@askexenow/exe-os 0.9.404 → 0.9.406

package/dist/{capability-cards-VKEXD3BA.js → capability-cards-OUL45JJW.js}

@@ -1,11 +1,11 @@
 import {
   getIdentity,
   loadEmployeesSync
-} from "./chunk-YWH7XWOX.js";
+} from "./chunk-FTAMGND3.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-TKDITWDN.js";
-import "./chunk-XIMUZQJT.js";
-import "./chunk-BU4NQU5R.js";
+import "./chunk-YANA5YZH.js";
+import "./chunk-YYBQTE3P.js";
 import "./chunk-7FE43JRU.js";
 import "./chunk-5YEUPUV4.js";
 import "./chunk-YYB5PMTK.js";

package/dist/{capacity-monitor-DIX6TOWZ.js → capacity-monitor-7HHLY4XX.js}

@@ -8,28 +8,28 @@ import {
   isAtCapacity,
   isWithinRelaunchCooldown,
   pollCapacityDead
-} from "./chunk-FNWXPIP4.js";
-import "./chunk-CKG3O7XJ.js";
-import "./chunk-56XINHPT.js";
-import "./chunk-W76IFXGP.js";
-import "./chunk-SI7JLNKV.js";
-import "./chunk-GAUPRBOT.js";
+} from "./chunk-XYFYLJK4.js";
+import "./chunk-TBIX4ERL.js";
+import "./chunk-YCYGRLHE.js";
+import "./chunk-OV7JDJBL.js";
+import "./chunk-CHD3GX2O.js";
+import "./chunk-5MSTJROJ.js";
 import "./chunk-WT4RI36X.js";
 import "./chunk-E23LNUWJ.js";
 import "./chunk-TDF2XKLK.js";
 import "./chunk-EIKATSE4.js";
 import "./chunk-ZKGWHT56.js";
 import "./chunk-MJCSEIFI.js";
-import "./chunk-Y2OSYQCG.js";
+import "./chunk-KQXOXGHP.js";
 import "./chunk-VI4ATC6I.js";
 import "./chunk-A27Q27CT.js";
 import "./chunk-6L4VIYLZ.js";
-import "./chunk-MKO45WBR.js";
+import "./chunk-XT3F5L5L.js";
 import "./chunk-T5SM4RXY.js";
-import "./chunk-PQVIARTA.js";
+import "./chunk-2UBFOG42.js";
 import "./chunk-GWAN2BDB.js";
 import "./chunk-AM7S2TY6.js";
-import "./chunk-3RQHJYRK.js";
+import "./chunk-DLA4S5CY.js";
 import "./chunk-QDMZ5DX2.js";
 import "./chunk-HME6ITKV.js";
 import "./chunk-WJWRQQMS.js";
@@ -40,17 +40,17 @@ import "./chunk-IMYGYIAI.js";
 import "./chunk-NLEW62VC.js";
 import "./chunk-3DAEZILW.js";
 import "./chunk-DRTJCG6B.js";
-import "./chunk-SD5PWIUP.js";
+import "./chunk-I6ME7BYI.js";
 import "./chunk-HYZV25LY.js";
 import "./chunk-CVYC6DUW.js";
 import "./chunk-GJV3WDWM.js";
 import "./chunk-YRUZK2QA.js";
 import "./chunk-MP2AFCGL.js";
-import "./chunk-YWH7XWOX.js";
+import "./chunk-FTAMGND3.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-TKDITWDN.js";
-import "./chunk-XIMUZQJT.js";
-import "./chunk-BU4NQU5R.js";
+import "./chunk-YANA5YZH.js";
+import "./chunk-YYBQTE3P.js";
 import "./chunk-7FE43JRU.js";
 import "./chunk-5YEUPUV4.js";
 import "./chunk-YYB5PMTK.js";
@@ -59,9 +59,9 @@ import "./chunk-QH5ZQ5SJ.js";
 import "./chunk-ZQEJ4IX2.js";
 import "./chunk-C7GHNJPW.js";
 import "./chunk-3VW5ZP2F.js";
-import "./chunk-OAYFVKNM.js";
+import "./chunk-XPRLWIKS.js";
 import "./chunk-3R7UDPVR.js";
-import "./chunk-FNEUZBKI.js";
+import "./chunk-LTSC277W.js";
 import "./chunk-A7JYF4RG.js";
 import "./chunk-ARX6TAGN.js";
 import "./chunk-MMS2HBRT.js";

package/dist/{catchup-brief-O3RVR73X.js → catchup-brief-4JLWTOPY.js}

@@ -1,39 +1,39 @@
 import {
   lightweightSearch
-} from "./chunk-2JZPWAV4.js";
+} from "./chunk-GANFX7WU.js";
 import "./chunk-VMHZSZQJ.js";
-import "./chunk-DJKUA73M.js";
-import "./chunk-MXEEMTCV.js";
-import "./chunk-KVZB65B5.js";
+import "./chunk-LREL74MI.js";
+import "./chunk-A6VEQ6S4.js";
+import "./chunk-25UCPYAO.js";
 import "./chunk-CHCA3ZM2.js";
 import "./chunk-OTVEIJUQ.js";
-import "./chunk-4RFLBGOW.js";
+import "./chunk-PB3RGTSP.js";
 import "./chunk-5MOYSU5A.js";
 import "./chunk-T4IDLAZM.js";
 import "./chunk-76CJBM36.js";
 import {
   sessionScopeFilter,
   strictSessionScopeFilter
-} from "./chunk-56XINHPT.js";
-import "./chunk-W76IFXGP.js";
-import "./chunk-SI7JLNKV.js";
-import "./chunk-GAUPRBOT.js";
+} from "./chunk-YCYGRLHE.js";
+import "./chunk-OV7JDJBL.js";
+import "./chunk-CHD3GX2O.js";
+import "./chunk-5MSTJROJ.js";
 import "./chunk-WT4RI36X.js";
 import "./chunk-E23LNUWJ.js";
 import "./chunk-TDF2XKLK.js";
 import "./chunk-EIKATSE4.js";
 import "./chunk-ZKGWHT56.js";
 import "./chunk-MJCSEIFI.js";
-import "./chunk-Y2OSYQCG.js";
+import "./chunk-KQXOXGHP.js";
 import "./chunk-VI4ATC6I.js";
 import "./chunk-A27Q27CT.js";
 import "./chunk-6L4VIYLZ.js";
-import "./chunk-MKO45WBR.js";
+import "./chunk-XT3F5L5L.js";
 import "./chunk-T5SM4RXY.js";
-import "./chunk-PQVIARTA.js";
+import "./chunk-2UBFOG42.js";
 import "./chunk-GWAN2BDB.js";
 import "./chunk-AM7S2TY6.js";
-import "./chunk-3RQHJYRK.js";
+import "./chunk-DLA4S5CY.js";
 import "./chunk-QDMZ5DX2.js";
 import "./chunk-HME6ITKV.js";
 import "./chunk-WJWRQQMS.js";
@@ -44,7 +44,7 @@ import "./chunk-IMYGYIAI.js";
 import "./chunk-NLEW62VC.js";
 import "./chunk-3DAEZILW.js";
 import "./chunk-DRTJCG6B.js";
-import "./chunk-SD5PWIUP.js";
+import "./chunk-I6ME7BYI.js";
 import "./chunk-HYZV25LY.js";
 import "./chunk-CVYC6DUW.js";
 import "./chunk-GJV3WDWM.js";
@@ -54,11 +54,11 @@ import {
 import "./chunk-MP2AFCGL.js";
 import {
   getClient
-} from "./chunk-YWH7XWOX.js";
+} from "./chunk-FTAMGND3.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-TKDITWDN.js";
-import "./chunk-XIMUZQJT.js";
-import "./chunk-BU4NQU5R.js";
+import "./chunk-YANA5YZH.js";
+import "./chunk-YYBQTE3P.js";
 import "./chunk-7FE43JRU.js";
 import "./chunk-5YEUPUV4.js";
 import "./chunk-YYB5PMTK.js";
@@ -67,10 +67,10 @@ import "./chunk-QH5ZQ5SJ.js";
 import "./chunk-ZQEJ4IX2.js";
 import "./chunk-C7GHNJPW.js";
 import "./chunk-3VW5ZP2F.js";
-import "./chunk-ZHHGFNTZ.js";
-import "./chunk-OAYFVKNM.js";
+import "./chunk-SYFE7PBI.js";
+import "./chunk-XPRLWIKS.js";
 import "./chunk-3R7UDPVR.js";
-import "./chunk-FNEUZBKI.js";
+import "./chunk-LTSC277W.js";
 import "./chunk-A7JYF4RG.js";
 import "./chunk-ARX6TAGN.js";
 import "./chunk-MMS2HBRT.js";
@@ -183,7 +183,7 @@ ${msgLines}`);
   } catch {
   }
   try {
-    const { getPendingProspective, markSurfaced } = await import("./prospective-memory-KDW7MLF6.js");
+    const { getPendingProspective, markSurfaced } = await import("./prospective-memory-7SATMR4N.js");
     const due = await getPendingProspective(agentId, { projectName, limit: 5 });
     if (due.length > 0) {
       const now = Date.now();

package/dist/{chunk-PQVIARTA.js → chunk-2UBFOG42.js}

@@ -1,6 +1,6 @@
 import {
   getClient
-} from "./chunk-YWH7XWOX.js";
+} from "./chunk-FTAMGND3.js";
 
 // src/lib/skill-refinement.ts
 import crypto from "crypto";

package/dist/{chunk-APOS4EIO.js → chunk-3FABC43I.js}

@@ -1,9 +1,9 @@
 import {
   listBehaviors
-} from "./chunk-L3L4KCBJ.js";
+} from "./chunk-B6O2B4JY.js";
 import {
   incrementSkillUsage
-} from "./chunk-PQVIARTA.js";
+} from "./chunk-2UBFOG42.js";
 
 // src/lib/behavior-injection.ts
 import { appendFile } from "fs/promises";
@@ -349,7 +349,7 @@ async function injectBehaviors(opts) {
       `[behavior-injection] ${opts.assignedTo} <- ${selected.length}/${behaviors.length} behaviour(s) for "${opts.title.slice(0, 60)}": ` + selected.map((s) => `${s.behavior.id.slice(0, 8)}(${s.score.toFixed(2)})`).join(" ") + "\n"
     );
     await incrementSkillUsage(selected.map((s) => s.behavior));
-    const { recordBehaviorsConsulted } = await import("./skill-usage-YDCLNH63.js");
+    const { recordBehaviorsConsulted } = await import("./skill-usage-R52I63JV.js");
     await recordBehaviorsConsulted(selected.map((s) => s.behavior.id));
     return selected;
   } catch (err) {

package/dist/{chunk-GLMR5PRH.js → chunk-3PXAL7SI.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-RGPEUXOE.js";
 import {
   sessionScopeFilter
-} from "./chunk-56XINHPT.js";
+} from "./chunk-YCYGRLHE.js";
 import {
   isWithin
 } from "./chunk-YRUZK2QA.js";
@@ -297,7 +297,7 @@ async function sweepTasks(projectName, options = {}) {
     }
     if (!dryRun) {
       try {
-        const { updateTaskStatus } = await import("./tasks-crud-K55N5YNO.js");
+        const { updateTaskStatus } = await import("./tasks-crud-5AHLPOSB.js");
         await updateTaskStatus({
           taskId: task.id,
           status: "needs_review",

package/dist/{chunk-YPMI6DNO.js → chunk-43XJUDVV.js}

@@ -1,10 +1,10 @@
 import {
   behaviorTruncationNotice
-} from "./chunk-APOS4EIO.js";
+} from "./chunk-3FABC43I.js";
 import {
   countActiveBehaviors,
   listBehaviors
-} from "./chunk-L3L4KCBJ.js";
+} from "./chunk-B6O2B4JY.js";
 import {
   loadConfigSync
 } from "./chunk-MMS2HBRT.js";

package/dist/{chunk-UO766M5I.js → chunk-4HZ5VOZV.js}

@@ -1,7 +1,7 @@
 import {
   checkLicense,
   loadLicense
-} from "./chunk-OAYFVKNM.js";
+} from "./chunk-XPRLWIKS.js";
 
 // src/lib/license-gate.ts
 var _cachedLicense = null;

package/dist/{chunk-6XH6ETY6.js → chunk-4KATSIL7.js}

@@ -4,7 +4,7 @@ import {
 import {
   isValidX25519Recipient,
   pubKeyHash
-} from "./chunk-DLJSC6YA.js";
+} from "./chunk-KUHIE54S.js";
 
 // src/lib/monitor-grants.ts
 import crypto from "crypto";

package/dist/{chunk-EOIHESMU.js → chunk-4NL6CY5X.js}

@@ -1,6 +1,6 @@
 import {
   isManagementRole
-} from "./chunk-YWH7XWOX.js";
+} from "./chunk-FTAMGND3.js";
 
 // src/lib/transcript-sidechain.ts
 import { readFileSync } from "fs";

package/dist/{chunk-YGE6OCHC.js → chunk-5257RRLD.js}

@@ -1,12 +1,12 @@
 import {
   shutdownCli
-} from "./chunk-2KH6MZL5.js";
+} from "./chunk-MP7X55Z7.js";
 import {
   fastDbInit
-} from "./chunk-2MRQBGTY.js";
+} from "./chunk-YVTYO7DV.js";
 import {
   sessionScopeFilter
-} from "./chunk-56XINHPT.js";
+} from "./chunk-YCYGRLHE.js";
 import {
   formatStatusAll,
   formatStatusDeep,
@@ -17,7 +17,7 @@ import {
   getClient,
   isCoordinatorRole,
   loadEmployees
-} from "./chunk-YWH7XWOX.js";
+} from "./chunk-FTAMGND3.js";
 import {
   isMainModule
 } from "./chunk-6Y4B3QF6.js";

package/dist/{chunk-NG22OOND.js → chunk-53ZJ5W2Z.js}

@@ -2,10 +2,10 @@ import {
   listWorkflowDefinitions,
   runWorkflow,
   startWorkflow
-} from "./chunk-DEQJVVAU.js";
+} from "./chunk-S3N57VU5.js";
 import {
   ingest
-} from "./chunk-QADGKJAC.js";
+} from "./chunk-VQSOZ2JM.js";
 import {
   initCRMBridge
 } from "./chunk-ML4S5SHZ.js";

package/dist/{chunk-GAUPRBOT.js → chunk-5MSTJROJ.js}

@@ -22,7 +22,7 @@ var OrgOriginProvenanceError = class extends Error {
 async function mintOrgOriginStamp(input) {
   if (!input.orgId) throw new OrgOriginProvenanceError("An org-origin stamp requires a non-empty org_id (\xA71.5)");
   if (!input.requestId) throw new OrgOriginProvenanceError("An org-origin stamp requires a request id");
-  const { getTaskRequest } = await import("./task-request-inbox-CJF4XNSY.js");
+  const { getTaskRequest } = await import("./task-request-inbox-NSFRDP4C.js");
   const req = getTaskRequest(input.orgId, input.requestId);
   if (!req) {
     throw new OrgOriginProvenanceError(

package/dist/{chunk-DQUGV7TQ.js → chunk-5N4BSS3J.js}

@@ -85,7 +85,7 @@ async function getRetrievalHealth() {
     totalMemories = Number(totalRes.rows[0]?.cnt ?? 0);
     memoriesWithVectors = Number(vectorRes.rows[0]?.cnt ?? 0);
     try {
-      const { getGraphStats } = await import("./graph-query-A7JYKBHM.js");
+      const { getGraphStats } = await import("./graph-query-ERYJBETT.js");
       const stats = await getGraphStats(client);
       entities = stats.entities;
       relationships = stats.relationships;

package/dist/{chunk-S4M2AHSM.js → chunk-5ZHP3WQM.js}

@@ -2,13 +2,15 @@ import {
   markSupportReportSentSync
 } from "./chunk-MMRUBN3I.js";
 import {
+  SupportAdminTransportError,
+  assertSecureTransport,
   resolveSupportAdminToken,
   supportAdminHeaders
-} from "./chunk-2XZ6X3PJ.js";
+} from "./chunk-6QBBJJK2.js";
 import {
   loadLicense,
   readCachedLicenseToken
-} from "./chunk-OAYFVKNM.js";
+} from "./chunk-XPRLWIKS.js";
 import {
   EXE_AI_DIR,
   loadConfig
@@ -214,8 +216,19 @@ async function maybeCloseAdmin(id, adminEndpoint, version, config) {
   if (!token) {
     return { check: "askexe_admin_autoclose", level: "warn", detail: "skipped; admin token is AskExe-only" };
   }
+  let parsed;
   try {
-    const res = await fetch(`${adminEndpoint}/${encodeURIComponent(id)}`, {
+    parsed = assertSecureTransport(`${adminEndpoint}/${encodeURIComponent(id)}`, { tokenName: "AskExe support admin token" });
+  } catch (err) {
+    return {
+      check: "askexe_admin_autoclose",
+      level: "warn",
+      detail: err instanceof SupportAdminTransportError ? err.message : "refused: insecure admin endpoint",
+      next: "Set ASKEXE_SUPPORT_ADMIN_ENDPOINT to an https:// URL."
+    };
+  }
+  try {
+    const res = await fetch(parsed, {
       method: "PATCH",
       headers: { authorization: `Bearer ${token}`, "content-type": "application/json" },
       // The smoke report is NOT a defect, so there is no fix commit and no defect

package/dist/{chunk-AQPS7W6G.js → chunk-677RDE4X.js}

@@ -7,10 +7,10 @@ import {
 } from "./chunk-S2YTU74T.js";
 import {
   createTask
-} from "./chunk-VWSJP5PY.js";
+} from "./chunk-FT4CZ3PI.js";
 import {
   getActiveAgent
-} from "./chunk-LCC7SS6F.js";
+} from "./chunk-X4XUAFT3.js";
 import {
   deriveTaskIdempotencyKey,
   ensureEmployeeAsync,
@@ -18,13 +18,13 @@ import {
   isExeSession,
   logTaskDispatch,
   resolveExeSession
-} from "./chunk-56XINHPT.js";
+} from "./chunk-YCYGRLHE.js";
 import {
   getPaneCwdAsync
 } from "./chunk-6L4VIYLZ.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-MKO45WBR.js";
+} from "./chunk-XT3F5L5L.js";
 import {
   releaseDispatchClaim,
   tryAcquireDispatchClaim,
@@ -37,7 +37,7 @@ import {
 } from "./chunk-GWAN2BDB.js";
 import {
   getLicenseSync
-} from "./chunk-3RQHJYRK.js";
+} from "./chunk-DLA4S5CY.js";
 import {
   isValidSessionScope
 } from "./chunk-BTSWFMEH.js";
@@ -46,7 +46,7 @@ import {
 } from "./chunk-GJV3WDWM.js";
 import {
   isCoordinatorName
-} from "./chunk-YWH7XWOX.js";
+} from "./chunk-FTAMGND3.js";
 import {
   EXE_AI_DIR
 } from "./chunk-MMS2HBRT.js";
@@ -891,7 +891,7 @@ Idempotent no-op (existing task unchanged; no execution side effects)`
       let claimWarning = "";
       const claimRefRaw = (work_ref ?? "").trim();
       try {
-        const { findConflicts, findConflictsInText, describeConflict, normalizeTarget } = await import("./work-claims-GY7TTKUA.js");
+        const { findConflicts, findConflictsInText, describeConflict, normalizeTarget } = await import("./work-claims-7SMD6OI3.js");
         const conflicts = claimRefRaw ? await findConflicts(
           [normalizeTarget({ kind: "work_ref", value: claimRefRaw })],
           callerRoot
@@ -958,7 +958,7 @@ Nothing was created or dispatched. Either pick different work, or \u2014 if that
         });
         if (claimRefRaw) {
           try {
-            const { acquireClaim } = await import("./work-claims-GY7TTKUA.js");
+            const { acquireClaim } = await import("./work-claims-7SMD6OI3.js");
             const acquired = await acquireClaim({
               targets: [{ kind: "work_ref", value: claimRefRaw }],
               holderSession: callerRoot,
@@ -1154,7 +1154,7 @@ Note: ${spawnOverrideNoopNotice(ignoredSpawnOverrides)}`;
       }
       if (claimRefRaw) {
         try {
-          const { acquireClaim } = await import("./work-claims-GY7TTKUA.js");
+          const { acquireClaim } = await import("./work-claims-7SMD6OI3.js");
           const acquired = await acquireClaim({
             targets: [{ kind: "work_ref", value: claimRefRaw }],
             holderSession: callerRoot,
@@ -1207,7 +1207,7 @@ Claimed ${claimRefRaw} for session ${callerRoot} (claim_group ${acquired.claimGr
           session_scope: sessionScope,
           created_at: (/* @__PURE__ */ new Date()).toISOString()
         }), "utf-8");
-        const { recordOrchestrationEventBestEffort: recordOE } = await import("./orchestration-events-CV72DYKD.js");
+        const { recordOrchestrationEventBestEffort: recordOE } = await import("./orchestration-events-MYAH33OA.js");
         recordOE({
           eventType: "signal.created",
           source: "create-task.mcp",
@@ -1240,7 +1240,7 @@ Claimed ${claimRefRaw} for session ${callerRoot} (claim_group ${acquired.claimGr
             let projectConflictOpts = {};
             try {
               const { getClient } = await import("./lib/database.js");
-              const { sessionScopeFilter } = await import("./task-scope-M3GVO3IK.js");
+              const { sessionScopeFilter } = await import("./task-scope-WAV4UTN2.js");
               const client = getClient();
               const scope = sessionScopeFilter(task.sessionScope || callerRoot || exeSession || null);
               const existing = await client.execute({

package/dist/{chunk-KPJYEYGL.js → chunk-6EWNC6XW.js}

@@ -1,16 +1,16 @@
 import {
   isPaneBusy
-} from "./chunk-KRNF2TTT.js";
+} from "./chunk-7A3N2XWF.js";
 import {
   recordSessionKill
-} from "./chunk-CKG3O7XJ.js";
+} from "./chunk-TBIX4ERL.js";
 import {
   buildMergedPrCache,
   getBranchLandedState
-} from "./chunk-Y3CXCRCP.js";
+} from "./chunk-A2BKB5UO.js";
 import {
   updateTask
-} from "./chunk-VWSJP5PY.js";
+} from "./chunk-FT4CZ3PI.js";
 import {
   BUSY_PATTERN,
   countPendingReviews,
@@ -29,14 +29,14 @@ import {
   sessionScopeFilter,
   strictSessionScopeFilter,
   writeNotification
-} from "./chunk-56XINHPT.js";
+} from "./chunk-YCYGRLHE.js";
 import {
   LEASE_MINUTES,
   isLeaseExpired
 } from "./chunk-E23LNUWJ.js";
 import {
   listSessions
-} from "./chunk-Y2OSYQCG.js";
+} from "./chunk-KQXOXGHP.js";
 import {
   getTransport
 } from "./chunk-VI4ATC6I.js";
@@ -51,7 +51,7 @@ import {
 } from "./chunk-6L4VIYLZ.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-MKO45WBR.js";
+} from "./chunk-XT3F5L5L.js";
 import {
   checkDispatchStatus,
   readTerminalLauncherFailure,
@@ -79,7 +79,7 @@ import {
   getCoordinatorName,
   isCoordinatorName,
   shouldAutoInstance
-} from "./chunk-YWH7XWOX.js";
+} from "./chunk-FTAMGND3.js";
 import {
   eventLoopBlockedMarkerPath
 } from "./chunk-ZQEJ4IX2.js";
@@ -3822,7 +3822,7 @@ function createMergedPrCacheMemo(lookup = buildMergedPrCache) {
 }
 async function createWorktreeReaperRealDeps() {
   const { getPaneCwdAsync } = await import("./lib/tmux-status.js");
-  const { getGitRootAsync, isWorktreeDirtyAsync, GIT_CRYPT_SMUDGE_BYPASS_ARGS } = await import("./worktree-UFOTUXOL.js");
+  const { getGitRootAsync, isWorktreeDirtyAsync, GIT_CRYPT_SMUDGE_BYPASS_ARGS } = await import("./worktree-5BTJQLQG.js");
   const { statSync: statSync3 } = await import("fs");
   const { basename: basename2 } = await import("path");
   const { promisify: promisify2 } = await import("util");
@@ -4070,7 +4070,7 @@ function shouldNotifyTaskGroupViaIntercom(executionMode) {
 }
 async function pollTaskGroupBarriers() {
   try {
-    const { checkAndFireBarriers } = await import("./tasks-crud-K55N5YNO.js");
+    const { checkAndFireBarriers } = await import("./tasks-crud-5AHLPOSB.js");
     const firedGroupIds = await checkAndFireBarriers();
     if (firedGroupIds.length === 0) return 0;
     const { getClient } = await import("./lib/database.js");

package/dist/{chunk-FBGQXSBL.js → chunk-6FD36QSP.js}

@@ -4,10 +4,10 @@ import {
 import {
   reserveVersions,
   vectorToBlob
-} from "./chunk-MXEEMTCV.js";
+} from "./chunk-A6VEQ6S4.js";
 import {
   getClient
-} from "./chunk-YWH7XWOX.js";
+} from "./chunk-FTAMGND3.js";
 
 // src/lib/documents.ts
 import crypto from "crypto";
@@ -85,7 +85,7 @@ async function resolveWorkspace(slug_or_id, name, ownerAgentId) {
   }
   if (owner) {
     try {
-      const { grantWikiAccess } = await import("./wiki-acl-B5CI5FVD.js");
+      const { grantWikiAccess } = await import("./wiki-acl-MHNUVAKY.js");
       await grantWikiAccess(owner, id, "admin", owner);
     } catch {
     }
@@ -111,7 +111,7 @@ async function resolveDefaultWorkspaceId(cwd) {
   const client = getClient();
   let projectName;
   try {
-    const { getProjectName } = await import("./project-name-FUSV5KYR.js");
+    const { getProjectName } = await import("./project-name-XQAUIF62.js");
     projectName = getProjectName(cwd);
   } catch {
     return null;
@@ -230,7 +230,7 @@ async function ingestDocument(input) {
   }
   let ingestingIdentity = null;
   try {
-    const { getActiveAgent } = await import("./active-agent-KZFLZ4B6.js");
+    const { getActiveAgent } = await import("./active-agent-5JIQN6GB.js");
     ingestingIdentity = getActiveAgent().agentId || null;
   } catch {
   }
@@ -308,7 +308,7 @@ async function ingestDocument(input) {
   await client.batch([documentStmt, ...chunkStmts], "write");
   const embedded = vectors.filter((v) => v !== null).length;
   const originalTexts = input.chunks.map((c) => c.text);
-  import("./doc-graph-extractor-IJHGWTTK.js").then(
+  import("./doc-graph-extractor-4DW66AFC.js").then(
     ({ extractAndStoreDocumentGraph }) => extractAndStoreDocumentGraph(documentId, originalTexts)
   ).catch((err) => {
     process.stderr.write(

package/dist/chunk-6QBBJJK2.js

@@ -0,0 +1,52 @@
+import {
+  loadConfigSync
+} from "./chunk-MMS2HBRT.js";
+
+// src/lib/support-admin-token.ts
+function resolveSupportAdminToken(config) {
+  return process.env.ASKEXE_SUPPORT_ADMIN_TOKEN || process.env.EXE_SUPPORT_ADMIN_TOKEN || config?.support?.adminToken || config?.support?.admin_token;
+}
+function supportAdminHeaders(config) {
+  const token = resolveSupportAdminToken(config);
+  return token ? { "x-askexe-admin-token": token } : {};
+}
+var SupportAdminTransportError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "SupportAdminTransportError";
+  }
+};
+var LOOPBACK_HOSTNAMES = /* @__PURE__ */ new Set(["localhost", "127.0.0.1", "::1", "[::1]"]);
+function isLoopbackHost(hostname) {
+  return LOOPBACK_HOSTNAMES.has(hostname);
+}
+function assertSecureTransport(url, opts) {
+  let parsed;
+  try {
+    parsed = typeof url === "string" ? new URL(url) : url;
+  } catch {
+    throw new SupportAdminTransportError(
+      `refusing to attach ${opts.tokenName}: target is not a valid absolute URL`
+    );
+  }
+  if (parsed.protocol === "https:") return parsed;
+  if (parsed.protocol === "http:" && isLoopbackHost(parsed.hostname)) return parsed;
+  throw new SupportAdminTransportError(
+    `refusing to send ${opts.tokenName} to a non-TLS origin (${parsed.protocol}//${parsed.host}) \u2014 credentials to this endpoint must travel over https:// (loopback http:// is allowed for local dev/tests only)`
+  );
+}
+function hasSupportAdminAccess(config) {
+  try {
+    return !!resolveSupportAdminToken(config ?? loadConfigSync());
+  } catch {
+    return false;
+  }
+}
+
+export {
+  resolveSupportAdminToken,
+  supportAdminHeaders,
+  SupportAdminTransportError,
+  assertSecureTransport,
+  hasSupportAdminAccess
+};

package/dist/{chunk-TFUWNX5F.js → chunk-6U7T4IIX.js}

@@ -1,6 +1,6 @@
 import {
   canonicalizeStackManifest
-} from "./chunk-LRRPSQ25.js";
+} from "./chunk-DPILHOZN.js";
 
 // src/lib/stack-manifest-write.ts
 import { readFileSync, statSync, writeFileSync } from "fs";

package/dist/{chunk-QGTP2A7P.js → chunk-74MU2R73.js}

@@ -2,7 +2,7 @@ import {
   deleteKeychainSecret,
   getKeychainSecret,
   setKeychainSecret
-} from "./chunk-ZHHGFNTZ.js";
+} from "./chunk-SYFE7PBI.js";
 
 // src/lib/consent-passphrase.ts
 import crypto from "crypto";