@fased/fased 0.1.56 → 0.1.57

package/dist/channels/plugins/catalog.js

@@ -2,7 +2,7 @@ import { CONFIG_DIR, isRecord, resolveUserPath } from "../../utils.js";
 import { resolveFasedAgentPackageRootSync } from "../../infra/fased-root.js";
 import { getPackageManifestMetadata } from "../../plugins/manifest.js";
 import { discoverFasedAgentPlugins } from "../../plugins/discovery.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 
 //#region src/channels/plugins/catalog.ts
@@ -77,11 +77,11 @@ function loadExternalCatalogEntries(options) {
 function loadCatalogEntriesFromPaths(paths) {
 	const entries = [];
 	for (const resolved of paths) {
-		if (!syncFs.existsSync(resolved)) {
+		if (!fs.existsSync(resolved)) {
 			continue;
 		}
 		try {
-			const payload = JSON.parse(syncFs.readFileSync(resolved, "utf-8"));
+			const payload = JSON.parse(fs.readFileSync(resolved, "utf-8"));
 			entries.push(...parseCatalogEntries(payload));
 		} catch {}
 	}

package/dist/cli/browser-cli-extension.js

@@ -8,7 +8,7 @@ import { formatDocsLink } from "../terminal/links.js";
 import { movePathToTrash } from "../browser/trash.js";
 import { copyToClipboard } from "../infra/clipboard.js";
 import { fileURLToPath } from "node:url";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 
 //#region src/cli/browser-cli-extension.ts
@@ -31,7 +31,7 @@ function installedExtensionRootDir() {
 	return path.join(resolveStateDir(), "browser", "chrome-extension");
 }
 function hasManifest(dir) {
-	return syncFs.existsSync(path.join(dir, "manifest.json"));
+	return fs.existsSync(path.join(dir, "manifest.json"));
 }
 async function installChromeExtension(opts) {
 	const src = opts?.sourceDir ?? resolveBundledExtensionRootDir();
@@ -40,14 +40,14 @@ async function installChromeExtension(opts) {
 	}
 	const stateDir = opts?.stateDir ?? resolveStateDir();
 	const dest = path.join(stateDir, "browser", "chrome-extension");
-	syncFs.mkdirSync(path.dirname(dest), { recursive: true });
-	if (syncFs.existsSync(dest)) {
+	fs.mkdirSync(path.dirname(dest), { recursive: true });
+	if (fs.existsSync(dest)) {
 		await movePathToTrash(dest).catch(() => {
 			const backup = `${dest}.old-${Date.now()}`;
-			syncFs.renameSync(dest, backup);
+			fs.renameSync(dest, backup);
 		});
 	}
-	await syncFs.promises.cp(src, dest, { recursive: true });
+	await fs.promises.cp(src, dest, { recursive: true });
 	if (!hasManifest(dest)) {
 		throw new Error("Chrome extension install failed (manifest.json missing). Try again.");
 	}

package/dist/cli/command-format.js

@@ -1,6 +1,6 @@
 import { replaceCliName, resolveCliName } from "./cli-name.js";
 import { normalizeProfileName } from "./profile-utils.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 
 //#region src/cli/command-format.ts
@@ -17,7 +17,7 @@ function resolveHintCliInvocation(argv = process.argv) {
 		return fallback;
 	}
 	const localRunner = path.resolve(process.cwd(), "scripts", "run-node.mjs");
-	if (!syncFs.existsSync(localRunner)) {
+	if (!fs.existsSync(localRunner)) {
 		return fallback;
 	}
 	return "node scripts/run-node.mjs";

package/dist/cli/components-cli.js

@@ -1,13 +1,11 @@
 import { theme } from "../terminal/theme.js";
 import { defaultRuntime } from "../runtime.js";
-import { installPluginFromNpmSpec } from "../plugins/install.js";
 import { loadConfig, writeConfigFile } from "../config/io.js";
 import "../config/config.js";
 import { formatDocsLink } from "../terminal/links.js";
+import { buildCapabilityReadinessReport, formatCapabilityReadinessSummary } from "../capabilities/catalog.js";
+import { installCapabilityComponent } from "../capabilities/install.js";
 import { renderTable } from "../terminal/table.js";
-import { buildNpmResolutionInstallFields } from "../plugins/installs.js";
-import { finalizeInstalledPluginConfig } from "../plugins/lifecycle.js";
-import { buildCapabilityReadinessReport, formatCapabilityReadinessSummary, loadCapabilityCatalog } from "../capabilities/catalog.js";
 
 //#region src/cli/components-cli.ts
 function registerComponentsCli(program) {
@@ -18,36 +16,16 @@ function registerComponentsCli(program) {
 		renderComponentReport(options);
 	});
 	components.command("install").description("Install a cataloged optional component").argument("<id>", "Component id from `fased components`").action(async (id) => {
-		const entry = loadCapabilityCatalog().find((candidate) => candidate.id === id);
-		if (!entry) {
-			throw new Error(`Unknown component: ${id}. Run \`fased components\` to list choices.`);
-		}
-		if (entry.delivery !== "npm-addon" || !entry.packageName || !entry.pluginId) {
-			throw new Error(`${entry.label} is delivered as ${entry.delivery} and cannot be installed as an add-on. See ${entry.docsPath}.`);
-		}
-		const result = await installPluginFromNpmSpec({ spec: entry.packageName });
-		if (!result.ok) {
-			throw new Error(result.error);
-		}
-		const config = loadConfig();
-		const finalized = finalizeInstalledPluginConfig({
-			config,
-			pluginId: result.pluginId,
-			refreshManifestRegistry: true,
-			installRecord: {
-				source: "npm",
-				spec: entry.packageName,
-				installPath: result.targetDir,
-				version: result.version,
-				...buildNpmResolutionInstallFields(result.npmResolution)
-			}
+		const result = await installCapabilityComponent({
+			id,
+			config: loadConfig()
 		});
-		await writeConfigFile(finalized.config);
-		for (const warning of finalized.slotWarnings) {
+		await writeConfigFile(result.config);
+		for (const warning of result.slotWarnings) {
 			defaultRuntime.log(theme.warn(warning));
 		}
-		defaultRuntime.log(`Installed component: ${entry.label} (${entry.packageName})`);
-		if (entry.restartRequired !== false) {
+		defaultRuntime.log(`Installed component: ${result.entry.label} (${result.entry.packageName})`);
+		if (result.entry.restartRequired !== false) {
 			defaultRuntime.log("Restart the gateway to apply the component.");
 		}
 	});

package/dist/cli/cron-cli/register.cron-simple.js

@@ -4,7 +4,7 @@ import { formatCronEscalationContext, formatCronEscalationPasses, formatCronRunL
 import { withTaskCoordinationRequest } from "../../cron/task-planner.js";
 import { addGatewayClientOptions, callGatewayFromCli } from "../gateway-rpc.js";
 import { warnIfCronSchedulerDisabled } from "./shared.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 
 //#region src/cli/cron-cli/register.cron-simple.ts
 const QUEUE_CONTROL_METHODS = {
@@ -100,7 +100,7 @@ function formatUnknownField(value, fallback) {
 	return JSON.stringify(value);
 }
 function readWorkflowJsonFile(filePath) {
-	const raw = syncFs.readFileSync(filePath, "utf8");
+	const raw = fs.readFileSync(filePath, "utf8");
 	const parsed = JSON.parse(raw);
 	if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
 		throw new Error("Workflow file must contain a JSON object.");

package/dist/cli/dns-cli.js

@@ -6,7 +6,7 @@ import { pickPrimaryTailnetIPv4, pickPrimaryTailnetIPv6 } from "../infra/tailnet
 import { formatDocsLink } from "../terminal/links.js";
 import { renderTable } from "../terminal/table.js";
 import { getWideAreaZonePath, resolveWideAreaDiscoveryDomain } from "../infra/widearea-dns.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 import { spawnSync } from "node:child_process";
 
@@ -27,7 +27,7 @@ function run(cmd, args, opts) {
 }
 function writeFileSudoIfNeeded(filePath, content) {
 	try {
-		syncFs.writeFileSync(filePath, content, "utf-8");
+		fs.writeFileSync(filePath, content, "utf-8");
 		return;
 	} catch (err) {
 		const code = err.code;
@@ -53,7 +53,7 @@ function writeFileSudoIfNeeded(filePath, content) {
 }
 function mkdirSudoIfNeeded(dirPath) {
 	try {
-		syncFs.mkdirSync(dirPath, { recursive: true });
+		fs.mkdirSync(dirPath, { recursive: true });
 		return;
 	} catch (err) {
 		const code = err.code;
@@ -68,11 +68,11 @@ function mkdirSudoIfNeeded(dirPath) {
 	], { inherit: true });
 }
 function zoneFileNeedsBootstrap(zonePath) {
-	if (!syncFs.existsSync(zonePath)) {
+	if (!fs.existsSync(zonePath)) {
 		return true;
 	}
 	try {
-		const content = syncFs.readFileSync(zonePath, "utf-8");
+		const content = fs.readFileSync(zonePath, "utf-8");
 		return !/\bSOA\b/.test(content) || !/\bNS\b/.test(content);
 	} catch {
 		return true;
@@ -87,7 +87,7 @@ function detectBrewPrefix() {
 	return prefix;
 }
 function ensureImportLine(corefilePath, importGlob) {
-	const existing = syncFs.readFileSync(corefilePath, "utf-8");
+	const existing = fs.readFileSync(corefilePath, "utf-8");
 	if (existing.includes(importGlob)) {
 		return false;
 	}
@@ -171,7 +171,7 @@ function registerDnsCli(program) {
 			allowFailure: true
 		});
 		mkdirSudoIfNeeded(confDir);
-		if (!syncFs.existsSync(corefilePath)) {
+		if (!fs.existsSync(corefilePath)) {
 			writeFileSudoIfNeeded(corefilePath, `import ${importGlob}\n`);
 		} else {
 			ensureImportLine(corefilePath, importGlob);
@@ -189,7 +189,7 @@ function registerDnsCli(program) {
 			``
 		].join("\n");
 		writeFileSudoIfNeeded(serverPath, server);
-		await syncFs.promises.mkdir(path.dirname(zonePath), { recursive: true });
+		await fs.promises.mkdir(path.dirname(zonePath), { recursive: true });
 		if (zoneFileNeedsBootstrap(zonePath)) {
 			const y = new Date().getUTCFullYear();
 			const m = String(new Date().getUTCMonth() + 1).padStart(2, "0");
@@ -205,7 +205,7 @@ function registerDnsCli(program) {
 				tailnetIPv6 ? `ns1 IN AAAA ${tailnetIPv6}` : null,
 				``
 			].filter((line) => Boolean(line));
-			syncFs.writeFileSync(zonePath, zoneLines.join("\n"), "utf-8");
+			fs.writeFileSync(zonePath, zoneLines.join("\n"), "utf-8");
 		}
 		defaultRuntime.log("");
 		defaultRuntime.log(theme.heading("Starting CoreDNS (sudo)…"));

package/dist/cli/gateway-cli/dev.js

@@ -5,7 +5,7 @@ import { resolveDefaultAgentWorkspaceDir } from "../../agents/workspace.js";
 import { createConfigIO, writeConfigFile } from "../../config/io.js";
 import "../../config/config.js";
 import { handleReset } from "../../commands/onboard-helpers.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 
@@ -17,7 +17,7 @@ const DEV_AGENT_WORKSPACE_SUFFIX = "dev";
 async function loadDevTemplate(name, fallback) {
 	try {
 		const templateDir = await resolveWorkspaceTemplateDir();
-		const raw = await syncFs.promises.readFile(path.join(templateDir, name), "utf-8");
+		const raw = await fs.promises.readFile(path.join(templateDir, name), "utf-8");
 		if (!raw.startsWith("---")) {
 			return raw;
 		}
@@ -40,7 +40,7 @@ const resolveDevWorkspaceDir = (env = process.env) => {
 };
 async function writeFileIfMissing(filePath, content) {
 	try {
-		await syncFs.promises.writeFile(filePath, content, {
+		await fs.promises.writeFile(filePath, content, {
 			encoding: "utf-8",
 			flag: "wx"
 		});
@@ -53,7 +53,7 @@ async function writeFileIfMissing(filePath, content) {
 }
 async function ensureDevWorkspace(dir) {
 	const resolvedDir = resolveUserPath(dir);
-	await syncFs.promises.mkdir(resolvedDir, { recursive: true });
+	await fs.promises.mkdir(resolvedDir, { recursive: true });
 	const [agents, soul, tools, identity, user] = await Promise.all([
 		loadDevTemplate("AGENTS.dev.md", `# AGENTS.md - FasedAgent Dev Workspace\n\nDefault dev workspace for fased gateway --dev.\n`),
 		loadDevTemplate("SOUL.dev.md", `# SOUL.md - Dev Persona\n\nProtocol droid for debugging and operations.\n`),
@@ -74,7 +74,7 @@ async function ensureDevGatewayConfig(opts) {
 	}
 	const io = createConfigIO();
 	const configPath = io.configPath;
-	const configExists = syncFs.existsSync(configPath);
+	const configExists = fs.existsSync(configPath);
 	if (!opts.reset && configExists) {
 		return;
 	}

package/dist/cli/gateway-cli/run.js

@@ -20,7 +20,7 @@ import { startGatewayServer } from "../../gateway/server.impl.js";
 import "../../gateway/server.js";
 import { ensureDevGatewayConfig } from "./dev.js";
 import { runGatewayLoop } from "./run-loop.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 
 //#region src/cli/gateway-cli/run.ts
@@ -145,7 +145,7 @@ async function runGatewayCommand(opts) {
 	const passwordRaw = toOptionString(opts.password);
 	const tokenRaw = toOptionString(opts.token);
 	const snapshot = await readConfigFileSnapshot().catch(() => null);
-	const configExists = snapshot?.exists ?? syncFs.existsSync(CONFIG_PATH);
+	const configExists = snapshot?.exists ?? fs.existsSync(CONFIG_PATH);
 	const configAuditPath = path.join(resolveStateDir(process.env), "logs", "config-audit.jsonl");
 	const mode = cfg.gateway?.mode;
 	if (!opts.allowUnconfigured && mode !== "local") {

package/dist/cli/hooks-cli.js

@@ -7,16 +7,16 @@ import { resolveArchiveKind } from "../infra/archive.js";
 import { loadConfig, writeConfigFile } from "../config/io.js";
 import { promptYesNo } from "./prompt.js";
 import { formatDocsLink } from "../terminal/links.js";
-import { renderTable } from "../terminal/table.js";
 import { buildPluginStatusReport } from "../plugins/status.js";
+import { renderTable } from "../terminal/table.js";
 import { loadWorkspaceHookEntries } from "../hooks/workspace.js";
 import { buildWorkspaceHookStatus } from "../hooks/hooks-status.js";
 import { installHooksFromNpmSpec, installHooksFromPath, resolveHookInstallDir } from "../hooks/install.js";
 import { recordHookInstall } from "../hooks/installs.js";
 import { buildNpmInstallRecordFields, resolvePinnedNpmInstallRecordForCli } from "./npm-resolution.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
-import fs from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 
 //#region src/cli/hooks-cli.ts
 function mergeHookEntries(pluginEntries, workspaceEntries) {
@@ -139,7 +139,7 @@ function logIntegrityDriftWarning(hookId, drift) {
 }
 async function readInstalledPackageVersion(dir) {
 	try {
-		const raw = await fs.readFile(path.join(dir, "package.json"), "utf-8");
+		const raw = await fs$1.readFile(path.join(dir, "package.json"), "utf-8");
 		const parsed = JSON.parse(raw);
 		return typeof parsed.version === "string" ? parsed.version : undefined;
 	} catch {
@@ -430,9 +430,9 @@ function registerHooksCli(program) {
 	hooks.command("install").description("Install a hook pack (path, archive, or npm spec)").argument("<path-or-spec>", "Path to a hook pack or npm package spec").option("-l, --link", "Link a local path instead of copying", false).option("--pin", "Record npm installs as exact resolved <name>@<version>", false).action(async (raw, opts) => {
 		const resolved = resolveUserPath(raw);
 		const cfg = loadConfig();
-		if (syncFs.existsSync(resolved)) {
+		if (fs.existsSync(resolved)) {
 			if (opts.link) {
-				const stat = syncFs.statSync(resolved);
+				const stat = fs.statSync(resolved);
 				if (!stat.isDirectory()) {
 					defaultRuntime.error("Linked hook paths must be directories.");
 					process.exit(1);

package/dist/cli/lightweight/gateway-runtime-probe.js

@@ -1,10 +1,10 @@
 import { resolvePluginStatusConfigPath } from "../../plugins/status-cache.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 
 //#region src/cli/lightweight/gateway-runtime-probe.ts
 function readGatewayProbeConfig(configPath) {
 	try {
-		const parsed = JSON.parse(syncFs.readFileSync(configPath, "utf8"));
+		const parsed = JSON.parse(fs.readFileSync(configPath, "utf8"));
 		const configuredPort = parsed.gateway?.port;
 		return {
 			port: typeof configuredPort === "number" && Number.isInteger(configuredPort) ? configuredPort : 18789,

package/dist/cli/memory-cli.js

@@ -17,10 +17,10 @@ import { formatDocsLink } from "../terminal/links.js";
 import { withManager } from "./cli-utils.js";
 import { formatHelpExamples } from "./help-format.js";
 import { withProgress, withProgressTotals } from "./progress.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import fs from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 
 //#region src/cli/memory-cli.ts
 function formatSourceLabel(source, workspaceDir, agentId) {
@@ -74,7 +74,7 @@ async function withMemoryManagerForAgent(params) {
 }
 async function checkReadableFile(pathname) {
 	try {
-		await fs.access(pathname, syncFs.constants.R_OK);
+		await fs$1.access(pathname, fs.constants.R_OK);
 		return { exists: true };
 	} catch (err) {
 		const code = err.code;
@@ -91,7 +91,7 @@ async function scanSessionFiles(agentId) {
 	const issues = [];
 	const sessionsDir = resolveSessionTranscriptsDirForAgent(agentId);
 	try {
-		const entries = await fs.readdir(sessionsDir, { withFileTypes: true });
+		const entries = await fs$1.readdir(sessionsDir, { withFileTypes: true });
 		const totalFiles = entries.filter((entry) => entry.isFile() && entry.name.endsWith(".jsonl")).length;
 		return {
 			source: "sessions",
@@ -132,7 +132,7 @@ async function scanMemoryFiles(workspaceDir, extraPaths = []) {
 	const resolvedExtraPaths = normalizeExtraMemoryPaths(workspaceDir, extraPaths);
 	for (const extraPath of resolvedExtraPaths) {
 		try {
-			const stat = await fs.lstat(extraPath);
+			const stat = await fs$1.lstat(extraPath);
 			if (stat.isSymbolicLink()) {
 				continue;
 			}
@@ -151,7 +151,7 @@ async function scanMemoryFiles(workspaceDir, extraPaths = []) {
 	}
 	let dirReadable = null;
 	try {
-		await fs.access(memoryDir, syncFs.constants.R_OK);
+		await fs$1.access(memoryDir, fs.constants.R_OK);
 		dirReadable = true;
 	} catch (err) {
 		const code = err.code;
@@ -210,7 +210,7 @@ async function summarizeQmdIndexArtifact(manager) {
 	}
 	let stat;
 	try {
-		stat = await fs.stat(dbPath);
+		stat = await fs$1.stat(dbPath);
 	} catch (err) {
 		const code = err.code;
 		if (code === "ENOENT") {

package/dist/cli/nodes-media-utils.js

@@ -1,5 +1,5 @@
 import { resolvePreferredFasedAgentTmpDir } from "../infra/tmp-fased-dir.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import { randomUUID } from "node:crypto";
 
 //#region src/cli/nodes-media-utils.ts
@@ -18,7 +18,7 @@ function asBoolean(value) {
 function resolveTempPathParts(opts) {
 	const tmpDir = opts.tmpDir ?? resolvePreferredFasedAgentTmpDir();
 	if (!opts.tmpDir) {
-		syncFs.mkdirSync(tmpDir, {
+		fs.mkdirSync(tmpDir, {
 			recursive: true,
 			mode: 448
 		});

package/dist/cli/plugins-cli.js

@@ -7,13 +7,13 @@ import { installPluginFromNpmSpec, installPluginFromPath } from "../plugins/inst
 import { loadConfig, writeConfigFile } from "../config/io.js";
 import "../config/config.js";
 import { promptYesNo } from "./prompt.js";
-import { formatDocsLink } from "../terminal/links.js";
-import { renderTable } from "../terminal/table.js";
-import { findBundledPluginByNpmSpec } from "../plugins/bundled-sources.js";
 import { setPluginEnabledInConfig } from "../plugins/toggle-config.js";
 import { enablePluginInConfig } from "../plugins/enable.js";
+import { formatDocsLink } from "../terminal/links.js";
+import { findBundledPluginByNpmSpec } from "../plugins/bundled-sources.js";
 import { applySlotSelectionForPlugin, buildPluginLifecycleReport, buildPluginUninstallPreview, executePluginUninstallLifecycle, executePluginUpdateLifecycle, finalizeInstalledPluginConfig } from "../plugins/lifecycle.js";
 import { buildPluginMarketplaceReport } from "../plugins/marketplace.js";
+import { renderTable } from "../terminal/table.js";
 import { buildPluginMarketplaceUpdateReview, formatPluginMarketplaceUpdateReviewWarnings } from "../plugins/marketplace-update-review.js";
 import { getPluginRuntimeSessionReadGrant, setPluginRuntimeSessionReadGrant } from "../plugins/runtime-helper-grants.js";
 import { resolvePinnedNpmInstallRecordForCli } from "./npm-resolution.js";
@@ -22,7 +22,7 @@ import "./plugins-config.js";
 import { pluginDoctorCommand } from "./plugins-doctor-cli.js";
 import { pluginInfoCommand } from "./plugins-info-cli.js";
 import "./plugins-status-cli.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 
@@ -428,7 +428,7 @@ function registerPluginsCli(program) {
 		const normalized = fileSpec && fileSpec.ok ? fileSpec.path : raw;
 		const resolved = resolveUserPath(normalized);
 		const cfg = loadConfig();
-		if (syncFs.existsSync(resolved)) {
+		if (fs.existsSync(resolved)) {
 			if (opts.link) {
 				const probe = await installPluginFromPath({
 					path: resolved,

package/dist/cli/secrets-cli.js

@@ -7,12 +7,12 @@ import { isSecretsApplyPlan } from "../secrets/plan.js";
 import { runSecretsApply } from "../secrets/apply.js";
 import { resolveSecretsAuditExitCode, runSecretsAudit } from "../secrets/audit.js";
 import { runSecretsConfigureInteractive } from "../secrets/configure.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import { confirm } from "@clack/prompts";
 
 //#region src/cli/secrets-cli.ts
 function readPlanFile(pathname) {
-	const raw = syncFs.readFileSync(pathname, "utf8");
+	const raw = fs.readFileSync(pathname, "utf8");
 	const parsed = JSON.parse(raw);
 	if (!isSecretsApplyPlan(parsed)) {
 		throw new Error(`Invalid secrets plan file: ${pathname}`);
@@ -71,7 +71,7 @@ function registerSecretsCli(program) {
 				skipProviderSetup: Boolean(opts.skipProviderSetup)
 			});
 			if (opts.planOut) {
-				syncFs.writeFileSync(opts.planOut, `${JSON.stringify(configured.plan, null, 2)}\n`, "utf8");
+				fs.writeFileSync(opts.planOut, `${JSON.stringify(configured.plan, null, 2)}\n`, "utf8");
 			}
 			if (opts.json) {
 				defaultRuntime.log(JSON.stringify({

package/dist/cli/update-cli/update-command.js

@@ -9,6 +9,8 @@ import { readConfigFileSnapshot, writeConfigFile } from "../../config/io.js";
 import "../../config/config.js";
 import { loadGatewayTlsRuntime } from "../../infra/tls/gateway.js";
 import { stylePromptMessage } from "../../terminal/prompt-style.js";
+import { syncPluginsForUpdateChannel, updateNpmInstalledPlugins } from "../../plugins/update.js";
+import { OPENAI_RUNTIME_COMPONENT_ID, ensureOpenAICodexRuntimeComponent, hasConfiguredOpenAICodexProfile } from "../../agents/openai-codex-runtime-component.js";
 import { DEFAULT_GIT_CHANNEL, DEFAULT_PACKAGE_CHANNEL, channelToNpmTag, normalizeUpdateChannel } from "../../infra/update-channels.js";
 import { cleanupGlobalRenameDirs, globalInstallArgs, resolveGlobalPackageRoot, resolveNodeModulesRootForPackageRoot } from "../../infra/update-global.js";
 import { checkUpdateStatus, compareSemverStrings, resolveNpmChannelTag } from "../../infra/update-check.js";
@@ -18,7 +20,6 @@ import { renderRestartDiagnostics, terminateStaleGatewayPids, waitForGatewayHeal
 import { runDaemonRestart } from "../daemon-cli/lifecycle.js";
 import "../../daemon-cli.js";
 import { installCompletion } from "../completion-cli.js";
-import { syncPluginsForUpdateChannel, updateNpmInstalledPlugins } from "../../plugins/update.js";
 import { readPackageName, readPackageVersion } from "../../infra/package-json.js";
 import { finalizeUpdateTransaction, rollbackUpdateTransaction, runGatewayUpdate } from "../../infra/update-runner.js";
 import { checkShellCompletionStatus, ensureCompletionCacheExists } from "../../commands/doctor-completion.js";
@@ -422,14 +423,32 @@ async function updatePluginsAfterCoreUpdate(params) {
 		config: params.configSnapshot.config,
 		updateCompleted: true
 	});
-	const installs = repairResult.config.plugins?.installs ?? {};
+	let pluginConfig = repairResult.config;
+	let installedOpenAIRuntime = false;
+	if (hasConfiguredOpenAICodexProfile(pluginConfig)) {
+		const runtimeComponent = await ensureOpenAICodexRuntimeComponent({
+			config: pluginConfig,
+			version: params.targetVersion
+		});
+		pluginConfig = runtimeComponent.config;
+		installedOpenAIRuntime = runtimeComponent.installed;
+		if (runtimeComponent.installed && !params.opts.json) {
+			defaultRuntime.log(theme.muted("Installed the managed OpenAI sign-in runtime required by the existing ChatGPT credential."));
+		}
+		for (const warning of runtimeComponent.slotWarnings) {
+			if (!params.opts.json) {
+				defaultRuntime.log(theme.warn(warning));
+			}
+		}
+	}
+	const installs = pluginConfig.plugins?.installs ?? {};
 	if (Object.keys(installs).length === 0) {
-		if (repairResult.changed) {
-			await writeConfigFile(repairResult.config);
+		if (repairResult.changed || installedOpenAIRuntime) {
+			await writeConfigFile(pluginConfig);
 		}
 		return {
-			changed: repairResult.changed,
-			checked: false
+			changed: repairResult.changed || installedOpenAIRuntime,
+			checked: installedOpenAIRuntime
 		};
 	}
 	const pluginLogger = params.opts.json ? {} : {
@@ -442,25 +461,25 @@ async function updatePluginsAfterCoreUpdate(params) {
 		defaultRuntime.log(theme.heading("Updating plugins..."));
 	}
 	const syncResult = await syncPluginsForUpdateChannel({
-		config: repairResult.config,
+		config: pluginConfig,
 		channel: params.channel,
 		workspaceDir: params.root,
 		logger: pluginLogger
 	});
-	let pluginConfig = syncResult.config;
+	pluginConfig = syncResult.config;
 	const npmResult = await updateNpmInstalledPlugins({
 		config: pluginConfig,
-		skipIds: new Set(syncResult.summary.switchedToNpm),
+		skipIds: new Set([...syncResult.summary.switchedToNpm, ...installedOpenAIRuntime ? [OPENAI_RUNTIME_COMPONENT_ID] : []]),
 		updateChannel: params.channel,
 		logger: pluginLogger
 	});
 	pluginConfig = npmResult.config;
-	if (repairResult.changed || syncResult.changed || npmResult.changed) {
+	if (repairResult.changed || installedOpenAIRuntime || syncResult.changed || npmResult.changed) {
 		await writeConfigFile(pluginConfig);
 	}
 	if (params.opts.json) {
 		return {
-			changed: repairResult.changed || syncResult.changed || npmResult.changed,
+			changed: repairResult.changed || installedOpenAIRuntime || syncResult.changed || npmResult.changed,
 			checked: true
 		};
 	}
@@ -511,7 +530,7 @@ async function updatePluginsAfterCoreUpdate(params) {
 		defaultRuntime.log(theme.error(outcome.message));
 	}
 	return {
-		changed: repairResult.changed || syncResult.changed || npmResult.changed,
+		changed: repairResult.changed || installedOpenAIRuntime || syncResult.changed || npmResult.changed,
 		checked: true
 	};
 }
@@ -802,6 +821,24 @@ async function updateCommand(opts) {
 		}
 	}
 	if (alreadyCurrent && currentVersion && targetVersion) {
+		if (configSnapshot.valid && hasConfiguredOpenAICodexProfile(configSnapshot.config)) {
+			try {
+				const runtimeComponent = await ensureOpenAICodexRuntimeComponent({
+					config: configSnapshot.config,
+					version: targetVersion
+				});
+				if (runtimeComponent.installed) {
+					await writeConfigFile(runtimeComponent.config);
+					if (!opts.json) {
+						defaultRuntime.log(theme.muted("Installed the version-matched OpenAI sign-in runtime required by the current release."));
+					}
+				}
+			} catch (error) {
+				defaultRuntime.error(`OpenAI sign-in runtime update failed: ${String(error)}`);
+				defaultRuntime.exit(1);
+				return;
+			}
+		}
 		const runningRuntime = await probeRunningGatewayRuntimeIdentity({ timeoutMs: 750 });
 		if (runningRuntime.reachable && runningRuntime.version !== currentVersion) {
 			if (!shouldRestart) {
@@ -1000,6 +1037,7 @@ async function updateCommand(opts) {
 	const pluginResult = await measureUpdateStage(lifecycleTimings, "plugin updates", () => updatePluginsAfterCoreUpdate({
 		root,
 		channel,
+		targetVersion: result.after?.version ?? targetVersion ?? undefined,
 		configSnapshot,
 		opts
 	}));

package/dist/cli/windows-argv.js

@@ -1,4 +1,4 @@
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 
 //#region src/cli/windows-argv.ts
@@ -33,7 +33,7 @@ function normalizeWindowsArgv(argv) {
 			return false;
 		}
 		const lower = normalized.toLowerCase();
-		return lower === execPathLower || path.basename(lower) === execBase || lower.endsWith("\\node.exe") || lower.endsWith("/node.exe") || lower.includes("node.exe") || path.basename(lower) === "node.exe" && syncFs.existsSync(normalized);
+		return lower === execPathLower || path.basename(lower) === execBase || lower.endsWith("\\node.exe") || lower.endsWith("/node.exe") || lower.includes("node.exe") || path.basename(lower) === "node.exe" && fs.existsSync(normalized);
 	};
 	const next = [...argv];
 	for (let i = 1; i <= 3 && i < next.length;) {

package/dist/commands/agent.js

@@ -19,7 +19,6 @@ import { resolveAndPersistSessionFile } from "../config/sessions/session-file.js
 import { parseSessionThreadInfo } from "../config/sessions/delivery-info.js";
 import "../config/sessions.js";
 import { resolveMessageChannel } from "../utils/message-channel.js";
-import { buildCredentialScopedAllowedModelSet } from "../agents/model-catalog-access.js";
 import { clearAgentRunContext, emitAgentEvent, registerAgentRunContext } from "../infra/agent-events.js";
 import { AGENT_LANE_SUBAGENT } from "../agents/lanes.js";
 import { buildOutboundSessionContext } from "../infra/outbound/session-context.js";
@@ -27,6 +26,7 @@ import { resolveSendPolicy } from "../sessions/send-policy.js";
 import { toAcpRuntimeError } from "../acp/runtime/errors.js";
 import { getAcpSessionManager } from "../acp/control-plane/manager.js";
 import { resolveAcpAgentPolicyError, resolveAcpDispatchPolicyError } from "../acp/policy.js";
+import { buildCredentialScopedAllowedModelSet } from "../agents/model-catalog-access.js";
 import { loadModelCatalog } from "../agents/model-catalog.js";
 import { runWithModelFallback } from "../agents/model-fallback.js";
 import { applyModelOverrideToSessionEntry } from "../sessions/model-overrides.js";