "get_decision",
@@ -17643,7 +18207,7 @@ function registerGetDecision(server2) {
       title: "Get Decision",
       description: "Retrieve the latest authoritative decision for a domain. Returns the current active decision and the supersession history.",
       inputSchema: {
-        domain: z47.string().describe(
+        domain: z50.string().describe(
           "Domain key to look up, e.g. 'auth-strategy', 'db-migration-approach'"
         )
       }
@@ -17706,7 +18270,7 @@ function registerGetDecision(server2) {
 }
 
 // src/mcp/tools/get-agent-spend.ts
-import { z as z48 } from "zod";
+import { z as z51 } from "zod";
 
 // src/lib/token-spend.ts
 init_database();
@@ -17876,8 +18440,8 @@ function registerGetAgentSpend(server2) {
       title: "Get Agent Spend",
       description: "Get per-agent token spend attribution. Shows input, output, and cache tokens consumed by each agent over a time period, with estimated cost.",
       inputSchema: {
-        period: z48.enum(["24h", "7d", "30d"]).default("7d").describe("Time period to query"),
-        agent_id: z48.string().optional().describe("Filter to a specific agent (e.g. 'tom', 'yoshi')")
+        period: z51.enum(["24h", "7d", "30d"]).default("7d").describe("Time period to query"),
+        agent_id: z51.string().optional().describe("Filter to a specific agent (e.g. 'tom', 'yoshi')")
       }
     },
     async ({ period, agent_id }) => {
@@ -17943,7 +18507,7 @@ function registerGetAgentSpend(server2) {
 // src/mcp/tools/get-graph-stats.ts
 init_database();
 init_graph_query();
-import { z as z49 } from "zod";
+import { z as z52 } from "zod";
 function registerGetGraphStats(server2) {
   server2.registerTool(
     "get_graph_stats",
@@ -17951,7 +18515,7 @@ function registerGetGraphStats(server2) {
       title: "Get Graph Stats",
       description: "Get knowledge graph summary statistics: entity count, relationship count, and entity type breakdown.",
       inputSchema: {
-        _dummy: z49.string().optional().describe("Unused \u2014 no input required")
+        _dummy: z52.string().optional().describe("Unused \u2014 no input required")
       }
     },
     async () => {
@@ -17993,7 +18557,7 @@ function registerGetGraphStats(server2) {
 // src/mcp/tools/get-entity-neighbors.ts
 init_database();
 init_graph_query();
-import { z as z50 } from "zod";
+import { z as z53 } from "zod";
 function registerGetEntityNeighbors(server2) {
   server2.registerTool(
     "get_entity_neighbors",
@@ -18001,7 +18565,7 @@ function registerGetEntityNeighbors(server2) {
       title: "Get Entity Neighbors",
       description: "Get connected entities for a given entity name. Returns neighbors with relationship types, directions, and weights.",
       inputSchema: {
-        entity_name: z50.string().describe("Name of the entity to find neighbors for")
+        entity_name: z53.string().describe("Name of the entity to find neighbors for")
       }
     },
     async ({ entity_name }) => {
@@ -18070,7 +18634,7 @@ function registerGetEntityNeighbors(server2) {
 // src/mcp/tools/get-hot-entities.ts
 init_database();
 init_graph_query();
-import { z as z51 } from "zod";
+import { z as z54 } from "zod";
 var PERIOD_MS = {
   "24h": 24 * 60 * 60 * 1e3,
   "7d": 7 * 24 * 60 * 60 * 1e3,
@@ -18083,8 +18647,8 @@ function registerGetHotEntities(server2) {
       title: "Get Hot Entities",
       description: "Get trending entities \u2014 those with the most new relationships in a time period. Surfaces what's most active in the knowledge graph.",
       inputSchema: {
-        period: z51.enum(["24h", "7d", "30d"]).default("7d").describe("Time period to look back"),
-        limit: z51.number().int().min(1).max(50).default(10).describe("Max entities to return")
+        period: z54.enum(["24h", "7d", "30d"]).default("7d").describe("Time period to look back"),
+        limit: z54.number().int().min(1).max(50).default(10).describe("Max entities to return")
       }
     },
     async ({ period, limit }) => {
@@ -18132,7 +18696,7 @@ function registerGetHotEntities(server2) {
 
 // src/mcp/tools/export-graph.ts
 init_database();
-import { z as z52 } from "zod";
+import { z as z55 } from "zod";
 
 // src/lib/graph-export.ts
 async function loadGraphData(client) {
@@ -18345,7 +18909,7 @@ function registerExportGraph(server2) {
       title: "Export Graph",
       description: "Export the knowledge graph as a markdown report (inline) or an interactive HTML visualization (writes file, returns path).",
       inputSchema: {
-        format: z52.enum(["html", "markdown"]).default("markdown").describe("Export format: markdown (inline) or html (file)")
+        format: z55.enum(["html", "markdown"]).default("markdown").describe("Export format: markdown (inline) or html (file)")
       }
     },
     async ({ format }) => {
@@ -18359,12 +18923,12 @@ function registerExportGraph(server2) {
         }
         const html = await exportGraphHTML(client);
         const fs = await import("fs");
-        const path45 = await import("path");
-        const os19 = await import("os");
-        const outDir = path45.join(os19.homedir(), ".exe-os", "exports");
+        const path44 = await import("path");
+        const os18 = await import("os");
+        const outDir = path44.join(os18.homedir(), ".exe-os", "exports");
         fs.mkdirSync(outDir, { recursive: true });
         const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-").slice(0, 19);
-        const filePath = path45.join(outDir, `graph-${timestamp}.html`);
+        const filePath = path44.join(outDir, `graph-${timestamp}.html`);
         fs.writeFileSync(filePath, html, "utf-8");
         return {
           content: [
@@ -18395,7 +18959,7 @@ Open in a browser to explore interactively.`
 
 // src/mcp/tools/find-similar-trajectories.ts
 init_skill_learning();
-import { z as z53 } from "zod";
+import { z as z56 } from "zod";
 function registerFindSimilarTrajectories(server2) {
   server2.registerTool(
     "find_similar_trajectories",
@@ -18403,7 +18967,7 @@ function registerFindSimilarTrajectories(server2) {
       title: "Find Similar Trajectories",
       description: 'Find past task trajectories that match a described tool sequence. Input a comma-separated tool sequence (e.g. "Read, Edit, Bash, Read") to find similar past workflows.',
       inputSchema: {
-        description: z53.string().describe(
+        description: z56.string().describe(
           'Tool sequence to match \u2014 comma-separated tool names (e.g. "Read, Grep, Edit, Bash:npm, Bash:git")'
         )
       }
@@ -18474,7 +19038,7 @@ ${withSkill.length} trajectory(s) already extracted into skill(s).`
 
 // src/mcp/tools/get-session-kills.ts
 init_session_kill_telemetry();
-import { z as z54 } from "zod";
+import { z as z57 } from "zod";
 var PERIOD_MS2 = {
   "24h": 24 * 60 * 60 * 1e3,
   "7d": 7 * 24 * 60 * 60 * 1e3,
@@ -18490,7 +19054,7 @@ function registerGetSessionKills(server2) {
       title: "Get Session Kills",
       description: "Get session kill telemetry: how many idle/TTL sessions were killed, tokens saved, and estimated cost savings over a time period.",
       inputSchema: {
-        period: z54.enum(["24h", "7d", "30d"]).default("7d").describe("Time period to query")
+        period: z57.enum(["24h", "7d", "30d"]).default("7d").describe("Time period to query")
       }
     },
     async ({ period }) => {
@@ -18530,7 +19094,7 @@ function registerGetSessionKills(server2) {
 
 // src/mcp/tools/list-agent-sessions.ts
 init_session_registry();
-import { z as z55 } from "zod";
+import { z as z58 } from "zod";
 function registerListAgentSessions(server2) {
   server2.registerTool(
     "list_agent_sessions",
@@ -18538,7 +19102,7 @@ function registerListAgentSessions(server2) {
       title: "List Agent Sessions",
       description: "List all registered agent sessions with their agent ID, project, PID, and registration time.",
       inputSchema: {
-        _placeholder: z55.string().optional().describe("No input required")
+        _placeholder: z58.string().optional().describe("No input required")
       }
     },
     async () => {
@@ -18584,7 +19148,7 @@ function registerListAgentSessions(server2) {
 }
 
 // src/mcp/tools/get-daemon-health.ts
-import { z as z56 } from "zod";
+import { z as z59 } from "zod";
 import { existsSync as existsSync25, readFileSync as readFileSync22 } from "fs";
 import path34 from "path";
 import { homedir as homedir3 } from "os";
@@ -18615,7 +19179,7 @@ function registerGetDaemonHealth(server2) {
       title: "Get Daemon Health",
       description: "Check the embedding daemon (exed) health: whether it's running, its PID, uptime, and requests served.",
       inputSchema: {
-        _placeholder: z56.string().optional().describe("No input required")
+        _placeholder: z59.string().optional().describe("No input required")
       }
     },
     async () => {
@@ -18667,7 +19231,7 @@ function registerGetDaemonHealth(server2) {
 // src/mcp/tools/get-auto-wake-status.ts
 init_database();
 init_session_registry();
-import { z as z57 } from "zod";
+import { z as z60 } from "zod";
 
 // src/lib/daemon-orchestration.ts
 init_tmux_routing();
@@ -18695,7 +19259,7 @@ function registerGetAutoWakeStatus(server2) {
       title: "Get Auto-Wake Status",
       description: "Check auto-wake status: orphaned tasks (assigned agent has no running session), tasks blocked by auto-wake retry limit, and session activity.",
       inputSchema: {
-        _placeholder: z57.string().optional().describe("No input required")
+        _placeholder: z60.string().optional().describe("No input required")
       }
     },
     async () => {
@@ -18776,7 +19340,7 @@ function registerGetAutoWakeStatus(server2) {
 // src/mcp/tools/get-worker-gate.ts
 init_worker_gate();
 init_config();
-import { z as z58 } from "zod";
+import { z as z61 } from "zod";
 import { readdirSync as readdirSync11, existsSync as existsSync28 } from "fs";
 import path36 from "path";
 var WORKER_PID_DIR2 = path36.join(EXE_AI_DIR, "worker-pids");
@@ -18814,7 +19378,7 @@ function registerGetWorkerGate(server2) {
       title: "Get Worker Gate",
       description: "Check worker concurrency gate status: how many worker slots are in use, the maximum allowed, and whether new workers can spawn.",
       inputSchema: {
-        _placeholder: z58.string().optional().describe("No input required")
+        _placeholder: z61.string().optional().describe("No input required")
       }
     },
     async () => {
@@ -18850,7 +19414,7 @@ function registerGetWorkerGate(server2) {
 
 // src/mcp/tools/run-memory-audit.ts
 init_database();
-import { z as z59 } from "zod";
+import { z as z62 } from "zod";
 
 // src/bin/exe-doctor.ts
 init_store();
@@ -19654,8 +20218,8 @@ function registerRunMemoryAudit(server2) {
       title: "Run Memory Audit",
       description: "Run a memory health audit: total counts, per-agent breakdown, null vectors, duplicates, FTS sync status, bloated records, and conflict detection (contradictory/superseded memories).",
       inputSchema: {
-        agent_id: z59.string().optional().describe("Filter audit to a specific agent"),
-        project_name: z59.string().optional().describe("Filter audit to a specific project")
+        agent_id: z62.string().optional().describe("Filter audit to a specific agent"),
+        project_name: z62.string().optional().describe("Filter audit to a specific project")
       }
     },
     async ({ agent_id, project_name }) => {
@@ -19688,17 +20252,17 @@ function registerRunMemoryAudit(server2) {
 }
 
 // src/mcp/tools/cloud-sync.ts
-import { z as z60 } from "zod";
+import { z as z63 } from "zod";
 
 // src/lib/cloud-sync.ts
 init_database();
 import { readFileSync as readFileSync26, writeFileSync as writeFileSync20, existsSync as existsSync31, readdirSync as readdirSync12, mkdirSync as mkdirSync16, appendFileSync as appendFileSync2, unlinkSync as unlinkSync10, openSync as openSync2, closeSync as closeSync2 } from "fs";
-import crypto18 from "crypto";
+import crypto17 from "crypto";
 import path39 from "path";
 import { homedir as homedir6 } from "os";
 
 // src/lib/crypto.ts
-import crypto17 from "crypto";
+import crypto16 from "crypto";
 var ALGORITHM = "aes-256-gcm";
 var IV_LENGTH = 12;
 var TAG_LENGTH = 16;
@@ -19709,7 +20273,7 @@ function initSyncCrypto(masterKey) {
     throw new Error(`Master key must be 32 bytes, got ${masterKey.length}`);
   }
   _syncKey = Buffer.from(
-    crypto17.hkdfSync("sha256", masterKey, "", SYNC_HKDF_INFO, 32)
+    crypto16.hkdfSync("sha256", masterKey, "", SYNC_HKDF_INFO, 32)
   );
 }
 function isSyncCryptoInitialized() {
@@ -19723,8 +20287,8 @@ function requireSyncKey() {
 }
 function encryptSyncBlob(data) {
   const key = requireSyncKey();
-  const iv = crypto17.randomBytes(IV_LENGTH);
-  const cipher = crypto17.createCipheriv(ALGORITHM, key, iv);
+  const iv = crypto16.randomBytes(IV_LENGTH);
+  const cipher = crypto16.createCipheriv(ALGORITHM, key, iv);
   const encrypted = Buffer.concat([cipher.update(data), cipher.final()]);
   const tag = cipher.getAuthTag();
   return Buffer.concat([iv, encrypted, tag]).toString("base64");
@@ -19738,7 +20302,7 @@ function decryptSyncBlob(ciphertext) {
   const iv = combined.subarray(0, IV_LENGTH);
   const tag = combined.subarray(combined.length - TAG_LENGTH);
   const encrypted = combined.subarray(IV_LENGTH, combined.length - TAG_LENGTH);
-  const decipher = crypto17.createDecipheriv(ALGORITHM, key, iv);
+  const decipher = crypto16.createDecipheriv(ALGORITHM, key, iv);
   decipher.setAuthTag(tag);
   return Buffer.concat([decipher.update(encrypted), decipher.final()]);
 }
@@ -19805,12 +20369,12 @@ function loadPgClient() {
   }
   if (!_pgPromise) {
     _pgPromise = (async () => {
-      const { createRequire: createRequire6 } = await import("module");
-      const { pathToFileURL: pathToFileURL6 } = await import("url");
+      const { createRequire: createRequire5 } = await import("module");
+      const { pathToFileURL: pathToFileURL5 } = await import("url");
       const exeDbRoot = process.env.EXE_DB_ROOT ?? path39.join(homedir6(), "exe-db");
-      const req = createRequire6(path39.join(exeDbRoot, "package.json"));
+      const req = createRequire5(path39.join(exeDbRoot, "package.json"));
       const entry = req.resolve("@prisma/client");
-      const mod = await import(pathToFileURL6(entry).href);
+      const mod = await import(pathToFileURL5(entry).href);
       const Ctor = mod.PrismaClient ?? mod.default?.PrismaClient;
       if (!Ctor) throw new Error("No PrismaClient");
       return new Ctor();
@@ -20315,7 +20879,7 @@ function buildRosterBlob(paths) {
   }
   const deletedNames = consumeRosterDeletions();
   const content = JSON.stringify({ roster, identities, config: config2, agentConfig, deletedNames });
-  const hash = crypto18.createHash("sha256").update(content).digest("hex").slice(0, 16);
+  const hash = crypto17.createHash("sha256").update(content).digest("hex").slice(0, 16);
   return { roster, identities, config: config2, agentConfig, deletedNames, version: hash };
 }
 async function cloudPushRoster(config2) {
@@ -20902,7 +21466,7 @@ function registerCloudSync(server2) {
       title: "Cloud Sync",
       description: "Trigger a cloud sync cycle \u2014 pulls remote changes then pushes local. Reports pushed/pulled counts for memories, behaviors, graph, tasks, and more.",
       inputSchema: {
-        force: z60.boolean().default(false).describe("Force sync even if recently synced")
+        force: z63.boolean().default(false).describe("Force sync even if recently synced")
       }
     },
     async () => {
@@ -20955,7 +21519,7 @@ function registerCloudSync(server2) {
 
 // src/mcp/tools/get-memory-cardinality.ts
 init_database();
-import { z as z61 } from "zod";
+import { z as z64 } from "zod";
 function registerGetMemoryCardinality(server2) {
   server2.registerTool(
     "get_memory_cardinality",
@@ -20963,7 +21527,7 @@ function registerGetMemoryCardinality(server2) {
       title: "Get Memory Cardinality",
       description: "Get memory counts: total active memories and per-project breakdown. Optionally filter by agent.",
       inputSchema: {
-        agent_id: z61.string().optional().describe("Filter to a specific agent (e.g. 'tom', 'exe')")
+        agent_id: z64.string().optional().describe("Filter to a specific agent (e.g. 'tom', 'exe')")
       }
     },
     async ({ agent_id }) => {
@@ -21046,7 +21610,7 @@ function registerGetMemoryCardinality(server2) {
 init_database();
 init_consolidation();
 init_config();
-import { z as z62 } from "zod";
+import { z as z65 } from "zod";
 function registerRunConsolidation(server2) {
   server2.registerTool(
     "run_consolidation",
@@ -21054,7 +21618,7 @@ function registerRunConsolidation(server2) {
       title: "Run Consolidation",
       description: "Run memory consolidation \u2014 synthesizes unconsolidated memories into meta-insights. Use dry_run=true (default) to preview without executing.",
       inputSchema: {
-        dry_run: z62.boolean().default(true).describe("Preview mode \u2014 show what would be consolidated without doing it")
+        dry_run: z65.boolean().default(true).describe("Preview mode \u2014 show what would be consolidated without doing it")
       }
     },
     async ({ dry_run }) => {
@@ -21123,7 +21687,7 @@ function registerRunConsolidation(server2) {
 
 // src/mcp/tools/get-license-status.ts
 init_license();
-import { z as z63 } from "zod";
+import { z as z66 } from "zod";
 var FEATURES = [
   "cloud_sync",
   "external_agents",
@@ -21137,7 +21701,7 @@ function registerGetLicenseStatus(server2) {
       title: "Get License Status",
       description: "Get current license status: plan, validity, feature gates, limits, and expiry.",
       inputSchema: {
-        _dummy: z63.string().optional().describe("Unused \u2014 no input required")
+        _dummy: z66.string().optional().describe("Unused \u2014 no input required")
       }
     },
     async () => {
@@ -21190,7 +21754,7 @@ function registerGetLicenseStatus(server2) {
 
 // src/mcp/tools/backup-vps.ts
 init_keychain();
-import { z as z64 } from "zod";
+import { z as z67 } from "zod";
 
 // src/lib/vps-backup.ts
 import { createCipheriv, createDecipheriv, randomBytes } from "crypto";
@@ -21515,43 +22079,43 @@ function registerBackupVps(server2) {
     {
       title: "VPS Backup",
       description: "Run VPS Postgres backup/restore workflows and check status.",
-      inputSchema: z64.discriminatedUnion("action", [
-        z64.object({
-          action: z64.literal("backup"),
-          databaseUrl: z64.string().min(1).describe("Postgres DATABASE_URL to dump from"),
-          encryptionKeyB64: z64.string().min(1).max(4096).optional().describe(
+      inputSchema: z67.discriminatedUnion("action", [
+        z67.object({
+          action: z67.literal("backup"),
+          databaseUrl: z67.string().min(1).describe("Postgres DATABASE_URL to dump from"),
+          encryptionKeyB64: z67.string().min(1).max(4096).optional().describe(
             "Base64 AES-256 key (defaults to local master key if omitted)"
           ),
-          r2Bucket: z64.string().min(1).describe("R2 bucket name"),
-          r2Endpoint: z64.string().min(1).describe("R2 endpoint URL"),
-          r2AccessKeyId: z64.string().min(1).describe("R2 access key ID"),
-          r2SecretAccessKey: z64.string().min(1).describe("R2 secret access key")
+          r2Bucket: z67.string().min(1).describe("R2 bucket name"),
+          r2Endpoint: z67.string().min(1).describe("R2 endpoint URL"),
+          r2AccessKeyId: z67.string().min(1).describe("R2 access key ID"),
+          r2SecretAccessKey: z67.string().min(1).describe("R2 secret access key")
         }),
-        z64.object({
-          action: z64.literal("restore"),
-          databaseUrl: z64.string().min(1).describe("Target Postgres DATABASE_URL for restore"),
-          backupKey: z64.string().min(1).describe("R2 object key to restore from"),
-          encryptionKeyB64: z64.string().min(1).max(4096).optional().describe(
+        z67.object({
+          action: z67.literal("restore"),
+          databaseUrl: z67.string().min(1).describe("Target Postgres DATABASE_URL for restore"),
+          backupKey: z67.string().min(1).describe("R2 object key to restore from"),
+          encryptionKeyB64: z67.string().min(1).max(4096).optional().describe(
             "Base64 AES-256 key (defaults to local master key if omitted)"
           ),
-          r2Bucket: z64.string().min(1).describe("R2 bucket name"),
-          r2Endpoint: z64.string().min(1).describe("R2 endpoint URL"),
-          r2AccessKeyId: z64.string().min(1).describe("R2 access key ID"),
-          r2SecretAccessKey: z64.string().min(1).describe("R2 secret access key")
+          r2Bucket: z67.string().min(1).describe("R2 bucket name"),
+          r2Endpoint: z67.string().min(1).describe("R2 endpoint URL"),
+          r2AccessKeyId: z67.string().min(1).describe("R2 access key ID"),
+          r2SecretAccessKey: z67.string().min(1).describe("R2 secret access key")
         }),
-        z64.object({
-          action: z64.literal("list"),
-          r2Bucket: z64.string().min(1).describe("R2 bucket name"),
-          r2Endpoint: z64.string().min(1).describe("R2 endpoint URL"),
-          r2AccessKeyId: z64.string().min(1).describe("R2 access key ID"),
-          r2SecretAccessKey: z64.string().min(1).describe("R2 secret access key")
+        z67.object({
+          action: z67.literal("list"),
+          r2Bucket: z67.string().min(1).describe("R2 bucket name"),
+          r2Endpoint: z67.string().min(1).describe("R2 endpoint URL"),
+          r2AccessKeyId: z67.string().min(1).describe("R2 access key ID"),
+          r2SecretAccessKey: z67.string().min(1).describe("R2 secret access key")
         }),
-        z64.object({
-          action: z64.literal("health"),
-          r2Bucket: z64.string().min(1).describe("R2 bucket name"),
-          r2Endpoint: z64.string().min(1).describe("R2 endpoint URL"),
-          r2AccessKeyId: z64.string().min(1).describe("R2 access key ID"),
-          r2SecretAccessKey: z64.string().min(1).describe("R2 secret access key")
+        z67.object({
+          action: z67.literal("health"),
+          r2Bucket: z67.string().min(1).describe("R2 bucket name"),
+          r2Endpoint: z67.string().min(1).describe("R2 endpoint URL"),
+          r2AccessKeyId: z67.string().min(1).describe("R2 access key ID"),
+          r2SecretAccessKey: z67.string().min(1).describe("R2 secret access key")
         })
       ])
     },
@@ -21689,7 +22253,7 @@ async function resolveEncryptionKey(providedB64) {
 }
 
 // src/mcp/tools/people-roster.ts
-import { z as z65 } from "zod";
+import { z as z68 } from "zod";
 
 // src/lib/people.ts
 init_config();
@@ -21737,10 +22301,10 @@ function registerAddPerson(server2) {
       title: "Add Person",
       description: "Add or update a key human in the people roster. Used for co-founders, partners, customers \u2014 anyone agents need to know about.",
       inputSchema: {
-        name: z65.string().describe("Person's name"),
-        role: z65.string().describe("Their role (e.g. co-founder, customer, partner)"),
-        relationship: z65.string().describe("Relationship to the organization (e.g. co-founder, early adopter, investor)"),
-        notes: z65.string().optional().describe("Additional context about this person")
+        name: z68.string().describe("Person's name"),
+        role: z68.string().describe("Their role (e.g. co-founder, customer, partner)"),
+        relationship: z68.string().describe("Relationship to the organization (e.g. co-founder, early adopter, investor)"),
+        notes: z68.string().optional().describe("Additional context about this person")
       }
     },
     async ({ name, role, relationship, notes }) => {
@@ -21786,7 +22350,7 @@ function registerGetPerson(server2) {
       title: "Get Person",
       description: "Look up a specific person by name from the people roster.",
       inputSchema: {
-        name: z65.string().describe("Person's name to look up")
+        name: z68.string().describe("Person's name to look up")
       }
     },
     async ({ name }) => {
@@ -21814,7 +22378,7 @@ init_active_agent();
 init_agent_config();
 init_runtime_table();
 init_employees();
-import { z as z66 } from "zod";
+import { z as z69 } from "zod";
 function registerSetAgentConfig(server2) {
   server2.registerTool(
     "set_agent_config",
@@ -21822,10 +22386,10 @@ function registerSetAgentConfig(server2) {
       title: "Set Agent Config",
       description: "Set or view per-agent runtime + model configuration. Controls which runtime (claude, codex, opencode) and model each agent uses when dispatched. COO-only. Omit runtime/model to view current config for an agent or all agents.",
       inputSchema: {
-        agent_id: z66.string().optional().describe("Agent name, or 'default' for org-wide default. Omit to view all agents."),
-        runtime: z66.string().optional().describe(`Runtime: ${Object.keys(KNOWN_RUNTIMES).join(", ")}`),
-        model: z66.string().optional().describe("Model name (e.g. claude-opus-4, gpt-5.4, anthropic/claude-sonnet-4-6)"),
-        reasoning_effort: z66.string().optional().describe("Codex reasoning effort: low, medium, high, xhigh. Per-agent override for thinking/reasoning depth.")
+        agent_id: z69.string().optional().describe("Agent name, or 'default' for org-wide default. Omit to view all agents."),
+        runtime: z69.string().optional().describe(`Runtime: ${Object.keys(KNOWN_RUNTIMES).join(", ")}`),
+        model: z69.string().optional().describe("Model name (e.g. claude-opus-4, gpt-5.4, anthropic/claude-sonnet-4-6)"),
+        reasoning_effort: z69.string().optional().describe("Codex reasoning effort: low, medium, high, xhigh. Per-agent override for thinking/reasoning depth.")
       }
     },
     async ({ agent_id, runtime, model, reasoning_effort }) => {
@@ -21923,7 +22487,7 @@ function registerSetAgentConfig(server2) {
 // src/mcp/tools/list-employees.ts
 init_employees();
 init_agent_config();
-import { z as z67 } from "zod";
+import { z as z70 } from "zod";
 function registerListEmployees(server2) {
   server2.registerTool(
     "list_employees",
@@ -21931,7 +22495,7 @@ function registerListEmployees(server2) {
       title: "List Employees",
       description: "List all AI employees in the organization with their role, runtime, and model configuration. Use to see who's on the team and how they're configured.",
       inputSchema: {
-        role: z67.string().optional().describe("Filter by role (case-insensitive)")
+        role: z70.string().optional().describe("Filter by role (case-insensitive)")
       }
     },
     async ({ role }) => {
@@ -21986,12 +22550,14 @@ function registerListEmployees(server2) {
   );
 }
 
-// src/mcp/tools/ingest-raw.ts
+// src/mcp/tools/create-license.ts
+init_license();
 import os16 from "os";
 import path41 from "path";
+import { randomBytes as randomBytes2, randomUUID as randomUUID8 } from "crypto";
 import { createRequire as createRequire3 } from "module";
 import { pathToFileURL as pathToFileURL3 } from "url";
-import { z as z68 } from "zod";
+import { z as z71 } from "zod";
 var prismaPromise = null;
 function loadPrisma() {
   if (!prismaPromise) {
@@ -22014,101 +22580,6 @@ function loadPrisma() {
   }
   return prismaPromise;
 }
-function registerIngestRaw(server2) {
-  server2.registerTool(
-    "ingest_raw",
-    {
-      title: "Ingest Raw Event",
-      description: "Insert a raw event into the landing pad (raw.raw_events). Used by the gateway, external agents, and webhooks to push data into the Company Brain. Background projection workers process unprocessed events and route to curated schemas.",
-      inputSchema: {
-        source: z68.string().describe(
-          'Event source identifier: "whatsapp", "shopify", "asana", "email", "external_agent", etc.'
-        ),
-        event_type: z68.string().describe(
-          'Event type: "message", "order", "task_update", "webhook", etc.'
-        ),
-        payload: z68.record(z68.string(), z68.unknown()).describe(
-          "Exact raw JSON payload \u2014 stored verbatim, never modified."
-        ),
-        source_id: z68.string().optional().describe(
-          "External reference ID for deduplication (e.g., WhatsApp message ID, Shopify order ID)."
-        ),
-        metadata: z68.record(z68.string(), z68.unknown()).optional().describe(
-          "Source-specific metadata (account info, adapter version, etc.)."
-        )
-      }
-    },
-    async ({ source, event_type, payload, source_id, metadata }) => {
-      try {
-        const prisma = await loadPrisma();
-        const id = crypto.randomUUID();
-        await prisma.$executeRawUnsafe(
-          `INSERT INTO "raw"."raw_events" ("id", "source", "source_id", "event_type", "payload", "metadata", "timestamp")
-           VALUES ($1, $2, $3, $4, $5::jsonb, $6::jsonb, NOW())
-           ON CONFLICT ("source", "source_id", "event_type") DO NOTHING`,
-          id,
-          source,
-          source_id ?? null,
-          event_type,
-          JSON.stringify(payload),
-          metadata ? JSON.stringify(metadata) : null
-        );
-        return {
-          content: [{
-            type: "text",
-            text: JSON.stringify({
-              event_id: id,
-              source,
-              event_type,
-              source_id: source_id ?? null,
-              status: "ingested"
-            })
-          }]
-        };
-      } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        return {
-          content: [{
-            type: "text",
-            text: `Error ingesting raw event: ${message}`
-          }],
-          isError: true
-        };
-      }
-    }
-  );
-}
-
-// src/mcp/tools/create-license.ts
-init_license();
-import os17 from "os";
-import path42 from "path";
-import { randomBytes as randomBytes2, randomUUID as randomUUID8 } from "crypto";
-import { createRequire as createRequire4 } from "module";
-import { pathToFileURL as pathToFileURL4 } from "url";
-import { z as z69 } from "zod";
-var prismaPromise2 = null;
-function loadPrisma2() {
-  if (!prismaPromise2) {
-    prismaPromise2 = (async () => {
-      const explicitPath = process.env.EXE_OS_PRISMA_CLIENT_PATH;
-      if (explicitPath) {
-        const mod2 = await import(pathToFileURL4(explicitPath).href);
-        const Ctor2 = mod2.PrismaClient ?? mod2.default?.PrismaClient;
-        if (!Ctor2) throw new Error(`No PrismaClient at ${explicitPath}`);
-        return new Ctor2();
-      }
-      const exeDbRoot = process.env.EXE_DB_ROOT ?? path42.join(os17.homedir(), "exe-db");
-      const req = createRequire4(path42.join(exeDbRoot, "package.json"));
-      const entry = req.resolve("@prisma/client");
-      const mod = await import(pathToFileURL4(entry).href);
-      const Ctor = mod.PrismaClient ?? mod.default?.PrismaClient;
-      if (!Ctor) throw new Error(`No PrismaClient in ${entry}`);
-      return new Ctor();
-    })();
-  }
-  return prismaPromise2;
-}
 function generateKey() {
   return `exe_sk_${randomBytes2(16).toString("hex")}`;
 }
@@ -22119,15 +22590,15 @@ function registerCreateLicense(server2) {
       title: "Create License",
       description: "Generate an exe_sk_* license key for a user. Stores in billing.licenses. Returns the key to give to the customer.",
       inputSchema: {
-        email: z69.string().email().describe("Customer email address"),
-        name: z69.string().optional().describe("Customer name"),
-        plan: z69.enum(["free", "pro", "team", "agency", "enterprise"]).default("pro").describe("License plan tier"),
-        expires_in_days: z69.number().int().positive().default(365).describe("Days until expiration (default 365)")
+        email: z71.string().email().describe("Customer email address"),
+        name: z71.string().optional().describe("Customer name"),
+        plan: z71.enum(["free", "pro", "team", "agency", "enterprise"]).default("pro").describe("License plan tier"),
+        expires_in_days: z71.number().int().positive().default(365).describe("Days until expiration (default 365)")
       }
     },
     async ({ email, name, plan, expires_in_days }) => {
       try {
-        const prisma = await loadPrisma2();
+        const prisma = await loadPrisma();
         const id = randomUUID8();
         const key = generateKey();
         const limits = PLAN_LIMITS[plan];
@@ -22173,32 +22644,32 @@ Give this key to the customer. They paste it during \`exe-os setup\`.`);
 }
 
 // src/mcp/tools/list-licenses.ts
-import os18 from "os";
-import path43 from "path";
-import { createRequire as createRequire5 } from "module";
-import { pathToFileURL as pathToFileURL5 } from "url";
-import { z as z70 } from "zod";
-var prismaPromise3 = null;
-function loadPrisma3() {
-  if (!prismaPromise3) {
-    prismaPromise3 = (async () => {
+import os17 from "os";
+import path42 from "path";
+import { createRequire as createRequire4 } from "module";
+import { pathToFileURL as pathToFileURL4 } from "url";
+import { z as z72 } from "zod";
+var prismaPromise2 = null;
+function loadPrisma2() {
+  if (!prismaPromise2) {
+    prismaPromise2 = (async () => {
       const explicitPath = process.env.EXE_OS_PRISMA_CLIENT_PATH;
       if (explicitPath) {
-        const mod2 = await import(pathToFileURL5(explicitPath).href);
+        const mod2 = await import(pathToFileURL4(explicitPath).href);
         const Ctor2 = mod2.PrismaClient ?? mod2.default?.PrismaClient;
         if (!Ctor2) throw new Error(`No PrismaClient at ${explicitPath}`);
         return new Ctor2();
       }
-      const exeDbRoot = process.env.EXE_DB_ROOT ?? path43.join(os18.homedir(), "exe-db");
-      const req = createRequire5(path43.join(exeDbRoot, "package.json"));
+      const exeDbRoot = process.env.EXE_DB_ROOT ?? path42.join(os17.homedir(), "exe-db");
+      const req = createRequire4(path42.join(exeDbRoot, "package.json"));
       const entry = req.resolve("@prisma/client");
-      const mod = await import(pathToFileURL5(entry).href);
+      const mod = await import(pathToFileURL4(entry).href);
       const Ctor = mod.PrismaClient ?? mod.default?.PrismaClient;
       if (!Ctor) throw new Error(`No PrismaClient in ${entry}`);
       return new Ctor();
     })();
   }
-  return prismaPromise3;
+  return prismaPromise2;
 }
 function registerListLicenses(server2) {
   server2.registerTool(
@@ -22207,12 +22678,12 @@ function registerListLicenses(server2) {
       title: "List Licenses",
       description: "List all issued licenses with status (active/expired/revoked). Optionally filter by plan.",
       inputSchema: {
-        plan: z70.enum(["free", "pro", "team", "agency", "enterprise"]).optional().describe("Filter by plan tier (omit for all)")
+        plan: z72.enum(["free", "pro", "team", "agency", "enterprise"]).optional().describe("Filter by plan tier (omit for all)")
       }
     },
     async ({ plan }) => {
       try {
-        const prisma = await loadPrisma3();
+        const prisma = await loadPrisma2();
         let rows;
         if (plan) {
           rows = await prisma.$queryRawUnsafe(
@@ -22258,7 +22729,7 @@ function registerListLicenses(server2) {
 
 // src/mcp/tools/activate-license.ts
 init_license();
-import { z as z71 } from "zod";
+import { z as z73 } from "zod";
 function registerActivateLicense(server2) {
   server2.registerTool(
     "activate_license",
@@ -22266,7 +22737,7 @@ function registerActivateLicense(server2) {
       title: "Activate License",
       description: "Activate an exe_sk_* license key on this device. Writes to ~/.exe-os/license.key, validates against Postgres, and caches the result.",
       inputSchema: {
-        key: z71.string().startsWith("exe_sk_").describe("License key (exe_sk_*)")
+        key: z73.string().startsWith("exe_sk_").describe("License key (exe_sk_*)")
       }
     },
     async ({ key }) => {
@@ -22313,9 +22784,9 @@ Key saved to ~/.exe-os/license.key. Device ID: ${deviceId}`);
 
 // src/mcp/tools/query-company-brain.ts
 init_config();
-import { z as z72 } from "zod";
+import { z as z74 } from "zod";
 var FETCH_TIMEOUT_MS5 = 1e4;
-var QUERY_SCOPE = z72.enum(["raw", "wiki", "memory", "gateway", "all"]);
+var QUERY_SCOPE = z74.enum(["raw", "wiki", "memory", "gateway", "all"]);
 function formatSuccess(query, scope, payload) {
   const pretty = typeof payload === "string" ? payload : JSON.stringify(payload, null, 2);
   return [
@@ -22334,10 +22805,10 @@ function registerQueryCompanyBrain(server2) {
       title: "Query Company Brain",
       description: "Search the Company Brain \u2014 queries across all data (raw events, wiki docs, agent memories, gateway messages).",
       inputSchema: {
-        query: z72.string().min(1).describe("Search text"),
+        query: z74.string().min(1).describe("Search text"),
         scope: QUERY_SCOPE.default("all").describe("Which data scope to search"),
-        source: z72.string().optional().describe("Filter raw events by source (shopify, asana, etc.)"),
-        limit: z72.coerce.number().int().min(1).max(100).default(20).describe("Max results per scope")
+        source: z74.string().optional().describe("Filter raw events by source (shopify, asana, etc.)"),
+        limit: z74.coerce.number().int().min(1).max(100).default(20).describe("Max results per scope")
       }
     },
     async ({ query, scope, source, limit }) => {
@@ -22492,15 +22963,11 @@ registerCloseTask(server);
 registerGetTask(server);
 registerCheckpointTask(server);
 registerResumeEmployee(server);
-registerStoreBehavior(server);
+registerBehavior(server);
 registerSendMessage(server);
-registerCreateReminder(server);
-registerListReminders(server);
-registerCompleteReminder(server);
-registerListBehaviors(server);
+registerReminder(server);
 registerGetIdentity(server);
 registerUpdateIdentity(server);
-registerDeactivateBehavior(server);
 registerIngestDocument(server);
 registerListDocuments(server);
 registerPurgeDocument(server);
@@ -22522,9 +22989,16 @@ registerImportOrchestration(server);
 registerQueryConversations(server);
 registerLoadSkill(server);
 registerConsolidateMemories(server);
+registerGlobalProcedure(server);
 registerStoreGlobalProcedure(server);
 registerListGlobalProcedures(server);
 registerDeactivateGlobalProcedure(server);
+registerStoreBehavior(server);
+registerListBehaviors(server);
+registerDeactivateBehavior(server);
+registerCreateReminder(server);
+registerListReminders(server);
+registerCompleteReminder(server);
 registerSearchEverything(server);
 registerStoreDecision(server);
 registerGetDecision(server);
@@ -22550,7 +23024,6 @@ registerListPeople(server);
 registerGetPerson(server);
 registerSetAgentConfig(server);
 registerListEmployees(server);
-registerIngestRaw(server);
 registerCreateLicense(server);
 registerListLicenses(server);
 registerActivateLicense(server);
@@ -22623,14 +23096,14 @@ try {
 `
       );
       const thisFile = fileURLToPath5(import.meta.url);
-      const backfillPath = path44.resolve(
-        path44.dirname(thisFile),
+      const backfillPath = path43.resolve(
+        path43.dirname(thisFile),
         "../bin/backfill-vectors.js"
       );
       if (existsSync33(backfillPath)) {
         const { EXE_AI_DIR: exeDir } = await Promise.resolve().then(() => (init_config(), config_exports));
-        const logPath = path44.join(exeDir, "workers.log");
-        mkdirSync17(path44.dirname(logPath), { recursive: true });
+        const logPath = path43.join(exeDir, "workers.log");
+        mkdirSync17(path43.dirname(logPath), { recursive: true });
         let logFd = "ignore";
         try {
           logFd = openSync3(logPath, "a");