@fased/fased 0.1.45 → 0.1.47

package/dist/web/inbound/access-control.js

@@ -3,11 +3,11 @@ import { isSelfChatMode, normalizeE164 } from "../../utils.js";
 import { loadConfig } from "../../config/io.js";
 import "../../config/config.js";
 import { resolveWhatsAppAccount } from "../accounts.js";
-import { redactIdentifier } from "../../logging/redact-identifier.js";
-import { upsertChannelPairingRequest } from "../../pairing/pairing-store.js";
 import { resolveDefaultGroupPolicy, resolveOpenProviderRuntimeGroupPolicy, warnMissingProviderGroupPolicyFallbackOnce } from "../../config/runtime-group-policy.js";
-import { buildPairingReply } from "../../pairing/pairing-messages.js";
+import { upsertChannelPairingRequest } from "../../pairing/pairing-store.js";
 import { readStoreAllowFromForDmPolicy, resolveDmGroupAccessWithLists } from "../../security/dm-policy-shared.js";
+import { redactIdentifier } from "../../logging/redact-identifier.js";
+import { buildPairingReply } from "../../pairing/pairing-messages.js";
 import { formatError } from "../session.js";
 
 //#region src/web/inbound/access-control.ts

package/dist/web/inbound/monitor.js

@@ -2,11 +2,11 @@ import { getChildLogger } from "../../logging/logger.js";
 import { logVerbose, shouldLogVerbose } from "../../globals.js";
 import { jidToE164, resolveJidToE164 } from "../../utils.js";
 import { createSubsystemLogger } from "../../logging/subsystem.js";
-import { saveMediaBuffer } from "../../media/store.js";
 import { redactIdentifier } from "../../logging/redact-identifier.js";
-import { formatLocationText } from "../../channels/location.js";
 import { createInboundDebouncer } from "../../auto-reply/inbound-debounce.js";
+import { saveMediaBuffer } from "../../media/store.js";
 import { recordChannelActivity } from "../../infra/channel-activity.js";
+import { formatLocationText } from "../../channels/location.js";
 import { createWaSocket, formatError, getStatusCode, waitForWaConnection } from "../session.js";
 import { isRecentInboundMessage } from "./dedupe.js";
 import { describeReplyContext, extractLocationData, extractMediaPlaceholder, extractMentionedJids, extractText } from "./extract.js";

package/dist/web/media.js

@@ -2,10 +2,10 @@ import { logVerbose, shouldLogVerbose } from "../globals.js";
 import { resolveUserPath } from "../utils.js";
 import { maxBytesForKind, mediaKindFromMime } from "../media/constants.js";
 import { detectMime, extensionForMime } from "../media/mime.js";
+import { convertHeicToJpeg, hasAlphaChannel, optimizeImageToPng, resizeToJpeg } from "../media/image-ops.js";
 import { SafeOpenError, readLocalFileSafely } from "../infra/fs-safe.js";
-import { getDefaultMediaLocalRoots } from "../media/local-roots.js";
 import { fetchRemoteMedia } from "../media/fetch.js";
-import { convertHeicToJpeg, hasAlphaChannel, optimizeImageToPng, resizeToJpeg } from "../media/image-ops.js";
+import { getDefaultMediaLocalRoots } from "../media/local-roots.js";
 import { fileURLToPath } from "node:url";
 import path from "node:path";
 import fs from "node:fs/promises";

package/dist/web/outbound.js

@@ -3,13 +3,13 @@ import { toWhatsappJid } from "../utils.js";
 import { createSubsystemLogger } from "../logging/subsystem.js";
 import { loadConfig } from "../config/io.js";
 import "../config/config.js";
-import { resolveMarkdownTableMode } from "../config/markdown-tables.js";
-import { loadWebMedia } from "./media.js";
 import { generateSecureUuid } from "../infra/secure-random.js";
 import { redactIdentifier } from "../logging/redact-identifier.js";
-import { normalizePollInput } from "../polls.js";
+import { resolveMarkdownTableMode } from "../config/markdown-tables.js";
 import { convertMarkdownTables } from "../markdown/tables.js";
+import { loadWebMedia } from "./media.js";
 import { requireActiveWebListener } from "./active-listener.js";
+import { normalizePollInput } from "../polls.js";
 import { markdownToWhatsApp } from "../markdown/whatsapp.js";
 import { formatError } from "./session.js";
 

package/dist/web/session.js

@@ -7,7 +7,7 @@ import { redactSensitiveText } from "../logging/redact.js";
 import "../logging.js";
 import { WA_WEB_AUTH_DIR, getWebAuthAgeMs, logWebSelfId, logoutWeb, maybeRestoreCredsFromBackup, pickWebChannel, readCredsJsonRaw, readWebSelfId, resolveDefaultWebAuthDir, resolveWebCredsBackupPath, resolveWebCredsPath, webAuthExists } from "./auth-store.js";
 import { redactSensitiveUrlLikeString } from "../shared/net/redact-sensitive-url.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import { randomUUID } from "node:crypto";
 import { DisconnectReason, fetchLatestBaileysVersion, makeCacheableSignalKeyStore, makeWASocket, useMultiFileAuthState } from "@whiskeysockets/baileys";
 import qrcode from "qrcode-terminal";
@@ -27,9 +27,9 @@ async function safeSaveCreds(authDir, saveCreds, logger) {
 		if (raw) {
 			try {
 				JSON.parse(raw);
-				fs.copyFileSync(credsPath, backupPath);
+				syncFs.copyFileSync(credsPath, backupPath);
 				try {
-					fs.chmodSync(backupPath, 384);
+					syncFs.chmodSync(backupPath, 384);
 				} catch {}
 			} catch {}
 		}
@@ -37,7 +37,7 @@ async function safeSaveCreds(authDir, saveCreds, logger) {
 	try {
 		await Promise.resolve(saveCreds());
 		try {
-			fs.chmodSync(resolveWebCredsPath(authDir), 384);
+			syncFs.chmodSync(resolveWebCredsPath(authDir), 384);
 		} catch {}
 	} catch (err) {
 		logger.warn({ error: formatError(err) }, "failed saving WhatsApp creds");

package/dist/wizard/host-security-capability.js

@@ -1,4 +1,4 @@
-import fs from "node:fs";
+import syncFs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { spawnSync } from "node:child_process";
@@ -24,7 +24,7 @@ function isHostedSecurityCapableSession(explicitFlag = false) {
 	const currentUser = currentUserName();
 	if (currentUser) {
 		const sudoersPath = path.join("/etc/sudoers.d", `fased-host-maintenance-${currentUser}`);
-		if (fs.existsSync(sudoersPath)) {
+		if (syncFs.existsSync(sudoersPath)) {
 			return true;
 		}
 	}

package/dist/wizard/onboarding.federation.js

@@ -1,5 +1,5 @@
-import { loadPersistedFederationToken } from "../federation/access-token.js";
 import { DEFAULT_FEDERATION_BASE_URL, resolveFederationBaseUrl, resolveFederationHandle } from "../federation/runtime.js";
+import { loadPersistedFederationToken } from "../federation/access-token.js";
 
 //#region src/wizard/onboarding.federation.ts
 async function configureFederationForOnboarding(params) {

package/dist/wizard/onboarding.finalize.js

@@ -6,22 +6,22 @@ import { enableTailscaleFunnel, enableTailscaleServe } from "../infra/tailscale.
 import { clearDeviceAuthStore } from "../infra/device-auth-store.js";
 import { readWalletProviderRegistry } from "../wallet/wallet-provider-registry.js";
 import { loadPersistedFederationToken } from "../federation/access-token.js";
-import { readWalletStatusSnapshot } from "../wallet/wallet-status.js";
+import { normalizeControlUiBasePath } from "../gateway/control-ui-shared.js";
+import { detectBrowserOpenSupport, formatControlUiSshHint, openUrl, probeGatewayReachable, resolveControlUiLinks, waitForGatewayReachable } from "../commands/onboard-helpers.js";
 import { runFederationAutoConnectOnce } from "../federation/auto-connect.js";
+import { waitForHostedDashboardBrowserPath } from "../commands/hosted-dashboard-probe.js";
+import { buildSystemdUnit } from "../daemon/systemd-unit.js";
+import { isSystemdUserServiceAvailable } from "../daemon/systemd.js";
+import { resolveGatewayService } from "../daemon/service.js";
+import { readWalletStatusSnapshot } from "../wallet/wallet-status.js";
 import { readManagedFederationTokenSummary } from "../managed/federation.js";
-import { normalizeControlUiBasePath } from "../gateway/control-ui-shared.js";
 import { CONTROL_UI_BOOT_CHECK_PATH } from "../gateway/control-ui-boot-check.js";
-import { detectBrowserOpenSupport, formatControlUiSshHint, openUrl, probeGatewayReachable, resolveControlUiLinks, waitForGatewayReachable } from "../commands/onboard-helpers.js";
 import { readManagedReservationSummaries } from "../managed/tunnel.js";
 import { resolveGatewayMaxOldSpaceMb } from "../daemon/service-env.js";
 import { buildGatewayInstallPlan, gatewayInstallErrorHint, resolveGatewayStartupMode, resolveHostedOnboardingGatewayStartupMode } from "../commands/daemon-install-helpers.js";
 import { DEFAULT_GATEWAY_DAEMON_RUNTIME, GATEWAY_DAEMON_RUNTIME_OPTIONS } from "../commands/daemon-runtime.js";
-import { buildSystemdUnit } from "../daemon/systemd-unit.js";
-import { isSystemdUserServiceAvailable } from "../daemon/systemd.js";
-import { resolveGatewayService } from "../daemon/service.js";
 import { SERVICE_AUDIT_CODES, auditGatewayServiceConfig } from "../daemon/service-audit.js";
 import { buildCapabilityReadinessReport, formatCapabilityReadinessSummary } from "../capabilities/catalog.js";
-import { waitForHostedDashboardBrowserPath } from "../commands/hosted-dashboard-probe.js";
 import { noteBullet, noteCommand, noteCommands, noteHeading, noteLabel, noteMuted, noteSuccess, noteWarn } from "./onboarding-note-format.js";
 import { describeOperatorReadinessChecklist } from "../operator/operator-readiness.js";
 import { runTui } from "../tui/tui.js";

package/dist/wizard/onboarding.host-security.js

@@ -2,7 +2,7 @@ import { redactSensitiveText } from "../logging/redact.js";
 import { redactSensitiveUrlLikeString } from "../shared/net/redact-sensitive-url.js";
 import { noteCommands, noteHeading, noteStep, noteWarn } from "./onboarding-note-format.js";
 import { isHostingProfile } from "./onboarding.types.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { spawn, spawnSync } from "node:child_process";
@@ -12,7 +12,7 @@ import { Buffer } from "node:buffer";
 function resolveHostSecurityLogPath() {
 	const home = process.env.HOME?.trim() || os.homedir();
 	const logDir = path.join(home, ".fased", "logs");
-	fs.mkdirSync(logDir, {
+	syncFs.mkdirSync(logDir, {
 		recursive: true,
 		mode: 448
 	});
@@ -26,7 +26,7 @@ function appendHostSecurityLog(logPath, title, detail) {
 		sanitizedDetail?.trim() || "(no output)",
 		""
 	].join("\n");
-	fs.appendFileSync(logPath, body, "utf8");
+	syncFs.appendFileSync(logPath, body, "utf8");
 }
 function resolveTailnetSshConfirmationPath() {
 	const stateDir = process.env.FASED_STATE_DIR?.trim() || process.env.FASED_CONFIG_DIR?.trim() || path.join(process.env.HOME?.trim() || os.homedir(), ".fased");
@@ -34,7 +34,7 @@ function resolveTailnetSshConfirmationPath() {
 }
 function hasStoredTailnetSshConfirmation(target) {
 	try {
-		const raw = fs.readFileSync(resolveTailnetSshConfirmationPath(), "utf8");
+		const raw = syncFs.readFileSync(resolveTailnetSshConfirmationPath(), "utf8");
 		const parsed = JSON.parse(raw);
 		return parsed.user === target.user && parsed.repoDir === target.repoDir;
 	} catch {
@@ -43,11 +43,11 @@ function hasStoredTailnetSshConfirmation(target) {
 }
 function writeTailnetSshConfirmation(target) {
 	const markerPath = resolveTailnetSshConfirmationPath();
-	fs.mkdirSync(path.dirname(markerPath), {
+	syncFs.mkdirSync(path.dirname(markerPath), {
 		recursive: true,
 		mode: 448
 	});
-	fs.writeFileSync(markerPath, `${JSON.stringify({
+	syncFs.writeFileSync(markerPath, `${JSON.stringify({
 		confirmedAt: new Date().toISOString(),
 		user: target.user,
 		host: target.host,
@@ -75,7 +75,7 @@ const HOST_MAINTENANCE_HELPER = "/usr/local/sbin/fased-host-maintenance";
 function detectTotalMemoryMb() {
 	if (process.platform === "linux") {
 		try {
-			const meminfo = fs.readFileSync("/proc/meminfo", "utf8");
+			const meminfo = syncFs.readFileSync("/proc/meminfo", "utf8");
 			const match = meminfo.match(/^MemTotal:\s+(\d+)\s+kB/m);
 			if (match?.[1]) {
 				return Math.floor(Number.parseInt(match[1], 10) / 1024);

package/dist/wizard/onboarding.js

@@ -8,9 +8,9 @@ import "../config/config.js";
 import "../agents/auth-profiles.js";
 import { ensureWalletStateDir, resolveLocalSignerBackendSocketPath, resolveLocalSignerMaterialRootDir, resolveLocalSignerRunAsUser, resolveLocalSignerSocketPath } from "../wallet/wallet-runtime-config.js";
 import { checkNamedWalletDeletionSafety, deleteNamedWallet, readWalletProviderRegistry, resolveWalletUserRole, setDefaultWallet, setNamedWalletRole, upsertNamedWallet } from "../wallet/wallet-provider-registry.js";
+import { DEFAULT_WORKSPACE, applyWizardMetadata, ensureWorkspaceAndSessions, handleOnboardingRepair, printWizardHeader, probeGatewayReachable, summarizeExistingConfig } from "../commands/onboard-helpers.js";
 import { configureWalletForOnboarding, installSignerdBinary, migrateLocalSignerKeystoreToMaterialDir, resolveSignerdBinaryPath, restartLocalSocketSigner } from "./onboarding.wallet.js";
 import { collectWalletSignerDoctorReport, walletSetupCommand } from "../commands/wallet.js";
-import { DEFAULT_WORKSPACE, applyWizardMetadata, ensureWorkspaceAndSessions, handleOnboardingRepair, printWizardHeader, probeGatewayReachable, summarizeExistingConfig } from "../commands/onboard-helpers.js";
 import { promptAuthChoiceGrouped } from "../commands/auth-choice-prompt.js";
 import { logConfigUpdated } from "../config/logging.js";
 import { applyAuthChoice } from "../commands/auth-choice.apply.js";
@@ -29,7 +29,7 @@ import { finalizeOnboardingWizard } from "./onboarding.finalize.js";
 import { configureGatewayForOnboarding } from "./onboarding.gateway-config.js";
 import { applyHostingSecurity } from "./onboarding.host-security.js";
 import { normalizeHostedWalletPaths } from "./wallet-path-migration.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import { spawn, spawnSync } from "node:child_process";
 
@@ -472,7 +472,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		const stateRoot = String(process.env.FASED_STATE_DIR ?? "").trim() || path.join(String(process.env.HOME ?? "").trim() || process.cwd(), ".fased");
 		const installRoot = path.join(stateRoot, "toolchains", `go${goVersion}`);
 		const goBin = path.join(installRoot, "bin", "go");
-		if (fs.existsSync(goBin)) {
+		if (syncFs.existsSync(goBin)) {
 			process.env.FASED_GO_BIN = goBin;
 			return goModernEnough() ? "installed" : "unavailable";
 		}
@@ -505,7 +505,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		if (String(process.env.FASED_FORCE_NATIVE_SIGNER_BUILD ?? "").trim() === "1") {
 			return false;
 		}
-		return fs.existsSync(resolveSignerdBinaryPath(process.env));
+		return syncFs.existsSync(resolveSignerdBinaryPath(process.env));
 	};
 	const maybeInstallGoForOnboarding = async () => {
 		if (goModernEnough()) {
@@ -539,7 +539,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		return goModernEnough();
 	};
 	const prepareLocalSignerForOnboarding = async (params) => {
-		if (fs.existsSync(params.binPath) || String(process.env.FASED_SKIP_NATIVE_SIGNER_BUILD ?? "").trim() === "1" || hasExplicitSignerAssetSource()) {
+		if (syncFs.existsSync(params.binPath) || String(process.env.FASED_SKIP_NATIVE_SIGNER_BUILD ?? "").trim() === "1" || hasExplicitSignerAssetSource()) {
 			return;
 		}
 		if (goModernEnough()) {
@@ -1092,8 +1092,8 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 						const configuredPaths = keystoreKeys.map((key) => (nextConfig.env?.vars?.[key] ?? "").trim() || String(process.env[key] ?? "").trim()).filter(Boolean);
 						for (const file of new Set([...configuredPaths, ...defaultKeystorePaths])) {
 							try {
-								if (file && fs.existsSync(file)) {
-									fs.rmSync(file, { force: true });
+								if (file && syncFs.existsSync(file)) {
+									syncFs.rmSync(file, { force: true });
 								}
 							} catch {}
 						}
@@ -1215,7 +1215,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 				process.env[rpcKey] = effectiveRpcUrl;
 				try {
 					let moveToSignerDir = false;
-					if (isolatedTargetKeystorePath && fs.existsSync(isolatedTargetKeystorePath)) {
+					if (isolatedTargetKeystorePath && syncFs.existsSync(isolatedTargetKeystorePath)) {
 						moveToSignerDir = await prompter.confirm({
 							message: "Signer keystore already exists. Overwrite it?",
 							initialValue: false

package/dist/wizard/onboarding.wallet.js

@@ -1,12 +1,12 @@
 import { loadConfig } from "../config/io.js";
 import "../config/config.js";
 import { ensureWalletStateDir, resolveLocalSignerBackendSocketPath, resolveLocalSignerMaterialRootDir, resolveLocalSignerRunAsUser, resolveLocalSignerSidecarPaths, resolveLocalSignerSocketPath, resolveWalletRuntimeConfig } from "../wallet/wallet-runtime-config.js";
-import { callLocalSocketSigner } from "../wallet/providers/local-socket-signer-adapter.js";
 import { WALLET_PROVIDER_IDS, readWalletProviderRegistry, setWalletProvidersEnabled } from "../wallet/wallet-provider-registry.js";
 import { applyWalletPolicyConfig, resolveWalletRoleForId } from "../wallet/wallet-policy.js";
+import { callLocalSocketSigner } from "../wallet/providers/local-socket-signer-adapter.js";
 import { resolveWalletProviderId } from "../wallet/wallet-provider-resolver.js";
 import { fileURLToPath } from "node:url";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import { execSync, spawn, spawnSync } from "node:child_process";
 import { randomBytes } from "node:crypto";
@@ -48,7 +48,7 @@ function runCommand(params) {
 }
 function isSignerdRunning(socketPath) {
 	try {
-		fs.statSync(socketPath);
+		syncFs.statSync(socketPath);
 		return true;
 	} catch {
 		return false;
@@ -77,7 +77,7 @@ async function sleep(ms) {
 }
 function readFileTail(filePath, maxLines = 20) {
 	try {
-		const text = fs.readFileSync(filePath, "utf8").trim();
+		const text = syncFs.readFileSync(filePath, "utf8").trim();
 		if (!text) {
 			return undefined;
 		}
@@ -159,7 +159,7 @@ async function readSignerdHealth(socketPath) {
 function resolveInstallScript() {
 	for (const rel of INSTALL_SCRIPT_RELPATHS) {
 		const abs = path.resolve(rel);
-		if (fs.existsSync(abs)) {
+		if (syncFs.existsSync(abs)) {
 			return abs;
 		}
 	}
@@ -168,7 +168,7 @@ function resolveInstallScript() {
 function resolveBuildScript() {
 	for (const rel of BUILD_SCRIPT_RELPATHS) {
 		const abs = path.resolve(rel);
-		if (fs.existsSync(abs)) {
+		if (syncFs.existsSync(abs)) {
 			return abs;
 		}
 	}
@@ -177,7 +177,7 @@ function resolveBuildScript() {
 function resolveBrokerCliPath() {
 	for (const rel of BROKER_CLI_RELPATHS) {
 		const candidate = fileURLToPath(new URL(rel, import.meta.url));
-		if (fs.existsSync(candidate)) {
+		if (syncFs.existsSync(candidate)) {
 			return candidate;
 		}
 	}
@@ -190,17 +190,17 @@ function resolveLocalSignerdReleaseBaseUrl(installScriptPath) {
 	const arch = process.arch === "arm64" ? "arm64" : "amd64";
 	const assetPath = path.join(releaseDir, `fased-signerd-${platform}-${arch}`);
 	const checksumsPath = path.join(releaseDir, "fased-signerd-checksums.txt");
-	if (!fs.existsSync(assetPath) || !fs.existsSync(checksumsPath)) {
+	if (!syncFs.existsSync(assetPath) || !syncFs.existsSync(checksumsPath)) {
 		return null;
 	}
 	return `file://${releaseDir}`;
 }
 function resolveGoBinary(env = process.env) {
 	const explicit = String(env.FASED_GO_BIN ?? "").trim();
-	if (explicit && fs.existsSync(explicit)) {
+	if (explicit && syncFs.existsSync(explicit)) {
 		return explicit;
 	}
-	if (fs.existsSync("/usr/local/go/bin/go")) {
+	if (syncFs.existsSync("/usr/local/go/bin/go")) {
 		return "/usr/local/go/bin/go";
 	}
 	const child = spawnSync("bash", ["-lc", "command -v go || true"], {
@@ -271,7 +271,7 @@ function runScriptOrThrow(params) {
 function copySignerdBinaryToTarget(params) {
 	const sourcePath = path.resolve(params.sourcePath);
 	const targetPath = path.resolve(params.targetPath);
-	if (!fs.existsSync(sourcePath)) {
+	if (!syncFs.existsSync(sourcePath)) {
 		throw new Error(`fased-signerd build completed but binary was not found at ${sourcePath}.`);
 	}
 	if (params.runAsUser) {
@@ -295,9 +295,9 @@ function copySignerdBinaryToTarget(params) {
 		}
 		return;
 	}
-	fs.mkdirSync(path.dirname(targetPath), { recursive: true });
-	fs.copyFileSync(sourcePath, targetPath);
-	fs.chmodSync(targetPath, 493);
+	syncFs.mkdirSync(path.dirname(targetPath), { recursive: true });
+	syncFs.copyFileSync(sourcePath, targetPath);
+	syncFs.chmodSync(targetPath, 493);
 }
 function buildSignerdBinaryFromSource(binPath) {
 	if (String(process.env.FASED_SKIP_NATIVE_SIGNER_BUILD ?? "").trim() === "1") {
@@ -353,7 +353,7 @@ function installSignerdBinaryFromExplicitAsset(binPath) {
 		throw new Error(detail || "fased-signerd install failed", { cause: err });
 	}
 	const installedPath = runAsUser ? stagingPath : binPath;
-	if (!fs.existsSync(installedPath)) {
+	if (!syncFs.existsSync(installedPath)) {
 		throw new Error(`fased-signerd install script ran but binary not found at ${binPath}.\n` + `Check install script output above for errors.`);
 	}
 	if (runAsUser && installedPath !== binPath) {
@@ -376,7 +376,7 @@ function installSignerdBinaryFromExplicitAsset(binPath) {
 			});
 		}
 	}
-	if (!fs.existsSync(binPath)) {
+	if (!syncFs.existsSync(binPath)) {
 		throw new Error(`fased-signerd install script completed but target binary not found at ${binPath}.\n` + `Check install script output above for errors.`);
 	}
 	return true;
@@ -434,7 +434,7 @@ function inferScopedSignerKeystoreEnv(materialDir, env) {
 			const solanaKey = `FASED_WALLET_SOLANA_KEYSTORE_PATH__${envSuffix}`;
 			if (!String(env[solanaKey] ?? "").trim()) {
 				const candidate = path.join(materialDir, `keystore-solana-${fileSuffix}.v1.enc`);
-				if (fs.existsSync(candidate)) {
+				if (syncFs.existsSync(candidate)) {
 					inferred[solanaKey] = candidate;
 				}
 			}
@@ -469,7 +469,7 @@ function resolveLocalSignerPassphraseSource(materialDir, env) {
 	const candidates = [configuredFile ? path.resolve(configuredFile) : "", path.join(materialDir, "passphrase")].filter(Boolean);
 	for (const candidate of candidates) {
 		try {
-			const value = fs.readFileSync(candidate, "utf8").trim();
+			const value = syncFs.readFileSync(candidate, "utf8").trim();
 			if (value) {
 				return {
 					kind: "file",
@@ -636,11 +636,11 @@ function writeLocalSignerEnvFile(params) {
 		...cfg.env?.vars
 	};
 	const signerEnvPath = path.resolve(ensureWalletStateDir(mergedEnv).rootDir, "signer.env");
-	fs.mkdirSync(path.dirname(signerEnvPath), {
+	syncFs.mkdirSync(path.dirname(signerEnvPath), {
 		recursive: true,
 		mode: 448
 	});
-	fs.writeFileSync(signerEnvPath, renderLocalSignerEnvFile({
+	syncFs.writeFileSync(signerEnvPath, renderLocalSignerEnvFile({
 		config: cfg,
 		env: mergedEnv
 	}), {
@@ -648,7 +648,7 @@ function writeLocalSignerEnvFile(params) {
 		mode: 384
 	});
 	try {
-		fs.chmodSync(signerEnvPath, 384);
+		syncFs.chmodSync(signerEnvPath, 384);
 	} catch {}
 	return signerEnvPath;
 }
@@ -690,7 +690,7 @@ function startSignerIsolationHelperBackground(runAsUser, args, logPath, env = pr
 	if (!helperArgs) {
 		return false;
 	}
-	const out = fs.openSync(logPath, "a", 384);
+	const out = syncFs.openSync(logPath, "a", 384);
 	const child = spawn("sudo", [
 		"-n",
 		"-E",
@@ -711,10 +711,10 @@ function startSignerIsolationHelperBackground(runAsUser, args, logPath, env = pr
 	return true;
 }
 function signerMaintenanceHelperArgs(runAsUser, args) {
-	if (fs.existsSync(SIGNER_MAINTENANCE_HELPER)) {
+	if (syncFs.existsSync(SIGNER_MAINTENANCE_HELPER)) {
 		return [SIGNER_MAINTENANCE_HELPER, ...args];
 	}
-	if (fs.existsSync(SIGNER_ISOLATION_HELPER)) {
+	if (syncFs.existsSync(SIGNER_ISOLATION_HELPER)) {
 		return [
 			SIGNER_ISOLATION_HELPER,
 			resolveCurrentUnixUser(),
@@ -769,16 +769,16 @@ function ensureLocalSignerPassphrase() {
 		const generated = existing.kind === "value" ? existing.value : randomBytes(24).toString("base64url");
 		const stagingDir = ensureWalletStateDir(process.env).rootDir;
 		const stagingPath = path.join(stagingDir, `.local-signer-passphrase-${process.pid}-${Date.now()}`);
-		fs.mkdirSync(path.dirname(stagingPath), {
+		syncFs.mkdirSync(path.dirname(stagingPath), {
 			recursive: true,
 			mode: 448
 		});
-		fs.writeFileSync(stagingPath, `${generated}\n`, {
+		syncFs.writeFileSync(stagingPath, `${generated}\n`, {
 			encoding: "utf8",
 			mode: 384
 		});
 		try {
-			fs.chmodSync(stagingPath, 384);
+			syncFs.chmodSync(stagingPath, 384);
 		} catch {}
 		let passphrasePath = path.join(materialDir, "passphrase");
 		try {
@@ -808,7 +808,7 @@ function ensureLocalSignerPassphrase() {
 			process.env.FASED_WALLET_PASSPHRASE = generated;
 		} catch (err) {
 			try {
-				fs.rmSync(stagingPath, { force: true });
+				syncFs.rmSync(stagingPath, { force: true });
 			} catch {}
 			const detail = err instanceof Error ? err.message : String(err);
 			if (!detail.includes("passphrase already exists")) {
@@ -826,16 +826,16 @@ function ensureLocalSignerPassphrase() {
 	}
 	const generated = randomBytes(24).toString("base64url");
 	const passphraseFile = path.join(materialDir, "passphrase");
-	fs.mkdirSync(path.dirname(passphraseFile), {
+	syncFs.mkdirSync(path.dirname(passphraseFile), {
 		recursive: true,
 		mode: 448
 	});
-	fs.writeFileSync(passphraseFile, `${generated}\n`, {
+	syncFs.writeFileSync(passphraseFile, `${generated}\n`, {
 		encoding: "utf8",
 		mode: 384
 	});
 	try {
-		fs.chmodSync(passphraseFile, 384);
+		syncFs.chmodSync(passphraseFile, 384);
 	} catch {}
 	process.env.FASED_WALLET_PASSPHRASE_FILE = passphraseFile;
 	delete process.env.FASED_WALLET_PASSPHRASE;
@@ -887,8 +887,8 @@ function startSignerdBackground(binPath, socketPath, materialDir, env = process.
 			throw new Error(`failed to launch isolated signer as ${runAsUser}: ${err instanceof Error ? err.message : String(err)}`, { cause: err });
 		}
 	}
-	const out = fs.openSync(logPath, "a", 384);
-	const err = fs.openSync(logPath, "a", 384);
+	const out = syncFs.openSync(logPath, "a", 384);
+	const err = syncFs.openSync(logPath, "a", 384);
 	const child = spawn(binPath, [
 		"-socket",
 		socketPath,
@@ -964,7 +964,7 @@ function stopProcessBySocket(socketPath, runAsUser) {
 	}
 	for (const candidatePidPath of pidPaths) {
 		try {
-			const pid = Number.parseInt(fs.readFileSync(candidatePidPath, "utf8").trim(), 10);
+			const pid = Number.parseInt(syncFs.readFileSync(candidatePidPath, "utf8").trim(), 10);
 			if (Number.isFinite(pid) && pid > 0) {
 				try {
 					const command = readProcessCommand(pid);
@@ -975,16 +975,16 @@ function stopProcessBySocket(socketPath, runAsUser) {
 			}
 		} catch {}
 		try {
-			fs.unlinkSync(candidatePidPath);
+			syncFs.unlinkSync(candidatePidPath);
 		} catch {}
 	}
 	try {
-		fs.unlinkSync(socketPath);
+		syncFs.unlinkSync(socketPath);
 	} catch {}
 }
 function readProcessCommand(pid) {
 	try {
-		const cmdline = fs.readFileSync(`/proc/${pid}/cmdline`, "utf8").replaceAll("\0", " ").trim();
+		const cmdline = syncFs.readFileSync(`/proc/${pid}/cmdline`, "utf8").replaceAll("\0", " ").trim();
 		if (cmdline) {
 			return cmdline;
 		}
@@ -1050,8 +1050,8 @@ function startSignerBrokerBackground(appSocketPath, backendSocketPath, materialD
 			throw new Error(`failed to launch isolated signer broker as ${runAsUser}: ${err instanceof Error ? err.message : String(err)}`, { cause: err });
 		}
 	}
-	const out = fs.openSync(logPath, "a", 384);
-	const err = fs.openSync(logPath, "a", 384);
+	const out = syncFs.openSync(logPath, "a", 384);
+	const err = syncFs.openSync(logPath, "a", 384);
 	const child = spawn(process.execPath, [
 		brokerCli,
 		"wallet",
@@ -1087,7 +1087,7 @@ async function restartLocalSocketSigner(walletDir, env = process.env) {
 	const binPath = resolveSignerdBinaryPath(env);
 	const materialDir = resolveLocalSignerMaterialRootDir(env);
 	const runAsUser = resolveLocalSignerRunAsUser(env);
-	if (!fs.existsSync(binPath)) {
+	if (!syncFs.existsSync(binPath)) {
 		return;
 	}
 	stopProcessBySocket(socketPath, runAsUser);
@@ -1130,7 +1130,7 @@ async function syncLocalSocketSignerFromConfig(params) {
 		env: mergedEnv
 	});
 	const binPath = resolveSignerdBinaryPath(mergedEnv);
-	if (!fs.existsSync(binPath)) {
+	if (!syncFs.existsSync(binPath)) {
 		installSignerdBinary(binPath);
 	}
 	if (params?.restart === false) {
@@ -1159,7 +1159,7 @@ function migrateLocalSignerKeystoreToMaterialDir(params) {
 		return targetPath;
 	}
 	ensureIsolatedSignerPaths(materialDir, resolveLocalSignerBackendSocketPath(process.env), resolveLocalSignerSocketPath(process.env), runAsUser);
-	if (fs.existsSync(targetPath) && !params.force) {
+	if (syncFs.existsSync(targetPath) && !params.force) {
 		throw new Error(`Keystore already exists: ${targetPath}`);
 	}
 	if (runSignerIsolationHelper(runAsUser, [
@@ -1257,7 +1257,7 @@ function hasConfiguredWalletMaterial(params) {
 	}
 	try {
 		const walletDir = ensureWalletStateDir(mergedEnv).rootDir;
-		return fs.readdirSync(walletDir).some((entry) => /^keystore-solana(?:-[A-Za-z0-9_-]+)?\.v1\.enc$/.test(entry) || /^keystore-evm(?:-[A-Za-z0-9_-]+)?\.v1\.enc$/.test(entry));
+		return syncFs.readdirSync(walletDir).some((entry) => /^keystore-solana(?:-[A-Za-z0-9_-]+)?\.v1\.enc$/.test(entry) || /^keystore-evm(?:-[A-Za-z0-9_-]+)?\.v1\.enc$/.test(entry));
 	} catch {
 		return false;
 	}
@@ -1356,12 +1356,12 @@ async function configureWalletForOnboarding(params) {
 		const binPath = resolveSignerdBinaryPath(process.env);
 		const runAsUser = resolveLocalSignerRunAsUser(process.env);
 		ensureLocalSignerPassphrase();
-		if (!fs.existsSync(binPath)) {
+		if (!syncFs.existsSync(binPath)) {
 			if (!quietSignerNotes) {
 				await prompter.note([`fased-signerd not found at: ${binPath}`, "Building fased-signerd locally when Go is available, or using an explicitly configured signer asset."].join("\n"), "Local socket signer");
 			}
 			await params.prepareLocalSigner?.({ binPath });
-			if (!fs.existsSync(binPath)) {
+			if (!syncFs.existsSync(binPath)) {
 				installSignerdBinary(binPath);
 			}
 			if (!quietSignerNotes) {

package/extensions/acpx/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/acpx",
-  "version": "0.1.45",
+  "version": "0.1.47",
   "description": "FasedAgent ACP runtime backend via acpx",
   "type": "module",
   "dependencies": {

package/extensions/bluebubbles/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/bluebubbles",
-  "version": "0.1.45",
+  "version": "0.1.47",
   "description": "FasedAgent BlueBubbles channel plugin",
   "type": "module",
   "fased": {

package/extensions/copilot-proxy/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/copilot-proxy",
-  "version": "0.1.45",
+  "version": "0.1.47",
   "private": true,
   "description": "FasedAgent Copilot Proxy provider plugin",
   "type": "module",

package/extensions/diagnostics-otel/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/diagnostics-otel",
-  "version": "0.1.45",
+  "version": "0.1.47",
   "description": "FasedAgent diagnostics OpenTelemetry exporter",
   "type": "module",
   "dependencies": {

package/extensions/fased-federation/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fased/fased-federation",
-  "version": "0.1.45",
+  "version": "0.1.47",
   "private": true,
   "description": "Fased federation adapter package scaffold (A2A + admission helpers)",
   "type": "module",