@askexenow/exe-os 0.9.414 → 0.9.415

package/deploy/compose/.env.customer.example

@@ -181,7 +181,7 @@ WIKI_HOST_PORT=3001
 EXE_SSO_COOKIE_NAME=exe_access_token
 
 # --- exe-os ---
-EXE_OS_IMAGE_TAG=update.askexe.com/askexe/exe-os:v0.9.396@sha256:faca74fa9207d79b6156d64d737247b58b3ba6083c669ff23e20763059815554
+EXE_OS_IMAGE_TAG=update.askexe.com/askexe/exe-os:v0.9.414@sha256:f71a589444b325bbeca2699c80d4361b5b0381f4b2f52b7a9512c6a197c490d6
 EXED_MCP_TOKEN=CHANGEME_EXED_MCP_TOKEN
 EXED_DEVICE_ID=CHANGEME_DEVICE_ID
 EXE_MCP_HOST_BIND=127.0.0.1

package/deploy/compose/.env.default

@@ -15,7 +15,7 @@ EXE_LICENSE_KEY=CHANGEME_EXE_LICENSE_KEY
 # ------------------------------------------------------------------
 CRM_IMAGE_TAG=update.askexe.com/askexe/exe-crm:v0.9.75@sha256:9ac890b74e8e31cb91d7aee1bba5a604e8494372d7aa71590ced76b22424a6f6
 WIKI_IMAGE_TAG=update.askexe.com/askexe/exe-wiki:v0.9.42@sha256:af7aaa0669788f5e593f04b3b89691f9c7a909067c9895f78e288f6bcd72d5dc
-EXE_OS_IMAGE_TAG=update.askexe.com/askexe/exe-os:v0.9.396@sha256:faca74fa9207d79b6156d64d737247b58b3ba6083c669ff23e20763059815554
+EXE_OS_IMAGE_TAG=update.askexe.com/askexe/exe-os:v0.9.414@sha256:f71a589444b325bbeca2699c80d4361b5b0381f4b2f52b7a9512c6a197c490d6
 GATEWAY_IMAGE_TAG=update.askexe.com/askexe/exe-gateway:v2026.08.07-c15f093-stamped@sha256:1bc11a2a0ad1f3929d59d2685696f22a72042b9fca9c75e15c02dc7d3c640105
 
 # ------------------------------------------------------------------

package/deploy/compose/.env.example

@@ -214,7 +214,7 @@ WIKI_HOST_PORT=3001
 EXE_SSO_COOKIE_NAME=exe_access_token
 
 # --- exe-os ---
-EXE_OS_IMAGE_TAG=ghcr.io/askexe/exe-os:v0.9.396@sha256:faca74fa9207d79b6156d64d737247b58b3ba6083c669ff23e20763059815554
+EXE_OS_IMAGE_TAG=ghcr.io/askexe/exe-os:v0.9.414@sha256:f71a589444b325bbeca2699c80d4361b5b0381f4b2f52b7a9512c6a197c490d6
 
 # Infra image pins — manifest-derived. Compose has no fallback default for
 # these: a missing pin ABORTS the deploy instead of substituting an old image.

package/deploy/compose/docker-compose.yml

@@ -768,7 +768,7 @@ services:
       # overridden back to exeOsMcp — see bug c604df37 above before doing that;
       # the spawn args below currently point at the wrong CLI entrypoint.
       EXE_OS_MCP_COMMAND: ${WIKI_EXE_OS_MCP_COMMAND:-npx}
-      EXE_OS_MCP_ARGS: ${WIKI_EXE_OS_MCP_ARGS:--y @askexenow/exe-os@${WIKI_EXE_OS_NPM_VERSION:-0.9.412} mcp}
+      EXE_OS_MCP_ARGS: ${WIKI_EXE_OS_MCP_ARGS:--y @askexenow/exe-os@${WIKI_EXE_OS_NPM_VERSION:-0.9.414} mcp}
       BRANDING_CONFIG_PATH: /app/branding.json
     ports:
       - "127.0.0.1:${WIKI_HOST_PORT:-3001}:3001"

package/deploy/stack-manifests/v0.9.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "latest": "0.9.78",
+  "latest": "0.9.79",
   "stacks": {
     "0.9.0": {
       "version": "0.9.0",
@@ -8378,11 +8378,408 @@
         }
       },
       "rolloutStage": "ga"
+    },
+    "0.9.79": {
+      "version": "0.9.79",
+      "releasedAt": "2026-10-15T01:52:46.096Z",
+      "notes": "Security refresh for exe-os core and its MCP, Git, networking, image, and bundled npm dependencies. CLI 0.9.414 retains the tested legacy 0.9.27 upgrade repairs. The core pin identifies the exact image index that passed pre-push vulnerability and source checks, registry digest equality, and post-push provenance verification, with its attestation retained. All other service pins match 0.9.78, including Wiki 0.9.42 private HTML/CSS/JS reports. Signature, digest, delivery, and authorization checks remain enabled.",
+      "npmVersion": "0.9.414",
+      "breakingChanges": [],
+      "services": {
+        "exe-db": {
+          "image": "update.askexe.com/askexe/pgvector:0.8.0-pg16@sha256:a132765ec351c65111b5b675928a3a0515a466a40f97277329db8b8209ad8bc9",
+          "env": "EXE_DB_IMAGE",
+          "composeService": "exe-db",
+          "required": true,
+          "category": "core",
+          "description": "Postgres (pgvector) — digest-pinned (bug 32d6e02f; was tag-only in 0.9.25, regressed from 0.9.24)"
+        },
+        "exe-os": {
+          "image": "update.askexe.com/askexe/exe-os:v0.9.414@sha256:f71a589444b325bbeca2699c80d4361b5b0381f4b2f52b7a9512c6a197c490d6",
+          "env": "EXE_OS_IMAGE_TAG",
+          "composeService": "exe-os",
+          "healthUrl": "http://127.0.0.1:8765/health",
+          "required": true,
+          "category": "core",
+          "description": "exe-os daemon + MCP server"
+        },
+        "crm": {
+          "image": "update.askexe.com/askexe/exe-crm:v0.9.75@sha256:9ac890b74e8e31cb91d7aee1bba5a604e8494372d7aa71590ced76b22424a6f6",
+          "env": "CRM_IMAGE_TAG",
+          "composeService": "exe-crm",
+          "healthUrl": "http://127.0.0.1:3000/healthz",
+          "category": "app",
+          "gitSha": "87b50b8ca7eb3a451251aeb133e98bff20e7f333",
+          "description": "Central GoTrue authentication and same-host Exe/DEMO workspace switching for CRM web and worker."
+        },
+        "wiki": {
+          "image": "update.askexe.com/askexe/exe-wiki:v0.9.42@sha256:af7aaa0669788f5e593f04b3b89691f9c7a909067c9895f78e288f6bcd72d5dc",
+          "env": "WIKI_IMAGE_TAG",
+          "composeService": "exe-wiki",
+          "healthUrl": "http://127.0.0.1:3001/api/ping",
+          "category": "app",
+          "description": "Central hosted authentication and recovery with server-validated shared sessions, membership enforcement, and no product-local credential form.",
+          "gitSha": "ff61711880ce2e52c9e9ee1eae6118e9761322cc"
+        },
+        "gateway": {
+          "image": "update.askexe.com/askexe/exe-gateway:v2026.08.07-c15f093-stamped@sha256:1bc11a2a0ad1f3929d59d2685696f22a72042b9fca9c75e15c02dc7d3c640105",
+          "env": "GATEWAY_IMAGE_TAG",
+          "composeService": "exe-gateway",
+          "healthUrl": "http://127.0.0.1:3100/health",
+          "category": "app",
+          "description": "WhatsApp/messaging gateway — provenance-stamped rebuild of main (outbound message persistence fix); pinned by digest, dated immutable tag.",
+          "gitSha": "c15f093a0f59730bd5c2c73791ff77059dfa7cc1"
+        },
+        "monitorAgent": {
+          "image": "update.askexe.com/askexe/exe-monitor-agent:v2026.08.09-10660eb4-stamped@sha256:29fbd445f79484df04f000603e4ff445e76f0380f86d687a0033e3a0ef7d1b7a",
+          "env": "MONITOR_AGENT_IMAGE_TAG",
+          "composeService": "exe-monitor-agent",
+          "category": "monitoring",
+          "gitSha": "10660eb4abdeffbcba2aad13549aa58e208ac7a3"
+        },
+        "monitorHub": {
+          "image": "update.askexe.com/askexe/exe-monitor-hub:v2026.08.09-10660eb4-stamped@sha256:c9a9218c2713b8dffea7e1cf8c0702a614657d311a7a4e821c6a543bab29bb97",
+          "env": "MONITOR_HUB_IMAGE_TAG",
+          "composeService": "exe-monitor-hub",
+          "healthUrl": "http://127.0.0.1:8090/api/health",
+          "category": "monitoring",
+          "gitSha": "10660eb4abdeffbcba2aad13549aa58e208ac7a3"
+        },
+        "auth": {
+          "image": "update.askexe.com/askexe/exe-auth:v0.6.13@sha256:a21ed370706b7ffce200af782471511402ca5dc3e3fd0fcc51996f08dc79a981",
+          "env": "AUTH_IMAGE_TAG",
+          "composeService": "exe-auth",
+          "healthUrl": "http://127.0.0.1:3300/",
+          "category": "auth",
+          "description": "GoTrue SSO and privileged license authority bridge; stateless auth proxy.",
+          "gitSha": "133705a4ada5b900a754aab4cd5fca4c56d55fad"
+        },
+        "erp": {
+          "image": "update.askexe.com/askexe/exe-erp:v0.3.24@sha256:b0f38298da1818931caf08aec52ba87f75687c4760c08863bb7892b1ca6b70a9",
+          "env": "ERP_IMAGE_TAG",
+          "composeService": "exe-erp",
+          "healthUrl": "http://127.0.0.1:8069/api/method/ping",
+          "healthHost": "${ERP_SITE_NAME:-erp.localhost}",
+          "required": false,
+          "category": "app",
+          "description": "Enterprise Resource Planning with central hosted authentication and subject-bound organization admission.",
+          "gitSha": "667fe09964bec1169f0b9945df4451c79a6e4c87"
+        },
+        "gotrue": {
+          "image": "update.askexe.com/askexe/gotrue:v2.172.1@sha256:b0dd7aa28dd1f9a8bd31f136c8b912661f701d9b863171e5843cb08f18f49de4",
+          "composeService": "gotrue",
+          "healthUrl": "http://127.0.0.1:9999/health",
+          "category": "infra"
+        },
+        "redis": {
+          "image": "update.askexe.com/askexe/redis:7.4-alpine@sha256:6ab0b6e7381779332f97b8ca76193e45b0756f38d4c0dcda72dbb3c32061ab99",
+          "composeService": "redis",
+          "category": "infra"
+        },
+        "clickhouse": {
+          "image": "update.askexe.com/askexe/clickhouse-server:24.8.4.13-alpine@sha256:88a45f9e328549b2579256c46ee38e5c0e25ae58303d9eb6d9c7ed8d6d2bbf3c",
+          "composeService": "clickhouse",
+          "category": "infra"
+        },
+        "cloudflared": {
+          "image": "update.askexe.com/askexe/cloudflared:2026-07@sha256:ba461b8aa9c042156dbd39c38657fe7431bafa063220eab8d5330a523863da9f",
+          "composeService": "cloudflared",
+          "category": "infra"
+        },
+        "exe-sso-edge": {
+          "image": "update.askexe.com/askexe/nginx:alpine@sha256:20316569d8f81a160065d7d2a5eeffc7ca97d79022462ee255fd23fa103a6b5c",
+          "composeService": "exe-sso-edge",
+          "category": "infra"
+        },
+        "exe-otel-collector": {
+          "image": "update.askexe.com/askexe/otel-collector-contrib:0.114.0@sha256:37fa87091cfaaec7234a27e4e395a40c31c2bfaea97a349a4afef6d9e9681197",
+          "composeService": "exe-otel-collector",
+          "category": "infra",
+          "env": "OTEL_COLLECTOR_IMAGE"
+        },
+        "dashboard": {
+          "image": "update.askexe.com/askexe/exe-dashboard:v0.9.400@sha256:d6963463d623f2e07b8b1b6cdaa5662b8a7219aa237cd315cfbabcad84f06ee1",
+          "env": "DASHBOARD_IMAGE_TAG",
+          "composeService": "exe-dashboard",
+          "healthUrl": "http://127.0.0.1:3301/health",
+          "required": false,
+          "category": "optional",
+          "description": "Customer dashboard at dashboard.<apex> — credits, usage, API keys, billing",
+          "gitSha": "0e389f1acf35b34c648a846abdc4bcca4d2cd816"
+        }
+      },
+      "rolloutStage": "ga"
+    },
+    "0.9.80": {
+      "version": "0.9.80",
+      "releasedAt": "2026-10-17T02:58:35.533Z",
+      "npmVersion": "0.9.409",
+      "notes": "Auth-only canary for the reviewed transient sign-in UI fix. Clone live stack 0.9.76; retain every non-Auth service pin and signed live Compose hashes. Auth v0.6.14 source 89f0417790a2b04919fa7941229cb6993f483ef5, qualified by exact-source CI38996388928. No Core, native-admission, or navigation candidate promotion.",
+      "services": {
+        "exe-db": {
+          "image": "update.askexe.com/askexe/pgvector:0.8.0-pg16@sha256:a132765ec351c65111b5b675928a3a0515a466a40f97277329db8b8209ad8bc9",
+          "env": "EXE_DB_IMAGE",
+          "composeService": "exe-db",
+          "required": true,
+          "category": "core",
+          "description": "Postgres (pgvector) — digest-pinned (bug 32d6e02f; was tag-only in 0.9.25, regressed from 0.9.24)"
+        },
+        "exe-os": {
+          "image": "update.askexe.com/askexe/exe-os:v0.9.396@sha256:faca74fa9207d79b6156d64d737247b58b3ba6083c669ff23e20763059815554",
+          "env": "EXE_OS_IMAGE_TAG",
+          "composeService": "exe-os",
+          "healthUrl": "http://127.0.0.1:8765/health",
+          "required": true,
+          "category": "core",
+          "description": "exe-os daemon + MCP server"
+        },
+        "crm": {
+          "image": "update.askexe.com/askexe/exe-crm:v0.9.75@sha256:9ac890b74e8e31cb91d7aee1bba5a604e8494372d7aa71590ced76b22424a6f6",
+          "env": "CRM_IMAGE_TAG",
+          "composeService": "exe-crm",
+          "healthUrl": "http://127.0.0.1:3000/healthz",
+          "category": "app",
+          "gitSha": "87b50b8ca7eb3a451251aeb133e98bff20e7f333",
+          "description": "Central GoTrue authentication and same-host Exe/DEMO workspace switching for CRM web and worker."
+        },
+        "wiki": {
+          "image": "update.askexe.com/askexe/exe-wiki:v0.9.41@sha256:1c3d3284fe8b6f2553dd89f8df8b0707350d9f789cde23b1f0cd728c9bd3ed5c",
+          "env": "WIKI_IMAGE_TAG",
+          "composeService": "exe-wiki",
+          "healthUrl": "http://127.0.0.1:3001/api/ping",
+          "category": "app",
+          "description": "Central hosted authentication and recovery with server-validated shared sessions, membership enforcement, and no product-local credential form.",
+          "gitSha": "9dbff67743823b2fe230e421a59c856c70aee745"
+        },
+        "gateway": {
+          "image": "update.askexe.com/askexe/exe-gateway:v2026.08.07-c15f093-stamped@sha256:1bc11a2a0ad1f3929d59d2685696f22a72042b9fca9c75e15c02dc7d3c640105",
+          "env": "GATEWAY_IMAGE_TAG",
+          "composeService": "exe-gateway",
+          "healthUrl": "http://127.0.0.1:3100/health",
+          "category": "app",
+          "description": "WhatsApp/messaging gateway — provenance-stamped rebuild of main (outbound message persistence fix); pinned by digest, dated immutable tag.",
+          "gitSha": "c15f093a0f59730bd5c2c73791ff77059dfa7cc1"
+        },
+        "monitorAgent": {
+          "image": "update.askexe.com/askexe/exe-monitor-agent:v2026.08.09-10660eb4-stamped@sha256:29fbd445f79484df04f000603e4ff445e76f0380f86d687a0033e3a0ef7d1b7a",
+          "env": "MONITOR_AGENT_IMAGE_TAG",
+          "composeService": "exe-monitor-agent",
+          "category": "monitoring",
+          "gitSha": "10660eb4abdeffbcba2aad13549aa58e208ac7a3"
+        },
+        "monitorHub": {
+          "image": "update.askexe.com/askexe/exe-monitor-hub:v2026.08.09-10660eb4-stamped@sha256:c9a9218c2713b8dffea7e1cf8c0702a614657d311a7a4e821c6a543bab29bb97",
+          "env": "MONITOR_HUB_IMAGE_TAG",
+          "composeService": "exe-monitor-hub",
+          "healthUrl": "http://127.0.0.1:8090/api/health",
+          "category": "monitoring",
+          "gitSha": "10660eb4abdeffbcba2aad13549aa58e208ac7a3"
+        },
+        "auth": {
+          "image": "update.askexe.com/askexe/exe-auth:v0.6.14@sha256:19d8dc8e1c0033a66a696ae63ab22f1c6130b5b985d4edfc3b34917173294abf",
+          "env": "AUTH_IMAGE_TAG",
+          "composeService": "exe-auth",
+          "healthUrl": "http://127.0.0.1:3300/",
+          "category": "auth",
+          "description": "GoTrue SSO and privileged license authority bridge; stateless auth proxy.",
+          "gitSha": "89f0417790a2b04919fa7941229cb6993f483ef5"
+        },
+        "erp": {
+          "image": "update.askexe.com/askexe/exe-erp:v0.3.24@sha256:b0f38298da1818931caf08aec52ba87f75687c4760c08863bb7892b1ca6b70a9",
+          "env": "ERP_IMAGE_TAG",
+          "composeService": "exe-erp",
+          "healthUrl": "http://127.0.0.1:8069/api/method/ping",
+          "healthHost": "localhost",
+          "required": false,
+          "category": "app",
+          "description": "Enterprise Resource Planning with central hosted authentication and subject-bound organization admission.",
+          "gitSha": "667fe09964bec1169f0b9945df4451c79a6e4c87"
+        },
+        "gotrue": {
+          "image": "update.askexe.com/askexe/gotrue:v2.172.1@sha256:b0dd7aa28dd1f9a8bd31f136c8b912661f701d9b863171e5843cb08f18f49de4",
+          "composeService": "gotrue",
+          "healthUrl": "http://127.0.0.1:9999/health",
+          "category": "infra"
+        },
+        "redis": {
+          "image": "update.askexe.com/askexe/redis:7.4-alpine@sha256:6ab0b6e7381779332f97b8ca76193e45b0756f38d4c0dcda72dbb3c32061ab99",
+          "composeService": "redis",
+          "category": "infra"
+        },
+        "clickhouse": {
+          "image": "update.askexe.com/askexe/clickhouse-server:24.8.4.13-alpine@sha256:88a45f9e328549b2579256c46ee38e5c0e25ae58303d9eb6d9c7ed8d6d2bbf3c",
+          "composeService": "clickhouse",
+          "category": "infra"
+        },
+        "cloudflared": {
+          "image": "update.askexe.com/askexe/cloudflared:2026-07@sha256:ba461b8aa9c042156dbd39c38657fe7431bafa063220eab8d5330a523863da9f",
+          "composeService": "cloudflared",
+          "category": "infra"
+        },
+        "exe-sso-edge": {
+          "image": "update.askexe.com/askexe/nginx:alpine@sha256:20316569d8f81a160065d7d2a5eeffc7ca97d79022462ee255fd23fa103a6b5c",
+          "composeService": "exe-sso-edge",
+          "category": "infra"
+        },
+        "exe-otel-collector": {
+          "image": "update.askexe.com/askexe/otel-collector-contrib:0.114.0@sha256:37fa87091cfaaec7234a27e4e395a40c31c2bfaea97a349a4afef6d9e9681197",
+          "composeService": "exe-otel-collector",
+          "category": "infra"
+        },
+        "dashboard": {
+          "image": "update.askexe.com/askexe/exe-dashboard:v0.9.399@sha256:59a0adab656e857039c05041f78d32a1dfee8b9bcf6c089b6a12aec48a990db1",
+          "env": "DASHBOARD_IMAGE_TAG",
+          "composeService": "exe-dashboard",
+          "healthUrl": "http://127.0.0.1:3301/health",
+          "required": false,
+          "category": "optional",
+          "description": "Customer dashboard at dashboard.<apex> — credits, usage, API keys, billing",
+          "gitSha": "b36ca479d0f203b5a4e356743e571732a1f9339b"
+        }
+      },
+      "rolloutStage": "canary",
+      "config": {
+        "composeSha256": "220b251375f372107e8d8d54a9c3e4ceab1f57aae80f4babf2933c3887532263",
+        "composeOverrideSha256": "af295ca2f75b85788416e4df51cab86d8b773bf4cafe6cf6df9c7c26b9a42d6d"
+      }
+    },
+    "0.9.81": {
+      "version": "0.9.81",
+      "releasedAt": "2026-10-17T21:01:41.675Z",
+      "npmVersion": "0.9.409",
+      "notes": "App-only canary for reviewed CRM/Wiki/ERP session transitions and bounded asset warming. Clone signed live stack 0.9.80; retain Auth, Dashboard, Core, every other service pin, and signed live Compose hashes. CRM v0.9.77 source be6ed9ea7a6b2e6893c2a39072cb57033f08d848 (release39065277058), Wiki v0.9.44 source 063d8896743ef5be0584daeb72ca24292f2aa9c9 (release39063088845), ERP v0.3.28 source c5b368ac74da08592c26bcbe15afdfb7f5828d26 (release39067432269); all actual images qualified. No Core, SDK, memory, or native-admission promotion.",
+      "services": {
+        "exe-db": {
+          "image": "update.askexe.com/askexe/pgvector:0.8.0-pg16@sha256:a132765ec351c65111b5b675928a3a0515a466a40f97277329db8b8209ad8bc9",
+          "env": "EXE_DB_IMAGE",
+          "composeService": "exe-db",
+          "required": true,
+          "category": "core",
+          "description": "Postgres (pgvector) — digest-pinned (bug 32d6e02f; was tag-only in 0.9.25, regressed from 0.9.24)"
+        },
+        "exe-os": {
+          "image": "update.askexe.com/askexe/exe-os:v0.9.396@sha256:faca74fa9207d79b6156d64d737247b58b3ba6083c669ff23e20763059815554",
+          "env": "EXE_OS_IMAGE_TAG",
+          "composeService": "exe-os",
+          "healthUrl": "http://127.0.0.1:8765/health",
+          "required": true,
+          "category": "core",
+          "description": "exe-os daemon + MCP server"
+        },
+        "crm": {
+          "image": "update.askexe.com/askexe/exe-crm:v0.9.77@sha256:0c547f52309e8af64f844060294b5473e5ccc731c34d34377bf8ef54e83bff79",
+          "env": "CRM_IMAGE_TAG",
+          "composeService": "exe-crm",
+          "healthUrl": "http://127.0.0.1:3000/healthz",
+          "category": "app",
+          "gitSha": "be6ed9ea7a6b2e6893c2a39072cb57033f08d848",
+          "description": "Central GoTrue authentication and same-host Exe/DEMO workspace switching for CRM web and worker."
+        },
+        "wiki": {
+          "image": "update.askexe.com/askexe/exe-wiki:v0.9.44@sha256:15397ce844141cc7d44ac6086de7bf5848e3bc3af54762c9a0a3fe735a284d94",
+          "env": "WIKI_IMAGE_TAG",
+          "composeService": "exe-wiki",
+          "healthUrl": "http://127.0.0.1:3001/api/ping",
+          "category": "app",
+          "description": "Central hosted authentication and recovery with server-validated shared sessions, membership enforcement, and no product-local credential form.",
+          "gitSha": "063d8896743ef5be0584daeb72ca24292f2aa9c9"
+        },
+        "gateway": {
+          "image": "update.askexe.com/askexe/exe-gateway:v2026.08.07-c15f093-stamped@sha256:1bc11a2a0ad1f3929d59d2685696f22a72042b9fca9c75e15c02dc7d3c640105",
+          "env": "GATEWAY_IMAGE_TAG",
+          "composeService": "exe-gateway",
+          "healthUrl": "http://127.0.0.1:3100/health",
+          "category": "app",
+          "description": "WhatsApp/messaging gateway — provenance-stamped rebuild of main (outbound message persistence fix); pinned by digest, dated immutable tag.",
+          "gitSha": "c15f093a0f59730bd5c2c73791ff77059dfa7cc1"
+        },
+        "monitorAgent": {
+          "image": "update.askexe.com/askexe/exe-monitor-agent:v2026.08.09-10660eb4-stamped@sha256:29fbd445f79484df04f000603e4ff445e76f0380f86d687a0033e3a0ef7d1b7a",
+          "env": "MONITOR_AGENT_IMAGE_TAG",
+          "composeService": "exe-monitor-agent",
+          "category": "monitoring",
+          "gitSha": "10660eb4abdeffbcba2aad13549aa58e208ac7a3"
+        },
+        "monitorHub": {
+          "image": "update.askexe.com/askexe/exe-monitor-hub:v2026.08.09-10660eb4-stamped@sha256:c9a9218c2713b8dffea7e1cf8c0702a614657d311a7a4e821c6a543bab29bb97",
+          "env": "MONITOR_HUB_IMAGE_TAG",
+          "composeService": "exe-monitor-hub",
+          "healthUrl": "http://127.0.0.1:8090/api/health",
+          "category": "monitoring",
+          "gitSha": "10660eb4abdeffbcba2aad13549aa58e208ac7a3"
+        },
+        "auth": {
+          "image": "update.askexe.com/askexe/exe-auth:v0.6.14@sha256:19d8dc8e1c0033a66a696ae63ab22f1c6130b5b985d4edfc3b34917173294abf",
+          "env": "AUTH_IMAGE_TAG",
+          "composeService": "exe-auth",
+          "healthUrl": "http://127.0.0.1:3300/",
+          "category": "auth",
+          "description": "GoTrue SSO and privileged license authority bridge; stateless auth proxy.",
+          "gitSha": "89f0417790a2b04919fa7941229cb6993f483ef5"
+        },
+        "erp": {
+          "image": "update.askexe.com/askexe/exe-erp:v0.3.28@sha256:0752f6a762b857ec90919bea1078a360878e9bcf1f682d9ec3a20aad9abef4ac",
+          "env": "ERP_IMAGE_TAG",
+          "composeService": "exe-erp",
+          "healthUrl": "http://127.0.0.1:8069/api/method/ping",
+          "healthHost": "localhost",
+          "required": false,
+          "category": "app",
+          "description": "Enterprise Resource Planning with central hosted authentication and subject-bound organization admission.",
+          "gitSha": "c5b368ac74da08592c26bcbe15afdfb7f5828d26"
+        },
+        "gotrue": {
+          "image": "update.askexe.com/askexe/gotrue:v2.172.1@sha256:b0dd7aa28dd1f9a8bd31f136c8b912661f701d9b863171e5843cb08f18f49de4",
+          "composeService": "gotrue",
+          "healthUrl": "http://127.0.0.1:9999/health",
+          "category": "infra"
+        },
+        "redis": {
+          "image": "update.askexe.com/askexe/redis:7.4-alpine@sha256:6ab0b6e7381779332f97b8ca76193e45b0756f38d4c0dcda72dbb3c32061ab99",
+          "composeService": "redis",
+          "category": "infra"
+        },
+        "clickhouse": {
+          "image": "update.askexe.com/askexe/clickhouse-server:24.8.4.13-alpine@sha256:88a45f9e328549b2579256c46ee38e5c0e25ae58303d9eb6d9c7ed8d6d2bbf3c",
+          "composeService": "clickhouse",
+          "category": "infra"
+        },
+        "cloudflared": {
+          "image": "update.askexe.com/askexe/cloudflared:2026-07@sha256:ba461b8aa9c042156dbd39c38657fe7431bafa063220eab8d5330a523863da9f",
+          "composeService": "cloudflared",
+          "category": "infra"
+        },
+        "exe-sso-edge": {
+          "image": "update.askexe.com/askexe/nginx:alpine@sha256:20316569d8f81a160065d7d2a5eeffc7ca97d79022462ee255fd23fa103a6b5c",
+          "composeService": "exe-sso-edge",
+          "category": "infra"
+        },
+        "exe-otel-collector": {
+          "image": "update.askexe.com/askexe/otel-collector-contrib:0.114.0@sha256:37fa87091cfaaec7234a27e4e395a40c31c2bfaea97a349a4afef6d9e9681197",
+          "composeService": "exe-otel-collector",
+          "category": "infra"
+        },
+        "dashboard": {
+          "image": "update.askexe.com/askexe/exe-dashboard:v0.9.399@sha256:59a0adab656e857039c05041f78d32a1dfee8b9bcf6c089b6a12aec48a990db1",
+          "env": "DASHBOARD_IMAGE_TAG",
+          "composeService": "exe-dashboard",
+          "healthUrl": "http://127.0.0.1:3301/health",
+          "required": false,
+          "category": "optional",
+          "description": "Customer dashboard at dashboard.<apex> — credits, usage, API keys, billing",
+          "gitSha": "b36ca479d0f203b5a4e356743e571732a1f9339b"
+        }
+      },
+      "rolloutStage": "canary",
+      "config": {
+        "composeSha256": "220b251375f372107e8d8d54a9c3e4ceab1f57aae80f4babf2933c3887532263",
+        "composeOverrideSha256": "af295ca2f75b85788416e4df51cab86d8b773bf4cafe6cf6df9c7c26b9a42d6d"
+      }
     }
   },
   "signature": {
     "keyId": "exe-stack-1",
     "alg": "ed25519",
-    "signature": "gRov8680kM1tJ8fHILxtmpKgQrSNPTCp1xUONk5F1fCrdapSQzOH41PEZtlmZ1fozP9nG5q/sahTP4G3eGTFDw=="
+    "signature": "e30ETK0H0fSlG6rgFRDJSFQdqO/ycsgnOc0e5QLCA41GKDD8ZQ+v8hNJBp/g1LY68foIpa/Wjt5FTpT1wJpFBA=="
   }
 }

package/dist/.dist-verified.json

@@ -1,6 +1,6 @@
 {
   "version": 1,
-  "verified_at": "2026-10-15T00:18:47.533Z",
-  "manifest_sha256": "56005af9f0940d23ec8e5b5e40a99c5de60759447f48e43485710e4a136445c8",
-  "package_version": "0.9.414"
+  "verified_at": "2026-10-28T06:58:20.800Z",
+  "manifest_sha256": "aeba9cfd6b2d17090aae2abca66861df3913e987f0cf30bdafccb801a1975d93",
+  "package_version": "0.9.415"
 }

package/dist/{active-agent-MHWQDMML.js → active-agent-LB7T3TLZ.js}

@@ -8,18 +8,19 @@ import {
   resolveAgentAttribution,
   resolveAgentForPayload,
   writeActiveAgent
-} from "./chunk-GL5ZG72X.js";
-import "./chunk-7YX73K2R.js";
+} from "./chunk-CTZTOAHJ.js";
+import "./chunk-ALA7WYZZ.js";
 import "./chunk-5WA4DG2A.js";
 import "./chunk-CVYC6DUW.js";
 import "./chunk-GJV3WDWM.js";
-import "./chunk-L5JFVK5T.js";
+import "./chunk-GDZJL5GQ.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-TKDITWDN.js";
-import "./chunk-SINIRUYZ.js";
-import "./chunk-6777GNWI.js";
-import "./chunk-7FE43JRU.js";
 import "./chunk-5YEUPUV4.js";
+import "./chunk-I4N7F54M.js";
+import "./chunk-CCFWKW2D.js";
+import "./chunk-YBVSVB6C.js";
+import "./chunk-7FE43JRU.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-WAAGVFFN.js";
 import "./chunk-QH5ZQ5SJ.js";

package/dist/{active-agent-3YCLS7GB.js → active-agent-NUV4ZSZV.js}

@@ -7,18 +7,19 @@ import {
   resolveAgentAttribution,
   resolveAgentForPayload,
   writeActiveAgent
-} from "./chunk-GL5ZG72X.js";
-import "./chunk-7YX73K2R.js";
+} from "./chunk-CTZTOAHJ.js";
+import "./chunk-ALA7WYZZ.js";
 import "./chunk-5WA4DG2A.js";
 import "./chunk-CVYC6DUW.js";
 import "./chunk-GJV3WDWM.js";
-import "./chunk-L5JFVK5T.js";
+import "./chunk-GDZJL5GQ.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-TKDITWDN.js";
-import "./chunk-SINIRUYZ.js";
-import "./chunk-6777GNWI.js";
-import "./chunk-7FE43JRU.js";
 import "./chunk-5YEUPUV4.js";
+import "./chunk-I4N7F54M.js";
+import "./chunk-CCFWKW2D.js";
+import "./chunk-YBVSVB6C.js";
+import "./chunk-7FE43JRU.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-WAAGVFFN.js";
 import "./chunk-QH5ZQ5SJ.js";

package/dist/{agent-defs-generator-DNXMO34I.js → agent-defs-generator-GMN7JLNZ.js}

@@ -3,16 +3,17 @@ import {
   generateAgentDefs,
   isGeneratedAgentDef,
   summarizeAgentDefResults
-} from "./chunk-XDOCXKHW.js";
+} from "./chunk-7ZEIFHRE.js";
 import "./chunk-IVXELUEQ.js";
 import "./chunk-AM7S2TY6.js";
-import "./chunk-L5JFVK5T.js";
+import "./chunk-GDZJL5GQ.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-TKDITWDN.js";
-import "./chunk-SINIRUYZ.js";
-import "./chunk-6777GNWI.js";
-import "./chunk-7FE43JRU.js";
 import "./chunk-5YEUPUV4.js";
+import "./chunk-I4N7F54M.js";
+import "./chunk-CCFWKW2D.js";
+import "./chunk-YBVSVB6C.js";
+import "./chunk-7FE43JRU.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-WAAGVFFN.js";
 import "./chunk-QH5ZQ5SJ.js";

package/dist/{agentic-ontology-RA6CMND6.js → agentic-ontology-ARQVAAYP.js}

@@ -10,7 +10,7 @@ import {
   insertOntologyForMemory,
   ontologyPayload,
   stableId
-} from "./chunk-YVWXI2HM.js";
+} from "./chunk-H6HWBMJ3.js";
 import "./chunk-MLKGABMK.js";
 export {
   ONTOLOGY_YIELD_EVERY,

package/dist/{artifact-backup-EETHNFFP.js → artifact-backup-C6CYTX4E.js}

@@ -7,10 +7,10 @@ import {
 import {
   artifactObjectId,
   encryptSyncBlob
-} from "./chunk-QV26G2BF.js";
+} from "./chunk-ZO5S6T64.js";
 import "./chunk-2MUKF6YI.js";
-import "./chunk-7SHU5MOD.js";
-import "./chunk-4J77TCTX.js";
+import "./chunk-RJ7RN5GE.js";
+import "./chunk-PMGEC42V.js";
 import {
   EXE_AI_DIR,
   loadConfigSync

package/dist/{backfill-metadata-WYT257VG.js → backfill-metadata-OLMSQBJF.js}

@@ -2,11 +2,11 @@
 import {
   disposeStore,
   initStore
-} from "./chunk-LSHUX7P4.js";
-import "./chunk-MOBZTIJQ.js";
+} from "./chunk-D4RU4Y57.js";
+import "./chunk-QTWQGGSP.js";
 import "./chunk-CHCA3ZM2.js";
 import "./chunk-OTVEIJUQ.js";
-import "./chunk-FYSKQPTE.js";
+import "./chunk-QD3YZKZR.js";
 import "./chunk-5MOYSU5A.js";
 import "./chunk-BYP3DOUU.js";
 import "./chunk-76CJBM36.js";
@@ -15,19 +15,20 @@ import {
   getClient,
   getEmployeeNamesByRole,
   loadEmployeesSync
-} from "./chunk-L5JFVK5T.js";
+} from "./chunk-GDZJL5GQ.js";
 import "./chunk-BBMTVAE3.js";
 import "./chunk-TKDITWDN.js";
-import "./chunk-SINIRUYZ.js";
-import "./chunk-6777GNWI.js";
-import "./chunk-7FE43JRU.js";
 import "./chunk-5YEUPUV4.js";
+import "./chunk-I4N7F54M.js";
+import "./chunk-CCFWKW2D.js";
+import "./chunk-YBVSVB6C.js";
+import "./chunk-7FE43JRU.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-WAAGVFFN.js";
 import "./chunk-QH5ZQ5SJ.js";
 import "./chunk-ZQEJ4IX2.js";
 import "./chunk-C7GHNJPW.js";
-import "./chunk-4J77TCTX.js";
+import "./chunk-PMGEC42V.js";
 import "./chunk-MMS2HBRT.js";
 import "./chunk-RH4AH3YB.js";
 import {

package/dist/{backup-verify-AG54CYGR.js → backup-verify-TPKH64MK.js}

@@ -24,9 +24,10 @@ import {
   verifyBackup,
   writeBackupManifest,
   writeManifestAtomic
-} from "./chunk-T3AM52YT.js";
-import "./chunk-SINIRUYZ.js";
+} from "./chunk-V4Q5FU7M.js";
 import "./chunk-5YEUPUV4.js";
+import "./chunk-I4N7F54M.js";
+import "./chunk-CCFWKW2D.js";
 import "./chunk-YYB5PMTK.js";
 import "./chunk-MMS2HBRT.js";
 import "./chunk-RH4AH3YB.js";