@askexenow/exe-os 0.9.348 → 0.9.350

package/dist/{worktree-sweep-SW4AG6JR.js → worktree-sweep-TVQVQTVD.js}

@@ -3,12 +3,12 @@ import {
   discoverRepoPaths,
   isWorktreePathOccupiedByCwd,
   sweepWorktrees
-} from "./chunk-27REQ7KR.js";
-import "./chunk-OBWIVRD6.js";
-import "./chunk-AMC2OPYP.js";
-import "./chunk-QNKR7WEL.js";
+} from "./chunk-53HZ23T5.js";
+import "./chunk-MFRJRJ6U.js";
+import "./chunk-MGFG7V3M.js";
+import "./chunk-WOGK3FIE.js";
 import "./chunk-2I23RPSI.js";
-import "./chunk-FE6WBI2M.js";
+import "./chunk-GXMY5ERQ.js";
 import "./chunk-OMXJMOBD.js";
 import "./chunk-7HLWBYH7.js";
 import "./chunk-BBMTVAE3.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.348",
+  "version": "0.9.350",
   "description": "AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",
@@ -115,12 +115,13 @@
     "typecheck": "tsc --noEmit",
     "build": "bash scripts/build-lock.sh && mkdir -p dist/assets && cp src/assets/tmux.conf dist/assets/ && cp src/assets/ghostty.conf dist/assets/ && cp src/assets/statusline-command.sh dist/assets/ && cp src/assets/wezterm.lua dist/assets/ && cp src/assets/com.askexe.exed.plist dist/assets/ && cp src/bin/exe-start.sh dist/bin/exe-start.sh && (node dist/bin/generate-hook-manifest.js 2>/dev/null || true)",
     "deploy": "node dist/bin/pre-build-guard.js && npm run build && (node dist/bin/prune-orphan-chunks.js || true) && npm install -g . && node dist/bin/install.js --global && echo '[exe-os] Deploy complete. Run /mcp in active sessions to reconnect.'",
-    "postinstall": "node dist/bin/install.js --commands-only || true",
+    "postinstall": "[ ! -f dist/bin/install.js ] || node dist/bin/install.js --commands-only || true",
     "prepublishOnly": "npm run typecheck && npm run build && node dist/bin/prune-orphan-chunks.js --force && npm run guard:esm-require && npm run check:schema-version && node dist/bin/customer-readiness.js && node dist/bin/pre-publish.js",
     "test:publish": "npx vitest run --maxWorkers=4 --exclude 'tests/tui/**' --exclude 'tests/lib/tmux-routing.test.ts' --exclude 'tests/lib/intercom-routing.test.ts' --exclude 'tests/gateway/**' --exclude 'tests/mcp/ingest-document.test.ts' --exclude 'tests/lib/hybrid-search.test.ts' --exclude 'tests/lib/worker-gate.test.ts' --exclude 'tests/daemon-perf-stress.test.ts' --exclude 'tests/lib/gateway-client.test.ts' --exclude 'tests/lib/ws-client.test.ts' --exclude 'tests/lib/ws-auth.test.ts' --exclude 'tests/integration/clean-stack-projection.test.ts' --exclude 'tests/orchestration/dispatch-chain.test.ts' --exclude 'tests/orchestration/e2e-flow.test.ts' && echo '::warning::clean-stack-projection and stack-update quarantined (need Docker + live DB; environmental, fail in CI runner — container unhealthy / DB not initialized); ws-client/ws-auth quarantined (30-120s timeouts flaky on Node 20 CI runner — passes locally). Quarantined to match build-and-test (required gate): dispatch-chain/e2e-flow (timing-sensitive, flaky under parallel load — bug dfb25bf1). device-id-split-brain/reaper-deps-async/find-free-instance/db-backup-recovery de-flaked and promoted to the required gate (chore/deflake-required-ci). See cicd-audit-2026-06-18.md.' && npx vitest run --maxWorkers=1 tests/daemon-perf-stress.test.ts tests/lib/gateway-client.test.ts",
     "benchmark:longmemeval": "npx tsx tests/benchmarks/longmemeval.ts",
     "guard:esm-require": "node scripts/check-no-runtime-require.mjs",
     "check:schema-version": "node scripts/check-schema-version.mjs",
+    "check:stack-manifest-signature": "node scripts/verify-stack-manifest-signature.mjs",
     "test:stack-sim": "node scripts/stack-sim.mjs",
     "test:daemon-smoke": "vitest run --maxWorkers=1 tests/smoke/daemon-smoke-gate.test.ts",
     "test:smoke": "vitest run --maxWorkers=1 tests/smoke/"

package/release-notes.json

@@ -1,15 +1,53 @@
 {
-  "current": "0.9.348",
+  "current": "0.9.350",
   "notes": {
-    "0.9.348": {
-      "version": "0.9.348",
-      "date": "2026-07-21",
+    "0.9.350": {
+      "version": "0.9.350",
+      "date": "2026-07-24",
       "features": [],
       "fixes": [],
       "security": [],
       "other": [
-        "v0.9.348 — deploy-fix wave + MCP/guard/codex fixes (#449)"
+        "v0.9.350 — ship closeout-timeout (#470) + subfolder-resolver (#471) fixes (#472)"
+      ],
+      "migration_notes": []
+    },
+    "0.9.349": {
+      "version": "0.9.349",
+      "date": "2026-07-23",
+      "features": [
+        "dedicated release lane on build-my-4 — tag-publish + stack-image builds never queue behind PR CI (#465)",
+        "fetch-and-scope-check before dispatching fix work (#462)"
+      ],
+      "fixes": [
+        "monitor-hub healthcheck probes /app/beszel not /beszel — fixes permanent false-unhealthy on the deploy surface (ae971a4d) (#467)",
+        "erp healthchecks use ps not pgrep, and erp-nginx re-resolves its upstream after stack-update recreate (c8fb434f, 9bd1d9f7) (#466)",
+        "stack manifest is signed inside the write path (d84537ac) (#461)",
+        "fail-loud manifest-derived seeding for stack releases (#460)",
+        "landViaPR resolves the release PR by head-sha identity, not branch recency (#459)"
+      ],
+      "security": [],
+      "other": [],
+      "migration_notes": []
+    },
+    "0.9.348": {
+      "version": "0.9.348",
+      "date": "2026-07-22",
+      "features": [],
+      "fixes": [
+        "stack-update transactional rollback — validate before mutating host compose, restore full snapshot (879aad12, b216356a, 55d6ceac) (#436)",
+        "real /health routing + create_task project resolution by session scope (d3ba1136, f875e021) (#438)",
+        "cloudflared routes dashboard.askexe.com to exe-dashboard:80 (b97cdd1e) (#439)",
+        "pg-only mode initializes Postgres adapter, timer/orchestration workers pg-aware (53cd8659) (#440)",
+        "stack manifest exe-auth v0.1.0 -> v0.2.0 — stop a production downgrade (5f5b4795) (#441)",
+        "drop nonexistent claude-opus-4.8-1m from KNOWN_RUNTIMES — was breaking coordinator launch (4647dc23) (#444)",
+        "PreToolUse guard false-positives — nested-repo reads + git worktree add origin/main (82e321d1, f139051a) (#446)",
+        "codex launch honors ~/.codex/config.toml model + reasoning effort (d691ab3a) (#447)",
+        "stack-update redis healthcheck auth, crm-worker lockstep, verify-images retry (a9d34705, 9e324fd2, a4569861) (#435)",
+        "proactive dist-drift self-heal + verified restart (#371)"
       ],
+      "security": [],
+      "other": [],
       "migration_notes": []
     },
     "0.9.347": {
@@ -63,52 +101,6 @@
         "test: deflake daemon-ready \"returns within budget when pings are slow\" with fake timers — real contract is 1..2 budget-bounded pings (#419)"
       ],
       "migration_notes": []
-    },
-    "0.9.345": {
-      "version": "0.9.345",
-      "date": "2026-07-20",
-      "features": [
-        "opt-in system LaunchDaemon install — sudo exe-os daemon install --system survives reboot-without-login (#389)"
-      ],
-      "fixes": [
-        "per-turn hook tax cut 15x (4.6s->0.3s), fast fail-open sockets, user-visible /mcp nudge (#390)",
-        "spawn integrity — coordinator-cwd refusal, spawn mutex vs duplicate sessions, registry-resolved project roots (#391)",
-        "gateway security six-pack — webhook auth passthrough, per-channel rate limits, creds perms, pinned hardening tests (#392)",
-        "backup manifests count from the copied snapshot (no false backup-corrupt alarms); code_context refuses $HOME root, warns on stale index (#393)",
-        "setup wizard hardening, boot-injection dedup wave A (~1.7K tokens/boot), scripted greeting, support classification persistence (#394)",
-        "watchdog respawns via launchctl kickstart — plist env applies; EXE_EMBEDDINGS dedup (#389)"
-      ],
-      "security": [],
-      "other": [],
-      "migration_notes": []
-    },
-    "0.9.344": {
-      "version": "0.9.344",
-      "date": "2026-07-18",
-      "features": [
-        "subagent activity flows into task checkpoints + status brief (d7954e6c) (#384)",
-        "tiered review gate — verification receipts + opt-in auto-close with sampling (#376)",
-        "runtime parity — audit matrix + git-level worktree guards + pinned Codex spawn policy (#378)"
-      ],
-      "fixes": [
-        "event-loop yields for code_context index, macOS sleep-aware timer report, cloud-child pause accounting — 3-bug remainder (#386)",
-        "task/session-scope integrity — fail-loud scoping, sidechain task-mutation denial — 8-bug cluster (#387)",
-        "honest fast boot — adaptive probes, coverage-gap classifier, truthful briefs — 6-bug cluster (#385)",
-        "surface upstream failures, product routing, secrets hygiene — 6-bug cluster (#383)",
-        "make daemon-ready health probe injectable — deterministic under shared CI runners",
-        "prefer-const on child timeout, rename unused batchErr, restore spawn import lost in merge",
-        "adversarial-review hardening — locale-pinned lock verify, gated verify-skip, corruption aborts, honest success state (review of PR track)",
-        "derive workspaces.slug on documents pull + per-row skip-and-log so one bad row never blocks the stage (bug 30bb82d5)",
-        "survivable sync — per-stage resume cursors, verify-skip in sync child, DB-size-scaled timeout (bug 289da88b)",
-        "graceful SIGTERM cleanup in sync child + PID-reuse-safe stale db.lock verification before spawn (bug a3c588ef)",
-        "honest cloud status — daemon persists cloud-sync-state.json, brief renders synced/failing/paused (bug 4ad1b2f7)",
-        "capture sync child stderr — log to cloud-sync.log, surface tail in errors + health events (bug 5c205112)"
-      ],
-      "security": [],
-      "other": [
-        "trigger CI (pull_request synchronize did not fire for 3a075352)"
-      ],
-      "migration_notes": []
     }
   }
 }