@askexenow/exe-os 0.9.411 → 0.9.413

package/dist/{stack-release-S37R57XC.js → stack-release-64UJ6Y4W.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import {
   writeSignedStackManifest
-} from "./chunk-WC44PNZU.js";
-import "./chunk-WHUQ44F2.js";
+} from "./chunk-5DLZJ3MY.js";
+import "./chunk-RIKFXHLE.js";
 import "./chunk-EC5H53YD.js";
 import {
   assertPreflightGate,
@@ -282,6 +282,16 @@ var STACK_RELEASE_REPO_CONFIGS = Object.freeze([
     releaseWorkflow: "release-stack-image.yml",
     simpleTag: true,
     defaultBranch: "main"
+  },
+  {
+    serviceKey: "dashboard",
+    manifestServiceKey: "dashboard",
+    ghRepo: "AskExe/exe-dashboard",
+    localDir: "exe-dashboard",
+    imageName: "update.askexe.com/askexe/exe-dashboard",
+    releaseWorkflow: "release-dashboard-image.yml",
+    simpleTag: true,
+    defaultBranch: "main"
   }
 ]);
 var STACK_RECONCILE_APP_IMAGE_REPOS = Object.freeze([
@@ -291,37 +301,10 @@ var STACK_RECONCILE_APP_IMAGE_REPOS = Object.freeze([
     imageName: "update.askexe.com/askexe/exe-auth",
     ghRepo: "AskExe/exe-auth"
   },
-  // exe-dashboard: same gap — it was absent from both maps in this file, so
-  // G6's reconcile classified an unstamped dashboard image as "no expected
-  // source repo mapped here" (third-party, informational), exactly the false
-  // pass the "unstamped-third-party" distinction exists to avoid for images
-  // this repo family DOES build.
-  //
-  // 🔴 THE REPO HERE IS THE REPO THE IMAGE IS BUILT IN, NOT THE ONE THAT WILL
-  // EVENTUALLY OWN IT. G6 compares this value against the image's org.exe.repo
-  // label, which the shared release lane stamps with the repository the build
-  // actually ran in. exe-dashboard is still built from `dashboard-page/` INSIDE
-  // AskExe/exe-os (.github/workflows/release-dashboard-image.yml passes
-  // `context: dashboard-page`); AskExe/exe-dashboard exists but its history
-  // extraction is unfinished and nothing is built there yet. The real published
-  // ghcr.io/askexe/exe-dashboard:v0.9.382 carries org.exe.repo=AskExe/exe-os
-  // (recorded verbatim in release-service.yml's G2 arming note), so naming the
-  // destination repo here turns every correctly-stamped dashboard release into
-  // a "wrong-repo image (bug 218b10e4 class)" failure — and simultaneously
-  // makes that signal useless for the one service it would be reporting on.
-  //
-  // release-contract-services.mjs's `ghRepo: "AskExe/exe-dashboard"` is a
-  // different field with a different meaning: it names the repo that OWNS the
-  // service in the migration table. Copying it into this provenance map is how
-  // the wrong value got here.
-  //
-  // When the extraction completes, the lane's `context` flips to `.` and moves
-  // to AskExe/exe-dashboard; flip this with it. A test in
-  // tests/scripts/image-provenance.test.ts reads that `context` and fails if
-  // the two disagree, so this cannot drift silently a second time.
+  // Current dashboard pins are published by the standalone repository.
   {
     imageName: "update.askexe.com/askexe/exe-dashboard",
-    ghRepo: "AskExe/exe-os"
+    ghRepo: "AskExe/exe-dashboard"
   }
 ]);
 
@@ -2028,7 +2011,7 @@ async function warmProxyCache(imageRef) {
 async function resolveImageGitShaLabel(ref, dryRun) {
   if (!ref || dryRun) return void 0;
   try {
-    const { readProvenanceLabels } = await import("./stack-generate-manifest-SU6OFFY7.js");
+    const { readProvenanceLabels } = await import("./stack-generate-manifest-MVJDTU4F.js");
     const labels = await readProvenanceLabels(ref);
     return labels["org.exe.git_sha"] ?? labels["org.opencontainers.image.revision"];
   } catch (err) {

package/dist/{stack-update-XXDRKGGR.js → stack-update-EBATTQPP.js}

@@ -97,6 +97,7 @@ import {
   printVolumeCleanupResult,
   readCurrentStackVersion,
   readRetainedComposeFiles,
+  readStagedComposeTemplate,
   reconcileSsoEdgeConfigDelivery,
   reconcileStackLockFromContainers,
   removeDanglingVolumes,
@@ -138,7 +139,7 @@ import {
   waitForHttpOk,
   warnUnmanagedManifestServices,
   withStackUpdateOperationLock
-} from "./chunk-WHUQ44F2.js";
+} from "./chunk-RIKFXHLE.js";
 import "./chunk-EC5H53YD.js";
 import "./chunk-YYRI2AGK.js";
 import "./chunk-L25OAFOU.js";
@@ -250,6 +251,7 @@ export {
   printVolumeCleanupResult,
   readCurrentStackVersion,
   readRetainedComposeFiles,
+  readStagedComposeTemplate,
   reconcileSsoEdgeConfigDelivery,
   reconcileStackLockFromContainers,
   removeDanglingVolumes,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.411",
+  "version": "0.9.413",
   "description": "AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",
@@ -91,8 +91,12 @@
     "ip-address": "^10.3.1",
     "nanoid": "^5.1.16",
     "picomatch": "^4.0.4",
-    "sharp": "^0.35.4",
-    "undici": "^6.27.0",
+    "sharp": "^0.35.5",
+    "undici": "^6.28.1",
+    "@grpc/grpc-js": "^1.14.5",
+    "simple-git": "^4.0.2",
+    "proxy-addr": "^2.0.8",
+    "brace-expansion": "^5.0.11",
     "esbuild": ">=0.28.1",
     "hono": ">=4.12.25",
     "@opentelemetry/core": ">=2.8.0",
@@ -201,7 +205,7 @@
     "@aws-sdk/client-s3": "^3.1052.0",
     "@aws-sdk/s3-request-presigner": "^3.1052.0",
     "@libsql/client": "^0.14.0",
-    "@modelcontextprotocol/sdk": "^1.29.0",
+    "@modelcontextprotocol/sdk": "^1.31.0",
     "@opentelemetry/api": "^1.9.1",
     "@opentelemetry/sdk-node": "^0.219.0",
     "@opentelemetry/sdk-trace-base": "^2.8.0",
@@ -242,6 +246,7 @@
   },
   "optionalDependencies": {
     "keytar": "^7.9.0",
+    "sharp": "^0.35.5",
     "@whiskeysockets/baileys": "^7.0.0-rc12"
   }
 }

package/release-notes.json

@@ -1,35 +1,33 @@
 {
-  "current": "0.9.411",
+  "current": "0.9.413",
   "notes": {
-    "0.9.411": {
-      "version": "0.9.411",
-      "date": "2026-10-12",
-      "features": [
-        "server-set offline_grace_s caps client offline trust (closed-loop revocation, part 1) (#3964)",
-        "add platform procedure for subagent context economy (#3954)"
+    "0.9.413": {
+      "version": "0.9.413",
+      "date": "2026-10-14",
+      "features": [],
+      "fixes": [
+        "use public HTTPS registry URLs in package-lock"
       ],
+      "security": [
+        "update package-lock and Docker runtime security packages"
+      ],
+      "other": [],
+      "migration_notes": []
+    },
+    "0.9.412": {
+      "version": "0.9.412",
+      "date": "2026-10-14",
+      "features": [],
       "fixes": [
-        "last-known-good company-procedures snapshot; launch warning names the real error (#3966)",
-        "/api/register-org only lets the org's owner rotate its relay token (9c8781e9) (#3963)",
-        "never sweep stable per-agent caches; keep stale cache on DB read failure (6255bdd6) (#3962)",
-        "form-agnostic exe-os http_headers + fail-closed TOML guard (#3961)",
-        "ledger guard parses wrapper options, skips redirections, fails closed on find -L (#3960)",
-        "ledger rule refuses whole-tree delete/move of an audit-dir ancestor (#3958)",
-        "ledger-tamper and data-store guard false positives (single-quoted literals, cd-relative rm targets) (#3956)",
-        "run backup verification off the daemon event loop (#3959)",
-        "retention no longer depends on a backup run completing; torn manifests are not verified (#3955)",
-        "destructive find over an ancestor of the audit dir bypassed ledger-tamper (#3957)",
-        "retire code-context sync + stream blob pulls to stop CPU-limit kills (#3947)",
-        "stop syncing code-context indexes to Exe Cloud (#3948)",
-        "purge two-level dispatch residue — managers decompose, coordinator dispatches (bug 23fba96c) (#3044)",
-        "walker credits destructuring/spread getter reads (bug 542082b2) (#3946)",
-        "treat down serving probe as degraded in mcp_ping status (bug 5c7c2e7b residual) (#3943)"
+        "Stack update previews leave existing configuration, service selection and monitor pairing untouched, including rejected signatures and deployment checks.",
+        "Existing embeddings-off installations migrate the shipped v0.9.311 worker fallback to the current empty image slot after confirming the worker is neither enabled nor present. Digest and signed-manifest gates remain mandatory; already migrated installations are unchanged.",
+        "legacy stack upgrades derive the required telemetry image setting from the signed manifest; multi-platform registry checks allow up to two minutes per attempt and validate Docker 29 descriptor platforms",
+        "The accepted monitoring-agent image uses its verified native health probe, allowing legacy upgrades to complete without disabling monitoring checks.",
+        "ERP admission verification completes the state-protected Auth browser handoff and validates the resulting native session identity; foreign redirects, insecure callbacks and redirect loops remain fatal.",
+        "Rollback to the legacy monitoring hub restores its verified data-volume owner before restart, preserving its users and monitored systems."
       ],
       "security": [],
-      "other": [
-        "release: v0.9.411 (#3967)",
-        "version-control local CI npm registry plumbing + DOWN-tick alerting (bug 67c9ac1d) (#3951)"
-      ],
+      "other": [],
       "migration_notes": []
     },
     "0.9.371": {
@@ -72,33 +70,6 @@
       "security": [],
       "other": [],
       "migration_notes": []
-    },
-    "0.9.368": {
-      "version": "0.9.368",
-      "date": "2026-08-14",
-      "features": [
-        "approve/deny on a privileged action now actually decides whether it runs — previously the prompt was cosmetic: no server handler existed, the safety classifier had no caller, and the wait flag was ignored (exe-build #165)",
-        "dashboard gains a Drive tab — an admin lens over Exe Drive (#709)",
-        "delivery truth: the system now tracks the gap between merged and actually delivered, with liveness checked on a clock rather than assumed (#707)",
-        "the watchdog now counts the self-heals it declines to make, so a restart it chose NOT to perform is visible instead of silent (#708)"
-      ],
-      "fixes": [
-        "cloud sync no longer starves every stage after the memory push: a deferred slice used to return early with no signal, so the daemon idled a full interval and the fifteen later stages — including DB backup — never ran, while every run reported success (#715)",
-        "closing a bug now genuinely requires a verification artifact — the gate existed and was correct, but was never reachable from the client everyone uses, so nothing was ever refused (#710)",
-        "behavior-injection truncation is loud instead of silent: agents were storing corrections that were dropped at spawn with no warning, so lessons appeared saved and were never applied (#701)",
-        "the installer refuses to run from a linked git worktree, detected structurally, so a temp checkout can no longer re-point global hooks at a directory that will not outlive it (#706)",
-        "create_task no longer reports success for a dispatch nobody received (#705)",
-        "Codex sessions launch again — we stopped pinning a flag OpenAI's CLI removed, and now feature-detect its flag surface instead (#704)",
-        "PreToolUse worktree isolation was inert inside .claude/worktrees (#712)",
-        "stopped shipping the crashlooping exe-monitor v0.9.5 build (#711)",
-        "admin bug updates: evidence-only updates no longer 400, corrections reach upstream, and oversize text is refused rather than silently truncated (#713, #714)",
-        "the dashboard image can serve askexe.com — the one domain it never could (#703)",
-        "release gate asserts required contexts off the x64 lane, so a release can no longer deadlock waiting on a runner it is occupying (#700)",
-        "device-token chat persists instead of losing every message: device identities carried no org, so writes were refused; the connection now resolves a real tenant or is refused outright (exe-build #164, #166)"
-      ],
-      "security": [],
-      "other": [],
-      "migration_notes": []
     }
   }
 }

package/stack.release.json

@@ -4,8 +4,8 @@
   "repo": "AskExe/exe-os",
   "service": "exe-os",
   "packageName": "@askexenow/exe-os",
-  "version": "0.9.411",
-  "image": "ghcr.io/askexe/exe-os:v0.9.411",
+  "version": "0.9.413",
+  "image": "ghcr.io/askexe/exe-os:v0.9.413",
   "imageEnv": "EXE_OS_IMAGE_TAG",
   "imageDigestTodo": "The top-level image names the forthcoming exe-os build and receives its digest after publication. Independently released components, including dashboard, retain verified digest pins; stack publication validates every service pin.",
   "components": {
@@ -16,11 +16,11 @@
       "note": "Bug 81ca8903: was `ghcr.io/askexe/exe-erp:v0.9.312` \u2014 a tag that has never existed. ERP is versioned on its own 0.x line; v0.9.312 is an EXE-OS version number that bumpVersions() stamped onto this component because rebaseImageTag() rebased every tag-only component image to the exe-os release version regardless of which repo built it. That rebase is now scoped (same commit) so it can no longer forge tags for independently-versioned components. Repinned to the real, current ERP release v0.3.4, digest resolved live from ghcr.io/askexe/exe-erp on 2026-09-01. Digest-pinning is also what makes this entry self-defending: rebaseImageTag() returns any `@sha256:`-bearing ref untouched. Prior intent for the record (bug 790794e8) was v0.2.0-final8, the first ERP image shipping the realtime/socketio entrypoint (exe-erp PR #15); final3/final7 crash-looped exe-erp-websocket on a missing socketio.js. v0.3.4 supersedes it."
     },
     "dashboard": {
-      "image": "ghcr.io/askexe/exe-dashboard:v0.9.382@sha256:43c4eb52d89d977021d29df73bcfa6f9d769ab4debf90e81240b59a4c165bab0",
+      "image": "ghcr.io/askexe/exe-dashboard:v0.9.400@sha256:d6963463d623f2e07b8b1b6cdaa5662b8a7219aa237cd315cfbabcad84f06ee1",
       "env": "DASHBOARD_IMAGE_TAG",
       "composeService": "exe-dashboard",
       "versionLockstep": false,
-      "note": "Dashboard is independently versioned after the standalone repository handoff. Preserve the verified image already pinned by the customer stack until the first AskExe/exe-dashboard release passes provenance checks. Update this digest and current-image source mappings together at cutover; exe-os version bumps must not rewrite this tag."
+      "note": "Independently published by AskExe/exe-dashboard from 0e389f1acf35b34c648a846abdc4bcca4d2cd816. Matches the verified v0.9.400 customer manifest pin; source mappings move atomically with this digest."
     },
     "exe-db": {
       "image": "pgvector/pgvector:0.8.0-pg16@sha256:a132765ec351c65111b5b675928a3a0515a466a40f97277329db8b8209ad8bc9",
@@ -110,5 +110,5 @@
   },
   "deploymentScope": "customer",
   "highGhostStack": "0.9.9",
-  "sourceVersion": "0.9.411"
+  "sourceVersion": "0.9.413"
 }