@fased/fased 0.1.61 → 0.1.64

package/dist/gateway/session-utils.fs.js

@@ -7,7 +7,7 @@ import { extractToolCallNames, hasToolCall } from "../utils/transcript-tools.js"
 import { stripEnvelope } from "../shared/chat-envelope.js";
 import "./chat-sanitize.js";
 import "../config/sessions.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 
@@ -50,11 +50,11 @@ function setCachedSessionTitleFields(cacheKey, stat, value) {
 }
 function readSessionMessages(sessionId, storePath, sessionFile) {
 	const candidates = resolveSessionTranscriptCandidates(sessionId, storePath, sessionFile);
-	const filePath = candidates.find((p) => fs.existsSync(p));
+	const filePath = candidates.find((p) => syncFs.existsSync(p));
 	if (!filePath) {
 		return [];
 	}
-	const lines = fs.readFileSync(filePath, "utf-8").split(/\r?\n/);
+	const lines = syncFs.readFileSync(filePath, "utf-8").split(/\r?\n/);
 	const messages = [];
 	for (const line of lines) {
 		if (!line.trim()) {
@@ -123,7 +123,7 @@ function resolveSessionTranscriptCandidates(sessionId, storePath, sessionFile, a
 function canonicalizePathForComparison(filePath) {
 	const resolved = path.resolve(filePath);
 	try {
-		return fs.realpathSync(resolved);
+		return syncFs.realpathSync(resolved);
 	} catch {
 		return resolved;
 	}
@@ -131,7 +131,7 @@ function canonicalizePathForComparison(filePath) {
 function archiveFileOnDisk(filePath, reason) {
 	const ts = formatSessionArchiveTimestamp();
 	const archived = `${filePath}.${reason}.${ts}`;
-	fs.renameSync(filePath, archived);
+	syncFs.renameSync(filePath, archived);
 	return archived;
 }
 /**
@@ -149,7 +149,7 @@ function archiveSessionTranscripts(opts) {
 				continue;
 			}
 		}
-		if (!fs.existsSync(candidatePath)) {
+		if (!syncFs.existsSync(candidatePath)) {
 			continue;
 		}
 		try {
@@ -171,7 +171,7 @@ async function cleanupArchivedSessionTranscripts(opts) {
 	let removed = 0;
 	let scanned = 0;
 	for (const dir of directories) {
-		const entries = await fs.promises.readdir(dir).catch(() => []);
+		const entries = await syncFs.promises.readdir(dir).catch(() => []);
 		for (const entry of entries) {
 			const timestamp = parseSessionArchiveTimestamp(entry, reason);
 			if (timestamp == null) {
@@ -182,11 +182,11 @@ async function cleanupArchivedSessionTranscripts(opts) {
 				continue;
 			}
 			const fullPath = path.join(dir, entry);
-			const stat = await fs.promises.stat(fullPath).catch(() => null);
+			const stat = await syncFs.promises.stat(fullPath).catch(() => null);
 			if (!stat?.isFile()) {
 				continue;
 			}
-			await fs.promises.rm(fullPath).catch(() => undefined);
+			await syncFs.promises.rm(fullPath).catch(() => undefined);
 			removed += 1;
 		}
 	}
@@ -225,7 +225,7 @@ function capArrayByJsonBytes(items, maxBytes) {
 const MAX_LINES_TO_SCAN = 10;
 function readSessionTitleFieldsFromTranscript(sessionId, storePath, sessionFile, agentId, opts) {
 	const candidates = resolveSessionTranscriptCandidates(sessionId, storePath, sessionFile, agentId);
-	const filePath = candidates.find((p) => fs.existsSync(p));
+	const filePath = candidates.find((p) => syncFs.existsSync(p));
 	if (!filePath) {
 		return {
 			firstUserMessage: null,
@@ -234,7 +234,7 @@ function readSessionTitleFieldsFromTranscript(sessionId, storePath, sessionFile,
 	}
 	let stat;
 	try {
-		stat = fs.statSync(filePath);
+		stat = syncFs.statSync(filePath);
 	} catch {
 		return {
 			firstUserMessage: null,
@@ -256,7 +256,7 @@ function readSessionTitleFieldsFromTranscript(sessionId, storePath, sessionFile,
 	}
 	let fd = null;
 	try {
-		fd = fs.openSync(filePath, "r");
+		fd = syncFs.openSync(filePath, "r");
 		const size = stat.size;
 		let firstUserMessage = null;
 		try {
@@ -286,7 +286,7 @@ function readSessionTitleFieldsFromTranscript(sessionId, storePath, sessionFile,
 	} finally {
 		if (fd !== null) {
 			try {
-				fs.closeSync(fd);
+				syncFs.closeSync(fd);
 			} catch {}
 		}
 	}
@@ -314,7 +314,7 @@ function extractTextFromContent(content) {
 }
 function readTranscriptHeadChunk(fd, maxBytes = 8192) {
 	const buf = Buffer.alloc(maxBytes);
-	const bytesRead = fs.readSync(fd, buf, 0, buf.length, 0);
+	const bytesRead = syncFs.readSync(fd, buf, 0, buf.length, 0);
 	if (bytesRead <= 0) {
 		return null;
 	}
@@ -345,16 +345,16 @@ function extractFirstUserMessageFromTranscriptChunk(chunk, opts) {
 }
 function findExistingTranscriptPath(sessionId, storePath, sessionFile, agentId) {
 	const candidates = resolveSessionTranscriptCandidates(sessionId, storePath, sessionFile, agentId);
-	return candidates.find((p) => fs.existsSync(p)) ?? null;
+	return candidates.find((p) => syncFs.existsSync(p)) ?? null;
 }
 function withOpenTranscriptFd(filePath, read) {
 	let fd = null;
 	try {
-		fd = fs.openSync(filePath, "r");
+		fd = syncFs.openSync(filePath, "r");
 		return read(fd);
 	} catch {} finally {
 		if (fd !== null) {
-			fs.closeSync(fd);
+			syncFs.closeSync(fd);
 		}
 	}
 	return null;
@@ -378,7 +378,7 @@ function readLastMessagePreviewFromOpenTranscript(params) {
 	const readStart = Math.max(0, params.size - LAST_MSG_MAX_BYTES);
 	const readLen = Math.min(params.size, LAST_MSG_MAX_BYTES);
 	const buf = Buffer.alloc(readLen);
-	fs.readSync(params.fd, buf, 0, readLen, readStart);
+	syncFs.readSync(params.fd, buf, 0, readLen, readStart);
 	const chunk = buf.toString("utf-8");
 	const lines = chunk.split(/\r?\n/).filter((l) => l.trim());
 	const tailLines = lines.slice(-LAST_MSG_MAX_LINES);
@@ -404,7 +404,7 @@ function readLastMessagePreviewFromTranscript(sessionId, storePath, sessionFile,
 		return null;
 	}
 	return withOpenTranscriptFd(filePath, (fd) => {
-		const stat = fs.fstatSync(fd);
+		const stat = syncFs.fstatSync(fd);
 		const size = stat.size;
 		if (size === 0) {
 			return null;
@@ -522,8 +522,8 @@ function buildPreviewItems(messages, maxItems, maxChars) {
 function readRecentMessagesFromTranscript(filePath, maxMessages, readBytes) {
 	let fd = null;
 	try {
-		fd = fs.openSync(filePath, "r");
-		const stat = fs.fstatSync(fd);
+		fd = syncFs.openSync(filePath, "r");
+		const stat = syncFs.fstatSync(fd);
 		const size = stat.size;
 		if (size === 0) {
 			return [];
@@ -531,7 +531,7 @@ function readRecentMessagesFromTranscript(filePath, maxMessages, readBytes) {
 		const readStart = Math.max(0, size - readBytes);
 		const readLen = Math.min(size, readBytes);
 		const buf = Buffer.alloc(readLen);
-		fs.readSync(fd, buf, 0, readLen, readStart);
+		syncFs.readSync(fd, buf, 0, readLen, readStart);
 		const chunk = buf.toString("utf-8");
 		const lines = chunk.split(/\r?\n/).filter((l) => l.trim());
 		const tailLines = lines.slice(-PREVIEW_MAX_LINES);
@@ -554,13 +554,13 @@ function readRecentMessagesFromTranscript(filePath, maxMessages, readBytes) {
 		return [];
 	} finally {
 		if (fd !== null) {
-			fs.closeSync(fd);
+			syncFs.closeSync(fd);
 		}
 	}
 }
 function readSessionPreviewItemsFromTranscript(sessionId, storePath, sessionFile, agentId, maxItems, maxChars) {
 	const candidates = resolveSessionTranscriptCandidates(sessionId, storePath, sessionFile, agentId);
-	const filePath = candidates.find((p) => fs.existsSync(p));
+	const filePath = candidates.find((p) => syncFs.existsSync(p));
 	if (!filePath) {
 		return [];
 	}

package/dist/gateway/session-utils.js

@@ -19,7 +19,7 @@ import { loadSessionStore } from "../config/sessions/store.js";
 import "../config/sessions.js";
 import { lookupContextTokens } from "../agents/context.js";
 import { listSessionCompactionCheckpoints } from "./session-compaction-checkpoints.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/gateway/session-utils.ts
@@ -41,7 +41,7 @@ function isCombinedSessionStoreCacheFresh(entry) {
 }
 function readSessionStoreSignature(storePath) {
 	try {
-		const stat = fs.statSync(storePath);
+		const stat = syncFs.statSync(storePath);
 		return {
 			storePath,
 			exists: true,
@@ -94,7 +94,7 @@ function clearCombinedSessionStoreCacheForTest() {
 }
 function tryResolveExistingPath(value) {
 	try {
-		return fs.realpathSync(value);
+		return syncFs.realpathSync(value);
 	} catch {
 		return null;
 	}
@@ -132,11 +132,11 @@ function resolveIdentityAvatarUrl(cfg, agentId, avatar) {
 			return undefined;
 		}
 		try {
-			const buffer = fs.readFileSync(opened.fd);
+			const buffer = syncFs.readFileSync(opened.fd);
 			const mime = resolveAvatarMime(resolvedCandidate);
 			return `data:${mime};base64,${buffer.toString("base64")}`;
 		} finally {
-			fs.closeSync(opened.fd);
+			syncFs.closeSync(opened.fd);
 		}
 	} catch {
 		return undefined;
@@ -304,7 +304,7 @@ function listExistingAgentIdsFromDisk() {
 	const root = resolveStateDir();
 	const agentsDir = path.join(root, "agents");
 	try {
-		const entries = fs.readdirSync(agentsDir, { withFileTypes: true });
+		const entries = syncFs.readdirSync(agentsDir, { withFileTypes: true });
 		return entries.filter((entry) => entry.isDirectory()).map((entry) => normalizeAgentId(entry.name)).filter(Boolean);
 	} catch {
 		return [];

package/dist/gateway/sessions-patch.js

@@ -3,8 +3,7 @@ import { normalizeElevatedLevel, normalizeReasoningLevel, normalizeUsageDisplay
 import { isSubagentSessionKey, parseAgentSessionKey } from "../sessions/session-key-utils.js";
 import { normalizeAgentId } from "../routing/session-key.js";
 import { resolveDefaultAgentId } from "../agents/agent-scope.js";
-import { isStandardProviderModelRef } from "../providers/registry.js";
-import { modelKey, resolveAllowedModelRef, resolveDefaultModelForAgent, resolveSubagentConfiguredModelSelection } from "../agents/model-selection.js";
+import { normalizeProviderId, resolveAllowedModelRef, resolveDefaultModelForAgent, resolveSubagentConfiguredModelSelection } from "../agents/model-selection.js";
 import { parseSessionLabel } from "../sessions/session-label.js";
 import { ErrorCodes, errorShape } from "./protocol/schema/error-codes.js";
 import "./protocol/index.js";
@@ -272,13 +271,12 @@ async function applySessionsPatchToStore(params) {
 				catalog,
 				raw: trimmed,
 				defaultProvider: resolvedDefault.provider,
-				defaultModel: subagentModelHint ?? resolvedDefault.model,
-				additionalAllowedProviders: params.additionalAllowedModelProviders
+				defaultModel: subagentModelHint ?? resolvedDefault.model
 			});
 			if ("error" in resolved) {
 				return invalid(resolved.error);
 			}
-			if (params.additionalAllowedModelProviders && !catalog.some((entry) => modelKey(entry.provider, entry.id) === modelKey(resolved.ref.provider, resolved.ref.model)) && !isStandardProviderModelRef(resolved.key)) {
+			if (params.additionalAllowedModelProviders && !new Set([...params.additionalAllowedModelProviders].map((provider) => normalizeProviderId(provider)).filter(Boolean)).has(normalizeProviderId(resolved.ref.provider))) {
 				return invalid(`Model "${resolved.key}" is not available for signed-in providers.`);
 			}
 			const isDefault = resolved.ref.provider === resolvedDefault.provider && resolved.ref.model === resolvedDefault.model;

package/dist/hooks/bundled-dir.js

@@ -1,5 +1,5 @@
 import { fileURLToPath } from "node:url";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/hooks/bundled-dir.ts
@@ -11,14 +11,14 @@ function resolveBundledHooksDir() {
 	try {
 		const execDir = path.dirname(process.execPath);
 		const sibling = path.join(execDir, "hooks", "bundled");
-		if (fs.existsSync(sibling)) {
+		if (syncFs.existsSync(sibling)) {
 			return sibling;
 		}
 	} catch {}
 	try {
 		const moduleDir = path.dirname(fileURLToPath(import.meta.url));
 		const distBundled = path.join(moduleDir, "bundled");
-		if (fs.existsSync(distBundled)) {
+		if (syncFs.existsSync(distBundled)) {
 			return distBundled;
 		}
 	} catch {}
@@ -26,7 +26,7 @@ function resolveBundledHooksDir() {
 		const moduleDir = path.dirname(fileURLToPath(import.meta.url));
 		const root = path.resolve(moduleDir, "..", "..");
 		const srcBundled = path.join(root, "src", "hooks", "bundled");
-		if (fs.existsSync(srcBundled)) {
+		if (syncFs.existsSync(srcBundled)) {
 			return srcBundled;
 		}
 	} catch {}

package/dist/hooks/gmail-setup-utils.js

@@ -3,7 +3,7 @@ import { runCommandWithTimeout } from "../process/exec.js";
 import { hasBinary } from "../shared/config-eval.js";
 import "../agents/skills.js";
 import { normalizeServePath } from "./gmail.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/hooks/gmail-setup-utils.ts
@@ -71,7 +71,7 @@ function findExecutablesOnPath(bins) {
 				continue;
 			}
 			try {
-				fs.accessSync(candidate, fs.constants.X_OK);
+				syncFs.accessSync(candidate, syncFs.constants.X_OK);
 				matches.push(candidate);
 				seen.add(candidate);
 			} catch {}
@@ -100,7 +100,7 @@ function ensureGcloudOnPath() {
 	];
 	for (const candidate of candidates) {
 		try {
-			fs.accessSync(candidate, fs.constants.X_OK);
+			syncFs.accessSync(candidate, syncFs.constants.X_OK);
 			ensurePathIncludes(path.dirname(candidate), "append");
 			return true;
 		} catch {}
@@ -126,7 +126,7 @@ async function resolvePythonExecutablePath() {
 			continue;
 		}
 		try {
-			fs.accessSync(resolved, fs.constants.X_OK);
+			syncFs.accessSync(resolved, syncFs.constants.X_OK);
 			cachedPythonPath = resolved;
 			return resolved;
 		} catch {}
@@ -303,11 +303,11 @@ async function ensureTailscaleEndpoint(params) {
 async function resolveProjectIdFromGogCredentials() {
 	const candidates = gogCredentialsPaths();
 	for (const candidate of candidates) {
-		if (!fs.existsSync(candidate)) {
+		if (!syncFs.existsSync(candidate)) {
 			continue;
 		}
 		try {
-			const raw = fs.readFileSync(candidate, "utf-8");
+			const raw = syncFs.readFileSync(candidate, "utf-8");
 			const parsed = JSON.parse(raw);
 			const clientId = extractGogClientId(parsed);
 			const projectNumber = extractProjectNumber(clientId);

package/dist/hooks/import-url.js

@@ -1,5 +1,5 @@
 import { pathToFileURL } from "node:url";
-import fs from "node:fs";
+import syncFs from "node:fs";
 
 //#region src/hooks/import-url.ts
 /**
@@ -24,7 +24,7 @@ function buildImportUrl(handlerPath, source) {
 		return base;
 	}
 	try {
-		const { mtimeMs, size } = fs.statSync(handlerPath);
+		const { mtimeMs, size } = syncFs.statSync(handlerPath);
 		return `${base}?t=${mtimeMs}&s=${size}`;
 	} catch {
 		return `${base}?t=${Date.now()}`;

package/dist/hooks/loader.js

@@ -5,7 +5,7 @@ import { resolveHookConfig, shouldIncludeHook } from "./config.js";
 import { resolveFunctionModuleExport } from "./module-loader.js";
 import { loadWorkspaceHookEntries } from "./workspace.js";
 import { buildImportUrl } from "./import-url.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/hooks/loader.ts
@@ -67,7 +67,7 @@ async function loadInternalHooks(cfg, workspaceDir, opts) {
 					continue;
 				}
 				const safeHandlerPath = opened.path;
-				fs.closeSync(opened.fd);
+				syncFs.closeSync(opened.fd);
 				const importUrl = buildImportUrl(safeHandlerPath, entry.hook.source);
 				const mod = await import(importUrl);
 				const exportName = entry.metadata?.export ?? "default";
@@ -127,7 +127,7 @@ async function loadInternalHooks(cfg, workspaceDir, opts) {
 				continue;
 			}
 			const safeModulePath = opened.path;
-			fs.closeSync(opened.fd);
+			syncFs.closeSync(opened.fd);
 			const importUrl = buildImportUrl(safeModulePath, "fased-workspace");
 			const mod = await import(importUrl);
 			const exportName = handlerConfig.export ?? "default";
@@ -150,7 +150,7 @@ async function loadInternalHooks(cfg, workspaceDir, opts) {
 }
 function safeRealpathOrResolve(value) {
 	try {
-		return fs.realpathSync(value);
+		return syncFs.realpathSync(value);
 	} catch {
 		return path.resolve(value);
 	}

package/dist/hooks/workspace.js

@@ -6,7 +6,7 @@ import { isPathInsideWithRealpath } from "../security/scan-paths.js";
 import { parseFrontmatter, resolveFasedAgentMetadata, resolveHookInvocationPolicy } from "./frontmatter.js";
 import { shouldIncludeHook } from "./config.js";
 import { resolveBundledHooksDir } from "./bundled-dir.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/hooks/workspace.ts
@@ -106,15 +106,15 @@ function loadHookFromDir(params) {
 */
 function loadHooksFromDir(params) {
 	const { dir, source, pluginId } = params;
-	if (!fs.existsSync(dir)) {
+	if (!syncFs.existsSync(dir)) {
 		return [];
 	}
-	const stat = fs.statSync(dir);
+	const stat = syncFs.statSync(dir);
 	if (!stat.isDirectory()) {
 		return [];
 	}
 	const hooks = [];
-	const entries = fs.readdirSync(dir, { withFileTypes: true });
+	const entries = syncFs.readdirSync(dir, { withFileTypes: true });
 	for (const entry of entries) {
 		if (!entry.isDirectory()) {
 			continue;
@@ -263,11 +263,11 @@ function readBoundaryFileUtf8(params) {
 		return null;
 	}
 	try {
-		return fs.readFileSync(opened.fd, "utf-8");
+		return syncFs.readFileSync(opened.fd, "utf-8");
 	} catch {
 		return null;
 	} finally {
-		fs.closeSync(opened.fd);
+		syncFs.closeSync(opened.fd);
 	}
 }
 function resolveBoundaryFilePath(params) {
@@ -280,7 +280,7 @@ function resolveBoundaryFilePath(params) {
 		return null;
 	}
 	const safePath = opened.path;
-	fs.closeSync(opened.fd);
+	syncFs.closeSync(opened.fd);
 	return safePath;
 }
 

package/dist/index.js

@@ -22,8 +22,6 @@ import { createDefaultDeps } from "./cli/deps.js";
 import { getReplyFromConfig } from "./auto-reply/reply/get-reply.js";
 import "./auto-reply/reply.js";
 import { waitForever } from "./cli/wait.js";
-import { monitorWebChannel } from "./web/auto-reply/monitor.js";
-import "./channel-web.js";
 import { isMainModule } from "./infra/is-main.js";
 import { ensureFasedAgentCliOnPath } from "./infra/path-env.js";
 import { buildProgram } from "./cli/program/build-program.js";
@@ -38,6 +36,10 @@ ensureFasedAgentCliOnPath();
 enableConsoleCapture();
 assertSupportedRuntime();
 const program = buildProgram();
+const monitorWebChannel = async (...args) => {
+	const channelWeb = await import("./channel-web.js");
+	return await channelWeb.monitorWebChannel(...args);
+};
 const isMain = isMainModule({ currentFile: fileURLToPath(import.meta.url) });
 if (isMain) {
 	installUnhandledRejectionHandler();

package/dist/infra/archive.js

@@ -2,7 +2,7 @@ import { isNotFoundPathError, isPathInside, isSymlinkOpenError } from "./path-gu
 import { resolveArchiveOutputPath, stripArchivePath, validateArchiveEntryPath } from "./archive-path.js";
 import { constants } from "node:fs";
 import path from "node:path";
-import fs$1 from "node:fs/promises";
+import fs from "node:fs/promises";
 import { Readable, Transform } from "node:stream";
 import { pipeline } from "node:stream/promises";
 import JSZip from "jszip";
@@ -48,12 +48,12 @@ function resolveArchiveKind(filePath) {
 async function resolvePackedRootDir(extractDir) {
 	const direct = path.join(extractDir, "package");
 	try {
-		const stat = await fs$1.stat(direct);
+		const stat = await fs.stat(direct);
 		if (stat.isDirectory()) {
 			return direct;
 		}
 	} catch {}
-	const entries = await fs$1.readdir(extractDir, { withFileTypes: true });
+	const entries = await fs.readdir(extractDir, { withFileTypes: true });
 	const dirs = entries.filter((entry) => entry.isDirectory()).map((entry) => entry.name);
 	if (dirs.length !== 1) {
 		throw new Error(`unexpected archive layout (dirs: ${dirs.join(", ")})`);
@@ -142,14 +142,14 @@ function symlinkTraversalError(originalPath) {
 	return new ArchiveSecurityError("destination-symlink-traversal", `${ERROR_ARCHIVE_ENTRY_TRAVERSES_SYMLINK}: ${originalPath}`);
 }
 async function assertDestinationDirReady(destDir) {
-	const stat = await fs$1.lstat(destDir);
+	const stat = await fs.lstat(destDir);
 	if (stat.isSymbolicLink()) {
 		throw new ArchiveSecurityError("destination-symlink", "archive destination is a symlink");
 	}
 	if (!stat.isDirectory()) {
 		throw new ArchiveSecurityError("destination-not-directory", "archive destination is not a directory");
 	}
-	return await fs$1.realpath(destDir);
+	return await fs.realpath(destDir);
 }
 async function assertNoSymlinkTraversal(params) {
 	const parts = params.relPath.split("/").filter(Boolean);
@@ -158,7 +158,7 @@ async function assertNoSymlinkTraversal(params) {
 		current = path.join(current, part);
 		let stat;
 		try {
-			stat = await fs$1.lstat(current);
+			stat = await fs.lstat(current);
 		} catch (err) {
 			if (isNotFoundPathError(err)) {
 				continue;
@@ -173,7 +173,7 @@ async function assertNoSymlinkTraversal(params) {
 async function assertResolvedInsideDestination(params) {
 	let resolved;
 	try {
-		resolved = await fs$1.realpath(params.targetPath);
+		resolved = await fs.realpath(params.targetPath);
 	} catch (err) {
 		if (isNotFoundPathError(err)) {
 			return;
@@ -186,7 +186,7 @@ async function assertResolvedInsideDestination(params) {
 }
 async function openZipOutputFile(outPath, originalPath) {
 	try {
-		return await fs$1.open(outPath, OPEN_WRITE_FLAGS, 438);
+		return await fs.open(outPath, OPEN_WRITE_FLAGS, 438);
 	} catch (err) {
 		if (isSymlinkOpenError(err)) {
 			throw symlinkTraversalError(originalPath);
@@ -197,7 +197,7 @@ async function openZipOutputFile(outPath, originalPath) {
 async function cleanupPartialRegularFile(filePath) {
 	let stat;
 	try {
-		stat = await fs$1.lstat(filePath);
+		stat = await fs.lstat(filePath);
 	} catch (err) {
 		if (isNotFoundPathError(err)) {
 			return;
@@ -205,7 +205,7 @@ async function cleanupPartialRegularFile(filePath) {
 		throw err;
 	}
 	if (stat.isFile()) {
-		await fs$1.unlink(filePath).catch(() => undefined);
+		await fs.unlink(filePath).catch(() => undefined);
 	}
 }
 async function readZipEntryStream(entry) {
@@ -238,7 +238,7 @@ async function prepareZipOutputPath(params) {
 		originalPath: params.originalPath
 	});
 	if (params.isDirectory) {
-		await fs$1.mkdir(params.outPath, { recursive: true });
+		await fs.mkdir(params.outPath, { recursive: true });
 		await assertResolvedInsideDestination({
 			destinationRealDir: params.destinationRealDir,
 			targetPath: params.outPath,
@@ -247,7 +247,7 @@ async function prepareZipOutputPath(params) {
 		return;
 	}
 	const parentDir = path.dirname(params.outPath);
-	await fs$1.mkdir(parentDir, { recursive: true });
+	await fs.mkdir(parentDir, { recursive: true });
 	await assertResolvedInsideDestination({
 		destinationRealDir: params.destinationRealDir,
 		targetPath: parentDir,
@@ -268,18 +268,18 @@ async function writeZipFileEntry(params) {
 	if (typeof params.entry.unixPermissions === "number") {
 		const mode = params.entry.unixPermissions & 511;
 		if (mode !== 0) {
-			await fs$1.chmod(params.outPath, mode).catch(() => undefined);
+			await fs.chmod(params.outPath, mode).catch(() => undefined);
 		}
 	}
 }
 async function extractZip(params) {
 	const limits = resolveExtractLimits(params.limits);
 	const destinationRealDir = await assertDestinationDirReady(params.destDir);
-	const stat = await fs$1.stat(params.archivePath);
+	const stat = await fs.stat(params.archivePath);
 	if (stat.size > limits.maxArchiveBytes) {
 		throw new Error(ERROR_ARCHIVE_SIZE_EXCEEDS_LIMIT);
 	}
-	const buffer = await fs$1.readFile(params.archivePath);
+	const buffer = await fs.readFile(params.archivePath);
 	const zip = await JSZip.loadAsync(buffer);
 	const entries = Object.values(zip.files);
 	const strip = Math.max(0, Math.floor(params.stripComponents ?? 0));
@@ -378,14 +378,14 @@ async function extractArchive(params) {
 }
 async function fileExists(filePath) {
 	try {
-		await fs$1.stat(filePath);
+		await fs.stat(filePath);
 		return true;
 	} catch {
 		return false;
 	}
 }
 async function readJsonFile(filePath) {
-	const raw = await fs$1.readFile(filePath, "utf-8");
+	const raw = await fs.readFile(filePath, "utf-8");
 	return JSON.parse(raw);
 }
 

package/dist/infra/boundary-file-read.js

@@ -1,6 +1,6 @@
 import { resolveBoundaryPath, resolveBoundaryPathSync } from "./boundary-path.js";
 import { openVerifiedFileSync } from "./safe-open-sync.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/infra/boundary-file-read.ts
@@ -8,7 +8,7 @@ function canUseBoundaryFileOpen(ioFs) {
 	return typeof ioFs.openSync === "function" && typeof ioFs.closeSync === "function" && typeof ioFs.fstatSync === "function" && typeof ioFs.lstatSync === "function" && typeof ioFs.realpathSync === "function" && typeof ioFs.readFileSync === "function" && typeof ioFs.constants === "object" && ioFs.constants !== null;
 }
 function openBoundaryFileSync(params) {
-	const ioFs = params.ioFs ?? fs;
+	const ioFs = params.ioFs ?? syncFs;
 	const absolutePath = path.resolve(params.absolutePath);
 	let resolvedPath;
 	let rootRealPath;