@askexenow/exe-os 0.9.37 → 0.9.39

package/dist/bin/exe-new-employee.js

@@ -302,7 +302,8 @@ function loadEmployeesSync(employeesPath = EMPLOYEES_PATH) {
   }
 }
 function addEmployee(employees, employee) {
-  const normalized = { ...employee, name: employee.name.toLowerCase() };
+  const { systemPrompt: _legacyPrompt, ...rest } = employee;
+  const normalized = { ...rest, name: employee.name.toLowerCase() };
   if (employees.some((e) => e.name.toLowerCase() === normalized.name)) {
     throw new Error(`Employee '${normalized.name}' already exists`);
   }
@@ -1034,6 +1035,9 @@ function ensureDir() {
 function identityPath(agentId) {
   return path8.join(IDENTITY_DIR2, `${agentId}.md`);
 }
+function sanitizeIdentityBody(body) {
+  return body.replace(/<!--[\s\S]*?-->/g, "").trim();
+}
 function parseFrontmatter(raw) {
   const match = raw.match(/^---\n([\s\S]*?)\n---\n([\s\S]*)$/);
   if (!match) {
@@ -1046,11 +1050,11 @@ function parseFrontmatter(raw) {
         created_by: "system",
         updated_at: (/* @__PURE__ */ new Date()).toISOString()
       },
-      body: raw
+      body: sanitizeIdentityBody(raw)
     };
   }
   const yamlStr = match[1];
-  const body = match[2].trim();
+  const body = sanitizeIdentityBody(match[2]);
   const fm = {};
   for (const line of yamlStr.split("\n")) {
     const kv = line.match(/^(\w+):\s*(.+)$/);
@@ -1115,7 +1119,9 @@ function listIdentities() {
     const summary = lines[0]?.trim().slice(0, 120) ?? identity.frontmatter.title;
     results.push({
       agentId,
-      title: `${identity.frontmatter.title} (${identity.frontmatter.role.toUpperCase()})`,
+      // User-facing/team-facing title only. `frontmatter.role` is internal
+      // routing metadata and must not leak as an external title.
+      title: identity.frontmatter.title,
       summary
     });
   }
@@ -1256,6 +1262,7 @@ var installer_exports = {};
 __export(installer_exports, {
   cleanOldShellFunctions: () => cleanOldShellFunctions,
   copySlashCommands: () => copySlashCommands,
+  detectMcpNameCollisions: () => detectMcpNameCollisions,
   installStatusLine: () => installStatusLine,
   mergeHooks: () => mergeHooks,
   registerMcpServer: () => registerMcpServer,
@@ -1341,6 +1348,60 @@ name: ${skillName}
   await writeFile3(destPath, content);
   return true;
 }
+function readJsonFile(filePath) {
+  try {
+    return JSON.parse(readFileSync9(filePath, "utf-8"));
+  } catch {
+    return null;
+  }
+}
+function findAncestorMcpJsons(startDir, homeDir) {
+  const files = [];
+  let dir = path11.resolve(startDir);
+  const root = path11.parse(dir).root;
+  const stop = path11.resolve(homeDir);
+  while (dir !== root) {
+    const candidate = path11.join(dir, ".mcp.json");
+    if (existsSync11(candidate)) files.push(candidate);
+    if (dir === stop) break;
+    dir = path11.dirname(dir);
+  }
+  return files;
+}
+function pathApplies(projectPath, cwd) {
+  const project = path11.resolve(projectPath);
+  const current = path11.resolve(cwd);
+  return current === project || current.startsWith(project + path11.sep);
+}
+function detectMcpNameCollisions(homeDir = os7.homedir(), cwd = process.cwd()) {
+  const claudeJsonPath = path11.join(homeDir, ".claude.json");
+  if (!existsSync11(claudeJsonPath)) return [];
+  const claudeJson = readJsonFile(claudeJsonPath);
+  if (!claudeJson?.projects) return [];
+  const collisions = [];
+  const mcpJsons = findAncestorMcpJsons(cwd, homeDir);
+  if (mcpJsons.length === 0) return [];
+  for (const [projectPath, projectConfig] of Object.entries(claudeJson.projects)) {
+    if (!pathApplies(projectPath, cwd)) continue;
+    const projectServerNames = new Set(Object.keys(projectConfig.mcpServers ?? {}));
+    if (projectServerNames.size === 0) continue;
+    const enabled = new Set(projectConfig.enabledMcpjsonServers ?? []);
+    for (const mcpJsonPath of mcpJsons) {
+      const mcpJson = readJsonFile(mcpJsonPath);
+      const mcpServerNames = Object.keys(mcpJson?.mcpServers ?? {});
+      for (const serverName of mcpServerNames) {
+        if (!projectServerNames.has(serverName)) continue;
+        collisions.push({
+          mcpJsonPath,
+          projectPath,
+          serverName,
+          disabledInMcpJson: !enabled.has(serverName)
+        });
+      }
+    }
+  }
+  return collisions;
+}
 async function registerMcpServer(packageRoot, homeDir = os7.homedir()) {
   const claudeJsonPath = path11.join(homeDir, ".claude.json");
   let claudeJson = {};
@@ -1369,12 +1430,26 @@ async function registerMcpServer(packageRoot, homeDir = os7.homedir()) {
   if (osMatches) {
     await cleanSettingsJsonMcp(path11.join(homeDir, ".claude", "settings.json"));
     await migratePermissionsToExeOs(path11.join(homeDir, ".claude", "settings.json"));
+    const collisions2 = detectMcpNameCollisions(homeDir, packageRoot).filter((c) => c.serverName === MCP_PRIMARY_KEY || c.serverName === MCP_LEGACY_KEY);
+    for (const c of collisions2) {
+      process.stderr.write(
+        `exe-os: WARNING Claude Code MCP name collision: ${c.serverName} exists in ${c.mcpJsonPath} and ~/.claude.json project ${c.projectPath}. Remove or rename the .mcp.json entry if tools do not surface.
+`
+      );
+    }
     return false;
   }
   claudeJson.mcpServers[MCP_PRIMARY_KEY] = newEntry;
   await writeFile3(claudeJsonPath, JSON.stringify(claudeJson, null, 2) + "\n");
   await cleanSettingsJsonMcp(path11.join(homeDir, ".claude", "settings.json"));
   await migratePermissionsToExeOs(path11.join(homeDir, ".claude", "settings.json"));
+  const collisions = detectMcpNameCollisions(homeDir, packageRoot).filter((c) => c.serverName === MCP_PRIMARY_KEY || c.serverName === MCP_LEGACY_KEY);
+  for (const c of collisions) {
+    process.stderr.write(
+      `exe-os: WARNING Claude Code MCP name collision: ${c.serverName} exists in ${c.mcpJsonPath} and ~/.claude.json project ${c.projectPath}. Remove or rename the .mcp.json entry if tools do not surface.
+`
+    );
+  }
   return true;
 }
 async function cleanSettingsJsonMcp(settingsPath) {
@@ -1676,8 +1751,6 @@ async function mergeHooks(packageRoot, homeDir = os7.homedir()) {
     "purge_document",
     "rerank_documents",
     "set_document_importance",
-    "create_wiki_page",
-    "update_wiki_page",
     "get_wiki_page",
     "list_wiki_pages",
     // System
@@ -2382,7 +2455,7 @@ var PLATFORM_PROCEDURES = [
     title: "MCP tools \u2014 wiki, documents, and content",
     domain: "tool-use",
     priority: "p1",
-    content: "create_wiki_page: create a wiki page in exe-wiki. list_wiki_pages: browse wiki pages. get_wiki_page: read a wiki page. update_wiki_page: edit a wiki page. ingest_document: import a file (PDF, MD, etc.) into memory as chunks. list_documents: browse ingested documents by workspace. purge_document: remove a document and its memory chunks. set_document_importance: adjust chunk importance scores. rerank_documents: re-score document relevance for a query."
+    content: "wiki: read/list wiki pages only. Direct wiki write tools are removed; wiki updates flow through raw-data ingestion/projection into the curated wiki store. Legacy aliases: list_wiki_pages/get_wiki_page. crm: read/list/get CRM records from exe-db. raw_data: read capped raw landing-pad events from exe-db with payload opt-in. ingest_document: import a file (PDF, MD, etc.) into memory as chunks. list_documents: browse ingested documents by workspace. purge_document: remove a document and its memory chunks. set_document_importance: adjust chunk importance scores. rerank_documents: re-score document relevance for a query."
   },
   {
     title: "MCP tools \u2014 system, operations, and admin",
@@ -2400,7 +2473,7 @@ var PLATFORM_PROCEDURES = [
     title: "MCP tools \u2014 advanced (triggers, skills, orchestration)",
     domain: "tool-use",
     priority: "p1",
-    content: "create_trigger: set up a scheduled recurring agent job (cron). list_triggers: view active triggers. load_skill: load a slash-command skill dynamically. apply_starter_pack: import a pre-built behavior + identity pack for a role. export_orchestration: export full org state (tasks, behaviors, identities) as portable JSON. import_orchestration: import org state into a new instance. deploy_client: deploy a customer client instance. query_company_brain: unified RAG query across all company knowledge. create_reminder: set a text reminder (shown in boot brief). list_reminders: view pending reminders. complete_reminder: mark a reminder done. global_procedure: manage Layer 0 procedures (actions: store, list, deactivate). Legacy aliases: store_global_procedure, list_global_procedures, deactivate_global_procedure."
+    content: "create_trigger: set up a scheduled recurring agent job (cron). list_triggers: view active triggers. load_skill: load a slash-command skill dynamically. apply_starter_pack: import a pre-built behavior + identity pack for a role. export_orchestration: export full org state (tasks, behaviors, identities) as portable JSON. import_orchestration: import org state into a new instance. deploy_client: deploy a customer client instance. query_company_brain: unified RAG query across all company knowledge. create_reminder: set a text reminder (shown in boot brief). list_reminders: view pending reminders. complete_reminder: mark a reminder done. global_procedure: manage customer-owned company procedures (Layer 0; actions: store, list, deactivate). Legacy aliases: store_global_procedure, list_global_procedures, deactivate_global_procedure."
   }
 ];
 var PLATFORM_PROCEDURE_TITLES = new Set(
@@ -3112,11 +3185,12 @@ async function main() {
     );
     process.exit(1);
   }
+  const rolePrompt = template ? personalizePrompt(template.systemPrompt, template.name, name) : buildCustomEmployeePrompt(name, "specialist");
   if (template) {
+    const { systemPrompt: _templatePrompt, ...templateMeta } = template;
     newEmployee = {
-      ...template,
+      ...templateMeta,
       name,
-      systemPrompt: personalizePrompt(template.systemPrompt, template.name, name),
       createdAt: (/* @__PURE__ */ new Date()).toISOString(),
       templateName: effectiveTemplate,
       templateVersion: TEMPLATE_VERSION
@@ -3125,7 +3199,6 @@ async function main() {
     newEmployee = {
       name,
       role: "specialist",
-      systemPrompt: buildCustomEmployeePrompt(name, "specialist"),
       createdAt: (/* @__PURE__ */ new Date()).toISOString(),
       templateName: "custom",
       templateVersion: TEMPLATE_VERSION
@@ -3160,13 +3233,26 @@ async function main() {
     };
     const templateKey = roleMap[effectiveTemplate] ?? null;
     const identityTemplate = templateKey ? getIdentityTemplate(templateKey) : null;
+    const idPath = identityPath2(name);
+    const dir = path12.dirname(idPath);
+    if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
     if (identityTemplate) {
-      const idPath = identityPath2(name);
-      const dir = path12.dirname(idPath);
-      if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
       const content = identityTemplate.replace(/^agent_id: \w+/m, `agent_id: ${name}`);
       fs.writeFileSync(idPath, content, "utf-8");
       console.log(`Identity doc written: ~/.exe-os/identity/${name}.md`);
+    } else if (!fs.existsSync(idPath)) {
+      const content = `---
+role: specialist
+title: Specialist
+agent_id: ${name}
+org_level: specialist
+created_by: exe-new-employee
+updated_at: ${(/* @__PURE__ */ new Date()).toISOString()}
+---
+
+${rolePrompt}`;
+      fs.writeFileSync(idPath, content, "utf-8");
+      console.log(`Identity doc written: ~/.exe-os/identity/${name}.md`);
     }
   } catch {
   }

package/dist/bin/exe-pending-messages.js

@@ -3669,7 +3669,7 @@ __export(shard_manager_exports, {
   shardExists: () => shardExists
 });
 import path13 from "path";
-import { existsSync as existsSync12, mkdirSync as mkdirSync5, readdirSync as readdirSync2 } from "fs";
+import { existsSync as existsSync12, mkdirSync as mkdirSync5, readdirSync as readdirSync2, renameSync as renameSync4, statSync as statSync2 } from "fs";
 import { createClient as createClient2 } from "@libsql/client";
 function initShardManager(encryptionKey) {
   _encryptionKey = encryptionKey;
@@ -3691,7 +3691,7 @@ function getShardClient(projectName) {
   if (!_encryptionKey) {
     throw new Error("Shard manager not initialized. Call initShardManager() first.");
   }
-  const safeName = projectName.replace(/[^a-zA-Z0-9_-]/g, "_");
+  const safeName = safeShardName(projectName);
   if (!safeName || safeName === "unknown") {
     throw new Error(`Invalid project name for shard: "${projectName}" (resolved to "${safeName}")`);
   }
@@ -3713,9 +3713,12 @@ function getShardClient(projectName) {
   return client;
 }
 function shardExists(projectName) {
-  const safeName = projectName.replace(/[^a-zA-Z0-9_-]/g, "_");
+  const safeName = safeShardName(projectName);
   return existsSync12(path13.join(SHARDS_DIR, `${safeName}.db`));
 }
+function safeShardName(projectName) {
+  return projectName.replace(/[^a-zA-Z0-9_-]/g, "_");
+}
 function listShards() {
   if (!existsSync12(SHARDS_DIR)) return [];
   return readdirSync2(SHARDS_DIR).filter((f) => f.endsWith(".db")).map((f) => f.replace(".db", ""));
@@ -3809,7 +3812,8 @@ async function ensureShardSchema(client) {
     "ALTER TABLE memories ADD COLUMN token_cost REAL",
     "ALTER TABLE memories ADD COLUMN audience TEXT",
     "ALTER TABLE memories ADD COLUMN language_type TEXT",
-    "ALTER TABLE memories ADD COLUMN parent_memory_id TEXT"
+    "ALTER TABLE memories ADD COLUMN parent_memory_id TEXT",
+    "ALTER TABLE memories ADD COLUMN deleted_at TEXT"
   ]) {
     try {
       await client.execute(col);
@@ -3905,9 +3909,32 @@ async function ensureShardSchema(client) {
   }
 }
 async function getReadyShardClient(projectName) {
-  const client = getShardClient(projectName);
-  await ensureShardSchema(client);
-  return client;
+  const safeName = safeShardName(projectName);
+  let client = getShardClient(projectName);
+  try {
+    await ensureShardSchema(client);
+    return client;
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    if (!/SQLITE_NOTADB|file is not a database/i.test(message)) throw err;
+    client.close();
+    _shards.delete(safeName);
+    _shardLastAccess.delete(safeName);
+    const dbPath = path13.join(SHARDS_DIR, `${safeName}.db`);
+    if (existsSync12(dbPath)) {
+      const stat = statSync2(dbPath);
+      const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
+      const archivedPath = path13.join(SHARDS_DIR, `${safeName}.db.broken-${stamp}`);
+      renameSync4(dbPath, archivedPath);
+      process.stderr.write(
+        `[shard-manager] Archived unreadable shard ${safeName}: ${archivedPath} (${stat.size} bytes, mtime ${stat.mtime.toISOString()})
+`
+      );
+    }
+    client = getShardClient(projectName);
+    await ensureShardSchema(client);
+    return client;
+  }
 }
 function evictLRU() {
   let oldest = null;
@@ -4128,7 +4155,7 @@ var init_platform_procedures = __esm({
         title: "MCP tools \u2014 wiki, documents, and content",
         domain: "tool-use",
         priority: "p1",
-        content: "create_wiki_page: create a wiki page in exe-wiki. list_wiki_pages: browse wiki pages. get_wiki_page: read a wiki page. update_wiki_page: edit a wiki page. ingest_document: import a file (PDF, MD, etc.) into memory as chunks. list_documents: browse ingested documents by workspace. purge_document: remove a document and its memory chunks. set_document_importance: adjust chunk importance scores. rerank_documents: re-score document relevance for a query."
+        content: "wiki: read/list wiki pages only. Direct wiki write tools are removed; wiki updates flow through raw-data ingestion/projection into the curated wiki store. Legacy aliases: list_wiki_pages/get_wiki_page. crm: read/list/get CRM records from exe-db. raw_data: read capped raw landing-pad events from exe-db with payload opt-in. ingest_document: import a file (PDF, MD, etc.) into memory as chunks. list_documents: browse ingested documents by workspace. purge_document: remove a document and its memory chunks. set_document_importance: adjust chunk importance scores. rerank_documents: re-score document relevance for a query."
       },
       {
         title: "MCP tools \u2014 system, operations, and admin",
@@ -4146,7 +4173,7 @@ var init_platform_procedures = __esm({
         title: "MCP tools \u2014 advanced (triggers, skills, orchestration)",
         domain: "tool-use",
         priority: "p1",
-        content: "create_trigger: set up a scheduled recurring agent job (cron). list_triggers: view active triggers. load_skill: load a slash-command skill dynamically. apply_starter_pack: import a pre-built behavior + identity pack for a role. export_orchestration: export full org state (tasks, behaviors, identities) as portable JSON. import_orchestration: import org state into a new instance. deploy_client: deploy a customer client instance. query_company_brain: unified RAG query across all company knowledge. create_reminder: set a text reminder (shown in boot brief). list_reminders: view pending reminders. complete_reminder: mark a reminder done. global_procedure: manage Layer 0 procedures (actions: store, list, deactivate). Legacy aliases: store_global_procedure, list_global_procedures, deactivate_global_procedure."
+        content: "create_trigger: set up a scheduled recurring agent job (cron). list_triggers: view active triggers. load_skill: load a slash-command skill dynamically. apply_starter_pack: import a pre-built behavior + identity pack for a role. export_orchestration: export full org state (tasks, behaviors, identities) as portable JSON. import_orchestration: import org state into a new instance. deploy_client: deploy a customer client instance. query_company_brain: unified RAG query across all company knowledge. create_reminder: set a text reminder (shown in boot brief). list_reminders: view pending reminders. complete_reminder: mark a reminder done. global_procedure: manage customer-owned company procedures (Layer 0; actions: store, list, deactivate). Legacy aliases: store_global_procedure, list_global_procedures, deactivate_global_procedure."
       }
     ];
     PLATFORM_PROCEDURE_TITLES = new Set(

package/dist/bin/exe-pending-notifications.js

@@ -3735,7 +3735,7 @@ __export(shard_manager_exports, {
   shardExists: () => shardExists
 });
 import path14 from "path";
-import { existsSync as existsSync13, mkdirSync as mkdirSync5, readdirSync as readdirSync3 } from "fs";
+import { existsSync as existsSync13, mkdirSync as mkdirSync5, readdirSync as readdirSync3, renameSync as renameSync4, statSync as statSync2 } from "fs";
 import { createClient as createClient2 } from "@libsql/client";
 function initShardManager(encryptionKey) {
   _encryptionKey = encryptionKey;
@@ -3757,7 +3757,7 @@ function getShardClient(projectName) {
   if (!_encryptionKey) {
     throw new Error("Shard manager not initialized. Call initShardManager() first.");
   }
-  const safeName = projectName.replace(/[^a-zA-Z0-9_-]/g, "_");
+  const safeName = safeShardName(projectName);
   if (!safeName || safeName === "unknown") {
     throw new Error(`Invalid project name for shard: "${projectName}" (resolved to "${safeName}")`);
   }
@@ -3779,9 +3779,12 @@ function getShardClient(projectName) {
   return client;
 }
 function shardExists(projectName) {
-  const safeName = projectName.replace(/[^a-zA-Z0-9_-]/g, "_");
+  const safeName = safeShardName(projectName);
   return existsSync13(path14.join(SHARDS_DIR, `${safeName}.db`));
 }
+function safeShardName(projectName) {
+  return projectName.replace(/[^a-zA-Z0-9_-]/g, "_");
+}
 function listShards() {
   if (!existsSync13(SHARDS_DIR)) return [];
   return readdirSync3(SHARDS_DIR).filter((f) => f.endsWith(".db")).map((f) => f.replace(".db", ""));
@@ -3875,7 +3878,8 @@ async function ensureShardSchema(client) {
     "ALTER TABLE memories ADD COLUMN token_cost REAL",
     "ALTER TABLE memories ADD COLUMN audience TEXT",
     "ALTER TABLE memories ADD COLUMN language_type TEXT",
-    "ALTER TABLE memories ADD COLUMN parent_memory_id TEXT"
+    "ALTER TABLE memories ADD COLUMN parent_memory_id TEXT",
+    "ALTER TABLE memories ADD COLUMN deleted_at TEXT"
   ]) {
     try {
       await client.execute(col);
@@ -3971,9 +3975,32 @@ async function ensureShardSchema(client) {
   }
 }
 async function getReadyShardClient(projectName) {
-  const client = getShardClient(projectName);
-  await ensureShardSchema(client);
-  return client;
+  const safeName = safeShardName(projectName);
+  let client = getShardClient(projectName);
+  try {
+    await ensureShardSchema(client);
+    return client;
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    if (!/SQLITE_NOTADB|file is not a database/i.test(message)) throw err;
+    client.close();
+    _shards.delete(safeName);
+    _shardLastAccess.delete(safeName);
+    const dbPath = path14.join(SHARDS_DIR, `${safeName}.db`);
+    if (existsSync13(dbPath)) {
+      const stat = statSync2(dbPath);
+      const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
+      const archivedPath = path14.join(SHARDS_DIR, `${safeName}.db.broken-${stamp}`);
+      renameSync4(dbPath, archivedPath);
+      process.stderr.write(
+        `[shard-manager] Archived unreadable shard ${safeName}: ${archivedPath} (${stat.size} bytes, mtime ${stat.mtime.toISOString()})
+`
+      );
+    }
+    client = getShardClient(projectName);
+    await ensureShardSchema(client);
+    return client;
+  }
 }
 function evictLRU() {
   let oldest = null;
@@ -4194,7 +4221,7 @@ var init_platform_procedures = __esm({
         title: "MCP tools \u2014 wiki, documents, and content",
         domain: "tool-use",
         priority: "p1",
-        content: "create_wiki_page: create a wiki page in exe-wiki. list_wiki_pages: browse wiki pages. get_wiki_page: read a wiki page. update_wiki_page: edit a wiki page. ingest_document: import a file (PDF, MD, etc.) into memory as chunks. list_documents: browse ingested documents by workspace. purge_document: remove a document and its memory chunks. set_document_importance: adjust chunk importance scores. rerank_documents: re-score document relevance for a query."
+        content: "wiki: read/list wiki pages only. Direct wiki write tools are removed; wiki updates flow through raw-data ingestion/projection into the curated wiki store. Legacy aliases: list_wiki_pages/get_wiki_page. crm: read/list/get CRM records from exe-db. raw_data: read capped raw landing-pad events from exe-db with payload opt-in. ingest_document: import a file (PDF, MD, etc.) into memory as chunks. list_documents: browse ingested documents by workspace. purge_document: remove a document and its memory chunks. set_document_importance: adjust chunk importance scores. rerank_documents: re-score document relevance for a query."
       },
       {
         title: "MCP tools \u2014 system, operations, and admin",
@@ -4212,7 +4239,7 @@ var init_platform_procedures = __esm({
         title: "MCP tools \u2014 advanced (triggers, skills, orchestration)",
         domain: "tool-use",
         priority: "p1",
-        content: "create_trigger: set up a scheduled recurring agent job (cron). list_triggers: view active triggers. load_skill: load a slash-command skill dynamically. apply_starter_pack: import a pre-built behavior + identity pack for a role. export_orchestration: export full org state (tasks, behaviors, identities) as portable JSON. import_orchestration: import org state into a new instance. deploy_client: deploy a customer client instance. query_company_brain: unified RAG query across all company knowledge. create_reminder: set a text reminder (shown in boot brief). list_reminders: view pending reminders. complete_reminder: mark a reminder done. global_procedure: manage Layer 0 procedures (actions: store, list, deactivate). Legacy aliases: store_global_procedure, list_global_procedures, deactivate_global_procedure."
+        content: "create_trigger: set up a scheduled recurring agent job (cron). list_triggers: view active triggers. load_skill: load a slash-command skill dynamically. apply_starter_pack: import a pre-built behavior + identity pack for a role. export_orchestration: export full org state (tasks, behaviors, identities) as portable JSON. import_orchestration: import org state into a new instance. deploy_client: deploy a customer client instance. query_company_brain: unified RAG query across all company knowledge. create_reminder: set a text reminder (shown in boot brief). list_reminders: view pending reminders. complete_reminder: mark a reminder done. global_procedure: manage customer-owned company procedures (Layer 0; actions: store, list, deactivate). Legacy aliases: store_global_procedure, list_global_procedures, deactivate_global_procedure."
       }
     ];
     PLATFORM_PROCEDURE_TITLES = new Set(

package/dist/bin/exe-pending-reviews.js

@@ -3774,7 +3774,7 @@ __export(shard_manager_exports, {
   shardExists: () => shardExists
 });
 import path15 from "path";
-import { existsSync as existsSync14, mkdirSync as mkdirSync5, readdirSync as readdirSync4 } from "fs";
+import { existsSync as existsSync14, mkdirSync as mkdirSync5, readdirSync as readdirSync4, renameSync as renameSync4, statSync as statSync2 } from "fs";
 import { createClient as createClient2 } from "@libsql/client";
 function initShardManager(encryptionKey) {
   _encryptionKey = encryptionKey;
@@ -3796,7 +3796,7 @@ function getShardClient(projectName) {
   if (!_encryptionKey) {
     throw new Error("Shard manager not initialized. Call initShardManager() first.");
   }
-  const safeName = projectName.replace(/[^a-zA-Z0-9_-]/g, "_");
+  const safeName = safeShardName(projectName);
   if (!safeName || safeName === "unknown") {
     throw new Error(`Invalid project name for shard: "${projectName}" (resolved to "${safeName}")`);
   }
@@ -3818,9 +3818,12 @@ function getShardClient(projectName) {
   return client;
 }
 function shardExists(projectName) {
-  const safeName = projectName.replace(/[^a-zA-Z0-9_-]/g, "_");
+  const safeName = safeShardName(projectName);
   return existsSync14(path15.join(SHARDS_DIR, `${safeName}.db`));
 }
+function safeShardName(projectName) {
+  return projectName.replace(/[^a-zA-Z0-9_-]/g, "_");
+}
 function listShards() {
   if (!existsSync14(SHARDS_DIR)) return [];
   return readdirSync4(SHARDS_DIR).filter((f) => f.endsWith(".db")).map((f) => f.replace(".db", ""));
@@ -3914,7 +3917,8 @@ async function ensureShardSchema(client) {
     "ALTER TABLE memories ADD COLUMN token_cost REAL",
     "ALTER TABLE memories ADD COLUMN audience TEXT",
     "ALTER TABLE memories ADD COLUMN language_type TEXT",
-    "ALTER TABLE memories ADD COLUMN parent_memory_id TEXT"
+    "ALTER TABLE memories ADD COLUMN parent_memory_id TEXT",
+    "ALTER TABLE memories ADD COLUMN deleted_at TEXT"
   ]) {
     try {
       await client.execute(col);
@@ -4010,9 +4014,32 @@ async function ensureShardSchema(client) {
   }
 }
 async function getReadyShardClient(projectName) {
-  const client = getShardClient(projectName);
-  await ensureShardSchema(client);
-  return client;
+  const safeName = safeShardName(projectName);
+  let client = getShardClient(projectName);
+  try {
+    await ensureShardSchema(client);
+    return client;
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    if (!/SQLITE_NOTADB|file is not a database/i.test(message)) throw err;
+    client.close();
+    _shards.delete(safeName);
+    _shardLastAccess.delete(safeName);
+    const dbPath = path15.join(SHARDS_DIR, `${safeName}.db`);
+    if (existsSync14(dbPath)) {
+      const stat = statSync2(dbPath);
+      const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
+      const archivedPath = path15.join(SHARDS_DIR, `${safeName}.db.broken-${stamp}`);
+      renameSync4(dbPath, archivedPath);
+      process.stderr.write(
+        `[shard-manager] Archived unreadable shard ${safeName}: ${archivedPath} (${stat.size} bytes, mtime ${stat.mtime.toISOString()})
+`
+      );
+    }
+    client = getShardClient(projectName);
+    await ensureShardSchema(client);
+    return client;
+  }
 }
 function evictLRU() {
   let oldest = null;
@@ -4233,7 +4260,7 @@ var init_platform_procedures = __esm({
         title: "MCP tools \u2014 wiki, documents, and content",
         domain: "tool-use",
         priority: "p1",
-        content: "create_wiki_page: create a wiki page in exe-wiki. list_wiki_pages: browse wiki pages. get_wiki_page: read a wiki page. update_wiki_page: edit a wiki page. ingest_document: import a file (PDF, MD, etc.) into memory as chunks. list_documents: browse ingested documents by workspace. purge_document: remove a document and its memory chunks. set_document_importance: adjust chunk importance scores. rerank_documents: re-score document relevance for a query."
+        content: "wiki: read/list wiki pages only. Direct wiki write tools are removed; wiki updates flow through raw-data ingestion/projection into the curated wiki store. Legacy aliases: list_wiki_pages/get_wiki_page. crm: read/list/get CRM records from exe-db. raw_data: read capped raw landing-pad events from exe-db with payload opt-in. ingest_document: import a file (PDF, MD, etc.) into memory as chunks. list_documents: browse ingested documents by workspace. purge_document: remove a document and its memory chunks. set_document_importance: adjust chunk importance scores. rerank_documents: re-score document relevance for a query."
       },
       {
         title: "MCP tools \u2014 system, operations, and admin",
@@ -4251,7 +4278,7 @@ var init_platform_procedures = __esm({
         title: "MCP tools \u2014 advanced (triggers, skills, orchestration)",
         domain: "tool-use",
         priority: "p1",
-        content: "create_trigger: set up a scheduled recurring agent job (cron). list_triggers: view active triggers. load_skill: load a slash-command skill dynamically. apply_starter_pack: import a pre-built behavior + identity pack for a role. export_orchestration: export full org state (tasks, behaviors, identities) as portable JSON. import_orchestration: import org state into a new instance. deploy_client: deploy a customer client instance. query_company_brain: unified RAG query across all company knowledge. create_reminder: set a text reminder (shown in boot brief). list_reminders: view pending reminders. complete_reminder: mark a reminder done. global_procedure: manage Layer 0 procedures (actions: store, list, deactivate). Legacy aliases: store_global_procedure, list_global_procedures, deactivate_global_procedure."
+        content: "create_trigger: set up a scheduled recurring agent job (cron). list_triggers: view active triggers. load_skill: load a slash-command skill dynamically. apply_starter_pack: import a pre-built behavior + identity pack for a role. export_orchestration: export full org state (tasks, behaviors, identities) as portable JSON. import_orchestration: import org state into a new instance. deploy_client: deploy a customer client instance. query_company_brain: unified RAG query across all company knowledge. create_reminder: set a text reminder (shown in boot brief). list_reminders: view pending reminders. complete_reminder: mark a reminder done. global_procedure: manage customer-owned company procedures (Layer 0; actions: store, list, deactivate). Legacy aliases: store_global_procedure, list_global_procedures, deactivate_global_procedure."
       }
     ];
     PLATFORM_PROCEDURE_TITLES = new Set(