@code-yeongyu/senpi 2026.9.10-2 → 2026.9.10

package/node_modules/@earendil-works/pi-ai/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@earendil-works/pi-ai",
-	"version": "2026.9.10-2",
+	"version": "2026.9.10",
 	"description": "Unified LLM API with automatic model discovery and provider configuration",
 	"type": "module",
 	"main": "./dist/index.js",
@@ -76,7 +76,7 @@
 	"dependencies": {
 		"@anthropic-ai/sdk": "0.123.0",
 		"@aws-sdk/client-bedrock-runtime": "3.1116.0",
-		"@earendil-works/pi-telemetry": "npm:@code-yeongyu/senpi-telemetry@2026.9.10-2",
+		"@earendil-works/pi-telemetry": "npm:@code-yeongyu/senpi-telemetry@2026.9.10",
 		"@google/genai": "2.18.0",
 		"@smithy/node-http-handler": "4.11.3",
 		"http-proxy-agent": "9.1.0",

package/node_modules/@earendil-works/pi-pty/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "@earendil-works/pi-pty",
 	"private": true,
-	"version": "2026.9.10-2",
+	"version": "2026.9.10",
 	"description": "Typed PTY session loader for Senpi persistent terminals",
 	"type": "module",
 	"main": "./dist/index.js",

package/node_modules/@earendil-works/pi-telemetry/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@earendil-works/pi-telemetry",
-	"version": "2026.9.10-2",
+	"version": "2026.9.10",
 	"description": "Vendor-neutral telemetry contracts and typed schema utilities for pi",
 	"type": "module",
 	"main": "./dist/index.js",

package/node_modules/@earendil-works/pi-tui/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@earendil-works/pi-tui",
-	"version": "2026.9.10-2",
+	"version": "2026.9.10",
 	"description": "Terminal User Interface library with differential rendering for efficient text-based applications",
 	"type": "module",
 	"main": "dist/index.js",

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@code-yeongyu/senpi",
-	"version": "2026.9.10-2",
+	"version": "2026.9.10",
 	"description": "Coding agent CLI with read, bash, edit, write tools and session management",
 	"type": "module",
 	"piConfig": {
@@ -48,9 +48,9 @@
 		"qa:app-server": "node scripts/qa-app-server/run-all.mjs"
 	},
 	"dependencies": {
-		"@earendil-works/pi-agent-core": "npm:@code-yeongyu/senpi-agent-core@2026.9.10-2",
-		"@earendil-works/pi-ai": "npm:@code-yeongyu/senpi-ai@2026.9.10-2",
-		"@earendil-works/pi-tui": "npm:@code-yeongyu/senpi-tui@2026.9.10-2",
+		"@earendil-works/pi-agent-core": "npm:@code-yeongyu/senpi-agent-core@2026.9.10",
+		"@earendil-works/pi-ai": "npm:@code-yeongyu/senpi-ai@2026.9.10",
+		"@earendil-works/pi-tui": "npm:@code-yeongyu/senpi-tui@2026.9.10",
 		"@silvia-odwyer/photon-node": "0.3.4",
 		"chalk": "6.0.0",
 		"cross-spawn": "7.0.6",
@@ -70,8 +70,8 @@
 		"@anthropic-ai/sdk": "0.123.0",
 		"@aws-sdk/client-bedrock-runtime": "3.1116.0",
 		"@bufbuild/protobuf": "2.14.0",
-		"@code-yeongyu/senpi-codemode": "2026.9.10-2",
-		"@earendil-works/pi-pty": "npm:@code-yeongyu/senpi-pty@2026.9.10-2",
+		"@code-yeongyu/senpi-codemode": "2026.9.10",
+		"@earendil-works/pi-pty": "npm:@code-yeongyu/senpi-pty@2026.9.10",
 		"@modelcontextprotocol/sdk": "1.30.0",
 		"@mozilla/readability": "0.6.0",
 		"@opentelemetry/api": "1.9.1",
@@ -119,7 +119,7 @@
 		"@csstools/css-parser-algorithms": "4.0.0",
 		"@csstools/css-syntax-patches-for-csstree": "1.1.8",
 		"@csstools/css-tokenizer": "4.0.0",
-		"@earendil-works/pi-telemetry": "npm:@code-yeongyu/senpi-telemetry@2026.9.10-2",
+		"@earendil-works/pi-telemetry": "npm:@code-yeongyu/senpi-telemetry@2026.9.10",
 		"@exodus/bytes": "1.15.1",
 		"@google/genai": "2.18.0",
 		"@hono/node-server": "2.1.1",

package/node_modules/@earendil-works/pi-ai/dist/auth/oauth/kimi-identity.d.ts

@@ -1,24 +0,0 @@
-/**
- * Kimi Code client identity headers.
- *
- * `api.kimi.com/coding` identifies its clients by a product `User-Agent` plus
- * an `X-Msh-*` device header set, and the official Kimi Code client sends that
- * set on every OAuth and managed-API request (MoonshotAI/kimi-code
- * `packages/oauth/src/identity.ts`). senpi sent none of them, so a
- * subscription session never identified itself as a Kimi client at all.
- *
- * Three contract details that are not visible from the code: values must be
- * printable ASCII (the endpoint sits behind a CDN that answers 520 on raw
- * non-ASCII header bytes), the device id is expected to be stable per install,
- * and the platform string names a client family rather than the host product.
- * Device-id persistence is deliberately best-effort — an unwritable agent dir
- * must degrade to a per-process id, never throw, because these headers are
- * built for every request.
- *
- * Subscription (OAuth) path only: the api-key path authenticates with a
- * platform key rather than a client session and stays header-free.
- */
-/** Test seam: forget the memoized id so a fresh agent dir is re-read. */
-export declare function resetKimiDeviceIdForTests(): void;
-export declare function kimiCodeIdentityHeaders(): Record<string, string>;
-//# sourceMappingURL=kimi-identity.d.ts.map

package/node_modules/@earendil-works/pi-ai/dist/auth/oauth/kimi-identity.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"kimi-identity.d.ts","sourceRoot":"","sources":["../../../src/auth/oauth/kimi-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AA0DH,yEAAyE;AACzE,wBAAgB,yBAAyB,IAAI,IAAI,CAEhD;AAED,wBAAgB,uBAAuB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUhE"}

package/node_modules/@earendil-works/pi-ai/dist/auth/oauth/kimi-identity.js

@@ -1,86 +0,0 @@
-/**
- * Kimi Code client identity headers.
- *
- * `api.kimi.com/coding` identifies its clients by a product `User-Agent` plus
- * an `X-Msh-*` device header set, and the official Kimi Code client sends that
- * set on every OAuth and managed-API request (MoonshotAI/kimi-code
- * `packages/oauth/src/identity.ts`). senpi sent none of them, so a
- * subscription session never identified itself as a Kimi client at all.
- *
- * Three contract details that are not visible from the code: values must be
- * printable ASCII (the endpoint sits behind a CDN that answers 520 on raw
- * non-ASCII header bytes), the device id is expected to be stable per install,
- * and the platform string names a client family rather than the host product.
- * Device-id persistence is deliberately best-effort — an unwritable agent dir
- * must degrade to a per-process id, never throw, because these headers are
- * built for every request.
- *
- * Subscription (OAuth) path only: the api-key path authenticates with a
- * platform key rather than a client session and stays header-free.
- */
-import { randomUUID } from "node:crypto";
-import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { arch, hostname, platform, release } from "node:os";
-import { join } from "node:path";
-import { getProviderEnvValue } from "../../utils/provider-env.js";
-const KIMI_CLIENT_PLATFORM = "kimi_cli";
-const KIMI_CLIENT_VERSION = "1.0";
-const DEVICE_ID_FILENAME = "kimi-device-id";
-function sanitizeHeaderValue(value, fallback = "unknown") {
-    const sanitized = value.replace(/[^\x20-\x7E]/g, "").trim();
-    return sanitized || fallback;
-}
-function agentDir() {
-    const configured = getProviderEnvValue("SENPI_CODING_AGENT_DIR") ?? getProviderEnvValue("CODING_AGENT_DIR");
-    if (configured)
-        return configured.replace(/\/$/, "");
-    const home = getProviderEnvValue("HOME") ?? ".";
-    return `${home.replace(/\/$/, "")}/.senpi/agent`;
-}
-function deviceModel() {
-    const current = platform();
-    const label = current === "darwin" ? "macOS" : current === "win32" ? "Windows" : current === "linux" ? "Linux" : current;
-    return [label, release(), arch()].filter(Boolean).join(" ").trim();
-}
-function readOrMintDeviceId() {
-    const directory = agentDir();
-    const path = join(directory, DEVICE_ID_FILENAME);
-    try {
-        const existing = readFileSync(path, "utf-8").trim();
-        if (existing)
-            return existing;
-    }
-    catch {
-        // Absent or unreadable: fall through and mint a replacement.
-    }
-    const minted = randomUUID().replace(/-/g, "");
-    try {
-        mkdirSync(directory, { recursive: true });
-        writeFileSync(path, `${minted}\n`, { mode: 0o600 });
-    }
-    catch {
-        // Unwritable agent dir: this id lives for the current process only.
-    }
-    return minted;
-}
-let cachedDeviceId;
-function deviceId() {
-    cachedDeviceId ??= readOrMintDeviceId();
-    return cachedDeviceId;
-}
-/** Test seam: forget the memoized id so a fresh agent dir is re-read. */
-export function resetKimiDeviceIdForTests() {
-    cachedDeviceId = undefined;
-}
-export function kimiCodeIdentityHeaders() {
-    return {
-        "User-Agent": `KimiCLI/${KIMI_CLIENT_VERSION}`,
-        "X-Msh-Platform": KIMI_CLIENT_PLATFORM,
-        "X-Msh-Version": KIMI_CLIENT_VERSION,
-        "X-Msh-Device-Name": sanitizeHeaderValue(hostname()),
-        "X-Msh-Device-Model": sanitizeHeaderValue(deviceModel()),
-        "X-Msh-Os-Version": sanitizeHeaderValue(release()),
-        "X-Msh-Device-Id": sanitizeHeaderValue(deviceId()),
-    };
-}
-//# sourceMappingURL=kimi-identity.js.map

package/node_modules/@earendil-works/pi-ai/dist/auth/oauth/kimi-identity.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"kimi-identity.js","sourceRoot":"","sources":["../../../src/auth/oauth/kimi-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAElE,MAAM,oBAAoB,GAAG,UAAU,CAAC;AACxC,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAClC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AAE5C,SAAS,mBAAmB,CAAC,KAAa,EAAE,QAAQ,GAAG,SAAS;IAC/D,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5D,OAAO,SAAS,IAAI,QAAQ,CAAC;AAC9B,CAAC;AAED,SAAS,QAAQ;IAChB,MAAM,UAAU,GAAG,mBAAmB,CAAC,wBAAwB,CAAC,IAAI,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;IAC5G,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC;IAChD,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC;AAClD,CAAC;AAED,SAAS,WAAW;IACnB,MAAM,OAAO,GAAG,QAAQ,EAAE,CAAC;IAC3B,MAAM,KAAK,GACV,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAC5G,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,kBAAkB;IAC1B,MAAM,SAAS,GAAG,QAAQ,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACjD,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACpD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACR,6DAA6D;IAC9D,CAAC;IAED,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC9C,IAAI,CAAC;QACJ,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,aAAa,CAAC,IAAI,EAAE,GAAG,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,CAAC;IAAC,MAAM,CAAC;QACR,oEAAoE;IACrE,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED,IAAI,cAAkC,CAAC;AAEvC,SAAS,QAAQ;IAChB,cAAc,KAAK,kBAAkB,EAAE,CAAC;IACxC,OAAO,cAAc,CAAC;AACvB,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,yBAAyB;IACxC,cAAc,GAAG,SAAS,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,uBAAuB;IACtC,OAAO;QACN,YAAY,EAAE,WAAW,mBAAmB,EAAE;QAC9C,gBAAgB,EAAE,oBAAoB;QACtC,eAAe,EAAE,mBAAmB;QACpC,mBAAmB,EAAE,mBAAmB,CAAC,QAAQ,EAAE,CAAC;QACpD,oBAAoB,EAAE,mBAAmB,CAAC,WAAW,EAAE,CAAC;QACxD,kBAAkB,EAAE,mBAAmB,CAAC,OAAO,EAAE,CAAC;QAClD,iBAAiB,EAAE,mBAAmB,CAAC,QAAQ,EAAE,CAAC;KAClD,CAAC;AACH,CAAC","sourcesContent":["/**\n * Kimi Code client identity headers.\n *\n * `api.kimi.com/coding` identifies its clients by a product `User-Agent` plus\n * an `X-Msh-*` device header set, and the official Kimi Code client sends that\n * set on every OAuth and managed-API request (MoonshotAI/kimi-code\n * `packages/oauth/src/identity.ts`). senpi sent none of them, so a\n * subscription session never identified itself as a Kimi client at all.\n *\n * Three contract details that are not visible from the code: values must be\n * printable ASCII (the endpoint sits behind a CDN that answers 520 on raw\n * non-ASCII header bytes), the device id is expected to be stable per install,\n * and the platform string names a client family rather than the host product.\n * Device-id persistence is deliberately best-effort — an unwritable agent dir\n * must degrade to a per-process id, never throw, because these headers are\n * built for every request.\n *\n * Subscription (OAuth) path only: the api-key path authenticates with a\n * platform key rather than a client session and stays header-free.\n */\n\nimport { randomUUID } from \"node:crypto\";\nimport { mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { arch, hostname, platform, release } from \"node:os\";\nimport { join } from \"node:path\";\nimport { getProviderEnvValue } from \"../../utils/provider-env.ts\";\n\nconst KIMI_CLIENT_PLATFORM = \"kimi_cli\";\nconst KIMI_CLIENT_VERSION = \"1.0\";\nconst DEVICE_ID_FILENAME = \"kimi-device-id\";\n\nfunction sanitizeHeaderValue(value: string, fallback = \"unknown\"): string {\n\tconst sanitized = value.replace(/[^\\x20-\\x7E]/g, \"\").trim();\n\treturn sanitized || fallback;\n}\n\nfunction agentDir(): string {\n\tconst configured = getProviderEnvValue(\"SENPI_CODING_AGENT_DIR\") ?? getProviderEnvValue(\"CODING_AGENT_DIR\");\n\tif (configured) return configured.replace(/\\/$/, \"\");\n\tconst home = getProviderEnvValue(\"HOME\") ?? \".\";\n\treturn `${home.replace(/\\/$/, \"\")}/.senpi/agent`;\n}\n\nfunction deviceModel(): string {\n\tconst current = platform();\n\tconst label =\n\t\tcurrent === \"darwin\" ? \"macOS\" : current === \"win32\" ? \"Windows\" : current === \"linux\" ? \"Linux\" : current;\n\treturn [label, release(), arch()].filter(Boolean).join(\" \").trim();\n}\n\nfunction readOrMintDeviceId(): string {\n\tconst directory = agentDir();\n\tconst path = join(directory, DEVICE_ID_FILENAME);\n\ttry {\n\t\tconst existing = readFileSync(path, \"utf-8\").trim();\n\t\tif (existing) return existing;\n\t} catch {\n\t\t// Absent or unreadable: fall through and mint a replacement.\n\t}\n\n\tconst minted = randomUUID().replace(/-/g, \"\");\n\ttry {\n\t\tmkdirSync(directory, { recursive: true });\n\t\twriteFileSync(path, `${minted}\\n`, { mode: 0o600 });\n\t} catch {\n\t\t// Unwritable agent dir: this id lives for the current process only.\n\t}\n\treturn minted;\n}\n\nlet cachedDeviceId: string | undefined;\n\nfunction deviceId(): string {\n\tcachedDeviceId ??= readOrMintDeviceId();\n\treturn cachedDeviceId;\n}\n\n/** Test seam: forget the memoized id so a fresh agent dir is re-read. */\nexport function resetKimiDeviceIdForTests(): void {\n\tcachedDeviceId = undefined;\n}\n\nexport function kimiCodeIdentityHeaders(): Record<string, string> {\n\treturn {\n\t\t\"User-Agent\": `KimiCLI/${KIMI_CLIENT_VERSION}`,\n\t\t\"X-Msh-Platform\": KIMI_CLIENT_PLATFORM,\n\t\t\"X-Msh-Version\": KIMI_CLIENT_VERSION,\n\t\t\"X-Msh-Device-Name\": sanitizeHeaderValue(hostname()),\n\t\t\"X-Msh-Device-Model\": sanitizeHeaderValue(deviceModel()),\n\t\t\"X-Msh-Os-Version\": sanitizeHeaderValue(release()),\n\t\t\"X-Msh-Device-Id\": sanitizeHeaderValue(deviceId()),\n\t};\n}\n"]}