@fased/fased 0.1.41 → 0.1.42

package/dist/infra/session-cost-usage.js

@@ -4,7 +4,7 @@ import { stripInboundMetadata } from "../auto-reply/reply/strip-inbound-meta.js"
 import { stripEnvelope, stripMessageIdHints } from "../shared/chat-envelope.js";
 import { normalizeUsage } from "../agents/usage.js";
 import { estimateUsageCost, resolveModelCostConfig } from "../utils/usage-format.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import readline from "node:readline";
 
@@ -145,7 +145,7 @@ const applyCostTotal = (totals, costTotal) => {
 	totals.totalCost += costTotal;
 };
 async function* readJsonlRecords(filePath) {
-	const fileStream = fs.createReadStream(filePath, { encoding: "utf-8" });
+	const fileStream = syncFs.createReadStream(filePath, { encoding: "utf-8" });
 	const rl = readline.createInterface({
 		input: fileStream,
 		crlfDelay: Infinity
@@ -225,10 +225,10 @@ async function loadCostUsageSummary(params) {
 	const dailyMap = new Map();
 	const totals = emptyTotals();
 	const sessionsDir = resolveSessionTranscriptsDirForAgent(params?.agentId);
-	const entries = await fs.promises.readdir(sessionsDir, { withFileTypes: true }).catch(() => []);
+	const entries = await syncFs.promises.readdir(sessionsDir, { withFileTypes: true }).catch(() => []);
 	const files = (await Promise.all(entries.filter((entry) => entry.isFile() && entry.name.endsWith(".jsonl")).map(async (entry) => {
 		const filePath = path.join(sessionsDir, entry.name);
-		const stats = await fs.promises.stat(filePath).catch(() => null);
+		const stats = await syncFs.promises.stat(filePath).catch(() => null);
 		if (!stats) {
 			return null;
 		}
@@ -279,14 +279,14 @@ async function loadCostUsageSummary(params) {
 */
 async function discoverAllSessions(params) {
 	const sessionsDir = resolveSessionTranscriptsDirForAgent(params?.agentId);
-	const entries = await fs.promises.readdir(sessionsDir, { withFileTypes: true }).catch(() => []);
+	const entries = await syncFs.promises.readdir(sessionsDir, { withFileTypes: true }).catch(() => []);
 	const discovered = [];
 	for (const entry of entries) {
 		if (!entry.isFile() || !entry.name.endsWith(".jsonl")) {
 			continue;
 		}
 		const filePath = path.join(sessionsDir, entry.name);
-		const stats = await fs.promises.stat(filePath).catch(() => null);
+		const stats = await syncFs.promises.stat(filePath).catch(() => null);
 		if (!stats) {
 			continue;
 		}
@@ -330,7 +330,7 @@ async function discoverAllSessions(params) {
 }
 async function loadSessionCostSummary(params) {
 	const sessionFile = params.sessionFile ?? (params.sessionId ? resolveSessionFilePath(params.sessionId, params.sessionEntry, { agentId: params.agentId }) : undefined);
-	if (!sessionFile || !fs.existsSync(sessionFile)) {
+	if (!sessionFile || !syncFs.existsSync(sessionFile)) {
 		return null;
 	}
 	const totals = emptyTotals();
@@ -547,7 +547,7 @@ async function loadSessionCostSummary(params) {
 }
 async function loadSessionUsageTimeSeries(params) {
 	const sessionFile = params.sessionFile ?? (params.sessionId ? resolveSessionFilePath(params.sessionId, params.sessionEntry, { agentId: params.agentId }) : undefined);
-	if (!sessionFile || !fs.existsSync(sessionFile)) {
+	if (!sessionFile || !syncFs.existsSync(sessionFile)) {
 		return null;
 	}
 	const points = [];
@@ -635,7 +635,7 @@ async function loadSessionUsageTimeSeries(params) {
 }
 async function loadSessionLogs(params) {
 	const sessionFile = params.sessionFile ?? (params.sessionId ? resolveSessionFilePath(params.sessionId, params.sessionEntry, { agentId: params.agentId }) : undefined);
-	if (!sessionFile || !fs.existsSync(sessionFile)) {
+	if (!sessionFile || !syncFs.existsSync(sessionFile)) {
 		return null;
 	}
 	const logs = [];

package/dist/infra/shell-env.js

@@ -1,6 +1,6 @@
 import { sanitizeHostExecEnv } from "./host-env-security.js";
 import { isTruthyEnvValue } from "./env.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { execFileSync } from "node:child_process";
@@ -34,7 +34,7 @@ function readEtcShells() {
 		return cachedEtcShells;
 	}
 	try {
-		const raw = fs.readFileSync("/etc/shells", "utf8");
+		const raw = syncFs.readFileSync("/etc/shells", "utf8");
 		const entries = raw.split(/\r?\n/).map((line) => line.trim()).filter((line) => line.length > 0 && !line.startsWith("#") && path.isAbsolute(line));
 		cachedEtcShells = new Set(entries);
 	} catch {

package/dist/infra/state-migrations.fs.js

@@ -1,27 +1,27 @@
-import fs from "node:fs";
+import syncFs from "node:fs";
 import JSON5 from "json5";
 
 //#region src/infra/state-migrations.fs.ts
 function safeReadDir(dir) {
 	try {
-		return fs.readdirSync(dir, { withFileTypes: true });
+		return syncFs.readdirSync(dir, { withFileTypes: true });
 	} catch {
 		return [];
 	}
 }
 function existsDir(dir) {
 	try {
-		return fs.existsSync(dir) && fs.statSync(dir).isDirectory();
+		return syncFs.existsSync(dir) && syncFs.statSync(dir).isDirectory();
 	} catch {
 		return false;
 	}
 }
 function ensureDir(dir) {
-	fs.mkdirSync(dir, { recursive: true });
+	syncFs.mkdirSync(dir, { recursive: true });
 }
 function fileExists(p) {
 	try {
-		return fs.existsSync(p) && fs.statSync(p).isFile();
+		return syncFs.existsSync(p) && syncFs.statSync(p).isFile();
 	} catch {
 		return false;
 	}
@@ -37,7 +37,7 @@ function isLegacyWhatsAppAuthFile(name) {
 }
 function readSessionStoreJson5(storePath) {
 	try {
-		const raw = fs.readFileSync(storePath, "utf-8");
+		const raw = syncFs.readFileSync(storePath, "utf-8");
 		const parsed = JSON5.parse(raw);
 		if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
 			return {

package/dist/infra/state-migrations.js

@@ -8,7 +8,7 @@ import { canonicalizeMainSessionAlias } from "../config/sessions/main-session.js
 import { saveSessionStore } from "../config/sessions/store.js";
 import "../config/sessions.js";
 import { ensureDir, existsDir, fileExists, isLegacyWhatsAppAuthFile, readSessionStoreJson5, safeReadDir } from "./state-migrations.fs.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 
@@ -241,7 +241,7 @@ function removeDirIfEmpty(dir) {
 		return;
 	}
 	try {
-		fs.rmdirSync(dir);
+		syncFs.rmdirSync(dir);
 	} catch {}
 }
 function resetAutoMigrateLegacyStateForTest() {
@@ -255,7 +255,7 @@ function resetAutoMigrateLegacyStateDirForTest() {
 }
 function resolveSymlinkTarget(linkPath) {
 	try {
-		const target = fs.readlinkSync(linkPath);
+		const target = syncFs.readlinkSync(linkPath);
 		return path.resolve(path.dirname(linkPath), target);
 	} catch {
 		return null;
@@ -266,7 +266,7 @@ function formatStateDirMigration(legacyDir, targetDir) {
 }
 function isDirPath(filePath) {
 	try {
-		return fs.statSync(filePath).isDirectory();
+		return syncFs.statSync(filePath).isDirectory();
 	} catch {
 		return false;
 	}
@@ -274,7 +274,7 @@ function isDirPath(filePath) {
 function isLegacyTreeSymlinkMirror(currentDir, realTargetDir) {
 	let entries;
 	try {
-		entries = fs.readdirSync(currentDir, { withFileTypes: true });
+		entries = syncFs.readdirSync(currentDir, { withFileTypes: true });
 	} catch {
 		return false;
 	}
@@ -285,7 +285,7 @@ function isLegacyTreeSymlinkMirror(currentDir, realTargetDir) {
 		const entryPath = path.join(currentDir, entry.name);
 		let stat;
 		try {
-			stat = fs.lstatSync(entryPath);
+			stat = syncFs.lstatSync(entryPath);
 		} catch {
 			return false;
 		}
@@ -296,7 +296,7 @@ function isLegacyTreeSymlinkMirror(currentDir, realTargetDir) {
 			}
 			let resolvedRealTarget;
 			try {
-				resolvedRealTarget = fs.realpathSync(resolvedTarget);
+				resolvedRealTarget = syncFs.realpathSync(resolvedTarget);
 			} catch {
 				return false;
 			}
@@ -318,7 +318,7 @@ function isLegacyTreeSymlinkMirror(currentDir, realTargetDir) {
 function isLegacyDirSymlinkMirror(legacyDir, targetDir) {
 	let realTargetDir;
 	try {
-		realTargetDir = fs.realpathSync(targetDir);
+		realTargetDir = syncFs.realpathSync(targetDir);
 	} catch {
 		return false;
 	}
@@ -348,7 +348,7 @@ async function autoMigrateLegacyStateDir(params) {
 	const legacyDirs = resolveLegacyStateDirs(homedir);
 	let legacyDir = legacyDirs.find((dir) => {
 		try {
-			return fs.existsSync(dir);
+			return syncFs.existsSync(dir);
 		} catch {
 			return false;
 		}
@@ -357,7 +357,7 @@ async function autoMigrateLegacyStateDir(params) {
 	const changes = [];
 	let legacyStat = null;
 	try {
-		legacyStat = legacyDir ? fs.lstatSync(legacyDir) : null;
+		legacyStat = legacyDir ? syncFs.lstatSync(legacyDir) : null;
 	} catch {
 		legacyStat = null;
 	}
@@ -401,7 +401,7 @@ async function autoMigrateLegacyStateDir(params) {
 		if (legacyDirs.some((dir) => path.resolve(dir) === path.resolve(legacyTarget))) {
 			legacyDir = legacyTarget;
 			try {
-				legacyStat = fs.lstatSync(legacyDir);
+				legacyStat = syncFs.lstatSync(legacyDir);
 			} catch {
 				legacyStat = null;
 			}
@@ -464,7 +464,7 @@ async function autoMigrateLegacyStateDir(params) {
 		if (!legacyDir) {
 			throw new Error("Legacy state dir not found");
 		}
-		fs.renameSync(legacyDir, targetDir);
+		syncFs.renameSync(legacyDir, targetDir);
 	} catch (err) {
 		warnings.push(`Failed to move legacy state dir (${legacyDir ?? "unknown"} → ${targetDir}): ${String(err)}`);
 		return {
@@ -478,7 +478,7 @@ async function autoMigrateLegacyStateDir(params) {
 		if (!legacyDir) {
 			throw new Error("Legacy state dir not found");
 		}
-		fs.symlinkSync(targetDir, legacyDir, "dir");
+		syncFs.symlinkSync(targetDir, legacyDir, "dir");
 		changes.push(formatStateDirMigration(legacyDir, targetDir));
 	} catch (err) {
 		try {
@@ -486,7 +486,7 @@ async function autoMigrateLegacyStateDir(params) {
 				if (!legacyDir) {
 					throw new Error("Legacy state dir not found", { cause: err });
 				}
-				fs.symlinkSync(targetDir, legacyDir, "junction");
+				syncFs.symlinkSync(targetDir, legacyDir, "junction");
 				changes.push(formatStateDirMigration(legacyDir, targetDir));
 			} else {
 				throw err;
@@ -496,7 +496,7 @@ async function autoMigrateLegacyStateDir(params) {
 				if (!legacyDir) {
 					throw new Error("Legacy state dir not found", { cause: fallbackErr });
 				}
-				fs.renameSync(targetDir, legacyDir);
+				syncFs.renameSync(targetDir, legacyDir);
 				warnings.push(`State dir migration rolled back (failed to link legacy path): ${String(fallbackErr)}`);
 				return {
 					migrated: false,
@@ -682,7 +682,7 @@ async function migrateLegacySessions(detected, now) {
 			continue;
 		}
 		try {
-			fs.renameSync(from, to);
+			syncFs.renameSync(from, to);
 			changes.push(`Moved ${entry.name} → agents/${detected.targetAgentId}/sessions`);
 		} catch (err) {
 			warnings.push(`Failed moving ${from}: ${String(err)}`);
@@ -691,7 +691,7 @@ async function migrateLegacySessions(detected, now) {
 	if (legacyParsed.ok) {
 		try {
 			if (fileExists(detected.sessions.legacyStorePath)) {
-				fs.rmSync(detected.sessions.legacyStorePath, { force: true });
+				syncFs.rmSync(detected.sessions.legacyStorePath, { force: true });
 			}
 		} catch {}
 	}
@@ -700,7 +700,7 @@ async function migrateLegacySessions(detected, now) {
 	if (legacyLeft.length > 0) {
 		const backupDir = `${detected.sessions.legacyDir}.legacy-${now()}`;
 		try {
-			fs.renameSync(detected.sessions.legacyDir, backupDir);
+			syncFs.renameSync(detected.sessions.legacyDir, backupDir);
 			warnings.push(`Left legacy sessions at ${backupDir}`);
 		} catch {}
 	}
@@ -723,11 +723,11 @@ async function migrateLegacyAgentDir(detected, now) {
 	for (const entry of entries) {
 		const from = path.join(detected.agentDir.legacyDir, entry.name);
 		const to = path.join(detected.agentDir.targetDir, entry.name);
-		if (fs.existsSync(to)) {
+		if (syncFs.existsSync(to)) {
 			continue;
 		}
 		try {
-			fs.renameSync(from, to);
+			syncFs.renameSync(from, to);
 			changes.push(`Moved agent file ${entry.name} → agents/${detected.targetAgentId}/agent`);
 		} catch (err) {
 			warnings.push(`Failed moving ${from}: ${String(err)}`);
@@ -737,7 +737,7 @@ async function migrateLegacyAgentDir(detected, now) {
 	if (!emptyDirOrMissing(detected.agentDir.legacyDir)) {
 		const backupDir = path.join(detected.stateDir, "agents", detected.targetAgentId, `agent.legacy-${now()}`);
 		try {
-			fs.renameSync(detected.agentDir.legacyDir, backupDir);
+			syncFs.renameSync(detected.agentDir.legacyDir, backupDir);
 			warnings.push(`Left legacy agent dir at ${backupDir}`);
 		} catch (err) {
 			warnings.push(`Failed relocating legacy agent dir: ${String(err)}`);
@@ -775,7 +775,7 @@ async function migrateLegacyWhatsAppAuth(detected) {
 			continue;
 		}
 		try {
-			fs.renameSync(from, to);
+			syncFs.renameSync(from, to);
 			changes.push(`Moved WhatsApp auth ${entry.name} → whatsapp/default`);
 		} catch (err) {
 			warnings.push(`Failed moving ${from}: ${String(err)}`);
@@ -799,7 +799,7 @@ async function migrateLegacyTelegramPairingAllowFrom(detected) {
 	const targetPath = detected.pairingAllowFrom.targetTelegramPath;
 	try {
 		ensureDir(path.dirname(targetPath));
-		fs.copyFileSync(legacyPath, targetPath);
+		syncFs.copyFileSync(legacyPath, targetPath);
 		changes.push(`Copied Telegram pairing allowFrom → ${targetPath}`);
 	} catch (err) {
 		warnings.push(`Failed migrating Telegram pairing allowFrom (${legacyPath}): ${String(err)}`);

package/dist/infra/tmp-fased-dir.js

@@ -1,18 +1,18 @@
-import fs from "node:fs";
+import syncFs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 
 //#region src/infra/tmp-fased-dir.ts
 const POSIX_FASED_TMP_DIR = "/tmp/fased";
-const TMP_DIR_ACCESS_MODE = fs.constants.W_OK | fs.constants.X_OK;
+const TMP_DIR_ACCESS_MODE = syncFs.constants.W_OK | syncFs.constants.X_OK;
 function isNodeErrorWithCode(err, code) {
 	return typeof err === "object" && err !== null && "code" in err && err.code === code;
 }
 function resolvePreferredFasedAgentTmpDir(options = {}) {
-	const accessSync = options.accessSync ?? fs.accessSync;
-	const chmodSync = options.chmodSync ?? fs.chmodSync;
-	const lstatSync = options.lstatSync ?? fs.lstatSync;
-	const mkdirSync = options.mkdirSync ?? fs.mkdirSync;
+	const accessSync = options.accessSync ?? syncFs.accessSync;
+	const chmodSync = options.chmodSync ?? syncFs.chmodSync;
+	const lstatSync = options.lstatSync ?? syncFs.lstatSync;
+	const mkdirSync = options.mkdirSync ?? syncFs.mkdirSync;
 	const warn = options.warn ?? ((message) => console.warn(message));
 	const getuid = options.getuid ?? (() => {
 		try {

package/dist/infra/update-runner.js

@@ -5,7 +5,7 @@ import { DEFAULT_GIT_CHANNEL, DEFAULT_PACKAGE_CHANNEL, DEV_BRANCH, channelToNpmT
 import { detectPackageManager as detectPackageManager$1 } from "./detect-package-manager.js";
 import { cleanupGlobalRenameDirs, detectGlobalInstallManagerForRoot, globalInstallArgs, globalInstallFallbackArgs, resolveHostedNpmInstallTarget, resolveNodeModulesRootForPackageRoot } from "./update-global.js";
 import { compareSemverStrings } from "./update-check.js";
-import { downloadHostedRuntimeArtifact } from "./hosted-runtime-artifact.js";
+import { downloadHostedRuntimeArtifact, downloadHostedRuntimeDescriptor, resolveHostedRuntimeAppArtifact, resolveHostedRuntimeDependencyArtifact } from "./hosted-runtime-artifact.js";
 import { readPackageName, readPackageVersion } from "./package-json.js";
 import os from "node:os";
 import path from "node:path";
@@ -13,6 +13,17 @@ import fs from "node:fs/promises";
 import * as tar from "tar";
 
 //#region src/infra/update-runner.ts
+async function readHostedRuntimeMetadata(root) {
+	try {
+		const parsed = JSON.parse(await fs.readFile(path.join(root, ".fased-hosted-runtime.json"), "utf8"));
+		if (parsed.schemaVersion !== 1 || !/^[a-f0-9]{64}$/.test(parsed.dependencyHash ?? "")) {
+			return null;
+		}
+		return parsed;
+	} catch {
+		return null;
+	}
+}
 const DEFAULT_TIMEOUT_MS = 20 * 6e4;
 const MAX_LOG_CHARS = 8e3;
 const PREFLIGHT_MAX_COMMITS = 10;
@@ -497,10 +508,232 @@ async function pathExists(pathname) {
 		return false;
 	}
 }
+async function runHostedLayeredArtifactUpdate(params) {
+	const packageParent = path.dirname(params.pkgRoot);
+	const tempRoot = await fs.mkdtemp(path.join(packageParent, ".fased-layered-update-"));
+	const steps = [];
+	let backupRoot = null;
+	let retainBackup = false;
+	const record = async (name, command, run) => {
+		const startedAt = Date.now();
+		const info = {
+			name,
+			command,
+			cwd: params.pkgRoot,
+			index: steps.length,
+			total: 6
+		};
+		params.progress?.onStepStart?.(info);
+		try {
+			const result = await run();
+			const step = {
+				name,
+				command,
+				cwd: params.pkgRoot,
+				durationMs: Date.now() - startedAt,
+				exitCode: 0
+			};
+			steps.push(step);
+			params.progress?.onStepComplete?.({
+				...info,
+				durationMs: step.durationMs,
+				exitCode: 0
+			});
+			return result;
+		} catch (error) {
+			const step = {
+				name,
+				command,
+				cwd: params.pkgRoot,
+				durationMs: Date.now() - startedAt,
+				exitCode: 1,
+				stderrTail: String(error)
+			};
+			steps.push(step);
+			params.progress?.onStepComplete?.({
+				...info,
+				durationMs: step.durationMs,
+				exitCode: 1,
+				stderrTail: step.stderrTail
+			});
+			throw error;
+		}
+	};
+	try {
+		const appDescriptor = resolveHostedRuntimeAppArtifact({
+			version: params.expectedVersion,
+			baseUrl: params.baseUrl
+		});
+		const appDownload = await record("hosted app download", `download hosted app v${params.expectedVersion}`, async () => await downloadHostedRuntimeDescriptor({
+			descriptor: appDescriptor,
+			destinationDir: tempRoot,
+			fetchImpl: params.fetchImpl
+		}));
+		if (appDownload.kind === "unavailable") {
+			return {
+				kind: "fallback",
+				steps,
+				reason: appDownload.reason
+			};
+		}
+		if (appDownload.kind === "error") {
+			return {
+				kind: "error",
+				steps,
+				reason: appDownload.reason,
+				afterVersion: await readPackageVersion(params.pkgRoot)
+			};
+		}
+		const extractRoot = path.join(tempRoot, "app");
+		await fs.mkdir(extractRoot, { recursive: true });
+		await record("hosted app extract", `extract ${appDownload.descriptor.assetName}`, async () => {
+			await tar.x({
+				file: appDownload.archivePath,
+				cwd: extractRoot
+			});
+		});
+		const artifactRoot = path.join(extractRoot, "package");
+		const metadata = await readHostedRuntimeMetadata(artifactRoot);
+		if (!metadata) {
+			return {
+				kind: "fallback",
+				steps,
+				reason: "hosted app dependency metadata missing"
+			};
+		}
+		const dependencyParent = path.join(packageParent, ".fased-dependencies");
+		const dependencyRoot = path.join(dependencyParent, metadata.dependencyHash);
+		const dependencyModules = path.join(dependencyRoot, "node_modules");
+		if (!await pathExists(dependencyModules)) {
+			const dependencyDescriptor = resolveHostedRuntimeDependencyArtifact({
+				version: params.expectedVersion,
+				dependencyHash: metadata.dependencyHash,
+				baseUrl: params.baseUrl
+			});
+			const dependencyDownload = await record("hosted dependency download", `download dependency layer ${metadata.dependencyHash.slice(0, 12)}`, async () => await downloadHostedRuntimeDescriptor({
+				descriptor: dependencyDescriptor,
+				destinationDir: tempRoot,
+				fetchImpl: params.fetchImpl
+			}));
+			if (dependencyDownload.kind !== "downloaded") {
+				return {
+					kind: dependencyDownload.kind === "error" ? "error" : "fallback",
+					steps,
+					reason: dependencyDownload.reason,
+					...dependencyDownload.kind === "error" ? { afterVersion: await readPackageVersion(params.pkgRoot) } : {}
+				};
+			}
+			await fs.mkdir(dependencyParent, { recursive: true });
+			const dependencyStaging = `${dependencyRoot}.staging-${process.pid}-${Date.now()}`;
+			await fs.mkdir(dependencyStaging, { recursive: true });
+			try {
+				await record("hosted dependency extract", `extract ${dependencyDownload.descriptor.assetName}`, async () => {
+					await tar.x({
+						file: dependencyDownload.archivePath,
+						cwd: dependencyStaging
+					});
+				});
+				if (!await pathExists(path.join(dependencyStaging, "node_modules"))) {
+					throw new Error("dependency layer did not contain node_modules");
+				}
+				await fs.rename(dependencyStaging, dependencyRoot).catch(async (error) => {
+					if (!await pathExists(dependencyModules)) {
+						throw error;
+					}
+				});
+			} finally {
+				await safeRemove(dependencyStaging);
+			}
+		} else {
+			steps.push({
+				name: "hosted dependency reuse",
+				command: `reuse ${metadata.dependencyHash}`,
+				cwd: params.pkgRoot,
+				durationMs: 0,
+				exitCode: 0
+			});
+		}
+		await fs.symlink(dependencyModules, path.join(artifactRoot, "node_modules"), "dir");
+		const artifactVersion = await readPackageVersion(artifactRoot);
+		const runtimeShapeReady = compareSemverStrings(artifactVersion, params.expectedVersion) === 0 && await pathExists(path.join(artifactRoot, "fased.mjs")) && await pathExists(path.join(artifactRoot, "node_modules"));
+		if (!runtimeShapeReady) {
+			return {
+				kind: "error",
+				steps,
+				reason: "layered hosted runtime is incomplete",
+				afterVersion: await readPackageVersion(params.pkgRoot)
+			};
+		}
+		const smokeHome = path.join(tempRoot, "smoke-home");
+		const smokeStateDir = path.join(smokeHome, ".fased");
+		await fs.mkdir(smokeStateDir, { recursive: true });
+		const smokeArgv = [
+			process.execPath,
+			path.join(artifactRoot, "fased.mjs"),
+			"plugins",
+			"doctor"
+		];
+		const smokeResult = await record("hosted layered verify", smokeArgv.join(" "), async () => await params.runCommand(smokeArgv, {
+			cwd: artifactRoot,
+			timeoutMs: params.timeoutMs,
+			env: {
+				...process.env,
+				HOME: smokeHome,
+				FASED_STATE_DIR: smokeStateDir,
+				FASED_CONFIG_PATH: path.join(smokeStateDir, "fased.json")
+			}
+		}));
+		if (smokeResult.code !== 0) {
+			return {
+				kind: "error",
+				steps,
+				reason: "layered hosted runtime verification failed",
+				afterVersion: await readPackageVersion(params.pkgRoot)
+			};
+		}
+		await record("hosted app swap", `replace ${params.pkgRoot}`, async () => {
+			const swapped = await swapPackageRoot({
+				pkgRoot: params.pkgRoot,
+				artifactRoot
+			});
+			backupRoot = swapped.backupRoot;
+		});
+		if (!backupRoot) {
+			throw new Error("hosted app swap did not retain a rollback runtime");
+		}
+		retainBackup = true;
+		return {
+			kind: "updated",
+			steps,
+			afterVersion: await readPackageVersion(params.pkgRoot),
+			transaction: {
+				kind: "package-root-swap",
+				packageRoot: params.pkgRoot,
+				backupRoot
+			}
+		};
+	} catch (error) {
+		return {
+			kind: "error",
+			steps,
+			reason: `layered hosted update failed: ${String(error)}`,
+			afterVersion: await readPackageVersion(params.pkgRoot)
+		};
+	} finally {
+		if (backupRoot && !retainBackup) {
+			await safeRemove(backupRoot);
+		}
+		await safeRemove(tempRoot);
+	}
+}
 async function runHostedReleaseArtifactUpdate(params) {
+	const layeredResult = await runHostedLayeredArtifactUpdate(params);
+	if (layeredResult.kind !== "fallback") {
+		return layeredResult;
+	}
 	const packageParent = path.dirname(params.pkgRoot);
 	const tempRoot = await fs.mkdtemp(path.join(packageParent, ".fased-release-update-"));
-	const steps = [];
+	const steps = [...layeredResult.steps];
 	let backupRoot = null;
 	let retainBackup = false;
 	let progressIndex = 0;

package/dist/infra/widearea-dns.js

@@ -1,5 +1,5 @@
 import { CONFIG_DIR, ensureDir } from "../utils.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 
@@ -126,7 +126,7 @@ async function writeWideAreaGatewayZone(opts) {
 	await ensureDir(path.dirname(zonePath));
 	const existing = (() => {
 		try {
-			return fs.readFileSync(zonePath, "utf-8");
+			return syncFs.readFileSync(zonePath, "utf-8");
 		} catch {
 			return null;
 		}
@@ -149,7 +149,7 @@ async function writeWideAreaGatewayZone(opts) {
 		...opts,
 		serial
 	});
-	fs.writeFileSync(zonePath, next, "utf-8");
+	syncFs.writeFileSync(zonePath, next, "utf-8");
 	return {
 		zonePath,
 		changed: true

package/dist/infra/wsl.js

@@ -1,5 +1,5 @@
 import { readFileSync } from "node:fs";
-import fs$1 from "node:fs/promises";
+import fs from "node:fs/promises";
 
 //#region src/infra/wsl.ts
 let wslCached = null;
@@ -50,7 +50,7 @@ async function isWSL() {
 		return wslCached;
 	}
 	try {
-		const release = await fs$1.readFile("/proc/sys/kernel/osrelease", "utf8");
+		const release = await fs.readFile("/proc/sys/kernel/osrelease", "utf8");
 		wslCached = release.toLowerCase().includes("microsoft") || release.toLowerCase().includes("wsl");
 	} catch {
 		wslCached = false;

package/dist/light-plugin-doctor.js

@@ -0,0 +1 @@
+import e from"node:process";import{createHash as t}from"node:crypto";import n from"node:fs";import r from"node:os";import i from"node:path";function a(e){try{return n.statSync(e).mtimeMs}catch{return null}}function o(e){return Array.isArray(e)?e.map(o):e&&typeof e==`object`?Object.fromEntries(Object.entries(e).toSorted(([e],[t])=>e.localeCompare(t)).map(([e,t])=>[e,o(t)])):e}function s(e){try{let r=JSON.parse(n.readFileSync(e,`utf8`));return t(`sha256`).update(JSON.stringify(o({plugins:r.plugins}))).digest(`hex`)}catch{return t(`sha256`).update(`missing-config`).digest(`hex`)}}function c(e=process.env,t=r.homedir()){let n=e.FASED_STATE_DIR?.trim()||i.join(t,`.fased`);return i.join(n,`runtime`,`plugin-status.json`)}function l(e=process.env,t=r.homedir()){return e.FASED_CONFIG_PATH?.trim()||i.join(e.FASED_STATE_DIR?.trim()||i.join(t,`.fased`),`fased.json`)}function u(e){if(!e)return null;try{let t=n.realpathSync(e),r=i.join(i.dirname(t),`package.json`),a=JSON.parse(n.readFileSync(r,`utf8`));return typeof a.version==`string`?a.version:null}catch{return null}}function d(e){let t=e.cachePath??c(),r=e.configPath??l();try{let i=JSON.parse(n.readFileSync(t,`utf8`));if(i.schemaVersion!==2||i.packageVersion!==e.packageVersion||i.configPath!==r||i.configFingerprint!==s(r)||!Array.isArray(i.plugins)||!Array.isArray(i.diagnostics))return null;for(let e of i.plugins)if(e.sourceMtimeMs!==a(e.source))return null;return i}catch{return null}}async function f(t=e.argv){if(t[2]!==`plugins`||t[3]!==`doctor`)return!1;let n=u(t[1]),r=n?d({packageVersion:n}):null;if(!r)return!1;let i=r.plugins.filter(e=>e.status===`error`),a=r.diagnostics.filter(e=>e.level===`error`);if(t.includes(`--json`))console.log(JSON.stringify({ok:i.length===0&&a.length===0,errors:i,diagnostics:a},null,2));else if(i.length===0&&a.length===0)console.log(`No plugin issues detected.`);else{for(let e of i)console.error(`- ${e.id}: ${e.error??`failed to load`} (${e.source})`);for(let e of a)console.error(`- ${e.pluginId?`${e.pluginId}: `:``}${e.message}`);e.exitCode=1}return!0}export{f as run};

package/dist/light-plugin-info.js

@@ -0,0 +1,2 @@
+import e from"node:process";import{createHash as t}from"node:crypto";import n from"node:fs";import r from"node:os";import i from"node:path";function a(e){try{return n.statSync(e).mtimeMs}catch{return null}}function o(e){return Array.isArray(e)?e.map(o):e&&typeof e==`object`?Object.fromEntries(Object.entries(e).toSorted(([e],[t])=>e.localeCompare(t)).map(([e,t])=>[e,o(t)])):e}function s(e){try{let r=JSON.parse(n.readFileSync(e,`utf8`));return t(`sha256`).update(JSON.stringify(o({plugins:r.plugins}))).digest(`hex`)}catch{return t(`sha256`).update(`missing-config`).digest(`hex`)}}function c(e=process.env,t=r.homedir()){let n=e.FASED_STATE_DIR?.trim()||i.join(t,`.fased`);return i.join(n,`runtime`,`plugin-status.json`)}function l(e=process.env,t=r.homedir()){return e.FASED_CONFIG_PATH?.trim()||i.join(e.FASED_STATE_DIR?.trim()||i.join(t,`.fased`),`fased.json`)}function u(e){if(!e)return null;try{let t=n.realpathSync(e),r=i.join(i.dirname(t),`package.json`),a=JSON.parse(n.readFileSync(r,`utf8`));return typeof a.version==`string`?a.version:null}catch{return null}}function d(e){let t=e.cachePath??c(),r=e.configPath??l();try{let i=JSON.parse(n.readFileSync(t,`utf8`));if(i.schemaVersion!==2||i.packageVersion!==e.packageVersion||i.configPath!==r||i.configFingerprint!==s(r)||!Array.isArray(i.plugins)||!Array.isArray(i.diagnostics))return null;for(let e of i.plugins)if(e.sourceMtimeMs!==a(e.source))return null;return i}catch{return null}}function f(e){for(let t of e.slice(4))if(t&&!t.startsWith(`-`))return t;return null}async function p(t=e.argv){let n=t[2]===`plugins`&&t[3]===`info`?f(t):null,r=u(t[1]),i=r?d({packageVersion:r}):null,a=n?i?.plugins.find(e=>e.id===n||e.name===n):null;if(!a)return!1;if(t.includes(`--json`))return console.log(JSON.stringify(a,null,2)),!0;let o=[a.name||a.id];return a.name&&a.name!==a.id&&o.push(`id: ${a.id}`),a.description&&o.push(a.description),o.push(``,`Status: ${a.status}`,`Source: ${a.source}`,`Origin: ${a.origin}`),a.version&&o.push(`Version: ${a.version}`),console.log(o.join(`
+`)),!0}export{p as run};

package/dist/light-update-precheck.js

@@ -0,0 +1 @@
+import e from"node:fs";import t from"node:process";import n from"node:os";import r from"node:path";function i(e=process.env,t=n.homedir()){return e.FASED_CONFIG_PATH?.trim()||r.join(e.FASED_STATE_DIR?.trim()||r.join(t,`.fased`),`fased.json`)}function a(t){if(!t)return null;try{let n=e.realpathSync(t),i=r.join(r.dirname(n),`package.json`),a=JSON.parse(e.readFileSync(i,`utf8`));return typeof a.version==`string`?a.version:null}catch{return null}}function o(e){let t=/^(\d+)\.(\d+)\.(\d+)(?:[-+].*)?$/.exec(e.trim());return t?[Number.parseInt(t[1],10),Number.parseInt(t[2],10),Number.parseInt(t[3],10)]:null}function s(e,t){let n=o(e),r=o(t);if(!n||!r)return e===t;for(let e=0;e<n.length;e+=1)if(n[e]!==r[e])return n[e]>r[e];return!0}function c(t){try{let n=JSON.parse(e.readFileSync(t,`utf8`)).update?.channel;return n==null||n===`stable`}catch{return!0}}async function l(e){let n=e.currentVersion??a(e.argv1),r=e.stableChannel??c(i());if(!n||!r)return null;let o=(t.env.npm_config_registry?.trim()||`https://registry.npmjs.org`).replace(/\/$/,``);try{let t=await(e.fetchImpl??fetch)(`${o}/@fased%2ffased/latest`,{signal:AbortSignal.timeout(e.timeoutMs??1800),headers:{accept:`application/json`}});if(!t.ok)return null;let r=await t.json(),i=typeof r.version==`string`?r.version:null;return i&&s(n,i)?{current:n,target:i}:null}catch{return null}}async function u(e=t.argv){if(e[2]!==`update`||e.slice(3).some(e=>e!==`--json`)||e.filter(e=>e===`--json`).length>1)return!1;let n=await l({argv1:e[1]});return n?(e.includes(`--json`)?console.log(JSON.stringify({ok:!0,alreadyCurrent:!0,...n})):console.log(`Already current: ${n.current}`),!0):!1}export{l as resolveAlreadyCurrent,u as run};