@askexenow/exe-os 0.9.372 → 0.9.374

package/dist/chunk-SLLLOOEI.js

@@ -0,0 +1,103 @@
+import {
+  recordKillIntent
+} from "./chunk-V3WLC5TJ.js";
+
+// src/lib/pid-identity.ts
+import { execFileSync } from "child_process";
+var PID_IDENTITY_TOLERANCE_MS = 2e3;
+function parseLstart(raw) {
+  if (typeof raw !== "string") return null;
+  const trimmed = raw.trim();
+  if (!trimmed) return null;
+  const ms = Date.parse(trimmed);
+  return Number.isFinite(ms) ? ms : null;
+}
+function processStartedAt(pid) {
+  if (!Number.isInteger(pid) || pid <= 0) return null;
+  try {
+    return parseLstart(
+      execFileSync("ps", ["-o", "lstart=", "-p", String(pid)], { encoding: "utf8", timeout: 2e3 })
+    );
+  } catch {
+    return null;
+  }
+}
+function ownProcessStartedAt() {
+  return Date.now() - Math.round(process.uptime() * 1e3);
+}
+function sameProcessIdentity(expectedMs, actualMs, toleranceMs = PID_IDENTITY_TOLERANCE_MS) {
+  if (expectedMs === null || actualMs === null) return false;
+  return Math.abs(expectedMs - actualMs) <= toleranceMs;
+}
+function defaultIsAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function killIfSameProcess(pid, expectedStartedAtMs, signal, ctx) {
+  const isAlive = ctx.isAlive ?? defaultIsAlive;
+  const startedAt = ctx.startedAt ?? processStartedAt;
+  const kill = ctx.kill ?? ((p, s) => {
+    process.kill(p, s);
+  });
+  const record = ctx.record ?? recordKillIntent;
+  const log = ctx.log ?? ((m) => {
+    try {
+      process.stderr.write(m + "\n");
+    } catch {
+    }
+  });
+  const send = () => {
+    try {
+      record({ targetPid: pid, signal, sender: ctx.sender, reason: ctx.reason });
+    } catch {
+    }
+    try {
+      kill(pid, signal);
+    } catch {
+      return "skipped-dead";
+    }
+    return "sent";
+  };
+  if (expectedStartedAtMs === null) return send();
+  let actual;
+  try {
+    actual = startedAt(pid);
+  } catch {
+    actual = null;
+  }
+  if (actual === null) {
+    let alive;
+    try {
+      alive = isAlive(pid);
+    } catch {
+      alive = false;
+    }
+    if (!alive) return "skipped-dead";
+  }
+  if (!sameProcessIdentity(expectedStartedAtMs, actual)) {
+    log(
+      `[pid-identity] REFUSING ${signal} to PID ${pid} from ${ctx.sender}: start time changed (expected ${new Date(expectedStartedAtMs).toISOString()}, now ${actual === null ? "UNREADABLE" : new Date(actual).toISOString()}) \u2014 the PID was RECYCLED, this signal would have hit an innocent process. reason=${ctx.reason}`
+    );
+    try {
+      record({
+        targetPid: pid,
+        signal: `${signal}:REFUSED`,
+        sender: ctx.sender,
+        reason: `pid-identity-mismatch expected=${expectedStartedAtMs} actual=${actual ?? "null"} :: ${ctx.reason}`
+      });
+    } catch {
+    }
+    return "skipped-identity";
+  }
+  return send();
+}
+
+export {
+  processStartedAt,
+  ownProcessStartedAt,
+  killIfSameProcess
+};

package/dist/{chunk-5N4SG5NB.js → chunk-T35RCQFE.js}

@@ -1,12 +1,12 @@
 import {
   resolvePartnerIdentities
-} from "./chunk-PVEM537A.js";
+} from "./chunk-4YLBKEL5.js";
 import {
   OrgKeyPinConflictError,
   orgKeyPinConfirmation,
   pinOrgKey,
   readOrgKeyPin
-} from "./chunk-H37FSTF2.js";
+} from "./chunk-UBMZ3YQU.js";
 import {
   asOrgBillablePlan
 } from "./chunk-X2X3IGZU.js";
@@ -18,7 +18,7 @@ import {
 import {
   establishOrgMode,
   upsertOrgMembership
-} from "./chunk-CW2UCKHS.js";
+} from "./chunk-TADAO3HV.js";
 import {
   isValidX25519Recipient
 } from "./chunk-EEZOBN6X.js";

package/dist/{chunk-7V6M3QUS.js → chunk-T3QUKNLI.js}

@@ -1,7 +1,7 @@
 import {
   getIdentity,
   loadEmployeesSync
-} from "./chunk-5DCCKHDY.js";
+} from "./chunk-TAMDAOCU.js";
 
 // src/lib/drift-probes.ts
 var DRIFT_THRESHOLD = 80;

package/dist/{chunk-CW2UCKHS.js → chunk-TADAO3HV.js}

@@ -2,10 +2,10 @@ import {
   grantsRegistryStatus,
   listGrants,
   revokeGrant
-} from "./chunk-VV5EZZNT.js";
+} from "./chunk-HTBEVCO2.js";
 import {
   resolveExeDataDir
-} from "./chunk-JTB5V6BV.js";
+} from "./chunk-3SXHEQ7X.js";
 
 // src/lib/org-membership.ts
 import { existsSync as existsSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2, mkdirSync, renameSync, rmSync as rmSync2 } from "fs";

package/dist/{chunk-5DCCKHDY.js → chunk-TAMDAOCU.js}

@@ -1,15 +1,15 @@
-import {
-  assertValidDbPath
-} from "./chunk-TKDITWDN.js";
 import {
   logDaemonHealth
 } from "./chunk-BBMTVAE3.js";
+import {
+  assertValidDbPath
+} from "./chunk-TKDITWDN.js";
 import {
   recordDbOpen
 } from "./chunk-5YEUPUV4.js";
 import {
   listBackups
-} from "./chunk-UTDMTQNH.js";
+} from "./chunk-DSJI76XL.js";
 import {
   isPostgresBackendEnabled
 } from "./chunk-YYB5PMTK.js";
@@ -27,7 +27,7 @@ import {
 import {
   EXE_AI_DIR,
   loadConfigSync
-} from "./chunk-QMSEL5YS.js";
+} from "./chunk-ZIG7VPJV.js";
 import {
   atomicWriteJson
 } from "./chunk-HSGBZSCA.js";
@@ -1333,7 +1333,7 @@ async function migrateReflectionDedup(client) {
     "ALTER TABLE memory_reflections ADD COLUMN dedup_key TEXT",
     "migration add memory_reflections.dedup_key"
   );
-  const { reflectionDedupKey } = await import("./memory-reflection-QXHJPYPC.js");
+  const { reflectionDedupKey } = await import("./memory-reflection-BKB2YOE6.js");
   const keyForRow = (row) => {
     let sources = [];
     try {
@@ -1406,6 +1406,43 @@ async function migrateReflectionDedup(client) {
       WHERE dedup_key IS NOT NULL
   `);
 }
+async function migrateSanitizeBehaviorContent(client) {
+  const { sanitizeBehaviorContent } = await import("./behaviors-ZJ45TFBJ.js");
+  const rows = await client.execute(
+    "SELECT id, content, active FROM behaviors WHERE content IS NOT NULL"
+  );
+  const now = (/* @__PURE__ */ new Date()).toISOString();
+  const stmts = [];
+  let cleaned = 0;
+  let deactivated = 0;
+  for (const r of rows.rows) {
+    const rec = r;
+    const original = String(rec.content);
+    const sanitized = sanitizeBehaviorContent(original);
+    if (sanitized === original) continue;
+    if (sanitized.length === 0) {
+      if (Number(rec.active) === 0) continue;
+      stmts.push({
+        sql: "UPDATE behaviors SET active = 0, updated_at = ? WHERE id = ?",
+        args: [now, String(rec.id)]
+      });
+      deactivated++;
+      continue;
+    }
+    stmts.push({
+      sql: "UPDATE behaviors SET content = ?, updated_at = ? WHERE id = ?",
+      args: [sanitized, now, String(rec.id)]
+    });
+    cleaned++;
+  }
+  if (stmts.length > 0) {
+    await client.batch(stmts, "write");
+    process.stderr.write(
+      `[migration] Sanitized behavior content (bug d61f9416): ${cleaned} row(s) cleaned, ${deactivated} pure-markup row(s) deactivated
+`
+    );
+  }
+}
 var _client = null;
 var _resilientClient = null;
 var _walCheckpointTimer = null;
@@ -1808,7 +1845,7 @@ async function _attemptBackupRestore(config) {
 `
       );
       try {
-        const { recordDbRestoreEvent } = await import("./db-restore-events-2FI4ZMKA.js");
+        const { recordDbRestoreEvent } = await import("./db-restore-events-G6NOQOVE.js");
         recordDbRestoreEvent({
           kind: "auto-restore",
           restoredFrom: backup.name,
@@ -1851,7 +1888,7 @@ async function _attemptBackupRestore(config) {
 `
   );
   try {
-    const { recordDbRestoreEvent } = await import("./db-restore-events-2FI4ZMKA.js");
+    const { recordDbRestoreEvent } = await import("./db-restore-events-G6NOQOVE.js");
     recordDbRestoreEvent({
       kind: "restore-failed",
       quarantinePath: corruptPath,
@@ -2110,7 +2147,7 @@ async function initDatabase(config) {
 `
         );
         try {
-          const { recordDbRestoreEvent } = await import("./db-restore-events-2FI4ZMKA.js");
+          const { recordDbRestoreEvent } = await import("./db-restore-events-G6NOQOVE.js");
           recordDbRestoreEvent({
             kind: "wal-recovery",
             quarantinePath: backupPath,
@@ -2124,7 +2161,7 @@ async function initDatabase(config) {
 `
         );
         try {
-          const { recordDbRestoreEvent } = await import("./db-restore-events-2FI4ZMKA.js");
+          const { recordDbRestoreEvent } = await import("./db-restore-events-G6NOQOVE.js");
           recordDbRestoreEvent({
             kind: "zeroed-no-wal",
             detail: "DB was 0 bytes at startup with no WAL available \u2014 data may be lost"
@@ -2346,7 +2383,7 @@ async function sweepExpiredSoftDeletedMemories(client, options = {}) {
   const purgeArchived = archDays !== void 0;
   const BATCH_SIZE = 2e3;
   const MAX_BATCHES = 500;
-  const { cleanupCardsForMemories, cleanupGraphLinksForMemories } = await import("./graph-rag-RMSFLUOB.js");
+  const { cleanupCardsForMemories, cleanupGraphLinksForMemories } = await import("./graph-rag-Z2KCJTPK.js");
   const softCutoff = `-${softDays} days`;
   const selectArgsBase = [softCutoff];
   let predicate = `status = 'deleted' AND COALESCE(deleted_at, timestamp) < datetime('now', ?)`;
@@ -2478,7 +2515,7 @@ function getRawClient() {
 function tryGetRawClient() {
   return _client;
 }
-var CURRENT_SCHEMA_VERSION = 26;
+var CURRENT_SCHEMA_VERSION = 29;
 var _migrationBlockRuns = 0;
 function _getMigrationBlockRuns() {
   return _migrationBlockRuns;
@@ -2685,7 +2722,7 @@ async function ensureSchema() {
     }
   }
   try {
-    const { checkAndRepairFtsIndexOnce } = await import("./fts-integrity-LKAZEZJE.js");
+    const { checkAndRepairFtsIndexOnce } = await import("./fts-integrity-4YB34KWX.js");
     await checkAndRepairFtsIndexOnce(client);
   } catch (ftsErr) {
     process.stderr.write(
@@ -2955,6 +2992,14 @@ async function ensureSchema() {
       created_at    TEXT NOT NULL
     );
   `);
+  await client.executeMultiple(`
+    CREATE TABLE IF NOT EXISTS trigger_cooldowns (
+      cooldown_key      TEXT PRIMARY KEY,
+      last_fired_at_ms  INTEGER NOT NULL,
+      fire_count        INTEGER NOT NULL DEFAULT 1,
+      updated_at        TEXT NOT NULL
+    );
+  `);
   await client.executeMultiple(`
     CREATE TABLE IF NOT EXISTS device_registry (
       device_id     TEXT PRIMARY KEY,
@@ -3647,6 +3692,23 @@ async function ensureSchema() {
 
     CREATE INDEX IF NOT EXISTS idx_conversations_channel
       ON conversations(channel_id);
+
+    CREATE INDEX IF NOT EXISTS idx_conversations_ingested_at
+      ON conversations(ingested_at);
+
+    -- Bug 9cdaaf80 (PII durability): tombstone ledger for conversations pruned
+    -- by the retention sweep. Hard-deleting a conversation locally is not durable
+    -- on its own \u2014 the cloud pull path re-inserts rows by id from the remote blob,
+    -- resurrecting expired PII. The sweep records each pruned id here; the pull
+    -- path skips any id present in this ledger so a deleted conversation is never
+    -- restored. Rows are id + deletion time only (no PII).
+    CREATE TABLE IF NOT EXISTS conversation_deletions (
+      id         TEXT PRIMARY KEY,
+      deleted_at TEXT NOT NULL
+    );
+
+    CREATE INDEX IF NOT EXISTS idx_conversation_deletions_deleted_at
+      ON conversation_deletions(deleted_at);
   `);
   await client.executeMultiple(`
     CREATE TABLE IF NOT EXISTS session_agent_map (
@@ -4491,11 +4553,44 @@ async function ensureSchema() {
   } catch (e) {
     logCatchDebug("v9 repair entities_fts_au scope", e);
   }
+  await migrateSanitizeBehaviorContent(client);
   try {
     await client.execute(`PRAGMA user_version = ${CURRENT_SCHEMA_VERSION}`);
   } catch {
   }
 }
+async function recordTriggerFire(cooldownKey, cooldownMs, now = Date.now()) {
+  const client = getClient();
+  const nowIso = new Date(now).toISOString();
+  try {
+    await client.execute({
+      sql: `DELETE FROM trigger_cooldowns WHERE last_fired_at_ms < ?`,
+      args: [now - 864e5]
+    });
+  } catch {
+  }
+  const res = await client.execute({
+    sql: `INSERT INTO trigger_cooldowns (cooldown_key, last_fired_at_ms, fire_count, updated_at)
+          VALUES (?, ?, 1, ?)
+          ON CONFLICT(cooldown_key) DO UPDATE SET
+            last_fired_at_ms = excluded.last_fired_at_ms,
+            fire_count = trigger_cooldowns.fire_count + 1,
+            updated_at = excluded.updated_at
+          WHERE excluded.last_fired_at_ms - trigger_cooldowns.last_fired_at_ms >= ?`,
+    args: [cooldownKey, now, nowIso, cooldownMs]
+  });
+  const allowed = Number(res.rowsAffected ?? 0) >= 1;
+  let fireCount = 1;
+  try {
+    const read = await client.execute({
+      sql: `SELECT fire_count FROM trigger_cooldowns WHERE cooldown_key = ?`,
+      args: [cooldownKey]
+    });
+    fireCount = Number(read.rows[0]?.fire_count ?? 1);
+  } catch {
+  }
+  return { allowed, fireCount };
+}
 var disposeTurso = disposeDatabase;
 async function disposeDatabase() {
   if (_walCheckpointTimer) {
@@ -4569,6 +4664,7 @@ export {
   tryGetRawClient,
   _getMigrationBlockRuns,
   ensureSchema,
+  recordTriggerFire,
   disposeTurso,
   disposeDatabase,
   identityPath,