@fased/fased 0.1.64 → 0.1.66

package/dist/infra/boundary-path.js

@@ -1,8 +1,8 @@
 import { isNotFoundPathError, isPathInside } from "./path-guards.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import fs from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 
 //#region src/infra/boundary-path.ts
 const BOUNDARY_PATH_ALIAS_POLICIES = {
@@ -114,7 +114,7 @@ async function resolveBoundaryPathLexicalAsync(params) {
 		lexicalCursor = path.join(lexicalCursor, segment);
 		let stat;
 		try {
-			stat = await fs.lstat(lexicalCursor);
+			stat = await fs$1.lstat(lexicalCursor);
 		} catch (error) {
 			if (isNotFoundPathError(error)) {
 				const missingSuffix = segments.slice(idx);
@@ -189,7 +189,7 @@ function resolveBoundaryPathLexicalSync(params) {
 		lexicalCursor = path.join(lexicalCursor, segment);
 		let stat;
 		try {
-			stat = syncFs.lstatSync(lexicalCursor);
+			stat = fs.lstatSync(lexicalCursor);
 		} catch (error) {
 			if (isNotFoundPathError(error)) {
 				const missingSuffix = segments.slice(idx);
@@ -294,7 +294,7 @@ async function resolvePathViaExistingAncestor(targetPath) {
 		return normalized;
 	}
 	try {
-		const resolvedAncestor = path.resolve(await fs.realpath(cursor));
+		const resolvedAncestor = path.resolve(await fs$1.realpath(cursor));
 		if (missingSuffix.length === 0) {
 			return resolvedAncestor;
 		}
@@ -307,7 +307,7 @@ function resolvePathViaExistingAncestorSync(targetPath) {
 	const normalized = path.resolve(targetPath);
 	let cursor = normalized;
 	const missingSuffix = [];
-	while (!isFilesystemRoot(cursor) && !syncFs.existsSync(cursor)) {
+	while (!isFilesystemRoot(cursor) && !fs.existsSync(cursor)) {
 		missingSuffix.unshift(path.basename(cursor));
 		const parent = path.dirname(cursor);
 		if (parent === cursor) {
@@ -315,11 +315,11 @@ function resolvePathViaExistingAncestorSync(targetPath) {
 		}
 		cursor = parent;
 	}
-	if (!syncFs.existsSync(cursor)) {
+	if (!fs.existsSync(cursor)) {
 		return normalized;
 	}
 	try {
-		const resolvedAncestor = path.resolve(syncFs.realpathSync(cursor));
+		const resolvedAncestor = path.resolve(fs.realpathSync(cursor));
 		if (missingSuffix.length === 0) {
 			return resolvedAncestor;
 		}
@@ -330,7 +330,7 @@ function resolvePathViaExistingAncestorSync(targetPath) {
 }
 async function getPathKind(absolutePath, preserveFinalSymlink) {
 	try {
-		const stat = preserveFinalSymlink ? await fs.lstat(absolutePath) : await fs.stat(absolutePath);
+		const stat = preserveFinalSymlink ? await fs$1.lstat(absolutePath) : await fs$1.stat(absolutePath);
 		return {
 			exists: true,
 			kind: toResolvedKind(stat)
@@ -347,7 +347,7 @@ async function getPathKind(absolutePath, preserveFinalSymlink) {
 }
 function getPathKindSync(absolutePath, preserveFinalSymlink) {
 	try {
-		const stat = preserveFinalSymlink ? syncFs.lstatSync(absolutePath) : syncFs.statSync(absolutePath);
+		const stat = preserveFinalSymlink ? fs.lstatSync(absolutePath) : fs.statSync(absolutePath);
 		return {
 			exists: true,
 			kind: toResolvedKind(stat)
@@ -408,7 +408,7 @@ function isFilesystemRoot(candidate) {
 }
 async function pathExists(targetPath) {
 	try {
-		await fs.lstat(targetPath);
+		await fs$1.lstat(targetPath);
 		return true;
 	} catch (error) {
 		if (isNotFoundPathError(error)) {
@@ -419,24 +419,24 @@ async function pathExists(targetPath) {
 }
 async function resolveSymlinkHopPath(symlinkPath) {
 	try {
-		return path.resolve(await fs.realpath(symlinkPath));
+		return path.resolve(await fs$1.realpath(symlinkPath));
 	} catch (error) {
 		if (!isNotFoundPathError(error)) {
 			throw error;
 		}
-		const linkTarget = await fs.readlink(symlinkPath);
+		const linkTarget = await fs$1.readlink(symlinkPath);
 		const linkAbsolute = path.resolve(path.dirname(symlinkPath), linkTarget);
 		return resolvePathViaExistingAncestor(linkAbsolute);
 	}
 }
 function resolveSymlinkHopPathSync(symlinkPath) {
 	try {
-		return path.resolve(syncFs.realpathSync(symlinkPath));
+		return path.resolve(fs.realpathSync(symlinkPath));
 	} catch (error) {
 		if (!isNotFoundPathError(error)) {
 			throw error;
 		}
-		const linkTarget = syncFs.readlinkSync(symlinkPath);
+		const linkTarget = fs.readlinkSync(symlinkPath);
 		const linkAbsolute = path.resolve(path.dirname(symlinkPath), linkTarget);
 		return resolvePathViaExistingAncestorSync(linkAbsolute);
 	}

package/dist/infra/brew.js

@@ -1,11 +1,11 @@
-import syncFs from "node:fs";
+import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 
 //#region src/infra/brew.ts
 function isExecutable(filePath) {
 	try {
-		syncFs.accessSync(filePath, syncFs.constants.X_OK);
+		fs.accessSync(filePath, fs.constants.X_OK);
 		return true;
 	} catch {
 		return false;

package/dist/infra/control-ui-assets.js

@@ -2,7 +2,7 @@ import { defaultRuntime } from "../runtime.js";
 import { runCommandWithTimeout } from "../process/exec.js";
 import { resolveFasedAgentPackageRoot, resolveFasedAgentPackageRootSync } from "./fased-root.js";
 import { fileURLToPath } from "node:url";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 
 //#region src/infra/control-ui-assets.ts
@@ -21,7 +21,7 @@ async function resolveControlUiDistIndexHealth(opts = {}) {
 	});
 	return {
 		indexPath,
-		exists: Boolean(indexPath && syncFs.existsSync(indexPath))
+		exists: Boolean(indexPath && fs.existsSync(indexPath))
 	};
 }
 function resolveControlUiRepoRoot(argv1 = process.argv[1]) {
@@ -33,13 +33,13 @@ function resolveControlUiRepoRoot(argv1 = process.argv[1]) {
 	const srcIndex = parts.lastIndexOf("src");
 	if (srcIndex !== -1) {
 		const root = parts.slice(0, srcIndex).join(path.sep);
-		if (syncFs.existsSync(path.join(root, "ui", "vite.config.ts"))) {
+		if (fs.existsSync(path.join(root, "ui", "vite.config.ts"))) {
 			return root;
 		}
 	}
 	let dir = path.dirname(normalized);
 	for (let i = 0; i < 8; i++) {
-		if (syncFs.existsSync(path.join(dir, "package.json")) && syncFs.existsSync(path.join(dir, "ui", "vite.config.ts"))) {
+		if (fs.existsSync(path.join(dir, "package.json")) && fs.existsSync(path.join(dir, "ui", "vite.config.ts"))) {
 			return dir;
 		}
 		const parent = path.dirname(dir);
@@ -72,12 +72,12 @@ async function resolveControlUiDistIndexPath(argv1OrOpts) {
 	for (let i = 0; i < 8; i++) {
 		const pkgJsonPath = path.join(dir, "package.json");
 		const indexPath = path.join(dir, "dist", "control-ui", "index.html");
-		if (syncFs.existsSync(pkgJsonPath)) {
+		if (fs.existsSync(pkgJsonPath)) {
 			try {
-				const raw = syncFs.readFileSync(pkgJsonPath, "utf-8");
+				const raw = fs.readFileSync(pkgJsonPath, "utf-8");
 				const parsed = JSON.parse(raw);
 				if (parsed.name === "fased") {
-					return syncFs.existsSync(indexPath) ? indexPath : null;
+					return fs.existsSync(indexPath) ? indexPath : null;
 				}
 				return null;
 			} catch {
@@ -101,13 +101,13 @@ function addCandidate(candidates, value) {
 function resolveControlUiRootOverrideSync(rootOverride) {
 	const resolved = path.resolve(rootOverride);
 	try {
-		const stats = syncFs.statSync(resolved);
+		const stats = fs.statSync(resolved);
 		if (stats.isFile()) {
 			return path.basename(resolved) === "index.html" ? path.dirname(resolved) : null;
 		}
 		if (stats.isDirectory()) {
 			const indexPath = path.join(resolved, "index.html");
-			return syncFs.existsSync(indexPath) ? resolved : null;
+			return fs.existsSync(indexPath) ? resolved : null;
 		}
 	} catch {
 		return null;
@@ -123,7 +123,7 @@ function resolveControlUiRootSync(opts = {}) {
 	const execDir = (() => {
 		try {
 			const execPath = opts.execPath ?? process.execPath;
-			return path.dirname(syncFs.realpathSync(execPath));
+			return path.dirname(fs.realpathSync(execPath));
 		} catch {
 			return null;
 		}
@@ -149,7 +149,7 @@ function resolveControlUiRootSync(opts = {}) {
 	addCandidate(candidates, path.join(cwd, "dist", "control-ui"));
 	for (const dir of candidates) {
 		const indexPath = path.join(dir, "index.html");
-		if (syncFs.existsSync(indexPath)) {
+		if (fs.existsSync(indexPath)) {
 			return dir;
 		}
 	}
@@ -185,14 +185,14 @@ async function ensureControlUiAssetsBuilt(runtime = defaultRuntime, opts) {
 		};
 	}
 	const indexPath = resolveControlUiDistIndexPathForRoot(repoRoot);
-	if (syncFs.existsSync(indexPath)) {
+	if (fs.existsSync(indexPath)) {
 		return {
 			ok: true,
 			built: false
 		};
 	}
 	const uiScript = path.join(repoRoot, "scripts", "ui.js");
-	if (!syncFs.existsSync(uiScript)) {
+	if (!fs.existsSync(uiScript)) {
 		return {
 			ok: false,
 			built: false,
@@ -215,7 +215,7 @@ async function ensureControlUiAssetsBuilt(runtime = defaultRuntime, opts) {
 			message: `Control UI build failed: ${summarizeCommandOutput(build.stderr) ?? `exit ${build.code}`}`
 		};
 	}
-	if (!syncFs.existsSync(indexPath)) {
+	if (!fs.existsSync(indexPath)) {
 		return {
 			ok: false,
 			built: true,

package/dist/infra/device-auth-store.js

@@ -1,6 +1,6 @@
 import { resolveStateDir } from "../config/paths.js";
 import { normalizeDeviceAuthRole, normalizeDeviceAuthScopes } from "../shared/device-auth.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 
 //#region src/infra/device-auth-store.ts
@@ -10,10 +10,10 @@ function resolveDeviceAuthPath(env = process.env) {
 }
 function readStore(filePath) {
 	try {
-		if (!syncFs.existsSync(filePath)) {
+		if (!fs.existsSync(filePath)) {
 			return null;
 		}
-		const raw = syncFs.readFileSync(filePath, "utf8");
+		const raw = fs.readFileSync(filePath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (parsed?.version !== 1 || typeof parsed.deviceId !== "string") {
 			return null;
@@ -27,10 +27,10 @@ function readStore(filePath) {
 	}
 }
 function writeStore(filePath, store) {
-	syncFs.mkdirSync(path.dirname(filePath), { recursive: true });
-	syncFs.writeFileSync(filePath, `${JSON.stringify(store, null, 2)}\n`, { mode: 384 });
+	fs.mkdirSync(path.dirname(filePath), { recursive: true });
+	fs.writeFileSync(filePath, `${JSON.stringify(store, null, 2)}\n`, { mode: 384 });
 	try {
-		syncFs.chmodSync(filePath, 384);
+		fs.chmodSync(filePath, 384);
 	} catch {}
 }
 function loadDeviceAuthToken(params) {
@@ -88,11 +88,11 @@ function clearDeviceAuthToken(params) {
 }
 function clearDeviceAuthStore(env = process.env) {
 	const filePath = resolveDeviceAuthPath(env);
-	if (!syncFs.existsSync(filePath)) {
+	if (!fs.existsSync(filePath)) {
 		return false;
 	}
 	try {
-		syncFs.unlinkSync(filePath);
+		fs.unlinkSync(filePath);
 		return true;
 	} catch {
 		return false;

package/dist/infra/device-identity.js

@@ -1,5 +1,5 @@
 import { resolveStateDir } from "../config/paths.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 import crypto from "node:crypto";
 
@@ -8,7 +8,7 @@ function resolveDefaultIdentityPath() {
 	return path.join(resolveStateDir(), "identity", "device.json");
 }
 function ensureDir(filePath) {
-	syncFs.mkdirSync(path.dirname(filePath), { recursive: true });
+	fs.mkdirSync(path.dirname(filePath), { recursive: true });
 }
 const ED25519_SPKI_PREFIX = Buffer.from("302a300506032b6570032100", "hex");
 function base64UrlEncode(buf) {
@@ -56,8 +56,8 @@ function createEphemeralDeviceIdentity() {
 }
 function loadOrCreateDeviceIdentity(filePath = resolveDefaultIdentityPath()) {
 	try {
-		if (syncFs.existsSync(filePath)) {
-			const raw = syncFs.readFileSync(filePath, "utf8");
+		if (fs.existsSync(filePath)) {
+			const raw = fs.readFileSync(filePath, "utf8");
 			const parsed = JSON.parse(raw);
 			if (parsed?.version === 1 && typeof parsed.deviceId === "string" && typeof parsed.publicKeyPem === "string" && typeof parsed.privateKeyPem === "string") {
 				const derivedId = fingerprintPublicKey(parsed.publicKeyPem);
@@ -66,9 +66,9 @@ function loadOrCreateDeviceIdentity(filePath = resolveDefaultIdentityPath()) {
 						...parsed,
 						deviceId: derivedId
 					};
-					syncFs.writeFileSync(filePath, `${JSON.stringify(updated, null, 2)}\n`, { mode: 384 });
+					fs.writeFileSync(filePath, `${JSON.stringify(updated, null, 2)}\n`, { mode: 384 });
 					try {
-						syncFs.chmodSync(filePath, 384);
+						fs.chmodSync(filePath, 384);
 					} catch {}
 					return {
 						deviceId: derivedId,
@@ -93,9 +93,9 @@ function loadOrCreateDeviceIdentity(filePath = resolveDefaultIdentityPath()) {
 		privateKeyPem: identity.privateKeyPem,
 		createdAtMs: Date.now()
 	};
-	syncFs.writeFileSync(filePath, `${JSON.stringify(stored, null, 2)}\n`, { mode: 384 });
+	fs.writeFileSync(filePath, `${JSON.stringify(stored, null, 2)}\n`, { mode: 384 });
 	try {
-		syncFs.chmodSync(filePath, 384);
+		fs.chmodSync(filePath, 384);
 	} catch {}
 	return identity;
 }

package/dist/infra/dotenv.js

@@ -1,7 +1,7 @@
 import { resolveRequiredHomeDir } from "./home-dir.js";
 import { resolveConfigDir } from "../utils.js";
 import { isDangerousHostEnvOverrideVarName, isDangerousHostEnvVarName, normalizeEnvVarKey } from "./host-env-security.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import dotenv from "dotenv";
@@ -84,7 +84,7 @@ function shouldBlockWorkspaceDotEnvKey(key) {
 function readDotEnvFile(params) {
 	let content;
 	try {
-		content = syncFs.readFileSync(params.filePath, "utf8");
+		content = fs.readFileSync(params.filePath, "utf8");
 	} catch (error) {
 		if (!params.quiet) {
 			const code = error && typeof error === "object" && "code" in error ? String(error.code) : undefined;

package/dist/infra/exec-approvals.js

@@ -4,7 +4,7 @@ import { DEFAULT_SAFE_BINS, matchAllowlist, parseExecArgvToken, resolveAllowlist
 import { analyzeArgvCommand, analyzeShellCommand, buildEnforcedShellCommand, isWindowsPlatform, splitCommandChain, splitCommandChainWithOperators } from "./exec-approvals-analysis.js";
 import { evaluateExecAllowlist, evaluateShellAllowlist, isSafeBinUsage, normalizeSafeBins, resolveAllowAlwaysPatterns, resolveSafeBins } from "./exec-approvals-allowlist.js";
 import { requestJsonlSocket } from "./jsonl-socket.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 import crypto from "node:crypto";
 
@@ -61,7 +61,7 @@ function mergeLegacyAgent(current, legacy) {
 }
 function ensureDir(filePath) {
 	const dir = path.dirname(filePath);
-	syncFs.mkdirSync(dir, { recursive: true });
+	fs.mkdirSync(dir, { recursive: true });
 }
 function coerceAllowlistEntries(allowlist) {
 	if (!Array.isArray(allowlist) || allowlist.length === 0) {
@@ -162,7 +162,7 @@ function generateToken() {
 }
 function readExecApprovalsSnapshot() {
 	const filePath = resolveExecApprovalsPath();
-	if (!syncFs.existsSync(filePath)) {
+	if (!fs.existsSync(filePath)) {
 		const file = normalizeExecApprovals({
 			version: 1,
 			agents: {}
@@ -175,7 +175,7 @@ function readExecApprovalsSnapshot() {
 			hash: hashExecApprovalsRaw(null)
 		};
 	}
-	const raw = syncFs.readFileSync(filePath, "utf8");
+	const raw = fs.readFileSync(filePath, "utf8");
 	let parsed = null;
 	try {
 		parsed = JSON.parse(raw);
@@ -197,13 +197,13 @@ function readExecApprovalsSnapshot() {
 function loadExecApprovals() {
 	const filePath = resolveExecApprovalsPath();
 	try {
-		if (!syncFs.existsSync(filePath)) {
+		if (!fs.existsSync(filePath)) {
 			return normalizeExecApprovals({
 				version: 1,
 				agents: {}
 			});
 		}
-		const raw = syncFs.readFileSync(filePath, "utf8");
+		const raw = fs.readFileSync(filePath, "utf8");
 		const parsed = JSON.parse(raw);
 		if (parsed?.version !== 1) {
 			return normalizeExecApprovals({
@@ -222,9 +222,9 @@ function loadExecApprovals() {
 function saveExecApprovals(file) {
 	const filePath = resolveExecApprovalsPath();
 	ensureDir(filePath);
-	syncFs.writeFileSync(filePath, `${JSON.stringify(file, null, 2)}\n`, { mode: 384 });
+	fs.writeFileSync(filePath, `${JSON.stringify(file, null, 2)}\n`, { mode: 384 });
 	try {
-		syncFs.chmodSync(filePath, 384);
+		fs.chmodSync(filePath, 384);
 	} catch {}
 }
 function ensureExecApprovals() {

package/dist/infra/exec-command-resolution.js

@@ -1,6 +1,6 @@
 import { expandHomePrefix } from "./home-dir.js";
 import { resolveDispatchWrapperExecutionPlan } from "./exec-wrapper-resolution.js";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 
 //#region src/infra/exec-command-resolution.ts
@@ -15,12 +15,12 @@ const DEFAULT_SAFE_BINS = [
 ];
 function isExecutableFile(filePath) {
 	try {
-		const stat = syncFs.statSync(filePath);
+		const stat = fs.statSync(filePath);
 		if (!stat.isFile()) {
 			return false;
 		}
 		if (process.platform !== "win32") {
-			syncFs.accessSync(filePath, syncFs.constants.X_OK);
+			fs.accessSync(filePath, fs.constants.X_OK);
 		}
 		return true;
 	} catch {
@@ -111,7 +111,7 @@ function normalizeMatchTarget(value) {
 }
 function tryRealpath(value) {
 	try {
-		return syncFs.realpathSync(value);
+		return fs.realpathSync(value);
 	} catch {
 		return null;
 	}

package/dist/infra/exec-safe-bin-trust.js

@@ -1,4 +1,4 @@
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
 
 //#region src/infra/exec-safe-bin-trust.ts
@@ -61,7 +61,7 @@ function listWritableExplicitTrustedSafeBinDirs(entries) {
 	for (const dir of resolved) {
 		let stat;
 		try {
-			stat = syncFs.statSync(dir);
+			stat = fs.statSync(dir);
 		} catch {
 			continue;
 		}

package/dist/infra/fased-root.js

@@ -1,13 +1,13 @@
 import { fileURLToPath } from "node:url";
-import syncFs from "node:fs";
+import fs from "node:fs";
 import path from "node:path";
-import fs from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 
 //#region src/infra/fased-root.ts
 const CORE_PACKAGE_NAMES = new Set(["fased", "@fased/fased"]);
 async function readPackageName(dir) {
 	try {
-		const raw = await fs.readFile(path.join(dir, "package.json"), "utf-8");
+		const raw = await fs$1.readFile(path.join(dir, "package.json"), "utf-8");
 		const parsed = JSON.parse(raw);
 		return typeof parsed.name === "string" ? parsed.name : null;
 	} catch {
@@ -16,7 +16,7 @@ async function readPackageName(dir) {
 }
 function readPackageNameSync(dir) {
 	try {
-		const raw = syncFs.readFileSync(path.join(dir, "package.json"), "utf-8");
+		const raw = fs.readFileSync(path.join(dir, "package.json"), "utf-8");
 		const parsed = JSON.parse(raw);
 		return typeof parsed.name === "string" ? parsed.name : null;
 	} catch {
@@ -56,7 +56,7 @@ function candidateDirsFromArgv1(argv1) {
 	const normalized = path.resolve(argv1);
 	const candidates = [path.dirname(normalized)];
 	try {
-		const resolved = syncFs.realpathSync(normalized);
+		const resolved = fs.realpathSync(normalized);
 		if (resolved !== normalized) {
 			candidates.push(path.dirname(resolved));
 		}

package/dist/infra/fs-safe.js

@@ -3,7 +3,7 @@ import { sameFileIdentity } from "./file-identity.js";
 import { assertNoPathAliasEscape } from "./path-alias-guards.js";
 import { constants } from "node:fs";
 import path from "node:path";
-import fs from "node:fs/promises";
+import fs$1 from "node:fs/promises";
 
 //#region src/infra/fs-safe.ts
 var SafeOpenError = class extends Error {
@@ -25,7 +25,7 @@ async function openVerifiedLocalFile(filePath, options) {
 	let handle;
 	try {
 		const openFlags = options?.allowSymlinkTargetWithinRoot ? options.nonBlockingRead ? OPEN_READ_FOLLOW_NONBLOCK_FLAGS : OPEN_READ_FOLLOW_FLAGS : options?.nonBlockingRead ? OPEN_READ_NONBLOCK_FLAGS : OPEN_READ_FLAGS;
-		handle = await fs.open(filePath, openFlags);
+		handle = await fs$1.open(filePath, openFlags);
 	} catch (err) {
 		if (isNotFoundPathError(err)) {
 			throw new SafeOpenError("not-found", "file not found");
@@ -36,7 +36,7 @@ async function openVerifiedLocalFile(filePath, options) {
 		throw err;
 	}
 	try {
-		const [stat, pathStat] = await Promise.all([handle.stat(), options?.allowSymlinkTargetWithinRoot ? fs.stat(filePath) : fs.lstat(filePath)]);
+		const [stat, pathStat] = await Promise.all([handle.stat(), options?.allowSymlinkTargetWithinRoot ? fs$1.stat(filePath) : fs$1.lstat(filePath)]);
 		if (!options?.allowSymlinkTargetWithinRoot && pathStat.isSymbolicLink()) {
 			throw new SafeOpenError("symlink", "symlink not allowed");
 		}
@@ -49,8 +49,8 @@ async function openVerifiedLocalFile(filePath, options) {
 		if (!sameFileIdentity(stat, pathStat)) {
 			throw new SafeOpenError("path-mismatch", "path changed during read");
 		}
-		const realPath = await fs.realpath(filePath);
-		const realStat = await fs.stat(realPath);
+		const realPath = await fs$1.realpath(filePath);
+		const realStat = await fs$1.stat(realPath);
 		if (options?.rejectHardlinks && realStat.nlink > 1) {
 			throw new SafeOpenError("invalid-path", "hardlinked path not allowed");
 		}
@@ -76,7 +76,7 @@ async function openVerifiedLocalFile(filePath, options) {
 async function openFileWithinRoot(params) {
 	let rootReal;
 	try {
-		rootReal = await fs.realpath(params.rootDir);
+		rootReal = await fs$1.realpath(params.rootDir);
 	} catch (err) {
 		if (isNotFoundPathError(err)) {
 			throw new SafeOpenError("not-found", "root dir not found");
@@ -154,7 +154,7 @@ async function readFileWithinRoot(params) {
 async function writeFileWithinRoot(params) {
 	let rootReal;
 	try {
-		rootReal = await fs.realpath(params.rootDir);
+		rootReal = await fs$1.realpath(params.rootDir);
 	} catch (err) {
 		if (isNotFoundPathError(err)) {
 			throw new SafeOpenError("not-found", "root dir not found");
@@ -176,7 +176,7 @@ async function writeFileWithinRoot(params) {
 		throw new SafeOpenError("invalid-path", "path alias escape blocked", { cause: err });
 	}
 	if (params.mkdir !== false) {
-		await fs.mkdir(path.dirname(resolved), { recursive: true });
+		await fs$1.mkdir(path.dirname(resolved), { recursive: true });
 	}
 	try {
 		await assertNoPathAliasEscape({
@@ -188,7 +188,7 @@ async function writeFileWithinRoot(params) {
 		throw new SafeOpenError("invalid-path", "path alias escape blocked", { cause: err });
 	}
 	try {
-		const pathStat = await fs.lstat(resolved);
+		const pathStat = await fs$1.lstat(resolved);
 		if (pathStat.isSymbolicLink()) {
 			throw new SafeOpenError("invalid-path", "symlink open blocked");
 		}
@@ -202,7 +202,7 @@ async function writeFileWithinRoot(params) {
 	}
 	let ioPath = resolved;
 	try {
-		const resolvedRealPath = await fs.realpath(resolved);
+		const resolvedRealPath = await fs$1.realpath(resolved);
 		if (!isPathInside(rootWithSep, resolvedRealPath)) {
 			throw new SafeOpenError("invalid-path", "path escapes root");
 		}
@@ -217,7 +217,7 @@ async function writeFileWithinRoot(params) {
 	}
 	let handle;
 	try {
-		handle = await fs.open(ioPath, OPEN_WRITE_FLAGS, 384);
+		handle = await fs$1.open(ioPath, OPEN_WRITE_FLAGS, 384);
 	} catch (err) {
 		if (isNotFoundPathError(err)) {
 			throw new SafeOpenError("not-found", "file not found");
@@ -228,7 +228,7 @@ async function writeFileWithinRoot(params) {
 		throw err;
 	}
 	try {
-		const [stat, lstat] = await Promise.all([handle.stat(), fs.lstat(ioPath)]);
+		const [stat, lstat] = await Promise.all([handle.stat(), fs$1.lstat(ioPath)]);
 		if (lstat.isSymbolicLink() || !stat.isFile()) {
 			throw new SafeOpenError("invalid-path", "path is not a regular file under root");
 		}
@@ -238,8 +238,8 @@ async function writeFileWithinRoot(params) {
 		if (!sameFileIdentity(stat, lstat)) {
 			throw new SafeOpenError("path-mismatch", "path changed during write");
 		}
-		const realPath = await fs.realpath(ioPath);
-		const realStat = await fs.stat(realPath);
+		const realPath = await fs$1.realpath(ioPath);
+		const realStat = await fs$1.stat(realPath);
 		if (!sameFileIdentity(stat, realStat)) {
 			throw new SafeOpenError("path-mismatch", "path mismatch");
 		}