@fased/fased 0.1.66 → 0.1.68

package/CHANGELOG.md

@@ -4,6 +4,24 @@ This changelog starts with the public Fased Agent release line. Required
 third-party and copied-code notices are kept in [LICENSE](./LICENSE) and
 [THIRD_PARTY_NOTICES.md](./THIRD_PARTY_NOTICES.md).
 
+## 0.1.68
+
+- Unify signer-owned Agent, Mining, and Vault creation around one explicit role
+  and one primary Solana RPC across terminal onboarding, CLI, Control UI, Local,
+  and Hosting, with automatic signer network activation and role-safe readiness.
+- Add encrypted native recovery, advanced owner-only raw export, guarded Mining
+  archive/replacement, receive QR, RPC editing, and hardened verified Hosting
+  installation without exposing signer custody controls to Gateway.
+- Bridge managed Local updates from v0.1.67 with a legacy schema-v1 app layer,
+  while Hosting and current clients select the commit-bound schema-v2 app and
+  signer through the unified attested release manifest.
+
+## 0.1.67
+
+- Reject native Windows npm installs at package selection and fail closed at
+  the launcher and central runtime guard; Windows Local remains supported
+  through Ubuntu on WSL2.
+
 ## 0.1.66
 
 - Keep normal wallet onboarding to wallet role plus one primary Solana RPC,

package/README.md

@@ -65,6 +65,10 @@ Ubuntu shell. Do not run the Fased installer in PowerShell, Command Prompt, Git
 Bash, or native Windows Node.js. Fased wallet signing requires Unix sockets and
 therefore runs through WSL2 on Windows.
 
+The published npm package also rejects native Windows. If npm reports
+`EBADPLATFORM`, open Ubuntu in WSL2 and install or run Fased there; do not force
+the package installation with npm platform overrides.
+
 ```bash
 curl -fsSL https://raw.githubusercontent.com/fased-ai/fased/main/install.sh | bash -s -- --local
 ```

package/config/signer-protocol-v2.json

@@ -27,6 +27,9 @@
     "signerOwnedSuccessorRotation",
     "permanentRetiredWalletPolicies",
     "signerOwnedRPC",
+    "applicationNetworkBootstrap",
+    "signerOwnedEncryptedRecovery",
+    "signerOwnedRawExport",
     "typedSolanaTransactions",
     "typedA2aPaymentMemos",
     "typedA2aRefundMemos",
@@ -63,6 +66,7 @@
     "ambiguousBroadcastReconciliation",
     "signerOwnedKeys",
     "signerOwnedRPC",
+    "applicationNetworkBootstrap",
     "typedSolanaTransactions",
     "typedA2aPaymentMemos",
     "typedA2aRefundMemos",

package/dist/brand.js

@@ -2,7 +2,7 @@
 const FASED_BRAND_NAME = "Fased";
 const FASED_AGENT_NAME = "Fased Agent";
 const FASED_CONTROL_NAME = "Fased Control";
-const FASED_PRODUCT_VERSION = "0.1.66";
+const FASED_PRODUCT_VERSION = "0.1.68";
 const FASED_DISPLAY_VERSION = `v${FASED_PRODUCT_VERSION}`;
 function formatFasedDisplayLine() {
 	return `${FASED_AGENT_NAME} ${FASED_DISPLAY_VERSION}`;

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.66",
-  "commit": "4a1606b787409476e2f47ef3638ad69214142253",
-  "builtAt": "2026-07-19T11:51:33.655Z"
+  "version": "0.1.68",
+  "commit": "ad0d395fdae5c0fbbbda8ad932b32276558b2cf2",
+  "builtAt": "2026-07-20T01:36:18.679Z"
 }

package/dist/canvas-host/a2ui/.bundle.hash

@@ -1 +1 @@
-ea284d3fdfd1710a7c7bfcae7f6d61cf7ebb9ecfd90bdd9bd001ebae170a4f5d
+eb11c388af36ee3609b0db82a4da72350ca90ba7a06fec9f82f02a1db6307bfd

package/dist/cli/program/register.wallet.js

@@ -1,6 +1,6 @@
 import { defaultRuntime } from "../../runtime.js";
 import { runCommandWithRuntime } from "../cli-utils.js";
-import { walletCanaryCommand, walletInboundListCommand, walletInboundPollCommand, walletInboundReconcileCommand, walletLegacyMigrationFinalizeCommand, walletLimitOrdersConfigureCommand, walletMigrateCommand, walletPolicyProfileApplyCommand, walletProviderConfigureCommand, walletRoleSetCommand, walletRotateKeysCommand, walletSetupCommand, walletSignerDoctorCommand, walletSignerServeCommand, walletStatusCommand } from "../../commands/wallet.js";
+import { walletCanaryCommand, walletInboundListCommand, walletInboundPollCommand, walletInboundReconcileCommand, walletLegacyMigrationFinalizeCommand, walletLimitOrdersConfigureCommand, walletMigrateCommand, walletPolicyProfileApplyCommand, walletProviderConfigureCommand, walletRawExportCommand, walletRecoveryExportCommand, walletRecoveryImportCommand, walletRoleSetCommand, walletRotateKeysCommand, walletSetupCommand, walletSignerDoctorCommand, walletSignerServeCommand, walletStatusCommand } from "../../commands/wallet.js";
 
 //#region src/cli/program/register.wallet.ts
 function resolvePublicWalletSetupChain(raw) {
@@ -17,7 +17,36 @@ function registerWalletCommands(program) {
 	const wallet = program.command("wallet").description("Wallet providers, native signer, and policy status").action(() => {
 		wallet.help({ error: true });
 	});
-	wallet.command("setup").description("Create a signer-owned Solana wallet or configure a supported provider").option("--mode <mode>", "local-signer-create|local-signer-import|local-signer|turnkey|alchemy").option("--chain <chain>", "solana", "solana").option("--wallet-id <id>", "Named wallet id (examples: agent, mining, vault)").option("--wallet-name <value>", "Friendly wallet display name (for UI/skills/plugins)").option("--role <role>", "Permanent signer role: agent|mining|vault").option("--api-key <value>", "Alchemy API key").option("--rpc-url <url>", "Solana RPC URL").option("--turnkey-api-public-key <value>", "Turnkey API public key (turnkey mode)").option("--turnkey-api-private-key <value>", "Turnkey API private key (turnkey mode)").option("--turnkey-organization-id <value>", "Turnkey organization ID (turnkey mode)").option("--turnkey-policy-id <value>", "Turnkey policy ID (turnkey mode)").option("--turnkey-base-url <value>", "Turnkey base URL override (turnkey mode)").option("--enable-limit-orders", "Legacy alias: configure Gateway Jupiter Swap API access (Trigger is signer-owned)", false).option("--disable-limit-orders", "Remove stored Gateway Jupiter Swap API key", false).option("--jupiter-api-key <value>", "Jupiter API key for Gateway swap crafting only").option("--non-interactive", "Do not prompt; require mode/inputs", false).option("--no-doctor", "Skip signer doctor in local-signer mode", false).option("--json", "Print JSON output", false).action(async (opts) => {
+	const recovery = wallet.command("recovery").description("Signer-owned encrypted recovery");
+	recovery.command("export").description("Create an Argon2id + authenticated-encryption recovery package").requiredOption("--wallet-id <id>", "Registered signer-owned wallet id").requiredOption("--output <absolute-path>", "New owner-only recovery package path").action(async (opts) => {
+		await runCommandWithRuntime(defaultRuntime, async () => {
+			await walletRecoveryExportCommand(defaultRuntime, {
+				walletId: String(opts.walletId),
+				output: String(opts.output)
+			});
+		});
+	});
+	recovery.command("import").description("Restore an encrypted signer recovery package into a new Local wallet").requiredOption("--wallet-id <id>", "New registered signer-owned wallet id").requiredOption("--wallet-name <name>", "Wallet display name").requiredOption("--role <role>", "Permanent signer role: agent|mining|vault").requiredOption("--file <absolute-path>", "Owner-only encrypted recovery package").requiredOption("--rpc-url <url>", "One primary Solana RPC URL").action(async (opts) => {
+		await runCommandWithRuntime(defaultRuntime, async () => {
+			await walletRecoveryImportCommand(defaultRuntime, {
+				walletId: String(opts.walletId),
+				walletName: String(opts.walletName),
+				role: String(opts.role),
+				recoveryFile: String(opts.file),
+				rpcUrl: String(opts.rpcUrl)
+			});
+		});
+	});
+	recovery.command("export-raw").description("Advanced: export a raw Solana keypair and reduce signer custody protection").requiredOption("--wallet-id <id>", "Registered signer-owned wallet id").requiredOption("--output <absolute-path>", "New owner-only raw keypair path").requiredOption("--acknowledge-custody-reduction", "Confirm that raw export makes the wallet key portable").action(async (opts) => {
+		await runCommandWithRuntime(defaultRuntime, async () => {
+			await walletRawExportCommand(defaultRuntime, {
+				walletId: String(opts.walletId),
+				output: String(opts.output),
+				acknowledgeCustodyReduction: Boolean(opts.acknowledgeCustodyReduction)
+			});
+		});
+	});
+	wallet.command("setup").description("Create a signer-owned Solana wallet or configure a supported provider").option("--mode <mode>", "local-signer-create|local-signer-import|local-signer-recovery-import|local-signer|turnkey|alchemy").option("--chain <chain>", "solana", "solana").option("--wallet-id <id>", "Named wallet id (examples: agent, mining, vault)").option("--wallet-name <value>", "Friendly wallet display name (for UI/skills/plugins)").option("--role <role>", "Permanent signer role: agent|mining|vault").option("--import-file <absolute-path>", "Owner-only Solana keypair JSON for local-signer-import; secret is passed by file descriptor, never argv/env").option("--recovery-file <absolute-path>", "Owner-only encrypted package for local-signer-recovery-import").option("--api-key <value>", "Alchemy API key").option("--rpc-url <url>", "Solana RPC URL").option("--turnkey-api-public-key <value>", "Turnkey API public key (turnkey mode)").option("--turnkey-api-private-key <value>", "Turnkey API private key (turnkey mode)").option("--turnkey-organization-id <value>", "Turnkey organization ID (turnkey mode)").option("--turnkey-policy-id <value>", "Turnkey policy ID (turnkey mode)").option("--turnkey-base-url <value>", "Turnkey base URL override (turnkey mode)").option("--enable-limit-orders", "Legacy alias: configure Gateway Jupiter Swap API access (Trigger is signer-owned)", false).option("--disable-limit-orders", "Remove stored Gateway Jupiter Swap API key", false).option("--jupiter-api-key <value>", "Jupiter API key for Gateway swap crafting only").option("--non-interactive", "Do not prompt; require mode/inputs", false).option("--no-doctor", "Skip signer doctor in local-signer mode", false).option("--json", "Print JSON output", false).action(async (opts) => {
 		await runCommandWithRuntime(defaultRuntime, async () => {
 			await walletSetupCommand(defaultRuntime, {
 				mode: typeof opts.mode === "string" ? opts.mode : undefined,
@@ -27,6 +56,8 @@ function registerWalletCommands(program) {
 				role: typeof opts.role === "string" ? opts.role : undefined,
 				apiKey: typeof opts.apiKey === "string" ? opts.apiKey : undefined,
 				rpcUrl: typeof opts.rpcUrl === "string" ? opts.rpcUrl : undefined,
+				importFile: typeof opts.importFile === "string" ? opts.importFile : undefined,
+				recoveryFile: typeof opts.recoveryFile === "string" ? opts.recoveryFile : undefined,
 				turnkeyApiPublicKey: typeof opts.turnkeyApiPublicKey === "string" ? opts.turnkeyApiPublicKey : undefined,
 				turnkeyApiPrivateKey: typeof opts.turnkeyApiPrivateKey === "string" ? opts.turnkeyApiPrivateKey : undefined,
 				turnkeyOrganizationId: typeof opts.turnkeyOrganizationId === "string" ? opts.turnkeyOrganizationId : undefined,

package/dist/commands/onboard.js

@@ -56,14 +56,6 @@ async function onboardCommand(opts, runtime = defaultRuntime) {
 		const repairScope = normalizedOpts.resetScope ?? "auth+sessions";
 		await handleOnboardingRepair(repairScope, runtime);
 	}
-	if (process.platform === "win32") {
-		runtime.log([
-			"Windows detected — FasedAgent runs great on WSL2!",
-			"Native Windows might be trickier.",
-			"Quick setup: wsl --install (one command, one reboot)",
-			"Guide: https://docs.fased.ai/windows"
-		].join("\n"));
-	}
 	const previousSuppressOverwrite = process.env.FASED_SUPPRESS_CONFIG_OVERWRITE_LOG;
 	process.env.FASED_SUPPRESS_CONFIG_OVERWRITE_LOG = "1";
 	try {