@askexenow/exe-os 0.9.85 → 0.9.87

package/dist/mcp/server.js

@@ -390,7 +390,7 @@ __export(exe_daemon_client_exports, {
 });
 import net from "net";
 import os2 from "os";
-import { spawn } from "child_process";
+import { spawn, execSync } from "child_process";
 import { randomUUID } from "crypto";
 import { existsSync as existsSync4, unlinkSync, readFileSync as readFileSync3, openSync, closeSync, statSync } from "fs";
 import path3 from "path";
@@ -420,6 +420,14 @@ function handleData(chunk) {
     }
   }
 }
+function isZombie(pid) {
+  try {
+    const state = execSync(`ps -p ${pid} -o state=`, { encoding: "utf8", timeout: 2e3 }).trim();
+    return state.startsWith("Z");
+  } catch {
+    return false;
+  }
+}
 function cleanupStaleFiles() {
   if (existsSync4(PID_PATH)) {
     try {
@@ -427,7 +435,11 @@ function cleanupStaleFiles() {
       if (pid > 0) {
         try {
           process.kill(pid, 0);
-          return;
+          if (!isZombie(pid)) {
+            return;
+          }
+          process.stderr.write(`[exed-client] PID ${pid} is a zombie \u2014 cleaning up stale files
+`);
         } catch {
         }
       }
@@ -455,8 +467,8 @@ function findPackageRoot() {
 function getAvailableMemoryGB() {
   if (process.platform === "darwin") {
     try {
-      const { execSync: execSync15 } = __require("child_process");
-      const vmstat = execSync15("vm_stat", { encoding: "utf8" });
+      const { execSync: execSync16 } = __require("child_process");
+      const vmstat = execSync16("vm_stat", { encoding: "utf8" });
       const pageSize = 16384;
       const pageSizeMatch = vmstat.match(/page size of (\d+) bytes/);
       const actualPageSize = pageSizeMatch ? parseInt(pageSizeMatch[1], 10) : pageSize;
@@ -877,8 +889,8 @@ async function embedDirect(text3) {
   const llamaCpp = await import("node-llama-cpp");
   const { MODELS_DIR: MODELS_DIR2 } = await Promise.resolve().then(() => (init_config(), config_exports));
   const { existsSync: existsSync42 } = await import("fs");
-  const path55 = await import("path");
-  const modelPath = path55.join(MODELS_DIR2, "jina-embeddings-v5-small-q4_k_m.gguf");
+  const path56 = await import("path");
+  const modelPath = path56.join(MODELS_DIR2, "jina-embeddings-v5-small-q4_k_m.gguf");
   if (!existsSync42(modelPath)) {
     throw new Error(`Embedding model not found at ${modelPath}. Run '/exe-setup' to download it.`);
   }
@@ -1107,7 +1119,7 @@ __export(employees_exports, {
 });
 import { readFile as readFile2, writeFile as writeFile2, mkdir as mkdir2 } from "fs/promises";
 import { existsSync as existsSync6, symlinkSync, readlinkSync, readFileSync as readFileSync5, renameSync as renameSync2, unlinkSync as unlinkSync2, writeFileSync as writeFileSync3 } from "fs";
-import { execSync } from "child_process";
+import { execSync as execSync2 } from "child_process";
 import path5 from "path";
 import os3 from "os";
 function normalizeRole(role) {
@@ -1283,7 +1295,7 @@ async function normalizeRosterCase(rosterPath) {
 }
 function findExeBin() {
   try {
-    return execSync(process.platform === "win32" ? "where exe-os" : "which exe-os", { encoding: "utf8" }).trim();
+    return execSync2(process.platform === "win32" ? "where exe-os" : "which exe-os", { encoding: "utf8" }).trim();
   } catch {
     return null;
   }
@@ -3526,6 +3538,12 @@ async function disposeDatabase() {
     clearInterval(_walCheckpointTimer);
     _walCheckpointTimer = null;
   }
+  if (_client) {
+    try {
+      await _client.execute("PRAGMA wal_checkpoint(PASSIVE)");
+    } catch {
+    }
+  }
   if (_daemonClient) {
     _daemonClient.close();
     _daemonClient = null;
@@ -3571,7 +3589,7 @@ __export(keychain_exports, {
 });
 import { readFile as readFile3, writeFile as writeFile3, unlink, mkdir as mkdir3, chmod as chmod2 } from "fs/promises";
 import { existsSync as existsSync7, statSync as statSync2 } from "fs";
-import { execSync as execSync2 } from "child_process";
+import { execSync as execSync3 } from "child_process";
 import path7 from "path";
 import os5 from "os";
 function getKeyDir() {
@@ -3588,13 +3606,13 @@ function linuxSecretAvailable() {
   if (process.platform !== "linux") return false;
   if (linuxSecretAvailability !== null) return linuxSecretAvailability;
   try {
-    execSync2("command -v secret-tool >/dev/null 2>&1", { timeout: 1e3 });
+    execSync3("command -v secret-tool >/dev/null 2>&1", { timeout: 1e3 });
   } catch {
     linuxSecretAvailability = false;
     return false;
   }
   try {
-    execSync2("secret-tool search --all exe-os probe >/dev/null 2>&1", { timeout: 1e3 });
+    execSync3("secret-tool search --all exe-os probe >/dev/null 2>&1", { timeout: 1e3 });
     linuxSecretAvailability = true;
   } catch {
     linuxSecretAvailability = false;
@@ -3618,7 +3636,7 @@ function macKeychainGet(service = SERVICE) {
   if (!nativeKeychainAllowed()) return null;
   if (process.platform !== "darwin") return null;
   try {
-    return execSync2(
+    return execSync3(
       `security find-generic-password -s "${service}" -a "${ACCOUNT}" -w 2>/dev/null`,
       { encoding: "utf-8", timeout: 5e3 }
     ).trim();
@@ -3631,13 +3649,13 @@ function macKeychainSet(value, service = SERVICE) {
   if (process.platform !== "darwin") return false;
   try {
     try {
-      execSync2(
+      execSync3(
         `security delete-generic-password -s "${service}" -a "${ACCOUNT}" 2>/dev/null`,
         { timeout: 5e3 }
       );
     } catch {
     }
-    execSync2(
+    execSync3(
       `security add-generic-password -s "${service}" -a "${ACCOUNT}" -w "${value}"`,
       { timeout: 5e3 }
     );
@@ -3650,7 +3668,7 @@ function macKeychainDelete(service = SERVICE) {
   if (!nativeKeychainAllowed()) return false;
   if (process.platform !== "darwin") return false;
   try {
-    execSync2(
+    execSync3(
       `security delete-generic-password -s "${service}" -a "${ACCOUNT}" 2>/dev/null`,
       { timeout: 5e3 }
     );
@@ -3662,7 +3680,7 @@ function macKeychainDelete(service = SERVICE) {
 function linuxSecretGet(service = SERVICE) {
   if (!linuxSecretAvailable()) return null;
   try {
-    return execSync2(
+    return execSync3(
       `secret-tool lookup service "${service}" account "${ACCOUNT}" 2>/dev/null`,
       { encoding: "utf-8", timeout: 5e3 }
     ).trim();
@@ -3673,7 +3691,7 @@ function linuxSecretGet(service = SERVICE) {
 function linuxSecretSet(value, service = SERVICE) {
   if (!linuxSecretAvailable()) return false;
   try {
-    execSync2(
+    execSync3(
       `echo -n "${value}" | secret-tool store --label="exe-os master key" service "${service}" account "${ACCOUNT}" 2>/dev/null`,
       { timeout: 5e3 }
     );
@@ -3686,7 +3704,7 @@ function linuxSecretDelete(service = SERVICE) {
   if (!nativeKeychainAllowed()) return false;
   if (process.platform !== "linux") return false;
   try {
-    execSync2(
+    execSync3(
       `secret-tool clear service "${service}" account "${ACCOUNT}" 2>/dev/null`,
       { timeout: 5e3 }
     );
@@ -3705,7 +3723,7 @@ async function tryKeytar() {
 }
 function deriveMachineKey() {
   try {
-    const crypto20 = __require("crypto");
+    const crypto21 = __require("crypto");
     const material = [
       os5.hostname(),
       os5.userInfo().username,
@@ -3714,7 +3732,7 @@ function deriveMachineKey() {
       // Machine ID on Linux (stable across reboots)
       process.platform === "linux" ? readMachineId() : ""
     ].join("|");
-    return crypto20.createHash("sha256").update(material).digest();
+    return crypto21.createHash("sha256").update(material).digest();
   } catch {
     return null;
   }
@@ -3728,9 +3746,9 @@ function readMachineId() {
   }
 }
 function encryptWithMachineKey(plaintext, machineKey) {
-  const crypto20 = __require("crypto");
-  const iv = crypto20.randomBytes(12);
-  const cipher = crypto20.createCipheriv("aes-256-gcm", machineKey, iv);
+  const crypto21 = __require("crypto");
+  const iv = crypto21.randomBytes(12);
+  const cipher = crypto21.createCipheriv("aes-256-gcm", machineKey, iv);
   let encrypted = cipher.update(plaintext, "utf-8", "base64");
   encrypted += cipher.final("base64");
   const authTag = cipher.getAuthTag().toString("base64");
@@ -3739,13 +3757,13 @@ function encryptWithMachineKey(plaintext, machineKey) {
 function decryptWithMachineKey(encrypted, machineKey) {
   if (!encrypted.startsWith(ENCRYPTED_PREFIX)) return null;
   try {
-    const crypto20 = __require("crypto");
+    const crypto21 = __require("crypto");
     const parts = encrypted.slice(ENCRYPTED_PREFIX.length).split(":");
     if (parts.length !== 3) return null;
     const [ivB64, tagB64, cipherB64] = parts;
     const iv = Buffer.from(ivB64, "base64");
     const authTag = Buffer.from(tagB64, "base64");
-    const decipher = crypto20.createDecipheriv("aes-256-gcm", machineKey, iv);
+    const decipher = crypto21.createDecipheriv("aes-256-gcm", machineKey, iv);
     decipher.setAuthTag(authTag);
     let decrypted = decipher.update(cipherB64, "base64", "utf-8");
     decrypted += decipher.final("utf-8");
@@ -4783,6 +4801,24 @@ var init_platform_procedures = __esm({
         priority: "p0",
         content: "When an agent encounters a suspected Exe OS bug, update breakage, MCP/tool failure, installer issue, memory/orchestration defect, or customer-local patch need, it MUST use create_bug_report. Do this before or alongside any local workaround so the report reaches AskExe support directly via the customer's license. Do NOT ask the founder for permission to file a required bug report. If create_bug_report is deferred/lazy-loaded, load it and call it. If it is unavailable in the live MCP surface, report 'create_bug_report unavailable in this session' and save a local report in exe/output \u2014 never claim the tool does not exist unless the live MCP surface was checked. If upstream delivery fails, call support_test (MCP) and include its result in the local report so AskExe can distinguish customer setup, license provisioning, and server intake issues; only ask the founder to run `exe-os support test` if MCP is disconnected/unavailable. Classify first: upstream_bug = reproducible exe-os/platform defect; customer_customization = identity, behavior, procedure, config, branding, workflow preference that belongs in customer-owned layers; emergency_hotfix = temporary local patch. For upstream bugs/emergency hotfixes include version, repro steps, expected/actual, files changed, workaround, and local diff summary. Avoid permanent platform-code patches unless founder approves; if a hotfix is unavoidable, document it in the bug report and re-check after npm update."
       },
+      {
+        title: "Bug report status check \u2014 surface available fixes on boot",
+        domain: "support",
+        priority: "p1",
+        content: "Once per session (COO boot only, never repeat), call list_my_bug_reports to check if any previously filed bug reports have been fixed by AskExe. If any report has status 'fixed' with a fixed_version, surface it to the founder immediately: '\u{1F527} N bug fix(es) available \u2014 run exe-os update to get version X.Y.Z'. This is a one-time check at boot, not a recurring poll. If no reports exist or none are fixed, skip silently. If the MCP tool is unavailable or the network call fails, skip silently \u2014 this is informational, not blocking."
+      },
+      {
+        title: "Feature request triage \u2014 upstream feature vs local customization",
+        domain: "support",
+        priority: "p0",
+        content: "When an agent or founder identifies a desired capability that exe-os does not yet provide, the COO (or equivalent coordinator) must decide: is this a local customization (identity, behavior, procedure, config, branding, workflow preference that can be configured in customer-owned layers) or an upstream feature request (a platform capability that requires changes to exe-os code, shipped via npm update)? Local customizations: implement immediately using store_behavior, update_identity, company_procedure, or config changes. Upstream features: use create_feature_request to submit to AskExe. Include use case, business impact, and current workaround. Do NOT ask the founder for permission to file a feature request \u2014 file it proactively when the need is clear."
+      },
+      {
+        title: "Feature request status check \u2014 surface shipped features on boot",
+        domain: "support",
+        priority: "p1",
+        content: "Once per session (COO boot only, never repeat), call list_my_feature_requests to check if any previously filed feature requests have been shipped by AskExe. If any request has status 'shipped' with a shipped_version, surface it to the founder immediately: '\u{1F680} N feature(s) shipped \u2014 run exe-os update to get version X.Y.Z'. This is a one-time check at boot, not a recurring poll. If no requests exist or none are shipped, skip silently. If the MCP tool is unavailable or the network call fails, skip silently \u2014 this is informational, not blocking."
+      },
       // --- Operations ---
       {
         title: "Managers must supervise deployed workers",
@@ -6246,7 +6282,7 @@ __export(project_name_exports, {
   _resetCache: () => _resetCache,
   getProjectName: () => getProjectName
 });
-import { execSync as execSync3 } from "child_process";
+import { execSync as execSync4 } from "child_process";
 import path10 from "path";
 function getProjectName(cwd) {
   const dir = cwd ?? process.cwd();
@@ -6254,7 +6290,7 @@ function getProjectName(cwd) {
   try {
     let repoRoot;
     try {
-      const gitCommonDir = execSync3("git rev-parse --path-format=absolute --git-common-dir", {
+      const gitCommonDir = execSync4("git rev-parse --path-format=absolute --git-common-dir", {
         cwd: dir,
         encoding: "utf8",
         timeout: 2e3,
@@ -6262,7 +6298,7 @@ function getProjectName(cwd) {
       }).trim();
       repoRoot = path10.dirname(gitCommonDir);
     } catch {
-      repoRoot = execSync3("git rev-parse --show-toplevel", {
+      repoRoot = execSync4("git rev-parse --show-toplevel", {
         cwd: dir,
         encoding: "utf8",
         timeout: 2e3,
@@ -6296,14 +6332,14 @@ var file_grep_exports = {};
 __export(file_grep_exports, {
   grepProjectFiles: () => grepProjectFiles
 });
-import { execSync as execSync4 } from "child_process";
+import { execSync as execSync5 } from "child_process";
 import { readFileSync as readFileSync6, readdirSync as readdirSync2, statSync as statSync4, existsSync as existsSync10 } from "fs";
 import path11 from "path";
 import crypto2 from "crypto";
 function hasRipgrep() {
   if (_hasRg === null) {
     try {
-      execSync4("rg --version", { stdio: "ignore", timeout: 2e3 });
+      execSync5("rg --version", { stdio: "ignore", timeout: 2e3 });
       _hasRg = true;
     } catch {
       _hasRg = false;
@@ -6369,7 +6405,7 @@ function grepWithRipgrep(pattern, projectRoot, patterns) {
   const globs = (patterns ?? DEFAULT_PATTERNS).map((p) => `--glob '${p}'`).join(" ");
   const excludes = EXCLUDE_DIRS.map((d) => `--glob '!${d}'`).join(" ");
   const cmd = `rg -i -c --hidden --no-config --no-ignore '${pattern.replace(/'/g, "\\'")}' . ${globs} ${excludes} --max-filesize ${MAX_FILE_SIZE} 2>/dev/null || true`;
-  const output = execSync4(cmd, {
+  const output = execSync5(cmd, {
     cwd: projectRoot,
     encoding: "utf8",
     timeout: 3e3,
@@ -6384,12 +6420,12 @@ function grepWithRipgrep(pattern, projectRoot, patterns) {
     const matchCount = parseInt(line.slice(colonIdx + 1));
     if (isNaN(matchCount) || matchCount === 0) continue;
     try {
-      const firstMatch = execSync4(
+      const firstMatch = execSync5(
         `rg -i -n --hidden '${pattern.replace(/'/g, "\\'")}' '${filePath}' --max-count 1 2>/dev/null | head -1`,
         { cwd: projectRoot, encoding: "utf8", timeout: 1e3 }
       ).trim();
       const lineNum = parseInt(firstMatch.split(":")[0] ?? "1");
-      const totalLines = execSync4(`wc -l < '${filePath}'`, {
+      const totalLines = execSync5(`wc -l < '${filePath}'`, {
         cwd: projectRoot,
         encoding: "utf8",
         timeout: 1e3
@@ -7303,10 +7339,10 @@ async function hybridSearch(queryText, agentId, options) {
     };
     try {
       const fs = await import("fs");
-      const path55 = await import("path");
+      const path56 = await import("path");
       const os21 = await import("os");
-      const logPath = path55.join(os21.homedir(), ".exe-os", "search-quality.jsonl");
-      fs.mkdirSync(path55.dirname(logPath), { recursive: true });
+      const logPath = path56.join(os21.homedir(), ".exe-os", "search-quality.jsonl");
+      fs.mkdirSync(path56.dirname(logPath), { recursive: true });
       fs.appendFileSync(logPath, JSON.stringify(logEntry) + "\n");
     } catch {
     }
@@ -7740,7 +7776,7 @@ var init_hybrid_search = __esm({
 });
 
 // src/lib/session-key.ts
-import { execSync as execSync5 } from "child_process";
+import { execSync as execSync6 } from "child_process";
 function normalizeCommand(command) {
   const trimmed = command.trim().toLowerCase();
   const parts = trimmed.split(/[\\/]/);
@@ -7759,7 +7795,7 @@ function resolveRuntimeProcess() {
   let pid = process.ppid;
   for (let i = 0; i < 10; i++) {
     try {
-      const info = execSync5(`ps -p ${pid} -o ppid=,comm=`, {
+      const info = execSync6(`ps -p ${pid} -o ppid=,comm=`, {
         encoding: "utf8",
         timeout: 2e3
       }).trim();
@@ -7831,7 +7867,7 @@ __export(active_agent_exports, {
   writeActiveAgent: () => writeActiveAgent
 });
 import { readFileSync as readFileSync7, writeFileSync as writeFileSync4, mkdirSync as mkdirSync3, unlinkSync as unlinkSync3, readdirSync as readdirSync3 } from "fs";
-import { execSync as execSync6 } from "child_process";
+import { execSync as execSync7 } from "child_process";
 import path12 from "path";
 function isNameWithOptionalInstance(candidate, baseName) {
   if (candidate === baseName) return true;
@@ -7925,7 +7961,7 @@ function getActiveAgent() {
   } catch {
   }
   try {
-    const sessionName = execSync6(
+    const sessionName = execSync7(
       "tmux display-message -p '#{session_name}' 2>/dev/null",
       { encoding: "utf8", timeout: 2e3 }
     ).trim();
@@ -8599,8 +8635,8 @@ __export(wiki_client_exports, {
   listDocuments: () => listDocuments,
   listWorkspaces: () => listWorkspaces
 });
-async function wikiFetch(config2, path55, method = "GET", body) {
-  const url = `${config2.baseUrl}/api/v1${path55}`;
+async function wikiFetch(config2, path56, method = "GET", body) {
+  const url = `${config2.baseUrl}/api/v1${path56}`;
   const headers = {
     Authorization: `Bearer ${config2.apiKey}`,
     "Content-Type": "application/json"
@@ -8633,7 +8669,7 @@ async function wikiFetch(config2, path55, method = "GET", body) {
       }
     }
     if (!response.ok) {
-      throw new Error(`Wiki API ${method} ${path55}: ${response.status} ${response.statusText}`);
+      throw new Error(`Wiki API ${method} ${path56}: ${response.status} ${response.statusText}`);
     }
     return response.json();
   } finally {
@@ -9291,14 +9327,14 @@ var init_transport = __esm({
 });
 
 // src/lib/cc-agent-support.ts
-import { execSync as execSync7 } from "child_process";
+import { execSync as execSync8 } from "child_process";
 function _resetCcAgentSupportCache() {
   _cachedSupport = null;
 }
 function claudeSupportsAgentFlag() {
   if (_cachedSupport !== null) return _cachedSupport;
   try {
-    const helpOutput = execSync7("claude --help 2>&1", {
+    const helpOutput = execSync8("claude --help 2>&1", {
       encoding: "utf-8",
       timeout: 5e3
     });
@@ -10235,7 +10271,7 @@ __export(tmux_routing_exports, {
   spawnEmployee: () => spawnEmployee,
   verifyPaneAtCapacity: () => verifyPaneAtCapacity
 });
-import { execFileSync as execFileSync2, execSync as execSync8 } from "child_process";
+import { execFileSync as execFileSync2, execSync as execSync9 } from "child_process";
 import { readFileSync as readFileSync12, writeFileSync as writeFileSync10, mkdirSync as mkdirSync8, existsSync as existsSync17, appendFileSync, readdirSync as readdirSync5 } from "fs";
 import path21 from "path";
 import os10 from "os";
@@ -10956,7 +10992,7 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   let booted = false;
   for (let i = 0; i < 30; i++) {
     try {
-      execSync8("sleep 0.5");
+      execSync9("sleep 0.5");
     } catch {
     }
     try {
@@ -11204,7 +11240,7 @@ __export(tasks_crud_exports, {
 import crypto7 from "crypto";
 import path23 from "path";
 import os12 from "os";
-import { execSync as execSync9 } from "child_process";
+import { execSync as execSync10 } from "child_process";
 import { mkdir as mkdir4, writeFile as writeFile4, appendFile } from "fs/promises";
 import { existsSync as existsSync19, readFileSync as readFileSync14 } from "fs";
 async function writeCheckpoint(input) {
@@ -11549,14 +11585,14 @@ function isTmuxSessionAlive(identifier) {
   if (!identifier || identifier === "unknown") return true;
   try {
     if (identifier.startsWith("%")) {
-      const output = execSync9("tmux list-panes -a -F '#{pane_id}'", {
+      const output = execSync10("tmux list-panes -a -F '#{pane_id}'", {
         timeout: 2e3,
         encoding: "utf8",
         stdio: ["pipe", "pipe", "pipe"]
       });
       return output.split("\n").some((l) => l.trim() === identifier);
     } else {
-      execSync9(`tmux has-session -t ${JSON.stringify(identifier)}`, {
+      execSync10(`tmux has-session -t ${JSON.stringify(identifier)}`, {
         timeout: 2e3,
         stdio: ["pipe", "pipe", "pipe"]
       });
@@ -11565,7 +11601,7 @@ function isTmuxSessionAlive(identifier) {
   } catch {
     if (identifier.startsWith("%")) return true;
     try {
-      execSync9("tmux list-sessions", {
+      execSync10("tmux list-sessions", {
         timeout: 2e3,
         stdio: ["pipe", "pipe", "pipe"]
       });
@@ -11580,12 +11616,12 @@ function checkStaleCompletion(taskContext, taskCreatedAt) {
   if (!DELEGATION_KEYWORDS.test(taskContext)) return null;
   try {
     const since = new Date(taskCreatedAt).toISOString();
-    const branch = execSync9(
+    const branch = execSync10(
       "git rev-parse --abbrev-ref HEAD 2>/dev/null",
       { encoding: "utf8", timeout: 3e3 }
     ).trim();
     const branchArg = branch && branch !== "HEAD" ? branch : "";
-    const commitCount = execSync9(
+    const commitCount = execSync10(
       `git log --oneline --since="${since}" ${branchArg} 2>/dev/null | wc -l`,
       { encoding: "utf8", timeout: 5e3 }
     ).trim();
@@ -12768,12 +12804,14 @@ On EVERY new conversation, before doing anything else:
 1. **Memory scan**: Run recall_my_memory with broad queries \u2014 "project", "client", "pipeline", "campaign", "deal", "decision", "blocker". Summarize what you find.
 2. **Task scan**: Run list_tasks to see what's open, in progress, blocked, or needs review across all employees.
 3. **Team check**: Run ask_team_memory for recent activity from CTO/CMO/engineers.
-4. **Present the brief**: Give the founder a concise status report:
+4. **Bug fix check** (one-time, never repeat): Call list_my_bug_reports to see if AskExe has fixed any previously filed bugs. If any have status "fixed" with a fixed_version, tell the founder: "\u{1F527} N bug fix(es) available \u2014 run \`exe-os update\` to get version X.Y.Z." Skip silently if none or if the call fails.
+5. **Present the brief**: Give the founder a concise status report:
    - What's active and progressing
    - What's blocked and needs attention
    - What decisions are pending
+   - Available bug fixes (from step 4, if any)
    - What you recommend doing next
-5. Then ask: "What's the priority?"
+6. Then ask: "What's the priority?"
 
 If this is your FIRST ever conversation (few or no prior memories):
 - Search more broadly: "product", "SEO", "meeting", "strategy", "revenue"
@@ -12793,6 +12831,8 @@ Never say "I have no memories" without first searching broadly. Your memory may
 - **get_identity** \u2014 read any agent's identity for coordination
 - **set_agent_config** \u2014 view or change which tool (Claude Code, Codex, OpenCode) and model each agent uses. Call with no args to show all agents' current settings. Call with agent_id + runtime + model to change.
 - **send_message** \u2014 direct intercom to employees
+- **create_bug_report** \u2014 file a bug when you encounter an Exe OS platform issue
+- **list_my_bug_reports** \u2014 check status of filed bugs (boot check: surface available fixes to founder)
 ${PLAN_MODE_COMPAT}
 ## Completion Workflow
 
@@ -13957,13 +13997,13 @@ var init_crdt_sync = __esm({
 });
 
 // src/lib/tmux-status.ts
-import { execSync as execSync12 } from "child_process";
+import { execSync as execSync13 } from "child_process";
 function inTmux() {
   if (process.env.TMUX || process.env.TMUX_PANE) return true;
   const term = process.env.TERM ?? "";
   if (term.startsWith("tmux") || term.startsWith("screen")) return true;
   try {
-    execSync12("tmux display-message -p '#{session_name}' 2>/dev/null", {
+    execSync13("tmux display-message -p '#{session_name}' 2>/dev/null", {
       encoding: "utf8",
       timeout: 2e3
     });
@@ -13973,12 +14013,12 @@ function inTmux() {
   try {
     let pid = process.ppid;
     for (let depth = 0; depth < 8 && pid > 1; depth++) {
-      const comm = execSync12(`ps -p ${pid} -o comm= 2>/dev/null`, {
+      const comm = execSync13(`ps -p ${pid} -o comm= 2>/dev/null`, {
         encoding: "utf8",
         timeout: 1e3
       }).trim();
       if (/tmux/.test(comm)) return true;
-      const ppid = execSync12(`ps -p ${pid} -o ppid= 2>/dev/null`, {
+      const ppid = execSync13(`ps -p ${pid} -o ppid= 2>/dev/null`, {
         encoding: "utf8",
         timeout: 1e3
       }).trim();
@@ -13991,7 +14031,7 @@ function inTmux() {
 }
 function listTmuxSessions() {
   try {
-    const out = execSync12("tmux list-sessions -F '#{session_name}' 2>/dev/null", {
+    const out = execSync13("tmux list-sessions -F '#{session_name}' 2>/dev/null", {
       encoding: "utf8",
       timeout: 3e3
     });
@@ -14002,7 +14042,7 @@ function listTmuxSessions() {
 }
 function capturePaneLines(windowName, lines = 10) {
   try {
-    const out = execSync12(
+    const out = execSync13(
       `tmux capture-pane -t ${JSON.stringify(windowName)} -p 2>/dev/null | tail -${lines}`,
       { encoding: "utf8", timeout: 3e3 }
     );
@@ -14013,7 +14053,7 @@ function capturePaneLines(windowName, lines = 10) {
 }
 function getPaneCwd(windowName) {
   try {
-    const out = execSync12(
+    const out = execSync13(
       `tmux display-message -t ${JSON.stringify(windowName)} -p '#{pane_current_path}' 2>/dev/null`,
       { encoding: "utf8", timeout: 3e3 }
     );
@@ -14024,7 +14064,7 @@ function getPaneCwd(windowName) {
 }
 function projectFromPath(dir) {
   try {
-    const root = execSync12("git -C " + JSON.stringify(dir) + " rev-parse --show-toplevel 2>/dev/null", {
+    const root = execSync13("git -C " + JSON.stringify(dir) + " rev-parse --show-toplevel 2>/dev/null", {
       encoding: "utf8",
       timeout: 3e3
     }).trim();
@@ -14083,7 +14123,7 @@ function getEmployeeStatuses(employeeNames) {
     }
     let paneAlive = true;
     try {
-      const paneStatus = execSync12(
+      const paneStatus = execSync13(
         `tmux list-panes -t ${JSON.stringify(sessionName)} -F '#{pane_dead}' 2>/dev/null`,
         { encoding: "utf8", timeout: 3e3 }
       ).trim();
@@ -14190,7 +14230,7 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { spawn as spawn4 } from "child_process";
 import { existsSync as existsSync41, openSync as openSync4, mkdirSync as mkdirSync23, closeSync as closeSync4, readFileSync as readFileSync36 } from "fs";
-import path54 from "path";
+import path55 from "path";
 import os20 from "os";
 import { fileURLToPath as fileURLToPath7 } from "url";
 
@@ -18578,12 +18618,12 @@ function registerExportGraph(server2) {
         }
         const html = await exportGraphHTML(client);
         const fs = await import("fs");
-        const path55 = await import("path");
+        const path56 = await import("path");
         const os21 = await import("os");
-        const outDir = path55.join(os21.homedir(), ".exe-os", "exports");
+        const outDir = path56.join(os21.homedir(), ".exe-os", "exports");
         fs.mkdirSync(outDir, { recursive: true });
         const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-").slice(0, 19);
-        const filePath = path55.join(outDir, `graph-${timestamp}.html`);
+        const filePath = path56.join(outDir, `graph-${timestamp}.html`);
         fs.writeFileSync(filePath, html, "utf-8");
         return {
           content: [
@@ -19953,7 +19993,7 @@ import { z as z55 } from "zod";
 init_tmux_routing();
 init_task_scope();
 init_employees();
-import { execSync as execSync10 } from "child_process";
+import { execSync as execSync11 } from "child_process";
 import { existsSync as existsSync25, readFileSync as readFileSync21, writeFileSync as writeFileSync14 } from "fs";
 import { homedir as homedir5 } from "os";
 import { join as join3 } from "path";
@@ -23562,9 +23602,9 @@ var HostingerApiClient = class {
     }
     this.lastRequestTime = Date.now();
   }
-  async request(method, path55, body) {
+  async request(method, path56, body) {
     await this.rateLimit();
-    const url = `${this.baseUrl}${path55}`;
+    const url = `${this.baseUrl}${path56}`;
     const headers = {
       Authorization: `Bearer ${this.apiKey}`,
       "Content-Type": "application/json",
@@ -23637,8 +23677,8 @@ async function requestCloudflare(cfApiToken, zoneId, options) {
   }
   return envelope.result;
 }
-function buildUrl(zoneId, path55 = "/dns_records", query) {
-  const normalizedPath = path55.startsWith("/") ? path55 : `/${path55}`;
+function buildUrl(zoneId, path56 = "/dns_records", query) {
+  const normalizedPath = path56.startsWith("/") ? path56 : `/${path56}`;
   const url = new URL(
     `${CLOUDFLARE_API_BASE_URL}/zones/${zoneId}${normalizedPath}`
   );
@@ -24288,7 +24328,7 @@ function isScheduledTrigger(trigger) {
 init_database();
 init_store();
 import crypto16 from "crypto";
-import { execSync as execSync11 } from "child_process";
+import { execSync as execSync12 } from "child_process";
 var CRON_FIELD = /^[\d*/,\-]+$/;
 function isValidCron(cron) {
   const fields = cron.trim().split(/\s+/);
@@ -24414,7 +24454,7 @@ function addToCrontab(id, cron, prompt, projectDir) {
     const cwd = projectDir ? `cd ${JSON.stringify(projectDir)} && ` : "";
     const escapedPrompt = prompt.replace(/"/g, '\\"');
     const entry = `${cron} ${cwd}claude -p --dangerously-skip-permissions "${escapedPrompt}" # exe-schedule:${id}`;
-    execSync11(
+    execSync12(
       `(crontab -l 2>/dev/null; echo ${JSON.stringify(entry)}) | crontab -`,
       { timeout: 5e3, stdio: "ignore" }
     );
@@ -27349,14 +27389,206 @@ Upstream status: ${upstreamStatus}`
   );
 }
 
-// src/mcp/tools/support.ts
+// src/mcp/tools/create-feature-request.ts
+init_embedder();
+init_active_agent();
+init_config();
+init_license();
+init_store();
 import { z as z89 } from "zod";
+import crypto19 from "crypto";
+import { mkdir as mkdir7, writeFile as writeFile8 } from "fs/promises";
+import path50 from "path";
+var CATEGORY = z89.enum([
+  "upstream_feature",
+  "local_customization",
+  "integration",
+  "unclear"
+]);
+var PRIORITY = z89.enum(["p0", "p1", "p2", "p3"]);
+function slugify3(input) {
+  return input.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 80) || "feature-request";
+}
+function section2(title, body) {
+  return `## ${title}
+
+${body?.trim() || "Not provided"}`;
+}
+function buildMarkdown2(input) {
+  return [
+    `# Feature Request \u2014 ${input.title}`,
+    "",
+    `id: ${input.id}`,
+    `category: ${input.category}`,
+    `priority: ${input.priority}`,
+    `filed_by: ${input.agentId} (${input.agentRole})`,
+    `package_version: ${input.packageVersion}`,
+    `project: ${input.projectName ?? "unknown"}`,
+    `created_at: ${(/* @__PURE__ */ new Date()).toISOString()}`,
+    "",
+    section2("Description", input.description),
+    section2("Use Case", input.useCase),
+    section2("Current Workaround", input.currentWorkaround),
+    section2("Proposed Solution", input.proposedSolution),
+    section2("Business Impact", input.businessImpact)
+  ].join("\n");
+}
+async function maybeSendUpstream2(payload) {
+  const config2 = await loadConfig();
+  const routerUrl = process.env.API_ROUTER_URL?.replace(/\/+$/, "");
+  const endpoint2 = config2.support?.featureRequestEndpoint || process.env.EXE_FEATURE_REQUEST_ENDPOINT || (routerUrl ? `${routerUrl}/v1/support/feature-requests` : "https://askexe.com/v1/support/feature-requests");
+  const token = config2.support?.featureRequestToken || process.env.EXE_FEATURE_REQUEST_TOKEN;
+  const licenseKey = loadLicense() || process.env.EXE_LICENSE_KEY || config2.cloud?.apiKey;
+  const licenseToken = readCachedLicenseToken();
+  if (!endpoint2) {
+    return "not_configured";
+  }
+  try {
+    const parsed = new URL(endpoint2);
+    if (parsed.protocol !== "https:" && !["localhost", "127.0.0.1", "::1"].includes(parsed.hostname)) {
+      return "failed: insecure endpoint rejected";
+    }
+    const response = await fetch(parsed, {
+      method: "POST",
+      headers: {
+        "content-type": "application/json",
+        ...token ? { authorization: `Bearer ${token}` } : {},
+        ...licenseKey ? { "x-exe-license-key": licenseKey } : {},
+        ...licenseToken ? { "x-exe-license-token": licenseToken } : {}
+      },
+      body: JSON.stringify(payload),
+      signal: AbortSignal.timeout(1e4)
+    });
+    if (!response.ok) return `failed: HTTP ${response.status}`;
+    return "sent";
+  } catch (err) {
+    return `failed: ${err instanceof Error ? err.message : String(err)}`;
+  }
+}
+function registerCreateFeatureRequest(server2) {
+  server2.registerTool(
+    "create_feature_request",
+    {
+      title: "Create Feature Request",
+      description: "File a feature request for exe-os: upstream_feature (requires platform changes), local_customization (configurable in customer layers), integration (third-party), or unclear. Writes a local report, stores memory, and optionally sends to AskExe.",
+      inputSchema: {
+        title: z89.string().min(3).describe("Short descriptive title"),
+        category: CATEGORY.describe(
+          "upstream_feature = platform capability change; local_customization = configurable in customer layers; integration = third-party connector; unclear = needs product triage"
+        ),
+        priority: PRIORITY.default("p2").describe("p0 critical \u2192 p3 low"),
+        description: z89.string().min(10).describe("What capability is needed and why"),
+        use_case: z89.string().optional().describe("Concrete scenario where this feature would be used"),
+        current_workaround: z89.string().optional().describe("How the need is currently addressed, if at all"),
+        proposed_solution: z89.string().optional().describe("Suggested implementation approach"),
+        business_impact: z89.string().optional().describe("Impact on business/workflow if this ships"),
+        package_version: z89.string().optional().describe("Installed @askexenow/exe-os version"),
+        project_name: z89.string().optional().describe("Project/customer context"),
+        send_upstream: z89.boolean().default(true).describe("Attempt to POST to configured AskExe support endpoint")
+      }
+    },
+    async ({
+      title,
+      category,
+      priority,
+      description,
+      use_case,
+      current_workaround,
+      proposed_solution,
+      business_impact,
+      package_version,
+      project_name,
+      send_upstream
+    }) => {
+      const { agentId, agentRole } = getActiveAgent();
+      const id = crypto19.randomUUID();
+      const version = package_version ?? "unknown";
+      const markdown = buildMarkdown2({
+        id,
+        title,
+        category,
+        priority,
+        agentId,
+        agentRole,
+        packageVersion: version,
+        description,
+        useCase: use_case,
+        currentWorkaround: current_workaround,
+        proposedSolution: proposed_solution,
+        businessImpact: business_impact,
+        projectName: project_name
+      });
+      const outDir = path50.join(EXE_AI_DIR, "feature-requests");
+      await mkdir7(outDir, { recursive: true });
+      const reportPath = path50.join(outDir, `${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}-${slugify3(title)}-${id.slice(0, 8)}.md`);
+      await writeFile8(reportPath, markdown, "utf-8");
+      let vector = null;
+      try {
+        vector = await embed(markdown);
+      } catch {
+        vector = null;
+      }
+      await writeMemory({
+        id,
+        agent_id: agentId,
+        agent_role: agentRole,
+        session_id: process.env.SESSION_ID ?? "manual",
+        timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+        tool_name: "create_feature_request",
+        project_name: project_name ?? "support",
+        has_error: false,
+        raw_text: markdown,
+        vector,
+        source_path: reportPath,
+        source_type: "feature_request",
+        memory_type: "feature_request",
+        tier: 1,
+        importance: priority === "p0" ? 10 : priority === "p1" ? 9 : priority === "p2" ? 7 : 5,
+        intent: "request",
+        domain: "support",
+        file_paths: null
+      });
+      await flushBatch();
+      const upstreamStatus = send_upstream ? await maybeSendUpstream2({
+        id,
+        title,
+        category,
+        priority,
+        description,
+        use_case,
+        current_workaround,
+        proposed_solution,
+        business_impact,
+        package_version: version,
+        project_name,
+        agent_id: agentId,
+        agent_role: agentRole
+      }) : "skipped";
+      return {
+        content: [
+          {
+            type: "text",
+            text: `Feature request created.
+ID: ${id}
+Category: ${category}
+Local report: ${reportPath}
+Memory stored: ${id}
+Upstream status: ${upstreamStatus}`
+          }
+        ]
+      };
+    }
+  );
+}
+
+// src/mcp/tools/support.ts
+import { z as z90 } from "zod";
 
 // src/bin/exe-support.ts
 init_config();
 init_license();
 import { mkdirSync as mkdirSync21, readFileSync as readFileSync32, unlinkSync as unlinkSync12, writeFileSync as writeFileSync23 } from "fs";
-import path50 from "path";
+import path51 from "path";
 import { randomUUID as randomUUID9 } from "crypto";
 var DEFAULT_BUG_ENDPOINT = "https://askexe.com/v1/support/bug-reports";
 var DEFAULT_ADMIN_ENDPOINT = "https://askexe.com/admin/support/bug-reports";
@@ -27477,8 +27709,8 @@ async function resolveEndpoints() {
   return { bugEndpoint, healthEndpoint, adminEndpoint };
 }
 function checkLocalWrite() {
-  const dir = path50.join(EXE_AI_DIR, "bug-reports");
-  const testPath = path50.join(dir, ".support-write-test");
+  const dir = path51.join(EXE_AI_DIR, "bug-reports");
+  const testPath = path51.join(dir, ".support-write-test");
   try {
     mkdirSync21(dir, { recursive: true, mode: 448 });
     writeFileSync23(testPath, "ok\n", { mode: 384 });
@@ -27494,10 +27726,10 @@ function checkLocalWrite() {
   }
 }
 function writeLocalTestReport(id, project, version) {
-  const dir = path50.join(EXE_AI_DIR, "bug-reports");
+  const dir = path51.join(EXE_AI_DIR, "bug-reports");
   mkdirSync21(dir, { recursive: true, mode: 448 });
   const date = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
-  const filePath = path50.join(dir, `${date}-support-intake-test-${id.slice(0, 8)}.md`);
+  const filePath = path51.join(dir, `${date}-support-intake-test-${id.slice(0, 8)}.md`);
   writeFileSync23(filePath, `# TEST \u2014 ${project} support intake
 
 Report ID: ${id}
@@ -27539,15 +27771,15 @@ async function maybeCloseAdmin(id, adminEndpoint, version) {
   }
 }
 function readPackageVersion2() {
-  let dir = path50.dirname(new URL(import.meta.url).pathname);
+  let dir = path51.dirname(new URL(import.meta.url).pathname);
   for (let i = 0; i < 6; i++) {
-    const pkg = path50.join(dir, "package.json");
+    const pkg = path51.join(dir, "package.json");
     try {
       const parsed = JSON.parse(readFileSync32(pkg, "utf8"));
       if (parsed.version) return parsed.version;
     } catch {
     }
-    dir = path50.dirname(dir);
+    dir = path51.dirname(dir);
   }
   return "unknown";
 }
@@ -27573,6 +27805,7 @@ function nextForPostFailure(status2) {
 }
 
 // src/mcp/tools/support.ts
+init_license();
 function formatRows(rows, mode) {
   const lines = [`exe-os support ${mode}`, ""];
   for (const row of rows) {
@@ -27613,7 +27846,7 @@ function registerSupportTools(server2) {
       title: "Support Test",
       description: "End-to-end support intake smoke test. Files a clearly marked test report upstream and auto-closes it on AskExe machines with admin credentials.",
       inputSchema: {
-        project: z89.string().default("support-smoke").describe("Customer/project name, e.g. hygo")
+        project: z90.string().default("support-smoke").describe("Customer/project name, e.g. hygo")
       }
     },
     async ({ project }) => {
@@ -27625,12 +27858,139 @@ function registerSupportTools(server2) {
       };
     }
   );
+  server2.registerTool(
+    "list_my_bug_reports",
+    {
+      title: "My Bug Reports",
+      description: "List bug reports you've filed, scoped to your license. Shows status (open/triaged/fixed/closed), severity, and fixed_version so you know when to update.",
+      inputSchema: {
+        status: z90.enum(["all", "open", "triaged", "fixed", "closed", "wontfix"]).default("all").describe("Filter by status. Default: all"),
+        limit: z90.number().min(1).max(50).default(25).describe("Max results")
+      }
+    },
+    async ({ status: status2, limit }) => {
+      const licenseKey = loadLicense();
+      const licenseToken = readCachedLicenseToken();
+      if (!licenseKey && !licenseToken) {
+        return {
+          content: [{ type: "text", text: "No license key found. Run `exe-os setup` or `exe-os cloud setup` first." }],
+          isError: true
+        };
+      }
+      const endpoint2 = new URL("https://askexe.com/v1/support/my-reports");
+      endpoint2.searchParams.set("status", status2);
+      endpoint2.searchParams.set("limit", String(limit));
+      const headers = { "content-type": "application/json" };
+      if (licenseKey) headers["x-exe-license-key"] = licenseKey;
+      if (licenseToken) headers["x-exe-license-token"] = licenseToken;
+      try {
+        const res = await fetch(endpoint2.toString(), { method: "GET", headers, signal: AbortSignal.timeout(15e3) });
+        if (!res.ok) {
+          const body = await res.text().catch(() => "");
+          return {
+            content: [{ type: "text", text: `Failed to fetch bug reports: HTTP ${res.status}${body ? ` \u2014 ${body}` : ""}` }],
+            isError: true
+          };
+        }
+        const data = await res.json();
+        if (data.count === 0) {
+          return {
+            content: [{ type: "text", text: `No bug reports found${status2 !== "all" ? ` with status '${status2}'` : ""}.` }],
+            structuredContent: { items: [], count: 0 }
+          };
+        }
+        const lines = [`Bug reports (${data.count}):`, ""];
+        for (const r of data.items) {
+          const sevIcon = r.severity === "p0" ? "\u{1F534}" : r.severity === "p1" ? "\u{1F534}" : r.severity === "p2" ? "\u{1F7E0}" : "\u{1F7E2}";
+          const statusIcon = r.status === "fixed" ? "\u2705" : r.status === "closed" ? "\u2611\uFE0F" : r.status === "triaged" ? "\u{1F50D}" : r.status === "wontfix" ? "\u26D4" : "\u{1F535}";
+          lines.push(`${sevIcon} ${r.severity.toUpperCase()} ${statusIcon} ${r.status} \u2014 ${r.title}`);
+          lines.push(`   ID: ${r.id} | Filed: ${r.created_at?.slice(0, 10) ?? "?"}`);
+          if (r.fixed_version) lines.push(`   \u{1F527} Fixed in: ${r.fixed_version} \u2014 run \`exe-os update\` to get this fix`);
+          if (r.triage_notes) lines.push(`   \u{1F4DD} AskExe: ${r.triage_notes}`);
+          lines.push("");
+        }
+        return {
+          content: [{ type: "text", text: lines.join("\n") }],
+          structuredContent: data
+        };
+      } catch (err) {
+        return {
+          content: [{ type: "text", text: `Error fetching bug reports: ${err instanceof Error ? err.message : String(err)}` }],
+          isError: true
+        };
+      }
+    }
+  );
+  server2.registerTool(
+    "list_my_feature_requests",
+    {
+      title: "My Feature Requests",
+      description: "List feature requests you've filed, scoped to your license. Shows status (open/planned/in_progress/shipped/closed), priority, and shipped_version so you know when to update.",
+      inputSchema: {
+        status: z90.enum(["all", "open", "planned", "in_progress", "shipped", "closed", "wontdo"]).default("all").describe("Filter by status. Default: all"),
+        limit: z90.number().min(1).max(50).default(25).describe("Max results")
+      }
+    },
+    async ({ status: status2, limit }) => {
+      const licenseKey = loadLicense();
+      const licenseToken = readCachedLicenseToken();
+      if (!licenseKey && !licenseToken) {
+        return {
+          content: [{ type: "text", text: "No license key found. Run `exe-os setup` or `exe-os cloud setup` first." }],
+          isError: true
+        };
+      }
+      const endpoint2 = new URL("https://askexe.com/v1/support/my-feature-requests");
+      endpoint2.searchParams.set("status", status2);
+      endpoint2.searchParams.set("limit", String(limit));
+      const headers = { "content-type": "application/json" };
+      if (licenseKey) headers["x-exe-license-key"] = licenseKey;
+      if (licenseToken) headers["x-exe-license-token"] = licenseToken;
+      try {
+        const res = await fetch(endpoint2.toString(), { method: "GET", headers, signal: AbortSignal.timeout(15e3) });
+        if (!res.ok) {
+          const body = await res.text().catch(() => "");
+          return {
+            content: [{ type: "text", text: `Failed to fetch feature requests: HTTP ${res.status}${body ? ` \u2014 ${body}` : ""}` }],
+            isError: true
+          };
+        }
+        const data = await res.json();
+        if (data.count === 0) {
+          return {
+            content: [{ type: "text", text: `No feature requests found${status2 !== "all" ? ` with status '${status2}'` : ""}.` }],
+            structuredContent: { items: [], count: 0 }
+          };
+        }
+        const lines = [`Feature requests (${data.count}):`, ""];
+        for (const r of data.items) {
+          const priIcon = r.priority === "p0" ? "\u{1F534}" : r.priority === "p1" ? "\u{1F534}" : r.priority === "p2" ? "\u{1F7E0}" : "\u{1F7E2}";
+          const statusIcon = r.status === "shipped" ? "\u2705" : r.status === "closed" ? "\u2611\uFE0F" : r.status === "planned" ? "\u{1F4CB}" : r.status === "in_progress" ? "\u{1F528}" : r.status === "wontdo" ? "\u26D4" : "\u{1F535}";
+          lines.push(`${priIcon} ${r.priority.toUpperCase()} ${statusIcon} ${r.status} \u2014 ${r.title}`);
+          lines.push(`   ID: ${r.id} | Filed: ${r.created_at?.slice(0, 10) ?? "?"}`);
+          if (r.shipped_version) lines.push(`   \u{1F680} Shipped in: ${r.shipped_version} \u2014 run \`exe-os update\` to get this feature`);
+          if (r.target_version) lines.push(`   \u{1F3AF} Target: ${r.target_version}`);
+          if (r.response_notes) lines.push(`   \u{1F4DD} AskExe: ${r.response_notes}`);
+          lines.push("");
+        }
+        return {
+          content: [{ type: "text", text: lines.join("\n") }],
+          structuredContent: data
+        };
+      } catch (err) {
+        return {
+          content: [{ type: "text", text: `Error fetching feature requests: ${err instanceof Error ? err.message : String(err)}` }],
+          isError: true
+        };
+      }
+    }
+  );
 }
 
 // src/mcp/tools/cli-parity.ts
 import { execFile as execFile2 } from "child_process";
 import { promisify as promisify2 } from "util";
-import { z as z90 } from "zod";
+import { z as z91 } from "zod";
 
 // src/bin/exe-status.ts
 init_employees();
@@ -27691,22 +28051,22 @@ if (isMainModule(import.meta.url)) {
 
 // src/bin/exe-healthcheck.ts
 import { existsSync as existsSync39, readFileSync as readFileSync33, readdirSync as readdirSync14 } from "fs";
-import path51 from "path";
-import { execSync as execSync13 } from "child_process";
+import path52 from "path";
+import { execSync as execSync14 } from "child_process";
 import { fileURLToPath as fileURLToPath6 } from "url";
 init_config();
 function findPackageRoot2() {
-  let dir = path51.dirname(fileURLToPath6(import.meta.url));
-  const { root } = path51.parse(dir);
+  let dir = path52.dirname(fileURLToPath6(import.meta.url));
+  const { root } = path52.parse(dir);
   while (dir !== root) {
-    if (existsSync39(path51.join(dir, "package.json"))) return dir;
-    dir = path51.dirname(dir);
+    if (existsSync39(path52.join(dir, "package.json"))) return dir;
+    dir = path52.dirname(dir);
   }
   throw new Error("Cannot find package root");
 }
 function checkBuildIntegrity(pkgRoot) {
   const results = [];
-  const tsupConfig = path51.join(pkgRoot, "tsup.config.ts");
+  const tsupConfig = path52.join(pkgRoot, "tsup.config.ts");
   if (!existsSync39(tsupConfig)) {
     return [{ name: "build/tsup-config", pass: false, detail: "tsup.config.ts not found" }];
   }
@@ -27716,7 +28076,7 @@ function checkBuildIntegrity(pkgRoot) {
   let total = 0;
   for (const match of entryMatches) {
     const outputKey = match[1];
-    const expectedPath = path51.join(pkgRoot, "dist", `${outputKey}.js`);
+    const expectedPath = path52.join(pkgRoot, "dist", `${outputKey}.js`);
     total++;
     if (!existsSync39(expectedPath)) {
       missing.push(`dist/${outputKey}.js`);
@@ -27740,7 +28100,7 @@ function checkBuildIntegrity(pkgRoot) {
 }
 function checkEmbedPipeline(pkgRoot) {
   const results = [];
-  const daemonPath = path51.join(pkgRoot, "dist", "lib", "exe-daemon.js");
+  const daemonPath = path52.join(pkgRoot, "dist", "lib", "exe-daemon.js");
   if (!existsSync39(daemonPath)) {
     results.push({
       name: "exed/daemon-exists",
@@ -27752,17 +28112,17 @@ function checkEmbedPipeline(pkgRoot) {
   results.push({ name: "exed/daemon-exists", pass: true, detail: "dist/lib/exe-daemon.js exists" });
   const entryDirs = ["dist/hooks", "dist/bin", "dist/mcp"];
   for (const dir of entryDirs) {
-    const fullDir = path51.join(pkgRoot, dir);
+    const fullDir = path52.join(pkgRoot, dir);
     if (!existsSync39(fullDir)) continue;
     let walkDir = fullDir;
-    const { root } = path51.parse(walkDir);
+    const { root } = path52.parse(walkDir);
     let foundRoot = null;
     while (walkDir !== root) {
-      if (existsSync39(path51.join(walkDir, "package.json"))) {
+      if (existsSync39(path52.join(walkDir, "package.json"))) {
         foundRoot = walkDir;
         break;
       }
-      walkDir = path51.dirname(walkDir);
+      walkDir = path52.dirname(walkDir);
     }
     if (!foundRoot) {
       results.push({
@@ -27772,7 +28132,7 @@ function checkEmbedPipeline(pkgRoot) {
       });
       continue;
     }
-    const resolvedDaemon = path51.join(foundRoot, "dist", "lib", "exe-daemon.js");
+    const resolvedDaemon = path52.join(foundRoot, "dist", "lib", "exe-daemon.js");
     const reachable = existsSync39(resolvedDaemon);
     results.push({
       name: `exed/reachable-from-${dir}`,
@@ -27784,13 +28144,13 @@ function checkEmbedPipeline(pkgRoot) {
 }
 function checkTaskSystem(pkgRoot) {
   const results = [];
-  const scannerPath = path51.join(pkgRoot, "dist", "bin", "scan-tasks.js");
+  const scannerPath = path52.join(pkgRoot, "dist", "bin", "scan-tasks.js");
   if (!existsSync39(scannerPath)) {
     results.push({ name: "tasks/scanner", pass: false, detail: "scan-tasks.js not found" });
     return results;
   }
   try {
-    execSync13(`node "${scannerPath}" /tmp/nonexistent-healthcheck-test --format=json 2>/dev/null`, {
+    execSync14(`node "${scannerPath}" /tmp/nonexistent-healthcheck-test --format=json 2>/dev/null`, {
       timeout: 1e4,
       encoding: "utf-8"
     });
@@ -27807,13 +28167,13 @@ function checkTaskSystem(pkgRoot) {
 }
 function checkWorkerSpawning(pkgRoot) {
   const results = [];
-  const workerPath = path51.join(pkgRoot, "dist", "hooks", "ingest-worker.js");
+  const workerPath = path52.join(pkgRoot, "dist", "hooks", "ingest-worker.js");
   if (!existsSync39(workerPath)) {
     results.push({ name: "workers/ingest-worker", pass: false, detail: "ingest-worker.js not found" });
     return results;
   }
   try {
-    execSync13(`node --check "${workerPath}" 2>&1`, { timeout: 1e4, encoding: "utf-8" });
+    execSync14(`node --check "${workerPath}" 2>&1`, { timeout: 1e4, encoding: "utf-8" });
     results.push({ name: "workers/ingest-worker", pass: true, detail: "ingest-worker.js parses OK" });
   } catch (err) {
     results.push({
@@ -27822,14 +28182,14 @@ function checkWorkerSpawning(pkgRoot) {
       detail: `Parse error: ${err instanceof Error ? err.message.slice(0, 200) : String(err)}`
     });
   }
-  const hooksDir = path51.join(pkgRoot, "dist", "hooks");
+  const hooksDir = path52.join(pkgRoot, "dist", "hooks");
   if (existsSync39(hooksDir)) {
     const hookFiles = readdirSync14(hooksDir).filter((f) => f.endsWith(".js") && !f.endsWith(".js.map"));
     let hooksPassed = 0;
     const hooksFailed = [];
     for (const hook of hookFiles) {
       try {
-        execSync13(`node --check "${path51.join(hooksDir, hook)}" 2>&1`, { timeout: 1e4, encoding: "utf-8" });
+        execSync14(`node --check "${path52.join(hooksDir, hook)}" 2>&1`, { timeout: 1e4, encoding: "utf-8" });
         hooksPassed++;
       } catch {
         hooksFailed.push(hook);
@@ -27853,8 +28213,8 @@ function checkWorkerSpawning(pkgRoot) {
 }
 function checkMcpTransport() {
   const results = [];
-  const pidPath = path51.join(EXE_AI_DIR, "exed.pid");
-  const tokenPath = path51.join(EXE_AI_DIR, "exed.token");
+  const pidPath = path52.join(EXE_AI_DIR, "exed.pid");
+  const tokenPath = path52.join(EXE_AI_DIR, "exed.token");
   let daemonAlive = false;
   if (existsSync39(pidPath)) {
     try {
@@ -27871,7 +28231,7 @@ function checkMcpTransport() {
   if (daemonAlive && existsSync39(tokenPath)) {
     try {
       const token = readFileSync33(tokenPath, "utf8").trim();
-      const response = execSync13(
+      const response = execSync14(
         `curl -sS -i -m 2 -H "Authorization: Bearer ${token}" -H 'Accept: application/json, text/event-stream' http://127.0.0.1:48739/mcp`,
         { encoding: "utf8", timeout: 3e3 }
       );
@@ -27901,7 +28261,7 @@ function checkMcpTransport() {
   results.push({
     name: "mcp/monitor-summary",
     pass: true,
-    detail: `Privacy-safe local monitor summary: ${path51.join(EXE_AI_DIR, "monitor", "mcp-transport-summary.json")}`
+    detail: `Privacy-safe local monitor summary: ${path52.join(EXE_AI_DIR, "monitor", "mcp-transport-summary.json")}`
   });
   return results;
 }
@@ -27922,7 +28282,7 @@ function checkClaudeCodeInstall() {
     });
   }
   try {
-    const claudePath = execSync13("which claude 2>/dev/null || true", { encoding: "utf8", timeout: 5e3 }).trim();
+    const claudePath = execSync14("which claude 2>/dev/null || true", { encoding: "utf8", timeout: 5e3 }).trim();
     if (!claudePath) {
       results.push({
         name: "cc/cli-binary",
@@ -27932,7 +28292,7 @@ function checkClaudeCodeInstall() {
     } else {
       let resolved = claudePath;
       try {
-        resolved = execSync13(`readlink -f "${claudePath}" 2>/dev/null || readlink "${claudePath}" 2>/dev/null || echo "${claudePath}"`, {
+        resolved = execSync14(`readlink -f "${claudePath}" 2>/dev/null || readlink "${claudePath}" 2>/dev/null || echo "${claudePath}"`, {
           encoding: "utf8",
           timeout: 5e3
         }).trim();
@@ -27959,7 +28319,7 @@ function checkClaudeCodeInstall() {
       detail: "Failed to check claude binary path"
     });
   }
-  const versionsDir = path51.join(
+  const versionsDir = path52.join(
     process.env.HOME ?? process.env.USERPROFILE ?? "",
     ".local",
     "share",
@@ -28016,7 +28376,7 @@ function checkClaudeCodeInstall() {
     });
   }
   try {
-    const ccVersion = execSync13("claude --version 2>/dev/null || echo unknown", {
+    const ccVersion = execSync14("claude --version 2>/dev/null || echo unknown", {
       encoding: "utf8",
       timeout: 5e3
     }).trim();
@@ -28064,17 +28424,17 @@ if (isMainModule(import.meta.url)) {
 }
 
 // src/lib/update-check.ts
-import { execSync as execSync14 } from "child_process";
+import { execSync as execSync15 } from "child_process";
 import { readFileSync as readFileSync34 } from "fs";
-import path52 from "path";
+import path53 from "path";
 function getLocalVersion(packageRoot) {
-  const pkgPath = path52.join(packageRoot, "package.json");
+  const pkgPath = path53.join(packageRoot, "package.json");
   const pkg = JSON.parse(readFileSync34(pkgPath, "utf-8"));
   return pkg.version;
 }
 function getRemoteVersion() {
   try {
-    const output = execSync14("npm view @askexenow/exe-os version", {
+    const output = execSync15("npm view @askexenow/exe-os version", {
       encoding: "utf-8",
       timeout: 15e3,
       stdio: ["pipe", "pipe", "pipe"]
@@ -28136,12 +28496,12 @@ function registerCliParityTools(server2) {
     title: "Doctor",
     description: "Run exe-os doctor audit. Defaults to read-only diagnostics; optional dry-run/fix flags mirror CLI.",
     inputSchema: {
-      agent: z90.string().optional(),
-      project: z90.string().optional(),
-      verbose: z90.boolean().default(false),
-      conflicts: z90.boolean().default(false),
-      dry_run: z90.boolean().default(false),
-      fix: z90.boolean().default(false)
+      agent: z91.string().optional(),
+      project: z91.string().optional(),
+      verbose: z91.boolean().default(false),
+      conflicts: z91.boolean().default(false),
+      dry_run: z91.boolean().default(false),
+      fix: z91.boolean().default(false)
     }
   }, async ({ agent, project, verbose, conflicts, dry_run, fix }) => {
     const args = [];
@@ -28158,9 +28518,9 @@ function registerCliParityTools(server2) {
     title: "Rename Employee",
     description: "Rename an employee using the same path as `exe-os rename <old> <new>`. Use for customer roster/identity renames.",
     inputSchema: {
-      old_name: z90.string().min(1),
-      new_name: z90.string().min(1),
-      dry_run: z90.boolean().default(false)
+      old_name: z91.string().min(1),
+      new_name: z91.string().min(1),
+      dry_run: z91.boolean().default(false)
     }
   }, async ({ old_name, new_name, dry_run }) => {
     if (dry_run) {
@@ -28173,7 +28533,7 @@ function registerCliParityTools(server2) {
   server2.registerTool("status_brief", {
     title: "Status Brief",
     description: "Return current employee/tmux status. Mirrors `exe-status` and supports optional deep view for one employee.",
-    inputSchema: { employee: z90.string().optional() }
+    inputSchema: { employee: z91.string().optional() }
   }, async ({ employee }) => {
     const text3 = await status(employee);
     return result2(text3, { ok: true, employee: employee ?? null });
@@ -28181,7 +28541,7 @@ function registerCliParityTools(server2) {
   server2.registerTool("pending_work_summary", {
     title: "Pending Work Summary",
     description: "Return pending reviews, messages, and notifications using the same summaries as the CLI tools.",
-    inputSchema: { agent: z90.string().optional() }
+    inputSchema: { agent: z91.string().optional() }
   }, async ({ agent }) => {
     const parts = await Promise.all([
       runCommand("exe-pending-reviews", [], 3e4),
@@ -28202,7 +28562,7 @@ function registerCliParityTools(server2) {
   server2.registerTool("key_rotation_preflight", {
     title: "Key Rotation Preflight",
     description: "Dry-run key rotation/update preflight. No destructive changes.",
-    inputSchema: { mode: z90.enum(["rotate", "update"]).default("rotate") }
+    inputSchema: { mode: z91.enum(["rotate", "update"]).default("rotate") }
   }, async ({ mode }) => {
     const out = await runCommand("exe-os", ["key", mode, "--dry-run"], 6e4);
     return result2(out.text, { ok: out.ok, command: out.command, mode }, !out.ok);
@@ -28221,11 +28581,11 @@ function registerCliParityTools(server2) {
     title: "Stack Update Check",
     description: "Plan/check a customer stack update without applying Docker changes. Mirrors `exe-os stack-update --check`.",
     inputSchema: {
-      target: z90.string().optional(),
-      manifest: z90.string().optional(),
-      compose_file: z90.string().optional(),
-      env_file: z90.string().optional(),
-      deployment_persona: z90.enum(["customer", "askexe-control-plane"]).default("customer")
+      target: z91.string().optional(),
+      manifest: z91.string().optional(),
+      compose_file: z91.string().optional(),
+      env_file: z91.string().optional(),
+      deployment_persona: z91.enum(["customer", "askexe-control-plane"]).default("customer")
     }
   }, async ({ target, manifest, compose_file, env_file, deployment_persona }) => {
     const args = ["stack-update", "--check", "--deployment-persona", deployment_persona];
@@ -28249,7 +28609,7 @@ function registerCliParityTools(server2) {
 // src/mcp/tools/get-session-events.ts
 init_active_agent();
 init_fast_db_init();
-import { z as z91 } from "zod";
+import { z as z92 } from "zod";
 
 // src/lib/session-events.ts
 init_task_scope();
@@ -28336,7 +28696,7 @@ async function listRecentSessionEvents(client, options) {
 }
 
 // src/mcp/tools/get-session-events.ts
-var EVENT_TYPE = z91.enum([
+var EVENT_TYPE = z92.enum([
   "user_prompt",
   "assistant_response",
   "tool_call",
@@ -28366,11 +28726,11 @@ function registerGetSessionEvents(server2) {
       title: "Get Session Events",
       description: "Return exact recent chronological user prompts, assistant responses, and tool calls from the append-only session journal. Use this when asked what happened last, not semantic memory search.",
       inputSchema: {
-        agent_id: z91.string().optional().describe("Agent to inspect. Defaults to active agent. COO/CTO may inspect others."),
-        session_id: z91.string().optional().describe("Optional exact runtime session id."),
+        agent_id: z92.string().optional().describe("Agent to inspect. Defaults to active agent. COO/CTO may inspect others."),
+        session_id: z92.string().optional().describe("Optional exact runtime session id."),
         event_type: EVENT_TYPE.optional().describe("Filter to one event type."),
-        project_name: z91.string().optional().describe("Optional project filter. Pass 'all' for all projects."),
-        limit: z91.number().int().min(1).max(100).default(20).describe("Number of events to return.")
+        project_name: z92.string().optional().describe("Optional project filter. Pass 'all' for all projects."),
+        limit: z92.number().int().min(1).max(100).default(20).describe("Number of events to return.")
       }
     },
     async ({ agent_id, session_id, event_type, project_name, limit }) => {
@@ -28406,8 +28766,8 @@ function registerGetLastAssistantResponse(server2) {
       title: "Get Last Assistant Response",
       description: "Return the exact last assistant response for an agent from the session event journal. Use for 'what was the last thing you said?'",
       inputSchema: {
-        agent_id: z91.string().optional().describe("Agent to inspect. Defaults to active agent. COO/CTO may inspect others."),
-        project_name: z91.string().optional().describe("Optional project filter. Pass 'all' for all projects.")
+        agent_id: z92.string().optional().describe("Agent to inspect. Defaults to active agent. COO/CTO may inspect others."),
+        project_name: z92.string().optional().describe("Optional project filter. Pass 'all' for all projects.")
       }
     },
     async ({ agent_id, project_name }) => {
@@ -28437,32 +28797,106 @@ function registerGetLastAssistantResponse(server2) {
 }
 
 // src/mcp/tools/code-context.ts
-import { z as z92 } from "zod";
+import { z as z93 } from "zod";
 
 // src/lib/code-context-index.ts
 init_config();
-import crypto19 from "crypto";
-import path53 from "path";
+import crypto20 from "crypto";
+import path54 from "path";
 import { existsSync as existsSync40, mkdirSync as mkdirSync22, readFileSync as readFileSync35, readdirSync as readdirSync15, statSync as statSync9, writeFileSync as writeFileSync24 } from "fs";
 import { spawnSync } from "child_process";
+init_exe_daemon_client();
+var VECTOR_STORE_VERSION = 1;
+var EMBED_BATCH_SIZE = 64;
+function vectorStorePath(projectRoot) {
+  const rootHash = hashText(projectRoot).slice(0, 16);
+  return path54.join(indexDir(), `${rootHash}.vectors.json`);
+}
+function loadVectorStore(projectRoot) {
+  const file = vectorStorePath(projectRoot);
+  if (!existsSync40(file)) return null;
+  try {
+    const parsed = JSON.parse(readFileSync35(file, "utf8"));
+    if (parsed.version !== VECTOR_STORE_VERSION) return null;
+    return parsed;
+  } catch {
+    return null;
+  }
+}
+function saveVectorStore(projectRoot, store) {
+  writeFileSync24(vectorStorePath(projectRoot), JSON.stringify(store));
+}
+function cosineSimilarity3(a, b) {
+  let dot = 0, normA = 0, normB = 0;
+  for (let i = 0; i < a.length; i++) {
+    dot += a[i] * b[i];
+    normA += a[i] * a[i];
+    normB += b[i] * b[i];
+  }
+  const denom = Math.sqrt(normA) * Math.sqrt(normB);
+  return denom === 0 ? 0 : dot / denom;
+}
+async function embedSymbols(index) {
+  const rootHash = hashText(index.projectRoot).slice(0, 16);
+  const existing = loadVectorStore(index.projectRoot);
+  const store = {
+    version: VECTOR_STORE_VERSION,
+    projectRootHash: rootHash,
+    vectors: {}
+  };
+  const allSymbols = [];
+  for (const file of Object.values(index.files)) {
+    for (const symbol of file.symbols) {
+      if (existing?.vectors[symbol.id]) {
+        store.vectors[symbol.id] = existing.vectors[symbol.id];
+      } else {
+        allSymbols.push({ id: symbol.id, text: symbol.summary || `${symbol.kind} ${symbol.name} in ${symbol.filePath}` });
+      }
+    }
+  }
+  if (allSymbols.length === 0) {
+    saveVectorStore(index.projectRoot, store);
+    return store;
+  }
+  const connected = await connectEmbedDaemon().catch(() => false);
+  if (!connected) {
+    saveVectorStore(index.projectRoot, store);
+    return store;
+  }
+  for (let i = 0; i < allSymbols.length; i += EMBED_BATCH_SIZE) {
+    const batch = allSymbols.slice(i, i + EMBED_BATCH_SIZE);
+    const texts = batch.map((s) => s.text);
+    try {
+      const vectors = await embedBatchViaClient(texts, "low");
+      if (vectors && vectors.length === batch.length) {
+        for (let j = 0; j < batch.length; j++) {
+          store.vectors[batch[j].id] = vectors[j];
+        }
+      }
+    } catch {
+    }
+  }
+  saveVectorStore(index.projectRoot, store);
+  return store;
+}
 var INDEX_VERSION = 2;
 var DEFAULT_MAX_FILES = 5e3;
 var IGNORE_SEGMENTS = /* @__PURE__ */ new Set(["node_modules", "dist", ".git", "coverage", ".worktrees", ".next", "build", "target", "vendor"]);
 function normalizeProjectRoot(projectRoot) {
-  return path53.resolve(projectRoot || process.cwd());
+  return path54.resolve(projectRoot || process.cwd());
 }
 function hashText(text3) {
-  return crypto19.createHash("sha256").update(text3).digest("hex");
+  return crypto20.createHash("sha256").update(text3).digest("hex");
 }
 function indexDir() {
-  const dir = path53.join(EXE_AI_DIR, "code-context");
+  const dir = path54.join(EXE_AI_DIR, "code-context");
   mkdirSync22(dir, { recursive: true });
   return dir;
 }
 function getCodeContextIndexPath(projectRoot) {
   const root = normalizeProjectRoot(projectRoot);
   const rootHash = hashText(root).slice(0, 16);
-  return path53.join(indexDir(), `${rootHash}.json`);
+  return path54.join(indexDir(), `${rootHash}.json`);
 }
 function currentBranch(projectRoot) {
   const result3 = spawnSync("git", ["branch", "--show-current"], { cwd: projectRoot, encoding: "utf8", timeout: 2e3 });
@@ -28475,8 +28909,8 @@ function shouldIgnore(relPath) {
 }
 function listRecursive(projectRoot, dir = projectRoot, out = []) {
   for (const entry of readdirSync15(dir, { withFileTypes: true })) {
-    const abs = path53.join(dir, entry.name);
-    const rel = path53.relative(projectRoot, abs).replaceAll(path53.sep, "/");
+    const abs = path54.join(dir, entry.name);
+    const rel = path54.relative(projectRoot, abs).replaceAll(path54.sep, "/");
     if (shouldIgnore(rel)) continue;
     if (entry.isDirectory()) listRecursive(projectRoot, abs, out);
     else if (entry.isFile()) out.push(rel);
@@ -28492,7 +28926,7 @@ function listCodeFiles(projectRoot, maxFiles) {
     const rg = spawnSync("rg", ["--files"], { cwd: projectRoot, encoding: "utf8", timeout: 5e3, maxBuffer: 1024 * 1024 * 16 });
     files = rg.status === 0 && rg.stdout.trim() ? rg.stdout.split("\n").map((s) => s.trim()).filter(Boolean) : listRecursive(projectRoot);
   }
-  return files.map((file) => file.replaceAll(path53.sep, "/")).filter((file) => isChunkable(file) && !shouldIgnore(file)).slice(0, maxFiles).sort();
+  return files.map((file) => file.replaceAll(path54.sep, "/")).filter((file) => isChunkable(file) && !shouldIgnore(file)).slice(0, maxFiles).sort();
 }
 function parseImportPaths(importText) {
   const paths = [];
@@ -28505,13 +28939,13 @@ function parseImportPaths(importText) {
 }
 function resolveImport(fromFile, importPath, allFiles) {
   if (!importPath.startsWith(".")) return null;
-  const base = path53.posix.normalize(path53.posix.join(path53.posix.dirname(fromFile.replaceAll(path53.sep, "/")), importPath));
+  const base = path54.posix.normalize(path54.posix.join(path54.posix.dirname(fromFile.replaceAll(path54.sep, "/")), importPath));
   const withoutKnownExt = base.replace(/\.(?:[a-z0-9]+)$/i, "");
   const candidates = [base];
   for (const ext of ["ts", "tsx", "js", "jsx", "py", "rs", "go", "java", "cs", "cpp", "c", "rb", "php", "swift", "kt", "scala", "sql", "md", "json", "yaml", "yml"]) {
     candidates.push(`${withoutKnownExt}.${ext}`, `${base}.${ext}`);
   }
-  for (const indexName of ["index.ts", "index.tsx", "index.js", "mod.rs", "__init__.py"]) candidates.push(path53.posix.join(base, indexName));
+  for (const indexName of ["index.ts", "index.tsx", "index.js", "mod.rs", "__init__.py"]) candidates.push(path54.posix.join(base, indexName));
   return candidates.find((candidate) => allFiles.has(candidate)) ?? null;
 }
 function symbolId(filePath, chunk) {
@@ -28532,7 +28966,7 @@ function saveIndex(index) {
   writeFileSync24(getCodeContextIndexPath(index.projectRoot), JSON.stringify(index, null, 2));
 }
 function buildFileRecord(projectRoot, relPath, allFiles, previous) {
-  const absPath = path53.join(projectRoot, relPath);
+  const absPath = path54.join(projectRoot, relPath);
   let stat;
   try {
     stat = statSync9(absPath);
@@ -28570,13 +29004,13 @@ function buildCodeContextIndex(options = {}) {
   const branch = currentBranch(projectRoot);
   const previous = options.force ? null : loadIndex(projectRoot);
   const files = listCodeFiles(projectRoot, maxFiles);
-  const allFiles = new Set(files.map((file) => file.replaceAll(path53.sep, "/")));
+  const allFiles = new Set(files.map((file) => file.replaceAll(path54.sep, "/")));
   const fileRecords = {};
   let rebuiltFiles = 0;
   let reusedFiles = 0;
   let skippedFiles = 0;
   for (const rel of files) {
-    const normalized = rel.replaceAll(path53.sep, "/");
+    const normalized = rel.replaceAll(path54.sep, "/");
     const { record, reused } = buildFileRecord(projectRoot, normalized, allFiles, previous?.files[normalized]);
     if (record) {
       fileRecords[normalized] = record;
@@ -28605,11 +29039,11 @@ function loadOrBuildCodeContextIndex(options = {}) {
     if (loaded) {
       const currentFiles = listCodeFiles(projectRoot, options.maxFiles ?? DEFAULT_MAX_FILES);
       const unchanged = currentFiles.every((rel) => {
-        const normalized = rel.replaceAll(path53.sep, "/");
+        const normalized = rel.replaceAll(path54.sep, "/");
         const existing = loaded.files[normalized];
         if (!existing) return false;
         try {
-          const stat = statSync9(path53.join(projectRoot, normalized));
+          const stat = statSync9(path54.join(projectRoot, normalized));
           return stat.mtimeMs === existing.mtimeMs && stat.size === existing.size;
         } catch {
           return false;
@@ -28662,9 +29096,9 @@ function globToRegex(pattern) {
 }
 function matchesPath(filePath, patterns) {
   if (!patterns || patterns.length === 0) return true;
-  const normalized = filePath.replaceAll(path53.sep, "/");
+  const normalized = filePath.replaceAll(path54.sep, "/");
   return patterns.some((pattern) => {
-    const p = pattern.replaceAll(path53.sep, "/").replace(/^\.\//, "");
+    const p = pattern.replaceAll(path54.sep, "/").replace(/^\.\//, "");
     return normalized === p || normalized.startsWith(`${p}/`) || normalized.endsWith(p) || globToRegex(p).test(normalized);
   });
 }
@@ -28723,7 +29157,7 @@ function filteredFiles(index, options = {}) {
     return matchesPath(file.path, options.paths);
   });
 }
-function searchCodeContext(query, options = {}) {
+function lexicalSearch(query, options = {}) {
   const terms = tokenize(query);
   if (terms.length === 0) return [];
   const index = loadOrBuildCodeContextIndex({ projectRoot: options.projectRoot, force: options.force || options.refreshIndex, maxFiles: options.maxFiles });
@@ -28749,6 +29183,82 @@ function searchCodeContext(query, options = {}) {
   const limit = options.limit ?? 20;
   return results.sort((a, b) => b.score - a.score || a.filePath.localeCompare(b.filePath)).slice(offset, offset + limit);
 }
+function searchCodeContext(query, options = {}) {
+  return lexicalSearch(query, options);
+}
+var RRF_K2 = 60;
+async function searchCodeContextSemantic(query, options = {}) {
+  const terms = tokenize(query);
+  if (terms.length === 0) return [];
+  const index = loadOrBuildCodeContextIndex({ projectRoot: options.projectRoot, force: options.force || options.refreshIndex, maxFiles: options.maxFiles });
+  const projectRoot = normalizeProjectRoot(options.projectRoot);
+  const vectorStore = loadVectorStore(projectRoot);
+  if (!vectorStore || Object.keys(vectorStore.vectors).length === 0) {
+    return lexicalSearch(query, options);
+  }
+  let queryVector = null;
+  try {
+    const connected = await connectEmbedDaemon().catch(() => false);
+    if (connected) {
+      const result3 = await embedBatchViaClient([query], "high");
+      if (result3 && result3.length === 1) queryVector = result3[0];
+    }
+  } catch {
+  }
+  if (!queryVector) return lexicalSearch(query, options);
+  const files = filteredFiles(index, options);
+  const candidates = [];
+  for (const file of files) {
+    for (const symbol of file.symbols) {
+      const lexical = scoreSymbol(symbol, terms);
+      const vec = vectorStore.vectors[symbol.id];
+      const vectorScore = vec ? cosineSimilarity3(queryVector, vec) : 0;
+      if (lexical.score > 0 || vectorScore > 0.3) {
+        candidates.push({
+          symbol,
+          lexicalScore: lexical.score,
+          vectorScore,
+          matches: lexical.matches
+        });
+      }
+    }
+  }
+  const byLexical = [...candidates].sort((a, b) => b.lexicalScore - a.lexicalScore);
+  const byVector = [...candidates].sort((a, b) => b.vectorScore - a.vectorScore);
+  const lexicalRank = /* @__PURE__ */ new Map();
+  const vectorRank = /* @__PURE__ */ new Map();
+  byLexical.forEach((c, i) => lexicalRank.set(c.symbol.id, i + 1));
+  byVector.forEach((c, i) => vectorRank.set(c.symbol.id, i + 1));
+  const VECTOR_WEIGHT = 0.6;
+  const LEXICAL_WEIGHT = 0.4;
+  const fused = candidates.map((c) => {
+    const lRank = lexicalRank.get(c.symbol.id) ?? candidates.length + 1;
+    const vRank = vectorRank.get(c.symbol.id) ?? candidates.length + 1;
+    const rrfScore = VECTOR_WEIGHT * (1 / (RRF_K2 + vRank)) + LEXICAL_WEIGHT * (1 / (RRF_K2 + lRank));
+    return {
+      symbol: c.symbol,
+      score: rrfScore,
+      matches: c.vectorScore > 0.3 ? [...c.matches, `semantic=${c.vectorScore.toFixed(3)}`] : c.matches,
+      filePath: c.symbol.filePath,
+      language: c.symbol.language,
+      content: c.symbol.text,
+      startLine: c.symbol.startLine,
+      endLine: c.symbol.endLine
+    };
+  });
+  const offset = Math.max(0, options.offset ?? 0);
+  const limit = options.limit ?? 20;
+  return fused.sort((a, b) => b.score - a.score || a.filePath.localeCompare(b.filePath)).slice(offset, offset + limit);
+}
+async function buildCodeContextIndexWithEmbeddings(options = {}) {
+  const index = buildCodeContextIndex(options);
+  const existingStore = loadVectorStore(index.projectRoot);
+  const existingCount = existingStore ? Object.keys(existingStore.vectors).length : 0;
+  const store = await embedSymbols(index);
+  const vectorCount = Object.keys(store.vectors).length;
+  const newEmbeddings = vectorCount - Math.min(existingCount, vectorCount);
+  return { index, vectorCount, newEmbeddings };
+}
 function dependentsMap(index) {
   const map = /* @__PURE__ */ new Map();
   for (const file of Object.values(index.files)) {
@@ -28782,7 +29292,7 @@ function traceCodeSymbol(symbolName, options = {}) {
 }
 function resolveTargetFile(index, input) {
   if (input.filePath) {
-    const normalized = input.filePath.replaceAll(path53.sep, "/").replace(/^\.\//, "");
+    const normalized = input.filePath.replaceAll(path54.sep, "/").replace(/^\.\//, "");
     if (index.files[normalized]) return { filePath: normalized, target: normalized };
     const suffix = Object.keys(index.files).find((file) => file.endsWith(normalized));
     if (suffix) return { filePath: suffix, target: input.filePath };
@@ -28812,7 +29322,7 @@ function analyzeBlastRadius(input) {
       }
     }
   }
-  const targetBase = path53.basename(target.filePath).replace(/\.[^.]+$/, "").toLowerCase();
+  const targetBase = path54.basename(target.filePath).replace(/\.[^.]+$/, "").toLowerCase();
   const symbolLower = input.symbol?.toLowerCase();
   const tests = Object.keys(index.files).filter((file) => {
     const lower = file.toLowerCase();
@@ -28851,23 +29361,24 @@ function jsonResult(value) {
 function registerCodeContext(server2) {
   server2.registerTool("code_context", {
     title: "Code Context",
-    description: "Persistent codebase context engine. One consolidated tool to avoid MCP bloat. Actions: index, search, trace, blast_radius, stats.",
+    description: "Persistent codebase context engine with semantic vector search. One consolidated tool to avoid MCP bloat. Actions: index (structural only), index_embed (structural + vector embeddings), search (semantic+lexical hybrid), trace, blast_radius, stats. Search uses RRF fusion of Jina v5 embeddings (cosine similarity) + lexical scoring. Falls back to lexical if daemon unavailable.",
     inputSchema: {
-      action: z92.enum(["index", "search", "trace", "blast_radius", "stats"]).describe("Code context operation"),
-      project_root: z92.string().optional().describe("Repository root. Defaults to current working directory."),
-      query: z92.string().optional().describe("Search query for action=search"),
-      symbol: z92.string().optional().describe("Symbol/function/class/type name for trace or blast_radius"),
-      file_path: z92.string().optional().describe("File path for blast_radius"),
-      force: z92.boolean().optional().describe("Force rebuild before answering"),
-      limit: z92.coerce.number().int().min(1).max(100).optional().describe("Max results"),
-      offset: z92.coerce.number().int().min(0).optional().describe("Search pagination offset"),
-      refresh_index: z92.boolean().optional().describe("Refresh/rebuild index before searching"),
-      languages: z92.array(z92.string()).optional().describe('Language filters, e.g. ["python", "typescript"]'),
-      paths: z92.array(z92.string()).optional().describe("Path/glob filters"),
-      depth: z92.coerce.number().int().min(1).max(5).optional().describe("Dependent traversal depth for blast_radius"),
-      max_files: z92.coerce.number().int().min(1).max(1e4).optional().describe("Max code files to index")
-    }
-  }, async ({ action, project_root, query, symbol, file_path, force, limit, offset, refresh_index, languages, paths, depth, max_files }) => {
+      action: z93.enum(["index", "index_embed", "search", "trace", "blast_radius", "stats"]).describe("Code context operation. index_embed = index + generate embeddings for semantic search."),
+      project_root: z93.string().optional().describe("Repository root. Defaults to current working directory."),
+      query: z93.string().optional().describe("Natural language search query (e.g. 'authentication logic', 'database migration'). Semantic search finds conceptual matches, not just keywords."),
+      symbol: z93.string().optional().describe("Symbol/function/class/type name for trace or blast_radius"),
+      file_path: z93.string().optional().describe("File path for blast_radius"),
+      force: z93.boolean().optional().describe("Force rebuild before answering"),
+      limit: z93.coerce.number().int().min(1).max(100).optional().describe("Max results"),
+      offset: z93.coerce.number().int().min(0).optional().describe("Search pagination offset"),
+      refresh_index: z93.boolean().optional().describe("Refresh/rebuild index before searching"),
+      languages: z93.array(z93.string()).optional().describe('Language filters, e.g. ["python", "typescript"]'),
+      paths: z93.array(z93.string()).optional().describe("Path/glob filters"),
+      depth: z93.coerce.number().int().min(1).max(5).optional().describe("Dependent traversal depth for blast_radius"),
+      max_files: z93.coerce.number().int().min(1).max(1e4).optional().describe("Max code files to index"),
+      lexical_only: z93.boolean().optional().describe("Force lexical-only search (skip vector similarity). Default: false \u2014 uses semantic hybrid search.")
+    }
+  }, async ({ action, project_root, query, symbol, file_path, force, limit, offset, refresh_index, languages, paths, depth, max_files, lexical_only }) => {
     const opts = { projectRoot: project_root, force, maxFiles: max_files };
     if (action === "index") {
       const index = buildCodeContextIndex(opts);
@@ -28877,7 +29388,24 @@ function registerCodeContext(server2) {
         indexedAt: index.indexedAt,
         files: Object.keys(index.files).length,
         symbols: Object.values(index.files).reduce((sum, file) => sum + file.symbols.length, 0),
-        imports: Object.values(index.files).reduce((sum, file) => sum + file.resolvedImports.length, 0)
+        imports: Object.values(index.files).reduce((sum, file) => sum + file.resolvedImports.length, 0),
+        note: "Structural index only. Use action=index_embed to also generate vector embeddings for semantic search."
+      });
+    }
+    if (action === "index_embed") {
+      const { index, vectorCount, newEmbeddings } = await buildCodeContextIndexWithEmbeddings(opts);
+      const totalSymbols = Object.values(index.files).reduce((sum, file) => sum + file.symbols.length, 0);
+      return jsonResult({
+        projectRoot: index.projectRoot,
+        branch: index.branch,
+        indexedAt: index.indexedAt,
+        files: Object.keys(index.files).length,
+        symbols: totalSymbols,
+        imports: Object.values(index.files).reduce((sum, file) => sum + file.resolvedImports.length, 0),
+        vectorCount,
+        newEmbeddings,
+        embeddingCoverage: totalSymbols > 0 ? `${(vectorCount / totalSymbols * 100).toFixed(1)}%` : "0%",
+        note: "Structural index + vector embeddings. Semantic search is now available."
       });
     }
     if (action === "stats") {
@@ -28885,14 +29413,28 @@ function registerCodeContext(server2) {
     }
     if (action === "search") {
       if (!query) return errorResult10('code_context action "search" requires query');
+      const searchOpts = { ...opts, limit, offset, refreshIndex: refresh_index, languages, paths };
+      if (lexical_only) {
+        return jsonResult({
+          query,
+          mode: "lexical",
+          limit: limit ?? 20,
+          offset: offset ?? 0,
+          languages: languages ?? [],
+          paths: paths ?? [],
+          results: searchCodeContext(query, searchOpts)
+        });
+      }
+      const results = await searchCodeContextSemantic(query, searchOpts);
+      const hasSemantic = results.some((r) => r.matches.some((m) => m.startsWith("semantic=")));
       return jsonResult({
         query,
+        mode: hasSemantic ? "semantic+lexical" : "lexical-fallback",
         limit: limit ?? 20,
         offset: offset ?? 0,
-        refresh_index: refresh_index ?? false,
         languages: languages ?? [],
         paths: paths ?? [],
-        results: searchCodeContext(query, { ...opts, limit, offset, refreshIndex: refresh_index, languages, paths })
+        results
       });
     }
     if (action === "trace") {
@@ -28910,9 +29452,9 @@ function registerCodeContext(server2) {
 }
 
 // src/mcp/tools/support-inbox.ts
-import { z as z93 } from "zod";
+import { z as z94 } from "zod";
 var DEFAULT_ENDPOINT = "https://askexe.com/admin/support/bug-reports";
-var STATUS = z93.enum(["open", "triaged", "fixed", "closed", "wontfix"]);
+var STATUS = z94.enum(["open", "triaged", "fixed", "closed", "wontfix"]);
 function adminToken() {
   return process.env.ASKEXE_SUPPORT_ADMIN_TOKEN || process.env.EXE_SUPPORT_ADMIN_TOKEN;
 }
@@ -28951,9 +29493,9 @@ function registerListBugReports(server2) {
       title: "List Bug Reports",
       description: "AskExe-internal only: list incoming customer bug reports from the support inbox.",
       inputSchema: {
-        status: z93.enum(["all", "open", "triaged", "fixed", "closed", "wontfix"]).default("open"),
-        severity: z93.enum(["p0", "p1", "p2", "p3"]).optional(),
-        limit: z93.number().int().min(1).max(100).default(25)
+        status: z94.enum(["all", "open", "triaged", "fixed", "closed", "wontfix"]).default("open"),
+        severity: z94.enum(["p0", "p1", "p2", "p3"]).optional(),
+        limit: z94.number().int().min(1).max(100).default(25)
       }
     },
     async ({ status: status2, severity, limit }) => {
@@ -28972,7 +29514,7 @@ function registerGetBugReport(server2) {
     {
       title: "Get Bug Report",
       description: "AskExe-internal only: fetch one customer bug report with full markdown payload.",
-      inputSchema: { id: z93.string().min(8) }
+      inputSchema: { id: z94.string().min(8) }
     },
     async ({ id }) => {
       const data = await requestJson(`${endpoint()}/${encodeURIComponent(id)}`);
@@ -28987,12 +29529,12 @@ function registerTriageBugReport(server2) {
       title: "Triage Bug Report",
       description: "AskExe-internal only: update bug report status and link task/commit/release metadata.",
       inputSchema: {
-        id: z93.string().min(8),
+        id: z94.string().min(8),
         status: STATUS.optional(),
-        triage_notes: z93.string().optional(),
-        linked_task_id: z93.string().optional(),
-        linked_commit: z93.string().optional(),
-        fixed_version: z93.string().optional()
+        triage_notes: z94.string().optional(),
+        linked_task_id: z94.string().optional(),
+        linked_commit: z94.string().optional(),
+        fixed_version: z94.string().optional()
       }
     },
     async ({ id, status: status2, triage_notes, linked_task_id, linked_commit, fixed_version }) => {
@@ -29004,6 +29546,69 @@ function registerTriageBugReport(server2) {
     }
   );
 }
+var FEATURE_STATUS = z94.enum(["open", "planned", "in_progress", "shipped", "closed", "wontdo"]);
+function featureEndpoint() {
+  return endpoint().replace(/\/bug-reports\/?$/, "/feature-requests");
+}
+function registerListFeatureRequests(server2) {
+  server2.registerTool(
+    "list_feature_requests",
+    {
+      title: "List Feature Requests",
+      description: "AskExe-internal only: list incoming customer feature requests from the support inbox.",
+      inputSchema: {
+        status: z94.enum(["all", "open", "planned", "in_progress", "shipped", "closed", "wontdo"]).default("open"),
+        priority: z94.enum(["p0", "p1", "p2", "p3"]).optional(),
+        limit: z94.number().int().min(1).max(100).default(25)
+      }
+    },
+    async ({ status: status2, priority, limit }) => {
+      const url = new URL(featureEndpoint());
+      url.searchParams.set("status", status2);
+      url.searchParams.set("limit", String(limit));
+      if (priority) url.searchParams.set("priority", priority);
+      const data = await requestJson(url.toString());
+      return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
+    }
+  );
+}
+function registerGetFeatureRequest(server2) {
+  server2.registerTool(
+    "get_feature_request",
+    {
+      title: "Get Feature Request",
+      description: "AskExe-internal only: fetch one customer feature request with full payload.",
+      inputSchema: { id: z94.string().min(8) }
+    },
+    async ({ id }) => {
+      const data = await requestJson(`${featureEndpoint()}/${encodeURIComponent(id)}`);
+      return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
+    }
+  );
+}
+function registerTriageFeatureRequest(server2) {
+  server2.registerTool(
+    "triage_feature_request",
+    {
+      title: "Triage Feature Request",
+      description: "AskExe-internal only: update feature request status, response notes, and version metadata.",
+      inputSchema: {
+        id: z94.string().min(8),
+        status: FEATURE_STATUS.optional(),
+        response_notes: z94.string().optional(),
+        target_version: z94.string().optional(),
+        shipped_version: z94.string().optional()
+      }
+    },
+    async ({ id, status: status2, response_notes, target_version, shipped_version }) => {
+      const data = await requestJson(`${featureEndpoint()}/${encodeURIComponent(id)}`, {
+        method: "PATCH",
+        body: JSON.stringify({ status: status2, response_notes, target_version, shipped_version })
+      });
+      return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
+    }
+  );
+}
 
 // src/mcp/tool-gates.ts
 var TOOL_GATES = {
@@ -29327,6 +29932,7 @@ function registerAllTools(server2) {
   gate("registerStoreDecision", registerStoreDecision);
   gate("registerGetDecision", registerGetDecision);
   gate("registerCreateBugReport", registerCreateBugReport);
+  gate("registerCreateFeatureRequest", registerCreateFeatureRequest);
   gate("registerSupportTools", registerSupportTools);
   gate("registerCliParityTools", registerCliParityTools);
   gate("registerGetSessionEvents", registerGetSessionEvents);
@@ -29336,6 +29942,9 @@ function registerAllTools(server2) {
     gate("registerListBugReports", registerListBugReports);
     gate("registerGetBugReport", registerGetBugReport);
     gate("registerTriageBugReport", registerTriageBugReport);
+    gate("registerListFeatureRequests", registerListFeatureRequests);
+    gate("registerGetFeatureRequest", registerGetFeatureRequest);
+    gate("registerTriageFeatureRequest", registerTriageFeatureRequest);
   }
   if (exposeLegacyConfig) {
     gate("registerGetAgentSpend", registerGetAgentSpend);
@@ -29503,7 +30112,7 @@ try {
     }
   }, 3e4);
   _ppidWatchdog.unref();
-  const MCP_VERSION_PATH = path54.join(os20.homedir(), ".exe-os", "mcp-version");
+  const MCP_VERSION_PATH = path55.join(os20.homedir(), ".exe-os", "mcp-version");
   let _currentMcpVersion = null;
   try {
     _currentMcpVersion = existsSync41(MCP_VERSION_PATH) ? readFileSync36(MCP_VERSION_PATH, "utf8").trim() : null;
@@ -29545,14 +30154,14 @@ try {
 `
       );
       const thisFile = fileURLToPath7(import.meta.url);
-      const backfillPath = path54.resolve(
-        path54.dirname(thisFile),
+      const backfillPath = path55.resolve(
+        path55.dirname(thisFile),
         "../bin/backfill-vectors.js"
       );
       if (existsSync41(backfillPath)) {
         const { EXE_AI_DIR: exeDir } = await Promise.resolve().then(() => (init_config(), config_exports));
-        const logPath = path54.join(exeDir, "workers.log");
-        mkdirSync23(path54.dirname(logPath), { recursive: true });
+        const logPath = path55.join(exeDir, "workers.log");
+        mkdirSync23(path55.dirname(logPath), { recursive: true });
         let logFd = "ignore";
         try {
           logFd = openSync4(logPath, "a");