@askexenow/exe-os 0.9.342 → 0.9.343

package/dist/{chunk-PDWS3E22.js → chunk-2F7WGH5K.js}

@@ -1,12 +1,9 @@
-import {
-  mcpHttpPort
-} from "./chunk-GG5NDQNN.js";
 import {
   checkCpuStealSync
 } from "./chunk-SSC7EKY2.js";
 import {
   inventoryLocalSecretResidue
-} from "./chunk-VRAQTFD6.js";
+} from "./chunk-SJN5ZEDI.js";
 import {
   CC_NATIVE_ONLY_CUTOFF,
   compareSemver,
@@ -15,10 +12,13 @@ import {
 import {
   readMcpHttpEvents,
   summarizeMcpTransport
-} from "./chunk-RAXVPNMR.js";
+} from "./chunk-ZUBUP66T.js";
+import {
+  mcpHttpPort
+} from "./chunk-YYCKKORY.js";
 import {
   EXE_AI_DIR
-} from "./chunk-WZHZCDDO.js";
+} from "./chunk-OL4JFQ2T.js";
 
 // src/bin/exe-healthcheck.ts
 import { existsSync, readFileSync, readdirSync } from "fs";

package/dist/{chunk-JLZ4RYSD.js → chunk-2VZMLKNS.js}

@@ -1,10 +1,10 @@
 import {
   enqueueMemory
-} from "./chunk-H7I47RS5.js";
+} from "./chunk-VIIHBYIP.js";
 import {
   isClientConnected,
   sendDaemonRequest
-} from "./chunk-G4RGKBCA.js";
+} from "./chunk-R3QDXB55.js";
 
 // src/lib/memory-queue-client.ts
 async function writeMemoryViaDaemon(entry) {

package/dist/{chunk-CNVBKDEY.js → chunk-2YPCD2UH.js}

@@ -1,37 +1,37 @@
+import {
+  isCrdtSyncEnabled
+} from "./chunk-735SUAT4.js";
 import {
   activeRecipientPubKeys,
   isGrantsMacPrimed,
   primeGrantsMacKey,
   warnActiveMonitoringOnce
-} from "./chunk-NXUSDL37.js";
+} from "./chunk-IRUWKANS.js";
 import {
-  isCrdtSyncEnabled
-} from "./chunk-NBZL5CGA.js";
+  retryOnDaemonTransportError
+} from "./chunk-CBD64QQG.js";
 import {
   GHOST_BEHAVIOR_SQL,
   isGhostBehaviorRow
-} from "./chunk-KW2SD2FL.js";
+} from "./chunk-KRRZNASS.js";
 import {
   decryptSyncBlob,
   encryptSyncBlob,
   initSyncCrypto,
   isSyncCryptoInitialized
 } from "./chunk-S3THSOWV.js";
-import {
-  retryOnDaemonTransportError
-} from "./chunk-5TY4FPH6.js";
 import {
   getClient,
   loadEmployees,
   registerBinSymlinks,
   saveEmployees
-} from "./chunk-AOHXREB7.js";
+} from "./chunk-GD7FA6IP.js";
 import {
   loadDeviceId
-} from "./chunk-PQIDGXSG.js";
+} from "./chunk-4E3SZEEI.js";
 import {
   EXE_AI_DIR
-} from "./chunk-WZHZCDDO.js";
+} from "./chunk-OL4JFQ2T.js";
 import {
   atomicWriteJsonSync,
   atomicWriteSync,
@@ -721,7 +721,7 @@ async function cloudSync(config, options) {
     let pulled = 0;
     if (pullResult.records.length > 0) {
       if (shouldUseCrdtMergeForCloudSync()) {
-        const { initCrdtDoc, importExistingMemories, readAllMemories } = await import("./crdt-sync-4PFGPZXV.js");
+        const { initCrdtDoc, importExistingMemories, readAllMemories } = await import("./crdt-sync-EMV5EZ4J.js");
         initCrdtDoc();
         importExistingMemories(
           pullResult.records.map((rec) => ({
@@ -1117,7 +1117,7 @@ async function cloudSync(config, options) {
     }
     const totalMemories = await countRows("SELECT COUNT(*) as cnt FROM memories WHERE status = 'active' OR status IS NULL");
     try {
-      const { getLatestBackup } = await import("./db-backup-W2QFSYQC.js");
+      const { getLatestBackup } = await import("./lib/db-backup.js");
       const latestBackup = getLatestBackup();
       if (latestBackup) {
         const backupSize = statSync(latestBackup).size;

package/dist/{chunk-HAF2DJYV.js → chunk-34RULPS2.js}

@@ -1,10 +1,10 @@
 import {
   sessionScopeFilter
-} from "./chunk-UP75Z5X7.js";
+} from "./chunk-HDL7CXQ4.js";
 import {
   getClient,
   getIdentity
-} from "./chunk-AOHXREB7.js";
+} from "./chunk-GD7FA6IP.js";
 import {
   getEmotionalBaseline
 } from "./chunk-PNQDP3OA.js";
@@ -643,7 +643,7 @@ var DreamingEngine = class {
     }
     let overdueProspective = [];
     try {
-      const { getOverdueProspective, completeProspective } = await import("./prospective-memory-6D2ASWM3.js");
+      const { getOverdueProspective, completeProspective } = await import("./prospective-memory-Q7ZUCAS4.js");
       const overdue = await getOverdueProspective(agentId);
       overdueProspective = overdue.map((o) => ({
         id: o.id,

package/dist/{chunk-JPUZPAAF.js → chunk-3MLSM77R.js}

@@ -1,9 +1,9 @@
 import {
   fastDbInit
-} from "./chunk-PWUFMX75.js";
+} from "./chunk-UU4FHMON.js";
 import {
   sessionScopeFilter
-} from "./chunk-UP75Z5X7.js";
+} from "./chunk-HDL7CXQ4.js";
 import {
   formatStatusAll,
   formatStatusDeep,
@@ -14,7 +14,7 @@ import {
   getClient,
   isCoordinatorRole,
   loadEmployees
-} from "./chunk-AOHXREB7.js";
+} from "./chunk-GD7FA6IP.js";
 import {
   isMainModule
 } from "./chunk-6Y4B3QF6.js";

package/dist/{chunk-JTBIS4R5.js → chunk-3OO34BOT.js}

@@ -1,6 +1,6 @@
 import {
   loadLicense
-} from "./chunk-PQIDGXSG.js";
+} from "./chunk-4E3SZEEI.js";
 
 // src/lib/stack-update.ts
 import { execFileSync, spawnSync } from "child_process";

package/dist/{chunk-L4A5DL6Z.js → chunk-3OR54BBE.js}

@@ -1,13 +1,13 @@
 import {
   isExeSession
-} from "./chunk-UP75Z5X7.js";
+} from "./chunk-HDL7CXQ4.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-2WAVZ5UJ.js";
+} from "./chunk-QTKDGDR5.js";
 import {
   getClient,
   isCoordinatorName
-} from "./chunk-AOHXREB7.js";
+} from "./chunk-GD7FA6IP.js";
 import {
   isDaemonAlive
 } from "./chunk-7HLWBYH7.js";

package/dist/{chunk-USSB56WK.js → chunk-3PFP7GV2.js}

@@ -1,6 +1,6 @@
 import {
   writeMemoryViaDaemon
-} from "./chunk-JLZ4RYSD.js";
+} from "./chunk-2VZMLKNS.js";
 
 // src/lib/auto-checkpoint.ts
 var FILE_RE = /(?:^|\s)([\w./-]+\.(?:ts|tsx|js|jsx|json|md|yml|yaml|sql|go|py|css|scss|html|sh))(?:\b|$)/g;

package/dist/{chunk-TLT7NZCW.js → chunk-4AA2HRIM.js}

@@ -1,15 +1,15 @@
 import {
   PLATFORM_PROCEDURE_TITLES
-} from "./chunk-EQHQF5IM.js";
+} from "./chunk-6L6SXVTP.js";
 import {
   isGhostBehaviorRow
-} from "./chunk-KW2SD2FL.js";
+} from "./chunk-KRRZNASS.js";
 import {
   getClient,
   getIdentity,
   listIdentities,
   updateIdentity
-} from "./chunk-AOHXREB7.js";
+} from "./chunk-GD7FA6IP.js";
 import {
   atomicWriteJsonSync
 } from "./chunk-BYTDMAGB.js";

package/dist/{chunk-PQIDGXSG.js → chunk-4E3SZEEI.js}

@@ -1,9 +1,9 @@
 import {
   getDeviceInfo
-} from "./chunk-K7KFGDWF.js";
+} from "./chunk-NG2ABIDX.js";
 import {
   EXE_AI_DIR
-} from "./chunk-WZHZCDDO.js";
+} from "./chunk-OL4JFQ2T.js";
 
 // src/lib/license.ts
 import { chmodSync, readFileSync, writeFileSync, existsSync, mkdirSync, statSync, renameSync } from "fs";

package/dist/chunk-4EI5AHHR.js

@@ -0,0 +1,37 @@
+// src/lib/mcp-stale-flag.ts
+import { existsSync, mkdirSync, unlinkSync, writeFileSync } from "fs";
+import path from "path";
+import os from "os";
+function flagPath(agentId) {
+  const safeAgentId = agentId.replace(/[^a-zA-Z0-9._-]/g, "_");
+  return path.join(os.homedir(), ".exe-os", "session-cache", `mcp-stale-${safeAgentId}.flag`);
+}
+function markMcpStale(agentId) {
+  try {
+    const file = flagPath(agentId);
+    mkdirSync(path.dirname(file), { recursive: true });
+    writeFileSync(file, `${Date.now()}
+`, "utf8");
+  } catch {
+  }
+}
+function clearMcpStale(agentId) {
+  try {
+    const file = flagPath(agentId);
+    if (existsSync(file)) unlinkSync(file);
+  } catch {
+  }
+}
+function isMcpStale(agentId) {
+  try {
+    return existsSync(flagPath(agentId));
+  } catch {
+    return false;
+  }
+}
+
+export {
+  markMcpStale,
+  clearMcpStale,
+  isMcpStale
+};

package/dist/{chunk-6XWTQUO4.js → chunk-4MLSFZLY.js}

@@ -72,6 +72,23 @@ function hashMemoryContent(text) {
 function scopedDedupArgs(input) {
   return [input.contentHash, input.agentId, input.projectName, input.memoryType];
 }
+function scopedDedupSql(excludeId = false) {
+  let sql = `SELECT id FROM memories
+             WHERE content_hash = ?
+               -- Bug d23040c2: force SQLite away from idx_memories_agent_ts.
+               -- The old agent_id predicate plus ORDER BY timestamp DESC made
+               -- non-duplicate writes walk every row for the agent
+               -- (idx_memories_agent_ts; 1477ms on 60K rows). Unary plus keeps
+               -- the predicate semantics identical while disqualifying the
+               -- agent indexes, so the planner uses idx_memories_content_hash
+               -- (content_hash, agent_id); measured 0.03ms.
+               AND +agent_id = ?
+               AND project_name = ?
+               AND COALESCE(memory_type, 'raw') = ?
+               AND COALESCE(status, 'active') != 'deleted'`;
+  if (excludeId) sql += " AND id != ?";
+  return `${sql} ORDER BY timestamp DESC LIMIT 1`;
+}
 function governMemoryRecord(record) {
   const redacted = redactSecrets(record.raw_text);
   const normalized = normalizeMemoryText(redacted.text);
@@ -115,17 +132,10 @@ async function findScopedDuplicate(input) {
   const { getClient } = await import("./lib/database.js");
   const client = getClient();
   const args = scopedDedupArgs(input);
-  let sql = `SELECT id FROM memories
-             WHERE content_hash = ?
-               AND agent_id = ?
-               AND project_name = ?
-               AND COALESCE(memory_type, 'raw') = ?
-               AND COALESCE(status, 'active') != 'deleted'`;
   if (input.excludeId) {
-    sql += " AND id != ?";
     args.push(input.excludeId);
   }
-  sql += " ORDER BY timestamp DESC LIMIT 1";
+  const sql = scopedDedupSql(Boolean(input.excludeId));
   const result = await client.execute({ sql, args });
   return result.rows[0]?.id ? String(result.rows[0].id) : null;
 }
@@ -206,5 +216,6 @@ function schedulePostWriteMemoryHygiene(memoryIds) {
 export {
   governMemoryRecord,
   findScopedDuplicate,
+  runPostWriteMemoryHygiene,
   schedulePostWriteMemoryHygiene
 };

package/dist/{chunk-AJYCFKJR.js → chunk-4UIYLTA3.js}

@@ -1,7 +1,7 @@
 import {
   executeAction,
   substituteTemplate
-} from "./chunk-KP3U5QGJ.js";
+} from "./chunk-L5GFREAH.js";
 
 // src/automation/workflow-engine.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-I26FWCSP.js → chunk-4VUAG6DN.js}

@@ -1,6 +1,6 @@
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-2WAVZ5UJ.js";
+} from "./chunk-QTKDGDR5.js";
 
 // src/lib/worktree.ts
 import { execFile, execSync } from "child_process";

package/dist/{chunk-V3EEVY4L.js → chunk-54O2FWRM.js}

@@ -1,6 +1,6 @@
 import {
   getClient
-} from "./chunk-AOHXREB7.js";
+} from "./chunk-GD7FA6IP.js";
 
 // src/lib/token-budget.ts
 var WARN_THRESHOLD = 0.8;

package/dist/{chunk-TTCUG2CF.js → chunk-5DSVWSL5.js}

@@ -1,10 +1,10 @@
 import {
   embed
-} from "./chunk-XZXBB3TN.js";
+} from "./chunk-62MYX7G4.js";
 import {
   flushBatch,
   writeMemory
-} from "./chunk-VSRPS3J7.js";
+} from "./chunk-ZYLKX3KB.js";
 import {
   redactSecrets
 } from "./chunk-4QCFFW2H.js";

package/dist/{chunk-4J4PMPXZ.js → chunk-5ERB3AWT.js}

@@ -1,6 +1,6 @@
 import {
   listReminders
-} from "./chunk-UUEKJDK6.js";
+} from "./chunk-IPB5QM4S.js";
 
 // src/mcp/tools/list-reminders.ts
 import { z } from "zod";

package/dist/{chunk-SQKXKV2Y.js → chunk-5GDTZOVS.js}

@@ -3,11 +3,11 @@ import {
 } from "./chunk-75H4R62K.js";
 import {
   initStore
-} from "./chunk-VSRPS3J7.js";
+} from "./chunk-ZYLKX3KB.js";
 import {
   getClient,
   isInitialized
-} from "./chunk-AOHXREB7.js";
+} from "./chunk-GD7FA6IP.js";
 
 // src/lib/schedules.ts
 import crypto from "crypto";

package/dist/{chunk-BUCXNV32.js → chunk-5HQHHQUR.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-WCGNCH3Q.js";
 import {
   registerAllTools
-} from "./chunk-YTCFACP4.js";
+} from "./chunk-25ORSHR7.js";
 
 // src/mcp/mcp-surface-hash.ts
 function computeMcpSurfaceHash() {

package/dist/chunk-5MLYU6I2.js

@@ -0,0 +1,76 @@
+// src/lib/daemon-ready.ts
+async function defaultPing() {
+  const { pingDaemon } = await import("./lib/exe-daemon-client.js");
+  return pingDaemon();
+}
+var sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+async function defaultHealthProbe() {
+  try {
+    const { resolveMcpHttpPort } = await import("./mcp-port-config-PA3W3BJK.js");
+    const res = await fetch(`http://127.0.0.1:${resolveMcpHttpPort()}/health`, {
+      signal: AbortSignal.timeout(500)
+    });
+    if (res.status === 503) return "starting";
+    if (!res.ok) return "dead";
+    try {
+      const body = await res.json();
+      return body.status === "starting" ? "starting" : "ready";
+    } catch {
+      return "ready";
+    }
+  } catch {
+    return "dead";
+  }
+}
+async function waitForDaemonReady(attempts = 3, delayMs = 600, ping = defaultPing, options = {}) {
+  const healthProbe = options.healthProbe ?? defaultHealthProbe;
+  const startingBudgetMs = options.startingBudgetMs ?? 7e3;
+  const startingPollMs = options.startingPollMs ?? 500;
+  let sawStarting = false;
+  for (let i = 0; i < attempts; i++) {
+    try {
+      const health = await ping();
+      if (health) return true;
+    } catch {
+    }
+    try {
+      if (await healthProbe() === "starting") sawStarting = true;
+    } catch {
+    }
+    if (i < attempts - 1) {
+      await sleep(delayMs);
+    }
+  }
+  if (!sawStarting) return false;
+  const deadline = Date.now() + startingBudgetMs;
+  while (Date.now() < deadline) {
+    try {
+      const health = await ping();
+      if (health) return true;
+    } catch {
+    }
+    let healthState = "dead";
+    try {
+      healthState = await healthProbe();
+    } catch {
+      healthState = "dead";
+    }
+    if (healthState === "ready") {
+      try {
+        const health = await ping();
+        if (health) return true;
+      } catch {
+      }
+      return false;
+    }
+    if (healthState === "dead") return false;
+    const remaining = deadline - Date.now();
+    if (remaining <= 0) break;
+    await sleep(Math.min(startingPollMs, remaining));
+  }
+  return false;
+}
+
+export {
+  waitForDaemonReady
+};

package/dist/{chunk-X2Q5NLUL.js → chunk-5VV2YMMB.js}

@@ -1,6 +1,6 @@
 import {
   EXE_AI_DIR
-} from "./chunk-WZHZCDDO.js";
+} from "./chunk-OL4JFQ2T.js";
 import {
   enforcePrivateFileSync,
   ensurePrivateDirSync

package/dist/{chunk-XZXBB3TN.js → chunk-62MYX7G4.js}

@@ -2,14 +2,14 @@ import {
   connectEmbedDaemon,
   disconnectClient,
   embedViaClient
-} from "./chunk-G4RGKBCA.js";
+} from "./chunk-R3QDXB55.js";
 import {
   EMBEDDING_DIM
 } from "./chunk-FXU7JOXK.js";
 import {
   MODELS_DIR,
   loadConfigSync
-} from "./chunk-WZHZCDDO.js";
+} from "./chunk-OL4JFQ2T.js";
 
 // src/lib/embedder.ts
 var MAX_EMBED_CHARS = 24e3;

package/dist/{chunk-X33NYQYJ.js → chunk-6CYVBLZW.js}

@@ -1,9 +1,9 @@
 import {
   listBehaviors
-} from "./chunk-KW2SD2FL.js";
+} from "./chunk-KRRZNASS.js";
 import {
   loadConfigSync
-} from "./chunk-WZHZCDDO.js";
+} from "./chunk-OL4JFQ2T.js";
 
 // src/lib/behaviors-export.ts
 import os from "os";

package/dist/{chunk-GJ26DULE.js → chunk-6IK2ME5X.js}

@@ -1,10 +1,10 @@
 import {
   PLATFORM_PROCEDURES,
   PLATFORM_PROCEDURE_TITLES
-} from "./chunk-EQHQF5IM.js";
+} from "./chunk-6L6SXVTP.js";
 import {
   getClient
-} from "./chunk-AOHXREB7.js";
+} from "./chunk-GD7FA6IP.js";
 
 // src/lib/global-procedures.ts
 import { randomUUID } from "crypto";

package/dist/{chunk-4ZCD2UWW.js → chunk-6JMRRJD6.js}

@@ -1,6 +1,6 @@
 import {
   routeTask
-} from "./chunk-G5T6KDG4.js";
+} from "./chunk-SA7GZU3U.js";
 import {
   createTaskCore,
   employeeSessionName,
@@ -9,11 +9,11 @@ import {
   isEmployeeAlive,
   sessionScopeFilter,
   updateTaskStatus
-} from "./chunk-UP75Z5X7.js";
+} from "./chunk-HDL7CXQ4.js";
 import {
   DEFAULT_COORDINATOR_TEMPLATE_NAME,
   getCoordinatorName
-} from "./chunk-AOHXREB7.js";
+} from "./chunk-GD7FA6IP.js";
 
 // src/runtime/orchestrator.ts
 var STALE_THRESHOLD_MS = 2 * 60 * 60 * 1e3;

package/dist/{chunk-EQHQF5IM.js → chunk-6L6SXVTP.js}

@@ -35,7 +35,7 @@ var PLATFORM_PROCEDURES = [
     title: "Platform reference \u2014 read on demand, not injected",
     domain: "operations",
     priority: "p1",
-    content: "Reference-heavy platform docs are NOT injected into every session (token budget). Read them on demand from ~/.exe-os/reference/platform-reference.md (auto-written at COO boot), which covers: the full MCP tool reference (all domains + key actions); how to update exe-os (channels, CLI vs stack, `exe-os update`); the first-install setup wizard + license activation; cognition features (dreaming, reflexes, baselines, hot-path summary); and platform capabilities (watchdog, diagnostics, graph extraction, discovery hooks, cloud reminders). For LIVE MCP tool discovery use diagnostics(action='tool_search'); for update status use diagnostics(action='check_update'). When a task needs these details, read the file or recall \u2014 never guess update/setup steps."
+    content: "Reference-heavy platform docs are NOT injected into every session (token budget). Read them on demand from ~/.exe-os/reference/platform-reference.md (auto-written at COO boot), which covers: the full MCP tool reference (all domains + key actions); how to update exe-os (channels, CLI vs stack, `exe-os update`); the first-install setup wizard + license activation; cognition features (dreaming, reflexes, baselines, hot-path summary); and platform capabilities (watchdog, diagnostics, graph extraction, discovery hooks, cloud reminders). For LIVE MCP tool discovery use diagnostics(action='tool_search'); for update status use diagnostics(action='check_update'). Also in the reference file: production-readiness audit methodology; license plan refresh. When a task needs these details, read the file or recall \u2014 never guess update/setup steps."
   },
   // --- Project boundary ---
   {
@@ -73,7 +73,19 @@ var PLATFORM_PROCEDURES = [
     title: "Single dispatch path \u2014 create_task only",
     domain: "workflow",
     priority: "p0",
-    content: "create_task is the ONLY way to dispatch work to another agent. No direct ensureEmployee calls, no manual tmux spawns, no send_message for actionable work. create_task -> system auto-spawns -> session correctly named. ONE PATH. No backdoors. No exceptions."
+    content: "create_task is the ONLY way to dispatch work to another agent. No direct ensureEmployee calls, no manual tmux spawns, no send_message for actionable work. create_task -> system auto-spawns -> session correctly named. ONE PATH. No backdoors. No exceptions. Native subagents within your OWN task scope are execution, not dispatch \u2014 they are allowed and encouraged (see Dispatch Ladder); create_task remains the ONLY way to hand work to ANOTHER agent."
+  },
+  {
+    title: "Dispatch Ladder \u2014 subagents for parallelism, tmux employees for org boundaries",
+    domain: "workflow",
+    priority: "p0",
+    content: "Three rungs \u2014 stop at the first that fits. (1) Do it yourself: trivial, in-scope work in main context. (2) Native subagents (Claude Code Agent tool + worktree isolation; Codex spawned agents; OpenCode sessions) \u2014 the DEFAULT for parallelism WITHIN your own task scope: bounded well-specified work, parallel research, isolated worktree fixes, verbose throwaway exploration. Cap 2-3 concurrent; merge or clean up subagent worktrees before finishing. MANDATORY: persist subagent results/lessons into the task record + memory BEFORE update_task(done) \u2014 subagent output must never die in a context window. (3) create_task -> tmux employee \u2014 ONLY when crossing an organizational boundary: different role/expertise, different runtime/model, needs its own review gate, work outliving your session, cross-project, or founder visibility. tmux is the org chart, not the thread pool."
+  },
+  {
+    title: "Subagent guardrails \u2014 fence scope, isolate Codex, never stash",
+    domain: "workflow",
+    priority: "p0",
+    content: "When delegating to subagents: (1) FENCE SCOPE \u2014 a subagent with MCP access must be explicitly forbidden from touching other agents' tasks, reviews, or folders; give it only its own brief. (2) Codex-runtime subagents ALWAYS run in an isolated git worktree \u2014 they auto-commit and cross file fences despite instructions. (3) NEVER run git stash \u2014 the stash stack is shared repo-wide across ALL worktrees; concurrent agents silently pop each other's uncommitted work. Use git diff > patch, a scratch commit, or a separate worktree instead. Brief every subagent you dispatch with these rules."
   },
   // --- Session isolation (consolidated from 3 procedures) ---
   {
@@ -163,6 +175,12 @@ var PLATFORM_PROCEDURES = [
     priority: "p0",
     content: `Every manager (COO/CTO/CMO) who dispatches work to a worker MUST actively monitor them. Check tmux capture-pane every 10 minutes. Verify they're working, not stuck. If idle at prompt with in_progress task -> send intercom. If stuck -> unblock or escalate. "Standing by" without checking is negligence.`
   },
+  {
+    title: "Coordinator verification \u2014 verify signals, triangulate absence",
+    domain: "workflow",
+    priority: "p0",
+    content: "Never act on a self-reported lifecycle signal without independent verification. Employee claims 'context-full' -> check tmux capture-pane first; the context bar reads left-to-right (% shown = USED, not remaining) \u2014 never kill a session under 80% used. 'Task done' -> read the deliverable and run the verification yourself. Before reporting absence ('no tasks', 'no work was done', 'agent is idle'), triangulate at least three sources: task DB across ALL statuses with project_name='all', output artifacts in exe/output/, and team memory. A null result from one query is the limit of your filter, not a fact about reality. If verification contradicts a detailed claim, double-check your verification before accusing the agent."
+  },
   {
     title: "COO boot health check \u2014 memory, cloud sync, daemon on every launch",
     domain: "workflow",
@@ -280,20 +298,6 @@ var PLATFORM_PROCEDURES = [
     domain: "engineering",
     priority: "p0",
     content: "Three rules for ALL coding work. 1. LAZY LADDER (before writing code): Stop at the first rung that works \u2014 (a) Does this need to exist? (YAGNI) (b) Already in the codebase? (search with code_context/grep) (c) stdlib or language built-in? (d) Native platform feature? (Node APIs, OS builtins) (e) Already handled by an installed dependency? (f) One-liner? (inline it, no new function/file) (g) Only then: write minimum-viable code. No scaffolding, no future-proofing. For new dependencies: justify in PR. Every dep is permanent maintenance + supply-chain surface. Prefer stdlib > existing dep > new dep. 2. SURGICAL DIFF: Diff as small as the task allows. Do NOT reformat code you didn't change. Do NOT rename/refactor outside task scope. Do NOT add 'while I\\'m here' improvements \u2014 file a separate task. Every changed line must be justifiable by the task brief. 3. NAMED FAILURE MODES (shared review vocabulary): KITCHEN SINK \u2014 added more than the task asked for. WRONG ABSTRACTION \u2014 generic solution for a specific problem; wait for the third instance. OPTIMISTIC PATH \u2014 only handled the happy path, missing error handling/edge cases. RUNAWAY REFACTOR \u2014 started fixing one thing, ended up restructuring a module. PHANTOM DEPENDENCY \u2014 added a dep that stdlib or an existing dep already covers. NULL PATCH \u2014 change has no observable effect; diagnosis was likely wrong."
-  },
-  // --- Production-readiness auditing (rotating blind-spot rounds) ---
-  {
-    title: "Production-readiness auditing \u2014 rotating blind-spot rounds until convergence",
-    domain: "engineering",
-    priority: "p1",
-    content: "A single audit only finds what its angles look for. A 'green' codebase (passing tests) routinely hides real, user-facing, disqualifying defects that tests structurally cannot catch. NEVER treat one audit pass as production-readiness proof. Audit as successive ROUNDS, each attacking ENTIRELY DIFFERENT surfaces, until convergence. THREE PRINCIPLES: 1. Never repeat an angle \u2014 tell each round what prior rounds already covered, so it hunts NEW surface instead of re-confirming old findings. 2. Fan out, then adversarially synthesize \u2014 N parallel hunters per round (each blind to the others), then ONE synthesizer that discards re-discoveries and renders a convergence verdict. 3. Convergence is the stop signal, NOT a round count \u2014 stop only when a FRESH-angle round comes back mostly P3 polish. A drop in findings between rounds is NOT convergence; it is usually angle exhaustion within a similar surface (a false signal). Verify by widening the aperture; if new angles still surface P0/P1, keep going. ANGLE FAMILIES (rotate; never re-run the same family): (a) Trust / obvious failures \u2014 data-loss, edge-cases, dependency-risk, privacy, ux-traps, concurrency. (b) Self-audit + structural fragility \u2014 did our own fixes / just-merged PRs introduce regressions? what is structurally fragile (dedup, token refresh, error boundaries)? (c) Desktop-native + infra \u2014 updater lifecycle (a registered-but-never-invoked auto-updater is a classic invisible P0), single-instance, half-open sockets, multi-window, native robustness, build-config. (d) Data-flow + privacy + visual \u2014 trace the EXACT bytes leaving the device (telemetry payloads), cross-user bleed on shared machines, privacy-toggle actually working, i18n/timezone, theme/CSS layout, clipboard/file-drop, logout completeness, zero-data first-run. (e) Time + OS + compound failure \u2014 offline/airplane, multi-hour soak (resource accumulation), rapid double-submit races, OS integration (notifications/tray/deep-links), session-resumption gap reconciliation, keyboard/focus/IME conflicts (the hardest class \u2014 only fails over time or when several things break at once). HONEST HEADLINE: fast-built surface that was never adversarially stressed keeps yielding blockers round after round. If early rounds keep finding real P0/P1s and never converge to polish, the right call may be a dedicated stabilization pass \u2014 NOT just more audit rounds. Surface that judgment rather than declaring 'ready' on a hopeful dip."
-  },
-  // --- License plan & refreshing entitlement ---
-  {
-    title: "License plan & refreshing entitlement \u2014 pick up a plan change (e.g. more agents)",
-    domain: "licensing",
-    priority: "p1",
-    content: "Your plan (free / pro / team / agency / enterprise) governs your limits \u2014 including how many agents/employees you can run. Enterprise = unlimited. HOW VALIDATION WORKS: your instance validates your license key (or login) against the cloud (api.askexe.com), which reads the users store \u2014 the SINGLE SOURCE OF TRUTH \u2014 and returns your plan as a signed token, cached locally at ~/.exe-os/license-cache.json (works fast, and offline within a grace window). That cached token is what your limits run on day-to-day. IF YOUR PLAN WAS CHANGED (e.g. upgraded to enterprise for more agents): the change lands on the SERVER first; your instance keeps the OLD cached plan until it re-validates \u2014 so nothing changes for you until you refresh. To pick it up IMMEDIATELY, do one of: (1) run the `refresh_license` MCP action, or (2) run the `exe-os license refresh` CLI. Either forces a re-check against the cloud, caches the new plan, and lifts your agent limit on the spot (shows old plan -> new plan + new limits). AUTOMATIC: on your next boot, your instance auto-detects a plan change (cheap cloud check, gated to ~10-min cache freshness) and announces it \u2014 e.g. 'Plan changed: pro -> enterprise. Employee limit now unlimited.' No cache-file editing, ever. ASKEXE ADMINS ONLY: to change a CUSTOMER's plan, use the admin-gated set-customer-plan path (requires the AskExe admin token \u2014 customers can never change their own or anyone's plan). It writes the users store (source of truth); the hourly license sync then reflects it into billing, and the customer runs `refresh_license` to pick it up. (Self-serve refresh available in exe-os 0.9.322+.)"
   }
 ];
 var PLATFORM_REFERENCE_PROCEDURES = [
@@ -326,6 +330,18 @@ var PLATFORM_REFERENCE_PROCEDURES = [
     domain: "operations",
     priority: "p2",
     content: "WATCHDOG: Out-of-process, pings daemon every 10s. After 3 failures (30s), force-restarts via SIGTERM->SIGKILL->launchd. MCP outages bounded to ~30-40s. Wait and retry before telling user to /mcp. DIAGNOSTICS: mcp_ping/cloud_status/memory_audit report embed daemon status, search mode, query router, vector backfill, graph coverage, event loop lag (degraded when >5s). DOC-GRAPH: ingest_document auto-extracts concepts/relationships to knowledge graph. Manual: graph(action='extract_from_document', document_id='...'). ATTACHMENTS: support(action='create_bug/create_feature') accepts attachments=[{filename, content}] (4KB truncated). REMINDERS: Auto-sync to cloud (Cloudflare KV). Created on Mac, visible on VPS. Dedup by text+due_date. DISCOVERY: Compact tool catalog injected at boot (~300 tokens). Per-prompt contextual hints (max 3, ~150 tokens). ROSTER: Team roster injected at boot (name+role). Don't recall for team info. Use config(action='capability_cards') for full agent manifests."
+  },
+  {
+    title: "Production-readiness auditing \u2014 rotating blind-spot rounds until convergence",
+    domain: "engineering",
+    priority: "p1",
+    content: "A single audit only finds what its angles look for. A 'green' codebase (passing tests) routinely hides real, user-facing, disqualifying defects that tests structurally cannot catch. NEVER treat one audit pass as production-readiness proof. Audit as successive ROUNDS, each attacking ENTIRELY DIFFERENT surfaces, until convergence. THREE PRINCIPLES: 1. Never repeat an angle \u2014 tell each round what prior rounds already covered, so it hunts NEW surface instead of re-confirming old findings. 2. Fan out, then adversarially synthesize \u2014 N parallel hunters per round (each blind to the others), then ONE synthesizer that discards re-discoveries and renders a convergence verdict. 3. Convergence is the stop signal, NOT a round count \u2014 stop only when a FRESH-angle round comes back mostly P3 polish. A drop in findings between rounds is NOT convergence; it is usually angle exhaustion within a similar surface (a false signal). Verify by widening the aperture; if new angles still surface P0/P1, keep going. ANGLE FAMILIES (rotate; never re-run the same family): (a) Trust / obvious failures \u2014 data-loss, edge-cases, dependency-risk, privacy, ux-traps, concurrency. (b) Self-audit + structural fragility \u2014 did our own fixes / just-merged PRs introduce regressions? what is structurally fragile (dedup, token refresh, error boundaries)? (c) Desktop-native + infra \u2014 updater lifecycle (a registered-but-never-invoked auto-updater is a classic invisible P0), single-instance, half-open sockets, multi-window, native robustness, build-config. (d) Data-flow + privacy + visual \u2014 trace the EXACT bytes leaving the device (telemetry payloads), cross-user bleed on shared machines, privacy-toggle actually working, i18n/timezone, theme/CSS layout, clipboard/file-drop, logout completeness, zero-data first-run. (e) Time + OS + compound failure \u2014 offline/airplane, multi-hour soak (resource accumulation), rapid double-submit races, OS integration (notifications/tray/deep-links), session-resumption gap reconciliation, keyboard/focus/IME conflicts (the hardest class \u2014 only fails over time or when several things break at once). HONEST HEADLINE: fast-built surface that was never adversarially stressed keeps yielding blockers round after round. If early rounds keep finding real P0/P1s and never converge to polish, the right call may be a dedicated stabilization pass \u2014 NOT just more audit rounds. Surface that judgment rather than declaring 'ready' on a hopeful dip."
+  },
+  {
+    title: "License plan & refreshing entitlement \u2014 pick up a plan change (e.g. more agents)",
+    domain: "licensing",
+    priority: "p1",
+    content: "Your plan (free / pro / team / agency / enterprise) governs your limits \u2014 including how many agents/employees you can run. Enterprise = unlimited. HOW VALIDATION WORKS: your instance validates your license key (or login) against the cloud (api.askexe.com), which reads the users store \u2014 the SINGLE SOURCE OF TRUTH \u2014 and returns your plan as a signed token, cached locally at ~/.exe-os/license-cache.json (works fast, and offline within a grace window). That cached token is what your limits run on day-to-day. IF YOUR PLAN WAS CHANGED (e.g. upgraded to enterprise for more agents): the change lands on the SERVER first; your instance keeps the OLD cached plan until it re-validates \u2014 so nothing changes for you until you refresh. To pick it up IMMEDIATELY, do one of: (1) run the `refresh_license` MCP action, or (2) run the `exe-os license refresh` CLI. Either forces a re-check against the cloud, caches the new plan, and lifts your agent limit on the spot (shows old plan -> new plan + new limits). AUTOMATIC: on your next boot, your instance auto-detects a plan change (cheap cloud check, gated to ~10-min cache freshness) and announces it \u2014 e.g. 'Plan changed: pro -> enterprise. Employee limit now unlimited.' No cache-file editing, ever. ASKEXE ADMINS ONLY: to change a CUSTOMER's plan, use the admin-gated set-customer-plan path (requires the AskExe admin token \u2014 customers can never change their own or anyone's plan). It writes the users store (source of truth); the hourly license sync then reflects it into billing, and the customer runs `refresh_license` to pick it up. (Self-serve refresh available in exe-os 0.9.322+.)"
   }
 ];
 function getPlatformReferenceMarkdown() {