@askexenow/exe-os 0.9.362 → 0.9.365

package/dist/{exe-org-HXF4XBB3.js → exe-org-VEIISATF.js}

@@ -3,8 +3,8 @@ import {
   getOrchestrationPhaseInfo,
   loadOrchestrationPhase,
   setOrchestrationPhase
-} from "./chunk-RCOIKTHM.js";
-import "./chunk-BRIZ6OZ3.js";
+} from "./chunk-ZZXMB5F2.js";
+import "./chunk-QMSEL5YS.js";
 import "./chunk-HSGBZSCA.js";
 import "./chunk-JKKZGDLP.js";
 import "./chunk-MLKGABMK.js";
@@ -36,6 +36,11 @@ AI Partner \u2014 joining an org (the member side):
                                    Discard a pinned Org Key (a key rotation is a security event)
 
 AI Partner \u2014 running an org (the admin side; do these in order):
+  exe-os org create <org-id>       Create the org and become its first admin. THE FIRST
+                                   STEP \u2014 every other admin command needs an org that
+                                   already exists and an admin who can act on it, and
+                                   this is the only thing that produces either.
+                                   An org id is 1-128 chars of [a-z0-9._:-].
   exe-os org publish-key --org <id> --mailbox <mailbox-id>
                                    Publish this org's Org Key. REQUIRED ONCE before any
                                    invite can be issued \u2014 until it exists, "org invite"
@@ -119,18 +124,18 @@ async function promptSecret(prompt) {
   });
 }
 async function printOrgSection() {
-  const { resolveOrgPartnerBindings, resolvePartnerIdentities } = await import("./org-partner-config-XQGOB7EJ.js");
+  const { resolveOrgPartnerBindings, resolvePartnerIdentities } = await import("./org-partner-config-YKHPDPZR.js");
   const bindings = resolveOrgPartnerBindings();
   if (!bindings.orgMode) {
     console.log("Org membership: none \u2014 this is a personal install. The AI Partner org surface is inactive.");
     console.log("");
     return;
   }
-  const { orgPartnerRuntimeStatus } = await import("./org-partner-runtime-RNNUL5IN.js");
-  const { getStandingPolicies } = await import("./org-consent-policy-BN7MKCZ2.js");
-  const { listTaskRequests } = await import("./task-request-inbox-BFXNUU44.js");
-  const { getMailboxOutboxStatus, listFailureNotices } = await import("./mailbox-outbox-HXI7DYNC.js");
-  const { getMailboxInboxState } = await import("./mailbox-inbox-CP2VRBXZ.js");
+  const { orgPartnerRuntimeStatus } = await import("./org-partner-runtime-WLZAZJIY.js");
+  const { getStandingPolicies } = await import("./org-consent-policy-XT6UZENB.js");
+  const { listTaskRequests } = await import("./task-request-inbox-UCSKDC3R.js");
+  const { getMailboxOutboxStatus, listFailureNotices } = await import("./mailbox-outbox-J6WIF3UY.js");
+  const { getMailboxInboxState } = await import("./mailbox-inbox-4MEUOL3J.js");
   const runtime = orgPartnerRuntimeStatus();
   console.log("Org membership: ACTIVE (org mode is latched on this machine)");
   if (bindings.readError) {
@@ -180,9 +185,9 @@ async function printOrgSection() {
   if (runtime.defects.length > 0) console.log("");
 }
 async function runReport(argv) {
-  const { assertOrgPartnerRuntimeReady } = await import("./org-partner-runtime-RNNUL5IN.js");
-  const { draftOrgUpBrief, sendOpenDraft } = await import("./org-brief-session-FSZ3QJDN.js");
-  const { resolveOrgPartnerBindings } = await import("./org-partner-config-XQGOB7EJ.js");
+  const { assertOrgPartnerRuntimeReady } = await import("./org-partner-runtime-WLZAZJIY.js");
+  const { draftOrgUpBrief, sendOpenDraft } = await import("./org-brief-session-7AZZEO3F.js");
+  const { resolveOrgPartnerBindings } = await import("./org-partner-config-YKHPDPZR.js");
   assertOrgPartnerRuntimeReady();
   let orgId = flag(argv, "org");
   if (!orgId) {
@@ -257,10 +262,10 @@ async function runReport(argv) {
   return 0;
 }
 async function runRequests(argv) {
-  const { assertOrgPartnerRuntimeReady } = await import("./org-partner-runtime-RNNUL5IN.js");
-  const { requireOrgPartnerBinding, resolveOrgPartnerBindings, resolvePartnerIdentities } = await import("./org-partner-config-XQGOB7EJ.js");
-  const { listTaskRequests, getTaskRequest, acceptTaskRequest, declineTaskRequest } = await import("./task-request-inbox-BFXNUU44.js");
-  const { decideRequestManually } = await import("./org-consent-policy-BN7MKCZ2.js");
+  const { assertOrgPartnerRuntimeReady } = await import("./org-partner-runtime-WLZAZJIY.js");
+  const { requireOrgPartnerBinding, resolveOrgPartnerBindings, resolvePartnerIdentities } = await import("./org-partner-config-YKHPDPZR.js");
+  const { listTaskRequests, getTaskRequest, acceptTaskRequest, declineTaskRequest } = await import("./task-request-inbox-UCSKDC3R.js");
+  const { decideRequestManually } = await import("./org-consent-policy-XT6UZENB.js");
   assertOrgPartnerRuntimeReady();
   let orgId = flag(argv, "org");
   if (!orgId) {
@@ -339,7 +344,7 @@ async function runRequests(argv) {
   return 0;
 }
 async function runConsent(argv) {
-  const { resolveOrgPartnerBindings } = await import("./org-partner-config-XQGOB7EJ.js");
+  const { resolveOrgPartnerBindings } = await import("./org-partner-config-YKHPDPZR.js");
   const { setConsentPassphrase, clearConsentPassphrase, consentPassphraseIsSet, MIN_CONSENT_PASSPHRASE_LENGTH } = await import("./consent-passphrase-Z64GFJXK.js");
   const sub = argv[0];
   let orgId = flag(argv, "org");
@@ -395,9 +400,9 @@ async function runJoin(argv) {
     console.error('exe-os org join <invite-code> [--confirm "<phrase>"]');
     return 1;
   }
-  const { fetchInviteOffer, completeOrgJoin, orgKeyPinConfirmation } = await import("./org-join-HTQ57JYH.js");
-  const { readOrgKeyPin, orgKeyUnpinConfirmation } = await import("./org-key-pin-OTOKAELD.js");
-  const { resolvePartnerIdentities } = await import("./org-partner-config-XQGOB7EJ.js");
+  const { fetchInviteOffer, completeOrgJoin, orgKeyPinConfirmation } = await import("./org-join-BMBQDMVF.js");
+  const { readOrgKeyPin, orgKeyUnpinConfirmation } = await import("./org-key-pin-5WUSPGVN.js");
+  const { resolvePartnerIdentities } = await import("./org-partner-config-YKHPDPZR.js");
   const offer = await fetchInviteOffer(code, {
     ...flag(argv, "endpoint") ? { endpoint: flag(argv, "endpoint") } : {}
   });
@@ -421,6 +426,10 @@ async function runJoin(argv) {
     console.log(`  my Partner sign fp (unavailable: ${err instanceof Error ? err.message : String(err)})`);
   }
   console.log("");
+  console.log("Pinning this Org Key does not share your memories, backup, or private scope.");
+  console.log("They stay private by default and encrypted end-to-end under your key unless you");
+  console.log("explicitly approve and send a brief or grant a scoped memory slice.");
+  console.log("");
   const existing = readOrgKeyPin(offer.orgId);
   if (existing && existing.org_key_sign_fp !== offer.orgKeySignFp) {
     console.error(`This install already pinned ${existing.org_key_sign_fp.slice(0, 16)} for ${offer.orgId}.`);
@@ -452,9 +461,53 @@ async function runJoin(argv) {
     result.pinCreated ? `Pinned ${result.pin.org_key_sign_fp.slice(0, 16)} as the Org Key for ${result.offer.orgId}.` : `That identity was already pinned for ${result.offer.orgId} \u2014 re-joined, nothing re-pinned.`
   );
   console.log(`Joined ${result.offer.orgId} as ${result.offer.status}. Your Partner fp is ${result.partnerSignFpDisplay}.`);
+  console.log("");
+  const { memberJoinBenefitText } = await import("./seat-benefit-VDQJYJOB.js");
+  console.log(memberJoinBenefitText({
+    orgId: result.offer.orgId,
+    personalPlan: "free",
+    orgPlan: result.offer.orgPlan
+  }));
+  console.log("");
   console.log("Run `exe-os org status` to see the mailbox and policy state.");
   return 0;
 }
+async function runCreate(argv) {
+  const orgId = argv[0];
+  if (!orgId || orgId.startsWith("--")) {
+    console.error("exe-os org create <org-id>");
+    console.error("");
+    console.error("<org-id> is 1-128 characters of [a-z0-9._:-] \u2014 a handle, not a company name.");
+    console.error("It is lowercase by constraint, not by convention: `Acme` and `acme` must never be");
+    console.error("two organizations that look identical in a roster, so a capitalized id is folded");
+    console.error("before it is sent and refused by the database if it ever arrives uncanonical.");
+    return 1;
+  }
+  const { createOrg } = await import("./org-key-admin-SCCVVE2H.js");
+  const created = await createOrg({
+    orgId,
+    ...flag(argv, "endpoint") ? { endpoint: flag(argv, "endpoint") } : {}
+  });
+  console.log(`Created ${created.orgId}. You are its first admin.`);
+  console.log("");
+  console.log(`  org id       ${created.orgId}`);
+  console.log(`  created at   ${created.createdAt}`);
+  console.log(`  first admin  ${created.adminUserId}   (this account)`);
+  console.log("");
+  console.log("The org exists and nothing else about it does. It has no Org Key, so it can issue no");
+  console.log("invites yet \u2014 that is fail-closed by design, not a missing step you have to discover");
+  console.log("from a 404.");
+  console.log("");
+  console.log("Next, in order:");
+  console.log(`  1. exe-os org publish-key --org ${created.orgId} --mailbox <mailbox-id>`);
+  console.log(`  2. exe-os org invite <seat-ref> --org ${created.orgId}`);
+  console.log("");
+  console.log("Creating the org did NOT bind this machine's Partner to it \u2014 you hold the admin bit,");
+  console.log("not a seat. Issue yourself an invite in step 2 and redeem it like anyone else; that is");
+  console.log("what runs the fingerprint attestation, and the founder should not be the one person");
+  console.log("who never performed it.");
+  return 0;
+}
 async function runPublishKey(argv) {
   const orgId = flag(argv, "org");
   const mailboxId = flag(argv, "mailbox");
@@ -466,10 +519,10 @@ async function runPublishKey(argv) {
     console.error("without publishing again.");
     return 1;
   }
-  const { publishOrgKey, readMyPinnedOrgKey, describeRotation } = await import("./org-key-admin-4W6LZ5KZ.js");
+  const { publishOrgKey, readMyPinnedOrgKey, describeRotation } = await import("./org-key-admin-SCCVVE2H.js");
   const transport = flag(argv, "endpoint") ? { endpoint: flag(argv, "endpoint") } : {};
   const existing = await readMyPinnedOrgKey({ orgId, ...transport });
-  const { resolvePartnerIdentities } = await import("./org-partner-config-XQGOB7EJ.js");
+  const { resolvePartnerIdentities } = await import("./org-partner-config-YKHPDPZR.js");
   const mine = await resolvePartnerIdentities(orgId);
   const myFp = mine.sign.fingerprint.toString("hex").slice(0, 16);
   if (existing && existing.fingerprint !== myFp && !has(argv, "rotate")) {
@@ -522,13 +575,22 @@ async function runInvite(argv) {
     console.error("directory entry. Try `engineer.03` or `support.lead`.");
     return 1;
   }
-  const { issueSeatInvite } = await import("./org-key-admin-4W6LZ5KZ.js");
+  const { issueSeatInvite } = await import("./org-key-admin-SCCVVE2H.js");
   const invite = await issueSeatInvite({
     orgId,
     seatRef,
     ...has(argv, "admin") ? { isAdmin: true } : {},
     ...flag(argv, "endpoint") ? { endpoint: flag(argv, "endpoint") } : {}
   });
+  const { adminInviteDisclosureText } = await import("./seat-benefit-VDQJYJOB.js");
+  console.log(adminInviteDisclosureText({
+    orgId: invite.orgId,
+    seatRef: invite.seatRef,
+    orgPlan: invite.orgPlan ?? null,
+    ...typeof invite.seatsConsumed === "number" ? { seatsConsumed: invite.seatsConsumed } : {},
+    ...typeof invite.seatsPurchased === "number" ? { seatsPurchased: invite.seatsPurchased } : {}
+  }));
+  console.log("");
   console.log(`Invite for seat "${invite.seatRef}" in ${invite.orgId}${invite.isAdmin ? " (ORG ADMIN)" : ""}.`);
   console.log("");
   console.log("  \u2500\u2500 SHOWN ONCE. Only its hash is stored; this is the only copy. \u2500\u2500");
@@ -559,7 +621,7 @@ async function runUnpin(argv) {
     console.error('exe-os org unpin <org-id> --confirm "<phrase>"');
     return 1;
   }
-  const { readOrgKeyPin, unpinOrgKey, orgKeyUnpinConfirmation } = await import("./org-key-pin-OTOKAELD.js");
+  const { readOrgKeyPin, unpinOrgKey, orgKeyUnpinConfirmation } = await import("./org-key-pin-5WUSPGVN.js");
   const pin = readOrgKeyPin(orgId);
   if (!pin) {
     console.error(`No pinned Org Key for org "${orgId}".`);
@@ -583,7 +645,7 @@ async function runUnpin(argv) {
   return 0;
 }
 async function runLeave(argv) {
-  const { clearOrgModeSticky, ORG_MODE_CLEAR_CONFIRMATION, orgMembershipPresent } = await import("./org-membership-SML6GCHP.js");
+  const { clearOrgModeSticky, ORG_MODE_CLEAR_CONFIRMATION, orgMembershipPresent } = await import("./org-membership-ESALTLLN.js");
   if (!orgMembershipPresent()) {
     console.log("This install is not an org member \u2014 nothing to leave.");
     return 0;
@@ -627,8 +689,8 @@ async function main(argv = process.argv.slice(2)) {
     }
     return;
   }
-  if (cmd === "report" || cmd === "requests" || cmd === "leave" || cmd === "join" || cmd === "unpin" || cmd === "publish-key" || cmd === "invite") {
-    const run = cmd === "report" ? runReport : cmd === "requests" ? runRequests : cmd === "join" ? runJoin : cmd === "unpin" ? runUnpin : cmd === "publish-key" ? runPublishKey : cmd === "invite" ? runInvite : runLeave;
+  if (cmd === "report" || cmd === "requests" || cmd === "leave" || cmd === "join" || cmd === "unpin" || cmd === "create" || cmd === "publish-key" || cmd === "invite") {
+    const run = cmd === "report" ? runReport : cmd === "requests" ? runRequests : cmd === "join" ? runJoin : cmd === "unpin" ? runUnpin : cmd === "create" ? runCreate : cmd === "publish-key" ? runPublishKey : cmd === "invite" ? runInvite : runLeave;
     try {
       process.exitCode = await run(argv.slice(1));
     } catch (err) {

package/dist/{exe-snapshot-TL3TLKLR.js → exe-snapshot-JXQFLUKA.js}

@@ -1,82 +1,82 @@
 #!/usr/bin/env node
 import {
   DreamingEngine
-} from "./chunk-SRFRUN66.js";
+} from "./chunk-PPGPCWRC.js";
 import {
   storeBehavior
-} from "./chunk-ZI3HA3XW.js";
-import "./chunk-ZZEKOI2M.js";
+} from "./chunk-O2MEBF23.js";
+import "./chunk-VMJ2UH4S.js";
 import "./chunk-QGGH7LOU.js";
 import {
   disposeStore,
   flushBatch,
   initStore,
   writeMemory
-} from "./chunk-DKRDU2AX.js";
-import "./chunk-L4LPJMPV.js";
+} from "./chunk-4QKKLK3C.js";
+import "./chunk-QYECRPGD.js";
 import {
   extractKeywords,
   keywordsToString
 } from "./chunk-CHCA3ZM2.js";
 import "./chunk-OTVEIJUQ.js";
-import "./chunk-FIPUVCKC.js";
+import "./chunk-7DMCAGSC.js";
 import "./chunk-5MOYSU5A.js";
 import "./chunk-4QCFFW2H.js";
 import "./chunk-76CJBM36.js";
-import "./chunk-SQM4ZTL2.js";
-import "./chunk-5C6ZIJ7J.js";
-import "./chunk-SXKIGBNF.js";
-import "./chunk-BT2PUK3S.js";
-import "./chunk-KI5PFRG6.js";
+import "./chunk-ORNCMRIX.js";
+import "./chunk-ESTR7QUP.js";
+import "./chunk-FXPAUDCZ.js";
+import "./chunk-QFIVK3G5.js";
 import "./chunk-WT4RI36X.js";
-import "./chunk-Z67DIJKT.js";
+import "./chunk-C3UAQ3JG.js";
+import "./chunk-KI5PFRG6.js";
+import "./chunk-EIKATSE4.js";
 import "./chunk-E23LNUWJ.js";
 import "./chunk-QAEWWYHL.js";
-import "./chunk-EIKATSE4.js";
-import "./chunk-D5CY4E7I.js";
+import "./chunk-EHHMNKOA.js";
+import "./chunk-GBNB4EWD.js";
 import "./chunk-UXLO7VHX.js";
 import "./chunk-DSOQUQTV.js";
-import "./chunk-GBNB4EWD.js";
-import "./chunk-PV5BIXT6.js";
+import "./chunk-WR75WUEP.js";
 import "./chunk-AJIXH5JF.js";
-import "./chunk-KDMVVHZH.js";
+import "./chunk-XTWHNLGD.js";
 import "./chunk-AM7S2TY6.js";
-import "./chunk-CY5NVDTH.js";
+import "./chunk-2FYIMTQE.js";
 import "./chunk-CVYC6DUW.js";
-import "./chunk-4P2BFNSB.js";
-import "./chunk-MZYNW5OY.js";
-import "./chunk-OPU3NYOO.js";
-import "./chunk-6EM6USV7.js";
-import "./chunk-HISFWAAK.js";
+import "./chunk-ZVTKWWLV.js";
+import "./chunk-CDUB5Q6J.js";
+import "./chunk-BNHAZ65R.js";
+import "./chunk-RIECV7SR.js";
+import "./chunk-LNOS24GV.js";
 import "./chunk-NLEW62VC.js";
+import "./chunk-W2IRQJ6R.js";
 import "./chunk-HYZV25LY.js";
 import "./chunk-GJV3WDWM.js";
 import "./chunk-MP2AFCGL.js";
-import "./chunk-HLU52KTO.js";
+import "./chunk-BRLS5OLZ.js";
 import "./chunk-TKDITWDN.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-5YEUPUV4.js";
-import "./chunk-Q7J2SQJ6.js";
+import "./chunk-NO3M2AFM.js";
 import "./chunk-YYB5PMTK.js";
-import "./chunk-BRZR76TS.js";
+import "./chunk-NJFJWQNN.js";
 import "./chunk-V3W3SATA.js";
 import "./chunk-JY5GAZYC.js";
 import "./chunk-FXU7JOXK.js";
 import "./chunk-HPXFKUGU.js";
 import "./chunk-WNBZJSQT.js";
-import "./chunk-HSKABJE6.js";
-import "./chunk-3ICF4IAZ.js";
+import "./chunk-ZDUO6QBH.js";
+import "./chunk-A7XLR3K7.js";
+import "./chunk-VS4LPG66.js";
 import "./chunk-QILQ5FCG.js";
 import "./chunk-ARX6TAGN.js";
-import "./chunk-BRIZ6OZ3.js";
+import "./chunk-QMSEL5YS.js";
 import "./chunk-HSGBZSCA.js";
 import "./chunk-JKKZGDLP.js";
 import "./chunk-MLKGABMK.js";
 
 // src/bin/exe-snapshot.ts
 import crypto from "crypto";
-import path from "path";
-import { execSync } from "child_process";
 
 // src/lib/session-snapshot.ts
 var FILE_RE = /(?:[\w@.-]+\/)+[\w@.-]+\.(?:ts|tsx|js|jsx|json|md|yml|yaml|sql|py|go|rs|sh|css|html|toml)/g;
@@ -268,15 +268,8 @@ async function main(_args = []) {
   const agentId = process.env.AGENT_ID || "default";
   let projectName = process.env.EXE_PROJECT;
   if (!projectName) {
-    try {
-      const gitRoot = execSync("git rev-parse --show-toplevel", {
-        encoding: "utf8",
-        stdio: ["pipe", "pipe", "pipe"]
-      }).trim();
-      projectName = path.basename(gitRoot);
-    } catch {
-      projectName = "unknown";
-    }
+    const { resolveProjectName } = await import("./project-name-ILJTETUE.js");
+    projectName = resolveProjectName();
   }
   try {
     await initStore();

package/dist/{fast-db-init-SO2XUQ7T.js → fast-db-init-SCXJXOYX.js}

@@ -2,7 +2,7 @@ import {
   ensureReadDbReady,
   fastDbInit,
   isNoopFastDbClient
-} from "./chunk-BN26LSME.js";
+} from "./chunk-LKYGSJ2E.js";
 import "./chunk-MLKGABMK.js";
 export {
   ensureReadDbReady,

package/dist/{founder-context-IOCADC66.js → founder-context-U2SZPLYV.js}

@@ -1,10 +1,11 @@
 import {
   checkLicense
-} from "./chunk-HSKABJE6.js";
-import "./chunk-3ICF4IAZ.js";
+} from "./chunk-ZDUO6QBH.js";
+import "./chunk-A7XLR3K7.js";
+import "./chunk-VS4LPG66.js";
 import {
   loadConfigSync
-} from "./chunk-BRIZ6OZ3.js";
+} from "./chunk-QMSEL5YS.js";
 import "./chunk-HSGBZSCA.js";
 import "./chunk-JKKZGDLP.js";
 import "./chunk-MLKGABMK.js";

package/dist/{founder-monitor-envelope-SMILO4BT.js → founder-monitor-envelope-5KTKNL5G.js}

@@ -1,8 +1,8 @@
 import {
   orgModeActive
-} from "./chunk-XTGR3LMF.js";
-import "./chunk-E3YI6FVJ.js";
-import "./chunk-VAOUB2TK.js";
+} from "./chunk-CW2UCKHS.js";
+import "./chunk-VV5EZZNT.js";
+import "./chunk-JTB5V6BV.js";
 import {
   ALGORITHM,
   CURRENT_KEY_ID,
@@ -20,7 +20,7 @@ import {
   pubKeyHash
 } from "./chunk-EEZOBN6X.js";
 import "./chunk-HPXFKUGU.js";
-import "./chunk-BRIZ6OZ3.js";
+import "./chunk-QMSEL5YS.js";
 import "./chunk-HSGBZSCA.js";
 import "./chunk-JKKZGDLP.js";
 import "./chunk-MLKGABMK.js";

package/dist/fts-integrity-LKAZEZJE.js

@@ -0,0 +1,96 @@
+import {
+  recordDbIntegrityEvent
+} from "./chunk-ZNUJFX7L.js";
+import "./chunk-QMSEL5YS.js";
+import "./chunk-HSGBZSCA.js";
+import "./chunk-JKKZGDLP.js";
+import "./chunk-MLKGABMK.js";
+
+// src/lib/fts-integrity.ts
+async function canTrustIntegrityVerdict(client) {
+  try {
+    const res = await client.execute("PRAGMA query_only");
+    const raw = res.rows[0]?.query_only ?? res.rows[0]?.[0];
+    if (raw === void 0 || raw === null) return true;
+    return Number(raw) === 0;
+  } catch {
+    return true;
+  }
+}
+function isMalformedFtsMessage(message) {
+  return /malformed inverted index/i.test(message);
+}
+function isReadOnlyRefusal(message) {
+  return /SQLITE_READONLY|attempt to write a readonly database|query_only/i.test(message);
+}
+async function checkFtsIntegrity(client, table = "memories_fts") {
+  if (!await canTrustIntegrityVerdict(client)) {
+    return {
+      verdict: "unverified",
+      detail: `connection is query_only; FTS5 integrity-check cannot run (would falsely report "malformed inverted index")`
+    };
+  }
+  try {
+    await client.execute(`INSERT INTO ${table}(${table}, rank) VALUES('integrity-check', 0)`);
+    return { verdict: "ok" };
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    if (isReadOnlyRefusal(msg)) {
+      return { verdict: "unverified", detail: `read-only connection refused the check: ${msg}` };
+    }
+    if (isMalformedFtsMessage(msg) || /SQLITE_CORRUPT/i.test(msg)) {
+      return { verdict: "malformed", detail: msg };
+    }
+    return { verdict: "unverified", detail: msg };
+  }
+}
+async function checkAndRepairFtsIndex(client, table = "memories_fts") {
+  return runCheckAndRepair(client, table);
+}
+var checkedTables = /* @__PURE__ */ new Set();
+function resetFtsIntegrityLatch() {
+  checkedTables.clear();
+}
+async function checkAndRepairFtsIndexOnce(client, table = "memories_fts") {
+  if (checkedTables.has(table)) {
+    return { verdict: "unverified", rebuilt: false, rebuildFailed: false, detail: "already checked this process" };
+  }
+  checkedTables.add(table);
+  return runCheckAndRepair(client, table);
+}
+async function runCheckAndRepair(client, table) {
+  const { verdict, detail } = await checkFtsIntegrity(client, table);
+  if (verdict === "ok") {
+    return { verdict, rebuilt: false, rebuildFailed: false };
+  }
+  if (verdict === "unverified") {
+    return { verdict, rebuilt: false, rebuildFailed: false, detail };
+  }
+  recordDbIntegrityEvent({ kind: "fts-malformed", detail, route: "main" });
+  process.stderr.write(
+    `[fts-integrity] CONFIRMED malformed FTS index on ${table} (${detail ?? "no detail"}) \u2014 rebuilding from base table.
+`
+  );
+  try {
+    await client.execute(`INSERT INTO ${table}(${table}) VALUES('rebuild')`);
+    recordDbIntegrityEvent({ kind: "fts-rebuilt", detail: table });
+    process.stderr.write(`[fts-integrity] ${table} rebuilt successfully.
+`);
+    return { verdict, rebuilt: true, rebuildFailed: false, detail };
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    recordDbIntegrityEvent({ kind: "fts-rebuild-failed", detail: msg });
+    process.stderr.write(`[fts-integrity] ERROR: ${table} rebuild FAILED: ${msg}
+`);
+    return { verdict, rebuilt: false, rebuildFailed: true, detail: msg };
+  }
+}
+export {
+  canTrustIntegrityVerdict,
+  checkAndRepairFtsIndex,
+  checkAndRepairFtsIndexOnce,
+  checkFtsIntegrity,
+  isMalformedFtsMessage,
+  isReadOnlyRefusal,
+  resetFtsIntegrityLatch
+};

package/dist/gateway/index.js

@@ -11,16 +11,7 @@ import {
   createSignupBot,
   ensureCRMContact,
   formatAlert
-} from "../chunk-XSYQ5EPE.js";
-import {
-  WhatsAppAdapter
-} from "../chunk-WSOA3WMC.js";
-import {
-  SignalAdapter
-} from "../chunk-RJT7H2KR.js";
-import {
-  TelegramAdapter
-} from "../chunk-Q3V7K4ME.js";
+} from "../chunk-7C4FUNVO.js";
 import {
   DiscordAdapter
 } from "../chunk-N5RRQOAC.js";
@@ -33,7 +24,16 @@ import {
 import {
   createCRMWebhookHandler,
   parseTwentyWebhook
-} from "../chunk-MZZN5GFC.js";
+} from "../chunk-DQ5KHWFD.js";
+import {
+  WhatsAppAdapter
+} from "../chunk-WSOA3WMC.js";
+import {
+  SignalAdapter
+} from "../chunk-RJT7H2KR.js";
+import {
+  TelegramAdapter
+} from "../chunk-Q3V7K4ME.js";
 import {
   BotRegistry,
   BotRuntime,
@@ -56,9 +56,9 @@ import {
   retryWithBackoff,
   routeMessage,
   validateGatewayConfig
-} from "../chunk-NE4QI2GX.js";
-import "../chunk-465RCKVI.js";
-import "../chunk-RUUX2ZST.js";
+} from "../chunk-BATQKSLI.js";
+import "../chunk-U373MEF5.js";
+import "../chunk-P47MPWNU.js";
 import {
   OllamaProvider
 } from "../chunk-FWFFZGSC.js";
@@ -72,6 +72,7 @@ import {
   getDefaultAccount,
   loadAccounts
 } from "../chunk-GL57PO3K.js";
+import "../chunk-UY6HRDB2.js";
 import {
   createPerson,
   findPersonByContact,
@@ -81,19 +82,18 @@ import {
   pushGatewayEventToCRM,
   pushInboundMessageToCRM
 } from "../chunk-ML4S5SHZ.js";
-import "../chunk-UELGUVNL.js";
 import "../chunk-MP2AFCGL.js";
-import "../chunk-HLU52KTO.js";
+import "../chunk-BRLS5OLZ.js";
 import "../chunk-TKDITWDN.js";
 import "../chunk-BBMTVAE3.js";
 import "../chunk-5YEUPUV4.js";
-import "../chunk-Q7J2SQJ6.js";
+import "../chunk-NO3M2AFM.js";
 import "../chunk-YYB5PMTK.js";
-import "../chunk-BRZR76TS.js";
+import "../chunk-NJFJWQNN.js";
 import "../chunk-V3W3SATA.js";
 import "../chunk-JY5GAZYC.js";
 import "../chunk-FXU7JOXK.js";
-import "../chunk-BRIZ6OZ3.js";
+import "../chunk-QMSEL5YS.js";
 import "../chunk-HSGBZSCA.js";
 import "../chunk-JKKZGDLP.js";
 import "../chunk-MLKGABMK.js";

package/dist/{git-staleness-I6WT7EXV.js → git-staleness-S4NDR7NX.js}

@@ -1,16 +1,16 @@
 import {
   getClient
-} from "./chunk-HLU52KTO.js";
+} from "./chunk-BRLS5OLZ.js";
 import "./chunk-TKDITWDN.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-5YEUPUV4.js";
-import "./chunk-Q7J2SQJ6.js";
+import "./chunk-NO3M2AFM.js";
 import "./chunk-YYB5PMTK.js";
-import "./chunk-BRZR76TS.js";
+import "./chunk-NJFJWQNN.js";
 import "./chunk-V3W3SATA.js";
 import "./chunk-JY5GAZYC.js";
 import "./chunk-FXU7JOXK.js";
-import "./chunk-BRIZ6OZ3.js";
+import "./chunk-QMSEL5YS.js";
 import "./chunk-HSGBZSCA.js";
 import "./chunk-JKKZGDLP.js";
 import "./chunk-MLKGABMK.js";

package/dist/{global-procedures-3RMO6C3C.js → global-procedures-ZOFTOXIR.js}

@@ -3,19 +3,19 @@ import {
   getGlobalProceduresBlock,
   loadGlobalProcedures,
   storeGlobalProcedure
-} from "./chunk-WP2TGH5R.js";
-import "./chunk-3BAGFZFN.js";
-import "./chunk-HLU52KTO.js";
+} from "./chunk-52TIQJEQ.js";
+import "./chunk-HHGOCBVQ.js";
+import "./chunk-BRLS5OLZ.js";
 import "./chunk-TKDITWDN.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-5YEUPUV4.js";
-import "./chunk-Q7J2SQJ6.js";
+import "./chunk-NO3M2AFM.js";
 import "./chunk-YYB5PMTK.js";
-import "./chunk-BRZR76TS.js";
+import "./chunk-NJFJWQNN.js";
 import "./chunk-V3W3SATA.js";
 import "./chunk-JY5GAZYC.js";
 import "./chunk-FXU7JOXK.js";
-import "./chunk-BRIZ6OZ3.js";
+import "./chunk-QMSEL5YS.js";
 import "./chunk-HSGBZSCA.js";
 import "./chunk-JKKZGDLP.js";
 import "./chunk-MLKGABMK.js";

package/dist/gotrue-session-ODZ2ERJX.js

@@ -0,0 +1,25 @@
+import {
+  clearSession,
+  decodeJwt,
+  getAuthHeader,
+  getSession,
+  getSessionInfo,
+  isExpired,
+  login,
+  refreshSession,
+  saveSession,
+  storeToken
+} from "./chunk-NUTZJZKW.js";
+import "./chunk-MLKGABMK.js";
+export {
+  clearSession,
+  decodeJwt,
+  getAuthHeader,
+  getSession,
+  getSessionInfo,
+  isExpired,
+  login,
+  refreshSession,
+  saveSession,
+  storeToken
+};