@askexenow/exe-os 0.9.303 → 0.9.310

package/dist/bin/exe-gateway.js

@@ -1,18 +1,21 @@
 #!/usr/bin/env node
+import {
+  resolveBillingMode
+} from "../chunk-G6EJKYK3.js";
 import {
   BotRegistry,
   Gateway
-} from "../chunk-7RMIXFMD.js";
-import "../chunk-5Y2DO57X.js";
-import "../chunk-7DAUFPDV.js";
-import "../chunk-ERAHOO7R.js";
+} from "../chunk-3KH6GXXX.js";
+import "../chunk-X4AFBL4N.js";
+import "../chunk-SOT23KWW.js";
+import "../chunk-2NS3QRMJ.js";
 import "../chunk-ONKIWA3R.js";
 import "../chunk-MP2AFCGL.js";
 import {
   getCoordinatorName
-} from "../chunk-N5G4T47B.js";
+} from "../chunk-SCYWCWKY.js";
 import "../chunk-2I23RPSI.js";
-import "../chunk-Q5V3B6BP.js";
+import "../chunk-GWPICNSO.js";
 import "../chunk-PNQDP3OA.js";
 import "../chunk-VQRTO7IS.js";
 import "../chunk-7HLWBYH7.js";
@@ -910,18 +913,25 @@ function validateApiRouterProductionEnv(env = process.env, logger = console) {
   if (env.NODE_ENV !== "production") return;
   const apiRouterUrl = env.API_ROUTER_URL;
   const apiRouterKey = env.API_ROUTER_KEY;
-  const byokEnabled = env.BYOK_ENABLED === "true";
   const rawAnthropicKey = env.ANTHROPIC_API_KEY;
-  if (byokEnabled) return;
+  const billing = resolveBillingMode(env);
+  if (billing.allowDirectKeys) return;
   if (!apiRouterUrl || !apiRouterKey) {
     logger.error(
-      "[exe-gateway] FATAL: API_ROUTER_URL and API_ROUTER_KEY are required.\n  Customer deploys must route AI requests through the Exe API Router.\n  Set API_ROUTER_URL=https://gateway.askexe.com and API_ROUTER_KEY=<your-key>.\n  To use your own API keys instead, set BYOK_ENABLED=true."
+      `[exe-gateway] FATAL: API_ROUTER_URL and API_ROUTER_KEY are required.
+  Billing mode is metered (${billing.reason}).
+  Customer deploys must route AI requests through the Exe API Router.
+  Set API_ROUTER_URL=https://gateway.askexe.com and API_ROUTER_KEY=<your-key>.
+  To use your own API keys instead, set BYOK_ENABLED=true.`
     );
     throw new Error("API_ROUTER_REQUIRED");
   }
   if (rawAnthropicKey) {
     logger.warn(
-      "[exe-gateway] WARNING: ANTHROPIC_API_KEY is set but BYOK_ENABLED is false.\n  AI requests will route through the API Router (API_ROUTER_URL), not the raw key.\n  To use your own key, set BYOK_ENABLED=true."
+      `[exe-gateway] WARNING: ANTHROPIC_API_KEY is set but BYOK is not enabled.
+  ${billing.reason}.
+  AI requests will route through the API Router (API_ROUTER_URL), not the raw key.
+  To use your own key, set BYOK_ENABLED=true.`
     );
   }
 }
@@ -1110,7 +1120,7 @@ async function main() {
     console.log("[exe-gateway] Generic webhook adapter registered");
   }
   {
-    const { createCRMWebhookHandler } = await import("../crm-webhook-PJZ37A2Q.js");
+    const { createCRMWebhookHandler } = await import("../crm-webhook-DGPHULOO.js");
     const handler = createCRMWebhookHandler();
     server.onPlatform("crm", handler);
     console.log("[exe-gateway] CRM webhook adapter registered");

package/dist/bin/exe-healthcheck.js

@@ -7,15 +7,15 @@ import {
   compareSemver,
   detectAutoupdaterVar,
   runHealthCheck
-} from "../chunk-3BE52GPB.js";
+} from "../chunk-2UVN2NBN.js";
 import "../chunk-FRNXQSB4.js";
 import "../chunk-SSC7EKY2.js";
 import "../chunk-5A6KTWQL.js";
-import "../chunk-7WQ36FAD.js";
+import "../chunk-JZW5AOWI.js";
 import "../chunk-ELXR65AN.js";
-import "../chunk-N5G4T47B.js";
+import "../chunk-SCYWCWKY.js";
 import "../chunk-2I23RPSI.js";
-import "../chunk-Q5V3B6BP.js";
+import "../chunk-GWPICNSO.js";
 import "../chunk-PNQDP3OA.js";
 import "../chunk-VQRTO7IS.js";
 import "../chunk-7HLWBYH7.js";

package/dist/bin/exe-heartbeat.js

@@ -1,42 +1,42 @@
 #!/usr/bin/env node
 import {
   fastDbInit
-} from "../chunk-EW2P62CV.js";
+} from "../chunk-QE7UVQDP.js";
 import {
   isExeSession,
   listPendingReviews,
   strictSessionScopeFilter
-} from "../chunk-FMJ4D5G6.js";
-import "../chunk-5SYMJCBM.js";
-import "../chunk-E23LNUWJ.js";
+} from "../chunk-HED6D5KR.js";
+import "../chunk-RZJ6DXVE.js";
 import "../chunk-4JERP7NT.js";
 import "../chunk-4FVVJ7ME.js";
-import "../chunk-G4SVYLPT.js";
+import "../chunk-E23LNUWJ.js";
+import "../chunk-WJ2PZGRV.js";
+import "../chunk-SSTLTIF3.js";
 import "../chunk-KOO3J5PV.js";
 import "../chunk-22TVSRQQ.js";
-import "../chunk-SSTLTIF3.js";
-import "../chunk-P4WXINQT.js";
+import "../chunk-OR3TAZL3.js";
 import "../chunk-QB5JOGPK.js";
 import "../chunk-NGP6LSV2.js";
-import "../chunk-VTMPER4B.js";
+import "../chunk-XYG722JW.js";
 import "../chunk-CVYC6DUW.js";
 import "../chunk-OPU3NYOO.js";
 import "../chunk-GJV3WDWM.js";
 import "../chunk-MP2AFCGL.js";
-import "../chunk-HDCP6CGI.js";
+import "../chunk-NIZQ3CIS.js";
 import "../chunk-HYZV25LY.js";
 import {
   getClient,
   getCoordinatorName
-} from "../chunk-N5G4T47B.js";
+} from "../chunk-SCYWCWKY.js";
 import "../chunk-2I23RPSI.js";
-import "../chunk-Q5V3B6BP.js";
+import "../chunk-GWPICNSO.js";
 import "../chunk-PNQDP3OA.js";
 import "../chunk-VQRTO7IS.js";
 import "../chunk-7HLWBYH7.js";
 import "../chunk-FXU7JOXK.js";
-import "../chunk-UN6KSHLI.js";
-import "../chunk-V7E4I7J5.js";
+import "../chunk-JV225JBX.js";
+import "../chunk-2EJ636HI.js";
 import {
   loadConfigSync
 } from "../chunk-DFIOOK5R.js";

package/dist/bin/exe-kill.js

@@ -1,51 +1,51 @@
 #!/usr/bin/env node
 import {
   recordSessionKill
-} from "../chunk-NME5E325.js";
+} from "../chunk-LMX7UKGX.js";
 import {
   fastDbInit
-} from "../chunk-EW2P62CV.js";
+} from "../chunk-QE7UVQDP.js";
 import {
   disposeStore,
   flushBatch
-} from "../chunk-X37ENEN5.js";
+} from "../chunk-WBJXJ2R4.js";
 import "../chunk-CHCA3ZM2.js";
 import "../chunk-OTVEIJUQ.js";
-import "../chunk-PGQMMD5P.js";
+import "../chunk-MQCTK6EF.js";
 import "../chunk-Y25OJWOQ.js";
 import {
   extractRootExe
-} from "../chunk-FMJ4D5G6.js";
-import "../chunk-5SYMJCBM.js";
-import "../chunk-E23LNUWJ.js";
+} from "../chunk-HED6D5KR.js";
+import "../chunk-RZJ6DXVE.js";
 import "../chunk-4JERP7NT.js";
 import "../chunk-4FVVJ7ME.js";
+import "../chunk-E23LNUWJ.js";
 import {
   listSessions
-} from "../chunk-G4SVYLPT.js";
+} from "../chunk-WJ2PZGRV.js";
+import "../chunk-SSTLTIF3.js";
 import "../chunk-KOO3J5PV.js";
 import "../chunk-22TVSRQQ.js";
-import "../chunk-SSTLTIF3.js";
-import "../chunk-P4WXINQT.js";
+import "../chunk-OR3TAZL3.js";
 import "../chunk-QB5JOGPK.js";
 import "../chunk-NGP6LSV2.js";
-import "../chunk-VTMPER4B.js";
+import "../chunk-XYG722JW.js";
 import "../chunk-CVYC6DUW.js";
 import "../chunk-OPU3NYOO.js";
 import "../chunk-GJV3WDWM.js";
 import "../chunk-MP2AFCGL.js";
-import "../chunk-HDCP6CGI.js";
+import "../chunk-NIZQ3CIS.js";
 import "../chunk-HYZV25LY.js";
-import "../chunk-N5G4T47B.js";
+import "../chunk-SCYWCWKY.js";
 import "../chunk-2I23RPSI.js";
-import "../chunk-Q5V3B6BP.js";
+import "../chunk-GWPICNSO.js";
 import "../chunk-PNQDP3OA.js";
 import "../chunk-VQRTO7IS.js";
 import "../chunk-7HLWBYH7.js";
 import "../chunk-FXU7JOXK.js";
 import "../chunk-Z42MXYWW.js";
-import "../chunk-UN6KSHLI.js";
-import "../chunk-V7E4I7J5.js";
+import "../chunk-JV225JBX.js";
+import "../chunk-2EJ636HI.js";
 import "../chunk-DFIOOK5R.js";
 import "../chunk-65DBIEM2.js";
 import "../chunk-MLKGABMK.js";

package/dist/bin/exe-launch-agent.js

@@ -1,28 +1,28 @@
 #!/usr/bin/env node
 import {
   exportBehaviorsForAgent
-} from "../chunk-PY6RG2DV.js";
+} from "../chunk-DFUCFLZH.js";
 import {
   getSessionPrompt
-} from "../chunk-MGKZPSXW.js";
-import "../chunk-S76SQ6R5.js";
+} from "../chunk-IZPO6IOZ.js";
+import "../chunk-ISILDO7P.js";
 import "../chunk-VUH67PT4.js";
-import "../chunk-CCYRCRLW.js";
+import "../chunk-PMEOSD6S.js";
 import {
   retryOnDaemonTransportError
-} from "../chunk-4VHQ6QQ3.js";
+} from "../chunk-DNFU56ZS.js";
 import "../chunk-QGGH7LOU.js";
 import {
   fastDbInit
-} from "../chunk-EW2P62CV.js";
-import "../chunk-JBWYZAQE.js";
+} from "../chunk-QE7UVQDP.js";
+import "../chunk-PPXQE7AS.js";
 import "../chunk-RQ7OVXUZ.js";
 import {
   disposeStore
-} from "../chunk-X37ENEN5.js";
+} from "../chunk-WBJXJ2R4.js";
 import "../chunk-CHCA3ZM2.js";
 import "../chunk-OTVEIJUQ.js";
-import "../chunk-PGQMMD5P.js";
+import "../chunk-MQCTK6EF.js";
 import "../chunk-Y25OJWOQ.js";
 import {
   DEFAULT_PROVIDER,
@@ -31,30 +31,30 @@ import {
   _resetCcHelpCache,
   claudeSupportsAgentFlag,
   getCcHelpOutputCached
-} from "../chunk-FMJ4D5G6.js";
-import "../chunk-5SYMJCBM.js";
-import "../chunk-E23LNUWJ.js";
+} from "../chunk-HED6D5KR.js";
+import "../chunk-RZJ6DXVE.js";
 import "../chunk-4JERP7NT.js";
 import "../chunk-4FVVJ7ME.js";
-import "../chunk-G4SVYLPT.js";
+import "../chunk-E23LNUWJ.js";
+import "../chunk-WJ2PZGRV.js";
+import "../chunk-SSTLTIF3.js";
 import "../chunk-KOO3J5PV.js";
 import "../chunk-22TVSRQQ.js";
-import "../chunk-SSTLTIF3.js";
-import "../chunk-P4WXINQT.js";
+import "../chunk-OR3TAZL3.js";
 import {
   getAgentRuntime,
   loadAgentConfig,
   normalizeCcModelName
 } from "../chunk-QB5JOGPK.js";
 import "../chunk-NGP6LSV2.js";
-import "../chunk-VTMPER4B.js";
+import "../chunk-XYG722JW.js";
 import "../chunk-CVYC6DUW.js";
 import "../chunk-OPU3NYOO.js";
 import "../chunk-GJV3WDWM.js";
 import "../chunk-MP2AFCGL.js";
+import "../chunk-RVXWGPD3.js";
 import "../chunk-7XGDTKHX.js";
-import "../chunk-7L2EV3XX.js";
-import "../chunk-HDCP6CGI.js";
+import "../chunk-NIZQ3CIS.js";
 import "../chunk-HYZV25LY.js";
 import {
   baseAgentName,
@@ -62,16 +62,16 @@ import {
   loadEmployees,
   loadEmployeesSync,
   normalizeRole
-} from "../chunk-N5G4T47B.js";
+} from "../chunk-SCYWCWKY.js";
 import "../chunk-2I23RPSI.js";
-import "../chunk-Q5V3B6BP.js";
+import "../chunk-GWPICNSO.js";
 import "../chunk-PNQDP3OA.js";
 import "../chunk-VQRTO7IS.js";
 import "../chunk-7HLWBYH7.js";
 import "../chunk-FXU7JOXK.js";
 import "../chunk-Z42MXYWW.js";
-import "../chunk-UN6KSHLI.js";
-import "../chunk-V7E4I7J5.js";
+import "../chunk-JV225JBX.js";
+import "../chunk-2EJ636HI.js";
 import "../chunk-DFIOOK5R.js";
 import {
   atomicWriteJsonSync,
@@ -672,7 +672,7 @@ async function main() {
   process.env.EXE_RUNTIME = "claude";
   process.env.AGENT_ROLE = empRole;
   try {
-    const { writeActiveAgent } = await import("../active-agent-F3TFM4GE.js");
+    const { writeActiveAgent } = await import("../active-agent-S5T2YMOR.js");
     writeActiveAgent(memoryAgent, empRole);
   } catch {
   }

package/dist/bin/exe-new-employee.js

@@ -4,13 +4,13 @@ import {
   buildCustomEmployeePrompt,
   getTemplate,
   personalizePrompt
-} from "../chunk-MGKZPSXW.js";
-import "../chunk-S76SQ6R5.js";
+} from "../chunk-IZPO6IOZ.js";
+import "../chunk-ISILDO7P.js";
 import "../chunk-VUH67PT4.js";
 import {
   PlanLimitError,
   assertEmployeeLimit
-} from "../chunk-VTMPER4B.js";
+} from "../chunk-XYG722JW.js";
 import {
   generateSessionWrappers
 } from "../chunk-EM4EYF3P.js";
@@ -18,15 +18,15 @@ import {
   hireEmployee,
   registerBinSymlinks,
   validateEmployeeName
-} from "../chunk-N5G4T47B.js";
+} from "../chunk-SCYWCWKY.js";
 import "../chunk-2I23RPSI.js";
-import "../chunk-Q5V3B6BP.js";
+import "../chunk-GWPICNSO.js";
 import "../chunk-PNQDP3OA.js";
 import "../chunk-VQRTO7IS.js";
 import "../chunk-7HLWBYH7.js";
 import "../chunk-FXU7JOXK.js";
-import "../chunk-UN6KSHLI.js";
-import "../chunk-V7E4I7J5.js";
+import "../chunk-JV225JBX.js";
+import "../chunk-2EJ636HI.js";
 import "../chunk-DFIOOK5R.js";
 import "../chunk-65DBIEM2.js";
 import {
@@ -146,7 +146,7 @@ ${rolePrompt}${emotionalSection}`;
     console.error(`Warning: some launchers failed: ${bins.errors.join("; ")}`);
   }
   try {
-    const { resolvePackageRoot } = await import("../installer-MSAJOOHK.js");
+    const { resolvePackageRoot } = await import("../installer-PSDYMGN7.js");
     const pkgRoot = resolvePackageRoot();
     const wrapResult = generateSessionWrappers(pkgRoot);
     if (wrapResult.created > 0) {

package/dist/bin/exe-pending-messages.js

@@ -2,38 +2,38 @@
 import {
   getPendingMessages,
   markRead
-} from "../chunk-Q32XYR7C.js";
+} from "../chunk-4Q5VNQTV.js";
 import {
   fastDbInit
-} from "../chunk-EW2P62CV.js";
-import "../chunk-FMJ4D5G6.js";
-import "../chunk-5SYMJCBM.js";
-import "../chunk-E23LNUWJ.js";
+} from "../chunk-QE7UVQDP.js";
+import "../chunk-HED6D5KR.js";
+import "../chunk-RZJ6DXVE.js";
 import "../chunk-4JERP7NT.js";
 import "../chunk-4FVVJ7ME.js";
-import "../chunk-G4SVYLPT.js";
+import "../chunk-E23LNUWJ.js";
+import "../chunk-WJ2PZGRV.js";
+import "../chunk-SSTLTIF3.js";
 import "../chunk-KOO3J5PV.js";
 import "../chunk-22TVSRQQ.js";
-import "../chunk-SSTLTIF3.js";
-import "../chunk-P4WXINQT.js";
+import "../chunk-OR3TAZL3.js";
 import "../chunk-QB5JOGPK.js";
 import "../chunk-NGP6LSV2.js";
-import "../chunk-VTMPER4B.js";
+import "../chunk-XYG722JW.js";
 import "../chunk-CVYC6DUW.js";
 import "../chunk-OPU3NYOO.js";
 import "../chunk-GJV3WDWM.js";
 import "../chunk-MP2AFCGL.js";
-import "../chunk-HDCP6CGI.js";
+import "../chunk-NIZQ3CIS.js";
 import "../chunk-HYZV25LY.js";
-import "../chunk-N5G4T47B.js";
+import "../chunk-SCYWCWKY.js";
 import "../chunk-2I23RPSI.js";
-import "../chunk-Q5V3B6BP.js";
+import "../chunk-GWPICNSO.js";
 import "../chunk-PNQDP3OA.js";
 import "../chunk-VQRTO7IS.js";
 import "../chunk-7HLWBYH7.js";
 import "../chunk-FXU7JOXK.js";
-import "../chunk-UN6KSHLI.js";
-import "../chunk-V7E4I7J5.js";
+import "../chunk-JV225JBX.js";
+import "../chunk-2EJ636HI.js";
 import "../chunk-DFIOOK5R.js";
 import "../chunk-65DBIEM2.js";
 import "../chunk-MLKGABMK.js";

package/dist/bin/exe-pending-notifications.js

@@ -1,39 +1,39 @@
 #!/usr/bin/env node
 import {
   fastDbInit
-} from "../chunk-EW2P62CV.js";
+} from "../chunk-QE7UVQDP.js";
 import {
   markAsRead,
   readUnreadNotifications,
   resolveExeSession
-} from "../chunk-FMJ4D5G6.js";
-import "../chunk-5SYMJCBM.js";
-import "../chunk-E23LNUWJ.js";
+} from "../chunk-HED6D5KR.js";
+import "../chunk-RZJ6DXVE.js";
 import "../chunk-4JERP7NT.js";
 import "../chunk-4FVVJ7ME.js";
-import "../chunk-G4SVYLPT.js";
+import "../chunk-E23LNUWJ.js";
+import "../chunk-WJ2PZGRV.js";
+import "../chunk-SSTLTIF3.js";
 import "../chunk-KOO3J5PV.js";
 import "../chunk-22TVSRQQ.js";
-import "../chunk-SSTLTIF3.js";
-import "../chunk-P4WXINQT.js";
+import "../chunk-OR3TAZL3.js";
 import "../chunk-QB5JOGPK.js";
 import "../chunk-NGP6LSV2.js";
-import "../chunk-VTMPER4B.js";
+import "../chunk-XYG722JW.js";
 import "../chunk-CVYC6DUW.js";
 import "../chunk-OPU3NYOO.js";
 import "../chunk-GJV3WDWM.js";
 import "../chunk-MP2AFCGL.js";
-import "../chunk-HDCP6CGI.js";
+import "../chunk-NIZQ3CIS.js";
 import "../chunk-HYZV25LY.js";
-import "../chunk-N5G4T47B.js";
+import "../chunk-SCYWCWKY.js";
 import "../chunk-2I23RPSI.js";
-import "../chunk-Q5V3B6BP.js";
+import "../chunk-GWPICNSO.js";
 import "../chunk-PNQDP3OA.js";
 import "../chunk-VQRTO7IS.js";
 import "../chunk-7HLWBYH7.js";
 import "../chunk-FXU7JOXK.js";
-import "../chunk-UN6KSHLI.js";
-import "../chunk-V7E4I7J5.js";
+import "../chunk-JV225JBX.js";
+import "../chunk-2EJ636HI.js";
 import "../chunk-DFIOOK5R.js";
 import "../chunk-65DBIEM2.js";
 import {

package/dist/bin/exe-pending-reviews.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   fastDbInit
-} from "../chunk-EW2P62CV.js";
+} from "../chunk-QE7UVQDP.js";
 import {
   cleanupOrphanedReviews,
   extractRootExe,
@@ -9,36 +9,36 @@ import {
   isExeSession,
   isStale,
   listPendingReviews
-} from "../chunk-FMJ4D5G6.js";
-import "../chunk-5SYMJCBM.js";
-import "../chunk-E23LNUWJ.js";
+} from "../chunk-HED6D5KR.js";
+import "../chunk-RZJ6DXVE.js";
 import "../chunk-4JERP7NT.js";
 import "../chunk-4FVVJ7ME.js";
-import "../chunk-G4SVYLPT.js";
+import "../chunk-E23LNUWJ.js";
+import "../chunk-WJ2PZGRV.js";
+import "../chunk-SSTLTIF3.js";
 import "../chunk-KOO3J5PV.js";
 import "../chunk-22TVSRQQ.js";
-import "../chunk-SSTLTIF3.js";
-import "../chunk-P4WXINQT.js";
+import "../chunk-OR3TAZL3.js";
 import "../chunk-QB5JOGPK.js";
 import "../chunk-NGP6LSV2.js";
-import "../chunk-VTMPER4B.js";
+import "../chunk-XYG722JW.js";
 import "../chunk-CVYC6DUW.js";
 import "../chunk-OPU3NYOO.js";
 import "../chunk-GJV3WDWM.js";
 import "../chunk-MP2AFCGL.js";
-import "../chunk-HDCP6CGI.js";
+import "../chunk-NIZQ3CIS.js";
 import "../chunk-HYZV25LY.js";
 import {
   getCoordinatorName
-} from "../chunk-N5G4T47B.js";
+} from "../chunk-SCYWCWKY.js";
 import "../chunk-2I23RPSI.js";
-import "../chunk-Q5V3B6BP.js";
+import "../chunk-GWPICNSO.js";
 import "../chunk-PNQDP3OA.js";
 import "../chunk-VQRTO7IS.js";
 import "../chunk-7HLWBYH7.js";
 import "../chunk-FXU7JOXK.js";
-import "../chunk-UN6KSHLI.js";
-import "../chunk-V7E4I7J5.js";
+import "../chunk-JV225JBX.js";
+import "../chunk-2EJ636HI.js";
 import "../chunk-DFIOOK5R.js";
 import "../chunk-65DBIEM2.js";
 import {

package/dist/bin/exe-preflight.js

@@ -0,0 +1,108 @@
+#!/usr/bin/env node
+import {
+  checkDependencyClosure,
+  checkDigestPinning,
+  checkEnvContract,
+  checkNoHardcodedHost,
+  checkNoHostNet,
+  checkNoLatest,
+  resolveDefaultManifest,
+  resolveStack,
+  runPreflight,
+  runPreflightOnManifest
+} from "../chunk-7ODTYODO.js";
+import {
+  isMainModule
+} from "../chunk-6Y4B3QF6.js";
+import "../chunk-MLKGABMK.js";
+
+// src/bin/exe-preflight.ts
+function printReport(report) {
+  const icons = { pass: "\u{1F7E2}", warn: "\u{1F7E0}", fail: "\u{1F534}" };
+  const verdictColor = { GREEN: "\x1B[32m", YELLOW: "\x1B[33m", RED: "\x1B[31m" };
+  console.log(`
+\x1B[1mStack Preflight\x1B[0m \u2014 ${report.manifestPath} (stack ${report.stackVersion})
+`);
+  for (const f of report.findings) {
+    console.log(`  ${icons[f.status]} ${f.check}  [guards ${f.bug}]`);
+    console.log(`     ${f.message}`);
+  }
+  console.log(
+    `
+  ${verdictColor[report.verdict]}\x1B[1m${report.verdict}\x1B[0m  (pass ${report.passed} / warn ${report.warned} / fail ${report.failed})
+`
+  );
+}
+function printUsage() {
+  console.log(`
+Usage: exe-os preflight [manifest-path] [options]
+
+Static client-stack preflight \u2014 MUST be GREEN before publishing a manifest and
+during stack-update. Maps every finding to the audit bug it guards.
+
+Arguments:
+  manifest-path       Stack manifest JSON (default: deploy/stack-manifests/v0.9.json)
+
+Options:
+  --stack <version>      Stack version key to check (default: manifest.latest)
+  --env <path>           Customer .env example (default: deploy/compose/.env.example)
+  --compose <path>       Customer docker-compose.yml (default: deploy/compose/docker-compose.yml)
+  --monitor-compose <p>  Monitor/hub compose (default: deploy/monitor/docker-compose.hub.yml)
+  --json                 Emit the full report as JSON
+  --help                 Show this help
+
+Checks (static): digest-pinning, no-latest, dependency-closure,
+no-hardcoded-askexe-host, env-contract, no-host-net.
+Exit: 0 GREEN/YELLOW, 1 RED.
+`);
+}
+function runPreflightCli(argv) {
+  if (argv.includes("--help") || argv.includes("-h")) {
+    printUsage();
+    process.exit(0);
+  }
+  const json = argv.includes("--json");
+  const getFlag = (flag) => {
+    const i = argv.indexOf(flag);
+    return i >= 0 && argv[i + 1] ? argv[i + 1] : void 0;
+  };
+  const flagsTakingValue = /* @__PURE__ */ new Set(["--stack", "--env", "--compose", "--monitor-compose"]);
+  let positional;
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    if (a.startsWith("--")) continue;
+    if (i > 0 && flagsTakingValue.has(argv[i - 1])) continue;
+    positional = a;
+    break;
+  }
+  const options = {
+    manifestPath: positional,
+    stackVersion: getFlag("--stack"),
+    envExamplePath: getFlag("--env"),
+    composePath: getFlag("--compose"),
+    monitorComposePath: getFlag("--monitor-compose")
+  };
+  const report = runPreflight(options);
+  if (json) {
+    console.log(JSON.stringify(report, null, 2));
+  } else {
+    printReport(report);
+  }
+  process.exit(report.verdict === "RED" ? 1 : 0);
+}
+if (isMainModule(import.meta.url) && process.argv[1]?.includes("exe-preflight")) {
+  runPreflightCli(process.argv.slice(2));
+}
+export {
+  checkDependencyClosure,
+  checkDigestPinning,
+  checkEnvContract,
+  checkNoHardcodedHost,
+  checkNoHostNet,
+  checkNoLatest,
+  resolveDefaultManifest,
+  resolveStack,
+  runPreflight,
+  runPreflightCli,
+  runPreflightOnManifest
+};

package/dist/bin/exe-rename.js

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
 import {
   personalizePrompt
-} from "../chunk-MGKZPSXW.js";
-import "../chunk-S76SQ6R5.js";
+} from "../chunk-IZPO6IOZ.js";
+import "../chunk-ISILDO7P.js";
 import "../chunk-VUH67PT4.js";
 import {
   loadEmployees,
   registerBinSymlinks,
   saveEmployees,
   validateEmployeeName
-} from "../chunk-N5G4T47B.js";
+} from "../chunk-SCYWCWKY.js";
 import "../chunk-2I23RPSI.js";
-import "../chunk-Q5V3B6BP.js";
+import "../chunk-GWPICNSO.js";
 import "../chunk-PNQDP3OA.js";
 import "../chunk-VQRTO7IS.js";
 import "../chunk-7HLWBYH7.js";