@nathapp/nax-agent 0.91.7-canary.6 → 0.91.7-canary.7

package/CHANGELOG.md

@@ -4,6 +4,10 @@ All notable changes to `@nathapp/nax-agent` are recorded here. The format follow
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). While the version is `0.x`, a minor
 release may change the public API.
 
+## [0.91.7-canary.7] - 2026-10-29
+
+- No changes in this package. Released in lockstep with the other nax packages.
+
 ## [0.91.7-canary.6] - 2026-10-28
 
 - No changes in this package. Released in lockstep with the other nax packages.

package/dist/config/catalog-overrides.d.ts

@@ -95,7 +95,7 @@ export interface CatalogModelOverride {
      * Thinking wire format for an `openai-completions` model (nax#2696).
      * Mirrored from nax-ai's ThinkingFormat; omit to inherit the provider's format.
      */
-    thinkingFormat?: "openai" | "qwen" | "qwen-chat-template" | "deepseek" | "zai";
+    thinkingFormat?: "openai" | "qwen" | "qwen-chat-template" | "deepseek" | "zai" | "openrouter";
 }
 /** Provider-scoped catalog overrides — maps 1:1 onto nax-ai's `ProviderOverride[]`. */
 export interface ProviderCatalogOverride {
@@ -105,6 +105,10 @@ export interface ProviderCatalogOverride {
      * not to `models` individually, despite sitting alongside a model list.
      */
     baseUrl?: string;
+    /** Environment variable supplying a custom provider's bearer credential. */
+    authEnv?: string;
+    /** Config/precheck opt-in only; never forwarded to nax-ai or enforced here. */
+    allowInsecureHttp?: boolean;
     /** Provider-wide extra request headers (nax#2019). May carry credentials. */
     headers?: Record<string, string>;
     models: CatalogModelOverride[];

package/dist/native/adapter-deps.d.ts

@@ -16,6 +16,8 @@ export declare function isProtocolStreamError(err: unknown): err is {
 export declare const _adapterDeps: {
     listStoredProviders: typeof listStoredProviders;
     anyAmbientCredential: typeof anyAmbientCredential;
+    /** Environment lookup for custom providers not covered by pi's ambient probe. */
+    readEnv: (name: string) => string | undefined;
     /**
      * US-004: whether the global auth config points at an exec helper. Injectable
      * so a test can pin the credential-source decision without writing

package/dist/native/adapter-deps.js

@@ -12,6 +12,8 @@ export function isProtocolStreamError(err) {
 export const _adapterDeps = {
     listStoredProviders,
     anyAmbientCredential,
+    /** Environment lookup for custom providers not covered by pi's ambient probe. */
+    readEnv: (name) => process.env[name],
     /**
      * US-004: whether the global auth config points at an exec helper. Injectable
      * so a test can pin the credential-source decision without writing

package/dist/native/models.js

@@ -103,6 +103,7 @@ export function toProviderOverrides(overrides) {
         // `!== undefined` as a declaration and checks it against the protocol
         // entries (nax#2019).
         ...(override.baseUrl !== undefined ? { baseUrl: override.baseUrl } : {}),
+        ...(override.authEnv !== undefined ? { authEnv: override.authEnv } : {}),
         // Copied, not aliased: nax-ai's client catalog assigns this reference
         // straight onto ResolvedProvider.headers (providers/catalog.ts) without a
         // copy of its own, so forwarding the live config object would let a later

package/dist/native/session-adapter.js

@@ -128,6 +128,9 @@ export class NativeSessionAdapter {
                 return true;
             if ((await _adapterDeps.listStoredProviders()).length > 0)
                 return true;
+            if (this.catalogOverrides.some((override) => override.authEnv !== undefined && !!_adapterDeps.readEnv(override.authEnv))) {
+                return true;
+            }
             return await _adapterDeps.anyAmbientCredential();
         }
         catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nathapp/nax-agent",
-  "version": "0.91.7-canary.6",
+  "version": "0.91.7-canary.7",
   "description": "nax's native coding agent: session contract, native loop, tools, permissions, sandbox, command-safety.",
   "license": "MIT",
   "author": "William Khoo",
@@ -47,7 +47,7 @@
   "dependencies": {
     "@anthropic-ai/sandbox-runtime": "0.0.77",
     "@modelcontextprotocol/sdk": "^1.32.1",
-    "@nathapp/nax-ai": "0.91.7-canary.6",
+    "@nathapp/nax-ai": "0.91.7-canary.7",
     "zod": "^4.3.6"
   },
   "publishConfig": {