@askexenow/exe-os 0.9.302 → 0.9.310

package/dist/{telemetry-upload-AXYPFAPS.js → telemetry-upload-DWFGC2XJ.js}

@@ -3,18 +3,19 @@ import {
 } from "./chunk-2XZ6X3PJ.js";
 import {
   getOrchestrationMetrics
-} from "./chunk-WHOT5NZ7.js";
-import "./chunk-P3SIFDES.js";
+} from "./chunk-OR3TAZL3.js";
+import "./chunk-SCYWCWKY.js";
 import "./chunk-2I23RPSI.js";
-import "./chunk-BGOMFGSW.js";
+import "./chunk-GWPICNSO.js";
 import "./chunk-PNQDP3OA.js";
+import "./chunk-VQRTO7IS.js";
 import "./chunk-7HLWBYH7.js";
 import "./chunk-FXU7JOXK.js";
 import {
   loadLicense,
   readCachedLicenseToken
-} from "./chunk-VME3UH4D.js";
-import "./chunk-CXKR5Z5F.js";
+} from "./chunk-JV225JBX.js";
+import "./chunk-2EJ636HI.js";
 import {
   loadConfig
 } from "./chunk-DFIOOK5R.js";
@@ -397,14 +398,14 @@ async function buildTelemetryPayload(sinceHours = 24) {
   }
   let toolUsage;
   try {
-    const { getToolUsageSummary } = await import("./tool-telemetry-BLSVABFJ.js");
+    const { getToolUsageSummary } = await import("./tool-telemetry-BS5JXM5M.js");
     const summary = getToolUsageSummary();
     if (Object.keys(summary).length > 0) toolUsage = summary;
   } catch {
   }
   let calibration;
   try {
-    const { DreamingEngine } = await import("./dreaming-QAKUASYV.js");
+    const { DreamingEngine } = await import("./dreaming-Q4E3WBGY.js");
     const engine = new DreamingEngine();
     const cal = await engine.computeCalibration("*", sinceHours);
     if (cal.assertions.total > 0 || cal.estimation.total > 0) {

package/dist/token-budget-4RFZKWGH.js

@@ -0,0 +1,16 @@
+import {
+  createTokenBudgetMiddleware
+} from "./chunk-ZOVHXTGC.js";
+import "./chunk-SCYWCWKY.js";
+import "./chunk-2I23RPSI.js";
+import "./chunk-GWPICNSO.js";
+import "./chunk-PNQDP3OA.js";
+import "./chunk-VQRTO7IS.js";
+import "./chunk-7HLWBYH7.js";
+import "./chunk-FXU7JOXK.js";
+import "./chunk-DFIOOK5R.js";
+import "./chunk-65DBIEM2.js";
+import "./chunk-MLKGABMK.js";
+export {
+  createTokenBudgetMiddleware
+};

package/dist/{tool-capability-index-RHPVMMDD.js → tool-capability-index-ZEXBWKUZ.js}

@@ -1,7 +1,7 @@
 import {
   ToolCapabilityIndex,
   getToolCapabilityIndex
-} from "./chunk-NLHUA3YB.js";
+} from "./chunk-I3DPCSDG.js";
 import "./chunk-FXU7JOXK.js";
 import "./chunk-MLKGABMK.js";
 export {

package/dist/{tool-telemetry-BLSVABFJ.js → tool-telemetry-BS5JXM5M.js}

@@ -5,7 +5,7 @@ import {
   startToolTelemetryFlush,
   stopToolTelemetryFlush,
   wrapServerWithTelemetry
-} from "./chunk-YM3367VC.js";
+} from "./chunk-J3SR5MGG.js";
 import "./chunk-MLKGABMK.js";
 export {
   getToolUsageStats,

package/dist/tui/App.js

@@ -1,43 +1,44 @@
 #!/usr/bin/env node
 import {
   getSessionPrompt
-} from "../chunk-6ERZFDBS.js";
-import "../chunk-Z3EXECOX.js";
+} from "../chunk-IZPO6IOZ.js";
+import "../chunk-ISILDO7P.js";
 import "../chunk-VUH67PT4.js";
 import {
   sessionScopeFilter
-} from "../chunk-OVKNFTCL.js";
-import "../chunk-YNALY3SX.js";
+} from "../chunk-HED6D5KR.js";
+import "../chunk-RZJ6DXVE.js";
 import "../chunk-4JERP7NT.js";
 import "../chunk-4FVVJ7ME.js";
 import "../chunk-E23LNUWJ.js";
-import "../chunk-2LJDLQNO.js";
+import "../chunk-WJ2PZGRV.js";
+import "../chunk-SSTLTIF3.js";
 import "../chunk-KOO3J5PV.js";
 import "../chunk-22TVSRQQ.js";
-import "../chunk-SSTLTIF3.js";
-import "../chunk-WHOT5NZ7.js";
+import "../chunk-OR3TAZL3.js";
 import "../chunk-QB5JOGPK.js";
 import "../chunk-NGP6LSV2.js";
-import "../chunk-VDHUHXFF.js";
+import "../chunk-XYG722JW.js";
 import "../chunk-CVYC6DUW.js";
 import "../chunk-OPU3NYOO.js";
 import "../chunk-GJV3WDWM.js";
 import {
   orgBus
 } from "../chunk-MP2AFCGL.js";
-import "../chunk-AYMSIV7X.js";
+import "../chunk-NIZQ3CIS.js";
 import "../chunk-HYZV25LY.js";
 import {
   DEFAULT_COORDINATOR_TEMPLATE_NAME,
   isCoordinatorName
-} from "../chunk-P3SIFDES.js";
+} from "../chunk-SCYWCWKY.js";
 import "../chunk-2I23RPSI.js";
-import "../chunk-BGOMFGSW.js";
+import "../chunk-GWPICNSO.js";
 import "../chunk-PNQDP3OA.js";
+import "../chunk-VQRTO7IS.js";
 import "../chunk-7HLWBYH7.js";
 import "../chunk-FXU7JOXK.js";
-import "../chunk-VME3UH4D.js";
-import "../chunk-CXKR5Z5F.js";
+import "../chunk-JV225JBX.js";
+import "../chunk-2EJ636HI.js";
 import {
   THEME_MODES,
   tuiPalette
@@ -6698,7 +6699,7 @@ function CommandCenterView({
     if (!chatMode || agentConfig) return;
     (async () => {
       try {
-        const { createProvider } = await import("../factory-CTFAGZUA.js");
+        const { createProvider } = await import("../factory-YHQZ6RZZ.js");
         const { ToolRegistry } = await import("../tool-registry-B2OLSYV6.js");
         const { createPermissionsFromPreset, EMPLOYEE_PERMISSIONS } = await import("../permissions-BTCYZNMN.js");
         const { getPresetByRole } = await import("../permission-presets-E3DZK46K.js");
@@ -7410,7 +7411,7 @@ function useOrchestrator(enabled = true) {
     let cancelled = false;
     async function init() {
       try {
-        const { MultiAgentOrchestrator } = await import("../orchestrator-M7DJH6TN.js");
+        const { MultiAgentOrchestrator } = await import("../orchestrator-PUT45J4O.js");
         const { getCoordinatorName, isCoordinatorRole, loadEmployees } = await import("../lib/employees.js");
         const { isExeSession } = await import("../lib/tmux-routing.js");
         const { listTmuxSessions, inTmux } = await import("../lib/tmux-status.js");
@@ -7451,7 +7452,7 @@ function useOrchestrator(enabled = true) {
         setTotalInProgress(health.totalInProgress);
         try {
           const { getClient } = await import("../lib/database.js");
-          const { sessionScopeFilter: sessionScopeFilter2 } = await import("../task-scope-PYOK7OQ6.js");
+          const { sessionScopeFilter: sessionScopeFilter2 } = await import("../task-scope-P5STKYAC.js");
           const client = getClient();
           const uoScope = sessionScopeFilter2();
           const result = await client.execute({
@@ -7483,7 +7484,7 @@ function useOrchestrator(enabled = true) {
   const spawnSession = useCallback5(
     async (agentId) => {
       try {
-        const { createTaskCore } = await import("../tasks-crud-HLJEJ2UU.js");
+        const { createTaskCore } = await import("../tasks-crud-24HMTULR.js");
         const { ensureEmployee } = await import("../lib/tmux-routing.js");
         const { getCoordinatorName } = await import("../lib/employees.js");
         await createTaskCore({
@@ -8107,7 +8108,7 @@ function TasksView({ onBack }) {
     const { withTrace } = await import("../telemetry-43X3GT3R.js");
     return withTrace("tui.tasks.loadTasks", async () => {
       try {
-        const { loadTaskList } = await import("../tui-data-EYPOFYLS.js");
+        const { loadTaskList } = await import("../tui-data-UNO5B7PU.js");
         const tasks = await loadTaskList();
         setAllTasks(
           tasks.map((task) => ({
@@ -8940,7 +8941,7 @@ function TeamView({ onBack, onViewSessions }) {
         let projectsByEmployee = /* @__PURE__ */ new Map();
         let currentTaskByEmployee = /* @__PURE__ */ new Map();
         try {
-          const { loadTeamBadgeCounts, loadTeamDetailMetrics } = await import("../tui-data-EYPOFYLS.js");
+          const { loadTeamBadgeCounts, loadTeamDetailMetrics } = await import("../tui-data-UNO5B7PU.js");
           setBadgeInFlight(true);
           const badgeCountsPromise = loadTeamBadgeCounts();
           const detailsPromise = loadTeamDetailMetrics(roster.map((emp) => emp.name));
@@ -9306,7 +9307,7 @@ function WikiView({ onBack }) {
     }
     setSearchLoading(true);
     try {
-      const { searchWikiMemoryRows } = await import("../tui-data-EYPOFYLS.js");
+      const { searchWikiMemoryRows } = await import("../tui-data-UNO5B7PU.js");
       setSearchResults(await searchWikiMemoryRows(query));
     } catch {
       setSearchResults([]);

package/dist/{tui-data-EYPOFYLS.js → tui-data-UNO5B7PU.js}

@@ -1,34 +1,35 @@
 import {
   sessionScopeFilter
-} from "./chunk-OVKNFTCL.js";
-import "./chunk-YNALY3SX.js";
+} from "./chunk-HED6D5KR.js";
+import "./chunk-RZJ6DXVE.js";
 import "./chunk-4JERP7NT.js";
 import "./chunk-4FVVJ7ME.js";
 import "./chunk-E23LNUWJ.js";
-import "./chunk-2LJDLQNO.js";
+import "./chunk-WJ2PZGRV.js";
+import "./chunk-SSTLTIF3.js";
 import "./chunk-KOO3J5PV.js";
 import "./chunk-22TVSRQQ.js";
-import "./chunk-SSTLTIF3.js";
-import "./chunk-WHOT5NZ7.js";
+import "./chunk-OR3TAZL3.js";
 import "./chunk-QB5JOGPK.js";
 import "./chunk-NGP6LSV2.js";
-import "./chunk-VDHUHXFF.js";
+import "./chunk-XYG722JW.js";
 import "./chunk-CVYC6DUW.js";
 import "./chunk-OPU3NYOO.js";
 import "./chunk-GJV3WDWM.js";
 import "./chunk-MP2AFCGL.js";
-import "./chunk-AYMSIV7X.js";
+import "./chunk-NIZQ3CIS.js";
 import "./chunk-HYZV25LY.js";
 import {
   getClient
-} from "./chunk-P3SIFDES.js";
+} from "./chunk-SCYWCWKY.js";
 import "./chunk-2I23RPSI.js";
-import "./chunk-BGOMFGSW.js";
+import "./chunk-GWPICNSO.js";
 import "./chunk-PNQDP3OA.js";
+import "./chunk-VQRTO7IS.js";
 import "./chunk-7HLWBYH7.js";
 import "./chunk-FXU7JOXK.js";
-import "./chunk-VME3UH4D.js";
-import "./chunk-CXKR5Z5F.js";
+import "./chunk-JV225JBX.js";
+import "./chunk-2EJ636HI.js";
 import "./chunk-DFIOOK5R.js";
 import "./chunk-65DBIEM2.js";
 import "./chunk-MLKGABMK.js";

package/dist/{worker-gate-SMFOBMMX.js → worker-gate-C6CTTYMD.js}

@@ -6,7 +6,7 @@ import {
   releaseBackfillLock,
   tryAcquireBackfillLock,
   tryAcquireWorkerSlot
-} from "./chunk-OMCNFTSI.js";
+} from "./chunk-GMZMBLHT.js";
 import "./chunk-DFIOOK5R.js";
 import "./chunk-65DBIEM2.js";
 import "./chunk-MLKGABMK.js";

package/dist/{workflow-engine-TDJZ3TXB.js → workflow-engine-4W2KYCDV.js}

@@ -10,8 +10,8 @@ import {
   persistWorkflows,
   runWorkflow,
   startWorkflow
-} from "./chunk-RO7EXVSJ.js";
-import "./chunk-XDE5IGBX.js";
+} from "./chunk-X4AFBL4N.js";
+import "./chunk-2NS3QRMJ.js";
 import "./chunk-MLKGABMK.js";
 export {
   advanceWorkflow,

package/dist/{worktree-XISIYRM4.js → worktree-2CXY6NEB.js}

@@ -7,12 +7,13 @@ import {
   parseInstanceLabel,
   worktreeBranch,
   worktreePath
-} from "./chunk-YNALY3SX.js";
-import "./chunk-WHOT5NZ7.js";
-import "./chunk-P3SIFDES.js";
+} from "./chunk-RZJ6DXVE.js";
+import "./chunk-OR3TAZL3.js";
+import "./chunk-SCYWCWKY.js";
 import "./chunk-2I23RPSI.js";
-import "./chunk-BGOMFGSW.js";
+import "./chunk-GWPICNSO.js";
 import "./chunk-PNQDP3OA.js";
+import "./chunk-VQRTO7IS.js";
 import "./chunk-7HLWBYH7.js";
 import "./chunk-FXU7JOXK.js";
 import "./chunk-DFIOOK5R.js";

package/dist/{worktree-sweep-AS6GAR6X.js → worktree-sweep-K3CJFSUL.js}

@@ -2,13 +2,14 @@ import {
   cleanupAgentWorktree,
   discoverRepoPaths,
   sweepWorktrees
-} from "./chunk-7ZWC5HVG.js";
-import "./chunk-YNALY3SX.js";
-import "./chunk-WHOT5NZ7.js";
-import "./chunk-P3SIFDES.js";
+} from "./chunk-MTIJ2NXY.js";
+import "./chunk-RZJ6DXVE.js";
+import "./chunk-OR3TAZL3.js";
+import "./chunk-SCYWCWKY.js";
 import "./chunk-2I23RPSI.js";
-import "./chunk-BGOMFGSW.js";
+import "./chunk-GWPICNSO.js";
 import "./chunk-PNQDP3OA.js";
+import "./chunk-VQRTO7IS.js";
 import "./chunk-7HLWBYH7.js";
 import "./chunk-FXU7JOXK.js";
 import "./chunk-DFIOOK5R.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.302",
+  "version": "0.9.310",
   "description": "AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",
@@ -39,9 +39,13 @@
     "exe-pending-notifications": "./dist/bin/exe-pending-notifications.js",
     "exe-pending-reviews": "./dist/bin/exe-pending-reviews.js",
     "exe-os-orchestration-metrics": "./dist/bin/orchestration-metrics.js",
+    "exe-search-quality": "./dist/bin/exe-search-quality.js",
     "exe-healthcheck": "./dist/bin/exe-healthcheck.js",
     "exe-doctor": "./dist/bin/exe-doctor.js",
+    "exe-timers": "./dist/bin/exe-timers.js",
+    "exe-config-dump": "./dist/bin/exe-config-dump.js",
     "exe-stack-update": "./dist/bin/stack-update.js",
+    "exe-preflight": "./dist/bin/exe-preflight.js",
     "exe-cloud": "./dist/bin/exe-cloud.js",
     "exe-os-bulk-sync-postgres": "./dist/bin/bulk-sync-postgres.js"
   },
@@ -106,13 +110,14 @@
     "test:watch": "vitest",
     "lint": "eslint src/ --max-warnings 53",
     "typecheck": "tsc --noEmit",
-    "build": "tsup && mkdir -p dist/assets && cp src/assets/tmux.conf dist/assets/ && cp src/assets/ghostty.conf dist/assets/ && cp src/assets/statusline-command.sh dist/assets/ && cp src/assets/wezterm.lua dist/assets/ && cp src/assets/com.askexe.exed.plist dist/assets/ && cp src/bin/exe-start.sh dist/bin/exe-start.sh && (node dist/bin/generate-hook-manifest.js 2>/dev/null || true) && (node dist/bin/prune-orphan-chunks.js || true)",
-    "deploy": "node dist/bin/pre-build-guard.js 2>/dev/null; npm run build && npm install -g . && node dist/bin/install.js --global && echo '[exe-os] Deploy complete. Run /mcp in active sessions to reconnect.'",
+    "build": "bash scripts/build-lock.sh && mkdir -p dist/assets && cp src/assets/tmux.conf dist/assets/ && cp src/assets/ghostty.conf dist/assets/ && cp src/assets/statusline-command.sh dist/assets/ && cp src/assets/wezterm.lua dist/assets/ && cp src/assets/com.askexe.exed.plist dist/assets/ && cp src/bin/exe-start.sh dist/bin/exe-start.sh && (node dist/bin/generate-hook-manifest.js 2>/dev/null || true)",
+    "deploy": "node dist/bin/pre-build-guard.js 2>/dev/null; npm run build && (node dist/bin/prune-orphan-chunks.js || true) && npm install -g . && node dist/bin/install.js --global && echo '[exe-os] Deploy complete. Run /mcp in active sessions to reconnect.'",
     "postinstall": "node dist/bin/install.js --commands-only || true",
-    "prepublishOnly": "npm run typecheck && npm run build && npm run guard:esm-require && node dist/bin/customer-readiness.js && node dist/bin/pre-publish.js",
+    "prepublishOnly": "npm run typecheck && npm run build && node dist/bin/prune-orphan-chunks.js --force && npm run guard:esm-require && npm run check:schema-version && node dist/bin/customer-readiness.js && node dist/bin/pre-publish.js",
     "test:publish": "npx vitest run --maxWorkers=4 --exclude 'tests/tui/**' --exclude 'tests/lib/tmux-routing.test.ts' --exclude 'tests/lib/intercom-routing.test.ts' --exclude 'tests/gateway/**' --exclude 'tests/mcp/ingest-document.test.ts' --exclude 'tests/lib/hybrid-search.test.ts' --exclude 'tests/lib/worker-gate.test.ts' --exclude 'tests/daemon-perf-stress.test.ts' --exclude 'tests/lib/gateway-client.test.ts' --exclude 'tests/lib/ws-client.test.ts' --exclude 'tests/lib/ws-auth.test.ts' --exclude 'tests/integration/clean-stack-projection.test.ts' && echo '::warning::clean-stack-projection quarantined (needs Docker); ws-client/ws-auth quarantined (30-120s timeouts flaky on Node 20 CI runner — passes locally). See cicd-audit-2026-06-18.md.' && npx vitest run --maxWorkers=1 tests/daemon-perf-stress.test.ts tests/lib/gateway-client.test.ts",
     "benchmark:longmemeval": "npx tsx tests/benchmarks/longmemeval.ts",
     "guard:esm-require": "node scripts/check-no-runtime-require.mjs",
+    "check:schema-version": "node scripts/check-schema-version.mjs",
     "test:stack-sim": "node scripts/stack-sim.mjs",
     "test:daemon-smoke": "vitest run --maxWorkers=1 tests/smoke/daemon-smoke-gate.test.ts"
   },

package/release-notes.json

@@ -1,6 +1,22 @@
 {
-  "current": "0.9.302",
+  "current": "0.9.310",
   "notes": {
+    "0.9.310": {
+      "version": "0.9.310",
+      "date": "2026-06-22",
+      "features": [],
+      "fixes": [
+        "kill the version-bump reload storm — surface-hash marker + reload debounce",
+        "enforce canonical 4096 daemon heap cap, correct stale 6144 (bug f215433d)",
+        "fail-closed BYOK env-contract — direct keys only on explicit BYOK (bug df8823d0)",
+        "erp healthHost localhost not askexe.com (preflight gate)"
+      ],
+      "security": [],
+      "other": [
+        "stack manifest v0.9.25 — 17 bug fixes, gateway v0.9.24 with WhatsApp/CRM/BYOK fixes"
+      ],
+      "migration_notes": []
+    },
     "0.9.302": {
       "version": "0.9.302",
       "date": "2026-06-22",
@@ -274,93 +290,6 @@
         "release v0.9.299 — published after 0.9.298 SQLCipher/boot/SSO/plist wave"
       ],
       "migration_notes": []
-    },
-    "0.9.298": {
-      "version": "0.9.298",
-      "date": "2026-06-19",
-      "features": [
-        "add comment capability to bug reports (admin route + MCP add_comment) (#211)",
-        "unmerged-branch visibility (bug e324f244) (#208)",
-        "5 P2 features — embed health dashboard, support reconcile, CC updater protection, LKG cache, error correlation IDs",
-        "set CC autoUpdatesChannel to stable during install (feat 83552605)",
-        "auto-reconcile local files with upstream status (feat 070bc025)",
-        "expose embed worker fork status, PID, ready state in daemon health (feat 63c35469)",
-        "deploy validation tests — IP collision, manifest parity, image tags, env parity",
-        "session_deregister + session_cleanup — force-remove stale sessions (feat 2e55cbe4)",
-        "OOM crash-loop backoff — circuit breaker after 3 crashes in 10min (feat 8e976fe0)",
-        "Exe Embeddings v1.2 + Graph cross-repo contracts (features 36aa70d0, 9f6b3164)",
-        "bump daemon heap cap 2048→4096MB in launchd plist (feat 6ee417ca)",
-        "CI/CD Phase 3 — deploy validation + health gate tests + flaky test quarantine",
-        "add CI Phase 3 deploy validation — 5 static checks for compose/manifest",
-        "surface degradation/health in cloud_status, memory_audit, doctor (2c85e74b)",
-        "owner-scoped self-service bug-report updates (7ed54c42)",
-        "add image availability + platform verification to deploy gate",
-        "'Why did the daemon restart?' telemetry report [3caa55e9]",
-        "dark/light/system theme toggle on Exe Foundry Bold tokens [6df56277]",
-        "prospective memory as native 5th cognition layer (9261d452)",
-        "CPU-steal detection in health tooling (7b9386ad)",
-        "host-access consent gate for monitor agent (f7ebb1fa)",
-        "GoTrue JWT auth for MCP — exe-os login/logout/whoami",
-        "admin backfill endpoint for api_key_hash — fixes all encrypted keys",
-        "implement startMonitor for Slack/Discord/Telegram/WhatsApp + SMTP via nodemailer",
-        "add dashboard + auth + otel to manifest as control-plane services"
-      ],
-      "fixes": [
-        "keep SQLCipher heavy ops off the event loop + lazy boot decrypt (P0 unresponsiveness) (#234)",
-        "hookSearchMode follows single source + non-destructive plist regeneration on update (#233)",
-        "set JWT aud=authenticated (empty-aud tokens rejected by apps) (#232)",
-        "robust MCP-port resolution + surface CC-native-binary warning at boot/spawn (#231)",
-        "async timer ticks (event-loop block P0) + embed failure never self-exits (#230)",
-        "honor originating-product redirect + parent-domain cookie for cross-product SSO (#229)",
-        "manifest signature verification is opt-in (don't block updates when no key shipped) (#228)",
-        "single short-timeout daemon attempt + instant SQLite fallback (73s → <3s) (#224)",
-        "align worker RSS-kill with its heap + single config source of truth (0d5d5aa8/39a9174f) (#223)",
-        "wire unified-auth redirect into deployed stack (crm/wiki/erp → auth) (#222)",
-        "model loads ONLY in worker (own heap) + graceful degrade — daemon can never OOM on embeddings (P0) (#221)",
-        "reaper survives large output (ENOBUFS) — orphaned tasks spawn workers (#220)",
-        "force embed model to worker (P0 OOM) + persistent plist PATH + pre-restart backup cap (#219)",
-        "enable LLM routing when available + clarify fallback signal (#218)",
-        "reap ghost coordinator sessions (dead PID + absent tmux) (#217)",
-        "reliably detect DISABLE_AUTOUPDATER (no flap) (#216)",
-        "report real embed-worker state (no false 'stopped') (#215)",
-        "migrate new required env vars + non-destructive rollback (HYGO upgrade) (#214)",
-        "exe-auth backend network, cloudflared healthcheck, entrypoint port-conflict self-kill (HYGO) (#213)",
-        "template nginx server_name + CORS from env at container start (no askexe.com fallback) (#212)",
-        "submit message in Codex sessions (separate Enter keystroke, runtime-aware) (#210)",
-        "ghost root-cause — UUID on pull + NOT NULL/non-empty schema guard (P0 26688a14)",
-        "sync generateExampleEnv with .env.example (ERP final8 + backups/WAL block)",
-        "caller-scoped spawn + real dispatch failure surfacing + boot identity/env guards (#202)",
-        "atomic+verified launchd registration (correct heap flag) + crash-debris rotation"
-      ],
-      "security": [],
-      "other": [
-        "release v0.9.298 — Jack/HYGO 0.9.296 audit-wave fixes (0.9.297 published stale before these merged)",
-        "revert build-and-test to self-hosted (build-my) + keep quarantine; move flaky tests to nightly extended-tests (#227)",
-        "run build-and-test on GitHub-hosted runners (gate actually runs) + quarantine flaky tests (#225)",
-        "bump v0.9.296 — exe-auth v0.2.0 SSO + redirect in manifest",
-        "release v0.9.296 — Jack/HYGO embed+infra avalanche fixes",
-        "bump v0.9.295 — exe-os daemon image v0.9.294 in manifest",
-        "bump v0.9.294 — exe-auth repo + CI/CD on all 8 repos + branch hygiene",
-        "pin actions to SHAs, drop stale disabled workflows, fail-closed release gate, manifest signing tool (#207)",
-        "bump v0.9.293 — 17 salvaged branches merged",
-        "bump v0.9.292 — 24 features shipped, CI/CD Phase 3, 10 bugs fixed",
-        "post-deploy health gate tests — verify container health, missing, crash-loop",
-        "bump v0.9.291 — 4 new features + CI fix",
-        "add health gate coverage — verifyComposeServicesRunning, timeout precedence, rollback preservation",
-        "bump v0.9.290 — wave 2 bug fixes (#173-#190)",
-        "bump v0.9.289 — 22 bug fixes merged (#150-#171)",
-        "bump v0.9.288 — wave 1 features + 114 auth tests + CI fixes",
-        "bump v0.9.287 — deploy gate auth fix + exe-erp v0.2.1",
-        "bump v0.9.286 — exe-erp final8 in manifest",
-        "add cross-service SSO + key rotation + daemon restart tests (35 tests)",
-        "45 tests for image validation, ${VAR:-default} resolution, platform checks",
-        "add 16 activate fallback chain tests — covers bug 2f5d6166 failure modes",
-        "add 18 key rotation tests — dual-key verify, grace, fallback chain",
-        "bump v0.9.285 — deploy gate image verification",
-        "bump v0.9.284 — otel deploy gate fix",
-        "bump v0.9.283 — amd64 digest fix"
-      ],
-      "migration_notes": []
     }
   }
 }

package/stack.release.json

@@ -4,15 +4,61 @@
   "repo": "AskExe/exe-os",
   "service": "exe-os",
   "packageName": "@askexenow/exe-os",
-  "version": "0.9.270",
-  "image": "ghcr.io/askexe/exe-os:v0.9.270",
+  "version": "0.9.310",
+  "image": "ghcr.io/askexe/exe-os:v0.9.310",
   "imageEnv": "EXE_OS_IMAGE_TAG",
   "components": {
     "erp": {
-      "image": "ghcr.io/askexe/exe-erp:v0.2.0-final8",
+      "image": "ghcr.io/askexe/exe-erp:v0.9.310",
       "env": "ERP_IMAGE_TAG",
       "composeService": "exe-erp",
       "note": "Bug 790794e8: pinned to v0.2.0-final8 — first ERP image shipping the realtime/socketio entrypoint (exe-erp PR #15). Earlier final3/final7 crash-looped exe-erp-websocket (missing socketio.js)."
+    },
+    "exe-db": {
+      "image": "pgvector/pgvector:0.8.0-pg16@sha256:a132765ec351c65111b5b675928a3a0515a466a40f97277329db8b8209ad8bc9:v0.9.310",
+      "env": "EXE_DB_IMAGE",
+      "composeService": "exe-db",
+      "category": "infra",
+      "note": "Bug ee16e7ef: pinned to versioned 0.8.0-pg16 tag (was mutable :pg16)."
+    },
+    "redis": {
+      "image": "redis:7.4-alpine@sha256:6ab0b6e7381779332f97b8ca76193e45b0756f38d4c0dcda72dbb3c32061ab99:v0.9.310",
+      "env": "REDIS_IMAGE",
+      "composeService": "redis",
+      "category": "infra",
+      "note": "Bug 4948fc48: compose-pinned infra dep required by CRM, gateway, ERP."
+    },
+    "clickhouse": {
+      "image": "clickhouse/clickhouse-server:24.8.4.13-alpine@sha256:88a45f9e328549b2579256c46ee38e5c0e25ae58303d9eb6d9c7ed8d6d2bbf3c:v0.9.310",
+      "env": "CLICKHOUSE_IMAGE",
+      "composeService": "clickhouse",
+      "category": "infra",
+      "note": "Bug 4948fc48: compose-pinned infra dep required by CRM."
+    },
+    "cloudflared": {
+      "image": "cloudflare/cloudflared@sha256:ba461b8aa9c042156dbd39c38657fe7431bafa063220eab8d5330a523863da9f:v0.9.310",
+      "composeService": "cloudflared",
+      "category": "infra",
+      "note": "Bug 4948fc48: digest-pinned tunnel — no env override, managed in compose."
+    },
+    "exe-sso-edge": {
+      "image": "nginx:alpine@sha256:20316569d8f81a160065d7d2a5eeffc7ca97d79022462ee255fd23fa103a6b5c:v0.9.310",
+      "composeService": "exe-sso-edge",
+      "category": "infra",
+      "note": "Bug 4948fc48: SSO reverse proxy for CRM/wiki/ERP — uses stock nginx:alpine."
+    },
+    "exe-otel-collector": {
+      "image": "otel/opentelemetry-collector-contrib:0.114.0@sha256:37fa87091cfaaec7234a27e4e395a40c31c2bfaea97a349a4afef6d9e9681197:v0.9.310",
+      "env": "OTEL_COLLECTOR_IMAGE",
+      "composeService": "exe-otel-collector",
+      "category": "infra",
+      "note": "Bug 4948fc48: OTLP collector for traces/metrics/logs."
+    },
+    "gotrue": {
+      "image": "supabase/gotrue:v2.172.1@sha256:b0dd7aa28dd1f9a8bd31f136c8b912661f701d9b863171e5843cb08f18f49de4:v0.9.310",
+      "composeService": "gotrue",
+      "category": "infra",
+      "note": "Bug 4948fc48: GoTrue auth backend — digest-pinned in compose."
     }
   },
   "stackParticipation": {
@@ -43,6 +89,7 @@
       "envExample": "deploy/compose/.env.example",
       "requiredEnv": [
         "EXE_OS_IMAGE_TAG",
+        "EXE_DB_IMAGE",
         "EXED_MCP_TOKEN",
         "EXED_DEVICE_ID"
       ]
@@ -55,5 +102,5 @@
   },
   "deploymentScope": "customer",
   "highGhostStack": "0.9.9",
-  "sourceVersion": "0.9.270"
+  "sourceVersion": "0.9.310"
 }

package/dist/chunk-PHOQAVTK.js

@@ -1,42 +0,0 @@
-import {
-  EXE_AI_DIR
-} from "./chunk-DFIOOK5R.js";
-import {
-  enforcePrivateFileSync,
-  ensurePrivateDirSync
-} from "./chunk-65DBIEM2.js";
-
-// src/lib/daemon-auth.ts
-import crypto from "crypto";
-import path from "path";
-import { existsSync, readFileSync, writeFileSync } from "fs";
-var DAEMON_TOKEN_PATH = path.join(EXE_AI_DIR, "exed.token");
-function normalizeToken(token) {
-  if (!token) return null;
-  const trimmed = token.trim();
-  return trimmed.length > 0 ? trimmed : null;
-}
-function readDaemonToken() {
-  try {
-    if (!existsSync(DAEMON_TOKEN_PATH)) return null;
-    return normalizeToken(readFileSync(DAEMON_TOKEN_PATH, "utf8"));
-  } catch {
-    return null;
-  }
-}
-function ensureDaemonToken(seed) {
-  const existing = readDaemonToken();
-  if (existing) return existing;
-  const token = normalizeToken(seed) ?? crypto.randomBytes(32).toString("hex");
-  ensurePrivateDirSync(EXE_AI_DIR);
-  writeFileSync(DAEMON_TOKEN_PATH, `${token}
-`, "utf8");
-  enforcePrivateFileSync(DAEMON_TOKEN_PATH);
-  return token;
-}
-
-export {
-  DAEMON_TOKEN_PATH,
-  readDaemonToken,
-  ensureDaemonToken
-};

package/dist/daemon-auth-BK7ON5ZH.js

@@ -1,13 +0,0 @@
-import {
-  DAEMON_TOKEN_PATH,
-  ensureDaemonToken,
-  readDaemonToken
-} from "./chunk-PHOQAVTK.js";
-import "./chunk-DFIOOK5R.js";
-import "./chunk-65DBIEM2.js";
-import "./chunk-MLKGABMK.js";
-export {
-  DAEMON_TOKEN_PATH,
-  ensureDaemonToken,
-  readDaemonToken
-};

package/dist/session-kill-telemetry-KOAHLRBT.js

@@ -1,31 +0,0 @@
-import {
-  IDLE_KILL_MIN_LIVE_SESSIONS,
-  IDLE_KILL_STREAK_META_KEY,
-  IDLE_KILL_SUSPECT_DAY_THRESHOLD,
-  TOKENS_PER_IDLE_MINUTE,
-  computeIdleKillSuspectStreak,
-  countKillsSince,
-  parseStreakState,
-  recordSessionKill,
-  sumTokensSavedSince
-} from "./chunk-D6UICP3C.js";
-import "./chunk-P3SIFDES.js";
-import "./chunk-2I23RPSI.js";
-import "./chunk-BGOMFGSW.js";
-import "./chunk-PNQDP3OA.js";
-import "./chunk-7HLWBYH7.js";
-import "./chunk-FXU7JOXK.js";
-import "./chunk-DFIOOK5R.js";
-import "./chunk-65DBIEM2.js";
-import "./chunk-MLKGABMK.js";
-export {
-  IDLE_KILL_MIN_LIVE_SESSIONS,
-  IDLE_KILL_STREAK_META_KEY,
-  IDLE_KILL_SUSPECT_DAY_THRESHOLD,
-  TOKENS_PER_IDLE_MINUTE,
-  computeIdleKillSuspectStreak,
-  countKillsSince,
-  parseStreakState,
-  recordSessionKill,
-  sumTokensSavedSince
-};