@fased/fased 0.1.68 → 0.1.69

package/dist/wallet/wallet-provider-registry.js

@@ -479,9 +479,6 @@ function upsertNamedWallet(params) {
 		updatedAt: now
 	};
 	registry.wallets = [...registry.wallets.filter((entry) => entry.id !== next.id), next].toSorted((a, b) => a.createdAt.localeCompare(b.createdAt));
-	if (!registry.defaultWalletId || !registry.wallets.some((wallet) => wallet.id === registry.defaultWalletId)) {
-		registry.defaultWalletId = resolveWalletUserRole(next) === "agent" ? next.id : undefined;
-	}
 	writeWalletProviderRegistry(registry, env);
 	return next;
 }
@@ -497,6 +494,10 @@ function deleteNamedWallet(params) {
 		walletId,
 		env
 	});
+	const targetWallet = registry.wallets.find((wallet) => wallet.id === walletId);
+	if (resolveWalletUserRole(targetWallet) === "mining") {
+		throw new Error("Mining wallets cannot be deleted directly; use Retire and replace Mining wallet so signer acknowledgement precedes registry detachment");
+	}
 	const before = registry.wallets.length;
 	registry.wallets = registry.wallets.filter((entry) => entry.id !== walletId);
 	for (const [agentId, assignedWalletId] of Object.entries(registry.assignments)) {
@@ -514,6 +515,50 @@ function deleteNamedWallet(params) {
 		registry
 	};
 }
+function replaceRetiredMiningWallet(params) {
+	const env = params.env ?? process.env;
+	const registry = readWalletProviderRegistry(env);
+	const sourceWalletId = params.sourceWalletId.trim();
+	if (!/^sha256:[0-9a-f]{64}$/u.test(params.signerAcknowledgement.rotationId) || !/^sha256:[0-9a-f]{64}$/u.test(params.signerAcknowledgement.sourceRetiredPolicyHash) || !/^sha256:[0-9a-f]{64}$/u.test(params.signerAcknowledgement.successorPolicyHash) || params.signerAcknowledgement.successorPublicKey !== params.successor.addresses?.solana || params.successor.metadata?.rotationId !== params.signerAcknowledgement.rotationId || params.successor.metadata?.policyHash !== params.signerAcknowledgement.successorPolicyHash) {
+		throw new Error("signer retirement acknowledgement is missing or does not match the successor");
+	}
+	const sourceIndex = registry.wallets.findIndex((wallet) => wallet.id === sourceWalletId);
+	if (sourceIndex < 0) {
+		const existing = registry.wallets.find((wallet) => wallet.id === params.successor.id);
+		if (existing?.providerId === "local-socket-signer" && existing.addresses?.solana === params.successor.addresses?.solana && resolveWalletUserRole(existing) === "mining") {
+			return existing;
+		}
+		throw new Error("retired Mining source registration is missing");
+	}
+	const source = registry.wallets[sourceIndex];
+	if (resolveWalletUserRole(source) !== "mining") {
+		throw new Error("source registration is not the active Mining wallet");
+	}
+	if (params.successor.id === sourceWalletId || registry.wallets.some((wallet) => wallet.id === params.successor.id)) {
+		throw new Error("Mining successor registration must use a new wallet id");
+	}
+	assertNamedWalletDeletionSafe({
+		walletId: sourceWalletId,
+		env
+	});
+	const now = nowIso();
+	const successor = {
+		...params.successor,
+		createdAt: now,
+		updatedAt: now
+	};
+	registry.wallets.splice(sourceIndex, 1, successor);
+	for (const [agentId, assignedWalletId] of Object.entries(registry.assignments)) {
+		if (assignedWalletId === sourceWalletId) {
+			delete registry.assignments[agentId];
+		}
+	}
+	if (registry.defaultWalletId === sourceWalletId) {
+		registry.defaultWalletId = undefined;
+	}
+	writeWalletProviderRegistry(registry, env);
+	return successor;
+}
 function setAgentWalletAssignment(params) {
 	const env = params.env ?? process.env;
 	const registry = readWalletProviderRegistry(env);
@@ -527,9 +572,13 @@ function setAgentWalletAssignment(params) {
 		writeWalletProviderRegistry(registry, env);
 		return registry;
 	}
-	if (!registry.wallets.some((wallet) => wallet.id === walletId)) {
+	const wallet = registry.wallets.find((entry) => entry.id === walletId);
+	if (!wallet) {
 		throw new Error("walletId does not exist");
 	}
+	if (resolveWalletUserRole(wallet) !== "agent") {
+		throw new Error("only Agent wallets can be assigned to an Agent");
+	}
 	registry.assignments[agentId] = walletId;
 	writeWalletProviderRegistry(registry, env);
 	return registry;
@@ -548,23 +597,9 @@ function setDefaultWallet(params) {
 		throw new Error("walletId does not exist");
 	}
 	const purpose = resolveWalletUserRole(targetWallet);
-	if (purpose && purpose !== "agent") {
-		throw new Error("only Agent wallets can become the primary Agent fallback");
+	if (purpose !== "agent") {
+		throw new Error("only an explicit Agent wallet can become the Default Agent wallet fallback");
 	}
-	registry.wallets = registry.wallets.map((wallet) => {
-		if (wallet.id !== walletId) {
-			return wallet;
-		}
-		return {
-			...wallet,
-			metadata: {
-				...wallet.metadata,
-				role: "agent",
-				purpose: "agent"
-			},
-			updatedAt: nowIso()
-		};
-	});
 	registry.defaultWalletId = walletId;
 	writeWalletProviderRegistry(registry, env);
 	return registry;
@@ -588,12 +623,15 @@ function setNamedWalletRole(params) {
 		},
 		updatedAt: nowIso()
 	} : wallet);
-	if (params.role === "agent" && !registry.defaultWalletId) {
-		registry.defaultWalletId = walletId;
+	if (params.role !== "agent" && registry.defaultWalletId === walletId) {
+		registry.defaultWalletId = undefined;
 	}
-	if (params.role === "vault" && registry.defaultWalletId === walletId) {
-		const nextDefault = registry.wallets.find((wallet) => wallet.id !== walletId && resolveWalletUserRole(wallet) === "agent");
-		registry.defaultWalletId = nextDefault?.id;
+	if (params.role !== "agent") {
+		for (const [agentId, assignedWalletId] of Object.entries(registry.assignments)) {
+			if (assignedWalletId === walletId) {
+				delete registry.assignments[agentId];
+			}
+		}
 	}
 	writeWalletProviderRegistry(registry, env);
 	return registry;
@@ -603,7 +641,8 @@ function resolveWalletSelectionForAgent(params) {
 	const registry = readWalletProviderRegistry(env);
 	const directAgent = params.agentId?.trim();
 	const directWalletId = directAgent ? registry.assignments[directAgent] : undefined;
-	const walletId = directWalletId ?? registry.defaultWalletId;
+	const skillWalletId = params.skillWalletId?.trim();
+	const walletId = skillWalletId ?? directWalletId ?? registry.defaultWalletId;
 	if (!walletId) {
 		return {};
 	}
@@ -614,7 +653,8 @@ function resolveWalletSelectionForAgent(params) {
 	return {
 		walletId: wallet.id,
 		walletName: wallet.name,
-		providerId: wallet.providerId
+		providerId: wallet.providerId,
+		source: skillWalletId ? "skill" : directWalletId ? "agent" : "default"
 	};
 }
 function resolveWalletSelection(params) {
@@ -676,16 +716,17 @@ function resolveWalletSelection(params) {
 	}
 	const fallback = resolveWalletSelectionForAgent({
 		agentId: params.agentId,
+		skillWalletId: params.skillWalletId,
 		env
 	});
 	if (fallback.walletId || fallback.providerId) {
 		return {
 			...fallback,
-			source: "fallback"
+			source: fallback.source ?? "fallback"
 		};
 	}
 	return { source: "none" };
 }
 
 //#endregion
-export { WALLET_PROVIDER_IDS, checkNamedWalletDeletionSafety, deleteNamedWallet, normalizeWalletUserRole, readWalletProviderRegistry, resolveWalletSelection, resolveWalletUserRole, setAgentWalletAssignment, setDefaultWallet, setNamedWalletRole, setWalletProviderEnabled, setWalletProvidersEnabled, upsertNamedWallet };
+export { WALLET_PROVIDER_IDS, checkNamedWalletDeletionSafety, deleteNamedWallet, normalizeWalletUserRole, readWalletProviderRegistry, replaceRetiredMiningWallet, resolveWalletSelection, resolveWalletUserRole, setAgentWalletAssignment, setDefaultWallet, setNamedWalletRole, setWalletProviderEnabled, setWalletProvidersEnabled, upsertNamedWallet, writeWalletProviderRegistry };

package/dist/wallet/wallet-send-approvals.js

@@ -2126,7 +2126,11 @@ async function approveWalletSendRequest(params) {
 					request
 				};
 			}
-			if (storedReview.state === "prepared" && !params.reviewAuthorization) {
+			const controlUIAuthorization = storedReview.state === "prepared" && !params.reviewAuthorization && (storedReview.intentType === "solana.nativeTransfer" || storedReview.intentType === "solana.splTransferChecked") ? {
+				type: "control-ui",
+				proof: { proofId: storedReview.nonce }
+			} : undefined;
+			if (storedReview.state === "prepared" && !params.reviewAuthorization && !controlUIAuthorization) {
 				if (claim.recovered && request.status === "executing") {
 					await withApprovalMutationLock(env, () => {
 						file = loadFile(env);
@@ -2151,7 +2155,7 @@ async function approveWalletSendRequest(params) {
 					request
 				};
 			}
-			const executionAuthorization = storedReview.state === "prepared" ? params.reviewAuthorization : undefined;
+			const executionAuthorization = storedReview.state === "prepared" ? params.reviewAuthorization ?? controlUIAuthorization : undefined;
 			let executed;
 			try {
 				executed = await provider.executeSignerReview({

package/dist/wallet/wallet-status.js

@@ -1,10 +1,12 @@
 import { loadConfig } from "../config/io.js";
 import "../config/config.js";
-import { ensureWalletStateDir, resolveWalletRuntimeConfig, resolveWalletStatePaths } from "./wallet-runtime-config.js";
+import { ensureWalletStateDir, resolveLocalSignerSocketPath, resolveWalletRuntimeConfig, resolveWalletStatePaths } from "./wallet-runtime-config.js";
 import { readWalletProviderRegistry } from "./wallet-provider-registry.js";
 import { resolveWalletPolicyConfig } from "./wallet-policy.js";
 import { redactWalletDiagnosticText, walletDiagnosticErrorMessage, walletDiagnosticErrorString } from "./wallet-redaction.js";
 import { createWalletProviderAdapter, resolveWalletProviderId } from "./wallet-provider-resolver.js";
+import { readSignerOwnedWalletReadiness } from "./local-socket-signer-lifecycle.js";
+import { normalizeNativeSignerWalletId } from "./native-signer-wallet-id.js";
 import { readWalletApprovalAuthSnapshot } from "./wallet-approval-auth.js";
 
 //#region src/wallet/wallet-status.ts
@@ -26,6 +28,7 @@ async function readWalletStatusSnapshot(params) {
 	const statePaths = resolveWalletStatePaths(effectiveEnv);
 	const approvalAuth = readWalletApprovalAuthSnapshot(effectiveEnv, cfg);
 	const checkedAt = new Date().toISOString();
+	const registeredWallets = params?.walletId ? providerRegistry.wallets.filter((wallet) => wallet.id === params.walletId) : providerRegistry.wallets;
 	let providerHealth = {
 		ok: false,
 		provider: providerId,
@@ -77,6 +80,58 @@ async function readWalletStatusSnapshot(params) {
 			summary: "Real-chain settlement depends on the configured wallet provider and RPC connectivity."
 		},
 		chains: resolved.chains,
+		wallets: await Promise.all(registeredWallets.map(async (wallet) => {
+			if (wallet.providerId !== "local-socket-signer") {
+				return {
+					id: wallet.id,
+					name: wallet.name,
+					providerId: wallet.providerId,
+					addresses: wallet.addresses,
+					readiness: {
+						keystore: Boolean(wallet.addresses?.solana),
+						rpc: serviceHealthy,
+						ready: serviceHealthy && Boolean(wallet.addresses?.solana)
+					}
+				};
+			}
+			const metadataSignerWalletId = typeof wallet.metadata?.signerWalletId === "string" ? wallet.metadata.signerWalletId.trim() : "";
+			const signerWalletId = metadataSignerWalletId || normalizeNativeSignerWalletId(wallet.id);
+			try {
+				const signer = await readSignerOwnedWalletReadiness({
+					socketPath: resolveLocalSignerSocketPath(effectiveEnv),
+					walletId: signerWalletId
+				});
+				const addressMatches = typeof wallet.addresses?.solana === "string" && wallet.addresses.solana === signer.publicKey;
+				const roleMatches = typeof wallet.metadata?.role === "string" && wallet.metadata.role === signer.role;
+				const ready = signer.ready && addressMatches && roleMatches;
+				return {
+					id: wallet.id,
+					name: wallet.name,
+					providerId: wallet.providerId,
+					addresses: wallet.addresses,
+					readiness: {
+						keystore: signer.keyReady,
+						rpc: signer.networkReady,
+						ready,
+						...!ready && signer.ready ? { error: "registry address or immutable role does not match live signer state" } : {},
+						signer
+					}
+				};
+			} catch (error) {
+				return {
+					id: wallet.id,
+					name: wallet.name,
+					providerId: wallet.providerId,
+					addresses: wallet.addresses,
+					readiness: {
+						keystore: false,
+						rpc: false,
+						ready: false,
+						error: walletDiagnosticErrorMessage(error)
+					}
+				};
+			}
+		})),
 		service: {
 			host: resolved.service.host,
 			port: resolved.service.port,

package/dist/wizard/onboarding.js

@@ -8,7 +8,7 @@ import { readConfigFileSnapshot, writeConfigFile } from "../config/io.js";
 import "../config/config.js";
 import "../agents/auth-profiles.js";
 import { ensureWalletStateDir, resolveLocalSignerMaterialRootDir, resolveLocalSignerSocketPath } from "../wallet/wallet-runtime-config.js";
-import { checkNamedWalletDeletionSafety, deleteNamedWallet, readWalletProviderRegistry, resolveWalletUserRole, setDefaultWallet, setNamedWalletRole, upsertNamedWallet } from "../wallet/wallet-provider-registry.js";
+import { checkNamedWalletDeletionSafety, deleteNamedWallet, readWalletProviderRegistry, resolveWalletUserRole, setNamedWalletRole, upsertNamedWallet } from "../wallet/wallet-provider-registry.js";
 import { DEFAULT_WORKSPACE, applyWizardMetadata, ensureWorkspaceAndSessions, handleOnboardingRepair, printWizardHeader, probeGatewayReachable, summarizeExistingConfig } from "../commands/onboard-helpers.js";
 import { configureSignerOwnedWalletNetwork } from "../wallet/signer-network-admin.js";
 import { configureWalletForOnboarding, installSignerdBinary, resolveSignerdBinaryPath, restartLocalSocketSigner } from "./onboarding.wallet.js";
@@ -947,7 +947,11 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 								label: currentBondWalletId && currentBondWalletId !== walletId ? "Switch bond Vault here" : "Use for Fased Network bond",
 								hint: currentBondWalletId && currentBondWalletId !== walletId ? `Current bond Vault: ${currentBondWalletId}` : "Use this Vault wallet for longer-lived SAT bond authority."
 							}] : [],
-							{
+							targetWalletPurpose === "mining" ? {
+								value: "retire-mining",
+								label: "Retire and replace Mining wallet",
+								hint: "Stop and drain Mining, verify recovery and balances, tombstone the old signer wallet, then attach a ready successor."
+							} : {
 								value: "archive",
 								label: "Archive/remove from Fased",
 								hint: "Disable signer use first, then remove this wallet registration."
@@ -1008,6 +1012,19 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 						});
 						continue;
 					}
+					if (manageAction === "retire-mining") {
+						await prompter.note([
+							"Mining retirement is a coordinated replacement, never a registry-only delete.",
+							`Run: fased wallet recovery export --wallet-id ${targetWallet.id} --output <absolute-recovery-path>`,
+							`Then run: fased wallet retire --wallet-id ${targetWallet.id} --successor-wallet-id <new-id> --successor-wallet-name <name> --recovery-file <absolute-recovery-path> --rpc-url <url>`,
+							"The command stops new jobs, waits for Clearing and reconciliation, records balances, commits the signer tombstone, and attaches the ready successor."
+						].join("\n"), "Retire and replace Mining wallet");
+						addAnotherWallet = await prompter.confirm({
+							message: "Run another wallet setup action?",
+							initialValue: false
+						});
+						continue;
+					}
 					if (manageAction === "attach-federation-bond") {
 						const agentDefaultWallet = readAgentDefaultWallet();
 						if (targetWalletPurpose !== "vault") {
@@ -1046,6 +1063,14 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 						});
 						continue;
 					}
+					if (resolveWalletUserRole(targetWallet) === "mining") {
+						await prompter.note("Mining wallets cannot be archived or deleted directly. Use Retire and replace Mining wallet so the signer tombstone is committed before registry detachment.", "Mining retirement required");
+						addAnotherWallet = await prompter.confirm({
+							message: "Run another wallet setup action?",
+							initialValue: false
+						});
+						continue;
+					}
 					const archiveEnv = {
 						...process.env,
 						...nextConfig.env?.vars,
@@ -1192,20 +1217,6 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 				});
 				const walletName = walletIdentity.walletName;
 				const walletId = walletIdentity.walletId || undefined;
-				if (selfHostedAction === "import" && hostProfile === "hosting") {
-					const signerWalletId = (walletId ?? walletPurpose).trim().toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "");
-					await prompter.note([
-						"Hosting keeps plaintext wallet keys outside the app/Gateway OS account.",
-						"From the VPS provider root console, place the Solana keypair in /root/wallet.json with mode 600, then run:",
-						`/usr/local/sbin/fased-signer-wallet-import --wallet-id ${shellQuote(signerWalletId)} --locked-role ${shellQuote(walletPurpose)} < /root/wallet.json`,
-						"Return to the app account, rerun onboarding, and choose Create with the same role and wallet ID. The signer reuses only that exact existing deny-all wallet, then activates the one RPC and registers it."
-					].join("\n"), "Signer-owned Hosting import");
-					addAnotherWallet = await prompter.confirm({
-						message: "Run another wallet setup action?",
-						initialValue: false
-					});
-					continue;
-				}
 				const importFile = selfHostedAction === "import" ? (await prompter.text({
 					message: "Absolute path to owner-only Solana keypair JSON",
 					validate: (value) => value.trim().startsWith("/") ? undefined : "Enter an absolute path and run chmod 600 on the file first"
@@ -1323,20 +1334,11 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 					await restartLocalSocketSigner(ensureWalletStateDir(process.env).rootDir);
 					const isAgentWallet = walletPurpose === "agent";
 					if (walletPurpose === "agent") {
-						const currentPrimary = String(agentDefaultBefore.walletId ?? "").trim();
-						if (!currentPrimary || currentPrimary === walletId) {
-							setDefaultWallet({
-								walletId: walletId ?? "default",
-								env: process.env
-							});
-							await prompter.note(`Primary Agent wallet set to ${walletName} (${walletId ?? "default"}).`, "Wallet");
-						} else {
-							await prompter.note([
-								`Agent wallet created as ${walletName} (${walletId ?? "default"}).`,
-								`Primary Agent wallet remains ${describeWalletRef(agentDefaultBefore)}.`,
-								`Use @wallet:${walletId ?? "default"} when you want this wallet explicitly.`
-							].join("\n"), "Wallet");
-						}
+						await prompter.note([
+							`Agent wallet created as ${walletName} (${walletId ?? "default"}).`,
+							`Default Agent wallet fallback remains ${describeWalletRef(agentDefaultBefore)}.`,
+							`Use @wallet:${walletId ?? "default"} explicitly, assign it to an Agent or skill, or set it as the optional fallback in Wallet.`
+						].join("\n"), "Wallet");
 					}
 					if (walletId) {
 						setNamedWalletRole({

package/dist/wizard/onboarding.wallet.js

@@ -5,6 +5,7 @@ import "../config/config.js";
 import { hasLegacyEmbeddedKeystoreMaterialHint, throwLegacyEmbeddedKeystoreMigrationRequired } from "../wallet/legacy-embedded-keystore.js";
 import { ensureWalletStateDir, isLocalSignerExternallyManaged, resolveLocalSignerControlSocketPath, resolveLocalSignerMasterKeyPath, resolveLocalSignerMaterialRootDir, resolveLocalSignerSidecarPaths, resolveLocalSignerSocketPath, resolveLocalSignerStateDbPath } from "../wallet/wallet-runtime-config.js";
 import { WALLET_PROVIDER_IDS, readWalletProviderRegistry, setWalletProvidersEnabled } from "../wallet/wallet-provider-registry.js";
+import { SAT_RUNTIME_ENV_KEYS, SAT_RUNTIME_TRUST_ENV_KEYS } from "../config/sat-runtime-ids.js";
 import { callLocalSocketSigner } from "../wallet/providers/local-socket-signer-adapter.js";
 import { resolveWalletProviderId } from "../wallet/wallet-provider-resolver.js";
 import { fileURLToPath } from "node:url";
@@ -400,7 +401,7 @@ function resolveSignerChildEnv(materialDir, env = process.env, cfg = loadConfig(
 	}
 	for (const [key, rawValue] of Object.entries(mergedEnv)) {
 		const value = String(rawValue ?? "").trim();
-		const isSignerRuntimeConfig = key.startsWith("FASED_WALLET_LOCAL_SIGNER_RATE_") || key === "FASED_WALLET_LOCAL_SIGNER_AUDIT_MAX_BYTES" || key === "FASED_WALLET_SOLANA_CONFIRM_TIMEOUT_MS" || key === "FASED_WALLET_SOLANA_WRITE_RPC_TIMEOUT_MS";
+		const isSignerRuntimeConfig = key.startsWith("FASED_WALLET_LOCAL_SIGNER_RATE_") || key === "FASED_WALLET_LOCAL_SIGNER_AUDIT_MAX_BYTES" || key === "FASED_WALLET_SOLANA_CONFIRM_TIMEOUT_MS" || key === "FASED_WALLET_SOLANA_WRITE_RPC_TIMEOUT_MS" || [...Object.values(SAT_RUNTIME_ENV_KEYS), ...Object.values(SAT_RUNTIME_TRUST_ENV_KEYS)].includes(key);
 		if (value && isSignerRuntimeConfig) {
 			childEnv[key] = value;
 		}
@@ -486,6 +487,14 @@ function renderLocalSignerEnvFile(params) {
 		...materialDir !== walletRoot ? [`export FASED_WALLET_SIGNER_STATE_DIR=${quoteSignerEnvValue(materialDir)}`] : [],
 		`export FASED_WALLET_CHAINS=${quoteSignerEnvValue(String(childEnv.FASED_WALLET_CHAINS ?? "solana").trim() || "solana")}`,
 		...webAuthn ? [`export FASED_WALLET_WEBAUTHN_RP_ID=${quoteSignerEnvValue(webAuthn.rpId)}`, `export FASED_WALLET_WEBAUTHN_ORIGINS=${quoteSignerEnvValue(webAuthn.origins)}`] : [],
+		...Object.values(SAT_RUNTIME_ENV_KEYS).flatMap((key) => {
+			const value = String(childEnv[key] ?? "").trim();
+			return value ? [`export ${key}=${quoteSignerEnvValue(value)}`] : [];
+		}),
+		...Object.values(SAT_RUNTIME_TRUST_ENV_KEYS).flatMap((key) => {
+			const value = String(childEnv[key] ?? "").trim();
+			return value ? [`export ${key}=${quoteSignerEnvValue(value)}`] : [];
+		}),
 		"",
 		`${quoteSignerEnvValue(signerBinPath)} --socket "$FASED_WALLET_LOCAL_SIGNER_SOCKET" --control-socket "$FASED_WALLET_LOCAL_SIGNER_CONTROL_SOCKET" --state-db "$FASED_WALLET_LOCAL_SIGNER_STATE_DB" --master-key "$FASED_WALLET_LOCAL_SIGNER_MASTER_KEY"`
 	];

package/extensions/acpx/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/acpx",
-  "version": "0.1.68",
+  "version": "0.1.69",
   "description": "FasedAgent ACP runtime backend via acpx",
   "type": "module",
   "dependencies": {

package/extensions/bluebubbles/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/bluebubbles",
-  "version": "0.1.68",
+  "version": "0.1.69",
   "description": "FasedAgent BlueBubbles channel plugin",
   "type": "module",
   "fased": {

package/extensions/copilot-proxy/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/copilot-proxy",
-  "version": "0.1.68",
+  "version": "0.1.69",
   "private": true,
   "description": "FasedAgent Copilot Proxy provider plugin",
   "type": "module",

package/extensions/diagnostics-otel/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/diagnostics-otel",
-  "version": "0.1.68",
+  "version": "0.1.69",
   "description": "FasedAgent diagnostics OpenTelemetry exporter",
   "type": "module",
   "dependencies": {

package/extensions/fased-federation/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/fased-federation",
-  "version": "0.1.68",
+  "version": "0.1.69",
   "private": true,
   "description": "Fased federation adapter package scaffold (A2A + admission helpers)",
   "type": "module",

package/extensions/google-gemini-cli-auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/google-gemini-cli-auth",
-  "version": "0.1.68",
+  "version": "0.1.69",
   "private": true,
   "description": "FasedAgent Gemini CLI OAuth provider plugin",
   "type": "module",

package/extensions/imessage/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/imessage",
-  "version": "0.1.68",
+  "version": "0.1.69",
   "private": true,
   "description": "FasedAgent iMessage channel plugin",
   "type": "module",

package/extensions/irc/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/irc",
-  "version": "0.1.68",
+  "version": "0.1.69",
   "description": "FasedAgent IRC channel plugin",
   "type": "module",
   "fased": {

package/extensions/line/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/line",
-  "version": "0.1.68",
+  "version": "0.1.69",
   "private": true,
   "description": "FasedAgent LINE channel plugin",
   "type": "module",

package/extensions/llm-task/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/llm-task",
-  "version": "0.1.68",
+  "version": "0.1.69",
   "private": true,
   "description": "FasedAgent JSON-only LLM task plugin",
   "type": "module",

package/extensions/lobster/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/lobster",
-  "version": "0.1.68",
+  "version": "0.1.69",
   "description": "Lobster workflow tool plugin (typed pipelines + resumable approvals)",
   "type": "module",
   "fased": {

package/extensions/matrix/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.1.69
+
+### Changes
+
+- Version alignment with core FasedAgent release numbers.
+
 ## 0.1.68
 
 ### Changes

package/extensions/matrix/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/matrix",
-  "version": "0.1.68",
+  "version": "0.1.69",
   "description": "FasedAgent Matrix channel plugin",
   "type": "module",
   "dependencies": {

package/extensions/mattermost/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/mattermost",
-  "version": "0.1.68",
+  "version": "0.1.69",
   "description": "FasedAgent Mattermost channel plugin",
   "type": "module",
   "fased": {

package/extensions/memory-core/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@fased/memory-core",
-  "version": "0.1.68",
+  "version": "0.1.69",
   "private": true,
   "description": "FasedAgent core memory search plugin",
   "type": "module",
   "peerDependencies": {
-    "@fased/fased": "^0.1.68"
+    "@fased/fased": "^0.1.69"
   },
   "fased": {
     "extensions": [

package/extensions/memory-lancedb/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/memory-lancedb",
-  "version": "0.1.68",
+  "version": "0.1.69",
   "private": true,
   "description": "FasedAgent LanceDB-backed long-term memory plugin with auto-recall/capture",
   "type": "module",

package/extensions/minimax-portal-auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/minimax-portal-auth",
-  "version": "0.1.68",
+  "version": "0.1.69",
   "private": true,
   "description": "FasedAgent MiniMax Portal OAuth provider plugin",
   "type": "module",

package/extensions/msteams/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.1.69
+
+### Changes
+
+- Version alignment with core FasedAgent release numbers.
+
 ## 0.1.68
 
 ### Changes

package/extensions/msteams/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/msteams",
-  "version": "0.1.68",
+  "version": "0.1.69",
   "description": "FasedAgent Microsoft Teams channel plugin",
   "type": "module",
   "dependencies": {

package/extensions/nextcloud-talk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/nextcloud-talk",
-  "version": "0.1.68",
+  "version": "0.1.69",
   "description": "FasedAgent Nextcloud Talk channel plugin",
   "type": "module",
   "fased": {

package/extensions/nostr/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.1.69
+
+### Changes
+
+- Version alignment with core FasedAgent release numbers.
+
 ## 0.1.68
 
 ### Changes

package/extensions/nostr/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/nostr",
-  "version": "0.1.68",
+  "version": "0.1.69",
   "description": "FasedAgent Nostr channel plugin for NIP-04 encrypted DMs",
   "type": "module",
   "dependencies": {

package/extensions/open-prose/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/open-prose",
-  "version": "0.1.68",
+  "version": "0.1.69",
   "private": true,
   "description": "OpenProse VM skill pack plugin (slash command + telemetry).",
   "type": "module",

package/extensions/sat-mining/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/sat-mining",
-  "version": "0.1.68",
+  "version": "0.1.69",
   "private": true,
   "description": "SAT mining plugin scaffold for FasedAgent",
   "type": "module",