@psnext/slingcli 2.5.20260615-2 → 2.5.20260617-2

package/node_modules/@earendil-works/pi-ai/dist/providers/openai-responses.js

@@ -2,6 +2,7 @@ import OpenAI from "openai";
 import { clampThinkingLevel } from "../models.js";
 import { AssistantMessageEventStream } from "../utils/event-stream.js";
 import { headersToRecord } from "../utils/headers.js";
+import { getProviderEnvValue } from "../utils/provider-env.js";
 import { isCloudflareProvider, resolveCloudflareBaseUrl } from "./cloudflare.js";
 import { buildCopilotDynamicHeaders, hasCopilotVisionInput } from "./github-copilot-headers.js";
 import { clampOpenAIPromptCacheKey } from "./openai-prompt-cache.js";
@@ -12,11 +13,11 @@ const OPENAI_TOOL_CALL_PROVIDERS = new Set(["openai", "openai-codex", "opencode"
  * Resolve cache retention preference.
  * Defaults to "short" and uses PI_CACHE_RETENTION for backward compatibility.
  */
-function resolveCacheRetention(cacheRetention) {
+function resolveCacheRetention(cacheRetention, env) {
     if (cacheRetention) {
         return cacheRetention;
     }
-    if (typeof process !== "undefined" && process.env.PI_CACHE_RETENTION === "long") {
+    if (getProviderEnvValue("PI_CACHE_RETENTION", env) === "long") {
         return "long";
     }
     return "short";
@@ -77,9 +78,9 @@ export const streamOpenAIResponses = (model, context, options) => {
             if (!apiKey) {
                 throw new Error(`No API key for provider: ${model.provider}`);
             }
-            const cacheRetention = resolveCacheRetention(options?.cacheRetention);
+            const cacheRetention = resolveCacheRetention(options?.cacheRetention, options?.env);
             const cacheSessionId = cacheRetention === "none" ? undefined : options?.sessionId;
-            const client = createClient(model, context, apiKey, options?.headers, cacheSessionId);
+            const client = createClient(model, context, apiKey, options?.headers, cacheSessionId, options?.env);
             let params = buildParams(model, context, options);
             const nextParams = await options?.onPayload?.(params, model);
             if (nextParams !== undefined) {
@@ -133,7 +134,7 @@ export const streamSimpleOpenAIResponses = (model, context, options) => {
         reasoningEffort,
     });
 };
-function createClient(model, context, apiKey, optionsHeaders, sessionId) {
+function createClient(model, context, apiKey, optionsHeaders, sessionId, env) {
     const compat = getCompat(model);
     const headers = { ...model.headers };
     if (model.provider === "github-copilot") {
@@ -163,14 +164,14 @@ function createClient(model, context, apiKey, optionsHeaders, sessionId) {
         : headers;
     return new OpenAI({
         apiKey,
-        baseURL: isCloudflareProvider(model.provider) ? resolveCloudflareBaseUrl(model) : model.baseUrl,
+        baseURL: isCloudflareProvider(model.provider) ? resolveCloudflareBaseUrl(model, env) : model.baseUrl,
         dangerouslyAllowBrowser: true,
         defaultHeaders,
     });
 }
 function buildParams(model, context, options) {
     const messages = convertResponsesMessages(model, context, OPENAI_TOOL_CALL_PROVIDERS);
-    const cacheRetention = resolveCacheRetention(options?.cacheRetention);
+    const cacheRetention = resolveCacheRetention(options?.cacheRetention, options?.env);
     const compat = getCompat(model);
     const params = {
         model: model.id,

package/node_modules/@earendil-works/pi-ai/dist/providers/simple-options.js

@@ -15,6 +15,7 @@ export function buildBaseOptions(_model, options, apiKey) {
         maxRetries: options?.maxRetries,
         maxRetryDelayMs: options?.maxRetryDelayMs,
         metadata: options?.metadata,
+        env: options?.env,
     };
 }
 export function clampReasoning(effort) {

package/node_modules/@earendil-works/pi-ai/dist/stream.js

@@ -8,7 +8,7 @@ function hasExplicitApiKey(apiKey) {
 function withEnvApiKey(model, options) {
     if (hasExplicitApiKey(options?.apiKey))
         return options;
-    const apiKey = getEnvApiKey(model.provider);
+    const apiKey = getEnvApiKey(model.provider, options?.env);
     if (!apiKey)
         return options;
     return { ...options, apiKey };

package/node_modules/@earendil-works/pi-ai/dist/utils/node-http-proxy.js

@@ -1,5 +1,4 @@
-import { HttpProxyAgent } from "http-proxy-agent";
-import { HttpsProxyAgent } from "https-proxy-agent";
+import { getProviderEnvValue } from "./provider-env.js";
 const DEFAULT_PROXY_PORTS = {
     ftp: 21,
     gopher: 70,
@@ -8,9 +7,14 @@ const DEFAULT_PROXY_PORTS = {
     ws: 80,
     wss: 443,
 };
-export const UNSUPPORTED_PROXY_PROTOCOL_MESSAGE = "Unsupported proxy protocol. SOCKS and PAC proxy URLs are not supported; use an HTTP or HTTPS proxy URL.";
-function getProxyEnv(key) {
-    return process.env[key.toLowerCase()] || process.env[key.toUpperCase()] || "";
+function getProxyEnv(key, env) {
+    const lowercaseKey = key.toLowerCase();
+    const uppercaseKey = key.toUpperCase();
+    return (env?.[lowercaseKey] ||
+        env?.[uppercaseKey] ||
+        getProviderEnvValue(lowercaseKey) ||
+        getProviderEnvValue(uppercaseKey) ||
+        "");
 }
 function parseProxyTargetUrl(targetUrl) {
     if (targetUrl instanceof URL) {
@@ -23,8 +27,8 @@ function parseProxyTargetUrl(targetUrl) {
         return undefined;
     }
 }
-function shouldProxyHostname(hostname, port) {
-    const noProxy = getProxyEnv("no_proxy").toLowerCase();
+function shouldProxyHostname(hostname, port, env) {
+    const noProxy = getProxyEnv("no_proxy", env).toLowerCase();
     if (!noProxy) {
         return true;
     }
@@ -50,7 +54,7 @@ function shouldProxyHostname(hostname, port) {
         return !hostname.endsWith(proxyHostname);
     });
 }
-function getProxyForUrl(targetUrl) {
+function getProxyForUrl(targetUrl, env) {
     const parsedUrl = parseProxyTargetUrl(targetUrl);
     if (!parsedUrl?.protocol || !parsedUrl.host) {
         return "";
@@ -58,17 +62,18 @@ function getProxyForUrl(targetUrl) {
     const protocol = parsedUrl.protocol.split(":", 1)[0];
     const hostname = parsedUrl.host.replace(/:\d*$/, "");
     const port = Number.parseInt(parsedUrl.port, 10) || DEFAULT_PROXY_PORTS[protocol] || 0;
-    if (!shouldProxyHostname(hostname, port)) {
+    if (!shouldProxyHostname(hostname, port, env)) {
         return "";
     }
-    let proxy = getProxyEnv(`${protocol}_proxy`) || getProxyEnv("all_proxy");
+    let proxy = getProxyEnv(`${protocol}_proxy`, env) || getProxyEnv("all_proxy", env);
     if (proxy && !proxy.includes("://")) {
         proxy = `${protocol}://${proxy}`;
     }
     return proxy;
 }
-export function resolveHttpProxyUrlForTarget(targetUrl) {
-    const proxy = getProxyForUrl(targetUrl);
+export const UNSUPPORTED_PROXY_PROTOCOL_MESSAGE = "Unsupported proxy protocol. SOCKS and PAC proxy URLs are not supported; use an HTTP or HTTPS proxy URL.";
+export function resolveHttpProxyUrlForTarget(targetUrl, env) {
+    const proxy = getProxyForUrl(targetUrl, env);
     if (!proxy) {
         return undefined;
     }
@@ -84,14 +89,4 @@ export function resolveHttpProxyUrlForTarget(targetUrl) {
     }
     return proxyUrl;
 }
-export function createHttpProxyAgentsForTarget(targetUrl) {
-    const proxyUrl = resolveHttpProxyUrlForTarget(targetUrl);
-    if (!proxyUrl) {
-        return undefined;
-    }
-    return {
-        httpAgent: new HttpProxyAgent(proxyUrl),
-        httpsAgent: new HttpsProxyAgent(proxyUrl),
-    };
-}
 //# sourceMappingURL=node-http-proxy.js.map

package/node_modules/@earendil-works/pi-ai/dist/utils/oauth/anthropic.js

@@ -4,6 +4,7 @@
  * NOTE: This module uses Node.js http.createServer for the OAuth callback server.
  * It is only intended for CLI use, not browser environments.
  */
+import { getProviderEnvValue } from "../provider-env.js";
 import { oauthErrorHtml, oauthSuccessHtml } from "./oauth-page.js";
 import { generatePKCE } from "./pkce.js";
 let nodeApis = null;
@@ -12,7 +13,7 @@ const decode = (s) => atob(s);
 const CLIENT_ID = decode("OWQxYzI1MGEtZTYxYi00NGQ5LTg4ZWQtNTk0NGQxOTYyZjVl");
 const AUTHORIZE_URL = "https://claude.ai/oauth/authorize";
 const TOKEN_URL = "https://platform.claude.com/v1/oauth/token";
-const CALLBACK_HOST = process.env.PI_OAUTH_CALLBACK_HOST || "127.0.0.1";
+const CALLBACK_HOST = getProviderEnvValue("PI_OAUTH_CALLBACK_HOST") || "127.0.0.1";
 const CALLBACK_PORT = 53692;
 const CALLBACK_PATH = "/callback";
 const REDIRECT_URI = `http://localhost:${CALLBACK_PORT}${CALLBACK_PATH}`;

package/node_modules/@earendil-works/pi-ai/dist/utils/oauth/openai-codex.js

@@ -15,6 +15,7 @@ if (typeof process !== "undefined" && (process.versions?.node || process.version
         _http = m;
     });
 }
+import { getProviderEnvValue } from "../provider-env.js";
 import { pollOAuthDeviceCodeFlow } from "./device-code.js";
 import { oauthErrorHtml, oauthSuccessHtml } from "./oauth-page.js";
 import { generatePKCE } from "./pkce.js";
@@ -33,7 +34,7 @@ export const OPENAI_CODEX_DEVICE_CODE_LOGIN_METHOD = "device_code";
 const SCOPE = "openid profile email offline_access";
 const JWT_CLAIM_PATH = "https://api.openai.com/auth";
 function getCallbackHost() {
-    return typeof process !== "undefined" ? process.env.PI_OAUTH_CALLBACK_HOST || "127.0.0.1" : "127.0.0.1";
+    return getProviderEnvValue("PI_OAUTH_CALLBACK_HOST") || "127.0.0.1";
 }
 function createState() {
     if (!_randomBytes) {
@@ -224,7 +225,7 @@ async function pollOpenAICodexDeviceAuth(device, signal) {
         },
     });
 }
-async function createAuthorizationFlow(originator = "sling") {
+async function createAuthorizationFlow(originator = "pi") {
     const { verifier, challenge } = await generatePKCE();
     const state = createState();
     const url = new URL(AUTHORIZE_URL);

package/node_modules/@earendil-works/pi-ai/dist/utils/provider-env.js

@@ -0,0 +1,44 @@
+let procEnvCache = null;
+/**
+ * Fallback for https://github.com/oven-sh/bun/issues/27802.
+ * Bun compiled binaries can expose an empty process.env inside Linux sandboxes
+ * even though /proc/self/environ contains the environment.
+ *
+ * This intentionally duplicates restoreSandboxEnv() in
+ * packages/coding-agent/src/bun/restore-sandbox-env.ts. The ai package can be
+ * used directly, without going through that entrypoint, so provider env lookup
+ * must not depend on process.env having been patched.
+ */
+function getBunSandboxEnvValue(name) {
+    if (typeof process === "undefined" || !process.versions?.bun || Object.keys(process.env).length > 0) {
+        return undefined;
+    }
+    if (procEnvCache === null) {
+        procEnvCache = new Map();
+        try {
+            const { readFileSync } = require("node:fs");
+            const data = readFileSync("/proc/self/environ", "utf-8");
+            for (const entry of data.split("\0")) {
+                const idx = entry.indexOf("=");
+                if (idx > 0) {
+                    procEnvCache.set(entry.slice(0, idx), entry.slice(idx + 1));
+                }
+            }
+        }
+        catch {
+            // /proc/self/environ may not exist or may not be readable.
+        }
+    }
+    return procEnvCache.get(name);
+}
+/**
+ * Resolve a provider env value from scoped overrides, normal process.env, then
+ * the duplicated Bun sandbox fallback for direct pi-ai consumers.
+ */
+export function getProviderEnvValue(name, env) {
+    return (env?.[name] ||
+        (typeof process !== "undefined" ? process.env[name] : undefined) ||
+        getBunSandboxEnvValue(name) ||
+        undefined);
+}
+//# sourceMappingURL=provider-env.js.map

package/node_modules/@earendil-works/pi-ai/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@earendil-works/pi-ai",
-	"version": "0.79.3",
+	"version": "0.79.6",
 	"description": "Unified LLM API with automatic model discovery and provider configuration",
 	"type": "module",
 	"main": "./dist/index.js",

package/node_modules/@earendil-works/pi-coding-agent/dist/bun/restore-sandbox-env.js

@@ -4,6 +4,10 @@
  * Bun compiled binaries have an empty `process.env` when running inside
  * sandbox environments (e.g. nono on Linux/macOS). On Linux we can recover
  * the environment from `/proc/self/environ`.
+ *
+ * Keep this in sync with getBunSandboxEnvValue() in
+ * packages/ai/src/utils/provider-env.ts. The ai package duplicates the lookup
+ * for direct consumers that do not go through this coding-agent entrypoint.
  */
 import { readFileSync } from "node:fs";
 /**

package/node_modules/@earendil-works/pi-coding-agent/dist/cli/args.js

@@ -217,7 +217,7 @@ ${chalk.bold("Commands:")}
   ${APP_NAME} install <source> [-l]     Install extension source and add to settings
   ${APP_NAME} remove <source> [-l]      Remove extension source from settings
   ${APP_NAME} uninstall <source> [-l]   Alias for remove
-  ${APP_NAME} update [source|self|sling]   Update sling and installed extensions
+  ${APP_NAME} update [source|self|pi]   Update pi and installed extensions
   ${APP_NAME} list                      List installed extensions from settings
   ${APP_NAME} config                    Open TUI to enable/disable package resources
   ${APP_NAME} <command> --help          Show help for install/remove/uninstall/update/list

package/node_modules/@earendil-works/pi-coding-agent/dist/core/agent-session.js

@@ -150,7 +150,7 @@ export class AgentSession {
             throw new Error(result.error);
         }
         if (result.apiKey) {
-            return { apiKey: result.apiKey, headers: result.headers };
+            return { apiKey: result.apiKey, headers: result.headers, env: result.env };
         }
         const isOAuth = this._modelRegistry.isUsingOAuth(model);
         if (isOAuth) {
@@ -165,7 +165,7 @@ export class AgentSession {
             return this._getRequiredRequestAuth(model);
         }
         const result = await this._modelRegistry.getApiKeyAndHeaders(model);
-        return result.ok ? { apiKey: result.apiKey, headers: result.headers } : {};
+        return result.ok ? { apiKey: result.apiKey, headers: result.headers, env: result.env } : {};
     }
     /**
      * Install tool hooks once on the Agent instance.
@@ -1273,7 +1273,7 @@ export class AgentSession {
             if (!this.model) {
                 throw new Error(formatNoModelSelectedMessage());
             }
-            const { apiKey, headers } = await this._getCompactionRequestAuth(this.model);
+            const { apiKey, headers, env } = await this._getCompactionRequestAuth(this.model);
             const pathEntries = this.sessionManager.getBranch();
             const settings = this.settingsManager.getCompactionSettings();
             const preparation = prepareCompaction(pathEntries, settings);
@@ -1316,7 +1316,7 @@ export class AgentSession {
             }
             else {
                 // Generate compaction result
-                const result = await compact(preparation, this.model, apiKey, headers, customInstructions, this._compactionAbortController.signal, this.thinkingLevel, this.agent.streamFn);
+                const result = await compact(preparation, this.model, apiKey, headers, customInstructions, this._compactionAbortController.signal, this.thinkingLevel, this.agent.streamFn, env);
                 summary = result.summary;
                 firstKeptEntryId = result.firstKeptEntryId;
                 tokensBefore = result.tokensBefore;
@@ -1486,6 +1486,7 @@ export class AgentSession {
             }
             let apiKey;
             let headers;
+            let env;
             if (this.agent.streamFn === streamSimple) {
                 const authResult = await this._modelRegistry.getApiKeyAndHeaders(this.model);
                 if (!authResult.ok || !authResult.apiKey) {
@@ -1500,9 +1501,10 @@ export class AgentSession {
                 }
                 apiKey = authResult.apiKey;
                 headers = authResult.headers;
+                env = authResult.env;
             }
             else {
-                ({ apiKey, headers } = await this._getCompactionRequestAuth(this.model));
+                ({ apiKey, headers, env } = await this._getCompactionRequestAuth(this.model));
             }
             const pathEntries = this.sessionManager.getBranch();
             const preparation = prepareCompaction(pathEntries, settings);
@@ -1554,7 +1556,7 @@ export class AgentSession {
             }
             else {
                 // Generate compaction result
-                const compactResult = await compact(preparation, this.model, apiKey, headers, undefined, this._autoCompactionAbortController.signal, this.thinkingLevel, this.agent.streamFn);
+                const compactResult = await compact(preparation, this.model, apiKey, headers, undefined, this._autoCompactionAbortController.signal, this.thinkingLevel, this.agent.streamFn, env);
                 summary = compactResult.summary;
                 firstKeptEntryId = compactResult.firstKeptEntryId;
                 tokensBefore = compactResult.tokensBefore;
@@ -2221,12 +2223,13 @@ export class AgentSession {
             let summaryDetails;
             if (options.summarize && entriesToSummarize.length > 0 && !extensionSummary) {
                 const model = this.model;
-                const { apiKey, headers } = await this._getRequiredRequestAuth(model);
+                const { apiKey, headers, env } = await this._getRequiredRequestAuth(model);
                 const branchSummarySettings = this.settingsManager.getBranchSummarySettings();
                 const result = await generateBranchSummary(entriesToSummarize, {
                     model,
                     apiKey,
                     headers,
+                    env,
                     signal: this._branchSummaryAbortController.signal,
                     customInstructions,
                     replaceInstructions,

package/node_modules/@earendil-works/pi-coding-agent/dist/core/auth-storage.js

@@ -241,6 +241,13 @@ export class AuthStorage {
     get(provider) {
         return this.data[provider] ?? undefined;
     }
+    /**
+     * Get provider-scoped environment values for an API key credential.
+     */
+    getProviderEnv(provider) {
+        const cred = this.data[provider];
+        return cred?.type === "api_key" && cred.env ? { ...cred.env } : undefined;
+    }
     /**
      * Set credential for a provider.
      */
@@ -386,7 +393,7 @@ export class AuthStorage {
         }
         const cred = this.data[providerId];
         if (cred?.type === "api_key") {
-            return resolveConfigValue(cred.key);
+            return resolveConfigValue(cred.key, cred.env);
         }
         if (cred?.type === "oauth") {
             const provider = getOAuthProvider(providerId);

package/node_modules/@earendil-works/pi-coding-agent/dist/core/compaction/branch-summarization.js

@@ -185,7 +185,7 @@ Keep each section concise. Preserve exact file paths, function names, and error
  * @param options - Generation options
  */
 export async function generateBranchSummary(entries, options) {
-    const { model, apiKey, headers, signal, customInstructions, replaceInstructions, reserveTokens = 16384, streamFn, } = options;
+    const { model, apiKey, headers, env, signal, customInstructions, replaceInstructions, reserveTokens = 16384, streamFn, } = options;
     // Token budget = context window minus reserved space for prompt + response
     const contextWindow = model.contextWindow || 128000;
     const tokenBudget = contextWindow - reserveTokens;
@@ -220,7 +220,7 @@ export async function generateBranchSummary(entries, options) {
     // request behavior (timeouts, retries, attribution headers) stays consistent
     // without running through agent state/events.
     const context = { systemPrompt: SUMMARIZATION_SYSTEM_PROMPT, messages: summarizationMessages };
-    const requestOptions = { apiKey, headers, signal, maxTokens: 2048 };
+    const requestOptions = { apiKey, headers, env, signal, maxTokens: 2048 };
     const response = streamFn
         ? await (await streamFn(model, context, requestOptions)).result()
         : await completeSimple(model, context, requestOptions);

package/node_modules/@earendil-works/pi-coding-agent/dist/core/compaction/compaction.js

@@ -419,8 +419,8 @@ Use this EXACT format:
 - [Preserve important context, add new if needed]
 
 Keep each section concise. Preserve exact file paths, function names, and error messages.`;
-function createSummarizationOptions(model, maxTokens, apiKey, headers, signal, thinkingLevel) {
-    const options = { maxTokens, signal, apiKey, headers };
+function createSummarizationOptions(model, maxTokens, apiKey, headers, env, signal, thinkingLevel) {
+    const options = { maxTokens, signal, apiKey, headers, env };
     if (model.reasoning && thinkingLevel && thinkingLevel !== "off") {
         options.reasoning = thinkingLevel;
     }
@@ -437,7 +437,7 @@ async function completeSummarization(model, context, options, streamFn) {
  * Generate a summary of the conversation using the LLM.
  * If previousSummary is provided, uses the update prompt to merge.
  */
-export async function generateSummary(currentMessages, model, reserveTokens, apiKey, headers, signal, customInstructions, previousSummary, thinkingLevel, streamFn) {
+export async function generateSummary(currentMessages, model, reserveTokens, apiKey, headers, signal, customInstructions, previousSummary, thinkingLevel, streamFn, env) {
     const maxTokens = Math.min(Math.floor(0.8 * reserveTokens), model.maxTokens > 0 ? model.maxTokens : Number.POSITIVE_INFINITY);
     // Use update prompt if we have a previous summary, otherwise initial prompt
     let basePrompt = previousSummary ? UPDATE_SUMMARIZATION_PROMPT : SUMMARIZATION_PROMPT;
@@ -461,7 +461,7 @@ export async function generateSummary(currentMessages, model, reserveTokens, api
             timestamp: Date.now(),
         },
     ];
-    const completionOptions = createSummarizationOptions(model, maxTokens, apiKey, headers, signal, thinkingLevel);
+    const completionOptions = createSummarizationOptions(model, maxTokens, apiKey, headers, env, signal, thinkingLevel);
     const response = await completeSummarization(model, { systemPrompt: SUMMARIZATION_SYSTEM_PROMPT, messages: summarizationMessages }, completionOptions, streamFn);
     if (response.stopReason === "error") {
         throw new Error(`Summarization failed: ${response.errorMessage || "Unknown error"}`);
@@ -560,7 +560,7 @@ Be concise. Focus on what's needed to understand the kept suffix.`;
  * @param preparation - Pre-calculated preparation from prepareCompaction()
  * @param customInstructions - Optional custom focus for the summary
  */
-export async function compact(preparation, model, apiKey, headers, customInstructions, signal, thinkingLevel, streamFn) {
+export async function compact(preparation, model, apiKey, headers, customInstructions, signal, thinkingLevel, streamFn, env) {
     const { firstKeptEntryId, messagesToSummarize, turnPrefixMessages, isSplitTurn, tokensBefore, previousSummary, fileOps, settings, } = preparation;
     // Generate summaries (can be parallel if both needed) and merge into one
     let summary;
@@ -568,16 +568,16 @@ export async function compact(preparation, model, apiKey, headers, customInstruc
         // Generate both summaries in parallel
         const [historyResult, turnPrefixResult] = await Promise.all([
             messagesToSummarize.length > 0
-                ? generateSummary(messagesToSummarize, model, settings.reserveTokens, apiKey, headers, signal, customInstructions, previousSummary, thinkingLevel, streamFn)
+                ? generateSummary(messagesToSummarize, model, settings.reserveTokens, apiKey, headers, signal, customInstructions, previousSummary, thinkingLevel, streamFn, env)
                 : Promise.resolve("No prior history."),
-            generateTurnPrefixSummary(turnPrefixMessages, model, settings.reserveTokens, apiKey, headers, signal, thinkingLevel, streamFn),
+            generateTurnPrefixSummary(turnPrefixMessages, model, settings.reserveTokens, apiKey, headers, env, signal, thinkingLevel, streamFn),
         ]);
         // Merge into single summary
         summary = `${historyResult}\n\n---\n\n**Turn Context (split turn):**\n\n${turnPrefixResult}`;
     }
     else {
         // Just generate history summary
-        summary = await generateSummary(messagesToSummarize, model, settings.reserveTokens, apiKey, headers, signal, customInstructions, previousSummary, thinkingLevel, streamFn);
+        summary = await generateSummary(messagesToSummarize, model, settings.reserveTokens, apiKey, headers, signal, customInstructions, previousSummary, thinkingLevel, streamFn, env);
     }
     // Compute file lists and append to summary
     const { readFiles, modifiedFiles } = computeFileLists(fileOps);
@@ -595,7 +595,7 @@ export async function compact(preparation, model, apiKey, headers, customInstruc
 /**
  * Generate a summary for a turn prefix (when splitting a turn).
  */
-async function generateTurnPrefixSummary(messages, model, reserveTokens, apiKey, headers, signal, thinkingLevel, streamFn) {
+async function generateTurnPrefixSummary(messages, model, reserveTokens, apiKey, headers, env, signal, thinkingLevel, streamFn) {
     const maxTokens = Math.min(Math.floor(0.5 * reserveTokens), model.maxTokens > 0 ? model.maxTokens : Number.POSITIVE_INFINITY); // Smaller budget for turn prefix
     const llmMessages = convertToLlm(messages);
     const conversationText = serializeConversation(llmMessages);
@@ -607,7 +607,7 @@ async function generateTurnPrefixSummary(messages, model, reserveTokens, apiKey,
             timestamp: Date.now(),
         },
     ];
-    const response = await completeSummarization(model, { systemPrompt: SUMMARIZATION_SYSTEM_PROMPT, messages: summarizationMessages }, createSummarizationOptions(model, maxTokens, apiKey, headers, signal, thinkingLevel), streamFn);
+    const response = await completeSummarization(model, { systemPrompt: SUMMARIZATION_SYSTEM_PROMPT, messages: summarizationMessages }, createSummarizationOptions(model, maxTokens, apiKey, headers, env, signal, thinkingLevel), streamFn);
     if (response.stopReason === "error") {
         throw new Error(`Turn prefix summarization failed: ${response.errorMessage || "Unknown error"}`);
     }