@askexenow/exe-os 0.9.166 → 0.9.167

package/release-notes.json

@@ -1,10 +1,27 @@
 {
-  "current": "0.9.166",
+  "current": "0.9.162",
   "notes": {
-    "0.9.166": {
-      "version": "0.9.166",
-      "date": "2026-05-30",
+    "0.9.162": {
+      "version": "0.9.162",
+      "date": "2026-06-02",
       "features": [
+        "add daily-summary CLI entry point + enable tsup build",
+        "add daemon observability platform procedure",
+        "add retrieval architecture platform procedure for 8-16GB machines",
+        "graceful shutdown warning via intercom 90s before idle kill",
+        "upload pre-update snapshot to R2 before every stack-update",
+        "encrypted daily VPS backups with R2 cloud upload",
+        "conversation history import — parser + MCP tool + CLI",
+        "add vps-backup + vps-health-gate scripts with stack-update integration",
+        "add update_bug_report + update_feature_request MCP tools",
+        "VPS guardrails — Postgres backup cron + post-deploy health gate",
+        "co-occurrence edges + graph backfill script",
+        "write-time entity/relationship extraction from memory text",
+        "parallel retrieval (FTS+graph+embed) with _source attribution",
+        "instance_id binding for parallel workers",
+        "dual-column FTS5 with keywords + BM25 weighted search",
+        "dual-column FTS5 with keyword extraction for first-class keyword search",
+        "keyword-enriched consolidation + backfill script (#28)",
         "add worktree reaper daemon job to prune orphaned agent worktrees",
         "add pre-flight gates to close_task — status gate, worktree check, commit recency",
         "add wiki document ingestion via API for embedding pipeline",
@@ -12,51 +29,34 @@
         "verify-stack post-deploy checks — 8 runtime validations",
         "preflight deploy gate + filtered schema + gateway graceful degradation",
         "harden /exe-afk as primary monitoring tool, deprecate /loop for orchestration",
-        "add --judge-model flag to LoCoMo harness",
-        "dashboard.askexe.com — customer credits dashboard (backend + frontend)",
-        "config persistence contract — document + enforce what survives stack updates",
-        "add persona depth to identity — tone, vocabulary, response_style, communication_patterns",
-        "4 BEAM improvements — o4-mini judge, entity expansion, temporal prompts, contradiction detection",
-        "DMR 100% + BEAM 35% — full results with Claude Sonnet judge",
-        "session_scope read paths — search filter + backfill + tests",
-        "add session_scope filtering to memory read paths + MCP tools + backfill",
-        "classify prompt memories as conversation type + enrich session-end captures",
-        "add session_scope column to memories table — schema migration + all write paths",
-        "fix Codex integration + add --codex to all 4 harnesses",
-        "add checkpoint/resume support for long LoCoMo runs",
-        "add Codex GPT-5.5 judge, pre-embedding, expanded retrieval, production prompts",
-        "stack manifest 0.9.10 — all new images for customer deployment",
-        "update safety + portable backups + restore",
-        "complete deployment readiness — all 14 second-pass blind spots fixed",
-        "production-ready stack — all 15 blind spots fixed",
-        "blocked task notification — ping dispatcher immediately on status change"
+        "add --judge-model flag to LoCoMo harness"
       ],
       "fixes": [
-        "enable multi-instance for manager roles (CTO/CMO/GM) across projects",
-        "zombie reaper must never kill TTY-attached sessions + death log",
-        "update readiness gate to check daemon-restart-orchestrator",
-        "resolve TS errors blocking publish — unused import + undefined row",
-        "zombie agent reaper + deferred daemon restart (OOM crash fix)",
-        "idle-kill now reaps Codex/OpenCode sessions (bug 47d1e446)",
-        "change orphaned task terminal state from blocked → needs_review",
-        "auto-close temporal guard + session_scope fallback + orphan cleanup safety",
-        "cloud sync skip-bad-rows + age-based orphan hook reaper",
-        "clean unused imports + publish gate fixes for v0.9.159",
-        "daemon memory cascade — prevent duplicate daemons, reap orphan hooks, cap heap",
-        "auto-inject timeout on tmux capture-pane to prevent session freeze",
-        "auto-wake crash loop — filter boot memories + circuit breaker",
-        "Codex numbered instances use baseAgentName for identity resolution",
-        "auto-chain project scope + writeNotification on needs_review",
-        "persist WhatsApp auth in Docker volume — prevent data loss on update",
-        "wake idle codex sessions on pending tasks",
-        "fix daemon MCP session heap leak",
-        "include typescript as runtime dependency",
-        "remove direct Postgres license validation — CF Worker is the only path",
-        "gateway stop_grace_period 45s — prevent SIGKILL during message drain",
-        "filter person names from FTS queries to prevent speaker-prefix pollution",
-        "DMR retrieval 20% → 100% — stop words, name filtering, speaker fix",
-        "kill idle Codex/OpenCode sessions instead of sending intercom — enables auto-wake respawn",
-        "suppress daemon auto-reconnect noise — only log after attempt 2+"
+        "resolve all TypeScript errors for npm publish",
+        "suppress benign eviction logs + graceful idle kill wind-down",
+        "expand orphan reaper patterns to cover ALL hook scripts",
+        "last 4 deferred bugs — zero remaining issues",
+        "syntax error in tmux-routing — restore setTimeout for deferred nudge",
+        "remove redundant /exe-call + enforce cross_session COO-only",
+        "all 4 sendKeys bugs — use sendKeysLiteral for long messages",
+        "deferred nudge uses sendKeysLiteral to ensure Enter is pressed",
+        "CTO/CMO are NOT multi-instance + always notify existing sessions",
+        "remove duplicate keywords declaration from PR #28 merge conflict",
+        "force=true intercom bypasses busy check — COO messages always land",
+        "message delivery to coordinator used wrong session name (exe-exe1 vs exe1)",
+        "intercom blocked by legacy cwd/exe/{agent}/ task path check",
+        "_llama ReferenceError crashes EVERY daemon shutdown (bob audit #1)",
+        "intercom delivers to coordinator sessions — messages no longer lost",
+        "tmux spawn — create session then send-keys (not single-arg command)",
+        "root cause of agent death loops — idle-kill murders taskless sessions",
+        "daemon dispatch uses deferred setTimeout for /exe-call and nudge",
+        "skip BOTH boot polls when called from daemon — eliminates 20s+ MCP blackout",
+        "complete all 16 audit findings — zero remaining daemon issues",
+        "5 daemon reliability fixes from audit + task DB re-sync",
+        "disable auto-wake + reduce boot poll + fix reflection SQL",
+        "reflection sweep broken SQL — DISTINCT aggregate with 2 args crashes SQLite",
+        "defer WS client + projection worker init to eliminate 8.8s boot lag",
+        "tool capability index self-deadlock — daemon was embedding through its own socket"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -73,6 +73,15 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "release: stack v0.9.11 — HYGO deployment images + remove stale gateway Dockerfile",
+        "add jitter to daemon client reconnect to prevent storm",
+        "async pane capture in daemon, reduce event loop blocking",
+        "add incident response playbook for HYGO VPS deployments",
+        "add HYGO setup guide for Leo (COO) + exe-os installation",
+        "cleanup: remove all sendKeys fallbacks + CLI /exe-call + stale comments",
+        "add ORCHESTRATION.md — definitive architecture for multi-agent dispatch",
+        "debug: add intercom delivery logging to trace COO message path",
+        "add daemon reliability integration tests (9 tests)",
         "bump v0.9.160 — cloud sync resilience + orphan reaper + auto-close guard",
         "update release notes with 5 bug fixes from support triage",
         "bump v0.9.159 — daemon memory cascade fix + session_scope + benchmarks",
@@ -88,28 +97,17 @@
         "bump to v0.9.149 — task lifecycle simplification + review notification fix",
         "capture gateway connection observability requirements (2026-05-28)",
         "bump to v0.9.146 for publish",
-        "Windows support architecture — WezTerm + WSL decision (2026-05-27)",
-        "Merge branch 'tom4-work' — device-scoped behaviors + push-notification fix",
-        "bump to v0.9.145 for publish",
-        "revert: keep workflow files unchanged — GitHub OAuth blocks workflow scope",
-        "stage remaining Yoshi fixes — features + bug cleanup",
-        "add tests for daemon restart orchestrator module",
-        "publish v0.9.144 — ESM require() fix + reliable task signals + OAuth 2.1",
-        "add MCP tool tests for message, cloud-sync, and file-copy",
-        "add coverage for send_message, cloud_sync, file_copy MCP tools (Track A)",
-        "Recover MCP sessions after daemon restart"
+        "Windows support architecture — WezTerm + WSL decision (2026-05-27)"
       ],
       "migration_notes": [
         "If daemon goes down, agents will now fail instead of silently",
         "exe-daemon.ts kills old embed.pid process and cleans up"
       ]
     },
-    "0.9.165": {
-      "version": "0.9.165",
+    "0.9.160": {
+      "version": "0.9.160",
       "date": "2026-05-30",
       "features": [
-        "add worktree reaper daemon job to prune orphaned agent worktrees",
-        "add pre-flight gates to close_task — status gate, worktree check, commit recency",
         "add wiki document ingestion via API for embedding pipeline",
         "add filtered.* projection targets to projection worker",
         "verify-stack post-deploy checks — 8 runtime validations",
@@ -132,15 +130,11 @@
         "update safety + portable backups + restore",
         "complete deployment readiness — all 14 second-pass blind spots fixed",
         "production-ready stack — all 15 blind spots fixed",
-        "blocked task notification — ping dispatcher immediately on status change"
+        "blocked task notification — ping dispatcher immediately on status change",
+        "self-improving skills — usage tracking, success counting, and refinement daemon",
+        "4 retrieval improvements — query expansion, stop words, contradiction resolution, abstention"
       ],
       "fixes": [
-        "zombie reaper must never kill TTY-attached sessions + death log",
-        "update readiness gate to check daemon-restart-orchestrator",
-        "resolve TS errors blocking publish — unused import + undefined row",
-        "zombie agent reaper + deferred daemon restart (OOM crash fix)",
-        "idle-kill now reaps Codex/OpenCode sessions (bug 47d1e446)",
-        "change orphaned task terminal state from blocked → needs_review",
         "auto-close temporal guard + session_scope fallback + orphan cleanup safety",
         "cloud sync skip-bad-rows + age-based orphan hook reaper",
         "clean unused imports + publish gate fixes for v0.9.159",
@@ -159,7 +153,13 @@
         "DMR retrieval 20% → 100% — stop words, name filtering, speaker fix",
         "kill idle Codex/OpenCode sessions instead of sending intercom — enables auto-wake respawn",
         "suppress daemon auto-reconnect noise — only log after attempt 2+",
-        "remove E2EE from bug reports — support intake must be readable server-side"
+        "remove E2EE from bug reports — support intake must be readable server-side",
+        "support API — verified encrypted bug reports work (HTTP 201)",
+        "support API accepts encrypted bug reports — prevents HTTP 400",
+        "Codex agents recheck tasks before stopping — prevents idle-with-open-tasks",
+        "P0 #13 session_scope in cleanup SELECT + P0 #6 wire review signal files",
+        "add scope import to prompt-submit — gate pass",
+        "add writeFileSync import to config.ts"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -207,14 +207,10 @@
         "exe-daemon.ts kills old embed.pid process and cleans up"
       ]
     },
-    "0.9.164": {
-      "version": "0.9.164",
-      "date": "2026-05-30",
+    "0.9.159": {
+      "version": "0.9.159",
+      "date": "2026-05-29",
       "features": [
-        "add worktree reaper daemon job to prune orphaned agent worktrees",
-        "add pre-flight gates to close_task — status gate, worktree check, commit recency",
-        "add wiki document ingestion via API for embedding pipeline",
-        "add filtered.* projection targets to projection worker",
         "verify-stack post-deploy checks — 8 runtime validations",
         "preflight deploy gate + filtered schema + gateway graceful degradation",
         "harden /exe-afk as primary monitoring tool, deprecate /loop for orchestration",
@@ -235,18 +231,18 @@
         "update safety + portable backups + restore",
         "complete deployment readiness — all 14 second-pass blind spots fixed",
         "production-ready stack — all 15 blind spots fixed",
-        "blocked task notification — ping dispatcher immediately on status change"
+        "blocked task notification — ping dispatcher immediately on status change",
+        "self-improving skills — usage tracking, success counting, and refinement daemon",
+        "4 retrieval improvements — query expansion, stop words, contradiction resolution, abstention",
+        "competitive roadmap — serverless tier, identity depth, self-improving skills, user modeling",
+        "run database migrations before container swap in stack-update"
       ],
       "fixes": [
-        "zombie reaper must never kill TTY-attached sessions + death log",
-        "update readiness gate to check daemon-restart-orchestrator",
-        "resolve TS errors blocking publish — unused import + undefined row",
-        "zombie agent reaper + deferred daemon restart (OOM crash fix)",
-        "idle-kill now reaps Codex/OpenCode sessions (bug 47d1e446)",
-        "change orphaned task terminal state from blocked → needs_review",
-        "auto-close temporal guard + session_scope fallback + orphan cleanup safety",
-        "cloud sync skip-bad-rows + age-based orphan hook reaper",
-        "clean unused imports + publish gate fixes for v0.9.159",
+        "cloud sync NOT NULL resilience — sqlSafeRequired() defaults + per-record error handling, skip bad rows instead of retry storm",
+        "auto-close temporal guard — reject commits older than task creation date, raise threshold 0.6→0.8",
+        "session_scope fallback — listTasks returns unscoped results when scoped query finds 0 after daemon restart",
+        "orphan task file cleanup safety — 24h threshold (was 1h) + ID-based fallback before deleting",
+        "blocked task escalation — writeNotification to COO when auto-wake fails 3x and marks task blocked",
         "daemon memory cascade — prevent duplicate daemons, reap orphan hooks, cap heap",
         "auto-inject timeout on tmux capture-pane to prevent session freeze",
         "auto-wake crash loop — filter boot memories + circuit breaker",
@@ -262,7 +258,11 @@
         "DMR retrieval 20% → 100% — stop words, name filtering, speaker fix",
         "kill idle Codex/OpenCode sessions instead of sending intercom — enables auto-wake respawn",
         "suppress daemon auto-reconnect noise — only log after attempt 2+",
-        "remove E2EE from bug reports — support intake must be readable server-side"
+        "remove E2EE from bug reports — support intake must be readable server-side",
+        "support API — verified encrypted bug reports work (HTTP 201)",
+        "support API accepts encrypted bug reports — prevents HTTP 400",
+        "Codex agents recheck tasks before stopping — prevents idle-with-open-tasks",
+        "P0 #13 session_scope in cleanup SELECT + P0 #6 wire review signal files"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -279,8 +279,6 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
-        "bump v0.9.160 — cloud sync resilience + orphan reaper + auto-close guard",
-        "update release notes with 5 bug fixes from support triage",
         "bump v0.9.159 — daemon memory cascade fix + session_scope + benchmarks",
         "arch: customer onboarding automation — exe-os deploy-customer command",
         "arch: Fleet Operations Roadmap — 8 phases for production safety at scale",
@@ -303,69 +301,71 @@
         "publish v0.9.144 — ESM require() fix + reliable task signals + OAuth 2.1",
         "add MCP tool tests for message, cloud-sync, and file-copy",
         "add coverage for send_message, cloud_sync, file_copy MCP tools (Track A)",
-        "Recover MCP sessions after daemon restart"
+        "Recover MCP sessions after daemon restart",
+        "publish v0.9.143 — all fixes live",
+        "publish v0.9.142"
       ],
       "migration_notes": [
         "If daemon goes down, agents will now fail instead of silently",
         "exe-daemon.ts kills old embed.pid process and cleans up"
       ]
     },
-    "0.9.163": {
-      "version": "0.9.163",
-      "date": "2026-05-30",
+    "0.9.158": {
+      "version": "0.9.158",
+      "date": "2026-05-28",
       "features": [
-        "add worktree reaper daemon job to prune orphaned agent worktrees",
-        "add pre-flight gates to close_task — status gate, worktree check, commit recency",
-        "add wiki document ingestion via API for embedding pipeline",
-        "add filtered.* projection targets to projection worker",
-        "verify-stack post-deploy checks — 8 runtime validations",
-        "preflight deploy gate + filtered schema + gateway graceful degradation",
-        "harden /exe-afk as primary monitoring tool, deprecate /loop for orchestration",
-        "add --judge-model flag to LoCoMo harness",
-        "dashboard.askexe.com — customer credits dashboard (backend + frontend)",
-        "config persistence contract — document + enforce what survives stack updates",
-        "add persona depth to identity — tone, vocabulary, response_style, communication_patterns",
-        "4 BEAM improvements — o4-mini judge, entity expansion, temporal prompts, contradiction detection",
-        "DMR 100% + BEAM 35% — full results with Claude Sonnet judge",
-        "session_scope read paths — search filter + backfill + tests",
-        "add session_scope filtering to memory read paths + MCP tools + backfill",
-        "classify prompt memories as conversation type + enrich session-end captures",
-        "add session_scope column to memories table — schema migration + all write paths",
-        "fix Codex integration + add --codex to all 4 harnesses",
-        "add checkpoint/resume support for long LoCoMo runs",
-        "add Codex GPT-5.5 judge, pre-embedding, expanded retrieval, production prompts",
         "stack manifest 0.9.10 — all new images for customer deployment",
         "update safety + portable backups + restore",
         "complete deployment readiness — all 14 second-pass blind spots fixed",
         "production-ready stack — all 15 blind spots fixed",
-        "blocked task notification — ping dispatcher immediately on status change"
+        "blocked task notification — ping dispatcher immediately on status change",
+        "self-improving skills — usage tracking, success counting, and refinement daemon",
+        "4 retrieval improvements — query expansion, stop words, contradiction resolution, abstention",
+        "competitive roadmap — serverless tier, identity depth, self-improving skills, user modeling",
+        "run database migrations before container swap in stack-update",
+        "graph auto-extract from ARCHITECTURE.md — regex-based entity/relationship extraction",
+        "migrate cloud.askexe.com → api.askexe.com as canonical endpoint",
+        "federated recall — code_context + graph fallback when memory results weak",
+        "migrate cloud.askexe.com → api.askexe.com across all src/ defaults",
+        "rolling restart in stack-update — one service at a time with health verification",
+        "DMR benchmark harness + LoCoMo improvements for v0.9.145 evaluation",
+        "Windows/WSL support — WezTerm config + WSL detection in setup wizard",
+        "queryTaskRows() consolidation — single scoped query path for all task list operations",
+        "review signal files — reliable reviewer notification on update_task(done)",
+        "Ghostty-native notifications via OSC 9 — no more Script Editor popup",
+        "device-scoped behaviors — device_id column + filter in loading",
+        "dispatch reliability — 45s boot timeout, dispatch ack signals, agent heartbeat",
+        "setup wizard headless mode + daemon health check after restart",
+        "device-scoped behaviors — add device_id column + filter on load",
+        "gateway prompt injection defense — 3-tier security hardening",
+        "add diagnostics(action=\"merge_agent_memories\") for reassigning memories across agent IDs"
       ],
       "fixes": [
-        "zombie reaper must never kill TTY-attached sessions + death log",
-        "update readiness gate to check daemon-restart-orchestrator",
-        "resolve TS errors blocking publish — unused import + undefined row",
-        "zombie agent reaper + deferred daemon restart (OOM crash fix)",
-        "idle-kill now reaps Codex/OpenCode sessions (bug 47d1e446)",
-        "change orphaned task terminal state from blocked → needs_review",
-        "auto-close temporal guard + session_scope fallback + orphan cleanup safety",
-        "cloud sync skip-bad-rows + age-based orphan hook reaper",
-        "clean unused imports + publish gate fixes for v0.9.159",
-        "daemon memory cascade — prevent duplicate daemons, reap orphan hooks, cap heap",
-        "auto-inject timeout on tmux capture-pane to prevent session freeze",
-        "auto-wake crash loop — filter boot memories + circuit breaker",
-        "Codex numbered instances use baseAgentName for identity resolution",
-        "auto-chain project scope + writeNotification on needs_review",
-        "persist WhatsApp auth in Docker volume — prevent data loss on update",
-        "wake idle codex sessions on pending tasks",
-        "fix daemon MCP session heap leak",
-        "include typescript as runtime dependency",
-        "remove direct Postgres license validation — CF Worker is the only path",
-        "gateway stop_grace_period 45s — prevent SIGKILL during message drain",
-        "filter person names from FTS queries to prevent speaker-prefix pollution",
-        "DMR retrieval 20% → 100% — stop words, name filtering, speaker fix",
-        "kill idle Codex/OpenCode sessions instead of sending intercom — enables auto-wake respawn",
-        "suppress daemon auto-reconnect noise — only log after attempt 2+",
-        "remove E2EE from bug reports — support intake must be readable server-side"
+        "support API — verified encrypted bug reports work (HTTP 201)",
+        "support API accepts encrypted bug reports — prevents HTTP 400",
+        "Codex agents recheck tasks before stopping — prevents idle-with-open-tasks",
+        "P0 #13 session_scope in cleanup SELECT + P0 #6 wire review signal files",
+        "add scope import to prompt-submit — gate pass",
+        "add writeFileSync import to config.ts",
+        "persist cloud endpoint migration to config.json — stop logging on every boot",
+        "include memory_type in pushToPostgres metadata — was stripped on sync",
+        "add scope import to daemon-orchestration — satisfies customer-readiness gate",
+        "skill-refinement.ts — correct writeMemory field names + updateIdentity 3rd arg",
+        "make skill lifecycle fields optional on Behavior interface — unblocks publish",
+        "session isolation for tmux kill — block cross-scope session kills",
+        "session-scope daemon, push, capacity, and cleanup (P0 #7-#13)",
+        "add memory_type to crdt-sync MemoryRecord interface — unblocks publish",
+        "session-scope daemon, push, capacity, cleanup (P0 #7-#9, #13)",
+        "include memory_type in cloud sync push/pull + fix backfill re-sync",
+        "session-scope signal file system — prevent cross-session task/review bleed",
+        "session-scope notification routing — use row.session_scope over ambient",
+        "daemon NEVER guesses session from tmux — header-only routing",
+        "3 daemon bugs — context-full TTL override, API watchdog kill-after-3, idle-kill verify",
+        "federated recall always searches code_context + graph — count threshold was useless",
+        "make cross-repo guardrail task-aware — allow multi-repo work when task scope permits",
+        "ONE postgres — replace crm-postgres with exe-db across entire stack",
+        "smart session-scoping gate + last boot cleanup leak + triage_bug docs",
+        "add shipped_version to support triage + clean platform procedures"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -382,15 +382,6 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
-        "bump v0.9.160 — cloud sync resilience + orphan reaper + auto-close guard",
-        "update release notes with 5 bug fixes from support triage",
-        "bump v0.9.159 — daemon memory cascade fix + session_scope + benchmarks",
-        "arch: customer onboarding automation — exe-os deploy-customer command",
-        "arch: Fleet Operations Roadmap — 8 phases for production safety at scale",
-        "arch: add filtered table pipeline + pre-flight deploy system to roadmap",
-        "add EXE-OS-STACK.md — complete 6-repo deployment map",
-        "cache tmux session (5 calls → 1) + offset daemon timers",
-        "cut agent boot from 4min to <30s — merge Bash blocks + parallel DB queries",
         "rename memory schema → graph across codebase",
         "unified access control — admin token + GoTrue across all services",
         "capture data pipeline spec — raw → filter → wiki + CRM projection",
@@ -406,69 +397,78 @@
         "publish v0.9.144 — ESM require() fix + reliable task signals + OAuth 2.1",
         "add MCP tool tests for message, cloud-sync, and file-copy",
         "add coverage for send_message, cloud_sync, file_copy MCP tools (Track A)",
-        "Recover MCP sessions after daemon restart"
+        "Recover MCP sessions after daemon restart",
+        "publish v0.9.143 — all fixes live",
+        "publish v0.9.142",
+        "publish v0.9.141",
+        "ops: journalctl rotation + certbot expiry alerting",
+        "revert: daemon heap back to 33% of RAM — no artificial cap",
+        "v0.9.140 publish + heap cap 4GB (was 33% unbounded)",
+        "PG-1 cross-repo entity federation design document",
+        "add lint step + automated npm publish workflow",
+        "audit: scoped SQL + package budget + TUI vendored + TODO classification"
       ],
       "migration_notes": [
         "If daemon goes down, agents will now fail instead of silently",
         "exe-daemon.ts kills old embed.pid process and cleans up"
       ]
     },
-    "0.9.162": {
-      "version": "0.9.162",
-      "date": "2026-05-30",
+    "0.9.157": {
+      "version": "0.9.157",
+      "date": "2026-05-28",
       "features": [
-        "add worktree reaper daemon job to prune orphaned agent worktrees",
-        "add pre-flight gates to close_task — status gate, worktree check, commit recency",
-        "add wiki document ingestion via API for embedding pipeline",
-        "add filtered.* projection targets to projection worker",
-        "verify-stack post-deploy checks — 8 runtime validations",
-        "preflight deploy gate + filtered schema + gateway graceful degradation",
-        "harden /exe-afk as primary monitoring tool, deprecate /loop for orchestration",
-        "add --judge-model flag to LoCoMo harness",
-        "dashboard.askexe.com — customer credits dashboard (backend + frontend)",
-        "config persistence contract — document + enforce what survives stack updates",
-        "add persona depth to identity — tone, vocabulary, response_style, communication_patterns",
-        "4 BEAM improvements — o4-mini judge, entity expansion, temporal prompts, contradiction detection",
-        "DMR 100% + BEAM 35% — full results with Claude Sonnet judge",
-        "session_scope read paths — search filter + backfill + tests",
-        "add session_scope filtering to memory read paths + MCP tools + backfill",
-        "classify prompt memories as conversation type + enrich session-end captures",
-        "add session_scope column to memories table — schema migration + all write paths",
-        "fix Codex integration + add --codex to all 4 harnesses",
-        "add checkpoint/resume support for long LoCoMo runs",
-        "add Codex GPT-5.5 judge, pre-embedding, expanded retrieval, production prompts",
-        "stack manifest 0.9.10 — all new images for customer deployment",
         "update safety + portable backups + restore",
         "complete deployment readiness — all 14 second-pass blind spots fixed",
         "production-ready stack — all 15 blind spots fixed",
-        "blocked task notification — ping dispatcher immediately on status change"
+        "blocked task notification — ping dispatcher immediately on status change",
+        "self-improving skills — usage tracking, success counting, and refinement daemon",
+        "4 retrieval improvements — query expansion, stop words, contradiction resolution, abstention",
+        "competitive roadmap — serverless tier, identity depth, self-improving skills, user modeling",
+        "run database migrations before container swap in stack-update",
+        "graph auto-extract from ARCHITECTURE.md — regex-based entity/relationship extraction",
+        "migrate cloud.askexe.com → api.askexe.com as canonical endpoint",
+        "federated recall — code_context + graph fallback when memory results weak",
+        "migrate cloud.askexe.com → api.askexe.com across all src/ defaults",
+        "rolling restart in stack-update — one service at a time with health verification",
+        "DMR benchmark harness + LoCoMo improvements for v0.9.145 evaluation",
+        "Windows/WSL support — WezTerm config + WSL detection in setup wizard",
+        "queryTaskRows() consolidation — single scoped query path for all task list operations",
+        "review signal files — reliable reviewer notification on update_task(done)",
+        "Ghostty-native notifications via OSC 9 — no more Script Editor popup",
+        "device-scoped behaviors — device_id column + filter in loading",
+        "dispatch reliability — 45s boot timeout, dispatch ack signals, agent heartbeat",
+        "setup wizard headless mode + daemon health check after restart",
+        "device-scoped behaviors — add device_id column + filter on load",
+        "gateway prompt injection defense — 3-tier security hardening",
+        "add diagnostics(action=\"merge_agent_memories\") for reassigning memories across agent IDs",
+        "add task dependency tree visualization (action=dependency_tree)"
       ],
       "fixes": [
-        "zombie reaper must never kill TTY-attached sessions + death log",
-        "update readiness gate to check daemon-restart-orchestrator",
-        "resolve TS errors blocking publish — unused import + undefined row",
-        "zombie agent reaper + deferred daemon restart (OOM crash fix)",
-        "idle-kill now reaps Codex/OpenCode sessions (bug 47d1e446)",
-        "change orphaned task terminal state from blocked → needs_review",
-        "auto-close temporal guard + session_scope fallback + orphan cleanup safety",
-        "cloud sync skip-bad-rows + age-based orphan hook reaper",
-        "clean unused imports + publish gate fixes for v0.9.159",
-        "daemon memory cascade — prevent duplicate daemons, reap orphan hooks, cap heap",
-        "auto-inject timeout on tmux capture-pane to prevent session freeze",
-        "auto-wake crash loop — filter boot memories + circuit breaker",
-        "Codex numbered instances use baseAgentName for identity resolution",
-        "auto-chain project scope + writeNotification on needs_review",
-        "persist WhatsApp auth in Docker volume — prevent data loss on update",
-        "wake idle codex sessions on pending tasks",
-        "fix daemon MCP session heap leak",
-        "include typescript as runtime dependency",
-        "remove direct Postgres license validation — CF Worker is the only path",
-        "gateway stop_grace_period 45s — prevent SIGKILL during message drain",
-        "filter person names from FTS queries to prevent speaker-prefix pollution",
-        "DMR retrieval 20% → 100% — stop words, name filtering, speaker fix",
-        "kill idle Codex/OpenCode sessions instead of sending intercom — enables auto-wake respawn",
-        "suppress daemon auto-reconnect noise — only log after attempt 2+",
-        "remove E2EE from bug reports — support intake must be readable server-side"
+        "add scope import to prompt-submit — gate pass",
+        "add writeFileSync import to config.ts",
+        "persist cloud endpoint migration to config.json — stop logging on every boot",
+        "include memory_type in pushToPostgres metadata — was stripped on sync",
+        "add scope import to daemon-orchestration — satisfies customer-readiness gate",
+        "skill-refinement.ts — correct writeMemory field names + updateIdentity 3rd arg",
+        "make skill lifecycle fields optional on Behavior interface — unblocks publish",
+        "session isolation for tmux kill — block cross-scope session kills",
+        "session-scope daemon, push, capacity, and cleanup (P0 #7-#13)",
+        "add memory_type to crdt-sync MemoryRecord interface — unblocks publish",
+        "session-scope daemon, push, capacity, cleanup (P0 #7-#9, #13)",
+        "include memory_type in cloud sync push/pull + fix backfill re-sync",
+        "session-scope signal file system — prevent cross-session task/review bleed",
+        "session-scope notification routing — use row.session_scope over ambient",
+        "daemon NEVER guesses session from tmux — header-only routing",
+        "3 daemon bugs — context-full TTL override, API watchdog kill-after-3, idle-kill verify",
+        "federated recall always searches code_context + graph — count threshold was useless",
+        "make cross-repo guardrail task-aware — allow multi-repo work when task scope permits",
+        "ONE postgres — replace crm-postgres with exe-db across entire stack",
+        "smart session-scoping gate + last boot cleanup leak + triage_bug docs",
+        "add shipped_version to support triage + clean platform procedures",
+        "close remaining session-scoping findings from Bob's audit",
+        "close 3 more session-scoping leaks from Bob's audit (LEAK-4, LEAK-7, LEAK-8)",
+        "diagnostics check_update ENOENT + healthcheck timeout",
+        "close 8 session-scoping leaks — daemon ALS trust + review cleanup + close-task + inbox"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -485,15 +485,6 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
-        "bump v0.9.160 — cloud sync resilience + orphan reaper + auto-close guard",
-        "update release notes with 5 bug fixes from support triage",
-        "bump v0.9.159 — daemon memory cascade fix + session_scope + benchmarks",
-        "arch: customer onboarding automation — exe-os deploy-customer command",
-        "arch: Fleet Operations Roadmap — 8 phases for production safety at scale",
-        "arch: add filtered table pipeline + pre-flight deploy system to roadmap",
-        "add EXE-OS-STACK.md — complete 6-repo deployment map",
-        "cache tmux session (5 calls → 1) + offset daemon timers",
-        "cut agent boot from 4min to <30s — merge Bash blocks + parallel DB queries",
         "rename memory schema → graph across codebase",
         "unified access control — admin token + GoTrue across all services",
         "capture data pipeline spec — raw → filter → wiki + CRM projection",
@@ -509,7 +500,16 @@
         "publish v0.9.144 — ESM require() fix + reliable task signals + OAuth 2.1",
         "add MCP tool tests for message, cloud-sync, and file-copy",
         "add coverage for send_message, cloud_sync, file_copy MCP tools (Track A)",
-        "Recover MCP sessions after daemon restart"
+        "Recover MCP sessions after daemon restart",
+        "publish v0.9.143 — all fixes live",
+        "publish v0.9.142",
+        "publish v0.9.141",
+        "ops: journalctl rotation + certbot expiry alerting",
+        "revert: daemon heap back to 33% of RAM — no artificial cap",
+        "v0.9.140 publish + heap cap 4GB (was 33% unbounded)",
+        "PG-1 cross-repo entity federation design document",
+        "add lint step + automated npm publish workflow",
+        "audit: scoped SQL + package budget + TUI vendored + TODO classification"
       ],
       "migration_notes": [
         "If daemon goes down, agents will now fail instead of silently",