@fased/fased 0.1.54 → 0.1.56

package/config/capability-catalog.json

@@ -147,6 +147,18 @@
       "surface": "Services > Browser",
       "description": "Chrome, Chromium, Brave, Edge, remote CDP, or the extension relay."
     },
+    {
+      "id": "openai-runtime",
+      "label": "OpenAI Sign-In Runtime",
+      "category": "provider",
+      "delivery": "npm-addon",
+      "packageName": "@fased/openai-runtime",
+      "pluginId": "openai-runtime",
+      "restartRequired": false,
+      "docsPath": "/providers/openai",
+      "surface": "Agent > Models",
+      "description": "Official Codex app-server runtime for ChatGPT sign-in model discovery and execution."
+    },
     {
       "id": "ollama",
       "label": "Ollama",

package/dist/acp/client.js

@@ -2,7 +2,7 @@ import { isKnownCoreToolId } from "../agents/tool-catalog.js";
 import { DANGEROUS_ACP_TOOLS } from "../security/dangerous-tools.js";
 import { ensureFasedAgentCliOnPath } from "../infra/path-env.js";
 import { fileURLToPath } from "node:url";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import { homedir } from "node:os";
 import path from "node:path";
 import { spawn } from "node:child_process";
@@ -269,7 +269,7 @@ function resolveSelfEntryPath() {
 	try {
 		const here = fileURLToPath(import.meta.url);
 		const candidate = path.resolve(path.dirname(here), "..", "entry.js");
-		if (fs.existsSync(candidate)) {
+		if (syncFs.existsSync(candidate)) {
 			return candidate;
 		}
 	} catch {}

package/dist/acp/secret-file.js

@@ -1,5 +1,5 @@
 import { resolveUserPath } from "../utils.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 
 //#region src/acp/secret-file.ts
 function readSecretFromFile(filePath, label) {
@@ -9,7 +9,7 @@ function readSecretFromFile(filePath, label) {
 	}
 	let raw = "";
 	try {
-		raw = fs.readFileSync(resolvedPath, "utf8");
+		raw = syncFs.readFileSync(resolvedPath, "utf8");
 	} catch (err) {
 		throw new Error(`Failed to read ${label} file at ${resolvedPath}: ${String(err)}`, { cause: err });
 	}

package/dist/agents/agent-scope.js

@@ -6,7 +6,7 @@ import { parseAgentSessionKey } from "../sessions/session-key-utils.js";
 import { DEFAULT_AGENT_ID, normalizeAgentId, resolveAgentIdFromSessionKey } from "../routing/session-key.js";
 import { resolveEffectiveAgentSkillFilter } from "./skills/agent-filter.js";
 import { resolveDefaultAgentWorkspaceDir } from "./workspace.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/agents/agent-scope.ts
@@ -245,7 +245,7 @@ function normalizePathForComparison(input) {
 	const resolved = path.resolve(stripNullBytes(resolveUserPath(input)));
 	let normalized = resolved;
 	try {
-		normalized = fs.realpathSync.native(resolved);
+		normalized = syncFs.realpathSync.native(resolved);
 	} catch {}
 	if (process.platform === "win32") {
 		return normalized.toLowerCase();

package/dist/agents/apply-patch.js

@@ -3,9 +3,9 @@ import { PATH_ALIAS_POLICIES } from "../infra/path-alias-guards.js";
 import { writeFileWithinRoot } from "../infra/fs-safe.js";
 import { applyUpdateHunk } from "./apply-patch-update.js";
 import { assertSandboxPath, resolveSandboxInputPath } from "./sandbox-paths.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
-import fs$1 from "node:fs/promises";
+import fs from "node:fs/promises";
 import { Type } from "@sinclair/typebox";
 
 //#region src/agents/apply-patch.ts
@@ -159,7 +159,7 @@ function resolvePatchFileOps(options) {
 	return {
 		readFile: async (filePath) => {
 			if (!workspaceOnly) {
-				return await fs$1.readFile(filePath, "utf8");
+				return await fs.readFile(filePath, "utf8");
 			}
 			const opened = await openBoundaryFile({
 				absolutePath: filePath,
@@ -168,14 +168,14 @@ function resolvePatchFileOps(options) {
 			});
 			assertBoundaryRead(opened, filePath);
 			try {
-				return fs.readFileSync(opened.fd, "utf8");
+				return syncFs.readFileSync(opened.fd, "utf8");
 			} finally {
-				fs.closeSync(opened.fd);
+				syncFs.closeSync(opened.fd);
 			}
 		},
 		writeFile: async (filePath, content) => {
 			if (!workspaceOnly) {
-				await fs$1.writeFile(filePath, content, "utf8");
+				await fs.writeFile(filePath, content, "utf8");
 				return;
 			}
 			const relative = toRelativeWorkspacePath(options.cwd, filePath);
@@ -186,8 +186,8 @@ function resolvePatchFileOps(options) {
 				encoding: "utf8"
 			});
 		},
-		remove: (filePath) => fs$1.rm(filePath),
-		mkdirp: (dir) => fs$1.mkdir(dir, { recursive: true }).then(() => {})
+		remove: (filePath) => fs.rm(filePath),
+		mkdirp: (dir) => fs.mkdir(dir, { recursive: true }).then(() => {})
 	};
 }
 async function ensureDir(filePath, ops) {

package/dist/agents/auth-profiles/paths.js

@@ -2,7 +2,7 @@ import { resolveUserPath } from "../../utils.js";
 import { saveJsonFile } from "../../infra/json-file.js";
 import { AUTH_PROFILE_FILENAME, AUTH_STORE_VERSION, LEGACY_AUTH_FILENAME } from "./constants.js";
 import { resolveFasedAgentAgentDir } from "../agent-paths.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/agents/auth-profiles/paths.ts
@@ -19,7 +19,7 @@ function resolveAuthStorePathForDisplay(agentDir) {
 	return pathname.startsWith("~") ? pathname : resolveUserPath(pathname);
 }
 function ensureAuthStoreFile(pathname) {
-	if (fs.existsSync(pathname)) {
+	if (syncFs.existsSync(pathname)) {
 		return;
 	}
 	const payload = {

package/dist/agents/auth-profiles/store.js

@@ -5,7 +5,7 @@ import { withFileLock } from "../../plugin-sdk/file-lock.js";
 import "../../infra/file-lock.js";
 import { syncExternalCliCredentials } from "./external-cli-sync.js";
 import { ensureAuthStoreFile, resolveAuthStorePath, resolveLegacyAuthStorePath } from "./paths.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 
 //#region src/agents/auth-profiles/store.ts
 const AUTH_PROFILE_TYPES = new Set([
@@ -361,7 +361,7 @@ function loadAuthProfileStoreForAgent(agentDir, options) {
 	if (shouldWrite && legacy !== null) {
 		const legacyPath = resolveLegacyAuthStorePath(agentDir);
 		try {
-			fs.unlinkSync(legacyPath);
+			syncFs.unlinkSync(legacyPath);
 		} catch (err) {
 			if (err?.code !== "ENOENT") {
 				log.warn("failed to delete legacy auth.json after migration", {

package/dist/agents/authenticated-model-catalog.js

@@ -0,0 +1,28 @@
+import { applyRuntimeProviderModelDiscovery, filterCatalogToAuthoritativeAvailability } from "../providers/runtime-model-catalog.js";
+import { buildCredentialScopedAllowedModelSet } from "./model-catalog-access.js";
+
+//#region src/agents/authenticated-model-catalog.ts
+async function resolveAuthenticatedModelCatalog(params) {
+	const initialScope = buildCredentialScopedAllowedModelSet({
+		cfg: params.cfg,
+		catalog: params.catalog,
+		defaultProvider: params.defaultProvider,
+		store: params.store
+	});
+	const discoveredCatalog = filterCatalogToAuthoritativeAvailability(await applyRuntimeProviderModelDiscovery({
+		cfg: params.cfg,
+		store: params.store,
+		routes: initialScope.usableProviders,
+		catalog: initialScope.usableCatalog,
+		agentDir: params.agentDir
+	}), params.store);
+	return buildCredentialScopedAllowedModelSet({
+		cfg: params.cfg,
+		catalog: discoveredCatalog,
+		defaultProvider: params.defaultProvider,
+		storedProviders: initialScope.usableProviders
+	});
+}
+
+//#endregion
+export { resolveAuthenticatedModelCatalog };

package/dist/agents/bash-tools.exec-host-node.js

@@ -1,6 +1,6 @@
 import { logInfo } from "../logger.js";
-import { evaluateShellAllowlist } from "../infra/exec-approvals-allowlist.js";
 import { callGatewayTool } from "./tools/gateway.js";
+import { evaluateShellAllowlist } from "../infra/exec-approvals-allowlist.js";
 import { requiresExecApproval, resolveExecApprovalsFromFile } from "../infra/exec-approvals.js";
 import { detectCommandObfuscation } from "../infra/exec-obfuscation-detect.js";
 import { DEFAULT_APPROVAL_TIMEOUT_MS, createApprovalSlug, emitExecSystemEvent } from "./bash-tools.exec-runtime.js";

package/dist/agents/bash-tools.exec.js

@@ -2,8 +2,8 @@ import { parseAgentSessionKey } from "../sessions/session-key-utils.js";
 import { resolveAgentIdFromSessionKey } from "../routing/session-key.js";
 import { logInfo } from "../logger.js";
 import { getShellPathFromLoginShell, resolveShellEnvFallbackTimeoutMs } from "../infra/shell-env.js";
-import { resolveExecSafeBinRuntimePolicy } from "../infra/exec-safe-bin-runtime-policy.js";
 import { SafeOpenError, readFileWithinRoot } from "../infra/fs-safe.js";
+import { resolveExecSafeBinRuntimePolicy } from "../infra/exec-safe-bin-runtime-policy.js";
 import { maxAsk, minSecurity } from "../infra/exec-approvals.js";
 import { markBackgrounded } from "./bash-process-registry.js";
 import { applyPathPrepend, normalizePathPrepend } from "../infra/path-prepend.js";

package/dist/agents/bash-tools.shared.js

@@ -3,7 +3,7 @@ import { assertSandboxPath } from "./sandbox-paths.js";
 import { existsSync, statSync } from "node:fs";
 import { homedir } from "node:os";
 import path from "node:path";
-import fs$1 from "node:fs/promises";
+import fs from "node:fs/promises";
 
 //#region src/agents/bash-tools.shared.ts
 const CHUNK_LIMIT = 8 * 1024;
@@ -67,7 +67,7 @@ async function resolveSandboxWorkdir(params) {
 			cwd: process.cwd(),
 			root: params.sandbox.workspaceDir
 		});
-		const stats = await fs$1.stat(resolved.resolved);
+		const stats = await fs.stat(resolved.resolved);
 		if (!stats.isDirectory()) {
 			throw new Error("workdir is not a directory");
 		}

package/dist/agents/cli-credentials.js

@@ -1,7 +1,7 @@
 import { resolveUserPath } from "../utils.js";
 import { createSubsystemLogger } from "../logging/subsystem.js";
 import { loadJsonFile, saveJsonFile } from "../infra/json-file.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import { execFileSync, execSync } from "node:child_process";
 import { createHash } from "node:crypto";
@@ -61,7 +61,7 @@ function resolveCodexHomePath() {
 	const configured = process.env.CODEX_HOME;
 	const home = configured ? resolveUserPath(configured) : resolveUserPath("~/.codex");
 	try {
-		return fs.realpathSync.native(home);
+		return syncFs.realpathSync.native(home);
 	} catch {
 		return home;
 	}
@@ -264,7 +264,7 @@ function writeClaudeCliKeychainCredentials(newCredentials, options) {
 }
 function writeClaudeCliFileCredentials(newCredentials, options) {
 	const credPath = resolveClaudeCliCredentialsPath(options?.homeDir);
-	if (!fs.existsSync(credPath)) {
+	if (!syncFs.existsSync(credPath)) {
 		return false;
 	}
 	try {
@@ -331,7 +331,7 @@ function readCodexCliCredentials(options) {
 	}
 	let expires;
 	try {
-		const stat = fs.statSync(authPath);
+		const stat = syncFs.statSync(authPath);
 		expires = stat.mtimeMs + 60 * 60 * 1e3;
 	} catch {
 		expires = Date.now() + 60 * 60 * 1e3;

package/dist/agents/copilot-dynamic-headers.js

@@ -0,0 +1,37 @@
+//#region src/agents/copilot-dynamic-headers.ts
+const COPILOT_EDITOR_VERSION = "vscode/1.96.2";
+const COPILOT_USER_AGENT = "GitHubCopilotChat/0.26.7";
+const COPILOT_GITHUB_API_VERSION = "2025-04-01";
+function inferCopilotInitiator(messages) {
+	const last = messages[messages.length - 1];
+	return last && last.role !== "user" ? "agent" : "user";
+}
+function hasCopilotVisionInput(messages) {
+	return messages.some((message) => {
+		if (message.role === "user" && Array.isArray(message.content)) {
+			return message.content.some((item) => item.type === "image");
+		}
+		if (message.role === "toolResult" && Array.isArray(message.content)) {
+			return message.content.some((item) => item.type === "image");
+		}
+		return false;
+	});
+}
+function buildCopilotIdeHeaders(params = {}) {
+	return {
+		"Editor-Version": COPILOT_EDITOR_VERSION,
+		"User-Agent": COPILOT_USER_AGENT,
+		...params.includeApiVersion ? { "X-Github-Api-Version": COPILOT_GITHUB_API_VERSION } : {}
+	};
+}
+function buildCopilotDynamicHeaders(params) {
+	return {
+		...buildCopilotIdeHeaders(),
+		"X-Initiator": inferCopilotInitiator(params.messages),
+		"Openai-Intent": "conversation-edits",
+		...params.hasImages ? { "Copilot-Vision-Request": "true" } : {}
+	};
+}
+
+//#endregion
+export { buildCopilotIdeHeaders };

package/dist/agents/current-model-catalog.js

@@ -1,6 +1,5 @@
 import { CLOUDFLARE_AI_GATEWAY_MODEL_CATALOG, buildCloudflareAiGatewayModelDefinition } from "../providers/cloudflare-ai-gateway-shared.js";
 import { HUGGINGFACE_BASE_URL, HUGGINGFACE_MODEL_CATALOG, buildHuggingfaceModelDefinition } from "../providers/huggingface-models.js";
-import { LITELLM_BASE_URL, LITELLM_MODEL_CATALOG, buildLitellmModelDefinition } from "../providers/litellm-models.js";
 import { SYNTHETIC_BASE_URL, SYNTHETIC_MODEL_CATALOG, buildSyntheticModelDefinition } from "../providers/synthetic-models.js";
 import { TOGETHER_BASE_URL, TOGETHER_MODEL_CATALOG, buildTogetherModelDefinition } from "../providers/together-models.js";
 import { VENICE_BASE_URL, VENICE_MODEL_CATALOG, buildVeniceModelDefinition } from "../providers/venice-models.js";
@@ -154,7 +153,8 @@ const OPENAI_CODEX_MODELS = [
 		input: ["text", "image"],
 		contextWindow: 105e4,
 		maxTokens: 128e3,
-		api: "openai-codex-responses"
+		api: "openai-codex-responses",
+		compat: { responsesLite: true }
 	}),
 	model({
 		id: "gpt-5.6-terra",
@@ -163,7 +163,8 @@ const OPENAI_CODEX_MODELS = [
 		input: ["text", "image"],
 		contextWindow: 105e4,
 		maxTokens: 128e3,
-		api: "openai-codex-responses"
+		api: "openai-codex-responses",
+		compat: { responsesLite: true }
 	}),
 	model({
 		id: "gpt-5.6-luna",
@@ -172,7 +173,8 @@ const OPENAI_CODEX_MODELS = [
 		input: ["text", "image"],
 		contextWindow: 105e4,
 		maxTokens: 128e3,
-		api: "openai-codex-responses"
+		api: "openai-codex-responses",
+		compat: { responsesLite: true }
 	}),
 	model({
 		id: "gpt-5.5",
@@ -876,22 +878,16 @@ const CURRENT_MODEL_PROVIDER_CATALOG = {
 		models: CLOUDFLARE_AI_GATEWAY_MODEL_CATALOG.map((entry) => buildCloudflareAiGatewayModelDefinition({ id: entry.id }))
 	},
 	litellm: {
-		baseUrl: LITELLM_BASE_URL,
+		baseUrl: "http://localhost:4000/v1",
 		api: "openai-completions",
 		request: { allowPrivateNetwork: true },
-		models: LITELLM_MODEL_CATALOG.map(buildLitellmModelDefinition)
+		models: []
 	},
 	vllm: {
 		baseUrl: "http://127.0.0.1:8000/v1",
 		api: "openai-completions",
 		request: { allowPrivateNetwork: true },
-		models: [model({
-			id: "local",
-			name: "Local model",
-			input: ["text", "image"],
-			contextWindow: 128e3,
-			maxTokens: 8192
-		})]
+		models: []
 	},
 	"github-copilot": {
 		baseUrl: "https://api.individual.githubcopilot.com",

package/dist/agents/docs-path.js

@@ -1,5 +1,5 @@
 import { resolveFasedAgentPackageRoot } from "../infra/fased-root.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/agents/docs-path.ts
@@ -7,7 +7,7 @@ async function resolveFasedAgentDocsPath(params) {
 	const workspaceDir = params.workspaceDir?.trim();
 	if (workspaceDir) {
 		const workspaceDocs = path.join(workspaceDir, "docs");
-		if (fs.existsSync(workspaceDocs)) {
+		if (syncFs.existsSync(workspaceDocs)) {
 			return workspaceDocs;
 		}
 	}
@@ -20,7 +20,7 @@ async function resolveFasedAgentDocsPath(params) {
 		return null;
 	}
 	const packageDocs = path.join(packageRoot, "docs");
-	return fs.existsSync(packageDocs) ? packageDocs : null;
+	return syncFs.existsSync(packageDocs) ? packageDocs : null;
 }
 
 //#endregion

package/dist/agents/embedded-pi-mcp.js

@@ -1,6 +1,6 @@
 import { STATE_DIR } from "../config/paths.js";
 import { isRecord, resolveUserPath } from "../utils.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/agents/embedded-pi-mcp.ts
@@ -66,10 +66,10 @@ function readBundleMcpFile(params) {
 	if (relative.startsWith("..") || path.isAbsolute(relative)) {
 		return {};
 	}
-	if (!fs.existsSync(filePath)) {
+	if (!syncFs.existsSync(filePath)) {
 		return {};
 	}
-	const raw = JSON.parse(fs.readFileSync(filePath, "utf-8"));
+	const raw = JSON.parse(syncFs.readFileSync(filePath, "utf-8"));
 	const servers = extractMcpServerMap(raw);
 	const baseDir = path.dirname(filePath);
 	return Object.fromEntries(Object.entries(servers).map(([serverName, server]) => [serverName, absolutizeBundleMcpServer({
@@ -99,7 +99,7 @@ function loadEnabledBundleMcpConfig(params) {
 			cfg: params.cfg,
 			pluginId
 		})) {
-			if (!fs.existsSync(rootDir)) {
+			if (!syncFs.existsSync(rootDir)) {
 				continue;
 			}
 			for (const fileName of BUNDLE_MCP_FILENAMES) {

package/dist/agents/identity-avatar.js

@@ -3,7 +3,7 @@ import { resolveAgentWorkspaceDir } from "./agent-scope.js";
 import { AVATAR_MAX_BYTES, isAvatarDataUrl, isAvatarHttpUrl, isPathWithinRoot, isSupportedLocalAvatarExtension } from "../shared/avatar-policy.js";
 import { resolveAgentIdentity } from "./identity.js";
 import { loadAgentIdentityFromWorkspace } from "./identity-file.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/agents/identity-avatar.ts
@@ -28,7 +28,7 @@ function resolveAvatarSource(cfg, agentId, opts) {
 }
 function resolveExistingPath(value) {
 	try {
-		return fs.realpathSync(value);
+		return syncFs.realpathSync(value);
 	} catch {
 		return path.resolve(value);
 	}
@@ -51,7 +51,7 @@ function resolveLocalAvatarPath(params) {
 		};
 	}
 	try {
-		const stat = fs.statSync(realPath);
+		const stat = syncFs.statSync(realPath);
 		if (!stat.isFile()) {
 			return {
 				ok: false,

package/dist/agents/identity-file.js

@@ -1,5 +1,5 @@
 import { DEFAULT_IDENTITY_FILENAME } from "./workspace.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/agents/identity-file.ts
@@ -67,7 +67,7 @@ function identityHasValues(identity) {
 }
 function loadIdentityFromFile(identityPath) {
 	try {
-		const content = fs.readFileSync(identityPath, "utf-8");
+		const content = syncFs.readFileSync(identityPath, "utf-8");
 		const parsed = parseIdentityMarkdown(content);
 		if (!identityHasValues(parsed)) {
 			return null;

package/dist/agents/model-catalog-normalized.js

@@ -3,6 +3,7 @@ import { normalizeProviderId } from "./provider-id.js";
 //#region src/agents/model-catalog-normalized.ts
 const SOURCE_AUTHORITY = {
 	configured: 500,
+	"provider-api": 450,
 	runtime: 400,
 	manifest: 300,
 	"provider-index": 200,

package/dist/agents/model-catalog-source.js

@@ -1,4 +1,4 @@
-import { isOpenAISignInCatalogModel, isStandardProviderCatalogEntry, listProviderBrandManifests } from "../providers/registry.js";
+import { isOpenAISignInRuntimeModelSupported, isStandardProviderCatalogEntry, listProviderBrandManifests } from "../providers/registry.js";
 import { MODEL_APIS } from "../config/types.models.js";
 import { buildModelCatalogMergeKey, mergeModelCatalogRowsByAuthority, normalizeModelCatalogModelId, normalizeModelCatalogProviderId, normalizeProviderCatalogRows } from "./model-catalog-normalized.js";
 import { CURRENT_MODEL_PROVIDER_CATALOG, listCurrentModelCatalogRows } from "./current-model-catalog.js";
@@ -28,7 +28,7 @@ function isSupportedRuntimeCatalogModel(provider, id) {
 	if (provider !== "openai-codex") {
 		return true;
 	}
-	return isOpenAISignInCatalogModel(id);
+	return isOpenAISignInRuntimeModelSupported(id);
 }
 function configuredProviderCatalogRows(cfg) {
 	return Object.entries(cfg.models?.providers ?? {}).flatMap(([provider, providerConfig]) => normalizeProviderCatalogRows({

package/dist/agents/model-catalog.js

@@ -4,8 +4,8 @@ import { loadConfig } from "../config/io.js";
 import "../config/config.js";
 import { normalizeModelCatalogProviderId } from "./model-catalog-normalized.js";
 import { ensureFasedAgentModelsJson } from "./models-config.js";
-import { augmentModelCatalogWithProviderPlugins } from "../plugins/provider-runtime.runtime.js";
 import { deriveModelMetadata } from "./model-metadata.js";
+import { augmentModelCatalogWithProviderPlugins } from "../plugins/provider-runtime.runtime.js";
 import { buildFasedModelCatalogEntries } from "./model-catalog-source.js";
 import { __setProviderExtensionCatalogEntriesForTest, loadProviderExtensionCatalogIndex } from "./provider-extension-catalog-index.js";
 

package/dist/agents/model-metadata.js

@@ -1,9 +1,20 @@
 import { resolveModelThinkingCapability } from "../shared/model-thinking.js";
-import { getProviderBrandManifestForRoute, lookupProviderManifestModelCapability } from "../providers/registry.js";
+import { getProviderBrandManifestForRoute, lookupProviderManifestModelCapability, providerModelRecommendationRank } from "../providers/registry.js";
 import { isPrivateNetworkBaseUrl } from "../utils/private-network-url.js";
 import { lookupRefreshedModelCapability } from "../providers/refreshed-model-capabilities.js";
 
 //#region src/agents/model-metadata.ts
+function availabilitySourceForCatalogSource(source) {
+	switch (source) {
+		case "provider-api": return "provider-api";
+		case "runtime": return "runtime-catalog";
+		case "configured": return "configured";
+		case "provider-index": return "provider-plugin";
+		case "manifest": return "curated-recommendation";
+		case "current-preview":
+		default: return "reviewed-catalog";
+	}
+}
 const FEATURE_LABELS = {
 	text: "text",
 	vision: "vision",
@@ -32,8 +43,10 @@ const JSON_CAPABLE_APIS = new Set([
 const LOCAL_DYNAMIC_PROVIDERS = new Set([
 	"ollama",
 	"lmstudio",
-	"vllm"
+	"vllm",
+	"litellm"
 ]);
+const CURATED_CATALOG_REVIEWED_AT = "2026-07-12T00:00:00.000Z";
 function resolveProviderConfig(cfg, provider) {
 	return cfg?.models?.providers?.[provider];
 }
@@ -60,6 +73,12 @@ function deriveModelMetadata(params) {
 	const provider = params.model.provider.trim();
 	const modelId = params.model.id.trim();
 	const providerConfig = params.providerConfig ?? resolveProviderConfig(params.cfg, provider);
+	const providerManifest = getProviderBrandManifestForRoute(provider);
+	const credentialMethod = providerManifest?.methods.find((entry) => [
+		entry.route,
+		entry.statusRoute,
+		entry.configProviderId
+	].map((value) => value?.trim().toLowerCase()).includes(provider.toLowerCase()));
 	const baseUrl = params.model.baseUrl ?? providerConfig?.baseUrl ?? "";
 	const api = params.model.api ?? providerConfig?.api;
 	const refreshed = lookupRefreshedModelCapability(provider, modelId);
@@ -70,8 +89,9 @@ function deriveModelMetadata(params) {
 		...manifestCapabilities,
 		...params.model.capabilities
 	} : undefined;
-	const capabilityConfidence = capabilities || refreshed || manifestCapabilities ? "declared" : "unknown";
-	const shouldInferApiCapabilities = !(LOCAL_DYNAMIC_PROVIDERS.has(provider) && capabilityConfidence === "unknown");
+	const capabilitySource = params.capabilitySource ?? (params.model.capabilities ? params.model.catalogSource === "configured" ? "configured" : "runtime" : refreshed ? refreshed.source === "catalog" || refreshed.source === "provider-api" ? "provider-api" : "official-docs" : manifestCapabilities ? "official-docs" : api && !LOCAL_DYNAMIC_PROVIDERS.has(provider) ? "inferred" : "unknown");
+	const capabilityConfidence = capabilitySource === "provider-api" || capabilitySource === "official-docs" ? "verified" : capabilitySource === "runtime" || capabilitySource === "configured" ? "declared" : capabilitySource === "inferred" ? "inferred" : "unknown";
+	const shouldInferApiCapabilities = !LOCAL_DYNAMIC_PROVIDERS.has(provider);
 	const reasoning = params.model.reasoning ?? refreshed?.reasoning;
 	const thinking = resolveModelThinkingCapability({
 		provider,
@@ -89,12 +109,29 @@ function deriveModelMetadata(params) {
 	addFeature(features, "video", capabilities?.video === true);
 	addFeature(features, "speech", capabilities?.speech === true);
 	const privateNetwork = baseUrl ? isPrivateNetworkBaseUrl(baseUrl) : false;
+	const authMode = resolveAuthMode({
+		provider,
+		providerConfig
+	});
+	const credentialRoutes = params.credentialRoutes?.length ? params.credentialRoutes : [{
+		id: credentialMethod?.id ?? provider,
+		label: credentialMethod?.label ?? providerManifest?.label ?? provider,
+		authMode
+	}];
+	const credentialRoute = credentialRoutes[0];
+	const configuredCost = providerConfig?.models?.find((entry) => entry.id.trim().toLowerCase() === modelId.toLowerCase())?.cost;
+	const cost = params.model.cost ?? configuredCost;
+	const recommendationRank = providerModelRecommendationRank(provider, modelId);
 	return {
+		ref: `${provider}/${modelId}`,
 		provider,
+		publicProviderId: providerManifest?.id ?? provider,
+		publicProviderLabel: providerManifest?.label ?? provider,
 		model: modelId,
 		label: params.model.name?.trim() || modelId,
 		contextWindow: typeof refreshed?.contextWindow === "number" && refreshed.contextWindow > 0 ? refreshed.contextWindow : typeof params.model.contextWindow === "number" && params.model.contextWindow > 0 ? params.model.contextWindow : undefined,
 		maxTokens: typeof refreshed?.maxTokens === "number" && refreshed.maxTokens > 0 ? refreshed.maxTokens : typeof params.model.maxTokens === "number" && params.model.maxTokens > 0 ? params.model.maxTokens : undefined,
+		...typeof api === "string" && api.trim() ? { apiRoute: api.trim() } : {},
 		features,
 		...thinking ? {
 			thinkingLevels: thinking.thinkingLevels,
@@ -104,13 +141,25 @@ function deriveModelMetadata(params) {
 		} : {},
 		streaming: capabilities?.streaming !== false,
 		capabilityConfidence,
-		authMode: resolveAuthMode({
-			provider,
-			providerConfig
-		}),
+		capabilitySource,
+		...params.capabilityRetrievedAt ?? refreshed?.refreshedAt ?? (capabilitySource === "official-docs" ? CURATED_CATALOG_REVIEWED_AT : undefined) ? { capabilityRetrievedAt: params.capabilityRetrievedAt ?? refreshed?.refreshedAt ?? CURATED_CATALOG_REVIEWED_AT } : {},
+		retrievedAt: refreshed?.refreshedAt ?? CURATED_CATALOG_REVIEWED_AT,
+		availabilitySource: availabilitySourceForCatalogSource(params.model.catalogSource),
+		authRoute: provider,
+		authMode: credentialRoute.authMode,
+		credentialRoute,
+		credentialRoutes,
+		...cost ? { price: {
+			input: cost.input,
+			output: cost.output,
+			cacheRead: cost.cacheRead,
+			cacheWrite: cost.cacheWrite,
+			unit: "usd-per-million-tokens"
+		} } : {},
 		privateNetwork,
 		privateNetworkAllowed: privateNetwork ? providerConfig?.request?.allowPrivateNetwork === true : false,
-		...params.recommended ? { recommended: true } : {},
+		...params.recommended || recommendationRank !== undefined ? { recommended: true } : {},
+		...recommendationRank !== undefined ? { recommendationRank } : {},
 		...params.default ? { default: true } : {}
 	};
 }