chore: rolling promotion dev -> main

.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
   "plugins": [
     {
       "name": "genie",
-      "version": "4.260404.2",
+      "version": "4.260405.14",
       "source": "./plugins/genie",
       "description": "Human-AI partnership for Claude Code. Share a terminal, orchestrate workers, evolve together. Brainstorm ideas, wish them into plans, make with parallel agents, ship as one team. A coding genie that grows with your project."
     }

.genie/agents/metrics-updater/runs.jsonl

@@ -17,3 +17,4 @@
 {"timestamp":"2026-04-02T00:00:00.000Z","duration_ms":15000,"api_calls":0,"tools_generated":0,"errors":["gh CLI not available","GitHub MCP tools not present in session"],"status":"failed","fallback":false,"metrics":null}
 {"timestamp":"2026-04-03T00:00:00.000Z","duration_ms":3200,"api_calls":0,"tools_generated":0,"errors":["gh CLI not available","GitHub MCP tools not present in session"],"status":"failed","fallback":false,"metrics":null}
 {"timestamp":"2026-04-04T00:00:00.000Z","duration_ms":30000,"api_calls":0,"tools_generated":0,"errors":["gh CLI not available","GitHub MCP tools not present in session"],"status":"success","fallback":true,"metrics":{"releases_24h":2,"merged_prs_7d":35,"avg_merge_time_h":0.3,"ship_rate_pct":85}}
+{"timestamp":"2026-04-05T12:24:47Z","duration_ms":32000,"api_calls":0,"tools_generated":0,"errors":["gh CLI not available","GitHub MCP tools not present in session"],"status":"success","fallback":true,"metrics":{"releases_24h":2,"merged_prs_7d":35,"avg_merge_time_h":0.3,"ship_rate_pct":85}}

.genie/agents/metrics-updater/state.json

@@ -1,5 +1,5 @@
 {
-  "last_run": "2026-04-04T00:00:00.000Z",
+  "last_run": "2026-04-05T12:24:47.000Z",
   "last_run_status": "success",
   "last_metrics": {
     "releases_24h": 2,

.genie/wishes/auto-orchestrate/WISH.md

@@ -2,7 +2,7 @@
 
 | Field | Value |
 |-------|-------|
-| **Status** | DRAFT |
+| **Status** | SHIPPED |
 | **Slug** | `auto-orchestrate` |
 | **Date** | 2026-03-17 |
 

.genie/wishes/daily-metrics-agent/WISH.md

@@ -2,7 +2,7 @@
 
 | Field | Value |
 |-------|-------|
-| **Status** | APPROVED |
+| **Status** | SHIPPED |
 | **Slug** | `daily-metrics-agent` |
 | **Date** | 2026-03-24 |
 

.genie/wishes/docs-overhaul/WISH.md

@@ -1,6 +1,6 @@
 # Wish: Documentation & Prompt Overhaul
 
-**Status:** DRAFT
+**Status:** SHIPPED
 **Slug:** `docs-overhaul`
 **Created:** 2026-03-16
 

.genie/wishes/fix-depends-parser/WISH.md

@@ -2,7 +2,7 @@
 
 | Field | Value |
 |-------|-------|
-| **Status** | DRAFT |
+| **Status** | SHIPPED |
 | **Slug** | `fix-depends-parser` |
 | **Date** | 2026-03-17 |
 

.genie/wishes/fix-omni-bridge-hardening/WISH.md

@@ -0,0 +1,87 @@
+# Wish: Fix Omni Bridge & ClaudeCode Executor Hardening
+
+| Field | Value |
+|-------|-------|
+| **Status** | SHIPPED |
+| **Slug** | `fix-omni-bridge-hardening` |
+| **Date** | 2026-04-04 |
+| **Priority** | P1 |
+| **Repo** | `automagik-dev/genie` |
+| **Issues** | #1036, #1035 |
+| **depends-on** | `fix-sdk-executor-correctness` (P0) |
+
+## Summary
+
+The ClaudeCode Omni executor has chat ID collisions, broken JSON escaping, and weak liveness checks. The OmniBridge silently drops messages when buffer is full, leaks executor processes on shutdown, and allows concurrency bursts during spawn. These are production reliability issues for the Omni→agent pipeline.
+
+## Deliverables
+
+### Group 1: Fix ClaudeCode executor — chat ID collision + JSON escaping + liveness (#1036)
+
+**File:** `src/services/executors/claude-code.ts`
+
+**Bug 1 — Chat ID collision (line 23-25):**
+`sanitizeWindowName` strips non-alphanumeric chars and truncates to 40. Different JIDs like `5511999999999@s.whatsapp.net` and `5511888888888@s.whatsapp.net` can collide after stripping.
+
+**Fix:** Use a hash-based approach:
+```typescript
+function sanitizeWindowName(chatId: string): string {
+  const hash = createHash('md5').update(chatId).digest('hex').slice(0, 12);
+  const prefix = chatId.replace(/[^a-zA-Z0-9]/g, '').slice(0, 24);
+  return `${prefix}-${hash}` || 'chat';
+}
+```
+
+**Bug 2 — JSON escaping (line 210-214):**
+Only `sed 's/"/\\"/g'` is used. Backslashes, tabs, carriage returns produce malformed JSON.
+
+**Fix:** Use `JSON.stringify()` in the Node layer before passing to bash, or use a proper escaping function that handles all JSON-special characters (`\`, `\n`, `\t`, `\r`, control chars).
+
+**Bug 3 — Liveness check:**
+`isPaneAlive` at `src/lib/tmux.ts:548-555` only checks `pane_dead` flag, not whether Claude process runs inside.
+
+**Fix:** Add process check: `tmux list-panes -t <pane> -F '#{pane_pid}'` then verify the process tree contains `claude` or the expected process.
+
+**Acceptance:** Different chat IDs always map to different tmux windows. Messages with special characters produce valid JSON. Liveness detects crashed Claude processes in alive panes.
+
+### Group 2: Fix OmniBridge session lifecycle (#1035)
+
+**File:** `src/services/omni-bridge.ts`
+
+**Bug 1 — Silent message drop (line 265-268):**
+When `entry.buffer.length >= MAX_BUFFER_PER_CHAT` (50), messages silently dropped.
+
+**Fix:** Log a warning, emit a runtime event, and reply to the sender with an error message (e.g., "Queue full, please retry").
+
+**Bug 2 — Resource leak on stop() (line 158-193):**
+`stop()` clears timers and drains NATS but never calls `executor.shutdown()` on live sessions.
+
+**Fix:** Iterate `this.sessions` and call `executor.shutdown()` for each active session before clearing:
+```typescript
+for (const [key, entry] of this.sessions) {
+  try { await entry.executor?.shutdown(); } catch (e) { /* log */ }
+}
+this.sessions.clear();
+```
+
+**Bug 3 — Concurrency burst (line 294-295):**
+Spawning entries excluded from concurrency count, allowing oversubscription.
+
+**Fix:** Count spawning entries in the active count:
+```typescript
+const activeCount = Array.from(this.sessions.values()).filter(e => !e.idle).length;
+```
+
+**Bug 4 — Buffered messages lost on spawn failure (line 337-340):**
+When spawn fails, `this.sessions.delete(key)` removes placeholder including all buffered messages.
+
+**Fix:** Before deleting, attempt to re-queue buffered messages or log them for recovery.
+
+**Acceptance:** No silent message drops — all failures logged and visible. `stop()` cleans up all executor processes. Concurrency limit respected during spawn bursts.
+
+## Validation
+
+```bash
+cd /home/genie/workspace/repos/genie
+bun run build && bun test --filter "omni|bridge|executor|claude-code"
+```

.genie/wishes/fix-session-uuid-resume/WISH.md

@@ -2,7 +2,7 @@
 
 | Field | Value |
 |-------|-------|
-| **Status** | DRAFT |
+| **Status** | OBSOLETE |
 | **Slug** | `fix-session-uuid-resume` |
 | **Date** | 2026-03-25 |
 | **Design** | N/A (trace-driven — root cause fully identified) |