@askexenow/exe-os 0.9.299 → 0.9.301

package/dist/chunk-P5UXP53T.js

@@ -0,0 +1,81 @@
+// src/bin/fast-db-init.ts
+async function fastDbInit() {
+  const { isInitialized, getClient, setExternalClient } = await import("./lib/database.js");
+  if (isInitialized()) {
+    return getClient();
+  }
+  const forceDirect = process.env.EXE_DB_DIRECT === "1" || process.env.EXE_DB_READONLY === "1" || process.env.EXE_SKIP_DAEMON === "1";
+  if (!forceDirect) {
+    try {
+      const { connectEmbedDaemon, sendDaemonRequest, isClientConnected, disconnectClient } = await import("./lib/exe-daemon-client.js");
+      const { deserializeResultSet } = await import("./daemon-protocol-XW2OLNBS.js");
+      await Promise.race([
+        connectEmbedDaemon(),
+        new Promise((_, reject) => setTimeout(() => reject(new Error("Daemon socket timeout (2s)")), 2e3))
+      ]);
+      if (isClientConnected()) {
+        const daemonClient = {
+          async execute(stmt) {
+            const sql = typeof stmt === "string" ? stmt : stmt.sql;
+            const args = typeof stmt === "string" ? [] : Array.isArray(stmt.args) ? stmt.args : [];
+            const resp = await sendDaemonRequest({ type: "db-execute", sql, args });
+            if (resp.error) throw new Error(String(resp.error));
+            if (resp.db) return deserializeResultSet(resp.db);
+            throw new Error("Unexpected daemon response");
+          },
+          async batch(stmts, mode) {
+            const statements = stmts.map((s) => {
+              const sql = typeof s === "string" ? s : s.sql;
+              const args = typeof s === "string" ? [] : Array.isArray(s.args) ? s.args : [];
+              return { sql, args };
+            });
+            const resp = await sendDaemonRequest({ type: "db-batch", statements, mode: mode ?? "deferred" });
+            if (resp.error) throw new Error(String(resp.error));
+            const batchResults = resp["db-batch"];
+            if (batchResults) return batchResults.map(deserializeResultSet);
+            throw new Error("Unexpected daemon batch response");
+          },
+          async transaction(_mode) {
+            throw new Error("Transactions not supported via daemon socket");
+          },
+          async executeMultiple(_sql) {
+            throw new Error("executeMultiple not supported via daemon socket");
+          },
+          async migrate(_stmts) {
+            throw new Error("migrate not supported via daemon socket");
+          },
+          sync() {
+            return Promise.resolve(void 0);
+          },
+          close() {
+          },
+          get closed() {
+            return false;
+          },
+          get protocol() {
+            return "file";
+          }
+        };
+        try {
+          await daemonClient.execute("SELECT 1");
+        } catch {
+          try {
+            disconnectClient();
+          } catch {
+          }
+          throw new Error("Daemon socket validation failed");
+        }
+        setExternalClient(daemonClient);
+        return daemonClient;
+      }
+    } catch {
+    }
+  }
+  const { initStore } = await import("./lib/store.js");
+  await initStore({ lightweight: true });
+  return getClient();
+}
+
+export {
+  fastDbInit
+};

package/dist/chunk-PH6VRRFR.js

@@ -0,0 +1,395 @@
+import {
+  EXE_AI_DIR
+} from "./chunk-R36FAN53.js";
+
+// src/lib/db-backup.ts
+import { existsSync, readdirSync, unlinkSync, statSync, statfsSync } from "fs";
+import { copyFile, mkdir, unlink, rename } from "fs/promises";
+import path from "path";
+var BACKUP_DIR = path.join(EXE_AI_DIR, "backups");
+var DEFAULT_KEEP_DAYS = 3;
+var DB_NAMES = ["memories.db", "exe-mem.db", "exe-os.db", "exe.db"];
+var REASON_COUNT_CAP = {
+  // Bug 727b7b1e: a daemon OOM crash loop made a ~1.5GB pre-restart backup on
+  // EVERY restart. 22 crashes = 11GB of pre-restart snapshots with no rotation.
+  // Keep only the 2 newest — enough to recover, small enough not to fill disk.
+  "pre-restart": 2,
+  "pre-consolidation": 5,
+  "pre-fix": 5,
+  "pre-restore": 5,
+  // Bug 91b1b167: daily snapshots are full uncompressed SQLCipher copies
+  // (~2-3GB apiece on large enterprise DBs). Time-based rotation alone left
+  // 19GB accumulating when mtimes drifted / the disk guard tripped. A hard
+  // count cap is a belt-and-braces safety net on top of day-based rotation.
+  "daily": 3
+};
+var MIN_FREE_BYTES = 5 * 1024 * 1024 * 1024;
+var STALE_TMP_MAX_AGE_MS = 60 * 60 * 1e3;
+function findActiveDb() {
+  for (const name of DB_NAMES) {
+    const p = path.join(EXE_AI_DIR, name);
+    if (existsSync(p)) return p;
+  }
+  return null;
+}
+async function createBackup(reason = "manual") {
+  return createBackupAsync(reason);
+}
+async function createBackupAsync(reason = "manual", opts = {}) {
+  const dbPath = findActiveDb();
+  if (!dbPath) return null;
+  await mkdir(BACKUP_DIR, { recursive: true });
+  try {
+    let dbSize = 0;
+    try {
+      dbSize = statSync(dbPath).size;
+    } catch {
+    }
+    const freeBytes = getFreeBytes(BACKUP_DIR);
+    if (!hasEnoughDiskSpace(freeBytes, dbSize)) {
+      process.stderr.write(
+        `[db-backup] DISK GUARD: skipping "${reason}" backup \u2014 ${Math.round(freeBytes / 1024 / 1024)}MB free, need >${Math.round(Math.max(MIN_FREE_BYTES, dbSize * 2) / 1024 / 1024)}MB. Disk is nearly full; refusing to make it worse.
+`
+      );
+      return null;
+    }
+  } catch {
+  }
+  const dbName = path.basename(dbPath, ".db");
+  const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-").slice(0, 19);
+  const backupName = `${dbName}-${reason}-${timestamp}.db`;
+  const backupPath = path.join(BACKUP_DIR, backupName);
+  const tmpBackupPath = `${backupPath}.tmp`;
+  const checkpointMode = opts.checkpointMode ?? "TRUNCATE";
+  try {
+    const { getClient } = await import("./lib/database.js");
+    const client = getClient();
+    await client.execute(`PRAGMA wal_checkpoint(${checkpointMode})`);
+  } catch {
+    try {
+      const { execFile: execFileCb } = await import("child_process");
+      const { promisify } = await import("util");
+      const execFileAsync = promisify(execFileCb);
+      await execFileAsync("sqlite3", [dbPath, `PRAGMA wal_checkpoint(${checkpointMode});`], { timeout: 3e4 });
+    } catch {
+      process.stderr.write(`[db-backup] WAL checkpoint skipped \u2014 proceeding with copy (backup may include stale WAL)
+`);
+    }
+  }
+  try {
+    await unlink(tmpBackupPath);
+  } catch {
+  }
+  await copyFile(dbPath, tmpBackupPath);
+  await rename(tmpBackupPath, backupPath);
+  try {
+    const { getClient } = await import("./lib/database.js");
+    const client = getClient();
+    const chk = await client.execute("PRAGMA quick_check;");
+    const result = String(chk.rows[0]?.quick_check ?? chk.rows[0]?.[0] ?? "").trim();
+    if (result && result !== "ok") {
+      process.stderr.write(`[db-backup] WARNING: backup source failed quick_check (${reason}): ${result}
+`);
+      try {
+        await unlink(backupPath);
+      } catch {
+      }
+      return null;
+    }
+  } catch {
+    process.stderr.write(`[db-backup] Backup validation skipped (encrypted DB or CLI context) \u2014 proceeding with checkpoint-consistent copy.
+`);
+  }
+  const walPath = dbPath + "-wal";
+  if (existsSync(walPath)) {
+    try {
+      await copyFile(walPath, backupPath + "-wal.tmp");
+      await rename(backupPath + "-wal.tmp", backupPath + "-wal");
+    } catch {
+    }
+  }
+  const shmPath = dbPath + "-shm";
+  if (existsSync(shmPath)) {
+    try {
+      await copyFile(shmPath, backupPath + "-shm.tmp");
+      await rename(backupPath + "-shm.tmp", backupPath + "-shm");
+    } catch {
+    }
+  }
+  return backupPath;
+}
+function rotateBackups(keepDays = DEFAULT_KEEP_DAYS) {
+  if (!existsSync(BACKUP_DIR)) return 0;
+  const cutoff = Date.now() - keepDays * 24 * 60 * 60 * 1e3;
+  let deleted = 0;
+  try {
+    const files = readdirSync(BACKUP_DIR);
+    for (const file of files) {
+      if (file.endsWith(".tmp")) continue;
+      if (!file.endsWith(".db") && !file.endsWith(".db-wal") && !file.endsWith(".db-shm")) continue;
+      const filePath = path.join(BACKUP_DIR, file);
+      try {
+        const stat = statSync(filePath);
+        if (stat.mtimeMs < cutoff) {
+          unlinkSync(filePath);
+          deleted++;
+        }
+      } catch {
+      }
+    }
+  } catch {
+  }
+  return deleted;
+}
+function selectBackupsToDelete(backups, keep) {
+  if (keep < 0) keep = 0;
+  const sorted = [...backups].sort((a, b) => b.mtimeMs - a.mtimeMs);
+  return sorted.slice(keep).map((b) => b.path);
+}
+function selectStaleTmpFiles(tmpFiles, cutoffMs) {
+  return tmpFiles.filter((f) => f.mtimeMs < cutoffMs).map((f) => f.path);
+}
+function cleanupStaleTmp(maxAgeMs = STALE_TMP_MAX_AGE_MS) {
+  if (!existsSync(BACKUP_DIR)) return 0;
+  const cutoffMs = Date.now() - maxAgeMs;
+  let deleted = 0;
+  try {
+    const candidates = [];
+    for (const file of readdirSync(BACKUP_DIR)) {
+      if (!file.endsWith(".tmp")) continue;
+      const filePath = path.join(BACKUP_DIR, file);
+      try {
+        candidates.push({ path: filePath, mtimeMs: statSync(filePath).mtimeMs });
+      } catch {
+      }
+    }
+    for (const target of selectStaleTmpFiles(candidates, cutoffMs)) {
+      try {
+        unlinkSync(target);
+        deleted++;
+      } catch {
+      }
+    }
+  } catch {
+  }
+  return deleted;
+}
+function hasEnoughDiskSpace(freeBytes, backupSizeBytes, minFreeBytes = MIN_FREE_BYTES) {
+  const required = Math.max(minFreeBytes, backupSizeBytes * 2);
+  return freeBytes >= required;
+}
+function getFreeBytes(dir) {
+  try {
+    const s = statfsSync(dir);
+    return s.bavail * s.bsize;
+  } catch {
+    return Number.POSITIVE_INFINITY;
+  }
+}
+async function quickCheckBackupSource(source) {
+  try {
+    const { execFile: execFileCb } = await import("child_process");
+    const { promisify } = await import("util");
+    const execFileAsync = promisify(execFileCb);
+    const { stdout } = await execFileAsync("sqlite3", [source, "PRAGMA quick_check;"], { timeout: 3e4 });
+    const result = String(stdout ?? "").trim();
+    if (result !== "ok") {
+      throw new Error(result || "quick_check returned no result");
+    }
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    if (/file is not a database|not an error/i.test(msg)) {
+      process.stderr.write(`[db-backup] Backup source quick_check unavailable for encrypted backup (${path.basename(source)}); proceeding with atomic restore.
+`);
+      return;
+    }
+    throw new Error(`Backup source failed quick_check: ${msg}`);
+  }
+}
+function rotateBackupsByReason(reason, keep) {
+  if (!existsSync(BACKUP_DIR)) return 0;
+  let deleted = 0;
+  try {
+    const files = readdirSync(BACKUP_DIR);
+    const matches = [];
+    for (const file of files) {
+      if (file.endsWith(".tmp")) continue;
+      if (!file.endsWith(".db")) continue;
+      if (!file.includes(`-${reason}-`)) continue;
+      const filePath = path.join(BACKUP_DIR, file);
+      try {
+        matches.push({ path: filePath, mtimeMs: statSync(filePath).mtimeMs });
+      } catch {
+      }
+    }
+    for (const target of selectBackupsToDelete(matches, keep)) {
+      for (const p of [target, target + "-wal", target + "-shm"]) {
+        try {
+          if (existsSync(p)) {
+            unlinkSync(p);
+            if (p === target) deleted++;
+          }
+        } catch {
+        }
+      }
+    }
+  } catch {
+  }
+  return deleted;
+}
+function enforceRetention(reason, keepDays = DEFAULT_KEEP_DAYS) {
+  let deleted = rotateBackups(keepDays);
+  const cap = REASON_COUNT_CAP[reason];
+  if (typeof cap === "number") {
+    deleted += rotateBackupsByReason(reason, cap);
+  }
+  deleted += cleanupStaleTmp();
+  return deleted;
+}
+var QUARANTINE_KEEP = 2;
+function pruneCorruptQuarantine(keep = QUARANTINE_KEEP) {
+  if (!existsSync(EXE_AI_DIR)) return 0;
+  let deleted = 0;
+  try {
+    const matches = [];
+    for (const file of readdirSync(EXE_AI_DIR)) {
+      if (!/\.corrupt-\d+$/.test(file)) continue;
+      const filePath = path.join(EXE_AI_DIR, file);
+      try {
+        matches.push({ path: filePath, mtimeMs: statSync(filePath).mtimeMs });
+      } catch {
+      }
+    }
+    for (const target of selectBackupsToDelete(matches, keep)) {
+      for (const p of [target, target + "-wal", target + "-shm"]) {
+        try {
+          if (existsSync(p)) {
+            unlinkSync(p);
+            if (p === target) deleted++;
+          }
+        } catch {
+        }
+      }
+    }
+  } catch {
+  }
+  return deleted;
+}
+function cleanupCrashDebris() {
+  let deleted = 0;
+  deleted += rotateBackupsByReason("pre-restart", REASON_COUNT_CAP["pre-restart"] ?? 2);
+  deleted += cleanupStaleTmp();
+  deleted += pruneCorruptQuarantine();
+  return deleted;
+}
+function listBackups() {
+  if (!existsSync(BACKUP_DIR)) return [];
+  try {
+    const files = readdirSync(BACKUP_DIR).filter((f) => f.endsWith(".db") && !f.endsWith(".tmp") && !f.endsWith("-wal") && !f.endsWith("-shm"));
+    return files.map((name) => {
+      const p = path.join(BACKUP_DIR, name);
+      const stat = statSync(p);
+      return { path: p, name, size: stat.size, date: stat.mtime };
+    }).sort((a, b) => b.date.getTime() - a.date.getTime());
+  } catch {
+    return [];
+  }
+}
+function hasBackupToday(reason) {
+  const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
+  const backups = listBackups();
+  return backups.some((b) => b.name.includes(reason) && b.name.includes(today.replace(/-/g, "-")));
+}
+function hasRecentBackup(reason, withinMs) {
+  try {
+    if (!existsSync(BACKUP_DIR)) return false;
+    const now = Date.now();
+    for (const file of readdirSync(BACKUP_DIR)) {
+      if (file.endsWith(".tmp")) continue;
+      if (!file.endsWith(".db")) continue;
+      if (!file.includes(`-${reason}-`)) continue;
+      try {
+        if (now - statSync(path.join(BACKUP_DIR, file)).mtimeMs <= withinMs) return true;
+      } catch {
+      }
+    }
+  } catch {
+  }
+  return false;
+}
+function getLatestBackup() {
+  const backups = listBackups();
+  return backups.length > 0 ? backups[0].path : null;
+}
+async function restoreBackup(backupPath) {
+  const dbPath = findActiveDb();
+  if (!dbPath) {
+    const target = path.join(EXE_AI_DIR, DB_NAMES[0]);
+    const source2 = backupPath ?? getLatestBackup();
+    if (!source2 || !existsSync(source2)) return null;
+    await copyFile(source2, target);
+    return { restored: path.basename(source2), preRestoreBackup: null };
+  }
+  const source = backupPath ?? getLatestBackup();
+  if (!source || !existsSync(source)) return null;
+  if (path.resolve(source) === path.resolve(dbPath)) return null;
+  await quickCheckBackupSource(source);
+  const preRestoreBackup = await createBackup("pre-restore");
+  const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
+  const tmpDb = `${dbPath}.restore-${stamp}.tmp`;
+  const oldDb = `${dbPath}.pre-restore-active-${stamp}`;
+  await copyFile(source, tmpDb);
+  const walPath = source + "-wal";
+  const shmPath = source + "-shm";
+  const tmpWal = `${tmpDb}-wal`;
+  const tmpShm = `${tmpDb}-shm`;
+  if (existsSync(walPath)) {
+    try {
+      await copyFile(walPath, tmpWal);
+    } catch {
+    }
+  }
+  if (existsSync(shmPath)) {
+    try {
+      await copyFile(shmPath, tmpShm);
+    } catch {
+    }
+  }
+  try {
+    unlinkSync(dbPath + "-wal");
+  } catch {
+  }
+  try {
+    unlinkSync(dbPath + "-shm");
+  } catch {
+  }
+  await rename(dbPath, oldDb);
+  await rename(tmpDb, dbPath);
+  if (existsSync(tmpWal)) await rename(tmpWal, dbPath + "-wal");
+  if (existsSync(tmpShm)) await rename(tmpShm, dbPath + "-shm");
+  return { restored: path.basename(source), preRestoreBackup };
+}
+function getBackupDir() {
+  return BACKUP_DIR;
+}
+
+export {
+  findActiveDb,
+  createBackup,
+  createBackupAsync,
+  rotateBackups,
+  selectBackupsToDelete,
+  selectStaleTmpFiles,
+  cleanupStaleTmp,
+  hasEnoughDiskSpace,
+  rotateBackupsByReason,
+  enforceRetention,
+  pruneCorruptQuarantine,
+  cleanupCrashDebris,
+  listBackups,
+  hasBackupToday,
+  hasRecentBackup,
+  getLatestBackup,
+  restoreBackup,
+  getBackupDir
+};

package/dist/chunk-Q3GKOF7Z.js

@@ -0,0 +1,85 @@
+import {
+  deactivateBehavior
+} from "./chunk-KY43UELJ.js";
+import {
+  getActiveAgent
+} from "./chunk-RCEULTPF.js";
+import {
+  canCoordinate,
+  getClient
+} from "./chunk-XABJRAUW.js";
+
+// src/mcp/tools/deactivate-behavior.ts
+import { z } from "zod";
+function registerDeactivateBehavior(server) {
+  server.registerTool(
+    "deactivate_behavior",
+    {
+      title: "Deactivate Behavior",
+      description: "Soft-delete a behavior by setting active = 0. RESTRICTED: only coordinator or founder sessions can use this. Use list_behaviors to find the behavior ID first.",
+      inputSchema: {
+        behavior_id: z.string().describe("UUID of the behavior to deactivate")
+      }
+    },
+    async ({ behavior_id }) => {
+      const caller = getActiveAgent();
+      try {
+        const { StewardGate } = await import("./steward-gate-PIXNK4BK.js");
+        const steward = new StewardGate();
+        const gateDecision = await steward.checkAuthority(caller.agentId || "unknown", "deactivate_behavior", behavior_id);
+        if (!gateDecision.allowed) {
+          return { content: [{ type: "text", text: `Steward gate denied: ${gateDecision.reason}` }], isError: true };
+        }
+      } catch {
+      }
+      const allowed = canCoordinate(caller.agentId, caller.agentRole);
+      if (!allowed) {
+        return {
+          content: [{
+            type: "text",
+            text: `Permission denied. Only the coordinator or founder sessions can deactivate behaviors. You are "${caller.agentId}".`
+          }],
+          isError: true
+        };
+      }
+      const client = getClient();
+      const result = await client.execute({
+        sql: `SELECT id, agent_id, content, domain, priority FROM behaviors WHERE id = ?`,
+        args: [behavior_id]
+      });
+      if (result.rows.length === 0) {
+        return {
+          content: [{
+            type: "text",
+            text: `Behavior not found: ${behavior_id}`
+          }],
+          isError: true
+        };
+      }
+      const row = result.rows[0];
+      const wasActive = await deactivateBehavior(behavior_id);
+      if (!wasActive) {
+        return {
+          content: [{
+            type: "text",
+            text: `Behavior ${behavior_id} was already inactive.`
+          }]
+        };
+      }
+      return {
+        content: [{
+          type: "text",
+          text: `Deactivated behavior for ${row.agent_id}.
+ID: ${row.id}
+Domain: ${row.domain ?? "none"}
+Priority: ${row.priority}
+Content: ${row.content}`
+        }]
+      };
+    }
+  );
+}
+
+export {
+  registerDeactivateBehavior
+};