@askexenow/exe-os 0.9.353 → 0.9.354

package/dist/bin/cli.js

@@ -201,7 +201,7 @@ if (args.includes("--global")) {
     process.exit(1);
   }
 } else if (args[0] === "key") {
-  const { main: runKey } = await import("../exe-key-5HXW4TUE.js");
+  const { main: runKey } = await import("../exe-key-7KNEW6NE.js");
   await runKey(args.slice(1));
 } else if (args[0] === "grant") {
   const { main: runGrant } = await import("./exe-grant.js");

package/dist/bin/deferred-daemon-restart.js

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   computeMcpSurfaceHash
-} from "../chunk-UYN4TVRC.js";
+} from "../chunk-N7GR3WNB.js";
 import "../chunk-WCGNCH3Q.js";
-import "../chunk-QHIGW5SG.js";
+import "../chunk-VKKXVQED.js";
 import "../chunk-557C2IGL.js";
 import "../chunk-MJVNOOF5.js";
 import "../chunk-3KTQG6IB.js";

package/dist/bin/exe-agent.js

@@ -1,4 +1,7 @@
 #!/usr/bin/env node
+import {
+  FileWriteTool
+} from "../chunk-XEKO37NM.js";
 import {
   FileEditTool
 } from "../chunk-R4WMF32C.js";
@@ -14,9 +17,6 @@ import {
 import {
   GrepTool
 } from "../chunk-EIT6J37V.js";
-import {
-  FileWriteTool
-} from "../chunk-XEKO37NM.js";
 import {
   createTerminalRenderer,
   renderAgentEvents

package/dist/bin/exe-memory-reads.js

@@ -122,6 +122,35 @@ async function getPrecisionAtK(options) {
     };
   });
 }
+function aggregateTaskPrecision(perTask, k, since) {
+  const tasks = perTask.length;
+  let retrieved = 0;
+  let reused = 0;
+  let macroSum = 0;
+  for (const p of perTask) {
+    retrieved += p.retrieved;
+    reused += p.reused;
+    macroSum += p.precision;
+  }
+  return {
+    k,
+    since,
+    tasks,
+    retrieved,
+    reused,
+    microPrecision: retrieved > 0 ? reused / retrieved : 0,
+    macroPrecision: tasks > 0 ? macroSum / tasks : 0
+  };
+}
+async function getOverallPrecisionAtK(options) {
+  const k = options?.k ?? 5;
+  const perTask = await getPrecisionAtK({
+    k,
+    since: options?.since,
+    limit: options?.limit ?? 1e3
+  });
+  return aggregateTaskPrecision(perTask, k, options?.since ?? null);
+}
 async function getReadCountsByMemory(options) {
   const args = [];
   let filter = "";
@@ -217,10 +246,11 @@ async function main() {
     }
     return;
   }
+  const overall = await getOverallPrecisionAtK({ k: args.k, since: args.since });
   const precision = await getPrecisionAtK({ k: args.k, since: args.since, limit: 25 });
   const topRead = await getReadCountsByMemory({ since: args.since, limit: 15 });
   if (args.json) {
-    console.log(JSON.stringify({ k: args.k, precision, topRead }, null, 2));
+    console.log(JSON.stringify({ k: args.k, overall, precision, topRead }, null, 2));
     return;
   }
   if (precision.length === 0 && topRead.length === 0) {
@@ -228,7 +258,15 @@ async function main() {
     console.log("Reads are logged on every recall unless EXE_READ_LOG=0.");
     return;
   }
-  console.log(`Retrieval telemetry \u2014 precision@${args.k} by task
+  const light = (v) => v >= 0.5 ? "\u{1F7E2}" : v >= 0.2 ? "\u{1F7E0}" : "\u{1F534}";
+  const window = overall.since ? `since ${overall.since}` : "all time";
+  console.log(`Search-quality telemetry \u2014 precision@${args.k} (${window})
+`);
+  console.log(
+    `  Overall  ${light(overall.microPrecision)} ${(overall.microPrecision * 100).toFixed(1)}% micro   ${light(overall.macroPrecision)} ${(overall.macroPrecision * 100).toFixed(1)}% macro   (${overall.tasks} tasks, ${overall.reused}/${overall.retrieved} reused)
+`
+  );
+  console.log(`Precision@${args.k} by task
 `);
   console.log(
     "NOTE: 'used' is a PROXY \u2014 a memory re-read by a later search in the same\ntask. exe-os has no explicit citation signal. Treat as implicit feedback.\n"

package/dist/bin/install.js

@@ -12,7 +12,7 @@ import {
 import "../chunk-XBOLFVMD.js";
 import {
   computeMcpSurfaceHash
-} from "../chunk-UYN4TVRC.js";
+} from "../chunk-N7GR3WNB.js";
 import {
   buildDaemonLaunchdPlist,
   buildWatchdogLaunchdPlist,
@@ -24,7 +24,7 @@ import {
   generateSessionWrappers
 } from "../chunk-CVTWQZOR.js";
 import "../chunk-WCGNCH3Q.js";
-import "../chunk-QHIGW5SG.js";
+import "../chunk-VKKXVQED.js";
 import "../chunk-557C2IGL.js";
 import "../chunk-MJVNOOF5.js";
 import "../chunk-3KTQG6IB.js";

package/dist/{chunk-UYN4TVRC.js → chunk-N7GR3WNB.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-WCGNCH3Q.js";
 import {
   registerAllTools
-} from "./chunk-QHIGW5SG.js";
+} from "./chunk-VKKXVQED.js";
 
 // src/mcp/mcp-surface-hash.ts
 function computeMcpSurfaceHash() {

package/dist/{chunk-QHIGW5SG.js → chunk-VKKXVQED.js}

@@ -14165,12 +14165,12 @@ function buildHandlers9() {
 function registerDiagnostics(server) {
   const handlers = buildHandlers9();
   const toolNames = Array.from(handlers.keys());
-  toolNames.push("tool_search", "drift", "merge_agent_memories", "agent_liveness", "steward_check", "steward_audit_log", "steward_override", "daemon_restarts", "timers", "spawn_failures", "orchestration_health", "work_map", "work_state");
+  toolNames.push("tool_search", "drift", "merge_agent_memories", "memory_isolation", "agent_liveness", "steward_check", "steward_audit_log", "steward_override", "daemon_restarts", "timers", "spawn_failures", "orchestration_health", "work_map", "work_state");
   server.registerTool(
     "diagnostics",
     {
       title: "Diagnostics",
-      description: `System diagnostics and admin operations. Actions: ${toolNames.join(", ")}. Covers health checks, update status, cloud status, key management, employee rename, semantic tool discovery (tool_search), identity drift detection (drift), agent liveness monitoring (agent_liveness), agent memory reassignment (merge_agent_memories), steward identity gate (steward_check, steward_audit_log, steward_override), daemon restart forensics (daemon_restarts \u2014 'why did the daemon restart?': restart-cause breakdown, slowest-timer leaderboard, event-loop-block frequency), timer health dashboard (timers \u2014 'which background timer is about to take the daemon down?': per-timer last/avg/p95/max tick duration, watchdog trips past the 10s event-loop-block budget, whether the timer is executing right now, projected next fire \u2014 sorted worst-first; read-only over already-emitted daemon health logs), and orchestration-health visibility: spawn_failures ('why did dispatch fail?': tmux spawn fail count + cause breakdown path_not_found/claude_launch_failed/timeout + success-vs-fail ratio), orchestration_health ('is the box healthy / is the spiral happening?': load/core, event-loop lag, direct-SQLite-fallback count, event-loop blocks), and work_map ('who's doing what / who died and why?': live sessions \xD7 role \xD7 task \xD7 worktree flag, plus recent session deaths with cause/load + worktree violations), plus work_state ('where were we in this session?': one-row rolling session snapshot).`,
+      description: `System diagnostics and admin operations. Actions: ${toolNames.join(", ")}. Covers health checks, update status, cloud status, key management, employee rename, semantic tool discovery (tool_search), identity drift detection (drift), agent liveness monitoring (agent_liveness), agent memory reassignment (merge_agent_memories), agent memory isolation scoring (memory_isolation \u2014 'how unique is each agent's memory vs how much does it overlap others?': graph-entity-set Jaccard overlap + per-agent uniqueness score; read-only, no embeddings, bounded scan), steward identity gate (steward_check, steward_audit_log, steward_override), daemon restart forensics (daemon_restarts \u2014 'why did the daemon restart?': restart-cause breakdown, slowest-timer leaderboard, event-loop-block frequency), timer health dashboard (timers \u2014 'which background timer is about to take the daemon down?': per-timer last/avg/p95/max tick duration, watchdog trips past the 10s event-loop-block budget, whether the timer is executing right now, projected next fire \u2014 sorted worst-first; read-only over already-emitted daemon health logs), and orchestration-health visibility: spawn_failures ('why did dispatch fail?': tmux spawn fail count + cause breakdown path_not_found/claude_launch_failed/timeout + success-vs-fail ratio), orchestration_health ('is the box healthy / is the spiral happening?': load/core, event-loop lag, direct-SQLite-fallback count, event-loop blocks), and work_map ('who's doing what / who died and why?': live sessions \xD7 role \xD7 task \xD7 worktree flag, plus recent session deaths with cause/load + worktree violations), plus work_state ('where were we in this session?': one-row rolling session snapshot).`,
       inputSchema: {
         action: z99.string().describe(`Diagnostic operation: ${toolNames.join(", ")}`),
         // Pass-through params used by various sub-tools
@@ -14187,7 +14187,8 @@ function registerDiagnostics(server) {
         operation: z99.string().optional().describe("Operation name for steward_check/steward_override"),
         target: z99.string().optional().describe("Target resource for steward_check/steward_override"),
         reason: z99.string().optional().describe("Override reason for steward_override"),
-        session_scope: z99.string().optional().describe("Coordinator session scope for work_state (for example exe1).")
+        session_scope: z99.string().optional().describe("Coordinator session scope for work_state / memory_isolation (for example exe1). memory_isolation defaults to the current session."),
+        all_scopes: z99.boolean().optional().describe("memory_isolation admin opt-in: score across ALL session scopes (defaults false \u2014 scoped to current coordinator session).")
       }
     },
     async (input, extra) => {
@@ -14256,6 +14257,9 @@ function registerDiagnostics(server) {
       if (action === "merge_agent_memories") {
         return handleMergeAgentMemories(input);
       }
+      if (action === "memory_isolation") {
+        return handleMemoryIsolation(input);
+      }
       if (action === "steward_check" || action === "steward_audit_log" || action === "steward_override") {
         return handleSteward(action, input);
       }
@@ -14368,6 +14372,26 @@ async function handleMergeAgentMemories(input) {
     };
   }
 }
+async function handleMemoryIsolation(input) {
+  try {
+    const { queryMemoryIsolation, formatMemoryIsolationReport } = await import("./memory-isolation-RJJI3MDS.js");
+    const agentId = typeof input.agent_id === "string" ? input.agent_id : void 0;
+    const allScopes = input.all_scopes === true;
+    const sessionScope = typeof input.session_scope === "string" ? input.session_scope : void 0;
+    const result3 = await queryMemoryIsolation({ agentId, sessionScope, allScopes });
+    const asJson = input.format === "json";
+    const text5 = asJson ? JSON.stringify({ focusAgentId: agentId ?? null, ...result3 }, null, 2) : formatMemoryIsolationReport(result3, agentId);
+    return { content: [{ type: "text", text: text5 }] };
+  } catch (err) {
+    return {
+      content: [{
+        type: "text",
+        text: `memory_isolation failed: ${err instanceof Error ? err.message : String(err)}`
+      }],
+      isError: true
+    };
+  }
+}
 async function handleSpawnFailures() {
   try {
     const { getOrchestrationMetrics } = await import("./orchestration-events-ZZWLYO67.js");

package/dist/{exe-key-5HXW4TUE.js → exe-key-7KNEW6NE.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import {
   computeMcpSurfaceHash
-} from "./chunk-UYN4TVRC.js";
+} from "./chunk-N7GR3WNB.js";
 import "./chunk-WCGNCH3Q.js";
-import "./chunk-QHIGW5SG.js";
+import "./chunk-VKKXVQED.js";
 import "./chunk-557C2IGL.js";
 import "./chunk-MJVNOOF5.js";
 import "./chunk-3KTQG6IB.js";

package/dist/hooks/manifest.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "generatedAt": "2026-07-27T11:07:20.197Z",
+  "generatedAt": "2026-07-27T12:06:50.878Z",
   "hashes": {
     "bug-report-worker.js": "21eb4f7a8d56654065d1141a06bc498481b62df84d51943bbe43eb5fb529d6e1",
     "codex-stop-task-finalizer.js": "0bbe8c188a3f416c2d60f39e68e1590c8361be362cbfa129cb7a92fb04b4d694",

package/dist/mcp/register-tools.js

@@ -1,6 +1,6 @@
 import {
   registerAllTools
-} from "../chunk-QHIGW5SG.js";
+} from "../chunk-VKKXVQED.js";
 import "../chunk-557C2IGL.js";
 import "../chunk-MJVNOOF5.js";
 import "../chunk-3KTQG6IB.js";

package/dist/mcp/server.js

@@ -10,7 +10,7 @@ import {
 } from "../chunk-WCGNCH3Q.js";
 import {
   registerAllTools
-} from "../chunk-QHIGW5SG.js";
+} from "../chunk-VKKXVQED.js";
 import "../chunk-557C2IGL.js";
 import "../chunk-MJVNOOF5.js";
 import "../chunk-3KTQG6IB.js";

package/dist/memory-isolation-RJJI3MDS.js

@@ -0,0 +1,138 @@
+import "./chunk-MLKGABMK.js";
+
+// src/lib/memory-isolation.ts
+function pairKey(a, b) {
+  return a < b ? JSON.stringify([a, b]) : JSON.stringify([b, a]);
+}
+function computeMemoryIsolation(rows, sampled = false) {
+  const agentEntities = /* @__PURE__ */ new Map();
+  const entityAgents = /* @__PURE__ */ new Map();
+  for (const { agentId, entityId } of rows) {
+    if (!agentId || !entityId) continue;
+    let ae = agentEntities.get(agentId);
+    if (!ae) {
+      ae = /* @__PURE__ */ new Set();
+      agentEntities.set(agentId, ae);
+    }
+    ae.add(entityId);
+    let ea = entityAgents.get(entityId);
+    if (!ea) {
+      ea = /* @__PURE__ */ new Set();
+      entityAgents.set(entityId, ea);
+    }
+    ea.add(agentId);
+  }
+  const uniqueCount = /* @__PURE__ */ new Map();
+  for (const agentId of agentEntities.keys()) uniqueCount.set(agentId, 0);
+  const pairShared = /* @__PURE__ */ new Map();
+  for (const agents2 of entityAgents.values()) {
+    if (agents2.size === 1) {
+      const only = agents2.values().next().value;
+      uniqueCount.set(only, (uniqueCount.get(only) ?? 0) + 1);
+      continue;
+    }
+    const list = Array.from(agents2);
+    for (let i = 0; i < list.length; i++) {
+      for (let j = i + 1; j < list.length; j++) {
+        const key = pairKey(list[i], list[j]);
+        pairShared.set(key, (pairShared.get(key) ?? 0) + 1);
+      }
+    }
+  }
+  const agentIds = Array.from(agentEntities.keys()).sort();
+  const agents = agentIds.map((agentId) => {
+    const mySet = agentEntities.get(agentId);
+    const entityCount = mySet.size;
+    const uniqueEntityCount = uniqueCount.get(agentId) ?? 0;
+    const overlaps = [];
+    for (const other of agentIds) {
+      if (other === agentId) continue;
+      const shared = pairShared.get(pairKey(agentId, other)) ?? 0;
+      const otherSize = agentEntities.get(other).size;
+      const union = entityCount + otherSize - shared;
+      const jaccard = union > 0 ? shared / union : 0;
+      overlaps.push({ agentId: other, jaccard, sharedEntities: shared });
+    }
+    let topOverlap = null;
+    let sum = 0;
+    for (const o of overlaps) {
+      sum += o.jaccard;
+      if (!topOverlap || o.jaccard > topOverlap.jaccard) topOverlap = o;
+    }
+    const meanOverlap = overlaps.length > 0 ? sum / overlaps.length : 0;
+    return {
+      agentId,
+      entityCount,
+      uniqueEntityCount,
+      uniquenessScore: entityCount > 0 ? uniqueEntityCount / entityCount : 0,
+      meanOverlap,
+      topOverlap
+    };
+  });
+  return {
+    agentCount: agentIds.length,
+    totalEntities: entityAgents.size,
+    sampled,
+    agents
+  };
+}
+var MEMORY_ISOLATION_ROW_CAP = 5e4;
+async function queryMemoryIsolation(opts = {}) {
+  const rowCap = Math.max(1, Math.min(opts.rowCap ?? MEMORY_ISOLATION_ROW_CAP, MEMORY_ISOLATION_ROW_CAP));
+  const { getClient } = await import("./lib/database.js");
+  const client = await getClient();
+  let scopeClause = "";
+  const args = [];
+  if (!opts.allScopes) {
+    const { resolveExeSession } = await import("./lib/tmux-routing.js");
+    const scope = opts.sessionScope !== void 0 ? opts.sessionScope : resolveExeSession();
+    scopeClause = " AND (m.session_scope = ? OR m.session_scope IS NULL)";
+    args.push(scope);
+  }
+  args.push(rowCap + 1);
+  const result = await client.execute({
+    sql: `
+      SELECT DISTINCT m.agent_id AS agent_id, em.entity_id AS entity_id
+      FROM entity_memories em
+      JOIN memories m ON m.id = em.memory_id
+      WHERE m.agent_id IS NOT NULL AND m.agent_id != ''${scopeClause}
+      ORDER BY m.agent_id, em.entity_id
+      LIMIT ?
+    `,
+    args
+  });
+  const allRows = result.rows.map((r) => ({
+    agentId: String(r.agent_id),
+    entityId: String(r.entity_id)
+  }));
+  const sampled = allRows.length > rowCap;
+  const rows = sampled ? allRows.slice(0, rowCap) : allRows;
+  return computeMemoryIsolation(rows, sampled);
+}
+function formatMemoryIsolationReport(result, focusAgentId) {
+  if (result.agentCount === 0) {
+    return "No agent\u2194entity associations found. The graph has no entities linked to agent memories yet.";
+  }
+  const lines = [];
+  lines.push("Agent memory isolation \u2014 uniqueness vs overlap (graph-entity Jaccard)");
+  lines.push(
+    `agents=${result.agentCount}  entities=${result.totalEntities}${result.sampled ? "  (SAMPLED \u2014 hit scan cap)" : ""}`
+  );
+  lines.push("");
+  const sorted = [...result.agents].sort((a, b) => b.uniquenessScore - a.uniquenessScore);
+  for (const a of sorted) {
+    const focus = a.agentId === focusAgentId ? "\u2192 " : "  ";
+    const icon = a.uniquenessScore >= 0.66 ? "\u{1F7E2}" : a.uniquenessScore >= 0.33 ? "\u{1F7E0}" : "\u{1F534}";
+    const top = a.topOverlap ? ` top-overlap=${a.topOverlap.agentId}(J=${a.topOverlap.jaccard.toFixed(2)}, shared=${a.topOverlap.sharedEntities})` : " top-overlap=none";
+    lines.push(
+      `${focus}${icon} ${a.agentId}  uniqueness=${a.uniquenessScore.toFixed(2)}  entities=${a.entityCount} unique=${a.uniqueEntityCount}  meanOverlap=${a.meanOverlap.toFixed(2)}${top}`
+    );
+  }
+  return lines.join("\n");
+}
+export {
+  MEMORY_ISOLATION_ROW_CAP,
+  computeMemoryIsolation,
+  formatMemoryIsolationReport,
+  queryMemoryIsolation
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.353",
+  "version": "0.9.354",
   "description": "AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",

package/release-notes.json

@@ -1,17 +1,32 @@
 {
-  "current": "0.9.353",
+  "current": "0.9.354",
   "notes": {
-    "0.9.353": {
-      "version": "0.9.353",
+    "0.9.354": {
+      "version": "0.9.354",
       "date": "2026-07-27",
       "features": [],
       "fixes": [],
       "security": [],
       "other": [
-        "v0.9.353 — Opus 5.0 model + spawn-cwd, intercom, erp-host fixes (#488)"
+        "v0.9.354 — memory-isolation scoring + search-quality precision reporting (#491)"
       ],
       "migration_notes": []
     },
+    "0.9.353": {
+      "version": "0.9.353",
+      "date": "2026-07-27",
+      "features": [
+        "Opus 5.0 (claude-opus-5.0) is now a first-class selectable model across the claude + opencode runtimes, with aliases (opus, opus-5, opus5) and spawn-time validation — fixes multi-customer reports that Opus 5.0 was rejected as unavailable (#480)"
+      ],
+      "fixes": [
+        "employee-session spawn cwd is derived from the roster/project root instead of a prior task's stale or deleted worktree, and refuses cleanly (releasing the spawn lock) rather than hard-failing tmux new-session when no valid directory resolves (e1b1444b) (#481)",
+        "intercom nudge delivery now confirms the Enter submission on an idle employee pane and re-queues half-delivered (typed-but-unsubmitted) nudges, so a dispatched agent no longer sits idle with an open task when the submit keystroke is dropped (e4889b61) (#483)",
+        "ERP deploy health probe resolves its HTTP Host header from the configured stack domain (ERP_SITE_NAME) instead of a hardcoded 'localhost', so a Host-routed Frappe/ERPNext deployment no longer 404s and rolls back an otherwise-healthy release (9747e6e6) (#484)"
+      ],
+      "security": [],
+      "other": [],
+      "migration_notes": []
+    },
     "0.9.352": {
       "version": "0.9.352",
       "date": "2026-07-25",
@@ -49,24 +64,6 @@
       "security": [],
       "other": [],
       "migration_notes": []
-    },
-    "0.9.349": {
-      "version": "0.9.349",
-      "date": "2026-07-23",
-      "features": [
-        "dedicated release lane on build-my-4 — tag-publish + stack-image builds never queue behind PR CI (#465)",
-        "fetch-and-scope-check before dispatching fix work (#462)"
-      ],
-      "fixes": [
-        "monitor-hub healthcheck probes /app/beszel not /beszel — fixes permanent false-unhealthy on the deploy surface (ae971a4d) (#467)",
-        "erp healthchecks use ps not pgrep, and erp-nginx re-resolves its upstream after stack-update recreate (c8fb434f, 9bd1d9f7) (#466)",
-        "stack manifest is signed inside the write path (d84537ac) (#461)",
-        "fail-loud manifest-derived seeding for stack releases (#460)",
-        "landViaPR resolves the release PR by head-sha identity, not branch recency (#459)"
-      ],
-      "security": [],
-      "other": [],
-      "migration_notes": []
     }
   }
 }