@askexenow/exe-os 0.9.8 → 0.9.9

package/dist/bin/install.js

@@ -15,9 +15,34 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
+// src/lib/secure-files.ts
+import { chmodSync, existsSync, mkdirSync } from "fs";
+import { chmod, mkdir } from "fs/promises";
+function ensurePrivateDirSync(dirPath) {
+  mkdirSync(dirPath, { recursive: true, mode: PRIVATE_DIR_MODE });
+  try {
+    chmodSync(dirPath, PRIVATE_DIR_MODE);
+  } catch {
+  }
+}
+function enforcePrivateFileSync(filePath) {
+  try {
+    if (existsSync(filePath)) chmodSync(filePath, PRIVATE_FILE_MODE);
+  } catch {
+  }
+}
+var PRIVATE_DIR_MODE, PRIVATE_FILE_MODE;
+var init_secure_files = __esm({
+  "src/lib/secure-files.ts"() {
+    "use strict";
+    PRIVATE_DIR_MODE = 448;
+    PRIVATE_FILE_MODE = 384;
+  }
+});
+
 // src/lib/config.ts
-import { readFile, writeFile, mkdir, chmod } from "fs/promises";
-import { readFileSync, existsSync, renameSync } from "fs";
+import { readFile, writeFile } from "fs/promises";
+import { readFileSync, existsSync as existsSync2, renameSync } from "fs";
 import path from "path";
 import os from "os";
 function resolveDataDir() {
@@ -25,7 +50,7 @@ function resolveDataDir() {
   if (process.env.EXE_MEM_DIR) return process.env.EXE_MEM_DIR;
   const newDir = path.join(os.homedir(), ".exe-os");
   const legacyDir = path.join(os.homedir(), ".exe-mem");
-  if (!existsSync(newDir) && existsSync(legacyDir)) {
+  if (!existsSync2(newDir) && existsSync2(legacyDir)) {
     try {
       renameSync(legacyDir, newDir);
       process.stderr.write(`[exe-os] Migrated data directory: ~/.exe-mem \u2192 ~/.exe-os
@@ -40,6 +65,7 @@ var EXE_AI_DIR, DB_PATH, MODELS_DIR, CONFIG_PATH, LEGACY_LANCE_PATH, CURRENT_CON
 var init_config = __esm({
   "src/lib/config.ts"() {
     "use strict";
+    init_secure_files();
     EXE_AI_DIR = resolveDataDir();
     DB_PATH = path.join(EXE_AI_DIR, "memories.db");
     MODELS_DIR = path.join(EXE_AI_DIR, "models");
@@ -146,10 +172,10 @@ __export(agent_config_exports, {
   saveAgentConfig: () => saveAgentConfig,
   setAgentRuntime: () => setAgentRuntime
 });
-import { readFileSync as readFileSync2, writeFileSync, existsSync as existsSync2, mkdirSync } from "fs";
+import { readFileSync as readFileSync2, writeFileSync, existsSync as existsSync3 } from "fs";
 import path2 from "path";
 function loadAgentConfig() {
-  if (!existsSync2(AGENT_CONFIG_PATH)) return {};
+  if (!existsSync3(AGENT_CONFIG_PATH)) return {};
   try {
     return JSON.parse(readFileSync2(AGENT_CONFIG_PATH, "utf-8"));
   } catch {
@@ -158,8 +184,9 @@ function loadAgentConfig() {
 }
 function saveAgentConfig(config) {
   const dir = path2.dirname(AGENT_CONFIG_PATH);
-  if (!existsSync2(dir)) mkdirSync(dir, { recursive: true });
+  ensurePrivateDirSync(dir);
   writeFileSync(AGENT_CONFIG_PATH, JSON.stringify(config, null, 2) + "\n", "utf-8");
+  enforcePrivateFileSync(AGENT_CONFIG_PATH);
 }
 function getAgentRuntime(agentId) {
   const config = loadAgentConfig();
@@ -199,6 +226,7 @@ var init_agent_config = __esm({
     "use strict";
     init_config();
     init_runtime_table();
+    init_secure_files();
     AGENT_CONFIG_PATH = path2.join(EXE_AI_DIR, "agent-config.json");
     KNOWN_RUNTIMES = {
       claude: ["claude-opus-4", "claude-sonnet-4", "claude-haiku-4.5"],
@@ -246,7 +274,7 @@ __export(employees_exports, {
   validateEmployeeName: () => validateEmployeeName
 });
 import { readFile as readFile2, writeFile as writeFile2, mkdir as mkdir2 } from "fs/promises";
-import { existsSync as existsSync3, symlinkSync, readlinkSync, readFileSync as readFileSync3, renameSync as renameSync2, unlinkSync, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync as existsSync4, symlinkSync, readlinkSync, readFileSync as readFileSync3, renameSync as renameSync2, unlinkSync, writeFileSync as writeFileSync2 } from "fs";
 import { execSync } from "child_process";
 import path3 from "path";
 import os2 from "os";
@@ -285,7 +313,7 @@ function validateEmployeeName(name) {
   return { valid: true };
 }
 async function loadEmployees(employeesPath = EMPLOYEES_PATH) {
-  if (!existsSync3(employeesPath)) {
+  if (!existsSync4(employeesPath)) {
     return [];
   }
   const raw = await readFile2(employeesPath, "utf-8");
@@ -300,7 +328,7 @@ async function saveEmployees(employees, employeesPath = EMPLOYEES_PATH) {
   await writeFile2(employeesPath, JSON.stringify(employees, null, 2) + "\n", "utf-8");
 }
 function loadEmployeesSync(employeesPath = EMPLOYEES_PATH) {
-  if (!existsSync3(employeesPath)) return [];
+  if (!existsSync4(employeesPath)) return [];
   try {
     return JSON.parse(readFileSync3(employeesPath, "utf-8"));
   } catch {
@@ -348,7 +376,7 @@ function appendToCoordinatorTeam(employee) {
   const coordinator = getCoordinatorEmployee(loadEmployeesSync());
   if (!coordinator) return;
   const idPath = path3.join(IDENTITY_DIR, `${coordinator.name}.md`);
-  if (!existsSync3(idPath)) return;
+  if (!existsSync4(idPath)) return;
   const content = readFileSync3(idPath, "utf-8");
   if (content.includes(`**${capitalize(employee.name)}`)) return;
   const teamMatch = content.match(TEAM_SECTION_RE);
@@ -402,9 +430,9 @@ async function normalizeRosterCase(rosterPath) {
         const identityDir = path3.join(os2.homedir(), ".exe-os", "identity");
         const oldPath = path3.join(identityDir, `${oldName}.md`);
         const newPath = path3.join(identityDir, `${emp.name}.md`);
-        if (existsSync3(oldPath) && !existsSync3(newPath)) {
+        if (existsSync4(oldPath) && !existsSync4(newPath)) {
           renameSync2(oldPath, newPath);
-        } else if (existsSync3(oldPath) && oldPath !== newPath) {
+        } else if (existsSync4(oldPath) && oldPath !== newPath) {
           const content = readFileSync3(oldPath, "utf-8");
           writeFileSync2(newPath, content, "utf-8");
           if (oldPath.toLowerCase() !== newPath.toLowerCase()) {
@@ -447,7 +475,7 @@ function registerBinSymlinks(name) {
   for (const suffix of ["", "-opencode"]) {
     const linkName = `${name}${suffix}`;
     const linkPath = path3.join(binDir, linkName);
-    if (existsSync3(linkPath)) {
+    if (existsSync4(linkPath)) {
       skipped.push(linkName);
       continue;
     }
@@ -478,7 +506,7 @@ var init_employees = __esm({
 import os3 from "os";
 import path4 from "path";
 import {
-  existsSync as existsSync4,
+  existsSync as existsSync5,
   lstatSync,
   mkdirSync as mkdirSync2,
   readlinkSync as readlinkSync2,
@@ -497,7 +525,7 @@ function ensureAgentSymlink(agentId, homeDir = os3.homedir()) {
   const target = identitySourcePath(homeDir, agentId);
   const link = claudeAgentLinkPath(homeDir, agentId);
   mkdirSync2(claudeAgentsDir(homeDir), { recursive: true });
-  if (existsSync4(link)) {
+  if (existsSync5(link)) {
     let stat;
     try {
       stat = lstatSync(link);
@@ -566,12 +594,12 @@ var init_mcp_prefix = __esm({
 });
 
 // src/lib/preferences.ts
-import { existsSync as existsSync5, readFileSync as readFileSync4, writeFileSync as writeFileSync3, mkdirSync as mkdirSync3 } from "fs";
+import { existsSync as existsSync6, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
 import path5 from "path";
 import os4 from "os";
 function loadPreferences(homeDir = os4.homedir()) {
   const configPath = path5.join(homeDir, ".exe-os", "config.json");
-  if (!existsSync5(configPath)) return {};
+  if (!existsSync6(configPath)) return {};
   try {
     const config = JSON.parse(readFileSync4(configPath, "utf-8"));
     return config.preferences ?? {};
@@ -582,12 +610,13 @@ function loadPreferences(homeDir = os4.homedir()) {
 var init_preferences = __esm({
   "src/lib/preferences.ts"() {
     "use strict";
+    init_secure_files();
   }
 });
 
 // src/adapters/claude/installer.ts
 import { readFile as readFile3, writeFile as writeFile3, mkdir as mkdir3, readdir } from "fs/promises";
-import { existsSync as existsSync6, readFileSync as readFileSync5, writeFileSync as writeFileSync4, copyFileSync, mkdirSync as mkdirSync4 } from "fs";
+import { existsSync as existsSync7, readFileSync as readFileSync5, writeFileSync as writeFileSync4, copyFileSync, mkdirSync as mkdirSync3 } from "fs";
 import path6 from "path";
 import os5 from "os";
 import { execSync as execSync2 } from "child_process";
@@ -598,7 +627,7 @@ function resolvePackageRoot() {
   const root = path6.parse(dir).root;
   while (dir !== root) {
     const pkgPath = path6.join(dir, "package.json");
-    if (existsSync6(pkgPath)) {
+    if (existsSync7(pkgPath)) {
       try {
         const pkg = JSON.parse(readFileSync5(pkgPath, "utf-8"));
         if (pkg.name === "@askexenow/exe-os" || pkg.name === "exe-os") return dir;
@@ -614,7 +643,7 @@ async function copySlashCommands(packageRoot, homeDir = os5.homedir()) {
   let skipped = 0;
   const skillsBase = path6.join(homeDir, ".claude", "skills");
   const exeDir = path6.join(packageRoot, "src", "commands", "exe");
-  if (existsSync6(exeDir)) {
+  if (existsSync7(exeDir)) {
     const entries = await readdir(exeDir);
     const mdFiles = entries.filter((f) => f.endsWith(".md"));
     for (const file of mdFiles) {
@@ -629,7 +658,7 @@ async function copySlashCommands(packageRoot, homeDir = os5.homedir()) {
     }
   }
   const topLevelSrc = path6.join(packageRoot, "src", "commands", "exe.md");
-  if (existsSync6(topLevelSrc)) {
+  if (existsSync7(topLevelSrc)) {
     const destDir = path6.join(skillsBase, "exe");
     await mkdir3(destDir, { recursive: true });
     const destPath = path6.join(destDir, "SKILL.md");
@@ -655,7 +684,7 @@ name: ${skillName}
 `);
     }
   }
-  if (existsSync6(destPath)) {
+  if (existsSync7(destPath)) {
     const existing = await readFile3(destPath, "utf-8");
     if (existing === content) return false;
   }
@@ -665,7 +694,7 @@ name: ${skillName}
 async function registerMcpServer(packageRoot, homeDir = os5.homedir()) {
   const claudeJsonPath = path6.join(homeDir, ".claude.json");
   let claudeJson = {};
-  if (existsSync6(claudeJsonPath)) {
+  if (existsSync7(claudeJsonPath)) {
     try {
       claudeJson = JSON.parse(await readFile3(claudeJsonPath, "utf-8"));
     } catch {
@@ -682,21 +711,21 @@ async function registerMcpServer(packageRoot, homeDir = os5.homedir()) {
     env: {}
   };
   const currentMem = claudeJson.mcpServers[MCP_LEGACY_KEY];
-  const currentOs = claudeJson.mcpServers[MCP_PRIMARY_KEY];
   const memMatches = currentMem && JSON.stringify(currentMem) === JSON.stringify(newEntry);
-  const osMatches = currentOs && JSON.stringify(currentOs) === JSON.stringify(newEntry);
-  if (memMatches && osMatches) {
+  if (claudeJson.mcpServers[MCP_PRIMARY_KEY]) {
+    delete claudeJson.mcpServers[MCP_PRIMARY_KEY];
+  }
+  if (memMatches && !claudeJson.mcpServers[MCP_PRIMARY_KEY]) {
     await cleanSettingsJsonMcp(path6.join(homeDir, ".claude", "settings.json"));
     return false;
   }
   claudeJson.mcpServers[MCP_LEGACY_KEY] = newEntry;
-  claudeJson.mcpServers[MCP_PRIMARY_KEY] = newEntry;
   await writeFile3(claudeJsonPath, JSON.stringify(claudeJson, null, 2) + "\n");
   await cleanSettingsJsonMcp(path6.join(homeDir, ".claude", "settings.json"));
   return true;
 }
 async function cleanSettingsJsonMcp(settingsPath) {
-  if (!existsSync6(settingsPath)) return;
+  if (!existsSync7(settingsPath)) return;
   try {
     const settings = JSON.parse(await readFile3(settingsPath, "utf-8"));
     const servers = settings.mcpServers;
@@ -723,7 +752,7 @@ async function mergeHooks(packageRoot, homeDir = os5.homedir()) {
   const logSuffix = ` 2>> "${hookLogPath}"`;
   await mkdir3(logsDir, { recursive: true });
   let settings = {};
-  if (existsSync6(settingsPath)) {
+  if (existsSync7(settingsPath)) {
     try {
       settings = JSON.parse(await readFile3(settingsPath, "utf-8"));
     } catch {
@@ -991,7 +1020,7 @@ async function mergeHooks(packageRoot, homeDir = os5.homedir()) {
 }
 async function cleanOldShellFunctions(homeDir = os5.homedir()) {
   const rosterPath = path6.join(homeDir, ".exe-os", "exe-employees.json");
-  if (!existsSync6(rosterPath)) return 0;
+  if (!existsSync7(rosterPath)) return 0;
   let employees;
   try {
     employees = JSON.parse(await readFile3(rosterPath, "utf-8"));
@@ -1012,7 +1041,7 @@ async function cleanOldShellFunctions(homeDir = os5.homedir()) {
   const REMOVED_MARKER = "# Removed by exe-os \u2014 wrappers now at ~/.exe-os/bin/";
   let totalRemoved = 0;
   for (const rcPath of rcFiles) {
-    if (!existsSync6(rcPath)) continue;
+    if (!existsSync7(rcPath)) continue;
     let content;
     try {
       content = await readFile3(rcPath, "utf-8");
@@ -1145,13 +1174,13 @@ async function installStatusLine(packageRoot, homeDir = os5.homedir()) {
   const claudeDir = path6.join(homeDir, ".claude");
   await mkdir3(claudeDir, { recursive: true });
   const assetPath = path6.join(packageRoot, "dist", "assets", "statusline-command.sh");
-  if (!existsSync6(assetPath)) return "asset-missing";
+  if (!existsSync7(assetPath)) return "asset-missing";
   const destScript = path6.join(claudeDir, "statusline-command.sh");
   const assetContent = await readFile3(assetPath, "utf-8");
   await writeFile3(destScript, assetContent, { mode: 493 });
   const settingsPath = path6.join(claudeDir, "settings.json");
   let settings = {};
-  if (existsSync6(settingsPath)) {
+  if (existsSync7(settingsPath)) {
     try {
       settings = JSON.parse(await readFile3(settingsPath, "utf-8"));
     } catch {
@@ -1190,7 +1219,7 @@ async function runInstaller(homeDir) {
   );
   const resolvedHome = homeDir ?? os5.homedir();
   const exeWorkspace = path6.join(resolvedHome, "exe");
-  if (!existsSync6(exeWorkspace)) {
+  if (!existsSync7(exeWorkspace)) {
     try {
       await mkdir3(path6.join(exeWorkspace, "content"), { recursive: true });
       await mkdir3(path6.join(exeWorkspace, "operations"), { recursive: true });
@@ -1237,17 +1266,17 @@ function setupTmux(home) {
   const sourceLine = "source-file ~/.exe-os/tmux.conf";
   const pkgRoot = resolvePackageRoot();
   const assetPath = path6.join(pkgRoot, "dist", "assets", "tmux.conf");
-  if (!existsSync6(assetPath)) {
+  if (!existsSync7(assetPath)) {
     process.stderr.write(`exe-os: tmux.conf asset not found at ${assetPath} \u2014 skipping tmux setup
 `);
     return;
   }
-  mkdirSync4(exeDir, { recursive: true });
+  mkdirSync3(exeDir, { recursive: true });
   copyFileSync(assetPath, exeTmuxConf);
-  if (existsSync6(userTmuxConf)) {
+  if (existsSync7(userTmuxConf)) {
     const existing = readFileSync5(userTmuxConf, "utf8");
     if (!existing.includes(sourceLine)) {
-      if (!existsSync6(backupPath)) {
+      if (!existsSync7(backupPath)) {
         copyFileSync(userTmuxConf, backupPath);
         process.stderr.write(`exe-os: backed up existing tmux config to ${backupPath}
 `);
@@ -1270,7 +1299,7 @@ function setupGhostty(home) {
   const homeDir = home ?? os5.homedir();
   const xdgConfig = path6.join(homeDir, ".config", "ghostty");
   const macConfig = path6.join(homeDir, "Library", "Application Support", "com.mitchellh.ghostty");
-  const ghosttyInstalled = existsSync6(xdgConfig) || existsSync6(macConfig) || (() => {
+  const ghosttyInstalled = existsSync7(xdgConfig) || existsSync7(macConfig) || (() => {
     try {
       execSync2("which ghostty 2>/dev/null");
       return true;
@@ -1283,28 +1312,28 @@ function setupGhostty(home) {
   }
   const pkgRoot = resolvePackageRoot();
   const assetPath = path6.join(pkgRoot, "dist", "assets", "ghostty.conf");
-  if (!existsSync6(assetPath)) {
+  if (!existsSync7(assetPath)) {
     process.stderr.write("exe-os: ghostty.conf asset not found \u2014 skipping Ghostty setup\n");
     return;
   }
   const configDir = xdgConfig;
   const configPath = path6.join(configDir, "config");
   const backupPath = path6.join(configDir, "config.backup");
-  mkdirSync4(configDir, { recursive: true });
+  mkdirSync3(configDir, { recursive: true });
   const START_MARKER = "# \u2500\u2500 exe-os:ghostty-start \u2500\u2500";
   const END_MARKER = "# \u2500\u2500 exe-os:ghostty-end \u2500\u2500";
   const assetContent = readFileSync5(assetPath, "utf8").trim();
   const markedSection = `${START_MARKER}
 ${assetContent}
 ${END_MARKER}`;
-  if (existsSync6(configPath)) {
+  if (existsSync7(configPath)) {
     const existing = readFileSync5(configPath, "utf8");
     if (existing.includes(START_MARKER) && existing.includes(END_MARKER)) {
       const before = existing.slice(0, existing.indexOf(START_MARKER));
       const after = existing.slice(existing.indexOf(END_MARKER) + END_MARKER.length);
       writeFileSync4(configPath, `${before}${markedSection}${after}`);
     } else if (existing.includes("Exe OS")) {
-      if (!existsSync6(backupPath)) {
+      if (!existsSync7(backupPath)) {
         copyFileSync(configPath, backupPath);
         process.stderr.write(`exe-os: backed up existing Ghostty config to ${backupPath}
 `);
@@ -1312,7 +1341,7 @@ ${END_MARKER}`;
       writeFileSync4(configPath, `${markedSection}
 `);
     } else {
-      if (!existsSync6(backupPath)) {
+      if (!existsSync7(backupPath)) {
         copyFileSync(configPath, backupPath);
         process.stderr.write(`exe-os: backed up existing Ghostty config to ${backupPath}
 `);
@@ -1371,7 +1400,7 @@ __export(installer_exports, {
   verifyCodexHooks: () => verifyCodexHooks
 });
 import { readFile as readFile4, writeFile as writeFile4, mkdir as mkdir4 } from "fs/promises";
-import { existsSync as existsSync8 } from "fs";
+import { existsSync as existsSync9 } from "fs";
 import path8 from "path";
 import os6 from "os";
 async function mergeCodexHooks(packageRoot, homeDir = os6.homedir()) {
@@ -1383,7 +1412,7 @@ async function mergeCodexHooks(packageRoot, homeDir = os6.homedir()) {
   await mkdir4(codexDir, { recursive: true });
   await mkdir4(logsDir, { recursive: true });
   let hooksJson = {};
-  if (existsSync8(hooksPath)) {
+  if (existsSync9(hooksPath)) {
     try {
       hooksJson = JSON.parse(await readFile4(hooksPath, "utf-8"));
     } catch {
@@ -1494,7 +1523,7 @@ async function mergeCodexHooks(packageRoot, homeDir = os6.homedir()) {
 }
 function verifyCodexHooks(homeDir = os6.homedir()) {
   const hooksPath = path8.join(homeDir, ".codex", "hooks.json");
-  if (!existsSync8(hooksPath)) return false;
+  if (!existsSync9(hooksPath)) return false;
   try {
     const hooksJson = JSON.parse(
       __require("fs").readFileSync(hooksPath, "utf-8")
@@ -1521,7 +1550,7 @@ async function installCodexStatusLine(homeDir = os6.homedir()) {
   const configPath = path8.join(codexDir, "config.toml");
   await mkdir4(codexDir, { recursive: true });
   let content = "";
-  if (existsSync8(configPath)) {
+  if (existsSync9(configPath)) {
     content = await readFile4(configPath, "utf-8");
     if (/\[tui\][\s\S]*?status_line\s*=/.test(content)) {
       return "already-configured";
@@ -1570,18 +1599,18 @@ var init_installer2 = __esm({
 
 // src/bin/install.ts
 init_installer();
-import { existsSync as existsSync9, readFileSync as readFileSync7, unlinkSync as unlinkSync3, readdirSync as readdirSync2, openSync, closeSync } from "fs";
+import { existsSync as existsSync10, readFileSync as readFileSync7, unlinkSync as unlinkSync3, readdirSync as readdirSync2, openSync, closeSync } from "fs";
 import { spawn, execSync as execSync3 } from "child_process";
 import path9 from "path";
 import os7 from "os";
 
 // src/lib/session-wrappers.ts
 import {
-  existsSync as existsSync7,
+  existsSync as existsSync8,
   readFileSync as readFileSync6,
   writeFileSync as writeFileSync5,
-  mkdirSync as mkdirSync5,
-  chmodSync,
+  mkdirSync as mkdirSync4,
+  chmodSync as chmodSync2,
   readdirSync,
   unlinkSync as unlinkSync2
 } from "fs";
@@ -1592,16 +1621,16 @@ function generateSessionWrappers(packageRoot, homeDir) {
   const home = homeDir ?? homedir();
   const binDir = path7.join(home, ".exe-os", "bin");
   const rosterPath = path7.join(home, ".exe-os", "exe-employees.json");
-  mkdirSync5(binDir, { recursive: true });
+  mkdirSync4(binDir, { recursive: true });
   const exeStartDst = path7.join(binDir, "exe-start");
   const candidates = [
     path7.join(packageRoot, "dist", "bin", "exe-start.sh"),
     path7.join(packageRoot, "src", "bin", "exe-start.sh")
   ];
   for (const src of candidates) {
-    if (existsSync7(src)) {
+    if (existsSync8(src)) {
       writeFileSync5(exeStartDst, readFileSync6(src));
-      chmodSync(exeStartDst, 493);
+      chmodSync2(exeStartDst, 493);
       break;
     }
   }
@@ -1636,7 +1665,7 @@ exec "${exeStartDst}" "$0" "$@"
     for (let n = 1; n <= MAX_N; n++) {
       const wrapperPath = path7.join(binDir, `${emp.name}${n}`);
       writeFileSync5(wrapperPath, wrapperContent);
-      chmodSync(wrapperPath, 493);
+      chmodSync2(wrapperPath, 493);
       created++;
     }
   }
@@ -1646,7 +1675,7 @@ exec "${exeStartDst}" "$0" "$@"
   ];
   let codexLauncher = null;
   for (const c of codexLauncherCandidates) {
-    if (existsSync7(c)) {
+    if (existsSync8(c)) {
       codexLauncher = c;
       break;
     }
@@ -1658,7 +1687,7 @@ exec "${exeStartDst}" "$0" "$@"
 exec node "${codexLauncher}" --agent ${emp.name} "$@"
 `;
       writeFileSync5(wrapperPath, content);
-      chmodSync(wrapperPath, 493);
+      chmodSync2(wrapperPath, 493);
       created++;
     }
   }
@@ -1709,7 +1738,7 @@ function restartDaemon() {
   const pidPath = path9.join(EXE_DIR, "exed.pid");
   const sockPath = path9.join(EXE_DIR, "exed.sock");
   try {
-    if (existsSync9(pidPath)) {
+    if (existsSync10(pidPath)) {
       const pid = parseInt(readFileSync7(pidPath, "utf8").trim(), 10);
       if (!isNaN(pid) && pid > 0) {
         try {
@@ -1752,7 +1781,7 @@ function restartDaemon() {
     }
     try {
       const wpDir = path9.join(EXE_DIR, "worker-pids");
-      if (existsSync9(wpDir)) {
+      if (existsSync10(wpDir)) {
         for (const f of readdirSync2(wpDir)) {
           try {
             unlinkSync3(path9.join(wpDir, f));
@@ -1783,7 +1812,7 @@ function restartDaemon() {
   try {
     const pkgRoot = resolvePackageRoot();
     const daemonPath = path9.join(pkgRoot, "dist", "lib", "exe-daemon.js");
-    if (!existsSync9(daemonPath)) {
+    if (!existsSync10(daemonPath)) {
       process.stderr.write(`exe-os: daemon not found at ${daemonPath} \u2014 skipping respawn
 `);
       return;