@askexenow/exe-os 0.9.372 → 0.9.374

package/dist/{chunk-LNOS24GV.js → chunk-V3WLC5TJ.js}

@@ -1,6 +1,6 @@
 import {
   resolveDataDir
-} from "./chunk-QMSEL5YS.js";
+} from "./chunk-ZIG7VPJV.js";
 
 // src/lib/daemon-kill-attribution.ts
 import {
@@ -113,102 +113,9 @@ function findRecentKillIntent(targetPid, withinMs = KILL_INTENT_LOOKBACK_MS) {
   }
 }
 
-// src/lib/pid-identity.ts
-import { execFileSync } from "child_process";
-var PID_IDENTITY_TOLERANCE_MS = 2e3;
-function parseLstart(raw) {
-  if (typeof raw !== "string") return null;
-  const trimmed = raw.trim();
-  if (!trimmed) return null;
-  const ms = Date.parse(trimmed);
-  return Number.isFinite(ms) ? ms : null;
-}
-function processStartedAt(pid) {
-  if (!Number.isInteger(pid) || pid <= 0) return null;
-  try {
-    return parseLstart(
-      execFileSync("ps", ["-o", "lstart=", "-p", String(pid)], { encoding: "utf8", timeout: 2e3 })
-    );
-  } catch {
-    return null;
-  }
-}
-function sameProcessIdentity(expectedMs, actualMs, toleranceMs = PID_IDENTITY_TOLERANCE_MS) {
-  if (expectedMs === null || actualMs === null) return false;
-  return Math.abs(expectedMs - actualMs) <= toleranceMs;
-}
-function defaultIsAlive(pid) {
-  try {
-    process.kill(pid, 0);
-    return true;
-  } catch {
-    return false;
-  }
-}
-function killIfSameProcess(pid, expectedStartedAtMs, signal, ctx) {
-  const isAlive = ctx.isAlive ?? defaultIsAlive;
-  const startedAt = ctx.startedAt ?? processStartedAt;
-  const kill = ctx.kill ?? ((p, s) => {
-    process.kill(p, s);
-  });
-  const record = ctx.record ?? recordKillIntent;
-  const log = ctx.log ?? ((m) => {
-    try {
-      process.stderr.write(m + "\n");
-    } catch {
-    }
-  });
-  const send = () => {
-    try {
-      record({ targetPid: pid, signal, sender: ctx.sender, reason: ctx.reason });
-    } catch {
-    }
-    try {
-      kill(pid, signal);
-    } catch {
-      return "skipped-dead";
-    }
-    return "sent";
-  };
-  if (expectedStartedAtMs === null) return send();
-  let actual;
-  try {
-    actual = startedAt(pid);
-  } catch {
-    actual = null;
-  }
-  if (actual === null) {
-    let alive;
-    try {
-      alive = isAlive(pid);
-    } catch {
-      alive = false;
-    }
-    if (!alive) return "skipped-dead";
-  }
-  if (!sameProcessIdentity(expectedStartedAtMs, actual)) {
-    log(
-      `[pid-identity] REFUSING ${signal} to PID ${pid} from ${ctx.sender}: start time changed (expected ${new Date(expectedStartedAtMs).toISOString()}, now ${actual === null ? "UNREADABLE" : new Date(actual).toISOString()}) \u2014 the PID was RECYCLED, this signal would have hit an innocent process. reason=${ctx.reason}`
-    );
-    try {
-      record({
-        targetPid: pid,
-        signal: `${signal}:REFUSED`,
-        sender: ctx.sender,
-        reason: `pid-identity-mismatch expected=${expectedStartedAtMs} actual=${actual ?? "null"} :: ${ctx.reason}`
-      });
-    } catch {
-    }
-    return "skipped-identity";
-  }
-  return send();
-}
-
 export {
   KILL_INTENT_LOOKBACK_MS,
   killAttributionLogPath,
   recordKillIntent,
-  findRecentKillIntent,
-  processStartedAt,
-  killIfSameProcess
+  findRecentKillIntent
 };

package/dist/{chunk-UXLO7VHX.js → chunk-VI4ATC6I.js}

@@ -1,6 +1,6 @@
 import {
   TmuxTransport
-} from "./chunk-DSOQUQTV.js";
+} from "./chunk-A27Q27CT.js";
 
 // src/lib/transport.ts
 var _transport = null;

package/dist/{chunk-77JP3LK4.js → chunk-VKJGHAZT.js}

@@ -1,6 +1,6 @@
 import {
   isCrdtSyncEnabled
-} from "./chunk-WV3TOOL7.js";
+} from "./chunk-KQ6RJWRW.js";
 import {
   compress,
   decompress
@@ -8,27 +8,27 @@ import {
 import {
   orgMembershipsPath,
   orgModeActive
-} from "./chunk-CW2UCKHS.js";
+} from "./chunk-TADAO3HV.js";
 import {
   activeRecipientPubKeys,
   grantsPath,
   isGrantsMacPrimed,
   primeGrantsMacKey,
   warnActiveMonitoringOnce
-} from "./chunk-VV5EZZNT.js";
+} from "./chunk-HTBEVCO2.js";
 import {
   assertGateAndGrantsColocated
-} from "./chunk-JTB5V6BV.js";
+} from "./chunk-3SXHEQ7X.js";
 import {
   getAuthHeader
 } from "./chunk-NUTZJZKW.js";
 import {
   GHOST_BEHAVIOR_SQL,
   isGhostBehaviorRow
-} from "./chunk-MBNIJXKI.js";
+} from "./chunk-WMEYJT4R.js";
 import {
   retryOnDaemonTransportError
-} from "./chunk-PGLPUP37.js";
+} from "./chunk-XZ65ST2I.js";
 import {
   decryptSyncBlob,
   encryptSyncBlob,
@@ -41,13 +41,13 @@ import {
   loadEmployees,
   registerBinSymlinks,
   saveEmployees
-} from "./chunk-5DCCKHDY.js";
+} from "./chunk-TAMDAOCU.js";
 import {
   loadDeviceId
-} from "./chunk-DKBPCOU4.js";
+} from "./chunk-L6RXG36J.js";
 import {
   EXE_AI_DIR
-} from "./chunk-QMSEL5YS.js";
+} from "./chunk-ZIG7VPJV.js";
 import {
   atomicWriteJsonSync,
   atomicWriteSync,
@@ -70,7 +70,7 @@ var _lastSealOrgMode = null;
 async function getSyncCipher() {
   if (_resolved) return _resolved;
   if (!orgModeActive()) {
-    const mod = await import("./founder-monitor-envelope-5KTKNL5G.js");
+    const mod = await import("./founder-monitor-envelope-TFKRGCFE.js");
     _monitoredWriter = mod.encryptMonitoredSyncBlob;
     _founderModuleLinked = true;
   }
@@ -235,6 +235,15 @@ async function clearCloudSyncStageResume(client) {
 
 // src/lib/cloud-sync.ts
 var _cloudSyncInProgress = false;
+function selectRecordsForLocalWorld(records, ctx) {
+  if (!ctx.isMemberWorld) return records;
+  const own = ctx.localDeviceId;
+  if (typeof own !== "string" || own.length === 0) return [];
+  return records.filter((rec) => {
+    const authorDevice = rec.author_device_id;
+    return typeof authorDevice === "string" && authorDevice.length > 0 && authorDevice === own;
+  });
+}
 function sqlSafe(v) {
   return v === void 0 ? null : v;
 }
@@ -1052,8 +1061,15 @@ async function cloudSync(config, options) {
       onProgress("Cloud sync", "pulling remote changes...");
       pullResult = await cloudPull(lastPullVersion, config);
       if (pullResult.records.length > 0) {
+        pullResult = {
+          ...pullResult,
+          records: selectRecordsForLocalWorld(pullResult.records, {
+            isMemberWorld: orgModeActive(),
+            localDeviceId: loadDeviceId()
+          })
+        };
         if (shouldUseCrdtMergeForCloudSync()) {
-          const { initCrdtDoc, importExistingMemories, readAllMemories } = await import("./crdt-sync-7T4WCOKD.js");
+          const { initCrdtDoc, importExistingMemories, readAllMemories } = await import("./crdt-sync-B3JN6AIV.js");
           initCrdtDoc();
           importExistingMemories(
             pullResult.records.map((rec) => ({
@@ -1585,7 +1601,7 @@ async function cloudSync(config, options) {
     const artifactResult = { pushed: 0, frozen: false, remaining: 0 };
     if (!shouldSkip("artifacts")) {
       try {
-        const { flushArtifactBackups } = await import("./artifact-backup-767STHSW.js");
+        const { flushArtifactBackups } = await import("./artifact-backup-WXZNB7KE.js");
         const flushed = await flushArtifactBackups(cloudArtifactTransport(config));
         artifactResult.pushed = flushed.pushed;
         artifactResult.frozen = flushed.frozen;
@@ -1896,8 +1912,8 @@ async function mergeRosterFromRemote(remote, paths) {
     return { added, identitiesUpdated };
   });
 }
-async function cloudPushBlob(route, data, metaKey, config) {
-  if (data.length === 0) return { ok: true };
+async function cloudPushBlob(route, data, metaKey, config, clearWhenEmpty = false) {
+  if (data.length === 0 && !clearWhenEmpty) return { ok: true };
   assertSecureEndpoint(config.endpoint);
   const json = JSON.stringify(data);
   const version = parseInt(crypto.createHash("sha256").update(json).digest("hex").slice(0, 12), 16);
@@ -1959,7 +1975,7 @@ function cloudArtifactTransport(config) {
     return { status: resp.status, ok: resp.ok };
   };
 }
-async function cloudPushVersionedBlob(table, filter, route, cursorKey, config) {
+async function cloudPushVersionedBlob(table, filter, route, cursorKey, config, clearRemoteWhenEmpty = false) {
   assertSecureEndpoint(config.endpoint);
   const client = getClient();
   let maxVersion = -1;
@@ -1971,7 +1987,7 @@ async function cloudPushVersionedBlob(table, filter, route, cursorKey, config) {
     maxVersion = Number(res.rows[0]?.v ?? 0);
   } catch {
     const rows2 = await fetchAllRows(client, table, filter ?? void 0);
-    const { ok } = await cloudPushBlob(route, rows2, cursorKey, config);
+    const { ok } = await cloudPushBlob(route, rows2, cursorKey, config, clearRemoteWhenEmpty);
     return { ok, skipped: false };
   }
   let storedCursor = -1;
@@ -1995,6 +2011,30 @@ async function cloudPushVersionedBlob(table, filter, route, cursorKey, config) {
   }
   const rows = await fetchAllRows(client, table, filter ?? void 0);
   if (rows.length === 0) {
+    if (clearRemoteWhenEmpty) {
+      try {
+        const compressed = compress(Buffer.from("[]", "utf8"));
+        const encrypted = encryptSyncBlob(compressed);
+        const resp = await fetchWithRetry(`${config.endpoint}${route}`, {
+          method: "POST",
+          headers: await cloudAuthHeaders(config),
+          body: JSON.stringify({ blob: encrypted })
+        });
+        if (resp.ok) {
+          try {
+            await client.execute({
+              sql: "INSERT INTO sync_meta (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value",
+              args: [cursorKey, String(Math.max(maxVersion, 0))]
+            });
+          } catch {
+          }
+        }
+        return { ok: resp.ok, skipped: false };
+      } catch (err) {
+        logError(`[cloud-sync] PUSH ${route} (empty clear): ${err instanceof Error ? err.message : String(err)}`);
+        return { ok: false, skipped: false };
+      }
+    }
     try {
       await client.execute({
         sql: "INSERT INTO sync_meta (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value",
@@ -2465,12 +2505,20 @@ async function cloudPullTasks(config) {
   return { pulled: remoteTasks.length };
 }
 async function cloudPushConversations(config) {
+  let sweptEmpty = false;
+  try {
+    const client = getClient();
+    const res = await client.execute("SELECT 1 FROM conversation_deletions LIMIT 1");
+    sweptEmpty = res.rows.length > 0;
+  } catch {
+  }
   const { ok } = await cloudPushVersionedBlob(
     "conversations",
     null,
     "/sync/push-conversations",
     "last_conversations_push_version",
-    config
+    config,
+    sweptEmpty
   );
   return ok;
 }
@@ -2481,7 +2529,29 @@ async function cloudPullConversations(config) {
   );
   if (!remoteConvos || remoteConvos.length === 0) return { pulled: 0 };
   const client = getClient();
-  const stmts = remoteConvos.map((c) => ({
+  const applied = await applyPulledConversations(client, remoteConvos);
+  return { pulled: applied };
+}
+async function applyPulledConversations(client, remoteConvos) {
+  if (!remoteConvos || remoteConvos.length === 0) return 0;
+  const tombstoned = /* @__PURE__ */ new Set();
+  const remoteIds = remoteConvos.map((c) => String(c.id));
+  const LOOKUP_CHUNK = 500;
+  try {
+    for (let i = 0; i < remoteIds.length; i += LOOKUP_CHUNK) {
+      const chunk = remoteIds.slice(i, i + LOOKUP_CHUNK);
+      const placeholders = chunk.map(() => "?").join(",");
+      const res = await client.execute({
+        sql: `SELECT id FROM conversation_deletions WHERE id IN (${placeholders})`,
+        args: chunk
+      });
+      for (const row of res.rows) tombstoned.add(String(row.id));
+    }
+  } catch {
+  }
+  const survivors = tombstoned.size === 0 ? remoteConvos : remoteConvos.filter((c) => !tombstoned.has(String(c.id)));
+  if (survivors.length === 0) return 0;
+  const stmts = survivors.map((c) => ({
     sql: `INSERT INTO conversations
           (id, platform, external_id, sender_id, sender_name, sender_phone, sender_email,
            recipient_id, channel_id, thread_id, reply_to_id, content_text, content_media,
@@ -2528,7 +2598,7 @@ async function cloudPullConversations(config) {
     ]
   }));
   await batchWriteYielding(client, stmts);
-  return { pulled: remoteConvos.length };
+  return survivors.length;
 }
 function validPulledPrimaryKeyId(id) {
   return typeof id === "string" && id.trim().length > 0;
@@ -2726,7 +2796,7 @@ async function cloudPushCodeContext(config) {
   assertSecureEndpoint(config.endpoint);
   if (!existsSync(CODE_CONTEXT_DIR)) return 0;
   const files = readdirSync(CODE_CONTEXT_DIR).filter(
-    (f) => f.endsWith(".json") && !f.endsWith(".vectors.json") && !f.startsWith(".")
+    (f) => f.endsWith(".json") && !f.startsWith(".")
   );
   if (files.length === 0) return 0;
   const metaPath = path2.join(CODE_CONTEXT_DIR, ".sync-meta.json");
@@ -2786,7 +2856,6 @@ async function cloudPullCodeContext(config) {
     let pulled = 0;
     for (const { key, blob } of data.indexes) {
       try {
-        if (key.endsWith(".vectors.json")) continue;
         const localPath = path2.join(CODE_CONTEXT_DIR, key);
         const compressed = decryptSyncBlob(blob);
         const content = decompress(compressed).toString("utf8");
@@ -3018,6 +3087,7 @@ async function cloudPullCoreMemory(config) {
 }
 
 export {
+  selectRecordsForLocalWorld,
   CLOUD_PULL_WRITE_BATCH_SIZE,
   batchWriteYielding,
   CLOUD_MEMORY_PUSH_BACKGROUND_BATCH_SIZE,
@@ -3059,6 +3129,7 @@ export {
   cloudPullTasks,
   cloudPushConversations,
   cloudPullConversations,
+  applyPulledConversations,
   deriveWorkspaceSlug,
   cloudPushDocuments,
   cloudPullDocuments,