@jinn-network/client 0.1.2 → 0.1.3-canary.262e5cda

package/dist/config.d.ts

@@ -14,8 +14,8 @@
  * (mainnet V1, testnet V2) for JinnRouter claimDelivery encoding.
  */
 import { z } from 'zod';
-import type { DesiredState } from './types/desired-state.js';
-export declare const JinnConfigSchema: z.ZodObject<{
+import type { RestorationJob } from './types/desired-state.js';
+export declare const JinnConfigSchema: z.ZodEffects<z.ZodObject<{
     /**
      * Network to connect to.
      * 'testnet' → Base Sepolia (default during Phase 1b; fast epochs, free funds).
@@ -31,6 +31,13 @@ export declare const JinnConfigSchema: z.ZodObject<{
      */
     rpcUrl: z.ZodOptional<z.ZodString>;
     archiveRpcUrl: z.ZodOptional<z.ZodString>;
+    /**
+     * Optional L2 proof/archive RPC endpoint for canonical cross-chain canaries.
+     * The daemon can use its normal rpcUrl for writes while proof construction
+     * uses this endpoint for historical eth_getProof at OP dispute-game blocks.
+     * Env: JINN_L2_PROOF_RPC_URL.
+     */
+    l2ProofRpcUrl: z.ZodOptional<z.ZodString>;
     /** Earning state directory */
     earningDir: z.ZodDefault<z.ZodString>;
     /** SQLite database path */
@@ -52,6 +59,16 @@ export declare const JinnConfigSchema: z.ZodObject<{
     balanceTopupIntervalMs: z.ZodDefault<z.ZodNumber>;
     /** HTTP API port */
     apiPort: z.ZodDefault<z.ZodNumber>;
+    /**
+     * Bind host for the HTTP API server. Defaults to `127.0.0.1` so the daemon
+     * is unreachable across the network out of the box — operators who need
+     * LAN access (or who terminate TLS in front of the daemon) opt in via this
+     * knob or `JINN_API_BIND_HOST`. Cost-mutating routes (`POST /artifacts`,
+     * `POST /v1/artifacts/acquire`) require a bearer token regardless; the
+     * bind host is the outer firewall.
+     * Env: JINN_API_BIND_HOST.
+     */
+    apiBindHost: z.ZodOptional<z.ZodString>;
     /** Path to claude CLI binary */
     claudePath: z.ZodDefault<z.ZodString>;
     /** Model for restoration/evaluation agent */
@@ -74,7 +91,7 @@ export declare const JinnConfigSchema: z.ZodObject<{
     /** Desired states to create and restore. Empty by default; testnet auto-intents fill the loop. */
     desiredStates: z.ZodDefault<z.ZodArray<z.ZodObject<{
         id: z.ZodOptional<z.ZodString>;
-        description: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
         context: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
         window: z.ZodOptional<z.ZodObject<{
             startTs: z.ZodNumber;
@@ -94,10 +111,156 @@ export declare const JinnConfigSchema: z.ZodObject<{
             kind: string;
         }>, z.ZodRecord<z.ZodString, z.ZodUnknown>>>;
         eligibility: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        intent: z.ZodOptional<z.ZodEffects<z.ZodObject<{
+            schemaVersion: z.ZodLiteral<"intent.v1">;
+            id: z.ZodString;
+            kind: z.ZodString;
+            description: z.ZodString;
+            window: z.ZodObject<{
+                startTs: z.ZodNumber;
+                endTs: z.ZodNumber;
+            }, "strip", z.ZodTypeAny, {
+                startTs: number;
+                endTs: number;
+            }, {
+                startTs: number;
+                endTs: number;
+            }>;
+            spec: z.ZodIntersection<z.ZodObject<{
+                kind: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                kind: string;
+            }, {
+                kind: string;
+            }>, z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            eligibility: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+            creator: z.ZodObject<{
+                safeAddress: z.ZodString;
+                agentEoa: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                safeAddress: string;
+                agentEoa: string;
+            }, {
+                safeAddress: string;
+                agentEoa: string;
+            }>;
+            createdAt: z.ZodNumber;
+            signature: z.ZodObject<{
+                algo: z.ZodLiteral<"secp256k1">;
+                signer: z.ZodString;
+                hash: z.ZodString;
+                sig: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                hash: string;
+                algo: "secp256k1";
+                signer: string;
+                sig: string;
+            }, {
+                hash: string;
+                algo: "secp256k1";
+                signer: string;
+                sig: string;
+            }>;
+        }, "strip", z.ZodTypeAny, {
+            id: string;
+            signature: {
+                hash: string;
+                algo: "secp256k1";
+                signer: string;
+                sig: string;
+            };
+            schemaVersion: "intent.v1";
+            kind: string;
+            description: string;
+            window: {
+                startTs: number;
+                endTs: number;
+            };
+            spec: {
+                kind: string;
+            } & Record<string, unknown>;
+            eligibility: Record<string, unknown>;
+            creator: {
+                safeAddress: string;
+                agentEoa: string;
+            };
+            createdAt: number;
+        }, {
+            id: string;
+            signature: {
+                hash: string;
+                algo: "secp256k1";
+                signer: string;
+                sig: string;
+            };
+            schemaVersion: "intent.v1";
+            kind: string;
+            description: string;
+            window: {
+                startTs: number;
+                endTs: number;
+            };
+            spec: {
+                kind: string;
+            } & Record<string, unknown>;
+            eligibility: Record<string, unknown>;
+            creator: {
+                safeAddress: string;
+                agentEoa: string;
+            };
+            createdAt: number;
+        }>, {
+            id: string;
+            signature: {
+                hash: string;
+                algo: "secp256k1";
+                signer: string;
+                sig: string;
+            };
+            schemaVersion: "intent.v1";
+            kind: string;
+            description: string;
+            window: {
+                startTs: number;
+                endTs: number;
+            };
+            spec: {
+                kind: string;
+            } & Record<string, unknown>;
+            eligibility: Record<string, unknown>;
+            creator: {
+                safeAddress: string;
+                agentEoa: string;
+            };
+            createdAt: number;
+        }, {
+            id: string;
+            signature: {
+                hash: string;
+                algo: "secp256k1";
+                signer: string;
+                sig: string;
+            };
+            schemaVersion: "intent.v1";
+            kind: string;
+            description: string;
+            window: {
+                startTs: number;
+                endTs: number;
+            };
+            spec: {
+                kind: string;
+            } & Record<string, unknown>;
+            eligibility: Record<string, unknown>;
+            creator: {
+                safeAddress: string;
+                agentEoa: string;
+            };
+            createdAt: number;
+        }>>;
     }, "strip", z.ZodTypeAny, {
-        description: string;
         id?: string | undefined;
-        context?: Record<string, unknown> | undefined;
+        description?: string | undefined;
         window?: {
             startTs: number;
             endTs: number;
@@ -106,10 +269,35 @@ export declare const JinnConfigSchema: z.ZodObject<{
             kind: string;
         } & Record<string, unknown>) | undefined;
         eligibility?: Record<string, unknown> | undefined;
+        context?: Record<string, unknown> | undefined;
+        intent?: {
+            id: string;
+            signature: {
+                hash: string;
+                algo: "secp256k1";
+                signer: string;
+                sig: string;
+            };
+            schemaVersion: "intent.v1";
+            kind: string;
+            description: string;
+            window: {
+                startTs: number;
+                endTs: number;
+            };
+            spec: {
+                kind: string;
+            } & Record<string, unknown>;
+            eligibility: Record<string, unknown>;
+            creator: {
+                safeAddress: string;
+                agentEoa: string;
+            };
+            createdAt: number;
+        } | undefined;
     }, {
-        description: string;
         id?: string | undefined;
-        context?: Record<string, unknown> | undefined;
+        description?: string | undefined;
         window?: {
             startTs: number;
             endTs: number;
@@ -118,6 +306,32 @@ export declare const JinnConfigSchema: z.ZodObject<{
             kind: string;
         } & Record<string, unknown>) | undefined;
         eligibility?: Record<string, unknown> | undefined;
+        context?: Record<string, unknown> | undefined;
+        intent?: {
+            id: string;
+            signature: {
+                hash: string;
+                algo: "secp256k1";
+                signer: string;
+                sig: string;
+            };
+            schemaVersion: "intent.v1";
+            kind: string;
+            description: string;
+            window: {
+                startTs: number;
+                endTs: number;
+            };
+            spec: {
+                kind: string;
+            } & Record<string, unknown>;
+            eligibility: Record<string, unknown>;
+            creator: {
+                safeAddress: string;
+                agentEoa: string;
+            };
+            createdAt: number;
+        } | undefined;
     }>, "many">>;
     /** IPFS upload endpoint */
     ipfsRegistryUrl: z.ZodDefault<z.ZodString>;
@@ -133,6 +347,73 @@ export declare const JinnConfigSchema: z.ZodObject<{
     testnetStolasDeploymentPath: z.ZodOptional<z.ZodString>;
     /** Optional Base Sepolia ClaimRegistry deployment artifact path */
     testnetClaimRegistryDeploymentPath: z.ZodOptional<z.ZodString>;
+    /**
+     * Optional deployment artifact for the v0 MVI L1 stack
+     * (deployment-jinn-mvi-l1-{network}{,-fast}.json). Provides addresses for
+     * JINN, Timelock, JinnGovernor, JinnDistributor, and Messenger.
+     * When set the daemon enables the cross-chain JINN claim loop.
+     */
+    jinnMviL1DeploymentPath: z.ZodOptional<z.ZodString>;
+    /**
+     * Optional deployment artifact for the v0 MVI L2 emitter
+     * (deployment-jinn-mvi-l2-{network}.json). Provides the
+     * JinnClaimEmitter address on the measurement chain (Base / Base Sepolia).
+     */
+    jinnMviL2DeploymentPath: z.ZodOptional<z.ZodString>;
+    /**
+     * RPC endpoint for the L1 governance chain (Ethereum / Sepolia) where the
+     * JinnDistributor lives. Required when jinnDistributorAddress is set.
+     * Env: JINN_ETHEREUM_RPC_URL.
+     */
+    ethereumRpcUrl: z.ZodOptional<z.ZodString>;
+    /**
+     * Optional archive RPC endpoint for the L1 governance chain. Used for
+     * historical block lookups when constructing canonical-mode proofs.
+     * Env: JINN_ETHEREUM_ARCHIVE_RPC_URL.
+     */
+    ethereumArchiveRpcUrl: z.ZodOptional<z.ZodString>;
+    /**
+     * L1 network used by the cross-chain claim loop. 'sepolia' tracks Base
+     * Sepolia testnet; 'ethereum' tracks Base mainnet. Defaults to 'sepolia'
+     * during Phase 1b. Env: JINN_L1_NETWORK.
+     */
+    jinnL1Network: z.ZodDefault<z.ZodEnum<["sepolia", "ethereum"]>>;
+    /**
+     * JinnDistributor address on the L1 governance chain. Setting this enables
+     * the cross-chain claim loop. When set, ethereumRpcUrl MUST also be set.
+     * Resolved from jinnMviL1DeploymentPath when omitted; otherwise a manual
+     * override. Env: JINN_DISTRIBUTOR_ADDRESS.
+     */
+    jinnDistributorAddress: z.ZodOptional<z.ZodString>;
+    /**
+     * JinnClaimEmitter address on the L2 measurement chain (Base / Base
+     * Sepolia). Resolved from jinnMviL2DeploymentPath when omitted.
+     * Env: JINN_CLAIM_EMITTER_ADDRESS.
+     */
+    jinnClaimEmitterAddress: z.ZodOptional<z.ZodString>;
+    /**
+     * Messenger address on the L1 governance chain. Resolved from
+     * jinnMviL1DeploymentPath when omitted.
+     * Env: JINN_MESSENGER_ADDRESS.
+     */
+    jinnMessengerAddress: z.ZodOptional<z.ZodString>;
+    /**
+     * Messenger mode driving proof construction. `mock` submits MockMessenger
+     * fixtures — required for automated Sepolia burn-in (`runOnce`). `canonical`
+     * builds OP-Stack storage proofs for verifier-only checks; scheduled daemon
+     * ticks **skip** canonical mode (multi-day finality) — use
+     * `tsx scripts/verify-canonical-canary.ts` after finality instead. Defaults
+     * to `canonical`.
+     * Env: JINN_MESSENGER_MODE.
+     */
+    jinnMessengerMode: z.ZodDefault<z.ZodEnum<["canonical", "mock"]>>;
+    /**
+     * How often the daemon ticks the cross-chain JINN claim loop (ms). Default
+     * 3 600 000 (1 hour) — well below mainnet challenge windows while
+     * minimising RPC/gas churn. Set to 0 to disable when the address is set.
+     * Env: JINN_CLAIM_LOOP_INTERVAL_MS.
+     */
+    jinnClaimLoopIntervalMs: z.ZodDefault<z.ZodNumber>;
     /** Staking mode: 'standard' uses stOLAS (no OLAS needed), 'self-bond' uses operator-provided OLAS. */
     stakingMode: z.ZodDefault<z.ZodEnum<["standard", "self-bond"]>>;
     /** Number of services to bootstrap and run. */
@@ -147,6 +428,29 @@ export declare const JinnConfigSchema: z.ZodObject<{
      * Default is applied in bootstrap when unset. Env: JINN_MASTER_ETH_DAILY_WEI
      */
     masterEthDailyEstimateWei: z.ZodOptional<z.ZodString>;
+    /**
+     * Optional gas runway override for bootstrap/top-up targets (wei string).
+     * Used by Docker testnet acceptance to match the bundled faucet budget.
+     * Env: JINN_MIN_EOA_GAS_WEI
+     */
+    minEoaGasWei: z.ZodOptional<z.ZodString>;
+    /**
+     * Optional Safe ETH target override for bootstrap/top-up targets (wei string).
+     * Env: JINN_MIN_SAFE_ETH_WEI
+     */
+    minSafeEthWei: z.ZodOptional<z.ZodString>;
+    /**
+     * prediction.v0 auto-generator submission window (ms). Default 600000 (10 min).
+     * Docker acceptance gate sets 120000 to keep cycles tight.
+     * Env: JINN_PREDICTION_V0_WINDOW_MS
+     */
+    predictionV0WindowMs: z.ZodOptional<z.ZodNumber>;
+    /**
+     * prediction.v0 auto-generator gap from window end → resolveTs (ms).
+     * Default 300000 (5 min). Docker acceptance gate sets 60000.
+     * Env: JINN_PREDICTION_V0_RESOLVE_GAP_MS
+     */
+    predictionV0ResolveGapMs: z.ZodOptional<z.ZodNumber>;
     /**
      * Operator-controlled impl dispatch for the restorer engine.
      *
@@ -155,20 +459,120 @@ export declare const JinnConfigSchema: z.ZodObject<{
      * byKind:   explicit spec.kind → impl name mapping (highest priority)
      * default:  fallback impl name when no kind-specific match is found
      * disabled: impl names to exclude from dispatch entirely
+     * wrapWith: universal-wrap impl name (jinn-mono-0k2). When set AND
+     *           registered + active + supports the ctx, that impl wins for
+     *           every non-evaluation dispatch — bypassing byKind/default/
+     *           first-match. Default ships as `'claude-code-learner'` so the
+     *           learning envelope wraps every restoration kind. Operators set
+     *           this to `null` (or any other registered wrapper-style impl
+     *           name) to flip it off / swap it out. Evaluations always
+     *           dispatch to specialists.
      */
     restorers: z.ZodOptional<z.ZodObject<{
         byKind: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         default: z.ZodOptional<z.ZodString>;
         disabled: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        wrapWith: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        /**
+         * Operator-supplied external impls — Path 2 plug-in surface.
+         *
+         * Each entry points the daemon at a manifest-bearing package on disk
+         * (typically inside `node_modules/`); `client/src/main.ts` invokes
+         * `loadExternalImpl()` for each entry at boot, validates the manifest
+         * against `trustedImplSigners`, and registers the resulting impl in
+         * the restorer registry. See
+         * `docs/superpowers/plans/2026-04-30-plug-in-surface-path-2-foundation.md`
+         * step 5.7-5.8.
+         */
+        externalImpls: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            entry: z.ZodString;
+            package: z.ZodOptional<z.ZodString>;
+            /**
+             * Optional pinned version. When set, the loader rejects the
+             * impl if its manifest's `version` does not match this string
+             * exactly — guards against silent upgrades of an on-disk
+             * package without an explicit operator config change
+             * (Finding 10).
+             */
+            version: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            name: string;
+            entry: string;
+            package?: string | undefined;
+            version?: string | undefined;
+        }, {
+            name: string;
+            entry: string;
+            package?: string | undefined;
+            version?: string | undefined;
+        }>, "many">>;
     }, "strip", z.ZodTypeAny, {
         byKind?: Record<string, string> | undefined;
         default?: string | undefined;
         disabled?: string[] | undefined;
+        wrapWith?: string | null | undefined;
+        externalImpls?: {
+            name: string;
+            entry: string;
+            package?: string | undefined;
+            version?: string | undefined;
+        }[] | undefined;
     }, {
         byKind?: Record<string, string> | undefined;
         default?: string | undefined;
         disabled?: string[] | undefined;
+        wrapWith?: string | null | undefined;
+        externalImpls?: {
+            name: string;
+            entry: string;
+            package?: string | undefined;
+            version?: string | undefined;
+        }[] | undefined;
     }>>;
+    /**
+     * Trusted ed25519 publishers for external restorer impls. The daemon
+     * refuses to load any external impl whose manifest signature is not
+     * verifiable against one of these public keys.
+     *
+     * `publicKey` is base64-encoded raw ed25519. `label` is operator-facing
+     * provenance only.
+     */
+    trustedImplSigners: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        alg: z.ZodLiteral<"ed25519">;
+        publicKey: z.ZodString;
+        label: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        publicKey: string;
+        alg: "ed25519";
+        label?: string | undefined;
+    }, {
+        publicKey: string;
+        alg: "ed25519";
+        label?: string | undefined;
+    }>, "many">>;
+    /**
+     * Path 1 plug-ins for the bundled `claude-code-learner` impl — npm
+     * packages on disk that contribute phase-agent overrides, topic
+     * explorers, MCP tools, skill bundles, memory backends, or hooks via
+     * `jinn-plugin.json`.
+     *
+     * Each entry's `entry` is the absolute (or cwd-relative) path to the
+     * plug-in package root containing `package.json` + `jinn-plugin.json`.
+     * The CLI command `jinn plug-ins {list|add|remove|show}` edits this
+     * field. See spec/2026-04-30-plug-in-surface.md §4 and
+     * docs/superpowers/plans/2026-04-30-plug-in-surface-path-1-mechanism.md.
+     */
+    learnerPlugIns: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        entry: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        entry: string;
+    }, {
+        name: string;
+        entry: string;
+    }>, "many">>;
     /**
      * Restoration engine durable directories (per-intent work + impl state).
      * Defaults under ~/.jinn-client/engine/. Env: JINN_ENGINE_WORKING_DIR_ROOT,
@@ -184,6 +588,79 @@ export declare const JinnConfigSchema: z.ZodObject<{
         workingDirRoot?: string | undefined;
         implStateDirRoot?: string | undefined;
     }>>;
+    /**
+     * Operator-local artifact serving configuration (Phase A.1, jinn-mono-vy37.1).
+     *
+     * Per spec/2026-04-30-phase-a-umbrella.md §1, restoration artifact bytes
+     * stay on the operator's filesystem (served_artifacts) and are dispensed
+     * via the operator's HTTP API with x402 gating when `priceUsdc > 0`. The
+     * envelope's `artifact.access.endpoint` field tells consumers where to
+     * fetch each artifact; `priceUsdc` declares the asking price.
+     *
+     * `publicEndpoint` is the externally-reachable base URL that gets stamped
+     * into every artifact descriptor. `defaultPriceUsdc` is the fallback price
+     * when neither OUTPUTS.json nor `perArtifactTypePrice` provides a value.
+     * `perArtifactTypePrice` lets operators charge per artifactType.
+     *
+     * Resolution precedence in `uploadArtifacts`:
+     *   OUTPUTS.json `access.priceUsdc` > `perArtifactTypePrice[artifactType]`
+     *   > `defaultPriceUsdc`.
+     *
+     * Env overrides:
+     *   JINN_OPERATOR_PUBLIC_ENDPOINT
+     *   JINN_OPERATOR_DEFAULT_PRICE_USDC
+     */
+    operator: z.ZodOptional<z.ZodObject<{
+        publicEndpoint: z.ZodString;
+        defaultPriceUsdc: z.ZodDefault<z.ZodString>;
+        perArtifactTypePrice: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        publicEndpoint: string;
+        defaultPriceUsdc: string;
+        perArtifactTypePrice: Record<string, string>;
+    }, {
+        publicEndpoint: string;
+        defaultPriceUsdc?: string | undefined;
+        perArtifactTypePrice?: Record<string, string> | undefined;
+    }>>;
+    /**
+     * Run idempotent legacy migrations at daemon startup (jinn-mono-jgp:
+     * backfill `agent_id` on `complete` services that pre-date j07).
+     *
+     * Defaults to true — the migrations are no-ops on already-migrated
+     * fleets and cheap on Base. Operators on a flaky RPC or with locked
+     * funds can set this to false and run `jinn migrate-agent-id`
+     * explicitly.
+     *
+     * Env: JINN_RUN_LEGACY_MIGRATIONS=0|1.
+     */
+    runLegacyMigrations: z.ZodDefault<z.ZodBoolean>;
+    /**
+     * ERC-8004 Identity Registry contract address on the configured chain.
+     * Pre-rebuild config key (PR #37 cleanup left it in place). The post-rebuild
+     * client (jinn-mono-j07/3zk) reads the address from
+     * `client/src/erc8004/identity.ts` constants and from
+     * `EarningState.identity_registry_address`; this config key is currently
+     * unused but kept for backwards-compat with operator config files.
+     * Env: JINN_IDENTITY_REGISTRY_ADDRESS
+     */
+    identityRegistryAddress: z.ZodOptional<z.ZodString>;
+    /**
+     * ERC-8004 Validation Registry contract address on the configured chain.
+     * Pre-rebuild config key. The post-rebuild client (jinn-mono-9jg) reads the
+     * address from `client/src/erc8004/addresses.ts:VALIDATION_REGISTRY_ADDRESSES`;
+     * this config key is currently unused but kept for backwards-compat.
+     * Env: JINN_VALIDATION_REGISTRY_ADDRESS
+     */
+    validationRegistryAddress: z.ZodOptional<z.ZodString>;
+    /**
+     * Whether to enable the read-only reputation surface (query-time flag).
+     * Pre-rebuild config key. The post-rebuild client (jinn-mono-2ff/yg4) is
+     * always constructed when `agent_id` is set; this flag is currently unused
+     * but kept for backwards-compat.
+     * Env: JINN_REPUTATION_ENABLED
+     */
+    reputationEnabled: z.ZodDefault<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
     network: "testnet" | "mainnet";
     earningDir: string;
@@ -196,9 +673,8 @@ export declare const JinnConfigSchema: z.ZodObject<{
     claudeModel: string;
     peers: string[];
     desiredStates: {
-        description: string;
         id?: string | undefined;
-        context?: Record<string, unknown> | undefined;
+        description?: string | undefined;
         window?: {
             startTs: number;
             endTs: number;
@@ -207,14 +683,47 @@ export declare const JinnConfigSchema: z.ZodObject<{
             kind: string;
         } & Record<string, unknown>) | undefined;
         eligibility?: Record<string, unknown> | undefined;
+        context?: Record<string, unknown> | undefined;
+        intent?: {
+            id: string;
+            signature: {
+                hash: string;
+                algo: "secp256k1";
+                signer: string;
+                sig: string;
+            };
+            schemaVersion: "intent.v1";
+            kind: string;
+            description: string;
+            window: {
+                startTs: number;
+                endTs: number;
+            };
+            spec: {
+                kind: string;
+            } & Record<string, unknown>;
+            eligibility: Record<string, unknown>;
+            creator: {
+                safeAddress: string;
+                agentEoa: string;
+            };
+            createdAt: number;
+        } | undefined;
     }[];
     ipfsRegistryUrl: string;
     ipfsGatewayUrl: string;
+    jinnL1Network: "sepolia" | "ethereum";
+    jinnMessengerMode: "canonical" | "mock";
+    jinnClaimLoopIntervalMs: number;
     stakingMode: "standard" | "self-bond";
     targetServices: number;
     debug: boolean;
+    runLegacyMigrations: boolean;
+    reputationEnabled: boolean;
     rpcUrl?: string | undefined;
     archiveRpcUrl?: string | undefined;
+    l2ProofRpcUrl?: string | undefined;
+    apiBindHost?: string | undefined;
     runtimeMode?: "bare" | "docker-compose" | "container" | undefined;
     subgraphUrl?: string | undefined;
     nodeEndpoint?: string | undefined;
@@ -223,26 +732,62 @@ export declare const JinnConfigSchema: z.ZodObject<{
     testnetMechDeploymentPath?: string | undefined;
     testnetStolasDeploymentPath?: string | undefined;
     testnetClaimRegistryDeploymentPath?: string | undefined;
+    jinnMviL1DeploymentPath?: string | undefined;
+    jinnMviL2DeploymentPath?: string | undefined;
+    ethereumRpcUrl?: string | undefined;
+    ethereumArchiveRpcUrl?: string | undefined;
+    jinnDistributorAddress?: string | undefined;
+    jinnClaimEmitterAddress?: string | undefined;
+    jinnMessengerAddress?: string | undefined;
     masterEthDailyEstimateWei?: string | undefined;
+    minEoaGasWei?: string | undefined;
+    minSafeEthWei?: string | undefined;
+    predictionV0WindowMs?: number | undefined;
+    predictionV0ResolveGapMs?: number | undefined;
     restorers?: {
         byKind?: Record<string, string> | undefined;
         default?: string | undefined;
         disabled?: string[] | undefined;
+        wrapWith?: string | null | undefined;
+        externalImpls?: {
+            name: string;
+            entry: string;
+            package?: string | undefined;
+            version?: string | undefined;
+        }[] | undefined;
     } | undefined;
+    trustedImplSigners?: {
+        publicKey: string;
+        alg: "ed25519";
+        label?: string | undefined;
+    }[] | undefined;
+    learnerPlugIns?: {
+        name: string;
+        entry: string;
+    }[] | undefined;
     engine?: {
         workingDirRoot?: string | undefined;
         implStateDirRoot?: string | undefined;
     } | undefined;
+    operator?: {
+        publicEndpoint: string;
+        defaultPriceUsdc: string;
+        perArtifactTypePrice: Record<string, string>;
+    } | undefined;
+    identityRegistryAddress?: string | undefined;
+    validationRegistryAddress?: string | undefined;
 }, {
     network?: "testnet" | "mainnet" | undefined;
     rpcUrl?: string | undefined;
     archiveRpcUrl?: string | undefined;
+    l2ProofRpcUrl?: string | undefined;
     earningDir?: string | undefined;
     dbPath?: string | undefined;
     pollIntervalMs?: number | undefined;
     rewardClaimIntervalMs?: number | undefined;
     balanceTopupIntervalMs?: number | undefined;
     apiPort?: number | undefined;
+    apiBindHost?: string | undefined;
     claudePath?: string | undefined;
     claudeModel?: string | undefined;
     runtimeMode?: "bare" | "docker-compose" | "container" | undefined;
@@ -250,9 +795,238 @@ export declare const JinnConfigSchema: z.ZodObject<{
     subgraphUrl?: string | undefined;
     nodeEndpoint?: string | undefined;
     desiredStates?: {
-        description: string;
         id?: string | undefined;
+        description?: string | undefined;
+        window?: {
+            startTs: number;
+            endTs: number;
+        } | undefined;
+        spec?: ({
+            kind: string;
+        } & Record<string, unknown>) | undefined;
+        eligibility?: Record<string, unknown> | undefined;
+        context?: Record<string, unknown> | undefined;
+        intent?: {
+            id: string;
+            signature: {
+                hash: string;
+                algo: "secp256k1";
+                signer: string;
+                sig: string;
+            };
+            schemaVersion: "intent.v1";
+            kind: string;
+            description: string;
+            window: {
+                startTs: number;
+                endTs: number;
+            };
+            spec: {
+                kind: string;
+            } & Record<string, unknown>;
+            eligibility: Record<string, unknown>;
+            creator: {
+                safeAddress: string;
+                agentEoa: string;
+            };
+            createdAt: number;
+        } | undefined;
+    }[] | undefined;
+    ipfsRegistryUrl?: string | undefined;
+    ipfsGatewayUrl?: string | undefined;
+    testnetL2DeploymentPath?: string | undefined;
+    testnetL2TokenDeploymentPath?: string | undefined;
+    testnetMechDeploymentPath?: string | undefined;
+    testnetStolasDeploymentPath?: string | undefined;
+    testnetClaimRegistryDeploymentPath?: string | undefined;
+    jinnMviL1DeploymentPath?: string | undefined;
+    jinnMviL2DeploymentPath?: string | undefined;
+    ethereumRpcUrl?: string | undefined;
+    ethereumArchiveRpcUrl?: string | undefined;
+    jinnL1Network?: "sepolia" | "ethereum" | undefined;
+    jinnDistributorAddress?: string | undefined;
+    jinnClaimEmitterAddress?: string | undefined;
+    jinnMessengerAddress?: string | undefined;
+    jinnMessengerMode?: "canonical" | "mock" | undefined;
+    jinnClaimLoopIntervalMs?: number | undefined;
+    stakingMode?: "standard" | "self-bond" | undefined;
+    targetServices?: number | undefined;
+    debug?: boolean | undefined;
+    masterEthDailyEstimateWei?: string | undefined;
+    minEoaGasWei?: string | undefined;
+    minSafeEthWei?: string | undefined;
+    predictionV0WindowMs?: number | undefined;
+    predictionV0ResolveGapMs?: number | undefined;
+    restorers?: {
+        byKind?: Record<string, string> | undefined;
+        default?: string | undefined;
+        disabled?: string[] | undefined;
+        wrapWith?: string | null | undefined;
+        externalImpls?: {
+            name: string;
+            entry: string;
+            package?: string | undefined;
+            version?: string | undefined;
+        }[] | undefined;
+    } | undefined;
+    trustedImplSigners?: {
+        publicKey: string;
+        alg: "ed25519";
+        label?: string | undefined;
+    }[] | undefined;
+    learnerPlugIns?: {
+        name: string;
+        entry: string;
+    }[] | undefined;
+    engine?: {
+        workingDirRoot?: string | undefined;
+        implStateDirRoot?: string | undefined;
+    } | undefined;
+    operator?: {
+        publicEndpoint: string;
+        defaultPriceUsdc?: string | undefined;
+        perArtifactTypePrice?: Record<string, string> | undefined;
+    } | undefined;
+    runLegacyMigrations?: boolean | undefined;
+    identityRegistryAddress?: string | undefined;
+    validationRegistryAddress?: string | undefined;
+    reputationEnabled?: boolean | undefined;
+}>, {
+    network: "testnet" | "mainnet";
+    earningDir: string;
+    dbPath: string;
+    pollIntervalMs: number;
+    rewardClaimIntervalMs: number;
+    balanceTopupIntervalMs: number;
+    apiPort: number;
+    claudePath: string;
+    claudeModel: string;
+    peers: string[];
+    desiredStates: {
+        id?: string | undefined;
+        description?: string | undefined;
+        window?: {
+            startTs: number;
+            endTs: number;
+        } | undefined;
+        spec?: ({
+            kind: string;
+        } & Record<string, unknown>) | undefined;
+        eligibility?: Record<string, unknown> | undefined;
         context?: Record<string, unknown> | undefined;
+        intent?: {
+            id: string;
+            signature: {
+                hash: string;
+                algo: "secp256k1";
+                signer: string;
+                sig: string;
+            };
+            schemaVersion: "intent.v1";
+            kind: string;
+            description: string;
+            window: {
+                startTs: number;
+                endTs: number;
+            };
+            spec: {
+                kind: string;
+            } & Record<string, unknown>;
+            eligibility: Record<string, unknown>;
+            creator: {
+                safeAddress: string;
+                agentEoa: string;
+            };
+            createdAt: number;
+        } | undefined;
+    }[];
+    ipfsRegistryUrl: string;
+    ipfsGatewayUrl: string;
+    jinnL1Network: "sepolia" | "ethereum";
+    jinnMessengerMode: "canonical" | "mock";
+    jinnClaimLoopIntervalMs: number;
+    stakingMode: "standard" | "self-bond";
+    targetServices: number;
+    debug: boolean;
+    runLegacyMigrations: boolean;
+    reputationEnabled: boolean;
+    rpcUrl?: string | undefined;
+    archiveRpcUrl?: string | undefined;
+    l2ProofRpcUrl?: string | undefined;
+    apiBindHost?: string | undefined;
+    runtimeMode?: "bare" | "docker-compose" | "container" | undefined;
+    subgraphUrl?: string | undefined;
+    nodeEndpoint?: string | undefined;
+    testnetL2DeploymentPath?: string | undefined;
+    testnetL2TokenDeploymentPath?: string | undefined;
+    testnetMechDeploymentPath?: string | undefined;
+    testnetStolasDeploymentPath?: string | undefined;
+    testnetClaimRegistryDeploymentPath?: string | undefined;
+    jinnMviL1DeploymentPath?: string | undefined;
+    jinnMviL2DeploymentPath?: string | undefined;
+    ethereumRpcUrl?: string | undefined;
+    ethereumArchiveRpcUrl?: string | undefined;
+    jinnDistributorAddress?: string | undefined;
+    jinnClaimEmitterAddress?: string | undefined;
+    jinnMessengerAddress?: string | undefined;
+    masterEthDailyEstimateWei?: string | undefined;
+    minEoaGasWei?: string | undefined;
+    minSafeEthWei?: string | undefined;
+    predictionV0WindowMs?: number | undefined;
+    predictionV0ResolveGapMs?: number | undefined;
+    restorers?: {
+        byKind?: Record<string, string> | undefined;
+        default?: string | undefined;
+        disabled?: string[] | undefined;
+        wrapWith?: string | null | undefined;
+        externalImpls?: {
+            name: string;
+            entry: string;
+            package?: string | undefined;
+            version?: string | undefined;
+        }[] | undefined;
+    } | undefined;
+    trustedImplSigners?: {
+        publicKey: string;
+        alg: "ed25519";
+        label?: string | undefined;
+    }[] | undefined;
+    learnerPlugIns?: {
+        name: string;
+        entry: string;
+    }[] | undefined;
+    engine?: {
+        workingDirRoot?: string | undefined;
+        implStateDirRoot?: string | undefined;
+    } | undefined;
+    operator?: {
+        publicEndpoint: string;
+        defaultPriceUsdc: string;
+        perArtifactTypePrice: Record<string, string>;
+    } | undefined;
+    identityRegistryAddress?: string | undefined;
+    validationRegistryAddress?: string | undefined;
+}, {
+    network?: "testnet" | "mainnet" | undefined;
+    rpcUrl?: string | undefined;
+    archiveRpcUrl?: string | undefined;
+    l2ProofRpcUrl?: string | undefined;
+    earningDir?: string | undefined;
+    dbPath?: string | undefined;
+    pollIntervalMs?: number | undefined;
+    rewardClaimIntervalMs?: number | undefined;
+    balanceTopupIntervalMs?: number | undefined;
+    apiPort?: number | undefined;
+    apiBindHost?: string | undefined;
+    claudePath?: string | undefined;
+    claudeModel?: string | undefined;
+    runtimeMode?: "bare" | "docker-compose" | "container" | undefined;
+    peers?: string | string[] | undefined;
+    subgraphUrl?: string | undefined;
+    nodeEndpoint?: string | undefined;
+    desiredStates?: {
+        id?: string | undefined;
+        description?: string | undefined;
         window?: {
             startTs: number;
             endTs: number;
@@ -261,6 +1035,32 @@ export declare const JinnConfigSchema: z.ZodObject<{
             kind: string;
         } & Record<string, unknown>) | undefined;
         eligibility?: Record<string, unknown> | undefined;
+        context?: Record<string, unknown> | undefined;
+        intent?: {
+            id: string;
+            signature: {
+                hash: string;
+                algo: "secp256k1";
+                signer: string;
+                sig: string;
+            };
+            schemaVersion: "intent.v1";
+            kind: string;
+            description: string;
+            window: {
+                startTs: number;
+                endTs: number;
+            };
+            spec: {
+                kind: string;
+            } & Record<string, unknown>;
+            eligibility: Record<string, unknown>;
+            creator: {
+                safeAddress: string;
+                agentEoa: string;
+            };
+            createdAt: number;
+        } | undefined;
     }[] | undefined;
     ipfsRegistryUrl?: string | undefined;
     ipfsGatewayUrl?: string | undefined;
@@ -269,24 +1069,63 @@ export declare const JinnConfigSchema: z.ZodObject<{
     testnetMechDeploymentPath?: string | undefined;
     testnetStolasDeploymentPath?: string | undefined;
     testnetClaimRegistryDeploymentPath?: string | undefined;
+    jinnMviL1DeploymentPath?: string | undefined;
+    jinnMviL2DeploymentPath?: string | undefined;
+    ethereumRpcUrl?: string | undefined;
+    ethereumArchiveRpcUrl?: string | undefined;
+    jinnL1Network?: "sepolia" | "ethereum" | undefined;
+    jinnDistributorAddress?: string | undefined;
+    jinnClaimEmitterAddress?: string | undefined;
+    jinnMessengerAddress?: string | undefined;
+    jinnMessengerMode?: "canonical" | "mock" | undefined;
+    jinnClaimLoopIntervalMs?: number | undefined;
     stakingMode?: "standard" | "self-bond" | undefined;
     targetServices?: number | undefined;
     debug?: boolean | undefined;
     masterEthDailyEstimateWei?: string | undefined;
+    minEoaGasWei?: string | undefined;
+    minSafeEthWei?: string | undefined;
+    predictionV0WindowMs?: number | undefined;
+    predictionV0ResolveGapMs?: number | undefined;
     restorers?: {
         byKind?: Record<string, string> | undefined;
         default?: string | undefined;
         disabled?: string[] | undefined;
+        wrapWith?: string | null | undefined;
+        externalImpls?: {
+            name: string;
+            entry: string;
+            package?: string | undefined;
+            version?: string | undefined;
+        }[] | undefined;
     } | undefined;
+    trustedImplSigners?: {
+        publicKey: string;
+        alg: "ed25519";
+        label?: string | undefined;
+    }[] | undefined;
+    learnerPlugIns?: {
+        name: string;
+        entry: string;
+    }[] | undefined;
     engine?: {
         workingDirRoot?: string | undefined;
         implStateDirRoot?: string | undefined;
     } | undefined;
+    operator?: {
+        publicEndpoint: string;
+        defaultPriceUsdc?: string | undefined;
+        perArtifactTypePrice?: Record<string, string> | undefined;
+    } | undefined;
+    runLegacyMigrations?: boolean | undefined;
+    identityRegistryAddress?: string | undefined;
+    validationRegistryAddress?: string | undefined;
+    reputationEnabled?: boolean | undefined;
 }>;
 /** JinnConfig with rpcUrl guaranteed to be resolved (never undefined) and desiredStates with id always assigned. */
 export type JinnConfig = Omit<z.infer<typeof JinnConfigSchema>, 'rpcUrl' | 'desiredStates' | 'engine'> & {
     rpcUrl: string;
-    desiredStates: DesiredState[];
+    desiredStates: RestorationJob[];
     engine: {
         workingDirRoot: string;
         implStateDirRoot: string;
@@ -309,3 +1148,36 @@ export declare function loadConfig(configPath?: string): JinnConfig;
  * Get the config file path from --config CLI arg, if provided.
  */
 export declare function getConfigPathFromArgs(argv?: string[]): string | undefined;
+export interface ConfigProvenance {
+    /** Resolved config file path, or null if only defaults were used. */
+    configPath: string | null;
+    /** Whether a config file was found and loaded. */
+    configLoaded: boolean;
+    /** Resolved network. */
+    network: 'mainnet' | 'testnet';
+    /** Resolved earning state directory. */
+    earningDir: string;
+    /** Resolved SQLite database path. */
+    dbPath: string;
+    /** Resolved runtime mode, or null if auto-detected. */
+    runtimeMode: string | null;
+    /**
+     * Env vars that were set and contributed to the resolved config.
+     * Values are always `"set"` — never the actual value.
+     * JINN_PASSWORD is never listed here.
+     */
+    envOverrides: Record<string, 'set'>;
+}
+/**
+ * Build a structured provenance block describing how the config was resolved.
+ *
+ * Pass the same `configPath` you passed to `loadConfig`, and the resulting
+ * `JinnConfig`. The helper inspects `process.env` to discover which tracked
+ * env vars were set; it never reads their values.
+ *
+ * @param configPath — the explicit config file path passed to `loadConfig`,
+ *   or undefined if the default path was used.
+ * @param config — the resolved `JinnConfig` returned by `loadConfig`.
+ * @param env — defaults to `process.env`; inject in tests.
+ */
+export declare function buildConfigProvenance(configPath: string | undefined, config: JinnConfig, env?: NodeJS.ProcessEnv): ConfigProvenance;