@fased/fased 0.1.56 → 0.1.58

package/dist/cli/secrets-cli.js

@@ -7,12 +7,12 @@ import { isSecretsApplyPlan } from "../secrets/plan.js";
 import { runSecretsApply } from "../secrets/apply.js";
 import { resolveSecretsAuditExitCode, runSecretsAudit } from "../secrets/audit.js";
 import { runSecretsConfigureInteractive } from "../secrets/configure.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import { confirm } from "@clack/prompts";
 
 //#region src/cli/secrets-cli.ts
 function readPlanFile(pathname) {
-	const raw = syncFs.readFileSync(pathname, "utf8");
+	const raw = fs.readFileSync(pathname, "utf8");
 	const parsed = JSON.parse(raw);
 	if (!isSecretsApplyPlan(parsed)) {
 		throw new Error(`Invalid secrets plan file: ${pathname}`);
@@ -71,7 +71,7 @@ function registerSecretsCli(program) {
 				skipProviderSetup: Boolean(opts.skipProviderSetup)
 			});
 			if (opts.planOut) {
-				syncFs.writeFileSync(opts.planOut, `${JSON.stringify(configured.plan, null, 2)}\n`, "utf8");
+				fs.writeFileSync(opts.planOut, `${JSON.stringify(configured.plan, null, 2)}\n`, "utf8");
 			}
 			if (opts.json) {
 				defaultRuntime.log(JSON.stringify({

package/dist/cli/update-cli/update-command.js

@@ -9,6 +9,8 @@ import { readConfigFileSnapshot, writeConfigFile } from "../../config/io.js";
 import "../../config/config.js";
 import { loadGatewayTlsRuntime } from "../../infra/tls/gateway.js";
 import { stylePromptMessage } from "../../terminal/prompt-style.js";
+import { syncPluginsForUpdateChannel, updateNpmInstalledPlugins } from "../../plugins/update.js";
+import { OPENAI_RUNTIME_COMPONENT_ID, ensureOpenAICodexRuntimeComponent, hasConfiguredOpenAICodexProfile } from "../../agents/openai-codex-runtime-component.js";
 import { DEFAULT_GIT_CHANNEL, DEFAULT_PACKAGE_CHANNEL, channelToNpmTag, normalizeUpdateChannel } from "../../infra/update-channels.js";
 import { cleanupGlobalRenameDirs, globalInstallArgs, resolveGlobalPackageRoot, resolveNodeModulesRootForPackageRoot } from "../../infra/update-global.js";
 import { checkUpdateStatus, compareSemverStrings, resolveNpmChannelTag } from "../../infra/update-check.js";
@@ -18,7 +20,6 @@ import { renderRestartDiagnostics, terminateStaleGatewayPids, waitForGatewayHeal
 import { runDaemonRestart } from "../daemon-cli/lifecycle.js";
 import "../../daemon-cli.js";
 import { installCompletion } from "../completion-cli.js";
-import { syncPluginsForUpdateChannel, updateNpmInstalledPlugins } from "../../plugins/update.js";
 import { readPackageName, readPackageVersion } from "../../infra/package-json.js";
 import { finalizeUpdateTransaction, rollbackUpdateTransaction, runGatewayUpdate } from "../../infra/update-runner.js";
 import { checkShellCompletionStatus, ensureCompletionCacheExists } from "../../commands/doctor-completion.js";
@@ -422,14 +423,32 @@ async function updatePluginsAfterCoreUpdate(params) {
 		config: params.configSnapshot.config,
 		updateCompleted: true
 	});
-	const installs = repairResult.config.plugins?.installs ?? {};
+	let pluginConfig = repairResult.config;
+	let installedOpenAIRuntime = false;
+	if (hasConfiguredOpenAICodexProfile(pluginConfig)) {
+		const runtimeComponent = await ensureOpenAICodexRuntimeComponent({
+			config: pluginConfig,
+			version: params.targetVersion
+		});
+		pluginConfig = runtimeComponent.config;
+		installedOpenAIRuntime = runtimeComponent.installed;
+		if (runtimeComponent.installed && !params.opts.json) {
+			defaultRuntime.log(theme.muted("Installed the managed OpenAI sign-in runtime required by the existing ChatGPT credential."));
+		}
+		for (const warning of runtimeComponent.slotWarnings) {
+			if (!params.opts.json) {
+				defaultRuntime.log(theme.warn(warning));
+			}
+		}
+	}
+	const installs = pluginConfig.plugins?.installs ?? {};
 	if (Object.keys(installs).length === 0) {
-		if (repairResult.changed) {
-			await writeConfigFile(repairResult.config);
+		if (repairResult.changed || installedOpenAIRuntime) {
+			await writeConfigFile(pluginConfig);
 		}
 		return {
-			changed: repairResult.changed,
-			checked: false
+			changed: repairResult.changed || installedOpenAIRuntime,
+			checked: installedOpenAIRuntime
 		};
 	}
 	const pluginLogger = params.opts.json ? {} : {
@@ -442,25 +461,25 @@ async function updatePluginsAfterCoreUpdate(params) {
 		defaultRuntime.log(theme.heading("Updating plugins..."));
 	}
 	const syncResult = await syncPluginsForUpdateChannel({
-		config: repairResult.config,
+		config: pluginConfig,
 		channel: params.channel,
 		workspaceDir: params.root,
 		logger: pluginLogger
 	});
-	let pluginConfig = syncResult.config;
+	pluginConfig = syncResult.config;
 	const npmResult = await updateNpmInstalledPlugins({
 		config: pluginConfig,
-		skipIds: new Set(syncResult.summary.switchedToNpm),
+		skipIds: new Set([...syncResult.summary.switchedToNpm, ...installedOpenAIRuntime ? [OPENAI_RUNTIME_COMPONENT_ID] : []]),
 		updateChannel: params.channel,
 		logger: pluginLogger
 	});
 	pluginConfig = npmResult.config;
-	if (repairResult.changed || syncResult.changed || npmResult.changed) {
+	if (repairResult.changed || installedOpenAIRuntime || syncResult.changed || npmResult.changed) {
 		await writeConfigFile(pluginConfig);
 	}
 	if (params.opts.json) {
 		return {
-			changed: repairResult.changed || syncResult.changed || npmResult.changed,
+			changed: repairResult.changed || installedOpenAIRuntime || syncResult.changed || npmResult.changed,
 			checked: true
 		};
 	}
@@ -511,7 +530,7 @@ async function updatePluginsAfterCoreUpdate(params) {
 		defaultRuntime.log(theme.error(outcome.message));
 	}
 	return {
-		changed: repairResult.changed || syncResult.changed || npmResult.changed,
+		changed: repairResult.changed || installedOpenAIRuntime || syncResult.changed || npmResult.changed,
 		checked: true
 	};
 }
@@ -802,6 +821,24 @@ async function updateCommand(opts) {
 		}
 	}
 	if (alreadyCurrent && currentVersion && targetVersion) {
+		if (configSnapshot.valid && hasConfiguredOpenAICodexProfile(configSnapshot.config)) {
+			try {
+				const runtimeComponent = await ensureOpenAICodexRuntimeComponent({
+					config: configSnapshot.config,
+					version: targetVersion
+				});
+				if (runtimeComponent.installed) {
+					await writeConfigFile(runtimeComponent.config);
+					if (!opts.json) {
+						defaultRuntime.log(theme.muted("Installed the version-matched OpenAI sign-in runtime required by the current release."));
+					}
+				}
+			} catch (error) {
+				defaultRuntime.error(`OpenAI sign-in runtime update failed: ${String(error)}`);
+				defaultRuntime.exit(1);
+				return;
+			}
+		}
 		const runningRuntime = await probeRunningGatewayRuntimeIdentity({ timeoutMs: 750 });
 		if (runningRuntime.reachable && runningRuntime.version !== currentVersion) {
 			if (!shouldRestart) {
@@ -1000,6 +1037,7 @@ async function updateCommand(opts) {
 	const pluginResult = await measureUpdateStage(lifecycleTimings, "plugin updates", () => updatePluginsAfterCoreUpdate({
 		root,
 		channel,
+		targetVersion: result.after?.version ?? targetVersion ?? undefined,
 		configSnapshot,
 		opts
 	}));

package/dist/cli/windows-argv.js

@@ -1,4 +1,4 @@
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 
 //#region src/cli/windows-argv.ts
@@ -33,7 +33,7 @@ function normalizeWindowsArgv(argv) {
 			return false;
 		}
 		const lower = normalized.toLowerCase();
-		return lower === execPathLower || path.basename(lower) === execBase || lower.endsWith("\\node.exe") || lower.endsWith("/node.exe") || lower.includes("node.exe") || path.basename(lower) === "node.exe" && syncFs.existsSync(normalized);
+		return lower === execPathLower || path.basename(lower) === execBase || lower.endsWith("\\node.exe") || lower.endsWith("/node.exe") || lower.includes("node.exe") || path.basename(lower) === "node.exe" && fs.existsSync(normalized);
 	};
 	const next = [...argv];
 	for (let i = 1; i <= 3 && i < next.length;) {

package/dist/commands/agent.js

@@ -19,7 +19,6 @@ import { resolveAndPersistSessionFile } from "../config/sessions/session-file.js
 import { parseSessionThreadInfo } from "../config/sessions/delivery-info.js";
 import "../config/sessions.js";
 import { resolveMessageChannel } from "../utils/message-channel.js";
-import { buildCredentialScopedAllowedModelSet } from "../agents/model-catalog-access.js";
 import { clearAgentRunContext, emitAgentEvent, registerAgentRunContext } from "../infra/agent-events.js";
 import { AGENT_LANE_SUBAGENT } from "../agents/lanes.js";
 import { buildOutboundSessionContext } from "../infra/outbound/session-context.js";
@@ -27,6 +26,7 @@ import { resolveSendPolicy } from "../sessions/send-policy.js";
 import { toAcpRuntimeError } from "../acp/runtime/errors.js";
 import { getAcpSessionManager } from "../acp/control-plane/manager.js";
 import { resolveAcpAgentPolicyError, resolveAcpDispatchPolicyError } from "../acp/policy.js";
+import { buildCredentialScopedAllowedModelSet } from "../agents/model-catalog-access.js";
 import { loadModelCatalog } from "../agents/model-catalog.js";
 import { runWithModelFallback } from "../agents/model-fallback.js";
 import { applyModelOverrideToSessionEntry } from "../sessions/model-overrides.js";

package/dist/commands/auth-choice.apply.openai.js

@@ -1,4 +1,5 @@
 import { openUrl } from "./onboard-helpers.js";
+import { ensureOpenAICodexRuntimeComponent } from "../agents/openai-codex-runtime-component.js";
 import { normalizeApiKeyInput, validateApiKeyInput } from "./auth-choice.api-key.js";
 import { applyDefaultModelChoice } from "./auth-choice.default-model.js";
 import { createAuthChoiceAgentModelNoter, ensureApiKeyFromOptionEnvOrPrompt, normalizeSecretInputModeInput } from "./auth-choice.apply-helpers.js";
@@ -82,6 +83,14 @@ async function applyAuthChoiceOpenAI(params) {
 			};
 		}
 		if (creds) {
+			const runtimeComponent = await ensureOpenAICodexRuntimeComponent({ config: nextConfig });
+			nextConfig = runtimeComponent.config;
+			for (const warning of runtimeComponent.slotWarnings) {
+				await params.prompter.note(warning, "OpenAI runtime warning");
+			}
+			if (runtimeComponent.installed) {
+				await params.prompter.note("Installed the managed OpenAI sign-in runtime for authenticated model discovery and execution.", "OpenAI runtime ready");
+			}
 			const profileId = await writeOAuthCredentials("openai-codex", creds, params.agentDir, { syncSiblingAgents: true });
 			nextConfig = applyAuthProfileConfig(nextConfig, {
 				profileId,

package/dist/commands/auth-choice.apply.plugin-provider.js

@@ -1,8 +1,8 @@
 import { resolveDefaultAgentWorkspaceDir } from "../agents/workspace.js";
 import { resolveAgentDir, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../agents/agent-scope.js";
 import { resolveFasedAgentAgentDir } from "../agents/agent-paths.js";
-import { resolvePluginProviders } from "../plugins/providers.js";
 import { enablePluginInConfig } from "../plugins/enable.js";
+import { resolvePluginProviders } from "../plugins/providers.js";
 import { pickAuthMethod, resolveProviderMatch } from "../plugins/provider-auth-choice-helpers.js";
 import { applyPluginProviderAuthRunResult, createPluginProviderAuthContext, runInteractivePluginProviderOAuthDeviceAuth } from "../plugins/provider-auth-runtime.js";
 

package/dist/commands/dashboard-link.js

@@ -4,7 +4,7 @@ import { parseDurationMs } from "../cli/parse-duration.js";
 import { readConfigFileSnapshot } from "../config/io.js";
 import "../config/config.js";
 import { CONTROL_UI_LOGIN_DEFAULT_GRANT_TTL_MS, createLoginGrant, normalizePublicHost } from "../gateway/control-ui-login.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 
 //#region src/commands/dashboard-link.ts
@@ -12,10 +12,10 @@ const AGENT_DOMAIN_SUFFIX = ".agents.fased.app";
 function readStateGatewayToken(env = process.env) {
 	try {
 		const filePath = path.join(resolveStateDir(env), "gateway-secret");
-		if (!syncFs.existsSync(filePath)) {
+		if (!fs.existsSync(filePath)) {
 			return "";
 		}
-		return syncFs.readFileSync(filePath, "utf8").trim();
+		return fs.readFileSync(filePath, "utf8").trim();
 	} catch {
 		return "";
 	}

package/dist/commands/doctor-install.js

@@ -1,5 +1,5 @@
 import { note } from "../terminal/note.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 
 //#region src/commands/doctor-install.ts
@@ -8,7 +8,7 @@ function noteSourceInstallIssues(root) {
 		return;
 	}
 	const workspaceMarker = path.join(root, "pnpm-workspace.yaml");
-	if (!syncFs.existsSync(workspaceMarker)) {
+	if (!fs.existsSync(workspaceMarker)) {
 		return;
 	}
 	const warnings = [];
@@ -16,13 +16,13 @@ function noteSourceInstallIssues(root) {
 	const pnpmStore = path.join(nodeModules, ".pnpm");
 	const tsxBin = path.join(nodeModules, ".bin", "tsx");
 	const srcEntry = path.join(root, "src", "entry.ts");
-	if (syncFs.existsSync(nodeModules) && !syncFs.existsSync(pnpmStore)) {
+	if (fs.existsSync(nodeModules) && !fs.existsSync(pnpmStore)) {
 		warnings.push("- node_modules was not installed by pnpm (missing node_modules/.pnpm). Run: pnpm install");
 	}
-	if (syncFs.existsSync(path.join(root, "package-lock.json"))) {
+	if (fs.existsSync(path.join(root, "package-lock.json"))) {
 		warnings.push("- package-lock.json present in a pnpm workspace. If you ran npm install, remove it and reinstall with pnpm.");
 	}
-	if (syncFs.existsSync(srcEntry) && !syncFs.existsSync(tsxBin)) {
+	if (fs.existsSync(srcEntry) && !fs.existsSync(tsxBin)) {
 		warnings.push("- tsx binary is missing for source runs. Run: pnpm install");
 	}
 	if (warnings.length > 0) {

package/dist/commands/doctor-memory-search.js

@@ -5,7 +5,7 @@ import { resolveApiKeyForProvider } from "../agents/model-auth.js";
 import { resolveMemoryBackendConfig } from "../memory/backend-config.js";
 import { resolveMemorySearchConfig } from "../agents/memory-search.js";
 import { note } from "../terminal/note.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 
 //#region src/commands/doctor-memory-search.ts
 /**
@@ -126,7 +126,7 @@ function hasLocalEmbeddings(local) {
 	}
 	const resolved = resolveUserPath(modelPath);
 	try {
-		return syncFs.statSync(resolved).isFile();
+		return fs.statSync(resolved).isFile();
 	} catch {
 		return false;
 	}

package/dist/commands/doctor-platform-notes.js

@@ -1,6 +1,6 @@
 import { shortenHomePath } from "../utils.js";
 import { note } from "../terminal/note.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { promisify } from "node:util";
@@ -17,7 +17,7 @@ async function noteMacLaunchAgentOverrides() {
 	}
 	const home = resolveHomeDir();
 	const markerCandidates = [path.join(home, ".fased", "disable-launchagent")];
-	const markerPath = markerCandidates.find((candidate) => syncFs.existsSync(candidate));
+	const markerPath = markerCandidates.find((candidate) => fs.existsSync(candidate));
 	if (!markerPath) {
 		return;
 	}

package/dist/commands/doctor-sandbox.js

@@ -3,7 +3,7 @@ import { DEFAULT_SANDBOX_BROWSER_IMAGE, DEFAULT_SANDBOX_COMMON_IMAGE, DEFAULT_SA
 import { resolveSandboxScope } from "../agents/sandbox/config.js";
 import "../agents/sandbox.js";
 import { note } from "../terminal/note.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 
 //#region src/commands/doctor-sandbox.ts
@@ -18,7 +18,7 @@ function resolveSandboxScript(scriptRel) {
 	}
 	for (const root of candidates) {
 		const scriptPath = path.join(root, scriptRel);
-		if (syncFs.existsSync(scriptPath)) {
+		if (fs.existsSync(scriptPath)) {
 			return {
 				scriptPath,
 				cwd: root

package/dist/commands/doctor-state-integrity.js

@@ -11,28 +11,28 @@ import { loadSessionStore } from "../config/sessions/store.js";
 import { ensureSessionTranscriptHeader } from "../config/sessions/transcript.js";
 import "../config/sessions.js";
 import { note } from "../terminal/note.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 
 //#region src/commands/doctor-state-integrity.ts
 function existsDir(dir) {
 	try {
-		return syncFs.existsSync(dir) && syncFs.statSync(dir).isDirectory();
+		return fs.existsSync(dir) && fs.statSync(dir).isDirectory();
 	} catch {
 		return false;
 	}
 }
 function existsFile(filePath) {
 	try {
-		return syncFs.existsSync(filePath) && syncFs.statSync(filePath).isFile();
+		return fs.existsSync(filePath) && fs.statSync(filePath).isFile();
 	} catch {
 		return false;
 	}
 }
 function canWriteDir(dir) {
 	try {
-		syncFs.accessSync(dir, syncFs.constants.W_OK);
+		fs.accessSync(dir, fs.constants.W_OK);
 		return true;
 	} catch {
 		return false;
@@ -40,7 +40,7 @@ function canWriteDir(dir) {
 }
 function ensureDir(dir) {
 	try {
-		syncFs.mkdirSync(dir, { recursive: true });
+		fs.mkdirSync(dir, { recursive: true });
 		return { ok: true };
 	} catch (err) {
 		return {
@@ -53,7 +53,7 @@ function dirPermissionHint(dir) {
 	const uid = typeof process.getuid === "function" ? process.getuid() : null;
 	const gid = typeof process.getgid === "function" ? process.getgid() : null;
 	try {
-		const stat = syncFs.statSync(dir);
+		const stat = fs.statSync(dir);
 		if (uid !== null && stat.uid !== uid) {
 			return `Owner mismatch (uid ${stat.uid}). Run: sudo chown -R $USER "${dir}"`;
 		}
@@ -71,7 +71,7 @@ function addUserRwx(mode) {
 }
 function countJsonlLines(filePath) {
 	try {
-		const raw = syncFs.readFileSync(filePath, "utf-8");
+		const raw = fs.readFileSync(filePath, "utf-8");
 		if (!raw) {
 			return 0;
 		}
@@ -96,7 +96,7 @@ function findOtherStateDirs(stateDir) {
 	for (const root of roots) {
 		let entries = [];
 		try {
-			entries = syncFs.readdirSync(root, { withFileTypes: true });
+			entries = fs.readdirSync(root, { withFileTypes: true });
 		} catch {
 			continue;
 		}
@@ -226,9 +226,9 @@ async function noteStateIntegrity(cfg, prompter, configPath) {
 		});
 		if (repair) {
 			try {
-				const stat = syncFs.statSync(stateDir);
+				const stat = fs.statSync(stateDir);
 				const target = addUserRwx(stat.mode);
-				syncFs.chmodSync(stateDir, target);
+				fs.chmodSync(stateDir, target);
 				changes.push(`- Repaired permissions on ${displayStateDir}`);
 			} catch (err) {
 				warnings.push(`- Failed to repair ${displayStateDir}: ${String(err)}`);
@@ -237,10 +237,10 @@ async function noteStateIntegrity(cfg, prompter, configPath) {
 	}
 	if (stateDirExists && process.platform !== "win32") {
 		try {
-			const dirLstat = syncFs.lstatSync(stateDir);
+			const dirLstat = fs.lstatSync(stateDir);
 			const isDirSymlink = dirLstat.isSymbolicLink();
-			const stat = isDirSymlink ? syncFs.statSync(stateDir) : dirLstat;
-			const resolvedDir = isDirSymlink ? syncFs.realpathSync(stateDir) : stateDir;
+			const stat = isDirSymlink ? fs.statSync(stateDir) : dirLstat;
+			const resolvedDir = isDirSymlink ? fs.realpathSync(stateDir) : stateDir;
 			const isImmutableStore = resolvedDir.startsWith("/nix/store/");
 			if (!isImmutableStore && (stat.mode & 63) !== 0) {
 				warnings.push(`- State directory permissions are too open (${displayStateDir}). Recommend chmod 700.`);
@@ -249,7 +249,7 @@ async function noteStateIntegrity(cfg, prompter, configPath) {
 					initialValue: true
 				});
 				if (tighten) {
-					syncFs.chmodSync(stateDir, 448);
+					fs.chmodSync(stateDir, 448);
 					changes.push(`- Tightened permissions on ${displayStateDir} to 700`);
 				}
 			}
@@ -259,10 +259,10 @@ async function noteStateIntegrity(cfg, prompter, configPath) {
 	}
 	if (configPath && existsFile(configPath) && process.platform !== "win32") {
 		try {
-			const configLstat = syncFs.lstatSync(configPath);
+			const configLstat = fs.lstatSync(configPath);
 			const isSymlink = configLstat.isSymbolicLink();
-			const stat = isSymlink ? syncFs.statSync(configPath) : configLstat;
-			const resolvedConfig = isSymlink ? syncFs.realpathSync(configPath) : configPath;
+			const stat = isSymlink ? fs.statSync(configPath) : configLstat;
+			const resolvedConfig = isSymlink ? fs.realpathSync(configPath) : configPath;
 			const isImmutableConfig = resolvedConfig.startsWith("/nix/store/");
 			if (!isImmutableConfig && (stat.mode & 63) !== 0) {
 				warnings.push(`- Config file is group/world readable (${displayConfigPath ?? configPath}). Recommend chmod 600.`);
@@ -271,7 +271,7 @@ async function noteStateIntegrity(cfg, prompter, configPath) {
 					initialValue: true
 				});
 				if (tighten) {
-					syncFs.chmodSync(configPath, 384);
+					fs.chmodSync(configPath, 384);
 					changes.push(`- Tightened permissions on ${displayConfigPath ?? configPath} to 600`);
 				}
 			}
@@ -330,9 +330,9 @@ async function noteStateIntegrity(cfg, prompter, configPath) {
 				});
 				if (repair) {
 					try {
-						const stat = syncFs.statSync(dir);
+						const stat = fs.statSync(dir);
 						const target = addUserRwx(stat.mode);
-						syncFs.chmodSync(dir, target);
+						fs.chmodSync(dir, target);
 						changes.push(`- Repaired permissions on ${label}: ${displayDir}`);
 					} catch (err) {
 						warnings.push(`- Failed to repair ${displayDir}: ${String(err)}`);
@@ -432,7 +432,7 @@ async function noteStateIntegrity(cfg, prompter, configPath) {
 				referencedTranscriptPaths.add(path.resolve(resolveSessionFilePath(entry.sessionId, entry, sessionPathOpts)));
 			} catch {}
 		}
-		const sessionDirEntries = syncFs.readdirSync(sessionsDir, { withFileTypes: true });
+		const sessionDirEntries = fs.readdirSync(sessionsDir, { withFileTypes: true });
 		const orphanTranscriptPaths = sessionDirEntries.filter((entry) => entry.isFile() && isPrimarySessionTranscriptFileName(entry.name)).map((entry) => path.resolve(path.join(sessionsDir, entry.name))).filter((filePath) => !referencedTranscriptPaths.has(filePath));
 		if (orphanTranscriptPaths.length > 0) {
 			warnings.push(`- Found ${orphanTranscriptPaths.length} orphan transcript file(s) in ${displaySessionsDir}. They are not referenced by sessions.json and can consume disk over time.`);
@@ -446,7 +446,7 @@ async function noteStateIntegrity(cfg, prompter, configPath) {
 				for (const orphanPath of orphanTranscriptPaths) {
 					const archivedPath = `${orphanPath}.deleted.${archivedAt}`;
 					try {
-						syncFs.renameSync(orphanPath, archivedPath);
+						fs.renameSync(orphanPath, archivedPath);
 						archived += 1;
 					} catch (err) {
 						warnings.push(`- Failed to archive orphan transcript ${shortenHomePath(orphanPath)}: ${String(err)}`);
@@ -470,7 +470,7 @@ function noteWorkspaceBackupTip(workspaceDir) {
 		return;
 	}
 	const gitMarker = path.join(workspaceDir, ".git");
-	if (syncFs.existsSync(gitMarker)) {
+	if (fs.existsSync(gitMarker)) {
 		return;
 	}
 	note([

package/dist/commands/doctor-workspace.js

@@ -1,6 +1,6 @@
 import { shortenHomePath } from "../utils.js";
 import { DEFAULT_AGENTS_FILENAME } from "../agents/workspace.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 
 //#region src/commands/doctor-workspace.ts
@@ -16,13 +16,13 @@ async function shouldSuggestMemorySystem(workspaceDir) {
 	const memoryPaths = [path.join(workspaceDir, "MEMORY.md"), path.join(workspaceDir, "memory.md")];
 	for (const memoryPath of memoryPaths) {
 		try {
-			await syncFs.promises.access(memoryPath);
+			await fs.promises.access(memoryPath);
 			return false;
 		} catch {}
 	}
 	const agentsPath = path.join(workspaceDir, DEFAULT_AGENTS_FILENAME);
 	try {
-		const content = await syncFs.promises.readFile(agentsPath, "utf-8");
+		const content = await fs.promises.readFile(agentsPath, "utf-8");
 		if (/memory\.md/i.test(content)) {
 			return false;
 		}

package/dist/commands/doctor.js

@@ -37,7 +37,7 @@ import { maybeRepairUiProtocolFreshness } from "./doctor-ui.js";
 import { maybeOfferUpdateBeforeDoctor } from "./doctor-update.js";
 import { MEMORY_SYSTEM_PROMPT, shouldSuggestMemorySystem } from "./doctor-workspace.js";
 import { noteWorkspaceStatus } from "./doctor-workspace-status.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import { intro, outro } from "@clack/prompts";
 
 //#region src/commands/doctor.ts
@@ -83,7 +83,7 @@ async function doctorCommand(runtime = defaultRuntime, options = {}) {
 			`Fix: run ${formatCliCommand("fased configure")} and set Gateway mode (local/remote).`,
 			`Or set directly: ${formatCliCommand("fased config set gateway.mode local")}`
 		];
-		if (!syncFs.existsSync(configPath)) {
+		if (!fs.existsSync(configPath)) {
 			lines.push(`Missing config: run ${formatCliCommand("fased setup")} first.`);
 		}
 		note$1(lines.join("\n"), "Gateway");
@@ -233,7 +233,7 @@ async function doctorCommand(runtime = defaultRuntime, options = {}) {
 		await writeConfigFile(cfg);
 		logConfigUpdated(runtime);
 		const backupPath = `${CONFIG_PATH}.bak`;
-		if (syncFs.existsSync(backupPath)) {
+		if (fs.existsSync(backupPath)) {
 			runtime.log(`Backup: ${shortenHomePath(backupPath)}`);
 		}
 	} else if (configResult.hasPendingChanges) {

package/dist/commands/managed-up.js

@@ -2,7 +2,7 @@ import { defaultRuntime } from "../runtime.js";
 import { readManagedFederationTokenSummary } from "../managed/federation.js";
 import { readManagedReservationSummaries } from "../managed/tunnel.js";
 import { fileURLToPath } from "node:url";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 import { spawn } from "node:child_process";
 
@@ -44,7 +44,7 @@ function resolveManagedScriptPath() {
 		candidates.push(cwdCandidate);
 	}
 	for (const candidate of candidates) {
-		if (syncFs.existsSync(candidate)) {
+		if (fs.existsSync(candidate)) {
 			return candidate;
 		}
 	}

package/dist/commands/onboard-auth.credentials.js

@@ -11,7 +11,7 @@ import { upsertAuthProfile } from "../agents/auth-profiles/profiles.js";
 import "../agents/auth-profiles.js";
 import { PROVIDER_ENV_VARS } from "../secrets/provider-env-vars.js";
 import { MISTRAL_DEFAULT_MODEL_REF, XAI_DEFAULT_MODEL_REF } from "./onboard-auth.models.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 
 //#region src/commands/onboard-auth.credentials.ts
@@ -74,7 +74,7 @@ function buildApiKeyCredential(provider, input, metadata, options) {
 /** Resolve real path, returning null if the target doesn't exist. */
 function safeRealpathSync(dir) {
 	try {
-		return syncFs.realpathSync(path.resolve(dir));
+		return fs.realpathSync(path.resolve(dir));
 	} catch {
 		return null;
 	}
@@ -87,7 +87,7 @@ function resolveSiblingAgentDirs(primaryAgentDir) {
 	const agentsRoot = looksLikeStandardLayout ? candidateAgentsRoot : path.join(resolveStateDir(), "agents");
 	const entries = (() => {
 		try {
-			return syncFs.readdirSync(agentsRoot, { withFileTypes: true });
+			return fs.readdirSync(agentsRoot, { withFileTypes: true });
 		} catch {
 			return [];
 		}

package/dist/commands/onboard-channels.js

@@ -4,11 +4,11 @@ import { resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../agents/agent
 import { formatCliCommand } from "../cli/command-format.js";
 import { getChannelPlugin, listChannelPlugins } from "../channels/plugins/index.js";
 import { formatChannelPrimerLine, formatChannelSelectionLine, listChatChannels } from "../channels/registry.js";
+import { enablePluginInConfig } from "../plugins/enable.js";
 import { formatDocsLink } from "../terminal/links.js";
 import { formatChannelPluginCatalogSelectionHint, formatChannelPluginCatalogStatusLine, listChannelPluginCatalogEntries } from "../channels/plugins/catalog.js";
 import { isChannelConfigured } from "../config/plugin-auto-enable.js";
 import { resolveChannelDefaultAccountId } from "../channels/plugins/helpers.js";
-import { enablePluginInConfig } from "../plugins/enable.js";
 import { ensureOnboardingPluginInstalled, reloadOnboardingPluginRegistry } from "./onboarding/plugin-install.js";
 import { getChannelOnboardingAdapter, listChannelOnboardingAdapters } from "./onboarding/registry.js";
 

package/dist/commands/onboarding/plugin-install.js

@@ -2,12 +2,12 @@ import { createSubsystemLogger } from "../../logging/subsystem.js";
 import { resolveFasedAgentPackageRootSync } from "../../infra/fased-root.js";
 import { resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../../agents/agent-scope.js";
 import { installPluginFromNpmSpec } from "../../plugins/install.js";
+import { buildNpmResolutionInstallFields } from "../../plugins/installs.js";
 import { loadFasedAgentPlugins } from "../../plugins/loader.js";
 import { createPluginLoaderLogger } from "../../plugins/logger.js";
-import { resolveChannelPluginExpectedPluginIds } from "../../channels/plugins/catalog.js";
-import { buildNpmResolutionInstallFields } from "../../plugins/installs.js";
 import { finalizeInstalledPluginConfig } from "../../plugins/lifecycle.js";
-import syncFs from "node:fs";
+import { resolveChannelPluginExpectedPluginIds } from "../../channels/plugins/catalog.js";
+import fs from "node:fs";
 import path from "node:path";
 
 //#region src/commands/onboarding/plugin-install.ts
@@ -29,7 +29,7 @@ function resolveLocalPath(entry, workspaceDir) {
 		candidates.add(path.resolve(packageRoot, raw));
 	}
 	for (const candidate of candidates) {
-		if (syncFs.existsSync(candidate)) {
+		if (fs.existsSync(candidate)) {
 			return candidate;
 		}
 	}

package/dist/commands/sessions-cleanup.js

@@ -7,7 +7,7 @@ import { capEntryCount, loadSessionStore, pruneStaleEntries, resolveMaintenanceC
 import "../config/sessions.js";
 import { resolveSessionStoreTargets } from "./session-store-targets.js";
 import { SESSION_AGE_PAD, SESSION_KEY_PAD, SESSION_MODEL_PAD, formatSessionAgeCell, formatSessionFlagsCell, formatSessionKeyCell, formatSessionModelCell, resolveSessionDisplayDefaults, resolveSessionDisplayModel, toSessionDisplayRows } from "./sessions-table.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 
 //#region src/commands/sessions-cleanup.ts
 const ACTION_PAD = 12;
@@ -65,7 +65,7 @@ function pruneMissingTranscriptEntries(params) {
 			continue;
 		}
 		const transcriptPath = resolveSessionFilePath(entry.sessionId, entry, sessionPathOpts);
-		if (!syncFs.existsSync(transcriptPath)) {
+		if (!fs.existsSync(transcriptPath)) {
 			delete params.store[key];
 			removed += 1;
 			params.onPruned?.(key);