@astralyn/pi 0.85.1 → 0.85.2

package/dist/extensions/provider/connection.js

@@ -0,0 +1,86 @@
+/** Saved provider configuration, canonical authentication, and catalog import operations. */
+import { raceWithAbortSignal } from "../../utils/abort.js";
+import { effectiveModelSettings } from "./configuration.js";
+import { formatError, PROBE_LIMITS } from "./constants.js";
+import { probeProviderModels } from "./probe.js";
+export async function fetchProviderModels(options, signal) {
+    const { store, refresher, runtime, providerId } = options;
+    const deadline = AbortSignal.any([signal, AbortSignal.timeout(PROBE_LIMITS.timeoutMs)]);
+    try {
+        await raceWithAbortSignal(store.flush(), deadline);
+        const unsaved = store.getPendingError(providerId);
+        if (unsaved)
+            return { ok: false, error: `Save the provider changes before fetching: ${unsaved}` };
+        const provider = store.getProvider(providerId);
+        const settings = effectiveModelSettings(providerId, provider);
+        if (!settings.baseUrl)
+            return { ok: false, error: "Set a baseUrl under API Auth first." };
+        const sync = await refresher.refreshNow(providerId, deadline);
+        deadline.throwIfAborted();
+        if (!sync.ok)
+            return { ok: false, error: `The provider did not reload: ${sync.errors.join("; ")}` };
+        const resolved = await raceWithAbortSignal(runtime.getAuth(providerId, { signal: deadline }), deadline);
+        const configured = provider?.apiKey !== undefined ||
+            provider?.authHeader === true ||
+            Object.keys(provider?.headers ?? {}).length > 0 ||
+            runtime.getProviderAuthStatus(providerId).configured;
+        if (!resolved && configured) {
+            return {
+                ok: false,
+                error: "Configured credentials or headers did not resolve; check the provider authentication.",
+            };
+        }
+        const result = await probeProviderModels({
+            baseUrl: resolved?.auth.baseUrl ?? settings.baseUrl,
+            auth: resolved?.auth,
+            api: settings.api,
+            signal: deadline,
+        });
+        deadline.throwIfAborted();
+        return result;
+    }
+    catch (error) {
+        if (deadline.aborted) {
+            return {
+                ok: false,
+                error: signal.aborted ? "Cancelled." : "Timed out while preparing or fetching the model catalog.",
+            };
+        }
+        return { ok: false, error: formatError(error) };
+    }
+}
+export async function importProviderModels(options, models, signal) {
+    const { store, refresher, providerId } = options;
+    await raceWithAbortSignal(store.flush(), signal);
+    const unsaved = store.getPendingError(providerId);
+    if (unsaved)
+        return unsaved;
+    const settings = effectiveModelSettings(providerId, store.getProvider(providerId));
+    if (!settings.api || !settings.baseUrl)
+        return "Set baseUrl and API Type under API Auth before importing models.";
+    const existing = new Set(store.getModels(providerId).map((model) => model.id));
+    const fresh = models.filter((model) => {
+        if (existing.has(model.id))
+            return false;
+        existing.add(model.id);
+        return true;
+    });
+    if (fresh.length === 0)
+        return undefined;
+    signal.throwIfAborted();
+    store.batch(() => {
+        for (const model of fresh)
+            store.addModel(providerId, model.name ? { id: model.id, name: model.name } : { id: model.id });
+    });
+    refresher.touch(providerId);
+    // These edits were confirmed. Finish the write even if the originating pane closes.
+    await store.flush();
+    const saveError = store.getPendingError(providerId);
+    if (saveError)
+        return saveError;
+    const outcome = await refresher.refreshNow(providerId, signal);
+    if (!outcome.ok)
+        return `Models were saved, but refresh failed: ${outcome.errors.join("; ")}`;
+    return undefined;
+}
+//# sourceMappingURL=connection.js.map

package/dist/extensions/provider/connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.js","sourceRoot":"","sources":["../../../src/extensions/provider/connection.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAG7F,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAqC,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAWpF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,OAAkC,EAClC,MAAmB;IAEnB,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAC1D,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACxF,IAAI,CAAC;QACJ,MAAM,mBAAmB,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,QAAQ,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,KAAK,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8CAA8C,OAAO,EAAE,EAAE,CAAC;QAClG,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,sBAAsB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ,CAAC,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;QAC1F,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC9D,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,gCAAgC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QACpG,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;QACxG,MAAM,UAAU,GACf,QAAQ,EAAE,MAAM,KAAK,SAAS;YAC9B,QAAQ,EAAE,UAAU,KAAK,IAAI;YAC7B,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;YAC/C,OAAO,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC,UAAU,CAAC;QACtD,IAAI,CAAC,QAAQ,IAAI,UAAU,EAAE,CAAC;YAC7B,OAAO;gBACN,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,uFAAuF;aAC9F,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC;YACxC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO;YACnD,IAAI,EAAE,QAAQ,EAAE,IAAI;YACpB,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,MAAM,EAAE,QAAQ;SAChB,CAAC,CAAC;QACH,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,OAAO;gBACN,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,0DAA0D;aACjG,CAAC;QACH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;IACjD,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACzC,OAAkC,EAClC,MAA6B,EAC7B,MAAmB;IAEnB,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IACjD,MAAM,mBAAmB,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,KAAK,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;IAClD,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,MAAM,QAAQ,GAAG,sBAAsB,CAAC,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC;IACnF,IAAI,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,kEAAkE,CAAC;IAClH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACrC,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QACzC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC;IACb,CAAC,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,CAAC,cAAc,EAAE,CAAC;IACxB,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE;QAChB,KAAK,MAAM,KAAK,IAAI,KAAK;YACxB,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IACH,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5B,oFAAoF;IACpF,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACpB,MAAM,SAAS,GAAG,KAAK,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,SAAS;QAAE,OAAO,SAAS,CAAC;IAChC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC/D,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,0CAA0C,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC9F,OAAO,SAAS,CAAC;AAClB,CAAC","sourcesContent":["/** Saved provider configuration, canonical authentication, and catalog import operations. */\n\nimport type { ModelRuntime } from \"../../core/model-runtime.ts\";\nimport { raceWithAbortSignal } from \"../../utils/abort.ts\";\nimport { effectiveModelSettings } from \"./configuration.ts\";\nimport { formatError, PROBE_LIMITS } from \"./constants.ts\";\nimport { type ProbeModel, type ProbeResult, probeProviderModels } from \"./probe.ts\";\nimport type { RefreshCoordinator } from \"./refresh.ts\";\nimport type { ModelsJsonStore } from \"./store.ts\";\n\nexport interface ProviderConnectionOptions {\n\tstore: ModelsJsonStore;\n\trefresher: RefreshCoordinator;\n\tproviderId: string;\n\truntime: Pick<ModelRuntime, \"getAuth\" | \"getProviderAuthStatus\">;\n}\n\nexport async function fetchProviderModels(\n\toptions: ProviderConnectionOptions,\n\tsignal: AbortSignal,\n): Promise<ProbeResult> {\n\tconst { store, refresher, runtime, providerId } = options;\n\tconst deadline = AbortSignal.any([signal, AbortSignal.timeout(PROBE_LIMITS.timeoutMs)]);\n\ttry {\n\t\tawait raceWithAbortSignal(store.flush(), deadline);\n\t\tconst unsaved = store.getPendingError(providerId);\n\t\tif (unsaved) return { ok: false, error: `Save the provider changes before fetching: ${unsaved}` };\n\t\tconst provider = store.getProvider(providerId);\n\t\tconst settings = effectiveModelSettings(providerId, provider);\n\t\tif (!settings.baseUrl) return { ok: false, error: \"Set a baseUrl under API Auth first.\" };\n\t\tconst sync = await refresher.refreshNow(providerId, deadline);\n\t\tdeadline.throwIfAborted();\n\t\tif (!sync.ok) return { ok: false, error: `The provider did not reload: ${sync.errors.join(\"; \")}` };\n\t\tconst resolved = await raceWithAbortSignal(runtime.getAuth(providerId, { signal: deadline }), deadline);\n\t\tconst configured =\n\t\t\tprovider?.apiKey !== undefined ||\n\t\t\tprovider?.authHeader === true ||\n\t\t\tObject.keys(provider?.headers ?? {}).length > 0 ||\n\t\t\truntime.getProviderAuthStatus(providerId).configured;\n\t\tif (!resolved && configured) {\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terror: \"Configured credentials or headers did not resolve; check the provider authentication.\",\n\t\t\t};\n\t\t}\n\t\tconst result = await probeProviderModels({\n\t\t\tbaseUrl: resolved?.auth.baseUrl ?? settings.baseUrl,\n\t\t\tauth: resolved?.auth,\n\t\t\tapi: settings.api,\n\t\t\tsignal: deadline,\n\t\t});\n\t\tdeadline.throwIfAborted();\n\t\treturn result;\n\t} catch (error) {\n\t\tif (deadline.aborted) {\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terror: signal.aborted ? \"Cancelled.\" : \"Timed out while preparing or fetching the model catalog.\",\n\t\t\t};\n\t\t}\n\t\treturn { ok: false, error: formatError(error) };\n\t}\n}\n\nexport async function importProviderModels(\n\toptions: ProviderConnectionOptions,\n\tmodels: readonly ProbeModel[],\n\tsignal: AbortSignal,\n): Promise<string | undefined> {\n\tconst { store, refresher, providerId } = options;\n\tawait raceWithAbortSignal(store.flush(), signal);\n\tconst unsaved = store.getPendingError(providerId);\n\tif (unsaved) return unsaved;\n\tconst settings = effectiveModelSettings(providerId, store.getProvider(providerId));\n\tif (!settings.api || !settings.baseUrl) return \"Set baseUrl and API Type under API Auth before importing models.\";\n\tconst existing = new Set(store.getModels(providerId).map((model) => model.id));\n\tconst fresh = models.filter((model) => {\n\t\tif (existing.has(model.id)) return false;\n\t\texisting.add(model.id);\n\t\treturn true;\n\t});\n\tif (fresh.length === 0) return undefined;\n\tsignal.throwIfAborted();\n\tstore.batch(() => {\n\t\tfor (const model of fresh)\n\t\t\tstore.addModel(providerId, model.name ? { id: model.id, name: model.name } : { id: model.id });\n\t});\n\trefresher.touch(providerId);\n\t// These edits were confirmed. Finish the write even if the originating pane closes.\n\tawait store.flush();\n\tconst saveError = store.getPendingError(providerId);\n\tif (saveError) return saveError;\n\tconst outcome = await refresher.refreshNow(providerId, signal);\n\tif (!outcome.ok) return `Models were saved, but refresh failed: ${outcome.errors.join(\"; \")}`;\n\treturn undefined;\n}\n"]}

package/dist/extensions/provider/constants.d.ts

@@ -0,0 +1,38 @@
+/** Shared constants for the /provider extension. */
+import type { Api, ModelThinkingLevel } from "@earendil-works/pi-ai";
+export declare const COMMAND_NAME = "provider";
+export declare const COMMAND_DESCRIPTION = "Manage models.json providers: connection, API type, and models";
+export declare const NO_UI_WARNING = "/provider requires interactive TUI mode.";
+export declare const NO_MODELS_FILE_WARNING = "models.json is disabled for this runtime (custom SDK configuration), so /provider is unavailable.";
+/**
+ * API types offered in the single-select list. The four common custom-endpoint
+ * protocols come first; the rest follow in stable order. Custom api strings
+ * already present in models.json are preserved and appended at render time.
+ */
+export declare const API_TYPES: readonly Api[];
+/** Input modality options. Adding a type also requires pi-ai Model.input and the models.json schema to support it. */
+export declare const INPUT_TYPES: readonly ["text", "image"];
+export type InputType = (typeof INPUT_TYPES)[number];
+export declare const THINKING_LEVELS: readonly ModelThinkingLevel[];
+/** GET {baseUrl}/models limits. */
+export declare const PROBE_LIMITS: {
+    readonly timeoutMs: 10000;
+    readonly maxBodyBytes: number;
+    readonly maxErrorBytes: 4096;
+    readonly maxErrorChars: 400;
+    readonly maxModels: 2000;
+};
+/** Maximum reference candidates offered by Use Built-in Data. */
+export declare const MAX_CANDIDATES = 8;
+/** Runtime refresh deadline when leaving /provider or after a fetch import. */
+export declare const REFRESH_TIMEOUT_MS = 15000;
+export declare function formatError(error: unknown): string;
+/** `1 entry` / `2 entries` — handles the -y → -ies case. */
+export declare function plural(count: number, word: string): string;
+/** Display truncate by characters (rows are width-truncated again at render time). */
+export declare function truncate(value: string, max: number): string;
+/** Mask a literal API key for display. Env/command references stay verbatim; the mask is never saved. */
+export declare function maskApiKey(value: string): string;
+/** True when the raw apiKey value is an env/command reference rather than a literal secret. */
+export declare function isApiKeyReference(value: string): boolean;
+//# sourceMappingURL=constants.d.ts.map

package/dist/extensions/provider/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/extensions/provider/constants.ts"],"names":[],"mappings":"AAAA,oDAAoD;AAEpD,OAAO,KAAK,EAAE,GAAG,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAErE,eAAO,MAAM,YAAY,aAAa,CAAC;AACvC,eAAO,MAAM,mBAAmB,mEAAmE,CAAC;AACpG,eAAO,MAAM,aAAa,6CAA6C,CAAC;AACxE,eAAO,MAAM,sBAAsB,sGACiE,CAAC;AAErG;;;;GAIG;AACH,eAAO,MAAM,SAAS,EAAE,SAAS,GAAG,EAWnC,CAAC;AAEF,sHAAsH;AACtH,eAAO,MAAM,WAAW,4BAA6B,CAAC;AACtD,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD,eAAO,MAAM,eAAe,EAAE,SAAS,kBAAkB,EAQxD,CAAC;AAEF,mCAAmC;AACnC,eAAO,MAAM,YAAY;;;;;;CAMf,CAAC;AAEX,iEAAiE;AACjE,eAAO,MAAM,cAAc,IAAI,CAAC;AAEhC,+EAA+E;AAC/E,eAAO,MAAM,kBAAkB,QAAS,CAAC;AAEzC,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAElD;AAED,4DAA4D;AAC5D,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAG1D;AAED,sFAAsF;AACtF,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAG3D;AAED,yGAAyG;AACzG,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKhD;AAED,+FAA+F;AAC/F,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAExD"}

package/dist/extensions/provider/constants.js

@@ -0,0 +1,75 @@
+/** Shared constants for the /provider extension. */
+export const COMMAND_NAME = "provider";
+export const COMMAND_DESCRIPTION = "Manage models.json providers: connection, API type, and models";
+export const NO_UI_WARNING = "/provider requires interactive TUI mode.";
+export const NO_MODELS_FILE_WARNING = "models.json is disabled for this runtime (custom SDK configuration), so /provider is unavailable.";
+/**
+ * API types offered in the single-select list. The four common custom-endpoint
+ * protocols come first; the rest follow in stable order. Custom api strings
+ * already present in models.json are preserved and appended at render time.
+ */
+export const API_TYPES = [
+    "openai-responses",
+    "openai-completions",
+    "anthropic-messages",
+    "google-generative-ai",
+    "azure-openai-responses",
+    "openai-codex-responses",
+    "mistral-conversations",
+    "google-vertex",
+    "bedrock-converse-stream",
+    "pi-messages",
+];
+/** Input modality options. Adding a type also requires pi-ai Model.input and the models.json schema to support it. */
+export const INPUT_TYPES = ["text", "image"];
+export const THINKING_LEVELS = [
+    "off",
+    "minimal",
+    "low",
+    "medium",
+    "high",
+    "xhigh",
+    "max",
+];
+/** GET {baseUrl}/models limits. */
+export const PROBE_LIMITS = {
+    timeoutMs: 10_000,
+    maxBodyBytes: 4 * 1024 * 1024,
+    maxErrorBytes: 4_096,
+    maxErrorChars: 400,
+    maxModels: 2_000,
+};
+/** Maximum reference candidates offered by Use Built-in Data. */
+export const MAX_CANDIDATES = 8;
+/** Runtime refresh deadline when leaving /provider or after a fetch import. */
+export const REFRESH_TIMEOUT_MS = 15_000;
+export function formatError(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+/** `1 entry` / `2 entries` — handles the -y → -ies case. */
+export function plural(count, word) {
+    if (count === 1)
+        return word;
+    return word.endsWith("y") ? `${word.slice(0, -1)}ies` : `${word}s`;
+}
+/** Display truncate by characters (rows are width-truncated again at render time). */
+export function truncate(value, max) {
+    if (value.length <= max)
+        return value;
+    return `${value.slice(0, Math.max(0, max - 1))}…`;
+}
+/** Mask a literal API key for display. Env/command references stay verbatim; the mask is never saved. */
+export function maskApiKey(value) {
+    if (!value)
+        return value;
+    if (value.startsWith("$") || value.startsWith("!"))
+        return value;
+    if (value.length <= 8)
+        return "••••••";
+    return `••••••${value.slice(-4)}`;
+}
+/** True when the raw apiKey value is an env/command reference rather than a literal secret. */
+export function isApiKeyReference(value) {
+    return value.startsWith("$") || value.startsWith("!");
+}
+//# sourceMappingURL=constants.js.map

package/dist/extensions/provider/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/extensions/provider/constants.ts"],"names":[],"mappings":"AAAA,oDAAoD;AAIpD,MAAM,CAAC,MAAM,YAAY,GAAG,UAAU,CAAC;AACvC,MAAM,CAAC,MAAM,mBAAmB,GAAG,gEAAgE,CAAC;AACpG,MAAM,CAAC,MAAM,aAAa,GAAG,0CAA0C,CAAC;AACxE,MAAM,CAAC,MAAM,sBAAsB,GAClC,mGAAmG,CAAC;AAErG;;;;GAIG;AACH,MAAM,CAAC,MAAM,SAAS,GAAmB;IACxC,kBAAkB;IAClB,oBAAoB;IACpB,oBAAoB;IACpB,sBAAsB;IACtB,wBAAwB;IACxB,wBAAwB;IACxB,uBAAuB;IACvB,eAAe;IACf,yBAAyB;IACzB,aAAa;CACb,CAAC;AAEF,sHAAsH;AACtH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,OAAO,CAAU,CAAC;AAGtD,MAAM,CAAC,MAAM,eAAe,GAAkC;IAC7D,KAAK;IACL,SAAS;IACT,KAAK;IACL,QAAQ;IACR,MAAM;IACN,OAAO;IACP,KAAK;CACL,CAAC;AAEF,mCAAmC;AACnC,MAAM,CAAC,MAAM,YAAY,GAAG;IAC3B,SAAS,EAAE,MAAM;IACjB,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;IAC7B,aAAa,EAAE,KAAK;IACpB,aAAa,EAAE,GAAG;IAClB,SAAS,EAAE,KAAK;CACP,CAAC;AAEX,iEAAiE;AACjE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAEhC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAEzC,MAAM,UAAU,WAAW,CAAC,KAAc;IACzC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,MAAM,CAAC,KAAa,EAAE,IAAY;IACjD,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC;AACpE,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,QAAQ,CAAC,KAAa,EAAE,GAAW;IAClD,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC;IACtC,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;AACnD,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,UAAU,CAAC,KAAa;IACvC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACjE,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IACvC,OAAO,SAAS,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACnC,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC9C,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACvD,CAAC","sourcesContent":["/** Shared constants for the /provider extension. */\n\nimport type { Api, ModelThinkingLevel } from \"@earendil-works/pi-ai\";\n\nexport const COMMAND_NAME = \"provider\";\nexport const COMMAND_DESCRIPTION = \"Manage models.json providers: connection, API type, and models\";\nexport const NO_UI_WARNING = \"/provider requires interactive TUI mode.\";\nexport const NO_MODELS_FILE_WARNING =\n\t\"models.json is disabled for this runtime (custom SDK configuration), so /provider is unavailable.\";\n\n/**\n * API types offered in the single-select list. The four common custom-endpoint\n * protocols come first; the rest follow in stable order. Custom api strings\n * already present in models.json are preserved and appended at render time.\n */\nexport const API_TYPES: readonly Api[] = [\n\t\"openai-responses\",\n\t\"openai-completions\",\n\t\"anthropic-messages\",\n\t\"google-generative-ai\",\n\t\"azure-openai-responses\",\n\t\"openai-codex-responses\",\n\t\"mistral-conversations\",\n\t\"google-vertex\",\n\t\"bedrock-converse-stream\",\n\t\"pi-messages\",\n];\n\n/** Input modality options. Adding a type also requires pi-ai Model.input and the models.json schema to support it. */\nexport const INPUT_TYPES = [\"text\", \"image\"] as const;\nexport type InputType = (typeof INPUT_TYPES)[number];\n\nexport const THINKING_LEVELS: readonly ModelThinkingLevel[] = [\n\t\"off\",\n\t\"minimal\",\n\t\"low\",\n\t\"medium\",\n\t\"high\",\n\t\"xhigh\",\n\t\"max\",\n];\n\n/** GET {baseUrl}/models limits. */\nexport const PROBE_LIMITS = {\n\ttimeoutMs: 10_000,\n\tmaxBodyBytes: 4 * 1024 * 1024,\n\tmaxErrorBytes: 4_096,\n\tmaxErrorChars: 400,\n\tmaxModels: 2_000,\n} as const;\n\n/** Maximum reference candidates offered by Use Built-in Data. */\nexport const MAX_CANDIDATES = 8;\n\n/** Runtime refresh deadline when leaving /provider or after a fetch import. */\nexport const REFRESH_TIMEOUT_MS = 15_000;\n\nexport function formatError(error: unknown): string {\n\treturn error instanceof Error ? error.message : String(error);\n}\n\n/** `1 entry` / `2 entries` — handles the -y → -ies case. */\nexport function plural(count: number, word: string): string {\n\tif (count === 1) return word;\n\treturn word.endsWith(\"y\") ? `${word.slice(0, -1)}ies` : `${word}s`;\n}\n\n/** Display truncate by characters (rows are width-truncated again at render time). */\nexport function truncate(value: string, max: number): string {\n\tif (value.length <= max) return value;\n\treturn `${value.slice(0, Math.max(0, max - 1))}…`;\n}\n\n/** Mask a literal API key for display. Env/command references stay verbatim; the mask is never saved. */\nexport function maskApiKey(value: string): string {\n\tif (!value) return value;\n\tif (value.startsWith(\"$\") || value.startsWith(\"!\")) return value;\n\tif (value.length <= 8) return \"••••••\";\n\treturn `••••••${value.slice(-4)}`;\n}\n\n/** True when the raw apiKey value is an env/command reference rather than a literal secret. */\nexport function isApiKeyReference(value: string): boolean {\n\treturn value.startsWith(\"$\") || value.startsWith(\"!\");\n}\n"]}

package/dist/extensions/provider/index.d.ts

@@ -0,0 +1,4 @@
+/** /provider edits the current runtime's models.json through a native TUI. */
+import type { ExtensionAPI } from "../../core/extensions/types.ts";
+export default function providerExtension(pi: ExtensionAPI): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/extensions/provider/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/extensions/provider/index.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAE9E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAYnE,MAAM,CAAC,OAAO,UAAU,iBAAiB,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CA4DhE"}

package/dist/extensions/provider/index.js

@@ -0,0 +1,65 @@
+/** /provider edits the current runtime's models.json through a native TUI. */
+import { COMMAND_DESCRIPTION, COMMAND_NAME, formatError, NO_MODELS_FILE_WARNING, NO_UI_WARNING, plural, } from "./constants.js";
+import { ModelsJsonStore } from "./store.js";
+import { createProviderApp, createProviderErrorScreen } from "./ui/app.js";
+export default function providerExtension(pi) {
+    let modelsPath;
+    pi.on("session_start", (_event, ctx) => {
+        modelsPath = ctx.modelRuntime.getModelsPath();
+    });
+    pi.registerCommand(COMMAND_NAME, {
+        description: COMMAND_DESCRIPTION,
+        getArgumentCompletions: async (prefix) => {
+            if (!modelsPath)
+                return null;
+            const load = await ModelsJsonStore.load(modelsPath);
+            if (!load.ok)
+                return null;
+            const query = prefix.trim().toLowerCase();
+            const items = load.store
+                .getProviderIds()
+                .filter((id) => id.toLowerCase().startsWith(query))
+                .map((id) => {
+                const count = load.store.getModels(id).length;
+                return {
+                    value: id,
+                    label: id,
+                    description: `${String(count)} ${plural(count, "model")}`,
+                };
+            });
+            return items.length ? items : null;
+        },
+        handler: async (args, ctx) => {
+            if (!ctx.hasUI || ctx.mode !== "tui") {
+                ctx.ui.notify(NO_UI_WARNING, "warning");
+                return;
+            }
+            const path = ctx.modelRuntime.getModelsPath();
+            modelsPath = path;
+            if (!path) {
+                ctx.ui.notify(NO_MODELS_FILE_WARNING, "warning");
+                return;
+            }
+            try {
+                const load = await ModelsJsonStore.load(path);
+                if (!load.ok) {
+                    await ctx.ui.custom((tui, _theme, _keybindings, done) => createProviderErrorScreen(tui, done, load.error));
+                    return;
+                }
+                await ctx.ui.custom((tui, theme, keybindings, done) => createProviderApp(tui, theme, keybindings, done, {
+                    store: load.store,
+                    runtime: ctx.modelRuntime,
+                    registry: ctx.modelRegistry,
+                    getCurrentModel: () => ctx.model,
+                    setModel: (model) => pi.setModel(model),
+                    notify: (message, type) => ctx.ui.notify(message, type),
+                    initialProviderId: args.trim() || undefined,
+                }));
+            }
+            catch (error) {
+                ctx.ui.notify(formatError(error), "error");
+            }
+        },
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/extensions/provider/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/extensions/provider/index.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAG9E,OAAO,EACN,mBAAmB,EACnB,YAAY,EACZ,WAAW,EACX,sBAAsB,EACtB,aAAa,EACb,MAAM,GACN,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAE3E,MAAM,CAAC,OAAO,UAAU,iBAAiB,CAAC,EAAgB;IACzD,IAAI,UAA8B,CAAC;IACnC,EAAE,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;QACtC,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,eAAe,CAAC,YAAY,EAAE;QAChC,WAAW,EAAE,mBAAmB;QAChC,sBAAsB,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACxC,IAAI,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAC;YAC7B,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACpD,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK;iBACtB,cAAc,EAAE;iBAChB,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;iBAClD,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;gBACX,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC;gBAC9C,OAAO;oBACN,KAAK,EAAE,EAAE;oBACT,KAAK,EAAE,EAAE;oBACT,WAAW,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE;iBACzD,CAAC;YACH,CAAC,CAAC,CAAC;YACJ,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACpC,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;YAC5B,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;gBACtC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;gBACxC,OAAO;YACR,CAAC;YACD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,aAAa,EAAE,CAAC;YAC9C,UAAU,GAAG,IAAI,CAAC;YAClB,IAAI,CAAC,IAAI,EAAE,CAAC;gBACX,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,sBAAsB,EAAE,SAAS,CAAC,CAAC;gBACjD,OAAO;YACR,CAAC;YACD,IAAI,CAAC;gBACJ,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC9C,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;oBACd,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAO,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,CAC7D,yBAAyB,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAChD,CAAC;oBACF,OAAO;gBACR,CAAC;gBACD,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAO,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,CAC3D,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE;oBAChD,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,OAAO,EAAE,GAAG,CAAC,YAAY;oBACzB,QAAQ,EAAE,GAAG,CAAC,aAAa;oBAC3B,eAAe,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK;oBAChC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;oBACvC,MAAM,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC;oBACvD,iBAAiB,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,SAAS;iBAC3C,CAAC,CACF,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;YAC5C,CAAC;QACF,CAAC;KACD,CAAC,CAAC;AACJ,CAAC","sourcesContent":["/** /provider edits the current runtime's models.json through a native TUI. */\n\nimport type { ExtensionAPI } from \"../../core/extensions/types.ts\";\nimport {\n\tCOMMAND_DESCRIPTION,\n\tCOMMAND_NAME,\n\tformatError,\n\tNO_MODELS_FILE_WARNING,\n\tNO_UI_WARNING,\n\tplural,\n} from \"./constants.ts\";\nimport { ModelsJsonStore } from \"./store.ts\";\nimport { createProviderApp, createProviderErrorScreen } from \"./ui/app.ts\";\n\nexport default function providerExtension(pi: ExtensionAPI): void {\n\tlet modelsPath: string | undefined;\n\tpi.on(\"session_start\", (_event, ctx) => {\n\t\tmodelsPath = ctx.modelRuntime.getModelsPath();\n\t});\n\tpi.registerCommand(COMMAND_NAME, {\n\t\tdescription: COMMAND_DESCRIPTION,\n\t\tgetArgumentCompletions: async (prefix) => {\n\t\t\tif (!modelsPath) return null;\n\t\t\tconst load = await ModelsJsonStore.load(modelsPath);\n\t\t\tif (!load.ok) return null;\n\t\t\tconst query = prefix.trim().toLowerCase();\n\t\t\tconst items = load.store\n\t\t\t\t.getProviderIds()\n\t\t\t\t.filter((id) => id.toLowerCase().startsWith(query))\n\t\t\t\t.map((id) => {\n\t\t\t\t\tconst count = load.store.getModels(id).length;\n\t\t\t\t\treturn {\n\t\t\t\t\t\tvalue: id,\n\t\t\t\t\t\tlabel: id,\n\t\t\t\t\t\tdescription: `${String(count)} ${plural(count, \"model\")}`,\n\t\t\t\t\t};\n\t\t\t\t});\n\t\t\treturn items.length ? items : null;\n\t\t},\n\t\thandler: async (args, ctx) => {\n\t\t\tif (!ctx.hasUI || ctx.mode !== \"tui\") {\n\t\t\t\tctx.ui.notify(NO_UI_WARNING, \"warning\");\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tconst path = ctx.modelRuntime.getModelsPath();\n\t\t\tmodelsPath = path;\n\t\t\tif (!path) {\n\t\t\t\tctx.ui.notify(NO_MODELS_FILE_WARNING, \"warning\");\n\t\t\t\treturn;\n\t\t\t}\n\t\t\ttry {\n\t\t\t\tconst load = await ModelsJsonStore.load(path);\n\t\t\t\tif (!load.ok) {\n\t\t\t\t\tawait ctx.ui.custom<void>((tui, _theme, _keybindings, done) =>\n\t\t\t\t\t\tcreateProviderErrorScreen(tui, done, load.error),\n\t\t\t\t\t);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tawait ctx.ui.custom<void>((tui, theme, keybindings, done) =>\n\t\t\t\t\tcreateProviderApp(tui, theme, keybindings, done, {\n\t\t\t\t\t\tstore: load.store,\n\t\t\t\t\t\truntime: ctx.modelRuntime,\n\t\t\t\t\t\tregistry: ctx.modelRegistry,\n\t\t\t\t\t\tgetCurrentModel: () => ctx.model,\n\t\t\t\t\t\tsetModel: (model) => pi.setModel(model),\n\t\t\t\t\t\tnotify: (message, type) => ctx.ui.notify(message, type),\n\t\t\t\t\t\tinitialProviderId: args.trim() || undefined,\n\t\t\t\t\t}),\n\t\t\t\t);\n\t\t\t} catch (error) {\n\t\t\t\tctx.ui.notify(formatError(error), \"error\");\n\t\t\t}\n\t\t},\n\t});\n}\n"]}

package/dist/extensions/provider/probe.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Fetch the OpenAI-style model catalog from a configured provider endpoint.
+ *
+ * Auth is resolved by the caller through ModelRuntime.getAuth() so Pi's
+ * credential precedence (auth.json > env > models.json) applies. Raw
+ * `$VAR` / `!command` placeholders never reach the wire: a failed resolution
+ * aborts before this function is called.
+ */
+import type { FetchFunction, ModelAuth } from "@earendil-works/pi-ai";
+export interface ProbeModel {
+    id: string;
+    name?: string;
+}
+export type ProbeResult = {
+    ok: true;
+    models: ProbeModel[];
+    truncated: boolean;
+} | {
+    ok: false;
+    error: string;
+};
+export declare function probeProviderModels(opts: {
+    baseUrl: string;
+    /** Resolved auth from ModelRuntime.getAuth(). Undefined = anonymous public catalog. */
+    auth?: ModelAuth;
+    /** Effective provider api; selects the protocol's auth header scheme. */
+    api?: string;
+    fetch?: FetchFunction;
+    signal?: AbortSignal;
+    timeoutMs?: number;
+}): Promise<ProbeResult>;
+/** Append a path segment, keeping the query string and avoiding duplicate slashes or a doubled /v1. */
+export declare function modelCatalogUrl(base: URL, api?: string): URL;
+//# sourceMappingURL=probe.d.ts.map

package/dist/extensions/provider/probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.d.ts","sourceRoot":"","sources":["../../../src/extensions/provider/probe.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAmB,MAAM,uBAAuB,CAAC;AAKvF,MAAM,WAAW,UAAU;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,WAAW,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,UAAU,EAAE,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,uFAAuF;IACvF,IAAI,CAAC,EAAE,SAAS,CAAC;IACjB,yEAAyE;IACzE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,WAAW,CAAC,CAmEvB;AAED,uGAAuG;AACvG,wBAAgB,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,GAAG,CAK5D"}

package/dist/extensions/provider/probe.js

@@ -0,0 +1,178 @@
+/**
+ * Fetch the OpenAI-style model catalog from a configured provider endpoint.
+ *
+ * Auth is resolved by the caller through ModelRuntime.getAuth() so Pi's
+ * credential precedence (auth.json > env > models.json) applies. Raw
+ * `$VAR` / `!command` placeholders never reach the wire: a failed resolution
+ * aborts before this function is called.
+ */
+import { stripTerminalSequences } from "@earendil-works/pi-tui";
+import { readResponseTextBounded } from "../../utils/http-response.js";
+import { formatError, PROBE_LIMITS } from "./constants.js";
+export async function probeProviderModels(opts) {
+    let baseUrl;
+    try {
+        baseUrl = new URL(opts.baseUrl);
+    }
+    catch {
+        return { ok: false, error: "Base URL is not a valid URL." };
+    }
+    if (baseUrl.protocol !== "http:" && baseUrl.protocol !== "https:") {
+        return { ok: false, error: `Unsupported protocol: ${baseUrl.protocol}` };
+    }
+    if (baseUrl.username || baseUrl.password || baseUrl.hash) {
+        return { ok: false, error: "Base URL must not contain credentials or a fragment." };
+    }
+    if (opts.signal?.aborted)
+        return { ok: false, error: "Cancelled." };
+    const controller = new AbortController();
+    const timeoutMs = opts.timeoutMs ?? PROBE_LIMITS.timeoutMs;
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    const onOuterAbort = () => controller.abort();
+    opts.signal?.addEventListener("abort", onOuterAbort, { once: true });
+    try {
+        const url = modelCatalogUrl(baseUrl, opts.api);
+        const headers = buildHeaders(opts.auth, opts.api);
+        const doFetch = opts.fetch ?? globalThis.fetch;
+        const response = await doFetch(url, { method: "GET", headers, signal: controller.signal });
+        if (!response.ok) {
+            const body = await readResponseTextBounded(response, {
+                maxBytes: PROBE_LIMITS.maxErrorBytes,
+                signal: controller.signal,
+            });
+            return {
+                ok: false,
+                error: `HTTP ${response.status}${body ? `: ${safeErrorText(body, opts.auth).slice(0, PROBE_LIMITS.maxErrorChars)}` : ""}`,
+            };
+        }
+        const text = await readResponseTextBounded(response, {
+            maxBytes: PROBE_LIMITS.maxBodyBytes,
+            overflowMessage: `Response exceeds ${PROBE_LIMITS.maxBodyBytes} bytes.`,
+            signal: controller.signal,
+        });
+        let json;
+        try {
+            json = JSON.parse(text);
+        }
+        catch {
+            return { ok: false, error: "Model catalog response is not JSON." };
+        }
+        const models = parseCatalogModels(json);
+        if (models === null) {
+            return {
+                ok: false,
+                error: "JSON has no supported OpenAI-style data[] or models[] catalog with model ids. Add models manually if this endpoint uses another catalog format.",
+            };
+        }
+        const sorted = dedupeSort(models);
+        const morePages = typeof json === "object" && json !== null && "has_more" in json && json.has_more === true;
+        const truncated = sorted.length > PROBE_LIMITS.maxModels || morePages;
+        return { ok: true, models: sorted.slice(0, PROBE_LIMITS.maxModels), truncated };
+    }
+    catch (error) {
+        if (controller.signal.aborted) {
+            return { ok: false, error: opts.signal?.aborted ? "Cancelled." : `Timed out after ${timeoutMs}ms.` };
+        }
+        return { ok: false, error: safeErrorText(formatError(error), opts.auth) };
+    }
+    finally {
+        clearTimeout(timer);
+        opts.signal?.removeEventListener("abort", onOuterAbort);
+    }
+}
+/** Append a path segment, keeping the query string and avoiding duplicate slashes or a doubled /v1. */
+export function modelCatalogUrl(base, api) {
+    const url = new URL(base.href);
+    const path = url.pathname.replace(/\/+$/, "");
+    url.pathname = api === "anthropic-messages" && !path.endsWith("/v1") ? `${path}/v1/models` : `${path}/models`;
+    return url;
+}
+function safeErrorText(text, auth) {
+    for (const value of [auth?.apiKey, ...Object.values(auth?.headers ?? {})]) {
+        if (typeof value !== "string" || !value)
+            continue;
+        text = text.replaceAll(value, "[redacted]");
+        const token = value.replace(/^Bearer\s+/i, "");
+        if (token !== value && token)
+            text = text.replaceAll(token, "[redacted]");
+    }
+    return stripTerminalSequences(text);
+}
+function buildHeaders(auth, api) {
+    const headers = new Headers();
+    headers.set("accept", "application/json");
+    const configured = auth?.headers ?? {};
+    if (api === "anthropic-messages")
+        headers.set("anthropic-version", "2023-06-01");
+    let hasAuthorization = false;
+    for (const [key, value] of Object.entries(configured)) {
+        // null explicitly removes a header; it also suppresses the default auth header.
+        if (key.toLowerCase() === "authorization")
+            hasAuthorization = true;
+        if (typeof value === "string")
+            headers.set(key, value);
+        else if (value === null)
+            headers.delete(key);
+    }
+    headers.set("accept", "application/json");
+    if (!auth?.apiKey || hasAuthorization)
+        return headers;
+    const lower = (name) => Object.keys(configured).some((key) => key.toLowerCase() === name);
+    if (api === "anthropic-messages") {
+        // Mirror pi-ai: OAuth tokens use Bearer; plain keys use x-api-key + version.
+        if (auth.apiKey.includes("sk-ant-oat")) {
+            headers.set("authorization", `Bearer ${auth.apiKey}`);
+        }
+        else {
+            if (!lower("x-api-key"))
+                headers.set("x-api-key", auth.apiKey);
+            if (!lower("anthropic-version"))
+                headers.set("anthropic-version", "2023-06-01");
+        }
+        return headers;
+    }
+    if (api === "google-generative-ai" || api === "google-vertex") {
+        if (!lower("x-goog-api-key"))
+            headers.set("x-goog-api-key", auth.apiKey);
+        return headers;
+    }
+    headers.set("authorization", `Bearer ${auth.apiKey}`);
+    return headers;
+}
+function parseCatalogModels(json) {
+    if (!json || typeof json !== "object")
+        return null;
+    const payload = json;
+    const data = Array.isArray(json) ? json : Array.isArray(payload.models) ? payload.models : payload.data;
+    if (!Array.isArray(data))
+        return null;
+    const models = [];
+    for (const item of data) {
+        if (!item || typeof item !== "object")
+            continue;
+        const record = item;
+        const id = (typeof record.id === "string" ? record.id.trim() : "") ||
+            (typeof record.slug === "string" ? record.slug.trim() : "");
+        if (!id)
+            continue;
+        // OpenAI uses `name`; Anthropic's /v1/models uses `display_name`.
+        const displayName = typeof record.name === "string" && record.name.trim() ? record.name.trim() : undefined;
+        const anthropicName = typeof record.display_name === "string" && record.display_name.trim()
+            ? record.display_name.trim()
+            : typeof record.displayName === "string"
+                ? record.displayName.trim()
+                : undefined;
+        const name = (displayName ?? anthropicName) !== id ? (displayName ?? anthropicName) : undefined;
+        models.push(name ? { id, name } : { id });
+    }
+    return data.length > 0 && models.length === 0 ? null : models;
+}
+function dedupeSort(models) {
+    const map = new Map();
+    for (const model of models) {
+        if (!map.has(model.id))
+            map.set(model.id, model);
+    }
+    return [...map.values()].sort((a, b) => a.id.localeCompare(b.id));
+}
+//# sourceMappingURL=probe.js.map

package/dist/extensions/provider/probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"probe.js","sourceRoot":"","sources":["../../../src/extensions/provider/probe.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAS3D,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IASzC;IACA,IAAI,OAAY,CAAC;IACjB,IAAI,CAAC;QACJ,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACnE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QAC1D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sDAAsD,EAAE,CAAC;IACrF,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IAEpE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,YAAY,CAAC,SAAS,CAAC;IAC3D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC9C,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAErE,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC,QAAQ,EAAE;gBACpD,QAAQ,EAAE,YAAY,CAAC,aAAa;gBACpC,MAAM,EAAE,UAAU,CAAC,MAAM;aACzB,CAAC,CAAC;YACH,OAAO;gBACN,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,QAAQ,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;aACzH,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,uBAAuB,CAAC,QAAQ,EAAE;YACpD,QAAQ,EAAE,YAAY,CAAC,YAAY;YACnC,eAAe,EAAE,oBAAoB,YAAY,CAAC,YAAY,SAAS;YACvE,MAAM,EAAE,UAAU,CAAC,MAAM;SACzB,CAAC,CAAC;QACH,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACJ,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qCAAqC,EAAE,CAAC;QACpE,CAAC;QACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACrB,OAAO;gBACN,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,iJAAiJ;aACxJ,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,UAAU,IAAI,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;QAC5G,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,GAAG,YAAY,CAAC,SAAS,IAAI,SAAS,CAAC;QACtE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;IACjF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC/B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,mBAAmB,SAAS,KAAK,EAAE,CAAC;QACtG,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC3E,CAAC;YAAS,CAAC;QACV,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACzD,CAAC;AACF,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,eAAe,CAAC,IAAS,EAAE,GAAY;IACtD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9C,GAAG,CAAC,QAAQ,GAAG,GAAG,KAAK,oBAAoB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI,SAAS,CAAC;IAC9G,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,IAA2B;IAC/D,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAC3E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK;YAAE,SAAS;QAClD,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK;YAAE,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,YAAY,CAAC,IAA2B,EAAE,GAAuB;IACzE,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;IAC9B,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAoB,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;IACxD,IAAI,GAAG,KAAK,oBAAoB;QAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC;IACjF,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACvD,gFAAgF;QAChF,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,eAAe;YAAE,gBAAgB,GAAG,IAAI,CAAC;QACnE,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;aAClD,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IAC1C,IAAI,CAAC,IAAI,EAAE,MAAM,IAAI,gBAAgB;QAAE,OAAO,OAAO,CAAC;IACtD,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,CAAC;IAClG,IAAI,GAAG,KAAK,oBAAoB,EAAE,CAAC;QAClC,6EAA6E;QAC7E,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACP,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/D,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC;gBAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC;IACD,IAAI,GAAG,KAAK,sBAAsB,IAAI,GAAG,KAAK,eAAe,EAAE,CAAC;QAC/D,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACzE,OAAO,OAAO,CAAC;IAChB,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACtD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAa;IACxC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,OAAO,GAAG,IAA4C,CAAC;IAC7D,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACxG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS;QAChD,MAAM,MAAM,GAAG,IAA+B,CAAC;QAC/C,MAAM,EAAE,GACP,CAAC,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,EAAE;YAAE,SAAS;QAClB,kEAAkE;QAClE,MAAM,WAAW,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3G,MAAM,aAAa,GAClB,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE;YACpE,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE;YAC5B,CAAC,CAAC,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;gBACvC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE;gBAC3B,CAAC,CAAC,SAAS,CAAC;QACf,MAAM,IAAI,GAAG,CAAC,WAAW,IAAI,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;AAC/D,CAAC;AAED,SAAS,UAAU,CAAC,MAAoB;IACvC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACnE,CAAC","sourcesContent":["/**\n * Fetch the OpenAI-style model catalog from a configured provider endpoint.\n *\n * Auth is resolved by the caller through ModelRuntime.getAuth() so Pi's\n * credential precedence (auth.json > env > models.json) applies. Raw\n * `$VAR` / `!command` placeholders never reach the wire: a failed resolution\n * aborts before this function is called.\n */\n\nimport type { FetchFunction, ModelAuth, ProviderHeaders } from \"@earendil-works/pi-ai\";\nimport { stripTerminalSequences } from \"@earendil-works/pi-tui\";\nimport { readResponseTextBounded } from \"../../utils/http-response.ts\";\nimport { formatError, PROBE_LIMITS } from \"./constants.ts\";\n\nexport interface ProbeModel {\n\tid: string;\n\tname?: string;\n}\n\nexport type ProbeResult = { ok: true; models: ProbeModel[]; truncated: boolean } | { ok: false; error: string };\n\nexport async function probeProviderModels(opts: {\n\tbaseUrl: string;\n\t/** Resolved auth from ModelRuntime.getAuth(). Undefined = anonymous public catalog. */\n\tauth?: ModelAuth;\n\t/** Effective provider api; selects the protocol's auth header scheme. */\n\tapi?: string;\n\tfetch?: FetchFunction;\n\tsignal?: AbortSignal;\n\ttimeoutMs?: number;\n}): Promise<ProbeResult> {\n\tlet baseUrl: URL;\n\ttry {\n\t\tbaseUrl = new URL(opts.baseUrl);\n\t} catch {\n\t\treturn { ok: false, error: \"Base URL is not a valid URL.\" };\n\t}\n\tif (baseUrl.protocol !== \"http:\" && baseUrl.protocol !== \"https:\") {\n\t\treturn { ok: false, error: `Unsupported protocol: ${baseUrl.protocol}` };\n\t}\n\tif (baseUrl.username || baseUrl.password || baseUrl.hash) {\n\t\treturn { ok: false, error: \"Base URL must not contain credentials or a fragment.\" };\n\t}\n\tif (opts.signal?.aborted) return { ok: false, error: \"Cancelled.\" };\n\n\tconst controller = new AbortController();\n\tconst timeoutMs = opts.timeoutMs ?? PROBE_LIMITS.timeoutMs;\n\tconst timer = setTimeout(() => controller.abort(), timeoutMs);\n\tconst onOuterAbort = () => controller.abort();\n\topts.signal?.addEventListener(\"abort\", onOuterAbort, { once: true });\n\n\ttry {\n\t\tconst url = modelCatalogUrl(baseUrl, opts.api);\n\t\tconst headers = buildHeaders(opts.auth, opts.api);\n\t\tconst doFetch = opts.fetch ?? globalThis.fetch;\n\t\tconst response = await doFetch(url, { method: \"GET\", headers, signal: controller.signal });\n\t\tif (!response.ok) {\n\t\t\tconst body = await readResponseTextBounded(response, {\n\t\t\t\tmaxBytes: PROBE_LIMITS.maxErrorBytes,\n\t\t\t\tsignal: controller.signal,\n\t\t\t});\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terror: `HTTP ${response.status}${body ? `: ${safeErrorText(body, opts.auth).slice(0, PROBE_LIMITS.maxErrorChars)}` : \"\"}`,\n\t\t\t};\n\t\t}\n\t\tconst text = await readResponseTextBounded(response, {\n\t\t\tmaxBytes: PROBE_LIMITS.maxBodyBytes,\n\t\t\toverflowMessage: `Response exceeds ${PROBE_LIMITS.maxBodyBytes} bytes.`,\n\t\t\tsignal: controller.signal,\n\t\t});\n\t\tlet json: unknown;\n\t\ttry {\n\t\t\tjson = JSON.parse(text);\n\t\t} catch {\n\t\t\treturn { ok: false, error: \"Model catalog response is not JSON.\" };\n\t\t}\n\t\tconst models = parseCatalogModels(json);\n\t\tif (models === null) {\n\t\t\treturn {\n\t\t\t\tok: false,\n\t\t\t\terror: \"JSON has no supported OpenAI-style data[] or models[] catalog with model ids. Add models manually if this endpoint uses another catalog format.\",\n\t\t\t};\n\t\t}\n\t\tconst sorted = dedupeSort(models);\n\t\tconst morePages = typeof json === \"object\" && json !== null && \"has_more\" in json && json.has_more === true;\n\t\tconst truncated = sorted.length > PROBE_LIMITS.maxModels || morePages;\n\t\treturn { ok: true, models: sorted.slice(0, PROBE_LIMITS.maxModels), truncated };\n\t} catch (error) {\n\t\tif (controller.signal.aborted) {\n\t\t\treturn { ok: false, error: opts.signal?.aborted ? \"Cancelled.\" : `Timed out after ${timeoutMs}ms.` };\n\t\t}\n\t\treturn { ok: false, error: safeErrorText(formatError(error), opts.auth) };\n\t} finally {\n\t\tclearTimeout(timer);\n\t\topts.signal?.removeEventListener(\"abort\", onOuterAbort);\n\t}\n}\n\n/** Append a path segment, keeping the query string and avoiding duplicate slashes or a doubled /v1. */\nexport function modelCatalogUrl(base: URL, api?: string): URL {\n\tconst url = new URL(base.href);\n\tconst path = url.pathname.replace(/\\/+$/, \"\");\n\turl.pathname = api === \"anthropic-messages\" && !path.endsWith(\"/v1\") ? `${path}/v1/models` : `${path}/models`;\n\treturn url;\n}\n\nfunction safeErrorText(text: string, auth: ModelAuth | undefined): string {\n\tfor (const value of [auth?.apiKey, ...Object.values(auth?.headers ?? {})]) {\n\t\tif (typeof value !== \"string\" || !value) continue;\n\t\ttext = text.replaceAll(value, \"[redacted]\");\n\t\tconst token = value.replace(/^Bearer\\s+/i, \"\");\n\t\tif (token !== value && token) text = text.replaceAll(token, \"[redacted]\");\n\t}\n\treturn stripTerminalSequences(text);\n}\n\nfunction buildHeaders(auth: ModelAuth | undefined, api: string | undefined): Headers {\n\tconst headers = new Headers();\n\theaders.set(\"accept\", \"application/json\");\n\tconst configured: ProviderHeaders = auth?.headers ?? {};\n\tif (api === \"anthropic-messages\") headers.set(\"anthropic-version\", \"2023-06-01\");\n\tlet hasAuthorization = false;\n\tfor (const [key, value] of Object.entries(configured)) {\n\t\t// null explicitly removes a header; it also suppresses the default auth header.\n\t\tif (key.toLowerCase() === \"authorization\") hasAuthorization = true;\n\t\tif (typeof value === \"string\") headers.set(key, value);\n\t\telse if (value === null) headers.delete(key);\n\t}\n\theaders.set(\"accept\", \"application/json\");\n\tif (!auth?.apiKey || hasAuthorization) return headers;\n\tconst lower = (name: string) => Object.keys(configured).some((key) => key.toLowerCase() === name);\n\tif (api === \"anthropic-messages\") {\n\t\t// Mirror pi-ai: OAuth tokens use Bearer; plain keys use x-api-key + version.\n\t\tif (auth.apiKey.includes(\"sk-ant-oat\")) {\n\t\t\theaders.set(\"authorization\", `Bearer ${auth.apiKey}`);\n\t\t} else {\n\t\t\tif (!lower(\"x-api-key\")) headers.set(\"x-api-key\", auth.apiKey);\n\t\t\tif (!lower(\"anthropic-version\")) headers.set(\"anthropic-version\", \"2023-06-01\");\n\t\t}\n\t\treturn headers;\n\t}\n\tif (api === \"google-generative-ai\" || api === \"google-vertex\") {\n\t\tif (!lower(\"x-goog-api-key\")) headers.set(\"x-goog-api-key\", auth.apiKey);\n\t\treturn headers;\n\t}\n\theaders.set(\"authorization\", `Bearer ${auth.apiKey}`);\n\treturn headers;\n}\n\nfunction parseCatalogModels(json: unknown): ProbeModel[] | null {\n\tif (!json || typeof json !== \"object\") return null;\n\tconst payload = json as { models?: unknown; data?: unknown };\n\tconst data = Array.isArray(json) ? json : Array.isArray(payload.models) ? payload.models : payload.data;\n\tif (!Array.isArray(data)) return null;\n\tconst models: ProbeModel[] = [];\n\tfor (const item of data) {\n\t\tif (!item || typeof item !== \"object\") continue;\n\t\tconst record = item as Record<string, unknown>;\n\t\tconst id =\n\t\t\t(typeof record.id === \"string\" ? record.id.trim() : \"\") ||\n\t\t\t(typeof record.slug === \"string\" ? record.slug.trim() : \"\");\n\t\tif (!id) continue;\n\t\t// OpenAI uses `name`; Anthropic's /v1/models uses `display_name`.\n\t\tconst displayName = typeof record.name === \"string\" && record.name.trim() ? record.name.trim() : undefined;\n\t\tconst anthropicName =\n\t\t\ttypeof record.display_name === \"string\" && record.display_name.trim()\n\t\t\t\t? record.display_name.trim()\n\t\t\t\t: typeof record.displayName === \"string\"\n\t\t\t\t\t? record.displayName.trim()\n\t\t\t\t\t: undefined;\n\t\tconst name = (displayName ?? anthropicName) !== id ? (displayName ?? anthropicName) : undefined;\n\t\tmodels.push(name ? { id, name } : { id });\n\t}\n\treturn data.length > 0 && models.length === 0 ? null : models;\n}\n\nfunction dedupeSort(models: ProbeModel[]): ProbeModel[] {\n\tconst map = new Map<string, ProbeModel>();\n\tfor (const model of models) {\n\t\tif (!map.has(model.id)) map.set(model.id, model);\n\t}\n\treturn [...map.values()].sort((a, b) => a.id.localeCompare(b.id));\n}\n"]}

package/dist/extensions/provider/refresh.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Runtime refresh coordination for /provider.
+ *
+ * Saves hit disk immediately; runtime refreshes are deferred: normal field
+ * edits mark the provider as touched and flush when the session closes, while
+ * Fetch Models refreshes the current provider right before auth resolution
+ * and right after importing. Save failures and refresh failures are reported
+ * separately so a successful write is never misreported.
+ */
+import type { ModelRuntime } from "../../core/model-runtime.ts";
+export interface RefreshOutcome {
+    ok: boolean;
+    aborted: boolean;
+    errors: string[];
+}
+export declare class RefreshCoordinator {
+    private readonly runtime;
+    private readonly pending;
+    private readonly changed;
+    private revision;
+    constructor(runtime: Pick<ModelRuntime, "refresh" | "getError">);
+    touch(providerId: string): void;
+    get touchedProviders(): readonly string[];
+    /** Offline-scoped refresh of a single provider (fetch prep / post-import). */
+    refreshNow(providerId: string, signal?: AbortSignal): Promise<RefreshOutcome>;
+    /** Refresh everything touched, including deleted provider ids. */
+    flush(signal?: AbortSignal): Promise<RefreshOutcome>;
+    private run;
+}
+//# sourceMappingURL=refresh.d.ts.map

package/dist/extensions/provider/refresh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refresh.d.ts","sourceRoot":"","sources":["../../../src/extensions/provider/refresh.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAGhE,MAAM,WAAW,cAAc;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,qBAAa,kBAAkB;IAC9B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6C;IACrE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAK;gBAET,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,GAAG,UAAU,CAAC;IAI/D,KAAK,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IAK/B,IAAI,gBAAgB,IAAI,SAAS,MAAM,EAAE,CAExC;IAED,8EAA8E;IACxE,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC;IAInF,kEAAkE;IAC5D,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC;YAM5C,GAAG;CAyBjB"}