Headless hardening: fixes from the live test run

[baairon]

Summary

Fixes from running the full test plan against the live agent on Base. Most of them are places that said "all fine" without having looked. One commit per fix.

• restore --owner finds Vault-held agents.
  • A token in a Vault is owned by the Vault, so balanceOf(owner) is 0 and the lookup returned agents: [].
  • Discovery now also scans transfers out of the wallet and keeps tokens whose Vault records this wallet as owner. This works for every Vault build.
  • When the RPC can't serve the log history and nothing was found, it exits 1 with the RPC detail and an ETHAGENT_RPC_URL hint, instead of an empty list.
• check and the manager read tokenURI.
  • agentURI(uint256) reverts on the registry, so the URI probe was always unknown and mid-flow custody never fired.
  • A different pointer is now classified: local-newer when a pinned snapshot is waiting, chain-newer otherwise. The manager's "Newer snapshot onchain" banner can appear again.
  • Mid-flow custody comes from local state (the token is in the Vault but Advanced was not saved here), not from URI drift.
• save --operator matches save.
  • It pulls the tools' edits first, which it never did.
  • It skips when nothing changed, so it no longer pins and sends with no changes.
  • It reads the token back and reports verification.
  • Both saves share one helper and now print schema: 1.
• Stale daemon.pid.
  • The daemon touches its pid file every 30 seconds.
  • Only a pid that is alive and beat recently counts as running or gets SIGTERM. A recycled pid no longer reads as the daemon.
• No hosts.json.*.tmp leftovers. Host-stats writes are synchronous, so process.exit can't cut them off. Stale temp files are swept on load.
• ens --delete --operator.
  • Allowed only when the operator key manages the parent; that key could already remove the name at the ENS contracts directly.
  • The preflight still refuses any other key, and the unlinked save still needs the owner.
  • The browser path's hint points to --operator when that is the parent's manager.
• ens without a key in the shell reports whether the active operator could sign (keyAvailable: false), instead of operator: null.

Docs: README (restore --owner, save verification, the operator delete rule) and commands/ethagent.md.

Testing

• npm run typecheck and npm test (775 pass) in a clean env.
• New tests:
  • discovery: a Vault-held agent is listed, and an unscannable wallet throws with the RPC detail;
  • restore: the --owner error and hint;
  • reconciliation probes: tokenURI, local-newer vs chain-newer, mid-flow;
  • operator-save: pull, skip, verify, exit 3;
  • a stale pid is neither running nor signalled;
  • the temp-file sweep;
  • ens --delete --operator, and the keyless operator view.
• Smoke test: restore --owner in a temp HOME with no reachable RPC exits 1 with the detail and the hint, and leaves no temp files.

To re-check after merge:

• restore --owner <owner> --network base --json lists #45744;
• check --json reports a real chain.agentUri;
• ens --json shows the operator without keychain exec;
• keychain operator-save with no edits reports skipped and sends nothing.

🤖 Generated with Claude Code

https://claude.ai/code/session_01HG2miyE22qTuug1Quxj7iw

---

Generated by Claude Code