@fased/fased 0.1.67 → 0.1.69

package/dist/mining/mainnet-sync.js

@@ -1,4 +1,4 @@
-import { SAT_RUNTIME_ENV_KEYS, resolveSatRuntimeIds, resolveWritableSatRuntimeDefaultsFile } from "../config/sat-runtime-ids.js";
+import { SAT_RUNTIME_ENV_KEYS, SAT_RUNTIME_TRUST_ENV_KEYS, resolveSatRuntimeIds, resolveWritableSatRuntimeDefaultsFile } from "../config/sat-runtime-ids.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 import { createHash, createPublicKey, verify } from "node:crypto";
@@ -180,24 +180,43 @@ function readLocalIds(env) {
 function idsEqual(left, right) {
 	return Boolean(left && right && left.programId === right.programId && left.bondProgramId === right.bondProgramId && left.mintAddress === right.mintAddress && left.mintProgramId === right.mintProgramId);
 }
-function buildEnvFile(ids) {
+function buildEnvFile(ids, trust) {
 	return [
 		"# Managed by Fased Agent official SAT mainnet sync.",
 		`${SAT_RUNTIME_ENV_KEYS.programId}=${ids.programId}`,
 		`${SAT_RUNTIME_ENV_KEYS.bondProgramId}=${ids.bondProgramId}`,
 		`${SAT_RUNTIME_ENV_KEYS.mintAddress}=${ids.mintAddress}`,
 		`${SAT_RUNTIME_ENV_KEYS.mintProgramId}=${ids.mintProgramId}`,
+		`${SAT_RUNTIME_TRUST_ENV_KEYS.manifestPath}=${trust.manifestPath}`,
+		`${SAT_RUNTIME_TRUST_ENV_KEYS.manifestSha256}=${trust.manifestSha256}`,
+		`${SAT_RUNTIME_TRUST_ENV_KEYS.manifestSignaturePath}=${trust.manifestSignaturePath}`,
 		""
 	].join("\n");
 }
-async function writeRuntimeIds(ids, env) {
+async function writeRuntimeIds(ids, env, trust) {
 	const runtimeFile = resolveWritableSatRuntimeDefaultsFile(env);
+	const manifestPath = `${runtimeFile}.manifest.json`;
+	const manifestSignaturePath = `${runtimeFile}.manifest.sig`;
 	await fs.mkdir(path.dirname(runtimeFile), { recursive: true });
-	await fs.writeFile(runtimeFile, buildEnvFile(ids), { mode: 384 });
+	await fs.writeFile(manifestPath, trust.rawManifest, { mode: 384 });
+	await fs.writeFile(manifestSignaturePath, `${trust.signature.trim()}\n`, { mode: 384 });
+	await fs.writeFile(runtimeFile, buildEnvFile(ids, {
+		manifestPath,
+		manifestSha256: trust.manifestSha256,
+		manifestSignaturePath
+	}), { mode: 384 });
+	await Promise.all([
+		fs.chmod(manifestPath, 384),
+		fs.chmod(manifestSignaturePath, 384),
+		fs.chmod(runtimeFile, 384)
+	]);
 	env[SAT_RUNTIME_ENV_KEYS.programId] = ids.programId;
 	env[SAT_RUNTIME_ENV_KEYS.bondProgramId] = ids.bondProgramId;
 	env[SAT_RUNTIME_ENV_KEYS.mintAddress] = ids.mintAddress;
 	env[SAT_RUNTIME_ENV_KEYS.mintProgramId] = ids.mintProgramId;
+	env[SAT_RUNTIME_TRUST_ENV_KEYS.manifestPath] = manifestPath;
+	env[SAT_RUNTIME_TRUST_ENV_KEYS.manifestSha256] = trust.manifestSha256;
+	env[SAT_RUNTIME_TRUST_ENV_KEYS.manifestSignaturePath] = manifestSignaturePath;
 	return runtimeFile;
 }
 async function getSatMainnetSyncStatus(opts) {
@@ -312,7 +331,50 @@ async function syncSatMainnetRuntimeIds(opts) {
 			message: before.state === "not_live" ? "Satcoin mainnet is not live yet." : before.message || "SAT mainnet manifest is not ready to apply."
 		};
 	}
-	const runtimeFile = await writeRuntimeIds(before.officialIds, env);
+	const manifestUrl = opts?.manifestUrl?.trim() || resolveManifestUrl(env);
+	const rawManifest = await fetchText(manifestUrl, { required: true });
+	const manifestSha256 = parseSha256(await fetchText(`${manifestUrl}.sha256`, { required: true }));
+	const signature = await fetchText(`${manifestUrl}.sig`, { required: true });
+	if (!rawManifest || !manifestSha256 || !signature?.trim()) {
+		return {
+			...before,
+			ok: false,
+			state: "failed",
+			message: "Verified SAT manifest artifacts could not be persisted for the native signer.",
+			error: "signed SAT runtime manifest, hash, or detached signature is missing"
+		};
+	}
+	const finalVerification = await verifyLiveManifest({
+		manifestUrl,
+		raw: rawManifest,
+		env
+	});
+	if (finalVerification.verification.hash !== "valid" || finalVerification.verification.signature !== "valid" || sha256Hex(rawManifest) !== manifestSha256) {
+		return {
+			...before,
+			ok: false,
+			state: "failed",
+			message: "SAT manifest changed before signer runtime persistence.",
+			verification: finalVerification.verification,
+			trustKeySource: finalVerification.trustKeySource,
+			error: "signed SAT runtime manifest verification raced or failed"
+		};
+	}
+	const persistedManifest = JSON.parse(rawManifest);
+	if (!idsEqual(readOfficialIds(persistedManifest), before.officialIds)) {
+		return {
+			...before,
+			ok: false,
+			state: "failed",
+			message: "SAT manifest IDs changed before signer runtime persistence.",
+			error: "signed SAT runtime ID tuple changed during sync"
+		};
+	}
+	const runtimeFile = await writeRuntimeIds(before.officialIds, env, {
+		rawManifest,
+		manifestSha256,
+		signature
+	});
 	const after = await getSatMainnetSyncStatus({
 		env,
 		manifestUrl: opts?.manifestUrl

package/dist/operator/operator-readiness.js

@@ -56,7 +56,7 @@ function describeOperatorReadinessChecklist(input) {
 		agentWallet ? {
 			title: "Agent wallet set",
 			summary: defaultWallet && firstAgentWallet && defaultWallet.id !== firstAgentWallet.id ? `${defaultWallet.name} · ${firstAgentWallet.name}` : agentWallet.name,
-			detail: defaultWallet ? "This primary Agent wallet handles paid A2A sends, payment evidence publication, skill/plugin wallet actions, and routine transfers when no explicit @wallet handle is supplied." : "This Agent wallet can be selected by explicit @wallet handle. Set it as primary if it should be the fallback when no handle is supplied.",
+			detail: defaultWallet ? "This Default Agent wallet is the final fallback for paid A2A sends, payment evidence publication, skill/plugin wallet actions, and routine transfers after explicit, skill, and Agent assignment routing." : "This Agent wallet can be selected explicitly or assigned to an Agent or skill. Set it as the optional fallback only when global fallback behavior is wanted.",
 			tone: "success"
 		} : defaultWalletId ? {
 			title: "Agent wallet set",

package/dist/plugin-sdk/{actions-DRu135h0.js → actions-B-Vwj64K.js}

@@ -1,9 +1,9 @@
 import { i as logVerbose } from "./globals-B_jjtAje.js";
 import { r as loadConfig } from "./config-DlWVeLFB.js";
 import { i as resolveSlackAccount, s as resolveSlackBotToken } from "./accounts-CuqIKU8X.js";
-import { n as validateSlackBlocksArray } from "./blocks-input-Bg-8S2pl.js";
-import { i as buildSlackBlocksFallbackText, t as sendMessageSlack } from "./send-gDoGA-7e.js";
-import { n as createSlackWebClient } from "./client-pI228AVT.js";
+import { n as validateSlackBlocksArray } from "./blocks-input-DiZaqaN7.js";
+import { i as buildSlackBlocksFallbackText, t as sendMessageSlack } from "./send-Di1Jit3L.js";
+import { n as createSlackWebClient } from "./client-DLY-kWF_.js";
 
 //#region src/slack/actions.ts
 function resolveToken(explicit, accountId) {

package/dist/plugin-sdk/{allow-list-DyAxs4yw.js → allow-list-Bf45HfoP.js}

@@ -1,5 +1,5 @@
 import { n as retryAsync, t as resolveRetryConfig } from "./retry-DstNBhDW.js";
-import { t as resolveFetch } from "./fetch-BtmoPIlf.js";
+import { t as resolveFetch } from "./fetch-B0v6OTUZ.js";
 
 //#region src/channels/channel-config.ts
 function applyChannelMatchMeta(result, match) {

package/dist/plugin-sdk/{audio-preflight-Dq_rJtqH.js → audio-preflight-CS7Q_7-R.js}

@@ -1,5 +1,5 @@
-import { Et as isAudioAttachment, St as normalizeMediaAttachments, Tt as runCapability, bt as buildProviderRegistry, wt as resolveMediaAttachmentLocalRoots, xt as createMediaAttachmentCache } from "./config-schema--vl89M7d.js";
-import "./runtime-2B9_WKoI.js";
+import { Et as isAudioAttachment, St as normalizeMediaAttachments, Tt as runCapability, bt as buildProviderRegistry, wt as resolveMediaAttachmentLocalRoots, xt as createMediaAttachmentCache } from "./config-schema-BiBOUW89.js";
+import "./runtime-CXSQwMaR.js";
 import "./subsystem-DBPNbQDQ.js";
 import { i as logVerbose, s as shouldLogVerbose } from "./globals-B_jjtAje.js";
 import "./paths-BEmvSyOV.js";
@@ -11,23 +11,23 @@ import "./accounts-CuqIKU8X.js";
 import "./logger-BbFvCoKk.js";
 import "./exec-DQ8j4Fm3.js";
 import "./accounts-Brn3-uWN.js";
-import "./allow-list-DyAxs4yw.js";
+import "./allow-list-Bf45HfoP.js";
 import "./redact-Bm8vu_ju.js";
 import "./github-copilot-token-CUK__1s1.js";
 import "./retry-DstNBhDW.js";
 import "./paths-CTZ2RS_E.js";
 import "./ssrf-fG4UHKBw.js";
 import "./fetch-guard-CeG6u6ld.js";
-import "./send-CFzGKJXo.js";
+import "./send-D-HfKQZm.js";
 import "./helpers-DMBU4oTo.js";
-import "./wsl-J-HscWxS.js";
-import "./pairing-store-BChahgI2.js";
-import "./chunk-CyoyqpbG.js";
+import "./wsl-CTvIWvZz.js";
+import "./pairing-store-B6J2C0vP.js";
+import "./chunk-CBpl-AiQ.js";
 import "./tailscale-status-DwpNdO3Z.js";
 import "./reply-prefix-CeVw7Mn2.js";
 import "./tokens-BbnqfVuu.js";
 import "./pairing-token-Cs3BRKc0.js";
-import "./diagnostic-DLL_zekv.js";
+import "./diagnostic-sYs6Agr-.js";
 import "./diagnostic-session-state-DqgfGYqZ.js";
 import "./optional-runtime-dependency-0dznm3ZO.js";
 import "./image-ops-DQi0n_Tt.js";
@@ -35,25 +35,26 @@ import "./memory-search-CrFPOeTH.js";
 import "./manager-BegWxNYX.js";
 import "./query-expansion-BG3FgzF7.js";
 import "./common-HCcXU-NR.js";
-import "./commands-registry-BfqdEWdF.js";
-import "./runtime-dependency-nup8niQL.js";
+import "./commands-registry-G5KXSi_y.js";
+import "./runtime-dependency-DczkvPxn.js";
 import "./path-alias-guards-DjgDArrp.js";
 import "./fs-safe-g4g7GT02.js";
-import "./media-CAdQF5TG.js";
-import "./markdown-tables-DCOXEUfZ.js";
-import "./send-B6KkGKZD.js";
-import "./outbound-attachment-QqTnIhZL.js";
-import "./fetch-BtmoPIlf.js";
-import "./thread-bindings.state-D9hg_M1c.js";
-import "./skill-commands-FKEPLS7T.js";
-import "./sandbox-paths-Dx2lUqCu.js";
-import "./directory-live-CSuYxdwk.js";
-import "./targets-CtSbTxYX.js";
-import "./pi-model-discovery-BX_JLcEJ.js";
-import "./resolve-route-C8tvQm8Z.js";
-import "./render-e7fENCYH.js";
-import "./tables-B3jr0Pvq.js";
-import "./shared-CBgp_GBw.js";
+import "./qr-image-B4MlMG4N.js";
+import "./media-BAoaxCrt.js";
+import "./markdown-tables-d7GlUs5R.js";
+import "./send-D1j12ZgX.js";
+import "./outbound-attachment-CyXM3cAv.js";
+import "./fetch-B0v6OTUZ.js";
+import "./thread-bindings.state-D2oOWDpv.js";
+import "./skill-commands-iJtvpqgb.js";
+import "./sandbox-paths-Bzh1CuZc.js";
+import "./directory-live-BXMpuYAF.js";
+import "./targets-DDbNnLnB.js";
+import "./pi-model-discovery-BHNVyRny.js";
+import "./resolve-route-Dufnu2cT.js";
+import "./render-DrBfVs0u.js";
+import "./tables-_1W36GII.js";
+import "./shared-D1AD2Ejn.js";
 
 //#region src/media-understanding/audio-preflight.ts
 /**

package/dist/plugin-sdk/{audit-C5d2z5U1.js → audit-CUULWG22.js}

@@ -1,7 +1,7 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { c as isRecord } from "./utils-CYk9EKoq.js";
 import { a as resolveDiscordAccount } from "./accounts-RHZyaB73.js";
-import { $ as fetchChannelPermissionsDiscord } from "./send-DCO441U7.js";
+import { $ as fetchChannelPermissionsDiscord } from "./send-BXBS_mRK.js";
 
 //#region src/discord/audit.ts
 var audit_exports = /* @__PURE__ */ __exportAll({

package/dist/plugin-sdk/{channel-access-configure-DaI5wevh.js → channel-access-configure-BoUsC-Ys.js}

@@ -1,4 +1,4 @@
-import { t as promptChannelAccessConfig } from "./channel-access-CcFRdRPO.js";
+import { t as promptChannelAccessConfig } from "./channel-access-B0aZBSd2.js";
 
 //#region src/channels/plugins/onboarding/channel-access-configure.ts
 async function configureChannelAccessWithAllowlist(params) {

package/dist/plugin-sdk/{channel-adapters.discord-BS4S4Svh.js → channel-adapters.discord-DSiR4X2Y.js}

@@ -1,5 +1,5 @@
 import "./accounts-RHZyaB73.js";
-import { t as DiscordUiContainer } from "./ui-Be8cLHIS.js";
+import { t as DiscordUiContainer } from "./ui-GQDYm_jw.js";
 import { Separator, TextDisplay } from "@buape/carbon";
 
 //#region src/infra/outbound/channel-adapters.discord.ts

package/dist/plugin-sdk/channel-plugin-common.d.ts

@@ -1,5 +1,5 @@
 import { n as DEFAULT_ACCOUNT_ID, r as normalizeAccountId } from "./session-key--_1zVBRB.js";
 import { Y as ChannelMessageActionContext, n as ChannelPlugin, ut as getChatChannelMeta } from "./types.plugin-BcSBq42x.js";
-import { _ as FasedAgentPluginApi, t as PluginRuntime } from "./types-eG9aYqXF.js";
-import { a as buildChannelConfigSchema, c as emptyPluginConfigSchema, i as setAccountEnabledInConfigSection, n as formatPairingApproveHint, o as applyAccountNameToChannelSection, r as deleteAccountFromConfigSection, s as migrateBaseNameToDefaultAccount, t as PAIRING_APPROVED_MESSAGE } from "./pairing-message-BjIJYVvp.js";
+import { _ as FasedAgentPluginApi, t as PluginRuntime } from "./types-BakzIzGN.js";
+import { a as buildChannelConfigSchema, c as emptyPluginConfigSchema, i as setAccountEnabledInConfigSection, n as formatPairingApproveHint, o as applyAccountNameToChannelSection, r as deleteAccountFromConfigSection, s as migrateBaseNameToDefaultAccount, t as PAIRING_APPROVED_MESSAGE } from "./pairing-message-CiTcdD6m.js";
 export { type ChannelMessageActionContext, type ChannelPlugin, DEFAULT_ACCOUNT_ID, type FasedAgentPluginApi, PAIRING_APPROVED_MESSAGE, type PluginRuntime, applyAccountNameToChannelSection, buildChannelConfigSchema, deleteAccountFromConfigSection, emptyPluginConfigSchema, formatPairingApproveHint, getChatChannelMeta, migrateBaseNameToDefaultAccount, normalizeAccountId, setAccountEnabledInConfigSection };

package/dist/plugin-sdk/channel-plugin-common.js

@@ -1,4 +1,4 @@
-import { Nn as getChatChannelMeta } from "./runtime-2B9_WKoI.js";
+import { Nn as getChatChannelMeta } from "./runtime-CXSQwMaR.js";
 import "./subsystem-DBPNbQDQ.js";
 import "./globals-B_jjtAje.js";
 import "./paths-BEmvSyOV.js";

package/dist/plugin-sdk/{chunk-CyoyqpbG.js → chunk-CBpl-AiQ.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { xn as INTERNAL_MESSAGE_CHANNEL } from "./runtime-2B9_WKoI.js";
+import { xn as INTERNAL_MESSAGE_CHANNEL } from "./runtime-CXSQwMaR.js";
 import { n as resolveAccountEntry } from "./account-helpers-Bdfws46K.js";
 import { p as normalizeAccountId } from "./session-key-HSJ2KQTc.js";
 

package/dist/plugin-sdk/{chunk-items-Dunoq4Er.js → chunk-items-BLBZNORg.js}

@@ -1,4 +1,4 @@
-import { an as wrapExternalContent } from "./config-schema--vl89M7d.js";
+import { an as wrapExternalContent } from "./config-schema-BiBOUW89.js";
 
 //#region src/security/channel-metadata.ts
 const DEFAULT_MAX_CHARS = 800;

package/dist/plugin-sdk/command-status.js

@@ -1,5 +1,5 @@
-import { Ht as buildCommandsMessage, Ut as buildCommandsMessagePaginated, Wt as buildHelpMessage } from "./config-schema--vl89M7d.js";
-import "./runtime-2B9_WKoI.js";
+import { Ht as buildCommandsMessage, Ut as buildCommandsMessagePaginated, Wt as buildHelpMessage } from "./config-schema-BiBOUW89.js";
+import "./runtime-CXSQwMaR.js";
 import "./subsystem-DBPNbQDQ.js";
 import "./globals-B_jjtAje.js";
 import "./paths-BEmvSyOV.js";
@@ -11,23 +11,23 @@ import "./accounts-CuqIKU8X.js";
 import "./logger-BbFvCoKk.js";
 import "./exec-DQ8j4Fm3.js";
 import "./accounts-Brn3-uWN.js";
-import "./allow-list-DyAxs4yw.js";
+import "./allow-list-Bf45HfoP.js";
 import "./redact-Bm8vu_ju.js";
 import "./github-copilot-token-CUK__1s1.js";
 import "./retry-DstNBhDW.js";
 import "./paths-CTZ2RS_E.js";
 import "./ssrf-fG4UHKBw.js";
 import "./fetch-guard-CeG6u6ld.js";
-import "./send-CFzGKJXo.js";
+import "./send-D-HfKQZm.js";
 import "./helpers-DMBU4oTo.js";
-import "./wsl-J-HscWxS.js";
-import "./pairing-store-BChahgI2.js";
-import "./chunk-CyoyqpbG.js";
+import "./wsl-CTvIWvZz.js";
+import "./pairing-store-B6J2C0vP.js";
+import "./chunk-CBpl-AiQ.js";
 import "./tailscale-status-DwpNdO3Z.js";
 import "./reply-prefix-CeVw7Mn2.js";
 import "./tokens-BbnqfVuu.js";
 import "./pairing-token-Cs3BRKc0.js";
-import "./diagnostic-DLL_zekv.js";
+import "./diagnostic-sYs6Agr-.js";
 import "./diagnostic-session-state-DqgfGYqZ.js";
 import "./optional-runtime-dependency-0dznm3ZO.js";
 import "./image-ops-DQi0n_Tt.js";
@@ -35,24 +35,25 @@ import "./memory-search-CrFPOeTH.js";
 import "./manager-BegWxNYX.js";
 import "./query-expansion-BG3FgzF7.js";
 import "./common-HCcXU-NR.js";
-import "./commands-registry-BfqdEWdF.js";
-import "./runtime-dependency-nup8niQL.js";
+import "./commands-registry-G5KXSi_y.js";
+import "./runtime-dependency-DczkvPxn.js";
 import "./path-alias-guards-DjgDArrp.js";
 import "./fs-safe-g4g7GT02.js";
-import "./media-CAdQF5TG.js";
-import "./markdown-tables-DCOXEUfZ.js";
-import "./send-B6KkGKZD.js";
-import "./outbound-attachment-QqTnIhZL.js";
-import "./fetch-BtmoPIlf.js";
-import "./thread-bindings.state-D9hg_M1c.js";
-import "./skill-commands-FKEPLS7T.js";
-import "./sandbox-paths-Dx2lUqCu.js";
-import "./directory-live-CSuYxdwk.js";
-import "./targets-CtSbTxYX.js";
-import "./pi-model-discovery-BX_JLcEJ.js";
-import "./resolve-route-C8tvQm8Z.js";
-import "./render-e7fENCYH.js";
-import "./tables-B3jr0Pvq.js";
-import "./shared-CBgp_GBw.js";
+import "./qr-image-B4MlMG4N.js";
+import "./media-BAoaxCrt.js";
+import "./markdown-tables-d7GlUs5R.js";
+import "./send-D1j12ZgX.js";
+import "./outbound-attachment-CyXM3cAv.js";
+import "./fetch-B0v6OTUZ.js";
+import "./thread-bindings.state-D2oOWDpv.js";
+import "./skill-commands-iJtvpqgb.js";
+import "./sandbox-paths-Bzh1CuZc.js";
+import "./directory-live-BXMpuYAF.js";
+import "./targets-DDbNnLnB.js";
+import "./pi-model-discovery-BHNVyRny.js";
+import "./resolve-route-Dufnu2cT.js";
+import "./render-DrBfVs0u.js";
+import "./tables-_1W36GII.js";
+import "./shared-D1AD2Ejn.js";
 
 export { buildCommandsMessage, buildCommandsMessagePaginated, buildHelpMessage };

package/dist/plugin-sdk/{commands-registry-BfqdEWdF.js → commands-registry-G5KXSi_y.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { Ot as listChannelDocks, lt as normalizeChannelId, t as getActivePluginRegistry } from "./runtime-2B9_WKoI.js";
+import { Ot as listChannelDocks, lt as normalizeChannelId, t as getActivePluginRegistry } from "./runtime-CXSQwMaR.js";
 import { C as isPlainObject, o as escapeRegExp } from "./utils-CYk9EKoq.js";
 import { $i as DEFAULT_PROVIDER, Qi as DEFAULT_MODEL, Ui as listThinkingLevels, Yt as resolveConfiguredModelRef } from "./config-DlWVeLFB.js";