@askexenow/exe-os 0.9.339 → 0.9.341

package/dist/update-support-VPBD5SD2.js

@@ -0,0 +1,355 @@
+import {
+  queueSupportStatusUpdateSync
+} from "./chunk-Q5AIPSSC.js";
+import "./chunk-MMRUBN3I.js";
+import {
+  embed
+} from "./chunk-AP455LBW.js";
+import {
+  flushBatch,
+  writeMemory
+} from "./chunk-EDH54E5A.js";
+import "./chunk-CHCA3ZM2.js";
+import "./chunk-OTVEIJUQ.js";
+import "./chunk-7LF5DS3A.js";
+import {
+  getActiveAgent
+} from "./chunk-C445WRUX.js";
+import {
+  isTelemetryRedactionEnabled,
+  sanitizeUpstreamPayload
+} from "./chunk-RP5GETX5.js";
+import "./chunk-CVYC6DUW.js";
+import "./chunk-UU4UINUX.js";
+import "./chunk-AFNRE2RV.js";
+import "./chunk-3NGZ4PL7.js";
+import "./chunk-NLEW62VC.js";
+import "./chunk-GJV3WDWM.js";
+import "./chunk-MP2AFCGL.js";
+import "./chunk-RWSLVYTE.js";
+import "./chunk-2I23RPSI.js";
+import "./chunk-BV6GBSRP.js";
+import "./chunk-PNQDP3OA.js";
+import "./chunk-H73TUI4Y.js";
+import "./chunk-7HLWBYH7.js";
+import "./chunk-FXU7JOXK.js";
+import "./chunk-Z42MXYWW.js";
+import {
+  loadLicense,
+  readCachedLicenseToken
+} from "./chunk-7SEC2AG5.js";
+import "./chunk-PPZOWQHP.js";
+import {
+  EXE_AI_DIR,
+  loadConfig
+} from "./chunk-7Y5UDEVM.js";
+import "./chunk-SHIICYJW.js";
+import "./chunk-MLKGABMK.js";
+
+// src/mcp/tools/update-support.ts
+import { z } from "zod";
+import { readdir, readFile, writeFile } from "fs/promises";
+import path from "path";
+var BUG_STATUS = z.enum(["open", "triaged", "fixed", "closed", "wontfix"]);
+var FEATURE_STATUS = z.enum(["open", "planned", "in_progress", "shipped", "closed", "wontdo"]);
+async function findReportFile(dir, id) {
+  try {
+    const files = await readdir(dir);
+    const prefix = id.slice(0, 8);
+    const match = files.find((f) => f.includes(prefix) && f.endsWith(".md"));
+    return match ? path.join(dir, match) : null;
+  } catch {
+    return null;
+  }
+}
+function updateMarkdownField(content, key, value) {
+  const lines = content.split("\n");
+  const keyPattern = new RegExp(`^${key}:\\s*`);
+  let found = false;
+  const updated = lines.map((line) => {
+    if (keyPattern.test(line)) {
+      found = true;
+      return `${key}: ${value}`;
+    }
+    return line;
+  });
+  if (!found) {
+    let insertIdx = -1;
+    for (let i = 0; i < updated.length; i++) {
+      if (/^[a-z_]+:\s/.test(updated[i])) {
+        insertIdx = i;
+      }
+    }
+    if (insertIdx >= 0) {
+      updated.splice(insertIdx + 1, 0, `${key}: ${value}`);
+    } else {
+      const titleIdx = updated.findIndex((l) => l.startsWith("# "));
+      updated.splice(titleIdx >= 0 ? titleIdx + 2 : 0, 0, `${key}: ${value}`);
+    }
+  }
+  return updated.join("\n");
+}
+function supportAdminToken(config) {
+  return process.env.ASKEXE_SUPPORT_ADMIN_TOKEN || process.env.EXE_SUPPORT_ADMIN_TOKEN || config.support?.adminToken || config.support?.admin_token;
+}
+function normalizeSupportBase(value) {
+  let raw = value;
+  try {
+    const parsed = new URL(raw);
+    if (parsed.hostname === "askexe.com" || parsed.hostname === "cloud.askexe.com") {
+      parsed.hostname = "api.askexe.com";
+      raw = parsed.toString();
+    }
+  } catch {
+  }
+  return raw.replace(/\/+$/, "").replace(/\/(bug-reports|feature-requests)\/?$/, "");
+}
+async function sendStatusUpstream(kind, endpointPath, payload) {
+  const config = await loadConfig();
+  const routerUrl = process.env.API_ROUTER_URL?.replace(/\/+$/, "");
+  const support = config.support;
+  const adminToken = supportAdminToken(config);
+  const baseEndpoint = adminToken ? process.env.ASKEXE_SUPPORT_ADMIN_ENDPOINT || support?.adminEndpoint || support?.admin_endpoint || "https://api.askexe.com/admin/support" : support?.bugReportEndpoint || process.env.EXE_BUG_REPORT_ENDPOINT || (routerUrl ? `${routerUrl}/v1/support` : "https://api.askexe.com/v1/support");
+  const base = normalizeSupportBase(baseEndpoint);
+  const endpoint = `${base}/${endpointPath}`;
+  const token = config.support?.bugReportToken || process.env.EXE_BUG_REPORT_TOKEN;
+  const licenseKey = loadLicense() || process.env.EXE_LICENSE_KEY || config.cloud?.apiKey;
+  const licenseToken = readCachedLicenseToken();
+  const gatedPayload = isTelemetryRedactionEnabled() ? sanitizeUpstreamPayload(payload).payload : (console.error("[update-support] WARNING: EXE_TELEMETRY_REDACT=off \u2014 sending UNREDACTED payload upstream"), payload);
+  try {
+    const parsed = new URL(endpoint);
+    if (parsed.protocol !== "https:" && !["localhost", "127.0.0.1", "::1"].includes(parsed.hostname)) {
+      return "failed: insecure endpoint rejected";
+    }
+    const response = await fetch(parsed, {
+      method: "PATCH",
+      headers: {
+        "content-type": "application/json",
+        ...adminToken ? { authorization: `Bearer ${adminToken}` } : {},
+        ...!adminToken && token ? { authorization: `Bearer ${token}` } : {},
+        ...!adminToken && licenseKey ? { "x-exe-license-key": licenseKey } : {},
+        ...!adminToken && licenseToken ? { "x-exe-license-token": licenseToken } : {}
+      },
+      body: JSON.stringify(gatedPayload),
+      signal: AbortSignal.timeout(1e4)
+    });
+    if (!response.ok) {
+      const failed = `failed: HTTP ${response.status}`;
+      queueSupportStatusUpdateSync({
+        id: String(gatedPayload.id ?? ""),
+        kind,
+        endpointPath,
+        payload: gatedPayload,
+        method: "PATCH",
+        lastError: failed
+      });
+      return `${failed} (queued for retry)`;
+    }
+    return "sent";
+  } catch (err) {
+    const failed = `failed: ${err instanceof Error ? err.message : String(err)}`;
+    queueSupportStatusUpdateSync({
+      id: String(gatedPayload.id ?? ""),
+      kind,
+      endpointPath,
+      payload: gatedPayload,
+      method: "PATCH",
+      lastError: failed
+    });
+    return `${failed} (queued for retry)`;
+  }
+}
+function registerUpdateBugReport(server) {
+  server.registerTool(
+    "update_bug_report",
+    {
+      title: "Update Bug Report",
+      description: "Update the status of a previously filed bug report. Updates local markdown file, stores a memory, and POSTs the change to AskExe support. Statuses: open \u2192 triaged \u2192 fixed \u2192 closed \u2192 wontfix.",
+      inputSchema: {
+        id: z.string().min(8).describe("Bug report ID (UUID or first 8 chars)"),
+        status: BUG_STATUS.describe("New status"),
+        fix_version: z.string().optional().describe("Version that fixes this bug (e.g. '0.9.161')"),
+        notes: z.string().optional().describe("Update notes \u2014 why this status change"),
+        send_upstream: z.boolean().default(true).describe("POST update to AskExe support endpoint")
+      }
+    },
+    async ({ id, status, fix_version, notes, send_upstream }) => {
+      const { agentId, agentRole } = getActiveAgent();
+      const reportDir = path.join(EXE_AI_DIR, "bug-reports");
+      const reportPath = await findReportFile(reportDir, id);
+      let fullId = id;
+      let title = id;
+      if (reportPath) {
+        let content = await readFile(reportPath, "utf-8");
+        const idMatch = content.match(/^id:\s*([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\s*$/m);
+        if (idMatch) fullId = idMatch[1];
+        const titleMatch = content.match(/^# Bug Report — (.+)$/m);
+        if (titleMatch) title = titleMatch[1];
+        content = updateMarkdownField(content, "status", status);
+        if (fix_version) content = updateMarkdownField(content, "fix_version", fix_version);
+        content = updateMarkdownField(content, "updated_at", (/* @__PURE__ */ new Date()).toISOString());
+        if (notes) {
+          content += `
+
+## Update \u2014 ${(/* @__PURE__ */ new Date()).toISOString()}
+
+Status: ${status}
+${fix_version ? `Fix version: ${fix_version}
+` : ""}${notes}
+`;
+        }
+        await writeFile(reportPath, content, "utf-8");
+      }
+      const memoryText = fix_version ? `Bug "${title}" marked ${status} in v${fix_version}${notes ? `. ${notes}` : ""}` : `Bug "${title}" marked ${status}${notes ? `. ${notes}` : ""}`;
+      let vector = null;
+      try {
+        vector = await embed(memoryText);
+      } catch {
+        vector = null;
+      }
+      await writeMemory({
+        id: `${fullId}-update-${Date.now()}`,
+        agent_id: agentId,
+        agent_role: agentRole,
+        session_id: process.env.SESSION_ID ?? "manual",
+        timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+        tool_name: "update_bug_report",
+        project_name: "support",
+        has_error: false,
+        raw_text: memoryText,
+        vector,
+        source_path: reportPath ?? void 0,
+        source_type: "bug_report_update",
+        memory_type: "observation",
+        tier: 1,
+        importance: 7,
+        intent: "update",
+        domain: "support",
+        file_paths: null
+      });
+      await flushBatch();
+      const upstreamPayload = {
+        id: fullId,
+        status,
+        fixed_version: fix_version,
+        triage_notes: notes,
+        updated_at: (/* @__PURE__ */ new Date()).toISOString(),
+        agent_id: agentId
+      };
+      const upstreamStatus = send_upstream ? await sendStatusUpstream("bug", `bug-reports/${encodeURIComponent(fullId)}`, upstreamPayload) : "skipped";
+      return {
+        content: [
+          {
+            type: "text",
+            text: `Bug report updated.
+ID: ${fullId}
+New status: ${status}
+${fix_version ? `Fix version: ${fix_version}
+` : ""}Local file: ${reportPath ?? "not found"}
+Memory stored: ${memoryText}
+Upstream status: ${upstreamStatus}`
+          }
+        ]
+      };
+    }
+  );
+}
+function registerUpdateFeatureRequest(server) {
+  server.registerTool(
+    "update_feature_request",
+    {
+      title: "Update Feature Request",
+      description: "Update the status of a previously filed feature request. Updates local markdown file, stores a memory, and POSTs the change to AskExe support. Statuses: open \u2192 planned \u2192 in_progress \u2192 shipped \u2192 closed \u2192 wontdo.",
+      inputSchema: {
+        id: z.string().min(8).describe("Feature request ID (UUID or first 8 chars)"),
+        status: FEATURE_STATUS.describe("New status"),
+        shipped_version: z.string().optional().describe("Version that ships this feature (e.g. '0.9.170')"),
+        notes: z.string().optional().describe("Update notes \u2014 why this status change"),
+        send_upstream: z.boolean().default(true).describe("POST update to AskExe support endpoint")
+      }
+    },
+    async ({ id, status, shipped_version, notes, send_upstream }) => {
+      const { agentId, agentRole } = getActiveAgent();
+      const reportDir = path.join(EXE_AI_DIR, "feature-requests");
+      const reportPath = await findReportFile(reportDir, id);
+      let fullId = id;
+      let title = id;
+      if (reportPath) {
+        let content = await readFile(reportPath, "utf-8");
+        const idMatch = content.match(/^id:\s*([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\s*$/m);
+        if (idMatch) fullId = idMatch[1];
+        const titleMatch = content.match(/^# Feature Request — (.+)$/m);
+        if (titleMatch) title = titleMatch[1];
+        content = updateMarkdownField(content, "status", status);
+        if (shipped_version) content = updateMarkdownField(content, "shipped_version", shipped_version);
+        content = updateMarkdownField(content, "updated_at", (/* @__PURE__ */ new Date()).toISOString());
+        if (notes) {
+          content += `
+
+## Update \u2014 ${(/* @__PURE__ */ new Date()).toISOString()}
+
+Status: ${status}
+${shipped_version ? `Shipped version: ${shipped_version}
+` : ""}${notes}
+`;
+        }
+        await writeFile(reportPath, content, "utf-8");
+      }
+      const memoryText = shipped_version ? `Feature "${title}" marked ${status} in v${shipped_version}${notes ? `. ${notes}` : ""}` : `Feature "${title}" marked ${status}${notes ? `. ${notes}` : ""}`;
+      let vector = null;
+      try {
+        vector = await embed(memoryText);
+      } catch {
+        vector = null;
+      }
+      await writeMemory({
+        id: `${fullId}-update-${Date.now()}`,
+        agent_id: agentId,
+        agent_role: agentRole,
+        session_id: process.env.SESSION_ID ?? "manual",
+        timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+        tool_name: "update_feature_request",
+        project_name: "support",
+        has_error: false,
+        raw_text: memoryText,
+        vector,
+        source_path: reportPath ?? void 0,
+        source_type: "feature_request_update",
+        memory_type: "observation",
+        tier: 1,
+        importance: 7,
+        intent: "update",
+        domain: "support",
+        file_paths: null
+      });
+      await flushBatch();
+      const upstreamPayload = {
+        id: fullId,
+        status,
+        shipped_version,
+        response_notes: notes,
+        updated_at: (/* @__PURE__ */ new Date()).toISOString(),
+        agent_id: agentId
+      };
+      const upstreamStatus = send_upstream ? await sendStatusUpstream("feature", `feature-requests/${encodeURIComponent(fullId)}`, upstreamPayload) : "skipped";
+      return {
+        content: [
+          {
+            type: "text",
+            text: `Feature request updated.
+ID: ${fullId}
+New status: ${status}
+${shipped_version ? `Shipped version: ${shipped_version}
+` : ""}Local file: ${reportPath ?? "not found"}
+Memory stored: ${memoryText}
+Upstream status: ${upstreamStatus}`
+          }
+        ]
+      };
+    }
+  );
+}
+export {
+  registerUpdateBugReport,
+  registerUpdateFeatureRequest
+};

package/dist/{worker-gate-MXUQUG4M.js → worker-gate-4QLLMXZM.js}

@@ -6,7 +6,7 @@ import {
   releaseBackfillLock,
   tryAcquireBackfillLock,
   tryAcquireWorkerSlot
-} from "./chunk-N5I7RL3I.js";
+} from "./chunk-2IWBY7XK.js";
 import "./chunk-7Y5UDEVM.js";
 import "./chunk-SHIICYJW.js";
 import "./chunk-MLKGABMK.js";

package/dist/{workflow-engine-EWCOLD47.js → workflow-engine-MMEHKUN4.js}

@@ -10,8 +10,8 @@ import {
   persistWorkflows,
   runWorkflow,
   startWorkflow
-} from "./chunk-QXSBB26A.js";
-import "./chunk-KTPG4XKI.js";
+} from "./chunk-DNVFWFYF.js";
+import "./chunk-IB336P52.js";
 import "./chunk-MLKGABMK.js";
 export {
   advanceWorkflow,

package/dist/{worktree-GVF2I5FP.js → worktree-YXBDRYOC.js}

@@ -7,11 +7,11 @@ import {
   parseInstanceLabel,
   worktreeBranch,
   worktreePath
-} from "./chunk-B76TSEP3.js";
-import "./chunk-FUIIVSW6.js";
-import "./chunk-HEPR6QTL.js";
+} from "./chunk-BJOBR6P2.js";
+import "./chunk-WH7XN5ER.js";
+import "./chunk-RWSLVYTE.js";
 import "./chunk-2I23RPSI.js";
-import "./chunk-ATOU6CYR.js";
+import "./chunk-BV6GBSRP.js";
 import "./chunk-PNQDP3OA.js";
 import "./chunk-H73TUI4Y.js";
 import "./chunk-7HLWBYH7.js";

package/dist/{worktree-sweep-ZAG3V24E.js → worktree-sweep-5WKBU7E6.js}

@@ -2,12 +2,12 @@ import {
   cleanupAgentWorktree,
   discoverRepoPaths,
   sweepWorktrees
-} from "./chunk-K5WFKEXQ.js";
-import "./chunk-B76TSEP3.js";
-import "./chunk-FUIIVSW6.js";
-import "./chunk-HEPR6QTL.js";
+} from "./chunk-PTJBWC77.js";
+import "./chunk-BJOBR6P2.js";
+import "./chunk-WH7XN5ER.js";
+import "./chunk-RWSLVYTE.js";
 import "./chunk-2I23RPSI.js";
-import "./chunk-ATOU6CYR.js";
+import "./chunk-BV6GBSRP.js";
 import "./chunk-PNQDP3OA.js";
 import "./chunk-H73TUI4Y.js";
 import "./chunk-7HLWBYH7.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.339",
+  "version": "0.9.341",
   "description": "AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",
@@ -115,7 +115,7 @@
     "deploy": "node dist/bin/pre-build-guard.js && npm run build && (node dist/bin/prune-orphan-chunks.js || true) && npm install -g . && node dist/bin/install.js --global && echo '[exe-os] Deploy complete. Run /mcp in active sessions to reconnect.'",
     "postinstall": "node dist/bin/install.js --commands-only || true",
     "prepublishOnly": "npm run typecheck && npm run build && node dist/bin/prune-orphan-chunks.js --force && npm run guard:esm-require && npm run check:schema-version && node dist/bin/customer-readiness.js && node dist/bin/pre-publish.js",
-    "test:publish": "npx vitest run --maxWorkers=4 --exclude 'tests/tui/**' --exclude 'tests/lib/tmux-routing.test.ts' --exclude 'tests/lib/intercom-routing.test.ts' --exclude 'tests/gateway/**' --exclude 'tests/mcp/ingest-document.test.ts' --exclude 'tests/lib/hybrid-search.test.ts' --exclude 'tests/lib/worker-gate.test.ts' --exclude 'tests/daemon-perf-stress.test.ts' --exclude 'tests/lib/gateway-client.test.ts' --exclude 'tests/lib/ws-client.test.ts' --exclude 'tests/lib/ws-auth.test.ts' --exclude 'tests/integration/clean-stack-projection.test.ts' --exclude 'tests/lib/stack-update.test.ts' --exclude 'tests/device-id-split-brain.test.ts' --exclude 'tests/orchestration/dispatch-chain.test.ts' --exclude 'tests/orchestration/e2e-flow.test.ts' --exclude 'tests/lib/reaper-deps-async.test.ts' --exclude 'tests/lib/find-free-instance.test.ts' --exclude 'tests/lib/db-backup-recovery.test.ts' && echo '::warning::clean-stack-projection and stack-update quarantined (need Docker + live DB; environmental, fail in CI runner — container unhealthy / DB not initialized); ws-client/ws-auth quarantined (30-120s timeouts flaky on Node 20 CI runner — passes locally). Quarantined to match build-and-test (required gate): device-id-split-brain/dispatch-chain/e2e-flow/reaper-deps-async (timing-sensitive, flaky under parallel load — bug dfb25bf1), find-free-instance (parallelism race) and db-backup-recovery (load-sensitive, feature 57a1d161) — all pass reliably in isolation (maxWorkers=1); still covered by build-and-test/extended-tests in CI. See cicd-audit-2026-06-18.md.' && npx vitest run --maxWorkers=1 tests/daemon-perf-stress.test.ts tests/lib/gateway-client.test.ts",
+    "test:publish": "npx vitest run --maxWorkers=4 --exclude 'tests/tui/**' --exclude 'tests/lib/tmux-routing.test.ts' --exclude 'tests/lib/intercom-routing.test.ts' --exclude 'tests/gateway/**' --exclude 'tests/mcp/ingest-document.test.ts' --exclude 'tests/lib/hybrid-search.test.ts' --exclude 'tests/lib/worker-gate.test.ts' --exclude 'tests/daemon-perf-stress.test.ts' --exclude 'tests/lib/gateway-client.test.ts' --exclude 'tests/lib/ws-client.test.ts' --exclude 'tests/lib/ws-auth.test.ts' --exclude 'tests/integration/clean-stack-projection.test.ts' --exclude 'tests/lib/stack-update.test.ts' --exclude 'tests/orchestration/dispatch-chain.test.ts' --exclude 'tests/orchestration/e2e-flow.test.ts' && echo '::warning::clean-stack-projection and stack-update quarantined (need Docker + live DB; environmental, fail in CI runner \u2014 container unhealthy / DB not initialized); ws-client/ws-auth quarantined (30-120s timeouts flaky on Node 20 CI runner \u2014 passes locally). Quarantined to match build-and-test (required gate): dispatch-chain/e2e-flow (timing-sensitive, flaky under parallel load \u2014 bug dfb25bf1). device-id-split-brain/reaper-deps-async/find-free-instance/db-backup-recovery de-flaked and promoted to the required gate (chore/deflake-required-ci). See cicd-audit-2026-06-18.md.' && npx vitest run --maxWorkers=1 tests/daemon-perf-stress.test.ts tests/lib/gateway-client.test.ts",
     "benchmark:longmemeval": "npx tsx tests/benchmarks/longmemeval.ts",
     "guard:esm-require": "node scripts/check-no-runtime-require.mjs",
     "check:schema-version": "node scripts/check-schema-version.mjs",

package/release-notes.json

@@ -1,6 +1,39 @@
 {
-  "current": "0.9.339",
+  "current": "0.9.341",
   "notes": {
+    "0.9.341": {
+      "version": "0.9.341",
+      "date": "2026-07-06",
+      "features": [
+        "backlog auto-reconcile CLI — detect already-shipped records (report-only default, --apply gated) (19109dc4) (#352)",
+        "durable notification ledger (default-OFF, 0aa3ba1c) (#350)",
+        "canary/staged rollout for stack releases (release-safety hardening) (#319)",
+        "telemetry/bug-report egress redaction (dc16fee4) (#348)",
+        "automated backup restore-verify harness + manifest sidecar (4d83e9a4) (#349)"
+      ],
+      "fixes": [
+        "reject invalid agent model ids + fail-loud spawn (no silent zombie) (8b57892a) (#351)",
+        "don't re-arm auto-reconnect on intentional disconnect (#323)"
+      ],
+      "security": [],
+      "other": [
+        "bump v0.9.341 (#353)",
+        "de-flake + promote 4 quarantined tests into the required gate (#317)",
+        "merge-queue/PR-only pilot proof marker (#314)"
+      ],
+      "migration_notes": []
+    },
+    "0.9.340": {
+      "version": "0.9.340",
+      "date": "2026-07-05",
+      "features": [],
+      "fixes": [
+        "restore cloud memory backlog sync (#337)"
+      ],
+      "security": [],
+      "other": [],
+      "migration_notes": []
+    },
     "0.9.339": {
       "version": "0.9.339",
       "date": "2026-07-05",
@@ -9,9 +42,7 @@
         "rolling-window self-inflicted ceiling — close periodic-block evasion (fast-follow #341) (#344)"
       ],
       "security": [],
-      "other": [
-        "bump v0.9.339 (#345)"
-      ],
+      "other": [],
       "migration_notes": []
     },
     "0.9.338": {
@@ -54,62 +85,6 @@
         "add Codex PR review workflow (self-hosted, no App/webhook)"
       ],
       "migration_notes": []
-    },
-    "0.9.330": {
-      "version": "0.9.330",
-      "date": "2026-07-04",
-      "features": [
-        "admin-only set_customer_plan MCP tool + POST /admin/customer/plan (feature 46497a13)",
-        "add license plan-refresh procedure so all agents know how to pick up a plan change"
-      ],
-      "fixes": [
-        "stabilize daemon reconnect CI fallback",
-        "extract prose graph entities",
-        "verify prompt task notifications",
-        "canonicalize claude context model ids",
-        "harden gateway security defaults",
-        "route cognition through api router",
-        "Fix hook latency and stop safety guards",
-        "verify worktree branch reuse",
-        "recover deleted worktree daemon sessions",
-        "sync customer feature status via admin route",
-        "sanitize styled agent model ids",
-        "persist otel telemetry to clickhouse",
-        "sync wiki MCP compose pin with stack manifest",
-        "fix hook timeout and daemon session env",
-        "fix task lifecycle cleanup edge cases",
-        "fix cognition warnings and CI runner cargo isolation",
-        "fix codex spawn and lane affinity checks",
-        "bound skill sweep and harden db lock release",
-        "fix daemon client reconnect persistence",
-        "isolate MCP request path from event-loop lag + reap orphaned coordinator sessions (bug 6c46d301)"
-      ],
-      "security": [],
-      "other": [
-        "release: bump exe-os to 0.9.328",
-        "remove destructive postgres volume guidance",
-        "sync stack parity wiki mcp pin",
-        "release: bump exe-os to 0.9.326",
-        "release: bump exe-os to 0.9.325",
-        "release: bump npm for v0.9.29 stack manifest",
-        "release(stack): v0.9.29 — today's merged daemon/gateway/crm/wiki fixes, signed",
-        "add merge_group trigger to enable GitHub Merge Queue (batches PRs, ends per-push runner storms; runs on self-hosted build-my, zero hosted minutes)"
-      ],
-      "migration_notes": []
-    },
-    "0.9.329": {
-      "version": "0.9.329",
-      "date": "2026-07-04",
-      "features": [],
-      "fixes": [
-        "make db read worker tolerate parent disconnect"
-      ],
-      "security": [],
-      "other": [
-        "release: bump exe-os to 0.9.329",
-        "stabilize ci daemon hook coverage"
-      ],
-      "migration_notes": []
     }
   }
 }

package/dist/chunk-Y25OJWOQ.js

@@ -1,45 +0,0 @@
-// src/lib/secret-redaction.ts
-import { validateMnemonic } from "bip39";
-var SECRET_PATTERNS = [
-  { name: "openai_key", pattern: /\bsk-[A-Za-z0-9_-]{20,}\b/g },
-  { name: "anthropic_key", pattern: /\bsk-ant-[A-Za-z0-9_-]{20,}\b/g },
-  { name: "exe_license_key", pattern: /\bexe_sk_[A-Za-z0-9_-]{8,}\b/g },
-  { name: "aws_access_key", pattern: /\bAKIA[0-9A-Z]{16}\b/g },
-  { name: "github_token", pattern: /\bgh[pousr]_[A-Za-z0-9_]{30,}\b/g },
-  { name: "bearer_token", pattern: /\bBearer\s+[A-Za-z0-9._~+/=-]{20,}\b/gi },
-  { name: "jwt", pattern: /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/g },
-  { name: "private_key", pattern: /-----BEGIN (?:OPENSSH|RSA|DSA|EC|PGP)? ?PRIVATE KEY-----[\s\S]*?-----END (?:OPENSSH|RSA|DSA|EC|PGP)? ?PRIVATE KEY-----/g },
-  { name: "db_url_password", pattern: /\b(postgres(?:ql)?|mysql|mongodb|redis):\/\/([^:\s/@]+):([^@\s]+)@/gi },
-  { name: "assignment_secret", pattern: /\b(api[_-]?key|secret|token|password|passwd|pwd|private[_-]?key|access[_-]?key)\s*[:=]\s*(['\"]?)[^\s'"]{8,}\2/gi },
-  { name: "env_secret", pattern: /\b[A-Z0-9_]*(?:API_KEY|SECRET|TOKEN|PASSWORD|PASSWD|PRIVATE_KEY|ACCESS_KEY)[A-Z0-9_]*\s*=\s*['\"]?[^'"\s]{8,}/g }
-];
-var MNEMONIC_CANDIDATE_RE = /\b(?:[a-z]{3,12}\s+){11,23}[a-z]{3,12}\b/g;
-var MNEMONIC_LENGTHS = /* @__PURE__ */ new Set([12, 15, 18, 21, 24]);
-function looksLikeBip39Mnemonic(candidate) {
-  const words = candidate.trim().split(/\s+/);
-  if (!MNEMONIC_LENGTHS.has(words.length)) return false;
-  return validateMnemonic(words.join(" "));
-}
-function redactSecrets(input) {
-  let text = input;
-  let redactedCount = 0;
-  for (const { name, pattern } of SECRET_PATTERNS) {
-    text = text.replace(pattern, (_match, ...args) => {
-      redactedCount++;
-      if (name === "db_url_password" && typeof args[0] === "string" && typeof args[1] === "string") {
-        return `${args[0]}://${args[1]}:[REDACTED:${name}]@`;
-      }
-      return `[REDACTED:${name}]`;
-    });
-  }
-  text = text.replace(MNEMONIC_CANDIDATE_RE, (match) => {
-    if (!looksLikeBip39Mnemonic(match)) return match;
-    redactedCount++;
-    return "[REDACTED:recovery_phrase]";
-  });
-  return { text, redactedCount };
-}
-
-export {
-  redactSecrets
-};

package/dist/{chunk-A4DVMPYB.js → chunk-7UMCQQWS.js}

@@ -1,10 +1,10 @@
-import {
-  resolveType
-} from "./chunk-GUMRIUI5.js";
 import {
   chunkSourceFile,
   languageForFile
 } from "./chunk-Z6BZQHP5.js";
+import {
+  resolveType
+} from "./chunk-GUMRIUI5.js";
 
 // src/lib/graph-rag.ts
 import crypto from "crypto";