@askexenow/exe-os 0.9.20 → 0.9.22

package/dist/bin/cli.js

@@ -917,18 +917,21 @@ async function registerMcpServer(packageRoot, homeDir = os5.homedir()) {
     args: [path6.join(packageRoot, "dist", "mcp", "server.js")],
     env: {}
   };
-  const currentMem = claudeJson.mcpServers[MCP_LEGACY_KEY];
-  const memMatches = currentMem && JSON.stringify(currentMem) === JSON.stringify(newEntry);
-  if (claudeJson.mcpServers[MCP_PRIMARY_KEY]) {
-    delete claudeJson.mcpServers[MCP_PRIMARY_KEY];
+  if (claudeJson.mcpServers[MCP_LEGACY_KEY]) {
+    delete claudeJson.mcpServers[MCP_LEGACY_KEY];
+    process.stderr.write("exe-os: migrated MCP server key exe-mem \u2192 exe-os\n");
   }
-  if (memMatches && !claudeJson.mcpServers[MCP_PRIMARY_KEY]) {
+  const currentOs = claudeJson.mcpServers[MCP_PRIMARY_KEY];
+  const osMatches = currentOs && JSON.stringify(currentOs) === JSON.stringify(newEntry);
+  if (osMatches) {
     await cleanSettingsJsonMcp(path6.join(homeDir, ".claude", "settings.json"));
+    await migratePermissionsToExeOs(path6.join(homeDir, ".claude", "settings.json"));
     return false;
   }
-  claudeJson.mcpServers[MCP_LEGACY_KEY] = newEntry;
+  claudeJson.mcpServers[MCP_PRIMARY_KEY] = newEntry;
   await writeFile3(claudeJsonPath, JSON.stringify(claudeJson, null, 2) + "\n");
   await cleanSettingsJsonMcp(path6.join(homeDir, ".claude", "settings.json"));
+  await migratePermissionsToExeOs(path6.join(homeDir, ".claude", "settings.json"));
   return true;
 }
 async function cleanSettingsJsonMcp(settingsPath) {
@@ -952,6 +955,35 @@ async function cleanSettingsJsonMcp(settingsPath) {
   } catch {
   }
 }
+async function migratePermissionsToExeOs(settingsPath) {
+  if (!existsSync7(settingsPath)) return;
+  try {
+    const settings = JSON.parse(await readFile3(settingsPath, "utf-8"));
+    const permissions = settings.permissions;
+    if (!permissions || !Array.isArray(permissions.allow)) return;
+    const allow = permissions.allow;
+    let migrated = 0;
+    for (let i = 0; i < allow.length; i++) {
+      if (allow[i].startsWith("mcp__exe-mem__")) {
+        const newName = allow[i].replace("mcp__exe-mem__", "mcp__exe-os__");
+        if (!allow.includes(newName)) {
+          allow[i] = newName;
+        } else {
+          allow[i] = "__REMOVE__";
+        }
+        migrated++;
+      }
+    }
+    if (migrated > 0) {
+      permissions.allow = allow.filter((e) => e !== "__REMOVE__");
+      permissions.allow = [...new Set(permissions.allow)];
+      await writeFile3(settingsPath, JSON.stringify(settings, null, 2) + "\n");
+      process.stderr.write(`exe-os: migrated ${migrated} permission(s) from exe-mem \u2192 exe-os
+`);
+    }
+  } catch {
+  }
+}
 async function mergeHooks(packageRoot, homeDir = os5.homedir()) {
   const settingsPath = path6.join(homeDir, ".claude", "settings.json");
   const logsDir = path6.join(homeDir, ".exe-os", "logs");
@@ -1212,9 +1244,10 @@ async function mergeHooks(packageRoot, homeDir = os5.homedir()) {
     "deploy_client"
   ];
   const allowList = permissions.allow;
-  for (const tool of expandDualPrefixTools(toolNames)) {
-    if (!allowList.includes(tool)) {
-      allowList.push(tool);
+  for (const name of toolNames) {
+    const fullName = `mcp__${MCP_PRIMARY_KEY}__${name}`;
+    if (!allowList.includes(fullName)) {
+      allowList.push(fullName);
     }
   }
   await mkdir3(path6.dirname(settingsPath), { recursive: true });
@@ -5952,9 +5985,9 @@ async function cloudPullGraphRAG(config) {
     pulled += stmts.length;
   }
   if (blob.relationship_memories.length > 0) {
-    const stmts = blob.relationship_memories.map((rm) => ({
+    const stmts = blob.relationship_memories.map((rm2) => ({
       sql: `INSERT OR IGNORE INTO relationship_memories (relationship_id, memory_id) VALUES (?, ?)`,
-      args: [sqlSafe(rm.relationship_id), sqlSafe(rm.memory_id)]
+      args: [sqlSafe(rm2.relationship_id), sqlSafe(rm2.memory_id)]
     }));
     await client.batch(stmts, "write");
     pulled += stmts.length;
@@ -6471,8 +6504,8 @@ function getShardClient(projectName) {
     throw new Error("Shard manager not initialized. Call initShardManager() first.");
   }
   const safeName = projectName.replace(/[^a-zA-Z0-9_-]/g, "_");
-  if (!safeName) {
-    throw new Error(`Invalid project name for shard: "${projectName}"`);
+  if (!safeName || safeName === "unknown") {
+    throw new Error(`Invalid project name for shard: "${projectName}" (resolved to "${safeName}")`);
   }
   const cached = _shards.get(safeName);
   if (cached) {
@@ -7341,19 +7374,32 @@ async function flushBatch() {
       const { isShardingEnabled: isShardingEnabled2, getReadyShardClient: getReadyShardClient2 } = await Promise.resolve().then(() => (init_shard_manager(), shard_manager_exports));
       if (isShardingEnabled2()) {
         const byProject = /* @__PURE__ */ new Map();
+        let skippedUnknown = 0;
         for (const row of batch) {
-          const proj = row.project_name || "unknown";
+          const proj = row.project_name?.trim();
+          if (!proj) {
+            skippedUnknown++;
+            continue;
+          }
           if (!byProject.has(proj)) byProject.set(proj, []);
           byProject.get(proj).push(row);
         }
+        if (skippedUnknown > 0) {
+          process.stderr.write(
+            `[store] Shard skip: ${skippedUnknown} record(s) with empty project_name (kept in main DB only)
+`
+          );
+        }
         for (const [project, rows] of byProject) {
           try {
             const shardClient = await getReadyShardClient2(project);
             const shardStmts = rows.map(buildStmt);
             await shardClient.batch(shardStmts, "write");
           } catch (err) {
+            const fullError = err instanceof Error ? `${err.name}: ${err.message}${err.stack ? `
+${err.stack.split("\n").slice(1, 3).join("\n")}` : ""}` : String(err);
             process.stderr.write(
-              `[store] Shard write failed for ${project}: ${err instanceof Error ? err.message : String(err)}
+              `[store] Shard write failed for ${project} (${rows.length} records): ${fullError}
 `
             );
           }
@@ -8381,9 +8427,9 @@ Unclassified: ${unclassified}
 }
 async function exportBatches(options) {
   const fs8 = await import("fs");
-  const path46 = await import("path");
+  const path47 = await import("path");
   const client = getClient();
-  const outDir = path46.join(process.cwd(), "exe/output/classifications/input");
+  const outDir = path47.join(process.cwd(), "exe/output/classifications/input");
   fs8.mkdirSync(outDir, { recursive: true });
   const countResult = await client.execute({
     sql: "SELECT COUNT(*) as cnt FROM memories WHERE intent IS NULL AND outcome IS NULL AND domain IS NULL",
@@ -8407,7 +8453,7 @@ async function exportBatches(options) {
       const text = String(row.text || "").replace(/\n/g, " ");
       return JSON.stringify({ id: row.id, text });
     });
-    const batchFile = path46.join(outDir, `batch-${String(batchNum).padStart(4, "0")}.jsonl`);
+    const batchFile = path47.join(outDir, `batch-${String(batchNum).padStart(4, "0")}.jsonl`);
     fs8.writeFileSync(batchFile, lines.join("\n") + "\n");
     exported += batch.rows.length;
     offset += options.batchSize;
@@ -8423,7 +8469,7 @@ async function exportBatches(options) {
 }
 async function importClassifications(importDir) {
   const fs8 = await import("fs");
-  const path46 = await import("path");
+  const path47 = await import("path");
   const client = getClient();
   const files = fs8.readdirSync(importDir).filter((f) => f.endsWith(".jsonl")).sort();
   process.stderr.write(`[backfill-metadata] Found ${files.length} JSONL files to import from ${importDir}
@@ -8431,7 +8477,7 @@ async function importClassifications(importDir) {
   let imported = 0;
   let invalid = 0;
   for (const file of files) {
-    const lines = fs8.readFileSync(path46.join(importDir, file), "utf-8").split("\n").filter(Boolean);
+    const lines = fs8.readFileSync(path47.join(importDir, file), "utf-8").split("\n").filter(Boolean);
     for (const line of lines) {
       try {
         const rec = JSON.parse(line);
@@ -11064,10 +11110,10 @@ async function disposeEmbedder() {
 async function embedDirect(text) {
   const llamaCpp = await import("node-llama-cpp");
   const { MODELS_DIR: MODELS_DIR2 } = await Promise.resolve().then(() => (init_config(), config_exports));
-  const { existsSync: existsSync32 } = await import("fs");
-  const path46 = await import("path");
-  const modelPath = path46.join(MODELS_DIR2, "jina-embeddings-v5-small-q4_k_m.gguf");
-  if (!existsSync32(modelPath)) {
+  const { existsSync: existsSync33 } = await import("fs");
+  const path47 = await import("path");
+  const modelPath = path47.join(MODELS_DIR2, "jina-embeddings-v5-small-q4_k_m.gguf");
+  if (!existsSync33(modelPath)) {
     throw new Error(`Embedding model not found at ${modelPath}. Run '/exe-setup' to download it.`);
   }
   const llama = await llamaCpp.getLlama();
@@ -15482,12 +15528,108 @@ var init_setup_wizard = __esm({
   }
 });
 
+// src/lib/update-backup.ts
+import { copyFile, readFile as readFile6, readdir as readdir3, writeFile as writeFile7, rm, mkdir as mkdir7, cp } from "fs/promises";
+import { existsSync as existsSync28 } from "fs";
+import path34 from "path";
+import os17 from "os";
+function resolveDataDir2() {
+  if (process.env.EXE_OS_DIR) return process.env.EXE_OS_DIR;
+  if (process.env.EXE_MEM_DIR) return process.env.EXE_MEM_DIR;
+  return path34.join(os17.homedir(), ".exe-os");
+}
+async function createUpdateBackup(currentVersion, dataDir) {
+  const dir = dataDir ?? resolveDataDir2();
+  const backupDir = path34.join(dir, BACKUP_DIR_NAME);
+  if (existsSync28(backupDir)) {
+    await rm(backupDir, { recursive: true, force: true });
+  }
+  await mkdir7(backupDir, { recursive: true });
+  const backedUpFiles = [];
+  for (const target of BACKUP_TARGETS) {
+    const src = path34.join(dir, target.name);
+    if (!existsSync28(src)) continue;
+    const dest = path34.join(backupDir, target.name);
+    if (target.type === "file") {
+      await copyFile(src, dest);
+    } else {
+      await cp(src, dest, { recursive: true });
+    }
+    backedUpFiles.push(target.name);
+  }
+  const entries = await readdir3(dir, { withFileTypes: true });
+  for (const entry of entries) {
+    if (entry.isFile() && entry.name.endsWith(".db") && entry.name !== BACKUP_DIR_NAME) {
+      const src = path34.join(dir, entry.name);
+      const dest = path34.join(backupDir, entry.name);
+      await copyFile(src, dest);
+      backedUpFiles.push(entry.name);
+    }
+  }
+  const manifest = {
+    version: currentVersion,
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    files: backedUpFiles
+  };
+  await writeFile7(
+    path34.join(backupDir, "manifest.json"),
+    JSON.stringify(manifest, null, 2) + "\n"
+  );
+  return manifest;
+}
+async function restoreFromBackup(dataDir) {
+  const dir = dataDir ?? resolveDataDir2();
+  const backupDir = path34.join(dir, BACKUP_DIR_NAME);
+  const manifestPath = path34.join(backupDir, "manifest.json");
+  if (!existsSync28(manifestPath)) {
+    throw new Error(
+      `No backup found at ${backupDir}. Nothing to restore.`
+    );
+  }
+  const manifest = JSON.parse(
+    await readFile6(manifestPath, "utf-8")
+  );
+  for (const fileName of manifest.files) {
+    const src = path34.join(backupDir, fileName);
+    const dest = path34.join(dir, fileName);
+    if (!existsSync28(src)) continue;
+    const stat2 = await import("fs/promises").then((m) => m.stat(src));
+    if (stat2.isDirectory()) {
+      await cp(src, dest, { recursive: true, force: true });
+    } else {
+      await copyFile(src, dest);
+    }
+  }
+  return manifest;
+}
+async function deleteBackup(dataDir) {
+  const dir = dataDir ?? resolveDataDir2();
+  const backupDir = path34.join(dir, BACKUP_DIR_NAME);
+  if (existsSync28(backupDir)) {
+    await rm(backupDir, { recursive: true, force: true });
+  }
+}
+var BACKUP_DIR_NAME, BACKUP_TARGETS;
+var init_update_backup = __esm({
+  "src/lib/update-backup.ts"() {
+    "use strict";
+    BACKUP_DIR_NAME = ".update-backup";
+    BACKUP_TARGETS = [
+      { name: "config.json", type: "file" },
+      { name: "exe-employees.json", type: "file" },
+      { name: "master.key", type: "file" },
+      { name: "identity", type: "dir" }
+      // All .db files (SQLCipher databases) — matched dynamically
+    ];
+  }
+});
+
 // src/lib/update-check.ts
 import { execSync as execSync11 } from "child_process";
 import { readFileSync as readFileSync24 } from "fs";
-import path34 from "path";
+import path35 from "path";
 function getLocalVersion(packageRoot) {
-  const pkgPath = path34.join(packageRoot, "package.json");
+  const pkgPath = path35.join(packageRoot, "package.json");
   const pkg = JSON.parse(readFileSync24(pkgPath, "utf-8"));
   return pkg.version;
 }
@@ -15534,10 +15676,47 @@ __export(update_exports, {
 });
 import { execSync as execSync12 } from "child_process";
 import { createInterface as createInterface4 } from "readline";
+async function runRestore() {
+  console.log("\n\u{1F504} Restoring from update backup...");
+  try {
+    const manifest = await restoreFromBackup();
+    console.log(`   Restored ${manifest.files.length} file(s) from v${manifest.version} backup.`);
+    console.log(`   Backup was created at ${manifest.timestamp}`);
+    console.log(`
+\u{1F4E5} Reinstalling @askexenow/exe-os@${manifest.version}...`);
+    try {
+      execSync12(`npm install -g @askexenow/exe-os@${manifest.version}`, {
+        stdio: ["pipe", "pipe", "inherit"],
+        timeout: 3e5
+      });
+      console.log(`
+\u2705 Restored to v${manifest.version}`);
+    } catch {
+      console.error(`
+\u26A0\uFE0F  Could not reinstall v${manifest.version} via npm.`);
+      console.error(`   Your data files have been restored. Try manually:`);
+      console.error(`   npm install -g @askexenow/exe-os@${manifest.version}`);
+    }
+    try {
+      await deleteBackup();
+    } catch {
+    }
+    console.log("\n\u{1F680} Restore complete. Restart your sessions.\n");
+  } catch (err) {
+    console.error("\u274C Restore failed.");
+    if (err instanceof Error) console.error(`   ${err.message}`);
+    process.exit(1);
+  }
+}
 async function runUpdate(cliArgs) {
   const args2 = cliArgs ?? process.argv.slice(2);
   const autoMode = args2.includes("--auto") || args2.includes("-y");
   const checkOnly = args2.includes("--check");
+  const restoreMode = args2.includes("--restore");
+  if (restoreMode) {
+    await runRestore();
+    return;
+  }
   const packageRoot = new URL("../..", import.meta.url).pathname;
   const result = checkForUpdate(packageRoot);
   if (result.error) {
@@ -15572,7 +15751,16 @@ async function runUpdate(cliArgs) {
     console.log("Update skipped.");
     process.exit(0);
   }
-  console.log("\n\u{1F9F9} Clearing npm cache...");
+  console.log("\n\u{1F4BE} Backing up customer data...");
+  try {
+    const backupResult = await createUpdateBackup(result.localVersion);
+    console.log(`   Backed up ${backupResult.files.length} file(s) to ${BACKUP_DIR_NAME}/`);
+  } catch (err) {
+    console.error("\u274C Backup failed \u2014 aborting update to protect your data.");
+    if (err instanceof Error) console.error(`   ${err.message}`);
+    process.exit(1);
+  }
+  console.log("\u{1F9F9} Clearing npm cache...");
   try {
     execSync12("npm cache clean --force", { stdio: "pipe" });
     console.log("   Done");
@@ -15587,8 +15775,9 @@ async function runUpdate(cliArgs) {
       timeout: 3e5
     });
   } catch (err) {
-    console.error("\n\u274C Update failed.");
-    console.error("   Try manually: npm install -g @askexenow/exe-os@latest");
+    console.error("\n\u274C Update failed. Your backup is preserved.");
+    console.error(`   Restore with: exe-os update --restore`);
+    console.error("   Or try manually: npm install -g @askexenow/exe-os@latest");
     if (err instanceof Error && err.message) {
       console.error(`   Error: ${err.message.split("\n")[0]}`);
     }
@@ -15607,30 +15796,38 @@ async function runUpdate(cliArgs) {
     }
   }
   const remoteVersion = result.remoteVersion;
+  const updateSucceeded = newVersion !== result.localVersion;
   if (newVersion === remoteVersion) {
     console.log(`
 \u2705 Updated to v${newVersion}`);
-  } else if (newVersion !== result.localVersion) {
+  } else if (updateSucceeded) {
     console.log(`
 \u2705 Updated to v${newVersion} (latest: v${remoteVersion})`);
   } else {
     console.log(`
 \u26A0\uFE0F  Version unchanged (v${newVersion}). npm cache may be stale.`);
+    console.log("   Backup preserved. Restore with: exe-os update --restore");
     console.log("   Try: npm cache clean --force && npm install -g @askexenow/exe-os@latest");
   }
+  if (updateSucceeded) {
+    try {
+      await deleteBackup();
+    } catch {
+    }
+  }
   console.log("   Hooks re-wired, daemon restarted automatically.");
   console.log("");
   console.log("   \x1B[33m\u26A1 Run /mcp in each active Claude Code session to pick up new tools.\x1B[0m");
   console.log("   \x1B[2m(MCP servers can't hot-reload \u2014 Claude Code needs to reconnect them.)\x1B[0m");
   try {
-    const { existsSync: exists, readFileSync: readFile8 } = await import("fs");
+    const { existsSync: exists, readFileSync: readFile9 } = await import("fs");
     const p = await import("path");
     const { homedir: home } = await import("os");
     const exeDir = p.default.join(home(), ".exe-os");
     const licKeyPath = p.default.join(exeDir, "license.key");
     const configPath = p.default.join(exeDir, "config.json");
     if (!exists(licKeyPath) && exists(configPath)) {
-      const cfg = JSON.parse(readFile8(configPath, "utf8"));
+      const cfg = JSON.parse(readFile9(configPath, "utf8"));
       const cloud = cfg.cloud;
       if (cloud?.apiKey) {
         const { mirrorLicenseKey: mirrorLicenseKey2 } = await Promise.resolve().then(() => (init_license(), license_exports));
@@ -15646,6 +15843,7 @@ var init_update = __esm({
   "src/bin/update.ts"() {
     "use strict";
     init_is_main();
+    init_update_backup();
     init_update_check();
     init_update_check();
     if (isMainModule(import.meta.url) && process.argv[1]?.includes("update")) {
@@ -20015,8 +20213,8 @@ var init_ErrorOverview = __esm({
     "use strict";
     init_Box();
     init_Text();
-    cleanupPath = (path46) => {
-      return path46?.replace(`file://${cwd()}/`, "");
+    cleanupPath = (path47) => {
+      return path47?.replace(`file://${cwd()}/`, "");
     };
     stackUtils = new StackUtils({
       cwd: cwd(),
@@ -21434,8 +21632,8 @@ var init_parse_keypress = __esm({
       57453: "isoLevel3Shift",
       57454: "isoLevel5Shift"
     };
-    isValidCodepoint = (cp) => cp >= 0 && cp <= 1114111 && !(cp >= 55296 && cp <= 57343);
-    safeFromCodePoint = (cp) => isValidCodepoint(cp) ? String.fromCodePoint(cp) : "?";
+    isValidCodepoint = (cp2) => cp2 >= 0 && cp2 <= 1114111 && !(cp2 >= 55296 && cp2 <= 57343);
+    safeFromCodePoint = (cp2) => isValidCodepoint(cp2) ? String.fromCodePoint(cp2) : "?";
     parseKittyKeypress = (s) => {
       const match = kittyKeyRe.exec(s);
       if (!match)
@@ -21449,7 +21647,7 @@ var init_parse_keypress = __esm({
       }
       let text;
       if (textField) {
-        text = textField.split(":").map((cp) => safeFromCodePoint(parseInt(cp, 10))).join("");
+        text = textField.split(":").map((cp2) => safeFromCodePoint(parseInt(cp2, 10))).join("");
       }
       let name;
       let isPrintable;
@@ -22424,11 +22622,11 @@ function Footer() {
       } catch {
       }
       try {
-        const { existsSync: existsSync32 } = await import("fs");
+        const { existsSync: existsSync33 } = await import("fs");
         const { join } = await import("path");
         const home = process.env.HOME ?? "";
         const pidPath = join(home, ".exe-os", "exed.pid");
-        setDaemon(existsSync32(pidPath) ? "running" : "stopped");
+        setDaemon(existsSync33(pidPath) ? "running" : "stopped");
       } catch {
         setDaemon("unknown");
       }
@@ -24479,10 +24677,10 @@ var init_hooks = __esm({
 });
 
 // src/runtime/safety-checks.ts
-import path35 from "path";
-import os17 from "os";
+import path36 from "path";
+import os18 from "os";
 function checkPathSafety(filePath) {
-  const resolved = path35.resolve(filePath);
+  const resolved = path36.resolve(filePath);
   for (const { pattern, reason } of BYPASS_IMMUNE_PATTERNS) {
     const matches = typeof pattern === "function" ? pattern(resolved) : pattern.test(resolved);
     if (matches) {
@@ -24492,7 +24690,7 @@ function checkPathSafety(filePath) {
   return { safe: true, bypassImmune: true };
 }
 function checkReadPathSafety(filePath) {
-  const resolved = path35.resolve(filePath);
+  const resolved = path36.resolve(filePath);
   const credPatterns = BYPASS_IMMUNE_PATTERNS.filter(
     (p) => typeof p.pattern !== "function" && (p.reason.includes("secrets") || p.reason.includes("Private key") || p.reason.includes("Credential"))
   );
@@ -24507,7 +24705,7 @@ var HOME, BYPASS_IMMUNE_PATTERNS;
 var init_safety_checks = __esm({
   "src/runtime/safety-checks.ts"() {
     "use strict";
-    HOME = os17.homedir();
+    HOME = os18.homedir();
     BYPASS_IMMUNE_PATTERNS = [
       {
         pattern: /\/\.git\/hooks\//,
@@ -24518,11 +24716,11 @@ var init_safety_checks = __esm({
         reason: "Git config can set hooks and command execution"
       },
       {
-        pattern: (p) => p.startsWith(path35.join(HOME, ".claude")),
+        pattern: (p) => p.startsWith(path36.join(HOME, ".claude")),
         reason: "Claude configuration files are protected"
       },
       {
-        pattern: (p) => p.startsWith(path35.join(HOME, ".exe-os")),
+        pattern: (p) => p.startsWith(path36.join(HOME, ".exe-os")),
         reason: "exe-os configuration files are protected"
       },
       {
@@ -24539,7 +24737,7 @@ var init_safety_checks = __esm({
       },
       {
         pattern: (p) => {
-          const name = path35.basename(p);
+          const name = path36.basename(p);
           return [".bashrc", ".zshrc", ".profile", ".bash_profile", ".zprofile", ".zshenv"].includes(name);
         },
         reason: "Shell configuration files can execute arbitrary code on login"
@@ -24566,7 +24764,7 @@ __export(file_read_exports, {
   FileReadTool: () => FileReadTool
 });
 import fs3 from "fs/promises";
-import path36 from "path";
+import path37 from "path";
 import { z } from "zod";
 function isBinary(buf) {
   for (let i = 0; i < buf.length; i++) {
@@ -24602,7 +24800,7 @@ var init_file_read = __esm({
         return { behavior: "allow" };
       },
       async call(input, context) {
-        const filePath = path36.isAbsolute(input.file_path) ? input.file_path : path36.resolve(context.cwd, input.file_path);
+        const filePath = path37.isAbsolute(input.file_path) ? input.file_path : path37.resolve(context.cwd, input.file_path);
         let stat2;
         try {
           stat2 = await fs3.stat(filePath);
@@ -24642,7 +24840,7 @@ __export(glob_exports, {
   GlobTool: () => GlobTool
 });
 import fs4 from "fs/promises";
-import path37 from "path";
+import path38 from "path";
 import { z as z2 } from "zod";
 async function walkDir(dir, maxDepth = 10) {
   const results = [];
@@ -24658,7 +24856,7 @@ async function walkDir(dir, maxDepth = 10) {
       if (entry.isDirectory() && (entry.name === "node_modules" || entry.name === ".git")) {
         continue;
       }
-      const fullPath = path37.join(current, entry.name);
+      const fullPath = path38.join(current, entry.name);
       if (entry.isDirectory()) {
         await walk(fullPath, depth + 1);
       } else {
@@ -24692,11 +24890,11 @@ var init_glob = __esm({
       inputSchema: inputSchema2,
       isReadOnly: true,
       async call(input, context) {
-        const baseDir = input.path ? path37.isAbsolute(input.path) ? input.path : path37.resolve(context.cwd, input.path) : context.cwd;
+        const baseDir = input.path ? path38.isAbsolute(input.path) ? input.path : path38.resolve(context.cwd, input.path) : context.cwd;
         try {
           const entries = await walkDir(baseDir);
           const matched = entries.filter(
-            (e) => simpleGlobMatch(path37.relative(baseDir, e.path), input.pattern)
+            (e) => simpleGlobMatch(path38.relative(baseDir, e.path), input.pattern)
           );
           matched.sort((a, b) => b.mtime - a.mtime);
           if (matched.length === 0) {
@@ -24722,7 +24920,7 @@ __export(grep_exports, {
 });
 import { spawn as spawn2 } from "child_process";
 import fs5 from "fs/promises";
-import path38 from "path";
+import path39 from "path";
 import { z as z3 } from "zod";
 function runRipgrep(input, searchPath, context) {
   return new Promise((resolve, reject) => {
@@ -24776,7 +24974,7 @@ async function nodeGrep(input, searchPath) {
     }
     for (const entry of entries) {
       if (entry.name === "node_modules" || entry.name === ".git") continue;
-      const fullPath = path38.join(dir, entry.name);
+      const fullPath = path39.join(dir, entry.name);
       if (entry.isDirectory()) {
         await walk(fullPath);
       } else {
@@ -24822,7 +25020,7 @@ var init_grep = __esm({
       inputSchema: inputSchema3,
       isReadOnly: true,
       async call(input, context) {
-        const searchPath = input.path ? path38.isAbsolute(input.path) ? input.path : path38.resolve(context.cwd, input.path) : context.cwd;
+        const searchPath = input.path ? path39.isAbsolute(input.path) ? input.path : path39.resolve(context.cwd, input.path) : context.cwd;
         try {
           const result = await runRipgrep(input, searchPath, context);
           return result;
@@ -24847,7 +25045,7 @@ __export(file_write_exports, {
   FileWriteTool: () => FileWriteTool
 });
 import fs6 from "fs/promises";
-import path39 from "path";
+import path40 from "path";
 import { z as z4 } from "zod";
 var inputSchema4, FileWriteTool;
 var init_file_write = __esm({
@@ -24875,8 +25073,8 @@ var init_file_write = __esm({
         return { behavior: "allow" };
       },
       async call(input, context) {
-        const filePath = path39.isAbsolute(input.file_path) ? input.file_path : path39.resolve(context.cwd, input.file_path);
-        const dir = path39.dirname(filePath);
+        const filePath = path40.isAbsolute(input.file_path) ? input.file_path : path40.resolve(context.cwd, input.file_path);
+        const dir = path40.dirname(filePath);
         await fs6.mkdir(dir, { recursive: true });
         await fs6.writeFile(filePath, input.content, "utf-8");
         return {
@@ -24894,7 +25092,7 @@ __export(file_edit_exports, {
   FileEditTool: () => FileEditTool
 });
 import fs7 from "fs/promises";
-import path40 from "path";
+import path41 from "path";
 import { z as z5 } from "zod";
 function countOccurrences(haystack, needle) {
   let count = 0;
@@ -24935,7 +25133,7 @@ var init_file_edit = __esm({
         return { behavior: "allow" };
       },
       async call(input, context) {
-        const filePath = path40.isAbsolute(input.file_path) ? input.file_path : path40.resolve(context.cwd, input.file_path);
+        const filePath = path41.isAbsolute(input.file_path) ? input.file_path : path41.resolve(context.cwd, input.file_path);
         let content;
         try {
           content = await fs7.readFile(filePath, "utf-8");
@@ -25177,7 +25375,7 @@ var init_bash = __esm({
 // src/tui/views/CommandCenter.tsx
 import { useState as useState6, useEffect as useEffect8, useMemo as useMemo4, useCallback as useCallback4, useRef as useRef4 } from "react";
 import TextInput from "ink-text-input";
-import path41 from "path";
+import path42 from "path";
 import { homedir as homedir6 } from "os";
 import { Fragment as Fragment2, jsx as jsx7, jsxs as jsxs5 } from "react/jsx-runtime";
 function CommandCenterView({
@@ -25212,13 +25410,13 @@ function CommandCenterView({
         const { createPermissionsFromPreset: createPermissionsFromPreset2, EMPLOYEE_PERMISSIONS: EMPLOYEE_PERMISSIONS2 } = await Promise.resolve().then(() => (init_permissions(), permissions_exports));
         const { getPresetByRole: getPresetByRole2 } = await Promise.resolve().then(() => (init_permission_presets(), permission_presets_exports));
         const { createDefaultHooks: createDefaultHooks2 } = await Promise.resolve().then(() => (init_hooks(), hooks_exports));
-        const { readFileSync: readFileSync28, existsSync: existsSync32 } = await import("fs");
+        const { readFileSync: readFileSync28, existsSync: existsSync33 } = await import("fs");
         const { join } = await import("path");
         const { homedir: homedir8 } = await import("os");
         const configPath = join(homedir8(), ".exe-os", "config.json");
         let failoverChain = ["anthropic", "opencode", "gemini", "openai"];
         let providerConfigs = {};
-        if (existsSync32(configPath)) {
+        if (existsSync33(configPath)) {
           try {
             const raw = JSON.parse(readFileSync28(configPath, "utf8"));
             if (Array.isArray(raw.failoverChain)) failoverChain = raw.failoverChain;
@@ -25426,7 +25624,7 @@ function CommandCenterView({
       const demoEntries = DEMO_PROJECTS.map((p) => ({
         projectName: p.projectName,
         exeSession: p.exeSession,
-        projectDir: path41.join(homedir6(), p.projectName),
+        projectDir: path42.join(homedir6(), p.projectName),
         employeeCount: p.employees.length,
         activeCount: p.employees.filter((e) => e.status === "active").length,
         memoryCount: p.employees.length * 4e3,
@@ -25464,7 +25662,7 @@ function CommandCenterView({
         const { listSessions: listSessions2 } = await Promise.resolve().then(() => (init_session_registry(), session_registry_exports));
         const { listTmuxSessions: listTmuxSessions2, inTmux: inTmux2 } = await Promise.resolve().then(() => (init_tmux_status(), tmux_status_exports));
         const { loadEmployees: loadEmployees2 } = await Promise.resolve().then(() => (init_employees(), employees_exports));
-        const { existsSync: existsSync32 } = await import("fs");
+        const { existsSync: existsSync33 } = await import("fs");
         const { join } = await import("path");
         const client = getClient2();
         if (!client) {
@@ -25535,7 +25733,7 @@ function CommandCenterView({
           }
           const memoryCount = memoryCounts.get(name) ?? 0;
           const openTaskCount = openTaskCounts.get(name) ?? 0;
-          const hasGit = projectDir ? existsSync32(join(projectDir, ".git")) : false;
+          const hasGit = projectDir ? existsSync33(join(projectDir, ".git")) : false;
           const type = hasGit ? "code" : memoryCount > 0 ? "code" : "automation";
           projectList.push({
             projectName: name,
@@ -25560,7 +25758,7 @@ function CommandCenterView({
         setHealth((h) => ({ ...h, memories: Number(totalResult.rows[0]?.cnt ?? 0) }));
         try {
           const pidPath = join(process.env.HOME ?? "", ".exe-os", "exed.pid");
-          setHealth((h) => ({ ...h, daemon: existsSync32(pidPath) ? "running" : "stopped" }));
+          setHealth((h) => ({ ...h, daemon: existsSync33(pidPath) ? "running" : "stopped" }));
         } catch {
         }
         const activityResult = await client.execute(
@@ -26430,7 +26628,7 @@ var init_useOrchestrator = __esm({
 
 // src/tui/views/Sessions.tsx
 import React19, { useState as useState9, useEffect as useEffect11, useCallback as useCallback6 } from "react";
-import path42 from "path";
+import path43 from "path";
 import { homedir as homedir7 } from "os";
 import { jsx as jsx9, jsxs as jsxs7 } from "react/jsx-runtime";
 function isCoordinatorEntry(entry) {
@@ -26468,7 +26666,7 @@ function SessionsView({
     if (demo) {
       setProjects(DEMO_PROJECTS.map((p) => ({
         ...p,
-        projectDir: path42.join(homedir7(), p.projectName),
+        projectDir: path43.join(homedir7(), p.projectName),
         employees: p.employees.map((e) => ({ ...e, attached: e.status === "active" }))
       })));
       return;
@@ -27683,11 +27881,11 @@ async function loadGatewayConfig() {
     state.running = false;
   }
   try {
-    const { existsSync: existsSync32, readFileSync: readFileSync28 } = await import("fs");
+    const { existsSync: existsSync33, readFileSync: readFileSync28 } = await import("fs");
     const { join } = await import("path");
     const home = process.env.HOME ?? "";
     const configPath = join(home, ".exe-os", "gateway.json");
-    if (existsSync32(configPath)) {
+    if (existsSync33(configPath)) {
       const raw = JSON.parse(readFileSync28(configPath, "utf8"));
       state.port = raw.port ?? 3100;
       state.gatewayUrl = raw.gatewayUrl ?? "";
@@ -28286,11 +28484,11 @@ function TeamView({ onBack, onViewSessions }) {
         setMembers(teamData);
         setDbError(null);
         try {
-          const { existsSync: existsSync32, readFileSync: readFileSync28 } = await import("fs");
+          const { existsSync: existsSync33, readFileSync: readFileSync28 } = await import("fs");
           const { join } = await import("path");
           const home = process.env.HOME ?? "";
           const gatewayConfig = join(home, ".exe-os", "gateway.json");
-          if (existsSync32(gatewayConfig)) {
+          if (existsSync33(gatewayConfig)) {
             const raw = JSON.parse(readFileSync28(gatewayConfig, "utf8"));
             if (raw.agents && raw.agents.length > 0) {
               setExternals(raw.agents.map((a) => ({
@@ -28471,8 +28669,8 @@ __export(wiki_client_exports, {
   listDocuments: () => listDocuments,
   listWorkspaces: () => listWorkspaces
 });
-async function wikiFetch(config, path46, method = "GET", body) {
-  const url = `${config.baseUrl}/api/v1${path46}`;
+async function wikiFetch(config, path47, method = "GET", body) {
+  const url = `${config.baseUrl}/api/v1${path47}`;
   const headers = {
     Authorization: `Bearer ${config.apiKey}`,
     "Content-Type": "application/json"
@@ -28505,7 +28703,7 @@ async function wikiFetch(config, path46, method = "GET", body) {
       }
     }
     if (!response.ok) {
-      throw new Error(`Wiki API ${method} ${path46}: ${response.status} ${response.statusText}`);
+      throw new Error(`Wiki API ${method} ${path47}: ${response.status} ${response.statusText}`);
     }
     return response.json();
   } finally {
@@ -29099,12 +29297,12 @@ function SettingsView({ onBack }) {
     }
     setProviders(providerList);
     try {
-      const { existsSync: existsSync32 } = await import("fs");
+      const { existsSync: existsSync33 } = await import("fs");
       const { join } = await import("path");
       const { loadConfig: loadConfig2 } = await Promise.resolve().then(() => (init_config(), config_exports));
       const cfg = await loadConfig2();
       const home = process.env.HOME ?? "";
-      const hasKey = existsSync32(join(home, ".exe-os", "master.key"));
+      const hasKey = existsSync33(join(home, ".exe-os", "master.key"));
       if (cfg.cloud) {
         setCloud({
           configured: true,
@@ -29117,7 +29315,7 @@ function SettingsView({ onBack }) {
       const pidPath = join(home, ".exe-os", "exed.pid");
       let daemon = "unknown";
       try {
-        daemon = existsSync32(pidPath) ? "running" : "stopped";
+        daemon = existsSync33(pidPath) ? "running" : "stopped";
       } catch {
       }
       let version = "unknown";
@@ -29932,18 +30130,18 @@ __export(installer_exports2, {
   runOpenCodeInstaller: () => runOpenCodeInstaller,
   verifyOpenCodeHooks: () => verifyOpenCodeHooks
 });
-import { readFile as readFile6, writeFile as writeFile7, mkdir as mkdir7 } from "fs/promises";
-import { existsSync as existsSync29, readFileSync as readFileSync26 } from "fs";
-import path43 from "path";
-import os18 from "os";
-async function registerOpenCodeMcp(packageRoot, homeDir = os18.homedir()) {
-  const configDir = path43.join(homeDir, ".config", "opencode");
-  const configPath = path43.join(configDir, "opencode.json");
-  await mkdir7(configDir, { recursive: true });
+import { readFile as readFile7, writeFile as writeFile8, mkdir as mkdir8 } from "fs/promises";
+import { existsSync as existsSync30, readFileSync as readFileSync26 } from "fs";
+import path44 from "path";
+import os19 from "os";
+async function registerOpenCodeMcp(packageRoot, homeDir = os19.homedir()) {
+  const configDir = path44.join(homeDir, ".config", "opencode");
+  const configPath = path44.join(configDir, "opencode.json");
+  await mkdir8(configDir, { recursive: true });
   let config = {};
-  if (existsSync29(configPath)) {
+  if (existsSync30(configPath)) {
     try {
-      config = JSON.parse(await readFile6(configPath, "utf-8"));
+      config = JSON.parse(await readFile7(configPath, "utf-8"));
     } catch {
       config = {};
     }
@@ -29953,7 +30151,7 @@ async function registerOpenCodeMcp(packageRoot, homeDir = os18.homedir()) {
   }
   const newEntry = {
     type: "local",
-    command: ["node", path43.join(packageRoot, "dist", "mcp", "server.js")],
+    command: ["node", path44.join(packageRoot, "dist", "mcp", "server.js")],
     enabled: true
   };
   const current = config.mcp["exe-os"];
@@ -29964,37 +30162,37 @@ async function registerOpenCodeMcp(packageRoot, homeDir = os18.homedir()) {
   if (!config.$schema) {
     config.$schema = "https://opencode.ai/config.json";
   }
-  await writeFile7(configPath, JSON.stringify(config, null, 2) + "\n");
+  await writeFile8(configPath, JSON.stringify(config, null, 2) + "\n");
   return true;
 }
-async function installOpenCodePlugin(packageRoot, homeDir = os18.homedir()) {
-  const pluginDir = path43.join(homeDir, ".config", "opencode", "plugins");
-  const pluginPath = path43.join(pluginDir, "exe-os.mjs");
-  await mkdir7(pluginDir, { recursive: true });
+async function installOpenCodePlugin(packageRoot, homeDir = os19.homedir()) {
+  const pluginDir = path44.join(homeDir, ".config", "opencode", "plugins");
+  const pluginPath = path44.join(pluginDir, "exe-os.mjs");
+  await mkdir8(pluginDir, { recursive: true });
   const pluginContent = PLUGIN_TEMPLATE.replace(
     /__PACKAGE_ROOT__/g,
     packageRoot.replace(/\\/g, "\\\\")
   );
-  if (existsSync29(pluginPath)) {
-    const existing = await readFile6(pluginPath, "utf-8");
+  if (existsSync30(pluginPath)) {
+    const existing = await readFile7(pluginPath, "utf-8");
     if (existing === pluginContent) {
       return false;
     }
   }
-  await writeFile7(pluginPath, pluginContent);
+  await writeFile8(pluginPath, pluginContent);
   return true;
 }
-function verifyOpenCodeHooks(homeDir = os18.homedir()) {
-  const configPath = path43.join(homeDir, ".config", "opencode", "opencode.json");
-  const pluginPath = path43.join(homeDir, ".config", "opencode", "plugins", "exe-os.mjs");
-  if (!existsSync29(configPath)) return false;
+function verifyOpenCodeHooks(homeDir = os19.homedir()) {
+  const configPath = path44.join(homeDir, ".config", "opencode", "opencode.json");
+  const pluginPath = path44.join(homeDir, ".config", "opencode", "plugins", "exe-os.mjs");
+  if (!existsSync30(configPath)) return false;
   try {
     const config = JSON.parse(readFileSync26(configPath, "utf-8"));
     if (!config.mcp?.["exe-os"]?.enabled) return false;
   } catch {
     return false;
   }
-  if (!existsSync29(pluginPath)) return false;
+  if (!existsSync30(pluginPath)) return false;
   return true;
 }
 async function runOpenCodeInstaller(homeDir) {
@@ -30023,25 +30221,26 @@ var installer_exports3 = {};
 __export(installer_exports3, {
   installCodexStatusLine: () => installCodexStatusLine,
   mergeCodexHooks: () => mergeCodexHooks,
+  registerCodexMcpServer: () => registerCodexMcpServer,
   runCodexInstaller: () => runCodexInstaller,
   verifyCodexHooks: () => verifyCodexHooks
 });
-import { readFile as readFile7, writeFile as writeFile8, mkdir as mkdir8 } from "fs/promises";
-import { existsSync as existsSync30 } from "fs";
-import path44 from "path";
-import os19 from "os";
-async function mergeCodexHooks(packageRoot, homeDir = os19.homedir()) {
-  const codexDir = path44.join(homeDir, ".codex");
-  const hooksPath = path44.join(codexDir, "hooks.json");
-  const logsDir = path44.join(homeDir, ".exe-os", "logs");
-  const hookLogPath = path44.join(logsDir, "hooks.log");
+import { readFile as readFile8, writeFile as writeFile9, mkdir as mkdir9 } from "fs/promises";
+import { existsSync as existsSync31 } from "fs";
+import path45 from "path";
+import os20 from "os";
+async function mergeCodexHooks(packageRoot, homeDir = os20.homedir()) {
+  const codexDir = path45.join(homeDir, ".codex");
+  const hooksPath = path45.join(codexDir, "hooks.json");
+  const logsDir = path45.join(homeDir, ".exe-os", "logs");
+  const hookLogPath = path45.join(logsDir, "hooks.log");
   const logSuffix = ` 2>> "${hookLogPath}"`;
-  await mkdir8(codexDir, { recursive: true });
-  await mkdir8(logsDir, { recursive: true });
+  await mkdir9(codexDir, { recursive: true });
+  await mkdir9(logsDir, { recursive: true });
   let hooksJson = {};
-  if (existsSync30(hooksPath)) {
+  if (existsSync31(hooksPath)) {
     try {
-      hooksJson = JSON.parse(await readFile7(hooksPath, "utf-8"));
+      hooksJson = JSON.parse(await readFile8(hooksPath, "utf-8"));
     } catch {
       hooksJson = {};
     }
@@ -30056,7 +30255,7 @@ async function mergeCodexHooks(packageRoot, homeDir = os19.homedir()) {
         hooks: [
           {
             type: "command",
-            command: `node "${path44.join(packageRoot, "dist", "hooks", "session-start.js")}"${logSuffix}`,
+            command: `node "${path45.join(packageRoot, "dist", "hooks", "session-start.js")}"${logSuffix}`,
             timeout: 30,
             statusMessage: "exe-os: loading memory brief"
           }
@@ -30071,11 +30270,11 @@ async function mergeCodexHooks(packageRoot, homeDir = os19.homedir()) {
         hooks: [
           {
             type: "command",
-            command: `node "${path44.join(packageRoot, "dist", "hooks", "ingest.js")}"${logSuffix}`
+            command: `node "${path45.join(packageRoot, "dist", "hooks", "ingest.js")}"${logSuffix}`
           },
           {
             type: "command",
-            command: `node "${path44.join(packageRoot, "dist", "hooks", "error-recall.js")}"${logSuffix}`
+            command: `node "${path45.join(packageRoot, "dist", "hooks", "error-recall.js")}"${logSuffix}`
           }
         ]
       },
@@ -30087,11 +30286,11 @@ async function mergeCodexHooks(packageRoot, homeDir = os19.homedir()) {
         hooks: [
           {
             type: "command",
-            command: `node "${path44.join(packageRoot, "dist", "hooks", "prompt-submit.js")}"${logSuffix}`
+            command: `node "${path45.join(packageRoot, "dist", "hooks", "prompt-submit.js")}"${logSuffix}`
           },
           {
             type: "command",
-            command: `node "${path44.join(packageRoot, "dist", "hooks", "exe-heartbeat-hook.js")}"${logSuffix}`,
+            command: `node "${path45.join(packageRoot, "dist", "hooks", "exe-heartbeat-hook.js")}"${logSuffix}`,
             timeout: 5
           }
         ]
@@ -30104,7 +30303,7 @@ async function mergeCodexHooks(packageRoot, homeDir = os19.homedir()) {
         hooks: [
           {
             type: "command",
-            command: `node "${path44.join(packageRoot, "dist", "hooks", "stop.js")}"${logSuffix}`
+            command: `node "${path45.join(packageRoot, "dist", "hooks", "stop.js")}"${logSuffix}`
           }
         ]
       },
@@ -30117,7 +30316,7 @@ async function mergeCodexHooks(packageRoot, homeDir = os19.homedir()) {
         hooks: [
           {
             type: "command",
-            command: `node "${path44.join(packageRoot, "dist", "hooks", "pre-tool-use.js")}"${logSuffix}`
+            command: `node "${path45.join(packageRoot, "dist", "hooks", "pre-tool-use.js")}"${logSuffix}`
           }
         ]
       },
@@ -30145,12 +30344,12 @@ async function mergeCodexHooks(packageRoot, homeDir = os19.homedir()) {
       added++;
     }
   }
-  await writeFile8(hooksPath, JSON.stringify(hooksJson, null, 2) + "\n");
+  await writeFile9(hooksPath, JSON.stringify(hooksJson, null, 2) + "\n");
   return { added, skipped };
 }
-function verifyCodexHooks(homeDir = os19.homedir()) {
-  const hooksPath = path44.join(homeDir, ".codex", "hooks.json");
-  if (!existsSync30(hooksPath)) return false;
+function verifyCodexHooks(homeDir = os20.homedir()) {
+  const hooksPath = path45.join(homeDir, ".codex", "hooks.json");
+  if (!existsSync31(hooksPath)) return false;
   try {
     const hooksJson = JSON.parse(
       __require("fs").readFileSync(hooksPath, "utf-8")
@@ -30170,15 +30369,15 @@ function verifyCodexHooks(homeDir = os19.homedir()) {
     return false;
   }
 }
-async function installCodexStatusLine(homeDir = os19.homedir()) {
+async function installCodexStatusLine(homeDir = os20.homedir()) {
   const prefs = loadPreferences(homeDir);
   if (prefs.codexStatusLine === false) return "opted-out";
-  const codexDir = path44.join(homeDir, ".codex");
-  const configPath = path44.join(codexDir, "config.toml");
-  await mkdir8(codexDir, { recursive: true });
+  const codexDir = path45.join(homeDir, ".codex");
+  const configPath = path45.join(codexDir, "config.toml");
+  await mkdir9(codexDir, { recursive: true });
   let content = "";
-  if (existsSync30(configPath)) {
-    content = await readFile7(configPath, "utf-8");
+  if (existsSync31(configPath)) {
+    content = await readFile8(configPath, "utf-8");
     if (/\[tui\][\s\S]*?status_line\s*=/.test(content)) {
       return "already-configured";
     }
@@ -30191,14 +30390,55 @@ status_line = [${DEFAULT_CODEX_STATUS_LINE.map((s) => `"${s}"`).join(", ")}]`;
     const separator = content.length > 0 && !content.endsWith("\n") ? "\n\n" : content.length > 0 ? "\n" : "";
     content = content + separator + statusLineToml + "\n";
   }
-  await writeFile8(configPath, content);
+  await writeFile9(configPath, content);
   return "installed";
 }
+async function registerCodexMcpServer(packageRoot, homeDir = os20.homedir()) {
+  const codexDir = path45.join(homeDir, ".codex");
+  const configPath = path45.join(codexDir, "config.toml");
+  const serverJsPath = path45.join(packageRoot, "dist", "mcp", "server.js");
+  await mkdir9(codexDir, { recursive: true });
+  let content = "";
+  if (existsSync31(configPath)) {
+    content = await readFile8(configPath, "utf-8");
+  }
+  const sectionHeader = "[mcp_servers.exe-os]";
+  const headerIndex = content.indexOf(sectionHeader);
+  if (headerIndex !== -1) {
+    const afterHeader = content.slice(headerIndex + sectionHeader.length);
+    const nextSectionMatch = afterHeader.match(/\n\[(?!mcp_servers\.exe-os)/);
+    const sectionEnd = nextSectionMatch ? headerIndex + sectionHeader.length + nextSectionMatch.index : content.length;
+    const sectionContent = content.slice(headerIndex, sectionEnd);
+    if (sectionContent.includes(serverJsPath)) {
+      return "already-registered";
+    }
+    const newSection2 = `${sectionHeader}
+command = "node"
+args = ["${serverJsPath}"]
+`;
+    content = content.slice(0, headerIndex) + newSection2 + content.slice(sectionEnd);
+    await writeFile9(configPath, content);
+    return "updated";
+  }
+  const newSection = `[mcp_servers.exe-os]
+command = "node"
+args = ["${serverJsPath}"]
+`;
+  const separator = content.length > 0 && !content.endsWith("\n") ? "\n\n" : content.length > 0 ? "\n" : "";
+  content = content + separator + newSection;
+  await writeFile9(configPath, content);
+  return "registered";
+}
 async function runCodexInstaller(homeDir) {
   const packageRoot = resolvePackageRoot();
   const result = await mergeCodexHooks(packageRoot, homeDir);
   process.stderr.write(
     `[exe-os] Codex hooks: ${result.added} added, ${result.skipped} unchanged
+`
+  );
+  const mcpResult = await registerCodexMcpServer(packageRoot, homeDir);
+  process.stderr.write(
+    `[exe-os] Codex MCP server: ${mcpResult}
 `
   );
   const statusResult = await installCodexStatusLine(homeDir);
@@ -30225,13 +30465,13 @@ var init_installer3 = __esm({
 });
 
 // src/bin/cli.ts
-import { existsSync as existsSync31, readFileSync as readFileSync27, writeFileSync as writeFileSync20, readdirSync as readdirSync9, rmSync } from "fs";
-import path45 from "path";
-import os20 from "os";
+import { existsSync as existsSync32, readFileSync as readFileSync27, writeFileSync as writeFileSync20, readdirSync as readdirSync9, rmSync } from "fs";
+import path46 from "path";
+import os21 from "os";
 var args = process.argv.slice(2);
 if (args.includes("--version") || args.includes("-v")) {
   try {
-    const pkgPath = path45.join(path45.dirname(new URL(import.meta.url).pathname), "..", "..", "package.json");
+    const pkgPath = path46.join(path46.dirname(new URL(import.meta.url).pathname), "..", "..", "package.json");
     const pkg = JSON.parse(readFileSync27(pkgPath, "utf8"));
     console.log(pkg.version);
   } catch {
@@ -30396,9 +30636,9 @@ ID: ${result.id}`);
   });
   await init_App2().then(() => App_exports);
 } else {
-  const claudeDir = path45.join(os20.homedir(), ".claude");
-  const settingsPath = path45.join(claudeDir, "settings.json");
-  const hasClaudeCode = existsSync31(settingsPath) && (() => {
+  const claudeDir = path46.join(os21.homedir(), ".claude");
+  const settingsPath = path46.join(claudeDir, "settings.json");
+  const hasClaudeCode = existsSync32(settingsPath) && (() => {
     try {
       const raw = readFileSync27(settingsPath, "utf8");
       return raw.includes("exe-os") || raw.includes("exe-mem");
@@ -30410,8 +30650,8 @@ ID: ${result.id}`);
     const { DEFAULT_COORDINATOR_TEMPLATE_NAME: DEFAULT_COORDINATOR_TEMPLATE_NAME2 } = await Promise.resolve().then(() => (init_employees(), employees_exports));
     let cooName = DEFAULT_COORDINATOR_TEMPLATE_NAME2;
     try {
-      const rosterPath = path45.join(os20.homedir(), ".exe-os", "exe-employees.json");
-      if (existsSync31(rosterPath)) {
+      const rosterPath = path46.join(os21.homedir(), ".exe-os", "exe-employees.json");
+      if (existsSync32(rosterPath)) {
         const roster = JSON.parse(readFileSync27(rosterPath, "utf8"));
         const coo = roster.find((e) => e.role === "COO");
         if (coo) cooName = coo.name;
@@ -30476,11 +30716,11 @@ async function runCodexInstall() {
   }
 }
 async function runClaudeCheck() {
-  const claudeDir = path45.join(os20.homedir(), ".claude");
-  const settingsPath = path45.join(claudeDir, "settings.json");
-  const claudeJsonPath = path45.join(os20.homedir(), ".claude.json");
+  const claudeDir = path46.join(os21.homedir(), ".claude");
+  const settingsPath = path46.join(claudeDir, "settings.json");
+  const claudeJsonPath = path46.join(os21.homedir(), ".claude.json");
   let ok = true;
-  if (existsSync31(settingsPath)) {
+  if (existsSync32(settingsPath)) {
     let settings;
     try {
       settings = JSON.parse(readFileSync27(settingsPath, "utf8"));
@@ -30509,7 +30749,7 @@ async function runClaudeCheck() {
     console.log("\x1B[31m\u2717\x1B[0m settings.json not found");
     ok = false;
   }
-  if (existsSync31(claudeJsonPath)) {
+  if (existsSync32(claudeJsonPath)) {
     let claudeJson;
     try {
       claudeJson = JSON.parse(readFileSync27(claudeJsonPath, "utf8"));
@@ -30531,8 +30771,8 @@ async function runClaudeCheck() {
     console.log("\x1B[31m\u2717\x1B[0m claude.json not found");
     ok = false;
   }
-  const skillsDir = path45.join(claudeDir, "skills");
-  if (existsSync31(skillsDir)) {
+  const skillsDir = path46.join(claudeDir, "skills");
+  if (existsSync32(skillsDir)) {
     console.log("\x1B[32m\u2713\x1B[0m Slash skills directory exists");
   } else {
     console.log("\x1B[31m\u2717\x1B[0m Slash skills directory missing");
@@ -30548,15 +30788,15 @@ async function runClaudeCheck() {
 async function runClaudeUninstall(flags = []) {
   const dryRun = flags.includes("--dry-run");
   const purge = flags.includes("--purge");
-  const homeDir = os20.homedir();
-  const claudeDir = path45.join(homeDir, ".claude");
-  const settingsPath = path45.join(claudeDir, "settings.json");
-  const claudeJsonPath = path45.join(homeDir, ".claude.json");
-  const exeOsDir = path45.join(homeDir, ".exe-os");
+  const homeDir = os21.homedir();
+  const claudeDir = path46.join(homeDir, ".claude");
+  const settingsPath = path46.join(claudeDir, "settings.json");
+  const claudeJsonPath = path46.join(homeDir, ".claude.json");
+  const exeOsDir = path46.join(homeDir, ".exe-os");
   let removed = 0;
   const log = (msg) => console.log(dryRun ? `[dry-run] ${msg}` : msg);
   let settings = {};
-  if (existsSync31(settingsPath)) {
+  if (existsSync32(settingsPath)) {
     try {
       settings = JSON.parse(readFileSync27(settingsPath, "utf8"));
     } catch {
@@ -30603,7 +30843,7 @@ async function runClaudeUninstall(flags = []) {
       removed++;
     }
   }
-  if (existsSync31(claudeJsonPath)) {
+  if (existsSync32(claudeJsonPath)) {
     const raw = readFileSync27(claudeJsonPath, "utf8");
     if (raw.length > 1e6) {
       console.error("claude.json exceeds 1 MB \u2014 skipping parse.");
@@ -30633,14 +30873,14 @@ async function runClaudeUninstall(flags = []) {
       }
     }
   }
-  const skillsDir = path45.join(claudeDir, "skills");
-  if (existsSync31(skillsDir)) {
+  const skillsDir = path46.join(claudeDir, "skills");
+  if (existsSync32(skillsDir)) {
     let skillCount = 0;
     try {
       const entries = readdirSync9(skillsDir);
       for (const entry of entries) {
         if (entry.startsWith("exe")) {
-          const fullPath = path45.join(skillsDir, entry);
+          const fullPath = path46.join(skillsDir, entry);
           if (!dryRun) rmSync(fullPath, { recursive: true, force: true });
           skillCount++;
         }
@@ -30652,8 +30892,8 @@ async function runClaudeUninstall(flags = []) {
       removed++;
     }
   }
-  const claudeMdPath = path45.join(claudeDir, "CLAUDE.md");
-  if (existsSync31(claudeMdPath)) {
+  const claudeMdPath = path46.join(claudeDir, "CLAUDE.md");
+  if (existsSync32(claudeMdPath)) {
     const content = readFileSync27(claudeMdPath, "utf8");
     const startMarker = "<!-- exe-os:orchestration-start -->";
     const endMarker = "<!-- exe-os:orchestration-end -->";
@@ -30666,14 +30906,14 @@ async function runClaudeUninstall(flags = []) {
       removed++;
     }
   }
-  const agentsDir = path45.join(claudeDir, "agents");
-  if (existsSync31(agentsDir)) {
+  const agentsDir = path46.join(claudeDir, "agents");
+  if (existsSync32(agentsDir)) {
     let agentCount = 0;
     try {
       const entries = readdirSync9(agentsDir).filter((f) => f.endsWith(".md"));
       let knownNames = /* @__PURE__ */ new Set();
-      const rosterPath = path45.join(exeOsDir, "exe-employees.json");
-      if (existsSync31(rosterPath)) {
+      const rosterPath = path46.join(exeOsDir, "exe-employees.json");
+      if (existsSync32(rosterPath)) {
         try {
           const roster = JSON.parse(readFileSync27(rosterPath, "utf8"));
           knownNames = new Set(roster.map((e) => e.name));
@@ -30683,7 +30923,7 @@ async function runClaudeUninstall(flags = []) {
       for (const entry of entries) {
         const name = entry.replace(/\.md$/, "");
         if (knownNames.has(name)) {
-          if (!dryRun) rmSync(path45.join(agentsDir, entry), { force: true });
+          if (!dryRun) rmSync(path46.join(agentsDir, entry), { force: true });
           agentCount++;
         }
       }
@@ -30694,14 +30934,14 @@ async function runClaudeUninstall(flags = []) {
       removed++;
     }
   }
-  const projectsDir = path45.join(claudeDir, "projects");
-  if (existsSync31(projectsDir)) {
+  const projectsDir = path46.join(claudeDir, "projects");
+  if (existsSync32(projectsDir)) {
     let projectCount = 0;
     try {
       const projects = readdirSync9(projectsDir);
       for (const proj of projects) {
-        const projSettings = path45.join(projectsDir, proj, "settings.json");
-        if (!existsSync31(projSettings)) continue;
+        const projSettings = path46.join(projectsDir, proj, "settings.json");
+        if (!existsSync32(projSettings)) continue;
         try {
           const pSettings = JSON.parse(readFileSync27(projSettings, "utf8"));
           let changed = false;
@@ -30737,18 +30977,18 @@ async function runClaudeUninstall(flags = []) {
     };
     const exeBinPath = findExeBin3();
     if (!exeBinPath) throw new Error("exe-os not found in PATH");
-    const binDir = path45.dirname(exeBinPath);
+    const binDir = path46.dirname(exeBinPath);
     let symlinkCount = 0;
-    const rosterPath = path45.join(exeOsDir, "exe-employees.json");
-    if (existsSync31(rosterPath)) {
+    const rosterPath = path46.join(exeOsDir, "exe-employees.json");
+    if (existsSync32(rosterPath)) {
       const roster = JSON.parse(readFileSync27(rosterPath, "utf8"));
       const { DEFAULT_COORDINATOR_TEMPLATE_NAME: DEFAULT_COORDINATOR_TEMPLATE_NAME2 } = await Promise.resolve().then(() => (init_employees(), employees_exports));
       const coordinatorName = roster.find((e) => e.role?.toLowerCase() === "coo")?.name ?? DEFAULT_COORDINATOR_TEMPLATE_NAME2;
       for (const emp of roster) {
         if (emp.name === coordinatorName) continue;
         for (const suffix of ["", "-opencode"]) {
-          const linkPath = path45.join(binDir, `${emp.name}${suffix}`);
-          if (existsSync31(linkPath)) {
+          const linkPath = path46.join(binDir, `${emp.name}${suffix}`);
+          if (existsSync32(linkPath)) {
             if (!dryRun) rmSync(linkPath, { force: true });
             symlinkCount++;
           }
@@ -30761,7 +31001,7 @@ async function runClaudeUninstall(flags = []) {
     }
   } catch {
   }
-  if (purge && existsSync31(exeOsDir)) {
+  if (purge && existsSync32(exeOsDir)) {
     if (!dryRun) {
       process.stdout.write("\x1B[33m\u26A0 This will delete all memories, identities, and agent data.\x1B[0m\n");
       process.stdout.write("  Removing ~/.exe-os...\n");
@@ -30786,7 +31026,7 @@ async function checkForUpdateOnBoot() {
     const config = await loadConfig2();
     if (!config.autoUpdate.checkOnBoot) return;
     const { checkForUpdate: checkForUpdate2 } = await Promise.resolve().then(() => (init_update(), update_exports));
-    const packageRoot = path45.resolve(
+    const packageRoot = path46.resolve(
       new URL("../..", import.meta.url).pathname
     );
     const result = checkForUpdate2(packageRoot);
@@ -30846,7 +31086,7 @@ async function runActivate(key) {
       const idTemplate = getIdentityTemplate(identityKey);
       if (idTemplate) {
         const idPath = identityPath2(name);
-        const dir = path45.dirname(idPath);
+        const dir = path46.dirname(idPath);
         if (!fs8.existsSync(dir)) fs8.mkdirSync(dir, { recursive: true });
         fs8.writeFileSync(idPath, idTemplate.replace(/^agent_id: \w+/m, `agent_id: ${name}`), "utf-8");
       }