@askexenow/exe-os 0.9.302 → 0.9.310

package/dist/lib/exe-daemon.js

@@ -1,3 +1,7 @@
+import {
+  clearDaemonReady,
+  writeDaemonReady
+} from "../chunk-XXJRZ75E.js";
 import {
   pushNotifyAsync
 } from "../chunk-IBDPPBFK.js";
@@ -11,14 +15,20 @@ import {
   serializeResultSet
 } from "../chunk-QGGH7LOU.js";
 import {
-  ensureDaemonToken
-} from "../chunk-PHOQAVTK.js";
+  ensureDaemonToken,
+  reconcileSessionAgentIdentity,
+  shouldEnforceSessionIdentity
+} from "../chunk-RQ7OVXUZ.js";
 import {
   findScopedDuplicate,
   governMemoryRecord,
   schedulePostWriteMemoryHygiene
-} from "../chunk-PTDBHQX7.js";
+} from "../chunk-MQCTK6EF.js";
 import "../chunk-Y25OJWOQ.js";
+import {
+  consumeRestartIntent,
+  logRestartEvent
+} from "../chunk-RVXWGPD3.js";
 import {
   DAEMON_RSS_RESTART_DEBOUNCE,
   DAEMON_RSS_STARTUP_GRACE_MS,
@@ -35,13 +45,16 @@ import {
   resolveEmbedWorkerRssKillMb,
   shouldRestartForRss
 } from "../chunk-7XGDTKHX.js";
-import {
-  consumeRestartIntent,
-  logRestartEvent
-} from "../chunk-7L2EV3XX.js";
 import {
   resolveEmbeddingsEnabled
-} from "../chunk-RQUHAXMM.js";
+} from "../chunk-PHFPIUWU.js";
+import {
+  logBoot,
+  logCrash,
+  logDaemonHealth,
+  logHeartbeat,
+  logShutdown
+} from "../chunk-VQRTO7IS.js";
 import {
   getEventLoopLagMs,
   isEventLoopDegraded,
@@ -60,16 +73,16 @@ import "../chunk-65DBIEM2.js";
 import "../chunk-MLKGABMK.js";
 
 // src/lib/exe-daemon.ts
-import os3 from "os";
+import os2 from "os";
 import net from "net";
-import v82 from "v8";
+import v8 from "v8";
 import { createServer as createHttpServer, request as httpRequest } from "http";
 import { randomUUID } from "crypto";
-import { writeFileSync as writeFileSync3, unlinkSync as unlinkSync2, mkdirSync as mkdirSync3, existsSync as existsSync4, readFileSync as readFileSync3, chmodSync, readdirSync, renameSync as renameSync2, statSync as statSync2 } from "fs";
+import { writeFileSync as writeFileSync3, unlinkSync as unlinkSync2, mkdirSync as mkdirSync2, existsSync as existsSync3, readFileSync as readFileSync3, chmodSync, readdirSync, renameSync, statSync } from "fs";
 import { writeFile } from "fs/promises";
 import { execSync as execSyncNode, execFile as execFileNode } from "child_process";
 import { promisify } from "util";
-import path4 from "path";
+import path3 from "path";
 import { fork } from "child_process";
 import { Worker } from "worker_threads";
 
@@ -256,279 +269,6 @@ function initMetrics() {
   });
 }
 
-// src/lib/daemon-health-log.ts
-import { appendFileSync, mkdirSync, existsSync as existsSync2, statSync, renameSync } from "fs";
-import path2 from "path";
-import os from "os";
-
-// src/lib/process-monitor.ts
-import { execSync } from "child_process";
-import v8 from "v8";
-var _lastCpuUsage = null;
-var _lastCpuTime = 0;
-function getDaemonCpuPercent() {
-  const now = Date.now();
-  const usage = process.cpuUsage(_lastCpuUsage ?? void 0);
-  if (_lastCpuTime === 0) {
-    _lastCpuUsage = process.cpuUsage();
-    _lastCpuTime = now;
-    return 0;
-  }
-  const elapsedMs = now - _lastCpuTime;
-  if (elapsedMs === 0) return 0;
-  const cpuMs = (usage.user + usage.system) / 1e3;
-  const percent = cpuMs / elapsedMs * 100;
-  _lastCpuUsage = process.cpuUsage();
-  _lastCpuTime = now;
-  return Math.round(percent * 10) / 10;
-}
-function getProcessStats(pid) {
-  try {
-    const output = execSync(
-      `ps -p ${pid} -o pid=,ppid=,%cpu=,rss=,vsz=,etime=,args= 2>/dev/null`,
-      { encoding: "utf8", timeout: 3e3 }
-    ).trim();
-    if (!output) return null;
-    return parseProcessLine(output);
-  } catch {
-    return null;
-  }
-}
-function getChildProcesses(parentPid) {
-  try {
-    const output = execSync(
-      `pgrep -P ${parentPid} 2>/dev/null || true`,
-      { encoding: "utf8", timeout: 3e3 }
-    ).trim();
-    if (!output) return [];
-    const childPids = output.split("\n").map(Number).filter(Boolean);
-    const children = [];
-    for (const pid of childPids) {
-      const stats = getProcessStats(pid);
-      if (stats) children.push(stats);
-      children.push(...getChildProcesses(pid));
-    }
-    return children;
-  } catch {
-    return [];
-  }
-}
-function getOrphanedProcesses() {
-  const EXE_PATTERNS = [
-    "exe-os/dist",
-    "exe-mem/dist",
-    "@askexenow/exe-os"
-  ];
-  try {
-    const output = execSync(
-      "ps -eo pid,ppid,%cpu,rss,vsz,etime,args 2>/dev/null",
-      { encoding: "utf8", timeout: 5e3 }
-    );
-    const orphans = [];
-    for (const line of output.split("\n").slice(1)) {
-      const stats = parseProcessLine(line.trim());
-      if (!stats) continue;
-      if (stats.ppid !== 1) continue;
-      if (stats.pid === process.pid) continue;
-      if (!EXE_PATTERNS.some((p) => stats.command.includes(p))) continue;
-      orphans.push(stats);
-    }
-    return orphans;
-  } catch {
-    return [];
-  }
-}
-function parseProcessLine(line) {
-  const match = line.match(/^\s*(\d+)\s+(\d+)\s+([\d.]+)\s+(\d+)\s+(\d+)\s+([\d:-]+)\s+(.+)$/);
-  if (!match) return null;
-  return {
-    pid: parseInt(match[1], 10),
-    ppid: parseInt(match[2], 10),
-    cpu: parseFloat(match[3]),
-    mem: Math.round(parseInt(match[4], 10) / 1024),
-    // RSS KB → MB
-    rss: Math.round(parseInt(match[4], 10) / 1024),
-    vsz: Math.round(parseInt(match[5], 10) / 1024),
-    elapsed: match[6],
-    command: match[7].slice(0, 200)
-  };
-}
-function takeProcessSnapshot() {
-  const daemon = getProcessStats(process.pid);
-  const children = getChildProcesses(process.pid);
-  const orphans = getOrphanedProcesses();
-  const allProcs = [daemon, ...children].filter(Boolean);
-  const totalCpu = allProcs.reduce((sum, p) => sum + p.cpu, 0);
-  const totalMemMb = allProcs.reduce((sum, p) => sum + p.rss, 0);
-  return {
-    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-    daemon,
-    children,
-    orphans,
-    totalCpu: Math.round(totalCpu * 10) / 10,
-    totalMemMb
-  };
-}
-function formatSnapshotSummary(snap) {
-  return {
-    daemonCpu: snap.daemon?.cpu ?? 0,
-    daemonRssMb: snap.daemon?.rss ?? 0,
-    childCount: snap.children.length,
-    childTotalCpu: Math.round(snap.children.reduce((s, c) => s + c.cpu, 0) * 10) / 10,
-    childTotalRssMb: snap.children.reduce((s, c) => s + c.rss, 0),
-    orphanCount: snap.orphans.length,
-    orphanPids: snap.orphans.map((o) => o.pid),
-    totalCpu: snap.totalCpu,
-    totalMemMb: snap.totalMemMb
-  };
-}
-var CPU_ALERT_THRESHOLD_PCT = 80;
-var CPU_ALERT_SUSTAINED_SAMPLES = 3;
-var _highCpuSamples = 0;
-function checkCpuAlert(cpuPercent) {
-  if (cpuPercent >= CPU_ALERT_THRESHOLD_PCT) {
-    _highCpuSamples++;
-    if (_highCpuSamples >= CPU_ALERT_SUSTAINED_SAMPLES) {
-      return `Daemon CPU sustained at ${cpuPercent}% for ${_highCpuSamples} samples`;
-    }
-  } else {
-    _highCpuSamples = 0;
-  }
-  return null;
-}
-var HEAP_ALERT_THRESHOLD_PCT = 80;
-var HEAP_ALERT_SUSTAINED_SAMPLES = 6;
-var _highHeapSamples = 0;
-var _heapSizeLimit = null;
-function getHeapSizeLimit() {
-  if (_heapSizeLimit !== null) return _heapSizeLimit;
-  try {
-    _heapSizeLimit = v8.getHeapStatistics().heap_size_limit;
-  } catch {
-    _heapSizeLimit = 4 * 1024 * 1024 * 1024;
-  }
-  return _heapSizeLimit;
-}
-function checkHeapAlert() {
-  const mem = process.memoryUsage();
-  const limit = getHeapSizeLimit();
-  const usedPct = limit > 0 ? mem.heapUsed / limit * 100 : 0;
-  if (usedPct >= HEAP_ALERT_THRESHOLD_PCT) {
-    _highHeapSamples++;
-    if (_highHeapSamples >= HEAP_ALERT_SUSTAINED_SAMPLES) {
-      return `V8 heap pressure: ${Math.round(usedPct)}% of limit (${Math.round(mem.heapUsed / 1024 / 1024)}MB / ${Math.round(limit / 1024 / 1024)}MB) for ${_highHeapSamples} samples \u2014 OOM risk`;
-    }
-  } else {
-    _highHeapSamples = 0;
-  }
-  return null;
-}
-
-// src/lib/daemon-health-log.ts
-var LOG_DIR = path2.join(os.homedir(), ".exe-os", "logs");
-var LOG_FILE = path2.join(LOG_DIR, "daemon-health.log");
-var MAX_LOG_SIZE = 5 * 1024 * 1024;
-var dirChecked = false;
-function ensureDir() {
-  if (dirChecked) return;
-  if (!existsSync2(LOG_DIR)) mkdirSync(LOG_DIR, { recursive: true });
-  dirChecked = true;
-}
-function maybeRotate() {
-  try {
-    if (!existsSync2(LOG_FILE)) return;
-    const stat = statSync(LOG_FILE);
-    if (stat.size > MAX_LOG_SIZE) {
-      const rotated = `${LOG_FILE}.1`;
-      try {
-        renameSync(LOG_FILE, rotated);
-      } catch {
-      }
-    }
-  } catch {
-  }
-}
-function logDaemonHealth(entry) {
-  try {
-    ensureDir();
-    maybeRotate();
-    const record = {
-      ts: (/* @__PURE__ */ new Date()).toISOString(),
-      event: entry.event,
-      pid: entry.pid,
-      msg: entry.message,
-      ...entry.data && { data: entry.data },
-      ...entry.stack && { stack: entry.stack }
-    };
-    appendFileSync(LOG_FILE, JSON.stringify(record) + "\n");
-  } catch {
-  }
-}
-function logBoot(extra) {
-  logDaemonHealth({
-    event: "boot",
-    pid: process.pid,
-    message: "Daemon starting",
-    data: {
-      nodeVersion: process.version,
-      platform: process.platform,
-      arch: process.arch,
-      totalMem: `${Math.round(os.totalmem() / 1024 / 1024 / 1024)}GB`,
-      freeMem: `${Math.round(os.freemem() / 1024 / 1024 / 1024)}GB`,
-      uptime: `${Math.round(os.uptime() / 3600)}h`,
-      ...extra
-    }
-  });
-}
-function logShutdown(reason, signal) {
-  logDaemonHealth({
-    event: signal ? "signal" : "shutdown",
-    pid: process.pid,
-    message: `Daemon shutting down: ${reason}`,
-    data: { reason, ...signal && { signal } }
-  });
-}
-function logCrash(error, event = "crash") {
-  const err = error instanceof Error ? error : new Error(String(error));
-  logDaemonHealth({
-    event,
-    pid: process.pid,
-    message: `FATAL: ${err.message}`,
-    stack: err.stack
-  });
-}
-function logHeartbeat(data) {
-  const mem = process.memoryUsage();
-  let processData = {};
-  try {
-    const cpuPct = getDaemonCpuPercent();
-    const snapshot = takeProcessSnapshot();
-    processData = formatSnapshotSummary(snapshot);
-    const cpuAlertMsg = checkCpuAlert(cpuPct);
-    if (cpuAlertMsg) {
-      logDaemonHealth({ event: "cpu_pressure", pid: process.pid, message: cpuAlertMsg, data: processData });
-    }
-    const heapAlertMsg = checkHeapAlert();
-    if (heapAlertMsg) {
-      logDaemonHealth({ event: "memory_pressure", pid: process.pid, message: heapAlertMsg, data: processData });
-    }
-  } catch {
-  }
-  logDaemonHealth({
-    event: "heartbeat",
-    pid: process.pid,
-    message: "alive",
-    data: {
-      rss: `${Math.round(mem.rss / 1024 / 1024)}MB`,
-      heapUsed: `${Math.round(mem.heapUsed / 1024 / 1024)}MB`,
-      heapTotal: `${Math.round(mem.heapTotal / 1024 / 1024)}MB`,
-      uptimeSec: Math.round(process.uptime()),
-      ...processData,
-      ...data
-    }
-  });
-}
-
 // src/lib/mcp-init-grace.ts
 var defaultSleep = (ms) => new Promise((r) => setTimeout(r, ms));
 async function awaitPendingMcpInit(ownerKey, requestSessionId, deps, transientMatch) {
@@ -584,17 +324,17 @@ async function awaitPendingMcpInit(ownerKey, requestSessionId, deps, transientMa
 }
 
 // src/lib/daemon-restart-backoff.ts
-import { existsSync as existsSync3, readFileSync as readFileSync2, writeFileSync as writeFileSync2, unlinkSync, mkdirSync as mkdirSync2 } from "fs";
+import { existsSync as existsSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2, unlinkSync, mkdirSync } from "fs";
 import { createHash } from "crypto";
-import path3 from "path";
-import os2 from "os";
+import path2 from "path";
+import os from "os";
 var BASE_DELAY_MS = 2e3;
 var MAX_DELAY_MS = 5 * 6e4;
 var FAILURE_THRESHOLD = 10;
 var HEALTHY_RESET_MS = 30 * 6e4;
 var FAST_FAILURE_MS = HEALTHY_RESET_MS;
-var EXE_DIR = path3.join(os2.homedir(), ".exe-os");
-var STATE_DIR = path3.join(EXE_DIR, "worker-backoff");
+var EXE_DIR = path2.join(os.homedir(), ".exe-os");
+var STATE_DIR = path2.join(EXE_DIR, "worker-backoff");
 function computeEmbedConfigFingerprint(inputs) {
   const canonical = [
     `enabled=${inputs.embeddingsEnabled ? 1 : 0}`,
@@ -625,12 +365,12 @@ function evaluateRestart(prev, uptimeMs, threshold = FAILURE_THRESHOLD, fastFail
 }
 function stateFile(workerKey) {
   const safe = workerKey.replace(/[^a-zA-Z0-9_-]/g, "_");
-  return path3.join(STATE_DIR, `${safe}.json`);
+  return path2.join(STATE_DIR, `${safe}.json`);
 }
 function loadBackoffState(workerKey) {
   try {
     const f = stateFile(workerKey);
-    if (!existsSync3(f)) return null;
+    if (!existsSync2(f)) return null;
     const parsed = JSON.parse(readFileSync2(f, "utf8"));
     if (typeof parsed.consecutiveFailures !== "number" || typeof parsed.lastFailureAt !== "number") {
       return null;
@@ -646,7 +386,7 @@ function loadBackoffState(workerKey) {
 }
 function saveBackoffState(workerKey, state) {
   try {
-    if (!existsSync3(STATE_DIR)) mkdirSync2(STATE_DIR, { recursive: true });
+    if (!existsSync2(STATE_DIR)) mkdirSync(STATE_DIR, { recursive: true });
     writeFileSync2(stateFile(workerKey), JSON.stringify(state), { mode: 384 });
   } catch {
   }
@@ -654,7 +394,7 @@ function saveBackoffState(workerKey, state) {
 function resetBackoffState(workerKey) {
   try {
     const f = stateFile(workerKey);
-    if (existsSync3(f)) unlinkSync(f);
+    if (existsSync2(f)) unlinkSync(f);
   } catch {
   }
 }
@@ -712,8 +452,8 @@ function measureSpan(prev) {
 }
 
 // src/lib/exe-daemon.ts
-var SOCKET_PATH = process.env.EXE_DAEMON_SOCK ?? process.env.EXE_EMBED_SOCK ?? path4.join(EXE_AI_DIR, "exed.sock");
-var PID_PATH = process.env.EXE_DAEMON_PID ?? process.env.EXE_EMBED_PID ?? path4.join(EXE_AI_DIR, "exed.pid");
+var SOCKET_PATH = process.env.EXE_DAEMON_SOCK ?? process.env.EXE_EMBED_SOCK ?? path3.join(EXE_AI_DIR, "exed.sock");
+var PID_PATH = process.env.EXE_DAEMON_PID ?? process.env.EXE_EMBED_PID ?? path3.join(EXE_AI_DIR, "exed.pid");
 var MODEL_FILE = resolveEmbedModelFile(MODELS_DIR);
 var SERVER_MODE = /^(1|true|yes|on)$/i.test(process.env.EXE_SERVER_MODE ?? "");
 var IDLE_TIMEOUT_MS = 0;
@@ -1007,9 +747,9 @@ function enqueue(queue, entry) {
   }
   queue.push(entry);
 }
-var OOM_MARKER_PATH = path4.join(os3.homedir(), ".exe-os", "embedding-oom-marker");
-var EMBED_TIMEOUT_MARKER_PATH = path4.join(os3.homedir(), ".exe-os", "embedding-timeout-marker");
-var EMBEDDINGS_OPT_IN_PATH = path4.join(os3.homedir(), ".exe-os", "embeddings-enabled");
+var OOM_MARKER_PATH = path3.join(os2.homedir(), ".exe-os", "embedding-oom-marker");
+var EMBED_TIMEOUT_MARKER_PATH = path3.join(os2.homedir(), ".exe-os", "embedding-timeout-marker");
+var EMBEDDINGS_OPT_IN_PATH = path3.join(os2.homedir(), ".exe-os", "embeddings-enabled");
 var MIN_FREE_MEM_BYTES = 2 * 1024 ** 3;
 var EMBED_WORKER_HEAP_MB = resolveEmbedWorkerHeapMb(process.env.EXE_EMBED_WORKER_HEAP_MB);
 var EMBED_WORKER_RSS_KILL_MB = resolveEmbedWorkerRssKillMb(
@@ -1027,10 +767,10 @@ function resolveEmbeddingsOptIn() {
 var MAX_SMALL_TOTAL_BYTES = 16 * 1024 ** 3;
 var OOM_MARKER_TTL_MS = 1 * 60 * 60 * 1e3;
 var EMBED_RESPAWN_RESET_UPTIME_MS = 60 * 60 * 1e3;
-var CRASH_LOOP_COUNTER_PATH = path4.join(os3.homedir(), ".exe-os", "daemon-crash-counter.json");
+var CRASH_LOOP_COUNTER_PATH = path3.join(os2.homedir(), ".exe-os", "daemon-crash-counter.json");
 var CRASH_LOOP_THRESHOLD = 3;
 var CRASH_LOOP_WINDOW_MS = 10 * 60 * 1e3;
-var CRASH_LOOP_BREAKER_PATH = path4.join(os3.homedir(), ".exe-os", "crash-loop-breaker");
+var CRASH_LOOP_BREAKER_PATH = path3.join(os2.homedir(), ".exe-os", "crash-loop-breaker");
 var CRASH_LOOP_BREAKER_TTL_MS = 30 * 60 * 1e3;
 function recordDaemonCrash() {
   const now = Date.now();
@@ -1064,8 +804,8 @@ function recordDaemonCrash() {
 }
 function isCrashLoopBreakerActive() {
   try {
-    if (!existsSync4(CRASH_LOOP_BREAKER_PATH)) return false;
-    const ageMs = Date.now() - statSync2(CRASH_LOOP_BREAKER_PATH).mtimeMs;
+    if (!existsSync3(CRASH_LOOP_BREAKER_PATH)) return false;
+    const ageMs = Date.now() - statSync(CRASH_LOOP_BREAKER_PATH).mtimeMs;
     if (ageMs > CRASH_LOOP_BREAKER_TTL_MS) {
       unlinkSync2(CRASH_LOOP_BREAKER_PATH);
       process.stderr.write(`[exed] Crash-loop breaker expired after ${Math.round(ageMs / 6e4)}min \u2014 cleared.
@@ -1105,8 +845,8 @@ function currentEmbedConfigFingerprint() {
 }
 function clearStaleOomMarker() {
   try {
-    if (!existsSync4(OOM_MARKER_PATH)) return false;
-    const ageMs = Date.now() - statSync2(OOM_MARKER_PATH).mtimeMs;
+    if (!existsSync3(OOM_MARKER_PATH)) return false;
+    const ageMs = Date.now() - statSync(OOM_MARKER_PATH).mtimeMs;
     if (ageMs < OOM_MARKER_TTL_MS) return false;
     unlinkSync2(OOM_MARKER_PATH);
     process.stderr.write(`[exed] Cleared stale embedding OOM marker after ${Math.round(ageMs / 36e5)}h.
@@ -1116,11 +856,23 @@ function clearStaleOomMarker() {
     return false;
   }
 }
+var EVENT_LOOP_BLOCKED_FRESH_MS = 1e4;
+function eventLoopBlockedMarkerPath() {
+  return path3.join(os2.homedir(), ".exe-os", "session-cache", "event-loop-blocked.marker");
+}
+function isEventLoopBlockedNow(freshMs = EVENT_LOOP_BLOCKED_FRESH_MS) {
+  try {
+    const ageMs = Date.now() - statSync(eventLoopBlockedMarkerPath()).mtimeMs;
+    return ageMs < freshMs && ageMs > -freshMs;
+  } catch {
+    return false;
+  }
+}
 function checkLaunchdPlistHealth() {
   try {
     if (process.platform !== "darwin") return;
-    const plistPath = path4.join(os3.homedir(), "Library", "LaunchAgents", "com.askexe.exed.plist");
-    if (!existsSync4(plistPath)) return;
+    const plistPath = path3.join(os2.homedir(), "Library", "LaunchAgents", "com.askexe.exed.plist");
+    if (!existsSync3(plistPath)) return;
     const plist = readFileSync3(plistPath, "utf8");
     const expectedHeap = computeDaemonHeapCapMb();
     const heapMatch = plist.match(/--max-old-space-size=(\d+)/);
@@ -1133,7 +885,7 @@ function checkLaunchdPlistHealth() {
     }
     const pathMatch = plist.match(/<key>PATH<\/key>\s*<string>([^<]*)<\/string>/);
     const exportedPath = pathMatch?.[1] ?? "";
-    const nodeBinDir = path4.dirname(process.execPath);
+    const nodeBinDir = path3.dirname(process.execPath);
     const systemDirs = /* @__PURE__ */ new Set(["/usr/local/bin", "/usr/bin", "/bin", "/opt/homebrew/bin"]);
     if (exportedPath && !systemDirs.has(nodeBinDir) && !exportedPath.split(":").includes(nodeBinDir)) {
       process.stderr.write(
@@ -1191,8 +943,8 @@ async function loadModel() {
     }
   } catch {
   }
-  const modelPath = path4.join(MODELS_DIR, MODEL_FILE);
-  if (!existsSync4(modelPath)) {
+  const modelPath = path3.join(MODELS_DIR, MODEL_FILE);
+  if (!existsSync3(modelPath)) {
     process.stderr.write(`[exed] No model at ${modelPath} \u2014 running without embeddings (VPS mode).
 `);
     _embeddingsDisabledByDesign = true;
@@ -1203,19 +955,19 @@ async function loadModel() {
     process.stderr.write(`[exed] Embedding config changed \u2014 cleared stale embed-worker backoff (one prompt retry under new config).
 `);
     try {
-      if (existsSync4(EMBED_TIMEOUT_MARKER_PATH)) unlinkSync2(EMBED_TIMEOUT_MARKER_PATH);
+      if (existsSync3(EMBED_TIMEOUT_MARKER_PATH)) unlinkSync2(EMBED_TIMEOUT_MARKER_PATH);
     } catch {
     }
     _embedConsecutiveTimeouts = 0;
   }
   clearStaleOomMarker();
-  if (existsSync4(OOM_MARKER_PATH)) {
+  if (existsSync3(OOM_MARKER_PATH)) {
     process.stderr.write(`[exed] Skipping embeddings \u2014 OOM marker exists. Delete ${OOM_MARKER_PATH} to retry.
 `);
     _embeddingsDisabledByDesign = true;
     return;
   }
-  if (existsSync4(EMBED_TIMEOUT_MARKER_PATH)) {
+  if (existsSync3(EMBED_TIMEOUT_MARKER_PATH)) {
     process.stderr.write(`[exed] Skipping embeddings \u2014 inference-timeout marker exists (local embeddings non-functional on this host). Set EXE_EMBEDDINGS=0 or delete ${EMBED_TIMEOUT_MARKER_PATH} to retry.
 `);
     _embeddingsDisabledByDesign = true;
@@ -1227,14 +979,14 @@ async function loadModel() {
     _embeddingsDisabledByDesign = true;
     return;
   }
-  const totalMem = os3.totalmem();
+  const totalMem = os2.totalmem();
   if (totalMem <= MAX_SMALL_TOTAL_BYTES) {
     process.stderr.write(`[exed] Skipping embeddings \u2014 total RAM ${(totalMem / 1024 ** 3).toFixed(1)} GB <= 16 GB (FTS+Graph only).
 `);
     _embeddingsDisabledByDesign = true;
     return;
   }
-  if (os3.freemem() < MIN_FREE_MEM_BYTES) {
+  if (os2.freemem() < MIN_FREE_MEM_BYTES) {
     process.stderr.write(`[exed] Skipping embeddings \u2014 free RAM < 2 GB.
 `);
     _embeddingsDisabledByDesign = true;
@@ -1242,8 +994,8 @@ async function loadModel() {
   }
   process.stderr.write("[exed] Spawning embed worker process...\n");
   try {
-    const workerPath = path4.join(path4.dirname(new URL(import.meta.url).pathname), "embed-worker.js");
-    if (!existsSync4(workerPath)) {
+    const workerPath = path3.join(path3.dirname(new URL(import.meta.url).pathname), "embed-worker.js");
+    if (!existsSync3(workerPath)) {
       process.stderr.write(`[exed] Embed worker not found at ${workerPath} \u2014 running without embeddings.
 `);
       return;
@@ -1328,7 +1080,7 @@ async function loadModel() {
       const oomShaped = code === 134 || signal === "SIGKILL" || signal === "SIGABRT";
       if (oomShaped) {
         try {
-          mkdirSync3(path4.dirname(OOM_MARKER_PATH), { recursive: true });
+          mkdirSync2(path3.dirname(OOM_MARKER_PATH), { recursive: true });
           writeFileSync3(OOM_MARKER_PATH, `embed-worker OOM exit (code=${code}, signal=${signal ?? "none"}) at ${(/* @__PURE__ */ new Date()).toISOString()}
 `);
           process.stderr.write(`[exed] Embed worker OOM-shaped exit \u2014 wrote OOM marker; respawns will skip model load until it TTL-clears.
@@ -1349,7 +1101,7 @@ async function loadModel() {
         void (async () => {
           try {
             if (_storeInitialized) {
-              const { writeNotification } = await import("../notifications-AMJ2K3MM.js");
+              const { writeNotification } = await import("../notifications-UP7WQGG4.js");
               await writeNotification({
                 agentId: "exe",
                 agentRole: "system",
@@ -1430,7 +1182,7 @@ function disableEmbeddingsForInferenceTimeouts() {
   if (_embeddingsDisabledByDesign) return;
   _embeddingsDisabledByDesign = true;
   try {
-    mkdirSync3(path4.dirname(EMBED_TIMEOUT_MARKER_PATH), { recursive: true });
+    mkdirSync2(path3.dirname(EMBED_TIMEOUT_MARKER_PATH), { recursive: true });
     writeFileSync3(
       EMBED_TIMEOUT_MARKER_PATH,
       `embed inference timed out ${_embedConsecutiveTimeouts}x consecutively at ${(/* @__PURE__ */ new Date()).toISOString()}
@@ -1465,7 +1217,7 @@ function disableEmbeddingsForInferenceTimeouts() {
   void (async () => {
     try {
       if (_storeInitialized) {
-        const { writeNotification } = await import("../notifications-AMJ2K3MM.js");
+        const { writeNotification } = await import("../notifications-UP7WQGG4.js");
         await writeNotification({
           agentId: "exe",
           agentRole: "system",
@@ -1638,6 +1390,7 @@ async function shutdown(exitCode = 0) {
   if (_shuttingDown) return;
   _shuttingDown = true;
   _drainingWrites = true;
+  clearDaemonReady();
   if (exitCode !== 0) {
     recordDaemonCrash();
   }
@@ -1675,7 +1428,7 @@ async function shutdown(exitCode = 0) {
     }
   }
   try {
-    const { createBackupAsync, enforceRetention, hasRecentBackup } = await import("../db-backup-VZHSFUVA.js");
+    const { createBackupAsync, enforceRetention, hasRecentBackup } = await import("../db-backup-EORG4LBO.js");
     const PRE_RESTART_DEDUP_MS = 2 * 60 * 1e3;
     if (hasRecentBackup("pre-restart", PRE_RESTART_DEDUP_MS)) {
       const deleted = enforceRetention("pre-restart");
@@ -1706,7 +1459,7 @@ async function shutdown(exitCode = 0) {
 `);
   }
   try {
-    const { stopProjectionWorker } = await import("../projection-worker-WWXZK7QD.js");
+    const { stopProjectionWorker } = await import("../projection-worker-HWY37MNC.js");
     stopProjectionWorker();
   } catch {
   }
@@ -1738,7 +1491,7 @@ async function shutdown(exitCode = 0) {
       savedAt: Date.now()
     })) : [];
     if (sessionsToSave.length > 0) {
-      const sessPath = path4.join(EXE_AI_DIR, "mcp-sessions-persist.json");
+      const sessPath = path3.join(EXE_AI_DIR, "mcp-sessions-persist.json");
       writeFileSync3(sessPath, JSON.stringify(sessionsToSave) + "\n", { mode: 384 });
       process.stderr.write(`[exed] Persisted ${sessionsToSave.length} MCP session(s) for next daemon.
 `);
@@ -1772,7 +1525,7 @@ async function handleHealthCheck(socket, requestId) {
   let pipelineStatus = "unknown";
   if (dbConnected) {
     try {
-      await import("../pipeline-router-4LT5YG5P.js");
+      await import("../pipeline-router-5CRWKESM.js");
       pipelineStatus = "ok";
     } catch {
       pipelineStatus = "unavailable";
@@ -1942,15 +1695,15 @@ async function handleDbBatch(socket, requestId, statements, mode) {
   }
 }
 var _ingestCount = 0;
-var INGEST_OUTBOX_DIR = path4.join(EXE_AI_DIR, "ingest-outbox");
+var INGEST_OUTBOX_DIR = path3.join(EXE_AI_DIR, "ingest-outbox");
 function persistIngestOutbox(req) {
   try {
-    mkdirSync3(INGEST_OUTBOX_DIR, { recursive: true });
+    mkdirSync2(INGEST_OUTBOX_DIR, { recursive: true });
     const id = randomUUID();
-    const finalPath = path4.join(INGEST_OUTBOX_DIR, `${Date.now()}-${id}.json`);
+    const finalPath = path3.join(INGEST_OUTBOX_DIR, `${Date.now()}-${id}.json`);
     const tmpPath = `${finalPath}.tmp`;
     writeFileSync3(tmpPath, JSON.stringify(req) + "\n", { mode: 384 });
-    renameSync2(tmpPath, finalPath);
+    renameSync(tmpPath, finalPath);
     return finalPath;
   } catch (err) {
     process.stderr.write(`[exed] Ingest outbox persist failed: ${err instanceof Error ? err.message : String(err)}
@@ -1960,10 +1713,10 @@ function persistIngestOutbox(req) {
 }
 async function drainIngestOutbox() {
   try {
-    if (!existsSync4(INGEST_OUTBOX_DIR)) return;
+    if (!existsSync3(INGEST_OUTBOX_DIR)) return;
     const files = readdirSync(INGEST_OUTBOX_DIR).filter((f) => f.endsWith(".json")).sort().slice(0, 500);
     for (const file of files) {
-      const fullPath = path4.join(INGEST_OUTBOX_DIR, file);
+      const fullPath = path3.join(INGEST_OUTBOX_DIR, file);
       try {
         const req = JSON.parse(readFileSync3(fullPath, "utf8"));
         await handleIngest(req, fullPath);
@@ -2168,7 +1921,7 @@ async function _writeMemoryRecordInner(entry) {
   const vRow = await client.execute({ sql: "SELECT version FROM memories WHERE id = ?", args: [id] });
   const version = Number(vRow.rows[0]?.version) || 0;
   try {
-    const { insertOntologyForMemory } = await import("../agentic-ontology-M7T72M6V.js");
+    const { insertOntologyForMemory } = await import("../agentic-ontology-6KBAXLSJ.js");
     await insertOntologyForMemory({
       id,
       agent_id: record.agent_id,
@@ -2252,7 +2005,7 @@ function startMessageQueueDrain() {
     fired("message_queue_drain");
     if (!await ensureStoreForPolling()) return;
     try {
-      const { claimMessageQueue, ackMessageQueue } = await import("../message-queue-client-QTC3VHJT.js");
+      const { claimMessageQueue, ackMessageQueue } = await import("../message-queue-client-4VDU6BZY.js");
       const lease = claimMessageQueue();
       if (!lease || lease.entries.length === 0) return;
       acted("message_queue_drain");
@@ -2306,14 +2059,14 @@ function startMessageQueueDrain() {
 `);
 }
 function startServer() {
-  mkdirSync3(path4.dirname(SOCKET_PATH), { recursive: true });
+  mkdirSync2(path3.dirname(SOCKET_PATH), { recursive: true });
   try {
-    chmodSync(path4.dirname(SOCKET_PATH), 448);
+    chmodSync(path3.dirname(SOCKET_PATH), 448);
   } catch {
   }
   _daemonToken = ensureDaemonToken(process.env[DAEMON_TOKEN_ENV] ?? null);
   for (const oldFile of ["embed.sock", "embed.pid"]) {
-    const oldPath = path4.join(path4.dirname(SOCKET_PATH), oldFile);
+    const oldPath = path3.join(path3.dirname(SOCKET_PATH), oldFile);
     try {
       if (oldFile.endsWith(".pid")) {
         const pid = parseInt(readFileSync3(oldPath, "utf8").trim(), 10);
@@ -2621,9 +2374,21 @@ async function startMcpHttpServer() {
     }, resolveMcpSessionDetails2 = function(sessionId, requestDetails) {
       const persisted = sessionDetails.get(sessionId);
       if (!persisted) return requestDetails;
+      const recon = reconcileSessionAgentIdentity(
+        persisted.agentId,
+        requestDetails.agentId,
+        shouldEnforceSessionIdentity()
+      );
+      if (recon.impersonationDetected) {
+        process.stderr.write(
+          `[exed] SECURITY: agent identity mismatch on recovered session ${sessionId.slice(0, 8)} \u2014 claimed="${recon.claimedAgentId}" bound="${recon.boundAgentId}" coerced to bound
+`
+        );
+      }
       return {
-        agentId: requestDetails.agentId === "default" ? persisted.agentId : requestDetails.agentId,
-        agentRole: requestDetails.agentRole === "employee" ? persisted.agentRole : requestDetails.agentRole,
+        // Bound identity wins (data isolation). Role follows the bound agent.
+        agentId: recon.effectiveAgentId,
+        agentRole: recon.impersonationDetected || requestDetails.agentRole === "employee" ? persisted.agentRole : requestDetails.agentRole,
         runtime: requestDetails.runtime === "Unknown" ? persisted.runtime : requestDetails.runtime,
         sessionHint: requestDetails.sessionHint || persisted.sessionHint,
         transient: requestDetails.transient ?? persisted.transient
@@ -2737,8 +2502,8 @@ async function startMcpHttpServer() {
     _bootstrapServerRef = createHttpServer((req, res) => {
       try {
         res.setHeader("Access-Control-Allow-Origin", "http://127.0.0.1");
-        const path5 = (req.url || "/").split("?")[0];
-        if (req.method === "GET" && path5 === "/health") {
+        const path4 = (req.url || "/").split("?")[0];
+        if (req.method === "GET" && path4 === "/health") {
           res.writeHead(200, { "Content-Type": "application/json" });
           res.end(JSON.stringify({ status: "starting", version: PACKAGE_VERSION }));
           return;
@@ -2784,7 +2549,7 @@ async function startMcpHttpServer() {
     }
     process.stderr.write("[exed] MCP HTTP: DB ready\n");
     _storeInitialized = true;
-    const { initLicenseGate, getCachedLicenseGate } = await import("../license-gate-V2UCK4KJ.js");
+    const { initLicenseGate, getCachedLicenseGate } = await import("../license-gate-7SDHCJUO.js");
     const gateResult = await initLicenseGate();
     if (!gateResult.hasKey) {
       process.stderr.write(
@@ -2799,13 +2564,13 @@ async function startMcpHttpServer() {
     let _cachedWrapTelemetry = null;
     async function getWrapTelemetry() {
       if (!_cachedWrapTelemetry) {
-        const { wrapServerWithTelemetry } = await import("../tool-telemetry-BLSVABFJ.js");
+        const { wrapServerWithTelemetry } = await import("../tool-telemetry-BS5JXM5M.js");
         _cachedWrapTelemetry = wrapServerWithTelemetry;
       }
       return _cachedWrapTelemetry;
     }
     Promise.all([
-      import("../tool-capability-index-RHPVMMDD.js"),
+      import("../tool-capability-index-ZEXBWKUZ.js"),
       import("../tool-gates-3IC7DK4R.js")
     ]).then(async ([{ getToolCapabilityIndex }, { TOOL_CATEGORIES }]) => {
       const gateState = getCachedLicenseGate();
@@ -2869,7 +2634,7 @@ async function startMcpHttpServer() {
       if (!token || token === header) return false;
       if (token === _daemonToken) return true;
       try {
-        const { verifyAccessToken } = await import("../oauth-server-BPN55EJM.js");
+        const { verifyAccessToken } = await import("../oauth-server-EWUL7DMD.js");
         const result = verifyAccessToken(token);
         return result.valid;
       } catch {
@@ -2879,8 +2644,8 @@ async function startMcpHttpServer() {
     const pendingStaleSessionRecoveries = /* @__PURE__ */ new Map();
     _mcpSessionDetailsRef = sessionDetails;
     try {
-      const sessPath = path4.join(EXE_AI_DIR, "mcp-sessions-persist.json");
-      if (existsSync4(sessPath)) {
+      const sessPath = path3.join(EXE_AI_DIR, "mcp-sessions-persist.json");
+      if (existsSync3(sessPath)) {
         const raw = readFileSync3(sessPath, "utf-8");
         const saved = JSON.parse(raw);
         const MAX_AGE_MS = 5 * 60 * 1e3;
@@ -3109,7 +2874,7 @@ async function startMcpHttpServer() {
         return;
       }
       try {
-        const { handleOAuthRoute } = await import("../oauth-server-BPN55EJM.js");
+        const { handleOAuthRoute } = await import("../oauth-server-EWUL7DMD.js");
         const handled = await handleOAuthRoute(req, res, url, MCP_HTTP_PORT);
         if (handled) return;
       } catch (err) {
@@ -3199,6 +2964,27 @@ async function startMcpHttpServer() {
         else res.end(JSON.stringify({ status: "ok", pid: process.pid, uptime: Math.floor(process.uptime()) }));
         return;
       }
+      if (url.pathname === "/v1/ratelimit" && req.method === "POST") {
+        try {
+          const chunks = [];
+          for await (const chunk of req) chunks.push(typeof chunk === "string" ? Buffer.from(chunk) : chunk);
+          const body = JSON.parse(Buffer.concat(chunks).toString("utf-8"));
+          if (!body.tool) {
+            res.writeHead(400, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ error: "tool is required" }));
+            return;
+          }
+          const { incrementSharedWindow } = await import("../shared-rate-limit-store-QZPQEVE2.js");
+          const limit = Number.isFinite(body.limit) && body.limit > 0 ? body.limit : 100;
+          const result = incrementSharedWindow(body.tool, body.agent || "unknown", limit);
+          res.writeHead(200, { "Content-Type": "application/json" });
+          res.end(JSON.stringify({ count: result.count, limit: result.limit, exceeded: result.exceeded }));
+        } catch (e) {
+          res.writeHead(500, { "Content-Type": "application/json" });
+          res.end(JSON.stringify({ error: e instanceof Error ? e.message : String(e) }));
+        }
+        return;
+      }
       if (url.pathname === "/v1/heartbeat" && req.method === "POST") {
         try {
           const chunks = [];
@@ -3216,7 +3002,7 @@ async function startMcpHttpServer() {
             contextPct: body.context_pct
           });
           if (body.context_pct !== void 0 && body.context_pct > 70) {
-            void import("../orchestration-events-MB4QVHTD.js").then(({ recordOrchestrationEventBestEffort: recordOE }) => {
+            void import("../orchestration-events-PZLLPCKY.js").then(({ recordOrchestrationEventBestEffort: recordOE }) => {
               recordOE({
                 eventType: "context.pressure",
                 source: "exe-daemon.heartbeat",
@@ -3253,6 +3039,22 @@ async function startMcpHttpServer() {
         res.end(JSON.stringify({ error: "not_found" }));
         return;
       }
+      if (isEventLoopBlockedNow()) {
+        res.writeHead(503, { "Content-Type": "application/json", "Retry-After": "3" });
+        res.end(JSON.stringify({
+          jsonrpc: "2.0",
+          error: { code: -32001, message: "Daemon event loop blocked \u2014 MCP temporarily degraded. Retry in a few seconds." },
+          id: null
+        }));
+        recordMcpHttpEvent({
+          level: "warn",
+          message: "event_loop_blocked_503",
+          method: req.method,
+          status: 503,
+          error: `path=${url.pathname}`
+        });
+        return;
+      }
       const authed = await verifyHttpBearerAuth(req.headers.authorization);
       if (!authed) {
         sendJsonRpcError2(res, 401, "Unauthorized: Bearer token required", "unknown", {
@@ -3352,6 +3154,38 @@ async function startMcpHttpServer() {
       if (sessionId && transports.has(sessionId)) {
         transport = transports.get(sessionId);
         sessionLastSeen.set(sessionId, Date.now());
+        const boundDetails = sessionDetails.get(sessionId);
+        if (boundDetails) {
+          const enforce = shouldEnforceSessionIdentity();
+          const recon = reconcileSessionAgentIdentity(boundDetails.agentId, agentId, enforce);
+          if (recon.impersonationDetected) {
+            process.stderr.write(
+              `[exed] SECURITY: agent identity mismatch on session ${sessionId.slice(0, 8)} \u2014 claimed="${recon.claimedAgentId}" bound="${recon.boundAgentId}" ${enforce ? "REJECTED" : "coerced to bound (warn)"}
+`
+            );
+            recordMcpHttpEvent({
+              level: "warn",
+              message: enforce ? "agent_impersonation_rejected" : "agent_impersonation_coerced",
+              method: req.method,
+              sessionId,
+              agentId: recon.boundAgentId,
+              agentRole: boundDetails.agentRole,
+              runtime
+            });
+            if (recon.reject) {
+              sendJsonRpcError2(
+                res,
+                403,
+                `Agent identity mismatch: session is bound to "${recon.boundAgentId}" but request claimed "${recon.claimedAgentId}".`,
+                getJsonRpcId2(parsedBody),
+                { sessionId, claimedAgentId: recon.claimedAgentId, boundAgentId: recon.boundAgentId }
+              );
+              return;
+            }
+          }
+          agentId = recon.effectiveAgentId;
+          agentRole = boundDetails.agentRole;
+        }
       } else if (!sessionId && req.method === "POST" && isInitializeRequest(parsedBody)) {
         try {
           const { initDatabase, isInitialized, ensureSchema } = await import("./database.js");
@@ -3647,6 +3481,7 @@ async function startMcpHttpServer() {
       httpServer.listen(MCP_HTTP_PORT, MCP_HTTP_HOST, () => {
         process.stderr.write(`[exed] MCP HTTP listening on ${MCP_HTTP_HOST}:${MCP_HTTP_PORT}
 `);
+        writeDaemonReady({ pid: process.pid, port: MCP_HTTP_PORT });
         void import("../mcp-port-config-AWWRZA22.js").then(({ persistMcpPortToConfig }) => persistMcpPortToConfig(String(MCP_HTTP_PORT))).catch(() => {
         });
         recordMcpHttpEvent({
@@ -3751,13 +3586,13 @@ async function ensureStoreForPolling() {
   }
 }
 async function startReviewPolling() {
-  const polling = await import("../review-polling-E4ALHTQE.js");
+  const polling = await import("../review-polling-65JZUE3T.js");
   const state = {
     lastIntercomSent: /* @__PURE__ */ new Map(),
     lastNudgeSent: /* @__PURE__ */ new Map(),
     intervalMs: REVIEW_POLL_INTERVAL_MS
   };
-  const { pollReviewNudge, createReviewNudgeRealDeps, loadNudgeState } = await import("../daemon-orchestration-V6HALVDS.js");
+  const { pollReviewNudge, createReviewNudgeRealDeps, loadNudgeState } = await import("../daemon-orchestration-G4RRTPP7.js");
   const nudgeState = loadNudgeState();
   const tick = async () => traceDaemonTimer("review_polling", async () => {
     fired("review_polling");
@@ -3801,7 +3636,7 @@ function startSessionTTL() {
     if (!await ensureStoreForPolling()) return;
     try {
       const { getClient } = await import("./database.js");
-      const { checkSessionTTL, createSessionTTLRealDeps } = await import("../daemon-orchestration-V6HALVDS.js");
+      const { checkSessionTTL, createSessionTTLRealDeps } = await import("../daemon-orchestration-G4RRTPP7.js");
       const deps = createSessionTTLRealDeps(getClient);
       const killed = await checkSessionTTL(deps);
       if (killed.length > 0) acted("session_ttl");
@@ -3822,12 +3657,12 @@ function startIdleKill() {
     fired("idle_kill");
     if (!await ensureStoreForPolling()) return;
     try {
-      const signalDir = path4.join(os3.homedir(), ".exe-os", "task-signals");
-      if (existsSync4(signalDir)) {
+      const signalDir = path3.join(os2.homedir(), ".exe-os", "task-signals");
+      if (existsSync3(signalDir)) {
         const files = (await import("fs")).readdirSync(signalDir).filter((f) => f.endsWith(".terminate"));
         for (const file of files) {
           const agentId = file.replace(".terminate", "");
-          const signalPath = path4.join(signalDir, file);
+          const signalPath = path3.join(signalDir, file);
           try {
             const sessions = await getTmuxSessionsAsync();
             const match = sessions.find((s) => s.startsWith(`${agentId}-`) || s.startsWith(`${agentId}2-`) || s.startsWith(`${agentId}3-`));
@@ -3849,7 +3684,7 @@ function startIdleKill() {
       const cfg = await getCachedConfig();
       if (!cfg) return;
       const { getClient } = await import("./database.js");
-      const { pollIdleKill, createIdleKillRealDeps } = await import("../daemon-orchestration-V6HALVDS.js");
+      const { pollIdleKill, createIdleKillRealDeps } = await import("../daemon-orchestration-G4RRTPP7.js");
       const { sessions: liveSessions, paneCache, aliveSessions } = await getSharedOrchestrationCaches();
       const realDeps = createIdleKillRealDeps(
         getClient,
@@ -3918,7 +3753,7 @@ function startConsolidation() {
 `);
       }
       try {
-        const { createBackupAsync, enforceRetention } = await import("../db-backup-VZHSFUVA.js");
+        const { createBackupAsync, enforceRetention } = await import("../db-backup-EORG4LBO.js");
         const p = await createBackupAsync("pre-consolidation");
         if (p) enforceRetention("pre-consolidation");
       } catch (e) {
@@ -4102,7 +3937,7 @@ function startSkillRefinement() {
     if (!shouldRunHeavyJob("skill_refinement")) return;
     try {
       if (!await ensureStoreForPolling()) return;
-      const { runSkillRefinement } = await import("../skill-refinement-FTURVWFN.js");
+      const { runSkillRefinement } = await import("../skill-refinement-DUOO6B7V.js");
       const result = await runSkillRefinement();
       if (result.reviewed > 0) {
         acted("skill_refinement");
@@ -4128,7 +3963,7 @@ function startStaleBranchSweep() {
   const tick = async () => {
     fired("stale_branch_sweep");
     try {
-      const { discoverRepoPaths } = await import("../worktree-sweep-AS6GAR6X.js");
+      const { discoverRepoPaths } = await import("../worktree-sweep-K3CJFSUL.js");
       const { scanUnmergedBranches } = await import("../branch-hygiene-55TKIWAZ.js");
       const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
       for (const k of _staleBranchAlertedToday) {
@@ -4155,7 +3990,7 @@ function startStaleBranchSweep() {
         if (!_storeInitialized) continue;
         const stale = scan.branches.filter((b) => b.ageHours >= STALE_BRANCH_HOURS).slice(0, 5).map((b) => `${b.name} (+${b.ahead} commits, ${(b.ageHours / 24).toFixed(1)}d)`).join("; ");
         try {
-          const { writeNotification } = await import("../notifications-AMJ2K3MM.js");
+          const { writeNotification } = await import("../notifications-UP7WQGG4.js");
           await writeNotification({
             agentId: "exe",
             agentRole: "system",
@@ -4194,7 +4029,7 @@ function startGraphExtraction() {
       if (!await ensureStoreForPolling()) return;
       const { getClient } = await import("./database.js");
       const client = getClient();
-      const { extractBatch } = await import("../graph-rag-3RZN7JR3.js");
+      const { extractBatch } = await import("../graph-rag-HITZZ63L.js");
       const result = await extractBatch(client, 50, config.selfQueryModel);
       if (result.processed > 0) {
         acted("graph_extraction");
@@ -4420,7 +4255,7 @@ function startGraphPgSync() {
 `);
 }
 var AGENT_STATS_INTERVAL_MS = 60 * 1e3;
-var AGENT_STATS_PATH = path4.join(EXE_AI_DIR, "agent-stats.json");
+var AGENT_STATS_PATH = path3.join(EXE_AI_DIR, "agent-stats.json");
 var _agentStatsInFlight = false;
 var _cachedAgentData = null;
 async function writeAgentStats() {
@@ -4608,7 +4443,7 @@ function startReflectionSweep() {
       );
       let runReflection;
       try {
-        ({ runReflection } = await import("../memory-reflection-UKKTGZYR.js"));
+        ({ runReflection } = await import("../memory-reflection-PXF6YFDU.js"));
       } catch (importErr) {
         _reflectionImportFailed = true;
         process.stderr.write(`[exed] Reflection module unavailable (stale chunk hash?) \u2014 disabled until daemon restart: ${importErr instanceof Error ? importErr.message : String(importErr)}
@@ -4647,7 +4482,7 @@ function startReflectionSweep() {
       if (memories > 100 && cards < memories * 0.1) {
         process.stderr.write(`[exed] Memory cards sparse (${cards} cards / ${memories} memories) \u2014 running backfill...
 `);
-        const { insertMemoryCardsForBatch } = await import("../memory-cards-BGI6MJRN.js");
+        const { insertMemoryCardsForBatch } = await import("../memory-cards-II67WFL2.js");
         const batchSize = 500;
         let offset = 0;
         let totalCards = 0;
@@ -4692,7 +4527,7 @@ function startDatabaseBackup() {
     fired("db_backup");
     if (!shouldRunHeavyJob("db_backup")) return;
     try {
-      const { createBackupAsync, enforceRetention, hasBackupToday } = await import("../db-backup-VZHSFUVA.js");
+      const { createBackupAsync, enforceRetention, hasBackupToday } = await import("../db-backup-EORG4LBO.js");
       if (hasBackupToday("daily")) return;
       const backupPath = await createBackupAsync("daily");
       if (backupPath) {
@@ -4761,7 +4596,7 @@ function startSessionEventsRetention() {
     if (!await ensureStoreForPolling()) return;
     try {
       const { getClient } = await import("./database.js");
-      const { sweepExpiredSessionEvents, DEFAULT_SESSION_EVENTS_RETENTION_DAYS } = await import("../session-events-3J6APMKN.js");
+      const { sweepExpiredSessionEvents, DEFAULT_SESSION_EVENTS_RETENTION_DAYS } = await import("../session-events-EJ3OSAA6.js");
       const days = SESSION_EVENTS_RETENTION_DAYS ?? DEFAULT_SESSION_EVENTS_RETENTION_DAYS;
       const count = await sweepExpiredSessionEvents(getClient(), days);
       if (count > 0) {
@@ -4829,7 +4664,7 @@ function startOrphanReaper() {
   const tick = async () => traceDaemonTimer("orphan_reaper", async () => {
     fired("orphan_reaper");
     try {
-      const { reapOrphanedMcpProcesses, createOrphanReaperRealDepsAsync } = await import("../daemon-orchestration-V6HALVDS.js");
+      const { reapOrphanedMcpProcesses, createOrphanReaperRealDepsAsync } = await import("../daemon-orchestration-G4RRTPP7.js");
       const deps = await createOrphanReaperRealDepsAsync();
       const reaped = await reapOrphanedMcpProcesses(deps);
       if (reaped.length > 0) acted("orphan_reaper");
@@ -4854,7 +4689,7 @@ function startZombieAgentReaper() {
   const tick = async () => traceDaemonTimer("zombie_agent_reaper", async () => {
     fired("zombie_agent_reaper");
     try {
-      const { reapZombieAgentProcesses, createZombieAgentReaperRealDepsAsync } = await import("../daemon-orchestration-V6HALVDS.js");
+      const { reapZombieAgentProcesses, createZombieAgentReaperRealDepsAsync } = await import("../daemon-orchestration-G4RRTPP7.js");
       const deps = await createZombieAgentReaperRealDepsAsync();
       const reaped = reapZombieAgentProcesses(deps);
       if (reaped.length > 0) acted("zombie_agent_reaper");
@@ -4878,7 +4713,7 @@ function startWorktreeReaper() {
   const tick = async () => traceDaemonTimer("worktree_reaper", async () => {
     fired("worktree_reaper");
     try {
-      const { reapOrphanedWorktrees, createWorktreeReaperRealDeps } = await import("../daemon-orchestration-V6HALVDS.js");
+      const { reapOrphanedWorktrees, createWorktreeReaperRealDeps } = await import("../daemon-orchestration-G4RRTPP7.js");
       const deps = await createWorktreeReaperRealDeps();
       const result = await reapOrphanedWorktrees(deps);
       if (result.pruned.length > 0) {
@@ -4918,8 +4753,8 @@ function startWorktreeReaper() {
               }
               continue;
             }
-            const { cleanupAgentWorktree } = await import("../worktree-sweep-AS6GAR6X.js");
-            const { getMainRepoRoot } = await import("../worktree-XISIYRM4.js");
+            const { cleanupAgentWorktree } = await import("../worktree-sweep-K3CJFSUL.js");
+            const { getMainRepoRoot } = await import("../worktree-2CXY6NEB.js");
             const repoRoot = getMainRepoRoot(signal.worktreePath);
             if (repoRoot && signal.agentId) {
               const notes = cleanupAgentWorktree(repoRoot, signal.agentId);
@@ -4953,7 +4788,7 @@ function startWalCheckpoint() {
     try {
       const { getClient, runWalCheckpoint } = await import("./database.js");
       const client = getClient();
-      const { findActiveDb } = await import("../db-backup-VZHSFUVA.js");
+      const { findActiveDb } = await import("../db-backup-EORG4LBO.js");
       const dbPath = findActiveDb();
       const started = Date.now();
       const result = await runWalCheckpoint(client, dbPath, true);
@@ -5025,7 +4860,7 @@ function startStuckTaskRelease() {
     if (!await ensureStoreForPolling()) return;
     try {
       const { getClient } = await import("./database.js");
-      const { releaseStuckTasks, createStuckTaskRealDeps } = await import("../daemon-orchestration-V6HALVDS.js");
+      const { releaseStuckTasks, createStuckTaskRealDeps } = await import("../daemon-orchestration-G4RRTPP7.js");
       const deps = createStuckTaskRealDeps(getClient);
       const released = await releaseStuckTasks(deps);
       if (released.length > 0) {
@@ -5047,7 +4882,7 @@ var _cachedV8HeapLimitBytes = null;
 function getV8HeapLimitBytes() {
   if (_cachedV8HeapLimitBytes !== null) return _cachedV8HeapLimitBytes;
   try {
-    _cachedV8HeapLimitBytes = v82.getHeapStatistics().heap_size_limit;
+    _cachedV8HeapLimitBytes = v8.getHeapStatistics().heap_size_limit;
   } catch {
     _cachedV8HeapLimitBytes = 4 * 1024 ** 3;
   }
@@ -5129,7 +4964,7 @@ function startExternalRssWatchdog() {
         restartBytes: RSS_RESTART_BYTES,
         checkMs: RSS_CHECK_INTERVAL_MS,
         markerPath: OOM_MARKER_PATH,
-        cwd: os3.homedir(),
+        cwd: os2.homedir(),
         // External path can't GC the daemon → require one extra consecutive sample
         // beyond the in-process debounce before terminating.
         debounceN: DAEMON_RSS_RESTART_DEBOUNCE + 1,
@@ -5157,12 +4992,12 @@ function startTaskEnforcementScanner() {
   const tick = async () => traceDaemonTimer("task_enforcement", async () => {
     fired("task_enforcement");
     try {
-      const { runTaskEnforcementTick } = await import("../task-enforcement-GY3VTY6L.js");
+      const { runTaskEnforcementTick } = await import("../task-enforcement-UOULTGFB.js");
       const { getTransport } = await import("./transport.js");
       const { loadAgentConfig } = await import("./agent-config.js");
       const { getClient } = await import("./database.js");
       const { loadEmployeesSync } = await import("./employees.js");
-      const { sessionScopeFilter } = await import("../task-scope-PYOK7OQ6.js");
+      const { sessionScopeFilter } = await import("../task-scope-P5STKYAC.js");
       const transport = getTransport();
       const { sessions: allSessions, paneCache, aliveSessions } = await getSharedOrchestrationCaches();
       await yieldToEventLoop();
@@ -5173,10 +5008,10 @@ function startTaskEnforcementScanner() {
         sendKeysLiteral: transport.sendKeysLiteral?.bind(transport),
         isAlive: (session) => aliveSessions.has(session)
       };
-      const { checkAutoWakeGates } = await import("../daemon-orchestration-V6HALVDS.js");
+      const { checkAutoWakeGates } = await import("../daemon-orchestration-G4RRTPP7.js");
       const { ensureEmployeeAsync, employeeSessionName } = await import("./tmux-routing.js");
       const { shouldAutoInstance } = await import("./employees.js");
-      const { recordOrchestrationEventBestEffort } = await import("../orchestration-events-MB4QVHTD.js");
+      const { recordOrchestrationEventBestEffort } = await import("../orchestration-events-PZLLPCKY.js");
       const projectDir = process.cwd();
       await runTaskEnforcementTick({
         transport: enforcementTransport,
@@ -5300,7 +5135,7 @@ function startRssWatchdog() {
 `
         );
         try {
-          mkdirSync3(path4.dirname(OOM_MARKER_PATH), { recursive: true });
+          mkdirSync2(path3.dirname(OOM_MARKER_PATH), { recursive: true });
           writeFileSync3(OOM_MARKER_PATH, `RSS=${(effectiveRss / 1024 / 1024).toFixed(0)}MB at ${(/* @__PURE__ */ new Date()).toISOString()}
 `);
           process.stderr.write(`[exed] Wrote OOM marker at ${OOM_MARKER_PATH}
@@ -5415,11 +5250,11 @@ function startApiWatchdog() {
           process.stderr.write(`[exed] API watchdog nudged ${session} (attempt ${nudgeCount}/3, matched: ${matchedPattern.source})
 `);
           try {
-            const { appendFileSync: appendFileSync2, mkdirSync: mkdirSync4, statSync: statSyncFs, renameSync: renameSyncFs } = await import("fs");
+            const { appendFileSync, mkdirSync: mkdirSync3, statSync: statSyncFs, renameSync: renameSyncFs } = await import("fs");
             const { join } = await import("path");
             const logDir = join(process.env.EXE_OS_DIR ?? join(process.env.HOME ?? "", ".exe-os"), "logs");
             try {
-              mkdirSync4(logDir, { recursive: true });
+              mkdirSync3(logDir, { recursive: true });
             } catch {
             }
             const watchdogLogPath = join(logDir, "api-watchdog.jsonl");
@@ -5428,7 +5263,7 @@ function startApiWatchdog() {
               if (wStat.size > 5 * 1024 * 1024) renameSyncFs(watchdogLogPath, watchdogLogPath + ".1");
             } catch {
             }
-            appendFileSync2(
+            appendFileSync(
               watchdogLogPath,
               JSON.stringify({ ts: (/* @__PURE__ */ new Date()).toISOString(), session, pattern: matchedPattern.source }) + "\n"
             );
@@ -5633,7 +5468,7 @@ function killOrphanDaemons() {
 }
 function checkExistingDaemon() {
   try {
-    if (!existsSync4(PID_PATH)) {
+    if (!existsSync3(PID_PATH)) {
       killOrphanDaemons();
       return false;
     }
@@ -5774,7 +5609,7 @@ try {
 } catch {
 }
 markAsDaemonProcess();
-var DAEMON_BOOT_PATH = path4.join(EXE_AI_DIR, "daemon-boot-ts");
+var DAEMON_BOOT_PATH = path3.join(EXE_AI_DIR, "daemon-boot-ts");
 writeFileSync3(DAEMON_BOOT_PATH, (/* @__PURE__ */ new Date()).toISOString());
 try {
   chmodSync(DAEMON_BOOT_PATH, 420);
@@ -5800,8 +5635,8 @@ try {
 process.env.EXE_IS_DAEMON = "1";
 if (process.platform === "darwin") {
   try {
-    const oldPlist = path4.join(os3.homedir(), "Library", "LaunchAgents", "com.askexe.exed-keepalive.plist");
-    if (existsSync4(oldPlist)) {
+    const oldPlist = path3.join(os2.homedir(), "Library", "LaunchAgents", "com.askexe.exed-keepalive.plist");
+    if (existsSync3(oldPlist)) {
       try {
         execSyncNode(`launchctl unload "${oldPlist}" 2>/dev/null`, { timeout: 5e3 });
       } catch {
@@ -5815,7 +5650,7 @@ if (process.platform === "darwin") {
 logBoot({ socketPath: SOCKET_PATH, pidPath: PID_PATH });
 void (async () => {
   try {
-    const { cleanupCrashDebris } = await import("../db-backup-VZHSFUVA.js");
+    const { cleanupCrashDebris } = await import("../db-backup-EORG4LBO.js");
     const removed = cleanupCrashDebris();
     if (removed > 0) {
       process.stderr.write(`[exed] Startup cleanup: pruned ${removed} crash-debris file(s) (backups/quarantine).
@@ -5827,8 +5662,8 @@ void (async () => {
 function isCpuStarved() {
   const ratio = parseFloat(process.env.EXE_STARVATION_LOAD_RATIO ?? "1.5");
   if (!isFinite(ratio) || ratio <= 0) return false;
-  const load1m = os3.loadavg()[0] ?? 0;
-  const cpuCount = os3.cpus().length || 1;
+  const load1m = os2.loadavg()[0] ?? 0;
+  const cpuCount = os2.cpus().length || 1;
   return load1m > cpuCount * ratio;
 }
 async function runSmokeTests() {
@@ -5970,7 +5805,7 @@ function startEventLoopLagDetector() {
     if (clockJump) {
       consecutiveSevereBlocks = 0;
       try {
-        unlinkSync2(path4.join(os3.homedir(), ".exe-os", "session-cache", "event-loop-blocked.marker"));
+        unlinkSync2(path3.join(os2.homedir(), ".exe-os", "session-cache", "event-loop-blocked.marker"));
       } catch {
       }
       process.stderr.write("[exed] Event loop lag detector: wall-clock jump/sleep detected; reset without self-heal.\n");
@@ -5980,18 +5815,30 @@ function startEventLoopLagDetector() {
       const msg = `[exed] EVENT LOOP BLOCKED ${(lag / 1e3).toFixed(1)}s \u2014 MCP UNRESPONSIVE. Sessions will die.`;
       process.stderr.write(msg + "\n");
       logDaemonHealth({ event: "event_loop_blocked", pid: process.pid, message: msg, data: { lagMs: lag } });
-      void import("../orchestration-events-MB4QVHTD.js").then(({ recordOrchestrationEventBestEffort: recordOE }) => {
+      void import("../orchestration-events-PZLLPCKY.js").then(({ recordOrchestrationEventBestEffort: recordOE }) => {
         recordOE({ eventType: "daemon.event_loop_blocked", source: "exe-daemon.lagDetector", severity: "error", durationMs: lag });
       }).catch(() => {
       });
       try {
-        writeFileSync3(path4.join(os3.homedir(), ".exe-os", "session-cache", "event-loop-blocked.marker"), `lag=${lag}ms at ${(/* @__PURE__ */ new Date()).toISOString()}
+        writeFileSync3(path3.join(os2.homedir(), ".exe-os", "session-cache", "event-loop-blocked.marker"), `lag=${lag}ms at ${(/* @__PURE__ */ new Date()).toISOString()}
 `);
       } catch {
       }
+      clearDaemonReady();
+      try {
+        const load1m = os2.loadavg()[0] ?? 0;
+        const cpuCount = os2.cpus().length || 1;
+        logDaemonHealth({
+          event: "orchestration_health",
+          pid: process.pid,
+          message: `event-loop blocked ${(lag / 1e3).toFixed(1)}s \u2014 load=${load1m.toFixed(2)} loadPerCore=${(load1m / cpuCount).toFixed(2)}`,
+          data: { lagMs: lag, load1m, cpuCount, loadPerCore: load1m / cpuCount }
+        });
+      } catch {
+      }
       if (isCpuStarved()) {
-        const load1m = (os3.loadavg()[0] ?? 0).toFixed(2);
-        const cpuCount = os3.cpus().length || 1;
+        const load1m = (os2.loadavg()[0] ?? 0).toFixed(2);
+        const cpuCount = os2.cpus().length || 1;
         process.stderr.write(
           `[exed] SELF-HEAL SUPPRESSED: load=${load1m} cpus=${cpuCount} \u2014 lag is CPU starvation, not internal hang. Skipping restart.
 `
@@ -6030,6 +5877,7 @@ function startEventLoopLagDetector() {
       consecutiveSevereBlocks = 0;
     } else {
       consecutiveSevereBlocks = 0;
+      writeDaemonReady({ pid: process.pid });
     }
   }, 2e3);
   lagTimer.unref();
@@ -6051,7 +5899,7 @@ function startTaskFileResync() {
       const { readdir, readFile } = await import("fs/promises");
       const { getClient } = await import("./database.js");
       const client = getClient();
-      const tasksRoot = path4.join(os3.homedir(), ".exe-os", "tasks");
+      const tasksRoot = path3.join(os2.homedir(), ".exe-os", "tasks");
       let synced = 0;
       const walkAsync = async (dir) => {
         let entries;
@@ -6061,7 +5909,7 @@ function startTaskFileResync() {
           return;
         }
         for (const e of entries) {
-          const full = path4.join(dir, e.name);
+          const full = path3.join(dir, e.name);
           if (e.isDirectory()) {
             await walkAsync(full);
             continue;
@@ -6086,7 +5934,7 @@ function startTaskFileResync() {
                 });
                 if (Number(res.rowsAffected ?? 0) > 0) {
                   synced++;
-                  void import("../orchestration-events-MB4QVHTD.js").then(({ recordOrchestrationEventBestEffort: recordOE }) => {
+                  void import("../orchestration-events-PZLLPCKY.js").then(({ recordOrchestrationEventBestEffort: recordOE }) => {
                     recordOE({
                       eventType: "task_file.resynced",
                       source: "exe-daemon.taskFileResync",
@@ -6122,7 +5970,7 @@ function startTaskGroupBarriers() {
       fired("task_group_barriers");
       if (!await ensureStoreForPolling()) return;
       try {
-        const { pollTaskGroupBarriers } = await import("../daemon-orchestration-V6HALVDS.js");
+        const { pollTaskGroupBarriers } = await import("../daemon-orchestration-G4RRTPP7.js");
         const firedCount = await pollTaskGroupBarriers();
         if (firedCount > 0) {
           acted("task_group_barriers");
@@ -6144,7 +5992,7 @@ function startCheckpointGc() {
       fired("checkpoint_gc");
       if (!await ensureStoreForPolling()) return;
       try {
-        const { gcStaleCheckpoints } = await import("../daemon-orchestration-V6HALVDS.js");
+        const { gcStaleCheckpoints } = await import("../daemon-orchestration-G4RRTPP7.js");
         const cleared = await gcStaleCheckpoints();
         if (cleared > 0) {
           acted("checkpoint_gc");
@@ -6162,7 +6010,8 @@ function startCheckpointGc() {
 function startDaemonHeartbeat() {
   const HEALTH_HEARTBEAT_MS = 5 * 60 * 1e3;
   setInterval(() => {
-    logHeartbeat();
+    void logHeartbeat().catch(() => {
+    });
   }, HEALTH_HEARTBEAT_MS);
   logDaemonHealth({
     event: "mcp_bind",
@@ -6183,14 +6032,14 @@ function startDispatchAckCleanup() {
 function startProjectionWorkerDeferred() {
   setTimeout(async () => {
     try {
-      const { startProjectionWorker } = await import("../projection-worker-WWXZK7QD.js");
+      const { startProjectionWorker } = await import("../projection-worker-HWY37MNC.js");
       startProjectionWorker();
     } catch {
     }
   }, 2e4);
 }
 async function startToolTelemetry() {
-  const { startToolTelemetryFlush } = await import("../tool-telemetry-BLSVABFJ.js");
+  const { startToolTelemetryFlush } = await import("../tool-telemetry-BS5JXM5M.js");
   startToolTelemetryFlush();
   process.stderr.write("[exed] Tool telemetry started (flush every 5m)\n");
 }
@@ -6287,7 +6136,7 @@ function startLocalFirstTimers() {
     if (_intercomDedupCompleted) return;
     try {
       const { existsSync: markerExists } = await import("fs");
-      const markerPath = path4.join(os3.homedir(), ".exe-os", ".intercom-dedup-done");
+      const markerPath = path3.join(os2.homedir(), ".exe-os", ".intercom-dedup-done");
       if (markerExists(markerPath)) {
         _intercomDedupCompleted = true;
         return;
@@ -6333,7 +6182,7 @@ function startLocalFirstTimers() {
     fired("orphan_task_cleanup");
     try {
       if (!await ensureStoreForPolling()) return;
-      const { cleanOrphanedTaskFiles } = await import("../tasks-crud-HLJEJ2UU.js");
+      const { cleanOrphanedTaskFiles } = await import("../tasks-crud-24HMTULR.js");
       const count = await cleanOrphanedTaskFiles();
       if (count > 0) {
         acted("orphan_task_cleanup");
@@ -6349,7 +6198,7 @@ function startLocalFirstTimers() {
     fired("task_file_consistency");
     try {
       if (!await ensureStoreForPolling()) return;
-      const { checkTaskFileConsistency } = await import("../tasks-crud-HLJEJ2UU.js");
+      const { checkTaskFileConsistency } = await import("../tasks-crud-24HMTULR.js");
       const mismatches = await checkTaskFileConsistency();
       if (mismatches > 0) {
         acted("task_file_consistency");
@@ -6368,7 +6217,7 @@ function startLocalFirstTimers() {
   const TELEMETRY_DAILY_MS = 24 * 60 * 60 * 1e3;
   const telemetryDaily = async () => {
     try {
-      const { sendTelemetry, isTelemetryEnabled } = await import("../telemetry-upload-AXYPFAPS.js");
+      const { sendTelemetry, isTelemetryEnabled } = await import("../telemetry-upload-DWFGC2XJ.js");
       if (!isTelemetryEnabled()) return;
       const { upstream } = await sendTelemetry(24);
       if (upstream.startsWith("sent")) {
@@ -6524,6 +6373,7 @@ export {
   decidePortHolderAction,
   injectRegisterAllTools,
   isCrashLoopBreakerActive,
+  isEventLoopBlockedNow,
   recordDaemonCrash,
   requiresV1BearerAuth,
   rerankViaWorker,