@askexenow/exe-os 0.9.86 → 0.9.87

package/dist/lib/exe-daemon.js

@@ -5350,7 +5350,7 @@ async function tryKeytar() {
 }
 function deriveMachineKey() {
   try {
-    const crypto23 = __require("crypto");
+    const crypto24 = __require("crypto");
     const material = [
       os6.hostname(),
       os6.userInfo().username,
@@ -5359,7 +5359,7 @@ function deriveMachineKey() {
       // Machine ID on Linux (stable across reboots)
       process.platform === "linux" ? readMachineId() : ""
     ].join("|");
-    return crypto23.createHash("sha256").update(material).digest();
+    return crypto24.createHash("sha256").update(material).digest();
   } catch {
     return null;
   }
@@ -5373,9 +5373,9 @@ function readMachineId() {
   }
 }
 function encryptWithMachineKey(plaintext, machineKey) {
-  const crypto23 = __require("crypto");
-  const iv = crypto23.randomBytes(12);
-  const cipher = crypto23.createCipheriv("aes-256-gcm", machineKey, iv);
+  const crypto24 = __require("crypto");
+  const iv = crypto24.randomBytes(12);
+  const cipher = crypto24.createCipheriv("aes-256-gcm", machineKey, iv);
   let encrypted = cipher.update(plaintext, "utf-8", "base64");
   encrypted += cipher.final("base64");
   const authTag = cipher.getAuthTag().toString("base64");
@@ -5384,13 +5384,13 @@ function encryptWithMachineKey(plaintext, machineKey) {
 function decryptWithMachineKey(encrypted, machineKey) {
   if (!encrypted.startsWith(ENCRYPTED_PREFIX)) return null;
   try {
-    const crypto23 = __require("crypto");
+    const crypto24 = __require("crypto");
     const parts = encrypted.slice(ENCRYPTED_PREFIX.length).split(":");
     if (parts.length !== 3) return null;
     const [ivB64, tagB64, cipherB64] = parts;
     const iv = Buffer.from(ivB64, "base64");
     const authTag = Buffer.from(tagB64, "base64");
-    const decipher = crypto23.createDecipheriv("aes-256-gcm", machineKey, iv);
+    const decipher = crypto24.createDecipheriv("aes-256-gcm", machineKey, iv);
     decipher.setAuthTag(authTag);
     let decrypted = decipher.update(cipherB64, "base64", "utf-8");
     decrypted += decipher.final("utf-8");
@@ -5819,6 +5819,24 @@ var init_platform_procedures = __esm({
         priority: "p0",
         content: "When an agent encounters a suspected Exe OS bug, update breakage, MCP/tool failure, installer issue, memory/orchestration defect, or customer-local patch need, it MUST use create_bug_report. Do this before or alongside any local workaround so the report reaches AskExe support directly via the customer's license. Do NOT ask the founder for permission to file a required bug report. If create_bug_report is deferred/lazy-loaded, load it and call it. If it is unavailable in the live MCP surface, report 'create_bug_report unavailable in this session' and save a local report in exe/output \u2014 never claim the tool does not exist unless the live MCP surface was checked. If upstream delivery fails, call support_test (MCP) and include its result in the local report so AskExe can distinguish customer setup, license provisioning, and server intake issues; only ask the founder to run `exe-os support test` if MCP is disconnected/unavailable. Classify first: upstream_bug = reproducible exe-os/platform defect; customer_customization = identity, behavior, procedure, config, branding, workflow preference that belongs in customer-owned layers; emergency_hotfix = temporary local patch. For upstream bugs/emergency hotfixes include version, repro steps, expected/actual, files changed, workaround, and local diff summary. Avoid permanent platform-code patches unless founder approves; if a hotfix is unavoidable, document it in the bug report and re-check after npm update."
       },
+      {
+        title: "Bug report status check \u2014 surface available fixes on boot",
+        domain: "support",
+        priority: "p1",
+        content: "Once per session (COO boot only, never repeat), call list_my_bug_reports to check if any previously filed bug reports have been fixed by AskExe. If any report has status 'fixed' with a fixed_version, surface it to the founder immediately: '\u{1F527} N bug fix(es) available \u2014 run exe-os update to get version X.Y.Z'. This is a one-time check at boot, not a recurring poll. If no reports exist or none are fixed, skip silently. If the MCP tool is unavailable or the network call fails, skip silently \u2014 this is informational, not blocking."
+      },
+      {
+        title: "Feature request triage \u2014 upstream feature vs local customization",
+        domain: "support",
+        priority: "p0",
+        content: "When an agent or founder identifies a desired capability that exe-os does not yet provide, the COO (or equivalent coordinator) must decide: is this a local customization (identity, behavior, procedure, config, branding, workflow preference that can be configured in customer-owned layers) or an upstream feature request (a platform capability that requires changes to exe-os code, shipped via npm update)? Local customizations: implement immediately using store_behavior, update_identity, company_procedure, or config changes. Upstream features: use create_feature_request to submit to AskExe. Include use case, business impact, and current workaround. Do NOT ask the founder for permission to file a feature request \u2014 file it proactively when the need is clear."
+      },
+      {
+        title: "Feature request status check \u2014 surface shipped features on boot",
+        domain: "support",
+        priority: "p1",
+        content: "Once per session (COO boot only, never repeat), call list_my_feature_requests to check if any previously filed feature requests have been shipped by AskExe. If any request has status 'shipped' with a shipped_version, surface it to the founder immediately: '\u{1F680} N feature(s) shipped \u2014 run exe-os update to get version X.Y.Z'. This is a one-time check at boot, not a recurring poll. If no requests exist or none are shipped, skip silently. If the MCP tool is unavailable or the network call fails, skip silently \u2014 this is informational, not blocking."
+      },
       // --- Operations ---
       {
         title: "Managers must supervise deployed workers",
@@ -7193,8 +7211,8 @@ async function embedDirect(text3) {
   const llamaCpp = await import("node-llama-cpp");
   const { MODELS_DIR: MODELS_DIR2 } = await Promise.resolve().then(() => (init_config(), config_exports));
   const { existsSync: existsSync48 } = await import("fs");
-  const path62 = await import("path");
-  const modelPath = path62.join(MODELS_DIR2, "jina-embeddings-v5-small-q4_k_m.gguf");
+  const path63 = await import("path");
+  const modelPath = path63.join(MODELS_DIR2, "jina-embeddings-v5-small-q4_k_m.gguf");
   if (!existsSync48(modelPath)) {
     throw new Error(`Embedding model not found at ${modelPath}. Run '/exe-setup' to download it.`);
   }
@@ -8286,10 +8304,10 @@ async function hybridSearch(queryText, agentId, options) {
     };
     try {
       const fs = await import("fs");
-      const path62 = await import("path");
+      const path63 = await import("path");
       const os25 = await import("os");
-      const logPath = path62.join(os25.homedir(), ".exe-os", "search-quality.jsonl");
-      fs.mkdirSync(path62.dirname(logPath), { recursive: true });
+      const logPath = path63.join(os25.homedir(), ".exe-os", "search-quality.jsonl");
+      fs.mkdirSync(path63.dirname(logPath), { recursive: true });
       fs.appendFileSync(logPath, JSON.stringify(logEntry) + "\n");
     } catch {
     }
@@ -9922,8 +9940,8 @@ __export(wiki_client_exports, {
   listDocuments: () => listDocuments,
   listWorkspaces: () => listWorkspaces
 });
-async function wikiFetch(config2, path62, method = "GET", body) {
-  const url = `${config2.baseUrl}/api/v1${path62}`;
+async function wikiFetch(config2, path63, method = "GET", body) {
+  const url = `${config2.baseUrl}/api/v1${path63}`;
   const headers = {
     Authorization: `Bearer ${config2.apiKey}`,
     "Content-Type": "application/json"
@@ -9956,7 +9974,7 @@ async function wikiFetch(config2, path62, method = "GET", body) {
       }
     }
     if (!response.ok) {
-      throw new Error(`Wiki API ${method} ${path62}: ${response.status} ${response.statusText}`);
+      throw new Error(`Wiki API ${method} ${path63}: ${response.status} ${response.statusText}`);
     }
     return response.json();
   } finally {
@@ -15037,12 +15055,14 @@ On EVERY new conversation, before doing anything else:
 1. **Memory scan**: Run recall_my_memory with broad queries \u2014 "project", "client", "pipeline", "campaign", "deal", "decision", "blocker". Summarize what you find.
 2. **Task scan**: Run list_tasks to see what's open, in progress, blocked, or needs review across all employees.
 3. **Team check**: Run ask_team_memory for recent activity from CTO/CMO/engineers.
-4. **Present the brief**: Give the founder a concise status report:
+4. **Bug fix check** (one-time, never repeat): Call list_my_bug_reports to see if AskExe has fixed any previously filed bugs. If any have status "fixed" with a fixed_version, tell the founder: "\u{1F527} N bug fix(es) available \u2014 run \`exe-os update\` to get version X.Y.Z." Skip silently if none or if the call fails.
+5. **Present the brief**: Give the founder a concise status report:
    - What's active and progressing
    - What's blocked and needs attention
    - What decisions are pending
+   - Available bug fixes (from step 4, if any)
    - What you recommend doing next
-5. Then ask: "What's the priority?"
+6. Then ask: "What's the priority?"
 
 If this is your FIRST ever conversation (few or no prior memories):
 - Search more broadly: "product", "SEO", "meeting", "strategy", "revenue"
@@ -15062,6 +15082,8 @@ Never say "I have no memories" without first searching broadly. Your memory may
 - **get_identity** \u2014 read any agent's identity for coordination
 - **set_agent_config** \u2014 view or change which tool (Claude Code, Codex, OpenCode) and model each agent uses. Call with no args to show all agents' current settings. Call with agent_id + runtime + model to change.
 - **send_message** \u2014 direct intercom to employees
+- **create_bug_report** \u2014 file a bug when you encounter an Exe OS platform issue
+- **list_my_bug_reports** \u2014 check status of filed bugs (boot check: surface available fixes to founder)
 ${PLAN_MODE_COMPAT}
 ## Completion Workflow
 
@@ -19058,12 +19080,12 @@ function registerExportGraph(server) {
         }
         const html = await exportGraphHTML(client);
         const fs = await import("fs");
-        const path62 = await import("path");
+        const path63 = await import("path");
         const os25 = await import("os");
-        const outDir = path62.join(os25.homedir(), ".exe-os", "exports");
+        const outDir = path63.join(os25.homedir(), ".exe-os", "exports");
         fs.mkdirSync(outDir, { recursive: true });
         const timestamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-").slice(0, 19);
-        const filePath = path62.join(outDir, `graph-${timestamp}.html`);
+        const filePath = path63.join(outDir, `graph-${timestamp}.html`);
         fs.writeFileSync(filePath, html, "utf-8");
         return {
           content: [
@@ -26148,9 +26170,9 @@ var init_hostinger_api = __esm({
         }
         this.lastRequestTime = Date.now();
       }
-      async request(method, path62, body) {
+      async request(method, path63, body) {
         await this.rateLimit();
-        const url = `${this.baseUrl}${path62}`;
+        const url = `${this.baseUrl}${path63}`;
         const headers = {
           Authorization: `Bearer ${this.apiKey}`,
           "Content-Type": "application/json",
@@ -26219,8 +26241,8 @@ async function requestCloudflare(cfApiToken, zoneId, options) {
   }
   return envelope.result;
 }
-function buildUrl(zoneId, path62 = "/dns_records", query) {
-  const normalizedPath = path62.startsWith("/") ? path62 : `/${path62}`;
+function buildUrl(zoneId, path63 = "/dns_records", query) {
+  const normalizedPath = path63.startsWith("/") ? path63 : `/${path63}`;
   const url = new URL(
     `${CLOUDFLARE_API_BASE_URL}/zones/${zoneId}${normalizedPath}`
   );
@@ -30179,9 +30201,207 @@ var init_create_bug_report = __esm({
   }
 });
 
+// src/mcp/tools/create-feature-request.ts
+import { z as z89 } from "zod";
+import crypto20 from "crypto";
+import { mkdir as mkdir7, writeFile as writeFile8 } from "fs/promises";
+import path54 from "path";
+function slugify3(input) {
+  return input.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 80) || "feature-request";
+}
+function section2(title, body) {
+  return `## ${title}
+
+${body?.trim() || "Not provided"}`;
+}
+function buildMarkdown2(input) {
+  return [
+    `# Feature Request \u2014 ${input.title}`,
+    "",
+    `id: ${input.id}`,
+    `category: ${input.category}`,
+    `priority: ${input.priority}`,
+    `filed_by: ${input.agentId} (${input.agentRole})`,
+    `package_version: ${input.packageVersion}`,
+    `project: ${input.projectName ?? "unknown"}`,
+    `created_at: ${(/* @__PURE__ */ new Date()).toISOString()}`,
+    "",
+    section2("Description", input.description),
+    section2("Use Case", input.useCase),
+    section2("Current Workaround", input.currentWorkaround),
+    section2("Proposed Solution", input.proposedSolution),
+    section2("Business Impact", input.businessImpact)
+  ].join("\n");
+}
+async function maybeSendUpstream2(payload) {
+  const config2 = await loadConfig();
+  const routerUrl = process.env.API_ROUTER_URL?.replace(/\/+$/, "");
+  const endpoint2 = config2.support?.featureRequestEndpoint || process.env.EXE_FEATURE_REQUEST_ENDPOINT || (routerUrl ? `${routerUrl}/v1/support/feature-requests` : "https://askexe.com/v1/support/feature-requests");
+  const token = config2.support?.featureRequestToken || process.env.EXE_FEATURE_REQUEST_TOKEN;
+  const licenseKey = loadLicense() || process.env.EXE_LICENSE_KEY || config2.cloud?.apiKey;
+  const licenseToken = readCachedLicenseToken();
+  if (!endpoint2) {
+    return "not_configured";
+  }
+  try {
+    const parsed = new URL(endpoint2);
+    if (parsed.protocol !== "https:" && !["localhost", "127.0.0.1", "::1"].includes(parsed.hostname)) {
+      return "failed: insecure endpoint rejected";
+    }
+    const response = await fetch(parsed, {
+      method: "POST",
+      headers: {
+        "content-type": "application/json",
+        ...token ? { authorization: `Bearer ${token}` } : {},
+        ...licenseKey ? { "x-exe-license-key": licenseKey } : {},
+        ...licenseToken ? { "x-exe-license-token": licenseToken } : {}
+      },
+      body: JSON.stringify(payload),
+      signal: AbortSignal.timeout(1e4)
+    });
+    if (!response.ok) return `failed: HTTP ${response.status}`;
+    return "sent";
+  } catch (err) {
+    return `failed: ${err instanceof Error ? err.message : String(err)}`;
+  }
+}
+function registerCreateFeatureRequest(server) {
+  server.registerTool(
+    "create_feature_request",
+    {
+      title: "Create Feature Request",
+      description: "File a feature request for exe-os: upstream_feature (requires platform changes), local_customization (configurable in customer layers), integration (third-party), or unclear. Writes a local report, stores memory, and optionally sends to AskExe.",
+      inputSchema: {
+        title: z89.string().min(3).describe("Short descriptive title"),
+        category: CATEGORY.describe(
+          "upstream_feature = platform capability change; local_customization = configurable in customer layers; integration = third-party connector; unclear = needs product triage"
+        ),
+        priority: PRIORITY.default("p2").describe("p0 critical \u2192 p3 low"),
+        description: z89.string().min(10).describe("What capability is needed and why"),
+        use_case: z89.string().optional().describe("Concrete scenario where this feature would be used"),
+        current_workaround: z89.string().optional().describe("How the need is currently addressed, if at all"),
+        proposed_solution: z89.string().optional().describe("Suggested implementation approach"),
+        business_impact: z89.string().optional().describe("Impact on business/workflow if this ships"),
+        package_version: z89.string().optional().describe("Installed @askexenow/exe-os version"),
+        project_name: z89.string().optional().describe("Project/customer context"),
+        send_upstream: z89.boolean().default(true).describe("Attempt to POST to configured AskExe support endpoint")
+      }
+    },
+    async ({
+      title,
+      category,
+      priority,
+      description,
+      use_case,
+      current_workaround,
+      proposed_solution,
+      business_impact,
+      package_version,
+      project_name,
+      send_upstream
+    }) => {
+      const { agentId, agentRole } = getActiveAgent();
+      const id = crypto20.randomUUID();
+      const version = package_version ?? "unknown";
+      const markdown = buildMarkdown2({
+        id,
+        title,
+        category,
+        priority,
+        agentId,
+        agentRole,
+        packageVersion: version,
+        description,
+        useCase: use_case,
+        currentWorkaround: current_workaround,
+        proposedSolution: proposed_solution,
+        businessImpact: business_impact,
+        projectName: project_name
+      });
+      const outDir = path54.join(EXE_AI_DIR, "feature-requests");
+      await mkdir7(outDir, { recursive: true });
+      const reportPath = path54.join(outDir, `${(/* @__PURE__ */ new Date()).toISOString().slice(0, 10)}-${slugify3(title)}-${id.slice(0, 8)}.md`);
+      await writeFile8(reportPath, markdown, "utf-8");
+      let vector = null;
+      try {
+        vector = await embed(markdown);
+      } catch {
+        vector = null;
+      }
+      await writeMemory({
+        id,
+        agent_id: agentId,
+        agent_role: agentRole,
+        session_id: process.env.SESSION_ID ?? "manual",
+        timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+        tool_name: "create_feature_request",
+        project_name: project_name ?? "support",
+        has_error: false,
+        raw_text: markdown,
+        vector,
+        source_path: reportPath,
+        source_type: "feature_request",
+        memory_type: "feature_request",
+        tier: 1,
+        importance: priority === "p0" ? 10 : priority === "p1" ? 9 : priority === "p2" ? 7 : 5,
+        intent: "request",
+        domain: "support",
+        file_paths: null
+      });
+      await flushBatch();
+      const upstreamStatus = send_upstream ? await maybeSendUpstream2({
+        id,
+        title,
+        category,
+        priority,
+        description,
+        use_case,
+        current_workaround,
+        proposed_solution,
+        business_impact,
+        package_version: version,
+        project_name,
+        agent_id: agentId,
+        agent_role: agentRole
+      }) : "skipped";
+      return {
+        content: [
+          {
+            type: "text",
+            text: `Feature request created.
+ID: ${id}
+Category: ${category}
+Local report: ${reportPath}
+Memory stored: ${id}
+Upstream status: ${upstreamStatus}`
+          }
+        ]
+      };
+    }
+  );
+}
+var CATEGORY, PRIORITY;
+var init_create_feature_request = __esm({
+  "src/mcp/tools/create-feature-request.ts"() {
+    "use strict";
+    init_embedder();
+    init_active_agent();
+    init_config();
+    init_license();
+    init_store();
+    CATEGORY = z89.enum([
+      "upstream_feature",
+      "local_customization",
+      "integration",
+      "unclear"
+    ]);
+    PRIORITY = z89.enum(["p0", "p1", "p2", "p3"]);
+  }
+});
+
 // src/bin/exe-support.ts
 import { mkdirSync as mkdirSync21, readFileSync as readFileSync35, unlinkSync as unlinkSync13, writeFileSync as writeFileSync24 } from "fs";
-import path54 from "path";
+import path55 from "path";
 import { randomUUID as randomUUID9 } from "crypto";
 async function runHealth() {
   const checks = [];
@@ -30300,8 +30520,8 @@ async function resolveEndpoints() {
   return { bugEndpoint, healthEndpoint, adminEndpoint };
 }
 function checkLocalWrite() {
-  const dir = path54.join(EXE_AI_DIR, "bug-reports");
-  const testPath = path54.join(dir, ".support-write-test");
+  const dir = path55.join(EXE_AI_DIR, "bug-reports");
+  const testPath = path55.join(dir, ".support-write-test");
   try {
     mkdirSync21(dir, { recursive: true, mode: 448 });
     writeFileSync24(testPath, "ok\n", { mode: 384 });
@@ -30317,10 +30537,10 @@ function checkLocalWrite() {
   }
 }
 function writeLocalTestReport(id, project, version) {
-  const dir = path54.join(EXE_AI_DIR, "bug-reports");
+  const dir = path55.join(EXE_AI_DIR, "bug-reports");
   mkdirSync21(dir, { recursive: true, mode: 448 });
   const date = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
-  const filePath = path54.join(dir, `${date}-support-intake-test-${id.slice(0, 8)}.md`);
+  const filePath = path55.join(dir, `${date}-support-intake-test-${id.slice(0, 8)}.md`);
   writeFileSync24(filePath, `# TEST \u2014 ${project} support intake
 
 Report ID: ${id}
@@ -30362,15 +30582,15 @@ async function maybeCloseAdmin(id, adminEndpoint, version) {
   }
 }
 function readPackageVersion2() {
-  let dir = path54.dirname(new URL(import.meta.url).pathname);
+  let dir = path55.dirname(new URL(import.meta.url).pathname);
   for (let i = 0; i < 6; i++) {
-    const pkg = path54.join(dir, "package.json");
+    const pkg = path55.join(dir, "package.json");
     try {
       const parsed = JSON.parse(readFileSync35(pkg, "utf8"));
       if (parsed.version) return parsed.version;
     } catch {
     }
-    dir = path54.dirname(dir);
+    dir = path55.dirname(dir);
   }
   return "unknown";
 }
@@ -30406,7 +30626,7 @@ var init_exe_support = __esm({
 });
 
 // src/mcp/tools/support.ts
-import { z as z89 } from "zod";
+import { z as z90 } from "zod";
 function formatRows(rows, mode) {
   const lines = [`exe-os support ${mode}`, ""];
   for (const row of rows) {
@@ -30447,7 +30667,7 @@ function registerSupportTools(server) {
       title: "Support Test",
       description: "End-to-end support intake smoke test. Files a clearly marked test report upstream and auto-closes it on AskExe machines with admin credentials.",
       inputSchema: {
-        project: z89.string().default("support-smoke").describe("Customer/project name, e.g. hygo")
+        project: z90.string().default("support-smoke").describe("Customer/project name, e.g. hygo")
       }
     },
     async ({ project }) => {
@@ -30465,8 +30685,8 @@ function registerSupportTools(server) {
       title: "My Bug Reports",
       description: "List bug reports you've filed, scoped to your license. Shows status (open/triaged/fixed/closed), severity, and fixed_version so you know when to update.",
       inputSchema: {
-        status: z89.enum(["all", "open", "triaged", "fixed", "closed", "wontfix"]).default("all").describe("Filter by status. Default: all"),
-        limit: z89.number().min(1).max(50).default(25).describe("Max results")
+        status: z90.enum(["all", "open", "triaged", "fixed", "closed", "wontfix"]).default("all").describe("Filter by status. Default: all"),
+        limit: z90.number().min(1).max(50).default(25).describe("Max results")
       }
     },
     async ({ status: status2, limit }) => {
@@ -30522,6 +30742,70 @@ function registerSupportTools(server) {
       }
     }
   );
+  server.registerTool(
+    "list_my_feature_requests",
+    {
+      title: "My Feature Requests",
+      description: "List feature requests you've filed, scoped to your license. Shows status (open/planned/in_progress/shipped/closed), priority, and shipped_version so you know when to update.",
+      inputSchema: {
+        status: z90.enum(["all", "open", "planned", "in_progress", "shipped", "closed", "wontdo"]).default("all").describe("Filter by status. Default: all"),
+        limit: z90.number().min(1).max(50).default(25).describe("Max results")
+      }
+    },
+    async ({ status: status2, limit }) => {
+      const licenseKey = loadLicense();
+      const licenseToken = readCachedLicenseToken();
+      if (!licenseKey && !licenseToken) {
+        return {
+          content: [{ type: "text", text: "No license key found. Run `exe-os setup` or `exe-os cloud setup` first." }],
+          isError: true
+        };
+      }
+      const endpoint2 = new URL("https://askexe.com/v1/support/my-feature-requests");
+      endpoint2.searchParams.set("status", status2);
+      endpoint2.searchParams.set("limit", String(limit));
+      const headers = { "content-type": "application/json" };
+      if (licenseKey) headers["x-exe-license-key"] = licenseKey;
+      if (licenseToken) headers["x-exe-license-token"] = licenseToken;
+      try {
+        const res = await fetch(endpoint2.toString(), { method: "GET", headers, signal: AbortSignal.timeout(15e3) });
+        if (!res.ok) {
+          const body = await res.text().catch(() => "");
+          return {
+            content: [{ type: "text", text: `Failed to fetch feature requests: HTTP ${res.status}${body ? ` \u2014 ${body}` : ""}` }],
+            isError: true
+          };
+        }
+        const data = await res.json();
+        if (data.count === 0) {
+          return {
+            content: [{ type: "text", text: `No feature requests found${status2 !== "all" ? ` with status '${status2}'` : ""}.` }],
+            structuredContent: { items: [], count: 0 }
+          };
+        }
+        const lines = [`Feature requests (${data.count}):`, ""];
+        for (const r of data.items) {
+          const priIcon = r.priority === "p0" ? "\u{1F534}" : r.priority === "p1" ? "\u{1F534}" : r.priority === "p2" ? "\u{1F7E0}" : "\u{1F7E2}";
+          const statusIcon = r.status === "shipped" ? "\u2705" : r.status === "closed" ? "\u2611\uFE0F" : r.status === "planned" ? "\u{1F4CB}" : r.status === "in_progress" ? "\u{1F528}" : r.status === "wontdo" ? "\u26D4" : "\u{1F535}";
+          lines.push(`${priIcon} ${r.priority.toUpperCase()} ${statusIcon} ${r.status} \u2014 ${r.title}`);
+          lines.push(`   ID: ${r.id} | Filed: ${r.created_at?.slice(0, 10) ?? "?"}`);
+          if (r.shipped_version) lines.push(`   \u{1F680} Shipped in: ${r.shipped_version} \u2014 run \`exe-os update\` to get this feature`);
+          if (r.target_version) lines.push(`   \u{1F3AF} Target: ${r.target_version}`);
+          if (r.response_notes) lines.push(`   \u{1F4DD} AskExe: ${r.response_notes}`);
+          lines.push("");
+        }
+        return {
+          content: [{ type: "text", text: lines.join("\n") }],
+          structuredContent: data
+        };
+      } catch (err) {
+        return {
+          content: [{ type: "text", text: `Error fetching feature requests: ${err instanceof Error ? err.message : String(err)}` }],
+          isError: true
+        };
+      }
+    }
+  );
 }
 var init_support = __esm({
   "src/mcp/tools/support.ts"() {
@@ -30596,21 +30880,21 @@ var init_exe_status = __esm({
 
 // src/bin/exe-healthcheck.ts
 import { existsSync as existsSync43, readFileSync as readFileSync36, readdirSync as readdirSync14 } from "fs";
-import path55 from "path";
+import path56 from "path";
 import { execSync as execSync15 } from "child_process";
 import { fileURLToPath as fileURLToPath6 } from "url";
 function findPackageRoot2() {
-  let dir = path55.dirname(fileURLToPath6(import.meta.url));
-  const { root } = path55.parse(dir);
+  let dir = path56.dirname(fileURLToPath6(import.meta.url));
+  const { root } = path56.parse(dir);
   while (dir !== root) {
-    if (existsSync43(path55.join(dir, "package.json"))) return dir;
-    dir = path55.dirname(dir);
+    if (existsSync43(path56.join(dir, "package.json"))) return dir;
+    dir = path56.dirname(dir);
   }
   throw new Error("Cannot find package root");
 }
 function checkBuildIntegrity(pkgRoot) {
   const results = [];
-  const tsupConfig = path55.join(pkgRoot, "tsup.config.ts");
+  const tsupConfig = path56.join(pkgRoot, "tsup.config.ts");
   if (!existsSync43(tsupConfig)) {
     return [{ name: "build/tsup-config", pass: false, detail: "tsup.config.ts not found" }];
   }
@@ -30620,7 +30904,7 @@ function checkBuildIntegrity(pkgRoot) {
   let total = 0;
   for (const match of entryMatches) {
     const outputKey = match[1];
-    const expectedPath = path55.join(pkgRoot, "dist", `${outputKey}.js`);
+    const expectedPath = path56.join(pkgRoot, "dist", `${outputKey}.js`);
     total++;
     if (!existsSync43(expectedPath)) {
       missing.push(`dist/${outputKey}.js`);
@@ -30644,7 +30928,7 @@ function checkBuildIntegrity(pkgRoot) {
 }
 function checkEmbedPipeline(pkgRoot) {
   const results = [];
-  const daemonPath = path55.join(pkgRoot, "dist", "lib", "exe-daemon.js");
+  const daemonPath = path56.join(pkgRoot, "dist", "lib", "exe-daemon.js");
   if (!existsSync43(daemonPath)) {
     results.push({
       name: "exed/daemon-exists",
@@ -30656,17 +30940,17 @@ function checkEmbedPipeline(pkgRoot) {
   results.push({ name: "exed/daemon-exists", pass: true, detail: "dist/lib/exe-daemon.js exists" });
   const entryDirs = ["dist/hooks", "dist/bin", "dist/mcp"];
   for (const dir of entryDirs) {
-    const fullDir = path55.join(pkgRoot, dir);
+    const fullDir = path56.join(pkgRoot, dir);
     if (!existsSync43(fullDir)) continue;
     let walkDir = fullDir;
-    const { root } = path55.parse(walkDir);
+    const { root } = path56.parse(walkDir);
     let foundRoot = null;
     while (walkDir !== root) {
-      if (existsSync43(path55.join(walkDir, "package.json"))) {
+      if (existsSync43(path56.join(walkDir, "package.json"))) {
         foundRoot = walkDir;
         break;
       }
-      walkDir = path55.dirname(walkDir);
+      walkDir = path56.dirname(walkDir);
     }
     if (!foundRoot) {
       results.push({
@@ -30676,7 +30960,7 @@ function checkEmbedPipeline(pkgRoot) {
       });
       continue;
     }
-    const resolvedDaemon = path55.join(foundRoot, "dist", "lib", "exe-daemon.js");
+    const resolvedDaemon = path56.join(foundRoot, "dist", "lib", "exe-daemon.js");
     const reachable = existsSync43(resolvedDaemon);
     results.push({
       name: `exed/reachable-from-${dir}`,
@@ -30688,7 +30972,7 @@ function checkEmbedPipeline(pkgRoot) {
 }
 function checkTaskSystem(pkgRoot) {
   const results = [];
-  const scannerPath = path55.join(pkgRoot, "dist", "bin", "scan-tasks.js");
+  const scannerPath = path56.join(pkgRoot, "dist", "bin", "scan-tasks.js");
   if (!existsSync43(scannerPath)) {
     results.push({ name: "tasks/scanner", pass: false, detail: "scan-tasks.js not found" });
     return results;
@@ -30711,7 +30995,7 @@ function checkTaskSystem(pkgRoot) {
 }
 function checkWorkerSpawning(pkgRoot) {
   const results = [];
-  const workerPath = path55.join(pkgRoot, "dist", "hooks", "ingest-worker.js");
+  const workerPath = path56.join(pkgRoot, "dist", "hooks", "ingest-worker.js");
   if (!existsSync43(workerPath)) {
     results.push({ name: "workers/ingest-worker", pass: false, detail: "ingest-worker.js not found" });
     return results;
@@ -30726,14 +31010,14 @@ function checkWorkerSpawning(pkgRoot) {
       detail: `Parse error: ${err instanceof Error ? err.message.slice(0, 200) : String(err)}`
     });
   }
-  const hooksDir = path55.join(pkgRoot, "dist", "hooks");
+  const hooksDir = path56.join(pkgRoot, "dist", "hooks");
   if (existsSync43(hooksDir)) {
     const hookFiles = readdirSync14(hooksDir).filter((f) => f.endsWith(".js") && !f.endsWith(".js.map"));
     let hooksPassed = 0;
     const hooksFailed = [];
     for (const hook of hookFiles) {
       try {
-        execSync15(`node --check "${path55.join(hooksDir, hook)}" 2>&1`, { timeout: 1e4, encoding: "utf-8" });
+        execSync15(`node --check "${path56.join(hooksDir, hook)}" 2>&1`, { timeout: 1e4, encoding: "utf-8" });
         hooksPassed++;
       } catch {
         hooksFailed.push(hook);
@@ -30757,8 +31041,8 @@ function checkWorkerSpawning(pkgRoot) {
 }
 function checkMcpTransport() {
   const results = [];
-  const pidPath = path55.join(EXE_AI_DIR, "exed.pid");
-  const tokenPath = path55.join(EXE_AI_DIR, "exed.token");
+  const pidPath = path56.join(EXE_AI_DIR, "exed.pid");
+  const tokenPath = path56.join(EXE_AI_DIR, "exed.token");
   let daemonAlive = false;
   if (existsSync43(pidPath)) {
     try {
@@ -30805,7 +31089,7 @@ function checkMcpTransport() {
   results.push({
     name: "mcp/monitor-summary",
     pass: true,
-    detail: `Privacy-safe local monitor summary: ${path55.join(EXE_AI_DIR, "monitor", "mcp-transport-summary.json")}`
+    detail: `Privacy-safe local monitor summary: ${path56.join(EXE_AI_DIR, "monitor", "mcp-transport-summary.json")}`
   });
   return results;
 }
@@ -30863,7 +31147,7 @@ function checkClaudeCodeInstall() {
       detail: "Failed to check claude binary path"
     });
   }
-  const versionsDir = path55.join(
+  const versionsDir = path56.join(
     process.env.HOME ?? process.env.USERPROFILE ?? "",
     ".local",
     "share",
@@ -30984,9 +31268,9 @@ __export(update_check_exports, {
 });
 import { execSync as execSync16 } from "child_process";
 import { readFileSync as readFileSync37 } from "fs";
-import path56 from "path";
+import path57 from "path";
 function getLocalVersion(packageRoot) {
-  const pkgPath = path56.join(packageRoot, "package.json");
+  const pkgPath = path57.join(packageRoot, "package.json");
   const pkg = JSON.parse(readFileSync37(pkgPath, "utf-8"));
   return pkg.version;
 }
@@ -31026,7 +31310,7 @@ var init_update_check = __esm({
 // src/mcp/tools/cli-parity.ts
 import { execFile as execFile2 } from "child_process";
 import { promisify as promisify2 } from "util";
-import { z as z90 } from "zod";
+import { z as z91 } from "zod";
 async function runCommand(command, args, timeout = 6e4) {
   const printable = [command, ...args].join(" ");
   try {
@@ -31061,12 +31345,12 @@ function registerCliParityTools(server) {
     title: "Doctor",
     description: "Run exe-os doctor audit. Defaults to read-only diagnostics; optional dry-run/fix flags mirror CLI.",
     inputSchema: {
-      agent: z90.string().optional(),
-      project: z90.string().optional(),
-      verbose: z90.boolean().default(false),
-      conflicts: z90.boolean().default(false),
-      dry_run: z90.boolean().default(false),
-      fix: z90.boolean().default(false)
+      agent: z91.string().optional(),
+      project: z91.string().optional(),
+      verbose: z91.boolean().default(false),
+      conflicts: z91.boolean().default(false),
+      dry_run: z91.boolean().default(false),
+      fix: z91.boolean().default(false)
     }
   }, async ({ agent, project, verbose, conflicts, dry_run, fix }) => {
     const args = [];
@@ -31083,9 +31367,9 @@ function registerCliParityTools(server) {
     title: "Rename Employee",
     description: "Rename an employee using the same path as `exe-os rename <old> <new>`. Use for customer roster/identity renames.",
     inputSchema: {
-      old_name: z90.string().min(1),
-      new_name: z90.string().min(1),
-      dry_run: z90.boolean().default(false)
+      old_name: z91.string().min(1),
+      new_name: z91.string().min(1),
+      dry_run: z91.boolean().default(false)
     }
   }, async ({ old_name, new_name, dry_run }) => {
     if (dry_run) {
@@ -31098,7 +31382,7 @@ function registerCliParityTools(server) {
   server.registerTool("status_brief", {
     title: "Status Brief",
     description: "Return current employee/tmux status. Mirrors `exe-status` and supports optional deep view for one employee.",
-    inputSchema: { employee: z90.string().optional() }
+    inputSchema: { employee: z91.string().optional() }
   }, async ({ employee }) => {
     const text3 = await status(employee);
     return result2(text3, { ok: true, employee: employee ?? null });
@@ -31106,7 +31390,7 @@ function registerCliParityTools(server) {
   server.registerTool("pending_work_summary", {
     title: "Pending Work Summary",
     description: "Return pending reviews, messages, and notifications using the same summaries as the CLI tools.",
-    inputSchema: { agent: z90.string().optional() }
+    inputSchema: { agent: z91.string().optional() }
   }, async ({ agent }) => {
     const parts = await Promise.all([
       runCommand("exe-pending-reviews", [], 3e4),
@@ -31127,7 +31411,7 @@ function registerCliParityTools(server) {
   server.registerTool("key_rotation_preflight", {
     title: "Key Rotation Preflight",
     description: "Dry-run key rotation/update preflight. No destructive changes.",
-    inputSchema: { mode: z90.enum(["rotate", "update"]).default("rotate") }
+    inputSchema: { mode: z91.enum(["rotate", "update"]).default("rotate") }
   }, async ({ mode }) => {
     const out = await runCommand("exe-os", ["key", mode, "--dry-run"], 6e4);
     return result2(out.text, { ok: out.ok, command: out.command, mode }, !out.ok);
@@ -31146,11 +31430,11 @@ function registerCliParityTools(server) {
     title: "Stack Update Check",
     description: "Plan/check a customer stack update without applying Docker changes. Mirrors `exe-os stack-update --check`.",
     inputSchema: {
-      target: z90.string().optional(),
-      manifest: z90.string().optional(),
-      compose_file: z90.string().optional(),
-      env_file: z90.string().optional(),
-      deployment_persona: z90.enum(["customer", "askexe-control-plane"]).default("customer")
+      target: z91.string().optional(),
+      manifest: z91.string().optional(),
+      compose_file: z91.string().optional(),
+      env_file: z91.string().optional(),
+      deployment_persona: z91.enum(["customer", "askexe-control-plane"]).default("customer")
     }
   }, async ({ target, manifest, compose_file, env_file, deployment_persona }) => {
     const args = ["stack-update", "--check", "--deployment-persona", deployment_persona];
@@ -31271,7 +31555,7 @@ var init_session_events = __esm({
 });
 
 // src/mcp/tools/get-session-events.ts
-import { z as z91 } from "zod";
+import { z as z92 } from "zod";
 function canReadAgent(activeRole, activeAgent, requestedAgent) {
   return requestedAgent === activeAgent || activeRole === "COO" || activeRole === "CTO";
 }
@@ -31295,11 +31579,11 @@ function registerGetSessionEvents(server) {
       title: "Get Session Events",
       description: "Return exact recent chronological user prompts, assistant responses, and tool calls from the append-only session journal. Use this when asked what happened last, not semantic memory search.",
       inputSchema: {
-        agent_id: z91.string().optional().describe("Agent to inspect. Defaults to active agent. COO/CTO may inspect others."),
-        session_id: z91.string().optional().describe("Optional exact runtime session id."),
+        agent_id: z92.string().optional().describe("Agent to inspect. Defaults to active agent. COO/CTO may inspect others."),
+        session_id: z92.string().optional().describe("Optional exact runtime session id."),
         event_type: EVENT_TYPE.optional().describe("Filter to one event type."),
-        project_name: z91.string().optional().describe("Optional project filter. Pass 'all' for all projects."),
-        limit: z91.number().int().min(1).max(100).default(20).describe("Number of events to return.")
+        project_name: z92.string().optional().describe("Optional project filter. Pass 'all' for all projects."),
+        limit: z92.number().int().min(1).max(100).default(20).describe("Number of events to return.")
       }
     },
     async ({ agent_id, session_id, event_type, project_name, limit }) => {
@@ -31335,8 +31619,8 @@ function registerGetLastAssistantResponse(server) {
       title: "Get Last Assistant Response",
       description: "Return the exact last assistant response for an agent from the session event journal. Use for 'what was the last thing you said?'",
       inputSchema: {
-        agent_id: z91.string().optional().describe("Agent to inspect. Defaults to active agent. COO/CTO may inspect others."),
-        project_name: z91.string().optional().describe("Optional project filter. Pass 'all' for all projects.")
+        agent_id: z92.string().optional().describe("Agent to inspect. Defaults to active agent. COO/CTO may inspect others."),
+        project_name: z92.string().optional().describe("Optional project filter. Pass 'all' for all projects.")
       }
     },
     async ({ agent_id, project_name }) => {
@@ -31371,7 +31655,7 @@ var init_get_session_events = __esm({
     init_active_agent();
     init_fast_db_init();
     init_session_events();
-    EVENT_TYPE = z91.enum([
+    EVENT_TYPE = z92.enum([
       "user_prompt",
       "assistant_response",
       "tool_call",
@@ -31382,25 +31666,96 @@ var init_get_session_events = __esm({
 });
 
 // src/lib/code-context-index.ts
-import crypto20 from "crypto";
-import path57 from "path";
+import crypto21 from "crypto";
+import path58 from "path";
 import { existsSync as existsSync44, mkdirSync as mkdirSync22, readFileSync as readFileSync38, readdirSync as readdirSync15, statSync as statSync10, writeFileSync as writeFileSync25 } from "fs";
 import { spawnSync } from "child_process";
+function vectorStorePath(projectRoot) {
+  const rootHash = hashText(projectRoot).slice(0, 16);
+  return path58.join(indexDir(), `${rootHash}.vectors.json`);
+}
+function loadVectorStore(projectRoot) {
+  const file = vectorStorePath(projectRoot);
+  if (!existsSync44(file)) return null;
+  try {
+    const parsed = JSON.parse(readFileSync38(file, "utf8"));
+    if (parsed.version !== VECTOR_STORE_VERSION) return null;
+    return parsed;
+  } catch {
+    return null;
+  }
+}
+function saveVectorStore(projectRoot, store) {
+  writeFileSync25(vectorStorePath(projectRoot), JSON.stringify(store));
+}
+function cosineSimilarity3(a, b) {
+  let dot = 0, normA = 0, normB = 0;
+  for (let i = 0; i < a.length; i++) {
+    dot += a[i] * b[i];
+    normA += a[i] * a[i];
+    normB += b[i] * b[i];
+  }
+  const denom = Math.sqrt(normA) * Math.sqrt(normB);
+  return denom === 0 ? 0 : dot / denom;
+}
+async function embedSymbols(index) {
+  const rootHash = hashText(index.projectRoot).slice(0, 16);
+  const existing = loadVectorStore(index.projectRoot);
+  const store = {
+    version: VECTOR_STORE_VERSION,
+    projectRootHash: rootHash,
+    vectors: {}
+  };
+  const allSymbols = [];
+  for (const file of Object.values(index.files)) {
+    for (const symbol of file.symbols) {
+      if (existing?.vectors[symbol.id]) {
+        store.vectors[symbol.id] = existing.vectors[symbol.id];
+      } else {
+        allSymbols.push({ id: symbol.id, text: symbol.summary || `${symbol.kind} ${symbol.name} in ${symbol.filePath}` });
+      }
+    }
+  }
+  if (allSymbols.length === 0) {
+    saveVectorStore(index.projectRoot, store);
+    return store;
+  }
+  const connected = await connectEmbedDaemon().catch(() => false);
+  if (!connected) {
+    saveVectorStore(index.projectRoot, store);
+    return store;
+  }
+  for (let i = 0; i < allSymbols.length; i += EMBED_BATCH_SIZE) {
+    const batch = allSymbols.slice(i, i + EMBED_BATCH_SIZE);
+    const texts = batch.map((s) => s.text);
+    try {
+      const vectors = await embedBatchViaClient(texts, "low");
+      if (vectors && vectors.length === batch.length) {
+        for (let j = 0; j < batch.length; j++) {
+          store.vectors[batch[j].id] = vectors[j];
+        }
+      }
+    } catch {
+    }
+  }
+  saveVectorStore(index.projectRoot, store);
+  return store;
+}
 function normalizeProjectRoot(projectRoot) {
-  return path57.resolve(projectRoot || process.cwd());
+  return path58.resolve(projectRoot || process.cwd());
 }
 function hashText(text3) {
-  return crypto20.createHash("sha256").update(text3).digest("hex");
+  return crypto21.createHash("sha256").update(text3).digest("hex");
 }
 function indexDir() {
-  const dir = path57.join(EXE_AI_DIR, "code-context");
+  const dir = path58.join(EXE_AI_DIR, "code-context");
   mkdirSync22(dir, { recursive: true });
   return dir;
 }
 function getCodeContextIndexPath(projectRoot) {
   const root = normalizeProjectRoot(projectRoot);
   const rootHash = hashText(root).slice(0, 16);
-  return path57.join(indexDir(), `${rootHash}.json`);
+  return path58.join(indexDir(), `${rootHash}.json`);
 }
 function currentBranch(projectRoot) {
   const result3 = spawnSync("git", ["branch", "--show-current"], { cwd: projectRoot, encoding: "utf8", timeout: 2e3 });
@@ -31413,8 +31768,8 @@ function shouldIgnore(relPath) {
 }
 function listRecursive(projectRoot, dir = projectRoot, out = []) {
   for (const entry of readdirSync15(dir, { withFileTypes: true })) {
-    const abs = path57.join(dir, entry.name);
-    const rel = path57.relative(projectRoot, abs).replaceAll(path57.sep, "/");
+    const abs = path58.join(dir, entry.name);
+    const rel = path58.relative(projectRoot, abs).replaceAll(path58.sep, "/");
     if (shouldIgnore(rel)) continue;
     if (entry.isDirectory()) listRecursive(projectRoot, abs, out);
     else if (entry.isFile()) out.push(rel);
@@ -31430,7 +31785,7 @@ function listCodeFiles(projectRoot, maxFiles) {
     const rg = spawnSync("rg", ["--files"], { cwd: projectRoot, encoding: "utf8", timeout: 5e3, maxBuffer: 1024 * 1024 * 16 });
     files = rg.status === 0 && rg.stdout.trim() ? rg.stdout.split("\n").map((s) => s.trim()).filter(Boolean) : listRecursive(projectRoot);
   }
-  return files.map((file) => file.replaceAll(path57.sep, "/")).filter((file) => isChunkable(file) && !shouldIgnore(file)).slice(0, maxFiles).sort();
+  return files.map((file) => file.replaceAll(path58.sep, "/")).filter((file) => isChunkable(file) && !shouldIgnore(file)).slice(0, maxFiles).sort();
 }
 function parseImportPaths2(importText) {
   const paths = [];
@@ -31443,13 +31798,13 @@ function parseImportPaths2(importText) {
 }
 function resolveImport(fromFile, importPath, allFiles) {
   if (!importPath.startsWith(".")) return null;
-  const base = path57.posix.normalize(path57.posix.join(path57.posix.dirname(fromFile.replaceAll(path57.sep, "/")), importPath));
+  const base = path58.posix.normalize(path58.posix.join(path58.posix.dirname(fromFile.replaceAll(path58.sep, "/")), importPath));
   const withoutKnownExt = base.replace(/\.(?:[a-z0-9]+)$/i, "");
   const candidates = [base];
   for (const ext of ["ts", "tsx", "js", "jsx", "py", "rs", "go", "java", "cs", "cpp", "c", "rb", "php", "swift", "kt", "scala", "sql", "md", "json", "yaml", "yml"]) {
     candidates.push(`${withoutKnownExt}.${ext}`, `${base}.${ext}`);
   }
-  for (const indexName of ["index.ts", "index.tsx", "index.js", "mod.rs", "__init__.py"]) candidates.push(path57.posix.join(base, indexName));
+  for (const indexName of ["index.ts", "index.tsx", "index.js", "mod.rs", "__init__.py"]) candidates.push(path58.posix.join(base, indexName));
   return candidates.find((candidate) => allFiles.has(candidate)) ?? null;
 }
 function symbolId(filePath, chunk) {
@@ -31470,7 +31825,7 @@ function saveIndex(index) {
   writeFileSync25(getCodeContextIndexPath(index.projectRoot), JSON.stringify(index, null, 2));
 }
 function buildFileRecord(projectRoot, relPath, allFiles, previous) {
-  const absPath = path57.join(projectRoot, relPath);
+  const absPath = path58.join(projectRoot, relPath);
   let stat;
   try {
     stat = statSync10(absPath);
@@ -31508,13 +31863,13 @@ function buildCodeContextIndex(options = {}) {
   const branch = currentBranch(projectRoot);
   const previous = options.force ? null : loadIndex(projectRoot);
   const files = listCodeFiles(projectRoot, maxFiles);
-  const allFiles = new Set(files.map((file) => file.replaceAll(path57.sep, "/")));
+  const allFiles = new Set(files.map((file) => file.replaceAll(path58.sep, "/")));
   const fileRecords = {};
   let rebuiltFiles = 0;
   let reusedFiles = 0;
   let skippedFiles = 0;
   for (const rel of files) {
-    const normalized = rel.replaceAll(path57.sep, "/");
+    const normalized = rel.replaceAll(path58.sep, "/");
     const { record, reused } = buildFileRecord(projectRoot, normalized, allFiles, previous?.files[normalized]);
     if (record) {
       fileRecords[normalized] = record;
@@ -31543,11 +31898,11 @@ function loadOrBuildCodeContextIndex(options = {}) {
     if (loaded) {
       const currentFiles = listCodeFiles(projectRoot, options.maxFiles ?? DEFAULT_MAX_FILES);
       const unchanged = currentFiles.every((rel) => {
-        const normalized = rel.replaceAll(path57.sep, "/");
+        const normalized = rel.replaceAll(path58.sep, "/");
         const existing = loaded.files[normalized];
         if (!existing) return false;
         try {
-          const stat = statSync10(path57.join(projectRoot, normalized));
+          const stat = statSync10(path58.join(projectRoot, normalized));
           return stat.mtimeMs === existing.mtimeMs && stat.size === existing.size;
         } catch {
           return false;
@@ -31600,9 +31955,9 @@ function globToRegex(pattern) {
 }
 function matchesPath(filePath, patterns) {
   if (!patterns || patterns.length === 0) return true;
-  const normalized = filePath.replaceAll(path57.sep, "/");
+  const normalized = filePath.replaceAll(path58.sep, "/");
   return patterns.some((pattern) => {
-    const p = pattern.replaceAll(path57.sep, "/").replace(/^\.\//, "");
+    const p = pattern.replaceAll(path58.sep, "/").replace(/^\.\//, "");
     return normalized === p || normalized.startsWith(`${p}/`) || normalized.endsWith(p) || globToRegex(p).test(normalized);
   });
 }
@@ -31661,7 +32016,7 @@ function filteredFiles(index, options = {}) {
     return matchesPath(file.path, options.paths);
   });
 }
-function searchCodeContext(query, options = {}) {
+function lexicalSearch(query, options = {}) {
   const terms = tokenize(query);
   if (terms.length === 0) return [];
   const index = loadOrBuildCodeContextIndex({ projectRoot: options.projectRoot, force: options.force || options.refreshIndex, maxFiles: options.maxFiles });
@@ -31687,6 +32042,81 @@ function searchCodeContext(query, options = {}) {
   const limit = options.limit ?? 20;
   return results.sort((a, b) => b.score - a.score || a.filePath.localeCompare(b.filePath)).slice(offset, offset + limit);
 }
+function searchCodeContext(query, options = {}) {
+  return lexicalSearch(query, options);
+}
+async function searchCodeContextSemantic(query, options = {}) {
+  const terms = tokenize(query);
+  if (terms.length === 0) return [];
+  const index = loadOrBuildCodeContextIndex({ projectRoot: options.projectRoot, force: options.force || options.refreshIndex, maxFiles: options.maxFiles });
+  const projectRoot = normalizeProjectRoot(options.projectRoot);
+  const vectorStore = loadVectorStore(projectRoot);
+  if (!vectorStore || Object.keys(vectorStore.vectors).length === 0) {
+    return lexicalSearch(query, options);
+  }
+  let queryVector = null;
+  try {
+    const connected = await connectEmbedDaemon().catch(() => false);
+    if (connected) {
+      const result3 = await embedBatchViaClient([query], "high");
+      if (result3 && result3.length === 1) queryVector = result3[0];
+    }
+  } catch {
+  }
+  if (!queryVector) return lexicalSearch(query, options);
+  const files = filteredFiles(index, options);
+  const candidates = [];
+  for (const file of files) {
+    for (const symbol of file.symbols) {
+      const lexical = scoreSymbol(symbol, terms);
+      const vec = vectorStore.vectors[symbol.id];
+      const vectorScore = vec ? cosineSimilarity3(queryVector, vec) : 0;
+      if (lexical.score > 0 || vectorScore > 0.3) {
+        candidates.push({
+          symbol,
+          lexicalScore: lexical.score,
+          vectorScore,
+          matches: lexical.matches
+        });
+      }
+    }
+  }
+  const byLexical = [...candidates].sort((a, b) => b.lexicalScore - a.lexicalScore);
+  const byVector = [...candidates].sort((a, b) => b.vectorScore - a.vectorScore);
+  const lexicalRank = /* @__PURE__ */ new Map();
+  const vectorRank = /* @__PURE__ */ new Map();
+  byLexical.forEach((c, i) => lexicalRank.set(c.symbol.id, i + 1));
+  byVector.forEach((c, i) => vectorRank.set(c.symbol.id, i + 1));
+  const VECTOR_WEIGHT = 0.6;
+  const LEXICAL_WEIGHT = 0.4;
+  const fused = candidates.map((c) => {
+    const lRank = lexicalRank.get(c.symbol.id) ?? candidates.length + 1;
+    const vRank = vectorRank.get(c.symbol.id) ?? candidates.length + 1;
+    const rrfScore = VECTOR_WEIGHT * (1 / (RRF_K2 + vRank)) + LEXICAL_WEIGHT * (1 / (RRF_K2 + lRank));
+    return {
+      symbol: c.symbol,
+      score: rrfScore,
+      matches: c.vectorScore > 0.3 ? [...c.matches, `semantic=${c.vectorScore.toFixed(3)}`] : c.matches,
+      filePath: c.symbol.filePath,
+      language: c.symbol.language,
+      content: c.symbol.text,
+      startLine: c.symbol.startLine,
+      endLine: c.symbol.endLine
+    };
+  });
+  const offset = Math.max(0, options.offset ?? 0);
+  const limit = options.limit ?? 20;
+  return fused.sort((a, b) => b.score - a.score || a.filePath.localeCompare(b.filePath)).slice(offset, offset + limit);
+}
+async function buildCodeContextIndexWithEmbeddings(options = {}) {
+  const index = buildCodeContextIndex(options);
+  const existingStore = loadVectorStore(index.projectRoot);
+  const existingCount = existingStore ? Object.keys(existingStore.vectors).length : 0;
+  const store = await embedSymbols(index);
+  const vectorCount = Object.keys(store.vectors).length;
+  const newEmbeddings = vectorCount - Math.min(existingCount, vectorCount);
+  return { index, vectorCount, newEmbeddings };
+}
 function dependentsMap(index) {
   const map = /* @__PURE__ */ new Map();
   for (const file of Object.values(index.files)) {
@@ -31720,7 +32150,7 @@ function traceCodeSymbol(symbolName, options = {}) {
 }
 function resolveTargetFile(index, input) {
   if (input.filePath) {
-    const normalized = input.filePath.replaceAll(path57.sep, "/").replace(/^\.\//, "");
+    const normalized = input.filePath.replaceAll(path58.sep, "/").replace(/^\.\//, "");
     if (index.files[normalized]) return { filePath: normalized, target: normalized };
     const suffix = Object.keys(index.files).find((file) => file.endsWith(normalized));
     if (suffix) return { filePath: suffix, target: input.filePath };
@@ -31750,7 +32180,7 @@ function analyzeBlastRadius(input) {
       }
     }
   }
-  const targetBase = path57.basename(target.filePath).replace(/\.[^.]+$/, "").toLowerCase();
+  const targetBase = path58.basename(target.filePath).replace(/\.[^.]+$/, "").toLowerCase();
   const symbolLower = input.symbol?.toLowerCase();
   const tests = Object.keys(index.files).filter((file) => {
     const lower = file.toLowerCase();
@@ -31778,20 +32208,24 @@ function getCodeContextStats(options = {}) {
     indexPath: getCodeContextIndexPath(index.projectRoot)
   };
 }
-var INDEX_VERSION, DEFAULT_MAX_FILES, IGNORE_SEGMENTS;
+var VECTOR_STORE_VERSION, EMBED_BATCH_SIZE, INDEX_VERSION, DEFAULT_MAX_FILES, IGNORE_SEGMENTS, RRF_K2;
 var init_code_context_index = __esm({
   "src/lib/code-context-index.ts"() {
     "use strict";
     init_config();
     init_code_chunker();
+    init_exe_daemon_client();
+    VECTOR_STORE_VERSION = 1;
+    EMBED_BATCH_SIZE = 64;
     INDEX_VERSION = 2;
     DEFAULT_MAX_FILES = 5e3;
     IGNORE_SEGMENTS = /* @__PURE__ */ new Set(["node_modules", "dist", ".git", "coverage", ".worktrees", ".next", "build", "target", "vendor"]);
+    RRF_K2 = 60;
   }
 });
 
 // src/mcp/tools/code-context.ts
-import { z as z92 } from "zod";
+import { z as z93 } from "zod";
 function errorResult10(text3) {
   return { content: [{ type: "text", text: text3 }], isError: true };
 }
@@ -31801,23 +32235,24 @@ function jsonResult(value) {
 function registerCodeContext(server) {
   server.registerTool("code_context", {
     title: "Code Context",
-    description: "Persistent codebase context engine. One consolidated tool to avoid MCP bloat. Actions: index, search, trace, blast_radius, stats.",
+    description: "Persistent codebase context engine with semantic vector search. One consolidated tool to avoid MCP bloat. Actions: index (structural only), index_embed (structural + vector embeddings), search (semantic+lexical hybrid), trace, blast_radius, stats. Search uses RRF fusion of Jina v5 embeddings (cosine similarity) + lexical scoring. Falls back to lexical if daemon unavailable.",
     inputSchema: {
-      action: z92.enum(["index", "search", "trace", "blast_radius", "stats"]).describe("Code context operation"),
-      project_root: z92.string().optional().describe("Repository root. Defaults to current working directory."),
-      query: z92.string().optional().describe("Search query for action=search"),
-      symbol: z92.string().optional().describe("Symbol/function/class/type name for trace or blast_radius"),
-      file_path: z92.string().optional().describe("File path for blast_radius"),
-      force: z92.boolean().optional().describe("Force rebuild before answering"),
-      limit: z92.coerce.number().int().min(1).max(100).optional().describe("Max results"),
-      offset: z92.coerce.number().int().min(0).optional().describe("Search pagination offset"),
-      refresh_index: z92.boolean().optional().describe("Refresh/rebuild index before searching"),
-      languages: z92.array(z92.string()).optional().describe('Language filters, e.g. ["python", "typescript"]'),
-      paths: z92.array(z92.string()).optional().describe("Path/glob filters"),
-      depth: z92.coerce.number().int().min(1).max(5).optional().describe("Dependent traversal depth for blast_radius"),
-      max_files: z92.coerce.number().int().min(1).max(1e4).optional().describe("Max code files to index")
-    }
-  }, async ({ action, project_root, query, symbol, file_path, force, limit, offset, refresh_index, languages, paths, depth, max_files }) => {
+      action: z93.enum(["index", "index_embed", "search", "trace", "blast_radius", "stats"]).describe("Code context operation. index_embed = index + generate embeddings for semantic search."),
+      project_root: z93.string().optional().describe("Repository root. Defaults to current working directory."),
+      query: z93.string().optional().describe("Natural language search query (e.g. 'authentication logic', 'database migration'). Semantic search finds conceptual matches, not just keywords."),
+      symbol: z93.string().optional().describe("Symbol/function/class/type name for trace or blast_radius"),
+      file_path: z93.string().optional().describe("File path for blast_radius"),
+      force: z93.boolean().optional().describe("Force rebuild before answering"),
+      limit: z93.coerce.number().int().min(1).max(100).optional().describe("Max results"),
+      offset: z93.coerce.number().int().min(0).optional().describe("Search pagination offset"),
+      refresh_index: z93.boolean().optional().describe("Refresh/rebuild index before searching"),
+      languages: z93.array(z93.string()).optional().describe('Language filters, e.g. ["python", "typescript"]'),
+      paths: z93.array(z93.string()).optional().describe("Path/glob filters"),
+      depth: z93.coerce.number().int().min(1).max(5).optional().describe("Dependent traversal depth for blast_radius"),
+      max_files: z93.coerce.number().int().min(1).max(1e4).optional().describe("Max code files to index"),
+      lexical_only: z93.boolean().optional().describe("Force lexical-only search (skip vector similarity). Default: false \u2014 uses semantic hybrid search.")
+    }
+  }, async ({ action, project_root, query, symbol, file_path, force, limit, offset, refresh_index, languages, paths, depth, max_files, lexical_only }) => {
     const opts = { projectRoot: project_root, force, maxFiles: max_files };
     if (action === "index") {
       const index = buildCodeContextIndex(opts);
@@ -31827,7 +32262,24 @@ function registerCodeContext(server) {
         indexedAt: index.indexedAt,
         files: Object.keys(index.files).length,
         symbols: Object.values(index.files).reduce((sum, file) => sum + file.symbols.length, 0),
-        imports: Object.values(index.files).reduce((sum, file) => sum + file.resolvedImports.length, 0)
+        imports: Object.values(index.files).reduce((sum, file) => sum + file.resolvedImports.length, 0),
+        note: "Structural index only. Use action=index_embed to also generate vector embeddings for semantic search."
+      });
+    }
+    if (action === "index_embed") {
+      const { index, vectorCount, newEmbeddings } = await buildCodeContextIndexWithEmbeddings(opts);
+      const totalSymbols = Object.values(index.files).reduce((sum, file) => sum + file.symbols.length, 0);
+      return jsonResult({
+        projectRoot: index.projectRoot,
+        branch: index.branch,
+        indexedAt: index.indexedAt,
+        files: Object.keys(index.files).length,
+        symbols: totalSymbols,
+        imports: Object.values(index.files).reduce((sum, file) => sum + file.resolvedImports.length, 0),
+        vectorCount,
+        newEmbeddings,
+        embeddingCoverage: totalSymbols > 0 ? `${(vectorCount / totalSymbols * 100).toFixed(1)}%` : "0%",
+        note: "Structural index + vector embeddings. Semantic search is now available."
       });
     }
     if (action === "stats") {
@@ -31835,14 +32287,28 @@ function registerCodeContext(server) {
     }
     if (action === "search") {
       if (!query) return errorResult10('code_context action "search" requires query');
+      const searchOpts = { ...opts, limit, offset, refreshIndex: refresh_index, languages, paths };
+      if (lexical_only) {
+        return jsonResult({
+          query,
+          mode: "lexical",
+          limit: limit ?? 20,
+          offset: offset ?? 0,
+          languages: languages ?? [],
+          paths: paths ?? [],
+          results: searchCodeContext(query, searchOpts)
+        });
+      }
+      const results = await searchCodeContextSemantic(query, searchOpts);
+      const hasSemantic = results.some((r) => r.matches.some((m) => m.startsWith("semantic=")));
       return jsonResult({
         query,
+        mode: hasSemantic ? "semantic+lexical" : "lexical-fallback",
         limit: limit ?? 20,
         offset: offset ?? 0,
-        refresh_index: refresh_index ?? false,
         languages: languages ?? [],
         paths: paths ?? [],
-        results: searchCodeContext(query, { ...opts, limit, offset, refreshIndex: refresh_index, languages, paths })
+        results
       });
     }
     if (action === "trace") {
@@ -31866,7 +32332,7 @@ var init_code_context = __esm({
 });
 
 // src/mcp/tools/support-inbox.ts
-import { z as z93 } from "zod";
+import { z as z94 } from "zod";
 function adminToken() {
   return process.env.ASKEXE_SUPPORT_ADMIN_TOKEN || process.env.EXE_SUPPORT_ADMIN_TOKEN;
 }
@@ -31905,9 +32371,9 @@ function registerListBugReports(server) {
       title: "List Bug Reports",
       description: "AskExe-internal only: list incoming customer bug reports from the support inbox.",
       inputSchema: {
-        status: z93.enum(["all", "open", "triaged", "fixed", "closed", "wontfix"]).default("open"),
-        severity: z93.enum(["p0", "p1", "p2", "p3"]).optional(),
-        limit: z93.number().int().min(1).max(100).default(25)
+        status: z94.enum(["all", "open", "triaged", "fixed", "closed", "wontfix"]).default("open"),
+        severity: z94.enum(["p0", "p1", "p2", "p3"]).optional(),
+        limit: z94.number().int().min(1).max(100).default(25)
       }
     },
     async ({ status: status2, severity, limit }) => {
@@ -31926,7 +32392,7 @@ function registerGetBugReport(server) {
     {
       title: "Get Bug Report",
       description: "AskExe-internal only: fetch one customer bug report with full markdown payload.",
-      inputSchema: { id: z93.string().min(8) }
+      inputSchema: { id: z94.string().min(8) }
     },
     async ({ id }) => {
       const data = await requestJson(`${endpoint()}/${encodeURIComponent(id)}`);
@@ -31941,12 +32407,12 @@ function registerTriageBugReport(server) {
       title: "Triage Bug Report",
       description: "AskExe-internal only: update bug report status and link task/commit/release metadata.",
       inputSchema: {
-        id: z93.string().min(8),
+        id: z94.string().min(8),
         status: STATUS.optional(),
-        triage_notes: z93.string().optional(),
-        linked_task_id: z93.string().optional(),
-        linked_commit: z93.string().optional(),
-        fixed_version: z93.string().optional()
+        triage_notes: z94.string().optional(),
+        linked_task_id: z94.string().optional(),
+        linked_commit: z94.string().optional(),
+        fixed_version: z94.string().optional()
       }
     },
     async ({ id, status: status2, triage_notes, linked_task_id, linked_commit, fixed_version }) => {
@@ -31958,12 +32424,75 @@ function registerTriageBugReport(server) {
     }
   );
 }
-var DEFAULT_ENDPOINT, STATUS;
+function featureEndpoint() {
+  return endpoint().replace(/\/bug-reports\/?$/, "/feature-requests");
+}
+function registerListFeatureRequests(server) {
+  server.registerTool(
+    "list_feature_requests",
+    {
+      title: "List Feature Requests",
+      description: "AskExe-internal only: list incoming customer feature requests from the support inbox.",
+      inputSchema: {
+        status: z94.enum(["all", "open", "planned", "in_progress", "shipped", "closed", "wontdo"]).default("open"),
+        priority: z94.enum(["p0", "p1", "p2", "p3"]).optional(),
+        limit: z94.number().int().min(1).max(100).default(25)
+      }
+    },
+    async ({ status: status2, priority, limit }) => {
+      const url = new URL(featureEndpoint());
+      url.searchParams.set("status", status2);
+      url.searchParams.set("limit", String(limit));
+      if (priority) url.searchParams.set("priority", priority);
+      const data = await requestJson(url.toString());
+      return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
+    }
+  );
+}
+function registerGetFeatureRequest(server) {
+  server.registerTool(
+    "get_feature_request",
+    {
+      title: "Get Feature Request",
+      description: "AskExe-internal only: fetch one customer feature request with full payload.",
+      inputSchema: { id: z94.string().min(8) }
+    },
+    async ({ id }) => {
+      const data = await requestJson(`${featureEndpoint()}/${encodeURIComponent(id)}`);
+      return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
+    }
+  );
+}
+function registerTriageFeatureRequest(server) {
+  server.registerTool(
+    "triage_feature_request",
+    {
+      title: "Triage Feature Request",
+      description: "AskExe-internal only: update feature request status, response notes, and version metadata.",
+      inputSchema: {
+        id: z94.string().min(8),
+        status: FEATURE_STATUS.optional(),
+        response_notes: z94.string().optional(),
+        target_version: z94.string().optional(),
+        shipped_version: z94.string().optional()
+      }
+    },
+    async ({ id, status: status2, response_notes, target_version, shipped_version }) => {
+      const data = await requestJson(`${featureEndpoint()}/${encodeURIComponent(id)}`, {
+        method: "PATCH",
+        body: JSON.stringify({ status: status2, response_notes, target_version, shipped_version })
+      });
+      return { content: [{ type: "text", text: JSON.stringify(data, null, 2) }] };
+    }
+  );
+}
+var DEFAULT_ENDPOINT, STATUS, FEATURE_STATUS;
 var init_support_inbox = __esm({
   "src/mcp/tools/support-inbox.ts"() {
     "use strict";
     DEFAULT_ENDPOINT = "https://askexe.com/admin/support/bug-reports";
-    STATUS = z93.enum(["open", "triaged", "fixed", "closed", "wontfix"]);
+    STATUS = z94.enum(["open", "triaged", "fixed", "closed", "wontfix"]);
+    FEATURE_STATUS = z94.enum(["open", "planned", "in_progress", "shipped", "closed", "wontdo"]);
   }
 });
 
@@ -32299,6 +32828,7 @@ function registerAllTools(server) {
   gate("registerStoreDecision", registerStoreDecision);
   gate("registerGetDecision", registerGetDecision);
   gate("registerCreateBugReport", registerCreateBugReport);
+  gate("registerCreateFeatureRequest", registerCreateFeatureRequest);
   gate("registerSupportTools", registerSupportTools);
   gate("registerCliParityTools", registerCliParityTools);
   gate("registerGetSessionEvents", registerGetSessionEvents);
@@ -32308,6 +32838,9 @@ function registerAllTools(server) {
     gate("registerListBugReports", registerListBugReports);
     gate("registerGetBugReport", registerGetBugReport);
     gate("registerTriageBugReport", registerTriageBugReport);
+    gate("registerListFeatureRequests", registerListFeatureRequests);
+    gate("registerGetFeatureRequest", registerGetFeatureRequest);
+    gate("registerTriageFeatureRequest", registerTriageFeatureRequest);
   }
   if (exposeLegacyConfig) {
     gate("registerGetAgentSpend", registerGetAgentSpend);
@@ -32450,6 +32983,7 @@ var init_register_tools = __esm({
     init_query_company_brain();
     init_company_actions();
     init_create_bug_report();
+    init_create_feature_request();
     init_support();
     init_cli_parity();
     init_get_session_events();
@@ -32680,7 +33214,7 @@ __export(task_enforcement_exports, {
   sendNudge: () => sendNudge
 });
 import { writeFileSync as writeFileSync26 } from "fs";
-import path58 from "path";
+import path59 from "path";
 function writeAuditEntry(entry) {
   try {
     const line = JSON.stringify(entry) + "\n";
@@ -32855,7 +33389,7 @@ var init_task_enforcement = __esm({
       "What do you need?"
     ];
     MANAGER_ROLES = ["COO", "CTO"];
-    AUDIT_LOG_PATH = path58.join(
+    AUDIT_LOG_PATH = path59.join(
       process.env.HOME ?? process.env.USERPROFILE ?? "/tmp",
       ".exe-os",
       "enforcement-audit.jsonl"
@@ -32880,7 +33414,7 @@ __export(background_jobs_exports, {
 import { existsSync as existsSync45, mkdirSync as mkdirSync23, readFileSync as readFileSync39, writeFileSync as writeFileSync27, unlinkSync as unlinkSync14 } from "fs";
 import { execFileSync as execFileSync3 } from "child_process";
 import os22 from "os";
-import path59 from "path";
+import path60 from "path";
 function ensureDirs() {
   mkdirSync23(LOCK_DIR, { recursive: true });
 }
@@ -32926,7 +33460,7 @@ function listBackgroundJobs() {
   return jobs;
 }
 function lockPath(type) {
-  return path59.join(LOCK_DIR, `${type.replace(/[^a-zA-Z0-9_.-]/g, "_")}.lock`);
+  return path60.join(LOCK_DIR, `${type.replace(/[^a-zA-Z0-9_.-]/g, "_")}.lock`);
 }
 function acquireJobLock(type, ttlMs = DEFAULT_LOCK_TTL_MS) {
   ensureDirs();
@@ -33153,9 +33687,9 @@ var init_background_jobs = __esm({
   "src/lib/background-jobs.ts"() {
     "use strict";
     init_config();
-    JOB_DIR = path59.join(EXE_AI_DIR, "jobs");
-    JOBS_FILE = path59.join(JOB_DIR, "jobs.json");
-    LOCK_DIR = path59.join(JOB_DIR, "locks");
+    JOB_DIR = path60.join(EXE_AI_DIR, "jobs");
+    JOBS_FILE = path60.join(JOB_DIR, "jobs.json");
+    LOCK_DIR = path60.join(JOB_DIR, "locks");
     DEFAULT_LOCK_TTL_MS = 6 * 60 * 60 * 1e3;
     MAX_HISTORY = 200;
   }
@@ -33168,16 +33702,16 @@ __export(ws_auth_exports, {
   deriveWsAuthToken: () => deriveWsAuthToken,
   hashAuthToken: () => hashAuthToken
 });
-import crypto21 from "crypto";
+import crypto22 from "crypto";
 function deriveWsAuthToken(masterKey) {
-  return Buffer.from(crypto21.hkdfSync("sha256", masterKey, "", WS_AUTH_HKDF_INFO, 32));
+  return Buffer.from(crypto22.hkdfSync("sha256", masterKey, "", WS_AUTH_HKDF_INFO, 32));
 }
 function deriveOrgId(masterKey) {
-  const raw = Buffer.from(crypto21.hkdfSync("sha256", masterKey, "", ORG_ID_HKDF_INFO, 32));
-  return crypto21.createHash("sha256").update(raw).digest("hex").slice(0, 32);
+  const raw = Buffer.from(crypto22.hkdfSync("sha256", masterKey, "", ORG_ID_HKDF_INFO, 32));
+  return crypto22.createHash("sha256").update(raw).digest("hex").slice(0, 32);
 }
 function hashAuthToken(token) {
-  return crypto21.createHash("sha256").update(token).digest("hex");
+  return crypto22.createHash("sha256").update(token).digest("hex");
 }
 var WS_AUTH_HKDF_INFO, ORG_ID_HKDF_INFO;
 var init_ws_auth = __esm({
@@ -33195,10 +33729,10 @@ __export(device_registry_exports, {
   resolveTargetDevice: () => resolveTargetDevice,
   setFriendlyName: () => setFriendlyName
 });
-import crypto22 from "crypto";
+import crypto23 from "crypto";
 import os23 from "os";
 import { readFileSync as readFileSync40, writeFileSync as writeFileSync28, mkdirSync as mkdirSync24, existsSync as existsSync46 } from "fs";
-import path60 from "path";
+import path61 from "path";
 function getDeviceInfo() {
   if (existsSync46(DEVICE_JSON_PATH)) {
     try {
@@ -33212,11 +33746,11 @@ function getDeviceInfo() {
   }
   const hostname = os23.hostname();
   const info = {
-    deviceId: crypto22.randomUUID(),
+    deviceId: crypto23.randomUUID(),
     friendlyName: hostname.replace(/\./g, "-").toLowerCase(),
     hostname
   };
-  mkdirSync24(path60.dirname(DEVICE_JSON_PATH), { recursive: true });
+  mkdirSync24(path61.dirname(DEVICE_JSON_PATH), { recursive: true });
   writeFileSync28(DEVICE_JSON_PATH, JSON.stringify(info, null, 2));
   return info;
 }
@@ -33257,7 +33791,7 @@ var init_device_registry = __esm({
   "src/lib/device-registry.ts"() {
     "use strict";
     init_config();
-    DEVICE_JSON_PATH = path60.join(EXE_AI_DIR, "device.json");
+    DEVICE_JSON_PATH = path61.join(EXE_AI_DIR, "device.json");
   }
 });
 
@@ -33474,7 +34008,7 @@ import net2 from "net";
 import { createServer as createHttpServer } from "http";
 import { randomUUID as randomUUID11 } from "crypto";
 import { writeFileSync as writeFileSync29, unlinkSync as unlinkSync15, mkdirSync as mkdirSync25, existsSync as existsSync47, readFileSync as readFileSync41, chmodSync as chmodSync2 } from "fs";
-import path61 from "path";
+import path62 from "path";
 
 // src/lib/orchestration-metrics.ts
 init_config();
@@ -33547,8 +34081,8 @@ function initMetrics() {
 // src/lib/exe-daemon.ts
 init_memory_write_governor();
 init_mcp_transport_health();
-var SOCKET_PATH2 = process.env.EXE_DAEMON_SOCK ?? process.env.EXE_EMBED_SOCK ?? path61.join(EXE_AI_DIR, "exed.sock");
-var PID_PATH4 = process.env.EXE_DAEMON_PID ?? process.env.EXE_EMBED_PID ?? path61.join(EXE_AI_DIR, "exed.pid");
+var SOCKET_PATH2 = process.env.EXE_DAEMON_SOCK ?? process.env.EXE_EMBED_SOCK ?? path62.join(EXE_AI_DIR, "exed.sock");
+var PID_PATH4 = process.env.EXE_DAEMON_PID ?? process.env.EXE_EMBED_PID ?? path62.join(EXE_AI_DIR, "exed.pid");
 var MODEL_FILE = "jina-embeddings-v5-small-q4_k_m.gguf";
 var IDLE_TIMEOUT_MS2 = parseInt(process.env.EXE_DAEMON_IDLE_TIMEOUT_MS || "0", 10);
 var REVIEW_POLL_INTERVAL_MS = 60 * 1e3;
@@ -33577,7 +34111,7 @@ function enqueue(queue, entry) {
   queue.push(entry);
 }
 async function loadModel() {
-  const modelPath = path61.join(MODELS_DIR, MODEL_FILE);
+  const modelPath = path62.join(MODELS_DIR, MODEL_FILE);
   if (!existsSync47(modelPath)) {
     process.stderr.write(`[exed] No model at ${modelPath} \u2014 running without embeddings (VPS mode).
 `);
@@ -34019,14 +34553,14 @@ function startMemoryQueueDrain() {
 `);
 }
 function startServer() {
-  mkdirSync25(path61.dirname(SOCKET_PATH2), { recursive: true });
+  mkdirSync25(path62.dirname(SOCKET_PATH2), { recursive: true });
   try {
-    chmodSync2(path61.dirname(SOCKET_PATH2), 448);
+    chmodSync2(path62.dirname(SOCKET_PATH2), 448);
   } catch {
   }
   _daemonToken = ensureDaemonToken(process.env[DAEMON_TOKEN_ENV2] ?? null);
   for (const oldFile of ["embed.sock", "embed.pid"]) {
-    const oldPath = path61.join(path61.dirname(SOCKET_PATH2), oldFile);
+    const oldPath = path62.join(path62.dirname(SOCKET_PATH2), oldFile);
     try {
       if (oldFile.endsWith(".pid")) {
         const pid = parseInt(readFileSync41(oldPath, "utf8").trim(), 10);
@@ -34151,6 +34685,7 @@ function startServer() {
   void startMcpHttpServer();
 }
 async function startMcpHttpServer() {
+  process.stderr.write("[exed] MCP HTTP: starting setup...\n");
   try {
     let parseDurationMs2 = function(value, fallback, options = {}) {
       if (!value) return fallback;
@@ -34205,8 +34740,14 @@ async function startMcpHttpServer() {
     const { isInitializeRequest } = await import("@modelcontextprotocol/sdk/types.js");
     const { registerAllTools: registerAllTools2 } = await Promise.resolve().then(() => (init_register_tools(), register_tools_exports));
     const { runWithAgent: runWithAgent2 } = await Promise.resolve().then(() => (init_agent_context(), agent_context_exports));
-    const { initStore: initStore2 } = await Promise.resolve().then(() => (init_store(), store_exports));
-    await initStore2();
+    const dbReady = await ensureStoreForPolling();
+    if (!dbReady) {
+      process.stderr.write(
+        "[exed] MCP HTTP: DB init failed \u2014 MCP HTTP endpoint will NOT start. Run 'exe-os setup' to fix keychain/encryption.\n"
+      );
+      return;
+    }
+    process.stderr.write("[exed] MCP HTTP: DB ready\n");
     const transports = /* @__PURE__ */ new Map();
     const MCP_HTTP_PORT = parseInt(process.env.EXE_MCP_PORT || "48739", 10);
     const MCP_SESSION_TTL_MS = parseDurationMs2(process.env.EXE_MCP_SESSION_TTL_MS, 4 * 60 * 60 * 1e3, { allowZero: true });
@@ -34391,8 +34932,10 @@ async function startMcpHttpServer() {
       }
     });
   } catch (err) {
-    process.stderr.write(`[exed] MCP HTTP setup failed (non-fatal): ${err instanceof Error ? err.message : String(err)}
+    const msg = err instanceof Error ? err.stack ?? err.message : String(err);
+    process.stderr.write(`[exed] MCP HTTP setup FAILED: ${msg}
 `);
+    process.stderr.write("[exed] MCP HTTP endpoint will NOT be available this session.\n");
   }
 }
 var _storeInitialized = false;
@@ -34660,7 +35203,7 @@ function startGraphExtraction() {
 `);
 }
 var AGENT_STATS_INTERVAL_MS = 60 * 1e3;
-var AGENT_STATS_PATH = path61.join(EXE_AI_DIR, "agent-stats.json");
+var AGENT_STATS_PATH = path62.join(EXE_AI_DIR, "agent-stats.json");
 async function writeAgentStats() {
   fired("agent_stats");
   if (!await ensureStoreForPolling()) return;
@@ -34837,11 +35380,11 @@ function startIntercomQueueDrain() {
       const hasInProgressTask = (session) => {
         try {
           const { baseAgentName: ban } = (init_employees(), __toCommonJS(employees_exports));
-          const path62 = __require("path");
+          const path63 = __require("path");
           const { existsSync: existsSync48 } = __require("fs");
           const os25 = __require("os");
           const agent = ban(session.split("-")[0] ?? session);
-          const markerPath = path62.join(os25.homedir(), ".exe-os", "session-cache", `current-task-${agent}.json`);
+          const markerPath = path63.join(os25.homedir(), ".exe-os", "session-cache", `current-task-${agent}.json`);
           return existsSync48(markerPath);
         } catch {
           return false;