@oh-my-pi/pi-ai 17.4.2 → 18.0.0

package/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 ## [Unreleased]
 
+## [18.0.0] - 2026-08-22
+
+### Added
+
+- Added reversible private-use glyph tokenization for Claude-compatible provider requests, including prompt notices, streamed response decoding, and safe handling of unresolved model-authored glyph tokens.
+
+## [17.4.3] - 2026-08-21
+
+### Fixed
+
+- Fixed completed Anthropic turns remaining busy when the provider sent `message_stop` but kept the SSE connection open, which stranded tool execution and queued steering until timeout.
+
 ## [17.4.2] - 2026-08-21
 
 ### Added

package/dist/types/auth-broker/wire-schemas.d.ts

@@ -1,5 +1,69 @@
-export declare const oauthCredentialSchema: import("@oh-my-pi/omptype").Type<import("../index.js").OAuthCredential, import("../index.js").OAuthCredential>, remoteOauthCredentialSchema: import("@oh-my-pi/omptype").Type<import("../index.js").RemoteOAuthCredential, import("../index.js").RemoteOAuthCredential>, apiKeyCredentialSchema: import("@oh-my-pi/omptype").Type<import("../index.js").ApiKeyCredential, import("../index.js").ApiKeyCredential>, writableAuthCredentialSchema: import("@oh-my-pi/omptype").Type<import("../index.js").AuthCredential, import("../index.js").AuthCredential>, snapshotCredentialSchema: import("@oh-my-pi/omptype").Type<import("../index.js").SnapshotCredential, import("../index.js").SnapshotCredential>, credentialSnapshotEntrySchema: import("@oh-my-pi/omptype").Type<import("../index.js").AuthCredentialSnapshotEntry, import("../index.js").AuthCredentialSnapshotEntry>, credentialBlockSnapshotSchema: import("@oh-my-pi/omptype").Type<import("./types.js").CredentialBlockSnapshot, import("./types.js").CredentialBlockSnapshot>, snapshotEntrySchema: import("@oh-my-pi/omptype").Type<import("./types.js").SnapshotEntry, import("./types.js").SnapshotEntry>, refresherScheduleSchema: import("@oh-my-pi/omptype").Type<import("./types.js").RefresherSchedule, import("./types.js").RefresherSchedule>, snapshotResponseSchema: import("@oh-my-pi/omptype").Type<import("./types.js").SnapshotResponse, import("./types.js").SnapshotResponse>, snapshotStreamSnapshotEventSchema: import("@oh-my-pi/omptype").Type<import("./types.js").SnapshotStreamSnapshotEvent, import("./types.js").SnapshotStreamSnapshotEvent>, snapshotStreamEntryEventSchema: import("@oh-my-pi/omptype").Type<import("./types.js").SnapshotStreamEntryEvent, import("./types.js").SnapshotStreamEntryEvent>, snapshotStreamRemovedEventSchema: import("@oh-my-pi/omptype").Type<import("./types.js").SnapshotStreamRemovedEvent, import("./types.js").SnapshotStreamRemovedEvent>, snapshotStreamEventSchema: import("@oh-my-pi/omptype").Type<import("./types.js").SnapshotStreamEvent, import("./types.js").SnapshotStreamEvent>, healthzResponseSchema: import("@oh-my-pi/omptype").Type<import("./types.js").HealthzResponse, import("./types.js").HealthzResponse>, usageResponseSchema: import("@oh-my-pi/omptype").Type<import("./types.js").UsageResponse, import("./types.js").UsageResponse>, usageHistoryResponseSchema: import("@oh-my-pi/omptype").Type<import("./types.js").UsageHistoryResponse, import("./types.js").UsageHistoryResponse>, clientUsageReportRequestSchema: import("@oh-my-pi/omptype").Type<import("../index.js").ClientUsageReport, import("../index.js").ClientUsageReport>, clientUsageReportResponseSchema: import("@oh-my-pi/omptype").Type<import("./types.js").ClientUsageReportResponse, import("./types.js").ClientUsageReportResponse>, clientUsageSummaryResponseSchema: import("@oh-my-pi/omptype").Type<import("./types.js").ClientUsageSummaryResponse, import("./types.js").ClientUsageSummaryResponse>, credentialRefreshResponseSchema: import("@oh-my-pi/omptype").Type<import("./types.js").CredentialRefreshResponse, import("./types.js").CredentialRefreshResponse>, credentialDisableRequestSchema: import("@oh-my-pi/omptype").Type<{
+/**
+ * ArkType schemas for the auth-broker wire protocol.
+ *
+ * Shared between the server (validates inbound request bodies) and the client
+ * (validates responses from the broker). Schemas mirror the TypeScript types
+ * in `./types.ts` 1:1; the types remain the source of truth for static typing,
+ * and `Type` is asserted-compatible with them where possible.
+ *
+ * Envelope and fixed-shape schemas use `"+": "reject"` so unknown keys are
+ * rejected — the previous implementation used a hand-rolled `hasOnlyFields`
+ * allowlist for the same effect. The OAuth credential schema is the deliberate
+ * exception (standard type keeps extra keys): it preserves provider-specific extension fields so
+ * they round-trip through the broker instead of being dropped (see below).
+ */
+import { type FluentType } from "@oh-my-pi/omptype";
+import { type ApiKeyCredential, type AuthCredential, type AuthCredentialSnapshotEntry, type DisabledCredentialSummary, type OAuthCredential, type RemoteOAuthCredential, type SnapshotCredential } from "../auth-storage.js";
+import type { ClientUsageReportRequest, ClientUsageReportResponse, ClientUsageSummaryResponse, CredentialBlockRequest, CredentialBlockResponse, CredentialBlockSnapshot, CredentialBlocksDeleteResponse, CredentialDisableResponse, CredentialRefreshResponse, CredentialUploadRequest, CredentialUploadResponse, DisabledCredentialsResponse, HealthzResponse, RefresherSchedule, SnapshotEntry, SnapshotResponse, SnapshotStreamEntryEvent, SnapshotStreamEvent, SnapshotStreamRemovedEvent, SnapshotStreamSnapshotEvent, UsageHistoryResponse, UsageResponse, UsageStaleResponse } from "./types.js";
+/** Real OAuth credential (broker-side) — refresh token is the actual upstream value. */
+export declare const oauthCredentialSchema: FluentType<OAuthCredential>;
+/** OAuth credential as it appears in broker snapshots — refresh replaced with sentinel. */
+export declare const remoteOauthCredentialSchema: FluentType<RemoteOAuthCredential>;
+export declare const apiKeyCredentialSchema: FluentType<ApiKeyCredential>;
+/** Discriminated union accepted on POST /v1/credential (writes). */
+export declare const writableAuthCredentialSchema: FluentType<AuthCredential>;
+/** Discriminated union returned in snapshots (refresh is sentinel for OAuth). */
+export declare const snapshotCredentialSchema: FluentType<SnapshotCredential>;
+export declare const credentialSnapshotEntrySchema: FluentType<AuthCredentialSnapshotEntry>;
+export declare const credentialBlockSnapshotSchema: FluentType<CredentialBlockSnapshot>;
+export declare const snapshotEntrySchema: FluentType<SnapshotEntry>;
+export declare const refresherScheduleSchema: FluentType<RefresherSchedule>;
+export declare const snapshotResponseSchema: FluentType<SnapshotResponse>;
+/** First frame on connect — full snapshot embedded inline with a `kind` tag. */
+export declare const snapshotStreamSnapshotEventSchema: FluentType<SnapshotStreamSnapshotEvent>;
+/** Per-credential upsert/refresh delta. */
+export declare const snapshotStreamEntryEventSchema: FluentType<SnapshotStreamEntryEvent>;
+/** Per-credential delete delta. */
+export declare const snapshotStreamRemovedEventSchema: FluentType<SnapshotStreamRemovedEvent>;
+/** Discriminated union over every event frame the snapshot stream emits. */
+export declare const snapshotStreamEventSchema: FluentType<SnapshotStreamEvent>;
+export declare const healthzResponseSchema: FluentType<HealthzResponse>;
+/**
+ * Broker `/v1/usage` response. Reports are full {@link UsageReport}s minus the
+ * heavy provider-specific `raw` field (the server strips it before send) — we
+ * keep `raw` optional in the underlying schema so a misconfigured broker that
+ * forgot to strip still validates.
+ */
+export declare const usageResponseSchema: FluentType<UsageResponse>;
+/** Broker `/v1/usage/history` response — recorded usage-limit snapshots, oldest first. */
+export declare const usageHistoryResponseSchema: FluentType<UsageHistoryResponse>;
+/** Broker `POST /v1/usage/observed` request — one client's batched observed usage. */
+export declare const clientUsageReportRequestSchema: FluentType<ClientUsageReportRequest>;
+export declare const clientUsageReportResponseSchema: FluentType<ClientUsageReportResponse>;
+/** Broker `GET /v1/usage/clients` response — per-client token burn aggregates. */
+export declare const clientUsageSummaryResponseSchema: FluentType<ClientUsageSummaryResponse>;
+export declare const credentialRefreshResponseSchema: FluentType<CredentialRefreshResponse>;
+export declare const credentialDisableRequestSchema: FluentType<{
     cause?: string;
-}, {
-    cause?: string;
-}>, credentialDisableResponseSchema: import("@oh-my-pi/omptype").Type<import("./types.js").CredentialDisableResponse, import("./types.js").CredentialDisableResponse>, disabledCredentialSummarySchema: import("@oh-my-pi/omptype").Type<import("../index.js").DisabledCredentialSummary, import("../index.js").DisabledCredentialSummary>, disabledCredentialsResponseSchema: import("@oh-my-pi/omptype").Type<import("./types.js").DisabledCredentialsResponse, import("./types.js").DisabledCredentialsResponse>, credentialBlockRequestSchema: import("@oh-my-pi/omptype").Type<import("./types.js").CredentialBlockSnapshot, import("./types.js").CredentialBlockSnapshot>, credentialBlockResponseSchema: import("@oh-my-pi/omptype").Type<import("./types.js").CredentialBlockResponse, import("./types.js").CredentialBlockResponse>, credentialBlocksDeleteResponseSchema: import("@oh-my-pi/omptype").Type<import("./types.js").CredentialBlocksDeleteResponse, import("./types.js").CredentialBlocksDeleteResponse>, usageStaleResponseSchema: import("@oh-my-pi/omptype").Type<import("./types.js").UsageStaleResponse, import("./types.js").UsageStaleResponse>, credentialUploadRequestSchema: import("@oh-my-pi/omptype").Type<import("./types.js").CredentialUploadRequest, import("./types.js").CredentialUploadRequest>, credentialUploadResponseSchema: import("@oh-my-pi/omptype").Type<import("./types.js").CredentialUploadResponse, import("./types.js").CredentialUploadResponse>;
+}>;
+export declare const credentialDisableResponseSchema: FluentType<CredentialDisableResponse>;
+/** One disabled-credential tombstone — identity + cause, never token material. */
+export declare const disabledCredentialSummarySchema: FluentType<DisabledCredentialSummary>;
+/** Broker `GET /v1/credentials/disabled` response. */
+export declare const disabledCredentialsResponseSchema: FluentType<DisabledCredentialsResponse>;
+export declare const credentialBlockRequestSchema: FluentType<CredentialBlockRequest>;
+export declare const credentialBlockResponseSchema: FluentType<CredentialBlockResponse>;
+export declare const credentialBlocksDeleteResponseSchema: FluentType<CredentialBlocksDeleteResponse>;
+export declare const usageStaleResponseSchema: FluentType<UsageStaleResponse>;
+export declare const credentialUploadRequestSchema: FluentType<CredentialUploadRequest>;
+export declare const credentialUploadResponseSchema: FluentType<CredentialUploadResponse>;

package/dist/types/index.d.ts

@@ -44,6 +44,7 @@ export * from "./usage/xai-oauth.js";
 export * from "./usage/zai.js";
 export * from "./utils/anthropic-auth.js";
 export * from "./utils/event-stream.js";
+export * from "./utils/glyph-codec.js";
 export * from "./utils/openrouter-headers.js";
 export * from "./utils/retry.js";
 export * from "./utils/schema/index.js";

package/dist/types/utils/glyph-codec.d.ts

@@ -0,0 +1,22 @@
+import type { Context, CursorExecHandlers } from "../types.js";
+import { AssistantMessageEventStream } from "./event-stream.js";
+/** Per-request glyph codec applied at the provider wire boundary. */
+export interface GlyphCodec {
+    /** Context with model-bound glyphs encoded and one conditional convention notice. */
+    context: Context;
+    /** Decodes glyph tokens in the stream's terminal assistant message. */
+    wrap(inner: AssistantMessageEventStream): AssistantMessageEventStream;
+    /** Decodes Cursor Pi calls and encodes their provider-bound results. */
+    wrapCursorExecHandlers(handlers: CursorExecHandlers): CursorExecHandlers;
+    /** Whether this request has encoded at least one glyph or literal token prefix. */
+    active: boolean;
+}
+/** Encode one string; returns the same reference when nothing changed. */
+export declare function encodeGlyphText(text: string): string;
+/** Decodes glyph tokens and unescapes `⟦E⟧` to `⟦`. */
+export declare function decodeGlyphText(text: string): string;
+/**
+ * Encode a context for the provider wire without mutating stored history.
+ * Reapplying it to the returned branded context is an inert identity pass.
+ */
+export declare function applyGlyphCodec(context: Context): GlyphCodec;

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@oh-my-pi/pi-ai",
-	"version": "17.4.2",
+	"version": "18.0.0",
 	"description": "Unified LLM API with automatic model discovery and provider configuration",
 	"homepage": "https://omp.sh",
 	"author": "Stencil Labs, Inc.",
@@ -37,10 +37,10 @@
 		"fmt": "biome format --write ."
 	},
 	"dependencies": {
-		"@oh-my-pi/omptype": "17.4.2",
-		"@oh-my-pi/pi-catalog": "17.4.2",
-		"@oh-my-pi/pi-utils": "17.4.2",
-		"@oh-my-pi/pi-wire": "17.4.2"
+		"@oh-my-pi/omptype": "18.0.0",
+		"@oh-my-pi/pi-catalog": "18.0.0",
+		"@oh-my-pi/pi-utils": "18.0.0",
+		"@oh-my-pi/pi-wire": "18.0.0"
 	},
 	"devDependencies": {
 		"@types/bun": "^1.3.14"

package/src/auth-broker/client.ts

@@ -30,21 +30,40 @@ import type {
 	UsageStaleResponse,
 } from "./types";
 import { AUTH_BROKER_CAPABILITIES_HEADER, AUTH_BROKER_CAPABILITY_CODEX_METER_BLOCK_SCOPES } from "./types";
-import { getAuthBrokerWireSchemas } from "./wire-schema-resource";
-
-type AuthBrokerResponseSchemaName =
-	| "clientUsageReportResponseSchema"
-	| "clientUsageSummaryResponseSchema"
-	| "credentialBlockResponseSchema"
-	| "credentialBlocksDeleteResponseSchema"
-	| "credentialDisableResponseSchema"
-	| "credentialRefreshResponseSchema"
-	| "credentialUploadResponseSchema"
-	| "disabledCredentialsResponseSchema"
-	| "healthzResponseSchema"
-	| "usageHistoryResponseSchema"
-	| "usageResponseSchema"
-	| "usageStaleResponseSchema";
+import {
+	clientUsageReportResponseSchema,
+	clientUsageSummaryResponseSchema,
+	credentialBlockResponseSchema,
+	credentialBlocksDeleteResponseSchema,
+	credentialDisableResponseSchema,
+	credentialRefreshResponseSchema,
+	credentialUploadResponseSchema,
+	disabledCredentialsResponseSchema,
+	healthzResponseSchema,
+	snapshotResponseSchema,
+	snapshotStreamEventSchema,
+	usageHistoryResponseSchema,
+	usageResponseSchema,
+	usageStaleResponseSchema,
+} from "./wire-schemas";
+
+/** Response schema per endpoint, keyed by the name `#request` callers pass. */
+const RESPONSE_SCHEMAS = {
+	clientUsageReportResponseSchema,
+	clientUsageSummaryResponseSchema,
+	credentialBlockResponseSchema,
+	credentialBlocksDeleteResponseSchema,
+	credentialDisableResponseSchema,
+	credentialRefreshResponseSchema,
+	credentialUploadResponseSchema,
+	disabledCredentialsResponseSchema,
+	healthzResponseSchema,
+	usageHistoryResponseSchema,
+	usageResponseSchema,
+	usageStaleResponseSchema,
+} as const;
+
+type AuthBrokerResponseSchemaName = keyof typeof RESPONSE_SCHEMAS;
 
 export interface AuthBrokerClientOptions {
 	/** Base URL (e.g. `https://broker.tailnet:8765`). Trailing slashes are trimmed. */
@@ -155,7 +174,7 @@ export class AuthBrokerClient {
 		}
 		const text = await response.text();
 		const raw = this.#parseJson(text, response.status);
-		const validated = getAuthBrokerWireSchemas().snapshotResponseSchema(raw);
+		const validated = snapshotResponseSchema(raw);
 		if (validated instanceof type.errors) {
 			throw new AuthBrokerError("Auth broker response failed schema validation", {
 				status: response.status,
@@ -224,7 +243,7 @@ export class AuthBrokerClient {
 					cause: err,
 				});
 			}
-			const validated = getAuthBrokerWireSchemas().snapshotStreamEventSchema(parsed);
+			const validated = snapshotStreamEventSchema(parsed);
 			if (validated instanceof type.errors) {
 				throw new AuthBrokerError("Auth broker stream event failed schema validation", {
 					body: validated.summary,
@@ -391,7 +410,7 @@ export class AuthBrokerClient {
 		const response = await this.#fetchRaw(method, path, opts);
 		const text = await response.text();
 		const raw = this.#parseJson(text, response.status);
-		const validated = getAuthBrokerWireSchemas()[opts.schema](raw);
+		const validated = RESPONSE_SCHEMAS[opts.schema](raw);
 		if (validated instanceof type.errors) {
 			throw new AuthBrokerError("Auth broker response failed schema validation", {
 				status: response.status,

package/src/auth-broker/server.ts

@@ -41,7 +41,12 @@ import {
 	DEFAULT_SERVER_IDLE_TIMEOUT_S,
 	DEFAULT_STREAM_KEEPALIVE_MS,
 } from "./types";
-import { getAuthBrokerWireSchemas } from "./wire-schema-resource";
+import {
+	clientUsageReportRequestSchema,
+	credentialBlockRequestSchema,
+	credentialDisableRequestSchema,
+	credentialUploadRequestSchema,
+} from "./wire-schemas";
 
 const DEFAULT_EXTERNAL_CHANGE_POLL_MS = 250;
 
@@ -712,7 +717,7 @@ export function startAuthBroker(opts: AuthBrokerServerOptions): AuthBrokerServer
 					return json(200, { generatedAt: Date.now(), entries });
 				}
 				if (req.method === "POST" && pathname === "/v1/usage/observed") {
-					const parsed = await parseBody(req, getAuthBrokerWireSchemas().clientUsageReportRequestSchema);
+					const parsed = await parseBody(req, clientUsageReportRequestSchema);
 					if (!parsed.ok) return parsed.response;
 					// Arktype's inferred union collides the `entries` field with
 					// Array.prototype.entries; the schema already validated the shape.
@@ -779,7 +784,7 @@ export function startAuthBroker(opts: AuthBrokerServerOptions): AuthBrokerServer
 				const disableMatch = req.method === "POST" ? pathname.match(DISABLE_ROUTE) : null;
 				if (disableMatch) {
 					const id = Number.parseInt(disableMatch[1], 10);
-					const parsed = await parseBody(req, getAuthBrokerWireSchemas().credentialDisableRequestSchema, {
+					const parsed = await parseBody(req, credentialDisableRequestSchema, {
 						allowEmpty: true,
 					});
 					if (!parsed.ok) return parsed.response;
@@ -797,7 +802,7 @@ export function startAuthBroker(opts: AuthBrokerServerOptions): AuthBrokerServer
 				const blockMatch = req.method === "POST" ? pathname.match(BLOCK_ROUTE) : null;
 				if (blockMatch) {
 					const id = Number.parseInt(blockMatch[1], 10);
-					const parsed = await parseBody(req, getAuthBrokerWireSchemas().credentialBlockRequestSchema);
+					const parsed = await parseBody(req, credentialBlockRequestSchema);
 					if (!parsed.ok) return parsed.response;
 					const block: StoredCredentialBlock = {
 						credentialId: id,
@@ -847,7 +852,7 @@ export function startAuthBroker(opts: AuthBrokerServerOptions): AuthBrokerServer
 					}
 				}
 				if (req.method === "POST" && pathname === "/v1/credential") {
-					const parsed = await parseBody(req, getAuthBrokerWireSchemas().credentialUploadRequestSchema);
+					const parsed = await parseBody(req, credentialUploadRequestSchema);
 					if (!parsed.ok) return parsed.response;
 					const { provider, credential } = parsed.data;
 					try {