@doist/doistbot-cli 1.0.7 → 1.0.8

package/dist/actions/auth.js

@@ -70,13 +70,16 @@ export async function runAuthSetup(dependencies = {}) {
     const status = await deps.getAuthStatus();
     deps.writeLine('1. OpenAI Codex');
     deps.writeLine();
-    if (status.openai.configured) {
+    if (status.openai.configured && !status.openai.refreshFailed) {
         deps.writeLine('✓ OpenAI already configured (pi-auth).');
     }
     else {
         if (!deps.isInteractive) {
             throw new Error('Cannot configure OpenAI Codex auth in non-interactive mode.');
         }
+        if (status.openai.refreshFailed) {
+            deps.writeLine('OpenAI session could not be refreshed (expired, revoked, or offline). Reconnecting.');
+        }
         await deps.loginOpenAICodex();
         deps.writeLine();
         deps.writeLine('✓ OpenAI configured.');
@@ -149,10 +152,19 @@ export async function runAuthSetup(dependencies = {}) {
 }
 export async function runAuthStatus() {
     const status = await getAuthStatus();
-    writeLine(`OpenAI: ${status.openai.configured ? `configured (${status.openai.source ?? 'unknown'})` : 'not configured'}`);
+    writeLine(`OpenAI: ${formatOpenAIStatus(status.openai)}`);
     writeLine(`Gemini ${formatOptionalLabel()}: ${status.gemini.configured ? `configured (${status.gemini.source ?? 'unknown'})` : 'not configured'}`);
     writeLine(`OpenRouter ${formatOptionalLabel()}: ${status.openrouter.configured ? `configured (${status.openrouter.source ?? 'unknown'})` : 'not configured'}`);
 }
+function formatOpenAIStatus(status) {
+    if (!status.configured) {
+        return 'not configured';
+    }
+    const base = `configured (${status.source ?? 'unknown'})`;
+    return status.refreshFailed
+        ? `${base} — session could not be refreshed; check your connection or run \`doistbot auth login\``
+        : base;
+}
 export async function runAuthLogout(target, dependencies = {}) {
     const deps = {
         deleteGeminiApiKey,

package/dist/actions/doctor.js

@@ -4,7 +4,9 @@ import { checkGit, checkPiDependency, checkRepository, checkSandboxBuild } from
 import { renderDiagnosticCheck } from '../terminal.js';
 export function getConfiguredProviders({ status, }) {
     return [
-        status.openai.configured ? `OpenAI (${status.openai.source ?? 'configured'})` : undefined,
+        status.openai.configured && !status.openai.refreshFailed
+            ? `OpenAI (${status.openai.source ?? 'configured'})`
+            : undefined,
         status.gemini.configured
             ? `Gemini optional (${status.gemini.source ?? 'configured'})`
             : undefined,

package/dist/actions/review.js

@@ -21,10 +21,14 @@ function getReadableProviderFailure(failure) {
     if (failure.model === 'openai' &&
         (normalized.includes('no api key found for openai') ||
             normalized.includes('no api key found for openai-codex') ||
+            normalized.includes('no api key for provider') ||
             normalized.includes('use /login') ||
             normalized.includes('invalid api key') ||
-            normalized.includes('incorrect api key'))) {
-        return 'OpenAI Codex is not authenticated. Run `doistbot auth` to reconnect OpenAI.';
+            normalized.includes('incorrect api key') ||
+            normalized.includes('refresh_token_invalidated') ||
+            normalized.includes('unauthorized') ||
+            /\b401\b/.test(normalized))) {
+        return 'OpenAI Codex is not authenticated. Run `doistbot auth login` to reconnect OpenAI.';
     }
     if (failure.model === 'gemini' &&
         (normalized.includes('429') ||
@@ -40,7 +44,8 @@ function getReadableProviderFailure(failure) {
             normalized.includes('invalid_argument') ||
             normalized.includes('invalid api key') ||
             normalized.includes('no api key found for google') ||
-            normalized.includes('no api key found for gemini'))) {
+            normalized.includes('no api key found for gemini') ||
+            normalized.includes('no api key for provider'))) {
         return 'Gemini API key is invalid or missing. Run `doistbot auth` and paste a valid Gemini key.';
     }
     const firstLine = error
@@ -205,7 +210,7 @@ function getMissingAuthProviderFailures(missingProviders) {
     if (missingProviders.includes('OpenAI')) {
         failures.push({
             model: 'openai',
-            message: 'OpenAI not configured; run `doistbot auth`',
+            message: 'OpenAI authentication unavailable; run `doistbot auth login`',
         });
     }
     return failures;

package/dist/auth.js

@@ -28,9 +28,22 @@ export function getBrowserOpenCommand(platform, url) {
     }
     return { command: 'xdg-open', args: [url] };
 }
-export async function hasOpenAICodexAuth(storage) {
+/**
+ * Check that the stored OAuth session is usable, not just present.
+ * getApiKey returns the cached access token when unexpired; when expired it
+ * attempts one cross-process-locked refresh, persists the result, and returns
+ * undefined when the refresh fails (revoked session, no network) while
+ * preserving the stored credentials. Unexpected storage errors propagate.
+ */
+export async function getOpenAICodexAuthState(storage) {
     const resolvedStorage = storage ?? (await createPiAuthStorage());
-    return resolvedStorage.get(OPENAI_CODEX_PROVIDER_ID)?.type === 'oauth';
+    if (resolvedStorage.get(OPENAI_CODEX_PROVIDER_ID)?.type !== 'oauth') {
+        return 'missing';
+    }
+    const apiKey = await resolvedStorage.getApiKey(OPENAI_CODEX_PROVIDER_ID, {
+        includeFallback: false,
+    });
+    return apiKey ? 'ready' : 'refresh-failed';
 }
 export async function loginOpenAICodex(storage) {
     const resolvedStorage = storage ?? (await createPiAuthStorage());
@@ -105,11 +118,15 @@ export async function getAuthStatus({ env = process.env, storage, geminiStore =
     const openRouterStored = envApiKeys.openrouter
         ? { value: undefined }
         : await readStoredOpenRouterApiKey(openRouterStore).catch(() => ({ value: undefined }));
-    const openAICodexAuthConfigured = await hasOpenAICodexAuth(storage);
+    const openAICodexAuthState = await getOpenAICodexAuthState(storage);
     return {
-        openai: openAICodexAuthConfigured
-            ? { configured: true, source: 'pi-auth' }
-            : { configured: false, source: undefined },
+        openai: openAICodexAuthState === 'missing'
+            ? { configured: false, source: undefined }
+            : {
+                configured: true,
+                source: 'pi-auth',
+                refreshFailed: openAICodexAuthState === 'refresh-failed',
+            },
         gemini: envApiKeys.gemini
             ? { configured: true, source: 'env' }
             : {

package/dist/config.js

@@ -1,4 +1,4 @@
-import { getStoredGeminiApiKey, getStoredOpenRouterApiKey, hasOpenAICodexAuth, PI_AUTH_API_KEY, } from './auth.js';
+import { getOpenAICodexAuthState, getStoredGeminiApiKey, getStoredOpenRouterApiKey, PI_AUTH_API_KEY, } from './auth.js';
 import { getEnvApiKeys } from './env.js';
 const REQUIRED_CLI_AUTH_PROVIDERS = [{ provider: 'openai', label: 'OpenAI' }];
 const ALL_REVIEW_FOCUSES = [
@@ -29,7 +29,7 @@ function createCliGeminiSummaryModel(credential) {
 export async function getApiKeys(env = process.env, auth = {
     getStoredGeminiApiKey,
     getStoredOpenRouterApiKey,
-    hasOpenAICodexAuth,
+    getOpenAICodexAuthState,
 }) {
     const envApiKeys = getEnvApiKeys(env);
     const storedGeminiApiKey = envApiKeys.gemini
@@ -38,7 +38,7 @@ export async function getApiKeys(env = process.env, auth = {
     const storedOpenRouterApiKey = envApiKeys.openrouter
         ? undefined
         : await auth.getStoredOpenRouterApiKey().catch(() => undefined);
-    const openAICodexAuthConfigured = await auth.hasOpenAICodexAuth();
+    const openAICodexAuthState = await auth.getOpenAICodexAuthState();
     const openRouterApiKey = envApiKeys.openrouter || storedOpenRouterApiKey;
     const apiKeys = {};
     const geminiApiKey = envApiKeys.gemini || storedGeminiApiKey;
@@ -49,13 +49,16 @@ export async function getApiKeys(env = process.env, auth = {
         apiKeys.deepseek = { apiKey: openRouterApiKey, piProviderId: 'openrouter' };
         apiKeys.zai = { apiKey: openRouterApiKey, piProviderId: 'openrouter' };
     }
-    if (openAICodexAuthConfigured) {
+    if (openAICodexAuthState === 'ready') {
         apiKeys.openai = PI_AUTH_API_KEY;
     }
     return apiKeys;
 }
 export function getMissingRequiredCliAuthProviders(status) {
-    return REQUIRED_CLI_AUTH_PROVIDERS.filter(({ provider }) => !status[provider].configured).map(({ label }) => label);
+    return REQUIRED_CLI_AUTH_PROVIDERS.filter(({ provider }) => {
+        const providerStatus = status[provider];
+        return !providerStatus.configured || providerStatus.refreshFailed === true;
+    }).map(({ label }) => label);
 }
 export function getMissingRequiredCliReviewAuthProviders(apiKeys) {
     return REQUIRED_CLI_AUTH_PROVIDERS.filter(({ provider }) => {
@@ -67,7 +70,7 @@ export function getMissingRequiredCliReviewAuthProviders(apiKeys) {
     }).map(({ label }) => label);
 }
 export function formatMissingRequiredCliAuthProviders(missingProviders) {
-    return `${missingProviders.join(' and ')} not configured; run \`doistbot auth\``;
+    return `${missingProviders.join(' and ')} authentication unavailable (not configured, or the session could not be refreshed); run \`doistbot auth login\``;
 }
 export function getCliReviewRouting(apiKeys) {
     const hasGemini = Boolean(apiKeys.gemini);

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@doist/doistbot-cli",
-    "version": "1.0.7",
+    "version": "1.0.8",
     "description": "Local self-review CLI for Doistbot",
     "type": "module",
     "main": "dist/index.js",
@@ -42,8 +42,8 @@
     "dependencies": {
         "@inquirer/checkbox": "5.2.1",
         "@inquirer/password": "5.1.1",
-        "@earendil-works/pi-ai": "0.79.6",
-        "@earendil-works/pi-coding-agent": "0.79.6",
+        "@earendil-works/pi-ai": "0.80.6",
+        "@earendil-works/pi-coding-agent": "0.80.6",
         "@napi-rs/keyring": "1.3.0",
         "ajv": "8.20.0",
         "chalk": "4.1.2",

package/sandbox/dist/core/pi.js

@@ -13,7 +13,7 @@ export const DEFAULT_PI_MODELS = {
     deepseek: 'deepseek-v4-pro',
     gemini: 'gemini-3.1-pro-preview',
     zai: 'glm5.2',
-    openai: 'gpt-5.4',
+    openai: 'gpt-5.6-terra',
 };
 export const DEFAULT_OPENROUTER_MODELS = {
     deepseek: 'deepseek/deepseek-v4-pro',

package/sandbox/dist/tasks/chat/chat.js

@@ -11,8 +11,9 @@ import { withPhase } from '../../core/tracing.js';
 import { buildPrompt } from './prompt.js';
 const CHAT_PROMPT_FILE = 'chat-prompt.md';
 const CHAT_TIMEOUT_MS = 5 * 60 * 1000;
-const CHAT_PROVIDER = 'zai';
-const CHAT_MODEL = 'z-ai/glm-5.2';
+const CHAT_PROVIDER = 'openai';
+const CHAT_MODEL = 'gpt-5.6-luna';
+const CHAT_THINKING_LEVEL = 'high';
 function parseContext() {
     const base = parseBaseContext();
     const reactionIdRaw = process.env.REACTION_ID;
@@ -125,12 +126,12 @@ async function gatherIssueCommentContext(octokit, owner, repo, prNumber, comment
     };
 }
 export async function invokeChatModel(prompt) {
-    const apiKey = process.env.OPENROUTER_API_KEY?.trim();
+    const apiKey = process.env.OPENAI_KEY?.trim();
     if (!apiKey) {
         // Config error: no model call attempted, so no model span. The reason is
         // returned so the caller's root span reports the real cause.
         logger.warn('Chat model API key missing');
-        return { ok: false, reason: 'OPENROUTER_API_KEY missing' };
+        return { ok: false, reason: 'OPENAI_KEY missing' };
     }
     return withPhase('chat.model', {
         'gen_ai.operation.name': 'chat',
@@ -140,11 +141,11 @@ export async function invokeChatModel(prompt) {
         const result = await invokePiPrompt({
             provider: CHAT_PROVIDER,
             apiKey,
-            piProviderId: 'openrouter',
             prompt,
             cwd: WORKSPACE_DIR,
             timeoutMs: CHAT_TIMEOUT_MS,
             capabilityPreset: 'workspace-inspection',
+            thinkingLevel: CHAT_THINKING_LEVEL,
             // Keep the executed model in sync with the recorded span attr.
             modelName: CHAT_MODEL,
         });
@@ -371,7 +372,7 @@ async function main() {
             await recordTaskMetrics({
                 type: 'chat',
                 repository: `${ctx.owner}/${ctx.repo}`,
-                model: 'zai',
+                model: 'openai',
                 outcome: metricOutcome,
                 durationMs: performance.now() - startedAt,
             });

package/sandbox/dist/tasks/issue-triage/fix-attempt.js

@@ -383,6 +383,7 @@ export async function runFixCore(input) {
         prompt,
         apiKey: ctx.openaiApiKey,
         cwd: targetRepo.localPath,
+        thinkingLevel: 'xhigh',
         timeoutMs,
         extraEnv: {
             GH_TOKEN: input.ghToken,