@askexenow/exe-os 0.9.401 → 0.9.402

package/dist/.dist-verified.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "verified_at": "2026-09-26T17:08:07.828Z",
-  "manifest_sha256": "9cd5ff24de18ca7cf34761f3e394ddd5ac1fe1aed24d9e2422e5c1344d7218a5",
-  "package_version": "0.9.401"
+  "verified_at": "2026-09-26T18:51:05.769Z",
+  "manifest_sha256": "8453d29aa87d378ca6644b157e4989f87e332b2c6801893aba9385ae4da324b6",
+  "package_version": "0.9.402"
 }

package/dist/bin/cli.js

@@ -798,14 +798,14 @@ ${JSON.stringify(stormAlert, null, 2)}`);
   const { runStackUpdateCli } = await import("./stack-update.js");
   await runStackUpdateCli(args.slice(1));
 } else if (args[0] === "release") {
-  const { parseReleaseArgs, runStackRelease } = await import("../stack-release-2Q2IYM4M.js");
+  const { parseReleaseArgs, runStackRelease } = await import("../stack-release-TWEFH7RF.js");
   const releaseFlags = parseReleaseArgs(args.slice(1));
   await runStackRelease(releaseFlags);
 } else if (args[0] === "stack-promote") {
-  const { runStackPromoteCli } = await import("../stack-promote-IYD6GDSW.js");
+  const { runStackPromoteCli } = await import("../stack-promote-43W7XU5A.js");
   await runStackPromoteCli(args.slice(1));
 } else if (args[0] === "stack-generate-manifest") {
-  const { runStackGenerateManifestCli } = await import("../stack-generate-manifest-TMLO7F3U.js");
+  const { runStackGenerateManifestCli } = await import("../stack-generate-manifest-53OIWKJJ.js");
   process.exit(await runStackGenerateManifestCli(args.slice(1)));
 } else if (args[0] === "repo-truth") {
   const { runRepoTruthCli } = await import("./exe-repo-truth.js");

package/dist/bin/registry-proxy.js

@@ -2,7 +2,7 @@
 import {
   registryProxyOptionsFromEnv,
   runRegistryProxy
-} from "../chunk-KWULIKOX.js";
+} from "../chunk-FL2QIDNZ.js";
 import {
   isMainModule
 } from "../chunk-6Y4B3QF6.js";

package/dist/bin/stack-update.js

@@ -50,7 +50,7 @@ import {
   verifyManifestImagesAvailable,
   warnUnmanagedManifestServices,
   withStackUpdateOperationLock
-} from "../chunk-LPQOPT5B.js";
+} from "../chunk-AR2K7SUC.js";
 import "../chunk-EC5H53YD.js";
 import {
   runVerifyStack
@@ -66,7 +66,7 @@ import {
 import {
   logResult,
   runHealthGate
-} from "../chunk-IZXQFETE.js";
+} from "../chunk-4FAJBCUY.js";
 import "../chunk-L25OAFOU.js";
 import "../chunk-RT57D7C4.js";
 import "../chunk-FTZET5YX.js";

package/dist/bin/vps-health-gate.js

@@ -8,7 +8,7 @@ import {
   logResult,
   main,
   runHealthGate
-} from "../chunk-IZXQFETE.js";
+} from "../chunk-4FAJBCUY.js";
 import "../chunk-MLKGABMK.js";
 export {
   checkCRM,

package/dist/build-manifest.json

@@ -1,6 +1,6 @@
 {
   "version": 2,
-  "generated_at": "2026-09-26T17:08:07.763Z",
+  "generated_at": "2026-09-26T18:51:05.708Z",
   "files": [
     {
       "path": "active-agent-3FVEAPPT.js",
@@ -179,7 +179,7 @@
     },
     {
       "path": "bin/cli.js",
-      "sha256": "187f5c45e8bed17bdf4ec5cee3dfc517120b9075edfd5356f6adeda73abb6e24",
+      "sha256": "ca619c8d0e2db0e7b0865b9beb9ecec95a5f01065f5fa67b062c5e00af2261c0",
       "bytes": 69826
     },
     {
@@ -524,7 +524,7 @@
     },
     {
       "path": "bin/registry-proxy.js",
-      "sha256": "ea701ba2b36369904b3102e5f6dff16ab29aead3eda646f2ad9de51587de4703",
+      "sha256": "3bc01618360147984d09607d1ce6a1983c6f587763f9a9ce0d8944f483153896",
       "bytes": 1885
     },
     {
@@ -549,7 +549,7 @@
     },
     {
       "path": "bin/stack-update.js",
-      "sha256": "34b7c99470bc5b82a3a0d3b8f96c938cfe039285f5301995c15591fb5197fb3b",
+      "sha256": "0930d7fb000dfb0195941bb35b599148c0bf574934af7ff11d61b92b80526f8a",
       "bytes": 132136
     },
     {
@@ -569,7 +569,7 @@
     },
     {
       "path": "bin/vps-health-gate.js",
-      "sha256": "4b10991c02787843516a2de5bacdd6ec2be0796e2b5249eb828eea18e28d8f24",
+      "sha256": "51e843f120210c8fdab734dcb7b844a4cc8b3d3b2dbea900f6547bf8061b0b6d",
       "bytes": 333
     },
     {
@@ -732,6 +732,11 @@
       "sha256": "95d9af04c423550e84bb843411c860bc16b99d2c6cdaf4f53892b4ae4ab8e661",
       "bytes": 854
     },
+    {
+      "path": "chunk-4FAJBCUY.js",
+      "sha256": "94c611c2d0cc509991a5fb2e0f3a3c8ab0f550b21599d93e56ca6bf9802fd075",
+      "bytes": 7587
+    },
     {
       "path": "chunk-4MUU33NJ.js",
       "sha256": "a8c0fb44a5b16c604a8db885b8e4a141c645ba22d2aa512a1e7b2ecf7369b76b",
@@ -917,6 +922,11 @@
       "sha256": "1fe1a2034e1adbd119d854017211729e4d4099d372f2c01203e019ee01e66414",
       "bytes": 28439
     },
+    {
+      "path": "chunk-AR2K7SUC.js",
+      "sha256": "862a533d706fc1f48121a865fd7c674be0c39c139dc6390921f4ce96004417ed",
+      "bytes": 274246
+    },
     {
       "path": "chunk-ARX6TAGN.js",
       "sha256": "2012774af162979e32828bdd3fc5bbcf8b39ef83320855cc08c21550aa3c2693",
@@ -962,6 +972,11 @@
       "sha256": "b36e68f4464d4936a0b81cc7d73952e13d154218c5900b829208f7dc6d1752f4",
       "bytes": 8793
     },
+    {
+      "path": "chunk-BPTTQRMJ.js",
+      "sha256": "73396a40dbd7bfc35f5787e7e9bb2542381f52fa9b0991b2c3fa15f0c91ca58c",
+      "bytes": 3766
+    },
     {
       "path": "chunk-BTSWFMEH.js",
       "sha256": "0f59755b7c14d9d84045f88dfa6cabae300fdf510b27d26ba999798aaf7613b1",
@@ -1147,6 +1162,11 @@
       "sha256": "a999baf6db449dcd8c856393a0721a50aceb27e74a49f71bbc6b553081d98fc2",
       "bytes": 6697
     },
+    {
+      "path": "chunk-FL2QIDNZ.js",
+      "sha256": "93dd3dd3fb0c397639a936954a578838776f754852ab26c3b345e0ad169a7e8c",
+      "bytes": 44776
+    },
     {
       "path": "chunk-FS7XF7SE.js",
       "sha256": "7bc1072400b38de7aed6d597c83a46592cec28fe5bb0ced731637dbeae3a3a2e",
@@ -1312,11 +1332,6 @@
       "sha256": "c0b3a6372de1ceaaa0ee8077beab90baddb26d44c0fbf933543b963927819e16",
       "bytes": 57011
     },
-    {
-      "path": "chunk-IZXQFETE.js",
-      "sha256": "5ec76de5963c97e9cf65ca8762ec36cb243baa04db92be02bf5d794b58b0b2a7",
-      "bytes": 7587
-    },
     {
       "path": "chunk-J4MJ3DVJ.js",
       "sha256": "eef1ffda711ee7d7c4007eef11c8accb8a7a7334f0f0a88aa388dc1cf9bf68f0",
@@ -1402,11 +1417,6 @@
       "sha256": "b4b541043927616db5d90ebf7ac7a27a470db4e59da6c8a060a6bb1fa82725ba",
       "bytes": 2370
     },
-    {
-      "path": "chunk-KWULIKOX.js",
-      "sha256": "63a84e20e4831040f39d64196e0491b64afbf335df6df37758a1c5b4d33dd771",
-      "bytes": 44776
-    },
     {
       "path": "chunk-KZB2B7RM.js",
       "sha256": "69dbe01abcb9d3040d540aac97728e34f21bdea474d9a7d50389ddd2f43fc1ea",
@@ -1437,11 +1447,6 @@
       "sha256": "97c340d79a55dfa786143f7df0134ea0bea878faaaa25938d1ef05d7e664d5df",
       "bytes": 3519
     },
-    {
-      "path": "chunk-LPQOPT5B.js",
-      "sha256": "a9c2b1b06163db91f5b283387965033c1eaa379a6abe100f38868fc0947e8da9",
-      "bytes": 272808
-    },
     {
       "path": "chunk-LSH2UDUX.js",
       "sha256": "4b3425c974fb5ccbeaf9229f76f9ee7ed302387be89fef50826419ae4a2300ab",
@@ -1897,11 +1902,6 @@
       "sha256": "e90e2cf38ba91adb389b613bf6bf3bba8acd0eb455a496c8ab61d6c92d5de4bd",
       "bytes": 27577
     },
-    {
-      "path": "chunk-UX2IGPPW.js",
-      "sha256": "f075ec4648083b9c6fd5b12fef427e1a528d995775655cd759dc57a4ba680646",
-      "bytes": 3766
-    },
     {
       "path": "chunk-V4TZI6EO.js",
       "sha256": "697ecdef6991c061baab1e9759bc14aecd28631954b2edfdb721c98c72d41c82",
@@ -2579,7 +2579,7 @@
     },
     {
       "path": "hooks/manifest.json",
-      "sha256": "af662e825679ba4ed0b4104c13717bfb99f2b0e9c36f379d042345cb58b19484",
+      "sha256": "9ca0a1c0c220c0e5b0548ef590779e2162bed221c117d7297fc3017d09810287",
       "bytes": 1841
     },
     {
@@ -2884,7 +2884,7 @@
     },
     {
       "path": "lib/registry-proxy.js",
-      "sha256": "1e66f3ce0b4c5491749475e3b879f945aa49bd78ba3ca73af24e6174d403e3a5",
+      "sha256": "f75ff994266d2c65a434fcab76b25274332411b0da2173af45d65448b0c9b727",
       "bytes": 749
     },
     {
@@ -3473,8 +3473,8 @@
       "bytes": 111
     },
     {
-      "path": "stack-generate-manifest-TMLO7F3U.js",
-      "sha256": "394a03b110f850620ce0c6648dd00bc7fc0268ae009348fb3bbf328ed9b84809",
+      "path": "stack-generate-manifest-53OIWKJJ.js",
+      "sha256": "4299bd2de702861ececd5452c6bc1c8e51b4d09b959ba6d62ef4baef00bc26be",
       "bytes": 56960
     },
     {
@@ -3483,19 +3483,19 @@
       "bytes": 4761
     },
     {
-      "path": "stack-promote-IYD6GDSW.js",
-      "sha256": "c5365b6979037bba09a72d5c13ca67196e798fe58c87a57aebdc418bcd48ffaa",
+      "path": "stack-promote-43W7XU5A.js",
+      "sha256": "120716c6304c2b28c36afc6927b687882e8e3ffd3662f28efa6049d6056d53a3",
       "bytes": 7425
     },
     {
-      "path": "stack-release-2Q2IYM4M.js",
-      "sha256": "59ab0dda84ee7791fbbcc68505ba084a8d3848468db22fe3d691d526a0ca3c98",
+      "path": "stack-release-TWEFH7RF.js",
+      "sha256": "ac9da7724b6bdadeace5685cde290019a7a39ab33c2bd8ae13f7aee8fc2e5c87",
       "bytes": 117404
     },
     {
-      "path": "stack-update-WRS2QRK4.js",
-      "sha256": "fffa7477bb086c55287c56f9d349ff44520805e92868612e589d4a99577598f7",
-      "bytes": 8127
+      "path": "stack-update-SPZKBTHQ.js",
+      "sha256": "d62249adaa05eda4a824ef2867460be65087eafcc1bc854814e90ff81888319b",
+      "bytes": 8231
     },
     {
       "path": "stalled-dispatch-escalation-MHLYH2PT.js",

package/dist/{chunk-IZXQFETE.js → chunk-4FAJBCUY.js}

@@ -212,7 +212,7 @@ async function main(args) {
   console.log("[health-gate] Starting rollback...");
   restorePreDeployBackup();
   try {
-    const { rollbackStackUpdate, defaultStackPaths } = await import("./stack-update-WRS2QRK4.js");
+    const { rollbackStackUpdate, defaultStackPaths } = await import("./stack-update-SPZKBTHQ.js");
     const paths = defaultStackPaths();
     await rollbackStackUpdate({
       manifestRef: paths.manifestRef,

package/dist/{chunk-LPQOPT5B.js → chunk-AR2K7SUC.js}

@@ -33,6 +33,15 @@ import { fileURLToPath } from "url";
 import { parseDocument as parseYamlDocument } from "yaml";
 
 // src/lib/erp-asset-smoke.ts
+var REQUIRED_DESK_BUNDLES = {
+  "desk.bundle.js": "javascript",
+  "desk.bundle.css": "css"
+};
+var ASSET_PATH_PATTERN = /^\/assets\/[A-Za-z0-9_-]+\/dist\/(?:css|js)\/[^"' >]+$/;
+var CONTENT_TYPE_PATTERN = {
+  javascript: /javascript/i,
+  css: /(?:^|\/)css/i
+};
 async function verifyErpAssets(port, siteName, fetchPage = fetch) {
   if (!Number.isInteger(port) || port < 1 || port > 65535) {
     throw new Error("ERP asset smoke refused an invalid loopback port");
@@ -42,7 +51,6 @@ async function verifyErpAssets(port, siteName, fetchPage = fetch) {
   }
   const origin = `http://127.0.0.1:${port}`;
   const signal = AbortSignal.timeout(6e4);
-  const assetPaths = /* @__PURE__ */ new Set();
   const get = async (path2) => {
     let url = new URL(path2, origin);
     for (let redirects = 0; redirects < 5; redirects++) {
@@ -56,25 +64,38 @@ async function verifyErpAssets(port, siteName, fetchPage = fetch) {
     }
     throw new Error("ERP asset smoke exceeded its redirect limit");
   };
-  for (const page of ["/login", "/app"]) {
-    const response = await get(page);
-    if (response.status !== 200) {
-      throw new Error(`ERP asset smoke: ${page} returned HTTP ${response.status}`);
-    }
-    const html = await response.text();
-    const assets = [...html.matchAll(/\/assets\/[A-Za-z0-9_-]+\/dist\/(?:css|js)\/[^"' >]+/g)].map((match) => match[0]);
-    if (assets.length === 0 || !assets.some((asset) => asset.includes("/css/"))) {
-      throw new Error(`ERP asset smoke: ${page} has no hashed CSS bundle`);
+  const manifestResponse = await get("/assets/assets.json");
+  if (manifestResponse.status !== 200) {
+    await manifestResponse.body?.cancel();
+    throw new Error(`ERP asset smoke: assets.json manifest returned HTTP ${manifestResponse.status}`);
+  }
+  let manifest;
+  try {
+    manifest = JSON.parse(await manifestResponse.text());
+  } catch {
+    throw new Error("ERP asset smoke: assets.json manifest was not valid JSON");
+  }
+  if (typeof manifest !== "object" || manifest === null || Array.isArray(manifest)) {
+    throw new Error("ERP asset smoke: assets.json manifest was not a JSON object");
+  }
+  const assetPaths = /* @__PURE__ */ new Map();
+  for (const [key, kind] of Object.entries(REQUIRED_DESK_BUNDLES)) {
+    const value = manifest[key];
+    if (typeof value !== "string" || !ASSET_PATH_PATTERN.test(value)) {
+      throw new Error(`ERP asset smoke: assets.json manifest is missing the desk ${kind} bundle ("${key}")`);
     }
-    for (const asset of assets) assetPaths.add(asset);
+    assetPaths.set(value, kind);
   }
-  if (assetPaths.size > 100) throw new Error("ERP asset smoke: page references too many bundles");
-  for (const asset of assetPaths) {
+  for (const [asset, kind] of assetPaths) {
     const response = await get(asset);
     await response.body?.cancel();
     if (response.status !== 200) {
       throw new Error(`ERP asset smoke: ${asset} returned HTTP ${response.status}`);
     }
+    const contentType = response.headers.get("content-type") ?? "";
+    if (!CONTENT_TYPE_PATTERN[kind].test(contentType)) {
+      throw new Error(`ERP asset smoke: ${asset} did not return a ${kind} content type (got "${contentType}")`);
+    }
   }
 }
 
@@ -1676,6 +1697,26 @@ function parseEnv(raw) {
   }
   return env;
 }
+function unquoteComposeEnvValue(raw) {
+  const trimmed = raw.trim();
+  if (trimmed.length >= 2) {
+    const first = trimmed[0];
+    const last = trimmed[trimmed.length - 1];
+    if (first === '"' && last === '"') {
+      return trimmed.slice(1, -1).replace(/\\(["\\])/g, "$1");
+    }
+    if (first === "'" && last === "'") {
+      return trimmed.slice(1, -1);
+    }
+  }
+  return trimmed;
+}
+function resolveComposeEnvValue(env, key, fallback) {
+  const raw = env.get(key);
+  if (raw === void 0) return fallback;
+  const value = unquoteComposeEnvValue(raw);
+  return value !== "" ? value : fallback;
+}
 function patchEnv(raw, updates) {
   const seen = /* @__PURE__ */ new Set();
   const lines = raw.replace(/\n$/, "").split(/\r?\n/);
@@ -4798,8 +4839,9 @@ Push the missing image(s) to the registry, or re-run with --break-glass <reason>
           erpNginxRef,
           options.retainedImageIds ?? captureRetainedComposeImageIds
         );
-        const portRaw = parseEnv(readFileSync(options.envFile, "utf8")).get("ERP_API_PORT") ?? "8069";
-        const siteName = parseEnv(readFileSync(options.envFile, "utf8")).get("ERP_SITE_NAME") ?? "erp.askexe.com";
+        const smokeEnv = parseEnv(readFileSync(options.envFile, "utf8"));
+        const portRaw = resolveComposeEnvValue(smokeEnv, "ERP_API_PORT", "8069");
+        const siteName = resolveComposeEnvValue(smokeEnv, "ERP_SITE_NAME", "erp.askexe.com");
         await (options.verifyErpAssets ?? verifyErpAssets)(Number(portRaw), siteName);
       }
     }
@@ -5940,6 +5982,8 @@ export {
   loadStackManifestWithFallback,
   reportStackManifestSource,
   parseEnv,
+  unquoteComposeEnvValue,
+  resolveComposeEnvValue,
   patchEnv,
   removeEnvKeys,
   expandComposeExpression,

package/dist/{chunk-UX2IGPPW.js → chunk-BPTTQRMJ.js}

@@ -1,6 +1,6 @@
 import {
   canonicalizeStackManifest
-} from "./chunk-LPQOPT5B.js";
+} from "./chunk-AR2K7SUC.js";
 
 // src/lib/stack-manifest-write.ts
 import { readFileSync, statSync, writeFileSync } from "fs";

package/dist/{chunk-KWULIKOX.js → chunk-FL2QIDNZ.js}

@@ -140,7 +140,7 @@ async function assertManifestSignature(manifest, publicKeyPem) {
       "manifest carries no `signature`. Fleets that enforce EXE_STACK_PUBLIC_KEY reject unsigned manifests, so publishing one would ship a release no host can install. Re-sign with the custodied key: node scripts/sign-stack-manifest.mjs deploy/stack-manifests/v0.9.json"
     );
   }
-  const { verifyStackManifestSignature } = await import("./stack-update-WRS2QRK4.js");
+  const { verifyStackManifestSignature } = await import("./stack-update-SPZKBTHQ.js");
   try {
     verifyStackManifestSignature(manifest, publicKeyPem);
   } catch (err) {

package/dist/hooks/manifest.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "generatedAt": "2026-09-26T17:08:07.502Z",
+  "generatedAt": "2026-09-26T18:51:05.342Z",
   "hashes": {
     "bug-report-worker.js": "2336d762dead5c2addcf34771a054ab68946872540defc5259c7c38efea514ab",
     "codex-stop-task-finalizer.js": "1e44c134731e9192114c8b2999bac666755baa36eb242ef9bdd39c81407355f9",

package/dist/lib/registry-proxy.js

@@ -11,7 +11,7 @@ import {
   resolveRegistryProxyBuildIdentity,
   resolveStackManifestChannel,
   runRegistryProxy
-} from "../chunk-KWULIKOX.js";
+} from "../chunk-FL2QIDNZ.js";
 import "../chunk-MLKGABMK.js";
 export {
   SERVED_VERSION_PATH,

package/dist/{stack-generate-manifest-TMLO7F3U.js → stack-generate-manifest-53OIWKJJ.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   writeSignedStackManifest
-} from "./chunk-UX2IGPPW.js";
-import "./chunk-LPQOPT5B.js";
+} from "./chunk-BPTTQRMJ.js";
+import "./chunk-AR2K7SUC.js";
 import "./chunk-EC5H53YD.js";
 import "./chunk-YYRI2AGK.js";
 import "./chunk-L25OAFOU.js";

package/dist/{stack-promote-IYD6GDSW.js → stack-promote-43W7XU5A.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   writeSignedStackManifest
-} from "./chunk-UX2IGPPW.js";
-import "./chunk-LPQOPT5B.js";
+} from "./chunk-BPTTQRMJ.js";
+import "./chunk-AR2K7SUC.js";
 import "./chunk-EC5H53YD.js";
 import "./chunk-YYRI2AGK.js";
 import "./chunk-L25OAFOU.js";

package/dist/{stack-release-2Q2IYM4M.js → stack-release-TWEFH7RF.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   writeSignedStackManifest
-} from "./chunk-UX2IGPPW.js";
-import "./chunk-LPQOPT5B.js";
+} from "./chunk-BPTTQRMJ.js";
+import "./chunk-AR2K7SUC.js";
 import "./chunk-EC5H53YD.js";
 import {
   assertPreflightGate,
@@ -2028,7 +2028,7 @@ async function warmProxyCache(imageRef) {
 async function resolveImageGitShaLabel(ref, dryRun) {
   if (!ref || dryRun) return void 0;
   try {
-    const { readProvenanceLabels } = await import("./stack-generate-manifest-TMLO7F3U.js");
+    const { readProvenanceLabels } = await import("./stack-generate-manifest-53OIWKJJ.js");
     const labels = await readProvenanceLabels(ref);
     return labels["org.exe.git_sha"] ?? labels["org.opencontainers.image.revision"];
   } catch (err) {

package/dist/{stack-update-WRS2QRK4.js → stack-update-SPZKBTHQ.js}

@@ -103,6 +103,7 @@ import {
   removeEnvKeys,
   reportStackManifestSource,
   requiredImagePinKeys,
+  resolveComposeEnvValue,
   resolveComposeProjectName,
   resolveHealthHost,
   resolveManifestImagePin,
@@ -126,6 +127,7 @@ import {
   syncImagePinsWithProcessEnv,
   unmanagedManifestServices,
   unpinnedImageBreakGlassBanner,
+  unquoteComposeEnvValue,
   verifyComposeServicesRunning,
   verifyIngressTargetsReachable,
   verifyManifestImagesAvailable,
@@ -136,7 +138,7 @@ import {
   waitForHttpOk,
   warnUnmanagedManifestServices,
   withStackUpdateOperationLock
-} from "./chunk-LPQOPT5B.js";
+} from "./chunk-AR2K7SUC.js";
 import "./chunk-EC5H53YD.js";
 import "./chunk-YYRI2AGK.js";
 import "./chunk-L25OAFOU.js";
@@ -254,6 +256,7 @@ export {
   removeEnvKeys,
   reportStackManifestSource,
   requiredImagePinKeys,
+  resolveComposeEnvValue,
   resolveComposeProjectName,
   resolveHealthHost,
   resolveManifestImagePin,
@@ -277,6 +280,7 @@ export {
   syncImagePinsWithProcessEnv,
   unmanagedManifestServices,
   unpinnedImageBreakGlassBanner,
+  unquoteComposeEnvValue,
   verifyComposeServicesRunning,
   verifyIngressTargetsReachable,
   verifyManifestImagesAvailable,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.401",
+  "version": "0.9.402",
   "description": "AI employee operating system \u2014 persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",

package/release-notes.json

@@ -1,26 +1,18 @@
 {
-  "current": "0.9.401",
+  "current": "0.9.402",
   "notes": {
-    "0.9.401": {
-      "version": "0.9.401",
+    "0.9.402": {
+      "version": "0.9.402",
       "date": "2026-09-26",
-      "features": [
-        "hourly npm release-drift monitor (bug 19aa10d0) (#1558)",
-        "retain live Compose for ERP image group (#1542)"
-      ],
+      "features": [],
       "fixes": [
-        "batch auto_wake liveness lookup to stop event-loop stalls (bug fe166b57) (#1563)",
-        "artifact quick_check catches freelist corruption; protect in-flight backups from retention (#1562)",
-        "stub inspectContainerStartedAt in stack-update hermetic seams (bug f032b35c) (#1564)",
-        "self-heal missing native bindings after npm ci (bug fd9f99d0) (#1560)",
-        "remove one-off npm publisher workflows, add guard test (bug 19aa10d0) (#1559)",
-        "stop stack-release-auto's report job silencing its own alarm (#1556)",
-        "publish gate waits on same-SHA race instead of refusing at t=0 (#1557)",
-        "add size-based bloat trigger to ci-disk-reclaim git repack (#1555)"
+        "resolve quoted ERP smoke-check env values (bug fff7716e) (#1567)",
+        "resolve desk bundles via assets.json, not the /app->/login redirect (#1568)",
+        "retry only transient GitHub API failures in fail-closed gates (bug ade4dc64) (#1566)"
       ],
       "security": [],
       "other": [
-        "release: v0.9.401 (#1565)"
+        "release: v0.9.402 (#1569)"
       ],
       "migration_notes": []
     },

package/stack.release.json

@@ -4,8 +4,8 @@
   "repo": "AskExe/exe-os",
   "service": "exe-os",
   "packageName": "@askexenow/exe-os",
-  "version": "0.9.401",
-  "image": "ghcr.io/askexe/exe-os:v0.9.401",
+  "version": "0.9.402",
+  "image": "ghcr.io/askexe/exe-os:v0.9.402",
   "imageEnv": "EXE_OS_IMAGE_TAG",
   "imageDigestTodo": "The top-level image names the forthcoming exe-os build and receives its digest after publication. Independently released components, including dashboard, retain verified digest pins; stack publication validates every service pin.",
   "components": {
@@ -110,5 +110,5 @@
   },
   "deploymentScope": "customer",
   "highGhostStack": "0.9.9",
-  "sourceVersion": "0.9.401"
+  "sourceVersion": "0.9.402"
 }