@askexenow/exe-os 0.9.84 → 0.9.86

package/dist/bin/exe-pending-messages.js

@@ -1002,7 +1002,7 @@ __export(exe_daemon_client_exports, {
 });
 import net from "net";
 import os4 from "os";
-import { spawn } from "child_process";
+import { spawn, execSync as execSync2 } from "child_process";
 import { randomUUID } from "crypto";
 import { existsSync as existsSync5, unlinkSync as unlinkSync2, readFileSync as readFileSync4, openSync, closeSync, statSync } from "fs";
 import path5 from "path";
@@ -1032,6 +1032,14 @@ function handleData(chunk) {
     }
   }
 }
+function isZombie(pid) {
+  try {
+    const state = execSync2(`ps -p ${pid} -o state=`, { encoding: "utf8", timeout: 2e3 }).trim();
+    return state.startsWith("Z");
+  } catch {
+    return false;
+  }
+}
 function cleanupStaleFiles() {
   if (existsSync5(PID_PATH)) {
     try {
@@ -1039,7 +1047,11 @@ function cleanupStaleFiles() {
       if (pid > 0) {
         try {
           process.kill(pid, 0);
-          return;
+          if (!isZombie(pid)) {
+            return;
+          }
+          process.stderr.write(`[exed-client] PID ${pid} is a zombie \u2014 cleaning up stale files
+`);
         } catch {
         }
       }
@@ -1067,8 +1079,8 @@ function findPackageRoot() {
 function getAvailableMemoryGB() {
   if (process.platform === "darwin") {
     try {
-      const { execSync: execSync5 } = __require("child_process");
-      const vmstat = execSync5("vm_stat", { encoding: "utf8" });
+      const { execSync: execSync6 } = __require("child_process");
+      const vmstat = execSync6("vm_stat", { encoding: "utf8" });
       const pageSize = 16384;
       const pageSizeMatch = vmstat.match(/page size of (\d+) bytes/);
       const actualPageSize = pageSizeMatch ? parseInt(pageSizeMatch[1], 10) : pageSize;
@@ -3058,6 +3070,12 @@ async function disposeDatabase() {
     clearInterval(_walCheckpointTimer);
     _walCheckpointTimer = null;
   }
+  if (_client) {
+    try {
+      await _client.execute("PRAGMA wal_checkpoint(PASSIVE)");
+    } catch {
+    }
+  }
   if (_daemonClient) {
     _daemonClient.close();
     _daemonClient = null;
@@ -3103,7 +3121,7 @@ var init_session_registry = __esm({
 });
 
 // src/lib/session-key.ts
-import { execSync as execSync2 } from "child_process";
+import { execSync as execSync3 } from "child_process";
 function normalizeCommand(command) {
   const trimmed = command.trim().toLowerCase();
   const parts = trimmed.split(/[\\/]/);
@@ -3122,7 +3140,7 @@ function resolveRuntimeProcess() {
   let pid = process.ppid;
   for (let i = 0; i < 10; i++) {
     try {
-      const info = execSync2(`ps -p ${pid} -o ppid=,comm=`, {
+      const info = execSync3(`ps -p ${pid} -o ppid=,comm=`, {
         encoding: "utf8",
         timeout: 2e3
       }).trim();
@@ -3288,7 +3306,7 @@ var init_transport = __esm({
 });
 
 // src/lib/cc-agent-support.ts
-import { execSync as execSync3 } from "child_process";
+import { execSync as execSync4 } from "child_process";
 var init_cc_agent_support = __esm({
   "src/lib/cc-agent-support.ts"() {
     "use strict";
@@ -3521,7 +3539,7 @@ var init_task_scope = __esm({
 // src/lib/keychain.ts
 import { readFile as readFile3, writeFile as writeFile3, unlink, mkdir as mkdir3, chmod as chmod2 } from "fs/promises";
 import { existsSync as existsSync12, statSync as statSync2 } from "fs";
-import { execSync as execSync4 } from "child_process";
+import { execSync as execSync5 } from "child_process";
 import path13 from "path";
 import os10 from "os";
 function getKeyDir() {
@@ -3538,13 +3556,13 @@ function linuxSecretAvailable() {
   if (process.platform !== "linux") return false;
   if (linuxSecretAvailability !== null) return linuxSecretAvailability;
   try {
-    execSync4("command -v secret-tool >/dev/null 2>&1", { timeout: 1e3 });
+    execSync5("command -v secret-tool >/dev/null 2>&1", { timeout: 1e3 });
   } catch {
     linuxSecretAvailability = false;
     return false;
   }
   try {
-    execSync4("secret-tool search --all exe-os probe >/dev/null 2>&1", { timeout: 1e3 });
+    execSync5("secret-tool search --all exe-os probe >/dev/null 2>&1", { timeout: 1e3 });
     linuxSecretAvailability = true;
   } catch {
     linuxSecretAvailability = false;
@@ -3568,7 +3586,7 @@ function macKeychainGet(service = SERVICE) {
   if (!nativeKeychainAllowed()) return null;
   if (process.platform !== "darwin") return null;
   try {
-    return execSync4(
+    return execSync5(
       `security find-generic-password -s "${service}" -a "${ACCOUNT}" -w 2>/dev/null`,
       { encoding: "utf-8", timeout: 5e3 }
     ).trim();
@@ -3581,13 +3599,13 @@ function macKeychainSet(value, service = SERVICE) {
   if (process.platform !== "darwin") return false;
   try {
     try {
-      execSync4(
+      execSync5(
         `security delete-generic-password -s "${service}" -a "${ACCOUNT}" 2>/dev/null`,
         { timeout: 5e3 }
       );
     } catch {
     }
-    execSync4(
+    execSync5(
       `security add-generic-password -s "${service}" -a "${ACCOUNT}" -w "${value}"`,
       { timeout: 5e3 }
     );
@@ -3600,7 +3618,7 @@ function macKeychainDelete(service = SERVICE) {
   if (!nativeKeychainAllowed()) return false;
   if (process.platform !== "darwin") return false;
   try {
-    execSync4(
+    execSync5(
       `security delete-generic-password -s "${service}" -a "${ACCOUNT}" 2>/dev/null`,
       { timeout: 5e3 }
     );
@@ -3612,7 +3630,7 @@ function macKeychainDelete(service = SERVICE) {
 function linuxSecretGet(service = SERVICE) {
   if (!linuxSecretAvailable()) return null;
   try {
-    return execSync4(
+    return execSync5(
       `secret-tool lookup service "${service}" account "${ACCOUNT}" 2>/dev/null`,
       { encoding: "utf-8", timeout: 5e3 }
     ).trim();
@@ -3623,7 +3641,7 @@ function linuxSecretGet(service = SERVICE) {
 function linuxSecretSet(value, service = SERVICE) {
   if (!linuxSecretAvailable()) return false;
   try {
-    execSync4(
+    execSync5(
       `echo -n "${value}" | secret-tool store --label="exe-os master key" service "${service}" account "${ACCOUNT}" 2>/dev/null`,
       { timeout: 5e3 }
     );
@@ -3636,7 +3654,7 @@ function linuxSecretDelete(service = SERVICE) {
   if (!nativeKeychainAllowed()) return false;
   if (process.platform !== "linux") return false;
   try {
-    execSync4(
+    execSync5(
       `secret-tool clear service "${service}" account "${ACCOUNT}" 2>/dev/null`,
       { timeout: 5e3 }
     );

package/dist/bin/exe-pending-notifications.js

@@ -1003,7 +1003,7 @@ __export(exe_daemon_client_exports, {
 });
 import net from "net";
 import os4 from "os";
-import { spawn } from "child_process";
+import { spawn, execSync as execSync2 } from "child_process";
 import { randomUUID } from "crypto";
 import { existsSync as existsSync5, unlinkSync as unlinkSync2, readFileSync as readFileSync4, openSync, closeSync, statSync } from "fs";
 import path5 from "path";
@@ -1033,6 +1033,14 @@ function handleData(chunk) {
     }
   }
 }
+function isZombie(pid) {
+  try {
+    const state = execSync2(`ps -p ${pid} -o state=`, { encoding: "utf8", timeout: 2e3 }).trim();
+    return state.startsWith("Z");
+  } catch {
+    return false;
+  }
+}
 function cleanupStaleFiles() {
   if (existsSync5(PID_PATH)) {
     try {
@@ -1040,7 +1048,11 @@ function cleanupStaleFiles() {
       if (pid > 0) {
         try {
           process.kill(pid, 0);
-          return;
+          if (!isZombie(pid)) {
+            return;
+          }
+          process.stderr.write(`[exed-client] PID ${pid} is a zombie \u2014 cleaning up stale files
+`);
         } catch {
         }
       }
@@ -1068,8 +1080,8 @@ function findPackageRoot() {
 function getAvailableMemoryGB() {
   if (process.platform === "darwin") {
     try {
-      const { execSync: execSync5 } = __require("child_process");
-      const vmstat = execSync5("vm_stat", { encoding: "utf8" });
+      const { execSync: execSync6 } = __require("child_process");
+      const vmstat = execSync6("vm_stat", { encoding: "utf8" });
       const pageSize = 16384;
       const pageSizeMatch = vmstat.match(/page size of (\d+) bytes/);
       const actualPageSize = pageSizeMatch ? parseInt(pageSizeMatch[1], 10) : pageSize;
@@ -3059,6 +3071,12 @@ async function disposeDatabase() {
     clearInterval(_walCheckpointTimer);
     _walCheckpointTimer = null;
   }
+  if (_client) {
+    try {
+      await _client.execute("PRAGMA wal_checkpoint(PASSIVE)");
+    } catch {
+    }
+  }
   if (_daemonClient) {
     _daemonClient.close();
     _daemonClient = null;
@@ -3104,7 +3122,7 @@ var init_session_registry = __esm({
 });
 
 // src/lib/session-key.ts
-import { execSync as execSync2 } from "child_process";
+import { execSync as execSync3 } from "child_process";
 function normalizeCommand(command) {
   const trimmed = command.trim().toLowerCase();
   const parts = trimmed.split(/[\\/]/);
@@ -3123,7 +3141,7 @@ function resolveRuntimeProcess() {
   let pid = process.ppid;
   for (let i = 0; i < 10; i++) {
     try {
-      const info = execSync2(`ps -p ${pid} -o ppid=,comm=`, {
+      const info = execSync3(`ps -p ${pid} -o ppid=,comm=`, {
         encoding: "utf8",
         timeout: 2e3
       }).trim();
@@ -3289,7 +3307,7 @@ var init_transport = __esm({
 });
 
 // src/lib/cc-agent-support.ts
-import { execSync as execSync3 } from "child_process";
+import { execSync as execSync4 } from "child_process";
 var init_cc_agent_support = __esm({
   "src/lib/cc-agent-support.ts"() {
     "use strict";
@@ -3587,7 +3605,7 @@ var init_notifications = __esm({
 // src/lib/keychain.ts
 import { readFile as readFile3, writeFile as writeFile3, unlink, mkdir as mkdir3, chmod as chmod2 } from "fs/promises";
 import { existsSync as existsSync13, statSync as statSync2 } from "fs";
-import { execSync as execSync4 } from "child_process";
+import { execSync as execSync5 } from "child_process";
 import path14 from "path";
 import os11 from "os";
 function getKeyDir() {
@@ -3604,13 +3622,13 @@ function linuxSecretAvailable() {
   if (process.platform !== "linux") return false;
   if (linuxSecretAvailability !== null) return linuxSecretAvailability;
   try {
-    execSync4("command -v secret-tool >/dev/null 2>&1", { timeout: 1e3 });
+    execSync5("command -v secret-tool >/dev/null 2>&1", { timeout: 1e3 });
   } catch {
     linuxSecretAvailability = false;
     return false;
   }
   try {
-    execSync4("secret-tool search --all exe-os probe >/dev/null 2>&1", { timeout: 1e3 });
+    execSync5("secret-tool search --all exe-os probe >/dev/null 2>&1", { timeout: 1e3 });
     linuxSecretAvailability = true;
   } catch {
     linuxSecretAvailability = false;
@@ -3634,7 +3652,7 @@ function macKeychainGet(service = SERVICE) {
   if (!nativeKeychainAllowed()) return null;
   if (process.platform !== "darwin") return null;
   try {
-    return execSync4(
+    return execSync5(
       `security find-generic-password -s "${service}" -a "${ACCOUNT}" -w 2>/dev/null`,
       { encoding: "utf-8", timeout: 5e3 }
     ).trim();
@@ -3647,13 +3665,13 @@ function macKeychainSet(value, service = SERVICE) {
   if (process.platform !== "darwin") return false;
   try {
     try {
-      execSync4(
+      execSync5(
         `security delete-generic-password -s "${service}" -a "${ACCOUNT}" 2>/dev/null`,
         { timeout: 5e3 }
       );
     } catch {
     }
-    execSync4(
+    execSync5(
       `security add-generic-password -s "${service}" -a "${ACCOUNT}" -w "${value}"`,
       { timeout: 5e3 }
     );
@@ -3666,7 +3684,7 @@ function macKeychainDelete(service = SERVICE) {
   if (!nativeKeychainAllowed()) return false;
   if (process.platform !== "darwin") return false;
   try {
-    execSync4(
+    execSync5(
       `security delete-generic-password -s "${service}" -a "${ACCOUNT}" 2>/dev/null`,
       { timeout: 5e3 }
     );
@@ -3678,7 +3696,7 @@ function macKeychainDelete(service = SERVICE) {
 function linuxSecretGet(service = SERVICE) {
   if (!linuxSecretAvailable()) return null;
   try {
-    return execSync4(
+    return execSync5(
       `secret-tool lookup service "${service}" account "${ACCOUNT}" 2>/dev/null`,
       { encoding: "utf-8", timeout: 5e3 }
     ).trim();
@@ -3689,7 +3707,7 @@ function linuxSecretGet(service = SERVICE) {
 function linuxSecretSet(value, service = SERVICE) {
   if (!linuxSecretAvailable()) return false;
   try {
-    execSync4(
+    execSync5(
       `echo -n "${value}" | secret-tool store --label="exe-os master key" service "${service}" account "${ACCOUNT}" 2>/dev/null`,
       { timeout: 5e3 }
     );
@@ -3702,7 +3720,7 @@ function linuxSecretDelete(service = SERVICE) {
   if (!nativeKeychainAllowed()) return false;
   if (process.platform !== "linux") return false;
   try {
-    execSync4(
+    execSync5(
       `secret-tool clear service "${service}" account "${ACCOUNT}" 2>/dev/null`,
       { timeout: 5e3 }
     );

package/dist/bin/exe-pending-reviews.js

@@ -1003,7 +1003,7 @@ __export(exe_daemon_client_exports, {
 });
 import net from "net";
 import os4 from "os";
-import { spawn } from "child_process";
+import { spawn, execSync as execSync2 } from "child_process";
 import { randomUUID } from "crypto";
 import { existsSync as existsSync5, unlinkSync as unlinkSync2, readFileSync as readFileSync4, openSync, closeSync, statSync } from "fs";
 import path5 from "path";
@@ -1033,6 +1033,14 @@ function handleData(chunk) {
     }
   }
 }
+function isZombie(pid) {
+  try {
+    const state = execSync2(`ps -p ${pid} -o state=`, { encoding: "utf8", timeout: 2e3 }).trim();
+    return state.startsWith("Z");
+  } catch {
+    return false;
+  }
+}
 function cleanupStaleFiles() {
   if (existsSync5(PID_PATH)) {
     try {
@@ -1040,7 +1048,11 @@ function cleanupStaleFiles() {
       if (pid > 0) {
         try {
           process.kill(pid, 0);
-          return;
+          if (!isZombie(pid)) {
+            return;
+          }
+          process.stderr.write(`[exed-client] PID ${pid} is a zombie \u2014 cleaning up stale files
+`);
         } catch {
         }
       }
@@ -1068,8 +1080,8 @@ function findPackageRoot() {
 function getAvailableMemoryGB() {
   if (process.platform === "darwin") {
     try {
-      const { execSync: execSync5 } = __require("child_process");
-      const vmstat = execSync5("vm_stat", { encoding: "utf8" });
+      const { execSync: execSync6 } = __require("child_process");
+      const vmstat = execSync6("vm_stat", { encoding: "utf8" });
       const pageSize = 16384;
       const pageSizeMatch = vmstat.match(/page size of (\d+) bytes/);
       const actualPageSize = pageSizeMatch ? parseInt(pageSizeMatch[1], 10) : pageSize;
@@ -3059,6 +3071,12 @@ async function disposeDatabase() {
     clearInterval(_walCheckpointTimer);
     _walCheckpointTimer = null;
   }
+  if (_client) {
+    try {
+      await _client.execute("PRAGMA wal_checkpoint(PASSIVE)");
+    } catch {
+    }
+  }
   if (_daemonClient) {
     _daemonClient.close();
     _daemonClient = null;
@@ -3104,7 +3122,7 @@ var init_session_registry = __esm({
 });
 
 // src/lib/session-key.ts
-import { execSync as execSync2 } from "child_process";
+import { execSync as execSync3 } from "child_process";
 function normalizeCommand(command) {
   const trimmed = command.trim().toLowerCase();
   const parts = trimmed.split(/[\\/]/);
@@ -3123,7 +3141,7 @@ function resolveRuntimeProcess() {
   let pid = process.ppid;
   for (let i = 0; i < 10; i++) {
     try {
-      const info = execSync2(`ps -p ${pid} -o ppid=,comm=`, {
+      const info = execSync3(`ps -p ${pid} -o ppid=,comm=`, {
         encoding: "utf8",
         timeout: 2e3
       }).trim();
@@ -3289,7 +3307,7 @@ var init_transport = __esm({
 });
 
 // src/lib/cc-agent-support.ts
-import { execSync as execSync3 } from "child_process";
+import { execSync as execSync4 } from "child_process";
 var init_cc_agent_support = __esm({
   "src/lib/cc-agent-support.ts"() {
     "use strict";
@@ -3681,7 +3699,7 @@ var init_tasks_review = __esm({
 // src/lib/keychain.ts
 import { readFile as readFile3, writeFile as writeFile3, unlink, mkdir as mkdir3, chmod as chmod2 } from "fs/promises";
 import { existsSync as existsSync14, statSync as statSync2 } from "fs";
-import { execSync as execSync4 } from "child_process";
+import { execSync as execSync5 } from "child_process";
 import path15 from "path";
 import os11 from "os";
 function getKeyDir() {
@@ -3698,13 +3716,13 @@ function linuxSecretAvailable() {
   if (process.platform !== "linux") return false;
   if (linuxSecretAvailability !== null) return linuxSecretAvailability;
   try {
-    execSync4("command -v secret-tool >/dev/null 2>&1", { timeout: 1e3 });
+    execSync5("command -v secret-tool >/dev/null 2>&1", { timeout: 1e3 });
   } catch {
     linuxSecretAvailability = false;
     return false;
   }
   try {
-    execSync4("secret-tool search --all exe-os probe >/dev/null 2>&1", { timeout: 1e3 });
+    execSync5("secret-tool search --all exe-os probe >/dev/null 2>&1", { timeout: 1e3 });
     linuxSecretAvailability = true;
   } catch {
     linuxSecretAvailability = false;
@@ -3728,7 +3746,7 @@ function macKeychainGet(service = SERVICE) {
   if (!nativeKeychainAllowed()) return null;
   if (process.platform !== "darwin") return null;
   try {
-    return execSync4(
+    return execSync5(
       `security find-generic-password -s "${service}" -a "${ACCOUNT}" -w 2>/dev/null`,
       { encoding: "utf-8", timeout: 5e3 }
     ).trim();
@@ -3741,13 +3759,13 @@ function macKeychainSet(value, service = SERVICE) {
   if (process.platform !== "darwin") return false;
   try {
     try {
-      execSync4(
+      execSync5(
         `security delete-generic-password -s "${service}" -a "${ACCOUNT}" 2>/dev/null`,
         { timeout: 5e3 }
       );
     } catch {
     }
-    execSync4(
+    execSync5(
       `security add-generic-password -s "${service}" -a "${ACCOUNT}" -w "${value}"`,
       { timeout: 5e3 }
     );
@@ -3760,7 +3778,7 @@ function macKeychainDelete(service = SERVICE) {
   if (!nativeKeychainAllowed()) return false;
   if (process.platform !== "darwin") return false;
   try {
-    execSync4(
+    execSync5(
       `security delete-generic-password -s "${service}" -a "${ACCOUNT}" 2>/dev/null`,
       { timeout: 5e3 }
     );
@@ -3772,7 +3790,7 @@ function macKeychainDelete(service = SERVICE) {
 function linuxSecretGet(service = SERVICE) {
   if (!linuxSecretAvailable()) return null;
   try {
-    return execSync4(
+    return execSync5(
       `secret-tool lookup service "${service}" account "${ACCOUNT}" 2>/dev/null`,
       { encoding: "utf-8", timeout: 5e3 }
     ).trim();
@@ -3783,7 +3801,7 @@ function linuxSecretGet(service = SERVICE) {
 function linuxSecretSet(value, service = SERVICE) {
   if (!linuxSecretAvailable()) return false;
   try {
-    execSync4(
+    execSync5(
       `echo -n "${value}" | secret-tool store --label="exe-os master key" service "${service}" account "${ACCOUNT}" 2>/dev/null`,
       { timeout: 5e3 }
     );
@@ -3796,7 +3814,7 @@ function linuxSecretDelete(service = SERVICE) {
   if (!nativeKeychainAllowed()) return false;
   if (process.platform !== "linux") return false;
   try {
-    execSync4(
+    execSync5(
       `secret-tool clear service "${service}" account "${ACCOUNT}" 2>/dev/null`,
       { timeout: 5e3 }
     );
@@ -6007,8 +6025,8 @@ async function main() {
   let sessionScope = process.env.EXE_SESSION ? extractRootExe(process.env.EXE_SESSION) ?? void 0 : void 0;
   if (!sessionScope) {
     try {
-      const { execSync: execSync5 } = await import("child_process");
-      const tmuxSession = execSync5("tmux display-message -p '#{session_name}'", { encoding: "utf8", timeout: 2e3 }).trim();
+      const { execSync: execSync6 } = await import("child_process");
+      const tmuxSession = execSync6("tmux display-message -p '#{session_name}'", { encoding: "utf8", timeout: 2e3 }).trim();
       if (isExeSession(tmuxSession)) sessionScope = tmuxSession;
     } catch {
     }

package/dist/bin/exe-rename.js

@@ -1051,7 +1051,7 @@ var init_daemon_auth = __esm({
 // src/lib/exe-daemon-client.ts
 import net from "net";
 import os4 from "os";
-import { spawn } from "child_process";
+import { spawn, execSync as execSync2 } from "child_process";
 import { randomUUID } from "crypto";
 import { existsSync as existsSync5, unlinkSync as unlinkSync2, readFileSync as readFileSync4, openSync, closeSync, statSync } from "fs";
 import path5 from "path";
@@ -1081,6 +1081,14 @@ function handleData(chunk) {
     }
   }
 }
+function isZombie(pid) {
+  try {
+    const state = execSync2(`ps -p ${pid} -o state=`, { encoding: "utf8", timeout: 2e3 }).trim();
+    return state.startsWith("Z");
+  } catch {
+    return false;
+  }
+}
 function cleanupStaleFiles() {
   if (existsSync5(PID_PATH)) {
     try {
@@ -1088,7 +1096,11 @@ function cleanupStaleFiles() {
       if (pid > 0) {
         try {
           process.kill(pid, 0);
-          return;
+          if (!isZombie(pid)) {
+            return;
+          }
+          process.stderr.write(`[exed-client] PID ${pid} is a zombie \u2014 cleaning up stale files
+`);
         } catch {
         }
       }
@@ -1116,8 +1128,8 @@ function findPackageRoot() {
 function getAvailableMemoryGB() {
   if (process.platform === "darwin") {
     try {
-      const { execSync: execSync4 } = __require("child_process");
-      const vmstat = execSync4("vm_stat", { encoding: "utf8" });
+      const { execSync: execSync5 } = __require("child_process");
+      const vmstat = execSync5("vm_stat", { encoding: "utf8" });
       const pageSize = 16384;
       const pageSizeMatch = vmstat.match(/page size of (\d+) bytes/);
       const actualPageSize = pageSizeMatch ? parseInt(pageSizeMatch[1], 10) : pageSize;
@@ -2903,6 +2915,12 @@ async function disposeDatabase() {
     clearInterval(_walCheckpointTimer);
     _walCheckpointTimer = null;
   }
+  if (_client) {
+    try {
+      await _client.execute("PRAGMA wal_checkpoint(PASSIVE)");
+    } catch {
+    }
+  }
   if (_daemonClient) {
     _daemonClient.close();
     _daemonClient = null;
@@ -3212,7 +3230,7 @@ ${p.content}`).join("\n\n");
 // src/lib/keychain.ts
 import { readFile as readFile3, writeFile as writeFile3, unlink, mkdir as mkdir3, chmod as chmod2 } from "fs/promises";
 import { existsSync as existsSync6, statSync as statSync2 } from "fs";
-import { execSync as execSync2 } from "child_process";
+import { execSync as execSync3 } from "child_process";
 import path6 from "path";
 import os5 from "os";
 function getKeyDir() {
@@ -3229,13 +3247,13 @@ function linuxSecretAvailable() {
   if (process.platform !== "linux") return false;
   if (linuxSecretAvailability !== null) return linuxSecretAvailability;
   try {
-    execSync2("command -v secret-tool >/dev/null 2>&1", { timeout: 1e3 });
+    execSync3("command -v secret-tool >/dev/null 2>&1", { timeout: 1e3 });
   } catch {
     linuxSecretAvailability = false;
     return false;
   }
   try {
-    execSync2("secret-tool search --all exe-os probe >/dev/null 2>&1", { timeout: 1e3 });
+    execSync3("secret-tool search --all exe-os probe >/dev/null 2>&1", { timeout: 1e3 });
     linuxSecretAvailability = true;
   } catch {
     linuxSecretAvailability = false;
@@ -3259,7 +3277,7 @@ function macKeychainGet(service = SERVICE) {
   if (!nativeKeychainAllowed()) return null;
   if (process.platform !== "darwin") return null;
   try {
-    return execSync2(
+    return execSync3(
       `security find-generic-password -s "${service}" -a "${ACCOUNT}" -w 2>/dev/null`,
       { encoding: "utf-8", timeout: 5e3 }
     ).trim();
@@ -3272,13 +3290,13 @@ function macKeychainSet(value, service = SERVICE) {
   if (process.platform !== "darwin") return false;
   try {
     try {
-      execSync2(
+      execSync3(
         `security delete-generic-password -s "${service}" -a "${ACCOUNT}" 2>/dev/null`,
         { timeout: 5e3 }
       );
     } catch {
     }
-    execSync2(
+    execSync3(
       `security add-generic-password -s "${service}" -a "${ACCOUNT}" -w "${value}"`,
       { timeout: 5e3 }
     );
@@ -3291,7 +3309,7 @@ function macKeychainDelete(service = SERVICE) {
   if (!nativeKeychainAllowed()) return false;
   if (process.platform !== "darwin") return false;
   try {
-    execSync2(
+    execSync3(
       `security delete-generic-password -s "${service}" -a "${ACCOUNT}" 2>/dev/null`,
       { timeout: 5e3 }
     );
@@ -3303,7 +3321,7 @@ function macKeychainDelete(service = SERVICE) {
 function linuxSecretGet(service = SERVICE) {
   if (!linuxSecretAvailable()) return null;
   try {
-    return execSync2(
+    return execSync3(
       `secret-tool lookup service "${service}" account "${ACCOUNT}" 2>/dev/null`,
       { encoding: "utf-8", timeout: 5e3 }
     ).trim();
@@ -3314,7 +3332,7 @@ function linuxSecretGet(service = SERVICE) {
 function linuxSecretSet(value, service = SERVICE) {
   if (!linuxSecretAvailable()) return false;
   try {
-    execSync2(
+    execSync3(
       `echo -n "${value}" | secret-tool store --label="exe-os master key" service "${service}" account "${ACCOUNT}" 2>/dev/null`,
       { timeout: 5e3 }
     );
@@ -3327,7 +3345,7 @@ function linuxSecretDelete(service = SERVICE) {
   if (!nativeKeychainAllowed()) return false;
   if (process.platform !== "linux") return false;
   try {
-    execSync2(
+    execSync3(
       `secret-tool clear service "${service}" account "${ACCOUNT}" 2>/dev/null`,
       { timeout: 5e3 }
     );
@@ -5233,7 +5251,7 @@ var init_store = __esm({
 // src/bin/exe-rename.ts
 init_employees();
 import { readFileSync as readFileSync5, writeFileSync as writeFileSync3, renameSync as renameSync4, unlinkSync as unlinkSync3, existsSync as existsSync8 } from "fs";
-import { execSync as execSync3 } from "child_process";
+import { execSync as execSync4 } from "child_process";
 import path8 from "path";
 import { homedir } from "os";
 
@@ -5399,7 +5417,7 @@ function rewriteRenamedEmployeeContent(content, oldName, newName) {
 }
 function findExeBin2() {
   try {
-    return execSync3(process.platform === "win32" ? "where exe-os" : "which exe-os", { encoding: "utf8" }).trim();
+    return execSync4(process.platform === "win32" ? "where exe-os" : "which exe-os", { encoding: "utf8" }).trim();
   } catch {
     return null;
   }