@askexenow/exe-os 0.9.142 → 0.9.143

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/package.json +1 -1
  2. package/release-notes.json +104 -100
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@askexenow/exe-os",
3
- "version": "0.9.142",
3
+ "version": "0.9.143",
4
4
  "description": "AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.",
5
5
  "license": "SEE LICENSE IN LICENSE",
6
6
  "type": "module",
package/release-notes.json CHANGED
@@ -1,6 +1,109 @@
1
1
  {
2
- "current": "0.9.142",
2
+ "current": "0.9.143",
3
3
  "notes": {
4
+ "0.9.143": {
5
+ "version": "0.9.143",
6
+ "date": "2026-05-26",
7
+ "features": [
8
+ "close_task auto-merges PR + pulls main + builds + prunes + respawns",
9
+ "auto-respawn Tom after close_task if more tasks queued",
10
+ "message WAL fallback — messages survive daemon downtime",
11
+ "entity type hierarchy — subtypes with rollup queries (PG-2)",
12
+ "temporal validity windows for graph queries (PG-3)",
13
+ "backup restore CLI + restoreBackup function",
14
+ "ESLint setup + dependency hygiene + any type reduction",
15
+ "config(action=\"hire\") MCP tool — COO can hire employees directly",
16
+ "GM (General Manager) role template + hiring guidance",
17
+ "merge gate warning in close_task — catches unmerged PRs",
18
+ "behavior hygiene — platform procedure + COO identity + company procedure",
19
+ "MCP auto-reconnect to daemon — survives deploy restarts transparently",
20
+ "event-driven notifications — stop polling managers, let task state drive everything",
21
+ "MCP disconnect tracker + daemon observability",
22
+ "MCP lifecycle logging to file — FULL transparency on every disconnect",
23
+ "automatic P0 bug fixing — daemon auto-dispatch + GitHub Actions fallback",
24
+ "enforce worktrees for engineer sessions — prevent direct main commits",
25
+ "multi-device coordination — routing, handoff, device status",
26
+ "hook tamper protection — SHA-256 manifest + verification before spawn",
27
+ "governed collaborative memory — visibility tags + write governance",
28
+ "cache-sharing protocol — pub/sub memory bus for inter-agent sharing",
29
+ "multi-modal memory — media attachments on memories",
30
+ "comprehensive \"last 20%\" integration tests + audit_trail read path",
31
+ "wire memory poisoning defense into writeMemory() pipeline",
32
+ "memory poisoning defense — trust levels, anomaly detection, quarantine"
33
+ ],
34
+ "fixes": [
35
+ "prune old worktree on close_task before respawning fresh",
36
+ "exe-launch-agent resolves multi-instance names — tom2/tom3 no longer rejected",
37
+ "worktree isolation for all runtimes + token budget enforcement + atomic memory versioning",
38
+ "cross-device sync dedup — cooldown key prevents duplicate pushes",
39
+ "merge gate checks branch name not git author — was silently passing",
40
+ "resume_employee uses autoInstance — spawns tom2/tom3 for parallel",
41
+ "security hardening — fail-closed behavior auth gates",
42
+ "send_message intercom uses force:true — bypass 5-min debounce",
43
+ "global session cap 10→50 — match MCP session cap",
44
+ "/exe-call ALWAYS fires + tmux send-keys blocked for ALL agents",
45
+ "SIGTERM graceful shutdown — remove process.exit(0) from initMetrics",
46
+ "stale task escalation — surface alive-but-stalled agents to COO",
47
+ "cloud sync upsert + entity type hierarchy + temporal validity + file_copy security",
48
+ "daemon memory leak + duplicate watchdog + HTTP body limit + WAL flush",
49
+ "heap pressure alarm was false positive — compared heapUsed/heapTotal instead of heapUsed/heapLimit",
50
+ "strengthen scoped SQL audit — cover UPDATE/INSERT, expand exemptions",
51
+ "hard block tmux send-keys for non-coordinator agents",
52
+ "MCP disconnect procedure — explicitly block tmux send-keys workaround",
53
+ "file_copy MCP tool — path boundary enforcement + symlink traversal block",
54
+ "cloud sync task pull uses ON CONFLICT upsert with updated_at guard",
55
+ "multi-instance Tom dispatch — create_task fans out to tom2, tom3",
56
+ "atomic writes for agent-config.json, roster (orchestration + rename)",
57
+ "atomic JSON writes + config.json corruption recovery",
58
+ "boot poll timeout no longer fails dispatch — session exists, task pending",
59
+ "master key clobber guard + COO naming in user-facing strings"
60
+ ],
61
+ "security": [
62
+ "fix shell injection, SSRF, socket leaks, backup validation",
63
+ "bump v0.9.139 — 2 CRITICAL security fixes, 14 bug fixes, 6 features, customer config preservation",
64
+ "fix 2 CRITICAL + 1 HIGH from post-fix audit",
65
+ "validate X-Agent-Role against roster — prevent privilege escalation",
66
+ "release: stack v0.9.8 — security hardening + Hygo bug fixes",
67
+ "add webhook HMAC-SHA256 validation + disable query param auth in prod",
68
+ "pin GitHub Actions to SHAs, update jose to 6.2.3",
69
+ "harden support intake against abuse and data leakage",
70
+ "bump to v0.9.22 — Codex MCP parity + customer bug fixes + security audit remediation",
71
+ "audit: pre-hygo exe-gateway security report",
72
+ "add SECURITY.md — trust document for pre-install security evaluation",
73
+ "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
74
+ ],
75
+ "other": [
76
+ "publish v0.9.142",
77
+ "publish v0.9.141",
78
+ "ops: journalctl rotation + certbot expiry alerting",
79
+ "revert: daemon heap back to 33% of RAM — no artificial cap",
80
+ "v0.9.140 publish + heap cap 4GB (was 33% unbounded)",
81
+ "PG-1 cross-repo entity federation design document",
82
+ "add lint step + automated npm publish workflow",
83
+ "audit: scoped SQL + package budget + TUI vendored + TODO classification",
84
+ "add full readiness audit evidence",
85
+ "roadmap: Cross-Repo Ontology — Palantir-level graph (PG-1 through PG-10)",
86
+ "capture mcp restart self-healing roadmap",
87
+ "Enforce chain of command task review parity",
88
+ "document raw SQL fallback in orchestrator auto-approve path",
89
+ "Finalize orchestration rollout fixes",
90
+ "Scope device governance task queries",
91
+ "bump v0.9.138 — 7 critical bug fixes, 10 features, 16 commits",
92
+ "bump v0.9.137 — Memanto typed schema, push notifications, lazy consolidation",
93
+ "bump v0.9.136 — daemon OOM fix, process monitor, auto-notify reviewer",
94
+ "bump v0.9.135 — code debt cleanup, 28 new tests, full observability",
95
+ "Codex MCP regression tests (18) + DB singleton integration tests (10)",
96
+ "release notes for v0.9.134",
97
+ "benchmark score entry for f95b862",
98
+ "add GitHub Actions CI pipeline — build + test on push",
99
+ "gitignore GitHub workflows — add via web UI instead",
100
+ "remove ci.yml — GitHub token lacks workflow scope, will add via web UI"
101
+ ],
102
+ "migration_notes": [
103
+ "If daemon goes down, agents will now fail instead of silently",
104
+ "exe-daemon.ts kills old embed.pid process and cleans up"
105
+ ]
106
+ },
4
107
  "0.9.142": {
5
108
  "version": "0.9.142",
6
109
  "date": "2026-05-26",
@@ -412,105 +515,6 @@
412
515
  "If daemon goes down, agents will now fail instead of silently",
413
516
  "exe-daemon.ts kills old embed.pid process and cleans up"
414
517
  ]
415
- },
416
- "0.9.138": {
417
- "version": "0.9.138",
418
- "date": "2026-05-21",
419
- "features": [
420
- "unified webhook pipe — config-driven field mapping + HMAC",
421
- "WHAT'S NEW section in boot brief + bundle release-notes.json in npm",
422
- "setup wizard runtime/model chooser (Step 5c)",
423
- "cloud sync for schedules, trajectories, consolidations, identity",
424
- "DWL-1 branding.json config system + DWL-4 CLI command",
425
- "wire unified-query.ts into raw-data, CRM, and company-brain MCP tools",
426
- "GR-1 semantic entity disambiguation via embedding similarity",
427
- "per-agent MCP scoping — wire agent-config mcps into spawn path",
428
- "Letta core/archival memory split — core_memory table + MCP actions",
429
- "COO auto-restart — daemon detects dead coordinator session and relaunches",
430
- "RecMem lazy consolidation — skip clusters < 3 memories",
431
- "Memanto typed semantic schema — 13 memory types with kind-aware retrieval",
432
- "push notifications — Telegram + email on task completion and daemon crash",
433
- "auto-notify reviewer on task completion + file_copy MCP tool",
434
- "daemon process monitor — CPU tracking, orphan detection, high-CPU alerting",
435
- "Hygo integration — workflow engine, Asana connector, wiki ACL, GoTrue auth, unified query",
436
- "routing audit log + daemon health log — full observability for session routing and daemon lifecycle",
437
- "proxy unified cloud routes through api router",
438
- "add typed apiWatchdog config for daemon API auto-recovery",
439
- "wire reflection layer into production — schema, search, daemon",
440
- "wire memory cards + reflection into BEAM benchmark harness",
441
- "standalone harnesses for MemBench, REALTALK, MemoryArena",
442
- "standalone benchmark harnesses for LongMemEval, LoCoMo, BEAM",
443
- "multi-product support for bug reports and feature requests",
444
- "memory reflection layer + sandboxed BEAM benchmark harness"
445
- ],
446
- "fixes": [
447
- "intercom-check now surfaces reviewer tasks — not just assigned_to",
448
- "consolidation truncation + task state machine + cascade race",
449
- "session cleanup side effects + global agent cap + queue overflow log",
450
- "cloud sync preserves local enrichment — COALESCE on conflict",
451
- "cross-device task isolation — device_id filter on stuck-task + backfill",
452
- "session-scoped idle nudge — prevent cross-session agent nudging",
453
- "daemon OOM crash — cloud-sync exponential backoff + circuit breaker + heap monitoring",
454
- "replace hardcoded agent name→role map with dynamic roster lookup",
455
- "add logging to 45 silent catches — tasks.ts, cloud-sync.ts, exe-daemon.ts",
456
- "test regressions — backward-compat exports, test fixture schema, config defaults",
457
- "upgrade commit discipline to p0 — one track = one commit, never batch",
458
- "use consolidated mcp boot prompt",
459
- "auto-start agents after spawn — no more idle prompt",
460
- "move atomic swap from build to deploy — builds never disrupt daemon",
461
- "disable MCP session TTL — sessions live forever until daemon restart",
462
- "complete DB safety suite — auto-restore, write drain, pre-restart backup",
463
- "WAL checkpoint on shutdown + integrity check on startup",
464
- "warn when caller session unknown in create_task — helps diagnose scope bugs",
465
- "route all employee spawns through exe-launch-agent for session-aware MCP",
466
- "4 customer audit bugs — honest feature status, auto-approve disabled, visibility TODO",
467
- "archive consolidated source memories — stop search inflation",
468
- "wire Ebbinghaus strength into vector search + type definition",
469
- "v0.9.133 — session routing, Codex MCP compat, 12 bug fixes from customer audit",
470
- "bind api router analytics dataset in wrangler",
471
- "daemon watchdog uses typed config, wire startup call, fix tsc warnings"
472
- ],
473
- "security": [
474
- "release: stack v0.9.8 — security hardening + Hygo bug fixes",
475
- "add webhook HMAC-SHA256 validation + disable query param auth in prod",
476
- "pin GitHub Actions to SHAs, update jose to 6.2.3",
477
- "harden support intake against abuse and data leakage",
478
- "bump to v0.9.22 — Codex MCP parity + customer bug fixes + security audit remediation",
479
- "audit: pre-hygo exe-gateway security report",
480
- "add SECURITY.md — trust document for pre-install security evaluation",
481
- "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
482
- ],
483
- "other": [
484
- "bump v0.9.138 — 7 critical bug fixes, 10 features, 16 commits",
485
- "bump v0.9.137 — Memanto typed schema, push notifications, lazy consolidation",
486
- "bump v0.9.136 — daemon OOM fix, process monitor, auto-notify reviewer",
487
- "bump v0.9.135 — code debt cleanup, 28 new tests, full observability",
488
- "Codex MCP regression tests (18) + DB singleton integration tests (10)",
489
- "release notes for v0.9.134",
490
- "benchmark score entry for f95b862",
491
- "add GitHub Actions CI pipeline — build + test on push",
492
- "gitignore GitHub workflows — add via web UI instead",
493
- "remove ci.yml — GitHub token lacks workflow scope, will add via web UI",
494
- "gitignore — add dist-next, db.sqlite, .wrangler; remove temp scripts",
495
- "accumulated fixes — hooks, adapters, config, cloud-sync, rate-limiter, CI pipeline",
496
- "stack manifest v0.9.9 — session routing, DB safety, Codex MCP, 20 fixes",
497
- "protect api router cloud migration routes",
498
- "Proxy cloud sync routes through api router",
499
- "bump v0.9.132",
500
- "bump v0.9.131 — lean MCP for agents, session isolation gate, card/reflection pipeline",
501
- "bump v0.9.130 — hard session isolation gate",
502
- "bump v0.9.129",
503
- "bump v0.9.128 — shared DB module fix",
504
- "bump v0.9.127 — DB init before MCP session tools",
505
- "bump v0.9.126 — revert to port 48739",
506
- "bump v0.9.125",
507
- "bump v0.9.120 — fixed MCP port 48700 with auto-recovery",
508
- "bump v0.9.123 — multi-product support for bug/feature reports"
509
- ],
510
- "migration_notes": [
511
- "If daemon goes down, agents will now fail instead of silently",
512
- "exe-daemon.ts kills old embed.pid process and cleans up"
513
- ]
514
518
  }
515
519
  }
516
520
  }