@askexenow/exe-os 0.9.197 → 0.9.198

package/deploy/compose/docker-compose.yml

@@ -370,12 +370,12 @@ services:
       EXE_GATEWAY_CONFIG: /data/gateway.json
       DATABASE_URL: postgres://${POSTGRES_USER:-exe}:${POSTGRES_PASSWORD:?POSTGRES_PASSWORD is required}@exe-db:5432/${POSTGRES_DB:-exedb}
       EXE_GATEWAY_PORT: "3100"
-      EXE_GATEWAY_HOST: "127.0.0.1"
+      EXE_GATEWAY_HOST: "0.0.0.0"
       EXE_GATEWAY_AUTH_TOKEN: ${EXE_GATEWAY_AUTH_TOKEN:?EXE_GATEWAY_AUTH_TOKEN is required}
       GOTRUE_URL: http://gotrue:9999
       EXE_GATEWAY_WHATSAPP_VERIFY_TOKEN: ${EXE_GATEWAY_WHATSAPP_VERIFY_TOKEN:?EXE_GATEWAY_WHATSAPP_VERIFY_TOKEN is required}
       EXE_GATEWAY_WS_RELAY_ENABLED: "true"
-      EXE_GATEWAY_WS_RELAY_HOST: "127.0.0.1"
+      EXE_GATEWAY_WS_RELAY_HOST: "0.0.0.0"
       EXE_GATEWAY_WS_RELAY_PORT: "3101"
       EXE_GATEWAY_WS_RELAY_AUTH_TOKEN: ${EXE_GATEWAY_WS_RELAY_AUTH_TOKEN:?EXE_GATEWAY_WS_RELAY_AUTH_TOKEN is required}
       WHATSAPP_ACCESS_TOKEN: ${WHATSAPP_ACCESS_TOKEN:-}

package/deploy/stack-manifests/v0.9.json

@@ -623,22 +623,22 @@
       "breakingChanges": [],
       "services": {
         "crm": {
-          "image": "update.askexe.com/askexe/exe-crm:v0.9.4",
+          "image": "update.askexe.com/askexe/exe-crm:v0.9.15",
           "env": "CRM_IMAGE_TAG",
           "composeService": "exe-crm"
         },
         "wiki": {
-          "image": "update.askexe.com/askexe/exe-wiki:v0.9.5",
+          "image": "update.askexe.com/askexe/exe-wiki:v0.9.11",
           "env": "WIKI_IMAGE_TAG",
           "composeService": "exe-wiki"
         },
         "exe-os": {
-          "image": "update.askexe.com/askexe/exe-os:v0.9.185",
+          "image": "update.askexe.com/askexe/exe-os:v0.9.159",
           "env": "EXE_OS_IMAGE_TAG",
           "composeService": "exe-os"
         },
         "gateway": {
-          "image": "update.askexe.com/askexe/exe-gateway:v0.9.7",
+          "image": "update.askexe.com/askexe/exe-gateway:v0.9.8",
           "env": "GATEWAY_IMAGE_TAG",
           "composeService": "exe-gateway"
         },
@@ -648,7 +648,7 @@
           "composeService": "exe-monitor-agent"
         },
         "monitorHub": {
-          "image": "update.askexe.com/askexe/exe-monitor-hub:v0.9.5",
+          "image": "update.askexe.com/askexe/exe-monitor-hub:v0.9.4",
           "env": "MONITOR_HUB_IMAGE_TAG",
           "composeService": "exe-monitor-hub"
         }

package/dist/bin/stack-update.js

@@ -11,7 +11,7 @@ import {
   patchEnv,
   readCurrentStackVersion,
   runStackUpdate
-} from "../chunk-T5U27Y4H.js";
+} from "../chunk-M7NGABPF.js";
 import "../chunk-MVMMULOJ.js";
 import "../chunk-4GXRETYL.js";
 import "../chunk-LYH5HE24.js";

package/dist/bin/vps-health-gate.js

@@ -207,7 +207,7 @@ async function main(args) {
   console.log("[health-gate] Starting rollback...");
   restorePreDeployBackup();
   try {
-    const { rollbackStackUpdate, defaultStackPaths } = await import("../stack-update-PI2TWEGS.js");
+    const { rollbackStackUpdate, defaultStackPaths } = await import("../stack-update-C4BAPLXJ.js");
     const paths = defaultStackPaths();
     await rollbackStackUpdate({
       manifestRef: paths.manifestRef,

package/dist/{chunk-7JCK6TXX.js → chunk-62DAMAFL.js}

@@ -1313,6 +1313,42 @@ function reapZombieAgentProcesses(deps) {
       }
     }
     if (hasLiveSession) continue;
+    const coordinatorSessions = [...liveSessions].filter(
+      (s) => isCoordinatorName(s.replace(/^\w+-/, "")) || isExeSession(s)
+    );
+    if (coordinatorSessions.length > 0) {
+      let belongsToCoordinator = false;
+      for (const cs of coordinatorSessions) {
+        try {
+          const panePids = execSync(
+            `tmux list-panes -t ${JSON.stringify(cs)} -F '#{pane_pid}' 2>/dev/null`,
+            { encoding: "utf8", timeout: 3e3 }
+          ).trim().split("\n").map(Number).filter(Boolean);
+          for (const panePid of panePids) {
+            let walk = pid;
+            for (let d = 0; d < 10; d++) {
+              if (walk === panePid) {
+                belongsToCoordinator = true;
+                break;
+              }
+              const p = procMap.get(walk);
+              if (!p || p.ppid <= 1) break;
+              walk = p.ppid;
+            }
+            if (belongsToCoordinator) break;
+          }
+        } catch {
+        }
+        if (belongsToCoordinator) break;
+      }
+      if (belongsToCoordinator) {
+        process.stderr.write(
+          `[zombie-agent-reaper] SKIPPING PID ${pid} \u2014 belongs to coordinator session (${info.args.slice(0, 60)})
+`
+        );
+        continue;
+      }
+    }
     const rssKb = getRssKb(pid);
     const rssMb = rssKb ? Math.round(rssKb / 1024) : "?";
     const desc = `PID ${pid} (age=${ageSecs}s, RSS=${rssMb}MB, ${info.args.slice(0, 80)})`;

package/dist/{chunk-4F4SOCKN.js → chunk-CHZMPZJ3.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-AFJWUI3Y.js";
 import {
   AUTO_WAKE_MAX_RETRIES
-} from "./chunk-7JCK6TXX.js";
+} from "./chunk-62DAMAFL.js";
 import {
   getToolCapabilityIndex
 } from "./chunk-GHCVD7WV.js";

package/dist/{chunk-T5U27Y4H.js → chunk-M7NGABPF.js}

@@ -140,20 +140,20 @@ function createStackUpdatePlan(manifest, envRaw, targetVersion) {
     breakingChanges: release.breakingChanges ?? []
   };
 }
-var ASKEXE_GHCR_IMAGE = /^(?:ghcr\.io\/askexe|update\.askexe\.com\/askexe|registry\.askexe\.com\/askexe)\/[a-z0-9._/-]+(?::[^:@$/{]+|@sha256:[a-f0-9]{64})$/i;
+var ASKEXE_GHCR_IMAGE = /^(?:ghcr\.io\/askexe|update\.askexe\.com\/askexe)\/[a-z0-9._/-]+(?::[^:@$/{]+|@sha256:[a-f0-9]{64})$/i;
 function validatePinnedGhcrImage(image, label) {
   const trimmed = image.trim().replace(/^['"]|['"]$/g, "");
   if (!trimmed) return `${label} is empty`;
   if (trimmed.includes("${")) return null;
-  if (!trimmed.startsWith("ghcr.io/askexe/") && !trimmed.startsWith("update.askexe.com/askexe/") && !trimmed.startsWith("registry.askexe.com/askexe/")) return `${label} must use ghcr.io/askexe/*, update.askexe.com/askexe/*, or registry.askexe.com/askexe/*, got ${trimmed}`;
+  if (!trimmed.startsWith("ghcr.io/askexe/") && !trimmed.startsWith("update.askexe.com/askexe/")) return `${label} must use ghcr.io/askexe/* or update.askexe.com/askexe/*, got ${trimmed}`;
   if (/:latest(?:$|[\s#])/.test(trimmed)) return `${label} must not use :latest (${trimmed})`;
-  if (!ASKEXE_GHCR_IMAGE.test(trimmed)) return `${label} must be pinned with an explicit tag or sha256 digest from ghcr.io/askexe or registry.askexe.com/askexe, got ${trimmed}`;
+  if (!ASKEXE_GHCR_IMAGE.test(trimmed)) return `${label} must be pinned with an explicit tag or sha256 digest from ghcr.io/askexe or update.askexe.com/askexe, got ${trimmed}`;
   return null;
 }
 function validateComposeImageLiteral(image, label) {
   const trimmed = image.trim().replace(/^['"]|['"]$/g, "");
   if (!trimmed) return `${label} is empty`;
-  if (trimmed.startsWith("ghcr.io/askexe/") || trimmed.startsWith("update.askexe.com/askexe/") || trimmed.startsWith("registry.askexe.com/askexe/")) return validatePinnedGhcrImage(trimmed, label);
+  if (trimmed.startsWith("ghcr.io/askexe/") || trimmed.startsWith("update.askexe.com/askexe/")) return validatePinnedGhcrImage(trimmed, label);
   if (/^(postgres|pgvector\/pgvector|clickhouse\/clickhouse-server|redis|nginx|postgrest\/postgrest|supabase\/gotrue):[^:]+$/i.test(trimmed)) return null;
   return `${label} uses unsupported non-AskExe image ${trimmed}; customer app images must come from pinned update.askexe.com/askexe or ghcr.io/askexe images`;
 }
@@ -628,7 +628,7 @@ async function runStackUpdate(options) {
         const password = rest.join(":");
         if (username && password) {
           const sampleImage = Object.values(plan.release.services)[0]?.image ?? "";
-          const registry = sampleImage.startsWith("update.askexe.com") ? "update.askexe.com" : sampleImage.startsWith("registry.askexe.com") ? "registry.askexe.com" : "ghcr.io";
+          const registry = sampleImage.startsWith("update.askexe.com") ? "update.askexe.com" : "ghcr.io";
           creds = { registry, username, password };
           console.log(`[stack-update] Using manual registry credentials for ${registry}.`);
         }

package/dist/{daemon-orchestration-N5GPEP4F.js → daemon-orchestration-ZBSS6VZR.js}

@@ -48,7 +48,7 @@ import {
   shouldKillIdleSession,
   shouldKillSession,
   shouldNudgeEmployee
-} from "./chunk-7JCK6TXX.js";
+} from "./chunk-62DAMAFL.js";
 import "./chunk-WRCETUYE.js";
 import "./chunk-5RT7IBY4.js";
 import "./chunk-WP6P3LSI.js";

package/dist/hooks/session-end.js

@@ -215,12 +215,6 @@ Orphaned tasks at session end: ${orphanResult.rows.map((r) => `"${String(r.title
               `[session-end] WARNING: ${agent.agentId} ended with ${inProgress.length} in_progress task(s): ${titles}
 `
             );
-            let commits = [];
-            try {
-              const { getRecentCommits } = await import("../git-task-sweep-GPPNL2DK.js");
-              commits = getRecentCommits(30);
-            } catch {
-            }
             const autoClosed = [];
             const leftInProgress = [];
             for (const row of inProgress) {

package/dist/lib/exe-daemon.js

@@ -580,19 +580,22 @@ async function loadModel() {
       } else {
         process.stderr.write(`[exed] Embed worker failed 3 times \u2014 running without embeddings.
 `);
-        try {
-          if (_storeInitialized) {
-            const client = getClient();
-            client.execute(
-              `INSERT INTO notifications (id, agent_id, event_type, title, body, created_at)
-               VALUES (lower(hex(randomblob(16))), 'exe', 'embed_failure',
-                 'Embedding daemon offline \u2014 recall degraded to keyword-only',
-                 'Embed worker crashed 3 times and will not restart. Semantic search is unavailable. Recall falls back to FTS keyword matching. Fix: check ~/.exe-os/logs/exed-launchd.log for embed worker errors, then restart daemon.',
-                 datetime(''now''))`
-            );
+        void (async () => {
+          try {
+            if (_storeInitialized) {
+              const { getClient: getDbClient } = await import("./database.js");
+              const dbClient = getDbClient();
+              dbClient.execute(
+                `INSERT INTO notifications (id, agent_id, event_type, title, body, created_at)
+                 VALUES (lower(hex(randomblob(16))), 'exe', 'embed_failure',
+                   'Embedding daemon offline \u2014 recall degraded to keyword-only',
+                   'Embed worker crashed 3 times and will not restart. Semantic search is unavailable. Recall falls back to FTS keyword matching. Fix: check ~/.exe-os/logs/exed-launchd.log for embed worker errors, then restart daemon.',
+                   datetime(''now''))`
+              );
+            }
+          } catch {
           }
-        } catch {
-        }
+        })();
       }
     });
   } catch (err) {
@@ -798,8 +801,8 @@ async function shutdown() {
 `);
   }
   try {
-    const { getClient: getClient2 } = await import("./database.js");
-    const client = getClient2();
+    const { getClient } = await import("./database.js");
+    const client = getClient();
     await client.execute("PRAGMA wal_checkpoint(TRUNCATE)");
     process.stderr.write("[exed] WAL checkpoint complete \u2014 all writes flushed to DB.\n");
   } catch (e) {
@@ -900,8 +903,8 @@ async function handleDbExecute(socket, requestId, sql, args) {
       sendResponse(socket, { id: requestId, error: "DB not initialized" });
       return;
     }
-    const { getClient: getClient2 } = await import("./database.js");
-    const client = getClient2();
+    const { getClient } = await import("./database.js");
+    const client = getClient();
     const deserializedArgs = deserializeArgs(args);
     const result = await client.execute({ sql, args: deserializedArgs });
     _dbRequestsServed++;
@@ -926,8 +929,8 @@ async function handleDbBatch(socket, requestId, statements, mode) {
       sendResponse(socket, { id: requestId, error: "DB not initialized" });
       return;
     }
-    const { getClient: getClient2 } = await import("./database.js");
-    const client = getClient2();
+    const { getClient } = await import("./database.js");
+    const client = getClient();
     const stmts = statements.map((s) => ({
       sql: s.sql,
       args: deserializeArgs(s.args)
@@ -961,7 +964,7 @@ async function handleIngest(req) {
       project_name: req.projectName,
       has_error: req.hasError,
       timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-      task_id: req.taskId ?? null,
+      task_id: req.taskId ?? void 0,
       confidence: req.confidence,
       draft: req.draft,
       trajectory: req.trajectory ? JSON.stringify(req.trajectory) : void 0
@@ -1062,8 +1065,8 @@ async function _writeMemoryRecordInner(entry) {
 `);
     }
   }
-  const { getClient: getClient2 } = await import("./database.js");
-  const client = getClient2();
+  const { getClient } = await import("./database.js");
+  const client = getClient();
   const hasVector = vectorBlob !== null;
   await client.execute({
     sql: hasVector ? `INSERT OR IGNORE INTO memories
@@ -2171,14 +2174,14 @@ async function startReviewPolling() {
     lastNudgeSent: /* @__PURE__ */ new Map(),
     intervalMs: REVIEW_POLL_INTERVAL_MS
   };
-  const { pollReviewNudge, createReviewNudgeRealDeps, loadNudgeState } = await import("../daemon-orchestration-N5GPEP4F.js");
+  const { pollReviewNudge, createReviewNudgeRealDeps, loadNudgeState } = await import("../daemon-orchestration-ZBSS6VZR.js");
   const nudgeState = loadNudgeState();
   const tick = async () => {
     fired("review_polling");
     if (!await ensureStoreForPolling()) return;
     try {
-      const { getClient: getClient2 } = await import("./database.js");
-      const deps = polling.createRealDeps(getClient2);
+      const { getClient } = await import("./database.js");
+      const deps = polling.createRealDeps(getClient);
       const sent = await polling.pollPendingReviews(deps, state);
       if (sent.length > 0) acted("review_polling");
       for (const s of sent) {
@@ -2186,7 +2189,7 @@ async function startReviewPolling() {
 `);
       }
       try {
-        const nudgeDeps = createReviewNudgeRealDeps(getClient2);
+        const nudgeDeps = createReviewNudgeRealDeps(getClient);
         const nudged = await pollReviewNudge(nudgeDeps, nudgeState);
         for (const n of nudged) {
           process.stderr.write(`[exed] Review nudge pushed to idle coordinator: ${n}
@@ -2212,9 +2215,9 @@ function startSessionTTL() {
     fired("session_ttl");
     if (!await ensureStoreForPolling()) return;
     try {
-      const { getClient: getClient2 } = await import("./database.js");
-      const { checkSessionTTL, createSessionTTLRealDeps } = await import("../daemon-orchestration-N5GPEP4F.js");
-      const deps = createSessionTTLRealDeps(getClient2);
+      const { getClient } = await import("./database.js");
+      const { checkSessionTTL, createSessionTTLRealDeps } = await import("../daemon-orchestration-ZBSS6VZR.js");
+      const deps = createSessionTTLRealDeps(getClient);
       const killed = await checkSessionTTL(deps);
       if (killed.length > 0) acted("session_ttl");
     } catch (err) {
@@ -2261,10 +2264,10 @@ function startIdleKill() {
     try {
       const cfg = await getCachedConfig();
       if (!cfg) return;
-      const { getClient: getClient2 } = await import("./database.js");
-      const { pollIdleKill, createIdleKillRealDeps } = await import("../daemon-orchestration-N5GPEP4F.js");
+      const { getClient } = await import("./database.js");
+      const { pollIdleKill, createIdleKillRealDeps } = await import("../daemon-orchestration-ZBSS6VZR.js");
       const deps = createIdleKillRealDeps(
-        getClient2,
+        getClient,
         cfg.sessionLifecycle.idleKillIntercomAckWindowMs
       );
       const killed = await pollIdleKill(deps, _idleTickCounts, {
@@ -2298,8 +2301,8 @@ function startConsolidation() {
       if (!config.consolidationEnabled) return;
       if (!process.env.ANTHROPIC_API_KEY) return;
       if (!await ensureStoreForPolling()) return;
-      const { getClient: getClient2 } = await import("./database.js");
-      const client = getClient2();
+      const { getClient } = await import("./database.js");
+      const client = getClient();
       const { countUnconsolidated, isUserIdle, runConsolidation } = await import("./consolidation.js");
       const count = await countUnconsolidated(client);
       if (count < 20) {
@@ -2506,8 +2509,8 @@ function startGraphExtraction() {
       if (config.graphRagEnabled === false) return;
       if (!process.env.ANTHROPIC_API_KEY) return;
       if (!await ensureStoreForPolling()) return;
-      const { getClient: getClient2 } = await import("./database.js");
-      const client = getClient2();
+      const { getClient } = await import("./database.js");
+      const client = getClient();
       const { extractBatch } = await import("../graph-rag-G3EG5Q6L.js");
       const result = await extractBatch(client, 50, config.selfQueryModel);
       if (result.processed > 0) {
@@ -2534,8 +2537,8 @@ async function writeAgentStats() {
   if (!await ensureStoreForPolling()) return;
   try {
     acted("agent_stats");
-    const { getClient: getClient2 } = await import("./database.js");
-    const client = getClient2();
+    const { getClient } = await import("./database.js");
+    const client = getClient();
     const result = await client.execute({
       sql: `SELECT agent_id,
              COUNT(*) as total,
@@ -2607,8 +2610,8 @@ function startConfidenceDecay() {
     fired("confidence_decay");
     if (!await ensureStoreForPolling()) return;
     try {
-      const { getClient: getClient2 } = await import("./database.js");
-      const client = getClient2();
+      const { getClient } = await import("./database.js");
+      const client = getClient();
       const result = await client.execute({
         sql: `UPDATE memories
               SET confidence = MAX(0.3, COALESCE(confidence, 0.7) - 0.01)
@@ -2639,8 +2642,8 @@ function startReflectionSweep() {
     fired("reflection_sweep");
     if (!await ensureStoreForPolling()) return;
     try {
-      const { getClient: getClient2 } = await import("./database.js");
-      const client = getClient2();
+      const { getClient } = await import("./database.js");
+      const client = getClient();
       const agents = await client.execute(
         "SELECT DISTINCT agent_id FROM memory_cards WHERE active = 1 LIMIT 50"
       );
@@ -2749,9 +2752,9 @@ function startSoftDeletePurge() {
     fired("soft_delete_purge");
     if (!await ensureStoreForPolling()) return;
     try {
-      const { getClient: getClient2 } = await import("./database.js");
+      const { getClient } = await import("./database.js");
       const { SOFT_DELETE_RETENTION_DAYS } = await import("./database.js");
-      const client = getClient2();
+      const client = getClient();
       const cutoffDate = new Date(Date.now() - SOFT_DELETE_RETENTION_DAYS * 24 * 60 * 60 * 1e3).toISOString();
       const result = await client.execute({
         sql: `SELECT COUNT(*) as cnt FROM memories WHERE status = 'deleted' AND deleted_at IS NOT NULL AND deleted_at < ?`,
@@ -2819,7 +2822,7 @@ function startOrphanReaper() {
   const tick = async () => {
     fired("orphan_reaper");
     try {
-      const { reapOrphanedMcpProcesses, createOrphanReaperRealDeps } = await import("../daemon-orchestration-N5GPEP4F.js");
+      const { reapOrphanedMcpProcesses, createOrphanReaperRealDeps } = await import("../daemon-orchestration-ZBSS6VZR.js");
       const deps = createOrphanReaperRealDeps();
       const reaped = await reapOrphanedMcpProcesses(deps);
       if (reaped.length > 0) acted("orphan_reaper");
@@ -2843,7 +2846,7 @@ function startZombieAgentReaper() {
   const tick = async () => {
     fired("zombie_agent_reaper");
     try {
-      const { reapZombieAgentProcesses, createZombieAgentReaperRealDeps } = await import("../daemon-orchestration-N5GPEP4F.js");
+      const { reapZombieAgentProcesses, createZombieAgentReaperRealDeps } = await import("../daemon-orchestration-ZBSS6VZR.js");
       const deps = createZombieAgentReaperRealDeps();
       const reaped = reapZombieAgentProcesses(deps);
       if (reaped.length > 0) acted("zombie_agent_reaper");
@@ -2866,7 +2869,7 @@ function startWorktreeReaper() {
   const tick = async () => {
     fired("worktree_reaper");
     try {
-      const { reapOrphanedWorktrees, createWorktreeReaperRealDeps } = await import("../daemon-orchestration-N5GPEP4F.js");
+      const { reapOrphanedWorktrees, createWorktreeReaperRealDeps } = await import("../daemon-orchestration-ZBSS6VZR.js");
       const deps = await createWorktreeReaperRealDeps();
       const result = await reapOrphanedWorktrees(deps);
       if (result.pruned.length > 0) {
@@ -2896,8 +2899,8 @@ function startWalCheckpoint() {
     fired("wal_checkpoint");
     if (!await ensureStoreForPolling()) return;
     try {
-      const { getClient: getClient2 } = await import("./database.js");
-      const client = getClient2();
+      const { getClient } = await import("./database.js");
+      const client = getClient();
       await client.execute("PRAGMA wal_checkpoint(TRUNCATE)");
       acted("wal_checkpoint");
     } catch {
@@ -2914,9 +2917,9 @@ function startStuckTaskRelease() {
     fired("stuck_task_release");
     if (!await ensureStoreForPolling()) return;
     try {
-      const { getClient: getClient2 } = await import("./database.js");
-      const { releaseStuckTasks, createStuckTaskRealDeps } = await import("../daemon-orchestration-N5GPEP4F.js");
-      const deps = createStuckTaskRealDeps(getClient2);
+      const { getClient } = await import("./database.js");
+      const { releaseStuckTasks, createStuckTaskRealDeps } = await import("../daemon-orchestration-ZBSS6VZR.js");
+      const deps = createStuckTaskRealDeps(getClient);
       const released = await releaseStuckTasks(deps);
       if (released.length > 0) {
         acted("stuck_task_release");
@@ -2959,7 +2962,7 @@ function startTaskEnforcementScanner() {
       const { runTaskEnforcementTick } = await import("../task-enforcement-QYS2QEEO.js");
       const { getTransport } = await import("./transport.js");
       const { loadAgentConfig } = await import("./agent-config.js");
-      const { getClient: getClient2 } = await import("./database.js");
+      const { getClient } = await import("./database.js");
       const { loadEmployeesSync } = await import("./employees.js");
       const { sessionScopeFilter } = await import("../task-scope-OS66ZD7O.js");
       const transport = getTransport();
@@ -2969,7 +2972,7 @@ function startTaskEnforcementScanner() {
         transport,
         agentConfig: loadAgentConfig(),
         employees: loadEmployeesSync(),
-        client: await getClient2(),
+        client: await getClient(),
         scopeFilter: sessionScopeFilter(),
         capturePaneAsync,
         paneCache
@@ -3189,8 +3192,8 @@ function startBugAutoFix() {
   const tick = async () => {
     fired("bug_autofix");
     try {
-      const { getClient: getClient2 } = await import("./database.js");
-      const client = await getClient2();
+      const { getClient } = await import("./database.js");
+      const client = await getClient();
       const result = await client.execute({
         sql: `SELECT id, title, priority, assigned_to, status FROM tasks
               WHERE priority IN ('p0', 'p1')
@@ -3526,8 +3529,8 @@ try {
     try {
       if (!await ensureStoreForPolling()) return;
       const { readdirSync, readFileSync: rfs } = await import("fs");
-      const { getClient: getClient2 } = await import("./database.js");
-      const client = getClient2();
+      const { getClient } = await import("./database.js");
+      const client = getClient();
       const tasksRoot = path3.join(os2.homedir(), ".exe-os", "tasks");
       let synced = 0;
       const walk = (dir) => {
@@ -3594,9 +3597,9 @@ try {
     fired("intercom_dedup_cleanup");
     try {
       if (!await ensureStoreForPolling()) return;
-      const { getClient: getClient2 } = await import("./database.js");
+      const { getClient } = await import("./database.js");
       const { deduplicateIntercomMemories } = await import("./consolidation.js");
-      const count = await deduplicateIntercomMemories(getClient2());
+      const count = await deduplicateIntercomMemories(getClient());
       if (count > 0) {
         acted("intercom_dedup_cleanup");
         process.stderr.write(`[exed] Intercom dedup: archived ${count} duplicate intercom memories
@@ -3611,9 +3614,9 @@ try {
     fired("trace_ttl_sweep");
     try {
       if (!await ensureStoreForPolling()) return;
-      const { getClient: getClient2 } = await import("./database.js");
+      const { getClient } = await import("./database.js");
       const { sweepExpiredTraces } = await import("./consolidation.js");
-      const count = await sweepExpiredTraces(getClient2());
+      const count = await sweepExpiredTraces(getClient());
       if (count > 0) {
         acted("trace_ttl_sweep");
         process.stderr.write(`[exed] Trace TTL: deleted ${count} expired raw tool traces (>7d, importance<7)
@@ -3680,7 +3683,7 @@ try {
           const { createWsClient } = await import("./ws-client.js");
           const { initStore } = await import("./store.js");
           const { sendMessage, deliverLocalMessage, setWsClientSend } = await import("./messaging.js");
-          const { getClient: getClient2 } = await import("./database.js");
+          const { getClient } = await import("./database.js");
           await initStore();
           const wsClient = createWsClient({
             endpoint: config.cloud.endpoint.replace(/^https?/, "wss") + "/ws",
@@ -3706,7 +3709,7 @@ try {
             },
             onRegistry: async (devices) => {
               try {
-                const client = getClient2();
+                const client = getClient();
                 const now = (/* @__PURE__ */ new Date()).toISOString();
                 for (const d of devices) {
                   await client.execute({

package/dist/mcp/register-tools.js

@@ -1,9 +1,9 @@
 import {
   registerAllTools
-} from "../chunk-4F4SOCKN.js";
+} from "../chunk-CHZMPZJ3.js";
 import "../chunk-PLNYW6PA.js";
 import "../chunk-AFJWUI3Y.js";
-import "../chunk-7JCK6TXX.js";
+import "../chunk-62DAMAFL.js";
 import "../chunk-GHCVD7WV.js";
 import "../chunk-WZTQUBIE.js";
 import "../chunk-KH5Y6RR4.js";

package/dist/mcp/server.js

@@ -3,7 +3,7 @@ import {
 } from "../chunk-V4TZI6EO.js";
 import {
   registerAllTools
-} from "../chunk-4F4SOCKN.js";
+} from "../chunk-CHZMPZJ3.js";
 import {
   initLicenseGate
 } from "../chunk-PLNYW6PA.js";
@@ -11,7 +11,7 @@ import {
   startToolTelemetryFlush,
   wrapServerWithTelemetry
 } from "../chunk-AFJWUI3Y.js";
-import "../chunk-7JCK6TXX.js";
+import "../chunk-62DAMAFL.js";
 import "../chunk-GHCVD7WV.js";
 import "../chunk-WZTQUBIE.js";
 import "../chunk-KH5Y6RR4.js";

package/dist/{stack-update-PI2TWEGS.js → stack-update-C4BAPLXJ.js}

@@ -20,7 +20,7 @@ import {
   runStackUpdate,
   verifyReleaseHealth,
   verifyStackManifestSignature
-} from "./chunk-T5U27Y4H.js";
+} from "./chunk-M7NGABPF.js";
 import "./chunk-MVMMULOJ.js";
 import "./chunk-4GXRETYL.js";
 import "./chunk-LYH5HE24.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.197",
+  "version": "0.9.198",
   "description": "AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",

package/release-notes.json

@@ -1,6 +1,106 @@
 {
-  "current": "0.9.197",
+  "current": "0.9.198",
   "notes": {
+    "0.9.198": {
+      "version": "0.9.198",
+      "date": "2026-06-02",
+      "features": [
+        "consolidate registry.askexe.com → update.askexe.com as primary registry (#51)",
+        "nginx /v2/ route for Docker registry proxy on update.askexe.com",
+        "consolidate registry into update.askexe.com — license key = pull auth",
+        "scale daemon heap to 25% of system RAM, support 10+ coordinators",
+        "add query expansion + benchmark results to retrieval platform procedure",
+        "3-mode BEAM benchmark — FTS vs FTS+Graph vs Hybrid",
+        "wire update.askexe.com — billing schema + non-fatal image credentials",
+        "add 'never defer' platform procedure — fix it now or assign it now",
+        "BEAM multi-tier support — 100K, 1M, 10M token scales",
+        "MemoryAgentBench harness — ICLR 2026 benchmark",
+        "support outbox flusher + list_tasks null fix + doctor outbox status",
+        "bug report outbox flusher — reports reach AskExe even when daemon is dead",
+        "add daily-summary CLI entry point + enable tsup build",
+        "add daemon observability platform procedure",
+        "add retrieval architecture platform procedure for 8-16GB machines",
+        "graceful shutdown warning via intercom 90s before idle kill",
+        "upload pre-update snapshot to R2 before every stack-update",
+        "encrypted daily VPS backups with R2 cloud upload",
+        "conversation history import — parser + MCP tool + CLI",
+        "add vps-backup + vps-health-gate scripts with stack-update integration",
+        "add update_bug_report + update_feature_request MCP tools",
+        "VPS guardrails — Postgres backup cron + post-deploy health gate",
+        "co-occurrence edges + graph backfill script",
+        "write-time entity/relationship extraction from memory text",
+        "parallel retrieval (FTS+graph+embed) with _source attribution"
+      ],
+      "fixes": [
+        "zombie agent reaper never kills coordinator/exe session processes",
+        "typecheck errors blocking publish — async embed alert + dead code cleanup",
+        "session TTL uses registry registeredAt instead of tmux session_created",
+        "CRM auth defaults + benchmark beam.ts updates",
+        "enable GoTrue email auth by default in setup template",
+        "intercom signal path in packaged source — ships to customers on npm install",
+        "intercom signal path + registry consolidated to update.askexe.com",
+        "4 customer P2 bugs — CLI passthrough + agent casing + clipboard (#50)",
+        "MCP pressure eviction evicts ONE session, not all",
+        "GHCR registry escape hatch + feature request 400 payload fix",
+        "WS client graceful failure on CF 1101 + capped backoff",
+        "3 of 4 customer P2 bugs — CLI passthrough + agent casing + clipboard",
+        "remove auto-close on session end (source persisted this time)",
+        "parallel Tom isolation — task-scoped branches + multi-instance task lookup",
+        "downgrade multi-coordinator hard-fail to warning",
+        "daemon RSS reconnect + review push notify + hot_entities timestamp",
+        "HYGO stack-update blockers — volume regex + memory_audit --fix",
+        "spawn CWD cross-project contamination + identity load ordering",
+        "MCP hot-reload checks agent context for COO role, not just env var",
+        "eliminate cross-session dispatch bug in create_task",
+        "bug/feature report upstream updates — PATCH→POST with action field",
+        "strip stale X-Exe-Session from global config + guard against re-adding",
+        "BEAM CLaRa — direct JSON response instead of tool_use, bump max_tokens",
+        "BEAM CLaRa benchmark — correct endpoint + configurable model",
+        "MCP session dedup false positive + BEAM CLaRa benchmark mode"
+      ],
+      "security": [
+        "fix shell injection, SSRF, socket leaks, backup validation",
+        "bump v0.9.139 — 2 CRITICAL security fixes, 14 bug fixes, 6 features, customer config preservation",
+        "fix 2 CRITICAL + 1 HIGH from post-fix audit",
+        "validate X-Agent-Role against roster — prevent privilege escalation",
+        "release: stack v0.9.8 — security hardening + Hygo bug fixes",
+        "add webhook HMAC-SHA256 validation + disable query param auth in prod",
+        "pin GitHub Actions to SHAs, update jose to 6.2.3",
+        "harden support intake against abuse and data leakage",
+        "bump to v0.9.22 — Codex MCP parity + customer bug fixes + security audit remediation",
+        "audit: pre-hygo exe-gateway security report",
+        "add SECURITY.md — trust document for pre-install security evaluation",
+        "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
+      ],
+      "other": [
+        "bump to 0.9.198 — coordinator reaper guard",
+        "bump to 0.9.197 — TTL fix + registry consolidation + TS fixes",
+        "update all manifest images to update.askexe.com + compose + beam tuning",
+        "bump to 0.9.196",
+        "bump to 0.9.195",
+        "bump to 0.9.194",
+        "bump to 0.9.193",
+        "bump to 0.9.192",
+        "bump to 0.9.191",
+        "bump to 0.9.189",
+        "bump to 0.9.188 — HYGO stack-update blockers fixed",
+        "bump to 0.9.187",
+        "bump to 0.9.186 — cross-session dispatch fix",
+        "release: bump exe-os image to v0.9.185 in stack manifest",
+        "bump to 0.9.185",
+        "bump to 0.9.184",
+        "bump to 0.9.183",
+        "bump to 0.9.181 — BEAM 3-mode + query expansion",
+        "bump to 0.9.180 — complete worktree isolation",
+        "bump to 0.9.179",
+        "bump to 0.9.178 — Bob's null fixes merged",
+        "bump to 0.9.177",
+        "bump to 0.9.176",
+        "bump to 0.9.175",
+        "bump to 0.9.174 — Bob's daemon hardening merged"
+      ],
+      "migration_notes": []
+    },
     "0.9.197": {
       "version": "0.9.197",
       "date": "2026-06-02",
@@ -406,109 +506,6 @@
         "If daemon goes down, agents will now fail instead of silently",
         "exe-daemon.ts kills old embed.pid process and cleans up"
       ]
-    },
-    "0.9.159": {
-      "version": "0.9.159",
-      "date": "2026-05-29",
-      "features": [
-        "verify-stack post-deploy checks — 8 runtime validations",
-        "preflight deploy gate + filtered schema + gateway graceful degradation",
-        "harden /exe-afk as primary monitoring tool, deprecate /loop for orchestration",
-        "add --judge-model flag to LoCoMo harness",
-        "dashboard.askexe.com — customer credits dashboard (backend + frontend)",
-        "config persistence contract — document + enforce what survives stack updates",
-        "add persona depth to identity — tone, vocabulary, response_style, communication_patterns",
-        "4 BEAM improvements — o4-mini judge, entity expansion, temporal prompts, contradiction detection",
-        "DMR 100% + BEAM 35% — full results with Claude Sonnet judge",
-        "session_scope read paths — search filter + backfill + tests",
-        "add session_scope filtering to memory read paths + MCP tools + backfill",
-        "classify prompt memories as conversation type + enrich session-end captures",
-        "add session_scope column to memories table — schema migration + all write paths",
-        "fix Codex integration + add --codex to all 4 harnesses",
-        "add checkpoint/resume support for long LoCoMo runs",
-        "add Codex GPT-5.5 judge, pre-embedding, expanded retrieval, production prompts",
-        "stack manifest 0.9.10 — all new images for customer deployment",
-        "update safety + portable backups + restore",
-        "complete deployment readiness — all 14 second-pass blind spots fixed",
-        "production-ready stack — all 15 blind spots fixed",
-        "blocked task notification — ping dispatcher immediately on status change",
-        "self-improving skills — usage tracking, success counting, and refinement daemon",
-        "4 retrieval improvements — query expansion, stop words, contradiction resolution, abstention",
-        "competitive roadmap — serverless tier, identity depth, self-improving skills, user modeling",
-        "run database migrations before container swap in stack-update"
-      ],
-      "fixes": [
-        "cloud sync NOT NULL resilience — sqlSafeRequired() defaults + per-record error handling, skip bad rows instead of retry storm",
-        "auto-close temporal guard — reject commits older than task creation date, raise threshold 0.6→0.8",
-        "session_scope fallback — listTasks returns unscoped results when scoped query finds 0 after daemon restart",
-        "orphan task file cleanup safety — 24h threshold (was 1h) + ID-based fallback before deleting",
-        "blocked task escalation — writeNotification to COO when auto-wake fails 3x and marks task blocked",
-        "daemon memory cascade — prevent duplicate daemons, reap orphan hooks, cap heap",
-        "auto-inject timeout on tmux capture-pane to prevent session freeze",
-        "auto-wake crash loop — filter boot memories + circuit breaker",
-        "Codex numbered instances use baseAgentName for identity resolution",
-        "auto-chain project scope + writeNotification on needs_review",
-        "persist WhatsApp auth in Docker volume — prevent data loss on update",
-        "wake idle codex sessions on pending tasks",
-        "fix daemon MCP session heap leak",
-        "include typescript as runtime dependency",
-        "remove direct Postgres license validation — CF Worker is the only path",
-        "gateway stop_grace_period 45s — prevent SIGKILL during message drain",
-        "filter person names from FTS queries to prevent speaker-prefix pollution",
-        "DMR retrieval 20% → 100% — stop words, name filtering, speaker fix",
-        "kill idle Codex/OpenCode sessions instead of sending intercom — enables auto-wake respawn",
-        "suppress daemon auto-reconnect noise — only log after attempt 2+",
-        "remove E2EE from bug reports — support intake must be readable server-side",
-        "support API — verified encrypted bug reports work (HTTP 201)",
-        "support API accepts encrypted bug reports — prevents HTTP 400",
-        "Codex agents recheck tasks before stopping — prevents idle-with-open-tasks",
-        "P0 #13 session_scope in cleanup SELECT + P0 #6 wire review signal files"
-      ],
-      "security": [
-        "fix shell injection, SSRF, socket leaks, backup validation",
-        "bump v0.9.139 — 2 CRITICAL security fixes, 14 bug fixes, 6 features, customer config preservation",
-        "fix 2 CRITICAL + 1 HIGH from post-fix audit",
-        "validate X-Agent-Role against roster — prevent privilege escalation",
-        "release: stack v0.9.8 — security hardening + Hygo bug fixes",
-        "add webhook HMAC-SHA256 validation + disable query param auth in prod",
-        "pin GitHub Actions to SHAs, update jose to 6.2.3",
-        "harden support intake against abuse and data leakage",
-        "bump to v0.9.22 — Codex MCP parity + customer bug fixes + security audit remediation",
-        "audit: pre-hygo exe-gateway security report",
-        "add SECURITY.md — trust document for pre-install security evaluation",
-        "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
-      ],
-      "other": [
-        "bump v0.9.159 — daemon memory cascade fix + session_scope + benchmarks",
-        "arch: customer onboarding automation — exe-os deploy-customer command",
-        "arch: Fleet Operations Roadmap — 8 phases for production safety at scale",
-        "arch: add filtered table pipeline + pre-flight deploy system to roadmap",
-        "add EXE-OS-STACK.md — complete 6-repo deployment map",
-        "cache tmux session (5 calls → 1) + offset daemon timers",
-        "cut agent boot from 4min to <30s — merge Bash blocks + parallel DB queries",
-        "rename memory schema → graph across codebase",
-        "unified access control — admin token + GoTrue across all services",
-        "capture data pipeline spec — raw → filter → wiki + CRM projection",
-        "bump to v0.9.149 — task lifecycle simplification + review notification fix",
-        "capture gateway connection observability requirements (2026-05-28)",
-        "bump to v0.9.146 for publish",
-        "Windows support architecture — WezTerm + WSL decision (2026-05-27)",
-        "Merge branch 'tom4-work' — device-scoped behaviors + push-notification fix",
-        "bump to v0.9.145 for publish",
-        "revert: keep workflow files unchanged — GitHub OAuth blocks workflow scope",
-        "stage remaining Yoshi fixes — features + bug cleanup",
-        "add tests for daemon restart orchestrator module",
-        "publish v0.9.144 — ESM require() fix + reliable task signals + OAuth 2.1",
-        "add MCP tool tests for message, cloud-sync, and file-copy",
-        "add coverage for send_message, cloud_sync, file_copy MCP tools (Track A)",
-        "Recover MCP sessions after daemon restart",
-        "publish v0.9.143 — all fixes live",
-        "publish v0.9.142"
-      ],
-      "migration_notes": [
-        "If daemon goes down, agents will now fail instead of silently",
-        "exe-daemon.ts kills old embed.pid process and cleans up"
-      ]
     }
   }
 }