@fased/fased 0.1.64 → 0.1.65

package/CHANGELOG.md

@@ -4,6 +4,22 @@ This changelog starts with the public Fased Agent release line. Required
 third-party and copied-code notices are kept in [LICENSE](./LICENSE) and
 [THIRD_PARTY_NOTICES.md](./THIRD_PARTY_NOTICES.md).
 
+## 0.1.65
+
+- Add rent-aware SAT settlement accounting, durable submission serialization
+  and reconciliation, keeper-bounty debt visibility, and operator status in the
+  Mining UI and CLI surfaces.
+- Add signer-owned typed address lookup-table create, extend, deactivate, close,
+  and lookup-backed distribution operations with Mining-role, program, action,
+  and rent policy gates; all lookup-table operations remain disabled by default.
+- Require byte-identical lookup-table account state from at least two distinct
+  configured RPC origins before compiling numeric v0 indexes, and fail closed
+  for one provider, duplicate origins, or disagreement.
+- Use independent lifecycle slot reads and the conservative lower slot for
+  lookup-table activation, deactivation, and close checks.
+- Preserve explicit lookup-table enablement through managed updates and document
+  policy activation, rent recovery, keeper reconciliation, and rollback.
+
 ## 0.1.64
 
 - Make protocol-v2 `fased-signerd` authoritative for native key creation,

package/README.md

@@ -119,8 +119,8 @@ Before you start the VPS installer, shut down local VPNs such as Mullvad,
 Proton VPN, NordVPN, corporate VPN clients, and browser/device VPN apps. Other
 VPNs can override Tailscale DNS, firewall rules, or `100.x` routing. Re-enable
 them only after Tailscale SSH and the dashboard work.
-The full OS-specific commands are kept in the tabbed
-[VPS Hosting install docs](https://docs.fased.ai/install#vps-hosting-install).
+The full access and recovery steps are in the
+[VPS Hosting guide](https://docs.fased.ai/install/vps).
 
 Other private-access systems are custom deployments. The standard hosted
 installer does not configure or verify WireGuard, Headscale, ZeroTier, bastion
@@ -138,11 +138,17 @@ First SSH into the fresh VPS using the login your VPS provider gives you, often
 ssh root@YOUR_PUBLIC_VPS_IP
 ```
 
-Then follow the [pre-execution verified VPS bootstrap](https://docs.fased.ai/install/vps#3-install-fased-and-connect-through-tailscale).
-It downloads the exact tagged `install.sh` release asset and its attestation
-bundle, verifies repository/tag/workflow/GitHub-runner provenance with
-`gh attestation verify`, and only then runs the script as root. Do not pipe a
-moving or unverified script directly into a root shell.
+Then run the one-command Hosting bootstrap:
+
+```bash
+curl -fsSL https://raw.githubusercontent.com/fased-ai/fased/main/install.sh \
+  | bash -s -- --hosting
+```
+
+It selects the stable release and verifies the tagged Hosting artifacts before
+privileged Fased installation. The
+[VPS Hosting guide](https://docs.fased.ai/install/vps#advanced-verify-the-bootstrap-first)
+also keeps an advanced procedure for verifying `install.sh` before it runs.
 
 The Fased installer bootstraps the attested hosted runtime itself. A fresh VPS
 does not need `git clone`; the installer installs the supported system tools and
@@ -464,8 +470,9 @@ curl -fsSL https://raw.githubusercontent.com/fased-ai/fased/main/install.sh | ba
 ```
 
 Use the VPS Hosting profile only on the server that will run Fased all the time,
-and use the [pre-execution verified tagged bootstrap](https://docs.fased.ai/install/vps#3-install-fased-and-connect-through-tailscale)
-before executing root code.
+using the one-command bootstrap in the
+[VPS Hosting guide](https://docs.fased.ai/install/vps). Manual pre-execution
+attestation verification remains available there for advanced operators.
 
 The commands below are for contributors working from the source checkout. Do
 not use plain `npm install` to install Fased from source.

package/config/signer-policies/README.md

@@ -36,7 +36,16 @@ with `fased-signer-policy`; installation and update never widen it automatically
   forces generic SOL/SAT transfers through reviewed authorization for a Mining
   wallet; it never treats them as autonomous mining actions. Exact SAT codecs
   that genuinely use associated-token-account instructions retain that program
-  grant.
+  grant. The starter deliberately omits the four typed `satLookup` lifecycle
+  operations for large distribution pages. Opting in requires both
+  `FASED_SAT_ENABLE_ALT_V0=1` and owner-approved exact create, extend,
+  deactivate, and close grants for the Address Lookup Table program. Create and
+  extend each reserve `25000000` lamports, so the native SOL per-transaction cap
+  must be at least that amount and the daily cap must cover every create/extend
+  chunk the operator intends to run. The signer network must also contain
+  reachable primary and fallback RPC URLs on two distinct origins. ALT account
+  bytes must agree exactly across both origins; one origin, duplicate origins,
+  or any disagreement fails closed.
 - Vault operations always require signer-owned reviewed authorization. The
   starter omits Jupiter and Trigger permissions. Treat both as preview in this
   release: do not add them to a production policy until an exact generated

package/config/signer-protocol-v2.json

@@ -5,6 +5,7 @@
     "solana.nativeTransfer",
     "solana.splTransferChecked",
     "solana.satAction",
+    "solana.satLookupTable",
     "solana.vaultBondAction",
     "federation.bondChallenge",
     "solana.jupiter.swap",
@@ -31,6 +32,7 @@
     "typedA2aRefundMemos",
     "idempotentAssociatedTokenCreation",
     "typedSATActions",
+    "typedSATAddressLookupTables",
     "typedVaultBondActions",
     "domainSeparatedFederationBondChallenges",
     "federationBondChallengeWrapperV2",

package/dist/brand.js

@@ -2,7 +2,7 @@
 const FASED_BRAND_NAME = "Fased";
 const FASED_AGENT_NAME = "Fased Agent";
 const FASED_CONTROL_NAME = "Fased Control";
-const FASED_PRODUCT_VERSION = "0.1.64";
+const FASED_PRODUCT_VERSION = "0.1.65";
 const FASED_DISPLAY_VERSION = `v${FASED_PRODUCT_VERSION}`;
 function formatFasedDisplayLine() {
 	return `${FASED_AGENT_NAME} ${FASED_DISPLAY_VERSION}`;

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.64",
-  "commit": "3b1f5fc2be332eabd2055a752e96f9e8e1c84f3d",
-  "builtAt": "2026-07-18T13:15:58.022Z"
+  "version": "0.1.65",
+  "commit": "ddab66e8d4823150281598ca03144031c14e0311",
+  "builtAt": "2026-07-18T23:30:17.953Z"
 }

package/dist/canvas-host/a2ui/.bundle.hash

@@ -1 +1 @@
-991ad74433070833894e32b9ce584814bd21790717ff793eadb8f705787184d2
+b6198a8be353e5ee2c011fb8b852230887c90aa70650e3d72131f1432f215fa0