@askexenow/exe-os 0.9.413 → 0.9.415

package/dist/{chunk-L5JFVK5T.js → chunk-GDZJL5GQ.js}

@@ -4,20 +4,20 @@ import {
 import {
   assertValidDbPath
 } from "./chunk-TKDITWDN.js";
+import {
+  recordDbOpen
+} from "./chunk-5YEUPUV4.js";
 import {
   listBackups,
   preBackupCheckpoint
-} from "./chunk-SINIRUYZ.js";
+} from "./chunk-I4N7F54M.js";
 import {
   MEMORY_PROJECTION_OUTBOX_INDEX_SQL,
   MEMORY_PROJECTION_OUTBOX_TABLE_SQL,
   MEMORY_PROJECTION_OUTBOX_UNIQUE_INDEX_SQL,
   PROJECTION_CHECKPOINT_TABLE_SQL,
   ensureMemoryWriteIndex
-} from "./chunk-6777GNWI.js";
-import {
-  recordDbOpen
-} from "./chunk-5YEUPUV4.js";
+} from "./chunk-YBVSVB6C.js";
 import {
   isPostgresBackendEnabled
 } from "./chunk-YYB5PMTK.js";
@@ -824,14 +824,15 @@ function registerBinSymlinks(name) {
     return { created, skipped, errors };
   }
   const binDir = path3.dirname(exeBinPath);
-  let target;
+  let cliTarget;
   try {
-    target = readlinkSync(exeBinPath);
+    cliTarget = readlinkSync(exeBinPath);
   } catch {
     errors.push("Could not read 'exe' symlink");
     return { created, skipped, errors };
   }
-  for (const suffix of ["", "-opencode", "-glm"]) {
+  const target = path3.join(path3.dirname(cliTarget), "exe-launch-agent.js");
+  for (const suffix of ["", "-opencode", "-glm", "-muse"]) {
     const linkName = `${name}${suffix}`;
     const linkPath = path3.join(binDir, linkName);
     if (existsSync3(linkPath)) {
@@ -1515,7 +1516,7 @@ async function migrateReflectionDedup(client) {
     "ALTER TABLE memory_reflections ADD COLUMN dedup_key TEXT",
     "migration add memory_reflections.dedup_key"
   );
-  const { reflectionDedupKey } = await import("./memory-reflection-EXNHRZL7.js");
+  const { reflectionDedupKey } = await import("./memory-reflection-4775DTOT.js");
   const keyForRow = (row) => {
     let sources = [];
     try {
@@ -2546,6 +2547,8 @@ async function offloadReadQuery(sql, args = []) {
         return await runReadQueryInWorker(sql, args);
       }
     } catch (err) {
+      const { isDbReadWorkerTimeout } = await import("./lib/db-read-worker-client.js");
+      if (isDbReadWorkerTimeout(err)) throw err;
       logCatchDebug("offloadReadQuery worker", err);
     }
   }
@@ -2559,6 +2562,8 @@ async function offloadReadIfMain(client, sql, args, isMain) {
         return await runReadQueryInWorker(sql, args);
       }
     } catch (err) {
+      const { isDbReadWorkerTimeout } = await import("./lib/db-read-worker-client.js");
+      if (isDbReadWorkerTimeout(err)) throw err;
       logCatchDebug("offloadReadIfMain worker", err);
     }
   }
@@ -2573,7 +2578,7 @@ async function sweepExpiredSoftDeletedMemories(client, options = {}) {
   const purgeArchived = archDays !== void 0;
   const BATCH_SIZE = 2e3;
   const MAX_BATCHES = 500;
-  const { cleanupCardsForMemories, cleanupGraphLinksForMemories } = await import("./graph-rag-UWOTK4AQ.js");
+  const { cleanupCardsForMemories, cleanupGraphLinksForMemories } = await import("./graph-rag-WPSWFLOX.js");
   const softCutoff = `-${softDays} days`;
   const selectArgsBase = [softCutoff];
   let predicate = `status = 'deleted' AND COALESCE(deleted_at, timestamp) < datetime('now', ?)`;

package/dist/{chunk-RYMXD2NT.js → chunk-GELNQI77.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-WCGNCH3Q.js";
 import {
   registerAllTools
-} from "./chunk-6HJF7IA3.js";
+} from "./chunk-6QVWL7ZX.js";
 
 // src/mcp/mcp-surface-hash.ts
 function computeMcpSurfaceHash() {

package/dist/{chunk-5ZMNFSHV.js → chunk-H3MFCDKR.js}

@@ -1,6 +1,6 @@
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-JGBYZTWH.js";
+} from "./chunk-D6D7LCMR.js";
 
 // src/lib/worktree.ts
 import { execFile, execFileSync, execSync } from "child_process";

package/dist/{chunk-657I6PUF.js → chunk-H3ORS4N7.js}

@@ -1,16 +1,16 @@
 import {
   extractMemoryGraph
-} from "./chunk-RHHEYC6H.js";
+} from "./chunk-3PMAZKLF.js";
 import {
   flushBatch,
   writeMemory
-} from "./chunk-LSHUX7P4.js";
+} from "./chunk-D4RU4Y57.js";
 import {
   extractKeywords
 } from "./chunk-CHCA3ZM2.js";
 import {
   getActiveAgent
-} from "./chunk-GL5ZG72X.js";
+} from "./chunk-CTZTOAHJ.js";
 
 // src/mcp/tools/import-conversations.ts
 import { z } from "zod";

package/dist/{chunk-W3ABSZ6G.js → chunk-H7ZVQUU2.js}

@@ -140,7 +140,7 @@ async function assertManifestSignature(manifest, publicKeyPem) {
       "manifest carries no `signature`. Fleets that enforce EXE_STACK_PUBLIC_KEY reject unsigned manifests, so publishing one would ship a release no host can install. Re-sign with the custodied key: node scripts/sign-stack-manifest.mjs deploy/stack-manifests/v0.9.json"
     );
   }
-  const { verifyStackManifestSignature } = await import("./stack-update-EBATTQPP.js");
+  const { verifyStackManifestSignature } = await import("./stack-update-3MADKNUJ.js");
   try {
     verifyStackManifestSignature(manifest, publicKeyPem);
   } catch (err) {
@@ -1008,7 +1008,7 @@ async function runRegistryProxy(options = registryProxyOptionsFromEnv()) {
   await new Promise((resolve) => server.listen(options.port, options.host, resolve));
   console.log(`exe-registry-proxy listening on ${options.host ?? "0.0.0.0"}:${options.port}`);
   console.log(`proxying /v2/${options.allowedNamespace ?? "askexe"}/* -> ${options.upstream ?? "https://ghcr.io"}`);
-  const { licenseSyncConfigFromEnv, startLicenseSyncScheduler } = await import("./license-sync-FDEDT4AC.js");
+  const { licenseSyncConfigFromEnv, startLicenseSyncScheduler } = await import("./license-sync-H7EMEVUL.js");
   const syncConfig = licenseSyncConfigFromEnv();
   if (syncConfig) {
     startLicenseSyncScheduler(syncConfig);

package/dist/{chunk-2YGBJHC2.js → chunk-HMEXSII5.js}

@@ -1,15 +1,15 @@
 import {
   getActiveAgent
-} from "./chunk-GL5ZG72X.js";
+} from "./chunk-CTZTOAHJ.js";
 import {
   listTasks
-} from "./chunk-GM4UEZDE.js";
+} from "./chunk-WEG7URND.js";
 import {
   getAgentContext
 } from "./chunk-GJV3WDWM.js";
 import {
   isCoordinatorName
-} from "./chunk-L5JFVK5T.js";
+} from "./chunk-GDZJL5GQ.js";
 
 // src/mcp/tools/list-tasks.ts
 import { z } from "zod";

package/dist/{chunk-EWDBWOCX.js → chunk-HPCISMTN.js}

@@ -1,7 +1,7 @@
 import {
   completeReminder,
   formatAmbiguousReminder
-} from "./chunk-RYYFFCJG.js";
+} from "./chunk-UMBKEPUP.js";
 
 // src/mcp/tools/complete-reminder.ts
 import { z } from "zod";

package/dist/{chunk-HA6BIZ6L.js → chunk-I2IG5GKQ.js}

@@ -1,27 +1,27 @@
-import {
-  asOrgBillablePlan
-} from "./chunk-W4H2MZAS.js";
 import {
   resolvePartnerIdentities
-} from "./chunk-CJ6CS2IH.js";
+} from "./chunk-BHIMHRRI.js";
+import {
+  asOrgBillablePlan
+} from "./chunk-3W6D3XED.js";
 import {
   OrgKeyPinConflictError,
   orgKeyPinConfirmation,
   pinOrgKey,
   readOrgKeyPin
-} from "./chunk-6PXFF6IV.js";
+} from "./chunk-EVSJUMO3.js";
 import {
   displayFingerprint,
   ed25519PrivateKeyFromSeed,
   signKeyFingerprint
-} from "./chunk-MZNLQC6W.js";
+} from "./chunk-E3TNFXWQ.js";
 import {
   establishOrgMode,
   upsertOrgMembership
-} from "./chunk-LLZUL7M2.js";
+} from "./chunk-TDPDKE4M.js";
 import {
   isValidX25519Recipient
-} from "./chunk-7SHU5MOD.js";
+} from "./chunk-RJ7RN5GE.js";
 
 // src/lib/org-join.ts
 import { createHash, sign } from "crypto";

package/dist/{chunk-SINIRUYZ.js → chunk-I4N7F54M.js}

@@ -1,3 +1,6 @@
+import {
+  copyDbUnderReadSnapshot
+} from "./chunk-CCFWKW2D.js";
 import {
   isPostgresBackendEnabled
 } from "./chunk-YYB5PMTK.js";
@@ -230,7 +233,7 @@ async function preBackupCheckpoint(dbPath, checkpointMode) {
 }
 async function offloadedSourceQuickCheck(dbPath) {
   try {
-    const { backupVerifyOffloadEnabled, runInBackupVerifyWorker, reportBackupVerifyWorkerMissing } = await import("./backup-verify-AG54CYGR.js");
+    const { backupVerifyOffloadEnabled, runInBackupVerifyWorker, reportBackupVerifyWorkerMissing } = await import("./backup-verify-TPKH64MK.js");
     if (!backupVerifyOffloadEnabled()) return null;
     if (!backupOffloadCreds || path.resolve(backupOffloadCreds.dbPath) !== path.resolve(dbPath)) {
       process.stderr.write(
@@ -257,10 +260,10 @@ async function offloadedSourceQuickCheck(dbPath) {
       return null;
     }
     process.stderr.write(
-      `[db-backup] off-loop source quick_check did not complete (${run.ok ? "unexpected reply" : run.reason}); falling back to the main-thread check.
+      `[db-backup] off-loop source quick_check did not complete (${run.ok ? "unexpected reply" : run.reason}); NOT re-running it on the daemon event loop.
 `
     );
-    return null;
+    return "incomplete";
   } catch (err) {
     process.stderr.write(
       `[db-backup] off-loop source quick_check failed (${err instanceof Error ? err.message : String(err)}); falling back to the main-thread check.
@@ -302,6 +305,9 @@ async function quickCheckBackupSourceAfterCopy(reason, backupPath, dbPath) {
       return markUnverified("connection is query_only; an FTS5 verdict from it is not trustworthy");
     }
     const offloaded = await offloadedSourceQuickCheck(dbPath);
+    if (offloaded === "incomplete") {
+      return markUnverified("off-loop source quick_check did not complete; refusing to re-run a full-DB scan on the daemon event loop");
+    }
     let result;
     if (offloaded === "ok") {
       result = "ok";
@@ -410,42 +416,65 @@ async function promoteTmpBackup(tmpBackupPath, backupPath, includeSidecars) {
     if (existsSync(tmpSidecar)) await rename(tmpSidecar, backupPath + suffix);
   }
 }
-async function checkpointWalIntoMainDb(client) {
+var SNAPSHOT_COPY_WORKER_TIMEOUT_MS = Number(process.env.EXE_BACKUP_SNAPSHOT_COPY_TIMEOUT_MS) || 2 * 60 * 60 * 1e3;
+var SNAPSHOT_COPY_EXIT_WITH_WAL = 3;
+async function trySnapshotCopyWorker(dbPath, tmpBackupPath, encryptionKey) {
+  if (process.env.EXE_IS_DAEMON !== "1") return null;
+  if (!backupOffloadCreds || path.resolve(backupOffloadCreds.dbPath) !== path.resolve(dbPath)) return null;
+  const workerPath = process.env.EXE_DB_CHECKPOINT_WORKER_BIN || resolveCheckpointWorkerPath(import.meta.url);
+  if (!workerPath) {
+    process.stderr.write(
+      "[db-backup] WARNING: db-checkpoint-worker.js not found \u2014 the encrypted backup snapshot copy will run IN-PROCESS on the daemon event loop (check tsup entries).\n"
+    );
+    return null;
+  }
+  const { fork } = await import("child_process");
+  const env = {
+    ...process.env,
+    EXE_DB_CHECKPOINT_PATH: dbPath,
+    EXE_DB_CHECKPOINT_MODE: "TRUNCATE",
+    EXE_DB_CHECKPOINT_BUSY_TIMEOUT_MS: String(PRE_BACKUP_CHECKPOINT_BUSY_TIMEOUT_MS),
+    EXE_DB_CHECKPOINT_KEY: encryptionKey,
+    EXE_DB_SNAPSHOT_COPY_DEST: tmpBackupPath,
+    EXE_IS_DAEMON: ""
+  };
+  const child = fork(workerPath, [], { stdio: ["ignore", "ignore", "inherit", "ipc"], env });
   try {
-    await client.execute(`PRAGMA busy_timeout = ${PRE_BACKUP_CHECKPOINT_BUSY_TIMEOUT_MS}`);
+    child.disconnect();
   } catch {
   }
-  const modes = ["TRUNCATE", "TRUNCATE", "TRUNCATE", "FULL"];
-  for (const mode of modes) {
-    try {
-      const res = await client.execute(`PRAGMA wal_checkpoint(${mode})`);
-      const row = res.rows?.[0];
-      const busy = Number(row?.busy ?? row?.[0] ?? 0);
-      if (busy === 0) return true;
-    } catch {
-    }
-  }
-  return false;
+  const exitCode = await new Promise((resolve, reject) => {
+    const timer = setTimeout(() => {
+      try {
+        child.kill("SIGKILL");
+      } catch {
+      }
+      reject(new Error(`snapshot copy worker timed out after ${SNAPSHOT_COPY_WORKER_TIMEOUT_MS}ms`));
+    }, SNAPSHOT_COPY_WORKER_TIMEOUT_MS);
+    timer.unref?.();
+    child.once("error", (err) => {
+      clearTimeout(timer);
+      reject(err);
+    });
+    child.once("exit", (code) => {
+      clearTimeout(timer);
+      resolve(code);
+    });
+  });
+  if (exitCode === 0) return "standalone";
+  if (exitCode === SNAPSHOT_COPY_EXIT_WITH_WAL) return "with-wal";
+  throw new Error(`snapshot copy worker exited with code ${exitCode}`);
 }
 async function createEncryptedByteBackup(dbPath, tmpBackupPath, encryptionKey) {
-  let drained = false;
-  const client = createClient({ url: `file:${dbPath}`, encryptionKey });
-  try {
-    await client.execute("SELECT 1");
-    drained = await checkpointWalIntoMainDb(client);
-  } finally {
-    client.close();
-  }
-  let walBytes = 0;
-  try {
-    walBytes = existsSync(dbPath + "-wal") ? statSync(dbPath + "-wal").size : 0;
-  } catch {
-  }
-  if (drained || walBytes === 0) {
-    await copyFile(dbPath, tmpBackupPath);
-    return false;
-  }
-  return copyBytePreservingSnapshot(dbPath, tmpBackupPath);
+  const offloaded = await trySnapshotCopyWorker(dbPath, tmpBackupPath, encryptionKey);
+  if (offloaded) return offloaded === "with-wal";
+  const mode = await copyDbUnderReadSnapshot({
+    dbPath,
+    destPath: tmpBackupPath,
+    encryptionKey,
+    busyTimeoutMs: PRE_BACKUP_CHECKPOINT_BUSY_TIMEOUT_MS
+  });
+  return mode === "with-wal";
 }
 async function resolveBackupEncryptionKey(dbPath, explicit) {
   if (explicit) return explicit;
@@ -549,17 +578,30 @@ async function createBackupAsync(reason = "manual", opts = {}) {
       await createOnlineBackup(dbPath, tmpBackupPath);
     }
   } catch (err) {
-    if (!preserveForRestore) throw err;
+    if (!preserveForRestore) {
+      recordFailedBackupAttempt(reason, `copy failed: ${err instanceof Error ? err.message : String(err)}`);
+      for (const p of [tmpBackupPath, `${tmpBackupPath}-wal`]) {
+        try {
+          unlinkSync(p);
+        } catch {
+        }
+      }
+      throw err;
+    }
     bytePreservingSidecars = await copyBytePreservingSnapshot(dbPath, tmpBackupPath);
   }
   markBackupInFlight(backupPath);
   try {
     await promoteTmpBackup(tmpBackupPath, backupPath, bytePreservingSidecars);
     const sourceStatus = preserveForRestore ? null : await quickCheckBackupSourceAfterCopy(reason, backupPath, dbPath);
-    if (sourceStatus === "failed") return null;
+    if (sourceStatus === "failed") {
+      recordFailedBackupAttempt(reason, "backup source failed quick_check; copy quarantined");
+      return null;
+    }
     if (sourceStatus === "repaired") {
       if (opts._retriedAfterFtsRepair) {
         process.stderr.write("[db-backup] ERROR: backup source still failed after FTS repair retry; refusing to keep backup.\n");
+        recordFailedBackupAttempt(reason, "backup source still failed quick_check after FTS repair retry");
         return null;
       }
       return createBackupAsync(reason, { ...opts, _retriedAfterFtsRepair: true });
@@ -576,7 +618,7 @@ async function createBackupAsync(reason = "manual", opts = {}) {
     let artifactState = "not-checked";
     let artifactDetail = "artifact read-back did not run";
     try {
-      const { manifestWriteEnabled, readBackBackupArtifact, manifestPathFor } = await import("./backup-verify-AG54CYGR.js");
+      const { manifestWriteEnabled, readBackBackupArtifact, manifestPathFor } = await import("./backup-verify-TPKH64MK.js");
       if (manifestWriteEnabled()) {
         const readback = await readBackBackupArtifact(backupPath, dbName, { keyHex: encryptionKey });
         artifactState = readback.artifact;
@@ -605,6 +647,7 @@ async function createBackupAsync(reason = "manual", opts = {}) {
           `[db-backup] ERROR: backup (${reason}) produced an UNREADABLE artifact \u2014 ${artifactDetail}. The live source passed its own check; the COPY did not. ` + (quarantined ? `Quarantined as ${path.basename(quarantined)}.` : `Quarantine rename FAILED \u2014 remove ${backupBase} manually.`) + ` This file is NOT a valid backup.
 `
         );
+        recordFailedBackupAttempt(reason, `artifact unreadable: ${artifactDetail}`);
         return null;
       }
       if (artifactState === "readable") {
@@ -649,10 +692,14 @@ async function createBackupAsync(reason = "manual", opts = {}) {
           `[db-backup] ERROR: backup (${reason}) left a ${walBytes}-byte WAL with no manifest \u2014 unverifiable image. ` + (quarantined ? `Quarantined as ${path.basename(quarantined)}.` : `Quarantine rename FAILED \u2014 remove ${path.basename(backupPath)} manually.`) + ` This file is NOT a valid backup.
 `
         );
-        if (reason !== "pre-restore") return null;
+        if (reason !== "pre-restore") {
+          recordFailedBackupAttempt(reason, `dirty-WAL image without manifest (wal=${walBytes} bytes)`);
+          return null;
+        }
       }
     }
     clearBackupInFlight(backupPath);
+    if (reason !== "pre-restore") clearFailedBackupAttempt(reason);
     if (!opts.skipRetention) {
       try {
         enforceRetention(reason);
@@ -816,7 +863,7 @@ function recordMissedBackup(entry) {
 function alertMissedBackup(message, skipped) {
   void (async () => {
     try {
-      const { pushNotifyAsync } = await import("./push-notifications-QW4BWRC7.js");
+      const { pushNotifyAsync } = await import("./push-notifications-CT452G6K.js");
       pushNotifyAsync({
         event: "backup_failed",
         title: skipped ? "Backup SKIPPED \u2014 disk full" : "Backup FAILED \u2014 disk full",
@@ -1272,6 +1319,32 @@ function hasRecentBackup(reason, withinMs, deps = REAL_RECENT_BACKUP_DEPS) {
   }
   return false;
 }
+function failedBackupAttemptMarkerPath(reason, backupDir = BACKUP_DIR) {
+  return path.join(backupDir, `.last-failed-attempt-${reason.replace(/[^A-Za-z0-9_-]/g, "_")}.json`);
+}
+function recordFailedBackupAttempt(reason, detail, backupDir = BACKUP_DIR) {
+  try {
+    writeFileSync(
+      failedBackupAttemptMarkerPath(reason, backupDir),
+      JSON.stringify({ reason, at: (/* @__PURE__ */ new Date()).toISOString(), detail: detail.slice(0, 500) }) + "\n"
+    );
+  } catch {
+  }
+}
+function clearFailedBackupAttempt(reason, backupDir = BACKUP_DIR) {
+  try {
+    unlinkSync(failedBackupAttemptMarkerPath(reason, backupDir));
+  } catch {
+  }
+}
+function hasRecentFailedBackupAttempt(reason, withinMs, deps = REAL_RECENT_BACKUP_DEPS) {
+  try {
+    const mtime = deps.statMtimeMs(failedBackupAttemptMarkerPath(reason, deps.backupDir));
+    return deps.now() - mtime <= withinMs;
+  } catch {
+    return false;
+  }
+}
 function shouldMakePreRestartBackup(existingBackupMtimesMs, now, windowMs = preRestartDedupWindowMs()) {
   return !existingBackupMtimesMs.some((mtime) => now - mtime <= windowMs);
 }
@@ -1356,6 +1429,7 @@ export {
   resolveQuickCheckRoute,
   resolveCheckpointWorkerPath,
   preBackupCheckpoint,
+  SNAPSHOT_COPY_EXIT_WITH_WAL,
   shouldQuarantineDirtyWalBackup,
   quarantineDirtyWalBackup,
   createBackup,
@@ -1396,6 +1470,10 @@ export {
   DEFAULT_PRE_RESTART_DEDUP_MS,
   preRestartDedupWindowMs,
   hasRecentBackup,
+  failedBackupAttemptMarkerPath,
+  recordFailedBackupAttempt,
+  clearFailedBackupAttempt,
+  hasRecentFailedBackupAttempt,
   shouldMakePreRestartBackup,
   isUnverifiableDirtyWalBackup,
   getLatestBackup,

package/dist/{chunk-XEAZJXMZ.js → chunk-IM2KTXBB.js}

@@ -1,11 +1,11 @@
 import {
   ingest
-} from "./chunk-FPF2PJFK.js";
+} from "./chunk-U34HVNLK.js";
 import {
   listWorkflowDefinitions,
   runWorkflow,
   startWorkflow
-} from "./chunk-GHYHNHDL.js";
+} from "./chunk-UOLIA6N6.js";
 import {
   initCRMBridge
 } from "./chunk-ML4S5SHZ.js";

package/dist/{chunk-XC5OASHV.js → chunk-IVPVCTXX.js}

@@ -11,7 +11,7 @@ import {
 import {
   loadLicense,
   readCachedLicenseToken
-} from "./chunk-EOWJXCYC.js";
+} from "./chunk-TSZ3JCQB.js";
 import {
   loadConfig
 } from "./chunk-MMS2HBRT.js";

package/dist/{chunk-CFFSHBQF.js → chunk-J56UXB2X.js}

@@ -1,6 +1,6 @@
 import {
   getClient
-} from "./chunk-L5JFVK5T.js";
+} from "./chunk-GDZJL5GQ.js";
 
 // src/lib/skill-refinement.ts
 import crypto from "crypto";

package/dist/{chunk-6J2J3VJS.js → chunk-JHVRXXEB.js}

@@ -1,23 +1,23 @@
 import {
   MultiAgentOrchestrator
-} from "./chunk-BE3UETW6.js";
+} from "./chunk-T4X35SUY.js";
 import {
   createTokenBudgetMiddleware
-} from "./chunk-PDQGR5LZ.js";
+} from "./chunk-N7PW2MXQ.js";
 import {
   createQuietRenderer,
   createTerminalRenderer,
   renderAgentEvents
 } from "./chunk-YZFZDJWZ.js";
-import {
-  checkDangerousPatterns,
-  hasCriticalPattern
-} from "./chunk-CMCYL2JC.js";
 import {
   checkPathSafety,
   checkReadPathSafety,
   containsPathTraversal
 } from "./chunk-NGVOA6ZQ.js";
+import {
+  checkDangerousPatterns,
+  hasCriticalPattern
+} from "./chunk-CMCYL2JC.js";
 import {
   ContextManager,
   agentLoop,
@@ -212,7 +212,7 @@ function createExeOSHooks(config) {
         );
       }
       try {
-        const { listBehaviors } = await import("./behaviors-SKVKPCRW.js");
+        const { listBehaviors } = await import("./behaviors-6HWTCOTR.js");
         const behaviors = await listBehaviors(config.agentId, config.projectName, 12);
         if (behaviors.length > 0) {
           process.stderr.write(
@@ -333,7 +333,7 @@ function createExeOSHooks(config) {
     async onSubagentStop(_reason) {
       try {
         const { getClient } = await import("./lib/database.js");
-        const { sessionScopeFilter } = await import("./task-scope-NLKUVCP5.js");
+        const { sessionScopeFilter } = await import("./task-scope-5OTHET2J.js");
         const client = getClient();
         const ehScope = sessionScopeFilter();
         const tasks = await client.execute({
@@ -373,7 +373,7 @@ function createExeOSHooks(config) {
         setAt: (/* @__PURE__ */ new Date()).toISOString()
       });
       try {
-        const { writeNotification } = await import("./notifications-6FCQCJ4P.js");
+        const { writeNotification } = await import("./notifications-UITENQFG.js");
         await writeNotification({
           agentId: config.agentId,
           agentRole: "employee",
@@ -444,7 +444,7 @@ function createExeOSHooks(config) {
         try {
           const { writeMemory, flushBatch } = await import("./lib/store.js");
           const { getClient } = await import("./lib/database.js");
-          const { sessionScopeFilter: cpScopeFilter } = await import("./task-scope-NLKUVCP5.js");
+          const { sessionScopeFilter: cpScopeFilter } = await import("./task-scope-5OTHET2J.js");
           const client = getClient();
           const cpScope = cpScopeFilter();
           const tasks = await client.execute({

package/dist/{chunk-SO7KTH3Q.js → chunk-JJYL2K7E.js}

@@ -15,7 +15,7 @@ function formatBytes(bytes) {
 var FREE_TIER_BACKUP_DISCLOSURE = [
   "Cloud backup is NOT included on the free plan. Exe OS is local-first:",
   "your Partner and your memories live on this machine and work fully offline.",
-  "Free accounts keep everything locally, and nothing is copied to the cloud.",
+  "Free accounts keep everything locally: none of your memories are copied to the cloud.",
   "Cloud backup comes with a paid plan, or with a seat in an organisation -",
   "and either way it is encrypted under your key, so we cannot read it."
 ].join("\n");

package/dist/{chunk-2BOLFLAU.js → chunk-JKDYZZGD.js}

@@ -3,14 +3,14 @@ import {
   getClient,
   isInitialized,
   loadEmployees
-} from "./chunk-L5JFVK5T.js";
+} from "./chunk-GDZJL5GQ.js";
 import {
   checkLicense,
   isFeatureAllowed,
   proofWithinOfflineTrust,
   readPersonalFreeGrandfatherState,
   resolveClientLimits
-} from "./chunk-EOWJXCYC.js";
+} from "./chunk-TSZ3JCQB.js";
 import {
   PLAN_LIMITS
 } from "./chunk-3R7UDPVR.js";

package/dist/{chunk-VS7V5HNO.js → chunk-JOOWL33C.js}

@@ -4,7 +4,7 @@ import {
   getGitRootAsync,
   isWorktreeDirty,
   isWorktreeDirtyAsync
-} from "./chunk-5ZMNFSHV.js";
+} from "./chunk-H3MFCDKR.js";
 
 // src/lib/worktree-sweep.ts
 import { execFile } from "child_process";

package/dist/{chunk-7KPZQ65I.js → chunk-KAJC6L7D.js}

@@ -8,14 +8,14 @@ import {
   resolveExeSession,
   sendIntercom,
   strictSessionScopeFilter
-} from "./chunk-GM4UEZDE.js";
+} from "./chunk-WEG7URND.js";
 import {
   parseMessage,
   serializeMessage
 } from "./chunk-TDF2XKLK.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-JGBYZTWH.js";
+} from "./chunk-D6D7LCMR.js";
 import {
   isValidSessionScope
 } from "./chunk-BTSWFMEH.js";
@@ -24,7 +24,7 @@ import {
 } from "./chunk-CVYC6DUW.js";
 import {
   getClient
-} from "./chunk-L5JFVK5T.js";
+} from "./chunk-GDZJL5GQ.js";
 
 // src/lib/messaging.ts
 import crypto from "crypto";

package/dist/{chunk-KN5GAVCG.js → chunk-KBJHOC6E.js}

@@ -1,10 +1,10 @@
 import {
   registerScopedQueryChokepoint,
   scopedQueryChokepointStatus
-} from "./chunk-XQ7BIVLI.js";
+} from "./chunk-SOKGCUCF.js";
 import {
   getClient
-} from "./chunk-L5JFVK5T.js";
+} from "./chunk-GDZJL5GQ.js";
 
 // src/lib/org-scoped-rows.ts
 var SCOPED_QUERY_MAX_LIMIT = 200;

package/dist/{chunk-KEDZRQI3.js → chunk-KKJ3BLYL.js}

@@ -4,14 +4,14 @@ import {
 } from "./chunk-ZD5TZZXU.js";
 import {
   vectorToSqlLiteral
-} from "./chunk-LSHUX7P4.js";
+} from "./chunk-D4RU4Y57.js";
 import {
   blobToVector
 } from "./chunk-OTVEIJUQ.js";
 import {
   getClient,
   sanitizeBehaviorContent
-} from "./chunk-L5JFVK5T.js";
+} from "./chunk-GDZJL5GQ.js";
 
 // src/lib/behaviors.ts
 import crypto from "crypto";