@fased/fased 0.1.61 → 0.1.64

package/dist/agents/workspace.js

@@ -5,10 +5,10 @@ import "../routing/session-key.js";
 import { openBoundaryFile } from "../infra/boundary-file-read.js";
 import { runCommandWithTimeout } from "../process/exec.js";
 import { resolveWorkspaceTemplateDir } from "./workspace-templates.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import fs$1 from "node:fs/promises";
+import fs from "node:fs/promises";
 
 //#region src/agents/workspace.ts
 function resolveDefaultAgentWorkspaceDir(env = process.env, homedir = os.homedir) {
@@ -95,14 +95,14 @@ async function readWorkspaceFileWithGuards(params) {
 	const identity = workspaceFileIdentity(opened.stat, opened.path);
 	const cached = workspaceFileCache.get(params.filePath);
 	if (cached && cached.identity === identity) {
-		fs.closeSync(opened.fd);
+		syncFs.closeSync(opened.fd);
 		return {
 			ok: true,
 			content: cached.content
 		};
 	}
 	try {
-		const content = fs.readFileSync(opened.fd, "utf-8");
+		const content = syncFs.readFileSync(opened.fd, "utf-8");
 		workspaceFileCache.set(params.filePath, {
 			content,
 			identity
@@ -119,7 +119,7 @@ async function readWorkspaceFileWithGuards(params) {
 			error
 		};
 	} finally {
-		fs.closeSync(opened.fd);
+		syncFs.closeSync(opened.fd);
 	}
 }
 function stripFrontMatter(content) {
@@ -144,7 +144,7 @@ async function loadTemplate(name) {
 		const templateDir = await resolveWorkspaceTemplateDir();
 		const templatePath = path.join(templateDir, name);
 		try {
-			const content = await fs$1.readFile(templatePath, "utf-8");
+			const content = await fs.readFile(templatePath, "utf-8");
 			return stripFrontMatter(content);
 		} catch {
 			const fallback = BUILTIN_WORKSPACE_TEMPLATES[name];
@@ -176,7 +176,7 @@ const VALID_BOOTSTRAP_NAMES = new Set([
 ]);
 async function writeFileIfMissing(filePath, content) {
 	try {
-		await fs$1.writeFile(filePath, content, {
+		await fs.writeFile(filePath, content, {
 			encoding: "utf-8",
 			flag: "wx"
 		});
@@ -191,14 +191,14 @@ async function writeFileIfMissing(filePath, content) {
 }
 async function fileExists(filePath) {
 	try {
-		await fs$1.access(filePath);
+		await fs.access(filePath);
 		return true;
 	} catch {
 		return false;
 	}
 }
 async function ensureMemoryRoots(dir) {
-	await fs$1.mkdir(path.join(dir, "memory"), { recursive: true });
+	await fs.mkdir(path.join(dir, "memory"), { recursive: true });
 	await writeFileIfMissing(path.join(dir, DEFAULT_MEMORY_FILENAME), DEFAULT_MEMORY_CONTENT);
 }
 function resolveWorkspaceStatePath(dir) {
@@ -221,7 +221,7 @@ function parseWorkspaceOnboardingState(raw) {
 }
 async function readWorkspaceOnboardingState(statePath) {
 	try {
-		const raw = await fs$1.readFile(statePath, "utf-8");
+		const raw = await fs.readFile(statePath, "utf-8");
 		return parseWorkspaceOnboardingState(raw) ?? { version: WORKSPACE_STATE_VERSION };
 	} catch (err) {
 		const anyErr = err;
@@ -240,20 +240,20 @@ async function isWorkspaceOnboardingCompleted(dir) {
 	return typeof state.onboardingCompletedAt === "string" && state.onboardingCompletedAt.trim().length > 0;
 }
 async function writeWorkspaceOnboardingState(statePath, state) {
-	await fs$1.mkdir(path.dirname(statePath), { recursive: true });
+	await fs.mkdir(path.dirname(statePath), { recursive: true });
 	const payload = `${JSON.stringify(state, null, 2)}\n`;
 	const tmpPath = `${statePath}.tmp-${process.pid}-${Date.now().toString(36)}`;
 	try {
-		await fs$1.writeFile(tmpPath, payload, { encoding: "utf-8" });
-		await fs$1.rename(tmpPath, statePath);
+		await fs.writeFile(tmpPath, payload, { encoding: "utf-8" });
+		await fs.rename(tmpPath, statePath);
 	} catch (err) {
-		await fs$1.unlink(tmpPath).catch(() => {});
+		await fs.unlink(tmpPath).catch(() => {});
 		throw err;
 	}
 }
 async function hasGitRepo(dir) {
 	try {
-		await fs$1.stat(path.join(dir, ".git"));
+		await fs.stat(path.join(dir, ".git"));
 		return true;
 	} catch {
 		return false;
@@ -293,7 +293,7 @@ async function ensureGitRepo(dir, isBrandNewWorkspace) {
 async function ensureAgentWorkspace(params) {
 	const rawDir = params?.dir?.trim() ? params.dir.trim() : DEFAULT_AGENT_WORKSPACE_DIR;
 	const dir = resolveUserPath(rawDir);
-	await fs$1.mkdir(dir, { recursive: true });
+	await fs.mkdir(dir, { recursive: true });
 	if (!params?.ensureBootstrapFiles) {
 		return { dir };
 	}
@@ -322,7 +322,7 @@ async function ensureAgentWorkspace(params) {
 		const paths = [...templatePaths, ...userContentPaths];
 		const existing = await Promise.all(paths.map(async (p) => {
 			try {
-				await fs$1.access(p);
+				await fs.access(p);
 				return true;
 			} catch {
 				return false;
@@ -360,7 +360,7 @@ async function ensureAgentWorkspace(params) {
 		markState({ onboardingCompletedAt: nowIso() });
 	}
 	if (!state.bootstrapSeededAt && !state.onboardingCompletedAt && !bootstrapExists) {
-		const [identityContent, userContent] = await Promise.all([fs$1.readFile(identityPath, "utf-8"), fs$1.readFile(userPath, "utf-8")]);
+		const [identityContent, userContent] = await Promise.all([fs.readFile(identityPath, "utf-8"), fs.readFile(userPath, "utf-8")]);
 		const hasUserContent = await (async () => {
 			const indicators = [
 				path.join(dir, "memory"),
@@ -369,7 +369,7 @@ async function ensureAgentWorkspace(params) {
 			];
 			for (const indicator of indicators) {
 				try {
-					await fs$1.access(indicator);
+					await fs.access(indicator);
 					return true;
 				} catch {}
 			}
@@ -413,7 +413,7 @@ async function resolveMemoryBootstrapEntries(resolvedDir) {
 	for (const name of candidates) {
 		const filePath = path.join(resolvedDir, name);
 		try {
-			await fs$1.access(filePath);
+			await fs.access(filePath);
 			entries.push({
 				name,
 				filePath
@@ -428,7 +428,7 @@ async function resolveMemoryBootstrapEntries(resolvedDir) {
 	for (const entry of entries) {
 		let key = entry.filePath;
 		try {
-			key = await fs$1.realpath(entry.filePath);
+			key = await fs.realpath(entry.filePath);
 		} catch {}
 		if (seen.has(key)) {
 			continue;
@@ -523,7 +523,7 @@ async function loadExtraBootstrapFilesWithDiagnostics(dir, extraPatterns) {
 	for (const pattern of extraPatterns) {
 		if (pattern.includes("*") || pattern.includes("?") || pattern.includes("{")) {
 			try {
-				const matches = fs$1.glob(pattern, { cwd: resolvedDir });
+				const matches = fs.glob(pattern, { cwd: resolvedDir });
 				for await (const m of matches) {
 					resolvedPaths.add(m);
 				}

package/dist/auto-reply/reply/agent-runner-execution.js

@@ -18,7 +18,7 @@ import { isCompactionFailureError, isContextOverflowError, isLikelyContextOverfl
 import "../../agents/pi-embedded-helpers.js";
 import { buildEmbeddedRunBaseParams, buildEmbeddedRunContexts, resolveModelFallbackOptions } from "./agent-runner-utils.js";
 import { createBlockReplyDeliveryHandler } from "./reply-delivery.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import crypto from "node:crypto";
 
 //#region src/auto-reply/reply/agent-runner-execution.ts
@@ -369,7 +369,7 @@ async function runAgentTurnWithFallback(params) {
 					if (corruptedSessionId) {
 						const transcriptPath = resolveSessionTranscriptPath(corruptedSessionId);
 						try {
-							fs.unlinkSync(transcriptPath);
+							syncFs.unlinkSync(transcriptPath);
 						} catch {}
 					}
 					delete params.activeSessionStore[sessionKey];

package/dist/auto-reply/reply/agent-runner.js

@@ -35,7 +35,7 @@ import { createTypingSignaler } from "./typing-mode.js";
 import { createFollowupRunner } from "./followup-runner.js";
 import { auditPostCompactionReads, extractReadPaths, formatAuditWarning, readSessionMessages } from "./post-compaction-audit.js";
 import { resolveActiveRunQueueAction } from "./queue-policy.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 
 //#region src/auto-reply/reply/agent-runner.ts
 const BLOCK_REPLY_SEND_TIMEOUT_MS = 15e3;
@@ -305,7 +305,7 @@ async function runReplyAgent(params) {
 			transcriptCandidates.add(resolveSessionTranscriptPath(prevSessionId, agentId));
 			for (const candidate of transcriptCandidates) {
 				try {
-					fs.unlinkSync(candidate);
+					syncFs.unlinkSync(candidate);
 				} catch {}
 			}
 		}

package/dist/auto-reply/reply/commands-export-session.js

@@ -2,14 +2,14 @@ import { resolveDefaultSessionStorePath, resolveSessionFilePath, resolveSessionF
 import { loadSessionStore } from "../../config/sessions/store.js";
 import { resolveCommandsSystemPromptBundle } from "./commands-system-prompt.js";
 import { fileURLToPath } from "node:url";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import { SessionManager } from "@mariozechner/pi-coding-agent";
 
 //#region src/auto-reply/reply/commands-export-session.ts
 const EXPORT_HTML_DIR = path.join(path.dirname(fileURLToPath(import.meta.url)), "export-html");
 function loadTemplate(fileName) {
-	return fs.readFileSync(path.join(EXPORT_HTML_DIR, fileName), "utf-8");
+	return syncFs.readFileSync(path.join(EXPORT_HTML_DIR, fileName), "utf-8");
 }
 function generateHtml(sessionData) {
 	const template = loadTemplate("template.html");
@@ -84,7 +84,7 @@ function writeNewDefaultExportFile(filePath, html) {
 	for (let suffix = 1; suffix <= 100; suffix++) {
 		const candidate = suffix === 1 ? filePath : addCollisionSuffix(filePath, suffix);
 		try {
-			fs.writeFileSync(candidate, html, {
+			syncFs.writeFileSync(candidate, html, {
 				encoding: "utf-8",
 				flag: "wx"
 			});
@@ -119,7 +119,7 @@ async function buildExportSessionReply(params) {
 	} catch (err) {
 		return { text: `❌ Failed to resolve session file: ${err instanceof Error ? err.message : String(err)}` };
 	}
-	if (!fs.existsSync(sessionFile)) {
+	if (!syncFs.existsSync(sessionFile)) {
 		return { text: `❌ Session file not found: ${sessionFile}` };
 	}
 	const sessionManager = SessionManager.open(sessionFile);
@@ -143,11 +143,11 @@ async function buildExportSessionReply(params) {
 	const defaultFileName = `fased-session-${entry.sessionId.slice(0, 8)}-${timestamp}.html`;
 	let outputPath = args.outputPath ? path.resolve(args.outputPath.startsWith("~") ? args.outputPath.replace("~", process.env.HOME ?? "") : args.outputPath) : path.join(params.workspaceDir, defaultFileName);
 	const outputDir = path.dirname(outputPath);
-	if (!fs.existsSync(outputDir)) {
-		fs.mkdirSync(outputDir, { recursive: true });
+	if (!syncFs.existsSync(outputDir)) {
+		syncFs.mkdirSync(outputDir, { recursive: true });
 	}
 	if (args.outputPath) {
-		fs.writeFileSync(outputPath, html, "utf-8");
+		syncFs.writeFileSync(outputPath, html, "utf-8");
 	} else {
 		outputPath = writeNewDefaultExportFile(outputPath, html);
 	}

package/dist/auto-reply/reply/directive-handling.fast-lane.js

@@ -4,7 +4,7 @@ import { isDirectiveOnly } from "./directive-handling.parse.js";
 
 //#region src/auto-reply/reply/directive-handling.fast-lane.ts
 async function applyInlineDirectivesFastLane(params) {
-	const { directives, commandAuthorized, ctx, cfg, agentId, isGroup, sessionEntry, sessionStore, sessionKey, storePath, elevatedEnabled, elevatedAllowed, elevatedFailures, messageProviderKey, defaultProvider, defaultModel, aliasIndex, allowedModelKeys, allowedModelCatalog, resetModelOverride, formatModelSwitchEvent, modelState } = params;
+	const { directives, commandAuthorized, ctx, cfg, agentId, isGroup, sessionEntry, sessionStore, sessionKey, storePath, elevatedEnabled, elevatedAllowed, elevatedFailures, messageProviderKey, defaultProvider, defaultModel, aliasIndex, allowAnyModel, allowedModelKeys, allowedModelCatalog, resetModelOverride, formatModelSwitchEvent, modelState } = params;
 	let { provider, model } = params;
 	if (!commandAuthorized || isDirectiveOnly({
 		directives,
@@ -40,6 +40,7 @@ async function applyInlineDirectivesFastLane(params) {
 		defaultProvider,
 		defaultModel,
 		aliasIndex,
+		allowAnyModel,
 		allowedModelKeys,
 		allowedModelCatalog,
 		resetModelOverride,

package/dist/auto-reply/reply/directive-handling.impl.js

@@ -24,7 +24,7 @@ function resolveExecDefaults(params) {
 	};
 }
 async function handleDirectiveOnly(params) {
-	const { directives, sessionEntry, sessionStore, sessionKey, storePath, elevatedEnabled, elevatedAllowed, defaultProvider, defaultModel, aliasIndex, allowedModelKeys, allowedModelCatalog, resetModelOverride, provider, model, initialModelLabel, formatModelSwitchEvent, currentThinkLevel, currentVerboseLevel, currentReasoningLevel, currentElevatedLevel } = params;
+	const { directives, sessionEntry, sessionStore, sessionKey, storePath, elevatedEnabled, elevatedAllowed, defaultProvider, defaultModel, aliasIndex, allowAnyModel, allowedModelKeys, allowedModelCatalog, resetModelOverride, provider, model, initialModelLabel, formatModelSwitchEvent, currentThinkLevel, currentVerboseLevel, currentReasoningLevel, currentElevatedLevel } = params;
 	const activeAgentId = resolveSessionAgentId({
 		sessionKey: params.sessionKey,
 		config: params.cfg
@@ -60,6 +60,7 @@ async function handleDirectiveOnly(params) {
 		defaultProvider,
 		defaultModel,
 		aliasIndex,
+		allowAnyModel,
 		allowedModelKeys,
 		allowedModelCatalog,
 		provider

package/dist/auto-reply/reply/directive-handling.model.js

@@ -283,7 +283,7 @@ function resolveModelSelectionFromDirective(params) {
 	});
 	if (explicit) {
 		const explicitKey = modelKey(explicit.ref.provider, explicit.ref.model);
-		if (params.allowedModelKeys.size === 0 || params.allowedModelKeys.has(explicitKey)) {
+		if (params.allowAnyModel || params.allowedModelKeys.has(explicitKey)) {
 			modelSelection = {
 				provider: explicit.ref.provider,
 				model: explicit.ref.model,
@@ -298,6 +298,7 @@ function resolveModelSelectionFromDirective(params) {
 			defaultProvider: params.defaultProvider,
 			defaultModel: params.defaultModel,
 			aliasIndex: params.aliasIndex,
+			allowAnyModel: params.allowAnyModel,
 			allowedModelKeys: params.allowedModelKeys
 		});
 		if (resolved.error) {

package/dist/auto-reply/reply/directive-handling.persist.js

@@ -12,7 +12,7 @@ import { enqueueModeSwitchEvents } from "./directive-handling.shared.js";
 
 //#region src/auto-reply/reply/directive-handling.persist.ts
 async function persistInlineDirectives(params) {
-	const { directives, cfg, sessionEntry, sessionStore, sessionKey, storePath, elevatedEnabled, elevatedAllowed, defaultProvider, defaultModel, aliasIndex, allowedModelKeys, initialModelLabel, formatModelSwitchEvent, agentCfg } = params;
+	const { directives, cfg, sessionEntry, sessionStore, sessionKey, storePath, elevatedEnabled, elevatedAllowed, defaultProvider, defaultModel, aliasIndex, allowAnyModel, allowedModelKeys, initialModelLabel, formatModelSwitchEvent, agentCfg } = params;
 	let { provider, model } = params;
 	const activeAgentId = sessionKey ? resolveSessionAgentId({
 		sessionKey,
@@ -74,7 +74,7 @@ async function persistInlineDirectives(params) {
 			});
 			if (resolved) {
 				const key = modelKey(resolved.ref.provider, resolved.ref.model);
-				if (allowedModelKeys.size === 0 || allowedModelKeys.has(key)) {
+				if (allowAnyModel || allowedModelKeys.has(key)) {
 					let profileOverride;
 					if (directives.rawModelProfile) {
 						const profileResolved = resolveProfileOverride({

package/dist/auto-reply/reply/get-reply-directives-apply.js

@@ -15,6 +15,7 @@ async function applyInlineDirectiveOverrides(params) {
 	let { provider, model } = params;
 	let { contextTokens } = params;
 	const directiveModelState = {
+		allowAnyModel: modelState.allowAnyModel,
 		allowedModelKeys: modelState.allowedModelKeys,
 		allowedModelCatalog: modelState.allowedModelCatalog,
 		resetModelOverride: modelState.resetModelOverride
@@ -155,6 +156,7 @@ async function applyInlineDirectiveOverrides(params) {
 		defaultProvider,
 		defaultModel,
 		aliasIndex,
+		allowAnyModel: modelState.allowAnyModel,
 		allowedModelKeys: modelState.allowedModelKeys,
 		provider,
 		model,

package/dist/auto-reply/reply/get-reply-inline-actions.js

@@ -5,6 +5,8 @@ import { applyOwnerOnlyToolPolicy } from "../../agents/tool-policy.js";
 import { generateSecureToken } from "../../infra/secure-random.js";
 import { clearAbortCutoffInSession, readAbortCutoffFromSessionEntry, resolveAbortCutoffFromContext, shouldSkipMessageByAbortCutoff } from "./abort-cutoff.js";
 import { getAbortMemory, isAbortRequestText } from "./abort.js";
+import { readClawHubSkillOrigin } from "../../agents/skills-clawhub.js";
+import { isMarketplaceSkillDir, marketplaceSkillProvenanceMatchesContent } from "../../agents/skills/trust.js";
 import { createFasedAgentTools } from "../../agents/fased-tools.js";
 import { collectTextContentBlocks } from "../../agents/content-blocks.js";
 import { listReservedChatSlashCommandNames, listSkillCommandsForWorkspace, resolveSkillCommandInvocation } from "../skill-commands.js";
@@ -14,6 +16,7 @@ import { isDirectiveOnly } from "./directive-handling.parse.js";
 import "./directive-handling.js";
 import "./commands.js";
 import { extractInlineSimpleCommand } from "./reply-inline.js";
+import path from "node:path";
 
 //#region src/auto-reply/reply/get-reply-inline-actions.ts
 const builtinSlashCommands = (() => {
@@ -77,6 +80,24 @@ async function handleInlineActions(params) {
 		}
 		const dispatch = skillInvocation.command.dispatch;
 		if (dispatch?.kind === "tool") {
+			const sourceFile = skillInvocation.command.sourceFilePath?.trim();
+			const skillDir = sourceFile ? path.dirname(sourceFile) : "";
+			const marketplaceSkill = Boolean(skillDir && isMarketplaceSkillDir(skillDir));
+			const marketplaceOrigin = skillDir ? await readClawHubSkillOrigin(skillDir) : null;
+			if (marketplaceSkill && (!marketplaceOrigin || !marketplaceSkillProvenanceMatchesContent(skillDir))) {
+				typing.cleanup();
+				return {
+					kind: "reply",
+					reply: { text: `❌ Marketplace skill ${skillInvocation.command.skillName} failed its installed-content integrity check. Reinstall the reviewed archive before using direct tool commands.` }
+				};
+			}
+			if (marketplaceOrigin && !(marketplaceOrigin.permissions?.toolAccess ?? []).includes(dispatch.toolName)) {
+				typing.cleanup();
+				return {
+					kind: "reply",
+					reply: { text: `❌ Marketplace skill ${marketplaceOrigin.slug} is not authorized for tool ${dispatch.toolName}. Reinstall a reviewed version whose manifest explicitly requests that tool.` }
+				};
+			}
 			const rawArgs = (skillInvocation.args ?? "").trim();
 			const channel = resolveGatewayMessageChannel(ctx.Surface) ?? resolveGatewayMessageChannel(ctx.Provider) ?? undefined;
 			const tools = createFasedAgentTools({
@@ -122,7 +143,10 @@ async function handleInlineActions(params) {
 				};
 			}
 		}
-		const promptParts = [`Use the "${skillInvocation.command.skillName}" skill for this request.`, skillInvocation.args ? `User input:\n${skillInvocation.args}` : null].filter((entry) => Boolean(entry));
+		const commandTemplate = skillInvocation.command.promptTemplate?.trim();
+		const commandArgs = skillInvocation.args?.trim();
+		const renderedTemplate = commandTemplate ? commandTemplate.includes("$ARGUMENTS") ? commandTemplate.replaceAll("$ARGUMENTS", commandArgs ?? "") : commandTemplate : null;
+		const promptParts = [renderedTemplate ?? `Use the "${skillInvocation.command.skillName}" skill for this request.`, commandArgs && (!renderedTemplate || !commandTemplate?.includes("$ARGUMENTS")) ? `User input:\n${commandArgs}` : null].filter((entry) => Boolean(entry));
 		const rewrittenBody = promptParts.join("\n\n");
 		ctx.Body = rewrittenBody;
 		ctx.BodyForAgent = rewrittenBody;

package/dist/auto-reply/reply/model-selection.js

@@ -207,6 +207,7 @@ async function createModelSelectionState(params) {
 	const needsModelCatalog = params.hasModelDirective || hasAllowlist || hasStoredOverride;
 	let allowedModelKeys = new Set();
 	let allowedModelCatalog = [];
+	let allowAnyModel = true;
 	let modelCatalog = null;
 	let resetModelOverride = false;
 	if (needsModelCatalog) {
@@ -228,13 +229,14 @@ async function createModelSelectionState(params) {
 		});
 		allowedModelCatalog = allowed.allowedCatalog;
 		allowedModelKeys = allowed.allowedKeys;
+		allowAnyModel = allowed.allowAny;
 	}
 	if (sessionEntry && sessionStore && sessionKey && hasStoredOverride) {
 		const overrideProvider = sessionEntry.providerOverride?.trim() || defaultProvider;
 		const overrideModel = sessionEntry.modelOverride?.trim();
 		if (overrideModel) {
 			const key = modelKey(overrideProvider, overrideModel);
-			if (allowedModelKeys.size > 0 && !allowedModelKeys.has(key)) {
+			if (!allowAnyModel && !allowedModelKeys.has(key)) {
 				const { updated } = applyModelOverrideToSessionEntry({
 					entry: sessionEntry,
 					selection: {
@@ -265,7 +267,7 @@ async function createModelSelectionState(params) {
 	if (storedOverride?.model && !skipStoredOverride) {
 		const candidateProvider = storedOverride.provider || defaultProvider;
 		const key = modelKey(candidateProvider, storedOverride.model);
-		if (allowedModelKeys.size === 0 || allowedModelKeys.has(key)) {
+		if (allowAnyModel || allowedModelKeys.has(key)) {
 			provider = candidateProvider;
 			model = storedOverride.model;
 		}
@@ -318,6 +320,7 @@ async function createModelSelectionState(params) {
 	return {
 		provider,
 		model,
+		allowAnyModel,
 		allowedModelKeys,
 		allowedModelCatalog,
 		resetModelOverride,
@@ -327,7 +330,7 @@ async function createModelSelectionState(params) {
 	};
 }
 function resolveModelDirectiveSelection(params) {
-	const { raw, defaultProvider, defaultModel, aliasIndex, allowedModelKeys } = params;
+	const { raw, defaultProvider, defaultModel, aliasIndex, allowAnyModel, allowedModelKeys } = params;
 	const rawTrimmed = raw.trim();
 	const rawLower = rawTrimmed.toLowerCase();
 	const pickAliasForKey = (provider, model) => aliasIndex.byKey.get(modelKey(provider, model))?.[0];
@@ -438,7 +441,7 @@ function resolveModelDirectiveSelection(params) {
 		return { error: `Unrecognized model "${rawTrimmed}". Use /models to list providers, or /models <provider> to list models.` };
 	}
 	const resolvedKey = modelKey(resolved.ref.provider, resolved.ref.model);
-	if (allowedModelKeys.size === 0 || allowedModelKeys.has(resolvedKey)) {
+	if (allowAnyModel || allowedModelKeys.has(resolvedKey)) {
 		return { selection: {
 			provider: resolved.ref.provider,
 			model: resolved.ref.model,

package/dist/auto-reply/reply/post-compaction-audit.js

@@ -1,4 +1,4 @@
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/auto-reply/reply/post-compaction-audit.ts
@@ -38,11 +38,11 @@ function auditPostCompactionReads(readFilePaths, workspaceDir, requiredReads = D
 * Returns messages from the last N lines (default 100).
 */
 function readSessionMessages(sessionFile, maxLines = 100) {
-	if (!fs.existsSync(sessionFile)) {
+	if (!syncFs.existsSync(sessionFile)) {
 		return [];
 	}
 	try {
-		const content = fs.readFileSync(sessionFile, "utf-8");
+		const content = syncFs.readFileSync(sessionFile, "utf-8");
 		const lines = content.trim().split("\n");
 		const recentLines = lines.slice(-maxLines);
 		const messages = [];

package/dist/auto-reply/reply/post-compaction-context.js

@@ -1,4 +1,4 @@
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 
 //#region src/auto-reply/reply/post-compaction-context.ts
@@ -10,10 +10,10 @@ const MAX_CONTEXT_CHARS = 3e3;
 async function readPostCompactionContext(workspaceDir) {
 	const agentsPath = path.join(workspaceDir, "AGENTS.md");
 	try {
-		if (!fs.existsSync(agentsPath)) {
+		if (!syncFs.existsSync(agentsPath)) {
 			return null;
 		}
-		const content = await fs.promises.readFile(agentsPath, "utf-8");
+		const content = await syncFs.promises.readFile(agentsPath, "utf-8");
 		const sections = extractSections(content, ["Session Startup", "Red Lines"]);
 		if (sections.length === 0) {
 			return null;

package/dist/auto-reply/reply/session-reset-model.js

@@ -29,7 +29,7 @@ function buildSelectionFromExplicit(params) {
 		return undefined;
 	}
 	const key = modelKey(resolved.ref.provider, resolved.ref.model);
-	if (params.allowedModelKeys.size > 0 && !params.allowedModelKeys.has(key)) {
+	if (!params.allowAnyModel && !params.allowedModelKeys.has(key)) {
 		return undefined;
 	}
 	const isDefault = resolved.ref.provider === params.defaultProvider && resolved.ref.model === params.defaultModel;
@@ -82,10 +82,8 @@ async function applyResetModelOverride(params) {
 			config: params.cfg
 		}) : resolveDefaultAgentId(params.cfg)), { allowKeychainPrompt: false })
 	});
+	const allowAnyModel = allowed.allowAny;
 	const allowedModelKeys = allowed.allowedKeys;
-	if (allowedModelKeys.size === 0) {
-		return {};
-	}
 	const providers = new Set();
 	for (const key of allowedModelKeys) {
 		const slash = key.indexOf("/");
@@ -99,6 +97,7 @@ async function applyResetModelOverride(params) {
 		defaultProvider: params.defaultProvider,
 		defaultModel: params.defaultModel,
 		aliasIndex: params.aliasIndex,
+		allowAnyModel,
 		allowedModelKeys
 	});
 	let selection;
@@ -117,6 +116,7 @@ async function applyResetModelOverride(params) {
 			defaultProvider: params.defaultProvider,
 			defaultModel: params.defaultModel,
 			aliasIndex: params.aliasIndex,
+			allowAnyModel,
 			allowedModelKeys
 		});
 		if (selection) {

package/dist/auto-reply/reply/session.js

@@ -20,7 +20,7 @@ import { getGlobalHookRunner } from "../../plugins/hook-runner-global.js";
 import { resolveCommandAuthorization } from "../command-auth.js";
 import { stripMentions, stripStructuralPrefixes } from "./mentions.js";
 import { deliverSessionMaintenanceWarning } from "../../infra/session-maintenance-warning.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 import path from "node:path";
 import crypto from "node:crypto";
 import { CURRENT_SESSION_VERSION, SessionManager } from "@mariozechner/pi-coding-agent";
@@ -85,7 +85,7 @@ function forkSessionFromParent(params) {
 		agentId: params.agentId,
 		sessionsDir: params.sessionsDir
 	});
-	if (!parentSessionFile || !fs.existsSync(parentSessionFile)) {
+	if (!parentSessionFile || !syncFs.existsSync(parentSessionFile)) {
 		return null;
 	}
 	try {
@@ -113,7 +113,7 @@ function forkSessionFromParent(params) {
 			cwd: manager.getCwd(),
 			parentSession: parentSessionFile
 		};
-		fs.writeFileSync(sessionFile, `${JSON.stringify(header)}\n`, "utf-8");
+		syncFs.writeFileSync(sessionFile, `${JSON.stringify(header)}\n`, "utf-8");
 		return {
 			sessionId,
 			sessionFile

package/dist/auto-reply/skill-commands.js

@@ -3,7 +3,7 @@ import { listChatCommands } from "./commands-registry.js";
 import { buildWorkspaceSkillCommandSpecs } from "../agents/skills/workspace.js";
 import "../agents/skills.js";
 import { getRemoteSkillEligibility } from "../infra/skills-remote.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 
 //#region src/auto-reply/skill-commands.ts
 function listReservedChatSlashCommandNames(extraNames = []) {
@@ -43,10 +43,10 @@ function listSkillCommandsForAgents(params) {
 	const visitedDirs = new Set();
 	for (const agentId of agentIds) {
 		const workspaceDir = resolveAgentWorkspaceDir(params.cfg, agentId);
-		if (!fs.existsSync(workspaceDir)) {
+		if (!syncFs.existsSync(workspaceDir)) {
 			continue;
 		}
-		const canonicalDir = fs.realpathSync(workspaceDir);
+		const canonicalDir = syncFs.realpathSync(workspaceDir);
 		if (visitedDirs.has(canonicalDir)) {
 			continue;
 		}

package/dist/auto-reply/status.js

@@ -20,7 +20,7 @@ import { formatProviderModelRef, resolveSelectedAndActiveModel } from "./model-r
 import { resolveActiveFallbackState } from "./fallback-state.js";
 import { resolveSandboxRuntimeStatus } from "../agents/sandbox/runtime-status.js";
 import "../agents/sandbox.js";
-import fs from "node:fs";
+import syncFs from "node:fs";
 
 //#region src/auto-reply/status.ts
 const formatTokenCount = formatTokenCount$1;
@@ -135,19 +135,19 @@ const readUsageFromSessionLog = (sessionId, sessionEntry, agentId, sessionKey, s
 	} catch {
 		return undefined;
 	}
-	if (!fs.existsSync(logPath)) {
+	if (!syncFs.existsSync(logPath)) {
 		return undefined;
 	}
 	try {
 		const TAIL_BYTES = 8192;
-		const stat = fs.statSync(logPath);
+		const stat = syncFs.statSync(logPath);
 		const offset = Math.max(0, stat.size - TAIL_BYTES);
 		const buf = Buffer.alloc(Math.min(TAIL_BYTES, stat.size));
-		const fd = fs.openSync(logPath, "r");
+		const fd = syncFs.openSync(logPath, "r");
 		try {
-			fs.readSync(fd, buf, 0, buf.length, offset);
+			syncFs.readSync(fd, buf, 0, buf.length, offset);
 		} finally {
-			fs.closeSync(fd);
+			syncFs.closeSync(fd);
 		}
 		const tail = buf.toString("utf-8");
 		const lines = (offset > 0 ? tail.slice(tail.indexOf("\n") + 1) : tail).split(/\n+/);

package/dist/brand.js

@@ -2,7 +2,7 @@
 const FASED_BRAND_NAME = "Fased";
 const FASED_AGENT_NAME = "Fased Agent";
 const FASED_CONTROL_NAME = "Fased Control";
-const FASED_PRODUCT_VERSION = "0.1.61";
+const FASED_PRODUCT_VERSION = "0.1.64";
 const FASED_DISPLAY_VERSION = `v${FASED_PRODUCT_VERSION}`;
 function formatFasedDisplayLine() {
 	return `${FASED_AGENT_NAME} ${FASED_DISPLAY_VERSION}`;

package/dist/browser/chrome.executables.js

@@ -1,4 +1,4 @@
-import fs from "node:fs";
+import syncFs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { execFileSync } from "node:child_process";
@@ -79,7 +79,7 @@ const CHROMIUM_EXE_NAMES = new Set([
 ]);
 function exists(filePath) {
 	try {
-		return fs.existsSync(filePath);
+		return syncFs.existsSync(filePath);
 	} catch {
 		return false;
 	}
@@ -295,7 +295,7 @@ function findDesktopFilePath(desktopId) {
 }
 function readDesktopExecLine(desktopPath) {
 	try {
-		const raw = fs.readFileSync(desktopPath, "utf8");
+		const raw = syncFs.readFileSync(desktopPath, "utf8");
 		const lines = raw.split(/\r?\n/);
 		for (const line of lines) {
 			if (line.startsWith("Exec=")) {