@companion-ai/feynman 0.5.32 → 0.5.34

package/RELEASES.md

@@ -6,6 +6,20 @@ GitHub release notes are generated from the matching `## vX.Y.Z` section in this
 
 ## Unreleased
 
+## v0.5.34 - 2026-10-09
+
+- **OpenAlex lookups that miss now say why.** Looking up a name or title where OpenAlex expects an ID (for example `openalex_get_work:Attention is all you need` or `author: Geoffrey Hinton`), or an ID that does not exist, returned OpenAlex's raw HTML "404 Not Found" page. The error now says no such work, author or source exists and names the search command to use instead, so the agent recovers on its next call.
+
+## v0.5.33 - 2026-10-09
+
+- **pi-web-access 0.38.0.**
+  - Web searches with no API key (Parallel) no longer fail with "free-tier rate limit".
+  - On a ChatGPT subscription, OpenAI web search now uses the newer, much cheaper `gpt-6-luna`, so searches take far less of your usage.
+  - `fetch_content` answer mode works with models whose provider signs in without an API key.
+  - Requests through a proxy keep their method, headers and body.
+  - Adds Ceramic, a paid search provider used only when you select it.
+- Security: pi-web-access now uses `@modelcontextprotocol/sdk` 1.32.1, so GHSA-6qxp-vccf-f47h no longer appears in `npm audit` for a Feynman install.
+
 ## v0.5.32 - 2026-10-09
 
 - **A rejected sign-in now says what to do.** When `feynman model login` or `feynman setup` ended with `invalid_grant`, usually after Sign in with ChatGPT, Feynman printed only the provider's error. It now explains that a stale browser session usually causes it: sign out of the provider's site or use a private window, then run `feynman model login <provider>` again. For ChatGPT it also suggests `feynman model login openai-codex`.

package/extensions/research-tools/science-database-openalex-exact.ts

@@ -48,7 +48,20 @@ function endpointPath(path: string): URL {
 
 export const OPENALEX_API_KEY_HINT = "Get a free OpenAlex API key at https://openalex.org/settings/api and set OPENALEX_API_KEY; anonymous requests share a small daily budget.";
 
-export function openAlexRequestFailure(status: number, statusText: string, snippet: string, usingApiKey: boolean): Error {
+const OPENALEX_ENTITY_SEARCH: Record<string, [entity: string, search: string]> = {
+	works: ["work", "openalex_search_works:<title or topic>"],
+	authors: ["author", "openalex_search_authors:<name>"],
+	sources: ["source", "sources:<name>"],
+};
+
+export function openAlexRequestFailure(status: number, statusText: string, snippet: string, usingApiKey: boolean, url?: URL): Error {
+	// OpenAlex answers an unknown ID, or a name passed where an ID belongs, with an HTML 404 page.
+	const lookup = status === 404 ? url?.pathname.match(/^\/(works|authors|sources)\/([^/]+)$/) : null;
+	const known = lookup ? OPENALEX_ENTITY_SEARCH[lookup[1]!] : undefined;
+	if (lookup && known) {
+		const [entity, search] = known;
+		return new Error(`OpenAlex has no ${entity} "${decodeURIComponent(lookup[2]!)}". Lookups take an OpenAlex ID or DOI; to find one by name or title, use ${search}.`);
+	}
 	const hint = !usingApiKey && [401, 403, 429].includes(status) ? ` ${OPENALEX_API_KEY_HINT}` : "";
 	return new Error(`OpenAlex request failed: ${status} ${statusText}. ${snippet}${hint}`);
 }
@@ -97,7 +110,7 @@ async function fetchJson(url: URL): Promise<{ credentialStatus: string; endpoint
 		});
 		if (!response.ok) {
 			const snippet = scrubOpenAlexText((await response.text()).slice(0, 4096), url).slice(0, 240);
-			throw openAlexRequestFailure(response.status, response.statusText, snippet, auth.usingApiKey);
+			throw openAlexRequestFailure(response.status, response.statusText, snippet, auth.usingApiKey, url);
 		}
 		return { ...auth, endpoint, payload: await response.json() };
 	} finally {

package/extensions/research-tools/science-database-openalex.ts

@@ -147,7 +147,7 @@ async function fetchJson(url: URL): Promise<{ credentialStatus: string; endpoint
 	}
 	if (!response.ok) {
 		const snippet = scrubOpenAlexText(response.body, url).slice(0, 240);
-		throw openAlexRequestFailure(response.status, response.statusText, snippet, auth.usingApiKey);
+		throw openAlexRequestFailure(response.status, response.statusText, snippet, auth.usingApiKey, url);
 	}
 	return { ...auth, endpoint, payload: response.payload };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@companion-ai/feynman",
-  "version": "0.5.32",
+  "version": "0.5.34",
   "description": "Research-first CLI agent built on Pi and alphaXiv",
   "license": "MIT",
   "type": "module",
@@ -83,7 +83,7 @@
     "pi-btw": "0.7.1",
     "pi-docparser": "4.0.0",
     "pi-subagents": "0.76.1",
-    "pi-web-access": "0.37.0",
+    "pi-web-access": "0.38.0",
     "posthog-node": "^5.53.0"
   },
   "peerDependencies": {