@askexenow/exe-os 0.9.319 → 0.9.322

package/dist/{catchup-brief-5ULTVKSE.js → catchup-brief-L42STIDR.js}

@@ -1,29 +1,29 @@
 import {
   lightweightSearch
-} from "./chunk-MRB2BXIB.js";
+} from "./chunk-4Z47UMMM.js";
 import "./chunk-AB4PAQYK.js";
-import "./chunk-PHUKD7VK.js";
+import "./chunk-H2SD2EA7.js";
 import "./chunk-CHCA3ZM2.js";
 import "./chunk-OTVEIJUQ.js";
-import "./chunk-NOPDNOGQ.js";
+import "./chunk-SIJSFULW.js";
 import "./chunk-Y25OJWOQ.js";
 import {
   sessionScopeFilter,
   strictSessionScopeFilter
-} from "./chunk-LWBOSHSS.js";
-import "./chunk-5L62XXNH.js";
-import "./chunk-RREJ2QQ4.js";
+} from "./chunk-PLBDXCYZ.js";
+import "./chunk-HWC5W34K.js";
+import "./chunk-KLG53B63.js";
 import "./chunk-4FVVJ7ME.js";
 import "./chunk-E23LNUWJ.js";
 import "./chunk-4JERP7NT.js";
-import "./chunk-TWPYSILC.js";
+import "./chunk-ABGDTMKC.js";
 import "./chunk-SSTLTIF3.js";
 import "./chunk-RMOBQ6A5.js";
 import "./chunk-54QCG45Y.js";
-import "./chunk-RVF6JBHW.js";
-import "./chunk-Q26VSIXA.js";
+import "./chunk-HV5CUDOE.js";
+import "./chunk-QVFJCFNM.js";
 import "./chunk-NGP6LSV2.js";
-import "./chunk-CQ2T4A2D.js";
+import "./chunk-EPBB2OD3.js";
 import "./chunk-CVYC6DUW.js";
 import "./chunk-OPU3NYOO.js";
 import "./chunk-HYZV25LY.js";
@@ -31,16 +31,16 @@ import "./chunk-GJV3WDWM.js";
 import "./chunk-MP2AFCGL.js";
 import {
   getClient
-} from "./chunk-36SS3TE7.js";
+} from "./chunk-XLNF3CIO.js";
 import "./chunk-2I23RPSI.js";
-import "./chunk-3EZQSPTG.js";
+import "./chunk-WXRVHXVP.js";
 import "./chunk-PNQDP3OA.js";
 import "./chunk-H73TUI4Y.js";
 import "./chunk-7HLWBYH7.js";
 import "./chunk-FXU7JOXK.js";
 import "./chunk-Z42MXYWW.js";
-import "./chunk-QLVMJGUQ.js";
-import "./chunk-7NG77I33.js";
+import "./chunk-VY7345RO.js";
+import "./chunk-DQJ3WZRK.js";
 import "./chunk-7Y5UDEVM.js";
 import "./chunk-SHIICYJW.js";
 import "./chunk-MLKGABMK.js";
@@ -149,7 +149,7 @@ ${msgLines}`);
   } catch {
   }
   try {
-    const { getPendingProspective, markSurfaced } = await import("./prospective-memory-X4UQTUC2.js");
+    const { getPendingProspective, markSurfaced } = await import("./prospective-memory-XRNRMEDL.js");
     const due = await getPendingProspective(agentId, { projectName, limit: 5 });
     if (due.length > 0) {
       const now = Date.now();

package/dist/{chunk-LQWCIW4K.js → chunk-2GBGIXKH.js}

@@ -6,7 +6,7 @@ import {
   connectEmbedDaemon,
   isClientConnected,
   sendDaemonRequest
-} from "./chunk-C7QYH2YN.js";
+} from "./chunk-3JW3ZXCP.js";
 
 // src/lib/db-daemon-client.ts
 function normalizeStatement(stmt) {

package/dist/{chunk-C7QYH2YN.js → chunk-3JW3ZXCP.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-3NGZ4PL7.js";
 import {
   computeDaemonHeapCapMb
-} from "./chunk-7XGDTKHX.js";
+} from "./chunk-CMDC5D7S.js";
 import {
   EXE_AI_DIR
 } from "./chunk-7Y5UDEVM.js";

package/dist/{chunk-KF6NBYV4.js → chunk-3M73L663.js}

@@ -1,6 +1,6 @@
 import {
   sessionScopeFilter
-} from "./chunk-LWBOSHSS.js";
+} from "./chunk-PLBDXCYZ.js";
 
 // src/lib/git-task-sweep.ts
 import { execSync } from "child_process";
@@ -238,7 +238,7 @@ async function sweepTasks(projectName, options = {}) {
     }
     if (!dryRun) {
       try {
-        const { updateTaskStatus } = await import("./tasks-crud-ADVXVR7D.js");
+        const { updateTaskStatus } = await import("./tasks-crud-QUIIRWE3.js");
         await updateTaskStatus({
           taskId: task.id,
           status: "needs_review",

package/dist/{chunk-MRB2BXIB.js → chunk-4Z47UMMM.js}

@@ -8,13 +8,13 @@ import {
   buildStatusFilter,
   buildWikiScopeFilter,
   searchMemories
-} from "./chunk-PHUKD7VK.js";
+} from "./chunk-H2SD2EA7.js";
 import {
   blobToVector
 } from "./chunk-OTVEIJUQ.js";
 import {
   getClient
-} from "./chunk-36SS3TE7.js";
+} from "./chunk-XLNF3CIO.js";
 
 // src/lib/hybrid-search.ts
 var RRF_K = 60;
@@ -361,7 +361,7 @@ async function hybridSearch(queryText, agentId, options) {
   let rerankerAvailable = false;
   if (process.env.EXE_IS_DAEMON === "1") {
     try {
-      const { isRerankerAvailable } = await import("./reranker-FIRW3XMW.js");
+      const { isRerankerAvailable } = await import("./reranker-3XC5UM4F.js");
       rerankerAvailable = isRerankerAvailable();
     } catch {
     }
@@ -427,7 +427,7 @@ async function hybridSearch(queryText, agentId, options) {
     ]).catch(() => []),
     includeStructuredCards ? (async () => {
       try {
-        const { searchMemoryCards } = await import("./memory-cards-IG3K6T7M.js");
+        const { searchMemoryCards } = await import("./memory-cards-MGZ4P3AA.js");
         return await searchMemoryCards(effectiveQuery, agentId, fetchOptions);
       } catch {
         return [];
@@ -436,7 +436,7 @@ async function hybridSearch(queryText, agentId, options) {
     // Reflection insights: patterns, contradictions, summaries across sessions
     includeStructuredCards ? (async () => {
       try {
-        const { searchReflections } = await import("./memory-reflection-UGK2I2T7.js");
+        const { searchReflections } = await import("./memory-reflection-AYPJRPU7.js");
         const insights = await searchReflections(effectiveQuery, agentId, 5, {
           includeArchived: options?.includeArchived
         });
@@ -537,7 +537,7 @@ async function hybridSearch(queryText, agentId, options) {
   let entityBoostRan = false;
   if (merged.length > 0) {
     try {
-      const { applyEntityBoost } = await import("./entity-boost-AQBUEMJK.js");
+      const { applyEntityBoost } = await import("./entity-boost-VR5YOQCT.js");
       const boosted = await applyEntityBoost(merged, effectiveQuery, getClient());
       merged = boosted.results;
       graphContextMap = boosted.graphContext;
@@ -561,7 +561,7 @@ async function hybridSearch(queryText, agentId, options) {
     try {
       let rerankedRecords;
       if (graphContextMap.size > 0) {
-        const { rerankWithContext } = await import("./reranker-FIRW3XMW.js");
+        const { rerankWithContext } = await import("./reranker-3XC5UM4F.js");
         const candidates = merged.map((m) => ({
           text: m.raw_text,
           context: graphContextMap.get(m.id)
@@ -569,7 +569,7 @@ async function hybridSearch(queryText, agentId, options) {
         const scored = await rerankWithContext(effectiveQuery, candidates, rerankReturnLimit);
         rerankedRecords = scored.map((s) => merged[s.index]);
       } else {
-        const { rerank } = await import("./reranker-FIRW3XMW.js");
+        const { rerank } = await import("./reranker-3XC5UM4F.js");
         rerankedRecords = await rerank(effectiveQuery, merged, rerankReturnLimit);
       }
       if (rerankedRecords.length > 0) {
@@ -931,7 +931,7 @@ async function lightweightSearch(queryText, agentId, options) {
   }
   if (results.length >= 2) {
     try {
-      const { recordCoActivations } = await import("./co-activation-BQRXOZN2.js");
+      const { recordCoActivations } = await import("./co-activation-K44LGZ7A.js");
       const ids = results.slice(0, 10).map((r) => r.id);
       void recordCoActivations(ids);
     } catch {
@@ -939,7 +939,7 @@ async function lightweightSearch(queryText, agentId, options) {
   }
   if (options?.includeStructuredCards !== true) return results;
   try {
-    const { searchMemoryCards } = await import("./memory-cards-IG3K6T7M.js");
+    const { searchMemoryCards } = await import("./memory-cards-MGZ4P3AA.js");
     const cardResults = await searchMemoryCards(queryText, agentId, options);
     if (cardResults.length > 0) {
       return rrfMergeMulti([results, cardResults], limit, RRF_K, [1, 0.85]);

package/dist/{chunk-VTHR4DPE.js → chunk-5ZNY7IZI.js}

@@ -417,8 +417,12 @@ function buildTeam(employees, data) {
   }
   if (data.plan) {
     const planLabel = data.plan === "pro" ? "Solopreneur" : data.plan.charAt(0).toUpperCase() + data.plan.slice(1);
-    const limit = data.employeeLimit ?? "?";
+    const limit = data.employeeLimit === -1 ? "\u221E" : data.employeeLimit ?? "?";
     lines.push(`  Plan: ${planLabel} | ${employees.length}/${limit} employees | https://askexe.com`);
+    if (data.planChangeNotice) {
+      lines.push(`  \u{1F389} ${data.planChangeNotice}`);
+    }
+    lines.push(`  Upgraded your plan? Run: exe-os license refresh`);
   }
   return lines;
 }

package/dist/{chunk-UQOCHKPX.js → chunk-657AQEPY.js}

@@ -1,7 +1,7 @@
 import {
   clean,
   stableId
-} from "./chunk-HJSMIHEY.js";
+} from "./chunk-DY3J6GQO.js";
 
 // src/lib/reflection-checkpoints.ts
 function parsePayload(payload) {

package/dist/{chunk-B2FUBD6Z.js → chunk-6IBUQBMY.js}

@@ -4,32 +4,32 @@ import {
 } from "./chunk-HMP5VT6A.js";
 import {
   createTask
-} from "./chunk-OXGNFT3L.js";
+} from "./chunk-7SDS5VCL.js";
 import {
   getActiveAgent
-} from "./chunk-RJHOFX72.js";
+} from "./chunk-EOPSIIEH.js";
 import {
   ensureEmployee,
   isValidSessionScope,
   logTaskDispatch,
   resolveExeSession
-} from "./chunk-LWBOSHSS.js";
+} from "./chunk-PLBDXCYZ.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-RVF6JBHW.js";
+} from "./chunk-HV5CUDOE.js";
 import {
   getAgentRuntime,
   validateRuntimeModel
-} from "./chunk-Q26VSIXA.js";
+} from "./chunk-QVFJCFNM.js";
 import {
   getLicenseSync
-} from "./chunk-CQ2T4A2D.js";
+} from "./chunk-EPBB2OD3.js";
 import {
   getAgentContext
 } from "./chunk-GJV3WDWM.js";
 import {
   isCoordinatorName
-} from "./chunk-36SS3TE7.js";
+} from "./chunk-XLNF3CIO.js";
 
 // src/mcp/tools/create-task.ts
 import { z } from "zod";
@@ -345,7 +345,7 @@ function registerCreateTask(server) {
           session_scope: sessionScope,
           created_at: (/* @__PURE__ */ new Date()).toISOString()
         }), "utf-8");
-        const { recordOrchestrationEventBestEffort: recordOE } = await import("./orchestration-events-SKESCF4F.js");
+        const { recordOrchestrationEventBestEffort: recordOE } = await import("./orchestration-events-O5P5NEKS.js");
         recordOE({
           eventType: "signal.created",
           source: "create-task.mcp",
@@ -377,7 +377,7 @@ function registerCreateTask(server) {
             let projectConflictOpts = {};
             try {
               const { getClient } = await import("./lib/database.js");
-              const { sessionScopeFilter } = await import("./task-scope-75JK27V5.js");
+              const { sessionScopeFilter } = await import("./task-scope-OIHLMQOQ.js");
               const client = getClient();
               const scope = sessionScopeFilter(task.sessionScope || callerRoot || exeSession || null);
               const existing = await client.execute({

package/dist/{chunk-Q774HAGE.js → chunk-6N4LYEDI.js}

@@ -1,7 +1,7 @@
 import {
   getIdentity,
   loadEmployeesSync
-} from "./chunk-36SS3TE7.js";
+} from "./chunk-XLNF3CIO.js";
 
 // src/lib/drift-probes.ts
 var DRIFT_THRESHOLD = 80;

package/dist/{chunk-EPZWVXKI.js → chunk-6SXJZHRJ.js}

@@ -1,6 +1,6 @@
 import {
   listReminders
-} from "./chunk-MM7EYJJ3.js";
+} from "./chunk-EVUXF2G4.js";
 
 // src/mcp/tools/list-reminders.ts
 import { z } from "zod";

package/dist/{chunk-XLQH263A.js → chunk-6UQRJCKK.js}

@@ -3,11 +3,11 @@ import {
 } from "./chunk-75H4R62K.js";
 import {
   initStore
-} from "./chunk-PHUKD7VK.js";
+} from "./chunk-H2SD2EA7.js";
 import {
   getClient,
   isInitialized
-} from "./chunk-36SS3TE7.js";
+} from "./chunk-XLNF3CIO.js";
 
 // src/lib/schedules.ts
 import crypto from "crypto";

package/dist/{chunk-3ZOWUUKR.js → chunk-6XM6PZXQ.js}

@@ -1,7 +1,7 @@
 import {
   checkLicense,
   loadLicense
-} from "./chunk-QLVMJGUQ.js";
+} from "./chunk-VY7345RO.js";
 
 // src/lib/license-gate.ts
 var _cachedLicense = null;

package/dist/{chunk-DZJZAHTB.js → chunk-7BZ6TOZN.js}

@@ -2,10 +2,10 @@ import {
   listWorkflowDefinitions,
   runWorkflow,
   startWorkflow
-} from "./chunk-LRWB35MD.js";
+} from "./chunk-HGM6NZQH.js";
 import {
   ingest
-} from "./chunk-DTP4HXM3.js";
+} from "./chunk-X62GD6QW.js";
 import {
   initCRMBridge
 } from "./chunk-ONKIWA3R.js";

package/dist/{chunk-E3WZA2WU.js → chunk-7CUF27OT.js}

@@ -2,7 +2,7 @@ import {
   getClient,
   isCoordinatorName,
   loadEmployeesSync
-} from "./chunk-36SS3TE7.js";
+} from "./chunk-XLNF3CIO.js";
 
 // src/lib/steward-gate.ts
 import crypto from "crypto";

package/dist/{chunk-V4UKBUUA.js → chunk-7FBPLVHM.js}

@@ -1,6 +1,6 @@
 import {
   computeDaemonHeapCapMb
-} from "./chunk-7XGDTKHX.js";
+} from "./chunk-CMDC5D7S.js";
 import {
   resolveEmbeddingsEnabled
 } from "./chunk-KWOAM7TA.js";

package/dist/{chunk-OXGNFT3L.js → chunk-7SDS5VCL.js}

@@ -2,7 +2,7 @@ import {
   dispatchTaskToEmployee,
   markTaskNotificationsRead,
   notifyTaskDone
-} from "./chunk-TRXBT24O.js";
+} from "./chunk-BFHBHQFA.js";
 import {
   cleanupReviewFile,
   createTaskCore,
@@ -11,7 +11,7 @@ import {
   sessionScopeFilter,
   updateTaskStatus,
   writeNotification
-} from "./chunk-LWBOSHSS.js";
+} from "./chunk-PLBDXCYZ.js";
 import {
   orgBus
 } from "./chunk-MP2AFCGL.js";
@@ -19,7 +19,7 @@ import {
   getClient,
   getCoordinatorName,
   isCoordinatorName
-} from "./chunk-36SS3TE7.js";
+} from "./chunk-XLNF3CIO.js";
 import {
   EXE_AI_DIR
 } from "./chunk-7Y5UDEVM.js";
@@ -61,7 +61,7 @@ async function cascadeUnblock(taskId, baseDir, now) {
   }
   if (unblockedRows.rows.length > 0 && !process.env.VITEST) {
     try {
-      const { dispatchTaskToEmployee: dispatchTaskToEmployee2 } = await import("./tasks-notify-NAA6IHHW.js");
+      const { dispatchTaskToEmployee: dispatchTaskToEmployee2 } = await import("./tasks-notify-ANYLB5GU.js");
       const dispatched = /* @__PURE__ */ new Set();
       for (const ur of unblockedRows.rows) {
         const assignee = String(ur.assigned_to);
@@ -333,7 +333,7 @@ async function updateTask(input) {
     await markTaskNotificationsRead(taskFile);
     if (isCompletionReviewTransition && !isCoordinator && row.reviewer) {
       try {
-        const { writeNotification: writeNotification2 } = await import("./notifications-3MO6HVJM.js");
+        const { writeNotification: writeNotification2 } = await import("./notifications-BBQ23ORD.js");
         const reviewer = String(row.reviewer);
         await writeNotification2({
           agentId: reviewer,

package/dist/{chunk-FJUQ5L5R.js → chunk-A3KUGBDP.js}

@@ -15,7 +15,8 @@ function registryProxyOptionsFromEnv(env = process.env) {
     upstreamToken,
     pullTokens,
     allowedNamespace: env.EXE_REGISTRY_PROXY_ALLOWED_NAMESPACE || "askexe",
-    licenseValidatorUrl: env.EXE_REGISTRY_PROXY_LICENSE_VALIDATOR_URL || "https://api.askexe.com/v1/license/validate"
+    licenseValidatorUrl: env.EXE_REGISTRY_PROXY_LICENSE_VALIDATOR_URL || "https://api.askexe.com/v1/license/validate",
+    databaseUrl: env.EXE_REGISTRY_PROXY_DATABASE_URL || env.DATABASE_URL || void 0
   };
 }
 function assertRegistryProxyConfig(options) {
@@ -58,6 +59,12 @@ function parseBasicAuth(header) {
     return null;
   }
 }
+function parseBearerToken(header) {
+  if (!header) return null;
+  const match = /^Bearer\s+(.+)$/i.exec(header.trim());
+  const token = match?.[1]?.trim();
+  return token ? token : null;
+}
 function unauthorized(res) {
   res.writeHead(401, {
     "www-authenticate": 'Basic realm="AskExe Registry Proxy"',
@@ -119,6 +126,78 @@ function createRegistryProxyServer(options) {
   const upstream = new URL(options.upstream ?? "https://ghcr.io");
   const namespace = options.allowedNamespace ?? "askexe";
   const upstreamAuth = Buffer.from(`${options.upstreamUsername ?? "askexe"}:${options.upstreamToken}`).toString("base64");
+  let manifestPool = null;
+  let manifestPoolInit = null;
+  async function getManifestPool() {
+    if (!options.databaseUrl) return null;
+    if (manifestPool) return manifestPool;
+    if (!manifestPoolInit) {
+      manifestPoolInit = (async () => {
+        const { Pool } = await import("pg");
+        const { pgSslConfig } = await import("./pg-ssl-7JXQFL4I.js");
+        const pool = new Pool({ connectionString: options.databaseUrl, max: 2, ...pgSslConfig() });
+        manifestPool = pool;
+        return pool;
+      })().catch((err) => {
+        console.error("[registry-proxy] manifest DB pool init failed:", err instanceof Error ? err.message : String(err));
+        manifestPoolInit = null;
+        return null;
+      });
+    }
+    return manifestPoolInit;
+  }
+  async function isLicenseKeyValidLocally(pool, token) {
+    try {
+      const r = await pool.query(
+        "SELECT 1 FROM billing.licenses WHERE key = $1 AND status = 'active' AND (expires_at IS NULL OR expires_at > now()) LIMIT 1",
+        [token]
+      );
+      return r.rows.length > 0;
+    } catch (err) {
+      console.error("[registry-proxy] local license validation failed:", err instanceof Error ? err.message : String(err));
+      return false;
+    }
+  }
+  async function isManifestAuthorized(token) {
+    if (timingSafeIncludes(options.pullTokens, token)) return true;
+    if (!isLicenseKeyFormat(token)) return false;
+    const pool = await getManifestPool();
+    if (pool && await isLicenseKeyValidLocally(pool, token)) return true;
+    if (options.licenseValidatorUrl) return validateLicenseKey(token, options.licenseValidatorUrl);
+    return false;
+  }
+  async function handleStackManifest(req, res) {
+    const token = parseBearerToken(req.headers.authorization);
+    if (!token || !await isManifestAuthorized(token)) {
+      unauthorized(res);
+      return;
+    }
+    const pool = await getManifestPool();
+    if (!pool) {
+      res.writeHead(503, { "content-type": "application/json" });
+      res.end(JSON.stringify({ error: "stack manifest source unavailable" }));
+      return;
+    }
+    try {
+      const result = await pool.query(
+        "SELECT manifest FROM billing.stack_releases WHERE status = $1 ORDER BY string_to_array(version, '.')::int[] DESC LIMIT 1",
+        ["released"]
+      );
+      if (result.rows.length === 0) {
+        res.writeHead(503, { "content-type": "application/json" });
+        res.end(JSON.stringify({ error: "no released stack manifest available" }));
+        return;
+      }
+      const manifest = result.rows[0].manifest;
+      const body = typeof manifest === "string" ? manifest : JSON.stringify(manifest);
+      res.writeHead(200, { "content-type": "application/json", "cache-control": "max-age=60" });
+      res.end(body);
+    } catch (err) {
+      console.error("[registry-proxy] stack manifest query failed:", err instanceof Error ? err.message : String(err));
+      res.writeHead(503, { "content-type": "application/json" });
+      res.end(JSON.stringify({ error: "stack manifest query failed" }));
+    }
+  }
   return createServer(async (req, res) => {
     const requestUrl = new URL(req.url ?? "/", `http://${req.headers.host ?? "localhost"}`);
     if (requestUrl.pathname === "/health") {
@@ -126,6 +205,10 @@ function createRegistryProxyServer(options) {
       res.end(JSON.stringify({ ok: true, service: "exe-registry-proxy", upstream: upstream.origin, namespace }));
       return;
     }
+    if (requestUrl.pathname === "/v1/stack-manifest.json") {
+      await handleStackManifest(req, res);
+      return;
+    }
     if (!isAllowedPath(requestUrl.pathname, namespace)) {
       res.writeHead(404, { "content-type": "application/json" });
       res.end(JSON.stringify({ error: "registry path not allowed" }));
@@ -180,6 +263,14 @@ async function runRegistryProxy(options = registryProxyOptionsFromEnv()) {
   await new Promise((resolve) => server.listen(options.port, options.host, resolve));
   console.log(`exe-registry-proxy listening on ${options.host ?? "0.0.0.0"}:${options.port}`);
   console.log(`proxying /v2/${options.allowedNamespace ?? "askexe"}/* -> ${options.upstream ?? "https://ghcr.io"}`);
+  const { licenseSyncConfigFromEnv, startLicenseSyncScheduler } = await import("./license-sync-LX73IEBH.js");
+  const syncConfig = licenseSyncConfigFromEnv();
+  if (syncConfig) {
+    startLicenseSyncScheduler(syncConfig);
+    console.log(
+      `[license-sync] scheduler started (interval=${syncConfig.intervalMs ?? 36e5}ms, D1\u2192billing.licenses, one-way)`
+    );
+  }
 }
 
 export {

package/dist/{chunk-TWPYSILC.js → chunk-ABGDTMKC.js}

@@ -1,6 +1,6 @@
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-RVF6JBHW.js";
+} from "./chunk-HV5CUDOE.js";
 import {
   atomicWriteJsonSync
 } from "./chunk-SHIICYJW.js";