@askexenow/exe-os 0.9.199 → 0.9.201

package/release-notes.json

@@ -1,9 +1,9 @@
 {
-  "current": "0.9.199",
+  "current": "0.9.201",
   "notes": {
-    "0.9.199": {
-      "version": "0.9.199",
-      "date": "2026-06-02",
+    "0.9.201": {
+      "version": "0.9.201",
+      "date": "2026-06-03",
       "features": [
         "browser prompt injection defense + persistent cookie jar",
         "wire exe-erp into VPS stack (init-db, cloudflared, manifest, docs)",
@@ -32,6 +32,10 @@
         "co-occurrence edges + graph backfill script"
       ],
       "fixes": [
+        "database.ts import fixes for corrupt backup cleanup",
+        "add keywords column to shard schema + cleanup corrupt DB backups",
+        "add self_heal_restart to DaemonEvent type + orchestration event tracking",
+        "shard circuit breaker, event loop self-healing, heap cap, intercom reason",
         "add generate-hook-manifest to tsup entries — unblocks publish gate",
         "remove unused cleanupExpiredJars import — fixes TS6133 blocking publish",
         "remove dead actualRuntime variable — fixes TS6133 blocking publish",
@@ -52,11 +56,7 @@
         "MCP pressure eviction evicts ONE session, not all",
         "GHCR registry escape hatch + feature request 400 payload fix",
         "WS client graceful failure on CF 1101 + capped backoff",
-        "3 of 4 customer P2 bugs — CLI passthrough + agent casing + clipboard",
-        "remove auto-close on session end (source persisted this time)",
-        "parallel Tom isolation — task-scoped branches + multi-instance task lookup",
-        "downgrade multi-coordinator hard-fail to warning",
-        "daemon RSS reconnect + review push notify + hot_entities timestamp"
+        "3 of 4 customer P2 bugs — CLI passthrough + agent casing + clipboard"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -73,6 +73,12 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "bump to v0.9.201",
+        "bump to v0.9.200",
+        "design orchestration measurement baseline",
+        "capture tmux hardening path",
+        "add orchestration counterargument",
+        "audit tmux orchestration architecture",
         "bump to v0.9.199",
         "remove registry.askexe.com references — fully consolidated to update.askexe.com",
         "bump to 0.9.198 — coordinator reaper guard",
@@ -91,19 +97,13 @@
         "release: bump exe-os image to v0.9.185 in stack manifest",
         "bump to 0.9.185",
         "bump to 0.9.184",
-        "bump to 0.9.183",
-        "bump to 0.9.181 — BEAM 3-mode + query expansion",
-        "bump to 0.9.180 — complete worktree isolation",
-        "bump to 0.9.179",
-        "bump to 0.9.178 — Bob's null fixes merged",
-        "bump to 0.9.177",
-        "bump to 0.9.176"
+        "bump to 0.9.183"
       ],
       "migration_notes": []
     },
-    "0.9.198": {
-      "version": "0.9.198",
-      "date": "2026-06-02",
+    "0.9.200": {
+      "version": "0.9.200",
+      "date": "2026-06-03",
       "features": [
         "browser prompt injection defense + persistent cookie jar",
         "wire exe-erp into VPS stack (init-db, cloudflared, manifest, docs)",
@@ -132,6 +132,8 @@
         "co-occurrence edges + graph backfill script"
       ],
       "fixes": [
+        "add self_heal_restart to DaemonEvent type + orchestration event tracking",
+        "shard circuit breaker, event loop self-healing, heap cap, intercom reason",
         "add generate-hook-manifest to tsup entries — unblocks publish gate",
         "remove unused cleanupExpiredJars import — fixes TS6133 blocking publish",
         "remove dead actualRuntime variable — fixes TS6133 blocking publish",
@@ -154,9 +156,7 @@
         "WS client graceful failure on CF 1101 + capped backoff",
         "3 of 4 customer P2 bugs — CLI passthrough + agent casing + clipboard",
         "remove auto-close on session end (source persisted this time)",
-        "parallel Tom isolation — task-scoped branches + multi-instance task lookup",
-        "downgrade multi-coordinator hard-fail to warning",
-        "daemon RSS reconnect + review push notify + hot_entities timestamp"
+        "parallel Tom isolation — task-scoped branches + multi-instance task lookup"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -173,6 +173,12 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "bump to v0.9.200",
+        "design orchestration measurement baseline",
+        "capture tmux hardening path",
+        "add orchestration counterargument",
+        "audit tmux orchestration architecture",
+        "bump to v0.9.199",
         "remove registry.askexe.com references — fully consolidated to update.askexe.com",
         "bump to 0.9.198 — coordinator reaper guard",
         "bump to 0.9.197 — TTL fix + registry consolidation + TS fixes",
@@ -191,20 +197,16 @@
         "bump to 0.9.185",
         "bump to 0.9.184",
         "bump to 0.9.183",
-        "bump to 0.9.181 — BEAM 3-mode + query expansion",
-        "bump to 0.9.180 — complete worktree isolation",
-        "bump to 0.9.179",
-        "bump to 0.9.178 — Bob's null fixes merged",
-        "bump to 0.9.177",
-        "bump to 0.9.176",
-        "bump to 0.9.175"
+        "bump to 0.9.181 — BEAM 3-mode + query expansion"
       ],
       "migration_notes": []
     },
-    "0.9.197": {
-      "version": "0.9.197",
+    "0.9.199": {
+      "version": "0.9.199",
       "date": "2026-06-02",
       "features": [
+        "browser prompt injection defense + persistent cookie jar",
+        "wire exe-erp into VPS stack (init-db, cloudflared, manifest, docs)",
         "consolidate registry.askexe.com → update.askexe.com as primary registry (#51)",
         "nginx /v2/ route for Docker registry proxy on update.askexe.com",
         "consolidate registry into update.askexe.com — license key = pull auth",
@@ -227,11 +229,19 @@
         "add vps-backup + vps-health-gate scripts with stack-update integration",
         "add update_bug_report + update_feature_request MCP tools",
         "VPS guardrails — Postgres backup cron + post-deploy health gate",
-        "co-occurrence edges + graph backfill script",
-        "write-time entity/relationship extraction from memory text",
-        "parallel retrieval (FTS+graph+embed) with _source attribution"
+        "co-occurrence edges + graph backfill script"
       ],
       "fixes": [
+        "add generate-hook-manifest to tsup entries — unblocks publish gate",
+        "remove unused cleanupExpiredJars import — fixes TS6133 blocking publish",
+        "remove dead actualRuntime variable — fixes TS6133 blocking publish",
+        "isolate Metal/GPU ops in worker process — reranker dispose crash was killing daemon",
+        "remove remaining /exe-intercom invocations + update tests",
+        "replace /exe-intercom skill invocation with plain text prompt",
+        "remove ALL --strict-mcp-config usage — was blocking /exe-intercom in session MCP config too",
+        "tsup outputs to dist directly — kill dist-next migration shim",
+        "drop --strict-mcp-config from lean MCP — was blocking skill loading (/exe-intercom)",
+        "zombie agent reaper never kills coordinator/exe session processes",
         "typecheck errors blocking publish — async embed alert + dead code cleanup",
         "session TTL uses registry registeredAt instead of tmux session_created",
         "CRM auth defaults + benchmark beam.ts updates",
@@ -246,17 +256,7 @@
         "remove auto-close on session end (source persisted this time)",
         "parallel Tom isolation — task-scoped branches + multi-instance task lookup",
         "downgrade multi-coordinator hard-fail to warning",
-        "daemon RSS reconnect + review push notify + hot_entities timestamp",
-        "HYGO stack-update blockers — volume regex + memory_audit --fix",
-        "spawn CWD cross-project contamination + identity load ordering",
-        "MCP hot-reload checks agent context for COO role, not just env var",
-        "eliminate cross-session dispatch bug in create_task",
-        "bug/feature report upstream updates — PATCH→POST with action field",
-        "strip stale X-Exe-Session from global config + guard against re-adding",
-        "BEAM CLaRa — direct JSON response instead of tool_use, bump max_tokens",
-        "BEAM CLaRa benchmark — correct endpoint + configurable model",
-        "MCP session dedup false positive + BEAM CLaRa benchmark mode",
-        "prevent false-positive duplicate eviction for multi-coordinator sessions"
+        "daemon RSS reconnect + review push notify + hot_entities timestamp"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -273,6 +273,9 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "bump to v0.9.199",
+        "remove registry.askexe.com references — fully consolidated to update.askexe.com",
+        "bump to 0.9.198 — coordinator reaper guard",
         "bump to 0.9.197 — TTL fix + registry consolidation + TS fixes",
         "update all manifest images to update.askexe.com + compose + beam tuning",
         "bump to 0.9.196",
@@ -294,17 +297,16 @@
         "bump to 0.9.179",
         "bump to 0.9.178 — Bob's null fixes merged",
         "bump to 0.9.177",
-        "bump to 0.9.176",
-        "bump to 0.9.175",
-        "bump to 0.9.174 — Bob's daemon hardening merged",
-        "bump to 0.9.173"
+        "bump to 0.9.176"
       ],
       "migration_notes": []
     },
-    "0.9.196": {
-      "version": "0.9.196",
+    "0.9.198": {
+      "version": "0.9.198",
       "date": "2026-06-02",
       "features": [
+        "browser prompt injection defense + persistent cookie jar",
+        "wire exe-erp into VPS stack (init-db, cloudflared, manifest, docs)",
         "consolidate registry.askexe.com → update.askexe.com as primary registry (#51)",
         "nginx /v2/ route for Docker registry proxy on update.askexe.com",
         "consolidate registry into update.askexe.com — license key = pull auth",
@@ -327,11 +329,19 @@
         "add vps-backup + vps-health-gate scripts with stack-update integration",
         "add update_bug_report + update_feature_request MCP tools",
         "VPS guardrails — Postgres backup cron + post-deploy health gate",
-        "co-occurrence edges + graph backfill script",
-        "write-time entity/relationship extraction from memory text",
-        "parallel retrieval (FTS+graph+embed) with _source attribution"
+        "co-occurrence edges + graph backfill script"
       ],
       "fixes": [
+        "add generate-hook-manifest to tsup entries — unblocks publish gate",
+        "remove unused cleanupExpiredJars import — fixes TS6133 blocking publish",
+        "remove dead actualRuntime variable — fixes TS6133 blocking publish",
+        "isolate Metal/GPU ops in worker process — reranker dispose crash was killing daemon",
+        "remove remaining /exe-intercom invocations + update tests",
+        "replace /exe-intercom skill invocation with plain text prompt",
+        "remove ALL --strict-mcp-config usage — was blocking /exe-intercom in session MCP config too",
+        "tsup outputs to dist directly — kill dist-next migration shim",
+        "drop --strict-mcp-config from lean MCP — was blocking skill loading (/exe-intercom)",
+        "zombie agent reaper never kills coordinator/exe session processes",
         "typecheck errors blocking publish — async embed alert + dead code cleanup",
         "session TTL uses registry registeredAt instead of tmux session_created",
         "CRM auth defaults + benchmark beam.ts updates",
@@ -346,17 +356,7 @@
         "remove auto-close on session end (source persisted this time)",
         "parallel Tom isolation — task-scoped branches + multi-instance task lookup",
         "downgrade multi-coordinator hard-fail to warning",
-        "daemon RSS reconnect + review push notify + hot_entities timestamp",
-        "HYGO stack-update blockers — volume regex + memory_audit --fix",
-        "spawn CWD cross-project contamination + identity load ordering",
-        "MCP hot-reload checks agent context for COO role, not just env var",
-        "eliminate cross-session dispatch bug in create_task",
-        "bug/feature report upstream updates — PATCH→POST with action field",
-        "strip stale X-Exe-Session from global config + guard against re-adding",
-        "BEAM CLaRa — direct JSON response instead of tool_use, bump max_tokens",
-        "BEAM CLaRa benchmark — correct endpoint + configurable model",
-        "MCP session dedup false positive + BEAM CLaRa benchmark mode",
-        "prevent false-positive duplicate eviction for multi-coordinator sessions"
+        "daemon RSS reconnect + review push notify + hot_entities timestamp"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -373,6 +373,9 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "remove registry.askexe.com references — fully consolidated to update.askexe.com",
+        "bump to 0.9.198 — coordinator reaper guard",
+        "bump to 0.9.197 — TTL fix + registry consolidation + TS fixes",
         "update all manifest images to update.askexe.com + compose + beam tuning",
         "bump to 0.9.196",
         "bump to 0.9.195",
@@ -394,17 +397,26 @@
         "bump to 0.9.178 — Bob's null fixes merged",
         "bump to 0.9.177",
         "bump to 0.9.176",
-        "bump to 0.9.175",
-        "bump to 0.9.174 — Bob's daemon hardening merged",
-        "bump to 0.9.173",
-        "bump to 0.9.172"
+        "bump to 0.9.175"
       ],
       "migration_notes": []
     },
-    "0.9.162": {
-      "version": "0.9.162",
+    "0.9.197": {
+      "version": "0.9.197",
       "date": "2026-06-02",
       "features": [
+        "consolidate registry.askexe.com → update.askexe.com as primary registry (#51)",
+        "nginx /v2/ route for Docker registry proxy on update.askexe.com",
+        "consolidate registry into update.askexe.com — license key = pull auth",
+        "scale daemon heap to 25% of system RAM, support 10+ coordinators",
+        "add query expansion + benchmark results to retrieval platform procedure",
+        "3-mode BEAM benchmark — FTS vs FTS+Graph vs Hybrid",
+        "wire update.askexe.com — billing schema + non-fatal image credentials",
+        "add 'never defer' platform procedure — fix it now or assign it now",
+        "BEAM multi-tier support — 100K, 1M, 10M token scales",
+        "MemoryAgentBench harness — ICLR 2026 benchmark",
+        "support outbox flusher + list_tasks null fix + doctor outbox status",
+        "bug report outbox flusher — reports reach AskExe even when daemon is dead",
         "add daily-summary CLI entry point + enable tsup build",
         "add daemon observability platform procedure",
         "add retrieval architecture platform procedure for 8-16GB machines",
@@ -417,46 +429,34 @@
         "VPS guardrails — Postgres backup cron + post-deploy health gate",
         "co-occurrence edges + graph backfill script",
         "write-time entity/relationship extraction from memory text",
-        "parallel retrieval (FTS+graph+embed) with _source attribution",
-        "instance_id binding for parallel workers",
-        "dual-column FTS5 with keywords + BM25 weighted search",
-        "dual-column FTS5 with keyword extraction for first-class keyword search",
-        "keyword-enriched consolidation + backfill script (#28)",
-        "add worktree reaper daemon job to prune orphaned agent worktrees",
-        "add pre-flight gates to close_task — status gate, worktree check, commit recency",
-        "add wiki document ingestion via API for embedding pipeline",
-        "add filtered.* projection targets to projection worker",
-        "verify-stack post-deploy checks — 8 runtime validations",
-        "preflight deploy gate + filtered schema + gateway graceful degradation",
-        "harden /exe-afk as primary monitoring tool, deprecate /loop for orchestration",
-        "add --judge-model flag to LoCoMo harness"
+        "parallel retrieval (FTS+graph+embed) with _source attribution"
       ],
       "fixes": [
-        "resolve all TypeScript errors for npm publish",
-        "suppress benign eviction logs + graceful idle kill wind-down",
-        "expand orphan reaper patterns to cover ALL hook scripts",
-        "last 4 deferred bugs — zero remaining issues",
-        "syntax error in tmux-routing — restore setTimeout for deferred nudge",
-        "remove redundant /exe-call + enforce cross_session COO-only",
-        "all 4 sendKeys bugs — use sendKeysLiteral for long messages",
-        "deferred nudge uses sendKeysLiteral to ensure Enter is pressed",
-        "CTO/CMO are NOT multi-instance + always notify existing sessions",
-        "remove duplicate keywords declaration from PR #28 merge conflict",
-        "force=true intercom bypasses busy check — COO messages always land",
-        "message delivery to coordinator used wrong session name (exe-exe1 vs exe1)",
-        "intercom blocked by legacy cwd/exe/{agent}/ task path check",
-        "_llama ReferenceError crashes EVERY daemon shutdown (bob audit #1)",
-        "intercom delivers to coordinator sessions — messages no longer lost",
-        "tmux spawn — create session then send-keys (not single-arg command)",
-        "root cause of agent death loops — idle-kill murders taskless sessions",
-        "daemon dispatch uses deferred setTimeout for /exe-call and nudge",
-        "skip BOTH boot polls when called from daemon — eliminates 20s+ MCP blackout",
-        "complete all 16 audit findings — zero remaining daemon issues",
-        "5 daemon reliability fixes from audit + task DB re-sync",
-        "disable auto-wake + reduce boot poll + fix reflection SQL",
-        "reflection sweep broken SQL — DISTINCT aggregate with 2 args crashes SQLite",
-        "defer WS client + projection worker init to eliminate 8.8s boot lag",
-        "tool capability index self-deadlock — daemon was embedding through its own socket"
+        "typecheck errors blocking publish — async embed alert + dead code cleanup",
+        "session TTL uses registry registeredAt instead of tmux session_created",
+        "CRM auth defaults + benchmark beam.ts updates",
+        "enable GoTrue email auth by default in setup template",
+        "intercom signal path in packaged source — ships to customers on npm install",
+        "intercom signal path + registry consolidated to update.askexe.com",
+        "4 customer P2 bugs — CLI passthrough + agent casing + clipboard (#50)",
+        "MCP pressure eviction evicts ONE session, not all",
+        "GHCR registry escape hatch + feature request 400 payload fix",
+        "WS client graceful failure on CF 1101 + capped backoff",
+        "3 of 4 customer P2 bugs — CLI passthrough + agent casing + clipboard",
+        "remove auto-close on session end (source persisted this time)",
+        "parallel Tom isolation — task-scoped branches + multi-instance task lookup",
+        "downgrade multi-coordinator hard-fail to warning",
+        "daemon RSS reconnect + review push notify + hot_entities timestamp",
+        "HYGO stack-update blockers — volume regex + memory_audit --fix",
+        "spawn CWD cross-project contamination + identity load ordering",
+        "MCP hot-reload checks agent context for COO role, not just env var",
+        "eliminate cross-session dispatch bug in create_task",
+        "bug/feature report upstream updates — PATCH→POST with action field",
+        "strip stale X-Exe-Session from global config + guard against re-adding",
+        "BEAM CLaRa — direct JSON response instead of tool_use, bump max_tokens",
+        "BEAM CLaRa benchmark — correct endpoint + configurable model",
+        "MCP session dedup false positive + BEAM CLaRa benchmark mode",
+        "prevent false-positive duplicate eviction for multi-coordinator sessions"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -473,36 +473,33 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
-        "release: stack v0.9.11 — HYGO deployment images + remove stale gateway Dockerfile",
-        "add jitter to daemon client reconnect to prevent storm",
-        "async pane capture in daemon, reduce event loop blocking",
-        "add incident response playbook for HYGO VPS deployments",
-        "add HYGO setup guide for Leo (COO) + exe-os installation",
-        "cleanup: remove all sendKeys fallbacks + CLI /exe-call + stale comments",
-        "add ORCHESTRATION.md — definitive architecture for multi-agent dispatch",
-        "debug: add intercom delivery logging to trace COO message path",
-        "add daemon reliability integration tests (9 tests)",
-        "bump v0.9.160 — cloud sync resilience + orphan reaper + auto-close guard",
-        "update release notes with 5 bug fixes from support triage",
-        "bump v0.9.159 — daemon memory cascade fix + session_scope + benchmarks",
-        "arch: customer onboarding automation — exe-os deploy-customer command",
-        "arch: Fleet Operations Roadmap — 8 phases for production safety at scale",
-        "arch: add filtered table pipeline + pre-flight deploy system to roadmap",
-        "add EXE-OS-STACK.md — complete 6-repo deployment map",
-        "cache tmux session (5 calls → 1) + offset daemon timers",
-        "cut agent boot from 4min to <30s — merge Bash blocks + parallel DB queries",
-        "rename memory schema → graph across codebase",
-        "unified access control — admin token + GoTrue across all services",
-        "capture data pipeline spec — raw → filter → wiki + CRM projection",
-        "bump to v0.9.149 — task lifecycle simplification + review notification fix",
-        "capture gateway connection observability requirements (2026-05-28)",
-        "bump to v0.9.146 for publish",
-        "Windows support architecture — WezTerm + WSL decision (2026-05-27)"
+        "bump to 0.9.197 — TTL fix + registry consolidation + TS fixes",
+        "update all manifest images to update.askexe.com + compose + beam tuning",
+        "bump to 0.9.196",
+        "bump to 0.9.195",
+        "bump to 0.9.194",
+        "bump to 0.9.193",
+        "bump to 0.9.192",
+        "bump to 0.9.191",
+        "bump to 0.9.189",
+        "bump to 0.9.188 — HYGO stack-update blockers fixed",
+        "bump to 0.9.187",
+        "bump to 0.9.186 — cross-session dispatch fix",
+        "release: bump exe-os image to v0.9.185 in stack manifest",
+        "bump to 0.9.185",
+        "bump to 0.9.184",
+        "bump to 0.9.183",
+        "bump to 0.9.181 — BEAM 3-mode + query expansion",
+        "bump to 0.9.180 — complete worktree isolation",
+        "bump to 0.9.179",
+        "bump to 0.9.178 — Bob's null fixes merged",
+        "bump to 0.9.177",
+        "bump to 0.9.176",
+        "bump to 0.9.175",
+        "bump to 0.9.174 — Bob's daemon hardening merged",
+        "bump to 0.9.173"
       ],
-      "migration_notes": [
-        "If daemon goes down, agents will now fail instead of silently",
-        "exe-daemon.ts kills old embed.pid process and cleans up"
-      ]
+      "migration_notes": []
     }
   }
 }