@askexenow/exe-os 0.9.340 → 0.9.342

package/dist/{tui-data-NPTGKT37.js → tui-data-NLFMBIQI.js}

@@ -1,44 +1,46 @@
 import {
   sessionScopeFilter
-} from "./chunk-PLRIJALF.js";
-import "./chunk-OFX5B2S7.js";
-import "./chunk-B76TSEP3.js";
-import "./chunk-RLRT2BVM.js";
+} from "./chunk-UP75Z5X7.js";
+import "./chunk-L2R3LN2P.js";
+import "./chunk-I26FWCSP.js";
+import "./chunk-EV46QTD3.js";
+import "./chunk-E23LNUWJ.js";
 import "./chunk-4JERP7NT.js";
 import "./chunk-EIKATSE4.js";
-import "./chunk-E23LNUWJ.js";
-import "./chunk-UIV2WPBT.js";
-import "./chunk-SSTLTIF3.js";
-import "./chunk-RMOBQ6A5.js";
-import "./chunk-54QCG45Y.js";
-import "./chunk-FUIIVSW6.js";
-import "./chunk-65SVQELL.js";
-import "./chunk-NGP6LSV2.js";
-import "./chunk-MW2GJJ53.js";
+import "./chunk-KGWRTRKC.js";
+import "./chunk-AD2VCHSS.js";
+import "./chunk-WOYADZF5.js";
+import "./chunk-SKGMF2SO.js";
+import "./chunk-2WAVZ5UJ.js";
+import "./chunk-HA5R6USD.js";
+import "./chunk-AM7S2TY6.js";
+import "./chunk-JGIPOUIK.js";
+import "./chunk-GWDSB25T.js";
 import "./chunk-CVYC6DUW.js";
-import "./chunk-2233TQCA.js";
-import "./chunk-HCJCW7X4.js";
+import "./chunk-JLZ4RYSD.js";
+import "./chunk-H7I47RS5.js";
 import "./chunk-OPU3NYOO.js";
-import "./chunk-7TS64TBG.js";
+import "./chunk-G4RGKBCA.js";
 import "./chunk-AFNRE2RV.js";
-import "./chunk-3NGZ4PL7.js";
+import "./chunk-X2Q5NLUL.js";
 import "./chunk-NLEW62VC.js";
 import "./chunk-HYZV25LY.js";
 import "./chunk-GJV3WDWM.js";
 import "./chunk-MP2AFCGL.js";
 import {
   getClient
-} from "./chunk-HEPR6QTL.js";
+} from "./chunk-AOHXREB7.js";
 import "./chunk-2I23RPSI.js";
-import "./chunk-ATOU6CYR.js";
+import "./chunk-OLMQ4UOF.js";
 import "./chunk-PNQDP3OA.js";
 import "./chunk-H73TUI4Y.js";
 import "./chunk-7HLWBYH7.js";
 import "./chunk-FXU7JOXK.js";
-import "./chunk-XACL67CS.js";
-import "./chunk-5Z5NATNS.js";
-import "./chunk-7Y5UDEVM.js";
-import "./chunk-SHIICYJW.js";
+import "./chunk-NGP6LSV2.js";
+import "./chunk-PQIDGXSG.js";
+import "./chunk-K7KFGDWF.js";
+import "./chunk-WZHZCDDO.js";
+import "./chunk-BYTDMAGB.js";
 import "./chunk-MLKGABMK.js";
 
 // src/lib/tui-data.ts

package/dist/{update-check-HFO4VHO4.js → update-check-3FHAWIG2.js}

@@ -2,14 +2,18 @@ import {
   channelToDistTag,
   channelToInstallTag,
   checkForUpdate,
+  checkForUpdateAsync,
   getLocalVersion,
-  getRemoteVersion
-} from "./chunk-XQNNB5GY.js";
+  getRemoteVersion,
+  getRemoteVersionAsync
+} from "./chunk-F55P3H4S.js";
 import "./chunk-MLKGABMK.js";
 export {
   channelToDistTag,
   channelToInstallTag,
   checkForUpdate,
+  checkForUpdateAsync,
   getLocalVersion,
-  getRemoteVersion
+  getRemoteVersion,
+  getRemoteVersionAsync
 };

package/dist/update-support-UVUSZG7R.js

@@ -0,0 +1,355 @@
+import {
+  queueSupportStatusUpdateSync
+} from "./chunk-25X4JD2V.js";
+import {
+  persistSupportArtifact
+} from "./chunk-TTCUG2CF.js";
+import {
+  supportIdSchema,
+  supportVersionSchema
+} from "./chunk-5H47VHB7.js";
+import "./chunk-MMRUBN3I.js";
+import "./chunk-XZXBB3TN.js";
+import "./chunk-VSRPS3J7.js";
+import "./chunk-CHCA3ZM2.js";
+import "./chunk-OTVEIJUQ.js";
+import "./chunk-6XWTQUO4.js";
+import {
+  getActiveAgent
+} from "./chunk-5ERDIOV3.js";
+import {
+  isTelemetryRedactionEnabled,
+  redactedToolResult,
+  sanitizeUpstreamId,
+  sanitizeUpstreamPayload,
+  sanitizeVersionField
+} from "./chunk-4QCFFW2H.js";
+import "./chunk-CVYC6DUW.js";
+import "./chunk-G4RGKBCA.js";
+import "./chunk-AFNRE2RV.js";
+import "./chunk-X2Q5NLUL.js";
+import "./chunk-NLEW62VC.js";
+import "./chunk-GJV3WDWM.js";
+import "./chunk-MP2AFCGL.js";
+import "./chunk-AOHXREB7.js";
+import "./chunk-2I23RPSI.js";
+import "./chunk-OLMQ4UOF.js";
+import "./chunk-PNQDP3OA.js";
+import "./chunk-H73TUI4Y.js";
+import "./chunk-7HLWBYH7.js";
+import "./chunk-FXU7JOXK.js";
+import "./chunk-QWVXN224.js";
+import {
+  loadLicense,
+  readCachedLicenseToken
+} from "./chunk-PQIDGXSG.js";
+import "./chunk-K7KFGDWF.js";
+import {
+  EXE_AI_DIR,
+  loadConfig
+} from "./chunk-WZHZCDDO.js";
+import "./chunk-BYTDMAGB.js";
+import "./chunk-MLKGABMK.js";
+
+// src/mcp/tools/update-support.ts
+import { z } from "zod";
+import { readdir, readFile } from "fs/promises";
+import path from "path";
+var BUG_STATUS = z.enum(["open", "triaged", "fixed", "closed", "wontfix"]);
+var FEATURE_STATUS = z.enum(["open", "planned", "in_progress", "shipped", "closed", "wontdo"]);
+async function findReportFile(dir, id) {
+  try {
+    const files = await readdir(dir);
+    const prefix = id.slice(0, 8);
+    const match = files.find((f) => f.includes(prefix) && f.endsWith(".md"));
+    return match ? path.join(dir, match) : null;
+  } catch {
+    return null;
+  }
+}
+function updateMarkdownField(content, key, value) {
+  const lines = content.split("\n");
+  const keyPattern = new RegExp(`^${key}:\\s*`);
+  let found = false;
+  const updated = lines.map((line) => {
+    if (keyPattern.test(line)) {
+      found = true;
+      return `${key}: ${value}`;
+    }
+    return line;
+  });
+  if (!found) {
+    let insertIdx = -1;
+    for (let i = 0; i < updated.length; i++) {
+      if (/^[a-z_]+:\s/.test(updated[i])) {
+        insertIdx = i;
+      }
+    }
+    if (insertIdx >= 0) {
+      updated.splice(insertIdx + 1, 0, `${key}: ${value}`);
+    } else {
+      const titleIdx = updated.findIndex((l) => l.startsWith("# "));
+      updated.splice(titleIdx >= 0 ? titleIdx + 2 : 0, 0, `${key}: ${value}`);
+    }
+  }
+  return updated.join("\n");
+}
+function supportAdminToken(config) {
+  return process.env.ASKEXE_SUPPORT_ADMIN_TOKEN || process.env.EXE_SUPPORT_ADMIN_TOKEN || config.support?.adminToken || config.support?.admin_token;
+}
+function normalizeSupportBase(value) {
+  let raw = value;
+  try {
+    const parsed = new URL(raw);
+    if (parsed.hostname === "askexe.com" || parsed.hostname === "cloud.askexe.com") {
+      parsed.hostname = "api.askexe.com";
+      raw = parsed.toString();
+    }
+  } catch {
+  }
+  return raw.replace(/\/+$/, "").replace(/\/(bug-reports|feature-requests)\/?$/, "");
+}
+async function sendStatusUpstream(kind, endpointPath, payload) {
+  const config = await loadConfig();
+  const routerUrl = process.env.API_ROUTER_URL?.replace(/\/+$/, "");
+  const support = config.support;
+  const adminToken = supportAdminToken(config);
+  const baseEndpoint = adminToken ? process.env.ASKEXE_SUPPORT_ADMIN_ENDPOINT || support?.adminEndpoint || support?.admin_endpoint || "https://api.askexe.com/admin/support" : support?.bugReportEndpoint || process.env.EXE_BUG_REPORT_ENDPOINT || (routerUrl ? `${routerUrl}/v1/support` : "https://api.askexe.com/v1/support");
+  const base = normalizeSupportBase(baseEndpoint);
+  const endpoint = `${base}/${endpointPath}`;
+  const token = config.support?.bugReportToken || process.env.EXE_BUG_REPORT_TOKEN;
+  const licenseKey = loadLicense() || process.env.EXE_LICENSE_KEY || config.cloud?.apiKey;
+  const licenseToken = readCachedLicenseToken();
+  const gatedPayload = isTelemetryRedactionEnabled() ? sanitizeUpstreamPayload(payload).payload : (console.error("[update-support] WARNING: EXE_TELEMETRY_REDACT=off \u2014 sending UNREDACTED payload upstream"), payload);
+  try {
+    const parsed = new URL(endpoint);
+    if (parsed.protocol !== "https:" && !["localhost", "127.0.0.1", "::1"].includes(parsed.hostname)) {
+      return "failed: insecure endpoint rejected";
+    }
+    const response = await fetch(parsed, {
+      method: "PATCH",
+      headers: {
+        "content-type": "application/json",
+        ...adminToken ? { authorization: `Bearer ${adminToken}` } : {},
+        ...!adminToken && token ? { authorization: `Bearer ${token}` } : {},
+        ...!adminToken && licenseKey ? { "x-exe-license-key": licenseKey } : {},
+        ...!adminToken && licenseToken ? { "x-exe-license-token": licenseToken } : {}
+      },
+      body: JSON.stringify(gatedPayload),
+      signal: AbortSignal.timeout(1e4)
+    });
+    if (!response.ok) {
+      const failed = `failed: HTTP ${response.status}`;
+      queueSupportStatusUpdateSync({
+        id: String(gatedPayload.id ?? ""),
+        kind,
+        endpointPath,
+        payload: gatedPayload,
+        method: "PATCH",
+        lastError: failed
+      });
+      return `${failed} (queued for retry)`;
+    }
+    return "sent";
+  } catch (err) {
+    const failed = `failed: ${err instanceof Error ? err.message : String(err)}`;
+    queueSupportStatusUpdateSync({
+      id: String(gatedPayload.id ?? ""),
+      kind,
+      endpointPath,
+      payload: gatedPayload,
+      method: "PATCH",
+      lastError: failed
+    });
+    return `${failed} (queued for retry)`;
+  }
+}
+function registerUpdateBugReport(server) {
+  server.registerTool(
+    "update_bug_report",
+    {
+      title: "Update Bug Report",
+      description: "Update the status of a previously filed bug report. Updates local markdown file, stores a memory, and POSTs the change to AskExe support. Statuses: open \u2192 triaged \u2192 fixed \u2192 closed \u2192 wontfix.",
+      inputSchema: {
+        id: supportIdSchema.describe("Bug report ID (UUID or first 8 chars)"),
+        status: BUG_STATUS.describe("New status"),
+        fix_version: supportVersionSchema.optional().describe("Version that fixes this bug (e.g. '0.9.161')"),
+        notes: z.string().optional().describe("Update notes \u2014 why this status change"),
+        send_upstream: z.boolean().default(true).describe("POST update to AskExe support endpoint")
+      }
+    },
+    // Structural sink guard (round 6): deep-redact the whole return object and any
+    // propagated error, so no echoed field (id, fix_version, notes, …) can leak.
+    async ({ id, status, fix_version, notes, send_upstream }) => redactedToolResult(async () => {
+      const { agentId, agentRole } = getActiveAgent();
+      const reportDir = path.join(EXE_AI_DIR, "bug-reports");
+      const reportPath = await findReportFile(reportDir, id);
+      let fullId = id;
+      let title = id;
+      let updatedContent = null;
+      if (reportPath) {
+        let content = await readFile(reportPath, "utf-8");
+        const idMatch = content.match(/^id:\s*([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\s*$/m);
+        if (idMatch) fullId = idMatch[1];
+        const titleMatch = content.match(/^# Bug Report — (.+)$/m);
+        if (titleMatch) title = titleMatch[1];
+        content = updateMarkdownField(content, "status", status);
+        if (fix_version) content = updateMarkdownField(content, "fix_version", fix_version);
+        content = updateMarkdownField(content, "updated_at", (/* @__PURE__ */ new Date()).toISOString());
+        if (notes) {
+          content += `
+
+## Update \u2014 ${(/* @__PURE__ */ new Date()).toISOString()}
+
+Status: ${status}
+${fix_version ? `Fix version: ${fix_version}
+` : ""}${notes}
+`;
+        }
+        updatedContent = content;
+      }
+      const memoryText = fix_version ? `Bug "${title}" marked ${status} in v ${fix_version}${notes ? `. ${notes}` : ""}` : `Bug "${title}" marked ${status}${notes ? `. ${notes}` : ""}`;
+      const persisted = await persistSupportArtifact({
+        memoryText,
+        file: reportPath && updatedContent !== null ? { path: reportPath, content: updatedContent, append: false } : void 0,
+        memory: {
+          id: `${fullId}-update-${Date.now()}`,
+          agent_id: agentId,
+          agent_role: agentRole,
+          session_id: process.env.SESSION_ID ?? "manual",
+          timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+          tool_name: "update_bug_report",
+          project_name: "support",
+          has_error: false,
+          source_path: reportPath ?? void 0,
+          source_type: "bug_report_update",
+          memory_type: "observation",
+          tier: 1,
+          importance: 7,
+          intent: "update",
+          domain: "support",
+          file_paths: null
+        }
+      });
+      const upstreamPayload = {
+        id: sanitizeUpstreamId(fullId),
+        status,
+        fixed_version: sanitizeVersionField(fix_version),
+        triage_notes: notes,
+        updated_at: (/* @__PURE__ */ new Date()).toISOString(),
+        agent_id: agentId
+      };
+      const upstreamStatus = send_upstream ? await sendStatusUpstream("bug", `bug-reports/${encodeURIComponent(sanitizeUpstreamId(fullId))}`, upstreamPayload) : "skipped";
+      return {
+        content: [
+          {
+            type: "text",
+            text: `Bug report updated.
+ID: ${fullId}
+New status: ${status}
+${fix_version ? `Fix version: ${fix_version}
+` : ""}Local file: ${reportPath ?? "not found"}
+Memory stored: ${persisted.redactedMemoryText}
+Upstream status: ${upstreamStatus}`
+          }
+        ]
+      };
+    })
+  );
+}
+function registerUpdateFeatureRequest(server) {
+  server.registerTool(
+    "update_feature_request",
+    {
+      title: "Update Feature Request",
+      description: "Update the status of a previously filed feature request. Updates local markdown file, stores a memory, and POSTs the change to AskExe support. Statuses: open \u2192 planned \u2192 in_progress \u2192 shipped \u2192 closed \u2192 wontdo.",
+      inputSchema: {
+        id: supportIdSchema.describe("Feature request ID (UUID or first 8 chars)"),
+        status: FEATURE_STATUS.describe("New status"),
+        shipped_version: supportVersionSchema.optional().describe("Version that ships this feature (e.g. '0.9.170')"),
+        notes: z.string().optional().describe("Update notes \u2014 why this status change"),
+        send_upstream: z.boolean().default(true).describe("POST update to AskExe support endpoint")
+      }
+    },
+    // Structural sink guard (round 6): deep-redact the whole return object + errors.
+    async ({ id, status, shipped_version, notes, send_upstream }) => redactedToolResult(async () => {
+      const { agentId, agentRole } = getActiveAgent();
+      const reportDir = path.join(EXE_AI_DIR, "feature-requests");
+      const reportPath = await findReportFile(reportDir, id);
+      let fullId = id;
+      let title = id;
+      let updatedContent = null;
+      if (reportPath) {
+        let content = await readFile(reportPath, "utf-8");
+        const idMatch = content.match(/^id:\s*([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\s*$/m);
+        if (idMatch) fullId = idMatch[1];
+        const titleMatch = content.match(/^# Feature Request — (.+)$/m);
+        if (titleMatch) title = titleMatch[1];
+        content = updateMarkdownField(content, "status", status);
+        if (shipped_version) content = updateMarkdownField(content, "shipped_version", shipped_version);
+        content = updateMarkdownField(content, "updated_at", (/* @__PURE__ */ new Date()).toISOString());
+        if (notes) {
+          content += `
+
+## Update \u2014 ${(/* @__PURE__ */ new Date()).toISOString()}
+
+Status: ${status}
+${shipped_version ? `Shipped version: ${shipped_version}
+` : ""}${notes}
+`;
+        }
+        updatedContent = content;
+      }
+      const memoryText = shipped_version ? `Feature "${title}" marked ${status} in v ${shipped_version}${notes ? `. ${notes}` : ""}` : `Feature "${title}" marked ${status}${notes ? `. ${notes}` : ""}`;
+      const persisted = await persistSupportArtifact({
+        memoryText,
+        file: reportPath && updatedContent !== null ? { path: reportPath, content: updatedContent, append: false } : void 0,
+        memory: {
+          id: `${fullId}-update-${Date.now()}`,
+          agent_id: agentId,
+          agent_role: agentRole,
+          session_id: process.env.SESSION_ID ?? "manual",
+          timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+          tool_name: "update_feature_request",
+          project_name: "support",
+          has_error: false,
+          source_path: reportPath ?? void 0,
+          source_type: "feature_request_update",
+          memory_type: "observation",
+          tier: 1,
+          importance: 7,
+          intent: "update",
+          domain: "support",
+          file_paths: null
+        }
+      });
+      const upstreamPayload = {
+        id: sanitizeUpstreamId(fullId),
+        status,
+        shipped_version: sanitizeVersionField(shipped_version),
+        response_notes: notes,
+        updated_at: (/* @__PURE__ */ new Date()).toISOString(),
+        agent_id: agentId
+      };
+      const upstreamStatus = send_upstream ? await sendStatusUpstream("feature", `feature-requests/${encodeURIComponent(sanitizeUpstreamId(fullId))}`, upstreamPayload) : "skipped";
+      return {
+        content: [
+          {
+            type: "text",
+            text: `Feature request updated.
+ID: ${fullId}
+New status: ${status}
+${shipped_version ? `Shipped version: ${shipped_version}
+` : ""}Local file: ${reportPath ?? "not found"}
+Memory stored: ${persisted.redactedMemoryText}
+Upstream status: ${upstreamStatus}`
+          }
+        ]
+      };
+    })
+  );
+}
+export {
+  registerUpdateBugReport,
+  registerUpdateFeatureRequest
+};

package/dist/{whatsapp-accounts-BWRZUY23.js → whatsapp-accounts-BFIOXYW5.js}

@@ -4,7 +4,7 @@ import {
   getAccountByPhoneNumberId,
   getDefaultAccount,
   loadAccounts
-} from "./chunk-YGAAZN3E.js";
+} from "./chunk-GL57PO3K.js";
 import "./chunk-MLKGABMK.js";
 export {
   _resetCache,

package/dist/{whatsapp-config-GOSELKTE.js → whatsapp-config-FAX6EA5K.js}

@@ -1,17 +1,32 @@
 import {
   _resetCache,
   loadAccounts
-} from "./chunk-YGAAZN3E.js";
+} from "./chunk-GL57PO3K.js";
 import "./chunk-MLKGABMK.js";
 
 // src/gateway/whatsapp-config.ts
-import { existsSync, readFileSync, writeFileSync, mkdirSync } from "fs";
+import { chmodSync, existsSync, readFileSync, writeFileSync, mkdirSync } from "fs";
 import { join } from "path";
 import { homedir } from "os";
 var GRAPH_API_VERSION = "v21.0";
 var GRAPH_API_BASE = `https://graph.facebook.com/${GRAPH_API_VERSION}`;
 var ACCOUNTS_PATH = join(homedir(), ".exe-os", "whatsapp-accounts.json");
 var GATEWAY_CONFIG_PATH = join(homedir(), ".exe-os", "gateway.json");
+function ensurePrivateConfigDir() {
+  const dir = join(homedir(), ".exe-os");
+  mkdirSync(dir, { recursive: true, mode: 448 });
+  try {
+    chmodSync(dir, 448);
+  } catch {
+  }
+}
+function writePrivateJson(filePath, value) {
+  writeFileSync(filePath, JSON.stringify(value, null, 2), { encoding: "utf8", mode: 384 });
+  try {
+    chmodSync(filePath, 384);
+  } catch {
+  }
+}
 async function validateCredentials(phoneNumberId, accessToken) {
   try {
     const url = `${GRAPH_API_BASE}/${phoneNumberId}?fields=display_phone_number,verified_name`;
@@ -58,8 +73,7 @@ async function configureWhatsApp(config) {
     businessAccountId: config.businessAccountId ?? "",
     verifyToken: config.verifyToken
   };
-  const dir = join(homedir(), ".exe-os");
-  mkdirSync(dir, { recursive: true });
+  ensurePrivateConfigDir();
   let accounts = [];
   try {
     if (existsSync(ACCOUNTS_PATH)) {
@@ -75,7 +89,7 @@ async function configureWhatsApp(config) {
   } else {
     accounts.push(account);
   }
-  writeFileSync(ACCOUNTS_PATH, JSON.stringify(accounts, null, 2), "utf8");
+  writePrivateJson(ACCOUNTS_PATH, accounts);
   let gatewayConfig = {};
   try {
     if (existsSync(GATEWAY_CONFIG_PATH)) {
@@ -87,7 +101,7 @@ async function configureWhatsApp(config) {
   if (config.webhookUrl) {
     gatewayConfig.whatsappWebhookUrl = config.webhookUrl;
   }
-  writeFileSync(GATEWAY_CONFIG_PATH, JSON.stringify(gatewayConfig, null, 2), "utf8");
+  writePrivateJson(GATEWAY_CONFIG_PATH, gatewayConfig);
   _resetCache();
   return {
     valid: true,
@@ -97,13 +111,6 @@ async function configureWhatsApp(config) {
 }
 function getWhatsAppStatus() {
   _resetCache();
-  if (!existsSync(ACCOUNTS_PATH)) {
-    return {
-      connected: false,
-      accounts: 0,
-      error: "No WhatsApp accounts configured. Use gateway(action='configure_whatsapp') to set up."
-    };
-  }
   const accounts = loadAccounts();
   if (accounts.length === 0) {
     return {

package/dist/{worker-gate-MXUQUG4M.js → worker-gate-3KUBAU32.js}

@@ -6,9 +6,9 @@ import {
   releaseBackfillLock,
   tryAcquireBackfillLock,
   tryAcquireWorkerSlot
-} from "./chunk-N5I7RL3I.js";
-import "./chunk-7Y5UDEVM.js";
-import "./chunk-SHIICYJW.js";
+} from "./chunk-VPZHJCKW.js";
+import "./chunk-WZHZCDDO.js";
+import "./chunk-BYTDMAGB.js";
 import "./chunk-MLKGABMK.js";
 export {
   MAX_CONCURRENT_WORKERS,

package/dist/{workflow-engine-EWCOLD47.js → workflow-engine-YITHXZR5.js}

@@ -10,8 +10,8 @@ import {
   persistWorkflows,
   runWorkflow,
   startWorkflow
-} from "./chunk-QXSBB26A.js";
-import "./chunk-KTPG4XKI.js";
+} from "./chunk-AJYCFKJR.js";
+import "./chunk-KP3U5QGJ.js";
 import "./chunk-MLKGABMK.js";
 export {
   advanceWorkflow,

package/dist/{working-memory-PY4AG577.js → working-memory-NUVB5SFV.js}

@@ -1,6 +1,6 @@
 import {
   atomicWriteSync
-} from "./chunk-SHIICYJW.js";
+} from "./chunk-BYTDMAGB.js";
 import "./chunk-MLKGABMK.js";
 
 // src/lib/working-memory.ts

package/dist/worktree-LL62PLQB.js

@@ -0,0 +1,47 @@
+import {
+  classifyGitFailure,
+  cleanupWorktree,
+  ensureWorktree,
+  ensureWorktreeAsync,
+  getGitRoot,
+  getGitRootAsync,
+  getMainRepoRoot,
+  getMainRepoRootAsync,
+  isInsideGitRepo,
+  isWorktreeDirty,
+  isWorktreeDirtyAsync,
+  parseInstanceLabel,
+  resolveGitWithRetryAsync,
+  resolveGitWithRetrySync,
+  worktreeBranch,
+  worktreePath
+} from "./chunk-I26FWCSP.js";
+import "./chunk-2WAVZ5UJ.js";
+import "./chunk-AOHXREB7.js";
+import "./chunk-2I23RPSI.js";
+import "./chunk-OLMQ4UOF.js";
+import "./chunk-PNQDP3OA.js";
+import "./chunk-H73TUI4Y.js";
+import "./chunk-7HLWBYH7.js";
+import "./chunk-FXU7JOXK.js";
+import "./chunk-WZHZCDDO.js";
+import "./chunk-BYTDMAGB.js";
+import "./chunk-MLKGABMK.js";
+export {
+  classifyGitFailure,
+  cleanupWorktree,
+  ensureWorktree,
+  ensureWorktreeAsync,
+  getGitRoot,
+  getGitRootAsync,
+  getMainRepoRoot,
+  getMainRepoRootAsync,
+  isInsideGitRepo,
+  isWorktreeDirty,
+  isWorktreeDirtyAsync,
+  parseInstanceLabel,
+  resolveGitWithRetryAsync,
+  resolveGitWithRetrySync,
+  worktreeBranch,
+  worktreePath
+};

package/dist/{worktree-sweep-ZAG3V24E.js → worktree-sweep-WTK3MTKH.js}

@@ -2,18 +2,18 @@ import {
   cleanupAgentWorktree,
   discoverRepoPaths,
   sweepWorktrees
-} from "./chunk-K5WFKEXQ.js";
-import "./chunk-B76TSEP3.js";
-import "./chunk-FUIIVSW6.js";
-import "./chunk-HEPR6QTL.js";
+} from "./chunk-2ZYO73KO.js";
+import "./chunk-I26FWCSP.js";
+import "./chunk-2WAVZ5UJ.js";
+import "./chunk-AOHXREB7.js";
 import "./chunk-2I23RPSI.js";
-import "./chunk-ATOU6CYR.js";
+import "./chunk-OLMQ4UOF.js";
 import "./chunk-PNQDP3OA.js";
 import "./chunk-H73TUI4Y.js";
 import "./chunk-7HLWBYH7.js";
 import "./chunk-FXU7JOXK.js";
-import "./chunk-7Y5UDEVM.js";
-import "./chunk-SHIICYJW.js";
+import "./chunk-WZHZCDDO.js";
+import "./chunk-BYTDMAGB.js";
 import "./chunk-MLKGABMK.js";
 export {
   cleanupAgentWorktree,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.340",
+  "version": "0.9.342",
   "description": "AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",
@@ -40,6 +40,7 @@
     "exe-pending-reviews": "./dist/bin/exe-pending-reviews.js",
     "exe-os-orchestration-metrics": "./dist/bin/orchestration-metrics.js",
     "exe-search-quality": "./dist/bin/exe-search-quality.js",
+    "exe-memory-reads": "./dist/bin/exe-memory-reads.js",
     "exe-healthcheck": "./dist/bin/exe-healthcheck.js",
     "exe-doctor": "./dist/bin/exe-doctor.js",
     "exe-timers": "./dist/bin/exe-timers.js",
@@ -115,7 +116,7 @@
     "deploy": "node dist/bin/pre-build-guard.js && npm run build && (node dist/bin/prune-orphan-chunks.js || true) && npm install -g . && node dist/bin/install.js --global && echo '[exe-os] Deploy complete. Run /mcp in active sessions to reconnect.'",
     "postinstall": "node dist/bin/install.js --commands-only || true",
     "prepublishOnly": "npm run typecheck && npm run build && node dist/bin/prune-orphan-chunks.js --force && npm run guard:esm-require && npm run check:schema-version && node dist/bin/customer-readiness.js && node dist/bin/pre-publish.js",
-    "test:publish": "npx vitest run --maxWorkers=4 --exclude 'tests/tui/**' --exclude 'tests/lib/tmux-routing.test.ts' --exclude 'tests/lib/intercom-routing.test.ts' --exclude 'tests/gateway/**' --exclude 'tests/mcp/ingest-document.test.ts' --exclude 'tests/lib/hybrid-search.test.ts' --exclude 'tests/lib/worker-gate.test.ts' --exclude 'tests/daemon-perf-stress.test.ts' --exclude 'tests/lib/gateway-client.test.ts' --exclude 'tests/lib/ws-client.test.ts' --exclude 'tests/lib/ws-auth.test.ts' --exclude 'tests/integration/clean-stack-projection.test.ts' --exclude 'tests/lib/stack-update.test.ts' --exclude 'tests/device-id-split-brain.test.ts' --exclude 'tests/orchestration/dispatch-chain.test.ts' --exclude 'tests/orchestration/e2e-flow.test.ts' --exclude 'tests/lib/reaper-deps-async.test.ts' --exclude 'tests/lib/find-free-instance.test.ts' --exclude 'tests/lib/db-backup-recovery.test.ts' && echo '::warning::clean-stack-projection and stack-update quarantined (need Docker + live DB; environmental, fail in CI runner — container unhealthy / DB not initialized); ws-client/ws-auth quarantined (30-120s timeouts flaky on Node 20 CI runner — passes locally). Quarantined to match build-and-test (required gate): device-id-split-brain/dispatch-chain/e2e-flow/reaper-deps-async (timing-sensitive, flaky under parallel load — bug dfb25bf1), find-free-instance (parallelism race) and db-backup-recovery (load-sensitive, feature 57a1d161) — all pass reliably in isolation (maxWorkers=1); still covered by build-and-test/extended-tests in CI. See cicd-audit-2026-06-18.md.' && npx vitest run --maxWorkers=1 tests/daemon-perf-stress.test.ts tests/lib/gateway-client.test.ts",
+    "test:publish": "npx vitest run --maxWorkers=4 --exclude 'tests/tui/**' --exclude 'tests/lib/tmux-routing.test.ts' --exclude 'tests/lib/intercom-routing.test.ts' --exclude 'tests/gateway/**' --exclude 'tests/mcp/ingest-document.test.ts' --exclude 'tests/lib/hybrid-search.test.ts' --exclude 'tests/lib/worker-gate.test.ts' --exclude 'tests/daemon-perf-stress.test.ts' --exclude 'tests/lib/gateway-client.test.ts' --exclude 'tests/lib/ws-client.test.ts' --exclude 'tests/lib/ws-auth.test.ts' --exclude 'tests/integration/clean-stack-projection.test.ts' --exclude 'tests/orchestration/dispatch-chain.test.ts' --exclude 'tests/orchestration/e2e-flow.test.ts' && echo '::warning::clean-stack-projection and stack-update quarantined (need Docker + live DB; environmental, fail in CI runner — container unhealthy / DB not initialized); ws-client/ws-auth quarantined (30-120s timeouts flaky on Node 20 CI runner — passes locally). Quarantined to match build-and-test (required gate): dispatch-chain/e2e-flow (timing-sensitive, flaky under parallel load — bug dfb25bf1). device-id-split-brain/reaper-deps-async/find-free-instance/db-backup-recovery de-flaked and promoted to the required gate (chore/deflake-required-ci). See cicd-audit-2026-06-18.md.' && npx vitest run --maxWorkers=1 tests/daemon-perf-stress.test.ts tests/lib/gateway-client.test.ts",
     "benchmark:longmemeval": "npx tsx tests/benchmarks/longmemeval.ts",
     "guard:esm-require": "node scripts/check-no-runtime-require.mjs",
     "check:schema-version": "node scripts/check-schema-version.mjs",