@gajae-code/ai 0.14.2 → 0.15.0

package/dist/types/providers/cursor-pi-args.d.ts

@@ -0,0 +1,119 @@
+/**
+ * Translate a Pi frame's args into the local tool kwargs that run it.
+ *
+ * Shared deliberately by three consumers: the provider synthesizes a display
+ * block from these, the coding-agent bridge executes with them, and the legacy
+ * pi shim performs the identical translation for the old wire. Separate
+ * hand-rolled copies drift, and the drift is invisible — the transcript shows
+ * one operation while a different one runs.
+ *
+ * Kept apart from `cursor/exec-modern.ts` on purpose: these are pure
+ * string/path functions with no protobuf coupling, while that module pulls in
+ * `@bufbuild/protobuf` and the generated `agent_pb` graph. The legacy shim is
+ * compiled into the bundled virtual module registry, so importing it from a
+ * nested path would drag the whole exec implementation in with it — and
+ * `./providers/*` is a single-segment wildcard export that cannot serve a
+ * nested specifier under bunfs (issue #3442).
+ *
+ * Every `optional int32` here is presence-sensitive: `0` is a supplied value,
+ * not "unset", so it must never be folded into a default.
+ */
+/**
+ * A `pi_read` range composed onto the path as `read`'s inline `:raw:N+K`
+ * selector.
+ *
+ * `read` exposes no range kwargs, so an uncomposed range reads the whole file.
+ * `offset` is a 1-indexed start clamped like the reference's
+ * `Math.max(0, offset - 1)` over 0-indexed lines; `limit` is a line count.
+ * `null` marks a present `limit: 0` — zero lines, which no selector expresses
+ * and which must not degrade into a whole-file read.
+ *
+ * The range is `raw` because a plain `:N+K` deliberately pads with one leading
+ * and three trailing context lines: helpful for a human reading a snippet,
+ * wrong for a caller that asked for exactly `limit` lines from `offset`. The
+ * wire result is an opaque `output` string, so the hashline and line-number
+ * gutter that `raw` also drops carry nothing the frame's contract needs.
+ * A range-free read keeps the ordinary form — whole-file reads want them.
+ */
+export declare function piReadPath(readPath: string, offset?: number, limit?: number): string | null;
+/**
+ * Whether a read path ends in an OMP line selector, including compound `raw`
+ * forms. Cursor uses this only to describe the operation already executed by
+ * the coding-agent read tool; the selector remains embedded in the path.
+ */
+export declare function piReadPathHasRange(readPath: string): boolean;
+/**
+ * The same range as {@link piReadPath}, rendered for a transcript block rather
+ * than for execution.
+ *
+ * Differs only at `limit: 0`, where `piReadPath` returns `null` because no
+ * selector reads zero lines and the frame is answered with empty output
+ * directly. The block still has to say so: falling back to the bare path there
+ * would record a whole-file read whose result is empty, which is the widest
+ * possible gap between what a rebuilt transcript shows and what happened.
+ * `+0` is never executed — it exists to be read.
+ */
+export declare function piReadDisplayPath(readPath: string, offset?: number, limit?: number): string;
+/**
+ * A legacy `grep` frame's pagination `offset` as the local tool's file `skip`.
+ *
+ * `grep` paginates by file and reports "use skip=N for the next page" in that
+ * same unit, so the offset maps across directly. A present `0` means "start at
+ * the beginning", which is the unskipped search rather than a skip of zero.
+ *
+ * Shared because both the executing bridge and the provider's transcript
+ * synthesis need it: a block showing an unskipped search beside a result from
+ * a later file window misreports what was searched.
+ */
+export declare function piGrepSkip(offset?: number): number | undefined;
+/**
+ * Join a Pi frame's optional `path` with the `glob`/`pattern` it scopes.
+ *
+ * The local `grep`/`glob` tools take one combined path spec. An absolute
+ * pattern ignores the path, and an absent or `.` path leaves the pattern
+ * standing alone rather than building a `./`- or `//`-prefixed spec.
+ *
+ * Uses `node:path` rather than string surgery so Windows absolutes (`C:\…`,
+ * UNC) are recognised and separators stay normalized.
+ */
+export declare function piJoinPath(basePath: string | undefined, pattern: string): string;
+/**
+ * The path a `pi_ls` frame lists.
+ *
+ * The frame's `limit` is deliberately NOT mapped. It caps directory *entries*
+ * (the reference does a flat `readdir` and slices the entry array), while the
+ * local `read` tool renders a depth-2 tree with per-directory caps and elision
+ * summaries and applies a selector as a *rendered line* slice. Nested rows,
+ * headers and "N more" lines all count toward that slice, so `:1+K` would cap
+ * a different unit while looking honored — worse than leaving it unset, which
+ * at least reports the local listing's own truncation faithfully.
+ */
+export declare function piLsPath(basePath: string | undefined): string;
+/** Escape a literal string so the regex-only local `grep` tool matches it verbatim. */
+export declare function piEscapeRegexLiteral(value: string): string;
+/** Clamp a present `optional int32` result cap the way the reference does; `undefined` stays unset. */
+export declare function piLimit(limit: number | undefined): number | undefined;
+/**
+ * A `pi_bash` frame's timeout as the local `bash` tool's kwarg.
+ *
+ * Presence-sensitive like every other `optional int32` here, and unusually
+ * load-bearing: `bash` documents `timeout: 0` as "disables the command
+ * deadline", so folding a supplied `0` into `undefined` applies the 300s
+ * default and kills exactly the long-running command that asked not to be.
+ * Negative values have no local meaning and fall back to the default.
+ */
+export declare function piTimeout(timeout: number | undefined): number | undefined;
+/**
+ * Drop keys whose value is `undefined` so optional local-tool kwargs stay
+ * absent rather than present-as-undefined.
+ *
+ * The Cursor exec bridge historically wrote forms like
+ * `cwd: workingDirectory || undefined` and
+ * `case: caseInsensitive === true ? false : undefined`. ArkType rejects a
+ * present `undefined` on an optional field (`was undefined`) even though
+ * omitting the key is valid — which flooded Cursor sessions with bash/grep
+ * validation errors for otherwise fine frames.
+ */
+export declare function omitUndefinedArgs<T extends Record<string, unknown>>(args: T): {
+    [K in keyof T]?: Exclude<T[K], undefined>;
+};

package/dist/types/providers/cursor.d.ts

@@ -1,5 +1,6 @@
 import { type JsonValue } from "@bufbuild/protobuf";
 import type { CursorExecHandlerResult, CursorExecHandlers, CursorToolResultHandler, Message, StreamFunction, StreamOptions, ToolCall, ToolResultMessage } from "../types";
+import { kCursorExecResolved } from "../utils/block-symbols";
 import { CURSOR_CLIENT_VERSION } from "./cursor/client-version";
 export declare const CURSOR_API_URL = "https://api2.cursor.sh";
 export { CURSOR_CLIENT_VERSION };
@@ -15,13 +16,19 @@ export declare const streamCursor: StreamFunction<"cursor-agent">;
 type ToolCallState = ToolCall & {
     index: number;
     partialJson?: string;
-    kind: "mcp" | "todo_write" | "native";
+    kind: "mcp" | "todo_write" | "native" | "cursor-exec";
+    [kCursorExecResolved]?: true;
 };
 /** Exported for tests: verifies handler is invoked with correct `this` when passed as bound. */
 export declare function resolveExecHandler<TArgs, TResult>(args: TArgs, handler: ((args: TArgs) => Promise<CursorExecHandlerResult<TResult>>) | undefined, onToolResult: CursorToolResultHandler | undefined, buildFromToolResult: (toolResult: ToolResultMessage) => TResult, buildRejected: (reason: string) => TResult, buildError: (error: string) => TResult): Promise<{
     execResult: TResult;
     toolResult?: ToolResultMessage;
 }>;
+/** Exported for deterministic coverage of ordered server-message handling. */
+export declare function createCursorMessageQueueForTest(onError?: (error: unknown) => void): {
+    enqueue(handler: () => void | Promise<void>): Promise<void>;
+    drain(): Promise<void>;
+};
 /** Exported for direct regression coverage of the JSON-safety boundary. */
 export declare function cursorJsonSafeValueForTest(value: unknown): unknown;
 export declare function buildNativeToolCallBlock(toolCall: Record<string, unknown>, callId: string, index: number): ToolCallState | null;

package/dist/types/providers/openai-codex-responses.d.ts

@@ -21,6 +21,8 @@ export interface OpenAICodexWebSocketDebugStats {
 }
 /** @internal Exported for tests. */
 export declare function normalizeCodexToolChoice(choice: ToolChoice | undefined, tools?: Tool[], model?: Model<"openai-codex-responses">): string | Record<string, unknown> | undefined;
+/** @internal Exported for tests. */
+export declare function formatCodexUserAgent(platform: string, release: string, arch: string): string;
 export declare const streamOpenAICodexResponses: StreamFunction<"openai-codex-responses">;
 export declare function prewarmOpenAICodexResponses(model: Model<"openai-codex-responses">, options?: Pick<OpenAICodexResponsesOptions, "apiKey" | "headers" | "sessionId" | "signal" | "preferWebsockets" | "providerSessionState">): Promise<void>;
 export interface OpenAICodexTransportDetails {

package/dist/types/providers/openai-responses-shared.d.ts

@@ -39,7 +39,7 @@ export declare function collectCustomCallIds(messages: ResponseInput): Set<strin
 export declare function repairOrphanResponsesToolOutputs(input: ResponseInput): ResponseInput;
 export declare function convertResponsesInputContent(content: string | Array<TextContent | ImageContent>, supportsImages: boolean): ResponseInputContent[] | undefined;
 export declare function convertResponsesAssistantMessage<TApi extends Api>(assistantMsg: AssistantMessage, model: Model<TApi>, msgIndex: number, knownCallIds: Set<string>, includeThinkingSignatures?: boolean, customCallIds?: Set<string>): ResponseInput;
-export declare function appendResponsesToolResultMessages<TApi extends Api>(messages: ResponseInput, toolResult: ToolResultMessage, model: Model<TApi>, strictResponsesPairing: boolean, knownCallIds: ReadonlySet<string>, customCallIds?: ReadonlySet<string>): void;
+export declare function appendResponsesToolResultMessages<TApi extends Api>(messages: ResponseInput, toolResults: readonly ToolResultMessage[], model: Model<TApi>, strictResponsesPairing: boolean, knownCallIds: ReadonlySet<string>, customCallIds?: ReadonlySet<string>): void;
 export interface ProcessResponsesStreamOptions {
     onFirstToken?: () => void;
     onOutputItemDone?: (item: ResponseOutputItem) => void;

package/dist/types/types.d.ts

@@ -3,7 +3,7 @@ import type { BedrockOptions } from "./providers/amazon-bedrock";
 import type { AnthropicOptions } from "./providers/anthropic";
 import type { AzureOpenAIResponsesOptions } from "./providers/azure-openai-responses";
 import type { CursorOptions } from "./providers/cursor";
-import type { DeleteArgs, DeleteResult, DiagnosticsArgs, DiagnosticsResult, GrepArgs, GrepResult, LsArgs, LsResult, McpResult, ReadArgs, ReadResult, ShellArgs, ShellResult, WriteArgs, WriteResult } from "./providers/cursor/gen/agent_pb";
+import type { DeleteArgs, DeleteResult, DiagnosticsArgs, DiagnosticsResult, GrepArgs, GrepResult, LsArgs, LsResult, McpResult, PiBashExecArgs, PiBashExecResult, PiEditExecArgs, PiEditExecResult, PiFindExecArgs, PiFindExecResult, PiGrepExecArgs, PiGrepExecResult, PiLsExecArgs, PiLsExecResult, PiReadExecArgs, PiReadExecResult, PiWriteExecArgs, PiWriteExecResult, ReadArgs, ReadResult, ShellArgs, ShellResult, WriteArgs, WriteResult } from "./providers/cursor/gen/agent_pb";
 import type { GoogleOptions } from "./providers/google";
 import type { GoogleGeminiCliOptions } from "./providers/google-gemini-cli";
 import type { GoogleVertexOptions } from "./providers/google-vertex";
@@ -461,6 +461,26 @@ export interface Usage {
 }
 export type StopReason = "stop" | "length" | "toolUse" | "error" | "aborted";
 export type AssistantErrorKind = "provider_safety_stop" | "local_snapshot_failure" | "local_buffer_overflow";
+/**
+ * Structured, shape-only staging-buffer overflow diagnostic carried on the
+ * terminal `AssistantMessage`. Attached only by the agent runtime from its own
+ * identity-checked overflow error; every field is a closed vocabulary literal
+ * or a locally synthesized number.
+ */
+export interface AssistantBufferOverflowDiagnostic {
+    /** Rejecting stage from the closed managed-local-failure vocabulary. */
+    stage: string;
+    /** Which provisional cap tripped. */
+    exceeded: "events" | "bytes" | "both";
+    /** Events retained in the batch at rejection (post-compaction). */
+    stagedEventCount: number;
+    /** Bytes retained in the batch at rejection (post-compaction). */
+    stagedBytes: number;
+    /** Serialized size of the event that was rejected. */
+    incomingEventBytes: number;
+    maxStagedEvents: number;
+    maxStagedBytes: number;
+}
 export interface OpenAIResponsesHistoryPayload {
     type: "openaiResponsesHistory";
     provider?: string;
@@ -499,6 +519,15 @@ export interface AssistantMessage {
     stopReason: StopReason;
     errorMessage?: string;
     errorKind?: AssistantErrorKind;
+    /**
+     * Structured, shape-only diagnostic for a terminal local staging-buffer
+     * overflow (`errorKind: "local_buffer_overflow"`). Attached only by the
+     * agent runtime from its own identity-checked overflow error, so a
+     * foreign, self-labeled error cannot populate it. Every field is a closed
+     * vocabulary literal or a locally synthesized number — parent surfaces
+     * render this instead of trusting the free-form `errorMessage`.
+     */
+    bufferOverflow?: AssistantBufferOverflowDiagnostic;
     /** HTTP status surfaced by the provider when the request failed. Populated by every provider's catch block alongside `errorMessage` so consumers (auth retry, telemetry, UI) can branch without regex-scraping the message. */
     errorStatus?: number;
     /** Typed upstream failure facts retained for retry classification without parsing errorMessage. */
@@ -548,6 +577,10 @@ export interface CursorShellStreamCallbacks {
     onStdout(data: string): void;
     onStderr(data: string): void;
 }
+export interface CursorPiCall<TArgs> {
+    args: TArgs;
+    toolCallId: string;
+}
 export interface CursorExecHandlers {
     read?: (args: ReadArgs) => Promise<CursorExecHandlerResult<ReadResult>>;
     ls?: (args: LsArgs) => Promise<CursorExecHandlerResult<LsResult>>;
@@ -558,6 +591,13 @@ export interface CursorExecHandlers {
     shellStream?: (args: ShellArgs, callbacks: CursorShellStreamCallbacks) => Promise<CursorExecHandlerResult<ShellResult>>;
     diagnostics?: (args: DiagnosticsArgs) => Promise<CursorExecHandlerResult<DiagnosticsResult>>;
     mcp?: (call: CursorMcpCall) => Promise<CursorExecHandlerResult<McpResult>>;
+    piRead?: (call: CursorPiCall<PiReadExecArgs>) => Promise<CursorExecHandlerResult<PiReadExecResult>>;
+    piBash?: (call: CursorPiCall<PiBashExecArgs>) => Promise<CursorExecHandlerResult<PiBashExecResult>>;
+    piEdit?: (call: CursorPiCall<PiEditExecArgs>) => Promise<CursorExecHandlerResult<PiEditExecResult>>;
+    piWrite?: (call: CursorPiCall<PiWriteExecArgs>) => Promise<CursorExecHandlerResult<PiWriteExecResult>>;
+    piGrep?: (call: CursorPiCall<PiGrepExecArgs>) => Promise<CursorExecHandlerResult<PiGrepExecResult>>;
+    piFind?: (call: CursorPiCall<PiFindExecArgs>) => Promise<CursorExecHandlerResult<PiFindExecResult>>;
+    piLs?: (call: CursorPiCall<PiLsExecArgs>) => Promise<CursorExecHandlerResult<PiLsExecResult>>;
     onToolResult?: CursorToolResultHandler;
 }
 /**

package/dist/types/utils/block-symbols.d.ts

@@ -0,0 +1,6 @@
+export declare const kCursorExecResolved: unique symbol;
+export type CursorExecResolvedCarrier = object & {
+    [kCursorExecResolved]?: true;
+};
+export declare function isCursorExecResolved(block: CursorExecResolvedCarrier | null | undefined): boolean;
+export declare function copyCursorExecResolved(target: CursorExecResolvedCarrier, source: CursorExecResolvedCarrier): void;

package/dist/types/utils/discovery/openai-compatible.d.ts

@@ -1,4 +1,6 @@
 import type { Api, FetchImpl, Model, Provider } from "../../types";
+/** Catalog identities are rendered and used for routing; unsafe values are dropped, never rewritten. */
+export declare function isSafeCatalogModelId(value: unknown): value is string;
 /**
  * Minimal OpenAI-style model entry shape consumed by discovery.
  *

package/dist/types/utils/idle-iterator.d.ts

@@ -1,4 +1,5 @@
 export declare function getProviderStreamIdleTimeoutFallbackMs(provider: string): number | undefined;
+export declare function isGrokModelId(modelId: string | undefined): boolean;
 export declare function getProviderFirstEventTimeoutFallbackMs(provider: string): number | undefined;
 /**
  * Returns the idle timeout used for provider streaming transports.
@@ -16,8 +17,10 @@ export declare function getStreamIdleTimeoutMs(fallbackMs?: number): number | un
  *
  * Honors `GJC_OPENAI_STREAM_IDLE_TIMEOUT_MS` first (`PI_OPENAI_STREAM_IDLE_TIMEOUT_MS` is the legacy alias). Set `=0` to disable.
  * When `provider` is given, long-reasoning hosts (xAI Grok and Grok Build) use that floor instead of the 120s default.
+ * Grok models reached through other OpenAI-compatible hosts (`openrouter/x-ai/grok-*`, kilo, litellm, …) get the
+ * same floor keyed on the model id, because long-reasoning silence is a property of the model (#4797).
  */
-export declare function getOpenAIStreamIdleTimeoutMs(provider?: string): number | undefined;
+export declare function getOpenAIStreamIdleTimeoutMs(provider?: string, modelId?: string): number | undefined;
 /**
  * Returns the timeout used while waiting for the first stream event.
  * The first token can legitimately take longer than later inter-event gaps,
@@ -47,7 +50,7 @@ export declare function getStreamFirstEventTimeoutMs(idleTimeoutMs?: number, fal
  *   window so a short post-connect first-event budget cannot kill legitimate
  *   slow setup.
  */
-export declare function resolveOpenAISdkRequestTimeoutMs(provider: string, streamFirstEventTimeoutOverride?: number): number | undefined;
+export declare function resolveOpenAISdkRequestTimeoutMs(provider: string, streamFirstEventTimeoutOverride?: number, modelId?: string): number | undefined;
 /**
  * Resolves the Anthropic SDK client `timeout` so stalled-before-headers requests
  * are bounded. The Anthropic first-event watchdog deliberately arms only once

package/dist/types/utils/oauth/kimi.d.ts

@@ -4,15 +4,9 @@
 import type { OAuthController, OAuthCredentials } from "./types";
 /** Test seam: the OAuth host as resolved from trusted env. */
 export declare function resolveKimiOAuthHostForTest(): string;
-export declare let getKimiCommonHeaders: () => Readonly<{
-    "User-Agent": `KimiCLI/${string}`;
-    "X-Msh-Platform": "kimi_cli";
-    "X-Msh-Version": string;
-    "X-Msh-Device-Name": string;
-    "X-Msh-Device-Model": string;
-    "X-Msh-Os-Version": string;
-    "X-Msh-Device-Id": string;
-}>;
+/** @internal Exported for tests. Builds unsanitized-input-safe Kimi common headers. */
+export declare function buildKimiCommonHeaders(): Readonly<Record<string, string>>;
+export declare const getKimiCommonHeaders: () => Readonly<Record<string, string>>;
 /**
  * Login with Kimi Code OAuth (device code flow).
  */

package/dist/types/utils/oauth/openrouter.d.ts

@@ -0,0 +1 @@
+export declare const loginOpenRouter: (options: import("./types").OAuthController) => Promise<string>;

package/dist/types/utils/oauth/types.d.ts

@@ -7,7 +7,7 @@ export type OAuthCredentials = {
     email?: string;
     accountId?: string;
 };
-export type OAuthProvider = "kiro" | "alibaba-token-plan" | "anthropic" | "bizrouter" | "mara" | "cerebras" | "cloudflare-ai-gateway" | "cursor" | "deepseek" | "deepinfra" | "fireworks" | "firepass" | "fugu" | "github-copilot" | "google-gemini-cli" | "google-antigravity" | "gitlab-duo" | "huggingface" | "kimi-code" | "kilo" | "kagi" | "litellm" | "lm-studio" | "minimax-code" | "minimax-code-cn" | "moonshot" | "nvidia" | "nanogpt" | "ollama" | "ollama-cloud" | "openai-codex" | "openai-codex-device" | "opencode-go" | "opencode-zen" | "opengateway" | "parallel" | "perplexity" | "qianfan" | "qwen-portal" | "synthetic" | "tavily" | "together" | "venice" | "vercel-ai-gateway" | "vllm" | "xai" | "glm-zcode" | "xiaomi" | "xiaomi-token-plan-sgp" | "xiaomi-token-plan-ams" | "xiaomi-token-plan-cn" | "zenmux" | "opencodex" | "zai";
+export type OAuthProvider = "kiro" | "alibaba-token-plan" | "anthropic" | "bizrouter" | "mara" | "cerebras" | "cloudflare-ai-gateway" | "cursor" | "deepseek" | "deepinfra" | "fireworks" | "firepass" | "fugu" | "github-copilot" | "google-gemini-cli" | "google-antigravity" | "gitlab-duo" | "huggingface" | "kimi-code" | "kilo" | "kagi" | "litellm" | "lm-studio" | "minimax-code" | "minimax-code-cn" | "moonshot" | "nvidia" | "nanogpt" | "ollama" | "ollama-cloud" | "openai-codex" | "openai-codex-device" | "opencode-go" | "opencode-zen" | "opengateway" | "openrouter" | "parallel" | "perplexity" | "qianfan" | "qwen-portal" | "synthetic" | "tavily" | "together" | "venice" | "vercel-ai-gateway" | "vllm" | "xai" | "glm-zcode" | "xiaomi" | "xiaomi-token-plan-sgp" | "xiaomi-token-plan-ams" | "xiaomi-token-plan-cn" | "zenmux" | "opencodex" | "zai";
 export type OAuthProviderId = OAuthProvider | (string & {});
 export type OAuthPrompt = {
     message: string;

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@gajae-code/ai",
-	"version": "0.14.2",
+	"version": "0.15.0",
 	"description": "Unified LLM API with automatic model discovery and provider configuration",
 	"homepage": "https://gajae-code.com",
 	"author": "Yeachan-Heo and Gajae Code Contributors",
@@ -40,8 +40,8 @@
 	"dependencies": {
 		"@anthropic-ai/sdk": "^0.94.0",
 		"@bufbuild/protobuf": "^2.12.0",
-		"@gajae-code/natives": "0.14.2",
-		"@gajae-code/utils": "0.14.2",
+		"@gajae-code/natives": "0.15.0",
+		"@gajae-code/utils": "0.15.0",
 		"openai": "^6.36.0",
 		"partial-json": "^0.1.7",
 		"zod": "4.4.3"
@@ -50,7 +50,7 @@
 		"@types/bun": "^1.3.14"
 	},
 	"engines": {
-		"bun": ">=1.3.14"
+		"bun": ">=1.4.0"
 	},
 	"files": [
 		"src",

package/src/auth-broker/remote-store.ts

@@ -75,7 +75,18 @@ const BACKGROUND_BACKOFF_MAX_MS = 30_000;
 const PRESENTATION_FRESH_MS = 5 * 60_000;
 const PRESENTATION_RETENTION_MS = 24 * 60 * 60_000;
 const PRESENTATION_SIDECAR_VERSION = 1;
-const DEFAULT_PRESENTATION_SIDECAR = path.join(getConfigRootDir(), "auth-broker-presentations.json");
+/**
+ * Default location of the redacted presentation sidecar.
+ *
+ * Derived when a store is constructed, never at import time: the trusted
+ * config root is call-time state (#4761, #4772), so an import-time constant
+ * keeps pointing at the home that was in effect when this module first loaded
+ * and a process can read and write one logical profile through two different
+ * roots (#4786).
+ */
+function defaultPresentationSidecarPath(): string {
+	return path.join(getConfigRootDir(), "auth-broker-presentations.json");
+}
 
 function emptySnapshot(): SnapshotResponse {
 	return {
@@ -194,7 +205,7 @@ export class RemoteAuthCredentialStore implements AuthCredentialStore {
 	constructor(opts: RemoteAuthCredentialStoreOptions) {
 		this.#client = opts.client;
 		this.#streamSnapshots = opts.streamSnapshots ?? true;
-		this.#presentationPath = opts.presentationPath ?? DEFAULT_PRESENTATION_SIDECAR;
+		this.#presentationPath = opts.presentationPath ?? defaultPresentationSidecarPath();
 		this.#presentationAuthority = createHash("sha256").update(this.#client.baseUrl).digest("hex");
 		this.#applySnapshot(opts.initialSnapshot ?? emptySnapshot(), opts.initialSnapshot?.generation ?? 0, false);
 		this.#setInventoryState("pending", this.#generation, {

package/src/auth-storage.ts

@@ -1676,12 +1676,12 @@ export class AuthStorage {
 		return this.#store.listCredentialInventory?.(provider) ?? [];
 	}
 
-	/** Return local OAuth hard-removal action targets, including disabled rows. */
+	/** Return local credential hard-removal action targets, including disabled rows. */
 	listCredentialRemovalTargets(provider?: string): CredentialRemovalTarget[] {
 		return this.#store.listCredentialRemovalTargets?.(provider) ?? [];
 	}
 
-	/** Remove selected local OAuth rows atomically; conflict leaves all rows intact. */
+	/** Remove selected local credential rows atomically; conflict leaves all rows intact. */
 	removeAuthCredentialsHard(
 		provider: string,
 		targets: readonly CredentialRemovalTarget[],
@@ -3065,6 +3065,12 @@ export class AuthStorage {
 				await saveApiKeyCredential(apiKey);
 				return;
 			}
+			case "openrouter": {
+				const { loginOpenRouter } = await import("./utils/oauth/openrouter");
+				const apiKey = await loginOpenRouter(ctrl);
+				await saveApiKeyCredential(apiKey);
+				return;
+			}
 			case "litellm": {
 				const { loginLiteLLM } = await import("./utils/oauth/litellm");
 				const apiKey = await loginLiteLLM(ctrl);
@@ -6153,9 +6159,7 @@ export class SqliteAuthCredentialStore implements AuthCredentialStore {
 			provider === undefined
 				? (this.#listAllStmt.all() as AuthRow[])
 				: (this.#listAllByProviderStmt.all(provider) as AuthRow[]);
-		return rows
-			.filter(row => row.credential_type === "oauth")
-			.map(row => ({ id: row.id, provider: row.provider, expectedRevision: row.revision }));
+		return rows.map(row => ({ id: row.id, provider: row.provider, expectedRevision: row.revision }));
 	}
 	removeAuthCredentialsHard(
 		provider: string,
@@ -6170,12 +6174,7 @@ export class SqliteAuthCredentialStore implements AuthCredentialStore {
 					.get(target.id) as
 					| { id?: number; provider?: string; credential_type?: string; revision?: number }
 					| undefined;
-				if (
-					!row ||
-					row.provider !== provider ||
-					row.credential_type !== "oauth" ||
-					row.revision !== target.expectedRevision
-				) {
+				if (!row || row.provider !== provider || row.revision !== target.expectedRevision) {
 					currentIds.push(row?.id ?? target.id);
 				}
 			}

package/src/model-cache.ts

@@ -156,3 +156,81 @@ export function writeModelCache<TApi extends Api>(
 		// Cache writes are best-effort; failures should not break model resolution.
 	}
 }
+
+export function insertModelCacheIfAbsent<TApi extends Api>(
+	providerId: string,
+	updatedAt: number,
+	models: Model<TApi>[],
+	authoritative: boolean,
+	staticFingerprint: string,
+	dbPath?: string,
+	dynamicModelIds?: readonly string[],
+	dynamicModelProvenance?: string,
+): boolean {
+	try {
+		const result = getDb(dbPath).run(
+			`INSERT INTO model_cache (provider_id, version, updated_at, authoritative, static_fingerprint, dynamic_model_ids, dynamic_model_provenance, models)
+			 VALUES (?, ?, ?, ?, ?, ?, ?, ?)
+			 ON CONFLICT(provider_id) DO NOTHING`,
+			[
+				providerId,
+				CACHE_SCHEMA_VERSION,
+				updatedAt,
+				authoritative ? 1 : 0,
+				staticFingerprint,
+				dynamicModelIds === undefined ? null : JSON.stringify(dynamicModelIds),
+				dynamicModelProvenance ?? null,
+				JSON.stringify(models),
+			],
+		);
+		return result.changes === 1;
+	} catch {
+		return false;
+	}
+}
+
+export function updateModelCacheIfUnchanged<TApi extends Api>(
+	providerId: string,
+	expectedUpdatedAt: number,
+	expectedDynamicModelIds: readonly string[] | undefined,
+	expectedDynamicModelProvenance: string | undefined,
+	expectedModels: readonly Model<TApi>[],
+	updatedAt: number,
+	models: Model<TApi>[],
+	authoritative: boolean,
+	staticFingerprint: string,
+	dbPath?: string,
+	dynamicModelIds?: readonly string[],
+	dynamicModelProvenance?: string,
+): boolean {
+	try {
+		const expectedIds = expectedDynamicModelIds === undefined ? null : JSON.stringify(expectedDynamicModelIds);
+		const provenance = expectedDynamicModelProvenance ?? null;
+		const nextIds = dynamicModelIds === undefined ? null : JSON.stringify(dynamicModelIds);
+		const nextProvenance = dynamicModelProvenance ?? null;
+		const expectedModelsJson = JSON.stringify(expectedModels);
+		const result = getDb(dbPath).run(
+			`UPDATE model_cache
+			 SET updated_at = ?, authoritative = ?, static_fingerprint = ?, dynamic_model_ids = ?,
+			     dynamic_model_provenance = ?, models = ?
+			 WHERE provider_id = ? AND updated_at = ?
+			   AND dynamic_model_ids IS ? AND dynamic_model_provenance IS ? AND models = ?`,
+			[
+				updatedAt,
+				authoritative ? 1 : 0,
+				staticFingerprint,
+				nextIds,
+				nextProvenance,
+				JSON.stringify(models),
+				providerId,
+				expectedUpdatedAt,
+				expectedIds,
+				provenance,
+				expectedModelsJson,
+			],
+		);
+		return result.changes === 1;
+	} catch {
+		return false;
+	}
+}