@askexenow/exe-os 0.9.38 → 0.9.40

package/dist/bin/cli.js

@@ -540,7 +540,8 @@ function isMultiInstance(agentName, employees) {
   return MULTI_INSTANCE_ROLES.has(emp.role.toLowerCase());
 }
 function addEmployee(employees, employee) {
-  const normalized = { ...employee, name: employee.name.toLowerCase() };
+  const { systemPrompt: _legacyPrompt, ...rest } = employee;
+  const normalized = { ...rest, name: employee.name.toLowerCase() };
   if (employees.some((e) => e.name.toLowerCase() === normalized.name)) {
     throw new Error(`Employee '${normalized.name}' already exists`);
   }
@@ -4864,8 +4865,8 @@ async function validateLicense(apiKey, deviceId) {
 }
 function getCacheAgeMs() {
   try {
-    const { statSync: statSync4 } = __require("fs");
-    const s = statSync4(CACHE_PATH);
+    const { statSync: statSync5 } = __require("fs");
+    const s = statSync5(CACHE_PATH);
     return Date.now() - s.mtimeMs;
   } catch {
     return Infinity;
@@ -7102,7 +7103,7 @@ __export(shard_manager_exports, {
   shardExists: () => shardExists
 });
 import path15 from "path";
-import { existsSync as existsSync15, mkdirSync as mkdirSync8, readdirSync as readdirSync3 } from "fs";
+import { existsSync as existsSync15, mkdirSync as mkdirSync8, readdirSync as readdirSync3, renameSync as renameSync3, statSync as statSync4 } from "fs";
 import { createClient as createClient2 } from "@libsql/client";
 function initShardManager(encryptionKey) {
   _encryptionKey = encryptionKey;
@@ -7124,7 +7125,7 @@ function getShardClient(projectName) {
   if (!_encryptionKey) {
     throw new Error("Shard manager not initialized. Call initShardManager() first.");
   }
-  const safeName = projectName.replace(/[^a-zA-Z0-9_-]/g, "_");
+  const safeName = safeShardName(projectName);
   if (!safeName || safeName === "unknown") {
     throw new Error(`Invalid project name for shard: "${projectName}" (resolved to "${safeName}")`);
   }
@@ -7146,9 +7147,12 @@ function getShardClient(projectName) {
   return client;
 }
 function shardExists(projectName) {
-  const safeName = projectName.replace(/[^a-zA-Z0-9_-]/g, "_");
+  const safeName = safeShardName(projectName);
   return existsSync15(path15.join(SHARDS_DIR, `${safeName}.db`));
 }
+function safeShardName(projectName) {
+  return projectName.replace(/[^a-zA-Z0-9_-]/g, "_");
+}
 function listShards() {
   if (!existsSync15(SHARDS_DIR)) return [];
   return readdirSync3(SHARDS_DIR).filter((f) => f.endsWith(".db")).map((f) => f.replace(".db", ""));
@@ -7242,7 +7246,8 @@ async function ensureShardSchema(client) {
     "ALTER TABLE memories ADD COLUMN token_cost REAL",
     "ALTER TABLE memories ADD COLUMN audience TEXT",
     "ALTER TABLE memories ADD COLUMN language_type TEXT",
-    "ALTER TABLE memories ADD COLUMN parent_memory_id TEXT"
+    "ALTER TABLE memories ADD COLUMN parent_memory_id TEXT",
+    "ALTER TABLE memories ADD COLUMN deleted_at TEXT"
   ]) {
     try {
       await client.execute(col);
@@ -7338,9 +7343,32 @@ async function ensureShardSchema(client) {
   }
 }
 async function getReadyShardClient(projectName) {
-  const client = getShardClient(projectName);
-  await ensureShardSchema(client);
-  return client;
+  const safeName = safeShardName(projectName);
+  let client = getShardClient(projectName);
+  try {
+    await ensureShardSchema(client);
+    return client;
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    if (!/SQLITE_NOTADB|file is not a database/i.test(message)) throw err;
+    client.close();
+    _shards.delete(safeName);
+    _shardLastAccess.delete(safeName);
+    const dbPath = path15.join(SHARDS_DIR, `${safeName}.db`);
+    if (existsSync15(dbPath)) {
+      const stat2 = statSync4(dbPath);
+      const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
+      const archivedPath = path15.join(SHARDS_DIR, `${safeName}.db.broken-${stamp}`);
+      renameSync3(dbPath, archivedPath);
+      process.stderr.write(
+        `[shard-manager] Archived unreadable shard ${safeName}: ${archivedPath} (${stat2.size} bytes, mtime ${stat2.mtime.toISOString()})
+`
+      );
+    }
+    client = getShardClient(projectName);
+    await ensureShardSchema(client);
+    return client;
+  }
 }
 function evictLRU() {
   let oldest = null;
@@ -9264,6 +9292,9 @@ function ensureDir() {
 function identityPath(agentId) {
   return path17.join(IDENTITY_DIR2, `${agentId}.md`);
 }
+function sanitizeIdentityBody(body) {
+  return body.replace(/<!--[\s\S]*?-->/g, "").trim();
+}
 function parseFrontmatter(raw) {
   const match = raw.match(/^---\n([\s\S]*?)\n---\n([\s\S]*)$/);
   if (!match) {
@@ -9276,11 +9307,11 @@ function parseFrontmatter(raw) {
         created_by: "system",
         updated_at: (/* @__PURE__ */ new Date()).toISOString()
       },
-      body: raw
+      body: sanitizeIdentityBody(raw)
     };
   }
   const yamlStr = match[1];
-  const body = match[2].trim();
+  const body = sanitizeIdentityBody(match[2]);
   const fm = {};
   for (const line of yamlStr.split("\n")) {
     const kv = line.match(/^(\w+):\s*(.+)$/);
@@ -9345,7 +9376,9 @@ function listIdentities() {
     const summary = lines[0]?.trim().slice(0, 120) ?? identity.frontmatter.title;
     results.push({
       agentId,
-      title: `${identity.frontmatter.title} (${identity.frontmatter.role.toUpperCase()})`,
+      // User-facing/team-facing title only. `frontmatter.role` is internal
+      // routing metadata and must not leak as an external title.
+      title: identity.frontmatter.title,
       summary
     });
   }
@@ -10176,7 +10209,7 @@ __export(intercom_queue_exports, {
   queueIntercom: () => queueIntercom,
   readQueue: () => readQueue
 });
-import { readFileSync as readFileSync15, writeFileSync as writeFileSync13, renameSync as renameSync3, existsSync as existsSync19, mkdirSync as mkdirSync13 } from "fs";
+import { readFileSync as readFileSync15, writeFileSync as writeFileSync13, renameSync as renameSync4, existsSync as existsSync19, mkdirSync as mkdirSync13 } from "fs";
 import path21 from "path";
 import os12 from "os";
 function ensureDir2() {
@@ -10195,7 +10228,7 @@ function writeQueue(queue) {
   ensureDir2();
   const tmp = `${QUEUE_PATH}.tmp`;
   writeFileSync13(tmp, JSON.stringify(queue, null, 2));
-  renameSync3(tmp, QUEUE_PATH);
+  renameSync4(tmp, QUEUE_PATH);
 }
 function queueIntercom(targetSession, reason) {
   const queue = readQueue();
@@ -13875,7 +13908,8 @@ __export(employee_templates_exports, {
 });
 function getSessionPrompt(storedPrompt) {
   const markerIndex = storedPrompt.indexOf(PROCEDURES_MARKER);
-  const rolePrompt = markerIndex >= 0 ? storedPrompt.slice(0, markerIndex).trimEnd() : storedPrompt;
+  const withoutProcedures = markerIndex >= 0 ? storedPrompt.slice(0, markerIndex).trimEnd() : storedPrompt;
+  const rolePrompt = withoutProcedures.replace(/^---\r?\n[\s\S]*?\r?\n---\r?\n?/, "").replace(/<!--[\s\S]*?-->/g, "").trimStart();
   const globalBlock = getGlobalProceduresBlock();
   return `${globalBlock}${rolePrompt}
 ${BASE_OPERATING_PROCEDURES}`;
@@ -14483,7 +14517,7 @@ __export(exe_rename_exports, {
   main: () => main2,
   renameEmployee: () => renameEmployee
 });
-import { readFileSync as readFileSync21, writeFileSync as writeFileSync17, renameSync as renameSync4, unlinkSync as unlinkSync11, existsSync as existsSync25 } from "fs";
+import { readFileSync as readFileSync21, writeFileSync as writeFileSync17, renameSync as renameSync5, unlinkSync as unlinkSync11, existsSync as existsSync25 } from "fs";
 import { execSync as execSync11 } from "child_process";
 import path31 from "path";
 import { homedir as homedir4 } from "os";
@@ -14512,7 +14546,8 @@ async function renameEmployee(oldName, newName, opts = {}) {
     const originalName = employee.name;
     const originalPrompt = employee.systemPrompt;
     employee.name = newName;
-    employee.systemPrompt = personalizePrompt(originalPrompt, rosterOldName, newName);
+    if (originalPrompt) employee.systemPrompt = personalizePrompt(originalPrompt, rosterOldName, newName);
+    else delete employee.systemPrompt;
     await saveEmployees(employees, rosterPath);
     rollbackStack.push({
       description: "restore roster",
@@ -14530,14 +14565,14 @@ async function renameEmployee(oldName, newName, opts = {}) {
         /^(agent_id:\s*)\S+/m,
         `$1${newName}`
       );
-      renameSync4(oldIdentityPath, newIdentityPath);
+      renameSync5(oldIdentityPath, newIdentityPath);
       writeFileSync17(newIdentityPath, updatedContent, "utf-8");
       rollbackStack.push({
         description: "restore identity file",
         undo: () => {
           if (existsSync25(newIdentityPath)) {
             writeFileSync17(newIdentityPath, content, "utf-8");
-            renameSync4(newIdentityPath, oldIdentityPath);
+            renameSync5(newIdentityPath, oldIdentityPath);
           }
         }
       });
@@ -14546,12 +14581,12 @@ async function renameEmployee(oldName, newName, opts = {}) {
     const newAgentPath = path31.join(agentsDir, `${newName}.md`);
     if (existsSync25(oldAgentPath)) {
       const agentContent = readFileSync21(oldAgentPath, "utf-8");
-      renameSync4(oldAgentPath, newAgentPath);
+      renameSync5(oldAgentPath, newAgentPath);
       rollbackStack.push({
         description: "restore agent file",
         undo: () => {
           if (existsSync25(newAgentPath)) {
-            renameSync4(newAgentPath, oldAgentPath);
+            renameSync5(newAgentPath, oldAgentPath);
             writeFileSync17(oldAgentPath, agentContent, "utf-8");
           }
         }
@@ -14680,7 +14715,7 @@ var init_exe_rename = __esm({
 });
 
 // src/lib/model-downloader.ts
-import { createWriteStream, createReadStream as createReadStream2, existsSync as existsSync26, unlinkSync as unlinkSync12, renameSync as renameSync5 } from "fs";
+import { createWriteStream, createReadStream as createReadStream2, existsSync as existsSync26, unlinkSync as unlinkSync12, renameSync as renameSync6 } from "fs";
 import { mkdir as mkdir6 } from "fs/promises";
 import { createHash as createHash4 } from "crypto";
 import path32 from "path";
@@ -14738,7 +14773,7 @@ async function downloadModel(opts) {
           `SHA256 mismatch: expected ${EXPECTED_SHA256}, got ${actualHash}`
         );
       }
-      renameSync5(tmpPath, destPath);
+      renameSync6(tmpPath, destPath);
       return destPath;
     } catch (err) {
       lastErr = err instanceof Error ? err : new Error(String(err));
@@ -15542,8 +15577,8 @@ async function validateModel(log) {
     log("Skipping in-memory model validation (low memory \u2014 will validate on first use).");
     const modelPath = path34.join(MODELS_DIR, LOCAL_FILENAME);
     if (existsSync28(modelPath)) {
-      const { statSync: statSync4 } = await import("fs");
-      const size = statSync4(modelPath).size;
+      const { statSync: statSync5 } = await import("fs");
+      const size = statSync5(modelPath).size;
       if (size > 300 * 1e6) {
         log(`Model file verified (${(size / 1e6).toFixed(0)} MB).`);
         return;
@@ -15964,15 +15999,9 @@ async function runSetupWizard(opts = {}) {
       cooName = (cooNameInput || DEFAULT_COORDINATOR_TEMPLATE_NAME2).toLowerCase();
       let employees = await loadEmployees2(EMPLOYEES_PATH2).catch(() => []);
       if (!employees.some((e) => e.name === cooName)) {
-        const { DEFAULT_EXE: DEFAULT_EXE2, personalizePrompt: personalizePrompt2 } = await Promise.resolve().then(() => (init_employee_templates(), employee_templates_exports));
         const cooEmployee = {
           name: cooName,
           role: "COO",
-          systemPrompt: personalizePrompt2(
-            DEFAULT_EXE2.systemPrompt,
-            DEFAULT_COORDINATOR_TEMPLATE_NAME2,
-            cooName
-          ),
           createdAt: (/* @__PURE__ */ new Date()).toISOString(),
           templateName: DEFAULT_COORDINATOR_TEMPLATE_NAME2,
           templateVersion: 1
@@ -16066,12 +16095,12 @@ async function runSetupWizard(opts = {}) {
       const ctoNameInput = await ask2(rl, `Name your CTO (default: ${ctoDefault}): `);
       const ctoName = (ctoNameInput || ctoDefault).toLowerCase();
       if (!employees.some((e) => e.name === ctoName)) {
-        const { personalizePrompt: personalizeCto } = await Promise.resolve().then(() => (init_employee_templates(), employee_templates_exports));
         const ctoEmployee = {
           name: ctoName,
           role: "CTO",
-          systemPrompt: personalizeCto(ctoTemplate?.systemPrompt ?? "", ctoDefault, ctoName),
-          createdAt: (/* @__PURE__ */ new Date()).toISOString()
+          createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+          templateName: ctoDefault,
+          templateVersion: 1
         };
         employees = addEmployee2(employees, ctoEmployee);
         await saveEmployees2(employees, EMPLOYEES_PATH2);
@@ -16089,12 +16118,12 @@ async function runSetupWizard(opts = {}) {
       const cmoNameInput = await ask2(rl, `Name your CMO (default: ${cmoDefault}): `);
       const cmoName = (cmoNameInput || cmoDefault).toLowerCase();
       if (!employees.some((e) => e.name === cmoName)) {
-        const { personalizePrompt: personalizeCmo } = await Promise.resolve().then(() => (init_employee_templates(), employee_templates_exports));
         const cmoEmployee = {
           name: cmoName,
           role: "CMO",
-          systemPrompt: personalizeCmo(cmoTemplate?.systemPrompt ?? "", cmoDefault, cmoName),
-          createdAt: (/* @__PURE__ */ new Date()).toISOString()
+          createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+          templateName: cmoDefault,
+          templateVersion: 1
         };
         employees = addEmployee2(employees, cmoEmployee);
         await saveEmployees2(employees, EMPLOYEES_PATH2);
@@ -16217,7 +16246,21 @@ function resolveDataDir2() {
   if (process.env.EXE_MEM_DIR) return process.env.EXE_MEM_DIR;
   return path35.join(os17.homedir(), ".exe-os");
 }
-async function createUpdateBackup(currentVersion, dataDir) {
+function externalBackupTargets(homeDir) {
+  return [
+    { name: "claude.json", path: path35.join(homeDir, ".claude.json") },
+    { name: "claude-settings.json", path: path35.join(homeDir, ".claude", "settings.json") },
+    { name: "claude-CLAUDE.md", path: path35.join(homeDir, ".claude", "CLAUDE.md") },
+    { name: "tmux.conf", path: path35.join(homeDir, ".tmux.conf") },
+    { name: "zshrc", path: path35.join(homeDir, ".zshrc") },
+    { name: "bashrc", path: path35.join(homeDir, ".bashrc") },
+    { name: "ghostty-config", path: path35.join(homeDir, ".config", "ghostty", "config") },
+    { name: "codex-config.toml", path: path35.join(homeDir, ".codex", "config.toml") },
+    { name: "codex-hooks.json", path: path35.join(homeDir, ".codex", "hooks.json") },
+    { name: "opencode-config.json", path: path35.join(homeDir, ".config", "opencode", "opencode.json") }
+  ];
+}
+async function createUpdateBackup(currentVersion, dataDir, homeDir = os17.homedir()) {
   const dir = dataDir ?? resolveDataDir2();
   const backupDir = path35.join(dir, BACKUP_DIR_NAME);
   if (existsSync29(backupDir)) {
@@ -16245,10 +16288,19 @@ async function createUpdateBackup(currentVersion, dataDir) {
       backedUpFiles.push(entry.name);
     }
   }
+  const externalFiles = [];
+  const externalDir = path35.join(backupDir, "external");
+  for (const target of externalBackupTargets(homeDir)) {
+    if (!existsSync29(target.path)) continue;
+    await mkdir7(externalDir, { recursive: true });
+    await copyFile(target.path, path35.join(externalDir, target.name));
+    externalFiles.push(target);
+  }
   const manifest = {
     version: currentVersion,
     timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-    files: backedUpFiles
+    files: backedUpFiles,
+    ...externalFiles.length > 0 ? { externalFiles } : {}
   };
   await writeFile7(
     path35.join(backupDir, "manifest.json"),
@@ -16279,6 +16331,12 @@ async function restoreFromBackup(dataDir) {
       await copyFile(src, dest);
     }
   }
+  for (const external of manifest.externalFiles ?? []) {
+    const src = path35.join(backupDir, "external", external.name);
+    if (!existsSync29(src)) continue;
+    await mkdir7(path35.dirname(external.path), { recursive: true });
+    await copyFile(src, external.path);
+  }
   return manifest;
 }
 async function deleteBackup(dataDir) {
@@ -16296,8 +16354,12 @@ var init_update_backup = __esm({
     BACKUP_TARGETS = [
       { name: "config.json", type: "file" },
       { name: "exe-employees.json", type: "file" },
+      { name: "agent-config.json", type: "file" },
       { name: "master.key", type: "file" },
-      { name: "identity", type: "dir" }
+      { name: "tmux.conf", type: "file" },
+      { name: "identity", type: "dir" },
+      { name: "shards", type: "dir" },
+      { name: "mcp-configs", type: "dir" }
       // All .db files (SQLCipher databases) — matched dynamically
     ];
   }
@@ -16536,7 +16598,7 @@ var init_update = __esm({
 
 // src/lib/stack-update.ts
 import { execFileSync as execFileSync3 } from "child_process";
-import { existsSync as existsSync30, mkdirSync as mkdirSync19, readFileSync as readFileSync25, renameSync as renameSync6, writeFileSync as writeFileSync20 } from "fs";
+import { existsSync as existsSync30, mkdirSync as mkdirSync19, readFileSync as readFileSync25, renameSync as renameSync7, writeFileSync as writeFileSync20 } from "fs";
 import http from "http";
 import https from "https";
 import path37 from "path";
@@ -16644,7 +16706,7 @@ async function runStackUpdate(options) {
   const patched = patchEnv(envRaw, updates);
   const tmp = `${options.envFile}.tmp-${process.pid}`;
   writeFileSync20(tmp, patched, { mode: 384 });
-  renameSync6(tmp, options.envFile);
+  renameSync7(tmp, options.envFile);
   const composeArgs = ["compose", "--file", options.composeFile, "--env-file", options.envFile];
   try {
     exec2("docker", [...composeArgs, "pull"]);
@@ -32111,7 +32173,7 @@ async function runActivate(key) {
   }
   const { saveLicense: saveLicense2, mirrorLicenseKey: mirrorLicenseKey2, validateLicense: validateLicense2 } = await Promise.resolve().then(() => (init_license(), license_exports));
   const { loadEmployees: loadEmployees2, saveEmployees: saveEmployees2, addEmployee: addEmployee2, registerBinSymlinks: registerBinSymlinks2 } = await Promise.resolve().then(() => (init_employees(), employees_exports));
-  const { getTemplateByRole: getTemplateByRole2, personalizePrompt: personalizePrompt2 } = await Promise.resolve().then(() => (init_employee_templates(), employee_templates_exports));
+  const { getTemplateByRole: getTemplateByRole2 } = await Promise.resolve().then(() => (init_employee_templates(), employee_templates_exports));
   const { getTemplate: getIdentityTemplate } = await Promise.resolve().then(() => (init_identity_templates(), identity_templates_exports));
   const { identityPath: identityPath2 } = await Promise.resolve().then(() => (init_identity(), identity_exports));
   const { createInterface: createInterface5 } = await import("readline");
@@ -32143,7 +32205,8 @@ async function runActivate(key) {
       if (create3.toLowerCase() === "n") return;
       const nameInput = await ask3(`Name your ${role} [${defaultName}]: `);
       const name = nameInput || defaultName;
-      const emp = { ...template, name, systemPrompt: personalizePrompt2(template.systemPrompt, template.name, name), createdAt: (/* @__PURE__ */ new Date()).toISOString() };
+      const { systemPrompt: _templatePrompt, ...templateMeta } = template;
+      const emp = { ...templateMeta, name, createdAt: (/* @__PURE__ */ new Date()).toISOString() };
       employees = addEmployee2(employees, emp);
       await saveEmployees2(employees);
       registerBinSymlinks2(name);

package/dist/bin/exe-agent.js

@@ -107,7 +107,7 @@ var init_config = __esm({
 
 // src/bin/exe-agent.ts
 import { createInterface } from "readline";
-import { readFileSync as readFileSync3 } from "fs";
+import { existsSync as existsSync4, readFileSync as readFileSync3 } from "fs";
 import path10 from "path";
 import os5 from "os";
 
@@ -1613,7 +1613,8 @@ When you need to assign work to another employee (e.g., CTO assigns to an engine
 var PROCEDURES_MARKER = "EXE OS \u2014 VISION AND NON-NEGOTIABLE PRINCIPLES";
 function getSessionPrompt(storedPrompt) {
   const markerIndex = storedPrompt.indexOf(PROCEDURES_MARKER);
-  const rolePrompt = markerIndex >= 0 ? storedPrompt.slice(0, markerIndex).trimEnd() : storedPrompt;
+  const withoutProcedures = markerIndex >= 0 ? storedPrompt.slice(0, markerIndex).trimEnd() : storedPrompt;
+  const rolePrompt = withoutProcedures.replace(/^---\r?\n[\s\S]*?\r?\n---\r?\n?/, "").replace(/<!--[\s\S]*?-->/g, "").trimStart();
   const globalBlock = getGlobalProceduresBlock();
   return `${globalBlock}${rolePrompt}
 ${BASE_OPERATING_PROCEDURES}`;
@@ -2259,9 +2260,16 @@ function parseArgs(argv) {
 }
 function loadEmployee(name) {
   try {
+    const identityPath = path10.join(os5.homedir(), ".exe-os", "identity", `${name}.md`);
     const rosterPath = path10.join(os5.homedir(), ".exe-os", "exe-employees.json");
     const roster = JSON.parse(readFileSync3(rosterPath, "utf8"));
-    return roster.find((e) => e.name.toLowerCase() === name.toLowerCase()) ?? null;
+    const employee = roster.find((e) => e.name.toLowerCase() === name.toLowerCase());
+    if (!employee) return null;
+    if (existsSync4(identityPath)) {
+      const identity = readFileSync3(identityPath, "utf8").trim();
+      if (identity.length > 0) return { role: employee.role, systemPrompt: identity };
+    }
+    return employee.systemPrompt ? { role: employee.role, systemPrompt: employee.systemPrompt } : null;
   } catch {
     return null;
   }

package/dist/bin/exe-assign.js

@@ -2751,7 +2751,7 @@ __export(shard_manager_exports, {
   shardExists: () => shardExists
 });
 import path7 from "path";
-import { existsSync as existsSync7, mkdirSync as mkdirSync2, readdirSync } from "fs";
+import { existsSync as existsSync7, mkdirSync as mkdirSync2, readdirSync, renameSync as renameSync3, statSync as statSync2 } from "fs";
 import { createClient as createClient2 } from "@libsql/client";
 function initShardManager(encryptionKey) {
   _encryptionKey = encryptionKey;
@@ -2773,7 +2773,7 @@ function getShardClient(projectName) {
   if (!_encryptionKey) {
     throw new Error("Shard manager not initialized. Call initShardManager() first.");
   }
-  const safeName = projectName.replace(/[^a-zA-Z0-9_-]/g, "_");
+  const safeName = safeShardName(projectName);
   if (!safeName || safeName === "unknown") {
     throw new Error(`Invalid project name for shard: "${projectName}" (resolved to "${safeName}")`);
   }
@@ -2795,9 +2795,12 @@ function getShardClient(projectName) {
   return client;
 }
 function shardExists(projectName) {
-  const safeName = projectName.replace(/[^a-zA-Z0-9_-]/g, "_");
+  const safeName = safeShardName(projectName);
   return existsSync7(path7.join(SHARDS_DIR, `${safeName}.db`));
 }
+function safeShardName(projectName) {
+  return projectName.replace(/[^a-zA-Z0-9_-]/g, "_");
+}
 function listShards() {
   if (!existsSync7(SHARDS_DIR)) return [];
   return readdirSync(SHARDS_DIR).filter((f) => f.endsWith(".db")).map((f) => f.replace(".db", ""));
@@ -2891,7 +2894,8 @@ async function ensureShardSchema(client) {
     "ALTER TABLE memories ADD COLUMN token_cost REAL",
     "ALTER TABLE memories ADD COLUMN audience TEXT",
     "ALTER TABLE memories ADD COLUMN language_type TEXT",
-    "ALTER TABLE memories ADD COLUMN parent_memory_id TEXT"
+    "ALTER TABLE memories ADD COLUMN parent_memory_id TEXT",
+    "ALTER TABLE memories ADD COLUMN deleted_at TEXT"
   ]) {
     try {
       await client.execute(col);
@@ -2987,9 +2991,32 @@ async function ensureShardSchema(client) {
   }
 }
 async function getReadyShardClient(projectName) {
-  const client = getShardClient(projectName);
-  await ensureShardSchema(client);
-  return client;
+  const safeName = safeShardName(projectName);
+  let client = getShardClient(projectName);
+  try {
+    await ensureShardSchema(client);
+    return client;
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    if (!/SQLITE_NOTADB|file is not a database/i.test(message)) throw err;
+    client.close();
+    _shards.delete(safeName);
+    _shardLastAccess.delete(safeName);
+    const dbPath = path7.join(SHARDS_DIR, `${safeName}.db`);
+    if (existsSync7(dbPath)) {
+      const stat = statSync2(dbPath);
+      const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
+      const archivedPath = path7.join(SHARDS_DIR, `${safeName}.db.broken-${stamp}`);
+      renameSync3(dbPath, archivedPath);
+      process.stderr.write(
+        `[shard-manager] Archived unreadable shard ${safeName}: ${archivedPath} (${stat.size} bytes, mtime ${stat.mtime.toISOString()})
+`
+      );
+    }
+    client = getShardClient(projectName);
+    await ensureShardSchema(client);
+    return client;
+  }
 }
 function evictLRU() {
   let oldest = null;