@askexenow/exe-os 0.9.396 → 0.9.398

package/deploy/stack-manifests/v0.9.json

@@ -5308,11 +5308,410 @@
         "composeSha256": "220b251375f372107e8d8d54a9c3e4ceab1f57aae80f4babf2933c3887532263",
         "composeOverrideSha256": "af295ca2f75b85788416e4df51cab86d8b773bf4cafe6cf6df9c7c26b9a42d6d"
       }
+    },
+    "0.9.56": {
+      "version": "0.9.56",
+      "releasedAt": "2026-09-24T03:50:06.491Z",
+      "npmVersion": "0.9.396",
+      "notes": "Proxy transport recovery canary from applied stack 0.9.53. Update only exe-os to v0.9.396 with bounded digest-verified blob resume and refreshed production packages; preserve CRM v0.9.66, Dashboard v0.9.392, Auth v0.6.10, every other service pin, and signed base+override compose bytes. After the signed exe-os update, recreate the exe-update companion from the same EXE_OS_IMAGE_TAG with scoped image/source/health witnesses before any CRM DEMO rollout. Supersedes unapplied CRM stack 0.9.55 for this host; DEMO remains disabled.",
+      "services": {
+        "exe-db": {
+          "image": "update.askexe.com/askexe/pgvector:0.8.0-pg16@sha256:a132765ec351c65111b5b675928a3a0515a466a40f97277329db8b8209ad8bc9",
+          "env": "EXE_DB_IMAGE",
+          "composeService": "exe-db",
+          "required": true,
+          "category": "core",
+          "description": "Postgres (pgvector) — digest-pinned (bug 32d6e02f; was tag-only in 0.9.25, regressed from 0.9.24)"
+        },
+        "exe-os": {
+          "image": "update.askexe.com/askexe/exe-os:v0.9.396@sha256:faca74fa9207d79b6156d64d737247b58b3ba6083c669ff23e20763059815554",
+          "env": "EXE_OS_IMAGE_TAG",
+          "composeService": "exe-os",
+          "healthUrl": "http://127.0.0.1:8765/health",
+          "required": true,
+          "category": "core",
+          "description": "exe-os daemon + MCP server"
+        },
+        "crm": {
+          "image": "update.askexe.com/askexe/exe-crm:v0.9.66@sha256:38bbae74ddd33dbbd62175a46ad0d3f99ef6c671b0c2187e35398ca9c504c3eb",
+          "env": "CRM_IMAGE_TAG",
+          "composeService": "exe-crm",
+          "healthUrl": "http://127.0.0.1:3000/healthz",
+          "category": "app",
+          "gitSha": "a3d107483304d10b05c9f1ee5e1b0182c4628e65",
+          "description": "Central authentication and recovery with server-validated shared sessions for CRM web and worker."
+        },
+        "wiki": {
+          "image": "update.askexe.com/askexe/exe-wiki:v0.9.37@sha256:8fa22e77c0742fbb690f7b4c8431a186692a20ebd335fb141782df4289dc337f",
+          "env": "WIKI_IMAGE_TAG",
+          "composeService": "exe-wiki",
+          "healthUrl": "http://127.0.0.1:3001/api/ping",
+          "category": "app",
+          "description": "Central hosted authentication and recovery with server-validated shared sessions, membership enforcement, and no product-local credential form.",
+          "gitSha": "713a4370c2b641b8f8b07fd1e7390afa79a9c931"
+        },
+        "gateway": {
+          "image": "update.askexe.com/askexe/exe-gateway:v2026.08.07-c15f093-stamped@sha256:1bc11a2a0ad1f3929d59d2685696f22a72042b9fca9c75e15c02dc7d3c640105",
+          "env": "GATEWAY_IMAGE_TAG",
+          "composeService": "exe-gateway",
+          "healthUrl": "http://127.0.0.1:3100/health",
+          "category": "app",
+          "description": "WhatsApp/messaging gateway — provenance-stamped rebuild of main (outbound message persistence fix); pinned by digest, dated immutable tag.",
+          "gitSha": "c15f093a0f59730bd5c2c73791ff77059dfa7cc1"
+        },
+        "monitorAgent": {
+          "image": "update.askexe.com/askexe/exe-monitor-agent:v2026.08.09-10660eb4-stamped@sha256:29fbd445f79484df04f000603e4ff445e76f0380f86d687a0033e3a0ef7d1b7a",
+          "env": "MONITOR_AGENT_IMAGE_TAG",
+          "composeService": "exe-monitor-agent",
+          "category": "monitoring",
+          "gitSha": "10660eb4abdeffbcba2aad13549aa58e208ac7a3"
+        },
+        "monitorHub": {
+          "image": "update.askexe.com/askexe/exe-monitor-hub:v2026.08.09-10660eb4-stamped@sha256:c9a9218c2713b8dffea7e1cf8c0702a614657d311a7a4e821c6a543bab29bb97",
+          "env": "MONITOR_HUB_IMAGE_TAG",
+          "composeService": "exe-monitor-hub",
+          "healthUrl": "http://127.0.0.1:8090/api/health",
+          "category": "monitoring",
+          "gitSha": "10660eb4abdeffbcba2aad13549aa58e208ac7a3"
+        },
+        "auth": {
+          "image": "update.askexe.com/askexe/exe-auth:v0.6.10@sha256:0260349962d087cd3c33fed1d362029416e82ae9cc60abca7969beac2cb8639f",
+          "env": "AUTH_IMAGE_TAG",
+          "composeService": "exe-auth",
+          "healthUrl": "http://127.0.0.1:3300/",
+          "category": "auth",
+          "description": "GoTrue SSO and privileged license authority bridge; stateless auth proxy.",
+          "gitSha": "29fe7015d90b80c94db3a1e3904852b934071711"
+        },
+        "erp": {
+          "image": "update.askexe.com/askexe/exe-erp:v0.3.17@sha256:ef61b59d94c04189fe2975045a3816d2fecc8efe3027e0ee8c17d0fa2efdbc3b",
+          "env": "ERP_IMAGE_TAG",
+          "composeService": "exe-erp",
+          "healthUrl": "http://127.0.0.1:8069/api/method/ping",
+          "healthHost": "localhost",
+          "required": false,
+          "category": "app",
+          "description": "Enterprise Resource Planning with central hosted authentication and subject-bound organization admission.",
+          "gitSha": "a769ec5e0ae53bc5944715845869715ebbffd63a"
+        },
+        "gotrue": {
+          "image": "update.askexe.com/askexe/gotrue:v2.172.1@sha256:b0dd7aa28dd1f9a8bd31f136c8b912661f701d9b863171e5843cb08f18f49de4",
+          "composeService": "gotrue",
+          "healthUrl": "http://127.0.0.1:9999/health",
+          "category": "infra"
+        },
+        "redis": {
+          "image": "update.askexe.com/askexe/redis:7.4-alpine@sha256:6ab0b6e7381779332f97b8ca76193e45b0756f38d4c0dcda72dbb3c32061ab99",
+          "composeService": "redis",
+          "category": "infra"
+        },
+        "clickhouse": {
+          "image": "update.askexe.com/askexe/clickhouse-server:24.8.4.13-alpine@sha256:88a45f9e328549b2579256c46ee38e5c0e25ae58303d9eb6d9c7ed8d6d2bbf3c",
+          "composeService": "clickhouse",
+          "category": "infra"
+        },
+        "cloudflared": {
+          "image": "update.askexe.com/askexe/cloudflared:2026-07@sha256:ba461b8aa9c042156dbd39c38657fe7431bafa063220eab8d5330a523863da9f",
+          "composeService": "cloudflared",
+          "category": "infra"
+        },
+        "exe-sso-edge": {
+          "image": "update.askexe.com/askexe/nginx:alpine@sha256:20316569d8f81a160065d7d2a5eeffc7ca97d79022462ee255fd23fa103a6b5c",
+          "composeService": "exe-sso-edge",
+          "category": "infra"
+        },
+        "exe-otel-collector": {
+          "image": "update.askexe.com/askexe/otel-collector-contrib:0.114.0@sha256:37fa87091cfaaec7234a27e4e395a40c31c2bfaea97a349a4afef6d9e9681197",
+          "composeService": "exe-otel-collector",
+          "category": "infra"
+        },
+        "dashboard": {
+          "image": "update.askexe.com/askexe/exe-dashboard:v0.9.392@sha256:d151441554c00e216084bd1caf2278e8c41fde188c039e0f167e158a511cbeec",
+          "env": "DASHBOARD_IMAGE_TAG",
+          "composeService": "exe-dashboard",
+          "healthUrl": "http://127.0.0.1:3301/health",
+          "required": false,
+          "category": "optional",
+          "description": "Customer dashboard at dashboard.<apex> — credits, usage, API keys, billing",
+          "gitSha": "e11b25ad567389440da8ed5e566a9c59bce24123"
+        }
+      },
+      "rolloutStage": "canary",
+      "config": {
+        "composeSha256": "220b251375f372107e8d8d54a9c3e4ceab1f57aae80f4babf2933c3887532263",
+        "composeOverrideSha256": "af295ca2f75b85788416e4df51cab86d8b773bf4cafe6cf6df9c7c26b9a42d6d"
+      }
+    },
+    "0.9.57": {
+      "version": "0.9.57",
+      "releasedAt": "2026-09-24T08:57:36.131Z",
+      "npmVersion": "0.9.397",
+      "notes": "Retained-compose verification recovery canary from live stack 0.9.53. Bind the reviewed npm 0.9.397 updater to the already published, provenance-verified exe-os v0.9.396 image; preserve CRM v0.9.66, Dashboard v0.9.392, Auth v0.6.10, all other service pins, and signed base+override compose bytes. The selected exe-os daemon must match its signed digest and pass health; recreate exe-update from that same signed EXE_OS_IMAGE_TAG with separate image/source/health witnesses before CRM rollout. Supersedes the rolled-back 0.9.56 attempt and unapplied CRM 0.9.55.",
+      "services": {
+        "exe-db": {
+          "image": "update.askexe.com/askexe/pgvector:0.8.0-pg16@sha256:a132765ec351c65111b5b675928a3a0515a466a40f97277329db8b8209ad8bc9",
+          "env": "EXE_DB_IMAGE",
+          "composeService": "exe-db",
+          "required": true,
+          "category": "core",
+          "description": "Postgres (pgvector) — digest-pinned (bug 32d6e02f; was tag-only in 0.9.25, regressed from 0.9.24)"
+        },
+        "exe-os": {
+          "image": "update.askexe.com/askexe/exe-os:v0.9.396@sha256:faca74fa9207d79b6156d64d737247b58b3ba6083c669ff23e20763059815554",
+          "env": "EXE_OS_IMAGE_TAG",
+          "composeService": "exe-os",
+          "healthUrl": "http://127.0.0.1:8765/health",
+          "required": true,
+          "category": "core",
+          "description": "exe-os daemon + MCP server"
+        },
+        "crm": {
+          "image": "update.askexe.com/askexe/exe-crm:v0.9.66@sha256:38bbae74ddd33dbbd62175a46ad0d3f99ef6c671b0c2187e35398ca9c504c3eb",
+          "env": "CRM_IMAGE_TAG",
+          "composeService": "exe-crm",
+          "healthUrl": "http://127.0.0.1:3000/healthz",
+          "category": "app",
+          "gitSha": "a3d107483304d10b05c9f1ee5e1b0182c4628e65",
+          "description": "Central authentication and recovery with server-validated shared sessions for CRM web and worker."
+        },
+        "wiki": {
+          "image": "update.askexe.com/askexe/exe-wiki:v0.9.37@sha256:8fa22e77c0742fbb690f7b4c8431a186692a20ebd335fb141782df4289dc337f",
+          "env": "WIKI_IMAGE_TAG",
+          "composeService": "exe-wiki",
+          "healthUrl": "http://127.0.0.1:3001/api/ping",
+          "category": "app",
+          "description": "Central hosted authentication and recovery with server-validated shared sessions, membership enforcement, and no product-local credential form.",
+          "gitSha": "713a4370c2b641b8f8b07fd1e7390afa79a9c931"
+        },
+        "gateway": {
+          "image": "update.askexe.com/askexe/exe-gateway:v2026.08.07-c15f093-stamped@sha256:1bc11a2a0ad1f3929d59d2685696f22a72042b9fca9c75e15c02dc7d3c640105",
+          "env": "GATEWAY_IMAGE_TAG",
+          "composeService": "exe-gateway",
+          "healthUrl": "http://127.0.0.1:3100/health",
+          "category": "app",
+          "description": "WhatsApp/messaging gateway — provenance-stamped rebuild of main (outbound message persistence fix); pinned by digest, dated immutable tag.",
+          "gitSha": "c15f093a0f59730bd5c2c73791ff77059dfa7cc1"
+        },
+        "monitorAgent": {
+          "image": "update.askexe.com/askexe/exe-monitor-agent:v2026.08.09-10660eb4-stamped@sha256:29fbd445f79484df04f000603e4ff445e76f0380f86d687a0033e3a0ef7d1b7a",
+          "env": "MONITOR_AGENT_IMAGE_TAG",
+          "composeService": "exe-monitor-agent",
+          "category": "monitoring",
+          "gitSha": "10660eb4abdeffbcba2aad13549aa58e208ac7a3"
+        },
+        "monitorHub": {
+          "image": "update.askexe.com/askexe/exe-monitor-hub:v2026.08.09-10660eb4-stamped@sha256:c9a9218c2713b8dffea7e1cf8c0702a614657d311a7a4e821c6a543bab29bb97",
+          "env": "MONITOR_HUB_IMAGE_TAG",
+          "composeService": "exe-monitor-hub",
+          "healthUrl": "http://127.0.0.1:8090/api/health",
+          "category": "monitoring",
+          "gitSha": "10660eb4abdeffbcba2aad13549aa58e208ac7a3"
+        },
+        "auth": {
+          "image": "update.askexe.com/askexe/exe-auth:v0.6.10@sha256:0260349962d087cd3c33fed1d362029416e82ae9cc60abca7969beac2cb8639f",
+          "env": "AUTH_IMAGE_TAG",
+          "composeService": "exe-auth",
+          "healthUrl": "http://127.0.0.1:3300/",
+          "category": "auth",
+          "description": "GoTrue SSO and privileged license authority bridge; stateless auth proxy.",
+          "gitSha": "29fe7015d90b80c94db3a1e3904852b934071711"
+        },
+        "erp": {
+          "image": "update.askexe.com/askexe/exe-erp:v0.3.17@sha256:ef61b59d94c04189fe2975045a3816d2fecc8efe3027e0ee8c17d0fa2efdbc3b",
+          "env": "ERP_IMAGE_TAG",
+          "composeService": "exe-erp",
+          "healthUrl": "http://127.0.0.1:8069/api/method/ping",
+          "healthHost": "localhost",
+          "required": false,
+          "category": "app",
+          "description": "Enterprise Resource Planning with central hosted authentication and subject-bound organization admission.",
+          "gitSha": "a769ec5e0ae53bc5944715845869715ebbffd63a"
+        },
+        "gotrue": {
+          "image": "update.askexe.com/askexe/gotrue:v2.172.1@sha256:b0dd7aa28dd1f9a8bd31f136c8b912661f701d9b863171e5843cb08f18f49de4",
+          "composeService": "gotrue",
+          "healthUrl": "http://127.0.0.1:9999/health",
+          "category": "infra"
+        },
+        "redis": {
+          "image": "update.askexe.com/askexe/redis:7.4-alpine@sha256:6ab0b6e7381779332f97b8ca76193e45b0756f38d4c0dcda72dbb3c32061ab99",
+          "composeService": "redis",
+          "category": "infra"
+        },
+        "clickhouse": {
+          "image": "update.askexe.com/askexe/clickhouse-server:24.8.4.13-alpine@sha256:88a45f9e328549b2579256c46ee38e5c0e25ae58303d9eb6d9c7ed8d6d2bbf3c",
+          "composeService": "clickhouse",
+          "category": "infra"
+        },
+        "cloudflared": {
+          "image": "update.askexe.com/askexe/cloudflared:2026-07@sha256:ba461b8aa9c042156dbd39c38657fe7431bafa063220eab8d5330a523863da9f",
+          "composeService": "cloudflared",
+          "category": "infra"
+        },
+        "exe-sso-edge": {
+          "image": "update.askexe.com/askexe/nginx:alpine@sha256:20316569d8f81a160065d7d2a5eeffc7ca97d79022462ee255fd23fa103a6b5c",
+          "composeService": "exe-sso-edge",
+          "category": "infra"
+        },
+        "exe-otel-collector": {
+          "image": "update.askexe.com/askexe/otel-collector-contrib:0.114.0@sha256:37fa87091cfaaec7234a27e4e395a40c31c2bfaea97a349a4afef6d9e9681197",
+          "composeService": "exe-otel-collector",
+          "category": "infra"
+        },
+        "dashboard": {
+          "image": "update.askexe.com/askexe/exe-dashboard:v0.9.392@sha256:d151441554c00e216084bd1caf2278e8c41fde188c039e0f167e158a511cbeec",
+          "env": "DASHBOARD_IMAGE_TAG",
+          "composeService": "exe-dashboard",
+          "healthUrl": "http://127.0.0.1:3301/health",
+          "required": false,
+          "category": "optional",
+          "description": "Customer dashboard at dashboard.<apex> — credits, usage, API keys, billing",
+          "gitSha": "e11b25ad567389440da8ed5e566a9c59bce24123"
+        }
+      },
+      "rolloutStage": "canary",
+      "config": {
+        "composeSha256": "220b251375f372107e8d8d54a9c3e4ceab1f57aae80f4babf2933c3887532263",
+        "composeOverrideSha256": "af295ca2f75b85788416e4df51cab86d8b773bf4cafe6cf6df9c7c26b9a42d6d"
+      }
+    },
+    "0.9.58": {
+      "version": "0.9.58",
+      "releasedAt": "2026-09-24T09:57:33.257Z",
+      "npmVersion": "0.9.397",
+      "notes": "CRM admission and founder SSO recovery canary after signed stack 0.9.57. Update only CRM web and worker from v0.9.66 to v0.9.68 with corrected GoTrue /api JWKS path and DEMO origin routing; preserve the signed exe-os v0.9.396 proxy recovery, Dashboard v0.9.392, Auth v0.6.10, all other service pins, and ordered signed Compose bytes. Restore EXE_CRM_GOTRUE_URL=https://auth.askexe.com/api as a separately witnessed host configuration step before DEMO bootstrap; the temporary internal GoTrue workaround must be removed after fixed CRM is healthy.",
+      "services": {
+        "exe-db": {
+          "image": "update.askexe.com/askexe/pgvector:0.8.0-pg16@sha256:a132765ec351c65111b5b675928a3a0515a466a40f97277329db8b8209ad8bc9",
+          "env": "EXE_DB_IMAGE",
+          "composeService": "exe-db",
+          "required": true,
+          "category": "core",
+          "description": "Postgres (pgvector) — digest-pinned (bug 32d6e02f; was tag-only in 0.9.25, regressed from 0.9.24)"
+        },
+        "exe-os": {
+          "image": "update.askexe.com/askexe/exe-os:v0.9.396@sha256:faca74fa9207d79b6156d64d737247b58b3ba6083c669ff23e20763059815554",
+          "env": "EXE_OS_IMAGE_TAG",
+          "composeService": "exe-os",
+          "healthUrl": "http://127.0.0.1:8765/health",
+          "required": true,
+          "category": "core",
+          "description": "exe-os daemon + MCP server"
+        },
+        "crm": {
+          "image": "update.askexe.com/askexe/exe-crm:v0.9.68@sha256:2e3ead084d6672717bd26670d963f8939a11dbe972f4060a084970f201495075",
+          "env": "CRM_IMAGE_TAG",
+          "composeService": "exe-crm",
+          "healthUrl": "http://127.0.0.1:3000/healthz",
+          "category": "app",
+          "gitSha": "0ccda567b5ac5157092cb9f63ebb236f7a0a21cb",
+          "description": "Central authentication and recovery with server-validated shared sessions for CRM web and worker."
+        },
+        "wiki": {
+          "image": "update.askexe.com/askexe/exe-wiki:v0.9.37@sha256:8fa22e77c0742fbb690f7b4c8431a186692a20ebd335fb141782df4289dc337f",
+          "env": "WIKI_IMAGE_TAG",
+          "composeService": "exe-wiki",
+          "healthUrl": "http://127.0.0.1:3001/api/ping",
+          "category": "app",
+          "description": "Central hosted authentication and recovery with server-validated shared sessions, membership enforcement, and no product-local credential form.",
+          "gitSha": "713a4370c2b641b8f8b07fd1e7390afa79a9c931"
+        },
+        "gateway": {
+          "image": "update.askexe.com/askexe/exe-gateway:v2026.08.07-c15f093-stamped@sha256:1bc11a2a0ad1f3929d59d2685696f22a72042b9fca9c75e15c02dc7d3c640105",
+          "env": "GATEWAY_IMAGE_TAG",
+          "composeService": "exe-gateway",
+          "healthUrl": "http://127.0.0.1:3100/health",
+          "category": "app",
+          "description": "WhatsApp/messaging gateway — provenance-stamped rebuild of main (outbound message persistence fix); pinned by digest, dated immutable tag.",
+          "gitSha": "c15f093a0f59730bd5c2c73791ff77059dfa7cc1"
+        },
+        "monitorAgent": {
+          "image": "update.askexe.com/askexe/exe-monitor-agent:v2026.08.09-10660eb4-stamped@sha256:29fbd445f79484df04f000603e4ff445e76f0380f86d687a0033e3a0ef7d1b7a",
+          "env": "MONITOR_AGENT_IMAGE_TAG",
+          "composeService": "exe-monitor-agent",
+          "category": "monitoring",
+          "gitSha": "10660eb4abdeffbcba2aad13549aa58e208ac7a3"
+        },
+        "monitorHub": {
+          "image": "update.askexe.com/askexe/exe-monitor-hub:v2026.08.09-10660eb4-stamped@sha256:c9a9218c2713b8dffea7e1cf8c0702a614657d311a7a4e821c6a543bab29bb97",
+          "env": "MONITOR_HUB_IMAGE_TAG",
+          "composeService": "exe-monitor-hub",
+          "healthUrl": "http://127.0.0.1:8090/api/health",
+          "category": "monitoring",
+          "gitSha": "10660eb4abdeffbcba2aad13549aa58e208ac7a3"
+        },
+        "auth": {
+          "image": "update.askexe.com/askexe/exe-auth:v0.6.10@sha256:0260349962d087cd3c33fed1d362029416e82ae9cc60abca7969beac2cb8639f",
+          "env": "AUTH_IMAGE_TAG",
+          "composeService": "exe-auth",
+          "healthUrl": "http://127.0.0.1:3300/",
+          "category": "auth",
+          "description": "GoTrue SSO and privileged license authority bridge; stateless auth proxy.",
+          "gitSha": "29fe7015d90b80c94db3a1e3904852b934071711"
+        },
+        "erp": {
+          "image": "update.askexe.com/askexe/exe-erp:v0.3.17@sha256:ef61b59d94c04189fe2975045a3816d2fecc8efe3027e0ee8c17d0fa2efdbc3b",
+          "env": "ERP_IMAGE_TAG",
+          "composeService": "exe-erp",
+          "healthUrl": "http://127.0.0.1:8069/api/method/ping",
+          "healthHost": "localhost",
+          "required": false,
+          "category": "app",
+          "description": "Enterprise Resource Planning with central hosted authentication and subject-bound organization admission.",
+          "gitSha": "a769ec5e0ae53bc5944715845869715ebbffd63a"
+        },
+        "gotrue": {
+          "image": "update.askexe.com/askexe/gotrue:v2.172.1@sha256:b0dd7aa28dd1f9a8bd31f136c8b912661f701d9b863171e5843cb08f18f49de4",
+          "composeService": "gotrue",
+          "healthUrl": "http://127.0.0.1:9999/health",
+          "category": "infra"
+        },
+        "redis": {
+          "image": "update.askexe.com/askexe/redis:7.4-alpine@sha256:6ab0b6e7381779332f97b8ca76193e45b0756f38d4c0dcda72dbb3c32061ab99",
+          "composeService": "redis",
+          "category": "infra"
+        },
+        "clickhouse": {
+          "image": "update.askexe.com/askexe/clickhouse-server:24.8.4.13-alpine@sha256:88a45f9e328549b2579256c46ee38e5c0e25ae58303d9eb6d9c7ed8d6d2bbf3c",
+          "composeService": "clickhouse",
+          "category": "infra"
+        },
+        "cloudflared": {
+          "image": "update.askexe.com/askexe/cloudflared:2026-07@sha256:ba461b8aa9c042156dbd39c38657fe7431bafa063220eab8d5330a523863da9f",
+          "composeService": "cloudflared",
+          "category": "infra"
+        },
+        "exe-sso-edge": {
+          "image": "update.askexe.com/askexe/nginx:alpine@sha256:20316569d8f81a160065d7d2a5eeffc7ca97d79022462ee255fd23fa103a6b5c",
+          "composeService": "exe-sso-edge",
+          "category": "infra"
+        },
+        "exe-otel-collector": {
+          "image": "update.askexe.com/askexe/otel-collector-contrib:0.114.0@sha256:37fa87091cfaaec7234a27e4e395a40c31c2bfaea97a349a4afef6d9e9681197",
+          "composeService": "exe-otel-collector",
+          "category": "infra"
+        },
+        "dashboard": {
+          "image": "update.askexe.com/askexe/exe-dashboard:v0.9.392@sha256:d151441554c00e216084bd1caf2278e8c41fde188c039e0f167e158a511cbeec",
+          "env": "DASHBOARD_IMAGE_TAG",
+          "composeService": "exe-dashboard",
+          "healthUrl": "http://127.0.0.1:3301/health",
+          "required": false,
+          "category": "optional",
+          "description": "Customer dashboard at dashboard.<apex> — credits, usage, API keys, billing",
+          "gitSha": "e11b25ad567389440da8ed5e566a9c59bce24123"
+        }
+      },
+      "rolloutStage": "canary",
+      "config": {
+        "composeSha256": "220b251375f372107e8d8d54a9c3e4ceab1f57aae80f4babf2933c3887532263",
+        "composeOverrideSha256": "af295ca2f75b85788416e4df51cab86d8b773bf4cafe6cf6df9c7c26b9a42d6d"
+      }
     }
   },
   "signature": {
     "keyId": "exe-stack-1",
     "alg": "ed25519",
-    "signature": "BTPhDNOLpsQWb4XWYhc4B76lw+lAa0+t6RP1wC9B5D/9NNvkFcRTPrrf56YxL2bjBgx1IMWaBi4eM5Fbv2WEDA=="
+    "signature": "BzagaF3bjQJTC1cb8BGO3Kbyaau5umjKte4JGMoQ6OFQERlhuWoPZBB1Can27+uC9adabwMAjnC1jFRBFo6oAQ=="
   }
 }

package/dist/.dist-verified.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "verified_at": "2026-09-24T03:22:35.670Z",
-  "manifest_sha256": "882003bc67319c95ef5176b5ca31cc4cb8893171183ad87044b555d99cbbfb1e",
-  "package_version": "0.9.396"
+  "verified_at": "2026-09-24T11:52:34.443Z",
+  "manifest_sha256": "7b8c54c8ce8e0172d6d6311bc731e12b4772e56462e20a073bc8425913ca7274",
+  "package_version": "0.9.398"
 }

package/dist/{active-agent-7OKWCTDR.js → active-agent-5DC75ZP3.js}

@@ -7,17 +7,17 @@ import {
   resolveAgentAttribution,
   resolveAgentForPayload,
   writeActiveAgent
-} from "./chunk-RPOIKNJZ.js";
+} from "./chunk-LGP67CBT.js";
 import "./chunk-NRLJOV7M.js";
 import "./chunk-CVYC6DUW.js";
 import "./chunk-GJV3WDWM.js";
-import "./chunk-DXQIIZQC.js";
+import "./chunk-UYU25KCR.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-TKDITWDN.js";
-import "./chunk-EHDAWQ5P.js";
+import "./chunk-2CGKFJ3Q.js";
+import "./chunk-L5TOPOTW.js";
 import "./chunk-7FE43JRU.js";
 import "./chunk-5YEUPUV4.js";
-import "./chunk-BKKZN3DJ.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-WAAGVFFN.js";
 import "./chunk-QH5ZQ5SJ.js";

package/dist/{active-agent-6CIFLMKA.js → active-agent-Q7AOGCY5.js}

@@ -8,17 +8,17 @@ import {
   resolveAgentAttribution,
   resolveAgentForPayload,
   writeActiveAgent
-} from "./chunk-RPOIKNJZ.js";
+} from "./chunk-LGP67CBT.js";
 import "./chunk-NRLJOV7M.js";
 import "./chunk-CVYC6DUW.js";
 import "./chunk-GJV3WDWM.js";
-import "./chunk-DXQIIZQC.js";
+import "./chunk-UYU25KCR.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-TKDITWDN.js";
-import "./chunk-EHDAWQ5P.js";
+import "./chunk-2CGKFJ3Q.js";
+import "./chunk-L5TOPOTW.js";
 import "./chunk-7FE43JRU.js";
 import "./chunk-5YEUPUV4.js";
-import "./chunk-BKKZN3DJ.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-WAAGVFFN.js";
 import "./chunk-QH5ZQ5SJ.js";

package/dist/{agent-defs-generator-PZJGE6PL.js → agent-defs-generator-TBR4P3XR.js}

@@ -5,13 +5,13 @@ import "./chunk-AM7S2TY6.js";
 import {
   loadEmployeesSync,
   validateEmployeeName
-} from "./chunk-DXQIIZQC.js";
+} from "./chunk-UYU25KCR.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-TKDITWDN.js";
-import "./chunk-EHDAWQ5P.js";
+import "./chunk-2CGKFJ3Q.js";
+import "./chunk-L5TOPOTW.js";
 import "./chunk-7FE43JRU.js";
 import "./chunk-5YEUPUV4.js";
-import "./chunk-BKKZN3DJ.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-WAAGVFFN.js";
 import "./chunk-QH5ZQ5SJ.js";

package/dist/{agentic-ontology-JTPDKIML.js → agentic-ontology-UFSQDLCW.js}

@@ -10,7 +10,7 @@ import {
   insertOntologyForMemory,
   ontologyPayload,
   stableId
-} from "./chunk-KY5XPFMA.js";
+} from "./chunk-OJG6S5OI.js";
 import "./chunk-MLKGABMK.js";
 export {
   ONTOLOGY_YIELD_EVERY,

package/dist/{artifact-backup-Q7T3GQFO.js → artifact-backup-VWQ6EYNO.js}

@@ -7,10 +7,10 @@ import {
 import {
   artifactObjectId,
   encryptSyncBlob
-} from "./chunk-G3KSUXEA.js";
+} from "./chunk-B4OZKTIS.js";
 import "./chunk-2MUKF6YI.js";
-import "./chunk-I4DBM5ME.js";
-import "./chunk-5AGOX2XD.js";
+import "./chunk-NQG5CD3V.js";
+import "./chunk-ZFJ2KQNY.js";
 import {
   EXE_AI_DIR,
   loadConfigSync

package/dist/{backfill-metadata-7QLL3FSG.js → backfill-metadata-BVW4KXY3.js}

@@ -2,11 +2,11 @@
 import {
   disposeStore,
   initStore
-} from "./chunk-V4JWFJZR.js";
-import "./chunk-I3F7MGSI.js";
+} from "./chunk-B7T7I5BK.js";
+import "./chunk-JCV4UPMD.js";
 import "./chunk-CHCA3ZM2.js";
 import "./chunk-OTVEIJUQ.js";
-import "./chunk-MQNHXT54.js";
+import "./chunk-J6UCIUPI.js";
 import "./chunk-5MOYSU5A.js";
 import "./chunk-T4IDLAZM.js";
 import "./chunk-76CJBM36.js";
@@ -15,19 +15,19 @@ import {
   getClient,
   getEmployeeNamesByRole,
   loadEmployeesSync
-} from "./chunk-DXQIIZQC.js";
+} from "./chunk-UYU25KCR.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-TKDITWDN.js";
-import "./chunk-EHDAWQ5P.js";
+import "./chunk-2CGKFJ3Q.js";
+import "./chunk-L5TOPOTW.js";
 import "./chunk-7FE43JRU.js";
 import "./chunk-5YEUPUV4.js";
-import "./chunk-BKKZN3DJ.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-WAAGVFFN.js";
 import "./chunk-QH5ZQ5SJ.js";
 import "./chunk-ZQEJ4IX2.js";
 import "./chunk-C7GHNJPW.js";
-import "./chunk-5AGOX2XD.js";
+import "./chunk-ZFJ2KQNY.js";
 import "./chunk-MMS2HBRT.js";
 import "./chunk-RH4AH3YB.js";
 import {

package/dist/{background-jobs-V3DZRFKU.js → background-jobs-DXZXRPSE.js}

@@ -1,4 +1,6 @@
 import {
+  __setJobsFileReaderForTests,
+  __triggerHeartbeatForTests,
   acquireJobLock,
   cancelBackgroundJob,
   enforceBackgroundJobGuardrails,
@@ -9,13 +11,15 @@ import {
   releaseJobLock,
   reniceCurrentProcess,
   startManagedJob
-} from "./chunk-2NW4LRDU.js";
+} from "./chunk-QIMM3CSI.js";
 import "./chunk-MMS2HBRT.js";
 import "./chunk-RH4AH3YB.js";
 import "./chunk-HSGBZSCA.js";
 import "./chunk-JKKZGDLP.js";
 import "./chunk-MLKGABMK.js";
 export {
+  __setJobsFileReaderForTests,
+  __triggerHeartbeatForTests,
   acquireJobLock,
   cancelBackgroundJob,
   enforceBackgroundJobGuardrails,

package/dist/{backup-verify-SCFVPBZH.js → backup-verify-6UIMP3QY.js}

@@ -1,10 +1,10 @@
-import {
-  recordDbOpen
-} from "./chunk-5YEUPUV4.js";
 import {
   getLatestBackup,
   reasonFromBackupName
-} from "./chunk-BKKZN3DJ.js";
+} from "./chunk-2CGKFJ3Q.js";
+import {
+  recordDbOpen
+} from "./chunk-5YEUPUV4.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-MMS2HBRT.js";
 import "./chunk-RH4AH3YB.js";
@@ -373,7 +373,7 @@ async function recordVerdict(res, absolutePath) {
     }
   }
   try {
-    const { recordDbRestoreEvent } = await import("./db-restore-events-XYL6CGPC.js");
+    const { recordDbRestoreEvent } = await import("./db-restore-events-R5S7XTHX.js");
     if (res.ok) {
       recordDbRestoreEvent({
         kind: "restore-verify-pass",

package/dist/{behavior-injection-CHSQWES4.js → behavior-injection-MVL5PXIH.js}

@@ -19,19 +19,19 @@ import {
   selectInjectedBehaviors,
   selectRelevantBehaviors,
   selectRelevantBehaviorsWithReasons
-} from "./chunk-DXIMITSY.js";
-import "./chunk-LNCTMU7Y.js";
+} from "./chunk-NJG3YVZI.js";
+import "./chunk-Q7YT7RGZ.js";
 import "./chunk-W5BFPFVY.js";
 import "./chunk-QGGH7LOU.js";
-import "./chunk-V4JWFJZR.js";
-import "./chunk-I3F7MGSI.js";
+import "./chunk-B7T7I5BK.js";
+import "./chunk-JCV4UPMD.js";
 import "./chunk-CHCA3ZM2.js";
 import "./chunk-OTVEIJUQ.js";
-import "./chunk-MQNHXT54.js";
+import "./chunk-J6UCIUPI.js";
 import "./chunk-5MOYSU5A.js";
 import "./chunk-T4IDLAZM.js";
 import "./chunk-76CJBM36.js";
-import "./chunk-JKUCAMV4.js";
+import "./chunk-UQDCXE5D.js";
 import "./chunk-3GEHMT7V.js";
 import "./chunk-CIPDQRFO.js";
 import "./chunk-PCV52RYM.js";
@@ -42,19 +42,19 @@ import "./chunk-3DAEZILW.js";
 import "./chunk-DRTJCG6B.js";
 import "./chunk-MP2AFCGL.js";
 import "./chunk-YRUZK2QA.js";
-import "./chunk-DXQIIZQC.js";
+import "./chunk-UYU25KCR.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-TKDITWDN.js";
-import "./chunk-EHDAWQ5P.js";
+import "./chunk-2CGKFJ3Q.js";
+import "./chunk-L5TOPOTW.js";
 import "./chunk-7FE43JRU.js";
 import "./chunk-5YEUPUV4.js";
-import "./chunk-BKKZN3DJ.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-WAAGVFFN.js";
 import "./chunk-QH5ZQ5SJ.js";
 import "./chunk-ZQEJ4IX2.js";
 import "./chunk-C7GHNJPW.js";
-import "./chunk-5AGOX2XD.js";
+import "./chunk-ZFJ2KQNY.js";
 import "./chunk-A7JYF4RG.js";
 import "./chunk-ARX6TAGN.js";
 import "./chunk-MMS2HBRT.js";