@askexenow/exe-os 0.9.394 → 0.9.396

package/dist/{chunk-UIFL3ACI.js → chunk-6Q3M7KZE.js}

@@ -14,10 +14,10 @@ import {
 import {
   buildClaudeHttpMcpEntry,
   buildClaudeStdioProxyMcpEntry
-} from "./chunk-BTQ3VK4R.js";
+} from "./chunk-5UUHXDX6.js";
 import {
   ensureAllAgentSymlinks
-} from "./chunk-XL5XSSBD.js";
+} from "./chunk-BJ3ZQAIL.js";
 import {
   MCP_LEGACY_KEY,
   MCP_PRIMARY_KEY
@@ -977,7 +977,7 @@ async function runInstaller(homeDir) {
     );
   }
   try {
-    const { generateAgentDefs, summarizeAgentDefResults } = await import("./agent-defs-generator-DUPDVGXT.js");
+    const { generateAgentDefs, summarizeAgentDefResults } = await import("./agent-defs-generator-PZJGE6PL.js");
     const defResults = generateAgentDefs({ homeDir: resolvedHome });
     process.stderr.write(`Agent definitions: ${summarizeAgentDefResults(defResults)}
 `);

package/dist/{chunk-OYAWTVLD.js → chunk-6VMVQ3G7.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-A7XLR3K7.js";
 import {
   getDeviceInfo
-} from "./chunk-CHQTJSE5.js";
+} from "./chunk-PKPJ62VF.js";
 import {
   EXE_AI_DIR
 } from "./chunk-MMS2HBRT.js";

package/dist/{chunk-ECTLDHVD.js → chunk-7C4YKCUK.js}

@@ -1,7 +1,7 @@
 import {
   getIdentity,
   loadEmployeesSync
-} from "./chunk-LOEY2UVH.js";
+} from "./chunk-DXQIIZQC.js";
 
 // src/lib/drift-probes.ts
 var DRIFT_THRESHOLD = 80;

package/dist/{chunk-O42JKBMU.js → chunk-7UCCSSJO.js}

@@ -4,7 +4,7 @@ import {
 import {
   isValidX25519Recipient,
   pubKeyHash
-} from "./chunk-WWUOHSEO.js";
+} from "./chunk-I4DBM5ME.js";
 
 // src/lib/monitor-grants.ts
 import crypto from "crypto";

package/dist/{chunk-F5WE6QDP.js → chunk-7WDLUCHN.js}

@@ -1,15 +1,15 @@
 import {
   getActiveAgent
-} from "./chunk-I2RKHNBD.js";
+} from "./chunk-RPOIKNJZ.js";
 import {
   listTasks
-} from "./chunk-Y3PPEY4I.js";
+} from "./chunk-V4RIHICU.js";
 import {
   getAgentContext
 } from "./chunk-GJV3WDWM.js";
 import {
   isCoordinatorName
-} from "./chunk-LOEY2UVH.js";
+} from "./chunk-DXQIIZQC.js";
 
 // src/mcp/tools/list-tasks.ts
 import { z } from "zod";

package/dist/{chunk-MA447ZGE.js → chunk-B2P6OX3V.js}

@@ -1,14 +1,14 @@
 import {
   resolveAuth,
   resolveEndpoint
-} from "./chunk-UV3IZRR3.js";
+} from "./chunk-4UOEKQF3.js";
 import {
   resolvePartnerIdentities
-} from "./chunk-7WWJKWVN.js";
+} from "./chunk-K3EU7B72.js";
 import {
   displayFingerprint,
   ed25519PrivateKeyFromSeed
-} from "./chunk-7M3PFO3L.js";
+} from "./chunk-LGNDHTDP.js";
 
 // src/lib/org-member-key.ts
 import { createHash, sign } from "crypto";

package/dist/{chunk-XL5XSSBD.js → chunk-BJ3ZQAIL.js}

@@ -1,6 +1,6 @@
 import {
   loadEmployees
-} from "./chunk-LOEY2UVH.js";
+} from "./chunk-DXQIIZQC.js";
 
 // src/lib/agent-symlinks.ts
 import os from "os";

package/dist/{chunk-RANDR43T.js → chunk-BKKZN3DJ.js}

@@ -466,7 +466,7 @@ async function createBackupAsync(reason = "manual", opts = {}) {
   let artifactState = "not-checked";
   let artifactDetail = "artifact read-back did not run";
   try {
-    const { manifestWriteEnabled, readBackBackupArtifact, manifestPathFor } = await import("./backup-verify-ES6KZRMX.js");
+    const { manifestWriteEnabled, readBackBackupArtifact, manifestPathFor } = await import("./backup-verify-SCFVPBZH.js");
     if (manifestWriteEnabled()) {
       const readback = await readBackBackupArtifact(backupPath, dbName, { keyHex: encryptionKey });
       artifactState = readback.artifact;
@@ -694,7 +694,7 @@ function recordMissedBackup(entry) {
 function alertMissedBackup(message, skipped) {
   void (async () => {
     try {
-      const { pushNotifyAsync } = await import("./push-notifications-J2B46KSV.js");
+      const { pushNotifyAsync } = await import("./push-notifications-UZQLJGEY.js");
       pushNotifyAsync({
         event: "backup_failed",
         title: skipped ? "Backup SKIPPED \u2014 disk full" : "Backup FAILED \u2014 disk full",

package/dist/{chunk-OJKFGGQY.js → chunk-BREDG6EG.js}

@@ -7,7 +7,7 @@ import {
 } from "./chunk-PYS43F2X.js";
 import {
   computeDegradations
-} from "./chunk-BOMLUVIQ.js";
+} from "./chunk-4CGMGUDL.js";
 import {
   NO_DB_INTEGRITY_EVENTS
 } from "./chunk-U4GMOT4M.js";
@@ -27,7 +27,7 @@ import {
 } from "./chunk-ZM6EZAVY.js";
 import {
   mcpHttpPort
-} from "./chunk-BTQ3VK4R.js";
+} from "./chunk-5UUHXDX6.js";
 import {
   redactSecrets
 } from "./chunk-T4IDLAZM.js";
@@ -36,7 +36,7 @@ import {
 } from "./chunk-YRUZK2QA.js";
 import {
   inspectKeyCustodySync
-} from "./chunk-VPM27HI6.js";
+} from "./chunk-5AGOX2XD.js";
 import {
   checkSingleGotrueInstance
 } from "./chunk-FTZET5YX.js";

package/dist/{chunk-5M7DUOBQ.js → chunk-BX336WRX.js}

@@ -1,6 +1,6 @@
 import {
   isManagementRole
-} from "./chunk-LOEY2UVH.js";
+} from "./chunk-DXQIIZQC.js";
 
 // src/lib/transcript-sidechain.ts
 import { readFileSync } from "fs";

package/dist/{chunk-BJ4Y3OLH.js → chunk-CEKNYT2D.js}

@@ -1,6 +1,6 @@
 import {
   filterWikiRecallResults
-} from "./chunk-NLKV5O5T.js";
+} from "./chunk-W3DHPCFX.js";
 import {
   buildFtsMatch,
   buildFtsMatchWithModifiers,
@@ -16,7 +16,7 @@ import {
   buildVisibilityTierFilter,
   buildWikiScopeFilter,
   searchMemories
-} from "./chunk-Q73L2DD2.js";
+} from "./chunk-V4JWFJZR.js";
 import {
   blobToVector
 } from "./chunk-OTVEIJUQ.js";
@@ -35,7 +35,7 @@ import {
   getClient,
   isFtsShadowCorruptionMessage,
   repairFtsTable
-} from "./chunk-LOEY2UVH.js";
+} from "./chunk-DXQIIZQC.js";
 
 // src/lib/memory-reads.ts
 import crypto from "crypto";
@@ -597,7 +597,7 @@ async function hybridSearch(queryText, agentId, options) {
   let rerankerAvailable = false;
   if (process.env.EXE_IS_DAEMON === "1") {
     try {
-      const { isRerankerAvailable } = await import("./reranker-GHTIDASD.js");
+      const { isRerankerAvailable } = await import("./reranker-6F6Y7QHA.js");
       rerankerAvailable = isRerankerAvailable();
     } catch {
     }
@@ -637,7 +637,7 @@ ${hydeDoc}`;
   if (config.fileGrepEnabled === true && !process.env.VITEST && !onFailOpenHotPath) {
     try {
       if (process.env.EXE_IS_DAEMON !== "1") {
-        const { getProjectName } = await import("./project-name-OZWVCHIV.js");
+        const { getProjectName } = await import("./project-name-5D6ZQNAY.js");
         const projectRoot = process.cwd();
         const projectName = getProjectName(projectRoot);
         if (projectName && projectName !== "tmp") {
@@ -680,7 +680,7 @@ ${hydeDoc}`;
     runGraphArm(graphSearch(effectiveQuery, agentId, fetchOptions, Math.min(fetchLimit, 20))),
     includeStructuredCards ? (async () => {
       try {
-        const { searchMemoryCards } = await import("./memory-cards-ENNR4TRQ.js");
+        const { searchMemoryCards } = await import("./memory-cards-BH53SM42.js");
         return await searchMemoryCards(effectiveQuery, agentId, fetchOptions);
       } catch {
         return [];
@@ -689,7 +689,7 @@ ${hydeDoc}`;
     // Reflection insights: patterns, contradictions, summaries across sessions
     includeStructuredCards ? (async () => {
       try {
-        const { searchReflections } = await import("./memory-reflection-LA7IXACD.js");
+        const { searchReflections } = await import("./memory-reflection-VXFXG55L.js");
         const insights = await searchReflections(effectiveQuery, agentId, 5, fetchOptions);
         return insights.map((ins) => ({
           id: ins.id,
@@ -801,7 +801,7 @@ ${hydeDoc}`;
   let entityBoostRan = false;
   if (merged.length > 0) {
     try {
-      const { applyEntityBoost } = await import("./entity-boost-LIFYO4UU.js");
+      const { applyEntityBoost } = await import("./entity-boost-BW62CICZ.js");
       const boosted = await applyEntityBoost(merged, effectiveQuery, getClient());
       merged = boosted.results;
       graphContextMap = boosted.graphContext;
@@ -828,7 +828,7 @@ ${hydeDoc}`;
     try {
       let rerankedRecords;
       if (graphContextMap.size > 0) {
-        const { rerankWithContext } = await import("./reranker-GHTIDASD.js");
+        const { rerankWithContext } = await import("./reranker-6F6Y7QHA.js");
         const candidates = merged.map((m) => ({
           text: m.raw_text,
           context: graphContextMap.get(m.id)
@@ -836,7 +836,7 @@ ${hydeDoc}`;
         const scored = await rerankWithContext(effectiveQuery, candidates, rerankReturnLimit);
         rerankedRecords = scored.map((s) => merged[s.index]);
       } else {
-        const { rerank } = await import("./reranker-GHTIDASD.js");
+        const { rerank } = await import("./reranker-6F6Y7QHA.js");
         rerankedRecords = await rerank(effectiveQuery, merged, rerankReturnLimit);
       }
       if (rerankedRecords.length > 0) {
@@ -1293,7 +1293,7 @@ async function lightweightSearch(queryText, agentId, options) {
   }
   if (results.length >= 2) {
     try {
-      const { recordCoActivations } = await import("./co-activation-2IHH6VMX.js");
+      const { recordCoActivations } = await import("./co-activation-AQXLWFBQ.js");
       const ids = results.slice(0, 10).map((r) => r.id);
       void recordCoActivations(ids).catch((e) => {
         try {
@@ -1309,7 +1309,7 @@ async function lightweightSearch(queryText, agentId, options) {
   }
   if (options?.includeStructuredCards !== true) return results;
   try {
-    const { searchMemoryCards } = await import("./memory-cards-ENNR4TRQ.js");
+    const { searchMemoryCards } = await import("./memory-cards-BH53SM42.js");
     const cardResults = await searchMemoryCards(queryText, agentId, options);
     if (cardResults.length > 0) {
       return rrfMergeMulti([results, cardResults], limit, RRF_K, [1, 0.85]);

package/dist/{chunk-PAE7AYA7.js → chunk-CULFTILF.js}

@@ -1,6 +1,6 @@
 import {
   writeMemoryViaDaemon
-} from "./chunk-YNPZKL4B.js";
+} from "./chunk-3NFV2N4Y.js";
 
 // src/lib/auto-checkpoint.ts
 var FILE_RE = /(?:^|\s)([\w./-]+\.(?:ts|tsx|js|jsx|json|md|yml|yaml|sql|go|py|css|scss|html|sh))(?:\b|$)/g;

package/dist/{chunk-Q5QJKTFE.js → chunk-D2ZII4AG.js}

@@ -1,13 +1,13 @@
 import {
   embed
-} from "./chunk-7LASHAEY.js";
+} from "./chunk-2DV3TKOH.js";
 import {
   reserveVersions,
   vectorToBlob
-} from "./chunk-Q73L2DD2.js";
+} from "./chunk-V4JWFJZR.js";
 import {
   getClient
-} from "./chunk-LOEY2UVH.js";
+} from "./chunk-DXQIIZQC.js";
 
 // src/lib/documents.ts
 import crypto from "crypto";
@@ -85,7 +85,7 @@ async function resolveWorkspace(slug_or_id, name, ownerAgentId) {
   }
   if (owner) {
     try {
-      const { grantWikiAccess } = await import("./wiki-acl-WCKSR4XN.js");
+      const { grantWikiAccess } = await import("./wiki-acl-PKJLSR6U.js");
       await grantWikiAccess(owner, id, "admin", owner);
     } catch {
     }
@@ -111,7 +111,7 @@ async function resolveDefaultWorkspaceId(cwd) {
   const client = getClient();
   let projectName;
   try {
-    const { getProjectName } = await import("./project-name-OZWVCHIV.js");
+    const { getProjectName } = await import("./project-name-5D6ZQNAY.js");
     projectName = getProjectName(cwd);
   } catch {
     return null;
@@ -230,7 +230,7 @@ async function ingestDocument(input) {
   }
   let ingestingIdentity = null;
   try {
-    const { getActiveAgent } = await import("./active-agent-KMGOYJTP.js");
+    const { getActiveAgent } = await import("./active-agent-7OKWCTDR.js");
     ingestingIdentity = getActiveAgent().agentId || null;
   } catch {
   }
@@ -308,7 +308,7 @@ async function ingestDocument(input) {
   await client.batch([documentStmt, ...chunkStmts], "write");
   const embedded = vectors.filter((v) => v !== null).length;
   const originalTexts = input.chunks.map((c) => c.text);
-  import("./doc-graph-extractor-LO7UXL3O.js").then(
+  import("./doc-graph-extractor-VVSMYOR3.js").then(
     ({ extractAndStoreDocumentGraph }) => extractAndStoreDocumentGraph(documentId, originalTexts)
   ).catch((err) => {
     process.stderr.write(

package/dist/{chunk-7ZJER2TU.js → chunk-DDYKAJMS.js}

@@ -1,6 +1,6 @@
 import {
   isExeSession
-} from "./chunk-Y3PPEY4I.js";
+} from "./chunk-V4RIHICU.js";
 import {
   loadConfigSync
 } from "./chunk-MMS2HBRT.js";

package/dist/{chunk-CKREHJ7G.js → chunk-DSZM7OHM.js}

@@ -2,7 +2,7 @@ import {
   decryptSyncBlob,
   encryptSyncBlob,
   isSyncCryptoInitialized
-} from "./chunk-3K7KNYMN.js";
+} from "./chunk-G3KSUXEA.js";
 
 // src/lib/crdt-sync.ts
 import * as Y from "yjs";

package/dist/{chunk-AY7DPYVY.js → chunk-DXIMITSY.js}

@@ -1,9 +1,9 @@
 import {
   listBehaviors
-} from "./chunk-XT5PYWRZ.js";
+} from "./chunk-LNCTMU7Y.js";
 import {
   incrementSkillUsage
-} from "./chunk-I3IFG3FB.js";
+} from "./chunk-JKUCAMV4.js";
 
 // src/lib/behavior-injection.ts
 import { appendFile } from "fs/promises";
@@ -349,7 +349,7 @@ async function injectBehaviors(opts) {
       `[behavior-injection] ${opts.assignedTo} <- ${selected.length}/${behaviors.length} behaviour(s) for "${opts.title.slice(0, 60)}": ` + selected.map((s) => `${s.behavior.id.slice(0, 8)}(${s.score.toFixed(2)})`).join(" ") + "\n"
     );
     await incrementSkillUsage(selected.map((s) => s.behavior));
-    const { recordBehaviorsConsulted } = await import("./skill-usage-3X5ZHX7M.js");
+    const { recordBehaviorsConsulted } = await import("./skill-usage-DO6M6W5E.js");
     await recordBehaviorsConsulted(selected.map((s) => s.behavior.id));
     return selected;
   } catch (err) {

package/dist/{chunk-LOEY2UVH.js → chunk-DXQIIZQC.js}

@@ -10,14 +10,14 @@ import {
   MEMORY_PROJECTION_OUTBOX_UNIQUE_INDEX_SQL,
   PROJECTION_CHECKPOINT_TABLE_SQL,
   ensureMemoryWriteIndex
-} from "./chunk-KI33NJR6.js";
+} from "./chunk-EHDAWQ5P.js";
 import {
   recordDbOpen
 } from "./chunk-5YEUPUV4.js";
 import {
   listBackups,
   preBackupCheckpoint
-} from "./chunk-RANDR43T.js";
+} from "./chunk-BKKZN3DJ.js";
 import {
   isPostgresBackendEnabled
 } from "./chunk-YYB5PMTK.js";
@@ -1515,7 +1515,7 @@ async function migrateReflectionDedup(client) {
     "ALTER TABLE memory_reflections ADD COLUMN dedup_key TEXT",
     "migration add memory_reflections.dedup_key"
   );
-  const { reflectionDedupKey } = await import("./memory-reflection-LA7IXACD.js");
+  const { reflectionDedupKey } = await import("./memory-reflection-VXFXG55L.js");
   const keyForRow = (row) => {
     let sources = [];
     try {
@@ -2573,7 +2573,7 @@ async function sweepExpiredSoftDeletedMemories(client, options = {}) {
   const purgeArchived = archDays !== void 0;
   const BATCH_SIZE = 2e3;
   const MAX_BATCHES = 500;
-  const { cleanupCardsForMemories, cleanupGraphLinksForMemories } = await import("./graph-rag-RCPXFGNJ.js");
+  const { cleanupCardsForMemories, cleanupGraphLinksForMemories } = await import("./graph-rag-YZNY6Z3H.js");
   const softCutoff = `-${softDays} days`;
   const selectArgsBase = [softCutoff];
   let predicate = `status = 'deleted' AND COALESCE(deleted_at, timestamp) < datetime('now', ?)`;

package/dist/{chunk-AID2665C.js → chunk-EG4ZUF4A.js}

@@ -1,11 +1,11 @@
-import {
-  ingest
-} from "./chunk-4QRDD467.js";
 import {
   listWorkflowDefinitions,
   runWorkflow,
   startWorkflow
-} from "./chunk-44PSPDMC.js";
+} from "./chunk-JC3LUYW6.js";
+import {
+  ingest
+} from "./chunk-LVFD2DVI.js";
 import {
   initCRMBridge
 } from "./chunk-ML4S5SHZ.js";

package/dist/{chunk-KI33NJR6.js → chunk-EHDAWQ5P.js}

@@ -265,7 +265,7 @@ async function persistMemoryBatch(client, rows) {
   }
   const hygieneIds = inserted.filter((row) => row.supersedes_id).map((row) => row.id);
   if (hygieneIds.length > 0) {
-    const { scheduleSupersessionHygiene } = await import("./memory-maintenance-TNV2ZDB2.js");
+    const { scheduleSupersessionHygiene } = await import("./memory-maintenance-CD2PUBDK.js");
     scheduleSupersessionHygiene(hygieneIds);
   }
   return { outcomes, inserted };

package/dist/{chunk-WFEADHAK.js → chunk-EHFPSOLD.js}

@@ -1,13 +1,13 @@
 import {
   deactivateBehavior
-} from "./chunk-XT5PYWRZ.js";
+} from "./chunk-LNCTMU7Y.js";
 import {
   getActiveAgent
-} from "./chunk-I2RKHNBD.js";
+} from "./chunk-RPOIKNJZ.js";
 import {
   canCoordinate,
   getClient
-} from "./chunk-LOEY2UVH.js";
+} from "./chunk-DXQIIZQC.js";
 
 // src/mcp/tools/deactivate-behavior.ts
 import { z } from "zod";
@@ -24,7 +24,7 @@ function registerDeactivateBehavior(server) {
     async ({ behavior_id }) => {
       const caller = getActiveAgent();
       try {
-        const { StewardGate } = await import("./steward-gate-PXKR7QQI.js");
+        const { StewardGate } = await import("./steward-gate-T2XM2NE4.js");
         const steward = new StewardGate();
         const gateDecision = await steward.checkAuthority(caller.agentId || "unknown", "deactivate_behavior", behavior_id);
         if (!gateDecision.allowed) {

package/dist/{chunk-4VAZPPTM.js → chunk-F5VP7K3C.js}

@@ -4,7 +4,7 @@ import {
   getGitRootAsync,
   isWorktreeDirty,
   isWorktreeDirtyAsync
-} from "./chunk-QAHGK2PI.js";
+} from "./chunk-UW5KXM4D.js";
 
 // src/lib/worktree-sweep.ts
 import { execFile } from "child_process";

package/dist/{chunk-NID7DKGB.js → chunk-FJPCVXQX.js}

@@ -1,6 +1,6 @@
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-653YQ65D.js";
+} from "./chunk-OGJCUMSM.js";
 import {
   atomicWriteJsonSync
 } from "./chunk-HSGBZSCA.js";

package/dist/{chunk-EDSUVHOE.js → chunk-FNVZAK4C.js}

@@ -1,23 +1,23 @@
-import {
-  MultiAgentOrchestrator
-} from "./chunk-ATUA7B5P.js";
 import {
   createTokenBudgetMiddleware
-} from "./chunk-E3YEG4LM.js";
+} from "./chunk-GPB6X2OI.js";
+import {
+  MultiAgentOrchestrator
+} from "./chunk-GHCF7J4Q.js";
 import {
   createQuietRenderer,
   createTerminalRenderer,
   renderAgentEvents
 } from "./chunk-YZFZDJWZ.js";
+import {
+  checkDangerousPatterns,
+  hasCriticalPattern
+} from "./chunk-CMCYL2JC.js";
 import {
   checkPathSafety,
   checkReadPathSafety,
   containsPathTraversal
 } from "./chunk-NGVOA6ZQ.js";
-import {
-  checkDangerousPatterns,
-  hasCriticalPattern
-} from "./chunk-CMCYL2JC.js";
 import {
   ContextManager,
   agentLoop,
@@ -30,7 +30,7 @@ import {
   recordDenial,
   recordSuccess,
   shouldFallbackToAsk
-} from "./chunk-J2SIJM4Q.js";
+} from "./chunk-SZGPNA73.js";
 import {
   composeHooks,
   createDefaultHooks
@@ -212,7 +212,7 @@ function createExeOSHooks(config) {
         );
       }
       try {
-        const { listBehaviors } = await import("./behaviors-PIXMFSU4.js");
+        const { listBehaviors } = await import("./behaviors-5FRO36HG.js");
         const behaviors = await listBehaviors(config.agentId, config.projectName, 12);
         if (behaviors.length > 0) {
           process.stderr.write(
@@ -333,7 +333,7 @@ function createExeOSHooks(config) {
     async onSubagentStop(_reason) {
       try {
         const { getClient } = await import("./lib/database.js");
-        const { sessionScopeFilter } = await import("./task-scope-HE7WKTHG.js");
+        const { sessionScopeFilter } = await import("./task-scope-YHXKRO2Y.js");
         const client = getClient();
         const ehScope = sessionScopeFilter();
         const tasks = await client.execute({
@@ -373,7 +373,7 @@ function createExeOSHooks(config) {
         setAt: (/* @__PURE__ */ new Date()).toISOString()
       });
       try {
-        const { writeNotification } = await import("./notifications-KQHWJIDO.js");
+        const { writeNotification } = await import("./notifications-LHDV4WKP.js");
         await writeNotification({
           agentId: config.agentId,
           agentRole: "employee",
@@ -444,7 +444,7 @@ function createExeOSHooks(config) {
         try {
           const { writeMemory, flushBatch } = await import("./lib/store.js");
           const { getClient } = await import("./lib/database.js");
-          const { sessionScopeFilter: cpScopeFilter } = await import("./task-scope-HE7WKTHG.js");
+          const { sessionScopeFilter: cpScopeFilter } = await import("./task-scope-YHXKRO2Y.js");
           const client = getClient();
           const cpScope = cpScopeFilter();
           const tasks = await client.execute({

package/dist/{chunk-3K7KNYMN.js → chunk-G3KSUXEA.js}

@@ -18,11 +18,11 @@ import {
   requireSyncKey,
   unwrapDek,
   v2PayloadAad
-} from "./chunk-TWMWHDOY.js";
+} from "./chunk-2MUKF6YI.js";
 import {
   getCachedMonitorIdentity,
   recomputeEnvelopeWrapKey
-} from "./chunk-WWUOHSEO.js";
+} from "./chunk-I4DBM5ME.js";
 
 // src/lib/crypto.ts
 import crypto from "crypto";
@@ -114,17 +114,28 @@ function parseEnvelope(combined) {
   const payloadCt = combined.subarray(offset);
   return { keyId, recipientCount, recipientBytes, symmetric, x25519, payloadIv, payloadTag, payloadCt };
 }
-function decryptEnvelopePayload(env, dek) {
+function decryptEnvelopePayload(env, dek, context) {
+  if (context) {
+    try {
+      const boundDecipher = crypto.createDecipheriv(ALGORITHM, dek, env.payloadIv);
+      boundDecipher.setAAD(v2PayloadAad(env.keyId, env.recipientCount, env.recipientBytes, context));
+      boundDecipher.setAuthTag(env.payloadTag);
+      const data2 = Buffer.concat([boundDecipher.update(env.payloadCt), boundDecipher.final()]);
+      return { data: data2, bound: true };
+    } catch {
+    }
+  }
   const decipher = crypto.createDecipheriv(ALGORITHM, dek, env.payloadIv);
   decipher.setAAD(v2PayloadAad(env.keyId, env.recipientCount, env.recipientBytes));
   decipher.setAuthTag(env.payloadTag);
-  return Buffer.concat([decipher.update(env.payloadCt), decipher.final()]);
+  const data = Buffer.concat([decipher.update(env.payloadCt), decipher.final()]);
+  return { data, bound: false };
 }
-function decryptEnvelopeAsRecipient(ciphertext, privateScalar) {
+function decryptEnvelopeAsRecipient(ciphertext, privateScalar, context) {
   const env = parseEnvelope(Buffer.from(ciphertext, "base64"));
   const dek = recoverDekViaX25519(env, privateScalar);
   if (!dek) throw new Error("No envelope recipient matches this X25519 private key");
-  return decryptEnvelopePayload(env, dek);
+  return decryptEnvelopePayload(env, dek, context).data;
 }
 function recoverDekViaX25519(env, privateScalar) {
   for (const r of env.x25519) {
@@ -175,7 +186,7 @@ function decryptSyncBlobDetailed(ciphertext, opts) {
   }
   if (combined[0] === ENVELOPE_BLOB_VERSION) {
     try {
-      return { data: decryptEnvelope(combined, key), bound: false };
+      return decryptEnvelope(combined, key, opts?.context);
     } catch (err) {
       try {
         return { data: decryptAesGcm(combined, key), bound: false };
@@ -201,7 +212,7 @@ function decryptSyncBlobDetailed(ciphertext, opts) {
   }
   return { data: decryptAesGcm(combined, key), bound: false };
 }
-function decryptEnvelope(combined, syncKey) {
+function decryptEnvelope(combined, syncKey, context) {
   const env = parseEnvelope(combined);
   if (env.symmetric) {
     try {
@@ -212,14 +223,14 @@ function decryptEnvelope(combined, syncKey) {
         syncKey,
         Buffer.from([RECIPIENT_SYMMETRIC])
       );
-      return decryptEnvelopePayload(env, dek);
+      return decryptEnvelopePayload(env, dek, context);
     } catch {
     }
   }
   const identity = getCachedMonitorIdentity();
   if (identity) {
     const dek = recoverDekViaX25519(env, identity.privateKey);
-    if (dek) return decryptEnvelopePayload(env, dek);
+    if (dek) return decryptEnvelopePayload(env, dek, context);
   }
   throw new Error("No held recipient matches this v=2 envelope");
 }

package/dist/{chunk-MSQDY5BD.js → chunk-G7BVAQVT.js}

@@ -1,6 +1,6 @@
 import {
   createReminder
-} from "./chunk-OZ2N27QP.js";
+} from "./chunk-S2Q2RXYQ.js";
 
 // src/mcp/tools/create-reminder.ts
 import { z } from "zod";

package/dist/{chunk-ATUA7B5P.js → chunk-GHCF7J4Q.js}

@@ -1,6 +1,6 @@
 import {
   routeTask
-} from "./chunk-HPKUKHS7.js";
+} from "./chunk-SUZWRZE5.js";
 import {
   createTaskCore,
   employeeSessionName,
@@ -9,11 +9,11 @@ import {
   isEmployeeAlive,
   sessionScopeFilter,
   updateTaskStatus
-} from "./chunk-Y3PPEY4I.js";
+} from "./chunk-V4RIHICU.js";
 import {
   DEFAULT_COORDINATOR_TEMPLATE_NAME,
   getCoordinatorName
-} from "./chunk-LOEY2UVH.js";
+} from "./chunk-DXQIIZQC.js";
 
 // src/runtime/orchestrator.ts
 var STALE_THRESHOLD_MS = 2 * 60 * 60 * 1e3;