@askexenow/exe-os 0.9.372 → 0.9.374

package/dist/{chunk-MBNIJXKI.js → chunk-WMEYJT4R.js}

@@ -1,15 +1,15 @@
 import {
   retryOnDaemonTransportError
-} from "./chunk-PGLPUP37.js";
+} from "./chunk-XZ65ST2I.js";
 import {
   vectorToSqlLiteral
-} from "./chunk-OYQNNKNS.js";
+} from "./chunk-MXPNVSXI.js";
 import {
   blobToVector
 } from "./chunk-OTVEIJUQ.js";
 import {
   getClient
-} from "./chunk-5DCCKHDY.js";
+} from "./chunk-TAMDAOCU.js";
 
 // src/lib/behaviors.ts
 import crypto from "crypto";
@@ -23,6 +23,14 @@ function isGhostBehaviorRow(row) {
   if (content === "(empty)" && agent === "unknown") return true;
   return false;
 }
+var BEHAVIOR_CONTENT_MAX_LENGTH = 500;
+function behaviorContentOverCapMessage(actualLength) {
+  return `Behavior content is ${actualLength} characters; the maximum is ${BEHAVIOR_CONTENT_MAX_LENGTH}. Behaviors are injected verbatim into agent context at boot \u2014 split this into separate, single-sentence behaviors.`;
+}
+var TOOL_FRAMING_TAG_RE = /<\/?(?:invoke|parameter|content|function_calls)\b[^>]*>/gi;
+function sanitizeBehaviorContent(content) {
+  return content.replace(TOOL_FRAMING_TAG_RE, " ").replace(/\s{2,}/g, " ").trim();
+}
 function formatReflexContent(trigger, action) {
   return `\u26A1 REFLEX: When ${trigger} \u2192 ${action}. Decide whether to act.`;
 }
@@ -42,12 +50,15 @@ async function storeReflexBehavior(opts) {
   });
 }
 async function storeBehavior(opts) {
-  const trimmedContent = (opts.content ?? "").trim();
+  const trimmedContent = sanitizeBehaviorContent(opts.content ?? "");
   if (trimmedContent.length === 0) {
     throw new Error(
       "[behaviors] Refusing to store a behavior with empty content (ghost-row guard)."
     );
   }
+  if (trimmedContent.length > BEHAVIOR_CONTENT_MAX_LENGTH) {
+    throw new Error(`[behaviors] ${behaviorContentOverCapMessage(trimmedContent.length)}`);
+  }
   const trimmedAgent = (opts.agentId ?? "").trim();
   if (trimmedAgent.length === 0) {
     throw new Error(
@@ -352,6 +363,9 @@ async function reactivateBehavior(id) {
 export {
   GHOST_BEHAVIOR_SQL,
   isGhostBehaviorRow,
+  BEHAVIOR_CONTENT_MAX_LENGTH,
+  behaviorContentOverCapMessage,
+  sanitizeBehaviorContent,
   formatReflexContent,
   isReflexBehavior,
   storeReflexBehavior,

package/dist/{chunk-R6FLELV6.js → chunk-XFTEX77S.js}

@@ -1,6 +1,6 @@
 import {
   NO_DB_INTEGRITY_EVENTS
-} from "./chunk-ZNUJFX7L.js";
+} from "./chunk-UQGSBM3U.js";
 import {
   resolveAnthropicAuth
 } from "./chunk-VGMACSEV.js";
@@ -92,13 +92,13 @@ async function getRetrievalHealth() {
   const coveragePct = totalMemories > 0 ? Math.round(memoriesWithVectors / totalMemories * 100) : null;
   let dbRestore = { hasEvents: false, count: 0, last: null, quarantineFiles: 0 };
   try {
-    const { getDbRestoreHealth } = await import("./db-restore-events-2FI4ZMKA.js");
+    const { getDbRestoreHealth } = await import("./db-restore-events-G6NOQOVE.js");
     dbRestore = getDbRestoreHealth();
   } catch {
   }
   let dbIntegrity = NO_INTEGRITY_EVENTS;
   try {
-    const { getDbIntegrityHealth } = await import("./db-integrity-events-5DTASXJF.js");
+    const { getDbIntegrityHealth } = await import("./db-integrity-events-2DTFO37N.js");
     dbIntegrity = getDbIntegrityHealth();
   } catch {
   }

package/dist/{chunk-MDGYXUOV.js → chunk-XH7YL7JM.js}

@@ -1,6 +1,6 @@
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-E2WEFZOR.js";
+} from "./chunk-W75GTHR3.js";
 import {
   atomicWriteJsonSync
 } from "./chunk-HSGBZSCA.js";

package/dist/{chunk-JOO35RHR.js → chunk-XL5MFGMR.js}

@@ -2,10 +2,10 @@ import {
   assessVerificationArtifact,
   isSubstantiveCommit,
   measureCommitSubstance
-} from "./chunk-KZXMP6JG.js";
+} from "./chunk-4YNA3CM6.js";
 import {
   sessionScopeFilter
-} from "./chunk-XHYHX6F7.js";
+} from "./chunk-AKLQSC6W.js";
 
 // src/shared/task-completion-gate.ts
 var COMPLETION_CLAIM_STATUSES = ["done", "needs_review", "closed"];
@@ -289,7 +289,7 @@ async function sweepTasks(projectName, options = {}) {
     }
     if (!dryRun) {
       try {
-        const { updateTaskStatus } = await import("./tasks-crud-5EM55WRZ.js");
+        const { updateTaskStatus } = await import("./tasks-crud-ZRQNJXQ2.js");
         await updateTaskStatus({
           taskId: task.id,
           status: "needs_review",

package/dist/{chunk-OW5RZIDW.js → chunk-XNNECNDL.js}

@@ -1,14 +1,14 @@
-import {
-  buildRestartReport,
-  formatRestartReport
-} from "./chunk-EXDW3E2R.js";
 import {
   readPostinstallFailureMarker
-} from "./chunk-SBJV2PCU.js";
+} from "./chunk-PHBU4LGO.js";
 import {
   formatDegradations,
   getRetrievalHealth
-} from "./chunk-R6FLELV6.js";
+} from "./chunk-XFTEX77S.js";
+import {
+  buildRestartReport,
+  formatRestartReport
+} from "./chunk-EXDW3E2R.js";
 import {
   EXE_HOOK_MANIFEST,
   LEGACY_SPLIT_POST_TOOL_HOOK_MARKERS,
@@ -17,7 +17,7 @@ import {
 import {
   cleanupLocalSecretResidue,
   inventoryLocalSecretResidue
-} from "./chunk-E5HAY3DQ.js";
+} from "./chunk-HDLAB7W3.js";
 import {
   resolveAnthropicAuth
 } from "./chunk-VGMACSEV.js";
@@ -27,16 +27,14 @@ import {
 import {
   offloadReadIfMain,
   repairFtsTable
-} from "./chunk-5DCCKHDY.js";
-import {
-  isMainModule
-} from "./chunk-6Y4B3QF6.js";
+} from "./chunk-TAMDAOCU.js";
 
 // src/bin/exe-doctor.ts
 import os from "os";
 import { existsSync, readFileSync } from "fs";
 import { spawn } from "child_process";
 import path from "path";
+import { fileURLToPath } from "url";
 import { randomUUID } from "crypto";
 
 // src/lib/conflict-detector.ts
@@ -391,6 +389,7 @@ async function auditNullVectors(client, flags) {
   );
   return Number(result.rows[0].cnt);
 }
+var DUPLICATE_MEMBER_PAGE_SIZE = 500;
 async function auditDuplicates(client, flags) {
   const { clause, args } = agentFilter(flags);
   const groupLimit = boundedAuditLimit(
@@ -424,19 +423,37 @@ async function auditDuplicates(client, flags) {
     let filterClause = " WHERE SUBSTR(raw_text, 1, 200) = ? AND LENGTH(raw_text) = ?" + liveOnly;
     if (flags.agent) filterClause += " AND agent_id = ?";
     if (flags.project) filterClause += " AND project_name = ?";
-    const ids = await offloadReadIfMain(
-      client,
-      `SELECT id, raw_text FROM memories${filterClause} ORDER BY timestamp DESC LIMIT ${memberLimit}`,
-      filterArgs,
-      true
-    );
     const byText = /* @__PURE__ */ new Map();
-    for (const r of ids.rows) {
-      const text = r.raw_text;
-      const id = r.id;
-      const existing = byText.get(text);
-      if (existing) existing.push(id);
-      else byText.set(text, [id]);
+    let remaining = memberLimit;
+    let cursorTs = null;
+    let cursorId = null;
+    while (remaining > 0) {
+      const pageLimit = Math.min(DUPLICATE_MEMBER_PAGE_SIZE, remaining);
+      const pageArgs = [...filterArgs];
+      let pageClause = filterClause;
+      if (cursorTs !== null) {
+        pageClause += " AND (timestamp < ? OR (timestamp = ? AND id < ?))";
+        pageArgs.push(cursorTs, cursorTs, cursorId);
+      }
+      const page = await offloadReadIfMain(
+        client,
+        `SELECT id, raw_text, timestamp FROM memories${pageClause} ORDER BY timestamp DESC, id DESC LIMIT ${pageLimit}`,
+        pageArgs,
+        true
+      );
+      if (page.rows.length === 0) break;
+      for (const r of page.rows) {
+        const text = r.raw_text;
+        const id = r.id;
+        const existing = byText.get(text);
+        if (existing) existing.push(id);
+        else byText.set(text, [id]);
+      }
+      remaining -= page.rows.length;
+      const last = page.rows[page.rows.length - 1];
+      cursorTs = last.timestamp;
+      cursorId = last.id;
+      if (page.rows.length < pageLimit) break;
     }
     for (const [text, allIds] of byText) {
       if (allIds.length <= 1) continue;
@@ -657,7 +674,7 @@ function auditHookOwnership() {
 }
 async function auditShards() {
   try {
-    const { auditShardHealth } = await import("./shard-manager-UROHZE46.js");
+    const { auditShardHealth } = await import("./shard-manager-OE36A4MY.js");
     const report = await auditShardHealth();
     return {
       total: report.total,
@@ -675,7 +692,7 @@ async function auditShards() {
 async function auditKeyHealth() {
   try {
     const { getMasterKey, getKeyStorageInfo } = await import("./lib/keychain.js");
-    const { getKeyBackupStatus } = await import("./key-backup-status-6L2ARCXW.js");
+    const { getKeyBackupStatus } = await import("./key-backup-status-LQPINQ3W.js");
     const [key, storage] = await Promise.all([getMasterKey(), getKeyStorageInfo()]);
     const backup = getKeyBackupStatus();
     return {
@@ -734,9 +751,33 @@ async function auditCpuSteal() {
 function auditPostinstallFailure() {
   return readPostinstallFailureMarker();
 }
+function auditGlobalBin(opts) {
+  const moduleFile = opts?.moduleFile ?? fileURLToPath(import.meta.url);
+  const exists = opts?.existsFn ?? existsSync;
+  const reinstallCommand = "npm install -g @askexenow/exe-os";
+  const marker = `${path.sep}lib${path.sep}node_modules${path.sep}`;
+  const idx = moduleFile.indexOf(marker);
+  if (idx === -1) {
+    return {
+      checked: false,
+      binDir: null,
+      targetPresent: false,
+      expected: ["exe", "exe-os"],
+      missing: [],
+      reinstallCommand
+    };
+  }
+  const prefix = moduleFile.slice(0, idx);
+  const binDir = path.join(prefix, "bin");
+  const target = path.join(path.dirname(moduleFile), "exe-launch-agent.js");
+  const targetPresent = exists(target);
+  const expected = ["exe", "exe-os"];
+  const missing = expected.filter((name) => !exists(path.join(binDir, name)));
+  return { checked: true, binDir, targetPresent, expected, missing, reinstallCommand };
+}
 async function runAudit(client, flags) {
   const runConflicts = flags.conflicts || process.env.EXE_AUDIT_CONFLICTS === "1";
-  const [stats, nullVectors, duplicates, bloated, fts, orphanedProjects, shards, keyHealth, localSecretResidue, outbox, cpuSteal, postinstallFailure] = await Promise.all([
+  const [stats, nullVectors, duplicates, bloated, fts, orphanedProjects, shards, keyHealth, localSecretResidue, outbox, cpuSteal, postinstallFailure, globalBin] = await Promise.all([
     auditStats(client, flags),
     auditNullVectors(client, flags),
     auditDuplicates(client, flags),
@@ -753,7 +794,8 @@ async function runAudit(client, flags) {
     Promise.resolve().then(() => auditLocalSecretResidue()),
     auditOutbox(),
     auditCpuSteal(),
-    Promise.resolve().then(() => auditPostinstallFailure())
+    Promise.resolve().then(() => auditPostinstallFailure()),
+    Promise.resolve().then(() => auditGlobalBin())
   ]);
   let conflicts;
   if (runConflicts) {
@@ -780,7 +822,7 @@ async function runAudit(client, flags) {
   } catch {
     retrievalHealth = void 0;
   }
-  return { stats, nullVectors, duplicates, duplicateCount, bloated, fts, orphanedProjects, conflicts, hookHealth, hookOwnership, shards, keyHealth, localSecretResidue, outbox, cpuSteal, postinstallFailure, retrievalHealth };
+  return { stats, nullVectors, duplicates, duplicateCount, bloated, fts, orphanedProjects, conflicts, hookHealth, hookOwnership, shards, keyHealth, localSecretResidue, outbox, cpuSteal, postinstallFailure, globalBin, retrievalHealth };
 }
 function indicator(value, warn) {
   if (value === 0) return "\u{1F7E2}";
@@ -911,6 +953,20 @@ function formatReport(report, flags) {
     }
     lines.push(`                     marker: ${pf.path}`);
   }
+  const gb = report.globalBin;
+  if (gb.checked) {
+    if (gb.missing.length === 0) {
+      lines.push(`\u{1F7E2} Global bin:      ${gb.expected.join(", ")} present`);
+    } else {
+      lines.push(`\u{1F534} Global bin:      MISSING \u2014 ${gb.missing.join(", ")} not found in ${gb.binDir}`);
+      if (gb.targetPresent) {
+        lines.push(`                     Likely cause: antivirus/CleanMyMac flagged the \`exe\` command as malware (AtomicStealer false positive) and quarantined it. This is a known false positive \u2014 the launcher is a plain Node script, not malware.`);
+      } else {
+        lines.push(`                     The exe-os package launcher is also missing \u2014 the install may have been removed or quarantined.`);
+      }
+      lines.push(`                     Reinstall to restore it: ${gb.reinstallCommand}`);
+    }
+  }
   const sh = report.shards;
   if (sh.total > 0) {
     if (sh.unreadable === 0 && sh.schemaMismatches === 0) {
@@ -1031,6 +1087,9 @@ function formatReport(report, flags) {
   if (report.postinstallFailure) {
     recs.push("Fix the postinstall failure above, then run `exe-os claude install`, `exe-os codex install`, or `exe-os-install --global`");
   }
+  if (report.globalBin.checked && report.globalBin.missing.length > 0) {
+    recs.push(`Global command(s) ${report.globalBin.missing.join(", ")} are missing (likely AV/CleanMyMac quarantine \u2014 known false positive). Restore with \`${report.globalBin.reinstallCommand}\`. See SECURITY.md "Antivirus false positives".`);
+  }
   if (report.retrievalHealth) {
     for (const d of report.retrievalHealth.degradations) {
       if (d.severity === "critical" || d.severity === "warn") {
@@ -1053,7 +1112,7 @@ function formatReport(report, flags) {
   return lines.join("\n");
 }
 async function fixNullVectors() {
-  const { tryAcquireWorkerSlot, registerWorkerPid } = await import("./worker-gate-BOQSIU2Z.js");
+  const { tryAcquireWorkerSlot, registerWorkerPid } = await import("./worker-gate-BEEIIVWA.js");
   if (!tryAcquireWorkerSlot()) {
     process.stderr.write("[exe-doctor] Worker gate full \u2014 waiting for existing backfill workers to finish\n");
     await new Promise((r) => setTimeout(r, 5e3));
@@ -1167,7 +1226,7 @@ function shouldFixShards(shards) {
   return shards.unreadable > 0 || shards.schemaMismatches > 0;
 }
 async function fixShards(dryRun) {
-  const { auditShardHealth } = await import("./shard-manager-UROHZE46.js");
+  const { auditShardHealth } = await import("./shard-manager-OE36A4MY.js");
   const report = await auditShardHealth({ repair: true, dryRun });
   return {
     total: report.total,
@@ -1230,7 +1289,8 @@ function emptyAuditReport() {
     localSecretResidue: { dataDir: "", residues: [] },
     outbox: { bugReports: { total: 0, unsent: 0 }, featureRequests: { total: 0, unsent: 0 } },
     cpuSteal: { available: false, stealPercent: null, severity: "na", source: "none", message: "not checked" },
-    postinstallFailure: null
+    postinstallFailure: null,
+    globalBin: { checked: false, binDir: null, targetPresent: false, expected: ["exe", "exe-os"], missing: [], reinstallCommand: "npm install -g @askexenow/exe-os" }
   };
 }
 async function main(argv = process.argv.slice(2)) {
@@ -1240,7 +1300,7 @@ async function main(argv = process.argv.slice(2)) {
     console.log(formatRestartReport(restartReport));
     return emptyAuditReport();
   }
-  const { fastDbInit } = await import("./fast-db-init-SCTOOIUT.js");
+  const { fastDbInit } = await import("./fast-db-init-L2RGKJWH.js");
   const client = await fastDbInit();
   const report = await runAudit(client, flags);
   console.log(formatReport(report, flags));
@@ -1316,7 +1376,7 @@ ${mode} Complete.`);
   }
   return report;
 }
-if (isMainModule(import.meta.url) && (process.argv[1] ?? "").includes("exe-doctor")) {
+if ((process.argv[1] ?? "").includes("exe-doctor")) {
   main().catch((err) => {
     console.error(err instanceof Error ? err.message : String(err));
     process.exit(1);
@@ -1327,6 +1387,7 @@ export {
   parseFlags,
   auditStats,
   auditNullVectors,
+  DUPLICATE_MEMBER_PAGE_SIZE,
   auditDuplicates,
   auditBloated,
   auditFts,
@@ -1339,6 +1400,7 @@ export {
   auditOutbox,
   auditCpuSteal,
   auditPostinstallFailure,
+  auditGlobalBin,
   runAudit,
   formatReport,
   fixNullVectors,

package/dist/{chunk-5AHDQCTB.js → chunk-XXFKSJYA.js}

@@ -1,20 +1,20 @@
 import {
   isExeSession,
   strictSessionScopeFilter
-} from "./chunk-XHYHX6F7.js";
+} from "./chunk-AKLQSC6W.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-E2WEFZOR.js";
+} from "./chunk-W75GTHR3.js";
 import {
   getProjectName
-} from "./chunk-W2IRQJ6R.js";
+} from "./chunk-JTVIANUB.js";
 import {
   DEFAULT_COORDINATOR_TEMPLATE_NAME,
   getCoordinatorName
-} from "./chunk-5DCCKHDY.js";
+} from "./chunk-TAMDAOCU.js";
 import {
   loadConfigSync
-} from "./chunk-QMSEL5YS.js";
+} from "./chunk-ZIG7VPJV.js";
 
 // src/lib/review-polling.ts
 import { execSync } from "child_process";
@@ -260,7 +260,7 @@ function createRealDeps(getClient) {
       });
     },
     createReviewForOrphan: async (task) => {
-      const { createReviewForCompletedTask } = await import("./tasks-review-MHGMBHUZ.js");
+      const { createReviewForCompletedTask } = await import("./tasks-review-Z7J2P6DG.js");
       const cwd = process.cwd();
       await createReviewForCompletedTask(
         task,

package/dist/{chunk-TGEPLJ66.js → chunk-XXOPG4BW.js}

@@ -1,6 +1,6 @@
 import {
   routeTask
-} from "./chunk-YWUQVHDL.js";
+} from "./chunk-KTCXJWJG.js";
 import {
   createTaskCore,
   employeeSessionName,
@@ -9,11 +9,11 @@ import {
   isEmployeeAlive,
   sessionScopeFilter,
   updateTaskStatus
-} from "./chunk-XHYHX6F7.js";
+} from "./chunk-AKLQSC6W.js";
 import {
   DEFAULT_COORDINATOR_TEMPLATE_NAME,
   getCoordinatorName
-} from "./chunk-5DCCKHDY.js";
+} from "./chunk-TAMDAOCU.js";
 
 // src/runtime/orchestrator.ts
 var STALE_THRESHOLD_MS = 2 * 60 * 60 * 1e3;

package/dist/{chunk-PGLPUP37.js → chunk-XZ65ST2I.js}

@@ -6,7 +6,7 @@ import {
   connectEmbedDaemon,
   isClientConnected,
   sendDaemonRequest
-} from "./chunk-UQUUNGTP.js";
+} from "./chunk-NUK7EEN5.js";
 import {
   directWriterAllowed
 } from "./chunk-V3W3SATA.js";

package/dist/{chunk-3TTKAT6V.js → chunk-YKC7QDZH.js}

@@ -1,10 +1,10 @@
 import {
   getBrandName
-} from "./chunk-2CWS374F.js";
+} from "./chunk-7RI2CNXJ.js";
 import {
   buildDeployStalenessBanner,
-  readDeployStalenessAlert
-} from "./chunk-TX3Q2GIL.js";
+  resolveDeployStalenessAlert
+} from "./chunk-C5HUMAA7.js";
 
 // src/lib/status-brief.ts
 import pathMod from "path";
@@ -118,7 +118,7 @@ async function generateStatusBrief(employees, data, _activeAgentIds) {
   sections.push([` EXE STATUS BRIEF \u2014 ${dateStr}${sessionTag}`]);
   const degradedLines = buildDegradedBanner(data);
   if (degradedLines.length > 0) sections.push(degradedLines);
-  const staleDeployLines = buildDeployStalenessBanner(readDeployStalenessAlert());
+  const staleDeployLines = buildDeployStalenessBanner(resolveDeployStalenessAlert());
   if (staleDeployLines.length > 0) sections.push(staleDeployLines);
   const orchestrationLines = buildOrchestrationPhase(data, employees);
   if (orchestrationLines.length > 0) sections.push(orchestrationLines);
@@ -601,6 +601,11 @@ function buildActionRequired(data) {
         `  \u{1F9F9} ${ub.mergedCount} merged branch${ub.mergedCount === 1 ? "" : "es"} not yet deleted upstream \u2014 prunable, no action needed`
       );
     }
+    if ((ub.landedCount ?? 0) > 0) {
+      lines.push(
+        `  \u{1F9F9} ${ub.landedCount} branch${ub.landedCount === 1 ? "" : "es"} whose work is already on main (PR closed without merge / superseded) \u2014 prunable, no action needed`
+      );
+    }
     if ((ub.unknownCount ?? 0) > 0 && ub.prStateAvailable !== false) {
       lines.push(`  \u2753 ${ub.unknownCount} branch${ub.unknownCount === 1 ? "" : "es"} with UNKNOWN PR state \u2014 not counted above`);
     }

package/dist/{chunk-KXYFBBZR.js → chunk-YMP2QSOP.js}

@@ -1,10 +1,11 @@
 import {
   executeAction,
   substituteTemplate
-} from "./chunk-ADNBOKYZ.js";
+} from "./chunk-GM7TLYOK.js";
 
 // src/automation/workflow-engine.ts
 import { randomUUID } from "crypto";
+var MAX_WORKFLOW_STEPS = 100;
 var _definitions = /* @__PURE__ */ new Map();
 var _instances = /* @__PURE__ */ new Map();
 function createWorkflowDefinition(input) {
@@ -39,7 +40,7 @@ function buildTemplateContext(instance) {
 function resolveActionParams(action, context) {
   const resolved = {};
   for (const [key, val] of Object.entries(action.params)) {
-    resolved[key] = substituteTemplate(val, context);
+    resolved[key] = substituteTemplate(val, context, true);
   }
   return { ...action, params: resolved };
 }
@@ -107,7 +108,7 @@ async function advanceWorkflow(instanceId) {
     case "wait_for_approval": {
       const { createTask } = await import("./lib/tasks.js");
       const { getCoordinatorName } = await import("./lib/employees.js");
-      const message = step.approval_message ? substituteTemplate(step.approval_message, templateCtx) : `Workflow "${def.name}" step ${step.index} ("${step.name}") requires approval.`;
+      const message = step.approval_message ? substituteTemplate(step.approval_message, templateCtx, true) : `Workflow "${def.name}" step ${step.index} ("${step.name}") requires approval.`;
       const task = await createTask({
         title: `[Workflow Approval] ${def.name}: ${step.name}`,
         assignedTo: getCoordinatorName(),
@@ -169,7 +170,22 @@ To reject: call approve_workflow_step with instance_id="${instance.id}" approved
 async function runWorkflow(instanceId) {
   let instance = _instances.get(instanceId);
   if (!instance) throw new Error(`Workflow instance "${instanceId}" not found`);
+  let steps = 0;
   while (instance.status === "running") {
+    if (steps >= MAX_WORKFLOW_STEPS) {
+      const now = (/* @__PURE__ */ new Date()).toISOString();
+      instance.status = "failed";
+      instance.step_results.push({
+        step_index: instance.current_step,
+        status: "failed",
+        error: `Workflow exceeded max step limit (${MAX_WORKFLOW_STEPS}) \u2014 aborting to prevent an infinite loop (d9a1fd0d)`,
+        started_at: now,
+        completed_at: now
+      });
+      instance.updated_at = now;
+      break;
+    }
+    steps++;
     instance = await advanceWorkflow(instanceId);
   }
   return instance;
@@ -319,6 +335,7 @@ async function loadWorkflows() {
 }
 
 export {
+  MAX_WORKFLOW_STEPS,
   createWorkflowDefinition,
   getWorkflowDefinition,
   listWorkflowDefinitions,

package/dist/{chunk-TK4MI6F6.js → chunk-YSLGFPWX.js}

@@ -1,6 +1,6 @@
 import {
   getClient
-} from "./chunk-5DCCKHDY.js";
+} from "./chunk-TAMDAOCU.js";
 
 // src/lib/pipeline-router.ts
 import crypto from "crypto";
@@ -116,12 +116,12 @@ async function sinkCRM(msg, agentResponse, agentName) {
 }
 async function sinkWiki(msg, agentResponse) {
   try {
-    const { createWikiClient } = await import("./wiki-client-AXNM5FWY.js");
+    const { createWikiClient } = await import("./wiki-client-W65IOSWF.js");
     const client = await createWikiClient();
     if (!client) return false;
     const content = msg.text ?? "";
     if (content.length < 50) return false;
-    const { chatInWorkspace } = await import("./wiki-client-AXNM5FWY.js");
+    const { chatInWorkspace } = await import("./wiki-client-W65IOSWF.js");
     const ingestText = [
       `[${msg.platform}] Message from ${msg.senderName ?? msg.senderId} (${msg.timestamp}):`,
       content,
@@ -140,8 +140,8 @@ Agent response: ${agentResponse}` : ""
 }
 async function sinkEntityExtraction(msg, agentResponse, agentName) {
   try {
-    const { extractFromConversation } = await import("./conversation-entity-extractor-QGTLH4BP.js");
-    const { storeExtraction } = await import("./graph-rag-RMSFLUOB.js");
+    const { extractFromConversation } = await import("./conversation-entity-extractor-74252CAO.js");
+    const { storeExtraction } = await import("./graph-rag-Z2KCJTPK.js");
     if ((msg.text?.length ?? 0) < 20) return false;
     if (msg.isHistorical) return false;
     const extraction = await extractFromConversation(msg, agentResponse, agentName);
@@ -149,7 +149,7 @@ async function sinkEntityExtraction(msg, agentResponse, agentName) {
     const client = getClient();
     const memoryId = `conv:${msg.messageId}`;
     await storeExtraction(client, extraction, memoryId, msg.timestamp);
-    import("./conversation-wiki-populator-EBUZXYEU.js").then(
+    import("./conversation-wiki-populator-OS4C6W54.js").then(
       ({ populateWikiFromExtraction }) => populateWikiFromExtraction(extraction, msg, agentResponse, agentName)
     ).catch((err) => {
       process.stderr.write(

package/dist/{chunk-X2P43TB2.js → chunk-YTSXPJUQ.js}

@@ -12,7 +12,7 @@ import {
 } from "./chunk-4QCFFW2H.js";
 import {
   getProjectName
-} from "./chunk-W2IRQJ6R.js";
+} from "./chunk-JTVIANUB.js";
 
 // src/lib/post-tool-memory.ts
 var NON_INGESTIBLE_TOOLS = /* @__PURE__ */ new Set([