@askexenow/exe-os 0.9.196 → 0.9.197
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/deploy/compose/docker-compose.yml +40 -0
- package/deploy/stack-manifests/v0.9.json +51 -51
- package/dist/bin/registry-proxy.js +2 -2
- package/dist/bin/stack-update.js +1 -1
- package/dist/bin/vps-health-gate.js +1 -1
- package/dist/{chunk-2OX3F2UQ.js → chunk-4F4SOCKN.js} +1 -1
- package/dist/{chunk-OK5U45GK.js → chunk-7JCK6TXX.js} +9 -0
- package/dist/{chunk-MJYXPMPW.js → chunk-T5U27Y4H.js} +5 -5
- package/dist/{daemon-orchestration-MLB3WJHB.js → daemon-orchestration-N5GPEP4F.js} +1 -1
- package/dist/lib/exe-daemon.js +7 -7
- package/dist/mcp/register-tools.js +2 -2
- package/dist/mcp/server.js +2 -2
- package/dist/{stack-update-ODIHZZCZ.js → stack-update-PI2TWEGS.js} +1 -1
- package/package.json +1 -1
- package/release-notes.json +201 -207
|
@@ -435,6 +435,46 @@ services:
|
|
|
435
435
|
driver: json-file
|
|
436
436
|
options: { max-size: "10m", max-file: "3" }
|
|
437
437
|
|
|
438
|
+
# ------------------------------------------------------------------
|
|
439
|
+
# Update service — registry proxy for customer image pulls
|
|
440
|
+
# Serves update.askexe.com: /v2/* Docker registry proxy, /health
|
|
441
|
+
# AskExe control-plane only — not deployed on customer VPSs.
|
|
442
|
+
# ------------------------------------------------------------------
|
|
443
|
+
exe-update:
|
|
444
|
+
image: ${EXE_OS_IMAGE_TAG:-${EXED_IMAGE_TAG:-ghcr.io/askexe/exe-os:v0.9.157}}
|
|
445
|
+
container_name: exe-update
|
|
446
|
+
restart: unless-stopped
|
|
447
|
+
entrypoint: ["node", "/app/dist/bin/registry-proxy.js"]
|
|
448
|
+
env_file:
|
|
449
|
+
- path: .env
|
|
450
|
+
required: false
|
|
451
|
+
environment:
|
|
452
|
+
EXE_REGISTRY_PROXY_PORT: "${EXE_REGISTRY_PROXY_PORT:-3200}"
|
|
453
|
+
EXE_REGISTRY_PROXY_HOST: "${EXE_REGISTRY_PROXY_HOST:-0.0.0.0}"
|
|
454
|
+
EXE_REGISTRY_PROXY_UPSTREAM: "${EXE_REGISTRY_PROXY_UPSTREAM:-https://ghcr.io}"
|
|
455
|
+
EXE_REGISTRY_PROXY_UPSTREAM_USERNAME: "${EXE_REGISTRY_PROXY_UPSTREAM_USERNAME}"
|
|
456
|
+
EXE_REGISTRY_PROXY_UPSTREAM_TOKEN: "${EXE_REGISTRY_PROXY_UPSTREAM_TOKEN}"
|
|
457
|
+
EXE_REGISTRY_PROXY_PULL_TOKENS: "${EXE_REGISTRY_PROXY_PULL_TOKENS}"
|
|
458
|
+
EXE_REGISTRY_PROXY_ALLOWED_NAMESPACE: "${EXE_REGISTRY_PROXY_ALLOWED_NAMESPACE:-askexe}"
|
|
459
|
+
ports:
|
|
460
|
+
- "127.0.0.1:${EXE_UPDATE_HOST_PORT:-3200}:${EXE_REGISTRY_PROXY_PORT:-3200}"
|
|
461
|
+
networks:
|
|
462
|
+
backend:
|
|
463
|
+
ipv4_address: 10.42.0.25
|
|
464
|
+
healthcheck:
|
|
465
|
+
test: ["CMD", "node", "-e", "fetch('http://127.0.0.1:3200/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"]
|
|
466
|
+
interval: 30s
|
|
467
|
+
timeout: 5s
|
|
468
|
+
start_period: 10s
|
|
469
|
+
retries: 3
|
|
470
|
+
deploy:
|
|
471
|
+
resources:
|
|
472
|
+
limits:
|
|
473
|
+
memory: 256M
|
|
474
|
+
logging:
|
|
475
|
+
driver: json-file
|
|
476
|
+
options: { max-size: "10m", max-file: "3" }
|
|
477
|
+
|
|
438
478
|
# ------------------------------------------------------------------
|
|
439
479
|
# Infrastructure — Cloudflare Tunnel (replaces nginx + SSL certs)
|
|
440
480
|
# ------------------------------------------------------------------
|
|
@@ -181,31 +181,31 @@
|
|
|
181
181
|
"services": {
|
|
182
182
|
"crm": {
|
|
183
183
|
"env": "CRM_IMAGE_TAG",
|
|
184
|
-
"image": "
|
|
184
|
+
"image": "update.askexe.com/askexe/exe-crm:v0.9.3",
|
|
185
185
|
"healthUrl": "http://127.0.0.1:3000/healthz",
|
|
186
186
|
"deploymentScope": "customer"
|
|
187
187
|
},
|
|
188
188
|
"wiki": {
|
|
189
189
|
"env": "WIKI_IMAGE_TAG",
|
|
190
|
-
"image": "
|
|
190
|
+
"image": "update.askexe.com/askexe/exe-wiki:v0.9.3",
|
|
191
191
|
"healthUrl": "http://127.0.0.1:3001/api/ping",
|
|
192
192
|
"deploymentScope": "customer"
|
|
193
193
|
},
|
|
194
194
|
"exe-os": {
|
|
195
195
|
"env": "EXE_OS_IMAGE_TAG",
|
|
196
|
-
"image": "
|
|
196
|
+
"image": "update.askexe.com/askexe/exed:v0.9.3",
|
|
197
197
|
"healthUrl": "http://127.0.0.1:8765/health",
|
|
198
198
|
"deploymentScope": "customer"
|
|
199
199
|
},
|
|
200
200
|
"gateway": {
|
|
201
201
|
"env": "GATEWAY_IMAGE_TAG",
|
|
202
|
-
"image": "
|
|
202
|
+
"image": "update.askexe.com/askexe/exe-gateway:v0.9.3",
|
|
203
203
|
"healthUrl": "http://127.0.0.1:3100/health",
|
|
204
204
|
"deploymentScope": "customer"
|
|
205
205
|
},
|
|
206
206
|
"monitorAgent": {
|
|
207
207
|
"env": "MONITOR_AGENT_IMAGE_TAG",
|
|
208
|
-
"image": "
|
|
208
|
+
"image": "update.askexe.com/askexe/exe-monitor-agent:v0.9.3",
|
|
209
209
|
"deploymentScope": "customer"
|
|
210
210
|
}
|
|
211
211
|
},
|
|
@@ -222,9 +222,9 @@
|
|
|
222
222
|
"repo": "AskExe/exe-os",
|
|
223
223
|
"npmPackage": "@askexenow/exe-os",
|
|
224
224
|
"npmVersion": "0.9.69",
|
|
225
|
-
"image": "
|
|
225
|
+
"image": "update.askexe.com/askexe/exed:v0.9.3",
|
|
226
226
|
"imageVersion": "0.9.3",
|
|
227
|
-
"note": "npm package version and customer stack image tag are separate version tracks; Hygo pulls the exed image through
|
|
227
|
+
"note": "npm package version and customer stack image tag are separate version tracks; Hygo pulls the exed image through update.askexe.com, which proxies the GHCR artifact server-side.",
|
|
228
228
|
"sourceRef": "v0.9.3"
|
|
229
229
|
}
|
|
230
230
|
}
|
|
@@ -246,31 +246,31 @@
|
|
|
246
246
|
"services": {
|
|
247
247
|
"crm": {
|
|
248
248
|
"env": "CRM_IMAGE_TAG",
|
|
249
|
-
"image": "
|
|
249
|
+
"image": "update.askexe.com/askexe/exe-crm:v0.9.3",
|
|
250
250
|
"healthUrl": "http://127.0.0.1:3000/healthz",
|
|
251
251
|
"deploymentScope": "customer"
|
|
252
252
|
},
|
|
253
253
|
"wiki": {
|
|
254
254
|
"env": "WIKI_IMAGE_TAG",
|
|
255
|
-
"image": "
|
|
255
|
+
"image": "update.askexe.com/askexe/exe-wiki:v0.9.3",
|
|
256
256
|
"healthUrl": "http://127.0.0.1:3001/api/ping",
|
|
257
257
|
"deploymentScope": "customer"
|
|
258
258
|
},
|
|
259
259
|
"exe-os": {
|
|
260
260
|
"env": "EXE_OS_IMAGE_TAG",
|
|
261
|
-
"image": "
|
|
261
|
+
"image": "update.askexe.com/askexe/exed:v0.9.4",
|
|
262
262
|
"healthUrl": "http://127.0.0.1:8765/health",
|
|
263
263
|
"deploymentScope": "customer"
|
|
264
264
|
},
|
|
265
265
|
"gateway": {
|
|
266
266
|
"env": "GATEWAY_IMAGE_TAG",
|
|
267
|
-
"image": "
|
|
267
|
+
"image": "update.askexe.com/askexe/exe-gateway:v0.9.3",
|
|
268
268
|
"healthUrl": "http://127.0.0.1:3100/health",
|
|
269
269
|
"deploymentScope": "customer"
|
|
270
270
|
},
|
|
271
271
|
"monitorAgent": {
|
|
272
272
|
"env": "MONITOR_AGENT_IMAGE_TAG",
|
|
273
|
-
"image": "
|
|
273
|
+
"image": "update.askexe.com/askexe/exe-monitor-agent:v0.9.3",
|
|
274
274
|
"deploymentScope": "customer"
|
|
275
275
|
}
|
|
276
276
|
},
|
|
@@ -287,9 +287,9 @@
|
|
|
287
287
|
"repo": "AskExe/exe-os",
|
|
288
288
|
"npmPackage": "@askexenow/exe-os",
|
|
289
289
|
"npmVersion": "0.9.81",
|
|
290
|
-
"image": "
|
|
290
|
+
"image": "update.askexe.com/askexe/exed:v0.9.4",
|
|
291
291
|
"imageVersion": "0.9.4",
|
|
292
|
-
"note": "Customer stack image tag is 0.9.4; bundled npm package is @askexenow/exe-os@0.9.81. Hygo pulls through
|
|
292
|
+
"note": "Customer stack image tag is 0.9.4; bundled npm package is @askexenow/exe-os@0.9.81. Hygo pulls through update.askexe.com, which proxies the AskExe-owned GHCR artifact server-side.",
|
|
293
293
|
"sourceRef": "stack-v0.9.4"
|
|
294
294
|
}
|
|
295
295
|
}
|
|
@@ -311,31 +311,31 @@
|
|
|
311
311
|
"services": {
|
|
312
312
|
"crm": {
|
|
313
313
|
"env": "CRM_IMAGE_TAG",
|
|
314
|
-
"image": "
|
|
314
|
+
"image": "update.askexe.com/askexe/exe-crm:v0.9.3",
|
|
315
315
|
"healthUrl": "http://127.0.0.1:3000/healthz",
|
|
316
316
|
"deploymentScope": "customer"
|
|
317
317
|
},
|
|
318
318
|
"wiki": {
|
|
319
319
|
"env": "WIKI_IMAGE_TAG",
|
|
320
|
-
"image": "
|
|
320
|
+
"image": "update.askexe.com/askexe/exe-wiki:v0.9.3",
|
|
321
321
|
"healthUrl": "http://127.0.0.1:3001/api/ping",
|
|
322
322
|
"deploymentScope": "customer"
|
|
323
323
|
},
|
|
324
324
|
"exe-os": {
|
|
325
325
|
"env": "EXE_OS_IMAGE_TAG",
|
|
326
|
-
"image": "
|
|
326
|
+
"image": "update.askexe.com/askexe/exed:v0.9.5",
|
|
327
327
|
"healthUrl": "http://127.0.0.1:8765/health",
|
|
328
328
|
"deploymentScope": "customer"
|
|
329
329
|
},
|
|
330
330
|
"gateway": {
|
|
331
331
|
"env": "GATEWAY_IMAGE_TAG",
|
|
332
|
-
"image": "
|
|
332
|
+
"image": "update.askexe.com/askexe/exe-gateway:v0.9.3",
|
|
333
333
|
"healthUrl": "http://127.0.0.1:3100/health",
|
|
334
334
|
"deploymentScope": "customer"
|
|
335
335
|
},
|
|
336
336
|
"monitorAgent": {
|
|
337
337
|
"env": "MONITOR_AGENT_IMAGE_TAG",
|
|
338
|
-
"image": "
|
|
338
|
+
"image": "update.askexe.com/askexe/exe-monitor-agent:v0.9.3",
|
|
339
339
|
"deploymentScope": "customer"
|
|
340
340
|
}
|
|
341
341
|
},
|
|
@@ -352,9 +352,9 @@
|
|
|
352
352
|
"repo": "AskExe/exe-os",
|
|
353
353
|
"npmPackage": "@askexenow/exe-os",
|
|
354
354
|
"npmVersion": "0.9.82",
|
|
355
|
-
"image": "
|
|
355
|
+
"image": "update.askexe.com/askexe/exed:v0.9.4",
|
|
356
356
|
"imageVersion": "0.9.5",
|
|
357
|
-
"note": "Customer stack image tag is 0.9.4; bundled npm package is @askexenow/exe-os@0.9.81. Hygo pulls through
|
|
357
|
+
"note": "Customer stack image tag is 0.9.4; bundled npm package is @askexenow/exe-os@0.9.81. Hygo pulls through update.askexe.com, which proxies the AskExe-owned GHCR artifact server-side.",
|
|
358
358
|
"sourceRef": "stack-v0.9.4",
|
|
359
359
|
"commit": "main@stack-v0.9.5"
|
|
360
360
|
}
|
|
@@ -379,31 +379,31 @@
|
|
|
379
379
|
"services": {
|
|
380
380
|
"crm": {
|
|
381
381
|
"env": "CRM_IMAGE_TAG",
|
|
382
|
-
"image": "
|
|
382
|
+
"image": "update.askexe.com/askexe/exe-crm:v0.9.3",
|
|
383
383
|
"healthUrl": "http://127.0.0.1:3000/healthz",
|
|
384
384
|
"deploymentScope": "customer"
|
|
385
385
|
},
|
|
386
386
|
"wiki": {
|
|
387
387
|
"env": "WIKI_IMAGE_TAG",
|
|
388
|
-
"image": "
|
|
388
|
+
"image": "update.askexe.com/askexe/exe-wiki:v0.9.3",
|
|
389
389
|
"healthUrl": "http://127.0.0.1:3001/api/ping",
|
|
390
390
|
"deploymentScope": "customer"
|
|
391
391
|
},
|
|
392
392
|
"exe-os": {
|
|
393
393
|
"env": "EXE_OS_IMAGE_TAG",
|
|
394
|
-
"image": "
|
|
394
|
+
"image": "update.askexe.com/askexe/exed:v0.9.6",
|
|
395
395
|
"healthUrl": "http://127.0.0.1:8765/health",
|
|
396
396
|
"deploymentScope": "customer"
|
|
397
397
|
},
|
|
398
398
|
"gateway": {
|
|
399
399
|
"env": "GATEWAY_IMAGE_TAG",
|
|
400
|
-
"image": "
|
|
400
|
+
"image": "update.askexe.com/askexe/exe-gateway:v0.9.3",
|
|
401
401
|
"healthUrl": "http://127.0.0.1:3100/health",
|
|
402
402
|
"deploymentScope": "customer"
|
|
403
403
|
},
|
|
404
404
|
"monitorAgent": {
|
|
405
405
|
"env": "MONITOR_AGENT_IMAGE_TAG",
|
|
406
|
-
"image": "
|
|
406
|
+
"image": "update.askexe.com/askexe/exe-monitor-agent:v0.9.3",
|
|
407
407
|
"deploymentScope": "customer"
|
|
408
408
|
}
|
|
409
409
|
},
|
|
@@ -420,9 +420,9 @@
|
|
|
420
420
|
"repo": "AskExe/exe-os",
|
|
421
421
|
"npmPackage": "@askexenow/exe-os",
|
|
422
422
|
"npmVersion": "0.9.83",
|
|
423
|
-
"image": "
|
|
423
|
+
"image": "update.askexe.com/askexe/exed:v0.9.4",
|
|
424
424
|
"imageVersion": "0.9.6",
|
|
425
|
-
"note": "Customer stack image tag is 0.9.4; bundled npm package is @askexenow/exe-os@0.9.81. Hygo pulls through
|
|
425
|
+
"note": "Customer stack image tag is 0.9.4; bundled npm package is @askexenow/exe-os@0.9.81. Hygo pulls through update.askexe.com, which proxies the AskExe-owned GHCR artifact server-side.",
|
|
426
426
|
"sourceRef": "stack-v0.9.4",
|
|
427
427
|
"commit": "main@stack-v0.9.6"
|
|
428
428
|
}
|
|
@@ -447,31 +447,31 @@
|
|
|
447
447
|
"services": {
|
|
448
448
|
"crm": {
|
|
449
449
|
"env": "CRM_IMAGE_TAG",
|
|
450
|
-
"image": "
|
|
450
|
+
"image": "update.askexe.com/askexe/exe-crm:v0.9.3",
|
|
451
451
|
"healthUrl": "http://127.0.0.1:3000/healthz",
|
|
452
452
|
"deploymentScope": "customer"
|
|
453
453
|
},
|
|
454
454
|
"wiki": {
|
|
455
455
|
"env": "WIKI_IMAGE_TAG",
|
|
456
|
-
"image": "
|
|
456
|
+
"image": "update.askexe.com/askexe/exe-wiki:v0.9.3",
|
|
457
457
|
"healthUrl": "http://127.0.0.1:3001/api/ping",
|
|
458
458
|
"deploymentScope": "customer"
|
|
459
459
|
},
|
|
460
460
|
"exe-os": {
|
|
461
461
|
"env": "EXE_OS_IMAGE_TAG",
|
|
462
|
-
"image": "
|
|
462
|
+
"image": "update.askexe.com/askexe/exed:v0.9.7",
|
|
463
463
|
"healthUrl": "http://127.0.0.1:8765/health",
|
|
464
464
|
"deploymentScope": "customer"
|
|
465
465
|
},
|
|
466
466
|
"gateway": {
|
|
467
467
|
"env": "GATEWAY_IMAGE_TAG",
|
|
468
|
-
"image": "
|
|
468
|
+
"image": "update.askexe.com/askexe/exe-gateway:v0.9.3",
|
|
469
469
|
"healthUrl": "http://127.0.0.1:3100/health",
|
|
470
470
|
"deploymentScope": "customer"
|
|
471
471
|
},
|
|
472
472
|
"monitorAgent": {
|
|
473
473
|
"env": "MONITOR_AGENT_IMAGE_TAG",
|
|
474
|
-
"image": "
|
|
474
|
+
"image": "update.askexe.com/askexe/exe-monitor-agent:v0.9.3",
|
|
475
475
|
"deploymentScope": "customer"
|
|
476
476
|
}
|
|
477
477
|
},
|
|
@@ -488,9 +488,9 @@
|
|
|
488
488
|
"repo": "AskExe/exe-os",
|
|
489
489
|
"npmPackage": "@askexenow/exe-os",
|
|
490
490
|
"npmVersion": "0.9.84",
|
|
491
|
-
"image": "
|
|
491
|
+
"image": "update.askexe.com/askexe/exed:v0.9.4",
|
|
492
492
|
"imageVersion": "0.9.7",
|
|
493
|
-
"note": "Customer stack image tag is 0.9.4; bundled npm package is @askexenow/exe-os@0.9.81. Hygo pulls through
|
|
493
|
+
"note": "Customer stack image tag is 0.9.4; bundled npm package is @askexenow/exe-os@0.9.81. Hygo pulls through update.askexe.com, which proxies the AskExe-owned GHCR artifact server-side.",
|
|
494
494
|
"sourceRef": "stack-v0.9.4",
|
|
495
495
|
"commit": "main@stack-v0.9.7"
|
|
496
496
|
}
|
|
@@ -506,32 +506,32 @@
|
|
|
506
506
|
"services": {
|
|
507
507
|
"crm": {
|
|
508
508
|
"env": "CRM_IMAGE_TAG",
|
|
509
|
-
"image": "
|
|
509
|
+
"image": "update.askexe.com/askexe/exe-crm:v0.9.3",
|
|
510
510
|
"healthUrl": "http://127.0.0.1:3000/healthz",
|
|
511
511
|
"deploymentScope": "customer"
|
|
512
512
|
},
|
|
513
513
|
"wiki": {
|
|
514
514
|
"env": "WIKI_IMAGE_TAG",
|
|
515
|
-
"image": "
|
|
515
|
+
"image": "update.askexe.com/askexe/exe-wiki:v0.9.3",
|
|
516
516
|
"healthUrl": "http://127.0.0.1:3001/api/ping",
|
|
517
517
|
"deploymentScope": "customer"
|
|
518
518
|
},
|
|
519
519
|
"exe-os": {
|
|
520
520
|
"env": "EXE_OS_IMAGE_TAG",
|
|
521
|
-
"image": "
|
|
521
|
+
"image": "update.askexe.com/askexe/exed:v0.9.8",
|
|
522
522
|
"healthUrl": "http://127.0.0.1:8765/health",
|
|
523
523
|
"deploymentScope": "customer",
|
|
524
524
|
"note": "npm package @askexenow/exe-os@0.9.89. Security hardening + 5 Hygo bug fixes + RSS memory fix."
|
|
525
525
|
},
|
|
526
526
|
"gateway": {
|
|
527
527
|
"env": "GATEWAY_IMAGE_TAG",
|
|
528
|
-
"image": "
|
|
528
|
+
"image": "update.askexe.com/askexe/exe-gateway:v0.9.3",
|
|
529
529
|
"healthUrl": "http://127.0.0.1:3100/health",
|
|
530
530
|
"deploymentScope": "customer"
|
|
531
531
|
},
|
|
532
532
|
"monitorAgent": {
|
|
533
533
|
"env": "MONITOR_AGENT_IMAGE_TAG",
|
|
534
|
-
"image": "
|
|
534
|
+
"image": "update.askexe.com/askexe/exe-monitor-agent:v0.9.3",
|
|
535
535
|
"healthUrl": "http://127.0.0.1:45876/",
|
|
536
536
|
"deploymentScope": "customer"
|
|
537
537
|
}
|
|
@@ -545,32 +545,32 @@
|
|
|
545
545
|
"services": {
|
|
546
546
|
"crm": {
|
|
547
547
|
"env": "CRM_IMAGE_TAG",
|
|
548
|
-
"image": "
|
|
548
|
+
"image": "update.askexe.com/askexe/exe-crm:v0.9.3",
|
|
549
549
|
"healthUrl": "http://127.0.0.1:3000/healthz",
|
|
550
550
|
"deploymentScope": "customer"
|
|
551
551
|
},
|
|
552
552
|
"wiki": {
|
|
553
553
|
"env": "WIKI_IMAGE_TAG",
|
|
554
|
-
"image": "
|
|
554
|
+
"image": "update.askexe.com/askexe/exe-wiki:v0.9.3",
|
|
555
555
|
"healthUrl": "http://127.0.0.1:3001/api/ping",
|
|
556
556
|
"deploymentScope": "customer"
|
|
557
557
|
},
|
|
558
558
|
"exe-os": {
|
|
559
559
|
"env": "EXE_OS_IMAGE_TAG",
|
|
560
|
-
"image": "
|
|
560
|
+
"image": "update.askexe.com/askexe/exed:v0.9.9",
|
|
561
561
|
"healthUrl": "http://127.0.0.1:8765/health",
|
|
562
562
|
"deploymentScope": "customer",
|
|
563
563
|
"note": "npm package @askexenow/exe-os@0.9.134. Session routing fix, DB safety suite, Codex MCP, 20 bug fixes."
|
|
564
564
|
},
|
|
565
565
|
"gateway": {
|
|
566
566
|
"env": "GATEWAY_IMAGE_TAG",
|
|
567
|
-
"image": "
|
|
567
|
+
"image": "update.askexe.com/askexe/exe-gateway:v0.9.3",
|
|
568
568
|
"healthUrl": "http://127.0.0.1:3100/health",
|
|
569
569
|
"deploymentScope": "customer"
|
|
570
570
|
},
|
|
571
571
|
"monitorAgent": {
|
|
572
572
|
"env": "MONITOR_AGENT_IMAGE_TAG",
|
|
573
|
-
"image": "
|
|
573
|
+
"image": "update.askexe.com/askexe/exe-monitor-agent:v0.9.3",
|
|
574
574
|
"healthUrl": "http://127.0.0.1:45876/",
|
|
575
575
|
"deploymentScope": "customer"
|
|
576
576
|
}
|
|
@@ -584,32 +584,32 @@
|
|
|
584
584
|
"breakingChanges": [],
|
|
585
585
|
"services": {
|
|
586
586
|
"crm": {
|
|
587
|
-
"image": "
|
|
587
|
+
"image": "update.askexe.com/askexe/exe-crm:v0.9.4",
|
|
588
588
|
"env": "CRM_IMAGE_TAG",
|
|
589
589
|
"composeService": "exe-crm"
|
|
590
590
|
},
|
|
591
591
|
"wiki": {
|
|
592
|
-
"image": "
|
|
592
|
+
"image": "update.askexe.com/askexe/exe-wiki:v0.9.5",
|
|
593
593
|
"env": "WIKI_IMAGE_TAG",
|
|
594
594
|
"composeService": "exe-wiki"
|
|
595
595
|
},
|
|
596
596
|
"exe-os": {
|
|
597
|
-
"image": "
|
|
597
|
+
"image": "update.askexe.com/askexe/exe-os:v0.9.157",
|
|
598
598
|
"env": "EXE_OS_IMAGE_TAG",
|
|
599
599
|
"composeService": "exe-os"
|
|
600
600
|
},
|
|
601
601
|
"gateway": {
|
|
602
|
-
"image": "
|
|
602
|
+
"image": "update.askexe.com/askexe/exe-gateway:v0.9.4",
|
|
603
603
|
"env": "GATEWAY_IMAGE_TAG",
|
|
604
604
|
"composeService": "exe-gateway"
|
|
605
605
|
},
|
|
606
606
|
"monitorAgent": {
|
|
607
|
-
"image": "
|
|
607
|
+
"image": "update.askexe.com/askexe/exe-monitor-agent:v0.9.4",
|
|
608
608
|
"env": "MONITOR_AGENT_IMAGE_TAG",
|
|
609
609
|
"composeService": "exe-monitor-agent"
|
|
610
610
|
},
|
|
611
611
|
"monitorHub": {
|
|
612
|
-
"image": "
|
|
612
|
+
"image": "update.askexe.com/askexe/exe-monitor-hub:v0.9.5",
|
|
613
613
|
"env": "MONITOR_HUB_IMAGE_TAG",
|
|
614
614
|
"composeService": "exe-monitor-hub"
|
|
615
615
|
}
|
|
@@ -22,8 +22,8 @@ Environment:
|
|
|
22
22
|
EXE_REGISTRY_PROXY_ALLOWED_NAMESPACE=askexe
|
|
23
23
|
|
|
24
24
|
Docker image shape for clients:
|
|
25
|
-
|
|
26
|
-
|
|
25
|
+
update.askexe.com/askexe/exe-os:v0.9.3
|
|
26
|
+
update.askexe.com/askexe/exe-crm:v0.9.3
|
|
27
27
|
`);
|
|
28
28
|
}
|
|
29
29
|
async function main(args = process.argv.slice(2)) {
|
package/dist/bin/stack-update.js
CHANGED
|
@@ -207,7 +207,7 @@ async function main(args) {
|
|
|
207
207
|
console.log("[health-gate] Starting rollback...");
|
|
208
208
|
restorePreDeployBackup();
|
|
209
209
|
try {
|
|
210
|
-
const { rollbackStackUpdate, defaultStackPaths } = await import("../stack-update-
|
|
210
|
+
const { rollbackStackUpdate, defaultStackPaths } = await import("../stack-update-PI2TWEGS.js");
|
|
211
211
|
const paths = defaultStackPaths();
|
|
212
212
|
await rollbackStackUpdate({
|
|
213
213
|
manifestRef: paths.manifestRef,
|
|
@@ -495,6 +495,15 @@ function createSessionTTLRealDeps(getClient) {
|
|
|
495
495
|
listRegisteredSessions: () => listSessions(),
|
|
496
496
|
listTmuxSessions: () => listTmuxSessions(),
|
|
497
497
|
getSessionCreatedEpoch: (sessionName) => {
|
|
498
|
+
try {
|
|
499
|
+
const sessions = listSessions();
|
|
500
|
+
const entry = sessions.find((s) => s.windowName === sessionName);
|
|
501
|
+
if (entry?.registeredAt) {
|
|
502
|
+
const epoch = new Date(entry.registeredAt).getTime() / 1e3;
|
|
503
|
+
if (!isNaN(epoch)) return epoch;
|
|
504
|
+
}
|
|
505
|
+
} catch {
|
|
506
|
+
}
|
|
498
507
|
try {
|
|
499
508
|
const out = execSync(
|
|
500
509
|
`tmux display-message -t ${JSON.stringify(sessionName)} -p '#{session_created}' 2>/dev/null`,
|
|
@@ -140,12 +140,12 @@ function createStackUpdatePlan(manifest, envRaw, targetVersion) {
|
|
|
140
140
|
breakingChanges: release.breakingChanges ?? []
|
|
141
141
|
};
|
|
142
142
|
}
|
|
143
|
-
var ASKEXE_GHCR_IMAGE = /^(?:ghcr\.io\/askexe|registry\.askexe\.com\/askexe)\/[a-z0-9._/-]+(?::[^:@$/{]+|@sha256:[a-f0-9]{64})$/i;
|
|
143
|
+
var ASKEXE_GHCR_IMAGE = /^(?:ghcr\.io\/askexe|update\.askexe\.com\/askexe|registry\.askexe\.com\/askexe)\/[a-z0-9._/-]+(?::[^:@$/{]+|@sha256:[a-f0-9]{64})$/i;
|
|
144
144
|
function validatePinnedGhcrImage(image, label) {
|
|
145
145
|
const trimmed = image.trim().replace(/^['"]|['"]$/g, "");
|
|
146
146
|
if (!trimmed) return `${label} is empty`;
|
|
147
147
|
if (trimmed.includes("${")) return null;
|
|
148
|
-
if (!trimmed.startsWith("ghcr.io/askexe/") && !trimmed.startsWith("registry.askexe.com/askexe/")) return `${label} must use ghcr.io/askexe
|
|
148
|
+
if (!trimmed.startsWith("ghcr.io/askexe/") && !trimmed.startsWith("update.askexe.com/askexe/") && !trimmed.startsWith("registry.askexe.com/askexe/")) return `${label} must use ghcr.io/askexe/*, update.askexe.com/askexe/*, or registry.askexe.com/askexe/*, got ${trimmed}`;
|
|
149
149
|
if (/:latest(?:$|[\s#])/.test(trimmed)) return `${label} must not use :latest (${trimmed})`;
|
|
150
150
|
if (!ASKEXE_GHCR_IMAGE.test(trimmed)) return `${label} must be pinned with an explicit tag or sha256 digest from ghcr.io/askexe or registry.askexe.com/askexe, got ${trimmed}`;
|
|
151
151
|
return null;
|
|
@@ -153,9 +153,9 @@ function validatePinnedGhcrImage(image, label) {
|
|
|
153
153
|
function validateComposeImageLiteral(image, label) {
|
|
154
154
|
const trimmed = image.trim().replace(/^['"]|['"]$/g, "");
|
|
155
155
|
if (!trimmed) return `${label} is empty`;
|
|
156
|
-
if (trimmed.startsWith("ghcr.io/askexe/") || trimmed.startsWith("registry.askexe.com/askexe/")) return validatePinnedGhcrImage(trimmed, label);
|
|
156
|
+
if (trimmed.startsWith("ghcr.io/askexe/") || trimmed.startsWith("update.askexe.com/askexe/") || trimmed.startsWith("registry.askexe.com/askexe/")) return validatePinnedGhcrImage(trimmed, label);
|
|
157
157
|
if (/^(postgres|pgvector\/pgvector|clickhouse\/clickhouse-server|redis|nginx|postgrest\/postgrest|supabase\/gotrue):[^:]+$/i.test(trimmed)) return null;
|
|
158
|
-
return `${label} uses unsupported non-AskExe image ${trimmed}; customer app images must come from pinned ghcr.io/askexe images`;
|
|
158
|
+
return `${label} uses unsupported non-AskExe image ${trimmed}; customer app images must come from pinned update.askexe.com/askexe or ghcr.io/askexe images`;
|
|
159
159
|
}
|
|
160
160
|
function collectProductionDeployGateIssues(plan, envRaw, composeRaw) {
|
|
161
161
|
const issues = [];
|
|
@@ -209,7 +209,7 @@ function assertProductionDeployGate(plan, envRaw, composeRaw, options = {}) {
|
|
|
209
209
|
}
|
|
210
210
|
const details = issues.map((issue) => `- [${issue.kind}] ${issue.message}`).join("\n");
|
|
211
211
|
throw new Error(
|
|
212
|
-
`Production deploy gate failed. Exe OS deploys must use pinned ghcr.io/askexe or
|
|
212
|
+
`Production deploy gate failed. Exe OS deploys must use pinned ghcr.io/askexe or update.askexe.com/askexe images and must not build from source on the VPS.
|
|
213
213
|
${details}
|
|
214
214
|
Emergency override requires --break-glass <reason> and writes an audit file.`
|
|
215
215
|
);
|
package/dist/lib/exe-daemon.js
CHANGED
|
@@ -2171,7 +2171,7 @@ async function startReviewPolling() {
|
|
|
2171
2171
|
lastNudgeSent: /* @__PURE__ */ new Map(),
|
|
2172
2172
|
intervalMs: REVIEW_POLL_INTERVAL_MS
|
|
2173
2173
|
};
|
|
2174
|
-
const { pollReviewNudge, createReviewNudgeRealDeps, loadNudgeState } = await import("../daemon-orchestration-
|
|
2174
|
+
const { pollReviewNudge, createReviewNudgeRealDeps, loadNudgeState } = await import("../daemon-orchestration-N5GPEP4F.js");
|
|
2175
2175
|
const nudgeState = loadNudgeState();
|
|
2176
2176
|
const tick = async () => {
|
|
2177
2177
|
fired("review_polling");
|
|
@@ -2213,7 +2213,7 @@ function startSessionTTL() {
|
|
|
2213
2213
|
if (!await ensureStoreForPolling()) return;
|
|
2214
2214
|
try {
|
|
2215
2215
|
const { getClient: getClient2 } = await import("./database.js");
|
|
2216
|
-
const { checkSessionTTL, createSessionTTLRealDeps } = await import("../daemon-orchestration-
|
|
2216
|
+
const { checkSessionTTL, createSessionTTLRealDeps } = await import("../daemon-orchestration-N5GPEP4F.js");
|
|
2217
2217
|
const deps = createSessionTTLRealDeps(getClient2);
|
|
2218
2218
|
const killed = await checkSessionTTL(deps);
|
|
2219
2219
|
if (killed.length > 0) acted("session_ttl");
|
|
@@ -2262,7 +2262,7 @@ function startIdleKill() {
|
|
|
2262
2262
|
const cfg = await getCachedConfig();
|
|
2263
2263
|
if (!cfg) return;
|
|
2264
2264
|
const { getClient: getClient2 } = await import("./database.js");
|
|
2265
|
-
const { pollIdleKill, createIdleKillRealDeps } = await import("../daemon-orchestration-
|
|
2265
|
+
const { pollIdleKill, createIdleKillRealDeps } = await import("../daemon-orchestration-N5GPEP4F.js");
|
|
2266
2266
|
const deps = createIdleKillRealDeps(
|
|
2267
2267
|
getClient2,
|
|
2268
2268
|
cfg.sessionLifecycle.idleKillIntercomAckWindowMs
|
|
@@ -2819,7 +2819,7 @@ function startOrphanReaper() {
|
|
|
2819
2819
|
const tick = async () => {
|
|
2820
2820
|
fired("orphan_reaper");
|
|
2821
2821
|
try {
|
|
2822
|
-
const { reapOrphanedMcpProcesses, createOrphanReaperRealDeps } = await import("../daemon-orchestration-
|
|
2822
|
+
const { reapOrphanedMcpProcesses, createOrphanReaperRealDeps } = await import("../daemon-orchestration-N5GPEP4F.js");
|
|
2823
2823
|
const deps = createOrphanReaperRealDeps();
|
|
2824
2824
|
const reaped = await reapOrphanedMcpProcesses(deps);
|
|
2825
2825
|
if (reaped.length > 0) acted("orphan_reaper");
|
|
@@ -2843,7 +2843,7 @@ function startZombieAgentReaper() {
|
|
|
2843
2843
|
const tick = async () => {
|
|
2844
2844
|
fired("zombie_agent_reaper");
|
|
2845
2845
|
try {
|
|
2846
|
-
const { reapZombieAgentProcesses, createZombieAgentReaperRealDeps } = await import("../daemon-orchestration-
|
|
2846
|
+
const { reapZombieAgentProcesses, createZombieAgentReaperRealDeps } = await import("../daemon-orchestration-N5GPEP4F.js");
|
|
2847
2847
|
const deps = createZombieAgentReaperRealDeps();
|
|
2848
2848
|
const reaped = reapZombieAgentProcesses(deps);
|
|
2849
2849
|
if (reaped.length > 0) acted("zombie_agent_reaper");
|
|
@@ -2866,7 +2866,7 @@ function startWorktreeReaper() {
|
|
|
2866
2866
|
const tick = async () => {
|
|
2867
2867
|
fired("worktree_reaper");
|
|
2868
2868
|
try {
|
|
2869
|
-
const { reapOrphanedWorktrees, createWorktreeReaperRealDeps } = await import("../daemon-orchestration-
|
|
2869
|
+
const { reapOrphanedWorktrees, createWorktreeReaperRealDeps } = await import("../daemon-orchestration-N5GPEP4F.js");
|
|
2870
2870
|
const deps = await createWorktreeReaperRealDeps();
|
|
2871
2871
|
const result = await reapOrphanedWorktrees(deps);
|
|
2872
2872
|
if (result.pruned.length > 0) {
|
|
@@ -2915,7 +2915,7 @@ function startStuckTaskRelease() {
|
|
|
2915
2915
|
if (!await ensureStoreForPolling()) return;
|
|
2916
2916
|
try {
|
|
2917
2917
|
const { getClient: getClient2 } = await import("./database.js");
|
|
2918
|
-
const { releaseStuckTasks, createStuckTaskRealDeps } = await import("../daemon-orchestration-
|
|
2918
|
+
const { releaseStuckTasks, createStuckTaskRealDeps } = await import("../daemon-orchestration-N5GPEP4F.js");
|
|
2919
2919
|
const deps = createStuckTaskRealDeps(getClient2);
|
|
2920
2920
|
const released = await releaseStuckTasks(deps);
|
|
2921
2921
|
if (released.length > 0) {
|
|
@@ -1,9 +1,9 @@
|
|
|
1
1
|
import {
|
|
2
2
|
registerAllTools
|
|
3
|
-
} from "../chunk-
|
|
3
|
+
} from "../chunk-4F4SOCKN.js";
|
|
4
4
|
import "../chunk-PLNYW6PA.js";
|
|
5
5
|
import "../chunk-AFJWUI3Y.js";
|
|
6
|
-
import "../chunk-
|
|
6
|
+
import "../chunk-7JCK6TXX.js";
|
|
7
7
|
import "../chunk-GHCVD7WV.js";
|
|
8
8
|
import "../chunk-WZTQUBIE.js";
|
|
9
9
|
import "../chunk-KH5Y6RR4.js";
|
package/dist/mcp/server.js
CHANGED
|
@@ -3,7 +3,7 @@ import {
|
|
|
3
3
|
} from "../chunk-V4TZI6EO.js";
|
|
4
4
|
import {
|
|
5
5
|
registerAllTools
|
|
6
|
-
} from "../chunk-
|
|
6
|
+
} from "../chunk-4F4SOCKN.js";
|
|
7
7
|
import {
|
|
8
8
|
initLicenseGate
|
|
9
9
|
} from "../chunk-PLNYW6PA.js";
|
|
@@ -11,7 +11,7 @@ import {
|
|
|
11
11
|
startToolTelemetryFlush,
|
|
12
12
|
wrapServerWithTelemetry
|
|
13
13
|
} from "../chunk-AFJWUI3Y.js";
|
|
14
|
-
import "../chunk-
|
|
14
|
+
import "../chunk-7JCK6TXX.js";
|
|
15
15
|
import "../chunk-GHCVD7WV.js";
|
|
16
16
|
import "../chunk-WZTQUBIE.js";
|
|
17
17
|
import "../chunk-KH5Y6RR4.js";
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@askexenow/exe-os",
|
|
3
|
-
"version": "0.9.
|
|
3
|
+
"version": "0.9.197",
|
|
4
4
|
"description": "AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.",
|
|
5
5
|
"license": "SEE LICENSE IN LICENSE",
|
|
6
6
|
"type": "module",
|
package/release-notes.json
CHANGED
|
@@ -1,6 +1,206 @@
|
|
|
1
1
|
{
|
|
2
|
-
"current": "0.9.
|
|
2
|
+
"current": "0.9.197",
|
|
3
3
|
"notes": {
|
|
4
|
+
"0.9.197": {
|
|
5
|
+
"version": "0.9.197",
|
|
6
|
+
"date": "2026-06-02",
|
|
7
|
+
"features": [
|
|
8
|
+
"consolidate registry.askexe.com → update.askexe.com as primary registry (#51)",
|
|
9
|
+
"nginx /v2/ route for Docker registry proxy on update.askexe.com",
|
|
10
|
+
"consolidate registry into update.askexe.com — license key = pull auth",
|
|
11
|
+
"scale daemon heap to 25% of system RAM, support 10+ coordinators",
|
|
12
|
+
"add query expansion + benchmark results to retrieval platform procedure",
|
|
13
|
+
"3-mode BEAM benchmark — FTS vs FTS+Graph vs Hybrid",
|
|
14
|
+
"wire update.askexe.com — billing schema + non-fatal image credentials",
|
|
15
|
+
"add 'never defer' platform procedure — fix it now or assign it now",
|
|
16
|
+
"BEAM multi-tier support — 100K, 1M, 10M token scales",
|
|
17
|
+
"MemoryAgentBench harness — ICLR 2026 benchmark",
|
|
18
|
+
"support outbox flusher + list_tasks null fix + doctor outbox status",
|
|
19
|
+
"bug report outbox flusher — reports reach AskExe even when daemon is dead",
|
|
20
|
+
"add daily-summary CLI entry point + enable tsup build",
|
|
21
|
+
"add daemon observability platform procedure",
|
|
22
|
+
"add retrieval architecture platform procedure for 8-16GB machines",
|
|
23
|
+
"graceful shutdown warning via intercom 90s before idle kill",
|
|
24
|
+
"upload pre-update snapshot to R2 before every stack-update",
|
|
25
|
+
"encrypted daily VPS backups with R2 cloud upload",
|
|
26
|
+
"conversation history import — parser + MCP tool + CLI",
|
|
27
|
+
"add vps-backup + vps-health-gate scripts with stack-update integration",
|
|
28
|
+
"add update_bug_report + update_feature_request MCP tools",
|
|
29
|
+
"VPS guardrails — Postgres backup cron + post-deploy health gate",
|
|
30
|
+
"co-occurrence edges + graph backfill script",
|
|
31
|
+
"write-time entity/relationship extraction from memory text",
|
|
32
|
+
"parallel retrieval (FTS+graph+embed) with _source attribution"
|
|
33
|
+
],
|
|
34
|
+
"fixes": [
|
|
35
|
+
"typecheck errors blocking publish — async embed alert + dead code cleanup",
|
|
36
|
+
"session TTL uses registry registeredAt instead of tmux session_created",
|
|
37
|
+
"CRM auth defaults + benchmark beam.ts updates",
|
|
38
|
+
"enable GoTrue email auth by default in setup template",
|
|
39
|
+
"intercom signal path in packaged source — ships to customers on npm install",
|
|
40
|
+
"intercom signal path + registry consolidated to update.askexe.com",
|
|
41
|
+
"4 customer P2 bugs — CLI passthrough + agent casing + clipboard (#50)",
|
|
42
|
+
"MCP pressure eviction evicts ONE session, not all",
|
|
43
|
+
"GHCR registry escape hatch + feature request 400 payload fix",
|
|
44
|
+
"WS client graceful failure on CF 1101 + capped backoff",
|
|
45
|
+
"3 of 4 customer P2 bugs — CLI passthrough + agent casing + clipboard",
|
|
46
|
+
"remove auto-close on session end (source persisted this time)",
|
|
47
|
+
"parallel Tom isolation — task-scoped branches + multi-instance task lookup",
|
|
48
|
+
"downgrade multi-coordinator hard-fail to warning",
|
|
49
|
+
"daemon RSS reconnect + review push notify + hot_entities timestamp",
|
|
50
|
+
"HYGO stack-update blockers — volume regex + memory_audit --fix",
|
|
51
|
+
"spawn CWD cross-project contamination + identity load ordering",
|
|
52
|
+
"MCP hot-reload checks agent context for COO role, not just env var",
|
|
53
|
+
"eliminate cross-session dispatch bug in create_task",
|
|
54
|
+
"bug/feature report upstream updates — PATCH→POST with action field",
|
|
55
|
+
"strip stale X-Exe-Session from global config + guard against re-adding",
|
|
56
|
+
"BEAM CLaRa — direct JSON response instead of tool_use, bump max_tokens",
|
|
57
|
+
"BEAM CLaRa benchmark — correct endpoint + configurable model",
|
|
58
|
+
"MCP session dedup false positive + BEAM CLaRa benchmark mode",
|
|
59
|
+
"prevent false-positive duplicate eviction for multi-coordinator sessions"
|
|
60
|
+
],
|
|
61
|
+
"security": [
|
|
62
|
+
"fix shell injection, SSRF, socket leaks, backup validation",
|
|
63
|
+
"bump v0.9.139 — 2 CRITICAL security fixes, 14 bug fixes, 6 features, customer config preservation",
|
|
64
|
+
"fix 2 CRITICAL + 1 HIGH from post-fix audit",
|
|
65
|
+
"validate X-Agent-Role against roster — prevent privilege escalation",
|
|
66
|
+
"release: stack v0.9.8 — security hardening + Hygo bug fixes",
|
|
67
|
+
"add webhook HMAC-SHA256 validation + disable query param auth in prod",
|
|
68
|
+
"pin GitHub Actions to SHAs, update jose to 6.2.3",
|
|
69
|
+
"harden support intake against abuse and data leakage",
|
|
70
|
+
"bump to v0.9.22 — Codex MCP parity + customer bug fixes + security audit remediation",
|
|
71
|
+
"audit: pre-hygo exe-gateway security report",
|
|
72
|
+
"add SECURITY.md — trust document for pre-install security evaluation",
|
|
73
|
+
"fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
|
|
74
|
+
],
|
|
75
|
+
"other": [
|
|
76
|
+
"bump to 0.9.197 — TTL fix + registry consolidation + TS fixes",
|
|
77
|
+
"update all manifest images to update.askexe.com + compose + beam tuning",
|
|
78
|
+
"bump to 0.9.196",
|
|
79
|
+
"bump to 0.9.195",
|
|
80
|
+
"bump to 0.9.194",
|
|
81
|
+
"bump to 0.9.193",
|
|
82
|
+
"bump to 0.9.192",
|
|
83
|
+
"bump to 0.9.191",
|
|
84
|
+
"bump to 0.9.189",
|
|
85
|
+
"bump to 0.9.188 — HYGO stack-update blockers fixed",
|
|
86
|
+
"bump to 0.9.187",
|
|
87
|
+
"bump to 0.9.186 — cross-session dispatch fix",
|
|
88
|
+
"release: bump exe-os image to v0.9.185 in stack manifest",
|
|
89
|
+
"bump to 0.9.185",
|
|
90
|
+
"bump to 0.9.184",
|
|
91
|
+
"bump to 0.9.183",
|
|
92
|
+
"bump to 0.9.181 — BEAM 3-mode + query expansion",
|
|
93
|
+
"bump to 0.9.180 — complete worktree isolation",
|
|
94
|
+
"bump to 0.9.179",
|
|
95
|
+
"bump to 0.9.178 — Bob's null fixes merged",
|
|
96
|
+
"bump to 0.9.177",
|
|
97
|
+
"bump to 0.9.176",
|
|
98
|
+
"bump to 0.9.175",
|
|
99
|
+
"bump to 0.9.174 — Bob's daemon hardening merged",
|
|
100
|
+
"bump to 0.9.173"
|
|
101
|
+
],
|
|
102
|
+
"migration_notes": []
|
|
103
|
+
},
|
|
104
|
+
"0.9.196": {
|
|
105
|
+
"version": "0.9.196",
|
|
106
|
+
"date": "2026-06-02",
|
|
107
|
+
"features": [
|
|
108
|
+
"consolidate registry.askexe.com → update.askexe.com as primary registry (#51)",
|
|
109
|
+
"nginx /v2/ route for Docker registry proxy on update.askexe.com",
|
|
110
|
+
"consolidate registry into update.askexe.com — license key = pull auth",
|
|
111
|
+
"scale daemon heap to 25% of system RAM, support 10+ coordinators",
|
|
112
|
+
"add query expansion + benchmark results to retrieval platform procedure",
|
|
113
|
+
"3-mode BEAM benchmark — FTS vs FTS+Graph vs Hybrid",
|
|
114
|
+
"wire update.askexe.com — billing schema + non-fatal image credentials",
|
|
115
|
+
"add 'never defer' platform procedure — fix it now or assign it now",
|
|
116
|
+
"BEAM multi-tier support — 100K, 1M, 10M token scales",
|
|
117
|
+
"MemoryAgentBench harness — ICLR 2026 benchmark",
|
|
118
|
+
"support outbox flusher + list_tasks null fix + doctor outbox status",
|
|
119
|
+
"bug report outbox flusher — reports reach AskExe even when daemon is dead",
|
|
120
|
+
"add daily-summary CLI entry point + enable tsup build",
|
|
121
|
+
"add daemon observability platform procedure",
|
|
122
|
+
"add retrieval architecture platform procedure for 8-16GB machines",
|
|
123
|
+
"graceful shutdown warning via intercom 90s before idle kill",
|
|
124
|
+
"upload pre-update snapshot to R2 before every stack-update",
|
|
125
|
+
"encrypted daily VPS backups with R2 cloud upload",
|
|
126
|
+
"conversation history import — parser + MCP tool + CLI",
|
|
127
|
+
"add vps-backup + vps-health-gate scripts with stack-update integration",
|
|
128
|
+
"add update_bug_report + update_feature_request MCP tools",
|
|
129
|
+
"VPS guardrails — Postgres backup cron + post-deploy health gate",
|
|
130
|
+
"co-occurrence edges + graph backfill script",
|
|
131
|
+
"write-time entity/relationship extraction from memory text",
|
|
132
|
+
"parallel retrieval (FTS+graph+embed) with _source attribution"
|
|
133
|
+
],
|
|
134
|
+
"fixes": [
|
|
135
|
+
"typecheck errors blocking publish — async embed alert + dead code cleanup",
|
|
136
|
+
"session TTL uses registry registeredAt instead of tmux session_created",
|
|
137
|
+
"CRM auth defaults + benchmark beam.ts updates",
|
|
138
|
+
"enable GoTrue email auth by default in setup template",
|
|
139
|
+
"intercom signal path in packaged source — ships to customers on npm install",
|
|
140
|
+
"intercom signal path + registry consolidated to update.askexe.com",
|
|
141
|
+
"4 customer P2 bugs — CLI passthrough + agent casing + clipboard (#50)",
|
|
142
|
+
"MCP pressure eviction evicts ONE session, not all",
|
|
143
|
+
"GHCR registry escape hatch + feature request 400 payload fix",
|
|
144
|
+
"WS client graceful failure on CF 1101 + capped backoff",
|
|
145
|
+
"3 of 4 customer P2 bugs — CLI passthrough + agent casing + clipboard",
|
|
146
|
+
"remove auto-close on session end (source persisted this time)",
|
|
147
|
+
"parallel Tom isolation — task-scoped branches + multi-instance task lookup",
|
|
148
|
+
"downgrade multi-coordinator hard-fail to warning",
|
|
149
|
+
"daemon RSS reconnect + review push notify + hot_entities timestamp",
|
|
150
|
+
"HYGO stack-update blockers — volume regex + memory_audit --fix",
|
|
151
|
+
"spawn CWD cross-project contamination + identity load ordering",
|
|
152
|
+
"MCP hot-reload checks agent context for COO role, not just env var",
|
|
153
|
+
"eliminate cross-session dispatch bug in create_task",
|
|
154
|
+
"bug/feature report upstream updates — PATCH→POST with action field",
|
|
155
|
+
"strip stale X-Exe-Session from global config + guard against re-adding",
|
|
156
|
+
"BEAM CLaRa — direct JSON response instead of tool_use, bump max_tokens",
|
|
157
|
+
"BEAM CLaRa benchmark — correct endpoint + configurable model",
|
|
158
|
+
"MCP session dedup false positive + BEAM CLaRa benchmark mode",
|
|
159
|
+
"prevent false-positive duplicate eviction for multi-coordinator sessions"
|
|
160
|
+
],
|
|
161
|
+
"security": [
|
|
162
|
+
"fix shell injection, SSRF, socket leaks, backup validation",
|
|
163
|
+
"bump v0.9.139 — 2 CRITICAL security fixes, 14 bug fixes, 6 features, customer config preservation",
|
|
164
|
+
"fix 2 CRITICAL + 1 HIGH from post-fix audit",
|
|
165
|
+
"validate X-Agent-Role against roster — prevent privilege escalation",
|
|
166
|
+
"release: stack v0.9.8 — security hardening + Hygo bug fixes",
|
|
167
|
+
"add webhook HMAC-SHA256 validation + disable query param auth in prod",
|
|
168
|
+
"pin GitHub Actions to SHAs, update jose to 6.2.3",
|
|
169
|
+
"harden support intake against abuse and data leakage",
|
|
170
|
+
"bump to v0.9.22 — Codex MCP parity + customer bug fixes + security audit remediation",
|
|
171
|
+
"audit: pre-hygo exe-gateway security report",
|
|
172
|
+
"add SECURITY.md — trust document for pre-install security evaluation",
|
|
173
|
+
"fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
|
|
174
|
+
],
|
|
175
|
+
"other": [
|
|
176
|
+
"update all manifest images to update.askexe.com + compose + beam tuning",
|
|
177
|
+
"bump to 0.9.196",
|
|
178
|
+
"bump to 0.9.195",
|
|
179
|
+
"bump to 0.9.194",
|
|
180
|
+
"bump to 0.9.193",
|
|
181
|
+
"bump to 0.9.192",
|
|
182
|
+
"bump to 0.9.191",
|
|
183
|
+
"bump to 0.9.189",
|
|
184
|
+
"bump to 0.9.188 — HYGO stack-update blockers fixed",
|
|
185
|
+
"bump to 0.9.187",
|
|
186
|
+
"bump to 0.9.186 — cross-session dispatch fix",
|
|
187
|
+
"release: bump exe-os image to v0.9.185 in stack manifest",
|
|
188
|
+
"bump to 0.9.185",
|
|
189
|
+
"bump to 0.9.184",
|
|
190
|
+
"bump to 0.9.183",
|
|
191
|
+
"bump to 0.9.181 — BEAM 3-mode + query expansion",
|
|
192
|
+
"bump to 0.9.180 — complete worktree isolation",
|
|
193
|
+
"bump to 0.9.179",
|
|
194
|
+
"bump to 0.9.178 — Bob's null fixes merged",
|
|
195
|
+
"bump to 0.9.177",
|
|
196
|
+
"bump to 0.9.176",
|
|
197
|
+
"bump to 0.9.175",
|
|
198
|
+
"bump to 0.9.174 — Bob's daemon hardening merged",
|
|
199
|
+
"bump to 0.9.173",
|
|
200
|
+
"bump to 0.9.172"
|
|
201
|
+
],
|
|
202
|
+
"migration_notes": []
|
|
203
|
+
},
|
|
4
204
|
"0.9.162": {
|
|
5
205
|
"version": "0.9.162",
|
|
6
206
|
"date": "2026-06-02",
|
|
@@ -309,212 +509,6 @@
|
|
|
309
509
|
"If daemon goes down, agents will now fail instead of silently",
|
|
310
510
|
"exe-daemon.ts kills old embed.pid process and cleans up"
|
|
311
511
|
]
|
|
312
|
-
},
|
|
313
|
-
"0.9.158": {
|
|
314
|
-
"version": "0.9.158",
|
|
315
|
-
"date": "2026-05-28",
|
|
316
|
-
"features": [
|
|
317
|
-
"stack manifest 0.9.10 — all new images for customer deployment",
|
|
318
|
-
"update safety + portable backups + restore",
|
|
319
|
-
"complete deployment readiness — all 14 second-pass blind spots fixed",
|
|
320
|
-
"production-ready stack — all 15 blind spots fixed",
|
|
321
|
-
"blocked task notification — ping dispatcher immediately on status change",
|
|
322
|
-
"self-improving skills — usage tracking, success counting, and refinement daemon",
|
|
323
|
-
"4 retrieval improvements — query expansion, stop words, contradiction resolution, abstention",
|
|
324
|
-
"competitive roadmap — serverless tier, identity depth, self-improving skills, user modeling",
|
|
325
|
-
"run database migrations before container swap in stack-update",
|
|
326
|
-
"graph auto-extract from ARCHITECTURE.md — regex-based entity/relationship extraction",
|
|
327
|
-
"migrate cloud.askexe.com → api.askexe.com as canonical endpoint",
|
|
328
|
-
"federated recall — code_context + graph fallback when memory results weak",
|
|
329
|
-
"migrate cloud.askexe.com → api.askexe.com across all src/ defaults",
|
|
330
|
-
"rolling restart in stack-update — one service at a time with health verification",
|
|
331
|
-
"DMR benchmark harness + LoCoMo improvements for v0.9.145 evaluation",
|
|
332
|
-
"Windows/WSL support — WezTerm config + WSL detection in setup wizard",
|
|
333
|
-
"queryTaskRows() consolidation — single scoped query path for all task list operations",
|
|
334
|
-
"review signal files — reliable reviewer notification on update_task(done)",
|
|
335
|
-
"Ghostty-native notifications via OSC 9 — no more Script Editor popup",
|
|
336
|
-
"device-scoped behaviors — device_id column + filter in loading",
|
|
337
|
-
"dispatch reliability — 45s boot timeout, dispatch ack signals, agent heartbeat",
|
|
338
|
-
"setup wizard headless mode + daemon health check after restart",
|
|
339
|
-
"device-scoped behaviors — add device_id column + filter on load",
|
|
340
|
-
"gateway prompt injection defense — 3-tier security hardening",
|
|
341
|
-
"add diagnostics(action=\"merge_agent_memories\") for reassigning memories across agent IDs"
|
|
342
|
-
],
|
|
343
|
-
"fixes": [
|
|
344
|
-
"support API — verified encrypted bug reports work (HTTP 201)",
|
|
345
|
-
"support API accepts encrypted bug reports — prevents HTTP 400",
|
|
346
|
-
"Codex agents recheck tasks before stopping — prevents idle-with-open-tasks",
|
|
347
|
-
"P0 #13 session_scope in cleanup SELECT + P0 #6 wire review signal files",
|
|
348
|
-
"add scope import to prompt-submit — gate pass",
|
|
349
|
-
"add writeFileSync import to config.ts",
|
|
350
|
-
"persist cloud endpoint migration to config.json — stop logging on every boot",
|
|
351
|
-
"include memory_type in pushToPostgres metadata — was stripped on sync",
|
|
352
|
-
"add scope import to daemon-orchestration — satisfies customer-readiness gate",
|
|
353
|
-
"skill-refinement.ts — correct writeMemory field names + updateIdentity 3rd arg",
|
|
354
|
-
"make skill lifecycle fields optional on Behavior interface — unblocks publish",
|
|
355
|
-
"session isolation for tmux kill — block cross-scope session kills",
|
|
356
|
-
"session-scope daemon, push, capacity, and cleanup (P0 #7-#13)",
|
|
357
|
-
"add memory_type to crdt-sync MemoryRecord interface — unblocks publish",
|
|
358
|
-
"session-scope daemon, push, capacity, cleanup (P0 #7-#9, #13)",
|
|
359
|
-
"include memory_type in cloud sync push/pull + fix backfill re-sync",
|
|
360
|
-
"session-scope signal file system — prevent cross-session task/review bleed",
|
|
361
|
-
"session-scope notification routing — use row.session_scope over ambient",
|
|
362
|
-
"daemon NEVER guesses session from tmux — header-only routing",
|
|
363
|
-
"3 daemon bugs — context-full TTL override, API watchdog kill-after-3, idle-kill verify",
|
|
364
|
-
"federated recall always searches code_context + graph — count threshold was useless",
|
|
365
|
-
"make cross-repo guardrail task-aware — allow multi-repo work when task scope permits",
|
|
366
|
-
"ONE postgres — replace crm-postgres with exe-db across entire stack",
|
|
367
|
-
"smart session-scoping gate + last boot cleanup leak + triage_bug docs",
|
|
368
|
-
"add shipped_version to support triage + clean platform procedures"
|
|
369
|
-
],
|
|
370
|
-
"security": [
|
|
371
|
-
"fix shell injection, SSRF, socket leaks, backup validation",
|
|
372
|
-
"bump v0.9.139 — 2 CRITICAL security fixes, 14 bug fixes, 6 features, customer config preservation",
|
|
373
|
-
"fix 2 CRITICAL + 1 HIGH from post-fix audit",
|
|
374
|
-
"validate X-Agent-Role against roster — prevent privilege escalation",
|
|
375
|
-
"release: stack v0.9.8 — security hardening + Hygo bug fixes",
|
|
376
|
-
"add webhook HMAC-SHA256 validation + disable query param auth in prod",
|
|
377
|
-
"pin GitHub Actions to SHAs, update jose to 6.2.3",
|
|
378
|
-
"harden support intake against abuse and data leakage",
|
|
379
|
-
"bump to v0.9.22 — Codex MCP parity + customer bug fixes + security audit remediation",
|
|
380
|
-
"audit: pre-hygo exe-gateway security report",
|
|
381
|
-
"add SECURITY.md — trust document for pre-install security evaluation",
|
|
382
|
-
"fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
|
|
383
|
-
],
|
|
384
|
-
"other": [
|
|
385
|
-
"rename memory schema → graph across codebase",
|
|
386
|
-
"unified access control — admin token + GoTrue across all services",
|
|
387
|
-
"capture data pipeline spec — raw → filter → wiki + CRM projection",
|
|
388
|
-
"bump to v0.9.149 — task lifecycle simplification + review notification fix",
|
|
389
|
-
"capture gateway connection observability requirements (2026-05-28)",
|
|
390
|
-
"bump to v0.9.146 for publish",
|
|
391
|
-
"Windows support architecture — WezTerm + WSL decision (2026-05-27)",
|
|
392
|
-
"Merge branch 'tom4-work' — device-scoped behaviors + push-notification fix",
|
|
393
|
-
"bump to v0.9.145 for publish",
|
|
394
|
-
"revert: keep workflow files unchanged — GitHub OAuth blocks workflow scope",
|
|
395
|
-
"stage remaining Yoshi fixes — features + bug cleanup",
|
|
396
|
-
"add tests for daemon restart orchestrator module",
|
|
397
|
-
"publish v0.9.144 — ESM require() fix + reliable task signals + OAuth 2.1",
|
|
398
|
-
"add MCP tool tests for message, cloud-sync, and file-copy",
|
|
399
|
-
"add coverage for send_message, cloud_sync, file_copy MCP tools (Track A)",
|
|
400
|
-
"Recover MCP sessions after daemon restart",
|
|
401
|
-
"publish v0.9.143 — all fixes live",
|
|
402
|
-
"publish v0.9.142",
|
|
403
|
-
"publish v0.9.141",
|
|
404
|
-
"ops: journalctl rotation + certbot expiry alerting",
|
|
405
|
-
"revert: daemon heap back to 33% of RAM — no artificial cap",
|
|
406
|
-
"v0.9.140 publish + heap cap 4GB (was 33% unbounded)",
|
|
407
|
-
"PG-1 cross-repo entity federation design document",
|
|
408
|
-
"add lint step + automated npm publish workflow",
|
|
409
|
-
"audit: scoped SQL + package budget + TUI vendored + TODO classification"
|
|
410
|
-
],
|
|
411
|
-
"migration_notes": [
|
|
412
|
-
"If daemon goes down, agents will now fail instead of silently",
|
|
413
|
-
"exe-daemon.ts kills old embed.pid process and cleans up"
|
|
414
|
-
]
|
|
415
|
-
},
|
|
416
|
-
"0.9.157": {
|
|
417
|
-
"version": "0.9.157",
|
|
418
|
-
"date": "2026-05-28",
|
|
419
|
-
"features": [
|
|
420
|
-
"update safety + portable backups + restore",
|
|
421
|
-
"complete deployment readiness — all 14 second-pass blind spots fixed",
|
|
422
|
-
"production-ready stack — all 15 blind spots fixed",
|
|
423
|
-
"blocked task notification — ping dispatcher immediately on status change",
|
|
424
|
-
"self-improving skills — usage tracking, success counting, and refinement daemon",
|
|
425
|
-
"4 retrieval improvements — query expansion, stop words, contradiction resolution, abstention",
|
|
426
|
-
"competitive roadmap — serverless tier, identity depth, self-improving skills, user modeling",
|
|
427
|
-
"run database migrations before container swap in stack-update",
|
|
428
|
-
"graph auto-extract from ARCHITECTURE.md — regex-based entity/relationship extraction",
|
|
429
|
-
"migrate cloud.askexe.com → api.askexe.com as canonical endpoint",
|
|
430
|
-
"federated recall — code_context + graph fallback when memory results weak",
|
|
431
|
-
"migrate cloud.askexe.com → api.askexe.com across all src/ defaults",
|
|
432
|
-
"rolling restart in stack-update — one service at a time with health verification",
|
|
433
|
-
"DMR benchmark harness + LoCoMo improvements for v0.9.145 evaluation",
|
|
434
|
-
"Windows/WSL support — WezTerm config + WSL detection in setup wizard",
|
|
435
|
-
"queryTaskRows() consolidation — single scoped query path for all task list operations",
|
|
436
|
-
"review signal files — reliable reviewer notification on update_task(done)",
|
|
437
|
-
"Ghostty-native notifications via OSC 9 — no more Script Editor popup",
|
|
438
|
-
"device-scoped behaviors — device_id column + filter in loading",
|
|
439
|
-
"dispatch reliability — 45s boot timeout, dispatch ack signals, agent heartbeat",
|
|
440
|
-
"setup wizard headless mode + daemon health check after restart",
|
|
441
|
-
"device-scoped behaviors — add device_id column + filter on load",
|
|
442
|
-
"gateway prompt injection defense — 3-tier security hardening",
|
|
443
|
-
"add diagnostics(action=\"merge_agent_memories\") for reassigning memories across agent IDs",
|
|
444
|
-
"add task dependency tree visualization (action=dependency_tree)"
|
|
445
|
-
],
|
|
446
|
-
"fixes": [
|
|
447
|
-
"add scope import to prompt-submit — gate pass",
|
|
448
|
-
"add writeFileSync import to config.ts",
|
|
449
|
-
"persist cloud endpoint migration to config.json — stop logging on every boot",
|
|
450
|
-
"include memory_type in pushToPostgres metadata — was stripped on sync",
|
|
451
|
-
"add scope import to daemon-orchestration — satisfies customer-readiness gate",
|
|
452
|
-
"skill-refinement.ts — correct writeMemory field names + updateIdentity 3rd arg",
|
|
453
|
-
"make skill lifecycle fields optional on Behavior interface — unblocks publish",
|
|
454
|
-
"session isolation for tmux kill — block cross-scope session kills",
|
|
455
|
-
"session-scope daemon, push, capacity, and cleanup (P0 #7-#13)",
|
|
456
|
-
"add memory_type to crdt-sync MemoryRecord interface — unblocks publish",
|
|
457
|
-
"session-scope daemon, push, capacity, cleanup (P0 #7-#9, #13)",
|
|
458
|
-
"include memory_type in cloud sync push/pull + fix backfill re-sync",
|
|
459
|
-
"session-scope signal file system — prevent cross-session task/review bleed",
|
|
460
|
-
"session-scope notification routing — use row.session_scope over ambient",
|
|
461
|
-
"daemon NEVER guesses session from tmux — header-only routing",
|
|
462
|
-
"3 daemon bugs — context-full TTL override, API watchdog kill-after-3, idle-kill verify",
|
|
463
|
-
"federated recall always searches code_context + graph — count threshold was useless",
|
|
464
|
-
"make cross-repo guardrail task-aware — allow multi-repo work when task scope permits",
|
|
465
|
-
"ONE postgres — replace crm-postgres with exe-db across entire stack",
|
|
466
|
-
"smart session-scoping gate + last boot cleanup leak + triage_bug docs",
|
|
467
|
-
"add shipped_version to support triage + clean platform procedures",
|
|
468
|
-
"close remaining session-scoping findings from Bob's audit",
|
|
469
|
-
"close 3 more session-scoping leaks from Bob's audit (LEAK-4, LEAK-7, LEAK-8)",
|
|
470
|
-
"diagnostics check_update ENOENT + healthcheck timeout",
|
|
471
|
-
"close 8 session-scoping leaks — daemon ALS trust + review cleanup + close-task + inbox"
|
|
472
|
-
],
|
|
473
|
-
"security": [
|
|
474
|
-
"fix shell injection, SSRF, socket leaks, backup validation",
|
|
475
|
-
"bump v0.9.139 — 2 CRITICAL security fixes, 14 bug fixes, 6 features, customer config preservation",
|
|
476
|
-
"fix 2 CRITICAL + 1 HIGH from post-fix audit",
|
|
477
|
-
"validate X-Agent-Role against roster — prevent privilege escalation",
|
|
478
|
-
"release: stack v0.9.8 — security hardening + Hygo bug fixes",
|
|
479
|
-
"add webhook HMAC-SHA256 validation + disable query param auth in prod",
|
|
480
|
-
"pin GitHub Actions to SHAs, update jose to 6.2.3",
|
|
481
|
-
"harden support intake against abuse and data leakage",
|
|
482
|
-
"bump to v0.9.22 — Codex MCP parity + customer bug fixes + security audit remediation",
|
|
483
|
-
"audit: pre-hygo exe-gateway security report",
|
|
484
|
-
"add SECURITY.md — trust document for pre-install security evaluation",
|
|
485
|
-
"fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
|
|
486
|
-
],
|
|
487
|
-
"other": [
|
|
488
|
-
"rename memory schema → graph across codebase",
|
|
489
|
-
"unified access control — admin token + GoTrue across all services",
|
|
490
|
-
"capture data pipeline spec — raw → filter → wiki + CRM projection",
|
|
491
|
-
"bump to v0.9.149 — task lifecycle simplification + review notification fix",
|
|
492
|
-
"capture gateway connection observability requirements (2026-05-28)",
|
|
493
|
-
"bump to v0.9.146 for publish",
|
|
494
|
-
"Windows support architecture — WezTerm + WSL decision (2026-05-27)",
|
|
495
|
-
"Merge branch 'tom4-work' — device-scoped behaviors + push-notification fix",
|
|
496
|
-
"bump to v0.9.145 for publish",
|
|
497
|
-
"revert: keep workflow files unchanged — GitHub OAuth blocks workflow scope",
|
|
498
|
-
"stage remaining Yoshi fixes — features + bug cleanup",
|
|
499
|
-
"add tests for daemon restart orchestrator module",
|
|
500
|
-
"publish v0.9.144 — ESM require() fix + reliable task signals + OAuth 2.1",
|
|
501
|
-
"add MCP tool tests for message, cloud-sync, and file-copy",
|
|
502
|
-
"add coverage for send_message, cloud_sync, file_copy MCP tools (Track A)",
|
|
503
|
-
"Recover MCP sessions after daemon restart",
|
|
504
|
-
"publish v0.9.143 — all fixes live",
|
|
505
|
-
"publish v0.9.142",
|
|
506
|
-
"publish v0.9.141",
|
|
507
|
-
"ops: journalctl rotation + certbot expiry alerting",
|
|
508
|
-
"revert: daemon heap back to 33% of RAM — no artificial cap",
|
|
509
|
-
"v0.9.140 publish + heap cap 4GB (was 33% unbounded)",
|
|
510
|
-
"PG-1 cross-repo entity federation design document",
|
|
511
|
-
"add lint step + automated npm publish workflow",
|
|
512
|
-
"audit: scoped SQL + package budget + TUI vendored + TODO classification"
|
|
513
|
-
],
|
|
514
|
-
"migration_notes": [
|
|
515
|
-
"If daemon goes down, agents will now fail instead of silently",
|
|
516
|
-
"exe-daemon.ts kills old embed.pid process and cleans up"
|
|
517
|
-
]
|
|
518
512
|
}
|
|
519
513
|
}
|
|
520
514
|
}
|