@askexenow/exe-os 0.9.398 → 0.9.399

package/dist/.dist-verified.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "verified_at": "2026-09-24T11:52:34.443Z",
-  "manifest_sha256": "7b8c54c8ce8e0172d6d6311bc731e12b4772e56462e20a073bc8425913ca7274",
-  "package_version": "0.9.398"
+  "verified_at": "2026-09-24T13:34:02.618Z",
+  "manifest_sha256": "0641c145777ca52c128a84da481fd2ead5656d1bece22ab281df880a71b31a40",
+  "package_version": "0.9.399"
 }

package/dist/bin/cli.js

@@ -798,14 +798,14 @@ ${JSON.stringify(stormAlert, null, 2)}`);
   const { runStackUpdateCli } = await import("./stack-update.js");
   await runStackUpdateCli(args.slice(1));
 } else if (args[0] === "release") {
-  const { parseReleaseArgs, runStackRelease } = await import("../stack-release-IPOLLLJH.js");
+  const { parseReleaseArgs, runStackRelease } = await import("../stack-release-VA2YEHFL.js");
   const releaseFlags = parseReleaseArgs(args.slice(1));
   await runStackRelease(releaseFlags);
 } else if (args[0] === "stack-promote") {
-  const { runStackPromoteCli } = await import("../stack-promote-NV2ZQEVL.js");
+  const { runStackPromoteCli } = await import("../stack-promote-IULD63IF.js");
   await runStackPromoteCli(args.slice(1));
 } else if (args[0] === "stack-generate-manifest") {
-  const { runStackGenerateManifestCli } = await import("../stack-generate-manifest-NWBAQUC6.js");
+  const { runStackGenerateManifestCli } = await import("../stack-generate-manifest-ZSRLWHYI.js");
   process.exit(await runStackGenerateManifestCli(args.slice(1)));
 } else if (args[0] === "repo-truth") {
   const { runRepoTruthCli } = await import("./exe-repo-truth.js");

package/dist/bin/registry-proxy.js

@@ -2,7 +2,7 @@
 import {
   registryProxyOptionsFromEnv,
   runRegistryProxy
-} from "../chunk-XQH5BKEC.js";
+} from "../chunk-HMC5FHIJ.js";
 import {
   isMainModule
 } from "../chunk-6Y4B3QF6.js";

package/dist/bin/stack-update.js

@@ -47,7 +47,7 @@ import {
   verifyManifestImagesAvailable,
   warnUnmanagedManifestServices,
   withStackUpdateOperationLock
-} from "../chunk-WHQADJV7.js";
+} from "../chunk-D2L47SAE.js";
 import "../chunk-EC5H53YD.js";
 import {
   runVerifyStack
@@ -63,7 +63,7 @@ import {
 import {
   logResult,
   runHealthGate
-} from "../chunk-UPGKO5UD.js";
+} from "../chunk-U2L6NZ2E.js";
 import "../chunk-L25OAFOU.js";
 import "../chunk-RT57D7C4.js";
 import "../chunk-FTZET5YX.js";

package/dist/bin/vps-health-gate.js

@@ -8,7 +8,7 @@ import {
   logResult,
   main,
   runHealthGate
-} from "../chunk-UPGKO5UD.js";
+} from "../chunk-U2L6NZ2E.js";
 import "../chunk-MLKGABMK.js";
 export {
   checkCRM,

package/dist/build-manifest.json

@@ -1,6 +1,6 @@
 {
   "version": 2,
-  "generated_at": "2026-09-24T11:52:34.381Z",
+  "generated_at": "2026-09-24T13:34:02.549Z",
   "files": [
     {
       "path": "active-agent-5DC75ZP3.js",
@@ -179,7 +179,7 @@
     },
     {
       "path": "bin/cli.js",
-      "sha256": "b77dc63e36653abf9a02ea0ea4022b64cc65b129a283ce43c074c4df145b2628",
+      "sha256": "126dc845c65374fe949027c51dafc318d3aef3f46b9add8be441eb2bd28afa29",
       "bytes": 69826
     },
     {
@@ -524,7 +524,7 @@
     },
     {
       "path": "bin/registry-proxy.js",
-      "sha256": "1e2fe55179d669fde86a7c9e96b56a4eef7545b77a53dcf94ad1d02dd3a46970",
+      "sha256": "ef7f87a4159c34e04eb402448fe00acf341988c84d9a0acc91447d9a3b80f297",
       "bytes": 1885
     },
     {
@@ -549,7 +549,7 @@
     },
     {
       "path": "bin/stack-update.js",
-      "sha256": "1cfee44bb87f820cacf84d0498124785e492dd8fccf44d0e4dd474bc84accf54",
+      "sha256": "210be160ba3bce18fdbce55661bab94e24cfc8b8d7beca65318b4bbdbe104f4c",
       "bytes": 131487
     },
     {
@@ -569,7 +569,7 @@
     },
     {
       "path": "bin/vps-health-gate.js",
-      "sha256": "c58daf835e7bc741c64f1d7bf1f0a84c2de09c86ec67a083d9c7eeb5b1a5a39c",
+      "sha256": "76697c844cf1215d82a207802cfcd91e0bc83d24a2cd4e4ec9eba76724eef108",
       "bytes": 333
     },
     {
@@ -1007,11 +1007,6 @@
       "sha256": "0429e46b5f42871f6a94700f559468dd5775c0bb204d5c720f6bc15ca4cc924b",
       "bytes": 176
     },
-    {
-      "path": "chunk-CBLI4ANF.js",
-      "sha256": "361fca0086b36b4945f23793f1138b8a09d18c18bd8d478d922fafd09b2a207e",
-      "bytes": 3766
-    },
     {
       "path": "chunk-CBPNZFSU.js",
       "sha256": "cbd3cf6d4db00f17cd9c7dc4419ab837738d3e22dfa1554201f33ce6ccf9936d",
@@ -1072,6 +1067,11 @@
       "sha256": "29a6acbbaa627ae4d7852dd16a33f341809f3d82940b40c67c35d39d99fdf2c4",
       "bytes": 1090
     },
+    {
+      "path": "chunk-D2L47SAE.js",
+      "sha256": "0430ed5601d2d38ec8b25824516e53625dc4d21b0835c294bb1753ca3ebe534d",
+      "bytes": 264545
+    },
     {
       "path": "chunk-DKD6JKIQ.js",
       "sha256": "e344368afae46f4f8059618d353fa907cbf3e1d72133d1d325b40e476192d057",
@@ -1242,6 +1242,11 @@
       "sha256": "0e8678ecd10db44714ef9a25fcab116b0cb3f86b6de9e384ac5bf2effb0dc3c0",
       "bytes": 2405
     },
+    {
+      "path": "chunk-HMC5FHIJ.js",
+      "sha256": "ac7f86432e2314d38e58dd96113855765114ef007ba97d7beb5643ed9e024b45",
+      "bytes": 44776
+    },
     {
       "path": "chunk-HME6ITKV.js",
       "sha256": "d820c2d874d6841b5c9c1186ba98c24aa25d559b9be05a29ae2373e7f70e7960",
@@ -1837,6 +1842,11 @@
       "sha256": "e8225781fb28b322cb141fa15ddd198ab2b7c507a662764722cf3b65f2201c8f",
       "bytes": 34017
     },
+    {
+      "path": "chunk-U2L6NZ2E.js",
+      "sha256": "14a60b6adfac48dd28c173fada3e2297b093a422c3a40cd642e68ffc6530ee93",
+      "bytes": 7587
+    },
     {
       "path": "chunk-UAPWTGRP.js",
       "sha256": "21f3d1f0da3b0d7030edcc3ed1341223fc24f0df14b683c9c23e7d374484726d",
@@ -1877,11 +1887,6 @@
       "sha256": "d3cadd12eb766d34de74356f826811799682297bf5312bebe86aa91064ffa73e",
       "bytes": 7304
     },
-    {
-      "path": "chunk-UPGKO5UD.js",
-      "sha256": "f61c6df45d6b59d3b9c2490fe0b632b56d8aec3448590796716785b193a787d9",
-      "bytes": 7587
-    },
     {
       "path": "chunk-UQDCXE5D.js",
       "sha256": "74fe9e9ec90657d5c47300b1b42f249b0e5742eaaab48c8446d1b4d602b5c609",
@@ -1917,6 +1922,11 @@
       "sha256": "788270b6657fdd208ecb5fa9cb6b5156e1ae86295058f976edb144ecedcb88fb",
       "bytes": 7321
     },
+    {
+      "path": "chunk-VFFQHEMC.js",
+      "sha256": "99a17a341cc3d2ce64c9d1cbe321d5d73491aaeed2469cc4a6fdf29863eada73",
+      "bytes": 3766
+    },
     {
       "path": "chunk-VFVF3FHG.js",
       "sha256": "52b2cd3712889eccc11d34dfa4bab3ac38a1e6985c1982d0975456c58c89cba6",
@@ -1982,11 +1992,6 @@
       "sha256": "4a905397d309c73ed4ad5d1ec488309541be3eec2fc6021d275f433ca92cc7a9",
       "bytes": 2265
     },
-    {
-      "path": "chunk-WHQADJV7.js",
-      "sha256": "446ba9ab30ceea004e1a3dad1b636c5aed85d4973f7dc380b38fb6708e159b4a",
-      "bytes": 261909
-    },
     {
       "path": "chunk-WT4RI36X.js",
       "sha256": "7ce4fd5dee79504398f6549a7fadeceafaadaea2cd94ef9bcc310280306147c6",
@@ -2022,11 +2027,6 @@
       "sha256": "6fc117949d9d045871820e93e789e377a928ac69b031ecb40fd000516567a795",
       "bytes": 1571
     },
-    {
-      "path": "chunk-XQH5BKEC.js",
-      "sha256": "5bea4844691d58c9f52bec5f4ca86fdc53107ef09890b07042fccb598aa82fee",
-      "bytes": 44776
-    },
     {
       "path": "chunk-YQ7V5UGG.js",
       "sha256": "5bfdc4401ae0a9ed15c7124861214dba3ba3be58cca81ffab4dc167c3043d2e5",
@@ -2579,7 +2579,7 @@
     },
     {
       "path": "hooks/manifest.json",
-      "sha256": "27f7225ea6049da0da758b157422fa47933a321ff9b512d9088ec0d30ed00c1a",
+      "sha256": "0ad3b5ab94638e0110791448a12e4b6079e248d99976ba200ee1d148340c873c",
       "bytes": 1841
     },
     {
@@ -2884,7 +2884,7 @@
     },
     {
       "path": "lib/registry-proxy.js",
-      "sha256": "e1ca2eb0676da6e017f7e083753c11e252dbe4ae4d2dbede506a5ddf04dd1976",
+      "sha256": "180512d6cb7cfa3b7c3e512ac755c038f7f245a291aa1f26b4e8186a69ed46fc",
       "bytes": 749
     },
     {
@@ -3473,8 +3473,8 @@
       "bytes": 111
     },
     {
-      "path": "stack-generate-manifest-NWBAQUC6.js",
-      "sha256": "6947112c61d95363a5d30ad44dbc0234dd157836875da1454f7d898c906cdd8b",
+      "path": "stack-generate-manifest-ZSRLWHYI.js",
+      "sha256": "d0046b964d66f6f434db5160cb6ed39fefea401a3f2b09212f3974fcc7cd4ba8",
       "bytes": 56960
     },
     {
@@ -3483,19 +3483,19 @@
       "bytes": 4761
     },
     {
-      "path": "stack-promote-NV2ZQEVL.js",
-      "sha256": "40e091a1ab242432060b6c1d8e9f048d3d197522b0d936d8a87a496a4b943c31",
+      "path": "stack-promote-IULD63IF.js",
+      "sha256": "e0af957eac14bf04f434d67693e15381ddc83eb89e1a6a1fa38dac3b4558a731",
       "bytes": 7425
     },
     {
-      "path": "stack-release-IPOLLLJH.js",
-      "sha256": "ca088b7d663ca543a10a38455d8de41c193b624c2027136f7d05aac99447989d",
+      "path": "stack-release-VA2YEHFL.js",
+      "sha256": "b5a2c2b004bbe71ee5b56ba6a00229a6e19e15d1809fc109ab604107ab63137a",
       "bytes": 117404
     },
     {
-      "path": "stack-update-5LT2U7IP.js",
-      "sha256": "9c823b5e0204438e868a7123bdbc69988e0fdb58f14de742007f727884b2cf75",
-      "bytes": 7863
+      "path": "stack-update-KDUPWDNR.js",
+      "sha256": "5e419b8e379e7bd15e8d8b4e1ef4dce328c8a8d3e45e9276519584dc120cba9a",
+      "bytes": 7921
     },
     {
       "path": "stalled-dispatch-escalation-MHLYH2PT.js",

package/dist/{chunk-WHQADJV7.js → chunk-D2L47SAE.js}

@@ -276,6 +276,40 @@ function assessRetainedHealthAfter(before, after) {
   }
   return [...new Set(failures)];
 }
+async function settleRetainedCrmEdgeHealth(before, initial, capture, pause = (milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds)), now = () => performance.now()) {
+  const edge = "exe-sso-edge";
+  const prior = before.containers.get(edge);
+  let current = initial;
+  const maySettle = (snapshot) => {
+    const observed = snapshot.get(edge);
+    const regressions = assessRetainedHealthAfter(before, snapshot);
+    return !before.critical.has(edge) && !!prior?.id && prior.health === "healthy" && retainedContainerIsHealthy(prior) && observed?.id === prior.id && observed.state === "running" && observed.health === "unhealthy" && (prior.restartCount === null || observed.restartCount === prior.restartCount) && regressions.length === 1 && regressions[0] === edge;
+  };
+  if (!maySettle(current)) return current;
+  if (!prior) return current;
+  const deadline = now() + 12e4;
+  while (now() < deadline) {
+    await pause(Math.min(5e3, deadline - now()));
+    const remainingMs = deadline - now();
+    if (remainingMs <= 0) return current;
+    current = capture(remainingMs);
+    const observed = current.get(edge);
+    if (observed && observed.id !== prior.id)
+      throw new Error("--retain-compose SSO edge identity changed during CRM health recovery");
+    if (observed && prior.restartCount !== null && observed.restartCount !== prior.restartCount) throw new Error("--retain-compose SSO edge restarted during CRM health recovery");
+    if (observed && observed.health !== "healthy" && observed.health !== "unhealthy")
+      throw new Error("--retain-compose SSO edge health unobservable during CRM recovery");
+    if (now() >= deadline)
+      throw new Error("--retain-compose SSO edge health recovery timed out");
+    const regressions = assessRetainedHealthAfter(before, current);
+    if (regressions.length === 0) {
+      const recovered = current.get(edge);
+      if (recovered && recovered.id === prior.id && recovered.state === "running" && recovered.health === "healthy" && (prior.restartCount === null || recovered.restartCount === prior.restartCount)) return current;
+    }
+    if (!maySettle(current)) return current;
+  }
+  return current;
+}
 
 // src/lib/stack-lock-derive.ts
 import { spawnSync } from "child_process";
@@ -4608,9 +4642,11 @@ Push the missing image(s) to the registry, or re-run with --break-glass <reason>
       }
     }
     if (retainedHealthBaseline) {
-      const after = parseRetainedContainerHealth(
-        (options.composePsCapture ?? defaultComposePsCapture)(composeArgs)
+      const capture = (timeoutMs) => parseRetainedContainerHealth(
+        (options.composePsCapture ?? defaultComposePsCapture)(composeArgs, timeoutMs)
       );
+      const initial = capture();
+      const after = Object.keys(plan.release.services).length === 1 && Object.hasOwn(plan.release.services, "crm") ? await settleRetainedCrmEdgeHealth(retainedHealthBaseline, initial, capture) : initial;
       const regressions = assessRetainedHealthAfter(retainedHealthBaseline, after);
       if (regressions.length > 0) {
         throw new Error(`--retain-compose health regression after update: ${regressions.join(", ")}`);
@@ -5014,13 +5050,16 @@ async function verifyReleaseHealth(release, retries, delayMs, env, skipServices)
     await waitForHttpOk(service.healthUrl, retries, delayMs, serviceName, hostHeader);
   }
 }
-var defaultComposePsCapture = (composeArgs) => {
+function boundedComposePsTimeoutMs(timeoutMs) {
+  return Math.max(1, Math.floor(Math.min(2e4, timeoutMs ?? 2e4)));
+}
+var defaultComposePsCapture = (composeArgs, timeoutMs) => {
   let result;
   try {
     result = spawnSync2("docker", [...composeArgs, "ps", "--all", "--format", "json"], {
       encoding: "utf8",
       stdio: ["pipe", "pipe", "pipe"],
-      timeout: 2e4
+      timeout: boundedComposePsTimeoutMs(timeoutMs)
     });
   } catch {
     return null;
@@ -5795,6 +5834,7 @@ export {
   expandEnvRefs,
   resolveHealthHost,
   verifyReleaseHealth,
+  boundedComposePsTimeoutMs,
   listHostComposeServices,
   composePsYieldsRecords,
   assertRetainedComposeRunningService,

package/dist/{chunk-XQH5BKEC.js → chunk-HMC5FHIJ.js}

@@ -140,7 +140,7 @@ async function assertManifestSignature(manifest, publicKeyPem) {
       "manifest carries no `signature`. Fleets that enforce EXE_STACK_PUBLIC_KEY reject unsigned manifests, so publishing one would ship a release no host can install. Re-sign with the custodied key: node scripts/sign-stack-manifest.mjs deploy/stack-manifests/v0.9.json"
     );
   }
-  const { verifyStackManifestSignature } = await import("./stack-update-5LT2U7IP.js");
+  const { verifyStackManifestSignature } = await import("./stack-update-KDUPWDNR.js");
   try {
     verifyStackManifestSignature(manifest, publicKeyPem);
   } catch (err) {

package/dist/{chunk-UPGKO5UD.js → chunk-U2L6NZ2E.js}

@@ -212,7 +212,7 @@ async function main(args) {
   console.log("[health-gate] Starting rollback...");
   restorePreDeployBackup();
   try {
-    const { rollbackStackUpdate, defaultStackPaths } = await import("./stack-update-5LT2U7IP.js");
+    const { rollbackStackUpdate, defaultStackPaths } = await import("./stack-update-KDUPWDNR.js");
     const paths = defaultStackPaths();
     await rollbackStackUpdate({
       manifestRef: paths.manifestRef,

package/dist/{chunk-CBLI4ANF.js → chunk-VFFQHEMC.js}

@@ -1,6 +1,6 @@
 import {
   canonicalizeStackManifest
-} from "./chunk-WHQADJV7.js";
+} from "./chunk-D2L47SAE.js";
 
 // src/lib/stack-manifest-write.ts
 import { readFileSync, statSync, writeFileSync } from "fs";

package/dist/hooks/manifest.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "generatedAt": "2026-09-24T11:52:34.134Z",
+  "generatedAt": "2026-09-24T13:34:02.355Z",
   "hashes": {
     "bug-report-worker.js": "b9c58e3473028283cd80aa42f2aa845e39914a111b66c1fc268dc5f55d2a48de",
     "codex-stop-task-finalizer.js": "b7635164b675dd291f945373e7d59b112efdfd5bdeecd59f3126b2a797b9ed0c",

package/dist/lib/registry-proxy.js

@@ -11,7 +11,7 @@ import {
   resolveRegistryProxyBuildIdentity,
   resolveStackManifestChannel,
   runRegistryProxy
-} from "../chunk-XQH5BKEC.js";
+} from "../chunk-HMC5FHIJ.js";
 import "../chunk-MLKGABMK.js";
 export {
   SERVED_VERSION_PATH,

package/dist/{stack-generate-manifest-NWBAQUC6.js → stack-generate-manifest-ZSRLWHYI.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   writeSignedStackManifest
-} from "./chunk-CBLI4ANF.js";
-import "./chunk-WHQADJV7.js";
+} from "./chunk-VFFQHEMC.js";
+import "./chunk-D2L47SAE.js";
 import "./chunk-EC5H53YD.js";
 import "./chunk-YYRI2AGK.js";
 import "./chunk-L25OAFOU.js";

package/dist/{stack-promote-NV2ZQEVL.js → stack-promote-IULD63IF.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   writeSignedStackManifest
-} from "./chunk-CBLI4ANF.js";
-import "./chunk-WHQADJV7.js";
+} from "./chunk-VFFQHEMC.js";
+import "./chunk-D2L47SAE.js";
 import "./chunk-EC5H53YD.js";
 import "./chunk-YYRI2AGK.js";
 import "./chunk-L25OAFOU.js";

package/dist/{stack-release-IPOLLLJH.js → stack-release-VA2YEHFL.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   writeSignedStackManifest
-} from "./chunk-CBLI4ANF.js";
-import "./chunk-WHQADJV7.js";
+} from "./chunk-VFFQHEMC.js";
+import "./chunk-D2L47SAE.js";
 import "./chunk-EC5H53YD.js";
 import {
   assertPreflightGate,
@@ -2028,7 +2028,7 @@ async function warmProxyCache(imageRef) {
 async function resolveImageGitShaLabel(ref, dryRun) {
   if (!ref || dryRun) return void 0;
   try {
-    const { readProvenanceLabels } = await import("./stack-generate-manifest-NWBAQUC6.js");
+    const { readProvenanceLabels } = await import("./stack-generate-manifest-ZSRLWHYI.js");
     const labels = await readProvenanceLabels(ref);
     return labels["org.exe.git_sha"] ?? labels["org.opencontainers.image.revision"];
   } catch (err) {

package/dist/{stack-update-5LT2U7IP.js → stack-update-KDUPWDNR.js}

@@ -25,6 +25,7 @@ import {
   assertSignedManifestDeliveryGate,
   backupStackConfig,
   bootstrapStackHost,
+  boundedComposePsTimeoutMs,
   buildDefaultServiceSelection,
   buildMigrationComposeArgs,
   buildReleaseMigrationArgs,
@@ -132,7 +133,7 @@ import {
   waitForHttpOk,
   warnUnmanagedManifestServices,
   withStackUpdateOperationLock
-} from "./chunk-WHQADJV7.js";
+} from "./chunk-D2L47SAE.js";
 import "./chunk-EC5H53YD.js";
 import "./chunk-YYRI2AGK.js";
 import "./chunk-L25OAFOU.js";
@@ -172,6 +173,7 @@ export {
   assertSignedManifestDeliveryGate,
   backupStackConfig,
   bootstrapStackHost,
+  boundedComposePsTimeoutMs,
   buildDefaultServiceSelection,
   buildMigrationComposeArgs,
   buildReleaseMigrationArgs,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.398",
+  "version": "0.9.399",
   "description": "AI employee operating system \u2014 persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",

package/release-notes.json

@@ -1,44 +1,20 @@
 {
-  "current": "0.9.398",
+  "current": "0.9.399",
   "notes": {
-    "0.9.398": {
-      "version": "0.9.398",
+    "0.9.399": {
+      "version": "0.9.399",
       "date": "2026-09-24",
-      "features": [
-        "detect drift in hand-duplicated cross-repo workflows (bug 0efe96d7) (#1377)",
-        "cut the stack release automatically on drift (founder decision) (#1253)"
-      ],
+      "features": [],
       "fixes": [
-        "unlimited_employees gate contradicted a seat-holder's own employeeLimit (cbe83433) (#1525)",
-        "fail loud on a broken bash oracle instead of passing vacuously (bug e9b8c3d5) (#1536)",
-        "stop ledger-tamper guard from false-blocking read-only shells (#1529)",
-        "capture close-guard evidence at fix-time, reuse it at close (#1267)",
-        "mock-shape guard now detects a mock missing an export (bug 7342f6e1) (#1218)",
-        "an unreadable event ledger is not an empty history (bug d11c5049) (#1327)",
-        "seat confers the org's full plan on every axis, employees included (#1528)",
-        "an unreadable history is not an empty history (bug d11c5049, D15) (#1316)",
-        "an unreadable checkpoint is not an absent one (bug d11c5049, F1) (#1312)",
-        "fail closed and say why when the guard cannot run (bug d11c5049) (#1288)",
-        "assert parity with real commitPatchId/commitEffectHash in the 256-byte sweep (bug 6b66bd54) (#1532)",
-        "a jobs.json that could not be read is not an empty registry (bug d11c5049) (#1296)",
-        "a state file that could not be read is not an empty one (bug d11c5049) (#1293)",
-        "stop taking three different answers from one 30-day token (bugs f855bcbe, 0aef30da, 14a57810, cbe83433) (#1276)",
-        "batch the 256-byte patch-id sweep into ~7 subprocesses (bug 6b66bd54) (#1531)",
-        "a failed read is not an ABSORBED verdict (bug d11c5049, D25) (#1310)",
-        "only a read that SUCCEEDED may authorize a delete (bug d11c5049) (#1289)",
-        "contain service switcher on mobile",
-        "close double-side fail-open holes in the mock-effect walker (63e8dfeb, e929d83f) (#1498)",
-        "merge detectors ask GitHub, not git ancestry (bug b83f8742) (#1495)"
+        "settle CRM-backed SSO edge health after retained update (#1544)",
+        "give each release-workspace repo its own git identity (#1541)",
+        "prune buildx docker-container builder cache, not just the default (bug 0172398e) (#1540)",
+        "--write-baseline refuses on an incomplete export-coverage scan (#1539)"
       ],
       "security": [],
       "other": [
-        "release: v0.9.398 (#1538)",
-        "release(stack): sign CRM 0.9.68 recovery canary 0.9.58 (#1537)",
-        "release(stack): sign proxy verification recovery 0.9.57 (#1535)",
-        "add fixed-source npm-only 0.9.397 publisher (#1534)",
-        "Scope retained stack verification to delivered containers (#1533)",
-        "sync mobile switcher to team page",
-        "release: sign stack 0.9.56 proxy recovery canary"
+        "release: bump updater npm metadata to 0.9.399 (#1545)",
+        "ci-disk-reclaim install is two files, not one (#1543)"
       ],
       "migration_notes": []
     },

package/stack.release.json

@@ -4,8 +4,8 @@
   "repo": "AskExe/exe-os",
   "service": "exe-os",
   "packageName": "@askexenow/exe-os",
-  "version": "0.9.398",
-  "image": "ghcr.io/askexe/exe-os:v0.9.398",
+  "version": "0.9.399",
+  "image": "ghcr.io/askexe/exe-os:v0.9.399",
   "imageEnv": "EXE_OS_IMAGE_TAG",
   "imageDigestTodo": "The top-level image names the forthcoming exe-os build and receives its digest after publication. Independently released components, including dashboard, retain verified digest pins; stack publication validates every service pin.",
   "components": {
@@ -110,5 +110,5 @@
   },
   "deploymentScope": "customer",
   "highGhostStack": "0.9.9",
-  "sourceVersion": "0.9.398"
+  "sourceVersion": "0.9.399"
 }