@askexenow/exe-os 0.9.288 → 0.9.289

package/deploy/compose/README.md

@@ -41,6 +41,12 @@ upstream LTS rolls.
 - `frontend` (`10.43.0.0/24`) — apps that terminate user traffic
   (`exe-crm`, `exe-wiki`, `exe-gateway`). DBs never join this net.
 
+Services do NOT pin static container IPs — Docker assigns addresses from each
+network's subnet. Services reach each other by service name (Docker DNS), so
+pinned IPs were unnecessary and broke updates on existing installs whose
+networks were created with different IPAM subnets ("no configured subnet
+contains IP address …"). Do not reintroduce `ipv4_address:` on services.
+
 Apps publish their HTTP ports to `127.0.0.1` on the host so the host-installed
 nginx (Lane A-1 `nginx-tls`) can reverse-proxy them. Override the host port via
 `CRM_HOST_PORT` / `WIKI_HOST_PORT` / `GATEWAY_HTTP_HOST_PORT` /

package/deploy/compose/docker-compose.yml

@@ -41,8 +41,7 @@ services:
       - postgres_data:/var/lib/postgresql/data
       - ./init-db.sql:/docker-entrypoint-initdb.d/01-init.sql:ro
     networks:
-      backend:
-        ipv4_address: 10.42.0.10
+      - backend
     healthcheck:
       test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-exe} -d ${POSTGRES_DB:-exedb}"]
       interval: 10s
@@ -81,8 +80,7 @@ services:
         soft: 262144
         hard: 262144
     networks:
-      backend:
-        ipv4_address: 10.42.0.11
+      - backend
     healthcheck:
       test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://127.0.0.1:8123/ping"]
       interval: 10s
@@ -104,8 +102,7 @@ services:
     volumes:
       - redis_data:/data
     networks:
-      backend:
-        ipv4_address: 10.42.0.12
+      - backend
     healthcheck:
       test: ["CMD-SHELL", "redis-cli -a $${REDIS_PASSWORD:?REDIS_PASSWORD is required} ping | grep -q PONG"]
       interval: 10s
@@ -151,8 +148,7 @@ services:
     ports:
       - "127.0.0.1:${GOTRUE_HOST_PORT:-9999}:9999"
     networks:
-      backend:
-        ipv4_address: 10.42.0.13
+      - backend
     healthcheck:
       test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://127.0.0.1:9999/health"]
       interval: 15s
@@ -181,8 +177,7 @@ services:
     volumes:
       - monitor_hub_data:/app/pb_data
     networks:
-      backend:
-        ipv4_address: 10.42.0.14
+      - backend
     healthcheck:
       test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://127.0.0.1:8090/api/health"]
       interval: 30s
@@ -237,10 +232,8 @@ services:
       - crm_data:/app/.local-storage
       - ${BRANDING_CONFIG:-./branding.json}:/app/branding.json:ro
     networks:
-      backend:
-        ipv4_address: 10.42.0.20
-      frontend:
-        ipv4_address: 10.43.0.20
+      - backend
+      - frontend
     healthcheck:
       test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:3000/healthz"]
       interval: 30s
@@ -285,8 +278,7 @@ services:
       - crm_data:/app/.local-storage
       - ${BRANDING_CONFIG:-./branding.json}:/app/branding.json:ro
     networks:
-      backend:
-        ipv4_address: 10.42.0.24
+      - backend
     healthcheck:
       test: ["CMD-SHELL", "tr '\\0' ' ' < /proc/1/cmdline | grep -q 'worker:prod'"]
       interval: 30s
@@ -331,10 +323,8 @@ services:
       - wiki_data:/app/server/storage
       - ${BRANDING_CONFIG:-./branding.json}:/app/branding.json:ro
     networks:
-      backend:
-        ipv4_address: 10.42.0.21
-      frontend:
-        ipv4_address: 10.43.0.21
+      - backend
+      - frontend
     healthcheck:
       test: ["CMD", "node", "-e", "const http=require('http');const r=http.get('http://127.0.0.1:3001/api/ping',s=>{process.exit(s.statusCode===200?0:1)});r.on('error',()=>process.exit(1));r.setTimeout(4000,()=>process.exit(1))"]
       interval: 30s
@@ -378,8 +368,7 @@ services:
       - "${EXED_HEALTH_HOST_BIND:-127.0.0.1}:${EXED_HOST_PORT:-8765}:8765"
       - "${EXE_MCP_HOST_BIND:-127.0.0.1}:${EXE_MCP_HOST_PORT:-48739}:48739"
     networks:
-      backend:
-        ipv4_address: 10.42.0.22
+      - backend
     healthcheck:
       # Bug f0f3b187: start_period was 30s but entrypoint runs license check +
       # optional model download before the health server is up. 60s matches the
@@ -424,8 +413,7 @@ services:
     volumes:
       - exe_os_data:/home/exed/.exe-os
     networks:
-      backend:
-        ipv4_address: 10.42.0.33
+      - backend
     deploy:
       resources:
         limits:
@@ -481,10 +469,8 @@ services:
       - gateway_whatsapp_auth:/app/auth_info
       - ./gateway.json:/data/gateway.json:ro
     networks:
-      backend:
-        ipv4_address: 10.42.0.23
-      frontend:
-        ipv4_address: 10.43.0.23
+      - backend
+      - frontend
     healthcheck:
       test: ["CMD", "node", "-e", "const http=require('http');const r=http.get('http://localhost:3100/health',s=>{process.exit(s.statusCode===200?0:1)});r.on('error',()=>process.exit(1));r.setTimeout(4000,()=>process.exit(1))"]
       interval: 30s
@@ -540,8 +526,7 @@ services:
       - /etc/os-release:/host/etc/os-release:ro
       - monitor_agent_data:/var/lib/beszel-agent
     networks:
-      backend:
-        ipv4_address: 10.42.0.30
+      - backend
     healthcheck:
       test: ["CMD", "/app/beszel-agent", "health"]
       interval: 30s
@@ -579,8 +564,7 @@ services:
     ports:
       - "127.0.0.1:${EXE_UPDATE_HOST_PORT:-3200}:${EXE_REGISTRY_PROXY_PORT:-3200}"
     networks:
-      backend:
-        ipv4_address: 10.42.0.25
+      - backend
     healthcheck:
       test: ["CMD", "node", "-e", "fetch('http://127.0.0.1:3200/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"]
       interval: 30s
@@ -630,10 +614,8 @@ services:
     environment:
       TUNNEL_TOKEN: ${CLOUDFLARE_TUNNEL_TOKEN}
     networks:
-      backend:
-        ipv4_address: 10.42.0.31
-      frontend:
-        ipv4_address: 10.43.0.31
+      - backend
+      - frontend
     healthcheck:
       # `tunnel info` requires API credentials unavailable in token mode.
       # The command above exposes cloudflared's local metrics endpoint; use it
@@ -707,8 +689,7 @@ services:
     volumes:
       - erp_sites:/home/frappe/frappe-bench/sites
     networks:
-      backend:
-        ipv4_address: 10.42.0.26
+      - backend
     healthcheck:
       test: ["CMD-SHELL", "curl -sf http://localhost:8000/api/method/ping -H 'Host: ${ERP_SITE_NAME:-erp.localhost}' || exit 1"]
       interval: 30s
@@ -739,10 +720,8 @@ services:
     ports:
       - "127.0.0.1:${ERP_API_PORT:-8069}:80"
     networks:
-      backend:
-        ipv4_address: 10.42.0.32
-      frontend:
-        ipv4_address: 10.43.0.32
+      - backend
+      - frontend
     healthcheck:
       test: ["CMD", "wget", "-qO-", "http://127.0.0.1:80/"]
       interval: 30s
@@ -761,7 +740,28 @@ services:
     container_name: exe-erp-websocket
     restart: unless-stopped
     entrypoint: []
-    command: ["sh", "-c", "node /home/frappe/frappe-bench/apps/frappe/socketio.js 2>/dev/null || node /home/frappe/frappe-bench/apps/frappe/realtime/index.js"]
+    # Frappe relocated the server-side realtime/socketio entry point between
+    # versions (legacy apps/frappe/socketio.js -> apps/frappe/realtime/index.js
+    # in Frappe 17). Hardcoding a single absolute path crash-loops the container
+    # when the path differs in the shipped image (bug 35576eed). Resolve the
+    # actual entry at runtime: try the two known canonical paths, then fall back
+    # to discovering the realtime server file inside the frappe app dir,
+    # explicitly excluding the browser-side socketio_client.js and *.min.js.
+    command:
+      - sh
+      - -c
+      - |
+        set -e
+        APP=/home/frappe/frappe-bench/apps/frappe
+        for c in "$$APP/socketio.js" "$$APP/realtime/index.js" "$$APP/realtime/server.js"; do
+          if [ -f "$$c" ]; then echo "[exe-erp-websocket] starting $$c"; exec node "$$c"; fi
+        done
+        ENTRY=$$(find "$$APP/realtime" "$$APP" -maxdepth 2 -type f -name '*.js' \
+          ! -name '*_client.js' ! -name '*.min.js' 2>/dev/null \
+          | grep -E '/(socketio|realtime/(index|server))\.js$$' | head -n1)
+        if [ -n "$$ENTRY" ]; then echo "[exe-erp-websocket] starting discovered $$ENTRY"; exec node "$$ENTRY"; fi
+        echo "[exe-erp-websocket] FATAL: no realtime/socketio server entry found under $$APP" >&2
+        exit 1
     depends_on:
       exe-erp:
         condition: service_healthy
@@ -776,8 +776,7 @@ services:
     volumes:
       - erp_sites:/home/frappe/frappe-bench/sites
     networks:
-      backend:
-        ipv4_address: 10.42.0.27
+      - backend
     deploy:
       resources:
         limits:
@@ -811,8 +810,7 @@ services:
     volumes:
       - erp_sites:/home/frappe/frappe-bench/sites
     networks:
-      backend:
-        ipv4_address: 10.42.0.28
+      - backend
     deploy:
       resources:
         limits:
@@ -846,8 +844,7 @@ services:
     volumes:
       - erp_sites:/home/frappe/frappe-bench/sites
     networks:
-      backend:
-        ipv4_address: 10.42.0.29
+      - backend
     deploy:
       resources:
         limits:
@@ -878,8 +875,7 @@ services:
       - "127.0.0.1:${OTEL_METRICS_PORT:-8888}:8888"  # Collector own metrics
       - "127.0.0.1:${OTEL_HEALTH_PORT:-13133}:13133" # Health check
     networks:
-      backend:
-        ipv4_address: 10.42.0.40
+      - backend
     # otel-contrib is a scratch image (no shell/wget/curl). Health is monitored
     # externally via curl http://127.0.0.1:13133/ from health-monitor.sh.
     # The health_check extension inside the collector still runs on :13133.
@@ -905,8 +901,7 @@ services:
     ports:
       - "127.0.0.1:${AUTH_PORT:-3300}:80"
     networks:
-      frontend:
-        ipv4_address: 10.43.0.35
+      - frontend
     depends_on:
       exe-db:
         condition: service_healthy

package/dist/active-agent-DVMG6WVY.js

@@ -0,0 +1,27 @@
+import "./chunk-SH45SJQW.js";
+import {
+  cleanupSessionMarkers,
+  clearActiveAgent,
+  getActiveAgent,
+  getAllActiveAgents,
+  resolveActiveAgentFromTmuxSession,
+  writeActiveAgent
+} from "./chunk-HJQQ7746.js";
+import "./chunk-CVYC6DUW.js";
+import "./chunk-GJV3WDWM.js";
+import "./chunk-3X2ZT5FN.js";
+import "./chunk-2I23RPSI.js";
+import "./chunk-SCQEAMO3.js";
+import "./chunk-PNQDP3OA.js";
+import "./chunk-FXU7JOXK.js";
+import "./chunk-5P3HOBZX.js";
+import "./chunk-LYH5HE24.js";
+import "./chunk-MLKGABMK.js";
+export {
+  cleanupSessionMarkers,
+  clearActiveAgent,
+  getActiveAgent,
+  getAllActiveAgents,
+  resolveActiveAgentFromTmuxSession,
+  writeActiveAgent
+};

package/dist/active-agent-JJVXXRZV.js

@@ -0,0 +1,26 @@
+import {
+  cleanupSessionMarkers,
+  clearActiveAgent,
+  getActiveAgent,
+  getAllActiveAgents,
+  resolveActiveAgentFromTmuxSession,
+  writeActiveAgent
+} from "./chunk-HJQQ7746.js";
+import "./chunk-CVYC6DUW.js";
+import "./chunk-GJV3WDWM.js";
+import "./chunk-3X2ZT5FN.js";
+import "./chunk-2I23RPSI.js";
+import "./chunk-SCQEAMO3.js";
+import "./chunk-PNQDP3OA.js";
+import "./chunk-FXU7JOXK.js";
+import "./chunk-5P3HOBZX.js";
+import "./chunk-LYH5HE24.js";
+import "./chunk-MLKGABMK.js";
+export {
+  cleanupSessionMarkers,
+  clearActiveAgent,
+  getActiveAgent,
+  getAllActiveAgents,
+  resolveActiveAgentFromTmuxSession,
+  writeActiveAgent
+};

package/dist/agentic-ontology-2LJST3BE.js

@@ -0,0 +1,25 @@
+import {
+  clean,
+  extractGoalCandidates,
+  inferIntention,
+  inferOntologyEventType,
+  inferOutcome,
+  inferSemanticLabel,
+  insertOntologyForBatch,
+  insertOntologyForMemory,
+  ontologyPayload,
+  stableId
+} from "./chunk-G6GC2YSP.js";
+import "./chunk-MLKGABMK.js";
+export {
+  clean,
+  extractGoalCandidates,
+  inferIntention,
+  inferOntologyEventType,
+  inferOutcome,
+  inferSemanticLabel,
+  insertOntologyForBatch,
+  insertOntologyForMemory,
+  ontologyPayload,
+  stableId
+};