@askexenow/exe-os 0.9.159 → 0.9.161

package/dist/{tui-data-E3XA3HLZ.js → tui-data-XNWZBTZB.js}

@@ -1,6 +1,6 @@
 import {
   sessionScopeFilter
-} from "./chunk-SNTCGJAE.js";
+} from "./chunk-7X7HKWH7.js";
 import "./chunk-LOQCOHEW.js";
 import "./chunk-TXSJ2L5O.js";
 import "./chunk-64WZEXXA.js";
@@ -10,16 +10,16 @@ import "./chunk-GZIAQYGI.js";
 import "./chunk-ZQX6UOP6.js";
 import "./chunk-H2CFBUGF.js";
 import "./chunk-NGP6LSV2.js";
-import "./chunk-GP436PAK.js";
+import "./chunk-72IIQLQ6.js";
 import "./chunk-OPU3NYOO.js";
 import "./chunk-CVYC6DUW.js";
 import "./chunk-GJV3WDWM.js";
 import "./chunk-MP2AFCGL.js";
-import "./chunk-VKCFXOWQ.js";
+import "./chunk-2UO3QD7V.js";
 import "./chunk-HYZV25LY.js";
 import {
   getClient
-} from "./chunk-JTS3IDOY.js";
+} from "./chunk-JYETM4KT.js";
 import "./chunk-RVSGXGWG.js";
 import "./chunk-FXU7JOXK.js";
 import "./chunk-MVMMULOJ.js";

package/dist/{wiki-client-NZR7RW4I.js → wiki-client-S6JKY7GG.js}

@@ -116,6 +116,26 @@ async function chatInWorkspace(client, workspaceSlug, message, mode = "chat") {
     error: data.error ?? null
   };
 }
+async function uploadDocumentToWiki(client, workspaceSlug, title, textContent) {
+  try {
+    await wikiFetch(
+      client,
+      "/document/raw-text",
+      "POST",
+      {
+        textContent,
+        metadata: { title },
+        workspaceSlugs: [workspaceSlug]
+      }
+    );
+    return { success: true };
+  } catch (err) {
+    return {
+      success: false,
+      error: err instanceof Error ? err.message : String(err)
+    };
+  }
+}
 async function getChatHistory(client, workspaceSlug, limit = 50) {
   const data = await wikiFetch(
     client,
@@ -132,5 +152,6 @@ export {
   createWikiClient,
   getChatHistory,
   listDocuments,
-  listWorkspaces
+  listWorkspaces,
+  uploadDocumentToWiki
 };

package/dist/{worker-gate-J5RRT27H.js → worker-gate-ULTQ3WTD.js}

@@ -6,7 +6,7 @@ import {
   releaseBackfillLock,
   tryAcquireBackfillLock,
   tryAcquireWorkerSlot
-} from "./chunk-CQFBWHQT.js";
+} from "./chunk-LHLEFNFW.js";
 import "./chunk-4GXRETYL.js";
 import "./chunk-LYH5HE24.js";
 import "./chunk-MLKGABMK.js";

package/dist/{workflow-engine-4U4H4V6K.js → workflow-engine-GKT7HTAK.js}

@@ -10,8 +10,8 @@ import {
   persistWorkflows,
   runWorkflow,
   startWorkflow
-} from "./chunk-SCZJGD2G.js";
-import "./chunk-JC7GZZVA.js";
+} from "./chunk-I3MRITK2.js";
+import "./chunk-X4X3J6FE.js";
 import "./chunk-MLKGABMK.js";
 export {
   advanceWorkflow,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.159",
+  "version": "0.9.161",
   "description": "AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",

package/release-notes.json

@@ -1,10 +1,14 @@
 {
-  "current": "0.9.159",
+  "current": "0.9.161",
   "notes": {
-    "0.9.159": {
-      "version": "0.9.159",
-      "date": "2026-05-29",
+    "0.9.161": {
+      "version": "0.9.161",
+      "date": "2026-05-30",
       "features": [
+        "add worktree reaper daemon job to prune orphaned agent worktrees",
+        "add pre-flight gates to close_task — status gate, worktree check, commit recency",
+        "add wiki document ingestion via API for embedding pipeline",
+        "add filtered.* projection targets to projection worker",
         "verify-stack post-deploy checks — 8 runtime validations",
         "preflight deploy gate + filtered schema + gateway graceful degradation",
         "harden /exe-afk as primary monitoring tool, deprecate /loop for orchestration",
@@ -25,13 +29,17 @@
         "update safety + portable backups + restore",
         "complete deployment readiness — all 14 second-pass blind spots fixed",
         "production-ready stack — all 15 blind spots fixed",
-        "blocked task notification — ping dispatcher immediately on status change",
-        "self-improving skills — usage tracking, success counting, and refinement daemon",
-        "4 retrieval improvements — query expansion, stop words, contradiction resolution, abstention",
-        "competitive roadmap — serverless tier, identity depth, self-improving skills, user modeling",
-        "run database migrations before container swap in stack-update"
+        "blocked task notification — ping dispatcher immediately on status change"
       ],
       "fixes": [
+        "update readiness gate to check daemon-restart-orchestrator",
+        "resolve TS errors blocking publish — unused import + undefined row",
+        "zombie agent reaper + deferred daemon restart (OOM crash fix)",
+        "idle-kill now reaps Codex/OpenCode sessions (bug 47d1e446)",
+        "change orphaned task terminal state from blocked → needs_review",
+        "auto-close temporal guard + session_scope fallback + orphan cleanup safety",
+        "cloud sync skip-bad-rows + age-based orphan hook reaper",
+        "clean unused imports + publish gate fixes for v0.9.159",
         "daemon memory cascade — prevent duplicate daemons, reap orphan hooks, cap heap",
         "auto-inject timeout on tmux capture-pane to prevent session freeze",
         "auto-wake crash loop — filter boot memories + circuit breaker",
@@ -48,15 +56,7 @@
         "kill idle Codex/OpenCode sessions instead of sending intercom — enables auto-wake respawn",
         "suppress daemon auto-reconnect noise — only log after attempt 2+",
         "remove E2EE from bug reports — support intake must be readable server-side",
-        "support API — verified encrypted bug reports work (HTTP 201)",
-        "support API accepts encrypted bug reports — prevents HTTP 400",
-        "Codex agents recheck tasks before stopping — prevents idle-with-open-tasks",
-        "P0 #13 session_scope in cleanup SELECT + P0 #6 wire review signal files",
-        "add scope import to prompt-submit — gate pass",
-        "add writeFileSync import to config.ts",
-        "persist cloud endpoint migration to config.json — stop logging on every boot",
-        "include memory_type in pushToPostgres metadata — was stripped on sync",
-        "add scope import to daemon-orchestration — satisfies customer-readiness gate"
+        "support API — verified encrypted bug reports work (HTTP 201)"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -73,6 +73,8 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "bump v0.9.160 — cloud sync resilience + orphan reaper + auto-close guard",
+        "update release notes with 5 bug fixes from support triage",
         "bump v0.9.159 — daemon memory cascade fix + session_scope + benchmarks",
         "arch: customer onboarding automation — exe-os deploy-customer command",
         "arch: Fleet Operations Roadmap — 8 phases for production safety at scale",
@@ -95,71 +97,69 @@
         "publish v0.9.144 — ESM require() fix + reliable task signals + OAuth 2.1",
         "add MCP tool tests for message, cloud-sync, and file-copy",
         "add coverage for send_message, cloud_sync, file_copy MCP tools (Track A)",
-        "Recover MCP sessions after daemon restart",
-        "publish v0.9.143 — all fixes live",
-        "publish v0.9.142"
+        "Recover MCP sessions after daemon restart"
       ],
       "migration_notes": [
         "If daemon goes down, agents will now fail instead of silently",
         "exe-daemon.ts kills old embed.pid process and cleans up"
       ]
     },
-    "0.9.158": {
-      "version": "0.9.158",
-      "date": "2026-05-28",
+    "0.9.160": {
+      "version": "0.9.160",
+      "date": "2026-05-30",
       "features": [
+        "add wiki document ingestion via API for embedding pipeline",
+        "add filtered.* projection targets to projection worker",
+        "verify-stack post-deploy checks — 8 runtime validations",
+        "preflight deploy gate + filtered schema + gateway graceful degradation",
+        "harden /exe-afk as primary monitoring tool, deprecate /loop for orchestration",
+        "add --judge-model flag to LoCoMo harness",
+        "dashboard.askexe.com — customer credits dashboard (backend + frontend)",
+        "config persistence contract — document + enforce what survives stack updates",
+        "add persona depth to identity — tone, vocabulary, response_style, communication_patterns",
+        "4 BEAM improvements — o4-mini judge, entity expansion, temporal prompts, contradiction detection",
+        "DMR 100% + BEAM 35% — full results with Claude Sonnet judge",
+        "session_scope read paths — search filter + backfill + tests",
+        "add session_scope filtering to memory read paths + MCP tools + backfill",
+        "classify prompt memories as conversation type + enrich session-end captures",
+        "add session_scope column to memories table — schema migration + all write paths",
+        "fix Codex integration + add --codex to all 4 harnesses",
+        "add checkpoint/resume support for long LoCoMo runs",
+        "add Codex GPT-5.5 judge, pre-embedding, expanded retrieval, production prompts",
         "stack manifest 0.9.10 — all new images for customer deployment",
         "update safety + portable backups + restore",
         "complete deployment readiness — all 14 second-pass blind spots fixed",
         "production-ready stack — all 15 blind spots fixed",
         "blocked task notification — ping dispatcher immediately on status change",
         "self-improving skills — usage tracking, success counting, and refinement daemon",
-        "4 retrieval improvements — query expansion, stop words, contradiction resolution, abstention",
-        "competitive roadmap — serverless tier, identity depth, self-improving skills, user modeling",
-        "run database migrations before container swap in stack-update",
-        "graph auto-extract from ARCHITECTURE.md — regex-based entity/relationship extraction",
-        "migrate cloud.askexe.com → api.askexe.com as canonical endpoint",
-        "federated recall — code_context + graph fallback when memory results weak",
-        "migrate cloud.askexe.com → api.askexe.com across all src/ defaults",
-        "rolling restart in stack-update — one service at a time with health verification",
-        "DMR benchmark harness + LoCoMo improvements for v0.9.145 evaluation",
-        "Windows/WSL support — WezTerm config + WSL detection in setup wizard",
-        "queryTaskRows() consolidation — single scoped query path for all task list operations",
-        "review signal files — reliable reviewer notification on update_task(done)",
-        "Ghostty-native notifications via OSC 9 — no more Script Editor popup",
-        "device-scoped behaviors — device_id column + filter in loading",
-        "dispatch reliability — 45s boot timeout, dispatch ack signals, agent heartbeat",
-        "setup wizard headless mode + daemon health check after restart",
-        "device-scoped behaviors — add device_id column + filter on load",
-        "gateway prompt injection defense — 3-tier security hardening",
-        "add diagnostics(action=\"merge_agent_memories\") for reassigning memories across agent IDs"
+        "4 retrieval improvements — query expansion, stop words, contradiction resolution, abstention"
       ],
       "fixes": [
+        "auto-close temporal guard + session_scope fallback + orphan cleanup safety",
+        "cloud sync skip-bad-rows + age-based orphan hook reaper",
+        "clean unused imports + publish gate fixes for v0.9.159",
+        "daemon memory cascade — prevent duplicate daemons, reap orphan hooks, cap heap",
+        "auto-inject timeout on tmux capture-pane to prevent session freeze",
+        "auto-wake crash loop — filter boot memories + circuit breaker",
+        "Codex numbered instances use baseAgentName for identity resolution",
+        "auto-chain project scope + writeNotification on needs_review",
+        "persist WhatsApp auth in Docker volume — prevent data loss on update",
+        "wake idle codex sessions on pending tasks",
+        "fix daemon MCP session heap leak",
+        "include typescript as runtime dependency",
+        "remove direct Postgres license validation — CF Worker is the only path",
+        "gateway stop_grace_period 45s — prevent SIGKILL during message drain",
+        "filter person names from FTS queries to prevent speaker-prefix pollution",
+        "DMR retrieval 20% → 100% — stop words, name filtering, speaker fix",
+        "kill idle Codex/OpenCode sessions instead of sending intercom — enables auto-wake respawn",
+        "suppress daemon auto-reconnect noise — only log after attempt 2+",
+        "remove E2EE from bug reports — support intake must be readable server-side",
         "support API — verified encrypted bug reports work (HTTP 201)",
         "support API accepts encrypted bug reports — prevents HTTP 400",
         "Codex agents recheck tasks before stopping — prevents idle-with-open-tasks",
         "P0 #13 session_scope in cleanup SELECT + P0 #6 wire review signal files",
         "add scope import to prompt-submit — gate pass",
-        "add writeFileSync import to config.ts",
-        "persist cloud endpoint migration to config.json — stop logging on every boot",
-        "include memory_type in pushToPostgres metadata — was stripped on sync",
-        "add scope import to daemon-orchestration — satisfies customer-readiness gate",
-        "skill-refinement.ts — correct writeMemory field names + updateIdentity 3rd arg",
-        "make skill lifecycle fields optional on Behavior interface — unblocks publish",
-        "session isolation for tmux kill — block cross-scope session kills",
-        "session-scope daemon, push, capacity, and cleanup (P0 #7-#13)",
-        "add memory_type to crdt-sync MemoryRecord interface — unblocks publish",
-        "session-scope daemon, push, capacity, cleanup (P0 #7-#9, #13)",
-        "include memory_type in cloud sync push/pull + fix backfill re-sync",
-        "session-scope signal file system — prevent cross-session task/review bleed",
-        "session-scope notification routing — use row.session_scope over ambient",
-        "daemon NEVER guesses session from tmux — header-only routing",
-        "3 daemon bugs — context-full TTL override, API watchdog kill-after-3, idle-kill verify",
-        "federated recall always searches code_context + graph — count threshold was useless",
-        "make cross-repo guardrail task-aware — allow multi-repo work when task scope permits",
-        "ONE postgres — replace crm-postgres with exe-db across entire stack",
-        "smart session-scoping gate + last boot cleanup leak + triage_bug docs",
-        "add shipped_version to support triage + clean platform procedures"
+        "add writeFileSync import to config.ts"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -176,6 +176,15 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "bump v0.9.160 — cloud sync resilience + orphan reaper + auto-close guard",
+        "update release notes with 5 bug fixes from support triage",
+        "bump v0.9.159 — daemon memory cascade fix + session_scope + benchmarks",
+        "arch: customer onboarding automation — exe-os deploy-customer command",
+        "arch: Fleet Operations Roadmap — 8 phases for production safety at scale",
+        "arch: add filtered table pipeline + pre-flight deploy system to roadmap",
+        "add EXE-OS-STACK.md — complete 6-repo deployment map",
+        "cache tmux session (5 calls → 1) + offset daemon timers",
+        "cut agent boot from 4min to <30s — merge Bash blocks + parallel DB queries",
         "rename memory schema → graph across codebase",
         "unified access control — admin token + GoTrue across all services",
         "capture data pipeline spec — raw → filter → wiki + CRM projection",
@@ -191,26 +200,34 @@
         "publish v0.9.144 — ESM require() fix + reliable task signals + OAuth 2.1",
         "add MCP tool tests for message, cloud-sync, and file-copy",
         "add coverage for send_message, cloud_sync, file_copy MCP tools (Track A)",
-        "Recover MCP sessions after daemon restart",
-        "publish v0.9.143 — all fixes live",
-        "publish v0.9.142",
-        "publish v0.9.141",
-        "ops: journalctl rotation + certbot expiry alerting",
-        "revert: daemon heap back to 33% of RAM — no artificial cap",
-        "v0.9.140 publish + heap cap 4GB (was 33% unbounded)",
-        "PG-1 cross-repo entity federation design document",
-        "add lint step + automated npm publish workflow",
-        "audit: scoped SQL + package budget + TUI vendored + TODO classification"
+        "Recover MCP sessions after daemon restart"
       ],
       "migration_notes": [
         "If daemon goes down, agents will now fail instead of silently",
         "exe-daemon.ts kills old embed.pid process and cleans up"
       ]
     },
-    "0.9.157": {
-      "version": "0.9.157",
-      "date": "2026-05-28",
+    "0.9.159": {
+      "version": "0.9.159",
+      "date": "2026-05-29",
       "features": [
+        "verify-stack post-deploy checks — 8 runtime validations",
+        "preflight deploy gate + filtered schema + gateway graceful degradation",
+        "harden /exe-afk as primary monitoring tool, deprecate /loop for orchestration",
+        "add --judge-model flag to LoCoMo harness",
+        "dashboard.askexe.com — customer credits dashboard (backend + frontend)",
+        "config persistence contract — document + enforce what survives stack updates",
+        "add persona depth to identity — tone, vocabulary, response_style, communication_patterns",
+        "4 BEAM improvements — o4-mini judge, entity expansion, temporal prompts, contradiction detection",
+        "DMR 100% + BEAM 35% — full results with Claude Sonnet judge",
+        "session_scope read paths — search filter + backfill + tests",
+        "add session_scope filtering to memory read paths + MCP tools + backfill",
+        "classify prompt memories as conversation type + enrich session-end captures",
+        "add session_scope column to memories table — schema migration + all write paths",
+        "fix Codex integration + add --codex to all 4 harnesses",
+        "add checkpoint/resume support for long LoCoMo runs",
+        "add Codex GPT-5.5 judge, pre-embedding, expanded retrieval, production prompts",
+        "stack manifest 0.9.10 — all new images for customer deployment",
         "update safety + portable backups + restore",
         "complete deployment readiness — all 14 second-pass blind spots fixed",
         "production-ready stack — all 15 blind spots fixed",
@@ -218,51 +235,34 @@
         "self-improving skills — usage tracking, success counting, and refinement daemon",
         "4 retrieval improvements — query expansion, stop words, contradiction resolution, abstention",
         "competitive roadmap — serverless tier, identity depth, self-improving skills, user modeling",
-        "run database migrations before container swap in stack-update",
-        "graph auto-extract from ARCHITECTURE.md — regex-based entity/relationship extraction",
-        "migrate cloud.askexe.com → api.askexe.com as canonical endpoint",
-        "federated recall — code_context + graph fallback when memory results weak",
-        "migrate cloud.askexe.com → api.askexe.com across all src/ defaults",
-        "rolling restart in stack-update — one service at a time with health verification",
-        "DMR benchmark harness + LoCoMo improvements for v0.9.145 evaluation",
-        "Windows/WSL support — WezTerm config + WSL detection in setup wizard",
-        "queryTaskRows() consolidation — single scoped query path for all task list operations",
-        "review signal files — reliable reviewer notification on update_task(done)",
-        "Ghostty-native notifications via OSC 9 — no more Script Editor popup",
-        "device-scoped behaviors — device_id column + filter in loading",
-        "dispatch reliability — 45s boot timeout, dispatch ack signals, agent heartbeat",
-        "setup wizard headless mode + daemon health check after restart",
-        "device-scoped behaviors — add device_id column + filter on load",
-        "gateway prompt injection defense — 3-tier security hardening",
-        "add diagnostics(action=\"merge_agent_memories\") for reassigning memories across agent IDs",
-        "add task dependency tree visualization (action=dependency_tree)"
+        "run database migrations before container swap in stack-update"
       ],
       "fixes": [
-        "add scope import to prompt-submit — gate pass",
-        "add writeFileSync import to config.ts",
-        "persist cloud endpoint migration to config.json — stop logging on every boot",
-        "include memory_type in pushToPostgres metadata — was stripped on sync",
-        "add scope import to daemon-orchestration — satisfies customer-readiness gate",
-        "skill-refinement.ts — correct writeMemory field names + updateIdentity 3rd arg",
-        "make skill lifecycle fields optional on Behavior interface — unblocks publish",
-        "session isolation for tmux kill — block cross-scope session kills",
-        "session-scope daemon, push, capacity, and cleanup (P0 #7-#13)",
-        "add memory_type to crdt-sync MemoryRecord interface — unblocks publish",
-        "session-scope daemon, push, capacity, cleanup (P0 #7-#9, #13)",
-        "include memory_type in cloud sync push/pull + fix backfill re-sync",
-        "session-scope signal file system — prevent cross-session task/review bleed",
-        "session-scope notification routing — use row.session_scope over ambient",
-        "daemon NEVER guesses session from tmux — header-only routing",
-        "3 daemon bugs — context-full TTL override, API watchdog kill-after-3, idle-kill verify",
-        "federated recall always searches code_context + graph — count threshold was useless",
-        "make cross-repo guardrail task-aware — allow multi-repo work when task scope permits",
-        "ONE postgres — replace crm-postgres with exe-db across entire stack",
-        "smart session-scoping gate + last boot cleanup leak + triage_bug docs",
-        "add shipped_version to support triage + clean platform procedures",
-        "close remaining session-scoping findings from Bob's audit",
-        "close 3 more session-scoping leaks from Bob's audit (LEAK-4, LEAK-7, LEAK-8)",
-        "diagnostics check_update ENOENT + healthcheck timeout",
-        "close 8 session-scoping leaks — daemon ALS trust + review cleanup + close-task + inbox"
+        "cloud sync NOT NULL resilience — sqlSafeRequired() defaults + per-record error handling, skip bad rows instead of retry storm",
+        "auto-close temporal guard — reject commits older than task creation date, raise threshold 0.6→0.8",
+        "session_scope fallback — listTasks returns unscoped results when scoped query finds 0 after daemon restart",
+        "orphan task file cleanup safety — 24h threshold (was 1h) + ID-based fallback before deleting",
+        "blocked task escalation — writeNotification to COO when auto-wake fails 3x and marks task blocked",
+        "daemon memory cascade — prevent duplicate daemons, reap orphan hooks, cap heap",
+        "auto-inject timeout on tmux capture-pane to prevent session freeze",
+        "auto-wake crash loop — filter boot memories + circuit breaker",
+        "Codex numbered instances use baseAgentName for identity resolution",
+        "auto-chain project scope + writeNotification on needs_review",
+        "persist WhatsApp auth in Docker volume — prevent data loss on update",
+        "wake idle codex sessions on pending tasks",
+        "fix daemon MCP session heap leak",
+        "include typescript as runtime dependency",
+        "remove direct Postgres license validation — CF Worker is the only path",
+        "gateway stop_grace_period 45s — prevent SIGKILL during message drain",
+        "filter person names from FTS queries to prevent speaker-prefix pollution",
+        "DMR retrieval 20% → 100% — stop words, name filtering, speaker fix",
+        "kill idle Codex/OpenCode sessions instead of sending intercom — enables auto-wake respawn",
+        "suppress daemon auto-reconnect noise — only log after attempt 2+",
+        "remove E2EE from bug reports — support intake must be readable server-side",
+        "support API — verified encrypted bug reports work (HTTP 201)",
+        "support API accepts encrypted bug reports — prevents HTTP 400",
+        "Codex agents recheck tasks before stopping — prevents idle-with-open-tasks",
+        "P0 #13 session_scope in cleanup SELECT + P0 #6 wire review signal files"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -279,6 +279,13 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "bump v0.9.159 — daemon memory cascade fix + session_scope + benchmarks",
+        "arch: customer onboarding automation — exe-os deploy-customer command",
+        "arch: Fleet Operations Roadmap — 8 phases for production safety at scale",
+        "arch: add filtered table pipeline + pre-flight deploy system to roadmap",
+        "add EXE-OS-STACK.md — complete 6-repo deployment map",
+        "cache tmux session (5 calls → 1) + offset daemon timers",
+        "cut agent boot from 4min to <30s — merge Bash blocks + parallel DB queries",
         "rename memory schema → graph across codebase",
         "unified access control — admin token + GoTrue across all services",
         "capture data pipeline spec — raw → filter → wiki + CRM projection",
@@ -296,24 +303,19 @@
         "add coverage for send_message, cloud_sync, file_copy MCP tools (Track A)",
         "Recover MCP sessions after daemon restart",
         "publish v0.9.143 — all fixes live",
-        "publish v0.9.142",
-        "publish v0.9.141",
-        "ops: journalctl rotation + certbot expiry alerting",
-        "revert: daemon heap back to 33% of RAM — no artificial cap",
-        "v0.9.140 publish + heap cap 4GB (was 33% unbounded)",
-        "PG-1 cross-repo entity federation design document",
-        "add lint step + automated npm publish workflow",
-        "audit: scoped SQL + package budget + TUI vendored + TODO classification"
+        "publish v0.9.142"
       ],
       "migration_notes": [
         "If daemon goes down, agents will now fail instead of silently",
         "exe-daemon.ts kills old embed.pid process and cleans up"
       ]
     },
-    "0.9.156": {
-      "version": "0.9.156",
+    "0.9.158": {
+      "version": "0.9.158",
       "date": "2026-05-28",
       "features": [
+        "stack manifest 0.9.10 — all new images for customer deployment",
+        "update safety + portable backups + restore",
         "complete deployment readiness — all 14 second-pass blind spots fixed",
         "production-ready stack — all 15 blind spots fixed",
         "blocked task notification — ping dispatcher immediately on status change",
@@ -336,11 +338,13 @@
         "setup wizard headless mode + daemon health check after restart",
         "device-scoped behaviors — add device_id column + filter on load",
         "gateway prompt injection defense — 3-tier security hardening",
-        "add diagnostics(action=\"merge_agent_memories\") for reassigning memories across agent IDs",
-        "add task dependency tree visualization (action=dependency_tree)",
-        "graceful COO auto-relaunch after context-full exit"
+        "add diagnostics(action=\"merge_agent_memories\") for reassigning memories across agent IDs"
       ],
       "fixes": [
+        "support API — verified encrypted bug reports work (HTTP 201)",
+        "support API accepts encrypted bug reports — prevents HTTP 400",
+        "Codex agents recheck tasks before stopping — prevents idle-with-open-tasks",
+        "P0 #13 session_scope in cleanup SELECT + P0 #6 wire review signal files",
         "add scope import to prompt-submit — gate pass",
         "add writeFileSync import to config.ts",
         "persist cloud endpoint migration to config.json — stop logging on every boot",
@@ -361,11 +365,7 @@
         "make cross-repo guardrail task-aware — allow multi-repo work when task scope permits",
         "ONE postgres — replace crm-postgres with exe-db across entire stack",
         "smart session-scoping gate + last boot cleanup leak + triage_bug docs",
-        "add shipped_version to support triage + clean platform procedures",
-        "close remaining session-scoping findings from Bob's audit",
-        "close 3 more session-scoping leaks from Bob's audit (LEAK-4, LEAK-7, LEAK-8)",
-        "diagnostics check_update ENOENT + healthcheck timeout",
-        "close 8 session-scoping leaks — daemon ALS trust + review cleanup + close-task + inbox"
+        "add shipped_version to support triage + clean platform procedures"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -413,10 +413,12 @@
         "exe-daemon.ts kills old embed.pid process and cleans up"
       ]
     },
-    "0.9.155": {
-      "version": "0.9.155",
+    "0.9.157": {
+      "version": "0.9.157",
       "date": "2026-05-28",
       "features": [
+        "update safety + portable backups + restore",
+        "complete deployment readiness — all 14 second-pass blind spots fixed",
         "production-ready stack — all 15 blind spots fixed",
         "blocked task notification — ping dispatcher immediately on status change",
         "self-improving skills — usage tracking, success counting, and refinement daemon",
@@ -439,9 +441,7 @@
         "device-scoped behaviors — add device_id column + filter on load",
         "gateway prompt injection defense — 3-tier security hardening",
         "add diagnostics(action=\"merge_agent_memories\") for reassigning memories across agent IDs",
-        "add task dependency tree visualization (action=dependency_tree)",
-        "graceful COO auto-relaunch after context-full exit",
-        "desktop push notifications on task completion (macOS/Linux)"
+        "add task dependency tree visualization (action=dependency_tree)"
       ],
       "fixes": [
         "add scope import to prompt-submit — gate pass",