@askexenow/exe-os 0.9.246 → 0.9.247

package/deploy/stack-manifests/v0.9.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "latest": "0.9.16",
+  "latest": "0.9.17",
   "stacks": {
     "0.9.0": {
       "version": "0.9.0",
@@ -926,6 +926,58 @@
           "required": false
         }
       }
+    },
+    "0.9.17": {
+      "version": "0.9.17",
+      "releasedAt": "2026-06-09T00:00:00Z",
+      "notes": "gateway v0.9.16: fix: WhatsApp pairing — stale auth clearing + version fetch timeout",
+      "npmVersion": "0.9.247",
+      "breakingChanges": [],
+      "services": {
+        "crm": {
+          "image": "update.askexe.com/askexe/exe-crm:v0.9.46",
+          "env": "CRM_IMAGE_TAG",
+          "composeService": "exe-crm",
+          "healthUrl": "http://127.0.0.1:3000/healthz"
+        },
+        "wiki": {
+          "image": "update.askexe.com/askexe/exe-wiki:v0.9.21",
+          "env": "WIKI_IMAGE_TAG",
+          "composeService": "exe-wiki",
+          "healthUrl": "http://127.0.0.1:3001/api/ping"
+        },
+        "exe-os": {
+          "image": "update.askexe.com/askexe/exe-os:v0.9.243",
+          "env": "EXE_OS_IMAGE_TAG",
+          "composeService": "exe-os",
+          "healthUrl": "http://127.0.0.1:8765/health"
+        },
+        "gateway": {
+          "image": "update.askexe.com/askexe/exe-gateway:v0.9.16",
+          "env": "GATEWAY_IMAGE_TAG",
+          "composeService": "exe-gateway",
+          "healthUrl": "http://127.0.0.1:3100/health"
+        },
+        "monitorAgent": {
+          "image": "update.askexe.com/askexe/exe-monitor-agent:v0.9.4",
+          "env": "MONITOR_AGENT_IMAGE_TAG",
+          "composeService": "exe-monitor-agent"
+        },
+        "monitorHub": {
+          "image": "update.askexe.com/askexe/exe-monitor-hub:v0.9.4",
+          "env": "MONITOR_HUB_IMAGE_TAG",
+          "composeService": "exe-monitor-hub",
+          "healthUrl": "http://127.0.0.1:8090/api/health"
+        },
+        "erp": {
+          "image": "update.askexe.com/askexe/exe-erp:v0.2.0-final3",
+          "env": "ERP_IMAGE_TAG",
+          "composeService": "exe-erp",
+          "healthUrl": "http://127.0.0.1:8069/api/method/ping",
+          "deploymentScope": "customer",
+          "required": false
+        }
+      }
     }
   }
 }

package/dist/hooks/manifest.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "generatedAt": "2026-06-09T11:51:21.500Z",
+  "generatedAt": "2026-06-09T11:56:27.769Z",
   "hashes": {
     "bug-report-worker.js": "9c001c51d975b408b18b77b8aaabfbc33955b683f9c527d650df8c42a1ca65fc",
     "codex-stop-task-finalizer.js": "50f93c3f66cc893a2c1a63c7beec4a3a937f4648310ed22e3439b1414565eb87",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.246",
+  "version": "0.9.247",
   "description": "AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",

package/release-notes.json

@@ -1,8 +1,8 @@
 {
-  "current": "0.9.246",
+  "current": "0.9.247",
   "notes": {
-    "0.9.246": {
-      "version": "0.9.246",
+    "0.9.247": {
+      "version": "0.9.247",
       "date": "2026-06-09",
       "features": [
         "Entity Profile UI — knowledge graph explorer + entity detail view",
@@ -73,6 +73,8 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "bump v0.9.247 for stack manifest release",
+        "stack release v0.9.17",
         "cover singleton employee spawn lock",
         "cover registry proxy license auth fallbacks",
         "update release notes for v0.9.243",
@@ -95,14 +97,12 @@
         "GoTrue JWT unified auth architecture — founder directive 2026-06-08",
         "Thread + Graph Discovery architecture — unified knowledge view",
         "move heavy jobs to 9 PM — GraphRAG, skill sweep, backup",
-        "Mode 3 Client-Side RAG architecture — memories never leave device",
-        "bump to v0.9.230 — P0 WAL backup corruption fix for Jack",
-        "bump to v0.9.225"
+        "Mode 3 Client-Side RAG architecture — memories never leave device"
       ],
       "migration_notes": []
     },
-    "0.9.245": {
-      "version": "0.9.245",
+    "0.9.246": {
+      "version": "0.9.246",
       "date": "2026-06-09",
       "features": [
         "Entity Profile UI — knowledge graph explorer + entity detail view",
@@ -132,6 +132,9 @@
         "add `exe-os boot --project X` CLI command for project boot verification"
       ],
       "fixes": [
+        "spawn lock dedup, MCP recovery mutex, health timeout 60→180s",
+        "exclude release-note chores from generated notes",
+        "dedupe stale MCP session recovery",
         "embeddings OFF by default for all users — opt-in via EXE_EMBEDDINGS=1",
         "keep generated env templates in sync",
         "bootstrap monitor env and lazy-init recall memory",
@@ -153,10 +156,7 @@
         "skip duplicate initStore in WS client — prevents 2-8s event loop block",
         "add session scope imports to dreaming, project-boot, telemetry-upload",
         "resolve typecheck errors for npm publish",
-        "add setImmediate yields to Graph→PG sync — prevent event loop blocking",
-        "convert SQLite short hex IDs to valid UUIDs for PostgreSQL projection",
-        "delay initial graph sync tick to 60s + add debug logging",
-        "share DB init state between MCP HTTP and timer ticks"
+        "add setImmediate yields to Graph→PG sync — prevent event loop blocking"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -173,9 +173,7 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
-        "bump v0.9.245",
-        "sync v0.9.244 published artifacts",
-        "bump v0.9.244",
+        "cover singleton employee spawn lock",
         "cover registry proxy license auth fallbacks",
         "update release notes for v0.9.243",
         "stack release v0.9.16",
@@ -197,12 +195,14 @@
         "GoTrue JWT unified auth architecture — founder directive 2026-06-08",
         "Thread + Graph Discovery architecture — unified knowledge view",
         "move heavy jobs to 9 PM — GraphRAG, skill sweep, backup",
-        "Mode 3 Client-Side RAG architecture — memories never leave device"
+        "Mode 3 Client-Side RAG architecture — memories never leave device",
+        "bump to v0.9.230 — P0 WAL backup corruption fix for Jack",
+        "bump to v0.9.225"
       ],
       "migration_notes": []
     },
-    "0.9.244": {
-      "version": "0.9.244",
+    "0.9.245": {
+      "version": "0.9.245",
       "date": "2026-06-09",
       "features": [
         "Entity Profile UI — knowledge graph explorer + entity detail view",
@@ -232,6 +232,9 @@
         "add `exe-os boot --project X` CLI command for project boot verification"
       ],
       "fixes": [
+        "embeddings OFF by default for all users — opt-in via EXE_EMBEDDINGS=1",
+        "keep generated env templates in sync",
+        "bootstrap monitor env and lazy-init recall memory",
         "registry proxy accepts license keys + stack-update reads .env license",
         "stack-release uses defaultBranch per repo (wiki uses master)",
         "prevent stale task intercom prompts",
@@ -253,10 +256,7 @@
         "add setImmediate yields to Graph→PG sync — prevent event loop blocking",
         "convert SQLite short hex IDs to valid UUIDs for PostgreSQL projection",
         "delay initial graph sync tick to 60s + add debug logging",
-        "share DB init state between MCP HTTP and timer ticks",
-        "allow VPS daemon to run in PostgreSQL-only mode (no encryption key)",
-        "detect response body failures — build pass ≠ feature works",
-        "coordinators see all tasks cross-session by default"
+        "share DB init state between MCP HTTP and timer ticks"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -273,6 +273,8 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "bump v0.9.245",
+        "sync v0.9.244 published artifacts",
         "bump v0.9.244",
         "cover registry proxy license auth fallbacks",
         "update release notes for v0.9.243",
@@ -295,14 +297,12 @@
         "GoTrue JWT unified auth architecture — founder directive 2026-06-08",
         "Thread + Graph Discovery architecture — unified knowledge view",
         "move heavy jobs to 9 PM — GraphRAG, skill sweep, backup",
-        "Mode 3 Client-Side RAG architecture — memories never leave device",
-        "bump to v0.9.230 — P0 WAL backup corruption fix for Jack",
-        "bump to v0.9.225"
+        "Mode 3 Client-Side RAG architecture — memories never leave device"
       ],
       "migration_notes": []
     },
-    "0.9.243": {
-      "version": "0.9.243",
+    "0.9.244": {
+      "version": "0.9.244",
       "date": "2026-06-09",
       "features": [
         "Entity Profile UI — knowledge graph explorer + entity detail view",
@@ -332,6 +332,7 @@
         "add `exe-os boot --project X` CLI command for project boot verification"
       ],
       "fixes": [
+        "registry proxy accepts license keys + stack-update reads .env license",
         "stack-release uses defaultBranch per repo (wiki uses master)",
         "prevent stale task intercom prompts",
         "v0.9.241 — 13 more bug fixes (28 total this session)",
@@ -355,8 +356,7 @@
         "share DB init state between MCP HTTP and timer ticks",
         "allow VPS daemon to run in PostgreSQL-only mode (no encryption key)",
         "detect response body failures — build pass ≠ feature works",
-        "coordinators see all tasks cross-session by default",
-        "self-improvement uses Cloudflare support API, not local tasks"
+        "coordinators see all tasks cross-session by default"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -373,6 +373,9 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "bump v0.9.244",
+        "cover registry proxy license auth fallbacks",
+        "update release notes for v0.9.243",
         "stack release v0.9.16",
         "bump v0.9.243 for stack release",
         "bump v0.9.242 for stack release",
@@ -394,17 +397,15 @@
         "move heavy jobs to 9 PM — GraphRAG, skill sweep, backup",
         "Mode 3 Client-Side RAG architecture — memories never leave device",
         "bump to v0.9.230 — P0 WAL backup corruption fix for Jack",
-        "bump to v0.9.225",
-        "bump to v0.9.223",
-        "boot time 18.9s → 2.2s — query daemon socket instead of opening DB",
-        "add event loop yielding to heavy daemon timers"
+        "bump to v0.9.225"
       ],
       "migration_notes": []
     },
-    "0.9.239": {
-      "version": "0.9.239",
+    "0.9.243": {
+      "version": "0.9.243",
       "date": "2026-06-09",
       "features": [
+        "Entity Profile UI — knowledge graph explorer + entity detail view",
         "log MCP session open/close to stderr for docker logs visibility",
         "Graph→PostgreSQL sync timer — automatic SQLite→exe-db projection",
         "project GraphRAG data to PostgreSQL during cloud sync pull",
@@ -428,10 +429,22 @@
         "auto-run dreaming cycle on session end — zero-touch self-improvement",
         "add dreaming system + structured handoffs to platform procedures",
         "add snapshot + boot to platform procedures and operating procedures",
-        "add `exe-os boot --project X` CLI command for project boot verification",
-        "add `exe-os snapshot` CLI command for session state capture"
+        "add `exe-os boot --project X` CLI command for project boot verification"
       ],
       "fixes": [
+        "stack-release uses defaultBranch per repo (wiki uses master)",
+        "prevent stale task intercom prompts",
+        "v0.9.241 — 13 more bug fixes (28 total this session)",
+        "sync lockfile for Docker build — npm ci --omit=dev works again",
+        "keep review notifications session-local and test-safe",
+        "CI Dockerfile reference — Dockerfile.exed → Dockerfile.exe-os",
+        "v0.9.240 — 15 bug fixes across HYGO, Jack, platform (stack v0.9.15)",
+        "keep daemon memory recall FTS bounded",
+        "keep daemon cloud sync off CRDT heap path",
+        "suppress ENOBUFS in reapers + skip boot-time sync execution",
+        "MCP health probe in prompt hook + Docker image build tolerance",
+        "plug MCP session memory leak — zombie McpServer instances accumulated",
+        "lower RSS watchdog to 1.5/2.5GB + add GC after heavy operations",
         "snapshot crash — daemon fallback + dreaming scope binding",
         "skip duplicate initStore in WS client — prevents 2-8s event loop block",
         "add session scope imports to dreaming, project-boot, telemetry-upload",
@@ -443,20 +456,7 @@
         "allow VPS daemon to run in PostgreSQL-only mode (no encryption key)",
         "detect response body failures — build pass ≠ feature works",
         "coordinators see all tasks cross-session by default",
-        "self-improvement uses Cloudflare support API, not local tasks",
-        "self-improvement uses MCP tasks for review, not WhatsApp",
-        "harden investigation tracker — 3 more issues from second audit",
-        "self-improvement creates PRs, never pushes to main",
-        "harden investigation tracker — 11 issues from audit at 10K users",
-        "clear ghost notifications on task cancel/close",
-        "remove timeout requirement from tmux capture-pane hook",
-        "remove unused hLine variable + clean 3 stale worktrees",
-        "replace CJS require() with ESM imports — daemon DB init crash",
-        "resolveExeSession — match agent name to coordinator session",
-        "remove SITES_PATH from compose — handled in exe-erp entrypoint",
-        "self-heal missing task .md files to stop false consistencyMismatches (#76)",
-        "add SITES_PATH=./sites for exe-erp — Frappe site resolution",
-        "last CJS require() + launchd spawn storm prevention"
+        "self-improvement uses Cloudflare support API, not local tasks"
       ],
       "security": [
         "fix shell injection, SSRF, socket leaks, backup validation",
@@ -473,6 +473,13 @@
         "fix 4 pricing tier bypass vulnerabilities (audit F1-F4)"
       ],
       "other": [
+        "stack release v0.9.16",
+        "bump v0.9.243 for stack release",
+        "bump v0.9.242 for stack release",
+        "add STACK-RELEASE.md — full release process documentation",
+        "claurst competitive analysis — npm distribution + free-tier mode",
+        "bump stack.release.json to v0.9.240 for CI image build",
+        "update release notes for v0.9.238-239",
         "release: stack v0.9.14 — gateway audit fixes",
         "release: stack v0.9.13 — HYGO deployment readiness",
         "incremental Graph→PG sync — 86K rows → deltas only",
@@ -490,14 +497,7 @@
         "bump to v0.9.225",
         "bump to v0.9.223",
         "boot time 18.9s → 2.2s — query daemon socket instead of opening DB",
-        "add event loop yielding to heavy daemon timers",
-        "update package-lock.json from npm audit fix",
-        "reduce agent_data_refresh from 10min to 1hr — prevents MCP stalls",
-        "capture deferred architecture items (NOT this year)",
-        "bump to v0.9.222",
-        "bump to v0.9.221",
-        "sync release notes for v0.9.220",
-        "bump to v0.9.220"
+        "add event loop yielding to heavy daemon timers"
       ],
       "migration_notes": []
     }