@askexenow/exe-os 0.9.296 → 0.9.298

package/dist/bin/mcp-sessions.js

@@ -45,10 +45,10 @@ async function collectSessions() {
   const registryMap = new Map(registry.map((r) => [r.windowName, r]));
   const taskMap = /* @__PURE__ */ new Map();
   try {
-    const { fastDbInit } = await import("../fast-db-init-F3TDD5VV.js");
+    const { fastDbInit } = await import("../fast-db-init-CM4XPET2.js");
     await fastDbInit();
     const { getClient } = await import("../lib/database.js");
-    const { sessionScopeFilter } = await import("../task-scope-CVK6ISCZ.js");
+    const { sessionScopeFilter } = await import("../task-scope-AWFGZWPM.js");
     const client = getClient();
     const scope = sessionScopeFilter();
     const result = await client.execute({

package/dist/bin/orchestration-metrics.js

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import {
   fastDbInit
-} from "../chunk-KA26YTNU.js";
+} from "../chunk-CXEY5CE2.js";
 import {
   formatOrchestrationMetrics,
   getOrchestrationMetrics
-} from "../chunk-NLZHVIOP.js";
-import "../chunk-WUKHLCBE.js";
+} from "../chunk-G4VSF4DA.js";
+import "../chunk-I3IW6AAX.js";
 import "../chunk-2I23RPSI.js";
-import "../chunk-2E43UXRH.js";
+import "../chunk-2DWYR2LJ.js";
 import "../chunk-PNQDP3OA.js";
 import "../chunk-7HLWBYH7.js";
 import "../chunk-FXU7JOXK.js";

package/dist/bin/postgres-agentic-reflection-backfill.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   buildReflectionCheckpoint
-} from "../chunk-P6MUA4QU.js";
-import "../chunk-465PQFTH.js";
+} from "../chunk-MN7Q23PF.js";
+import "../chunk-7C4K7HSF.js";
 import {
   pgSslConfig
 } from "../chunk-EQSQ4HBW.js";

package/dist/bin/postgres-agentic-semantic-backfill.js

@@ -2,7 +2,7 @@
 import {
   inferSemanticLabel,
   stableId
-} from "../chunk-465PQFTH.js";
+} from "../chunk-7C4K7HSF.js";
 import {
   pgSslConfig
 } from "../chunk-EQSQ4HBW.js";

package/dist/bin/scan-tasks.js

@@ -1,29 +1,29 @@
 #!/usr/bin/env node
 import {
   queryTaskRows
-} from "../chunk-K5ZO532Q.js";
-import "../chunk-JVHHXRFY.js";
+} from "../chunk-2QGG6GG3.js";
+import "../chunk-PQG2IQNN.js";
 import "../chunk-4JERP7NT.js";
 import "../chunk-4FVVJ7ME.js";
-import "../chunk-Y3PMNUM5.js";
+import "../chunk-EYDBWKYI.js";
 import "../chunk-KOO3J5PV.js";
 import "../chunk-22TVSRQQ.js";
 import "../chunk-SSTLTIF3.js";
-import "../chunk-NLZHVIOP.js";
+import "../chunk-G4VSF4DA.js";
 import "../chunk-QRTJNSKU.js";
 import "../chunk-NGP6LSV2.js";
-import "../chunk-5CCXU2AW.js";
+import "../chunk-SGUSCL3H.js";
 import {
   getSessionRuntime
 } from "../chunk-CVYC6DUW.js";
 import "../chunk-OPU3NYOO.js";
 import "../chunk-GJV3WDWM.js";
 import "../chunk-MP2AFCGL.js";
-import "../chunk-N7I2A667.js";
+import "../chunk-2MSLUPJA.js";
 import "../chunk-HYZV25LY.js";
-import "../chunk-WUKHLCBE.js";
+import "../chunk-I3IW6AAX.js";
 import "../chunk-2I23RPSI.js";
-import "../chunk-2E43UXRH.js";
+import "../chunk-2DWYR2LJ.js";
 import "../chunk-PNQDP3OA.js";
 import "../chunk-7HLWBYH7.js";
 import "../chunk-FXU7JOXK.js";
@@ -76,7 +76,7 @@ function checkMcpHealth() {
   }
 }
 async function scanFromDb(agentId, tmuxSession, projectName) {
-  const { fastDbInit } = await import("../fast-db-init-F3TDD5VV.js");
+  const { fastDbInit } = await import("../fast-db-init-CM4XPET2.js");
   try {
     await fastDbInit();
   } catch (err) {

package/dist/bin/setup.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runSetupWizard
-} from "../chunk-LSVFDVNY.js";
+} from "../chunk-QE6AI57N.js";
 import "../chunk-Z42MXYWW.js";
 import "../chunk-R36FAN53.js";
 import "../chunk-LYH5HE24.js";

package/dist/bin/shard-migrate.js

@@ -8,17 +8,17 @@ import {
 import {
   disposeStore,
   initStore
-} from "../chunk-VRRAE5JX.js";
+} from "../chunk-OQ336FHE.js";
 import "../chunk-CHCA3ZM2.js";
 import "../chunk-OTVEIJUQ.js";
-import "../chunk-C2SBESBO.js";
+import "../chunk-PUGKVPCC.js";
 import "../chunk-Y25OJWOQ.js";
 import "../chunk-MP2AFCGL.js";
 import {
   getClient
-} from "../chunk-WUKHLCBE.js";
+} from "../chunk-I3IW6AAX.js";
 import "../chunk-2I23RPSI.js";
-import "../chunk-2E43UXRH.js";
+import "../chunk-2DWYR2LJ.js";
 import "../chunk-PNQDP3OA.js";
 import "../chunk-7HLWBYH7.js";
 import "../chunk-FXU7JOXK.js";

package/dist/bin/stack-update.js

@@ -372,6 +372,7 @@ function parseArgs(args) {
     noBootstrap: false,
     skipHardening: false,
     verifyManifestSignature: true,
+    requireManifestSignature: process.env.EXE_STACK_REQUIRE_SIGNATURE === "1" || process.env.EXE_STACK_REQUIRE_SIGNATURE === "true",
     cleanupVolumes: false
   };
   for (let i = 0; i < args.length; i++) {
@@ -431,6 +432,7 @@ function parseArgs(args) {
     else if (arg === "--skip-hardening") opts.skipHardening = true;
     else if (arg === "--cleanup-volumes") opts.cleanupVolumes = true;
     else if (arg === "--no-verify-manifest-signature") opts.verifyManifestSignature = false;
+    else if (arg === "--require-manifest-signature") opts.requireManifestSignature = true;
     else if (arg === "--dry-run") opts.dryRun = true;
     else if (arg === "--verify-images") opts.verifyImages = true;
     else if (arg === "--check") opts.check = true;
@@ -497,6 +499,9 @@ Options:
   --skip-hardening           Skip post-deploy host hardening (UFW firewall + SSH config)
   --cleanup-volumes          Detect and remove orphaned Docker volumes after a successful update
   --no-verify-manifest-signature  Explicitly allow unsigned stack manifests (break-glass only)
+  --require-manifest-signature    Strict: fail unless EXE_STACK_PUBLIC_KEY is configured and the
+                             manifest signature is valid (default is opt-in: warn + proceed when
+                             no key is configured). Also enabled via EXE_STACK_REQUIRE_SIGNATURE=1
   -y, --yes                  Non-interactive confirmation
 `);
 }
@@ -675,9 +680,13 @@ async function main(args = process.argv.slice(2)) {
     printHostReport(hostReport);
     if (!opts.check && !opts.dryRun) assertHostReadyForApply(hostReport);
   }
-  if (opts.verifyManifestSignature && !opts.manifestPublicKey) {
-    throw new Error("Stack manifest signature verification is required. Set EXE_STACK_PUBLIC_KEY/EXE_STACK_PUBLIC_KEY_FILE or pass --no-verify-manifest-signature explicitly.");
-  }
+  const sigPolicy = resolveManifestSignaturePolicy({
+    verifyManifestSignature: opts.verifyManifestSignature,
+    requireManifestSignature: opts.requireManifestSignature,
+    hasPublicKey: !!opts.manifestPublicKey
+  });
+  if (sigPolicy.action === "throw") throw new Error(sigPolicy.message);
+  if (sigPolicy.action === "warn") console.warn(sigPolicy.message);
   const manifest = await loadStackManifest(
     opts.manifestRef,
     void 0,
@@ -869,6 +878,20 @@ function existsForCli(filePath) {
     return false;
   }
 }
+function resolveManifestSignaturePolicy(input) {
+  if (!input.verifyManifestSignature) return { action: "proceed", message: "" };
+  if (input.hasPublicKey) return { action: "proceed", message: "" };
+  if (input.requireManifestSignature) {
+    return {
+      action: "throw",
+      message: "Stack manifest signature verification is required (strict mode: EXE_STACK_REQUIRE_SIGNATURE/--require-manifest-signature). Set EXE_STACK_PUBLIC_KEY/EXE_STACK_PUBLIC_KEY_FILE or pass --no-verify-manifest-signature explicitly."
+    };
+  }
+  return {
+    action: "warn",
+    message: "\u26A0\uFE0F  Stack manifest signature NOT verified \u2014 no EXE_STACK_PUBLIC_KEY/EXE_STACK_PUBLIC_KEY_FILE configured. Proceeding. To enforce, configure a public key (or set EXE_STACK_REQUIRE_SIGNATURE=1 / pass --require-manifest-signature)."
+  };
+}
 if (isMainModule(import.meta.url) && (process.argv[1] ?? "").includes("stack-update")) {
   main().catch((err) => {
     const message = err instanceof Error ? err.message : String(err);
@@ -889,5 +912,6 @@ ${border}`);
 }
 export {
   parseArgs as parseStackUpdateArgs,
+  resolveManifestSignaturePolicy,
   main as runStackUpdateCli
 };

package/dist/capability-cards-KR7BOS2H.js

@@ -0,0 +1,89 @@
+import {
+  getIdentity,
+  loadEmployeesSync
+} from "./chunk-I3IW6AAX.js";
+import "./chunk-2I23RPSI.js";
+import "./chunk-2DWYR2LJ.js";
+import {
+  getRoleCapabilities
+} from "./chunk-PNQDP3OA.js";
+import "./chunk-7HLWBYH7.js";
+import "./chunk-FXU7JOXK.js";
+import "./chunk-R36FAN53.js";
+import "./chunk-LYH5HE24.js";
+import "./chunk-MLKGABMK.js";
+
+// src/lib/capability-cards.ts
+function extractActions(identityBody) {
+  const actions = /* @__PURE__ */ new Set();
+  const boldMatches = identityBody.matchAll(/\*\*(\w[\w_]*)\*\*/g);
+  for (const m of boldMatches) {
+    const name = m[1];
+    if (name.length > 2 && !["The", "Non", "What", "How", "Why", "You", "Every", "Your"].includes(name)) {
+      actions.add(name);
+    }
+  }
+  return [...actions].sort();
+}
+function getCapabilityCard(agentId) {
+  const identity = getIdentity(agentId);
+  const role = identity?.frontmatter.role ?? "unknown";
+  const title = identity?.frontmatter.title ?? "Unknown";
+  const capabilities = getRoleCapabilities(role);
+  if (!identity && !capabilities) return null;
+  const availableActions = identity ? extractActions(identity.body) : [];
+  return {
+    agentId,
+    role,
+    title,
+    domains: capabilities?.domains ?? [],
+    tools: capabilities?.tools ?? [],
+    canDelegate: capabilities?.canDelegate ?? false,
+    canReview: capabilities?.canReview ?? false,
+    maxComplexity: capabilities?.maxComplexity ?? "low",
+    availableActions
+  };
+}
+function getAllCapabilityCards() {
+  const employees = loadEmployeesSync();
+  const cards = [];
+  for (const emp of employees) {
+    const card = getCapabilityCard(emp.name);
+    if (card) cards.push(card);
+  }
+  return cards;
+}
+function findAgentForTask(taskDescription, cards) {
+  const allCards = cards ?? getAllCapabilityCards();
+  if (allCards.length === 0) return [];
+  const words = new Set(
+    taskDescription.toLowerCase().replace(/[^a-z0-9\s-]/g, "").split(/\s+/).filter((w) => w.length > 2)
+  );
+  const scored = [];
+  for (const card of allCards) {
+    let score = 0;
+    for (const domain of card.domains) {
+      const domainWords = domain.toLowerCase().split("-");
+      for (const dw of domainWords) {
+        if (words.has(dw)) score += 3;
+      }
+    }
+    for (const tool of card.tools) {
+      const toolWords = tool.toLowerCase().split(/[_-]/);
+      for (const tw of toolWords) {
+        if (words.has(tw)) score += 2;
+      }
+    }
+    const roleWords = card.role.toLowerCase().split("-");
+    for (const rw of roleWords) {
+      if (words.has(rw)) score += 1;
+    }
+    if (score > 0) scored.push({ card, score });
+  }
+  return scored.sort((a, b) => b.score - a.score).map((s) => s.card);
+}
+export {
+  findAgentForTask,
+  getAllCapabilityCards,
+  getCapabilityCard
+};

package/dist/capacity-monitor-CQFYTU45.js

@@ -0,0 +1,51 @@
+import {
+  CTX_FLOOR_PERCENT,
+  _resetLastRelaunchCache,
+  _resetPendingCapacityKills,
+  confirmCapacityKill,
+  createOrRefreshResumeTask,
+  extractContextPercent,
+  isAtCapacity,
+  isWithinRelaunchCooldown,
+  pollCapacityDead
+} from "./chunk-2P5KBHJH.js";
+import "./chunk-Y4QZXMCD.js";
+import "./chunk-2QGG6GG3.js";
+import "./chunk-PQG2IQNN.js";
+import "./chunk-4JERP7NT.js";
+import "./chunk-4FVVJ7ME.js";
+import "./chunk-EYDBWKYI.js";
+import "./chunk-KOO3J5PV.js";
+import "./chunk-22TVSRQQ.js";
+import "./chunk-SSTLTIF3.js";
+import "./chunk-G4VSF4DA.js";
+import "./chunk-QRTJNSKU.js";
+import "./chunk-NGP6LSV2.js";
+import "./chunk-SGUSCL3H.js";
+import "./chunk-CVYC6DUW.js";
+import "./chunk-OPU3NYOO.js";
+import "./chunk-GJV3WDWM.js";
+import "./chunk-MP2AFCGL.js";
+import "./chunk-2MSLUPJA.js";
+import "./chunk-HYZV25LY.js";
+import "./chunk-I3IW6AAX.js";
+import "./chunk-2I23RPSI.js";
+import "./chunk-2DWYR2LJ.js";
+import "./chunk-PNQDP3OA.js";
+import "./chunk-7HLWBYH7.js";
+import "./chunk-FXU7JOXK.js";
+import "./chunk-YTKVJJSU.js";
+import "./chunk-R36FAN53.js";
+import "./chunk-LYH5HE24.js";
+import "./chunk-MLKGABMK.js";
+export {
+  CTX_FLOOR_PERCENT,
+  _resetLastRelaunchCache,
+  _resetPendingCapacityKills,
+  confirmCapacityKill,
+  createOrRefreshResumeTask,
+  extractContextPercent,
+  isAtCapacity,
+  isWithinRelaunchCooldown,
+  pollCapacityDead
+};

package/dist/catchup-brief-HNT2CYJQ.js

@@ -0,0 +1,175 @@
+import {
+  lightweightSearch
+} from "./chunk-POTMDICN.js";
+import "./chunk-AB4PAQYK.js";
+import "./chunk-OQ336FHE.js";
+import "./chunk-CHCA3ZM2.js";
+import "./chunk-OTVEIJUQ.js";
+import "./chunk-PUGKVPCC.js";
+import "./chunk-Y25OJWOQ.js";
+import {
+  sessionScopeFilter,
+  strictSessionScopeFilter
+} from "./chunk-2QGG6GG3.js";
+import "./chunk-PQG2IQNN.js";
+import "./chunk-4JERP7NT.js";
+import "./chunk-4FVVJ7ME.js";
+import "./chunk-EYDBWKYI.js";
+import "./chunk-KOO3J5PV.js";
+import "./chunk-22TVSRQQ.js";
+import "./chunk-SSTLTIF3.js";
+import "./chunk-G4VSF4DA.js";
+import "./chunk-QRTJNSKU.js";
+import "./chunk-NGP6LSV2.js";
+import "./chunk-SGUSCL3H.js";
+import "./chunk-CVYC6DUW.js";
+import "./chunk-OPU3NYOO.js";
+import "./chunk-GJV3WDWM.js";
+import "./chunk-MP2AFCGL.js";
+import "./chunk-2MSLUPJA.js";
+import "./chunk-HYZV25LY.js";
+import {
+  getClient
+} from "./chunk-I3IW6AAX.js";
+import "./chunk-2I23RPSI.js";
+import "./chunk-2DWYR2LJ.js";
+import "./chunk-PNQDP3OA.js";
+import "./chunk-7HLWBYH7.js";
+import "./chunk-FXU7JOXK.js";
+import "./chunk-Z42MXYWW.js";
+import "./chunk-YTKVJJSU.js";
+import "./chunk-R36FAN53.js";
+import "./chunk-LYH5HE24.js";
+import "./chunk-MLKGABMK.js";
+
+// src/lib/catchup-brief.ts
+import { execSync } from "child_process";
+var HEADER = "## Catchup Brief\nHere's what happened while you were offline:";
+var DEFAULT_LOOKBACK_MS = 60 * 60 * 1e3;
+var MAX_BRIEF_CHARS = 2e3;
+var MAX_CHECKPOINT_CHARS = 500;
+var MAX_MESSAGE_CHARS = 100;
+function clipText(text, maxChars) {
+  if (text.length <= maxChars) return text;
+  if (maxChars <= 1) return "\u2026";
+  return `${text.slice(0, maxChars - 1).trimEnd()}\u2026`;
+}
+function clampSections(header, sections, maxChars) {
+  const bounded = [];
+  let remaining = Math.max(0, maxChars - header.length);
+  for (const section of sections) {
+    const separatorChars = 2;
+    if (remaining <= separatorChars) break;
+    remaining -= separatorChars;
+    if (section.length <= remaining) {
+      bounded.push(section);
+      remaining -= section.length;
+      continue;
+    }
+    const clipped = clipText(section, remaining);
+    if (clipped.trim().length > 0) bounded.push(clipped);
+    break;
+  }
+  return bounded;
+}
+async function buildCatchupBrief(agentId, projectName, cwd, sessionScope) {
+  const sections = [];
+  let lastTimestamp = new Date(Date.now() - DEFAULT_LOOKBACK_MS).toISOString();
+  try {
+    const checkpointMemories = await lightweightSearch(
+      "CONTEXT CHECKPOINT",
+      agentId,
+      { projectName, limit: 1 }
+    );
+    const checkpoint = checkpointMemories[0];
+    if (checkpoint?.timestamp) {
+      lastTimestamp = checkpoint.timestamp;
+    }
+    if (checkpoint?.raw_text) {
+      sections.push(
+        `### Last Checkpoint
+${clipText(checkpoint.raw_text, MAX_CHECKPOINT_CHARS)}`
+      );
+    }
+  } catch {
+  }
+  try {
+    const gitLog = execSync(
+      `git log --oneline --since=${JSON.stringify(lastTimestamp)} --format="%h %an: %s" | head -10`,
+      { cwd, timeout: 3e3, encoding: "utf-8" }
+    ).trim();
+    if (gitLog) {
+      sections.push(`### Git Activity Since You Left
+\`\`\`
+${gitLog}
+\`\`\``);
+    }
+  } catch {
+  }
+  try {
+    const client = getClient();
+    const taskScope = sessionScopeFilter(sessionScope);
+    const taskChanges = await client.execute({
+      sql: `SELECT title, status, priority FROM tasks
+            WHERE assigned_to = ? AND project_name = ?
+              AND updated_at > ? AND status IN ('open', 'in_progress')${taskScope.sql}
+            ORDER BY priority ASC, updated_at DESC LIMIT 5`,
+      args: [agentId, projectName, lastTimestamp, ...taskScope.args]
+    });
+    if (taskChanges.rows.length > 0) {
+      const taskLines = taskChanges.rows.map((row) => {
+        const record = row;
+        return `- [${String(record.priority).toUpperCase()}] ${String(record.title)} (${String(record.status)})`;
+      }).join("\n");
+      sections.push(`### Your Task Queue
+${taskLines}`);
+    }
+  } catch {
+  }
+  try {
+    const client = getClient();
+    const messageScope = strictSessionScopeFilter(sessionScope);
+    const messages = await client.execute({
+      sql: `SELECT from_agent, content, created_at FROM messages
+            WHERE target_agent = ? AND status = 'pending'${messageScope.sql}
+            ORDER BY created_at DESC LIMIT 3`,
+      args: [agentId, ...messageScope.args]
+    });
+    if (messages.rows.length > 0) {
+      const msgLines = messages.rows.map((row) => {
+        const record = row;
+        return `- From ${String(record.from_agent)}: ${clipText(String(record.content ?? ""), MAX_MESSAGE_CHARS)}`;
+      }).join("\n");
+      sections.push(`### Unread Messages
+${msgLines}`);
+    }
+  } catch {
+  }
+  try {
+    const { getPendingProspective, markSurfaced } = await import("./prospective-memory-PC72YWLY.js");
+    const due = await getPendingProspective(agentId, { projectName, limit: 5 });
+    if (due.length > 0) {
+      const now = Date.now();
+      const lines = due.map((item) => {
+        const overdue = item.dueDate != null && new Date(item.dueDate).getTime() < now;
+        const when = item.dueDate ? `due ${item.dueDate}${overdue ? " \u2014 OVERDUE" : ""}` : "someday";
+        const recur = item.recurrence !== "once" ? `, ${item.recurrence}` : "";
+        return `- [P${item.priority}] ${clipText(item.content, MAX_CHECKPOINT_CHARS)} (${when}${recur})`;
+      });
+      sections.push(`### Reminders Due (Prospective Memory)
+${lines.join("\n")}`);
+      try {
+        await markSurfaced(due.map((d) => d.id));
+      } catch {
+      }
+    }
+  } catch {
+  }
+  return {
+    header: HEADER,
+    sections: clampSections(HEADER, sections, MAX_BRIEF_CHARS)
+  };
+}
+export {
+  buildCatchupBrief
+};

package/dist/cc-binary-detect-4B25R3TO.js

@@ -0,0 +1,15 @@
+import {
+  CC_NATIVE_ONLY_CUTOFF,
+  CC_SAFE_PINNED_VERSION,
+  ccNativeBinaryWarningLine,
+  compareSemver,
+  detectCcNativeBinary
+} from "./chunk-3REXR56D.js";
+import "./chunk-MLKGABMK.js";
+export {
+  CC_NATIVE_ONLY_CUTOFF,
+  CC_SAFE_PINNED_VERSION,
+  ccNativeBinaryWarningLine,
+  compareSemver,
+  detectCcNativeBinary
+};