@fased/fased 0.1.60 → 0.1.62

package/dist/wallet/wallet-policy.js

@@ -2,7 +2,7 @@ import { ensureWalletStateDir, resolveWalletRuntimeConfig } from "./wallet-runti
 import { readWalletProviderRegistry, resolveWalletUserRole } from "./wallet-provider-registry.js";
 import { assertValidSolanaAddress } from "./solana-address.js";
 import { tryResolveSatRuntimeIds } from "../config/sat-runtime-ids.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/wallet/wallet-policy.ts
@@ -51,11 +51,11 @@ function normalizeWalletUsageBucket(raw) {
 }
 function loadLedger(paths) {
 	const fallback = defaultWalletUsageLedger();
-	if (!fs.existsSync(paths.dailyUsagePath)) {
+	if (!syncFs.existsSync(paths.dailyUsagePath)) {
 		return fallback;
 	}
 	try {
-		const raw = fs.readFileSync(paths.dailyUsagePath, "utf8");
+		const raw = syncFs.readFileSync(paths.dailyUsagePath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (parsed && parsed.version === 2 && typeof parsed.date === "string") {
 			const walletsRaw = parsed.wallets && typeof parsed.wallets === "object" && !Array.isArray(parsed.wallets) ? parsed.wallets : {};
@@ -87,9 +87,9 @@ function loadLedger(paths) {
 	return fallback;
 }
 function writeLedger(paths, ledger) {
-	fs.writeFileSync(paths.dailyUsagePath, `${JSON.stringify(ledger, null, 2)}\n`, { mode: 384 });
+	syncFs.writeFileSync(paths.dailyUsagePath, `${JSON.stringify(ledger, null, 2)}\n`, { mode: 384 });
 	try {
-		fs.chmodSync(paths.dailyUsagePath, 384);
+		syncFs.chmodSync(paths.dailyUsagePath, 384);
 	} catch {}
 }
 function resolveWalletUsageBucket(ledger, walletId) {
@@ -344,11 +344,11 @@ function readWalletPolicyState(env = process.env) {
 		updatedAt: nowIso(),
 		wallets: {}
 	};
-	if (!fs.existsSync(statePath)) {
+	if (!syncFs.existsSync(statePath)) {
 		return fallback;
 	}
 	try {
-		const raw = fs.readFileSync(statePath, "utf8");
+		const raw = syncFs.readFileSync(statePath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (parsed.version !== 1) {
 			return fallback;
@@ -374,9 +374,9 @@ function readWalletPolicyState(env = process.env) {
 function writeWalletPolicyState(state, env = process.env) {
 	const paths = ensureWalletStateDir(env);
 	const statePath = resolveWalletPolicyStatePath(paths);
-	fs.writeFileSync(statePath, `${JSON.stringify(state, null, 2)}\n`, { mode: 384 });
+	syncFs.writeFileSync(statePath, `${JSON.stringify(state, null, 2)}\n`, { mode: 384 });
 	try {
-		fs.chmodSync(statePath, 384);
+		syncFs.chmodSync(statePath, 384);
 	} catch {}
 }
 function buildResolvedPolicyFromDefaults(defaults) {

package/dist/wallet/wallet-provider-registry.js

@@ -1,6 +1,6 @@
 import { resolveStateDir } from "../config/paths.js";
 import { ensureWalletStateDir } from "./wallet-runtime-config.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import { randomBytes } from "node:crypto";
 
@@ -159,12 +159,12 @@ function buildMiningDeleteBlockedMessage(details) {
 }
 function readSatMiningRuntimeDeletionDetails(walletId, env) {
 	const runtimeStorePath = path.join(resolveStateDir(env), "sat-mining", "wallets", normalizeSatWalletStateKey(walletId), "runtime-store.json");
-	if (!fs.existsSync(runtimeStorePath)) {
+	if (!syncFs.existsSync(runtimeStorePath)) {
 		return null;
 	}
 	let parsed;
 	try {
-		parsed = JSON.parse(fs.readFileSync(runtimeStorePath, "utf8"));
+		parsed = JSON.parse(syncFs.readFileSync(runtimeStorePath, "utf8"));
 	} catch {
 		return null;
 	}
@@ -383,11 +383,11 @@ function normalizeRegistry(raw) {
 }
 function readWalletProviderRegistry(env = process.env) {
 	const file = registryPath(env);
-	if (!fs.existsSync(file)) {
+	if (!syncFs.existsSync(file)) {
 		return makeDefaultRegistry();
 	}
 	try {
-		const parsed = JSON.parse(fs.readFileSync(file, "utf8"));
+		const parsed = JSON.parse(syncFs.readFileSync(file, "utf8"));
 		const normalized = normalizeRegistry(parsed);
 		if (normalized.changed) {
 			writeWalletProviderRegistry(normalized.registry, env);
@@ -404,12 +404,12 @@ function writeWalletProviderRegistry(registry, env = process.env) {
 		version: 1,
 		updatedAt: nowIso()
 	};
-	fs.writeFileSync(file, `${JSON.stringify(payload, null, 2)}\n`, {
+	syncFs.writeFileSync(file, `${JSON.stringify(payload, null, 2)}\n`, {
 		encoding: "utf8",
 		mode: REGISTRY_FILE_MODE
 	});
 	try {
-		fs.chmodSync(file, REGISTRY_FILE_MODE);
+		syncFs.chmodSync(file, REGISTRY_FILE_MODE);
 	} catch {}
 }
 function setWalletProviderEnabled(params) {

package/dist/wallet/wallet-runtime-config.js

@@ -1,5 +1,5 @@
 import { resolveStateDir } from "../config/paths.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/wallet/wallet-runtime-config.ts
@@ -94,12 +94,12 @@ function resolveWalletStatePaths(env = process.env) {
 }
 function ensureWalletStateDir(env = process.env) {
 	const paths = resolveWalletStatePaths(env);
-	fs.mkdirSync(paths.rootDir, {
+	syncFs.mkdirSync(paths.rootDir, {
 		recursive: true,
 		mode: 448
 	});
 	try {
-		fs.chmodSync(paths.rootDir, 448);
+		syncFs.chmodSync(paths.rootDir, 448);
 	} catch {}
 	return paths;
 }

package/dist/wallet/wallet-secrets-store.js

@@ -1,5 +1,5 @@
 import { resolveStateDir } from "../config/paths.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
 
@@ -12,12 +12,12 @@ const WALLET_RPC_SECRET_FILENAME = "wallet-rpc.v1.enc.json";
 const MASTER_KEY_FILENAME = "master.key";
 function ensureSecretsDir(env = process.env) {
 	const dir = path.join(resolveStateDir(env), "secrets");
-	fs.mkdirSync(dir, {
+	syncFs.mkdirSync(dir, {
 		recursive: true,
 		mode: SECRETS_DIR_MODE
 	});
 	try {
-		fs.chmodSync(dir, SECRETS_DIR_MODE);
+		syncFs.chmodSync(dir, SECRETS_DIR_MODE);
 	} catch {}
 	return dir;
 }
@@ -37,20 +37,20 @@ function resolveWalletProviderSecretPath(providerId, env = process.env) {
 }
 function readOrCreateMasterKey(env = process.env) {
 	const keyPath = resolveMasterKeyPath(env);
-	if (fs.existsSync(keyPath)) {
-		const raw = fs.readFileSync(keyPath, "utf8").trim();
+	if (syncFs.existsSync(keyPath)) {
+		const raw = syncFs.readFileSync(keyPath, "utf8").trim();
 		const parsed = Buffer.from(raw, "hex");
 		if (parsed.length === MASTER_KEY_BYTES) {
 			return parsed;
 		}
 	}
 	const key = randomBytes(MASTER_KEY_BYTES);
-	fs.writeFileSync(keyPath, `${key.toString("hex")}\n`, {
+	syncFs.writeFileSync(keyPath, `${key.toString("hex")}\n`, {
 		mode: SECRET_FILE_MODE,
 		encoding: "utf8"
 	});
 	try {
-		fs.chmodSync(keyPath, SECRET_FILE_MODE);
+		syncFs.chmodSync(keyPath, SECRET_FILE_MODE);
 	} catch {}
 	return key;
 }
@@ -197,12 +197,12 @@ function saveWalletRpcSecret(input, env = process.env) {
 	};
 	const encrypted = encryptPayload(record, env);
 	const secretPath = resolveWalletRpcSecretPath(env, input.providerId);
-	fs.writeFileSync(secretPath, `${JSON.stringify(encrypted, null, 2)}\n`, {
+	syncFs.writeFileSync(secretPath, `${JSON.stringify(encrypted, null, 2)}\n`, {
 		mode: SECRET_FILE_MODE,
 		encoding: "utf8"
 	});
 	try {
-		fs.chmodSync(secretPath, SECRET_FILE_MODE);
+		syncFs.chmodSync(secretPath, SECRET_FILE_MODE);
 	} catch {}
 	return record;
 }
@@ -230,23 +230,23 @@ function saveWalletProviderSecret(input, env = process.env) {
 	};
 	const encrypted = encryptProviderPayload(record, env);
 	const secretPath = resolveWalletProviderSecretPath(providerId, env);
-	fs.writeFileSync(secretPath, `${JSON.stringify(encrypted, null, 2)}\n`, {
+	syncFs.writeFileSync(secretPath, `${JSON.stringify(encrypted, null, 2)}\n`, {
 		mode: SECRET_FILE_MODE,
 		encoding: "utf8"
 	});
 	try {
-		fs.chmodSync(secretPath, SECRET_FILE_MODE);
+		syncFs.chmodSync(secretPath, SECRET_FILE_MODE);
 	} catch {}
 	return record;
 }
 function loadWalletRpcSecret(env = process.env, options) {
 	const candidatePaths = options?.providerId ? [resolveWalletRpcSecretPath(env, options.providerId), resolveWalletRpcSecretPath(env)] : [resolveWalletRpcSecretPath(env)];
 	for (const secretPath of candidatePaths) {
-		if (!fs.existsSync(secretPath)) {
+		if (!syncFs.existsSync(secretPath)) {
 			continue;
 		}
 		try {
-			const parsed = JSON.parse(fs.readFileSync(secretPath, "utf8"));
+			const parsed = JSON.parse(syncFs.readFileSync(secretPath, "utf8"));
 			const decrypted = decryptPayload(parsed, env);
 			if (decrypted) {
 				return decrypted;
@@ -257,11 +257,11 @@ function loadWalletRpcSecret(env = process.env, options) {
 }
 function loadWalletProviderSecret(providerId, env = process.env) {
 	const secretPath = resolveWalletProviderSecretPath(providerId, env);
-	if (!fs.existsSync(secretPath)) {
+	if (!syncFs.existsSync(secretPath)) {
 		return null;
 	}
 	try {
-		const parsed = JSON.parse(fs.readFileSync(secretPath, "utf8"));
+		const parsed = JSON.parse(syncFs.readFileSync(secretPath, "utf8"));
 		const value = decryptProviderPayload(parsed, env);
 		if (!value || value.providerId !== providerId) {
 			return null;
@@ -274,13 +274,13 @@ function loadWalletProviderSecret(providerId, env = process.env) {
 function deleteWalletRpcSecret(env = process.env) {
 	const dir = ensureSecretsDir(env);
 	const legacyPath = resolveWalletRpcSecretPath(env);
-	const candidatePaths = [legacyPath, ...fs.readdirSync(dir, { withFileTypes: true }).filter((entry) => entry.isFile() && /^wallet-rpc-[a-z0-9-]+\.v1\.enc\.json$/i.test(entry.name)).map((entry) => path.join(dir, entry.name))];
+	const candidatePaths = [legacyPath, ...syncFs.readdirSync(dir, { withFileTypes: true }).filter((entry) => entry.isFile() && /^wallet-rpc-[a-z0-9-]+\.v1\.enc\.json$/i.test(entry.name)).map((entry) => path.join(dir, entry.name))];
 	const removedPaths = [];
 	for (const secretPath of candidatePaths) {
-		if (!fs.existsSync(secretPath)) {
+		if (!syncFs.existsSync(secretPath)) {
 			continue;
 		}
-		fs.rmSync(secretPath, { force: true });
+		syncFs.rmSync(secretPath, { force: true });
 		removedPaths.push(secretPath);
 	}
 	return {
@@ -291,13 +291,13 @@ function deleteWalletRpcSecret(env = process.env) {
 }
 function deleteWalletRpcSecretForProvider(providerId, env = process.env) {
 	const secretPath = resolveWalletRpcSecretPath(env, providerId);
-	if (!fs.existsSync(secretPath)) {
+	if (!syncFs.existsSync(secretPath)) {
 		return {
 			removed: false,
 			path: secretPath
 		};
 	}
-	fs.rmSync(secretPath, { force: true });
+	syncFs.rmSync(secretPath, { force: true });
 	return {
 		removed: true,
 		path: secretPath
@@ -305,13 +305,13 @@ function deleteWalletRpcSecretForProvider(providerId, env = process.env) {
 }
 function deleteWalletProviderSecret(providerId, env = process.env) {
 	const secretPath = resolveWalletProviderSecretPath(providerId, env);
-	if (!fs.existsSync(secretPath)) {
+	if (!syncFs.existsSync(secretPath)) {
 		return {
 			removed: false,
 			path: secretPath
 		};
 	}
-	fs.rmSync(secretPath, { force: true });
+	syncFs.rmSync(secretPath, { force: true });
 	return {
 		removed: true,
 		path: secretPath

package/dist/wallet/wallet-send-approvals.js

@@ -16,7 +16,7 @@ import { enforceWalletCustodyForAutonomousSend, withWalletCustodySigningMaterial
 import { simulateWalletPolicy } from "./wallet-policy-simulation.js";
 import { getWalletSettlementLinkByRequestId, markWalletSettlementLinkOutcome, upsertWalletSettlementLink } from "./wallet-settlement-links.js";
 import { syncWalletApprovalTask, walletApprovalTaskId } from "./wallet-task-ledger.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import { randomBytes } from "node:crypto";
 import { setTimeout } from "node:timers/promises";
 
@@ -316,14 +316,14 @@ async function executeWalletSendWithRetry(params) {
 }
 function loadFile(env = process.env) {
 	const paths = ensureWalletStateDir(env);
-	if (!fs.existsSync(paths.sendApprovalsPath)) {
+	if (!syncFs.existsSync(paths.sendApprovalsPath)) {
 		return {
 			version: 1,
 			requests: []
 		};
 	}
 	try {
-		const parsed = JSON.parse(fs.readFileSync(paths.sendApprovalsPath, "utf8"));
+		const parsed = JSON.parse(syncFs.readFileSync(paths.sendApprovalsPath, "utf8"));
 		if (parsed?.version === 1 && Array.isArray(parsed.requests)) {
 			return {
 				version: 1,
@@ -338,12 +338,12 @@ function loadFile(env = process.env) {
 }
 function saveFile(file, env = process.env) {
 	const paths = ensureWalletStateDir(env);
-	fs.writeFileSync(paths.sendApprovalsPath, `${JSON.stringify(file, null, 2)}\n`, {
+	syncFs.writeFileSync(paths.sendApprovalsPath, `${JSON.stringify(file, null, 2)}\n`, {
 		encoding: "utf8",
 		mode: 384
 	});
 	try {
-		fs.chmodSync(paths.sendApprovalsPath, 384);
+		syncFs.chmodSync(paths.sendApprovalsPath, 384);
 	} catch {}
 }
 function markExpired(file) {

package/dist/wallet/wallet-settlement-links.js

@@ -1,5 +1,5 @@
 import { ensureWalletStateDir } from "./wallet-runtime-config.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/wallet/wallet-settlement-links.ts
@@ -8,14 +8,14 @@ function linksFilePath(env = process.env) {
 }
 function loadFile(env = process.env) {
 	const filePath = linksFilePath(env);
-	if (!fs.existsSync(filePath)) {
+	if (!syncFs.existsSync(filePath)) {
 		return {
 			version: 1,
 			links: []
 		};
 	}
 	try {
-		const parsed = JSON.parse(fs.readFileSync(filePath, "utf8"));
+		const parsed = JSON.parse(syncFs.readFileSync(filePath, "utf8"));
 		if (parsed?.version === 1 && Array.isArray(parsed.links)) {
 			return {
 				version: 1,
@@ -30,12 +30,12 @@ function loadFile(env = process.env) {
 }
 function saveFile(file, env = process.env) {
 	const filePath = linksFilePath(env);
-	fs.writeFileSync(filePath, `${JSON.stringify(file, null, 2)}\n`, {
+	syncFs.writeFileSync(filePath, `${JSON.stringify(file, null, 2)}\n`, {
 		encoding: "utf8",
 		mode: 384
 	});
 	try {
-		fs.chmodSync(filePath, 384);
+		syncFs.chmodSync(filePath, 384);
 	} catch {}
 }
 function upsertWalletSettlementLink(params) {

package/dist/web/accounts.js

@@ -5,7 +5,7 @@ import "../routing/session-key.js";
 import { resolveAccountEntry } from "../routing/account-lookup.js";
 import { createAccountListHelpers } from "../channels/plugins/account-helpers.js";
 import { hasWebCredsSync } from "./auth-store.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/web/accounts.ts
@@ -24,7 +24,7 @@ function listWhatsAppAuthDirs(cfg) {
 		}).authDir);
 	}
 	try {
-		const entries = fs.readdirSync(whatsappDir, { withFileTypes: true });
+		const entries = syncFs.readdirSync(whatsappDir, { withFileTypes: true });
 		for (const entry of entries) {
 			if (!entry.isDirectory()) {
 				continue;
@@ -48,7 +48,7 @@ function resolveLegacyAuthDir() {
 }
 function legacyAuthExists(authDir) {
 	try {
-		return fs.existsSync(path.join(authDir, "creds.json"));
+		return syncFs.existsSync(path.join(authDir, "creds.json"));
 	} catch {
 		return false;
 	}

package/dist/web/auth-store.js

@@ -4,10 +4,10 @@ import { info, success } from "../globals.js";
 import { defaultRuntime } from "../runtime.js";
 import { formatCliCommand } from "../cli/command-format.js";
 import "../logging.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import fs$1 from "node:fs/promises";
+import fs from "node:fs/promises";
 
 //#region src/web/auth-store.ts
 const DEFAULT_WEB_AUTH_ACCOUNT_ID = "default";
@@ -65,7 +65,7 @@ function readAuthStoreLidReverseMapping(lid, opts) {
 	for (const dir of dirs) {
 		const mappingPath = path.join(dir, mappingFilename);
 		try {
-			const data = fs.readFileSync(mappingPath, "utf8");
+			const data = syncFs.readFileSync(mappingPath, "utf8");
 			const phone = JSON.parse(data);
 			if (phone !== null && phone !== undefined) {
 				return normalizeAuthStoreE164(String(phone));
@@ -97,7 +97,7 @@ function resolveWebCredsBackupPath(authDir) {
 }
 function hasWebCredsSync(authDir) {
 	try {
-		const stats = fs.statSync(resolveWebCredsPath(authDir));
+		const stats = syncFs.statSync(resolveWebCredsPath(authDir));
 		return stats.isFile() && stats.size > 1;
 	} catch {
 		return false;
@@ -105,14 +105,14 @@ function hasWebCredsSync(authDir) {
 }
 function readCredsJsonRaw(filePath) {
 	try {
-		if (!fs.existsSync(filePath)) {
+		if (!syncFs.existsSync(filePath)) {
 			return null;
 		}
-		const stats = fs.statSync(filePath);
+		const stats = syncFs.statSync(filePath);
 		if (!stats.isFile() || stats.size <= 1) {
 			return null;
 		}
-		return fs.readFileSync(filePath, "utf-8");
+		return syncFs.readFileSync(filePath, "utf-8");
 	} catch {
 		return null;
 	}
@@ -132,9 +132,9 @@ function maybeRestoreCredsFromBackup(authDir) {
 			return;
 		}
 		JSON.parse(backupRaw);
-		fs.copyFileSync(backupPath, credsPath);
+		syncFs.copyFileSync(backupPath, credsPath);
 		try {
-			fs.chmodSync(credsPath, 384);
+			syncFs.chmodSync(credsPath, 384);
 		} catch {}
 		logger.warn({ credsPath }, "restored corrupted WhatsApp creds.json from backup");
 	} catch {}
@@ -144,16 +144,16 @@ async function webAuthExists(authDir = resolveDefaultWebAuthDir()) {
 	maybeRestoreCredsFromBackup(resolvedAuthDir);
 	const credsPath = resolveWebCredsPath(resolvedAuthDir);
 	try {
-		await fs$1.access(resolvedAuthDir);
+		await fs.access(resolvedAuthDir);
 	} catch {
 		return false;
 	}
 	try {
-		const stats = await fs$1.stat(credsPath);
+		const stats = await fs.stat(credsPath);
 		if (!stats.isFile() || stats.size <= 1) {
 			return false;
 		}
-		const raw = await fs$1.readFile(credsPath, "utf-8");
+		const raw = await fs.readFile(credsPath, "utf-8");
 		JSON.parse(raw);
 		return true;
 	} catch {
@@ -161,7 +161,7 @@ async function webAuthExists(authDir = resolveDefaultWebAuthDir()) {
 	}
 }
 async function clearLegacyBaileysAuthState(authDir) {
-	const entries = await fs$1.readdir(authDir, { withFileTypes: true });
+	const entries = await fs.readdir(authDir, { withFileTypes: true });
 	const shouldDelete = (name) => {
 		if (name === "oauth.json") {
 			return false;
@@ -181,7 +181,7 @@ async function clearLegacyBaileysAuthState(authDir) {
 		if (!shouldDelete(entry.name)) {
 			return;
 		}
-		await fs$1.rm(path.join(authDir, entry.name), { force: true });
+		await fs.rm(path.join(authDir, entry.name), { force: true });
 	}));
 }
 async function logoutWeb(params) {
@@ -195,7 +195,7 @@ async function logoutWeb(params) {
 	if (params.isLegacyAuthDir) {
 		await clearLegacyBaileysAuthState(resolvedAuthDir);
 	} else {
-		await fs$1.rm(resolvedAuthDir, {
+		await fs.rm(resolvedAuthDir, {
 			recursive: true,
 			force: true
 		});
@@ -206,13 +206,13 @@ async function logoutWeb(params) {
 function readWebSelfId(authDir = resolveDefaultWebAuthDir()) {
 	try {
 		const credsPath = resolveWebCredsPath(resolveAuthStoreUserPath(authDir));
-		if (!fs.existsSync(credsPath)) {
+		if (!syncFs.existsSync(credsPath)) {
 			return {
 				e164: null,
 				jid: null
 			};
 		}
-		const raw = fs.readFileSync(credsPath, "utf-8");
+		const raw = syncFs.readFileSync(credsPath, "utf-8");
 		const parsed = JSON.parse(raw);
 		const jid = parsed?.me?.id ?? null;
 		const e164 = jid ? jidToE164ForAuthStore(jid, { authDir }) : null;
@@ -233,7 +233,7 @@ function readWebSelfId(authDir = resolveDefaultWebAuthDir()) {
 */
 function getWebAuthAgeMs(authDir = resolveDefaultWebAuthDir()) {
 	try {
-		const stats = fs.statSync(resolveWebCredsPath(resolveAuthStoreUserPath(authDir)));
+		const stats = syncFs.statSync(resolveWebCredsPath(resolveAuthStoreUserPath(authDir)));
 		return Date.now() - stats.mtimeMs;
 	} catch {
 		return null;

package/dist/web/session.js

@@ -7,7 +7,7 @@ import { redactSensitiveText } from "../logging/redact.js";
 import "../logging.js";
 import { WA_WEB_AUTH_DIR, getWebAuthAgeMs, logWebSelfId, logoutWeb, maybeRestoreCredsFromBackup, pickWebChannel, readCredsJsonRaw, readWebSelfId, resolveDefaultWebAuthDir, resolveWebCredsBackupPath, resolveWebCredsPath, webAuthExists } from "./auth-store.js";
 import { redactSensitiveUrlLikeString } from "../shared/net/redact-sensitive-url.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import { randomUUID } from "node:crypto";
 import { DisconnectReason, fetchLatestBaileysVersion, makeCacheableSignalKeyStore, makeWASocket, useMultiFileAuthState } from "@whiskeysockets/baileys";
 import qrcode from "qrcode-terminal";
@@ -27,9 +27,9 @@ async function safeSaveCreds(authDir, saveCreds, logger) {
 		if (raw) {
 			try {
 				JSON.parse(raw);
-				fs.copyFileSync(credsPath, backupPath);
+				syncFs.copyFileSync(credsPath, backupPath);
 				try {
-					fs.chmodSync(backupPath, 384);
+					syncFs.chmodSync(backupPath, 384);
 				} catch {}
 			} catch {}
 		}
@@ -37,7 +37,7 @@ async function safeSaveCreds(authDir, saveCreds, logger) {
 	try {
 		await Promise.resolve(saveCreds());
 		try {
-			fs.chmodSync(resolveWebCredsPath(authDir), 384);
+			syncFs.chmodSync(resolveWebCredsPath(authDir), 384);
 		} catch {}
 	} catch (err) {
 		logger.warn({ error: formatError(err) }, "failed saving WhatsApp creds");

package/dist/wizard/host-security-capability.js

@@ -1,4 +1,4 @@
-import fs from "node:fs";
+import syncFs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { spawnSync } from "node:child_process";
@@ -24,7 +24,7 @@ function isHostedSecurityCapableSession(explicitFlag = false) {
 	const currentUser = currentUserName();
 	if (currentUser) {
 		const sudoersPath = path.join("/etc/sudoers.d", `fased-host-maintenance-${currentUser}`);
-		if (fs.existsSync(sudoersPath)) {
+		if (syncFs.existsSync(sudoersPath)) {
 			return true;
 		}
 	}

package/dist/wizard/onboarding.host-security.js

@@ -2,7 +2,7 @@ import { redactSensitiveText } from "../logging/redact.js";
 import { redactSensitiveUrlLikeString } from "../shared/net/redact-sensitive-url.js";
 import { noteCommands, noteHeading, noteStep, noteWarn } from "./onboarding-note-format.js";
 import { isHostingProfile } from "./onboarding.types.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { spawn, spawnSync } from "node:child_process";
@@ -12,7 +12,7 @@ import { Buffer } from "node:buffer";
 function resolveHostSecurityLogPath() {
 	const home = process.env.HOME?.trim() || os.homedir();
 	const logDir = path.join(home, ".fased", "logs");
-	fs.mkdirSync(logDir, {
+	syncFs.mkdirSync(logDir, {
 		recursive: true,
 		mode: 448
 	});
@@ -26,7 +26,7 @@ function appendHostSecurityLog(logPath, title, detail) {
 		sanitizedDetail?.trim() || "(no output)",
 		""
 	].join("\n");
-	fs.appendFileSync(logPath, body, "utf8");
+	syncFs.appendFileSync(logPath, body, "utf8");
 }
 function resolveTailnetSshConfirmationPath() {
 	const stateDir = process.env.FASED_STATE_DIR?.trim() || process.env.FASED_CONFIG_DIR?.trim() || path.join(process.env.HOME?.trim() || os.homedir(), ".fased");
@@ -34,7 +34,7 @@ function resolveTailnetSshConfirmationPath() {
 }
 function hasStoredTailnetSshConfirmation(target) {
 	try {
-		const raw = fs.readFileSync(resolveTailnetSshConfirmationPath(), "utf8");
+		const raw = syncFs.readFileSync(resolveTailnetSshConfirmationPath(), "utf8");
 		const parsed = JSON.parse(raw);
 		return parsed.user === target.user && parsed.repoDir === target.repoDir;
 	} catch {
@@ -43,11 +43,11 @@ function hasStoredTailnetSshConfirmation(target) {
 }
 function writeTailnetSshConfirmation(target) {
 	const markerPath = resolveTailnetSshConfirmationPath();
-	fs.mkdirSync(path.dirname(markerPath), {
+	syncFs.mkdirSync(path.dirname(markerPath), {
 		recursive: true,
 		mode: 448
 	});
-	fs.writeFileSync(markerPath, `${JSON.stringify({
+	syncFs.writeFileSync(markerPath, `${JSON.stringify({
 		confirmedAt: new Date().toISOString(),
 		user: target.user,
 		host: target.host,
@@ -75,7 +75,7 @@ const HOST_MAINTENANCE_HELPER = "/usr/local/sbin/fased-host-maintenance";
 function detectTotalMemoryMb() {
 	if (process.platform === "linux") {
 		try {
-			const meminfo = fs.readFileSync("/proc/meminfo", "utf8");
+			const meminfo = syncFs.readFileSync("/proc/meminfo", "utf8");
 			const match = meminfo.match(/^MemTotal:\s+(\d+)\s+kB/m);
 			if (match?.[1]) {
 				return Math.floor(Number.parseInt(match[1], 10) / 1024);