vexp-cli 2.5.2 → 2.5.3

package/dist/cli.js

@@ -471,6 +471,17 @@ program
         args.push("--gate");
     runBinary(binaryPath, args);
 });
+program
+    .command("daemons")
+    .description("List every vexp daemon on this machine: which workspace holds each concurrent-workspace slot, version, index size, uptime")
+    .option("--json", "Emit machine-readable JSON")
+    .action(async (opts) => {
+    const binaryPath = ensureBinary();
+    const args = ["daemons"];
+    if (opts.json)
+        args.push("--json");
+    runBinary(binaryPath, args);
+});
 program
     .command("stop [workspace]")
     .description("Stop the vexp daemon of a workspace (default: current directory). Accepts any path shown by the concurrent-workspace cap message")

package/dist/license.js

@@ -5,6 +5,16 @@ import * as os from "os";
 import { CLI_VERSION } from "./version.js";
 // Ed25519 PUBLIC key (DER, base64) — same key as vexp-vscode/src/license.ts.
 // Only the server (vexp.dev) holds the matching private key.
+/** Resolve the vexp home dir like the Rust core does: VEXP_HOME (absolute)
+ *  wins, else the OS home. Without this, sandboxed/container setups that set
+ *  VEXP_HOME read and roll license tokens in a directory the daemon never
+ *  looks at. */
+function vexpHomeDir() {
+    const env = process.env.VEXP_HOME;
+    if (env && path.isAbsolute(env))
+        return env;
+    return os.homedir();
+}
 const VEXP_LICENSE_PUBLIC_KEY = "MCowBQYDK2VwAyEApwiWYGCyhCaGHAHWn/RTBSGo/1MNmGyZUgSNBQ5YE4g=";
 const VEXP_WEB_ORIGIN = process.env.VEXP_WEB_ORIGIN || "https://vexp.dev";
 // 14-day grace window after the last successful online refresh before we
@@ -15,16 +25,16 @@ const REFRESH_BACKOFF_MS = 24 * 60 * 60 * 1000;
 // 3 second timeout on validate calls — any slower falls back silently.
 const VALIDATE_TIMEOUT_MS = 3000;
 function getLicensePath() {
-    return path.join(os.homedir(), ".vexp", "license.jwt");
+    return path.join(vexpHomeDir(), ".vexp", "license.jwt");
 }
 function getFreshTokenPath() {
-    return path.join(os.homedir(), ".vexp", "fresh.jwt");
+    return path.join(vexpHomeDir(), ".vexp", "fresh.jwt");
 }
 function getLastCheckPath() {
-    return path.join(os.homedir(), ".vexp", "last_online_check");
+    return path.join(vexpHomeDir(), ".vexp", "last_online_check");
 }
 function getDeviceIdPath() {
-    return path.join(os.homedir(), ".vexp", "device.id");
+    return path.join(vexpHomeDir(), ".vexp", "device.id");
 }
 /**
  * Stable anonymous device identifier. First call creates and persists it.
@@ -99,7 +109,7 @@ function removeFreshToken() {
     }
 }
 function getDeviceBlockedPath() {
-    return path.join(os.homedir(), ".vexp", "device_blocked.json");
+    return path.join(vexpHomeDir(), ".vexp", "device_blocked.json");
 }
 /** Returns the active device-blocked marker, if any. */
 export function readDeviceBlocked() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "vexp-cli",
-  "version": "2.5.2",
+  "version": "2.5.3",
   "description": "Local-first context engine for AI coding agents. Pre-indexes your codebase into a dependency graph and feeds any MCP agent only the code that matters — 87% fewer tokens per call. New in 2.5: mechanical work verification and a PII/secret scanner. Works with Claude Code, Cursor, Codex, Copilot, Windsurf, Cline, Aider and 14 agents. Your code never leaves your machine.",
   "type": "module",
   "bin": {
@@ -105,10 +105,10 @@
   },
   "homepage": "https://vexp.dev",
   "optionalDependencies": {
-    "@vexp/core-linux-x64": "2.5.2",
-    "@vexp/core-linux-arm64": "2.5.2",
-    "@vexp/core-darwin-x64": "2.5.2",
-    "@vexp/core-darwin-arm64": "2.5.2",
-    "@vexp/core-win32-x64": "2.5.2"
+    "@vexp/core-linux-x64": "2.5.3",
+    "@vexp/core-linux-arm64": "2.5.3",
+    "@vexp/core-darwin-x64": "2.5.3",
+    "@vexp/core-darwin-arm64": "2.5.3",
+    "@vexp/core-win32-x64": "2.5.3"
   }
 }