@askexenow/exe-os 0.9.312 → 0.9.313

package/dist/{chunk-QB5JOGPK.js → chunk-2PI6JBJL.js}

@@ -4,11 +4,11 @@ import {
 } from "./chunk-NGP6LSV2.js";
 import {
   EXE_AI_DIR
-} from "./chunk-DFIOOK5R.js";
+} from "./chunk-WCES22KG.js";
 import {
   atomicWriteJsonSync,
   ensurePrivateDirSync
-} from "./chunk-65DBIEM2.js";
+} from "./chunk-SHIICYJW.js";
 
 // src/lib/agent-config.ts
 import { readFileSync, existsSync } from "fs";
@@ -30,7 +30,7 @@ var RUNTIME_LABELS = {
   opencode: "OpenCode (open source)"
 };
 var DEFAULT_MODELS = {
-  claude: "claude-opus-4.6",
+  claude: "claude-sonnet-4",
   codex: RUNTIME_TABLE.codex?.defaultModel ?? "gpt-5.4",
   opencode: RUNTIME_TABLE.opencode?.defaultModel ?? "anthropic/claude-sonnet-4-6"
 };
@@ -56,7 +56,8 @@ function getAgentRuntime(agentId) {
   return { runtime: DEFAULT_RUNTIME, model: DEFAULT_MODELS[DEFAULT_RUNTIME] };
 }
 function normalizeCcModelName(model) {
-  let ccModel = model.replace(/(\d+)\.(\d+)/g, "$1-$2");
+  let ccModel = model.replace(/^[a-z0-9.-]+\//i, "");
+  ccModel = ccModel.replace(/(\d+)\.(\d+)/g, "$1-$2");
   const isExplicit1m = /-1m$/.test(ccModel) || ccModel.includes("[1m]");
   if ((/claude-(opus|sonnet)-4-[6-9]/.test(ccModel) || /claude-fable-\d+/.test(ccModel)) && !isExplicit1m) {
     ccModel += "[1m]";

package/dist/{chunk-MTIJ2NXY.js → chunk-2PWRUIKZ.js}

@@ -1,7 +1,7 @@
 import {
   getGitRoot,
   isWorktreeDirty
-} from "./chunk-RZJ6DXVE.js";
+} from "./chunk-L6QI2NNG.js";
 
 // src/lib/worktree-sweep.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-NIZQ3CIS.js → chunk-3AMGSCRH.js}

@@ -1,6 +1,6 @@
 import {
   loadEmployees
-} from "./chunk-SCYWCWKY.js";
+} from "./chunk-VG4ZH2Z3.js";
 
 // src/lib/agent-symlinks.ts
 import os from "os";

package/dist/{chunk-7ODTYODO.js → chunk-3LGID56M.js}

@@ -11,7 +11,7 @@ var REQUIRED_INFRA = {
 var FORBIDDEN_HOST_SUBSTRINGS = ["askexe.com", "askexenow.com"];
 var CLIENT_FACING_HOST_FIELDS = ["healthHost", "healthUrl"];
 var BYOK_ENFORCEMENT_VARS = ["EXE_ALLOW_DIRECT_PROVIDER_KEYS", "EXE_BILLING_MODE"];
-var BYOK_LEGACY_VARS = ["BYOK_ENABLED"];
+var BYOK_ALIAS_VARS = ["BYOK_ENABLED"];
 function resolveDefaultManifest() {
   let dir = path.dirname(new URL(import.meta.url).pathname);
   for (let i = 0; i < 6; i++) {
@@ -56,11 +56,15 @@ function resolveStack(manifest, requested) {
   const entry = manifest.stacks[version];
   return { version, services: entry?.services ?? {} };
 }
+function isAskExeImage(image) {
+  return image.startsWith("ghcr.io/askexe/") || image.startsWith("update.askexe.com/askexe/");
+}
 function checkDigestPinning(services) {
   const bug = "ee16e7ef (digest-pinning)";
   const offenders = [];
   for (const [name, svc] of Object.entries(services)) {
     if (!svc.image) continue;
+    if (!isAskExeImage(svc.image)) continue;
     const { hasDigest } = parseImageRef(svc.image);
     if (!hasDigest) offenders.push(`${name}=${svc.image}`);
   }
@@ -154,14 +158,13 @@ function checkEnvContract(env, compose) {
     for (const m of compose.text.matchAll(/\$\{?([A-Z][A-Z0-9_]+)/g)) declared.add(m[1]);
   }
   const missingEnforcement = BYOK_ENFORCEMENT_VARS.filter((v) => !declared.has(v));
-  const exposedLegacy = BYOK_LEGACY_VARS.filter((v) => declared.has(v));
-  if (missingEnforcement.length > 0 && exposedLegacy.length > 0) {
+  const aliasDeclared = BYOK_ALIAS_VARS.filter((v) => declared.has(v));
+  if (aliasDeclared.length > 0) {
     return {
       check: "env-contract",
-      status: "fail",
+      status: "pass",
       bug,
-      offenders: [...exposedLegacy.map((v) => `exposes ${v}`), ...missingEnforcement.map((v) => `missing ${v}`)],
-      message: `BYOK env-contract mismatch \u2014 customer surface exposes ${exposedLegacy.join("/")} but billing enforcement reads ${BYOK_ENFORCEMENT_VARS.join("+")} (absent). BYOK can bypass billing.`
+      message: `BYOK enforcement satisfied via alias (${aliasDeclared.join(", ")} \u2192 byok + allow-direct-keys)`
     };
   }
   if (missingEnforcement.length > 0) {
@@ -170,7 +173,7 @@ function checkEnvContract(env, compose) {
       status: "warn",
       bug,
       offenders: missingEnforcement.map((v) => `missing ${v}`),
-      message: `billing enforcement vars not declared: ${missingEnforcement.join(", ")}`
+      message: `billing enforcement vars not declared: ${missingEnforcement.join(", ")} (and no ${BYOK_ALIAS_VARS.join("/")} alias) \u2014 defaults to metered`
     };
   }
   return { check: "env-contract", status: "pass", bug, message: `BYOK enforcement vars present (${BYOK_ENFORCEMENT_VARS.join(", ")})` };

package/dist/{chunk-GSY6HL3T.js → chunk-4JI54RHR.js}

@@ -1,24 +1,24 @@
 import {
   recordSessionKill
-} from "./chunk-LMX7UKGX.js";
+} from "./chunk-OUAGTQC4.js";
 import {
   sessionScopeFilter,
   verifyPaneAtCapacity,
   writeNotification
-} from "./chunk-HED6D5KR.js";
+} from "./chunk-MMNMQNLD.js";
 import {
   listSessions
-} from "./chunk-WJ2PZGRV.js";
+} from "./chunk-ZAA344BL.js";
 import {
   getTransport
 } from "./chunk-KOO3J5PV.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-OR3TAZL3.js";
+} from "./chunk-P4ULFI2N.js";
 import {
   getClient,
   isCoordinatorName
-} from "./chunk-SCYWCWKY.js";
+} from "./chunk-VG4ZH2Z3.js";
 
 // src/lib/capacity-monitor.ts
 var CAPACITY_PATTERNS = [

package/dist/{chunk-ISILDO7P.js → chunk-4THK7IA4.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-VUH67PT4.js";
 import {
   getClient
-} from "./chunk-SCYWCWKY.js";
+} from "./chunk-VG4ZH2Z3.js";
 
 // src/lib/global-procedures.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-IRIPGGGL.js → chunk-4UHQYBMQ.js}

@@ -2,7 +2,7 @@ import {
   getClient,
   isCoordinatorName,
   loadEmployeesSync
-} from "./chunk-SCYWCWKY.js";
+} from "./chunk-VG4ZH2Z3.js";
 
 // src/lib/steward-gate.ts
 import crypto from "crypto";

package/dist/{chunk-HQODUV3G.js → chunk-552IGUBB.js}

@@ -1,9 +1,9 @@
 import {
   sendMessage
-} from "./chunk-4Q5VNQTV.js";
+} from "./chunk-IFSOVXGN.js";
 import {
   getActiveAgent
-} from "./chunk-BUOMSIXH.js";
+} from "./chunk-BMNX3YWX.js";
 
 // src/mcp/tools/send-message.ts
 import { z } from "zod";

package/dist/{chunk-IRHNV4GY.js → chunk-5KLQCGI5.js}

@@ -24,6 +24,38 @@ var FRONTEND_URLS = {
   "exe-monitor-hub": "http://127.0.0.1:8090"
 };
 var GOTRUE_TOKEN_URL = "http://127.0.0.1:9999/token?grant_type=password";
+function parseComposeServiceNames(composeFile) {
+  const names = /* @__PURE__ */ new Set();
+  if (!existsSync(composeFile)) return names;
+  let raw;
+  try {
+    raw = readFileSync(composeFile, "utf8");
+  } catch {
+    return names;
+  }
+  let inServices = false;
+  for (const line of raw.split(/\r?\n/)) {
+    if (!line.trim() || line.trim().startsWith("#")) continue;
+    const indent = line.length - line.trimStart().length;
+    const trimmed = line.trim();
+    if (indent === 0) {
+      inServices = /^services:\s*$/.test(trimmed);
+      continue;
+    }
+    if (inServices && indent === 2 && /^[a-zA-Z0-9_-]+:\s*$/.test(trimmed)) {
+      names.add(trimmed.replace(/:.*$/, ""));
+    }
+  }
+  return names;
+}
+function filterToDeployed(map, deployed) {
+  if (deployed.size === 0) return map;
+  const out = {};
+  for (const [name, val] of Object.entries(map)) {
+    if (deployed.has(name)) out[name] = val;
+  }
+  return out;
+}
 function loadEnvFile(envPath) {
   if (!existsSync(envPath)) return {};
   const raw = readFileSync(envPath, "utf8");
@@ -137,10 +169,14 @@ async function checkContainersHealthy(composeFile) {
     return { check, status: "fail", message: err instanceof Error ? err.message : String(err) };
   }
 }
-async function checkServiceUrls() {
+async function checkServiceUrls(deployed) {
   const check = "All service URLs respond 200";
+  const urls = filterToDeployed(SERVICE_URLS, deployed);
+  if (Object.keys(urls).length === 0) {
+    return { check, status: "skip", message: "No HTTP services deployed in this selection" };
+  }
   const failures = [];
-  for (const [service, url] of Object.entries(SERVICE_URLS)) {
+  for (const [service, url] of Object.entries(urls)) {
     try {
       const res = await httpGet(url, CHECK_TIMEOUT_MS);
       if (res.status !== 200) {
@@ -153,10 +189,13 @@ async function checkServiceUrls() {
   if (failures.length > 0) {
     return { check, status: "fail", message: failures.join("; ") };
   }
-  return { check, status: "pass", message: `${Object.keys(SERVICE_URLS).length} services responding` };
+  return { check, status: "pass", message: `${Object.keys(urls).length} services responding` };
 }
-async function checkGoTrueLogin(env) {
+async function checkGoTrueLogin(env, deployed) {
   const check = "GoTrue login works";
+  if (deployed.size > 0 && !deployed.has("gotrue")) {
+    return { result: { check, status: "skip", message: "gotrue not deployed in this selection" } };
+  }
   const email = env.GOTRUE_TEST_EMAIL || process.env.GOTRUE_TEST_EMAIL;
   const password = env.GOTRUE_TEST_PASSWORD || process.env.GOTRUE_TEST_PASSWORD;
   if (!email || !password) {
@@ -178,8 +217,11 @@ async function checkGoTrueLogin(env) {
     return { result: { check, status: "fail", message: err instanceof Error ? err.message : String(err) } };
   }
 }
-async function checkWhatsAppConnected() {
+async function checkWhatsAppConnected(deployed) {
   const check = "WhatsApp still connected";
+  if (deployed.size > 0 && !deployed.has("exe-gateway")) {
+    return { check, status: "skip", message: "exe-gateway not deployed in this selection" };
+  }
   try {
     const res = await httpGet(SERVICE_URLS["exe-gateway"], CHECK_TIMEOUT_MS);
     if (res.status !== 200) {
@@ -205,10 +247,14 @@ async function checkWhatsAppConnected() {
     return { check, status: "fail", message: err instanceof Error ? err.message : String(err) };
   }
 }
-async function checkFrontendsLoad() {
+async function checkFrontendsLoad(deployed) {
   const check = "Each frontend loads";
+  const urls = filterToDeployed(FRONTEND_URLS, deployed);
+  if (Object.keys(urls).length === 0) {
+    return { check, status: "skip", message: "No frontends deployed in this selection" };
+  }
   const failures = [];
-  for (const [service, url] of Object.entries(FRONTEND_URLS)) {
+  for (const [service, url] of Object.entries(urls)) {
     try {
       const res = await httpGet(url, CHECK_TIMEOUT_MS);
       if (!res.contentType.includes("text/html")) {
@@ -223,10 +269,13 @@ async function checkFrontendsLoad() {
   if (failures.length > 0) {
     return { check, status: "fail", message: failures.join("; ") };
   }
-  return { check, status: "pass", message: `${Object.keys(FRONTEND_URLS).length} frontends serving HTML` };
+  return { check, status: "pass", message: `${Object.keys(urls).length} frontends serving HTML` };
 }
-async function checkMonitorMetrics() {
+async function checkMonitorMetrics(deployed) {
   const check = "Monitor reports metrics";
+  if (deployed.size > 0 && !deployed.has("exe-monitor-hub")) {
+    return { check, status: "skip", message: "exe-monitor-hub not deployed in this selection" };
+  }
   try {
     const res = await httpGet(SERVICE_URLS["exe-monitor-hub"], CHECK_TIMEOUT_MS);
     if (res.status !== 200) {
@@ -264,15 +313,18 @@ async function checkRawPipeline(env) {
     return { check, status: "fail", message: msg.slice(0, 200) };
   }
 }
-async function checkCrossServiceAuth(jwt) {
+async function checkCrossServiceAuth(jwt, deployed) {
   const check = "Cross-service auth";
   if (!jwt) {
     return { check, status: "skip", message: "No GoTrue JWT available (check 3 skipped or failed)" };
   }
-  const targets = {
+  const targets = filterToDeployed({
     "exe-wiki": "http://127.0.0.1:3001/api/ping",
     "exe-crm": "http://127.0.0.1:3000/healthz"
-  };
+  }, deployed);
+  if (Object.keys(targets).length === 0) {
+    return { check, status: "skip", message: "No JWT-consuming services (wiki/CRM) deployed in this selection" };
+  }
   const failures = [];
   for (const [service, url] of Object.entries(targets)) {
     try {
@@ -295,6 +347,7 @@ async function runVerifyStack(options) {
   const totalTimeout = options?.timeoutMs ?? TOTAL_TIMEOUT_MS;
   const env = loadEnvFile(envFile);
   const results = [];
+  const deployed = parseComposeServiceNames(composeFile);
   const deadline = Date.now() + totalTimeout;
   const addResult = (r) => {
     results.push(r);
@@ -304,20 +357,20 @@ async function runVerifyStack(options) {
   };
   addResult(await checkContainersHealthy(composeFile));
   if (Date.now() > deadline) return summarize(results);
-  addResult(await checkServiceUrls());
+  addResult(await checkServiceUrls(deployed));
   if (Date.now() > deadline) return summarize(results);
-  const goTrueResult = await checkGoTrueLogin(env);
+  const goTrueResult = await checkGoTrueLogin(env, deployed);
   addResult(goTrueResult.result);
   if (Date.now() > deadline) return summarize(results);
-  addResult(await checkWhatsAppConnected());
+  addResult(await checkWhatsAppConnected(deployed));
   if (Date.now() > deadline) return summarize(results);
-  addResult(await checkFrontendsLoad());
+  addResult(await checkFrontendsLoad(deployed));
   if (Date.now() > deadline) return summarize(results);
-  addResult(await checkMonitorMetrics());
+  addResult(await checkMonitorMetrics(deployed));
   if (Date.now() > deadline) return summarize(results);
   addResult(await checkRawPipeline(env));
   if (Date.now() > deadline) return summarize(results);
-  addResult(await checkCrossServiceAuth(goTrueResult.jwt));
+  addResult(await checkCrossServiceAuth(goTrueResult.jwt, deployed));
   return summarize(results);
 }
 function summarize(results) {
@@ -384,5 +437,6 @@ if (isMainModule(import.meta.url) && process.argv[1]?.includes("verify-stack"))
 }
 
 export {
+  parseComposeServiceNames,
   runVerifyStack
 };

package/dist/{chunk-SOT23KWW.js → chunk-63UEWYM3.js}

@@ -1,6 +1,6 @@
 import {
   getClient
-} from "./chunk-SCYWCWKY.js";
+} from "./chunk-VG4ZH2Z3.js";
 
 // src/lib/pipeline-router.ts
 import crypto from "crypto";
@@ -116,12 +116,12 @@ async function sinkCRM(msg, agentResponse, agentName) {
 }
 async function sinkWiki(msg, agentResponse) {
   try {
-    const { createWikiClient } = await import("./wiki-client-N6PT5P7W.js");
+    const { createWikiClient } = await import("./wiki-client-CIJXRMKL.js");
     const client = await createWikiClient();
     if (!client) return false;
     const content = msg.text ?? "";
     if (content.length < 50) return false;
-    const { chatInWorkspace } = await import("./wiki-client-N6PT5P7W.js");
+    const { chatInWorkspace } = await import("./wiki-client-CIJXRMKL.js");
     const ingestText = [
       `[${msg.platform}] Message from ${msg.senderName ?? msg.senderId} (${msg.timestamp}):`,
       content,
@@ -149,7 +149,7 @@ async function sinkEntityExtraction(msg, agentResponse, agentName) {
     const client = getClient();
     const memoryId = `conv:${msg.messageId}`;
     await storeExtraction(client, extraction, memoryId, msg.timestamp);
-    import("./conversation-wiki-populator-XFUC7S5P.js").then(
+    import("./conversation-wiki-populator-SK233TL4.js").then(
       ({ populateWikiFromExtraction }) => populateWikiFromExtraction(extraction, msg, agentResponse, agentName)
     ).catch((err) => {
       process.stderr.write(

package/dist/{chunk-QE7UVQDP.js → chunk-6PR2RAKM.js}

@@ -44,7 +44,7 @@ async function fastDbInit(opts) {
     return getClient();
   }
   if (opts?.daemonOnly) {
-    const { isDaemonReady } = await import("./daemon-ready-signal-3L2MJT7C.js");
+    const { isDaemonReady } = await import("./daemon-ready-signal-KXLL6ZFL.js");
     if (!isDaemonReady()) return makeNoopClient();
   }
   const forceDirect = process.env.EXE_DB_DIRECT === "1" || process.env.EXE_DB_READONLY === "1" || process.env.EXE_SKIP_DAEMON === "1";

package/dist/{chunk-ZZXADKAP.js → chunk-6SPUK67A.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-FF5DA4XP.js";
 import {
   getClient
-} from "./chunk-SCYWCWKY.js";
+} from "./chunk-VG4ZH2Z3.js";
 
 // src/lib/graph-entity-heuristics.ts
 var FILE_EXT_PATTERN = /(?:^|\s|['"`(])([a-zA-Z0-9_./-]+\.(?:ts|js|tsx|jsx|json|md|py|rs|go|toml|yaml|yml|css|html|sql|sh|bash|zsh|env|conf|cfg|xml|csv|lock))\b/g;
@@ -467,7 +467,7 @@ async function upsertMemoryGraph(result, memoryId) {
     });
   }
   try {
-    const { createCoOccurrenceEdges } = await import("./co-occurrence-YP2Q3OEA.js");
+    const { createCoOccurrenceEdges } = await import("./co-occurrence-MJWERUWY.js");
     await createCoOccurrenceEdges(result.entities, memoryId);
   } catch {
   }

package/dist/{chunk-RVXWGPD3.js → chunk-75TM3APG.js}

@@ -61,6 +61,26 @@ function logRestart(entry) {
 function logRestartEvent(event, data) {
   logRestart({ event, ...data });
 }
+function attributeSignalSource(reason) {
+  const attr = {
+    source: reason ?? "external/unknown",
+    restart_intent: reason !== null
+  };
+  try {
+    const ppid = process.ppid;
+    attr.ppid = ppid;
+    if (process.platform !== "win32" && Number.isInteger(ppid) && ppid > 0) {
+      try {
+        const comm = execSync(`ps -o comm= -p ${ppid}`, { timeout: 2e3, encoding: "utf8" }).trim();
+        if (comm) attr.parent_comm = comm;
+      } catch {
+      }
+    }
+  } catch {
+  }
+  attr.launchd_managed = Boolean(process.env.XPC_SERVICE_NAME || process.env.LAUNCHD_SOCKET || process.env.INVOCATION_ID);
+  return attr;
+}
 function isCooldownActive() {
   try {
     if (!existsSync(RESTART_MARKER)) return { active: false, remainingMs: 0 };
@@ -95,9 +115,9 @@ function isRestartIntentTimestampFresh(markerTimestampMs, nowMs = Date.now()) {
   if (markerTimestampMs === null || !Number.isFinite(markerTimestampMs)) return false;
   return nowMs - markerTimestampMs < RESTART_INTENT_WINDOW_MS;
 }
-function consumeRestartIntent() {
+function consumeRestartIntentDetail() {
   try {
-    if (!existsSync(RESTART_MARKER)) return false;
+    if (!existsSync(RESTART_MARKER)) return { intent: false, reason: null };
     const raw = readFileSync(RESTART_MARKER, "utf8").trim();
     try {
       unlinkSync(RESTART_MARKER);
@@ -105,12 +125,14 @@ function consumeRestartIntent() {
     }
     if (raw.startsWith("{")) {
       const marker = JSON.parse(raw);
-      return typeof marker.reason === "string" && typeof marker.nonce === "string";
+      const intent2 = typeof marker.reason === "string" && typeof marker.nonce === "string";
+      return { intent: intent2, reason: intent2 ? marker.reason ?? null : null };
     }
     const last = parseInt(raw, 10);
-    return isRestartIntentTimestampFresh(isNaN(last) ? null : last);
+    const intent = isRestartIntentTimestampFresh(isNaN(last) ? null : last);
+    return { intent, reason: intent ? "legacy-timestamp-marker" : null };
   } catch {
-    return false;
+    return { intent: false, reason: null };
   }
 }
 function isOomMarkerSet() {
@@ -392,7 +414,8 @@ async function requestDeployRestart(reason) {
 
 export {
   logRestartEvent,
-  consumeRestartIntent,
+  attributeSignalSource,
+  consumeRestartIntentDetail,
   requestRestart,
   updateMcpVersionMarker,
   requestDeployRestart

package/dist/{chunk-IZPO6IOZ.js → chunk-7QSXARI3.js}

@@ -1,6 +1,6 @@
 import {
   getGlobalProceduresBlock
-} from "./chunk-ISILDO7P.js";
+} from "./chunk-4THK7IA4.js";
 
 // src/lib/employee-templates.ts
 var BASE_OPERATING_PROCEDURES = `

package/dist/{chunk-A2YZG4AD.js → chunk-AIUXE3ZJ.js}

@@ -7,11 +7,11 @@ import {
   MODELS_DIR,
   loadConfig,
   saveConfig
-} from "./chunk-DFIOOK5R.js";
+} from "./chunk-WCES22KG.js";
 import {
   atomicWriteJsonSync,
   atomicWriteSync
-} from "./chunk-65DBIEM2.js";
+} from "./chunk-SHIICYJW.js";
 
 // src/lib/setup-wizard.ts
 import crypto from "crypto";
@@ -497,7 +497,7 @@ async function runSetupWizard(opts = {}) {
           );
         }
         if (!nonInteractive) {
-          const { markKeyBackupConfirmed } = await import("./key-backup-status-FNSN3NXH.js");
+          const { markKeyBackupConfirmed } = await import("./key-backup-status-ZNGDSPLT.js");
           markKeyBackupConfirmed("setup-wizard");
         }
       }
@@ -658,7 +658,7 @@ async function runSetupWizard(opts = {}) {
       if (cloudConfig) {
         config.cloud = cloudConfig;
       }
-      const { applyDefaultOrchestrationPhase } = await import("./orchestration-phase-SJOXDB7X.js");
+      const { applyDefaultOrchestrationPhase } = await import("./orchestration-phase-U45T4VG3.js");
       applyDefaultOrchestrationPhase(config);
       await saveConfig(config);
       log("");
@@ -684,7 +684,7 @@ async function runSetupWizard(opts = {}) {
       log("Step 5 already complete \u2014 skipping.");
     }
     if (!state.completedSteps.includes(55)) {
-      const { savePreferences, loadPreferences: loadPrefs } = await import("./preferences-YWBTKW3M.js");
+      const { savePreferences, loadPreferences: loadPrefs } = await import("./preferences-TYTGDXQZ.js");
       const existingPrefs = loadPrefs();
       const prefs = { ...existingPrefs };
       log("=== Config Defaults ===");
@@ -1000,7 +1000,7 @@ async function runSetupWizard(opts = {}) {
       log("  Phase 3: Parallel org \u2014 specialists execute in parallel with reviews");
       log("");
       const unlockExecutives = (await askOrEnv("Unlock Phase 2 executives now? (y/N): ", void 0, "n")).toLowerCase() === "y";
-      const { setOrchestrationPhase } = await import("./orchestration-phase-SJOXDB7X.js");
+      const { setOrchestrationPhase } = await import("./orchestration-phase-U45T4VG3.js");
       if (!unlockExecutives) {
         await setOrchestrationPhase("phase_1_coo", "setup-wizard");
         log("");

package/dist/{chunk-U63BZI2B.js → chunk-AJERMFD6.js}

@@ -1,9 +1,9 @@
 import {
   fastDbInit
-} from "./chunk-QE7UVQDP.js";
+} from "./chunk-6PR2RAKM.js";
 import {
   sessionScopeFilter
-} from "./chunk-HED6D5KR.js";
+} from "./chunk-MMNMQNLD.js";
 import {
   formatStatusAll,
   formatStatusDeep,
@@ -14,7 +14,7 @@ import {
   getClient,
   isCoordinatorRole,
   loadEmployees
-} from "./chunk-SCYWCWKY.js";
+} from "./chunk-VG4ZH2Z3.js";
 import {
   isMainModule
 } from "./chunk-6Y4B3QF6.js";

package/dist/{chunk-BUOMSIXH.js → chunk-BMNX3YWX.js}

@@ -9,10 +9,10 @@ import {
   getCoordinatorEmployee,
   getEmployee,
   loadEmployeesSync
-} from "./chunk-SCYWCWKY.js";
+} from "./chunk-VG4ZH2Z3.js";
 import {
   EXE_AI_DIR
-} from "./chunk-DFIOOK5R.js";
+} from "./chunk-WCES22KG.js";
 
 // src/lib/active-agent.ts
 import { readFileSync, writeFileSync, mkdirSync, unlinkSync, readdirSync } from "fs";

package/dist/{chunk-YUBTHJVV.js → chunk-BRSMAFBN.js}

@@ -87,7 +87,7 @@ async function getRetrievalHealth() {
   const coveragePct = totalMemories > 0 ? Math.round(memoriesWithVectors / totalMemories * 100) : null;
   let dbRestore = { hasEvents: false, count: 0, last: null, quarantineFiles: 0 };
   try {
-    const { getDbRestoreHealth } = await import("./db-restore-events-3R7G4FP4.js");
+    const { getDbRestoreHealth } = await import("./db-restore-events-3A57GMLW.js");
     dbRestore = getDbRestoreHealth();
   } catch {
   }

package/dist/{chunk-JZW5AOWI.js → chunk-BSPALHIR.js}

@@ -1,9 +1,9 @@
 import {
   sanitizePort
-} from "./chunk-ELXR65AN.js";
+} from "./chunk-X2FHTDIU.js";
 import {
   loadEmployeesSync
-} from "./chunk-SCYWCWKY.js";
+} from "./chunk-VG4ZH2Z3.js";
 
 // src/adapters/mcp-http-config.ts
 import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";

package/dist/{chunk-VDYUKTNS.js → chunk-CLAYNAXC.js}

@@ -1,10 +1,10 @@
 import {
-  enforcePrivateFileSync,
+  atomicWriteJsonSync,
   ensurePrivateDirSync
-} from "./chunk-65DBIEM2.js";
+} from "./chunk-SHIICYJW.js";
 
 // src/lib/preferences.ts
-import { existsSync, readFileSync, writeFileSync } from "fs";
+import { existsSync, readFileSync } from "fs";
 import path from "path";
 import os from "os";
 function loadPreferences(homeDir = os.homedir()) {
@@ -30,8 +30,7 @@ function savePreferences(prefs, homeDir = os.homedir()) {
     }
   }
   config.preferences = prefs;
-  writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n");
-  enforcePrivateFileSync(configPath);
+  atomicWriteJsonSync(configPath, config);
 }
 
 export {

package/dist/{chunk-J3QZPDNH.js → chunk-CNQ25C4C.js}

@@ -1,6 +1,6 @@
 import {
   completeReminder
-} from "./chunk-JNARUXDC.js";
+} from "./chunk-CW3FPWUW.js";
 
 // src/mcp/tools/complete-reminder.ts
 import { z } from "zod";