@fased/fased 0.1.56 → 0.1.58

package/dist/infra/archive.js

@@ -2,7 +2,7 @@ import { isNotFoundPathError, isPathInside, isSymlinkOpenError } from "./path-gu
 import { resolveArchiveOutputPath, stripArchivePath, validateArchiveEntryPath } from "./archive-path.js";
 import { constants } from "node:fs";
 import path from "node:path";
-import fs from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 import { Readable, Transform } from "node:stream";
 import { pipeline } from "node:stream/promises";
 import JSZip from "jszip";
@@ -48,12 +48,12 @@ function resolveArchiveKind(filePath) {
 async function resolvePackedRootDir(extractDir) {
 	const direct = path.join(extractDir, "package");
 	try {
-		const stat = await fs.stat(direct);
+		const stat = await fs$1.stat(direct);
 		if (stat.isDirectory()) {
 			return direct;
 		}
 	} catch {}
-	const entries = await fs.readdir(extractDir, { withFileTypes: true });
+	const entries = await fs$1.readdir(extractDir, { withFileTypes: true });
 	const dirs = entries.filter((entry) => entry.isDirectory()).map((entry) => entry.name);
 	if (dirs.length !== 1) {
 		throw new Error(`unexpected archive layout (dirs: ${dirs.join(", ")})`);
@@ -142,14 +142,14 @@ function symlinkTraversalError(originalPath) {
 	return new ArchiveSecurityError("destination-symlink-traversal", `${ERROR_ARCHIVE_ENTRY_TRAVERSES_SYMLINK}: ${originalPath}`);
 }
 async function assertDestinationDirReady(destDir) {
-	const stat = await fs.lstat(destDir);
+	const stat = await fs$1.lstat(destDir);
 	if (stat.isSymbolicLink()) {
 		throw new ArchiveSecurityError("destination-symlink", "archive destination is a symlink");
 	}
 	if (!stat.isDirectory()) {
 		throw new ArchiveSecurityError("destination-not-directory", "archive destination is not a directory");
 	}
-	return await fs.realpath(destDir);
+	return await fs$1.realpath(destDir);
 }
 async function assertNoSymlinkTraversal(params) {
 	const parts = params.relPath.split("/").filter(Boolean);
@@ -158,7 +158,7 @@ async function assertNoSymlinkTraversal(params) {
 		current = path.join(current, part);
 		let stat;
 		try {
-			stat = await fs.lstat(current);
+			stat = await fs$1.lstat(current);
 		} catch (err) {
 			if (isNotFoundPathError(err)) {
 				continue;
@@ -173,7 +173,7 @@ async function assertNoSymlinkTraversal(params) {
 async function assertResolvedInsideDestination(params) {
 	let resolved;
 	try {
-		resolved = await fs.realpath(params.targetPath);
+		resolved = await fs$1.realpath(params.targetPath);
 	} catch (err) {
 		if (isNotFoundPathError(err)) {
 			return;
@@ -186,7 +186,7 @@ async function assertResolvedInsideDestination(params) {
 }
 async function openZipOutputFile(outPath, originalPath) {
 	try {
-		return await fs.open(outPath, OPEN_WRITE_FLAGS, 438);
+		return await fs$1.open(outPath, OPEN_WRITE_FLAGS, 438);
 	} catch (err) {
 		if (isSymlinkOpenError(err)) {
 			throw symlinkTraversalError(originalPath);
@@ -197,7 +197,7 @@ async function openZipOutputFile(outPath, originalPath) {
 async function cleanupPartialRegularFile(filePath) {
 	let stat;
 	try {
-		stat = await fs.lstat(filePath);
+		stat = await fs$1.lstat(filePath);
 	} catch (err) {
 		if (isNotFoundPathError(err)) {
 			return;
@@ -205,7 +205,7 @@ async function cleanupPartialRegularFile(filePath) {
 		throw err;
 	}
 	if (stat.isFile()) {
-		await fs.unlink(filePath).catch(() => undefined);
+		await fs$1.unlink(filePath).catch(() => undefined);
 	}
 }
 async function readZipEntryStream(entry) {
@@ -238,7 +238,7 @@ async function prepareZipOutputPath(params) {
 		originalPath: params.originalPath
 	});
 	if (params.isDirectory) {
-		await fs.mkdir(params.outPath, { recursive: true });
+		await fs$1.mkdir(params.outPath, { recursive: true });
 		await assertResolvedInsideDestination({
 			destinationRealDir: params.destinationRealDir,
 			targetPath: params.outPath,
@@ -247,7 +247,7 @@ async function prepareZipOutputPath(params) {
 		return;
 	}
 	const parentDir = path.dirname(params.outPath);
-	await fs.mkdir(parentDir, { recursive: true });
+	await fs$1.mkdir(parentDir, { recursive: true });
 	await assertResolvedInsideDestination({
 		destinationRealDir: params.destinationRealDir,
 		targetPath: parentDir,
@@ -268,18 +268,18 @@ async function writeZipFileEntry(params) {
 	if (typeof params.entry.unixPermissions === "number") {
 		const mode = params.entry.unixPermissions & 511;
 		if (mode !== 0) {
-			await fs.chmod(params.outPath, mode).catch(() => undefined);
+			await fs$1.chmod(params.outPath, mode).catch(() => undefined);
 		}
 	}
 }
 async function extractZip(params) {
 	const limits = resolveExtractLimits(params.limits);
 	const destinationRealDir = await assertDestinationDirReady(params.destDir);
-	const stat = await fs.stat(params.archivePath);
+	const stat = await fs$1.stat(params.archivePath);
 	if (stat.size > limits.maxArchiveBytes) {
 		throw new Error(ERROR_ARCHIVE_SIZE_EXCEEDS_LIMIT);
 	}
-	const buffer = await fs.readFile(params.archivePath);
+	const buffer = await fs$1.readFile(params.archivePath);
 	const zip = await JSZip.loadAsync(buffer);
 	const entries = Object.values(zip.files);
 	const strip = Math.max(0, Math.floor(params.stripComponents ?? 0));
@@ -378,14 +378,14 @@ async function extractArchive(params) {
 }
 async function fileExists(filePath) {
 	try {
-		await fs.stat(filePath);
+		await fs$1.stat(filePath);
 		return true;
 	} catch {
 		return false;
 	}
 }
 async function readJsonFile(filePath) {
-	const raw = await fs.readFile(filePath, "utf-8");
+	const raw = await fs$1.readFile(filePath, "utf-8");
 	return JSON.parse(raw);
 }
 

package/dist/infra/boundary-file-read.js

@@ -1,6 +1,6 @@
 import { resolveBoundaryPath, resolveBoundaryPathSync } from "./boundary-path.js";
 import { openVerifiedFileSync } from "./safe-open-sync.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 
 //#region src/infra/boundary-file-read.ts
@@ -8,7 +8,7 @@ function canUseBoundaryFileOpen(ioFs) {
 	return typeof ioFs.openSync === "function" && typeof ioFs.closeSync === "function" && typeof ioFs.fstatSync === "function" && typeof ioFs.lstatSync === "function" && typeof ioFs.realpathSync === "function" && typeof ioFs.readFileSync === "function" && typeof ioFs.constants === "object" && ioFs.constants !== null;
 }
 function openBoundaryFileSync(params) {
-	const ioFs = params.ioFs ?? syncFs;
+	const ioFs = params.ioFs ?? fs;
 	const absolutePath = path.resolve(params.absolutePath);
 	let resolvedPath;
 	let rootRealPath;

package/dist/infra/boundary-path.js

@@ -1,8 +1,8 @@
 import { isNotFoundPathError, isPathInside } from "./path-guards.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import fs from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 
 //#region src/infra/boundary-path.ts
 const BOUNDARY_PATH_ALIAS_POLICIES = {
@@ -114,7 +114,7 @@ async function resolveBoundaryPathLexicalAsync(params) {
 		lexicalCursor = path.join(lexicalCursor, segment);
 		let stat;
 		try {
-			stat = await fs.lstat(lexicalCursor);
+			stat = await fs$1.lstat(lexicalCursor);
 		} catch (error) {
 			if (isNotFoundPathError(error)) {
 				const missingSuffix = segments.slice(idx);
@@ -189,7 +189,7 @@ function resolveBoundaryPathLexicalSync(params) {
 		lexicalCursor = path.join(lexicalCursor, segment);
 		let stat;
 		try {
-			stat = syncFs.lstatSync(lexicalCursor);
+			stat = fs.lstatSync(lexicalCursor);
 		} catch (error) {
 			if (isNotFoundPathError(error)) {
 				const missingSuffix = segments.slice(idx);
@@ -294,7 +294,7 @@ async function resolvePathViaExistingAncestor(targetPath) {
 		return normalized;
 	}
 	try {
-		const resolvedAncestor = path.resolve(await fs.realpath(cursor));
+		const resolvedAncestor = path.resolve(await fs$1.realpath(cursor));
 		if (missingSuffix.length === 0) {
 			return resolvedAncestor;
 		}
@@ -307,7 +307,7 @@ function resolvePathViaExistingAncestorSync(targetPath) {
 	const normalized = path.resolve(targetPath);
 	let cursor = normalized;
 	const missingSuffix = [];
-	while (!isFilesystemRoot(cursor) && !syncFs.existsSync(cursor)) {
+	while (!isFilesystemRoot(cursor) && !fs.existsSync(cursor)) {
 		missingSuffix.unshift(path.basename(cursor));
 		const parent = path.dirname(cursor);
 		if (parent === cursor) {
@@ -315,11 +315,11 @@ function resolvePathViaExistingAncestorSync(targetPath) {
 		}
 		cursor = parent;
 	}
-	if (!syncFs.existsSync(cursor)) {
+	if (!fs.existsSync(cursor)) {
 		return normalized;
 	}
 	try {
-		const resolvedAncestor = path.resolve(syncFs.realpathSync(cursor));
+		const resolvedAncestor = path.resolve(fs.realpathSync(cursor));
 		if (missingSuffix.length === 0) {
 			return resolvedAncestor;
 		}
@@ -330,7 +330,7 @@ function resolvePathViaExistingAncestorSync(targetPath) {
 }
 async function getPathKind(absolutePath, preserveFinalSymlink) {
 	try {
-		const stat = preserveFinalSymlink ? await fs.lstat(absolutePath) : await fs.stat(absolutePath);
+		const stat = preserveFinalSymlink ? await fs$1.lstat(absolutePath) : await fs$1.stat(absolutePath);
 		return {
 			exists: true,
 			kind: toResolvedKind(stat)
@@ -347,7 +347,7 @@ async function getPathKind(absolutePath, preserveFinalSymlink) {
 }
 function getPathKindSync(absolutePath, preserveFinalSymlink) {
 	try {
-		const stat = preserveFinalSymlink ? syncFs.lstatSync(absolutePath) : syncFs.statSync(absolutePath);
+		const stat = preserveFinalSymlink ? fs.lstatSync(absolutePath) : fs.statSync(absolutePath);
 		return {
 			exists: true,
 			kind: toResolvedKind(stat)
@@ -408,7 +408,7 @@ function isFilesystemRoot(candidate) {
 }
 async function pathExists(targetPath) {
 	try {
-		await fs.lstat(targetPath);
+		await fs$1.lstat(targetPath);
 		return true;
 	} catch (error) {
 		if (isNotFoundPathError(error)) {
@@ -419,24 +419,24 @@ async function pathExists(targetPath) {
 }
 async function resolveSymlinkHopPath(symlinkPath) {
 	try {
-		return path.resolve(await fs.realpath(symlinkPath));
+		return path.resolve(await fs$1.realpath(symlinkPath));
 	} catch (error) {
 		if (!isNotFoundPathError(error)) {
 			throw error;
 		}
-		const linkTarget = await fs.readlink(symlinkPath);
+		const linkTarget = await fs$1.readlink(symlinkPath);
 		const linkAbsolute = path.resolve(path.dirname(symlinkPath), linkTarget);
 		return resolvePathViaExistingAncestor(linkAbsolute);
 	}
 }
 function resolveSymlinkHopPathSync(symlinkPath) {
 	try {
-		return path.resolve(syncFs.realpathSync(symlinkPath));
+		return path.resolve(fs.realpathSync(symlinkPath));
 	} catch (error) {
 		if (!isNotFoundPathError(error)) {
 			throw error;
 		}
-		const linkTarget = syncFs.readlinkSync(symlinkPath);
+		const linkTarget = fs.readlinkSync(symlinkPath);
 		const linkAbsolute = path.resolve(path.dirname(symlinkPath), linkTarget);
 		return resolvePathViaExistingAncestorSync(linkAbsolute);
 	}

package/dist/infra/brew.js

@@ -1,11 +1,11 @@
-import syncFs from "node:fs";
+import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 
 //#region src/infra/brew.ts
 function isExecutable(filePath) {
 	try {
-		syncFs.accessSync(filePath, syncFs.constants.X_OK);
+		fs.accessSync(filePath, fs.constants.X_OK);
 		return true;
 	} catch {
 		return false;

package/dist/infra/control-ui-assets.js

@@ -2,7 +2,7 @@ import { defaultRuntime } from "../runtime.js";
 import { runCommandWithTimeout } from "../process/exec.js";
 import { resolveFasedAgentPackageRoot, resolveFasedAgentPackageRootSync } from "./fased-root.js";
 import { fileURLToPath } from "node:url";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 
 //#region src/infra/control-ui-assets.ts
@@ -21,7 +21,7 @@ async function resolveControlUiDistIndexHealth(opts = {}) {
 	});
 	return {
 		indexPath,
-		exists: Boolean(indexPath && syncFs.existsSync(indexPath))
+		exists: Boolean(indexPath && fs.existsSync(indexPath))
 	};
 }
 function resolveControlUiRepoRoot(argv1 = process.argv[1]) {
@@ -33,13 +33,13 @@ function resolveControlUiRepoRoot(argv1 = process.argv[1]) {
 	const srcIndex = parts.lastIndexOf("src");
 	if (srcIndex !== -1) {
 		const root = parts.slice(0, srcIndex).join(path.sep);
-		if (syncFs.existsSync(path.join(root, "ui", "vite.config.ts"))) {
+		if (fs.existsSync(path.join(root, "ui", "vite.config.ts"))) {
 			return root;
 		}
 	}
 	let dir = path.dirname(normalized);
 	for (let i = 0; i < 8; i++) {
-		if (syncFs.existsSync(path.join(dir, "package.json")) && syncFs.existsSync(path.join(dir, "ui", "vite.config.ts"))) {
+		if (fs.existsSync(path.join(dir, "package.json")) && fs.existsSync(path.join(dir, "ui", "vite.config.ts"))) {
 			return dir;
 		}
 		const parent = path.dirname(dir);
@@ -72,12 +72,12 @@ async function resolveControlUiDistIndexPath(argv1OrOpts) {
 	for (let i = 0; i < 8; i++) {
 		const pkgJsonPath = path.join(dir, "package.json");
 		const indexPath = path.join(dir, "dist", "control-ui", "index.html");
-		if (syncFs.existsSync(pkgJsonPath)) {
+		if (fs.existsSync(pkgJsonPath)) {
 			try {
-				const raw = syncFs.readFileSync(pkgJsonPath, "utf-8");
+				const raw = fs.readFileSync(pkgJsonPath, "utf-8");
 				const parsed = JSON.parse(raw);
 				if (parsed.name === "fased") {
-					return syncFs.existsSync(indexPath) ? indexPath : null;
+					return fs.existsSync(indexPath) ? indexPath : null;
 				}
 				return null;
 			} catch {
@@ -101,13 +101,13 @@ function addCandidate(candidates, value) {
 function resolveControlUiRootOverrideSync(rootOverride) {
 	const resolved = path.resolve(rootOverride);
 	try {
-		const stats = syncFs.statSync(resolved);
+		const stats = fs.statSync(resolved);
 		if (stats.isFile()) {
 			return path.basename(resolved) === "index.html" ? path.dirname(resolved) : null;
 		}
 		if (stats.isDirectory()) {
 			const indexPath = path.join(resolved, "index.html");
-			return syncFs.existsSync(indexPath) ? resolved : null;
+			return fs.existsSync(indexPath) ? resolved : null;
 		}
 	} catch {
 		return null;
@@ -123,7 +123,7 @@ function resolveControlUiRootSync(opts = {}) {
 	const execDir = (() => {
 		try {
 			const execPath = opts.execPath ?? process.execPath;
-			return path.dirname(syncFs.realpathSync(execPath));
+			return path.dirname(fs.realpathSync(execPath));
 		} catch {
 			return null;
 		}
@@ -149,7 +149,7 @@ function resolveControlUiRootSync(opts = {}) {
 	addCandidate(candidates, path.join(cwd, "dist", "control-ui"));
 	for (const dir of candidates) {
 		const indexPath = path.join(dir, "index.html");
-		if (syncFs.existsSync(indexPath)) {
+		if (fs.existsSync(indexPath)) {
 			return dir;
 		}
 	}
@@ -185,14 +185,14 @@ async function ensureControlUiAssetsBuilt(runtime = defaultRuntime, opts) {
 		};
 	}
 	const indexPath = resolveControlUiDistIndexPathForRoot(repoRoot);
-	if (syncFs.existsSync(indexPath)) {
+	if (fs.existsSync(indexPath)) {
 		return {
 			ok: true,
 			built: false
 		};
 	}
 	const uiScript = path.join(repoRoot, "scripts", "ui.js");
-	if (!syncFs.existsSync(uiScript)) {
+	if (!fs.existsSync(uiScript)) {
 		return {
 			ok: false,
 			built: false,
@@ -215,7 +215,7 @@ async function ensureControlUiAssetsBuilt(runtime = defaultRuntime, opts) {
 			message: `Control UI build failed: ${summarizeCommandOutput(build.stderr) ?? `exit ${build.code}`}`
 		};
 	}
-	if (!syncFs.existsSync(indexPath)) {
+	if (!fs.existsSync(indexPath)) {
 		return {
 			ok: false,
 			built: true,

package/dist/infra/device-auth-store.js

@@ -1,6 +1,6 @@
 import { resolveStateDir } from "../config/paths.js";
 import { normalizeDeviceAuthRole, normalizeDeviceAuthScopes } from "../shared/device-auth.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 
 //#region src/infra/device-auth-store.ts
@@ -10,10 +10,10 @@ function resolveDeviceAuthPath(env = process.env) {
 }
 function readStore(filePath) {
 	try {
-		if (!syncFs.existsSync(filePath)) {
+		if (!fs.existsSync(filePath)) {
 			return null;
 		}
-		const raw = syncFs.readFileSync(filePath, "utf8");
+		const raw = fs.readFileSync(filePath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (parsed?.version !== 1 || typeof parsed.deviceId !== "string") {
 			return null;
@@ -27,10 +27,10 @@ function readStore(filePath) {
 	}
 }
 function writeStore(filePath, store) {
-	syncFs.mkdirSync(path.dirname(filePath), { recursive: true });
-	syncFs.writeFileSync(filePath, `${JSON.stringify(store, null, 2)}\n`, { mode: 384 });
+	fs.mkdirSync(path.dirname(filePath), { recursive: true });
+	fs.writeFileSync(filePath, `${JSON.stringify(store, null, 2)}\n`, { mode: 384 });
 	try {
-		syncFs.chmodSync(filePath, 384);
+		fs.chmodSync(filePath, 384);
 	} catch {}
 }
 function loadDeviceAuthToken(params) {
@@ -88,11 +88,11 @@ function clearDeviceAuthToken(params) {
 }
 function clearDeviceAuthStore(env = process.env) {
 	const filePath = resolveDeviceAuthPath(env);
-	if (!syncFs.existsSync(filePath)) {
+	if (!fs.existsSync(filePath)) {
 		return false;
 	}
 	try {
-		syncFs.unlinkSync(filePath);
+		fs.unlinkSync(filePath);
 		return true;
 	} catch {
 		return false;

package/dist/infra/device-identity.js

@@ -1,5 +1,5 @@
 import { resolveStateDir } from "../config/paths.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 import crypto from "node:crypto";
 
@@ -8,7 +8,7 @@ function resolveDefaultIdentityPath() {
 	return path.join(resolveStateDir(), "identity", "device.json");
 }
 function ensureDir(filePath) {
-	syncFs.mkdirSync(path.dirname(filePath), { recursive: true });
+	fs.mkdirSync(path.dirname(filePath), { recursive: true });
 }
 const ED25519_SPKI_PREFIX = Buffer.from("302a300506032b6570032100", "hex");
 function base64UrlEncode(buf) {
@@ -56,8 +56,8 @@ function createEphemeralDeviceIdentity() {
 }
 function loadOrCreateDeviceIdentity(filePath = resolveDefaultIdentityPath()) {
 	try {
-		if (syncFs.existsSync(filePath)) {
-			const raw = syncFs.readFileSync(filePath, "utf8");
+		if (fs.existsSync(filePath)) {
+			const raw = fs.readFileSync(filePath, "utf8");
 			const parsed = JSON.parse(raw);
 			if (parsed?.version === 1 && typeof parsed.deviceId === "string" && typeof parsed.publicKeyPem === "string" && typeof parsed.privateKeyPem === "string") {
 				const derivedId = fingerprintPublicKey(parsed.publicKeyPem);
@@ -66,9 +66,9 @@ function loadOrCreateDeviceIdentity(filePath = resolveDefaultIdentityPath()) {
 						...parsed,
 						deviceId: derivedId
 					};
-					syncFs.writeFileSync(filePath, `${JSON.stringify(updated, null, 2)}\n`, { mode: 384 });
+					fs.writeFileSync(filePath, `${JSON.stringify(updated, null, 2)}\n`, { mode: 384 });
 					try {
-						syncFs.chmodSync(filePath, 384);
+						fs.chmodSync(filePath, 384);
 					} catch {}
 					return {
 						deviceId: derivedId,
@@ -93,9 +93,9 @@ function loadOrCreateDeviceIdentity(filePath = resolveDefaultIdentityPath()) {
 		privateKeyPem: identity.privateKeyPem,
 		createdAtMs: Date.now()
 	};
-	syncFs.writeFileSync(filePath, `${JSON.stringify(stored, null, 2)}\n`, { mode: 384 });
+	fs.writeFileSync(filePath, `${JSON.stringify(stored, null, 2)}\n`, { mode: 384 });
 	try {
-		syncFs.chmodSync(filePath, 384);
+		fs.chmodSync(filePath, 384);
 	} catch {}
 	return identity;
 }

package/dist/infra/dotenv.js

@@ -1,7 +1,7 @@
 import { resolveRequiredHomeDir } from "./home-dir.js";
 import { resolveConfigDir } from "../utils.js";
 import { isDangerousHostEnvOverrideVarName, isDangerousHostEnvVarName, normalizeEnvVarKey } from "./host-env-security.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import dotenv from "dotenv";
@@ -84,7 +84,7 @@ function shouldBlockWorkspaceDotEnvKey(key) {
 function readDotEnvFile(params) {
 	let content;
 	try {
-		content = syncFs.readFileSync(params.filePath, "utf8");
+		content = fs.readFileSync(params.filePath, "utf8");
 	} catch (error) {
 		if (!params.quiet) {
 			const code = error && typeof error === "object" && "code" in error ? String(error.code) : undefined;

package/dist/infra/exec-approvals.js

@@ -4,7 +4,7 @@ import { DEFAULT_SAFE_BINS, matchAllowlist, parseExecArgvToken, resolveAllowlist
 import { analyzeArgvCommand, analyzeShellCommand, buildEnforcedShellCommand, isWindowsPlatform, splitCommandChain, splitCommandChainWithOperators } from "./exec-approvals-analysis.js";
 import { evaluateExecAllowlist, evaluateShellAllowlist, isSafeBinUsage, normalizeSafeBins, resolveAllowAlwaysPatterns, resolveSafeBins } from "./exec-approvals-allowlist.js";
 import { requestJsonlSocket } from "./jsonl-socket.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 import crypto from "node:crypto";
 
@@ -61,7 +61,7 @@ function mergeLegacyAgent(current, legacy) {
 }
 function ensureDir(filePath) {
 	const dir = path.dirname(filePath);
-	syncFs.mkdirSync(dir, { recursive: true });
+	fs.mkdirSync(dir, { recursive: true });
 }
 function coerceAllowlistEntries(allowlist) {
 	if (!Array.isArray(allowlist) || allowlist.length === 0) {
@@ -162,7 +162,7 @@ function generateToken() {
 }
 function readExecApprovalsSnapshot() {
 	const filePath = resolveExecApprovalsPath();
-	if (!syncFs.existsSync(filePath)) {
+	if (!fs.existsSync(filePath)) {
 		const file = normalizeExecApprovals({
 			version: 1,
 			agents: {}
@@ -175,7 +175,7 @@ function readExecApprovalsSnapshot() {
 			hash: hashExecApprovalsRaw(null)
 		};
 	}
-	const raw = syncFs.readFileSync(filePath, "utf8");
+	const raw = fs.readFileSync(filePath, "utf8");
 	let parsed = null;
 	try {
 		parsed = JSON.parse(raw);
@@ -197,13 +197,13 @@ function readExecApprovalsSnapshot() {
 function loadExecApprovals() {
 	const filePath = resolveExecApprovalsPath();
 	try {
-		if (!syncFs.existsSync(filePath)) {
+		if (!fs.existsSync(filePath)) {
 			return normalizeExecApprovals({
 				version: 1,
 				agents: {}
 			});
 		}
-		const raw = syncFs.readFileSync(filePath, "utf8");
+		const raw = fs.readFileSync(filePath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (parsed?.version !== 1) {
 			return normalizeExecApprovals({
@@ -222,9 +222,9 @@ function loadExecApprovals() {
 function saveExecApprovals(file) {
 	const filePath = resolveExecApprovalsPath();
 	ensureDir(filePath);
-	syncFs.writeFileSync(filePath, `${JSON.stringify(file, null, 2)}\n`, { mode: 384 });
+	fs.writeFileSync(filePath, `${JSON.stringify(file, null, 2)}\n`, { mode: 384 });
 	try {
-		syncFs.chmodSync(filePath, 384);
+		fs.chmodSync(filePath, 384);
 	} catch {}
 }
 function ensureExecApprovals() {

package/dist/infra/exec-command-resolution.js

@@ -1,6 +1,6 @@
 import { expandHomePrefix } from "./home-dir.js";
 import { resolveDispatchWrapperExecutionPlan } from "./exec-wrapper-resolution.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 
 //#region src/infra/exec-command-resolution.ts
@@ -15,12 +15,12 @@ const DEFAULT_SAFE_BINS = [
 ];
 function isExecutableFile(filePath) {
 	try {
-		const stat = syncFs.statSync(filePath);
+		const stat = fs.statSync(filePath);
 		if (!stat.isFile()) {
 			return false;
 		}
 		if (process.platform !== "win32") {
-			syncFs.accessSync(filePath, syncFs.constants.X_OK);
+			fs.accessSync(filePath, fs.constants.X_OK);
 		}
 		return true;
 	} catch {
@@ -111,7 +111,7 @@ function normalizeMatchTarget(value) {
 }
 function tryRealpath(value) {
 	try {
-		return syncFs.realpathSync(value);
+		return fs.realpathSync(value);
 	} catch {
 		return null;
 	}

package/dist/infra/exec-safe-bin-trust.js

@@ -1,4 +1,4 @@
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 
 //#region src/infra/exec-safe-bin-trust.ts
@@ -61,7 +61,7 @@ function listWritableExplicitTrustedSafeBinDirs(entries) {
 	for (const dir of resolved) {
 		let stat;
 		try {
-			stat = syncFs.statSync(dir);
+			stat = fs.statSync(dir);
 		} catch {
 			continue;
 		}

package/dist/infra/fased-root.js

@@ -1,13 +1,13 @@
 import { fileURLToPath } from "node:url";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
-import fs from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 
 //#region src/infra/fased-root.ts
 const CORE_PACKAGE_NAMES = new Set(["fased", "@fased/fased"]);
 async function readPackageName(dir) {
 	try {
-		const raw = await fs.readFile(path.join(dir, "package.json"), "utf-8");
+		const raw = await fs$1.readFile(path.join(dir, "package.json"), "utf-8");
 		const parsed = JSON.parse(raw);
 		return typeof parsed.name === "string" ? parsed.name : null;
 	} catch {
@@ -16,7 +16,7 @@ async function readPackageName(dir) {
 }
 function readPackageNameSync(dir) {
 	try {
-		const raw = syncFs.readFileSync(path.join(dir, "package.json"), "utf-8");
+		const raw = fs.readFileSync(path.join(dir, "package.json"), "utf-8");
 		const parsed = JSON.parse(raw);
 		return typeof parsed.name === "string" ? parsed.name : null;
 	} catch {
@@ -56,7 +56,7 @@ function candidateDirsFromArgv1(argv1) {
 	const normalized = path.resolve(argv1);
 	const candidates = [path.dirname(normalized)];
 	try {
-		const resolved = syncFs.realpathSync(normalized);
+		const resolved = fs.realpathSync(normalized);
 		if (resolved !== normalized) {
 			candidates.push(path.dirname(resolved));
 		}