@askexenow/exe-os 0.9.409 → 0.9.411

package/dist/{chunk-23XUZHB7.js → chunk-IHAXXDBH.js}

@@ -10,7 +10,7 @@ import {
 } from "./chunk-SSC7EKY2.js";
 import {
   computeDegradations
-} from "./chunk-ME733Y2F.js";
+} from "./chunk-QOFQY7BJ.js";
 import {
   inventoryLocalSecretResidue,
   redactResiduePathForDisplay
@@ -41,13 +41,17 @@ import {
 } from "./chunk-BYP3DOUU.js";
 import {
   mcpHttpPort
-} from "./chunk-6ZW6BRI4.js";
+} from "./chunk-27NG2NTG.js";
 import {
   isWithin
 } from "./chunk-YRUZK2QA.js";
+import {
+  eventLoopHeartbeatPath,
+  exeDir
+} from "./chunk-ZQEJ4IX2.js";
 import {
   inspectKeyCustodySync
-} from "./chunk-KIJRAZWR.js";
+} from "./chunk-4J77TCTX.js";
 import {
   checkSingleGotrueInstance
 } from "./chunk-FTZET5YX.js";
@@ -61,15 +65,186 @@ import {
 // src/bin/exe-healthcheck.ts
 import { existsSync as existsSync2, readFileSync as readFileSync2, readdirSync } from "fs";
 import os2 from "os";
-import path2 from "path";
+import path3 from "path";
 import { execSync, spawnSync } from "child_process";
 import { fileURLToPath } from "url";
 
+// src/lib/daemon-serving-probe.ts
+import { appendFileSync, closeSync, mkdirSync, openSync, readSync, statSync, writeFileSync } from "fs";
+import { appendFile as appendAsync, mkdir, open as openAsync, stat as statAsync, writeFile } from "fs/promises";
+import net from "net";
+import path from "path";
+var DEFAULT_DAEMON_HTTP_PORT = 48739;
+var HEALTH_TIMEOUT_MS = 3e3;
+var CONNECT_TIMEOUT_MS = 750;
+var STALL_CAPTURE_LOG_TAIL_LINES = 200;
+var STALL_CAPTURE_TAIL_MAX_BYTES = 256 * 1024;
+var STALL_LOG_MAX_BYTES = 1024 * 1024;
+var STALL_LOG_KEEP_BYTES = 512 * 1024;
+function classifyServingEvidence(portOpen, healthAnswered) {
+  if (!portOpen) return "down";
+  return healthAnswered ? "healthy" : "stalled";
+}
+function stalledMessage() {
+  return "STALLED: port listening but /health not answering (event loop blocked?)";
+}
+function tcpConnectProbe(port, timeoutMs) {
+  return new Promise((resolve) => {
+    let settled = false;
+    const finish = (r) => {
+      if (settled) return;
+      settled = true;
+      try {
+        sock.destroy();
+      } catch {
+      }
+      resolve(r);
+    };
+    const sock = net.connect({ host: "127.0.0.1", port });
+    sock.once("connect", () => finish("open"));
+    sock.once("error", (err) => {
+      finish(err?.code === "ECONNREFUSED" ? "refused" : "timeout");
+    });
+    sock.setTimeout(timeoutMs, () => finish("timeout"));
+  });
+}
+async function probeDaemonServing(opts = {}) {
+  const port = opts.port ?? DEFAULT_DAEMON_HTTP_PORT;
+  const healthTimeoutMs = opts.healthTimeoutMs ?? HEALTH_TIMEOUT_MS;
+  const connectTimeoutMs = opts.connectTimeoutMs ?? CONNECT_TIMEOUT_MS;
+  const doFetch = opts.fetchImpl ?? fetch;
+  const doConnect = opts.connectImpl ?? tcpConnectProbe;
+  const connect = await doConnect(port, connectTimeoutMs);
+  if (connect === "refused") {
+    return { state: "down", portOpen: false, detail: "daemon not listening \u2014 connection refused" };
+  }
+  if (connect === "timeout") {
+    return { state: "stalled", portOpen: true, detail: `${stalledMessage()} (TCP connect timed out \u2014 listen backlog saturated?)` };
+  }
+  try {
+    const res = await doFetch(`http://127.0.0.1:${port}/health`, {
+      signal: AbortSignal.timeout(healthTimeoutMs)
+    });
+    return {
+      state: "healthy",
+      portOpen: true,
+      healthStatus: res.status,
+      detail: `/health answered (HTTP ${res.status})`
+    };
+  } catch {
+    return { state: "stalled", portOpen: true, detail: stalledMessage() };
+  }
+}
+function daemonStallsLogPath(dir) {
+  return path.join(dir ?? path.join(exeDir(), "logs"), "daemon-stalls.log");
+}
+function launchdLogPath(dir) {
+  return path.join(dir ?? path.join(exeDir(), "logs"), "exed-launchd.log");
+}
+function readTailSync(filePath, maxBytes) {
+  let fd;
+  try {
+    fd = openSync(filePath, "r");
+    const size = statSync(filePath).size;
+    const len = Math.min(size, maxBytes);
+    const buf = Buffer.alloc(len);
+    readSync(fd, buf, 0, len, Math.max(0, size - len));
+    return buf.toString("utf8");
+  } catch {
+    return "";
+  } finally {
+    if (fd !== void 0) {
+      try {
+        closeSync(fd);
+      } catch {
+      }
+    }
+  }
+}
+async function readTailAsync(filePath, maxBytes) {
+  let fh;
+  try {
+    fh = await openAsync(filePath, "r");
+    const { size } = await fh.stat();
+    const len = Math.min(size, maxBytes);
+    const buf = Buffer.alloc(len);
+    await fh.read(buf, 0, len, Math.max(0, size - len));
+    return buf.toString("utf8");
+  } catch {
+    return "";
+  } finally {
+    try {
+      await fh?.close();
+    } catch {
+    }
+  }
+}
+function heartbeatAgeMs(now) {
+  try {
+    const age = now() - statSync(eventLoopHeartbeatPath()).mtimeMs;
+    return age >= 0 ? Math.round(age) : 0;
+  } catch {
+    return null;
+  }
+}
+function buildRecord(probe, opts) {
+  const now = opts.now ?? Date.now;
+  const tailLines = opts.tailLines ?? STALL_CAPTURE_LOG_TAIL_LINES;
+  const ts = new Date(now()).toISOString();
+  const hbAge = heartbeatAgeMs(now);
+  const tail = readTailSync(launchdLogPath(opts.dir), STALL_CAPTURE_TAIL_MAX_BYTES).split("\n").slice(-tailLines).join("\n").trimEnd();
+  const lines = [
+    `--- daemon stall ${ts} ---`,
+    `state: ${probe.state}`,
+    `detail: ${probe.detail}`,
+    `port_open: ${probe.portOpen}`,
+    `event_loop_heartbeat_age_ms: ${hbAge === null ? "unknown (no heartbeat file)" : String(hbAge)}`,
+    `exed-launchd.log tail (last ${tailLines} lines):`,
+    tail || "(log absent or empty)",
+    "",
+    ""
+  ];
+  return lines.join("\n");
+}
+function trimIfNeededSync(filePath, maxBytes = STALL_LOG_MAX_BYTES, keepBytes = STALL_LOG_KEEP_BYTES) {
+  try {
+    const size = statSync(filePath).size;
+    if (size <= maxBytes) return;
+    const keep = readTailSync(filePath, keepBytes);
+    writeFileSync(filePath, keep);
+  } catch {
+  }
+}
+function captureDaemonStallSync(probe, opts = {}) {
+  if (probe.state !== "stalled") return;
+  try {
+    const target = daemonStallsLogPath(opts.dir);
+    mkdirSync(path.dirname(target), { recursive: true });
+    appendFileSync(target, buildRecord(probe, opts), "utf8");
+    trimIfNeededSync(target, opts.maxBytes, opts.keepBytes);
+  } catch {
+  }
+}
+async function captureDaemonStall(probe, opts = {}) {
+  if (probe.state !== "stalled") return;
+  try {
+    const target = daemonStallsLogPath(opts.dir);
+    await mkdir(path.dirname(target), { recursive: true });
+    await appendAsync(target, buildRecord(probe, opts), "utf8");
+    const { size } = await statAsync(target);
+    if (size > (opts.maxBytes ?? STALL_LOG_MAX_BYTES)) {
+      const keep = await readTailAsync(target, opts.keepBytes ?? STALL_LOG_KEEP_BYTES);
+      await writeFile(target, keep, "utf8");
+    }
+  } catch {
+  }
+}
+
 // src/lib/daemon-supervision.ts
 import { execFileSync } from "child_process";
 import { existsSync, readFileSync } from "fs";
 import os from "os";
-import path from "path";
+import path2 from "path";
 function assessSupervision(i) {
   if (!i.supervisorConfigured) {
     return {
@@ -153,7 +328,7 @@ function readSystemdPid() {
   }
 }
 function readLiveDaemonPid() {
-  const pidPath = process.env.EXE_DAEMON_PID ?? process.env.EXE_EMBED_PID ?? path.join(process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path.join(os.homedir(), ".exe-os"), "exed.pid");
+  const pidPath = process.env.EXE_DAEMON_PID ?? process.env.EXE_EMBED_PID ?? path2.join(process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path2.join(os.homedir(), ".exe-os"), "exed.pid");
   try {
     const pid = parseInt(readFileSync(pidPath, "utf8").trim(), 10);
     if (!Number.isFinite(pid) || pid <= 1) return null;
@@ -167,7 +342,7 @@ function readSupervisionState() {
   const platform = process.platform;
   const runningPid = readLiveDaemonPid();
   if (platform === "darwin") {
-    const plist = path.join(os.homedir(), "Library", "LaunchAgents", "com.askexe.exed.plist");
+    const plist = path2.join(os.homedir(), "Library", "LaunchAgents", "com.askexe.exed.plist");
     const plistInstalled = existsSync(plist);
     const launchdPid = plistInstalled ? readLaunchdPid(process.getuid?.() ?? 501) : void 0;
     return assessSupervision({
@@ -197,17 +372,17 @@ var CC_NATIVE_ONLY_CUTOFF2 = CC_NATIVE_ONLY_CUTOFF;
 var compareSemver2 = compareSemver;
 var detectAutoupdaterVar2 = detectAutoupdaterVar;
 function findPackageRoot() {
-  let dir = path2.dirname(fileURLToPath(import.meta.url));
-  const { root } = path2.parse(dir);
+  let dir = path3.dirname(fileURLToPath(import.meta.url));
+  const { root } = path3.parse(dir);
   while (dir !== root) {
-    if (existsSync2(path2.join(dir, "package.json"))) return dir;
-    dir = path2.dirname(dir);
+    if (existsSync2(path3.join(dir, "package.json"))) return dir;
+    dir = path3.dirname(dir);
   }
   throw new Error("Cannot find package root");
 }
 function checkBuildIntegrity(pkgRoot) {
   const results = [];
-  const tsupConfig = path2.join(pkgRoot, "tsup.config.ts");
+  const tsupConfig = path3.join(pkgRoot, "tsup.config.ts");
   if (!existsSync2(tsupConfig)) {
     return [{ name: "build/tsup-config", pass: false, detail: "tsup.config.ts not found" }];
   }
@@ -217,7 +392,7 @@ function checkBuildIntegrity(pkgRoot) {
   let total = 0;
   for (const match of entryMatches) {
     const outputKey = match[1];
-    const expectedPath = path2.join(pkgRoot, "dist", `${outputKey}.js`);
+    const expectedPath = path3.join(pkgRoot, "dist", `${outputKey}.js`);
     total++;
     if (!existsSync2(expectedPath)) {
       missing.push(`dist/${outputKey}.js`);
@@ -241,7 +416,7 @@ function checkBuildIntegrity(pkgRoot) {
 }
 function checkEmbedPipeline(pkgRoot) {
   const results = [];
-  const daemonPath = path2.join(pkgRoot, "dist", "lib", "exe-daemon.js");
+  const daemonPath = path3.join(pkgRoot, "dist", "lib", "exe-daemon.js");
   if (!existsSync2(daemonPath)) {
     results.push({
       name: "exed/daemon-exists",
@@ -253,17 +428,17 @@ function checkEmbedPipeline(pkgRoot) {
   results.push({ name: "exed/daemon-exists", pass: true, detail: "dist/lib/exe-daemon.js exists" });
   const entryDirs = ["dist/hooks", "dist/bin", "dist/mcp"];
   for (const dir of entryDirs) {
-    const fullDir = path2.join(pkgRoot, dir);
+    const fullDir = path3.join(pkgRoot, dir);
     if (!existsSync2(fullDir)) continue;
     let walkDir = fullDir;
-    const { root } = path2.parse(walkDir);
+    const { root } = path3.parse(walkDir);
     let foundRoot = null;
     while (walkDir !== root) {
-      if (existsSync2(path2.join(walkDir, "package.json"))) {
+      if (existsSync2(path3.join(walkDir, "package.json"))) {
         foundRoot = walkDir;
         break;
       }
-      walkDir = path2.dirname(walkDir);
+      walkDir = path3.dirname(walkDir);
     }
     if (!foundRoot) {
       results.push({
@@ -273,7 +448,7 @@ function checkEmbedPipeline(pkgRoot) {
       });
       continue;
     }
-    const resolvedDaemon = path2.join(foundRoot, "dist", "lib", "exe-daemon.js");
+    const resolvedDaemon = path3.join(foundRoot, "dist", "lib", "exe-daemon.js");
     const reachable = existsSync2(resolvedDaemon);
     results.push({
       name: `exed/reachable-from-${dir}`,
@@ -284,8 +459,8 @@ function checkEmbedPipeline(pkgRoot) {
   return results;
 }
 function checkDaemonDrift(pkgRoot, opts) {
-  const runningScript = resolveRunningDaemonScript(opts?.pidFile ?? path2.join(EXE_AI_DIR, "exed.pid"));
-  const fallbackScript = path2.join(pkgRoot, "dist", "lib", "exe-daemon.js");
+  const runningScript = resolveRunningDaemonScript(opts?.pidFile ?? path3.join(EXE_AI_DIR, "exed.pid"));
+  const fallbackScript = path3.join(pkgRoot, "dist", "lib", "exe-daemon.js");
   const result = measureDaemonDrift({
     daemonScript: runningScript ?? (existsSync2(fallbackScript) ? fallbackScript : null),
     referenceRoot: pkgRoot
@@ -348,7 +523,7 @@ function checkRuntimeDrift(pkgRoot, opts) {
   const hookChecks = hookResults.map(
     (result, i) => formatDriftCheck(hookResults.length === 1 ? "exed/runtime-drift-hooks" : `exed/runtime-drift-hooks[${i + 1}]`, result)
   );
-  const daemonScript = resolveRunningDaemonScript(opts?.pidFile ?? path2.join(EXE_AI_DIR, "exed.pid"));
+  const daemonScript = resolveRunningDaemonScript(opts?.pidFile ?? path3.join(EXE_AI_DIR, "exed.pid"));
   const daemonRoot = daemonScript ? checkoutRootFromScript(daemonScript) : null;
   const daemonRunning = daemonRoot ? readBuildIdentity(daemonRoot) : null;
   const daemonResult = compareRuntimeIdentity("daemon", daemonRunning, installed);
@@ -356,7 +531,7 @@ function checkRuntimeDrift(pkgRoot, opts) {
 }
 function checkTaskSystem(pkgRoot) {
   const results = [];
-  const scannerPath = path2.join(pkgRoot, "dist", "bin", "scan-tasks.js");
+  const scannerPath = path3.join(pkgRoot, "dist", "bin", "scan-tasks.js");
   if (!existsSync2(scannerPath)) {
     results.push({ name: "tasks/scanner", pass: false, detail: "scan-tasks.js not found" });
     return results;
@@ -379,7 +554,7 @@ function checkTaskSystem(pkgRoot) {
 }
 function checkWorkerSpawning(pkgRoot) {
   const results = [];
-  const workerPath = path2.join(pkgRoot, "dist", "hooks", "ingest-worker.js");
+  const workerPath = path3.join(pkgRoot, "dist", "hooks", "ingest-worker.js");
   if (!existsSync2(workerPath)) {
     results.push({ name: "workers/ingest-worker", pass: false, detail: "ingest-worker.js not found" });
     return results;
@@ -394,14 +569,14 @@ function checkWorkerSpawning(pkgRoot) {
       detail: `Parse error: ${err instanceof Error ? err.message.slice(0, 200) : String(err)}`
     });
   }
-  const hooksDir = path2.join(pkgRoot, "dist", "hooks");
+  const hooksDir = path3.join(pkgRoot, "dist", "hooks");
   if (existsSync2(hooksDir)) {
     const hookFiles = readdirSync(hooksDir).filter((f) => f.endsWith(".js") && !f.endsWith(".js.map"));
     let hooksPassed = 0;
     const hooksFailed = [];
     for (const hook of hookFiles) {
       try {
-        execSync(`node --check "${path2.join(hooksDir, hook)}" 2>&1`, { timeout: 1e4, encoding: "utf-8" });
+        execSync(`node --check "${path3.join(hooksDir, hook)}" 2>&1`, { timeout: 1e4, encoding: "utf-8" });
         hooksPassed++;
       } catch {
         hooksFailed.push(hook);
@@ -425,8 +600,8 @@ function checkWorkerSpawning(pkgRoot) {
 }
 function checkMcpTransport() {
   const results = [];
-  const pidPath = path2.join(EXE_AI_DIR, "exed.pid");
-  const tokenPath = path2.join(EXE_AI_DIR, "exed.token");
+  const pidPath = path3.join(EXE_AI_DIR, "exed.pid");
+  const tokenPath = path3.join(EXE_AI_DIR, "exed.token");
   let daemonAlive = false;
   if (existsSync2(pidPath)) {
     try {
@@ -468,6 +643,38 @@ function checkMcpTransport() {
   } else if (daemonAlive) {
     results.push({ name: "mcp/http-endpoint", pass: false, detail: "Daemon is alive but exed.token is missing; cannot probe MCP HTTP" });
   }
+  if (daemonAlive && existsSync2(tokenPath)) {
+    const port = /^\d+$/.test(mcpHttpPort()) ? mcpHttpPort() : "48739";
+    try {
+      const token = readFileSync2(tokenPath, "utf8").trim();
+      const code = execSync(
+        `curl -sS -o /dev/null -w "%{http_code}" -m 2 -H "Authorization: Bearer ${token}" http://127.0.0.1:${port}/health`,
+        { encoding: "utf8", timeout: 2500 }
+      ).trim();
+      const answered = /^\d{3}$/.test(code) && code !== "000";
+      results.push({
+        name: "mcp/serving-probe",
+        pass: answered,
+        detail: answered ? `Daemon serving /health (HTTP ${code})` : `${stalledMessage()} (curl code ${code} after 2s)`
+      });
+      if (!answered) {
+        captureDaemonStallSync({ state: "stalled", portOpen: true, detail: stalledMessage() });
+      }
+    } catch (err) {
+      const rawMsg = err instanceof Error ? err.message : String(err);
+      const msg = redactSecrets(rawMsg).text.slice(0, 180);
+      const refused = msg.includes("Failed to connect") || msg.includes("Connection refused");
+      const state = classifyServingEvidence(!refused, false);
+      results.push({
+        name: "mcp/serving-probe",
+        pass: false,
+        detail: state === "stalled" ? `${stalledMessage()} (probe error: ${msg})` : `Daemon not listening \u2014 connection refused (${msg})`
+      });
+      if (state === "stalled") {
+        captureDaemonStallSync({ state, portOpen: true, detail: stalledMessage() });
+      }
+    }
+  }
   const events = readMcpHttpEvents(200);
   const summary = summarizeMcpTransport(events);
   results.push({
@@ -478,7 +685,7 @@ function checkMcpTransport() {
   results.push({
     name: "mcp/monitor-summary",
     pass: true,
-    detail: `Privacy-safe local monitor summary: ${path2.join(EXE_AI_DIR, "monitor", "mcp-transport-summary.json")}`
+    detail: `Privacy-safe local monitor summary: ${path3.join(EXE_AI_DIR, "monitor", "mcp-transport-summary.json")}`
   });
   return results;
 }
@@ -536,7 +743,7 @@ function checkClaudeCodeInstall() {
       detail: "Failed to check claude binary path"
     });
   }
-  const versionsDir = path2.join(
+  const versionsDir = path3.join(
     process.env.HOME ?? process.env.USERPROFILE ?? "",
     ".local",
     "share",
@@ -632,13 +839,13 @@ function checkRetrievalHealth() {
   const results = [];
   let embedDaemon = "unavailable";
   try {
-    const pidPath = path2.join(EXE_AI_DIR, "exed.pid");
+    const pidPath = path3.join(EXE_AI_DIR, "exed.pid");
     if (existsSync2(pidPath)) {
       const pid = parseInt(readFileSync2(pidPath, "utf8").trim(), 10);
       try {
         process.kill(pid, 0);
         try {
-          const tokenPath = path2.join(EXE_AI_DIR, "exed.token");
+          const tokenPath = path3.join(EXE_AI_DIR, "exed.token");
           if (existsSync2(tokenPath)) {
             const token = readFileSync2(tokenPath, "utf8").trim();
             const port = /^\d+$/.test(mcpHttpPort()) ? mcpHttpPort() : "48739";
@@ -679,7 +886,7 @@ function checkRetrievalHealth() {
   });
   let configuredSearchMode = "hybrid";
   try {
-    const configPath = path2.join(EXE_AI_DIR, "config.json");
+    const configPath = path3.join(EXE_AI_DIR, "config.json");
     if (existsSync2(configPath)) {
       const cfg = JSON.parse(readFileSync2(configPath, "utf8"));
       if (cfg.searchMode) configuredSearchMode = cfg.searchMode;
@@ -699,7 +906,7 @@ function checkRetrievalHealth() {
   }
   let queryRouter = "fallback";
   try {
-    const configPath = path2.join(EXE_AI_DIR, "config.json");
+    const configPath = path3.join(EXE_AI_DIR, "config.json");
     if (existsSync2(configPath)) {
       const cfg = JSON.parse(readFileSync2(configPath, "utf8"));
       if (cfg.selfQueryRouter === false) {
@@ -753,7 +960,7 @@ function checkRetrievalHealth() {
     detail: queryRouter === "active" ? "\u{1F7E2} Query router: active (LLM-based)" : queryRouter === "disabled" ? "\u2139\uFE0F Query router: disabled by configuration" : `\u2139\uFE0F ${queryRouterDegradation?.message ?? "Query router: fallback (rule-based)"}`
   });
   try {
-    const ledgerPath = path2.join(EXE_AI_DIR, "db-restore-events.json");
+    const ledgerPath = path3.join(EXE_AI_DIR, "db-restore-events.json");
     if (existsSync2(ledgerPath)) {
       const raw = JSON.parse(readFileSync2(ledgerPath, "utf8"));
       if (Array.isArray(raw) && raw.length > 0) {
@@ -859,7 +1066,7 @@ function healthcheckTimeoutMs() {
 }
 function resolveHealthcheckScript() {
   try {
-    const built = path2.join(findPackageRoot(), "dist", "bin", "exe-healthcheck.js");
+    const built = path3.join(findPackageRoot(), "dist", "bin", "exe-healthcheck.js");
     if (existsSync2(built)) return built;
   } catch {
   }
@@ -950,6 +1157,8 @@ if ((process.argv[1] ?? "").includes("exe-healthcheck")) {
 }
 
 export {
+  probeDaemonServing,
+  captureDaemonStall,
   readSupervisionState,
   CC_NATIVE_ONLY_CUTOFF2 as CC_NATIVE_ONLY_CUTOFF,
   compareSemver2 as compareSemver,

package/dist/{chunk-4S6H2NWS.js → chunk-IPUDXR67.js}

@@ -15,7 +15,7 @@ import {
 import {
   getMasterKey,
   setMasterKey
-} from "./chunk-KIJRAZWR.js";
+} from "./chunk-4J77TCTX.js";
 import {
   WINDOWS_UNSUPPORTED_EXIT,
   isWSL,

package/dist/{chunk-UXJAW4IQ.js → chunk-J6U4ZR77.js}

@@ -3,11 +3,11 @@ import {
 } from "./chunk-CBPNZFSU.js";
 import {
   initStore
-} from "./chunk-APVU4Q5B.js";
+} from "./chunk-LSHUX7P4.js";
 import {
   getClient,
   isInitialized
-} from "./chunk-3MDUKF3N.js";
+} from "./chunk-L5JFVK5T.js";
 
 // src/lib/schedules.ts
 import crypto from "crypto";

package/dist/{chunk-7I6KVKFF.js → chunk-JAIZCE6W.js}

@@ -4,14 +4,14 @@ import {
 } from "./chunk-EVMOKRBC.js";
 import {
   registerDaemonScopedQueryChokepoint
-} from "./chunk-QPMKVSHU.js";
+} from "./chunk-KN5GAVCG.js";
 import {
   orgPartnerModeActive,
   requireOrgPartnerBinding,
   resolveOrgPartnerBindings,
   resolvePartnerIdentities,
   rosterKeyLookupFor
-} from "./chunk-WYNIWJRN.js";
+} from "./chunk-CJ6CS2IH.js";
 import {
   createDerivedSeqStore,
   createMailboxOpener,
@@ -20,7 +20,7 @@ import {
   isConsentMacPrimed,
   primeTaskOriginMarkerKey,
   scopedQueryChokepointStatus
-} from "./chunk-DACRR362.js";
+} from "./chunk-XQ7BIVLI.js";
 import {
   flushMailboxOutbox
 } from "./chunk-3FGBBJYM.js";

package/dist/{chunk-SA66WRBT.js → chunk-JGBYZTWH.js}

@@ -1,6 +1,6 @@
 import {
   getClient
-} from "./chunk-3MDUKF3N.js";
+} from "./chunk-L5JFVK5T.js";
 
 // src/lib/orchestration-events.ts
 import crypto from "crypto";

package/dist/{chunk-HRYWB4TO.js → chunk-JJZZXEAN.js}

@@ -1,16 +1,16 @@
 import {
   PLATFORM_PROCEDURE_TITLES
-} from "./chunk-NVM3SKJ4.js";
+} from "./chunk-4CN3EE6U.js";
 import {
   isGhostBehaviorRow
-} from "./chunk-F5ZRHLG5.js";
+} from "./chunk-KEDZRQI3.js";
 import {
   IdentityConflictError,
   getClient,
   getIdentity,
   listIdentities,
   updateIdentity
-} from "./chunk-3MDUKF3N.js";
+} from "./chunk-L5JFVK5T.js";
 import {
   atomicWriteJsonSync
 } from "./chunk-HSGBZSCA.js";

package/dist/{chunk-IZ24HRDC.js → chunk-JNULO6I5.js}

@@ -1,14 +1,14 @@
 import {
   resolveAuth,
   resolveEndpoint
-} from "./chunk-M4N7I2H5.js";
+} from "./chunk-HA6BIZ6L.js";
 import {
   resolvePartnerIdentities
-} from "./chunk-WYNIWJRN.js";
+} from "./chunk-CJ6CS2IH.js";
 import {
   displayFingerprint,
   ed25519PrivateKeyFromSeed
-} from "./chunk-GPWXUU3L.js";
+} from "./chunk-MZNLQC6W.js";
 
 // src/lib/org-member-key.ts
 import { createHash, sign } from "crypto";

package/dist/{chunk-YVS77JPW.js → chunk-JTJP4JK7.js}

@@ -1,9 +1,9 @@
 import {
   listBehaviors
-} from "./chunk-F5ZRHLG5.js";
+} from "./chunk-KEDZRQI3.js";
 import {
   incrementSkillUsage
-} from "./chunk-FJKUFMNF.js";
+} from "./chunk-CFFSHBQF.js";
 
 // src/lib/behavior-injection.ts
 import { appendFile } from "fs/promises";
@@ -349,7 +349,7 @@ async function injectBehaviors(opts) {
       `[behavior-injection] ${opts.assignedTo} <- ${selected.length}/${behaviors.length} behaviour(s) for "${opts.title.slice(0, 60)}": ` + selected.map((s) => `${s.behavior.id.slice(0, 8)}(${s.score.toFixed(2)})`).join(" ") + "\n"
     );
     await incrementSkillUsage(selected.map((s) => s.behavior));
-    const { recordBehaviorsConsulted } = await import("./skill-usage-GNV737U5.js");
+    const { recordBehaviorsConsulted } = await import("./skill-usage-2MBTF7Y4.js");
     await recordBehaviorsConsulted(selected.map((s) => s.behavior.id));
     return selected;
   } catch (err) {