@askexenow/exe-os 0.9.277 → 0.9.278

package/deploy/compose/.env.customer.example

@@ -48,7 +48,7 @@ EXE_MCP_HOST_PORT=48739
 EXE_CLOUD_SYNC_TO_POSTGRES=true
 
 # --- ERP (Frappe/ERPNext fork) ---
-ERP_IMAGE_TAG=update.askexe.com/askexe/exe-erp:v0.2.0-final3
+ERP_IMAGE_TAG=update.askexe.com/askexe/exe-erp:v0.2.0-final7
 # Administrator password for the ERPNext site (created on first boot).
 ERP_ADMIN_PASSWORD=CHANGEME_ERP_ADMIN_PASSWORD
 ERP_SITE_NAME=erp.askexe.com
@@ -57,6 +57,12 @@ ERP_WS_PORT=9069
 # Optional Sentry DSN for ERP error reporting.
 ERP_SENTRY_DSN=
 
+# --- Exe Build (Rust coding agent — optional) ---
+EXE_BUILD_IMAGE_TAG=update.askexe.com/askexe/exe-build:v0.1.0
+EXE_BUILD_JWT_SECRET=CHANGEME_EXE_BUILD_JWT_SECRET
+EXE_BUILD_WS_PORT=7643
+EXE_BUILD_HTTP_PORT=9222
+
 # --- Gateway ---
 GATEWAY_IMAGE_TAG=update.askexe.com/askexe/exe-gateway:v0.9.16
 EXE_GATEWAY_AUTH_TOKEN=CHANGEME_EXE_GATEWAY_AUTH_TOKEN

package/deploy/compose/docker-compose.yml

@@ -1,6 +1,6 @@
 # exe-os VPS stack — full production compose
 #
-# Services: exe-db (postgres) + clickhouse + redis + exe-crm + exe-wiki + exe-os + exe-gateway + exe-erp
+# Services: exe-db (postgres) + clickhouse + redis + exe-crm + exe-wiki + exe-os + exe-gateway + exe-erp + exe-build
 # ONE postgres (exe-db) — all services connect to it via DATABASE_URL.
 # Standard for managed customer VPSs: exe-monitor-agent reports fleet health to monitor.askexe.com.
 # All image tags pinned per-client via .env (no :latest). Healthchecks on every service.
@@ -341,8 +341,11 @@ services:
       driver: json-file
       options: { max-size: "10m", max-file: "3" }
 
+  # exe-os server — slim daemon image (~200MB). Use EXE_OS_SERVER_IMAGE_TAG
+  # to pin the split server image; falls back to the combined EXE_OS_IMAGE_TAG
+  # for backward compatibility with existing manifests.
   exe-os:
-    image: ${EXE_OS_IMAGE_TAG:-${EXED_IMAGE_TAG:-ghcr.io/askexe/exe-os:v0.9.258}}
+    image: ${EXE_OS_SERVER_IMAGE_TAG:-${EXE_OS_IMAGE_TAG:-${EXED_IMAGE_TAG:-ghcr.io/askexe/exe-os:v0.9.258}}}
     container_name: exe-os
     restart: unless-stopped
     env_file:
@@ -386,6 +389,47 @@ services:
       driver: json-file
       options: { max-size: "10m", max-file: "3" }
 
+  # ------------------------------------------------------------------
+  # exe-os-worker — embedding/reranker worker (~1GB)
+  #
+  # OPTIONAL. Only deploy when embeddings are enabled. The daemon
+  # spawns embed-worker.js as a child process — this container provides
+  # the node-llama-cpp runtime and model files that the server image
+  # intentionally excludes.
+  #
+  # The worker shares the exe_os_data volume so the daemon can locate
+  # the GGUF model files at /home/exed/.exe-os/models/.
+  # ------------------------------------------------------------------
+  exe-os-worker:
+    image: ${EXE_OS_WORKER_IMAGE_TAG:-ghcr.io/askexe/exe-os-worker:v0.9.258}
+    container_name: exe-os-worker
+    profiles: ["embeddings"]
+    restart: unless-stopped
+    depends_on:
+      exe-os:
+        condition: service_healthy
+    env_file:
+      - path: .env
+        required: false
+    environment:
+      NODE_ENV: production
+      EXE_OS_DIR: /home/exed/.exe-os
+      EXE_EMBED_MODEL: ${EXE_EMBED_MODEL:-}
+      EXE_RERANK_MODEL_FILE: ${EXE_RERANK_MODEL_FILE:-}
+      EXE_EMBEDDING_DIM: ${EXE_EMBEDDING_DIM:-}
+    volumes:
+      - exe_os_data:/home/exed/.exe-os
+    networks:
+      backend:
+        ipv4_address: 10.42.0.33
+    deploy:
+      resources:
+        limits:
+          memory: 4G
+    logging:
+      driver: json-file
+      options: { max-size: "10m", max-file: "3" }
+
   exe-gateway:
     image: ${GATEWAY_IMAGE_TAG:-ghcr.io/askexe/exe-gateway:v0.9.17}
     container_name: exe-gateway
@@ -488,11 +532,13 @@ services:
   # Update service — registry proxy for customer image pulls
   # Serves update.askexe.com: /v2/* Docker registry proxy, /health
   # AskExe control-plane only — not deployed on customer VPSs.
+  # Requires EXE_REGISTRY_PROXY_UPSTREAM_TOKEN or GHCR_TOKEN.
+  # Without a token the binary exits 0 (no crash-loop). (bug 3416cead)
   # ------------------------------------------------------------------
   exe-update:
     image: ${EXE_OS_IMAGE_TAG:-${EXED_IMAGE_TAG:-ghcr.io/askexe/exe-os:v0.9.258}}
     container_name: exe-update
-    profiles: ["askexe-control-plane"]
+    profiles: ["registry-proxy", "askexe-control-plane"]
     restart: unless-stopped
     entrypoint: ["node", "/app/dist/bin/registry-proxy.js"]
     env_file:
@@ -756,6 +802,56 @@ services:
       driver: json-file
       options: { max-size: "10m", max-file: "3" }
 
+  # ------------------------------------------------------------------
+  # Exe Build — Rust-native coding agent (Mode 2/3 runtime)
+  # ------------------------------------------------------------------
+  # WebSocket + HTTP API for the TUI/Desktop clients. SQLite-backed
+  # initially; Phase 2 switches to shared Postgres (env change only).
+  # Optional service — not required for core CRM/Wiki/Gateway stack.
+
+  exe-build:
+    image: ${EXE_BUILD_IMAGE_TAG:-ghcr.io/askexe/exe-build:v0.1.0}
+    container_name: exe-build
+    restart: unless-stopped
+    env_file:
+      - path: .env
+        required: false
+    environment:
+      EXE_RELEASE_BUILD: "1"
+      EXE_HOME: /data/exe
+      JWT_SECRET: ${EXE_BUILD_JWT_SECRET:?EXE_BUILD_JWT_SECRET is required}
+      DATABASE_URL: sqlite:///data/exe/exe-chat.db
+      ANTHROPIC_API_KEY: ${ANTHROPIC_API_KEY:-}
+      OPENAI_API_KEY: ${OPENAI_API_KEY:-}
+      OPENROUTER_API_KEY: ${OPENROUTER_API_KEY:-}
+      DEEPSEEK_API_KEY: ${DEEPSEEK_API_KEY:-}
+      NVIDIA_API_KEY: ${NVIDIA_API_KEY:-}
+      EXE_LICENSE_KEY: ${EXE_LICENSE_KEY:?EXE_LICENSE_KEY is required — purchase at https://askexe.com}
+      RUST_LOG: info
+    ports:
+      - "127.0.0.1:${EXE_BUILD_WS_PORT:-7643}:7643"
+      - "127.0.0.1:${EXE_BUILD_HTTP_PORT:-9222}:9222"
+    volumes:
+      - exe_build_data:/data/exe
+    networks:
+      backend:
+        ipv4_address: 10.42.0.32
+      frontend:
+        ipv4_address: 10.43.0.32
+    healthcheck:
+      test: ["CMD", "curl", "-sf", "http://127.0.0.1:9222/health"]
+      interval: 30s
+      timeout: 5s
+      start_period: 20s
+      retries: 5
+    deploy:
+      resources:
+        limits:
+          memory: 4G
+    logging:
+      driver: json-file
+      options: { max-size: "50m", max-file: "3" }
+
 # ------------------------------------------------------------------
 # Volumes
 # ------------------------------------------------------------------
@@ -787,6 +883,8 @@ volumes:
     driver: local
   erp_sites:
     driver: local
+  exe_build_data:
+    driver: local
 
 # ------------------------------------------------------------------
 # Networks

package/deploy/compose/generate-env.ts

@@ -9,7 +9,8 @@ const WIKI_RELEASE_TAG = "v0.9.21";
 const EXED_RELEASE_TAG = "v0.9.258";
 const GATEWAY_RELEASE_TAG = "v0.9.17";
 const MONITOR_RELEASE_TAG = "v0.9.4";
-const ERP_RELEASE_TAG = "v0.2.0-final3";
+const ERP_RELEASE_TAG = "v0.2.0-final7";
+const EXE_BUILD_RELEASE_TAG = "v0.1.0";
 
 const POSTGRES_USER = "exe";
 const POSTGRES_DB = "exedb";
@@ -26,6 +27,7 @@ export const GATEWAY_IMAGE_TAG = `${REGISTRY}/exe-gateway:${GATEWAY_RELEASE_TAG}
 export const MONITOR_AGENT_IMAGE_TAG = `${REGISTRY}/exe-monitor-agent:${MONITOR_RELEASE_TAG}`;
 export const MONITOR_HUB_IMAGE_TAG = `${REGISTRY}/exe-monitor-hub:${MONITOR_RELEASE_TAG}`;
 export const ERP_IMAGE_TAG = `${REGISTRY}/exe-erp:${ERP_RELEASE_TAG}`;
+export const EXE_BUILD_IMAGE_TAG = `${REGISTRY}/exe-build:${EXE_BUILD_RELEASE_TAG}`;
 const GATEWAY_HTTP_HOST_PORT = "3100";
 const GATEWAY_WS_HOST_PORT = "3101";
 const RANDOM_SECRET_16 = 16;
@@ -132,6 +134,12 @@ export function generateEnv(options: GenerateEnvOptions): string {
     "# ERP_SENTRY_DSN=",
     "# MONITOR_API_KEY=   # shared with gateway error forwarding",
     "",
+    "# --- Exe Build (optional — Rust coding agent runtime) ---",
+    `EXE_BUILD_IMAGE_TAG=${EXE_BUILD_IMAGE_TAG}`,
+    `EXE_BUILD_JWT_SECRET=${randomSecret(RANDOM_SECRET_48)}`,
+    "EXE_BUILD_WS_PORT=7643",
+    "EXE_BUILD_HTTP_PORT=9222",
+    "",
     "# --- Monitoring hub (PocketBase — local per-customer instance) ---",
     `MONITOR_HUB_IMAGE_TAG=${MONITOR_HUB_IMAGE_TAG}`,
     "MONITOR_HUB_PORT=8090",
@@ -253,6 +261,12 @@ export function generateExampleEnv(): string {
     "# ERP_SENTRY_DSN=",
     "# MONITOR_API_KEY=   # shared with gateway error forwarding",
     "",
+    "# --- Exe Build (optional — Rust coding agent runtime) ---",
+    `EXE_BUILD_IMAGE_TAG=${EXE_BUILD_IMAGE_TAG}`,
+    "EXE_BUILD_JWT_SECRET=CHANGEME_EXE_BUILD_JWT_SECRET",
+    "EXE_BUILD_WS_PORT=7643",
+    "EXE_BUILD_HTTP_PORT=9222",
+    "",
     "# --- Monitoring hub (PocketBase — local per-customer instance) ---",
     `MONITOR_HUB_IMAGE_TAG=${MONITOR_HUB_IMAGE_TAG}`,
     "MONITOR_HUB_PORT=8090",

package/deploy/stack-manifests/v0.9.json

@@ -1320,12 +1320,21 @@
           "healthUrl": "http://127.0.0.1:8090/api/health"
         },
         "erp": {
-          "image": "update.askexe.com/askexe/exe-erp:v0.2.0-final3",
+          "image": "update.askexe.com/askexe/exe-erp:v0.2.0-final7",
           "env": "ERP_IMAGE_TAG",
           "composeService": "exe-erp",
           "healthUrl": "http://127.0.0.1:8069/api/method/ping",
           "deploymentScope": "customer",
           "required": false
+        },
+        "exe-build": {
+          "image": "update.askexe.com/askexe/exe-build:v0.1.0",
+          "env": "EXE_BUILD_IMAGE_TAG",
+          "composeService": "exe-build",
+          "healthUrl": "http://127.0.0.1:9222/health",
+          "deploymentScope": "askexe-control-plane",
+          "required": false,
+          "_comment": "AskExe infrastructure only — runs behind API router, not deployed to customer VPS"
         }
       }
     }

package/dist/active-agent-5EEYT2TE.js

@@ -0,0 +1,27 @@
+import "./chunk-SH45SJQW.js";
+import {
+  cleanupSessionMarkers,
+  clearActiveAgent,
+  getActiveAgent,
+  getAllActiveAgents,
+  resolveActiveAgentFromTmuxSession,
+  writeActiveAgent
+} from "./chunk-J5ATXGU5.js";
+import "./chunk-CVYC6DUW.js";
+import "./chunk-GJV3WDWM.js";
+import "./chunk-HZG6FKF2.js";
+import "./chunk-2I23RPSI.js";
+import "./chunk-RNQBB7TP.js";
+import "./chunk-H7DJ4AJG.js";
+import "./chunk-FXU7JOXK.js";
+import "./chunk-LAAB5EOU.js";
+import "./chunk-LYH5HE24.js";
+import "./chunk-SIAA4J6H.js";
+export {
+  cleanupSessionMarkers,
+  clearActiveAgent,
+  getActiveAgent,
+  getAllActiveAgents,
+  resolveActiveAgentFromTmuxSession,
+  writeActiveAgent
+};

package/dist/active-agent-BYJKV76X.js

@@ -0,0 +1,27 @@
+import "./chunk-SH45SJQW.js";
+import {
+  cleanupSessionMarkers,
+  clearActiveAgent,
+  getActiveAgent,
+  getAllActiveAgents,
+  resolveActiveAgentFromTmuxSession,
+  writeActiveAgent
+} from "./chunk-ZW3J4K6I.js";
+import "./chunk-CVYC6DUW.js";
+import "./chunk-GJV3WDWM.js";
+import "./chunk-UFYF4ID3.js";
+import "./chunk-2I23RPSI.js";
+import "./chunk-SGGIWHFE.js";
+import "./chunk-5DNJPRDW.js";
+import "./chunk-FXU7JOXK.js";
+import "./chunk-T3B5RK4H.js";
+import "./chunk-LYH5HE24.js";
+import "./chunk-SIAA4J6H.js";
+export {
+  cleanupSessionMarkers,
+  clearActiveAgent,
+  getActiveAgent,
+  getAllActiveAgents,
+  resolveActiveAgentFromTmuxSession,
+  writeActiveAgent
+};

package/dist/active-agent-EZYHPCST.js

@@ -0,0 +1,27 @@
+import "./chunk-SH45SJQW.js";
+import {
+  cleanupSessionMarkers,
+  clearActiveAgent,
+  getActiveAgent,
+  getAllActiveAgents,
+  resolveActiveAgentFromTmuxSession,
+  writeActiveAgent
+} from "./chunk-5F33RNAP.js";
+import "./chunk-CVYC6DUW.js";
+import "./chunk-GJV3WDWM.js";
+import "./chunk-34DYLKZT.js";
+import "./chunk-2I23RPSI.js";
+import "./chunk-4NZXKDVR.js";
+import "./chunk-5DNJPRDW.js";
+import "./chunk-FXU7JOXK.js";
+import "./chunk-LAAB5EOU.js";
+import "./chunk-LYH5HE24.js";
+import "./chunk-SIAA4J6H.js";
+export {
+  cleanupSessionMarkers,
+  clearActiveAgent,
+  getActiveAgent,
+  getAllActiveAgents,
+  resolveActiveAgentFromTmuxSession,
+  writeActiveAgent
+};

package/dist/active-agent-MPL6V6XS.js

@@ -0,0 +1,26 @@
+import {
+  cleanupSessionMarkers,
+  clearActiveAgent,
+  getActiveAgent,
+  getAllActiveAgents,
+  resolveActiveAgentFromTmuxSession,
+  writeActiveAgent
+} from "./chunk-ZW3J4K6I.js";
+import "./chunk-CVYC6DUW.js";
+import "./chunk-GJV3WDWM.js";
+import "./chunk-UFYF4ID3.js";
+import "./chunk-2I23RPSI.js";
+import "./chunk-SGGIWHFE.js";
+import "./chunk-5DNJPRDW.js";
+import "./chunk-FXU7JOXK.js";
+import "./chunk-T3B5RK4H.js";
+import "./chunk-LYH5HE24.js";
+import "./chunk-SIAA4J6H.js";
+export {
+  cleanupSessionMarkers,
+  clearActiveAgent,
+  getActiveAgent,
+  getAllActiveAgents,
+  resolveActiveAgentFromTmuxSession,
+  writeActiveAgent
+};

package/dist/active-agent-URILMEDD.js

@@ -0,0 +1,26 @@
+import {
+  cleanupSessionMarkers,
+  clearActiveAgent,
+  getActiveAgent,
+  getAllActiveAgents,
+  resolveActiveAgentFromTmuxSession,
+  writeActiveAgent
+} from "./chunk-5F33RNAP.js";
+import "./chunk-CVYC6DUW.js";
+import "./chunk-GJV3WDWM.js";
+import "./chunk-34DYLKZT.js";
+import "./chunk-2I23RPSI.js";
+import "./chunk-4NZXKDVR.js";
+import "./chunk-5DNJPRDW.js";
+import "./chunk-FXU7JOXK.js";
+import "./chunk-LAAB5EOU.js";
+import "./chunk-LYH5HE24.js";
+import "./chunk-SIAA4J6H.js";
+export {
+  cleanupSessionMarkers,
+  clearActiveAgent,
+  getActiveAgent,
+  getAllActiveAgents,
+  resolveActiveAgentFromTmuxSession,
+  writeActiveAgent
+};

package/dist/active-agent-UY52QRI3.js

@@ -0,0 +1,26 @@
+import {
+  cleanupSessionMarkers,
+  clearActiveAgent,
+  getActiveAgent,
+  getAllActiveAgents,
+  resolveActiveAgentFromTmuxSession,
+  writeActiveAgent
+} from "./chunk-J5ATXGU5.js";
+import "./chunk-CVYC6DUW.js";
+import "./chunk-GJV3WDWM.js";
+import "./chunk-HZG6FKF2.js";
+import "./chunk-2I23RPSI.js";
+import "./chunk-RNQBB7TP.js";
+import "./chunk-H7DJ4AJG.js";
+import "./chunk-FXU7JOXK.js";
+import "./chunk-LAAB5EOU.js";
+import "./chunk-LYH5HE24.js";
+import "./chunk-SIAA4J6H.js";
+export {
+  cleanupSessionMarkers,
+  clearActiveAgent,
+  getActiveAgent,
+  getAllActiveAgents,
+  resolveActiveAgentFromTmuxSession,
+  writeActiveAgent
+};

package/dist/agentic-ontology-5VGMSNAJ.js

@@ -0,0 +1,25 @@
+import {
+  clean,
+  extractGoalCandidates,
+  inferIntention,
+  inferOntologyEventType,
+  inferOutcome,
+  inferSemanticLabel,
+  insertOntologyForBatch,
+  insertOntologyForMemory,
+  ontologyPayload,
+  stableId
+} from "./chunk-LTBVEUC6.js";
+import "./chunk-SIAA4J6H.js";
+export {
+  clean,
+  extractGoalCandidates,
+  inferIntention,
+  inferOntologyEventType,
+  inferOutcome,
+  inferSemanticLabel,
+  insertOntologyForBatch,
+  insertOntologyForMemory,
+  ontologyPayload,
+  stableId
+};

package/dist/agentic-ontology-SJMJ5YZF.js

@@ -0,0 +1,25 @@
+import {
+  clean,
+  extractGoalCandidates,
+  inferIntention,
+  inferOntologyEventType,
+  inferOutcome,
+  inferSemanticLabel,
+  insertOntologyForBatch,
+  insertOntologyForMemory,
+  ontologyPayload,
+  stableId
+} from "./chunk-GH6DXQTK.js";
+import "./chunk-SIAA4J6H.js";
+export {
+  clean,
+  extractGoalCandidates,
+  inferIntention,
+  inferOntologyEventType,
+  inferOutcome,
+  inferSemanticLabel,
+  insertOntologyForBatch,
+  insertOntologyForMemory,
+  ontologyPayload,
+  stableId
+};

package/dist/agentic-ontology-YRIBZ5WG.js

@@ -0,0 +1,25 @@
+import {
+  clean,
+  extractGoalCandidates,
+  inferIntention,
+  inferOntologyEventType,
+  inferOutcome,
+  inferSemanticLabel,
+  insertOntologyForBatch,
+  insertOntologyForMemory,
+  ontologyPayload,
+  stableId
+} from "./chunk-ZA6U6BUW.js";
+import "./chunk-SIAA4J6H.js";
+export {
+  clean,
+  extractGoalCandidates,
+  inferIntention,
+  inferOntologyEventType,
+  inferOutcome,
+  inferSemanticLabel,
+  insertOntologyForBatch,
+  insertOntologyForMemory,
+  ontologyPayload,
+  stableId
+};