@askexenow/exe-os 0.9.37 → 0.9.39

package/dist/bin/stack-update.js

@@ -0,0 +1,308 @@
+#!/usr/bin/env node
+
+// src/bin/stack-update.ts
+import { readFileSync as readFileSync2 } from "fs";
+
+// src/lib/is-main.ts
+import { realpathSync } from "fs";
+import { fileURLToPath } from "url";
+function isMainModule(importMetaUrl) {
+  if (process.argv[1] == null) return false;
+  if (process.argv[1].includes("mcp/server")) return false;
+  try {
+    const scriptPath = realpathSync(process.argv[1]);
+    const modulePath = realpathSync(fileURLToPath(importMetaUrl));
+    return scriptPath === modulePath;
+  } catch {
+    return importMetaUrl === `file://${process.argv[1]}` || importMetaUrl === new URL(process.argv[1], "file://").href;
+  }
+}
+
+// src/lib/stack-update.ts
+import { execFileSync } from "child_process";
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "fs";
+import http from "http";
+import https from "https";
+import path from "path";
+function parseStackManifest(raw) {
+  const parsed = JSON.parse(raw);
+  if (parsed.schemaVersion !== 1) throw new Error("Unsupported stack manifest schemaVersion");
+  if (!parsed.latest || !parsed.stacks || typeof parsed.stacks !== "object") {
+    throw new Error("Invalid stack manifest: latest and stacks are required");
+  }
+  for (const [version, release] of Object.entries(parsed.stacks)) {
+    if (!release.version) release.version = version;
+    if (!release.services || typeof release.services !== "object") {
+      throw new Error(`Invalid stack manifest: release ${version} has no services`);
+    }
+    for (const [serviceName, service] of Object.entries(release.services)) {
+      if (!service.image || !service.env) {
+        throw new Error(`Invalid stack manifest: ${version}.${serviceName} requires image and env`);
+      }
+    }
+  }
+  return parsed;
+}
+async function loadStackManifest(ref, fetchText = defaultFetchText) {
+  if (/^https?:\/\//.test(ref)) return parseStackManifest(await fetchText(ref));
+  return parseStackManifest(readFileSync(ref, "utf8"));
+}
+function parseEnv(raw) {
+  const env = /* @__PURE__ */ new Map();
+  for (const line of raw.split(/\r?\n/)) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#")) continue;
+    const idx = line.indexOf("=");
+    if (idx <= 0) continue;
+    env.set(line.slice(0, idx).trim(), line.slice(idx + 1));
+  }
+  return env;
+}
+function patchEnv(raw, updates) {
+  const seen = /* @__PURE__ */ new Set();
+  const lines = raw.replace(/\n$/, "").split(/\r?\n/);
+  const patched = lines.map((line) => {
+    const idx = line.indexOf("=");
+    if (idx <= 0 || line.trim().startsWith("#")) return line;
+    const key = line.slice(0, idx).trim();
+    if (!(key in updates)) return line;
+    seen.add(key);
+    return `${key}=${updates[key]}`;
+  });
+  for (const [key, value] of Object.entries(updates)) {
+    if (!seen.has(key)) patched.push(`${key}=${value}`);
+  }
+  return patched.join("\n").replace(/\n*$/, "\n");
+}
+function createStackUpdatePlan(manifest, envRaw, targetVersion) {
+  const version = targetVersion ?? manifest.latest;
+  const release = manifest.stacks[version];
+  if (!release) throw new Error(`Stack version ${version} not found in manifest`);
+  const env = parseEnv(envRaw);
+  const changes = [];
+  for (const [serviceName, service] of Object.entries(release.services)) {
+    const before = env.get(service.env);
+    if (before !== service.image) {
+      changes.push({ key: service.env, before, after: service.image, service: serviceName });
+    }
+  }
+  return {
+    manifest,
+    release,
+    targetVersion: version,
+    changes,
+    breakingChanges: release.breakingChanges ?? []
+  };
+}
+function assertBreakingChangesAllowed(plan, allowedIds) {
+  const required = plan.breakingChanges.filter((c) => c.requiresConfirmation !== false);
+  const missing = required.filter((c) => !allowedIds.includes(c.id));
+  if (missing.length > 0) {
+    const details = missing.map((c) => `- ${c.id}: ${c.title}
+  ${c.description}
+  Action: ${c.requiredAction ?? "Review release notes."}`).join("\n");
+    throw new Error(
+      `Stack ${plan.targetVersion} has breaking changes that require confirmation:
+${details}
+Re-run with --allow-breaking ${missing.map((c) => c.id).join(",")}`
+    );
+  }
+}
+async function runStackUpdate(options) {
+  const exec = options.exec ?? defaultExec;
+  const now = options.now ?? (() => /* @__PURE__ */ new Date());
+  const manifest = await loadStackManifest(options.manifestRef, options.fetchText);
+  const envRaw = readFileSync(options.envFile, "utf8");
+  const plan = createStackUpdatePlan(manifest, envRaw, options.targetVersion);
+  assertBreakingChangesAllowed(plan, options.allowedBreakingChangeIds ?? []);
+  const lockFile = options.lockFile ?? path.join(path.dirname(options.envFile), ".exe-stack-lock.json");
+  if (options.dryRun || plan.changes.length === 0) {
+    return { status: "planned", targetVersion: plan.targetVersion, changes: plan.changes, lockFile };
+  }
+  const backupDir = path.join(path.dirname(options.envFile), ".exe-stack-backups");
+  mkdirSync(backupDir, { recursive: true });
+  const stamp = now().toISOString().replace(/[:.]/g, "-");
+  const backupEnvFile = path.join(backupDir, `env-${stamp}.bak`);
+  writeFileSync(backupEnvFile, envRaw, { mode: 384 });
+  const updates = Object.fromEntries(plan.changes.map((c) => [c.key, c.after]));
+  const patched = patchEnv(envRaw, updates);
+  const tmp = `${options.envFile}.tmp-${process.pid}`;
+  writeFileSync(tmp, patched, { mode: 384 });
+  renameSync(tmp, options.envFile);
+  const composeArgs = ["compose", "--file", options.composeFile, "--env-file", options.envFile];
+  try {
+    exec("docker", [...composeArgs, "pull"]);
+    exec("docker", [...composeArgs, "up", "-d"]);
+    await verifyReleaseHealth(plan.release, options.healthRetries ?? 12, options.healthDelayMs ?? 5e3);
+    writeFileSync(lockFile, JSON.stringify({ stackVersion: plan.targetVersion, updatedAt: now().toISOString(), services: plan.release.services }, null, 2) + "\n");
+    return { status: "updated", targetVersion: plan.targetVersion, changes: plan.changes, backupEnvFile, lockFile };
+  } catch (err) {
+    writeFileSync(options.envFile, envRaw, { mode: 384 });
+    try {
+      exec("docker", [...composeArgs, "up", "-d"]);
+    } catch {
+    }
+    const reason = err instanceof Error ? err.message : String(err);
+    throw new Error(`Stack update failed and rollback was attempted: ${reason}`);
+  }
+}
+async function verifyReleaseHealth(release, retries, delayMs) {
+  for (const [serviceName, service] of Object.entries(release.services)) {
+    if (!service.healthUrl) continue;
+    await waitForHttpOk(service.healthUrl, retries, delayMs, serviceName);
+  }
+}
+async function waitForHttpOk(url, retries, delayMs, label) {
+  let last = "";
+  for (let i = 0; i < retries; i++) {
+    try {
+      const status = await httpStatus(url);
+      if (status >= 200 && status < 300) return;
+      last = `HTTP ${status}`;
+    } catch (err) {
+      last = err instanceof Error ? err.message : String(err);
+    }
+    if (i < retries - 1) await new Promise((resolve) => setTimeout(resolve, delayMs));
+  }
+  throw new Error(`Health check failed for ${label} (${url}): ${last}`);
+}
+function httpStatus(urlString) {
+  return new Promise((resolve, reject) => {
+    const url = new URL(urlString);
+    const mod = url.protocol === "https:" ? https : http;
+    const req = mod.request(url, { method: "GET", timeout: 5e3 }, (res) => {
+      res.resume();
+      resolve(res.statusCode ?? 0);
+    });
+    req.on("timeout", () => req.destroy(new Error("timeout")));
+    req.on("error", reject);
+    req.end();
+  });
+}
+function defaultExec(cmd, args, opts) {
+  execFileSync(cmd, args, { stdio: "inherit", cwd: opts?.cwd });
+}
+async function defaultFetchText(ref) {
+  const res = await fetch(ref);
+  if (!res.ok) throw new Error(`Failed to fetch ${ref}: HTTP ${res.status}`);
+  return res.text();
+}
+function defaultStackPaths() {
+  const cwdCompose = path.resolve("docker-compose.yml");
+  const cwdEnv = path.resolve(".env");
+  return {
+    composeFile: process.env.EXE_STACK_COMPOSE_FILE || (existsSync(cwdCompose) ? cwdCompose : "/opt/exe-stack/docker-compose.yml"),
+    envFile: process.env.EXE_STACK_ENV_FILE || (existsSync(cwdEnv) ? cwdEnv : "/opt/exe-stack/.env"),
+    manifestRef: process.env.EXE_STACK_MANIFEST || "https://updates.askexe.com/stack-manifest.json"
+  };
+}
+
+// src/bin/stack-update.ts
+function parseArgs(args) {
+  const defaults = defaultStackPaths();
+  const opts = {
+    manifestRef: defaults.manifestRef,
+    composeFile: defaults.composeFile,
+    envFile: defaults.envFile,
+    dryRun: false,
+    check: false,
+    yes: false,
+    allowedBreakingChangeIds: []
+  };
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    const next = () => args[++i] ?? "";
+    if (arg === "--manifest") opts.manifestRef = next();
+    else if (arg.startsWith("--manifest=")) opts.manifestRef = arg.split("=").slice(1).join("=");
+    else if (arg === "--target") opts.targetVersion = next();
+    else if (arg.startsWith("--target=")) opts.targetVersion = arg.split("=")[1];
+    else if (arg === "--compose-file") opts.composeFile = next();
+    else if (arg.startsWith("--compose-file=")) opts.composeFile = arg.split("=").slice(1).join("=");
+    else if (arg === "--env-file") opts.envFile = next();
+    else if (arg.startsWith("--env-file=")) opts.envFile = arg.split("=").slice(1).join("=");
+    else if (arg === "--lock-file") opts.lockFile = next();
+    else if (arg === "--dry-run") opts.dryRun = true;
+    else if (arg === "--check") opts.check = true;
+    else if (arg === "--yes" || arg === "-y") opts.yes = true;
+    else if (arg === "--allow-breaking") opts.allowedBreakingChangeIds.push(...next().split(",").map((s) => s.trim()).filter(Boolean));
+    else if (arg.startsWith("--allow-breaking=")) opts.allowedBreakingChangeIds.push(...arg.split("=")[1].split(",").map((s) => s.trim()).filter(Boolean));
+    else if (arg === "--help" || arg === "-h") {
+      printHelp();
+      process.exit(0);
+    } else {
+      throw new Error(`Unknown option: ${arg}`);
+    }
+  }
+  return opts;
+}
+function printHelp() {
+  console.log(`exe-os stack-update \u2014 update a self-hosted Exe OS stack from a pinned manifest
+
+Usage:
+  exe-os stack-update [--manifest <path-or-url>] [--target <version>] [--yes]
+
+Options:
+  --manifest <ref>           Stack manifest JSON path or URL (default: updates.askexe.com)
+  --target <version>         Stack version to install (default: manifest.latest)
+  --compose-file <path>      docker-compose.yml path (default: ./docker-compose.yml or /opt/exe-stack/docker-compose.yml)
+  --env-file <path>          .env path (default: ./.env or /opt/exe-stack/.env)
+  --lock-file <path>         Lock file path (default: beside .env)
+  --check                    Print available changes only
+  --dry-run                  Plan only; do not run Docker
+  --allow-breaking <ids>     Confirm breaking changes, comma-separated
+  -y, --yes                  Non-interactive confirmation
+`);
+}
+function printChanges(changes) {
+  if (changes.length === 0) {
+    console.log("\u2705 Stack already matches target manifest.");
+    return;
+  }
+  console.log("Planned image tag changes:");
+  for (const c of changes) {
+    console.log(`  - ${c.service}: ${c.key}`);
+    console.log(`      ${c.before ?? "<unset>"} \u2192 ${c.after}`);
+  }
+}
+function printBreaking(changes) {
+  if (changes.length === 0) return;
+  console.log("\nBreaking-change notices:");
+  for (const c of changes) {
+    console.log(`  - ${c.id}: ${c.title}`);
+    console.log(`    ${c.description}`);
+    if (c.requiredAction) console.log(`    Action: ${c.requiredAction}`);
+    if (c.expectedDowntimeMinutes) console.log(`    Expected downtime: ${c.expectedDowntimeMinutes} minutes`);
+  }
+}
+async function main() {
+  const opts = parseArgs(process.argv.slice(2));
+  const manifest = await loadStackManifest(opts.manifestRef);
+  const envRaw = readFileSync2(opts.envFile, "utf8");
+  const plan = createStackUpdatePlan(manifest, envRaw, opts.targetVersion);
+  console.log(`Exe OS stack target: ${plan.targetVersion}`);
+  console.log(`Manifest: ${opts.manifestRef}`);
+  console.log(`Compose:  ${opts.composeFile}`);
+  console.log(`Env:      ${opts.envFile}
+`);
+  printChanges(plan.changes);
+  printBreaking(plan.breakingChanges);
+  if (opts.check || opts.dryRun) return;
+  if (!opts.yes) {
+    console.error("\nRefusing to update without --yes. Re-run with --yes after reviewing the plan.");
+    process.exit(2);
+  }
+  const result = await runStackUpdate(opts);
+  console.log(`
+\u2705 Stack ${result.status}: ${result.targetVersion}`);
+  if (result.backupEnvFile) console.log(`Backup env: ${result.backupEnvFile}`);
+  console.log(`Lock file: ${result.lockFile}`);
+}
+if (isMainModule(import.meta.url)) {
+  main().catch((err) => {
+    console.error(err instanceof Error ? err.message : String(err));
+    process.exit(1);
+  });
+}
+export {
+  main as runStackUpdateCli
+};

package/dist/gateway/index.js

@@ -905,7 +905,8 @@ function isMultiInstance(agentName, employees) {
   return MULTI_INSTANCE_ROLES.has(emp.role.toLowerCase());
 }
 function addEmployee(employees, employee) {
-  const normalized = { ...employee, name: employee.name.toLowerCase() };
+  const { systemPrompt: _legacyPrompt, ...rest } = employee;
+  const normalized = { ...rest, name: employee.name.toLowerCase() };
   if (employees.some((e) => e.name.toLowerCase() === normalized.name)) {
     throw new Error(`Employee '${normalized.name}' already exists`);
   }
@@ -3907,7 +3908,7 @@ __export(shard_manager_exports, {
   shardExists: () => shardExists
 });
 import path8 from "path";
-import { existsSync as existsSync8, mkdirSync as mkdirSync2, readdirSync } from "fs";
+import { existsSync as existsSync8, mkdirSync as mkdirSync2, readdirSync, renameSync as renameSync3, statSync as statSync2 } from "fs";
 import { createClient as createClient2 } from "@libsql/client";
 function initShardManager(encryptionKey) {
   _encryptionKey = encryptionKey;
@@ -3929,7 +3930,7 @@ function getShardClient(projectName) {
   if (!_encryptionKey) {
     throw new Error("Shard manager not initialized. Call initShardManager() first.");
   }
-  const safeName = projectName.replace(/[^a-zA-Z0-9_-]/g, "_");
+  const safeName = safeShardName(projectName);
   if (!safeName || safeName === "unknown") {
     throw new Error(`Invalid project name for shard: "${projectName}" (resolved to "${safeName}")`);
   }
@@ -3951,9 +3952,12 @@ function getShardClient(projectName) {
   return client;
 }
 function shardExists(projectName) {
-  const safeName = projectName.replace(/[^a-zA-Z0-9_-]/g, "_");
+  const safeName = safeShardName(projectName);
   return existsSync8(path8.join(SHARDS_DIR, `${safeName}.db`));
 }
+function safeShardName(projectName) {
+  return projectName.replace(/[^a-zA-Z0-9_-]/g, "_");
+}
 function listShards() {
   if (!existsSync8(SHARDS_DIR)) return [];
   return readdirSync(SHARDS_DIR).filter((f) => f.endsWith(".db")).map((f) => f.replace(".db", ""));
@@ -4047,7 +4051,8 @@ async function ensureShardSchema(client) {
     "ALTER TABLE memories ADD COLUMN token_cost REAL",
     "ALTER TABLE memories ADD COLUMN audience TEXT",
     "ALTER TABLE memories ADD COLUMN language_type TEXT",
-    "ALTER TABLE memories ADD COLUMN parent_memory_id TEXT"
+    "ALTER TABLE memories ADD COLUMN parent_memory_id TEXT",
+    "ALTER TABLE memories ADD COLUMN deleted_at TEXT"
   ]) {
     try {
       await client.execute(col);
@@ -4143,9 +4148,32 @@ async function ensureShardSchema(client) {
   }
 }
 async function getReadyShardClient(projectName) {
-  const client = getShardClient(projectName);
-  await ensureShardSchema(client);
-  return client;
+  const safeName = safeShardName(projectName);
+  let client = getShardClient(projectName);
+  try {
+    await ensureShardSchema(client);
+    return client;
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    if (!/SQLITE_NOTADB|file is not a database/i.test(message)) throw err;
+    client.close();
+    _shards.delete(safeName);
+    _shardLastAccess.delete(safeName);
+    const dbPath = path8.join(SHARDS_DIR, `${safeName}.db`);
+    if (existsSync8(dbPath)) {
+      const stat = statSync2(dbPath);
+      const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
+      const archivedPath = path8.join(SHARDS_DIR, `${safeName}.db.broken-${stamp}`);
+      renameSync3(dbPath, archivedPath);
+      process.stderr.write(
+        `[shard-manager] Archived unreadable shard ${safeName}: ${archivedPath} (${stat.size} bytes, mtime ${stat.mtime.toISOString()})
+`
+      );
+    }
+    client = getShardClient(projectName);
+    await ensureShardSchema(client);
+    return client;
+  }
 }
 function evictLRU() {
   let oldest = null;
@@ -4366,7 +4394,7 @@ var init_platform_procedures = __esm({
         title: "MCP tools \u2014 wiki, documents, and content",
         domain: "tool-use",
         priority: "p1",
-        content: "create_wiki_page: create a wiki page in exe-wiki. list_wiki_pages: browse wiki pages. get_wiki_page: read a wiki page. update_wiki_page: edit a wiki page. ingest_document: import a file (PDF, MD, etc.) into memory as chunks. list_documents: browse ingested documents by workspace. purge_document: remove a document and its memory chunks. set_document_importance: adjust chunk importance scores. rerank_documents: re-score document relevance for a query."
+        content: "wiki: read/list wiki pages only. Direct wiki write tools are removed; wiki updates flow through raw-data ingestion/projection into the curated wiki store. Legacy aliases: list_wiki_pages/get_wiki_page. crm: read/list/get CRM records from exe-db. raw_data: read capped raw landing-pad events from exe-db with payload opt-in. ingest_document: import a file (PDF, MD, etc.) into memory as chunks. list_documents: browse ingested documents by workspace. purge_document: remove a document and its memory chunks. set_document_importance: adjust chunk importance scores. rerank_documents: re-score document relevance for a query."
       },
       {
         title: "MCP tools \u2014 system, operations, and admin",
@@ -4384,7 +4412,7 @@ var init_platform_procedures = __esm({
         title: "MCP tools \u2014 advanced (triggers, skills, orchestration)",
         domain: "tool-use",
         priority: "p1",
-        content: "create_trigger: set up a scheduled recurring agent job (cron). list_triggers: view active triggers. load_skill: load a slash-command skill dynamically. apply_starter_pack: import a pre-built behavior + identity pack for a role. export_orchestration: export full org state (tasks, behaviors, identities) as portable JSON. import_orchestration: import org state into a new instance. deploy_client: deploy a customer client instance. query_company_brain: unified RAG query across all company knowledge. create_reminder: set a text reminder (shown in boot brief). list_reminders: view pending reminders. complete_reminder: mark a reminder done. global_procedure: manage Layer 0 procedures (actions: store, list, deactivate). Legacy aliases: store_global_procedure, list_global_procedures, deactivate_global_procedure."
+        content: "create_trigger: set up a scheduled recurring agent job (cron). list_triggers: view active triggers. load_skill: load a slash-command skill dynamically. apply_starter_pack: import a pre-built behavior + identity pack for a role. export_orchestration: export full org state (tasks, behaviors, identities) as portable JSON. import_orchestration: import org state into a new instance. deploy_client: deploy a customer client instance. query_company_brain: unified RAG query across all company knowledge. create_reminder: set a text reminder (shown in boot brief). list_reminders: view pending reminders. complete_reminder: mark a reminder done. global_procedure: manage customer-owned company procedures (Layer 0; actions: store, list, deactivate). Legacy aliases: store_global_procedure, list_global_procedures, deactivate_global_procedure."
       }
     ];
     PLATFORM_PROCEDURE_TITLES = new Set(
@@ -6487,7 +6515,7 @@ __export(intercom_queue_exports, {
   queueIntercom: () => queueIntercom,
   readQueue: () => readQueue
 });
-import { readFileSync as readFileSync8, writeFileSync as writeFileSync5, renameSync as renameSync3, existsSync as existsSync10, mkdirSync as mkdirSync5 } from "fs";
+import { readFileSync as readFileSync8, writeFileSync as writeFileSync5, renameSync as renameSync4, existsSync as existsSync10, mkdirSync as mkdirSync5 } from "fs";
 import path11 from "path";
 import os8 from "os";
 function ensureDir() {
@@ -6506,7 +6534,7 @@ function writeQueue(queue) {
   ensureDir();
   const tmp = `${QUEUE_PATH}.tmp`;
   writeFileSync5(tmp, JSON.stringify(queue, null, 2));
-  renameSync3(tmp, QUEUE_PATH);
+  renameSync4(tmp, QUEUE_PATH);
 }
 function queueIntercom(targetSession, reason) {
   const queue = readQueue();
@@ -11536,6 +11564,24 @@ var MAX_BACKOFF_MS = 3e5;
 var BACKOFF_MULTIPLIER = 2;
 var JITTER_FACTOR = 0.25;
 var AUTH_DIR = join(homedir(), ".exe-os", "whatsapp-auth");
+function createBaileysLogger(accountName) {
+  const prefix = accountName ? `[whatsapp:${accountName}]` : "[whatsapp]";
+  let logger;
+  logger = {
+    level: "warn",
+    trace: () => {
+    },
+    debug: () => {
+    },
+    info: () => {
+    },
+    warn: (...args) => console.warn(prefix, ...args),
+    error: (...args) => console.error(prefix, ...args),
+    fatal: (...args) => console.error(prefix, ...args),
+    child: () => logger
+  };
+  return logger;
+}
 function calculateBackoff(retryCount) {
   const base = Math.min(
     INITIAL_BACKOFF_MS * BACKOFF_MULTIPLIER ** retryCount,
@@ -11551,6 +11597,7 @@ var WhatsAppAdapter = class {
   connected = false;
   abortController = null;
   authDir = AUTH_DIR;
+  baileysLogger = createBaileysLogger();
   // Resilience state
   retryCount = 0;
   disconnectedAt = 0;
@@ -11561,6 +11608,7 @@ var WhatsAppAdapter = class {
     const { makeWASocket, useMultiFileAuthState, fetchLatestBaileysVersion, DisconnectReason, makeCacheableSignalKeyStore } = baileys;
     const { state, saveCreds } = await useMultiFileAuthState(this.authDir);
     const { version } = await fetchLatestBaileysVersion();
+    this.baileysLogger = createBaileysLogger();
     this.abortController = new AbortController();
     let agent;
     const socksProxy = config2.credentials.socksProxy;
@@ -11579,8 +11627,9 @@ var WhatsAppAdapter = class {
     const sock = makeWASocket({
       auth: {
         creds: state.creds,
-        keys: makeCacheableSignalKeyStore(state.keys, void 0)
+        keys: makeCacheableSignalKeyStore(state.keys, this.baileysLogger)
       },
+      logger: this.baileysLogger,
       version,
       printQRInTerminal: true,
       browser: ["exe-os", "cli", "1.0"],

package/dist/hooks/bug-report-worker.js

@@ -594,7 +594,8 @@ function isMultiInstance(agentName, employees) {
   return MULTI_INSTANCE_ROLES.has(emp.role.toLowerCase());
 }
 function addEmployee(employees, employee) {
-  const normalized = { ...employee, name: employee.name.toLowerCase() };
+  const { systemPrompt: _legacyPrompt, ...rest } = employee;
+  const normalized = { ...rest, name: employee.name.toLowerCase() };
   if (employees.some((e) => e.name.toLowerCase() === normalized.name)) {
     throw new Error(`Employee '${normalized.name}' already exists`);
   }
@@ -3649,7 +3650,7 @@ __export(shard_manager_exports, {
   shardExists: () => shardExists
 });
 import path8 from "path";
-import { existsSync as existsSync8, mkdirSync as mkdirSync2, readdirSync } from "fs";
+import { existsSync as existsSync8, mkdirSync as mkdirSync2, readdirSync, renameSync as renameSync3, statSync as statSync2 } from "fs";
 import { createClient as createClient2 } from "@libsql/client";
 function initShardManager(encryptionKey) {
   _encryptionKey = encryptionKey;
@@ -3671,7 +3672,7 @@ function getShardClient(projectName) {
   if (!_encryptionKey) {
     throw new Error("Shard manager not initialized. Call initShardManager() first.");
   }
-  const safeName = projectName.replace(/[^a-zA-Z0-9_-]/g, "_");
+  const safeName = safeShardName(projectName);
   if (!safeName || safeName === "unknown") {
     throw new Error(`Invalid project name for shard: "${projectName}" (resolved to "${safeName}")`);
   }
@@ -3693,9 +3694,12 @@ function getShardClient(projectName) {
   return client;
 }
 function shardExists(projectName) {
-  const safeName = projectName.replace(/[^a-zA-Z0-9_-]/g, "_");
+  const safeName = safeShardName(projectName);
   return existsSync8(path8.join(SHARDS_DIR, `${safeName}.db`));
 }
+function safeShardName(projectName) {
+  return projectName.replace(/[^a-zA-Z0-9_-]/g, "_");
+}
 function listShards() {
   if (!existsSync8(SHARDS_DIR)) return [];
   return readdirSync(SHARDS_DIR).filter((f) => f.endsWith(".db")).map((f) => f.replace(".db", ""));
@@ -3789,7 +3793,8 @@ async function ensureShardSchema(client) {
     "ALTER TABLE memories ADD COLUMN token_cost REAL",
     "ALTER TABLE memories ADD COLUMN audience TEXT",
     "ALTER TABLE memories ADD COLUMN language_type TEXT",
-    "ALTER TABLE memories ADD COLUMN parent_memory_id TEXT"
+    "ALTER TABLE memories ADD COLUMN parent_memory_id TEXT",
+    "ALTER TABLE memories ADD COLUMN deleted_at TEXT"
   ]) {
     try {
       await client.execute(col);
@@ -3885,9 +3890,32 @@ async function ensureShardSchema(client) {
   }
 }
 async function getReadyShardClient(projectName) {
-  const client = getShardClient(projectName);
-  await ensureShardSchema(client);
-  return client;
+  const safeName = safeShardName(projectName);
+  let client = getShardClient(projectName);
+  try {
+    await ensureShardSchema(client);
+    return client;
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    if (!/SQLITE_NOTADB|file is not a database/i.test(message)) throw err;
+    client.close();
+    _shards.delete(safeName);
+    _shardLastAccess.delete(safeName);
+    const dbPath = path8.join(SHARDS_DIR, `${safeName}.db`);
+    if (existsSync8(dbPath)) {
+      const stat = statSync2(dbPath);
+      const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
+      const archivedPath = path8.join(SHARDS_DIR, `${safeName}.db.broken-${stamp}`);
+      renameSync3(dbPath, archivedPath);
+      process.stderr.write(
+        `[shard-manager] Archived unreadable shard ${safeName}: ${archivedPath} (${stat.size} bytes, mtime ${stat.mtime.toISOString()})
+`
+      );
+    }
+    client = getShardClient(projectName);
+    await ensureShardSchema(client);
+    return client;
+  }
 }
 function evictLRU() {
   let oldest = null;
@@ -4108,7 +4136,7 @@ var init_platform_procedures = __esm({
         title: "MCP tools \u2014 wiki, documents, and content",
         domain: "tool-use",
         priority: "p1",
-        content: "create_wiki_page: create a wiki page in exe-wiki. list_wiki_pages: browse wiki pages. get_wiki_page: read a wiki page. update_wiki_page: edit a wiki page. ingest_document: import a file (PDF, MD, etc.) into memory as chunks. list_documents: browse ingested documents by workspace. purge_document: remove a document and its memory chunks. set_document_importance: adjust chunk importance scores. rerank_documents: re-score document relevance for a query."
+        content: "wiki: read/list wiki pages only. Direct wiki write tools are removed; wiki updates flow through raw-data ingestion/projection into the curated wiki store. Legacy aliases: list_wiki_pages/get_wiki_page. crm: read/list/get CRM records from exe-db. raw_data: read capped raw landing-pad events from exe-db with payload opt-in. ingest_document: import a file (PDF, MD, etc.) into memory as chunks. list_documents: browse ingested documents by workspace. purge_document: remove a document and its memory chunks. set_document_importance: adjust chunk importance scores. rerank_documents: re-score document relevance for a query."
       },
       {
         title: "MCP tools \u2014 system, operations, and admin",
@@ -4126,7 +4154,7 @@ var init_platform_procedures = __esm({
         title: "MCP tools \u2014 advanced (triggers, skills, orchestration)",
         domain: "tool-use",
         priority: "p1",
-        content: "create_trigger: set up a scheduled recurring agent job (cron). list_triggers: view active triggers. load_skill: load a slash-command skill dynamically. apply_starter_pack: import a pre-built behavior + identity pack for a role. export_orchestration: export full org state (tasks, behaviors, identities) as portable JSON. import_orchestration: import org state into a new instance. deploy_client: deploy a customer client instance. query_company_brain: unified RAG query across all company knowledge. create_reminder: set a text reminder (shown in boot brief). list_reminders: view pending reminders. complete_reminder: mark a reminder done. global_procedure: manage Layer 0 procedures (actions: store, list, deactivate). Legacy aliases: store_global_procedure, list_global_procedures, deactivate_global_procedure."
+        content: "create_trigger: set up a scheduled recurring agent job (cron). list_triggers: view active triggers. load_skill: load a slash-command skill dynamically. apply_starter_pack: import a pre-built behavior + identity pack for a role. export_orchestration: export full org state (tasks, behaviors, identities) as portable JSON. import_orchestration: import org state into a new instance. deploy_client: deploy a customer client instance. query_company_brain: unified RAG query across all company knowledge. create_reminder: set a text reminder (shown in boot brief). list_reminders: view pending reminders. complete_reminder: mark a reminder done. global_procedure: manage customer-owned company procedures (Layer 0; actions: store, list, deactivate). Legacy aliases: store_global_procedure, list_global_procedures, deactivate_global_procedure."
       }
     ];
     PLATFORM_PROCEDURE_TITLES = new Set(
@@ -5120,7 +5148,7 @@ __export(intercom_queue_exports, {
   queueIntercom: () => queueIntercom,
   readQueue: () => readQueue
 });
-import { readFileSync as readFileSync7, writeFileSync as writeFileSync5, renameSync as renameSync3, existsSync as existsSync10, mkdirSync as mkdirSync4 } from "fs";
+import { readFileSync as readFileSync7, writeFileSync as writeFileSync5, renameSync as renameSync4, existsSync as existsSync10, mkdirSync as mkdirSync4 } from "fs";
 import path10 from "path";
 import os7 from "os";
 function ensureDir() {
@@ -5139,7 +5167,7 @@ function writeQueue(queue) {
   ensureDir();
   const tmp = `${QUEUE_PATH}.tmp`;
   writeFileSync5(tmp, JSON.stringify(queue, null, 2));
-  renameSync3(tmp, QUEUE_PATH);
+  renameSync4(tmp, QUEUE_PATH);
 }
 function queueIntercom(targetSession, reason) {
   const queue = readQueue();