@askexenow/exe-os 0.9.340 → 0.9.342

package/dist/{chunk-MW2GJJ53.js → chunk-JGIPOUIK.js}

@@ -3,15 +3,15 @@ import {
   getClient,
   isInitialized,
   loadEmployees
-} from "./chunk-HEPR6QTL.js";
+} from "./chunk-AOHXREB7.js";
 import {
   PLAN_LIMITS,
   checkLicense,
   isFeatureAllowed
-} from "./chunk-XACL67CS.js";
+} from "./chunk-PQIDGXSG.js";
 import {
   EXE_AI_DIR
-} from "./chunk-7Y5UDEVM.js";
+} from "./chunk-WZHZCDDO.js";
 
 // src/lib/plan-limits.ts
 import { readFileSync, existsSync } from "fs";

package/dist/{chunk-2233TQCA.js → chunk-JLZ4RYSD.js}

@@ -1,10 +1,10 @@
 import {
   enqueueMemory
-} from "./chunk-HCJCW7X4.js";
+} from "./chunk-H7I47RS5.js";
 import {
   isClientConnected,
   sendDaemonRequest
-} from "./chunk-7TS64TBG.js";
+} from "./chunk-G4RGKBCA.js";
 
 // src/lib/memory-queue-client.ts
 async function writeMemoryViaDaemon(entry) {

package/dist/{chunk-Q7L6G6KV.js → chunk-JMYHW3AL.js}

@@ -1,9 +1,9 @@
 import {
   sendMessage
-} from "./chunk-X7H3HMFH.js";
+} from "./chunk-KWZMQACA.js";
 import {
   getActiveAgent
-} from "./chunk-DZ6OQM67.js";
+} from "./chunk-5ERDIOV3.js";
 
 // src/mcp/tools/send-message.ts
 import { z } from "zod";

package/dist/{chunk-OJTJYEMX.js → chunk-JPUZPAAF.js}

@@ -1,20 +1,20 @@
 import {
   fastDbInit
-} from "./chunk-UFAXZ2PY.js";
+} from "./chunk-PWUFMX75.js";
 import {
   sessionScopeFilter
-} from "./chunk-PLRIJALF.js";
+} from "./chunk-UP75Z5X7.js";
 import {
   formatStatusAll,
   formatStatusDeep,
   getEmployeeStatuses,
   inTmux
-} from "./chunk-SSTLTIF3.js";
+} from "./chunk-SKGMF2SO.js";
 import {
   getClient,
   isCoordinatorRole,
   loadEmployees
-} from "./chunk-HEPR6QTL.js";
+} from "./chunk-AOHXREB7.js";
 import {
   isMainModule
 } from "./chunk-6Y4B3QF6.js";

package/dist/{chunk-XWHE4LZK.js → chunk-JTBIS4R5.js}

@@ -1,6 +1,6 @@
 import {
   loadLicense
-} from "./chunk-XACL67CS.js";
+} from "./chunk-PQIDGXSG.js";
 
 // src/lib/stack-update.ts
 import { execFileSync, spawnSync } from "child_process";
@@ -955,6 +955,17 @@ function writeBreakGlassAudit(plan, issues, options) {
   writeFileSync(auditFile, body, { mode: 384 });
   console.warn(`[stack-update] BREAK-GLASS deploy override recorded: ${auditFile}`);
 }
+function assertRolloutStageAllowed(plan, options) {
+  const stage = plan.release.rolloutStage ?? "ga";
+  if (stage !== "canary") return;
+  if (options.explicitTarget || options.allowCanary) return;
+  throw new Error(
+    `Stack ${plan.targetVersion} is a CANARY release (not yet promoted to general availability). Refusing to install it implicitly via manifest.latest \u2014 this protects the fleet from an unpromoted rollout reaching every customer at once. To deploy it anyway:
+  - as the designated canary host: exe-os stack-update --target ${plan.targetVersion} --yes
+  - or explicitly opt in: exe-os stack-update --allow-canary --yes
+Once the canary host is verified healthy, promote it with: exe-os stack-promote --version ${plan.targetVersion} --yes`
+  );
+}
 function assertBreakingChangesAllowed(plan, allowedIds) {
   const required = plan.breakingChanges.filter((c) => c.requiresConfirmation !== false);
   const missing = required.filter((c) => !allowedIds.includes(c.id));
@@ -1786,6 +1797,10 @@ async function runStackUpdate(options) {
   const composeRaw = readFileSync(options.composeFile, "utf8");
   const plan = createStackUpdatePlan(manifest, envRaw, effectiveTargetVersion, scopedServiceNames, serviceSelection, composeRaw);
   const fullTargetPlan = scopedServiceNames.length > 0 ? createStackUpdatePlan(manifest, envRaw, effectiveTargetVersion, void 0, serviceSelection, composeRaw) : plan;
+  assertRolloutStageAllowed(plan, {
+    explicitTarget: Boolean(effectiveTargetVersion),
+    allowCanary: options.allowCanary ?? process.env.EXE_STACK_ALLOW_CANARY === "1"
+  });
   assertBreakingChangesAllowed(plan, options.allowedBreakingChangeIds ?? []);
   assertDeploymentScopeAllowed(plan, options.deploymentPersona ?? "customer");
   const plannedEnvRaw = patchEnv(envRaw, Object.fromEntries(plan.changes.map((c) => [c.key, c.after])));
@@ -2416,7 +2431,10 @@ function listAvailableVersions(manifest, currentVersion) {
     releasedAt: manifest.stacks[v]?.releasedAt,
     notes: manifest.stacks[v]?.notes,
     isCurrent: v === currentVersion,
-    isLatest: v === manifest.latest
+    isLatest: v === manifest.latest,
+    // Backward compatible: manifest entries published before rolloutStage existed
+    // are "ga" (see assertRolloutStageAllowed).
+    rolloutStage: manifest.stacks[v]?.rolloutStage ?? "ga"
   }));
 }
 function compareVersions(a, b) {
@@ -2865,6 +2883,7 @@ export {
   collectImageAvailabilityIssues,
   assertDeploymentScopeAllowed,
   assertProductionDeployGate,
+  assertRolloutStageAllowed,
   assertBreakingChangesAllowed,
   verifyManifestImagesAvailable,
   applyGatewayOverlays,

package/dist/{chunk-5Z5NATNS.js → chunk-K7KFGDWF.js}

@@ -1,6 +1,6 @@
 import {
   EXE_AI_DIR
-} from "./chunk-7Y5UDEVM.js";
+} from "./chunk-WZHZCDDO.js";
 
 // src/lib/device-registry.ts
 import crypto from "crypto";

package/dist/{chunk-UIV2WPBT.js → chunk-KGWRTRKC.js}

@@ -1,9 +1,9 @@
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-FUIIVSW6.js";
+} from "./chunk-2WAVZ5UJ.js";
 import {
   atomicWriteJsonSync
-} from "./chunk-SHIICYJW.js";
+} from "./chunk-BYTDMAGB.js";
 
 // src/lib/session-registry.ts
 import { readFileSync, mkdirSync, existsSync, openSync, closeSync, writeSync, unlinkSync, constants } from "fs";

package/dist/{chunk-KTPG4XKI.js → chunk-KP3U5QGJ.js}

@@ -118,7 +118,7 @@ async function executeSendWhatsapp(params) {
   if (!checkOutboundRateLimit("whatsapp")) {
     throw new Error(`Outbound rate limit exceeded for WhatsApp (max ${OUTBOUND_RATE_LIMIT_PER_HOUR}/hour)`);
   }
-  const { getAccountByName, getDefaultAccount } = await import("./whatsapp-accounts-BWRZUY23.js");
+  const { getAccountByName, getDefaultAccount } = await import("./whatsapp-accounts-BFIOXYW5.js");
   const account = params.account ? getAccountByName(params.account) : getDefaultAccount();
   if (!account) {
     throw new Error(

package/dist/{chunk-TLYAEISW.js → chunk-KW2SD2FL.js}

@@ -1,12 +1,12 @@
 import {
   vectorToSqlLiteral
-} from "./chunk-H37HHX3E.js";
+} from "./chunk-VSRPS3J7.js";
 import {
   blobToVector
 } from "./chunk-OTVEIJUQ.js";
 import {
   getClient
-} from "./chunk-HEPR6QTL.js";
+} from "./chunk-AOHXREB7.js";
 
 // src/lib/behaviors.ts
 import crypto from "crypto";

package/dist/{chunk-X7H3HMFH.js → chunk-KWZMQACA.js}

@@ -4,17 +4,17 @@ import {
   resolveExeSession,
   sendIntercom,
   strictSessionScopeFilter
-} from "./chunk-PLRIJALF.js";
+} from "./chunk-UP75Z5X7.js";
 import {
   parseMessage,
   serializeMessage
 } from "./chunk-4JERP7NT.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-FUIIVSW6.js";
+} from "./chunk-2WAVZ5UJ.js";
 import {
   getClient
-} from "./chunk-HEPR6QTL.js";
+} from "./chunk-AOHXREB7.js";
 
 // src/lib/messaging.ts
 import crypto from "crypto";
@@ -45,14 +45,17 @@ function rowToMessage(row) {
   };
 }
 var MAX_RETRIES = 10;
-async function countUnreadMessages(targetAgent, sessionScope) {
-  const client = getClient();
+function buildUnreadMessagesCountStatement(targetAgent, sessionScope) {
   const scope = strictSessionScopeFilter(sessionScope);
-  const result = await client.execute({
+  return {
     sql: `SELECT COUNT(*) AS count FROM messages
           WHERE target_agent = ? AND status IN ('pending', 'delivered')${scope.sql}`,
     args: [targetAgent, ...scope.args]
-  });
+  };
+}
+async function countUnreadMessages(targetAgent, sessionScope) {
+  const client = getClient();
+  const result = await client.execute(buildUnreadMessagesCountStatement(targetAgent, sessionScope));
   return Number(result.rows[0]?.count ?? 0);
 }
 async function sendMessage(input) {
@@ -326,6 +329,7 @@ function parseIncomingMessage(content) {
 }
 
 export {
+  buildUnreadMessagesCountStatement,
   countUnreadMessages,
   sendMessage,
   setWsClientSend,

package/dist/{chunk-OFX5B2S7.js → chunk-L2R3LN2P.js}

@@ -1,6 +1,6 @@
 import {
   loadEmployees
-} from "./chunk-HEPR6QTL.js";
+} from "./chunk-AOHXREB7.js";
 
 // src/lib/agent-symlinks.ts
 import os from "os";

package/dist/{chunk-T4KZ2Z2N.js → chunk-L4A5DL6Z.js}

@@ -1,13 +1,13 @@
 import {
   isExeSession
-} from "./chunk-PLRIJALF.js";
+} from "./chunk-UP75Z5X7.js";
 import {
   recordOrchestrationEventBestEffort
-} from "./chunk-FUIIVSW6.js";
+} from "./chunk-2WAVZ5UJ.js";
 import {
   getClient,
   isCoordinatorName
-} from "./chunk-HEPR6QTL.js";
+} from "./chunk-AOHXREB7.js";
 import {
   isDaemonAlive
 } from "./chunk-7HLWBYH7.js";

package/dist/{chunk-X425OEYF.js → chunk-LU2FALL6.js}

@@ -1,6 +1,6 @@
 import {
   loadPreferences
-} from "./chunk-CLAYNAXC.js";
+} from "./chunk-3EUMUSLE.js";
 import {
   EXE_HOOKS,
   isLegacyHomeDirHookCommand,
@@ -8,10 +8,10 @@ import {
 } from "./chunk-L3TB7CC3.js";
 import {
   buildClaudeHttpMcpEntry
-} from "./chunk-AVKXCSBI.js";
+} from "./chunk-GG5NDQNN.js";
 import {
   ensureAllAgentSymlinks
-} from "./chunk-OFX5B2S7.js";
+} from "./chunk-L2R3LN2P.js";
 import {
   MCP_LEGACY_KEY,
   MCP_PRIMARY_KEY

package/dist/{chunk-6M36JFFD.js → chunk-MKYFAKDW.js}

@@ -1,13 +1,13 @@
 import {
   embed
-} from "./chunk-3QDSCJ3F.js";
+} from "./chunk-XZXBB3TN.js";
 import {
   reserveVersions,
   vectorToBlob
-} from "./chunk-H37HHX3E.js";
+} from "./chunk-VSRPS3J7.js";
 import {
   getClient
-} from "./chunk-HEPR6QTL.js";
+} from "./chunk-AOHXREB7.js";
 
 // src/lib/documents.ts
 import crypto from "crypto";
@@ -270,7 +270,7 @@ async function ingestDocument(input) {
   await client.batch([documentStmt, ...chunkStmts], "write");
   const embedded = vectors.filter((v) => v !== null).length;
   const originalTexts = input.chunks.map((c) => c.text);
-  import("./doc-graph-extractor-3TRLGD7M.js").then(
+  import("./doc-graph-extractor-F6ODFIID.js").then(
     ({ extractAndStoreDocumentGraph }) => extractAndStoreDocumentGraph(documentId, originalTexts)
   ).catch((err) => {
     process.stderr.write(

package/dist/{chunk-I5RLNOFK.js → chunk-MOPUCPXK.js}

@@ -11,12 +11,18 @@ function daemonReadyPath() {
 function eventLoopBlockedMarkerPath() {
   return join(exeDir(), "session-cache", "event-loop-blocked.marker");
 }
+function eventLoopHeartbeatPath() {
+  return join(exeDir(), "session-cache", "event-loop-heartbeat");
+}
+var _readyGeneration;
+function setDaemonReadyGeneration(generation) {
+  _readyGeneration = generation;
+}
 function writeDaemonReady(info) {
   try {
-    writeFileSync(
-      daemonReadyPath(),
-      JSON.stringify({ pid: info.pid, port: info.port, ts: (/* @__PURE__ */ new Date()).toISOString() })
-    );
+    const payload = { pid: info.pid, port: info.port, ts: (/* @__PURE__ */ new Date()).toISOString() };
+    if (_readyGeneration !== void 0) payload.generation = _readyGeneration;
+    writeFileSync(daemonReadyPath(), JSON.stringify(payload));
   } catch {
   }
 }
@@ -55,6 +61,8 @@ function isDaemonReady(maxAgeMs = 3e4) {
 
 export {
   daemonReadyPath,
+  eventLoopHeartbeatPath,
+  setDaemonReadyGeneration,
   writeDaemonReady,
   clearDaemonReady,
   readDaemonReady,

package/dist/{chunk-ZIVEA3NB.js → chunk-MR6LHP4F.js}

@@ -263,7 +263,7 @@ async function runRegistryProxy(options = registryProxyOptionsFromEnv()) {
   await new Promise((resolve) => server.listen(options.port, options.host, resolve));
   console.log(`exe-registry-proxy listening on ${options.host ?? "0.0.0.0"}:${options.port}`);
   console.log(`proxying /v2/${options.allowedNamespace ?? "askexe"}/* -> ${options.upstream ?? "https://ghcr.io"}`);
-  const { licenseSyncConfigFromEnv, startLicenseSyncScheduler } = await import("./license-sync-N3RNYVP2.js");
+  const { licenseSyncConfigFromEnv, startLicenseSyncScheduler } = await import("./license-sync-N3UJFWAW.js");
   const syncConfig = licenseSyncConfigFromEnv();
   if (syncConfig) {
     startLicenseSyncScheduler(syncConfig);