@fased/fased 0.1.68 → 0.1.69

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/fased",
-  "version": "0.1.68",
+  "version": "0.1.69",
   "description": "Fased Agent self-hosted AI gateway with channels, tools, plugins, and operator modules",
   "keywords": [
     "ai-agent",
@@ -46,13 +46,13 @@
     "scripts/fased-host-updaterctl.mjs",
     "scripts/fased-signer-enroll-hosting.sh",
     "scripts/fased-signer-network-hosting.sh",
-    "scripts/fased-signer-wallet-import-hosting.sh",
     "scripts/fased-signer-owner-policy.mjs",
     "scripts/fased-signer-policy-hosting.sh",
     "scripts/fased-signer-policy-local.sh",
     "scripts/migrate-hosted-signer-v2.mjs",
     "scripts/fased-launcher-runtime.mjs",
     "scripts/install-fased-signerd.sh",
+    "scripts/install-runtime-profile.sh",
     "scripts/install-managed-runtime.mjs",
     "scripts/managed-runtime-layout.mjs",
     "scripts/hosted-release-manifest.mjs",
@@ -156,7 +156,7 @@
     "check": "pnpm check:ci",
     "check:ci": "pnpm signer:protocol:check && pnpm sat:signer-codecs:check && pnpm format:check && pnpm lint && pnpm lint:tmp:no-random-messaging && pnpm lint:tmp:channel-agnostic-boundaries && pnpm lint:tmp:no-raw-channel-fetch && pnpm lint:auth:no-pairing-store-group && pnpm lint:auth:pairing-account-scope && pnpm check:host-env-policy:swift",
     "check:dependency-ownership": "node --import tsx scripts/dependency-ownership-report.ts --check",
-    "check:docs": "pnpm format:docs:check && pnpm lint:docs && pnpm docs:check-links",
+    "check:docs": "pnpm format:docs:check && pnpm lint:docs && pnpm docs:check-links && pnpm docs:check-product-contract",
     "check:host-env-policy:swift": "node scripts/generate-host-env-security-policy-swift.mjs --check",
     "check:loc": "node --import tsx scripts/check-ts-max-loc.ts --max 500",
     "check:plugin-sdk:types": "tsc --noEmit --skipLibCheck --module NodeNext --moduleResolution NodeNext --target ES2023 scripts/smoke-plugin-sdk-types.ts",
@@ -177,6 +177,7 @@
     "dev": "node scripts/run-node.mjs",
     "docs:bin": "node scripts/build-docs-list.mjs",
     "docs:check-links": "node scripts/docs-link-audit.mjs",
+    "docs:check-product-contract": "node scripts/docs-product-contract.mjs",
     "docs:dev": "cd docs && mint dev",
     "docs:list": "node scripts/docs-list.js",
     "docs:spellcheck": "bash scripts/docs-spellcheck.sh",

package/scripts/install-fased-signerd.sh

@@ -206,12 +206,8 @@ echo "Installed signer enrollment launcher: $INSTALL_DIR/fased-signer-enroll"
 echo "Installed signer policy launcher: $POLICY_LAUNCHER_PATH"
 echo "Installed fail-closed policy templates: $POLICY_TEMPLATE_DIR"
 cat <<EOF
-Fresh signer-owned wallets remain deny-all. After wallet setup creates a wallet,
-enroll the owner authenticator and apply an explicit reviewed policy as this user:
-  1. $INSTALL_DIR/fased-signer-enroll [authenticator-label]
-  2. Copy the matching owner-only template from $POLICY_TEMPLATE_DIR and replace
-     every REPLACE_WITH_ value.
-  3. $POLICY_LAUNCHER_PATH --initial-install --policy-file /absolute/path/to/policy.json
-
-Enrollment never enables signing, and copying a template never applies it.
+Fresh signer-owned wallets receive their versioned Agent, Mining, or Vault
+baseline during normal wallet setup after the primary RPC is verified. Optional
+authenticator enrollment and $POLICY_LAUNCHER_PATH remain available for advanced
+owner-reviewed customization; copying a template never applies it.
 EOF

package/scripts/install-runtime-profile.sh

@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+
+fased_supports_prebuilt_release_runtime() {
+  local os_name="$1"
+  local architecture="$2"
+  [[ "$os_name" == "Linux" ]] || return 1
+  case "$architecture" in
+    x86_64|amd64|aarch64|arm64) return 0 ;;
+    *) return 1 ;;
+  esac
+}
+
+fased_should_use_prebuilt_release_runtime() {
+  local profile="$1"
+  local source_requested="$2"
+  local source_env="$3"
+  local hosting_source_env="$4"
+  local os_name="$5"
+  local architecture="$6"
+
+  [[ "$source_requested" != "1" ]] || return 1
+  [[ "$source_env" != "1" ]] || return 1
+  if [[ "$profile" == "hosting" && "$hosting_source_env" == "1" ]]; then
+    return 1
+  fi
+  fased_supports_prebuilt_release_runtime "$os_name" "$architecture"
+}

package/scripts/start-managed.sh

@@ -538,6 +538,12 @@ load_wallet_signer_env_from_config() {
       || [[ "$key" == "FASED_WALLET_SIGNER_STATE_DIR" ]] \
       || [[ "$key" == "FASED_WALLET_LOCAL_SIGNER_BIN" ]] \
       || [[ "$key" == "FASED_SAT_PROGRAM_ID" ]] \
+      || [[ "$key" == "FASED_SAT_BOND_PROGRAM_ID" ]] \
+      || [[ "$key" == "FASED_SAT_MINT_ADDRESS" ]] \
+      || [[ "$key" == "FASED_SAT_MINT_PROGRAM_ID" ]] \
+      || [[ "$key" == "FASED_SAT_RUNTIME_MANIFEST_PATH" ]] \
+      || [[ "$key" == "FASED_SAT_RUNTIME_MANIFEST_SHA256" ]] \
+      || [[ "$key" == "FASED_SAT_RUNTIME_MANIFEST_SIGNATURE_PATH" ]] \
       || [[ "$key" == "FASED_SAT_ENABLE_ALT_V0" ]] \
       || [[ "$key" =~ ^FASED_WALLET_LOCAL_SIGNER_(ROLE|DIRECT_SIGNING|CAPS_ENABLED|SOLANA_MAX_PER_TX|SOLANA_MAX_DAILY|SOLANA_ALLOW_PROGRAMS)(__[A-Za-z0-9_-]+)?$ ]]; then
       export "$key=$value"
@@ -557,6 +563,12 @@ load_wallet_signer_env_from_config() {
             or . == "FASED_WALLET_SIGNER_STATE_DIR"
             or . == "FASED_WALLET_LOCAL_SIGNER_BIN"
             or . == "FASED_SAT_PROGRAM_ID"
+            or . == "FASED_SAT_BOND_PROGRAM_ID"
+            or . == "FASED_SAT_MINT_ADDRESS"
+            or . == "FASED_SAT_MINT_PROGRAM_ID"
+            or . == "FASED_SAT_RUNTIME_MANIFEST_PATH"
+            or . == "FASED_SAT_RUNTIME_MANIFEST_SHA256"
+            or . == "FASED_SAT_RUNTIME_MANIFEST_SIGNATURE_PATH"
             or . == "FASED_SAT_ENABLE_ALT_V0"
             or test("^FASED_WALLET_LOCAL_SIGNER_(ROLE|DIRECT_SIGNING|CAPS_ENABLED|SOLANA_MAX_PER_TX|SOLANA_MAX_DAILY|SOLANA_ALLOW_PROGRAMS)(__[A-Za-z0-9_-]+)?$")
         )
@@ -574,7 +586,7 @@ load_wallet_signer_env_file() {
   # Older signer.env files may contain Node-era key/passphrase variables. Import only
   # the non-custody settings required by the native signer, never every wallet variable.
   source <(
-    grep -E '^export FASED_WALLET_(SOLANA_RPC_URL(__[A-Za-z0-9_-]+)?|CHAINS|SIGNER_STATE_DIR|WEBAUTHN_(RP_ID|ORIGINS)|LOCAL_SIGNER_(SOCKET|CONTROL_SOCKET|STATE_DB|MASTER_KEY|BIN|ROLE|DIRECT_SIGNING|CAPS_ENABLED|SOLANA_MAX_PER_TX|SOLANA_MAX_DAILY|SOLANA_ALLOW_PROGRAMS)(__[A-Za-z0-9_-]+)?)=' "$SIGNERD_ENV_FILE" || true
+    grep -E '^export (FASED_WALLET_(SOLANA_RPC_URL(__[A-Za-z0-9_-]+)?|CHAINS|SIGNER_STATE_DIR|WEBAUTHN_(RP_ID|ORIGINS)|LOCAL_SIGNER_(SOCKET|CONTROL_SOCKET|STATE_DB|MASTER_KEY|BIN|ROLE|DIRECT_SIGNING|CAPS_ENABLED|SOLANA_MAX_PER_TX|SOLANA_MAX_DAILY|SOLANA_ALLOW_PROGRAMS)(__[A-Za-z0-9_-]+)?)|FASED_SAT_(PROGRAM_ID|BOND_PROGRAM_ID|MINT_ADDRESS|MINT_PROGRAM_ID|RUNTIME_MANIFEST_(PATH|SHA256|SIGNATURE_PATH)))=' "$SIGNERD_ENV_FILE" || true
   )
   set +a
 }

package/scripts/fased-signer-wallet-import-hosting.sh

@@ -1,78 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-umask 077
-PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
-export PATH
-
-if [[ "${EUID}" != "0" ]]; then
-  echo "Hosted signer wallet import requires the VPS provider root console." >&2
-  exit 1
-fi
-
-wallet_id=""
-locked_role=""
-while [[ $# -gt 0 ]]; do
-  case "$1" in
-    --wallet-id)
-      [[ $# -ge 2 ]] || { echo "missing --wallet-id value" >&2; exit 64; }
-      wallet_id="$2"
-      shift 2
-      ;;
-    --locked-role)
-      [[ $# -ge 2 ]] || { echo "missing --locked-role value" >&2; exit 64; }
-      locked_role="$2"
-      shift 2
-      ;;
-    *)
-      echo "unsupported hosted wallet-import argument" >&2
-      exit 64
-      ;;
-  esac
-done
-
-[[ "$wallet_id" =~ ^[a-z0-9_]{1,64}$ ]] || {
-  echo "wallet id must already be normalized lowercase letters, numbers, or underscores" >&2
-  exit 64
-}
-case "$locked_role" in
-  agent|mining|vault) ;;
-  *) echo "locked role must be agent, mining, or vault" >&2; exit 64 ;;
-esac
-
-signer_bin="/opt/fased/signer/fased-signerd"
-control_socket="/run/fased-signerd/control.sock"
-runuser_bin="/usr/sbin/runuser"
-env_bin="/usr/bin/env"
-stat_bin="/usr/bin/stat"
-signer_user="fased-signer"
-
-for executable in "$signer_bin" "$runuser_bin" "$env_bin" "$stat_bin"; do
-  [[ -f "$executable" && -x "$executable" && ! -L "$executable" ]] || {
-    echo "required hosted signer executable is missing or unsafe" >&2
-    exit 1
-  }
-  read -r owner mode <<<"$($stat_bin -Lc '%u %a' "$executable")"
-  [[ "$owner" == "0" && $((8#$mode & 8#22)) -eq 0 ]] || {
-    echo "required hosted signer executable is not root-owned and non-writable" >&2
-    exit 1
-  }
-done
-
-[[ -S "$control_socket" && ! -L "$control_socket" ]] || {
-  echo "hosted signer control socket is unavailable" >&2
-  exit 1
-}
-
-# The root-console caller supplies only a new wallet id, an immutable role, and
-# one keypair on stdin. The signer creates a deny-all policy and refuses
-# replacement. The app/Gateway account has no sudo rule for this helper.
-exec "$runuser_bin" -u "$signer_user" -- \
-  "$env_bin" -i \
-  HOME=/var/lib/fased-signerd \
-  LANG=C.UTF-8 \
-  PATH=/usr/bin:/bin:/usr/sbin:/sbin \
-  "$signer_bin" admin wallet import \
-  --control-socket "$control_socket" \
-  --wallet-id "$wallet_id" \
-  --locked-role "$locked_role"