@askexenow/exe-os 0.9.340 → 0.9.342

package/release-notes.json

@@ -1,6 +1,90 @@
 {
-  "current": "0.9.340",
+  "current": "0.9.342",
   "notes": {
+    "0.9.342": {
+      "version": "0.9.342",
+      "date": "2026-07-13",
+      "features": [
+        "log every memory READ, joined to task outcome (455be5c7)",
+        "timer health dashboard — per-timer blocking risk (9ddc55b2)",
+        "additive daily_push schedule + pusher hook (feature 433fc7a1)",
+        "surface pending-review + blocked sections in employee boot brief",
+        "dedup license prompt in setup wizard + wire codex-reviewd CLI subcommand"
+      ],
+      "fixes": [
+        "align the scope-import heuristic with the per-query check",
+        "a neighbouring command's flags are not git's flags",
+        "move fast-db-init to src/lib + close the boundary rule's blind spot",
+        "close raw product query-param exfil on the feature-list path + refresh fs mock",
+        "split LIVENESS from READINESS — end the daemon kill-loop (bug 679aeb69)",
+        "feature requests carry product end-to-end (bug b8e990ed)",
+        "async kill on the session-TTL timer — final sync-on-timer, closes 1c870c78",
+        "round-4 — thrown-release on all spawn paths + gate close-task fallthrough (final)",
+        "candidate detection must prefix-match --force-create= (6aaea78f)",
+        "close 3 long-option main-rewrite bypasses (6aaea78f)",
+        "async-ify the session-TTL timer path — closes 1c870c78",
+        "round-3 — kernel-atomic bucketed-mkdir claim + gate ALL spawn paths (codex audit)",
+        "restore hardened argv-aware main guard; tighten stub cleanup",
+        "de5d9fe8 final — 3 guarantee controls + paused-human & legacy-branch docs",
+        "round 3 — default bind escalation + 64KiB PEM cap",
+        "round-2 — async cleanup-signal path + intercom capture; revert-proof reaper test (bug 1c870c78)",
+        "de5d9fe8 round 2 — buffer-stability wedge signal + non-destructive recovery + single-capture",
+        "round 2 — cto2 bind escalation + PEM DoS/pattern misses",
+        "clean up legacy plaintext SQLite stubs on init (bug 7a334eda)",
+        "scope destructive reset guard to actual main risk (bug 6aaea78f)",
+        "wake live reviewers + kill remaining timer sync-subprocess (bugs 018aaf31, 1c870c78)",
+        "round-2 — claim-gate BOTH dispatch paths + generation-exclusive stale takeover (codex audit)",
+        "dwell-gated wedged-input recovery + phantom-injection controls",
+        "redactor pattern gaps + initial-bind identity gate",
+        "task-keyed scope-independent spawn dedup (bugs 03bffd00 / f2f7bf19)"
+      ],
+      "security": [],
+      "other": [
+        "v0.9.342 — bug-zero wave",
+        "size the multi-process race for a shared CI runner",
+        "keep each race trial inside one time bucket (CI flake, not a dedup hole)",
+        "mock execFile — wake-daemon's promisify(execFile) runs at module load",
+        "stop the triage note from becoming a finding of its own",
+        "triage the 6 redaction-test fixtures that were failing gitleaks",
+        "stop the prompt hook burning 35s of CPU and returning zero bytes (bug 9b81ea43)",
+        "batch task reconcile, memoize tmux session, index task_file + null vectors (bug 4b2d2d10)",
+        "bound daemon boot probe, gate doomed DB fallback, take behaviors export off the critical path (bug 96a28cf2)",
+        "honesty cleanup for coo_restart guard — narrow claim, surface follow-up, pin failedAt reset (bug 45d94865 round 3)",
+        "mirror idempotency_key column + partial unique index in fixture",
+        "behavioral self-heal routing guards, replacing fake source-string ones (bug e7003d6f)",
+        "Reapply \"Merge branch 'fix/oom-20260710' into integration/bug-zero-v2\"",
+        "Revert \"Merge branch 'fix/oom-20260710' into integration/bug-zero-v2\"",
+        "precise scale-boundedness accounting for memory audit (bug d5a7a1b2)",
+        "worktree discipline round-2: fail-closed empty roster + full lock ownership (audit B1+B2)",
+        "wire async worktree-collision guard on the daemon path (bug 1c870c78)",
+        "resolveProjectDir round-2: symlink containment, exact match, strict scope, sibling ownership (audit B3+B4)",
+        "add regression tests for wedged picker-session kill",
+        "stop daemon event-loop block in worktree collision guard + cap auto-wake spawns",
+        "scale regression for bounded memory audit (bug d5a7a1b2)",
+        "strengthen resolver tests: force step-6/cwd path so no-fabrication + cross-scope are real revert-proofs (audit)",
+        "harden worktree-discipline tests: assert NO tmux spawn on refusal + roster/lock cases (audit)",
+        "resolveProjectDir: validate input, deterministic, no fabrication, scope-isolated (audit BLOCKER 3+4)",
+        "release spawn lock on sync ensureEmployee gate refusal (audit BLOCKER 2)"
+      ],
+      "migration_notes": []
+    },
+    "0.9.341": {
+      "version": "0.9.341",
+      "date": "2026-07-06",
+      "features": [
+        "automated backup restore-verify harness + manifest sidecar (#349)",
+        "durable notification ledger (default-OFF) (#350)",
+        "backlog auto-reconcile CLI — detect already-shipped records (report-only default, --apply gated) (#352)"
+      ],
+      "fixes": [
+        "reject invalid agent model ids + fail-loud spawn (no silent zombie) (#351)"
+      ],
+      "security": [
+        "telemetry/bug-report egress redaction — redact secrets/mnemonics before outbound telemetry and bug reports (#348)"
+      ],
+      "other": [],
+      "migration_notes": []
+    },
     "0.9.340": {
       "version": "0.9.340",
       "date": "2026-07-05",
@@ -9,9 +93,7 @@
         "restore cloud memory backlog sync (#337)"
       ],
       "security": [],
-      "other": [
-        "bump v0.9.340 (#346)"
-      ],
+      "other": [],
       "migration_notes": []
     },
     "0.9.339": {
@@ -35,78 +117,6 @@
       "security": [],
       "other": [],
       "migration_notes": []
-    },
-    "0.9.337": {
-      "version": "0.9.337",
-      "date": "2026-07-05",
-      "features": [
-        "monitoring-grant envelope MVP (Model B, default-OFF) (#340)",
-        "add xAI/Grok models to opencode whitelist (feature 6e59b416) (#315)",
-        "escalate + auto-cancel tasks blocked >48h (feature 638f8611) (#321)",
-        "load persistent ~/.exe-os/daemon.env at boot as env fallback (feature ed0e3449) (#316)",
-        "auto-clone missing stack repos on build VPS (feature 77a7792d) (#320)"
-      ],
-      "fixes": [
-        "harden daemon recovery and task routing (#339)",
-        "codex review — bypass broken bwrap sandbox, gate on [P0]/[P1], skip drafts",
-        "codex review --base cannot take a custom prompt (mutually exclusive) — use --base alone",
-        "quarantine Docker-dependent stack-update.test.ts out of required gate (unblocks merges) (#331)",
-        "repair codex-review workflow YAML — move prompt to file, fix multi-line body (startup failure)",
-        "make Claude 1M context opt-in",
-        "bound prompt hook and setup daemon health",
-        "resolve worktrees from main repo root",
-        "refuse ambiguous session-scope fallback",
-        "isolate parallel task instance claims",
-        "non-chat/non-build open bug batch"
-      ],
-      "security": [],
-      "other": [
-        "release: bump exe-os to 0.9.331 (#324)",
-        "add Codex PR review workflow (self-hosted, no App/webhook)"
-      ],
-      "migration_notes": []
-    },
-    "0.9.330": {
-      "version": "0.9.330",
-      "date": "2026-07-04",
-      "features": [
-        "admin-only set_customer_plan MCP tool + POST /admin/customer/plan (feature 46497a13)",
-        "add license plan-refresh procedure so all agents know how to pick up a plan change"
-      ],
-      "fixes": [
-        "stabilize daemon reconnect CI fallback",
-        "extract prose graph entities",
-        "verify prompt task notifications",
-        "canonicalize claude context model ids",
-        "harden gateway security defaults",
-        "route cognition through api router",
-        "Fix hook latency and stop safety guards",
-        "verify worktree branch reuse",
-        "recover deleted worktree daemon sessions",
-        "sync customer feature status via admin route",
-        "sanitize styled agent model ids",
-        "persist otel telemetry to clickhouse",
-        "sync wiki MCP compose pin with stack manifest",
-        "fix hook timeout and daemon session env",
-        "fix task lifecycle cleanup edge cases",
-        "fix cognition warnings and CI runner cargo isolation",
-        "fix codex spawn and lane affinity checks",
-        "bound skill sweep and harden db lock release",
-        "fix daemon client reconnect persistence",
-        "isolate MCP request path from event-loop lag + reap orphaned coordinator sessions (bug 6c46d301)"
-      ],
-      "security": [],
-      "other": [
-        "release: bump exe-os to 0.9.328",
-        "remove destructive postgres volume guidance",
-        "sync stack parity wiki mcp pin",
-        "release: bump exe-os to 0.9.326",
-        "release: bump exe-os to 0.9.325",
-        "release: bump npm for v0.9.29 stack manifest",
-        "release(stack): v0.9.29 — today's merged daemon/gateway/crm/wiki fixes, signed",
-        "add merge_group trigger to enable GitHub Merge Queue (batches PRs, ends per-push runner storms; runs on self-hosted build-my, zero hosted minutes)"
-      ],
-      "migration_notes": []
     }
   }
 }

package/dist/branch-hygiene-R5NVTRAY.js

@@ -1,138 +0,0 @@
-import "./chunk-MLKGABMK.js";
-
-// src/lib/branch-hygiene.ts
-import { execFile } from "child_process";
-import { promisify } from "util";
-var execFileAsync = promisify(execFile);
-var GIT_TIMEOUT_MS = 4e3;
-var MAX_BRANCHES_SCANNED = 60;
-var DEFAULT_LISTING_CAP = 10;
-async function git(repoRoot, args) {
-  const { stdout } = await execFileAsync("git", args, {
-    cwd: repoRoot,
-    encoding: "utf8",
-    timeout: GIT_TIMEOUT_MS
-  });
-  return stdout.trim();
-}
-async function detectRemoteBase(repoRoot) {
-  for (const candidate of ["main", "master"]) {
-    try {
-      await git(repoRoot, ["rev-parse", "--verify", `refs/remotes/origin/${candidate}`]);
-      return `origin/${candidate}`;
-    } catch {
-    }
-  }
-  return null;
-}
-function parseRefLine(line) {
-  const [name, committedAt] = line.split("");
-  if (!name) return null;
-  return { name: name.replace(/^origin\//, ""), committedAt: committedAt ?? "" };
-}
-async function scanUnmergedBranches(repoRoot, options = {}) {
-  const staleHours = options.staleHours ?? 24;
-  const listingCap = options.listingCap ?? DEFAULT_LISTING_CAP;
-  const empty = { branches: [], total: 0, staleCount: 0, truncated: false };
-  let base;
-  try {
-    base = await detectRemoteBase(repoRoot);
-  } catch {
-    return empty;
-  }
-  if (!base) return empty;
-  let lines;
-  try {
-    const raw = await git(repoRoot, [
-      "for-each-ref",
-      `--no-merged=${base}`,
-      "--sort=-committerdate",
-      "--format=%(refname:short)%(committerdate:iso-strict)",
-      "refs/remotes/origin"
-    ]);
-    lines = raw ? raw.split("\n") : [];
-  } catch {
-    return empty;
-  }
-  const baseShort = base.replace(/^origin\//, "");
-  const now = Date.now();
-  const out = [];
-  let scanned = 0;
-  let truncated = false;
-  for (const line of lines) {
-    const parsed = parseRefLine(line);
-    if (!parsed) continue;
-    if (parsed.name === baseShort || parsed.name === "HEAD") continue;
-    if (scanned >= MAX_BRANCHES_SCANNED) {
-      truncated = true;
-      break;
-    }
-    scanned++;
-    let ahead = 0;
-    try {
-      const cnt = await git(repoRoot, ["rev-list", "--count", `${base}..origin/${parsed.name}`]);
-      ahead = parseInt(cnt, 10) || 0;
-    } catch {
-      ahead = 0;
-    }
-    if (ahead <= 0) continue;
-    let filesChanged = 0;
-    try {
-      const diff = await git(repoRoot, ["diff", "--name-only", `${base}...origin/${parsed.name}`]);
-      filesChanged = diff ? diff.split("\n").filter(Boolean).length : 0;
-    } catch {
-      filesChanged = 0;
-    }
-    const committedMs = parsed.committedAt ? Date.parse(parsed.committedAt) : NaN;
-    const ageHours = Number.isFinite(committedMs) ? Math.max(0, (now - committedMs) / 36e5) : 0;
-    out.push({
-      name: parsed.name,
-      ahead,
-      committedAt: parsed.committedAt,
-      ageHours,
-      filesChanged
-    });
-  }
-  const staleCount = out.filter((b) => b.ageHours >= staleHours).length;
-  return {
-    branches: out.slice(0, listingCap),
-    total: out.length,
-    staleCount,
-    truncated
-  };
-}
-function slugForMatch(input) {
-  return input.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
-}
-async function findMatchingBranches(repoRoot, opts) {
-  const result = [];
-  const scan = await scanUnmergedBranches(repoRoot, { listingCap: MAX_BRANCHES_SCANNED });
-  if (scan.branches.length === 0) return result;
-  const idToken = opts.id ? slugForMatch(opts.id) : "";
-  const shortId = idToken ? idToken.replace(/-/g, "").slice(0, 8) : "";
-  const titleSlug = opts.title ? slugForMatch(opts.title) : "";
-  const titleTokens = new Set(titleSlug.split("-").filter((t) => t.length >= 4));
-  for (const b of scan.branches) {
-    const branchSlug = slugForMatch(b.name);
-    const branchCompact = branchSlug.replace(/-/g, "");
-    let matched = false;
-    if (idToken && (branchSlug.includes(idToken) || shortId && branchCompact.includes(shortId))) {
-      matched = true;
-    } else if (titleTokens.size > 0) {
-      const branchTokens = new Set(branchSlug.split("-"));
-      let overlap = 0;
-      for (const t of titleTokens) if (branchTokens.has(t)) overlap++;
-      if (overlap >= 2) matched = true;
-    }
-    if (matched) {
-      result.push({ name: b.name, ahead: b.ahead, ageHours: b.ageHours });
-    }
-  }
-  return result;
-}
-export {
-  DEFAULT_LISTING_CAP,
-  findMatchingBranches,
-  scanUnmergedBranches,
-  slugForMatch
-};

package/dist/chunk-6IRVGOUL.js

@@ -1,30 +0,0 @@
-import {
-  createReminder
-} from "./chunk-KMBEL7VB.js";
-
-// src/mcp/tools/create-reminder.ts
-import { z } from "zod";
-function registerCreateReminder(server) {
-  server.registerTool(
-    "create_reminder",
-    {
-      title: "Create Reminder",
-      description: "Set a reminder for the founder. Shown in the boot brief every session.",
-      inputSchema: {
-        text: z.string().describe("What to remind about"),
-        due_date: z.string().optional().describe("Optional due date \u2014 ISO date (2026-04-01) or null for persistent")
-      }
-    },
-    async ({ text, due_date }) => {
-      const reminder = await createReminder(text, due_date);
-      const dueStr = reminder.dueDate ? ` (due: ${reminder.dueDate})` : "";
-      return {
-        content: [{ type: "text", text: `Reminder set: "${reminder.text}"${dueStr}` }]
-      };
-    }
-  );
-}
-
-export {
-  registerCreateReminder
-};

package/dist/chunk-HMP5VT6A.js

@@ -1,118 +0,0 @@
-// src/lib/dispatch-ack.ts
-import { existsSync, mkdirSync, readFileSync, writeFileSync, unlinkSync, readdirSync } from "fs";
-import path from "path";
-import os from "os";
-var ACK_DIR = path.join(os.homedir(), ".exe-os", "dispatch-acks");
-function ensureAckDir() {
-  if (!existsSync(ACK_DIR)) mkdirSync(ACK_DIR, { recursive: true });
-}
-function writeDispatchPending(taskId, assignedTo, sessionName) {
-  ensureAckDir();
-  const signal = {
-    taskId,
-    assignedTo,
-    dispatchedAt: (/* @__PURE__ */ new Date()).toISOString(),
-    sessionName
-  };
-  writeFileSync(path.join(ACK_DIR, `${taskId}.pending`), JSON.stringify(signal), "utf-8");
-}
-function writeDispatchAck(taskId, agentId) {
-  ensureAckDir();
-  const pendingPath = path.join(ACK_DIR, `${taskId}.pending`);
-  const ackPath = path.join(ACK_DIR, `${taskId}.ack`);
-  let signal;
-  try {
-    signal = JSON.parse(readFileSync(pendingPath, "utf-8"));
-  } catch {
-    signal = { taskId, assignedTo: agentId, dispatchedAt: (/* @__PURE__ */ new Date()).toISOString() };
-  }
-  signal.ackedAt = (/* @__PURE__ */ new Date()).toISOString();
-  writeFileSync(ackPath, JSON.stringify(signal), "utf-8");
-  try {
-    unlinkSync(pendingPath);
-  } catch {
-  }
-}
-function writeDispatchFailed(taskId, assignedTo, error, sessionName) {
-  ensureAckDir();
-  const pendingPath = path.join(ACK_DIR, `${taskId}.pending`);
-  let signal;
-  try {
-    signal = JSON.parse(readFileSync(pendingPath, "utf-8"));
-  } catch {
-    signal = { taskId, assignedTo, dispatchedAt: (/* @__PURE__ */ new Date()).toISOString() };
-  }
-  signal.failedAt = (/* @__PURE__ */ new Date()).toISOString();
-  signal.error = error;
-  if (sessionName) signal.sessionName = sessionName;
-  writeFileSync(path.join(ACK_DIR, `${taskId}.failed`), JSON.stringify(signal), "utf-8");
-  try {
-    unlinkSync(pendingPath);
-  } catch {
-  }
-}
-function checkDispatchStatus(taskId) {
-  ensureAckDir();
-  const ackPath = path.join(ACK_DIR, `${taskId}.ack`);
-  const failedPath = path.join(ACK_DIR, `${taskId}.failed`);
-  const pendingPath = path.join(ACK_DIR, `${taskId}.pending`);
-  if (existsSync(ackPath)) {
-    try {
-      const signal = JSON.parse(readFileSync(ackPath, "utf-8"));
-      return { status: "acked", signal };
-    } catch {
-      return { status: "acked" };
-    }
-  }
-  if (existsSync(failedPath)) {
-    try {
-      const signal = JSON.parse(readFileSync(failedPath, "utf-8"));
-      return { status: "failed", signal };
-    } catch {
-      return { status: "failed" };
-    }
-  }
-  if (existsSync(pendingPath)) {
-    try {
-      const signal = JSON.parse(readFileSync(pendingPath, "utf-8"));
-      return { status: "pending", signal };
-    } catch {
-      return { status: "pending" };
-    }
-  }
-  return { status: "unknown" };
-}
-function cleanStaleDispatchAcks(maxAgeMs = 60 * 60 * 1e3) {
-  ensureAckDir();
-  const now = Date.now();
-  let cleaned = 0;
-  try {
-    for (const file of readdirSync(ACK_DIR)) {
-      const fullPath = path.join(ACK_DIR, file);
-      try {
-        const signal = JSON.parse(readFileSync(fullPath, "utf-8"));
-        const ts = signal.ackedAt ?? signal.dispatchedAt;
-        if (now - new Date(ts).getTime() > maxAgeMs) {
-          unlinkSync(fullPath);
-          cleaned++;
-        }
-      } catch {
-        try {
-          unlinkSync(fullPath);
-          cleaned++;
-        } catch {
-        }
-      }
-    }
-  } catch {
-  }
-  return cleaned;
-}
-
-export {
-  writeDispatchPending,
-  writeDispatchAck,
-  writeDispatchFailed,
-  checkDispatchStatus,
-  cleanStaleDispatchAcks
-};

package/dist/chunk-PVYR4FCQ.js

@@ -1,113 +0,0 @@
-// src/lib/play-mode.ts
-import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs";
-import { join, dirname } from "path";
-import { homedir } from "os";
-var PLAY_MODE_FILE = join(homedir(), ".exe-os", "play-modes.json");
-function resolvePlayModeFile() {
-  return process.env.EXE_PLAY_MODE_FILE ?? PLAY_MODE_FILE;
-}
-var DEFAULT_EXPLORE_DURATION_MS = 60 * 60 * 1e3;
-function playModeKey(agentId, sessionScope) {
-  return `${agentId}:${sessionScope}`;
-}
-function readStore() {
-  try {
-    const filePath = resolvePlayModeFile();
-    if (!existsSync(filePath)) return {};
-    const raw = readFileSync(filePath, "utf8");
-    return JSON.parse(raw);
-  } catch {
-    return {};
-  }
-}
-function writeStore(store) {
-  const filePath = resolvePlayModeFile();
-  const dir = dirname(filePath);
-  if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
-  writeFileSync(filePath, JSON.stringify(store, null, 2), "utf8");
-}
-function setPlayMode(agentId, sessionScope, mode, options = {}) {
-  const key = playModeKey(agentId, sessionScope);
-  const store = readStore();
-  if (mode === "task") {
-    delete store[key];
-    writeStore(store);
-    return {
-      mode: "task",
-      agentId,
-      sessionScope,
-      startedAt: (/* @__PURE__ */ new Date()).toISOString(),
-      expiresAt: new Date(Date.now() + 1).toISOString()
-      // immediate
-    };
-  }
-  const durationMs = options.durationMs ?? DEFAULT_EXPLORE_DURATION_MS;
-  const now = /* @__PURE__ */ new Date();
-  const entry = {
-    mode: "explore",
-    agentId,
-    sessionScope,
-    startedAt: now.toISOString(),
-    expiresAt: new Date(now.getTime() + durationMs).toISOString(),
-    notes: options.notes
-  };
-  store[key] = entry;
-  writeStore(store);
-  return entry;
-}
-function getPlayMode(agentId, sessionScope) {
-  const key = playModeKey(agentId, sessionScope);
-  const store = readStore();
-  const entry = store[key];
-  if (!entry) return null;
-  if (new Date(entry.expiresAt).getTime() <= Date.now()) {
-    delete store[key];
-    try {
-      writeStore(store);
-    } catch {
-    }
-    return null;
-  }
-  return entry;
-}
-function isExploreMode(agentId, sessionScope) {
-  try {
-    const entry = getPlayMode(agentId, sessionScope);
-    return entry?.mode === "explore";
-  } catch {
-    return false;
-  }
-}
-function listExploreSessions() {
-  try {
-    const store = readStore();
-    const now = Date.now();
-    const active = [];
-    let pruned = false;
-    for (const [key, entry] of Object.entries(store)) {
-      if (new Date(entry.expiresAt).getTime() <= now) {
-        delete store[key];
-        pruned = true;
-      } else {
-        active.push(entry);
-      }
-    }
-    if (pruned) {
-      try {
-        writeStore(store);
-      } catch {
-      }
-    }
-    return active;
-  } catch {
-    return [];
-  }
-}
-
-export {
-  DEFAULT_EXPLORE_DURATION_MS,
-  setPlayMode,
-  getPlayMode,
-  isExploreMode,
-  listExploreSessions
-};