@oh-my-pi/pi-ai 18.1.10 → 18.1.12

package/CHANGELOG.md

@@ -2,6 +2,19 @@
 
 ## [Unreleased]
 
+## [18.1.12] - 2026-09-06
+
+### Added
+
+- Added Muse Code subscription sign-in, credential refresh, inference, and quota reporting in `/usage`, with durable rate-limit backoff so quota refresh recovers instead of repeatedly retrying.
+
+## [18.1.11] - 2026-09-05
+
+### Fixed
+
+- Fixed OpenCode Go usage polls (`GET /zen/go/v1/usage`) missing `x-opencode-session` and omp's `User-Agent`: background polls now attribute with the stable install id so the requests OpenCode flags as `Bun fetch` carry the required session header.
+- GitHub Copilot sign-in now requests only basic profile access, restoring login for Enterprise organizations that reject repository, gist, and Codespaces permissions ([#10656](https://github.com/can1357/oh-my-pi/issues/10656)).
+
 ## [18.1.9] - 2026-09-04
 
 ### Added
@@ -27,6 +40,7 @@
 ### Fixed
 
 - Fixed DeepSeek-family Responses replay (e.g. opencode-go) rejecting a resumed thinking-mode turn with `400 The reasoning_text in the thinking mode must be passed back to the API` when compaction dropped the turn's reasoning; a non-empty placeholder is now synthesized instead of an empty `reasoning_text` ([#10690](https://github.com/can1357/oh-my-pi/issues/10690)).
+- Fixed pi-native streams treating a connection that closed before its terminal event as a successful empty response; incomplete streams and namespaced gateway 5xx failures now remain retryable.
 
 ## [18.1.6] - 2026-09-03
 
@@ -50,6 +64,7 @@
 - Anthropic and OpenRouter credit-exhaustion errors now automatically switch to a sibling account instead of stopping the turn with a retry hint.
 - Fixed OpenCode Go and Zen requests by including the required stable per-conversation session identification.
 - Improved Anthropic prompt caching so explicit cache breakpoints preserve reusable tools and system prompts when the message tail changes.
+- Anthropic and OpenRouter 402 credit-exhaustion errors ("would exceed your available credits", "Insufficient credits") now switch to a sibling account instead of stopping the turn with a retry hint.
 
 ## [18.1.5] - 2026-09-03
 

package/dist/types/auth-storage.d.ts

@@ -496,10 +496,40 @@ export { isDefinitiveOAuthFailure } from "./error/auth-classify.js";
  * multi-hour) retry-after when it is sooner. `retryAtMs` is `undefined` when
  * no sibling credentials exist at all, or when the session has no tracked
  * credential to rotate away from.
+ *
+ * `blockedUntilMs` (epoch ms) is the just-blocked credential's own unblock
+ * deadline — the later of the caller's retry-after and any exhausted window
+ * the usage report reveals. Callers that wait the account out (instead of
+ * rotating) must sleep until this, not the error-text hint alone.
+ *
+ * `priorBlockedUntilMs` (epoch ms) is the live block deadline the map already
+ * stored for this credential before this call. The merged `blockedUntilMs`
+ * masks a pre-existing block shorter than this call's own heuristic
+ * fallback (`Math.max` in the mark), so callers that replace that heuristic
+ * with an authoritative report window must consult the prior deadline to
+ * keep honoring the earlier response's provider-stated block.
+ *
+ * `priorBlockedUntilTimed` is `true` when that prior deadline came from
+ * provider-stated timing (a parsed hint or usage-report reset) rather than
+ * another session's heuristic guess — only timed priors may extend a wait
+ * past an authoritative report window. Persisted blocks carry no provenance
+ * and count as untimed: a stale persisted heuristic must not outrank a
+ * fresh complete report (longer persisted deadlines still win through the
+ * merged `blockedUntilMs`).
+ *
+ * `reportResetAtMs` (epoch ms) is present only when the usage report is a
+ * complete authority for the wait: every exhausted window carries a future
+ * reset, so sleeping until the latest one can actually clear the account. A
+ * permanent cap alongside a timed window (or no report at all) leaves it
+ * unset, and the heuristic fallback alone must never authorize a wait.
  */
 export interface UsageLimitMarkResult {
     switched: boolean;
     retryAtMs?: number;
+    blockedUntilMs?: number;
+    priorBlockedUntilMs?: number;
+    priorBlockedUntilTimed?: boolean;
+    reportResetAtMs?: number;
 }
 export type ModelUsageHealthState = "healthy" | "reserve" | "depleted" | "unknown";
 export interface ModelUsageAccountHealth {
@@ -1013,6 +1043,12 @@ export declare class AuthStorage {
      */
     markUsageLimitReached(provider: string, sessionId: string | undefined, options?: {
         retryAfterMs?: number;
+        /**
+         * Whether `retryAfterMs` came from provider-stated timing (a parsed
+         * retry hint) rather than a heuristic/default guess. A report reset
+         * extending the block counts as provider timing regardless.
+         */
+        providerTimed?: boolean;
         baseUrl?: string;
         modelId?: string;
         apiKey?: string;

package/dist/types/error/oauth.d.ts

@@ -22,6 +22,8 @@ export type OAuthErrorKind =
  | "configuration"
 /** Cloud project provisioning / onboarding (loadCodeAssist, onboardUser). */
  | "provisioning"
+/** Subscription/payment gate: plan required or purchase action needed. */
+ | "entitlement"
 /** OIDC / endpoint discovery failed. */
  | "discovery";
 export interface OAuthErrorOptions {

package/dist/types/index.d.ts

@@ -35,6 +35,7 @@ export * from "./usage/github-copilot.js";
 export * from "./usage/google-antigravity.js";
 export * from "./usage/kimi.js";
 export * from "./usage/minimax-code.js";
+export * from "./usage/muse-code.js";
 export * from "./usage/ollama.js";
 export * from "./usage/openai-codex.js";
 export * from "./usage/openai-codex-reset.js";

package/dist/types/providers/openai-shared.d.ts

@@ -357,11 +357,12 @@ export declare function resolveOpenAICompletionsOutputClamp(model: Model<"openai
 /**
  * Provider-specific Responses API output clamp.
  *
- * Meta documents a 131,072-token output limit for Muse Spark 1.1, so native
- * Meta requests may use the model's full advertised cap instead of the
- * conservative 64k OpenAI-compatible default.
+ * Models whose compiled provider policy opts in may use their full advertised
+ * output cap instead of the conservative 64k OpenAI-compatible default.
  */
-export declare function resolveOpenAIResponsesOutputClamp(model: Pick<Model, "provider" | "maxTokens">): number | undefined;
+export declare function resolveOpenAIResponsesOutputClamp(model: Pick<Model, "maxTokens"> & {
+    compat: Pick<ResolvedOpenAISharedCompat, "clampOutputToModelMax">;
+}): number | undefined;
 /**
  * Enable `tool_stream` for Z.AI/GLM-5.2 reasoning models when tools are present
  * (GLM-5.2 streams tool-call arguments incrementally and needs the flag to do so).
@@ -659,7 +660,7 @@ type CommonSamplingOptions = Pick<StreamOptions, "temperature" | "topP" | "topK"
  * reflect the model's context window rather than the upstream output limit.
  */
 export declare function applyCommonResponsesSamplingParams<P extends CommonResponsesParams>(params: P, options: CommonSamplingOptions | undefined, model: Pick<Model, "provider" | "api" | "id" | "omitMaxOutputTokens" | "maxTokens" | "identity"> & {
-    compat: Pick<ResolvedOpenAISharedCompat, "supportsSamplingParams" | "supportsPenaltyAndStopParams">;
+    compat: Pick<ResolvedOpenAISharedCompat, "supportsSamplingParams" | "supportsPenaltyAndStopParams" | "clampOutputToModelMax">;
 }): void;
 type ReasoningOptions = {
     reasoning?: string;

package/dist/types/registry/muse-code.d.ts

@@ -0,0 +1,3 @@
+import type { ProviderTransport } from "./build.js";
+/** Muse stores both the Meta account token and its subscription-minted Model API key in one OAuth bearer. */
+export declare const museCodeTransport: ProviderTransport;

package/dist/types/registry/oauth/index.d.ts

@@ -22,6 +22,7 @@ export declare function unregisterOAuthProviders(sourceId: string): void;
  * Refresh a built-in OAuth grant, cancelling provider work when refresh ownership ends.
  */
 export declare function refreshOAuthToken(provider: OAuthProvider, credentials: OAuthCredentials, signal?: AbortSignal): Promise<OAuthCredentials>;
+export declare function normalizeOAuthCredentialExpiry<T extends OAuthCredentials>(provider: string, credentials: T): T;
 /**
  * Build API-key bytes for a provider from an already-fresh OAuth credential.
  *

package/dist/types/registry/oauth/muse-code.d.ts

@@ -0,0 +1,67 @@
+import type { AfterExchangeHook } from "../hooks/types.js";
+import type { FetchImpl } from "../../types.js";
+declare const museCodeKeyResponseSchema: import("@oh-my-pi/omptype").FluentType<{
+    action_url?: string | null | undefined;
+    api_key?: string | undefined;
+    is_subs_active?: boolean | undefined;
+    require_payment?: boolean | undefined;
+    require_payment_action_url?: string | undefined;
+    subs_tier_id?: string | undefined;
+    subs_tier_name?: string | undefined;
+    subs_usage?: {
+        weekly?: {
+            resets_at?: string | number | undefined;
+            used_percent?: number | undefined;
+            window_duration_mins?: number | undefined;
+        } | null | undefined;
+        window?: {
+            resets_at?: string | number | undefined;
+            used_percent?: number | undefined;
+            window_duration_mins?: number | undefined;
+        } | null | undefined;
+    } | null | undefined;
+    user_email?: string | undefined;
+    user_id?: string | undefined;
+}, {
+    action_url?: string | null | undefined;
+    api_key?: string | undefined;
+    is_subs_active?: boolean | undefined;
+    require_payment?: boolean | undefined;
+    require_payment_action_url?: string | undefined;
+    subs_tier_id?: string | undefined;
+    subs_tier_name?: string | undefined;
+    subs_usage?: {
+        weekly?: {
+            resets_at?: string | number | undefined;
+            used_percent?: number | undefined;
+            window_duration_mins?: number | undefined;
+        } | null | undefined;
+        window?: {
+            resets_at?: string | number | undefined;
+            used_percent?: number | undefined;
+            window_duration_mins?: number | undefined;
+        } | null | undefined;
+    } | null | undefined;
+    user_email?: string | undefined;
+    user_id?: string | undefined;
+}>;
+export type MuseCodeKeyResponse = typeof museCodeKeyResponseSchema.infer;
+declare const museCodeCredentialSchema: import("@oh-my-pi/omptype").FluentType<{
+    apiKey: string;
+    oauthAccessToken: string;
+}, {
+    apiKey: string;
+    oauthAccessToken: string;
+}>;
+export type MuseCodeCredential = typeof museCodeCredentialSchema.infer;
+export interface MuseCodeKeyRequestOptions {
+    fetch?: FetchImpl;
+    signal?: AbortSignal;
+    /** Ask Meta to onboard the account during an interactive login exchange. */
+    onboard?: boolean;
+}
+export declare function parseMuseCodeCredential(value: string): MuseCodeCredential;
+export declare function requestMuseCodeKey(accessToken: string, options?: MuseCodeKeyRequestOptions): Promise<MuseCodeKeyResponse>;
+/** Exchange Meta account access for the Model API key authorized by a Muse subscription. */
+export declare const attachMuseCodeApiKey: AfterExchangeHook;
+export {};

package/dist/types/usage/muse-code.d.ts

@@ -0,0 +1,2 @@
+import type { UsageProvider } from "../usage.js";
+export declare const museCodeUsageProvider: UsageProvider;

package/dist/types/usage.d.ts

@@ -478,6 +478,8 @@ export interface UsageProvider {
     validatesCredentials?: boolean;
     /** Whether a failed refresh may serve the previous successful report. Defaults to true. */
     retainLastGoodOnFailure?: boolean;
+    /** Provider-specific cool-down after a failed refresh. Defaults to the shared short backoff. */
+    failureBackoffMs?: number;
 }
 /** Request context used when ranking usage for a specific model. */
 export interface CredentialRankingContext {

package/dist/types/utils/schema/json-schema-validator.d.ts

@@ -16,5 +16,7 @@ export interface JsonSchemaValidationResult {
     success: boolean;
     issues: JsonSchemaValidationIssue[];
 }
+/** Whether any same-instance schema declaration or constraint owns this property name. */
+export declare function schemaDefinesProperty(schema: unknown, key: string): boolean;
 export declare function validateJsonSchemaValue(schema: unknown, value: unknown): JsonSchemaValidationResult;
 export declare function isJsonSchemaValueValid(schema: unknown, value: unknown): boolean;

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@oh-my-pi/pi-ai",
-	"version": "18.1.10",
+	"version": "18.1.12",
 	"description": "Unified LLM API with automatic model discovery and provider configuration",
 	"keywords": [
 		"ai",
@@ -124,11 +124,11 @@
 		"fmt": "oxfmt --no-error-on-unmatched-pattern 'src/**/*.{ts,tsx}' '{test,bench,examples,scripts}/**/*.ts' '*.ts'"
 	},
 	"dependencies": {
-		"@oh-my-pi/omptype": "18.1.10",
-		"@oh-my-pi/pi-catalog": "18.1.10",
-		"@oh-my-pi/pi-natives": "18.1.10",
-		"@oh-my-pi/pi-utils": "18.1.10",
-		"@oh-my-pi/pi-wire": "18.1.10"
+		"@oh-my-pi/omptype": "18.1.12",
+		"@oh-my-pi/pi-catalog": "18.1.12",
+		"@oh-my-pi/pi-natives": "18.1.12",
+		"@oh-my-pi/pi-utils": "18.1.12",
+		"@oh-my-pi/pi-wire": "18.1.12"
 	},
 	"devDependencies": {
 		"@types/bun": "^1.3.14"

package/src/auth-gateway/server.ts

@@ -251,6 +251,7 @@ async function refreshGatewayApiKeyAfterAuthError(
 		const retryAfterMs = extractRetryHint(undefined, message);
 		const { switched, retryAtMs } = await storage.markUsageLimitReached(provider, sessionId, {
 			retryAfterMs,
+			providerTimed: retryAfterMs !== undefined,
 			baseUrl: model.baseUrl,
 			modelId: model.id,
 			apiKey: oldKey,