@fased/fased 0.1.61 → 0.1.62

package/CHANGELOG.md

@@ -4,6 +4,17 @@ This changelog starts with the public Fased Agent release line. Required
 third-party and copied-code notices are kept in [LICENSE](./LICENSE) and
 [THIRD_PARTY_NOTICES.md](./THIRD_PARTY_NOTICES.md).
 
+## 0.1.62
+
+- Install a version-matched, checksum-verified local wallet signer automatically
+  when first-time wallet setup selects the local socket signer path; normal
+  installs no longer require Go.
+- Show automatic signer installation in both Local and Hosting QuickStart while
+  keeping the redundant wallet-backend prompt hidden in the hosting profile.
+- Publish static Linux and macOS signer assets for x64 and arm64 with release
+  checksums, module-relative installer resolution, and clear WSL2 guidance for
+  Windows users.
+
 ## 0.1.61
 
 - Harden local Docker deployments with loopback-only published ports, dropped

package/dist/acp/client.js

@@ -2,7 +2,7 @@ import { isKnownCoreToolId } from "../agents/tool-catalog.js";
 import { DANGEROUS_ACP_TOOLS } from "../security/dangerous-tools.js";
 import { ensureFasedAgentCliOnPath } from "../infra/path-env.js";
 import { fileURLToPath } from "node:url";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import { homedir } from "node:os";
 import path from "node:path";
 import { spawn } from "node:child_process";
@@ -269,7 +269,7 @@ function resolveSelfEntryPath() {
 	try {
 		const here = fileURLToPath(import.meta.url);
 		const candidate = path.resolve(path.dirname(here), "..", "entry.js");
-		if (fs.existsSync(candidate)) {
+		if (syncFs.existsSync(candidate)) {
 			return candidate;
 		}
 	} catch {}

package/dist/acp/secret-file.js

@@ -1,5 +1,5 @@
 import { resolveUserPath } from "../utils.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 
 //#region src/acp/secret-file.ts
 function readSecretFromFile(filePath, label) {
@@ -9,7 +9,7 @@ function readSecretFromFile(filePath, label) {
 	}
 	let raw = "";
 	try {
-		raw = fs.readFileSync(resolvedPath, "utf8");
+		raw = syncFs.readFileSync(resolvedPath, "utf8");
 	} catch (err) {
 		throw new Error(`Failed to read ${label} file at ${resolvedPath}: ${String(err)}`, { cause: err });
 	}

package/dist/agents/agent-scope.js

@@ -6,7 +6,7 @@ import { parseAgentSessionKey } from "../sessions/session-key-utils.js";
 import { DEFAULT_AGENT_ID, normalizeAgentId, resolveAgentIdFromSessionKey } from "../routing/session-key.js";
 import { resolveEffectiveAgentSkillFilter } from "./skills/agent-filter.js";
 import { resolveDefaultAgentWorkspaceDir } from "./workspace.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/agents/agent-scope.ts
@@ -245,7 +245,7 @@ function normalizePathForComparison(input) {
 	const resolved = path.resolve(stripNullBytes(resolveUserPath(input)));
 	let normalized = resolved;
 	try {
-		normalized = fs.realpathSync.native(resolved);
+		normalized = syncFs.realpathSync.native(resolved);
 	} catch {}
 	if (process.platform === "win32") {
 		return normalized.toLowerCase();

package/dist/agents/apply-patch.js

@@ -3,9 +3,9 @@ import { PATH_ALIAS_POLICIES } from "../infra/path-alias-guards.js";
 import { writeFileWithinRoot } from "../infra/fs-safe.js";
 import { applyUpdateHunk } from "./apply-patch-update.js";
 import { assertSandboxPath, resolveSandboxInputPath } from "./sandbox-paths.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
-import fs$1 from "node:fs/promises";
+import fs from "node:fs/promises";
 import { Type } from "@sinclair/typebox";
 
 //#region src/agents/apply-patch.ts
@@ -159,7 +159,7 @@ function resolvePatchFileOps(options) {
 	return {
 		readFile: async (filePath) => {
 			if (!workspaceOnly) {
-				return await fs$1.readFile(filePath, "utf8");
+				return await fs.readFile(filePath, "utf8");
 			}
 			const opened = await openBoundaryFile({
 				absolutePath: filePath,
@@ -168,14 +168,14 @@ function resolvePatchFileOps(options) {
 			});
 			assertBoundaryRead(opened, filePath);
 			try {
-				return fs.readFileSync(opened.fd, "utf8");
+				return syncFs.readFileSync(opened.fd, "utf8");
 			} finally {
-				fs.closeSync(opened.fd);
+				syncFs.closeSync(opened.fd);
 			}
 		},
 		writeFile: async (filePath, content) => {
 			if (!workspaceOnly) {
-				await fs$1.writeFile(filePath, content, "utf8");
+				await fs.writeFile(filePath, content, "utf8");
 				return;
 			}
 			const relative = toRelativeWorkspacePath(options.cwd, filePath);
@@ -186,8 +186,8 @@ function resolvePatchFileOps(options) {
 				encoding: "utf8"
 			});
 		},
-		remove: (filePath) => fs$1.rm(filePath),
-		mkdirp: (dir) => fs$1.mkdir(dir, { recursive: true }).then(() => {})
+		remove: (filePath) => fs.rm(filePath),
+		mkdirp: (dir) => fs.mkdir(dir, { recursive: true }).then(() => {})
 	};
 }
 async function ensureDir(filePath, ops) {

package/dist/agents/auth-profiles/paths.js

@@ -2,7 +2,7 @@ import { resolveUserPath } from "../../utils.js";
 import { saveJsonFile } from "../../infra/json-file.js";
 import { AUTH_PROFILE_FILENAME, AUTH_STORE_VERSION, LEGACY_AUTH_FILENAME } from "./constants.js";
 import { resolveFasedAgentAgentDir } from "../agent-paths.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/agents/auth-profiles/paths.ts
@@ -19,7 +19,7 @@ function resolveAuthStorePathForDisplay(agentDir) {
 	return pathname.startsWith("~") ? pathname : resolveUserPath(pathname);
 }
 function ensureAuthStoreFile(pathname) {
-	if (fs.existsSync(pathname)) {
+	if (syncFs.existsSync(pathname)) {
 		return;
 	}
 	const payload = {

package/dist/agents/auth-profiles/store.js

@@ -5,7 +5,7 @@ import { withFileLock } from "../../plugin-sdk/file-lock.js";
 import "../../infra/file-lock.js";
 import { syncExternalCliCredentials } from "./external-cli-sync.js";
 import { ensureAuthStoreFile, resolveAuthStorePath, resolveLegacyAuthStorePath } from "./paths.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 
 //#region src/agents/auth-profiles/store.ts
 const AUTH_PROFILE_TYPES = new Set([
@@ -361,7 +361,7 @@ function loadAuthProfileStoreForAgent(agentDir, options) {
 	if (shouldWrite && legacy !== null) {
 		const legacyPath = resolveLegacyAuthStorePath(agentDir);
 		try {
-			fs.unlinkSync(legacyPath);
+			syncFs.unlinkSync(legacyPath);
 		} catch (err) {
 			if (err?.code !== "ENOENT") {
 				log.warn("failed to delete legacy auth.json after migration", {

package/dist/agents/bash-tools.shared.js

@@ -3,7 +3,7 @@ import { assertSandboxPath } from "./sandbox-paths.js";
 import { existsSync, statSync } from "node:fs";
 import { homedir } from "node:os";
 import path from "node:path";
-import fs$1 from "node:fs/promises";
+import fs from "node:fs/promises";
 
 //#region src/agents/bash-tools.shared.ts
 const CHUNK_LIMIT = 8 * 1024;
@@ -67,7 +67,7 @@ async function resolveSandboxWorkdir(params) {
 			cwd: process.cwd(),
 			root: params.sandbox.workspaceDir
 		});
-		const stats = await fs$1.stat(resolved.resolved);
+		const stats = await fs.stat(resolved.resolved);
 		if (!stats.isDirectory()) {
 			throw new Error("workdir is not a directory");
 		}

package/dist/agents/cli-credentials.js

@@ -1,7 +1,7 @@
 import { resolveUserPath } from "../utils.js";
 import { createSubsystemLogger } from "../logging/subsystem.js";
 import { loadJsonFile, saveJsonFile } from "../infra/json-file.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import { execFileSync, execSync } from "node:child_process";
 import { createHash } from "node:crypto";
@@ -61,7 +61,7 @@ function resolveCodexHomePath() {
 	const configured = process.env.CODEX_HOME;
 	const home = configured ? resolveUserPath(configured) : resolveUserPath("~/.codex");
 	try {
-		return fs.realpathSync.native(home);
+		return syncFs.realpathSync.native(home);
 	} catch {
 		return home;
 	}
@@ -264,7 +264,7 @@ function writeClaudeCliKeychainCredentials(newCredentials, options) {
 }
 function writeClaudeCliFileCredentials(newCredentials, options) {
 	const credPath = resolveClaudeCliCredentialsPath(options?.homeDir);
-	if (!fs.existsSync(credPath)) {
+	if (!syncFs.existsSync(credPath)) {
 		return false;
 	}
 	try {
@@ -331,7 +331,7 @@ function readCodexCliCredentials(options) {
 	}
 	let expires;
 	try {
-		const stat = fs.statSync(authPath);
+		const stat = syncFs.statSync(authPath);
 		expires = stat.mtimeMs + 60 * 60 * 1e3;
 	} catch {
 		expires = Date.now() + 60 * 60 * 1e3;

package/dist/agents/docs-path.js

@@ -1,5 +1,5 @@
 import { resolveFasedAgentPackageRoot } from "../infra/fased-root.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/agents/docs-path.ts
@@ -7,7 +7,7 @@ async function resolveFasedAgentDocsPath(params) {
 	const workspaceDir = params.workspaceDir?.trim();
 	if (workspaceDir) {
 		const workspaceDocs = path.join(workspaceDir, "docs");
-		if (fs.existsSync(workspaceDocs)) {
+		if (syncFs.existsSync(workspaceDocs)) {
 			return workspaceDocs;
 		}
 	}
@@ -20,7 +20,7 @@ async function resolveFasedAgentDocsPath(params) {
 		return null;
 	}
 	const packageDocs = path.join(packageRoot, "docs");
-	return fs.existsSync(packageDocs) ? packageDocs : null;
+	return syncFs.existsSync(packageDocs) ? packageDocs : null;
 }
 
 //#endregion

package/dist/agents/embedded-pi-mcp.js

@@ -1,6 +1,6 @@
 import { STATE_DIR } from "../config/paths.js";
 import { isRecord, resolveUserPath } from "../utils.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/agents/embedded-pi-mcp.ts
@@ -66,10 +66,10 @@ function readBundleMcpFile(params) {
 	if (relative.startsWith("..") || path.isAbsolute(relative)) {
 		return {};
 	}
-	if (!fs.existsSync(filePath)) {
+	if (!syncFs.existsSync(filePath)) {
 		return {};
 	}
-	const raw = JSON.parse(fs.readFileSync(filePath, "utf-8"));
+	const raw = JSON.parse(syncFs.readFileSync(filePath, "utf-8"));
 	const servers = extractMcpServerMap(raw);
 	const baseDir = path.dirname(filePath);
 	return Object.fromEntries(Object.entries(servers).map(([serverName, server]) => [serverName, absolutizeBundleMcpServer({
@@ -99,7 +99,7 @@ function loadEnabledBundleMcpConfig(params) {
 			cfg: params.cfg,
 			pluginId
 		})) {
-			if (!fs.existsSync(rootDir)) {
+			if (!syncFs.existsSync(rootDir)) {
 				continue;
 			}
 			for (const fileName of BUNDLE_MCP_FILENAMES) {

package/dist/agents/identity-avatar.js

@@ -3,7 +3,7 @@ import { resolveAgentWorkspaceDir } from "./agent-scope.js";
 import { AVATAR_MAX_BYTES, isAvatarDataUrl, isAvatarHttpUrl, isPathWithinRoot, isSupportedLocalAvatarExtension } from "../shared/avatar-policy.js";
 import { resolveAgentIdentity } from "./identity.js";
 import { loadAgentIdentityFromWorkspace } from "./identity-file.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/agents/identity-avatar.ts
@@ -28,7 +28,7 @@ function resolveAvatarSource(cfg, agentId, opts) {
 }
 function resolveExistingPath(value) {
 	try {
-		return fs.realpathSync(value);
+		return syncFs.realpathSync(value);
 	} catch {
 		return path.resolve(value);
 	}
@@ -51,7 +51,7 @@ function resolveLocalAvatarPath(params) {
 		};
 	}
 	try {
-		const stat = fs.statSync(realPath);
+		const stat = syncFs.statSync(realPath);
 		if (!stat.isFile()) {
 			return {
 				ok: false,

package/dist/agents/identity-file.js

@@ -1,5 +1,5 @@
 import { DEFAULT_IDENTITY_FILENAME } from "./workspace.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/agents/identity-file.ts
@@ -67,7 +67,7 @@ function identityHasValues(identity) {
 }
 function loadIdentityFromFile(identityPath) {
 	try {
-		const content = fs.readFileSync(identityPath, "utf-8");
+		const content = syncFs.readFileSync(identityPath, "utf-8");
 		const parsed = parseIdentityMarkdown(content);
 		if (!identityHasValues(parsed)) {
 			return null;

package/dist/agents/openai-codex-app-server.js

@@ -1,6 +1,6 @@
 import { resolveFasedAgentPackageRootSync } from "../infra/fased-root.js";
 import { resolvePluginInstallDir } from "../plugins/install.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { spawn } from "node:child_process";
@@ -60,17 +60,17 @@ function resolveOpenAICodexExecutable() {
 	const explicitlyConfigured = process.env.FASED_CODEX_BIN?.trim();
 	for (const candidate of codexExecutableCandidates()) {
 		try {
-			if (!fs.statSync(candidate).isFile()) {
+			if (!syncFs.statSync(candidate).isFile()) {
 				continue;
 			}
 			if (explicitlyConfigured && candidate === explicitlyConfigured) {
 				return candidate;
 			}
-			const resolved = fs.realpathSync(candidate);
+			const resolved = syncFs.realpathSync(candidate);
 			let current = path.dirname(resolved);
 			for (let depth = 0; depth < 6; depth += 1) {
 				try {
-					const parsed = JSON.parse(fs.readFileSync(path.join(current, "package.json"), "utf8"));
+					const parsed = JSON.parse(syncFs.readFileSync(path.join(current, "package.json"), "utf8"));
 					if (parsed.name === "@openai/codex") {
 						if (parsed.version === OPENAI_CODEX_APP_SERVER_VERSION) {
 							return candidate;
@@ -90,7 +90,7 @@ function resolveOpenAICodexExecutable() {
 }
 function managedCodexHome() {
 	const directory = path.join(stateDir(), "runtime", "openai-codex");
-	fs.mkdirSync(directory, {
+	syncFs.mkdirSync(directory, {
 		recursive: true,
 		mode: 448
 	});

package/dist/agents/pi-embedded-subscribe.raw-stream.js

@@ -1,6 +1,6 @@
 import { resolveStateDir } from "../config/paths.js";
 import { isTruthyEnvValue } from "../infra/env.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/agents/pi-embedded-subscribe.raw-stream.ts
@@ -14,11 +14,11 @@ function appendRawStream(payload) {
 	if (!rawStreamReady) {
 		rawStreamReady = true;
 		try {
-			fs.mkdirSync(path.dirname(RAW_STREAM_PATH), { recursive: true });
+			syncFs.mkdirSync(path.dirname(RAW_STREAM_PATH), { recursive: true });
 		} catch {}
 	}
 	try {
-		void fs.promises.appendFile(RAW_STREAM_PATH, `${JSON.stringify(payload)}\n`);
+		void syncFs.promises.appendFile(RAW_STREAM_PATH, `${JSON.stringify(payload)}\n`);
 	} catch {}
 }
 

package/dist/agents/pi-extensions/compaction-safeguard.js

@@ -3,7 +3,7 @@ import { getCompactionSafeguardRuntime } from "./compaction-safeguard-runtime.js
 import { extractSections } from "../../auto-reply/reply/post-compaction-context.js";
 import { BASE_CHUNK_RATIO, MIN_CHUNK_RATIO, SAFETY_MARGIN, SUMMARIZATION_OVERHEAD_TOKENS, computeAdaptiveChunkRatio, estimateMessagesTokens, isOversizedForSummary, pruneHistoryForContextShare, resolveContextWindowTokens, summarizeInStages } from "../compaction.js";
 import { collectTextContentBlocks } from "../content-blocks.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/agents/pi-extensions/compaction-safeguard.ts
@@ -122,10 +122,10 @@ async function readWorkspaceContextForSummary() {
 	const workspaceDir = process.cwd();
 	const agentsPath = path.join(workspaceDir, "AGENTS.md");
 	try {
-		if (!fs.existsSync(agentsPath)) {
+		if (!syncFs.existsSync(agentsPath)) {
 			return "";
 		}
-		const content = await fs.promises.readFile(agentsPath, "utf-8");
+		const content = await syncFs.promises.readFile(agentsPath, "utf-8");
 		const sections = extractSections(content, ["Session Startup", "Red Lines"]);
 		if (sections.length === 0) {
 			return "";

package/dist/agents/pi-model-discovery.js

@@ -1,7 +1,7 @@
 import { ensureAuthProfileStore } from "./auth-profiles/store.js";
 import "./auth-profiles.js";
 import { resolvePiCredentialMapFromStore } from "./pi-auth-credentials.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import * as PiCodingAgent from "@mariozechner/pi-coding-agent";
 
@@ -25,12 +25,12 @@ function scrubLegacyStaticAuthJsonEntries(pathname) {
 	if (process.env.FASED_AUTH_STORE_READONLY === "1") {
 		return;
 	}
-	if (!fs.existsSync(pathname)) {
+	if (!syncFs.existsSync(pathname)) {
 		return;
 	}
 	let parsed;
 	try {
-		parsed = JSON.parse(fs.readFileSync(pathname, "utf8"));
+		parsed = JSON.parse(syncFs.readFileSync(pathname, "utf8"));
 	} catch {
 		return;
 	}
@@ -52,11 +52,11 @@ function scrubLegacyStaticAuthJsonEntries(pathname) {
 		return;
 	}
 	if (Object.keys(parsed).length === 0) {
-		fs.rmSync(pathname, { force: true });
+		syncFs.rmSync(pathname, { force: true });
 		return;
 	}
-	fs.writeFileSync(pathname, `${JSON.stringify(parsed, null, 2)}\n`, "utf8");
-	fs.chmodSync(pathname, 384);
+	syncFs.writeFileSync(pathname, `${JSON.stringify(parsed, null, 2)}\n`, "utf8");
+	syncFs.chmodSync(pathname, 384);
 }
 function createAuthStorage(AuthStorageLike, path, creds) {
 	const withInMemory = AuthStorageLike;

package/dist/agents/pi-project-settings.js

@@ -1,6 +1,6 @@
 import { applyMergePatch } from "../config/merge-patch.js";
 import { applyPiCompactionSettingsFromConfig } from "./pi-settings.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import { SettingsManager } from "@mariozechner/pi-coding-agent";
 
@@ -28,7 +28,7 @@ function buildEmbeddedPiSettingsSnapshot(params) {
 }
 function readJsonFile(filePath) {
 	try {
-		const raw = fs.readFileSync(filePath, "utf8");
+		const raw = syncFs.readFileSync(filePath, "utf8");
 		const parsed = JSON.parse(raw);
 		return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
 	} catch {
@@ -49,7 +49,7 @@ function loadEnabledBundlePiSettingsSnapshot(params) {
 			const servers = mcp.mcpServers && typeof mcp.mcpServers === "object" && !Array.isArray(mcp.mcpServers) ? mcp.mcpServers : undefined;
 			if (servers) {
 				const resolvedServers = {};
-				const resolvedRoot = fs.realpathSync.native?.(pluginRoot) ?? fs.realpathSync(pluginRoot);
+				const resolvedRoot = syncFs.realpathSync.native?.(pluginRoot) ?? syncFs.realpathSync(pluginRoot);
 				for (const [name, server] of Object.entries(servers)) {
 					if (!server || typeof server !== "object" || Array.isArray(server)) {
 						resolvedServers[name] = server;

package/dist/agents/sandbox/fs-bridge.js

@@ -3,7 +3,7 @@ import { PATH_ALIAS_POLICIES } from "../../infra/path-alias-guards.js";
 import { execDockerRaw } from "./docker.js";
 import { isPathInsideContainerRoot, normalizeContainerPath } from "./path-utils.js";
 import { buildSandboxFsMounts, resolveSandboxFsPathWithMounts } from "./fs-paths.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 
 //#region src/agents/sandbox/fs-bridge.ts
 function createSandboxFsBridge(params) {
@@ -160,7 +160,7 @@ var SandboxFsBridgeImpl = class {
 				throw guarded.error instanceof Error ? guarded.error : new Error(`Sandbox boundary checks failed; cannot ${options.action}: ${target.containerPath}`);
 			}
 		} else {
-			fs.closeSync(guarded.fd);
+			syncFs.closeSync(guarded.fd);
 		}
 		const canonicalContainerPath = await this.resolveCanonicalContainerPath({
 			containerPath: target.containerPath,

package/dist/agents/session-dirs.js

@@ -1,6 +1,6 @@
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
-import fs$1 from "node:fs/promises";
+import fs from "node:fs/promises";
 
 //#region src/agents/session-dirs.ts
 function mapAgentSessionDirs(agentsDir, entries) {
@@ -9,7 +9,7 @@ function mapAgentSessionDirs(agentsDir, entries) {
 async function resolveAgentSessionDirsFromAgentsDir(agentsDir) {
 	let entries = [];
 	try {
-		entries = await fs$1.readdir(agentsDir, { withFileTypes: true });
+		entries = await fs.readdir(agentsDir, { withFileTypes: true });
 	} catch (err) {
 		const code = err.code;
 		if (code === "ENOENT") {
@@ -22,7 +22,7 @@ async function resolveAgentSessionDirsFromAgentsDir(agentsDir) {
 function resolveAgentSessionDirsFromAgentsDirSync(agentsDir) {
 	let entries = [];
 	try {
-		entries = fs.readdirSync(agentsDir, { withFileTypes: true });
+		entries = syncFs.readdirSync(agentsDir, { withFileTypes: true });
 	} catch (err) {
 		const code = err.code;
 		if (code === "ENOENT") {

package/dist/agents/session-write-lock.js

@@ -1,8 +1,8 @@
 import { isPidAlive } from "../shared/pid-alive.js";
 import { resolveProcessScopedMap } from "../shared/process-scoped-map.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
-import fs$1 from "node:fs/promises";
+import fs from "node:fs/promises";
 
 //#region src/agents/session-write-lock.ts
 const CLEANUP_SIGNALS = [
@@ -84,7 +84,7 @@ async function releaseHeldLock(normalizedSessionFile, held, opts = {}) {
 			await held.handle.close();
 		} catch {}
 		try {
-			await fs$1.rm(held.lockPath, { force: true });
+			await fs.rm(held.lockPath, { force: true });
 		} catch {}
 	})();
 	try {
@@ -106,7 +106,7 @@ function releaseAllLocksSync() {
 			}
 		} catch {}
 		try {
-			fs.rmSync(held.lockPath, { force: true });
+			syncFs.rmSync(held.lockPath, { force: true });
 		} catch {}
 		HELD_LOCKS.delete(sessionFile);
 	}
@@ -175,7 +175,7 @@ function registerCleanupHandlers() {
 }
 async function readLockPayload(lockPath) {
 	try {
-		const raw = await fs$1.readFile(lockPath, "utf8");
+		const raw = await fs.readFile(lockPath, "utf8");
 		const parsed = JSON.parse(raw);
 		const payload = {};
 		if (typeof parsed.pid === "number") {
@@ -226,7 +226,7 @@ async function shouldReclaimContendedLockFile(lockPath, details, staleMs, nowMs)
 		return true;
 	}
 	try {
-		const stat = await fs$1.stat(lockPath);
+		const stat = await fs.stat(lockPath);
 		const ageMs = Math.max(0, nowMs - stat.mtimeMs);
 		return ageMs > staleMs;
 	} catch (error) {
@@ -241,7 +241,7 @@ async function cleanStaleLockFiles(params) {
 	const nowMs = params.nowMs ?? Date.now();
 	let entries = [];
 	try {
-		entries = await fs$1.readdir(sessionsDir, { withFileTypes: true });
+		entries = await fs.readdir(sessionsDir, { withFileTypes: true });
 	} catch (err) {
 		const code = err.code;
 		if (code === "ENOENT") {
@@ -265,7 +265,7 @@ async function cleanStaleLockFiles(params) {
 			removed: false
 		};
 		if (lockInfo.stale && removeStale) {
-			await fs$1.rm(lockPath, { force: true });
+			await fs.rm(lockPath, { force: true });
 			lockInfo.removed = true;
 			cleaned.push(lockInfo);
 			params.log?.warn?.(`removed stale session lock: ${lockPath} (${lockInfo.staleReasons.join(", ") || "unknown"})`);
@@ -284,10 +284,10 @@ async function acquireSessionWriteLock(params) {
 	const maxHoldMs = resolvePositiveMs(params.maxHoldMs, DEFAULT_MAX_HOLD_MS);
 	const sessionFile = path.resolve(params.sessionFile);
 	const sessionDir = path.dirname(sessionFile);
-	await fs$1.mkdir(sessionDir, { recursive: true });
+	await fs.mkdir(sessionDir, { recursive: true });
 	let normalizedDir = sessionDir;
 	try {
-		normalizedDir = await fs$1.realpath(sessionDir);
+		normalizedDir = await fs.realpath(sessionDir);
 	} catch {}
 	const normalizedSessionFile = path.join(normalizedDir, path.basename(sessionFile));
 	const lockPath = `${normalizedSessionFile}.lock`;
@@ -305,7 +305,7 @@ async function acquireSessionWriteLock(params) {
 		attempt += 1;
 		let handle = null;
 		try {
-			handle = await fs$1.open(lockPath, "wx");
+			handle = await fs.open(lockPath, "wx");
 			const createdAt = new Date().toISOString();
 			await handle.writeFile(JSON.stringify({
 				pid: process.pid,
@@ -328,7 +328,7 @@ async function acquireSessionWriteLock(params) {
 					await handle.close();
 				} catch {}
 				try {
-					await fs$1.rm(lockPath, { force: true });
+					await fs.rm(lockPath, { force: true });
 				} catch {}
 			}
 			const code = err.code;
@@ -339,7 +339,7 @@ async function acquireSessionWriteLock(params) {
 			const nowMs = Date.now();
 			const inspected = inspectLockPayload(payload, staleMs, nowMs);
 			if (await shouldReclaimContendedLockFile(lockPath, inspected, staleMs, nowMs)) {
-				await fs$1.rm(lockPath, { force: true });
+				await fs.rm(lockPath, { force: true });
 				continue;
 			}
 			const delay = Math.min(1e3, 50 * attempt);

package/dist/agents/shell-utils.js

@@ -1,4 +1,4 @@
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import { spawn } from "node:child_process";
 
@@ -6,13 +6,13 @@ import { spawn } from "node:child_process";
 function resolvePowerShellPath() {
 	const programFiles = process.env.ProgramFiles || process.env.PROGRAMFILES || "C:\\Program Files";
 	const pwsh7 = path.join(programFiles, "PowerShell", "7", "pwsh.exe");
-	if (fs.existsSync(pwsh7)) {
+	if (syncFs.existsSync(pwsh7)) {
 		return pwsh7;
 	}
 	const programW6432 = process.env.ProgramW6432;
 	if (programW6432 && programW6432 !== programFiles) {
 		const pwsh7Alt = path.join(programW6432, "PowerShell", "7", "pwsh.exe");
-		if (fs.existsSync(pwsh7Alt)) {
+		if (syncFs.existsSync(pwsh7Alt)) {
 			return pwsh7Alt;
 		}
 	}
@@ -23,7 +23,7 @@ function resolvePowerShellPath() {
 	const systemRoot = process.env.SystemRoot || process.env.WINDIR;
 	if (systemRoot) {
 		const candidate = path.join(systemRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe");
-		if (fs.existsSync(candidate)) {
+		if (syncFs.existsSync(candidate)) {
 			return candidate;
 		}
 	}
@@ -73,7 +73,7 @@ function resolveShellFromPath(name) {
 	for (const entry of entries) {
 		const candidate = path.join(entry, name);
 		try {
-			fs.accessSync(candidate, fs.constants.X_OK);
+			syncFs.accessSync(candidate, syncFs.constants.X_OK);
 			return candidate;
 		} catch {}
 	}