@askexenow/exe-os 0.9.411 → 0.9.412

package/dist/{stack-release-S37R57XC.js → stack-release-64UJ6Y4W.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   writeSignedStackManifest
-} from "./chunk-WC44PNZU.js";
-import "./chunk-WHUQ44F2.js";
+} from "./chunk-5DLZJ3MY.js";
+import "./chunk-RIKFXHLE.js";
 import "./chunk-EC5H53YD.js";
 import {
   assertPreflightGate,
@@ -282,6 +282,16 @@ var STACK_RELEASE_REPO_CONFIGS = Object.freeze([
     releaseWorkflow: "release-stack-image.yml",
     simpleTag: true,
     defaultBranch: "main"
+  },
+  {
+    serviceKey: "dashboard",
+    manifestServiceKey: "dashboard",
+    ghRepo: "AskExe/exe-dashboard",
+    localDir: "exe-dashboard",
+    imageName: "update.askexe.com/askexe/exe-dashboard",
+    releaseWorkflow: "release-dashboard-image.yml",
+    simpleTag: true,
+    defaultBranch: "main"
   }
 ]);
 var STACK_RECONCILE_APP_IMAGE_REPOS = Object.freeze([
@@ -291,37 +301,10 @@ var STACK_RECONCILE_APP_IMAGE_REPOS = Object.freeze([
     imageName: "update.askexe.com/askexe/exe-auth",
     ghRepo: "AskExe/exe-auth"
   },
-  // exe-dashboard: same gap — it was absent from both maps in this file, so
-  // G6's reconcile classified an unstamped dashboard image as "no expected
-  // source repo mapped here" (third-party, informational), exactly the false
-  // pass the "unstamped-third-party" distinction exists to avoid for images
-  // this repo family DOES build.
-  //
-  // 🔴 THE REPO HERE IS THE REPO THE IMAGE IS BUILT IN, NOT THE ONE THAT WILL
-  // EVENTUALLY OWN IT. G6 compares this value against the image's org.exe.repo
-  // label, which the shared release lane stamps with the repository the build
-  // actually ran in. exe-dashboard is still built from `dashboard-page/` INSIDE
-  // AskExe/exe-os (.github/workflows/release-dashboard-image.yml passes
-  // `context: dashboard-page`); AskExe/exe-dashboard exists but its history
-  // extraction is unfinished and nothing is built there yet. The real published
-  // ghcr.io/askexe/exe-dashboard:v0.9.382 carries org.exe.repo=AskExe/exe-os
-  // (recorded verbatim in release-service.yml's G2 arming note), so naming the
-  // destination repo here turns every correctly-stamped dashboard release into
-  // a "wrong-repo image (bug 218b10e4 class)" failure — and simultaneously
-  // makes that signal useless for the one service it would be reporting on.
-  //
-  // release-contract-services.mjs's `ghRepo: "AskExe/exe-dashboard"` is a
-  // different field with a different meaning: it names the repo that OWNS the
-  // service in the migration table. Copying it into this provenance map is how
-  // the wrong value got here.
-  //
-  // When the extraction completes, the lane's `context` flips to `.` and moves
-  // to AskExe/exe-dashboard; flip this with it. A test in
-  // tests/scripts/image-provenance.test.ts reads that `context` and fails if
-  // the two disagree, so this cannot drift silently a second time.
+  // Current dashboard pins are published by the standalone repository.
   {
     imageName: "update.askexe.com/askexe/exe-dashboard",
-    ghRepo: "AskExe/exe-os"
+    ghRepo: "AskExe/exe-dashboard"
   }
 ]);
 
@@ -2028,7 +2011,7 @@ async function warmProxyCache(imageRef) {
 async function resolveImageGitShaLabel(ref, dryRun) {
   if (!ref || dryRun) return void 0;
   try {
-    const { readProvenanceLabels } = await import("./stack-generate-manifest-SU6OFFY7.js");
+    const { readProvenanceLabels } = await import("./stack-generate-manifest-MVJDTU4F.js");
     const labels = await readProvenanceLabels(ref);
     return labels["org.exe.git_sha"] ?? labels["org.opencontainers.image.revision"];
   } catch (err) {

package/dist/{stack-update-XXDRKGGR.js → stack-update-EBATTQPP.js}

@@ -97,6 +97,7 @@ import {
   printVolumeCleanupResult,
   readCurrentStackVersion,
   readRetainedComposeFiles,
+  readStagedComposeTemplate,
   reconcileSsoEdgeConfigDelivery,
   reconcileStackLockFromContainers,
   removeDanglingVolumes,
@@ -138,7 +139,7 @@ import {
   waitForHttpOk,
   warnUnmanagedManifestServices,
   withStackUpdateOperationLock
-} from "./chunk-WHUQ44F2.js";
+} from "./chunk-RIKFXHLE.js";
 import "./chunk-EC5H53YD.js";
 import "./chunk-YYRI2AGK.js";
 import "./chunk-L25OAFOU.js";
@@ -250,6 +251,7 @@ export {
   printVolumeCleanupResult,
   readCurrentStackVersion,
   readRetainedComposeFiles,
+  readStagedComposeTemplate,
   reconcileSsoEdgeConfigDelivery,
   reconcileStackLockFromContainers,
   removeDanglingVolumes,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.411",
+  "version": "0.9.412",
   "description": "AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",

package/release-notes.json

@@ -1,34 +1,30 @@
 {
-  "current": "0.9.411",
+  "current": "0.9.412",
   "notes": {
-    "0.9.411": {
-      "version": "0.9.411",
-      "date": "2026-10-12",
+    "0.9.412": {
+      "version": "0.9.412",
+      "date": "2026-10-14",
       "features": [
-        "server-set offline_grace_s caps client offline trust (closed-loop revocation, part 1) (#3964)",
-        "add platform procedure for subagent context economy (#3954)"
+        "deliver private HTML reports in customer release 0.9.77",
+        "org plane enforces suspension/ban + operator revoke-all-sessions (closed-loop revocation, part 2) (#3965)"
       ],
       "fixes": [
-        "last-known-good company-procedures snapshot; launch warning names the real error (#3966)",
-        "/api/register-org only lets the org's owner rotate its relay token (9c8781e9) (#3963)",
-        "never sweep stable per-agent caches; keep stale cache on DB read failure (6255bdd6) (#3962)",
-        "form-agnostic exe-os http_headers + fail-closed TOML guard (#3961)",
-        "ledger guard parses wrapper options, skips redirections, fails closed on find -L (#3960)",
-        "ledger rule refuses whole-tree delete/move of an audit-dir ancestor (#3958)",
-        "ledger-tamper and data-store guard false positives (single-quoted literals, cd-relative rm targets) (#3956)",
-        "run backup verification off the daemon event loop (#3959)",
-        "retention no longer depends on a backup run completing; torn manifests are not verified (#3955)",
-        "destructive find over an ancestor of the audit dir bypassed ledger-tamper (#3957)",
-        "retire code-context sync + stream blob pulls to stop CPU-limit kills (#3947)",
-        "stop syncing code-context indexes to Exe Cloud (#3948)",
-        "purge two-level dispatch residue — managers decompose, coordinator dispatches (bug 23fba96c) (#3044)",
-        "walker credits destructuring/spread getter reads (bug 542082b2) (#3946)",
-        "treat down serving probe as degraded in mcp_ping status (bug 5c7c2e7b residual) (#3943)"
+        "skip monitor recovery before inspecting unused images",
+        "bind ERP session proof and recover legacy monitor ownership",
+        "verify stateful ERP SSO handoff and native identity",
+        "bind monitor probe to observed agent artifact",
+        "allow valid multi-platform registry inspections to finish",
+        "declare the telemetry image setting for legacy template upgrades",
+        "preserve global version on no-op scoped updates",
+        "make previews read-only and migrate inactive legacy workers",
+        "complete verified standalone dashboard cutover",
+        "derive customer template pins from the new release"
       ],
       "security": [],
       "other": [
-        "release: v0.9.411 (#3967)",
-        "version-control local CI npm registry plumbing + DOWN-tick alerting (bug 67c9ac1d) (#3951)"
+        "typecheck updater regressions and stabilize dated fixtures",
+        "keep CLI planning mock aligned with exported template reader",
+        "release(stack): make tested customer bundle 0.9.77 the default"
       ],
       "migration_notes": []
     },

package/stack.release.json

@@ -4,8 +4,8 @@
   "repo": "AskExe/exe-os",
   "service": "exe-os",
   "packageName": "@askexenow/exe-os",
-  "version": "0.9.411",
-  "image": "ghcr.io/askexe/exe-os:v0.9.411",
+  "version": "0.9.412",
+  "image": "ghcr.io/askexe/exe-os:v0.9.412",
   "imageEnv": "EXE_OS_IMAGE_TAG",
   "imageDigestTodo": "The top-level image names the forthcoming exe-os build and receives its digest after publication. Independently released components, including dashboard, retain verified digest pins; stack publication validates every service pin.",
   "components": {
@@ -16,11 +16,11 @@
       "note": "Bug 81ca8903: was `ghcr.io/askexe/exe-erp:v0.9.312` \u2014 a tag that has never existed. ERP is versioned on its own 0.x line; v0.9.312 is an EXE-OS version number that bumpVersions() stamped onto this component because rebaseImageTag() rebased every tag-only component image to the exe-os release version regardless of which repo built it. That rebase is now scoped (same commit) so it can no longer forge tags for independently-versioned components. Repinned to the real, current ERP release v0.3.4, digest resolved live from ghcr.io/askexe/exe-erp on 2026-09-01. Digest-pinning is also what makes this entry self-defending: rebaseImageTag() returns any `@sha256:`-bearing ref untouched. Prior intent for the record (bug 790794e8) was v0.2.0-final8, the first ERP image shipping the realtime/socketio entrypoint (exe-erp PR #15); final3/final7 crash-looped exe-erp-websocket on a missing socketio.js. v0.3.4 supersedes it."
     },
     "dashboard": {
-      "image": "ghcr.io/askexe/exe-dashboard:v0.9.382@sha256:43c4eb52d89d977021d29df73bcfa6f9d769ab4debf90e81240b59a4c165bab0",
+      "image": "ghcr.io/askexe/exe-dashboard:v0.9.400@sha256:d6963463d623f2e07b8b1b6cdaa5662b8a7219aa237cd315cfbabcad84f06ee1",
       "env": "DASHBOARD_IMAGE_TAG",
       "composeService": "exe-dashboard",
       "versionLockstep": false,
-      "note": "Dashboard is independently versioned after the standalone repository handoff. Preserve the verified image already pinned by the customer stack until the first AskExe/exe-dashboard release passes provenance checks. Update this digest and current-image source mappings together at cutover; exe-os version bumps must not rewrite this tag."
+      "note": "Independently published by AskExe/exe-dashboard from 0e389f1acf35b34c648a846abdc4bcca4d2cd816. Matches the verified v0.9.400 customer manifest pin; source mappings move atomically with this digest."
     },
     "exe-db": {
       "image": "pgvector/pgvector:0.8.0-pg16@sha256:a132765ec351c65111b5b675928a3a0515a466a40f97277329db8b8209ad8bc9",
@@ -110,5 +110,5 @@
   },
   "deploymentScope": "customer",
   "highGhostStack": "0.9.9",
-  "sourceVersion": "0.9.411"
+  "sourceVersion": "0.9.412"
 }