@askexenow/exe-os 0.9.162 → 0.9.164

package/dist/bin/deferred-daemon-restart.js

@@ -5,12 +5,32 @@ import {
 import "../chunk-MLKGABMK.js";
 
 // src/bin/deferred-daemon-restart.ts
-import { existsSync, openSync, closeSync } from "fs";
+import { existsSync, openSync, closeSync, writeFileSync, unlinkSync } from "fs";
 import { spawn, execSync } from "child_process";
 import path from "path";
 import os from "os";
 var EXE_DIR = path.join(os.homedir(), ".exe-os");
 var DAEMON_PORT = 48739;
+var DEFERRED_RESTART_PID_PATH = path.join(EXE_DIR, "deferred-restart.pid");
+try {
+  writeFileSync(DEFERRED_RESTART_PID_PATH, String(process.pid));
+} catch {
+}
+function cleanupPid() {
+  try {
+    unlinkSync(DEFERRED_RESTART_PID_PATH);
+  } catch {
+  }
+}
+process.on("exit", cleanupPid);
+process.on("SIGTERM", () => {
+  cleanupPid();
+  process.exit(0);
+});
+process.on("SIGINT", () => {
+  cleanupPid();
+  process.exit(0);
+});
 var DELAY_MS = parseInt(process.env.EXE_DEFERRED_DELAY_MS ?? "3000", 10);
 await new Promise((resolve) => setTimeout(resolve, DELAY_MS));
 process.stderr.write("[deferred-restart] Starting daemon restart...\n");

package/dist/bin/exe-forget.js

@@ -4,7 +4,7 @@ import {
 } from "../chunk-ZKALIEHB.js";
 import {
   lightweightSearch
-} from "../chunk-FPBEJ2JV.js";
+} from "../chunk-R6GFTKG5.js";
 import "../chunk-H3KFLVPW.js";
 import "../chunk-2M3CULM3.js";
 import "../chunk-MP2AFCGL.js";

package/dist/bin/exe-search.js

@@ -2,7 +2,7 @@
 import {
   hybridSearch,
   lightweightSearch
-} from "../chunk-FPBEJ2JV.js";
+} from "../chunk-R6GFTKG5.js";
 import {
   initStore
 } from "../chunk-H3KFLVPW.js";

package/dist/bin/install.js

@@ -27,7 +27,7 @@ import "../chunk-LYH5HE24.js";
 import "../chunk-MLKGABMK.js";
 
 // src/bin/install.ts
-import { existsSync, openSync, closeSync } from "fs";
+import { existsSync, openSync, closeSync, writeFileSync, readFileSync, unlinkSync, statSync } from "fs";
 import { spawn, execSync } from "child_process";
 import path from "path";
 import os from "os";
@@ -85,7 +85,35 @@ function spawnDaemonInline(pkgRoot) {
   }
   process.stderr.write(healthy ? "exe-os: daemon restarted and healthy\n" : "exe-os: daemon spawned but health check pending\n");
 }
+var DEFERRED_RESTART_PID_PATH = path.join(EXE_DIR, "deferred-restart.pid");
+function isDeferredRestartRunning() {
+  try {
+    if (!existsSync(DEFERRED_RESTART_PID_PATH)) return false;
+    const pid = parseInt(readFileSync(DEFERRED_RESTART_PID_PATH, "utf8").trim(), 10);
+    if (isNaN(pid) || pid <= 0) return false;
+    const age = Date.now() - statSync(DEFERRED_RESTART_PID_PATH).mtimeMs;
+    if (age > 6e4) {
+      try {
+        unlinkSync(DEFERRED_RESTART_PID_PATH);
+      } catch {
+      }
+      return false;
+    }
+    process.kill(pid, 0);
+    return true;
+  } catch {
+    try {
+      unlinkSync(DEFERRED_RESTART_PID_PATH);
+    } catch {
+    }
+    return false;
+  }
+}
 function restartDaemon() {
+  if (isDeferredRestartRunning()) {
+    process.stderr.write("exe-os: deferred restart already running \u2014 skipping duplicate\n");
+    return;
+  }
   updateMcpVersionMarker();
   const pkgRoot = resolvePackageRoot();
   const deferredScript = path.join(pkgRoot, "dist", "bin", "deferred-daemon-restart.js");
@@ -107,6 +135,12 @@ function restartDaemon() {
     env: { ...process.env }
   });
   child.unref();
+  if (child.pid) {
+    try {
+      writeFileSync(DEFERRED_RESTART_PID_PATH, String(child.pid));
+    } catch {
+    }
+  }
   if (typeof stderrFd === "number") {
     try {
       closeSync(stderrFd);

package/dist/{catchup-brief-MTPBB3KF.js → catchup-brief-VMGUUTZ4.js}

@@ -1,6 +1,6 @@
 import {
   lightweightSearch
-} from "./chunk-FPBEJ2JV.js";
+} from "./chunk-R6GFTKG5.js";
 import "./chunk-H3KFLVPW.js";
 import "./chunk-2M3CULM3.js";
 import {

package/dist/{chunk-A4NCK74X.js → chunk-MM3XXKC5.js}

@@ -172,8 +172,9 @@ import {
 } from "./chunk-LHLEFNFW.js";
 import {
   hybridSearch,
+  lastSearchDegraded,
   recentRecords
-} from "./chunk-FPBEJ2JV.js";
+} from "./chunk-R6GFTKG5.js";
 import {
   getActiveAgent
 } from "./chunk-5G7BZIY3.js";
@@ -437,7 +438,7 @@ function registerRecallMyMemory(server) {
             results = await recentRecords(agentId, searchOptions, limit);
           }
         }
-        const FEDERATION_THRESHOLD = 3;
+        const FEDERATION_THRESHOLD = 5;
         let federatedCount = 0;
         if (!recent && query && results.length < FEDERATION_THRESHOLD) {
           try {
@@ -463,21 +464,25 @@ ${cr.content}`,
           try {
             const { getClient: getClient2 } = await import("./lib/database.js");
             const client = getClient2();
+            const terms = query.split(/\s+/).filter((t) => t.length > 2).slice(0, 6);
+            const likeConditions = terms.map(() => "(e.name LIKE ? OR e.properties LIKE ? OR r.type LIKE ?)").join(" OR ");
+            const likeArgs = terms.flatMap((t) => [`%${t}%`, `%${t}%`, `%${t}%`]);
             const graphResults = await Promise.race([
               client.execute({
-                sql: `SELECT e.name, e.type as entity_type, e.properties as description, r.type as relationship_type, r2.name as related_to
+                sql: `SELECT DISTINCT e.name, e.type as entity_type, e.properties as description,
+                             r.type as relationship_type, r2.name as related_to, r2.type as related_type
                       FROM entities e
                       LEFT JOIN relationships r ON e.id = r.source_entity_id
                       LEFT JOIN entities r2 ON r.target_entity_id = r2.id
-                      WHERE e.name LIKE ? OR e.properties LIKE ?
-                      LIMIT 5`,
-                args: [`%${query.slice(0, 50)}%`, `%${query.slice(0, 50)}%`]
+                      WHERE ${likeConditions || "1=0"}
+                      LIMIT 10`,
+                args: likeArgs
               }),
-              new Promise((_, rej) => setTimeout(() => rej(new Error("timeout")), 2e3))
+              new Promise((_, rej) => setTimeout(() => rej(new Error("timeout")), 3e3))
             ]);
             for (let i = 0; i < (graphResults.rows?.length ?? 0); i++) {
               const gr = graphResults.rows[i];
-              const relPart = gr.related_to ? ` \u2192 ${gr.relationship_type} \u2192 ${gr.related_to}` : "";
+              const relPart = gr.related_to ? ` \u2192 ${gr.relationship_type} \u2192 ${gr.related_to} (${gr.related_type})` : "";
               results.push({
                 id: `federated-graph-${results.length}`,
                 raw_text: `[graph] ${gr.name} (${gr.entity_type})${relPart}
@@ -517,13 +522,14 @@ ${gr.description ?? ""}`,
         const federatedNote = federatedCount > 0 ? `
 
 [Federated recall: ${federatedCount} result(s) from code_context/graph (memory had < ${FEDERATION_THRESHOLD} matches)]` : "";
+        const degradedWarning = !recent && lastSearchDegraded ? '\n\n\u26A0\uFE0F DEGRADED SEARCH: Embedding daemon is offline \u2014 using keyword matching only (no semantic search). Results may be incomplete. Try graph(action="query_relationships") or graph(action="entity_neighbors") for structured/relational queries.' : "";
         return {
           content: [
             {
               type: "text",
               text: `Found ${results.length} memories:
 
-${formatted}${federatedNote}`
+${formatted}${federatedNote}${degradedWarning}`
             }
           ]
         };

package/dist/{chunk-FPBEJ2JV.js → chunk-R6GFTKG5.js}

@@ -10,6 +10,7 @@ import {
 
 // src/lib/hybrid-search.ts
 var RRF_K = 60;
+var lastSearchDegraded = false;
 var _cardinalityCache = /* @__PURE__ */ new Map();
 var CARDINALITY_TTL_MS = 6e4;
 async function getCachedCardinality(agentId) {
@@ -173,7 +174,9 @@ async function hybridSearch(queryText, agentId, options) {
   try {
     const { embed } = await import("./lib/embedder.js");
     queryVector = await embed(effectiveQuery);
+    lastSearchDegraded = false;
   } catch {
+    lastSearchDegraded = true;
     if (!process.env.VITEST) {
       process.stderr.write("[hybrid-search] Embed daemon unavailable \u2014 FTS-only mode\n");
     }
@@ -966,6 +969,7 @@ async function trajectoryBypass(queryText, agentId, options, limit) {
 }
 
 export {
+  lastSearchDegraded,
   hybridSearch,
   estimateCardinality,
   rrfMerge,

package/dist/hooks/error-recall.js

@@ -4,7 +4,7 @@ import {
 import {
   hybridSearch,
   lightweightSearch
-} from "../chunk-FPBEJ2JV.js";
+} from "../chunk-R6GFTKG5.js";
 import "../chunk-SH45SJQW.js";
 import {
   getActiveAgent

package/dist/hooks/prompt-submit.js

@@ -5,7 +5,7 @@ import "../chunk-YSU7JB7H.js";
 import {
   hybridSearch,
   lightweightSearch
-} from "../chunk-FPBEJ2JV.js";
+} from "../chunk-R6GFTKG5.js";
 import "../chunk-SH45SJQW.js";
 import {
   getActiveAgent

package/dist/hooks/session-start.js

@@ -97,7 +97,7 @@ process.stdin.on("end", async () => {
       query = `last actions on ${projectName}`;
       header = "## Resuming Session\nHere's where you left off:";
       try {
-        const { buildCatchupBrief } = await import("../catchup-brief-MTPBB3KF.js");
+        const { buildCatchupBrief } = await import("../catchup-brief-VMGUUTZ4.js");
         const brief = await buildCatchupBrief(
           agentId,
           projectName,

package/dist/lib/exe-daemon.js

@@ -2302,16 +2302,26 @@ var CLOUD_SYNC_CIRCUIT_BREAK = 10;
 var _cloudSyncConsecutiveFailures = 0;
 var _cloudSyncBackoffMs = 0;
 var _cloudSyncPaused = false;
+var _cloudSyncPausedAt = 0;
+var CLOUD_SYNC_AUTO_RECOVERY_MS = 30 * 6e4;
 function startCloudSyncTimer() {
   const tick = async () => {
     fired("cloud_sync");
     if (_cloudSyncPaused) {
-      if (_cloudSyncConsecutiveFailures > 0 && _cloudSyncConsecutiveFailures % 20 === 0) {
-        process.stderr.write(`[exed] Cloud sync still paused after ${_cloudSyncConsecutiveFailures} failures. Server may be unreachable.
+      if (Date.now() - _cloudSyncPausedAt > CLOUD_SYNC_AUTO_RECOVERY_MS) {
+        process.stderr.write(`[exed] Cloud sync auto-recovery: retrying after ${Math.round(CLOUD_SYNC_AUTO_RECOVERY_MS / 6e4)}m pause
 `);
+        _cloudSyncPaused = false;
+        _cloudSyncConsecutiveFailures = 0;
+        _cloudSyncBackoffMs = 0;
+      } else {
+        if (_cloudSyncConsecutiveFailures > 0 && _cloudSyncConsecutiveFailures % 20 === 0) {
+          process.stderr.write(`[exed] Cloud sync still paused after ${_cloudSyncConsecutiveFailures} failures (auto-retry in ${Math.round((CLOUD_SYNC_AUTO_RECOVERY_MS - (Date.now() - _cloudSyncPausedAt)) / 6e4)}m)
+`);
+        }
+        _cloudSyncConsecutiveFailures++;
+        return;
       }
-      _cloudSyncConsecutiveFailures++;
-      return;
     }
     if (_cloudSyncBackoffMs > 0) {
       _cloudSyncBackoffMs = Math.max(0, _cloudSyncBackoffMs - CLOUD_SYNC_INTERVAL_MS);
@@ -2349,6 +2359,7 @@ function startCloudSyncTimer() {
       );
       if (_cloudSyncConsecutiveFailures >= CLOUD_SYNC_CIRCUIT_BREAK) {
         _cloudSyncPaused = true;
+        _cloudSyncPausedAt = Date.now();
         process.stderr.write(
           `[exed] Cloud sync PAUSED after ${CLOUD_SYNC_CIRCUIT_BREAK} consecutive failures. Last error: ${msg}. Will retry when daemon restarts or /exe-cloud sync is run manually.
 `

package/dist/lib/hybrid-search.js

@@ -1,11 +1,12 @@
 import {
   estimateCardinality,
   hybridSearch,
+  lastSearchDegraded,
   lightweightSearch,
   recentRecords,
   rrfMerge,
   rrfMergeMulti
-} from "../chunk-FPBEJ2JV.js";
+} from "../chunk-R6GFTKG5.js";
 import "../chunk-H3KFLVPW.js";
 import "../chunk-2M3CULM3.js";
 import "../chunk-MP2AFCGL.js";
@@ -19,6 +20,7 @@ import "../chunk-MLKGABMK.js";
 export {
   estimateCardinality,
   hybridSearch,
+  lastSearchDegraded,
   lightweightSearch,
   recentRecords,
   rrfMerge,

package/dist/mcp/register-tools.js

@@ -1,6 +1,6 @@
 import {
   registerAllTools
-} from "../chunk-A4NCK74X.js";
+} from "../chunk-MM3XXKC5.js";
 import "../chunk-RLHQMWLV.js";
 import "../chunk-ESRI7MFI.js";
 import "../chunk-PLNYW6PA.js";
@@ -52,7 +52,7 @@ import "../chunk-T5YT64SZ.js";
 import "../chunk-MPCICOVG.js";
 import "../chunk-ZKALIEHB.js";
 import "../chunk-LHLEFNFW.js";
-import "../chunk-FPBEJ2JV.js";
+import "../chunk-R6GFTKG5.js";
 import "../chunk-5G7BZIY3.js";
 import "../chunk-G4FDG3LK.js";
 import "../chunk-CMFLJNP6.js";

package/dist/mcp/server.js

@@ -3,7 +3,7 @@ import {
 } from "../chunk-V4TZI6EO.js";
 import {
   registerAllTools
-} from "../chunk-A4NCK74X.js";
+} from "../chunk-MM3XXKC5.js";
 import "../chunk-RLHQMWLV.js";
 import "../chunk-ESRI7MFI.js";
 import {
@@ -62,7 +62,7 @@ import "../chunk-T5YT64SZ.js";
 import "../chunk-MPCICOVG.js";
 import "../chunk-ZKALIEHB.js";
 import "../chunk-LHLEFNFW.js";
-import "../chunk-FPBEJ2JV.js";
+import "../chunk-R6GFTKG5.js";
 import "../chunk-5G7BZIY3.js";
 import "../chunk-G4FDG3LK.js";
 import "../chunk-CMFLJNP6.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.162",
+  "version": "0.9.164",
   "description": "AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",

package/release-notes.json

@@ -1,8 +1,8 @@
 {
-  "current": "0.9.162",
+  "current": "0.9.164",
   "notes": {
-    "0.9.162": {
-      "version": "0.9.162",
+    "0.9.164": {
+      "version": "0.9.164",
       "date": "2026-05-30",
       "features": [
         "add worktree reaper daemon job to prune orphaned agent worktrees",
@@ -104,8 +104,8 @@
         "exe-daemon.ts kills old embed.pid process and cleans up"
       ]
     },
-    "0.9.161": {
-      "version": "0.9.161",
+    "0.9.163": {
+      "version": "0.9.163",
       "date": "2026-05-30",
       "features": [
         "add worktree reaper daemon job to prune orphaned agent worktrees",
@@ -135,6 +135,7 @@
         "blocked task notification — ping dispatcher immediately on status change"
       ],
       "fixes": [
+        "zombie reaper must never kill TTY-attached sessions + death log",
         "update readiness gate to check daemon-restart-orchestrator",
         "resolve TS errors blocking publish — unused import + undefined row",
         "zombie agent reaper + deferred daemon restart (OOM crash fix)",
@@ -158,8 +159,7 @@
         "DMR retrieval 20% → 100% — stop words, name filtering, speaker fix",
         "kill idle Codex/OpenCode sessions instead of sending intercom — enables auto-wake respawn",
         "suppress daemon auto-reconnect noise — only log after attempt 2+",
-        "remove E2EE from bug reports — support intake must be readable server-side",
-        "support API — verified encrypted bug reports work (HTTP 201)"
+        "remove E2EE from bug reports — support intake must be readable server-side"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -207,10 +207,12 @@
         "exe-daemon.ts kills old embed.pid process and cleans up"
       ]
     },
-    "0.9.160": {
-      "version": "0.9.160",
+    "0.9.162": {
+      "version": "0.9.162",
       "date": "2026-05-30",
       "features": [
+        "add worktree reaper daemon job to prune orphaned agent worktrees",
+        "add pre-flight gates to close_task — status gate, worktree check, commit recency",
         "add wiki document ingestion via API for embedding pipeline",
         "add filtered.* projection targets to projection worker",
         "verify-stack post-deploy checks — 8 runtime validations",
@@ -233,11 +235,15 @@
         "update safety + portable backups + restore",
         "complete deployment readiness — all 14 second-pass blind spots fixed",
         "production-ready stack — all 15 blind spots fixed",
-        "blocked task notification — ping dispatcher immediately on status change",
-        "self-improving skills — usage tracking, success counting, and refinement daemon",
-        "4 retrieval improvements — query expansion, stop words, contradiction resolution, abstention"
+        "blocked task notification — ping dispatcher immediately on status change"
       ],
       "fixes": [
+        "zombie reaper must never kill TTY-attached sessions + death log",
+        "update readiness gate to check daemon-restart-orchestrator",
+        "resolve TS errors blocking publish — unused import + undefined row",
+        "zombie agent reaper + deferred daemon restart (OOM crash fix)",
+        "idle-kill now reaps Codex/OpenCode sessions (bug 47d1e446)",
+        "change orphaned task terminal state from blocked → needs_review",
         "auto-close temporal guard + session_scope fallback + orphan cleanup safety",
         "cloud sync skip-bad-rows + age-based orphan hook reaper",
         "clean unused imports + publish gate fixes for v0.9.159",
@@ -256,13 +262,7 @@
         "DMR retrieval 20% → 100% — stop words, name filtering, speaker fix",
         "kill idle Codex/OpenCode sessions instead of sending intercom — enables auto-wake respawn",
         "suppress daemon auto-reconnect noise — only log after attempt 2+",
-        "remove E2EE from bug reports — support intake must be readable server-side",
-        "support API — verified encrypted bug reports work (HTTP 201)",
-        "support API accepts encrypted bug reports — prevents HTTP 400",
-        "Codex agents recheck tasks before stopping — prevents idle-with-open-tasks",
-        "P0 #13 session_scope in cleanup SELECT + P0 #6 wire review signal files",
-        "add scope import to prompt-submit — gate pass",
-        "add writeFileSync import to config.ts"
+        "remove E2EE from bug reports — support intake must be readable server-side"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -310,10 +310,14 @@
         "exe-daemon.ts kills old embed.pid process and cleans up"
       ]
     },
-    "0.9.159": {
-      "version": "0.9.159",
-      "date": "2026-05-29",
+    "0.9.161": {
+      "version": "0.9.161",
+      "date": "2026-05-30",
       "features": [
+        "add worktree reaper daemon job to prune orphaned agent worktrees",
+        "add pre-flight gates to close_task — status gate, worktree check, commit recency",
+        "add wiki document ingestion via API for embedding pipeline",
+        "add filtered.* projection targets to projection worker",
         "verify-stack post-deploy checks — 8 runtime validations",
         "preflight deploy gate + filtered schema + gateway graceful degradation",
         "harden /exe-afk as primary monitoring tool, deprecate /loop for orchestration",
@@ -334,18 +338,17 @@
         "update safety + portable backups + restore",
         "complete deployment readiness — all 14 second-pass blind spots fixed",
         "production-ready stack — all 15 blind spots fixed",
-        "blocked task notification — ping dispatcher immediately on status change",
-        "self-improving skills — usage tracking, success counting, and refinement daemon",
-        "4 retrieval improvements — query expansion, stop words, contradiction resolution, abstention",
-        "competitive roadmap — serverless tier, identity depth, self-improving skills, user modeling",
-        "run database migrations before container swap in stack-update"
+        "blocked task notification — ping dispatcher immediately on status change"
       ],
       "fixes": [
-        "cloud sync NOT NULL resilience — sqlSafeRequired() defaults + per-record error handling, skip bad rows instead of retry storm",
-        "auto-close temporal guard — reject commits older than task creation date, raise threshold 0.6→0.8",
-        "session_scope fallback — listTasks returns unscoped results when scoped query finds 0 after daemon restart",
-        "orphan task file cleanup safety — 24h threshold (was 1h) + ID-based fallback before deleting",
-        "blocked task escalation — writeNotification to COO when auto-wake fails 3x and marks task blocked",
+        "update readiness gate to check daemon-restart-orchestrator",
+        "resolve TS errors blocking publish — unused import + undefined row",
+        "zombie agent reaper + deferred daemon restart (OOM crash fix)",
+        "idle-kill now reaps Codex/OpenCode sessions (bug 47d1e446)",
+        "change orphaned task terminal state from blocked → needs_review",
+        "auto-close temporal guard + session_scope fallback + orphan cleanup safety",
+        "cloud sync skip-bad-rows + age-based orphan hook reaper",
+        "clean unused imports + publish gate fixes for v0.9.159",
         "daemon memory cascade — prevent duplicate daemons, reap orphan hooks, cap heap",
         "auto-inject timeout on tmux capture-pane to prevent session freeze",
         "auto-wake crash loop — filter boot memories + circuit breaker",
@@ -362,10 +365,7 @@
         "kill idle Codex/OpenCode sessions instead of sending intercom — enables auto-wake respawn",
         "suppress daemon auto-reconnect noise — only log after attempt 2+",
         "remove E2EE from bug reports — support intake must be readable server-side",
-        "support API — verified encrypted bug reports work (HTTP 201)",
-        "support API accepts encrypted bug reports — prevents HTTP 400",
-        "Codex agents recheck tasks before stopping — prevents idle-with-open-tasks",
-        "P0 #13 session_scope in cleanup SELECT + P0 #6 wire review signal files"
+        "support API — verified encrypted bug reports work (HTTP 201)"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -382,6 +382,8 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "bump v0.9.160 — cloud sync resilience + orphan reaper + auto-close guard",
+        "update release notes with 5 bug fixes from support triage",
         "bump v0.9.159 — daemon memory cascade fix + session_scope + benchmarks",
         "arch: customer onboarding automation — exe-os deploy-customer command",
         "arch: Fleet Operations Roadmap — 8 phases for production safety at scale",
@@ -404,71 +406,69 @@
         "publish v0.9.144 — ESM require() fix + reliable task signals + OAuth 2.1",
         "add MCP tool tests for message, cloud-sync, and file-copy",
         "add coverage for send_message, cloud_sync, file_copy MCP tools (Track A)",
-        "Recover MCP sessions after daemon restart",
-        "publish v0.9.143 — all fixes live",
-        "publish v0.9.142"
+        "Recover MCP sessions after daemon restart"
       ],
       "migration_notes": [
         "If daemon goes down, agents will now fail instead of silently",
         "exe-daemon.ts kills old embed.pid process and cleans up"
       ]
     },
-    "0.9.158": {
-      "version": "0.9.158",
-      "date": "2026-05-28",
+    "0.9.160": {
+      "version": "0.9.160",
+      "date": "2026-05-30",
       "features": [
+        "add wiki document ingestion via API for embedding pipeline",
+        "add filtered.* projection targets to projection worker",
+        "verify-stack post-deploy checks — 8 runtime validations",
+        "preflight deploy gate + filtered schema + gateway graceful degradation",
+        "harden /exe-afk as primary monitoring tool, deprecate /loop for orchestration",
+        "add --judge-model flag to LoCoMo harness",
+        "dashboard.askexe.com — customer credits dashboard (backend + frontend)",
+        "config persistence contract — document + enforce what survives stack updates",
+        "add persona depth to identity — tone, vocabulary, response_style, communication_patterns",
+        "4 BEAM improvements — o4-mini judge, entity expansion, temporal prompts, contradiction detection",
+        "DMR 100% + BEAM 35% — full results with Claude Sonnet judge",
+        "session_scope read paths — search filter + backfill + tests",
+        "add session_scope filtering to memory read paths + MCP tools + backfill",
+        "classify prompt memories as conversation type + enrich session-end captures",
+        "add session_scope column to memories table — schema migration + all write paths",
+        "fix Codex integration + add --codex to all 4 harnesses",
+        "add checkpoint/resume support for long LoCoMo runs",
+        "add Codex GPT-5.5 judge, pre-embedding, expanded retrieval, production prompts",
         "stack manifest 0.9.10 — all new images for customer deployment",
         "update safety + portable backups + restore",
         "complete deployment readiness — all 14 second-pass blind spots fixed",
         "production-ready stack — all 15 blind spots fixed",
         "blocked task notification — ping dispatcher immediately on status change",
         "self-improving skills — usage tracking, success counting, and refinement daemon",
-        "4 retrieval improvements — query expansion, stop words, contradiction resolution, abstention",
-        "competitive roadmap — serverless tier, identity depth, self-improving skills, user modeling",
-        "run database migrations before container swap in stack-update",
-        "graph auto-extract from ARCHITECTURE.md — regex-based entity/relationship extraction",
-        "migrate cloud.askexe.com → api.askexe.com as canonical endpoint",
-        "federated recall — code_context + graph fallback when memory results weak",
-        "migrate cloud.askexe.com → api.askexe.com across all src/ defaults",
-        "rolling restart in stack-update — one service at a time with health verification",
-        "DMR benchmark harness + LoCoMo improvements for v0.9.145 evaluation",
-        "Windows/WSL support — WezTerm config + WSL detection in setup wizard",
-        "queryTaskRows() consolidation — single scoped query path for all task list operations",
-        "review signal files — reliable reviewer notification on update_task(done)",
-        "Ghostty-native notifications via OSC 9 — no more Script Editor popup",
-        "device-scoped behaviors — device_id column + filter in loading",
-        "dispatch reliability — 45s boot timeout, dispatch ack signals, agent heartbeat",
-        "setup wizard headless mode + daemon health check after restart",
-        "device-scoped behaviors — add device_id column + filter on load",
-        "gateway prompt injection defense — 3-tier security hardening",
-        "add diagnostics(action=\"merge_agent_memories\") for reassigning memories across agent IDs"
+        "4 retrieval improvements — query expansion, stop words, contradiction resolution, abstention"
       ],
       "fixes": [
+        "auto-close temporal guard + session_scope fallback + orphan cleanup safety",
+        "cloud sync skip-bad-rows + age-based orphan hook reaper",
+        "clean unused imports + publish gate fixes for v0.9.159",
+        "daemon memory cascade — prevent duplicate daemons, reap orphan hooks, cap heap",
+        "auto-inject timeout on tmux capture-pane to prevent session freeze",
+        "auto-wake crash loop — filter boot memories + circuit breaker",
+        "Codex numbered instances use baseAgentName for identity resolution",
+        "auto-chain project scope + writeNotification on needs_review",
+        "persist WhatsApp auth in Docker volume — prevent data loss on update",
+        "wake idle codex sessions on pending tasks",
+        "fix daemon MCP session heap leak",
+        "include typescript as runtime dependency",
+        "remove direct Postgres license validation — CF Worker is the only path",
+        "gateway stop_grace_period 45s — prevent SIGKILL during message drain",
+        "filter person names from FTS queries to prevent speaker-prefix pollution",
+        "DMR retrieval 20% → 100% — stop words, name filtering, speaker fix",
+        "kill idle Codex/OpenCode sessions instead of sending intercom — enables auto-wake respawn",
+        "suppress daemon auto-reconnect noise — only log after attempt 2+",
+        "remove E2EE from bug reports — support intake must be readable server-side",
         "support API — verified encrypted bug reports work (HTTP 201)",
         "support API accepts encrypted bug reports — prevents HTTP 400",
         "Codex agents recheck tasks before stopping — prevents idle-with-open-tasks",
         "P0 #13 session_scope in cleanup SELECT + P0 #6 wire review signal files",
         "add scope import to prompt-submit — gate pass",
-        "add writeFileSync import to config.ts",
-        "persist cloud endpoint migration to config.json — stop logging on every boot",
-        "include memory_type in pushToPostgres metadata — was stripped on sync",
-        "add scope import to daemon-orchestration — satisfies customer-readiness gate",
-        "skill-refinement.ts — correct writeMemory field names + updateIdentity 3rd arg",
-        "make skill lifecycle fields optional on Behavior interface — unblocks publish",
-        "session isolation for tmux kill — block cross-scope session kills",
-        "session-scope daemon, push, capacity, and cleanup (P0 #7-#13)",
-        "add memory_type to crdt-sync MemoryRecord interface — unblocks publish",
-        "session-scope daemon, push, capacity, cleanup (P0 #7-#9, #13)",
-        "include memory_type in cloud sync push/pull + fix backfill re-sync",
-        "session-scope signal file system — prevent cross-session task/review bleed",
-        "session-scope notification routing — use row.session_scope over ambient",
-        "daemon NEVER guesses session from tmux — header-only routing",
-        "3 daemon bugs — context-full TTL override, API watchdog kill-after-3, idle-kill verify",
-        "federated recall always searches code_context + graph — count threshold was useless",
-        "make cross-repo guardrail task-aware — allow multi-repo work when task scope permits",
-        "ONE postgres — replace crm-postgres with exe-db across entire stack",
-        "smart session-scoping gate + last boot cleanup leak + triage_bug docs",
-        "add shipped_version to support triage + clean platform procedures"
+        "add writeFileSync import to config.ts"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -485,6 +485,15 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "bump v0.9.160 — cloud sync resilience + orphan reaper + auto-close guard",
+        "update release notes with 5 bug fixes from support triage",
+        "bump v0.9.159 — daemon memory cascade fix + session_scope + benchmarks",
+        "arch: customer onboarding automation — exe-os deploy-customer command",
+        "arch: Fleet Operations Roadmap — 8 phases for production safety at scale",
+        "arch: add filtered table pipeline + pre-flight deploy system to roadmap",
+        "add EXE-OS-STACK.md — complete 6-repo deployment map",
+        "cache tmux session (5 calls → 1) + offset daemon timers",
+        "cut agent boot from 4min to <30s — merge Bash blocks + parallel DB queries",
         "rename memory schema → graph across codebase",
         "unified access control — admin token + GoTrue across all services",
         "capture data pipeline spec — raw → filter → wiki + CRM projection",
@@ -500,16 +509,7 @@
         "publish v0.9.144 — ESM require() fix + reliable task signals + OAuth 2.1",
         "add MCP tool tests for message, cloud-sync, and file-copy",
         "add coverage for send_message, cloud_sync, file_copy MCP tools (Track A)",
-        "Recover MCP sessions after daemon restart",
-        "publish v0.9.143 — all fixes live",
-        "publish v0.9.142",
-        "publish v0.9.141",
-        "ops: journalctl rotation + certbot expiry alerting",
-        "revert: daemon heap back to 33% of RAM — no artificial cap",
-        "v0.9.140 publish + heap cap 4GB (was 33% unbounded)",
-        "PG-1 cross-repo entity federation design document",
-        "add lint step + automated npm publish workflow",
-        "audit: scoped SQL + package budget + TUI vendored + TODO classification"
+        "Recover MCP sessions after daemon restart"
       ],
       "migration_notes": [
         "If daemon goes down, agents will now fail instead of silently",