@bivy/bivy 0.16.25-staging.14 → 0.16.25-staging.16

package/dist/agents/pi/runtime.js

@@ -268,8 +268,29 @@ class PiSession {
      * reload. Async because that resolution reads the store.
      */
     async getModels() {
-        const models = await this.session.modelRuntime.getAvailable();
-        return models.map((model) => toModelInfo(model, true));
+        const runtime = this.session.modelRuntime;
+        try {
+            const models = await runtime.getAvailable();
+            return models.map((model) => toModelInfo(model, true));
+        }
+        catch (error) {
+            // The runtime's availability refresh is a Promise.all across every
+            // provider's auth check, so one broken provider (an unreachable custom
+            // endpoint, a single failing credential read) rejects the whole catalog
+            // and the picker shows nothing. Degrade to per-provider listing and
+            // skip only the broken ones; rethrow only when truly nothing survives.
+            const models = [];
+            for (const provider of runtime.getProviders()) {
+                try {
+                    for (const model of await runtime.getAvailable(provider.id))
+                        models.push(toModelInfo(model, true));
+                }
+                catch { /* this provider is broken — the rest still list */ }
+            }
+            if (models.length)
+                return models;
+            throw error instanceof Error ? error : new Error(String(error));
+        }
     }
     /**
      * Every model Pi knows about — built-in and custom, regardless of whether
@@ -281,7 +302,10 @@ class PiSession {
     async getAllModels() {
         const runtime = this.session.modelRuntime;
         // Refresh availability first so `hasConfiguredAuth` reflects current creds.
-        await runtime.getAvailable();
+        // Best-effort: a failed refresh (one broken provider rejects the shared
+        // Promise.all) must not blank the full catalog — the flags then reflect
+        // the last successful refresh, which the picker can still act on.
+        await runtime.getAvailable().catch(() => { });
         return runtime.getModels().map((model) => toModelInfo(model, runtime.hasConfiguredAuth(model.provider)));
     }
     /** Reload the projected models.json in-place so a live session immediately

package/dist/server.js

@@ -2407,7 +2407,19 @@ const RELAY_COMMANDS = {
         // this a models.list answered for one agent (e.g. Codex's models) could
         // linger on the composer/picker after the user switched to another agent
         // (e.g. Claude) — the "Claude shows Codex models" bug.
-        relay?.sendEvent(await modelsListEventFor(record));
+        let event;
+        try {
+            event = await modelsListEventFor(record);
+        }
+        catch (error) {
+            // A catalog read failure must never answer with silence: the generic
+            // relay catch would swallow the rejection and the client (notably a
+            // Cloud launch waiting to validate its saved model) could only guess
+            // via timeout. Name the real reason on the session instead.
+            relay?.sendEvent({ type: "session.error", sessionId: requestedSessionId ?? record.id, error: `Couldn't read this machine's model catalog: ${error instanceof Error ? error.message : String(error)}` });
+            return;
+        }
+        relay?.sendEvent(event);
     },
     "models.prefetch"(msg) {
         // The composer's agent picker opened: warm the scratch session for each

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bivy/bivy",
-  "version": "0.16.25-staging.14",
+  "version": "0.16.25-staging.16",
   "type": "module",
   "license": "AGPL-3.0-only",
   "description": "Run coding agents on machines you own. Open-source, self-hostable agent workspace.",