@askexenow/exe-os 0.9.150 → 0.9.153

package/dist/{session-scope-6MAGVHBA.js → session-scope-7QCZF3MJ.js}

@@ -1,6 +1,6 @@
 import {
   resolveExeSession
-} from "./chunk-EYTMNAU7.js";
+} from "./chunk-4PDXCEXT.js";
 import "./chunk-LOQCOHEW.js";
 import "./chunk-TXSJ2L5O.js";
 import {

package/dist/{setup-wizard-WJ73A2FY.js → setup-wizard-FA6YEYER.js}

@@ -1,7 +1,7 @@
 import {
   runSetupWizard,
   validateModel
-} from "./chunk-OLVZBBVO.js";
+} from "./chunk-YABPRFBT.js";
 import "./chunk-6D23UNXU.js";
 import "./chunk-TOWAZ5IV.js";
 import "./chunk-LYH5HE24.js";

package/dist/signal-paths-4GOIRLGH.js

@@ -0,0 +1,19 @@
+import "./chunk-MLKGABMK.js";
+
+// src/lib/signal-paths.ts
+import { join } from "path";
+import { homedir } from "os";
+function taskSignalDir(sessionScope) {
+  return join(homedir(), ".exe-os", "task-signals", sessionScope);
+}
+function taskSignalPath(sessionScope, agent, taskId) {
+  return join(taskSignalDir(sessionScope), `${agent}.${taskId}.pending`);
+}
+function reviewSignalPath(sessionScope, reviewer, taskId) {
+  return join(taskSignalDir(sessionScope), `${reviewer}.review-${taskId}.pending`);
+}
+export {
+  reviewSignalPath,
+  taskSignalDir,
+  taskSignalPath
+};

package/dist/{task-enforcement-3RV64YVR.js → task-enforcement-NITY7TBM.js}

@@ -1,7 +1,7 @@
 import {
   sendIntercom,
   updateTaskStatus
-} from "./chunk-EYTMNAU7.js";
+} from "./chunk-4PDXCEXT.js";
 import "./chunk-LOQCOHEW.js";
 import "./chunk-TXSJ2L5O.js";
 import "./chunk-64WZEXXA.js";

package/dist/{task-scope-2T3WIQQY.js → task-scope-YZDSPORL.js}

@@ -2,7 +2,7 @@ import {
   getCurrentSessionScope,
   sessionScopeFilter,
   strictSessionScopeFilter
-} from "./chunk-EYTMNAU7.js";
+} from "./chunk-4PDXCEXT.js";
 import "./chunk-LOQCOHEW.js";
 import "./chunk-TXSJ2L5O.js";
 import "./chunk-64WZEXXA.js";

package/dist/{tasks-crud-B2BGA44L.js → tasks-crud-W5BFKNUS.js}

@@ -14,7 +14,7 @@ import {
   slugify,
   updateTaskStatus,
   writeCheckpoint
-} from "./chunk-EYTMNAU7.js";
+} from "./chunk-4PDXCEXT.js";
 import "./chunk-LOQCOHEW.js";
 import "./chunk-TXSJ2L5O.js";
 import "./chunk-64WZEXXA.js";

package/dist/{tasks-review-ZO3QDMT7.js → tasks-review-VXMELVLA.js}

@@ -8,7 +8,7 @@ import {
   getReviewChecklist,
   isStale,
   listPendingReviews
-} from "./chunk-EYTMNAU7.js";
+} from "./chunk-4PDXCEXT.js";
 import "./chunk-LOQCOHEW.js";
 import "./chunk-TXSJ2L5O.js";
 import "./chunk-64WZEXXA.js";

package/dist/tui/App.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   getSessionPrompt
-} from "../chunk-LLDY5HPV.js";
-import "../chunk-LBX2VQCC.js";
-import "../chunk-XWQKCCCO.js";
+} from "../chunk-PC6Y4ATU.js";
+import "../chunk-YOH3ABTS.js";
+import "../chunk-MWRHXGAB.js";
 import {
   sessionScopeFilter
-} from "../chunk-EYTMNAU7.js";
+} from "../chunk-4PDXCEXT.js";
 import "../chunk-LOQCOHEW.js";
 import "../chunk-TXSJ2L5O.js";
 import "../chunk-64WZEXXA.js";
@@ -7397,7 +7397,7 @@ function useOrchestrator(enabled = true) {
     let cancelled = false;
     async function init() {
       try {
-        const { MultiAgentOrchestrator } = await import("../orchestrator-WQGPXMLN.js");
+        const { MultiAgentOrchestrator } = await import("../orchestrator-XAT2JSBT.js");
         const { getCoordinatorName, isCoordinatorRole, loadEmployees } = await import("../lib/employees.js");
         const { isExeSession } = await import("../lib/tmux-routing.js");
         const { listTmuxSessions, inTmux } = await import("../lib/tmux-status.js");
@@ -7438,7 +7438,7 @@ function useOrchestrator(enabled = true) {
         setTotalInProgress(health.totalInProgress);
         try {
           const { getClient } = await import("../lib/database.js");
-          const { sessionScopeFilter: sessionScopeFilter2 } = await import("../task-scope-2T3WIQQY.js");
+          const { sessionScopeFilter: sessionScopeFilter2 } = await import("../task-scope-YZDSPORL.js");
           const client = getClient();
           const uoScope = sessionScopeFilter2();
           const result = await client.execute({
@@ -7470,7 +7470,7 @@ function useOrchestrator(enabled = true) {
   const spawnSession = useCallback5(
     async (agentId) => {
       try {
-        const { createTaskCore } = await import("../tasks-crud-B2BGA44L.js");
+        const { createTaskCore } = await import("../tasks-crud-W5BFKNUS.js");
         const { ensureEmployee } = await import("../lib/tmux-routing.js");
         const { getCoordinatorName } = await import("../lib/employees.js");
         await createTaskCore({
@@ -8092,7 +8092,7 @@ function TasksView({ onBack }) {
     const { withTrace } = await import("../telemetry-43X3GT3R.js");
     return withTrace("tui.tasks.loadTasks", async () => {
       try {
-        const { loadTaskList } = await import("../tui-data-UAPARPDX.js");
+        const { loadTaskList } = await import("../tui-data-FQYUPCYX.js");
         const tasks = await loadTaskList();
         setAllTasks(
           tasks.map((task) => ({
@@ -8925,7 +8925,7 @@ function TeamView({ onBack, onViewSessions }) {
         let projectsByEmployee = /* @__PURE__ */ new Map();
         let currentTaskByEmployee = /* @__PURE__ */ new Map();
         try {
-          const { loadTeamBadgeCounts, loadTeamDetailMetrics } = await import("../tui-data-UAPARPDX.js");
+          const { loadTeamBadgeCounts, loadTeamDetailMetrics } = await import("../tui-data-FQYUPCYX.js");
           setBadgeInFlight(true);
           const badgeCountsPromise = loadTeamBadgeCounts();
           const detailsPromise = loadTeamDetailMetrics(roster.map((emp) => emp.name));
@@ -9291,7 +9291,7 @@ function WikiView({ onBack }) {
     }
     setSearchLoading(true);
     try {
-      const { searchWikiMemoryRows } = await import("../tui-data-UAPARPDX.js");
+      const { searchWikiMemoryRows } = await import("../tui-data-FQYUPCYX.js");
       setSearchResults(await searchWikiMemoryRows(query));
     } catch {
       setSearchResults([]);

package/dist/{tui-data-UAPARPDX.js → tui-data-FQYUPCYX.js}

@@ -1,6 +1,6 @@
 import {
   sessionScopeFilter
-} from "./chunk-EYTMNAU7.js";
+} from "./chunk-4PDXCEXT.js";
 import "./chunk-LOQCOHEW.js";
 import "./chunk-TXSJ2L5O.js";
 import "./chunk-64WZEXXA.js";

package/dist/{worker-gate-TG6PR2S5.js → worker-gate-OZCNSASA.js}

@@ -6,7 +6,7 @@ import {
   releaseBackfillLock,
   tryAcquireBackfillLock,
   tryAcquireWorkerSlot
-} from "./chunk-3VHX5XFJ.js";
+} from "./chunk-LIJC4CRF.js";
 import "./chunk-TOWAZ5IV.js";
 import "./chunk-LYH5HE24.js";
 import "./chunk-MLKGABMK.js";

package/dist/{workflow-engine-VIFLD5IV.js → workflow-engine-DA3AWD45.js}

@@ -10,8 +10,8 @@ import {
   persistWorkflows,
   runWorkflow,
   startWorkflow
-} from "./chunk-BQ3KXWA7.js";
-import "./chunk-BF4W2VDS.js";
+} from "./chunk-CBLNQNWT.js";
+import "./chunk-YH7VB655.js";
 import "./chunk-MLKGABMK.js";
 export {
   advanceWorkflow,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.150",
+  "version": "0.9.153",
   "description": "AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",

package/release-notes.json

@@ -1,6 +1,109 @@
 {
-  "current": "0.9.150",
+  "current": "0.9.153",
   "notes": {
+    "0.9.153": {
+      "version": "0.9.153",
+      "date": "2026-05-28",
+      "features": [
+        "4 retrieval improvements — query expansion, stop words, contradiction resolution, abstention",
+        "competitive roadmap — serverless tier, identity depth, self-improving skills, user modeling",
+        "run database migrations before container swap in stack-update",
+        "graph auto-extract from ARCHITECTURE.md — regex-based entity/relationship extraction",
+        "migrate cloud.askexe.com → api.askexe.com as canonical endpoint",
+        "federated recall — code_context + graph fallback when memory results weak",
+        "migrate cloud.askexe.com → api.askexe.com across all src/ defaults",
+        "rolling restart in stack-update — one service at a time with health verification",
+        "DMR benchmark harness + LoCoMo improvements for v0.9.145 evaluation",
+        "Windows/WSL support — WezTerm config + WSL detection in setup wizard",
+        "queryTaskRows() consolidation — single scoped query path for all task list operations",
+        "review signal files — reliable reviewer notification on update_task(done)",
+        "Ghostty-native notifications via OSC 9 — no more Script Editor popup",
+        "device-scoped behaviors — device_id column + filter in loading",
+        "dispatch reliability — 45s boot timeout, dispatch ack signals, agent heartbeat",
+        "setup wizard headless mode + daemon health check after restart",
+        "device-scoped behaviors — add device_id column + filter on load",
+        "gateway prompt injection defense — 3-tier security hardening",
+        "add diagnostics(action=\"merge_agent_memories\") for reassigning memories across agent IDs",
+        "add task dependency tree visualization (action=dependency_tree)",
+        "graceful COO auto-relaunch after context-full exit",
+        "desktop push notifications on task completion (macOS/Linux)",
+        "rename GHCR image exed → exe-os across all deploy/stack references",
+        "passive daemon-restart detection — agents get one-time /mcp notice",
+        "daemon restart orchestrator — single authority for all restart decisions"
+      ],
+      "fixes": [
+        "add memory_type to crdt-sync MemoryRecord interface — unblocks publish",
+        "session-scope daemon, push, capacity, cleanup (P0 #7-#9, #13)",
+        "include memory_type in cloud sync push/pull + fix backfill re-sync",
+        "session-scope signal file system — prevent cross-session task/review bleed",
+        "session-scope notification routing — use row.session_scope over ambient",
+        "daemon NEVER guesses session from tmux — header-only routing",
+        "3 daemon bugs — context-full TTL override, API watchdog kill-after-3, idle-kill verify",
+        "federated recall always searches code_context + graph — count threshold was useless",
+        "make cross-repo guardrail task-aware — allow multi-repo work when task scope permits",
+        "ONE postgres — replace crm-postgres with exe-db across entire stack",
+        "smart session-scoping gate + last boot cleanup leak + triage_bug docs",
+        "add shipped_version to support triage + clean platform procedures",
+        "close remaining session-scoping findings from Bob's audit",
+        "close 3 more session-scoping leaks from Bob's audit (LEAK-4, LEAK-7, LEAK-8)",
+        "close 8 session-scoping leaks — daemon ALS trust + review cleanup + close-task + inbox",
+        "correct graph column names in federated recall query",
+        "diagnostics check_update ENOENT + healthcheck timeout",
+        "review notifications never reached reviewer — signal file gate was dead code",
+        "remove osascript fallback — desktop notifications use OSC 9 only on macOS",
+        "generate valid UUIDs in projection worker stableId + add wiki.* projection",
+        "RSS backpressure + safe Metal shutdown for embedding daemon OOM",
+        "multi-Tom dispatch — per-task signal files + atomic claim + herd prevention",
+        "restrict project_name='all' to coordinators only in list_tasks",
+        "CRM Dockerfile multi-arch — BUILDPLATFORM for build stages, rebuild bcrypt",
+        "enhance intercom log with caller/task/trigger metadata for tracing"
+      ],
+      "security": [
+        "fix shell injection, SSRF, socket leaks, backup validation",
+        "bump v0.9.139 — 2 CRITICAL security fixes, 14 bug fixes, 6 features, customer config preservation",
+        "fix 2 CRITICAL + 1 HIGH from post-fix audit",
+        "validate X-Agent-Role against roster — prevent privilege escalation",
+        "release: stack v0.9.8 — security hardening + Hygo bug fixes",
+        "add webhook HMAC-SHA256 validation + disable query param auth in prod",
+        "pin GitHub Actions to SHAs, update jose to 6.2.3",
+        "harden support intake against abuse and data leakage",
+        "bump to v0.9.22 — Codex MCP parity + customer bug fixes + security audit remediation",
+        "audit: pre-hygo exe-gateway security report",
+        "add SECURITY.md — trust document for pre-install security evaluation",
+        "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
+      ],
+      "other": [
+        "capture data pipeline spec — raw → filter → wiki + CRM projection",
+        "bump to v0.9.149 — task lifecycle simplification + review notification fix",
+        "capture gateway connection observability requirements (2026-05-28)",
+        "bump to v0.9.146 for publish",
+        "Windows support architecture — WezTerm + WSL decision (2026-05-27)",
+        "Merge branch 'tom4-work' — device-scoped behaviors + push-notification fix",
+        "bump to v0.9.145 for publish",
+        "revert: keep workflow files unchanged — GitHub OAuth blocks workflow scope",
+        "stage remaining Yoshi fixes — features + bug cleanup",
+        "add tests for daemon restart orchestrator module",
+        "publish v0.9.144 — ESM require() fix + reliable task signals + OAuth 2.1",
+        "add MCP tool tests for message, cloud-sync, and file-copy",
+        "add coverage for send_message, cloud_sync, file_copy MCP tools (Track A)",
+        "Recover MCP sessions after daemon restart",
+        "publish v0.9.143 — all fixes live",
+        "publish v0.9.142",
+        "publish v0.9.141",
+        "ops: journalctl rotation + certbot expiry alerting",
+        "revert: daemon heap back to 33% of RAM — no artificial cap",
+        "v0.9.140 publish + heap cap 4GB (was 33% unbounded)",
+        "PG-1 cross-repo entity federation design document",
+        "add lint step + automated npm publish workflow",
+        "audit: scoped SQL + package budget + TUI vendored + TODO classification",
+        "add full readiness audit evidence",
+        "roadmap: Cross-Repo Ontology — Palantir-level graph (PG-1 through PG-10)"
+      ],
+      "migration_notes": [
+        "If daemon goes down, agents will now fail instead of silently",
+        "exe-daemon.ts kills old embed.pid process and cleans up"
+      ]
+    },
     "0.9.150": {
       "version": "0.9.150",
       "date": "2026-05-28",
@@ -412,109 +515,6 @@
         "If daemon goes down, agents will now fail instead of silently",
         "exe-daemon.ts kills old embed.pid process and cleans up"
       ]
-    },
-    "0.9.141": {
-      "version": "0.9.141",
-      "date": "2026-05-26",
-      "features": [
-        "entity type hierarchy — subtypes with rollup queries (PG-2)",
-        "temporal validity windows for graph queries (PG-3)",
-        "backup restore CLI + restoreBackup function",
-        "ESLint setup + dependency hygiene + any type reduction",
-        "config(action=\"hire\") MCP tool — COO can hire employees directly",
-        "GM (General Manager) role template + hiring guidance",
-        "merge gate warning in close_task — catches unmerged PRs",
-        "behavior hygiene — platform procedure + COO identity + company procedure",
-        "MCP auto-reconnect to daemon — survives deploy restarts transparently",
-        "event-driven notifications — stop polling managers, let task state drive everything",
-        "MCP disconnect tracker + daemon observability",
-        "MCP lifecycle logging to file — FULL transparency on every disconnect",
-        "automatic P0 bug fixing — daemon auto-dispatch + GitHub Actions fallback",
-        "enforce worktrees for engineer sessions — prevent direct main commits",
-        "multi-device coordination — routing, handoff, device status",
-        "hook tamper protection — SHA-256 manifest + verification before spawn",
-        "governed collaborative memory — visibility tags + write governance",
-        "cache-sharing protocol — pub/sub memory bus for inter-agent sharing",
-        "multi-modal memory — media attachments on memories",
-        "comprehensive \"last 20%\" integration tests + audit_trail read path",
-        "wire memory poisoning defense into writeMemory() pipeline",
-        "memory poisoning defense — trust levels, anomaly detection, quarantine",
-        "VPS Phase 4 — media→R2 bridge + cross-product queries + migration CLI",
-        "Palantir typed ontology — schema, validation, temporal edges",
-        "R2 media storage client — shared upload/download for all products"
-      ],
-      "fixes": [
-        "stale task escalation — surface alive-but-stalled agents to COO",
-        "cloud sync upsert + entity type hierarchy + temporal validity + file_copy security",
-        "daemon memory leak + duplicate watchdog + HTTP body limit + WAL flush",
-        "heap pressure alarm was false positive — compared heapUsed/heapTotal instead of heapUsed/heapLimit",
-        "strengthen scoped SQL audit — cover UPDATE/INSERT, expand exemptions",
-        "hard block tmux send-keys for non-coordinator agents",
-        "MCP disconnect procedure — explicitly block tmux send-keys workaround",
-        "file_copy MCP tool — path boundary enforcement + symlink traversal block",
-        "cloud sync task pull uses ON CONFLICT upsert with updated_at guard",
-        "multi-instance Tom dispatch — create_task fans out to tom2, tom3",
-        "atomic writes for agent-config.json, roster (orchestration + rename)",
-        "atomic JSON writes + config.json corruption recovery",
-        "boot poll timeout no longer fails dispatch — session exists, task pending",
-        "master key clobber guard + COO naming in user-facing strings",
-        "MCP port retry + instant embed skip when OOM marker set",
-        "install.ts uses spawn lock + SIGTERM grace + restart cooldown",
-        "daemon restart hardening — OOM guard + 60s cooldown + health check guard",
-        "stop daemon crash loop — embed client no longer kills daemon when OOM marker set",
-        "support endpoints askexe.com → cloud.askexe.com (bypass CF WAF)",
-        "reduce any types 68→52, typed adapter factories + HTTP responses",
-        "pg pool limits, queue overflow health log, any reduction 71→68",
-        "reduce any types 81→71, tighten lint budget to 72",
-        "/exe-afk detects non-tmux sessions, suggests /loop instead",
-        "cross-repo boundary — platform procedure + pre-tool-use guard",
-        "UNIQUE dedup index + dependency hygiene + ESM import fix"
-      ],
-      "security": [
-        "fix shell injection, SSRF, socket leaks, backup validation",
-        "bump v0.9.139 — 2 CRITICAL security fixes, 14 bug fixes, 6 features, customer config preservation",
-        "fix 2 CRITICAL + 1 HIGH from post-fix audit",
-        "validate X-Agent-Role against roster — prevent privilege escalation",
-        "release: stack v0.9.8 — security hardening + Hygo bug fixes",
-        "add webhook HMAC-SHA256 validation + disable query param auth in prod",
-        "pin GitHub Actions to SHAs, update jose to 6.2.3",
-        "harden support intake against abuse and data leakage",
-        "bump to v0.9.22 — Codex MCP parity + customer bug fixes + security audit remediation",
-        "audit: pre-hygo exe-gateway security report",
-        "add SECURITY.md — trust document for pre-install security evaluation",
-        "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
-      ],
-      "other": [
-        "ops: journalctl rotation + certbot expiry alerting",
-        "revert: daemon heap back to 33% of RAM — no artificial cap",
-        "v0.9.140 publish + heap cap 4GB (was 33% unbounded)",
-        "PG-1 cross-repo entity federation design document",
-        "add lint step + automated npm publish workflow",
-        "audit: scoped SQL + package budget + TUI vendored + TODO classification",
-        "add full readiness audit evidence",
-        "roadmap: Cross-Repo Ontology — Palantir-level graph (PG-1 through PG-10)",
-        "capture mcp restart self-healing roadmap",
-        "Enforce chain of command task review parity",
-        "document raw SQL fallback in orchestrator auto-approve path",
-        "Finalize orchestration rollout fixes",
-        "Scope device governance task queries",
-        "bump v0.9.138 — 7 critical bug fixes, 10 features, 16 commits",
-        "bump v0.9.137 — Memanto typed schema, push notifications, lazy consolidation",
-        "bump v0.9.136 — daemon OOM fix, process monitor, auto-notify reviewer",
-        "bump v0.9.135 — code debt cleanup, 28 new tests, full observability",
-        "Codex MCP regression tests (18) + DB singleton integration tests (10)",
-        "release notes for v0.9.134",
-        "benchmark score entry for f95b862",
-        "add GitHub Actions CI pipeline — build + test on push",
-        "gitignore GitHub workflows — add via web UI instead",
-        "remove ci.yml — GitHub token lacks workflow scope, will add via web UI",
-        "gitignore — add dist-next, db.sqlite, .wrangler; remove temp scripts",
-        "accumulated fixes — hooks, adapters, config, cloud-sync, rate-limiter, CI pipeline"
-      ],
-      "migration_notes": [
-        "If daemon goes down, agents will now fail instead of silently",
-        "exe-daemon.ts kills old embed.pid process and cleans up"
-      ]
     }
   }
 }