@askexenow/exe-os 0.9.298 → 0.9.299

package/deploy/stack-manifests/v0.9.json

@@ -1346,7 +1346,7 @@
       "breakingChanges": [],
       "services": {
         "exe-os": {
-          "image": "update.askexe.com/askexe/exe-os:v0.9.294@sha256:cb89b04278beafc1596dd7b7c0012cbb75ce58a8e4c0ea2c1ffa5efffd5a03d7",
+          "image": "update.askexe.com/askexe/exe-os:v0.9.297@sha256:9fb38b3972202c410bb03d437a7fbaaf34a474f123285f45cbd9ceb039d276c1",
           "env": "EXE_OS_IMAGE_TAG",
           "composeService": "exe-os",
           "healthUrl": "http://127.0.0.1:8765/health",
@@ -1355,7 +1355,7 @@
           "description": "Exe OS Daemon \u2014 memory, orchestration, MCP server"
         },
         "crm": {
-          "image": "update.askexe.com/askexe/exe-crm:v0.9.48@sha256:f7fa8e1b8f7fbdc29c77b60461da0cfbda52cdd479ab1ffc25d8a618c94d1c82",
+          "image": "update.askexe.com/askexe/exe-crm:v0.9.49@sha256:656512528d2cecc7c0424f917a9b3d0a999f91b160c7b7e7e05778dd8b1319cc",
           "env": "CRM_IMAGE_TAG",
           "composeService": "exe-crm",
           "healthUrl": "http://127.0.0.1:3000/healthz",
@@ -1364,7 +1364,7 @@
           "description": "Customer Relationship Management"
         },
         "wiki": {
-          "image": "update.askexe.com/askexe/exe-wiki:v0.9.23@sha256:9e1ab889c902e641e2fe37910d85ed39ddfd7c728eceb40f25402d1abb734ea8",
+          "image": "update.askexe.com/askexe/exe-wiki:v0.9.24@sha256:3acf72b992d34ce1e802b075cef8e4e1dd5e4b5681a4681398545f1f7e13e331",
           "env": "WIKI_IMAGE_TAG",
           "composeService": "exe-wiki",
           "healthUrl": "http://127.0.0.1:3001/api/ping",
@@ -1373,7 +1373,7 @@
           "description": "Knowledge Base & Documentation"
         },
         "erp": {
-          "image": "update.askexe.com/askexe/exe-erp:v0.2.1@sha256:2d55a7c30bc6c5240b516de00e75e7384d0e6ec2580691e31cf3cb32ec012b4e",
+          "image": "update.askexe.com/askexe/exe-erp:v0.2.2@sha256:00fecc790ff848bfd4b7d87f42f859edfeb6090a7ca26bf2359dc6cb96767afb",
           "env": "ERP_IMAGE_TAG",
           "composeService": "exe-erp",
           "healthUrl": "http://127.0.0.1:8069/api/method/ping",
@@ -1382,7 +1382,7 @@
           "description": "Enterprise Resource Planning"
         },
         "gateway": {
-          "image": "update.askexe.com/askexe/exe-gateway:v0.9.21@sha256:c07baf4d57a9c3f4db04a31efba3e37da5fefc459b12189220ec99d8d648a018",
+          "image": "update.askexe.com/askexe/exe-gateway:v0.9.22@sha256:4d0b545699f2a38d1b6bbc2f81e4360e96d2b27e9b565da9fcd0ba1eac82f7c8",
           "env": "GATEWAY_IMAGE_TAG",
           "composeService": "exe-gateway",
           "healthUrl": "http://127.0.0.1:3100/health",
@@ -1391,7 +1391,7 @@
           "description": "WhatsApp, Telegram & API Gateway"
         },
         "monitorAgent": {
-          "image": "update.askexe.com/askexe/exe-monitor-agent:v0.9.4@sha256:9ca4e75577b2ff2abb754140ccfaf8df19161bcef601faf37d1fce743fe814fc",
+          "image": "update.askexe.com/askexe/exe-monitor-agent:v0.9.5@sha256:d442170bb0d7411beb4195e7888377cee2013a0c2adb194d4e44cdab41886d2d",
           "env": "MONITOR_AGENT_IMAGE_TAG",
           "composeService": "exe-monitor-agent",
           "required": false,
@@ -1399,7 +1399,7 @@
           "description": "System Monitoring Agent"
         },
         "monitorHub": {
-          "image": "update.askexe.com/askexe/exe-monitor-hub:v0.9.4@sha256:d593bec5a4b248388d0d85353fae1ba8f93cab628a03833aa79acd0632fd11cb",
+          "image": "update.askexe.com/askexe/exe-monitor-hub:v0.9.5@sha256:e9a406d1be7efe59cec38db1ace4beef728afa713781675cb30d33fe06b2ed08",
           "env": "MONITOR_HUB_IMAGE_TAG",
           "composeService": "exe-monitor-hub",
           "healthUrl": "http://127.0.0.1:8090/api/health",

package/dist/hooks/manifest.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "generatedAt": "2026-06-19T06:54:51.791Z",
+  "generatedAt": "2026-06-19T07:17:13.814Z",
   "hashes": {
     "bug-report-worker.js": "c286916e981141d15b7f012cfff7abab9f6ff5d36783f08d3041e8a3b4d7a26e",
     "codex-stop-task-finalizer.js": "206804bd623ecb1503ed656fa68708228eaf920615b8d487149ce2dc2fc2b92e",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.298",
+  "version": "0.9.299",
   "description": "AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",

package/release-notes.json

@@ -1,8 +1,8 @@
 {
-  "current": "0.9.298",
+  "current": "0.9.299",
   "notes": {
-    "0.9.298": {
-      "version": "0.9.298",
+    "0.9.299": {
+      "version": "0.9.299",
       "date": "2026-06-19",
       "features": [
         "add comment capability to bug reports (admin route + MCP add_comment) (#211)",
@@ -60,6 +60,7 @@
       ],
       "security": [],
       "other": [
+        "bump v0.9.298 — all 8 stack images rebuilt with latest fixes",
         "release v0.9.298 — Jack/HYGO 0.9.296 audit-wave fixes (0.9.297 published stale before these merged)",
         "revert build-and-test to self-hosted (build-my) + keep quarantine; move flaky tests to nightly extended-tests (#227)",
         "run build-and-test on GitHub-hosted runners (gate actually runs) + quarantine flaky tests (#225)",
@@ -83,13 +84,12 @@
         "add 16 activate fallback chain tests — covers bug 2f5d6166 failure modes",
         "add 18 key rotation tests — dual-key verify, grace, fallback chain",
         "bump v0.9.285 — deploy gate image verification",
-        "bump v0.9.284 — otel deploy gate fix",
-        "bump v0.9.283 — amd64 digest fix"
+        "bump v0.9.284 — otel deploy gate fix"
       ],
       "migration_notes": []
     },
-    "0.9.296": {
-      "version": "0.9.296",
+    "0.9.298": {
+      "version": "0.9.298",
       "date": "2026-06-19",
       "features": [
         "add comment capability to bug reports (admin route + MCP add_comment) (#211)",
@@ -119,6 +119,13 @@
         "add dashboard + auth + otel to manifest as control-plane services"
       ],
       "fixes": [
+        "keep SQLCipher heavy ops off the event loop + lazy boot decrypt (P0 unresponsiveness) (#234)",
+        "hookSearchMode follows single source + non-destructive plist regeneration on update (#233)",
+        "set JWT aud=authenticated (empty-aud tokens rejected by apps) (#232)",
+        "robust MCP-port resolution + surface CC-native-binary warning at boot/spawn (#231)",
+        "async timer ticks (event-loop block P0) + embed failure never self-exits (#230)",
+        "honor originating-product redirect + parent-domain cookie for cross-product SSO (#229)",
+        "manifest signature verification is opt-in (don't block updates when no key shipped) (#228)",
         "single short-timeout daemon attempt + instant SQLite fallback (73s → <3s) (#224)",
         "align worker RSS-kill with its heap + single config source of truth (0d5d5aa8/39a9174f) (#223)",
         "wire unified-auth redirect into deployed stack (crm/wiki/erp → auth) (#222)",
@@ -136,17 +143,14 @@
         "ghost root-cause — UUID on pull + NOT NULL/non-empty schema guard (P0 26688a14)",
         "sync generateExampleEnv with .env.example (ERP final8 + backups/WAL block)",
         "caller-scoped spawn + real dispatch failure surfacing + boot identity/env guards (#202)",
-        "atomic+verified launchd registration (correct heap flag) + crash-debris rotation",
-        "stop ghost-row generation + bulk-cleanable + sync-safe deletion (P0 8399e330) (#201)",
-        "fetch isolation guard + quarantine flaky ws-client/ws-auth tests",
-        "4 session/infra bugs — degraded boot, Explore loop, gate message, COO identity guard",
-        "update_bug resolves bug by ID against remote admin API (#200)",
-        "exe-os auth/SSO/GoTrue (domain-configurable gateway, GoTrue From + SMTP confirm, SSO redirect wiring) (#198)",
-        "exe-os core bugs (embed OOM throttle, EXE_EMBEDDINGS plumbing, starvation-aware self-heal, CC native-binary risk) (#197)",
-        "update task list identity message assertion to match code"
+        "atomic+verified launchd registration (correct heap flag) + crash-debris rotation"
       ],
       "security": [],
       "other": [
+        "release v0.9.298 — Jack/HYGO 0.9.296 audit-wave fixes (0.9.297 published stale before these merged)",
+        "revert build-and-test to self-hosted (build-my) + keep quarantine; move flaky tests to nightly extended-tests (#227)",
+        "run build-and-test on GitHub-hosted runners (gate actually runs) + quarantine flaky tests (#225)",
+        "bump v0.9.296 — exe-auth v0.2.0 SSO + redirect in manifest",
         "release v0.9.296 — Jack/HYGO embed+infra avalanche fixes",
         "bump v0.9.295 — exe-os daemon image v0.9.294 in manifest",
         "bump v0.9.294 — exe-auth repo + CI/CD on all 8 repos + branch hygiene",
@@ -167,18 +171,15 @@
         "add 18 key rotation tests — dual-key verify, grace, fallback chain",
         "bump v0.9.285 — deploy gate image verification",
         "bump v0.9.284 — otel deploy gate fix",
-        "bump v0.9.283 — amd64 digest fix",
-        "bump v0.9.282 — daemon image v0.9.281 in manifest",
-        "prepare v0.9.281 — 50 bugs fixed, stack 0.9.24 fully deployable",
-        "bump v0.9.280 — GoTrue MCP auth, support fixes",
-        "bump v0.9.279 — stack v0.9.24, GoTrue support auth, optional services"
+        "bump v0.9.283 — amd64 digest fix"
       ],
       "migration_notes": []
     },
-    "0.9.294": {
-      "version": "0.9.294",
-      "date": "2026-06-18",
+    "0.9.296": {
+      "version": "0.9.296",
+      "date": "2026-06-19",
       "features": [
+        "add comment capability to bug reports (admin route + MCP add_comment) (#211)",
         "unmerged-branch visibility (bug e324f244) (#208)",
         "5 P2 features — embed health dashboard, support reconcile, CC updater protection, LKG cache, error correlation IDs",
         "set CC autoUpdatesChannel to stable during install (feat 83552605)",
@@ -202,10 +203,23 @@
         "GoTrue JWT auth for MCP — exe-os login/logout/whoami",
         "admin backfill endpoint for api_key_hash — fixes all encrypted keys",
         "implement startMonitor for Slack/Discord/Telegram/WhatsApp + SMTP via nodemailer",
-        "add dashboard + auth + otel to manifest as control-plane services",
-        "CLI service selection + exe-build removal from customer stack"
+        "add dashboard + auth + otel to manifest as control-plane services"
       ],
       "fixes": [
+        "single short-timeout daemon attempt + instant SQLite fallback (73s → <3s) (#224)",
+        "align worker RSS-kill with its heap + single config source of truth (0d5d5aa8/39a9174f) (#223)",
+        "wire unified-auth redirect into deployed stack (crm/wiki/erp → auth) (#222)",
+        "model loads ONLY in worker (own heap) + graceful degrade — daemon can never OOM on embeddings (P0) (#221)",
+        "reaper survives large output (ENOBUFS) — orphaned tasks spawn workers (#220)",
+        "force embed model to worker (P0 OOM) + persistent plist PATH + pre-restart backup cap (#219)",
+        "enable LLM routing when available + clarify fallback signal (#218)",
+        "reap ghost coordinator sessions (dead PID + absent tmux) (#217)",
+        "reliably detect DISABLE_AUTOUPDATER (no flap) (#216)",
+        "report real embed-worker state (no false 'stopped') (#215)",
+        "migrate new required env vars + non-destructive rollback (HYGO upgrade) (#214)",
+        "exe-auth backend network, cloudflared healthcheck, entrypoint port-conflict self-kill (HYGO) (#213)",
+        "template nginx server_name + CORS from env at container start (no askexe.com fallback) (#212)",
+        "submit message in Codex sessions (separate Enter keystroke, runtime-aware) (#210)",
         "ghost root-cause — UUID on pull + NOT NULL/non-empty schema guard (P0 26688a14)",
         "sync generateExampleEnv with .env.example (ERP final8 + backups/WAL block)",
         "caller-scoped spawn + real dispatch failure surfacing + boot identity/env guards (#202)",
@@ -216,24 +230,12 @@
         "update_bug resolves bug by ID against remote admin API (#200)",
         "exe-os auth/SSO/GoTrue (domain-configurable gateway, GoTrue From + SMTP confirm, SSO redirect wiring) (#198)",
         "exe-os core bugs (embed OOM throttle, EXE_EMBEDDINGS plumbing, starvation-aware self-heal, CC native-binary risk) (#197)",
-        "update task list identity message assertion to match code",
-        "exe-os stack hardening — per-service secrets, off-box backup, WAL/PITR + encrypted volumes, backup-script failure handling, ERP image bump",
-        "green main — repair support-status-update + doctor degradations tests",
-        "surface real MCP disconnects, intercom failures & consistent daemon status",
-        "stop flagging expected stale-env tmux override as MISMATCH",
-        "exe-os cloud status hangs and never exits (exit 124)",
-        "recover retry-exhausted raw_events instead of dead-lettering forever",
-        "wire `exe-os settings` CLI subcommand (was a silent no-op)",
-        "task(list) no longer silently returns empty on ambiguous agent identity",
-        "wire exe-os healthcheck subcommand",
-        "stop scheduling vector backfill when embeddings are off",
-        "consolidation auth — accept OAuth token, fail loud on dead layer",
-        "label memory count taxonomy so layers reconcile",
-        "cap embed backfill retries with persistent dead-letter + per-run failure bound",
-        "reclaim orphaned .tmp snapshots + cap daily backups"
+        "update task list identity message assertion to match code"
       ],
       "security": [],
       "other": [
+        "release v0.9.296 — Jack/HYGO embed+infra avalanche fixes",
+        "bump v0.9.295 — exe-os daemon image v0.9.294 in manifest",
         "bump v0.9.294 — exe-auth repo + CI/CD on all 8 repos + branch hygiene",
         "pin actions to SHAs, drop stale disabled workflows, fail-closed release gate, manifest signing tool (#207)",
         "bump v0.9.293 — 17 salvaged branches merged",
@@ -256,16 +258,15 @@
         "bump v0.9.282 — daemon image v0.9.281 in manifest",
         "prepare v0.9.281 — 50 bugs fixed, stack 0.9.24 fully deployable",
         "bump v0.9.280 — GoTrue MCP auth, support fixes",
-        "bump v0.9.279 — stack v0.9.24, GoTrue support auth, optional services",
-        "service ownership matrix — dashboard is AskExe-only, not customer stack",
-        "bump version to 0.9.278"
+        "bump v0.9.279 — stack v0.9.24, GoTrue support auth, optional services"
       ],
       "migration_notes": []
     },
-    "0.9.293": {
-      "version": "0.9.293",
+    "0.9.294": {
+      "version": "0.9.294",
       "date": "2026-06-18",
       "features": [
+        "unmerged-branch visibility (bug e324f244) (#208)",
         "5 P2 features — embed health dashboard, support reconcile, CC updater protection, LKG cache, error correlation IDs",
         "set CC autoUpdatesChannel to stable during install (feat 83552605)",
         "auto-reconcile local files with upstream status (feat 070bc025)",
@@ -289,8 +290,7 @@
         "admin backfill endpoint for api_key_hash — fixes all encrypted keys",
         "implement startMonitor for Slack/Discord/Telegram/WhatsApp + SMTP via nodemailer",
         "add dashboard + auth + otel to manifest as control-plane services",
-        "CLI service selection + exe-build removal from customer stack",
-        "automatic ERP invoice generation on top-up + monthly"
+        "CLI service selection + exe-build removal from customer stack"
       ],
       "fixes": [
         "ghost root-cause — UUID on pull + NOT NULL/non-empty schema guard (P0 26688a14)",
@@ -321,6 +321,8 @@
       ],
       "security": [],
       "other": [
+        "bump v0.9.294 — exe-auth repo + CI/CD on all 8 repos + branch hygiene",
+        "pin actions to SHAs, drop stale disabled workflows, fail-closed release gate, manifest signing tool (#207)",
         "bump v0.9.293 — 17 salvaged branches merged",
         "bump v0.9.292 — 24 features shipped, CI/CD Phase 3, 10 bugs fixed",
         "post-deploy health gate tests — verify container health, missing, crash-loop",
@@ -343,20 +345,25 @@
         "bump v0.9.280 — GoTrue MCP auth, support fixes",
         "bump v0.9.279 — stack v0.9.24, GoTrue support auth, optional services",
         "service ownership matrix — dashboard is AskExe-only, not customer stack",
-        "bump version to 0.9.278",
-        "API documentation for wiki.askexe.com (5 pages)",
-        "consolidate platform procedures from 75 to 46 (37KB from 72KB) (#139)"
+        "bump version to 0.9.278"
       ],
       "migration_notes": []
     },
-    "0.9.291": {
-      "version": "0.9.291",
+    "0.9.293": {
+      "version": "0.9.293",
       "date": "2026-06-18",
       "features": [
+        "5 P2 features — embed health dashboard, support reconcile, CC updater protection, LKG cache, error correlation IDs",
+        "set CC autoUpdatesChannel to stable during install (feat 83552605)",
+        "auto-reconcile local files with upstream status (feat 070bc025)",
+        "expose embed worker fork status, PID, ready state in daemon health (feat 63c35469)",
+        "deploy validation tests — IP collision, manifest parity, image tags, env parity",
         "session_deregister + session_cleanup — force-remove stale sessions (feat 2e55cbe4)",
         "OOM crash-loop backoff — circuit breaker after 3 crashes in 10min (feat 8e976fe0)",
         "Exe Embeddings v1.2 + Graph cross-repo contracts (features 36aa70d0, 9f6b3164)",
         "bump daemon heap cap 2048→4096MB in launchd plist (feat 6ee417ca)",
+        "CI/CD Phase 3 — deploy validation + health gate tests + flaky test quarantine",
+        "add CI Phase 3 deploy validation — 5 static checks for compose/manifest",
         "surface degradation/health in cloud_status, memory_audit, doctor (2c85e74b)",
         "owner-scoped self-service bug-report updates (7ed54c42)",
         "add image availability + platform verification to deploy gate",
@@ -370,17 +377,21 @@
         "implement startMonitor for Slack/Discord/Telegram/WhatsApp + SMTP via nodemailer",
         "add dashboard + auth + otel to manifest as control-plane services",
         "CLI service selection + exe-build removal from customer stack",
-        "automatic ERP invoice generation on top-up + monthly",
-        "deploy OTLP collector on VPS",
-        "real per-model pricing for 40+ models + default → kimi-k2.7-code",
-        "ERP trigger engine wiring + profile sync via GoTrue user_metadata",
-        "v0.9.24 manifest — optional services + exe-build removed",
-        "usage alerts (webhook + email) + email verification /confirm page",
-        "welcome email, low balance alerts, password reset, Stripe portal",
-        "wire Stripe checkout → D1 credit_ledger (closes billing loop)"
+        "automatic ERP invoice generation on top-up + monthly"
       ],
       "fixes": [
+        "ghost root-cause — UUID on pull + NOT NULL/non-empty schema guard (P0 26688a14)",
+        "sync generateExampleEnv with .env.example (ERP final8 + backups/WAL block)",
+        "caller-scoped spawn + real dispatch failure surfacing + boot identity/env guards (#202)",
+        "atomic+verified launchd registration (correct heap flag) + crash-debris rotation",
+        "stop ghost-row generation + bulk-cleanable + sync-safe deletion (P0 8399e330) (#201)",
+        "fetch isolation guard + quarantine flaky ws-client/ws-auth tests",
+        "4 session/infra bugs — degraded boot, Explore loop, gate message, COO identity guard",
+        "update_bug resolves bug by ID against remote admin API (#200)",
+        "exe-os auth/SSO/GoTrue (domain-configurable gateway, GoTrue From + SMTP confirm, SSO redirect wiring) (#198)",
+        "exe-os core bugs (embed OOM throttle, EXE_EMBEDDINGS plumbing, starvation-aware self-heal, CC native-binary risk) (#197)",
         "update task list identity message assertion to match code",
+        "exe-os stack hardening — per-service secrets, off-box backup, WAL/PITR + encrypted volumes, backup-script failure handling, ERP image bump",
         "green main — repair support-status-update + doctor degradations tests",
         "surface real MCP disconnects, intercom failures & consistent daemon status",
         "stop flagging expected stale-env tmux override as MISMATCH",
@@ -393,22 +404,15 @@
         "consolidation auth — accept OAuth token, fail loud on dead layer",
         "label memory count taxonomy so layers reconcile",
         "cap embed backfill retries with persistent dead-letter + per-run failure bound",
-        "reclaim orphaned .tmp snapshots + cap daily backups",
-        "stop ghost behavior rows from blocking retrieval & remediation",
-        "surface per-node recovery-phrase backup state + add key confirm-backup",
-        "stuck-task age alert so aged open tasks surface instead of rotting",
-        "measure timer durations on monotonic clock, not wall clock (7ccf6b1f)",
-        "reconcile mcp_ping license state with checkLicense path",
-        "measure daemon timer duration with monotonic clock",
-        "never silently return \"No tasks found\" on ambiguous identity",
-        "nudge sessions to reconnect MCP after restart (mitigates bug 9a1dc733)",
-        "recognize configured coordinator name in live-tmux root fallback (bug bb601d8a)",
-        "registry-auth tests call collectImageAvailabilityIssues directly (not via deploy gate)",
-        "make /exe status brief on-request, not auto-fire every session"
+        "reclaim orphaned .tmp snapshots + cap daily backups"
       ],
       "security": [],
       "other": [
+        "bump v0.9.293 — 17 salvaged branches merged",
+        "bump v0.9.292 — 24 features shipped, CI/CD Phase 3, 10 bugs fixed",
+        "post-deploy health gate tests — verify container health, missing, crash-loop",
         "bump v0.9.291 — 4 new features + CI fix",
+        "add health gate coverage — verifyComposeServicesRunning, timeout precedence, rollback preservation",
         "bump v0.9.290 — wave 2 bug fixes (#173-#190)",
         "bump v0.9.289 — 22 bug fixes merged (#150-#171)",
         "bump v0.9.288 — wave 1 features + 114 auth tests + CI fixes",
@@ -428,11 +432,7 @@
         "service ownership matrix — dashboard is AskExe-only, not customer stack",
         "bump version to 0.9.278",
         "API documentation for wiki.askexe.com (5 pages)",
-        "consolidate platform procedures from 75 to 46 (37KB from 72KB) (#139)",
-        "11 new platform procedures for v0.9.278 features",
-        "document five-layer customization preservation model (a88c354b) (#137)",
-        "bump version to 0.9.277",
-        "document_aware retrieval guidance — when and why agents should use it"
+        "consolidate platform procedures from 75 to 46 (37KB from 72KB) (#139)"
       ],
       "migration_notes": []
     }