@oh-my-pi/pi-ai 18.2.6 → 18.2.8

package/CHANGELOG.md

@@ -2,6 +2,34 @@
 
 ## [Unreleased]
 
+## [18.2.8] - 2026-09-21
+
+### Added
+
+- Added support for text embeddings, document reranking, video generation, image generation across multiple providers, audio speech synthesis, and audio transcription services.
+- Added support for the System One judgment API, including configurable request headers for proxy routing and custom authentication.
+
+### Changed
+
+- Updated API response cost reporting to use aggregate usage totals.
+- Model list responses now optionally include a model kind.
+
+### Fixed
+
+- Fixed detection of Claude usage-limit errors.
+
+## [18.2.7] - 2026-09-21
+
+### Breaking Changes
+
+- Anthropic streaming and provider request helpers must now be imported from `@oh-my-pi/pi-ai/providers/anthropic` instead of the package root.
+- Moved the public `NO_AUTH_SENTINEL` export from `providers/openai-shared` to `auth-retry`.
+
+### Fixed
+
+- Anthropic organization-level OAuth permission errors now reliably rotate to sibling credentials and persist blocks across usage reports.
+- Fixed error handling for provider responses that do not include token usage information.
+
 ## [18.2.6] - 2026-09-18
 
 ### Fixed
@@ -78,7 +106,7 @@
 - Fixed openai-responses replay wedging a repaired orphan tool-result note between another call's `function_call` and `function_call_output`, which broke round pairing on strict validators (e.g. DeepSeek) with `400 No tool output found for tool call …`: orphan-output/call repair now runs before the interleaved-message hoist, so any injected note is relocated out of the tool-call batch ([#11473](https://github.com/can1357/oh-my-pi/issues/11473)).
 - A stale Anthropic tier block (`tier:fable`, `tier:mythos`) is now cleared once a live usage report shows headroom on both the tier row and the shared windows, instead of idling a usable account until the reported reset. Healing requires a live report, and a credential held by an unscoped block spends no usage request on a probe that cannot lift it ([#11334](https://github.com/can1357/oh-my-pi/pull/11334) by [@AshishKumar4](https://github.com/AshishKumar4)).
 - A running session now picks up credentials another process committed: adding an account in a second terminal is visible to credential selection and rotation without restarting the session, and a session's pinned account is re-resolved by row id so a row another process deleted cannot hand its slot to a sibling ([#11329](https://github.com/can1357/oh-my-pi/pull/11329) by [@AshishKumar4](https://github.com/AshishKumar4)).
-- Fixed rate-limit/overload failures that arrive *inside* an HTTP 200 body (Azure, LiteLLM-style aggregators, and reverse proxies that already committed to the stream) not advancing `retry.fallbackChains`: a `{"error":{…}}`/`{"code":429}` chunk or a plain-text throttle frame (`429 Too Many Requests`, an nginx page) is now classified as a retryable 429/5xx through the same path an HTTP-status 429 takes, so a busy provider backs off and fails over instead of ending the session. Only bodies the provider actually reported are used: no status is inferred from error wording, and an unreadable body can no longer consume a credential.
+- Fixed rate-limit/overload failures that arrive _inside_ an HTTP 200 body (Azure, LiteLLM-style aggregators, and reverse proxies that already committed to the stream) not advancing `retry.fallbackChains`: a `{"error":{…}}`/`{"code":429}` chunk or a plain-text throttle frame (`429 Too Many Requests`, an nginx page) is now classified as a retryable 429/5xx through the same path an HTTP-status 429 takes, so a busy provider backs off and fails over instead of ending the session. Only bodies the provider actually reported are used: no status is inferred from error wording, and an unreadable body can no longer consume a credential.
 - Fixed tool schema normalization and cycle detection for frozen, sealed, and nonextensible schemas.
 - Reduced memory retained by `complete()` and `completeSimple()` while streaming responses.
 - Antigravity quota summaries now identify Claude/GPT routing copies as one shared upstream pool while preserving model-specific quota selection ([#11268](https://github.com/can1357/oh-my-pi/issues/11268)).

package/THIRD-PARTY-NOTICES.txt

@@ -335,43 +335,6 @@ This license allows the work and adaptations of it to be shared and used
 commercially, as long as it is attributed to Poppy Works. The font is bundled
 here (crates/pi-natives/src/fonts/Silver.ttf) as a CJK/Unicode bitmap fallback.
 
--------------------------------------------------------------------------------
-packages/utils/src/vendor/mermaid-ascii/NOTICE
-
-This directory contains an in-house Mermaid-diagram-to-ASCII renderer adapted
-from beautiful-mermaid (https://github.com/lukilabs/beautiful-mermaid), used
-under the MIT License.
-
-  Copyright (c) 2026 Craft Docs
-
-Only the ASCII rendering pipeline is ported (flowchart/state, sequence, class,
-ER, and xychart diagrams); the SVG renderer and its `elkjs` graph-layout
-dependency, the browser entry point, and the SVG theme/style modules were
-dropped. Terminal display width is reimplemented on `Bun.stringWidth`, and
-inline label formatting (HTML tags, markdown emphasis) is reduced to plain text
-for ASCII output. Layout and edge-routing logic is preserved faithfully so
-ASCII output matches the upstream package.
-
-MIT License
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-
 -------------------------------------------------------------------------------
 packages/coding-agent/src/markit/NOTICE
 

package/dist/types/auth-gateway/dispatch.d.ts

@@ -0,0 +1,80 @@
+import type { ApiKeyResolver } from "../auth-retry.js";
+import type { AuthStorage } from "../auth-storage.js";
+import { type GatewayErrorClassification } from "../error/gateway.js";
+import type { Api, FetchImpl, Model, Usage } from "../types.js";
+import type { ClientUsageIdentity } from "../usage.js";
+import type { AuthGatewayServerOptions } from "./types.js";
+export type ModelResolver = (modelId: string) => Model<Api> | undefined;
+export interface AuthGatewayBootOptions extends AuthGatewayServerOptions {
+    /** Source of credentials. Caller wires this to a broker-backed AuthStorage. */
+    storage: AuthStorage;
+    /**
+     * Resolve a client-requested model id to a pi-ai Model. Caller supplies
+     * this from a ModelRegistry (lives in `coding-agent` to avoid an inverse
+     * dependency in `pi-ai`).
+     */
+    resolveModel: ModelResolver;
+    /** Optional supplier for `/v1/models` listing. Returns the full model array. */
+    listModels?: () => Iterable<Model<Api>>;
+    /** Upstream transport for every provider call; defaults to global `fetch`. Test seam. */
+    fetch?: FetchImpl;
+}
+/**
+ * The client's own session key, or `undefined` when it sent none. A blank key
+ * counts as none: honouring it would collapse every caller that sends an empty
+ * key into one shared credential-sticky, prefix-cache and provider-session
+ * bucket.
+ */
+export declare function normalizeClientSessionKey(clientKey: string | undefined): string | undefined;
+/**
+ * Stable identity of the account a request's credential belongs to.
+ *
+ * `markUsageLimitReached` and the auth-retry resolver switch a session to a
+ * sibling credential, so the provider state retained for that session can
+ * outlive the account that taught it. OAuth rows expose an account id / email
+ * that survives token refresh — fingerprinting the bearer instead would look
+ * like a rotation every time a token refreshes and discard the retained
+ * lessons for nothing. Key-based rows fall back to a hash of the key, never
+ * the key itself: this value is held for the lifetime of the entry.
+ */
+export declare function resolveGatewayAccount(storage: AuthStorage, provider: string, sessionId: string, apiKey: string): string;
+/**
+ * Resolve the credential for one request from broker-backed storage.
+ *
+ * pi-ai clients never consult `AuthStorage`; the gateway resolves the bearer
+ * (an OAuth access token refreshed through the broker when needed) and hands
+ * it to the client. Returns the key, or the error classification the route
+ * should encode in its own envelope: storage failures map through
+ * {@link classifyGatewayError}, a provider without any credential is a 401.
+ */
+export declare function resolveGatewayApiKey(storage: AuthStorage, model: Model<Api>, sessionId: string, signal: AbortSignal, peer: string): Promise<string | GatewayErrorClassification>;
+/**
+ * Build the {@link ApiKeyResolver} handed to a pi-ai client for a gateway
+ * request. Drives the central a/b/c auth-retry policy server-side:
+ *
+ * - initial resolve → the credential already resolved for this request.
+ * - step (b) `!lastChance` → force-refresh the SAME session-sticky credential
+ *   (a peer/broker may have rotated its token out from under our cached copy).
+ * - step (c) `lastChance` → {@link refreshGatewayApiKeyAfterAuthError} switches
+ *   to a sibling (usage-limit block vs credential invalidation by error class).
+ *
+ * `lastKey` tracks the most recent bearer so the switch step invalidates the
+ * credential that actually failed. `onResolvedKey` observes every rotation;
+ * routes that retain provider session state use it to re-key the account
+ * lease, one-shot routes pass `undefined`.
+ */
+export declare function buildGatewayApiKeyResolver(storage: AuthStorage, model: Model<Api>, sessionId: string, initialKey: string, requestSignal: AbortSignal, format: string, peer: string, onResolvedKey?: (apiKey: string) => void): ApiKeyResolver;
+/**
+ * Attribute one settled upstream request to the originating client via the
+ * broker's observed-usage channel (`AuthStorage.recordObservedUsage`, batched
+ * by the remote store). Error/aborted turns still record — the provider
+ * billed whatever tokens the partial turn consumed; zero-usage results
+ * (pre-flight failures) are skipped. `at` defaults to now.
+ */
+export declare function recordGatewayUsage(storage: AuthStorage, model: Model<Api>, client: ClientUsageIdentity, usage: Usage, at?: number): void;
+/**
+ * An `AbortController` that follows the inbound request's abort signal. Routes
+ * abort it themselves when the response body is cancelled mid-stream, which
+ * `req.signal` alone does not observe.
+ */
+export declare function mirrorRequestAbort(req: Request): AbortController;

package/dist/types/auth-gateway/http.d.ts

@@ -1,4 +1,4 @@
-import type { Api, AssistantMessage, Model } from "../types.js";
+import type { Api, Model } from "../types.js";
 import type { ClientUsageIdentity } from "../usage.js";
 export declare function json(status: number, body: unknown, headers?: Record<string, string>): Response;
 /**
@@ -7,14 +7,13 @@ export declare function json(status: number, body: unknown, headers?: Record<str
  * `request-id` (surfaced as `_request_id` by the OpenAI and Anthropic SDKs,
  * matches the gateway log line), LiteLLM's model-resolution and cost headers,
  * and OpenAI's `openai-processing-ms`. Model/request-id headers are always
- * present; `message` — the final assistant message, available only on
- * non-streaming responses — adds the computed cost, and `startedAt` the wall
- * time. Streaming responses send headers before usage exists, so they carry
- * only the identity headers.
+ * present; `costUsd` — known only once a non-streaming response has settled —
+ * adds the computed cost, and `startedAt` the wall time. Streaming responses
+ * send headers before usage exists, so they carry only the identity headers.
  */
 export declare function gatewayResponseHeaders(model: Model<Api>, info: {
     requestId: string;
-    message?: AssistantMessage;
+    costUsd?: number;
     startedAt?: number;
 }): Record<string, string>;
 export declare function resolvePeer(req: Request): string;

package/dist/types/auth-gateway/index.d.ts

@@ -1,3 +1,4 @@
+export * from "./dispatch.js";
 export * from "./http.js";
 export * from "./session-state.js";
 export * from "./server.js";

package/dist/types/auth-gateway/routes/embeddings.d.ts

@@ -0,0 +1,3 @@
+import { type AuthGatewayBootOptions } from "../dispatch.js";
+/** OpenAI-compatible `POST /v1/embeddings` gateway handler. */
+export declare function handleEmbeddings(bootOpts: AuthGatewayBootOptions, req: Request, peer: string): Promise<Response>;

package/dist/types/auth-gateway/routes/images.d.ts

@@ -0,0 +1,3 @@
+import { type AuthGatewayBootOptions } from "../dispatch.js";
+export declare function handleImageGenerations(bootOpts: AuthGatewayBootOptions, req: Request, peer: string): Promise<Response>;
+export declare function handleImageEdits(bootOpts: AuthGatewayBootOptions, req: Request, peer: string): Promise<Response>;

package/dist/types/auth-gateway/routes/rerank.d.ts

@@ -0,0 +1,3 @@
+import { type AuthGatewayBootOptions } from "../dispatch.js";
+/** OpenRouter-compatible `POST /v1/rerank` gateway handler. */
+export declare function handleRerank(bootOpts: AuthGatewayBootOptions, req: Request, peer: string): Promise<Response>;

package/dist/types/auth-gateway/routes/speech.d.ts

@@ -0,0 +1,2 @@
+import { type AuthGatewayBootOptions } from "../dispatch.js";
+export declare function handleSpeech(bootOpts: AuthGatewayBootOptions, req: Request, peer: string): Promise<Response>;

package/dist/types/auth-gateway/routes/systemone.d.ts

@@ -0,0 +1,2 @@
+import { type AuthGatewayBootOptions } from "../dispatch.js";
+export declare function handleSystemOne(bootOpts: AuthGatewayBootOptions, req: Request, peer: string): Promise<Response>;

package/dist/types/auth-gateway/routes/transcriptions.d.ts

@@ -0,0 +1,3 @@
+import { type AuthGatewayBootOptions } from "../dispatch.js";
+/** OpenAI-compatible `POST /v1/audio/transcriptions` gateway handler. */
+export declare function handleTranscriptions(bootOpts: AuthGatewayBootOptions, req: Request, peer: string): Promise<Response>;

package/dist/types/auth-gateway/routes/video.d.ts

@@ -0,0 +1,7 @@
+import { type AuthGatewayBootOptions } from "../dispatch.js";
+/** OpenRouter-compatible `POST /v1/videos` asynchronous video submit handler. */
+export declare function handleVideoSubmit(bootOpts: AuthGatewayBootOptions, req: Request, peer: string): Promise<Response>;
+/** OpenRouter-compatible `GET /v1/videos/:id` asynchronous video poll handler. */
+export declare function handleVideoPoll(bootOpts: AuthGatewayBootOptions, req: Request, peer: string, gatewayId: string): Promise<Response>;
+/** OpenRouter-compatible `GET /v1/videos/:id/content` streaming video content handler. */
+export declare function handleVideoContent(bootOpts: AuthGatewayBootOptions, req: Request, peer: string, gatewayId: string): Promise<Response>;

package/dist/types/auth-gateway/server.d.ts

@@ -16,21 +16,15 @@
  *   POST /v1/chat/completions              → OpenAI chat-completions in/out
  *   POST /v1/messages                      → Anthropic messages in/out
  *   POST /v1/responses                     → OpenAI Responses in/out
+ *   POST /v1/pi/stream                     → native pi-ai stream in/out
+ *   POST /v1/systemone | /alpha/decisions  → TypeSafe System One judgments (routes/systemone)
+ *   POST /v1/images[/generations|/edits]   → image generation, OpenAI/OpenRouter wire (routes/images)
+ *   POST /v1/audio/speech                  → text-to-speech, raw audio out (routes/speech)
+ *   POST /v1/audio/transcriptions          → speech-to-text, multipart or JSON base64 in (routes/transcriptions)
+ *
+ * Chat routes live in this file; every other modality is a `routes/*` module
+ * built on the shared plumbing in `dispatch.ts`.
  */
-import type { AuthStorage } from "../auth-storage.js";
-import type { Api, Model } from "../types.js";
-import type { AuthGatewayServerHandle, AuthGatewayServerOptions } from "./types.js";
-export type ModelResolver = (modelId: string) => Model<Api> | undefined;
-export interface AuthGatewayBootOptions extends AuthGatewayServerOptions {
-    /** Source of credentials. Caller wires this to a broker-backed AuthStorage. */
-    storage: AuthStorage;
-    /**
-     * Resolve a client-requested model id to a pi-ai Model. Caller supplies
-     * this from a ModelRegistry (lives in `coding-agent` to avoid an inverse
-     * dependency in `pi-ai`).
-     */
-    resolveModel: ModelResolver;
-    /** Optional supplier for `/v1/models` listing. Returns the full model array. */
-    listModels?: () => Iterable<Model<Api>>;
-}
+import { type AuthGatewayBootOptions } from "./dispatch.js";
+import type { AuthGatewayServerHandle } from "./types.js";
 export declare function startAuthGateway(opts: AuthGatewayBootOptions): AuthGatewayServerHandle;

package/dist/types/auth-retry.d.ts

@@ -35,6 +35,8 @@ export interface ApiKeyResolveContext {
 export type ApiKeyResolver = (ctx: ApiKeyResolveContext) => Promise<string | undefined> | string | undefined;
 /** A static bearer string, or a {@link ApiKeyResolver} that mints/rotates one. */
 export type ApiKey = string | ApiKeyResolver;
+/** Keyless-provider credential marker; transports must not send it in authentication headers. */
+export declare const NO_AUTH_SENTINEL = "N/A";
 /** Narrows {@link ApiKey} to its resolver form. */
 export declare function isApiKeyResolver(key: ApiKey | undefined): key is ApiKeyResolver;
 /**

package/dist/types/auth-storage.d.ts

@@ -1218,8 +1218,8 @@ export declare class AuthStorage {
      * stale session stickiness. Fall back to the session-sticky credential only
      * when neither explicit target is available. For hard-auth errors, an explicit
      * target that no longer matches storage returns `false` without mutation.
-     * Delayed usage-limit errors may instead recover the durable OAuth row from
-     * the bearer fingerprint recorded when the request resolved.
+     * Delayed usage-limit and account-policy errors may instead recover the durable
+     * OAuth row from the bearer fingerprint recorded when the request resolved.
      *
      * - usage-limit / account-rate-limit error → {@link AuthStorage.markUsageLimitReached}
      *   (temporary block via its own backoff — default plus server usage-report

package/dist/types/embeddings/index.d.ts

@@ -0,0 +1,7 @@
+import type { Api, Model } from "@oh-my-pi/pi-catalog/types";
+import { type EmbeddingOptions } from "./openai-embeddings.js";
+import type { EmbeddingRequest, EmbeddingResult } from "./types.js";
+export * from "./openai-embeddings.js";
+export * from "./types.js";
+/** Dispatch an embedding request through the transport selected by the catalog model. */
+export declare function embed(model: Model<Api>, request: EmbeddingRequest, options: EmbeddingOptions): Promise<EmbeddingResult>;

package/dist/types/embeddings/openai-embeddings.d.ts

@@ -0,0 +1,15 @@
+import type { Api, FetchImpl, Model } from "@oh-my-pi/pi-catalog/types";
+import { type ApiKey } from "../auth-retry.js";
+import * as AIError from "../error/index.js";
+import type { EmbeddingRequest, EmbeddingResult } from "./types.js";
+export interface EmbeddingOptions {
+    apiKey: ApiKey;
+    fetch?: FetchImpl;
+    signal?: AbortSignal;
+}
+/** Non-2xx response from an OpenAI-compatible embeddings endpoint. */
+export declare class EmbeddingApiError extends AIError.ProviderHttpError {
+    readonly name = "EmbeddingApiError";
+}
+/** Call an OpenAI/OpenRouter-compatible embeddings endpoint. */
+export declare function embedOpenAI(model: Model<Api>, request: EmbeddingRequest, options: EmbeddingOptions): Promise<EmbeddingResult>;

package/dist/types/embeddings/types.d.ts

@@ -0,0 +1,15 @@
+import type { Usage } from "@oh-my-pi/pi-catalog/types";
+export interface EmbeddingRequest {
+    input: string | string[] | number[] | number[][];
+    dimensions?: number;
+    encodingFormat: "float" | "base64";
+    user?: string;
+}
+export interface EmbeddingResult {
+    embeddings: Array<{
+        index: number;
+        embedding: number[] | string;
+    }>;
+    model: string;
+    usage: Usage;
+}

package/dist/types/error/classes.d.ts

@@ -39,7 +39,10 @@ export declare const __anthropicApiErrorForTesting: {
 export declare class AnthropicApiError extends ProviderHttpError {
     readonly headers: Headers;
     readonly requestId: string | null;
-    constructor(status: number, message: string, headers: Headers);
+    constructor(status: number, message: string, headers: Headers, options?: {
+        code?: string;
+        cause?: unknown;
+    });
     static fromResponse(response: Response, signal?: AbortSignal): Promise<AnthropicApiError>;
 }
 /** Network-level failure (DNS, TLS, socket reset) after retries were exhausted. */

package/dist/types/error/flags.d.ts

@@ -1,4 +1,4 @@
-import type { Api, AssistantMessage } from "../types.js";
+import type { Api, AssistantMessage, Usage } from "../types.js";
 export declare const Flag: {
     readonly Class: 4096;
     readonly ThinkingLoop: 65536;
@@ -44,6 +44,9 @@ export declare function isResponsesRequestBodyReadTimeout(message: {
     requestBodyReadTimeoutFullReplay?: boolean;
 }): boolean;
 export declare const TRANSIENT_TRANSPORT_PATTERN: RegExp;
+export declare const ANTHROPIC_ACCOUNT_POLICY_PATTERN: RegExp;
+/** Whether an error message represents an Anthropic account-scoped permission/policy denial. */
+export declare function isAnthropicAccountPolicyText(text: string, provider?: string, statusArg?: number): boolean;
 /**
  * Local llama.cpp / Ollama deterministic tool-call argument JSON parse failure.
  * The model emitted invalid JSON in a tool call and the server returned HTTP 500
@@ -121,16 +124,21 @@ export declare function classifyMessage(message: {
     errorStatus?: number;
 }): number;
 export declare function attach<E extends object>(error: E, id: number): E;
+/** Overflow-classification evidence, including errors received before token usage is available. */
+export interface ContextOverflowMessage extends Pick<AssistantMessage, "errorId" | "stopReason" | "errorMessage"> {
+    readonly usage?: Pick<Usage, "input" | "cacheRead" | "cacheWrite">;
+}
 /** Provider-reported usage proves context-window excess — authoritative, compaction-owned (#9235). */
-export declare function isUsageBackedContextOverflow(message: AssistantMessage, contextWindow?: number): boolean;
-export declare function isContextOverflow(message: AssistantMessage, contextWindow?: number): boolean;
+export declare function isUsageBackedContextOverflow(message: ContextOverflowMessage, contextWindow?: number): boolean;
+/** Classify overflow from error flags, available token usage, or provider error text. */
+export declare function isContextOverflow(message: ContextOverflowMessage, contextWindow?: number): boolean;
 /** HTTP 413 byte/media rejection (#9235); may co-occur with {@link isContextOverflow} for bare `413 (no body)`.
  *  Callers with local headroom should skip compaction when this returns true. */
 export declare function isPayloadRejection(message: AssistantMessage): boolean;
 /** Dual-flagged 413 (PayloadRejected + ContextOverflow) with no provider-reported token excess (#9235).
  *  The co-flag means a different provider's larger byte/media budget may accept the request.
  *  Usage-backed overflows are authoritative window excesses and never ambiguous. */
-export declare function isTextAmbiguousContextOverflow(errorId: number, message: AssistantMessage | undefined, contextWindow?: number): boolean;
+export declare function isTextAmbiguousContextOverflow(errorId: number, message: ContextOverflowMessage | undefined, contextWindow?: number): boolean;
 export declare function stringify(id: number | undefined): string;
 /**
  * Transient stream corruption where the response was truncated mid-JSON.

package/dist/types/images/google-antigravity.d.ts

@@ -0,0 +1,9 @@
+import type { Model } from "@oh-my-pi/pi-catalog/types";
+import type { ImageGenerationOptions, ImageGenerationRequest, ImageGenerationResult } from "./types.js";
+interface AntigravityCredentials {
+    accessToken: string;
+    projectId: string;
+}
+export declare function parseAntigravityCredentials(raw: string): AntigravityCredentials | undefined;
+export declare function generateAntigravityImage(model: Model, request: ImageGenerationRequest, options: ImageGenerationOptions): Promise<ImageGenerationResult>;
+export {};

package/dist/types/images/google-generative-ai.d.ts

@@ -0,0 +1,3 @@
+import type { Model } from "@oh-my-pi/pi-catalog/types";
+import type { ImageGenerationOptions, ImageGenerationRequest, ImageGenerationResult } from "./types.js";
+export declare function generateGoogleImage(model: Model, request: ImageGenerationRequest, options: ImageGenerationOptions): Promise<ImageGenerationResult>;

package/dist/types/images/index.d.ts

@@ -0,0 +1,14 @@
+import type { Api, Model } from "@oh-my-pi/pi-catalog/types";
+import type { ImageGenerationOptions, ImageGenerationRequest, ImageGenerationResult } from "./types.js";
+export * from "./google-antigravity.js";
+export * from "./google-generative-ai.js";
+export * from "./openai-hosted.js";
+export * from "./openai-images.js";
+export * from "./openrouter-images.js";
+export * from "./types.js";
+/** Catalog APIs {@link generateImage} serves; the hosted Responses pair needs an explicit carrier model. */
+export type ImageGenerationApi = "openai-images" | "openrouter-images" | "google-generative-ai" | "google-gemini-cli" | "openai-responses" | "openai-codex-responses";
+/** Whether a catalog API generates images through one of the pi-ai image clients. */
+export declare function isImageGenerationApi(api: Api): api is ImageGenerationApi;
+/** Generate (or edit, when `request.inputImages` is set) images through the transport selected by the model's `api`. */
+export declare function generateImage(model: Model<Api>, request: ImageGenerationRequest, options: ImageGenerationOptions): Promise<ImageGenerationResult>;

package/dist/types/images/openai-hosted.d.ts

@@ -0,0 +1,3 @@
+import type { Model } from "@oh-my-pi/pi-catalog/types";
+import type { ImageGenerationOptions, ImageGenerationRequest, ImageGenerationResult } from "./types.js";
+export declare function generateHostedImage(model: Model, request: ImageGenerationRequest, options: ImageGenerationOptions): Promise<ImageGenerationResult>;

package/dist/types/images/openai-images.d.ts

@@ -0,0 +1,5 @@
+import type { Model } from "@oh-my-pi/pi-catalog/types";
+import type { ImageGenerationOptions, ImageGenerationRequest, ImageGenerationResult } from "./types.js";
+export declare const XAI_MAX_EDIT_IMAGES = 3;
+export declare function resolveXAIResolution(imageSize?: string): "1k" | "2k";
+export declare function generateOpenAIImage(model: Model, request: ImageGenerationRequest, options: ImageGenerationOptions): Promise<ImageGenerationResult>;

package/dist/types/images/openrouter-images.d.ts

@@ -0,0 +1,3 @@
+import type { Model } from "@oh-my-pi/pi-catalog/types";
+import type { ImageGenerationOptions, ImageGenerationRequest, ImageGenerationResult } from "./types.js";
+export declare function generateOpenRouterImage(model: Model, request: ImageGenerationRequest, options: ImageGenerationOptions): Promise<ImageGenerationResult>;

package/dist/types/images/shared.d.ts

@@ -0,0 +1,34 @@
+import type { FetchImpl, Model, Usage } from "@oh-my-pi/pi-catalog/types";
+import type { ApiKey } from "../auth-retry.js";
+import * as AIError from "../error/index.js";
+import type { GeneratedImage } from "./types.js";
+export declare class ImageApiError extends AIError.ProviderHttpError {
+    readonly name = "ImageApiError";
+}
+export declare function emptyUsage(input?: number, output?: number, cost?: number): Usage;
+export declare function usageFromWire(value: unknown): Usage;
+export declare function imageBaseUrl(model: Model): string;
+export declare function modelHeaders(model: Model, signal?: AbortSignal): Promise<Record<string, string>>;
+export declare function errorMessage(rawText: string): string;
+export declare function postJson(options: {
+    model: Model;
+    url: string;
+    body: unknown;
+    apiKey: ApiKey;
+    fetch: FetchImpl;
+    signal?: AbortSignal;
+}): Promise<unknown>;
+export declare function postMultipart(options: {
+    model: Model;
+    url: string;
+    body: FormData;
+    apiKey: ApiKey;
+    fetch: FetchImpl;
+    signal?: AbortSignal;
+}): Promise<unknown>;
+export declare function decodeImageResponse(value: unknown, fetch: FetchImpl, signal?: AbortSignal): Promise<{
+    images: GeneratedImage[];
+    usage: Usage;
+}>;
+export declare function toDataUrl(image: GeneratedImage): string;
+export declare function resolveOpenAIImageSize(aspectRatio?: string, imageSize?: string): string | undefined;

package/dist/types/images/types.d.ts

@@ -0,0 +1,31 @@
+import type { Api, FetchImpl, Model, Usage } from "@oh-my-pi/pi-catalog/types";
+import type { ApiKey } from "../auth-retry.js";
+export interface ImageInput {
+    data: string;
+    mimeType: string;
+}
+export interface ImageGenerationRequest {
+    prompt: string;
+    inputImages?: ImageInput[];
+    aspectRatio?: string;
+    imageSize?: string;
+    count?: number;
+}
+export interface GeneratedImage {
+    data: string;
+    mimeType: string;
+}
+export interface ImageGenerationResult {
+    images: GeneratedImage[];
+    text?: string;
+    usage: Usage;
+}
+export interface ImageGenerationOptions {
+    apiKey: ApiKey;
+    fetch?: FetchImpl;
+    signal?: AbortSignal;
+    /** Chat model that carries a Responses `image_generation` tool call. */
+    carrier?: Model<Api>;
+    /** Stable provider session id, used by the Codex Responses carrier. */
+    sessionId?: string;
+}

package/dist/types/index.d.ts

@@ -1,31 +1,39 @@
 export { type Type, type } from "@oh-my-pi/omptype";
 export * from "./api-registry.js";
 export type * from "./auth-broker/index.js";
-export type { AuthGatewayBootOptions, ModelResolver } from "./auth-gateway/server.js";
+export type { AuthGatewayBootOptions, ModelResolver } from "./auth-gateway/dispatch.js";
 export * from "./auth-gateway/types.js";
 export * from "./auth-retry.js";
 export * from "./auth-storage.js";
 export * from "./error/rate-limit.js";
+export * from "./embeddings/index.js";
+export * from "./images/index.js";
 export * from "./judgment/index.js";
+export * from "./rerank/index.js";
+export * from "./speech/index.js";
+export * from "./transcription/index.js";
+export * from "./video/index.js";
 export * from "./oneshot-retry.js";
 export * from "./provider-details.js";
 export * from "./provider-session-state.js";
-export * from "./providers/anthropic.js";
-export * from "./providers/anthropic-client.js";
-export * from "./providers/azure-openai-responses.js";
+export type * from "./providers/anthropic.js";
+export * from "./providers/anthropic-identity.js";
+export * from "./providers/anthropic-state.js";
+export type * from "./providers/anthropic-client.js";
+export type * from "./providers/azure-openai-responses.js";
 export type * from "./providers/cursor.js";
-export * from "./providers/gitlab-duo.js";
-export * from "./providers/gitlab-duo-workflow.js";
+export type * from "./providers/gitlab-duo.js";
+export type * from "./providers/gitlab-duo-workflow.js";
 export type * from "./providers/google.js";
 export type * from "./providers/google-gemini-cli.js";
 export type * from "./providers/google-vertex.js";
-export * from "./providers/kimi.js";
-export * from "./providers/mock.js";
-export * from "./providers/ollama.js";
-export * from "./providers/openai-codex-responses.js";
-export * from "./providers/openai-completions.js";
-export * from "./providers/openai-responses.js";
-export * from "./providers/synthetic.js";
+export type * from "./providers/kimi.js";
+export type * from "./providers/mock.js";
+export type * from "./providers/ollama.js";
+export type * from "./providers/openai-codex-responses.js";
+export type * from "./providers/openai-completions.js";
+export type * from "./providers/openai-responses.js";
+export type * from "./providers/synthetic.js";
 export * from "./registry/index.js";
 export * from "./stream.js";
 export * from "./types.js";

package/dist/types/judgment/types.d.ts

@@ -99,5 +99,8 @@ export declare class JudgmentParseError extends Error {
     readonly output: string;
     constructor(questionId: string, output: string, detail: string);
 }
-/** Zero-cost usage for a request whose backend reports only token counts. */
-export declare function tokenUsage(input: number, output: number): Usage;
+/**
+ * Usage from a backend that reports token counts and, optionally, one billed
+ * USD amount. Judgment pricing is input-only, so the amount lands on `input`.
+ */
+export declare function tokenUsage(input: number, output: number, cost?: number): Usage;