@psnext/slingcli 2.5.20260602-4 → 2.5.20260607-2

package/node_modules/@earendil-works/pi-ai/dist/providers/openai-completions.js

@@ -461,6 +461,12 @@ function buildParams(model, context, options, compat = getCompat(model), cacheRe
             openRouterParams.reasoning = { effort: model.thinkingLevelMap?.off ?? "none" };
         }
     }
+    else if (compat.thinkingFormat === "ant-ling" && model.reasoning && options?.reasoningEffort) {
+        const effort = model.thinkingLevelMap?.[options.reasoningEffort];
+        if (typeof effort === "string") {
+            params.reasoning = { effort };
+        }
+    }
     else if (compat.thinkingFormat === "together" && model.reasoning) {
         const togetherParams = params;
         togetherParams.reasoning = { enabled: !!options?.reasoningEffort };
@@ -488,7 +494,7 @@ function buildParams(model, context, options, compat = getCompat(model), cacheRe
         }
     }
     // OpenRouter provider routing preferences
-    if (model.baseUrl.includes("openrouter.ai") && model.compat?.openRouterRouting) {
+    if (model.compat?.openRouterRouting) {
         params.provider = model.compat.openRouterRouting;
     }
     // Vercel AI Gateway provider routing preferences
@@ -873,13 +879,19 @@ function mapStopReason(reason) {
 function detectCompat(model) {
     const provider = model.provider;
     const baseUrl = model.baseUrl;
-    const isZai = provider === "zai" || baseUrl.includes("api.z.ai");
+    const isZai = provider === "zai" ||
+        provider === "zai-coding-cn" ||
+        baseUrl.includes("api.z.ai") ||
+        baseUrl.includes("open.bigmodel.cn");
     const isTogether = provider === "together" || baseUrl.includes("api.together.ai") || baseUrl.includes("api.together.xyz");
     const isMoonshot = provider === "moonshotai" || provider === "moonshotai-cn" || baseUrl.includes("api.moonshot.");
     const isOpenRouter = provider === "openrouter" || baseUrl.includes("openrouter.ai");
     const isCloudflareWorkersAI = provider === "cloudflare-workers-ai" || baseUrl.includes("api.cloudflare.com");
     const isCloudflareAiGateway = provider === "cloudflare-ai-gateway" || baseUrl.includes("gateway.ai.cloudflare.com");
-    const isNonStandard = provider === "cerebras" ||
+    const isNvidia = provider === "nvidia" || baseUrl.includes("integrate.api.nvidia.com");
+    const isAntLing = provider === "ant-ling" || baseUrl.includes("api.ant-ling.com");
+    const isNonStandard = isNvidia ||
+        provider === "cerebras" ||
         baseUrl.includes("cerebras.ai") ||
         provider === "xai" ||
         baseUrl.includes("api.x.ai") ||
@@ -891,15 +903,17 @@ function detectCompat(model) {
         provider === "opencode" ||
         baseUrl.includes("opencode.ai") ||
         isCloudflareWorkersAI ||
-        isCloudflareAiGateway;
-    const useMaxTokens = baseUrl.includes("chutes.ai") || isMoonshot || isCloudflareAiGateway || isTogether;
+        isCloudflareAiGateway ||
+        isAntLing;
+    const useMaxTokens = baseUrl.includes("chutes.ai") || isMoonshot || isCloudflareAiGateway || isTogether || isNvidia || isAntLing;
     const isGrok = provider === "xai" || baseUrl.includes("api.x.ai");
     const isDeepSeek = provider === "deepseek" || baseUrl.includes("deepseek.com");
+    const isOpenRouterDeveloperRoleModel = isOpenRouter && (model.id.startsWith("anthropic/") || model.id.startsWith("openai/"));
     const cacheControlFormat = provider === "openrouter" && model.id.startsWith("anthropic/") ? "anthropic" : undefined;
     return {
         supportsStore: !isNonStandard,
-        supportsDeveloperRole: !isNonStandard && !isOpenRouter,
-        supportsReasoningEffort: !isGrok && !isZai && !isMoonshot && !isTogether && !isCloudflareAiGateway,
+        supportsDeveloperRole: isOpenRouterDeveloperRoleModel || (!isNonStandard && !isOpenRouter),
+        supportsReasoningEffort: !isGrok && !isZai && !isMoonshot && !isTogether && !isCloudflareAiGateway && !isNvidia && !isAntLing,
         supportsUsageInStreaming: true,
         maxTokensField: useMaxTokens ? "max_tokens" : "max_completion_tokens",
         requiresToolResultName: false,
@@ -912,16 +926,22 @@ function detectCompat(model) {
                 ? "zai"
                 : isTogether
                     ? "together"
-                    : isOpenRouter
-                        ? "openrouter"
-                        : "openai",
+                    : isAntLing
+                        ? "ant-ling"
+                        : isOpenRouter
+                            ? "openrouter"
+                            : "openai",
         openRouterRouting: {},
         vercelGatewayRouting: {},
         zaiToolStream: false,
-        supportsStrictMode: !isMoonshot && !isTogether && !isCloudflareAiGateway,
+        supportsStrictMode: !isMoonshot && !isTogether && !isCloudflareAiGateway && !isNvidia,
         cacheControlFormat,
         sendSessionAffinityHeaders: false,
-        supportsLongCacheRetention: !(isTogether || isCloudflareWorkersAI || isCloudflareAiGateway),
+        supportsLongCacheRetention: !(isTogether ||
+            isCloudflareWorkersAI ||
+            isCloudflareAiGateway ||
+            isNvidia ||
+            isAntLing),
     };
 }
 /**

package/node_modules/@earendil-works/pi-ai/dist/utils/oauth/github-copilot.js

@@ -93,10 +93,22 @@ async function startDeviceFlow(domain) {
         typeof expiresIn !== "number") {
         throw new Error("Invalid device code response fields");
     }
+    // The verification URI is opened in the user's browser and to prevent `open` from
+    // opening an executable or similar, we force it to be a URL.
+    let parsedUri;
+    try {
+        parsedUri = new URL(verificationUri);
+    }
+    catch {
+        throw new Error("Untrusted verification_uri in device code response");
+    }
+    if (parsedUri.protocol !== "https:" && parsedUri.protocol !== "http:") {
+        throw new Error("Untrusted verification_uri in device code response");
+    }
     return {
         device_code: deviceCode,
         user_code: userCode,
-        verification_uri: verificationUri,
+        verification_uri: parsedUri.href,
         interval,
         expires_in: expiresIn,
     };

package/node_modules/@earendil-works/pi-ai/dist/utils/oauth/openai-codex.js

@@ -18,7 +18,6 @@ if (typeof process !== "undefined" && (process.versions?.node || process.version
 import { pollOAuthDeviceCodeFlow } from "./device-code.js";
 import { oauthErrorHtml, oauthSuccessHtml } from "./oauth-page.js";
 import { generatePKCE } from "./pkce.js";
-const CALLBACK_HOST = process.env.PI_OAUTH_CALLBACK_HOST || "127.0.0.1";
 const CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
 const AUTH_BASE_URL = "https://auth.openai.com";
 const AUTHORIZE_URL = `${AUTH_BASE_URL}/oauth/authorize`;
@@ -33,6 +32,9 @@ export const OPENAI_CODEX_BROWSER_LOGIN_METHOD = "browser";
 export const OPENAI_CODEX_DEVICE_CODE_LOGIN_METHOD = "device_code";
 const SCOPE = "openid profile email offline_access";
 const JWT_CLAIM_PATH = "https://api.openai.com/auth";
+function getCallbackHost() {
+    return typeof process !== "undefined" ? process.env.PI_OAUTH_CALLBACK_HOST || "127.0.0.1" : "127.0.0.1";
+}
 function createState() {
     if (!_randomBytes) {
         throw new Error("OpenAI Codex OAuth is only available in Node.js environments");
@@ -287,7 +289,7 @@ function startLocalOAuthServer(state) {
     });
     return new Promise((resolve) => {
         server
-            .listen(1455, CALLBACK_HOST, () => {
+            .listen(1455, getCallbackHost(), () => {
             resolve({
                 close: () => server.close(),
                 cancelWait: () => {

package/node_modules/@earendil-works/pi-ai/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@earendil-works/pi-ai",
-	"version": "0.78.0",
+	"version": "0.78.1",
 	"description": "Unified LLM API with automatic model discovery and provider configuration",
 	"type": "module",
 	"main": "./dist/index.js",

package/node_modules/@earendil-works/pi-coding-agent/dist/cli/args.js

@@ -160,6 +160,12 @@ export function parseArgs(args) {
         else if (arg === "--verbose") {
             result.verbose = true;
         }
+        else if (arg === "--approve" || arg === "-a") {
+            result.projectTrustOverride = true;
+        }
+        else if (arg === "--no-approve" || arg === "-na") {
+            result.projectTrustOverride = false;
+        }
         else if (arg === "--offline") {
             result.offline = true;
         }
@@ -212,8 +218,10 @@ ${chalk.bold("Commands:")}
   ${APP_NAME} remove <source> [-l]      Remove extension source from settings
   ${APP_NAME} uninstall <source> [-l]   Alias for remove
   ${APP_NAME} update [source|self|pi]   Update pi and installed extensions
-  ${APP_NAME} list                      List installed extensions from settings
-  ${APP_NAME} config                    Open TUI to enable/disable package resources
+  ${APP_NAME} list [--approve|--no-approve]
+                                 List installed extensions from settings
+  ${APP_NAME} config [--no-approve]
+                                 Open TUI to enable/disable package resources
   ${APP_NAME} <command> --help          Show help for install/remove/uninstall/update/list
 
 ${chalk.bold("Options:")}
@@ -253,6 +261,8 @@ ${chalk.bold("Options:")}
   --export <file>                Export session file to HTML and exit
   --list-models [search]         List available models (with optional fuzzy search)
   --verbose                      Force verbose startup (overrides quietStartup setting)
+  --approve, -a                  Trust project-local files for this run
+  --no-approve, -na              Ignore project-local files for this run
   --offline                      Disable startup network operations (same as PI_OFFLINE=1)
   --help, -h                     Show this help
   --version, -v                  Show version number
@@ -315,6 +325,7 @@ ${chalk.bold("Examples:")}
 ${chalk.bold("Environment Variables:")}
   ANTHROPIC_API_KEY                - Anthropic Claude API key
   ANTHROPIC_OAUTH_TOKEN            - Anthropic OAuth token (alternative to API key)
+  ANT_LING_API_KEY                 - Ant Ling API key
   OPENAI_API_KEY                   - OpenAI GPT API key
   AZURE_OPENAI_API_KEY             - Azure OpenAI API key
   AZURE_OPENAI_BASE_URL            - Azure OpenAI/Cognitive Services base URL (e.g. https://{resource}.openai.azure.com)
@@ -322,6 +333,7 @@ ${chalk.bold("Environment Variables:")}
   AZURE_OPENAI_API_VERSION         - Azure OpenAI API version (default: v1)
   AZURE_OPENAI_DEPLOYMENT_NAME_MAP - Azure OpenAI model=deployment map (comma-separated)
   DEEPSEEK_API_KEY                 - DeepSeek API key
+  NVIDIA_API_KEY                   - NVIDIA NIM API key
   GEMINI_API_KEY                   - Google Gemini API key
   GROQ_API_KEY                     - Groq API key
   CEREBRAS_API_KEY                 - Cerebras API key
@@ -331,6 +343,7 @@ ${chalk.bold("Environment Variables:")}
   OPENROUTER_API_KEY               - OpenRouter API key
   AI_GATEWAY_API_KEY               - Vercel AI Gateway API key
   ZAI_API_KEY                      - ZAI API key
+  ZAI_CODING_CN_API_KEY            - ZAI Coding Plan API key (China)
   MISTRAL_API_KEY                  - Mistral API key
   MINIMAX_API_KEY                  - MiniMax API key
   MOONSHOT_API_KEY                 - Moonshot AI API key

package/node_modules/@earendil-works/pi-coding-agent/dist/core/agent-session.js

@@ -2225,6 +2225,7 @@ export class AgentSession {
                     customInstructions,
                     replaceInstructions,
                     reserveTokens: branchSummarySettings.reserveTokens,
+                    streamFn: this.agent.streamFn,
                 });
                 if (result.aborted) {
                     return { cancelled: true, aborted: true };

package/node_modules/@earendil-works/pi-coding-agent/dist/core/auth-storage.js

@@ -13,6 +13,7 @@ import lockfile from "proper-lockfile";
 import { getAgentDir } from "../config.js";
 import { normalizePath } from "../utils/paths.js";
 import { resolveConfigValue } from "./resolve-config-value.js";
+const AUTH_FILE_WRITE_OPTIONS = { encoding: "utf-8", mode: 0o600 };
 export class FileAuthStorageBackend {
     authPath;
     constructor(authPath = join(getAgentDir(), "auth.json")) {
@@ -26,7 +27,7 @@ export class FileAuthStorageBackend {
     }
     ensureFileExists() {
         if (!existsSync(this.authPath)) {
-            writeFileSync(this.authPath, "{}", "utf-8");
+            writeFileSync(this.authPath, "{}", AUTH_FILE_WRITE_OPTIONS);
             chmodSync(this.authPath, 0o600);
         }
     }
@@ -63,7 +64,7 @@ export class FileAuthStorageBackend {
             const current = existsSync(this.authPath) ? readFileSync(this.authPath, "utf-8") : undefined;
             const { result, next } = fn(current);
             if (next !== undefined) {
-                writeFileSync(this.authPath, next, "utf-8");
+                writeFileSync(this.authPath, next, AUTH_FILE_WRITE_OPTIONS);
                 chmodSync(this.authPath, 0o600);
             }
             return result;
@@ -105,7 +106,7 @@ export class FileAuthStorageBackend {
             const { result, next } = await fn(current);
             throwIfCompromised();
             if (next !== undefined) {
-                writeFileSync(this.authPath, next, "utf-8");
+                writeFileSync(this.authPath, next, AUTH_FILE_WRITE_OPTIONS);
                 chmodSync(this.authPath, 0o600);
             }
             throwIfCompromised();

package/node_modules/@earendil-works/pi-coding-agent/dist/core/compaction/branch-summarization.js

@@ -185,7 +185,7 @@ Keep each section concise. Preserve exact file paths, function names, and error
  * @param options - Generation options
  */
 export async function generateBranchSummary(entries, options) {
-    const { model, apiKey, headers, signal, customInstructions, replaceInstructions, reserveTokens = 16384 } = options;
+    const { model, apiKey, headers, signal, customInstructions, replaceInstructions, reserveTokens = 16384, streamFn, } = options;
     // Token budget = context window minus reserved space for prompt + response
     const contextWindow = model.contextWindow || 128000;
     const tokenBudget = contextWindow - reserveTokens;
@@ -216,8 +216,14 @@ export async function generateBranchSummary(entries, options) {
             timestamp: Date.now(),
         },
     ];
-    // Call LLM for summarization
-    const response = await completeSimple(model, { systemPrompt: SUMMARIZATION_SYSTEM_PROMPT, messages: summarizationMessages }, { apiKey, headers, signal, maxTokens: 2048 });
+    // Call LLM for summarization. Prefer the session stream function so SDK
+    // request behavior (timeouts, retries, attribution headers) stays consistent
+    // without running through agent state/events.
+    const context = { systemPrompt: SUMMARIZATION_SYSTEM_PROMPT, messages: summarizationMessages };
+    const requestOptions = { apiKey, headers, signal, maxTokens: 2048 };
+    const response = streamFn
+        ? await (await streamFn(model, context, requestOptions)).result()
+        : await completeSimple(model, context, requestOptions);
     // Check if aborted or errored
     if (response.stopReason === "aborted") {
         return { aborted: true };

package/node_modules/@earendil-works/pi-coding-agent/dist/core/export-html/template.js

@@ -613,6 +613,18 @@
           .replace(/'/g, ''');
       }
 
+      function sanitizeMarkdownUrl(value) {
+        const href = String(value || '').trim().replace(/[\x00-\x1f\x7f]/g, '');
+        if (!href) return href;
+
+        const scheme = href.match(/^([A-Za-z][A-Za-z0-9+.-]*):/);
+        if (scheme && !/^(https?|mailto|tel|ftp)$/i.test(scheme[1])) {
+          return null;
+        }
+
+        return href;
+      }
+
       /**
        * Truncate string to maxLen chars, append "..." if truncated.
        */
@@ -1569,10 +1581,11 @@
           }
         },
         renderer: {
-          // Sanitize link URLs to prevent javascript:/vbscript:/data: XSS
+          // Sanitize link URLs with a scheme allow-list. Browsers strip C0
+          // controls from schemes, so strip them before checking and emitting.
           link(token) {
-            const href = (token.href || '').trim();
-            if (/^\s*(javascript|vbscript|data):/i.test(href)) {
+            const href = sanitizeMarkdownUrl(token.href);
+            if (href === null) {
               return this.parser.parseInline(token.tokens);
             }
             let out = '<a href="' + escapeHtml(href) + '"';
@@ -1582,10 +1595,10 @@
             out += '>' + this.parser.parseInline(token.tokens) + '</a>';
             return out;
           },
-          // Sanitize image src URLs
+          // Sanitize image src URLs with the same scheme allow-list.
           image(token) {
-            const href = (token.href || '').trim();
-            if (/^\s*(javascript|vbscript|data):/i.test(href)) {
+            const href = sanitizeMarkdownUrl(token.href);
+            if (href === null) {
               return escapeHtml(token.text || '');
             }
             let out = '<img src="' + escapeHtml(href) + '" alt="' + escapeHtml(token.text || '') + '"';

package/node_modules/@earendil-works/pi-coding-agent/dist/core/model-resolver.js

@@ -9,10 +9,12 @@ import { DEFAULT_THINKING_LEVEL } from "./defaults.js";
 /** Default model IDs for each known provider */
 export const defaultModelPerProvider = {
     "amazon-bedrock": "us.anthropic.claude-opus-4-6-v1",
+    "ant-ling": "Ring-2.6-1T",
     anthropic: "claude-opus-4-8",
     openai: "gpt-5.4",
     "azure-openai-responses": "gpt-5.4",
     "openai-codex": "gpt-5.5",
+    nvidia: "nvidia/nemotron-3-super-120b-a12b",
     deepseek: "deepseek-v4-pro",
     google: "gemini-3.1-pro-preview",
     "google-vertex": "gemini-3.1-pro-preview",
@@ -23,6 +25,7 @@ export const defaultModelPerProvider = {
     groq: "openai/gpt-oss-120b",
     cerebras: "zai-glm-4.7",
     zai: "glm-5.1",
+    "zai-coding-cn": "glm-5.1",
     mistral: "devstral-medium-latest",
     minimax: "MiniMax-M2.7",
     "minimax-cn": "MiniMax-M2.7",

package/node_modules/@earendil-works/pi-coding-agent/dist/core/package-manager.js

@@ -1,6 +1,6 @@
 import { createHash } from "node:crypto";
-import { existsSync, mkdirSync, readdirSync, readFileSync, rmSync, statSync, writeFileSync } from "node:fs";
-import { homedir, tmpdir } from "node:os";
+import { chmodSync, existsSync, mkdirSync, readdirSync, readFileSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
 function getEnv() {
     if (process.platform !== "linux" || Object.keys(process.env).length > 0) {
         return process.env;
@@ -70,6 +70,12 @@ function toPosixPath(p) {
 function getHomeDir() {
     return process.env.HOME || homedir();
 }
+export function getExtensionTempFolder(agentDir) {
+    const tempFolder = join(agentDir, "tmp", "extensions");
+    mkdirSync(tempFolder, { recursive: true, mode: 0o700 });
+    chmodSync(tempFolder, 0o700);
+    return tempFolder;
+}
 function prefixIgnorePattern(line, prefix) {
     const trimmed = line.trim();
     if (!trimmed)
@@ -733,6 +739,7 @@ export class DefaultPackageManager {
     async install(source, options) {
         const parsed = this.parseSource(source);
         const scope = options?.local ? "project" : "user";
+        this.assertProjectTrustedForScope(scope);
         await this.withProgress("install", source, `Installing ${source}...`, async () => {
             if (parsed.type === "npm") {
                 await this.installNpm(parsed, scope, false);
@@ -759,6 +766,7 @@ export class DefaultPackageManager {
     async remove(source, options) {
         const parsed = this.parseSource(source);
         const scope = options?.local ? "project" : "user";
+        this.assertProjectTrustedForScope(scope);
         await this.withProgress("remove", source, `Removing ${source}...`, async () => {
             if (parsed.type === "npm") {
                 await this.uninstallNpm(parsed, scope);
@@ -1363,6 +1371,11 @@ export class DefaultPackageManager {
         const version = match[2];
         return { name, version };
     }
+    assertProjectTrustedForScope(scope) {
+        if (scope === "project" && !this.settingsManager.isProjectTrusted()) {
+            throw new Error("Project is not trusted; refusing to access project package storage");
+        }
+    }
     getNpmCommand() {
         const configuredCommand = this.settingsManager.getNpmCommand();
         if (!configuredCommand || configuredCommand.length === 0) {
@@ -1564,6 +1577,7 @@ export class DefaultPackageManager {
             return this.getTemporaryDir("npm");
         }
         if (scope === "project") {
+            this.assertProjectTrustedForScope(scope);
             return join(this.cwd, CONFIG_DIR_NAME, "npm");
         }
         return join(this.agentDir, "npm");
@@ -1602,6 +1616,7 @@ export class DefaultPackageManager {
             return join(this.getTemporaryDir("npm"), "node_modules", source.name);
         }
         if (scope === "project") {
+            this.assertProjectTrustedForScope(scope);
             return join(this.cwd, CONFIG_DIR_NAME, "npm", "node_modules", source.name);
         }
         return join(this.agentDir, "npm", "node_modules", source.name);
@@ -1626,29 +1641,41 @@ export class DefaultPackageManager {
         if (scope === "temporary") {
             return this.getTemporaryDir(`git-${source.host}`, source.path);
         }
-        if (scope === "project") {
-            return join(this.cwd, CONFIG_DIR_NAME, "git", source.host, source.path);
+        const installRoot = this.getGitInstallRoot(scope);
+        if (!installRoot) {
+            throw new Error("Missing git install root");
         }
-        return join(this.agentDir, "git", source.host, source.path);
+        return this.resolveManagedPath(installRoot, source.host, source.path);
     }
     getGitInstallRoot(scope) {
         if (scope === "temporary") {
             return undefined;
         }
         if (scope === "project") {
+            this.assertProjectTrustedForScope(scope);
             return join(this.cwd, CONFIG_DIR_NAME, "git");
         }
         return join(this.agentDir, "git");
     }
     getTemporaryDir(prefix, suffix) {
+        const root = this.resolveManagedPath(getExtensionTempFolder(this.agentDir), prefix);
         const hash = createHash("sha256")
             .update(`${prefix}-${suffix ?? ""}`)
             .digest("hex")
             .slice(0, 8);
-        return join(tmpdir(), "pi-extensions", prefix, hash, suffix ?? "");
+        return this.resolveManagedPath(root, hash, suffix ?? "");
+    }
+    resolveManagedPath(root, ...parts) {
+        const resolvedRoot = resolve(root);
+        const resolvedPath = resolve(resolvedRoot, ...parts);
+        if (resolvedPath !== resolvedRoot && !resolvedPath.startsWith(`${resolvedRoot}${sep}`)) {
+            throw new Error(`Refusing to use path outside package install root: ${resolvedPath}`);
+        }
+        return resolvedPath;
     }
     getBaseDirForScope(scope) {
         if (scope === "project") {
+            this.assertProjectTrustedForScope(scope);
             return join(this.cwd, CONFIG_DIR_NAME);
         }
         if (scope === "user") {
@@ -1844,7 +1871,10 @@ export class DefaultPackageManager {
             themes: join(projectBaseDir, "themes"),
         };
         const userAgentsSkillsDir = join(getHomeDir(), ".agents", "skills");
-        const projectAgentsSkillDirs = collectAncestorAgentsSkillDirs(this.cwd).filter((dir) => resolve(dir) !== resolve(userAgentsSkillsDir));
+        const projectTrusted = this.settingsManager.isProjectTrusted();
+        const projectAgentsSkillDirs = projectTrusted
+            ? collectAncestorAgentsSkillDirs(this.cwd).filter((dir) => resolve(dir) !== resolve(userAgentsSkillsDir))
+            : [];
         const addResources = (resourceType, paths, metadata, overrides, baseDir) => {
             const target = this.getTargetMap(accumulator, resourceType);
             for (const path of paths) {
@@ -1852,10 +1882,12 @@ export class DefaultPackageManager {
                 this.addResource(target, path, metadata, enabled);
             }
         };
-        // Project extensions from .pi/
-        addResources("extensions", collectAutoExtensionEntries(projectDirs.extensions), projectMetadata, projectOverrides.extensions, projectBaseDir);
-        // Project skills from .pi/
-        addResources("skills", collectAutoSkillEntries(projectDirs.skills, "pi"), projectMetadata, projectOverrides.skills, projectBaseDir);
+        if (projectTrusted) {
+            // Project extensions from .pi/
+            addResources("extensions", collectAutoExtensionEntries(projectDirs.extensions), projectMetadata, projectOverrides.extensions, projectBaseDir);
+            // Project skills from .pi/
+            addResources("skills", collectAutoSkillEntries(projectDirs.skills, "pi"), projectMetadata, projectOverrides.skills, projectBaseDir);
+        }
         // Project skills from .agents/ (each with its own baseDir)
         for (const agentsSkillsDir of projectAgentsSkillDirs) {
             const agentsBaseDir = dirname(agentsSkillsDir); // the .agents directory
@@ -1865,8 +1897,10 @@ export class DefaultPackageManager {
             };
             addResources("skills", collectAutoSkillEntries(agentsSkillsDir, "agents"), agentsMetadata, projectOverrides.skills, agentsBaseDir);
         }
-        addResources("prompts", collectAutoPromptEntries(projectDirs.prompts), projectMetadata, projectOverrides.prompts, projectBaseDir);
-        addResources("themes", collectAutoThemeEntries(projectDirs.themes), projectMetadata, projectOverrides.themes, projectBaseDir);
+        if (projectTrusted) {
+            addResources("prompts", collectAutoPromptEntries(projectDirs.prompts), projectMetadata, projectOverrides.prompts, projectBaseDir);
+            addResources("themes", collectAutoThemeEntries(projectDirs.themes), projectMetadata, projectOverrides.themes, projectBaseDir);
+        }
         // User extensions from ~/.pi/agent/
         addResources("extensions", collectAutoExtensionEntries(userDirs.extensions), userMetadata, userOverrides.extensions, globalBaseDir);
         // User skills from ~/.pi/agent/

package/node_modules/@earendil-works/pi-coding-agent/dist/core/provider-attribution.js

@@ -0,0 +1,72 @@
+import { isInstallTelemetryEnabled } from "./telemetry.js";
+const OPENROUTER_HOST = "openrouter.ai";
+const NVIDIA_NIM_HOST = "integrate.api.nvidia.com";
+const CLOUDFLARE_API_HOST = "api.cloudflare.com";
+const CLOUDFLARE_AI_GATEWAY_HOST = "gateway.ai.cloudflare.com";
+const OPENCODE_HOST = "opencode.ai";
+function matchesHost(baseUrl, expectedHost) {
+    try {
+        return new URL(baseUrl).hostname === expectedHost;
+    }
+    catch {
+        return false;
+    }
+}
+function isOpenRouterModel(model) {
+    return model.provider === "openrouter" || model.baseUrl.includes(OPENROUTER_HOST);
+}
+function isNvidiaNimModel(model) {
+    return model.provider === "nvidia" || matchesHost(model.baseUrl, NVIDIA_NIM_HOST);
+}
+function isCloudflareModel(model) {
+    return (model.provider === "cloudflare-workers-ai" ||
+        model.provider === "cloudflare-ai-gateway" ||
+        matchesHost(model.baseUrl, CLOUDFLARE_API_HOST) ||
+        matchesHost(model.baseUrl, CLOUDFLARE_AI_GATEWAY_HOST));
+}
+function getDefaultAttributionHeaders(model, settingsManager) {
+    if (!isInstallTelemetryEnabled(settingsManager)) {
+        return undefined;
+    }
+    if (isOpenRouterModel(model)) {
+        return {
+            "HTTP-Referer": "https://pi.dev",
+            "X-OpenRouter-Title": "pi",
+            "X-OpenRouter-Categories": "cli-agent",
+        };
+    }
+    if (isNvidiaNimModel(model)) {
+        return {
+            "X-BILLING-INVOKE-ORIGIN": "Pi",
+        };
+    }
+    if (isCloudflareModel(model)) {
+        return {
+            "User-Agent": "pi-coding-agent",
+        };
+    }
+    return undefined;
+}
+function getSessionHeaders(model, sessionId) {
+    if (!sessionId)
+        return undefined;
+    if (model.provider !== "opencode" &&
+        model.provider !== "opencode-go" &&
+        !matchesHost(model.baseUrl, OPENCODE_HOST)) {
+        return undefined;
+    }
+    return { "x-opencode-session": sessionId, "x-opencode-client": "pi" };
+}
+export function mergeProviderAttributionHeaders(model, settingsManager, sessionId, ...headerSources) {
+    const merged = {
+        ...getSessionHeaders(model, sessionId),
+        ...getDefaultAttributionHeaders(model, settingsManager),
+    };
+    for (const headers of headerSources) {
+        if (headers) {
+            Object.assign(merged, headers);
+        }
+    }
+    return Object.keys(merged).length > 0 ? merged : undefined;
+}
+//# sourceMappingURL=provider-attribution.js.map

package/node_modules/@earendil-works/pi-coding-agent/dist/core/provider-display-names.js

@@ -1,6 +1,7 @@
 export const BUILT_IN_PROVIDER_DISPLAY_NAMES = {
     anthropic: "Anthropic",
     "amazon-bedrock": "Amazon Bedrock",
+    "ant-ling": "Ant Ling",
     "azure-openai-responses": "Azure OpenAI Responses",
     cerebras: "Cerebras",
     "cloudflare-ai-gateway": "Cloudflare AI Gateway",
@@ -17,6 +18,7 @@ export const BUILT_IN_PROVIDER_DISPLAY_NAMES = {
     "minimax-cn": "MiniMax (China)",
     moonshotai: "Moonshot AI",
     "moonshotai-cn": "Moonshot AI (China)",
+    nvidia: "NVIDIA NIM",
     opencode: "OpenCode Zen",
     "opencode-go": "OpenCode Go",
     openai: "OpenAI",
@@ -25,6 +27,7 @@ export const BUILT_IN_PROVIDER_DISPLAY_NAMES = {
     "vercel-ai-gateway": "Vercel AI Gateway",
     xai: "xAI",
     zai: "ZAI",
+    "zai-coding-cn": "ZAI Coding Plan (China)",
     xiaomi: "Xiaomi MiMo",
     "xiaomi-token-plan-cn": "Xiaomi MiMo Token Plan (China)",
     "xiaomi-token-plan-ams": "Xiaomi MiMo Token Plan (Amsterdam)",