@askexenow/exe-os 0.9.359 → 0.9.362

package/dist/bin/exe-launch-agent.js

@@ -1,30 +1,30 @@
 #!/usr/bin/env node
 import {
   exportBehaviorsForAgent
-} from "../chunk-VY5VU7SX.js";
+} from "../chunk-AOMFYUPT.js";
 import {
   resolveClaudeBinaryPath
 } from "../chunk-75H4R62K.js";
 import {
   getSessionPrompt
-} from "../chunk-R6LNQAUG.js";
-import "../chunk-NP2Y7P3I.js";
+} from "../chunk-327Q53AS.js";
+import "../chunk-WP2TGH5R.js";
 import "../chunk-3BAGFZFN.js";
+import "../chunk-ZI3HA3XW.js";
 import {
   retryOnDaemonTransportError
-} from "../chunk-VNK3MNZE.js";
-import "../chunk-6LY3QSJA.js";
+} from "../chunk-ZZEKOI2M.js";
 import "../chunk-QGGH7LOU.js";
 import {
   disposeStore
-} from "../chunk-W5YV2PZE.js";
-import "../chunk-ZMYXQU4L.js";
+} from "../chunk-DKRDU2AX.js";
+import "../chunk-L4LPJMPV.js";
 import "../chunk-CHCA3ZM2.js";
 import "../chunk-OTVEIJUQ.js";
-import "../chunk-FVWI2AR4.js";
+import "../chunk-FIPUVCKC.js";
 import {
   fastDbInit
-} from "../chunk-YMCIZCNK.js";
+} from "../chunk-BN26LSME.js";
 import "../chunk-5MOYSU5A.js";
 import "../chunk-4QCFFW2H.js";
 import "../chunk-76CJBM36.js";
@@ -35,35 +35,35 @@ import {
   _resetCcHelpCache,
   claudeSupportsAgentFlag,
   getCcHelpOutputCached
-} from "../chunk-74R44E4S.js";
-import "../chunk-CAEWPEBA.js";
-import "../chunk-XV42EAVK.js";
-import "../chunk-6WHYSLGF.js";
-import "../chunk-EIKATSE4.js";
+} from "../chunk-SQM4ZTL2.js";
+import "../chunk-5C6ZIJ7J.js";
+import "../chunk-SXKIGBNF.js";
+import "../chunk-BT2PUK3S.js";
+import "../chunk-KI5PFRG6.js";
+import "../chunk-WT4RI36X.js";
+import "../chunk-Z67DIJKT.js";
 import "../chunk-E23LNUWJ.js";
-import "../chunk-4JERP7NT.js";
-import "../chunk-3ODATKWH.js";
+import "../chunk-QAEWWYHL.js";
+import "../chunk-EIKATSE4.js";
+import "../chunk-D5CY4E7I.js";
 import "../chunk-UXLO7VHX.js";
 import "../chunk-DSOQUQTV.js";
-import "../chunk-SKGMF2SO.js";
-import "../chunk-POZGQQEZ.js";
+import "../chunk-GBNB4EWD.js";
+import "../chunk-PV5BIXT6.js";
 import "../chunk-AJIXH5JF.js";
 import {
   getAgentRuntime,
   loadAgentConfig,
   normalizeCcModelName
-} from "../chunk-VAY6IXWY.js";
+} from "../chunk-KDMVVHZH.js";
 import "../chunk-AM7S2TY6.js";
-import "../chunk-F3QTF4T7.js";
-import "../chunk-OSKWCKUC.js";
-import "../chunk-KI5PFRG6.js";
+import "../chunk-CY5NVDTH.js";
 import "../chunk-CVYC6DUW.js";
-import "../chunk-A6VIK3SS.js";
-import "../chunk-RXL7A7JH.js";
+import "../chunk-4P2BFNSB.js";
+import "../chunk-MZYNW5OY.js";
 import "../chunk-OPU3NYOO.js";
-import "../chunk-W6UB2AWP.js";
-import "../chunk-AFNRE2RV.js";
-import "../chunk-VMR6M6GN.js";
+import "../chunk-6EM6USV7.js";
+import "../chunk-HISFWAAK.js";
 import "../chunk-NLEW62VC.js";
 import "../chunk-HYZV25LY.js";
 import "../chunk-GJV3WDWM.js";
@@ -74,25 +74,30 @@ import {
   loadEmployees,
   loadEmployeesSync,
   normalizeRole
-} from "../chunk-EA5FVACM.js";
-import "../chunk-2I23RPSI.js";
-import "../chunk-5YEUPUV4.js";
-import "../chunk-Z2PAVJJ4.js";
-import "../chunk-OMXJMOBD.js";
+} from "../chunk-HLU52KTO.js";
+import "../chunk-TKDITWDN.js";
 import "../chunk-BBMTVAE3.js";
-import "../chunk-YMUZWC33.js";
+import "../chunk-5YEUPUV4.js";
+import "../chunk-Q7J2SQJ6.js";
+import "../chunk-YYB5PMTK.js";
+import {
+  ensureAgentFrontmatter
+} from "../chunk-BRZR76TS.js";
 import "../chunk-V3W3SATA.js";
 import "../chunk-JY5GAZYC.js";
 import "../chunk-FXU7JOXK.js";
-import "../chunk-QWVXN224.js";
+import "../chunk-HPXFKUGU.js";
 import "../chunk-WNBZJSQT.js";
-import "../chunk-2OVTGZYH.js";
-import "../chunk-YBX3G5OP.js";
-import "../chunk-BCZF3AGJ.js";
+import "../chunk-HSKABJE6.js";
+import "../chunk-3ICF4IAZ.js";
+import "../chunk-QILQ5FCG.js";
+import "../chunk-ARX6TAGN.js";
+import "../chunk-BRIZ6OZ3.js";
 import {
   atomicWriteJsonSync,
   atomicWriteSync
 } from "../chunk-HSGBZSCA.js";
+import "../chunk-JKKZGDLP.js";
 import "../chunk-MLKGABMK.js";
 
 // src/bin/exe-launch-agent.ts
@@ -337,8 +342,68 @@ function ccSupportsFlag(flag) {
 function resolveClaudeBin(env = process.env) {
   return resolveClaudeBinaryPath(env);
 }
-function buildLaunchPlan(agent, behaviorsPath, passthrough, _hasAgentFlag, _provider) {
-  const args = ["--dangerously-skip-permissions", "--permission-mode", "bypassPermissions"];
+var ROOT_LAUNCH_REFUSED_EXIT = 78;
+function isRootLaunch(uid = process.getuid?.()) {
+  return uid === 0;
+}
+function rootLaunchAllowed(env = process.env) {
+  const v = (env.EXE_ALLOW_ROOT ?? "").toLowerCase();
+  return v === "1" || v === "true" || v === "yes";
+}
+function rootRefusalMessage(agent) {
+  return `
+\u274C exe-os will not launch "${agent}" as root (uid 0).
+
+   Claude Code REFUSES --dangerously-skip-permissions under root/sudo:
+     "--dangerously-skip-permissions cannot be used with root/sudo privileges"
+   Without that flag an agent stops at an interactive approval prompt on its
+   first tool call and can never work unattended. This launcher used to exit 0
+   here and leave a tmux session that looked alive but held only a shell.
+
+   Fix \u2014 run exe-os as a normal user (this is the supported setup on a VPS or
+   a default cloud image, where you land as root):
+
+     adduser exe && usermod -aG sudo exe
+     su - exe
+     npm install -g @askexenow/exe-os
+     exe-os setup
+
+   Already have a normal user? You are running under \`sudo\` \u2014 drop it:
+
+     ${agent}1        # no sudo
+
+   Override (NOT recommended \u2014 the agent will stall on every permission
+   prompt and cannot run unattended):
+
+     EXE_ALLOW_ROOT=1 ${agent}1
+
+`;
+}
+function rootDegradedWarning(agent) {
+  return `
+\u26A0\uFE0F  EXE_ALLOW_ROOT=1 \u2014 launching "${agent}" as root WITHOUT
+   --dangerously-skip-permissions (Claude Code refuses it under root).
+   Claude Code will ask you to approve every tool call interactively.
+   Unattended/dispatched work will NOT complete in this session.
+
+`;
+}
+function stripPermissionBypassArgs(args) {
+  const out = [];
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (arg === "--dangerously-skip-permissions") continue;
+    if (arg === "--permission-mode" && args[i + 1] === "bypassPermissions") {
+      i++;
+      continue;
+    }
+    if (arg === "--permission-mode=bypassPermissions") continue;
+    out.push(arg);
+  }
+  return out;
+}
+function buildLaunchPlan(agent, behaviorsPath, passthrough, _hasAgentFlag, _provider, uid = process.getuid?.()) {
+  const args = isRootLaunch(uid) ? [] : ["--dangerously-skip-permissions", "--permission-mode", "bypassPermissions"];
   if ((_provider ?? DEFAULT_PROVIDER) === DEFAULT_PROVIDER) {
     const configuredModel = getConfiguredClaudeModel(agent);
     if (configuredModel) args.push("--model", configuredModel);
@@ -380,7 +445,7 @@ function buildLaunchPlan(agent, behaviorsPath, passthrough, _hasAgentFlag, _prov
             const dir = path.dirname(idPath);
             if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
             const hasFrontmatter = identityContent.trimStart().startsWith("---");
-            const fileContent = hasFrontmatter ? identityContent : `---
+            const baseContent = hasFrontmatter ? identityContent : `---
 role: ${normalizeRole(emp.role ?? "employee")}
 title: ${emp.role ?? "Employee"}
 agent_id: ${agent}
@@ -390,6 +455,7 @@ updated_at: ${(/* @__PURE__ */ new Date()).toISOString()}
 ---
 
 ${identityContent}`;
+            const fileContent = ensureAgentFrontmatter(baseContent, baseAgentName(agent));
             atomicWriteSync(idPath, fileContent);
             identityContent = fileContent;
             process.stderr.write(`[exe-launch-agent] self-healed missing identity file: ${idPath}
@@ -438,7 +504,8 @@ ${identityContent}`;
 `);
     }
   }
-  for (const arg of passthrough) args.push(arg);
+  const effectivePassthrough = isRootLaunch(uid) ? stripPermissionBypassArgs(passthrough) : passthrough;
+  for (const arg of effectivePassthrough) args.push(arg);
   const hasUserPrompt = passthrough.some((a) => !a.startsWith("-"));
   if (!hasUserPrompt) {
     try {
@@ -584,6 +651,13 @@ async function main() {
     return 2;
   }
   const { agent, provider, passthrough } = resolved;
+  if (isRootLaunch()) {
+    if (!rootLaunchAllowed()) {
+      process.stderr.write(rootRefusalMessage(agent));
+      return ROOT_LAUNCH_REFUSED_EXIT;
+    }
+    process.stderr.write(rootDegradedWarning(agent));
+  }
   const inTmux = !!(process.env.TMUX || process.env.TMUX_PANE || process.env.TERM?.startsWith("tmux") || process.env.TERM?.startsWith("screen"));
   if (!inTmux) {
     process.stderr.write(
@@ -650,6 +724,7 @@ async function main() {
           mkdirSync(ccAgentDir, { recursive: true });
           let content = readFileSync(sourceFile, "utf-8");
           content = content.replace(/\$\{agent_id\}/g, baseAgentName(agent));
+          content = ensureAgentFrontmatter(content, baseAgentName(agent));
           atomicWriteSync(ccAgentFile, content);
           process.stderr.write(
             `[exe-launch-agent] auto-provisioned ${ccAgentFile} from ${sourceFile}
@@ -691,7 +766,7 @@ async function main() {
   if (sessionName && ccSupportsFlag("--mcp-config")) {
     try {
       const allServers = collectAllMcpServers();
-      const { readOrCreateDaemonToken, mcpHttpUrl } = await import("../mcp-http-config-HIP5CEDV.js");
+      const { readOrCreateDaemonToken, mcpHttpUrl } = await import("../mcp-http-config-BWX7AMAZ.js");
       let currentDaemonToken = null;
       try {
         currentDaemonToken = readOrCreateDaemonToken();
@@ -761,7 +836,7 @@ async function main() {
   process.env.EXE_RUNTIME = "claude";
   process.env.AGENT_ROLE = empRole;
   try {
-    const { writeActiveAgent } = await import("../active-agent-Y3DCBD7J.js");
+    const { writeActiveAgent } = await import("../active-agent-BPNEBKHI.js");
     writeActiveAgent(memoryAgent, empRole);
   } catch {
   }
@@ -822,6 +897,7 @@ if (!process.env.VITEST) {
 export {
   DEFAULT_PROVIDER,
   PROVIDER_TABLE,
+  ROOT_LAUNCH_REFUSED_EXIT,
   _resetCcHelpCache,
   _resetMcpServerCache,
   applyProviderEnv,
@@ -829,8 +905,14 @@ export {
   buildLaunchPlan,
   ccSupportsFlag,
   generateLeanMcpConfig,
+  isRootLaunch,
+  main,
   parseBasename,
   resolveAgent,
   resolveBehaviorsPath,
-  resolveClaudeBin
+  resolveClaudeBin,
+  rootDegradedWarning,
+  rootLaunchAllowed,
+  rootRefusalMessage,
+  stripPermissionBypassArgs
 };

package/dist/bin/exe-mcp.js

@@ -1,3 +1,21 @@
+import {
+  buildMcpHttpHeaders,
+  mcpHttpUrl
+} from "../chunk-CVYDJ2TW.js";
+import "../chunk-B6TI3TZT.js";
+import "../chunk-HLU52KTO.js";
+import "../chunk-TKDITWDN.js";
+import "../chunk-BBMTVAE3.js";
+import "../chunk-5YEUPUV4.js";
+import "../chunk-Q7J2SQJ6.js";
+import "../chunk-YYB5PMTK.js";
+import "../chunk-BRZR76TS.js";
+import "../chunk-V3W3SATA.js";
+import "../chunk-JY5GAZYC.js";
+import "../chunk-FXU7JOXK.js";
+import "../chunk-BRIZ6OZ3.js";
+import "../chunk-HSGBZSCA.js";
+import "../chunk-JKKZGDLP.js";
 import "../chunk-MLKGABMK.js";
 
 // src/bin/exe-mcp.ts
@@ -112,8 +130,149 @@ function usage() {
   exe-os mcp [list] [--runtime claude|codex|opencode|all] [--project <path>] [--json]
   exe-os mcp disable <name> [--runtime claude|codex|opencode|all] [--project <path>]
   exe-os mcp enable <name> [--runtime claude|codex|opencode|all] [--project <path>]
+  exe-os mcp call <tool> [json-args] [--args <json>]
 `;
 }
+function parseJsonRpcMessages(contentType, body) {
+  const trimmed = body.trim();
+  if (!trimmed) return [];
+  if (contentType.includes("text/event-stream")) {
+    const out = [];
+    for (const line of trimmed.split(/\r?\n/)) {
+      const m = line.match(/^data:\s?(.*)$/);
+      if (!m) continue;
+      const data = m[1].trim();
+      if (!data || data === "[DONE]") continue;
+      try {
+        out.push(JSON.parse(data));
+      } catch {
+      }
+    }
+    return out;
+  }
+  try {
+    return [JSON.parse(trimmed)];
+  } catch {
+    return [];
+  }
+}
+async function runMcpCall(toolName, toolArgs, opts = {}) {
+  const fetchImpl = opts.fetchImpl ?? fetch;
+  const homeDir = opts.homeDir ?? os.homedir();
+  const baseUrl = opts.baseUrl ?? mcpHttpUrl(homeDir);
+  const timeoutMs = opts.timeoutMs ?? 12e4;
+  const baseHeaders = buildMcpHttpHeaders(homeDir, { agentId: opts.agentId, agentRole: opts.agentRole });
+  let sessionId = null;
+  const post = async (message) => {
+    const headers = {
+      ...baseHeaders,
+      "Content-Type": "application/json",
+      Accept: "application/json, text/event-stream"
+    };
+    if (sessionId) headers["Mcp-Session-Id"] = sessionId;
+    const res = await fetchImpl(baseUrl, {
+      method: "POST",
+      headers,
+      body: JSON.stringify(message),
+      signal: AbortSignal.timeout(timeoutMs)
+    });
+    const newSession = res.headers.get("mcp-session-id");
+    if (newSession) sessionId = newSession;
+    return {
+      status: res.status,
+      ok: res.ok,
+      body: await res.text(),
+      contentType: res.headers.get("content-type") ?? ""
+    };
+  };
+  try {
+    const initRes = await post({
+      jsonrpc: "2.0",
+      id: 1,
+      method: "initialize",
+      params: {
+        protocolVersion: "2025-06-18",
+        capabilities: {},
+        clientInfo: { name: "exe-os-mcp-call", version: "1.0.0" }
+      }
+    });
+    if (!initRes.ok) return { ok: false, error: `initialize failed: HTTP ${initRes.status}` };
+    const initErr = parseJsonRpcMessages(initRes.contentType, initRes.body).find((m) => m.error)?.error;
+    if (initErr) return { ok: false, error: `initialize error: ${initErr.message ?? "unknown"}` };
+    await post({ jsonrpc: "2.0", method: "notifications/initialized" });
+    const callRes = await post({
+      jsonrpc: "2.0",
+      id: 2,
+      method: "tools/call",
+      params: { name: toolName, arguments: toolArgs }
+    });
+    if (!callRes.ok) return { ok: false, error: `tools/call failed: HTTP ${callRes.status}` };
+    const messages = parseJsonRpcMessages(callRes.contentType, callRes.body);
+    const response = messages.find((m) => m.id === 2) ?? messages.find((m) => m.result !== void 0 || m.error);
+    if (!response) return { ok: false, error: "no JSON-RPC response for tools/call" };
+    if (response.error) return { ok: false, error: response.error.message ?? "tool error" };
+    const result = response.result;
+    if (result && result.isError === true) return { ok: false, error: "tool reported isError", result };
+    return { ok: true, result: response.result };
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    const unreachable = /ECONNREFUSED/.test(msg) || /fetch failed/i.test(msg);
+    return { ok: false, error: unreachable ? `daemon unreachable at ${baseUrl} (${msg})` : msg };
+  }
+}
+async function runCall(rawArgs, stdout, stderr) {
+  let argsJson;
+  const positionals = [];
+  for (let i = 0; i < rawArgs.length; i++) {
+    const a = rawArgs[i];
+    if (a === "--args") {
+      argsJson = rawArgs[i + 1];
+      i++;
+    } else if (a?.startsWith("--args=")) {
+      argsJson = a.slice("--args=".length);
+    } else if (a === "--json") {
+    } else if (a?.startsWith("--")) {
+      stderr.write(`Unknown option: ${a}
+${usage()}`);
+      return 1;
+    } else if (a) {
+      positionals.push(a);
+    }
+  }
+  const toolName = positionals.shift();
+  if (!toolName) {
+    stderr.write(`Missing tool name.
+Usage: exe-os mcp call <tool> [json-args] [--args <json>]
+`);
+    return 1;
+  }
+  if (argsJson === void 0 && positionals.length > 0) argsJson = positionals.join(" ");
+  let toolArgs = {};
+  if (argsJson && argsJson.trim()) {
+    let parsed;
+    try {
+      parsed = JSON.parse(argsJson);
+    } catch (err) {
+      stderr.write(`Invalid tool args JSON: ${err instanceof Error ? err.message : String(err)}
+`);
+      return 1;
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+      stderr.write("Tool args must be a JSON object.\n");
+      return 1;
+    }
+    toolArgs = parsed;
+  }
+  const outcome = await runMcpCall(toolName, toolArgs);
+  if (outcome.ok) {
+    stdout.write(`${JSON.stringify(outcome.result ?? null, null, 2)}
+`);
+    return 0;
+  }
+  stderr.write(`mcp call failed: ${outcome.error ?? "unknown error"}
+`);
+  return 1;
+}
 function defaultClaudeJsonPath() {
   return path.join(os.homedir(), ".claude.json");
 }
@@ -463,6 +622,9 @@ async function main(args, opts = {}) {
   const cwd = opts.cwd ?? process.cwd();
   const paths = runtimePaths(opts);
   const backupDir = opts.backupDir ?? defaultBackupDir();
+  if (args[0] === "call") {
+    return runCall(args.slice(1), stdout, stderr);
+  }
   const explicitSubcommand = args[0] === "list" || args[0] === "disable" || args[0] === "enable";
   const subcommand = explicitSubcommand ? args[0] : "list";
   if (!explicitSubcommand && args[0] && !args[0].startsWith("--")) {
@@ -490,5 +652,7 @@ ${usage()}`);
 export {
   buildClaudeMcpStatus,
   buildMcpStatus,
-  main
+  main,
+  parseJsonRpcMessages,
+  runMcpCall
 };

package/dist/bin/exe-memory-reads.js

@@ -1,33 +1,34 @@
 #!/usr/bin/env node
 import {
   initStore
-} from "../chunk-W5YV2PZE.js";
-import "../chunk-ZMYXQU4L.js";
+} from "../chunk-DKRDU2AX.js";
+import "../chunk-L4LPJMPV.js";
 import "../chunk-CHCA3ZM2.js";
 import "../chunk-OTVEIJUQ.js";
-import "../chunk-FVWI2AR4.js";
+import "../chunk-FIPUVCKC.js";
 import "../chunk-5MOYSU5A.js";
 import "../chunk-4QCFFW2H.js";
 import "../chunk-76CJBM36.js";
 import "../chunk-MP2AFCGL.js";
 import {
   getClient
-} from "../chunk-EA5FVACM.js";
-import "../chunk-2I23RPSI.js";
-import "../chunk-5YEUPUV4.js";
-import "../chunk-Z2PAVJJ4.js";
-import "../chunk-OMXJMOBD.js";
+} from "../chunk-HLU52KTO.js";
+import "../chunk-TKDITWDN.js";
 import "../chunk-BBMTVAE3.js";
-import "../chunk-YMUZWC33.js";
+import "../chunk-5YEUPUV4.js";
+import "../chunk-Q7J2SQJ6.js";
+import "../chunk-YYB5PMTK.js";
+import "../chunk-BRZR76TS.js";
 import "../chunk-V3W3SATA.js";
 import "../chunk-JY5GAZYC.js";
 import "../chunk-FXU7JOXK.js";
-import "../chunk-QWVXN224.js";
-import "../chunk-BCZF3AGJ.js";
+import "../chunk-HPXFKUGU.js";
+import "../chunk-BRIZ6OZ3.js";
 import "../chunk-HSGBZSCA.js";
 import {
   isMainModule
 } from "../chunk-6Y4B3QF6.js";
+import "../chunk-JKKZGDLP.js";
 import "../chunk-MLKGABMK.js";
 
 // src/lib/memory-reads-read.ts

package/dist/bin/exe-new-employee.js

@@ -1,40 +1,41 @@
 #!/usr/bin/env node
 import {
   generateSessionWrappers
-} from "../chunk-CVTWQZOR.js";
+} from "../chunk-3L2QU5ZF.js";
 import {
   TEMPLATE_VERSION,
   buildCustomEmployeePrompt,
   getTemplate,
   personalizePrompt
-} from "../chunk-R6LNQAUG.js";
-import "../chunk-NP2Y7P3I.js";
+} from "../chunk-327Q53AS.js";
+import "../chunk-WP2TGH5R.js";
 import "../chunk-3BAGFZFN.js";
 import {
   PlanLimitError,
   assertEmployeeLimit
-} from "../chunk-F3QTF4T7.js";
+} from "../chunk-CY5NVDTH.js";
 import {
   hireEmployee,
   registerBinSymlinks,
   validateEmployeeName
-} from "../chunk-EA5FVACM.js";
-import "../chunk-2I23RPSI.js";
-import "../chunk-5YEUPUV4.js";
-import "../chunk-Z2PAVJJ4.js";
-import "../chunk-OMXJMOBD.js";
+} from "../chunk-HLU52KTO.js";
+import "../chunk-TKDITWDN.js";
 import "../chunk-BBMTVAE3.js";
-import "../chunk-YMUZWC33.js";
+import "../chunk-5YEUPUV4.js";
+import "../chunk-Q7J2SQJ6.js";
+import "../chunk-YYB5PMTK.js";
+import "../chunk-BRZR76TS.js";
 import "../chunk-V3W3SATA.js";
 import "../chunk-JY5GAZYC.js";
 import "../chunk-FXU7JOXK.js";
-import "../chunk-2OVTGZYH.js";
-import "../chunk-YBX3G5OP.js";
-import "../chunk-BCZF3AGJ.js";
+import "../chunk-HSKABJE6.js";
+import "../chunk-3ICF4IAZ.js";
+import "../chunk-BRIZ6OZ3.js";
 import "../chunk-HSGBZSCA.js";
 import {
   isMainModule
 } from "../chunk-6Y4B3QF6.js";
+import "../chunk-JKKZGDLP.js";
 import "../chunk-MLKGABMK.js";
 
 // src/bin/exe-new-employee.ts
@@ -110,7 +111,7 @@ async function main() {
     const { getTemplate: getIdentityTemplate } = await import("../lib/identity-templates.js");
     const { identityPath } = await import("../lib/identity.js");
     const fs = await import("fs");
-    const { getTemplateForTitle, getEmotionalBaseline, renderEmotionalBaselineSection } = await import("../lib/identity-templates.js");
+    const { getTemplateForTitle, getEmotionalBaseline, renderEmotionalBaselineSection, ensureAgentFrontmatter } = await import("../lib/identity-templates.js");
     const employeeRole = newEmployee.role ?? "";
     const identityTemplate = getIdentityTemplate(employeeRole.toLowerCase()) ?? getTemplateForTitle(employeeRole);
     const emotionalBaseline = getEmotionalBaseline(employeeRole);
@@ -119,11 +120,12 @@ async function main() {
     const dir = path.dirname(idPath);
     if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
     if (identityTemplate) {
-      const content = identityTemplate.replace(/^agent_id: \w+/m, `agent_id: ${name}`) + emotionalSection;
+      const rendered = identityTemplate.replace(/^agent_id: \w+/m, `agent_id: ${name}`) + emotionalSection;
+      const content = ensureAgentFrontmatter(rendered, name);
       fs.writeFileSync(idPath, content, "utf-8");
       console.log(`Identity doc written: ~/.exe-os/identity/${name}.md`);
     } else if (!fs.existsSync(idPath)) {
-      const content = `---
+      const base = `---
 role: specialist
 title: Specialist
 agent_id: ${name}
@@ -133,6 +135,7 @@ updated_at: ${(/* @__PURE__ */ new Date()).toISOString()}
 ---
 
 ${rolePrompt}${emotionalSection}`;
+      const content = ensureAgentFrontmatter(base, name);
       fs.writeFileSync(idPath, content, "utf-8");
       console.log(`Identity doc written: ~/.exe-os/identity/${name}.md`);
     }
@@ -150,7 +153,7 @@ ${rolePrompt}${emotionalSection}`;
     console.error(`Warning: some launchers failed: ${bins.errors.join("; ")}`);
   }
   try {
-    const { resolvePackageRoot } = await import("../installer-7UV3CNWZ.js");
+    const { resolvePackageRoot } = await import("../installer-QBWZSYDG.js");
     const { homedir } = await import("os");
     const pkgRoot = resolvePackageRoot();
     const wrapResult = generateSessionWrappers(pkgRoot);

package/dist/bin/exe-os-mcp-proxy.js

@@ -3,23 +3,24 @@ import {
   buildMcpHttpHeaders,
   mcpHttpPort,
   mcpHttpUrl
-} from "../chunk-6EOLGE7T.js";
+} from "../chunk-CVYDJ2TW.js";
 import "../chunk-B6TI3TZT.js";
-import "../chunk-EA5FVACM.js";
-import "../chunk-2I23RPSI.js";
-import "../chunk-5YEUPUV4.js";
-import "../chunk-Z2PAVJJ4.js";
-import "../chunk-OMXJMOBD.js";
+import "../chunk-HLU52KTO.js";
+import "../chunk-TKDITWDN.js";
 import "../chunk-BBMTVAE3.js";
-import "../chunk-YMUZWC33.js";
+import "../chunk-5YEUPUV4.js";
+import "../chunk-Q7J2SQJ6.js";
+import "../chunk-YYB5PMTK.js";
+import "../chunk-BRZR76TS.js";
 import "../chunk-V3W3SATA.js";
 import "../chunk-JY5GAZYC.js";
 import "../chunk-FXU7JOXK.js";
-import "../chunk-BCZF3AGJ.js";
+import "../chunk-BRIZ6OZ3.js";
 import "../chunk-HSGBZSCA.js";
 import {
   isMainModule
 } from "../chunk-6Y4B3QF6.js";
+import "../chunk-JKKZGDLP.js";
 import "../chunk-MLKGABMK.js";
 
 // src/bin/exe-os-mcp-proxy.ts