@askexenow/exe-os 0.9.372 → 0.9.374

package/dist/bin/exe-export-behaviors.js

@@ -1,36 +1,37 @@
 #!/usr/bin/env node
 import {
   exportBehaviorsForAgent
-} from "../chunk-PM6WSWVU.js";
-import "../chunk-ELXFSIIM.js";
-import "../chunk-MBNIJXKI.js";
-import "../chunk-PGLPUP37.js";
+} from "../chunk-UBK7HK3J.js";
+import "../chunk-32YV32VA.js";
+import "../chunk-WMEYJT4R.js";
+import "../chunk-XZ65ST2I.js";
 import "../chunk-QGGH7LOU.js";
 import {
   disposeStore
-} from "../chunk-OYQNNKNS.js";
-import "../chunk-7UTJA6HF.js";
+} from "../chunk-MXPNVSXI.js";
+import "../chunk-VZAFWPAY.js";
 import "../chunk-CHCA3ZM2.js";
 import "../chunk-OTVEIJUQ.js";
-import "../chunk-3F2UB4IQ.js";
+import "../chunk-DN4YVV4Z.js";
 import {
   fastDbInit
-} from "../chunk-HR2R2QER.js";
+} from "../chunk-M4IRPXSZ.js";
 import "../chunk-5MOYSU5A.js";
 import "../chunk-4QCFFW2H.js";
 import "../chunk-76CJBM36.js";
-import "../chunk-L6ZNURWN.js";
-import "../chunk-UQUUNGTP.js";
-import "../chunk-IVU3WN7S.js";
-import "../chunk-RIECV7SR.js";
-import "../chunk-LNOS24GV.js";
+import "../chunk-7GE2EQ23.js";
+import "../chunk-NUK7EEN5.js";
+import "../chunk-ZG62LIK3.js";
+import "../chunk-EKYYMIVT.js";
 import "../chunk-NLEW62VC.js";
+import "../chunk-SLLLOOEI.js";
+import "../chunk-V3WLC5TJ.js";
 import "../chunk-MP2AFCGL.js";
-import "../chunk-5DCCKHDY.js";
-import "../chunk-TKDITWDN.js";
+import "../chunk-TAMDAOCU.js";
 import "../chunk-BBMTVAE3.js";
+import "../chunk-TKDITWDN.js";
 import "../chunk-5YEUPUV4.js";
-import "../chunk-UTDMTQNH.js";
+import "../chunk-DSJI76XL.js";
 import "../chunk-YYB5PMTK.js";
 import "../chunk-NJFJWQNN.js";
 import "../chunk-V3W3SATA.js";
@@ -39,8 +40,9 @@ import "../chunk-FXU7JOXK.js";
 import "../chunk-HPXFKUGU.js";
 import "../chunk-A7JYF4RG.js";
 import "../chunk-ARX6TAGN.js";
-import "../chunk-QMSEL5YS.js";
+import "../chunk-ZIG7VPJV.js";
 import "../chunk-HSGBZSCA.js";
+import "../chunk-RH4AH3YB.js";
 import "../chunk-JKKZGDLP.js";
 import "../chunk-MLKGABMK.js";
 

package/dist/bin/exe-forget.js

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import {
   lightweightSearch
-} from "../chunk-ZXB56YR2.js";
+} from "../chunk-TFKCERAK.js";
 import "../chunk-VMHZSZQJ.js";
-import "../chunk-OYQNNKNS.js";
-import "../chunk-7UTJA6HF.js";
+import "../chunk-MXPNVSXI.js";
+import "../chunk-VZAFWPAY.js";
 import "../chunk-CHCA3ZM2.js";
 import "../chunk-OTVEIJUQ.js";
-import "../chunk-3F2UB4IQ.js";
+import "../chunk-DN4YVV4Z.js";
 import {
   fastDbInit
-} from "../chunk-HR2R2QER.js";
+} from "../chunk-M4IRPXSZ.js";
 import "../chunk-5MOYSU5A.js";
 import "../chunk-4QCFFW2H.js";
 import "../chunk-76CJBM36.js";
@@ -18,19 +18,20 @@ import "../chunk-GJV3WDWM.js";
 import "../chunk-MP2AFCGL.js";
 import {
   getClient
-} from "../chunk-5DCCKHDY.js";
-import "../chunk-TKDITWDN.js";
+} from "../chunk-TAMDAOCU.js";
 import "../chunk-BBMTVAE3.js";
+import "../chunk-TKDITWDN.js";
 import "../chunk-5YEUPUV4.js";
-import "../chunk-UTDMTQNH.js";
+import "../chunk-DSJI76XL.js";
 import "../chunk-YYB5PMTK.js";
 import "../chunk-NJFJWQNN.js";
 import "../chunk-V3W3SATA.js";
 import "../chunk-JY5GAZYC.js";
 import "../chunk-FXU7JOXK.js";
 import "../chunk-HPXFKUGU.js";
-import "../chunk-QMSEL5YS.js";
+import "../chunk-ZIG7VPJV.js";
 import "../chunk-HSGBZSCA.js";
+import "../chunk-RH4AH3YB.js";
 import {
   isMainModule
 } from "../chunk-6Y4B3QF6.js";

package/dist/bin/exe-gateway.js

@@ -5,28 +5,29 @@ import {
 import {
   BotRegistry,
   Gateway
-} from "../chunk-E7UCDSUE.js";
-import "../chunk-KXYFBBZR.js";
-import "../chunk-TK4MI6F6.js";
-import "../chunk-ADNBOKYZ.js";
+} from "../chunk-UKLN57Q5.js";
+import "../chunk-YMP2QSOP.js";
+import "../chunk-YSLGFPWX.js";
+import "../chunk-GM7TLYOK.js";
 import "../chunk-ML4S5SHZ.js";
 import "../chunk-MP2AFCGL.js";
 import {
   getCoordinatorName
-} from "../chunk-5DCCKHDY.js";
-import "../chunk-TKDITWDN.js";
+} from "../chunk-TAMDAOCU.js";
 import "../chunk-BBMTVAE3.js";
+import "../chunk-TKDITWDN.js";
 import "../chunk-5YEUPUV4.js";
-import "../chunk-UTDMTQNH.js";
+import "../chunk-DSJI76XL.js";
 import "../chunk-YYB5PMTK.js";
 import "../chunk-NJFJWQNN.js";
 import "../chunk-V3W3SATA.js";
 import "../chunk-JY5GAZYC.js";
 import "../chunk-FXU7JOXK.js";
-import "../chunk-QMSEL5YS.js";
+import "../chunk-ZIG7VPJV.js";
 import {
   enforcePrivateFileSync
 } from "../chunk-HSGBZSCA.js";
+import "../chunk-RH4AH3YB.js";
 import "../chunk-JKKZGDLP.js";
 import "../chunk-MLKGABMK.js";
 
@@ -37,7 +38,7 @@ import os2 from "os";
 import { fileURLToPath } from "url";
 
 // src/gateway/webhook-server.ts
-import crypto from "crypto";
+import crypto2 from "crypto";
 import {
   createServer
 } from "http";
@@ -555,6 +556,139 @@ function clampRows(value) {
   return Math.min(Math.floor(value), HARD_MAX_ROWS);
 }
 
+// src/gateway/platform-signatures.ts
+import crypto from "crypto";
+var REPLAY_TOLERANCE_SEC = 300;
+var SIGNED_PLATFORMS = /* @__PURE__ */ new Set(["slack", "discord", "telegram"]);
+function isSignedPlatform(platform) {
+  return SIGNED_PLATFORMS.has(platform);
+}
+function firstHeaderValue(value) {
+  if (Array.isArray(value)) return value[0];
+  return value;
+}
+function normalizeStringArray(values) {
+  if (!values) return [];
+  const unique = /* @__PURE__ */ new Set();
+  for (const value of values) {
+    const normalized = value?.trim();
+    if (normalized) unique.add(normalized);
+  }
+  return [...unique];
+}
+function normalizeWebhookSignatures(config) {
+  return {
+    slackSigningSecrets: normalizeStringArray(config?.slackSigningSecrets),
+    discordPublicKeys: normalizeStringArray(config?.discordPublicKeys),
+    telegramSecretTokens: normalizeStringArray(config?.telegramSecretTokens)
+  };
+}
+function verifySlackWebhook(req, rawBody, signingSecrets) {
+  if (signingSecrets.length === 0) {
+    return { ok: false, status: 503, error: "Slack webhook signing secret not configured" };
+  }
+  const timestamp = firstHeaderValue(req.headers["x-slack-request-timestamp"]);
+  const signature = firstHeaderValue(req.headers["x-slack-signature"]);
+  if (!timestamp || !signature?.startsWith("v0=")) {
+    return { ok: false, status: 401, error: "Missing Slack webhook signature" };
+  }
+  const seconds = Number(timestamp);
+  if (!Number.isFinite(seconds)) {
+    return { ok: false, status: 401, error: "Invalid Slack webhook timestamp" };
+  }
+  if (Math.abs(Date.now() / 1e3 - seconds) > REPLAY_TOLERANCE_SEC) {
+    return { ok: false, status: 401, error: "Stale Slack webhook signature" };
+  }
+  const providedHex = signature.slice("v0=".length);
+  if (!/^[0-9a-fA-F]{64}$/.test(providedHex)) {
+    return { ok: false, status: 401, error: "Invalid Slack webhook signature" };
+  }
+  const base = Buffer.concat([Buffer.from(`v0:${timestamp}:`, "utf-8"), rawBody]);
+  const provided = Buffer.from(providedHex, "hex");
+  for (const secret of signingSecrets) {
+    const expected = crypto.createHmac("sha256", secret).update(base).digest();
+    if (provided.length === expected.length && crypto.timingSafeEqual(provided, expected)) {
+      return { ok: true };
+    }
+  }
+  return { ok: false, status: 401, error: "Invalid Slack webhook signature" };
+}
+function verifyDiscordWebhook(req, rawBody, publicKeys) {
+  if (publicKeys.length === 0) {
+    return { ok: false, status: 503, error: "Discord webhook public key not configured" };
+  }
+  const signatureHex = firstHeaderValue(req.headers["x-signature-ed25519"]);
+  const timestamp = firstHeaderValue(req.headers["x-signature-timestamp"]);
+  if (!signatureHex || !timestamp) {
+    return { ok: false, status: 401, error: "Missing Discord webhook signature" };
+  }
+  if (!/^[0-9a-fA-F]+$/.test(signatureHex) || signatureHex.length % 2 !== 0) {
+    return { ok: false, status: 401, error: "Invalid Discord webhook signature" };
+  }
+  const seconds = Number(timestamp);
+  if (!Number.isFinite(seconds)) {
+    return { ok: false, status: 401, error: "Invalid Discord webhook timestamp" };
+  }
+  if (Math.abs(Date.now() / 1e3 - seconds) > REPLAY_TOLERANCE_SEC) {
+    return { ok: false, status: 401, error: "Stale Discord webhook signature" };
+  }
+  const signature = Buffer.from(signatureHex, "hex");
+  const payload = Buffer.concat([Buffer.from(timestamp, "utf-8"), rawBody]);
+  for (const publicKey of publicKeys) {
+    try {
+      if (crypto.verify(null, payload, createDiscordPublicKey(publicKey), signature)) {
+        return { ok: true };
+      }
+    } catch {
+    }
+  }
+  return { ok: false, status: 401, error: "Invalid Discord webhook signature" };
+}
+function createDiscordPublicKey(publicKey) {
+  if (publicKey.includes("BEGIN PUBLIC KEY")) {
+    return crypto.createPublicKey(publicKey);
+  }
+  const rawKey = Buffer.from(publicKey.trim(), "hex");
+  if (rawKey.length !== 32) {
+    throw new Error("Discord public key must be a 32-byte Ed25519 key");
+  }
+  const spkiPrefix = Buffer.from("302a300506032b6570032100", "hex");
+  return crypto.createPublicKey({
+    key: Buffer.concat([spkiPrefix, rawKey]),
+    format: "der",
+    type: "spki"
+  });
+}
+function verifyTelegramWebhook(req, secretTokens) {
+  if (secretTokens.length === 0) {
+    return { ok: false, status: 503, error: "Telegram webhook secret_token not configured" };
+  }
+  const provided = firstHeaderValue(req.headers["x-telegram-bot-api-secret-token"]);
+  if (!provided) {
+    return { ok: false, status: 401, error: "Missing Telegram webhook secret token" };
+  }
+  const providedBuffer = Buffer.from(provided);
+  for (const secret of secretTokens) {
+    const expectedBuffer = Buffer.from(secret);
+    if (providedBuffer.length === expectedBuffer.length && crypto.timingSafeEqual(providedBuffer, expectedBuffer)) {
+      return { ok: true };
+    }
+  }
+  return { ok: false, status: 401, error: "Invalid Telegram webhook secret token" };
+}
+function verifyPlatformWebhook(platform, req, rawBody, signatures) {
+  switch (platform) {
+    case "slack":
+      return verifySlackWebhook(req, rawBody, signatures.slackSigningSecrets);
+    case "discord":
+      return verifyDiscordWebhook(req, rawBody, signatures.discordPublicKeys);
+    case "telegram":
+      return verifyTelegramWebhook(req, signatures.telegramSecretTokens);
+    default:
+      return { ok: true };
+  }
+}
+
 // src/gateway/webhook-server.ts
 var DEFAULT_HOST = process.env.EXE_WEBHOOK_HOST || "127.0.0.1";
 var BODY_SIZE_LIMIT = 1048576;
@@ -567,9 +701,10 @@ function verifyWebhookSignature(rawBody, signature, secret, toleranceSec = 300)
   const timestamp = parseInt(timestampStr, 10);
   if (isNaN(timestamp)) return false;
   if (Math.abs(Date.now() / 1e3 - timestamp) > toleranceSec) return false;
-  const expected = crypto.createHmac("sha256", secret).update(`${timestamp}.${rawBody}`).digest("hex");
+  if (!/^[0-9a-f]{64}$/i.test(hash)) return false;
+  const expected = crypto2.createHmac("sha256", secret).update(`${timestamp}.${rawBody}`).digest("hex");
   if (hash.length !== expected.length) return false;
-  return crypto.timingSafeEqual(
+  return crypto2.timingSafeEqual(
     Buffer.from(hash, "hex"),
     Buffer.from(expected, "hex")
   );
@@ -617,6 +752,7 @@ var WebhookServer = class {
   constructor(config, queryHandler = new QueryHandler()) {
     this.config = config;
     this.queryHandler = queryHandler;
+    this.webhookSignatures = normalizeWebhookSignatures(config.webhookSignatures);
     if (process.env.NODE_ENV === "production" && !config.authToken && !config.webhookSigningSecret) {
       throw new Error(
         "[webhook-server] authToken or webhookSigningSecret is required in production. Set it in ~/.exe-os/gateway.json or pass it in WebhookServerConfig."
@@ -629,6 +765,7 @@ var WebhookServer = class {
   handlers = /* @__PURE__ */ new Map();
   startedAt = 0;
   readOnlySqlRunner = new ReadOnlySqlRunner();
+  webhookSignatures;
   /** Register a handler for a platform: POST /webhook/:platform */
   onPlatform(platform, handler) {
     this.handlers.set(platform, handler);
@@ -784,7 +921,19 @@ var WebhookServer = class {
     } catch (err) {
       parseError = err instanceof Error ? err : new Error(String(err));
     }
-    if (this.config.webhookSigningSecret) {
+    const platform = extractPlatform(url);
+    if (platform && isSignedPlatform(platform)) {
+      const verification = verifyPlatformWebhook(
+        platform,
+        req,
+        Buffer.from(rawBody, "utf-8"),
+        this.webhookSignatures
+      );
+      if (!verification.ok && !this.allowsUnverifiedLocalInjection()) {
+        sendJson(res, verification.status, { error: verification.error });
+        return;
+      }
+    } else if (this.config.webhookSigningSecret) {
       const sig = req.headers["x-webhook-signature"];
       if (!verifyWebhookSignature(
         rawBody,
@@ -801,7 +950,6 @@ var WebhookServer = class {
       sendJson(res, 401, { error: "Webhook authentication is not configured" });
       return;
     }
-    const platform = extractPlatform(url);
     if (!platform) {
       sendJson(res, 200, { received: false, accepted: false, error: "No platform specified" });
       return;
@@ -829,6 +977,13 @@ var WebhookServer = class {
       );
     }
   }
+  /**
+   * Internal/test injection escape hatch for platform-signed webhooks.
+   * Explicit opt-in only, and never available in production.
+   */
+  allowsUnverifiedLocalInjection() {
+    return this.config.allowUnauthenticatedWebhooks === true && process.env.NODE_ENV !== "production";
+  }
   verifyAuth(req) {
     return this.verifyToken(req, this.config.authToken);
   }
@@ -844,7 +999,7 @@ var WebhookServer = class {
     if (authHeader.startsWith(bearerPrefix)) {
       const provided = Buffer.from(authHeader.slice(bearerPrefix.length));
       const expected = Buffer.from(expectedToken);
-      if (provided.length === expected.length && crypto.timingSafeEqual(provided, expected)) return true;
+      if (provided.length === expected.length && crypto2.timingSafeEqual(provided, expected)) return true;
     }
     if (process.env.NODE_ENV === "production") return false;
     const url = new URL(req.url ?? "/", `http://${req.headers.host ?? "localhost"}`);
@@ -949,6 +1104,21 @@ function validateApiRouterProductionEnv(env = process.env, logger = console) {
     );
   }
 }
+function parseListEnv(value) {
+  if (value == null || value === "") return void 0;
+  const parts = value.split(",").map((v) => v.trim()).filter(Boolean);
+  return parts.length > 0 ? parts : void 0;
+}
+function pickSecrets(fileValue, envValue) {
+  return fileValue && fileValue.length > 0 ? fileValue : envValue;
+}
+function mergeWebhookSignatures(fileConfig, envConfig) {
+  return {
+    slackSigningSecrets: pickSecrets(fileConfig?.slackSigningSecrets, envConfig?.slackSigningSecrets),
+    discordPublicKeys: pickSecrets(fileConfig?.discordPublicKeys, envConfig?.discordPublicKeys),
+    telegramSecretTokens: pickSecrets(fileConfig?.telegramSecretTokens, envConfig?.telegramSecretTokens)
+  };
+}
 function parseBooleanEnv(value) {
   if (value == null || value === "") return void 0;
   return /^(1|true|yes|on)$/i.test(value);
@@ -962,7 +1132,12 @@ function loadConfig(configPath = CONFIG_PATH) {
     queryAuthToken: process.env.EXE_GATEWAY_QUERY_AUTH_TOKEN,
     whatsappVerifyToken: process.env.EXE_GATEWAY_WHATSAPP_VERIFY_TOKEN,
     webhookSigningSecret: process.env.EXE_GATEWAY_WEBHOOK_SIGNING_SECRET,
-    allowUnauthenticatedWebhooks: parseBooleanEnv(process.env.EXE_GATEWAY_ALLOW_UNAUTHENTICATED_WEBHOOKS)
+    allowUnauthenticatedWebhooks: parseBooleanEnv(process.env.EXE_GATEWAY_ALLOW_UNAUTHENTICATED_WEBHOOKS),
+    webhookSignatures: {
+      slackSigningSecrets: parseListEnv(process.env.EXE_GATEWAY_SLACK_SIGNING_SECRET),
+      discordPublicKeys: parseListEnv(process.env.EXE_GATEWAY_DISCORD_PUBLIC_KEY),
+      telegramSecretTokens: parseListEnv(process.env.EXE_GATEWAY_TELEGRAM_SECRET_TOKEN)
+    }
   };
   if (!existsSync(configPath)) {
     console.log(
@@ -982,7 +1157,11 @@ function loadConfig(configPath = CONFIG_PATH) {
       queryAuthToken: parsed.queryAuthToken ?? envDefaults.queryAuthToken,
       whatsappVerifyToken: parsed.whatsappVerifyToken ?? envDefaults.whatsappVerifyToken,
       webhookSigningSecret: parsed.webhookSigningSecret ?? envDefaults.webhookSigningSecret,
-      allowUnauthenticatedWebhooks: parsed.allowUnauthenticatedWebhooks ?? envDefaults.allowUnauthenticatedWebhooks
+      allowUnauthenticatedWebhooks: parsed.allowUnauthenticatedWebhooks ?? envDefaults.allowUnauthenticatedWebhooks,
+      webhookSignatures: mergeWebhookSignatures(
+        parsed.webhookSignatures,
+        envDefaults.webhookSignatures
+      )
     };
   } catch (err) {
     console.error(
@@ -1038,7 +1217,8 @@ async function main() {
     queryAuthToken: config.queryAuthToken,
     whatsappVerifyToken: config.whatsappVerifyToken,
     webhookSigningSecret: config.webhookSigningSecret,
-    allowUnauthenticatedWebhooks: config.allowUnauthenticatedWebhooks
+    allowUnauthenticatedWebhooks: config.allowUnauthenticatedWebhooks,
+    webhookSignatures: config.webhookSignatures
   });
   const platformConfigs = /* @__PURE__ */ new Map();
   const botRegistry = new BotRegistry();
@@ -1054,7 +1234,7 @@ async function main() {
   });
   const adapters = config.adapters ?? {};
   if (adapters.whatsapp?.enabled) {
-    const { WhatsAppAdapter } = await import("../whatsapp-QW3X7OCN.js");
+    const { WhatsAppAdapter } = await import("../whatsapp-YM4A2CSK.js");
     const wa = new WhatsAppAdapter();
     server.onPlatform("whatsapp", (body) => wa.injectMessage(body));
     gateway.registerAdapter(wa);
@@ -1158,7 +1338,7 @@ async function main() {
     console.log("[exe-gateway] Generic webhook adapter registered");
   }
   {
-    const { createCRMWebhookHandler } = await import("../crm-webhook-FTW3XZTO.js");
+    const { createCRMWebhookHandler } = await import("../crm-webhook-GYWQRFET.js");
     const handler = createCRMWebhookHandler();
     server.onPlatform("crm", handler);
     console.log("[exe-gateway] CRM webhook adapter registered");

package/dist/bin/exe-grant.js

@@ -7,7 +7,7 @@ import "../chunk-MLKGABMK.js";
 // src/bin/exe-grant.ts
 async function primeGrants() {
   const { getMasterKey } = await import("../lib/keychain.js");
-  const { primeGrantsMacKey } = await import("../monitor-grants-BW2WL4IU.js");
+  const { primeGrantsMacKey } = await import("../monitor-grants-EV747HMW.js");
   const master = await getMasterKey();
   if (!master) return false;
   primeGrantsMacKey(master);
@@ -34,7 +34,7 @@ async function runAdd(ownerPubB64, label) {
     console.error("Usage: exe-os grant add <ownerPubB64> [label]");
     return 1;
   }
-  const { orgModeActive } = await import("../org-membership-ESALTLLN.js");
+  const { orgModeActive } = await import("../org-membership-WRT2IHJK.js");
   if (orgModeActive()) {
     console.error("Refusing to add a monitoring grant: this install belongs to an organization.");
     console.error("");
@@ -51,7 +51,7 @@ async function runAdd(ownerPubB64, label) {
     requireKeyMessage();
     return 1;
   }
-  const { addGrant } = await import("../monitor-grants-BW2WL4IU.js");
+  const { addGrant } = await import("../monitor-grants-EV747HMW.js");
   try {
     const { grant_id, created } = addGrant(ownerPubB64, label);
     if (created) {
@@ -72,7 +72,7 @@ async function runList() {
     requireKeyMessage();
     return 1;
   }
-  const { listGrants } = await import("../monitor-grants-BW2WL4IU.js");
+  const { listGrants } = await import("../monitor-grants-EV747HMW.js");
   const grants = listGrants();
   if (grants.length === 0) {
     console.log("No monitoring grants. Monitoring is OFF (blobs are v=1).");
@@ -97,7 +97,7 @@ async function runRevoke(idOrPub) {
     requireKeyMessage();
     return 1;
   }
-  const { revokeGrant } = await import("../monitor-grants-BW2WL4IU.js");
+  const { revokeGrant } = await import("../monitor-grants-EV747HMW.js");
   const revoked = revokeGrant(idOrPub);
   if (revoked === 0) {
     console.error(`No active grant matched: ${idOrPub}`);

package/dist/bin/exe-healthcheck.js

@@ -15,30 +15,31 @@ import {
   healthcheckTimeoutMs,
   runHealthCheck,
   runHealthCheckWithDeadline
-} from "../chunk-QLA3RTH4.js";
+} from "../chunk-AWWKRZMB.js";
 import "../chunk-SSC7EKY2.js";
-import "../chunk-E5HAY3DQ.js";
+import "../chunk-HDLAB7W3.js";
 import "../chunk-75H4R62K.js";
-import "../chunk-YYA5LXCT.js";
-import "../chunk-LDL3S7AC.js";
+import "../chunk-FNEZ4BWT.js";
+import "../chunk-NKETJCB5.js";
 import "../chunk-B6TI3TZT.js";
 import "../chunk-4QCFFW2H.js";
-import "../chunk-5DCCKHDY.js";
-import "../chunk-TKDITWDN.js";
+import "../chunk-TAMDAOCU.js";
 import "../chunk-BBMTVAE3.js";
+import "../chunk-TKDITWDN.js";
 import "../chunk-5YEUPUV4.js";
-import "../chunk-UTDMTQNH.js";
+import "../chunk-DSJI76XL.js";
 import "../chunk-YYB5PMTK.js";
 import "../chunk-NJFJWQNN.js";
 import "../chunk-V3W3SATA.js";
 import "../chunk-JY5GAZYC.js";
 import "../chunk-FXU7JOXK.js";
 import "../chunk-HPXFKUGU.js";
-import "../chunk-TCTED52S.js";
+import "../chunk-FTZET5YX.js";
 import "../chunk-A7JYF4RG.js";
 import "../chunk-ARX6TAGN.js";
-import "../chunk-QMSEL5YS.js";
+import "../chunk-ZIG7VPJV.js";
 import "../chunk-HSGBZSCA.js";
+import "../chunk-RH4AH3YB.js";
 import "../chunk-JKKZGDLP.js";
 import "../chunk-MLKGABMK.js";
 export {

package/dist/bin/exe-heartbeat.js

@@ -1,75 +1,78 @@
 #!/usr/bin/env node
 import {
   countTieredReviewReceipts
-} from "../chunk-5AHDQCTB.js";
+} from "../chunk-XXFKSJYA.js";
 import {
   querySubagentCheckpointCounts
-} from "../chunk-JKXZGRWR.js";
+} from "../chunk-LP4GB656.js";
 import {
   shutdownCli
-} from "../chunk-ORA5BWCV.js";
+} from "../chunk-NRG7KZIP.js";
 import {
   fastDbInit
-} from "../chunk-HR2R2QER.js";
+} from "../chunk-M4IRPXSZ.js";
 import {
   isExeSession,
   listPendingReviews,
   strictSessionScopeFilter
-} from "../chunk-XHYHX6F7.js";
+} from "../chunk-AKLQSC6W.js";
 import "../chunk-BTSWFMEH.js";
-import "../chunk-WAEKYKTK.js";
-import "../chunk-44C7QNZS.js";
-import "../chunk-JTWTBX2M.js";
+import "../chunk-6RKKVPYF.js";
+import "../chunk-4EN3IZ3Q.js";
 import "../chunk-KI5PFRG6.js";
+import "../chunk-3KDCORDO.js";
 import "../chunk-WT4RI36X.js";
 import "../chunk-E23LNUWJ.js";
 import "../chunk-QAEWWYHL.js";
 import "../chunk-EIKATSE4.js";
-import "../chunk-MDGYXUOV.js";
-import "../chunk-GBNB4EWD.js";
-import "../chunk-UXLO7VHX.js";
-import "../chunk-DSOQUQTV.js";
-import "../chunk-E2WEFZOR.js";
+import "../chunk-MJCSEIFI.js";
+import "../chunk-XH7YL7JM.js";
+import "../chunk-ORM7ZFKC.js";
+import "../chunk-VI4ATC6I.js";
+import "../chunk-A27Q27CT.js";
+import "../chunk-W75GTHR3.js";
 import "../chunk-AJIXH5JF.js";
-import "../chunk-L6ZNURWN.js";
-import "../chunk-XTWHNLGD.js";
+import "../chunk-7GE2EQ23.js";
+import "../chunk-GZOG2MAX.js";
 import "../chunk-AM7S2TY6.js";
-import "../chunk-HIIXCAEE.js";
+import "../chunk-6YVUR3OU.js";
 import "../chunk-CVYC6DUW.js";
-import "../chunk-QZL6E4UB.js";
-import "../chunk-CDUB5Q6J.js";
-import "../chunk-UQUUNGTP.js";
-import "../chunk-IVU3WN7S.js";
-import "../chunk-RIECV7SR.js";
-import "../chunk-LNOS24GV.js";
+import "../chunk-GOMQ7PVQ.js";
+import "../chunk-4IK2K3B3.js";
+import "../chunk-NUK7EEN5.js";
+import "../chunk-ZG62LIK3.js";
+import "../chunk-EKYYMIVT.js";
 import "../chunk-NLEW62VC.js";
-import "../chunk-W2IRQJ6R.js";
+import "../chunk-SLLLOOEI.js";
+import "../chunk-V3WLC5TJ.js";
+import "../chunk-JTVIANUB.js";
 import "../chunk-HYZV25LY.js";
 import "../chunk-GJV3WDWM.js";
 import "../chunk-MP2AFCGL.js";
 import {
   getClient,
   getCoordinatorName
-} from "../chunk-5DCCKHDY.js";
-import "../chunk-TKDITWDN.js";
+} from "../chunk-TAMDAOCU.js";
 import "../chunk-BBMTVAE3.js";
+import "../chunk-TKDITWDN.js";
 import "../chunk-5YEUPUV4.js";
-import "../chunk-UTDMTQNH.js";
+import "../chunk-DSJI76XL.js";
 import "../chunk-YYB5PMTK.js";
 import "../chunk-NJFJWQNN.js";
 import "../chunk-V3W3SATA.js";
 import "../chunk-JY5GAZYC.js";
 import "../chunk-FXU7JOXK.js";
 import "../chunk-WNBZJSQT.js";
-import "../chunk-DKBPCOU4.js";
+import "../chunk-L6RXG36J.js";
 import "../chunk-A7XLR3K7.js";
-import "../chunk-GB3AHV5F.js";
+import "../chunk-GQOEWNVM.js";
 import "../chunk-A7JYF4RG.js";
 import "../chunk-ARX6TAGN.js";
 import {
   loadConfigSync
-} from "../chunk-QMSEL5YS.js";
+} from "../chunk-ZIG7VPJV.js";
 import "../chunk-HSGBZSCA.js";
+import "../chunk-RH4AH3YB.js";
 import {
   isMainModule
 } from "../chunk-6Y4B3QF6.js";
@@ -132,7 +135,7 @@ async function queryPendingReviews() {
   }
   let projectName;
   try {
-    const { getProjectName } = await import("../project-name-ILJTETUE.js");
+    const { getProjectName } = await import("../project-name-LJVFMYTQ.js");
     projectName = getProjectName() || void 0;
   } catch {
   }
@@ -217,7 +220,7 @@ async function querySubagentProgress() {
   const client = getClient();
   let projectName;
   try {
-    const { getProjectName } = await import("../project-name-ILJTETUE.js");
+    const { getProjectName } = await import("../project-name-LJVFMYTQ.js");
     projectName = getProjectName() || void 0;
   } catch {
     return "";
@@ -244,7 +247,7 @@ async function queryTieredReviewReceiptSummary() {
   }
   let projectName = null;
   try {
-    const { getProjectName } = await import("../project-name-ILJTETUE.js");
+    const { getProjectName } = await import("../project-name-LJVFMYTQ.js");
     projectName = getProjectName() || null;
   } catch {
   }