@fased/fased 0.1.46 → 0.1.47

package/dist/web/accounts.js

@@ -5,7 +5,7 @@ import "../routing/session-key.js";
 import { resolveAccountEntry } from "../routing/account-lookup.js";
 import { createAccountListHelpers } from "../channels/plugins/account-helpers.js";
 import { hasWebCredsSync } from "./auth-store.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/web/accounts.ts
@@ -24,7 +24,7 @@ function listWhatsAppAuthDirs(cfg) {
 		}).authDir);
 	}
 	try {
-		const entries = fs.readdirSync(whatsappDir, { withFileTypes: true });
+		const entries = syncFs.readdirSync(whatsappDir, { withFileTypes: true });
 		for (const entry of entries) {
 			if (!entry.isDirectory()) {
 				continue;
@@ -48,7 +48,7 @@ function resolveLegacyAuthDir() {
 }
 function legacyAuthExists(authDir) {
 	try {
-		return fs.existsSync(path.join(authDir, "creds.json"));
+		return syncFs.existsSync(path.join(authDir, "creds.json"));
 	} catch {
 		return false;
 	}

package/dist/web/auth-store.js

@@ -4,10 +4,10 @@ import { info, success } from "../globals.js";
 import { defaultRuntime } from "../runtime.js";
 import { formatCliCommand } from "../cli/command-format.js";
 import "../logging.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import fs$1 from "node:fs/promises";
+import fs from "node:fs/promises";
 
 //#region src/web/auth-store.ts
 const DEFAULT_WEB_AUTH_ACCOUNT_ID = "default";
@@ -65,7 +65,7 @@ function readAuthStoreLidReverseMapping(lid, opts) {
 	for (const dir of dirs) {
 		const mappingPath = path.join(dir, mappingFilename);
 		try {
-			const data = fs.readFileSync(mappingPath, "utf8");
+			const data = syncFs.readFileSync(mappingPath, "utf8");
 			const phone = JSON.parse(data);
 			if (phone !== null && phone !== undefined) {
 				return normalizeAuthStoreE164(String(phone));
@@ -97,7 +97,7 @@ function resolveWebCredsBackupPath(authDir) {
 }
 function hasWebCredsSync(authDir) {
 	try {
-		const stats = fs.statSync(resolveWebCredsPath(authDir));
+		const stats = syncFs.statSync(resolveWebCredsPath(authDir));
 		return stats.isFile() && stats.size > 1;
 	} catch {
 		return false;
@@ -105,14 +105,14 @@ function hasWebCredsSync(authDir) {
 }
 function readCredsJsonRaw(filePath) {
 	try {
-		if (!fs.existsSync(filePath)) {
+		if (!syncFs.existsSync(filePath)) {
 			return null;
 		}
-		const stats = fs.statSync(filePath);
+		const stats = syncFs.statSync(filePath);
 		if (!stats.isFile() || stats.size <= 1) {
 			return null;
 		}
-		return fs.readFileSync(filePath, "utf-8");
+		return syncFs.readFileSync(filePath, "utf-8");
 	} catch {
 		return null;
 	}
@@ -132,9 +132,9 @@ function maybeRestoreCredsFromBackup(authDir) {
 			return;
 		}
 		JSON.parse(backupRaw);
-		fs.copyFileSync(backupPath, credsPath);
+		syncFs.copyFileSync(backupPath, credsPath);
 		try {
-			fs.chmodSync(credsPath, 384);
+			syncFs.chmodSync(credsPath, 384);
 		} catch {}
 		logger.warn({ credsPath }, "restored corrupted WhatsApp creds.json from backup");
 	} catch {}
@@ -144,16 +144,16 @@ async function webAuthExists(authDir = resolveDefaultWebAuthDir()) {
 	maybeRestoreCredsFromBackup(resolvedAuthDir);
 	const credsPath = resolveWebCredsPath(resolvedAuthDir);
 	try {
-		await fs$1.access(resolvedAuthDir);
+		await fs.access(resolvedAuthDir);
 	} catch {
 		return false;
 	}
 	try {
-		const stats = await fs$1.stat(credsPath);
+		const stats = await fs.stat(credsPath);
 		if (!stats.isFile() || stats.size <= 1) {
 			return false;
 		}
-		const raw = await fs$1.readFile(credsPath, "utf-8");
+		const raw = await fs.readFile(credsPath, "utf-8");
 		JSON.parse(raw);
 		return true;
 	} catch {
@@ -161,7 +161,7 @@ async function webAuthExists(authDir = resolveDefaultWebAuthDir()) {
 	}
 }
 async function clearLegacyBaileysAuthState(authDir) {
-	const entries = await fs$1.readdir(authDir, { withFileTypes: true });
+	const entries = await fs.readdir(authDir, { withFileTypes: true });
 	const shouldDelete = (name) => {
 		if (name === "oauth.json") {
 			return false;
@@ -181,7 +181,7 @@ async function clearLegacyBaileysAuthState(authDir) {
 		if (!shouldDelete(entry.name)) {
 			return;
 		}
-		await fs$1.rm(path.join(authDir, entry.name), { force: true });
+		await fs.rm(path.join(authDir, entry.name), { force: true });
 	}));
 }
 async function logoutWeb(params) {
@@ -195,7 +195,7 @@ async function logoutWeb(params) {
 	if (params.isLegacyAuthDir) {
 		await clearLegacyBaileysAuthState(resolvedAuthDir);
 	} else {
-		await fs$1.rm(resolvedAuthDir, {
+		await fs.rm(resolvedAuthDir, {
 			recursive: true,
 			force: true
 		});
@@ -206,13 +206,13 @@ async function logoutWeb(params) {
 function readWebSelfId(authDir = resolveDefaultWebAuthDir()) {
 	try {
 		const credsPath = resolveWebCredsPath(resolveAuthStoreUserPath(authDir));
-		if (!fs.existsSync(credsPath)) {
+		if (!syncFs.existsSync(credsPath)) {
 			return {
 				e164: null,
 				jid: null
 			};
 		}
-		const raw = fs.readFileSync(credsPath, "utf-8");
+		const raw = syncFs.readFileSync(credsPath, "utf-8");
 		const parsed = JSON.parse(raw);
 		const jid = parsed?.me?.id ?? null;
 		const e164 = jid ? jidToE164ForAuthStore(jid, { authDir }) : null;
@@ -233,7 +233,7 @@ function readWebSelfId(authDir = resolveDefaultWebAuthDir()) {
 */
 function getWebAuthAgeMs(authDir = resolveDefaultWebAuthDir()) {
 	try {
-		const stats = fs.statSync(resolveWebCredsPath(resolveAuthStoreUserPath(authDir)));
+		const stats = syncFs.statSync(resolveWebCredsPath(resolveAuthStoreUserPath(authDir)));
 		return Date.now() - stats.mtimeMs;
 	} catch {
 		return null;

package/dist/web/auto-reply/deliver-reply.js

@@ -1,10 +1,10 @@
 import { logVerbose, shouldLogVerbose } from "../../globals.js";
 import { sleep } from "../../utils.js";
 import { redactSensitiveUrlLikeString } from "../../shared/net/redact-sensitive-url.js";
-import { chunkMarkdownTextWithMode } from "../../auto-reply/chunk.js";
-import { loadWebMedia } from "../media.js";
 import { redactIdentifier } from "../../logging/redact-identifier.js";
+import { chunkMarkdownTextWithMode } from "../../auto-reply/chunk.js";
 import { convertMarkdownTables } from "../../markdown/tables.js";
+import { loadWebMedia } from "../media.js";
 import { markdownToWhatsApp } from "../../markdown/whatsapp.js";
 import { formatError } from "../session.js";
 import { newConnectionId } from "../reconnect.js";

package/dist/web/auto-reply/heartbeat-runner.js

@@ -11,12 +11,12 @@ import { HEARTBEAT_TOKEN } from "../../auto-reply/tokens.js";
 import { DEFAULT_HEARTBEAT_ACK_MAX_CHARS, resolveHeartbeatPrompt, stripHeartbeatToken } from "../../auto-reply/heartbeat.js";
 import { redactIdentifier } from "../../logging/redact-identifier.js";
 import { appendCronStyleCurrentTimeLine } from "../../agents/current-time.js";
-import { getReplyFromConfig } from "../../auto-reply/reply/get-reply.js";
-import "../../auto-reply/reply.js";
 import { resolveHeartbeatReplyPayload } from "../../auto-reply/heartbeat-reply-payload.js";
-import { resolveWhatsAppHeartbeatRecipients } from "../../channels/plugins/whatsapp-heartbeat.js";
 import { emitHeartbeatEvent, resolveIndicatorType } from "../../infra/heartbeat-events.js";
 import { resolveHeartbeatVisibility } from "../../infra/heartbeat-visibility.js";
+import { getReplyFromConfig } from "../../auto-reply/reply/get-reply.js";
+import "../../auto-reply/reply.js";
+import { resolveWhatsAppHeartbeatRecipients } from "../../channels/plugins/whatsapp-heartbeat.js";
 import { formatError } from "../session.js";
 import { sendMessageWhatsApp } from "../outbound.js";
 import { newConnectionId } from "../reconnect.js";

package/dist/web/auto-reply/monitor/group-gating.js

@@ -1,8 +1,8 @@
 import { normalizeE164 } from "../../../utils.js";
-import { parseActivationCommand } from "../../../auto-reply/group-activation.js";
 import { hasControlCommand } from "../../../auto-reply/command-detection.js";
 import { recordPendingHistoryEntryIfEnabled } from "../../../auto-reply/reply/history.js";
 import { resolveMentionGating } from "../../../channels/mention-gating.js";
+import { parseActivationCommand } from "../../../auto-reply/group-activation.js";
 import { buildMentionConfig, debugMention, resolveOwnerList } from "../mentions.js";
 import { stripMentionsForCommand } from "./commands.js";
 import { resolveGroupActivationFor, resolveGroupPolicyFor } from "./group-activation.js";

package/dist/web/auto-reply/monitor/process-message.js

@@ -5,17 +5,17 @@ import { resolveStorePath } from "../../../config/sessions/paths.js";
 import { readSessionUpdatedAt, recordSessionMetaFromInbound } from "../../../config/sessions/store.js";
 import "../../../config/sessions.js";
 import { finalizeInboundContext } from "../../../auto-reply/reply/inbound-context.js";
+import { readStoreAllowFromForDmPolicy, resolveDmGroupAccessWithCommandGate } from "../../../security/dm-policy-shared.js";
 import { resolveIdentityNamePrefix } from "../../../agents/identity.js";
 import { resolveChunkMode, resolveTextChunkLimit } from "../../../auto-reply/chunk.js";
-import { resolveMarkdownTableMode } from "../../../config/markdown-tables.js";
-import { getAgentScopedMediaLocalRoots } from "../../../media/local-roots.js";
-import { toLocationContext } from "../../../channels/location.js";
 import { shouldComputeCommandAuthorized } from "../../../auto-reply/command-detection.js";
 import { formatInboundEnvelope, resolveEnvelopeFormatOptions } from "../../../auto-reply/envelope.js";
 import { dispatchReplyWithBufferedBlockDispatcher } from "../../../auto-reply/reply/provider-dispatcher.js";
+import { resolveMarkdownTableMode } from "../../../config/markdown-tables.js";
 import { buildHistoryContextFromEntries } from "../../../auto-reply/reply/history.js";
 import { createReplyPrefixOptions } from "../../../channels/reply-prefix.js";
-import { readStoreAllowFromForDmPolicy, resolveDmGroupAccessWithCommandGate } from "../../../security/dm-policy-shared.js";
+import { getAgentScopedMediaLocalRoots } from "../../../media/local-roots.js";
+import { toLocationContext } from "../../../channels/location.js";
 import { formatError } from "../../session.js";
 import { newConnectionId } from "../../reconnect.js";
 import { whatsappInboundLog, whatsappOutboundLog } from "../loggers.js";

package/dist/web/auto-reply/monitor.js

@@ -7,15 +7,15 @@ import "../../config/config.js";
 import "../../logging.js";
 import { getWebAuthAgeMs, readWebSelfId } from "../auth-store.js";
 import { resolveWhatsAppAccount } from "../accounts.js";
-import { enqueueSystemEvent } from "../../infra/system-events.js";
-import { formatDurationPrecise } from "../../infra/format-time/format-duration.js";
-import { resolveAgentRoute } from "../../routing/resolve-route.js";
-import { registerUnhandledRejectionHandler } from "../../infra/unhandled-rejections.js";
 import { hasControlCommand } from "../../auto-reply/command-detection.js";
 import { resolveInboundDebounceMs } from "../../auto-reply/inbound-debounce.js";
 import { DEFAULT_GROUP_HISTORY_LIMIT } from "../../auto-reply/reply/history.js";
 import { computeBackoff, sleepWithAbort } from "../../infra/backoff.js";
+import { resolveAgentRoute } from "../../routing/resolve-route.js";
+import { enqueueSystemEvent } from "../../infra/system-events.js";
 import { setActiveWebListener } from "../active-listener.js";
+import { formatDurationPrecise } from "../../infra/format-time/format-duration.js";
+import { registerUnhandledRejectionHandler } from "../../infra/unhandled-rejections.js";
 import { getReplyFromConfig } from "../../auto-reply/reply/get-reply.js";
 import "../../auto-reply/reply.js";
 import { DEFAULT_WEB_MEDIA_BYTES } from "./constants.js";

package/dist/web/inbound/access-control.js

@@ -3,11 +3,11 @@ import { isSelfChatMode, normalizeE164 } from "../../utils.js";
 import { loadConfig } from "../../config/io.js";
 import "../../config/config.js";
 import { resolveWhatsAppAccount } from "../accounts.js";
-import { redactIdentifier } from "../../logging/redact-identifier.js";
-import { upsertChannelPairingRequest } from "../../pairing/pairing-store.js";
 import { resolveDefaultGroupPolicy, resolveOpenProviderRuntimeGroupPolicy, warnMissingProviderGroupPolicyFallbackOnce } from "../../config/runtime-group-policy.js";
-import { buildPairingReply } from "../../pairing/pairing-messages.js";
+import { upsertChannelPairingRequest } from "../../pairing/pairing-store.js";
 import { readStoreAllowFromForDmPolicy, resolveDmGroupAccessWithLists } from "../../security/dm-policy-shared.js";
+import { redactIdentifier } from "../../logging/redact-identifier.js";
+import { buildPairingReply } from "../../pairing/pairing-messages.js";
 import { formatError } from "../session.js";
 
 //#region src/web/inbound/access-control.ts

package/dist/web/inbound/monitor.js

@@ -2,11 +2,11 @@ import { getChildLogger } from "../../logging/logger.js";
 import { logVerbose, shouldLogVerbose } from "../../globals.js";
 import { jidToE164, resolveJidToE164 } from "../../utils.js";
 import { createSubsystemLogger } from "../../logging/subsystem.js";
-import { saveMediaBuffer } from "../../media/store.js";
 import { redactIdentifier } from "../../logging/redact-identifier.js";
-import { formatLocationText } from "../../channels/location.js";
 import { createInboundDebouncer } from "../../auto-reply/inbound-debounce.js";
+import { saveMediaBuffer } from "../../media/store.js";
 import { recordChannelActivity } from "../../infra/channel-activity.js";
+import { formatLocationText } from "../../channels/location.js";
 import { createWaSocket, formatError, getStatusCode, waitForWaConnection } from "../session.js";
 import { isRecentInboundMessage } from "./dedupe.js";
 import { describeReplyContext, extractLocationData, extractMediaPlaceholder, extractMentionedJids, extractText } from "./extract.js";

package/dist/web/media.js

@@ -2,10 +2,10 @@ import { logVerbose, shouldLogVerbose } from "../globals.js";
 import { resolveUserPath } from "../utils.js";
 import { maxBytesForKind, mediaKindFromMime } from "../media/constants.js";
 import { detectMime, extensionForMime } from "../media/mime.js";
+import { convertHeicToJpeg, hasAlphaChannel, optimizeImageToPng, resizeToJpeg } from "../media/image-ops.js";
 import { SafeOpenError, readLocalFileSafely } from "../infra/fs-safe.js";
-import { getDefaultMediaLocalRoots } from "../media/local-roots.js";
 import { fetchRemoteMedia } from "../media/fetch.js";
-import { convertHeicToJpeg, hasAlphaChannel, optimizeImageToPng, resizeToJpeg } from "../media/image-ops.js";
+import { getDefaultMediaLocalRoots } from "../media/local-roots.js";
 import { fileURLToPath } from "node:url";
 import path from "node:path";
 import fs from "node:fs/promises";

package/dist/web/outbound.js

@@ -3,13 +3,13 @@ import { toWhatsappJid } from "../utils.js";
 import { createSubsystemLogger } from "../logging/subsystem.js";
 import { loadConfig } from "../config/io.js";
 import "../config/config.js";
-import { resolveMarkdownTableMode } from "../config/markdown-tables.js";
-import { loadWebMedia } from "./media.js";
 import { generateSecureUuid } from "../infra/secure-random.js";
 import { redactIdentifier } from "../logging/redact-identifier.js";
-import { normalizePollInput } from "../polls.js";
+import { resolveMarkdownTableMode } from "../config/markdown-tables.js";
 import { convertMarkdownTables } from "../markdown/tables.js";
+import { loadWebMedia } from "./media.js";
 import { requireActiveWebListener } from "./active-listener.js";
+import { normalizePollInput } from "../polls.js";
 import { markdownToWhatsApp } from "../markdown/whatsapp.js";
 import { formatError } from "./session.js";
 

package/dist/web/session.js

@@ -7,7 +7,7 @@ import { redactSensitiveText } from "../logging/redact.js";
 import "../logging.js";
 import { WA_WEB_AUTH_DIR, getWebAuthAgeMs, logWebSelfId, logoutWeb, maybeRestoreCredsFromBackup, pickWebChannel, readCredsJsonRaw, readWebSelfId, resolveDefaultWebAuthDir, resolveWebCredsBackupPath, resolveWebCredsPath, webAuthExists } from "./auth-store.js";
 import { redactSensitiveUrlLikeString } from "../shared/net/redact-sensitive-url.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import { randomUUID } from "node:crypto";
 import { DisconnectReason, fetchLatestBaileysVersion, makeCacheableSignalKeyStore, makeWASocket, useMultiFileAuthState } from "@whiskeysockets/baileys";
 import qrcode from "qrcode-terminal";
@@ -27,9 +27,9 @@ async function safeSaveCreds(authDir, saveCreds, logger) {
 		if (raw) {
 			try {
 				JSON.parse(raw);
-				fs.copyFileSync(credsPath, backupPath);
+				syncFs.copyFileSync(credsPath, backupPath);
 				try {
-					fs.chmodSync(backupPath, 384);
+					syncFs.chmodSync(backupPath, 384);
 				} catch {}
 			} catch {}
 		}
@@ -37,7 +37,7 @@ async function safeSaveCreds(authDir, saveCreds, logger) {
 	try {
 		await Promise.resolve(saveCreds());
 		try {
-			fs.chmodSync(resolveWebCredsPath(authDir), 384);
+			syncFs.chmodSync(resolveWebCredsPath(authDir), 384);
 		} catch {}
 	} catch (err) {
 		logger.warn({ error: formatError(err) }, "failed saving WhatsApp creds");

package/dist/wizard/host-security-capability.js

@@ -1,4 +1,4 @@
-import fs from "node:fs";
+import syncFs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { spawnSync } from "node:child_process";
@@ -24,7 +24,7 @@ function isHostedSecurityCapableSession(explicitFlag = false) {
 	const currentUser = currentUserName();
 	if (currentUser) {
 		const sudoersPath = path.join("/etc/sudoers.d", `fased-host-maintenance-${currentUser}`);
-		if (fs.existsSync(sudoersPath)) {
+		if (syncFs.existsSync(sudoersPath)) {
 			return true;
 		}
 	}

package/dist/wizard/onboarding.federation.js

@@ -1,5 +1,5 @@
-import { loadPersistedFederationToken } from "../federation/access-token.js";
 import { DEFAULT_FEDERATION_BASE_URL, resolveFederationBaseUrl, resolveFederationHandle } from "../federation/runtime.js";
+import { loadPersistedFederationToken } from "../federation/access-token.js";
 
 //#region src/wizard/onboarding.federation.ts
 async function configureFederationForOnboarding(params) {

package/dist/wizard/onboarding.finalize.js

@@ -6,22 +6,22 @@ import { enableTailscaleFunnel, enableTailscaleServe } from "../infra/tailscale.
 import { clearDeviceAuthStore } from "../infra/device-auth-store.js";
 import { readWalletProviderRegistry } from "../wallet/wallet-provider-registry.js";
 import { loadPersistedFederationToken } from "../federation/access-token.js";
-import { readWalletStatusSnapshot } from "../wallet/wallet-status.js";
+import { normalizeControlUiBasePath } from "../gateway/control-ui-shared.js";
+import { detectBrowserOpenSupport, formatControlUiSshHint, openUrl, probeGatewayReachable, resolveControlUiLinks, waitForGatewayReachable } from "../commands/onboard-helpers.js";
 import { runFederationAutoConnectOnce } from "../federation/auto-connect.js";
+import { waitForHostedDashboardBrowserPath } from "../commands/hosted-dashboard-probe.js";
+import { buildSystemdUnit } from "../daemon/systemd-unit.js";
+import { isSystemdUserServiceAvailable } from "../daemon/systemd.js";
+import { resolveGatewayService } from "../daemon/service.js";
+import { readWalletStatusSnapshot } from "../wallet/wallet-status.js";
 import { readManagedFederationTokenSummary } from "../managed/federation.js";
-import { normalizeControlUiBasePath } from "../gateway/control-ui-shared.js";
 import { CONTROL_UI_BOOT_CHECK_PATH } from "../gateway/control-ui-boot-check.js";
-import { detectBrowserOpenSupport, formatControlUiSshHint, openUrl, probeGatewayReachable, resolveControlUiLinks, waitForGatewayReachable } from "../commands/onboard-helpers.js";
 import { readManagedReservationSummaries } from "../managed/tunnel.js";
 import { resolveGatewayMaxOldSpaceMb } from "../daemon/service-env.js";
 import { buildGatewayInstallPlan, gatewayInstallErrorHint, resolveGatewayStartupMode, resolveHostedOnboardingGatewayStartupMode } from "../commands/daemon-install-helpers.js";
 import { DEFAULT_GATEWAY_DAEMON_RUNTIME, GATEWAY_DAEMON_RUNTIME_OPTIONS } from "../commands/daemon-runtime.js";
-import { buildSystemdUnit } from "../daemon/systemd-unit.js";
-import { isSystemdUserServiceAvailable } from "../daemon/systemd.js";
-import { resolveGatewayService } from "../daemon/service.js";
 import { SERVICE_AUDIT_CODES, auditGatewayServiceConfig } from "../daemon/service-audit.js";
 import { buildCapabilityReadinessReport, formatCapabilityReadinessSummary } from "../capabilities/catalog.js";
-import { waitForHostedDashboardBrowserPath } from "../commands/hosted-dashboard-probe.js";
 import { noteBullet, noteCommand, noteCommands, noteHeading, noteLabel, noteMuted, noteSuccess, noteWarn } from "./onboarding-note-format.js";
 import { describeOperatorReadinessChecklist } from "../operator/operator-readiness.js";
 import { runTui } from "../tui/tui.js";

package/dist/wizard/onboarding.host-security.js

@@ -2,7 +2,7 @@ import { redactSensitiveText } from "../logging/redact.js";
 import { redactSensitiveUrlLikeString } from "../shared/net/redact-sensitive-url.js";
 import { noteCommands, noteHeading, noteStep, noteWarn } from "./onboarding-note-format.js";
 import { isHostingProfile } from "./onboarding.types.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { spawn, spawnSync } from "node:child_process";
@@ -12,7 +12,7 @@ import { Buffer } from "node:buffer";
 function resolveHostSecurityLogPath() {
 	const home = process.env.HOME?.trim() || os.homedir();
 	const logDir = path.join(home, ".fased", "logs");
-	fs.mkdirSync(logDir, {
+	syncFs.mkdirSync(logDir, {
 		recursive: true,
 		mode: 448
 	});
@@ -26,7 +26,7 @@ function appendHostSecurityLog(logPath, title, detail) {
 		sanitizedDetail?.trim() || "(no output)",
 		""
 	].join("\n");
-	fs.appendFileSync(logPath, body, "utf8");
+	syncFs.appendFileSync(logPath, body, "utf8");
 }
 function resolveTailnetSshConfirmationPath() {
 	const stateDir = process.env.FASED_STATE_DIR?.trim() || process.env.FASED_CONFIG_DIR?.trim() || path.join(process.env.HOME?.trim() || os.homedir(), ".fased");
@@ -34,7 +34,7 @@ function resolveTailnetSshConfirmationPath() {
 }
 function hasStoredTailnetSshConfirmation(target) {
 	try {
-		const raw = fs.readFileSync(resolveTailnetSshConfirmationPath(), "utf8");
+		const raw = syncFs.readFileSync(resolveTailnetSshConfirmationPath(), "utf8");
 		const parsed = JSON.parse(raw);
 		return parsed.user === target.user && parsed.repoDir === target.repoDir;
 	} catch {
@@ -43,11 +43,11 @@ function hasStoredTailnetSshConfirmation(target) {
 }
 function writeTailnetSshConfirmation(target) {
 	const markerPath = resolveTailnetSshConfirmationPath();
-	fs.mkdirSync(path.dirname(markerPath), {
+	syncFs.mkdirSync(path.dirname(markerPath), {
 		recursive: true,
 		mode: 448
 	});
-	fs.writeFileSync(markerPath, `${JSON.stringify({
+	syncFs.writeFileSync(markerPath, `${JSON.stringify({
 		confirmedAt: new Date().toISOString(),
 		user: target.user,
 		host: target.host,
@@ -75,7 +75,7 @@ const HOST_MAINTENANCE_HELPER = "/usr/local/sbin/fased-host-maintenance";
 function detectTotalMemoryMb() {
 	if (process.platform === "linux") {
 		try {
-			const meminfo = fs.readFileSync("/proc/meminfo", "utf8");
+			const meminfo = syncFs.readFileSync("/proc/meminfo", "utf8");
 			const match = meminfo.match(/^MemTotal:\s+(\d+)\s+kB/m);
 			if (match?.[1]) {
 				return Math.floor(Number.parseInt(match[1], 10) / 1024);

package/dist/wizard/onboarding.js

@@ -8,9 +8,9 @@ import "../config/config.js";
 import "../agents/auth-profiles.js";
 import { ensureWalletStateDir, resolveLocalSignerBackendSocketPath, resolveLocalSignerMaterialRootDir, resolveLocalSignerRunAsUser, resolveLocalSignerSocketPath } from "../wallet/wallet-runtime-config.js";
 import { checkNamedWalletDeletionSafety, deleteNamedWallet, readWalletProviderRegistry, resolveWalletUserRole, setDefaultWallet, setNamedWalletRole, upsertNamedWallet } from "../wallet/wallet-provider-registry.js";
+import { DEFAULT_WORKSPACE, applyWizardMetadata, ensureWorkspaceAndSessions, handleOnboardingRepair, printWizardHeader, probeGatewayReachable, summarizeExistingConfig } from "../commands/onboard-helpers.js";
 import { configureWalletForOnboarding, installSignerdBinary, migrateLocalSignerKeystoreToMaterialDir, resolveSignerdBinaryPath, restartLocalSocketSigner } from "./onboarding.wallet.js";
 import { collectWalletSignerDoctorReport, walletSetupCommand } from "../commands/wallet.js";
-import { DEFAULT_WORKSPACE, applyWizardMetadata, ensureWorkspaceAndSessions, handleOnboardingRepair, printWizardHeader, probeGatewayReachable, summarizeExistingConfig } from "../commands/onboard-helpers.js";
 import { promptAuthChoiceGrouped } from "../commands/auth-choice-prompt.js";
 import { logConfigUpdated } from "../config/logging.js";
 import { applyAuthChoice } from "../commands/auth-choice.apply.js";
@@ -29,7 +29,7 @@ import { finalizeOnboardingWizard } from "./onboarding.finalize.js";
 import { configureGatewayForOnboarding } from "./onboarding.gateway-config.js";
 import { applyHostingSecurity } from "./onboarding.host-security.js";
 import { normalizeHostedWalletPaths } from "./wallet-path-migration.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import { spawn, spawnSync } from "node:child_process";
 
@@ -472,7 +472,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		const stateRoot = String(process.env.FASED_STATE_DIR ?? "").trim() || path.join(String(process.env.HOME ?? "").trim() || process.cwd(), ".fased");
 		const installRoot = path.join(stateRoot, "toolchains", `go${goVersion}`);
 		const goBin = path.join(installRoot, "bin", "go");
-		if (fs.existsSync(goBin)) {
+		if (syncFs.existsSync(goBin)) {
 			process.env.FASED_GO_BIN = goBin;
 			return goModernEnough() ? "installed" : "unavailable";
 		}
@@ -505,7 +505,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		if (String(process.env.FASED_FORCE_NATIVE_SIGNER_BUILD ?? "").trim() === "1") {
 			return false;
 		}
-		return fs.existsSync(resolveSignerdBinaryPath(process.env));
+		return syncFs.existsSync(resolveSignerdBinaryPath(process.env));
 	};
 	const maybeInstallGoForOnboarding = async () => {
 		if (goModernEnough()) {
@@ -539,7 +539,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		return goModernEnough();
 	};
 	const prepareLocalSignerForOnboarding = async (params) => {
-		if (fs.existsSync(params.binPath) || String(process.env.FASED_SKIP_NATIVE_SIGNER_BUILD ?? "").trim() === "1" || hasExplicitSignerAssetSource()) {
+		if (syncFs.existsSync(params.binPath) || String(process.env.FASED_SKIP_NATIVE_SIGNER_BUILD ?? "").trim() === "1" || hasExplicitSignerAssetSource()) {
 			return;
 		}
 		if (goModernEnough()) {
@@ -1092,8 +1092,8 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 						const configuredPaths = keystoreKeys.map((key) => (nextConfig.env?.vars?.[key] ?? "").trim() || String(process.env[key] ?? "").trim()).filter(Boolean);
 						for (const file of new Set([...configuredPaths, ...defaultKeystorePaths])) {
 							try {
-								if (file && fs.existsSync(file)) {
-									fs.rmSync(file, { force: true });
+								if (file && syncFs.existsSync(file)) {
+									syncFs.rmSync(file, { force: true });
 								}
 							} catch {}
 						}
@@ -1215,7 +1215,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 				process.env[rpcKey] = effectiveRpcUrl;
 				try {
 					let moveToSignerDir = false;
-					if (isolatedTargetKeystorePath && fs.existsSync(isolatedTargetKeystorePath)) {
+					if (isolatedTargetKeystorePath && syncFs.existsSync(isolatedTargetKeystorePath)) {
 						moveToSignerDir = await prompter.confirm({
 							message: "Signer keystore already exists. Overwrite it?",
 							initialValue: false