MontrealAI · MontrealAI · Mar 23, 2026 · Mar 23, 2026 · Mar 23, 2026 · chatgpt-codex-connector
diff --git a/README.md b/README.md
@@ -173,7 +173,7 @@ See full behavior details: [`docs/ENS/ENS_JOB_PAGES_OVERVIEW.md`](docs/ENS/ENS_J
 Expected result after Prime deployment:
 - Premium jobs use procurement-first winner discovery before assignment (not first-touch lock capture).
 - Settlement retains conservative escrow/bond/dispute/finalization behavior.
-- Optional ENSJobPages lifecycle hooks can be configured on Prime via `setEnsJobPages(...)` and remain best-effort/non-fatal.
+- Optional ENSJobPages lifecycle hooks can be configured on Prime via `setEnsJobPages(...)` and remain best-effort/non-fatal. Prime does not expose a `useEnsJobTokenURI` flag; completion NFT metadata remains IPFS/completion-URI based unless a future, separately sized manager release changes that.
 
 Prime exposes keeper/bot-friendly autonomy surfaces for deterministic procurement progression in discovery (`AGIJobDiscoveryPrime`): `isShortlistFinalizable`, `isWinnerFinalizable`, `isFallbackPromotable`, `nextActionForProcurement`, `getAutonomyStatus`, and permissionless `advanceProcurement` for timeout-driven stage advancement.
 
@@ -273,7 +273,7 @@ Alias note: `check-no-binaries` is exposed as `npm run check:no-binaries`.
 
 - Preview ENS values are projections from the current prefix/root configuration.
 - Effective ENS values are authoritative per-job snapshots stored in `ENSJobPages`.
-- `AGIJobManagerPrime` remains on the existing `handleHook(uint8,uint256)` ABI; authority repair and metadata repair live on the ENS side.
+- `AGIJobManagerPrime` remains on the existing `handleHook(uint8,uint256)` ABI; authority repair, migration, resolver repair, and finalization live on the ENS side. Preview getters are projections only; authoritative values come from ENSJobPages per-job snapshots.
 - Re-run `scripts/ens/audit-mainnet.ts` and `scripts/ens/inventory-job-pages.ts` from a networked operator environment before mainnet cutover because chain state is the source of truth.
 - Treat `previewJobEns*` as projected values only; treat `effectiveJobEns*` as authoritative only after the inventory/status scripts confirm authority snapshot readiness for that job.
 - The production-safe Prime path is **keeper-assisted authoritative ENS**, not fully automated on-chain ENS hydration: operators may need to call `createJobPage`, `onAgentAssigned`, `onCompletionRequested`, `repairAuthoritySnapshot`, `repairResolver`, `repairTexts`, `repairAuthorisations`, and `lockJobENS` using event-driven runbooks.
diff --git a/contracts/ens/ENSJobPages.sol b/contracts/ens/ENSJobPages.sol
@@ -817,10 +817,6 @@ contract ENSJobPages is Ownable, ERC1155Holder, IENSJobPagesHooksV1 {
 
     function _setResolverBestEffort(uint8 hook, uint256 jobId, bytes32 node, address resolver) internal {
         if (resolver == address(0)) return;
-        if (!_supportsResolverInterface(address(publicResolver), RESOLVER_SETTEXT_INTERFACE_ID)) {
-            emit ENSHookBestEffortFailure(hook, jobId, "RESOLVER_SET_TEXT_UNSUPPORTED");
-        }
-
         if (_isWrappedNode(node)) {
             try IResolverManager(address(nameWrapper)).setResolver(node, resolver) {
                 _jobResolverConfigured[jobId] = true;
@@ -839,10 +835,6 @@ contract ENSJobPages is Ownable, ERC1155Holder, IENSJobPagesHooksV1 {
 
     function _setTextBestEffort(uint8 hook, uint256 jobId, bytes32 node, string memory key, string memory value) internal {
         if (bytes(value).length == 0) return;
-        if (!_supportsResolverInterface(address(publicResolver), RESOLVER_SETTEXT_INTERFACE_ID)) {
-            emit ENSHookBestEffortFailure(hook, jobId, "SET_TEXT_UNSUPPORTED");
-            return;
-        }
         try publicResolver.setText(node, key, value) {
             if (keccak256(bytes(key)) == keccak256(bytes("agijobs.completion.public"))) {
                 _jobCompletionTextConfigured[jobId] = true;
@@ -854,11 +846,6 @@ contract ENSJobPages is Ownable, ERC1155Holder, IENSJobPagesHooksV1 {
 
     function _setAuthorisationBestEffort(uint8 hook, uint256 jobId, bytes32 node, address account, bool authorised) internal {
         if (account == address(0)) return;
-        if (!_supportsResolverInterface(address(publicResolver), RESOLVER_SETAUTH_INTERFACE_ID)) {
-            emit ENSHookBestEffortFailure(hook, jobId, "SET_AUTH_UNSUPPORTED");
-            return;
-        }
-
         try publicResolver.setAuthorisation(node, account, authorised) {
             emit JobENSPermissionsUpdated(jobId, account, authorised);
         } catch {
@@ -1098,11 +1085,17 @@ contract ENSJobPages is Ownable, ERC1155Holder, IENSJobPagesHooksV1 {
     }
 
     function _resolverCapabilities() internal view returns (bool supportsText, bool supportsSetText, bool supportsSetAuthorisation) {
-        supportsText = _supportsResolverInterface(address(publicResolver), RESOLVER_TEXT_INTERFACE_ID);
+        supportsText = _supportsResolverInterface(address(publicResolver), RESOLVER_TEXT_INTERFACE_ID) || _supportsTextLookup(address(publicResolver));
         supportsSetText = _supportsResolverInterface(address(publicResolver), RESOLVER_SETTEXT_INTERFACE_ID);
         supportsSetAuthorisation = _supportsResolverInterface(address(publicResolver), RESOLVER_SETAUTH_INTERFACE_ID);
     }
 
+    function _supportsTextLookup(address resolver) internal view returns (bool ok) {
+        if (resolver == address(0) || resolver.code.length == 0) return false;
+        bytes memory payload = abi.encodeWithSignature("text(bytes32,string)", bytes32(0), "schema");
+        (ok, ) = resolver.staticcall(payload);
+    }
+
     function _supportsResolverInterface(address resolver, bytes4 interfaceId) internal view returns (bool ok) {
         if (resolver == address(0) || resolver.code.length == 0) return false;
         bytes memory payload = abi.encodeWithSelector(SUPPORTS_INTERFACE_SELECTOR, interfaceId);

diff --git a/docs/CONFIGURATION.md b/docs/CONFIGURATION.md
@@ -39,7 +39,7 @@ It **does not** freeze operational controls like pause, settlement pause, thresh
 | `ens` | `updateEnsRegistry` | Yes | identity-configurable + **empty locked balances** + nonzero | Identity gating dependency |
 | `nameWrapper` | `updateNameWrapper` | Yes | identity-configurable + **empty locked balances** + nonzero | Wrapped-root checks dependency |
 | `ensJobPages` | `setEnsJobPages` | Yes | identity-configurable; contract code required if nonzero | Enables lifecycle hooks |
-| `useEnsJobTokenURI` | `setUseEnsJobTokenURI` | Yes | none | Pulls NFT tokenURI from ENSJobPages when available |
+| `useEnsJobTokenURI` | Legacy manager only | No on Prime | Prime does not expose this flag | Treat as quarantined/deprecated for Prime docs; completion NFTs stay completion-URI based on current Prime deployments |
 | Root nodes | `updateRootNodes` | Yes | identity-configurable + **empty locked balances** | club/agent + alpha variants |
 | Merkle roots | `updateMerkleRoots` | Yes | not identity-locked (callable after `lockIdentityConfiguration()`) | validator/agent allowlist roots; owner can update post-lock |
 | Moderators | `addModerator/removeModerator` | Yes | nonzero address helper check | Dispute resolution role |

diff --git a/docs/ENS/OBSERVED_MAINNET_STATE.md b/docs/ENS/OBSERVED_MAINNET_STATE.md
@@ -46,7 +46,7 @@ _Observed on Ethereum mainnet on 2026-03-23 UTC using `scripts/ens/audit-mainnet
    - `configurationStatus()`
    - `jobAuthorityInfo(uint256)`
    currently revert on mainnet.
-2. The live public resolver configuration is not sufficient for the intended production-grade metadata and authorisation workflow because `setText` and `setAuthorisation` support is not advertised.
+2. The live public resolver does not advertise `setText` or `setAuthorisation` support over ERC-165. The replacement ENSJobPages keeps those write-capability checks as hard configuration gates so hook processing does not falsely report success while metadata/authorisation writes are impossible.
 3. There are currently no Prime jobs on the observed manager deployment (`nextJobId = 0`), so there is no historical inventory to migrate yet on this address pair.
 
 ## Compatibility conclusion

diff --git a/docs/REFERENCE/ENS_REFERENCE.md b/docs/REFERENCE/ENS_REFERENCE.md
@@ -1,7 +1,7 @@
 # ENS Reference (Generated)
 
 Generated at (UTC): 1970-01-01T00:00:00Z
-Source fingerprint: eb08b0407b10d626
+Source fingerprint: b2467e6ec95fafc5
 
 Source files used:
 - `contracts/AGIJobManager.sol`
@@ -55,9 +55,9 @@ Source files used:
 - `function lockJobENS(uint256 jobId, address employer, address agent, bool burnFuses) public onlyOwner` ([contracts/ens/ENSJobPages.sol#L767](../../contracts/ens/ENSJobPages.sol#L767))
 - `function _lockJobENS(uint256 jobId, address employer, address agent, bool burnFuses) internal` ([contracts/ens/ENSJobPages.sol#L771](../../contracts/ens/ENSJobPages.sol#L771))
 - `function _createSubname(bytes32 parentRootNode, string memory label) internal returns (bytes32 node)` ([contracts/ens/ENSJobPages.sol#L798](../../contracts/ens/ENSJobPages.sol#L798))
-- `function _isWrappedRootNode(bytes32 rootNode) internal view returns (bool)` ([contracts/ens/ENSJobPages.sol#L887](../../contracts/ens/ENSJobPages.sol#L887))
-- `function _requireWrapperAuthorization(bytes32 rootNode) internal view` ([contracts/ens/ENSJobPages.sol#L899](../../contracts/ens/ENSJobPages.sol#L899))
-- `function _registerRootVersion(bytes32 rootNode, string memory rootName) internal` ([contracts/ens/ENSJobPages.sol#L1052](../../contracts/ens/ENSJobPages.sol#L1052))
+- `function _isWrappedRootNode(bytes32 rootNode) internal view returns (bool)` ([contracts/ens/ENSJobPages.sol#L874](../../contracts/ens/ENSJobPages.sol#L874))
+- `function _requireWrapperAuthorization(bytes32 rootNode) internal view` ([contracts/ens/ENSJobPages.sol#L886](../../contracts/ens/ENSJobPages.sol#L886))
+- `function _registerRootVersion(bytes32 rootNode, string memory rootName) internal` ([contracts/ens/ENSJobPages.sol#L1039](../../contracts/ens/ENSJobPages.sol#L1039))
 - `function verifyENSOwnership(` ([contracts/utils/ENSOwnership.sol#L32](../../contracts/utils/ENSOwnership.sol#L32))
 - `function verifyENSOwnership(` ([contracts/utils/ENSOwnership.sol#L48](../../contracts/utils/ENSOwnership.sol#L48))
 - `function verifyMerkleOwnership(address claimant, bytes32[] calldata proof, bytes32 merkleRoot)` ([contracts/utils/ENSOwnership.sol#L61](../../contracts/utils/ENSOwnership.sol#L61))

diff --git a/docs/ens-job-pages.md b/docs/ens-job-pages.md
@@ -7,12 +7,12 @@ This document defines the **official ENS naming scheme** and **record layout** f
 One ENS name per job:
 
 ```
-job-<jobId>.alpha.jobs.agi.eth
+agijob-<jobId>.alpha.jobs.agi.eth
 ```
 
 Example:
 ```
-job-42.alpha.jobs.agi.eth
+agijob-42.alpha.jobs.agi.eth
 ```
 
 `jobId` is the on‑chain AGIJobManager job ID.
@@ -100,7 +100,7 @@ When using the `ENSJobPages` helper contract, complete these wiring steps:
 1. Deploy `ENSJobPages` with the ENS registry, NameWrapper (if any), PublicResolver, root node, and root name.
 2. Ensure `alpha.jobs.agi.eth` is owned by the helper (or wrapped and approved for it).
 3. Call `ENSJobPages.setJobManager(AGIJobManager)` so hooks are accepted.
-4. Call `AGIJobManager.setEnsJobPages(ENSJobPages)` to enable hook callbacks.
+4. Call `AGIJobManagerPrime.setEnsJobPages(ENSJobPages)` to enable hook callbacks.
 
 These steps keep ENS integration **opt-in** and ensure lifecycle hooks remain best-effort.
 
@@ -112,11 +112,7 @@ These steps keep ENS integration **opt-in** and ensure lifecycle hooks remain be
 - Revoke resolver authorizations after terminal settlement.
 
 ## ENS job NFT tokenURI (optional)
-When `AGIJobManager.setUseEnsJobTokenURI(true)` is enabled (and an ENS helper is configured), completion NFTs point to:
-```
-ens://job-<jobId>.alpha.jobs.agi.eth
-```
-When disabled (default), the tokenURI behavior is unchanged and continues to use the completion metadata pointer.
+The deployed Prime manager does not expose `setUseEnsJobTokenURI` or `useEnsJobTokenURI`. On the current Prime path, completion NFTs continue to use the completion metadata pointer/IPFS flow. `useEnsJobTokenURI` remains an ENSJobPages compatibility flag only and should be treated as quarantined documentation-wise until a separately sized manager release explicitly wires it end-to-end.
 
 ## Post‑terminal lock (optional)
 `AGIJobManager.lockJobENS(jobId, burnFuses)` can be called after a terminal state to re‑revoke resolver authorizations and optionally attempt fuse burning (best‑effort).
@@ -131,6 +127,6 @@ Fuse burning is optional and does **not** affect settlement or withdrawals if it
 
 ## 2026-03 authority model
 
-`previewJobEns*` getters now expose mutable projections, while `effectiveJobEns*` getters expose immutable per-job authority snapshots. Compatibility getters (`jobEnsName`, `jobEnsURI`, `jobEnsNode`) prefer authoritative values once established and only fall back to preview values before first issuance/import. Operational repairs are owner-only ENS-side actions: `repairAuthoritySnapshot`, `repairResolver`, `repairTexts`, `repairAuthorisations`, `replayCreate`, `replayAssign`, `replayCompletion`, `replayRevoke`, and `replayLock`. Chain state wins over docs, so mainnet runbooks must be regenerated from `scripts/ens/output/` before cutover.
+`previewJobEns*` getters expose mutable projections built from the current prefix/root only. `effectiveJobEns*` getters expose immutable per-job authority snapshots tied to the stored root version and historical label. Compatibility getters (`jobEnsName`, `jobEnsURI`, `jobEnsNode`) prefer authoritative values once established and only fall back to preview values before first issuance/import. Operational repairs are owner-only ENS-side actions: `repairAuthoritySnapshot`, `repairResolver`, `repairTexts`, `repairAuthorisations`, `replayCreate`, `replayAssign`, `replayCompletion`, `replayRevoke`, and `replayLock`. Chain state wins over docs, so mainnet runbooks must be regenerated from `scripts/ens/output/` before cutover.
 
 Production wording matters: the current recommended path is **keeper-assisted authoritative** ENS. Prime settlement stays authoritative and non-blocking even if ENS hydration is delayed or temporarily broken, while operators use `scripts/ens/audit-mainnet.ts`, `scripts/ens/inventory-job-pages.ts`, `scripts/ens/migrate-legacy-batch.ts`, and `scripts/ens/repair-job-page.ts` to classify and repair per-job ENS state.
diff --git a/hardhat/package-lock.json b/hardhat/package-lock.json
diff --git a/scripts/ens/audit-mainnet.ts b/scripts/ens/audit-mainnet.ts
@@ -1,10 +1,7 @@
 #!/usr/bin/env node
 const fs = require('node:fs');
 const path = require('node:path');
-const { createRequire } = require('node:module');
-
-const requireFromHere = createRequire(__filename);
-const { ethers } = requireFromHere('../../hardhat/node_modules/ethers');
+const { ethers } = require('./lib/ethers');
 const { CurlJsonRpcProvider } = require('./lib/json_rpc');
 
 const OUTPUT = path.resolve('scripts/ens/output/audit-mainnet.json');

diff --git a/scripts/ens/inventory-job-pages.ts b/scripts/ens/inventory-job-pages.ts
@@ -1,10 +1,7 @@
 #!/usr/bin/env node
 const fs = require('node:fs');
 const path = require('node:path');
-const { createRequire } = require('node:module');
-
-const requireFromHere = createRequire(__filename);
-const { ethers } = requireFromHere('../../hardhat/node_modules/ethers');
+const { ethers } = require('./lib/ethers');
 const { CurlJsonRpcProvider } = require('./lib/json_rpc');
 
 const OUTPUT = path.resolve('scripts/ens/output/inventory-job-pages.json');

diff --git a/scripts/ens/lib/ethers.js b/scripts/ens/lib/ethers.js
@@ -0,0 +1,43 @@
+const { createRequire } = require('node:module');
+const path = require('node:path');
+
+const requireFromHere = createRequire(__filename);
+
+function loadEthers() {
+  const candidates = [
+    path.resolve(__dirname, '../../../hardhat/node_modules/ethers'),
+    'ethers',
+  ];
+
+  for (const candidate of candidates) {
+    try {
+      const mod = requireFromHere(candidate);
+      return mod.ethers || mod;
+    } catch (error) {
+      if (candidate === candidates[candidates.length - 1]) throw error;
+    }
+  }
+}
+
+const raw = loadEthers();
+const isV6 = typeof raw.ZeroAddress === 'string';
+
+function compat() {
+  if (isV6) return raw;
+  const utils = raw.utils;
+  return {
+    ...raw,
+    ZeroAddress: raw.constants.AddressZero,
+    ZeroHash: raw.constants.HashZero,
+    Contract: raw.Contract,
+    JsonRpcProvider: raw.providers.JsonRpcProvider,
+    Interface: utils.Interface,
+    Wallet: raw.Wallet,
+    id: utils.id,
+    namehash: utils.namehash,
+    ensNormalize: (value) => value.trim().toLowerCase(),
+    solidityPackedKeccak256: (types, values) => utils.solidityKeccak256(types, values),
+  };
+}
+
+module.exports = { ethers: compat() };
diff --git a/scripts/ens/migrate-legacy-batch.ts b/scripts/ens/migrate-legacy-batch.ts
@@ -1,10 +1,7 @@
 #!/usr/bin/env node
 const fs = require('node:fs');
 const path = require('node:path');
-const { createRequire } = require('node:module');
-
-const requireFromHere = createRequire(__filename);
-const { ethers } = requireFromHere('../../hardhat/node_modules/ethers');
+const { ethers } = require('./lib/ethers');
 const { CurlJsonRpcProvider } = require('./lib/json_rpc');
 
 const RPC = (process.env.MAINNET_RPC_URL || 'https://ethereum-rpc.publicnode.com').trim();