@askexenow/exe-os 0.9.199 → 0.9.200

package/dist/{tool-telemetry-Z46QEUD5.js → tool-telemetry-EWE2YR2K.js}

@@ -4,7 +4,7 @@ import {
   startToolTelemetryFlush,
   stopToolTelemetryFlush,
   wrapServerWithTelemetry
-} from "./chunk-AFJWUI3Y.js";
+} from "./chunk-JMMYWY7C.js";
 import "./chunk-MLKGABMK.js";
 export {
   getToolUsageStats,

package/dist/tui/App.js

@@ -1,34 +1,35 @@
 #!/usr/bin/env node
 import {
   getSessionPrompt
-} from "../chunk-2HEXCZGP.js";
-import "../chunk-65K2BQTG.js";
+} from "../chunk-GR53PEEH.js";
+import "../chunk-E5P2TY4E.js";
 import "../chunk-2ZYEO7U7.js";
 import {
   sessionScopeFilter
-} from "../chunk-MABQMUCQ.js";
+} from "../chunk-WXQRFDY4.js";
 import "../chunk-RN6XYY7U.js";
 import "../chunk-QI4IXJN7.js";
 import "../chunk-64WZEXXA.js";
-import "../chunk-GZIAQYGI.js";
 import "../chunk-TXWQPL2U.js";
 import "../chunk-CSTJQDOE.js";
+import "../chunk-GZIAQYGI.js";
+import "../chunk-BDRSCPCG.js";
 import "../chunk-ZQX6UOP6.js";
 import "../chunk-H2CFBUGF.js";
 import "../chunk-NGP6LSV2.js";
-import "../chunk-ZHINF5CG.js";
+import "../chunk-VQB4VBEQ.js";
 import "../chunk-CVYC6DUW.js";
 import "../chunk-OPU3NYOO.js";
 import "../chunk-GJV3WDWM.js";
 import {
   orgBus
 } from "../chunk-MP2AFCGL.js";
-import "../chunk-JW3MATT5.js";
+import "../chunk-ATVB6CY7.js";
 import "../chunk-HYZV25LY.js";
 import {
   DEFAULT_COORDINATOR_TEMPLATE_NAME,
   isCoordinatorName
-} from "../chunk-TGOJR5SS.js";
+} from "../chunk-3HM6MZ4O.js";
 import "../chunk-RVSGXGWG.js";
 import "../chunk-FXU7JOXK.js";
 import "../chunk-MVMMULOJ.js";
@@ -7401,7 +7402,7 @@ function useOrchestrator(enabled = true) {
     let cancelled = false;
     async function init() {
       try {
-        const { MultiAgentOrchestrator } = await import("../orchestrator-FRFCMLW3.js");
+        const { MultiAgentOrchestrator } = await import("../orchestrator-RETZBZNU.js");
         const { getCoordinatorName, isCoordinatorRole, loadEmployees } = await import("../lib/employees.js");
         const { isExeSession } = await import("../lib/tmux-routing.js");
         const { listTmuxSessions, inTmux } = await import("../lib/tmux-status.js");
@@ -7442,7 +7443,7 @@ function useOrchestrator(enabled = true) {
         setTotalInProgress(health.totalInProgress);
         try {
           const { getClient } = await import("../lib/database.js");
-          const { sessionScopeFilter: sessionScopeFilter2 } = await import("../task-scope-AI62AIPT.js");
+          const { sessionScopeFilter: sessionScopeFilter2 } = await import("../task-scope-C7QECQSB.js");
           const client = getClient();
           const uoScope = sessionScopeFilter2();
           const result = await client.execute({
@@ -7474,7 +7475,7 @@ function useOrchestrator(enabled = true) {
   const spawnSession = useCallback5(
     async (agentId) => {
       try {
-        const { createTaskCore } = await import("../tasks-crud-IEOK55IV.js");
+        const { createTaskCore } = await import("../tasks-crud-4VGXAUW5.js");
         const { ensureEmployee } = await import("../lib/tmux-routing.js");
         const { getCoordinatorName } = await import("../lib/employees.js");
         await createTaskCore({
@@ -8096,7 +8097,7 @@ function TasksView({ onBack }) {
     const { withTrace } = await import("../telemetry-43X3GT3R.js");
     return withTrace("tui.tasks.loadTasks", async () => {
       try {
-        const { loadTaskList } = await import("../tui-data-HIFVW2PE.js");
+        const { loadTaskList } = await import("../tui-data-LQQ66HCW.js");
         const tasks = await loadTaskList();
         setAllTasks(
           tasks.map((task) => ({
@@ -8929,7 +8930,7 @@ function TeamView({ onBack, onViewSessions }) {
         let projectsByEmployee = /* @__PURE__ */ new Map();
         let currentTaskByEmployee = /* @__PURE__ */ new Map();
         try {
-          const { loadTeamBadgeCounts, loadTeamDetailMetrics } = await import("../tui-data-HIFVW2PE.js");
+          const { loadTeamBadgeCounts, loadTeamDetailMetrics } = await import("../tui-data-LQQ66HCW.js");
           setBadgeInFlight(true);
           const badgeCountsPromise = loadTeamBadgeCounts();
           const detailsPromise = loadTeamDetailMetrics(roster.map((emp) => emp.name));
@@ -9295,7 +9296,7 @@ function WikiView({ onBack }) {
     }
     setSearchLoading(true);
     try {
-      const { searchWikiMemoryRows } = await import("../tui-data-HIFVW2PE.js");
+      const { searchWikiMemoryRows } = await import("../tui-data-LQQ66HCW.js");
       setSearchResults(await searchWikiMemoryRows(query));
     } catch {
       setSearchResults([]);

package/dist/{tui-data-HIFVW2PE.js → tui-data-LQQ66HCW.js}

@@ -1,25 +1,26 @@
 import {
   sessionScopeFilter
-} from "./chunk-MABQMUCQ.js";
+} from "./chunk-WXQRFDY4.js";
 import "./chunk-RN6XYY7U.js";
 import "./chunk-QI4IXJN7.js";
 import "./chunk-64WZEXXA.js";
-import "./chunk-GZIAQYGI.js";
 import "./chunk-TXWQPL2U.js";
 import "./chunk-CSTJQDOE.js";
+import "./chunk-GZIAQYGI.js";
+import "./chunk-BDRSCPCG.js";
 import "./chunk-ZQX6UOP6.js";
 import "./chunk-H2CFBUGF.js";
 import "./chunk-NGP6LSV2.js";
-import "./chunk-ZHINF5CG.js";
+import "./chunk-VQB4VBEQ.js";
 import "./chunk-CVYC6DUW.js";
 import "./chunk-OPU3NYOO.js";
 import "./chunk-GJV3WDWM.js";
 import "./chunk-MP2AFCGL.js";
-import "./chunk-JW3MATT5.js";
+import "./chunk-ATVB6CY7.js";
 import "./chunk-HYZV25LY.js";
 import {
   getClient
-} from "./chunk-TGOJR5SS.js";
+} from "./chunk-3HM6MZ4O.js";
 import "./chunk-RVSGXGWG.js";
 import "./chunk-FXU7JOXK.js";
 import "./chunk-MVMMULOJ.js";

package/dist/{worker-gate-F3L7XDMJ.js → worker-gate-POIBNVX7.js}

@@ -6,7 +6,7 @@ import {
   releaseBackfillLock,
   tryAcquireBackfillLock,
   tryAcquireWorkerSlot
-} from "./chunk-IFFVONU6.js";
+} from "./chunk-WVNKXOWZ.js";
 import "./chunk-4GXRETYL.js";
 import "./chunk-LYH5HE24.js";
 import "./chunk-MLKGABMK.js";

package/dist/{workflow-engine-H5KTDDJG.js → workflow-engine-MA2H5JEZ.js}

@@ -10,8 +10,8 @@ import {
   persistWorkflows,
   runWorkflow,
   startWorkflow
-} from "./chunk-OF6TXNOC.js";
-import "./chunk-54MZI4PK.js";
+} from "./chunk-SUNFUS3O.js";
+import "./chunk-I3B4QG5C.js";
 import "./chunk-MLKGABMK.js";
 export {
   advanceWorkflow,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.199",
+  "version": "0.9.200",
   "description": "AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",
@@ -41,6 +41,7 @@
     "exe-pending-messages": "./dist/bin/exe-pending-messages.js",
     "exe-pending-notifications": "./dist/bin/exe-pending-notifications.js",
     "exe-pending-reviews": "./dist/bin/exe-pending-reviews.js",
+    "exe-os-orchestration-metrics": "./dist/bin/orchestration-metrics.js",
     "intercom-check": "./dist/bin/intercom-check.js",
     "git-sweep": "./dist/bin/git-sweep.js",
     "customer-readiness": "./dist/bin/customer-readiness.js",

package/release-notes.json

@@ -1,6 +1,106 @@
 {
-  "current": "0.9.199",
+  "current": "0.9.200",
   "notes": {
+    "0.9.200": {
+      "version": "0.9.200",
+      "date": "2026-06-03",
+      "features": [
+        "browser prompt injection defense + persistent cookie jar",
+        "wire exe-erp into VPS stack (init-db, cloudflared, manifest, docs)",
+        "consolidate registry.askexe.com → update.askexe.com as primary registry (#51)",
+        "nginx /v2/ route for Docker registry proxy on update.askexe.com",
+        "consolidate registry into update.askexe.com — license key = pull auth",
+        "scale daemon heap to 25% of system RAM, support 10+ coordinators",
+        "add query expansion + benchmark results to retrieval platform procedure",
+        "3-mode BEAM benchmark — FTS vs FTS+Graph vs Hybrid",
+        "wire update.askexe.com — billing schema + non-fatal image credentials",
+        "add 'never defer' platform procedure — fix it now or assign it now",
+        "BEAM multi-tier support — 100K, 1M, 10M token scales",
+        "MemoryAgentBench harness — ICLR 2026 benchmark",
+        "support outbox flusher + list_tasks null fix + doctor outbox status",
+        "bug report outbox flusher — reports reach AskExe even when daemon is dead",
+        "add daily-summary CLI entry point + enable tsup build",
+        "add daemon observability platform procedure",
+        "add retrieval architecture platform procedure for 8-16GB machines",
+        "graceful shutdown warning via intercom 90s before idle kill",
+        "upload pre-update snapshot to R2 before every stack-update",
+        "encrypted daily VPS backups with R2 cloud upload",
+        "conversation history import — parser + MCP tool + CLI",
+        "add vps-backup + vps-health-gate scripts with stack-update integration",
+        "add update_bug_report + update_feature_request MCP tools",
+        "VPS guardrails — Postgres backup cron + post-deploy health gate",
+        "co-occurrence edges + graph backfill script"
+      ],
+      "fixes": [
+        "add self_heal_restart to DaemonEvent type + orchestration event tracking",
+        "shard circuit breaker, event loop self-healing, heap cap, intercom reason",
+        "add generate-hook-manifest to tsup entries — unblocks publish gate",
+        "remove unused cleanupExpiredJars import — fixes TS6133 blocking publish",
+        "remove dead actualRuntime variable — fixes TS6133 blocking publish",
+        "isolate Metal/GPU ops in worker process — reranker dispose crash was killing daemon",
+        "remove remaining /exe-intercom invocations + update tests",
+        "replace /exe-intercom skill invocation with plain text prompt",
+        "remove ALL --strict-mcp-config usage — was blocking /exe-intercom in session MCP config too",
+        "tsup outputs to dist directly — kill dist-next migration shim",
+        "drop --strict-mcp-config from lean MCP — was blocking skill loading (/exe-intercom)",
+        "zombie agent reaper never kills coordinator/exe session processes",
+        "typecheck errors blocking publish — async embed alert + dead code cleanup",
+        "session TTL uses registry registeredAt instead of tmux session_created",
+        "CRM auth defaults + benchmark beam.ts updates",
+        "enable GoTrue email auth by default in setup template",
+        "intercom signal path in packaged source — ships to customers on npm install",
+        "intercom signal path + registry consolidated to update.askexe.com",
+        "4 customer P2 bugs — CLI passthrough + agent casing + clipboard (#50)",
+        "MCP pressure eviction evicts ONE session, not all",
+        "GHCR registry escape hatch + feature request 400 payload fix",
+        "WS client graceful failure on CF 1101 + capped backoff",
+        "3 of 4 customer P2 bugs — CLI passthrough + agent casing + clipboard",
+        "remove auto-close on session end (source persisted this time)",
+        "parallel Tom isolation — task-scoped branches + multi-instance task lookup"
+      ],
+      "security": [
+        "fix shell injection, SSRF, socket leaks, backup validation",
+        "bump v0.9.139 — 2 CRITICAL security fixes, 14 bug fixes, 6 features, customer config preservation",
+        "fix 2 CRITICAL + 1 HIGH from post-fix audit",
+        "validate X-Agent-Role against roster — prevent privilege escalation",
+        "release: stack v0.9.8 — security hardening + Hygo bug fixes",
+        "add webhook HMAC-SHA256 validation + disable query param auth in prod",
+        "pin GitHub Actions to SHAs, update jose to 6.2.3",
+        "harden support intake against abuse and data leakage",
+        "bump to v0.9.22 — Codex MCP parity + customer bug fixes + security audit remediation",
+        "audit: pre-hygo exe-gateway security report",
+        "add SECURITY.md — trust document for pre-install security evaluation",
+        "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
+      ],
+      "other": [
+        "bump to v0.9.200",
+        "design orchestration measurement baseline",
+        "capture tmux hardening path",
+        "add orchestration counterargument",
+        "audit tmux orchestration architecture",
+        "bump to v0.9.199",
+        "remove registry.askexe.com references — fully consolidated to update.askexe.com",
+        "bump to 0.9.198 — coordinator reaper guard",
+        "bump to 0.9.197 — TTL fix + registry consolidation + TS fixes",
+        "update all manifest images to update.askexe.com + compose + beam tuning",
+        "bump to 0.9.196",
+        "bump to 0.9.195",
+        "bump to 0.9.194",
+        "bump to 0.9.193",
+        "bump to 0.9.192",
+        "bump to 0.9.191",
+        "bump to 0.9.189",
+        "bump to 0.9.188 — HYGO stack-update blockers fixed",
+        "bump to 0.9.187",
+        "bump to 0.9.186 — cross-session dispatch fix",
+        "release: bump exe-os image to v0.9.185 in stack manifest",
+        "bump to 0.9.185",
+        "bump to 0.9.184",
+        "bump to 0.9.183",
+        "bump to 0.9.181 — BEAM 3-mode + query expansion"
+      ],
+      "migration_notes": []
+    },
     "0.9.199": {
       "version": "0.9.199",
       "date": "2026-06-02",
@@ -400,109 +500,6 @@
         "bump to 0.9.172"
       ],
       "migration_notes": []
-    },
-    "0.9.162": {
-      "version": "0.9.162",
-      "date": "2026-06-02",
-      "features": [
-        "add daily-summary CLI entry point + enable tsup build",
-        "add daemon observability platform procedure",
-        "add retrieval architecture platform procedure for 8-16GB machines",
-        "graceful shutdown warning via intercom 90s before idle kill",
-        "upload pre-update snapshot to R2 before every stack-update",
-        "encrypted daily VPS backups with R2 cloud upload",
-        "conversation history import — parser + MCP tool + CLI",
-        "add vps-backup + vps-health-gate scripts with stack-update integration",
-        "add update_bug_report + update_feature_request MCP tools",
-        "VPS guardrails — Postgres backup cron + post-deploy health gate",
-        "co-occurrence edges + graph backfill script",
-        "write-time entity/relationship extraction from memory text",
-        "parallel retrieval (FTS+graph+embed) with _source attribution",
-        "instance_id binding for parallel workers",
-        "dual-column FTS5 with keywords + BM25 weighted search",
-        "dual-column FTS5 with keyword extraction for first-class keyword search",
-        "keyword-enriched consolidation + backfill script (#28)",
-        "add worktree reaper daemon job to prune orphaned agent worktrees",
-        "add pre-flight gates to close_task — status gate, worktree check, commit recency",
-        "add wiki document ingestion via API for embedding pipeline",
-        "add filtered.* projection targets to projection worker",
-        "verify-stack post-deploy checks — 8 runtime validations",
-        "preflight deploy gate + filtered schema + gateway graceful degradation",
-        "harden /exe-afk as primary monitoring tool, deprecate /loop for orchestration",
-        "add --judge-model flag to LoCoMo harness"
-      ],
-      "fixes": [
-        "resolve all TypeScript errors for npm publish",
-        "suppress benign eviction logs + graceful idle kill wind-down",
-        "expand orphan reaper patterns to cover ALL hook scripts",
-        "last 4 deferred bugs — zero remaining issues",
-        "syntax error in tmux-routing — restore setTimeout for deferred nudge",
-        "remove redundant /exe-call + enforce cross_session COO-only",
-        "all 4 sendKeys bugs — use sendKeysLiteral for long messages",
-        "deferred nudge uses sendKeysLiteral to ensure Enter is pressed",
-        "CTO/CMO are NOT multi-instance + always notify existing sessions",
-        "remove duplicate keywords declaration from PR #28 merge conflict",
-        "force=true intercom bypasses busy check — COO messages always land",
-        "message delivery to coordinator used wrong session name (exe-exe1 vs exe1)",
-        "intercom blocked by legacy cwd/exe/{agent}/ task path check",
-        "_llama ReferenceError crashes EVERY daemon shutdown (bob audit #1)",
-        "intercom delivers to coordinator sessions — messages no longer lost",
-        "tmux spawn — create session then send-keys (not single-arg command)",
-        "root cause of agent death loops — idle-kill murders taskless sessions",
-        "daemon dispatch uses deferred setTimeout for /exe-call and nudge",
-        "skip BOTH boot polls when called from daemon — eliminates 20s+ MCP blackout",
-        "complete all 16 audit findings — zero remaining daemon issues",
-        "5 daemon reliability fixes from audit + task DB re-sync",
-        "disable auto-wake + reduce boot poll + fix reflection SQL",
-        "reflection sweep broken SQL — DISTINCT aggregate with 2 args crashes SQLite",
-        "defer WS client + projection worker init to eliminate 8.8s boot lag",
-        "tool capability index self-deadlock — daemon was embedding through its own socket"
-      ],
-      "security": [
-        "fix shell injection, SSRF, socket leaks, backup validation",
-        "bump v0.9.139 — 2 CRITICAL security fixes, 14 bug fixes, 6 features, customer config preservation",
-        "fix 2 CRITICAL + 1 HIGH from post-fix audit",
-        "validate X-Agent-Role against roster — prevent privilege escalation",
-        "release: stack v0.9.8 — security hardening + Hygo bug fixes",
-        "add webhook HMAC-SHA256 validation + disable query param auth in prod",
-        "pin GitHub Actions to SHAs, update jose to 6.2.3",
-        "harden support intake against abuse and data leakage",
-        "bump to v0.9.22 — Codex MCP parity + customer bug fixes + security audit remediation",
-        "audit: pre-hygo exe-gateway security report",
-        "add SECURITY.md — trust document for pre-install security evaluation",
-        "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
-      ],
-      "other": [
-        "release: stack v0.9.11 — HYGO deployment images + remove stale gateway Dockerfile",
-        "add jitter to daemon client reconnect to prevent storm",
-        "async pane capture in daemon, reduce event loop blocking",
-        "add incident response playbook for HYGO VPS deployments",
-        "add HYGO setup guide for Leo (COO) + exe-os installation",
-        "cleanup: remove all sendKeys fallbacks + CLI /exe-call + stale comments",
-        "add ORCHESTRATION.md — definitive architecture for multi-agent dispatch",
-        "debug: add intercom delivery logging to trace COO message path",
-        "add daemon reliability integration tests (9 tests)",
-        "bump v0.9.160 — cloud sync resilience + orphan reaper + auto-close guard",
-        "update release notes with 5 bug fixes from support triage",
-        "bump v0.9.159 — daemon memory cascade fix + session_scope + benchmarks",
-        "arch: customer onboarding automation — exe-os deploy-customer command",
-        "arch: Fleet Operations Roadmap — 8 phases for production safety at scale",
-        "arch: add filtered table pipeline + pre-flight deploy system to roadmap",
-        "add EXE-OS-STACK.md — complete 6-repo deployment map",
-        "cache tmux session (5 calls → 1) + offset daemon timers",
-        "cut agent boot from 4min to <30s — merge Bash blocks + parallel DB queries",
-        "rename memory schema → graph across codebase",
-        "unified access control — admin token + GoTrue across all services",
-        "capture data pipeline spec — raw → filter → wiki + CRM projection",
-        "bump to v0.9.149 — task lifecycle simplification + review notification fix",
-        "capture gateway connection observability requirements (2026-05-28)",
-        "bump to v0.9.146 for publish",
-        "Windows support architecture — WezTerm + WSL decision (2026-05-27)"
-      ],
-      "migration_notes": [
-        "If daemon goes down, agents will now fail instead of silently",
-        "exe-daemon.ts kills old embed.pid process and cleans up"
-      ]
     }
   }
 }