@askexenow/exe-os 0.9.346 → 0.9.348

package/dist/{tasks-review-INJKVN63.js → tasks-review-S6QB5KGS.js}

@@ -12,22 +12,22 @@ import {
   isStale,
   listPendingReviews,
   sweepExpiredSignalFiles
-} from "./chunk-PJOHJ7Q4.js";
-import "./chunk-E6TLQG2T.js";
-import "./chunk-OZLNCLS3.js";
-import "./chunk-EDC57TDH.js";
+} from "./chunk-ZXSFUR77.js";
+import "./chunk-RBRGSOK5.js";
+import "./chunk-OBWIVRD6.js";
+import "./chunk-A42356G7.js";
 import "./chunk-E23LNUWJ.js";
 import "./chunk-4JERP7NT.js";
 import "./chunk-EIKATSE4.js";
-import "./chunk-3WELJGZN.js";
+import "./chunk-HYZE3MNS.js";
 import "./chunk-AD2VCHSS.js";
 import "./chunk-WOYADZF5.js";
 import "./chunk-SKGMF2SO.js";
-import "./chunk-EU2GUT67.js";
-import "./chunk-GSIJL4YA.js";
-import "./chunk-OIF65HXR.js";
+import "./chunk-AMC2OPYP.js";
+import "./chunk-AJIXH5JF.js";
+import "./chunk-A3YHWWE6.js";
 import "./chunk-AM7S2TY6.js";
-import "./chunk-6I6OMBYY.js";
+import "./chunk-RFRUDXOI.js";
 import "./chunk-OSKWCKUC.js";
 import "./chunk-KI5PFRG6.js";
 import "./chunk-CVYC6DUW.js";
@@ -41,16 +41,17 @@ import "./chunk-NLEW62VC.js";
 import "./chunk-HYZV25LY.js";
 import "./chunk-GJV3WDWM.js";
 import "./chunk-MP2AFCGL.js";
-import "./chunk-3QYE5U6D.js";
+import "./chunk-QNKR7WEL.js";
 import "./chunk-2I23RPSI.js";
-import "./chunk-Q6ZQIX7L.js";
+import "./chunk-FE6WBI2M.js";
 import "./chunk-OMXJMOBD.js";
 import "./chunk-7HLWBYH7.js";
 import "./chunk-BBMTVAE3.js";
+import "./chunk-YMUZWC33.js";
 import "./chunk-FXU7JOXK.js";
-import "./chunk-NGP6LSV2.js";
-import "./chunk-BUDVHNV2.js";
-import "./chunk-DY7WDHMC.js";
+import "./chunk-WNBZJSQT.js";
+import "./chunk-MMOONM6D.js";
+import "./chunk-XF2D4CDA.js";
 import "./chunk-BCZF3AGJ.js";
 import "./chunk-HSGBZSCA.js";
 import "./chunk-MLKGABMK.js";

package/dist/{telemetry-upload-LIC7M7AY.js → telemetry-upload-LTL5SW24.js}

@@ -3,19 +3,20 @@ import {
 } from "./chunk-2XZ6X3PJ.js";
 import {
   getOrchestrationMetrics
-} from "./chunk-EU2GUT67.js";
-import "./chunk-3QYE5U6D.js";
+} from "./chunk-AMC2OPYP.js";
+import "./chunk-QNKR7WEL.js";
 import "./chunk-2I23RPSI.js";
-import "./chunk-Q6ZQIX7L.js";
+import "./chunk-FE6WBI2M.js";
 import "./chunk-OMXJMOBD.js";
 import "./chunk-7HLWBYH7.js";
 import "./chunk-BBMTVAE3.js";
+import "./chunk-YMUZWC33.js";
 import "./chunk-FXU7JOXK.js";
 import {
   loadLicense,
   readCachedLicenseToken
-} from "./chunk-BUDVHNV2.js";
-import "./chunk-DY7WDHMC.js";
+} from "./chunk-MMOONM6D.js";
+import "./chunk-XF2D4CDA.js";
 import {
   loadConfig
 } from "./chunk-BCZF3AGJ.js";
@@ -398,14 +399,14 @@ async function buildTelemetryPayload(sinceHours = 24) {
   }
   let toolUsage;
   try {
-    const { getToolUsageSummary } = await import("./tool-telemetry-PDHE36YD.js");
+    const { getToolUsageSummary } = await import("./tool-telemetry-QJGJAHOC.js");
     const summary = getToolUsageSummary();
     if (Object.keys(summary).length > 0) toolUsage = summary;
   } catch {
   }
   let calibration;
   try {
-    const { DreamingEngine } = await import("./dreaming-JAHOTVRJ.js");
+    const { DreamingEngine } = await import("./dreaming-O4P2W5E5.js");
     const engine = new DreamingEngine();
     const cal = await engine.computeCalibration("*", sinceHours);
     if (cal.assertions.total > 0 || cal.estimation.total > 0) {

package/dist/{token-budget-PABF5ZBO.js → token-budget-SK32GKFZ.js}

@@ -1,12 +1,13 @@
 import {
   createTokenBudgetMiddleware
-} from "./chunk-MCZWZEVE.js";
-import "./chunk-3QYE5U6D.js";
+} from "./chunk-WUMWXU6B.js";
+import "./chunk-QNKR7WEL.js";
 import "./chunk-2I23RPSI.js";
-import "./chunk-Q6ZQIX7L.js";
+import "./chunk-FE6WBI2M.js";
 import "./chunk-OMXJMOBD.js";
 import "./chunk-7HLWBYH7.js";
 import "./chunk-BBMTVAE3.js";
+import "./chunk-YMUZWC33.js";
 import "./chunk-FXU7JOXK.js";
 import "./chunk-BCZF3AGJ.js";
 import "./chunk-HSGBZSCA.js";

package/dist/{tool-telemetry-PDHE36YD.js → tool-telemetry-QJGJAHOC.js}

@@ -5,7 +5,7 @@ import {
   startToolTelemetryFlush,
   stopToolTelemetryFlush,
   wrapServerWithTelemetry
-} from "./chunk-A3MGVYSP.js";
+} from "./chunk-E42D2E5F.js";
 import "./chunk-MLKGABMK.js";
 export {
   getToolUsageStats,

package/dist/tui/App.js

@@ -1,27 +1,27 @@
 #!/usr/bin/env node
 import {
   getSessionPrompt
-} from "../chunk-ZASZQDAI.js";
-import "../chunk-KQ3HRA6Q.js";
-import "../chunk-CQN4IKRB.js";
+} from "../chunk-6GSYN262.js";
+import "../chunk-AUILJKSM.js";
+import "../chunk-MMXIE6HV.js";
 import {
   sessionScopeFilter
-} from "../chunk-PJOHJ7Q4.js";
-import "../chunk-E6TLQG2T.js";
-import "../chunk-OZLNCLS3.js";
-import "../chunk-EDC57TDH.js";
+} from "../chunk-ZXSFUR77.js";
+import "../chunk-RBRGSOK5.js";
+import "../chunk-OBWIVRD6.js";
+import "../chunk-A42356G7.js";
 import "../chunk-E23LNUWJ.js";
 import "../chunk-4JERP7NT.js";
 import "../chunk-EIKATSE4.js";
-import "../chunk-3WELJGZN.js";
+import "../chunk-HYZE3MNS.js";
 import "../chunk-AD2VCHSS.js";
 import "../chunk-WOYADZF5.js";
 import "../chunk-SKGMF2SO.js";
-import "../chunk-EU2GUT67.js";
-import "../chunk-GSIJL4YA.js";
-import "../chunk-OIF65HXR.js";
+import "../chunk-AMC2OPYP.js";
+import "../chunk-AJIXH5JF.js";
+import "../chunk-A3YHWWE6.js";
 import "../chunk-AM7S2TY6.js";
-import "../chunk-6I6OMBYY.js";
+import "../chunk-RFRUDXOI.js";
 import "../chunk-OSKWCKUC.js";
 import "../chunk-KI5PFRG6.js";
 import "../chunk-CVYC6DUW.js";
@@ -40,16 +40,17 @@ import {
 import {
   DEFAULT_COORDINATOR_TEMPLATE_NAME,
   isCoordinatorName
-} from "../chunk-3QYE5U6D.js";
+} from "../chunk-QNKR7WEL.js";
 import "../chunk-2I23RPSI.js";
-import "../chunk-Q6ZQIX7L.js";
+import "../chunk-FE6WBI2M.js";
 import "../chunk-OMXJMOBD.js";
 import "../chunk-7HLWBYH7.js";
 import "../chunk-BBMTVAE3.js";
+import "../chunk-YMUZWC33.js";
 import "../chunk-FXU7JOXK.js";
-import "../chunk-NGP6LSV2.js";
-import "../chunk-BUDVHNV2.js";
-import "../chunk-DY7WDHMC.js";
+import "../chunk-WNBZJSQT.js";
+import "../chunk-MMOONM6D.js";
+import "../chunk-XF2D4CDA.js";
 import {
   THEME_MODES,
   tuiPalette
@@ -7422,7 +7423,7 @@ function useOrchestrator(enabled = true) {
     let cancelled = false;
     async function init() {
       try {
-        const { MultiAgentOrchestrator } = await import("../orchestrator-MOJEAZ3K.js");
+        const { MultiAgentOrchestrator } = await import("../orchestrator-4MZEQULR.js");
         const { getCoordinatorName, isCoordinatorRole, loadEmployees } = await import("../lib/employees.js");
         const { isExeSession } = await import("../lib/tmux-routing.js");
         const { listTmuxSessions, inTmux } = await import("../lib/tmux-status.js");
@@ -7463,7 +7464,7 @@ function useOrchestrator(enabled = true) {
         setTotalInProgress(health.totalInProgress);
         try {
           const { getClient } = await import("../lib/database.js");
-          const { sessionScopeFilter: sessionScopeFilter2 } = await import("../task-scope-5GKJTQL2.js");
+          const { sessionScopeFilter: sessionScopeFilter2 } = await import("../task-scope-PSVAE3EM.js");
           const client = getClient();
           const uoScope = sessionScopeFilter2();
           const result = await client.execute({
@@ -7495,7 +7496,7 @@ function useOrchestrator(enabled = true) {
   const spawnSession = useCallback5(
     async (agentId) => {
       try {
-        const { createTaskCore } = await import("../tasks-crud-ZWKPTGPU.js");
+        const { createTaskCore } = await import("../tasks-crud-TLELWWUL.js");
         const { ensureEmployee } = await import("../lib/tmux-routing.js");
         const { getCoordinatorName } = await import("../lib/employees.js");
         await createTaskCore({
@@ -8119,7 +8120,7 @@ function TasksView({ onBack }) {
     const { withTrace } = await import("../telemetry-43X3GT3R.js");
     return withTrace("tui.tasks.loadTasks", async () => {
       try {
-        const { loadTaskList } = await import("../tui-data-Y6X7A4U4.js");
+        const { loadTaskList } = await import("../tui-data-3JSV56ME.js");
         const tasks = await loadTaskList();
         setAllTasks(
           tasks.map((task) => ({
@@ -8952,7 +8953,7 @@ function TeamView({ onBack, onViewSessions }) {
         let projectsByEmployee = /* @__PURE__ */ new Map();
         let currentTaskByEmployee = /* @__PURE__ */ new Map();
         try {
-          const { loadTeamBadgeCounts, loadTeamDetailMetrics } = await import("../tui-data-Y6X7A4U4.js");
+          const { loadTeamBadgeCounts, loadTeamDetailMetrics } = await import("../tui-data-3JSV56ME.js");
           setBadgeInFlight(true);
           const badgeCountsPromise = loadTeamBadgeCounts();
           const detailsPromise = loadTeamDetailMetrics(roster.map((emp) => emp.name));
@@ -9318,7 +9319,7 @@ function WikiView({ onBack }) {
     }
     setSearchLoading(true);
     try {
-      const { searchWikiMemoryRows } = await import("../tui-data-Y6X7A4U4.js");
+      const { searchWikiMemoryRows } = await import("../tui-data-3JSV56ME.js");
       setSearchResults(await searchWikiMemoryRows(query));
     } catch {
       setSearchResults([]);

package/dist/{tui-data-Y6X7A4U4.js → tui-data-3JSV56ME.js}

@@ -1,21 +1,21 @@
 import {
   sessionScopeFilter
-} from "./chunk-PJOHJ7Q4.js";
-import "./chunk-E6TLQG2T.js";
-import "./chunk-OZLNCLS3.js";
-import "./chunk-EDC57TDH.js";
+} from "./chunk-ZXSFUR77.js";
+import "./chunk-RBRGSOK5.js";
+import "./chunk-OBWIVRD6.js";
+import "./chunk-A42356G7.js";
 import "./chunk-E23LNUWJ.js";
 import "./chunk-4JERP7NT.js";
 import "./chunk-EIKATSE4.js";
-import "./chunk-3WELJGZN.js";
+import "./chunk-HYZE3MNS.js";
 import "./chunk-AD2VCHSS.js";
 import "./chunk-WOYADZF5.js";
 import "./chunk-SKGMF2SO.js";
-import "./chunk-EU2GUT67.js";
-import "./chunk-GSIJL4YA.js";
-import "./chunk-OIF65HXR.js";
+import "./chunk-AMC2OPYP.js";
+import "./chunk-AJIXH5JF.js";
+import "./chunk-A3YHWWE6.js";
 import "./chunk-AM7S2TY6.js";
-import "./chunk-6I6OMBYY.js";
+import "./chunk-RFRUDXOI.js";
 import "./chunk-OSKWCKUC.js";
 import "./chunk-KI5PFRG6.js";
 import "./chunk-CVYC6DUW.js";
@@ -31,16 +31,17 @@ import "./chunk-GJV3WDWM.js";
 import "./chunk-MP2AFCGL.js";
 import {
   getClient
-} from "./chunk-3QYE5U6D.js";
+} from "./chunk-QNKR7WEL.js";
 import "./chunk-2I23RPSI.js";
-import "./chunk-Q6ZQIX7L.js";
+import "./chunk-FE6WBI2M.js";
 import "./chunk-OMXJMOBD.js";
 import "./chunk-7HLWBYH7.js";
 import "./chunk-BBMTVAE3.js";
+import "./chunk-YMUZWC33.js";
 import "./chunk-FXU7JOXK.js";
-import "./chunk-NGP6LSV2.js";
-import "./chunk-BUDVHNV2.js";
-import "./chunk-DY7WDHMC.js";
+import "./chunk-WNBZJSQT.js";
+import "./chunk-MMOONM6D.js";
+import "./chunk-XF2D4CDA.js";
 import "./chunk-BCZF3AGJ.js";
 import "./chunk-HSGBZSCA.js";
 import "./chunk-MLKGABMK.js";

package/dist/{update-support-COJYGU2V.js → update-support-LMPGWJVG.js}

@@ -1,6 +1,6 @@
 import {
   persistSupportArtifact
-} from "./chunk-QCM3YWL7.js";
+} from "./chunk-6QRS3IZF.js";
 import {
   queueSupportStatusUpdateSync
 } from "./chunk-25X4JD2V.js";
@@ -10,14 +10,14 @@ import {
 } from "./chunk-5H47VHB7.js";
 import "./chunk-MMRUBN3I.js";
 import "./chunk-I5AVZOL2.js";
-import "./chunk-GGHH54QD.js";
-import "./chunk-WPQ5LWMW.js";
+import "./chunk-H5QNVWU4.js";
+import "./chunk-H4JKOLXU.js";
 import "./chunk-CHCA3ZM2.js";
 import "./chunk-OTVEIJUQ.js";
-import "./chunk-W7JPRQM2.js";
+import "./chunk-GPZQZTJB.js";
 import {
   getActiveAgent
-} from "./chunk-6LLDY7AL.js";
+} from "./chunk-TF5E6O5Q.js";
 import "./chunk-5MOYSU5A.js";
 import {
   isTelemetryRedactionEnabled,
@@ -34,19 +34,20 @@ import "./chunk-VMR6M6GN.js";
 import "./chunk-NLEW62VC.js";
 import "./chunk-GJV3WDWM.js";
 import "./chunk-MP2AFCGL.js";
-import "./chunk-3QYE5U6D.js";
+import "./chunk-QNKR7WEL.js";
 import "./chunk-2I23RPSI.js";
-import "./chunk-Q6ZQIX7L.js";
+import "./chunk-FE6WBI2M.js";
 import "./chunk-OMXJMOBD.js";
 import "./chunk-7HLWBYH7.js";
 import "./chunk-BBMTVAE3.js";
+import "./chunk-YMUZWC33.js";
 import "./chunk-FXU7JOXK.js";
 import "./chunk-QWVXN224.js";
 import {
   loadLicense,
   readCachedLicenseToken
-} from "./chunk-BUDVHNV2.js";
-import "./chunk-DY7WDHMC.js";
+} from "./chunk-MMOONM6D.js";
+import "./chunk-XF2D4CDA.js";
 import {
   EXE_AI_DIR,
   loadConfig

package/dist/{work-state-heartbeat-YV3MAIQY.js → work-state-heartbeat-MQQOCU54.js}

@@ -9,7 +9,7 @@ import {
   runWorkStateTick,
   shouldWriteWorkState,
   upsertWorkState
-} from "./chunk-WPQ5LWMW.js";
+} from "./chunk-H4JKOLXU.js";
 import "./chunk-CHCA3ZM2.js";
 import "./chunk-MLKGABMK.js";
 export {

package/dist/{worker-gate-BLJENHMV.js → worker-gate-P2O64XMH.js}

@@ -6,7 +6,7 @@ import {
   releaseBackfillLock,
   tryAcquireBackfillLock,
   tryAcquireWorkerSlot
-} from "./chunk-25CXLXZQ.js";
+} from "./chunk-2WJYLXPF.js";
 import "./chunk-BCZF3AGJ.js";
 import "./chunk-HSGBZSCA.js";
 import "./chunk-MLKGABMK.js";

package/dist/{workflow-engine-AAPPPMFS.js → workflow-engine-BLLQKA3O.js}

@@ -10,8 +10,8 @@ import {
   persistWorkflows,
   runWorkflow,
   startWorkflow
-} from "./chunk-CFA4T2HP.js";
-import "./chunk-PDWIUSQH.js";
+} from "./chunk-43RTUMUT.js";
+import "./chunk-PIUDQ7P2.js";
 import "./chunk-MLKGABMK.js";
 export {
   advanceWorkflow,

package/dist/{worktree-MGYTWKCA.js → worktree-FJZXHDCJ.js}

@@ -16,14 +16,15 @@ import {
   resolveGitWithRetrySync,
   worktreeBranch,
   worktreePath
-} from "./chunk-EDC57TDH.js";
-import "./chunk-EU2GUT67.js";
-import "./chunk-3QYE5U6D.js";
+} from "./chunk-OBWIVRD6.js";
+import "./chunk-AMC2OPYP.js";
+import "./chunk-QNKR7WEL.js";
 import "./chunk-2I23RPSI.js";
-import "./chunk-Q6ZQIX7L.js";
+import "./chunk-FE6WBI2M.js";
 import "./chunk-OMXJMOBD.js";
 import "./chunk-7HLWBYH7.js";
 import "./chunk-BBMTVAE3.js";
+import "./chunk-YMUZWC33.js";
 import "./chunk-FXU7JOXK.js";
 import "./chunk-BCZF3AGJ.js";
 import "./chunk-HSGBZSCA.js";

package/dist/{worktree-sweep-HNNHNAXN.js → worktree-sweep-SW4AG6JR.js}

@@ -3,15 +3,16 @@ import {
   discoverRepoPaths,
   isWorktreePathOccupiedByCwd,
   sweepWorktrees
-} from "./chunk-RLULWMUL.js";
-import "./chunk-EDC57TDH.js";
-import "./chunk-EU2GUT67.js";
-import "./chunk-3QYE5U6D.js";
+} from "./chunk-27REQ7KR.js";
+import "./chunk-OBWIVRD6.js";
+import "./chunk-AMC2OPYP.js";
+import "./chunk-QNKR7WEL.js";
 import "./chunk-2I23RPSI.js";
-import "./chunk-Q6ZQIX7L.js";
+import "./chunk-FE6WBI2M.js";
 import "./chunk-OMXJMOBD.js";
 import "./chunk-7HLWBYH7.js";
 import "./chunk-BBMTVAE3.js";
+import "./chunk-YMUZWC33.js";
 import "./chunk-FXU7JOXK.js";
 import "./chunk-BCZF3AGJ.js";
 import "./chunk-HSGBZSCA.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.346",
+  "version": "0.9.348",
   "description": "AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",

package/release-notes.json

@@ -1,14 +1,66 @@
 {
-  "current": "0.9.346",
+  "current": "0.9.348",
   "notes": {
-    "0.9.346": {
-      "version": "0.9.346",
+    "0.9.348": {
+      "version": "0.9.348",
       "date": "2026-07-21",
       "features": [],
       "fixes": [],
       "security": [],
       "other": [
-        "v0.9.346 — daemon/dispatch reliability + CI pipeline repair (#420)"
+        "v0.9.348 — deploy-fix wave + MCP/guard/codex fixes (#449)"
+      ],
+      "migration_notes": []
+    },
+    "0.9.347": {
+      "version": "0.9.347",
+      "date": "2026-07-22",
+      "features": [],
+      "fixes": [
+        "daemon: cloud_sync timer no longer blocks the event loop for minutes–hours — the root cause of recurring \"MCP connected but tools fail\" instability; drains in bounded per-tick slices with a durable resumable cursor (c5fdb821 p0) (#422)",
+        "stack-update: fail-loud + fail-safe on image auth/pull failure — never leave prod silently partial; pre-deploy pullability check aborts before any mutation (f1c36209 p0) (#432)",
+        "api-router: runtime self-heal ALTER for support_feature_requests.product — list_my_features no longer 500s on drifted D1 instances (5604f580) (#421)",
+        "orchestration: re-validate the dispatch claim before a stale auto-blocked task resumes — kills duplicate-fleet / wrong-work on pane un-wedge (e1d26a94) (#431)",
+        "codex: configurable working default model (EXE_CODEX_DEFAULT_MODEL, fallback gpt-5.5) instead of the ChatGPT-account-rejected gpt-5.3-codex (d691ab3a) (#430)",
+        "mcp: reconcile consolidated tool schemas with handlers — config.import_orchestration no longer throws; graph.merge_entities merges or errors loudly instead of silently no-opping (9f6216fe, b8773ad7) (#428)",
+        "task: assigned reviewer can now close_task (was mis-gated on caller identity) (b6543735) (#427)",
+        "task: completion \"What Changed\" derives from git diff, not scraped prose — no more fabricated changelogs (ae43d0b9) (#429)"
+      ],
+      "security": [],
+      "other": [
+        "test: deflake ReDoS redaction timing bound (1000ms→5000ms) — was blocking releases; still catches real ReDoS (#426)",
+        "test: deflake mcp-proxy retry-budget (20ms→2000ms test config) — recurring release-blocker, no production change (#433)",
+        "ci: classified auto-retry on infra failures (e381fcb0) (#425)"
+      ],
+      "migration_notes": []
+    },
+    "0.9.346": {
+      "version": "0.9.346",
+      "date": "2026-07-21",
+      "features": [
+        "exe-os mcp — control plane to list active/inactive MCP servers across Claude/Codex/OpenCode + one-command enable/disable (2aa87aba) (#405)",
+        "add Moonshot Kimi K3 to the opencode runtime model whitelist (777f9591) (#404)"
+      ],
+      "fixes": [
+        "auto-reclaim stale db.lock left by a dead writer (dead-PID / PID-reuse / legacy) + clamp waitForDaemonReady probes to the caller budget — daemon no longer crash-loops with MCP down (caef9285 p0, 7a4aa0d5) (#399)",
+        "await resolveExeSession in the create dispatch path — an un-awaited Promise was reaching ensureEmployeeAsync as the session arg, poisoning dispatch session resolution; also ClickHouse restore profile + git-crypt worktree smudge retry + spawn_worktree preserved (95ca2cd5, d18606d9) (#418)",
+        "subagent-aware liveness; a reaped session no longer self-reports a false completion (routes to blocked, preserves result only as unverified evidence) (7de95f57, 879c354d) (#403)",
+        "session-instance claims + honest liveness — the duplicate-racer compound defect: bulk-kill circuit breaker, live-sibling checkpoint skipping, owner-scoped auto-wake (#400)",
+        "assigned-agent identity at spawn (no more coordinator-identity leak) + dead-spawn dispatch-claim release (8e1bb3de, 629b4c4d) (#408)",
+        "gate task nudges on real queue state + invalidate stale resume checkpoints — kills the phantom P0-nudge death spiral (22e464ad, 0f30e7a5) (#414)",
+        "re-arming timer watchdog, per-timer sweep-pause accounting, undici connection-loss detection (UND_ERR_SOCKET / other side closed / terminated) (35b72cd3, a705c2bf, 90ba3f38) (#407)",
+        "honor INSERT OR IGNORE rowsAffected so dropped duplicates skip ontology/graph/hygiene follow-up; align graph-rag content_hash with the governor (504f76fc, ae584290) (#401)",
+        "nested-repo-aware worktree guard + scoped-hash index self-heal with id tie-break (60cb17eb, 8d711f75) (#397)",
+        "support add_comment/get_comments now resolve feature-request ids, not just bug ids (64a42e0f) (#406)",
+        "align api-router support redaction tokens to the real [REDACTED:<class>] contract; bind cloud-sync verify stamp to file identity (237384bd, e0d1353a) (#417)",
+        "8 re-review leftovers — the last exe-os code-fixable batch (#413)"
+      ],
+      "security": [
+        "redaction token contract aligned across client/server + api-router so license keys, API keys, tokens and recovery phrases redact consistently (237384bd) (#417)"
+      ],
+      "other": [
+        "CI: eliminate false reds on self-hosted build-my — per-run NPM_CONFIG_CACHE removes node-20 setup-cancellation flake; smoke needs build-and-test to cut contention; publish green-CI gate no longer counts schedule-only runs (a80addb4) (#411)",
+        "test: deflake daemon-ready \"returns within budget when pings are slow\" with fake timers — real contract is 1..2 budget-bounded pings (#419)"
       ],
       "migration_notes": []
     },
@@ -57,106 +109,6 @@
         "trigger CI (pull_request synchronize did not fire for 3a075352)"
       ],
       "migration_notes": []
-    },
-    "0.9.343": {
-      "version": "0.9.343",
-      "date": "2026-07-17",
-      "features": [
-        "db-write-worker — memory writes moved off the daemon main thread (bug d23040c2)",
-        "exe-os-mcp-proxy — stdio retry shim for reliable Claude Code MCP registration (77cbd16b)",
-        "pass --effort to Claude Code from an agent's reasoning_effort config (#304)",
-        "size-based backup retention — cap total backup bytes, always keep the newest verified snapshot (feature d89164e7)",
-        "Dispatch Ladder + subagent guardrails / coordinator-verification procedures"
-      ],
-      "fixes": [
-        "eliminate daemon restart outage gap — immediate successor handoff (bug 7256016d)",
-        "keep failed-health responder alive on terminal DB-init failure instead of going dark (bug 3bbf55d6)",
-        "dynamic Retry-After on 503 bootstrap; shorten boot backoff when MCP clients are waiting (bug 94d9df9c)",
-        "persist MCP session map every sweep tick (atomic tmp+rename), widen restore window to 30min (bug 715838a8)",
-        "mcp-proxy method-aware retry policy + recovered-session adoption + installer dist guard",
-        "make daemon-restart /mcp nudge user-visible and repeat until MCP recovery is observed (6241e8d8)",
-        "classify reboot/coverage gaps honestly — exclude from the crash breaker (bugs 10da11a2 / a93afb2c)",
-        "starvation gate judges max load over the block window; boot grace covers startup drain (bug 18fdd376)",
-        "per-tick time budget for task_file_resync + orphan_task_cleanup with named-offender warning (bug 7b36e14d)",
-        "route backup quick_check to the read worker and wal_checkpoint to a one-shot child — stop 12s main-thread blocks (bug e3d40111)",
-        "dedup SELECT wrong-index scan — the 1.17s/write constant; scoped dedup indexes on fresh DBs, schema v18 (bug d23040c2)",
-        "wait through the daemon 'starting' window in waitForDaemonReady (638eb685 / 3bbf55d6)",
-        "move MCP port resolution to src/lib so daemon-ready never imports src/adapters"
-      ],
-      "security": [],
-      "other": [
-        "ci: serialize the build matrix legs + disk preflight guard to reduce self-hosted runner contention (#369)",
-        "transaction-batch the memory queue drain (perf, bug d23040c2)",
-        "v0.9.343 — daemon reliability hardening wave"
-      ],
-      "migration_notes": []
-    },
-    "0.9.342": {
-      "version": "0.9.342",
-      "date": "2026-07-13",
-      "features": [
-        "log every memory READ, joined to task outcome (455be5c7)",
-        "timer health dashboard — per-timer blocking risk (9ddc55b2)",
-        "additive daily_push schedule + pusher hook (feature 433fc7a1)",
-        "surface pending-review + blocked sections in employee boot brief",
-        "dedup license prompt in setup wizard + wire codex-reviewd CLI subcommand"
-      ],
-      "fixes": [
-        "align the scope-import heuristic with the per-query check",
-        "a neighbouring command's flags are not git's flags",
-        "move fast-db-init to src/lib + close the boundary rule's blind spot",
-        "close raw product query-param exfil on the feature-list path + refresh fs mock",
-        "split LIVENESS from READINESS — end the daemon kill-loop (bug 679aeb69)",
-        "feature requests carry product end-to-end (bug b8e990ed)",
-        "async kill on the session-TTL timer — final sync-on-timer, closes 1c870c78",
-        "round-4 — thrown-release on all spawn paths + gate close-task fallthrough (final)",
-        "candidate detection must prefix-match --force-create= (6aaea78f)",
-        "close 3 long-option main-rewrite bypasses (6aaea78f)",
-        "async-ify the session-TTL timer path — closes 1c870c78",
-        "round-3 — kernel-atomic bucketed-mkdir claim + gate ALL spawn paths (codex audit)",
-        "restore hardened argv-aware main guard; tighten stub cleanup",
-        "de5d9fe8 final — 3 guarantee controls + paused-human & legacy-branch docs",
-        "round 3 — default bind escalation + 64KiB PEM cap",
-        "round-2 — async cleanup-signal path + intercom capture; revert-proof reaper test (bug 1c870c78)",
-        "de5d9fe8 round 2 — buffer-stability wedge signal + non-destructive recovery + single-capture",
-        "round 2 — cto2 bind escalation + PEM DoS/pattern misses",
-        "clean up legacy plaintext SQLite stubs on init (bug 7a334eda)",
-        "scope destructive reset guard to actual main risk (bug 6aaea78f)",
-        "wake live reviewers + kill remaining timer sync-subprocess (bugs 018aaf31, 1c870c78)",
-        "round-2 — claim-gate BOTH dispatch paths + generation-exclusive stale takeover (codex audit)",
-        "dwell-gated wedged-input recovery + phantom-injection controls",
-        "redactor pattern gaps + initial-bind identity gate",
-        "task-keyed scope-independent spawn dedup (bugs 03bffd00 / f2f7bf19)"
-      ],
-      "security": [],
-      "other": [
-        "v0.9.342 — bug-zero wave",
-        "size the multi-process race for a shared CI runner",
-        "keep each race trial inside one time bucket (CI flake, not a dedup hole)",
-        "mock execFile — wake-daemon's promisify(execFile) runs at module load",
-        "stop the triage note from becoming a finding of its own",
-        "triage the 6 redaction-test fixtures that were failing gitleaks",
-        "stop the prompt hook burning 35s of CPU and returning zero bytes (bug 9b81ea43)",
-        "batch task reconcile, memoize tmux session, index task_file + null vectors (bug 4b2d2d10)",
-        "bound daemon boot probe, gate doomed DB fallback, take behaviors export off the critical path (bug 96a28cf2)",
-        "honesty cleanup for coo_restart guard — narrow claim, surface follow-up, pin failedAt reset (bug 45d94865 round 3)",
-        "mirror idempotency_key column + partial unique index in fixture",
-        "behavioral self-heal routing guards, replacing fake source-string ones (bug e7003d6f)",
-        "Reapply \"Merge branch 'fix/oom-20260710' into integration/bug-zero-v2\"",
-        "Revert \"Merge branch 'fix/oom-20260710' into integration/bug-zero-v2\"",
-        "precise scale-boundedness accounting for memory audit (bug d5a7a1b2)",
-        "worktree discipline round-2: fail-closed empty roster + full lock ownership (audit B1+B2)",
-        "wire async worktree-collision guard on the daemon path (bug 1c870c78)",
-        "resolveProjectDir round-2: symlink containment, exact match, strict scope, sibling ownership (audit B3+B4)",
-        "add regression tests for wedged picker-session kill",
-        "stop daemon event-loop block in worktree collision guard + cap auto-wake spawns",
-        "scale regression for bounded memory audit (bug d5a7a1b2)",
-        "strengthen resolver tests: force step-6/cwd path so no-fabrication + cross-scope are real revert-proofs (audit)",
-        "harden worktree-discipline tests: assert NO tmux spawn on refusal + roster/lock cases (audit)",
-        "resolveProjectDir: validate input, deterministic, no fabrication, scope-isolated (audit BLOCKER 3+4)",
-        "release spawn lock on sync ensureEmployee gate refusal (audit BLOCKER 2)"
-      ],
-      "migration_notes": []
     }
   }
 }