@askexenow/exe-os 0.9.140 → 0.9.142

package/release-notes.json

@@ -1,6 +1,212 @@
 {
-  "current": "0.9.140",
+  "current": "0.9.142",
   "notes": {
+    "0.9.142": {
+      "version": "0.9.142",
+      "date": "2026-05-26",
+      "features": [
+        "close_task auto-merges PR + pulls main + builds + prunes + respawns",
+        "auto-respawn Tom after close_task if more tasks queued",
+        "message WAL fallback — messages survive daemon downtime",
+        "entity type hierarchy — subtypes with rollup queries (PG-2)",
+        "temporal validity windows for graph queries (PG-3)",
+        "backup restore CLI + restoreBackup function",
+        "ESLint setup + dependency hygiene + any type reduction",
+        "config(action=\"hire\") MCP tool — COO can hire employees directly",
+        "GM (General Manager) role template + hiring guidance",
+        "merge gate warning in close_task — catches unmerged PRs",
+        "behavior hygiene — platform procedure + COO identity + company procedure",
+        "MCP auto-reconnect to daemon — survives deploy restarts transparently",
+        "event-driven notifications — stop polling managers, let task state drive everything",
+        "MCP disconnect tracker + daemon observability",
+        "MCP lifecycle logging to file — FULL transparency on every disconnect",
+        "automatic P0 bug fixing — daemon auto-dispatch + GitHub Actions fallback",
+        "enforce worktrees for engineer sessions — prevent direct main commits",
+        "multi-device coordination — routing, handoff, device status",
+        "hook tamper protection — SHA-256 manifest + verification before spawn",
+        "governed collaborative memory — visibility tags + write governance",
+        "cache-sharing protocol — pub/sub memory bus for inter-agent sharing",
+        "multi-modal memory — media attachments on memories",
+        "comprehensive \"last 20%\" integration tests + audit_trail read path",
+        "wire memory poisoning defense into writeMemory() pipeline",
+        "memory poisoning defense — trust levels, anomaly detection, quarantine"
+      ],
+      "fixes": [
+        "prune old worktree on close_task before respawning fresh",
+        "exe-launch-agent resolves multi-instance names — tom2/tom3 no longer rejected",
+        "cross-device sync dedup — cooldown key prevents duplicate pushes",
+        "merge gate checks branch name not git author — was silently passing",
+        "resume_employee uses autoInstance — spawns tom2/tom3 for parallel",
+        "security hardening — fail-closed behavior auth gates",
+        "send_message intercom uses force:true — bypass 5-min debounce",
+        "global session cap 10→50 — match MCP session cap",
+        "/exe-call ALWAYS fires + tmux send-keys blocked for ALL agents",
+        "SIGTERM graceful shutdown — remove process.exit(0) from initMetrics",
+        "stale task escalation — surface alive-but-stalled agents to COO",
+        "cloud sync upsert + entity type hierarchy + temporal validity + file_copy security",
+        "daemon memory leak + duplicate watchdog + HTTP body limit + WAL flush",
+        "heap pressure alarm was false positive — compared heapUsed/heapTotal instead of heapUsed/heapLimit",
+        "strengthen scoped SQL audit — cover UPDATE/INSERT, expand exemptions",
+        "hard block tmux send-keys for non-coordinator agents",
+        "MCP disconnect procedure — explicitly block tmux send-keys workaround",
+        "file_copy MCP tool — path boundary enforcement + symlink traversal block",
+        "cloud sync task pull uses ON CONFLICT upsert with updated_at guard",
+        "multi-instance Tom dispatch — create_task fans out to tom2, tom3",
+        "atomic writes for agent-config.json, roster (orchestration + rename)",
+        "atomic JSON writes + config.json corruption recovery",
+        "boot poll timeout no longer fails dispatch — session exists, task pending",
+        "master key clobber guard + COO naming in user-facing strings",
+        "MCP port retry + instant embed skip when OOM marker set"
+      ],
+      "security": [
+        "fix shell injection, SSRF, socket leaks, backup validation",
+        "bump v0.9.139 — 2 CRITICAL security fixes, 14 bug fixes, 6 features, customer config preservation",
+        "fix 2 CRITICAL + 1 HIGH from post-fix audit",
+        "validate X-Agent-Role against roster — prevent privilege escalation",
+        "release: stack v0.9.8 — security hardening + Hygo bug fixes",
+        "add webhook HMAC-SHA256 validation + disable query param auth in prod",
+        "pin GitHub Actions to SHAs, update jose to 6.2.3",
+        "harden support intake against abuse and data leakage",
+        "bump to v0.9.22 — Codex MCP parity + customer bug fixes + security audit remediation",
+        "audit: pre-hygo exe-gateway security report",
+        "add SECURITY.md — trust document for pre-install security evaluation",
+        "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
+      ],
+      "other": [
+        "publish v0.9.141",
+        "ops: journalctl rotation + certbot expiry alerting",
+        "revert: daemon heap back to 33% of RAM — no artificial cap",
+        "v0.9.140 publish + heap cap 4GB (was 33% unbounded)",
+        "PG-1 cross-repo entity federation design document",
+        "add lint step + automated npm publish workflow",
+        "audit: scoped SQL + package budget + TUI vendored + TODO classification",
+        "add full readiness audit evidence",
+        "roadmap: Cross-Repo Ontology — Palantir-level graph (PG-1 through PG-10)",
+        "capture mcp restart self-healing roadmap",
+        "Enforce chain of command task review parity",
+        "document raw SQL fallback in orchestrator auto-approve path",
+        "Finalize orchestration rollout fixes",
+        "Scope device governance task queries",
+        "bump v0.9.138 — 7 critical bug fixes, 10 features, 16 commits",
+        "bump v0.9.137 — Memanto typed schema, push notifications, lazy consolidation",
+        "bump v0.9.136 — daemon OOM fix, process monitor, auto-notify reviewer",
+        "bump v0.9.135 — code debt cleanup, 28 new tests, full observability",
+        "Codex MCP regression tests (18) + DB singleton integration tests (10)",
+        "release notes for v0.9.134",
+        "benchmark score entry for f95b862",
+        "add GitHub Actions CI pipeline — build + test on push",
+        "gitignore GitHub workflows — add via web UI instead",
+        "remove ci.yml — GitHub token lacks workflow scope, will add via web UI",
+        "gitignore — add dist-next, db.sqlite, .wrangler; remove temp scripts"
+      ],
+      "migration_notes": [
+        "If daemon goes down, agents will now fail instead of silently",
+        "exe-daemon.ts kills old embed.pid process and cleans up"
+      ]
+    },
+    "0.9.141": {
+      "version": "0.9.141",
+      "date": "2026-05-26",
+      "features": [
+        "entity type hierarchy — subtypes with rollup queries (PG-2)",
+        "temporal validity windows for graph queries (PG-3)",
+        "backup restore CLI + restoreBackup function",
+        "ESLint setup + dependency hygiene + any type reduction",
+        "config(action=\"hire\") MCP tool — COO can hire employees directly",
+        "GM (General Manager) role template + hiring guidance",
+        "merge gate warning in close_task — catches unmerged PRs",
+        "behavior hygiene — platform procedure + COO identity + company procedure",
+        "MCP auto-reconnect to daemon — survives deploy restarts transparently",
+        "event-driven notifications — stop polling managers, let task state drive everything",
+        "MCP disconnect tracker + daemon observability",
+        "MCP lifecycle logging to file — FULL transparency on every disconnect",
+        "automatic P0 bug fixing — daemon auto-dispatch + GitHub Actions fallback",
+        "enforce worktrees for engineer sessions — prevent direct main commits",
+        "multi-device coordination — routing, handoff, device status",
+        "hook tamper protection — SHA-256 manifest + verification before spawn",
+        "governed collaborative memory — visibility tags + write governance",
+        "cache-sharing protocol — pub/sub memory bus for inter-agent sharing",
+        "multi-modal memory — media attachments on memories",
+        "comprehensive \"last 20%\" integration tests + audit_trail read path",
+        "wire memory poisoning defense into writeMemory() pipeline",
+        "memory poisoning defense — trust levels, anomaly detection, quarantine",
+        "VPS Phase 4 — media→R2 bridge + cross-product queries + migration CLI",
+        "Palantir typed ontology — schema, validation, temporal edges",
+        "R2 media storage client — shared upload/download for all products"
+      ],
+      "fixes": [
+        "stale task escalation — surface alive-but-stalled agents to COO",
+        "cloud sync upsert + entity type hierarchy + temporal validity + file_copy security",
+        "daemon memory leak + duplicate watchdog + HTTP body limit + WAL flush",
+        "heap pressure alarm was false positive — compared heapUsed/heapTotal instead of heapUsed/heapLimit",
+        "strengthen scoped SQL audit — cover UPDATE/INSERT, expand exemptions",
+        "hard block tmux send-keys for non-coordinator agents",
+        "MCP disconnect procedure — explicitly block tmux send-keys workaround",
+        "file_copy MCP tool — path boundary enforcement + symlink traversal block",
+        "cloud sync task pull uses ON CONFLICT upsert with updated_at guard",
+        "multi-instance Tom dispatch — create_task fans out to tom2, tom3",
+        "atomic writes for agent-config.json, roster (orchestration + rename)",
+        "atomic JSON writes + config.json corruption recovery",
+        "boot poll timeout no longer fails dispatch — session exists, task pending",
+        "master key clobber guard + COO naming in user-facing strings",
+        "MCP port retry + instant embed skip when OOM marker set",
+        "install.ts uses spawn lock + SIGTERM grace + restart cooldown",
+        "daemon restart hardening — OOM guard + 60s cooldown + health check guard",
+        "stop daemon crash loop — embed client no longer kills daemon when OOM marker set",
+        "support endpoints askexe.com → cloud.askexe.com (bypass CF WAF)",
+        "reduce any types 68→52, typed adapter factories + HTTP responses",
+        "pg pool limits, queue overflow health log, any reduction 71→68",
+        "reduce any types 81→71, tighten lint budget to 72",
+        "/exe-afk detects non-tmux sessions, suggests /loop instead",
+        "cross-repo boundary — platform procedure + pre-tool-use guard",
+        "UNIQUE dedup index + dependency hygiene + ESM import fix"
+      ],
+      "security": [
+        "fix shell injection, SSRF, socket leaks, backup validation",
+        "bump v0.9.139 — 2 CRITICAL security fixes, 14 bug fixes, 6 features, customer config preservation",
+        "fix 2 CRITICAL + 1 HIGH from post-fix audit",
+        "validate X-Agent-Role against roster — prevent privilege escalation",
+        "release: stack v0.9.8 — security hardening + Hygo bug fixes",
+        "add webhook HMAC-SHA256 validation + disable query param auth in prod",
+        "pin GitHub Actions to SHAs, update jose to 6.2.3",
+        "harden support intake against abuse and data leakage",
+        "bump to v0.9.22 — Codex MCP parity + customer bug fixes + security audit remediation",
+        "audit: pre-hygo exe-gateway security report",
+        "add SECURITY.md — trust document for pre-install security evaluation",
+        "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
+      ],
+      "other": [
+        "ops: journalctl rotation + certbot expiry alerting",
+        "revert: daemon heap back to 33% of RAM — no artificial cap",
+        "v0.9.140 publish + heap cap 4GB (was 33% unbounded)",
+        "PG-1 cross-repo entity federation design document",
+        "add lint step + automated npm publish workflow",
+        "audit: scoped SQL + package budget + TUI vendored + TODO classification",
+        "add full readiness audit evidence",
+        "roadmap: Cross-Repo Ontology — Palantir-level graph (PG-1 through PG-10)",
+        "capture mcp restart self-healing roadmap",
+        "Enforce chain of command task review parity",
+        "document raw SQL fallback in orchestrator auto-approve path",
+        "Finalize orchestration rollout fixes",
+        "Scope device governance task queries",
+        "bump v0.9.138 — 7 critical bug fixes, 10 features, 16 commits",
+        "bump v0.9.137 — Memanto typed schema, push notifications, lazy consolidation",
+        "bump v0.9.136 — daemon OOM fix, process monitor, auto-notify reviewer",
+        "bump v0.9.135 — code debt cleanup, 28 new tests, full observability",
+        "Codex MCP regression tests (18) + DB singleton integration tests (10)",
+        "release notes for v0.9.134",
+        "benchmark score entry for f95b862",
+        "add GitHub Actions CI pipeline — build + test on push",
+        "gitignore GitHub workflows — add via web UI instead",
+        "remove ci.yml — GitHub token lacks workflow scope, will add via web UI",
+        "gitignore — add dist-next, db.sqlite, .wrangler; remove temp scripts",
+        "accumulated fixes — hooks, adapters, config, cloud-sync, rate-limiter, CI pipeline"
+      ],
+      "migration_notes": [
+        "If daemon goes down, agents will now fail instead of silently",
+        "exe-daemon.ts kills old embed.pid process and cleans up"
+      ]
+    },
     "0.9.140": {
       "version": "0.9.140",
       "date": "2026-05-26",
@@ -305,204 +511,6 @@
         "If daemon goes down, agents will now fail instead of silently",
         "exe-daemon.ts kills old embed.pid process and cleans up"
       ]
-    },
-    "0.9.137": {
-      "version": "0.9.137",
-      "date": "2026-05-21",
-      "features": [
-        "RecMem lazy consolidation — skip clusters < 3 memories",
-        "Memanto typed semantic schema — 13 memory types with kind-aware retrieval",
-        "push notifications — Telegram + email on task completion and daemon crash",
-        "auto-notify reviewer on task completion + file_copy MCP tool",
-        "daemon process monitor — CPU tracking, orphan detection, high-CPU alerting",
-        "Hygo integration — workflow engine, Asana connector, wiki ACL, GoTrue auth, unified query",
-        "routing audit log + daemon health log — full observability for session routing and daemon lifecycle",
-        "proxy unified cloud routes through api router",
-        "add typed apiWatchdog config for daemon API auto-recovery",
-        "wire reflection layer into production — schema, search, daemon",
-        "wire memory cards + reflection into BEAM benchmark harness",
-        "standalone harnesses for MemBench, REALTALK, MemoryArena",
-        "standalone benchmark harnesses for LongMemEval, LoCoMo, BEAM",
-        "multi-product support for bug reports and feature requests",
-        "memory reflection layer + sandboxed BEAM benchmark harness",
-        "P2 feature batch — orchestration, retrieval, conflict resolution",
-        "P1 feature batch — 8 memory & orchestration improvements",
-        "separate badge from detail fetch pipeline with badgeInFlight flag",
-        "per-agent MCP scoping via set_agent_config",
-        "flip MCP default to consolidated (19 tools) — legacy deprecated",
-        "behavior audit trail — created_by, device_id, session tracking",
-        "detailed filing steps for bugs + feature requests in platform procedures",
-        "document five layers — when to use platform/company/identity/behavior/memory",
-        "customer-facing support procedures — file bugs, check status, get fixes",
-        "add update lifecycle + first install procedures to platform procedures"
-      ],
-      "fixes": [
-        "daemon OOM crash — cloud-sync exponential backoff + circuit breaker + heap monitoring",
-        "replace hardcoded agent name→role map with dynamic roster lookup",
-        "add logging to 45 silent catches — tasks.ts, cloud-sync.ts, exe-daemon.ts",
-        "test regressions — backward-compat exports, test fixture schema, config defaults",
-        "upgrade commit discipline to p0 — one track = one commit, never batch",
-        "use consolidated mcp boot prompt",
-        "auto-start agents after spawn — no more idle prompt",
-        "move atomic swap from build to deploy — builds never disrupt daemon",
-        "disable MCP session TTL — sessions live forever until daemon restart",
-        "complete DB safety suite — auto-restore, write drain, pre-restart backup",
-        "WAL checkpoint on shutdown + integrity check on startup",
-        "warn when caller session unknown in create_task — helps diagnose scope bugs",
-        "route all employee spawns through exe-launch-agent for session-aware MCP",
-        "4 customer audit bugs — honest feature status, auto-approve disabled, visibility TODO",
-        "archive consolidated source memories — stop search inflation",
-        "wire Ebbinghaus strength into vector search + type definition",
-        "v0.9.133 — session routing, Codex MCP compat, 12 bug fixes from customer audit",
-        "bind api router analytics dataset in wrangler",
-        "daemon watchdog uses typed config, wire startup call, fix tsc warnings",
-        "tasks-crud session isolation uses ALS instead of stale process.env",
-        "license gate re-checks key file if missing at boot — prevents permanent lockout after npm update",
-        "enable lean MCP for all spawned agent sessions — prevents OAuth browser popups",
-        "hard session isolation gate in create_task — reject cross-scope dispatch",
-        "code quality audit — DB singleton test + silent catch logging",
-        "enable tsup splitting — shared DB module eliminates \"client not initialized\" after daemon restart"
-      ],
-      "security": [
-        "release: stack v0.9.8 — security hardening + Hygo bug fixes",
-        "add webhook HMAC-SHA256 validation + disable query param auth in prod",
-        "pin GitHub Actions to SHAs, update jose to 6.2.3",
-        "harden support intake against abuse and data leakage",
-        "bump to v0.9.22 — Codex MCP parity + customer bug fixes + security audit remediation",
-        "audit: pre-hygo exe-gateway security report",
-        "add SECURITY.md — trust document for pre-install security evaluation",
-        "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
-      ],
-      "other": [
-        "bump v0.9.137 — Memanto typed schema, push notifications, lazy consolidation",
-        "bump v0.9.136 — daemon OOM fix, process monitor, auto-notify reviewer",
-        "bump v0.9.135 — code debt cleanup, 28 new tests, full observability",
-        "Codex MCP regression tests (18) + DB singleton integration tests (10)",
-        "release notes for v0.9.134",
-        "benchmark score entry for f95b862",
-        "add GitHub Actions CI pipeline — build + test on push",
-        "gitignore GitHub workflows — add via web UI instead",
-        "remove ci.yml — GitHub token lacks workflow scope, will add via web UI",
-        "gitignore — add dist-next, db.sqlite, .wrangler; remove temp scripts",
-        "accumulated fixes — hooks, adapters, config, cloud-sync, rate-limiter, CI pipeline",
-        "stack manifest v0.9.9 — session routing, DB safety, Codex MCP, 20 fixes",
-        "protect api router cloud migration routes",
-        "Proxy cloud sync routes through api router",
-        "bump v0.9.132",
-        "bump v0.9.131 — lean MCP for agents, session isolation gate, card/reflection pipeline",
-        "bump v0.9.130 — hard session isolation gate",
-        "bump v0.9.129",
-        "bump v0.9.128 — shared DB module fix",
-        "bump v0.9.127 — DB init before MCP session tools",
-        "bump v0.9.126 — revert to port 48739",
-        "bump v0.9.125",
-        "bump v0.9.120 — fixed MCP port 48700 with auto-recovery",
-        "bump v0.9.123 — multi-product support for bug/feature reports",
-        "rewrite runtime architecture — exe-os is Mode 1 stopgap, exe-build is the product"
-      ],
-      "migration_notes": [
-        "If daemon goes down, agents will now fail instead of silently",
-        "exe-daemon.ts kills old embed.pid process and cleans up"
-      ]
-    },
-    "0.9.136": {
-      "version": "0.9.136",
-      "date": "2026-05-21",
-      "features": [
-        "push notifications — Telegram + email on task completion and daemon crash",
-        "auto-notify reviewer on task completion + file_copy MCP tool",
-        "daemon process monitor — CPU tracking, orphan detection, high-CPU alerting",
-        "Hygo integration — workflow engine, Asana connector, wiki ACL, GoTrue auth, unified query",
-        "routing audit log + daemon health log — full observability for session routing and daemon lifecycle",
-        "proxy unified cloud routes through api router",
-        "add typed apiWatchdog config for daemon API auto-recovery",
-        "wire reflection layer into production — schema, search, daemon",
-        "wire memory cards + reflection into BEAM benchmark harness",
-        "standalone harnesses for MemBench, REALTALK, MemoryArena",
-        "standalone benchmark harnesses for LongMemEval, LoCoMo, BEAM",
-        "multi-product support for bug reports and feature requests",
-        "memory reflection layer + sandboxed BEAM benchmark harness",
-        "P2 feature batch — orchestration, retrieval, conflict resolution",
-        "P1 feature batch — 8 memory & orchestration improvements",
-        "separate badge from detail fetch pipeline with badgeInFlight flag",
-        "per-agent MCP scoping via set_agent_config",
-        "flip MCP default to consolidated (19 tools) — legacy deprecated",
-        "behavior audit trail — created_by, device_id, session tracking",
-        "detailed filing steps for bugs + feature requests in platform procedures",
-        "document five layers — when to use platform/company/identity/behavior/memory",
-        "customer-facing support procedures — file bugs, check status, get fixes",
-        "add update lifecycle + first install procedures to platform procedures",
-        "add bug fix triage procedure — close upstream reports so customers see status",
-        "add review chain procedure — managers must actively pull, never wait"
-      ],
-      "fixes": [
-        "daemon OOM crash — cloud-sync exponential backoff + circuit breaker + heap monitoring",
-        "replace hardcoded agent name→role map with dynamic roster lookup",
-        "add logging to 45 silent catches — tasks.ts, cloud-sync.ts, exe-daemon.ts",
-        "test regressions — backward-compat exports, test fixture schema, config defaults",
-        "upgrade commit discipline to p0 — one track = one commit, never batch",
-        "use consolidated mcp boot prompt",
-        "auto-start agents after spawn — no more idle prompt",
-        "move atomic swap from build to deploy — builds never disrupt daemon",
-        "disable MCP session TTL — sessions live forever until daemon restart",
-        "complete DB safety suite — auto-restore, write drain, pre-restart backup",
-        "WAL checkpoint on shutdown + integrity check on startup",
-        "warn when caller session unknown in create_task — helps diagnose scope bugs",
-        "route all employee spawns through exe-launch-agent for session-aware MCP",
-        "4 customer audit bugs — honest feature status, auto-approve disabled, visibility TODO",
-        "archive consolidated source memories — stop search inflation",
-        "wire Ebbinghaus strength into vector search + type definition",
-        "v0.9.133 — session routing, Codex MCP compat, 12 bug fixes from customer audit",
-        "bind api router analytics dataset in wrangler",
-        "daemon watchdog uses typed config, wire startup call, fix tsc warnings",
-        "tasks-crud session isolation uses ALS instead of stale process.env",
-        "license gate re-checks key file if missing at boot — prevents permanent lockout after npm update",
-        "enable lean MCP for all spawned agent sessions — prevents OAuth browser popups",
-        "hard session isolation gate in create_task — reject cross-scope dispatch",
-        "code quality audit — DB singleton test + silent catch logging",
-        "enable tsup splitting — shared DB module eliminates \"client not initialized\" after daemon restart"
-      ],
-      "security": [
-        "release: stack v0.9.8 — security hardening + Hygo bug fixes",
-        "add webhook HMAC-SHA256 validation + disable query param auth in prod",
-        "pin GitHub Actions to SHAs, update jose to 6.2.3",
-        "harden support intake against abuse and data leakage",
-        "bump to v0.9.22 — Codex MCP parity + customer bug fixes + security audit remediation",
-        "audit: pre-hygo exe-gateway security report",
-        "add SECURITY.md — trust document for pre-install security evaluation",
-        "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
-      ],
-      "other": [
-        "bump v0.9.136 — daemon OOM fix, process monitor, auto-notify reviewer",
-        "bump v0.9.135 — code debt cleanup, 28 new tests, full observability",
-        "Codex MCP regression tests (18) + DB singleton integration tests (10)",
-        "release notes for v0.9.134",
-        "benchmark score entry for f95b862",
-        "add GitHub Actions CI pipeline — build + test on push",
-        "gitignore GitHub workflows — add via web UI instead",
-        "remove ci.yml — GitHub token lacks workflow scope, will add via web UI",
-        "gitignore — add dist-next, db.sqlite, .wrangler; remove temp scripts",
-        "accumulated fixes — hooks, adapters, config, cloud-sync, rate-limiter, CI pipeline",
-        "stack manifest v0.9.9 — session routing, DB safety, Codex MCP, 20 fixes",
-        "protect api router cloud migration routes",
-        "Proxy cloud sync routes through api router",
-        "bump v0.9.132",
-        "bump v0.9.131 — lean MCP for agents, session isolation gate, card/reflection pipeline",
-        "bump v0.9.130 — hard session isolation gate",
-        "bump v0.9.129",
-        "bump v0.9.128 — shared DB module fix",
-        "bump v0.9.127 — DB init before MCP session tools",
-        "bump v0.9.126 — revert to port 48739",
-        "bump v0.9.125",
-        "bump v0.9.120 — fixed MCP port 48700 with auto-recovery",
-        "bump v0.9.123 — multi-product support for bug/feature reports",
-        "rewrite runtime architecture — exe-os is Mode 1 stopgap, exe-build is the product",
-        "bump v0.9.122 — publish gate for dynamic imports + all Yoda fixes"
-      ],
-      "migration_notes": [
-        "If daemon goes down, agents will now fail instead of silently",
-        "exe-daemon.ts kills old embed.pid process and cleans up"
-      ]
     }
   }
 }

package/dist/chunk-MQV4UKTS.js

@@ -1,142 +0,0 @@
-import {
-  getClient,
-  init_database
-} from "./chunk-UEWGUOXB.js";
-import {
-  EXE_AI_DIR,
-  init_config
-} from "./chunk-IG5XFUYJ.js";
-
-// src/lib/identity.ts
-init_config();
-init_database();
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "fs";
-import { readdirSync } from "fs";
-import path from "path";
-import { createHash } from "crypto";
-var IDENTITY_DIR = path.join(EXE_AI_DIR, "identity");
-function ensureDir() {
-  if (!existsSync(IDENTITY_DIR)) {
-    mkdirSync(IDENTITY_DIR, { recursive: true });
-  }
-}
-function identityPath(agentId) {
-  return path.join(IDENTITY_DIR, `${agentId}.md`);
-}
-function sanitizeIdentityBody(body) {
-  return body.replace(/<!--[\s\S]*?-->/g, "").trim();
-}
-function parseFrontmatter(raw) {
-  const match = raw.match(/^---\n([\s\S]*?)\n---\n([\s\S]*)$/);
-  if (!match) {
-    return {
-      frontmatter: {
-        role: "unknown",
-        title: "Unknown",
-        agent_id: "unknown",
-        org_level: "specialist",
-        created_by: "system",
-        updated_at: (/* @__PURE__ */ new Date()).toISOString()
-      },
-      body: sanitizeIdentityBody(raw)
-    };
-  }
-  const yamlStr = match[1];
-  const body = sanitizeIdentityBody(match[2]);
-  const fm = {};
-  for (const line of yamlStr.split("\n")) {
-    const kv = line.match(/^(\w+):\s*(.+)$/);
-    if (kv) fm[kv[1]] = kv[2].trim();
-  }
-  return {
-    frontmatter: {
-      role: fm.role ?? "unknown",
-      title: fm.title ?? "Unknown",
-      agent_id: fm.agent_id ?? "unknown",
-      org_level: fm.org_level ?? "specialist",
-      created_by: fm.created_by ?? "system",
-      updated_at: fm.updated_at ?? (/* @__PURE__ */ new Date()).toISOString()
-    },
-    body
-  };
-}
-function contentHash(content) {
-  return createHash("sha256").update(content).digest("hex").slice(0, 16);
-}
-function getIdentity(agentId) {
-  const filePath = identityPath(agentId);
-  if (!existsSync(filePath)) return null;
-  const raw = readFileSync(filePath, "utf-8");
-  const { frontmatter, body } = parseFrontmatter(raw);
-  return {
-    agentId,
-    frontmatter,
-    body,
-    raw,
-    contentHash: contentHash(raw)
-  };
-}
-async function updateIdentity(agentId, content, updatedBy) {
-  ensureDir();
-  const filePath = identityPath(agentId);
-  const hash = contentHash(content);
-  writeFileSync(filePath, content, "utf-8");
-  try {
-    const client = getClient();
-    await client.execute({
-      sql: `INSERT INTO identity (agent_id, content_hash, updated_at, updated_by)
-            VALUES (?, ?, ?, ?)
-            ON CONFLICT(agent_id) DO UPDATE SET
-              content_hash = excluded.content_hash,
-              updated_at = excluded.updated_at,
-              updated_by = excluded.updated_by`,
-      args: [agentId, hash, (/* @__PURE__ */ new Date()).toISOString(), updatedBy]
-    });
-  } catch {
-  }
-}
-function listIdentities() {
-  ensureDir();
-  const files = readdirSync(IDENTITY_DIR).filter((f) => f.endsWith(".md"));
-  const results = [];
-  for (const file of files) {
-    const agentId = file.replace(".md", "");
-    const identity = getIdentity(agentId);
-    if (!identity) continue;
-    const lines = identity.body.split("\n").filter((l) => l.trim() && !l.startsWith("#"));
-    const summary = lines[0]?.trim().slice(0, 120) ?? identity.frontmatter.title;
-    results.push({
-      agentId,
-      // User-facing/team-facing title only. `frontmatter.role` is internal
-      // routing metadata and must not leak as an external title.
-      title: identity.frontmatter.title,
-      summary
-    });
-  }
-  return results;
-}
-function getIdentityInjection(agentId) {
-  const own = getIdentity(agentId);
-  const all = listIdentities();
-  const parts = [];
-  if (own) {
-    parts.push(`## Your Identity (exe.md)
-These define WHO YOU ARE. Non-negotiable. Permanent.
-
-${own.body}`);
-  }
-  const teamLines = all.filter((a) => a.agentId !== agentId).map((a) => `- ${a.agentId} (${a.title}): ${a.summary}`);
-  if (teamLines.length > 0) {
-    parts.push(`## Team Identities
-${teamLines.join("\n")}`);
-  }
-  return parts.join("\n\n");
-}
-
-export {
-  identityPath,
-  getIdentity,
-  updateIdentity,
-  listIdentities,
-  getIdentityInjection
-};

package/dist/chunk-X2IMCCM5.js

@@ -1,49 +0,0 @@
-import {
-  __esm
-} from "./chunk-KFQGP6VL.js";
-
-// src/lib/secure-files.ts
-import { chmodSync, existsSync, mkdirSync } from "fs";
-import { chmod, mkdir } from "fs/promises";
-async function ensurePrivateDir(dirPath) {
-  await mkdir(dirPath, { recursive: true, mode: PRIVATE_DIR_MODE });
-  try {
-    await chmod(dirPath, PRIVATE_DIR_MODE);
-  } catch {
-  }
-}
-function ensurePrivateDirSync(dirPath) {
-  mkdirSync(dirPath, { recursive: true, mode: PRIVATE_DIR_MODE });
-  try {
-    chmodSync(dirPath, PRIVATE_DIR_MODE);
-  } catch {
-  }
-}
-async function enforcePrivateFile(filePath) {
-  try {
-    await chmod(filePath, PRIVATE_FILE_MODE);
-  } catch {
-  }
-}
-function enforcePrivateFileSync(filePath) {
-  try {
-    if (existsSync(filePath)) chmodSync(filePath, PRIVATE_FILE_MODE);
-  } catch {
-  }
-}
-var PRIVATE_DIR_MODE, PRIVATE_FILE_MODE;
-var init_secure_files = __esm({
-  "src/lib/secure-files.ts"() {
-    "use strict";
-    PRIVATE_DIR_MODE = 448;
-    PRIVATE_FILE_MODE = 384;
-  }
-});
-
-export {
-  ensurePrivateDir,
-  ensurePrivateDirSync,
-  enforcePrivateFile,
-  enforcePrivateFileSync,
-  init_secure_files
-};