@fased/fased 0.1.45 → 0.1.47

package/dist/gateway/call.js

@@ -5,10 +5,10 @@ import { CLI_DEFAULT_OPERATOR_SCOPES, resolveLeastPrivilegeOperatorScopesForMeth
 import { GATEWAY_CLIENT_MODES, GATEWAY_CLIENT_NAMES } from "./protocol/client-info.js";
 import "../utils/message-channel.js";
 import { isSecureWebSocketUrl } from "./net.js";
-import { PROTOCOL_VERSION } from "./protocol/schema/protocol-schemas.js";
-import "./protocol/index.js";
 import { loadOrCreateDeviceIdentity } from "../infra/device-identity.js";
 import { loadGatewayTlsRuntime } from "../infra/tls/gateway.js";
+import { PROTOCOL_VERSION } from "./protocol/schema/protocol-schemas.js";
+import "./protocol/index.js";
 import { GatewayClient } from "./client.js";
 import { resolveGatewayCredentialsFromConfig } from "./credentials.js";
 import { randomUUID } from "node:crypto";

package/dist/gateway/client.js

@@ -2,14 +2,14 @@ import { logDebug, logError } from "../logger.js";
 import { GATEWAY_CLIENT_MODES, GATEWAY_CLIENT_NAMES } from "./protocol/client-info.js";
 import "../utils/message-channel.js";
 import { isSecureWebSocketUrl } from "./net.js";
-import { PROTOCOL_VERSION } from "./protocol/schema/protocol-schemas.js";
-import { validateEventFrame, validateRequestFrame, validateResponseFrame } from "./protocol/index.js";
+import { clearDevicePairing } from "../infra/device-pairing.js";
 import { loadOrCreateDeviceIdentity, publicKeyRawBase64UrlFromPem, signDevicePayload } from "../infra/device-identity.js";
 import { normalizeFingerprint } from "../infra/tls/fingerprint.js";
 import { clearDeviceAuthToken, loadDeviceAuthToken, storeDeviceAuthToken } from "../infra/device-auth-store.js";
-import { clearDevicePairing } from "../infra/device-pairing.js";
 import { rawDataToString } from "../infra/ws.js";
 import { buildDeviceAuthPayloadV3 } from "./device-auth.js";
+import { PROTOCOL_VERSION } from "./protocol/schema/protocol-schemas.js";
+import { validateEventFrame, validateRequestFrame, validateResponseFrame } from "./protocol/index.js";
 import { randomUUID } from "node:crypto";
 import { WebSocket as WebSocket$1 } from "ws";
 

package/dist/gateway/control-ui-boot-check.js

@@ -1,8 +1,8 @@
 import { openBoundaryFileSync } from "../infra/boundary-file-read.js";
 import { isWithinDir } from "../infra/path-safety.js";
-import { resolveControlUiRootSync } from "../infra/control-ui-assets.js";
 import { normalizeControlUiBasePath } from "./control-ui-shared.js";
-import fs from "node:fs";
+import { resolveControlUiRootSync } from "../infra/control-ui-assets.js";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/gateway/control-ui-boot-check.ts
@@ -189,7 +189,7 @@ function readControlUiBootAsset(params) {
 		};
 	}
 	try {
-		const body = fs.readFileSync(safeFile.fd);
+		const body = syncFs.readFileSync(safeFile.fd);
 		return {
 			check: {
 				url: params.url,
@@ -200,7 +200,7 @@ function readControlUiBootAsset(params) {
 			text: body.toString("utf8")
 		};
 	} finally {
-		fs.closeSync(safeFile.fd);
+		syncFs.closeSync(safeFile.fd);
 	}
 }
 function resolveBootCheckRoot(rootState) {
@@ -231,7 +231,7 @@ function resolveBootCheckRoot(rootState) {
 		return {
 			ok: true,
 			root,
-			rootReal: fs.realpathSync(root)
+			rootReal: syncFs.realpathSync(root)
 		};
 	} catch (error) {
 		if (isExpectedSafePathError(error)) {
@@ -268,9 +268,9 @@ function resolveControlUiBootCheck(params) {
 	}
 	let html = "";
 	try {
-		html = fs.readFileSync(safeIndex.fd, "utf8");
+		html = syncFs.readFileSync(safeIndex.fd, "utf8");
 	} finally {
-		fs.closeSync(safeIndex.fd);
+		syncFs.closeSync(safeIndex.fd);
 	}
 	const entryJsUrl = extractHtmlScriptAssetUrls(html, indexUrl)[0] ?? null;
 	const entry = entryJsUrl == null ? {

package/dist/gateway/control-ui-login.js

@@ -1,7 +1,7 @@
 import { resolveStateDir } from "../config/paths.js";
 import { safeEqualSecret } from "../security/secret-equal.js";
 import { isTrustedProxyAddress } from "./net.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import { createHash, createHmac, randomBytes } from "node:crypto";
 
@@ -512,10 +512,10 @@ var ControlUiLoginService = class {
 	}
 	readState() {
 		try {
-			if (!fs.existsSync(this.statePath)) {
+			if (!syncFs.existsSync(this.statePath)) {
 				return buildEmptyState();
 			}
-			const raw = fs.readFileSync(this.statePath, "utf8");
+			const raw = syncFs.readFileSync(this.statePath, "utf8");
 			return normalizeState(safeJsonParse(raw));
 		} catch {
 			return buildEmptyState();
@@ -525,13 +525,13 @@ var ControlUiLoginService = class {
 		if (!this.state) {
 			return;
 		}
-		fs.mkdirSync(path.dirname(this.statePath), { recursive: true });
+		syncFs.mkdirSync(path.dirname(this.statePath), { recursive: true });
 		const tmpPath = `${this.statePath}.${process.pid}.${Date.now()}.tmp`;
 		const body = `${JSON.stringify(this.state, null, 2)}\n`;
-		fs.writeFileSync(tmpPath, body, { mode: 384 });
-		fs.renameSync(tmpPath, this.statePath);
+		syncFs.writeFileSync(tmpPath, body, { mode: 384 });
+		syncFs.renameSync(tmpPath, this.statePath);
 		try {
-			fs.chmodSync(this.statePath, 384);
+			syncFs.chmodSync(this.statePath, 384);
 		} catch {}
 	}
 };

package/dist/gateway/control-ui.js

@@ -2,12 +2,12 @@ import { openVerifiedFileSync } from "../infra/safe-open-sync.js";
 import { openBoundaryFileSync } from "../infra/boundary-file-read.js";
 import { isWithinDir } from "../infra/path-safety.js";
 import { AVATAR_MAX_BYTES } from "../shared/avatar-policy.js";
-import { resolveControlUiRootSync } from "../infra/control-ui-assets.js";
 import { CONTROL_UI_AVATAR_PREFIX, buildControlUiAvatarUrl, normalizeControlUiBasePath, resolveAssistantAvatarUrl } from "./control-ui-shared.js";
+import { resolveControlUiRootSync } from "../infra/control-ui-assets.js";
 import { DEFAULT_ASSISTANT_IDENTITY, resolveAssistantIdentity } from "./assistant-identity.js";
 import { CONTROL_UI_BOOTSTRAP_CONFIG_PATH } from "./control-ui-contract.js";
 import { buildControlUiCspHeader } from "./control-ui-csp.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/gateway/control-ui.ts
@@ -151,10 +151,10 @@ function handleControlUiAvatarRequest(req, res, opts) {
 			res.end();
 			return true;
 		}
-		serveResolvedFile(res, safeAvatar.path, fs.readFileSync(safeAvatar.fd));
+		serveResolvedFile(res, safeAvatar.path, syncFs.readFileSync(safeAvatar.fd));
 		return true;
 	} finally {
-		fs.closeSync(safeAvatar.fd);
+		syncFs.closeSync(safeAvatar.fd);
 	}
 }
 function respondNotFound(res) {
@@ -316,7 +316,7 @@ function handleControlUiHttpRequest(req, res, opts) {
 	}
 	const rootReal = (() => {
 		try {
-			return fs.realpathSync(root);
+			return syncFs.realpathSync(root);
 		} catch (error) {
 			if (isExpectedSafePathError(error)) {
 				return null;
@@ -362,13 +362,13 @@ function handleControlUiHttpRequest(req, res, opts) {
 				return true;
 			}
 			if (path.basename(safeFile.path) === "index.html") {
-				serveResolvedIndexHtml(res, fs.readFileSync(safeFile.fd, "utf8"));
+				serveResolvedIndexHtml(res, syncFs.readFileSync(safeFile.fd, "utf8"));
 				return true;
 			}
-			serveResolvedFile(res, safeFile.path, fs.readFileSync(safeFile.fd));
+			serveResolvedFile(res, safeFile.path, syncFs.readFileSync(safeFile.fd));
 			return true;
 		} finally {
-			fs.closeSync(safeFile.fd);
+			syncFs.closeSync(safeFile.fd);
 		}
 	}
 	if (STATIC_ASSET_EXTENSIONS.has(path.extname(fileRel).toLowerCase())) {
@@ -385,10 +385,10 @@ function handleControlUiHttpRequest(req, res, opts) {
 				res.end();
 				return true;
 			}
-			serveResolvedIndexHtml(res, fs.readFileSync(safeIndex.fd, "utf8"));
+			serveResolvedIndexHtml(res, syncFs.readFileSync(safeIndex.fd, "utf8"));
 			return true;
 		} finally {
-			fs.closeSync(safeIndex.fd);
+			syncFs.closeSync(safeIndex.fd);
 		}
 	}
 	respondNotFound(res);

package/dist/gateway/federation-http.js

@@ -1,9 +1,9 @@
 import { loadConfig, readConfigFileSnapshotForWrite, writeConfigFile } from "../config/io.js";
 import "../config/config.js";
-import { buildAttestation } from "../federation/attestation.js";
-import { loadFederationBearerToken, persistFederationAccessToken } from "../federation/access-token.js";
-import { resolveAgentPublicOrigin, resolveFederationBaseUrl, resolveFederationHandle } from "../federation/runtime.js";
 import { deleteManualFederationOfferConfig, deleteMarketplaceOrderConfig, deleteMarketplaceRequestConfig, listLocalFederationOffers, listLocalMarketplaceOrders, listLocalMarketplaceRequests, resolveOfferPaymentDefaults, upsertManualFederationOfferConfig, upsertMarketplaceOrderConfig, upsertMarketplaceRequestConfig, validateMarketplaceDeliveryTargetConfig } from "../federation/offers.js";
+import { resolveAgentPublicOrigin, resolveFederationBaseUrl, resolveFederationHandle } from "../federation/runtime.js";
+import { loadFederationBearerToken, persistFederationAccessToken } from "../federation/access-token.js";
+import { buildAttestation } from "../federation/attestation.js";
 import { runMarketplaceCapabilityAdapter } from "../federation/marketplace-capability-adapter.js";
 import { deliverMarketplaceContentSummarizeResult } from "../federation/marketplace-delivery.js";
 import { payMarketplaceOrderDirect } from "../federation/marketplace-direct-payment.js";

package/dist/gateway/federation-marketplace.js

@@ -2,8 +2,8 @@ import { loadConfig } from "../config/io.js";
 import "../config/config.js";
 import { resolveWalletRuntimeConfig } from "../wallet/wallet-runtime-config.js";
 import { readWalletProviderRegistry, resolveWalletUserRole } from "../wallet/wallet-provider-registry.js";
-import { loadPersistedFederationToken } from "../federation/access-token.js";
 import { resolveFederationBaseUrl } from "../federation/runtime.js";
+import { loadPersistedFederationToken } from "../federation/access-token.js";
 import { publishFederationSettlementEvidence } from "../federation/settlement-evidence.js";
 import { createOrExecuteWalletSend } from "../wallet/wallet-send-approvals.js";
 import { randomUUID } from "node:crypto";

package/dist/gateway/hooks-mapping.js

@@ -1,7 +1,7 @@
 import { CONFIG_PATH } from "../config/paths.js";
 import "../config/config.js";
 import { importFileModule, resolveFunctionModuleExport } from "../hooks/module-loader.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/gateway/hooks-mapping.ts
@@ -301,8 +301,8 @@ function escapesBase(baseDir, candidate) {
 }
 function safeRealpathSync(candidate) {
 	try {
-		const nativeRealpath = fs.realpathSync.native;
-		return nativeRealpath ? nativeRealpath(candidate) : fs.realpathSync(candidate);
+		const nativeRealpath = syncFs.realpathSync.native;
+		return nativeRealpath ? nativeRealpath(candidate) : syncFs.realpathSync(candidate);
 	} catch {
 		return null;
 	}
@@ -310,7 +310,7 @@ function safeRealpathSync(candidate) {
 function resolveExistingAncestor(candidate) {
 	let current = path.resolve(candidate);
 	while (true) {
-		if (fs.existsSync(current)) {
+		if (syncFs.existsSync(current)) {
 			return current;
 		}
 		const parent = path.dirname(current);

package/dist/gateway/hooks.js

@@ -3,8 +3,8 @@ import { normalizeAgentId } from "../routing/session-key.js";
 import { listAgentIds, resolveDefaultAgentId } from "../agents/agent-scope.js";
 import { listChannelPlugins } from "../channels/plugins/index.js";
 import { normalizeMessageChannel } from "../utils/message-channel.js";
-import { resolveHookMappings } from "./hooks-mapping.js";
 import { readJsonBodyWithLimit, requestBodyErrorToText } from "../infra/http-body.js";
+import { resolveHookMappings } from "./hooks-mapping.js";
 import { randomUUID } from "node:crypto";
 
 //#region src/gateway/hooks.ts

package/dist/gateway/openai-http.js

@@ -1,9 +1,9 @@
 import { defaultRuntime } from "../runtime.js";
 import { logWarn } from "../logger.js";
+import { emitAgentEvent, onAgentEvent } from "../infra/agent-events.js";
 import { sendJson, setSseHeaders, writeDone } from "./http-common.js";
 import { resolveAgentIdForRequest, resolveSessionKey } from "./http-utils.js";
 import { createDefaultDeps } from "../cli/deps.js";
-import { emitAgentEvent, onAgentEvent } from "../infra/agent-events.js";
 import { agentCommand } from "../commands/agent.js";
 import { resolveAssistantStreamDeltaText } from "./agent-event-assistant-text.js";
 import { buildAgentMessageFromConversationEntries } from "./agent-prompt.js";

package/dist/gateway/openresponses-http.js

@@ -1,9 +1,9 @@
 import { defaultRuntime } from "../runtime.js";
 import { logWarn } from "../logger.js";
+import { emitAgentEvent, onAgentEvent } from "../infra/agent-events.js";
 import { sendJson, setSseHeaders, writeDone } from "./http-common.js";
 import { resolveAgentIdForRequest, resolveSessionKey } from "./http-utils.js";
 import { createDefaultDeps } from "../cli/deps.js";
-import { emitAgentEvent, onAgentEvent } from "../infra/agent-events.js";
 import { agentCommand } from "../commands/agent.js";
 import { resolveAssistantStreamDeltaText } from "./agent-event-assistant-text.js";
 import { handleGatewayPostJsonEndpoint } from "./http-endpoint-helpers.js";

package/dist/gateway/server/health-state.js

@@ -5,8 +5,8 @@ import { loadConfig } from "../../config/io.js";
 import "../../config/config.js";
 import { resolveMainSessionKey } from "../../config/sessions/main-session.js";
 import "../../config/sessions.js";
-import { resolveGatewayAuth } from "../auth.js";
 import { getHealthSnapshot } from "../../commands/health.js";
+import { resolveGatewayAuth } from "../auth.js";
 import { getUpdateAvailable } from "../../infra/update-startup.js";
 import { listSystemPresence } from "../../infra/system-presence.js";
 

package/dist/gateway/server/hooks.js

@@ -2,10 +2,10 @@ import { loadConfig } from "../../config/io.js";
 import "../../config/config.js";
 import { resolveMainSessionKeyFromConfig } from "../../config/sessions/main-session.js";
 import "../../config/sessions.js";
-import { normalizeHookDispatchSessionKey } from "../hooks.js";
-import { requestHeartbeatNow } from "../../infra/heartbeat-wake.js";
 import { enqueueSystemEvent } from "../../infra/system-events.js";
+import { requestHeartbeatNow } from "../../infra/heartbeat-wake.js";
 import { completeTaskRunByRunId, createRunningTaskRun, failTaskRunByRunId, recordTaskRunAccountingByRunId, recordTaskRunProgressByRunId, setDetachedTaskDeliveryStatusByRunId } from "../../tasks/task-executor.js";
+import { normalizeHookDispatchSessionKey } from "../hooks.js";
 import { createHooksRequestHandler } from "../server-http.js";
 import { runCronIsolatedAgentTurn } from "../../cron/isolated-agent/run.js";
 import "../../cron/isolated-agent.js";

package/dist/gateway/server/ws-connection/message-handler.js

@@ -4,21 +4,21 @@ import "../../../config/config.js";
 import { GATEWAY_CLIENT_IDS } from "../../protocol/client-info.js";
 import { isGatewayCliClient, isWebchatClient } from "../../../utils/message-channel.js";
 import { isLocalishHost, isLoopbackAddress, isTrustedProxyAddress, resolveClientIp } from "../../net.js";
-import { ErrorCodes, errorShape } from "../../protocol/schema/error-codes.js";
-import { PROTOCOL_VERSION } from "../../protocol/schema/protocol-schemas.js";
-import { formatValidationErrors, validateConnectParams, validateRequestFrame } from "../../protocol/index.js";
-import { deriveDeviceIdFromPublicKey, normalizeDevicePublicKeyBase64Url, verifyDeviceSignature } from "../../../infra/device-identity.js";
 import { roleScopesAllow } from "../../../shared/operator-scope-compat.js";
 import { approveDevicePairing, ensureDeviceToken, getPairedDevice, requestDevicePairing, updatePairedDeviceMetadata, verifyDeviceToken } from "../../../infra/device-pairing.js";
+import { deriveDeviceIdFromPublicKey, normalizeDevicePublicKeyBase64Url, verifyDeviceSignature } from "../../../infra/device-identity.js";
 import { rawDataToString } from "../../../infra/ws.js";
 import { buildDeviceAuthPayload, buildDeviceAuthPayloadV3, normalizeDeviceMetadataForAuth } from "../../device-auth.js";
+import { ErrorCodes, errorShape } from "../../protocol/schema/error-codes.js";
+import { PROTOCOL_VERSION } from "../../protocol/schema/protocol-schemas.js";
+import { formatValidationErrors, validateConnectParams, validateRequestFrame } from "../../protocol/index.js";
 import { CANVAS_CAPABILITY_TTL_MS, buildCanvasScopedHostUrl, mintCanvasCapabilityToken } from "../../canvas-capability.js";
+import { resolveNodeCommandAllowlist } from "../../node-command-policy.js";
 import { updatePairedNodeMetadata } from "../../../infra/node-pairing.js";
 import { recordRemoteNodeInfo, refreshRemoteNodeBins } from "../../../infra/skills-remote.js";
+import { formatForLog, logWs } from "../../ws-log.js";
 import { isLocalDirectRequest } from "../../auth.js";
 import { truncateCloseReason } from "../close-reason.js";
-import { resolveNodeCommandAllowlist } from "../../node-command-policy.js";
-import { formatForLog, logWs } from "../../ws-log.js";
 import { MAX_BUFFERED_BYTES, MAX_PAYLOAD_BYTES, TICK_INTERVAL_MS } from "../../server-constants.js";
 import { loadVoiceWakeConfig } from "../../../infra/voicewake.js";
 import { formatError } from "../../server-utils.js";

package/dist/gateway/server-channels.js

@@ -3,8 +3,8 @@ import "../routing/session-key.js";
 import { formatErrorMessage } from "../infra/errors.js";
 import { runTasksWithConcurrency } from "../utils/run-with-concurrency.js";
 import { getChannelPlugin, listChannelPlugins } from "../channels/plugins/index.js";
-import { resetDirectoryCache } from "../infra/outbound/target-resolver.js";
 import { computeBackoff, sleepWithAbort } from "../infra/backoff.js";
+import { resetDirectoryCache } from "../infra/outbound/target-resolver.js";
 import { resolveChannelDefaultAccountId } from "../channels/plugins/helpers.js";
 
 //#region src/gateway/server-channels.ts

package/dist/gateway/server-cron.js

@@ -12,13 +12,13 @@ import { resolveStorePath } from "../config/sessions/paths.js";
 import "../config/sessions.js";
 import { SsrFBlockedError } from "../infra/net/ssrf.js";
 import { fetchWithSsrFGuard } from "../infra/net/fetch-guard.js";
-import { requestHeartbeatNow } from "../infra/heartbeat-wake.js";
-import { enqueueSystemEvent } from "../infra/system-events.js";
 import { normalizeHttpWebhookUrl } from "../cron/webhook-url.js";
+import { enqueueSystemEvent } from "../infra/system-events.js";
+import { requestHeartbeatNow } from "../infra/heartbeat-wake.js";
+import { runHeartbeatOnce } from "../infra/heartbeat-runner.js";
 import { appendCronRunLog, resolveCronRunLogPath, resolveCronRunLogPruneOptions } from "../cron/run-log.js";
 import { resolveCronStorePath } from "../cron/store.js";
 import { resolveTaskModelRole, taskExplicitModelRef } from "../cron/task-model-roles.js";
-import { runHeartbeatOnce } from "../infra/heartbeat-runner.js";
 import { missingBraveSearchAccessBlock, missingCheapCheckModelRoleAccessBlock, taskExplicitlyUsesWebSearch } from "../cron/access-block.js";
 import { deliverCronIsolatedAgentTurnResult, runCronGraphDataNode, runCronIsolatedAgentTurn } from "../cron/isolated-agent/run.js";
 import "../cron/isolated-agent.js";

package/dist/gateway/server-discovery.js

@@ -1,6 +1,6 @@
 import { runExec } from "../process/exec.js";
 import { getTailnetHostname } from "../infra/tailscale.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/gateway/server-discovery.ts
@@ -20,7 +20,7 @@ function resolveBonjourCliPath(opts = {}) {
 	if (envPath) {
 		return envPath;
 	}
-	const statSync = opts.statSync ?? fs.statSync;
+	const statSync = opts.statSync ?? syncFs.statSync;
 	const isFile = (candidate) => {
 		try {
 			return statSync(candidate).isFile();

package/dist/gateway/server-http.js

@@ -5,36 +5,36 @@ import "../config/config.js";
 import { retryAsync } from "../infra/retry.js";
 import { safeEqualSecret } from "../security/secret-equal.js";
 import { isPrivateOrLoopbackAddress, isTrustedProxyAddress, resolveClientIp } from "./net.js";
-import { tryResolveSatRuntimeIds } from "../config/sat-runtime-ids.js";
 import { callGatewayScoped } from "./call.js";
-import { fetchSolanaMintInfoViaRpc, fetchSolanaNativeBalanceViaRpc, fetchSolanaTokenBalanceViaRpc, fetchSolanaWalletAssetsViaRpc, invalidateSolanaAssetRpcCaches, summarizeSolanaAssetRpcMetrics } from "../wallet/solana-assets.js";
 import { resolveWalletRuntimeConfig } from "../wallet/wallet-runtime-config.js";
-import { beginWalletApprovalAssertion, beginWalletPasskeyRegistration, consumeWalletApprovalGrant, createWalletApprovalChallenge, finishWalletApprovalAssertion, finishWalletPasskeyRegistration, listWalletPasskeys, readWalletApprovalAuthSnapshot, removeWalletPasskey, resolveWalletApprovalAuthMode, resolveWalletApprovalChallengeTtlSeconds, resolveWalletApprovalGrantTtlSeconds } from "../wallet/wallet-approval-auth.js";
-import { isValidSolanaAddress } from "../wallet/solana-address.js";
 import { WALLET_PROVIDER_IDS, checkNamedWalletDeletionSafety, deleteNamedWallet, normalizeWalletUserRole, readWalletProviderRegistry, resolveWalletSelection, resolveWalletUserRole, setAgentWalletAssignment, setDefaultWallet, setNamedWalletRole, setWalletProviderEnabled, upsertNamedWallet } from "../wallet/wallet-provider-registry.js";
+import { resolveAgentPublicOrigin, resolveFederationBaseUrl, resolveFederationBondWalletId, resolveFederationHandle } from "../federation/runtime.js";
+import { isValidSolanaAddress } from "../wallet/solana-address.js";
+import { fetchSolanaMintInfoViaRpc, fetchSolanaNativeBalanceViaRpc, fetchSolanaTokenBalanceViaRpc, fetchSolanaWalletAssetsViaRpc, invalidateSolanaAssetRpcCaches, summarizeSolanaAssetRpcMetrics } from "../wallet/solana-assets.js";
+import { tryResolveSatRuntimeIds } from "../config/sat-runtime-ids.js";
 import { resolveWalletPolicyConfig, resolveWalletRecurringTransferPolicy, upsertWalletPolicyConfig } from "../wallet/wallet-policy.js";
+import { incrementWalletObservabilityCounter, readWalletObservabilitySnapshot } from "../wallet/wallet-observability.js";
+import { buildWalletProviderCapabilityMatrix, providerSupportsChainOperation } from "../wallet/wallet-provider-capabilities.js";
 import { deleteWalletProviderSecret, readWalletProviderSecretStatus, readWalletRpcSecretStatus, saveWalletProviderSecret } from "../wallet/wallet-secrets-store.js";
 import { createWalletProviderAdapter, resolveScopedRpcUrlForWallet, resolveWalletProviderId } from "../wallet/wallet-provider-resolver.js";
-import { activateWalletCustodyUnlockSession, enrollWalletCustodyDevice, listSplitKeyWalletCustodyStatuses, lockWalletCustodyUnlockSessions, readWalletCustodyStatus, recoverWalletCustodyCeremony, refreshWalletCustodyUnlockSession, revokeWalletCustodyDevice } from "../wallet/wallet-custody.js";
-import { resolveAgentPublicOrigin, resolveFederationBaseUrl, resolveFederationBondWalletId, resolveFederationHandle } from "../federation/runtime.js";
+import { beginWalletApprovalAssertion, beginWalletPasskeyRegistration, consumeWalletApprovalGrant, createWalletApprovalChallenge, finishWalletApprovalAssertion, finishWalletPasskeyRegistration, listWalletPasskeys, readWalletApprovalAuthSnapshot, removeWalletPasskey, resolveWalletApprovalAuthMode, resolveWalletApprovalChallengeTtlSeconds, resolveWalletApprovalGrantTtlSeconds } from "../wallet/wallet-approval-auth.js";
 import { appendWalletAuditEntry, readWalletAuditEntries } from "../wallet/wallet-audit-log.js";
+import { activateWalletCustodyUnlockSession, enrollWalletCustodyDevice, listSplitKeyWalletCustodyStatuses, lockWalletCustodyUnlockSessions, readWalletCustodyStatus, recoverWalletCustodyCeremony, refreshWalletCustodyUnlockSession, revokeWalletCustodyDevice } from "../wallet/wallet-custody.js";
 import { simulateWalletPolicy } from "../wallet/wallet-policy-simulation.js";
-import { buildWalletProviderCapabilityMatrix, providerSupportsChainOperation } from "../wallet/wallet-provider-capabilities.js";
 import { approveWalletSendRequest, createOrExecuteWalletSend, listWalletSendApprovalRequests, rejectWalletSendRequest, sanitizeWalletSendApprovalPayload, sanitizeWalletSendApprovalRequest } from "../wallet/wallet-send-approvals.js";
+import { searchSolanaTokens } from "../wallet/solana-token-resolver.js";
+import { normalizeCanvasScopedUrl } from "./canvas-capability.js";
+import { A2UI_PATH, CANVAS_HOST_PATH, CANVAS_WS_PATH, handleA2uiHttpRequest } from "../canvas-host/a2ui.js";
+import { resolveFederationBondWallet } from "../wallet/solana-bond-signing.js";
+import { createAndSubmitFederationBondProof, loadPersistedFederationBondProof } from "../federation/auto-connect.js";
 import { readWalletStatusSnapshot } from "../wallet/wallet-status.js";
 import { inspectSatBondPosition, inspectSatBondStakingDistributor, inspectSatBondStakingPosition, inspectSatBondTierPolicy, inspectSatChainSlot, invalidateSatReadCaches } from "../extensions/sat-mining/src/rpc-read.js";
 import { submitSatCancelBondUnlock, submitSatClaimBondStakingRewards, submitSatFinalizeBondUnlock, submitSatIncreaseBondPosition, submitSatInitBondStakingDistributor, submitSatOpenBondPosition, submitSatRequestBondUnlock, submitSatSyncBondStakingPosition, submitSatSyncBondStakingRewards } from "../extensions/sat-mining/src/solana-submit.js";
 import { resolveAgentAvatar } from "../agents/identity-avatar.js";
-import { normalizeCanvasScopedUrl } from "./canvas-capability.js";
-import { A2UI_PATH, CANVAS_HOST_PATH, CANVAS_WS_PATH, handleA2uiHttpRequest } from "../canvas-host/a2ui.js";
 import { listWalletInboundEvents, pollWalletInboundEvents, reconcileWalletInboundEvents, recordWalletInboundWebhookEvent } from "../wallet/wallet-inbound-events.js";
 import { disableWalletCustodyForWallet, initializeWalletCustodyForWallet, walletSetupCommand } from "../commands/wallet.js";
-import { resolveFederationBondWallet } from "../wallet/solana-bond-signing.js";
-import { createAndSubmitFederationBondProof, loadPersistedFederationBondProof } from "../federation/auto-connect.js";
 import { getDiagnosticStabilitySnapshot } from "../logging/diagnostic-stability.js";
 import { resolveManagedFederationPublicUrl } from "../managed/federation.js";
-import { searchSolanaTokens } from "../wallet/solana-token-resolver.js";
-import { incrementWalletObservabilityCounter, readWalletObservabilitySnapshot } from "../wallet/wallet-observability.js";
 import { createA2aHandler } from "./a2a-http.js";
 import { CONTROL_UI_BOOT_CHECK_PATH, resolveControlUiBootCheck } from "./control-ui-boot-check.js";
 import { normalizePublicHost, resolveControlUiPublicHost } from "./control-ui-login.js";
@@ -50,7 +50,7 @@ import { handleOpenAiHttpRequest } from "./openai-http.js";
 import { canonicalizePathVariant } from "./security-path.js";
 import { handleToolsInvokeHttpRequest } from "./tools-invoke-http.js";
 import { authorizeGatewayConnect, isLocalDirectRequest } from "./auth.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import { createServer } from "node:http";
 import { createServer as createServer$1 } from "node:https";
@@ -2101,7 +2101,7 @@ async function readLocalFederationStatus(env = process.env, fetchImpl = fetch) {
 	const sourcePath = path.join(resolveStateDir(env), "federation", "access-token.json");
 	const managed = (env.FASED_GATEWAY_MODE ?? "").trim().toLowerCase() === "managed";
 	const configured = resolveConfiguredFederationStatus(env);
-	if (!fs.existsSync(sourcePath)) {
+	if (!syncFs.existsSync(sourcePath)) {
 		return {
 			managed,
 			sourcePath,
@@ -2113,7 +2113,7 @@ async function readLocalFederationStatus(env = process.env, fetchImpl = fetch) {
 	}
 	let rawText = "";
 	try {
-		rawText = fs.readFileSync(sourcePath, "utf-8");
+		rawText = syncFs.readFileSync(sourcePath, "utf-8");
 	} catch {
 		return {
 			managed,
@@ -2162,7 +2162,7 @@ async function readLocalFederationStatus(env = process.env, fetchImpl = fetch) {
 	const lifecycle = Number.isFinite(expiresAtMs) ? expiresAtMs > Date.now() ? "active" : "expired" : "invalid";
 	let fileUpdatedAt;
 	try {
-		fileUpdatedAt = fs.statSync(sourcePath).mtime.toISOString();
+		fileUpdatedAt = syncFs.statSync(sourcePath).mtime.toISOString();
 	} catch {
 		fileUpdatedAt = undefined;
 	}

package/dist/gateway/server-methods/agent.js

@@ -15,15 +15,15 @@ import { GATEWAY_CLIENT_CAPS, hasGatewayClientCap } from "../protocol/client-inf
 import { INTERNAL_MESSAGE_CHANNEL, isDeliverableMessageChannel, isGatewayMessageChannel, normalizeMessageChannel } from "../../utils/message-channel.js";
 import { ErrorCodes, errorShape } from "../protocol/schema/error-codes.js";
 import { formatValidationErrors, validateAgentIdentityParams, validateAgentParams, validateAgentWaitParams } from "../protocol/index.js";
-import { resolveAssistantAvatarUrl } from "../control-ui-shared.js";
-import { resolveAssistantIdentity } from "../assistant-identity.js";
-import { resolveMessageChannelSelection } from "../../infra/outbound/channel-selection.js";
 import { registerAgentRunContext } from "../../infra/agent-events.js";
 import { resolveSendPolicy } from "../../sessions/send-policy.js";
+import { resolveAssistantAvatarUrl } from "../control-ui-shared.js";
+import { resolveMessageChannelSelection } from "../../infra/outbound/channel-selection.js";
+import { formatForLog } from "../ws-log.js";
+import { resolveAssistantIdentity } from "../assistant-identity.js";
 import { resolveAgentDeliveryPlan, resolveAgentOutboundTarget } from "../../infra/outbound/agent-delivery.js";
 import { agentCommand } from "../../commands/agent.js";
 import { BARE_SESSION_RESET_PROMPT } from "../../auto-reply/reply/session-reset-prompt.js";
-import { formatForLog } from "../ws-log.js";
 import { registerChatAbortController, resolveAgentRunExpiresAtMs } from "../chat-abort.js";
 import { parseMessageWithAttachments } from "../chat-attachments.js";
 import { waitForAgentJob } from "./agent-job.js";

package/dist/gateway/server-methods/agents.js

@@ -12,9 +12,9 @@ import { ErrorCodes, errorShape } from "../protocol/schema/error-codes.js";
 import { formatValidationErrors, validateAgentsCreateParams, validateAgentsDeleteParams, validateAgentsFilesGetParams, validateAgentsFilesListParams, validateAgentsFilesSetParams, validateAgentsListParams, validateAgentsUpdateParams } from "../protocol/index.js";
 import { assertNoPathAliasEscape } from "../../infra/path-alias-guards.js";
 import { SafeOpenError, readLocalFileSafely, writeFileWithinRoot } from "../../infra/fs-safe.js";
+import { movePathToTrash } from "../../browser/trash.js";
 import { cleanAgentModelProviders } from "../../agents/agent-model-providers.js";
 import { applyAgentConfig, findAgentEntryIndex, pruneAgentConfig } from "../../commands/agents.config.js";
-import { movePathToTrash } from "../../browser/trash.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 

package/dist/gateway/server-methods/channels.js

@@ -12,8 +12,8 @@ import { getChannelPlugin, listChannelPlugins, normalizeChannelId } from "../../
 import { listChatChannels } from "../../channels/registry.js";
 import { ErrorCodes, errorShape } from "../protocol/schema/error-codes.js";
 import { formatValidationErrors, validateChannelsLogoutParams, validateChannelsRuntimeControlParams, validateChannelsStatusParams } from "../protocol/index.js";
-import { buildChannelUiCatalog, listChannelPluginCatalogEntries } from "../../channels/plugins/catalog.js";
 import { getChannelActivity } from "../../infra/channel-activity.js";
+import { buildChannelUiCatalog, listChannelPluginCatalogEntries } from "../../channels/plugins/catalog.js";
 import { resolveChannelDefaultAccountId } from "../../channels/plugins/helpers.js";
 import { formatForLog } from "../ws-log.js";
 import { getChannelOnboardingAdapter } from "../../commands/onboarding/registry.js";

package/dist/gateway/server-methods/chat.js

@@ -29,7 +29,7 @@ import { parseMessageWithAttachments } from "../chat-attachments.js";
 import { injectTimestamp, timestampOptsFromConfig } from "./agent-timestamp.js";
 import { normalizeRpcAttachmentsToChatAttachments } from "./attachment-normalize.js";
 import { appendInjectedAssistantMessageToTranscript } from "./chat-transcript-inject.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import { CURRENT_SESSION_VERSION } from "@mariozechner/pi-coding-agent";
 
@@ -320,11 +320,11 @@ function resolveTranscriptPath(params) {
 	}
 }
 function ensureTranscriptFile(params) {
-	if (fs.existsSync(params.transcriptPath)) {
+	if (syncFs.existsSync(params.transcriptPath)) {
 		return { ok: true };
 	}
 	try {
-		fs.mkdirSync(path.dirname(params.transcriptPath), { recursive: true });
+		syncFs.mkdirSync(path.dirname(params.transcriptPath), { recursive: true });
 		const header = {
 			type: "session",
 			version: CURRENT_SESSION_VERSION,
@@ -332,7 +332,7 @@ function ensureTranscriptFile(params) {
 			timestamp: new Date().toISOString(),
 			cwd: process.cwd()
 		};
-		fs.writeFileSync(params.transcriptPath, `${JSON.stringify(header)}\n`, {
+		syncFs.writeFileSync(params.transcriptPath, `${JSON.stringify(header)}\n`, {
 			encoding: "utf-8",
 			mode: 384
 		});
@@ -346,7 +346,7 @@ function ensureTranscriptFile(params) {
 }
 function transcriptHasIdempotencyKey(transcriptPath, idempotencyKey) {
 	try {
-		const lines = fs.readFileSync(transcriptPath, "utf-8").split(/\r?\n/);
+		const lines = syncFs.readFileSync(transcriptPath, "utf-8").split(/\r?\n/);
 		for (const line of lines) {
 			if (!line.trim()) {
 				continue;
@@ -374,7 +374,7 @@ function appendAssistantTranscriptMessage(params) {
 			error: "transcript path not resolved"
 		};
 	}
-	if (!fs.existsSync(transcriptPath)) {
+	if (!syncFs.existsSync(transcriptPath)) {
 		if (!params.createIfMissing) {
 			return {
 				ok: false,

package/dist/gateway/server-methods/commands.js

@@ -2,9 +2,9 @@ import { listAgentIds, resolveDefaultAgentId } from "../../agents/agent-scope.js
 import { loadConfig } from "../../config/io.js";
 import "../../config/config.js";
 import { getPluginCommandSpecs, listPluginCommands } from "../../plugins/commands.js";
+import { listChatCommandsForConfig, resolveNativeCommandName } from "../../auto-reply/commands-registry.js";
 import { ErrorCodes, errorShape } from "../protocol/schema/error-codes.js";
 import { formatValidationErrors, validateCommandsListParams } from "../protocol/index.js";
-import { listChatCommandsForConfig, resolveNativeCommandName } from "../../auto-reply/commands-registry.js";
 import { listSkillCommandsForAgents } from "../../auto-reply/skill-commands.js";
 
 //#region src/gateway/server-methods/commands.ts

package/dist/gateway/server-methods/devices.js

@@ -1,6 +1,6 @@
+import { approveDevicePairing, listDevicePairing, rejectDevicePairing, removePairedDevice, revokeDeviceToken, rotateDeviceToken, summarizeDeviceTokens } from "../../infra/device-pairing.js";
 import { ErrorCodes, errorShape } from "../protocol/schema/error-codes.js";
 import { formatValidationErrors, validateDevicePairApproveParams, validateDevicePairListParams, validateDevicePairRejectParams, validateDevicePairRemoveParams, validateDeviceTokenRevokeParams, validateDeviceTokenRotateParams } from "../protocol/index.js";
-import { approveDevicePairing, listDevicePairing, rejectDevicePairing, removePairedDevice, revokeDeviceToken, rotateDeviceToken, summarizeDeviceTokens } from "../../infra/device-pairing.js";
 
 //#region src/gateway/server-methods/devices.ts
 function redactPairedDevice(device) {

package/dist/gateway/server-methods/doctor.js

@@ -2,10 +2,10 @@ import { resolveDefaultAgentId } from "../../agents/agent-scope.js";
 import { loadConfig } from "../../config/io.js";
 import "../../config/config.js";
 import { logMutatingAdminRpcAudit } from "./mutating-admin-rpc-audit.js";
-import { ErrorCodes, errorShape } from "../protocol/schema/error-codes.js";
-import "../protocol/index.js";
 import { getMemorySearchManager } from "../../memory/search-manager.js";
 import "../../memory/index.js";
+import { ErrorCodes, errorShape } from "../protocol/schema/error-codes.js";
+import "../protocol/index.js";
 import { buildMemoryInventory, previewMemoryInventoryRepair, validateMemoryInventory } from "../../memory/inventory.js";
 import { executeMemoryRepair } from "../../memory/repair-executor.js";
 import { formatError } from "../server-utils.js";

package/dist/gateway/server-methods/hooks.js

@@ -3,8 +3,8 @@ import { loadConfig, writeConfigFile } from "../../config/io.js";
 import "../../config/config.js";
 import { ErrorCodes, errorShape } from "../protocol/schema/error-codes.js";
 import "../protocol/index.js";
-import { applyHookMappings, resolveHookMappings } from "../hooks-mapping.js";
 import { completeTaskRunByRunId, createRunningTaskRun, failTaskRunByRunId } from "../../tasks/task-executor.js";
+import { applyHookMappings, resolveHookMappings } from "../hooks-mapping.js";
 import { buildPluginStatusReport } from "../../plugins/status.js";
 import { loadWorkspaceHookEntries } from "../../hooks/workspace.js";
 import { buildWorkspaceHookStatus } from "../../hooks/hooks-status.js";