openfused 0.3.18 → 0.3.20

package/dist/cli.js

@@ -635,12 +635,9 @@ program
     const reg = registry.resolveRegistry(opts.registry);
     try {
         const manifest = await registry.discover(name, reg);
-        // Auto-import key (untrusted) + add as peer so future `openfuse sync` can
-        // deliver replies and pull context. Key is deliberately NOT trusted — the user
-        // must explicitly `openfuse key trust <name>` after out-of-band verification.
-        // NOTE: manifest data comes from the registry and is attacker-controlled.
-        // The endpoint URL is stored as-is; a malicious entry could point at an internal
-        // service. Sync will pull from it — consider validating URL scheme/host.
+        // Auto-import key + add as peer. Keys are untrusted by default.
+        // Trust is a local decision — use `openfuse key trust <name>` after verifying.
+        const dnsDiscovered = false; // never auto-trust — user must explicitly trust
         let config = await store.readConfig();
         if (!config.keyring.some((e) => e.signingKey === manifest.publicKey)) {
             config.keyring.push({
@@ -649,7 +646,7 @@ program
                 signingKey: manifest.publicKey,
                 encryptionKey: manifest.encryptionKey,
                 fingerprint: manifest.fingerprint,
-                trusted: false,
+                trusted: dnsDiscovered,
                 added: new Date().toISOString(),
             });
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openfused",
-  "version": "0.3.18",
+  "version": "0.3.20",
   "description": "The file protocol for AI agent context. Encrypted, signed, peer-to-peer.",
   "license": "MIT",
   "type": "module",