@fased/fased 0.1.64 → 0.1.65

package/install.sh

@@ -35,19 +35,6 @@ if [[ "$install_entry_legacy_ts_authkey" -eq 1 ]]; then
   exit 1
 fi
 
-if [[ "$install_entry_is_stream" -eq 1 && "$install_entry_hosting" -eq 1 ]]; then
-  cat >&2 <<'EOF_STREAMED_HOSTING'
-Refusing streamed VPS Hosting execution before any privileged host mutation.
-Download the exact tagged install.sh and install.sh.attestation.json release assets,
-verify install.sh with `gh attestation verify --bundle ... --source-ref refs/tags/vX.Y.Z
---signer-workflow fased-ai/fased/.github/workflows/hosted-runtime-release.yml
---deny-self-hosted-runners`, then run the verified standalone file from the provider
-root console with: bash ./install.sh --hosting --release vX.Y.Z
-See: https://docs.fased.ai/install/vps#3-install-fased-and-connect-through-tailscale
-EOF_STREAMED_HOSTING
-  exit 1
-fi
-
 # A Hosting request always enters the attest-and-extract bootstrap unless it is
 # the exact inner invocation carrying the root-owned verified bundle marker.
 # This applies equally to stdin and to a standalone install.sh that the
@@ -58,6 +45,7 @@ if [[ "$install_entry_is_stream" -eq 1 || \
   install_base_dir="${FASED_INSTALL_DIR:-$HOME/fased}"
   auto_install=1
   hosting_bootstrap=0
+  hosting_repair_bootstrap=0
   hosting_release=""
   verified_hosting_bundle=""
   args=("$@")
@@ -74,9 +62,13 @@ if [[ "$install_entry_is_stream" -eq 1 || \
       --no-auto-install)
         auto_install=0
         ;;
-      --hosting|--repair-hosting)
+      --hosting)
         hosting_bootstrap=1
         ;;
+      --repair-hosting)
+        hosting_bootstrap=1
+        hosting_repair_bootstrap=1
+        ;;
       --host-profile)
         if (( i + 1 < ${#args[@]} )) && [[ "${args[$((i + 1))]}" == "hosting" ]]; then
           hosting_bootstrap=1
@@ -99,6 +91,10 @@ if [[ "$install_entry_is_stream" -eq 1 || \
     esac
   done
 
+  if [[ "$install_entry_is_stream" -eq 1 && "$hosting_bootstrap" -eq 1 && "$hosting_repair_bootstrap" -eq 0 && -z "$hosting_release" ]]; then
+    hosting_release="latest"
+  fi
+
   bootstrap_as_root() {
     if [[ "$(id -u)" -eq 0 ]]; then
       "$@"
@@ -1051,9 +1047,9 @@ EOF_NATIVE_WINDOWS
     fi
     if [[ "$(id -u)" -ne 0 ]]; then
       echo "--hosting must run as root so the isolated signer and Gateway services can be installed." >&2
-      echo "Open the VPS provider's root console and follow the verified release-asset bootstrap:" >&2
-      echo "  https://docs.fased.ai/install/vps#3-install-fased-and-connect-through-tailscale" >&2
-      echo "Download the tagged install.sh plus its attestation bundle, verify it with 'gh attestation verify', then run the verified file with --hosting --release vX.Y.Z." >&2
+      echo "Open the VPS provider's root console and follow the one-command Hosting guide:" >&2
+      echo "  https://docs.fased.ai/install/vps" >&2
+      echo "The Hosting bootstrap selects and verifies the tagged release before privileged Fased installation." >&2
       echo "Never run the app-owned checkout with sudo or grant the app account sudo access." >&2
       exit 1
     fi
@@ -4483,7 +4479,7 @@ migrate_legacy_hosted_signer_if_needed() {
       echo "A previous hosted wallet requires a fail-closed signer-v2 migration." >&2
       echo "Create root-owned ${policy_file} (mode 0600) with each expected wallet address and explicit policy, then rerun:" >&2
       echo "Use the verified release-asset repair procedure at:" >&2
-      echo "  https://docs.fased.ai/install/vps#3-install-fased-and-connect-through-tailscale" >&2
+      echo "  https://docs.fased.ai/install/vps#advanced-verify-the-bootstrap-first" >&2
       echo "After verifying the tagged install.sh attestation, run the verified file with --repair-hosting --release v${HOSTING_RELEASE}." >&2
       echo "Legacy key files were not changed." >&2
       exit 1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/fased",
-  "version": "0.1.64",
+  "version": "0.1.65",
   "description": "Fased Agent self-hosted AI gateway with channels, tools, plugins, and operator modules",
   "keywords": [
     "ai-agent",

package/scripts/fased-managed-updater.mjs

@@ -74,7 +74,7 @@ const LOCAL_SIGNER_REQUIRED_FEATURES = [
 export const PRE_V2_HOSTING_MIGRATION_MESSAGE = [
   "This hosted installation needs the one-time signer-v2 security migration before it can update.",
   "From a VPS provider console or a root SSH session, run:",
-  "Follow the verified release-asset and GitHub attestation procedure at https://docs.fased.ai/install/vps#3-install-fased-and-connect-through-tailscale, then run the verified tagged install.sh with --repair-hosting --release vX.Y.Z.",
+  "Follow the manual release-asset and GitHub attestation procedure at https://docs.fased.ai/install/vps#advanced-verify-the-bootstrap-first, then run the verified tagged install.sh with --repair-hosting --release vX.Y.Z.",
   "Never run /home/app/fased/install.sh with sudo or as root.",
   "The current Gateway, signer, wallets, and persistent state were left unchanged.",
 ].join(" ");

package/scripts/fased-signer-owner-policy.mjs

@@ -17,6 +17,7 @@ const SYSTEM_PROGRAM = "11111111111111111111111111111111";
 const TOKEN_PROGRAM = "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";
 const TOKEN_2022_PROGRAM = "TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb";
 const ASSOCIATED_TOKEN_PROGRAM = "ATokenGPvbdGVxr1b2hvZbsiqW5xWH25efTNsLJA8knL";
+const ADDRESS_LOOKUP_TABLE_PROGRAM = "AddressLookupTab1e1111111111111111111111111";
 const NATIVE_FEE_RESERVATION_LAMPORTS = 5_000_000n;
 const UINT64_MAX = 18_446_744_073_709_551_615n;
 const BASE58_ALPHABET = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
@@ -73,6 +74,7 @@ const SAT_MINING_ACTIONS = new Set([
   "validatorAttestation",
   "withdrawMinerCapital",
 ]);
+const SAT_LOOKUP_TABLE_ACTIONS = new Set(["create", "extend", "deactivate", "close"]);
 const VAULT_BOND_ACTIONS = new Set([
   "cancelBondUnlock",
   "claimBondStakingRewards",
@@ -441,7 +443,7 @@ function normalizePolicyOperation(value, role, field) {
   if (POLICY_OPERATIONS.has(value)) {
     return value;
   }
-  const match = /^(sat|vaultBond)\.([A-Za-z][A-Za-z0-9]*)@(.+)$/u.exec(value);
+  const match = /^(sat|satLookup|vaultBond)\.([A-Za-z][A-Za-z0-9]*)@(.+)$/u.exec(value);
   if (!match) {
     if (value === "solana.satAction" || value === "solana.vaultBondAction") {
       throw new Error(`${field} must name an exact action bound to its SAT program`);
@@ -454,6 +456,14 @@ function normalizePolicyOperation(value, role, field) {
     if (role !== "mining" || !SAT_MINING_ACTIONS.has(action)) {
       throw new Error(`${field} is not an allowed program-bound Mining action`);
     }
+  } else if (family === "satLookup") {
+    if (
+      role !== "mining" ||
+      !SAT_LOOKUP_TABLE_ACTIONS.has(action) ||
+      program !== ADDRESS_LOOKUP_TABLE_PROGRAM
+    ) {
+      throw new Error(`${field} is not an allowed typed Mining lookup-table action`);
+    }
   } else if (role !== "vault" || !VAULT_BOND_ACTIONS.has(action)) {
     throw new Error(`${field} is not an allowed program-bound Vault bond action`);
   }
@@ -1408,6 +1418,7 @@ if (isMain) {
 }
 
 export const __testing = Object.freeze({
+  ADDRESS_LOOKUP_TABLE_PROGRAM,
   ASSOCIATED_TOKEN_PROGRAM,
   ASSOCIATED_TOKEN_PROGRAM_ACTIONS,
   FEDERATION_POLICY_DOMAIN,
@@ -1417,6 +1428,7 @@ export const __testing = Object.freeze({
   TOKEN_2022_PROGRAM,
   TOKEN_PROGRAM,
   SAT_MINING_ACTIONS,
+  SAT_LOOKUP_TABLE_ACTIONS,
   VAULT_BOND_ACTIONS,
   assertSafeExecutable,
   encodeBase58,

package/scripts/start-managed.sh

@@ -537,6 +537,8 @@ load_wallet_signer_env_from_config() {
       || [[ "$key" == "FASED_WALLET_LOCAL_SIGNER_MASTER_KEY" ]] \
       || [[ "$key" == "FASED_WALLET_SIGNER_STATE_DIR" ]] \
       || [[ "$key" == "FASED_WALLET_LOCAL_SIGNER_BIN" ]] \
+      || [[ "$key" == "FASED_SAT_PROGRAM_ID" ]] \
+      || [[ "$key" == "FASED_SAT_ENABLE_ALT_V0" ]] \
       || [[ "$key" =~ ^FASED_WALLET_LOCAL_SIGNER_(ROLE|DIRECT_SIGNING|CAPS_ENABLED|SOLANA_MAX_PER_TX|SOLANA_MAX_DAILY|SOLANA_ALLOW_PROGRAMS)(__[A-Za-z0-9_-]+)?$ ]]; then
       export "$key=$value"
     fi
@@ -554,6 +556,8 @@ load_wallet_signer_env_from_config() {
             or . == "FASED_WALLET_LOCAL_SIGNER_MASTER_KEY"
             or . == "FASED_WALLET_SIGNER_STATE_DIR"
             or . == "FASED_WALLET_LOCAL_SIGNER_BIN"
+            or . == "FASED_SAT_PROGRAM_ID"
+            or . == "FASED_SAT_ENABLE_ALT_V0"
             or test("^FASED_WALLET_LOCAL_SIGNER_(ROLE|DIRECT_SIGNING|CAPS_ENABLED|SOLANA_MAX_PER_TX|SOLANA_MAX_DAILY|SOLANA_ALLOW_PROGRAMS)(__[A-Za-z0-9_-]+)?$")
         )
       | "\(.key)=\(.value|tostring)"