@askexenow/exe-os 0.9.68 → 0.9.69

package/dist/lib/exe-daemon.js

@@ -3655,6 +3655,170 @@ var init_memory_write_governor = __esm({
   }
 });
 
+// src/lib/mcp-transport-health.ts
+import { appendFileSync, closeSync as closeSync2, existsSync as existsSync8, mkdirSync as mkdirSync2, openSync as openSync2, readFileSync as readFileSync7, readSync, statSync as statSync2, writeFileSync as writeFileSync5 } from "fs";
+import path8 from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
+function parsePositiveInt(value, fallback) {
+  if (!value) return fallback;
+  const parsed = Number.parseInt(value, 10);
+  return Number.isFinite(parsed) && parsed > 0 ? parsed : fallback;
+}
+function readTailText(filePath, maxBytes) {
+  const stats = statSync2(filePath);
+  if (stats.size <= maxBytes) return readFileSync7(filePath, "utf8");
+  const fd = openSync2(filePath, "r");
+  try {
+    const buffer = Buffer.allocUnsafe(maxBytes);
+    readSync(fd, buffer, 0, maxBytes, stats.size - maxBytes);
+    const text3 = buffer.toString("utf8");
+    const firstNewline = text3.indexOf("\n");
+    return firstNewline >= 0 ? text3.slice(firstNewline + 1) : text3;
+  } finally {
+    closeSync2(fd);
+  }
+}
+function rotateMcpHttpEventLogIfNeeded() {
+  if (!existsSync8(MCP_HTTP_EVENTS_PATH)) return;
+  const stats = statSync2(MCP_HTTP_EVENTS_PATH);
+  if (stats.size <= EVENT_MAX_BYTES) return;
+  const keepBytes = Math.min(EVENT_READ_BYTES, EVENT_MAX_BYTES);
+  const tail = readTailText(MCP_HTTP_EVENTS_PATH, keepBytes);
+  writeFileSync5(MCP_HTTP_EVENTS_PATH, tail, "utf8");
+}
+function readPackageVersion() {
+  let dir = path8.dirname(fileURLToPath2(import.meta.url));
+  const { root } = path8.parse(dir);
+  while (dir !== root) {
+    const pkgPath = path8.join(dir, "package.json");
+    if (existsSync8(pkgPath)) {
+      try {
+        const parsed = JSON.parse(readFileSync7(pkgPath, "utf8"));
+        return parsed.version ?? "unknown";
+      } catch {
+        return "unknown";
+      }
+    }
+    dir = path8.dirname(dir);
+  }
+  return "unknown";
+}
+function inferMcpRuntime(input) {
+  const text3 = [input.runtimeHeader, input.userAgent, input.agentId, input.clientName].filter(Boolean).join(" ").toLowerCase();
+  if (text3.includes("codex")) return "Codex";
+  if (text3.includes("claude")) return "Claude";
+  if (text3.includes("opencode") || text3.includes("open-code")) return "OpenCode";
+  return "Unknown";
+}
+function getMcpToolFamily(toolName) {
+  if (!toolName) return "unknown";
+  if (/task|employee|review|checkpoint|resume/i.test(toolName)) return "task";
+  if (/memory|consolidat|document|search_everything|get_session_context/i.test(toolName)) return "memory";
+  if (/config|daemon|worker|auto_wake|license|trigger|starter|orchestration|cloud_sync|backup/i.test(toolName)) return "config";
+  if (/message|whatsapp|conversation|gateway/i.test(toolName)) return "gateway";
+  if (/wiki|crm|raw_data|person|people/i.test(toolName)) return "company-data";
+  if (/graph|entity|relationship|trajectory/i.test(toolName)) return "graph";
+  if (/identity|behavior|decision|procedure/i.test(toolName)) return "cognition";
+  if (/ping|health/i.test(toolName)) return "health";
+  return "other";
+}
+function parseMcpHttpEventLines(raw, limit = 200) {
+  const lines = raw.trim().split("\n").filter(Boolean).slice(-limit);
+  const events = [];
+  for (const line of lines) {
+    try {
+      events.push(JSON.parse(line));
+    } catch {
+    }
+  }
+  return events;
+}
+function readMcpHttpEvents(limit = 200) {
+  if (!existsSync8(MCP_HTTP_EVENTS_PATH)) return [];
+  const raw = readTailText(MCP_HTTP_EVENTS_PATH, EVENT_READ_BYTES);
+  return parseMcpHttpEventLines(raw, limit);
+}
+function summarizeMcpTransport(events = readMcpHttpEvents()) {
+  const lastServerStartIndex = events.map((event) => event.message).lastIndexOf("server_started");
+  const scopedEvents = lastServerStartIndex >= 0 ? events.slice(lastServerStartIndex) : events;
+  const activeSessionEvent = [...scopedEvents].reverse().find((event) => typeof event.activeSessions === "number");
+  const successfulToolCalls = scopedEvents.filter((event) => event.message === "tool_call_ok");
+  const lastSuccessfulToolCall = successfulToolCalls.at(-1) ?? null;
+  const summary = {
+    generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    version: readPackageVersion(),
+    scope: "local",
+    privacy: "metadata_only",
+    eventLogPath: MCP_HTTP_EVENTS_PATH,
+    activeSessions: activeSessionEvent?.activeSessions ?? null,
+    sessionsCreated: scopedEvents.filter((event) => event.message === "session_initialized").length,
+    sessionsClosed: scopedEvents.filter((event) => event.message === "session_closed").length,
+    missingSessionErrors: scopedEvents.filter((event) => event.message?.includes("missing MCP session")).length,
+    staleSessionErrors: scopedEvents.filter((event) => event.message?.includes("stale or unknown")).length,
+    transportErrors: scopedEvents.filter((event) => event.level === "warn" || event.level === "error").length,
+    lastSuccessfulHandshake: scopedEvents.filter((event) => event.message === "session_initialized").at(-1)?.timestamp ?? null,
+    lastSuccessfulToolCall: lastSuccessfulToolCall?.timestamp ?? null,
+    lastSuccessfulToolCallByRuntime: {},
+    lastSuccessfulToolCallByAgent: {},
+    lastSuccessfulToolCallByFamily: {},
+    activeSessionsByRuntime: {},
+    recentWarnings: scopedEvents.filter((event) => event.level === "warn" || event.level === "error").slice(-10),
+    remediation: [
+      "If MCP tools fail with missing/stale session, reconnect the MCP client (/mcp or restart the runtime).",
+      "Do not access the database directly; MCP is the only data interface.",
+      "Check get_daemon_health or exe-healthcheck for daemon/MCP endpoint status before retrying work."
+    ]
+  };
+  const createdBySession = /* @__PURE__ */ new Map();
+  for (const event of scopedEvents) {
+    if (event.message === "session_initialized" && event.sessionId) createdBySession.set(event.sessionId, event);
+    if ((event.message === "session_closed" || event.message === "session_expired") && event.sessionId) {
+      createdBySession.delete(event.sessionId);
+    }
+  }
+  for (const event of createdBySession.values()) {
+    const runtime = event.runtime ?? "Unknown";
+    summary.activeSessionsByRuntime[runtime] = (summary.activeSessionsByRuntime[runtime] ?? 0) + 1;
+  }
+  for (const event of successfulToolCalls) {
+    if (event.runtime) summary.lastSuccessfulToolCallByRuntime[event.runtime] = event.timestamp ?? "";
+    if (event.agentId) summary.lastSuccessfulToolCallByAgent[event.agentId] = event.timestamp ?? "";
+    if (event.toolFamily) summary.lastSuccessfulToolCallByFamily[event.toolFamily] = event.timestamp ?? "";
+  }
+  return summary;
+}
+function writeMcpTransportSummary(events) {
+  try {
+    mkdirSync2(MCP_MONITOR_DIR, { recursive: true });
+    writeFileSync5(MCP_TRANSPORT_SUMMARY_PATH, JSON.stringify(summarizeMcpTransport(events), null, 2) + "\n");
+  } catch {
+  }
+}
+function recordMcpHttpEvent(event) {
+  try {
+    mkdirSync2(EXE_AI_DIR, { recursive: true });
+    const enriched = { timestamp: (/* @__PURE__ */ new Date()).toISOString(), ...event };
+    appendFileSync(MCP_HTTP_EVENTS_PATH, JSON.stringify(enriched) + "\n");
+    rotateMcpHttpEventLogIfNeeded();
+    writeMcpTransportSummary(readMcpHttpEvents());
+  } catch {
+  }
+}
+var MCP_HTTP_EVENTS_PATH, MCP_MONITOR_DIR, MCP_TRANSPORT_SUMMARY_PATH, DEFAULT_EVENT_READ_BYTES, DEFAULT_EVENT_MAX_BYTES, EVENT_READ_BYTES, EVENT_MAX_BYTES;
+var init_mcp_transport_health = __esm({
+  "src/lib/mcp-transport-health.ts"() {
+    "use strict";
+    init_config();
+    MCP_HTTP_EVENTS_PATH = path8.join(EXE_AI_DIR, "mcp-http-events.jsonl");
+    MCP_MONITOR_DIR = path8.join(EXE_AI_DIR, "monitor");
+    MCP_TRANSPORT_SUMMARY_PATH = path8.join(MCP_MONITOR_DIR, "mcp-transport-summary.json");
+    DEFAULT_EVENT_READ_BYTES = 256 * 1024;
+    DEFAULT_EVENT_MAX_BYTES = 1024 * 1024;
+    EVENT_READ_BYTES = parsePositiveInt(process.env.EXE_MCP_HTTP_EVENT_READ_BYTES, DEFAULT_EVENT_READ_BYTES);
+    EVENT_MAX_BYTES = parsePositiveInt(process.env.EXE_MCP_HTTP_EVENT_MAX_BYTES, DEFAULT_EVENT_MAX_BYTES);
+  }
+});
+
 // src/lib/agentic-ontology.ts
 var agentic_ontology_exports = {};
 __export(agentic_ontology_exports, {
@@ -3936,8 +4100,8 @@ __export(projection_worker_exports, {
   stopProjectionWorker: () => stopProjectionWorker
 });
 import os5 from "os";
-import path8 from "path";
-import { existsSync as existsSync8 } from "fs";
+import path9 from "path";
+import { existsSync as existsSync9 } from "fs";
 import { createRequire as createRequire2 } from "module";
 import { pathToFileURL as pathToFileURL2 } from "url";
 function loadPrisma() {
@@ -3950,9 +4114,9 @@ function loadPrisma() {
         if (!Ctor) throw new Error(`No PrismaClient at ${explicitPath}`);
         return new Ctor();
       }
-      const exeDbRoot = process.env.EXE_DB_ROOT ?? path8.join(os5.homedir(), "exe-db");
-      const packagePath = path8.join(exeDbRoot, "package.json");
-      if (existsSync8(packagePath)) {
+      const exeDbRoot = process.env.EXE_DB_ROOT ?? path9.join(os5.homedir(), "exe-db");
+      const packagePath = path9.join(exeDbRoot, "package.json");
+      if (existsSync9(packagePath)) {
         const req = createRequire2(packagePath);
         const entry = req.resolve("@prisma/client");
         const mod = await import(pathToFileURL2(entry).href);
@@ -4386,8 +4550,8 @@ async function shouldStartProjectionWorker() {
   if (!process.env.DATABASE_URL) {
     return { start: false, reason: "DATABASE_URL is not set" };
   }
-  const exeDbRoot = process.env.EXE_DB_ROOT ?? path8.join(os5.homedir(), "exe-db");
-  if (!existsSync8(path8.join(exeDbRoot, "package.json")) && !process.env.EXE_OS_PRISMA_CLIENT_PATH) {
+  const exeDbRoot = process.env.EXE_DB_ROOT ?? path9.join(os5.homedir(), "exe-db");
+  if (!existsSync9(path9.join(exeDbRoot, "package.json")) && !process.env.EXE_OS_PRISMA_CLIENT_PATH) {
     try {
       await import("pg");
     } catch {
@@ -4592,13 +4756,13 @@ __export(shard_manager_exports, {
   listShards: () => listShards,
   shardExists: () => shardExists
 });
-import path9 from "path";
-import { existsSync as existsSync9, mkdirSync as mkdirSync2, readdirSync, renameSync as renameSync3, statSync as statSync2 } from "fs";
+import path10 from "path";
+import { existsSync as existsSync10, mkdirSync as mkdirSync3, readdirSync, renameSync as renameSync3, statSync as statSync3 } from "fs";
 import { createClient as createClient2 } from "@libsql/client";
 function initShardManager(encryptionKey) {
   _encryptionKey = encryptionKey;
-  if (!existsSync9(SHARDS_DIR)) {
-    mkdirSync2(SHARDS_DIR, { recursive: true });
+  if (!existsSync10(SHARDS_DIR)) {
+    mkdirSync3(SHARDS_DIR, { recursive: true });
   }
   _shardingEnabled = true;
   if (_evictionTimer) clearInterval(_evictionTimer);
@@ -4627,7 +4791,7 @@ function getShardClient(projectName) {
   while (_shards.size >= MAX_OPEN_SHARDS) {
     evictLRU();
   }
-  const dbPath = path9.join(SHARDS_DIR, `${safeName}.db`);
+  const dbPath = path10.join(SHARDS_DIR, `${safeName}.db`);
   const client = createClient2({
     url: `file:${dbPath}`,
     encryptionKey: _encryptionKey
@@ -4638,13 +4802,13 @@ function getShardClient(projectName) {
 }
 function shardExists(projectName) {
   const safeName = safeShardName(projectName);
-  return existsSync9(path9.join(SHARDS_DIR, `${safeName}.db`));
+  return existsSync10(path10.join(SHARDS_DIR, `${safeName}.db`));
 }
 function safeShardName(projectName) {
   return projectName.replace(/[^a-zA-Z0-9_-]/g, "_");
 }
 function listShards() {
-  if (!existsSync9(SHARDS_DIR)) return [];
+  if (!existsSync10(SHARDS_DIR)) return [];
   return readdirSync(SHARDS_DIR).filter((f) => f.endsWith(".db")).map((f) => f.replace(".db", ""));
 }
 async function auditShardHealth(options = {}) {
@@ -4656,8 +4820,8 @@ async function auditShardHealth(options = {}) {
   const names = listShards();
   const shards = [];
   for (const name of names) {
-    const dbPath = path9.join(SHARDS_DIR, `${name}.db`);
-    const stat = statSync2(dbPath);
+    const dbPath = path10.join(SHARDS_DIR, `${name}.db`);
+    const stat = statSync3(dbPath);
     const item = {
       name,
       path: dbPath,
@@ -4691,7 +4855,7 @@ async function auditShardHealth(options = {}) {
         _shards.delete(name);
         _shardLastAccess.delete(name);
         const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-        const archivedPath = path9.join(SHARDS_DIR, `${name}.db.broken-${stamp}`);
+        const archivedPath = path10.join(SHARDS_DIR, `${name}.db.broken-${stamp}`);
         renameSync3(dbPath, archivedPath);
         item.archivedPath = archivedPath;
       }
@@ -4908,11 +5072,11 @@ async function getReadyShardClient(projectName) {
     client.close();
     _shards.delete(safeName);
     _shardLastAccess.delete(safeName);
-    const dbPath = path9.join(SHARDS_DIR, `${safeName}.db`);
-    if (existsSync9(dbPath)) {
-      const stat = statSync2(dbPath);
+    const dbPath = path10.join(SHARDS_DIR, `${safeName}.db`);
+    if (existsSync10(dbPath)) {
+      const stat = statSync3(dbPath);
       const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
-      const archivedPath = path9.join(SHARDS_DIR, `${safeName}.db.broken-${stamp}`);
+      const archivedPath = path10.join(SHARDS_DIR, `${safeName}.db.broken-${stamp}`);
       renameSync3(dbPath, archivedPath);
       process.stderr.write(
         `[shard-manager] Archived unreadable shard ${safeName}: ${archivedPath} (${stat.size} bytes, mtime ${stat.mtime.toISOString()})
@@ -4980,7 +5144,7 @@ var init_shard_manager = __esm({
   "src/lib/shard-manager.ts"() {
     "use strict";
     init_config();
-    SHARDS_DIR = path9.join(EXE_AI_DIR, "shards");
+    SHARDS_DIR = path10.join(EXE_AI_DIR, "shards");
     SHARD_IDLE_MS = 5 * 60 * 1e3;
     MAX_OPEN_SHARDS = 10;
     EVICTION_INTERVAL_MS = 60 * 1e3;
@@ -5003,15 +5167,15 @@ __export(keychain_exports, {
   setMasterKey: () => setMasterKey
 });
 import { readFile as readFile3, writeFile as writeFile3, unlink, mkdir as mkdir3, chmod as chmod2 } from "fs/promises";
-import { existsSync as existsSync10, statSync as statSync3 } from "fs";
+import { existsSync as existsSync11, statSync as statSync4 } from "fs";
 import { execSync as execSync2 } from "child_process";
-import path10 from "path";
+import path11 from "path";
 import os6 from "os";
 function getKeyDir() {
-  return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path10.join(os6.homedir(), ".exe-os");
+  return process.env.EXE_OS_DIR ?? process.env.EXE_MEM_DIR ?? path11.join(os6.homedir(), ".exe-os");
 }
 function getKeyPath() {
-  return path10.join(getKeyDir(), "master.key");
+  return path11.join(getKeyDir(), "master.key");
 }
 function nativeKeychainAllowed() {
   return process.env.EXE_OS_DISABLE_NATIVE_KEYCHAIN !== "1";
@@ -5038,11 +5202,11 @@ function isRootOnlyTrustedServerKeyFile(keyPath) {
   if (process.platform !== "linux") return false;
   try {
     const uid = typeof os6.userInfo().uid === "number" ? os6.userInfo().uid : -1;
-    const st = statSync3(keyPath);
+    const st = statSync4(keyPath);
     if (!st.isFile() || (st.mode & 63) !== 0) return false;
     if (uid === 0) return true;
     const exeOsDir = process.env.EXE_OS_DIR;
-    return Boolean(exeOsDir && path10.resolve(keyPath).startsWith(path10.resolve(exeOsDir) + path10.sep));
+    return Boolean(exeOsDir && path11.resolve(keyPath).startsWith(path11.resolve(exeOsDir) + path11.sep));
   } catch {
     return false;
   }
@@ -5154,8 +5318,8 @@ function deriveMachineKey() {
 }
 function readMachineId() {
   try {
-    const { readFileSync: readFileSync38 } = __require("fs");
-    return readFileSync38("/etc/machine-id", "utf-8").trim();
+    const { readFileSync: readFileSync40 } = __require("fs");
+    return readFileSync40("/etc/machine-id", "utf-8").trim();
   } catch {
     return "";
   }
@@ -5239,7 +5403,7 @@ async function getMasterKey() {
     }
   }
   const keyPath = getKeyPath();
-  if (!existsSync10(keyPath)) {
+  if (!existsSync11(keyPath)) {
     process.stderr.write(
       `[keychain] Key not found at ${keyPath} (HOME=${os6.homedir()}, EXE_OS_DIR=${process.env.EXE_OS_DIR ?? "unset"})
 `
@@ -5347,7 +5511,7 @@ async function getKeyStorageInfo() {
     }
   }
   const keyPath = getKeyPath();
-  if (!existsSync10(keyPath)) {
+  if (!existsSync11(keyPath)) {
     return {
       kind: "missing",
       secure: false,
@@ -5424,7 +5588,7 @@ async function deleteMasterKey() {
     }
   }
   const keyPath = getKeyPath();
-  if (existsSync10(keyPath)) {
+  if (existsSync11(keyPath)) {
     await unlink(keyPath);
   }
 }
@@ -6579,23 +6743,23 @@ __export(memory_queue_exports, {
   enqueueMemory: () => enqueueMemory,
   queueDepth: () => queueDepth
 });
-import { appendFileSync, readFileSync as readFileSync7, renameSync as renameSync4, unlinkSync as unlinkSync3, existsSync as existsSync11, statSync as statSync4 } from "fs";
-import path11 from "path";
+import { appendFileSync as appendFileSync2, readFileSync as readFileSync8, renameSync as renameSync4, unlinkSync as unlinkSync3, existsSync as existsSync12, statSync as statSync5 } from "fs";
+import path12 from "path";
 function enqueueMemory(entry) {
-  appendFileSync(QUEUE_PATH, JSON.stringify(entry) + "\n");
+  appendFileSync2(QUEUE_PATH, JSON.stringify(entry) + "\n");
 }
 function drainQueue() {
   const entries = [];
-  if (existsSync11(PROCESSING_PATH)) {
+  if (existsSync12(PROCESSING_PATH)) {
     entries.push(...parseQueueFile(PROCESSING_PATH));
     try {
       unlinkSync3(PROCESSING_PATH);
     } catch {
     }
   }
-  if (!existsSync11(QUEUE_PATH)) return entries;
+  if (!existsSync12(QUEUE_PATH)) return entries;
   try {
-    const stat = statSync4(QUEUE_PATH);
+    const stat = statSync5(QUEUE_PATH);
     if (stat.size === 0) return entries;
   } catch {
     return entries;
@@ -6613,9 +6777,9 @@ function drainQueue() {
   return entries;
 }
 function queueDepth() {
-  if (!existsSync11(QUEUE_PATH)) return 0;
+  if (!existsSync12(QUEUE_PATH)) return 0;
   try {
-    const content = readFileSync7(QUEUE_PATH, "utf8");
+    const content = readFileSync8(QUEUE_PATH, "utf8");
     return content.split("\n").filter((line) => line.trim().length > 0).length;
   } catch {
     return 0;
@@ -6626,7 +6790,7 @@ function parseQueueFile(filePath) {
   const entries = [];
   let content;
   try {
-    content = readFileSync7(filePath, "utf8");
+    content = readFileSync8(filePath, "utf8");
   } catch {
     return entries;
   }
@@ -6652,7 +6816,7 @@ var init_memory_queue = __esm({
   "src/lib/memory-queue.ts"() {
     "use strict";
     init_config();
-    QUEUE_PATH = path11.join(EXE_AI_DIR, "memory-queue.jsonl");
+    QUEUE_PATH = path12.join(EXE_AI_DIR, "memory-queue.jsonl");
     PROCESSING_PATH = QUEUE_PATH + ".processing";
     TTL_MS = 24 * 60 * 60 * 1e3;
   }
@@ -6818,8 +6982,8 @@ __export(reranker_exports, {
   rerankWithContext: () => rerankWithContext,
   rerankWithScores: () => rerankWithScores
 });
-import path12 from "path";
-import { existsSync as existsSync12 } from "fs";
+import path13 from "path";
+import { existsSync as existsSync13 } from "fs";
 function resetIdleTimer() {
   if (_idleTimer) clearTimeout(_idleTimer);
   _idleTimer = setTimeout(() => {
@@ -6830,18 +6994,18 @@ function resetIdleTimer() {
   }
 }
 function isRerankerAvailable() {
-  return existsSync12(path12.join(MODELS_DIR, RERANKER_MODEL_FILE));
+  return existsSync13(path13.join(MODELS_DIR, RERANKER_MODEL_FILE));
 }
 function getRerankerModelPath() {
-  return path12.join(MODELS_DIR, RERANKER_MODEL_FILE);
+  return path13.join(MODELS_DIR, RERANKER_MODEL_FILE);
 }
 async function ensureLoaded() {
   if (_rerankerContext) {
     resetIdleTimer();
     return;
   }
-  const modelPath = path12.join(MODELS_DIR, RERANKER_MODEL_FILE);
-  if (!existsSync12(modelPath)) {
+  const modelPath = path13.join(MODELS_DIR, RERANKER_MODEL_FILE);
+  if (!existsSync13(modelPath)) {
     throw new Error(
       `Reranker model not found at ${modelPath}. Run /exe-setup to download it.`
     );
@@ -6974,10 +7138,10 @@ async function disposeEmbedder() {
 async function embedDirect(text3) {
   const llamaCpp = await import("node-llama-cpp");
   const { MODELS_DIR: MODELS_DIR2 } = await Promise.resolve().then(() => (init_config(), config_exports));
-  const { existsSync: existsSync45 } = await import("fs");
-  const path58 = await import("path");
-  const modelPath = path58.join(MODELS_DIR2, "jina-embeddings-v5-small-q4_k_m.gguf");
-  if (!existsSync45(modelPath)) {
+  const { existsSync: existsSync47 } = await import("fs");
+  const path60 = await import("path");
+  const modelPath = path60.join(MODELS_DIR2, "jina-embeddings-v5-small-q4_k_m.gguf");
+  if (!existsSync47(modelPath)) {
     throw new Error(`Embedding model not found at ${modelPath}. Run '/exe-setup' to download it.`);
   }
   const llama = await llamaCpp.getLlama();
@@ -7012,7 +7176,7 @@ __export(project_name_exports, {
   getProjectName: () => getProjectName
 });
 import { execSync as execSync3 } from "child_process";
-import path13 from "path";
+import path14 from "path";
 function getProjectName(cwd) {
   const dir = cwd ?? process.cwd();
   if (_cached && _cachedCwd === dir) return _cached;
@@ -7025,7 +7189,7 @@ function getProjectName(cwd) {
         timeout: 2e3,
         stdio: ["pipe", "pipe", "pipe"]
       }).trim();
-      repoRoot = path13.dirname(gitCommonDir);
+      repoRoot = path14.dirname(gitCommonDir);
     } catch {
       repoRoot = execSync3("git rev-parse --show-toplevel", {
         cwd: dir,
@@ -7034,11 +7198,11 @@ function getProjectName(cwd) {
         stdio: ["pipe", "pipe", "pipe"]
       }).trim();
     }
-    _cached = path13.basename(repoRoot);
+    _cached = path14.basename(repoRoot);
     _cachedCwd = dir;
     return _cached;
   } catch {
-    _cached = path13.basename(dir);
+    _cached = path14.basename(dir);
     _cachedCwd = dir;
     return _cached;
   }
@@ -7062,8 +7226,8 @@ __export(file_grep_exports, {
   grepProjectFiles: () => grepProjectFiles
 });
 import { execSync as execSync4 } from "child_process";
-import { readFileSync as readFileSync8, readdirSync as readdirSync2, statSync as statSync5, existsSync as existsSync13 } from "fs";
-import path14 from "path";
+import { readFileSync as readFileSync9, readdirSync as readdirSync2, statSync as statSync6, existsSync as existsSync14 } from "fs";
+import path15 from "path";
 import crypto3 from "crypto";
 function hasRipgrep() {
   if (_hasRg === null) {
@@ -7103,7 +7267,7 @@ async function grepProjectFiles(query, projectRoot, options) {
       session_id: "file-grep",
       timestamp: (/* @__PURE__ */ new Date()).toISOString(),
       tool_name: "file_grep",
-      project_name: path14.basename(projectRoot),
+      project_name: path15.basename(projectRoot),
       has_error: false,
       raw_text: `${prefix} ${buildSnippet(hit, projectRoot)}`,
       vector: null,
@@ -7115,7 +7279,7 @@ function getChunkContext(filePath, lineNumber) {
   try {
     const ext = filePath.split(".").pop()?.toLowerCase();
     if (ext !== "ts" && ext !== "tsx" && ext !== "js" && ext !== "jsx") return "";
-    const source = readFileSync8(filePath, "utf8");
+    const source = readFileSync9(filePath, "utf8");
     const lines = source.split("\n");
     for (let i = Math.min(lineNumber - 1, lines.length - 1); i >= 0; i--) {
       const line = lines[i];
@@ -7177,11 +7341,11 @@ function grepWithNodeFs(pattern, projectRoot, patterns) {
   const files = collectFiles(projectRoot, patterns ?? DEFAULT_PATTERNS);
   const hits = [];
   for (const filePath of files.slice(0, MAX_FILES)) {
-    const absPath = path14.join(projectRoot, filePath);
+    const absPath = path15.join(projectRoot, filePath);
     try {
-      const stat = statSync5(absPath);
+      const stat = statSync6(absPath);
       if (stat.size > MAX_FILE_SIZE) continue;
-      const content = readFileSync8(absPath, "utf8");
+      const content = readFileSync9(absPath, "utf8");
       const lines = content.split("\n");
       const matches = content.match(regex);
       if (!matches || matches.length === 0) continue;
@@ -7204,15 +7368,15 @@ function collectFiles(root, patterns) {
   const files = [];
   function walk(dir, relative) {
     if (files.length >= MAX_FILES) return;
-    const basename = path14.basename(dir);
+    const basename = path15.basename(dir);
     if (EXCLUDE_DIRS.includes(basename)) return;
     try {
       const entries = readdirSync2(dir, { withFileTypes: true });
       for (const entry of entries) {
         if (files.length >= MAX_FILES) return;
-        const rel = path14.join(relative, entry.name);
+        const rel = path15.join(relative, entry.name);
         if (entry.isDirectory()) {
-          walk(path14.join(dir, entry.name), rel);
+          walk(path15.join(dir, entry.name), rel);
         } else if (entry.isFile()) {
           for (const pat of patterns) {
             if (matchGlob(rel, pat)) {
@@ -7244,7 +7408,7 @@ function matchGlob(filePath, pattern) {
   if (slashIdx !== -1) {
     const dir = pattern.slice(0, slashIdx);
     const ext2 = pattern.slice(slashIdx + 1).replace("*", "");
-    const fileDir = path14.dirname(filePath);
+    const fileDir = path15.dirname(filePath);
     return fileDir === dir && filePath.endsWith(ext2);
   }
   const ext = pattern.replace("*", "");
@@ -7252,9 +7416,9 @@ function matchGlob(filePath, pattern) {
 }
 function buildSnippet(hit, projectRoot) {
   try {
-    const absPath = path14.join(projectRoot, hit.filePath);
-    if (!existsSync13(absPath)) return hit.matchLine;
-    const lines = readFileSync8(absPath, "utf8").split("\n");
+    const absPath = path15.join(projectRoot, hit.filePath);
+    if (!existsSync14(absPath)) return hit.matchLine;
+    const lines = readFileSync9(absPath, "utf8").split("\n");
     const start = Math.max(0, hit.lineNumber - 3);
     const end = Math.min(lines.length, hit.lineNumber + 2);
     return lines.slice(start, end).join("\n").slice(0, 500);
@@ -8068,10 +8232,10 @@ async function hybridSearch(queryText, agentId, options) {
     };
     try {
       const fs = await import("fs");
-      const path58 = await import("path");
+      const path60 = await import("path");
       const os25 = await import("os");
-      const logPath = path58.join(os25.homedir(), ".exe-os", "search-quality.jsonl");
-      fs.mkdirSync(path58.dirname(logPath), { recursive: true });
+      const logPath = path60.join(os25.homedir(), ".exe-os", "search-quality.jsonl");
+      fs.mkdirSync(path60.dirname(logPath), { recursive: true });
       fs.appendFileSync(logPath, JSON.stringify(logEntry) + "\n");
     } catch {
     }
@@ -8603,9 +8767,9 @@ __export(active_agent_exports, {
   resolveActiveAgentFromTmuxSession: () => resolveActiveAgentFromTmuxSession,
   writeActiveAgent: () => writeActiveAgent
 });
-import { readFileSync as readFileSync9, writeFileSync as writeFileSync5, mkdirSync as mkdirSync3, unlinkSync as unlinkSync4, readdirSync as readdirSync3 } from "fs";
+import { readFileSync as readFileSync10, writeFileSync as writeFileSync6, mkdirSync as mkdirSync4, unlinkSync as unlinkSync4, readdirSync as readdirSync3 } from "fs";
 import { execSync as execSync6 } from "child_process";
-import path15 from "path";
+import path16 from "path";
 function isNameWithOptionalInstance(candidate, baseName) {
   if (candidate === baseName) return true;
   if (!candidate.startsWith(baseName)) return false;
@@ -8649,12 +8813,12 @@ function resolveActiveAgentFromTmuxSession(sessionName) {
   return null;
 }
 function getMarkerPath() {
-  return path15.join(CACHE_DIR, `active-agent-${getSessionKey()}.json`);
+  return path16.join(CACHE_DIR, `active-agent-${getSessionKey()}.json`);
 }
 function writeActiveAgent(agentId, agentRole) {
   try {
-    mkdirSync3(CACHE_DIR, { recursive: true });
-    writeFileSync5(
+    mkdirSync4(CACHE_DIR, { recursive: true });
+    writeFileSync6(
       getMarkerPath(),
       JSON.stringify({ agentId, agentRole, startedAt: (/* @__PURE__ */ new Date()).toISOString() })
     );
@@ -8672,7 +8836,7 @@ function getActiveAgent() {
   if (httpCtx) return httpCtx;
   try {
     const markerPath = getMarkerPath();
-    const raw = readFileSync9(markerPath, "utf8");
+    const raw = readFileSync10(markerPath, "utf8");
     const data = JSON.parse(raw);
     if (data.agentId) {
       if (data.startedAt) {
@@ -8720,14 +8884,14 @@ function getAllActiveAgents() {
       const key = file.slice("active-agent-".length, -".json".length);
       if (key === "undefined") continue;
       try {
-        const raw = readFileSync9(path15.join(CACHE_DIR, file), "utf8");
+        const raw = readFileSync10(path16.join(CACHE_DIR, file), "utf8");
         const data = JSON.parse(raw);
         if (!data.agentId) continue;
         if (data.startedAt) {
           const age = Date.now() - new Date(data.startedAt).getTime();
           if (age > STALE_MS) {
             try {
-              unlinkSync4(path15.join(CACHE_DIR, file));
+              unlinkSync4(path16.join(CACHE_DIR, file));
             } catch {
             }
             continue;
@@ -8750,11 +8914,11 @@ function getAllActiveAgents() {
 function cleanupSessionMarkers() {
   const key = getSessionKey();
   try {
-    unlinkSync4(path15.join(CACHE_DIR, `active-agent-${key}.json`));
+    unlinkSync4(path16.join(CACHE_DIR, `active-agent-${key}.json`));
   } catch {
   }
   try {
-    unlinkSync4(path15.join(CACHE_DIR, "active-agent-undefined.json"));
+    unlinkSync4(path16.join(CACHE_DIR, "active-agent-undefined.json"));
   } catch {
   }
 }
@@ -8766,7 +8930,7 @@ var init_active_agent = __esm({
     init_session_key();
     init_agent_context();
     init_employees();
-    CACHE_DIR = path15.join(EXE_AI_DIR, "session-cache");
+    CACHE_DIR = path16.join(EXE_AI_DIR, "session-cache");
     STALE_MS = 24 * 60 * 60 * 1e3;
   }
 });
@@ -9031,12 +9195,12 @@ var init_ask_team_memory = __esm({
 });
 
 // src/lib/license.ts
-import { readFileSync as readFileSync10, writeFileSync as writeFileSync6, existsSync as existsSync14, mkdirSync as mkdirSync4 } from "fs";
+import { readFileSync as readFileSync11, writeFileSync as writeFileSync7, existsSync as existsSync15, mkdirSync as mkdirSync5 } from "fs";
 import { randomUUID as randomUUID3 } from "crypto";
 import { createRequire as createRequire3 } from "module";
 import { pathToFileURL as pathToFileURL3 } from "url";
 import os7 from "os";
-import path16 from "path";
+import path17 from "path";
 import { jwtVerify, importSPKI } from "jose";
 async function fetchRetry(url, init) {
   try {
@@ -9047,37 +9211,37 @@ async function fetchRetry(url, init) {
   }
 }
 function loadDeviceId() {
-  const deviceJsonPath = path16.join(EXE_AI_DIR, "device.json");
+  const deviceJsonPath = path17.join(EXE_AI_DIR, "device.json");
   try {
-    if (existsSync14(deviceJsonPath)) {
-      const data = JSON.parse(readFileSync10(deviceJsonPath, "utf8"));
+    if (existsSync15(deviceJsonPath)) {
+      const data = JSON.parse(readFileSync11(deviceJsonPath, "utf8"));
       if (data.deviceId) return data.deviceId;
     }
   } catch {
   }
   try {
-    if (existsSync14(DEVICE_ID_PATH)) {
-      const id2 = readFileSync10(DEVICE_ID_PATH, "utf8").trim();
+    if (existsSync15(DEVICE_ID_PATH)) {
+      const id2 = readFileSync11(DEVICE_ID_PATH, "utf8").trim();
       if (id2) return id2;
     }
   } catch {
   }
   const id = randomUUID3();
-  mkdirSync4(EXE_AI_DIR, { recursive: true });
-  writeFileSync6(DEVICE_ID_PATH, id, "utf8");
+  mkdirSync5(EXE_AI_DIR, { recursive: true });
+  writeFileSync7(DEVICE_ID_PATH, id, "utf8");
   return id;
 }
 function loadLicense() {
   try {
-    if (!existsSync14(LICENSE_PATH)) return null;
-    return readFileSync10(LICENSE_PATH, "utf8").trim();
+    if (!existsSync15(LICENSE_PATH)) return null;
+    return readFileSync11(LICENSE_PATH, "utf8").trim();
   } catch {
     return null;
   }
 }
 function saveLicense(apiKey) {
-  mkdirSync4(EXE_AI_DIR, { recursive: true });
-  writeFileSync6(LICENSE_PATH, apiKey.trim(), { encoding: "utf8", mode: 384 });
+  mkdirSync5(EXE_AI_DIR, { recursive: true });
+  writeFileSync7(LICENSE_PATH, apiKey.trim(), { encoding: "utf8", mode: 384 });
 }
 async function verifyLicenseJwt(token) {
   try {
@@ -9103,8 +9267,8 @@ async function verifyLicenseJwt(token) {
 }
 async function getCachedLicense() {
   try {
-    if (!existsSync14(CACHE_PATH)) return null;
-    const raw = JSON.parse(readFileSync10(CACHE_PATH, "utf8"));
+    if (!existsSync15(CACHE_PATH)) return null;
+    const raw = JSON.parse(readFileSync11(CACHE_PATH, "utf8"));
     if (!raw.token || typeof raw.token !== "string") return null;
     return await verifyLicenseJwt(raw.token);
   } catch {
@@ -9113,8 +9277,8 @@ async function getCachedLicense() {
 }
 function readCachedToken() {
   try {
-    if (!existsSync14(CACHE_PATH)) return null;
-    const raw = JSON.parse(readFileSync10(CACHE_PATH, "utf8"));
+    if (!existsSync15(CACHE_PATH)) return null;
+    const raw = JSON.parse(readFileSync11(CACHE_PATH, "utf8"));
     return typeof raw.token === "string" ? raw.token : null;
   } catch {
     return null;
@@ -9148,7 +9312,7 @@ function getRawCachedPlan() {
 }
 function cacheResponse(token) {
   try {
-    writeFileSync6(CACHE_PATH, JSON.stringify({ token }), "utf8");
+    writeFileSync7(CACHE_PATH, JSON.stringify({ token }), "utf8");
   } catch {
   }
 }
@@ -9156,8 +9320,8 @@ function loadPrismaForLicense() {
   if (_prismaFailed) return null;
   const dbUrl = process.env.DATABASE_URL;
   if (!dbUrl) {
-    const exeDbRoot = process.env.EXE_DB_ROOT ?? path16.join(os7.homedir(), "exe-db");
-    if (!existsSync14(path16.join(exeDbRoot, "package.json"))) {
+    const exeDbRoot = process.env.EXE_DB_ROOT ?? path17.join(os7.homedir(), "exe-db");
+    if (!existsSync15(path17.join(exeDbRoot, "package.json"))) {
       _prismaFailed = true;
       return null;
     }
@@ -9171,8 +9335,8 @@ function loadPrismaForLicense() {
         if (!Ctor2) throw new Error(`No PrismaClient at ${explicitPath}`);
         return new Ctor2();
       }
-      const exeDbRoot = process.env.EXE_DB_ROOT ?? path16.join(os7.homedir(), "exe-db");
-      const req = createRequire3(path16.join(exeDbRoot, "package.json"));
+      const exeDbRoot = process.env.EXE_DB_ROOT ?? path17.join(os7.homedir(), "exe-db");
+      const req = createRequire3(path17.join(exeDbRoot, "package.json"));
       const entry = req.resolve("@prisma/client");
       const mod = await import(pathToFileURL3(entry).href);
       const Ctor = mod.PrismaClient ?? mod.default?.PrismaClient;
@@ -9251,7 +9415,7 @@ async function validateLicense(apiKey, deviceId) {
   const pgResult = await validateViaPostgres(apiKey);
   if (pgResult) {
     try {
-      writeFileSync6(CACHE_PATH, JSON.stringify({ pgLicense: pgResult, ts: Date.now() }), "utf8");
+      writeFileSync7(CACHE_PATH, JSON.stringify({ pgLicense: pgResult, ts: Date.now() }), "utf8");
     } catch {
     }
     return pgResult;
@@ -9261,8 +9425,8 @@ async function validateLicense(apiKey, deviceId) {
   const cached = await getCachedLicense();
   if (cached) return cached;
   try {
-    if (existsSync14(CACHE_PATH)) {
-      const raw = JSON.parse(readFileSync10(CACHE_PATH, "utf8"));
+    if (existsSync15(CACHE_PATH)) {
+      const raw = JSON.parse(readFileSync11(CACHE_PATH, "utf8"));
       if (raw.pgLicense && raw.ts && Date.now() - raw.ts < 7 * 24 * 60 * 60 * 1e3) {
         return raw.pgLicense;
       }
@@ -9275,8 +9439,8 @@ async function validateLicense(apiKey, deviceId) {
 }
 function getCacheAgeMs() {
   try {
-    const { statSync: statSync10 } = __require("fs");
-    const s = statSync10(CACHE_PATH);
+    const { statSync: statSync11 } = __require("fs");
+    const s = statSync11(CACHE_PATH);
     return Date.now() - s.mtimeMs;
   } catch {
     return Infinity;
@@ -9286,9 +9450,9 @@ async function checkLicense() {
   let key = loadLicense();
   if (!key) {
     try {
-      const configPath = path16.join(EXE_AI_DIR, "config.json");
-      if (existsSync14(configPath)) {
-        const raw = JSON.parse(readFileSync10(configPath, "utf8"));
+      const configPath = path17.join(EXE_AI_DIR, "config.json");
+      if (existsSync15(configPath)) {
+        const raw = JSON.parse(readFileSync11(configPath, "utf8"));
         const cloud = raw.cloud;
         if (cloud?.apiKey) {
           key = cloud.apiKey;
@@ -9319,9 +9483,9 @@ var init_license = __esm({
   "src/lib/license.ts"() {
     "use strict";
     init_config();
-    LICENSE_PATH = path16.join(EXE_AI_DIR, "license.key");
-    CACHE_PATH = path16.join(EXE_AI_DIR, "license-cache.json");
-    DEVICE_ID_PATH = path16.join(EXE_AI_DIR, "device-id");
+    LICENSE_PATH = path17.join(EXE_AI_DIR, "license.key");
+    CACHE_PATH = path17.join(EXE_AI_DIR, "license-cache.json");
+    DEVICE_ID_PATH = path17.join(EXE_AI_DIR, "device-id");
     API_BASE = "https://askexe.com/cloud";
     RETRY_DELAY_MS = 500;
     LICENSE_PUBLIC_KEY_PEM = `-----BEGIN PUBLIC KEY-----
@@ -9362,12 +9526,12 @@ __export(plan_limits_exports, {
   countActiveMemories: () => countActiveMemories,
   getLicenseSync: () => getLicenseSync
 });
-import { readFileSync as readFileSync11, existsSync as existsSync15 } from "fs";
-import path17 from "path";
+import { readFileSync as readFileSync12, existsSync as existsSync16 } from "fs";
+import path18 from "path";
 function getLicenseSync() {
   try {
-    if (!existsSync15(CACHE_PATH2)) return freeLicense();
-    const raw = JSON.parse(readFileSync11(CACHE_PATH2, "utf8"));
+    if (!existsSync16(CACHE_PATH2)) return freeLicense();
+    const raw = JSON.parse(readFileSync12(CACHE_PATH2, "utf8"));
     if (!raw.token || typeof raw.token !== "string") return freeLicense();
     const parts = raw.token.split(".");
     if (parts.length !== 3) return freeLicense();
@@ -9434,8 +9598,8 @@ function assertEmployeeLimitSync(rosterPath) {
   const filePath = rosterPath ?? EMPLOYEES_PATH;
   let count = 0;
   try {
-    if (existsSync15(filePath)) {
-      const raw = readFileSync11(filePath, "utf8");
+    if (existsSync16(filePath)) {
+      const raw = readFileSync12(filePath, "utf8");
       const employees = JSON.parse(raw);
       count = Array.isArray(employees) ? employees.length : 0;
     }
@@ -9472,15 +9636,15 @@ var init_plan_limits = __esm({
         this.name = "PlanLimitError";
       }
     };
-    CACHE_PATH2 = path17.join(EXE_AI_DIR, "license-cache.json");
+    CACHE_PATH2 = path18.join(EXE_AI_DIR, "license-cache.json");
   }
 });
 
 // src/mcp/tools/store-memory.ts
 import { z as z3 } from "zod";
 import crypto4 from "crypto";
-import { writeFileSync as writeFileSync7 } from "fs";
-import path18 from "path";
+import { writeFileSync as writeFileSync8 } from "fs";
+import path19 from "path";
 function registerStoreMemory(server) {
   server.registerTool(
     "store_memory",
@@ -9548,8 +9712,8 @@ function registerStoreMemory(server) {
       if (needsBackfill) {
         try {
           const { EXE_AI_DIR: exeDir } = await Promise.resolve().then(() => (init_config(), config_exports));
-          const flagPath = path18.join(exeDir, "session-cache", "needs-backfill");
-          writeFileSync7(flagPath, "1");
+          const flagPath = path19.join(exeDir, "session-cache", "needs-backfill");
+          writeFileSync8(flagPath, "1");
         } catch {
         }
       }
@@ -9577,8 +9741,8 @@ var init_store_memory = __esm({
 // src/mcp/tools/commit-memory.ts
 import { z as z4 } from "zod";
 import crypto5 from "crypto";
-import { writeFileSync as writeFileSync8 } from "fs";
-import path19 from "path";
+import { writeFileSync as writeFileSync9 } from "fs";
+import path20 from "path";
 function registerCommitMemory(server) {
   server.registerTool(
     "commit_to_long_term_memory",
@@ -9668,8 +9832,8 @@ function registerCommitMemory(server) {
       if (needsBackfill) {
         try {
           const { EXE_AI_DIR: exeDir } = await Promise.resolve().then(() => (init_config(), config_exports));
-          const flagPath = path19.join(exeDir, "session-cache", "needs-backfill");
-          writeFileSync8(flagPath, "1");
+          const flagPath = path20.join(exeDir, "session-cache", "needs-backfill");
+          writeFileSync9(flagPath, "1");
         } catch {
         }
       }
@@ -9704,8 +9868,8 @@ __export(wiki_client_exports, {
   listDocuments: () => listDocuments,
   listWorkspaces: () => listWorkspaces
 });
-async function wikiFetch(config2, path58, method = "GET", body) {
-  const url = `${config2.baseUrl}/api/v1${path58}`;
+async function wikiFetch(config2, path60, method = "GET", body) {
+  const url = `${config2.baseUrl}/api/v1${path60}`;
   const headers = {
     Authorization: `Bearer ${config2.apiKey}`,
     "Content-Type": "application/json"
@@ -9738,7 +9902,7 @@ async function wikiFetch(config2, path58, method = "GET", body) {
       }
     }
     if (!response.ok) {
-      throw new Error(`Wiki API ${method} ${path58}: ${response.status} ${response.statusText}`);
+      throw new Error(`Wiki API ${method} ${path60}: ${response.status} ${response.statusText}`);
     }
     return response.json();
   } finally {
@@ -11107,14 +11271,14 @@ __export(session_registry_exports, {
   refreshSessionProject: () => refreshSessionProject,
   registerSession: () => registerSession
 });
-import { readFileSync as readFileSync12, writeFileSync as writeFileSync9, mkdirSync as mkdirSync5, existsSync as existsSync16 } from "fs";
+import { readFileSync as readFileSync13, writeFileSync as writeFileSync10, mkdirSync as mkdirSync6, existsSync as existsSync17 } from "fs";
 import { execSync as execSync7 } from "child_process";
-import path20 from "path";
+import path21 from "path";
 import os8 from "os";
 function registerSession(entry) {
-  const dir = path20.dirname(REGISTRY_PATH);
-  if (!existsSync16(dir)) {
-    mkdirSync5(dir, { recursive: true });
+  const dir = path21.dirname(REGISTRY_PATH);
+  if (!existsSync17(dir)) {
+    mkdirSync6(dir, { recursive: true });
   }
   const sessions = listSessions();
   const idx = sessions.findIndex((s) => s.windowName === entry.windowName);
@@ -11123,7 +11287,7 @@ function registerSession(entry) {
   } else {
     sessions.push(entry);
   }
-  writeFileSync9(REGISTRY_PATH, JSON.stringify(sessions, null, 2));
+  writeFileSync10(REGISTRY_PATH, JSON.stringify(sessions, null, 2));
 }
 function refreshSessionProject(windowName, projectDir) {
   const sessions = listSessions();
@@ -11131,13 +11295,13 @@ function refreshSessionProject(windowName, projectDir) {
   if (!entry || entry.projectDir === projectDir) return;
   entry.projectDir = projectDir;
   try {
-    writeFileSync9(REGISTRY_PATH, JSON.stringify(sessions, null, 2));
+    writeFileSync10(REGISTRY_PATH, JSON.stringify(sessions, null, 2));
   } catch {
   }
 }
 function listSessions() {
   try {
-    const raw = readFileSync12(REGISTRY_PATH, "utf8");
+    const raw = readFileSync13(REGISTRY_PATH, "utf8");
     return JSON.parse(raw);
   } catch {
     return [];
@@ -11158,7 +11322,7 @@ function pruneStaleSessions() {
   const alive = sessions.filter((s) => liveSet.has(s.windowName));
   const pruned = sessions.length - alive.length;
   if (pruned > 0) {
-    writeFileSync9(REGISTRY_PATH, JSON.stringify(alive, null, 2));
+    writeFileSync10(REGISTRY_PATH, JSON.stringify(alive, null, 2));
   }
   return pruned;
 }
@@ -11166,7 +11330,7 @@ var REGISTRY_PATH;
 var init_session_registry = __esm({
   "src/lib/session-registry.ts"() {
     "use strict";
-    REGISTRY_PATH = path20.join(os8.homedir(), ".exe-os", "session-registry.json");
+    REGISTRY_PATH = path21.join(os8.homedir(), ".exe-os", "session-registry.json");
   }
 });
 
@@ -11377,17 +11541,17 @@ __export(intercom_queue_exports, {
   queueIntercom: () => queueIntercom,
   readQueue: () => readQueue
 });
-import { readFileSync as readFileSync13, writeFileSync as writeFileSync10, renameSync as renameSync5, existsSync as existsSync17, mkdirSync as mkdirSync6 } from "fs";
-import path21 from "path";
+import { readFileSync as readFileSync14, writeFileSync as writeFileSync11, renameSync as renameSync5, existsSync as existsSync18, mkdirSync as mkdirSync7 } from "fs";
+import path22 from "path";
 import os9 from "os";
 function ensureDir() {
-  const dir = path21.dirname(QUEUE_PATH2);
-  if (!existsSync17(dir)) mkdirSync6(dir, { recursive: true });
+  const dir = path22.dirname(QUEUE_PATH2);
+  if (!existsSync18(dir)) mkdirSync7(dir, { recursive: true });
 }
 function readQueue() {
   try {
-    if (!existsSync17(QUEUE_PATH2)) return [];
-    return JSON.parse(readFileSync13(QUEUE_PATH2, "utf8"));
+    if (!existsSync18(QUEUE_PATH2)) return [];
+    return JSON.parse(readFileSync14(QUEUE_PATH2, "utf8"));
   } catch {
     return [];
   }
@@ -11395,7 +11559,7 @@ function readQueue() {
 function writeQueue(queue) {
   ensureDir();
   const tmp = `${QUEUE_PATH2}.tmp`;
-  writeFileSync10(tmp, JSON.stringify(queue, null, 2));
+  writeFileSync11(tmp, JSON.stringify(queue, null, 2));
   renameSync5(tmp, QUEUE_PATH2);
 }
 function queueIntercom(targetSession, reason) {
@@ -11487,37 +11651,37 @@ var QUEUE_PATH2, MAX_RETRIES2, TTL_MS2, INTERCOM_LOG;
 var init_intercom_queue = __esm({
   "src/lib/intercom-queue.ts"() {
     "use strict";
-    QUEUE_PATH2 = path21.join(os9.homedir(), ".exe-os", "intercom-queue.json");
+    QUEUE_PATH2 = path22.join(os9.homedir(), ".exe-os", "intercom-queue.json");
     MAX_RETRIES2 = 5;
     TTL_MS2 = 60 * 60 * 1e3;
-    INTERCOM_LOG = path21.join(os9.homedir(), ".exe-os", "intercom.log");
+    INTERCOM_LOG = path22.join(os9.homedir(), ".exe-os", "intercom.log");
   }
 });
 
 // src/lib/agent-symlinks.ts
 import os10 from "os";
-import path22 from "path";
+import path23 from "path";
 import {
-  existsSync as existsSync18,
+  existsSync as existsSync19,
   lstatSync,
-  mkdirSync as mkdirSync7,
+  mkdirSync as mkdirSync8,
   readlinkSync as readlinkSync2,
   symlinkSync as symlinkSync2
 } from "fs";
 function claudeAgentsDir(homeDir) {
-  return path22.join(homeDir, ".claude", "agents");
+  return path23.join(homeDir, ".claude", "agents");
 }
 function identitySourcePath(homeDir, agentId) {
-  return path22.join(homeDir, ".exe-os", "identity", `${agentId}.md`);
+  return path23.join(homeDir, ".exe-os", "identity", `${agentId}.md`);
 }
 function claudeAgentLinkPath(homeDir, agentId) {
-  return path22.join(claudeAgentsDir(homeDir), `${agentId}.md`);
+  return path23.join(claudeAgentsDir(homeDir), `${agentId}.md`);
 }
 function ensureAgentSymlink(agentId, homeDir = os10.homedir()) {
   const target = identitySourcePath(homeDir, agentId);
   const link = claudeAgentLinkPath(homeDir, agentId);
-  mkdirSync7(claudeAgentsDir(homeDir), { recursive: true });
-  if (existsSync18(link)) {
+  mkdirSync8(claudeAgentsDir(homeDir), { recursive: true });
+  if (existsSync19(link)) {
     let stat;
     try {
       stat = lstatSync(link);
@@ -11960,8 +12124,8 @@ __export(tasks_review_exports, {
   isStale: () => isStale,
   listPendingReviews: () => listPendingReviews
 });
-import path23 from "path";
-import { existsSync as existsSync19, readdirSync as readdirSync4, unlinkSync as unlinkSync5 } from "fs";
+import path24 from "path";
+import { existsSync as existsSync20, readdirSync as readdirSync4, unlinkSync as unlinkSync5 } from "fs";
 function formatAge(isoTimestamp) {
   if (!isoTimestamp) return "";
   const ms = Date.now() - new Date(isoTimestamp).getTime();
@@ -12230,11 +12394,11 @@ async function cleanupReviewFile(row, taskFile, _baseDir) {
     );
   }
   try {
-    const cacheDir = path23.join(EXE_AI_DIR, "session-cache");
-    if (existsSync19(cacheDir)) {
+    const cacheDir = path24.join(EXE_AI_DIR, "session-cache");
+    if (existsSync20(cacheDir)) {
       for (const f of readdirSync4(cacheDir)) {
         if (f.startsWith("review-notified-")) {
-          unlinkSync5(path23.join(cacheDir, f));
+          unlinkSync5(path24.join(cacheDir, f));
         }
       }
     }
@@ -12281,13 +12445,13 @@ __export(tmux_routing_exports, {
   verifyPaneAtCapacity: () => verifyPaneAtCapacity
 });
 import { execFileSync as execFileSync2, execSync as execSync9 } from "child_process";
-import { readFileSync as readFileSync14, writeFileSync as writeFileSync11, mkdirSync as mkdirSync8, existsSync as existsSync20, appendFileSync as appendFileSync2, readdirSync as readdirSync5 } from "fs";
-import path24 from "path";
+import { readFileSync as readFileSync15, writeFileSync as writeFileSync12, mkdirSync as mkdirSync9, existsSync as existsSync21, appendFileSync as appendFileSync3, readdirSync as readdirSync5 } from "fs";
+import path25 from "path";
 import os11 from "os";
-import { fileURLToPath as fileURLToPath2 } from "url";
+import { fileURLToPath as fileURLToPath3 } from "url";
 import { unlinkSync as unlinkSync6 } from "fs";
 function spawnLockPath(sessionName) {
-  return path24.join(SPAWN_LOCK_DIR, `${sessionName}.lock`);
+  return path25.join(SPAWN_LOCK_DIR, `${sessionName}.lock`);
 }
 function isProcessAlive(pid) {
   try {
@@ -12298,13 +12462,13 @@ function isProcessAlive(pid) {
   }
 }
 function acquireSpawnLock2(sessionName) {
-  if (!existsSync20(SPAWN_LOCK_DIR)) {
-    mkdirSync8(SPAWN_LOCK_DIR, { recursive: true });
+  if (!existsSync21(SPAWN_LOCK_DIR)) {
+    mkdirSync9(SPAWN_LOCK_DIR, { recursive: true });
   }
   const lockFile = spawnLockPath(sessionName);
-  if (existsSync20(lockFile)) {
+  if (existsSync21(lockFile)) {
     try {
-      const lock = JSON.parse(readFileSync14(lockFile, "utf8"));
+      const lock = JSON.parse(readFileSync15(lockFile, "utf8"));
       const age = Date.now() - lock.timestamp;
       if (isProcessAlive(lock.pid) && age < 6e4) {
         return false;
@@ -12312,7 +12476,7 @@ function acquireSpawnLock2(sessionName) {
     } catch {
     }
   }
-  writeFileSync11(lockFile, JSON.stringify({ pid: process.pid, timestamp: Date.now() }));
+  writeFileSync12(lockFile, JSON.stringify({ pid: process.pid, timestamp: Date.now() }));
   return true;
 }
 function releaseSpawnLock2(sessionName) {
@@ -12323,14 +12487,14 @@ function releaseSpawnLock2(sessionName) {
 }
 function resolveBehaviorsExporterScript() {
   try {
-    const thisFile = fileURLToPath2(import.meta.url);
-    const scriptPath = path24.join(
-      path24.dirname(thisFile),
+    const thisFile = fileURLToPath3(import.meta.url);
+    const scriptPath = path25.join(
+      path25.dirname(thisFile),
       "..",
       "bin",
       "exe-export-behaviors.js"
     );
-    return existsSync20(scriptPath) ? scriptPath : null;
+    return existsSync21(scriptPath) ? scriptPath : null;
   } catch {
     return null;
   }
@@ -12396,12 +12560,12 @@ function extractRootExe(name) {
   return parts.length > 0 ? parts[parts.length - 1] : null;
 }
 function registerParentExe(sessionKey, parentExe, dispatchedBy) {
-  if (!existsSync20(SESSION_CACHE)) {
-    mkdirSync8(SESSION_CACHE, { recursive: true });
+  if (!existsSync21(SESSION_CACHE)) {
+    mkdirSync9(SESSION_CACHE, { recursive: true });
   }
   const rootExe = extractRootExe(parentExe) ?? parentExe;
-  const filePath = path24.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`);
-  writeFileSync11(filePath, JSON.stringify({
+  const filePath = path25.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`);
+  writeFileSync12(filePath, JSON.stringify({
     parentExe: rootExe,
     dispatchedBy: dispatchedBy || rootExe,
     registeredAt: (/* @__PURE__ */ new Date()).toISOString()
@@ -12409,7 +12573,7 @@ function registerParentExe(sessionKey, parentExe, dispatchedBy) {
 }
 function getParentExe(sessionKey) {
   try {
-    const data = JSON.parse(readFileSync14(path24.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`), "utf8"));
+    const data = JSON.parse(readFileSync15(path25.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`), "utf8"));
     return data.parentExe || null;
   } catch {
     return null;
@@ -12417,8 +12581,8 @@ function getParentExe(sessionKey) {
 }
 function getDispatchedBy(sessionKey) {
   try {
-    const data = JSON.parse(readFileSync14(
-      path24.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`),
+    const data = JSON.parse(readFileSync15(
+      path25.join(SESSION_CACHE, `parent-exe-${sessionKey}.json`),
       "utf8"
     ));
     return data.dispatchedBy ?? data.parentExe ?? null;
@@ -12488,8 +12652,8 @@ async function verifyPaneAtCapacity(sessionName) {
 }
 function readDebounceState() {
   try {
-    if (!existsSync20(DEBOUNCE_FILE)) return {};
-    const raw = JSON.parse(readFileSync14(DEBOUNCE_FILE, "utf8"));
+    if (!existsSync21(DEBOUNCE_FILE)) return {};
+    const raw = JSON.parse(readFileSync15(DEBOUNCE_FILE, "utf8"));
     const state = {};
     for (const [key, val] of Object.entries(raw)) {
       if (typeof val === "number") {
@@ -12505,8 +12669,8 @@ function readDebounceState() {
 }
 function writeDebounceState(state) {
   try {
-    if (!existsSync20(SESSION_CACHE)) mkdirSync8(SESSION_CACHE, { recursive: true });
-    writeFileSync11(DEBOUNCE_FILE, JSON.stringify(state));
+    if (!existsSync21(SESSION_CACHE)) mkdirSync9(SESSION_CACHE, { recursive: true });
+    writeFileSync12(DEBOUNCE_FILE, JSON.stringify(state));
   } catch {
   }
 }
@@ -12542,7 +12706,7 @@ function logIntercom(msg) {
   process.stderr.write(`[intercom] ${msg}
 `);
   try {
-    appendFileSync2(INTERCOM_LOG2, line);
+    appendFileSync3(INTERCOM_LOG2, line);
   } catch {
   }
 }
@@ -12605,8 +12769,8 @@ function sendIntercom(targetSession) {
       try {
         const rawAgent = targetSession.split("-")[0] ?? targetSession;
         const agent = baseAgentName(rawAgent);
-        const markerPath = path24.join(SESSION_CACHE, `current-task-${agent}.json`);
-        if (existsSync20(markerPath)) {
+        const markerPath = path25.join(SESSION_CACHE, `current-task-${agent}.json`);
+        if (existsSync21(markerPath)) {
           logIntercom(`SKIP \u2192 ${targetSession} (has in_progress task marker + not idle \u2014 will auto-chain)`);
           return "debounced";
         }
@@ -12616,8 +12780,8 @@ function sendIntercom(targetSession) {
     try {
       const rawAgent = targetSession.split("-")[0] ?? targetSession;
       const agent = baseAgentName(rawAgent);
-      const taskDir = path24.join(process.cwd(), "exe", agent);
-      if (existsSync20(taskDir)) {
+      const taskDir = path25.join(process.cwd(), "exe", agent);
+      if (existsSync21(taskDir)) {
         const files = readdirSync5(taskDir).filter(
           (f) => f.endsWith(".md") && f !== "DONE.txt"
         );
@@ -12776,26 +12940,26 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   const transport = getTransport();
   const sessionName = employeeSessionName(employeeName, exeSession, opts?.instance);
   const instanceLabel = opts?.instance != null && opts.instance > 0 ? `${employeeName}${opts.instance}` : employeeName;
-  const logDir = path24.join(os11.homedir(), ".exe-os", "session-logs");
-  const logFile = path24.join(logDir, `${instanceLabel}-${Date.now()}.log`);
-  if (!existsSync20(logDir)) {
-    mkdirSync8(logDir, { recursive: true });
+  const logDir = path25.join(os11.homedir(), ".exe-os", "session-logs");
+  const logFile = path25.join(logDir, `${instanceLabel}-${Date.now()}.log`);
+  if (!existsSync21(logDir)) {
+    mkdirSync9(logDir, { recursive: true });
   }
   transport.kill(sessionName);
   let cleanupSuffix = "";
   try {
-    const thisFile = fileURLToPath2(import.meta.url);
-    const cleanupScript = path24.join(path24.dirname(thisFile), "..", "bin", "exe-session-cleanup.js");
-    if (existsSync20(cleanupScript)) {
+    const thisFile = fileURLToPath3(import.meta.url);
+    const cleanupScript = path25.join(path25.dirname(thisFile), "..", "bin", "exe-session-cleanup.js");
+    if (existsSync21(cleanupScript)) {
       cleanupSuffix = `; ${process.execPath} "${cleanupScript}" "${employeeName}" "${exeSession}"`;
     }
   } catch {
   }
   try {
-    const claudeJsonPath = path24.join(os11.homedir(), ".claude.json");
+    const claudeJsonPath = path25.join(os11.homedir(), ".claude.json");
     let claudeJson = {};
     try {
-      claudeJson = JSON.parse(readFileSync14(claudeJsonPath, "utf8"));
+      claudeJson = JSON.parse(readFileSync15(claudeJsonPath, "utf8"));
     } catch {
     }
     if (!claudeJson.projects) claudeJson.projects = {};
@@ -12803,17 +12967,17 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
     const trustDir = opts?.cwd ?? projectDir;
     if (!projects[trustDir]) projects[trustDir] = {};
     projects[trustDir].hasTrustDialogAccepted = true;
-    writeFileSync11(claudeJsonPath, JSON.stringify(claudeJson, null, 2) + "\n");
+    writeFileSync12(claudeJsonPath, JSON.stringify(claudeJson, null, 2) + "\n");
   } catch {
   }
   try {
-    const settingsDir = path24.join(os11.homedir(), ".claude", "projects");
+    const settingsDir = path25.join(os11.homedir(), ".claude", "projects");
     const normalizedKey = (opts?.cwd ?? projectDir).replace(/\//g, "-").replace(/^-/, "");
-    const projSettingsDir = path24.join(settingsDir, normalizedKey);
-    const settingsPath = path24.join(projSettingsDir, "settings.json");
+    const projSettingsDir = path25.join(settingsDir, normalizedKey);
+    const settingsPath = path25.join(projSettingsDir, "settings.json");
     let settings = {};
     try {
-      settings = JSON.parse(readFileSync14(settingsPath, "utf8"));
+      settings = JSON.parse(readFileSync15(settingsPath, "utf8"));
     } catch {
     }
     const perms = settings.permissions ?? {};
@@ -12841,8 +13005,8 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
     if (changed) {
       perms.allow = allow;
       settings.permissions = perms;
-      mkdirSync8(projSettingsDir, { recursive: true });
-      writeFileSync11(settingsPath, JSON.stringify(settings, null, 2) + "\n");
+      mkdirSync9(projSettingsDir, { recursive: true });
+      writeFileSync12(settingsPath, JSON.stringify(settings, null, 2) + "\n");
     }
   } catch {
   }
@@ -12857,7 +13021,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   let behaviorsFlag = "";
   let legacyFallbackWarned = false;
   if (!useExeAgent && !useBinSymlink) {
-    const identityPath2 = path24.join(
+    const identityPath2 = path25.join(
       os11.homedir(),
       ".exe-os",
       "identity",
@@ -12874,13 +13038,13 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
 `
         );
       }
-    } else if (existsSync20(identityPath2)) {
+    } else if (existsSync21(identityPath2)) {
       identityFlag = ` --append-system-prompt-file ${identityPath2}`;
       legacyFallbackWarned = true;
     }
     const behaviorsFile = exportBehaviorsSync(
       employeeName,
-      path24.basename(spawnCwd),
+      path25.basename(spawnCwd),
       sessionName
     );
     if (behaviorsFile) {
@@ -12895,16 +13059,16 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   }
   let sessionContextFlag = "";
   try {
-    const ctxDir = path24.join(os11.homedir(), ".exe-os", "session-cache");
-    mkdirSync8(ctxDir, { recursive: true });
-    const ctxFile = path24.join(ctxDir, `session-context-${sessionName}.md`);
+    const ctxDir = path25.join(os11.homedir(), ".exe-os", "session-cache");
+    mkdirSync9(ctxDir, { recursive: true });
+    const ctxFile = path25.join(ctxDir, `session-context-${sessionName}.md`);
     const ctxContent = [
       `## Session Context`,
       `You are running in tmux session: ${sessionName}.`,
       `Your parent coordinator session is ${exeSession}.`,
       `Your employees (if any) use the -${exeSession} suffix.`
     ].join("\n");
-    writeFileSync11(ctxFile, ctxContent);
+    writeFileSync12(ctxFile, ctxContent);
     sessionContextFlag = ` --append-system-prompt-file ${ctxFile}`;
   } catch {
   }
@@ -12987,8 +13151,8 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   transport.pipeLog(sessionName, logFile);
   try {
     const mySession = getMySession();
-    const dispatchInfo = path24.join(SESSION_CACHE, `dispatch-info-${sessionName}.json`);
-    writeFileSync11(dispatchInfo, JSON.stringify({
+    const dispatchInfo = path25.join(SESSION_CACHE, `dispatch-info-${sessionName}.json`);
+    writeFileSync12(dispatchInfo, JSON.stringify({
       dispatchedBy: mySession,
       rootExe: exeSession,
       provider: useBinSymlink ? ccProvider : useExeAgent ? opts.provider : useCodex ? "openai" : useOpencode ? "opencode" : "anthropic",
@@ -13063,15 +13227,15 @@ var init_tmux_routing = __esm({
     init_plan_limits();
     init_employees();
     init_agent_symlinks();
-    SPAWN_LOCK_DIR = path24.join(os11.homedir(), ".exe-os", "spawn-locks");
-    SESSION_CACHE = path24.join(os11.homedir(), ".exe-os", "session-cache");
+    SPAWN_LOCK_DIR = path25.join(os11.homedir(), ".exe-os", "spawn-locks");
+    SESSION_CACHE = path25.join(os11.homedir(), ".exe-os", "session-cache");
     BEHAVIORS_EXPORT_TIMEOUT_MS = 1e4;
     VALID_SESSION_NAME = /^[a-z]+\d*-[a-zA-Z0-9_]+$/;
     VERIFY_PANE_LINES = 200;
     INTERCOM_DEBOUNCE_MS = 3e4;
     CODEX_DEBOUNCE_MS = 12e4;
-    INTERCOM_LOG2 = path24.join(os11.homedir(), ".exe-os", "intercom.log");
-    DEBOUNCE_FILE = path24.join(SESSION_CACHE, "intercom-debounce.json");
+    INTERCOM_LOG2 = path25.join(os11.homedir(), ".exe-os", "intercom.log");
+    DEBOUNCE_FILE = path25.join(SESSION_CACHE, "intercom-debounce.json");
     DEBOUNCE_CLEANUP_AGE_MS = 5 * 60 * 1e3;
     BUSY_PATTERN = /[✻✽✶✳·].*…|Running…|• Working|• Ran |• Explored|• Called|esc to interrupt/;
   }
@@ -13118,13 +13282,13 @@ var init_task_scope = __esm({
 
 // src/lib/notifications.ts
 import crypto7 from "crypto";
-import path25 from "path";
+import path26 from "path";
 import os12 from "os";
 import {
-  readFileSync as readFileSync15,
+  readFileSync as readFileSync16,
   readdirSync as readdirSync6,
   unlinkSync as unlinkSync7,
-  existsSync as existsSync21,
+  existsSync as existsSync22,
   rmdirSync
 } from "fs";
 async function writeNotification(notification) {
@@ -13253,11 +13417,11 @@ __export(tasks_crud_exports, {
   writeCheckpoint: () => writeCheckpoint
 });
 import crypto8 from "crypto";
-import path26 from "path";
+import path27 from "path";
 import os13 from "os";
 import { execSync as execSync10 } from "child_process";
 import { mkdir as mkdir4, writeFile as writeFile4, appendFile } from "fs/promises";
-import { existsSync as existsSync22, readFileSync as readFileSync16 } from "fs";
+import { existsSync as existsSync23, readFileSync as readFileSync17 } from "fs";
 async function writeCheckpoint(input) {
   const client = getClient();
   const row = await resolveTask(client, input.taskId);
@@ -13456,8 +13620,8 @@ ${scopeMismatchWarning}` : scopeMismatchWarning;
   }
   if (input.baseDir) {
     try {
-      await mkdir4(path26.join(input.baseDir, "exe", "output"), { recursive: true });
-      await mkdir4(path26.join(input.baseDir, "exe", "research"), { recursive: true });
+      await mkdir4(path27.join(input.baseDir, "exe", "output"), { recursive: true });
+      await mkdir4(path27.join(input.baseDir, "exe", "research"), { recursive: true });
       await ensureArchitectureDoc(input.baseDir, input.projectName);
       await ensureGitignoreExe(input.baseDir);
     } catch {
@@ -13493,10 +13657,10 @@ ${scopeMismatchWarning}` : scopeMismatchWarning;
   });
   if (input.baseDir) {
     try {
-      const EXE_OS_DIR = path26.join(os13.homedir(), ".exe-os");
-      const mdPath = path26.join(EXE_OS_DIR, taskFile);
-      const mdDir = path26.dirname(mdPath);
-      if (!existsSync22(mdDir)) await mkdir4(mdDir, { recursive: true });
+      const EXE_OS_DIR = path27.join(os13.homedir(), ".exe-os");
+      const mdPath = path27.join(EXE_OS_DIR, taskFile);
+      const mdDir = path27.dirname(mdPath);
+      if (!existsSync23(mdDir)) await mkdir4(mdDir, { recursive: true });
       const reviewer = input.reviewer ?? input.assignedBy;
       const mdContent = `# ${input.title}
 
@@ -13796,9 +13960,9 @@ async function deleteTaskCore(taskId, _baseDir) {
   return { taskFile, assignedTo, assignedBy, taskSlug };
 }
 async function ensureArchitectureDoc(baseDir, projectName) {
-  const archPath = path26.join(baseDir, "exe", "ARCHITECTURE.md");
+  const archPath = path27.join(baseDir, "exe", "ARCHITECTURE.md");
   try {
-    if (existsSync22(archPath)) return;
+    if (existsSync23(archPath)) return;
     const template = [
       `# ${projectName} \u2014 System Architecture`,
       "",
@@ -13831,10 +13995,10 @@ async function ensureArchitectureDoc(baseDir, projectName) {
   }
 }
 async function ensureGitignoreExe(baseDir) {
-  const gitignorePath = path26.join(baseDir, ".gitignore");
+  const gitignorePath = path27.join(baseDir, ".gitignore");
   try {
-    if (existsSync22(gitignorePath)) {
-      const content = readFileSync16(gitignorePath, "utf-8");
+    if (existsSync23(gitignorePath)) {
+      const content = readFileSync17(gitignorePath, "utf-8");
       if (/^\/?exe\/?$/m.test(content)) return;
       await appendFile(gitignorePath, "\n# Employee task assignments (private)\n/exe/\n");
     } else {
@@ -13865,7 +14029,7 @@ var init_tasks_crud = __esm({
 });
 
 // src/lib/tasks-chain.ts
-import path27 from "path";
+import path28 from "path";
 import { readFile as readFile4, writeFile as writeFile5 } from "fs/promises";
 async function cascadeUnblock(taskId, baseDir, now2) {
   const client = getClient();
@@ -13882,7 +14046,7 @@ async function cascadeUnblock(taskId, baseDir, now2) {
     });
     for (const ur of unblockedRows.rows) {
       try {
-        const ubFile = path27.join(baseDir, String(ur.task_file));
+        const ubFile = path28.join(baseDir, String(ur.task_file));
         let ubContent = await readFile4(ubFile, "utf-8");
         ubContent = ubContent.replace(/\*\*Status:\*\* blocked/, "**Status:** open");
         ubContent = ubContent.replace(/\n\*\*Blocked by:\*\*.*\n/, "\n");
@@ -14396,8 +14560,8 @@ __export(tasks_exports, {
   updateTaskStatus: () => updateTaskStatus,
   writeCheckpoint: () => writeCheckpoint
 });
-import path28 from "path";
-import { writeFileSync as writeFileSync12, mkdirSync as mkdirSync9, unlinkSync as unlinkSync8 } from "fs";
+import path29 from "path";
+import { writeFileSync as writeFileSync13, mkdirSync as mkdirSync10, unlinkSync as unlinkSync8 } from "fs";
 async function createTask(input) {
   const result2 = await createTaskCore(input);
   if (!input.skipDispatch && result2.status !== "blocked" && !process.env.VITEST) {
@@ -14416,11 +14580,11 @@ async function updateTask(input) {
   const { row, taskFile, now: now2, taskId } = await updateTaskStatus(input);
   try {
     const agent = String(row.assigned_to);
-    const cacheDir = path28.join(EXE_AI_DIR, "session-cache");
-    const cachePath = path28.join(cacheDir, `current-task-${agent}.json`);
+    const cacheDir = path29.join(EXE_AI_DIR, "session-cache");
+    const cachePath = path29.join(cacheDir, `current-task-${agent}.json`);
     if (input.status === "in_progress") {
-      mkdirSync9(cacheDir, { recursive: true });
-      writeFileSync12(cachePath, JSON.stringify({ taskId, title: String(row.title) }));
+      mkdirSync10(cacheDir, { recursive: true });
+      writeFileSync13(cachePath, JSON.stringify({ taskId, title: String(row.title) }));
     } else if (input.status === "done" || input.status === "blocked" || input.status === "cancelled" || input.status === "closed") {
       try {
         unlinkSync8(cachePath);
@@ -14587,17 +14751,17 @@ __export(identity_exports, {
   listIdentities: () => listIdentities,
   updateIdentity: () => updateIdentity
 });
-import { existsSync as existsSync23, mkdirSync as mkdirSync10, readFileSync as readFileSync17, writeFileSync as writeFileSync13 } from "fs";
+import { existsSync as existsSync24, mkdirSync as mkdirSync11, readFileSync as readFileSync18, writeFileSync as writeFileSync14 } from "fs";
 import { readdirSync as readdirSync7 } from "fs";
-import path29 from "path";
+import path30 from "path";
 import { createHash as createHash4 } from "crypto";
 function ensureDir2() {
-  if (!existsSync23(IDENTITY_DIR2)) {
-    mkdirSync10(IDENTITY_DIR2, { recursive: true });
+  if (!existsSync24(IDENTITY_DIR2)) {
+    mkdirSync11(IDENTITY_DIR2, { recursive: true });
   }
 }
 function identityPath(agentId) {
-  return path29.join(IDENTITY_DIR2, `${agentId}.md`);
+  return path30.join(IDENTITY_DIR2, `${agentId}.md`);
 }
 function sanitizeIdentityBody(body) {
   return body.replace(/<!--[\s\S]*?-->/g, "").trim();
@@ -14641,8 +14805,8 @@ function contentHash(content) {
 }
 function getIdentity(agentId) {
   const filePath = identityPath(agentId);
-  if (!existsSync23(filePath)) return null;
-  const raw = readFileSync17(filePath, "utf-8");
+  if (!existsSync24(filePath)) return null;
+  const raw = readFileSync18(filePath, "utf-8");
   const { frontmatter, body } = parseFrontmatter(raw);
   return {
     agentId,
@@ -14656,7 +14820,7 @@ async function updateIdentity(agentId, content, updatedBy) {
   ensureDir2();
   const filePath = identityPath(agentId);
   const hash = contentHash(content);
-  writeFileSync13(filePath, content, "utf-8");
+  writeFileSync14(filePath, content, "utf-8");
   try {
     const client = getClient();
     await client.execute({
@@ -14714,7 +14878,7 @@ var init_identity = __esm({
     "use strict";
     init_config();
     init_database();
-    IDENTITY_DIR2 = path29.join(EXE_AI_DIR, "identity");
+    IDENTITY_DIR2 = path30.join(EXE_AI_DIR, "identity");
   }
 });
 
@@ -15316,10 +15480,10 @@ function registerCreateTask(server) {
         skipDispatch: true
       });
       try {
-        const { existsSync: existsSync45, mkdirSync: mkdirSync24, writeFileSync: writeFileSync28 } = await import("fs");
+        const { existsSync: existsSync47, mkdirSync: mkdirSync25, writeFileSync: writeFileSync29 } = await import("fs");
         const { identityPath: identityPath2 } = await Promise.resolve().then(() => (init_identity(), identity_exports));
         const idPath = identityPath2(assigned_to);
-        if (!existsSync45(idPath)) {
+        if (!existsSync47(idPath)) {
           const { loadEmployees: loadEmployees2 } = await Promise.resolve().then(() => (init_employees(), employees_exports));
           const employees = await loadEmployees2();
           const emp = employees.find((e) => e.name === assigned_to);
@@ -15328,8 +15492,8 @@ function registerCreateTask(server) {
             const template = getTemplateForTitle2(emp.role);
             if (template) {
               const dir = (await import("path")).dirname(idPath);
-              if (!existsSync45(dir)) mkdirSync24(dir, { recursive: true });
-              writeFileSync28(idPath, template.replace(/^agent_id: \w+/m, `agent_id: ${assigned_to}`), "utf-8");
+              if (!existsSync47(dir)) mkdirSync25(dir, { recursive: true });
+              writeFileSync29(idPath, template.replace(/^agent_id: \w+/m, `agent_id: ${assigned_to}`), "utf-8");
             }
           }
         }
@@ -17632,13 +17796,13 @@ var init_document = __esm({
 });
 
 // src/gateway/whatsapp-accounts.ts
-import { readFileSync as readFileSync18 } from "fs";
+import { readFileSync as readFileSync19 } from "fs";
 import { join } from "path";
 import { homedir } from "os";
 function loadAccounts() {
   if (cachedAccounts !== null) return cachedAccounts;
   try {
-    const raw = readFileSync18(CONFIG_PATH2, "utf8");
+    const raw = readFileSync19(CONFIG_PATH2, "utf8");
     const parsed = JSON.parse(raw);
     if (!Array.isArray(parsed)) {
       console.warn("[whatsapp] Config is not an array, ignoring");
@@ -17816,7 +17980,7 @@ var init_crm_bridge = __esm({
 
 // src/mcp/tools/send-whatsapp.ts
 import { z as z37 } from "zod";
-import { existsSync as existsSync24, readFileSync as readFileSync19 } from "fs";
+import { existsSync as existsSync25, readFileSync as readFileSync20 } from "fs";
 import { homedir as homedir2 } from "os";
 import { join as join2 } from "path";
 async function lookupPhoneByName(name) {
@@ -17871,9 +18035,9 @@ function normalizeGatewaySendUrl(value) {
 }
 function loadGatewayJson() {
   const configPath = process.env.EXE_GATEWAY_CONFIG?.trim() || process.env.EXE_GATEWAY_CONFIG_PATH?.trim() || join2(homedir2(), ".exe-os", "gateway.json");
-  if (!existsSync24(configPath)) return {};
+  if (!existsSync25(configPath)) return {};
   try {
-    return JSON.parse(readFileSync19(configPath, "utf8"));
+    return JSON.parse(readFileSync20(configPath, "utf8"));
   } catch {
     return {};
   }
@@ -18813,12 +18977,12 @@ function registerExportGraph(server) {
         }
         const html = await exportGraphHTML(client);
         const fs = await import("fs");
-        const path58 = await import("path");
+        const path60 = await import("path");
         const os25 = await import("os");
-        const outDir = path58.join(os25.homedir(), ".exe-os", "exports");
+        const outDir = path60.join(os25.homedir(), ".exe-os", "exports");
         fs.mkdirSync(outDir, { recursive: true });
         const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-").slice(0, 19);
-        const filePath = path58.join(outDir, `graph-${timestamp}.html`);
+        const filePath = path60.join(outDir, `graph-${timestamp}.html`);
         fs.writeFileSync(filePath, html, "utf-8");
         return {
           content: [
@@ -20056,7 +20220,7 @@ __export(token_spend_exports, {
 import { readdir } from "fs/promises";
 import { createReadStream } from "fs";
 import { createInterface } from "readline";
-import path30 from "path";
+import path31 from "path";
 import os14 from "os";
 function getPricing(model) {
   if (MODEL_PRICING[model]) return MODEL_PRICING[model];
@@ -20084,18 +20248,18 @@ async function getAgentSpend(period = "7d") {
   for (const row of dbResult.rows) {
     sessionAgent.set(row.session_uuid, row.agent_id);
   }
-  const claudeDir = path30.join(os14.homedir(), ".claude", "projects");
+  const claudeDir = path31.join(os14.homedir(), ".claude", "projects");
   let projectDirs = [];
   try {
     const entries = await readdir(claudeDir);
-    projectDirs = entries.map((e) => path30.join(claudeDir, e));
+    projectDirs = entries.map((e) => path31.join(claudeDir, e));
   } catch {
     return [];
   }
   const agentTotals = /* @__PURE__ */ new Map();
   for (const [sessionUuid, agentId] of sessionAgent) {
     for (const dir of projectDirs) {
-      const jsonlPath = path30.join(dir, `${sessionUuid}.jsonl`);
+      const jsonlPath = path31.join(dir, `${sessionUuid}.jsonl`);
       try {
         const usage = await extractSessionUsage(jsonlPath);
         if (usage.input === 0 && usage.output === 0) continue;
@@ -20421,8 +20585,8 @@ var init_get_session_kills = __esm({
 
 // src/mcp/tools/get-daemon-health.ts
 import { z as z53 } from "zod";
-import { existsSync as existsSync25, readFileSync as readFileSync20 } from "fs";
-import path31 from "path";
+import { existsSync as existsSync26, readFileSync as readFileSync21 } from "fs";
+import path32 from "path";
 import { homedir as homedir3 } from "os";
 function formatUptime(seconds) {
   const h = Math.floor(seconds / 3600);
@@ -20434,8 +20598,8 @@ function formatUptime(seconds) {
 }
 function isDaemonAlive() {
   try {
-    if (!existsSync25(PID_PATH2)) return { alive: false, pid: null };
-    const pid = parseInt(readFileSync20(PID_PATH2, "utf8").trim(), 10);
+    if (!existsSync26(PID_PATH2)) return { alive: false, pid: null };
+    const pid = parseInt(readFileSync21(PID_PATH2, "utf8").trim(), 10);
     if (isNaN(pid) || pid <= 0) return { alive: false, pid: null };
     process.kill(pid, 0);
     return { alive: true, pid };
@@ -20482,6 +20646,27 @@ function registerGetDaemonHealth(server) {
           lines.push(`| Uptime | ${formatUptime(health.uptime)} |`);
           lines.push(`| Requests served | ${health.requests_served.toLocaleString()} |`);
         }
+        const events = readMcpHttpEvents(50);
+        const summary = summarizeMcpTransport(events);
+        const lastEvent = events.at(-1);
+        lines.push(`| MCP HTTP events | ${events.length > 0 ? `${events.length} recent` : "none recorded"} |`);
+        lines.push(`| MCP HTTP active sessions | ${summary.activeSessions ?? "unknown"} |`);
+        lines.push(`| Last MCP handshake | ${summary.lastSuccessfulHandshake ?? "none"} |`);
+        lines.push(`| Last MCP tool call | ${summary.lastSuccessfulToolCall ?? "none"} |`);
+        lines.push(`| MCP monitor summary | ${summary.eventLogPath.replace("mcp-http-events.jsonl", "monitor/mcp-transport-summary.json")} |`);
+        if (lastEvent) {
+          lines.push(`| Last MCP HTTP event | ${lastEvent.timestamp ?? "unknown"} ${lastEvent.message ?? "unknown"} |`);
+        }
+        if (summary.recentWarnings.length > 0) {
+          lines.push("\n### Recent MCP HTTP warnings");
+          for (const event of summary.recentWarnings.slice(-5)) {
+            lines.push(
+              `- ${event.timestamp ?? "unknown"} \u2014 ${event.message ?? "unknown"} (agent=${event.agentId ?? "unknown"}, session=${event.sessionId ?? "none"})`
+            );
+          }
+        }
+        lines.push("\n### Agent remediation");
+        for (const item of summary.remediation) lines.push(`- ${item}`);
         return {
           content: [{ type: "text", text: lines.join("\n") }]
         };
@@ -20502,7 +20687,64 @@ var PID_PATH2;
 var init_get_daemon_health = __esm({
   "src/mcp/tools/get-daemon-health.ts"() {
     "use strict";
-    PID_PATH2 = path31.join(homedir3(), ".exe-os", "exed.pid");
+    init_mcp_transport_health();
+    PID_PATH2 = path32.join(homedir3(), ".exe-os", "exed.pid");
+  }
+});
+
+// src/mcp/tools/mcp-ping.ts
+import { existsSync as existsSync27, readFileSync as readFileSync22 } from "fs";
+import path33 from "path";
+import { homedir as homedir4 } from "os";
+import { z as z54 } from "zod";
+function isDaemonAlive2() {
+  try {
+    if (!existsSync27(PID_PATH3)) return { alive: false, pid: null };
+    const pid = parseInt(readFileSync22(PID_PATH3, "utf8").trim(), 10);
+    if (!Number.isFinite(pid) || pid <= 0) return { alive: false, pid: null };
+    process.kill(pid, 0);
+    return { alive: true, pid };
+  } catch {
+    return { alive: false, pid: null };
+  }
+}
+function registerMcpPing(server) {
+  server.registerTool(
+    "mcp_ping",
+    {
+      title: "MCP Ping",
+      description: "Safe local MCP synthetic probe: daemon liveness plus privacy-safe transport/session summary.",
+      inputSchema: {
+        _placeholder: z54.string().optional().describe("No input required")
+      }
+    },
+    async () => {
+      const daemon = isDaemonAlive2();
+      const summary = summarizeMcpTransport();
+      writeMcpTransportSummary();
+      const status = daemon.alive ? "ok" : "degraded";
+      return {
+        content: [
+          {
+            type: "text",
+            text: JSON.stringify({
+              status,
+              daemon,
+              mcpTransport: summary,
+              remediation: daemon.alive ? "MCP transport probe reached the server. If tools still fail, reconnect the MCP client." : "Daemon is offline. Restart exe-os/exed; do not bypass MCP or access the DB directly."
+            }, null, 2)
+          }
+        ]
+      };
+    }
+  );
+}
+var PID_PATH3;
+var init_mcp_ping = __esm({
+  "src/mcp/tools/mcp-ping.ts"() {
+    "use strict";
+    init_mcp_transport_health();
+    PID_PATH3 = path33.join(homedir4(), ".exe-os", "exed.pid");
   }
 });
 
@@ -20784,9 +21026,9 @@ __export(agent_signals_exports, {
   hasOpenTasks: () => hasOpenTasks,
   hasUnreadInbox: () => hasUnreadInbox
 });
-import { readFileSync as readFileSync21, existsSync as existsSync26 } from "fs";
+import { readFileSync as readFileSync23, existsSync as existsSync28 } from "fs";
 import os15 from "os";
-import path32 from "path";
+import path34 from "path";
 async function hasOpenTasks(client, agentId) {
   try {
     const scope = sessionScopeFilter(null);
@@ -20828,10 +21070,10 @@ async function hasUnreadInbox(client, agentId) {
     return CONSERVATIVE_ON_ERROR;
   }
 }
-function hadRecentIntercomAck(sessionName, windowMs, nowMs = Date.now(), intercomLog = path32.join(os15.homedir(), ".exe-os", "intercom.log")) {
-  if (!existsSync26(intercomLog)) return false;
+function hadRecentIntercomAck(sessionName, windowMs, nowMs = Date.now(), intercomLog = path34.join(os15.homedir(), ".exe-os", "intercom.log")) {
+  if (!existsSync28(intercomLog)) return false;
   try {
-    const raw = readFileSync21(intercomLog, "utf8");
+    const raw = readFileSync23(intercomLog, "utf8");
     const lines = raw.split("\n");
     for (let i = lines.length - 1; i >= 0; i--) {
       const line = lines[i];
@@ -20904,8 +21146,8 @@ __export(daemon_orchestration_exports, {
   shouldNudgeEmployee: () => shouldNudgeEmployee
 });
 import { execSync as execSync12 } from "child_process";
-import { existsSync as existsSync27, readFileSync as readFileSync22, writeFileSync as writeFileSync14 } from "fs";
-import { homedir as homedir4 } from "os";
+import { existsSync as existsSync29, readFileSync as readFileSync24, writeFileSync as writeFileSync15 } from "fs";
+import { homedir as homedir5 } from "os";
 import { join as join3 } from "path";
 function shouldNudgeEmployee(sessionState, hasOpenTasks2, lastNudgeMs, nowMs, dedupMs) {
   if (sessionState !== "idle") return false;
@@ -21131,8 +21373,8 @@ async function pollReviewNudge(deps, state) {
 function loadNudgeState() {
   const state = { lastNudge: /* @__PURE__ */ new Map() };
   try {
-    if (!existsSync27(NUDGE_STATE_PATH)) return state;
-    const raw = JSON.parse(readFileSync22(NUDGE_STATE_PATH, "utf8"));
+    if (!existsSync29(NUDGE_STATE_PATH)) return state;
+    const raw = JSON.parse(readFileSync24(NUDGE_STATE_PATH, "utf8"));
     if (Array.isArray(raw)) {
       for (const [key, val] of raw) {
         if (key && typeof val?.at === "number" && typeof val?.count === "number") {
@@ -21146,7 +21388,7 @@ function loadNudgeState() {
 }
 function saveNudgeState(state) {
   const entries = Array.from(state.lastNudge.entries());
-  writeFileSync14(NUDGE_STATE_PATH, JSON.stringify(entries), "utf8");
+  writeFileSync15(NUDGE_STATE_PATH, JSON.stringify(entries), "utf8");
 }
 function createReviewNudgeRealDeps(getClient2) {
   return {
@@ -21480,7 +21722,7 @@ var init_daemon_orchestration = __esm({
     SESSION_CONTEXT_THRESHOLD_PCT = Number(process.env.EXE_CONTEXT_KILL_PCT) || 50;
     IDLE_KILL_INTERCOM_ACK_WINDOW_MS = Number(process.env.EXE_INTERCOM_ACK_WINDOW_MS) || 1e4;
     REVIEW_NUDGE_COOLDOWN_MS = 3e5;
-    NUDGE_STATE_PATH = join3(homedir4(), ".exe-os", "review-nudge-state.json");
+    NUDGE_STATE_PATH = join3(homedir5(), ".exe-os", "review-nudge-state.json");
     AUTO_WAKE_COOLDOWN_MS = 5 * 60 * 1e3;
     AUTO_WAKE_MAX_RETRIES = 3;
     _autoWakeLastSpawn = /* @__PURE__ */ new Map();
@@ -21496,7 +21738,7 @@ var init_daemon_orchestration = __esm({
 });
 
 // src/mcp/tools/get-auto-wake-status.ts
-import { z as z54 } from "zod";
+import { z as z55 } from "zod";
 function registerGetAutoWakeStatus(server) {
   server.registerTool(
     "get_auto_wake_status",
@@ -21504,7 +21746,7 @@ function registerGetAutoWakeStatus(server) {
       title: "Get Auto-Wake Status",
       description: "Check auto-wake status: orphaned tasks (assigned agent has no running session), tasks blocked by auto-wake retry limit, and session activity.",
       inputSchema: {
-        _placeholder: z54.string().optional().describe("No input required")
+        _placeholder: z55.string().optional().describe("No input required")
       }
     },
     async () => {
@@ -21602,14 +21844,14 @@ __export(worker_gate_exports, {
   tryAcquireBackfillLock: () => tryAcquireBackfillLock,
   tryAcquireWorkerSlot: () => tryAcquireWorkerSlot
 });
-import { readdirSync as readdirSync8, writeFileSync as writeFileSync15, unlinkSync as unlinkSync9, mkdirSync as mkdirSync11, existsSync as existsSync28 } from "fs";
-import path33 from "path";
+import { readdirSync as readdirSync8, writeFileSync as writeFileSync16, unlinkSync as unlinkSync9, mkdirSync as mkdirSync12, existsSync as existsSync30 } from "fs";
+import path35 from "path";
 function tryAcquireWorkerSlot() {
   try {
-    mkdirSync11(WORKER_PID_DIR, { recursive: true });
+    mkdirSync12(WORKER_PID_DIR, { recursive: true });
     const reservationId = `res-${process.pid}-${Date.now()}`;
-    const reservationPath = path33.join(WORKER_PID_DIR, `${reservationId}.pid`);
-    writeFileSync15(reservationPath, String(process.pid));
+    const reservationPath = path35.join(WORKER_PID_DIR, `${reservationId}.pid`);
+    writeFileSync16(reservationPath, String(process.pid));
     const files = readdirSync8(WORKER_PID_DIR);
     let alive = 0;
     for (const f of files) {
@@ -21626,7 +21868,7 @@ function tryAcquireWorkerSlot() {
         alive++;
       } catch {
         try {
-          unlinkSync9(path33.join(WORKER_PID_DIR, f));
+          unlinkSync9(path35.join(WORKER_PID_DIR, f));
         } catch {
         }
       }
@@ -21649,21 +21891,21 @@ function tryAcquireWorkerSlot() {
 }
 function registerWorkerPid(pid) {
   try {
-    mkdirSync11(WORKER_PID_DIR, { recursive: true });
-    writeFileSync15(path33.join(WORKER_PID_DIR, `worker-${pid}.pid`), String(pid));
+    mkdirSync12(WORKER_PID_DIR, { recursive: true });
+    writeFileSync16(path35.join(WORKER_PID_DIR, `worker-${pid}.pid`), String(pid));
   } catch {
   }
 }
 function cleanupWorkerPid() {
   try {
-    unlinkSync9(path33.join(WORKER_PID_DIR, `worker-${process.pid}.pid`));
+    unlinkSync9(path35.join(WORKER_PID_DIR, `worker-${process.pid}.pid`));
   } catch {
   }
 }
 function tryAcquireBackfillLock() {
   try {
-    mkdirSync11(WORKER_PID_DIR, { recursive: true });
-    if (existsSync28(BACKFILL_LOCK)) {
+    mkdirSync12(WORKER_PID_DIR, { recursive: true });
+    if (existsSync30(BACKFILL_LOCK)) {
       try {
         const pid = parseInt(
           __require("fs").readFileSync(BACKFILL_LOCK, "utf8").trim(),
@@ -21679,7 +21921,7 @@ function tryAcquireBackfillLock() {
       } catch {
       }
     }
-    writeFileSync15(BACKFILL_LOCK, String(process.pid));
+    writeFileSync16(BACKFILL_LOCK, String(process.pid));
     return true;
   } catch {
     return true;
@@ -21696,22 +21938,22 @@ var init_worker_gate = __esm({
   "src/lib/worker-gate.ts"() {
     "use strict";
     init_config();
-    WORKER_PID_DIR = path33.join(EXE_AI_DIR, "worker-pids");
+    WORKER_PID_DIR = path35.join(EXE_AI_DIR, "worker-pids");
     MAX_CONCURRENT_WORKERS = 3;
-    BACKFILL_LOCK = path33.join(WORKER_PID_DIR, "backfill.lock");
+    BACKFILL_LOCK = path35.join(WORKER_PID_DIR, "backfill.lock");
   }
 });
 
 // src/mcp/tools/get-worker-gate.ts
-import { z as z55 } from "zod";
-import { readdirSync as readdirSync9, existsSync as existsSync29 } from "fs";
-import path34 from "path";
+import { z as z56 } from "zod";
+import { readdirSync as readdirSync9, existsSync as existsSync31 } from "fs";
+import path36 from "path";
 function countAliveWorkers() {
   let alive = 0;
   let stale = 0;
   let reservations = 0;
   try {
-    if (!existsSync29(WORKER_PID_DIR2)) return { alive: 0, stale: 0, reservations: 0 };
+    if (!existsSync31(WORKER_PID_DIR2)) return { alive: 0, stale: 0, reservations: 0 };
     const files = readdirSync9(WORKER_PID_DIR2);
     for (const f of files) {
       if (!f.endsWith(".pid")) continue;
@@ -21740,7 +21982,7 @@ function registerGetWorkerGate(server) {
       title: "Get Worker Gate",
       description: "Check worker concurrency gate status: how many worker slots are in use, the maximum allowed, and whether new workers can spawn.",
       inputSchema: {
-        _placeholder: z55.string().optional().describe("No input required")
+        _placeholder: z56.string().optional().describe("No input required")
       }
     },
     async () => {
@@ -21779,19 +22021,19 @@ var init_get_worker_gate = __esm({
     "use strict";
     init_worker_gate();
     init_config();
-    WORKER_PID_DIR2 = path34.join(EXE_AI_DIR, "worker-pids");
+    WORKER_PID_DIR2 = path36.join(EXE_AI_DIR, "worker-pids");
   }
 });
 
 // src/lib/is-main.ts
 import { realpathSync } from "fs";
-import { fileURLToPath as fileURLToPath3 } from "url";
+import { fileURLToPath as fileURLToPath4 } from "url";
 function isMainModule(importMetaUrl) {
   if (process.argv[1] == null) return false;
   if (process.argv[1].includes("mcp/server")) return false;
   try {
     const scriptPath = realpathSync(process.argv[1]);
-    const modulePath = realpathSync(fileURLToPath3(importMetaUrl));
+    const modulePath = realpathSync(fileURLToPath4(importMetaUrl));
     return scriptPath === modulePath;
   } catch {
     return importMetaUrl === `file://${process.argv[1]}` || importMetaUrl === new URL(process.argv[1], "file://").href;
@@ -22216,16 +22458,16 @@ __export(key_backup_status_exports, {
   keyBackupMarkerPath: () => keyBackupMarkerPath,
   markKeyBackupConfirmed: () => markKeyBackupConfirmed
 });
-import { existsSync as existsSync30, mkdirSync as mkdirSync12, readFileSync as readFileSync23, writeFileSync as writeFileSync16 } from "fs";
-import path35 from "path";
+import { existsSync as existsSync32, mkdirSync as mkdirSync13, readFileSync as readFileSync25, writeFileSync as writeFileSync17 } from "fs";
+import path37 from "path";
 function keyBackupMarkerPath() {
-  return path35.join(EXE_AI_DIR, "key-backup-confirmed.json");
+  return path37.join(EXE_AI_DIR, "key-backup-confirmed.json");
 }
 function getKeyBackupStatus() {
   const marker = keyBackupMarkerPath();
-  if (!existsSync30(marker)) return { exists: false };
+  if (!existsSync32(marker)) return { exists: false };
   try {
-    const parsed = JSON.parse(readFileSync23(marker, "utf8"));
+    const parsed = JSON.parse(readFileSync25(marker, "utf8"));
     return {
       exists: true,
       confirmedAt: parsed.confirmedAt,
@@ -22236,8 +22478,8 @@ function getKeyBackupStatus() {
   }
 }
 function markKeyBackupConfirmed(source) {
-  mkdirSync12(EXE_AI_DIR, { recursive: true, mode: 448 });
-  writeFileSync16(
+  mkdirSync13(EXE_AI_DIR, { recursive: true, mode: 448 });
+  writeFileSync17(
     keyBackupMarkerPath(),
     JSON.stringify({ confirmedAt: (/* @__PURE__ */ new Date()).toISOString(), source }, null, 2) + "\n",
     { mode: 384 }
@@ -22333,33 +22575,33 @@ __export(db_backup_exports, {
   listBackups: () => listBackups,
   rotateBackups: () => rotateBackups
 });
-import { copyFileSync, existsSync as existsSync31, mkdirSync as mkdirSync13, readdirSync as readdirSync10, unlinkSync as unlinkSync10, statSync as statSync6 } from "fs";
-import path36 from "path";
+import { copyFileSync, existsSync as existsSync33, mkdirSync as mkdirSync14, readdirSync as readdirSync10, unlinkSync as unlinkSync10, statSync as statSync7 } from "fs";
+import path38 from "path";
 function findActiveDb() {
   for (const name of DB_NAMES) {
-    const p = path36.join(EXE_AI_DIR, name);
-    if (existsSync31(p)) return p;
+    const p = path38.join(EXE_AI_DIR, name);
+    if (existsSync33(p)) return p;
   }
   return null;
 }
 function createBackup(reason = "manual") {
   const dbPath = findActiveDb();
   if (!dbPath) return null;
-  mkdirSync13(BACKUP_DIR, { recursive: true });
-  const dbName = path36.basename(dbPath, ".db");
+  mkdirSync14(BACKUP_DIR, { recursive: true });
+  const dbName = path38.basename(dbPath, ".db");
   const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-").slice(0, 19);
   const backupName = `${dbName}-${reason}-${timestamp}.db`;
-  const backupPath = path36.join(BACKUP_DIR, backupName);
+  const backupPath = path38.join(BACKUP_DIR, backupName);
   copyFileSync(dbPath, backupPath);
   const walPath = dbPath + "-wal";
-  if (existsSync31(walPath)) {
+  if (existsSync33(walPath)) {
     try {
       copyFileSync(walPath, backupPath + "-wal");
     } catch {
     }
   }
   const shmPath = dbPath + "-shm";
-  if (existsSync31(shmPath)) {
+  if (existsSync33(shmPath)) {
     try {
       copyFileSync(shmPath, backupPath + "-shm");
     } catch {
@@ -22368,16 +22610,16 @@ function createBackup(reason = "manual") {
   return backupPath;
 }
 function rotateBackups(keepDays = DEFAULT_KEEP_DAYS) {
-  if (!existsSync31(BACKUP_DIR)) return 0;
+  if (!existsSync33(BACKUP_DIR)) return 0;
   const cutoff = Date.now() - keepDays * 24 * 60 * 60 * 1e3;
   let deleted = 0;
   try {
     const files = readdirSync10(BACKUP_DIR);
     for (const file of files) {
       if (!file.endsWith(".db") && !file.endsWith(".db-wal") && !file.endsWith(".db-shm")) continue;
-      const filePath = path36.join(BACKUP_DIR, file);
+      const filePath = path38.join(BACKUP_DIR, file);
       try {
-        const stat = statSync6(filePath);
+        const stat = statSync7(filePath);
         if (stat.mtimeMs < cutoff) {
           unlinkSync10(filePath);
           deleted++;
@@ -22390,12 +22632,12 @@ function rotateBackups(keepDays = DEFAULT_KEEP_DAYS) {
   return deleted;
 }
 function listBackups() {
-  if (!existsSync31(BACKUP_DIR)) return [];
+  if (!existsSync33(BACKUP_DIR)) return [];
   try {
     const files = readdirSync10(BACKUP_DIR).filter((f) => f.endsWith(".db") && !f.endsWith("-wal") && !f.endsWith("-shm"));
     return files.map((name) => {
-      const p = path36.join(BACKUP_DIR, name);
-      const stat = statSync6(p);
+      const p = path38.join(BACKUP_DIR, name);
+      const stat = statSync7(p);
       return { path: p, name, size: stat.size, date: stat.mtime };
     }).sort((a, b) => b.date.getTime() - a.date.getTime());
   } catch {
@@ -22419,7 +22661,7 @@ var init_db_backup = __esm({
   "src/lib/db-backup.ts"() {
     "use strict";
     init_config();
-    BACKUP_DIR = path36.join(EXE_AI_DIR, "backups");
+    BACKUP_DIR = path38.join(EXE_AI_DIR, "backups");
     DEFAULT_KEEP_DAYS = 3;
     DB_NAMES = ["memories.db", "exe-mem.db", "exe-os.db", "exe.db"];
   }
@@ -22427,9 +22669,9 @@ var init_db_backup = __esm({
 
 // src/bin/exe-doctor.ts
 import os16 from "os";
-import { existsSync as existsSync32, readFileSync as readFileSync24 } from "fs";
+import { existsSync as existsSync34, readFileSync as readFileSync26 } from "fs";
 import { spawn as spawn2 } from "child_process";
-import path37 from "path";
+import path39 from "path";
 import { randomUUID as randomUUID5 } from "crypto";
 function parseFlags(argv) {
   const flags = { fix: false, dryRun: false, verbose: false, conflicts: false };
@@ -22581,7 +22823,7 @@ async function auditOrphanedProjects(client) {
   for (const row of result2.rows) {
     const name = row.project_name;
     const count = Number(row.cnt);
-    const exists = existsSync32(path37.join(home, name)) || existsSync32(path37.join(home, "..", name)) || existsSync32(path37.join(process.cwd(), "..", name));
+    const exists = existsSync34(path39.join(home, name)) || existsSync34(path39.join(home, "..", name)) || existsSync34(path39.join(process.cwd(), "..", name));
     if (!exists) {
       orphans.push({ project_name: name, count });
     }
@@ -22589,18 +22831,18 @@ async function auditOrphanedProjects(client) {
   return orphans;
 }
 function auditHookHealth() {
-  const logPath = path37.join(
+  const logPath = path39.join(
     process.env.HOME ?? process.env.USERPROFILE ?? "",
     ".exe-os",
     "logs",
     "hooks.log"
   );
-  if (!existsSync32(logPath)) {
+  if (!existsSync34(logPath)) {
     return { logExists: false, totalLines: 0, errorsLastHour: 0, topPatterns: [] };
   }
   let content;
   try {
-    content = readFileSync24(logPath, "utf-8");
+    content = readFileSync26(logPath, "utf-8");
   } catch {
     return { logExists: false, totalLines: 0, errorsLastHour: 0, topPatterns: [] };
   }
@@ -22629,9 +22871,9 @@ function auditHookHealth() {
   return { logExists: true, totalLines, errorsLastHour, topPatterns };
 }
 function safeReadJson(filePath) {
-  if (!existsSync32(filePath)) return null;
+  if (!existsSync34(filePath)) return null;
   try {
-    return JSON.parse(readFileSync24(filePath, "utf-8"));
+    return JSON.parse(readFileSync26(filePath, "utf-8"));
   } catch {
     return null;
   }
@@ -22725,13 +22967,13 @@ function auditHookOwnership() {
   const home = process.env.HOME ?? process.env.USERPROFILE ?? "";
   const checkedFiles = [];
   const issues = [];
-  const claudeSettingsPath = path37.join(home, ".claude", "settings.json");
+  const claudeSettingsPath = path39.join(home, ".claude", "settings.json");
   const claudeSettings = safeReadJson(claudeSettingsPath);
   if (claudeSettings) {
     checkedFiles.push(claudeSettingsPath);
     issues.push(...buildHookOwnershipIssues("claude", collectHookCommandsFromClaudeSettings(claudeSettings)));
   }
-  const codexHooksPath = path37.join(home, ".codex", "hooks.json");
+  const codexHooksPath = path39.join(home, ".codex", "hooks.json");
   const codexHooks = safeReadJson(codexHooksPath);
   if (codexHooks) {
     checkedFiles.push(codexHooksPath);
@@ -22995,7 +23237,7 @@ async function fixNullVectors() {
     }
   }
   const npmRoot = (await import("child_process")).execSync("npm root -g", { encoding: "utf8" }).trim();
-  const backfillPath = path37.join(npmRoot, "exe-os", "dist", "bin", "backfill-vectors.js");
+  const backfillPath = path39.join(npmRoot, "exe-os", "dist", "bin", "backfill-vectors.js");
   return new Promise((resolve, reject) => {
     const child = spawn2("node", [backfillPath], { stdio: "inherit" });
     if (child.pid) registerWorkerPid2(child.pid);
@@ -23181,7 +23423,7 @@ var init_exe_doctor = __esm({
 });
 
 // src/mcp/tools/run-memory-audit.ts
-import { z as z56 } from "zod";
+import { z as z57 } from "zod";
 function registerRunMemoryAudit(server) {
   server.registerTool(
     "run_memory_audit",
@@ -23189,8 +23431,8 @@ function registerRunMemoryAudit(server) {
       title: "Run Memory Audit",
       description: "Run a memory health audit: total counts, per-agent breakdown, null vectors, duplicates, FTS sync status, bloated records, and conflict detection (contradictory/superseded memories).",
       inputSchema: {
-        agent_id: z56.string().optional().describe("Filter audit to a specific agent"),
-        project_name: z56.string().optional().describe("Filter audit to a specific project")
+        agent_id: z57.string().optional().describe("Filter audit to a specific agent"),
+        project_name: z57.string().optional().describe("Filter audit to a specific project")
       }
     },
     async ({ agent_id, project_name }) => {
@@ -23232,7 +23474,7 @@ var init_run_memory_audit = __esm({
 });
 
 // src/mcp/tools/run-consolidation.ts
-import { z as z57 } from "zod";
+import { z as z58 } from "zod";
 function registerRunConsolidation(server) {
   server.registerTool(
     "run_consolidation",
@@ -23240,7 +23482,7 @@ function registerRunConsolidation(server) {
       title: "Run Consolidation",
       description: "Run memory consolidation \u2014 synthesizes unconsolidated memories into meta-insights. Use dry_run=true (default) to preview without executing.",
       inputSchema: {
-        dry_run: z57.boolean().default(true).describe("Preview mode \u2014 show what would be consolidated without doing it")
+        dry_run: z58.boolean().default(true).describe("Preview mode \u2014 show what would be consolidated without doing it")
       }
     },
     async ({ dry_run }) => {
@@ -23406,9 +23648,9 @@ __export(crdt_sync_exports, {
   rebuildFromDb: () => rebuildFromDb
 });
 import * as Y from "yjs";
-import { readFileSync as readFileSync25, writeFileSync as writeFileSync17, existsSync as existsSync33, mkdirSync as mkdirSync14, unlinkSync as unlinkSync11 } from "fs";
-import path38 from "path";
-import { homedir as homedir5 } from "os";
+import { readFileSync as readFileSync27, writeFileSync as writeFileSync18, existsSync as existsSync35, mkdirSync as mkdirSync15, unlinkSync as unlinkSync11 } from "fs";
+import path40 from "path";
+import { homedir as homedir6 } from "os";
 function getStatePath() {
   return _statePathOverride ?? DEFAULT_STATE_PATH;
 }
@@ -23419,9 +23661,9 @@ function initCrdtDoc() {
   if (doc) return doc;
   doc = new Y.Doc();
   const sp = getStatePath();
-  if (existsSync33(sp)) {
+  if (existsSync35(sp)) {
     try {
-      const state = readFileSync25(sp);
+      const state = readFileSync27(sp);
       Y.applyUpdate(doc, new Uint8Array(state));
     } catch {
       console.warn("[crdt-sync] WARN: corrupted state file, rebuilding from DB");
@@ -23563,10 +23805,10 @@ function persistState() {
   if (!doc) return;
   try {
     const sp = getStatePath();
-    const dir = path38.dirname(sp);
-    if (!existsSync33(dir)) mkdirSync14(dir, { recursive: true });
+    const dir = path40.dirname(sp);
+    if (!existsSync35(dir)) mkdirSync15(dir, { recursive: true });
     const state = Y.encodeStateAsUpdate(doc);
-    writeFileSync17(sp, Buffer.from(state));
+    writeFileSync18(sp, Buffer.from(state));
   } catch {
   }
 }
@@ -23607,7 +23849,7 @@ var DEFAULT_STATE_PATH, _statePathOverride, doc;
 var init_crdt_sync = __esm({
   "src/lib/crdt-sync.ts"() {
     "use strict";
-    DEFAULT_STATE_PATH = path38.join(homedir5(), ".exe-os", "crdt-state.bin");
+    DEFAULT_STATE_PATH = path40.join(homedir6(), ".exe-os", "crdt-state.bin");
     _statePathOverride = null;
     doc = null;
   }
@@ -23647,17 +23889,17 @@ __export(cloud_sync_exports, {
   pushToPostgres: () => pushToPostgres,
   recordRosterDeletion: () => recordRosterDeletion
 });
-import { readFileSync as readFileSync26, writeFileSync as writeFileSync18, existsSync as existsSync34, readdirSync as readdirSync11, mkdirSync as mkdirSync15, appendFileSync as appendFileSync3, unlinkSync as unlinkSync12, openSync as openSync2, closeSync as closeSync2, statSync as statSync7 } from "fs";
+import { readFileSync as readFileSync28, writeFileSync as writeFileSync19, existsSync as existsSync36, readdirSync as readdirSync11, mkdirSync as mkdirSync16, appendFileSync as appendFileSync4, unlinkSync as unlinkSync12, openSync as openSync3, closeSync as closeSync3, statSync as statSync8 } from "fs";
 import crypto16 from "crypto";
-import path39 from "path";
-import { homedir as homedir6 } from "os";
+import path41 from "path";
+import { homedir as homedir7 } from "os";
 function sqlSafe(v) {
   return v === void 0 ? null : v;
 }
 function logError(msg) {
   try {
-    const logPath = path39.join(homedir6(), ".exe-os", "workers.log");
-    appendFileSync3(logPath, `${(/* @__PURE__ */ new Date()).toISOString()} ${msg}
+    const logPath = path41.join(homedir7(), ".exe-os", "workers.log");
+    appendFileSync4(logPath, `${(/* @__PURE__ */ new Date()).toISOString()} ${msg}
 `);
   } catch {
   }
@@ -23667,12 +23909,12 @@ function isTruthyEnv2(value) {
 }
 function loadPgClient() {
   if (_pgFailed) return null;
-  const configPath = path39.join(EXE_AI_DIR, "config.json");
+  const configPath = path41.join(EXE_AI_DIR, "config.json");
   let cloudPostgresUrl;
   let configEnabled = false;
   try {
-    if (existsSync34(configPath)) {
-      const cfg = JSON.parse(readFileSync26(configPath, "utf8"));
+    if (existsSync36(configPath)) {
+      const cfg = JSON.parse(readFileSync28(configPath, "utf8"));
       cloudPostgresUrl = cfg.cloud?.postgresUrl;
       configEnabled = cfg.cloud?.syncToPostgres === true;
     }
@@ -23699,9 +23941,9 @@ function loadPgClient() {
         if (!Ctor) throw new Error(`No PrismaClient at ${explicitPath}`);
         return new Ctor();
       }
-      const exeDbRoot = process.env.EXE_DB_ROOT ?? path39.join(homedir6(), "exe-db");
-      const packagePath = path39.join(exeDbRoot, "package.json");
-      if (existsSync34(packagePath)) {
+      const exeDbRoot = process.env.EXE_DB_ROOT ?? path41.join(homedir7(), "exe-db");
+      const packagePath = path41.join(exeDbRoot, "package.json");
+      if (existsSync36(packagePath)) {
         const req = createRequire7(packagePath);
         const entry = req.resolve("@prisma/client");
         const mod = await import(pathToFileURL7(entry).href);
@@ -23761,20 +24003,20 @@ async function pushToPostgres(records) {
 }
 async function withRosterLock(fn) {
   try {
-    const fd = openSync2(ROSTER_LOCK_PATH, "wx");
-    closeSync2(fd);
-    writeFileSync18(ROSTER_LOCK_PATH, String(Date.now()));
+    const fd = openSync3(ROSTER_LOCK_PATH, "wx");
+    closeSync3(fd);
+    writeFileSync19(ROSTER_LOCK_PATH, String(Date.now()));
   } catch (err) {
     if (err.code === "EEXIST") {
       try {
-        const ts2 = parseInt(readFileSync26(ROSTER_LOCK_PATH, "utf-8"), 10);
+        const ts2 = parseInt(readFileSync28(ROSTER_LOCK_PATH, "utf-8"), 10);
         if (Date.now() - ts2 < LOCK_STALE_MS) {
           throw new Error("Roster merge already in progress \u2014 another sync is running");
         }
         unlinkSync12(ROSTER_LOCK_PATH);
-        const fd = openSync2(ROSTER_LOCK_PATH, "wx");
-        closeSync2(fd);
-        writeFileSync18(ROSTER_LOCK_PATH, String(Date.now()));
+        const fd = openSync3(ROSTER_LOCK_PATH, "wx");
+        closeSync3(fd);
+        writeFileSync19(ROSTER_LOCK_PATH, String(Date.now()));
       } catch (retryErr) {
         if (retryErr instanceof Error && retryErr.message.includes("already in progress")) throw retryErr;
         throw new Error("Roster merge already in progress \u2014 another sync is running");
@@ -24220,8 +24462,8 @@ async function cloudSync(config2) {
   try {
     const employees = await loadEmployees();
     rosterResult.employees = employees.length;
-    const idDir = path39.join(EXE_AI_DIR, "identity");
-    if (existsSync34(idDir)) {
+    const idDir = path41.join(EXE_AI_DIR, "identity");
+    if (existsSync36(idDir)) {
       rosterResult.identities = readdirSync11(idDir).filter((f) => f.endsWith(".md")).length;
     }
   } catch {
@@ -24231,10 +24473,10 @@ async function cloudSync(config2) {
     const { getLatestBackup: getLatestBackup2 } = await Promise.resolve().then(() => (init_db_backup(), db_backup_exports));
     const latestBackup = getLatestBackup2();
     if (latestBackup) {
-      const backupSize = statSync7(latestBackup).size;
+      const backupSize = statSync8(latestBackup).size;
       const MAX_CLOUD_BACKUP_BYTES = 50 * 1024 * 1024;
       if (backupSize <= MAX_CLOUD_BACKUP_BYTES) {
-        const backupData = readFileSync26(latestBackup);
+        const backupData = readFileSync28(latestBackup);
         const deviceId = loadDeviceId() ?? "unknown";
         const encrypted = encryptSyncBlob(backupData);
         const backupRes = await fetchWithRetry(`${config2.endpoint}/sync/push-db-backup`, {
@@ -24242,7 +24484,7 @@ async function cloudSync(config2) {
           headers: { "Content-Type": "application/json", Authorization: `Bearer ${config2.apiKey}` },
           body: JSON.stringify({
             device_id: deviceId,
-            filename: path39.basename(latestBackup),
+            filename: path41.basename(latestBackup),
             blob: encrypted,
             size: backupData.length
           })
@@ -24270,56 +24512,56 @@ async function cloudSync(config2) {
 function recordRosterDeletion(name) {
   let deletions = [];
   try {
-    if (existsSync34(ROSTER_DELETIONS_PATH)) {
-      deletions = JSON.parse(readFileSync26(ROSTER_DELETIONS_PATH, "utf-8"));
+    if (existsSync36(ROSTER_DELETIONS_PATH)) {
+      deletions = JSON.parse(readFileSync28(ROSTER_DELETIONS_PATH, "utf-8"));
     }
   } catch {
   }
   if (!deletions.includes(name)) deletions.push(name);
-  writeFileSync18(ROSTER_DELETIONS_PATH, JSON.stringify(deletions));
+  writeFileSync19(ROSTER_DELETIONS_PATH, JSON.stringify(deletions));
 }
 function consumeRosterDeletions() {
   try {
-    if (!existsSync34(ROSTER_DELETIONS_PATH)) return [];
-    const deletions = JSON.parse(readFileSync26(ROSTER_DELETIONS_PATH, "utf-8"));
-    writeFileSync18(ROSTER_DELETIONS_PATH, "[]");
+    if (!existsSync36(ROSTER_DELETIONS_PATH)) return [];
+    const deletions = JSON.parse(readFileSync28(ROSTER_DELETIONS_PATH, "utf-8"));
+    writeFileSync19(ROSTER_DELETIONS_PATH, "[]");
     return deletions;
   } catch {
     return [];
   }
 }
 function buildRosterBlob(paths) {
-  const rosterPath = paths?.rosterPath ?? path39.join(EXE_AI_DIR, "exe-employees.json");
-  const identityDir = paths?.identityDir ?? path39.join(EXE_AI_DIR, "identity");
-  const configPath = paths?.configPath ?? path39.join(EXE_AI_DIR, "config.json");
+  const rosterPath = paths?.rosterPath ?? path41.join(EXE_AI_DIR, "exe-employees.json");
+  const identityDir = paths?.identityDir ?? path41.join(EXE_AI_DIR, "identity");
+  const configPath = paths?.configPath ?? path41.join(EXE_AI_DIR, "config.json");
   let roster = [];
-  if (existsSync34(rosterPath)) {
+  if (existsSync36(rosterPath)) {
     try {
-      roster = JSON.parse(readFileSync26(rosterPath, "utf-8"));
+      roster = JSON.parse(readFileSync28(rosterPath, "utf-8"));
     } catch {
     }
   }
   const identities = {};
-  if (existsSync34(identityDir)) {
+  if (existsSync36(identityDir)) {
     for (const file of readdirSync11(identityDir).filter((f) => f.endsWith(".md"))) {
       try {
-        identities[file] = readFileSync26(path39.join(identityDir, file), "utf-8");
+        identities[file] = readFileSync28(path41.join(identityDir, file), "utf-8");
       } catch {
       }
     }
   }
   let config2;
-  if (existsSync34(configPath)) {
+  if (existsSync36(configPath)) {
     try {
-      config2 = JSON.parse(readFileSync26(configPath, "utf-8"));
+      config2 = JSON.parse(readFileSync28(configPath, "utf-8"));
     } catch {
     }
   }
   let agentConfig;
-  const agentConfigPath = path39.join(EXE_AI_DIR, "agent-config.json");
-  if (existsSync34(agentConfigPath)) {
+  const agentConfigPath = path41.join(EXE_AI_DIR, "agent-config.json");
+  if (existsSync36(agentConfigPath)) {
     try {
-      agentConfig = JSON.parse(readFileSync26(agentConfigPath, "utf-8"));
+      agentConfig = JSON.parse(readFileSync28(agentConfigPath, "utf-8"));
     } catch {
     }
   }
@@ -24395,24 +24637,24 @@ async function cloudPullRoster(config2) {
   }
 }
 function mergeConfig(remoteConfig, configPath) {
-  const cfgPath = configPath ?? path39.join(EXE_AI_DIR, "config.json");
+  const cfgPath = configPath ?? path41.join(EXE_AI_DIR, "config.json");
   let local = {};
-  if (existsSync34(cfgPath)) {
+  if (existsSync36(cfgPath)) {
     try {
-      local = JSON.parse(readFileSync26(cfgPath, "utf-8"));
+      local = JSON.parse(readFileSync28(cfgPath, "utf-8"));
     } catch {
     }
   }
   const merged = { ...remoteConfig, ...local };
-  const dir = path39.dirname(cfgPath);
+  const dir = path41.dirname(cfgPath);
   ensurePrivateDirSync(dir);
-  writeFileSync18(cfgPath, JSON.stringify(merged, null, 2), "utf-8");
+  writeFileSync19(cfgPath, JSON.stringify(merged, null, 2), "utf-8");
   enforcePrivateFileSync(cfgPath);
 }
 async function mergeRosterFromRemote(remote, paths) {
   return withRosterLock(async () => {
     const rosterPath = paths?.rosterPath ?? void 0;
-    const identityDir = paths?.identityDir ?? path39.join(EXE_AI_DIR, "identity");
+    const identityDir = paths?.identityDir ?? path41.join(EXE_AI_DIR, "identity");
     const localEmployees = await loadEmployees(rosterPath);
     const localNames = new Set(localEmployees.map((e) => e.name));
     let added = 0;
@@ -24433,15 +24675,15 @@ async function mergeRosterFromRemote(remote, paths) {
       ) ?? lookupKey;
       const remoteIdentity = remote.identities[matchedKey];
       if (remoteIdentity) {
-        if (!existsSync34(identityDir)) mkdirSync15(identityDir, { recursive: true });
-        const idPath = path39.join(identityDir, `${remoteEmp.name}.md`);
+        if (!existsSync36(identityDir)) mkdirSync16(identityDir, { recursive: true });
+        const idPath = path41.join(identityDir, `${remoteEmp.name}.md`);
         let localIdentity = null;
         try {
-          localIdentity = existsSync34(idPath) ? readFileSync26(idPath, "utf-8") : null;
+          localIdentity = existsSync36(idPath) ? readFileSync28(idPath, "utf-8") : null;
         } catch {
         }
         if (localIdentity !== remoteIdentity) {
-          writeFileSync18(idPath, remoteIdentity, "utf-8");
+          writeFileSync19(idPath, remoteIdentity, "utf-8");
           identitiesUpdated++;
         }
       }
@@ -24467,17 +24709,17 @@ async function mergeRosterFromRemote(remote, paths) {
     }
     if (remote.agentConfig && Object.keys(remote.agentConfig).length > 0) {
       try {
-        const agentConfigPath = path39.join(EXE_AI_DIR, "agent-config.json");
+        const agentConfigPath = path41.join(EXE_AI_DIR, "agent-config.json");
         let local = {};
-        if (existsSync34(agentConfigPath)) {
+        if (existsSync36(agentConfigPath)) {
           try {
-            local = JSON.parse(readFileSync26(agentConfigPath, "utf-8"));
+            local = JSON.parse(readFileSync28(agentConfigPath, "utf-8"));
           } catch {
           }
         }
         const merged = { ...remote.agentConfig, ...local };
-        ensurePrivateDirSync(path39.dirname(agentConfigPath));
-        writeFileSync18(agentConfigPath, JSON.stringify(merged, null, 2) + "\n", "utf-8");
+        ensurePrivateDirSync(path41.dirname(agentConfigPath));
+        writeFileSync19(agentConfigPath, JSON.stringify(merged, null, 2) + "\n", "utf-8");
         enforcePrivateFileSync(agentConfigPath);
       } catch {
       }
@@ -24917,17 +25159,17 @@ var init_cloud_sync = __esm({
     LOCALHOST_PATTERNS = /^(localhost|127\.0\.0\.1|\[::1\])$/i;
     FETCH_TIMEOUT_MS2 = 3e4;
     PUSH_BATCH_SIZE = 5e3;
-    ROSTER_LOCK_PATH = path39.join(EXE_AI_DIR, "roster-merge.lock");
+    ROSTER_LOCK_PATH = path41.join(EXE_AI_DIR, "roster-merge.lock");
     LOCK_STALE_MS = 3e4;
     _pgPromise = null;
     _pgFailed = false;
     CLOUD_REUPLOAD_REQUIRED_MESSAGE = "Cloud sync is blocked because this device rotated its memory encryption key. Run `exe-os cloud reupload` first to re-upload the cloud backup with the new key.";
-    ROSTER_DELETIONS_PATH = path39.join(EXE_AI_DIR, "roster-deletions.json");
+    ROSTER_DELETIONS_PATH = path41.join(EXE_AI_DIR, "roster-deletions.json");
   }
 });
 
 // src/mcp/tools/cloud-sync.ts
-import { z as z58 } from "zod";
+import { z as z59 } from "zod";
 function result(text3, isError = false) {
   return { content: [{ type: "text", text: text3 }], ...isError ? { isError: true } : {} };
 }
@@ -25008,9 +25250,9 @@ function registerCloudSync(server) {
       title: "Cloud Sync",
       description: "Consolidated Exe Cloud tool. Supports read-only status, normal sync-now, and explicitly confirmed post-key-rotation re-upload. Does not reveal recovery phrases and does not rotate keys.",
       inputSchema: {
-        action: z58.enum(["status", "sync", "reupload"]).default("sync").describe("Cloud operation. status is read-only; sync is normal sync-now; reupload repairs cloud after key rotation."),
-        force: z58.boolean().default(false).describe("Reserved for sync compatibility; normal cloud sync already runs when requested."),
-        confirm_local_db_source_of_truth: z58.string().optional().describe('Required for action=reupload. Must exactly equal "LOCAL DB IS SOURCE OF TRUTH".')
+        action: z59.enum(["status", "sync", "reupload"]).default("sync").describe("Cloud operation. status is read-only; sync is normal sync-now; reupload repairs cloud after key rotation."),
+        force: z59.boolean().default(false).describe("Reserved for sync compatibility; normal cloud sync already runs when requested."),
+        confirm_local_db_source_of_truth: z59.string().optional().describe('Required for action=reupload. Must exactly equal "LOCAL DB IS SOURCE OF TRUTH".')
       }
     },
     async ({ action = "sync", confirm_local_db_source_of_truth }) => {
@@ -25163,7 +25405,7 @@ var init_orchestration_phase = __esm({
 });
 
 // src/mcp/tools/orchestration-phase.ts
-import { z as z59 } from "zod";
+import { z as z60 } from "zod";
 function render(info, prefix) {
   return [
     prefix,
@@ -25182,8 +25424,8 @@ function registerOrchestrationPhase(server) {
       title: "Orchestration Phase",
       description: "View or change the customer-owned orchestration maturity phase. MCP parity for `exe-os org phase`, `exe-os org unlock executives`, and `exe-os org unlock parallel`. This is a recommendation layer, not a blocker; it never exposes recovery phrases or secrets.",
       inputSchema: {
-        action: z59.enum(["status", "set", "unlock_executives", "unlock_parallel"]).default("status"),
-        phase: z59.enum(["phase_1_coo", "phase_2_executives", "phase_3_parallel_org", "1", "2", "3"]).optional().describe("Phase to set when action='set'.")
+        action: z60.enum(["status", "set", "unlock_executives", "unlock_parallel"]).default("status"),
+        phase: z60.enum(["phase_1_coo", "phase_2_executives", "phase_3_parallel_org", "1", "2", "3"]).optional().describe("Phase to set when action='set'.")
       }
     },
     async ({ action = "status", phase }) => {
@@ -25551,50 +25793,50 @@ var init_vps_backup = __esm({
 });
 
 // src/mcp/tools/backup-vps.ts
-import { z as z60 } from "zod";
+import { z as z61 } from "zod";
 function registerBackupVps(server) {
   server.registerTool(
     "backup_vps",
     {
       title: "VPS Backup",
       description: "Run VPS Postgres backup/restore workflows and check status.",
-      inputSchema: z60.discriminatedUnion("action", [
-        z60.object({
-          action: z60.literal("backup"),
-          databaseUrl: z60.string().min(1).describe("Postgres DATABASE_URL to dump from"),
-          encryptionKeyB64: z60.string().min(1).max(4096).optional().describe(
+      inputSchema: z61.discriminatedUnion("action", [
+        z61.object({
+          action: z61.literal("backup"),
+          databaseUrl: z61.string().min(1).describe("Postgres DATABASE_URL to dump from"),
+          encryptionKeyB64: z61.string().min(1).max(4096).optional().describe(
             "Base64 AES-256 key (defaults to local master key if omitted)"
           ),
-          r2Bucket: z60.string().min(1).describe("R2 bucket name"),
-          r2Endpoint: z60.string().min(1).describe("R2 endpoint URL"),
-          r2AccessKeyId: z60.string().min(1).describe("R2 access key ID"),
-          r2SecretAccessKey: z60.string().min(1).describe("R2 secret access key")
+          r2Bucket: z61.string().min(1).describe("R2 bucket name"),
+          r2Endpoint: z61.string().min(1).describe("R2 endpoint URL"),
+          r2AccessKeyId: z61.string().min(1).describe("R2 access key ID"),
+          r2SecretAccessKey: z61.string().min(1).describe("R2 secret access key")
         }),
-        z60.object({
-          action: z60.literal("restore"),
-          databaseUrl: z60.string().min(1).describe("Target Postgres DATABASE_URL for restore"),
-          backupKey: z60.string().min(1).describe("R2 object key to restore from"),
-          encryptionKeyB64: z60.string().min(1).max(4096).optional().describe(
+        z61.object({
+          action: z61.literal("restore"),
+          databaseUrl: z61.string().min(1).describe("Target Postgres DATABASE_URL for restore"),
+          backupKey: z61.string().min(1).describe("R2 object key to restore from"),
+          encryptionKeyB64: z61.string().min(1).max(4096).optional().describe(
             "Base64 AES-256 key (defaults to local master key if omitted)"
           ),
-          r2Bucket: z60.string().min(1).describe("R2 bucket name"),
-          r2Endpoint: z60.string().min(1).describe("R2 endpoint URL"),
-          r2AccessKeyId: z60.string().min(1).describe("R2 access key ID"),
-          r2SecretAccessKey: z60.string().min(1).describe("R2 secret access key")
+          r2Bucket: z61.string().min(1).describe("R2 bucket name"),
+          r2Endpoint: z61.string().min(1).describe("R2 endpoint URL"),
+          r2AccessKeyId: z61.string().min(1).describe("R2 access key ID"),
+          r2SecretAccessKey: z61.string().min(1).describe("R2 secret access key")
         }),
-        z60.object({
-          action: z60.literal("list"),
-          r2Bucket: z60.string().min(1).describe("R2 bucket name"),
-          r2Endpoint: z60.string().min(1).describe("R2 endpoint URL"),
-          r2AccessKeyId: z60.string().min(1).describe("R2 access key ID"),
-          r2SecretAccessKey: z60.string().min(1).describe("R2 secret access key")
+        z61.object({
+          action: z61.literal("list"),
+          r2Bucket: z61.string().min(1).describe("R2 bucket name"),
+          r2Endpoint: z61.string().min(1).describe("R2 endpoint URL"),
+          r2AccessKeyId: z61.string().min(1).describe("R2 access key ID"),
+          r2SecretAccessKey: z61.string().min(1).describe("R2 secret access key")
         }),
-        z60.object({
-          action: z60.literal("health"),
-          r2Bucket: z60.string().min(1).describe("R2 bucket name"),
-          r2Endpoint: z60.string().min(1).describe("R2 endpoint URL"),
-          r2AccessKeyId: z60.string().min(1).describe("R2 access key ID"),
-          r2SecretAccessKey: z60.string().min(1).describe("R2 secret access key")
+        z61.object({
+          action: z61.literal("health"),
+          r2Bucket: z61.string().min(1).describe("R2 bucket name"),
+          r2Endpoint: z61.string().min(1).describe("R2 endpoint URL"),
+          r2AccessKeyId: z61.string().min(1).describe("R2 access key ID"),
+          r2SecretAccessKey: z61.string().min(1).describe("R2 secret access key")
         })
       ])
     },
@@ -25788,9 +26030,9 @@ var init_hostinger_api = __esm({
         }
         this.lastRequestTime = Date.now();
       }
-      async request(method, path58, body) {
+      async request(method, path60, body) {
         await this.rateLimit();
-        const url = `${this.baseUrl}${path58}`;
+        const url = `${this.baseUrl}${path60}`;
         const headers = {
           Authorization: `Bearer ${this.apiKey}`,
           "Content-Type": "application/json",
@@ -25859,8 +26101,8 @@ async function requestCloudflare(cfApiToken, zoneId, options) {
   }
   return envelope.result;
 }
-function buildUrl(zoneId, path58 = "/dns_records", query) {
-  const normalizedPath = path58.startsWith("/") ? path58 : `/${path58}`;
+function buildUrl(zoneId, path60 = "/dns_records", query) {
+  const normalizedPath = path60.startsWith("/") ? path60 : `/${path60}`;
   const url = new URL(
     `${CLOUDFLARE_API_BASE_URL}/zones/${zoneId}${normalizedPath}`
   );
@@ -25931,11 +26173,11 @@ var init_cloudflare_dns = __esm({
 });
 
 // src/mcp/tools/deploy-client.ts
-import { z as z61 } from "zod";
+import { z as z62 } from "zod";
 import { execFile } from "child_process";
 import { promisify } from "util";
-import path40 from "path";
-import { existsSync as existsSync35 } from "fs";
+import path42 from "path";
+import { existsSync as existsSync37 } from "fs";
 async function executeDeployment(params, client) {
   const {
     client_name,
@@ -26007,12 +26249,12 @@ function registerDeployClient(server) {
       title: "Deploy Client",
       description: "Provision a Hostinger VPS and deploy exe-os for a client. Creates VPS, waits for ready state, runs Ansible playbook, verifies health.",
       inputSchema: {
-        client_name: z61.string().min(1).describe("Client name (used for hostname and identification)"),
-        domain: z61.string().min(1).describe("Domain name for the deployment (e.g., client.exe.ai)"),
-        region: z61.string().default("jakarta").describe("VPS region (default: jakarta)"),
-        plan: z61.string().default("kvm-2").describe("Hostinger VPS plan (default: kvm-2)"),
-        ssl_email: z61.string().email().describe("Email for Let's Encrypt SSL certificate"),
-        user_id: z61.string().min(1).describe("User/customer ID for inventory tracking")
+        client_name: z62.string().min(1).describe("Client name (used for hostname and identification)"),
+        domain: z62.string().min(1).describe("Domain name for the deployment (e.g., client.exe.ai)"),
+        region: z62.string().default("jakarta").describe("VPS region (default: jakarta)"),
+        plan: z62.string().default("kvm-2").describe("Hostinger VPS plan (default: kvm-2)"),
+        ssl_email: z62.string().email().describe("Email for Let's Encrypt SSL certificate"),
+        user_id: z62.string().min(1).describe("User/customer ID for inventory tracking")
       }
     },
     async ({ client_name, domain, region, plan, ssl_email, user_id }) => {
@@ -26080,12 +26322,12 @@ async function waitForReady(client, vpsId) {
 }
 async function runAnsiblePlaybook(vpsIp, domain, sslEmail, clientName) {
   const safeClientName = clientName.replace(/[^a-zA-Z0-9_-]/g, "-");
-  const playbookDir = path40.resolve(process.cwd(), "infrastructure", "ansible");
-  const playbookPath = path40.join(playbookDir, "deploy.yml");
-  const inventoryPath = path40.join(playbookDir, "inventory", "hosts.yml");
-  const clientVarsPath = path40.join(playbookDir, "vars", `${safeClientName}.yml`);
-  const varsDir = path40.join(playbookDir, "vars");
-  if (!path40.resolve(clientVarsPath).startsWith(path40.resolve(varsDir))) {
+  const playbookDir = path42.resolve(process.cwd(), "infrastructure", "ansible");
+  const playbookPath = path42.join(playbookDir, "deploy.yml");
+  const inventoryPath = path42.join(playbookDir, "inventory", "hosts.yml");
+  const clientVarsPath = path42.join(playbookDir, "vars", `${safeClientName}.yml`);
+  const varsDir = path42.join(playbookDir, "vars");
+  if (!path42.resolve(clientVarsPath).startsWith(path42.resolve(varsDir))) {
     throw new Error(`Invalid client name for vars path: ${clientName}`);
   }
   const args = [
@@ -26101,7 +26343,7 @@ async function runAnsiblePlaybook(vpsIp, domain, sslEmail, clientName) {
     "-e",
     `client_name=${safeClientName}`
   ];
-  if (existsSync35(clientVarsPath)) {
+  if (existsSync37(clientVarsPath)) {
     args.push("-e", `@${clientVarsPath}`);
   }
   try {
@@ -26191,7 +26433,7 @@ var init_deploy_client = __esm({
 });
 
 // src/mcp/tools/get-license-status.ts
-import { z as z62 } from "zod";
+import { z as z63 } from "zod";
 function registerGetLicenseStatus(server) {
   server.registerTool(
     "get_license_status",
@@ -26199,7 +26441,7 @@ function registerGetLicenseStatus(server) {
       title: "Get License Status",
       description: "Get current license status: plan, validity, feature gates, limits, and expiry.",
       inputSchema: {
-        _dummy: z62.string().optional().describe("Unused \u2014 no input required")
+        _dummy: z63.string().optional().describe("Unused \u2014 no input required")
       }
     },
     async () => {
@@ -26265,11 +26507,11 @@ var init_get_license_status = __esm({
 
 // src/mcp/tools/create-license.ts
 import os17 from "os";
-import path41 from "path";
+import path43 from "path";
 import { randomBytes as randomBytes2, randomUUID as randomUUID6 } from "crypto";
 import { createRequire as createRequire4 } from "module";
 import { pathToFileURL as pathToFileURL4 } from "url";
-import { z as z63 } from "zod";
+import { z as z64 } from "zod";
 function loadPrisma2() {
   if (!prismaPromise2) {
     prismaPromise2 = (async () => {
@@ -26280,8 +26522,8 @@ function loadPrisma2() {
         if (!Ctor2) throw new Error(`No PrismaClient at ${explicitPath}`);
         return new Ctor2();
       }
-      const exeDbRoot = process.env.EXE_DB_ROOT ?? path41.join(os17.homedir(), "exe-db");
-      const req = createRequire4(path41.join(exeDbRoot, "package.json"));
+      const exeDbRoot = process.env.EXE_DB_ROOT ?? path43.join(os17.homedir(), "exe-db");
+      const req = createRequire4(path43.join(exeDbRoot, "package.json"));
       const entry = req.resolve("@prisma/client");
       const mod = await import(pathToFileURL4(entry).href);
       const Ctor = mod.PrismaClient ?? mod.default?.PrismaClient;
@@ -26301,10 +26543,10 @@ function registerCreateLicense(server) {
       title: "Create License",
       description: "Generate an exe_sk_* license key for a user. Stores in billing.licenses. Returns the key to give to the customer.",
       inputSchema: {
-        email: z63.string().email().describe("Customer email address"),
-        name: z63.string().optional().describe("Customer name"),
-        plan: z63.enum(["free", "pro", "team", "agency", "enterprise"]).default("pro").describe("License plan tier"),
-        expires_in_days: z63.number().int().positive().default(365).describe("Days until expiration (default 365)")
+        email: z64.string().email().describe("Customer email address"),
+        name: z64.string().optional().describe("Customer name"),
+        plan: z64.enum(["free", "pro", "team", "agency", "enterprise"]).default("pro").describe("License plan tier"),
+        expires_in_days: z64.number().int().positive().default(365).describe("Days until expiration (default 365)")
       }
     },
     async ({ email, name, plan, expires_in_days }) => {
@@ -26364,10 +26606,10 @@ var init_create_license = __esm({
 
 // src/mcp/tools/list-licenses.ts
 import os18 from "os";
-import path42 from "path";
+import path44 from "path";
 import { createRequire as createRequire5 } from "module";
 import { pathToFileURL as pathToFileURL5 } from "url";
-import { z as z64 } from "zod";
+import { z as z65 } from "zod";
 function loadPrisma3() {
   if (!prismaPromise3) {
     prismaPromise3 = (async () => {
@@ -26378,8 +26620,8 @@ function loadPrisma3() {
         if (!Ctor2) throw new Error(`No PrismaClient at ${explicitPath}`);
         return new Ctor2();
       }
-      const exeDbRoot = process.env.EXE_DB_ROOT ?? path42.join(os18.homedir(), "exe-db");
-      const req = createRequire5(path42.join(exeDbRoot, "package.json"));
+      const exeDbRoot = process.env.EXE_DB_ROOT ?? path44.join(os18.homedir(), "exe-db");
+      const req = createRequire5(path44.join(exeDbRoot, "package.json"));
       const entry = req.resolve("@prisma/client");
       const mod = await import(pathToFileURL5(entry).href);
       const Ctor = mod.PrismaClient ?? mod.default?.PrismaClient;
@@ -26396,7 +26638,7 @@ function registerListLicenses(server) {
       title: "List Licenses",
       description: "List all issued licenses with status (active/expired/revoked). Optionally filter by plan.",
       inputSchema: {
-        plan: z64.enum(["free", "pro", "team", "agency", "enterprise"]).optional().describe("Filter by plan tier (omit for all)")
+        plan: z65.enum(["free", "pro", "team", "agency", "enterprise"]).optional().describe("Filter by plan tier (omit for all)")
       }
     },
     async ({ plan }) => {
@@ -26453,7 +26695,7 @@ var init_list_licenses = __esm({
 });
 
 // src/mcp/tools/activate-license.ts
-import { z as z65 } from "zod";
+import { z as z66 } from "zod";
 function registerActivateLicense(server) {
   server.registerTool(
     "activate_license",
@@ -26461,7 +26703,7 @@ function registerActivateLicense(server) {
       title: "Activate License",
       description: "Activate an exe_sk_* license key on this device. Writes to ~/.exe-os/license.key, validates against Postgres, and caches the result.",
       inputSchema: {
-        key: z65.string().startsWith("exe_sk_").describe("License key (exe_sk_*)")
+        key: z66.string().startsWith("exe_sk_").describe("License key (exe_sk_*)")
       }
     },
     async ({ key }) => {
@@ -26513,14 +26755,14 @@ var init_activate_license = __esm({
 });
 
 // src/automation/trigger-engine.ts
-import { readFileSync as readFileSync27, writeFileSync as writeFileSync19, existsSync as existsSync36, mkdirSync as mkdirSync16 } from "fs";
+import { readFileSync as readFileSync29, writeFileSync as writeFileSync20, existsSync as existsSync38, mkdirSync as mkdirSync17 } from "fs";
 import { randomUUID as randomUUID7 } from "crypto";
-import path43 from "path";
+import path45 from "path";
 import os19 from "os";
 function loadTriggers(project) {
-  if (!existsSync36(TRIGGERS_PATH)) return [];
+  if (!existsSync38(TRIGGERS_PATH)) return [];
   try {
-    const raw = readFileSync27(TRIGGERS_PATH, "utf-8");
+    const raw = readFileSync29(TRIGGERS_PATH, "utf-8");
     const all = JSON.parse(raw);
     if (!Array.isArray(all)) return [];
     if (project) {
@@ -26532,9 +26774,9 @@ function loadTriggers(project) {
   }
 }
 function saveTriggers(triggers) {
-  const dir = path43.dirname(TRIGGERS_PATH);
-  if (!existsSync36(dir)) mkdirSync16(dir, { recursive: true });
-  writeFileSync19(TRIGGERS_PATH, JSON.stringify(triggers, null, 2), "utf-8");
+  const dir = path45.dirname(TRIGGERS_PATH);
+  if (!existsSync38(dir)) mkdirSync17(dir, { recursive: true });
+  writeFileSync20(TRIGGERS_PATH, JSON.stringify(triggers, null, 2), "utf-8");
 }
 function createNewTrigger(input) {
   const triggers = loadTriggers();
@@ -26553,7 +26795,7 @@ var TRIGGERS_PATH;
 var init_trigger_engine = __esm({
   "src/automation/trigger-engine.ts"() {
     "use strict";
-    TRIGGERS_PATH = path43.join(os19.homedir(), ".exe-os", "triggers.json");
+    TRIGGERS_PATH = path45.join(os19.homedir(), ".exe-os", "triggers.json");
   }
 });
 
@@ -26703,7 +26945,7 @@ var init_schedules = __esm({
 });
 
 // src/mcp/tools/create-trigger.ts
-import { z as z66 } from "zod";
+import { z as z67 } from "zod";
 function registerCreateTrigger(server) {
   server.registerTool(
     "create_trigger",
@@ -26711,18 +26953,18 @@ function registerCreateTrigger(server) {
       title: "Create Trigger",
       description: "Create a CRM event trigger or scheduled automation. When matching events occur (e.g., Deal.updated with stage=won), configured actions fire automatically (send_whatsapp, create_task, etc.).",
       inputSchema: {
-        name: z66.string().describe("Human-readable trigger name"),
-        event: z66.string().describe(
+        name: z67.string().describe("Human-readable trigger name"),
+        event: z67.string().describe(
           'CRM event to match, e.g., "Deal.updated", "Order.created", "*" for all'
         ),
-        conditions: z66.array(conditionSchema).default([]).describe("Conditions that must all match (AND logic)"),
-        actions: z66.array(actionSchema).min(1).describe("Actions to execute when trigger fires"),
-        project: z66.string().optional().describe("Scope trigger to a specific project"),
-        enabled: z66.boolean().default(true).describe("Whether trigger is active"),
-        schedule: z66.string().optional().describe(
+        conditions: z67.array(conditionSchema).default([]).describe("Conditions that must all match (AND logic)"),
+        actions: z67.array(actionSchema).min(1).describe("Actions to execute when trigger fires"),
+        project: z67.string().optional().describe("Scope trigger to a specific project"),
+        enabled: z67.boolean().default(true).describe("Whether trigger is active"),
+        schedule: z67.string().optional().describe(
           'Cron schedule for time-based triggers, e.g., "0 9 * * *" or "Monday 9am"'
         ),
-        query: z66.string().optional().describe(
+        query: z67.string().optional().describe(
           "CRM GraphQL query to run on schedule (required if schedule is set)"
         )
       }
@@ -26799,14 +27041,14 @@ var init_create_trigger = __esm({
     "use strict";
     init_trigger_engine();
     init_schedules();
-    conditionSchema = z66.object({
-      field: z66.string().describe("Dot-path field to evaluate, e.g., 'stage' or 'amount'"),
-      op: z66.enum(["eq", "neq", "gt", "lt", "gte", "lte", "contains", "not_contains"]).describe("Comparison operator"),
-      value: z66.string().or(z66.number()).or(z66.boolean()).describe("Value to compare against")
+    conditionSchema = z67.object({
+      field: z67.string().describe("Dot-path field to evaluate, e.g., 'stage' or 'amount'"),
+      op: z67.enum(["eq", "neq", "gt", "lt", "gte", "lte", "contains", "not_contains"]).describe("Comparison operator"),
+      value: z67.string().or(z67.number()).or(z67.boolean()).describe("Value to compare against")
     });
-    actionSchema = z66.object({
-      type: z66.enum(["send_whatsapp", "send_message", "create_task", "mcp_tool"]).describe("Action type to execute"),
-      params: z66.record(z66.string(), z66.string()).describe(
+    actionSchema = z67.object({
+      type: z67.enum(["send_whatsapp", "send_message", "create_task", "mcp_tool"]).describe("Action type to execute"),
+      params: z67.record(z67.string(), z67.string()).describe(
         "Action parameters. Supports {{record.field}} templates for dynamic values."
       )
     });
@@ -26814,7 +27056,7 @@ var init_create_trigger = __esm({
 });
 
 // src/mcp/tools/list-triggers.ts
-import { z as z67 } from "zod";
+import { z as z68 } from "zod";
 function registerListTriggers(server) {
   server.registerTool(
     "list_triggers",
@@ -26822,7 +27064,7 @@ function registerListTriggers(server) {
       title: "List Triggers",
       description: "List configured CRM event triggers and scheduled automations.",
       inputSchema: {
-        project: z67.string().optional().describe("Filter triggers by project name")
+        project: z68.string().optional().describe("Filter triggers by project name")
       }
     },
     async ({ project }) => {
@@ -26863,47 +27105,47 @@ var init_list_triggers = __esm({
 });
 
 // src/automation/starter-packs/index.ts
-import { readFileSync as readFileSync28, readdirSync as readdirSync12, existsSync as existsSync37 } from "fs";
-import path44 from "path";
-import { fileURLToPath as fileURLToPath4 } from "url";
+import { readFileSync as readFileSync30, readdirSync as readdirSync12, existsSync as existsSync39 } from "fs";
+import path46 from "path";
+import { fileURLToPath as fileURLToPath5 } from "url";
 function listPacks() {
-  const packsDir = path44.join(__dirname, ".");
-  if (!existsSync37(packsDir)) return [];
+  const packsDir = path46.join(__dirname, ".");
+  if (!existsSync39(packsDir)) return [];
   return readdirSync12(packsDir, { withFileTypes: true }).filter(
-    (d) => d.isDirectory() && existsSync37(path44.join(packsDir, d.name, "custom-objects.json"))
+    (d) => d.isDirectory() && existsSync39(path46.join(packsDir, d.name, "custom-objects.json"))
   ).map((d) => d.name);
 }
 function loadPack(industry) {
-  const packDir = path44.join(__dirname, industry);
-  const objectsPath = path44.join(packDir, "custom-objects.json");
-  const triggersPath = path44.join(packDir, "triggers.json");
-  const wikiDir = path44.join(packDir, "wiki-seeds");
-  const manifestPath = path44.join(packDir, "pack.json");
-  const identityContextPath = path44.join(packDir, "identity-context.md");
-  if (!existsSync37(objectsPath)) return null;
+  const packDir = path46.join(__dirname, industry);
+  const objectsPath = path46.join(packDir, "custom-objects.json");
+  const triggersPath = path46.join(packDir, "triggers.json");
+  const wikiDir = path46.join(packDir, "wiki-seeds");
+  const manifestPath = path46.join(packDir, "pack.json");
+  const identityContextPath = path46.join(packDir, "identity-context.md");
+  if (!existsSync39(objectsPath)) return null;
   let customObjects = [];
   try {
     customObjects = JSON.parse(
-      readFileSync28(objectsPath, "utf-8")
+      readFileSync30(objectsPath, "utf-8")
     );
   } catch {
     customObjects = [];
   }
   let triggers = [];
-  if (existsSync37(triggersPath)) {
+  if (existsSync39(triggersPath)) {
     try {
       triggers = JSON.parse(
-        readFileSync28(triggersPath, "utf-8")
+        readFileSync30(triggersPath, "utf-8")
       );
     } catch {
       triggers = [];
     }
   }
   const wikiSeeds = [];
-  if (existsSync37(wikiDir)) {
+  if (existsSync39(wikiDir)) {
     const files = readdirSync12(wikiDir).filter((f) => f.endsWith(".md"));
     for (const file of files) {
-      const content = readFileSync28(path44.join(wikiDir, file), "utf-8");
+      const content = readFileSync30(path46.join(wikiDir, file), "utf-8");
       const titleMatch = content.match(/^#\s+(.+)/m);
       wikiSeeds.push({
         filename: file,
@@ -26913,17 +27155,17 @@ function loadPack(industry) {
     }
   }
   let manifest = {};
-  if (existsSync37(manifestPath)) {
+  if (existsSync39(manifestPath)) {
     try {
-      manifest = JSON.parse(readFileSync28(manifestPath, "utf-8"));
+      manifest = JSON.parse(readFileSync30(manifestPath, "utf-8"));
     } catch {
       manifest = {};
     }
   }
   let identityContext = null;
-  if (existsSync37(identityContextPath)) {
+  if (existsSync39(identityContextPath)) {
     try {
-      identityContext = readFileSync28(identityContextPath, "utf-8");
+      identityContext = readFileSync30(identityContextPath, "utf-8");
     } catch {
       identityContext = null;
     }
@@ -26982,7 +27224,7 @@ var init_starter_packs = __esm({
   "src/automation/starter-packs/index.ts"() {
     "use strict";
     init_trigger_engine();
-    __dirname = path44.dirname(fileURLToPath4(import.meta.url));
+    __dirname = path46.dirname(fileURLToPath5(import.meta.url));
   }
 });
 
@@ -27114,21 +27356,21 @@ All memory, tasks, behaviors, documents, and wiki content belonging to {{company
 });
 
 // src/lib/client-coo.ts
-import { existsSync as existsSync38, mkdirSync as mkdirSync17, writeFileSync as writeFileSync20 } from "fs";
-import path45 from "path";
+import { existsSync as existsSync40, mkdirSync as mkdirSync18, writeFileSync as writeFileSync21 } from "fs";
+import path47 from "path";
 async function provisionClientCOO(vars, opts = {}) {
-  const identityDir = opts.identityDir ?? path45.join(EXE_AI_DIR, "identity");
+  const identityDir = opts.identityDir ?? path47.join(EXE_AI_DIR, "identity");
   const rosterPath = opts.employeesPath ?? EMPLOYEES_PATH;
   const storeFeedbackBehavior = opts.storeFeedbackBehavior ?? true;
-  const identityPath2 = path45.join(identityDir, `${vars.agent_name}.md`);
-  if (existsSync38(identityPath2)) {
+  const identityPath2 = path47.join(identityDir, `${vars.agent_name}.md`);
+  if (existsSync40(identityPath2)) {
     throw new ClientCOOClobberError(vars.agent_name, identityPath2);
   }
   const body = renderClientCOOTemplate(vars);
-  if (!existsSync38(identityDir)) {
-    mkdirSync17(identityDir, { recursive: true });
+  if (!existsSync40(identityDir)) {
+    mkdirSync18(identityDir, { recursive: true });
   }
-  writeFileSync20(identityPath2, body, "utf-8");
+  writeFileSync21(identityPath2, body, "utf-8");
   const employees = await loadEmployees(rosterPath);
   const existing = employees.find((e) => e.name === vars.agent_name);
   let addedToRoster = false;
@@ -27180,7 +27422,7 @@ var init_client_coo = __esm({
 });
 
 // src/mcp/tools/apply-starter-pack.ts
-import { z as z68 } from "zod";
+import { z as z69 } from "zod";
 function registerApplyStarterPack(server) {
   server.registerTool(
     "apply_starter_pack",
@@ -27188,17 +27430,17 @@ function registerApplyStarterPack(server) {
       title: "Apply Starter Pack",
       description: "Apply an industry starter pack to a project. Sets up CRM custom objects, pre-wired automation triggers, and wiki seed content. When the pack creates a Client COO (e.g. distribution) and agent_name, company_name, founder_name are all provided, also provisions the COO identity, roster entry, and feedback-loop behavior. Available packs: distribution. More coming.",
       inputSchema: {
-        industry: z68.string().describe(
+        industry: z69.string().describe(
           'Industry pack to apply (e.g., "distribution"). Use without args to list available packs.'
         ),
-        project: z68.string().describe("Project name to scope the triggers to"),
-        agent_name: z68.string().optional().describe(
+        project: z69.string().describe("Project name to scope the triggers to"),
+        agent_name: z69.string().optional().describe(
           "Optional. Lowercase alphanumeric name for the Client COO agent. Required (alongside company_name and founder_name) to provision a COO."
         ),
-        company_name: z68.string().optional().describe(
+        company_name: z69.string().optional().describe(
           "Optional. The client company the COO serves. Required to provision a COO."
         ),
-        founder_name: z68.string().optional().describe(
+        founder_name: z69.string().optional().describe(
           "Optional. The founder the COO reports to. Required to provision a COO."
         )
       }
@@ -27350,19 +27592,19 @@ var init_apply_starter_pack = __esm({
 });
 
 // src/mcp/tools/load-skill.ts
-import { z as z69 } from "zod";
-import { readFileSync as readFileSync29, readdirSync as readdirSync13, statSync as statSync8 } from "fs";
-import path46 from "path";
-import { homedir as homedir7 } from "os";
+import { z as z70 } from "zod";
+import { readFileSync as readFileSync31, readdirSync as readdirSync13, statSync as statSync9 } from "fs";
+import path48 from "path";
+import { homedir as homedir8 } from "os";
 function listAvailableSkills() {
   try {
     const entries = readdirSync13(SKILLS_DIR);
     return entries.filter((entry) => {
       try {
-        const entryPath = path46.join(SKILLS_DIR, entry);
-        if (!statSync8(entryPath).isDirectory()) return false;
-        const skillFile = path46.join(entryPath, "SKILL.md");
-        statSync8(skillFile);
+        const entryPath = path48.join(SKILLS_DIR, entry);
+        if (!statSync9(entryPath).isDirectory()) return false;
+        const skillFile = path48.join(entryPath, "SKILL.md");
+        statSync9(skillFile);
         return true;
       } catch {
         return false;
@@ -27379,7 +27621,7 @@ function registerLoadSkill(server) {
       title: "Load Skill",
       description: "Load domain-specific guidance into your context. Use when you need specialized knowledge for a task (e.g., load_skill('seo') before doing SEO work, load_skill('code-reviewer') before reviewing code). Pass skill_name='list' to see all available skills.",
       inputSchema: {
-        skill_name: z69.string().describe(
+        skill_name: z70.string().describe(
           "Skill to load (e.g. 'seo', 'code-reviewer', 'frontend-design'). Pass 'list' to see all available skills."
         )
       }
@@ -27404,10 +27646,10 @@ ${skills.map((s) => `- ${s}`).join("\n")}`
           }]
         };
       }
-      const sanitized = path46.basename(skill_name);
-      const skillFile = path46.join(SKILLS_DIR, sanitized, "SKILL.md");
+      const sanitized = path48.basename(skill_name);
+      const skillFile = path48.join(SKILLS_DIR, sanitized, "SKILL.md");
       try {
-        const content = readFileSync29(skillFile, "utf-8");
+        const content = readFileSync31(skillFile, "utf-8");
         return {
           content: [{
             type: "text",
@@ -27436,15 +27678,15 @@ var SKILLS_DIR;
 var init_load_skill = __esm({
   "src/mcp/tools/load-skill.ts"() {
     "use strict";
-    SKILLS_DIR = path46.join(homedir7(), ".claude", "skills");
+    SKILLS_DIR = path48.join(homedir8(), ".claude", "skills");
   }
 });
 
 // src/lib/orchestration-package.ts
 import { randomUUID as randomUUID8 } from "crypto";
-import { copyFileSync as copyFileSync2, existsSync as existsSync39, mkdirSync as mkdirSync18, readFileSync as readFileSync30, writeFileSync as writeFileSync21 } from "fs";
+import { copyFileSync as copyFileSync2, existsSync as existsSync41, mkdirSync as mkdirSync19, readFileSync as readFileSync32, writeFileSync as writeFileSync22 } from "fs";
 import os20 from "os";
-import path47 from "path";
+import path49 from "path";
 function ensureObject(value, label) {
   if (value == null || Array.isArray(value) || typeof value !== "object") {
     throw new Error(`${label} must be an object`);
@@ -27503,15 +27745,15 @@ function validateProcedureEntry(value, index) {
   };
 }
 function getRosterPath() {
-  return path47.join(os20.homedir(), EXE_OS_DIRNAME, ROSTER_FILENAME);
+  return path49.join(os20.homedir(), EXE_OS_DIRNAME, ROSTER_FILENAME);
 }
 function getBackupPath() {
-  return path47.join(os20.homedir(), EXE_OS_DIRNAME, ROSTER_BACKUP_FILENAME);
+  return path49.join(os20.homedir(), EXE_OS_DIRNAME, ROSTER_BACKUP_FILENAME);
 }
 function readRosterFile() {
   const rosterPath = getRosterPath();
-  if (!existsSync39(rosterPath)) return [];
-  const raw = readFileSync30(rosterPath, "utf-8");
+  if (!existsSync41(rosterPath)) return [];
+  const raw = readFileSync32(rosterPath, "utf-8");
   const parsed = JSON.parse(raw);
   if (!Array.isArray(parsed)) {
     throw new Error("Roster file must contain a JSON array");
@@ -27523,8 +27765,8 @@ function writeRosterFile(roster) {
     throw new Error("Refusing to write empty roster \u2014 this would delete all employees");
   }
   const rosterPath = getRosterPath();
-  mkdirSync18(path47.dirname(rosterPath), { recursive: true });
-  if (existsSync39(rosterPath)) {
+  mkdirSync19(path49.dirname(rosterPath), { recursive: true });
+  if (existsSync41(rosterPath)) {
     const currentRoster = readRosterFile();
     if (roster.length < currentRoster.length) {
       throw new Error(
@@ -27533,7 +27775,7 @@ function writeRosterFile(roster) {
     }
     copyFileSync2(rosterPath, getBackupPath());
   }
-  writeFileSync21(rosterPath, `${JSON.stringify(roster, null, 2)}
+  writeFileSync22(rosterPath, `${JSON.stringify(roster, null, 2)}
 `, "utf-8");
 }
 function buildImportedRosterEntries(roster, timestamp) {
@@ -27796,9 +28038,9 @@ var init_orchestration_package = __esm({
 });
 
 // src/mcp/tools/export-orchestration.ts
-import { mkdirSync as mkdirSync19, writeFileSync as writeFileSync22 } from "fs";
-import path48 from "path";
-import { z as z70 } from "zod";
+import { mkdirSync as mkdirSync20, writeFileSync as writeFileSync23 } from "fs";
+import path50 from "path";
+import { z as z71 } from "zod";
 function registerExportOrchestration(server) {
   server.registerTool(
     "export_orchestration",
@@ -27806,15 +28048,15 @@ function registerExportOrchestration(server) {
       title: "Export Orchestration",
       description: "Export roster, identities, behaviors, and customer procedures to a JSON package.",
       inputSchema: {
-        output_path: z70.string().describe("File path to write the JSON package")
+        output_path: z71.string().describe("File path to write the JSON package")
       }
     },
     async ({ output_path }) => {
       try {
         await initStore();
         const pkg = await exportOrchestration(getActiveAgent().agentId);
-        mkdirSync19(path48.dirname(output_path), { recursive: true });
-        writeFileSync22(output_path, `${JSON.stringify(pkg, null, 2)}
+        mkdirSync20(path50.dirname(output_path), { recursive: true });
+        writeFileSync23(output_path, `${JSON.stringify(pkg, null, 2)}
 `, "utf-8");
         return {
           content: [{
@@ -27844,8 +28086,8 @@ var init_export_orchestration = __esm({
 });
 
 // src/mcp/tools/import-orchestration.ts
-import { readFileSync as readFileSync31 } from "fs";
-import { z as z71 } from "zod";
+import { readFileSync as readFileSync33 } from "fs";
+import { z as z72 } from "zod";
 function registerImportOrchestration(server) {
   server.registerTool(
     "import_orchestration",
@@ -27853,8 +28095,8 @@ function registerImportOrchestration(server) {
       title: "Import Orchestration",
       description: "Import roster, identities, behaviors, and procedures from an orchestration package. Restricted to coordinator/founder.",
       inputSchema: {
-        package_path: z71.string().describe("Path to the orchestration package JSON file"),
-        merge_strategy: z71.enum(["replace", "merge"]).default("merge").describe("How to apply the package: both strategies are additive-only \u2014 existing data is never deleted or overwritten")
+        package_path: z72.string().describe("Path to the orchestration package JSON file"),
+        merge_strategy: z72.enum(["replace", "merge"]).default("merge").describe("How to apply the package: both strategies are additive-only \u2014 existing data is never deleted or overwritten")
       }
     },
     async ({ package_path, merge_strategy }) => {
@@ -27871,7 +28113,7 @@ function registerImportOrchestration(server) {
           };
         }
         await initStore();
-        const raw = readFileSync31(package_path, "utf-8");
+        const raw = readFileSync33(package_path, "utf-8");
         const pkg = validatePackage(JSON.parse(raw));
         const result2 = await importOrchestration(pkg, merge_strategy);
         return {
@@ -27903,7 +28145,7 @@ var init_import_orchestration = __esm({
 });
 
 // src/mcp/tools/global-procedure.ts
-import { z as z72 } from "zod";
+import { z as z73 } from "zod";
 function registerCompanyProcedureTool(server, toolName) {
   server.registerTool(
     toolName,
@@ -27911,12 +28153,12 @@ function registerCompanyProcedureTool(server, toolName) {
       title: "Company Procedure",
       description: "Manage company procedures (customer-owned Layer 0 rules) that supersede identity, expertise, and experience. Actions: store (create new, restricted), list (view all, open), deactivate (soft-delete, restricted).",
       inputSchema: {
-        action: z72.enum(["store", "list", "deactivate"]).describe("Action to perform"),
-        title: z72.string().optional().describe("Short title for the procedure (store)"),
-        content: z72.string().max(500).optional().describe("The procedure content \u2014 clear, actionable instruction (store)"),
-        priority: z72.enum(["p0", "p1", "p2"]).optional().describe("Priority tier. p0 = always (default). p1 = standard. p2 = nice-to-have."),
-        domain: z72.string().optional().describe("Category: workflow, code-style, communication, architecture, testing, security"),
-        procedure_id: z72.string().optional().describe("UUID of the company procedure (deactivate)")
+        action: z73.enum(["store", "list", "deactivate"]).describe("Action to perform"),
+        title: z73.string().optional().describe("Short title for the procedure (store)"),
+        content: z73.string().max(500).optional().describe("The procedure content \u2014 clear, actionable instruction (store)"),
+        priority: z73.enum(["p0", "p1", "p2"]).optional().describe("Priority tier. p0 = always (default). p1 = standard. p2 = nice-to-have."),
+        domain: z73.string().optional().describe("Category: workflow, code-style, communication, architecture, testing, security"),
+        procedure_id: z73.string().optional().describe("UUID of the company procedure (deactivate)")
       }
     },
     async ({ action, title, content, priority, domain, procedure_id }) => {
@@ -28047,7 +28289,7 @@ var init_global_procedure = __esm({
 });
 
 // src/mcp/tools/config.ts
-import { z as z73 } from "zod";
+import { z as z74 } from "zod";
 function errorResult8(text3) {
   return { content: [{ type: "text", text: text3 }], isError: true };
 }
@@ -28064,6 +28306,7 @@ function buildHandlers5() {
   registerListAgentSessions(localServer);
   registerGetSessionKills(localServer);
   registerGetDaemonHealth(localServer);
+  registerMcpPing(localServer);
   registerGetAutoWakeStatus(localServer);
   registerGetWorkerGate(localServer);
   registerRunMemoryAudit(localServer);
@@ -28092,44 +28335,44 @@ function registerConfig(server) {
     title: "Config",
     description: "Consolidated COO/admin tool for runtime config, system health, licensing, triggers, orchestration import/export, and company procedures.",
     inputSchema: {
-      action: z73.enum(Object.keys(ACTION_TO_TOOL2)).describe("Admin/config operation"),
-      agent_id: z73.string().optional().describe("Agent id for set_agent_config/agent_spend/session queries"),
-      runtime: z73.string().optional().describe("Runtime for set_agent_config"),
-      model: z73.string().optional().describe("Model for set_agent_config"),
-      reasoning_effort: z73.string().optional().describe("Reasoning effort for Codex agents"),
-      dry_run: z73.boolean().optional().describe("Preview without applying where supported"),
-      fix: z73.boolean().optional().describe("Apply fixes for memory_audit where supported"),
-      verbose: z73.boolean().optional().describe("Verbose output where supported"),
-      project_name: z73.string().optional().describe("Project filter/name"),
-      since: z73.string().optional().describe("ISO lower-bound timestamp"),
-      limit: z73.coerce.number().optional().describe("Result limit"),
-      output_path: z73.string().optional().describe("Output path for export/backup"),
-      input_path: z73.string().optional().describe("Input path for import_orchestration"),
-      strategy: z73.enum(["merge", "replace"]).optional().describe("Import strategy; replace must still be additive-only per platform rules"),
-      license_key: z73.string().optional().describe("License key for activation/status"),
-      email: z73.string().optional().describe("Customer email for license creation"),
-      plan: z73.string().optional().describe("License plan"),
-      name: z73.string().optional().describe("Trigger/starter pack/procedure/client name"),
-      event: z73.string().optional().describe("Trigger event"),
-      conditions: z73.array(z73.record(z73.string(), z73.unknown())).optional().describe("Trigger conditions"),
-      actions: z73.array(z73.record(z73.string(), z73.unknown())).optional().describe("Trigger actions"),
-      enabled: z73.boolean().optional().describe("Trigger enabled flag"),
-      schedule: z73.string().optional().describe("Trigger schedule"),
-      query: z73.string().optional().describe("Trigger query or filter"),
-      skill_name: z73.string().optional().describe("Skill name for load_skill"),
-      pack_name: z73.string().optional().describe("Starter pack name"),
-      title: z73.string().optional().describe("Procedure title"),
-      content: z73.string().optional().describe("Procedure content"),
-      priority: z73.enum(["p0", "p1", "p2"]).optional().describe("Procedure priority"),
-      domain: z73.string().optional().describe("Procedure domain"),
-      procedure_id: z73.string().optional().describe("Procedure id for deactivate"),
-      subaction: z73.enum(["store", "list", "deactivate"]).optional().describe("Nested action for company_procedure/global_procedure"),
-      max_clusters: z73.coerce.number().optional().describe("Consolidation max clusters"),
-      force: z73.boolean().optional().describe("Force operation where supported"),
-      cloud_action: z73.enum(["status", "sync", "reupload"]).optional().describe("Nested operation for action=cloud_sync"),
-      confirm_local_db_source_of_truth: z73.string().optional().describe("Required for cloud_action=reupload; must exactly equal LOCAL DB IS SOURCE OF TRUTH"),
-      domain_name: z73.string().optional().describe("Client deployment domain"),
-      phase: z73.enum(["phase_1_coo", "phase_2_executives", "phase_3_parallel_org", "1", "2", "3"]).optional().describe("Orchestration phase for orchestration_phase action")
+      action: z74.enum(Object.keys(ACTION_TO_TOOL2)).describe("Admin/config operation"),
+      agent_id: z74.string().optional().describe("Agent id for set_agent_config/agent_spend/session queries"),
+      runtime: z74.string().optional().describe("Runtime for set_agent_config"),
+      model: z74.string().optional().describe("Model for set_agent_config"),
+      reasoning_effort: z74.string().optional().describe("Reasoning effort for Codex agents"),
+      dry_run: z74.boolean().optional().describe("Preview without applying where supported"),
+      fix: z74.boolean().optional().describe("Apply fixes for memory_audit where supported"),
+      verbose: z74.boolean().optional().describe("Verbose output where supported"),
+      project_name: z74.string().optional().describe("Project filter/name"),
+      since: z74.string().optional().describe("ISO lower-bound timestamp"),
+      limit: z74.coerce.number().optional().describe("Result limit"),
+      output_path: z74.string().optional().describe("Output path for export/backup"),
+      input_path: z74.string().optional().describe("Input path for import_orchestration"),
+      strategy: z74.enum(["merge", "replace"]).optional().describe("Import strategy; replace must still be additive-only per platform rules"),
+      license_key: z74.string().optional().describe("License key for activation/status"),
+      email: z74.string().optional().describe("Customer email for license creation"),
+      plan: z74.string().optional().describe("License plan"),
+      name: z74.string().optional().describe("Trigger/starter pack/procedure/client name"),
+      event: z74.string().optional().describe("Trigger event"),
+      conditions: z74.array(z74.record(z74.string(), z74.unknown())).optional().describe("Trigger conditions"),
+      actions: z74.array(z74.record(z74.string(), z74.unknown())).optional().describe("Trigger actions"),
+      enabled: z74.boolean().optional().describe("Trigger enabled flag"),
+      schedule: z74.string().optional().describe("Trigger schedule"),
+      query: z74.string().optional().describe("Trigger query or filter"),
+      skill_name: z74.string().optional().describe("Skill name for load_skill"),
+      pack_name: z74.string().optional().describe("Starter pack name"),
+      title: z74.string().optional().describe("Procedure title"),
+      content: z74.string().optional().describe("Procedure content"),
+      priority: z74.enum(["p0", "p1", "p2"]).optional().describe("Procedure priority"),
+      domain: z74.string().optional().describe("Procedure domain"),
+      procedure_id: z74.string().optional().describe("Procedure id for deactivate"),
+      subaction: z74.enum(["store", "list", "deactivate"]).optional().describe("Nested action for company_procedure/global_procedure"),
+      max_clusters: z74.coerce.number().optional().describe("Consolidation max clusters"),
+      force: z74.boolean().optional().describe("Force operation where supported"),
+      cloud_action: z74.enum(["status", "sync", "reupload"]).optional().describe("Nested operation for action=cloud_sync"),
+      confirm_local_db_source_of_truth: z74.string().optional().describe("Required for cloud_action=reupload; must exactly equal LOCAL DB IS SOURCE OF TRUTH"),
+      domain_name: z74.string().optional().describe("Client deployment domain"),
+      phase: z74.enum(["phase_1_coo", "phase_2_executives", "phase_3_parallel_org", "1", "2", "3"]).optional().describe("Orchestration phase for orchestration_phase action")
     }
   }, async (input, extra) => {
     const action = input.action;
@@ -28161,6 +28404,7 @@ var init_config2 = __esm({
     init_list_agent_sessions();
     init_get_session_kills();
     init_get_daemon_health();
+    init_mcp_ping();
     init_get_auto_wake_status();
     init_get_worker_gate();
     init_run_memory_audit();
@@ -28187,6 +28431,7 @@ var init_config2 = __esm({
       list_agent_sessions: "list_agent_sessions",
       session_kills: "get_session_kills",
       daemon_health: "get_daemon_health",
+      mcp_ping: "mcp_ping",
       auto_wake_status: "get_auto_wake_status",
       worker_gate: "get_worker_gate",
       memory_audit: "run_memory_audit",
@@ -28212,7 +28457,7 @@ var init_config2 = __esm({
 });
 
 // src/mcp/tools/list-wiki-pages.ts
-import { z as z74 } from "zod";
+import { z as z75 } from "zod";
 function registerListWikiPages(server) {
   server.registerTool(
     "list_wiki_pages",
@@ -28220,8 +28465,8 @@ function registerListWikiPages(server) {
       title: "List Wiki Pages",
       description: "List documents in an exe-wiki workspace. Optionally filter by folder.",
       inputSchema: {
-        workspace: z74.string().describe('Wiki workspace slug (e.g., "hygo")'),
-        folder: z74.string().optional().describe("Filter by folder path")
+        workspace: z75.string().describe('Wiki workspace slug (e.g., "hygo")'),
+        folder: z75.string().optional().describe("Filter by folder path")
       }
     },
     async ({ workspace, folder }) => {
@@ -28317,7 +28562,7 @@ var init_list_wiki_pages = __esm({
 });
 
 // src/mcp/tools/get-wiki-page.ts
-import { z as z75 } from "zod";
+import { z as z76 } from "zod";
 function registerGetWikiPage(server) {
   server.registerTool(
     "get_wiki_page",
@@ -28325,9 +28570,9 @@ function registerGetWikiPage(server) {
       title: "Get Wiki Page",
       description: "Read a wiki page by document ID or title. Returns content, metadata, and folder path. Use title search when you know the page name but not the ID.",
       inputSchema: {
-        workspace: z75.string().describe('Wiki workspace slug (e.g., "hygo")'),
-        document_id: z75.string().optional().describe("Specific document ID (exact lookup)"),
-        title: z75.string().optional().describe("Search by title (fuzzy match)")
+        workspace: z76.string().describe('Wiki workspace slug (e.g., "hygo")'),
+        document_id: z76.string().optional().describe("Specific document ID (exact lookup)"),
+        title: z76.string().optional().describe("Search by title (fuzzy match)")
       }
     },
     async ({ workspace, document_id, title }) => {
@@ -28483,7 +28728,7 @@ var init_get_wiki_page = __esm({
 });
 
 // src/mcp/tools/wiki.ts
-import { z as z76 } from "zod";
+import { z as z77 } from "zod";
 function errorResult9(text3) {
   return { content: [{ type: "text", text: text3 }], isError: true };
 }
@@ -28509,14 +28754,14 @@ function registerWiki(server) {
       title: "Wiki",
       description: "Consolidated wiki domain tool. Actions: list, get. Wiki writes flow through raw data ingestion/projection into the curated wiki store; direct create/update MCP tools have been removed.",
       inputSchema: {
-        action: z76.enum(["list", "get"]).describe("Wiki read operation. Writes use raw-data ingestion/projection, not direct MCP writes."),
-        workspace: z76.string().optional().describe("Wiki workspace slug"),
-        title: z76.string().optional().describe("Fuzzy page title lookup for get"),
-        content: z76.string().optional().describe("Reserved; wiki writes use raw-data ingestion/projection"),
-        folder: z76.string().optional().describe("Optional folder path for list"),
-        document_id: z76.string().optional().describe("Document ID for get"),
-        mode: z76.enum(["replace", "append"]).optional().describe("Reserved; direct wiki updates are removed"),
-        section: z76.string().optional().describe("Reserved; direct wiki updates are removed")
+        action: z77.enum(["list", "get"]).describe("Wiki read operation. Writes use raw-data ingestion/projection, not direct MCP writes."),
+        workspace: z77.string().optional().describe("Wiki workspace slug"),
+        title: z77.string().optional().describe("Fuzzy page title lookup for get"),
+        content: z77.string().optional().describe("Reserved; wiki writes use raw-data ingestion/projection"),
+        folder: z77.string().optional().describe("Optional folder path for list"),
+        document_id: z77.string().optional().describe("Document ID for get"),
+        mode: z77.enum(["replace", "append"]).optional().describe("Reserved; direct wiki updates are removed"),
+        section: z77.string().optional().describe("Reserved; direct wiki updates are removed")
       }
     },
     async (input, extra) => {
@@ -28555,7 +28800,7 @@ var init_wiki = __esm({
 });
 
 // src/mcp/tools/behavior.ts
-import { z as z77 } from "zod";
+import { z as z78 } from "zod";
 function rowToBehavior2(r) {
   return {
     id: String(r.id),
@@ -28577,13 +28822,13 @@ function registerBehavior(server) {
       title: "Behavior",
       description: "Manage behavioral patterns, corrections, and reusable procedures for employees. Actions: store (create new), list (query existing), deactivate (soft-delete, restricted).",
       inputSchema: {
-        action: z77.enum(["store", "list", "deactivate"]).describe("Action to perform"),
-        content: z77.string().max(500).optional().describe("The behavioral instruction \u2014 one clear sentence (store)"),
-        domain: z77.string().optional().describe("Category: workflow, code-style, tool-use, communication, architecture, testing"),
-        priority: z77.enum(["p0", "p1", "p2"]).optional().describe("Priority tier. p0 = always included. p1 = standard (default). p2 = nice-to-have."),
-        agent_id: z77.string().optional().describe("Employee name. Defaults to current agent. Pass 'all' to list everyone's (list only)."),
-        project_name: z77.string().optional().describe("Defaults to current project. Pass 'global' for a behavior that applies everywhere (store)."),
-        behavior_id: z77.string().optional().describe("UUID of the behavior (deactivate)")
+        action: z78.enum(["store", "list", "deactivate"]).describe("Action to perform"),
+        content: z78.string().max(500).optional().describe("The behavioral instruction \u2014 one clear sentence (store)"),
+        domain: z78.string().optional().describe("Category: workflow, code-style, tool-use, communication, architecture, testing"),
+        priority: z78.enum(["p0", "p1", "p2"]).optional().describe("Priority tier. p0 = always included. p1 = standard (default). p2 = nice-to-have."),
+        agent_id: z78.string().optional().describe("Employee name. Defaults to current agent. Pass 'all' to list everyone's (list only)."),
+        project_name: z78.string().optional().describe("Defaults to current project. Pass 'global' for a behavior that applies everywhere (store)."),
+        behavior_id: z78.string().optional().describe("UUID of the behavior (deactivate)")
       }
     },
     async ({ action, content, domain, priority, agent_id, project_name, behavior_id }) => {
@@ -28764,7 +29009,7 @@ var init_behavior = __esm({
 });
 
 // src/mcp/tools/reminder.ts
-import { z as z78 } from "zod";
+import { z as z79 } from "zod";
 function registerReminder(server) {
   server.registerTool(
     "reminder",
@@ -28772,11 +29017,11 @@ function registerReminder(server) {
       title: "Reminder",
       description: "Manage reminders for the founder. Shown in the boot brief every session. Actions: create (set new), list (view active), complete (mark done).",
       inputSchema: {
-        action: z78.enum(["create", "list", "complete"]).describe("Action to perform"),
-        text: z78.string().optional().describe("What to remind about (create)"),
-        due_date: z78.string().optional().describe("Optional due date \u2014 ISO date (2026-04-01) or null for persistent (create)"),
-        reminder_id: z78.string().optional().describe("Reminder UUID or text substring to match (complete)"),
-        include_completed: z78.boolean().optional().default(false).describe("Include completed reminders (list)")
+        action: z79.enum(["create", "list", "complete"]).describe("Action to perform"),
+        text: z79.string().optional().describe("What to remind about (create)"),
+        due_date: z79.string().optional().describe("Optional due date \u2014 ISO date (2026-04-01) or null for persistent (create)"),
+        reminder_id: z79.string().optional().describe("Reminder UUID or text substring to match (complete)"),
+        include_completed: z79.boolean().optional().default(false).describe("Include completed reminders (list)")
       }
     },
     async ({ action, text: text3, due_date, reminder_id, include_completed }) => {
@@ -28835,7 +29080,7 @@ var init_reminder = __esm({
 });
 
 // src/mcp/tools/store-global-procedure.ts
-import { z as z79 } from "zod";
+import { z as z80 } from "zod";
 function registerStoreGlobalProcedure(server) {
   server.registerTool(
     "store_global_procedure",
@@ -28843,10 +29088,10 @@ function registerStoreGlobalProcedure(server) {
       title: "Store Company Procedure (use global_procedure instead)",
       description: "DEPRECATED \u2014 use global_procedure with action='store'. Create a company procedure (customer-owned Layer 0 rule). RESTRICTED: only coordinator or founder sessions.",
       inputSchema: {
-        title: z79.string().describe("Short title for the procedure"),
-        content: z79.string().max(500).describe("The procedure content \u2014 clear, actionable instruction"),
-        priority: z79.enum(["p0", "p1", "p2"]).optional().describe("Priority tier. p0 = always (default)."),
-        domain: z79.string().optional().describe("Category: workflow, code-style, communication, architecture, testing, security")
+        title: z80.string().describe("Short title for the procedure"),
+        content: z80.string().max(500).describe("The procedure content \u2014 clear, actionable instruction"),
+        priority: z80.enum(["p0", "p1", "p2"]).optional().describe("Priority tier. p0 = always (default)."),
+        domain: z80.string().optional().describe("Category: workflow, code-style, communication, architecture, testing, security")
       }
     },
     async ({ title, content, priority, domain }) => {
@@ -28933,7 +29178,7 @@ var init_list_global_procedures = __esm({
 });
 
 // src/mcp/tools/deactivate-global-procedure.ts
-import { z as z80 } from "zod";
+import { z as z81 } from "zod";
 function registerDeactivateGlobalProcedure(server) {
   server.registerTool(
     "deactivate_global_procedure",
@@ -28941,7 +29186,7 @@ function registerDeactivateGlobalProcedure(server) {
       title: "Deactivate Company Procedure (use global_procedure instead)",
       description: "DEPRECATED \u2014 use global_procedure with action='deactivate'. Soft-delete a company procedure. RESTRICTED: only coordinator or founder sessions.",
       inputSchema: {
-        procedure_id: z80.string().describe("UUID of the company procedure to deactivate")
+        procedure_id: z81.string().describe("UUID of the company procedure to deactivate")
       }
     },
     async ({ procedure_id }) => {
@@ -29005,7 +29250,7 @@ var init_deactivate_global_procedure = __esm({
 });
 
 // src/mcp/tools/store-decision.ts
-import { z as z81 } from "zod";
+import { z as z82 } from "zod";
 import crypto18 from "crypto";
 function registerStoreDecision(server) {
   server.registerTool(
@@ -29014,13 +29259,13 @@ function registerStoreDecision(server) {
       title: "Store Decision",
       description: "Store an authoritative decision keyed by domain. Use this when a decision is made that should be canonical \u2014 future lookups via get_decision return the latest decision for that domain. Supports supersession chains.",
       inputSchema: {
-        domain: z81.string().describe(
+        domain: z82.string().describe(
           "Domain key, e.g. 'auth-strategy', 'db-migration-approach', 'api-versioning'"
         ),
-        decision: z81.string().describe("The decision text \u2014 what was decided"),
-        rationale: z81.string().optional().describe("Why this decision was made \u2014 constraints, trade-offs, context"),
-        supersedes: z81.string().optional().describe("UUID of the decision this supersedes (previous decision for this domain)"),
-        project_name: z81.string().optional().describe("Project name")
+        decision: z82.string().describe("The decision text \u2014 what was decided"),
+        rationale: z82.string().optional().describe("Why this decision was made \u2014 constraints, trade-offs, context"),
+        supersedes: z82.string().optional().describe("UUID of the decision this supersedes (previous decision for this domain)"),
+        project_name: z82.string().optional().describe("Project name")
       }
     },
     async ({ domain, decision, rationale, supersedes, project_name }) => {
@@ -29097,7 +29342,7 @@ var init_store_decision = __esm({
 });
 
 // src/mcp/tools/get-decision.ts
-import { z as z82 } from "zod";
+import { z as z83 } from "zod";
 function registerGetDecision(server) {
   server.registerTool(
     "get_decision",
@@ -29105,7 +29350,7 @@ function registerGetDecision(server) {
       title: "Get Decision",
       description: "Retrieve the latest authoritative decision for a domain. Returns the current active decision and the supersession history.",
       inputSchema: {
-        domain: z82.string().describe(
+        domain: z83.string().describe(
           "Domain key to look up, e.g. 'auth-strategy', 'db-migration-approach'"
         )
       }
@@ -29175,10 +29420,10 @@ var init_get_decision = __esm({
 
 // src/lib/people.ts
 import { readFile as readFile5, writeFile as writeFile6, mkdir as mkdir5 } from "fs/promises";
-import { existsSync as existsSync40, readFileSync as readFileSync32 } from "fs";
-import path49 from "path";
+import { existsSync as existsSync42, readFileSync as readFileSync34 } from "fs";
+import path51 from "path";
 async function loadPeople() {
-  if (!existsSync40(PEOPLE_PATH)) return [];
+  if (!existsSync42(PEOPLE_PATH)) return [];
   try {
     const raw = await readFile5(PEOPLE_PATH, "utf-8");
     return JSON.parse(raw);
@@ -29187,7 +29432,7 @@ async function loadPeople() {
   }
 }
 async function savePeople(people) {
-  await mkdir5(path49.dirname(PEOPLE_PATH), { recursive: true });
+  await mkdir5(path51.dirname(PEOPLE_PATH), { recursive: true });
   await writeFile6(PEOPLE_PATH, JSON.stringify(people, null, 2) + "\n", "utf-8");
 }
 async function addPerson(person) {
@@ -29213,12 +29458,12 @@ var init_people = __esm({
   "src/lib/people.ts"() {
     "use strict";
     init_config();
-    PEOPLE_PATH = path49.join(EXE_AI_DIR, "people.json");
+    PEOPLE_PATH = path51.join(EXE_AI_DIR, "people.json");
   }
 });
 
 // src/mcp/tools/people-roster.ts
-import { z as z83 } from "zod";
+import { z as z84 } from "zod";
 function registerAddPerson(server) {
   server.registerTool(
     "add_person",
@@ -29226,10 +29471,10 @@ function registerAddPerson(server) {
       title: "Add Person",
       description: "Add or update a key human in the people roster. Used for co-founders, partners, customers \u2014 anyone agents need to know about.",
       inputSchema: {
-        name: z83.string().describe("Person's name"),
-        role: z83.string().describe("Their role (e.g. co-founder, customer, partner)"),
-        relationship: z83.string().describe("Relationship to the organization (e.g. co-founder, early adopter, investor)"),
-        notes: z83.string().optional().describe("Additional context about this person")
+        name: z84.string().describe("Person's name"),
+        role: z84.string().describe("Their role (e.g. co-founder, customer, partner)"),
+        relationship: z84.string().describe("Relationship to the organization (e.g. co-founder, early adopter, investor)"),
+        notes: z84.string().optional().describe("Additional context about this person")
       }
     },
     async ({ name, role, relationship, notes }) => {
@@ -29275,7 +29520,7 @@ function registerGetPerson(server) {
       title: "Get Person",
       description: "Look up a specific person by name from the people roster.",
       inputSchema: {
-        name: z83.string().describe("Person's name to look up")
+        name: z84.string().describe("Person's name to look up")
       }
     },
     async ({ name }) => {
@@ -29305,7 +29550,7 @@ var init_people_roster = __esm({
 });
 
 // src/lib/exe-db-read.ts
-import path50 from "path";
+import path52 from "path";
 import os21 from "os";
 import { createRequire as createRequire6 } from "module";
 import { pathToFileURL as pathToFileURL6 } from "url";
@@ -29322,8 +29567,8 @@ async function getExeDbReadClient() {
         if (!Ctor2) throw new Error(`No PrismaClient export found at ${explicitPath}`);
         return new Ctor2();
       }
-      const exeDbRoot = process.env.EXE_DB_ROOT ?? path50.join(os21.homedir(), "exe-db");
-      const req = createRequire6(path50.join(exeDbRoot, "package.json"));
+      const exeDbRoot = process.env.EXE_DB_ROOT ?? path52.join(os21.homedir(), "exe-db");
+      const req = createRequire6(path52.join(exeDbRoot, "package.json"));
       const entry = req.resolve("@prisma/client");
       const mod = await import(pathToFileURL6(entry).href);
       const Ctor = mod.PrismaClient ?? mod.default?.PrismaClient;
@@ -29350,7 +29595,7 @@ var init_exe_db_read = __esm({
 });
 
 // src/mcp/tools/crm.ts
-import { z as z84 } from "zod";
+import { z as z85 } from "zod";
 function text(content, isError = false) {
   return { content: [{ type: "text", text: content }], ...isError ? { isError: true } : {} };
 }
@@ -29364,12 +29609,12 @@ function registerCrm(server) {
     title: "CRM",
     description: "Read-only CRM access from exe-db crm schema. Actions: list_people, get_person, list_tables, describe_table.",
     inputSchema: {
-      action: z84.enum(["list_people", "get_person", "list_tables", "describe_table"]).describe("CRM read operation"),
-      id: z84.string().optional().describe("CRM row/person id for get_person"),
-      query: z84.string().optional().describe("Text search for list_people/get_person"),
-      table: z84.string().optional().describe("crm schema table name for describe_table"),
-      limit: z84.coerce.number().int().min(1).max(50).optional().describe("Max rows, capped at 50"),
-      offset: z84.coerce.number().int().min(0).optional().describe("Rows to skip")
+      action: z85.enum(["list_people", "get_person", "list_tables", "describe_table"]).describe("CRM read operation"),
+      id: z85.string().optional().describe("CRM row/person id for get_person"),
+      query: z85.string().optional().describe("Text search for list_people/get_person"),
+      table: z85.string().optional().describe("crm schema table name for describe_table"),
+      limit: z85.coerce.number().int().min(1).max(50).optional().describe("Max rows, capped at 50"),
+      offset: z85.coerce.number().int().min(0).optional().describe("Rows to skip")
     }
   }, async ({ action, id, query, table, limit, offset }) => {
     try {
@@ -29434,7 +29679,7 @@ var init_crm = __esm({
 });
 
 // src/mcp/tools/raw-data.ts
-import { z as z85 } from "zod";
+import { z as z86 } from "zod";
 function text2(content, isError = false) {
   return { content: [{ type: "text", text: content }], ...isError ? { isError: true } : {} };
 }
@@ -29443,15 +29688,15 @@ function registerRawData(server) {
     title: "Raw Data",
     description: "Read-only access to exe-db raw.raw_events landing pad. Actions: list_sources, query, get. Results are capped because raw payloads can consume many tokens.",
     inputSchema: {
-      action: z85.enum(["list_sources", "query", "get"]).describe("Raw data read operation"),
-      id: z85.string().optional().describe("raw.raw_events id for action=get"),
-      source: z85.string().optional().describe("Filter by raw source"),
-      event_type: z85.string().optional().describe("Filter by event_type"),
-      query: z85.string().optional().describe("Search payload/metadata text"),
-      processed: z85.boolean().optional().describe("Filter processed_at IS NULL/NOT NULL"),
-      limit: z85.coerce.number().int().min(1).max(50).optional().describe("Max rows, capped at 50"),
-      offset: z85.coerce.number().int().min(0).optional().describe("Rows to skip"),
-      include_payload: z85.boolean().optional().describe("Include full payload JSON. Default false to save tokens.")
+      action: z86.enum(["list_sources", "query", "get"]).describe("Raw data read operation"),
+      id: z86.string().optional().describe("raw.raw_events id for action=get"),
+      source: z86.string().optional().describe("Filter by raw source"),
+      event_type: z86.string().optional().describe("Filter by event_type"),
+      query: z86.string().optional().describe("Search payload/metadata text"),
+      processed: z86.boolean().optional().describe("Filter processed_at IS NULL/NOT NULL"),
+      limit: z86.coerce.number().int().min(1).max(50).optional().describe("Max rows, capped at 50"),
+      offset: z86.coerce.number().int().min(0).optional().describe("Rows to skip"),
+      include_payload: z86.boolean().optional().describe("Include full payload JSON. Default false to save tokens.")
     }
   }, async ({ action, id, source, event_type, query, processed, limit, offset, include_payload }) => {
     try {
@@ -29519,10 +29764,10 @@ var init_raw_data = __esm({
 });
 
 // src/mcp/tools/create-bug-report.ts
-import { z as z86 } from "zod";
+import { z as z87 } from "zod";
 import crypto19 from "crypto";
 import { mkdir as mkdir6, writeFile as writeFile7 } from "fs/promises";
-import path51 from "path";
+import path53 from "path";
 function slugify2(input) {
   return input.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 80) || "bug-report";
 }
@@ -29600,22 +29845,22 @@ function registerCreateBugReport(server) {
       title: "Create Bug Report",
       description: "Classify and file an exe-os issue as upstream_bug, customer_customization, emergency_hotfix, or unclear. Writes a local report, stores memory, and optionally sends to AskExe support when a support endpoint is configured.",
       inputSchema: {
-        title: z86.string().min(3).describe("Short descriptive title"),
+        title: z87.string().min(3).describe("Short descriptive title"),
         classification: CLASSIFICATION.describe(
           "upstream_bug = platform defect; customer_customization = local preference; emergency_hotfix = temporary local patch; unclear = needs maintainer triage"
         ),
         severity: SEVERITY.default("p2").describe("p0 critical \u2192 p3 low"),
-        summary: z86.string().min(10).describe("What happened and why it matters"),
-        customer_impact: z86.string().optional().describe("How this affects the customer/founder"),
-        reproduction_steps: z86.array(z86.string()).optional().describe("Steps to reproduce"),
-        expected: z86.string().optional().describe("Expected behavior"),
-        actual: z86.string().optional().describe("Actual behavior"),
-        files_changed: z86.array(z86.string()).optional().describe("Files changed or suspected"),
-        workaround: z86.string().optional().describe("Temporary local workaround/hotfix, if any"),
-        local_patch_diff: z86.string().optional().describe("Small local diff or patch summary"),
-        package_version: z86.string().optional().describe("Installed @askexenow/exe-os version"),
-        project_name: z86.string().optional().describe("Project/customer context"),
-        send_upstream: z86.boolean().default(true).describe("Attempt to POST to configured AskExe support endpoint")
+        summary: z87.string().min(10).describe("What happened and why it matters"),
+        customer_impact: z87.string().optional().describe("How this affects the customer/founder"),
+        reproduction_steps: z87.array(z87.string()).optional().describe("Steps to reproduce"),
+        expected: z87.string().optional().describe("Expected behavior"),
+        actual: z87.string().optional().describe("Actual behavior"),
+        files_changed: z87.array(z87.string()).optional().describe("Files changed or suspected"),
+        workaround: z87.string().optional().describe("Temporary local workaround/hotfix, if any"),
+        local_patch_diff: z87.string().optional().describe("Small local diff or patch summary"),
+        package_version: z87.string().optional().describe("Installed @askexenow/exe-os version"),
+        project_name: z87.string().optional().describe("Project/customer context"),
+        send_upstream: z87.boolean().default(true).describe("Attempt to POST to configured AskExe support endpoint")
       }
     },
     async ({
@@ -29655,9 +29900,9 @@ function registerCreateBugReport(server) {
         filesChanged: files_changed,
         projectName: project_name
       });
-      const outDir = path51.join(EXE_AI_DIR, "bug-reports");
+      const outDir = path53.join(EXE_AI_DIR, "bug-reports");
       await mkdir6(outDir, { recursive: true });
-      const reportPath = path51.join(outDir, `${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}-${slugify2(title)}-${id.slice(0, 8)}.md`);
+      const reportPath = path53.join(outDir, `${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}-${slugify2(title)}-${id.slice(0, 8)}.md`);
       await writeFile7(reportPath, markdown, "utf-8");
       let vector = null;
       try {
@@ -29731,36 +29976,36 @@ var init_create_bug_report = __esm({
     init_config();
     init_license();
     init_store();
-    CLASSIFICATION = z86.enum([
+    CLASSIFICATION = z87.enum([
       "upstream_bug",
       "customer_customization",
       "emergency_hotfix",
       "unclear"
     ]);
-    SEVERITY = z86.enum(["p0", "p1", "p2", "p3"]);
+    SEVERITY = z87.enum(["p0", "p1", "p2", "p3"]);
   }
 });
 
 // src/lib/code-context-index.ts
 import crypto20 from "crypto";
-import path52 from "path";
-import { existsSync as existsSync41, mkdirSync as mkdirSync20, readFileSync as readFileSync33, statSync as statSync9, writeFileSync as writeFileSync23 } from "fs";
+import path54 from "path";
+import { existsSync as existsSync43, mkdirSync as mkdirSync21, readFileSync as readFileSync35, statSync as statSync10, writeFileSync as writeFileSync24 } from "fs";
 import { spawnSync } from "child_process";
 function normalizeProjectRoot(projectRoot) {
-  return path52.resolve(projectRoot || process.cwd());
+  return path54.resolve(projectRoot || process.cwd());
 }
 function hashText(text3) {
   return crypto20.createHash("sha256").update(text3).digest("hex");
 }
 function indexDir() {
-  const dir = path52.join(EXE_AI_DIR, "code-context");
-  mkdirSync20(dir, { recursive: true });
+  const dir = path54.join(EXE_AI_DIR, "code-context");
+  mkdirSync21(dir, { recursive: true });
   return dir;
 }
 function getCodeContextIndexPath(projectRoot) {
   const root = normalizeProjectRoot(projectRoot);
   const rootHash = hashText(root).slice(0, 16);
-  return path52.join(indexDir(), `${rootHash}.json`);
+  return path54.join(indexDir(), `${rootHash}.json`);
 }
 function currentBranch(projectRoot) {
   const result2 = spawnSync("git", ["branch", "--show-current"], {
@@ -29772,11 +30017,11 @@ function currentBranch(projectRoot) {
   return branch || "detached-or-unknown";
 }
 function shouldIgnore(relPath) {
-  const parts = relPath.split(path52.sep);
+  const parts = relPath.split(path54.sep);
   return parts.some((part) => IGNORE_SEGMENTS.has(part));
 }
 function isCodeFile(relPath) {
-  return CODE_EXTENSIONS.has(path52.extname(relPath).toLowerCase());
+  return CODE_EXTENSIONS.has(path54.extname(relPath).toLowerCase());
 }
 function listCodeFiles(projectRoot, maxFiles) {
   const git = spawnSync("git", ["ls-files", "*.ts", "*.tsx", "*.js", "*.jsx"], {
@@ -29818,7 +30063,7 @@ function parseImportPaths2(importText) {
 }
 function resolveImport(fromFile, importPath, allFiles) {
   if (!importPath.startsWith(".")) return null;
-  const base = path52.posix.normalize(path52.posix.join(path52.posix.dirname(fromFile.replaceAll(path52.sep, "/")), importPath));
+  const base = path54.posix.normalize(path54.posix.join(path54.posix.dirname(fromFile.replaceAll(path54.sep, "/")), importPath));
   const withoutKnownExt = base.replace(/\.(?:js|jsx|ts|tsx)$/, "");
   const candidates = [
     base,
@@ -29830,10 +30075,10 @@ function resolveImport(fromFile, importPath, allFiles) {
     `${base}.tsx`,
     `${base}.js`,
     `${base}.jsx`,
-    path52.posix.join(base, "index.ts"),
-    path52.posix.join(base, "index.tsx"),
-    path52.posix.join(base, "index.js"),
-    path52.posix.join(base, "index.jsx")
+    path54.posix.join(base, "index.ts"),
+    path54.posix.join(base, "index.tsx"),
+    path54.posix.join(base, "index.js"),
+    path54.posix.join(base, "index.jsx")
   ];
   return candidates.find((candidate) => allFiles.has(candidate)) ?? null;
 }
@@ -29842,9 +30087,9 @@ function symbolId(filePath, chunk) {
 }
 function loadIndex(projectRoot) {
   const file = getCodeContextIndexPath(projectRoot);
-  if (!existsSync41(file)) return null;
+  if (!existsSync43(file)) return null;
   try {
-    const parsed = JSON.parse(readFileSync33(file, "utf8"));
+    const parsed = JSON.parse(readFileSync35(file, "utf8"));
     if (parsed.version !== INDEX_VERSION || parsed.projectRoot !== projectRoot) return null;
     return parsed;
   } catch {
@@ -29852,18 +30097,18 @@ function loadIndex(projectRoot) {
   }
 }
 function saveIndex(index) {
-  writeFileSync23(getCodeContextIndexPath(index.projectRoot), JSON.stringify(index, null, 2));
+  writeFileSync24(getCodeContextIndexPath(index.projectRoot), JSON.stringify(index, null, 2));
 }
 function buildFileRecord(projectRoot, relPath, allFiles, previous) {
-  const absPath = path52.join(projectRoot, relPath);
+  const absPath = path54.join(projectRoot, relPath);
   let stat;
   try {
-    stat = statSync9(absPath);
+    stat = statSync10(absPath);
   } catch {
     return null;
   }
   if (!stat.isFile()) return null;
-  const source = readFileSync33(absPath, "utf8");
+  const source = readFileSync35(absPath, "utf8");
   const hash = hashText(source);
   if (previous && previous.hash === hash && previous.mtimeMs === stat.mtimeMs && previous.size === stat.size) {
     return previous;
@@ -29900,10 +30145,10 @@ function buildCodeContextIndex(options = {}) {
   const branch = currentBranch(projectRoot);
   const previous = options.force ? null : loadIndex(projectRoot);
   const files = listCodeFiles(projectRoot, maxFiles);
-  const allFiles = new Set(files.map((file) => file.replaceAll(path52.sep, "/")));
+  const allFiles = new Set(files.map((file) => file.replaceAll(path54.sep, "/")));
   const fileRecords = {};
   for (const rel of files) {
-    const normalized = rel.replaceAll(path52.sep, "/");
+    const normalized = rel.replaceAll(path54.sep, "/");
     const record = buildFileRecord(projectRoot, normalized, allFiles, previous?.files[normalized]);
     if (record) fileRecords[normalized] = record;
   }
@@ -29925,11 +30170,11 @@ function loadOrBuildCodeContextIndex(options = {}) {
     if (loaded) {
       const currentFiles = listCodeFiles(projectRoot, options.maxFiles ?? DEFAULT_MAX_FILES);
       const unchanged = currentFiles.every((rel) => {
-        const normalized = rel.replaceAll(path52.sep, "/");
+        const normalized = rel.replaceAll(path54.sep, "/");
         const existing = loaded.files[normalized];
         if (!existing) return false;
         try {
-          const stat = statSync9(path52.join(projectRoot, normalized));
+          const stat = statSync10(path54.join(projectRoot, normalized));
           return stat.mtimeMs === existing.mtimeMs && stat.size === existing.size;
         } catch {
           return false;
@@ -30032,7 +30277,7 @@ function traceCodeSymbol(symbolName, options = {}) {
 }
 function resolveTargetFile(index, input) {
   if (input.filePath) {
-    const normalized = input.filePath.replaceAll(path52.sep, "/").replace(/^\.\//, "");
+    const normalized = input.filePath.replaceAll(path54.sep, "/").replace(/^\.\//, "");
     if (index.files[normalized]) return { filePath: normalized, target: normalized };
     const suffix = Object.keys(index.files).find((file) => file.endsWith(normalized));
     if (suffix) return { filePath: suffix, target: input.filePath };
@@ -30062,7 +30307,7 @@ function analyzeBlastRadius(input) {
       }
     }
   }
-  const targetBase = path52.basename(target.filePath).replace(/\.[^.]+$/, "").toLowerCase();
+  const targetBase = path54.basename(target.filePath).replace(/\.[^.]+$/, "").toLowerCase();
   const symbolLower = input.symbol?.toLowerCase();
   const tests = Object.keys(index.files).filter((file) => {
     const lower = file.toLowerCase();
@@ -30109,7 +30354,7 @@ var init_code_context_index = __esm({
 });
 
 // src/mcp/tools/code-context.ts
-import { z as z87 } from "zod";
+import { z as z88 } from "zod";
 function errorResult10(text3) {
   return { content: [{ type: "text", text: text3 }], isError: true };
 }
@@ -30121,15 +30366,15 @@ function registerCodeContext(server) {
     title: "Code Context",
     description: "Persistent codebase context engine. One consolidated tool to avoid MCP bloat. Actions: index, search, trace, blast_radius, stats.",
     inputSchema: {
-      action: z87.enum(["index", "search", "trace", "blast_radius", "stats"]).describe("Code context operation"),
-      project_root: z87.string().optional().describe("Repository root. Defaults to current working directory."),
-      query: z87.string().optional().describe("Search query for action=search"),
-      symbol: z87.string().optional().describe("Symbol/function/class/type name for trace or blast_radius"),
-      file_path: z87.string().optional().describe("File path for blast_radius"),
-      force: z87.boolean().optional().describe("Force rebuild before answering"),
-      limit: z87.coerce.number().int().min(1).max(100).optional().describe("Max results"),
-      depth: z87.coerce.number().int().min(1).max(5).optional().describe("Dependent traversal depth for blast_radius"),
-      max_files: z87.coerce.number().int().min(1).max(1e4).optional().describe("Max code files to index")
+      action: z88.enum(["index", "search", "trace", "blast_radius", "stats"]).describe("Code context operation"),
+      project_root: z88.string().optional().describe("Repository root. Defaults to current working directory."),
+      query: z88.string().optional().describe("Search query for action=search"),
+      symbol: z88.string().optional().describe("Symbol/function/class/type name for trace or blast_radius"),
+      file_path: z88.string().optional().describe("File path for blast_radius"),
+      force: z88.boolean().optional().describe("Force rebuild before answering"),
+      limit: z88.coerce.number().int().min(1).max(100).optional().describe("Max results"),
+      depth: z88.coerce.number().int().min(1).max(5).optional().describe("Dependent traversal depth for blast_radius"),
+      max_files: z88.coerce.number().int().min(1).max(1e4).optional().describe("Max code files to index")
     }
   }, async ({ action, project_root, query, symbol, file_path, force, limit, depth, max_files }) => {
     const opts = { projectRoot: project_root, force, maxFiles: max_files };
@@ -30172,7 +30417,7 @@ var init_code_context = __esm({
 });
 
 // src/mcp/tools/support-inbox.ts
-import { z as z88 } from "zod";
+import { z as z89 } from "zod";
 function adminToken() {
   return process.env.ASKEXE_SUPPORT_ADMIN_TOKEN || process.env.EXE_SUPPORT_ADMIN_TOKEN;
 }
@@ -30211,9 +30456,9 @@ function registerListBugReports(server) {
       title: "List Bug Reports",
       description: "AskExe-internal only: list incoming customer bug reports from the support inbox.",
       inputSchema: {
-        status: z88.enum(["all", "open", "triaged", "fixed", "closed", "wontfix"]).default("open"),
-        severity: z88.enum(["p0", "p1", "p2", "p3"]).optional(),
-        limit: z88.number().int().min(1).max(100).default(25)
+        status: z89.enum(["all", "open", "triaged", "fixed", "closed", "wontfix"]).default("open"),
+        severity: z89.enum(["p0", "p1", "p2", "p3"]).optional(),
+        limit: z89.number().int().min(1).max(100).default(25)
       }
     },
     async ({ status, severity, limit }) => {
@@ -30232,7 +30477,7 @@ function registerGetBugReport(server) {
     {
       title: "Get Bug Report",
       description: "AskExe-internal only: fetch one customer bug report with full markdown payload.",
-      inputSchema: { id: z88.string().min(8) }
+      inputSchema: { id: z89.string().min(8) }
     },
     async ({ id }) => {
       const data = await requestJson(`${endpoint()}/${encodeURIComponent(id)}`);
@@ -30247,12 +30492,12 @@ function registerTriageBugReport(server) {
       title: "Triage Bug Report",
       description: "AskExe-internal only: update bug report status and link task/commit/release metadata.",
       inputSchema: {
-        id: z88.string().min(8),
+        id: z89.string().min(8),
         status: STATUS.optional(),
-        triage_notes: z88.string().optional(),
-        linked_task_id: z88.string().optional(),
-        linked_commit: z88.string().optional(),
-        fixed_version: z88.string().optional()
+        triage_notes: z89.string().optional(),
+        linked_task_id: z89.string().optional(),
+        linked_commit: z89.string().optional(),
+        fixed_version: z89.string().optional()
       }
     },
     async ({ id, status, triage_notes, linked_task_id, linked_commit, fixed_version }) => {
@@ -30269,7 +30514,7 @@ var init_support_inbox = __esm({
   "src/mcp/tools/support-inbox.ts"() {
     "use strict";
     DEFAULT_ENDPOINT = "https://askexe.com/admin/support/bug-reports";
-    STATUS = z88.enum(["open", "triaged", "fixed", "closed", "wontfix"]);
+    STATUS = z89.enum(["open", "triaged", "fixed", "closed", "wontfix"]);
   }
 });
 
@@ -30406,6 +30651,7 @@ var init_tool_gates = __esm({
       registerDeployClient: "admin",
       registerBackupVps: "admin",
       registerGetDaemonHealth: "admin",
+      registerMcpPing: "core",
       registerGetAutoWakeStatus: "admin",
       registerGetWorkerGate: "admin",
       registerRunMemoryAudit: "admin",
@@ -30443,6 +30689,7 @@ var init_tool_gates = __esm({
       "registerSearchEverything",
       "registerGetDecision",
       "registerGetIdentity",
+      "registerMcpPing",
       "registerListTasks",
       "registerGetTask",
       "registerListReminders",
@@ -30605,6 +30852,7 @@ function registerAllTools(server) {
   if (exposeLegacyConfig) {
     gate("registerGetAgentSpend", registerGetAgentSpend);
   }
+  gate("registerMcpPing", registerMcpPing);
   if (exposeLegacyGraph) {
     gate("registerGetGraphStats", registerGetGraphStats);
     gate("registerGetEntityNeighbors", registerGetEntityNeighbors);
@@ -30720,6 +30968,7 @@ var init_register_tools = __esm({
     init_get_session_kills();
     init_list_agent_sessions();
     init_get_daemon_health();
+    init_mcp_ping();
     init_get_auto_wake_status();
     init_get_worker_gate();
     init_run_memory_audit();
@@ -30965,12 +31214,12 @@ __export(task_enforcement_exports, {
   runTaskEnforcementTick: () => runTaskEnforcementTick,
   sendNudge: () => sendNudge
 });
-import { writeFileSync as writeFileSync24 } from "fs";
-import path53 from "path";
+import { writeFileSync as writeFileSync25 } from "fs";
+import path55 from "path";
 function writeAuditEntry(entry) {
   try {
     const line = JSON.stringify(entry) + "\n";
-    writeFileSync24(AUDIT_LOG_PATH, line, { flag: "a" });
+    writeFileSync25(AUDIT_LOG_PATH, line, { flag: "a" });
   } catch {
   }
 }
@@ -31141,7 +31390,7 @@ var init_task_enforcement = __esm({
       "What do you need?"
     ];
     MANAGER_ROLES = ["COO", "CTO"];
-    AUDIT_LOG_PATH = path53.join(
+    AUDIT_LOG_PATH = path55.join(
       process.env.HOME ?? process.env.USERPROFILE ?? "/tmp",
       ".exe-os",
       "enforcement-audit.jsonl"
@@ -31163,12 +31412,12 @@ __export(background_jobs_exports, {
   reniceCurrentProcess: () => reniceCurrentProcess,
   startManagedJob: () => startManagedJob
 });
-import { existsSync as existsSync42, mkdirSync as mkdirSync21, readFileSync as readFileSync34, writeFileSync as writeFileSync25, unlinkSync as unlinkSync13 } from "fs";
+import { existsSync as existsSync44, mkdirSync as mkdirSync22, readFileSync as readFileSync36, writeFileSync as writeFileSync26, unlinkSync as unlinkSync13 } from "fs";
 import { execFileSync as execFileSync3 } from "child_process";
 import os22 from "os";
-import path54 from "path";
+import path56 from "path";
 function ensureDirs() {
-  mkdirSync21(LOCK_DIR, { recursive: true });
+  mkdirSync22(LOCK_DIR, { recursive: true });
 }
 function now() {
   return (/* @__PURE__ */ new Date()).toISOString();
@@ -31184,9 +31433,9 @@ function isAlive(pid) {
 }
 function readJobsRaw() {
   ensureDirs();
-  if (!existsSync42(JOBS_FILE)) return [];
+  if (!existsSync44(JOBS_FILE)) return [];
   try {
-    const parsed = JSON.parse(readFileSync34(JOBS_FILE, "utf8"));
+    const parsed = JSON.parse(readFileSync36(JOBS_FILE, "utf8"));
     return Array.isArray(parsed) ? parsed : [];
   } catch {
     return [];
@@ -31196,7 +31445,7 @@ function writeJobsRaw(jobs) {
   ensureDirs();
   const running2 = jobs.filter((j) => j.status === "running");
   const rest = jobs.filter((j) => j.status !== "running").slice(-MAX_HISTORY);
-  writeFileSync25(JOBS_FILE, JSON.stringify([...rest, ...running2], null, 2) + "\n");
+  writeFileSync26(JOBS_FILE, JSON.stringify([...rest, ...running2], null, 2) + "\n");
 }
 function listBackgroundJobs() {
   const jobs = readJobsRaw();
@@ -31212,14 +31461,14 @@ function listBackgroundJobs() {
   return jobs;
 }
 function lockPath(type) {
-  return path54.join(LOCK_DIR, `${type.replace(/[^a-zA-Z0-9_.-]/g, "_")}.lock`);
+  return path56.join(LOCK_DIR, `${type.replace(/[^a-zA-Z0-9_.-]/g, "_")}.lock`);
 }
 function acquireJobLock(type, ttlMs = DEFAULT_LOCK_TTL_MS) {
   ensureDirs();
   const file = lockPath(type);
-  if (existsSync42(file)) {
+  if (existsSync44(file)) {
     try {
-      const lock = JSON.parse(readFileSync34(file, "utf8"));
+      const lock = JSON.parse(readFileSync36(file, "utf8"));
       const age = Date.now() - Date.parse(lock.updatedAt ?? "");
       if (lock.pid && isAlive(lock.pid) && Number.isFinite(age) && age < ttlMs) return false;
     } catch {
@@ -31230,7 +31479,7 @@ function acquireJobLock(type, ttlMs = DEFAULT_LOCK_TTL_MS) {
     }
   }
   try {
-    writeFileSync25(file, JSON.stringify({ pid: process.pid, updatedAt: now() }, null, 2) + "\n", { flag: "wx" });
+    writeFileSync26(file, JSON.stringify({ pid: process.pid, updatedAt: now() }, null, 2) + "\n", { flag: "wx" });
     return true;
   } catch {
     return false;
@@ -31239,8 +31488,8 @@ function acquireJobLock(type, ttlMs = DEFAULT_LOCK_TTL_MS) {
 function releaseJobLock(type) {
   const file = lockPath(type);
   try {
-    if (!existsSync42(file)) return;
-    const lock = JSON.parse(readFileSync34(file, "utf8"));
+    if (!existsSync44(file)) return;
+    const lock = JSON.parse(readFileSync36(file, "utf8"));
     if (lock.pid === process.pid || !lock.pid || !isAlive(lock.pid)) unlinkSync13(file);
   } catch {
     try {
@@ -31279,7 +31528,7 @@ function startManagedJob(options) {
     writeJobsRaw([...jobs, record]);
     const file = lockPath(options.type);
     try {
-      writeFileSync25(file, JSON.stringify({ pid: process.pid, jobId: id, updatedAt: record.updatedAt }, null, 2) + "\n");
+      writeFileSync26(file, JSON.stringify({ pid: process.pid, jobId: id, updatedAt: record.updatedAt }, null, 2) + "\n");
     } catch {
     }
   };
@@ -31439,9 +31688,9 @@ var init_background_jobs = __esm({
   "src/lib/background-jobs.ts"() {
     "use strict";
     init_config();
-    JOB_DIR = path54.join(EXE_AI_DIR, "jobs");
-    JOBS_FILE = path54.join(JOB_DIR, "jobs.json");
-    LOCK_DIR = path54.join(JOB_DIR, "locks");
+    JOB_DIR = path56.join(EXE_AI_DIR, "jobs");
+    JOBS_FILE = path56.join(JOB_DIR, "jobs.json");
+    LOCK_DIR = path56.join(JOB_DIR, "locks");
     DEFAULT_LOCK_TTL_MS = 6 * 60 * 60 * 1e3;
     MAX_HISTORY = 200;
   }
@@ -31455,11 +31704,11 @@ __export(update_check_exports, {
   getRemoteVersion: () => getRemoteVersion
 });
 import { execSync as execSync15 } from "child_process";
-import { readFileSync as readFileSync35 } from "fs";
-import path55 from "path";
+import { readFileSync as readFileSync37 } from "fs";
+import path57 from "path";
 function getLocalVersion(packageRoot) {
-  const pkgPath = path55.join(packageRoot, "package.json");
-  const pkg = JSON.parse(readFileSync35(pkgPath, "utf-8"));
+  const pkgPath = path57.join(packageRoot, "package.json");
+  const pkg = JSON.parse(readFileSync37(pkgPath, "utf-8"));
   return pkg.version;
 }
 function getRemoteVersion() {
@@ -31531,12 +31780,12 @@ __export(device_registry_exports, {
 });
 import crypto22 from "crypto";
 import os23 from "os";
-import { readFileSync as readFileSync36, writeFileSync as writeFileSync26, mkdirSync as mkdirSync22, existsSync as existsSync43 } from "fs";
-import path56 from "path";
+import { readFileSync as readFileSync38, writeFileSync as writeFileSync27, mkdirSync as mkdirSync23, existsSync as existsSync45 } from "fs";
+import path58 from "path";
 function getDeviceInfo() {
-  if (existsSync43(DEVICE_JSON_PATH)) {
+  if (existsSync45(DEVICE_JSON_PATH)) {
     try {
-      const raw = readFileSync36(DEVICE_JSON_PATH, "utf8");
+      const raw = readFileSync38(DEVICE_JSON_PATH, "utf8");
       const data = JSON.parse(raw);
       if (data.deviceId && data.friendlyName && data.hostname) {
         return data;
@@ -31550,14 +31799,14 @@ function getDeviceInfo() {
     friendlyName: hostname.replace(/\./g, "-").toLowerCase(),
     hostname
   };
-  mkdirSync22(path56.dirname(DEVICE_JSON_PATH), { recursive: true });
-  writeFileSync26(DEVICE_JSON_PATH, JSON.stringify(info, null, 2));
+  mkdirSync23(path58.dirname(DEVICE_JSON_PATH), { recursive: true });
+  writeFileSync27(DEVICE_JSON_PATH, JSON.stringify(info, null, 2));
   return info;
 }
 function setFriendlyName(name) {
   const info = getDeviceInfo();
   info.friendlyName = name;
-  writeFileSync26(DEVICE_JSON_PATH, JSON.stringify(info, null, 2));
+  writeFileSync27(DEVICE_JSON_PATH, JSON.stringify(info, null, 2));
 }
 async function resolveTargetDevice(targetAgent, targetProject) {
   const { getClient: getClient2 } = await Promise.resolve().then(() => (init_database(), database_exports));
@@ -31591,7 +31840,7 @@ var init_device_registry = __esm({
   "src/lib/device-registry.ts"() {
     "use strict";
     init_config();
-    DEVICE_JSON_PATH = path56.join(EXE_AI_DIR, "device.json");
+    DEVICE_JSON_PATH = path58.join(EXE_AI_DIR, "device.json");
   }
 });
 
@@ -31807,8 +32056,8 @@ import os24 from "os";
 import net2 from "net";
 import { createServer as createHttpServer } from "http";
 import { randomUUID as randomUUID9 } from "crypto";
-import { appendFileSync as appendFileSync4, writeFileSync as writeFileSync27, unlinkSync as unlinkSync14, mkdirSync as mkdirSync23, existsSync as existsSync44, readFileSync as readFileSync37, chmodSync as chmodSync2 } from "fs";
-import path57 from "path";
+import { writeFileSync as writeFileSync28, unlinkSync as unlinkSync14, mkdirSync as mkdirSync24, existsSync as existsSync46, readFileSync as readFileSync39, chmodSync as chmodSync2 } from "fs";
+import path59 from "path";
 
 // src/lib/orchestration-metrics.ts
 init_config();
@@ -31880,8 +32129,9 @@ function initMetrics() {
 
 // src/lib/exe-daemon.ts
 init_memory_write_governor();
-var SOCKET_PATH2 = process.env.EXE_DAEMON_SOCK ?? process.env.EXE_EMBED_SOCK ?? path57.join(EXE_AI_DIR, "exed.sock");
-var PID_PATH3 = process.env.EXE_DAEMON_PID ?? process.env.EXE_EMBED_PID ?? path57.join(EXE_AI_DIR, "exed.pid");
+init_mcp_transport_health();
+var SOCKET_PATH2 = process.env.EXE_DAEMON_SOCK ?? process.env.EXE_EMBED_SOCK ?? path59.join(EXE_AI_DIR, "exed.sock");
+var PID_PATH4 = process.env.EXE_DAEMON_PID ?? process.env.EXE_EMBED_PID ?? path59.join(EXE_AI_DIR, "exed.pid");
 var MODEL_FILE = "jina-embeddings-v5-small-q4_k_m.gguf";
 var IDLE_TIMEOUT_MS2 = parseInt(process.env.EXE_DAEMON_IDLE_TIMEOUT_MS || "0", 10);
 var REVIEW_POLL_INTERVAL_MS = 60 * 1e3;
@@ -31909,8 +32159,8 @@ function enqueue(queue, entry) {
   queue.push(entry);
 }
 async function loadModel() {
-  const modelPath = path57.join(MODELS_DIR, MODEL_FILE);
-  if (!existsSync44(modelPath)) {
+  const modelPath = path59.join(MODELS_DIR, MODEL_FILE);
+  if (!existsSync46(modelPath)) {
     process.stderr.write(`[exed] No model at ${modelPath} \u2014 running without embeddings (VPS mode).
 `);
     return;
@@ -32022,7 +32272,7 @@ async function shutdown() {
   } catch {
   }
   try {
-    unlinkSync14(PID_PATH3);
+    unlinkSync14(PID_PATH4);
   } catch {
   }
   process.stderr.write("[exed] Shutdown complete.\n");
@@ -32330,17 +32580,17 @@ function startMemoryQueueDrain() {
 `);
 }
 function startServer() {
-  mkdirSync23(path57.dirname(SOCKET_PATH2), { recursive: true });
+  mkdirSync24(path59.dirname(SOCKET_PATH2), { recursive: true });
   try {
-    chmodSync2(path57.dirname(SOCKET_PATH2), 448);
+    chmodSync2(path59.dirname(SOCKET_PATH2), 448);
   } catch {
   }
   _daemonToken = ensureDaemonToken(process.env[DAEMON_TOKEN_ENV2] ?? null);
   for (const oldFile of ["embed.sock", "embed.pid"]) {
-    const oldPath = path57.join(path57.dirname(SOCKET_PATH2), oldFile);
+    const oldPath = path59.join(path59.dirname(SOCKET_PATH2), oldFile);
     try {
       if (oldFile.endsWith(".pid")) {
-        const pid = parseInt(readFileSync37(oldPath, "utf8").trim(), 10);
+        const pid = parseInt(readFileSync39(oldPath, "utf8").trim(), 10);
         if (pid > 0) try {
           process.kill(pid, "SIGKILL");
         } catch {
@@ -32463,11 +32713,38 @@ function startServer() {
 }
 async function startMcpHttpServer() {
   try {
-    let recordMcpHttpEvent2 = function(event) {
+    let parseDurationMs2 = function(value, fallback, options = {}) {
+      if (!value) return fallback;
+      const parsed = Number.parseInt(value, 10);
+      if (!Number.isFinite(parsed)) return fallback;
+      if (parsed === 0 && options.allowZero) return 0;
+      return parsed > 0 ? parsed : fallback;
+    }, closeMcpSession2 = function(sid, reason) {
+      const transport = transports.get(sid);
+      if (!transport) return;
+      transports.delete(sid);
+      sessionLastSeen.delete(sid);
+      const details = sessionDetails.get(sid);
+      sessionDetails.delete(sid);
       try {
-        appendFileSync4(MCP_HTTP_EVENTS_PATH, JSON.stringify({ timestamp: (/* @__PURE__ */ new Date()).toISOString(), ...event }) + "\n");
+        void transport.close();
       } catch {
       }
+      recordMcpHttpEvent({
+        level: reason === "session_expired" ? "warn" : "info",
+        message: reason,
+        sessionId: sid,
+        agentId: details?.agentId,
+        agentRole: details?.agentRole,
+        runtime: details?.runtime,
+        activeSessions: transports.size
+      });
+    }, sweepStaleMcpSessions2 = function() {
+      if (MCP_SESSION_TTL_MS <= 0) return;
+      const now2 = Date.now();
+      for (const [sid, lastSeen] of sessionLastSeen.entries()) {
+        if (now2 - lastSeen > MCP_SESSION_TTL_MS) closeMcpSession2(sid, "session_expired");
+      }
     }, sendJsonRpcError2 = function(res, status, message, extra) {
       res.writeHead(status, { "Content-Type": "application/json" });
       res.end(JSON.stringify({
@@ -32475,9 +32752,9 @@ async function startMcpHttpServer() {
         error: { code: -32e3, message },
         id: null
       }));
-      recordMcpHttpEvent2({ level: "warn", message, status, ...extra });
+      recordMcpHttpEvent({ level: "warn", message, status, ...extra });
     };
-    var recordMcpHttpEvent = recordMcpHttpEvent2, sendJsonRpcError = sendJsonRpcError2;
+    var parseDurationMs = parseDurationMs2, closeMcpSession = closeMcpSession2, sweepStaleMcpSessions = sweepStaleMcpSessions2, sendJsonRpcError = sendJsonRpcError2;
     const { McpServer } = await import("@modelcontextprotocol/sdk/server/mcp.js");
     const { StreamableHTTPServerTransport } = await import("@modelcontextprotocol/sdk/server/streamableHttp.js");
     const { isInitializeRequest } = await import("@modelcontextprotocol/sdk/types.js");
@@ -32487,7 +32764,12 @@ async function startMcpHttpServer() {
     await initStore2();
     const transports = /* @__PURE__ */ new Map();
     const MCP_HTTP_PORT = parseInt(process.env.EXE_MCP_PORT || "48739", 10);
-    const MCP_HTTP_EVENTS_PATH = path57.join(EXE_AI_DIR, "mcp-http-events.jsonl");
+    const MCP_SESSION_TTL_MS = parseDurationMs2(process.env.EXE_MCP_SESSION_TTL_MS, 4 * 60 * 60 * 1e3, { allowZero: true });
+    const MCP_SESSION_SWEEP_MS = parseDurationMs2(process.env.EXE_MCP_SESSION_SWEEP_MS, 60 * 1e3);
+    const sessionLastSeen = /* @__PURE__ */ new Map();
+    const sessionDetails = /* @__PURE__ */ new Map();
+    const sessionSweepTimer = setInterval(sweepStaleMcpSessions2, MCP_SESSION_SWEEP_MS);
+    sessionSweepTimer.unref();
     const httpServer = createHttpServer(async (req, res) => {
       res.setHeader("Access-Control-Allow-Origin", "http://127.0.0.1");
       res.setHeader("Access-Control-Allow-Methods", "POST, GET, DELETE, OPTIONS");
@@ -32498,20 +32780,29 @@ async function startMcpHttpServer() {
         res.end();
         return;
       }
+      const url = new URL(req.url || "/", `http://127.0.0.1:${MCP_HTTP_PORT}`);
       const authHeader = req.headers.authorization;
       if (!authHeader || authHeader !== `Bearer ${_daemonToken}`) {
-        res.writeHead(401, { "Content-Type": "text/plain" });
-        res.end("Unauthorized");
+        sendJsonRpcError2(res, 401, "Unauthorized: invalid or missing daemon token", {
+          method: req.method,
+          path: url.pathname
+        });
         return;
       }
-      const url = new URL(req.url || "/", `http://127.0.0.1:${MCP_HTTP_PORT}`);
       if (url.pathname !== "/mcp") {
-        res.writeHead(404, { "Content-Type": "text/plain" });
-        res.end("Not Found");
+        sendJsonRpcError2(res, 404, "Not Found: MCP endpoint is /mcp", {
+          method: req.method,
+          path: url.pathname
+        });
         return;
       }
       const agentId = req.headers["x-agent-id"] || "default";
       const agentRole = req.headers["x-agent-role"] || "employee";
+      const runtime = inferMcpRuntime({
+        runtimeHeader: req.headers["x-agent-runtime"] || req.headers["x-runtime"],
+        userAgent: req.headers["user-agent"],
+        agentId
+      });
       let parsedBody;
       try {
         const body = await new Promise((resolve) => {
@@ -32525,6 +32816,9 @@ async function startMcpHttpServer() {
       } catch (err) {
         sendJsonRpcError2(res, 400, "Bad Request: invalid JSON body", {
           method: req.method,
+          agentId,
+          agentRole,
+          runtime,
           error: err instanceof Error ? err.message : String(err)
         });
         return;
@@ -32533,34 +32827,28 @@ async function startMcpHttpServer() {
       let transport;
       if (sessionId && transports.has(sessionId)) {
         transport = transports.get(sessionId);
+        sessionLastSeen.set(sessionId, Date.now());
       } else if (!sessionId && req.method === "POST" && isInitializeRequest(parsedBody)) {
         transport = new StreamableHTTPServerTransport({
           sessionIdGenerator: () => randomUUID9(),
           onsessioninitialized: (sid) => {
             transports.set(sid, transport);
-            recordMcpHttpEvent2({
+            sessionLastSeen.set(sid, Date.now());
+            sessionDetails.set(sid, { agentId, agentRole, runtime });
+            recordMcpHttpEvent({
               level: "info",
               message: "session_initialized",
               sessionId: sid,
               agentId,
               agentRole,
+              runtime,
               activeSessions: transports.size
             });
           }
         });
         transport.onclose = () => {
           const sid = Array.from(transports.entries()).find(([, t]) => t === transport)?.[0];
-          if (sid) {
-            transports.delete(sid);
-            recordMcpHttpEvent2({
-              level: "info",
-              message: "session_closed",
-              sessionId: sid,
-              agentId,
-              agentRole,
-              activeSessions: transports.size
-            });
-          }
+          if (sid) closeMcpSession2(sid, "session_closed");
         };
         const sessionMcp = new McpServer({ name: "exe-os", version: "1.3.0" });
         registerAllTools2(sessionMcp);
@@ -32573,30 +32861,56 @@ async function startMcpHttpServer() {
           sessionId,
           agentId,
           agentRole,
+          runtime,
           activeSessions: transports.size
         });
         return;
       }
+      const startedAt = Date.now();
+      const parsedRequest = parsedBody;
+      const toolName = parsedRequest?.method === "tools/call" ? parsedRequest.params?.name : void 0;
       try {
         await runWithAgent2({ agentId, agentRole }, async () => {
           await transport.handleRequest(req, res, parsedBody);
         });
-        recordMcpHttpEvent2({
+        const latencyMs = Date.now() - startedAt;
+        if (sessionId) sessionLastSeen.set(sessionId, Date.now());
+        recordMcpHttpEvent({
           level: "info",
           message: "request_ok",
           method: req.method,
           sessionId: sessionId ?? "new",
           agentId,
-          agentRole
+          agentRole,
+          runtime,
+          latencyMs
         });
+        if (toolName) {
+          recordMcpHttpEvent({
+            level: "info",
+            message: "tool_call_ok",
+            method: req.method,
+            sessionId,
+            agentId,
+            agentRole,
+            runtime,
+            toolName,
+            toolFamily: getMcpToolFamily(toolName),
+            latencyMs
+          });
+        }
       } catch (err) {
-        recordMcpHttpEvent2({
+        recordMcpHttpEvent({
           level: "error",
           message: "request_failed",
           method: req.method,
           sessionId,
           agentId,
           agentRole,
+          runtime,
+          toolName,
+          toolFamily: getMcpToolFamily(toolName),
+          latencyMs: Date.now() - startedAt,
           error: err instanceof Error ? err.message : String(err)
         });
         if (!res.headersSent) {
@@ -32604,7 +32918,8 @@ async function startMcpHttpServer() {
             method: req.method,
             sessionId,
             agentId,
-            agentRole
+            agentRole,
+            runtime
           });
         }
       }
@@ -32612,6 +32927,14 @@ async function startMcpHttpServer() {
     httpServer.listen(MCP_HTTP_PORT, "127.0.0.1", () => {
       process.stderr.write(`[exed] MCP HTTP listening on 127.0.0.1:${MCP_HTTP_PORT}
 `);
+      recordMcpHttpEvent({
+        level: "info",
+        message: "server_started",
+        activeSessions: transports.size
+      });
+    });
+    httpServer.on("close", () => {
+      clearInterval(sessionSweepTimer);
     });
     httpServer.on("error", (err) => {
       if (err.code === "EADDRINUSE") {
@@ -32892,7 +33215,7 @@ function startGraphExtraction() {
 `);
 }
 var AGENT_STATS_INTERVAL_MS = 60 * 1e3;
-var AGENT_STATS_PATH = path57.join(EXE_AI_DIR, "agent-stats.json");
+var AGENT_STATS_PATH = path59.join(EXE_AI_DIR, "agent-stats.json");
 async function writeAgentStats() {
   fired("agent_stats");
   if (!await ensureStoreForPolling()) return;
@@ -32952,7 +33275,7 @@ async function writeAgentStats() {
         pid: process.pid
       }
     };
-    writeFileSync27(AGENT_STATS_PATH, JSON.stringify(stats, null, 2), "utf8");
+    writeFileSync28(AGENT_STATS_PATH, JSON.stringify(stats, null, 2), "utf8");
   } catch (err) {
     process.stderr.write(`[exed] Agent stats error: ${err instanceof Error ? err.message : String(err)}
 `);
@@ -33069,12 +33392,12 @@ function startIntercomQueueDrain() {
       const hasInProgressTask = (session) => {
         try {
           const { baseAgentName: ban } = (init_employees(), __toCommonJS(employees_exports));
-          const path58 = __require("path");
-          const { existsSync: existsSync45 } = __require("fs");
+          const path60 = __require("path");
+          const { existsSync: existsSync47 } = __require("fs");
           const os25 = __require("os");
           const agent = ban(session.split("-")[0] ?? session);
-          const markerPath = path58.join(os25.homedir(), ".exe-os", "session-cache", `current-task-${agent}.json`);
-          return existsSync45(markerPath);
+          const markerPath = path60.join(os25.homedir(), ".exe-os", "session-cache", `current-task-${agent}.json`);
+          return existsSync47(markerPath);
         } catch {
           return false;
         }
@@ -33263,12 +33586,12 @@ process.on("SIGINT", () => void shutdown());
 process.on("SIGTERM", () => void shutdown());
 function checkExistingDaemon() {
   try {
-    if (!existsSync44(PID_PATH3)) return false;
-    const pid = parseInt(readFileSync37(PID_PATH3, "utf8").trim(), 10);
+    if (!existsSync46(PID_PATH4)) return false;
+    const pid = parseInt(readFileSync39(PID_PATH4, "utf8").trim(), 10);
     if (!pid || isNaN(pid)) return false;
     if (pid === process.pid) {
       try {
-        unlinkSync14(PID_PATH3);
+        unlinkSync14(PID_PATH4);
       } catch {
       }
       return false;
@@ -33284,7 +33607,7 @@ function checkExistingDaemon() {
       return true;
     }
     try {
-      unlinkSync14(PID_PATH3);
+      unlinkSync14(PID_PATH4);
     } catch {
     }
     return false;
@@ -33341,9 +33664,9 @@ function startAutoUpdateCheck() {
 if (checkExistingDaemon()) {
   process.exit(0);
 }
-writeFileSync27(PID_PATH3, String(process.pid));
+writeFileSync28(PID_PATH4, String(process.pid));
 try {
-  chmodSync2(PID_PATH3, 384);
+  chmodSync2(PID_PATH4, 384);
 } catch {
 }
 process.env.EXE_IS_DAEMON = "1";
@@ -33469,7 +33792,7 @@ try {
   } catch {
   }
   try {
-    unlinkSync14(PID_PATH3);
+    unlinkSync14(PID_PATH4);
   } catch {
   }
   process.exit(1);