@askexenow/exe-os 0.9.93 → 0.9.94

package/dist/lib/exe-daemon.js

@@ -3175,6 +3175,20 @@ async function ensureSchema() {
     });
   } catch {
   }
+  try {
+    await client.execute({
+      sql: `ALTER TABLE tasks ADD COLUMN spawn_runtime TEXT`,
+      args: []
+    });
+  } catch {
+  }
+  try {
+    await client.execute({
+      sql: `ALTER TABLE tasks ADD COLUMN spawn_model TEXT`,
+      args: []
+    });
+  } catch {
+  }
   await client.executeMultiple(`
     CREATE VIRTUAL TABLE IF NOT EXISTS conversations_fts USING fts5(
       content_text,
@@ -3426,6 +3440,22 @@ async function ensureSchema() {
     );
   } catch {
   }
+  for (const col of [
+    "ALTER TABLE memories ADD COLUMN valid_from TEXT",
+    "ALTER TABLE memories ADD COLUMN invalid_at TEXT"
+  ]) {
+    try {
+      await client.execute(col);
+    } catch {
+    }
+  }
+  try {
+    await client.execute({
+      sql: `UPDATE memories SET valid_from = timestamp WHERE valid_from IS NULL`,
+      args: []
+    });
+  } catch {
+  }
   try {
     await client.execute({
       sql: `ALTER TABLE memories ADD COLUMN memory_type TEXT DEFAULT 'raw'`,
@@ -3468,6 +3498,13 @@ async function ensureSchema() {
     } catch {
     }
   }
+  try {
+    await client.execute({
+      sql: `ALTER TABLE memories ADD COLUMN procedure_for TEXT`,
+      args: []
+    });
+  } catch {
+  }
   try {
     await client.execute({
       sql: `UPDATE tasks SET status = 'closed' WHERE status = 'done' AND result IS NOT NULL`,
@@ -5877,6 +5914,20 @@ var init_platform_procedures = __esm({
         priority: "p1",
         content: "Once per session (COO boot only, never repeat), call list_my_feature_requests to check if any previously filed feature requests have been shipped by AskExe. If any request has status 'shipped' with a shipped_version, surface it to the founder immediately: '\u{1F680} N feature(s) shipped \u2014 run exe-os update to get version X.Y.Z'. This is a one-time check at boot, not a recurring poll. If no requests exist or none are shipped, skip silently. If the MCP tool is unavailable or the network call fails, skip silently \u2014 this is informational, not blocking."
       },
+      // --- Tool guidance ---
+      {
+        title: "How to use company_actions \u2014 execute business actions through gateway connectors",
+        domain: "tools",
+        priority: "p2",
+        content: "The company_actions tool executes business actions through gateway connectors (e.g. send WhatsApp, trigger workflows, update CRM). It routes through the exe-gateway on the VPS. Actions are defined by the customer's gateway configuration \u2014 each connector (WhatsApp, Shopify, email, etc.) exposes specific actions. Use query_company_brain to find available data first, then company_actions to act on it. Requires gateway auth token. Read-only founders should NOT use this \u2014 it mutates external state."
+      },
+      // --- Release awareness ---
+      {
+        title: "What's New check \u2014 surface new features after update",
+        domain: "support",
+        priority: "p1",
+        content: "Once per session (COO boot only, never repeat), check if the installed exe-os version is newer than the last session. If it is, read the bundled release-notes.json (at the package root) and surface a brief summary to the founder: 'Updated to exe-os vX.Y.Z \u2014 N new features, M fixes.' List the top 3 features by name. This helps the founder know what they got from the update. If release-notes.json doesn't exist or the version hasn't changed, skip silently. Never repeat this check in the same session."
+      },
       // --- Platform vs Customer ownership ---
       {
         title: "What the platform provides vs what you customize",
@@ -5965,13 +6016,13 @@ var init_platform_procedures = __esm({
         title: "MCP tools \u2014 memory, decision, and search",
         domain: "tool-use",
         priority: "p1",
-        content: `memory(action="recall") / recall_my_memory: search your own memories (semantic + FTS). memory(action="ask_team") / ask_team_memory: search a colleague's memories by agent name. memory(action="store") / store_memory: persist a memory. memory(action="commit") / commit_memory: high-importance memory that survives consolidation. Requires summary. memory(action="search") / search_everything: unified search across memories, tasks, entities, conversations. memory(action="session_context") / get_session_context: temporal memory window. Requires session_id + target_timestamp. memory(action="consolidate") / consolidate_memories: merge duplicate/related memories. memory(action="cardinality") / get_memory_cardinality: count memories per agent. decision(action="store") / store_decision: record an architectural decision (domain, decision, rationale). decision(action="get") / get_decision: retrieve a past decision by domain or query.`
+        content: `memory(action="recall") / recall_my_memory: search your own memories (semantic + FTS). Supports as_of param for bi-temporal queries (what did I know at time X?), kind param to filter by memory type (decision, procedure, observation, raw, conversation, behavior). memory(action="ask_team") / ask_team_memory: search a colleague's memories by agent name. memory(action="store") / store_memory: persist a memory. Supports kind param and procedure_for domain tag for procedure-type memories. memory(action="commit") / commit_memory: high-importance memory that survives consolidation. Requires summary. memory(action="search") / search_everything: unified search across memories, tasks, entities, conversations. memory(action="session_context") / get_session_context: temporal memory window. Requires session_id + target_timestamp. memory(action="consolidate") / consolidate_memories: merge duplicate/related memories. memory(action="cardinality") / get_memory_cardinality: count memories per agent. memory(action="supersede") / supersede: replace an old memory with a new version (old_id + new text). decision(action="store") / store_decision: record an architectural decision (domain, decision, rationale). decision(action="get") / get_decision: retrieve a past decision by domain or query.`
       },
       {
         title: "MCP tools \u2014 task orchestration",
         domain: "tool-use",
         priority: "p1",
-        content: 'task(action="create") / create_task: dispatch work (title, assigned_to, context). The ONLY dispatch path. Auto-spawns session. task(action="list") / list_tasks: query tasks by status, assignee, project. task(action="get") / get_task: fetch full task details by task_id. task(action="update") / update_task: change status (in_progress, done, blocked, cancelled) + result summary. task(action="close") / close_task: finalize a reviewed task (COO only). task(action="checkpoint") / checkpoint_task: save progress state for crash recovery. task(action="resume") / resume_employee: re-spawn an employee session for an existing task.'
+        content: `task(action="create") / create_task: dispatch work (title, assigned_to, context). The ONLY dispatch path. Auto-spawns session. Supports spawn_runtime and spawn_model params to override the agent's default runtime/model for a specific task. task(action="list") / list_tasks: query tasks by status, assignee, project. task(action="get") / get_task: fetch full task details by task_id. task(action="update") / update_task: change status (in_progress, done, blocked, cancelled) + result summary. task(action="close") / close_task: finalize a reviewed task (COO only). task(action="checkpoint") / checkpoint_task: save progress state for crash recovery. task(action="resume") / resume_employee: re-spawn an employee session for an existing task.`
       },
       {
         title: "MCP tools \u2014 knowledge graph (GraphRAG)",
@@ -6001,7 +6052,7 @@ var init_platform_procedures = __esm({
         title: "MCP tools \u2014 admin, config, and operations",
         domain: "tool-use",
         priority: "p1",
-        content: 'config(action="list_employees"): view roster. config(action="agent_spend"): token usage per agent. config(action="daemon_health"): check exed status. config(action="license_status"): check license. config(action="cloud_sync"): force sync. config(action="memory_audit"): health check (dupes, null vectors). config(action="run_consolidation"): trigger memory consolidation. config(action="company_procedure", subaction="store|list|deactivate"): manage company procedures. config(action="global_procedure"): list all procedures (platform + company). config(action="create_trigger|list_triggers"): scheduled agent jobs. config(action="export_orchestration|import_orchestration"): portable org state. diagnostics(action="healthcheck|doctor|status_brief|check_update|cloud_status"): system diagnostics. mcp_ping(): daemon health + license status + tool usage stats.'
+        content: 'config(action="list_employees"): view roster. config(action="agent_spend"): token usage per agent. config(action="daemon_health"): check exed status. config(action="license_status"): check license. config(action="cloud_sync"): force sync. config(action="memory_audit"): health check (dupes, null vectors). config(action="run_consolidation"): trigger memory consolidation. config(action="company_procedure", subaction="store|list|deactivate"): manage company procedures. config(action="global_procedure"): list all procedures (platform + company). config(action="create_trigger|list_triggers"): scheduled agent jobs. config(action="export_orchestration|import_orchestration"): portable org state. diagnostics(action="healthcheck|doctor|status_brief|check_update|cloud_status"): system diagnostics. diagnostics(action="tool_search"): semantic tool discovery \u2014 find relevant MCP tools by natural language query. Returns top-K tools ranked by relevance. diagnostics(action="drift"): identity drift detection \u2014 score how far an agent has drifted from its role identity. Returns drift score + recommendations. mcp_ping(): daemon health + license status + tool usage stats.'
       }
     ];
     PLATFORM_PROCEDURE_TITLES = new Set(
@@ -6417,6 +6468,8 @@ async function writeMemory(record) {
     source_type: record.source_type ?? null,
     tier: record.tier ?? classifyTier(record),
     supersedes_id: record.supersedes_id ?? null,
+    valid_from: record.valid_from ?? record.timestamp,
+    invalid_at: record.invalid_at ?? null,
     draft: record.draft ? 1 : 0,
     memory_type: memoryType,
     trajectory: record.trajectory ? JSON.stringify(record.trajectory) : null,
@@ -6435,7 +6488,8 @@ async function writeMemory(record) {
     token_cost: record.token_cost ?? null,
     audience: record.audience ?? null,
     language_type: record.language_type ?? inferLanguageType(record),
-    parent_memory_id: record.parent_memory_id ?? null
+    parent_memory_id: record.parent_memory_id ?? null,
+    procedure_for: record.procedure_for ?? null
   };
   _pendingRecords.push(dbRow);
   orgBus.emit({
@@ -6490,6 +6544,8 @@ async function flushBatch() {
       const sourceType = row.source_type ?? null;
       const tier = row.tier ?? 3;
       const supersedesId = row.supersedes_id ?? null;
+      const validFrom = row.valid_from ?? row.timestamp;
+      const invalidAt = row.invalid_at ?? null;
       const draft = row.draft ? 1 : 0;
       const memoryType = row.memory_type ?? "raw";
       const trajectory = row.trajectory ?? null;
@@ -6509,15 +6565,16 @@ async function flushBatch() {
       const audience = row.audience ?? null;
       const languageType = row.language_type ?? null;
       const parentMemoryId = row.parent_memory_id ?? null;
+      const procedureFor = row.procedure_for ?? null;
       const cols = `id, agent_id, agent_role, session_id, timestamp,
                tool_name, project_name,
                has_error, raw_text, vector, version, task_id, importance, status,
                confidence, last_accessed,
                workspace_id, document_id, user_id, char_offset, page_number,
-               source_path, source_type, tier, supersedes_id, draft, memory_type, trajectory, content_hash,
+               source_path, source_type, tier, supersedes_id, valid_from, invalid_at, draft, memory_type, trajectory, content_hash,
                intent, outcome, domain, referenced_entities, retrieval_count,
                chain_position, review_status, context_window_pct, file_paths, commit_hash,
-               duration_ms, token_cost, audience, language_type, parent_memory_id`;
+               duration_ms, token_cost, audience, language_type, parent_memory_id, procedure_for`;
       const metaArgs = [
         intent,
         outcome,
@@ -6533,7 +6590,8 @@ async function flushBatch() {
         tokenCost,
         audience,
         languageType,
-        parentMemoryId
+        parentMemoryId,
+        procedureFor
       ];
       const baseArgs = [
         row.id,
@@ -6562,6 +6620,8 @@ async function flushBatch() {
         sourceType,
         tier,
         supersedesId,
+        validFrom,
+        invalidAt,
         draft,
         memoryType,
         trajectory,
@@ -6569,8 +6629,8 @@ async function flushBatch() {
       ];
       return {
         sql: hasVector ? `INSERT OR IGNORE INTO memories (${cols})
-              VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, vector32(?), ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)` : `INSERT OR IGNORE INTO memories (${cols})
-              VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, NULL, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
+              VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, vector32(?), ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)` : `INSERT OR IGNORE INTO memories (${cols})
+              VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, NULL, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
         args: hasVector ? [...baseArgs, vectorToBlob(row.vector), ...sharedArgs, ...metaArgs] : [...baseArgs, ...sharedArgs, ...metaArgs]
       };
     };
@@ -6686,6 +6746,12 @@ async function searchMemories(queryVector, agentId, options) {
                AND vector IS NOT NULL${statusFilter}${draftFilter}
                AND COALESCE(confidence, 0.7) >= 0.3`;
   const args = [agentId];
+  if (options?.asOf) {
+    sql += ` AND (valid_from IS NULL OR valid_from <= ?) AND (invalid_at IS NULL OR invalid_at > ?)`;
+    args.push(options.asOf, options.asOf);
+  } else {
+    sql += ` AND invalid_at IS NULL`;
+  }
   const scope = buildWikiScopeFilter(options, "");
   sql += scope.clause;
   args.push(...scope.args);
@@ -8157,6 +8223,19 @@ __export(hybrid_search_exports, {
   rrfMerge: () => rrfMerge,
   rrfMergeMulti: () => rrfMergeMulti
 });
+function buildTemporalFilter(options, columnPrefix) {
+  const asOf = options?.asOf;
+  if (asOf) {
+    return {
+      clause: ` AND (${columnPrefix}valid_from IS NULL OR ${columnPrefix}valid_from <= ?) AND (${columnPrefix}invalid_at IS NULL OR ${columnPrefix}invalid_at > ?)`,
+      args: [asOf, asOf]
+    };
+  }
+  return {
+    clause: ` AND ${columnPrefix}invalid_at IS NULL`,
+    args: []
+  };
+}
 function appendMemoryTypeFilter(sql, args, column, options) {
   if (options?.memoryTypes && options.memoryTypes.length > 0) {
     const uniqueTypes = [...new Set(options.memoryTypes)];
@@ -8389,6 +8468,9 @@ async function estimateCardinality(agentId, options) {
                AND COALESCE(status, 'active') = 'active'
                AND COALESCE(confidence, 0.7) >= 0.3`;
   const args = [agentId];
+  const temporal = buildTemporalFilter(options, "");
+  sql += temporal.clause;
+  args.push(...temporal.args);
   const rawVisibility = buildRawVisibilityFilter(options, "");
   sql += rawVisibility.clause;
   args.push(...rawVisibility.args);
@@ -8517,6 +8599,9 @@ async function ftsQuery(client, matchExpr, agentId, options, limit) {
                AND m.agent_id = ?${statusFilter}${draftFilter}
                AND COALESCE(m.confidence, 0.7) >= 0.3`;
   const args = [matchExpr, agentId];
+  const temporal = buildTemporalFilter(options, "m.");
+  sql += temporal.clause;
+  args.push(...temporal.args);
   const scope = buildWikiScopeFilter(options, "m.");
   sql += scope.clause;
   args.push(...scope.args);
@@ -8629,6 +8714,9 @@ async function recentRecords(agentId, options, limit, textFilter) {
              WHERE agent_id = ?${statusFilter}${draftFilter}
                AND COALESCE(confidence, 0.7) >= 0.3`;
   const args = [agentId];
+  const temporal = buildTemporalFilter(options, "");
+  sql += temporal.clause;
+  args.push(...temporal.args);
   const scope = buildWikiScopeFilter(options, "");
   sql += scope.clause;
   args.push(...scope.args);
@@ -8729,6 +8817,9 @@ async function trajectoryBypass(queryText, agentId, options, limit) {
                  AND json_extract(trajectory, '$.tool') = ?
                  AND agent_id = ?${statusFilter}${draftFilter}`;
     const args = [toolName, agentId];
+    const temporal = buildTemporalFilter(options, "");
+    sql += temporal.clause;
+    args.push(...temporal.args);
     const rawVisibility = buildRawVisibilityFilter(options, "");
     sql += rawVisibility.clause;
     args.push(...rawVisibility.args);
@@ -9110,7 +9201,11 @@ function registerRecallMyMemory(server) {
         include_source: z.boolean().optional().default(false).describe(
           "When true, attach parent document metadata (filename, mime, source_type) to each result. Default false."
         ),
-        retrieval_mode: z.enum(RETRIEVAL_MODES).optional().default("all").describe(`Typed retrieval mode. ${formatRetrievalModes()}`)
+        retrieval_mode: z.enum(RETRIEVAL_MODES).optional().default("all").describe(`Typed retrieval mode. ${formatRetrievalModes()}`),
+        kind: z.string().optional().describe(
+          "Filter by memory_type: decision, procedure, observation, raw, conversation, behavior."
+        ),
+        as_of: z.string().optional().describe("ISO 8601 timestamp for time-travel query. Returns facts valid at that point in time.")
       }
     },
     async ({
@@ -9127,7 +9222,9 @@ function registerRecallMyMemory(server) {
       workspace_id,
       user_id,
       include_source,
-      retrieval_mode
+      retrieval_mode,
+      kind,
+      as_of
     }) => {
       try {
         if (!recent && !query) {
@@ -9147,7 +9244,9 @@ function registerRecallMyMemory(server) {
           workspaceId: workspace_id,
           includeSource: include_source,
           includeDrafts: true,
-          ...user_id !== void 0 ? { userId: user_id } : {}
+          ...user_id !== void 0 ? { userId: user_id } : {},
+          ...kind ? { memoryType: kind } : {},
+          ...as_of ? { asOf: as_of } : {}
         }, retrieval_mode);
         let results;
         if (recent) {
@@ -9612,7 +9711,7 @@ var init_license = __esm({
     LICENSE_PATH = path17.join(EXE_AI_DIR, "license.key");
     CACHE_PATH = path17.join(EXE_AI_DIR, "license-cache.json");
     DEVICE_ID_PATH = path17.join(EXE_AI_DIR, "device-id");
-    API_BASE = "https://askexe.com/cloud";
+    API_BASE = process.env.EXE_CLOUD_ENDPOINT ?? "https://askexe.com/cloud";
     RETRY_DELAY_MS = 500;
     LICENSE_PUBLIC_KEY_PEM = `-----BEGIN PUBLIC KEY-----
 MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEeHztAMOpR/ZMh+rWuOASjEZ54CGY
@@ -9784,10 +9883,12 @@ function registerStoreMemory(server) {
         project_name: z3.string().optional().describe("Project name"),
         has_error: z3.boolean().optional().default(false).describe("Whether this memory is error-related"),
         source_path: z3.string().optional().describe("Original file path, URL, or document reference"),
-        source_type: z3.string().optional().describe("Content type: text, pdf, image, audio, video, url, document")
+        source_type: z3.string().optional().describe("Content type: text, pdf, image, audio, video, url, document"),
+        kind: z3.string().optional().describe("Memory type: decision, procedure, observation, raw, conversation, behavior"),
+        procedure_for: z3.string().optional().describe("Domain this procedure applies to (only for kind='procedure')")
       }
     },
-    async ({ text: text3, query, tool_name, project_name, has_error, source_path, source_type }) => {
+    async ({ text: text3, query, tool_name, project_name, has_error, source_path, source_type, kind, procedure_for }) => {
       const resolvedText = text3 ?? query;
       if (!resolvedText) {
         return {
@@ -9832,7 +9933,9 @@ function registerStoreMemory(server) {
         raw_text: resolvedText,
         vector,
         source_path: source_path ?? null,
-        source_type: source_type ?? null
+        source_type: source_type ?? null,
+        memory_type: kind ?? void 0,
+        procedure_for: kind === "procedure" ? procedure_for ?? null : null
       });
       await flushBatch();
       if (needsBackfill) {
@@ -10133,9 +10236,9 @@ function truncate(text3, max) {
   const marker = ` \u2026 [truncated; +${text3.length - max} chars]`;
   return text3.slice(0, Math.max(0, max - marker.length)) + marker;
 }
-async function searchMemories2(query, agentId, limit) {
+async function searchMemories2(query, agentId, limit, memoryType) {
   const { hybridSearch: hybridSearch2 } = await Promise.resolve().then(() => (init_hybrid_search(), hybrid_search_exports));
-  const results = await hybridSearch2(query, agentId, { limit });
+  const results = await hybridSearch2(query, agentId, { limit, memoryType });
   return results.map((r, i) => ({
     source: "memory",
     score: 1 - i / Math.max(results.length, 1),
@@ -10259,7 +10362,7 @@ async function unifiedSearch(query, agentId, opts) {
   const perSourceLimit = Math.max(Math.ceil(limit * 1.5), 5);
   const promises = [];
   if (sources.includes("memory")) {
-    promises.push(searchMemories2(query, agentId, perSourceLimit));
+    promises.push(searchMemories2(query, agentId, perSourceLimit, opts?.memoryType));
   }
   if (sources.includes("conversations")) {
     promises.push(searchConversations(query, perSourceLimit));
@@ -10303,7 +10406,8 @@ function registerSearchEverything(server) {
         sources: z5.array(z5.enum(["memory", "conversations", "wiki"])).optional().describe(
           "Which sources to search (default: all). Options: memory, conversations, wiki"
         ),
-        limit: z5.coerce.number().int().min(1).max(50).optional().default(10).describe("Max results to return (default 10, max 50)")
+        limit: z5.coerce.number().int().min(1).max(50).optional().default(10).describe("Max results to return (default 10, max 50)"),
+        kind: z5.string().optional().describe("Filter memories by memory_type: decision, procedure, observation, raw, conversation, behavior.")
       }
     },
     async (params) => {
@@ -10312,7 +10416,8 @@ function registerSearchEverything(server) {
         const sources = params.sources;
         const results = await unifiedSearch(params.query, agentId, {
           limit: params.limit,
-          sources
+          sources,
+          memoryType: params.kind
         });
         if (results.length === 0) {
           return {
@@ -10558,6 +10663,7 @@ async function selectUnconsolidated(client, limit = 200) {
     sql: `SELECT id, agent_id, project_name, tool_name, raw_text, timestamp
           FROM memories
           WHERE consolidated = 0
+            AND COALESCE(memory_type, 'raw') != 'procedure'
           ORDER BY timestamp DESC
           LIMIT ?`,
     args: [limit]
@@ -10901,7 +11007,8 @@ async function isUserIdle(client, idleMinutes = 30) {
 async function countUnconsolidated(client) {
   const result3 = await client.execute({
     sql: `SELECT COUNT(*) as cnt FROM memories
-          WHERE consolidated = 0`,
+          WHERE consolidated = 0
+            AND COALESCE(memory_type, 'raw') != 'procedure'`,
     args: []
   });
   return Number(result3.rows[0]?.cnt ?? 0);
@@ -11138,15 +11245,74 @@ function buildLegacyMemoryHandlers() {
   registerGetMemoryCardinality(localServer);
   return tools;
 }
+async function handleSupersede(input) {
+  const oldId = input.old_id;
+  const text3 = input.text ?? input.query;
+  if (!oldId || !text3) {
+    return errorResult('memory action "supersede" requires old_id and text');
+  }
+  try {
+    const { getClient: getClient2 } = await Promise.resolve().then(() => (init_database(), database_exports));
+    const { getActiveAgent: getActiveAgent2 } = await Promise.resolve().then(() => (init_active_agent(), active_agent_exports));
+    const { writeMemory: writeMemory2, flushBatch: flushBatch2 } = await Promise.resolve().then(() => (init_store(), store_exports));
+    const { randomUUID: randomUUID12 } = await import("crypto");
+    const client = getClient2();
+    const now2 = (/* @__PURE__ */ new Date()).toISOString();
+    const oldRow = await client.execute({
+      sql: `SELECT id, agent_id, agent_role, project_name FROM memories WHERE id = ?`,
+      args: [oldId]
+    });
+    if (oldRow.rows.length === 0) {
+      return errorResult(`Memory not found: ${oldId}`);
+    }
+    await client.execute({
+      sql: `UPDATE memories SET invalid_at = ? WHERE id = ?`,
+      args: [now2, oldId]
+    });
+    const { agentId, agentRole } = getActiveAgent2();
+    const sessionId = process.env.SESSION_ID ?? "manual";
+    const { getProjectName: getProjectName2 } = await Promise.resolve().then(() => (init_project_name(), project_name_exports));
+    const projectName = input.project_name ?? getProjectName2(process.cwd());
+    const newId = randomUUID12();
+    await writeMemory2({
+      id: newId,
+      agent_id: agentId,
+      agent_role: agentRole,
+      session_id: sessionId,
+      timestamp: now2,
+      tool_name: "manual",
+      project_name: projectName,
+      has_error: false,
+      raw_text: text3,
+      vector: null,
+      valid_from: now2,
+      supersedes_id: oldId,
+      importance: 7,
+      memory_type: "adr"
+    });
+    await flushBatch2();
+    return {
+      content: [{
+        type: "text",
+        text: `Superseded memory ${oldId.slice(0, 8)}\u2026 \u2192 new memory ${newId.slice(0, 8)}\u2026
+Old memory invalid_at set to ${now2}.
+New memory id: ${newId}`
+      }]
+    };
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    return errorResult(`Supersede failed: ${msg}`);
+  }
+}
 function registerMemory(server) {
   const legacyTools = buildLegacyMemoryHandlers();
   server.registerTool(
     "memory",
     {
       title: "Memory",
-      description: "Consolidated memory domain tool. Actions: recall, ask_team, store, commit, search, session_context, get_by_id, consolidate, cardinality. Legacy memory tools remain available during migration.",
+      description: "Consolidated memory domain tool. Actions: recall, ask_team, store, commit, search, session_context, get_by_id, consolidate, cardinality, supersede. Legacy memory tools remain available during migration.",
       inputSchema: {
-        action: z10.enum(["recall", "ask_team", "store", "commit", "search", "session_context", "consolidate", "cardinality"]).describe("Memory operation to perform"),
+        action: z10.enum(["recall", "ask_team", "store", "commit", "search", "session_context", "consolidate", "cardinality", "supersede"]).describe("Memory operation to perform"),
         query: z10.string().optional().describe("Search query. Also accepted as store text alias."),
         text: z10.string().optional().describe("Memory text for action=store"),
         summary: z10.string().optional().describe("High-importance summary for action=commit"),
@@ -11179,7 +11345,11 @@ function registerMemory(server) {
         window_size: z10.number().optional().describe("Window size for action=session_context"),
         max_clusters: z10.coerce.number().optional().describe("Max clusters for action=consolidate"),
         model: z10.string().optional().describe("Model for action=consolidate"),
-        agent_id: z10.string().optional().describe("Agent filter for action=cardinality")
+        agent_id: z10.string().optional().describe("Agent filter for action=cardinality"),
+        kind: z10.string().optional().describe("Filter by memory_type: decision, procedure, observation, raw, conversation, behavior. For action=recall and action=search."),
+        procedure_for: z10.string().optional().describe("Domain this procedure applies to (only for storing procedure-type memories)."),
+        as_of: z10.string().optional().describe("ISO 8601 timestamp for time-travel query. Returns facts valid at that point in time. For action=recall."),
+        old_id: z10.string().optional().describe("UUID of memory to supersede. For action=supersede.")
       }
     },
     async (input, extra) => {
@@ -11188,6 +11358,9 @@ function registerMemory(server) {
       if (!legacyToolName) {
         return errorResult(`Unknown memory action: ${String(input.action)}`);
       }
+      if (action === "supersede") {
+        return handleSupersede(input);
+      }
       const { action: _action, ...legacyArgs } = input;
       const missing = missingRequiredFields(legacyArgs, REQUIRED_FIELDS[action]);
       if (missing.length > 0) {
@@ -11256,7 +11429,8 @@ var init_memory2 = __esm({
       session_context: "get_session_context",
       get_by_id: "get_memory_by_id",
       consolidate: "consolidate_memories",
-      cardinality: "get_memory_cardinality"
+      cardinality: "get_memory_cardinality",
+      supersede: "__inline_supersede__"
     };
     REQUIRED_FIELDS = {
       recall: [],
@@ -11267,7 +11441,8 @@ var init_memory2 = __esm({
       session_context: ["session_id", "target_timestamp"],
       get_by_id: ["id"],
       consolidate: [],
-      cardinality: []
+      cardinality: [],
+      supersede: ["old_id", "text"]
     };
   }
 });
@@ -12720,6 +12895,7 @@ function resolveExeSession() {
   const mySession = getMySession();
   if (!mySession) return null;
   const fromSessionName = extractRootExe(mySession);
+  let candidate = null;
   try {
     const key = getSessionKey();
     const parentExe = getParentExe(key);
@@ -12730,13 +12906,47 @@ function resolveExeSession() {
           `[tmux-routing] WARN: cache says "${fromCache}" but session name says "${fromSessionName}". Trusting session name.
 `
         );
-        return fromSessionName;
+        candidate = fromSessionName;
+      } else {
+        candidate = fromCache;
       }
-      return fromCache;
     }
   } catch {
   }
-  return fromSessionName ?? mySession;
+  if (!candidate) {
+    candidate = fromSessionName ?? mySession;
+  }
+  if (candidate && isRootSession(candidate)) {
+    try {
+      const transport = getTransport();
+      const liveSessions = transport.listSessions();
+      if (!liveSessions.includes(candidate)) {
+        const liveRoots = liveSessions.filter((s) => isRootSession(s));
+        if (liveRoots.length === 1) {
+          process.stderr.write(
+            `[tmux-routing] WARN: resolved session "${candidate}" is dead. Using live coordinator "${liveRoots[0]}".
+`
+          );
+          return liveRoots[0];
+        } else if (liveRoots.length > 1) {
+          const base = candidate.replace(/\d+$/, "");
+          const match = liveRoots.find((s) => s.startsWith(base));
+          const chosen = match ?? liveRoots[0];
+          process.stderr.write(
+            `[tmux-routing] WARN: resolved session "${candidate}" is dead. ${liveRoots.length} live roots found, using "${chosen}".
+`
+          );
+          return chosen;
+        }
+        process.stderr.write(
+          `[tmux-routing] WARN: resolved session "${candidate}" is dead and no live coordinator found.
+`
+        );
+      }
+    } catch {
+    }
+  }
+  return candidate;
 }
 function isEmployeeAlive(sessionName) {
   return getTransport().isAlive(sessionName);
@@ -13138,7 +13348,12 @@ function spawnEmployee(employeeName, exeSession, projectDir, opts) {
   }
   const spawnCwd = opts?.cwd ?? projectDir;
   const useExeAgent = !!(opts?.model && opts?.provider);
-  const agentRtConfig = getAgentRuntime(employeeName);
+  const baseRtConfig = getAgentRuntime(employeeName);
+  const agentRtConfig = {
+    ...baseRtConfig,
+    ...opts?.runtimeOverride ? { runtime: opts.runtimeOverride } : {},
+    ...opts?.modelOverride ? { model: opts.modelOverride } : {}
+  };
   const useCodex = !useExeAgent && agentRtConfig.runtime === "codex";
   const useOpencode = !useExeAgent && !useCodex && agentRtConfig.runtime === "opencode";
   const ccProvider = useExeAgent || useCodex || useOpencode ? DEFAULT_PROVIDER : detectActiveProvider();
@@ -13756,8 +13971,8 @@ ${scopeMismatchWarning}` : scopeMismatchWarning;
   const complexity = input.complexity ?? "standard";
   const sessionScope = earlySessionScope;
   await client.execute({
-    sql: `INSERT INTO tasks (id, title, assigned_to, assigned_by, project_name, priority, status, task_file, blocked_by, parent_task_id, reviewer, context, complexity, budget_tokens, budget_fallback_model, tokens_used, tokens_warned_at, session_scope, created_at, updated_at)
-          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
+    sql: `INSERT INTO tasks (id, title, assigned_to, assigned_by, project_name, priority, status, task_file, blocked_by, parent_task_id, reviewer, context, complexity, budget_tokens, budget_fallback_model, tokens_used, tokens_warned_at, session_scope, spawn_runtime, spawn_model, created_at, updated_at)
+          VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
     args: [
       id,
       input.title,
@@ -13777,6 +13992,8 @@ ${scopeMismatchWarning}` : scopeMismatchWarning;
       0,
       null,
       sessionScope,
+      input.spawnRuntime ?? null,
+      input.spawnModel ?? null,
       now2,
       now2
     ]
@@ -13833,7 +14050,9 @@ ${input.context}
     budgetTokens: input.budgetTokens ?? null,
     budgetFallbackModel: input.budgetFallbackModel ?? null,
     tokensUsed: 0,
-    tokensWarnedAt: null
+    tokensWarnedAt: null,
+    spawnRuntime: input.spawnRuntime ?? null,
+    spawnModel: input.spawnModel ?? null
   };
 }
 async function listTasks(input) {
@@ -13883,7 +14102,9 @@ async function listTasks(input) {
     budgetTokens: r.budget_tokens !== null ? Number(r.budget_tokens) : null,
     budgetFallbackModel: r.budget_fallback_model !== null ? String(r.budget_fallback_model) : null,
     tokensUsed: Number(r.tokens_used ?? 0),
-    tokensWarnedAt: r.tokens_warned_at !== null ? Number(r.tokens_warned_at) : null
+    tokensWarnedAt: r.tokens_warned_at !== null ? Number(r.tokens_warned_at) : null,
+    spawnRuntime: r.spawn_runtime !== null && r.spawn_runtime !== void 0 ? String(r.spawn_runtime) : null,
+    spawnModel: r.spawn_model !== null && r.spawn_model !== void 0 ? String(r.spawn_model) : null
   }));
 }
 function isTmuxSessionAlive(identifier) {
@@ -14833,6 +15054,8 @@ async function updateTask(input) {
     budgetFallbackModel: row.budget_fallback_model !== void 0 && row.budget_fallback_model !== null ? String(row.budget_fallback_model) : null,
     tokensUsed: Number(row.tokens_used ?? 0),
     tokensWarnedAt: row.tokens_warned_at !== void 0 && row.tokens_warned_at !== null ? Number(row.tokens_warned_at) : null,
+    spawnRuntime: row.spawn_runtime !== void 0 && row.spawn_runtime !== null ? String(row.spawn_runtime) : null,
+    spawnModel: row.spawn_model !== void 0 && row.spawn_model !== null ? String(row.spawn_model) : null,
     nextTask
   };
 }
@@ -15572,10 +15795,12 @@ function registerCreateTask(server) {
         parent_task_id: z12.string().optional().describe("Parent task ID or slug. Links this task as a subtask."),
         reviewer: z12.string().optional().describe("Who should review this task when done. Defaults to assigner."),
         budget_tokens: z12.number().optional().describe("Max tokens allowed for this task (null = unlimited)"),
-        budget_fallback_model: z12.string().optional().describe("Model to route to when budget is exhausted")
+        budget_fallback_model: z12.string().optional().describe("Model to route to when budget is exhausted"),
+        spawn_runtime: z12.string().optional().describe("Override runtime for spawned session (e.g., 'claude', 'codex', 'opencode')"),
+        spawn_model: z12.string().optional().describe("Override model for spawned session (e.g., 'claude-sonnet-4.6', 'claude-haiku-4.5')")
       }
     },
-    async ({ title, assigned_to, project_name, priority, complexity, context, blocked_by, parent_task_id, reviewer, budget_tokens, budget_fallback_model }) => {
+    async ({ title, assigned_to, project_name, priority, complexity, context, blocked_by, parent_task_id, reviewer, budget_tokens, budget_fallback_model, spawn_runtime, spawn_model }) => {
       if (!isCoordinatorName(assigned_to)) {
         const license = getLicenseSync();
         if (license.plan === "free") {
@@ -15603,6 +15828,8 @@ function registerCreateTask(server) {
         reviewer,
         budgetTokens: budget_tokens,
         budgetFallbackModel: budget_fallback_model,
+        spawnRuntime: spawn_runtime,
+        spawnModel: spawn_model,
         // Skip internal dispatch — we handle it below with autoInstance
         // support. Without this, createTask fires dispatchTaskToEmployee
         // (no autoInstance) in parallel, racing with our ensureEmployee
@@ -15640,7 +15867,9 @@ function registerCreateTask(server) {
             const cfg = loadConfigSync2();
             const result3 = ensureEmployee(assigned_to, exeSession, process.cwd(), {
               autoInstance: useAutoInstance,
-              maxAutoInstances: useAutoInstance ? cfg.sessionLifecycle.maxAutoInstances : void 0
+              maxAutoInstances: useAutoInstance ? cfg.sessionLifecycle.maxAutoInstances : void 0,
+              runtimeOverride: spawn_runtime ?? void 0,
+              modelOverride: spawn_model ?? void 0
             });
             switch (result3.status) {
               case "intercom_sent":
@@ -15881,6 +16110,14 @@ function registerGetTask(server) {
           }
         }
       }
+      const spawnRuntime = row.spawn_runtime ? String(row.spawn_runtime) : null;
+      const spawnModel = row.spawn_model ? String(row.spawn_model) : null;
+      if (spawnRuntime || spawnModel) {
+        lines.push("");
+        lines.push("**Spawn Override:**");
+        if (spawnRuntime) lines.push(`Runtime: ${spawnRuntime}`);
+        if (spawnModel) lines.push(`Model: ${spawnModel}`);
+      }
       if (row.context) {
         lines.push("", "## Context", "", contextText);
       }
@@ -16343,6 +16580,8 @@ function registerTask(server) {
         reviewer: z19.string().optional().describe("Reviewer for action=create"),
         budget_tokens: z19.number().optional().describe("Max token budget for action=create"),
         budget_fallback_model: z19.string().optional().describe("Fallback model for action=create"),
+        spawn_runtime: z19.string().optional().describe("Override runtime for spawned session (e.g., 'claude', 'codex', 'opencode') for action=create"),
+        spawn_model: z19.string().optional().describe("Override model for spawned session (e.g., 'claude-sonnet-4.6') for action=create"),
         status: z19.enum(["open", "in_progress", "done", "needs_review", "blocked", "cancelled", "closed"]).optional().describe("Status for action=update/list/close"),
         result: z19.string().optional().describe("Result summary for action=update or action=close"),
         step: z19.string().optional().describe("Checkpoint step for action=checkpoint"),
@@ -30442,6 +30681,15 @@ function registerCreateBugReport(server) {
       project_name,
       send_upstream
     }) => {
+      if (!summary || summary.trim().length === 0) {
+        return {
+          content: [{
+            type: "text",
+            text: "Error: summary is required but was empty. If calling via support(action='create_bug'), use 'description' which maps to 'summary'."
+          }],
+          isError: true
+        };
+      }
       const { agentId, agentRole } = getActiveAgent();
       const id = crypto19.randomUUID();
       const version = package_version ?? "unknown";
@@ -33024,6 +33272,25 @@ function registerSupportConsolidated(server) {
       const handler = handlers.get(toolName);
       if (!handler) return { content: [{ type: "text", text: `Handler not found: ${toolName}` }], isError: true };
       const { action: _, ...args } = input;
+      if (action === "create_bug") {
+        if (args.description && !args.summary) {
+          args.summary = args.description;
+          delete args.description;
+        }
+        if (args.steps_to_reproduce && !args.reproduction_steps) {
+          const raw = args.steps_to_reproduce;
+          args.reproduction_steps = raw.split(/\n/).map((s) => s.replace(/^\d+\.\s*/, "").trim()).filter(Boolean);
+          delete args.steps_to_reproduce;
+        }
+        if (args.expected_behavior && !args.expected) {
+          args.expected = args.expected_behavior;
+          delete args.expected_behavior;
+        }
+        if (args.actual_behavior && !args.actual) {
+          args.actual = args.actual_behavior;
+          delete args.actual_behavior;
+        }
+      }
       if ((action === "triage_bug" || action === "triage_feature") && args.notes && !args.triage_notes) {
         args.triage_notes = args.notes;
         delete args.notes;
@@ -33060,6 +33327,513 @@ var init_support_consolidated = __esm({
   }
 });
 
+// src/lib/tool-capability-index.ts
+var tool_capability_index_exports = {};
+__export(tool_capability_index_exports, {
+  ToolCapabilityIndex: () => ToolCapabilityIndex,
+  getToolCapabilityIndex: () => getToolCapabilityIndex
+});
+function categoryForToolName(toolName, categoryMap) {
+  const normalized = toolName.replace(/[_-]/g, "").toLowerCase();
+  for (const [registerFn, cat] of Object.entries(categoryMap)) {
+    const fnNormalized = registerFn.replace(/^register/, "").toLowerCase();
+    if (fnNormalized === normalized) return cat;
+  }
+  return "unknown";
+}
+function extractParamNames(inputSchema) {
+  if (!inputSchema || typeof inputSchema !== "object") return "";
+  return Object.keys(inputSchema).join(", ");
+}
+function cosineSimilarity4(a, b) {
+  if (a.length !== b.length || a.length === 0) return 0;
+  let dot = 0, normA = 0, normB = 0;
+  for (let i = 0; i < a.length; i++) {
+    dot += a[i] * b[i];
+    normA += a[i] * a[i];
+    normB += b[i] * b[i];
+  }
+  const denom = Math.sqrt(normA) * Math.sqrt(normB);
+  return denom === 0 ? 0 : dot / denom;
+}
+function keywordScore(query, tool) {
+  const words = query.toLowerCase().split(/\s+/).filter((w) => w.length > 2);
+  if (words.length === 0) return 0;
+  const searchText = `${tool.name} ${tool.description} ${tool.category} ${tool.paramSummary}`.toLowerCase();
+  let matches = 0;
+  for (const word of words) {
+    if (searchText.includes(word)) matches++;
+  }
+  return matches / words.length;
+}
+function getToolCapabilityIndex() {
+  if (!_instance) {
+    _instance = new ToolCapabilityIndex();
+  }
+  return _instance;
+}
+var ALWAYS_ON, ToolCapabilityIndex, _instance;
+var init_tool_capability_index = __esm({
+  "src/lib/tool-capability-index.ts"() {
+    "use strict";
+    init_memory();
+    ALWAYS_ON = /* @__PURE__ */ new Set([
+      "mcp_ping",
+      "memory",
+      "task",
+      "message",
+      "identity",
+      "diagnostics",
+      "session"
+    ]);
+    ToolCapabilityIndex = class {
+      capabilities = [];
+      initialized = false;
+      /**
+       * Build the index by intercepting registerAllTools via a fake McpServer.
+       *
+       * @param registerFn - function that registers tools on a server (e.g. registerAllTools)
+       * @param categoryMap - optional map of registerFnName → category (from tool-gates TOOL_CATEGORIES)
+       */
+      async buildIndex(registerFn, categoryMap) {
+        const captured = [];
+        const fakeServer = {
+          registerTool(name, config2, _handler) {
+            captured.push({
+              name,
+              description: config2.description ?? "",
+              inputSchema: config2.inputSchema ?? {}
+            });
+          }
+        };
+        registerFn(fakeServer);
+        let embedFn = null;
+        try {
+          const { embed: embed2 } = await Promise.resolve().then(() => (init_embedder(), embedder_exports));
+          const test = await embed2("test");
+          if (test.length === EMBEDDING_DIM) {
+            embedFn = embed2;
+          }
+        } catch {
+        }
+        const capabilities = [];
+        for (const tool of captured) {
+          const paramSummary = extractParamNames(tool.inputSchema);
+          const category = categoryMap ? categoryForToolName(tool.name, categoryMap) : "unknown";
+          const capabilityDoc = `${tool.name}: ${tool.description}. Parameters: ${paramSummary}`;
+          let vector = null;
+          if (embedFn) {
+            try {
+              vector = await embedFn(capabilityDoc.slice(0, 500));
+            } catch {
+            }
+          }
+          capabilities.push({
+            name: tool.name,
+            description: tool.description,
+            category,
+            vector,
+            paramSummary
+          });
+        }
+        this.capabilities = capabilities;
+        this.initialized = true;
+        process.stderr.write(
+          `[tool-capability-index] Indexed ${capabilities.length} tools (${capabilities.filter((c) => c.vector).length} with vectors)
+`
+        );
+      }
+      /**
+       * Semantic search for tools matching a natural-language query.
+       * Returns tools sorted by relevance, with always-on tools boosted.
+       */
+      async search(query, limit = 20) {
+        if (!this.initialized || this.capabilities.length === 0) return [];
+        let queryVector = null;
+        try {
+          const { embed: embed2 } = await Promise.resolve().then(() => (init_embedder(), embedder_exports));
+          queryVector = await embed2(query);
+        } catch {
+        }
+        const scored = [];
+        for (const tool of this.capabilities) {
+          let relevance;
+          if (queryVector && tool.vector) {
+            const vecScore = cosineSimilarity4(queryVector, tool.vector);
+            const kwScore = keywordScore(query, tool);
+            relevance = vecScore * 0.8 + kwScore * 0.2;
+          } else {
+            relevance = keywordScore(query, tool);
+          }
+          if (ALWAYS_ON.has(tool.name)) {
+            relevance = Math.max(relevance, 0.5);
+          }
+          scored.push({ ...tool, relevance });
+        }
+        scored.sort((a, b) => b.relevance - a.relevance);
+        return scored.slice(0, limit);
+      }
+      /** Whether the index has been built. */
+      isReady() {
+        return this.initialized;
+      }
+      /** Total number of indexed tools. */
+      get toolCount() {
+        return this.capabilities.length;
+      }
+    };
+    _instance = null;
+  }
+});
+
+// src/lib/drift-probes.ts
+async function getRecentMemories(agentId, limit) {
+  try {
+    const { getClient: getClient2, isInitialized: isInitialized2 } = await Promise.resolve().then(() => (init_database(), database_exports));
+    if (!isInitialized2()) return { count: 0, texts: [] };
+    const client = getClient2();
+    const result3 = await client.execute({
+      sql: `SELECT text FROM memories WHERE agent_id = ? ORDER BY created_at DESC LIMIT ?`,
+      args: [agentId, limit]
+    });
+    const texts = result3.rows.map((r) => String(r.text ?? ""));
+    return { count: texts.length, texts };
+  } catch {
+    return { count: 0, texts: [] };
+  }
+}
+async function getDecisionCount(agentId) {
+  try {
+    const { getClient: getClient2, isInitialized: isInitialized2 } = await Promise.resolve().then(() => (init_database(), database_exports));
+    if (!isInitialized2()) return 0;
+    const client = getClient2();
+    const result3 = await client.execute({
+      sql: `SELECT COUNT(*) as cnt FROM memories WHERE agent_id = ? AND memory_type = 'decision'`,
+      args: [agentId]
+    });
+    return Number(result3.rows[0]?.cnt ?? 0);
+  } catch {
+    return 0;
+  }
+}
+function probeContinuity(ctx) {
+  const memCount = ctx.recentMemoryCount;
+  let score;
+  let detail;
+  if (memCount >= 20) {
+    score = 95;
+    detail = `${memCount} recent memories \u2014 strong continuity`;
+  } else if (memCount >= 10) {
+    score = 85;
+    detail = `${memCount} recent memories \u2014 adequate continuity`;
+  } else if (memCount >= 3) {
+    score = 70;
+    detail = `${memCount} recent memories \u2014 limited continuity`;
+  } else if (memCount >= 1) {
+    score = 50;
+    detail = `${memCount} recent memories \u2014 weak continuity`;
+  } else {
+    score = 30;
+    detail = "No recent memories \u2014 agent may lack session context";
+  }
+  if (ctx.storedDecisionCount > 0) {
+    score = Math.min(100, score + 5);
+    detail += ` (+${ctx.storedDecisionCount} decisions)`;
+  }
+  return { axis: "continuity", score, detail };
+}
+function probeConsistency(ctx) {
+  if (!ctx.identityBody || ctx.recentMemoryTexts.length === 0) {
+    return {
+      axis: "consistency",
+      score: ctx.identityBody ? 80 : 50,
+      detail: ctx.identityBody ? "No memories to check against identity" : "No identity file \u2014 cannot assess consistency"
+    };
+  }
+  const identityTerms = extractKeyTerms(ctx.identityBody);
+  if (identityTerms.length === 0) {
+    return { axis: "consistency", score: 75, detail: "Identity has no extractable key terms" };
+  }
+  const memoryText = ctx.recentMemoryTexts.join(" ").toLowerCase();
+  let matched = 0;
+  for (const term of identityTerms) {
+    if (memoryText.includes(term.toLowerCase())) matched++;
+  }
+  const ratio = matched / identityTerms.length;
+  const score = Math.round(50 + ratio * 50);
+  const detail = `${matched}/${identityTerms.length} identity terms found in recent memories`;
+  return { axis: "consistency", score, detail };
+}
+function probeRoleFidelity(ctx) {
+  const flags = [];
+  if (!ctx.identityBody) {
+    return {
+      axis: "role-fidelity",
+      score: 40,
+      detail: `No identity file for ${ctx.agent.name}`
+    };
+  }
+  let score = 100;
+  const identityLower = ctx.identityBody.toLowerCase();
+  const rosterRole = ctx.agent.role.toLowerCase();
+  if (!identityLower.includes(rosterRole)) {
+    score -= 15;
+    flags.push(`Identity does not mention role "${ctx.agent.role}"`);
+  }
+  if (!identityLower.includes(ctx.agent.name.toLowerCase())) {
+    score -= 10;
+    flags.push(`Identity does not mention agent name "${ctx.agent.name}"`);
+  }
+  const hasScopeBoundary = identityLower.includes("do not") || identityLower.includes("don't") || identityLower.includes("not your") || identityLower.includes("outside your") || identityLower.includes("you do not");
+  if (!hasScopeBoundary) {
+    score -= 10;
+    flags.push("Identity lacks explicit scope boundaries (what NOT to do)");
+  }
+  if (ctx.agent.systemPrompt) {
+    const promptTerms = extractKeyTerms(ctx.agent.systemPrompt);
+    const identityText = ctx.identityBody.toLowerCase();
+    let promptMatched = 0;
+    for (const term of promptTerms.slice(0, 20)) {
+      if (identityText.includes(term.toLowerCase())) promptMatched++;
+    }
+    const promptRatio = promptTerms.length > 0 ? promptMatched / Math.min(promptTerms.length, 20) : 1;
+    if (promptRatio < 0.3) {
+      score -= 15;
+      flags.push("Identity content diverges significantly from roster systemPrompt");
+    }
+  }
+  if (ctx.recentMemoryTexts.length > 5) {
+    const roleKeywords = extractRoleKeywords(ctx.agent.role);
+    const memoryText = ctx.recentMemoryTexts.join(" ").toLowerCase();
+    let domainHits = 0;
+    for (const kw of roleKeywords) {
+      if (memoryText.includes(kw)) domainHits++;
+    }
+    const domainRatio = roleKeywords.length > 0 ? domainHits / roleKeywords.length : 1;
+    if (domainRatio < 0.2) {
+      score -= 10;
+      flags.push(`Recent work shows little overlap with ${ctx.agent.role} domain keywords`);
+    }
+  }
+  score = Math.max(0, Math.min(100, score));
+  const detail = flags.length > 0 ? flags.join("; ") : "Identity aligns with roster definition";
+  return { axis: "role-fidelity", score, detail };
+}
+function probeWorldModel(ctx) {
+  if (!ctx.identityBody) {
+    return {
+      axis: "world-model",
+      score: 50,
+      detail: "No identity file \u2014 cannot assess org awareness"
+    };
+  }
+  const identityLower = ctx.identityBody.toLowerCase();
+  const flags = [];
+  let score = 100;
+  const otherAgents = ctx.allEmployees.filter((e) => e.name !== ctx.agent.name);
+  let mentionedAgents = 0;
+  for (const other of otherAgents) {
+    if (identityLower.includes(other.name.toLowerCase())) mentionedAgents++;
+  }
+  if (otherAgents.length > 0) {
+    const mentionRatio = mentionedAgents / otherAgents.length;
+    if (mentionRatio < 0.3) {
+      score -= 15;
+      flags.push(`Identity mentions ${mentionedAgents}/${otherAgents.length} team members`);
+    }
+  }
+  const hasReportingChain = identityLower.includes("report") || identityLower.includes("manager") || identityLower.includes("coo") || identityLower.includes("coordinator");
+  if (!hasReportingChain) {
+    score -= 10;
+    flags.push("Identity does not reference reporting chain");
+  }
+  const orgTerms = ["exe-os", "exe-wiki", "exe-crm", "askexe"];
+  let orgMentions = 0;
+  for (const term of orgTerms) {
+    if (identityLower.includes(term)) orgMentions++;
+  }
+  if (orgMentions === 0) {
+    score -= 5;
+    flags.push("Identity does not reference any org products");
+  }
+  score = Math.max(0, Math.min(100, score));
+  const detail = flags.length > 0 ? flags.join("; ") : "Identity reflects org structure";
+  return { axis: "world-model", score, detail };
+}
+function extractKeyTerms(text3) {
+  const stopwords = /* @__PURE__ */ new Set([
+    "the",
+    "and",
+    "for",
+    "are",
+    "but",
+    "not",
+    "you",
+    "all",
+    "any",
+    "can",
+    "had",
+    "her",
+    "was",
+    "one",
+    "our",
+    "out",
+    "has",
+    "his",
+    "how",
+    "its",
+    "may",
+    "new",
+    "now",
+    "old",
+    "see",
+    "way",
+    "who",
+    "did",
+    "get",
+    "got",
+    "let",
+    "say",
+    "she",
+    "too",
+    "use",
+    "with",
+    "this",
+    "that",
+    "from",
+    "they",
+    "been",
+    "have",
+    "will",
+    "your",
+    "what",
+    "when",
+    "make",
+    "like",
+    "just",
+    "over",
+    "such",
+    "take",
+    "than",
+    "them",
+    "very",
+    "some",
+    "could",
+    "into",
+    "then",
+    "more",
+    "also",
+    "after",
+    "should",
+    "would",
+    "about",
+    "their",
+    "which",
+    "these",
+    "other",
+    "every",
+    "does",
+    "being",
+    "those",
+    "never",
+    "before",
+    "through"
+  ]);
+  const words = text3.replace(/[^\w\s-]/g, " ").split(/\s+/).filter((w) => w.length > 3 && !stopwords.has(w.toLowerCase()));
+  return [...new Set(words.map((w) => w.toLowerCase()))].slice(0, 50);
+}
+function extractRoleKeywords(role) {
+  const roleKeywordMap = {
+    "coo": ["coordinate", "review", "status", "team", "task", "priority", "dispatch"],
+    "cto": ["architecture", "code", "technical", "system", "design", "review", "security"],
+    "cmo": ["marketing", "brand", "content", "design", "seo", "social", "campaign"],
+    "principal engineer": ["code", "implement", "test", "fix", "feature", "refactor", "build"],
+    "staff code reviewer": ["review", "code", "quality", "issue", "fix", "pattern"],
+    "content production specialist": ["video", "image", "render", "content", "produce", "media"],
+    "ai product lead": ["competitive", "analysis", "feature", "product", "research", "repo"]
+  };
+  const normalized = role.toLowerCase();
+  return roleKeywordMap[normalized] ?? normalized.split(/\s+/).filter((w) => w.length > 2);
+}
+async function runDriftProbes(options = {}) {
+  const employees = loadEmployeesSync();
+  const targetAgents = options.agentId ? employees.filter((e) => e.name === options.agentId) : employees;
+  if (targetAgents.length === 0) {
+    return [];
+  }
+  const axes = options.axes ?? ["continuity", "consistency", "role-fidelity", "world-model"];
+  const results = [];
+  for (const agent of targetAgents) {
+    const identity = getIdentity(agent.name);
+    const { count: memCount, texts: memTexts } = await getRecentMemories(agent.name, 50);
+    const decisionCount = await getDecisionCount(agent.name);
+    const ctx = {
+      agent,
+      identityBody: identity?.body ?? null,
+      identityRole: identity?.frontmatter.role ?? null,
+      recentMemoryCount: memCount,
+      recentMemoryTexts: memTexts,
+      storedDecisionCount: decisionCount,
+      allEmployees: employees
+    };
+    const probes = [];
+    const probeFns = {
+      continuity: probeContinuity,
+      consistency: probeConsistency,
+      "role-fidelity": probeRoleFidelity,
+      "world-model": probeWorldModel
+    };
+    for (const axis of axes) {
+      probes.push(probeFns[axis](ctx));
+    }
+    const scores = {
+      continuity: 0,
+      consistency: 0,
+      "role-fidelity": 0,
+      "world-model": 0
+    };
+    for (const probe of probes) {
+      scores[probe.axis] = probe.score;
+    }
+    const weights = {
+      continuity: 0.2,
+      consistency: 0.2,
+      "role-fidelity": 0.35,
+      "world-model": 0.25
+    };
+    let weightedSum = 0;
+    let weightTotal = 0;
+    for (const axis of axes) {
+      weightedSum += scores[axis] * weights[axis];
+      weightTotal += weights[axis];
+    }
+    const overall = Math.round(weightTotal > 0 ? weightedSum / weightTotal : 0);
+    const flags = [];
+    for (const probe of probes) {
+      if (probe.score < DRIFT_THRESHOLD) {
+        flags.push(`${probe.axis} at ${probe.score}% \u2014 ${probe.detail}`);
+      }
+    }
+    results.push({
+      agent: agent.name,
+      scores,
+      overall,
+      drifting: flags.length > 0,
+      flags
+    });
+  }
+  return results;
+}
+var DRIFT_THRESHOLD;
+var init_drift_probes = __esm({
+  "src/lib/drift-probes.ts"() {
+    "use strict";
+    init_identity();
+    init_employees();
+    DRIFT_THRESHOLD = 80;
+  }
+});
+
 // src/mcp/tools/diagnostics.ts
 import { z as z98 } from "zod";
 function buildHandlers9() {
@@ -33075,23 +33849,31 @@ function buildHandlers9() {
 function registerDiagnostics(server) {
   const handlers = buildHandlers9();
   const toolNames = Array.from(handlers.keys());
-  void (toolNames.length > 0 ? toolNames : ["healthcheck"]);
+  toolNames.push("tool_search", "drift");
   server.registerTool(
     "diagnostics",
     {
       title: "Diagnostics",
-      description: `System diagnostics and admin operations. Actions: ${toolNames.join(", ")}. Covers health checks, update status, cloud status, key management, and employee rename.`,
+      description: `System diagnostics and admin operations. Actions: ${toolNames.join(", ")}. Covers health checks, update status, cloud status, key management, employee rename, semantic tool discovery (tool_search), and identity drift detection (drift).`,
       inputSchema: {
         action: z98.string().describe(`Diagnostic operation: ${toolNames.join(", ")}`),
         // Pass-through params used by various sub-tools
+        agent_id: z98.string().optional().describe("Agent to probe (drift). Defaults to all agents."),
         name: z98.string().optional().describe("Employee name (rename_employee)"),
         new_name: z98.string().optional().describe("New employee name (rename_employee)"),
-        query: z98.string().optional().describe("Search/filter query"),
-        format: z98.string().optional().describe("Output format")
+        query: z98.string().optional().describe("Search/filter query, or natural language for tool_search"),
+        format: z98.string().optional().describe("Output format"),
+        limit: z98.coerce.number().int().min(1).max(100).optional().describe("Max results for tool_search (default 20)")
       }
     },
     async (input, extra) => {
       const action = input.action;
+      if (action === "tool_search") {
+        return handleToolSearch(input);
+      }
+      if (action === "drift") {
+        return handleDrift(input);
+      }
       const handler = handlers.get(action);
       if (!handler) {
         return {
@@ -33104,14 +33886,89 @@ function registerDiagnostics(server) {
     }
   );
 }
+async function handleToolSearch(input) {
+  const query = input.query ?? "";
+  const limit = input.limit ?? 20;
+  if (!query) {
+    return {
+      content: [{ type: "text", text: JSON.stringify({ error: "query is required for tool_search" }) }],
+      isError: true
+    };
+  }
+  const index = getToolCapabilityIndex();
+  if (!index.isReady()) {
+    return {
+      content: [{
+        type: "text",
+        text: JSON.stringify({
+          error: "Tool capability index not initialized yet. It is built asynchronously at daemon boot.",
+          query
+        })
+      }],
+      isError: true
+    };
+  }
+  const results = await index.search(query, limit);
+  const tools = results.map((r) => ({
+    name: r.name,
+    description: r.description,
+    category: r.category,
+    relevance: Math.round(r.relevance * 1e3) / 1e3
+  }));
+  return {
+    content: [{
+      type: "text",
+      text: JSON.stringify({
+        tools,
+        total_tools: index.toolCount,
+        query
+      }, null, 2)
+    }]
+  };
+}
+async function handleDrift(input) {
+  const agentId = input.agent_id;
+  const axesRaw = input.query;
+  let axes;
+  if (axesRaw) {
+    const valid = ["continuity", "consistency", "role-fidelity", "world-model"];
+    const parsed = axesRaw.split(",").map((a) => a.trim()).filter((a) => valid.includes(a));
+    if (parsed.length > 0) axes = parsed;
+  }
+  const results = await runDriftProbes({ agentId, axes });
+  if (results.length === 0) {
+    return {
+      content: [{
+        type: "text",
+        text: JSON.stringify({ error: agentId ? `Agent "${agentId}" not found` : "No agents found" })
+      }],
+      isError: true
+    };
+  }
+  return {
+    content: [{
+      type: "text",
+      text: JSON.stringify(results.length === 1 ? results[0] : results, null, 2)
+    }]
+  };
+}
 var init_diagnostics = __esm({
   "src/mcp/tools/diagnostics.ts"() {
     "use strict";
     init_cli_parity();
+    init_tool_capability_index();
+    init_drift_probes();
   }
 });
 
 // src/mcp/tool-gates.ts
+var tool_gates_exports = {};
+__export(tool_gates_exports, {
+  TOOL_CATEGORIES: () => TOOL_CATEGORIES,
+  TOOL_GATES: () => TOOL_GATES,
+  isToolAllowed: () => isToolAllowed,
+  isToolAllowedForPlan: () => isToolAllowedForPlan
+});
 function isToolAllowedForPlan(registerFnName, plan) {
   const category = TOOL_CATEGORIES[registerFnName];
   if (!category) return true;
@@ -35478,6 +36335,20 @@ async function startMcpHttpServer() {
 `
       );
     }
+    Promise.all([
+      Promise.resolve().then(() => (init_tool_capability_index(), tool_capability_index_exports)),
+      Promise.resolve().then(() => (init_tool_gates(), tool_gates_exports))
+    ]).then(async ([{ getToolCapabilityIndex: getToolCapabilityIndex2 }, { TOOL_CATEGORIES: TOOL_CATEGORIES2 }]) => {
+      const gateState = getCachedLicenseGate2();
+      const index = getToolCapabilityIndex2();
+      await index.buildIndex(
+        (fakeServer) => registerAllTools2(fakeServer, gateState.license, gateState.hasKey),
+        TOOL_CATEGORIES2
+      );
+    }).catch((err) => {
+      process.stderr.write(`[exed] Tool capability index failed: ${err.message}
+`);
+    });
     const transports = /* @__PURE__ */ new Map();
     const MCP_HTTP_PORT = parseInt(process.env.EXE_MCP_PORT || "48739", 10);
     const MCP_SESSION_TTL_MS = parseDurationMs2(process.env.EXE_MCP_SESSION_TTL_MS, 30 * 60 * 1e3, { allowZero: true });