@fased/fased 0.1.67 → 0.1.69

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/fased",
-  "version": "0.1.67",
+  "version": "0.1.69",
   "description": "Fased Agent self-hosted AI gateway with channels, tools, plugins, and operator modules",
   "keywords": [
     "ai-agent",
@@ -52,6 +52,7 @@
     "scripts/migrate-hosted-signer-v2.mjs",
     "scripts/fased-launcher-runtime.mjs",
     "scripts/install-fased-signerd.sh",
+    "scripts/install-runtime-profile.sh",
     "scripts/install-managed-runtime.mjs",
     "scripts/managed-runtime-layout.mjs",
     "scripts/hosted-release-manifest.mjs",
@@ -155,7 +156,7 @@
     "check": "pnpm check:ci",
     "check:ci": "pnpm signer:protocol:check && pnpm sat:signer-codecs:check && pnpm format:check && pnpm lint && pnpm lint:tmp:no-random-messaging && pnpm lint:tmp:channel-agnostic-boundaries && pnpm lint:tmp:no-raw-channel-fetch && pnpm lint:auth:no-pairing-store-group && pnpm lint:auth:pairing-account-scope && pnpm check:host-env-policy:swift",
     "check:dependency-ownership": "node --import tsx scripts/dependency-ownership-report.ts --check",
-    "check:docs": "pnpm format:docs:check && pnpm lint:docs && pnpm docs:check-links",
+    "check:docs": "pnpm format:docs:check && pnpm lint:docs && pnpm docs:check-links && pnpm docs:check-product-contract",
     "check:host-env-policy:swift": "node scripts/generate-host-env-security-policy-swift.mjs --check",
     "check:loc": "node --import tsx scripts/check-ts-max-loc.ts --max 500",
     "check:plugin-sdk:types": "tsc --noEmit --skipLibCheck --module NodeNext --moduleResolution NodeNext --target ES2023 scripts/smoke-plugin-sdk-types.ts",
@@ -176,6 +177,7 @@
     "dev": "node scripts/run-node.mjs",
     "docs:bin": "node scripts/build-docs-list.mjs",
     "docs:check-links": "node scripts/docs-link-audit.mjs",
+    "docs:check-product-contract": "node scripts/docs-product-contract.mjs",
     "docs:dev": "cd docs && mint dev",
     "docs:list": "node scripts/docs-list.js",
     "docs:spellcheck": "bash scripts/docs-spellcheck.sh",

package/scripts/fased-managed-updater.mjs

@@ -291,7 +291,9 @@ async function downloadToFile(url, destination, timeoutMs) {
     cache: "no-store",
   });
   if (!response.ok || !response.body) {
-    throw new Error(`Download failed (${response.status}): ${url}`);
+    const error = new Error(`Download failed (${response.status}): ${url}`);
+    error.statusCode = response.status;
+    throw error;
   }
   await fsp.mkdir(path.dirname(destination), { recursive: true });
   await pipeline(
@@ -3372,7 +3374,7 @@ async function updateManagedRuntime(options) {
     try {
       let unifiedRelease = null;
       let unifiedReleasePath = null;
-      if (existingManifest.profile === "hosting") {
+      try {
         unifiedReleasePath = path.join(temporaryRoot, "fased-hosted-release-v2.json");
         await measureStage(timings, "unified release manifest", async () => {
           await downloadToFile(
@@ -3387,6 +3389,12 @@ async function updateManagedRuntime(options) {
             await readHostedReleaseManifestV2(unifiedReleasePath, { version: targetVersion })
           ).manifest;
         });
+      } catch (error) {
+        if (existingManifest.profile === "hosting" || error?.statusCode !== 404) {
+          throw error;
+        }
+        unifiedReleasePath = null;
+        unifiedRelease = null;
       }
       const appArtifact = unifiedRelease?.application?.linux?.[arch]?.artifact;
       const assetName =

package/scripts/install-fased-signerd.sh

@@ -206,12 +206,8 @@ echo "Installed signer enrollment launcher: $INSTALL_DIR/fased-signer-enroll"
 echo "Installed signer policy launcher: $POLICY_LAUNCHER_PATH"
 echo "Installed fail-closed policy templates: $POLICY_TEMPLATE_DIR"
 cat <<EOF
-Fresh signer-owned wallets remain deny-all. After wallet setup creates a wallet,
-enroll the owner authenticator and apply an explicit reviewed policy as this user:
-  1. $INSTALL_DIR/fased-signer-enroll [authenticator-label]
-  2. Copy the matching owner-only template from $POLICY_TEMPLATE_DIR and replace
-     every REPLACE_WITH_ value.
-  3. $POLICY_LAUNCHER_PATH --initial-install --policy-file /absolute/path/to/policy.json
-
-Enrollment never enables signing, and copying a template never applies it.
+Fresh signer-owned wallets receive their versioned Agent, Mining, or Vault
+baseline during normal wallet setup after the primary RPC is verified. Optional
+authenticator enrollment and $POLICY_LAUNCHER_PATH remain available for advanced
+owner-reviewed customization; copying a template never applies it.
 EOF

package/scripts/install-managed-runtime.mjs

@@ -220,15 +220,15 @@ export async function installManagedRuntime(params, dependencyOverrides = {}) {
     ...dependencyOverrides,
   };
   const paths = resolveManagedRuntimePaths(params);
+  const profile = normalizeManagedProfile(params.profile);
   const existingManifest = readManagedInstallManifest(paths.manifestPath);
   const version = await assertManagedRuntime(params.packageRoot);
   const metadata = await readHostedRuntimeMetadata(params.packageRoot);
-  const hostedRelease = await readHostedReleaseBinding(params.packageRoot, metadata, version);
-  if (
-    normalizeManagedProfile(params.profile) === "hosting" &&
-    params.hostTransactionId &&
-    !hostedRelease
-  ) {
+  const hostedRelease =
+    profile === "hosting"
+      ? await readHostedReleaseBinding(params.packageRoot, metadata, version)
+      : null;
+  if (profile === "hosting" && params.hostTransactionId && !hostedRelease) {
     throw new Error(
       "Maintained Hosting requires an attested unified app and signer release manifest.",
     );
@@ -399,7 +399,10 @@ export async function rollbackManagedRuntime(params) {
   const previousVersion = await assertManagedRuntime(previousRoot);
   const currentVersion = await readPackageVersion(currentRoot);
   const metadata = await readHostedRuntimeMetadata(previousRoot);
-  const hostedRelease = await readHostedReleaseBinding(previousRoot, metadata, previousVersion);
+  const hostedRelease =
+    normalizeManagedProfile(manifest.profile) === "hosting"
+      ? await readHostedReleaseBinding(previousRoot, metadata, previousVersion)
+      : null;
 
   await atomicSymlink(currentRoot, paths.previousLink);
   await atomicSymlink(previousRoot, paths.currentLink);

package/scripts/install-runtime-profile.sh

@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+
+fased_supports_prebuilt_release_runtime() {
+  local os_name="$1"
+  local architecture="$2"
+  [[ "$os_name" == "Linux" ]] || return 1
+  case "$architecture" in
+    x86_64|amd64|aarch64|arm64) return 0 ;;
+    *) return 1 ;;
+  esac
+}
+
+fased_should_use_prebuilt_release_runtime() {
+  local profile="$1"
+  local source_requested="$2"
+  local source_env="$3"
+  local hosting_source_env="$4"
+  local os_name="$5"
+  local architecture="$6"
+
+  [[ "$source_requested" != "1" ]] || return 1
+  [[ "$source_env" != "1" ]] || return 1
+  if [[ "$profile" == "hosting" && "$hosting_source_env" == "1" ]]; then
+    return 1
+  fi
+  fased_supports_prebuilt_release_runtime "$os_name" "$architecture"
+}

package/scripts/start-managed.sh

@@ -538,6 +538,12 @@ load_wallet_signer_env_from_config() {
       || [[ "$key" == "FASED_WALLET_SIGNER_STATE_DIR" ]] \
       || [[ "$key" == "FASED_WALLET_LOCAL_SIGNER_BIN" ]] \
       || [[ "$key" == "FASED_SAT_PROGRAM_ID" ]] \
+      || [[ "$key" == "FASED_SAT_BOND_PROGRAM_ID" ]] \
+      || [[ "$key" == "FASED_SAT_MINT_ADDRESS" ]] \
+      || [[ "$key" == "FASED_SAT_MINT_PROGRAM_ID" ]] \
+      || [[ "$key" == "FASED_SAT_RUNTIME_MANIFEST_PATH" ]] \
+      || [[ "$key" == "FASED_SAT_RUNTIME_MANIFEST_SHA256" ]] \
+      || [[ "$key" == "FASED_SAT_RUNTIME_MANIFEST_SIGNATURE_PATH" ]] \
       || [[ "$key" == "FASED_SAT_ENABLE_ALT_V0" ]] \
       || [[ "$key" =~ ^FASED_WALLET_LOCAL_SIGNER_(ROLE|DIRECT_SIGNING|CAPS_ENABLED|SOLANA_MAX_PER_TX|SOLANA_MAX_DAILY|SOLANA_ALLOW_PROGRAMS)(__[A-Za-z0-9_-]+)?$ ]]; then
       export "$key=$value"
@@ -557,6 +563,12 @@ load_wallet_signer_env_from_config() {
             or . == "FASED_WALLET_SIGNER_STATE_DIR"
             or . == "FASED_WALLET_LOCAL_SIGNER_BIN"
             or . == "FASED_SAT_PROGRAM_ID"
+            or . == "FASED_SAT_BOND_PROGRAM_ID"
+            or . == "FASED_SAT_MINT_ADDRESS"
+            or . == "FASED_SAT_MINT_PROGRAM_ID"
+            or . == "FASED_SAT_RUNTIME_MANIFEST_PATH"
+            or . == "FASED_SAT_RUNTIME_MANIFEST_SHA256"
+            or . == "FASED_SAT_RUNTIME_MANIFEST_SIGNATURE_PATH"
             or . == "FASED_SAT_ENABLE_ALT_V0"
             or test("^FASED_WALLET_LOCAL_SIGNER_(ROLE|DIRECT_SIGNING|CAPS_ENABLED|SOLANA_MAX_PER_TX|SOLANA_MAX_DAILY|SOLANA_ALLOW_PROGRAMS)(__[A-Za-z0-9_-]+)?$")
         )
@@ -574,7 +586,7 @@ load_wallet_signer_env_file() {
   # Older signer.env files may contain Node-era key/passphrase variables. Import only
   # the non-custody settings required by the native signer, never every wallet variable.
   source <(
-    grep -E '^export FASED_WALLET_(SOLANA_RPC_URL(__[A-Za-z0-9_-]+)?|CHAINS|SIGNER_STATE_DIR|WEBAUTHN_(RP_ID|ORIGINS)|LOCAL_SIGNER_(SOCKET|CONTROL_SOCKET|STATE_DB|MASTER_KEY|BIN|ROLE|DIRECT_SIGNING|CAPS_ENABLED|SOLANA_MAX_PER_TX|SOLANA_MAX_DAILY|SOLANA_ALLOW_PROGRAMS)(__[A-Za-z0-9_-]+)?)=' "$SIGNERD_ENV_FILE" || true
+    grep -E '^export (FASED_WALLET_(SOLANA_RPC_URL(__[A-Za-z0-9_-]+)?|CHAINS|SIGNER_STATE_DIR|WEBAUTHN_(RP_ID|ORIGINS)|LOCAL_SIGNER_(SOCKET|CONTROL_SOCKET|STATE_DB|MASTER_KEY|BIN|ROLE|DIRECT_SIGNING|CAPS_ENABLED|SOLANA_MAX_PER_TX|SOLANA_MAX_DAILY|SOLANA_ALLOW_PROGRAMS)(__[A-Za-z0-9_-]+)?)|FASED_SAT_(PROGRAM_ID|BOND_PROGRAM_ID|MINT_ADDRESS|MINT_PROGRAM_ID|RUNTIME_MANIFEST_(PATH|SHA256|SIGNATURE_PATH)))=' "$SIGNERD_ENV_FILE" || true
   )
   set +a
 }