@askexenow/exe-os 0.9.409 → 0.9.411

package/release-notes.json

@@ -1,17 +1,35 @@
 {
-  "current": "0.9.409",
+  "current": "0.9.411",
   "notes": {
-    "0.9.409": {
-      "version": "0.9.409",
-      "date": "2026-10-02",
+    "0.9.411": {
+      "version": "0.9.411",
+      "date": "2026-10-12",
       "features": [
-        "route isolated Wiki and ERP demo through central SSO"
+        "server-set offline_grace_s caps client offline trust (closed-loop revocation, part 1) (#3964)",
+        "add platform procedure for subagent context economy (#3954)"
       ],
       "fixes": [
-        "pin bounded Wiki SSO39 in signed canary73"
+        "last-known-good company-procedures snapshot; launch warning names the real error (#3966)",
+        "/api/register-org only lets the org's owner rotate its relay token (9c8781e9) (#3963)",
+        "never sweep stable per-agent caches; keep stale cache on DB read failure (6255bdd6) (#3962)",
+        "form-agnostic exe-os http_headers + fail-closed TOML guard (#3961)",
+        "ledger guard parses wrapper options, skips redirections, fails closed on find -L (#3960)",
+        "ledger rule refuses whole-tree delete/move of an audit-dir ancestor (#3958)",
+        "ledger-tamper and data-store guard false positives (single-quoted literals, cd-relative rm targets) (#3956)",
+        "run backup verification off the daemon event loop (#3959)",
+        "retention no longer depends on a backup run completing; torn manifests are not verified (#3955)",
+        "destructive find over an ancestor of the audit dir bypassed ledger-tamper (#3957)",
+        "retire code-context sync + stream blob pulls to stop CPU-limit kills (#3947)",
+        "stop syncing code-context indexes to Exe Cloud (#3948)",
+        "purge two-level dispatch residue — managers decompose, coordinator dispatches (bug 23fba96c) (#3044)",
+        "walker credits destructuring/spread getter reads (bug 542082b2) (#3946)",
+        "treat down serving probe as degraded in mcp_ping status (bug 5c7c2e7b residual) (#3943)"
       ],
       "security": [],
-      "other": [],
+      "other": [
+        "release: v0.9.411 (#3967)",
+        "version-control local CI npm registry plumbing + DOWN-tick alerting (bug 67c9ac1d) (#3951)"
+      ],
       "migration_notes": []
     },
     "0.9.371": {

package/stack.release.json

@@ -4,8 +4,8 @@
   "repo": "AskExe/exe-os",
   "service": "exe-os",
   "packageName": "@askexenow/exe-os",
-  "version": "0.9.409",
-  "image": "ghcr.io/askexe/exe-os:v0.9.409",
+  "version": "0.9.411",
+  "image": "ghcr.io/askexe/exe-os:v0.9.411",
   "imageEnv": "EXE_OS_IMAGE_TAG",
   "imageDigestTodo": "The top-level image names the forthcoming exe-os build and receives its digest after publication. Independently released components, including dashboard, retain verified digest pins; stack publication validates every service pin.",
   "components": {
@@ -110,5 +110,5 @@
   },
   "deploymentScope": "customer",
   "highGhostStack": "0.9.9",
-  "sourceVersion": "0.9.409"
+  "sourceVersion": "0.9.411"
 }

package/dist/chunk-ESO5JDOT.js

@@ -1,70 +0,0 @@
-import {
-  loadEmployees
-} from "./chunk-3MDUKF3N.js";
-
-// src/lib/agent-symlinks.ts
-import os from "os";
-import path from "path";
-import {
-  existsSync,
-  lstatSync,
-  mkdirSync,
-  readlinkSync,
-  symlinkSync
-} from "fs";
-function claudeAgentsDir(homeDir) {
-  return path.join(homeDir, ".claude", "agents");
-}
-function identitySourcePath(homeDir, agentId) {
-  return path.join(homeDir, ".exe-os", "identity", `${agentId}.md`);
-}
-function claudeAgentLinkPath(homeDir, agentId) {
-  return path.join(claudeAgentsDir(homeDir), `${agentId}.md`);
-}
-function ensureAgentSymlink(agentId, homeDir = os.homedir()) {
-  const target = identitySourcePath(homeDir, agentId);
-  const link = claudeAgentLinkPath(homeDir, agentId);
-  mkdirSync(claudeAgentsDir(homeDir), { recursive: true });
-  if (existsSync(link)) {
-    let stat;
-    try {
-      stat = lstatSync(link);
-    } catch {
-      return { agentId, action: "conflict", target, link, conflict: "stat_failed" };
-    }
-    if (!stat.isSymbolicLink()) {
-      return { agentId, action: "conflict", target, link, conflict: "regular_file" };
-    }
-    let currentTarget;
-    try {
-      currentTarget = readlinkSync(link);
-    } catch {
-      return { agentId, action: "conflict", target, link, conflict: "readlink_failed" };
-    }
-    if (currentTarget === target) {
-      return { agentId, action: "already_correct", target, link };
-    }
-    return { agentId, action: "conflict", target, link, conflict: `points_to:${currentTarget}` };
-  }
-  try {
-    symlinkSync(target, link);
-  } catch (err) {
-    return {
-      agentId,
-      action: "conflict",
-      target,
-      link,
-      conflict: err instanceof Error ? err.message : String(err)
-    };
-  }
-  return { agentId, action: "created", target, link };
-}
-async function ensureAllAgentSymlinks(homeDir = os.homedir()) {
-  const employees = await loadEmployees();
-  return employees.map((emp) => ensureAgentSymlink(emp.name, homeDir));
-}
-
-export {
-  ensureAgentSymlink,
-  ensureAllAgentSymlinks
-};

package/dist/chunk-KCRSJ3VU.js

@@ -1,113 +0,0 @@
-import {
-  PLATFORM_PROCEDURES,
-  PLATFORM_PROCEDURE_TITLES
-} from "./chunk-NVM3SKJ4.js";
-import {
-  fastDbInit
-} from "./chunk-EZQ4W3WW.js";
-import {
-  getClient
-} from "./chunk-3MDUKF3N.js";
-
-// src/lib/global-procedures.ts
-import { randomUUID } from "crypto";
-var _customerCache = "";
-var _cacheLoaded = false;
-var _loadPromise = null;
-var _platformCache = PLATFORM_PROCEDURES.map((p) => `### ${p.title}
-${p.content}`).join("\n\n");
-async function loadGlobalProcedures() {
-  const client = getClient();
-  const result = await client.execute({
-    sql: "SELECT * FROM company_procedures WHERE active = 1 ORDER BY priority ASC, created_at ASC",
-    args: []
-  });
-  const allRows = result.rows;
-  const customerOnly = allRows.filter((p) => {
-    if (PLATFORM_PROCEDURE_TITLES.has(p.title)) return false;
-    const title = (p.title ?? "").trim();
-    const content = (p.content ?? "").trim();
-    if (!title || title === "(untitled)") return false;
-    if (!content) return false;
-    return true;
-  });
-  const values = customerOnly.filter((p) => p.kind === "value");
-  const procedures = customerOnly.filter((p) => p.kind !== "value");
-  const parts = [];
-  if (values.length > 0) {
-    parts.push("### Company Values\n" + values.map((v) => `- **${v.title}:** ${v.content}`).join("\n"));
-  }
-  if (procedures.length > 0) {
-    parts.push(procedures.map((p) => `### ${p.title}
-${p.content}`).join("\n\n"));
-  }
-  _customerCache = parts.join("\n\n");
-  _cacheLoaded = true;
-  return customerOnly;
-}
-var COMPANY_PROCEDURES_NOT_LOADED_LINE = "\u26A0 Company procedures NOT loaded; run config company_procedure list";
-async function ensureGlobalProceduresLoaded() {
-  if (_cacheLoaded) return;
-  if (!_loadPromise) {
-    _loadPromise = (async () => {
-      await fastDbInit({ daemonOnly: true });
-      return loadGlobalProcedures();
-    })().catch((err) => {
-      process.stderr.write(
-        `[global-procedures] company procedures load failed: ${String(err)}
-`
-      );
-      return [];
-    });
-  }
-  try {
-    await _loadPromise;
-  } finally {
-    if (!_cacheLoaded) _loadPromise = null;
-  }
-}
-function getGlobalProceduresBlock() {
-  const sections = [];
-  if (_platformCache) sections.push(_platformCache);
-  if (_cacheLoaded && _customerCache) sections.push(_customerCache);
-  if (!_cacheLoaded) sections.push(COMPANY_PROCEDURES_NOT_LOADED_LINE);
-  if (sections.length === 0) return "";
-  return `## Organization-Wide Procedures (MANDATORY \u2014 supersedes all other rules)
-
-${sections.join("\n\n")}
-`;
-}
-async function storeGlobalProcedure(input) {
-  if (!input.title?.trim() || !input.content?.trim()) {
-    throw new Error("storeGlobalProcedure requires a non-empty title and content");
-  }
-  const id = randomUUID();
-  const now = (/* @__PURE__ */ new Date()).toISOString();
-  const client = getClient();
-  await client.execute({
-    sql: `INSERT INTO company_procedures (id, title, content, priority, domain, kind, active, created_at, updated_at)
-          VALUES (?, ?, ?, ?, ?, ?, 1, ?, ?)`,
-    args: [id, input.title, input.content, input.priority ?? "p0", input.domain ?? null, input.kind ?? "procedure", now, now]
-  });
-  await loadGlobalProcedures();
-  return id;
-}
-async function deactivateGlobalProcedure(id) {
-  const now = (/* @__PURE__ */ new Date()).toISOString();
-  const client = getClient();
-  const result = await client.execute({
-    sql: "UPDATE company_procedures SET active = 0, updated_at = ? WHERE id = ?",
-    args: [now, id]
-  });
-  await loadGlobalProcedures();
-  return result.rowsAffected > 0;
-}
-
-export {
-  loadGlobalProcedures,
-  COMPANY_PROCEDURES_NOT_LOADED_LINE,
-  ensureGlobalProceduresLoaded,
-  getGlobalProceduresBlock,
-  storeGlobalProcedure,
-  deactivateGlobalProcedure
-};

package/dist/content-extractor-OVD7PTSN.js

@@ -1,9 +0,0 @@
-import {
-  extractSemanticText
-} from "./chunk-5N34MMKS.js";
-import "./chunk-BYP3DOUU.js";
-import "./chunk-HYZV25LY.js";
-import "./chunk-MLKGABMK.js";
-export {
-  extractSemanticText
-};