@askexenow/exe-os 0.9.284 → 0.9.285
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/bin/stack-update.js +2 -2
- package/dist/bin/vps-health-gate.js +1 -1
- package/dist/chunk-QIUMIWUA.js +230 -0
- package/dist/chunk-UBDC4K7P.js +230 -0
- package/dist/chunk-XENDLEP5.js +1929 -0
- package/dist/chunk-XNVX6XNW.js +1921 -0
- package/dist/hooks/manifest.json +1 -1
- package/dist/stack-update-I2DMZ6QL.js +76 -0
- package/dist/stack-update-KOZLMLEI.js +76 -0
- package/package.json +1 -1
- package/release-notes.json +49 -48
package/dist/hooks/manifest.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"version": 1,
|
|
3
|
-
"generatedAt": "2026-06-
|
|
3
|
+
"generatedAt": "2026-06-17T09:05:37.660Z",
|
|
4
4
|
"hashes": {
|
|
5
5
|
"bug-report-worker.js": "16d6fab856fd34eeeb4406f0b63578abbab9b85a2c5b552918b2dc096bff45b2",
|
|
6
6
|
"codex-stop-task-finalizer.js": "2e1b30d86acf2359fe6e555e486ffc80c8b525ab43646c523e272b92d8cdaa93",
|
|
@@ -0,0 +1,76 @@
|
|
|
1
|
+
import {
|
|
2
|
+
ProgressReporter,
|
|
3
|
+
assertBreakingChangesAllowed,
|
|
4
|
+
assertDeploymentScopeAllowed,
|
|
5
|
+
assertHostReadyForApply,
|
|
6
|
+
assertProductionDeployGate,
|
|
7
|
+
bootstrapStackHost,
|
|
8
|
+
buildDefaultServiceSelection,
|
|
9
|
+
canonicalizeStackManifest,
|
|
10
|
+
collectImageAvailabilityIssues,
|
|
11
|
+
collectProductionDeployGateIssues,
|
|
12
|
+
createStackUpdatePlan,
|
|
13
|
+
defaultStackPaths,
|
|
14
|
+
detectDanglingVolumes,
|
|
15
|
+
filterServicesBySelection,
|
|
16
|
+
findLatestBackupEnvFile,
|
|
17
|
+
hardenHost,
|
|
18
|
+
listAvailableVersions,
|
|
19
|
+
loadServiceSelection,
|
|
20
|
+
loadStackManifest,
|
|
21
|
+
pairMonitorAgent,
|
|
22
|
+
parseEnv,
|
|
23
|
+
parseStackManifest,
|
|
24
|
+
patchEnv,
|
|
25
|
+
printDanglingVolumes,
|
|
26
|
+
printVolumeCleanupResult,
|
|
27
|
+
readCurrentStackVersion,
|
|
28
|
+
removeDanglingVolumes,
|
|
29
|
+
rollbackStackUpdate,
|
|
30
|
+
runStackUpdate,
|
|
31
|
+
saveServiceSelection,
|
|
32
|
+
serviceSelectionPath,
|
|
33
|
+
verifyManifestImagesAvailable,
|
|
34
|
+
verifyReleaseHealth,
|
|
35
|
+
verifyStackManifestSignature
|
|
36
|
+
} from "./chunk-XENDLEP5.js";
|
|
37
|
+
import "./chunk-YMKUXZIG.js";
|
|
38
|
+
import "./chunk-T3B5RK4H.js";
|
|
39
|
+
import "./chunk-LYH5HE24.js";
|
|
40
|
+
import "./chunk-MLKGABMK.js";
|
|
41
|
+
export {
|
|
42
|
+
ProgressReporter,
|
|
43
|
+
assertBreakingChangesAllowed,
|
|
44
|
+
assertDeploymentScopeAllowed,
|
|
45
|
+
assertHostReadyForApply,
|
|
46
|
+
assertProductionDeployGate,
|
|
47
|
+
bootstrapStackHost,
|
|
48
|
+
buildDefaultServiceSelection,
|
|
49
|
+
canonicalizeStackManifest,
|
|
50
|
+
collectImageAvailabilityIssues,
|
|
51
|
+
collectProductionDeployGateIssues,
|
|
52
|
+
createStackUpdatePlan,
|
|
53
|
+
defaultStackPaths,
|
|
54
|
+
detectDanglingVolumes,
|
|
55
|
+
filterServicesBySelection,
|
|
56
|
+
findLatestBackupEnvFile,
|
|
57
|
+
hardenHost,
|
|
58
|
+
listAvailableVersions,
|
|
59
|
+
loadServiceSelection,
|
|
60
|
+
loadStackManifest,
|
|
61
|
+
pairMonitorAgent,
|
|
62
|
+
parseEnv,
|
|
63
|
+
parseStackManifest,
|
|
64
|
+
patchEnv,
|
|
65
|
+
printDanglingVolumes,
|
|
66
|
+
printVolumeCleanupResult,
|
|
67
|
+
readCurrentStackVersion,
|
|
68
|
+
removeDanglingVolumes,
|
|
69
|
+
rollbackStackUpdate,
|
|
70
|
+
runStackUpdate,
|
|
71
|
+
saveServiceSelection,
|
|
72
|
+
serviceSelectionPath,
|
|
73
|
+
verifyManifestImagesAvailable,
|
|
74
|
+
verifyReleaseHealth,
|
|
75
|
+
verifyStackManifestSignature
|
|
76
|
+
};
|
|
@@ -0,0 +1,76 @@
|
|
|
1
|
+
import {
|
|
2
|
+
ProgressReporter,
|
|
3
|
+
assertBreakingChangesAllowed,
|
|
4
|
+
assertDeploymentScopeAllowed,
|
|
5
|
+
assertHostReadyForApply,
|
|
6
|
+
assertProductionDeployGate,
|
|
7
|
+
bootstrapStackHost,
|
|
8
|
+
buildDefaultServiceSelection,
|
|
9
|
+
canonicalizeStackManifest,
|
|
10
|
+
collectImageAvailabilityIssues,
|
|
11
|
+
collectProductionDeployGateIssues,
|
|
12
|
+
createStackUpdatePlan,
|
|
13
|
+
defaultStackPaths,
|
|
14
|
+
detectDanglingVolumes,
|
|
15
|
+
filterServicesBySelection,
|
|
16
|
+
findLatestBackupEnvFile,
|
|
17
|
+
hardenHost,
|
|
18
|
+
listAvailableVersions,
|
|
19
|
+
loadServiceSelection,
|
|
20
|
+
loadStackManifest,
|
|
21
|
+
pairMonitorAgent,
|
|
22
|
+
parseEnv,
|
|
23
|
+
parseStackManifest,
|
|
24
|
+
patchEnv,
|
|
25
|
+
printDanglingVolumes,
|
|
26
|
+
printVolumeCleanupResult,
|
|
27
|
+
readCurrentStackVersion,
|
|
28
|
+
removeDanglingVolumes,
|
|
29
|
+
rollbackStackUpdate,
|
|
30
|
+
runStackUpdate,
|
|
31
|
+
saveServiceSelection,
|
|
32
|
+
serviceSelectionPath,
|
|
33
|
+
verifyManifestImagesAvailable,
|
|
34
|
+
verifyReleaseHealth,
|
|
35
|
+
verifyStackManifestSignature
|
|
36
|
+
} from "./chunk-XNVX6XNW.js";
|
|
37
|
+
import "./chunk-YMKUXZIG.js";
|
|
38
|
+
import "./chunk-T3B5RK4H.js";
|
|
39
|
+
import "./chunk-LYH5HE24.js";
|
|
40
|
+
import "./chunk-MLKGABMK.js";
|
|
41
|
+
export {
|
|
42
|
+
ProgressReporter,
|
|
43
|
+
assertBreakingChangesAllowed,
|
|
44
|
+
assertDeploymentScopeAllowed,
|
|
45
|
+
assertHostReadyForApply,
|
|
46
|
+
assertProductionDeployGate,
|
|
47
|
+
bootstrapStackHost,
|
|
48
|
+
buildDefaultServiceSelection,
|
|
49
|
+
canonicalizeStackManifest,
|
|
50
|
+
collectImageAvailabilityIssues,
|
|
51
|
+
collectProductionDeployGateIssues,
|
|
52
|
+
createStackUpdatePlan,
|
|
53
|
+
defaultStackPaths,
|
|
54
|
+
detectDanglingVolumes,
|
|
55
|
+
filterServicesBySelection,
|
|
56
|
+
findLatestBackupEnvFile,
|
|
57
|
+
hardenHost,
|
|
58
|
+
listAvailableVersions,
|
|
59
|
+
loadServiceSelection,
|
|
60
|
+
loadStackManifest,
|
|
61
|
+
pairMonitorAgent,
|
|
62
|
+
parseEnv,
|
|
63
|
+
parseStackManifest,
|
|
64
|
+
patchEnv,
|
|
65
|
+
printDanglingVolumes,
|
|
66
|
+
printVolumeCleanupResult,
|
|
67
|
+
readCurrentStackVersion,
|
|
68
|
+
removeDanglingVolumes,
|
|
69
|
+
rollbackStackUpdate,
|
|
70
|
+
runStackUpdate,
|
|
71
|
+
saveServiceSelection,
|
|
72
|
+
serviceSelectionPath,
|
|
73
|
+
verifyManifestImagesAvailable,
|
|
74
|
+
verifyReleaseHealth,
|
|
75
|
+
verifyStackManifestSignature
|
|
76
|
+
};
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@askexenow/exe-os",
|
|
3
|
-
"version": "0.9.
|
|
3
|
+
"version": "0.9.285",
|
|
4
4
|
"description": "AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.",
|
|
5
5
|
"license": "SEE LICENSE IN LICENSE",
|
|
6
6
|
"type": "module",
|
package/release-notes.json
CHANGED
|
@@ -1,10 +1,11 @@
|
|
|
1
1
|
{
|
|
2
|
-
"current": "0.9.
|
|
2
|
+
"current": "0.9.285",
|
|
3
3
|
"notes": {
|
|
4
|
-
"0.9.
|
|
5
|
-
"version": "0.9.
|
|
4
|
+
"0.9.285": {
|
|
5
|
+
"version": "0.9.285",
|
|
6
6
|
"date": "2026-06-17",
|
|
7
7
|
"features": [
|
|
8
|
+
"add image availability + platform verification to deploy gate",
|
|
8
9
|
"GoTrue JWT auth for MCP — exe-os login/logout/whoami",
|
|
9
10
|
"admin backfill endpoint for api_key_hash — fixes all encrypted keys",
|
|
10
11
|
"implement startMonitor for Slack/Discord/Telegram/WhatsApp + SMTP via nodemailer",
|
|
@@ -28,8 +29,7 @@
|
|
|
28
29
|
"emotional baselines per agent role (dbfbe67f) (#131)",
|
|
29
30
|
"split exe-os into server (~200MB) and worker (~1GB) images (#130)",
|
|
30
31
|
"out-of-process socket watchdog (c3b287cc) (#129)",
|
|
31
|
-
"hot-path session summary — compress last checkpoint into ~200 tokens at boot (edaf4eb3) (#128)"
|
|
32
|
-
"cloud-synced cross-device reminders via Cloudflare Worker KV (a4195632) (#127)"
|
|
32
|
+
"hot-path session summary — compress last checkpoint into ~200 tokens at boot (edaf4eb3) (#128)"
|
|
33
33
|
],
|
|
34
34
|
"fixes": [
|
|
35
35
|
"add otel-collector to official image allowlist — unblocks stack-update",
|
|
@@ -60,6 +60,7 @@
|
|
|
60
60
|
],
|
|
61
61
|
"security": [],
|
|
62
62
|
"other": [
|
|
63
|
+
"bump v0.9.285 — deploy gate image verification",
|
|
63
64
|
"bump v0.9.284 — otel deploy gate fix",
|
|
64
65
|
"bump v0.9.283 — amd64 digest fix",
|
|
65
66
|
"bump v0.9.282 — daemon image v0.9.281 in manifest",
|
|
@@ -83,13 +84,12 @@
|
|
|
83
84
|
"update release-notes.json",
|
|
84
85
|
"bump 0.9.275 — bundle stack 0.9.22 manifest for stack-update",
|
|
85
86
|
"release: stack 0.9.22 — exe-os v0.9.270, exe-crm v0.9.48, exe-gateway v0.9.18 (digest-pinned)",
|
|
86
|
-
"bump 0.9.273 — graph/send_whatsapp/phantom-notif fixes"
|
|
87
|
-
"Add daemon smoke gate"
|
|
87
|
+
"bump 0.9.273 — graph/send_whatsapp/phantom-notif fixes"
|
|
88
88
|
],
|
|
89
89
|
"migration_notes": []
|
|
90
90
|
},
|
|
91
|
-
"0.9.
|
|
92
|
-
"version": "0.9.
|
|
91
|
+
"0.9.284": {
|
|
92
|
+
"version": "0.9.284",
|
|
93
93
|
"date": "2026-06-17",
|
|
94
94
|
"features": [
|
|
95
95
|
"GoTrue JWT auth for MCP — exe-os login/logout/whoami",
|
|
@@ -119,6 +119,7 @@
|
|
|
119
119
|
"cloud-synced cross-device reminders via Cloudflare Worker KV (a4195632) (#127)"
|
|
120
120
|
],
|
|
121
121
|
"fixes": [
|
|
122
|
+
"add otel-collector to official image allowlist — unblocks stack-update",
|
|
122
123
|
"correct exe-os + exe-auth digests for amd64 in manifest 0.9.24 (bug e0c3b3fb)",
|
|
123
124
|
"update exe-os daemon image to v0.9.281 in manifest 0.9.24",
|
|
124
125
|
"mcp_ping reports alive when running inside daemon process (bug b5fb9404)",
|
|
@@ -142,11 +143,11 @@
|
|
|
142
143
|
"add sync_meta to SQL guard allowlist — fixes cloud sync (bug 9fbbe145)",
|
|
143
144
|
"accept digest-only official images in deploy gate",
|
|
144
145
|
"prevent empty/duplicate company_procedure rows at the source",
|
|
145
|
-
"remove duplicate if-block causing TS build failure"
|
|
146
|
-
"watchdog self-heal + restart-intent propagation (belt & suspenders)"
|
|
146
|
+
"remove duplicate if-block causing TS build failure"
|
|
147
147
|
],
|
|
148
148
|
"security": [],
|
|
149
149
|
"other": [
|
|
150
|
+
"bump v0.9.284 — otel deploy gate fix",
|
|
150
151
|
"bump v0.9.283 — amd64 digest fix",
|
|
151
152
|
"bump v0.9.282 — daemon image v0.9.281 in manifest",
|
|
152
153
|
"prepare v0.9.281 — 50 bugs fixed, stack 0.9.24 fully deployable",
|
|
@@ -170,13 +171,12 @@
|
|
|
170
171
|
"bump 0.9.275 — bundle stack 0.9.22 manifest for stack-update",
|
|
171
172
|
"release: stack 0.9.22 — exe-os v0.9.270, exe-crm v0.9.48, exe-gateway v0.9.18 (digest-pinned)",
|
|
172
173
|
"bump 0.9.273 — graph/send_whatsapp/phantom-notif fixes",
|
|
173
|
-
"Add daemon smoke gate"
|
|
174
|
-
"Publish Claude Fable model support as 0.9.272"
|
|
174
|
+
"Add daemon smoke gate"
|
|
175
175
|
],
|
|
176
176
|
"migration_notes": []
|
|
177
177
|
},
|
|
178
|
-
"0.9.
|
|
179
|
-
"version": "0.9.
|
|
178
|
+
"0.9.283": {
|
|
179
|
+
"version": "0.9.283",
|
|
180
180
|
"date": "2026-06-17",
|
|
181
181
|
"features": [
|
|
182
182
|
"GoTrue JWT auth for MCP — exe-os login/logout/whoami",
|
|
@@ -206,6 +206,7 @@
|
|
|
206
206
|
"cloud-synced cross-device reminders via Cloudflare Worker KV (a4195632) (#127)"
|
|
207
207
|
],
|
|
208
208
|
"fixes": [
|
|
209
|
+
"correct exe-os + exe-auth digests for amd64 in manifest 0.9.24 (bug e0c3b3fb)",
|
|
209
210
|
"update exe-os daemon image to v0.9.281 in manifest 0.9.24",
|
|
210
211
|
"mcp_ping reports alive when running inside daemon process (bug b5fb9404)",
|
|
211
212
|
"add exe-erp-nginx for static assets + remove direct gunicorn port (bug 6776edf0)",
|
|
@@ -229,11 +230,11 @@
|
|
|
229
230
|
"accept digest-only official images in deploy gate",
|
|
230
231
|
"prevent empty/duplicate company_procedure rows at the source",
|
|
231
232
|
"remove duplicate if-block causing TS build failure",
|
|
232
|
-
"watchdog self-heal + restart-intent propagation (belt & suspenders)"
|
|
233
|
-
"skip junk/empty company_procedure rows that bloated prompts to 1.6MB"
|
|
233
|
+
"watchdog self-heal + restart-intent propagation (belt & suspenders)"
|
|
234
234
|
],
|
|
235
235
|
"security": [],
|
|
236
236
|
"other": [
|
|
237
|
+
"bump v0.9.283 — amd64 digest fix",
|
|
237
238
|
"bump v0.9.282 — daemon image v0.9.281 in manifest",
|
|
238
239
|
"prepare v0.9.281 — 50 bugs fixed, stack 0.9.24 fully deployable",
|
|
239
240
|
"bump v0.9.280 — GoTrue MCP auth, support fixes",
|
|
@@ -257,13 +258,12 @@
|
|
|
257
258
|
"release: stack 0.9.22 — exe-os v0.9.270, exe-crm v0.9.48, exe-gateway v0.9.18 (digest-pinned)",
|
|
258
259
|
"bump 0.9.273 — graph/send_whatsapp/phantom-notif fixes",
|
|
259
260
|
"Add daemon smoke gate",
|
|
260
|
-
"Publish Claude Fable model support as 0.9.272"
|
|
261
|
-
"Add Claude Fable model whitelist"
|
|
261
|
+
"Publish Claude Fable model support as 0.9.272"
|
|
262
262
|
],
|
|
263
263
|
"migration_notes": []
|
|
264
264
|
},
|
|
265
|
-
"0.9.
|
|
266
|
-
"version": "0.9.
|
|
265
|
+
"0.9.282": {
|
|
266
|
+
"version": "0.9.282",
|
|
267
267
|
"date": "2026-06-17",
|
|
268
268
|
"features": [
|
|
269
269
|
"GoTrue JWT auth for MCP — exe-os login/logout/whoami",
|
|
@@ -293,6 +293,7 @@
|
|
|
293
293
|
"cloud-synced cross-device reminders via Cloudflare Worker KV (a4195632) (#127)"
|
|
294
294
|
],
|
|
295
295
|
"fixes": [
|
|
296
|
+
"update exe-os daemon image to v0.9.281 in manifest 0.9.24",
|
|
296
297
|
"mcp_ping reports alive when running inside daemon process (bug b5fb9404)",
|
|
297
298
|
"add exe-erp-nginx for static assets + remove direct gunicorn port (bug 6776edf0)",
|
|
298
299
|
"ERP healthcheck Host header + websocket path for Frappe 17 (bugs 7c905474, 468cc508)",
|
|
@@ -316,11 +317,11 @@
|
|
|
316
317
|
"prevent empty/duplicate company_procedure rows at the source",
|
|
317
318
|
"remove duplicate if-block causing TS build failure",
|
|
318
319
|
"watchdog self-heal + restart-intent propagation (belt & suspenders)",
|
|
319
|
-
"skip junk/empty company_procedure rows that bloated prompts to 1.6MB"
|
|
320
|
-
"match user by deviceId when encryption secret lost"
|
|
320
|
+
"skip junk/empty company_procedure rows that bloated prompts to 1.6MB"
|
|
321
321
|
],
|
|
322
322
|
"security": [],
|
|
323
323
|
"other": [
|
|
324
|
+
"bump v0.9.282 — daemon image v0.9.281 in manifest",
|
|
324
325
|
"prepare v0.9.281 — 50 bugs fixed, stack 0.9.24 fully deployable",
|
|
325
326
|
"bump v0.9.280 — GoTrue MCP auth, support fixes",
|
|
326
327
|
"bump v0.9.279 — stack v0.9.24, GoTrue support auth, optional services",
|
|
@@ -344,13 +345,12 @@
|
|
|
344
345
|
"bump 0.9.273 — graph/send_whatsapp/phantom-notif fixes",
|
|
345
346
|
"Add daemon smoke gate",
|
|
346
347
|
"Publish Claude Fable model support as 0.9.272",
|
|
347
|
-
"Add Claude Fable model whitelist"
|
|
348
|
-
"Publish stack-update service resume as 0.9.271"
|
|
348
|
+
"Add Claude Fable model whitelist"
|
|
349
349
|
],
|
|
350
350
|
"migration_notes": []
|
|
351
351
|
},
|
|
352
|
-
"0.9.
|
|
353
|
-
"version": "0.9.
|
|
352
|
+
"0.9.281": {
|
|
353
|
+
"version": "0.9.281",
|
|
354
354
|
"date": "2026-06-17",
|
|
355
355
|
"features": [
|
|
356
356
|
"GoTrue JWT auth for MCP — exe-os login/logout/whoami",
|
|
@@ -380,34 +380,35 @@
|
|
|
380
380
|
"cloud-synced cross-device reminders via Cloudflare Worker KV (a4195632) (#127)"
|
|
381
381
|
],
|
|
382
382
|
"fixes": [
|
|
383
|
+
"mcp_ping reports alive when running inside daemon process (bug b5fb9404)",
|
|
384
|
+
"add exe-erp-nginx for static assets + remove direct gunicorn port (bug 6776edf0)",
|
|
385
|
+
"ERP healthcheck Host header + websocket path for Frappe 17 (bugs 7c905474, 468cc508)",
|
|
386
|
+
"rotate signing key to match Worker secret (bug 834ffb70)",
|
|
387
|
+
"add exe-auth service to main compose + fix image reference to update.askexe.com",
|
|
388
|
+
"align compose default image tags with manifest 0.9.24 (bug 79168bac)",
|
|
389
|
+
"isDaemonAlive falls back to socket check when PID file missing (bug b5fb9404)",
|
|
390
|
+
"correct exe-erp image tag final7→final3 in manifests 0.9.23 + 0.9.24 (bug ff960d31)",
|
|
391
|
+
"create exe_erp login role in init-db.sql (bug 9d452322)",
|
|
392
|
+
"CRM_SERVER_URL uses crm. subdomain + add EXE_CRM_ADMIN_EMAIL (bugs 8d20e779, 7debf355)",
|
|
393
|
+
"use update.askexe.com for exe-auth image in manifest 0.9.24 (bug 97f2d288)",
|
|
394
|
+
"ensure description field is never empty in feature request upstream payload (bug 0a8e16d0)",
|
|
395
|
+
"add WSL clip.exe detection to shipped tmux.conf (bug 3396fb26)",
|
|
396
|
+
"include node binary dir in exe-os-node shim PATH (bug 71adcb68)",
|
|
397
|
+
"add minimum daemon age guard to prevent crash-loop (bug 25faecf3)",
|
|
398
|
+
"digest-pin all 0.9.24 images + remove control-plane from customer manifest",
|
|
399
|
+
"resolve full UUID before upstream delivery — fixes update_bug/update_feature 400s (bug 31b1d2e3)",
|
|
400
|
+
"dual-key JWT verification — accept tokens signed by previous key (bug 2f5d6166)",
|
|
401
|
+
"add sync_meta to SQL guard allowlist — fixes cloud sync (bug 9fbbe145)",
|
|
402
|
+
"accept digest-only official images in deploy gate",
|
|
383
403
|
"prevent empty/duplicate company_procedure rows at the source",
|
|
384
404
|
"remove duplicate if-block causing TS build failure",
|
|
385
405
|
"watchdog self-heal + restart-intent propagation (belt & suspenders)",
|
|
386
406
|
"skip junk/empty company_procedure rows that bloated prompts to 1.6MB",
|
|
387
|
-
"match user by deviceId when encryption secret lost"
|
|
388
|
-
"backfill api_key_hash on every /auth/activate call",
|
|
389
|
-
"allow dev-fallback storage secret for backfill (keys were encrypted with it)",
|
|
390
|
-
"cap model-instructions prompt under the API limit (was 1.6MB → 400)",
|
|
391
|
-
"mark keychain unavailable on write timeout; pass --session to codex/opencode",
|
|
392
|
-
"backfill api_key_hash for ALREADY encrypted keys",
|
|
393
|
-
"store api_key_hash on key upgrade — support validation works for all customers",
|
|
394
|
-
"name the target keychain on store to fix \"cannot be found\"",
|
|
395
|
-
"never re-prompt when the OS keychain is unavailable",
|
|
396
|
-
"GoTrue JWT payload decode fallback — support channel working",
|
|
397
|
-
"validate against GoTrue JWT — not just D1 license keys",
|
|
398
|
-
"stop master-key destruction on launch + fix codex --profile",
|
|
399
|
-
"clear all 25 moderate CVEs via OTel+protobufjs overrides; fix date-bomb test",
|
|
400
|
-
"auth is customer-facing (not control-plane)",
|
|
401
|
-
"patch hono HIGH CVE + fix stale worker-gate test",
|
|
402
|
-
"use hooks-free CODEX_HOME to prevent crash after 10 codex calls",
|
|
403
|
-
"per-chat runner + offset flag + execSync + clean env + GC",
|
|
404
|
-
"execFile instead of spawn, sequential loop, useOpenCode, 180s timeout",
|
|
405
|
-
"P1 CVE fixes + test alignment + tarball budget + env sync",
|
|
406
|
-
"exe-start COO_NAME resolution fails on npm install (not dev symlink)",
|
|
407
|
-
"fix FTS ambiguous column bug + CLaRa term sanitization"
|
|
407
|
+
"match user by deviceId when encryption secret lost"
|
|
408
408
|
],
|
|
409
409
|
"security": [],
|
|
410
410
|
"other": [
|
|
411
|
+
"prepare v0.9.281 — 50 bugs fixed, stack 0.9.24 fully deployable",
|
|
411
412
|
"bump v0.9.280 — GoTrue MCP auth, support fixes",
|
|
412
413
|
"bump v0.9.279 — stack v0.9.24, GoTrue support auth, optional services",
|
|
413
414
|
"service ownership matrix — dashboard is AskExe-only, not customer stack",
|