@nevescloud/pip 3.8.0 → 3.8.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nevescloud/pip",
-  "version": "3.8.0",
+  "version": "3.8.2",
   "description": "Floating assistant bubble + panel + chat runtime. ESM, no build.",
   "type": "module",
   "main": "pip-core.esm.js",

package/providers/anthropic.esm.js

@@ -23,8 +23,14 @@ export function anthropic({
   effort,
   cacheControl,
   extraHeaders = {},
+  // When true, the host is routing through a proxy/bridge that injects
+  // auth + version headers server-side. The provider then sends only
+  // content-type; this avoids the CORS preflight burden of x-api-key /
+  // anthropic-version / anthropic-dangerous-direct-browser-access on
+  // proxies that haven't allowlisted those headers.
+  proxied = false,
 } = {}) {
-  if (!apiKey) throw new Error('anthropic provider: apiKey is required');
+  if (!proxied && !apiKey) throw new Error('anthropic provider: apiKey is required (or set proxied: true when routing through a bridge that injects auth)');
 
   return async function* anthropicProvider({ messages, tools, system, signal }) {
     const body = {
@@ -45,15 +51,16 @@ export function anthropic({
     if (effort) body.output_config = { effort };
     if (cacheControl) body.cache_control = { type: cacheControl };
 
+    const headers = { 'content-type': 'application/json', ...extraHeaders };
+    if (!proxied) {
+      headers['x-api-key'] = apiKey;
+      headers['anthropic-version'] = ANTHROPIC_VERSION;
+      headers['anthropic-dangerous-direct-browser-access'] = 'true';
+    }
+
     const res = await fetch(`${baseUrl}/v1/messages`, {
       method: 'POST',
-      headers: {
-        'content-type': 'application/json',
-        'x-api-key': apiKey,
-        'anthropic-version': ANTHROPIC_VERSION,
-        'anthropic-dangerous-direct-browser-access': 'true',
-        ...extraHeaders,
-      },
+      headers,
       body: JSON.stringify(body),
       signal,
     });

package/runtime.esm.js

@@ -236,20 +236,19 @@ export function createRuntime({
       return { clearedUI: true };
     }
     if (cmd === 'tools') {
-      const list = Array.from(registeredTools.values())
-        .map((t) => `\`${t.name}\` — ${t.description || ''}`)
-        .join('\n');
-      return { reply: list ? '**Tools:**\n' + list : 'No tools registered.' };
+      // The slash autocomplete dropdown enumerates registered tools via
+      // complete() — listing them as a chat turn duplicates that surface
+      // and pollutes history. Reopen the dropdown in arg-mode instead;
+      // same primitive /help and /model adopted via openCompletions.
+      if (registeredTools.size === 0) return { reply: 'No tools registered.' };
+      return { openCompletions: true };
     }
     if (cmd === 'model' && models.length) {
       const arg = args.trim();
       if (!arg) {
-        const cur = currentModelName ? `\`${currentModelName}\`` : '(unknown)';
-        const others = models
-          .filter((m) => m.name !== currentModelName)
-          .map((m) => `\`${m.name}\``);
-        const tail = others.length ? ` Switch with \`/model <name>\` — try ${others.join(', ')}.` : '';
-        return { reply: `Current model: ${cur}.${tail}` };
+        // Same sub-menu pattern as /tools — open the dropdown for the user
+        // to pick a model, instead of logging "Current model: …" to chat.
+        return { openCompletions: true };
       }
       const target = models.find((m) => m.name.toLowerCase() === arg.toLowerCase());
       if (!target) {
@@ -294,7 +293,12 @@ export function createRuntime({
   function builtinSlash() {
     const out = [
       { name: 'clear', description: 'reset conversation' },
-      { name: 'tools', description: 'list registered tools' },
+      {
+        name: 'tools',
+        description: 'list registered tools',
+        complete: (partial) => Array.from(registeredTools.keys())
+          .filter((n) => n.toLowerCase().startsWith(partial.toLowerCase())),
+      },
     ];
     if (models.length) {
       out.push({