@askexenow/exe-os 0.9.384 → 0.9.389

package/dist/{update-support-BMJM4NG7.js → update-support-WT3S3AQ4.js}

@@ -1,24 +1,22 @@
 import {
-  persistSupportArtifact
-} from "./chunk-FVLNNNH6.js";
-import {
-  queueSupportStatusUpdateSync
-} from "./chunk-VF3BZOZK.js";
-import {
+  persistSupportArtifact,
   supportIdSchema,
   supportVersionSchema
-} from "./chunk-3B6FLNLV.js";
+} from "./chunk-BNI4LIU5.js";
+import {
+  queueSupportStatusUpdateSync
+} from "./chunk-X7HZHKY4.js";
 import "./chunk-MMRUBN3I.js";
-import "./chunk-NKEFYE4R.js";
-import "./chunk-UOPCVFVR.js";
-import "./chunk-AWWDKF22.js";
+import "./chunk-IPTUKX3N.js";
+import "./chunk-5RK75SWH.js";
+import "./chunk-SFWNTO2F.js";
 import "./chunk-CHCA3ZM2.js";
 import "./chunk-OTVEIJUQ.js";
-import "./chunk-VHHX4UCP.js";
+import "./chunk-MDTWARSF.js";
 import {
   getActiveAgent
-} from "./chunk-F4BBMIPG.js";
-import "./chunk-MUCNYSJP.js";
+} from "./chunk-B4XJQBQB.js";
+import "./chunk-NRLJOV7M.js";
 import "./chunk-5MOYSU5A.js";
 import {
   describeUpstreamFailure,
@@ -27,7 +25,7 @@ import {
   sanitizeUpstreamId,
   sanitizeUpstreamPayload,
   sanitizeVersionField
-} from "./chunk-ELEGH4DX.js";
+} from "./chunk-ZUGQPYUY.js";
 import "./chunk-76CJBM36.js";
 import "./chunk-CVYC6DUW.js";
 import "./chunk-MFAOAIUE.js";
@@ -41,23 +39,25 @@ import "./chunk-DRTJCG6B.js";
 import "./chunk-GJV3WDWM.js";
 import "./chunk-MP2AFCGL.js";
 import "./chunk-YRUZK2QA.js";
-import "./chunk-GL47M7NY.js";
+import "./chunk-3UD3OF3X.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-TKDITWDN.js";
 import "./chunk-5YEUPUV4.js";
-import "./chunk-72V3S44T.js";
+import "./chunk-LUA4SLJY.js";
+import "./chunk-5ONMHTNI.js";
+import "./chunk-RBQUXHYK.js";
 import "./chunk-YYB5PMTK.js";
-import "./chunk-L5CGXEZC.js";
+import "./chunk-WAAGVFFN.js";
 import "./chunk-QH5ZQ5SJ.js";
 import "./chunk-ZQEJ4IX2.js";
-import "./chunk-FXU7JOXK.js";
-import "./chunk-5U2IJBFV.js";
+import "./chunk-C7GHNJPW.js";
+import "./chunk-TA3B4N24.js";
 import {
   loadLicense,
   readCachedLicenseToken
-} from "./chunk-TNS63ATU.js";
+} from "./chunk-FWRPDSO3.js";
 import "./chunk-A7XLR3K7.js";
-import "./chunk-DZN7SDY2.js";
+import "./chunk-OSVTH3SG.js";
 import "./chunk-A7JYF4RG.js";
 import "./chunk-ARX6TAGN.js";
 import {

package/dist/{whatsapp-QQLDAHUX.js → whatsapp-OZGIF2EM.js}

@@ -2,8 +2,8 @@ import {
   WhatsAppAdapter,
   calculateBackoff,
   hardenBaileysAuthState
-} from "./chunk-FHIFTSPL.js";
-import "./chunk-5U2IJBFV.js";
+} from "./chunk-CP7XUSOF.js";
+import "./chunk-TA3B4N24.js";
 import "./chunk-HSGBZSCA.js";
 import "./chunk-JKKZGDLP.js";
 import "./chunk-MLKGABMK.js";

package/dist/{wiki-acl-W6WDCVCP.js → wiki-acl-LTEQJVDA.js}

@@ -6,7 +6,7 @@ import {
   listUserWikiAccess,
   listWorkspaceUsers,
   revokeWikiAccess
-} from "./chunk-M4XY4JRK.js";
+} from "./chunk-O53LTOXK.js";
 import "./chunk-MLKGABMK.js";
 export {
   checkWikiAccess,

package/dist/{work-claims-6DM32MGO.js → work-claims-CMV2GWIW.js}

@@ -15,20 +15,22 @@ import {
   normalizeWorkRef,
   releaseClaim,
   resolveHolderSession
-} from "./chunk-P3QQ52QK.js";
-import "./chunk-PHUHIVD5.js";
+} from "./chunk-5U6EOTZV.js";
+import "./chunk-C6U7XWOC.js";
 import "./chunk-E23LNUWJ.js";
 import "./chunk-BTSWFMEH.js";
-import "./chunk-GL47M7NY.js";
+import "./chunk-3UD3OF3X.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-TKDITWDN.js";
 import "./chunk-5YEUPUV4.js";
-import "./chunk-72V3S44T.js";
+import "./chunk-LUA4SLJY.js";
+import "./chunk-5ONMHTNI.js";
+import "./chunk-RBQUXHYK.js";
 import "./chunk-YYB5PMTK.js";
-import "./chunk-L5CGXEZC.js";
+import "./chunk-WAAGVFFN.js";
 import "./chunk-QH5ZQ5SJ.js";
 import "./chunk-ZQEJ4IX2.js";
-import "./chunk-FXU7JOXK.js";
+import "./chunk-C7GHNJPW.js";
 import "./chunk-MMS2HBRT.js";
 import "./chunk-RH4AH3YB.js";
 import "./chunk-HSGBZSCA.js";

package/dist/{work-state-heartbeat-HG7D4AWJ.js → work-state-heartbeat-S45TXK4M.js}

@@ -9,7 +9,7 @@ import {
   runWorkStateTick,
   shouldWriteWorkState,
   upsertWorkState
-} from "./chunk-AWWDKF22.js";
+} from "./chunk-SFWNTO2F.js";
 import "./chunk-CHCA3ZM2.js";
 import "./chunk-MLKGABMK.js";
 export {

package/dist/{worker-gate-FTMW7GBB.js → worker-gate-7Z6NMM3G.js}

@@ -5,7 +5,7 @@ import {
   releaseBackfillLock,
   tryAcquireBackfillLock,
   tryAcquireWorkerSlot
-} from "./chunk-OAFENIHN.js";
+} from "./chunk-RJ67XAJU.js";
 import "./chunk-MMS2HBRT.js";
 import "./chunk-RH4AH3YB.js";
 import "./chunk-HSGBZSCA.js";

package/dist/{workflow-engine-ZWC6CCXE.js → workflow-engine-ZSQDXZQ7.js}

@@ -11,8 +11,8 @@ import {
   persistWorkflows,
   runWorkflow,
   startWorkflow
-} from "./chunk-L3VUW5M4.js";
-import "./chunk-P2VVMGMI.js";
+} from "./chunk-TQS2YHLB.js";
+import "./chunk-V4WH3FV7.js";
 import "./chunk-MLKGABMK.js";
 export {
   MAX_WORKFLOW_STEPS,

package/dist/{worktree-EMQCPGFE.js → worktree-NMWDVT6N.js}

@@ -19,18 +19,20 @@ import {
   resolveGitWithRetrySync,
   worktreeBranch,
   worktreePath
-} from "./chunk-JDDM6C57.js";
-import "./chunk-LSNBTGW4.js";
-import "./chunk-GL47M7NY.js";
+} from "./chunk-3X74IQBU.js";
+import "./chunk-DPYZW42H.js";
+import "./chunk-3UD3OF3X.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-TKDITWDN.js";
 import "./chunk-5YEUPUV4.js";
-import "./chunk-72V3S44T.js";
+import "./chunk-LUA4SLJY.js";
+import "./chunk-5ONMHTNI.js";
+import "./chunk-RBQUXHYK.js";
 import "./chunk-YYB5PMTK.js";
-import "./chunk-L5CGXEZC.js";
+import "./chunk-WAAGVFFN.js";
 import "./chunk-QH5ZQ5SJ.js";
 import "./chunk-ZQEJ4IX2.js";
-import "./chunk-FXU7JOXK.js";
+import "./chunk-C7GHNJPW.js";
 import "./chunk-MMS2HBRT.js";
 import "./chunk-RH4AH3YB.js";
 import "./chunk-HSGBZSCA.js";

package/dist/worktree-ownership-guard-ZVIWJAOP.js

@@ -0,0 +1,35 @@
+import {
+  OWNERSHIP_STAMP_TTL_MS,
+  evaluateNestedSpawnGuard,
+  evaluateWorktreeOwnership,
+  getWorktreeOwner,
+  isEscapeOrReadOnly,
+  isInertAssignment,
+  isSessionAliveFs,
+  ownerLockDirFs,
+  pidFromSessionKey,
+  readOwnerSessionFs,
+  readOwnerStampFs,
+  writeOwnerSessionFs
+} from "./chunk-V6F4I2XY.js";
+import "./chunk-NB5IRTC4.js";
+import "./chunk-5WA4DG2A.js";
+import "./chunk-MMS2HBRT.js";
+import "./chunk-RH4AH3YB.js";
+import "./chunk-HSGBZSCA.js";
+import "./chunk-JKKZGDLP.js";
+import "./chunk-MLKGABMK.js";
+export {
+  OWNERSHIP_STAMP_TTL_MS,
+  evaluateNestedSpawnGuard,
+  evaluateWorktreeOwnership,
+  getWorktreeOwner,
+  isEscapeOrReadOnly,
+  isInertAssignment,
+  isSessionAliveFs,
+  ownerLockDirFs,
+  pidFromSessionKey,
+  readOwnerSessionFs,
+  readOwnerStampFs,
+  writeOwnerSessionFs
+};

package/dist/{worktree-sweep-XVUJZBXV.js → worktree-sweep-Q62ZIT3U.js}

@@ -4,19 +4,21 @@ import {
   discoverRepoPathsAsync,
   isWorktreePathOccupiedByCwd,
   sweepWorktrees
-} from "./chunk-LFBLQE2P.js";
-import "./chunk-JDDM6C57.js";
-import "./chunk-LSNBTGW4.js";
-import "./chunk-GL47M7NY.js";
+} from "./chunk-XCAKYVKI.js";
+import "./chunk-3X74IQBU.js";
+import "./chunk-DPYZW42H.js";
+import "./chunk-3UD3OF3X.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-TKDITWDN.js";
 import "./chunk-5YEUPUV4.js";
-import "./chunk-72V3S44T.js";
+import "./chunk-LUA4SLJY.js";
+import "./chunk-5ONMHTNI.js";
+import "./chunk-RBQUXHYK.js";
 import "./chunk-YYB5PMTK.js";
-import "./chunk-L5CGXEZC.js";
+import "./chunk-WAAGVFFN.js";
 import "./chunk-QH5ZQ5SJ.js";
 import "./chunk-ZQEJ4IX2.js";
-import "./chunk-FXU7JOXK.js";
+import "./chunk-C7GHNJPW.js";
 import "./chunk-MMS2HBRT.js";
 import "./chunk-RH4AH3YB.js";
 import "./chunk-HSGBZSCA.js";

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.384",
-  "description": "AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.",
+  "version": "0.9.389",
+  "description": "AI employee operating system \u2014 persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",
   "repository": {
@@ -33,6 +33,7 @@
     "exe": "./dist/bin/exe-launch-agent.js",
     "exe-opencode": "./dist/bin/exe-launch-agent.js",
     "exe-glm": "./dist/bin/exe-launch-agent.js",
+    "exe-kimi": "./dist/bin/exe-launch-agent.js",
     "exe-start-codex": "./dist/bin/exe-start-codex.js",
     "exe-codex": "./dist/bin/exe-start-codex.js",
     "exe-start-opencode": "./dist/bin/exe-start-opencode.js",
@@ -119,14 +120,16 @@
     "test:e2e:sso-contract": "playwright test --config tests/e2e/playwright.config.ts tests/e2e/sso-contract.spec.ts",
     "lint": "eslint src/ --max-warnings 53",
     "typecheck": "tsc --noEmit",
-    "typecheck:tests": "tsc --noEmit -p tsconfig.tests.json",
+    "typecheck:tests": "tsc --noEmit -p tsconfig.tests.json && tsc --noEmit -p tsconfig.tests.worker.json",
     "guard:mock-shape": "node scripts/check-mock-shape.mjs",
+    "guard:tmux-retired": "node scripts/check-tmux-retired.mjs",
+    "guard:mock-effects-report": "node scripts/check-mock-shape.mjs --effects-report",
     "typecheck:workers": "tsc --noEmit -p api-router/tsconfig.json && tsc --noEmit -p api-router/tsconfig.test.json && tsc --noEmit -p worker/tsconfig.json",
-    "build": "node scripts/dist-ownership-guard.mjs && node scripts/dist-integrity.mjs --pre-build-guard && bash scripts/build-lock.sh && mkdir -p dist/assets && cp src/assets/tmux.conf dist/assets/ && cp src/assets/ghostty.conf dist/assets/ && cp src/assets/statusline-command.sh dist/assets/ && cp src/assets/wezterm.lua dist/assets/ && cp src/assets/com.askexe.exed.plist dist/assets/ && cp src/bin/exe-start.sh dist/bin/exe-start.sh && node dist/bin/generate-hook-manifest.js && node scripts/dist-integrity.mjs --record",
+    "build": "node scripts/dist-ownership-guard.mjs && node scripts/dist-integrity.mjs --pre-build-guard && bash scripts/build-lock.sh && mkdir -p dist/assets && cp src/assets/tmux.conf dist/assets/ && cp src/assets/ghostty.conf dist/assets/ && cp src/assets/statusline-command.sh dist/assets/ && cp src/assets/wezterm.lua dist/assets/ && cp src/assets/com.askexe.exed.plist dist/assets/ && cp src/bin/exe-start.sh dist/bin/exe-start.sh && node dist/bin/generate-hook-manifest.js && node dist/bin/prune-orphan-chunks.js --warn-only && node scripts/dist-integrity.mjs --record",
     "deploy": "node dist/bin/pre-build-guard.js && EXE_DIST_OP_RESTARTS_DAEMON=1 EXE_DIST_CLEAN=1 npm run build && node scripts/dist-integrity.mjs --verify && (node dist/bin/prune-orphan-chunks.js || true) && npm install -g . && node dist/bin/install.js --global && echo '[exe-os] Deploy complete. Run /mcp in active sessions to reconnect.'",
     "postinstall": "node postinstall.mjs",
-    "prepublishOnly": "npm run typecheck && EXE_DIST_OP_RESTARTS_DAEMON=1 EXE_DIST_CLEAN=1 npm run build && node dist/bin/prune-orphan-chunks.js --force && node scripts/dist-integrity.mjs --prune && npm run guard:esm-require && npm run guard:defect-classes && npm run guard:ref-provenance && npm run guard:upstream-content && npm run guard:handler-reachability && npm run check:schema-version && node dist/bin/customer-readiness.js && node dist/bin/pre-publish.js",
-    "test:publish": "npx vitest run --maxWorkers=4 --exclude 'tests/tui/**' --exclude 'tests/lib/tmux-routing.test.ts' --exclude 'tests/lib/intercom-routing.test.ts' --exclude 'tests/gateway/**' --exclude 'tests/mcp/ingest-document.test.ts' --exclude 'tests/lib/hybrid-search.test.ts' --exclude 'tests/lib/worker-gate.test.ts' --exclude 'tests/daemon-perf-stress.test.ts' --exclude 'tests/lib/gateway-client.test.ts' --exclude 'tests/lib/ws-client.test.ts' --exclude 'tests/lib/ws-auth.test.ts' --exclude 'tests/integration/clean-stack-projection.test.ts' --exclude 'tests/orchestration/dispatch-chain.test.ts' --exclude 'tests/orchestration/e2e-flow.test.ts' && echo '::warning::clean-stack-projection and stack-update quarantined (need Docker + live DB; environmental, fail in CI runner — container unhealthy / DB not initialized); ws-client/ws-auth quarantined (30-120s timeouts flaky on Node 20 CI runner — passes locally). Quarantined to match build-and-test (required gate): dispatch-chain/e2e-flow (timing-sensitive, flaky under parallel load — bug dfb25bf1). device-id-split-brain/reaper-deps-async/find-free-instance/db-backup-recovery de-flaked and promoted to the required gate (chore/deflake-required-ci). See cicd-audit-2026-06-18.md.' && npx vitest run --maxWorkers=1 tests/daemon-perf-stress.test.ts tests/lib/gateway-client.test.ts",
+    "prepublishOnly": "npm run typecheck && EXE_DIST_OP_RESTARTS_DAEMON=1 EXE_DIST_CLEAN=1 npm run build && node dist/bin/prune-orphan-chunks.js --force && EXE_DIST_CLEAN=1 node scripts/dist-integrity.mjs --record && node scripts/dist-integrity.mjs --verify && npm run guard:esm-require && npm run guard:defect-classes && npm run guard:ref-provenance && npm run guard:upstream-content && npm run guard:handler-reachability && npm run check:schema-version && node dist/bin/customer-readiness.js && node dist/bin/pre-publish.js",
+    "test:publish": "npx vitest run --maxWorkers=4 --exclude 'tests/tui/**' --exclude 'tests/lib/tmux-routing.test.ts' --exclude 'tests/lib/intercom-routing.test.ts' --exclude 'tests/gateway/**' --exclude 'tests/mcp/ingest-document.test.ts' --exclude 'tests/lib/hybrid-search.test.ts' --exclude 'tests/lib/worker-gate.test.ts' --exclude 'tests/daemon-perf-stress.test.ts' --exclude 'tests/lib/gateway-client.test.ts' --exclude 'tests/lib/ws-client.test.ts' --exclude 'tests/lib/ws-auth.test.ts' --exclude 'tests/integration/clean-stack-projection.test.ts' --exclude 'tests/orchestration/dispatch-chain.test.ts' --exclude 'tests/orchestration/e2e-flow.test.ts' && echo '::warning::clean-stack-projection and stack-update quarantined (need Docker + live DB; environmental, fail in CI runner \u2014 container unhealthy / DB not initialized); ws-client/ws-auth quarantined (30-120s timeouts flaky on Node 20 CI runner \u2014 passes locally). Quarantined to match build-and-test (required gate): dispatch-chain/e2e-flow (timing-sensitive, flaky under parallel load \u2014 bug dfb25bf1). device-id-split-brain/reaper-deps-async/find-free-instance/db-backup-recovery de-flaked and promoted to the required gate (chore/deflake-required-ci). See cicd-audit-2026-06-18.md.' && npx vitest run --maxWorkers=1 tests/daemon-perf-stress.test.ts tests/lib/gateway-client.test.ts",
     "benchmark:longmemeval": "npx tsx tests/benchmarks/longmemeval.ts",
     "guard:esm-require": "node scripts/check-no-runtime-require.mjs",
     "guard:defect-classes": "node scripts/check-defect-gates.mjs",
@@ -135,12 +138,14 @@
     "guard:handler-reachability": "node scripts/check-handler-reachability.mjs",
     "guard:required-checks": "node scripts/check-required-checks-evaluable.mjs",
     "guard:branch-protection": "node scripts/sync-branch-protection.mjs --check",
+    "guard:required-check-redundancy": "node scripts/check-required-check-redundancy.mjs",
     "guard:policy-contexts": "node scripts/check-policy-contexts-producible.mjs",
     "branch-protection:plan": "node scripts/sync-branch-protection.mjs --dry-run",
     "branch-protection:apply": "node scripts/sync-branch-protection.mjs --apply",
     "check:applicability-fresh": "node scripts/check-applicability-fresh.mjs",
     "check:schema-version": "node scripts/check-schema-version.mjs",
     "check:migration-drift": "node scripts/migration-drift-check.mjs",
+    "debt:metrics": "node scripts/debt-metrics.mjs",
     "gate:migration-apply": "node scripts/migration-apply-gate.mjs",
     "check:perms-ui-sync": "node packages/permissions-ui/sync.mjs --check",
     "check:switcher-ui-sync": "node packages/exe-service-switcher/sync.mjs --check",
@@ -163,8 +168,9 @@
     "test:daemon-smoke": "vitest run --maxWorkers=1 tests/smoke/daemon-smoke-gate.test.ts",
     "test:smoke": "vitest run --maxWorkers=1 tests/smoke/",
     "smoke:runtime": "node --import tsx src/bin/runtime-smoke.ts",
-    "check:release-conformance": "node scripts/check-release-conformance.mjs",
-    "check:manifest-pin-freshness": "node scripts/assert-manifest-pin-matches-release.mjs --allow-unverified \"monitorAgent=exe-monitor's release workflow has not run since 2026-05-12 (release-contract-services.mjs); its stack.release.json version is a stale hand-built artifact, less trustworthy than the manifest's own CI-built pin.\" --allow-unverified \"monitorHub=same as monitorAgent — shared exe-monitor repo, same broken release process.\" --allow-unverified \"erp=exe-erp carries two live, unreconciled tag schemes (date-stamped stack build vs 0.3.x Frappe-style semver); status: pending in release-contract-services.mjs, no standard release lane yet.\" --allow-unverified \"gateway=exe-gateway migrated to semver tagging on 2026-08-20 (repo is at 0.9.31), but stack 0.9.37 (#1093) cut exe-os/CRM/ERP/dashboard only and carried gateway forward on its pre-migration v2026.08.07-<sha>-stamped pin. The two schemes cannot be ordered. Repinning a PUBLISHED stack entry is a release decision, not a lint fix — it needs its own stack cut, tracked separately.\" --allow-unverified \"dashboard=AskExe/exe-dashboard has no stack.release.json at its repo root, so there is no released version to compare against. Its release lane has never completed a run (see stack.release.json imageDigestTodo) — the pin is a known phantom, tracked separately under bug 81ca8903.\"",
+    "check:release-conformance": "node scripts/check-release-conformance.mjs && npm run check:health-contract",
+    "check:health-contract": "node scripts/check-health-contract.mjs --self-check",
+    "check:manifest-pin-freshness": "node scripts/assert-manifest-pin-matches-release.mjs --allow-unverified \"monitorAgent=exe-monitor's release workflow has not run since 2026-05-12 (release-contract-services.mjs); its stack.release.json version is a stale hand-built artifact, less trustworthy than the manifest's own CI-built pin.\" --allow-unverified \"monitorHub=same as monitorAgent \u2014 shared exe-monitor repo, same broken release process.\" --allow-unverified \"erp=exe-erp carries two live, unreconciled tag schemes (date-stamped stack build vs 0.3.x Frappe-style semver); status: pending in release-contract-services.mjs, no standard release lane yet.\" --allow-unverified \"gateway=exe-gateway migrated to semver tagging on 2026-08-20 (repo is at 0.9.31), but stack 0.9.37 (#1093) cut exe-os/CRM/ERP/dashboard only and carried gateway forward on its pre-migration v2026.08.07-<sha>-stamped pin. The two schemes cannot be ordered. Repinning a PUBLISHED stack entry is a release decision, not a lint fix \u2014 it needs its own stack cut, tracked separately.\" --allow-unverified \"dashboard=AskExe/exe-dashboard has no stack.release.json at its repo root, so there is no released version to compare against. Its release lane has never completed a run (see stack.release.json imageDigestTodo) \u2014 the pin is a known phantom, tracked separately under bug 81ca8903.\"",
     "test:e2e:sso-stack": "tests/e2e/stack/bin/run.sh",
     "gen:delivery-schemas": "node --import tsx scripts/generate-delivery-schemas.mjs",
     "check:delivery-catalog": "node --import tsx scripts/check-delivery-catalog.mjs",

package/release-notes.json

@@ -1,49 +1,15 @@
 {
-  "current": "0.9.384",
+  "current": "0.9.389",
   "notes": {
-    "0.9.384": {
-      "version": "0.9.384",
-      "date": "2026-09-10",
-      "features": [
-        "give the release watchdog a consumer — detection without one is not a control (#1246)",
-        "extract Christian->Liam assignment path onto a clean branch (supersedes #1200) (#1241)",
-        "a merge gate that can actually answer \"is this PR green\" (#1192)",
-        "worker deploy-drift monitor (IN_SYNC / DRIFT / UNVERIFIED) (#1237)",
-        "config-only delivery, part 1 — the read-only planner (#1219)",
-        "delivery/catalog.json — one canonical inventory, three legacy lists derived (ARC-1 Track B) (#1180)",
-        "org_admin MCP tool — a caller for 13 unreachable control-plane routes (#1189)"
-      ],
+    "0.9.389": {
+      "version": "0.9.389",
+      "date": "2026-09-22",
+      "features": [],
       "fixes": [
-        "close a prototype-key gap in exe_perms.orgs lookup (bug d6c1a0c8) (#1262)",
-        "eliminate prototype-inheritance exposure in seat-heartbeat (bug d6c1a0c8) (#1261)",
-        "halve the per-PR model spend, and name quota as quota (#1252)",
-        "a 404 from ghcr is not proof the bytes were never built (bug 600fd3db) (#1263)",
-        "stop pr-conflict-detector suite tracking host uptime (bug f1d113c4) (#1260)",
-        "bound the wait in the PR conflict detector instead of timing out (#1247)",
-        "store-busy-retry must surface rejection reasons on zero-success flake (#1250)",
-        "stop rebuilding the SQLCipher store per test in the delegation-gate suite (#1249)",
-        "guard the orchestration fixture schema against drift (bug a342c354) (#1244)",
-        "the residue scan reads the log directories where credentials actually land (bug e605e945) (#1243)",
-        "an exhausted account is not a misconfiguration — name the real cause (#1248)",
-        "verify PR-only required contexts on the PR lane (bug 4e44df1e) (#1178)",
-        "complete the tmux-status mock that drifted in with #1234 (#1242)",
-        "resolveProjectDir must not read a failed lookup as an empty result (bug 2284e3b6) (#1234)",
-        "complete two mocks that had silently drifted from their modules (#1240)",
-        "drop the hand-added api_key_hash column now that the schema declares it (main is red) (#1238)",
-        "wire member-key bind/status client path (bug d35e555a) (#1235)",
-        "a NULL-domain row is prunable by the label the tool displays (bug 7701c375) (#1228)",
-        "declare users.api_key_hash and guard the class of undeclared columns (bug ce6d7797) (#1226)",
-        "make the dispatch paths testable instead of skipping them under vitest (bug f1445bd0) (#1236)",
-        "three suites were passing while their code threw (bug 3940ac4e) (#1233)",
-        "npm install retries filesystem races, not just network errors (bug c4ed172b) (#1232)",
-        "list-behaviors filters match the labels it displays (bug 78e1d98f) (#1231)",
-        "merge gates for the eight unguarded repos — policy and dry run (bug b3c22678) (#1222)",
-        "the GoTrue bridge is actually written, and cannot silently re-key a live seat (#1182)"
+        "record integrity after orphan pruning"
       ],
       "security": [],
-      "other": [
-        "v0.9.384 — Christian->Liam assignments and reports over MCP (#1264)"
-      ],
+      "other": [],
       "migration_notes": []
     },
     "0.9.371": {

package/src/commands/exe/afk.md

@@ -4,6 +4,12 @@ allowed-tools: Bash, Read, Glob, Grep, mcp__exe-mem__list_tasks, mcp__exe-mem__g
 argument-hint: "[stop | interval-minutes]"
 ---
 
+> **DEPRECATED — NOT INSTALLED (feature 5e4e954d).**
+> tmux orchestration is retired: named subagents are the only dispatch path.
+> This file is kept in the package for audit and recovery only — the installer
+> excludes it from `~/.claude/skills/` (see RETIRED_TMUX_SKILLS in
+> src/adapters/claude/installer.ts). Delegate with `Agent(subagent_type='<employee>')`.
+
 # AFK Mode — Autonomous COO Operations
 
 The founder is stepping away. You (the COO) now operate autonomously.

package/src/commands/exe/call.md

@@ -4,6 +4,12 @@ allowed-tools: Bash, Read, Edit, Write, Glob, Grep, recall_my_memory, ask_team_m
 argument-hint: [employee-name]
 ---
 
+> **DEPRECATED — NOT INSTALLED (feature 5e4e954d).**
+> tmux orchestration is retired: named subagents are the only dispatch path.
+> This file is kept in the package for audit and recovery only — the installer
+> excludes it from `~/.claude/skills/` (see RETIRED_TMUX_SKILLS in
+> src/adapters/claude/installer.ts). Delegate with `Agent(subagent_type='<employee>')`.
+
 Load the named employee and become them for this session, or launch them in a new tmux window.
 
 ## 0. tmux gate (mandatory)

package/src/commands/exe/employee-heartbeat.md

@@ -3,6 +3,12 @@ description: Check task folder for open tasks and output directly if found
 allowed-tools: Bash
 ---
 
+> **DEPRECATED — NOT INSTALLED (feature 5e4e954d).**
+> tmux orchestration is retired: named subagents are the only dispatch path.
+> This file is kept in the package for audit and recovery only — the installer
+> excludes it from `~/.claude/skills/` (see RETIRED_TMUX_SKILLS in
+> src/adapters/claude/installer.ts). Delegate with `Agent(subagent_type='<employee>')`.
+
 # Employee Heartbeat — Task Check
 
 This command is designed for `/loop`. It scans the employee's task folder and outputs task info directly when open tasks exist.

package/src/commands/exe/intercom.md

@@ -4,6 +4,12 @@ description: Receive dispatched task via tmux send-keys and begin working
 allowed-tools: Bash
 ---
 
+> **DEPRECATED — NOT INSTALLED (feature 5e4e954d).**
+> tmux orchestration is retired: named subagents are the only dispatch path.
+> This file is kept in the package for audit and recovery only — the installer
+> excludes it from `~/.claude/skills/` (see RETIRED_TMUX_SKILLS in
+> src/adapters/claude/installer.ts). Delegate with `Agent(subagent_type='<employee>')`.
+
 # Intercom — Task Dispatch Receiver
 
 Triggered by the coordinator via `tmux send-keys -t {window} '/exe-intercom' Enter`. Scans the employee's task folder and starts working immediately if tasks exist.

package/src/commands/exe/kill.md

@@ -4,6 +4,12 @@ allowed-tools: Bash
 argument-hint: [employee-name]
 ---
 
+> **DEPRECATED — NOT INSTALLED (feature 5e4e954d).**
+> tmux orchestration is retired: named subagents are the only dispatch path.
+> This file is kept in the package for audit and recovery only — the installer
+> excludes it from `~/.claude/skills/` (see RETIRED_TMUX_SKILLS in
+> src/adapters/claude/installer.ts). Delegate with `Agent(subagent_type='<employee>')`.
+
 Kill the tmux session for the named employee.
 
 Delegates to `exe-kill` so the manual kill is recorded in `session_kills`

package/src/commands/exe/launch.md

@@ -4,6 +4,12 @@ allowed-tools: Bash
 argument-hint: [employee names...]
 ---
 
+> **DEPRECATED — NOT INSTALLED (feature 5e4e954d).**
+> tmux orchestration is retired: named subagents are the only dispatch path.
+> This file is kept in the package for audit and recovery only — the installer
+> excludes it from `~/.claude/skills/` (see RETIRED_TMUX_SKILLS in
+> src/adapters/claude/installer.ts). Delegate with `Agent(subagent_type='<employee>')`.
+
 Launch one or more employees as detached tmux sessions. Each session uses `ensureEmployee()` — checks if alive first, spawns if not.
 
 **Prerequisites:** Must be inside a tmux session. Claude Code CLI must be in PATH.

package/src/commands/exe/logs.md

@@ -15,7 +15,7 @@ if [ -n "$LOG" ]; then
   echo "---"
   tail -50 "$LOG"
 else
-  echo "No session logs found for ${NAME}. Has the employee been launched with /exe-launch?"
+  echo "No session logs found for ${NAME}."
 fi
 ```
 

package/src/commands/exe/sessions.md

@@ -3,6 +3,12 @@ description: Show running employee tmux sessions
 allowed-tools: Bash
 ---
 
+> **DEPRECATED — NOT INSTALLED (feature 5e4e954d).**
+> tmux orchestration is retired: named subagents are the only dispatch path.
+> This file is kept in the package for audit and recovery only — the installer
+> excludes it from `~/.claude/skills/` (see RETIRED_TMUX_SKILLS in
+> src/adapters/claude/installer.ts). Delegate with `Agent(subagent_type='<employee>')`.
+
 List all active employee sessions.
 
 Run:

package/src/commands/exe/setup.md

@@ -5,15 +5,19 @@ allowed-tools: Bash, AskUserQuestion, Write, Read
 
 Set up the exe-os memory system. Follow these steps exactly:
 
-## Step 0: tmux check
+## Step 0: session-identity check
+
+exe-os needs a stable NAME for this coordinator session — every task row and every
+scoped query is keyed to it — and it reads that name from the terminal multiplexer.
+This is session identity only: delegation runs on named subagents, in-session.
 
-tmux is required for exe-os multi-agent. Check if it's installed:
 ```bash
 which tmux >/dev/null 2>&1 && echo "TMUX_INSTALLED" || echo "TMUX_NOT_INSTALLED"
 ```
 
 If `TMUX_NOT_INSTALLED`, tell the user:
-> **tmux is required.** exe-os uses tmux for instant cross-session communication between employees.
+> **tmux is required.** exe-os names each coordinator session after its tmux session,
+> and task scoping depends on that name.
 >
 > Install it before continuing:
 > - macOS: `brew install tmux`

package/src/commands/exe/status.md

@@ -4,6 +4,12 @@ allowed-tools: Bash
 argument-hint: [employee-name]
 ---
 
+> **DEPRECATED — NOT INSTALLED (feature 5e4e954d).**
+> tmux orchestration is retired: named subagents are the only dispatch path.
+> This file is kept in the package for audit and recovery only — the installer
+> excludes it from `~/.claude/skills/` (see RETIRED_TMUX_SKILLS in
+> src/adapters/claude/installer.ts). Delegate with `Agent(subagent_type='<employee>')`.
+
 Show real-time employee status by capturing tmux pane output.
 
 Run:

package/src/commands/exe-reference.md

@@ -25,14 +25,14 @@ do not proceed with boot:
    /exe
 
  Naming: coordinator session names are user-assigned.
- Employees follow the same suffix: <employee>-<coordinator-session>.
+ One session per project.
 
- Why: parallel work inside a session runs on
- named subagents — no tmux needed. tmux is what
- hosts background employees that outlive this
- session and the instant cross-session messaging
- between them. Without it, no durable employees
- and no cross-session coordination.
+ Why: work inside a session runs on named
+ subagents. What still needs tmux is the
+ COORDINATOR'S OWN session name — every task row
+ and every scoped query is keyed to it. Without a
+ resolvable session name, tasks are written that
+ nothing can scope back to this project.
 
  Install tmux:
    macOS:  brew install tmux
@@ -52,24 +52,21 @@ Here's how we work together:
 
 **This session is your command center.** We plan, prioritize, review, and decide here.
 
-**When work needs doing:** I normally hand it to a named subagent — the
-specialist's identity, working in parallel, reporting back to me. For work that
-has to keep running after this session ends, I create a tracked task and launch
-the specialist in a background tmux session instead. Either way you don't manage
-it — I handle dispatch automatically.
+**When work needs doing:** I hand it to a named subagent — the specialist's
+identity, working in parallel, reporting back to me. I track it as a task, read
+what comes back, and record the result. You don't manage any of that.
 
 **Quick reference:**
 - `/exe` — this session (me, your COO)
 - `/exe-team` — see all employees and their memory counts
 - `/exe-search "query"` — search across all memories
-- `/exe-status` — check what employees are doing right now
 - `/exe-review` — review completed work
 
 ---
 
 ## Legacy fallback (II-5)
 
-Preferred entry is the `exe` shell command — run it in a fresh tmux pane instead
+Preferred entry is the `exe` shell command — run it in a fresh terminal pane instead
 of `claude` + `/exe`. The shell wrapper boots Claude with the COO identity and
 active behaviors already wired into the system prompt, closing the
 founder-feedback loop. The `/exe` slash command remains functional for backward
@@ -94,25 +91,17 @@ The boot script is the single source of truth at startup. Just run it and wait.
 
 ---
 
-## Context-full handler (extended walkthrough)
-
-When an employee sends
-`context-full: <name> hit capacity. Checkpoint saved. Resume task <task-id>.`:
-
-1. **Acknowledge** — note which employee and which task hit context limit.
-2. **Kill the session:**
-   ```bash
-   tmux kill-session -t <name>-<coordinator-session>
-   # e.g.: tmux kill-session -t <employee>-<coordinator-session>
-   ```
-3. **Relaunch** — call the `resume_employee` MCP tool (NOT `create_task`):
-   - `resume_employee({ agent_id: "<name>", project_name: "<project>" })`
-   - The tool is the only dedupe-safe entry point: it checks for an existing
-     active RESUME task for the agent, refreshes its context if found, and
-     creates a new one otherwise.
-   - The tool auto-dispatches on first creation, which spawns and intercoms the
-     fresh session.
-   - Never call `create_task` with a `RESUME:` title directly — that path
-     bypasses the dedupe helper and accumulates phantom rows.
-4. **Report to founder:** "<Employee> hit context capacity mid-task. Killed and
-   relaunched — will resume from checkpoint."
+## Context-full handling (extended walkthrough)
+
+A subagent that runs out of context returns to you; there is no session to kill
+and nothing to relaunch. What you owe the work is the record:
+
+1. **Read what came back** — partial results are results. Never discard them.
+2. **Write them down** — update the task row with what is done, what remains, and
+   the checkpoint memory id. That row is the whole handoff.
+3. **Re-dispatch** — a fresh `Agent(subagent_type: "<employee>")` briefed from that
+   row, scoped to the remainder. Do not re-brief it from your own memory of the
+   first attempt; brief it from what was actually recorded.
+4. **Report to founder:** "<Employee>'s pass ran out of context mid-task.
+   Checkpointed and re-dispatched from the checkpoint."
+