@askexenow/exe-os 0.9.63 → 0.9.65

package/dist/bin/exe-link.js

@@ -3621,31 +3621,43 @@ function logError(msg) {
   } catch {
   }
 }
+function isTruthyEnv(value) {
+  return /^(1|true|yes|on)$/i.test(value ?? "");
+}
 function loadPgClient() {
   if (_pgFailed) return null;
-  const postgresUrl = process.env.DATABASE_URL;
   const configPath = path10.join(EXE_AI_DIR, "config.json");
   let cloudPostgresUrl;
+  let configEnabled = false;
   try {
     if (existsSync10(configPath)) {
       const cfg = JSON.parse(readFileSync7(configPath, "utf8"));
       cloudPostgresUrl = cfg.cloud?.postgresUrl;
-      if (cfg.cloud?.syncToPostgres === false) {
-        _pgFailed = true;
-        return null;
-      }
+      configEnabled = cfg.cloud?.syncToPostgres === true;
     }
   } catch {
   }
-  const url = postgresUrl || cloudPostgresUrl;
+  const envEnabled = isTruthyEnv(process.env.EXE_CLOUD_SYNC_TO_POSTGRES);
+  if (!envEnabled && !configEnabled) {
+    return null;
+  }
+  const url = process.env.DATABASE_URL || cloudPostgresUrl;
   if (!url) {
     _pgFailed = true;
     return null;
   }
   if (!_pgPromise) {
     _pgPromise = (async () => {
+      if (!process.env.DATABASE_URL) process.env.DATABASE_URL = url;
       const { createRequire: createRequire3 } = await import("module");
       const { pathToFileURL: pathToFileURL3 } = await import("url");
+      const explicitPath = process.env.EXE_OS_PRISMA_CLIENT_PATH;
+      if (explicitPath) {
+        const mod2 = await import(pathToFileURL3(explicitPath).href);
+        const Ctor2 = mod2.PrismaClient ?? mod2.default?.PrismaClient;
+        if (!Ctor2) throw new Error(`No PrismaClient at ${explicitPath}`);
+        return new Ctor2();
+      }
       const exeDbRoot = process.env.EXE_DB_ROOT ?? path10.join(homedir2(), "exe-db");
       const req = createRequire3(path10.join(exeDbRoot, "package.json"));
       const entry = req.resolve("@prisma/client");
@@ -3842,6 +3854,15 @@ async function cloudSync(config) {
   } catch {
     throw new Error("[cloud-sync] Database not initialized. Call initStore() before cloudSync().");
   }
+  try {
+    const relink = await client.execute("SELECT value FROM sync_meta WHERE key = 'cloud_relink_required' LIMIT 1");
+    if (String(relink.rows[0]?.value ?? "") === "1") {
+      throw new Error("[cloud-sync] Paused after key rotation. Re-link/reupload cloud sync with the new recovery phrase before syncing.");
+    }
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    if (msg.includes("Paused after key rotation")) throw err;
+  }
   try {
     const { getRawClient: getRawClient2 } = await Promise.resolve().then(() => (init_database(), database_exports));
     await getRawClient2().execute("PRAGMA wal_checkpoint(PASSIVE)");

package/dist/bin/exe-new-employee.js

@@ -1264,7 +1264,7 @@ function commandHasAnyMarker(command, markers) {
 function isLegacySplitPostToolCommand(command) {
   return commandHasAnyMarker(command, LEGACY_SPLIT_POST_TOOL_HOOK_MARKERS);
 }
-var EXE_HOOKS, EXE_HOOK_MANIFEST, LEGACY_SPLIT_POST_TOOL_HOOK_MARKERS;
+var EXE_HOOKS, LEGACY_SPLIT_POST_TOOL_HOOK_MARKERS;
 var init_runtime_hook_manifest = __esm({
   "src/adapters/runtime-hook-manifest.ts"() {
     "use strict";
@@ -1282,116 +1282,6 @@ var init_runtime_hook_manifest = __esm({
       notification: "dist/hooks/notification.js",
       instructionsLoaded: "dist/hooks/instructions-loaded.js"
     };
-    EXE_HOOK_MANIFEST = [
-      {
-        key: "postToolCombined",
-        event: "PostToolUse",
-        commandMarker: EXE_HOOKS.postToolCombined,
-        owner: "exe-os",
-        purpose: "Single PostToolUse entrypoint for ingestion, error recall, summaries, and bug detection.",
-        runtimes: ["claude", "codex", "opencode"],
-        checkpointRole: "none"
-      },
-      {
-        key: "sessionStart",
-        event: "SessionStart",
-        commandMarker: EXE_HOOKS.sessionStart,
-        owner: "exe-os",
-        purpose: "Loads agent identity, procedures, and boot context.",
-        runtimes: ["claude", "codex", "opencode"],
-        checkpointRole: "none"
-      },
-      {
-        key: "promptSubmit",
-        event: "UserPromptSubmit",
-        commandMarker: EXE_HOOKS.promptSubmit,
-        owner: "exe-os",
-        purpose: "Injects current tasks, pending reviews, and local context before each prompt.",
-        runtimes: ["claude", "codex", "opencode"],
-        checkpointRole: "none"
-      },
-      {
-        key: "heartbeat",
-        event: "UserPromptSubmit",
-        commandMarker: EXE_HOOKS.heartbeat,
-        owner: "exe-os",
-        purpose: "Lightweight heartbeat/status sidecar for Claude Code sessions.",
-        runtimes: ["claude"],
-        checkpointRole: "none"
-      },
-      {
-        key: "stop",
-        event: "Stop",
-        commandMarker: EXE_HOOKS.stop,
-        owner: "exe-os",
-        purpose: "Finalizes task state, capacity signals, and emergency checkpointing.",
-        runtimes: ["claude", "codex", "opencode"],
-        checkpointRole: "capacity_checkpoint"
-      },
-      {
-        key: "preToolUse",
-        event: "PreToolUse",
-        commandMarker: EXE_HOOKS.preToolUse,
-        owner: "exe-os",
-        purpose: "Preflight guardrails before shell/tool execution.",
-        runtimes: ["claude", "codex", "opencode"],
-        checkpointRole: "none"
-      },
-      {
-        key: "subagentStop",
-        event: "SubagentStop",
-        commandMarker: EXE_HOOKS.subagentStop,
-        owner: "exe-os",
-        purpose: "Captures subagent completion context.",
-        runtimes: ["claude"],
-        checkpointRole: "none"
-      },
-      {
-        key: "preCompact",
-        event: "PreCompact",
-        commandMarker: EXE_HOOKS.preCompact,
-        owner: "exe-os",
-        purpose: "Writes active-task snapshot and compaction recovery context.",
-        runtimes: ["claude"],
-        checkpointRole: "recovery_context"
-      },
-      {
-        key: "postCompact",
-        event: "PostCompact",
-        commandMarker: EXE_HOOKS.postCompact,
-        owner: "exe-os",
-        purpose: "Rehydrates recovery context after compaction.",
-        runtimes: ["claude"],
-        checkpointRole: "recovery_context"
-      },
-      {
-        key: "sessionEnd",
-        event: "SessionEnd",
-        commandMarker: EXE_HOOKS.sessionEnd,
-        owner: "exe-os",
-        purpose: "Stores session-end checkpoint and triages orphaned in-progress tasks.",
-        runtimes: ["claude"],
-        checkpointRole: "session_summary"
-      },
-      {
-        key: "notification",
-        event: "Notification",
-        commandMarker: EXE_HOOKS.notification,
-        owner: "exe-os",
-        purpose: "Captures runtime notifications and nudges.",
-        runtimes: ["claude"],
-        checkpointRole: "none"
-      },
-      {
-        key: "instructionsLoaded",
-        event: "InstructionsLoaded",
-        commandMarker: EXE_HOOKS.instructionsLoaded,
-        owner: "exe-os",
-        purpose: "Applies runtime instruction post-processing.",
-        runtimes: ["claude"],
-        checkpointRole: "none"
-      }
-    ];
     LEGACY_SPLIT_POST_TOOL_HOOK_MARKERS = [
       "dist/hooks/ingest.js",
       "dist/hooks/error-recall.js",

package/dist/bin/exe-start-codex.js

@@ -3948,7 +3948,7 @@ function commandHasAnyMarker(command, markers) {
 function isLegacySplitPostToolCommand(command) {
   return commandHasAnyMarker(command, LEGACY_SPLIT_POST_TOOL_HOOK_MARKERS);
 }
-var EXE_HOOKS, EXE_HOOK_MANIFEST, LEGACY_SPLIT_POST_TOOL_HOOK_MARKERS;
+var EXE_HOOKS, LEGACY_SPLIT_POST_TOOL_HOOK_MARKERS;
 var init_runtime_hook_manifest = __esm({
   "src/adapters/runtime-hook-manifest.ts"() {
     "use strict";
@@ -3966,116 +3966,6 @@ var init_runtime_hook_manifest = __esm({
       notification: "dist/hooks/notification.js",
       instructionsLoaded: "dist/hooks/instructions-loaded.js"
     };
-    EXE_HOOK_MANIFEST = [
-      {
-        key: "postToolCombined",
-        event: "PostToolUse",
-        commandMarker: EXE_HOOKS.postToolCombined,
-        owner: "exe-os",
-        purpose: "Single PostToolUse entrypoint for ingestion, error recall, summaries, and bug detection.",
-        runtimes: ["claude", "codex", "opencode"],
-        checkpointRole: "none"
-      },
-      {
-        key: "sessionStart",
-        event: "SessionStart",
-        commandMarker: EXE_HOOKS.sessionStart,
-        owner: "exe-os",
-        purpose: "Loads agent identity, procedures, and boot context.",
-        runtimes: ["claude", "codex", "opencode"],
-        checkpointRole: "none"
-      },
-      {
-        key: "promptSubmit",
-        event: "UserPromptSubmit",
-        commandMarker: EXE_HOOKS.promptSubmit,
-        owner: "exe-os",
-        purpose: "Injects current tasks, pending reviews, and local context before each prompt.",
-        runtimes: ["claude", "codex", "opencode"],
-        checkpointRole: "none"
-      },
-      {
-        key: "heartbeat",
-        event: "UserPromptSubmit",
-        commandMarker: EXE_HOOKS.heartbeat,
-        owner: "exe-os",
-        purpose: "Lightweight heartbeat/status sidecar for Claude Code sessions.",
-        runtimes: ["claude"],
-        checkpointRole: "none"
-      },
-      {
-        key: "stop",
-        event: "Stop",
-        commandMarker: EXE_HOOKS.stop,
-        owner: "exe-os",
-        purpose: "Finalizes task state, capacity signals, and emergency checkpointing.",
-        runtimes: ["claude", "codex", "opencode"],
-        checkpointRole: "capacity_checkpoint"
-      },
-      {
-        key: "preToolUse",
-        event: "PreToolUse",
-        commandMarker: EXE_HOOKS.preToolUse,
-        owner: "exe-os",
-        purpose: "Preflight guardrails before shell/tool execution.",
-        runtimes: ["claude", "codex", "opencode"],
-        checkpointRole: "none"
-      },
-      {
-        key: "subagentStop",
-        event: "SubagentStop",
-        commandMarker: EXE_HOOKS.subagentStop,
-        owner: "exe-os",
-        purpose: "Captures subagent completion context.",
-        runtimes: ["claude"],
-        checkpointRole: "none"
-      },
-      {
-        key: "preCompact",
-        event: "PreCompact",
-        commandMarker: EXE_HOOKS.preCompact,
-        owner: "exe-os",
-        purpose: "Writes active-task snapshot and compaction recovery context.",
-        runtimes: ["claude"],
-        checkpointRole: "recovery_context"
-      },
-      {
-        key: "postCompact",
-        event: "PostCompact",
-        commandMarker: EXE_HOOKS.postCompact,
-        owner: "exe-os",
-        purpose: "Rehydrates recovery context after compaction.",
-        runtimes: ["claude"],
-        checkpointRole: "recovery_context"
-      },
-      {
-        key: "sessionEnd",
-        event: "SessionEnd",
-        commandMarker: EXE_HOOKS.sessionEnd,
-        owner: "exe-os",
-        purpose: "Stores session-end checkpoint and triages orphaned in-progress tasks.",
-        runtimes: ["claude"],
-        checkpointRole: "session_summary"
-      },
-      {
-        key: "notification",
-        event: "Notification",
-        commandMarker: EXE_HOOKS.notification,
-        owner: "exe-os",
-        purpose: "Captures runtime notifications and nudges.",
-        runtimes: ["claude"],
-        checkpointRole: "none"
-      },
-      {
-        key: "instructionsLoaded",
-        event: "InstructionsLoaded",
-        commandMarker: EXE_HOOKS.instructionsLoaded,
-        owner: "exe-os",
-        purpose: "Applies runtime instruction post-processing.",
-        runtimes: ["claude"],
-        checkpointRole: "none"
-      }
-    ];
     LEGACY_SPLIT_POST_TOOL_HOOK_MARKERS = [
       "dist/hooks/ingest.js",
       "dist/hooks/error-recall.js",

package/dist/bin/exe-start-opencode.js

@@ -3934,7 +3934,7 @@ var init_preferences = __esm({
 function textHasLegacySplitPostToolHook(text) {
   return [EXE_HOOK_FILES.ingest, EXE_HOOK_FILES.errorRecall, EXE_HOOK_FILES.ingestWorker].some((file) => text.includes(file));
 }
-var EXE_HOOK_FILES, EXE_HOOKS, EXE_HOOK_MANIFEST;
+var EXE_HOOK_FILES;
 var init_runtime_hook_manifest = __esm({
   "src/adapters/runtime-hook-manifest.ts"() {
     "use strict";
@@ -3944,130 +3944,6 @@ var init_runtime_hook_manifest = __esm({
       errorRecall: "error-recall.js",
       ingestWorker: "ingest-worker.js"
     };
-    EXE_HOOKS = {
-      postToolCombined: "dist/hooks/post-tool-combined.js",
-      sessionStart: "dist/hooks/session-start.js",
-      promptSubmit: "dist/hooks/prompt-submit.js",
-      heartbeat: "dist/hooks/exe-heartbeat-hook.js",
-      stop: "dist/hooks/stop.js",
-      preToolUse: "dist/hooks/pre-tool-use.js",
-      subagentStop: "dist/hooks/subagent-stop.js",
-      preCompact: "dist/hooks/pre-compact.js",
-      postCompact: "dist/hooks/post-compact.js",
-      sessionEnd: "dist/hooks/session-end.js",
-      notification: "dist/hooks/notification.js",
-      instructionsLoaded: "dist/hooks/instructions-loaded.js"
-    };
-    EXE_HOOK_MANIFEST = [
-      {
-        key: "postToolCombined",
-        event: "PostToolUse",
-        commandMarker: EXE_HOOKS.postToolCombined,
-        owner: "exe-os",
-        purpose: "Single PostToolUse entrypoint for ingestion, error recall, summaries, and bug detection.",
-        runtimes: ["claude", "codex", "opencode"],
-        checkpointRole: "none"
-      },
-      {
-        key: "sessionStart",
-        event: "SessionStart",
-        commandMarker: EXE_HOOKS.sessionStart,
-        owner: "exe-os",
-        purpose: "Loads agent identity, procedures, and boot context.",
-        runtimes: ["claude", "codex", "opencode"],
-        checkpointRole: "none"
-      },
-      {
-        key: "promptSubmit",
-        event: "UserPromptSubmit",
-        commandMarker: EXE_HOOKS.promptSubmit,
-        owner: "exe-os",
-        purpose: "Injects current tasks, pending reviews, and local context before each prompt.",
-        runtimes: ["claude", "codex", "opencode"],
-        checkpointRole: "none"
-      },
-      {
-        key: "heartbeat",
-        event: "UserPromptSubmit",
-        commandMarker: EXE_HOOKS.heartbeat,
-        owner: "exe-os",
-        purpose: "Lightweight heartbeat/status sidecar for Claude Code sessions.",
-        runtimes: ["claude"],
-        checkpointRole: "none"
-      },
-      {
-        key: "stop",
-        event: "Stop",
-        commandMarker: EXE_HOOKS.stop,
-        owner: "exe-os",
-        purpose: "Finalizes task state, capacity signals, and emergency checkpointing.",
-        runtimes: ["claude", "codex", "opencode"],
-        checkpointRole: "capacity_checkpoint"
-      },
-      {
-        key: "preToolUse",
-        event: "PreToolUse",
-        commandMarker: EXE_HOOKS.preToolUse,
-        owner: "exe-os",
-        purpose: "Preflight guardrails before shell/tool execution.",
-        runtimes: ["claude", "codex", "opencode"],
-        checkpointRole: "none"
-      },
-      {
-        key: "subagentStop",
-        event: "SubagentStop",
-        commandMarker: EXE_HOOKS.subagentStop,
-        owner: "exe-os",
-        purpose: "Captures subagent completion context.",
-        runtimes: ["claude"],
-        checkpointRole: "none"
-      },
-      {
-        key: "preCompact",
-        event: "PreCompact",
-        commandMarker: EXE_HOOKS.preCompact,
-        owner: "exe-os",
-        purpose: "Writes active-task snapshot and compaction recovery context.",
-        runtimes: ["claude"],
-        checkpointRole: "recovery_context"
-      },
-      {
-        key: "postCompact",
-        event: "PostCompact",
-        commandMarker: EXE_HOOKS.postCompact,
-        owner: "exe-os",
-        purpose: "Rehydrates recovery context after compaction.",
-        runtimes: ["claude"],
-        checkpointRole: "recovery_context"
-      },
-      {
-        key: "sessionEnd",
-        event: "SessionEnd",
-        commandMarker: EXE_HOOKS.sessionEnd,
-        owner: "exe-os",
-        purpose: "Stores session-end checkpoint and triages orphaned in-progress tasks.",
-        runtimes: ["claude"],
-        checkpointRole: "session_summary"
-      },
-      {
-        key: "notification",
-        event: "Notification",
-        commandMarker: EXE_HOOKS.notification,
-        owner: "exe-os",
-        purpose: "Captures runtime notifications and nudges.",
-        runtimes: ["claude"],
-        checkpointRole: "none"
-      },
-      {
-        key: "instructionsLoaded",
-        event: "InstructionsLoaded",
-        commandMarker: EXE_HOOKS.instructionsLoaded,
-        owner: "exe-os",
-        purpose: "Applies runtime instruction post-processing.",
-        runtimes: ["claude"],
-        checkpointRole: "none"
-      }
-    ];
   }
 });
 

package/dist/bin/install.js

@@ -615,7 +615,7 @@ function commandHasAnyMarker(command, markers) {
 function isLegacySplitPostToolCommand(command) {
   return commandHasAnyMarker(command, LEGACY_SPLIT_POST_TOOL_HOOK_MARKERS);
 }
-var EXE_HOOKS, EXE_HOOK_MANIFEST, LEGACY_SPLIT_POST_TOOL_HOOK_MARKERS;
+var EXE_HOOKS, LEGACY_SPLIT_POST_TOOL_HOOK_MARKERS;
 var init_runtime_hook_manifest = __esm({
   "src/adapters/runtime-hook-manifest.ts"() {
     "use strict";
@@ -633,116 +633,6 @@ var init_runtime_hook_manifest = __esm({
       notification: "dist/hooks/notification.js",
       instructionsLoaded: "dist/hooks/instructions-loaded.js"
     };
-    EXE_HOOK_MANIFEST = [
-      {
-        key: "postToolCombined",
-        event: "PostToolUse",
-        commandMarker: EXE_HOOKS.postToolCombined,
-        owner: "exe-os",
-        purpose: "Single PostToolUse entrypoint for ingestion, error recall, summaries, and bug detection.",
-        runtimes: ["claude", "codex", "opencode"],
-        checkpointRole: "none"
-      },
-      {
-        key: "sessionStart",
-        event: "SessionStart",
-        commandMarker: EXE_HOOKS.sessionStart,
-        owner: "exe-os",
-        purpose: "Loads agent identity, procedures, and boot context.",
-        runtimes: ["claude", "codex", "opencode"],
-        checkpointRole: "none"
-      },
-      {
-        key: "promptSubmit",
-        event: "UserPromptSubmit",
-        commandMarker: EXE_HOOKS.promptSubmit,
-        owner: "exe-os",
-        purpose: "Injects current tasks, pending reviews, and local context before each prompt.",
-        runtimes: ["claude", "codex", "opencode"],
-        checkpointRole: "none"
-      },
-      {
-        key: "heartbeat",
-        event: "UserPromptSubmit",
-        commandMarker: EXE_HOOKS.heartbeat,
-        owner: "exe-os",
-        purpose: "Lightweight heartbeat/status sidecar for Claude Code sessions.",
-        runtimes: ["claude"],
-        checkpointRole: "none"
-      },
-      {
-        key: "stop",
-        event: "Stop",
-        commandMarker: EXE_HOOKS.stop,
-        owner: "exe-os",
-        purpose: "Finalizes task state, capacity signals, and emergency checkpointing.",
-        runtimes: ["claude", "codex", "opencode"],
-        checkpointRole: "capacity_checkpoint"
-      },
-      {
-        key: "preToolUse",
-        event: "PreToolUse",
-        commandMarker: EXE_HOOKS.preToolUse,
-        owner: "exe-os",
-        purpose: "Preflight guardrails before shell/tool execution.",
-        runtimes: ["claude", "codex", "opencode"],
-        checkpointRole: "none"
-      },
-      {
-        key: "subagentStop",
-        event: "SubagentStop",
-        commandMarker: EXE_HOOKS.subagentStop,
-        owner: "exe-os",
-        purpose: "Captures subagent completion context.",
-        runtimes: ["claude"],
-        checkpointRole: "none"
-      },
-      {
-        key: "preCompact",
-        event: "PreCompact",
-        commandMarker: EXE_HOOKS.preCompact,
-        owner: "exe-os",
-        purpose: "Writes active-task snapshot and compaction recovery context.",
-        runtimes: ["claude"],
-        checkpointRole: "recovery_context"
-      },
-      {
-        key: "postCompact",
-        event: "PostCompact",
-        commandMarker: EXE_HOOKS.postCompact,
-        owner: "exe-os",
-        purpose: "Rehydrates recovery context after compaction.",
-        runtimes: ["claude"],
-        checkpointRole: "recovery_context"
-      },
-      {
-        key: "sessionEnd",
-        event: "SessionEnd",
-        commandMarker: EXE_HOOKS.sessionEnd,
-        owner: "exe-os",
-        purpose: "Stores session-end checkpoint and triages orphaned in-progress tasks.",
-        runtimes: ["claude"],
-        checkpointRole: "session_summary"
-      },
-      {
-        key: "notification",
-        event: "Notification",
-        commandMarker: EXE_HOOKS.notification,
-        owner: "exe-os",
-        purpose: "Captures runtime notifications and nudges.",
-        runtimes: ["claude"],
-        checkpointRole: "none"
-      },
-      {
-        key: "instructionsLoaded",
-        event: "InstructionsLoaded",
-        commandMarker: EXE_HOOKS.instructionsLoaded,
-        owner: "exe-os",
-        purpose: "Applies runtime instruction post-processing.",
-        runtimes: ["claude"],
-        checkpointRole: "none"
-      }
-    ];
     LEGACY_SPLIT_POST_TOOL_HOOK_MARKERS = [
       "dist/hooks/ingest.js",
       "dist/hooks/error-recall.js",

package/dist/bin/setup.js

@@ -4544,31 +4544,43 @@ function logError(msg) {
   } catch {
   }
 }
+function isTruthyEnv(value) {
+  return /^(1|true|yes|on)$/i.test(value ?? "");
+}
 function loadPgClient() {
   if (_pgFailed) return null;
-  const postgresUrl = process.env.DATABASE_URL;
   const configPath = path12.join(EXE_AI_DIR, "config.json");
   let cloudPostgresUrl;
+  let configEnabled = false;
   try {
     if (existsSync12(configPath)) {
       const cfg = JSON.parse(readFileSync8(configPath, "utf8"));
       cloudPostgresUrl = cfg.cloud?.postgresUrl;
-      if (cfg.cloud?.syncToPostgres === false) {
-        _pgFailed = true;
-        return null;
-      }
+      configEnabled = cfg.cloud?.syncToPostgres === true;
     }
   } catch {
   }
-  const url = postgresUrl || cloudPostgresUrl;
+  const envEnabled = isTruthyEnv(process.env.EXE_CLOUD_SYNC_TO_POSTGRES);
+  if (!envEnabled && !configEnabled) {
+    return null;
+  }
+  const url = process.env.DATABASE_URL || cloudPostgresUrl;
   if (!url) {
     _pgFailed = true;
     return null;
   }
   if (!_pgPromise) {
     _pgPromise = (async () => {
+      if (!process.env.DATABASE_URL) process.env.DATABASE_URL = url;
       const { createRequire: createRequire3 } = await import("module");
       const { pathToFileURL: pathToFileURL3 } = await import("url");
+      const explicitPath = process.env.EXE_OS_PRISMA_CLIENT_PATH;
+      if (explicitPath) {
+        const mod2 = await import(pathToFileURL3(explicitPath).href);
+        const Ctor2 = mod2.PrismaClient ?? mod2.default?.PrismaClient;
+        if (!Ctor2) throw new Error(`No PrismaClient at ${explicitPath}`);
+        return new Ctor2();
+      }
       const exeDbRoot = process.env.EXE_DB_ROOT ?? path12.join(homedir2(), "exe-db");
       const req = createRequire3(path12.join(exeDbRoot, "package.json"));
       const entry = req.resolve("@prisma/client");
@@ -4765,6 +4777,15 @@ async function cloudSync(config) {
   } catch {
     throw new Error("[cloud-sync] Database not initialized. Call initStore() before cloudSync().");
   }
+  try {
+    const relink = await client.execute("SELECT value FROM sync_meta WHERE key = 'cloud_relink_required' LIMIT 1");
+    if (String(relink.rows[0]?.value ?? "") === "1") {
+      throw new Error("[cloud-sync] Paused after key rotation. Re-link/reupload cloud sync with the new recovery phrase before syncing.");
+    }
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    if (msg.includes("Paused after key rotation")) throw err;
+  }
   try {
     const { getRawClient: getRawClient2 } = await Promise.resolve().then(() => (init_database(), database_exports));
     await getRawClient2().execute("PRAGMA wal_checkpoint(PASSIVE)");