@askexenow/exe-os 0.9.368 → 0.9.369

package/dist/.dist-verified.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "verified_at": "2026-08-13T18:16:32.191Z",
-  "manifest_sha256": "5325b23b8030d7245f4757a7ba74e6113708fd68b7d052d79bc0dbed2164815a",
-  "package_version": "0.9.368"
+  "verified_at": "2026-08-13T19:51:08.245Z",
+  "manifest_sha256": "377076945803a96653252484affb1ac1ba02328fd499e557279af64170c0e397",
+  "package_version": "0.9.369"
 }

package/dist/build-manifest.json

@@ -1,6 +1,6 @@
 {
   "version": 2,
-  "generated_at": "2026-08-13T18:16:31.934Z",
+  "generated_at": "2026-08-13T19:51:07.993Z",
   "files": [
     {
       "path": "active-agent-6WNC756A.js",
@@ -2309,7 +2309,7 @@
     },
     {
       "path": "hooks/manifest.json",
-      "sha256": "0bd432ddaac935bd9e9270f62be01aa4702248f13d65179427be4ddfcd74db0d",
+      "sha256": "b6ff2fe42c44e322d35150b61469b76e8dd33ece90514f707a7b9816d6f6e5de",
       "bytes": 1841
     },
     {

package/dist/hooks/manifest.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "generatedAt": "2026-08-13T18:16:31.862Z",
+  "generatedAt": "2026-08-13T19:51:07.917Z",
   "hashes": {
     "bug-report-worker.js": "499d4e411f2725bffb988d7a4b9166ab03241425a33fabc727440a8f04ada0b7",
     "codex-stop-task-finalizer.js": "d8037dcea9319c7a33cddaa8bdd89f27477555de572411178f54c462316c97ad",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.368",
+  "version": "0.9.369",
   "description": "AI employee operating system \u2014 persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",

package/release-notes.json

@@ -1,17 +1,44 @@
 {
-  "current": "0.9.368",
+  "current": "0.9.369",
   "notes": {
-    "0.9.368": {
-      "version": "0.9.368",
+    "0.9.369": {
+      "version": "0.9.369",
       "date": "2026-08-13",
       "features": [],
       "fixes": [],
       "security": [],
       "other": [
-        "v0.9.368 (#716)"
+        "v0.9.369 — API key revocation (#718)"
       ],
       "migration_notes": []
     },
+    "0.9.368": {
+      "version": "0.9.368",
+      "date": "2026-08-14",
+      "features": [
+        "approve/deny on a privileged action now actually decides whether it runs — previously the prompt was cosmetic: no server handler existed, the safety classifier had no caller, and the wait flag was ignored (exe-build #165)",
+        "dashboard gains a Drive tab — an admin lens over Exe Drive (#709)",
+        "delivery truth: the system now tracks the gap between merged and actually delivered, with liveness checked on a clock rather than assumed (#707)",
+        "the watchdog now counts the self-heals it declines to make, so a restart it chose NOT to perform is visible instead of silent (#708)"
+      ],
+      "fixes": [
+        "cloud sync no longer starves every stage after the memory push: a deferred slice used to return early with no signal, so the daemon idled a full interval and the fifteen later stages — including DB backup — never ran, while every run reported success (#715)",
+        "closing a bug now genuinely requires a verification artifact — the gate existed and was correct, but was never reachable from the client everyone uses, so nothing was ever refused (#710)",
+        "behavior-injection truncation is loud instead of silent: agents were storing corrections that were dropped at spawn with no warning, so lessons appeared saved and were never applied (#701)",
+        "the installer refuses to run from a linked git worktree, detected structurally, so a temp checkout can no longer re-point global hooks at a directory that will not outlive it (#706)",
+        "create_task no longer reports success for a dispatch nobody received (#705)",
+        "Codex sessions launch again — we stopped pinning a flag OpenAI's CLI removed, and now feature-detect its flag surface instead (#704)",
+        "PreToolUse worktree isolation was inert inside .claude/worktrees (#712)",
+        "stopped shipping the crashlooping exe-monitor v0.9.5 build (#711)",
+        "admin bug updates: evidence-only updates no longer 400, corrections reach upstream, and oversize text is refused rather than silently truncated (#713, #714)",
+        "the dashboard image can serve askexe.com — the one domain it never could (#703)",
+        "release gate asserts required contexts off the x64 lane, so a release can no longer deadlock waiting on a runner it is occupying (#700)",
+        "device-token chat persists instead of losing every message: device identities carried no org, so writes were refused; the connection now resolves a real tenant or is refused outright (exe-build #164, #166)"
+      ],
+      "security": [],
+      "other": [],
+      "migration_notes": []
+    },
     "0.9.367": {
       "version": "0.9.367",
       "date": "2026-08-13",
@@ -102,35 +129,6 @@
       "security": [],
       "other": [],
       "migration_notes": []
-    },
-    "0.9.364": {
-      "version": "0.9.364",
-      "date": "2026-08-12",
-      "features": [
-        "scheduled CI sweeper: green agent PRs merge automatically and their git worktrees are pruned in the same action, so completed work can no longer sit unmerged and worktrees cannot accumulate",
-        "permanent gates for four recurring defect classes, with a monotone inventory that fails when a fix leaves a stale allowlist entry behind"
-      ],
-      "fixes": [
-        "orphan reaper (P0): the daemon reaper matched free text and killed live agent work — two Codex agents and a shell were destroyed mid-run. It now positively identifies a process by argv identity (node-wrapped CLIs resolve to the real CLI) and requires an anchored pattern match",
-        "memory (P0): supersede writes are scoped to the calling agent, closing two cross-agent scope leaks; a silently-ignored agent_id is now rejected instead of ignored",
-        "cloud sync: the daemon socket leaked after a successful sync, keeping the process alive until SIGTERM; it is now disconnected on cleanup and on SIGTERM",
-        "cloud sync: require a reliable daemon DB init instead of syncing against a no-op client",
-        "cli: short-lived binaries exit instead of hanging on the daemon socket",
-        "agent config: correct Claude 5 model ids, drop a phantom Sonnet 4.8, and accept future claude models instead of failing on a hardcoded list",
-        "agent defs: internal Claude model ids are translated to Claude Code frontmatter aliases",
-        "registry proxy: routes are classified at a single choke point and unknown paths fail closed",
-        "daemon: repeated dirty-worktree archive failures are bounded instead of retrying forever",
-        "boot brief: open work that nothing is executing is now surfaced instead of being silently lost; section and brief timeouts are separated and fail loud",
-        "sso-edge: the healthcheck probes the exempt /healthz rather than the gated /",
-        "worker: a missing API_KEY_STORAGE_SECRET no longer turns a successful auth into a 500 with an unwritten api_key_hash"
-      ],
-      "infrastructure": [
-        "local-first Linux CI: linux-build-check, api-router, worker and smoke run on local arm64 Linux VMs (linux-build-check went from 5-6 min to ~1m17s). The x64 Linux matrix still runs on main-push and still gates release, so x64 coverage is preserved",
-        "per-SHA concurrency restored on main so a release commit can never lose its CI run to a later push"
-      ],
-      "security": [],
-      "other": [],
-      "migration_notes": []
     }
   }
 }