@askexenow/exe-os 0.9.357 → 0.9.358

package/dist/{worktree-sweep-LSKFA2PK.js → worktree-sweep-W24XZKQO.js}

@@ -3,16 +3,18 @@ import {
   discoverRepoPaths,
   isWorktreePathOccupiedByCwd,
   sweepWorktrees
-} from "./chunk-ABM3DZF3.js";
-import "./chunk-TQ4O5A4S.js";
-import "./chunk-X4EDW3FH.js";
-import "./chunk-M5DPPJLS.js";
+} from "./chunk-ZANQKOBC.js";
+import "./chunk-Q5AFCR57.js";
+import "./chunk-6ZUHNYAB.js";
+import "./chunk-U7I4YINB.js";
 import "./chunk-2I23RPSI.js";
-import "./chunk-LLXYWNCH.js";
+import "./chunk-5YEUPUV4.js";
+import "./chunk-AXAHRTST.js";
 import "./chunk-OMXJMOBD.js";
-import "./chunk-7HLWBYH7.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-YMUZWC33.js";
+import "./chunk-V3W3SATA.js";
+import "./chunk-JY5GAZYC.js";
 import "./chunk-FXU7JOXK.js";
 import "./chunk-BCZF3AGJ.js";
 import "./chunk-HSGBZSCA.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.357",
+  "version": "0.9.358",
   "description": "AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",
@@ -109,6 +109,7 @@
     "node": ">=20.0.0"
   },
   "scripts": {
+    "prepare": "git config core.hooksPath .githooks || true",
     "test": "vitest run",
     "test:watch": "vitest",
     "lint": "eslint src/ --max-warnings 53",

package/release-notes.json

@@ -1,17 +1,30 @@
 {
-  "current": "0.9.357",
+  "current": "0.9.358",
   "notes": {
-    "0.9.357": {
-      "version": "0.9.357",
-      "date": "2026-07-28",
+    "0.9.358": {
+      "version": "0.9.358",
+      "date": "2026-07-29",
       "features": [],
       "fixes": [],
       "security": [],
       "other": [
-        "v0.9.357 — image-pullability watchdog + upgrade.sh proxy login (#501)"
+        "v0.9.358 — single-writer guard reconcile, CI de-flake, spend-cap alerts, gitleaks baseline, stack-promote runbook hardening (#512)"
       ],
       "migration_notes": []
     },
+    "0.9.357": {
+      "version": "0.9.357",
+      "date": "2026-07-28",
+      "features": [
+        "release ops: nightly image-pullability drift watchdog — a scheduled workflow HEAD-checks every pinned digest in the shipped stack manifests and fails loudly if any becomes un-pullable (registry GC, mirror rot, or proxy-auth drift), catching supply-chain breakage within ~24h instead of at a customer's deploy pre-flight (f4cbc12a) (#499)"
+      ],
+      "fixes": [
+        "deploy: the legacy deploy/upgrade.sh now docker-logins the update.askexe.com registry proxy (Basic auth, user token + EXE_REGISTRY_PROXY_PULL_TOKENS) before pulling — closes the one un-authenticated pull path that made manifest-pinned images fail with 401 on that flow (the primary `exe-os stack-update` path already re-auths per pull). Idempotent + guarded; skips cleanly when no proxy token is present (5f94882d) (#500)"
+      ],
+      "security": [],
+      "other": [],
+      "migration_notes": []
+    },
     "0.9.356": {
       "version": "0.9.356",
       "date": "2026-07-27",
@@ -46,21 +59,6 @@
       "security": [],
       "other": [],
       "migration_notes": []
-    },
-    "0.9.353": {
-      "version": "0.9.353",
-      "date": "2026-07-27",
-      "features": [
-        "Opus 5.0 (claude-opus-5.0) is now a first-class selectable model across the claude + opencode runtimes, with aliases (opus, opus-5, opus5) and spawn-time validation — fixes multi-customer reports that Opus 5.0 was rejected as unavailable (#480)"
-      ],
-      "fixes": [
-        "employee-session spawn cwd is derived from the roster/project root instead of a prior task's stale or deleted worktree, and refuses cleanly (releasing the spawn lock) rather than hard-failing tmux new-session when no valid directory resolves (e1b1444b) (#481)",
-        "intercom nudge delivery now confirms the Enter submission on an idle employee pane and re-queues half-delivered (typed-but-unsubmitted) nudges, so a dispatched agent no longer sits idle with an open task when the submit keystroke is dropped (e4889b61) (#483)",
-        "ERP deploy health probe resolves its HTTP Host header from the configured stack domain (ERP_SITE_NAME) instead of a hardcoded 'localhost', so a Host-routed Frappe/ERPNext deployment no longer 404s and rolls back an otherwise-healthy release (9747e6e6) (#484)"
-      ],
-      "security": [],
-      "other": [],
-      "migration_notes": []
     }
   }
 }

package/dist/chunk-7HLWBYH7.js

@@ -1,60 +0,0 @@
-// src/lib/mcp-health.ts
-import { existsSync, readFileSync } from "fs";
-import path from "path";
-import { homedir } from "os";
-var PID_PATH = path.join(homedir(), ".exe-os", "exed.pid");
-function isDaemonAlive() {
-  if (_isDaemonProcess) {
-    return { alive: true, pid: process.pid };
-  }
-  try {
-    if (!existsSync(PID_PATH)) {
-      const socketPath = process.env.EXE_DAEMON_SOCK ?? path.join(homedir(), ".exe-os", "exed.sock");
-      if (existsSync(socketPath)) return { alive: true, pid: null };
-      return { alive: false, pid: null };
-    }
-    const pid = parseInt(readFileSync(PID_PATH, "utf8").trim(), 10);
-    if (!Number.isFinite(pid) || pid <= 0) return { alive: false, pid: null };
-    process.kill(pid, 0);
-    return { alive: true, pid };
-  } catch {
-    return { alive: false, pid: null };
-  }
-}
-function isMcpHealthy(_timeoutMs = 2e3) {
-  if (_isDaemonProcess) return true;
-  const { alive } = isDaemonAlive();
-  if (!alive) return false;
-  const socketPath = process.env.EXE_DAEMON_SOCK ?? process.env.EXE_EMBED_SOCK ?? path.join(homedir(), ".exe-os", "exed.sock");
-  return existsSync(socketPath);
-}
-var _isDaemonProcess = false;
-function markAsDaemonProcess() {
-  _isDaemonProcess = true;
-}
-var EVENT_LOOP_DEGRADED_THRESHOLD_MS = 5e3;
-var _eventLoopLagMs = 0;
-var _eventLoopLagUpdatedAt = 0;
-function setEventLoopLagMs(lagMs) {
-  _eventLoopLagMs = lagMs;
-  _eventLoopLagUpdatedAt = Date.now();
-}
-function getEventLoopLagMs() {
-  return _eventLoopLagMs;
-}
-function getEventLoopLagUpdatedAt() {
-  return _eventLoopLagUpdatedAt;
-}
-function isEventLoopDegraded() {
-  return _eventLoopLagMs > EVENT_LOOP_DEGRADED_THRESHOLD_MS;
-}
-
-export {
-  isDaemonAlive,
-  isMcpHealthy,
-  markAsDaemonProcess,
-  setEventLoopLagMs,
-  getEventLoopLagMs,
-  getEventLoopLagUpdatedAt,
-  isEventLoopDegraded
-};