@askexenow/exe-os 0.9.312 → 0.9.313

package/release-notes.json

@@ -1,26 +1,69 @@
 {
-  "current": "0.9.312",
+  "current": "0.9.313",
   "notes": {
-    "0.9.312": {
-      "version": "0.9.312",
-      "date": "2026-06-23",
+    "0.9.313": {
+      "version": "0.9.313",
+      "date": "2026-06-29",
+      "features": [],
+      "fixes": [
+        "daemon-scale (#259)",
+        "cli-setup-stack-sec cluster — 10 bugs (CLI/setup/stack/security) (#257)",
+        "task-spawn-lifecycle — boot re-close loop + invalid default model (#260)",
+        "mcp-notif-boot cluster — DCR connectors, session-less ping, surrogate pairs (#258)",
+        "external MCP connector health + auto-wake error visibility (bugs c9d7f45e P1, 337dfaa0 P1)",
+        "sync wiki MCP version + update hardcoded test assertions",
+        "3 bugs — stale image tags, raw_events ownership, atomic config writes (e6655389 P1, dc149875 P1, 84a5e937 P2)",
+        "digest-pin image refs via docker manifest inspect fallback (bug 85034df0)",
+        "gate diagnostic messages behind EXE_DEBUG (bug 2b63defa)",
+        "event loop blocking — overlap guard, async guardrails, message durability (bugs 459b9c5a, 0b5ece29)",
+        "enforce token budget on every tool call + require CLI for first-install (bugs ce411b37, 716c0f6e)",
+        "4 P2 bugs — stale notifications, session cleanup, monorepo false positives",
+        "worktree isolation + auto-wake + session wiring (bugs 466698d1 P0, 4ae9789e P0, e40e1d92 P1)",
+        "resolve Dockerfile merge conflict",
+        "4 P1/P2 bugs — default model, rename deadlock, boot perf, session casing (3a0bed9c, dd149b85, e374f84f, e480d979)",
+        "4 deploy bugs — proxy retry, env null-safety, infra digest skip, image ref sanitize (d11c9809, 5316f8b5, 4d97a09c, 0d6f21a9)",
+        "3 P1 pipeline bugs — atomic push+rollback, digest retry, chunk prune verified (e96c382c, e0cf68b3, 5b4672fd)",
+        "5 P1 bugs — surrogate sanitization, backfill gate, cron PATH, SIGTERM attribution, DDL memoization",
+        "5 prelaunch bugs — auth healthcheck, DB env doc, WA auth path, tunnel token, deploy guard",
+        "task status revert + daemon socket hang (bugs 430a1a3a, 2e503e3e, 6d44fd99)",
+        "cloudflared tunnel readiness gate (820c6473) (#255)",
+        "misc cluster — otel healthcheck + honest session-wrapper count (#252)",
+        "stack-deploy cluster — preflight, gate, parser, verify, deploy guard (#254)",
+        "stack-manifest cluster — digest-pinning end-to-end + gate ordering (#253)",
+        "daemon cluster — 7 bugs (#251)"
+      ],
+      "security": [],
+      "other": [
+        "0.9.313 notes — R1+R2 bug remediation across 10 repos (124 bugs, root-cause + reviewed)",
+        "bump v0.9.313 — 45 bug fixes across 8 repos",
+        "stack 0.9.25 final — all 4 images fresh (exe-os v0.9.311, gateway v0.9.24, crm v0.9.51, wiki v0.9.26)"
+      ],
+      "migration_notes": []
+    },
+    "0.9.311": {
+      "version": "0.9.311",
+      "date": "2026-06-22",
+      "features": [],
+      "fixes": [],
+      "security": [],
+      "other": [
+        "bump v0.9.311 — CI release gate poll + build-lock fix"
+      ],
+      "migration_notes": []
+    },
+    "0.9.310": {
+      "version": "0.9.310",
+      "date": "2026-06-22",
       "features": [],
       "fixes": [
-        "stop excluding src/ from build context — builder stage needs it for tsup",
-        "bypass build-lock.sh in Docker — run tsup directly (no concurrency in container builds)",
-        "add bash to Alpine builder (build-lock.sh requires bash, Alpine only has sh)",
-        "add util-linux for flock in Alpine builder (build-lock.sh)",
-        "3 P0 bugs — health-gate container probe, watchdog starvation threshold, service dep closure (dad93c21, a77bbb7d, 600681b1)",
-        "null-safe signup DOM bindings + add .dockerignore (bugs 61184416 P0, d73073b2 P1)",
         "poll for CI completion in release gate + resilient build-lock.sh (was instant check, always failed on bump commits)",
         "kill the version-bump reload storm — surface-hash marker + reload debounce",
         "enforce canonical 4096 daemon heap cap, correct stale 6144 (bug f215433d)",
-        "fail-closed BYOK env-contract — direct keys only on explicit BYOK (bug df8823d0)"
+        "fail-closed BYOK env-contract — direct keys only on explicit BYOK (bug df8823d0)",
+        "erp healthHost localhost not askexe.com (preflight gate)"
       ],
       "security": [],
       "other": [
-        "stack 0.9.25 final — all 4 images fresh (exe-os v0.9.311, gateway v0.9.24, crm v0.9.51, wiki v0.9.26)",
-        "bump v0.9.311 — CI release gate poll + build-lock fix",
         "stack manifest v0.9.25 — 17 bug fixes, gateway v0.9.24 with WhatsApp/CRM/BYOK fixes"
       ],
       "migration_notes": []
@@ -198,106 +241,6 @@
         "integrate session closeout, model registry, dreaming into platform procedures"
       ],
       "migration_notes": []
-    },
-    "0.9.300": {
-      "version": "0.9.300",
-      "date": "2026-06-19",
-      "features": [
-        "add exe-codex-reviewd — build-my native PR review daemon (#209)",
-        "add comment capability to bug reports (admin route + MCP add_comment) (#211)",
-        "unmerged-branch visibility (bug e324f244) (#208)",
-        "5 P2 features — embed health dashboard, support reconcile, CC updater protection, LKG cache, error correlation IDs",
-        "set CC autoUpdatesChannel to stable during install (feat 83552605)",
-        "auto-reconcile local files with upstream status (feat 070bc025)",
-        "expose embed worker fork status, PID, ready state in daemon health (feat 63c35469)",
-        "deploy validation tests — IP collision, manifest parity, image tags, env parity",
-        "session_deregister + session_cleanup — force-remove stale sessions (feat 2e55cbe4)",
-        "OOM crash-loop backoff — circuit breaker after 3 crashes in 10min (feat 8e976fe0)",
-        "Exe Embeddings v1.2 + Graph cross-repo contracts (features 36aa70d0, 9f6b3164)",
-        "bump daemon heap cap 2048→4096MB in launchd plist (feat 6ee417ca)",
-        "CI/CD Phase 3 — deploy validation + health gate tests + flaky test quarantine",
-        "add CI Phase 3 deploy validation — 5 static checks for compose/manifest",
-        "surface degradation/health in cloud_status, memory_audit, doctor (2c85e74b)",
-        "owner-scoped self-service bug-report updates (7ed54c42)",
-        "add image availability + platform verification to deploy gate",
-        "'Why did the daemon restart?' telemetry report [3caa55e9]",
-        "dark/light/system theme toggle on Exe Foundry Bold tokens [6df56277]",
-        "prospective memory as native 5th cognition layer (9261d452)",
-        "CPU-steal detection in health tooling (7b9386ad)",
-        "host-access consent gate for monitor agent (f7ebb1fa)",
-        "GoTrue JWT auth for MCP — exe-os login/logout/whoami",
-        "admin backfill endpoint for api_key_hash — fixes all encrypted keys",
-        "implement startMonitor for Slack/Discord/Telegram/WhatsApp + SMTP via nodemailer"
-      ],
-      "fixes": [
-        "skip markdown/comment lines in esm-require check (codex-reviewd prompt false positive blocked 0.9.300 publish)",
-        "wire native-embeddings MCP env (or fail loud) — no silent no-op (bug 49221421) (#242)",
-        "valid collector config + repair config-dir → file (stop crash-loop) (#241)",
-        "interpolate AUTH_DOMAIN in served HTML (no raw ${AUTH_DOMAIN}) (#240)",
-        "set WIKI_EMBEDDING_ENGINE default to prevent native mode without daemon (bug 49221421)",
-        "redis/erp-nginx/sso-edge healthchecks + port-conflict detect + otel mount (HYGO deploy) (#239)",
-        "actually preserve user env on upgrade + update managed heap arg to 4096 (#233 gaps) (#238)",
-        "fast cached boot + no MCP drop during boot + silence terminaltexteffects (#237)",
-        "WAL-after-init + robust roster push + behaviors export retry (no Connection-closed) (#235)",
-        "keep SQLCipher heavy ops off the event loop + lazy boot decrypt (P0 unresponsiveness) (#234)",
-        "hookSearchMode follows single source + non-destructive plist regeneration on update (#233)",
-        "set JWT aud=authenticated (empty-aud tokens rejected by apps) (#232)",
-        "robust MCP-port resolution + surface CC-native-binary warning at boot/spawn (#231)",
-        "async timer ticks (event-loop block P0) + embed failure never self-exits (#230)",
-        "honor originating-product redirect + parent-domain cookie for cross-product SSO (#229)",
-        "manifest signature verification is opt-in (don't block updates when no key shipped) (#228)",
-        "single short-timeout daemon attempt + instant SQLite fallback (73s → <3s) (#224)",
-        "align worker RSS-kill with its heap + single config source of truth (0d5d5aa8/39a9174f) (#223)",
-        "wire unified-auth redirect into deployed stack (crm/wiki/erp → auth) (#222)",
-        "model loads ONLY in worker (own heap) + graceful degrade — daemon can never OOM on embeddings (P0) (#221)",
-        "reaper survives large output (ENOBUFS) — orphaned tasks spawn workers (#220)",
-        "force embed model to worker (P0 OOM) + persistent plist PATH + pre-restart backup cap (#219)",
-        "enable LLM routing when available + clarify fallback signal (#218)",
-        "reap ghost coordinator sessions (dead PID + absent tmux) (#217)",
-        "reliably detect DISABLE_AUTOUPDATER (no flap) (#216)"
-      ],
-      "security": [],
-      "other": [
-        "release v0.9.300 — boot/connection/plist/SSO/deploy wave (0.9.299 published before these merged)",
-        "bump v0.9.298 — all 8 stack images rebuilt with latest fixes",
-        "release v0.9.298 — Jack/HYGO 0.9.296 audit-wave fixes (0.9.297 published stale before these merged)",
-        "revert build-and-test to self-hosted (build-my) + keep quarantine; move flaky tests to nightly extended-tests (#227)",
-        "run build-and-test on GitHub-hosted runners (gate actually runs) + quarantine flaky tests (#225)",
-        "bump v0.9.296 — exe-auth v0.2.0 SSO + redirect in manifest",
-        "release v0.9.296 — Jack/HYGO embed+infra avalanche fixes",
-        "bump v0.9.295 — exe-os daemon image v0.9.294 in manifest",
-        "bump v0.9.294 — exe-auth repo + CI/CD on all 8 repos + branch hygiene",
-        "pin actions to SHAs, drop stale disabled workflows, fail-closed release gate, manifest signing tool (#207)",
-        "bump v0.9.293 — 17 salvaged branches merged",
-        "bump v0.9.292 — 24 features shipped, CI/CD Phase 3, 10 bugs fixed",
-        "post-deploy health gate tests — verify container health, missing, crash-loop",
-        "bump v0.9.291 — 4 new features + CI fix",
-        "add health gate coverage — verifyComposeServicesRunning, timeout precedence, rollback preservation",
-        "bump v0.9.290 — wave 2 bug fixes (#173-#190)",
-        "bump v0.9.289 — 22 bug fixes merged (#150-#171)",
-        "bump v0.9.288 — wave 1 features + 114 auth tests + CI fixes",
-        "bump v0.9.287 — deploy gate auth fix + exe-erp v0.2.1",
-        "bump v0.9.286 — exe-erp final8 in manifest",
-        "add cross-service SSO + key rotation + daemon restart tests (35 tests)",
-        "45 tests for image validation, ${VAR:-default} resolution, platform checks",
-        "add 16 activate fallback chain tests — covers bug 2f5d6166 failure modes",
-        "add 18 key rotation tests — dual-key verify, grace, fallback chain",
-        "bump v0.9.285 — deploy gate image verification"
-      ],
-      "migration_notes": []
-    },
-    "0.9.299": {
-      "version": "0.9.299",
-      "date": "2026-06-19",
-      "features": [],
-      "fixes": [
-        "report accurate per-version release notes (bug b69eac42 follow-up — entries no longer mirror the prior version)"
-      ],
-      "security": [],
-      "other": [
-        "release v0.9.299 — published after 0.9.298 SQLCipher/boot/SSO/plist wave"
-      ],
-      "migration_notes": []
     }
   }
 }

package/stack.release.json

@@ -15,47 +15,47 @@
       "note": "Bug 790794e8: pinned to v0.2.0-final8 — first ERP image shipping the realtime/socketio entrypoint (exe-erp PR #15). Earlier final3/final7 crash-looped exe-erp-websocket (missing socketio.js)."
     },
     "exe-db": {
-      "image": "pgvector/pgvector:0.8.0-pg16@sha256:a132765ec351c65111b5b675928a3a0515a466a40f97277329db8b8209ad8bc9:v0.9.312",
+      "image": "pgvector/pgvector:0.8.0-pg16@sha256:a132765ec351c65111b5b675928a3a0515a466a40f97277329db8b8209ad8bc9",
       "env": "EXE_DB_IMAGE",
       "composeService": "exe-db",
       "category": "infra",
       "note": "Bug ee16e7ef: pinned to versioned 0.8.0-pg16 tag (was mutable :pg16)."
     },
     "redis": {
-      "image": "redis:7.4-alpine@sha256:6ab0b6e7381779332f97b8ca76193e45b0756f38d4c0dcda72dbb3c32061ab99:v0.9.312",
+      "image": "redis:7.4-alpine@sha256:6ab0b6e7381779332f97b8ca76193e45b0756f38d4c0dcda72dbb3c32061ab99",
       "env": "REDIS_IMAGE",
       "composeService": "redis",
       "category": "infra",
       "note": "Bug 4948fc48: compose-pinned infra dep required by CRM, gateway, ERP."
     },
     "clickhouse": {
-      "image": "clickhouse/clickhouse-server:24.8.4.13-alpine@sha256:88a45f9e328549b2579256c46ee38e5c0e25ae58303d9eb6d9c7ed8d6d2bbf3c:v0.9.312",
+      "image": "clickhouse/clickhouse-server:24.8.4.13-alpine@sha256:88a45f9e328549b2579256c46ee38e5c0e25ae58303d9eb6d9c7ed8d6d2bbf3c",
       "env": "CLICKHOUSE_IMAGE",
       "composeService": "clickhouse",
       "category": "infra",
       "note": "Bug 4948fc48: compose-pinned infra dep required by CRM."
     },
     "cloudflared": {
-      "image": "cloudflare/cloudflared@sha256:ba461b8aa9c042156dbd39c38657fe7431bafa063220eab8d5330a523863da9f:v0.9.312",
+      "image": "cloudflare/cloudflared@sha256:ba461b8aa9c042156dbd39c38657fe7431bafa063220eab8d5330a523863da9f",
       "composeService": "cloudflared",
       "category": "infra",
       "note": "Bug 4948fc48: digest-pinned tunnel — no env override, managed in compose."
     },
     "exe-sso-edge": {
-      "image": "nginx:alpine@sha256:20316569d8f81a160065d7d2a5eeffc7ca97d79022462ee255fd23fa103a6b5c:v0.9.312",
+      "image": "nginx:alpine@sha256:20316569d8f81a160065d7d2a5eeffc7ca97d79022462ee255fd23fa103a6b5c",
       "composeService": "exe-sso-edge",
       "category": "infra",
       "note": "Bug 4948fc48: SSO reverse proxy for CRM/wiki/ERP — uses stock nginx:alpine."
     },
     "exe-otel-collector": {
-      "image": "otel/opentelemetry-collector-contrib:0.114.0@sha256:37fa87091cfaaec7234a27e4e395a40c31c2bfaea97a349a4afef6d9e9681197:v0.9.312",
+      "image": "otel/opentelemetry-collector-contrib:0.114.0@sha256:37fa87091cfaaec7234a27e4e395a40c31c2bfaea97a349a4afef6d9e9681197",
       "env": "OTEL_COLLECTOR_IMAGE",
       "composeService": "exe-otel-collector",
       "category": "infra",
       "note": "Bug 4948fc48: OTLP collector for traces/metrics/logs."
     },
     "gotrue": {
-      "image": "supabase/gotrue:v2.172.1@sha256:b0dd7aa28dd1f9a8bd31f136c8b912661f701d9b863171e5843cb08f18f49de4:v0.9.312",
+      "image": "supabase/gotrue:v2.172.1@sha256:b0dd7aa28dd1f9a8bd31f136c8b912661f701d9b863171e5843cb08f18f49de4",
       "composeService": "gotrue",
       "category": "infra",
       "note": "Bug 4948fc48: GoTrue auth backend — digest-pinned in compose."

package/dist/memory-queue-client-HLURQEV6.js

@@ -1,16 +0,0 @@
-import {
-  batchWriteMemoryViaDaemon,
-  writeMemoryViaDaemon
-} from "./chunk-NCC3F6GM.js";
-import "./chunk-YUGLOZOR.js";
-import "./chunk-PPXQE7AS.js";
-import "./chunk-RQ7OVXUZ.js";
-import "./chunk-RVXWGPD3.js";
-import "./chunk-7XGDTKHX.js";
-import "./chunk-DFIOOK5R.js";
-import "./chunk-65DBIEM2.js";
-import "./chunk-MLKGABMK.js";
-export {
-  batchWriteMemoryViaDaemon,
-  writeMemoryViaDaemon
-};