@fased/fased 0.1.54 → 0.1.56

package/dist/web/auth-store.js

@@ -4,10 +4,10 @@ import { info, success } from "../globals.js";
 import { defaultRuntime } from "../runtime.js";
 import { formatCliCommand } from "../cli/command-format.js";
 import "../logging.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import fs$1 from "node:fs/promises";
+import fs from "node:fs/promises";
 
 //#region src/web/auth-store.ts
 const DEFAULT_WEB_AUTH_ACCOUNT_ID = "default";
@@ -65,7 +65,7 @@ function readAuthStoreLidReverseMapping(lid, opts) {
 	for (const dir of dirs) {
 		const mappingPath = path.join(dir, mappingFilename);
 		try {
-			const data = fs.readFileSync(mappingPath, "utf8");
+			const data = syncFs.readFileSync(mappingPath, "utf8");
 			const phone = JSON.parse(data);
 			if (phone !== null && phone !== undefined) {
 				return normalizeAuthStoreE164(String(phone));
@@ -97,7 +97,7 @@ function resolveWebCredsBackupPath(authDir) {
 }
 function hasWebCredsSync(authDir) {
 	try {
-		const stats = fs.statSync(resolveWebCredsPath(authDir));
+		const stats = syncFs.statSync(resolveWebCredsPath(authDir));
 		return stats.isFile() && stats.size > 1;
 	} catch {
 		return false;
@@ -105,14 +105,14 @@ function hasWebCredsSync(authDir) {
 }
 function readCredsJsonRaw(filePath) {
 	try {
-		if (!fs.existsSync(filePath)) {
+		if (!syncFs.existsSync(filePath)) {
 			return null;
 		}
-		const stats = fs.statSync(filePath);
+		const stats = syncFs.statSync(filePath);
 		if (!stats.isFile() || stats.size <= 1) {
 			return null;
 		}
-		return fs.readFileSync(filePath, "utf-8");
+		return syncFs.readFileSync(filePath, "utf-8");
 	} catch {
 		return null;
 	}
@@ -132,9 +132,9 @@ function maybeRestoreCredsFromBackup(authDir) {
 			return;
 		}
 		JSON.parse(backupRaw);
-		fs.copyFileSync(backupPath, credsPath);
+		syncFs.copyFileSync(backupPath, credsPath);
 		try {
-			fs.chmodSync(credsPath, 384);
+			syncFs.chmodSync(credsPath, 384);
 		} catch {}
 		logger.warn({ credsPath }, "restored corrupted WhatsApp creds.json from backup");
 	} catch {}
@@ -144,16 +144,16 @@ async function webAuthExists(authDir = resolveDefaultWebAuthDir()) {
 	maybeRestoreCredsFromBackup(resolvedAuthDir);
 	const credsPath = resolveWebCredsPath(resolvedAuthDir);
 	try {
-		await fs$1.access(resolvedAuthDir);
+		await fs.access(resolvedAuthDir);
 	} catch {
 		return false;
 	}
 	try {
-		const stats = await fs$1.stat(credsPath);
+		const stats = await fs.stat(credsPath);
 		if (!stats.isFile() || stats.size <= 1) {
 			return false;
 		}
-		const raw = await fs$1.readFile(credsPath, "utf-8");
+		const raw = await fs.readFile(credsPath, "utf-8");
 		JSON.parse(raw);
 		return true;
 	} catch {
@@ -161,7 +161,7 @@ async function webAuthExists(authDir = resolveDefaultWebAuthDir()) {
 	}
 }
 async function clearLegacyBaileysAuthState(authDir) {
-	const entries = await fs$1.readdir(authDir, { withFileTypes: true });
+	const entries = await fs.readdir(authDir, { withFileTypes: true });
 	const shouldDelete = (name) => {
 		if (name === "oauth.json") {
 			return false;
@@ -181,7 +181,7 @@ async function clearLegacyBaileysAuthState(authDir) {
 		if (!shouldDelete(entry.name)) {
 			return;
 		}
-		await fs$1.rm(path.join(authDir, entry.name), { force: true });
+		await fs.rm(path.join(authDir, entry.name), { force: true });
 	}));
 }
 async function logoutWeb(params) {
@@ -195,7 +195,7 @@ async function logoutWeb(params) {
 	if (params.isLegacyAuthDir) {
 		await clearLegacyBaileysAuthState(resolvedAuthDir);
 	} else {
-		await fs$1.rm(resolvedAuthDir, {
+		await fs.rm(resolvedAuthDir, {
 			recursive: true,
 			force: true
 		});
@@ -206,13 +206,13 @@ async function logoutWeb(params) {
 function readWebSelfId(authDir = resolveDefaultWebAuthDir()) {
 	try {
 		const credsPath = resolveWebCredsPath(resolveAuthStoreUserPath(authDir));
-		if (!fs.existsSync(credsPath)) {
+		if (!syncFs.existsSync(credsPath)) {
 			return {
 				e164: null,
 				jid: null
 			};
 		}
-		const raw = fs.readFileSync(credsPath, "utf-8");
+		const raw = syncFs.readFileSync(credsPath, "utf-8");
 		const parsed = JSON.parse(raw);
 		const jid = parsed?.me?.id ?? null;
 		const e164 = jid ? jidToE164ForAuthStore(jid, { authDir }) : null;
@@ -233,7 +233,7 @@ function readWebSelfId(authDir = resolveDefaultWebAuthDir()) {
 */
 function getWebAuthAgeMs(authDir = resolveDefaultWebAuthDir()) {
 	try {
-		const stats = fs.statSync(resolveWebCredsPath(resolveAuthStoreUserPath(authDir)));
+		const stats = syncFs.statSync(resolveWebCredsPath(resolveAuthStoreUserPath(authDir)));
 		return Date.now() - stats.mtimeMs;
 	} catch {
 		return null;

package/dist/web/session.js

@@ -7,7 +7,7 @@ import { redactSensitiveText } from "../logging/redact.js";
 import "../logging.js";
 import { WA_WEB_AUTH_DIR, getWebAuthAgeMs, logWebSelfId, logoutWeb, maybeRestoreCredsFromBackup, pickWebChannel, readCredsJsonRaw, readWebSelfId, resolveDefaultWebAuthDir, resolveWebCredsBackupPath, resolveWebCredsPath, webAuthExists } from "./auth-store.js";
 import { redactSensitiveUrlLikeString } from "../shared/net/redact-sensitive-url.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import { randomUUID } from "node:crypto";
 import { DisconnectReason, fetchLatestBaileysVersion, makeCacheableSignalKeyStore, makeWASocket, useMultiFileAuthState } from "@whiskeysockets/baileys";
 import qrcode from "qrcode-terminal";
@@ -27,9 +27,9 @@ async function safeSaveCreds(authDir, saveCreds, logger) {
 		if (raw) {
 			try {
 				JSON.parse(raw);
-				fs.copyFileSync(credsPath, backupPath);
+				syncFs.copyFileSync(credsPath, backupPath);
 				try {
-					fs.chmodSync(backupPath, 384);
+					syncFs.chmodSync(backupPath, 384);
 				} catch {}
 			} catch {}
 		}
@@ -37,7 +37,7 @@ async function safeSaveCreds(authDir, saveCreds, logger) {
 	try {
 		await Promise.resolve(saveCreds());
 		try {
-			fs.chmodSync(resolveWebCredsPath(authDir), 384);
+			syncFs.chmodSync(resolveWebCredsPath(authDir), 384);
 		} catch {}
 	} catch (err) {
 		logger.warn({ error: formatError(err) }, "failed saving WhatsApp creds");

package/dist/wizard/host-security-capability.js

@@ -1,4 +1,4 @@
-import fs from "node:fs";
+import syncFs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { spawnSync } from "node:child_process";
@@ -24,7 +24,7 @@ function isHostedSecurityCapableSession(explicitFlag = false) {
 	const currentUser = currentUserName();
 	if (currentUser) {
 		const sudoersPath = path.join("/etc/sudoers.d", `fased-host-maintenance-${currentUser}`);
-		if (fs.existsSync(sudoersPath)) {
+		if (syncFs.existsSync(sudoersPath)) {
 			return true;
 		}
 	}

package/dist/wizard/onboarding.host-security.js

@@ -2,7 +2,7 @@ import { redactSensitiveText } from "../logging/redact.js";
 import { redactSensitiveUrlLikeString } from "../shared/net/redact-sensitive-url.js";
 import { noteCommands, noteHeading, noteStep, noteWarn } from "./onboarding-note-format.js";
 import { isHostingProfile } from "./onboarding.types.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { spawn, spawnSync } from "node:child_process";
@@ -12,7 +12,7 @@ import { Buffer } from "node:buffer";
 function resolveHostSecurityLogPath() {
 	const home = process.env.HOME?.trim() || os.homedir();
 	const logDir = path.join(home, ".fased", "logs");
-	fs.mkdirSync(logDir, {
+	syncFs.mkdirSync(logDir, {
 		recursive: true,
 		mode: 448
 	});
@@ -26,7 +26,7 @@ function appendHostSecurityLog(logPath, title, detail) {
 		sanitizedDetail?.trim() || "(no output)",
 		""
 	].join("\n");
-	fs.appendFileSync(logPath, body, "utf8");
+	syncFs.appendFileSync(logPath, body, "utf8");
 }
 function resolveTailnetSshConfirmationPath() {
 	const stateDir = process.env.FASED_STATE_DIR?.trim() || process.env.FASED_CONFIG_DIR?.trim() || path.join(process.env.HOME?.trim() || os.homedir(), ".fased");
@@ -34,7 +34,7 @@ function resolveTailnetSshConfirmationPath() {
 }
 function hasStoredTailnetSshConfirmation(target) {
 	try {
-		const raw = fs.readFileSync(resolveTailnetSshConfirmationPath(), "utf8");
+		const raw = syncFs.readFileSync(resolveTailnetSshConfirmationPath(), "utf8");
 		const parsed = JSON.parse(raw);
 		return parsed.user === target.user && parsed.repoDir === target.repoDir;
 	} catch {
@@ -43,11 +43,11 @@ function hasStoredTailnetSshConfirmation(target) {
 }
 function writeTailnetSshConfirmation(target) {
 	const markerPath = resolveTailnetSshConfirmationPath();
-	fs.mkdirSync(path.dirname(markerPath), {
+	syncFs.mkdirSync(path.dirname(markerPath), {
 		recursive: true,
 		mode: 448
 	});
-	fs.writeFileSync(markerPath, `${JSON.stringify({
+	syncFs.writeFileSync(markerPath, `${JSON.stringify({
 		confirmedAt: new Date().toISOString(),
 		user: target.user,
 		host: target.host,
@@ -75,7 +75,7 @@ const HOST_MAINTENANCE_HELPER = "/usr/local/sbin/fased-host-maintenance";
 function detectTotalMemoryMb() {
 	if (process.platform === "linux") {
 		try {
-			const meminfo = fs.readFileSync("/proc/meminfo", "utf8");
+			const meminfo = syncFs.readFileSync("/proc/meminfo", "utf8");
 			const match = meminfo.match(/^MemTotal:\s+(\d+)\s+kB/m);
 			if (match?.[1]) {
 				return Math.floor(Number.parseInt(match[1], 10) / 1024);

package/dist/wizard/onboarding.js

@@ -2,6 +2,7 @@ import { resolveGatewayPort } from "../config/paths.js";
 import { resolveUserPath } from "../utils.js";
 import { defaultRuntime } from "../runtime.js";
 import { formatCliCommand } from "../cli/command-format.js";
+import { resolveFasedAgentAgentDir } from "../agents/agent-paths.js";
 import { ensureAuthProfileStore } from "../agents/auth-profiles/store.js";
 import { readConfigFileSnapshot, writeConfigFile } from "../config/io.js";
 import "../config/config.js";
@@ -12,9 +13,11 @@ import { DEFAULT_WORKSPACE, applyWizardMetadata, ensureWorkspaceAndSessions, han
 import { configureWalletForOnboarding, installSignerdBinary, migrateLocalSignerKeystoreToMaterialDir, resolveSignerdBinaryPath, restartLocalSocketSigner } from "./onboarding.wallet.js";
 import { collectWalletSignerDoctorReport, walletSetupCommand } from "../commands/wallet.js";
 import { promptAuthChoiceGrouped } from "../commands/auth-choice-prompt.js";
+import { applyPrimaryModel, resolveAuthenticatedDefaultModel } from "../commands/model-picker.js";
 import { logConfigUpdated } from "../config/logging.js";
 import { applyAuthChoice } from "../commands/auth-choice.apply.js";
 import { warnIfModelConfigLooksOff } from "../commands/auth-choice.model-check.js";
+import { resolvePreferredProviderForAuthChoice } from "../commands/auth-choice.preferred-provider.js";
 import "../commands/auth-choice.js";
 import { setupChannels } from "../commands/onboard-channels.js";
 import { applyOnboardingLocalWorkspaceConfig } from "../commands/onboard-config.js";
@@ -29,7 +32,7 @@ import { finalizeOnboardingWizard } from "./onboarding.finalize.js";
 import { configureGatewayForOnboarding } from "./onboarding.gateway-config.js";
 import { applyHostingSecurity } from "./onboarding.host-security.js";
 import { normalizeHostedWalletPaths } from "./wallet-path-migration.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import { spawn, spawnSync } from "node:child_process";
 
@@ -37,6 +40,25 @@ import { spawn, spawnSync } from "node:child_process";
 async function requireRiskAcknowledgement(params) {
 	void params;
 }
+async function applyOnboardingAuthChoice(params) {
+	const agentDir = resolveFasedAgentAgentDir();
+	const authResult = await applyAuthChoice({
+		authChoice: params.authChoice,
+		config: params.config,
+		prompter: params.prompter,
+		runtime: params.runtime,
+		setDefaultModel: false,
+		agentDir,
+		opts: params.opts
+	});
+	const preferredProvider = resolvePreferredProviderForAuthChoice(params.authChoice, { config: authResult.config });
+	const authenticatedDefault = await resolveAuthenticatedDefaultModel({
+		config: authResult.config,
+		agentDir,
+		preferredProvider
+	});
+	return authenticatedDefault ? applyPrimaryModel(authResult.config, authenticatedDefault) : authResult.config;
+}
 async function confirmOnboardingRepair(params) {
 	await params.prompter.note([
 		"Repair is for bad auth/session state while keeping the instance configuration intact.",
@@ -472,7 +494,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		const stateRoot = String(process.env.FASED_STATE_DIR ?? "").trim() || path.join(String(process.env.HOME ?? "").trim() || process.cwd(), ".fased");
 		const installRoot = path.join(stateRoot, "toolchains", `go${goVersion}`);
 		const goBin = path.join(installRoot, "bin", "go");
-		if (fs.existsSync(goBin)) {
+		if (syncFs.existsSync(goBin)) {
 			process.env.FASED_GO_BIN = goBin;
 			return goModernEnough() ? "installed" : "unavailable";
 		}
@@ -505,7 +527,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		if (String(process.env.FASED_FORCE_NATIVE_SIGNER_BUILD ?? "").trim() === "1") {
 			return false;
 		}
-		return fs.existsSync(resolveSignerdBinaryPath(process.env));
+		return syncFs.existsSync(resolveSignerdBinaryPath(process.env));
 	};
 	const maybeInstallGoForOnboarding = async () => {
 		if (goModernEnough()) {
@@ -539,7 +561,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		return goModernEnough();
 	};
 	const prepareLocalSignerForOnboarding = async (params) => {
-		if (fs.existsSync(params.binPath) || String(process.env.FASED_SKIP_NATIVE_SIGNER_BUILD ?? "").trim() === "1" || hasExplicitSignerAssetSource()) {
+		if (syncFs.existsSync(params.binPath) || String(process.env.FASED_SKIP_NATIVE_SIGNER_BUILD ?? "").trim() === "1" || hasExplicitSignerAssetSource()) {
 			return;
 		}
 		if (goModernEnough()) {
@@ -791,18 +813,16 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 		nextConfig = customResult.config;
 		await warnIfModelConfigLooksOff(nextConfig, prompter);
 	} else if (authChoice && authChoice !== "skip") {
-		const authResult = await applyAuthChoice({
+		nextConfig = await applyOnboardingAuthChoice({
 			authChoice,
 			config: nextConfig,
 			prompter,
 			runtime,
-			setDefaultModel: true,
 			opts: {
 				tokenProvider: opts.tokenProvider,
 				token: opts.authChoice === "apiKey" && opts.token ? opts.token : undefined
 			}
 		});
-		nextConfig = authResult.config;
 		await warnIfModelConfigLooksOff(nextConfig, prompter);
 	}
 	const gateway = await configureGatewayForOnboarding({
@@ -1092,8 +1112,8 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 						const configuredPaths = keystoreKeys.map((key) => (nextConfig.env?.vars?.[key] ?? "").trim() || String(process.env[key] ?? "").trim()).filter(Boolean);
 						for (const file of new Set([...configuredPaths, ...defaultKeystorePaths])) {
 							try {
-								if (file && fs.existsSync(file)) {
-									fs.rmSync(file, { force: true });
+								if (file && syncFs.existsSync(file)) {
+									syncFs.rmSync(file, { force: true });
 								}
 							} catch {}
 						}
@@ -1215,7 +1235,7 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 				process.env[rpcKey] = effectiveRpcUrl;
 				try {
 					let moveToSignerDir = false;
-					if (isolatedTargetKeystorePath && fs.existsSync(isolatedTargetKeystorePath)) {
+					if (isolatedTargetKeystorePath && syncFs.existsSync(isolatedTargetKeystorePath)) {
 						moveToSignerDir = await prompter.confirm({
 							message: "Signer keystore already exists. Overwrite it?",
 							initialValue: false
@@ -1554,15 +1574,13 @@ async function runOnboardingWizard(opts, runtime = defaultRuntime, prompter) {
 					nextConfig = customResult.config;
 					await warnIfModelConfigLooksOff(nextConfig, prompter);
 				} else if (providerAuthChoice !== "skip") {
-					const authResult = await applyAuthChoice({
+					nextConfig = await applyOnboardingAuthChoice({
 						authChoice: providerAuthChoice,
 						config: nextConfig,
 						prompter,
 						runtime,
-						setDefaultModel: true,
 						opts: {}
 					});
-					nextConfig = authResult.config;
 					await warnIfModelConfigLooksOff(nextConfig, prompter);
 				}
 			}