@askexenow/exe-os 0.9.287 → 0.9.288

package/deploy/compose/.env.customer.example

@@ -85,7 +85,16 @@ MONITOR_HUB_PORT=8090
 MONITOR_HUB_ADMIN_EMAIL=CHANGEME_ADMIN_EMAIL
 MONITOR_HUB_ADMIN_PASSWORD=CHANGEME_MONITOR_HUB_ADMIN_PASSWORD
 
-# --- Monitoring agent (standard for managed customer VPSs) ---
+# --- Monitoring agent (host-access; OFF until explicitly enabled) ---
+# exe-monitor-agent needs SENSITIVE read-only host access to report fleet health:
+#   /var/run/docker.sock  — root-equivalent; can inspect ALL containers on the host
+#   /proc, /sys           — host process list + system-wide CPU/mem/hardware metrics
+#   /etc/os-release       — host OS name/version
+# It is GATED behind the "monitor-agent" compose profile and stays OFF by default.
+# Enable it ONLY after acknowledging this scope: run setup.sh and answer the
+# host-access prompt, or uncomment COMPOSE_PROFILES below.
+# Full scope details: deploy/monitor/HOST-ACCESS-CONSENT.md
+# COMPOSE_PROFILES=monitor-agent
 MONITOR_AGENT_IMAGE_TAG=update.askexe.com/askexe/exe-monitor-agent:v0.9.4
 # Reports to the local hub. Auto-populated by `exe-os stack-update` during bootstrap.
 MONITOR_HUB_URL=http://exe-monitor-hub:8090

package/deploy/compose/.env.example

@@ -98,7 +98,14 @@ MONITOR_HUB_PORT=8090
 MONITOR_HUB_ADMIN_EMAIL=CHANGEME_ADMIN_EMAIL
 MONITOR_HUB_ADMIN_PASSWORD=CHANGEME_MONITOR_HUB_ADMIN_PASSWORD
 
-# --- Monitoring agent (standard for managed customer VPSs) ---
+# --- Monitoring agent (host-access; OFF until explicitly enabled) ---
+# exe-monitor-agent needs SENSITIVE read-only host access to report fleet
+# health: /var/run/docker.sock (root-equivalent — inspect ALL containers),
+# /proc, /sys (host CPU/mem/hardware), /etc/os-release (host OS). It is GATED
+# behind the "monitor-agent" compose profile and stays OFF by default.
+# To enable: run setup.sh and acknowledge the host-access prompt, or add
+# "monitor-agent" to COMPOSE_PROFILES below. Scope: deploy/monitor/HOST-ACCESS-CONSENT.md.
+# COMPOSE_PROFILES=monitor-agent
 MONITOR_AGENT_IMAGE_TAG=ghcr.io/askexe/exe-monitor-agent:v0.9.4
 # Reports to the local hub. Auto-populated by `exe-os stack-update` during bootstrap.
 MONITOR_HUB_URL=http://exe-monitor-hub:8090

package/deploy/compose/README.md

@@ -46,6 +46,27 @@ nginx (Lane A-1 `nginx-tls`) can reverse-proxy them. Override the host port via
 `CRM_HOST_PORT` / `WIKI_HOST_PORT` / `GATEWAY_HTTP_HOST_PORT` /
 `GATEWAY_WS_HOST_PORT` if you co-host multiple stacks.
 
+## Monitor agent — host-access consent (OFF by default)
+
+`exe-monitor-agent` reports host/container health to the monitoring hub, but it
+needs **sensitive read-only host access** to do so: `/var/run/docker.sock`
+(root-equivalent — can inspect every container), `/proc`, `/sys`, and
+`/etc/os-release`. Because that access is effectively root on the box, the agent
+is **gated behind the `monitor-agent` compose profile** and does **not** start by
+default.
+
+The operator opts in explicitly:
+
+- **`setup.sh`** prints the disclosure and asks `Enable the monitor agent with
+  this host access? [y/N]`. Answering yes appends `monitor-agent` to
+  `COMPOSE_PROFILES` in `.env`. For unattended installs, set
+  `MONITOR_AGENT_HOST_ACCESS_CONSENT=yes` (or `no`) before running setup.
+- **Manual:** uncomment `COMPOSE_PROFILES=monitor-agent` in `.env`.
+
+With the profile unset, `docker compose up -d` brings up the full stack **without**
+the agent and none of the host mounts above are exposed. Full scope and rationale:
+[`deploy/monitor/HOST-ACCESS-CONSENT.md`](../monitor/HOST-ACCESS-CONSENT.md).
+
 ## Company Brain projection guard
 
 `exed` is the only place in the stack that should project cloud/local memory

package/deploy/compose/docker-compose.yml

@@ -2,7 +2,10 @@
 #
 # Services: exe-db (postgres) + clickhouse + redis + exe-crm + exe-wiki + exe-os + exe-gateway + exe-erp + otel-collector
 # ONE postgres (exe-db) — all services connect to it via DATABASE_URL.
-# Standard for managed customer VPSs: exe-monitor-agent reports fleet health to monitor.askexe.com.
+# Optional: exe-monitor-agent reports fleet health to the monitoring hub. It needs
+#   sensitive host access (docker.sock, /proc, /sys) so it is gated behind the
+#   "monitor-agent" compose profile and stays OFF until the operator consents.
+#   See deploy/monitor/HOST-ACCESS-CONSENT.md.
 # All image tags pinned per-client via .env (no :latest). Healthchecks on every service.
 # Named volumes for state; explicit subnets; depends_on with service_healthy gates.
 #
@@ -492,9 +495,29 @@ services:
       driver: json-file
       options: { max-size: "10m", max-file: "3" }
 
+  # ------------------------------------------------------------------
+  # exe-monitor-agent — fleet health reporter (Beszel agent).
+  #
+  # ⚠️  HOST-ACCESS CONSENT REQUIRED.
+  # This agent needs sensitive read-only host access to report system
+  # health (CPU/mem/disk, container stats, OS identity):
+  #   - /var/run/docker.sock  → enumerate & inspect ALL containers on the host
+  #   - /proc                 → host process list + system-wide CPU/mem stats
+  #   - /sys                  → host hardware/kernel metrics (temps, block devs)
+  #   - /etc/os-release       → host OS name/version
+  # The Docker socket in particular is effectively root-equivalent on the
+  # host, so this service is GATED behind the "monitor-agent" compose
+  # profile and does NOT start by default. The operator must explicitly
+  # acknowledge this scope during setup (setup.sh prompt) or by setting
+  # MONITOR_AGENT_HOST_ACCESS_CONSENT=true, which sets COMPOSE_PROFILES to
+  # include "monitor-agent". See deploy/monitor/HOST-ACCESS-CONSENT.md.
+  # ------------------------------------------------------------------
   exe-monitor-agent:
     image: ${MONITOR_AGENT_IMAGE_TAG:-ghcr.io/askexe/exe-monitor-agent:v0.9.4}
     container_name: exe-monitor-agent
+    # Host-access consent gate: only starts when the operator has
+    # acknowledged the host-access scope (COMPOSE_PROFILES=monitor-agent).
+    profiles: ["monitor-agent"]
     restart: unless-stopped
     # Depends on hub so pairing can succeed on first boot.
     depends_on:

package/deploy/compose/generate-env.ts

@@ -150,7 +150,14 @@ export function generateEnv(options: GenerateEnvOptions): string {
     `MONITOR_HUB_ADMIN_EMAIL=admin@${normalizedDomain}`,
     `MONITOR_HUB_ADMIN_PASSWORD=${randomSecret(24)}`,
     "",
-    "# --- Monitoring agent (standard for managed customer VPSs) ---",
+    "# --- Monitoring agent (host-access; OFF until explicitly enabled) ---",
+    "# exe-monitor-agent needs SENSITIVE read-only host access to report fleet",
+    "# health: /var/run/docker.sock (root-equivalent — inspect ALL containers),",
+    "# /proc, /sys (host CPU/mem/hardware), /etc/os-release (host OS). It is GATED",
+    "# behind the \"monitor-agent\" compose profile and stays OFF by default.",
+    "# To enable: run setup.sh and acknowledge the host-access prompt, or add",
+    "# \"monitor-agent\" to COMPOSE_PROFILES below. Scope: deploy/monitor/HOST-ACCESS-CONSENT.md.",
+    "# COMPOSE_PROFILES=monitor-agent",
     `MONITOR_AGENT_IMAGE_TAG=${MONITOR_AGENT_IMAGE_TAG}`,
     "# Reports to the local hub. Auto-populated by `exe-os stack-update` during bootstrap.",
     `MONITOR_HUB_URL=${DEFAULT_MONITOR_HUB_URL}`,
@@ -277,7 +284,14 @@ export function generateExampleEnv(): string {
     "MONITOR_HUB_ADMIN_EMAIL=CHANGEME_ADMIN_EMAIL",
     "MONITOR_HUB_ADMIN_PASSWORD=CHANGEME_MONITOR_HUB_ADMIN_PASSWORD",
     "",
-    "# --- Monitoring agent (standard for managed customer VPSs) ---",
+    "# --- Monitoring agent (host-access; OFF until explicitly enabled) ---",
+    "# exe-monitor-agent needs SENSITIVE read-only host access to report fleet",
+    "# health: /var/run/docker.sock (root-equivalent — inspect ALL containers),",
+    "# /proc, /sys (host CPU/mem/hardware), /etc/os-release (host OS). It is GATED",
+    "# behind the \"monitor-agent\" compose profile and stays OFF by default.",
+    "# To enable: run setup.sh and acknowledge the host-access prompt, or add",
+    "# \"monitor-agent\" to COMPOSE_PROFILES below. Scope: deploy/monitor/HOST-ACCESS-CONSENT.md.",
+    "# COMPOSE_PROFILES=monitor-agent",
     `MONITOR_AGENT_IMAGE_TAG=${MONITOR_AGENT_IMAGE_TAG}`,
     "# Reports to the local hub. Auto-populated by `exe-os stack-update` during bootstrap.",
     `MONITOR_HUB_URL=${DEFAULT_MONITOR_HUB_URL}`,

package/deploy/compose/setup.sh

@@ -123,6 +123,69 @@ ENVEOF
   info ".env generated with auto-generated secrets"
 fi
 
+# Step 2b: Host-access consent for the monitor agent.
+#
+# exe-monitor-agent reports fleet health to the monitoring hub, but to do so it
+# needs SENSITIVE read-only host access:
+#   - /var/run/docker.sock  (root-equivalent: enumerate/inspect ALL containers)
+#   - /proc, /sys           (host process list + system-wide CPU/mem/hardware)
+#   - /etc/os-release       (host OS identity)
+# The service is gated behind the "monitor-agent" compose profile and stays OFF
+# until the operator explicitly acknowledges this scope here. Acknowledgement is
+# recorded by adding "monitor-agent" to COMPOSE_PROFILES in .env. Pre-answer in
+# automation by exporting MONITOR_AGENT_HOST_ACCESS_CONSENT=yes|no.
+info "Step 2b: Monitor agent host-access consent"
+MONITOR_CONSENT="no"
+if grep -q '^COMPOSE_PROFILES=.*monitor-agent' .env 2>/dev/null; then
+  info "Monitor agent already enabled (COMPOSE_PROFILES contains monitor-agent) — keeping it on."
+  MONITOR_CONSENT="yes"
+else
+  cat <<'CONSENT'
+
+  ┌──────────────────────────────────────────────────────────────────────┐
+  │  HOST-ACCESS DISCLOSURE — exe-monitor-agent                            │
+  ├──────────────────────────────────────────────────────────────────────┤
+  │  Enabling the monitor agent grants it READ-ONLY access to the host:    │
+  │    • /var/run/docker.sock  — inspect ALL containers (root-equivalent)  │
+  │    • /proc                 — host process list + system CPU/mem stats   │
+  │    • /sys                  — host hardware/kernel metrics               │
+  │    • /etc/os-release       — host OS name/version                       │
+  │                                                                        │
+  │  The Docker socket is effectively root on this machine. Only enable    │
+  │  the agent if you trust the monitor image and accept this scope.       │
+  │  Details: deploy/monitor/HOST-ACCESS-CONSENT.md                        │
+  └──────────────────────────────────────────────────────────────────────┘
+
+CONSENT
+  ANS="${MONITOR_AGENT_HOST_ACCESS_CONSENT:-}"
+  if [[ -z "$ANS" ]]; then
+    if [[ -t 0 ]]; then
+      read -r -p "  Enable the monitor agent with this host access? [y/N] " ANS
+    else
+      warn "Non-interactive shell and MONITOR_AGENT_HOST_ACCESS_CONSENT unset — monitor agent stays DISABLED."
+      ANS="no"
+    fi
+  fi
+  # Lowercase without bash 4 expansions (macOS ships bash 3.2).
+  ANS_LC=$(printf '%s' "$ANS" | tr '[:upper:]' '[:lower:]')
+  case "$ANS_LC" in
+    y|yes|true|1) MONITOR_CONSENT="yes";;
+    *) MONITOR_CONSENT="no";;
+  esac
+
+  if [[ "$MONITOR_CONSENT" == "yes" ]]; then
+    # Append "monitor-agent" to COMPOSE_PROFILES (create or extend the line).
+    if grep -q '^COMPOSE_PROFILES=' .env 2>/dev/null; then
+      sed -i.bak -E 's/^(COMPOSE_PROFILES=)(.*)$/\1\2,monitor-agent/' .env && rm -f .env.bak
+    else
+      echo "COMPOSE_PROFILES=monitor-agent" >> .env
+    fi
+    info "Monitor agent ENABLED — host access acknowledged (COMPOSE_PROFILES=monitor-agent)."
+  else
+    info "Monitor agent DISABLED — host access not granted. Re-run setup or set COMPOSE_PROFILES=monitor-agent in .env to enable later."
+  fi
+fi
+
 # Step 3a: Bootstrap gateway.json (must exist before `docker compose up` or
 # Docker will create it as a directory instead of a file, leaving the gateway
 # with an empty config and WhatsApp adapters disabled).

package/dist/active-agent-KB4346K6.js

@@ -0,0 +1,26 @@
+import {
+  cleanupSessionMarkers,
+  clearActiveAgent,
+  getActiveAgent,
+  getAllActiveAgents,
+  resolveActiveAgentFromTmuxSession,
+  writeActiveAgent
+} from "./chunk-YACAOZVG.js";
+import "./chunk-CVYC6DUW.js";
+import "./chunk-GJV3WDWM.js";
+import "./chunk-WLDBPKRL.js";
+import "./chunk-2I23RPSI.js";
+import "./chunk-R5LCP56X.js";
+import "./chunk-5DNJPRDW.js";
+import "./chunk-FXU7JOXK.js";
+import "./chunk-T3B5RK4H.js";
+import "./chunk-LYH5HE24.js";
+import "./chunk-MLKGABMK.js";
+export {
+  cleanupSessionMarkers,
+  clearActiveAgent,
+  getActiveAgent,
+  getAllActiveAgents,
+  resolveActiveAgentFromTmuxSession,
+  writeActiveAgent
+};

package/dist/active-agent-LTYLGBJX.js

@@ -0,0 +1,27 @@
+import "./chunk-SH45SJQW.js";
+import {
+  cleanupSessionMarkers,
+  clearActiveAgent,
+  getActiveAgent,
+  getAllActiveAgents,
+  resolveActiveAgentFromTmuxSession,
+  writeActiveAgent
+} from "./chunk-RW4EMKQF.js";
+import "./chunk-CVYC6DUW.js";
+import "./chunk-GJV3WDWM.js";
+import "./chunk-XVDWHYIK.js";
+import "./chunk-2I23RPSI.js";
+import "./chunk-CZ47BFAT.js";
+import "./chunk-5DNJPRDW.js";
+import "./chunk-FXU7JOXK.js";
+import "./chunk-CEKZ77KA.js";
+import "./chunk-LYH5HE24.js";
+import "./chunk-MLKGABMK.js";
+export {
+  cleanupSessionMarkers,
+  clearActiveAgent,
+  getActiveAgent,
+  getAllActiveAgents,
+  resolveActiveAgentFromTmuxSession,
+  writeActiveAgent
+};

package/dist/active-agent-V4W557J4.js

@@ -0,0 +1,26 @@
+import {
+  cleanupSessionMarkers,
+  clearActiveAgent,
+  getActiveAgent,
+  getAllActiveAgents,
+  resolveActiveAgentFromTmuxSession,
+  writeActiveAgent
+} from "./chunk-RW4EMKQF.js";
+import "./chunk-CVYC6DUW.js";
+import "./chunk-GJV3WDWM.js";
+import "./chunk-XVDWHYIK.js";
+import "./chunk-2I23RPSI.js";
+import "./chunk-CZ47BFAT.js";
+import "./chunk-5DNJPRDW.js";
+import "./chunk-FXU7JOXK.js";
+import "./chunk-CEKZ77KA.js";
+import "./chunk-LYH5HE24.js";
+import "./chunk-MLKGABMK.js";
+export {
+  cleanupSessionMarkers,
+  clearActiveAgent,
+  getActiveAgent,
+  getAllActiveAgents,
+  resolveActiveAgentFromTmuxSession,
+  writeActiveAgent
+};

package/dist/active-agent-XZVU5XBO.js

@@ -0,0 +1,27 @@
+import "./chunk-SH45SJQW.js";
+import {
+  cleanupSessionMarkers,
+  clearActiveAgent,
+  getActiveAgent,
+  getAllActiveAgents,
+  resolveActiveAgentFromTmuxSession,
+  writeActiveAgent
+} from "./chunk-YACAOZVG.js";
+import "./chunk-CVYC6DUW.js";
+import "./chunk-GJV3WDWM.js";
+import "./chunk-WLDBPKRL.js";
+import "./chunk-2I23RPSI.js";
+import "./chunk-R5LCP56X.js";
+import "./chunk-5DNJPRDW.js";
+import "./chunk-FXU7JOXK.js";
+import "./chunk-T3B5RK4H.js";
+import "./chunk-LYH5HE24.js";
+import "./chunk-MLKGABMK.js";
+export {
+  cleanupSessionMarkers,
+  clearActiveAgent,
+  getActiveAgent,
+  getAllActiveAgents,
+  resolveActiveAgentFromTmuxSession,
+  writeActiveAgent
+};

package/dist/agentic-ontology-4PNQX4YW.js

@@ -0,0 +1,25 @@
+import {
+  clean,
+  extractGoalCandidates,
+  inferIntention,
+  inferOntologyEventType,
+  inferOutcome,
+  inferSemanticLabel,
+  insertOntologyForBatch,
+  insertOntologyForMemory,
+  ontologyPayload,
+  stableId
+} from "./chunk-GLEE2MUJ.js";
+import "./chunk-MLKGABMK.js";
+export {
+  clean,
+  extractGoalCandidates,
+  inferIntention,
+  inferOntologyEventType,
+  inferOutcome,
+  inferSemanticLabel,
+  insertOntologyForBatch,
+  insertOntologyForMemory,
+  ontologyPayload,
+  stableId
+};

package/dist/agentic-ontology-WOTOTSR7.js

@@ -0,0 +1,25 @@
+import {
+  clean,
+  extractGoalCandidates,
+  inferIntention,
+  inferOntologyEventType,
+  inferOutcome,
+  inferSemanticLabel,
+  insertOntologyForBatch,
+  insertOntologyForMemory,
+  ontologyPayload,
+  stableId
+} from "./chunk-SWFFGWAF.js";
+import "./chunk-MLKGABMK.js";
+export {
+  clean,
+  extractGoalCandidates,
+  inferIntention,
+  inferOntologyEventType,
+  inferOutcome,
+  inferSemanticLabel,
+  insertOntologyForBatch,
+  insertOntologyForMemory,
+  ontologyPayload,
+  stableId
+};