@askexenow/exe-os 0.9.239 → 0.9.243

package/deploy/compose/.env.customer.example

@@ -74,6 +74,18 @@ MONITOR_AGENT_LISTEN=:45876
 # --- AskExe central monitoring hub ---
 # Not included on customer VPSs. Hygo/customer deployments run exe-monitor-agent above, never the hub.
 
+# --- Cloudflare Tunnel ---
+# Token-based tunnel (recommended). Get your token:
+#   1. dash.cloudflare.com > Zero Trust > Networks > Tunnels > Create tunnel
+#   2. Choose "Cloudflared" connector, name your tunnel (e.g. "hygo-vps")
+#   3. Copy the token shown during setup
+# Then configure public hostnames in the dashboard (no config.yml needed):
+#   crm.<domain>     → http://exe-crm:3000
+#   wiki.<domain>    → http://exe-wiki:3001
+#   gateway.<domain> → http://exe-gateway:3100
+# SET_MANUALLY
+CLOUDFLARE_TUNNEL_TOKEN=CHANGEME_CLOUDFLARE_TUNNEL_TOKEN
+
 # --- License ---
 # injected by deploy_client
 EXE_LICENSE_KEY=CHANGEME_EXE_LICENSE_KEY

package/deploy/compose/.env.example

@@ -71,7 +71,7 @@ ERROR_REPORTING_ENABLED=true
 MONITOR_ERROR_URL=http://exe-monitor-hub:8090/api/exe-monitor/errors
 
 # --- ERP (optional — Exe ERP, Frappe/ERPNext fork) ---
-ERP_IMAGE_TAG=update.askexe.com/askexe/exe-erp:v0.1.0
+ERP_IMAGE_TAG=update.askexe.com/askexe/exe-erp:v0.2.0-final3
 ERP_ADMIN_PASSWORD=CHANGEME_ERP_ADMIN_PASSWORD
 ERP_SITE_NAME=erp.askexe.com
 ERP_API_PORT=8069
@@ -100,6 +100,18 @@ MONITOR_DISABLE_PASSWORD_AUTH=false
 MONITOR_USER_CREATION=true
 MONITOR_SHARE_ALL_SYSTEMS=false
 
+# --- Cloudflare Tunnel ---
+# Token-based tunnel (recommended). Get your token:
+#   1. dash.cloudflare.com > Zero Trust > Networks > Tunnels > Create tunnel
+#   2. Choose "Cloudflared" connector, name your tunnel (e.g. "hygo-vps")
+#   3. Copy the token shown during setup
+# Then configure public hostnames in the dashboard (no config.yml needed):
+#   crm.<domain>     → http://exe-crm:3000
+#   wiki.<domain>    → http://exe-wiki:3001
+#   gateway.<domain> → http://exe-gateway:3100
+# SET_MANUALLY
+CLOUDFLARE_TUNNEL_TOKEN=CHANGEME_CLOUDFLARE_TUNNEL_TOKEN
+
 # --- License ---
 # injected by deploy_client
 EXE_LICENSE_KEY=CHANGEME_EXE_LICENSE_KEY

package/deploy/compose/cloudflared/config.yml.example

@@ -1,7 +1,26 @@
-# Cloudflare Tunnel config — routes *.askexe.com to local services.
-# Copy to config.yml and replace TUNNEL_ID with your tunnel UUID.
-# Create tunnel: cloudflared tunnel create <name>
-# Then copy credentials JSON to this directory.
+# Cloudflare Tunnel config — advanced (config file) mode.
+#
+# RECOMMENDED: Use the token approach instead.
+#   1. Create a tunnel at dash.cloudflare.com > Zero Trust > Networks > Tunnels
+#   2. Copy the tunnel token and set CLOUDFLARE_TUNNEL_TOKEN in .env
+#   3. Configure public hostnames in the Cloudflare dashboard:
+#        crm.<domain>     → http://exe-crm:3000
+#        wiki.<domain>    → http://exe-wiki:3001
+#        gateway.<domain> → http://exe-gateway:3100
+#        erp.<domain>     → http://exe-erp:8000
+#        monitor.<domain> → http://exe-monitor-hub:8090
+#        auth.<domain>    → http://gotrue:9999
+#        api.<domain>     → http://exe-os:8765
+#   No config.yml or credentials file needed — the token embeds everything.
+#
+# ADVANCED (config file mode): only needed if you want to manage routes locally
+# instead of via the Cloudflare dashboard. Leave CLOUDFLARE_TUNNEL_TOKEN empty
+# and edit docker-compose.yml cloudflared command to use:
+#   tunnel --config /etc/cloudflared/config.yml run
+# Then copy this file to config.yml and fill in TUNNEL_ID + credentials.
+#
+# Get your tunnel UUID: cloudflared tunnel list
+# Get credentials JSON: cloudflared tunnel token --cred-file=<path> <name>
 
 tunnel: CHANGEME_TUNNEL_ID
 credentials-file: /etc/cloudflared/CHANGEME_TUNNEL_ID.json

package/deploy/compose/docker-compose.yml

@@ -503,15 +503,35 @@ services:
 
   # ------------------------------------------------------------------
   # Infrastructure — Cloudflare Tunnel (replaces nginx + SSL certs)
+  #
+  # Token approach (recommended): create a tunnel in the Cloudflare dashboard,
+  # copy the tunnel token, set CLOUDFLARE_TUNNEL_TOKEN in .env.
+  # Route CRM/wiki/gateway hostnames in the Cloudflare dashboard under
+  # the tunnel's Public Hostnames tab — no config.yml needed.
+  #
+  # Advanced (config file): set CLOUDFLARE_TUNNEL_TOKEN= (empty) and
+  # populate cloudflared/config.yml with tunnel ID + credentials.
+  # See cloudflared/config.yml.example for the route mappings template.
   # ------------------------------------------------------------------
 
   cloudflared:
     image: cloudflare/cloudflared:latest
     container_name: cloudflared
     restart: unless-stopped
-    command: tunnel --config /etc/cloudflared/config.yml run
-    volumes:
-      - ${CLOUDFLARED_CONFIG_DIR:-./cloudflared}:/etc/cloudflared:ro
+    # Token mode: `tunnel run --token <TOKEN>` — no local credentials file needed.
+    # The token embeds the tunnel ID + credentials; routes are managed in the CF dashboard.
+    command: >
+      tunnel run
+      --token ${CLOUDFLARE_TUNNEL_TOKEN}
+    depends_on:
+      exe-crm:
+        condition: service_healthy
+      exe-gateway:
+        condition: service_healthy
+      exe-wiki:
+        condition: service_healthy
+    environment:
+      TUNNEL_TOKEN: ${CLOUDFLARE_TUNNEL_TOKEN}
     networks:
       backend:
         ipv4_address: 10.42.0.31
@@ -535,7 +555,7 @@ services:
   # 4 services: gunicorn API, websocket, RQ worker, scheduler.
 
   exe-erp:
-    image: ${ERP_IMAGE_TAG:-update.askexe.com/askexe/exe-erp:v0.1.0}
+    image: ${ERP_IMAGE_TAG:-update.askexe.com/askexe/exe-erp:v0.2.0-final3}
     container_name: exe-erp
     restart: unless-stopped
     entrypoint: ["/usr/local/bin/entrypoint.sh"]
@@ -605,7 +625,7 @@ services:
       options: { max-size: "10m", max-file: "3" }
 
   exe-erp-websocket:
-    image: ${ERP_IMAGE_TAG:-update.askexe.com/askexe/exe-erp:v0.1.0}
+    image: ${ERP_IMAGE_TAG:-update.askexe.com/askexe/exe-erp:v0.2.0-final3}
     container_name: exe-erp-websocket
     restart: unless-stopped
     entrypoint: []
@@ -635,7 +655,7 @@ services:
       options: { max-size: "10m", max-file: "3" }
 
   exe-erp-queue:
-    image: ${ERP_IMAGE_TAG:-update.askexe.com/askexe/exe-erp:v0.1.0}
+    image: ${ERP_IMAGE_TAG:-update.askexe.com/askexe/exe-erp:v0.2.0-final3}
     container_name: exe-erp-queue
     restart: unless-stopped
     entrypoint: []
@@ -670,7 +690,7 @@ services:
       options: { max-size: "10m", max-file: "3" }
 
   exe-erp-scheduler:
-    image: ${ERP_IMAGE_TAG:-update.askexe.com/askexe/exe-erp:v0.1.0}
+    image: ${ERP_IMAGE_TAG:-update.askexe.com/askexe/exe-erp:v0.2.0-final3}
     container_name: exe-erp-scheduler
     restart: unless-stopped
     entrypoint: []

package/deploy/compose/generate-env.ts

@@ -69,7 +69,7 @@ export function generateEnv(options: GenerateEnvOptions): string {
     "",
     "# --- CRM ---",
     `CRM_IMAGE_TAG=${CRM_IMAGE_TAG}`,
-    `CRM_SERVER_URL=https://${normalizedDomain}`,
+    `CRM_SERVER_URL=https://crm.${normalizedDomain}`,
     `CRM_APP_SECRET=${randomSecret(RANDOM_SECRET_48)}`,
     `EXE_CRM_ADMIN_TOKEN=${randomSecret(RANDOM_SECRET_48)}`,
     `CRM_HOST_PORT=${CRM_HOST_PORT}`,
@@ -109,6 +109,20 @@ export function generateEnv(options: GenerateEnvOptions): string {
     "# ANTHROPIC_API_KEY=",
     `GATEWAY_HTTP_HOST_PORT=${GATEWAY_HTTP_HOST_PORT}`,
     `GATEWAY_WS_HOST_PORT=${GATEWAY_WS_HOST_PORT}`,
+    "# GoTrue SSO — enable for unified auth across all services",
+    "GATEWAY_GOTRUE_URL=http://gotrue:9999",
+    "# Error forwarding to exe-monitor-hub (strongly recommended for production)",
+    "ERROR_REPORTING_ENABLED=true",
+    "MONITOR_ERROR_URL=http://exe-monitor-hub:8090/api/exe-monitor/errors",
+    "",
+    "# --- ERP (optional — Exe ERP, Frappe/ERPNext fork) ---",
+    "ERP_IMAGE_TAG=update.askexe.com/askexe/exe-erp:v0.2.0-final3",
+    `ERP_ADMIN_PASSWORD=${randomSecret(RANDOM_SECRET_32)}`,
+    `ERP_SITE_NAME=erp.${normalizedDomain}`,
+    "ERP_API_PORT=8069",
+    "ERP_WS_PORT=9069",
+    "# ERP_SENTRY_DSN=",
+    "# MONITOR_API_KEY=   # shared with gateway error forwarding",
     "",
     "# --- Monitoring ---",
     `MONITOR_HUB_IMAGE_TAG=${MONITOR_HUB_IMAGE_TAG}`,
@@ -120,6 +134,14 @@ export function generateEnv(options: GenerateEnvOptions): string {
     `MONITOR_AGENT_LISTEN=${DEFAULT_MONITOR_AGENT_LISTEN}`,
     "MONITOR_HUB_PORT=8090",
     "",
+    "# --- Cloudflare Tunnel ---",
+    "# Token-based tunnel (recommended). Get your token:",
+    "#   1. dash.cloudflare.com > Zero Trust > Networks > Tunnels > Create tunnel",
+    "#   2. Choose \"Cloudflared\" connector, name your tunnel",
+    "#   3. Copy the token shown during setup",
+    MANUAL_VALUE_COMMENT,
+    "CLOUDFLARE_TUNNEL_TOKEN=",
+    "",
     "# --- License ---",
     LICENSE_KEY_COMMENT,
     `EXE_LICENSE_KEY=${options.licenseKey ?? EXAMPLE_LICENSE_KEY}`,
@@ -194,6 +216,20 @@ export function generateExampleEnv(): string {
     "# ANTHROPIC_API_KEY=CHANGEME_ANTHROPIC_API_KEY",
     `GATEWAY_HTTP_HOST_PORT=${GATEWAY_HTTP_HOST_PORT}`,
     `GATEWAY_WS_HOST_PORT=${GATEWAY_WS_HOST_PORT}`,
+    "# GoTrue SSO — enable for unified auth across all services",
+    "GATEWAY_GOTRUE_URL=http://gotrue:9999",
+    "# Error forwarding to exe-monitor-hub (strongly recommended for production)",
+    "ERROR_REPORTING_ENABLED=true",
+    "MONITOR_ERROR_URL=http://exe-monitor-hub:8090/api/exe-monitor/errors",
+    "",
+    "# --- ERP (optional — Exe ERP, Frappe/ERPNext fork) ---",
+    "ERP_IMAGE_TAG=update.askexe.com/askexe/exe-erp:v0.2.0-final3",
+    "ERP_ADMIN_PASSWORD=CHANGEME_ERP_ADMIN_PASSWORD",
+    "ERP_SITE_NAME=erp.askexe.com",
+    "ERP_API_PORT=8069",
+    "ERP_WS_PORT=9069",
+    "# ERP_SENTRY_DSN=",
+    "# MONITOR_API_KEY=   # shared with gateway error forwarding",
     "",
     "# --- Monitoring agent (standard for managed customer VPSs) ---",
     `MONITOR_AGENT_IMAGE_TAG=${MONITOR_AGENT_IMAGE_TAG}`,
@@ -216,6 +252,18 @@ export function generateExampleEnv(): string {
     "MONITOR_USER_CREATION=true",
     "MONITOR_SHARE_ALL_SYSTEMS=false",
     "",
+    "# --- Cloudflare Tunnel ---",
+    "# Token-based tunnel (recommended). Get your token:",
+    "#   1. dash.cloudflare.com > Zero Trust > Networks > Tunnels > Create tunnel",
+    "#   2. Choose \"Cloudflared\" connector, name your tunnel (e.g. \"hygo-vps\")",
+    "#   3. Copy the token shown during setup",
+    "# Then configure public hostnames in the dashboard (no config.yml needed):",
+    "#   crm.<domain>     → http://exe-crm:3000",
+    "#   wiki.<domain>    → http://exe-wiki:3001",
+    "#   gateway.<domain> → http://exe-gateway:3100",
+    MANUAL_VALUE_COMMENT,
+    "CLOUDFLARE_TUNNEL_TOKEN=CHANGEME_CLOUDFLARE_TUNNEL_TOKEN",
+    "",
     "# --- License ---",
     LICENSE_KEY_COMMENT,
     `EXE_LICENSE_KEY=${EXAMPLE_LICENSE_KEY}`,

package/deploy/compose/init-db.sql

@@ -7,9 +7,17 @@ SELECT 'CREATE DATABASE exe_erp OWNER ' || current_user
 WHERE NOT EXISTS (SELECT FROM pg_database WHERE datname = 'exe_erp')\gexec
 
 -- Ensure exe user exists with superuser
-DO $$ BEGIN
+DO $$ DECLARE _pw text; BEGIN
+  -- current_setting() is not valid in CREATE ROLE DDL syntax; use EXECUTE
+  -- to build the statement dynamically. Falls back to no-password if the
+  -- GUC is not set (docker-entrypoint already sets POSTGRES_PASSWORD). (bug 2dc16abe)
   IF NOT EXISTS (SELECT FROM pg_catalog.pg_roles WHERE rolname = 'exe') THEN
-    CREATE ROLE exe WITH LOGIN SUPERUSER PASSWORD current_setting('app.postgres_password', true);
+    _pw := current_setting('app.postgres_password', true);
+    IF _pw IS NOT NULL AND _pw <> '' THEN
+      EXECUTE format('CREATE ROLE exe WITH LOGIN SUPERUSER PASSWORD %L', _pw);
+    ELSE
+      EXECUTE 'CREATE ROLE exe WITH LOGIN SUPERUSER';
+    END IF;
   ELSE
     ALTER ROLE exe SUPERUSER;
   END IF;

package/deploy/stack-manifests/v0.9.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "latest": "0.9.14",
+  "latest": "0.9.16",
   "stacks": {
     "0.9.0": {
       "version": "0.9.0",
@@ -11,7 +11,7 @@
           "id": "whatsapp_relink_required",
           "title": "WhatsApp QR re-link required for Baileys v7",
           "description": "exe-gateway uses Baileys v7. Existing WhatsApp 6.x linked-device auth state must be backed up and re-linked once with a new QR code.",
-          "requiredAction": "Open https://<gateway-domain>/pair/default?token=<admin-token> and scan from WhatsApp \u2192 Linked Devices after the update.",
+          "requiredAction": "Open https://<gateway-domain>/pair/default?token=<admin-token> and scan from WhatsApp → Linked Devices after the update.",
           "expectedDowntimeMinutes": "2-5",
           "requiresConfirmation": true
         }
@@ -65,7 +65,7 @@
           "id": "whatsapp_relink_required",
           "title": "WhatsApp QR re-link required for Baileys v7",
           "description": "exe-gateway uses Baileys v7. Existing WhatsApp 6.x linked-device auth state must be backed up and re-linked once with a new QR code.",
-          "requiredAction": "Open https://<gateway-domain>/pair/default?token=<admin-token> and scan from WhatsApp \u2192 Linked Devices after the update.",
+          "requiredAction": "Open https://<gateway-domain>/pair/default?token=<admin-token> and scan from WhatsApp → Linked Devices after the update.",
           "expectedDowntimeMinutes": "2-5",
           "requiresConfirmation": true
         }
@@ -119,7 +119,7 @@
           "id": "whatsapp_relink_required",
           "title": "WhatsApp QR re-link required for Baileys v7",
           "description": "exe-gateway uses Baileys v7. Existing WhatsApp 6.x linked-device auth state must be backed up and re-linked once with a new QR code.",
-          "requiredAction": "Open https://<gateway-domain>/pair/default?token=<admin-token> and scan from WhatsApp \u2192 Linked Devices after the update.",
+          "requiredAction": "Open https://<gateway-domain>/pair/default?token=<admin-token> and scan from WhatsApp → Linked Devices after the update.",
           "expectedDowntimeMinutes": "2-5",
           "requiresConfirmation": true
         }
@@ -173,7 +173,7 @@
           "id": "whatsapp_relink_required",
           "title": "WhatsApp QR re-link required for Baileys v7",
           "description": "exe-gateway uses Baileys v7. Existing WhatsApp 6.x linked-device auth state must be backed up and re-linked once with a new QR code.",
-          "requiredAction": "Open https://<gateway-domain>/pair/default?token=<admin-token> and scan from WhatsApp \u2192 Linked Devices after the update.",
+          "requiredAction": "Open https://<gateway-domain>/pair/default?token=<admin-token> and scan from WhatsApp → Linked Devices after the update.",
           "expectedDowntimeMinutes": "2-5",
           "requiresConfirmation": true
         }
@@ -238,7 +238,7 @@
           "id": "whatsapp_relink_required",
           "title": "WhatsApp QR re-link required for Baileys v7",
           "description": "exe-gateway uses Baileys v7. Existing WhatsApp 6.x linked-device auth state must be backed up and re-linked once with a new QR code.",
-          "requiredAction": "Open https://<gateway-domain>/pair/default?token=<admin-token> and scan from WhatsApp \u2192 Linked Devices after the update.",
+          "requiredAction": "Open https://<gateway-domain>/pair/default?token=<admin-token> and scan from WhatsApp → Linked Devices after the update.",
           "expectedDowntimeMinutes": "2-5",
           "requiresConfirmation": true
         }
@@ -303,7 +303,7 @@
           "id": "whatsapp_relink_required",
           "title": "WhatsApp QR re-link required for Baileys v7",
           "description": "exe-gateway uses Baileys v7. Existing WhatsApp 6.x linked-device auth state must be backed up and re-linked once with a new QR code.",
-          "requiredAction": "Open https://<gateway-domain>/pair/default?token=<admin-token> and scan from WhatsApp \u2192 Linked Devices after the update.",
+          "requiredAction": "Open https://<gateway-domain>/pair/default?token=<admin-token> and scan from WhatsApp → Linked Devices after the update.",
           "expectedDowntimeMinutes": "2-5",
           "requiresConfirmation": true
         }
@@ -371,7 +371,7 @@
           "id": "whatsapp_relink_required",
           "title": "WhatsApp QR re-link required for Baileys v7",
           "description": "exe-gateway uses Baileys v7. Existing WhatsApp 6.x linked-device auth state must be backed up and re-linked once with a new QR code.",
-          "requiredAction": "Open https://<gateway-domain>/pair/default?token=<admin-token> and scan from WhatsApp \u2192 Linked Devices after the update.",
+          "requiredAction": "Open https://<gateway-domain>/pair/default?token=<admin-token> and scan from WhatsApp → Linked Devices after the update.",
           "expectedDowntimeMinutes": "2-5",
           "requiresConfirmation": true
         }
@@ -439,7 +439,7 @@
           "id": "whatsapp_relink_required",
           "title": "WhatsApp QR re-link required for Baileys v7",
           "description": "exe-gateway uses Baileys v7. Existing WhatsApp 6.x linked-device auth state must be backed up and re-linked once with a new QR code.",
-          "requiredAction": "Open https://<gateway-domain>/pair/default?token=<admin-token> and scan from WhatsApp \u2192 Linked Devices after the update.",
+          "requiredAction": "Open https://<gateway-domain>/pair/default?token=<admin-token> and scan from WhatsApp → Linked Devices after the update.",
           "expectedDowntimeMinutes": "2-5",
           "requiresConfirmation": true
         }
@@ -822,6 +822,110 @@
           "required": false
         }
       }
+    },
+    "0.9.15": {
+      "version": "0.9.15",
+      "releasedAt": "2026-06-09T00:00:00Z",
+      "notes": "30-bug triage: 9 HYGO fixes (WhatsApp QR pairing, init-db, CRM UUID bootstrap, CORS 500, dark mode, Cloudflare Tunnel, ERP image tags), close_task ID resolution, async backup (WAL corruption fix), dreaming column crash, pre-tool-use coordinator allowlist, notification cross-session leak, cascadeUnblock auto-dispatch.",
+      "npmVersion": "0.9.240",
+      "breakingChanges": [],
+      "services": {
+        "crm": {
+          "image": "update.askexe.com/askexe/exe-crm:v0.9.46",
+          "env": "CRM_IMAGE_TAG",
+          "composeService": "exe-crm",
+          "healthUrl": "http://127.0.0.1:3000/healthz"
+        },
+        "wiki": {
+          "image": "update.askexe.com/askexe/exe-wiki:v0.9.20",
+          "env": "WIKI_IMAGE_TAG",
+          "composeService": "exe-wiki",
+          "healthUrl": "http://127.0.0.1:3001/api/ping"
+        },
+        "exe-os": {
+          "image": "update.askexe.com/askexe/exe-os:v0.9.240",
+          "env": "EXE_OS_IMAGE_TAG",
+          "composeService": "exe-os",
+          "healthUrl": "http://127.0.0.1:8765/health"
+        },
+        "gateway": {
+          "image": "update.askexe.com/askexe/exe-gateway:v0.9.13",
+          "env": "GATEWAY_IMAGE_TAG",
+          "composeService": "exe-gateway",
+          "healthUrl": "http://127.0.0.1:3100/health"
+        },
+        "monitorAgent": {
+          "image": "update.askexe.com/askexe/exe-monitor-agent:v0.9.4",
+          "env": "MONITOR_AGENT_IMAGE_TAG",
+          "composeService": "exe-monitor-agent"
+        },
+        "monitorHub": {
+          "image": "update.askexe.com/askexe/exe-monitor-hub:v0.9.4",
+          "env": "MONITOR_HUB_IMAGE_TAG",
+          "composeService": "exe-monitor-hub",
+          "healthUrl": "http://127.0.0.1:8090/api/health"
+        },
+        "erp": {
+          "image": "update.askexe.com/askexe/exe-erp:v0.2.0-final3",
+          "env": "ERP_IMAGE_TAG",
+          "composeService": "exe-erp",
+          "healthUrl": "http://127.0.0.1:8069/api/method/ping",
+          "deploymentScope": "customer",
+          "required": false
+        }
+      }
+    },
+    "0.9.16": {
+      "version": "0.9.16",
+      "releasedAt": "2026-06-09T00:00:00Z",
+      "notes": "exe-os v0.9.243: fix: stack-release uses defaultBranch per repo (wiki uses master); chore: bump v0.9.242 for stack release; fix: prevent stale task intercom prompts; docs: add STACK-RELEASE.md — full release process documentation; fix: v0.9.241 — 13 more bug fixes (28 total this session). gateway v0.9.15: chore: bump v0.9.14 for stack release; fix: WhatsApp pairing 15-20s → 1-2s — remove blocking fetch, event-driven wait. wiki v0.9.21: chore: bump v0.9.20 for stack release; fix: accept wiki JWTs alongside GoTrue JWTs in auth middleware; feat: add GoTrue agent provisioning script; fix: set min-width on user menu dropdown to prevent layout collapse; fix: remove demo branding from exe-wiki main page greeting",
+      "npmVersion": "0.9.243",
+      "breakingChanges": [],
+      "services": {
+        "crm": {
+          "image": "update.askexe.com/askexe/exe-crm:v0.9.46",
+          "env": "CRM_IMAGE_TAG",
+          "composeService": "exe-crm",
+          "healthUrl": "http://127.0.0.1:3000/healthz"
+        },
+        "wiki": {
+          "image": "update.askexe.com/askexe/exe-wiki:v0.9.21",
+          "env": "WIKI_IMAGE_TAG",
+          "composeService": "exe-wiki",
+          "healthUrl": "http://127.0.0.1:3001/api/ping"
+        },
+        "exe-os": {
+          "image": "update.askexe.com/askexe/exe-os:v0.9.243",
+          "env": "EXE_OS_IMAGE_TAG",
+          "composeService": "exe-os",
+          "healthUrl": "http://127.0.0.1:8765/health"
+        },
+        "gateway": {
+          "image": "update.askexe.com/askexe/exe-gateway:v0.9.15",
+          "env": "GATEWAY_IMAGE_TAG",
+          "composeService": "exe-gateway",
+          "healthUrl": "http://127.0.0.1:3100/health"
+        },
+        "monitorAgent": {
+          "image": "update.askexe.com/askexe/exe-monitor-agent:v0.9.4",
+          "env": "MONITOR_AGENT_IMAGE_TAG",
+          "composeService": "exe-monitor-agent"
+        },
+        "monitorHub": {
+          "image": "update.askexe.com/askexe/exe-monitor-hub:v0.9.4",
+          "env": "MONITOR_HUB_IMAGE_TAG",
+          "composeService": "exe-monitor-hub",
+          "healthUrl": "http://127.0.0.1:8090/api/health"
+        },
+        "erp": {
+          "image": "update.askexe.com/askexe/exe-erp:v0.2.0-final3",
+          "env": "ERP_IMAGE_TAG",
+          "composeService": "exe-erp",
+          "healthUrl": "http://127.0.0.1:8069/api/method/ping",
+          "deploymentScope": "customer",
+          "required": false
+        }
+      }
     }
   }
 }

package/dist/{active-agent-7MIVNARP.js → active-agent-KO4ZWDXE.js}

@@ -6,13 +6,13 @@ import {
   getAllActiveAgents,
   resolveActiveAgentFromTmuxSession,
   writeActiveAgent
-} from "./chunk-RA2RO27E.js";
+} from "./chunk-MCESA5UW.js";
 import "./chunk-CVYC6DUW.js";
 import "./chunk-GJV3WDWM.js";
-import "./chunk-2H55BIV2.js";
-import "./chunk-WSHMBME6.js";
+import "./chunk-CEJO7244.js";
+import "./chunk-AWRL5FGM.js";
 import "./chunk-FXU7JOXK.js";
-import "./chunk-TRZ5KA2R.js";
+import "./chunk-VXIMSRTO.js";
 import "./chunk-LYH5HE24.js";
 import "./chunk-MLKGABMK.js";
 export {

package/dist/{active-agent-55C5Y3XL.js → active-agent-KP2O52HA.js}

@@ -5,13 +5,13 @@ import {
   getAllActiveAgents,
   resolveActiveAgentFromTmuxSession,
   writeActiveAgent
-} from "./chunk-RA2RO27E.js";
+} from "./chunk-MCESA5UW.js";
 import "./chunk-CVYC6DUW.js";
 import "./chunk-GJV3WDWM.js";
-import "./chunk-2H55BIV2.js";
-import "./chunk-WSHMBME6.js";
+import "./chunk-CEJO7244.js";
+import "./chunk-AWRL5FGM.js";
 import "./chunk-FXU7JOXK.js";
-import "./chunk-TRZ5KA2R.js";
+import "./chunk-VXIMSRTO.js";
 import "./chunk-LYH5HE24.js";
 import "./chunk-MLKGABMK.js";
 export {

package/dist/{agentic-ontology-NCAQIQQI.js → agentic-ontology-DXE5J6I5.js}

@@ -9,7 +9,7 @@ import {
   insertOntologyForMemory,
   ontologyPayload,
   stableId
-} from "./chunk-NOLIN2YI.js";
+} from "./chunk-XAYRZHLV.js";
 import "./chunk-MLKGABMK.js";
 export {
   clean,

package/dist/{backfill-metadata-3JP7EZ2U.js → backfill-metadata-DFTIGPXP.js}

@@ -2,20 +2,20 @@
 import {
   disposeStore,
   initStore
-} from "./chunk-FGJUGDNM.js";
+} from "./chunk-222SI7QC.js";
 import "./chunk-CHCA3ZM2.js";
-import "./chunk-4HROS3GJ.js";
-import "./chunk-F7LU65PQ.js";
+import "./chunk-IZVKWBIP.js";
+import "./chunk-Y25OJWOQ.js";
 import "./chunk-MP2AFCGL.js";
 import {
   getClient,
   getEmployeeNamesByRole,
   loadEmployeesSync
-} from "./chunk-2H55BIV2.js";
-import "./chunk-WSHMBME6.js";
+} from "./chunk-CEJO7244.js";
+import "./chunk-AWRL5FGM.js";
 import "./chunk-FXU7JOXK.js";
-import "./chunk-KDJRFJDL.js";
-import "./chunk-TRZ5KA2R.js";
+import "./chunk-K333WOW4.js";
+import "./chunk-VXIMSRTO.js";
 import "./chunk-LYH5HE24.js";
 import {
   isMainModule

package/dist/{background-jobs-RWL46VRD.js → background-jobs-CRXY7T4Y.js}

@@ -8,8 +8,8 @@ import {
   releaseJobLock,
   reniceCurrentProcess,
   startManagedJob
-} from "./chunk-BRFH5X7G.js";
-import "./chunk-TRZ5KA2R.js";
+} from "./chunk-Z7VDUS6L.js";
+import "./chunk-VXIMSRTO.js";
 import "./chunk-LYH5HE24.js";
 import "./chunk-MLKGABMK.js";
 export {

package/dist/{behaviors-6BGALYGW.js → behaviors-BL3QCHBT.js}

@@ -6,11 +6,11 @@ import {
   listSharedSkills,
   reactivateBehavior,
   storeBehavior
-} from "./chunk-UAFUGPKO.js";
-import "./chunk-2H55BIV2.js";
-import "./chunk-WSHMBME6.js";
+} from "./chunk-ONAQAL3O.js";
+import "./chunk-CEJO7244.js";
+import "./chunk-AWRL5FGM.js";
 import "./chunk-FXU7JOXK.js";
-import "./chunk-TRZ5KA2R.js";
+import "./chunk-VXIMSRTO.js";
 import "./chunk-LYH5HE24.js";
 import "./chunk-MLKGABMK.js";
 export {

package/dist/bin/age-ontology-load.js

@@ -5,8 +5,8 @@ import {
 import {
   politeBatchPause,
   startManagedJob
-} from "../chunk-BRFH5X7G.js";
-import "../chunk-TRZ5KA2R.js";
+} from "../chunk-Z7VDUS6L.js";
+import "../chunk-VXIMSRTO.js";
 import "../chunk-LYH5HE24.js";
 import "../chunk-MLKGABMK.js";
 

package/dist/bin/agentic-ontology-backfill.js

@@ -1,26 +1,26 @@
 #!/usr/bin/env node
 import {
   insertOntologyForBatch
-} from "../chunk-NOLIN2YI.js";
+} from "../chunk-XAYRZHLV.js";
 import {
   politeBatchPause,
   startManagedJob
-} from "../chunk-BRFH5X7G.js";
+} from "../chunk-Z7VDUS6L.js";
 import {
   disposeStore,
   initStore
-} from "../chunk-FGJUGDNM.js";
+} from "../chunk-222SI7QC.js";
 import "../chunk-CHCA3ZM2.js";
-import "../chunk-4HROS3GJ.js";
-import "../chunk-F7LU65PQ.js";
+import "../chunk-IZVKWBIP.js";
+import "../chunk-Y25OJWOQ.js";
 import "../chunk-MP2AFCGL.js";
 import {
   getClient
-} from "../chunk-2H55BIV2.js";
-import "../chunk-WSHMBME6.js";
+} from "../chunk-CEJO7244.js";
+import "../chunk-AWRL5FGM.js";
 import "../chunk-FXU7JOXK.js";
-import "../chunk-KDJRFJDL.js";
-import "../chunk-TRZ5KA2R.js";
+import "../chunk-K333WOW4.js";
+import "../chunk-VXIMSRTO.js";
 import "../chunk-LYH5HE24.js";
 import "../chunk-MLKGABMK.js";
 

package/dist/bin/agentic-reflection-backfill.js

@@ -1,23 +1,23 @@
 #!/usr/bin/env node
 import {
   generateReflectionCheckpoints
-} from "../chunk-YPYDLW75.js";
-import "../chunk-NOLIN2YI.js";
+} from "../chunk-OEMX65EA.js";
+import "../chunk-XAYRZHLV.js";
 import {
   startManagedJob
-} from "../chunk-BRFH5X7G.js";
+} from "../chunk-Z7VDUS6L.js";
 import {
   initStore
-} from "../chunk-FGJUGDNM.js";
+} from "../chunk-222SI7QC.js";
 import "../chunk-CHCA3ZM2.js";
-import "../chunk-4HROS3GJ.js";
-import "../chunk-F7LU65PQ.js";
+import "../chunk-IZVKWBIP.js";
+import "../chunk-Y25OJWOQ.js";
 import "../chunk-MP2AFCGL.js";
-import "../chunk-2H55BIV2.js";
-import "../chunk-WSHMBME6.js";
+import "../chunk-CEJO7244.js";
+import "../chunk-AWRL5FGM.js";
 import "../chunk-FXU7JOXK.js";
-import "../chunk-KDJRFJDL.js";
-import "../chunk-TRZ5KA2R.js";
+import "../chunk-K333WOW4.js";
+import "../chunk-VXIMSRTO.js";
 import "../chunk-LYH5HE24.js";
 import "../chunk-MLKGABMK.js";