@fased/fased 0.1.45 → 0.1.47

package/dist/agents/pi-model-discovery.js

@@ -1,7 +1,7 @@
 import { ensureAuthProfileStore } from "./auth-profiles/store.js";
 import "./auth-profiles.js";
 import { resolvePiCredentialMapFromStore } from "./pi-auth-credentials.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import * as PiCodingAgent from "@mariozechner/pi-coding-agent";
 
@@ -25,12 +25,12 @@ function scrubLegacyStaticAuthJsonEntries(pathname) {
 	if (process.env.FASED_AUTH_STORE_READONLY === "1") {
 		return;
 	}
-	if (!fs.existsSync(pathname)) {
+	if (!syncFs.existsSync(pathname)) {
 		return;
 	}
 	let parsed;
 	try {
-		parsed = JSON.parse(fs.readFileSync(pathname, "utf8"));
+		parsed = JSON.parse(syncFs.readFileSync(pathname, "utf8"));
 	} catch {
 		return;
 	}
@@ -52,11 +52,11 @@ function scrubLegacyStaticAuthJsonEntries(pathname) {
 		return;
 	}
 	if (Object.keys(parsed).length === 0) {
-		fs.rmSync(pathname, { force: true });
+		syncFs.rmSync(pathname, { force: true });
 		return;
 	}
-	fs.writeFileSync(pathname, `${JSON.stringify(parsed, null, 2)}\n`, "utf8");
-	fs.chmodSync(pathname, 384);
+	syncFs.writeFileSync(pathname, `${JSON.stringify(parsed, null, 2)}\n`, "utf8");
+	syncFs.chmodSync(pathname, 384);
 }
 function createAuthStorage(AuthStorageLike, path, creds) {
 	const withInMemory = AuthStorageLike;

package/dist/agents/pi-project-settings.js

@@ -1,6 +1,6 @@
 import { applyMergePatch } from "../config/merge-patch.js";
 import { applyPiCompactionSettingsFromConfig } from "./pi-settings.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import { SettingsManager } from "@mariozechner/pi-coding-agent";
 
@@ -28,7 +28,7 @@ function buildEmbeddedPiSettingsSnapshot(params) {
 }
 function readJsonFile(filePath) {
 	try {
-		const raw = fs.readFileSync(filePath, "utf8");
+		const raw = syncFs.readFileSync(filePath, "utf8");
 		const parsed = JSON.parse(raw);
 		return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
 	} catch {
@@ -49,7 +49,7 @@ function loadEnabledBundlePiSettingsSnapshot(params) {
 			const servers = mcp.mcpServers && typeof mcp.mcpServers === "object" && !Array.isArray(mcp.mcpServers) ? mcp.mcpServers : undefined;
 			if (servers) {
 				const resolvedServers = {};
-				const resolvedRoot = fs.realpathSync.native?.(pluginRoot) ?? fs.realpathSync(pluginRoot);
+				const resolvedRoot = syncFs.realpathSync.native?.(pluginRoot) ?? syncFs.realpathSync(pluginRoot);
 				for (const [name, server] of Object.entries(servers)) {
 					if (!server || typeof server !== "object" || Array.isArray(server)) {
 						resolvedServers[name] = server;

package/dist/agents/pi-tools.js

@@ -5,16 +5,16 @@ import { resolveAgentConfig } from "./agent-scope.js";
 import { resolveGatewayMessageChannel } from "../utils/message-channel.js";
 import { resolveToolProfilePolicy } from "./tool-policy-shared.js";
 import { applyOwnerOnlyToolPolicy, collectExplicitAllowlist, mergeAlsoAllowPolicy } from "./tool-policy.js";
-import { resolveImageSanitizationLimits } from "./image-sanitization.js";
 import { listChannelAgentTools } from "./channel-tools.js";
 import { resolveMergedSafeBinProfileFixtures } from "../infra/exec-safe-bin-runtime-policy.js";
+import { resolveImageSanitizationLimits } from "./image-sanitization.js";
+import { getSubagentDepthFromSessionStore } from "./subagent-depth.js";
 import { getPluginToolMeta } from "../plugins/tools.js";
 import { createApplyPatchTool } from "./apply-patch.js";
 import { createExecTool } from "./bash-tools.exec.js";
 import { createProcessTool } from "./bash-tools.process.js";
 import "./bash-tools.js";
 import { resolveWorkspaceRoot } from "./workspace-dir.js";
-import { getSubagentDepthFromSessionStore } from "./subagent-depth.js";
 import { createFasedAgentTools } from "./fased-tools.js";
 import { wrapToolWithAbortSignal } from "./pi-tools.abort.js";
 import { wrapToolWithBeforeToolCallHook } from "./pi-tools.before-tool-call.js";

package/dist/agents/pi-tools.read.js

@@ -1,6 +1,6 @@
 import { detectMime } from "../media/mime.js";
-import { SafeOpenError, openFileWithinRoot, writeFileWithinRoot } from "../infra/fs-safe.js";
 import { sanitizeToolResultImages } from "./tool-images.js";
+import { SafeOpenError, openFileWithinRoot, writeFileWithinRoot } from "../infra/fs-safe.js";
 import { assertSandboxPath } from "./sandbox-paths.js";
 import { sniffMimeFromBase64 } from "../media/sniff-mime-from-base64.js";
 import { fileURLToPath } from "node:url";

package/dist/agents/sandbox/browser.js

@@ -4,13 +4,13 @@ import { isToolAllowed } from "./tool-policy.js";
 import { resolveSandboxBrowserDockerCreateConfig } from "./config.js";
 import { DEFAULT_BROWSER_EVALUATE_ENABLED, DEFAULT_FASED_BROWSER_COLOR, DEFAULT_FASED_BROWSER_PROFILE_NAME } from "../../browser/constants.js";
 import { resolveProfile } from "../../browser/config.js";
-import { startBrowserBridgeServer, stopBrowserBridgeServer } from "../../browser/bridge-server.js";
-import { BROWSER_BRIDGES } from "./browser-bridges.js";
 import { computeSandboxBrowserConfigHash } from "./config-hash.js";
 import { readBrowserRegistry, updateBrowserRegistry } from "./registry.js";
 import { resolveSandboxAgentId, slugifySessionKey } from "./shared.js";
 import { validateNetworkMode } from "./validate-sandbox-security.js";
 import { buildSandboxCreateArgs, dockerContainerState, execDocker, readDockerContainerEnvVar, readDockerContainerLabel, readDockerPort } from "./docker.js";
+import { startBrowserBridgeServer, stopBrowserBridgeServer } from "../../browser/bridge-server.js";
+import { BROWSER_BRIDGES } from "./browser-bridges.js";
 import { NOVNC_PASSWORD_ENV_KEY, buildNoVncDirectUrl, buildNoVncObserverTokenUrl, consumeNoVncObserverToken, generateNoVncPassword, isNoVncEnabled, issueNoVncObserverToken } from "./novnc-auth.js";
 import crypto from "node:crypto";
 

package/dist/agents/sandbox/context.js

@@ -8,10 +8,10 @@ import { DEFAULT_BROWSER_EVALUATE_ENABLED } from "../../browser/constants.js";
 import { resolveSandboxRuntimeStatus } from "./runtime-status.js";
 import { syncSkillsToWorkspace } from "../skills/workspace.js";
 import "../skills.js";
-import { ensureBrowserControlAuth, resolveBrowserControlAuth } from "../../browser/control-auth.js";
-import { resolveSandboxBackend } from "./backend.js";
 import { resolveSandboxScopeKey, resolveSandboxWorkspaceDir } from "./shared.js";
 import { ensureSandboxContainer } from "./docker.js";
+import { ensureBrowserControlAuth, resolveBrowserControlAuth } from "../../browser/control-auth.js";
+import { resolveSandboxBackend } from "./backend.js";
 import { ensureSandboxBrowser } from "./browser.js";
 import { createSandboxFsBridge } from "./fs-bridge.js";
 import { maybePruneSandboxes } from "./prune.js";

package/dist/agents/sandbox/docker.js

@@ -3,8 +3,8 @@ import { createSubsystemLogger } from "../../logging/subsystem.js";
 import { formatCliCommand } from "../../cli/command-format.js";
 import { DEFAULT_SANDBOX_IMAGE, SANDBOX_AGENT_WORKSPACE_MOUNT } from "./constants.js";
 import { sanitizeEnvVars } from "./sanitize-env-vars.js";
-import { computeSandboxConfigHash } from "./config-hash.js";
 import { FASED_CLI_ENV_VALUE } from "../../infra/fased-exec-env.js";
+import { computeSandboxConfigHash } from "./config-hash.js";
 import { readRegistry, updateRegistry } from "./registry.js";
 import { resolveSandboxAgentId, resolveSandboxScopeKey, slugifySessionKey } from "./shared.js";
 import { validateSandboxSecurity } from "./validate-sandbox-security.js";

package/dist/agents/sandbox/fs-bridge.js

@@ -3,7 +3,7 @@ import { PATH_ALIAS_POLICIES } from "../../infra/path-alias-guards.js";
 import { execDockerRaw } from "./docker.js";
 import { isPathInsideContainerRoot, normalizeContainerPath } from "./path-utils.js";
 import { buildSandboxFsMounts, resolveSandboxFsPathWithMounts } from "./fs-paths.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 
 //#region src/agents/sandbox/fs-bridge.ts
 function createSandboxFsBridge(params) {
@@ -160,7 +160,7 @@ var SandboxFsBridgeImpl = class {
 				throw guarded.error instanceof Error ? guarded.error : new Error(`Sandbox boundary checks failed; cannot ${options.action}: ${target.containerPath}`);
 			}
 		} else {
-			fs.closeSync(guarded.fd);
+			syncFs.closeSync(guarded.fd);
 		}
 		const canonicalContainerPath = await this.resolveCanonicalContainerPath({
 			containerPath: target.containerPath,

package/dist/agents/sandbox/manage.js

@@ -1,11 +1,11 @@
 import { loadConfig } from "../../config/io.js";
 import "../../config/config.js";
 import { resolveSandboxConfigForAgent } from "./config.js";
-import { stopBrowserBridgeServer } from "../../browser/bridge-server.js";
-import { BROWSER_BRIDGES } from "./browser-bridges.js";
 import { readBrowserRegistry, readRegistry, removeBrowserRegistryEntry, removeRegistryEntry } from "./registry.js";
 import { resolveSandboxAgentId } from "./shared.js";
 import { dockerContainerState, execDocker } from "./docker.js";
+import { stopBrowserBridgeServer } from "../../browser/bridge-server.js";
+import { BROWSER_BRIDGES } from "./browser-bridges.js";
 
 //#region src/agents/sandbox/manage.ts
 async function listSandboxRegistryItems(params) {

package/dist/agents/sandbox/prune.js

@@ -1,8 +1,8 @@
 import { defaultRuntime } from "../../runtime.js";
-import { stopBrowserBridgeServer } from "../../browser/bridge-server.js";
-import { BROWSER_BRIDGES } from "./browser-bridges.js";
 import { readBrowserRegistry, readRegistry, removeBrowserRegistryEntry, removeRegistryEntry } from "./registry.js";
 import { dockerContainerState, execDocker } from "./docker.js";
+import { stopBrowserBridgeServer } from "../../browser/bridge-server.js";
+import { BROWSER_BRIDGES } from "./browser-bridges.js";
 
 //#region src/agents/sandbox/prune.ts
 let lastPruneAtMs = 0;

package/dist/agents/session-dirs.js

@@ -1,6 +1,6 @@
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
-import fs$1 from "node:fs/promises";
+import fs from "node:fs/promises";
 
 //#region src/agents/session-dirs.ts
 function mapAgentSessionDirs(agentsDir, entries) {
@@ -9,7 +9,7 @@ function mapAgentSessionDirs(agentsDir, entries) {
 async function resolveAgentSessionDirsFromAgentsDir(agentsDir) {
 	let entries = [];
 	try {
-		entries = await fs$1.readdir(agentsDir, { withFileTypes: true });
+		entries = await fs.readdir(agentsDir, { withFileTypes: true });
 	} catch (err) {
 		const code = err.code;
 		if (code === "ENOENT") {
@@ -22,7 +22,7 @@ async function resolveAgentSessionDirsFromAgentsDir(agentsDir) {
 function resolveAgentSessionDirsFromAgentsDirSync(agentsDir) {
 	let entries = [];
 	try {
-		entries = fs.readdirSync(agentsDir, { withFileTypes: true });
+		entries = syncFs.readdirSync(agentsDir, { withFileTypes: true });
 	} catch (err) {
 		const code = err.code;
 		if (code === "ENOENT") {

package/dist/agents/session-write-lock.js

@@ -1,8 +1,8 @@
 import { isPidAlive } from "../shared/pid-alive.js";
 import { resolveProcessScopedMap } from "../shared/process-scoped-map.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
-import fs$1 from "node:fs/promises";
+import fs from "node:fs/promises";
 
 //#region src/agents/session-write-lock.ts
 const CLEANUP_SIGNALS = [
@@ -84,7 +84,7 @@ async function releaseHeldLock(normalizedSessionFile, held, opts = {}) {
 			await held.handle.close();
 		} catch {}
 		try {
-			await fs$1.rm(held.lockPath, { force: true });
+			await fs.rm(held.lockPath, { force: true });
 		} catch {}
 	})();
 	try {
@@ -106,7 +106,7 @@ function releaseAllLocksSync() {
 			}
 		} catch {}
 		try {
-			fs.rmSync(held.lockPath, { force: true });
+			syncFs.rmSync(held.lockPath, { force: true });
 		} catch {}
 		HELD_LOCKS.delete(sessionFile);
 	}
@@ -175,7 +175,7 @@ function registerCleanupHandlers() {
 }
 async function readLockPayload(lockPath) {
 	try {
-		const raw = await fs$1.readFile(lockPath, "utf8");
+		const raw = await fs.readFile(lockPath, "utf8");
 		const parsed = JSON.parse(raw);
 		const payload = {};
 		if (typeof parsed.pid === "number") {
@@ -226,7 +226,7 @@ async function shouldReclaimContendedLockFile(lockPath, details, staleMs, nowMs)
 		return true;
 	}
 	try {
-		const stat = await fs$1.stat(lockPath);
+		const stat = await fs.stat(lockPath);
 		const ageMs = Math.max(0, nowMs - stat.mtimeMs);
 		return ageMs > staleMs;
 	} catch (error) {
@@ -241,7 +241,7 @@ async function cleanStaleLockFiles(params) {
 	const nowMs = params.nowMs ?? Date.now();
 	let entries = [];
 	try {
-		entries = await fs$1.readdir(sessionsDir, { withFileTypes: true });
+		entries = await fs.readdir(sessionsDir, { withFileTypes: true });
 	} catch (err) {
 		const code = err.code;
 		if (code === "ENOENT") {
@@ -265,7 +265,7 @@ async function cleanStaleLockFiles(params) {
 			removed: false
 		};
 		if (lockInfo.stale && removeStale) {
-			await fs$1.rm(lockPath, { force: true });
+			await fs.rm(lockPath, { force: true });
 			lockInfo.removed = true;
 			cleaned.push(lockInfo);
 			params.log?.warn?.(`removed stale session lock: ${lockPath} (${lockInfo.staleReasons.join(", ") || "unknown"})`);
@@ -284,10 +284,10 @@ async function acquireSessionWriteLock(params) {
 	const maxHoldMs = resolvePositiveMs(params.maxHoldMs, DEFAULT_MAX_HOLD_MS);
 	const sessionFile = path.resolve(params.sessionFile);
 	const sessionDir = path.dirname(sessionFile);
-	await fs$1.mkdir(sessionDir, { recursive: true });
+	await fs.mkdir(sessionDir, { recursive: true });
 	let normalizedDir = sessionDir;
 	try {
-		normalizedDir = await fs$1.realpath(sessionDir);
+		normalizedDir = await fs.realpath(sessionDir);
 	} catch {}
 	const normalizedSessionFile = path.join(normalizedDir, path.basename(sessionFile));
 	const lockPath = `${normalizedSessionFile}.lock`;
@@ -305,7 +305,7 @@ async function acquireSessionWriteLock(params) {
 		attempt += 1;
 		let handle = null;
 		try {
-			handle = await fs$1.open(lockPath, "wx");
+			handle = await fs.open(lockPath, "wx");
 			const createdAt = new Date().toISOString();
 			await handle.writeFile(JSON.stringify({
 				pid: process.pid,
@@ -328,7 +328,7 @@ async function acquireSessionWriteLock(params) {
 					await handle.close();
 				} catch {}
 				try {
-					await fs$1.rm(lockPath, { force: true });
+					await fs.rm(lockPath, { force: true });
 				} catch {}
 			}
 			const code = err.code;
@@ -339,7 +339,7 @@ async function acquireSessionWriteLock(params) {
 			const nowMs = Date.now();
 			const inspected = inspectLockPayload(payload, staleMs, nowMs);
 			if (await shouldReclaimContendedLockFile(lockPath, inspected, staleMs, nowMs)) {
-				await fs$1.rm(lockPath, { force: true });
+				await fs.rm(lockPath, { force: true });
 				continue;
 			}
 			const delay = Math.min(1e3, 50 * attempt);

package/dist/agents/shell-utils.js

@@ -1,4 +1,4 @@
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import { spawn } from "node:child_process";
 
@@ -6,13 +6,13 @@ import { spawn } from "node:child_process";
 function resolvePowerShellPath() {
 	const programFiles = process.env.ProgramFiles || process.env.PROGRAMFILES || "C:\\Program Files";
 	const pwsh7 = path.join(programFiles, "PowerShell", "7", "pwsh.exe");
-	if (fs.existsSync(pwsh7)) {
+	if (syncFs.existsSync(pwsh7)) {
 		return pwsh7;
 	}
 	const programW6432 = process.env.ProgramW6432;
 	if (programW6432 && programW6432 !== programFiles) {
 		const pwsh7Alt = path.join(programW6432, "PowerShell", "7", "pwsh.exe");
-		if (fs.existsSync(pwsh7Alt)) {
+		if (syncFs.existsSync(pwsh7Alt)) {
 			return pwsh7Alt;
 		}
 	}
@@ -23,7 +23,7 @@ function resolvePowerShellPath() {
 	const systemRoot = process.env.SystemRoot || process.env.WINDIR;
 	if (systemRoot) {
 		const candidate = path.join(systemRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe");
-		if (fs.existsSync(candidate)) {
+		if (syncFs.existsSync(candidate)) {
 			return candidate;
 		}
 	}
@@ -73,7 +73,7 @@ function resolveShellFromPath(name) {
 	for (const entry of entries) {
 		const candidate = path.join(entry, name);
 		try {
-			fs.accessSync(candidate, fs.constants.X_OK);
+			syncFs.accessSync(candidate, syncFs.constants.X_OK);
 			return candidate;
 		} catch {}
 	}

package/dist/agents/skills/bundled-dir.js

@@ -1,12 +1,12 @@
 import { resolveFasedAgentPackageRootSync } from "../../infra/fased-root.js";
 import { fileURLToPath } from "node:url";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/agents/skills/bundled-dir.ts
 function looksLikeSkillsDir(dir) {
 	try {
-		const entries = fs.readdirSync(dir, { withFileTypes: true });
+		const entries = syncFs.readdirSync(dir, { withFileTypes: true });
 		for (const entry of entries) {
 			if (entry.name.startsWith(".")) {
 				continue;
@@ -16,7 +16,7 @@ function looksLikeSkillsDir(dir) {
 				return true;
 			}
 			if (entry.isDirectory()) {
-				if (fs.existsSync(path.join(fullPath, "SKILL.md"))) {
+				if (syncFs.existsSync(path.join(fullPath, "SKILL.md"))) {
 					return true;
 				}
 			}
@@ -35,7 +35,7 @@ function resolveBundledSkillsDir(opts = {}) {
 		const execPath = opts.execPath ?? process.execPath;
 		const execDir = path.dirname(execPath);
 		const sibling = path.join(execDir, "skills");
-		if (fs.existsSync(sibling)) {
+		if (syncFs.existsSync(sibling)) {
 			return sibling;
 		}
 	} catch {}

package/dist/agents/skills/local-loader.js

@@ -1,7 +1,7 @@
 import { openVerifiedFileSync } from "../../infra/safe-open-sync.js";
 import { parseFrontmatter, resolveSkillInvocationPolicy } from "./frontmatter.js";
 import { createSyntheticSourceInfo } from "./skill-contract.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/agents/skills/local-loader.ts
@@ -22,9 +22,9 @@ function readSkillFileSync(params) {
 		if (!isPathWithinRoot(params.rootRealPath, opened.path)) {
 			return null;
 		}
-		return fs.readFileSync(opened.fd, "utf8");
+		return syncFs.readFileSync(opened.fd, "utf8");
 	} finally {
-		fs.closeSync(opened.fd);
+		syncFs.closeSync(opened.fd);
 	}
 }
 function loadSingleSkillDirectory(params) {
@@ -69,7 +69,7 @@ function loadSingleSkillDirectory(params) {
 }
 function listCandidateSkillDirs(dir) {
 	try {
-		return fs.readdirSync(dir, { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.name.startsWith(".") && entry.name !== "node_modules").map((entry) => path.join(dir, entry.name)).sort((left, right) => left.localeCompare(right));
+		return syncFs.readdirSync(dir, { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.name.startsWith(".") && entry.name !== "node_modules").map((entry) => path.join(dir, entry.name)).sort((left, right) => left.localeCompare(right));
 	} catch {
 		return [];
 	}
@@ -78,7 +78,7 @@ function loadSkillsFromDirSafe(params) {
 	const rootDir = path.resolve(params.dir);
 	let rootRealPath;
 	try {
-		rootRealPath = fs.realpathSync(rootDir);
+		rootRealPath = syncFs.realpathSync(rootDir);
 	} catch {
 		return { skills: [] };
 	}
@@ -102,7 +102,7 @@ function loadSkillsFromDirSafe(params) {
 function readSkillFrontmatterSafe(params) {
 	let rootRealPath;
 	try {
-		rootRealPath = fs.realpathSync(path.resolve(params.rootDir));
+		rootRealPath = syncFs.realpathSync(path.resolve(params.rootDir));
 	} catch {
 		return null;
 	}

package/dist/agents/skills/plugin-skills.js

@@ -1,7 +1,7 @@
 import { createSubsystemLogger } from "../../logging/subsystem.js";
 import { normalizePluginsConfig, resolveEffectiveEnableState, resolveMemorySlotDecision } from "../../plugins/config-state.js";
 import { loadPluginManifestRegistry } from "../../plugins/manifest-registry.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/agents/skills/plugin-skills.ts
@@ -58,7 +58,7 @@ function resolvePluginSkillDirs(params) {
 				continue;
 			}
 			const candidate = path.resolve(record.rootDir, trimmed);
-			if (!fs.existsSync(candidate)) {
+			if (!syncFs.existsSync(candidate)) {
 				log.warn(`plugin skill path not found (${record.id}): ${candidate}`);
 				continue;
 			}

package/dist/agents/skills/workspace.js

@@ -8,13 +8,13 @@ import { shouldIncludeSkill } from "./config.js";
 import { resolveBundledSkillsDir } from "./bundled-dir.js";
 import { resolvePluginSkillDirs } from "./plugin-skills.js";
 import { serializeByKey } from "./serialize.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { formatSkillsForPrompt, loadSkillsFromDir } from "@mariozechner/pi-coding-agent";
 
 //#region src/agents/skills/workspace.ts
-const fsp = fs.promises;
+const fsp = syncFs.promises;
 const skillsLogger = createSubsystemLogger("skills");
 const skillCommandDebugOnce = new Set();
 /**
@@ -84,10 +84,10 @@ function isPathWithinRoot(candidatePath, rootPath) {
 	let candidate = path.resolve(candidatePath);
 	let root = path.resolve(rootPath);
 	try {
-		candidate = fs.realpathSync.native(candidate);
+		candidate = syncFs.realpathSync.native(candidate);
 	} catch {}
 	try {
-		root = fs.realpathSync.native(root);
+		root = syncFs.realpathSync.native(root);
 	} catch {}
 	const relative = path.relative(root, candidate);
 	return relative === "" || !relative.startsWith("..") && !path.isAbsolute(relative);
@@ -135,7 +135,7 @@ function resolveSkillsLimits(config) {
 }
 function listChildDirectories(dir) {
 	try {
-		const entries = fs.readdirSync(dir, { withFileTypes: true });
+		const entries = syncFs.readdirSync(dir, { withFileTypes: true });
 		const dirs = [];
 		for (const entry of entries) {
 			if (entry.name.startsWith(".")) continue;
@@ -147,7 +147,7 @@ function listChildDirectories(dir) {
 			}
 			if (entry.isSymbolicLink()) {
 				try {
-					if (fs.statSync(fullPath).isDirectory()) {
+					if (syncFs.statSync(fullPath).isDirectory()) {
 						dirs.push(entry.name);
 					}
 				} catch {}
@@ -161,7 +161,7 @@ function listChildDirectories(dir) {
 function resolveNestedSkillsRoot(dir, opts) {
 	const nested = path.join(dir, "skills");
 	try {
-		if (!fs.existsSync(nested) || !fs.statSync(nested).isDirectory()) {
+		if (!syncFs.existsSync(nested) || !syncFs.statSync(nested).isDirectory()) {
 			return { baseDir: dir };
 		}
 	} catch {
@@ -172,7 +172,7 @@ function resolveNestedSkillsRoot(dir, opts) {
 	const toScan = scanLimit === 0 ? [] : nestedDirs.slice(0, Math.min(nestedDirs.length, scanLimit));
 	for (const name of toScan) {
 		const skillMd = path.join(nested, name, "SKILL.md");
-		if (fs.existsSync(skillMd)) {
+		if (syncFs.existsSync(skillMd)) {
 			return {
 				baseDir: nested,
 				note: `Detected nested skills root at ${nested}`
@@ -199,9 +199,9 @@ function loadSkillEntries(workspaceDir, opts) {
 		const resolved = resolveNestedSkillsRoot(params.dir, { maxEntriesToScan: limits.maxCandidatesPerRoot });
 		const baseDir = resolved.baseDir;
 		const rootSkillMd = path.join(baseDir, "SKILL.md");
-		if (fs.existsSync(rootSkillMd)) {
+		if (syncFs.existsSync(rootSkillMd)) {
 			try {
-				const size = fs.statSync(rootSkillMd).size;
+				const size = syncFs.statSync(rootSkillMd).size;
 				if (size > limits.maxSkillFileBytes) {
 					skillsLogger.warn("Skipping skills root due to oversized SKILL.md.", {
 						dir: baseDir,
@@ -244,11 +244,11 @@ function loadSkillEntries(workspaceDir, opts) {
 		for (const name of limitedChildren) {
 			const skillDir = path.join(baseDir, name);
 			const skillMd = path.join(skillDir, "SKILL.md");
-			if (!fs.existsSync(skillMd)) {
+			if (!syncFs.existsSync(skillMd)) {
 				continue;
 			}
 			try {
-				const size = fs.statSync(skillMd).size;
+				const size = syncFs.statSync(skillMd).size;
 				if (size > limits.maxSkillFileBytes) {
 					skillsLogger.warn("Skipping skill due to oversized SKILL.md.", {
 						skill: name,
@@ -336,7 +336,7 @@ function loadSkillEntries(workspaceDir, opts) {
 	const skillEntries = Array.from(merged.values()).map((skill) => {
 		let frontmatter = {};
 		try {
-			const raw = fs.readFileSync(skill.filePath, "utf-8");
+			const raw = syncFs.readFileSync(skill.filePath, "utf-8");
 			frontmatter = parseFrontmatter(raw);
 		} catch {}
 		return {

package/dist/agents/skills-install-download.js

@@ -8,7 +8,7 @@ import { hasBinary } from "../shared/config-eval.js";
 import "./skills.js";
 import { formatInstallFailureMessage } from "./skills-install-output.js";
 import { resolveSkillToolsRootDir } from "./skills/tools-dir.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import { createHash } from "node:crypto";
 import { Readable } from "node:stream";
@@ -85,11 +85,11 @@ async function downloadFile(url, destPath, timeoutMs) {
 			throw new Error(`Download failed (${response.status} ${response.statusText})`);
 		}
 		await ensureDir(path.dirname(destPath));
-		const file = fs.createWriteStream(destPath);
+		const file = syncFs.createWriteStream(destPath);
 		const body = response.body;
 		const readable = isNodeReadableStream(body) ? body : Readable.fromWeb(body);
 		await pipeline(readable, file);
-		const stat = await fs.promises.stat(destPath);
+		const stat = await syncFs.promises.stat(destPath);
 		return { bytes: stat.size };
 	} finally {
 		await release();
@@ -100,7 +100,7 @@ function normalizeHex(value) {
 }
 async function digestFile(filePath, algorithm, encoding) {
 	const hash = createHash(algorithm);
-	await pipeline(fs.createReadStream(filePath), hash);
+	await pipeline(syncFs.createReadStream(filePath), hash);
 	return hash.digest(encoding);
 }
 async function verifyDownloadIntegrity(archivePath, spec) {
@@ -183,7 +183,7 @@ async function extractArchive(params) {
 				};
 			}
 			const readArchiveFingerprint = async () => {
-				const stat = await fs.promises.stat(archivePath);
+				const stat = await syncFs.promises.stat(archivePath);
 				return {
 					size: stat.size,
 					mtimeMs: stat.mtimeMs
@@ -196,7 +196,7 @@ async function extractArchive(params) {
 				for (const part of parts) {
 					current = path.join(current, part);
 					try {
-						const stat = await fs.promises.lstat(current);
+						const stat = await syncFs.promises.lstat(current);
 						if (stat.isSymbolicLink()) {
 							throw new Error(`archive entry traverses symlink in destination: ${originalPath}`);
 						}
@@ -352,7 +352,7 @@ async function installDownloadSpec(params) {
 	try {
 		targetDir = resolveDownloadTargetDir(entry, spec);
 		await ensureDir(targetDir);
-		const stat = await fs.promises.lstat(targetDir);
+		const stat = await syncFs.promises.lstat(targetDir);
 		if (stat.isSymbolicLink()) {
 			throw new Error(`targetDir is a symlink: ${targetDir}`);
 		}

package/dist/agents/skills-install-plan.js

@@ -1,7 +1,7 @@
 import { hasBinary } from "../shared/config-eval.js";
 import "./skills.js";
 import { resolveBrewExecutable } from "../infra/brew.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/agents/skills-install-plan.ts
@@ -153,7 +153,7 @@ function candidateSkillBinPaths(bin) {
 function findSkillBinaryOutsidePath(bin) {
 	for (const candidate of candidateSkillBinPaths(bin)) {
 		try {
-			if (fs.existsSync(candidate)) {
+			if (syncFs.existsSync(candidate)) {
 				return candidate;
 			}
 		} catch {}

package/dist/agents/skills-install.js

@@ -8,7 +8,7 @@ import { resolveBrewExecutable } from "../infra/brew.js";
 import { summarizeSkillInstallTrust } from "./skills-install-trust.js";
 import { formatInstallFailureMessage } from "./skills-install-output.js";
 import { installDownloadSpec } from "./skills-install-download.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/agents/skills-install.ts
@@ -236,7 +236,7 @@ function candidateBinPaths(bin) {
 function findBinaryOutsidePath(bin) {
 	for (const candidate of candidateBinPaths(bin)) {
 		try {
-			if (fs.existsSync(candidate)) {
+			if (syncFs.existsSync(candidate)) {
 				return candidate;
 			}
 		} catch {}