@fased/fased 0.1.45 → 0.1.47

package/dist/telegram/dm-access.js

@@ -1,7 +1,7 @@
 import { logVerbose } from "../globals.js";
 import { upsertChannelPairingRequest } from "../pairing/pairing-store.js";
-import { resolveSenderAllowMatch } from "./bot-access.js";
 import { buildPairingReply } from "../pairing/pairing-messages.js";
+import { resolveSenderAllowMatch } from "./bot-access.js";
 import { withTelegramApiErrorLogging } from "./api-logging.js";
 
 //#region src/telegram/dm-access.ts

package/dist/telegram/group-access.js

@@ -1,6 +1,6 @@
+import { resolveOpenProviderRuntimeGroupPolicy } from "../config/runtime-group-policy.js";
 import { firstDefined } from "../channels/allow-from.js";
 import { isSenderAllowed } from "./bot-access.js";
-import { resolveOpenProviderRuntimeGroupPolicy } from "../config/runtime-group-policy.js";
 
 //#region src/telegram/group-access.ts
 const evaluateTelegramGroupBaseAccess = (params) => {

package/dist/telegram/monitor.js

@@ -3,10 +3,10 @@ import { resolveAgentMaxConcurrent } from "../config/agent-limits.js";
 import { loadConfig } from "../config/io.js";
 import "../config/config.js";
 import { resolveTelegramAccount } from "./accounts.js";
+import { waitForAbortSignal } from "../infra/abort-signal.js";
+import { computeBackoff, sleepWithAbort } from "../infra/backoff.js";
 import { formatDurationPrecise } from "../infra/format-time/format-duration.js";
 import { registerUnhandledRejectionHandler } from "../infra/unhandled-rejections.js";
-import { computeBackoff, sleepWithAbort } from "../infra/backoff.js";
-import { waitForAbortSignal } from "../infra/abort-signal.js";
 import { withTelegramApiErrorLogging } from "./api-logging.js";
 import { isRecoverableTelegramNetworkError } from "./network-errors.js";
 import { makeProxyFetch } from "./proxy.js";

package/dist/telegram/send.js

@@ -5,14 +5,14 @@ import { formatErrorMessage, formatUncaughtError } from "../infra/errors.js";
 import { loadConfig } from "../config/io.js";
 import "../config/config.js";
 import { resolveTelegramAccount } from "./accounts.js";
+import { normalizeTelegramChatId, normalizeTelegramLookupTarget, parseTelegramTarget } from "./targets.js";
 import { mediaKindFromMime } from "../media/constants.js";
 import { isGifMedia } from "../media/mime.js";
 import { resolveMarkdownTableMode } from "../config/markdown-tables.js";
 import { loadWebMedia } from "../web/media.js";
-import { normalizeTelegramChatId, normalizeTelegramLookupTarget, parseTelegramTarget } from "./targets.js";
+import { recordChannelActivity } from "../infra/channel-activity.js";
 import { normalizePollInput } from "../polls.js";
 import { buildTelegramThreadParams } from "./bot/helpers.js";
-import { recordChannelActivity } from "../infra/channel-activity.js";
 import { isDiagnosticFlagEnabled } from "../infra/diagnostic-flags.js";
 import { createTelegramRetryRunner } from "../infra/retry-policy.js";
 import { withTelegramApiErrorLogging } from "./api-logging.js";

package/dist/telegram/token.js

@@ -1,6 +1,6 @@
 import { DEFAULT_ACCOUNT_ID, normalizeAccountId } from "../routing/account-id.js";
 import "../routing/session-key.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 
 //#region src/telegram/token.ts
 function resolveTelegramToken(cfg, opts = {}) {
@@ -21,7 +21,7 @@ function resolveTelegramToken(cfg, opts = {}) {
 	const accountCfg = resolveAccountCfg(accountId !== DEFAULT_ACCOUNT_ID ? accountId : DEFAULT_ACCOUNT_ID);
 	const accountTokenFile = accountCfg?.tokenFile?.trim();
 	if (accountTokenFile) {
-		if (!fs.existsSync(accountTokenFile)) {
+		if (!syncFs.existsSync(accountTokenFile)) {
 			opts.logMissingFile?.(`channels.telegram.accounts.${accountId}.tokenFile not found: ${accountTokenFile}`);
 			return {
 				token: "",
@@ -29,7 +29,7 @@ function resolveTelegramToken(cfg, opts = {}) {
 			};
 		}
 		try {
-			const token = fs.readFileSync(accountTokenFile, "utf-8").trim();
+			const token = syncFs.readFileSync(accountTokenFile, "utf-8").trim();
 			if (token) {
 				return {
 					token,
@@ -58,7 +58,7 @@ function resolveTelegramToken(cfg, opts = {}) {
 	const allowEnv = accountId === DEFAULT_ACCOUNT_ID;
 	const tokenFile = telegramCfg?.tokenFile?.trim();
 	if (tokenFile && allowEnv) {
-		if (!fs.existsSync(tokenFile)) {
+		if (!syncFs.existsSync(tokenFile)) {
 			opts.logMissingFile?.(`channels.telegram.tokenFile not found: ${tokenFile}`);
 			return {
 				token: "",
@@ -66,7 +66,7 @@ function resolveTelegramToken(cfg, opts = {}) {
 			};
 		}
 		try {
-			const token = fs.readFileSync(tokenFile, "utf-8").trim();
+			const token = syncFs.readFileSync(tokenFile, "utf-8").trim();
 			if (token) {
 				return {
 					token,

package/dist/telegram/webhook.js

@@ -1,8 +1,8 @@
 import { defaultRuntime } from "../runtime.js";
 import { formatErrorMessage } from "../infra/errors.js";
 import { isDiagnosticsEnabled } from "../infra/diagnostic-events.js";
-import { readJsonBodyWithLimit } from "../infra/http-body.js";
 import { logWebhookError, logWebhookProcessed, logWebhookReceived, startDiagnosticHeartbeat, stopDiagnosticHeartbeat } from "../logging/diagnostic.js";
+import { readJsonBodyWithLimit } from "../infra/http-body.js";
 import { withTelegramApiErrorLogging } from "./api-logging.js";
 import { resolveTelegramAllowedUpdates } from "./allowed-updates.js";
 import { createTelegramBot } from "./bot.js";

package/dist/tts/tts-core.js

@@ -1,7 +1,7 @@
 import { getApiKeyForModel, requireApiKey } from "../agents/model-auth.js";
 import { buildModelAliasIndex, resolveDefaultModelForAgent, resolveModelRefFromString } from "../agents/model-selection.js";
-import { resolveModel } from "../agents/pi-embedded-runner/model.js";
 import { importOptionalRuntimeDependency } from "../infra/optional-runtime-dependency.js";
+import { resolveModel } from "../agents/pi-embedded-runner/model.js";
 import { rmSync } from "node:fs";
 import { completeSimple } from "@mariozechner/pi-ai/compat";
 

package/dist/utils.js

@@ -2,20 +2,20 @@ import { expandHomePrefix, resolveEffectiveHomeDir, resolveRequiredHomeDir } fro
 import { resolveOAuthDir } from "./config/paths.js";
 import { logVerbose, shouldLogVerbose } from "./globals.js";
 import { isPlainObject } from "./infra/plain-object.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 
 //#region src/utils.ts
 async function ensureDir(dir) {
-	await fs.promises.mkdir(dir, { recursive: true });
+	await syncFs.promises.mkdir(dir, { recursive: true });
 }
 /**
 * Check if a file or directory exists at the given path.
 */
 async function pathExists(targetPath) {
 	try {
-		await fs.promises.access(targetPath);
+		await syncFs.promises.access(targetPath);
 		return true;
 	} catch {
 		return false;
@@ -129,7 +129,7 @@ function readLidReverseMapping(lid, opts) {
 	for (const dir of mappingDirs) {
 		const mappingPath = path.join(dir, mappingFilename);
 		try {
-			const data = fs.readFileSync(mappingPath, "utf8");
+			const data = syncFs.readFileSync(mappingPath, "utf8");
 			const phone = JSON.parse(data);
 			if (phone === null || phone === undefined) {
 				continue;
@@ -250,7 +250,7 @@ function resolveConfigDir(env = process.env, homedir = os.homedir) {
 	}
 	const newDir = path.join(resolveRequiredHomeDir(env, homedir), ".fased");
 	try {
-		const hasNew = fs.existsSync(newDir);
+		const hasNew = syncFs.existsSync(newDir);
 		if (hasNew) {
 			return newDir;
 		}

package/dist/video-generation/dashscope-compatible.js

@@ -1,5 +1,5 @@
-import { redactSensitiveUrl } from "../shared/net/redact-sensitive-url.js";
 import { fetchWithTimeout } from "../utils/fetch-timeout.js";
+import { redactSensitiveUrl } from "../shared/net/redact-sensitive-url.js";
 import { assertOkOrThrowHttpError } from "../media-understanding/providers/shared.js";
 
 //#region src/video-generation/dashscope-compatible.ts

package/dist/wallet/local-socket-signer-broker.js

@@ -1,8 +1,8 @@
-import { parseLocalSocketSignerRequest, parseLocalSocketSignerResponseEnvelope } from "./local-socket-signer-protocol.js";
-import { redactWalletDiagnosticText, walletDiagnosticErrorMessage } from "./wallet-redaction.js";
 import { resolveLocalSignerBackendSocketPath, resolveLocalSignerSidecarPaths, resolveLocalSignerSocketPath } from "./wallet-runtime-config.js";
+import { redactWalletDiagnosticText, walletDiagnosticErrorMessage } from "./wallet-redaction.js";
+import { parseLocalSocketSignerRequest, parseLocalSocketSignerResponseEnvelope } from "./local-socket-signer-protocol.js";
 import { requestJsonlSocket } from "../infra/jsonl-socket.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import net from "node:net";
 
@@ -34,15 +34,15 @@ function appendAuditLine(auditLog, entry, fileMode) {
 		return;
 	}
 	try {
-		fs.mkdirSync(path.dirname(auditLog), {
+		syncFs.mkdirSync(path.dirname(auditLog), {
 			recursive: true,
 			mode: fileMode === 432 ? 504 : 448
 		});
-		fs.appendFileSync(auditLog, `${JSON.stringify(entry)}\n`, {
+		syncFs.appendFileSync(auditLog, `${JSON.stringify(entry)}\n`, {
 			encoding: "utf8",
 			mode: 384
 		});
-		fs.chmodSync(auditLog, fileMode);
+		syncFs.chmodSync(auditLog, fileMode);
 	} catch {}
 }
 function writeJsonLine(socket, payload) {
@@ -138,12 +138,12 @@ function handleConnection(socket, options) {
 	});
 }
 function ensurePidLock(pidFile, fileMode) {
-	fs.mkdirSync(path.dirname(pidFile), {
+	syncFs.mkdirSync(path.dirname(pidFile), {
 		recursive: true,
 		mode: 448
 	});
-	if (fs.existsSync(pidFile)) {
-		const raw = fs.readFileSync(pidFile, "utf8").trim();
+	if (syncFs.existsSync(pidFile)) {
+		const raw = syncFs.readFileSync(pidFile, "utf8").trim();
 		const pid = Number.parseInt(raw, 10);
 		if (Number.isFinite(pid) && pid > 1) {
 			try {
@@ -151,20 +151,20 @@ function ensurePidLock(pidFile, fileMode) {
 				throw new Error(`signer broker already running (pid=${pid})`);
 			} catch (err) {
 				if (!(err instanceof Error) || !String(err.message).includes("already running")) {
-					fs.rmSync(pidFile, { force: true });
+					syncFs.rmSync(pidFile, { force: true });
 				} else {
 					throw err;
 				}
 			}
 		} else {
-			fs.rmSync(pidFile, { force: true });
+			syncFs.rmSync(pidFile, { force: true });
 		}
 	}
-	fs.writeFileSync(pidFile, `${process.pid}\n`, {
+	syncFs.writeFileSync(pidFile, `${process.pid}\n`, {
 		encoding: "utf8",
 		mode: fileMode
 	});
-	fs.chmodSync(pidFile, fileMode);
+	syncFs.chmodSync(pidFile, fileMode);
 }
 async function startLocalSocketSignerBroker(params) {
 	const env = process.env;
@@ -183,11 +183,11 @@ async function startLocalSocketSignerBroker(params) {
 		readOnly,
 		fileMode
 	};
-	fs.mkdirSync(path.dirname(socketPath), {
+	syncFs.mkdirSync(path.dirname(socketPath), {
 		recursive: true,
 		mode: fileMode === 432 ? 504 : 448
 	});
-	fs.rmSync(socketPath, { force: true });
+	syncFs.rmSync(socketPath, { force: true });
 	ensurePidLock(pidFile, fileMode);
 	const server = net.createServer((socket) => {
 		handleConnection(socket, options);
@@ -196,13 +196,13 @@ async function startLocalSocketSignerBroker(params) {
 		server.once("error", reject);
 		server.listen(socketPath, () => resolve());
 	});
-	fs.chmodSync(socketPath, fileMode);
+	syncFs.chmodSync(socketPath, fileMode);
 	const close = async () => {
 		await new Promise((resolve) => {
 			server.close(() => resolve());
 		});
-		fs.rmSync(socketPath, { force: true });
-		fs.rmSync(pidFile, { force: true });
+		syncFs.rmSync(socketPath, { force: true });
+		syncFs.rmSync(pidFile, { force: true });
 	};
 	const shutdown = () => {
 		void close().finally(() => process.exit(0));

package/dist/wallet/providers/embedded-keystore-adapter.js

@@ -1,9 +1,9 @@
 import { fetchSolanaMintInfoViaRpc } from "../solana-assets.js";
-import { buildCreateAssociatedTokenAccountIdempotentInstruction, buildTransferCheckedInstruction, deriveAssociatedTokenAddress, toTransactionInstruction } from "../solana-spl-transfer.js";
 import { WalletProviderError } from "../wallet-provider-adapter.js";
+import { buildCreateAssociatedTokenAccountIdempotentInstruction, buildTransferCheckedInstruction, deriveAssociatedTokenAddress, toTransactionInstruction } from "../solana-spl-transfer.js";
 import { walletDiagnosticErrorString } from "../wallet-redaction.js";
 import { createRequire } from "node:module";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import { createDecipheriv, randomUUID, scryptSync } from "node:crypto";
 
 //#region src/wallet/providers/embedded-keystore-adapter.ts
@@ -118,7 +118,7 @@ var EmbeddedKeystoreAdapter = class {
 				details: "missing embedded keystore config (FASED_WALLET_KEYSTORE_PATH, FASED_WALLET_PASSPHRASE, FASED_WALLET_[EMBEDDED_KEYSTORE_]RPC_URL)"
 			};
 		}
-		if (!fs.existsSync(this.keystorePath)) {
+		if (!syncFs.existsSync(this.keystorePath)) {
 			return {
 				ok: false,
 				provider: this.id,
@@ -128,7 +128,7 @@ var EmbeddedKeystoreAdapter = class {
 			};
 		}
 		try {
-			const raw = await fs.promises.readFile(this.keystorePath, "utf8");
+			const raw = await syncFs.promises.readFile(this.keystorePath, "utf8");
 			if (detectKeystoreType(raw) !== "solana-envelope") {
 				throw new Error("keystore file is not a Solana keystore envelope");
 			}
@@ -165,7 +165,7 @@ var EmbeddedKeystoreAdapter = class {
 			return result;
 		}
 		try {
-			const raw = await fs.promises.readFile(this.keystorePath, "utf8");
+			const raw = await syncFs.promises.readFile(this.keystorePath, "utf8");
 			const type = detectKeystoreType(raw);
 			if (type === "solana-envelope") {
 				if (this.supportsChain("solana")) {
@@ -375,7 +375,7 @@ var EmbeddedKeystoreAdapter = class {
 			});
 		}
 		this.solanaKeypairPromise ??= (async () => {
-			const raw = await fs.promises.readFile(this.keystorePath, "utf8");
+			const raw = await syncFs.promises.readFile(this.keystorePath, "utf8");
 			const envelope = parseSolanaKeystoreEnvelope(raw);
 			if (!envelope) {
 				throw new WalletProviderError({

package/dist/wallet/providers/local-socket-signer-adapter.js

@@ -1,10 +1,10 @@
+import { ensureWalletStateDir } from "../wallet-runtime-config.js";
 import { fetchSolanaMintInfoViaRpc } from "../solana-assets.js";
-import { parseLocalSocketSignerResponseEnvelope, validateLocalSocketSignerResult } from "../local-socket-signer-protocol.js";
-import { buildCreateAssociatedTokenAccountIdempotentInstruction, buildTransferCheckedInstruction, deriveAssociatedTokenAddress } from "../solana-spl-transfer.js";
 import { WalletProviderError } from "../wallet-provider-adapter.js";
+import { buildCreateAssociatedTokenAccountIdempotentInstruction, buildTransferCheckedInstruction, deriveAssociatedTokenAddress } from "../solana-spl-transfer.js";
 import { redactWalletDiagnosticText, walletDiagnosticErrorMessage, walletDiagnosticErrorString } from "../wallet-redaction.js";
-import { ensureWalletStateDir } from "../wallet-runtime-config.js";
-import fs from "node:fs";
+import { parseLocalSocketSignerResponseEnvelope, validateLocalSocketSignerResult } from "../local-socket-signer-protocol.js";
+import syncFs from "node:fs";
 import path from "node:path";
 import net from "node:net";
 
@@ -29,7 +29,7 @@ function signerTimeoutFor(payload) {
 function assertSecureLocalSignerSocket(socketPath) {
 	let stat;
 	try {
-		stat = fs.lstatSync(socketPath);
+		stat = syncFs.lstatSync(socketPath);
 	} catch (err) {
 		throw new WalletProviderError({
 			code: "wallet_provider_unavailable",

package/dist/wallet/wallet-approval-auth.js

@@ -1,5 +1,5 @@
 import { ensureWalletStateDir } from "./wallet-runtime-config.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import { createHash, createPublicKey, randomBytes, timingSafeEqual, verify } from "node:crypto";
 
@@ -163,7 +163,7 @@ function normalizeState(input) {
 }
 function loadState(env = process.env) {
 	const statePath = resolveStatePath(env);
-	if (!fs.existsSync(statePath)) {
+	if (!syncFs.existsSync(statePath)) {
 		return {
 			version: 2,
 			passkeys: [],
@@ -172,7 +172,7 @@ function loadState(env = process.env) {
 		};
 	}
 	try {
-		const raw = fs.readFileSync(statePath, "utf8");
+		const raw = syncFs.readFileSync(statePath, "utf8");
 		return normalizeState(JSON.parse(raw));
 	} catch {
 		return {
@@ -185,12 +185,12 @@ function loadState(env = process.env) {
 }
 function saveState(state, env = process.env) {
 	const statePath = resolveStatePath(env);
-	fs.writeFileSync(statePath, `${JSON.stringify(state, null, 2)}\n`, {
+	syncFs.writeFileSync(statePath, `${JSON.stringify(state, null, 2)}\n`, {
 		encoding: "utf8",
 		mode: 384
 	});
 	try {
-		fs.chmodSync(statePath, 384);
+		syncFs.chmodSync(statePath, 384);
 	} catch {}
 }
 function pruneState(state) {

package/dist/wallet/wallet-audit-log.js

@@ -1,5 +1,5 @@
 import { ensureWalletStateDir } from "./wallet-runtime-config.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import { randomBytes } from "node:crypto";
 
 //#region src/wallet/wallet-audit-log.ts
@@ -15,22 +15,22 @@ function appendWalletAuditEntry(params) {
 		actor: params.actor?.trim() || "system",
 		details: params.details ?? {}
 	};
-	fs.appendFileSync(paths.auditLogPath, `${JSON.stringify(entry)}\n`, {
+	syncFs.appendFileSync(paths.auditLogPath, `${JSON.stringify(entry)}\n`, {
 		encoding: "utf8",
 		mode: 384
 	});
 	try {
-		fs.chmodSync(paths.auditLogPath, 384);
+		syncFs.chmodSync(paths.auditLogPath, 384);
 	} catch {}
 	return entry;
 }
 function readWalletAuditEntries(params) {
 	const paths = ensureWalletStateDir(params?.env ?? process.env);
-	if (!fs.existsSync(paths.auditLogPath)) {
+	if (!syncFs.existsSync(paths.auditLogPath)) {
 		return [];
 	}
 	const limit = Math.max(1, Math.min(500, params?.limit ?? 100));
-	const raw = fs.readFileSync(paths.auditLogPath, "utf8");
+	const raw = syncFs.readFileSync(paths.auditLogPath, "utf8");
 	const lines = raw.split("\n").map((line) => line.trim()).filter(Boolean);
 	const out = [];
 	for (let i = lines.length - 1; i >= 0; i -= 1) {

package/dist/wallet/wallet-canary.js

@@ -1,5 +1,5 @@
-import { redactWalletDiagnosticText, walletDiagnosticErrorString } from "./wallet-redaction.js";
 import { readWalletProviderRegistry } from "./wallet-provider-registry.js";
+import { redactWalletDiagnosticText, walletDiagnosticErrorString } from "./wallet-redaction.js";
 import { createWalletProviderAdapter } from "./wallet-provider-resolver.js";
 import { readWalletAuditEntries } from "./wallet-audit-log.js";
 import { getWalletSettlementLinkByRequestId } from "./wallet-settlement-links.js";

package/dist/wallet/wallet-custody.js

@@ -1,12 +1,12 @@
-import { tryResolveSatRuntimeIds } from "../config/sat-runtime-ids.js";
-import { walletDiagnosticErrorMessage } from "./wallet-redaction.js";
 import { ensureWalletStateDir, resolveWalletRuntimeConfig } from "./wallet-runtime-config.js";
-import { lockLocalSignerCustody, unlockLocalSignerCustody } from "./local-socket-signer-custody.js";
-import { consumeWalletApprovalGrant, resolveWalletApprovalAuthMode } from "./wallet-approval-auth.js";
 import { readWalletProviderRegistry, resolveWalletUserRole } from "./wallet-provider-registry.js";
+import { tryResolveSatRuntimeIds } from "../config/sat-runtime-ids.js";
 import { applyWalletPolicyConfig, resolveWalletRolePolicyProfile } from "./wallet-policy.js";
+import { walletDiagnosticErrorMessage } from "./wallet-redaction.js";
 import { resolveWalletProviderId } from "./wallet-provider-resolver.js";
-import fs from "node:fs";
+import { consumeWalletApprovalGrant, resolveWalletApprovalAuthMode } from "./wallet-approval-auth.js";
+import { lockLocalSignerCustody, unlockLocalSignerCustody } from "./local-socket-signer-custody.js";
+import syncFs from "node:fs";
 import path from "node:path";
 import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
 
@@ -164,33 +164,33 @@ function resolveCustodyShareStatePath(walletId, env = process.env) {
 }
 function locateCustodyStatePath(walletId, env = process.env) {
 	const scopedPath = resolveCustodyStatePath(walletId, env);
-	if (fs.existsSync(scopedPath)) {
+	if (syncFs.existsSync(scopedPath)) {
 		return scopedPath;
 	}
 	const legacyPath = resolveLegacyCustodyStatePath(env);
-	return fs.existsSync(legacyPath) ? legacyPath : scopedPath;
+	return syncFs.existsSync(legacyPath) ? legacyPath : scopedPath;
 }
 function locateCustodyShareStatePath(walletId, env = process.env) {
 	const scopedPath = resolveCustodyShareStatePath(walletId, env);
-	if (fs.existsSync(scopedPath)) {
+	if (syncFs.existsSync(scopedPath)) {
 		return scopedPath;
 	}
 	const legacyPath = resolveLegacyCustodyShareStatePath(env);
-	return fs.existsSync(legacyPath) ? legacyPath : scopedPath;
+	return syncFs.existsSync(legacyPath) ? legacyPath : scopedPath;
 }
 function listCustodyStateTargets(env = process.env) {
 	const walletPaths = ensureWalletStateDir(env);
 	const custodyRoot = path.join(walletPaths.rootDir, "custody");
 	const targets = new Set();
-	if (fs.existsSync(custodyRoot)) {
-		for (const entry of fs.readdirSync(custodyRoot, { withFileTypes: true })) {
+	if (syncFs.existsSync(custodyRoot)) {
+		for (const entry of syncFs.readdirSync(custodyRoot, { withFileTypes: true })) {
 			if (entry.isDirectory() && entry.name.trim()) {
 				targets.add(entry.name.trim());
 			}
 		}
 	}
 	const out = [...targets];
-	if (fs.existsSync(resolveLegacyCustodyStatePath(env)) || out.length === 0) {
+	if (syncFs.existsSync(resolveLegacyCustodyStatePath(env)) || out.length === 0) {
 		out.push(undefined);
 	}
 	return out;
@@ -525,11 +525,11 @@ function resolveWalletCustodyScope(params) {
 }
 function loadShareState(walletId, env = process.env) {
 	const filePath = locateCustodyShareStatePath(walletId, env);
-	if (!fs.existsSync(filePath)) {
+	if (!syncFs.existsSync(filePath)) {
 		return null;
 	}
 	try {
-		const parsed = JSON.parse(fs.readFileSync(filePath, "utf8"));
+		const parsed = JSON.parse(syncFs.readFileSync(filePath, "utf8"));
 		if (parsed.version === 1 && parsed.scheme === "xor-3of3-v1" && typeof parsed.secretBytes === "number" && parsed.secretBytes > 0 && typeof parsed.hotShare === "string" && typeof parsed.coldShare === "string" && typeof parsed.deviceShareHash === "string" && typeof parsed.secretChecksum === "string" && typeof parsed.createdAt === "string" && typeof parsed.updatedAt === "string") {
 			const hot = decodeBase64Share(parsed.hotShare);
 			const cold = decodeBase64Share(parsed.coldShare);
@@ -596,16 +596,16 @@ function loadShareState(walletId, env = process.env) {
 }
 function saveShareState(state, walletId, env = process.env) {
 	const filePath = resolveCustodyShareStatePath(walletId, env);
-	fs.mkdirSync(path.dirname(filePath), {
+	syncFs.mkdirSync(path.dirname(filePath), {
 		recursive: true,
 		mode: 448
 	});
-	fs.writeFileSync(filePath, `${JSON.stringify(state, null, 2)}\n`, {
+	syncFs.writeFileSync(filePath, `${JSON.stringify(state, null, 2)}\n`, {
 		encoding: "utf8",
 		mode: 384
 	});
 	try {
-		fs.chmodSync(filePath, 384);
+		syncFs.chmodSync(filePath, 384);
 	} catch {}
 }
 function deleteWalletCustodyCeremony(params) {
@@ -620,11 +620,11 @@ function deleteWalletCustodyCeremony(params) {
 		role: "vault"
 	};
 	const statePath = locateCustodyShareStatePath(scope.walletId, env);
-	const existed = fs.existsSync(statePath);
+	const existed = syncFs.existsSync(statePath);
 	if (existed) {
-		fs.rmSync(statePath, { force: true });
+		syncFs.rmSync(statePath, { force: true });
 		try {
-			fs.rmdirSync(path.dirname(statePath));
+			syncFs.rmdirSync(path.dirname(statePath));
 		} catch {}
 	}
 	return {
@@ -1015,14 +1015,14 @@ function revokeWalletCustodyDevice(params) {
 }
 function loadState(walletId, env = process.env) {
 	const filePath = locateCustodyStatePath(walletId, env);
-	if (!fs.existsSync(filePath)) {
+	if (!syncFs.existsSync(filePath)) {
 		return {
 			version: 1,
 			unlockSessions: []
 		};
 	}
 	try {
-		const parsed = JSON.parse(fs.readFileSync(filePath, "utf8"));
+		const parsed = JSON.parse(syncFs.readFileSync(filePath, "utf8"));
 		if (parsed.version !== 1 || !Array.isArray(parsed.unlockSessions)) {
 			return {
 				version: 1,
@@ -1065,16 +1065,16 @@ function loadState(walletId, env = process.env) {
 }
 function saveState(state, walletId, env = process.env) {
 	const filePath = resolveCustodyStatePath(walletId, env);
-	fs.mkdirSync(path.dirname(filePath), {
+	syncFs.mkdirSync(path.dirname(filePath), {
 		recursive: true,
 		mode: 448
 	});
-	fs.writeFileSync(filePath, `${JSON.stringify(state, null, 2)}\n`, {
+	syncFs.writeFileSync(filePath, `${JSON.stringify(state, null, 2)}\n`, {
 		encoding: "utf8",
 		mode: 384
 	});
 	try {
-		fs.chmodSync(filePath, 384);
+		syncFs.chmodSync(filePath, 384);
 	} catch {}
 }
 function pruneState(state) {

package/dist/wallet/wallet-inbound-events.js

@@ -1,10 +1,10 @@
-import { walletDiagnosticErrorString } from "./wallet-redaction.js";
 import { ensureWalletStateDir } from "./wallet-runtime-config.js";
 import { readWalletProviderRegistry, resolveWalletSelection } from "./wallet-provider-registry.js";
+import { buildWalletProviderCapabilityMatrix, providerSupportsChainOperation } from "./wallet-provider-capabilities.js";
+import { walletDiagnosticErrorString } from "./wallet-redaction.js";
 import { createWalletProviderAdapter, resolveWalletProviderId } from "./wallet-provider-resolver.js";
 import { appendWalletAuditEntry, readWalletAuditEntries } from "./wallet-audit-log.js";
-import { buildWalletProviderCapabilityMatrix, providerSupportsChainOperation } from "./wallet-provider-capabilities.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import { randomBytes } from "node:crypto";
 
@@ -174,11 +174,11 @@ function normalizeLedger(raw) {
 }
 function readLedger(env = process.env) {
 	const filePath = inboundLedgerPath(env);
-	if (!fs.existsSync(filePath)) {
+	if (!syncFs.existsSync(filePath)) {
 		return defaultLedger();
 	}
 	try {
-		const parsed = JSON.parse(fs.readFileSync(filePath, "utf8"));
+		const parsed = JSON.parse(syncFs.readFileSync(filePath, "utf8"));
 		return normalizeLedger(parsed);
 	} catch {
 		return defaultLedger();
@@ -191,12 +191,12 @@ function writeLedger(ledger, env = process.env) {
 		version: 1,
 		updatedAt: nowIso()
 	};
-	fs.writeFileSync(filePath, `${JSON.stringify(payload, null, 2)}\n`, {
+	syncFs.writeFileSync(filePath, `${JSON.stringify(payload, null, 2)}\n`, {
 		encoding: "utf8",
 		mode: 384
 	});
 	try {
-		fs.chmodSync(filePath, 384);
+		syncFs.chmodSync(filePath, 384);
 	} catch {}
 }
 function findWalletById(env, walletId) {

package/dist/wallet/wallet-observability.js

@@ -1,5 +1,5 @@
 import { ensureWalletStateDir } from "./wallet-runtime-config.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 
 //#region src/wallet/wallet-observability.ts
 const OBSERVABILITY_FILENAME = "observability.v1.json";
@@ -37,11 +37,11 @@ function sanitizeBucket(input) {
 }
 function readSnapshot(env) {
 	const file = observabilityPath(env);
-	if (!fs.existsSync(file)) {
+	if (!syncFs.existsSync(file)) {
 		return makeDefaultSnapshot();
 	}
 	try {
-		const parsed = JSON.parse(fs.readFileSync(file, "utf8"));
+		const parsed = JSON.parse(syncFs.readFileSync(file, "utf8"));
 		if (parsed?.version !== 1) {
 			return makeDefaultSnapshot();
 		}
@@ -60,12 +60,12 @@ function readSnapshot(env) {
 }
 function writeSnapshot(env, snapshot) {
 	const file = observabilityPath(env);
-	fs.writeFileSync(file, `${JSON.stringify(snapshot, null, 2)}\n`, {
+	syncFs.writeFileSync(file, `${JSON.stringify(snapshot, null, 2)}\n`, {
 		mode: 384,
 		encoding: "utf8"
 	});
 	try {
-		fs.chmodSync(file, 384);
+		syncFs.chmodSync(file, 384);
 	} catch {}
 }
 function incrementWalletObservabilityCounter(params) {