@askexenow/exe-os 0.9.141 → 0.9.142

package/dist/message-queue-client-2YTGEB5H.js

@@ -0,0 +1,92 @@
+import "./chunk-KFQGP6VL.js";
+
+// src/lib/message-queue-client.ts
+import { existsSync, appendFileSync, readFileSync, unlinkSync, renameSync, mkdirSync } from "fs";
+import path from "path";
+import os from "os";
+var EXE_DIR = path.join(os.homedir(), ".exe-os");
+var QUEUE_PATH = path.join(EXE_DIR, "message-queue.jsonl");
+var PROCESSING_PATH = QUEUE_PATH + ".processing";
+function ensureDir() {
+  if (!existsSync(EXE_DIR)) mkdirSync(EXE_DIR, { recursive: true });
+}
+function enqueueMessage(entry) {
+  ensureDir();
+  appendFileSync(QUEUE_PATH, JSON.stringify(entry) + "\n");
+}
+function claimMessageQueue() {
+  if (!existsSync(QUEUE_PATH)) return null;
+  try {
+    const content = readFileSync(QUEUE_PATH, "utf8").trim();
+    if (!content) {
+      try {
+        unlinkSync(QUEUE_PATH);
+      } catch {
+      }
+      return null;
+    }
+  } catch {
+    return null;
+  }
+  try {
+    renameSync(QUEUE_PATH, PROCESSING_PATH);
+  } catch {
+    return null;
+  }
+  const entries = [];
+  try {
+    const lines = readFileSync(PROCESSING_PATH, "utf8").trim().split("\n");
+    for (const line of lines) {
+      if (!line.trim()) continue;
+      try {
+        entries.push(JSON.parse(line));
+      } catch {
+      }
+    }
+  } catch {
+    return null;
+  }
+  if (entries.length === 0) {
+    try {
+      unlinkSync(PROCESSING_PATH);
+    } catch {
+    }
+    return null;
+  }
+  return { leasePath: PROCESSING_PATH, entries };
+}
+function ackMessageQueue(leasePath) {
+  try {
+    unlinkSync(leasePath);
+  } catch {
+  }
+}
+async function sendMessageViaDaemon(entry) {
+  if (process.env.EXE_IS_DAEMON === "1") {
+    enqueueMessage(entry);
+    return false;
+  }
+  try {
+    const { sendDaemonRequest, isClientConnected } = await import("./lib/exe-daemon-client.js");
+    if (!isClientConnected()) {
+      enqueueMessage(entry);
+      return false;
+    }
+    const response = await sendDaemonRequest({
+      type: "send-message",
+      entry
+    });
+    if (response.ok) return true;
+    enqueueMessage(entry);
+    return false;
+  } catch {
+    enqueueMessage(entry);
+    return false;
+  }
+}
+export {
+  ackMessageQueue,
+  claimMessageQueue,
+  enqueueMessage,
+  sendMessageViaDaemon
+};

package/dist/{notifications-OXEFBG2D.js → notifications-APKWB63A.js}

@@ -8,7 +8,7 @@ import {
   migrateJsonNotifications,
   readUnreadNotifications,
   writeNotification
-} from "./chunk-Y3JNBCZI.js";
+} from "./chunk-AOJHEMHE.js";
 import "./chunk-2OG5NAO2.js";
 import "./chunk-NEAHEC5G.js";
 import "./chunk-KRLOFIPI.js";

package/dist/{orchestrator-6ULAKZQP.js → orchestrator-W62CLQLP.js}

@@ -1,8 +1,8 @@
 import {
   MultiAgentOrchestrator
-} from "./chunk-EP3OKNTW.js";
+} from "./chunk-UYNFWD54.js";
 import "./chunk-RZK7BZHP.js";
-import "./chunk-Y3JNBCZI.js";
+import "./chunk-AOJHEMHE.js";
 import "./chunk-2OG5NAO2.js";
 import "./chunk-NEAHEC5G.js";
 import "./chunk-KRLOFIPI.js";

package/dist/runtime/index.js

@@ -3,10 +3,10 @@ import {
   SessionManager,
   checkGitSafety,
   targetsMainBranch
-} from "../chunk-K6WORHFF.js";
+} from "../chunk-4YSDLTCT.js";
 import {
   MultiAgentOrchestrator
-} from "../chunk-EP3OKNTW.js";
+} from "../chunk-UYNFWD54.js";
 import {
   createQuietRenderer,
   createTerminalRenderer,
@@ -57,7 +57,7 @@ import {
   matchToolPattern
 } from "../chunk-HF25XPZE.js";
 import "../chunk-RZK7BZHP.js";
-import "../chunk-Y3JNBCZI.js";
+import "../chunk-AOJHEMHE.js";
 import "../chunk-2OG5NAO2.js";
 import "../chunk-NEAHEC5G.js";
 import "../chunk-KRLOFIPI.js";

package/dist/{session-events-5X2SSRXX.js → session-events-SR2WX2X4.js}

@@ -2,9 +2,9 @@ import {
   ensureSessionEventsTable,
   listRecentSessionEvents,
   recordSessionEvent
-} from "./chunk-BBOD5TVX.js";
+} from "./chunk-KCLL5ECT.js";
 import "./chunk-TOR5ZPKF.js";
-import "./chunk-Y3JNBCZI.js";
+import "./chunk-AOJHEMHE.js";
 import "./chunk-2OG5NAO2.js";
 import "./chunk-NEAHEC5G.js";
 import "./chunk-KRLOFIPI.js";

package/dist/{session-scope-42JIV5KF.js → session-scope-S5DODJU4.js}

@@ -3,9 +3,9 @@ import {
   findSessionForProject,
   getSessionProject,
   init_session_scope
-} from "./chunk-EP523LJD.js";
+} from "./chunk-7BPUBHGW.js";
 import "./chunk-TOR5ZPKF.js";
-import "./chunk-Y3JNBCZI.js";
+import "./chunk-AOJHEMHE.js";
 import "./chunk-2OG5NAO2.js";
 import "./chunk-NEAHEC5G.js";
 import "./chunk-KRLOFIPI.js";

package/dist/{setup-wizard-MAPYQDKT.js → setup-wizard-H4TZHU36.js}

@@ -1,7 +1,7 @@
 import {
   runSetupWizard,
   validateModel
-} from "./chunk-CU2XXD5I.js";
+} from "./chunk-UYFPFO6Q.js";
 import "./chunk-4JZNDVZH.js";
 import "./chunk-VA42PIIY.js";
 import "./chunk-FZ23OZL3.js";

package/dist/{task-enforcement-V2CQEPXS.js → task-enforcement-L7EGD6LJ.js}

@@ -3,7 +3,7 @@ import {
   init_tmux_routing,
   sendIntercom,
   updateTaskStatus
-} from "./chunk-Y3JNBCZI.js";
+} from "./chunk-AOJHEMHE.js";
 import "./chunk-2OG5NAO2.js";
 import "./chunk-NEAHEC5G.js";
 import "./chunk-KRLOFIPI.js";

package/dist/{task-scope-EY3G5623.js → task-scope-QNRAYD7S.js}

@@ -3,7 +3,7 @@ import {
   init_task_scope,
   sessionScopeFilter,
   strictSessionScopeFilter
-} from "./chunk-Y3JNBCZI.js";
+} from "./chunk-AOJHEMHE.js";
 import "./chunk-2OG5NAO2.js";
 import "./chunk-NEAHEC5G.js";
 import "./chunk-KRLOFIPI.js";

package/dist/{tasks-crud-FPWY4RZ2.js → tasks-crud-JHHIROCS.js}

@@ -13,7 +13,7 @@ import {
   slugify,
   updateTaskStatus,
   writeCheckpoint
-} from "./chunk-Y3JNBCZI.js";
+} from "./chunk-AOJHEMHE.js";
 import "./chunk-2OG5NAO2.js";
 import "./chunk-NEAHEC5G.js";
 import "./chunk-KRLOFIPI.js";

package/dist/{tasks-review-XDSW3WRG.js → tasks-review-TXMVOOFN.js}

@@ -9,7 +9,7 @@ import {
   init_tasks_review,
   isStale,
   listPendingReviews
-} from "./chunk-Y3JNBCZI.js";
+} from "./chunk-AOJHEMHE.js";
 import "./chunk-2OG5NAO2.js";
 import "./chunk-NEAHEC5G.js";
 import "./chunk-KRLOFIPI.js";

package/dist/tui/App.js

@@ -7,7 +7,7 @@ import "../chunk-WZDI6UJ6.js";
 import {
   init_task_scope,
   sessionScopeFilter
-} from "../chunk-Y3JNBCZI.js";
+} from "../chunk-AOJHEMHE.js";
 import "../chunk-2OG5NAO2.js";
 import "../chunk-NEAHEC5G.js";
 import "../chunk-KRLOFIPI.js";
@@ -7399,7 +7399,7 @@ function useOrchestrator(enabled = true) {
     let cancelled = false;
     async function init() {
       try {
-        const { MultiAgentOrchestrator } = await import("../orchestrator-6ULAKZQP.js");
+        const { MultiAgentOrchestrator } = await import("../orchestrator-W62CLQLP.js");
         const { getCoordinatorName, isCoordinatorRole, loadEmployees } = await import("../lib/employees.js");
         const { isExeSession } = await import("../lib/tmux-routing.js");
         const { listTmuxSessions, inTmux } = await import("../lib/tmux-status.js");
@@ -7440,7 +7440,7 @@ function useOrchestrator(enabled = true) {
         setTotalInProgress(health.totalInProgress);
         try {
           const { getClient } = await import("../lib/database.js");
-          const { sessionScopeFilter: sessionScopeFilter2 } = await import("../task-scope-EY3G5623.js");
+          const { sessionScopeFilter: sessionScopeFilter2 } = await import("../task-scope-QNRAYD7S.js");
           const client = getClient();
           const uoScope = sessionScopeFilter2();
           const result = await client.execute({
@@ -7472,7 +7472,7 @@ function useOrchestrator(enabled = true) {
   const spawnSession = useCallback5(
     async (agentId) => {
       try {
-        const { createTaskCore } = await import("../tasks-crud-FPWY4RZ2.js");
+        const { createTaskCore } = await import("../tasks-crud-JHHIROCS.js");
         const { ensureEmployee } = await import("../lib/tmux-routing.js");
         const { getCoordinatorName } = await import("../lib/employees.js");
         await createTaskCore({
@@ -8095,7 +8095,7 @@ function TasksView({ onBack }) {
     const { withTrace } = await import("../telemetry-SPVGPKU7.js");
     return withTrace("tui.tasks.loadTasks", async () => {
       try {
-        const { loadTaskList } = await import("../tui-data-FQ2F5WA3.js");
+        const { loadTaskList } = await import("../tui-data-65WM7L5Q.js");
         const tasks = await loadTaskList();
         setAllTasks(
           tasks.map((task) => ({
@@ -8928,7 +8928,7 @@ function TeamView({ onBack, onViewSessions }) {
         let projectsByEmployee = /* @__PURE__ */ new Map();
         let currentTaskByEmployee = /* @__PURE__ */ new Map();
         try {
-          const { loadTeamBadgeCounts, loadTeamDetailMetrics } = await import("../tui-data-FQ2F5WA3.js");
+          const { loadTeamBadgeCounts, loadTeamDetailMetrics } = await import("../tui-data-65WM7L5Q.js");
           setBadgeInFlight(true);
           const badgeCountsPromise = loadTeamBadgeCounts();
           const detailsPromise = loadTeamDetailMetrics(roster.map((emp) => emp.name));
@@ -9294,7 +9294,7 @@ function WikiView({ onBack }) {
     }
     setSearchLoading(true);
     try {
-      const { searchWikiMemoryRows } = await import("../tui-data-FQ2F5WA3.js");
+      const { searchWikiMemoryRows } = await import("../tui-data-65WM7L5Q.js");
       setSearchResults(await searchWikiMemoryRows(query));
     } catch {
       setSearchResults([]);

package/dist/{tui-data-FQ2F5WA3.js → tui-data-65WM7L5Q.js}

@@ -1,7 +1,7 @@
 import {
   init_task_scope,
   sessionScopeFilter
-} from "./chunk-Y3JNBCZI.js";
+} from "./chunk-AOJHEMHE.js";
 import "./chunk-2OG5NAO2.js";
 import "./chunk-NEAHEC5G.js";
 import "./chunk-KRLOFIPI.js";

package/dist/{workflow-engine-6QPTYDQI.js → workflow-engine-PK2TC7UE.js}

@@ -10,8 +10,8 @@ import {
   persistWorkflows,
   runWorkflow,
   startWorkflow
-} from "./chunk-QWOQHCRO.js";
-import "./chunk-T7SJCDG3.js";
+} from "./chunk-E2KEN3PG.js";
+import "./chunk-72O7CSKA.js";
 import "./chunk-KFQGP6VL.js";
 export {
   advanceWorkflow,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.141",
+  "version": "0.9.142",
   "description": "AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",

package/release-notes.json

@@ -1,6 +1,109 @@
 {
-  "current": "0.9.141",
+  "current": "0.9.142",
   "notes": {
+    "0.9.142": {
+      "version": "0.9.142",
+      "date": "2026-05-26",
+      "features": [
+        "close_task auto-merges PR + pulls main + builds + prunes + respawns",
+        "auto-respawn Tom after close_task if more tasks queued",
+        "message WAL fallback — messages survive daemon downtime",
+        "entity type hierarchy — subtypes with rollup queries (PG-2)",
+        "temporal validity windows for graph queries (PG-3)",
+        "backup restore CLI + restoreBackup function",
+        "ESLint setup + dependency hygiene + any type reduction",
+        "config(action=\"hire\") MCP tool — COO can hire employees directly",
+        "GM (General Manager) role template + hiring guidance",
+        "merge gate warning in close_task — catches unmerged PRs",
+        "behavior hygiene — platform procedure + COO identity + company procedure",
+        "MCP auto-reconnect to daemon — survives deploy restarts transparently",
+        "event-driven notifications — stop polling managers, let task state drive everything",
+        "MCP disconnect tracker + daemon observability",
+        "MCP lifecycle logging to file — FULL transparency on every disconnect",
+        "automatic P0 bug fixing — daemon auto-dispatch + GitHub Actions fallback",
+        "enforce worktrees for engineer sessions — prevent direct main commits",
+        "multi-device coordination — routing, handoff, device status",
+        "hook tamper protection — SHA-256 manifest + verification before spawn",
+        "governed collaborative memory — visibility tags + write governance",
+        "cache-sharing protocol — pub/sub memory bus for inter-agent sharing",
+        "multi-modal memory — media attachments on memories",
+        "comprehensive \"last 20%\" integration tests + audit_trail read path",
+        "wire memory poisoning defense into writeMemory() pipeline",
+        "memory poisoning defense — trust levels, anomaly detection, quarantine"
+      ],
+      "fixes": [
+        "prune old worktree on close_task before respawning fresh",
+        "exe-launch-agent resolves multi-instance names — tom2/tom3 no longer rejected",
+        "cross-device sync dedup — cooldown key prevents duplicate pushes",
+        "merge gate checks branch name not git author — was silently passing",
+        "resume_employee uses autoInstance — spawns tom2/tom3 for parallel",
+        "security hardening — fail-closed behavior auth gates",
+        "send_message intercom uses force:true — bypass 5-min debounce",
+        "global session cap 10→50 — match MCP session cap",
+        "/exe-call ALWAYS fires + tmux send-keys blocked for ALL agents",
+        "SIGTERM graceful shutdown — remove process.exit(0) from initMetrics",
+        "stale task escalation — surface alive-but-stalled agents to COO",
+        "cloud sync upsert + entity type hierarchy + temporal validity + file_copy security",
+        "daemon memory leak + duplicate watchdog + HTTP body limit + WAL flush",
+        "heap pressure alarm was false positive — compared heapUsed/heapTotal instead of heapUsed/heapLimit",
+        "strengthen scoped SQL audit — cover UPDATE/INSERT, expand exemptions",
+        "hard block tmux send-keys for non-coordinator agents",
+        "MCP disconnect procedure — explicitly block tmux send-keys workaround",
+        "file_copy MCP tool — path boundary enforcement + symlink traversal block",
+        "cloud sync task pull uses ON CONFLICT upsert with updated_at guard",
+        "multi-instance Tom dispatch — create_task fans out to tom2, tom3",
+        "atomic writes for agent-config.json, roster (orchestration + rename)",
+        "atomic JSON writes + config.json corruption recovery",
+        "boot poll timeout no longer fails dispatch — session exists, task pending",
+        "master key clobber guard + COO naming in user-facing strings",
+        "MCP port retry + instant embed skip when OOM marker set"
+      ],
+      "security": [
+        "fix shell injection, SSRF, socket leaks, backup validation",
+        "bump v0.9.139 — 2 CRITICAL security fixes, 14 bug fixes, 6 features, customer config preservation",
+        "fix 2 CRITICAL + 1 HIGH from post-fix audit",
+        "validate X-Agent-Role against roster — prevent privilege escalation",
+        "release: stack v0.9.8 — security hardening + Hygo bug fixes",
+        "add webhook HMAC-SHA256 validation + disable query param auth in prod",
+        "pin GitHub Actions to SHAs, update jose to 6.2.3",
+        "harden support intake against abuse and data leakage",
+        "bump to v0.9.22 — Codex MCP parity + customer bug fixes + security audit remediation",
+        "audit: pre-hygo exe-gateway security report",
+        "add SECURITY.md — trust document for pre-install security evaluation",
+        "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
+      ],
+      "other": [
+        "publish v0.9.141",
+        "ops: journalctl rotation + certbot expiry alerting",
+        "revert: daemon heap back to 33% of RAM — no artificial cap",
+        "v0.9.140 publish + heap cap 4GB (was 33% unbounded)",
+        "PG-1 cross-repo entity federation design document",
+        "add lint step + automated npm publish workflow",
+        "audit: scoped SQL + package budget + TUI vendored + TODO classification",
+        "add full readiness audit evidence",
+        "roadmap: Cross-Repo Ontology — Palantir-level graph (PG-1 through PG-10)",
+        "capture mcp restart self-healing roadmap",
+        "Enforce chain of command task review parity",
+        "document raw SQL fallback in orchestrator auto-approve path",
+        "Finalize orchestration rollout fixes",
+        "Scope device governance task queries",
+        "bump v0.9.138 — 7 critical bug fixes, 10 features, 16 commits",
+        "bump v0.9.137 — Memanto typed schema, push notifications, lazy consolidation",
+        "bump v0.9.136 — daemon OOM fix, process monitor, auto-notify reviewer",
+        "bump v0.9.135 — code debt cleanup, 28 new tests, full observability",
+        "Codex MCP regression tests (18) + DB singleton integration tests (10)",
+        "release notes for v0.9.134",
+        "benchmark score entry for f95b862",
+        "add GitHub Actions CI pipeline — build + test on push",
+        "gitignore GitHub workflows — add via web UI instead",
+        "remove ci.yml — GitHub token lacks workflow scope, will add via web UI",
+        "gitignore — add dist-next, db.sqlite, .wrangler; remove temp scripts"
+      ],
+      "migration_notes": [
+        "If daemon goes down, agents will now fail instead of silently",
+        "exe-daemon.ts kills old embed.pid process and cleans up"
+      ]
+    },
     "0.9.141": {
       "version": "0.9.141",
       "date": "2026-05-26",
@@ -408,105 +511,6 @@
         "If daemon goes down, agents will now fail instead of silently",
         "exe-daemon.ts kills old embed.pid process and cleans up"
       ]
-    },
-    "0.9.137": {
-      "version": "0.9.137",
-      "date": "2026-05-21",
-      "features": [
-        "RecMem lazy consolidation — skip clusters < 3 memories",
-        "Memanto typed semantic schema — 13 memory types with kind-aware retrieval",
-        "push notifications — Telegram + email on task completion and daemon crash",
-        "auto-notify reviewer on task completion + file_copy MCP tool",
-        "daemon process monitor — CPU tracking, orphan detection, high-CPU alerting",
-        "Hygo integration — workflow engine, Asana connector, wiki ACL, GoTrue auth, unified query",
-        "routing audit log + daemon health log — full observability for session routing and daemon lifecycle",
-        "proxy unified cloud routes through api router",
-        "add typed apiWatchdog config for daemon API auto-recovery",
-        "wire reflection layer into production — schema, search, daemon",
-        "wire memory cards + reflection into BEAM benchmark harness",
-        "standalone harnesses for MemBench, REALTALK, MemoryArena",
-        "standalone benchmark harnesses for LongMemEval, LoCoMo, BEAM",
-        "multi-product support for bug reports and feature requests",
-        "memory reflection layer + sandboxed BEAM benchmark harness",
-        "P2 feature batch — orchestration, retrieval, conflict resolution",
-        "P1 feature batch — 8 memory & orchestration improvements",
-        "separate badge from detail fetch pipeline with badgeInFlight flag",
-        "per-agent MCP scoping via set_agent_config",
-        "flip MCP default to consolidated (19 tools) — legacy deprecated",
-        "behavior audit trail — created_by, device_id, session tracking",
-        "detailed filing steps for bugs + feature requests in platform procedures",
-        "document five layers — when to use platform/company/identity/behavior/memory",
-        "customer-facing support procedures — file bugs, check status, get fixes",
-        "add update lifecycle + first install procedures to platform procedures"
-      ],
-      "fixes": [
-        "daemon OOM crash — cloud-sync exponential backoff + circuit breaker + heap monitoring",
-        "replace hardcoded agent name→role map with dynamic roster lookup",
-        "add logging to 45 silent catches — tasks.ts, cloud-sync.ts, exe-daemon.ts",
-        "test regressions — backward-compat exports, test fixture schema, config defaults",
-        "upgrade commit discipline to p0 — one track = one commit, never batch",
-        "use consolidated mcp boot prompt",
-        "auto-start agents after spawn — no more idle prompt",
-        "move atomic swap from build to deploy — builds never disrupt daemon",
-        "disable MCP session TTL — sessions live forever until daemon restart",
-        "complete DB safety suite — auto-restore, write drain, pre-restart backup",
-        "WAL checkpoint on shutdown + integrity check on startup",
-        "warn when caller session unknown in create_task — helps diagnose scope bugs",
-        "route all employee spawns through exe-launch-agent for session-aware MCP",
-        "4 customer audit bugs — honest feature status, auto-approve disabled, visibility TODO",
-        "archive consolidated source memories — stop search inflation",
-        "wire Ebbinghaus strength into vector search + type definition",
-        "v0.9.133 — session routing, Codex MCP compat, 12 bug fixes from customer audit",
-        "bind api router analytics dataset in wrangler",
-        "daemon watchdog uses typed config, wire startup call, fix tsc warnings",
-        "tasks-crud session isolation uses ALS instead of stale process.env",
-        "license gate re-checks key file if missing at boot — prevents permanent lockout after npm update",
-        "enable lean MCP for all spawned agent sessions — prevents OAuth browser popups",
-        "hard session isolation gate in create_task — reject cross-scope dispatch",
-        "code quality audit — DB singleton test + silent catch logging",
-        "enable tsup splitting — shared DB module eliminates \"client not initialized\" after daemon restart"
-      ],
-      "security": [
-        "release: stack v0.9.8 — security hardening + Hygo bug fixes",
-        "add webhook HMAC-SHA256 validation + disable query param auth in prod",
-        "pin GitHub Actions to SHAs, update jose to 6.2.3",
-        "harden support intake against abuse and data leakage",
-        "bump to v0.9.22 — Codex MCP parity + customer bug fixes + security audit remediation",
-        "audit: pre-hygo exe-gateway security report",
-        "add SECURITY.md — trust document for pre-install security evaluation",
-        "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
-      ],
-      "other": [
-        "bump v0.9.137 — Memanto typed schema, push notifications, lazy consolidation",
-        "bump v0.9.136 — daemon OOM fix, process monitor, auto-notify reviewer",
-        "bump v0.9.135 — code debt cleanup, 28 new tests, full observability",
-        "Codex MCP regression tests (18) + DB singleton integration tests (10)",
-        "release notes for v0.9.134",
-        "benchmark score entry for f95b862",
-        "add GitHub Actions CI pipeline — build + test on push",
-        "gitignore GitHub workflows — add via web UI instead",
-        "remove ci.yml — GitHub token lacks workflow scope, will add via web UI",
-        "gitignore — add dist-next, db.sqlite, .wrangler; remove temp scripts",
-        "accumulated fixes — hooks, adapters, config, cloud-sync, rate-limiter, CI pipeline",
-        "stack manifest v0.9.9 — session routing, DB safety, Codex MCP, 20 fixes",
-        "protect api router cloud migration routes",
-        "Proxy cloud sync routes through api router",
-        "bump v0.9.132",
-        "bump v0.9.131 — lean MCP for agents, session isolation gate, card/reflection pipeline",
-        "bump v0.9.130 — hard session isolation gate",
-        "bump v0.9.129",
-        "bump v0.9.128 — shared DB module fix",
-        "bump v0.9.127 — DB init before MCP session tools",
-        "bump v0.9.126 — revert to port 48739",
-        "bump v0.9.125",
-        "bump v0.9.120 — fixed MCP port 48700 with auto-recovery",
-        "bump v0.9.123 — multi-product support for bug/feature reports",
-        "rewrite runtime architecture — exe-os is Mode 1 stopgap, exe-build is the product"
-      ],
-      "migration_notes": [
-        "If daemon goes down, agents will now fail instead of silently",
-        "exe-daemon.ts kills old embed.pid process and cleans up"
-      ]
     }
   }
 }