@fased/fased 0.1.67 → 0.1.69

package/dist/wizard/onboarding.js

@@ -7,12 +7,13 @@ import { ensureAuthProfileStore } from "../agents/auth-profiles/store.js";
 import { readConfigFileSnapshot, writeConfigFile } from "../config/io.js";
 import "../config/config.js";
 import "../agents/auth-profiles.js";
-import { ensureWalletStateDir, resolveLocalSignerControlSocketPath, resolveLocalSignerMaterialRootDir, resolveLocalSignerSocketPath } from "../wallet/wallet-runtime-config.js";
-import { checkNamedWalletDeletionSafety, deleteNamedWallet, readWalletProviderRegistry, resolveWalletUserRole, setDefaultWallet, setNamedWalletRole, upsertNamedWallet } from "../wallet/wallet-provider-registry.js";
+import { ensureWalletStateDir, resolveLocalSignerMaterialRootDir, resolveLocalSignerSocketPath } from "../wallet/wallet-runtime-config.js";
+import { checkNamedWalletDeletionSafety, deleteNamedWallet, readWalletProviderRegistry, resolveWalletUserRole, setNamedWalletRole, upsertNamedWallet } from "../wallet/wallet-provider-registry.js";
 import { DEFAULT_WORKSPACE, applyWizardMetadata, ensureWorkspaceAndSessions, handleOnboardingRepair, printWizardHeader, probeGatewayReachable, summarizeExistingConfig } from "../commands/onboard-helpers.js";
 import { configureSignerOwnedWalletNetwork } from "../wallet/signer-network-admin.js";
 import { configureWalletForOnboarding, installSignerdBinary, resolveSignerdBinaryPath, restartLocalSocketSigner } from "./onboarding.wallet.js";
-import { collectWalletSignerDoctorReport, walletSetupCommand } from "../commands/wallet.js";
+import { collectWalletSignerDoctorReport, walletRecoveryExportCommand, walletSetupCommand } from "../commands/wallet.js";
+import { lockSignerOwnedWalletForArchive } from "../wallet/local-socket-signer-archive.js";
 import { promptAuthChoiceGrouped } from "../commands/auth-choice-prompt.js";
 import { applyPrimaryModel, resolveAuthenticatedDefaultModel } from "../commands/model-picker.js";
 import { logConfigUpdated } from "../config/logging.js";
@@ -26,7 +27,6 @@ import { promptCustomApiConfig } from "../commands/onboard-custom.js";
 import { setupInternalHooks } from "../commands/onboard-hooks.js";
 import { promptRemoteGatewayConfig } from "../commands/onboard-remote.js";
 import { setupSkills } from "../commands/onboard-skills.js";
-import { lockSignerOwnedWalletForArchive } from "../wallet/local-socket-signer-archive.js";
 import { discoverSolanaNetworkFromRpc } from "../wallet/solana-network-discovery.js";
 import { isHostedSecurityCapableSession } from "./host-security-capability.js";
 import { noteBullet, noteCommand, noteHeading, noteLabel, noteStep, noteSuccess, noteWarn } from "./onboarding-note-format.js";
@@ -96,10 +96,6 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		}
 		return "FASED_WALLET_SOLANA_RPC_URL";
 	};
-	const executionFallbackRpcEnvKeyFor = (walletId) => {
-		const suffix = walletIdEnvSuffix(walletId);
-		return suffix ? `FASED_WALLET_SOLANA_EXECUTION_FALLBACK_RPC_URL__${suffix}` : "FASED_WALLET_SOLANA_EXECUTION_FALLBACK_RPC_URL";
-	};
 	const setConfigEnvVar = (cfg, key, value) => {
 		const vars = { ...cfg.env?.vars };
 		if (value == null || value === "") {
@@ -219,15 +215,6 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		process.env[rpcKey] = effectiveRpcUrl;
 		return effectiveRpcUrl;
 	};
-	const firstNonEmptyEnvValue = (...values) => {
-		for (const value of values) {
-			const normalized = String(value ?? "").trim();
-			if (normalized) {
-				return normalized;
-			}
-		}
-		return undefined;
-	};
 	const readSatMiningConfig = (cfg) => {
 		const config = cfg.plugins?.entries?.["sat-mining"]?.config;
 		if (!config || typeof config !== "object" || Array.isArray(config)) {
@@ -960,7 +947,11 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 								label: currentBondWalletId && currentBondWalletId !== walletId ? "Switch bond Vault here" : "Use for Fased Network bond",
 								hint: currentBondWalletId && currentBondWalletId !== walletId ? `Current bond Vault: ${currentBondWalletId}` : "Use this Vault wallet for longer-lived SAT bond authority."
 							}] : [],
-							{
+							targetWalletPurpose === "mining" ? {
+								value: "retire-mining",
+								label: "Retire and replace Mining wallet",
+								hint: "Stop and drain Mining, verify recovery and balances, tombstone the old signer wallet, then attach a ready successor."
+							} : {
 								value: "archive",
 								label: "Archive/remove from Fased",
 								hint: "Disable signer use first, then remove this wallet registration."
@@ -991,28 +982,23 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 							currentValue: configuredSolanaRpcUrl
 						});
 						let signerNetworkVersion;
-						let signerNetworkRootCommand;
 						if (targetWallet.providerId === "local-socket-signer") {
 							const effectiveEnv = {
 								...process.env,
 								...nextConfig.env?.vars,
 								FASED_HOST_PROFILE: hostProfile
 							};
-							const walletSuffix = walletIdEnvSuffix(walletId);
-							const legacyExecutionFallbackKey = walletSuffix ? `FASED_WALLET_SOLANA_WRITE_RPC_FALLBACK_URL__${walletSuffix}` : "FASED_WALLET_SOLANA_WRITE_RPC_FALLBACK_URL";
-							const network = configureSignerOwnedWalletNetwork({
+							const network = await configureSignerOwnedWalletNetwork({
 								walletId,
 								primaryRpcUrl: effectiveSolanaRpcUrl,
-								executionFallbackRpcUrl: firstNonEmptyEnvValue(effectiveEnv[executionFallbackRpcEnvKeyFor(walletId)], effectiveEnv[legacyExecutionFallbackKey]),
 								env: effectiveEnv,
-								signerBinPath: hostProfile === "hosting" ? undefined : resolveSignerdBinaryPath(effectiveEnv)
+								socketPath: resolveLocalSignerSocketPath(effectiveEnv)
 							});
 							signerNetworkVersion = network.version;
-							signerNetworkRootCommand = network.rootCommand;
 						} else {
 							await restartLocalSocketSigner(ensureWalletStateDir(process.env).rootDir);
 						}
-						await prompter.note([`Updated the app-side Solana RPC setting for ${targetWallet.name} (${walletId})${signerNetworkVersion ? `; signer network version ${signerNetworkVersion} is ready` : "."}`, ...signerNetworkRootCommand ? ["The hosted signer was not changed because the app has no root channel. Activate the RPC from a root-owned file:", signerNetworkRootCommand] : []].join("\n"), "Wallet setup");
+						await prompter.note([`Updated the app-side Solana RPC setting for ${targetWallet.name} (${walletId})${signerNetworkVersion ? `; signer network version ${signerNetworkVersion} is ready` : "."}`].join("\n"), "Wallet setup");
 						addAnotherWallet = await prompter.confirm({
 							message: "Run another wallet setup action?",
 							initialValue: false
@@ -1026,6 +1012,19 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 						});
 						continue;
 					}
+					if (manageAction === "retire-mining") {
+						await prompter.note([
+							"Mining retirement is a coordinated replacement, never a registry-only delete.",
+							`Run: fased wallet recovery export --wallet-id ${targetWallet.id} --output <absolute-recovery-path>`,
+							`Then run: fased wallet retire --wallet-id ${targetWallet.id} --successor-wallet-id <new-id> --successor-wallet-name <name> --recovery-file <absolute-recovery-path> --rpc-url <url>`,
+							"The command stops new jobs, waits for Clearing and reconciliation, records balances, commits the signer tombstone, and attaches the ready successor."
+						].join("\n"), "Retire and replace Mining wallet");
+						addAnotherWallet = await prompter.confirm({
+							message: "Run another wallet setup action?",
+							initialValue: false
+						});
+						continue;
+					}
 					if (manageAction === "attach-federation-bond") {
 						const agentDefaultWallet = readAgentDefaultWallet();
 						if (targetWalletPurpose !== "vault") {
@@ -1064,6 +1063,14 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 						});
 						continue;
 					}
+					if (resolveWalletUserRole(targetWallet) === "mining") {
+						await prompter.note("Mining wallets cannot be archived or deleted directly. Use Retire and replace Mining wallet so the signer tombstone is committed before registry detachment.", "Mining retirement required");
+						addAnotherWallet = await prompter.confirm({
+							message: "Run another wallet setup action?",
+							initialValue: false
+						});
+						continue;
+					}
 					const archiveEnv = {
 						...process.env,
 						...nextConfig.env?.vars,
@@ -1160,8 +1167,8 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 				}
 				attemptedSelfHostedSetupThisRun = true;
 				const chain = "solana";
-				const walletPurpose = flow === "quickstart" && !snapshot.exists ? "agent" : await prompter.select({
-					message: "Wallet purpose",
+				const walletPurpose = await prompter.select({
+					message: "Wallet role (required)",
 					options: [
 						{
 							value: "agent",
@@ -1175,9 +1182,11 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 							value: "vault",
 							label: "Vault"
 						}
-					],
-					initialValue: "agent"
+					]
 				});
+				if (walletPurpose !== "agent" && walletPurpose !== "mining" && walletPurpose !== "vault") {
+					throw new Error("Wallet role selection is required; Agent is never selected silently.");
+				}
 				const selfHostedAction = await prompter.select({
 					message: "Wallet action",
 					options: [{
@@ -1193,7 +1202,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 					const existingMiningWalletId = satMiningAttachment.walletId ?? "";
 					const existingMiningWallet = readWalletProviderRegistry(process.env).wallets.find((wallet) => wallet.id === "mining");
 					if (existingMiningWalletId || existingMiningWallet) {
-						await prompter.note([`Mining wallet already exists: ${existingMiningWalletId || "mining"}.`, "Delete that Mining wallet from onboarding first if you want to replace it."].join("\n"), "Mining");
+						await prompter.note([`Mining wallet already exists: ${existingMiningWalletId || "mining"}.`, "Open it to continue, or use the reviewed Replace/Archive flow after mining is stopped, rewards and capital are settled, and backup/readiness checks pass."].join("\n"), "Mining");
 						addAnotherWallet = await prompter.confirm({
 							message: "Run another wallet setup action?",
 							initialValue: false
@@ -1201,39 +1210,17 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 						continue;
 					}
 				}
-				const mode = "local-signer-create";
+				const mode = selfHostedAction === "import" ? "local-signer-import" : "local-signer-create";
 				const walletIdentity = await resolveWalletIdentityForOnboarding({
 					flow,
 					purpose: walletPurpose
 				});
 				const walletName = walletIdentity.walletName;
 				const walletId = walletIdentity.walletId || undefined;
-				if (selfHostedAction === "import") {
-					const effectiveWalletId = walletId ?? walletPurpose;
-					const hosting = hostProfile === "hosting";
-					const signerBin = hosting ? "/opt/fased/signer/fased-signerd" : resolveSignerdBinaryPath();
-					const controlSocket = hosting ? "/run/fased-signerd/control.sock" : resolveLocalSignerControlSocketPath(process.env);
-					const signerImportCommand = [
-						shellQuote(signerBin),
-						"admin wallet import",
-						`--control-socket ${shellQuote(controlSocket)}`,
-						`--wallet-id ${shellQuote(effectiveWalletId)}`,
-						`--locked-role ${shellQuote(walletPurpose)}`,
-						`< ${shellQuote("/absolute/path/to/solana-keypair.json")}`
-					].join(" ");
-					const command = hosting ? `/usr/sbin/runuser -u fased-signer -- /usr/bin/env HOME=/var/lib/fased-signerd ${signerImportCommand}` : signerImportCommand;
-					await prompter.note([
-						"The normal Gateway and Node wizard paths do not accept plaintext wallet keys. Local same-user isolation is not a hard compromise boundary; Hosting isolates the signer account.",
-						hosting ? "Open the VPS provider root console and run this root-administrator command. Do not run it from the app shell and do not grant app sudo:" : "Run this from an authenticated terminal on the signer host:",
-						command,
-						"Then rerun wallet setup and choose Manage wallet to register/verify the returned public address."
-					].join("\n"), "Native signer import");
-					addAnotherWallet = await prompter.confirm({
-						message: "Run another wallet setup action?",
-						initialValue: false
-					});
-					continue;
-				}
+				const importFile = selfHostedAction === "import" ? (await prompter.text({
+					message: "Absolute path to owner-only Solana keypair JSON",
+					validate: (value) => value.trim().startsWith("/") ? undefined : "Enter an absolute path and run chmod 600 on the file first"
+				})).trim() : undefined;
 				const rpcKey = rpcEnvKeyFor(chain, walletId);
 				const currentRpcValue = (nextConfig.env?.vars?.[rpcKey] ?? "").trim() || String(process.env[rpcKey] ?? "").trim();
 				const rpcUrlInput = (await prompter.text({
@@ -1245,8 +1232,6 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 				if (!effectiveRpcUrl) {
 					throw new Error(`${chain.toUpperCase()} RPC URL is required for wallets.`);
 				}
-				nextConfig = setConfigEnvVar(nextConfig, rpcKey, effectiveRpcUrl);
-				process.env[rpcKey] = effectiveRpcUrl;
 				try {
 					if (mode === "local-signer-create") {
 						try {
@@ -1256,6 +1241,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 								walletId,
 								walletName,
 								rpcUrl: effectiveRpcUrl,
+								role: walletPurpose,
 								force: true,
 								noDoctor: true,
 								noSignerHints: true,
@@ -1277,6 +1263,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 									walletId,
 									walletName,
 									rpcUrl: effectiveRpcUrl,
+									role: walletPurpose,
 									force: true,
 									noDoctor: true,
 									noSignerHints: true,
@@ -1286,17 +1273,22 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 								throw err;
 							}
 						}
-						if (hostProfile === "hosting") {
-							const nativeWalletId = (walletId ?? walletPurpose).trim().toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "");
-							await prompter.note([
-								"The wallet key was created inside the root-managed signer with deny-all policy.",
-								"The Gateway has no sudo or root control socket, so RPC activation is a separate host-administrator step.",
-								"From a provider/root console, copy the installed network template to a root-owned mode-0600 file, set the exact RPC URLs, then run:",
-								`/usr/local/sbin/fased-signer-network --wallet-id ${nativeWalletId} --network-file /root/fased-network.json`,
-								"Signing stays disabled until network activation, owner enrollment, and an explicit positive-cap policy all succeed."
-							].join("\n"), "Hosted wallet owner handoff");
-						}
+					} else {
+						await walletSetupCommand(runtime, {
+							mode,
+							chain,
+							walletId,
+							walletName,
+							role: walletPurpose,
+							rpcUrl: effectiveRpcUrl,
+							importFile,
+							noDoctor: true,
+							noSignerHints: true,
+							nonInteractive: true
+						});
 					}
+					nextConfig = setConfigEnvVar(nextConfig, rpcKey, effectiveRpcUrl);
+					process.env[rpcKey] = effectiveRpcUrl;
 					walletCeremonyEvents.push({
 						mode,
 						chain,
@@ -1307,6 +1299,25 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 						ok: true
 					});
 					createdOrImportedSelfHostedWalletThisRun = true;
+					if (hostProfile !== "hosting") {
+						const exportRecovery = await prompter.confirm({
+							message: "Create an encrypted recovery package now?",
+							initialValue: true
+						});
+						if (exportRecovery) {
+							const defaultRecoveryPath = path.join(process.env.HOME || process.cwd(), `fased-${walletId ?? walletPurpose}-recovery.json`);
+							const recoveryOutput = (await prompter.text({
+								message: "New encrypted recovery package path",
+								initialValue: defaultRecoveryPath,
+								validate: (value) => path.isAbsolute(value.trim()) ? undefined : "Enter an absolute path for a new file"
+							})).trim();
+							await walletRecoveryExportCommand(runtime, {
+								walletId: walletId ?? walletPurpose,
+								output: recoveryOutput
+							});
+							await prompter.note([`Encrypted recovery package: ${recoveryOutput}`, "Keep the recovery password separately. The file contains ciphertext, wallet id, role, public address, and format metadata; it never contains plaintext key material."].join("\n"), "Wallet recovery");
+						}
+					}
 					const agentDefaultBefore = readAgentDefaultWallet();
 					const existingWallet = readWalletProviderRegistry(process.env).wallets.find((entry) => entry.id === walletId);
 					upsertNamedWallet({
@@ -1323,20 +1334,11 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 					await restartLocalSocketSigner(ensureWalletStateDir(process.env).rootDir);
 					const isAgentWallet = walletPurpose === "agent";
 					if (walletPurpose === "agent") {
-						const currentPrimary = String(agentDefaultBefore.walletId ?? "").trim();
-						if (!currentPrimary || currentPrimary === walletId) {
-							setDefaultWallet({
-								walletId: walletId ?? "default",
-								env: process.env
-							});
-							await prompter.note(`Primary Agent wallet set to ${walletName} (${walletId ?? "default"}).`, "Wallet");
-						} else {
-							await prompter.note([
-								`Agent wallet created as ${walletName} (${walletId ?? "default"}).`,
-								`Primary Agent wallet remains ${describeWalletRef(agentDefaultBefore)}.`,
-								`Use @wallet:${walletId ?? "default"} when you want this wallet explicitly.`
-							].join("\n"), "Wallet");
-						}
+						await prompter.note([
+							`Agent wallet created as ${walletName} (${walletId ?? "default"}).`,
+							`Default Agent wallet fallback remains ${describeWalletRef(agentDefaultBefore)}.`,
+							`Use @wallet:${walletId ?? "default"} explicitly, assign it to an Agent or skill, or set it as the optional fallback in Wallet.`
+						].join("\n"), "Wallet");
 					}
 					if (walletId) {
 						setNamedWalletRole({

package/dist/wizard/onboarding.wallet.js

@@ -5,6 +5,7 @@ import "../config/config.js";
 import { hasLegacyEmbeddedKeystoreMaterialHint, throwLegacyEmbeddedKeystoreMigrationRequired } from "../wallet/legacy-embedded-keystore.js";
 import { ensureWalletStateDir, isLocalSignerExternallyManaged, resolveLocalSignerControlSocketPath, resolveLocalSignerMasterKeyPath, resolveLocalSignerMaterialRootDir, resolveLocalSignerSidecarPaths, resolveLocalSignerSocketPath, resolveLocalSignerStateDbPath } from "../wallet/wallet-runtime-config.js";
 import { WALLET_PROVIDER_IDS, readWalletProviderRegistry, setWalletProvidersEnabled } from "../wallet/wallet-provider-registry.js";
+import { SAT_RUNTIME_ENV_KEYS, SAT_RUNTIME_TRUST_ENV_KEYS } from "../config/sat-runtime-ids.js";
 import { callLocalSocketSigner } from "../wallet/providers/local-socket-signer-adapter.js";
 import { resolveWalletProviderId } from "../wallet/wallet-provider-resolver.js";
 import { fileURLToPath } from "node:url";
@@ -400,7 +401,7 @@ function resolveSignerChildEnv(materialDir, env = process.env, cfg = loadConfig(
 	}
 	for (const [key, rawValue] of Object.entries(mergedEnv)) {
 		const value = String(rawValue ?? "").trim();
-		const isSignerRuntimeConfig = key.startsWith("FASED_WALLET_LOCAL_SIGNER_RATE_") || key === "FASED_WALLET_LOCAL_SIGNER_AUDIT_MAX_BYTES" || key === "FASED_WALLET_SOLANA_CONFIRM_TIMEOUT_MS" || key === "FASED_WALLET_SOLANA_WRITE_RPC_TIMEOUT_MS";
+		const isSignerRuntimeConfig = key.startsWith("FASED_WALLET_LOCAL_SIGNER_RATE_") || key === "FASED_WALLET_LOCAL_SIGNER_AUDIT_MAX_BYTES" || key === "FASED_WALLET_SOLANA_CONFIRM_TIMEOUT_MS" || key === "FASED_WALLET_SOLANA_WRITE_RPC_TIMEOUT_MS" || [...Object.values(SAT_RUNTIME_ENV_KEYS), ...Object.values(SAT_RUNTIME_TRUST_ENV_KEYS)].includes(key);
 		if (value && isSignerRuntimeConfig) {
 			childEnv[key] = value;
 		}
@@ -486,6 +487,14 @@ function renderLocalSignerEnvFile(params) {
 		...materialDir !== walletRoot ? [`export FASED_WALLET_SIGNER_STATE_DIR=${quoteSignerEnvValue(materialDir)}`] : [],
 		`export FASED_WALLET_CHAINS=${quoteSignerEnvValue(String(childEnv.FASED_WALLET_CHAINS ?? "solana").trim() || "solana")}`,
 		...webAuthn ? [`export FASED_WALLET_WEBAUTHN_RP_ID=${quoteSignerEnvValue(webAuthn.rpId)}`, `export FASED_WALLET_WEBAUTHN_ORIGINS=${quoteSignerEnvValue(webAuthn.origins)}`] : [],
+		...Object.values(SAT_RUNTIME_ENV_KEYS).flatMap((key) => {
+			const value = String(childEnv[key] ?? "").trim();
+			return value ? [`export ${key}=${quoteSignerEnvValue(value)}`] : [];
+		}),
+		...Object.values(SAT_RUNTIME_TRUST_ENV_KEYS).flatMap((key) => {
+			const value = String(childEnv[key] ?? "").trim();
+			return value ? [`export ${key}=${quoteSignerEnvValue(value)}`] : [];
+		}),
 		"",
 		`${quoteSignerEnvValue(signerBinPath)} --socket "$FASED_WALLET_LOCAL_SIGNER_SOCKET" --control-socket "$FASED_WALLET_LOCAL_SIGNER_CONTROL_SOCKET" --state-db "$FASED_WALLET_LOCAL_SIGNER_STATE_DB" --master-key "$FASED_WALLET_LOCAL_SIGNER_MASTER_KEY"`
 	];

package/extensions/acpx/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/acpx",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "description": "FasedAgent ACP runtime backend via acpx",
   "type": "module",
   "dependencies": {

package/extensions/bluebubbles/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/bluebubbles",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "description": "FasedAgent BlueBubbles channel plugin",
   "type": "module",
   "fased": {

package/extensions/copilot-proxy/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/copilot-proxy",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "private": true,
   "description": "FasedAgent Copilot Proxy provider plugin",
   "type": "module",

package/extensions/diagnostics-otel/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/diagnostics-otel",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "description": "FasedAgent diagnostics OpenTelemetry exporter",
   "type": "module",
   "dependencies": {

package/extensions/fased-federation/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/fased-federation",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "private": true,
   "description": "Fased federation adapter package scaffold (A2A + admission helpers)",
   "type": "module",

package/extensions/google-gemini-cli-auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/google-gemini-cli-auth",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "private": true,
   "description": "FasedAgent Gemini CLI OAuth provider plugin",
   "type": "module",

package/extensions/imessage/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/imessage",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "private": true,
   "description": "FasedAgent iMessage channel plugin",
   "type": "module",

package/extensions/irc/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/irc",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "description": "FasedAgent IRC channel plugin",
   "type": "module",
   "fased": {

package/extensions/line/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/line",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "private": true,
   "description": "FasedAgent LINE channel plugin",
   "type": "module",

package/extensions/llm-task/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/llm-task",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "private": true,
   "description": "FasedAgent JSON-only LLM task plugin",
   "type": "module",

package/extensions/lobster/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/lobster",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "description": "Lobster workflow tool plugin (typed pipelines + resumable approvals)",
   "type": "module",
   "fased": {

package/extensions/matrix/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.1.69
+
+### Changes
+
+- Version alignment with core FasedAgent release numbers.
+
+## 0.1.68
+
+### Changes
+
+- Version alignment with core FasedAgent release numbers.
+
 ## 0.1.67
 
 ### Changes

package/extensions/matrix/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/matrix",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "description": "FasedAgent Matrix channel plugin",
   "type": "module",
   "dependencies": {

package/extensions/mattermost/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/mattermost",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "description": "FasedAgent Mattermost channel plugin",
   "type": "module",
   "fased": {

package/extensions/memory-core/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@fased/memory-core",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "private": true,
   "description": "FasedAgent core memory search plugin",
   "type": "module",
   "peerDependencies": {
-    "@fased/fased": "^0.1.67"
+    "@fased/fased": "^0.1.69"
   },
   "fased": {
     "extensions": [

package/extensions/memory-lancedb/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/memory-lancedb",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "private": true,
   "description": "FasedAgent LanceDB-backed long-term memory plugin with auto-recall/capture",
   "type": "module",

package/extensions/minimax-portal-auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/minimax-portal-auth",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "private": true,
   "description": "FasedAgent MiniMax Portal OAuth provider plugin",
   "type": "module",

package/extensions/msteams/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.1.69
+
+### Changes
+
+- Version alignment with core FasedAgent release numbers.
+
+## 0.1.68
+
+### Changes
+
+- Version alignment with core FasedAgent release numbers.
+
 ## 0.1.67
 
 ### Changes

package/extensions/msteams/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/msteams",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "description": "FasedAgent Microsoft Teams channel plugin",
   "type": "module",
   "dependencies": {

package/extensions/nextcloud-talk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/nextcloud-talk",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "description": "FasedAgent Nextcloud Talk channel plugin",
   "type": "module",
   "fased": {

package/extensions/nostr/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.1.69
+
+### Changes
+
+- Version alignment with core FasedAgent release numbers.
+
+## 0.1.68
+
+### Changes
+
+- Version alignment with core FasedAgent release numbers.
+
 ## 0.1.67
 
 ### Changes

package/extensions/nostr/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/nostr",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "description": "FasedAgent Nostr channel plugin for NIP-04 encrypted DMs",
   "type": "module",
   "dependencies": {

package/extensions/open-prose/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/open-prose",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "private": true,
   "description": "OpenProse VM skill pack plugin (slash command + telemetry).",
   "type": "module",

package/extensions/sat-mining/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/sat-mining",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "private": true,
   "description": "SAT mining plugin scaffold for FasedAgent",
   "type": "module",

package/extensions/signal/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/signal",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "private": true,
   "description": "FasedAgent Signal channel plugin",
   "type": "module",

package/extensions/synology-chat/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/synology-chat",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "description": "Synology Chat channel plugin for FasedAgent",
   "type": "module",
   "dependencies": {

package/extensions/tlon/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/tlon",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "description": "FasedAgent Tlon/Urbit channel plugin",
   "type": "module",
   "dependencies": {