@askexenow/exe-os 0.9.322 → 0.9.323

package/dist/bin/agentic-semantic-label.js

@@ -3,24 +3,24 @@ import {
   clean,
   inferSemanticLabel,
   stableId
-} from "../chunk-DY3J6GQO.js";
+} from "../chunk-FU767JXE.js";
 import {
   politeBatchPause,
   startManagedJob
 } from "../chunk-JSKBHUR7.js";
 import {
   initStore
-} from "../chunk-H2SD2EA7.js";
+} from "../chunk-UW5QD52P.js";
 import "../chunk-CHCA3ZM2.js";
 import "../chunk-OTVEIJUQ.js";
-import "../chunk-SIJSFULW.js";
+import "../chunk-6IJ47YFD.js";
 import "../chunk-Y25OJWOQ.js";
 import "../chunk-MP2AFCGL.js";
 import {
   getClient
-} from "../chunk-XLNF3CIO.js";
+} from "../chunk-46AMZT3C.js";
 import "../chunk-2I23RPSI.js";
-import "../chunk-WXRVHXVP.js";
+import "../chunk-MV5OSOP4.js";
 import "../chunk-PNQDP3OA.js";
 import "../chunk-H73TUI4Y.js";
 import "../chunk-7HLWBYH7.js";

package/dist/bin/backfill-conversations.js

@@ -1,27 +1,27 @@
 #!/usr/bin/env node
-import {
-  connectEmbedDaemon,
-  embedViaClient
-} from "../chunk-3JW3ZXCP.js";
-import "../chunk-AFNRE2RV.js";
-import "../chunk-3NGZ4PL7.js";
-import "../chunk-CMDC5D7S.js";
 import {
   flushBatch,
   initStore,
   writeMemory
-} from "../chunk-H2SD2EA7.js";
+} from "../chunk-UW5QD52P.js";
 import "../chunk-CHCA3ZM2.js";
 import "../chunk-OTVEIJUQ.js";
-import "../chunk-SIJSFULW.js";
+import "../chunk-6IJ47YFD.js";
 import "../chunk-Y25OJWOQ.js";
+import {
+  connectEmbedDaemon,
+  embedViaClient
+} from "../chunk-UPLY33F7.js";
+import "../chunk-AFNRE2RV.js";
+import "../chunk-3NGZ4PL7.js";
+import "../chunk-NLEW62VC.js";
 import "../chunk-MP2AFCGL.js";
 import {
   getClient,
   isCoordinatorName
-} from "../chunk-XLNF3CIO.js";
+} from "../chunk-46AMZT3C.js";
 import "../chunk-2I23RPSI.js";
-import "../chunk-WXRVHXVP.js";
+import "../chunk-MV5OSOP4.js";
 import "../chunk-PNQDP3OA.js";
 import "../chunk-H73TUI4Y.js";
 import "../chunk-7HLWBYH7.js";

package/dist/bin/backfill-responses.js

@@ -1,27 +1,27 @@
 #!/usr/bin/env node
-import {
-  connectEmbedDaemon,
-  embedViaClient
-} from "../chunk-3JW3ZXCP.js";
-import "../chunk-AFNRE2RV.js";
-import "../chunk-3NGZ4PL7.js";
-import "../chunk-CMDC5D7S.js";
 import {
   flushBatch,
   initStore,
   writeMemory
-} from "../chunk-H2SD2EA7.js";
+} from "../chunk-UW5QD52P.js";
 import "../chunk-CHCA3ZM2.js";
 import "../chunk-OTVEIJUQ.js";
-import "../chunk-SIJSFULW.js";
+import "../chunk-6IJ47YFD.js";
 import "../chunk-Y25OJWOQ.js";
+import {
+  connectEmbedDaemon,
+  embedViaClient
+} from "../chunk-UPLY33F7.js";
+import "../chunk-AFNRE2RV.js";
+import "../chunk-3NGZ4PL7.js";
+import "../chunk-NLEW62VC.js";
 import "../chunk-MP2AFCGL.js";
 import {
   getClient,
   isCoordinatorName
-} from "../chunk-XLNF3CIO.js";
+} from "../chunk-46AMZT3C.js";
 import "../chunk-2I23RPSI.js";
-import "../chunk-WXRVHXVP.js";
+import "../chunk-MV5OSOP4.js";
 import "../chunk-PNQDP3OA.js";
 import "../chunk-H73TUI4Y.js";
 import "../chunk-7HLWBYH7.js";

package/dist/bin/backfill-vectors.js

@@ -3,36 +3,41 @@ import {
   politeBatchPause,
   startManagedJob
 } from "../chunk-JSKBHUR7.js";
+import {
+  NOT_PARKED_SQL,
+  PARKED_EMBEDDING_MODEL,
+  backfillKillSwitchEnabled
+} from "../chunk-KPIN44GZ.js";
 import {
   prepareEmbeddingText
-} from "../chunk-CHSRSESS.js";
+} from "../chunk-KIXTW4VH.js";
 import {
   cleanupWorkerPid,
   registerWorkerPid,
   releaseBackfillLock,
   tryAcquireBackfillLock
-} from "../chunk-TKBWBHFV.js";
-import {
-  connectEmbedDaemon,
-  embedViaClient
-} from "../chunk-3JW3ZXCP.js";
-import "../chunk-AFNRE2RV.js";
-import "../chunk-3NGZ4PL7.js";
-import "../chunk-CMDC5D7S.js";
+} from "../chunk-JTF4UVXK.js";
 import {
   initStore,
   vectorToBlob
-} from "../chunk-H2SD2EA7.js";
+} from "../chunk-UW5QD52P.js";
 import "../chunk-CHCA3ZM2.js";
 import "../chunk-OTVEIJUQ.js";
-import "../chunk-SIJSFULW.js";
+import "../chunk-6IJ47YFD.js";
 import "../chunk-Y25OJWOQ.js";
+import {
+  connectEmbedDaemon,
+  embedViaClient
+} from "../chunk-UPLY33F7.js";
+import "../chunk-AFNRE2RV.js";
+import "../chunk-3NGZ4PL7.js";
+import "../chunk-NLEW62VC.js";
 import "../chunk-MP2AFCGL.js";
 import {
   getClient
-} from "../chunk-XLNF3CIO.js";
+} from "../chunk-46AMZT3C.js";
 import "../chunk-2I23RPSI.js";
-import "../chunk-WXRVHXVP.js";
+import "../chunk-MV5OSOP4.js";
 import "../chunk-PNQDP3OA.js";
 import "../chunk-H73TUI4Y.js";
 import "../chunk-7HLWBYH7.js";
@@ -53,8 +58,54 @@ import "../chunk-MLKGABMK.js";
 // src/bin/backfill-vectors.ts
 import { existsSync, mkdirSync, readFileSync, unlinkSync } from "fs";
 import path from "path";
+import os from "os";
 var BATCH_SIZE = 100;
 var BACKFILL_FLAG = path.join(EXE_AI_DIR, "session-cache", "needs-backfill");
+var BACKFILL_MAX_CHARS_DEFAULT = 2e3;
+var BACKFILL_MAX_CHARS_MIN = 200;
+var BACKFILL_MAX_CHARS_MAX = 24e3;
+function backfillMaxEmbedChars(env = process.env) {
+  const raw = parseInt(env.EXE_BACKFILL_MAX_CHARS ?? "", 10);
+  if (!Number.isFinite(raw)) return BACKFILL_MAX_CHARS_DEFAULT;
+  return Math.min(BACKFILL_MAX_CHARS_MAX, Math.max(BACKFILL_MAX_CHARS_MIN, raw));
+}
+var BACKFILL_MIN_BATCH = 10;
+var BACKFILL_PAUSE_BASE_MS = 500;
+var BACKFILL_PAUSE_MAX_MS = 5e3;
+function computeBackfillBatchSize(loadAvg1, cpuCount, base = BATCH_SIZE) {
+  if (!Number.isFinite(loadAvg1) || !Number.isFinite(cpuCount) || cpuCount <= 0) return base;
+  const perCore = loadAvg1 / cpuCount;
+  if (perCore <= 0.5) return base;
+  if (perCore >= 1) return Math.min(BACKFILL_MIN_BATCH, base);
+  const t = (perCore - 0.5) / 0.5;
+  const size = Math.round(base - t * (base - BACKFILL_MIN_BATCH));
+  return Math.max(Math.min(BACKFILL_MIN_BATCH, base), Math.min(base, size));
+}
+function computeBackfillPauseMs(loadAvg1, cpuCount) {
+  if (!Number.isFinite(loadAvg1) || !Number.isFinite(cpuCount) || cpuCount <= 0) {
+    return BACKFILL_PAUSE_BASE_MS;
+  }
+  const perCore = loadAvg1 / cpuCount;
+  if (perCore <= 0.5) return BACKFILL_PAUSE_BASE_MS;
+  const t = Math.min(1, (perCore - 0.5) / 0.5);
+  return Math.round(BACKFILL_PAUSE_BASE_MS + t * (BACKFILL_PAUSE_MAX_MS - BACKFILL_PAUSE_BASE_MS));
+}
+var PARK_CHUNK = 100;
+async function parkPoisonRows(client, ids) {
+  let parked = 0;
+  for (let i = 0; i < ids.length; i += PARK_CHUNK) {
+    const chunk = ids.slice(i, i + PARK_CHUNK);
+    try {
+      await client.execute({
+        sql: `UPDATE memories SET embedding_model = ? WHERE vector IS NULL AND id IN (${chunk.map(() => "?").join(",")})`,
+        args: [PARKED_EMBEDDING_MODEL, ...chunk]
+      });
+      parked += chunk.length;
+    } catch {
+    }
+  }
+  return parked;
+}
 var DEAD_LETTER_FILE = path.join(EXE_AI_DIR, "session-cache", "vector-backfill-deadletter.json");
 var MAX_DEAD_LETTER_ATTEMPTS = Math.max(
   1,
@@ -104,6 +155,10 @@ function isNonRetryableEmbedError(err) {
   return msg.toLowerCase().includes("input is longer than the context size");
 }
 async function backfillVectors() {
+  if (backfillKillSwitchEnabled()) {
+    process.stderr.write("[backfill] EXE_DISABLE_BACKFILL is set \u2014 backfill disabled, exiting\n");
+    return { processed: 0, failed: 0, remaining: -1 };
+  }
   const job = startManagedJob({ type: "vector-backfill", name: "Vector embedding backfill", lowPriority: true });
   if (!job) {
     process.stderr.write("[backfill] Vector backfill is already running \u2014 exiting\n");
@@ -149,6 +204,16 @@ async function backfillVectors() {
   const failedIds = new Set(exhaustedIds(deadLetter));
   let deadLetterDirty = false;
   let capReached = false;
+  if (hasEmbeddingModelCol && failedIds.size > 0) {
+    const parked = await parkPoisonRows(client, [...failedIds]);
+    if (parked > 0) {
+      process.stderr.write(`[backfill] Parked ${parked} previously dead-lettered rows (embedding_model='${PARKED_EMBEDDING_MODEL}')
+`);
+    }
+  }
+  const maxChars = backfillMaxEmbedChars();
+  const cpuCount = os.cpus().length || 1;
+  const newlyExhausted = [];
   while (true) {
     if (totalFailed >= MAX_FAILURES_PER_RUN) {
       capReached = true;
@@ -160,9 +225,11 @@ async function backfillVectors() {
     }
     const failedList = [...failedIds];
     const failedClause = failedList.length > 0 ? ` AND id NOT IN (${failedList.map(() => "?").join(",")})` : "";
+    const parkedClause = hasEmbeddingModelCol ? ` AND ${NOT_PARKED_SQL}` : "";
+    const batchSize = computeBackfillBatchSize(os.loadavg()[0] ?? 0, cpuCount);
     const batch = await client.execute({
-      sql: `SELECT id, raw_text FROM memories WHERE vector IS NULL${failedClause} LIMIT ?`,
-      args: [...failedList, BATCH_SIZE]
+      sql: `SELECT id, raw_text FROM memories WHERE vector IS NULL${parkedClause}${failedClause} LIMIT ?`,
+      args: [...failedList, batchSize]
     });
     if (batch.rows.length === 0) break;
     process.stderr.write(`[backfill] Processing batch of ${batch.rows.length} memories...
@@ -174,12 +241,12 @@ async function backfillVectors() {
       const id = row.id;
       const rawText = row.raw_text;
       try {
-        const vector = await embedViaClient(prepareEmbeddingText(rawText, "passage"), "low");
+        const vector = await embedViaClient(prepareEmbeddingText(rawText.slice(0, maxChars), "passage"), "low");
         if (!vector) {
           totalFailed++;
           batchFailed++;
           failedIds.add(id);
-          recordDeadLetter(deadLetter, id, "daemon returned null");
+          if (recordDeadLetter(deadLetter, id, "daemon returned null")) newlyExhausted.push(id);
           deadLetterDirty = true;
           process.stderr.write(`[backfill] Failed to embed memory ${id} \u2014 daemon returned null
 `);
@@ -209,10 +276,11 @@ async function backfillVectors() {
             lastError: (err instanceof Error ? err.message : String(err)).slice(0, 200),
             updatedAt: (/* @__PURE__ */ new Date()).toISOString()
           };
+          newlyExhausted.push(id);
           process.stderr.write(`[backfill] Non-retryable embedding error for ${id}; dead-lettering permanently
 `);
-        } else {
-          recordDeadLetter(deadLetter, id, err);
+        } else if (recordDeadLetter(deadLetter, id, err)) {
+          newlyExhausted.push(id);
         }
         process.stderr.write(`[backfill] Error embedding ${id}: ${err instanceof Error ? err.message : String(err)}
 `);
@@ -225,11 +293,18 @@ async function backfillVectors() {
       saveDeadLetter(deadLetter);
       deadLetterDirty = false;
     }
+    if (hasEmbeddingModelCol && newlyExhausted.length > 0) {
+      const parked = await parkPoisonRows(client, newlyExhausted.splice(0));
+      if (parked > 0) {
+        process.stderr.write(`[backfill] Parked ${parked} poison rows (embedding_model='${PARKED_EMBEDDING_MODEL}')
+`);
+      }
+    }
     if (batchProcessed === 0 && batchFailed === batch.rows.length) {
       process.stderr.write("[backfill] Entire batch failed \u2014 stopping to avoid reprocessing poison rows\n");
       break;
     }
-    await politeBatchPause(500);
+    await politeBatchPause(computeBackfillPauseMs(os.loadavg()[0] ?? 0, cpuCount));
   }
   if (deadLetterDirty) saveDeadLetter(deadLetter);
   const remaining = await client.execute({
@@ -238,9 +313,10 @@ async function backfillVectors() {
   });
   const remainingCount = Number(remaining.rows[0]?.cnt) || 0;
   const exhausted = new Set(exhaustedIds(deadLetter));
-  const actionableRemaining = exhausted.size === 0 ? remainingCount : Number(
+  const parkedFilter = hasEmbeddingModelCol ? ` AND ${NOT_PARKED_SQL}` : "";
+  const actionableRemaining = exhausted.size === 0 && !hasEmbeddingModelCol ? remainingCount : Number(
     (await client.execute({
-      sql: `SELECT COUNT(*) as cnt FROM memories WHERE vector IS NULL AND id NOT IN (${[...exhausted].map(() => "?").join(",")})`,
+      sql: `SELECT COUNT(*) as cnt FROM memories WHERE vector IS NULL${parkedFilter}${exhausted.size > 0 ? ` AND id NOT IN (${[...exhausted].map(() => "?").join(",")})` : ""}`,
       args: [...exhausted]
     })).rows[0]?.cnt
   ) || 0;
@@ -271,10 +347,14 @@ if (isMainModule(import.meta.url)) {
   });
 }
 export {
+  backfillMaxEmbedChars,
   backfillVectors,
+  computeBackfillBatchSize,
+  computeBackfillPauseMs,
   deadLetterMaxAttempts,
   exhaustedIds,
   isBackfillNeeded,
   maxFailuresPerRun,
+  parkPoisonRows,
   recordDeadLetter
 };

package/dist/bin/bulk-sync-postgres.js

@@ -1,37 +1,37 @@
 #!/usr/bin/env node
 import {
   pushToPostgres
-} from "../chunk-LCZ55G5G.js";
-import "../chunk-72LWCZTJ.js";
-import "../chunk-FANIBYUO.js";
+} from "../chunk-WCXFNUMD.js";
+import "../chunk-AI3BK3JD.js";
+import "../chunk-A2K7YIRL.js";
 import "../chunk-LO6L5ADL.js";
-import "../chunk-2GBGIXKH.js";
+import "../chunk-S6XKC36B.js";
 import "../chunk-QGGH7LOU.js";
-import "../chunk-3JW3ZXCP.js";
-import "../chunk-AFNRE2RV.js";
-import "../chunk-3NGZ4PL7.js";
-import "../chunk-CMDC5D7S.js";
 import {
   disposeStore,
   initStore
-} from "../chunk-H2SD2EA7.js";
+} from "../chunk-UW5QD52P.js";
 import "../chunk-CHCA3ZM2.js";
 import "../chunk-OTVEIJUQ.js";
-import "../chunk-SIJSFULW.js";
+import "../chunk-6IJ47YFD.js";
 import "../chunk-Y25OJWOQ.js";
+import "../chunk-UPLY33F7.js";
+import "../chunk-AFNRE2RV.js";
+import "../chunk-3NGZ4PL7.js";
+import "../chunk-NLEW62VC.js";
 import "../chunk-MP2AFCGL.js";
 import {
   getClient
-} from "../chunk-XLNF3CIO.js";
+} from "../chunk-46AMZT3C.js";
 import "../chunk-2I23RPSI.js";
-import "../chunk-WXRVHXVP.js";
+import "../chunk-MV5OSOP4.js";
 import "../chunk-PNQDP3OA.js";
 import "../chunk-H73TUI4Y.js";
 import "../chunk-7HLWBYH7.js";
 import "../chunk-FXU7JOXK.js";
 import "../chunk-Z42MXYWW.js";
-import "../chunk-VY7345RO.js";
-import "../chunk-DQJ3WZRK.js";
+import "../chunk-L5TUAHLX.js";
+import "../chunk-RYZR4NNE.js";
 import "../chunk-7Y5UDEVM.js";
 import "../chunk-SHIICYJW.js";
 import "../chunk-MLKGABMK.js";

package/dist/bin/cc-doctor.js

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import {
   checkClaudeCodeInstall
-} from "../chunk-SENJA7BZ.js";
-import "../chunk-HKSJSW2V.js";
+} from "../chunk-3VYAQUWZ.js";
+import "../chunk-EZHNCIO5.js";
 import "../chunk-X2FHTDIU.js";
 import "../chunk-SSC7EKY2.js";
 import "../chunk-75H4R62K.js";
-import "../chunk-CWQAXO3O.js";
-import "../chunk-XLNF3CIO.js";
+import "../chunk-5RACW3LX.js";
+import "../chunk-46AMZT3C.js";
 import "../chunk-2I23RPSI.js";
-import "../chunk-WXRVHXVP.js";
+import "../chunk-MV5OSOP4.js";
 import "../chunk-PNQDP3OA.js";
 import "../chunk-H73TUI4Y.js";
 import "../chunk-7HLWBYH7.js";

package/dist/bin/cleanup-stale-review-tasks.js

@@ -1,39 +1,46 @@
 #!/usr/bin/env node
 import {
   fastDbInit
-} from "../chunk-ZU6767WK.js";
+} from "../chunk-HWVEDRZA.js";
 import {
   sessionScopeFilter
-} from "../chunk-PLBDXCYZ.js";
-import "../chunk-HWC5W34K.js";
-import "../chunk-KLG53B63.js";
-import "../chunk-4FVVJ7ME.js";
+} from "../chunk-XK7HAEFC.js";
+import "../chunk-3LZILUET.js";
+import "../chunk-BKOGHVRO.js";
+import "../chunk-U3VSCPGX.js";
+import "../chunk-EIKATSE4.js";
 import "../chunk-E23LNUWJ.js";
 import "../chunk-4JERP7NT.js";
-import "../chunk-ABGDTMKC.js";
+import "../chunk-3CT3GN2B.js";
 import "../chunk-SSTLTIF3.js";
 import "../chunk-RMOBQ6A5.js";
 import "../chunk-54QCG45Y.js";
-import "../chunk-HV5CUDOE.js";
-import "../chunk-QVFJCFNM.js";
+import "../chunk-364VBQIC.js";
+import "../chunk-FROUDYRT.js";
 import "../chunk-NGP6LSV2.js";
-import "../chunk-EPBB2OD3.js";
+import "../chunk-GHARDROH.js";
 import "../chunk-CVYC6DUW.js";
+import "../chunk-W33H7TWW.js";
+import "../chunk-HCJCW7X4.js";
 import "../chunk-OPU3NYOO.js";
+import "../chunk-UPLY33F7.js";
+import "../chunk-AFNRE2RV.js";
+import "../chunk-3NGZ4PL7.js";
+import "../chunk-NLEW62VC.js";
 import "../chunk-HYZV25LY.js";
 import "../chunk-GJV3WDWM.js";
 import "../chunk-MP2AFCGL.js";
 import {
   getClient
-} from "../chunk-XLNF3CIO.js";
+} from "../chunk-46AMZT3C.js";
 import "../chunk-2I23RPSI.js";
-import "../chunk-WXRVHXVP.js";
+import "../chunk-MV5OSOP4.js";
 import "../chunk-PNQDP3OA.js";
 import "../chunk-H73TUI4Y.js";
 import "../chunk-7HLWBYH7.js";
 import "../chunk-FXU7JOXK.js";
-import "../chunk-VY7345RO.js";
-import "../chunk-DQJ3WZRK.js";
+import "../chunk-L5TUAHLX.js";
+import "../chunk-RYZR4NNE.js";
 import "../chunk-7Y5UDEVM.js";
 import "../chunk-SHIICYJW.js";
 import {

package/dist/bin/cli.js

@@ -106,7 +106,7 @@ if (args.includes("--global")) {
   );
   await runClaudeInstall();
 } else if (args.includes("--commands-only")) {
-  const { copySlashCommands, resolvePackageRoot } = await import("../installer-SC7CQBYY.js");
+  const { copySlashCommands, resolvePackageRoot } = await import("../installer-U7D3PAR5.js");
   try {
     const packageRoot = resolvePackageRoot();
     const result = await copySlashCommands(packageRoot);
@@ -195,7 +195,7 @@ if (args.includes("--global")) {
     process.exit(1);
   }
 } else if (args[0] === "key") {
-  const { main: runKey } = await import("../exe-key-IPGY4RMU.js");
+  const { main: runKey } = await import("../exe-key-6SLYWY36.js");
   await runKey(args.slice(1));
 } else if (args[0] === "link") {
   console.error("`exe-os link` has been removed from the customer command surface.");
@@ -247,7 +247,7 @@ if (args.includes("--global")) {
     process.exit(1);
   }
 } else if (args[0] === "backfill-metadata") {
-  const { backfillMetadata } = await import("../backfill-metadata-CXWFCTBO.js");
+  const { backfillMetadata } = await import("../backfill-metadata-N5VVCYFT.js");
   let batchSize = 50;
   let limit = 0;
   let dryRun = false;
@@ -278,10 +278,10 @@ if (args.includes("--global")) {
     process.exit(1);
   }
 } else if (args[0] === "export") {
-  const { runExeExport } = await import("../exe-export-THIAYHXK.js");
+  const { runExeExport } = await import("../exe-export-EDQDGZV3.js");
   await runExeExport(args.slice(1));
 } else if (args[0] === "import") {
-  const { runExeImport } = await import("../exe-import-3Y4VOUYL.js");
+  const { runExeImport } = await import("../exe-import-DV7GKBZD.js");
   await runExeImport(args.slice(1));
 } else if (args[0] === "import-history") {
   const { runImportHistory } = await import("./import-history.js");
@@ -306,7 +306,7 @@ if (args.includes("--global")) {
   const { initStore } = await import("../lib/store.js");
   await initStore();
   const { sendMessage } = await import("../lib/messaging.js");
-  const { getActiveAgent } = await import("../active-agent-SHM4QSRJ.js");
+  const { getActiveAgent } = await import("../active-agent-IGVX2AAK.js");
   const { agentId } = getActiveAgent();
   const result = await sendMessage({
     fromAgent: agentId,
@@ -325,23 +325,12 @@ ID: ${result.id}`);
 } else if (args[0] === "license") {
   await runLicense(args.slice(1));
 } else if (args[0] === "healthcheck") {
-  const { runHealthCheck } = await import("./exe-healthcheck.js");
-  const { results, passed, failed } = runHealthCheck();
-  console.log("\n  exe-os Health Check\n");
-  for (const r of results) {
-    const icon = r.pass ? "\x1B[32m\u2713\x1B[0m" : "\x1B[31m\u2717\x1B[0m";
-    console.log(`  ${icon} ${r.name}`);
-    console.log(`    ${r.detail}`);
-  }
-  console.log(failed === 0 ? `
-  \x1B[32m${passed} passed\x1B[0m
-` : `
-  \x1B[32m${passed} passed\x1B[0m, \x1B[31m${failed} failed\x1B[0m
-`);
-  process.exit(failed > 0 ? 1 : 0);
+  const { runHealthCheckWithDeadline } = await import("./exe-healthcheck.js");
+  const { code } = runHealthCheckWithDeadline();
+  process.exit(code);
 } else if (args[0] === "doctor") {
   if (args.includes("--drift")) {
-    const { runDrift } = await import("../exe-drift-GLJIM7EI.js");
+    const { runDrift } = await import("../exe-drift-VOJZYOIO.js");
     await runDrift(args.slice(1));
   } else {
     const { runCcDoctor } = await import("./cc-doctor.js");
@@ -358,7 +347,7 @@ ID: ${result.id}`);
   }
 } else if (args[0] === "backup") {
   const sub = args[1];
-  const { listBackups, createBackup, restoreBackup } = await import("../db-backup-ITRADB2J.js");
+  const { listBackups, createBackup, restoreBackup } = await import("../db-backup-I5GQBRIG.js");
   if (sub === "list" || !sub) {
     const backups = listBackups();
     if (backups.length === 0) {
@@ -413,7 +402,7 @@ ID: ${result.id}`);
     process.exit(1);
   }
 } else if (args[0] === "setup" || args[0] === "-setup" || args[0] === "--setup") {
-  const { runSetupWizard } = await import("../setup-wizard-KVTLSSRD.js");
+  const { runSetupWizard } = await import("../setup-wizard-5STOE3PS.js");
   await runSetupWizard({
     skipModel: args.includes("--skip-model"),
     nonInteractive: args.includes("--non-interactive") || args.includes("-y") || args.includes("--yes"),
@@ -466,10 +455,10 @@ Post-deploy verification \u2014 8 runtime checks after stack-update.
 `);
   process.exit(report.failed > 0 ? 1 : 0);
 } else if (args[0] === "snapshot") {
-  const { main: runSnapshot } = await import("../exe-snapshot-2ZEWCDYK.js");
+  const { main: runSnapshot } = await import("../exe-snapshot-TDQI34DW.js");
   await runSnapshot(args.slice(1));
 } else if (args[0] === "boot") {
-  const { projectBoot, parseBootArgs } = await import("../project-boot-22ZZL2GE.js");
+  const { projectBoot, parseBootArgs } = await import("../project-boot-TOFNGMHM.js");
   const bootOpts = parseBootArgs(args.slice(1));
   console.log(await projectBoot(bootOpts));
 } else if (args[0] === "brand") {
@@ -583,7 +572,7 @@ cd into a project folder and run \x1B[1m${cooName}1\x1B[0m to boot your COO.
   }
 }
 async function runCodeContext(ccArgs) {
-  const { buildCodeContextIndex, getCodeContextStats, searchCodeContext } = await import("../code-context-index-6YQ3DGCN.js");
+  const { buildCodeContextIndex, getCodeContextStats, searchCodeContext } = await import("../code-context-index-NODPVXHC.js");
   const sub = ccArgs[0] ?? "status";
   const projectRoot = valueAfter(ccArgs, "--project-root") ?? process.cwd();
   if (sub === "init" || sub === "index") {
@@ -659,7 +648,7 @@ function numberAfter(args2, flag) {
   return Number.isFinite(parsed) ? parsed : void 0;
 }
 async function runClaudeInstall() {
-  const { runInstaller } = await import("../installer-SC7CQBYY.js");
+  const { runInstaller } = await import("../installer-U7D3PAR5.js");
   try {
     await runInstaller();
   } catch (err) {
@@ -671,7 +660,7 @@ async function runClaudeInstall() {
   }
 }
 async function runOpenCodeInstall() {
-  const { runOpenCodeInstaller } = await import("../installer-2EKTDQZB.js");
+  const { runOpenCodeInstaller } = await import("../installer-W4SHZFOR.js");
   try {
     await runOpenCodeInstaller();
   } catch (err) {
@@ -683,7 +672,7 @@ async function runOpenCodeInstall() {
   }
 }
 async function runCodexInstall() {
-  const { runCodexInstaller } = await import("../installer-UEF44TWQ.js");
+  const { runCodexInstaller } = await import("../installer-WHO23TIO.js");
   try {
     await runCodexInstaller();
   } catch (err) {
@@ -695,7 +684,7 @@ async function runCodexInstall() {
   }
 }
 async function runClaudeCheck() {
-  const { detectMcpNameCollisions } = await import("../installer-SC7CQBYY.js");
+  const { detectMcpNameCollisions } = await import("../installer-U7D3PAR5.js");
   const claudeDir = path.join(os.homedir(), ".claude");
   const settingsPath = path.join(claudeDir, "settings.json");
   const claudeJsonPath = path.join(os.homedir(), ".claude.json");
@@ -1200,6 +1189,13 @@ async function runCloudSync() {
   const { cloudSync } = await import("../lib/cloud-sync.js");
   const { getMasterKey } = await import("../lib/keychain.js");
   const { initSyncCrypto } = await import("../lib/crypto.js");
+  const { assertCloudSyncReachable, withTimeout } = await import("./exe-cloud.js");
+  try {
+    await assertCloudSyncReachable(config.cloud.endpoint);
+  } catch (err) {
+    console.error(`Cloud sync aborted: ${err instanceof Error ? err.message : String(err)}`);
+    process.exit(1);
+  }
   await initStore();
   const masterKey = await getMasterKey();
   if (masterKey) {
@@ -1211,7 +1207,8 @@ async function runCloudSync() {
   }
   console.log("Syncing with Exe Cloud now... (Normally this runs automatically in the background.)");
   try {
-    const result = await cloudSync(config.cloud);
+    const syncTimeoutMs = Number(process.env.EXE_CLOUD_SYNC_TIMEOUT_MS ?? 6e5);
+    const result = await withTimeout(cloudSync(config.cloud), syncTimeoutMs, "Cloud sync");
     console.log("");
     console.log(`  Active memories: ${result.totalMemories}  (\u2191 ${result.pushed} syncable rows pushed, \u2193 ${result.pulled} pulled)`);
     console.log(`  Behaviors:      ${result.behaviors.pushed} total  (\u2193 ${result.behaviors.pulled} pulled)`);

package/dist/bin/customer-readiness.js

@@ -99,6 +99,7 @@ test("No unscoped task queries \u2014 all task queries have session scope or PK
     const blockLower = block.toLowerCase();
     const hasScope = blockLower.includes("scope.sql") || blockLower.includes("sessionscopefilter") || blockLower.includes("strictsessionscopefilter") || blockLower.includes("session_scope") || blockLower.includes("intentionally unscoped") || blockLower.includes("audited 2026") || blockLower.includes("querytaskrows");
     const isSafe = hasScope || /where\s+id\s*=\s*\?/.test(blockLower) || // PK lookup by full UUID
+    /where\s+id\s+in\s*\(\s*(\?|\$\{)/.test(blockLower) || // PK lookup by explicit id list (bulk update by ids, e.g. closeReviewRows) — strongest scope, not a subquery
     /where\s+task_file\s*=\s*\?/.test(blockLower) || // task_file exact match
     /select\s+count\s*\(\s*\*\s*\)/.test(blockLower) || // COUNT(*) stats
     /assigned_to\s*=\s*\?.*where\s+id/.test(blockLower) || // UPDATE by PK