@askexenow/exe-os 0.9.144 → 0.9.145

package/release-notes.json

@@ -1,10 +1,21 @@
 {
-  "current": "0.9.144",
+  "current": "0.9.145",
   "notes": {
-    "0.9.144": {
-      "version": "0.9.144",
-      "date": "2026-05-26",
+    "0.9.145": {
+      "version": "0.9.145",
+      "date": "2026-05-27",
       "features": [
+        "add diagnostics(action=\"merge_agent_memories\") for reassigning memories across agent IDs",
+        "add task dependency tree visualization (action=dependency_tree)",
+        "graceful COO auto-relaunch after context-full exit",
+        "desktop push notifications on task completion (macOS/Linux)",
+        "rename GHCR image exed → exe-os across all deploy/stack references",
+        "passive daemon-restart detection — agents get one-time /mcp notice",
+        "daemon restart orchestrator — single authority for all restart decisions",
+        "query router cache tuning + cross-session tasks + shared skills",
+        "socket health probe + tmux env guard + reviewer queue fallback (features 1, 2)",
+        "stale review auto-cleanup + file-copy size limit (features 5, 6)",
+        "self-query router LRU cache + coordinator auto-restart on context capacity",
         "close_task auto-merges PR + pulls main + builds + prunes + respawns",
         "auto-respawn Tom after close_task if more tasks queued",
         "message WAL fallback — messages survive daemon downtime",
@@ -18,45 +29,34 @@
         "behavior hygiene — platform procedure + COO identity + company procedure",
         "MCP auto-reconnect to daemon — survives deploy restarts transparently",
         "event-driven notifications — stop polling managers, let task state drive everything",
-        "MCP disconnect tracker + daemon observability",
-        "MCP lifecycle logging to file — FULL transparency on every disconnect",
-        "automatic P0 bug fixing — daemon auto-dispatch + GitHub Actions fallback",
-        "enforce worktrees for engineer sessions — prevent direct main commits",
-        "multi-device coordination — routing, handoff, device status",
-        "hook tamper protection — SHA-256 manifest + verification before spawn",
-        "governed collaborative memory — visibility tags + write governance",
-        "cache-sharing protocol — pub/sub memory bus for inter-agent sharing",
-        "multi-modal memory — media attachments on memories",
-        "comprehensive \"last 20%\" integration tests + audit_trail read path",
-        "wire memory poisoning defense into writeMemory() pipeline",
-        "memory poisoning defense — trust levels, anomaly detection, quarantine"
+        "MCP disconnect tracker + daemon observability"
       ],
       "fixes": [
-        "remove unused test imports blocking publish",
-        "resolve all typecheck errors — await-in-sync + type mismatches",
-        "remaining require() → ESM imports in daemon (db-backup, intercom, shutdown)",
-        "eliminate CJS require() from ESM daemon + reliable task signal delivery",
-        "migrate critical writeFileSync to atomicWrite — prevent corruption on crash (Track C)",
-        "security hardening — SQL injection lint + TUI input sanitize + MCP rate limiter (Track D)",
-        "clear public launch readiness blockers",
-        "prune old worktree on close_task before respawning fresh",
-        "exe-launch-agent resolves multi-instance names — tom2/tom3 no longer rejected",
-        "worktree isolation for all runtimes + token budget enforcement + atomic memory versioning",
-        "cross-device sync dedup — cooldown key prevents duplicate pushes",
-        "merge gate checks branch name not git author — was silently passing",
-        "resume_employee uses autoInstance — spawns tom2/tom3 for parallel",
-        "security hardening — fail-closed behavior auth gates",
-        "send_message intercom uses force:true — bypass 5-min debounce",
-        "global session cap 10→50 — match MCP session cap",
-        "/exe-call ALWAYS fires + tmux send-keys blocked for ALL agents",
-        "SIGTERM graceful shutdown — remove process.exit(0) from initMetrics",
-        "stale task escalation — surface alive-but-stalled agents to COO",
-        "cloud sync upsert + entity type hierarchy + temporal validity + file_copy security",
-        "daemon memory leak + duplicate watchdog + HTTP body limit + WAL flush",
-        "heap pressure alarm was false positive — compared heapUsed/heapTotal instead of heapUsed/heapLimit",
-        "strengthen scoped SQL audit — cover UPDATE/INSERT, expand exemptions",
-        "hard block tmux send-keys for non-coordinator agents",
-        "MCP disconnect procedure — explicitly block tmux send-keys workaround"
+        "add sessionScopeFilter to worker-gate + create-task queries",
+        "replace require() with ESM import in shouldAutoInstance",
+        "intercom-check passes project_name to scanFromDb — prevents cross-project task pollution",
+        "periodic WAL checkpoint (TRUNCATE) every 5 minutes in daemon",
+        "orphan task routing + cloud push content hash (cherry-pick from tom4)",
+        "upgrade code_context platform procedure to P0 + add graph tools",
+        "defer initStore() to background — MCP startup is now instant",
+        "multi-project session isolation in create-task dispatch",
+        "consolidate shouldAutoInstance() — single source of truth for spawn decisions",
+        "entity type normalization + intercom Codex/OpenCode pane safety",
+        "intercom fast-path reads signal file directly + 2s daemon socket timeout",
+        "set AGENT_ID in tmux spawn env — hooks can now read task signal files",
+        "auto-wake respects singleton roles — no more yoshi2/mari2 duplicates",
+        "daemon signal-nudge — auto-wake detects .pending files and nudges idle agents",
+        "defer close_task auto-respawn to prevent caller MCP disruption",
+        "allow in_progress → open transition for dead session claim release",
+        "GraphRAG idle gate + CPU event label + watchdog stale dedup",
+        "exe-start.sh defaults instance number to 1 for non-wrapper invocation",
+        "session-end 15s timeout + log rotation + agent name validation",
+        "harden createTaskCore atomicity + add orphan task file cleanup",
+        "honestly document 3 stub features — HyDE, visibility tiers, write-time contradiction",
+        "preserve memory_type in consolidation INSERT + dedup intercom memories",
+        "harden stack update readiness gates",
+        "resolveProjectDir inherits coordinator session's repo — employees spawn in same repo as their coordinator",
+        "resolve merge conflict in install.ts — use restart orchestrator"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -73,7 +73,12 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "bump to v0.9.145 for publish",
+        "revert: keep workflow files unchanged — GitHub OAuth blocks workflow scope",
+        "stage remaining Yoshi fixes — features + bug cleanup",
+        "add tests for daemon restart orchestrator module",
         "publish v0.9.144 — ESM require() fix + reliable task signals + OAuth 2.1",
+        "add MCP tool tests for message, cloud-sync, and file-copy",
         "add coverage for send_message, cloud_sync, file_copy MCP tools (Track A)",
         "Recover MCP sessions after daemon restart",
         "publish v0.9.143 — all fixes live",
@@ -92,22 +97,28 @@
         "document raw SQL fallback in orchestrator auto-approve path",
         "Finalize orchestration rollout fixes",
         "Scope device governance task queries",
-        "bump v0.9.138 — 7 critical bug fixes, 10 features, 16 commits",
-        "bump v0.9.137 — Memanto typed schema, push notifications, lazy consolidation",
-        "bump v0.9.136 — daemon OOM fix, process monitor, auto-notify reviewer",
-        "bump v0.9.135 — code debt cleanup, 28 new tests, full observability",
-        "Codex MCP regression tests (18) + DB singleton integration tests (10)",
-        "release notes for v0.9.134"
+        "bump v0.9.138 — 7 critical bug fixes, 10 features, 16 commits"
       ],
       "migration_notes": [
         "If daemon goes down, agents will now fail instead of silently",
         "exe-daemon.ts kills old embed.pid process and cleans up"
       ]
     },
-    "0.9.143": {
-      "version": "0.9.143",
-      "date": "2026-05-26",
+    "0.9.144": {
+      "version": "0.9.144",
+      "date": "2026-05-27",
       "features": [
+        "add diagnostics(action=\"merge_agent_memories\") for reassigning memories across agent IDs",
+        "add task dependency tree visualization (action=dependency_tree)",
+        "graceful COO auto-relaunch after context-full exit",
+        "desktop push notifications on task completion (macOS/Linux)",
+        "rename GHCR image exed → exe-os across all deploy/stack references",
+        "passive daemon-restart detection — agents get one-time /mcp notice",
+        "daemon restart orchestrator — single authority for all restart decisions",
+        "query router cache tuning + cross-session tasks + shared skills",
+        "socket health probe + tmux env guard + reviewer queue fallback (features 1, 2)",
+        "stale review auto-cleanup + file-copy size limit (features 5, 6)",
+        "self-query router LRU cache + coordinator auto-restart on context capacity",
         "close_task auto-merges PR + pulls main + builds + prunes + respawns",
         "auto-respawn Tom after close_task if more tasks queued",
         "message WAL fallback — messages survive daemon downtime",
@@ -121,45 +132,34 @@
         "behavior hygiene — platform procedure + COO identity + company procedure",
         "MCP auto-reconnect to daemon — survives deploy restarts transparently",
         "event-driven notifications — stop polling managers, let task state drive everything",
-        "MCP disconnect tracker + daemon observability",
-        "MCP lifecycle logging to file — FULL transparency on every disconnect",
-        "automatic P0 bug fixing — daemon auto-dispatch + GitHub Actions fallback",
-        "enforce worktrees for engineer sessions — prevent direct main commits",
-        "multi-device coordination — routing, handoff, device status",
-        "hook tamper protection — SHA-256 manifest + verification before spawn",
-        "governed collaborative memory — visibility tags + write governance",
-        "cache-sharing protocol — pub/sub memory bus for inter-agent sharing",
-        "multi-modal memory — media attachments on memories",
-        "comprehensive \"last 20%\" integration tests + audit_trail read path",
-        "wire memory poisoning defense into writeMemory() pipeline",
-        "memory poisoning defense — trust levels, anomaly detection, quarantine"
+        "MCP disconnect tracker + daemon observability"
       ],
       "fixes": [
-        "prune old worktree on close_task before respawning fresh",
-        "exe-launch-agent resolves multi-instance names — tom2/tom3 no longer rejected",
-        "worktree isolation for all runtimes + token budget enforcement + atomic memory versioning",
-        "cross-device sync dedup — cooldown key prevents duplicate pushes",
-        "merge gate checks branch name not git author — was silently passing",
-        "resume_employee uses autoInstance — spawns tom2/tom3 for parallel",
-        "security hardening — fail-closed behavior auth gates",
-        "send_message intercom uses force:true — bypass 5-min debounce",
-        "global session cap 10→50 — match MCP session cap",
-        "/exe-call ALWAYS fires + tmux send-keys blocked for ALL agents",
-        "SIGTERM graceful shutdown — remove process.exit(0) from initMetrics",
-        "stale task escalation — surface alive-but-stalled agents to COO",
-        "cloud sync upsert + entity type hierarchy + temporal validity + file_copy security",
-        "daemon memory leak + duplicate watchdog + HTTP body limit + WAL flush",
-        "heap pressure alarm was false positive — compared heapUsed/heapTotal instead of heapUsed/heapLimit",
-        "strengthen scoped SQL audit — cover UPDATE/INSERT, expand exemptions",
-        "hard block tmux send-keys for non-coordinator agents",
-        "MCP disconnect procedure — explicitly block tmux send-keys workaround",
-        "file_copy MCP tool — path boundary enforcement + symlink traversal block",
-        "cloud sync task pull uses ON CONFLICT upsert with updated_at guard",
-        "multi-instance Tom dispatch — create_task fans out to tom2, tom3",
-        "atomic writes for agent-config.json, roster (orchestration + rename)",
-        "atomic JSON writes + config.json corruption recovery",
-        "boot poll timeout no longer fails dispatch — session exists, task pending",
-        "master key clobber guard + COO naming in user-facing strings"
+        "add sessionScopeFilter to worker-gate + create-task queries",
+        "replace require() with ESM import in shouldAutoInstance",
+        "intercom-check passes project_name to scanFromDb — prevents cross-project task pollution",
+        "periodic WAL checkpoint (TRUNCATE) every 5 minutes in daemon",
+        "orphan task routing + cloud push content hash (cherry-pick from tom4)",
+        "upgrade code_context platform procedure to P0 + add graph tools",
+        "defer initStore() to background — MCP startup is now instant",
+        "multi-project session isolation in create-task dispatch",
+        "consolidate shouldAutoInstance() — single source of truth for spawn decisions",
+        "entity type normalization + intercom Codex/OpenCode pane safety",
+        "intercom fast-path reads signal file directly + 2s daemon socket timeout",
+        "set AGENT_ID in tmux spawn env — hooks can now read task signal files",
+        "auto-wake respects singleton roles — no more yoshi2/mari2 duplicates",
+        "daemon signal-nudge — auto-wake detects .pending files and nudges idle agents",
+        "defer close_task auto-respawn to prevent caller MCP disruption",
+        "allow in_progress → open transition for dead session claim release",
+        "GraphRAG idle gate + CPU event label + watchdog stale dedup",
+        "exe-start.sh defaults instance number to 1 for non-wrapper invocation",
+        "session-end 15s timeout + log rotation + agent name validation",
+        "harden createTaskCore atomicity + add orphan task file cleanup",
+        "honestly document 3 stub features — HyDE, visibility tiers, write-time contradiction",
+        "preserve memory_type in consolidation INSERT + dedup intercom memories",
+        "harden stack update readiness gates",
+        "resolveProjectDir inherits coordinator session's repo — employees spawn in same repo as their coordinator",
+        "resolve merge conflict in install.ts — use restart orchestrator"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -176,6 +176,12 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "revert: keep workflow files unchanged — GitHub OAuth blocks workflow scope",
+        "stage remaining Yoshi fixes — features + bug cleanup",
+        "add tests for daemon restart orchestrator module",
+        "publish v0.9.144 — ESM require() fix + reliable task signals + OAuth 2.1",
+        "add MCP tool tests for message, cloud-sync, and file-copy",
+        "add coverage for send_message, cloud_sync, file_copy MCP tools (Track A)",
         "Recover MCP sessions after daemon restart",
         "publish v0.9.143 — all fixes live",
         "publish v0.9.142",
@@ -194,21 +200,15 @@
         "Finalize orchestration rollout fixes",
         "Scope device governance task queries",
         "bump v0.9.138 — 7 critical bug fixes, 10 features, 16 commits",
-        "bump v0.9.137 — Memanto typed schema, push notifications, lazy consolidation",
-        "bump v0.9.136 — daemon OOM fix, process monitor, auto-notify reviewer",
-        "bump v0.9.135 — code debt cleanup, 28 new tests, full observability",
-        "Codex MCP regression tests (18) + DB singleton integration tests (10)",
-        "release notes for v0.9.134",
-        "benchmark score entry for f95b862",
-        "add GitHub Actions CI pipeline — build + test on push"
+        "bump v0.9.137 — Memanto typed schema, push notifications, lazy consolidation"
       ],
       "migration_notes": [
         "If daemon goes down, agents will now fail instead of silently",
         "exe-daemon.ts kills old embed.pid process and cleans up"
       ]
     },
-    "0.9.142": {
-      "version": "0.9.142",
+    "0.9.143": {
+      "version": "0.9.143",
       "date": "2026-05-26",
       "features": [
         "close_task auto-merges PR + pulls main + builds + prunes + respawns",
@@ -240,6 +240,7 @@
       "fixes": [
         "prune old worktree on close_task before respawning fresh",
         "exe-launch-agent resolves multi-instance names — tom2/tom3 no longer rejected",
+        "worktree isolation for all runtimes + token budget enforcement + atomic memory versioning",
         "cross-device sync dedup — cooldown key prevents duplicate pushes",
         "merge gate checks branch name not git author — was silently passing",
         "resume_employee uses autoInstance — spawns tom2/tom3 for parallel",
@@ -261,8 +262,7 @@
         "atomic writes for agent-config.json, roster (orchestration + rename)",
         "atomic JSON writes + config.json corruption recovery",
         "boot poll timeout no longer fails dispatch — session exists, task pending",
-        "master key clobber guard + COO naming in user-facing strings",
-        "MCP port retry + instant embed skip when OOM marker set"
+        "master key clobber guard + COO naming in user-facing strings"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -279,6 +279,9 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "Recover MCP sessions after daemon restart",
+        "publish v0.9.143 — all fixes live",
+        "publish v0.9.142",
         "publish v0.9.141",
         "ops: journalctl rotation + certbot expiry alerting",
         "revert: daemon heap back to 33% of RAM — no artificial cap",
@@ -300,20 +303,20 @@
         "Codex MCP regression tests (18) + DB singleton integration tests (10)",
         "release notes for v0.9.134",
         "benchmark score entry for f95b862",
-        "add GitHub Actions CI pipeline — build + test on push",
-        "gitignore GitHub workflows — add via web UI instead",
-        "remove ci.yml — GitHub token lacks workflow scope, will add via web UI",
-        "gitignore — add dist-next, db.sqlite, .wrangler; remove temp scripts"
+        "add GitHub Actions CI pipeline — build + test on push"
       ],
       "migration_notes": [
         "If daemon goes down, agents will now fail instead of silently",
         "exe-daemon.ts kills old embed.pid process and cleans up"
       ]
     },
-    "0.9.141": {
-      "version": "0.9.141",
+    "0.9.142": {
+      "version": "0.9.142",
       "date": "2026-05-26",
       "features": [
+        "close_task auto-merges PR + pulls main + builds + prunes + respawns",
+        "auto-respawn Tom after close_task if more tasks queued",
+        "message WAL fallback — messages survive daemon downtime",
         "entity type hierarchy — subtypes with rollup queries (PG-2)",
         "temporal validity windows for graph queries (PG-3)",
         "backup restore CLI + restoreBackup function",
@@ -335,12 +338,19 @@
         "multi-modal memory — media attachments on memories",
         "comprehensive \"last 20%\" integration tests + audit_trail read path",
         "wire memory poisoning defense into writeMemory() pipeline",
-        "memory poisoning defense — trust levels, anomaly detection, quarantine",
-        "VPS Phase 4 — media→R2 bridge + cross-product queries + migration CLI",
-        "Palantir typed ontology — schema, validation, temporal edges",
-        "R2 media storage client — shared upload/download for all products"
+        "memory poisoning defense — trust levels, anomaly detection, quarantine"
       ],
       "fixes": [
+        "prune old worktree on close_task before respawning fresh",
+        "exe-launch-agent resolves multi-instance names — tom2/tom3 no longer rejected",
+        "cross-device sync dedup — cooldown key prevents duplicate pushes",
+        "merge gate checks branch name not git author — was silently passing",
+        "resume_employee uses autoInstance — spawns tom2/tom3 for parallel",
+        "security hardening — fail-closed behavior auth gates",
+        "send_message intercom uses force:true — bypass 5-min debounce",
+        "global session cap 10→50 — match MCP session cap",
+        "/exe-call ALWAYS fires + tmux send-keys blocked for ALL agents",
+        "SIGTERM graceful shutdown — remove process.exit(0) from initMetrics",
         "stale task escalation — surface alive-but-stalled agents to COO",
         "cloud sync upsert + entity type hierarchy + temporal validity + file_copy security",
         "daemon memory leak + duplicate watchdog + HTTP body limit + WAL flush",
@@ -355,17 +365,7 @@
         "atomic JSON writes + config.json corruption recovery",
         "boot poll timeout no longer fails dispatch — session exists, task pending",
         "master key clobber guard + COO naming in user-facing strings",
-        "MCP port retry + instant embed skip when OOM marker set",
-        "install.ts uses spawn lock + SIGTERM grace + restart cooldown",
-        "daemon restart hardening — OOM guard + 60s cooldown + health check guard",
-        "stop daemon crash loop — embed client no longer kills daemon when OOM marker set",
-        "support endpoints askexe.com → cloud.askexe.com (bypass CF WAF)",
-        "reduce any types 68→52, typed adapter factories + HTTP responses",
-        "pg pool limits, queue overflow health log, any reduction 71→68",
-        "reduce any types 81→71, tighten lint budget to 72",
-        "/exe-afk detects non-tmux sessions, suggests /loop instead",
-        "cross-repo boundary — platform procedure + pre-tool-use guard",
-        "UNIQUE dedup index + dependency hygiene + ESM import fix"
+        "MCP port retry + instant embed skip when OOM marker set"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -382,6 +382,7 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "publish v0.9.141",
         "ops: journalctl rotation + certbot expiry alerting",
         "revert: daemon heap back to 33% of RAM — no artificial cap",
         "v0.9.140 publish + heap cap 4GB (was 33% unbounded)",
@@ -405,18 +406,19 @@
         "add GitHub Actions CI pipeline — build + test on push",
         "gitignore GitHub workflows — add via web UI instead",
         "remove ci.yml — GitHub token lacks workflow scope, will add via web UI",
-        "gitignore — add dist-next, db.sqlite, .wrangler; remove temp scripts",
-        "accumulated fixes — hooks, adapters, config, cloud-sync, rate-limiter, CI pipeline"
+        "gitignore — add dist-next, db.sqlite, .wrangler; remove temp scripts"
       ],
       "migration_notes": [
         "If daemon goes down, agents will now fail instead of silently",
         "exe-daemon.ts kills old embed.pid process and cleans up"
       ]
     },
-    "0.9.140": {
-      "version": "0.9.140",
+    "0.9.141": {
+      "version": "0.9.141",
       "date": "2026-05-26",
       "features": [
+        "entity type hierarchy — subtypes with rollup queries (PG-2)",
+        "temporal validity windows for graph queries (PG-3)",
         "backup restore CLI + restoreBackup function",
         "ESLint setup + dependency hygiene + any type reduction",
         "config(action=\"hire\") MCP tool — COO can hire employees directly",
@@ -439,11 +441,23 @@
         "memory poisoning defense — trust levels, anomaly detection, quarantine",
         "VPS Phase 4 — media→R2 bridge + cross-product queries + migration CLI",
         "Palantir typed ontology — schema, validation, temporal edges",
-        "R2 media storage client — shared upload/download for all products",
-        "wire workflow-engine into gateway — trigger patterns + integration test",
-        "wire GoTrue auth into gateway MCP tools + X-User-Id header"
+        "R2 media storage client — shared upload/download for all products"
       ],
       "fixes": [
+        "stale task escalation — surface alive-but-stalled agents to COO",
+        "cloud sync upsert + entity type hierarchy + temporal validity + file_copy security",
+        "daemon memory leak + duplicate watchdog + HTTP body limit + WAL flush",
+        "heap pressure alarm was false positive — compared heapUsed/heapTotal instead of heapUsed/heapLimit",
+        "strengthen scoped SQL audit — cover UPDATE/INSERT, expand exemptions",
+        "hard block tmux send-keys for non-coordinator agents",
+        "MCP disconnect procedure — explicitly block tmux send-keys workaround",
+        "file_copy MCP tool — path boundary enforcement + symlink traversal block",
+        "cloud sync task pull uses ON CONFLICT upsert with updated_at guard",
+        "multi-instance Tom dispatch — create_task fans out to tom2, tom3",
+        "atomic writes for agent-config.json, roster (orchestration + rename)",
+        "atomic JSON writes + config.json corruption recovery",
+        "boot poll timeout no longer fails dispatch — session exists, task pending",
+        "master key clobber guard + COO naming in user-facing strings",
         "MCP port retry + instant embed skip when OOM marker set",
         "install.ts uses spawn lock + SIGTERM grace + restart cooldown",
         "daemon restart hardening — OOM guard + 60s cooldown + health check guard",
@@ -454,21 +468,7 @@
         "reduce any types 81→71, tighten lint budget to 72",
         "/exe-afk detects non-tmux sessions, suggests /loop instead",
         "cross-repo boundary — platform procedure + pre-tool-use guard",
-        "UNIQUE dedup index + dependency hygiene + ESM import fix",
-        "task dispatch + completion bypass intercom debounce (force=true)",
-        "--role flag for exe-new-employee — was silently ignored",
-        "clear fresh audit release blockers",
-        "MCP stale session returns 404 per spec for client self-healing",
-        "resume_employee no longer requires project_name",
-        "daemon heap ceiling at 33% of total RAM",
-        "remove daemon heap cap — 15% of RAM, no ceiling",
-        "daemon heap scaling — 2GB floor for mid-range, 15% scaling",
-        "scale daemon heap to machine RAM — 10% of total, 8GB cap for 64GB+",
-        "daemon heap 1536→4096MB for 64GB+ machines — stop OOM crash loop",
-        "fix audit production advisories",
-        "fix audit test hermeticity gates",
-        "disable file grep in shared daemon mode — wrong project results",
-        "fix audit P0 memory queue and file grep"
+        "UNIQUE dedup index + dependency hygiene + ESM import fix"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -485,6 +485,10 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "ops: journalctl rotation + certbot expiry alerting",
+        "revert: daemon heap back to 33% of RAM — no artificial cap",
+        "v0.9.140 publish + heap cap 4GB (was 33% unbounded)",
+        "PG-1 cross-repo entity federation design document",
         "add lint step + automated npm publish workflow",
         "audit: scoped SQL + package budget + TUI vendored + TODO classification",
         "add full readiness audit evidence",
@@ -505,11 +509,7 @@
         "gitignore GitHub workflows — add via web UI instead",
         "remove ci.yml — GitHub token lacks workflow scope, will add via web UI",
         "gitignore — add dist-next, db.sqlite, .wrangler; remove temp scripts",
-        "accumulated fixes — hooks, adapters, config, cloud-sync, rate-limiter, CI pipeline",
-        "stack manifest v0.9.9 — session routing, DB safety, Codex MCP, 20 fixes",
-        "protect api router cloud migration routes",
-        "Proxy cloud sync routes through api router",
-        "bump v0.9.132"
+        "accumulated fixes — hooks, adapters, config, cloud-sync, rate-limiter, CI pipeline"
       ],
       "migration_notes": [
         "If daemon goes down, agents will now fail instead of silently",

package/src/commands/exe/intercom.md

@@ -33,9 +33,25 @@ if [ "$AGENT" = "UNKNOWN" ] || [ "$AGENT" = "default" ]; then
   exit 0
 fi
 
-# Single combined check — one Node process for all intercom queries.
-# Replaces 3 separate node invocations (scan-tasks + messages + notifications)
-# that each paid full Node.js startup + DB init cost (10-20s saved).
+# FAST PATH: Check task signal file first (no Node.js, no DB, <10ms).
+# If a .pending signal exists, output it immediately — no need for the
+# slow intercom-check.js which hits the daemon socket (can hang 75s).
+SIGNAL_FILE="$HOME/.exe-os/task-signals/${AGENT}.pending"
+if [ -f "$SIGNAL_FILE" ]; then
+  SIGNAL=$(cat "$SIGNAL_FILE" 2>/dev/null)
+  TITLE=$(echo "$SIGNAL" | node -e "try{const d=JSON.parse(require('fs').readFileSync(0,'utf8'));console.log(d.title)}catch{}" 2>/dev/null)
+  PRIORITY=$(echo "$SIGNAL" | node -e "try{const d=JSON.parse(require('fs').readFileSync(0,'utf8'));console.log(d.priority)}catch{}" 2>/dev/null)
+  TASK_ID=$(echo "$SIGNAL" | node -e "try{const d=JSON.parse(require('fs').readFileSync(0,'utf8'));console.log(d.task_id)}catch{}" 2>/dev/null)
+  echo "MANDATORY: You have 1 unstarted task(s)."
+  echo "Highest priority: ${TITLE} [${PRIORITY}]"
+  echo ""
+  echo "START WORKING NOW. Run get_task(task_id=\"${TASK_ID}\") and begin immediately."
+  rm -f "$SIGNAL_FILE"
+  exit 0
+fi
+
+# Full check — one Node process for all intercom queries (coordinator reviews, messages, notifications).
+# Only runs if no signal file exists (signal file is the fast path for task dispatch).
 if [ "$AGENT" = "$COORDINATOR" ] || [ "$AGENT" = "exe" ]; then
   EXE_SESSION="$SESSION_NAME" EXE_SESSION_NAME="$SESSION_NAME" node "$(npm root -g)/@askexenow/exe-os/dist/bin/intercom-check.js" "$AGENT" --coordinator 2>/dev/null
 else

package/stack.release.json

@@ -2,11 +2,11 @@
   "$schema": "https://updates.askexe.com/schemas/stack.release.schema.json",
   "schemaVersion": 1,
   "repo": "AskExe/exe-os",
-  "service": "exed",
+  "service": "exe-os",
   "packageName": "@askexenow/exe-os",
-  "version": "0.9.8",
-  "image": "ghcr.io/askexe/exed:v0.9.8",
-  "imageEnv": "EXED_IMAGE_TAG",
+  "version": "0.9.9",
+  "image": "registry.askexe.com/askexe/exe-os:v0.9.9",
+  "imageEnv": "EXE_OS_IMAGE_TAG",
   "stackParticipation": {
     "required": true,
     "compatibleStack": ">=0.9.0 <1.0.0",
@@ -29,12 +29,12 @@
     ],
     "migrations": {
       "command": "npm run build",
-      "rollback": "Restore previous EXED_IMAGE_TAG and restart exed; local SQLCipher memory data is not overwritten by updates."
+      "rollback": "Restore previous EXE_OS_IMAGE_TAG and restart exe-os; local SQLCipher memory data is not overwritten by updates."
     },
     "config": {
       "envExample": "deploy/compose/.env.example",
       "requiredEnv": [
-        "EXED_IMAGE_TAG",
+        "EXE_OS_IMAGE_TAG",
         "EXED_MCP_TOKEN",
         "EXED_DEVICE_ID"
       ]
@@ -42,9 +42,9 @@
     "breakingChanges": [],
     "dataSovereignty": "Customer-local memory/tasks/behaviors stay in SQLCipher/local storage. Updates must not overwrite roster, identity, behavior, or local memory files.",
     "releaseLine": "v0.9 private/customer pilot; v1.0 is public-beta stable.",
-    "highGhostStack": "0.9.8",
+    "highGhostStack": "0.9.9",
     "deploymentScope": "customer"
   },
   "deploymentScope": "customer",
-  "highGhostStack": "0.9.8"
+  "highGhostStack": "0.9.9"
 }

package/dist/agent-context-CDWUZEXY.js

@@ -1,11 +0,0 @@
-import {
-  getAgentContext,
-  init_agent_context,
-  runWithAgent
-} from "./chunk-ELE2C7L4.js";
-import "./chunk-KFQGP6VL.js";
-init_agent_context();
-export {
-  getAgentContext,
-  runWithAgent
-};

package/dist/behaviors-A4W3CBE5.js

@@ -1,22 +0,0 @@
-import {
-  deactivateBehavior,
-  init_behaviors,
-  listBehaviors,
-  listBehaviorsByDomain,
-  listBehaviorsSince,
-  storeBehavior
-} from "./chunk-BNH4LWKE.js";
-import "./chunk-WLW7QV2C.js";
-import "./chunk-53JBNNU3.js";
-import "./chunk-4NYQAS33.js";
-import "./chunk-QASVYG2B.js";
-import "./chunk-VAOAI6DS.js";
-import "./chunk-KFQGP6VL.js";
-init_behaviors();
-export {
-  deactivateBehavior,
-  listBehaviors,
-  listBehaviorsByDomain,
-  listBehaviorsSince,
-  storeBehavior
-};

package/dist/capacity-monitor-7VX6NW5J.js

@@ -1,48 +0,0 @@
-import {
-  CTX_FLOOR_PERCENT,
-  _resetLastRelaunchCache,
-  _resetPendingCapacityKills,
-  confirmCapacityKill,
-  createOrRefreshResumeTask,
-  extractContextPercent,
-  init_capacity_monitor,
-  isAtCapacity,
-  isWithinRelaunchCooldown,
-  pollCapacityDead
-} from "./chunk-TLXIKKEG.js";
-import "./chunk-AYUYBWGD.js";
-import "./chunk-V3YNF3JK.js";
-import "./chunk-V6O4GN5M.js";
-import "./chunk-NEAHEC5G.js";
-import "./chunk-KRLOFIPI.js";
-import "./chunk-57HCNSFO.js";
-import "./chunk-MBRLA4E3.js";
-import "./chunk-DC4ZD76Y.js";
-import "./chunk-PJHHFJAN.js";
-import "./chunk-VTQRACP7.js";
-import "./chunk-JT76KRZQ.js";
-import "./chunk-67WOKLTZ.js";
-import "./chunk-HP43GLZ6.js";
-import "./chunk-ELE2C7L4.js";
-import "./chunk-WZQ4CPRG.js";
-import "./chunk-7PJP3TZV.js";
-import "./chunk-6BFIFI5F.js";
-import "./chunk-WLW7QV2C.js";
-import "./chunk-53JBNNU3.js";
-import "./chunk-4NYQAS33.js";
-import "./chunk-AFEXRICE.js";
-import "./chunk-QASVYG2B.js";
-import "./chunk-VAOAI6DS.js";
-import "./chunk-KFQGP6VL.js";
-init_capacity_monitor();
-export {
-  CTX_FLOOR_PERCENT,
-  _resetLastRelaunchCache,
-  _resetPendingCapacityKills,
-  confirmCapacityKill,
-  createOrRefreshResumeTask,
-  extractContextPercent,
-  isAtCapacity,
-  isWithinRelaunchCooldown,
-  pollCapacityDead
-};