@askexenow/exe-os 0.9.237 → 0.9.239

package/release-notes.json

@@ -1,6 +1,106 @@
 {
-  "current": "0.9.223",
+  "current": "0.9.239",
   "notes": {
+    "0.9.239": {
+      "version": "0.9.239",
+      "date": "2026-06-09",
+      "features": [
+        "log MCP session open/close to stderr for docker logs visibility",
+        "Graph→PostgreSQL sync timer — automatic SQLite→exe-db projection",
+        "project GraphRAG data to PostgreSQL during cloud sync pull",
+        "add behavior effectiveness tracking — attribution, conflicts, scoring, load",
+        "close the reinforcement loop — dreaming reads investigation data",
+        "add reviews to Cloudflare support system — separate from bugs/features",
+        "self-improvement auto-merges simple fixes, notifies on failures",
+        "automatic investigation record system for debugging cycle tracking",
+        "smoke test + Playwright E2E + self-improvement cron",
+        "P0 procedures — verify your own fix + confidence decay",
+        "boot output as formatted table with box-drawing characters",
+        "show auto-fix cycle status in exe-os boot",
+        "graceful daemon restart — persist MCP sessions for transparent recovery",
+        "default to keyword+graph search, embeddings opt-in",
+        "server-side telemetry storage + admin insights endpoint",
+        "enrich telemetry payload with usage counters and auto-insights",
+        "add telemetry auto-insight computation engine",
+        "auto-calibration in dreaming cycle + telemetry integration",
+        "first-class time estimation on tasks — auto-tracked, queryable",
+        "add agent assertion system — confidence tracking on task lifecycle",
+        "auto-run dreaming cycle on session end — zero-touch self-improvement",
+        "add dreaming system + structured handoffs to platform procedures",
+        "add snapshot + boot to platform procedures and operating procedures",
+        "add `exe-os boot --project X` CLI command for project boot verification",
+        "add `exe-os snapshot` CLI command for session state capture"
+      ],
+      "fixes": [
+        "snapshot crash — daemon fallback + dreaming scope binding",
+        "skip duplicate initStore in WS client — prevents 2-8s event loop block",
+        "add session scope imports to dreaming, project-boot, telemetry-upload",
+        "resolve typecheck errors for npm publish",
+        "add setImmediate yields to Graph→PG sync — prevent event loop blocking",
+        "convert SQLite short hex IDs to valid UUIDs for PostgreSQL projection",
+        "delay initial graph sync tick to 60s + add debug logging",
+        "share DB init state between MCP HTTP and timer ticks",
+        "allow VPS daemon to run in PostgreSQL-only mode (no encryption key)",
+        "detect response body failures — build pass ≠ feature works",
+        "coordinators see all tasks cross-session by default",
+        "self-improvement uses Cloudflare support API, not local tasks",
+        "self-improvement uses MCP tasks for review, not WhatsApp",
+        "harden investigation tracker — 3 more issues from second audit",
+        "self-improvement creates PRs, never pushes to main",
+        "harden investigation tracker — 11 issues from audit at 10K users",
+        "clear ghost notifications on task cancel/close",
+        "remove timeout requirement from tmux capture-pane hook",
+        "remove unused hLine variable + clean 3 stale worktrees",
+        "replace CJS require() with ESM imports — daemon DB init crash",
+        "resolveExeSession — match agent name to coordinator session",
+        "remove SITES_PATH from compose — handled in exe-erp entrypoint",
+        "self-heal missing task .md files to stop false consistencyMismatches (#76)",
+        "add SITES_PATH=./sites for exe-erp — Frappe site resolution",
+        "last CJS require() + launchd spawn storm prevention"
+      ],
+      "security": [
+        "fix shell injection, SSRF, socket leaks, backup validation",
+        "bump v0.9.139 — 2 CRITICAL security fixes, 14 bug fixes, 6 features, customer config preservation",
+        "fix 2 CRITICAL + 1 HIGH from post-fix audit",
+        "validate X-Agent-Role against roster — prevent privilege escalation",
+        "release: stack v0.9.8 — security hardening + Hygo bug fixes",
+        "add webhook HMAC-SHA256 validation + disable query param auth in prod",
+        "pin GitHub Actions to SHAs, update jose to 6.2.3",
+        "harden support intake against abuse and data leakage",
+        "bump to v0.9.22 — Codex MCP parity + customer bug fixes + security audit remediation",
+        "audit: pre-hygo exe-gateway security report",
+        "add SECURITY.md — trust document for pre-install security evaluation",
+        "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
+      ],
+      "other": [
+        "release: stack v0.9.14 — gateway audit fixes",
+        "release: stack v0.9.13 — HYGO deployment readiness",
+        "incremental Graph→PG sync — 86K rows → deltas only",
+        "batch Graph→PG sync — 500 rows per INSERT instead of row-by-row",
+        "consolidate daemon timers into unified orchestration tick (#78)",
+        "revise GLiNER — Haiku API now, GLiNER when cost matters",
+        "capture GLiNER entity extraction in ARCHITECTURE.md",
+        "detailed design system structure + Phase 2 component list",
+        "exe-os-design-system — unified design system for all products",
+        "GoTrue JWT unified auth architecture — founder directive 2026-06-08",
+        "Thread + Graph Discovery architecture — unified knowledge view",
+        "move heavy jobs to 9 PM — GraphRAG, skill sweep, backup",
+        "Mode 3 Client-Side RAG architecture — memories never leave device",
+        "bump to v0.9.230 — P0 WAL backup corruption fix for Jack",
+        "bump to v0.9.225",
+        "bump to v0.9.223",
+        "boot time 18.9s → 2.2s — query daemon socket instead of opening DB",
+        "add event loop yielding to heavy daemon timers",
+        "update package-lock.json from npm audit fix",
+        "reduce agent_data_refresh from 10min to 1hr — prevents MCP stalls",
+        "capture deferred architecture items (NOT this year)",
+        "bump to v0.9.222",
+        "bump to v0.9.221",
+        "sync release notes for v0.9.220",
+        "bump to v0.9.220"
+      ],
+      "migration_notes": []
+    },
     "0.9.223": {
       "version": "0.9.223",
       "date": "2026-06-08",
@@ -16,7 +116,10 @@
         "fix: daemon MCP unresponsive under I/O pressure (Docker builds blocked event loop 617s)",
         "fix: exe-erp Docker image build — 15 iterative fixes for bench/frappe compatibility",
         "fix: use update.askexe.com registry for all ERP image references"
-      ]
+      ],
+      "security": [],
+      "other": [],
+      "migration_notes": []
     },
     "0.9.220": {
       "version": "0.9.220",
@@ -317,206 +420,6 @@
         "bump to v0.9.201"
       ],
       "migration_notes": []
-    },
-    "0.9.214": {
-      "version": "0.9.214",
-      "date": "2026-06-04",
-      "features": [
-        "free license telemetry is mandatory, paid can opt out",
-        "add mcp-sessions CLI — rich status table for running sessions",
-        "5-minute telemetry batching + per-tool-call usage in payload",
-        "disk outbox for failed telemetry + remote killswitch",
-        "auto-attach orchestration metrics to every bug report",
-        "auto-send daily telemetry from daemon",
-        "add telemetry intake endpoint to Cloudflare Worker",
-        "close orchestration measurement edge gaps",
-        "harden orchestration telemetry coverage",
-        "telemetry upload + RESUME storms + reviewer bottlenecks + DB consistency",
-        "harden orchestration measurement contract",
-        "add blocked duration + session duration latency metrics",
-        "complete orchestration measurement — all blind spots closed",
-        "full orchestration measurement — 38 event types across all blind spots",
-        "expand orchestration measurement to full event coverage",
-        "DB Authority Phase 1 — task claim and liveness schema",
-        "browser prompt injection defense + persistent cookie jar",
-        "wire exe-erp into VPS stack (init-db, cloudflared, manifest, docs)",
-        "consolidate registry.askexe.com → update.askexe.com as primary registry (#51)",
-        "nginx /v2/ route for Docker registry proxy on update.askexe.com",
-        "consolidate registry into update.askexe.com — license key = pull auth",
-        "scale daemon heap to 25% of system RAM, support 10+ coordinators",
-        "add query expansion + benchmark results to retrieval platform procedure",
-        "3-mode BEAM benchmark — FTS vs FTS+Graph vs Hybrid",
-        "wire update.askexe.com — billing schema + non-fatal image credentials"
-      ],
-      "fixes": [
-        "remove failed DB warmup workaround",
-        "trace daemon timers and async tmux session checks",
-        "add scope comment to DB warmup task query (readiness gate)",
-        "add DB warmup at boot+5s to prevent 15s block on first query",
-        "move DB memory count query to slow path — fast path is cache-only",
-        "split agent stats into fast path (60s) + slow path (10m)",
-        "defer agent stats first tick + async file write",
-        "Fix daemon agent stats event-loop stalls",
-        "async-ify task re-sync walk + git worktree list in daemon",
-        "async worktree reaper — eliminates 30-min event loop blocks",
-        "simplify telemetry to once-per-day only",
-        "reduce telemetry batch cadence from 5min to 6h",
-        "prevent daemon telemetry checkpoint stalls",
-        "add gateway tables to init-db.sql — prevents missing table on fresh deploys",
-        "task test mock returns correct shape for createOrRefreshResumeTask",
-        "embed RAM gate 16GB, paste-buffer -p, task dispatch repo + surfacing",
-        "full shard schema parity with main DB",
-        "ensure orchestration metrics CLI exits",
-        "database.ts import fixes for corrupt backup cleanup",
-        "add keywords column to shard schema + cleanup corrupt DB backups",
-        "add self_heal_restart to DaemonEvent type + orchestration event tracking",
-        "shard circuit breaker, event loop self-healing, heap cap, intercom reason",
-        "add generate-hook-manifest to tsup entries — unblocks publish gate",
-        "remove unused cleanupExpiredJars import — fixes TS6133 blocking publish",
-        "remove dead actualRuntime variable — fixes TS6133 blocking publish"
-      ],
-      "security": [
-        "fix shell injection, SSRF, socket leaks, backup validation",
-        "bump v0.9.139 — 2 CRITICAL security fixes, 14 bug fixes, 6 features, customer config preservation",
-        "fix 2 CRITICAL + 1 HIGH from post-fix audit",
-        "validate X-Agent-Role against roster — prevent privilege escalation",
-        "release: stack v0.9.8 — security hardening + Hygo bug fixes",
-        "add webhook HMAC-SHA256 validation + disable query param auth in prod",
-        "pin GitHub Actions to SHAs, update jose to 6.2.3",
-        "harden support intake against abuse and data leakage",
-        "bump to v0.9.22 — Codex MCP parity + customer bug fixes + security audit remediation",
-        "audit: pre-hygo exe-gateway security report",
-        "add SECURITY.md — trust document for pre-install security evaluation",
-        "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
-      ],
-      "other": [
-        "bump to v0.9.214",
-        "bump to v0.9.213",
-        "bump to v0.9.212",
-        "bump to v0.9.211",
-        "bump to v0.9.210",
-        "bump to v0.9.209",
-        "update release-notes.json",
-        "Standardize task completion reports",
-        "bump to v0.9.208",
-        "bump to v0.9.207",
-        "bump to v0.9.206",
-        "bump to v0.9.205",
-        "bump to v0.9.204",
-        "bump stack manifest to v0.9.12 — CRM v0.9.44, exe-os v0.9.199",
-        "review full orchestration measurement coverage",
-        "bump to v0.9.203",
-        "capture orchestration measurement blind spots",
-        "review push event orchestration roadmap",
-        "add full 4-phase DB Authority roadmap to ARCHITECTURE.md",
-        "update release-notes for v0.9.202 + remove stale lock file",
-        "bump to v0.9.202",
-        "bump to v0.9.201",
-        "bump to v0.9.200",
-        "design orchestration measurement baseline",
-        "capture tmux hardening path"
-      ],
-      "migration_notes": []
-    },
-    "0.9.212": {
-      "version": "0.9.212",
-      "date": "2026-06-03",
-      "features": [
-        "free license telemetry is mandatory, paid can opt out",
-        "add mcp-sessions CLI — rich status table for running sessions",
-        "5-minute telemetry batching + per-tool-call usage in payload",
-        "disk outbox for failed telemetry + remote killswitch",
-        "auto-attach orchestration metrics to every bug report",
-        "auto-send daily telemetry from daemon",
-        "add telemetry intake endpoint to Cloudflare Worker",
-        "close orchestration measurement edge gaps",
-        "harden orchestration telemetry coverage",
-        "telemetry upload + RESUME storms + reviewer bottlenecks + DB consistency",
-        "harden orchestration measurement contract",
-        "add blocked duration + session duration latency metrics",
-        "complete orchestration measurement — all blind spots closed",
-        "full orchestration measurement — 38 event types across all blind spots",
-        "expand orchestration measurement to full event coverage",
-        "DB Authority Phase 1 — task claim and liveness schema",
-        "browser prompt injection defense + persistent cookie jar",
-        "wire exe-erp into VPS stack (init-db, cloudflared, manifest, docs)",
-        "consolidate registry.askexe.com → update.askexe.com as primary registry (#51)",
-        "nginx /v2/ route for Docker registry proxy on update.askexe.com",
-        "consolidate registry into update.askexe.com — license key = pull auth",
-        "scale daemon heap to 25% of system RAM, support 10+ coordinators",
-        "add query expansion + benchmark results to retrieval platform procedure",
-        "3-mode BEAM benchmark — FTS vs FTS+Graph vs Hybrid",
-        "wire update.askexe.com — billing schema + non-fatal image credentials"
-      ],
-      "fixes": [
-        "move DB memory count query to slow path — fast path is cache-only",
-        "split agent stats into fast path (60s) + slow path (10m)",
-        "defer agent stats first tick + async file write",
-        "Fix daemon agent stats event-loop stalls",
-        "async-ify task re-sync walk + git worktree list in daemon",
-        "async worktree reaper — eliminates 30-min event loop blocks",
-        "simplify telemetry to once-per-day only",
-        "reduce telemetry batch cadence from 5min to 6h",
-        "prevent daemon telemetry checkpoint stalls",
-        "add gateway tables to init-db.sql — prevents missing table on fresh deploys",
-        "task test mock returns correct shape for createOrRefreshResumeTask",
-        "embed RAM gate 16GB, paste-buffer -p, task dispatch repo + surfacing",
-        "full shard schema parity with main DB",
-        "ensure orchestration metrics CLI exits",
-        "database.ts import fixes for corrupt backup cleanup",
-        "add keywords column to shard schema + cleanup corrupt DB backups",
-        "add self_heal_restart to DaemonEvent type + orchestration event tracking",
-        "shard circuit breaker, event loop self-healing, heap cap, intercom reason",
-        "add generate-hook-manifest to tsup entries — unblocks publish gate",
-        "remove unused cleanupExpiredJars import — fixes TS6133 blocking publish",
-        "remove dead actualRuntime variable — fixes TS6133 blocking publish",
-        "isolate Metal/GPU ops in worker process — reranker dispose crash was killing daemon",
-        "remove remaining /exe-intercom invocations + update tests",
-        "replace /exe-intercom skill invocation with plain text prompt",
-        "remove ALL --strict-mcp-config usage — was blocking /exe-intercom in session MCP config too"
-      ],
-      "security": [
-        "fix shell injection, SSRF, socket leaks, backup validation",
-        "bump v0.9.139 — 2 CRITICAL security fixes, 14 bug fixes, 6 features, customer config preservation",
-        "fix 2 CRITICAL + 1 HIGH from post-fix audit",
-        "validate X-Agent-Role against roster — prevent privilege escalation",
-        "release: stack v0.9.8 — security hardening + Hygo bug fixes",
-        "add webhook HMAC-SHA256 validation + disable query param auth in prod",
-        "pin GitHub Actions to SHAs, update jose to 6.2.3",
-        "harden support intake against abuse and data leakage",
-        "bump to v0.9.22 — Codex MCP parity + customer bug fixes + security audit remediation",
-        "audit: pre-hygo exe-gateway security report",
-        "add SECURITY.md — trust document for pre-install security evaluation",
-        "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
-      ],
-      "other": [
-        "bump to v0.9.212",
-        "bump to v0.9.211",
-        "bump to v0.9.210",
-        "bump to v0.9.209",
-        "update release-notes.json",
-        "Standardize task completion reports",
-        "bump to v0.9.208",
-        "bump to v0.9.207",
-        "bump to v0.9.206",
-        "bump to v0.9.205",
-        "bump to v0.9.204",
-        "bump stack manifest to v0.9.12 — CRM v0.9.44, exe-os v0.9.199",
-        "review full orchestration measurement coverage",
-        "bump to v0.9.203",
-        "capture orchestration measurement blind spots",
-        "review push event orchestration roadmap",
-        "add full 4-phase DB Authority roadmap to ARCHITECTURE.md",
-        "update release-notes for v0.9.202 + remove stale lock file",
-        "bump to v0.9.202",
-        "bump to v0.9.201",
-        "bump to v0.9.200",
-        "design orchestration measurement baseline",
-        "capture tmux hardening path",
-        "add orchestration counterargument",
-        "audit tmux orchestration architecture"
-      ],
-      "migration_notes": []
     }
   }
 }

package/dist/dreaming-WIBDVAED.js

@@ -1,12 +0,0 @@
-import {
-  DreamingEngine
-} from "./chunk-KWH6H64R.js";
-import "./chunk-2LYJTK47.js";
-import "./chunk-NNEYTOUS.js";
-import "./chunk-FXU7JOXK.js";
-import "./chunk-TRZ5KA2R.js";
-import "./chunk-LYH5HE24.js";
-import "./chunk-MLKGABMK.js";
-export {
-  DreamingEngine
-};