# Changelog

This changelog starts with the public Fased Agent release line. Required
third-party and copied-code notices are kept in [LICENSE](./LICENSE) and
[THIRD_PARTY_NOTICES.md](./THIRD_PARTY_NOTICES.md).

## 0.1.75

- Make the Hosting root controller update itself transactionally so existing
  installations receive future controller fixes without manual repair.
- Verify anonymous Hosting installer, signer, controller, and manifest assets
  from published offline attestation bundles without requiring GitHub login.
- Add a non-latest beta channel and prerelease classification checks so Local
  and Hosting release-candidate updates can be exercised before a stable tag.

## 0.1.74

- Repair interrupted and mixed-state Local updates so one normal
  `fased update` can retain the verified forward controller, restore the
  previous application/signer pair on failure, and retry safely.
- Make update status report the active application, signer, and last-success
  identities truthfully instead of treating a matching source tag as complete.
- Add an on-demand pre-release Docker gate that executes native AMD64 and ARM64
  signer images before a stable tag without publishing candidate images.

## 0.1.73

- Repair normal Local source updates from v0.1.72 by validating the candidate
  signer in its writable release location and preserving the rollback
  controller needed to restore paired application and signer state.
- Keep Docker runtime images free of pnpm and npm caches, and patch audited
  production dependencies without changing tolerant image-decoding behavior.
- Preserve the faster native-architecture Docker and sharded release checks
  while enforcing clean-image and updater-compatibility release gates.

## 0.1.72

- Fix the ARM64 Docker release image so it contains and executes the native
  ARM64 signer instead of an AMD64 binary.
- Add a native ARM64 pre-release signer gate and shorten release CI by
  sharding the long Gateway and extension test lanes.
- Avoid repeated Hosted release validation in each architecture build while
  preserving the canonical self-validating artifact command.

## 0.1.71

- Restore the final pull-request dependency audit and make the A2A HTTP timing
  coverage deterministic under concurrent CI load.
- Run Docker vulnerability scanning with a scanner binary matching each native
  AMD64 or ARM64 release runner so multi-architecture publication remains
  portable and fully validated.
- Update DOMPurify to the audited patch release so the production dependency
  graph contains no known vulnerabilities at release time.

## 0.1.70

- Make Local wallet and Go signer migration transactional and automatic during
  normal updates while preserving wallet identities, RPC state, role baselines,
  and rollback state.
- Align Control UI and onboarding wallet names, generated IDs, handles, RPC
  editing, balances, routing, reviewed approvals, optional passkeys, activity,
  archive controls, and restart persistence.
- Repair anonymous native-signer installation, managed runtime profiles, and
  the verified streamed Hosting bootstrap used by fresh and updating installs.
- Reconcile Pi 0.80 APIs across core and plugin boundaries so the full strict
  TypeScript check passes without a dependency downgrade.
- Parallelize CI validation, reuse build artifacts, use native ARM64 Docker
  runners and caches, and publish concise Local/Hosting wallet documentation.

## 0.1.69

- Make new signer-owned Agent, Mining, and Vault wallets role-ready with one
  verified RPC; preserve legacy deny-all wallets until explicit activation.
- Make Agent wallet routing explicit, then skill-specific, Agent-specific, and
  finally optional Default Agent fallback; creation never selects a fallback.
- Separate the Hosting operator, Gateway, and signer identities; provide the
  same native wallet lifecycle on Local and Hosting without ordinary root
  helper commands.
- Add signer-tombstoned, resumable Mining retirement and a distinct role-ready
  successor.
- Restore the exact fresh streamed Hosting command with verified tagged
  handoff, retain exact-tag-only repair, and reset English/Chinese install and
  wallet documentation around the tested behavior.

## 0.1.68

- Unify signer-owned Agent, Mining, and Vault creation around one explicit role
  and one primary Solana RPC across terminal onboarding, CLI, Control UI, Local,
  and Hosting, with automatic signer network activation and role-safe readiness.
- Add encrypted native recovery, advanced owner-only raw export, guarded Mining
  archive/replacement, receive QR, RPC editing, and hardened verified Hosting
  installation without exposing signer custody controls to Gateway.
- Bridge managed Local updates from v0.1.67 with a legacy schema-v1 app layer,
  while Hosting and current clients select the commit-bound schema-v2 app and
  signer through the unified attested release manifest.

## 0.1.67

- Reject native Windows npm installs at package selection and fail closed at
  the launcher and central runtime guard; Windows Local remains supported
  through Ubuntu on WSL2.

## 0.1.66

- Keep normal wallet onboarding to wallet role plus one primary Solana RPC,
  infer the supported cluster from its genesis hash, and reserve an optional
  second full execution RPC for advanced failover.
- Separate signer execution RPCs from the verification-only public witness;
  pin same-genesis configuration and confine public agreement to sensitive
  address lookup-table account bytes and slots.
- Complete signer-owned typed lookup-table lifecycle, durable forward/reverse
  bindings and mutation leases, exact-byte replay, effect reconciliation,
  collision recovery, stale-reservation fencing, and cleanup recovery.
- Make the short Hosting installer bootstrap an exact immutable release before
  privileged execution, preserve the root signer-control boundary, and retain
  the advanced manually attested installation path.
- Show unpaid keeper bounty in the live Mining current-cycle card and preserve
  it across refresh and reconciliation.

## 0.1.65

- Add rent-aware SAT settlement accounting, durable submission serialization
  and reconciliation, keeper-bounty debt visibility, and operator status in the
  Mining UI and CLI surfaces.
- Add signer-owned typed address lookup-table create, extend, deactivate, close,
  and lookup-backed distribution operations with Mining-role, program, action,
  and rent policy gates; all lookup-table operations remain disabled by default.
- Require byte-identical lookup-table account state from at least two distinct
  configured RPC origins before compiling numeric v0 indexes, and fail closed
  for one provider, duplicate origins, or disagreement.
- Use independent lifecycle slot reads and the conservative lower slot for
  lookup-table activation, deactivation, and close checks.
- Preserve explicit lookup-table enablement through managed updates and document
  policy activation, rent recovery, keeper reconciliation, and rollback.

## 0.1.64

- Make protocol-v2 `fased-signerd` authoritative for native key creation,
  import, rotation, encrypted state, fail-closed wallet policy, durable caps,
  idempotency, and ambiguous-broadcast reconciliation.
- Replace the maintained Hosting broker and Gateway sudo path with an
  independent root-managed signer service, separate application/control
  sockets, verified release identity, and transactional update/rollback.
- Add typed SOL, SPL, SAT Mining, Vault bond, and federation operations with
  signer-owned semantic validation; Jupiter swaps and Trigger mutations remain
  preview-only pending live qualification.
- Move reviewed WebAuthn challenges into the signer, add Wallet Standard
  hardware and Turnkey provider flows, and keep new native wallets receive-only
  until an exact positive policy hash is acknowledged.
- Add bounded signer, A2A, Marketplace, skill, and memory state with capacity
  warnings, replay-safe retention, and complete-state archive/restore guidance.
- Document clean Linux/macOS installs, Windows 10/11 through WSL2 Ubuntu,
  independent VPS Hosting custody, Local-only Docker, wallet activation,
  Mining, Vault, updates, and recovery.

## 0.1.63

- Fix maintained Hosting first-wallet setup by launching the packaged signer
  broker through the lazy wallet CLI entry instead of importing optional
  channel dependencies from the minimal hosted runtime.
- Validate packaged signer-broker startup during hosted artifact creation and
  recognize the secured `0660` app-facing broker socket used by the isolated
  VPS signer account while retaining `0600` for single-user installs.
- Clarify that Windows runs Fased inside WSL2 Ubuntu, with PowerShell used only
  to install or manage WSL2, and document the public Docker image as a
  local-only path; maintained VPS hosting remains non-Docker.

## 0.1.62

- Install a version-matched, checksum-verified local wallet signer automatically
  when first-time wallet setup selects the local socket signer path; normal
  installs no longer require Go.
- Show automatic signer installation in both Local and Hosting QuickStart while
  keeping the redundant wallet-backend prompt hidden in the hosting profile.
- Publish static Linux and macOS signer assets for x64 and arm64 with release
  checksums, module-relative installer resolution, and clear WSL2 guidance for
  Windows users.

## 0.1.61

- Harden local Docker deployments with loopback-only published ports, dropped
  Linux capabilities, `no-new-privileges`, protected environment files, and
  explicit rejection of container-engine socket mounts.
- Validate release images as a non-root user and block images containing
  embedded secrets or fixable critical vulnerabilities.
- Publish immutable multi-architecture GHCR images only from version tags with
  SBOM and provenance metadata; keep full Docker Gateway support local-only and
  use the maintained non-Docker installer for VPS hosting.

## 0.1.36

- Ship verified hosted release artifacts for fast VPS installs and updates
  without repeating the npm dependency graph on normal releases.
- Keep dashboard chat, tasks, model providers, wallets, mining, Satcoin, and
  Fased Network in core while moving Telegram, WhatsApp, Discord, and Slack
  runtime stacks to installable add-ons.
- Add packed-core and package-budget gates plus stable runtime SDK boundaries
  so SAT mining and core startup work without optional channel packages.
- Require verified voice webhook request keys, suppress replay side effects,
  and activate the configured stale-call cleanup timer.

## 0.1.35

- Add a hosted npm update fast path that downloads the exact Fased package
  tarball and swaps package files directly when runtime dependencies did not
  change, avoiding a full npm dependency reinstall for code-only updates.
- Keep hosted updates on the safer package-manager path when dependencies do
  change, so fresh dependency graphs still install normally.
- Prepare the next release after the hosted update version-verification and
  gateway refresh fixes.

## 0.1.33

- Fix hosted VPS updates so the refreshed gateway service resolves the managed
  script from the updated npm package instead of a stale `/home/app/fased`
  checkout.
- Make managed startup prefer the updated npm runtime root before the bootstrap
  checkout, so the daemon and CLI use the same Fased version after package
  updates.
- Make hosted package update status report npm instead of the source repo
  package manager, and use cache-friendly npm install flags for package updates.
- Show gateway RPC timeout during warm-up as `warming` instead of a hard failure
  when the service is running.

## 0.1.32

- Probe the lightweight Gateway `health` RPC for gateway status checks so hosted
  VPS instances do not show a false timeout while normal gateway methods are
  already answering.

## 0.1.31

- Make gateway restart wait for the local Gateway RPC to answer instead of
  treating an open port as healthy during hosted VPS warm-up.
- Stop `fased gateway status` from reporting the expected Fased gateway
  listener as a port conflict when the gateway is still warming up.

## 0.1.18

- Remove the leftover `FASED SETUP` intro frame so onboarding begins directly
  with the first framed prompt.
- Keep the installer banner/status framing from 0.1.17 while aligning the
  published npm package with the current main branch.

## 0.1.17

- Frame the installer banner and top setup status so the FASED logo, version,
  mode, logs, system preparation, runtime, and interactive setup messages use
  the same terminal block style as onboarding prompts.
- Keep the existing FASED ASCII logo text while changing the installer header
  colors to gray titles/borders, yellow labels, plain values, and green status
  checkmarks.

## 0.1.16

- Restore framed wizard panels and radio/check prompt markers while keeping the
  cleaner hosted/local onboarding copy from 0.1.15.
- Standardize terminal onboarding colors so block titles and frames are gray,
  section labels are yellow, values and copyable URLs/commands/tokens are
  green, and body text remains plain.
- Separate Fased Network status labels from copyable handles/URLs so the
  summary is easier to scan during local and hosted setup.

## 0.1.15

- Clean hosted onboarding output so local-device, Tailscale, security,
  readiness, and final access blocks use one readable terminal style.
- Remove redundant hosted setup helper cards while keeping the underlying
  Gateway, systemd, Tailscale, and hardening checks active.
- Document that hosted VPS installs use the npm prebuilt runtime for speed and
  require npm `latest` to be published when a new fresh-VPS setup should see the
  newest wizard/runtime behavior.

## 0.1.14

- Clear the public-release check gate by moving ACP thread-binding channel
  details behind the channel/thread-binding layer.
- Keep Satcoin live-chaos markers under the preferred Fased temp root unless an
  explicit marker directory is configured.
- Fix release-readiness lint and docs formatting issues found during the public
  repository hardening pass.

## 0.1.13

- Refresh the curated model catalogs for provider defaults and onboarding,
  including newer Claude Sonnet, Z.AI GLM, Qwen, Minimax, xAI, Chutes, and
  OpenCode Zen selections.
- Update vulnerable dependency pins across the runtime, UI, and bundled
  extensions, reducing npm audit output to the remaining unpatched upstream
  `@mariozechner/pi-coding-agent` advisories.
- Fix stale workspace peer package names for bundled Google Chat and Memory
  Core extensions so workspace installs resolve cleanly.

## 0.1.8

- Publish and verify the npm package as `@fased/fased@latest`; the installed
  command remains `fased`.
- Fix the npm package contents so the global CLI includes the launcher runtime,
  and add release checks for launcher packaging and brand-version drift.
- Clarify the public install order: curl bootstrap for fresh local/VPS installs,
  npm package for users who already have Node/npm, and source checkout for
  contributors.
- Expand installer portability across common Linux, VPS, FreeBSD, WSL2, and
  macOS/Homebrew host families.
- Supersede the broken `@fased/fased@0.1.7` npm package, which missed the
  launcher runtime file.

## 0.1.6

- Fix fresh local and hosted QuickStart onboarding so the dashboard does not
  require `fased-signerd` or native signer release assets before a wallet is
  configured.
- Clean stale local-signer socket environment from disabled wallet configs, and
  keep the managed Gateway online when signer material is not configured.

## 0.1.5

- Fix public local and VPS hosting onboarding readiness so setup finishes only
  after the Gateway, dashboard assets, WebSocket path, and Control UI boot path
  are actually usable.
- Harden hosted VPS operation around the non-root `app` runtime, loopback
  Gateway bind, root-managed `User=app` service, Tailscale Serve dashboard, and
  automatic low-memory swap/build handling.
- Fix hosted Fased Network joining and UI join/register actions, including
  handle preload, enrollment, endpoint update, and verified readiness reporting.
- Improve Control UI startup reliability with guarded boot, clearer bundle
  failure screens, hosted asset checks, and no infinite "Opening Fased Agent"
  loading state.
- Make `fased health`, `fased dashboard --no-open`, and `fased doctor` handle
  small-VPS hosted warm-up without false offline failures.
- Clarify end-user update docs: `fased update` defaults to the latest stable
  release tag, while `fased update --channel dev` or
  `git pull --ff-only origin main` is the development path.

## 0.1.4

- Prepare the public Fased Agent repository under `fased-ai/fased`.
- Align public source links, install docs, and repository metadata.
- Keep Fased-specific wallet, Fased Network, SAT mining, operator records, and
  onboarding work in the public source tree.
- Remove local proof artifacts, generated native signer binaries, and stale
  rebrand tooling from the source tree.

## 0.1.1

- Initial public Fased Agent source baseline.