@askexenow/exe-os 0.9.413 → 0.9.415

package/dist/tui/App.js

@@ -1,32 +1,32 @@
 #!/usr/bin/env node
 import {
   getSessionPrompt
-} from "../chunk-TS4LSNRI.js";
-import "../chunk-HDQAVAV6.js";
+} from "../chunk-745M4HPM.js";
+import "../chunk-D6ORFO5E.js";
 import "../chunk-4CN3EE6U.js";
-import "../chunk-N45FAI6D.js";
+import "../chunk-EORDC4BQ.js";
 import {
   sessionScopeFilter
-} from "../chunk-GM4UEZDE.js";
-import "../chunk-PYXXL7N7.js";
+} from "../chunk-WEG7URND.js";
+import "../chunk-OEH4DGFQ.js";
+import "../chunk-EIKATSE4.js";
 import "../chunk-ZKGWHT56.js";
 import "../chunk-WT4RI36X.js";
+import "../chunk-MJCSEIFI.js";
 import "../chunk-E23LNUWJ.js";
 import "../chunk-TDF2XKLK.js";
-import "../chunk-EIKATSE4.js";
-import "../chunk-MJCSEIFI.js";
 import "../chunk-QDMZ5DX2.js";
 import "../chunk-HME6ITKV.js";
-import "../chunk-QSW5DHMZ.js";
+import "../chunk-GCMKH2PM.js";
 import "../chunk-VI4ATC6I.js";
 import "../chunk-A27Q27CT.js";
-import "../chunk-6L4VIYLZ.js";
-import "../chunk-JGBYZTWH.js";
+import "../chunk-7MCEYNWK.js";
 import "../chunk-T5SM4RXY.js";
-import "../chunk-CFFSHBQF.js";
+import "../chunk-J56UXB2X.js";
 import "../chunk-IVXELUEQ.js";
 import "../chunk-AM7S2TY6.js";
-import "../chunk-2BOLFLAU.js";
+import "../chunk-D6D7LCMR.js";
+import "../chunk-JKDYZZGD.js";
 import "../chunk-WJWRQQMS.js";
 import "../chunk-PCV52RYM.js";
 import "../chunk-BTSWFMEH.js";
@@ -35,7 +35,7 @@ import "../chunk-IMYGYIAI.js";
 import "../chunk-NLEW62VC.js";
 import "../chunk-3DAEZILW.js";
 import "../chunk-DRTJCG6B.js";
-import "../chunk-TVWYMOZ4.js";
+import "../chunk-O3HLDFKY.js";
 import "../chunk-CVYC6DUW.js";
 import "../chunk-GJV3WDWM.js";
 import "../chunk-YRUZK2QA.js";
@@ -45,22 +45,23 @@ import {
 import {
   DEFAULT_COORDINATOR_TEMPLATE_NAME,
   isCoordinatorName
-} from "../chunk-L5JFVK5T.js";
+} from "../chunk-GDZJL5GQ.js";
 import "../chunk-BBMTVAE3.js";
 import "../chunk-TKDITWDN.js";
-import "../chunk-SINIRUYZ.js";
-import "../chunk-6777GNWI.js";
-import "../chunk-7FE43JRU.js";
 import "../chunk-5YEUPUV4.js";
+import "../chunk-I4N7F54M.js";
+import "../chunk-CCFWKW2D.js";
+import "../chunk-YBVSVB6C.js";
+import "../chunk-7FE43JRU.js";
 import "../chunk-YYB5PMTK.js";
 import "../chunk-WAAGVFFN.js";
 import "../chunk-QH5ZQ5SJ.js";
 import "../chunk-ZQEJ4IX2.js";
 import "../chunk-C7GHNJPW.js";
 import "../chunk-UWGQNJIE.js";
-import "../chunk-EOWJXCYC.js";
+import "../chunk-TSZ3JCQB.js";
 import "../chunk-3R7UDPVR.js";
-import "../chunk-6D2O5SAH.js";
+import "../chunk-GTGXFYYI.js";
 import "../chunk-A7JYF4RG.js";
 import "../chunk-ARX6TAGN.js";
 import {
@@ -7459,7 +7460,7 @@ function useOrchestrator(enabled = true) {
     let cancelled = false;
     async function init() {
       try {
-        const { MultiAgentOrchestrator } = await import("../orchestrator-AGOSKPHD.js");
+        const { MultiAgentOrchestrator } = await import("../orchestrator-WJ55ZFL5.js");
         const { getCoordinatorName, isCoordinatorRole, loadEmployees } = await import("../lib/employees.js");
         const { isExeSession } = await import("../lib/tmux-routing.js");
         const { listTmuxSessions, inTmux } = await import("../lib/tmux-status.js");
@@ -7500,7 +7501,7 @@ function useOrchestrator(enabled = true) {
         setTotalInProgress(health.totalInProgress);
         try {
           const { getClient } = await import("../lib/database.js");
-          const { sessionScopeFilter: sessionScopeFilter2 } = await import("../task-scope-NLKUVCP5.js");
+          const { sessionScopeFilter: sessionScopeFilter2 } = await import("../task-scope-5OTHET2J.js");
           const client = getClient();
           const uoScope = sessionScopeFilter2();
           const result = await client.execute({
@@ -7532,7 +7533,7 @@ function useOrchestrator(enabled = true) {
   const spawnSession = useCallback5(
     async (agentId) => {
       try {
-        const { createTaskCore } = await import("../tasks-crud-NQDPLHNZ.js");
+        const { createTaskCore } = await import("../tasks-crud-ZPUVDX7W.js");
         const { ensureEmployee } = await import("../lib/tmux-routing.js");
         const { getCoordinatorName } = await import("../lib/employees.js");
         await createTaskCore({
@@ -8156,7 +8157,7 @@ function TasksView({ onBack }) {
     const { withTrace } = await import("../telemetry-43X3GT3R.js");
     return withTrace("tui.tasks.loadTasks", async () => {
       try {
-        const { loadTaskList } = await import("../tui-data-KJDWP4CB.js");
+        const { loadTaskList } = await import("../tui-data-3E66SZPC.js");
         const tasks = await loadTaskList();
         setAllTasks(
           tasks.map((task) => ({
@@ -8636,7 +8637,7 @@ function GatewayView({ onBack }) {
     setLoading(false);
     if (!state.gatewayUrl) return;
     try {
-      const { connectGateway } = await import("../gateway-client-OUDO5GGV.js");
+      const { connectGateway } = await import("../gateway-client-YD24RN7P.js");
       const client = await connectGateway(state.gatewayUrl);
       if (!client) return;
       clientRef.current = client;
@@ -8989,7 +8990,7 @@ function TeamView({ onBack, onViewSessions }) {
         let projectsByEmployee = /* @__PURE__ */ new Map();
         let currentTaskByEmployee = /* @__PURE__ */ new Map();
         try {
-          const { loadTeamBadgeCounts, loadTeamDetailMetrics } = await import("../tui-data-KJDWP4CB.js");
+          const { loadTeamBadgeCounts, loadTeamDetailMetrics } = await import("../tui-data-3E66SZPC.js");
           setBadgeInFlight(true);
           const badgeCountsPromise = loadTeamBadgeCounts();
           const detailsPromise = loadTeamDetailMetrics(roster.map((emp) => emp.name));
@@ -9355,7 +9356,7 @@ function WikiView({ onBack }) {
     }
     setSearchLoading(true);
     try {
-      const { searchWikiMemoryRows } = await import("../tui-data-KJDWP4CB.js");
+      const { searchWikiMemoryRows } = await import("../tui-data-3E66SZPC.js");
       setSearchResults(await searchWikiMemoryRows(query));
     } catch {
       setSearchResults([]);

package/dist/{tui-data-KJDWP4CB.js → tui-data-3E66SZPC.js}

@@ -1,25 +1,25 @@
 import {
   sessionScopeFilter
-} from "./chunk-GM4UEZDE.js";
-import "./chunk-PYXXL7N7.js";
+} from "./chunk-WEG7URND.js";
+import "./chunk-OEH4DGFQ.js";
+import "./chunk-EIKATSE4.js";
 import "./chunk-ZKGWHT56.js";
 import "./chunk-WT4RI36X.js";
+import "./chunk-MJCSEIFI.js";
 import "./chunk-E23LNUWJ.js";
 import "./chunk-TDF2XKLK.js";
-import "./chunk-EIKATSE4.js";
-import "./chunk-MJCSEIFI.js";
 import "./chunk-QDMZ5DX2.js";
 import "./chunk-HME6ITKV.js";
-import "./chunk-QSW5DHMZ.js";
+import "./chunk-GCMKH2PM.js";
 import "./chunk-VI4ATC6I.js";
 import "./chunk-A27Q27CT.js";
-import "./chunk-6L4VIYLZ.js";
-import "./chunk-JGBYZTWH.js";
+import "./chunk-7MCEYNWK.js";
 import "./chunk-T5SM4RXY.js";
-import "./chunk-CFFSHBQF.js";
+import "./chunk-J56UXB2X.js";
 import "./chunk-IVXELUEQ.js";
 import "./chunk-AM7S2TY6.js";
-import "./chunk-2BOLFLAU.js";
+import "./chunk-D6D7LCMR.js";
+import "./chunk-JKDYZZGD.js";
 import "./chunk-WJWRQQMS.js";
 import "./chunk-PCV52RYM.js";
 import "./chunk-BTSWFMEH.js";
@@ -28,29 +28,30 @@ import "./chunk-IMYGYIAI.js";
 import "./chunk-NLEW62VC.js";
 import "./chunk-3DAEZILW.js";
 import "./chunk-DRTJCG6B.js";
-import "./chunk-TVWYMOZ4.js";
+import "./chunk-O3HLDFKY.js";
 import "./chunk-CVYC6DUW.js";
 import "./chunk-GJV3WDWM.js";
 import "./chunk-YRUZK2QA.js";
 import "./chunk-MP2AFCGL.js";
 import {
   getClient
-} from "./chunk-L5JFVK5T.js";
+} from "./chunk-GDZJL5GQ.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-TKDITWDN.js";
-import "./chunk-SINIRUYZ.js";
-import "./chunk-6777GNWI.js";
-import "./chunk-7FE43JRU.js";
 import "./chunk-5YEUPUV4.js";
+import "./chunk-I4N7F54M.js";
+import "./chunk-CCFWKW2D.js";
+import "./chunk-YBVSVB6C.js";
+import "./chunk-7FE43JRU.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-WAAGVFFN.js";
 import "./chunk-QH5ZQ5SJ.js";
 import "./chunk-ZQEJ4IX2.js";
 import "./chunk-C7GHNJPW.js";
 import "./chunk-UWGQNJIE.js";
-import "./chunk-EOWJXCYC.js";
+import "./chunk-TSZ3JCQB.js";
 import "./chunk-3R7UDPVR.js";
-import "./chunk-6D2O5SAH.js";
+import "./chunk-GTGXFYYI.js";
 import "./chunk-A7JYF4RG.js";
 import "./chunk-ARX6TAGN.js";
 import "./chunk-MMS2HBRT.js";
@@ -184,7 +185,7 @@ async function searchWikiMemoryRows(query) {
 }
 async function loadEntityProfile(entityName) {
   const client = getClient();
-  const { getEntityByName, getRelationships, getEntityTimeline } = await import("./graph-query-7YA3YNKL.js");
+  const { getEntityByName, getRelationships, getEntityTimeline } = await import("./graph-query-U4WIQNFV.js");
   const entity = await getEntityByName(client, entityName);
   if (!entity) return null;
   const [relationships, timelineRaw] = await Promise.all([
@@ -227,7 +228,7 @@ async function loadEntityProfile(entityName) {
 }
 async function searchEntitiesList(query, limit = 20) {
   const client = getClient();
-  const { searchEntities } = await import("./graph-query-7YA3YNKL.js");
+  const { searchEntities } = await import("./graph-query-U4WIQNFV.js");
   const entities = await searchEntities(client, query, limit);
   if (entities.length === 0) return [];
   const placeholders = entities.map(() => "?").join(",");
@@ -253,7 +254,7 @@ async function searchEntitiesList(query, limit = 20) {
 }
 async function loadHotEntities(limit = 15) {
   const client = getClient();
-  const { getHotEntities } = await import("./graph-query-7YA3YNKL.js");
+  const { getHotEntities } = await import("./graph-query-U4WIQNFV.js");
   const since = new Date(Date.now() - 7 * 24 * 60 * 60 * 1e3);
   const hot = await getHotEntities(client, since, limit);
   return hot.map((h) => ({
@@ -266,7 +267,7 @@ async function loadHotEntities(limit = 15) {
 }
 async function loadGraphOverview() {
   const client = getClient();
-  const { getGraphStats } = await import("./graph-query-7YA3YNKL.js");
+  const { getGraphStats } = await import("./graph-query-U4WIQNFV.js");
   const stats = await getGraphStats(client);
   return {
     totalEntities: stats.entities,

package/dist/{update-support-UYDYMHVR.js → update-support-6PQDY3IQ.js}

@@ -2,17 +2,17 @@ import {
   persistSupportArtifact,
   supportIdSchema,
   supportVersionSchema
-} from "./chunk-O3BLL6MY.js";
+} from "./chunk-FNRVCDFM.js";
 import {
   queueSupportStatusUpdateSync
 } from "./chunk-L4ISXVC5.js";
 import "./chunk-MMRUBN3I.js";
 import "./chunk-Q3GMM6I7.js";
-import "./chunk-LSHUX7P4.js";
-import "./chunk-MOBZTIJQ.js";
+import "./chunk-D4RU4Y57.js";
+import "./chunk-QTWQGGSP.js";
 import "./chunk-CHCA3ZM2.js";
 import "./chunk-OTVEIJUQ.js";
-import "./chunk-FYSKQPTE.js";
+import "./chunk-QD3YZKZR.js";
 import "./chunk-5MOYSU5A.js";
 import {
   describeUpstreamFailure,
@@ -25,8 +25,8 @@ import {
 import "./chunk-76CJBM36.js";
 import {
   getActiveAgent
-} from "./chunk-GL5ZG72X.js";
-import "./chunk-7YX73K2R.js";
+} from "./chunk-CTZTOAHJ.js";
+import "./chunk-ALA7WYZZ.js";
 import "./chunk-5WA4DG2A.js";
 import "./chunk-WJWRQQMS.js";
 import "./chunk-PCV52RYM.js";
@@ -40,25 +40,26 @@ import "./chunk-CVYC6DUW.js";
 import "./chunk-GJV3WDWM.js";
 import "./chunk-YRUZK2QA.js";
 import "./chunk-MP2AFCGL.js";
-import "./chunk-L5JFVK5T.js";
+import "./chunk-GDZJL5GQ.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-TKDITWDN.js";
-import "./chunk-SINIRUYZ.js";
-import "./chunk-6777GNWI.js";
-import "./chunk-7FE43JRU.js";
 import "./chunk-5YEUPUV4.js";
+import "./chunk-I4N7F54M.js";
+import "./chunk-CCFWKW2D.js";
+import "./chunk-YBVSVB6C.js";
+import "./chunk-7FE43JRU.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-WAAGVFFN.js";
 import "./chunk-QH5ZQ5SJ.js";
 import "./chunk-ZQEJ4IX2.js";
 import "./chunk-C7GHNJPW.js";
-import "./chunk-4J77TCTX.js";
+import "./chunk-PMGEC42V.js";
 import {
   loadLicense,
   readCachedLicenseToken
-} from "./chunk-EOWJXCYC.js";
+} from "./chunk-TSZ3JCQB.js";
 import "./chunk-3R7UDPVR.js";
-import "./chunk-6D2O5SAH.js";
+import "./chunk-GTGXFYYI.js";
 import "./chunk-A7JYF4RG.js";
 import "./chunk-ARX6TAGN.js";
 import {

package/dist/{whatsapp-5EMPZHF5.js → whatsapp-5YLHZDFB.js}

@@ -2,8 +2,8 @@ import {
   WhatsAppAdapter,
   calculateBackoff,
   hardenBaileysAuthState
-} from "./chunk-3N24FV22.js";
-import "./chunk-4J77TCTX.js";
+} from "./chunk-REMAJEVA.js";
+import "./chunk-PMGEC42V.js";
 import "./chunk-HSGBZSCA.js";
 import "./chunk-JKKZGDLP.js";
 import "./chunk-MLKGABMK.js";

package/dist/{wiki-acl-M7BTQJBZ.js → wiki-acl-O4EOHWXE.js}

@@ -6,7 +6,7 @@ import {
   listUserWikiAccess,
   listWorkspaceUsers,
   revokeWikiAccess
-} from "./chunk-6NRZLVK3.js";
+} from "./chunk-YEUGS6CI.js";
 import "./chunk-MLKGABMK.js";
 export {
   checkWikiAccess,

package/dist/{work-claims-5CFMZTML.js → work-claims-XGC47NTW.js}

@@ -15,17 +15,18 @@ import {
   normalizeWorkRef,
   releaseClaim,
   resolveHolderSession
-} from "./chunk-BLTXAUP6.js";
+} from "./chunk-G32NPOUR.js";
 import "./chunk-C6U7XWOC.js";
 import "./chunk-E23LNUWJ.js";
 import "./chunk-BTSWFMEH.js";
-import "./chunk-L5JFVK5T.js";
+import "./chunk-GDZJL5GQ.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-TKDITWDN.js";
-import "./chunk-SINIRUYZ.js";
-import "./chunk-6777GNWI.js";
-import "./chunk-7FE43JRU.js";
 import "./chunk-5YEUPUV4.js";
+import "./chunk-I4N7F54M.js";
+import "./chunk-CCFWKW2D.js";
+import "./chunk-YBVSVB6C.js";
+import "./chunk-7FE43JRU.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-WAAGVFFN.js";
 import "./chunk-QH5ZQ5SJ.js";

package/dist/{work-state-heartbeat-7IA2DZ2E.js → work-state-heartbeat-WAVGL6QG.js}

@@ -9,7 +9,7 @@ import {
   runWorkStateTick,
   shouldWriteWorkState,
   upsertWorkState
-} from "./chunk-MOBZTIJQ.js";
+} from "./chunk-QTWQGGSP.js";
 import "./chunk-CHCA3ZM2.js";
 import "./chunk-MLKGABMK.js";
 export {

package/dist/{workflow-engine-S5JOE2YR.js → workflow-engine-E7R4STX2.js}

@@ -11,8 +11,8 @@ import {
   persistWorkflows,
   runWorkflow,
   startWorkflow
-} from "./chunk-GHYHNHDL.js";
-import "./chunk-CFO47VW4.js";
+} from "./chunk-UOLIA6N6.js";
+import "./chunk-BYNXKQG2.js";
 import "./chunk-MLKGABMK.js";
 export {
   MAX_WORKFLOW_STEPS,

package/dist/{worktree-7V4ZMF3D.js → worktree-GYH7OEVR.js}

@@ -19,15 +19,16 @@ import {
   resolveGitWithRetrySync,
   worktreeBranch,
   worktreePath
-} from "./chunk-5ZMNFSHV.js";
-import "./chunk-JGBYZTWH.js";
-import "./chunk-L5JFVK5T.js";
+} from "./chunk-H3MFCDKR.js";
+import "./chunk-D6D7LCMR.js";
+import "./chunk-GDZJL5GQ.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-TKDITWDN.js";
-import "./chunk-SINIRUYZ.js";
-import "./chunk-6777GNWI.js";
-import "./chunk-7FE43JRU.js";
 import "./chunk-5YEUPUV4.js";
+import "./chunk-I4N7F54M.js";
+import "./chunk-CCFWKW2D.js";
+import "./chunk-YBVSVB6C.js";
+import "./chunk-7FE43JRU.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-WAAGVFFN.js";
 import "./chunk-QH5ZQ5SJ.js";

package/dist/{worktree-sweep-34MXJ7S6.js → worktree-sweep-KMZ2KPSO.js}

@@ -6,16 +6,17 @@ import {
   getBranchLandedState,
   isWorktreePathOccupiedByCwd,
   sweepWorktrees
-} from "./chunk-VS7V5HNO.js";
-import "./chunk-5ZMNFSHV.js";
-import "./chunk-JGBYZTWH.js";
-import "./chunk-L5JFVK5T.js";
+} from "./chunk-JOOWL33C.js";
+import "./chunk-H3MFCDKR.js";
+import "./chunk-D6D7LCMR.js";
+import "./chunk-GDZJL5GQ.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-TKDITWDN.js";
-import "./chunk-SINIRUYZ.js";
-import "./chunk-6777GNWI.js";
-import "./chunk-7FE43JRU.js";
 import "./chunk-5YEUPUV4.js";
+import "./chunk-I4N7F54M.js";
+import "./chunk-CCFWKW2D.js";
+import "./chunk-YBVSVB6C.js";
+import "./chunk-7FE43JRU.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-WAAGVFFN.js";
 import "./chunk-QH5ZQ5SJ.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askexenow/exe-os",
-  "version": "0.9.413",
+  "version": "0.9.415",
   "description": "AI employee operating system — persistent memory, task management, and multi-agent coordination for Claude Code.",
   "license": "SEE LICENSE IN LICENSE",
   "type": "module",
@@ -34,6 +34,7 @@
     "exe-opencode": "./dist/bin/exe-launch-agent.js",
     "exe-glm": "./dist/bin/exe-launch-agent.js",
     "exe-kimi": "./dist/bin/exe-launch-agent.js",
+    "exe-muse": "./dist/bin/exe-launch-agent.js",
     "exe-start-codex": "./dist/bin/exe-start-codex.js",
     "exe-codex": "./dist/bin/exe-start-codex.js",
     "exe-start-opencode": "./dist/bin/exe-start-opencode.js",

package/release-notes.json

@@ -1,16 +1,54 @@
 {
-  "current": "0.9.413",
+  "current": "0.9.415",
   "notes": {
+    "0.9.415": {
+      "version": "0.9.415",
+      "date": "2026-10-28",
+      "features": [
+        "add Meta \"muse\" provider (#3990)",
+        "one admin erasure + export path across every store (GDPR/UK GDPR/CCPA/PDPA) (#3980)"
+      ],
+      "fixes": [
+        "worker timeout scoping, batched retention sweeps, read-worker restart (36747403 follow-ups; merge after #3987) (#3988)",
+        "keep heavy DB work off the event loop; snapshot-consistent encrypted backups (36747403) (#3987)",
+        "persisted telemetry opt-out, notice-before-upload, no email in telemetry, 12-month purge (#3986)",
+        "align customer defaults with signed 0.9.79"
+      ],
+      "security": [],
+      "other": [
+        "release: v0.9.415 (#3991)",
+        "make 12 flaky test files deterministic + 30-day suite health report (#3989)",
+        "document isolated demo Wiki image updates (#3985)",
+        "release(stack): sign app-only 0.9.81 canary manifest (#3984)",
+        "release(stack): sign Auth-only 0.9.80 canary manifest (#3983)",
+        "Warm bounded public Wiki startup assets from shared navigation (#3981)",
+        "release(stack): adopt verified exe-os 0.9.414 in 0.9.79"
+      ],
+      "migration_notes": []
+    },
+    "0.9.414": {
+      "version": "0.9.414",
+      "date": "2026-10-15",
+      "features": [],
+      "fixes": [
+        "Build the core release image once, retain its provenance, verify and scan its immutable local index, then publish that same index without rebuilding.",
+        "Allow 90 minutes for core image builds and uploads after verified uploads twice exceeded the former 45-minute job limit. All signature, digest, image identity, vulnerability and provenance gates remain enabled.",
+        "Retain CLI 0.9.412 legacy-upgrade repairs and 0.9.413 dependency security fixes. A signed stack adopts the core image only after publication and native data-preservation checks."
+      ],
+      "security": [],
+      "other": [],
+      "migration_notes": []
+    },
     "0.9.413": {
       "version": "0.9.413",
-      "date": "2026-10-14",
+      "date": "2026-10-15",
       "features": [],
       "fixes": [
-        "use public HTTPS registry URLs in package-lock"
-      ],
-      "security": [
-        "update package-lock and Docker runtime security packages"
+        "Update the MCP SDK, gRPC, proxy address parser, optional image processing, brace expansion and Git helper dependencies to patched releases.",
+        "Patch npm 11 runtime embedded HTTP and brace-expansion packages while preserving its supported install/update behavior. The core image must pass the existing HIGH/CRITICAL vulnerability scan before publication.",
+        "Retain the legacy-upgrade fixes from CLI 0.9.412 and the accepted application pins in stack 0.9.78. A later signed stack adopts this core image only after its digest and release provenance are verified."
       ],
+      "security": [],
       "other": [],
       "migration_notes": []
     },
@@ -40,36 +78,6 @@
       "security": [],
       "other": [],
       "migration_notes": []
-    },
-    "0.9.370": {
-      "version": "0.9.370",
-      "date": "2026-08-14",
-      "features": [
-        "irreversible data operations now refuse to run without a verified restorable backup — the check is mechanical, not a reminder in a runbook (#724)"
-      ],
-      "fixes": [
-        "support notes and comments are stored whole or refused outright, never silently truncated mid-word — validation and storage caps are now derived from one constant so they cannot drift apart again (#720)",
-        "completing a reminder now completes the one you named, rather than one that merely quotes it (#719)",
-        "--force-build refuses when it cannot honour the bypass, instead of reporting a bypass it never performed (#722)",
-        "the afk ticker resolves a real timeout binary instead of exiting 127 on systems without GNU coreutils (#721)"
-      ],
-      "security": [],
-      "other": [],
-      "migration_notes": []
-    },
-    "0.9.369": {
-      "version": "0.9.369",
-      "date": "2026-08-14",
-      "features": [
-        "a leaked API key can now actually be killed: owner-facing rotate/revoke plus an admin revoke, with the revoked key rejected on the very next request (#717)"
-      ],
-      "fixes": [
-        "reissuing an API key used to retire nothing — the paths that mailed you a new key wrote only the key column and left the OLD key's hash in place, so both keys kept working indefinitely and 'rotation' revoked nothing. Both credential columns now move together (#717)",
-        "revocation also cuts off the 30-day license token, which previously kept working on the support plane without re-checking the key (#717)"
-      ],
-      "security": [],
-      "other": [],
-      "migration_notes": []
     }
   }
 }

package/stack.release.json

@@ -4,8 +4,8 @@
   "repo": "AskExe/exe-os",
   "service": "exe-os",
   "packageName": "@askexenow/exe-os",
-  "version": "0.9.413",
-  "image": "ghcr.io/askexe/exe-os:v0.9.413",
+  "version": "0.9.415",
+  "image": "ghcr.io/askexe/exe-os:v0.9.415",
   "imageEnv": "EXE_OS_IMAGE_TAG",
   "imageDigestTodo": "The top-level image names the forthcoming exe-os build and receives its digest after publication. Independently released components, including dashboard, retain verified digest pins; stack publication validates every service pin.",
   "components": {
@@ -110,5 +110,5 @@
   },
   "deploymentScope": "customer",
   "highGhostStack": "0.9.9",
-  "sourceVersion": "0.9.413"
+  "sourceVersion": "0.9.415"
 }