@askexenow/exe-os 0.9.351 → 0.9.352

package/dist/hooks/manifest.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "generatedAt": "2026-07-25T00:21:38.658Z",
+  "generatedAt": "2026-07-25T04:38:45.093Z",
   "hashes": {
     "bug-report-worker.js": "b9bcde949c60c3d57ba3f6a66f0fd7c0c24dcbd6314422a0544e38e0687067a9",
     "codex-stop-task-finalizer.js": "6f80ca6d60a73244bbe2d0e347cf1c7eb59f8296388f932d2fe34ca69dc5c0a5",
@@ -15,7 +15,7 @@
     "post-tool-combined.js": "ef91564fcfb1560e39a612eb91dcda1b2e4ab3cc9338c27ab7f92b390b03b7fa",
     "pre-compact.js": "933f9817f66f4e7d28d903ab40b86478ecfc6f9972e9e447838772d5176ccabf",
     "pre-tool-use.js": "1da521b7fa580ea0a8b3f7722d48ead1fde758e24fd628019f24ee56842dfe46",
-    "prompt-submit.js": "49b035577996e8870f0edb642b246c4137b5f6cc966c3d7ce0e8c9d9873538b0",
+    "prompt-submit.js": "ce4c63dcebe9bde6f9034576da54f1917882a920f74f539907641b2c0f2f7f23",
     "session-end.js": "0eb2bdedb37806e8fa352aad5cb006aa2af12c213169f1cad4157ee6e1737cf5",
     "session-start.js": "6931cfa741ad0932c75b15752a7aa941aac58c6d8153dd254becee7cd48a4a70",
     "stop.js": "901df128a49816c84208badd1f6a564bb2094d39180212e304b8610fbd3fd85f",

package/dist/hooks/prompt-submit.js

@@ -35,6 +35,7 @@ import "../chunk-4QCFFW2H.js";
 import "../chunk-76CJBM36.js";
 import {
   decideQueuedNudgeDrain,
+  getMySession,
   getSessionState,
   isExeSession
 } from "../chunk-LOYK2BRY.js";
@@ -344,6 +345,16 @@ process.stdin.on("end", async () => {
     let _cachedSessionName = null;
     const getCurrentSessionName = () => {
       if (_cachedSessionName !== null) return _cachedSessionName;
+      if (inTmux) {
+        try {
+          const live = getMySession();
+          if (live) {
+            _cachedSessionName = live;
+            return live;
+          }
+        } catch {
+        }
+      }
       const ownSession = process.env.EXE_SESSION_NAME?.trim();
       if (ownSession) {
         _cachedSessionName = ownSession;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.351",
+  "version": "0.9.352",
   "description": "AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",

package/release-notes.json

@@ -1,15 +1,30 @@
 {
-  "current": "0.9.351",
+  "current": "0.9.352",
   "notes": {
-    "0.9.351": {
-      "version": "0.9.351",
+    "0.9.352": {
+      "version": "0.9.352",
       "date": "2026-07-25",
       "features": [],
       "fixes": [],
       "security": [],
       "other": [
-        "v0.9.351 — daemon claim/timer fixes + resume DB-client fix (#475)"
+        "v0.9.352 — multi-coordinator session-scope fix (7eec74b7/45a9f87e) (#477)"
+      ],
+      "migration_notes": []
+    },
+    "0.9.351": {
+      "version": "0.9.351",
+      "date": "2026-07-25",
+      "features": [
+        "daemon offloads heavy timer reads (review polling, agent-data refresh, trace-TTL sweep) to the db-read-worker so long scans no longer block the MCP-serving event loop (d73b5014) (#454)"
+      ],
+      "fixes": [
+        "task(resume)/resume_employee no longer throws \"Database client not initialized\" — the resume handler uses the client fastDbInit() returns instead of re-grabbing a global the degraded init paths never register, so reviving a dead cross-project employee works (ff3ef612) (#474)",
+        "daemon lag-aware timer watchdog stops false-flagging a timer that is merely awaiting slow I/O as a blocked event loop, killing bogus self-heal restarts (c5fdb821) (#455)",
+        "daemon auto-releases a stale task-claim whose holder tmux session is gone (dead-holder-session half of the claim-integrity cluster), so an owner locked out by a dead subagent claim can re-claim (784ebe98, 31a59ab2) (#473)"
       ],
+      "security": [],
+      "other": [],
       "migration_notes": []
     },
     "0.9.350": {
@@ -61,28 +76,6 @@
       "security": [],
       "other": [],
       "migration_notes": []
-    },
-    "0.9.347": {
-      "version": "0.9.347",
-      "date": "2026-07-22",
-      "features": [],
-      "fixes": [
-        "daemon: cloud_sync timer no longer blocks the event loop for minutes–hours — the root cause of recurring \"MCP connected but tools fail\" instability; drains in bounded per-tick slices with a durable resumable cursor (c5fdb821 p0) (#422)",
-        "stack-update: fail-loud + fail-safe on image auth/pull failure — never leave prod silently partial; pre-deploy pullability check aborts before any mutation (f1c36209 p0) (#432)",
-        "api-router: runtime self-heal ALTER for support_feature_requests.product — list_my_features no longer 500s on drifted D1 instances (5604f580) (#421)",
-        "orchestration: re-validate the dispatch claim before a stale auto-blocked task resumes — kills duplicate-fleet / wrong-work on pane un-wedge (e1d26a94) (#431)",
-        "codex: configurable working default model (EXE_CODEX_DEFAULT_MODEL, fallback gpt-5.5) instead of the ChatGPT-account-rejected gpt-5.3-codex (d691ab3a) (#430)",
-        "mcp: reconcile consolidated tool schemas with handlers — config.import_orchestration no longer throws; graph.merge_entities merges or errors loudly instead of silently no-opping (9f6216fe, b8773ad7) (#428)",
-        "task: assigned reviewer can now close_task (was mis-gated on caller identity) (b6543735) (#427)",
-        "task: completion \"What Changed\" derives from git diff, not scraped prose — no more fabricated changelogs (ae43d0b9) (#429)"
-      ],
-      "security": [],
-      "other": [
-        "test: deflake ReDoS redaction timing bound (1000ms→5000ms) — was blocking releases; still catches real ReDoS (#426)",
-        "test: deflake mcp-proxy retry-budget (20ms→2000ms test config) — recurring release-blocker, no production change (#433)",
-        "ci: classified auto-retry on infra failures (e381fcb0) (#425)"
-      ],
-      "migration_notes": []
     }
   }
 }

package/src/commands/exe/intercom.md

@@ -12,13 +12,21 @@ Triggered by the coordinator via `tmux send-keys -t {window} '/exe-intercom' Ent
 # Resolve the configured coordinator and current tmux session.
 COORDINATOR=$(node -e "const fs=require('fs'), os=require('os'), path=require('path'); try { const r=JSON.parse(fs.readFileSync(path.join(os.homedir(),'.exe-os','exe-employees.json'),'utf8')); const c=r.find(e => String(e.role||'').toLowerCase()==='coo'); console.log(c?.name || 'exe'); } catch { console.log('exe'); }" 2>/dev/null)
 
-if [ -n "$EXE_SESSION_NAME" ]; then
-  SESSION_NAME="$EXE_SESSION_NAME"
-elif [ -n "$TMUX" ]; then
+# Bugs 7eec74b7 + 45a9f87e (multi-coordinator scope mis-resolution): an employee
+# session MUST derive its identity from its OWN live tmux session name
+# (davinci-yoda1), never from the EXE_SESSION_NAME env baked at spawn. With two
+# coordinators live (yoda1 + yoda2) that env can carry the WRONG coordinator,
+# making the worker refuse its own yoda1-scoped task as a "cross-session leak".
+# Live tmux is authoritative; fall back to env only when not inside tmux.
+if [ -n "$TMUX" ]; then
   SESSION_NAME=$(tmux display-message -p '#{session_name}' 2>/dev/null)
+  [ -z "$SESSION_NAME" ] && SESSION_NAME="$EXE_SESSION_NAME"
+elif [ -n "$EXE_SESSION_NAME" ]; then
+  SESSION_NAME="$EXE_SESSION_NAME"
 else
   SESSION_NAME="UNKNOWN"
 fi
+[ -z "$SESSION_NAME" ] && SESSION_NAME="UNKNOWN"
 
 # Employee sessions are {employee}-{coordinatorSession}; coordinator sessions have no dash.
 if [ "$SESSION_NAME" = "UNKNOWN" ]; then