@askexenow/exe-os 0.9.150 → 0.9.154

package/release-notes.json

@@ -1,10 +1,13 @@
 {
-  "current": "0.9.150",
+  "current": "0.9.154",
   "notes": {
-    "0.9.150": {
-      "version": "0.9.150",
+    "0.9.154": {
+      "version": "0.9.154",
       "date": "2026-05-28",
       "features": [
+        "self-improving skills — usage tracking, success counting, and refinement daemon",
+        "4 retrieval improvements — query expansion, stop words, contradiction resolution, abstention",
+        "competitive roadmap — serverless tier, identity depth, self-improving skills, user modeling",
         "run database migrations before container swap in stack-update",
         "graph auto-extract from ARCHITECTURE.md — regex-based entity/relationship extraction",
         "migrate cloud.askexe.com → api.askexe.com as canonical endpoint",
@@ -26,12 +29,21 @@
         "graceful COO auto-relaunch after context-full exit",
         "desktop push notifications on task completion (macOS/Linux)",
         "rename GHCR image exed → exe-os across all deploy/stack references",
-        "passive daemon-restart detection — agents get one-time /mcp notice",
-        "daemon restart orchestrator — single authority for all restart decisions",
-        "query router cache tuning + cross-session tasks + shared skills",
-        "socket health probe + tmux env guard + reviewer queue fallback (features 1, 2)"
+        "passive daemon-restart detection — agents get one-time /mcp notice"
       ],
       "fixes": [
+        "add scope import to daemon-orchestration — satisfies customer-readiness gate",
+        "skill-refinement.ts — correct writeMemory field names + updateIdentity 3rd arg",
+        "make skill lifecycle fields optional on Behavior interface — unblocks publish",
+        "session isolation for tmux kill — block cross-scope session kills",
+        "session-scope daemon, push, capacity, and cleanup (P0 #7-#13)",
+        "add memory_type to crdt-sync MemoryRecord interface — unblocks publish",
+        "session-scope daemon, push, capacity, cleanup (P0 #7-#9, #13)",
+        "include memory_type in cloud sync push/pull + fix backfill re-sync",
+        "session-scope signal file system — prevent cross-session task/review bleed",
+        "session-scope notification routing — use row.session_scope over ambient",
+        "daemon NEVER guesses session from tmux — header-only routing",
+        "3 daemon bugs — context-full TTL override, API watchdog kill-after-3, idle-kill verify",
         "federated recall always searches code_context + graph — count threshold was useless",
         "make cross-repo guardrail task-aware — allow multi-repo work when task scope permits",
         "ONE postgres — replace crm-postgres with exe-db across entire stack",
@@ -39,24 +51,12 @@
         "add shipped_version to support triage + clean platform procedures",
         "close remaining session-scoping findings from Bob's audit",
         "close 3 more session-scoping leaks from Bob's audit (LEAK-4, LEAK-7, LEAK-8)",
+        "diagnostics check_update ENOENT + healthcheck timeout",
         "close 8 session-scoping leaks — daemon ALS trust + review cleanup + close-task + inbox",
         "correct graph column names in federated recall query",
-        "diagnostics check_update ENOENT + healthcheck timeout",
         "review notifications never reached reviewer — signal file gate was dead code",
         "remove osascript fallback — desktop notifications use OSC 9 only on macOS",
-        "generate valid UUIDs in projection worker stableId + add wiki.* projection",
-        "RSS backpressure + safe Metal shutdown for embedding daemon OOM",
-        "multi-Tom dispatch — per-task signal files + atomic claim + herd prevention",
-        "restrict project_name='all' to coordinators only in list_tasks",
-        "CRM Dockerfile multi-arch — BUILDPLATFORM for build stages, rebuild bcrypt",
-        "enhance intercom log with caller/task/trigger metadata for tracing",
-        "project-scope review queries — no more cross-project review pollution",
-        "remove unused getActiveAgent import in list-tasks",
-        "project-scope ALL task queries — prevents cross-project pollution",
-        "hash-based cloud pull conflict detection + indentation-aware Python/Rust chunker",
-        "add sessionScopeFilter to worker-gate + create-task queries",
-        "replace require() with ESM import in shouldAutoInstance",
-        "intercom-check passes project_name to scanFromDb — prevents cross-project task pollution"
+        "generate valid UUIDs in projection worker stableId + add wiki.* projection"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -73,6 +73,7 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "capture data pipeline spec — raw → filter → wiki + CRM projection",
         "bump to v0.9.149 — task lifecycle simplification + review notification fix",
         "capture gateway connection observability requirements (2026-05-28)",
         "bump to v0.9.146 for publish",
@@ -96,70 +97,69 @@
         "add lint step + automated npm publish workflow",
         "audit: scoped SQL + package budget + TUI vendored + TODO classification",
         "add full readiness audit evidence",
-        "roadmap: Cross-Repo Ontology — Palantir-level graph (PG-1 through PG-10)",
-        "capture mcp restart self-healing roadmap"
+        "roadmap: Cross-Repo Ontology — Palantir-level graph (PG-1 through PG-10)"
       ],
       "migration_notes": [
         "If daemon goes down, agents will now fail instead of silently",
         "exe-daemon.ts kills old embed.pid process and cleans up"
       ]
     },
-    "0.9.144": {
-      "version": "0.9.144",
-      "date": "2026-05-26",
+    "0.9.153": {
+      "version": "0.9.153",
+      "date": "2026-05-28",
       "features": [
-        "close_task auto-merges PR + pulls main + builds + prunes + respawns",
-        "auto-respawn Tom after close_task if more tasks queued",
-        "message WAL fallback — messages survive daemon downtime",
-        "entity type hierarchy — subtypes with rollup queries (PG-2)",
-        "temporal validity windows for graph queries (PG-3)",
-        "backup restore CLI + restoreBackup function",
-        "ESLint setup + dependency hygiene + any type reduction",
-        "config(action=\"hire\") MCP tool — COO can hire employees directly",
-        "GM (General Manager) role template + hiring guidance",
-        "merge gate warning in close_task — catches unmerged PRs",
-        "behavior hygiene — platform procedure + COO identity + company procedure",
-        "MCP auto-reconnect to daemon — survives deploy restarts transparently",
-        "event-driven notifications — stop polling managers, let task state drive everything",
-        "MCP disconnect tracker + daemon observability",
-        "MCP lifecycle logging to file — FULL transparency on every disconnect",
-        "automatic P0 bug fixing — daemon auto-dispatch + GitHub Actions fallback",
-        "enforce worktrees for engineer sessions — prevent direct main commits",
-        "multi-device coordination — routing, handoff, device status",
-        "hook tamper protection — SHA-256 manifest + verification before spawn",
-        "governed collaborative memory — visibility tags + write governance",
-        "cache-sharing protocol — pub/sub memory bus for inter-agent sharing",
-        "multi-modal memory — media attachments on memories",
-        "comprehensive \"last 20%\" integration tests + audit_trail read path",
-        "wire memory poisoning defense into writeMemory() pipeline",
-        "memory poisoning defense — trust levels, anomaly detection, quarantine"
+        "4 retrieval improvements — query expansion, stop words, contradiction resolution, abstention",
+        "competitive roadmap — serverless tier, identity depth, self-improving skills, user modeling",
+        "run database migrations before container swap in stack-update",
+        "graph auto-extract from ARCHITECTURE.md — regex-based entity/relationship extraction",
+        "migrate cloud.askexe.com → api.askexe.com as canonical endpoint",
+        "federated recall — code_context + graph fallback when memory results weak",
+        "migrate cloud.askexe.com → api.askexe.com across all src/ defaults",
+        "rolling restart in stack-update — one service at a time with health verification",
+        "DMR benchmark harness + LoCoMo improvements for v0.9.145 evaluation",
+        "Windows/WSL support — WezTerm config + WSL detection in setup wizard",
+        "queryTaskRows() consolidation — single scoped query path for all task list operations",
+        "review signal files — reliable reviewer notification on update_task(done)",
+        "Ghostty-native notifications via OSC 9 — no more Script Editor popup",
+        "device-scoped behaviors — device_id column + filter in loading",
+        "dispatch reliability — 45s boot timeout, dispatch ack signals, agent heartbeat",
+        "setup wizard headless mode + daemon health check after restart",
+        "device-scoped behaviors — add device_id column + filter on load",
+        "gateway prompt injection defense — 3-tier security hardening",
+        "add diagnostics(action=\"merge_agent_memories\") for reassigning memories across agent IDs",
+        "add task dependency tree visualization (action=dependency_tree)",
+        "graceful COO auto-relaunch after context-full exit",
+        "desktop push notifications on task completion (macOS/Linux)",
+        "rename GHCR image exed → exe-os across all deploy/stack references",
+        "passive daemon-restart detection — agents get one-time /mcp notice",
+        "daemon restart orchestrator — single authority for all restart decisions"
       ],
       "fixes": [
-        "remove unused test imports blocking publish",
-        "resolve all typecheck errors — await-in-sync + type mismatches",
-        "remaining require() → ESM imports in daemon (db-backup, intercom, shutdown)",
-        "eliminate CJS require() from ESM daemon + reliable task signal delivery",
-        "migrate critical writeFileSync to atomicWrite — prevent corruption on crash (Track C)",
-        "security hardening — SQL injection lint + TUI input sanitize + MCP rate limiter (Track D)",
-        "clear public launch readiness blockers",
-        "prune old worktree on close_task before respawning fresh",
-        "exe-launch-agent resolves multi-instance names — tom2/tom3 no longer rejected",
-        "worktree isolation for all runtimes + token budget enforcement + atomic memory versioning",
-        "cross-device sync dedup — cooldown key prevents duplicate pushes",
-        "merge gate checks branch name not git author — was silently passing",
-        "resume_employee uses autoInstance — spawns tom2/tom3 for parallel",
-        "security hardening — fail-closed behavior auth gates",
-        "send_message intercom uses force:true — bypass 5-min debounce",
-        "global session cap 10→50 — match MCP session cap",
-        "/exe-call ALWAYS fires + tmux send-keys blocked for ALL agents",
-        "SIGTERM graceful shutdown — remove process.exit(0) from initMetrics",
-        "stale task escalation — surface alive-but-stalled agents to COO",
-        "cloud sync upsert + entity type hierarchy + temporal validity + file_copy security",
-        "daemon memory leak + duplicate watchdog + HTTP body limit + WAL flush",
-        "heap pressure alarm was false positive — compared heapUsed/heapTotal instead of heapUsed/heapLimit",
-        "strengthen scoped SQL audit — cover UPDATE/INSERT, expand exemptions",
-        "hard block tmux send-keys for non-coordinator agents",
-        "MCP disconnect procedure — explicitly block tmux send-keys workaround"
+        "add memory_type to crdt-sync MemoryRecord interface — unblocks publish",
+        "session-scope daemon, push, capacity, cleanup (P0 #7-#9, #13)",
+        "include memory_type in cloud sync push/pull + fix backfill re-sync",
+        "session-scope signal file system — prevent cross-session task/review bleed",
+        "session-scope notification routing — use row.session_scope over ambient",
+        "daemon NEVER guesses session from tmux — header-only routing",
+        "3 daemon bugs — context-full TTL override, API watchdog kill-after-3, idle-kill verify",
+        "federated recall always searches code_context + graph — count threshold was useless",
+        "make cross-repo guardrail task-aware — allow multi-repo work when task scope permits",
+        "ONE postgres — replace crm-postgres with exe-db across entire stack",
+        "smart session-scoping gate + last boot cleanup leak + triage_bug docs",
+        "add shipped_version to support triage + clean platform procedures",
+        "close remaining session-scoping findings from Bob's audit",
+        "close 3 more session-scoping leaks from Bob's audit (LEAK-4, LEAK-7, LEAK-8)",
+        "close 8 session-scoping leaks — daemon ALS trust + review cleanup + close-task + inbox",
+        "correct graph column names in federated recall query",
+        "diagnostics check_update ENOENT + healthcheck timeout",
+        "review notifications never reached reviewer — signal file gate was dead code",
+        "remove osascript fallback — desktop notifications use OSC 9 only on macOS",
+        "generate valid UUIDs in projection worker stableId + add wiki.* projection",
+        "RSS backpressure + safe Metal shutdown for embedding daemon OOM",
+        "multi-Tom dispatch — per-task signal files + atomic claim + herd prevention",
+        "restrict project_name='all' to coordinators only in list_tasks",
+        "CRM Dockerfile multi-arch — BUILDPLATFORM for build stages, rebuild bcrypt",
+        "enhance intercom log with caller/task/trigger metadata for tracing"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -176,7 +176,18 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "capture data pipeline spec — raw → filter → wiki + CRM projection",
+        "bump to v0.9.149 — task lifecycle simplification + review notification fix",
+        "capture gateway connection observability requirements (2026-05-28)",
+        "bump to v0.9.146 for publish",
+        "Windows support architecture — WezTerm + WSL decision (2026-05-27)",
+        "Merge branch 'tom4-work' — device-scoped behaviors + push-notification fix",
+        "bump to v0.9.145 for publish",
+        "revert: keep workflow files unchanged — GitHub OAuth blocks workflow scope",
+        "stage remaining Yoshi fixes — features + bug cleanup",
+        "add tests for daemon restart orchestrator module",
         "publish v0.9.144 — ESM require() fix + reliable task signals + OAuth 2.1",
+        "add MCP tool tests for message, cloud-sync, and file-copy",
         "add coverage for send_message, cloud_sync, file_copy MCP tools (Track A)",
         "Recover MCP sessions after daemon restart",
         "publish v0.9.143 — all fixes live",
@@ -189,80 +200,69 @@
         "add lint step + automated npm publish workflow",
         "audit: scoped SQL + package budget + TUI vendored + TODO classification",
         "add full readiness audit evidence",
-        "roadmap: Cross-Repo Ontology — Palantir-level graph (PG-1 through PG-10)",
-        "capture mcp restart self-healing roadmap",
-        "Enforce chain of command task review parity",
-        "document raw SQL fallback in orchestrator auto-approve path",
-        "Finalize orchestration rollout fixes",
-        "Scope device governance task queries",
-        "bump v0.9.138 — 7 critical bug fixes, 10 features, 16 commits",
-        "bump v0.9.137 — Memanto typed schema, push notifications, lazy consolidation",
-        "bump v0.9.136 — daemon OOM fix, process monitor, auto-notify reviewer",
-        "bump v0.9.135 — code debt cleanup, 28 new tests, full observability",
-        "Codex MCP regression tests (18) + DB singleton integration tests (10)",
-        "release notes for v0.9.134"
+        "roadmap: Cross-Repo Ontology — Palantir-level graph (PG-1 through PG-10)"
       ],
       "migration_notes": [
         "If daemon goes down, agents will now fail instead of silently",
         "exe-daemon.ts kills old embed.pid process and cleans up"
       ]
     },
-    "0.9.143": {
-      "version": "0.9.143",
-      "date": "2026-05-26",
+    "0.9.150": {
+      "version": "0.9.150",
+      "date": "2026-05-28",
       "features": [
-        "close_task auto-merges PR + pulls main + builds + prunes + respawns",
-        "auto-respawn Tom after close_task if more tasks queued",
-        "message WAL fallback — messages survive daemon downtime",
-        "entity type hierarchy — subtypes with rollup queries (PG-2)",
-        "temporal validity windows for graph queries (PG-3)",
-        "backup restore CLI + restoreBackup function",
-        "ESLint setup + dependency hygiene + any type reduction",
-        "config(action=\"hire\") MCP tool — COO can hire employees directly",
-        "GM (General Manager) role template + hiring guidance",
-        "merge gate warning in close_task — catches unmerged PRs",
-        "behavior hygiene — platform procedure + COO identity + company procedure",
-        "MCP auto-reconnect to daemon — survives deploy restarts transparently",
-        "event-driven notifications — stop polling managers, let task state drive everything",
-        "MCP disconnect tracker + daemon observability",
-        "MCP lifecycle logging to file — FULL transparency on every disconnect",
-        "automatic P0 bug fixing — daemon auto-dispatch + GitHub Actions fallback",
-        "enforce worktrees for engineer sessions — prevent direct main commits",
-        "multi-device coordination — routing, handoff, device status",
-        "hook tamper protection — SHA-256 manifest + verification before spawn",
-        "governed collaborative memory — visibility tags + write governance",
-        "cache-sharing protocol — pub/sub memory bus for inter-agent sharing",
-        "multi-modal memory — media attachments on memories",
-        "comprehensive \"last 20%\" integration tests + audit_trail read path",
-        "wire memory poisoning defense into writeMemory() pipeline",
-        "memory poisoning defense — trust levels, anomaly detection, quarantine"
+        "run database migrations before container swap in stack-update",
+        "graph auto-extract from ARCHITECTURE.md — regex-based entity/relationship extraction",
+        "migrate cloud.askexe.com → api.askexe.com as canonical endpoint",
+        "federated recall — code_context + graph fallback when memory results weak",
+        "migrate cloud.askexe.com → api.askexe.com across all src/ defaults",
+        "rolling restart in stack-update — one service at a time with health verification",
+        "DMR benchmark harness + LoCoMo improvements for v0.9.145 evaluation",
+        "Windows/WSL support — WezTerm config + WSL detection in setup wizard",
+        "queryTaskRows() consolidation — single scoped query path for all task list operations",
+        "review signal files — reliable reviewer notification on update_task(done)",
+        "Ghostty-native notifications via OSC 9 — no more Script Editor popup",
+        "device-scoped behaviors — device_id column + filter in loading",
+        "dispatch reliability — 45s boot timeout, dispatch ack signals, agent heartbeat",
+        "setup wizard headless mode + daemon health check after restart",
+        "device-scoped behaviors — add device_id column + filter on load",
+        "gateway prompt injection defense — 3-tier security hardening",
+        "add diagnostics(action=\"merge_agent_memories\") for reassigning memories across agent IDs",
+        "add task dependency tree visualization (action=dependency_tree)",
+        "graceful COO auto-relaunch after context-full exit",
+        "desktop push notifications on task completion (macOS/Linux)",
+        "rename GHCR image exed → exe-os across all deploy/stack references",
+        "passive daemon-restart detection — agents get one-time /mcp notice",
+        "daemon restart orchestrator — single authority for all restart decisions",
+        "query router cache tuning + cross-session tasks + shared skills",
+        "socket health probe + tmux env guard + reviewer queue fallback (features 1, 2)"
       ],
       "fixes": [
-        "prune old worktree on close_task before respawning fresh",
-        "exe-launch-agent resolves multi-instance names — tom2/tom3 no longer rejected",
-        "worktree isolation for all runtimes + token budget enforcement + atomic memory versioning",
-        "cross-device sync dedup — cooldown key prevents duplicate pushes",
-        "merge gate checks branch name not git author — was silently passing",
-        "resume_employee uses autoInstance — spawns tom2/tom3 for parallel",
-        "security hardening — fail-closed behavior auth gates",
-        "send_message intercom uses force:true — bypass 5-min debounce",
-        "global session cap 10→50 — match MCP session cap",
-        "/exe-call ALWAYS fires + tmux send-keys blocked for ALL agents",
-        "SIGTERM graceful shutdown — remove process.exit(0) from initMetrics",
-        "stale task escalation — surface alive-but-stalled agents to COO",
-        "cloud sync upsert + entity type hierarchy + temporal validity + file_copy security",
-        "daemon memory leak + duplicate watchdog + HTTP body limit + WAL flush",
-        "heap pressure alarm was false positive — compared heapUsed/heapTotal instead of heapUsed/heapLimit",
-        "strengthen scoped SQL audit — cover UPDATE/INSERT, expand exemptions",
-        "hard block tmux send-keys for non-coordinator agents",
-        "MCP disconnect procedure — explicitly block tmux send-keys workaround",
-        "file_copy MCP tool — path boundary enforcement + symlink traversal block",
-        "cloud sync task pull uses ON CONFLICT upsert with updated_at guard",
-        "multi-instance Tom dispatch — create_task fans out to tom2, tom3",
-        "atomic writes for agent-config.json, roster (orchestration + rename)",
-        "atomic JSON writes + config.json corruption recovery",
-        "boot poll timeout no longer fails dispatch — session exists, task pending",
-        "master key clobber guard + COO naming in user-facing strings"
+        "federated recall always searches code_context + graph — count threshold was useless",
+        "make cross-repo guardrail task-aware — allow multi-repo work when task scope permits",
+        "ONE postgres — replace crm-postgres with exe-db across entire stack",
+        "smart session-scoping gate + last boot cleanup leak + triage_bug docs",
+        "add shipped_version to support triage + clean platform procedures",
+        "close remaining session-scoping findings from Bob's audit",
+        "close 3 more session-scoping leaks from Bob's audit (LEAK-4, LEAK-7, LEAK-8)",
+        "close 8 session-scoping leaks — daemon ALS trust + review cleanup + close-task + inbox",
+        "correct graph column names in federated recall query",
+        "diagnostics check_update ENOENT + healthcheck timeout",
+        "review notifications never reached reviewer — signal file gate was dead code",
+        "remove osascript fallback — desktop notifications use OSC 9 only on macOS",
+        "generate valid UUIDs in projection worker stableId + add wiki.* projection",
+        "RSS backpressure + safe Metal shutdown for embedding daemon OOM",
+        "multi-Tom dispatch — per-task signal files + atomic claim + herd prevention",
+        "restrict project_name='all' to coordinators only in list_tasks",
+        "CRM Dockerfile multi-arch — BUILDPLATFORM for build stages, rebuild bcrypt",
+        "enhance intercom log with caller/task/trigger metadata for tracing",
+        "project-scope review queries — no more cross-project review pollution",
+        "remove unused getActiveAgent import in list-tasks",
+        "project-scope ALL task queries — prevents cross-project pollution",
+        "hash-based cloud pull conflict detection + indentation-aware Python/Rust chunker",
+        "add sessionScopeFilter to worker-gate + create-task queries",
+        "replace require() with ESM import in shouldAutoInstance",
+        "intercom-check passes project_name to scanFromDb — prevents cross-project task pollution"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -279,6 +279,18 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "bump to v0.9.149 — task lifecycle simplification + review notification fix",
+        "capture gateway connection observability requirements (2026-05-28)",
+        "bump to v0.9.146 for publish",
+        "Windows support architecture — WezTerm + WSL decision (2026-05-27)",
+        "Merge branch 'tom4-work' — device-scoped behaviors + push-notification fix",
+        "bump to v0.9.145 for publish",
+        "revert: keep workflow files unchanged — GitHub OAuth blocks workflow scope",
+        "stage remaining Yoshi fixes — features + bug cleanup",
+        "add tests for daemon restart orchestrator module",
+        "publish v0.9.144 — ESM require() fix + reliable task signals + OAuth 2.1",
+        "add MCP tool tests for message, cloud-sync, and file-copy",
+        "add coverage for send_message, cloud_sync, file_copy MCP tools (Track A)",
         "Recover MCP sessions after daemon restart",
         "publish v0.9.143 — all fixes live",
         "publish v0.9.142",
@@ -291,27 +303,15 @@
         "audit: scoped SQL + package budget + TUI vendored + TODO classification",
         "add full readiness audit evidence",
         "roadmap: Cross-Repo Ontology — Palantir-level graph (PG-1 through PG-10)",
-        "capture mcp restart self-healing roadmap",
-        "Enforce chain of command task review parity",
-        "document raw SQL fallback in orchestrator auto-approve path",
-        "Finalize orchestration rollout fixes",
-        "Scope device governance task queries",
-        "bump v0.9.138 — 7 critical bug fixes, 10 features, 16 commits",
-        "bump v0.9.137 — Memanto typed schema, push notifications, lazy consolidation",
-        "bump v0.9.136 — daemon OOM fix, process monitor, auto-notify reviewer",
-        "bump v0.9.135 — code debt cleanup, 28 new tests, full observability",
-        "Codex MCP regression tests (18) + DB singleton integration tests (10)",
-        "release notes for v0.9.134",
-        "benchmark score entry for f95b862",
-        "add GitHub Actions CI pipeline — build + test on push"
+        "capture mcp restart self-healing roadmap"
       ],
       "migration_notes": [
         "If daemon goes down, agents will now fail instead of silently",
         "exe-daemon.ts kills old embed.pid process and cleans up"
       ]
     },
-    "0.9.142": {
-      "version": "0.9.142",
+    "0.9.144": {
+      "version": "0.9.144",
       "date": "2026-05-26",
       "features": [
         "close_task auto-merges PR + pulls main + builds + prunes + respawns",
@@ -341,8 +341,16 @@
         "memory poisoning defense — trust levels, anomaly detection, quarantine"
       ],
       "fixes": [
+        "remove unused test imports blocking publish",
+        "resolve all typecheck errors — await-in-sync + type mismatches",
+        "remaining require() → ESM imports in daemon (db-backup, intercom, shutdown)",
+        "eliminate CJS require() from ESM daemon + reliable task signal delivery",
+        "migrate critical writeFileSync to atomicWrite — prevent corruption on crash (Track C)",
+        "security hardening — SQL injection lint + TUI input sanitize + MCP rate limiter (Track D)",
+        "clear public launch readiness blockers",
         "prune old worktree on close_task before respawning fresh",
         "exe-launch-agent resolves multi-instance names — tom2/tom3 no longer rejected",
+        "worktree isolation for all runtimes + token budget enforcement + atomic memory versioning",
         "cross-device sync dedup — cooldown key prevents duplicate pushes",
         "merge gate checks branch name not git author — was silently passing",
         "resume_employee uses autoInstance — spawns tom2/tom3 for parallel",
@@ -357,15 +365,7 @@
         "heap pressure alarm was false positive — compared heapUsed/heapTotal instead of heapUsed/heapLimit",
         "strengthen scoped SQL audit — cover UPDATE/INSERT, expand exemptions",
         "hard block tmux send-keys for non-coordinator agents",
-        "MCP disconnect procedure — explicitly block tmux send-keys workaround",
-        "file_copy MCP tool — path boundary enforcement + symlink traversal block",
-        "cloud sync task pull uses ON CONFLICT upsert with updated_at guard",
-        "multi-instance Tom dispatch — create_task fans out to tom2, tom3",
-        "atomic writes for agent-config.json, roster (orchestration + rename)",
-        "atomic JSON writes + config.json corruption recovery",
-        "boot poll timeout no longer fails dispatch — session exists, task pending",
-        "master key clobber guard + COO naming in user-facing strings",
-        "MCP port retry + instant embed skip when OOM marker set"
+        "MCP disconnect procedure — explicitly block tmux send-keys workaround"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -382,6 +382,11 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "publish v0.9.144 — ESM require() fix + reliable task signals + OAuth 2.1",
+        "add coverage for send_message, cloud_sync, file_copy MCP tools (Track A)",
+        "Recover MCP sessions after daemon restart",
+        "publish v0.9.143 — all fixes live",
+        "publish v0.9.142",
         "publish v0.9.141",
         "ops: journalctl rotation + certbot expiry alerting",
         "revert: daemon heap back to 33% of RAM — no artificial cap",
@@ -401,22 +406,20 @@
         "bump v0.9.136 — daemon OOM fix, process monitor, auto-notify reviewer",
         "bump v0.9.135 — code debt cleanup, 28 new tests, full observability",
         "Codex MCP regression tests (18) + DB singleton integration tests (10)",
-        "release notes for v0.9.134",
-        "benchmark score entry for f95b862",
-        "add GitHub Actions CI pipeline — build + test on push",
-        "gitignore GitHub workflows — add via web UI instead",
-        "remove ci.yml — GitHub token lacks workflow scope, will add via web UI",
-        "gitignore — add dist-next, db.sqlite, .wrangler; remove temp scripts"
+        "release notes for v0.9.134"
       ],
       "migration_notes": [
         "If daemon goes down, agents will now fail instead of silently",
         "exe-daemon.ts kills old embed.pid process and cleans up"
       ]
     },
-    "0.9.141": {
-      "version": "0.9.141",
+    "0.9.143": {
+      "version": "0.9.143",
       "date": "2026-05-26",
       "features": [
+        "close_task auto-merges PR + pulls main + builds + prunes + respawns",
+        "auto-respawn Tom after close_task if more tasks queued",
+        "message WAL fallback — messages survive daemon downtime",
         "entity type hierarchy — subtypes with rollup queries (PG-2)",
         "temporal validity windows for graph queries (PG-3)",
         "backup restore CLI + restoreBackup function",
@@ -438,12 +441,20 @@
         "multi-modal memory — media attachments on memories",
         "comprehensive \"last 20%\" integration tests + audit_trail read path",
         "wire memory poisoning defense into writeMemory() pipeline",
-        "memory poisoning defense — trust levels, anomaly detection, quarantine",
-        "VPS Phase 4 — media→R2 bridge + cross-product queries + migration CLI",
-        "Palantir typed ontology — schema, validation, temporal edges",
-        "R2 media storage client — shared upload/download for all products"
+        "memory poisoning defense — trust levels, anomaly detection, quarantine"
       ],
       "fixes": [
+        "prune old worktree on close_task before respawning fresh",
+        "exe-launch-agent resolves multi-instance names — tom2/tom3 no longer rejected",
+        "worktree isolation for all runtimes + token budget enforcement + atomic memory versioning",
+        "cross-device sync dedup — cooldown key prevents duplicate pushes",
+        "merge gate checks branch name not git author — was silently passing",
+        "resume_employee uses autoInstance — spawns tom2/tom3 for parallel",
+        "security hardening — fail-closed behavior auth gates",
+        "send_message intercom uses force:true — bypass 5-min debounce",
+        "global session cap 10→50 — match MCP session cap",
+        "/exe-call ALWAYS fires + tmux send-keys blocked for ALL agents",
+        "SIGTERM graceful shutdown — remove process.exit(0) from initMetrics",
         "stale task escalation — surface alive-but-stalled agents to COO",
         "cloud sync upsert + entity type hierarchy + temporal validity + file_copy security",
         "daemon memory leak + duplicate watchdog + HTTP body limit + WAL flush",
@@ -457,18 +468,7 @@
         "atomic writes for agent-config.json, roster (orchestration + rename)",
         "atomic JSON writes + config.json corruption recovery",
         "boot poll timeout no longer fails dispatch — session exists, task pending",
-        "master key clobber guard + COO naming in user-facing strings",
-        "MCP port retry + instant embed skip when OOM marker set",
-        "install.ts uses spawn lock + SIGTERM grace + restart cooldown",
-        "daemon restart hardening — OOM guard + 60s cooldown + health check guard",
-        "stop daemon crash loop — embed client no longer kills daemon when OOM marker set",
-        "support endpoints askexe.com → cloud.askexe.com (bypass CF WAF)",
-        "reduce any types 68→52, typed adapter factories + HTTP responses",
-        "pg pool limits, queue overflow health log, any reduction 71→68",
-        "reduce any types 81→71, tighten lint budget to 72",
-        "/exe-afk detects non-tmux sessions, suggests /loop instead",
-        "cross-repo boundary — platform procedure + pre-tool-use guard",
-        "UNIQUE dedup index + dependency hygiene + ESM import fix"
+        "master key clobber guard + COO naming in user-facing strings"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -485,6 +485,10 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "Recover MCP sessions after daemon restart",
+        "publish v0.9.143 — all fixes live",
+        "publish v0.9.142",
+        "publish v0.9.141",
         "ops: journalctl rotation + certbot expiry alerting",
         "revert: daemon heap back to 33% of RAM — no artificial cap",
         "v0.9.140 publish + heap cap 4GB (was 33% unbounded)",
@@ -505,11 +509,7 @@
         "Codex MCP regression tests (18) + DB singleton integration tests (10)",
         "release notes for v0.9.134",
         "benchmark score entry for f95b862",
-        "add GitHub Actions CI pipeline — build + test on push",
-        "gitignore GitHub workflows — add via web UI instead",
-        "remove ci.yml — GitHub token lacks workflow scope, will add via web UI",
-        "gitignore — add dist-next, db.sqlite, .wrangler; remove temp scripts",
-        "accumulated fixes — hooks, adapters, config, cloud-sync, rate-limiter, CI pipeline"
+        "add GitHub Actions CI pipeline — build + test on push"
       ],
       "migration_notes": [
         "If daemon goes down, agents will now fail instead of silently",