motebit 1.0.1 → 1.1.1

package/dist/index.js

@@ -11948,8 +11948,8 @@ var init_config2 = __esm({
   "src/config.ts"() {
     "use strict";
     init_esm_shims();
-    VERSION = true ? "1.0.1" : "0.0.0-dev";
-    CONFIG_DIR = path2.join(os.homedir(), ".motebit");
+    VERSION = true ? "1.1.1" : "0.0.0-dev";
+    CONFIG_DIR = process.env["MOTEBIT_CONFIG_DIR"] ?? path2.join(os.homedir(), ".motebit");
     CONFIG_PATH = path2.join(CONFIG_DIR, "config.json");
     RELAY_DIR = path2.join(CONFIG_DIR, "relay");
     RELAY_DB_PATH = path2.join(RELAY_DIR, "relay.db");
@@ -23250,7 +23250,7 @@ A motebit is a droplet of intelligence under surface tension \u2014 body passive
           id: "README.md#versioning",
           source: "README.md",
           title: "Versioning",
-          content: "12 packages publish to npm \u2014 11 Apache-2.0 (the permissive floor) and 1 BSL-1.1 (the `motebit` reference runtime, with the CLI as its primary surface). All 12 are at `1.0.0`. Breaking changes to any of their public surfaces require a major bump.\n\nThe 51 workspace-private packages \u2014 `@motebit/runtime`, `@motebit/api`, `@motebit/ai-core`, `@motebit/memory-graph`, `@motebit/policy`, `@motebit/sync-engine`, and the rest of the interior machinery \u2014 exist for source organization and do not publish independently. They carry a sentinel version `0.0.0-private` so the absence of a semver claim is explicit at the source: the only stability promises this repo makes live on the 12 published packages above.\n\n**The public promise of `motebit@1.0` is its bundled operator-facing surface \u2014 subcommands, flags, exit codes, `~/.motebit/` layout, relay HTTP routes, MCP server tool list \u2014 not the internal workspace package graph.** The Apache-2.0 protocol packages (`@motebit/protocol`, `@motebit/sdk`, `@motebit/crypto`) promise wire-format and type stability independently, gated by `check-api-surface`.",
+          content: "12 packages publish to npm \u2014 11 Apache-2.0 (the permissive floor) and 1 BSL-1.1 (the `motebit` reference runtime, with the CLI as its primary surface). All 12 are at `1.0.0`. Breaking changes to any of their public surfaces require a major bump.\n\nThe 51 workspace-private packages \u2014 `@motebit/runtime`, `@motebit/relay`, `@motebit/ai-core`, `@motebit/memory-graph`, `@motebit/policy`, `@motebit/sync-engine`, and the rest of the interior machinery \u2014 exist for source organization and do not publish independently. They carry a sentinel version `0.0.0-private` so the absence of a semver claim is explicit at the source: the only stability promises this repo makes live on the 12 published packages above.\n\n**The public promise of `motebit@1.0` is its bundled operator-facing surface \u2014 subcommands, flags, exit codes, `~/.motebit/` layout, relay HTTP routes, MCP server tool list \u2014 not the internal workspace package graph.** The Apache-2.0 protocol packages (`@motebit/protocol`, `@motebit/sdk`, `@motebit/crypto`) promise wire-format and type stability independently, gated by `check-api-surface`.",
           termFrequencies: {
             "0": 8,
             "1": 5,
@@ -56457,6 +56457,7 @@ function createProvider(config, personalityConfig) {
 }
 function buildToolRegistry(config, runtimeRef, motebitId) {
   const registry = new InMemoryToolRegistry();
+  if (config.direct) return registry;
   registry.register(readFileDefinition, createReadFileHandler(config.allowedPaths));
   const braveKey = process.env["BRAVE_SEARCH_API_KEY"];
   let searchProvider;
@@ -57014,7 +57015,7 @@ var init_dist32 = __esm({
   }
 });
 
-// ../../services/api/dist/request-context.js
+// ../../services/relay/dist/request-context.js
 import { AsyncLocalStorage } from "async_hooks";
 function getRequestContext() {
   return requestContext.getStore();
@@ -57030,14 +57031,14 @@ function enrichRequestContext(fields) {
 }
 var requestContext;
 var init_request_context = __esm({
-  "../../services/api/dist/request-context.js"() {
+  "../../services/relay/dist/request-context.js"() {
     "use strict";
     init_esm_shims();
     requestContext = new AsyncLocalStorage();
   }
 });
 
-// ../../services/api/dist/logger.js
+// ../../services/relay/dist/logger.js
 function emit(entry) {
   if (LOG_LEVELS[entry.level] < LOG_LEVELS[minLevel])
     return;
@@ -57069,7 +57070,7 @@ function createLogger(context = {}) {
 }
 var LOG_LEVELS, minLevel;
 var init_logger = __esm({
-  "../../services/api/dist/logger.js"() {
+  "../../services/relay/dist/logger.js"() {
     "use strict";
     init_esm_shims();
     init_request_context();
@@ -57078,10 +57079,10 @@ var init_logger = __esm({
   }
 });
 
-// ../../services/api/dist/errors.js
+// ../../services/relay/dist/errors.js
 var RelayError, AuthenticationError, AuthorizationError, InsufficientFundsError, SettlementError, AllocationError, RateLimitError, FederationError, TaskError;
 var init_errors2 = __esm({
-  "../../services/api/dist/errors.js"() {
+  "../../services/relay/dist/errors.js"() {
     "use strict";
     init_esm_shims();
     RelayError = class extends Error {
@@ -57147,10 +57148,10 @@ var init_errors2 = __esm({
   }
 });
 
-// ../../services/api/dist/rate-limiter.js
+// ../../services/relay/dist/rate-limiter.js
 var FixedWindowLimiter;
 var init_rate_limiter = __esm({
-  "../../services/api/dist/rate-limiter.js"() {
+  "../../services/relay/dist/rate-limiter.js"() {
     "use strict";
     init_esm_shims();
     FixedWindowLimiter = class {
@@ -57211,7 +57212,7 @@ var init_rate_limiter = __esm({
   }
 });
 
-// ../../services/api/dist/anchoring.js
+// ../../services/relay/dist/anchoring.js
 function createAnchoringTables(db) {
   db.exec(`
     CREATE TABLE IF NOT EXISTS relay_anchor_batches (
@@ -57666,7 +57667,7 @@ async function getAgentSettlementProof(db, settlementId) {
 }
 var AGENT_SETTLEMENT_ANCHOR_SUITE, logger, DEFAULT_BATCH_MAX_SIZE, DEFAULT_BATCH_INTERVAL_MS, EvmContractSubmitter, ANCHOR_SELECTOR;
 var init_anchoring = __esm({
-  "../../services/api/dist/anchoring.js"() {
+  "../../services/relay/dist/anchoring.js"() {
     "use strict";
     init_esm_shims();
     init_dist6();
@@ -57723,7 +57724,7 @@ var init_anchoring = __esm({
   }
 });
 
-// ../../services/api/dist/credential-anchoring.js
+// ../../services/relay/dist/credential-anchoring.js
 function createCredentialAnchoringTables(db) {
   db.exec(`
     CREATE TABLE IF NOT EXISTS relay_credential_anchor_batches (
@@ -58006,7 +58007,7 @@ function getCredentialAnchorBatch(db, batchId) {
 }
 var logger2, DEFAULT_BATCH_MAX_SIZE2, DEFAULT_BATCH_INTERVAL_MS2;
 var init_credential_anchoring = __esm({
-  "../../services/api/dist/credential-anchoring.js"() {
+  "../../services/relay/dist/credential-anchoring.js"() {
     "use strict";
     init_esm_shims();
     init_dist6();
@@ -58017,7 +58018,7 @@ var init_credential_anchoring = __esm({
   }
 });
 
-// ../../services/api/dist/retry-policy.js
+// ../../services/relay/dist/retry-policy.js
 function nextRetryDelay(attempt, policy = DEFAULT_RETRY_POLICY, random = Math.random()) {
   const exponential = Math.min(policy.baseDelayMs * Math.pow(2, attempt), policy.maxDelayMs);
   const jitter = exponential * policy.jitterFraction * (random * 2 - 1);
@@ -58025,7 +58026,7 @@ function nextRetryDelay(attempt, policy = DEFAULT_RETRY_POLICY, random = Math.ra
 }
 var DEFAULT_RETRY_POLICY;
 var init_retry_policy = __esm({
-  "../../services/api/dist/retry-policy.js"() {
+  "../../services/relay/dist/retry-policy.js"() {
     "use strict";
     init_esm_shims();
     DEFAULT_RETRY_POLICY = {
@@ -58962,7 +58963,7 @@ var init_dist33 = __esm({
   }
 });
 
-// ../../services/api/dist/federation.js
+// ../../services/relay/dist/federation.js
 var federation_exports = {};
 __export(federation_exports, {
   PeerRateLimiter: () => FixedWindowLimiter,
@@ -59808,7 +59809,7 @@ function registerFederationRoutes(deps) {
 }
 var FEDERATION_SUITE, logger3, REVOCATION_TTL_MS, revocationAnchorSubmitter, PBKDF2_ITERATIONS, AUTH_TAG_BYTES, FEDERATION_QUERY_TTL_MS, HEARTBEAT_SUSPEND_THRESHOLD, HEARTBEAT_REMOVE_THRESHOLD, FEDERATION_TIMESTAMP_DRIFT_MS;
 var init_federation = __esm({
-  "../../services/api/dist/federation.js"() {
+  "../../services/relay/dist/federation.js"() {
     "use strict";
     init_esm_shims();
     init_dist6();
@@ -59993,7 +59994,7 @@ var init_dist34 = __esm({
   }
 });
 
-// ../../services/api/dist/account-store-sqlite.js
+// ../../services/relay/dist/account-store-sqlite.js
 function createAccountTables(db) {
   db.exec(`
     CREATE TABLE IF NOT EXISTS relay_accounts (
@@ -60076,7 +60077,7 @@ function sqliteAccountStoreFor(db) {
 }
 var SqliteAccountStore, stores;
 var init_account_store_sqlite = __esm({
-  "../../services/api/dist/account-store-sqlite.js"() {
+  "../../services/relay/dist/account-store-sqlite.js"() {
     "use strict";
     init_esm_shims();
     init_dist34();
@@ -60256,7 +60257,7 @@ var init_account_store_sqlite = __esm({
   }
 });
 
-// ../../services/api/dist/settlement-proofs.js
+// ../../services/relay/dist/settlement-proofs.js
 function createProofTable(db) {
   db.exec(`
     CREATE TABLE IF NOT EXISTS relay_settlement_proofs (
@@ -60279,13 +60280,13 @@ function storeSettlementProof(db, settlementId, proof, railName) {
      VALUES (?, ?, ?, ?, ?, ?, ?)`).run(settlementId, proof.reference, proof.railType, railName, proof.network ?? null, proof.confirmedAt, Date.now());
 }
 var init_settlement_proofs = __esm({
-  "../../services/api/dist/settlement-proofs.js"() {
+  "../../services/relay/dist/settlement-proofs.js"() {
     "use strict";
     init_esm_shims();
   }
 });
 
-// ../../services/api/dist/reconciliation.js
+// ../../services/relay/dist/reconciliation.js
 function reconcileLedger(db) {
   const errors = [];
   const txnSum = db.prepare("SELECT COALESCE(SUM(amount), 0) as net FROM relay_transactions").get();
@@ -60325,14 +60326,14 @@ function reconcileLedger(db) {
   return { consistent: errors.length === 0, errors };
 }
 var init_reconciliation = __esm({
-  "../../services/api/dist/reconciliation.js"() {
+  "../../services/relay/dist/reconciliation.js"() {
     "use strict";
     init_esm_shims();
     init_dist34();
   }
 });
 
-// ../../services/api/dist/stripe-credit.js
+// ../../services/relay/dist/stripe-credit.js
 function processStripeCheckout(db, sessionId, motebitId, amount, paymentIntent) {
   if (amount <= 0)
     return false;
@@ -60352,7 +60353,7 @@ function processStripeCheckout(db, sessionId, motebitId, amount, paymentIntent)
 }
 var logger11;
 var init_stripe_credit = __esm({
-  "../../services/api/dist/stripe-credit.js"() {
+  "../../services/relay/dist/stripe-credit.js"() {
     "use strict";
     init_esm_shims();
     init_dist34();
@@ -60362,7 +60363,7 @@ var init_stripe_credit = __esm({
   }
 });
 
-// ../../services/api/dist/accounts.js
+// ../../services/relay/dist/accounts.js
 function getOrCreateAccount(db, motebitId) {
   return sqliteAccountStoreFor(db).getOrCreateAccount(motebitId);
 }
@@ -60441,7 +60442,7 @@ function getPendingWithdrawals(db) {
 }
 var logger12;
 var init_accounts = __esm({
-  "../../services/api/dist/accounts.js"() {
+  "../../services/relay/dist/accounts.js"() {
     "use strict";
     init_esm_shims();
     init_dist34();
@@ -60456,14 +60457,14 @@ var init_accounts = __esm({
   }
 });
 
-// ../../services/api/dist/webhooks/stripe-webhook-adapter.js
+// ../../services/relay/dist/webhooks/stripe-webhook-adapter.js
 var stripe_webhook_adapter_exports = {};
 __export(stripe_webhook_adapter_exports, {
   StripeSubscriptionEventAdapter: () => StripeSubscriptionEventAdapter
 });
 var logger13, StripeSubscriptionEventAdapter;
 var init_stripe_webhook_adapter = __esm({
-  "../../services/api/dist/webhooks/stripe-webhook-adapter.js"() {
+  "../../services/relay/dist/webhooks/stripe-webhook-adapter.js"() {
     "use strict";
     init_esm_shims();
     init_logger();
@@ -60548,7 +60549,7 @@ var init_stripe_webhook_adapter = __esm({
   }
 });
 
-// ../../services/api/dist/discovery.js
+// ../../services/relay/dist/discovery.js
 var discovery_exports = {};
 __export(discovery_exports, {
   registerDiscoveryRoutes: () => registerDiscoveryRoutes
@@ -60701,7 +60702,7 @@ async function resolveAgent(db, relayIdentity, federationConfig, motebitId, hops
 }
 var logger25, DEFAULT_MAX_HOPS, POSITIVE_CACHE_TTL, NEGATIVE_CACHE_TTL, METADATA_CACHE_MAX_AGE, resolutionCache;
 var init_discovery2 = __esm({
-  "../../services/api/dist/discovery.js"() {
+  "../../services/relay/dist/discovery.js"() {
     "use strict";
     init_esm_shims();
     init_dist6();
@@ -60715,7 +60716,7 @@ var init_discovery2 = __esm({
   }
 });
 
-// ../../services/api/dist/migration.js
+// ../../services/relay/dist/migration.js
 var migration_exports = {};
 __export(migration_exports, {
   createMigrationTables: () => createMigrationTables,
@@ -61079,7 +61080,7 @@ function registerMigrationRoutes(deps) {
 }
 var logger26, DEFAULT_TOKEN_EXPIRY_MS;
 var init_migration2 = __esm({
-  "../../services/api/dist/migration.js"() {
+  "../../services/relay/dist/migration.js"() {
     "use strict";
     init_esm_shims();
     init_dist6();
@@ -61093,7 +61094,7 @@ var init_migration2 = __esm({
   }
 });
 
-// ../../services/api/dist/disputes.js
+// ../../services/relay/dist/disputes.js
 var disputes_exports = {};
 __export(disputes_exports, {
   createDisputeTables: () => createDisputeTables,
@@ -61489,7 +61490,7 @@ function executeFundAction(db, dispute, fundAction, splitRatio) {
 }
 var logger27, EVIDENCE_WINDOW_MS, APPEAL_WINDOW_MS, MAX_EVIDENCE_PER_PARTY, MAX_ACTIVE_DISPUTES_PER_AGENT, OPENED_EXPIRE_MS, FILING_FEE_RATE;
 var init_disputes = __esm({
-  "../../services/api/dist/disputes.js"() {
+  "../../services/relay/dist/disputes.js"() {
     "use strict";
     init_esm_shims();
     init_dist6();
@@ -61506,7 +61507,7 @@ var init_disputes = __esm({
   }
 });
 
-// ../../services/api/dist/transparency.js
+// ../../services/relay/dist/transparency.js
 var transparency_exports = {};
 __export(transparency_exports, {
   DECLARATION_CONTENT: () => DECLARATION_CONTENT,
@@ -61540,7 +61541,7 @@ function renderMarkdown() {
   const lines = [];
   lines.push("# Privacy and operator transparency");
   lines.push("");
-  lines.push("This document is the human-readable form of relay.motebit.com's transparency declaration. The signed, machine-verifiable JSON form is served at `/.well-known/motebit-transparency.json`. Both are derived from `services/api/src/transparency.ts` \u2014 the file is the single source of truth.");
+  lines.push("This document is the human-readable form of relay.motebit.com's transparency declaration. The signed, machine-verifiable JSON form is served at `/.well-known/motebit-transparency.json`. Both are derived from `services/relay/src/transparency.ts` \u2014 the file is the single source of truth.");
   lines.push("");
   lines.push("Doctrine: [`docs/doctrine/operator-transparency.md`](../../docs/doctrine/operator-transparency.md).");
   lines.push("");
@@ -61655,7 +61656,7 @@ async function registerTransparencyRoutes(deps) {
 }
 var SPEC_DRAFT_ID, SIGNATURE_SUITE, DECLARATION_CONTENT;
 var init_transparency = __esm({
-  "../../services/api/dist/transparency.js"() {
+  "../../services/relay/dist/transparency.js"() {
     "use strict";
     init_esm_shims();
     init_dist6();
@@ -61839,7 +61840,7 @@ var init_transparency = __esm({
   }
 });
 
-// ../../services/api/dist/p2p-verifier.js
+// ../../services/relay/dist/p2p-verifier.js
 var p2p_verifier_exports = {};
 __export(p2p_verifier_exports, {
   getRecentP2pSettlements: () => getRecentP2pSettlements,
@@ -61989,7 +61990,7 @@ function getRecentP2pSettlements(db, limit = 50) {
 }
 var logger28, VERIFY_INTERVAL_MS, MAX_VERIFY_PER_CYCLE, READ_ONLY_SEED;
 var init_p2p_verifier = __esm({
-  "../../services/api/dist/p2p-verifier.js"() {
+  "../../services/relay/dist/p2p-verifier.js"() {
     "use strict";
     init_esm_shims();
     init_dist19();
@@ -69311,7 +69312,7 @@ init_esm_shims();
 import * as fs13 from "fs";
 import { serve } from "@hono/node-server";
 
-// ../../services/api/dist/index.js
+// ../../services/relay/dist/index.js
 init_esm_shims();
 init_dist8();
 init_dist9();
@@ -69320,7 +69321,7 @@ init_logger();
 import { createNodeWebSocket } from "@hono/node-ws";
 import { Hono } from "hono";
 
-// ../../services/api/dist/env.js
+// ../../services/relay/dist/env.js
 init_esm_shims();
 function parseBoolEnv(name, defaultValue) {
   const raw = process.env[name];
@@ -69343,11 +69344,11 @@ function parseFloatEnv(name, defaultValue) {
   return Number.isFinite(parsed) ? parsed : defaultValue;
 }
 
-// ../../services/api/dist/schema.js
+// ../../services/relay/dist/schema.js
 init_esm_shims();
 init_federation();
 
-// ../../services/api/dist/migrations.js
+// ../../services/relay/dist/migrations.js
 init_esm_shims();
 init_logger();
 var logger4 = createLogger({ service: "migrations" });
@@ -69839,7 +69840,7 @@ var relayMigrations = [
   }
 ];
 
-// ../../services/api/dist/schema.js
+// ../../services/relay/dist/schema.js
 function createRelaySchema(db) {
   runMigrations(db, relayMigrations);
   db.prepare("DELETE FROM relay_token_blacklist WHERE expires_at < ?").run(Date.now());
@@ -69855,7 +69856,7 @@ function createRelaySchema(db) {
   return { isTokenBlacklisted, isAgentRevoked };
 }
 
-// ../../services/api/dist/freeze.js
+// ../../services/relay/dist/freeze.js
 init_esm_shims();
 init_logger();
 var logger5 = createLogger({ service: "freeze" });
@@ -69897,7 +69898,7 @@ function persistFreeze(db, cache, frozen, reason) {
   cache.reason = reason;
 }
 
-// ../../services/api/dist/auth.js
+// ../../services/relay/dist/auth.js
 init_esm_shims();
 init_dist6();
 init_logger();
@@ -69986,7 +69987,7 @@ async function verifySignedTokenForDevice(token, motebitId, identityManager, exp
   return true;
 }
 
-// ../../services/api/dist/middleware.js
+// ../../services/relay/dist/middleware.js
 init_esm_shims();
 init_rate_limiter();
 init_logger();
@@ -70215,7 +70216,7 @@ function registerMiddleware(deps) {
       // request's signature IS the auth (spec/device-self-registration-v1.md).
       // The handler verifies the signature against the public key carried
       // in the request body itself.
-      c3.req.path === "/api/v1/devices/register-self" || c3.req.path.startsWith("/api/v1/credentials/verify") || c3.req.path.startsWith("/api/v1/credentials/batch-status") || c3.req.path.match(/\/api\/v1\/credentials\/[^/]+\/status/) || // Anchor proof endpoints are public protocol artifacts (services/api
+      c3.req.path === "/api/v1/devices/register-self" || c3.req.path.startsWith("/api/v1/credentials/verify") || c3.req.path.startsWith("/api/v1/credentials/batch-status") || c3.req.path.match(/\/api\/v1\/credentials\/[^/]+\/status/) || // Anchor proof endpoints are public protocol artifacts (services/relay
       // CLAUDE.md rule 6 — every truth the relay asserts is independently
       // verifiable onchain without relay contact). An external auditor
       // will not hold a relay-issued bearer token.
@@ -70361,11 +70362,11 @@ function registerAuthMiddleware(deps) {
   app.use("/api/v1/admin/pending-withdrawals", bearerAuth({ token: apiToken }));
 }
 
-// ../../services/api/dist/websocket.js
+// ../../services/relay/dist/websocket.js
 init_esm_shims();
 init_dist2();
 
-// ../../services/api/dist/data-sync.js
+// ../../services/relay/dist/data-sync.js
 init_esm_shims();
 init_dist2();
 import { HTTPException as HTTPException3 } from "hono/http-exception";
@@ -70633,7 +70634,7 @@ function registerDataSyncRoutes(deps) {
   });
 }
 
-// ../../services/api/dist/websocket.js
+// ../../services/relay/dist/websocket.js
 function registerWebSocketRoutes(deps) {
   const { app, upgradeWebSocket, connections, taskQueue, eventStore, identityManager, db, apiToken, enableDeviceAuth, wsLimiter, isTokenBlacklisted, isAgentRevoked, verifySignedTokenForDevice: verifySignedTokenForDevice2, logger: logger29 } = deps;
   app.get("/ws/sync/:motebitId", upgradeWebSocket((c3) => {
@@ -70898,7 +70899,7 @@ function registerWebSocketRoutes(deps) {
   }));
 }
 
-// ../../services/api/dist/sync-routes.js
+// ../../services/relay/dist/sync-routes.js
 init_esm_shims();
 init_dist2();
 init_dist6();
@@ -71158,7 +71159,7 @@ function registerSyncRoutes(deps) {
   });
 }
 
-// ../../services/api/dist/idempotency.js
+// ../../services/relay/dist/idempotency.js
 init_esm_shims();
 init_logger();
 var logger9 = createLogger({ service: "idempotency" });
@@ -71208,12 +71209,12 @@ function cleanupIdempotencyKeys(db) {
   return info.changes;
 }
 
-// ../../services/api/dist/index.js
+// ../../services/relay/dist/index.js
 init_federation();
 init_anchoring();
 init_credential_anchoring();
 
-// ../../services/api/dist/deposit-detector.js
+// ../../services/relay/dist/deposit-detector.js
 init_esm_shims();
 
 // ../../packages/deposit-detector/dist/index.js
@@ -71399,7 +71400,7 @@ var HttpJsonRpcEvmAdapter = class {
   }
 };
 
-// ../../services/api/dist/deposit-detector.js
+// ../../services/relay/dist/deposit-detector.js
 init_account_store_sqlite();
 init_logger();
 var logger10 = createLogger({ service: "deposit-detector" });
@@ -71534,7 +71535,7 @@ function startDepositDetector(config) {
   return setInterval(() => void tick(), intervalMs);
 }
 
-// ../../services/api/dist/credentials.js
+// ../../services/relay/dist/credentials.js
 init_esm_shims();
 init_dist6();
 init_dist2();
@@ -72118,7 +72119,7 @@ init_esm_shims();
 // ../../packages/market/dist/index.js
 init_dist13();
 
-// ../../services/api/dist/credentials.js
+// ../../services/relay/dist/credentials.js
 init_federation();
 function getRelayKeypair(relayIdentity) {
   return {
@@ -72369,7 +72370,7 @@ function registerCredentialRoutes(deps) {
   });
 }
 
-// ../../services/api/dist/subscriptions.js
+// ../../services/relay/dist/subscriptions.js
 init_esm_shims();
 init_dist6();
 init_logger();
@@ -72735,10 +72736,10 @@ function registerProxyTokenRoutes(app, db, relayIdentity, subscriptionEventAdapt
   });
 }
 
-// ../../services/api/dist/index.js
+// ../../services/relay/dist/index.js
 init_stripe_webhook_adapter();
 
-// ../../services/api/dist/a2a-bridge.js
+// ../../services/relay/dist/a2a-bridge.js
 init_esm_shims();
 init_dist6();
 function registerA2ARoutes(app, db, config) {
@@ -73007,7 +73008,7 @@ function registerA2ARoutes(app, db, config) {
   });
 }
 
-// ../../services/api/dist/receipt-exchange.js
+// ../../services/relay/dist/receipt-exchange.js
 init_esm_shims();
 function registerReceiptExchangeRoutes(app, config = {}) {
   const exchangeTimeoutMs = config.exchangeTimeoutMs ?? 3e4;
@@ -73155,7 +73156,7 @@ function registerReceiptExchangeRoutes(app, config = {}) {
   };
 }
 
-// ../../services/api/dist/receipts-store.js
+// ../../services/relay/dist/receipts-store.js
 init_esm_shims();
 init_dist6();
 init_logger();
@@ -73194,11 +73195,11 @@ function getStoredReceiptJson(db, motebitId, taskId) {
   return row?.receipt_json ?? null;
 }
 
-// ../../services/api/dist/onramp.js
+// ../../services/relay/dist/onramp.js
 init_esm_shims();
 import { HTTPException as HTTPException6 } from "hono/http-exception";
 
-// ../../services/api/dist/onramp/stripe-crypto-adapter.js
+// ../../services/relay/dist/onramp/stripe-crypto-adapter.js
 init_esm_shims();
 var StripeCryptoOnrampAdapter = class {
   provider = "stripe-crypto-onramp";
@@ -73224,7 +73225,7 @@ var StripeCryptoOnrampAdapter = class {
   }
 };
 
-// ../../services/api/dist/onramp/stripe-crypto-client.js
+// ../../services/relay/dist/onramp/stripe-crypto-client.js
 init_esm_shims();
 var HttpStripeCryptoClient = class {
   secretKey;
@@ -73279,7 +73280,7 @@ var HttpStripeCryptoClient = class {
   }
 };
 
-// ../../services/api/dist/onramp.js
+// ../../services/relay/dist/onramp.js
 var MIN_GAS_LAMPORTS = 5e6;
 var DEFAULT_RPC = "https://api.mainnet-beta.solana.com";
 async function hasGas(address, rpcUrl = DEFAULT_RPC) {
@@ -73351,7 +73352,7 @@ function registerOnrampRoutes(app, adapter, solanaRpcUrl) {
   });
 }
 
-// ../../services/api/dist/offramp.js
+// ../../services/relay/dist/offramp.js
 init_esm_shims();
 import { HTTPException as HTTPException7 } from "hono/http-exception";
 var BridgeOfframpAdapter = class {
@@ -73469,7 +73470,7 @@ function registerOfframpRoutes(app, adapter) {
   });
 }
 
-// ../../services/api/dist/task-routing.js
+// ../../services/relay/dist/task-routing.js
 init_esm_shims();
 init_dist2();
 init_dist6();
@@ -73626,7 +73627,7 @@ var CircuitBreaker = class {
   }
 };
 
-// ../../services/api/dist/task-routing.js
+// ../../services/relay/dist/task-routing.js
 init_logger();
 var logger16 = createLogger({ service: "relay", module: "task-routing" });
 var circuitBreakerLogger = createLogger({ service: "relay", module: "circuit-breaker" });
@@ -74230,10 +74231,10 @@ function evaluateSettlementEligibility(db, delegatorId, workerId) {
   };
 }
 
-// ../../services/api/dist/index.js
+// ../../services/relay/dist/index.js
 init_accounts();
 
-// ../../services/api/dist/pairing.js
+// ../../services/relay/dist/pairing.js
 init_esm_shims();
 import { HTTPException as HTTPException8 } from "hono/http-exception";
 var PAIRING_ALPHABET = "ABCDEFGHJKMNPQRSTUVWXYZ23456789";
@@ -74473,7 +74474,7 @@ function registerPairingRoutes(deps) {
   });
 }
 
-// ../../services/api/dist/state-export.js
+// ../../services/relay/dist/state-export.js
 init_esm_shims();
 init_dist2();
 init_dist6();
@@ -74781,7 +74782,7 @@ function registerStateExportRoutes(deps) {
   });
 }
 
-// ../../services/api/dist/trust-graph.js
+// ../../services/relay/dist/trust-graph.js
 init_esm_shims();
 init_dist2();
 import { HTTPException as HTTPException10 } from "hono/http-exception";
@@ -74839,7 +74840,7 @@ function registerTrustGraphRoutes(deps) {
   });
 }
 
-// ../../services/api/dist/listings.js
+// ../../services/relay/dist/listings.js
 init_esm_shims();
 init_dist2();
 import { HTTPException as HTTPException11 } from "hono/http-exception";
@@ -74949,7 +74950,7 @@ function registerListingsRoutes(deps) {
   });
 }
 
-// ../../services/api/dist/proposals.js
+// ../../services/relay/dist/proposals.js
 init_esm_shims();
 import { HTTPException as HTTPException12 } from "hono/http-exception";
 function registerProposalRoutes(deps) {
@@ -75161,7 +75162,7 @@ function registerProposalRoutes(deps) {
   });
 }
 
-// ../../services/api/dist/key-rotation.js
+// ../../services/relay/dist/key-rotation.js
 init_esm_shims();
 init_dist6();
 init_federation();
@@ -75422,7 +75423,7 @@ function registerKeyRotationRoutes(deps) {
   });
 }
 
-// ../../services/api/dist/budget.js
+// ../../services/relay/dist/budget.js
 init_esm_shims();
 init_dist6();
 init_logger();
@@ -76061,11 +76062,11 @@ function registerBudgetRoutes(deps) {
   });
 }
 
-// ../../services/api/dist/sweep.js
+// ../../services/relay/dist/sweep.js
 init_esm_shims();
 init_accounts();
 
-// ../../services/api/dist/batch-withdrawals.js
+// ../../services/relay/dist/batch-withdrawals.js
 init_esm_shims();
 init_dist2();
 init_accounts();
@@ -76315,7 +76316,7 @@ function startBatchWithdrawalLoop(db, rails, config = {}, isFrozen) {
   }, intervalMs);
 }
 
-// ../../services/api/dist/sweep.js
+// ../../services/relay/dist/sweep.js
 init_logger();
 var logger20 = createLogger({ service: "relay", module: "sweep" });
 var MIN_SWEEP_AMOUNT = 1e6;
@@ -76408,7 +76409,7 @@ function startSweepLoop(db, config = {}, isFrozen) {
   }, intervalMs);
 }
 
-// ../../services/api/dist/agents.js
+// ../../services/relay/dist/agents.js
 init_esm_shims();
 init_dist2();
 init_federation();
@@ -77090,7 +77091,7 @@ function registerAgentRoutes(deps) {
   });
 }
 
-// ../../services/api/dist/federation-callbacks.js
+// ../../services/relay/dist/federation-callbacks.js
 init_esm_shims();
 init_dist2();
 import { HTTPException as HTTPException16 } from "hono/http-exception";
@@ -77288,14 +77289,14 @@ function createFederationCallbacks(deps) {
   };
 }
 
-// ../../services/api/dist/tasks.js
+// ../../services/relay/dist/tasks.js
 init_esm_shims();
 init_dist2();
 import { HTTPException as HTTPException17 } from "hono/http-exception";
 init_dist6();
 init_accounts();
 
-// ../../services/api/dist/push-adapter.js
+// ../../services/relay/dist/push-adapter.js
 init_esm_shims();
 init_logger();
 var logger23 = createLogger({ service: "push-adapter" });
@@ -77331,7 +77332,7 @@ async function attemptPushWake(motebitId, deps) {
   return results.some((r2) => r2.status === "fulfilled" && r2.value.delivered);
 }
 
-// ../../services/api/dist/tasks.js
+// ../../services/relay/dist/tasks.js
 init_logger();
 init_dist33();
 init_errors2();
@@ -78554,7 +78555,7 @@ async function registerTaskRoutes(deps) {
   });
 }
 
-// ../../services/api/dist/task-queue.js
+// ../../services/relay/dist/task-queue.js
 init_esm_shims();
 init_dist2();
 var TaskQueue = class {
@@ -78781,7 +78782,7 @@ var TaskQueue = class {
   }
 };
 
-// ../../services/api/dist/command-route.js
+// ../../services/relay/dist/command-route.js
 init_esm_shims();
 import { HTTPException as HTTPException18 } from "hono/http-exception";
 var RELAY_SIDE_COMMANDS = /* @__PURE__ */ new Set(["balance", "deposits", "discover", "proposals"]);
@@ -78944,7 +78945,7 @@ function executeRelaySideCommand(db, motebitId, command2) {
   }
 }
 
-// ../../services/api/dist/index.js
+// ../../services/relay/dist/index.js
 import Stripe2 from "stripe";
 
 // ../../packages/settlement-rails/dist/index.js
@@ -79359,7 +79360,7 @@ var SettlementRailRegistry = class {
   }
 };
 
-// ../../services/api/dist/index.js
+// ../../services/relay/dist/index.js
 async function createSyncRelay(config) {
   const {
     dbPath = ":memory:",
@@ -82727,7 +82728,34 @@ async function handleServe(config) {
     try {
       const toolNames = runtime.getToolRegistry().list().map((t3) => t3.name);
       const regHeaders = { "Content-Type": "application/json" };
-      if (masterToken) regHeaders["Authorization"] = `Bearer ${masterToken}`;
+      if (masterToken) {
+        regHeaders["Authorization"] = `Bearer ${masterToken}`;
+      } else if (servePrivateKey && fullConfigForServe.device_id && publicKeyHex) {
+        try {
+          await fetch(`${syncUrl}/api/v1/agents/bootstrap`, {
+            method: "POST",
+            headers: { "Content-Type": "application/json" },
+            body: JSON.stringify({
+              motebit_id: motebitId,
+              device_id: fullConfigForServe.device_id,
+              public_key: publicKeyHex
+            })
+          });
+        } catch {
+        }
+        const signedToken = await createSignedToken(
+          {
+            mid: motebitId,
+            did: fullConfigForServe.device_id,
+            iat: Date.now(),
+            exp: Date.now() + 24 * 60 * 60 * 1e3,
+            jti: crypto.randomUUID(),
+            aud: "admin:query"
+          },
+          servePrivateKey
+        );
+        regHeaders["Authorization"] = `Bearer ${signedToken}`;
+      }
       const endpointUrl = `http://localhost:${port}`;
       const serveRegBody = {
         motebit_id: motebitId,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "motebit",
-  "version": "1.0.1",
+  "version": "1.1.1",
   "type": "module",
   "description": "Reference runtime and operator console for sovereign AI agents — REPL, daemon, delegation, MCP server. Persistent Ed25519 identity, signed execution receipts, governance at the boundary.",
   "main": "./dist/index.js",
@@ -73,32 +73,32 @@
     "tsx": "^4.19.0",
     "typescript": "^5.6.0",
     "vitest": "^2.1.0",
-    "@motebit/ai-core": "0.0.0-private",
-    "@motebit/api": "0.0.0-private",
     "@motebit/behavior-engine": "0.0.0-private",
+    "@motebit/ai-core": "0.0.0-private",
     "@motebit/core-identity": "0.0.0-private",
     "@motebit/crypto": "1.1.0",
     "@motebit/encryption": "0.0.0-private",
     "@motebit/event-log": "0.0.0-private",
-    "@motebit/gradient": "0.0.0-private",
-    "@motebit/identity-file": "0.0.0-private",
     "@motebit/mcp-client": "0.0.0-private",
+    "@motebit/identity-file": "0.0.0-private",
+    "@motebit/gradient": "0.0.0-private",
     "@motebit/mcp-server": "0.0.0-private",
     "@motebit/memory-graph": "0.0.0-private",
-    "@motebit/persistence": "0.0.0-private",
-    "@motebit/planner": "0.0.0-private",
     "@motebit/policy": "0.0.0-private",
+    "@motebit/persistence": "0.0.0-private",
     "@motebit/privacy-layer": "0.0.0-private",
+    "@motebit/relay": "0.0.0-private",
+    "@motebit/planner": "0.0.0-private",
     "@motebit/runtime": "0.0.0-private",
     "@motebit/sdk": "1.0.1",
     "@motebit/self-knowledge": "0.0.0-private",
     "@motebit/state-vector": "0.0.0-private",
     "@motebit/sync-engine": "0.0.0-private",
-    "@motebit/tools": "0.0.0-private",
     "@motebit/verify": "1.1.0",
     "@motebit/voice": "0.0.0-private",
-    "@motebit/wallet-solana": "0.0.0-private",
-    "@motebit/wire-schemas": "0.0.0-private"
+    "@motebit/tools": "0.0.0-private",
+    "@motebit/wire-schemas": "0.0.0-private",
+    "@motebit/wallet-solana": "0.0.0-private"
   },
   "scripts": {
     "start": "tsx src/index.ts",