@askexenow/exe-os 0.9.356 → 0.9.358

package/dist/{worktree-sweep-LSKFA2PK.js → worktree-sweep-W24XZKQO.js}

@@ -3,16 +3,18 @@ import {
   discoverRepoPaths,
   isWorktreePathOccupiedByCwd,
   sweepWorktrees
-} from "./chunk-ABM3DZF3.js";
-import "./chunk-TQ4O5A4S.js";
-import "./chunk-X4EDW3FH.js";
-import "./chunk-M5DPPJLS.js";
+} from "./chunk-ZANQKOBC.js";
+import "./chunk-Q5AFCR57.js";
+import "./chunk-6ZUHNYAB.js";
+import "./chunk-U7I4YINB.js";
 import "./chunk-2I23RPSI.js";
-import "./chunk-LLXYWNCH.js";
+import "./chunk-5YEUPUV4.js";
+import "./chunk-AXAHRTST.js";
 import "./chunk-OMXJMOBD.js";
-import "./chunk-7HLWBYH7.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-YMUZWC33.js";
+import "./chunk-V3W3SATA.js";
+import "./chunk-JY5GAZYC.js";
 import "./chunk-FXU7JOXK.js";
 import "./chunk-BCZF3AGJ.js";
 import "./chunk-HSGBZSCA.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.356",
+  "version": "0.9.358",
   "description": "AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",
@@ -109,6 +109,7 @@
     "node": ">=20.0.0"
   },
   "scripts": {
+    "prepare": "git config core.hooksPath .githooks || true",
     "test": "vitest run",
     "test:watch": "vitest",
     "lint": "eslint src/ --max-warnings 53",

package/release-notes.json

@@ -1,62 +1,61 @@
 {
-  "current": "0.9.356",
+  "current": "0.9.358",
   "notes": {
-    "0.9.356": {
-      "version": "0.9.356",
-      "date": "2026-07-27",
+    "0.9.358": {
+      "version": "0.9.358",
+      "date": "2026-07-29",
       "features": [],
       "fixes": [],
       "security": [],
       "other": [
-        "v0.9.356 — DB-client read-guard + spawn-worktree refusal fixes (#497)"
+        "v0.9.358 — single-writer guard reconcile, CI de-flake, spend-cap alerts, gitleaks baseline, stack-promote runbook hardening (#512)"
       ],
       "migration_notes": []
     },
-    "0.9.355": {
-      "version": "0.9.355",
-      "date": "2026-07-27",
+    "0.9.357": {
+      "version": "0.9.357",
+      "date": "2026-07-28",
       "features": [
-        "search: FTS queries now support exact \"quoted phrases\" and negative/NOT terms (`-term` / `NOT term`) — parsed into FTS5 phrase + NOT clauses (query-construction only, no index/tokenizer change), with a safe fallback to a plain match on malformed input so a bad query never throws or returns nothing (91b92519) (#492)"
+        "release ops: nightly image-pullability drift watchdog — a scheduled workflow HEAD-checks every pinned digest in the shipped stack manifests and fails loudly if any becomes un-pullable (registry GC, mirror rot, or proxy-auth drift), catching supply-chain breakage within ~24h instead of at a customer's deploy pre-flight (f4cbc12a) (#499)"
+      ],
+      "fixes": [
+        "deploy: the legacy deploy/upgrade.sh now docker-logins the update.askexe.com registry proxy (Basic auth, user token + EXE_REGISTRY_PROXY_PULL_TOKENS) before pulling — closes the one un-authenticated pull path that made manifest-pinned images fail with 401 on that flow (the primary `exe-os stack-update` path already re-auths per pull). Idempotent + guarded; skips cleanly when no proxy token is present (5f94882d) (#500)"
       ],
-      "fixes": [],
       "security": [],
       "other": [],
       "migration_notes": []
     },
-    "0.9.354": {
-      "version": "0.9.354",
+    "0.9.356": {
+      "version": "0.9.356",
       "date": "2026-07-27",
-      "features": [
-        "diagnostics: new `memory_isolation` action scores how unique each agent's memory is vs how much it overlaps others — graph-entity-set Jaccard overlap + per-agent uniqueness score, read-only, no embeddings, session_scope-isolated (admin-only all_scopes opt-in) (d78ca1df) (#489)",
-        "search-quality: aggregate precision@K reporting (micro + macro) over a window, computed read-only from existing memory_reads ⋈ tasks telemetry and surfaced in `exe-memory-reads` (90bba6f0) (#490)"
+      "features": [],
+      "fixes": [
+        "memory reads no longer throw \"Database client not initialized\" — memory(search)/recall_my_memory/ask_team_memory now guard on a shared ensureReadDbReady() and return an empty result gracefully when the DB adapter is unregistered (daemon down / degraded fastDbInit no-op), instead of crashing (extends the #474 fix to the read paths) (8167b9aa) (#495)",
+        "spawn no longer emits a false \"Coordinator checkout refusal\" for worktree-isolated dispatch — the coordinator-cwd refusal now only fires for an explicit spawn_worktree=false opt-out into the coordinator's live checkout; the main-checkout branch-stomp protection is preserved downstream, so code-role agents can again be dispatched from the coordinator's own repo (7af6e4a1) (#496)"
       ],
-      "fixes": [],
       "security": [],
       "other": [],
       "migration_notes": []
     },
-    "0.9.353": {
-      "version": "0.9.353",
+    "0.9.355": {
+      "version": "0.9.355",
       "date": "2026-07-27",
       "features": [
-        "Opus 5.0 (claude-opus-5.0) is now a first-class selectable model across the claude + opencode runtimes, with aliases (opus, opus-5, opus5) and spawn-time validation — fixes multi-customer reports that Opus 5.0 was rejected as unavailable (#480)"
-      ],
-      "fixes": [
-        "employee-session spawn cwd is derived from the roster/project root instead of a prior task's stale or deleted worktree, and refuses cleanly (releasing the spawn lock) rather than hard-failing tmux new-session when no valid directory resolves (e1b1444b) (#481)",
-        "intercom nudge delivery now confirms the Enter submission on an idle employee pane and re-queues half-delivered (typed-but-unsubmitted) nudges, so a dispatched agent no longer sits idle with an open task when the submit keystroke is dropped (e4889b61) (#483)",
-        "ERP deploy health probe resolves its HTTP Host header from the configured stack domain (ERP_SITE_NAME) instead of a hardcoded 'localhost', so a Host-routed Frappe/ERPNext deployment no longer 404s and rolls back an otherwise-healthy release (9747e6e6) (#484)"
+        "search: FTS queries now support exact \"quoted phrases\" and negative/NOT terms (`-term` / `NOT term`) — parsed into FTS5 phrase + NOT clauses (query-construction only, no index/tokenizer change), with a safe fallback to a plain match on malformed input so a bad query never throws or returns nothing (91b92519) (#492)"
       ],
+      "fixes": [],
       "security": [],
       "other": [],
       "migration_notes": []
     },
-    "0.9.352": {
-      "version": "0.9.352",
-      "date": "2026-07-25",
-      "features": [],
-      "fixes": [
-        "multi-coordinator session-scope correctness: an employee session now derives its coordinator from its OWN live tmux session name (davinci-yoda1 → yoda1), not the EXE_SESSION env baked at spawn — so with two live coordinators (yoda1+yoda2) a worker no longer mis-detects its coordinator, refuses its own task as a cross-session leak, or freezes reading another coordinator's signal dir (7eec74b7, 45a9f87e) (#476)"
+    "0.9.354": {
+      "version": "0.9.354",
+      "date": "2026-07-27",
+      "features": [
+        "diagnostics: new `memory_isolation` action scores how unique each agent's memory is vs how much it overlaps others — graph-entity-set Jaccard overlap + per-agent uniqueness score, read-only, no embeddings, session_scope-isolated (admin-only all_scopes opt-in) (d78ca1df) (#489)",
+        "search-quality: aggregate precision@K reporting (micro + macro) over a window, computed read-only from existing memory_reads ⋈ tasks telemetry and surfaced in `exe-memory-reads` (90bba6f0) (#490)"
       ],
+      "fixes": [],
       "security": [],
       "other": [],
       "migration_notes": []

package/dist/chunk-7HLWBYH7.js

@@ -1,60 +0,0 @@
-// src/lib/mcp-health.ts
-import { existsSync, readFileSync } from "fs";
-import path from "path";
-import { homedir } from "os";
-var PID_PATH = path.join(homedir(), ".exe-os", "exed.pid");
-function isDaemonAlive() {
-  if (_isDaemonProcess) {
-    return { alive: true, pid: process.pid };
-  }
-  try {
-    if (!existsSync(PID_PATH)) {
-      const socketPath = process.env.EXE_DAEMON_SOCK ?? path.join(homedir(), ".exe-os", "exed.sock");
-      if (existsSync(socketPath)) return { alive: true, pid: null };
-      return { alive: false, pid: null };
-    }
-    const pid = parseInt(readFileSync(PID_PATH, "utf8").trim(), 10);
-    if (!Number.isFinite(pid) || pid <= 0) return { alive: false, pid: null };
-    process.kill(pid, 0);
-    return { alive: true, pid };
-  } catch {
-    return { alive: false, pid: null };
-  }
-}
-function isMcpHealthy(_timeoutMs = 2e3) {
-  if (_isDaemonProcess) return true;
-  const { alive } = isDaemonAlive();
-  if (!alive) return false;
-  const socketPath = process.env.EXE_DAEMON_SOCK ?? process.env.EXE_EMBED_SOCK ?? path.join(homedir(), ".exe-os", "exed.sock");
-  return existsSync(socketPath);
-}
-var _isDaemonProcess = false;
-function markAsDaemonProcess() {
-  _isDaemonProcess = true;
-}
-var EVENT_LOOP_DEGRADED_THRESHOLD_MS = 5e3;
-var _eventLoopLagMs = 0;
-var _eventLoopLagUpdatedAt = 0;
-function setEventLoopLagMs(lagMs) {
-  _eventLoopLagMs = lagMs;
-  _eventLoopLagUpdatedAt = Date.now();
-}
-function getEventLoopLagMs() {
-  return _eventLoopLagMs;
-}
-function getEventLoopLagUpdatedAt() {
-  return _eventLoopLagUpdatedAt;
-}
-function isEventLoopDegraded() {
-  return _eventLoopLagMs > EVENT_LOOP_DEGRADED_THRESHOLD_MS;
-}
-
-export {
-  isDaemonAlive,
-  isMcpHealthy,
-  markAsDaemonProcess,
-  setEventLoopLagMs,
-  getEventLoopLagMs,
-  getEventLoopLagUpdatedAt,
-  isEventLoopDegraded
-};