@askexenow/exe-os 0.9.367 → 0.9.369

package/dist/{telemetry-upload-2JM6KIAB.js → telemetry-upload-6LBGRJUE.js}

@@ -3,12 +3,12 @@ import {
 } from "./chunk-2XZ6X3PJ.js";
 import {
   getOrchestrationMetrics
-} from "./chunk-UI3K73LD.js";
-import "./chunk-HSBKV5LB.js";
+} from "./chunk-BFL3UB77.js";
+import "./chunk-OBESOWFJ.js";
 import "./chunk-TKDITWDN.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-5YEUPUV4.js";
-import "./chunk-Y7OK5PJE.js";
+import "./chunk-JDPV7W2L.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-NJFJWQNN.js";
 import "./chunk-V3W3SATA.js";
@@ -17,9 +17,9 @@ import "./chunk-FXU7JOXK.js";
 import {
   loadLicense,
   readCachedLicenseToken
-} from "./chunk-F3PIHVVY.js";
+} from "./chunk-6UZ3DEQI.js";
 import "./chunk-A7XLR3K7.js";
-import "./chunk-65ZSFW3O.js";
+import "./chunk-MQ5RUHNZ.js";
 import {
   loadConfig
 } from "./chunk-QMSEL5YS.js";
@@ -389,14 +389,14 @@ async function buildTelemetryPayload(sinceHours = 24) {
   }
   let toolUsage;
   try {
-    const { getToolUsageSummary } = await import("./tool-telemetry-CHCBD4OQ.js");
+    const { getToolUsageSummary } = await import("./tool-telemetry-ZL6TTZWG.js");
     const summary = getToolUsageSummary();
     if (Object.keys(summary).length > 0) toolUsage = summary;
   } catch {
   }
   let calibration;
   try {
-    const { DreamingEngine } = await import("./dreaming-FVXSIIWV.js");
+    const { DreamingEngine } = await import("./dreaming-IB3H6NDZ.js");
     const engine = new DreamingEngine();
     const cal = await engine.computeCalibration("*", sinceHours);
     if (cal.assertions.total > 0 || cal.estimation.total > 0) {

package/dist/{token-budget-NH2RD4YX.js → token-budget-XO5XW6DL.js}

@@ -1,11 +1,11 @@
 import {
   createTokenBudgetMiddleware
-} from "./chunk-267QB6VB.js";
-import "./chunk-HSBKV5LB.js";
+} from "./chunk-2UGU3V63.js";
+import "./chunk-OBESOWFJ.js";
 import "./chunk-TKDITWDN.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-5YEUPUV4.js";
-import "./chunk-Y7OK5PJE.js";
+import "./chunk-JDPV7W2L.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-NJFJWQNN.js";
 import "./chunk-V3W3SATA.js";

package/dist/{tool-telemetry-CHCBD4OQ.js → tool-telemetry-ZL6TTZWG.js}

@@ -5,7 +5,7 @@ import {
   startToolTelemetryFlush,
   stopToolTelemetryFlush,
   wrapServerWithTelemetry
-} from "./chunk-DAXFAXLN.js";
+} from "./chunk-U2AZUMBZ.js";
 import "./chunk-MLKGABMK.js";
 export {
   getToolUsageStats,

package/dist/tui/App.js

@@ -1,31 +1,31 @@
 #!/usr/bin/env node
 import {
   getSessionPrompt
-} from "../chunk-V3ISR2QT.js";
-import "../chunk-5CH6XKVC.js";
+} from "../chunk-IKRIUEIF.js";
+import "../chunk-BNDHQGOY.js";
 import "../chunk-HHGOCBVQ.js";
 import {
   sessionScopeFilter
-} from "../chunk-QX33D4CH.js";
+} from "../chunk-Y4AYNLXU.js";
 import "../chunk-BTSWFMEH.js";
-import "../chunk-6MCUXRIP.js";
-import "../chunk-7W6FDHHY.js";
-import "../chunk-IIVFXD6P.js";
+import "../chunk-P3PAD6AA.js";
+import "../chunk-KGPWS4KE.js";
+import "../chunk-KYVIV54Y.js";
 import "../chunk-WT4RI36X.js";
-import "../chunk-CX4MVEM3.js";
 import "../chunk-KI5PFRG6.js";
+import "../chunk-QAEWWYHL.js";
 import "../chunk-EIKATSE4.js";
 import "../chunk-E23LNUWJ.js";
-import "../chunk-QAEWWYHL.js";
-import "../chunk-XKFMNAJ7.js";
+import "../chunk-CSBD7QLZ.js";
 import "../chunk-GBNB4EWD.js";
 import "../chunk-UXLO7VHX.js";
 import "../chunk-DSOQUQTV.js";
-import "../chunk-UI3K73LD.js";
+import "../chunk-BFL3UB77.js";
 import "../chunk-AJIXH5JF.js";
+import "../chunk-PVWM2WMM.js";
 import "../chunk-XTWHNLGD.js";
 import "../chunk-AM7S2TY6.js";
-import "../chunk-N3JLNMPF.js";
+import "../chunk-PGF5I7EV.js";
 import "../chunk-CVYC6DUW.js";
 import "../chunk-ZVTKWWLV.js";
 import "../chunk-CDUB5Q6J.js";
@@ -42,20 +42,20 @@ import {
 import {
   DEFAULT_COORDINATOR_TEMPLATE_NAME,
   isCoordinatorName
-} from "../chunk-HSBKV5LB.js";
+} from "../chunk-OBESOWFJ.js";
 import "../chunk-TKDITWDN.js";
 import "../chunk-BBMTVAE3.js";
 import "../chunk-5YEUPUV4.js";
-import "../chunk-Y7OK5PJE.js";
+import "../chunk-JDPV7W2L.js";
 import "../chunk-YYB5PMTK.js";
 import "../chunk-NJFJWQNN.js";
 import "../chunk-V3W3SATA.js";
 import "../chunk-JY5GAZYC.js";
 import "../chunk-FXU7JOXK.js";
 import "../chunk-WNBZJSQT.js";
-import "../chunk-F3PIHVVY.js";
+import "../chunk-6UZ3DEQI.js";
 import "../chunk-A7XLR3K7.js";
-import "../chunk-65ZSFW3O.js";
+import "../chunk-MQ5RUHNZ.js";
 import "../chunk-QILQ5FCG.js";
 import "../chunk-ARX6TAGN.js";
 import {
@@ -7431,7 +7431,7 @@ function useOrchestrator(enabled = true) {
     let cancelled = false;
     async function init() {
       try {
-        const { MultiAgentOrchestrator } = await import("../orchestrator-UW3Q3WYG.js");
+        const { MultiAgentOrchestrator } = await import("../orchestrator-EB3SCTAJ.js");
         const { getCoordinatorName, isCoordinatorRole, loadEmployees } = await import("../lib/employees.js");
         const { isExeSession } = await import("../lib/tmux-routing.js");
         const { listTmuxSessions, inTmux } = await import("../lib/tmux-status.js");
@@ -7472,7 +7472,7 @@ function useOrchestrator(enabled = true) {
         setTotalInProgress(health.totalInProgress);
         try {
           const { getClient } = await import("../lib/database.js");
-          const { sessionScopeFilter: sessionScopeFilter2 } = await import("../task-scope-74JBTKJN.js");
+          const { sessionScopeFilter: sessionScopeFilter2 } = await import("../task-scope-PQ67YRWP.js");
           const client = getClient();
           const uoScope = sessionScopeFilter2();
           const result = await client.execute({
@@ -7504,7 +7504,7 @@ function useOrchestrator(enabled = true) {
   const spawnSession = useCallback5(
     async (agentId) => {
       try {
-        const { createTaskCore } = await import("../tasks-crud-ZU6RZDEZ.js");
+        const { createTaskCore } = await import("../tasks-crud-TJNMUKKH.js");
         const { ensureEmployee } = await import("../lib/tmux-routing.js");
         const { getCoordinatorName } = await import("../lib/employees.js");
         await createTaskCore({
@@ -8128,7 +8128,7 @@ function TasksView({ onBack }) {
     const { withTrace } = await import("../telemetry-43X3GT3R.js");
     return withTrace("tui.tasks.loadTasks", async () => {
       try {
-        const { loadTaskList } = await import("../tui-data-244GF3BI.js");
+        const { loadTaskList } = await import("../tui-data-UK7ZPKN4.js");
         const tasks = await loadTaskList();
         setAllTasks(
           tasks.map((task) => ({
@@ -8961,7 +8961,7 @@ function TeamView({ onBack, onViewSessions }) {
         let projectsByEmployee = /* @__PURE__ */ new Map();
         let currentTaskByEmployee = /* @__PURE__ */ new Map();
         try {
-          const { loadTeamBadgeCounts, loadTeamDetailMetrics } = await import("../tui-data-244GF3BI.js");
+          const { loadTeamBadgeCounts, loadTeamDetailMetrics } = await import("../tui-data-UK7ZPKN4.js");
           setBadgeInFlight(true);
           const badgeCountsPromise = loadTeamBadgeCounts();
           const detailsPromise = loadTeamDetailMetrics(roster.map((emp) => emp.name));
@@ -9327,7 +9327,7 @@ function WikiView({ onBack }) {
     }
     setSearchLoading(true);
     try {
-      const { searchWikiMemoryRows } = await import("../tui-data-244GF3BI.js");
+      const { searchWikiMemoryRows } = await import("../tui-data-UK7ZPKN4.js");
       setSearchResults(await searchWikiMemoryRows(query));
     } catch {
       setSearchResults([]);

package/dist/{tui-data-244GF3BI.js → tui-data-UK7ZPKN4.js}

@@ -1,25 +1,25 @@
 import {
   sessionScopeFilter
-} from "./chunk-QX33D4CH.js";
+} from "./chunk-Y4AYNLXU.js";
 import "./chunk-BTSWFMEH.js";
-import "./chunk-6MCUXRIP.js";
-import "./chunk-7W6FDHHY.js";
-import "./chunk-IIVFXD6P.js";
+import "./chunk-P3PAD6AA.js";
+import "./chunk-KGPWS4KE.js";
+import "./chunk-KYVIV54Y.js";
 import "./chunk-WT4RI36X.js";
-import "./chunk-CX4MVEM3.js";
 import "./chunk-KI5PFRG6.js";
+import "./chunk-QAEWWYHL.js";
 import "./chunk-EIKATSE4.js";
 import "./chunk-E23LNUWJ.js";
-import "./chunk-QAEWWYHL.js";
-import "./chunk-XKFMNAJ7.js";
+import "./chunk-CSBD7QLZ.js";
 import "./chunk-GBNB4EWD.js";
 import "./chunk-UXLO7VHX.js";
 import "./chunk-DSOQUQTV.js";
-import "./chunk-UI3K73LD.js";
+import "./chunk-BFL3UB77.js";
 import "./chunk-AJIXH5JF.js";
+import "./chunk-PVWM2WMM.js";
 import "./chunk-XTWHNLGD.js";
 import "./chunk-AM7S2TY6.js";
-import "./chunk-N3JLNMPF.js";
+import "./chunk-PGF5I7EV.js";
 import "./chunk-CVYC6DUW.js";
 import "./chunk-ZVTKWWLV.js";
 import "./chunk-CDUB5Q6J.js";
@@ -33,20 +33,20 @@ import "./chunk-GJV3WDWM.js";
 import "./chunk-MP2AFCGL.js";
 import {
   getClient
-} from "./chunk-HSBKV5LB.js";
+} from "./chunk-OBESOWFJ.js";
 import "./chunk-TKDITWDN.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-5YEUPUV4.js";
-import "./chunk-Y7OK5PJE.js";
+import "./chunk-JDPV7W2L.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-NJFJWQNN.js";
 import "./chunk-V3W3SATA.js";
 import "./chunk-JY5GAZYC.js";
 import "./chunk-FXU7JOXK.js";
 import "./chunk-WNBZJSQT.js";
-import "./chunk-F3PIHVVY.js";
+import "./chunk-6UZ3DEQI.js";
 import "./chunk-A7XLR3K7.js";
-import "./chunk-65ZSFW3O.js";
+import "./chunk-MQ5RUHNZ.js";
 import "./chunk-QILQ5FCG.js";
 import "./chunk-ARX6TAGN.js";
 import "./chunk-QMSEL5YS.js";

package/dist/{update-support-P2LO3DAB.js → update-support-BGL5KAZO.js}

@@ -1,23 +1,23 @@
 import {
   persistSupportArtifact
-} from "./chunk-XA4EU3CW.js";
+} from "./chunk-4DGIOK6T.js";
+import {
+  queueSupportStatusUpdateSync
+} from "./chunk-GSJLB6JI.js";
 import {
   supportIdSchema,
   supportVersionSchema
 } from "./chunk-5H47VHB7.js";
-import {
-  queueSupportStatusUpdateSync
-} from "./chunk-GSJLB6JI.js";
 import "./chunk-MMRUBN3I.js";
 import "./chunk-RLDMUSRM.js";
-import "./chunk-BQYQES2Z.js";
-import "./chunk-JLYHJJHU.js";
+import "./chunk-ELY5WBZX.js";
+import "./chunk-FDA45THL.js";
 import "./chunk-CHCA3ZM2.js";
 import "./chunk-OTVEIJUQ.js";
-import "./chunk-WM7Y5ZV2.js";
+import "./chunk-5U4UJGTW.js";
 import {
   getActiveAgent
-} from "./chunk-QWDZNQXA.js";
+} from "./chunk-NNXPIJRB.js";
 import "./chunk-2ADYTOHQ.js";
 import "./chunk-5MOYSU5A.js";
 import {
@@ -35,11 +35,11 @@ import "./chunk-LNOS24GV.js";
 import "./chunk-NLEW62VC.js";
 import "./chunk-GJV3WDWM.js";
 import "./chunk-MP2AFCGL.js";
-import "./chunk-HSBKV5LB.js";
+import "./chunk-OBESOWFJ.js";
 import "./chunk-TKDITWDN.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-5YEUPUV4.js";
-import "./chunk-Y7OK5PJE.js";
+import "./chunk-JDPV7W2L.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-NJFJWQNN.js";
 import "./chunk-V3W3SATA.js";
@@ -49,9 +49,9 @@ import "./chunk-HPXFKUGU.js";
 import {
   loadLicense,
   readCachedLicenseToken
-} from "./chunk-F3PIHVVY.js";
+} from "./chunk-6UZ3DEQI.js";
 import "./chunk-A7XLR3K7.js";
-import "./chunk-65ZSFW3O.js";
+import "./chunk-MQ5RUHNZ.js";
 import "./chunk-QILQ5FCG.js";
 import "./chunk-ARX6TAGN.js";
 import {

package/dist/{work-claims-4QOE7DT2.js → work-claims-XZL2DKQ3.js}

@@ -15,15 +15,15 @@ import {
   normalizeWorkRef,
   releaseClaim,
   resolveHolderSession
-} from "./chunk-PFR6EOUY.js";
+} from "./chunk-5YKNEL3W.js";
 import "./chunk-PHUHIVD5.js";
 import "./chunk-BTSWFMEH.js";
 import "./chunk-E23LNUWJ.js";
-import "./chunk-HSBKV5LB.js";
+import "./chunk-OBESOWFJ.js";
 import "./chunk-TKDITWDN.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-5YEUPUV4.js";
-import "./chunk-Y7OK5PJE.js";
+import "./chunk-JDPV7W2L.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-NJFJWQNN.js";
 import "./chunk-V3W3SATA.js";

package/dist/{work-state-heartbeat-GX3VWWWK.js → work-state-heartbeat-267YQ75U.js}

@@ -9,7 +9,7 @@ import {
   runWorkStateTick,
   shouldWriteWorkState,
   upsertWorkState
-} from "./chunk-JLYHJJHU.js";
+} from "./chunk-FDA45THL.js";
 import "./chunk-CHCA3ZM2.js";
 import "./chunk-MLKGABMK.js";
 export {

package/dist/{worker-gate-62PZATOV.js → worker-gate-RUM6MLIR.js}

@@ -6,7 +6,7 @@ import {
   releaseBackfillLock,
   tryAcquireBackfillLock,
   tryAcquireWorkerSlot
-} from "./chunk-ALYI3P5D.js";
+} from "./chunk-EZUSIF66.js";
 import "./chunk-QMSEL5YS.js";
 import "./chunk-HSGBZSCA.js";
 import "./chunk-JKKZGDLP.js";

package/dist/{workflow-engine-7YIRU62F.js → workflow-engine-YQHGHKSJ.js}

@@ -10,8 +10,8 @@ import {
   persistWorkflows,
   runWorkflow,
   startWorkflow
-} from "./chunk-Y4JVM3SI.js";
-import "./chunk-YNPOELAN.js";
+} from "./chunk-CXHRNESJ.js";
+import "./chunk-LBWEAQ6Z.js";
 import "./chunk-MLKGABMK.js";
 export {
   advanceWorkflow,

package/dist/{worktree-3TUKIZWY.js → worktree-3FO6EQ4G.js}

@@ -16,13 +16,13 @@ import {
   resolveGitWithRetrySync,
   worktreeBranch,
   worktreePath
-} from "./chunk-7W6FDHHY.js";
-import "./chunk-UI3K73LD.js";
-import "./chunk-HSBKV5LB.js";
+} from "./chunk-KGPWS4KE.js";
+import "./chunk-BFL3UB77.js";
+import "./chunk-OBESOWFJ.js";
 import "./chunk-TKDITWDN.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-5YEUPUV4.js";
-import "./chunk-Y7OK5PJE.js";
+import "./chunk-JDPV7W2L.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-NJFJWQNN.js";
 import "./chunk-V3W3SATA.js";

package/dist/{worktree-sweep-MYQHUXDE.js → worktree-sweep-X7MUEEQS.js}

@@ -4,14 +4,14 @@ import {
   discoverRepoPathsAsync,
   isWorktreePathOccupiedByCwd,
   sweepWorktrees
-} from "./chunk-KDD26FUY.js";
-import "./chunk-7W6FDHHY.js";
-import "./chunk-UI3K73LD.js";
-import "./chunk-HSBKV5LB.js";
+} from "./chunk-BFPQXPN3.js";
+import "./chunk-KGPWS4KE.js";
+import "./chunk-BFL3UB77.js";
+import "./chunk-OBESOWFJ.js";
 import "./chunk-TKDITWDN.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-5YEUPUV4.js";
-import "./chunk-Y7OK5PJE.js";
+import "./chunk-JDPV7W2L.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-NJFJWQNN.js";
 import "./chunk-V3W3SATA.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.367",
+  "version": "0.9.369",
   "description": "AI employee operating system \u2014 persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",
@@ -127,6 +127,7 @@
     "check:switcher-ui-sync": "node packages/exe-service-switcher/sync.mjs --check",
     "check:stack-manifest-signature": "node scripts/verify-stack-manifest-signature.mjs",
     "check:sso-cookie-contract": "node scripts/sso-cookie-contract-check.mjs",
+    "check:delivery-liveness": "node scripts/delivery-liveness-check.mjs",
     "test:stack-sim": "node scripts/stack-sim.mjs",
     "test:daemon-smoke": "vitest run --maxWorkers=1 tests/smoke/daemon-smoke-gate.test.ts",
     "test:smoke": "vitest run --maxWorkers=1 tests/smoke/",

package/release-notes.json

@@ -1,15 +1,67 @@
 {
-  "current": "0.9.367",
+  "current": "0.9.369",
   "notes": {
-    "0.9.367": {
-      "version": "0.9.367",
+    "0.9.369": {
+      "version": "0.9.369",
       "date": "2026-08-13",
       "features": [],
       "fixes": [],
       "security": [],
       "other": [
-        "v0.9.367 (#699)"
+        "v0.9.369 — API key revocation (#718)"
+      ],
+      "migration_notes": []
+    },
+    "0.9.368": {
+      "version": "0.9.368",
+      "date": "2026-08-14",
+      "features": [
+        "approve/deny on a privileged action now actually decides whether it runs — previously the prompt was cosmetic: no server handler existed, the safety classifier had no caller, and the wait flag was ignored (exe-build #165)",
+        "dashboard gains a Drive tab — an admin lens over Exe Drive (#709)",
+        "delivery truth: the system now tracks the gap between merged and actually delivered, with liveness checked on a clock rather than assumed (#707)",
+        "the watchdog now counts the self-heals it declines to make, so a restart it chose NOT to perform is visible instead of silent (#708)"
+      ],
+      "fixes": [
+        "cloud sync no longer starves every stage after the memory push: a deferred slice used to return early with no signal, so the daemon idled a full interval and the fifteen later stages — including DB backup — never ran, while every run reported success (#715)",
+        "closing a bug now genuinely requires a verification artifact — the gate existed and was correct, but was never reachable from the client everyone uses, so nothing was ever refused (#710)",
+        "behavior-injection truncation is loud instead of silent: agents were storing corrections that were dropped at spawn with no warning, so lessons appeared saved and were never applied (#701)",
+        "the installer refuses to run from a linked git worktree, detected structurally, so a temp checkout can no longer re-point global hooks at a directory that will not outlive it (#706)",
+        "create_task no longer reports success for a dispatch nobody received (#705)",
+        "Codex sessions launch again — we stopped pinning a flag OpenAI's CLI removed, and now feature-detect its flag surface instead (#704)",
+        "PreToolUse worktree isolation was inert inside .claude/worktrees (#712)",
+        "stopped shipping the crashlooping exe-monitor v0.9.5 build (#711)",
+        "admin bug updates: evidence-only updates no longer 400, corrections reach upstream, and oversize text is refused rather than silently truncated (#713, #714)",
+        "the dashboard image can serve askexe.com — the one domain it never could (#703)",
+        "release gate asserts required contexts off the x64 lane, so a release can no longer deadlock waiting on a runner it is occupying (#700)",
+        "device-token chat persists instead of losing every message: device identities carried no org, so writes were refused; the connection now resolves a real tenant or is refused outright (exe-build #164, #166)"
       ],
+      "security": [],
+      "other": [],
+      "migration_notes": []
+    },
+    "0.9.367": {
+      "version": "0.9.367",
+      "date": "2026-08-13",
+      "features": [
+        "account termination is now irreversible by the terminated user — tombstone record, lock-before-write ordering, and legal-hold support, closing a path where a suspended account could restore itself (#688)",
+        "SSO cookie contract is verified at deploy time and monitored live, so a login that silently stops working is caught by the system instead of by a user (#696)",
+        "GoTrue's admin API is no longer served on the public internet from the auth page (#689)",
+        "atomic work claims enforced at every dispatch path — two agents can no longer pick up the same task (#656)",
+        "exe-os MCP tools are registered correctly in the agent runtime, plus stall detection so a wedged agent loop is surfaced instead of hanging silently (#693)",
+        "stack updates can roll back an unset pin, and a stale deploy now raises an alert rather than sitting unnoticed (#692)",
+        "automated task completion passes through a verification gate — work cannot be marked done without an artifact backing the claim (#694, #690)",
+        "wiki documents support seal/unseal, with matching cloud-docs endpoints (#687)",
+        "auth page: confirmation state, gated token tab, refreshed UX, and opt-in cross-app SSO cookies (#684)",
+        "email preflight now fails on incomplete SMTP credentials and warns on a bad sender or port, instead of appearing configured (#685)"
+      ],
+      "fixes": [
+        "restored 52 test files — including 33 gateway security suites — that had been running in no CI job since April (#662)",
+        "CI fails loudly when a required check cannot evaluate on a PR, instead of reporting a vacuous green (#673)",
+        "the x64 native lane builds again before running DB worker tests, which had been testing a missing artifact (#698)",
+        "release path is deadlock-proofed: the publish gate reads required-context status off the release lane, plus a drift monitor that catches npm falling behind main (#675)"
+      ],
+      "security": [],
+      "other": [],
       "migration_notes": []
     },
     "0.9.366": {
@@ -77,54 +129,6 @@
       "security": [],
       "other": [],
       "migration_notes": []
-    },
-    "0.9.364": {
-      "version": "0.9.364",
-      "date": "2026-08-12",
-      "features": [
-        "scheduled CI sweeper: green agent PRs merge automatically and their git worktrees are pruned in the same action, so completed work can no longer sit unmerged and worktrees cannot accumulate",
-        "permanent gates for four recurring defect classes, with a monotone inventory that fails when a fix leaves a stale allowlist entry behind"
-      ],
-      "fixes": [
-        "orphan reaper (P0): the daemon reaper matched free text and killed live agent work — two Codex agents and a shell were destroyed mid-run. It now positively identifies a process by argv identity (node-wrapped CLIs resolve to the real CLI) and requires an anchored pattern match",
-        "memory (P0): supersede writes are scoped to the calling agent, closing two cross-agent scope leaks; a silently-ignored agent_id is now rejected instead of ignored",
-        "cloud sync: the daemon socket leaked after a successful sync, keeping the process alive until SIGTERM; it is now disconnected on cleanup and on SIGTERM",
-        "cloud sync: require a reliable daemon DB init instead of syncing against a no-op client",
-        "cli: short-lived binaries exit instead of hanging on the daemon socket",
-        "agent config: correct Claude 5 model ids, drop a phantom Sonnet 4.8, and accept future claude models instead of failing on a hardcoded list",
-        "agent defs: internal Claude model ids are translated to Claude Code frontmatter aliases",
-        "registry proxy: routes are classified at a single choke point and unknown paths fail closed",
-        "daemon: repeated dirty-worktree archive failures are bounded instead of retrying forever",
-        "boot brief: open work that nothing is executing is now surfaced instead of being silently lost; section and brief timeouts are separated and fail loud",
-        "sso-edge: the healthcheck probes the exempt /healthz rather than the gated /",
-        "worker: a missing API_KEY_STORAGE_SECRET no longer turns a successful auth into a 500 with an unwritten api_key_hash"
-      ],
-      "infrastructure": [
-        "local-first Linux CI: linux-build-check, api-router, worker and smoke run on local arm64 Linux VMs (linux-build-check went from 5-6 min to ~1m17s). The x64 Linux matrix still runs on main-push and still gates release, so x64 coverage is preserved",
-        "per-SHA concurrency restored on main so a release commit can never lose its CI run to a later push"
-      ],
-      "security": [],
-      "other": [],
-      "migration_notes": []
-    },
-    "0.9.363": {
-      "version": "0.9.363",
-      "date": "2026-08-12",
-      "features": [
-        "runtime smoke gate: a post-deploy check that verifies the deployed system actually works — cloud sync reaches 'complete' with an advancing cursor and DB backup passes integrity — so a merged-but-never-deployed fix can no longer masquerade as done (#600)",
-        "account identity + lifecycle: one authoritative identity bound to the verified GoTrue subject (not a client-asserted device id) plus enforceable account suspension at the network boundary; additive migration with a gotrue_sub partial-unique index and legacy backfill (#597)",
-        "named-subagent identity + employee memory brief at spawn: dispatch work to a subagent wearing an employee's identity with spawn-ledger-gated memory attribution, and inject the employee's scoped memory brief on first tool use; the PreToolUse matcher now upgrades on existing installs so Task/Agent dispatch is actually captured (#596, #601)",
-        "stack: machine-enforce two invariants — exactly one GoTrue per host and a canonical SSO cookie contract (#598)"
-      ],
-      "fixes": [
-        "cloud sync had a 0% success rate: background sync destroyed the daemon socket under backpressure ('Sync failed: Connection closed'), so no sync ever completed. The socket is now preserved and sync completes end-to-end (verified live: 'Cloud sync: complete', 5,430 pushed) (#593)",
-        "local-store durability: DB backup can no longer lose data — a failed integrity check quarantines the file instead of deleting it, FTS corruption rethrows instead of silently returning an empty store, and the integrity verdict is a trustworthy tri-state; the online-backup integrity route is pinned to the write path (#590, #594)",
-        "daemon: background sweeps moved off the event loop so a long sweep can no longer block MCP handling (#591)",
-        "support: recording a fixed version must no longer auto-close a still-open bug (#599)"
-      ],
-      "security": [],
-      "other": [],
-      "migration_notes": []
     }
   }
 }