@fased/fased 0.1.54 → 0.1.55

package/dist/agents/authenticated-model-catalog.js

@@ -0,0 +1,27 @@
+import { buildCredentialScopedAllowedModelSet } from "./model-catalog-access.js";
+import { applyRuntimeProviderModelDiscovery, filterCatalogToAuthoritativeAvailability } from "../providers/runtime-model-catalog.js";
+
+//#region src/agents/authenticated-model-catalog.ts
+async function resolveAuthenticatedModelCatalog(params) {
+	const initialScope = buildCredentialScopedAllowedModelSet({
+		cfg: params.cfg,
+		catalog: params.catalog,
+		defaultProvider: params.defaultProvider,
+		store: params.store
+	});
+	const discoveredCatalog = filterCatalogToAuthoritativeAvailability(await applyRuntimeProviderModelDiscovery({
+		cfg: params.cfg,
+		store: params.store,
+		routes: initialScope.usableProviders,
+		catalog: initialScope.usableCatalog
+	}), params.store);
+	return buildCredentialScopedAllowedModelSet({
+		cfg: params.cfg,
+		catalog: discoveredCatalog,
+		defaultProvider: params.defaultProvider,
+		storedProviders: initialScope.usableProviders
+	});
+}
+
+//#endregion
+export { resolveAuthenticatedModelCatalog };

package/dist/agents/current-model-catalog.js

@@ -1,6 +1,5 @@
 import { CLOUDFLARE_AI_GATEWAY_MODEL_CATALOG, buildCloudflareAiGatewayModelDefinition } from "../providers/cloudflare-ai-gateway-shared.js";
 import { HUGGINGFACE_BASE_URL, HUGGINGFACE_MODEL_CATALOG, buildHuggingfaceModelDefinition } from "../providers/huggingface-models.js";
-import { LITELLM_BASE_URL, LITELLM_MODEL_CATALOG, buildLitellmModelDefinition } from "../providers/litellm-models.js";
 import { SYNTHETIC_BASE_URL, SYNTHETIC_MODEL_CATALOG, buildSyntheticModelDefinition } from "../providers/synthetic-models.js";
 import { TOGETHER_BASE_URL, TOGETHER_MODEL_CATALOG, buildTogetherModelDefinition } from "../providers/together-models.js";
 import { VENICE_BASE_URL, VENICE_MODEL_CATALOG, buildVeniceModelDefinition } from "../providers/venice-models.js";
@@ -876,22 +875,16 @@ const CURRENT_MODEL_PROVIDER_CATALOG = {
 		models: CLOUDFLARE_AI_GATEWAY_MODEL_CATALOG.map((entry) => buildCloudflareAiGatewayModelDefinition({ id: entry.id }))
 	},
 	litellm: {
-		baseUrl: LITELLM_BASE_URL,
+		baseUrl: "http://localhost:4000/v1",
 		api: "openai-completions",
 		request: { allowPrivateNetwork: true },
-		models: LITELLM_MODEL_CATALOG.map(buildLitellmModelDefinition)
+		models: []
 	},
 	vllm: {
 		baseUrl: "http://127.0.0.1:8000/v1",
 		api: "openai-completions",
 		request: { allowPrivateNetwork: true },
-		models: [model({
-			id: "local",
-			name: "Local model",
-			input: ["text", "image"],
-			contextWindow: 128e3,
-			maxTokens: 8192
-		})]
+		models: []
 	},
 	"github-copilot": {
 		baseUrl: "https://api.individual.githubcopilot.com",

package/dist/agents/model-catalog-normalized.js

@@ -3,6 +3,7 @@ import { normalizeProviderId } from "./provider-id.js";
 //#region src/agents/model-catalog-normalized.ts
 const SOURCE_AUTHORITY = {
 	configured: 500,
+	"provider-api": 450,
 	runtime: 400,
 	manifest: 300,
 	"provider-index": 200,

package/dist/agents/model-metadata.js

@@ -1,9 +1,20 @@
 import { resolveModelThinkingCapability } from "../shared/model-thinking.js";
-import { getProviderBrandManifestForRoute, lookupProviderManifestModelCapability } from "../providers/registry.js";
+import { getProviderBrandManifestForRoute, lookupProviderManifestModelCapability, providerModelRecommendationRank } from "../providers/registry.js";
 import { isPrivateNetworkBaseUrl } from "../utils/private-network-url.js";
 import { lookupRefreshedModelCapability } from "../providers/refreshed-model-capabilities.js";
 
 //#region src/agents/model-metadata.ts
+function availabilitySourceForCatalogSource(source) {
+	switch (source) {
+		case "provider-api": return "provider-api";
+		case "runtime": return "runtime-catalog";
+		case "configured": return "configured";
+		case "provider-index": return "provider-plugin";
+		case "manifest": return "curated-recommendation";
+		case "current-preview":
+		default: return "reviewed-catalog";
+	}
+}
 const FEATURE_LABELS = {
 	text: "text",
 	vision: "vision",
@@ -32,8 +43,10 @@ const JSON_CAPABLE_APIS = new Set([
 const LOCAL_DYNAMIC_PROVIDERS = new Set([
 	"ollama",
 	"lmstudio",
-	"vllm"
+	"vllm",
+	"litellm"
 ]);
+const CURATED_CATALOG_REVIEWED_AT = "2026-07-12T00:00:00.000Z";
 function resolveProviderConfig(cfg, provider) {
 	return cfg?.models?.providers?.[provider];
 }
@@ -70,8 +83,9 @@ function deriveModelMetadata(params) {
 		...manifestCapabilities,
 		...params.model.capabilities
 	} : undefined;
-	const capabilityConfidence = capabilities || refreshed || manifestCapabilities ? "declared" : "unknown";
-	const shouldInferApiCapabilities = !(LOCAL_DYNAMIC_PROVIDERS.has(provider) && capabilityConfidence === "unknown");
+	const capabilitySource = params.capabilitySource ?? (params.model.capabilities ? params.model.catalogSource === "configured" ? "configured" : "runtime" : refreshed ? refreshed.source === "catalog" || refreshed.source === "provider-api" ? "provider-api" : "official-docs" : manifestCapabilities ? "official-docs" : api && !LOCAL_DYNAMIC_PROVIDERS.has(provider) ? "inferred" : "unknown");
+	const capabilityConfidence = capabilitySource === "provider-api" || capabilitySource === "official-docs" ? "verified" : capabilitySource === "runtime" || capabilitySource === "configured" ? "declared" : capabilitySource === "inferred" ? "inferred" : "unknown";
+	const shouldInferApiCapabilities = !LOCAL_DYNAMIC_PROVIDERS.has(provider);
 	const reasoning = params.model.reasoning ?? refreshed?.reasoning;
 	const thinking = resolveModelThinkingCapability({
 		provider,
@@ -95,6 +109,7 @@ function deriveModelMetadata(params) {
 		label: params.model.name?.trim() || modelId,
 		contextWindow: typeof refreshed?.contextWindow === "number" && refreshed.contextWindow > 0 ? refreshed.contextWindow : typeof params.model.contextWindow === "number" && params.model.contextWindow > 0 ? params.model.contextWindow : undefined,
 		maxTokens: typeof refreshed?.maxTokens === "number" && refreshed.maxTokens > 0 ? refreshed.maxTokens : typeof params.model.maxTokens === "number" && params.model.maxTokens > 0 ? params.model.maxTokens : undefined,
+		...typeof api === "string" && api.trim() ? { apiRoute: api.trim() } : {},
 		features,
 		...thinking ? {
 			thinkingLevels: thinking.thinkingLevels,
@@ -104,6 +119,11 @@ function deriveModelMetadata(params) {
 		} : {},
 		streaming: capabilities?.streaming !== false,
 		capabilityConfidence,
+		capabilitySource,
+		...params.capabilityRetrievedAt ?? refreshed?.refreshedAt ?? (capabilitySource === "official-docs" ? CURATED_CATALOG_REVIEWED_AT : undefined) ? { capabilityRetrievedAt: params.capabilityRetrievedAt ?? refreshed?.refreshedAt ?? CURATED_CATALOG_REVIEWED_AT } : {},
+		retrievedAt: refreshed?.refreshedAt ?? CURATED_CATALOG_REVIEWED_AT,
+		availabilitySource: availabilitySourceForCatalogSource(params.model.catalogSource),
+		authRoute: provider,
 		authMode: resolveAuthMode({
 			provider,
 			providerConfig
@@ -111,6 +131,7 @@ function deriveModelMetadata(params) {
 		privateNetwork,
 		privateNetworkAllowed: privateNetwork ? providerConfig?.request?.allowPrivateNetwork === true : false,
 		...params.recommended ? { recommended: true } : {},
+		...providerModelRecommendationRank(provider, modelId) ? { recommendationRank: providerModelRecommendationRank(provider, modelId) } : {},
 		...params.default ? { default: true } : {}
 	};
 }

package/dist/agents/pi-embedded-runner/extra-params.js

@@ -348,6 +348,30 @@ function createOpenAIResponsesContextManagementWrapper(baseStreamFn, extraParams
 		});
 	};
 }
+function createOpenAIReasoningEffortWrapper(baseStreamFn, reasoningEffort) {
+	const underlying = baseStreamFn ?? streamSimple;
+	return (model, context, options) => {
+		const supportsReasoningEffort = model.api === "openai-codex-responses" || model.api === "openai-responses" && model.provider === "openai" && (model.baseUrl === undefined || isDirectOpenAIBaseUrl(model.baseUrl));
+		if (!reasoningEffort || !supportsReasoningEffort) {
+			return underlying(model, context, options);
+		}
+		const originalOnPayload = options?.onPayload;
+		return underlying(model, context, {
+			...options,
+			onPayload: (payload) => {
+				if (payload && typeof payload === "object") {
+					const payloadObj = payload;
+					const reasoning = payloadObj.reasoning;
+					payloadObj.reasoning = {
+						...reasoning && typeof reasoning === "object" ? reasoning : {},
+						effort: reasoningEffort === "off" ? "none" : reasoningEffort
+					};
+				}
+				originalOnPayload?.(payload);
+			}
+		});
+	};
+}
 function createCodexDefaultTransportWrapper(baseStreamFn) {
 	const underlying = baseStreamFn ?? streamSimple;
 	return (model, context, options) => underlying(model, context, {
@@ -814,6 +838,7 @@ function applyExtraParamsToAgent(agent, cfg, provider, modelId, extraParamsOverr
 	}
 	agent.streamFn = createGoogleThinkingPayloadWrapper(agent.streamFn, thinkingLevel);
 	agent.streamFn = createOpenAIResponsesContextManagementWrapper(agent.streamFn, merged);
+	agent.streamFn = createOpenAIReasoningEffortWrapper(agent.streamFn, thinkingLevel);
 }
 
 //#endregion

package/dist/agents/pi-embedded-runner/utils.js

@@ -3,7 +3,7 @@ function mapThinkingLevel(level) {
 	if (!level) {
 		return "off";
 	}
-	return level;
+	return level === "max" ? "xhigh" : level;
 }
 function describeUnknownError(error) {
 	if (error instanceof Error) {

package/dist/brand.js

@@ -2,7 +2,7 @@
 const FASED_BRAND_NAME = "Fased";
 const FASED_AGENT_NAME = "Fased Agent";
 const FASED_CONTROL_NAME = "Fased Control";
-const FASED_PRODUCT_VERSION = "0.1.54";
+const FASED_PRODUCT_VERSION = "0.1.55";
 const FASED_DISPLAY_VERSION = `v${FASED_PRODUCT_VERSION}`;
 function formatFasedDisplayLine() {
 	return `${FASED_AGENT_NAME} ${FASED_DISPLAY_VERSION}`;

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.1.54",
-  "commit": "0e4f7276a6ff611b7a7c084cbdbac6246a020621",
-  "builtAt": "2026-07-12T17:54:54.055Z"
+  "version": "0.1.55",
+  "commit": "c850bc2e9c5030a16672d753fdf92c14cfe8832e",
+  "builtAt": "2026-07-12T22:55:14.749Z"
 }

package/dist/canvas-host/a2ui/.bundle.hash

@@ -1 +1 @@
-f0c7aea72356480469af9d337d9985c17460e758b57c1538c6f2e6cd058015ac
+c4a6e3e507ccfdd8b130a370232c38876b21dcd70184d986652833ecac14bd0a

package/dist/cli/providers-cli.js

@@ -5,8 +5,8 @@ import { loadAuthProfileStoreForRuntime } from "../agents/auth-profiles/store.js
 import { loadConfig, writeConfigFile } from "../config/io.js";
 import "../config/config.js";
 import "../agents/auth-profiles.js";
-import { createClackPrompter } from "../wizard/clack-prompter.js";
 import { applyProviderRefreshToRegistrySource, buildProviderCapabilityOverridesSource, buildProviderRefreshEnvFromCredentials, buildProviderRefreshReport, buildProviderRegistryReviewPatch, fetchOfficialProviderRefreshSnapshot, loadProviderRefreshSnapshotFromFile } from "../providers/refresh.js";
+import { createClackPrompter } from "../wizard/clack-prompter.js";
 import path from "node:path";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 
@@ -284,7 +284,8 @@ async function applyRegistryRefresh(report) {
 	} catch {
 		existingCapabilities = "";
 	}
-	const capabilitiesChanged = capabilitiesSource !== existingCapabilities;
+	const normalizeCapabilityTimestamps = (source) => source.replace(/refreshedAt: "[^"]+",/g, "refreshedAt: \"<reviewed-at>\",");
+	const capabilitiesChanged = normalizeCapabilityTimestamps(capabilitiesSource) !== normalizeCapabilityTimestamps(existingCapabilities);
 	if (capabilitiesChanged) {
 		await writeFile(CAPABILITIES_PATH, capabilitiesSource, "utf8");
 	}

package/dist/commands/auth-choice.apply.api-providers.js

@@ -1,5 +1,4 @@
 import { CLOUDFLARE_AI_GATEWAY_DEFAULT_MODEL_REF } from "../providers/cloudflare-ai-gateway-shared.js";
-import { LITELLM_DEFAULT_MODEL_REF } from "../providers/litellm-models.js";
 import { SYNTHETIC_DEFAULT_MODEL_REF } from "../providers/synthetic-models.js";
 import { TOGETHER_DEFAULT_MODEL_REF } from "../providers/together-models.js";
 import { VENICE_DEFAULT_MODEL_REF } from "../providers/venice-models.js";
@@ -14,7 +13,7 @@ import { createAuthChoiceAgentModelNoter, createAuthChoiceDefaultModelApplier, c
 import { KIMI_CODING_MODEL_REF, MISTRAL_DEFAULT_MODEL_REF, MOONSHOT_DEFAULT_MODEL_REF, QIANFAN_DEFAULT_MODEL_REF } from "./onboard-auth.models.js";
 import { XIAOMI_DEFAULT_MODEL_REF, ZAI_DEFAULT_MODEL_REF, setChutesApiKey, setCloudflareAiGatewayConfig, setGeminiApiKey, setKimiCodingApiKey, setLitellmApiKey, setMistralApiKey, setMoonshotApiKey, setOpencodeZenApiKey, setQianfanApiKey, setQwenApiKey, setQwenCodingPlanApiKey, setSyntheticApiKey, setTogetherApiKey, setVeniceApiKey, setVercelAiGatewayApiKey, setXiaomiApiKey, setZaiApiKey } from "./onboard-auth.credentials.js";
 import { applyCloudflareAiGatewayConfig, applyCloudflareAiGatewayProviderConfig, applyVercelAiGatewayConfig, applyVercelAiGatewayProviderConfig } from "./onboard-auth.config-gateways.js";
-import { applyLitellmConfig, applyLitellmProviderConfig } from "./onboard-auth.config-litellm.js";
+import { applyLitellmProviderConfig } from "./onboard-auth.config-litellm.js";
 import { applyAuthProfileConfig, applyChutesConfig, applyChutesProviderConfig, applyKimiCodeConfig, applyKimiCodeProviderConfig, applyMistralConfig, applyMistralProviderConfig, applyMoonshotConfig, applyMoonshotConfigCn, applyMoonshotProviderConfig, applyMoonshotProviderConfigCn, applyQianfanConfig, applyQianfanProviderConfig, applyQwenCodingPlanConfig, applyQwenCodingPlanProviderConfig, applyQwenConfig, applyQwenProviderConfig, applySyntheticConfig, applySyntheticProviderConfig, applyTogetherConfig, applyTogetherProviderConfig, applyVeniceConfig, applyVeniceProviderConfig, applyXiaomiConfig, applyXiaomiProviderConfig, applyZaiConfig, applyZaiProviderConfig } from "./onboard-auth.config-core.js";
 import { applyOpencodeZenConfig, applyOpencodeZenProviderConfig } from "./onboard-auth.config-opencode.js";
 import "./onboard-auth.js";
@@ -342,12 +341,8 @@ async function applyAuthChoiceApiProviders(params) {
 				mode: "api_key"
 			});
 		}
-		await applyProviderDefaultModel({
-			defaultModel: LITELLM_DEFAULT_MODEL_REF,
-			applyDefaultConfig: applyLitellmConfig,
-			applyProviderConfig: applyLitellmProviderConfig,
-			noteDefault: LITELLM_DEFAULT_MODEL_REF
-		});
+		nextConfig = applyLitellmProviderConfig(nextConfig);
+		await params.prompter.note("LiteLLM is connected. Choose a model returned by this proxy after discovery completes.", "LiteLLM model discovery");
 		return {
 			config: nextConfig,
 			agentModelOverride

package/dist/commands/auth-choice.apply.openai.js

@@ -6,7 +6,7 @@ import { isRemoteEnvironment } from "./oauth-env.js";
 import { setOpenaiApiKey, writeOAuthCredentials } from "./onboard-auth.credentials.js";
 import { applyAuthProfileConfig } from "./onboard-auth.config-core.js";
 import "./onboard-auth.js";
-import { OPENAI_CODEX_DEFAULT_MODEL, applyOpenAICodexModelDefault } from "./openai-codex-model-default.js";
+import { applyOpenAICodexModelDefault, discoverOpenAICodexDefaultModel } from "./openai-codex-model-default.js";
 import { loginOpenAICodexOAuth } from "./openai-codex-oauth.js";
 import { OPENAI_DEFAULT_MODEL, applyOpenAIConfig, applyOpenAIProviderConfig } from "./openai-model-default.js";
 
@@ -88,15 +88,21 @@ async function applyAuthChoiceOpenAI(params) {
 				provider: "openai-codex",
 				mode: "oauth"
 			});
-			if (params.setDefaultModel) {
-				const applied = applyOpenAICodexModelDefault(nextConfig);
+			const discoveredModel = await discoverOpenAICodexDefaultModel({
+				config: nextConfig,
+				agentDir: params.agentDir
+			});
+			if (params.setDefaultModel && discoveredModel) {
+				const applied = applyOpenAICodexModelDefault(nextConfig, discoveredModel);
 				nextConfig = applied.next;
 				if (applied.changed) {
-					await params.prompter.note(`Default model set to ${OPENAI_CODEX_DEFAULT_MODEL}`, "Model configured");
+					await params.prompter.note(`Default model set to ${discoveredModel}`, "Model configured");
 				}
-			} else {
-				agentModelOverride = OPENAI_CODEX_DEFAULT_MODEL;
-				await noteAgentModel(OPENAI_CODEX_DEFAULT_MODEL);
+			} else if (!params.setDefaultModel && discoveredModel) {
+				agentModelOverride = discoveredModel;
+				await noteAgentModel(discoveredModel);
+			} else if (!discoveredModel) {
+				await params.prompter.note("Sign-in completed, but the authenticated runtime did not return an executable model. Refresh Agent > Models or run `fased models list --all --provider openai-codex`.", "No sign-in model available");
 			}
 		}
 		return {

package/dist/commands/auth-choice.model-check.js

@@ -4,7 +4,6 @@ import "../agents/auth-profiles.js";
 import { getCustomProviderApiKey, resolveEnvApiKey } from "../agents/model-auth.js";
 import { resolveDefaultModelForAgent } from "../agents/model-selection.js";
 import { loadModelCatalog } from "../agents/model-catalog.js";
-import { OPENAI_CODEX_DEFAULT_MODEL } from "./openai-codex-model-default.js";
 
 //#region src/commands/auth-choice.model-check.ts
 async function warnIfModelConfigLooksOff(config, prompter, options) {
@@ -33,7 +32,7 @@ async function warnIfModelConfigLooksOff(config, prompter, options) {
 	if (ref.provider === "openai") {
 		const hasCodex = listProfilesForProvider(store, "openai-codex").length > 0;
 		if (hasCodex) {
-			warnings.push(`Detected OpenAI sign-in. Consider setting agents.defaults.model to ${OPENAI_CODEX_DEFAULT_MODEL}.`);
+			warnings.push("Detected OpenAI sign-in. Choose a model returned by `fased models list --all --provider openai-codex`.");
 		}
 	}
 	if (warnings.length > 0) {

package/dist/commands/configure.gateway-auth.js

@@ -1,8 +1,9 @@
+import { resolveFasedAgentAgentDir } from "../agents/agent-paths.js";
 import { ensureAuthProfileStore } from "../agents/auth-profiles/store.js";
 import "../agents/auth-profiles.js";
 import { randomToken } from "./onboard-helpers.js";
 import { promptAuthChoiceGrouped } from "./auth-choice-prompt.js";
-import { applyModelAllowlist, applyModelFallbacksFromSelection, promptModelAllowlist } from "./model-picker.js";
+import { applyModelAllowlist, applyModelFallbacksFromSelection, applyPrimaryModel, promptModelAllowlist } from "./model-picker.js";
 import { applyAuthChoice } from "./auth-choice.apply.js";
 import { resolvePreferredProviderForAuthChoice } from "./auth-choice.preferred-provider.js";
 import "./auth-choice.js";
@@ -20,12 +21,6 @@ function sanitizeTokenValue(value) {
 	}
 	return trimmed;
 }
-const ANTHROPIC_OAUTH_MODEL_KEYS = [
-	"anthropic/claude-fable-5",
-	"anthropic/claude-opus-4-8",
-	"anthropic/claude-sonnet-5",
-	"anthropic/claude-haiku-4-5"
-];
 function buildGatewayAuthConfig(params) {
 	const allowTailscale = params.existing?.allowTailscale;
 	const base = {};
@@ -61,9 +56,10 @@ function buildGatewayAuthConfig(params) {
 	return base;
 }
 async function promptAuthConfig(cfg, runtime, prompter) {
+	const agentDir = resolveFasedAgentAgentDir();
 	const authChoice = await promptAuthChoiceGrouped({
 		prompter,
-		store: ensureAuthProfileStore(undefined, { allowKeychainPrompt: false }),
+		store: ensureAuthProfileStore(agentDir, { allowKeychainPrompt: false }),
 		includeSkip: true
 	});
 	let next = cfg;
@@ -82,24 +78,26 @@ async function promptAuthConfig(cfg, runtime, prompter) {
 			config: next,
 			prompter,
 			runtime,
-			setDefaultModel: true
+			setDefaultModel: false,
+			agentDir
 		});
 		next = applied.config;
 	}
-	const anthropicOAuth = authChoice === "anthropic-oauth" || authChoice === "setup-token" || authChoice === "token" || authChoice === "oauth";
 	const preferredProvider = authChoice !== "custom-api-key" ? resolvePreferredProviderForAuthChoice(authChoice, { config: next }) : undefined;
 	if (authChoice !== "custom-api-key" && authChoice !== "skip") {
 		const allowlistSelection = await promptModelAllowlist({
 			config: next,
 			prompter,
-			allowedKeys: anthropicOAuth ? ANTHROPIC_OAUTH_MODEL_KEYS : undefined,
-			initialSelections: anthropicOAuth ? ["anthropic/claude-sonnet-5"] : undefined,
-			message: anthropicOAuth ? "Anthropic OAuth models" : undefined,
-			preferredProvider
+			preferredProvider,
+			agentDir
 		});
 		if (allowlistSelection.models) {
-			next = applyModelAllowlist(next, allowlistSelection.models);
-			next = applyModelFallbacksFromSelection(next, allowlistSelection.models);
+			const selectedModels = allowlistSelection.models;
+			if (selectedModels[0]) {
+				next = applyPrimaryModel(next, selectedModels[0]);
+			}
+			next = applyModelAllowlist(next, selectedModels);
+			next = applyModelFallbacksFromSelection(next, selectedModels);
 		}
 	}
 	return next;

package/dist/commands/model-picker.js

@@ -1,11 +1,11 @@
 import { resolveAgentModelPrimaryValue } from "../config/model-input.js";
 import { CLOUDFLARE_AI_GATEWAY_MODEL_REFS } from "../providers/cloudflare-ai-gateway-shared.js";
 import { HUGGINGFACE_MODEL_REFS } from "../providers/huggingface-models.js";
-import { LITELLM_MODEL_REFS } from "../providers/litellm-models.js";
 import { OPENCODE_ZEN_MODEL_REFS } from "../providers/opencode-zen-shared.js";
 import { TOGETHER_MODEL_REFS } from "../providers/together-models.js";
 import { VENICE_MODEL_REFS } from "../providers/venice-models.js";
 import { VERCEL_AI_GATEWAY_MODEL_REFS } from "../providers/vercel-ai-gateway-models.js";
+import { LITELLM_MODEL_REFS } from "../providers/litellm-models.js";
 import { BYTEPLUS_CODING_MODEL_REFS, BYTEPLUS_MODEL_REFS, COPILOT_PROXY_MODEL_REFS, GITHUB_COPILOT_MODEL_REFS, GOOGLE_API_MODEL_REFS, GOOGLE_GEMINI_CLI_MODEL_REFS, MISTRAL_MODEL_REFS, OPENAI_API_MODEL_REFS, OPENAI_SIGN_IN_MODEL_REFS, OPENROUTER_MODEL_REFS, QIANFAN_MODEL_REFS, SYNTHETIC_MODEL_REFS, VOLCENGINE_CODING_MODEL_REFS, VOLCENGINE_MODEL_REFS, XAI_MODEL_REFS, XIAOMI_MODEL_REFS, ZAI_MODEL_REFS, isStandardProviderCatalogEntry, isStandardProviderModelRef } from "../providers/registry.js";
 import { DEFAULT_MODEL, DEFAULT_PROVIDER } from "../agents/defaults.js";
 import { ensureAuthProfileStore } from "../agents/auth-profiles/store.js";
@@ -16,6 +16,7 @@ import { buildAllowedModelSet, buildModelAliasIndex, modelKey, normalizeProvider
 import { buildCredentialScopedAllowedModelSet } from "../agents/model-catalog-access.js";
 import { formatModelFeatureList } from "../agents/model-metadata.js";
 import { loadModelCatalog } from "../agents/model-catalog.js";
+import { resolveAuthenticatedModelCatalog } from "../agents/authenticated-model-catalog.js";
 import { loadPreviewModelListSources } from "./models/list.preview-catalog.js";
 import { formatTokenK } from "./models/shared.js";
 import { OPENAI_CODEX_DEFAULT_MODEL } from "./openai-codex-model-default.js";
@@ -205,14 +206,31 @@ function loadModelPickerPreviewCatalog(cfg) {
 		catalogSource: "current-preview"
 	}));
 }
-async function loadModelPickerCatalog(cfg) {
+async function loadModelPickerCatalog(cfg, agentDir) {
 	const catalog = await loadModelCatalog({
 		config: cfg,
 		useCache: false,
 		includeMetadata: true
 	});
 	const models = catalog.length > 0 ? catalog : loadModelPickerPreviewCatalog(cfg);
-	return models.filter(isStandardProviderCatalogEntry);
+	const standardModels = models.filter(isStandardProviderCatalogEntry);
+	if (!agentDir) {
+		return standardModels;
+	}
+	const store = ensureAuthProfileStore(agentDir, { allowKeychainPrompt: false });
+	const authenticated = await resolveAuthenticatedModelCatalog({
+		cfg,
+		store,
+		catalog: standardModels,
+		defaultProvider: DEFAULT_PROVIDER
+	});
+	return authenticated.allowedCatalog.length > 0 ? authenticated.allowedCatalog : authenticated.usableCatalog;
+}
+async function resolveAuthenticatedDefaultModel(params) {
+	const catalog = await loadModelPickerCatalog(params.config, params.agentDir);
+	const preferredProvider = normalizeProviderId(params.preferredProvider ?? "");
+	const candidate = (preferredProvider ? catalog.find((entry) => normalizeProviderId(entry.provider) === preferredProvider) : undefined) ?? catalog[0];
+	return candidate ? modelKey(candidate.provider, candidate.id) : undefined;
 }
 async function promptManualModel(params) {
 	const modelInput = await params.prompter.text({
@@ -244,7 +262,7 @@ async function promptDefaultModel(params) {
 	const resolvedKey = modelKey(resolved.provider, resolved.model);
 	const configuredKey = configuredRaw ? resolvedKey : "";
 	const allowKeep = allowKeepRequested && !isHiddenRouterModelRef(configuredRaw);
-	const catalog = await loadModelPickerCatalog(cfg);
+	const catalog = await loadModelPickerCatalog(cfg, params.ignoreAllowlist ? undefined : params.agentDir);
 	if (catalog.length === 0) {
 		return promptManualModel({
 			prompter: params.prompter,
@@ -464,7 +482,7 @@ async function promptModelAllowlist(params) {
 		...params.initialSelections ?? []
 	]);
 	const initialKeys = allowedKeySet ? initialSeeds.filter((key) => allowedKeySet.has(key)) : initialSeeds;
-	const catalog = await loadModelPickerCatalog(cfg);
+	const catalog = await loadModelPickerCatalog(cfg, params.agentDir);
 	if (catalog.length === 0 && allowedKeys.length === 0) {
 		const raw = await params.prompter.text({
 			message: params.message ?? "Allowlist models (comma-separated provider/model; blank to keep current)",
@@ -503,7 +521,7 @@ async function promptModelAllowlist(params) {
 			hasAuth
 		});
 	}
-	const supplementalKeys = allowedKeySet ? allowedKeys : existingKeys;
+	const supplementalKeys = allowedKeySet ? allowedKeys : params.agentDir ? [] : existingKeys;
 	for (const key of supplementalKeys) {
 		if (seen.has(key)) {
 			continue;
@@ -630,4 +648,4 @@ function applyModelFallbacksFromSelection(cfg, selection) {
 }
 
 //#endregion
-export { applyModelAllowlist, applyModelFallbacksFromSelection, applyPrimaryModel, promptModelAllowlist };
+export { applyModelAllowlist, applyModelFallbacksFromSelection, applyPrimaryModel, promptModelAllowlist, resolveAuthenticatedDefaultModel };

package/dist/commands/models/list.registry.js

@@ -1,9 +1,13 @@
+import { DEFAULT_PROVIDER } from "../../agents/defaults.js";
 import { resolveFasedAgentAgentDir } from "../../agents/agent-paths.js";
+import { ensureAuthProfileStore } from "../../agents/auth-profiles/store.js";
+import "../../agents/auth-profiles.js";
 import { modelKey } from "../../agents/model-selection.js";
 import { ensureFasedAgentModelsJson } from "../../agents/models-config.js";
 import { discoverAuthStorage, discoverModels } from "../../agents/pi-model-discovery.js";
 import { deriveModelMetadata, formatModelFeatureList } from "../../agents/model-metadata.js";
 import { loadModelCatalog } from "../../agents/model-catalog.js";
+import { resolveAuthenticatedModelCatalog } from "../../agents/authenticated-model-catalog.js";
 import { isLocalBaseUrl } from "./shared.js";
 import { createModelListAuthIndex } from "./list.auth-index.js";
 import { MODEL_AVAILABILITY_UNAVAILABLE_CODE, formatErrorWithStack, shouldFallbackToAuthHeuristics } from "./list.errors.js";
@@ -58,34 +62,25 @@ function normalizeModelListSource(model) {
 		metadata: "metadata" in model ? model.metadata : undefined
 	};
 }
-function mergeModelCatalogEntries(params) {
-	const models = params.registryModels.map((model) => normalizeModelListSource(model));
-	const seen = new Set(models.map((model) => modelKey(model.provider, model.id)));
-	for (const entry of params.catalog) {
-		const key = modelKey(entry.provider, entry.id);
-		if (seen.has(key)) {
-			continue;
-		}
-		models.push(normalizeModelListSource(entry));
-		seen.add(key);
-	}
-	return models;
-}
 async function loadModelRegistry(cfg) {
 	await ensureFasedAgentModelsJson(cfg);
 	const agentDir = resolveFasedAgentAgentDir();
 	const authStorage = discoverAuthStorage(agentDir);
 	const registry = discoverModels(authStorage, agentDir);
-	const registryModels = registry.getAll();
+	registry.getAll();
 	const catalog = await loadModelCatalog({
 		config: cfg,
 		useCache: false,
 		includeMetadata: true
 	});
-	const models = mergeModelCatalogEntries({
-		registryModels,
-		catalog
+	const store = ensureAuthProfileStore(agentDir, { allowKeychainPrompt: false });
+	const authenticated = await resolveAuthenticatedModelCatalog({
+		cfg,
+		store,
+		catalog,
+		defaultProvider: DEFAULT_PROVIDER
 	});
+	const models = authenticated.usableCatalog.map((model) => normalizeModelListSource(model));
 	let availableKeys;
 	let availabilityErrorMessage;
 	try {

package/dist/commands/onboard-auth.config-core.js

@@ -1,8 +1,8 @@
 import { HUGGINGFACE_BASE_URL, HUGGINGFACE_DEFAULT_MODEL_REF, HUGGINGFACE_MODEL_CATALOG, buildHuggingfaceModelDefinition } from "../providers/huggingface-models.js";
-import { LITELLM_BASE_URL, LITELLM_DEFAULT_MODEL_ID } from "../providers/litellm-models.js";
 import { SYNTHETIC_BASE_URL, SYNTHETIC_DEFAULT_MODEL_REF, SYNTHETIC_MODEL_CATALOG, buildSyntheticModelDefinition } from "../providers/synthetic-models.js";
 import { TOGETHER_BASE_URL, TOGETHER_DEFAULT_MODEL_REF, TOGETHER_MODEL_CATALOG, buildTogetherModelDefinition } from "../providers/together-models.js";
 import { VENICE_BASE_URL, VENICE_DEFAULT_MODEL_REF, VENICE_MODEL_CATALOG, buildVeniceModelDefinition } from "../providers/venice-models.js";
+import { LITELLM_BASE_URL, LITELLM_DEFAULT_MODEL_ID } from "../providers/litellm-models.js";
 import { CHUTES_BASE_URL, CHUTES_DEFAULT_MODEL_REF, CHUTES_MODEL_CATALOG, buildChutesModelDefinition } from "../agents/chutes-models.js";
 import "../agents/huggingface-models.js";
 import "../agents/synthetic-models.js";

package/dist/commands/onboard-auth.config-litellm.js

@@ -1,31 +1,31 @@
-import { LITELLM_BASE_URL, LITELLM_DEFAULT_MODEL_ID, LITELLM_DEFAULT_MODEL_REF, LITELLM_MODEL_CATALOG, buildLitellmModelDefinition as buildLitellmModelDefinition$1 } from "../providers/litellm-models.js";
-import { applyAgentDefaultModelPrimary, applyProviderConfigWithDefaultModel } from "./onboard-auth.config-shared.js";
+import { LITELLM_BASE_URL, LITELLM_DEFAULT_MODEL_ID } from "../providers/litellm-models.js";
 
 //#region src/commands/onboard-auth.config-litellm.ts
-function buildLitellmModelDefinition() {
-	return buildLitellmModelDefinition$1(LITELLM_MODEL_CATALOG[0]);
-}
 function applyLitellmProviderConfig(cfg) {
-	const models = { ...cfg.agents?.defaults?.models };
-	models[LITELLM_DEFAULT_MODEL_REF] = {
-		...models[LITELLM_DEFAULT_MODEL_REF],
-		alias: models[LITELLM_DEFAULT_MODEL_REF]?.alias ?? "LiteLLM proxy default"
-	};
-	const defaultModel = buildLitellmModelDefinition();
-	const existingProvider = cfg.models?.providers?.litellm;
+	const providers = { ...cfg.models?.providers };
+	const existingProvider = providers.litellm;
 	const resolvedBaseUrl = typeof existingProvider?.baseUrl === "string" ? existingProvider.baseUrl.trim() : "";
-	return applyProviderConfigWithDefaultModel(cfg, {
-		agentModels: models,
-		providerId: "litellm",
-		api: "openai-completions",
+	providers.litellm = {
+		...existingProvider,
+		...typeof existingProvider?.apiKey === "string" && existingProvider.apiKey.trim() ? { apiKey: existingProvider.apiKey.trim() } : {},
 		baseUrl: resolvedBaseUrl || LITELLM_BASE_URL,
-		defaultModel,
-		defaultModelId: LITELLM_DEFAULT_MODEL_ID
-	});
+		api: "openai-completions",
+		request: {
+			...existingProvider?.request,
+			allowPrivateNetwork: true
+		},
+		models: existingProvider?.models ?? []
+	};
+	return {
+		...cfg,
+		models: {
+			mode: cfg.models?.mode ?? "merge",
+			providers
+		}
+	};
 }
 function applyLitellmConfig(cfg) {
-	const next = applyLitellmProviderConfig(cfg);
-	return applyAgentDefaultModelPrimary(next, LITELLM_DEFAULT_MODEL_REF);
+	return applyLitellmProviderConfig(cfg);
 }
 
 //#endregion

package/dist/commands/onboard-auth.credentials.js

@@ -1,7 +1,6 @@
 import { resolveStateDir } from "../config/paths.js";
 import { CLOUDFLARE_AI_GATEWAY_DEFAULT_MODEL_REF } from "../providers/cloudflare-ai-gateway-shared.js";
 import { HUGGINGFACE_DEFAULT_MODEL_REF } from "../providers/huggingface-models.js";
-import { LITELLM_DEFAULT_MODEL_REF } from "../providers/litellm-models.js";
 import { TOGETHER_DEFAULT_MODEL_REF } from "../providers/together-models.js";
 import { VERCEL_AI_GATEWAY_DEFAULT_MODEL_REF } from "../providers/vercel-ai-gateway-models.js";
 import "../providers/registry.js";

package/dist/commands/onboard-auth.js

@@ -1,6 +1,5 @@
 import { CLOUDFLARE_AI_GATEWAY_DEFAULT_MODEL_REF } from "../providers/cloudflare-ai-gateway-shared.js";
 import { HUGGINGFACE_DEFAULT_MODEL_REF } from "../providers/huggingface-models.js";
-import { LITELLM_DEFAULT_MODEL_REF } from "../providers/litellm-models.js";
 import { SYNTHETIC_DEFAULT_MODEL_ID, SYNTHETIC_DEFAULT_MODEL_REF } from "../providers/synthetic-models.js";
 import { TOGETHER_DEFAULT_MODEL_REF } from "../providers/together-models.js";
 import { VENICE_DEFAULT_MODEL_ID, VENICE_DEFAULT_MODEL_REF } from "../providers/venice-models.js";