@psnext/slingcli 2.5.20260725-1 → 2.5.20260727-1

package/node_modules/@earendil-works/pi-agent-core/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@earendil-works/pi-agent-core",
-	"version": "0.82.0",
+	"version": "0.82.1",
 	"description": "General-purpose agent with transport abstraction, state management, and attachment support",
 	"type": "module",
 	"main": "./dist/index.js",
@@ -29,7 +29,7 @@
 		"prepublishOnly": "npm run build"
 	},
 	"dependencies": {
-		"@earendil-works/pi-ai": "^0.82.0",
+		"@earendil-works/pi-ai": "^0.82.1",
 		"diff": "8.0.4",
 		"ignore": "7.0.5",
 		"typebox": "1.1.38",

package/node_modules/@earendil-works/pi-ai/dist/api/bedrock-converse-stream.js

@@ -432,13 +432,18 @@ function supportsAdaptiveThinking(modelId, modelName) {
     return candidates.some((s) => s.includes("opus-4-6") ||
         s.includes("opus-4-7") ||
         s.includes("opus-4-8") ||
+        s.includes("opus-5") ||
         s.includes("sonnet-4-6") ||
         s.includes("sonnet-5") ||
         s.includes("fable-5"));
 }
 function supportsNativeXhighEffort(model) {
     const candidates = getModelMatchCandidates(model.id, model.name);
-    return candidates.some((s) => s.includes("opus-4-7") || s.includes("opus-4-8") || s.includes("sonnet-5") || s.includes("fable-5"));
+    return candidates.some((s) => s.includes("opus-4-7") ||
+        s.includes("opus-4-8") ||
+        s.includes("opus-5") ||
+        s.includes("sonnet-5") ||
+        s.includes("fable-5"));
 }
 function mapThinkingLevelToEffort(model, level) {
     if (level === "xhigh" && supportsNativeXhighEffort(model))
@@ -507,8 +512,8 @@ function supportsPromptCaching(model, env) {
             return true;
         return false;
     }
-    // Claude 5 models (fable-5, sonnet-5)
-    if (candidates.some((s) => s.includes("fable-5") || s.includes("sonnet-5")))
+    // Claude 5 models (fable-5, opus-5, sonnet-5)
+    if (candidates.some((s) => s.includes("fable-5") || s.includes("opus-5") || s.includes("sonnet-5")))
         return true;
     // Claude 4.x models (opus-4, sonnet-4, haiku-4)
     if (candidates.some((s) => s.includes("-4-")))

package/node_modules/@earendil-works/pi-ai/dist/auth/oauth/radius.js

@@ -1,8 +1,9 @@
 /**
  * Radius gateway OAuth flow.
  *
- * Radius is a pi-messages gateway. OAuth endpoints are discovered from the
- * gateway (`/v1/oauth`); model catalog loading is owned by the Radius provider.
+ * Radius is a pi-messages gateway. OAuth client APIs live on the configured
+ * gateway; only the interactive browser authorization endpoint is discovered.
+ * Model catalog loading is owned by the Radius provider.
  *
  * NOTE: This module uses node:http for the OAuth callback server.
  * It is only intended for CLI use, not browser environments.
@@ -25,14 +26,21 @@ const REDIRECT_URI = `http://${CALLBACK_HOST}:${CALLBACK_PORT}${CALLBACK_PATH}`;
 const TOKEN_EXPIRY_SKEW_MS = 60_000;
 const LOGIN_METHOD_BROWSER = "browser";
 const LOGIN_METHOD_DEVICE_CODE = "device-code";
-async function loadRadiusOAuthConfig(gateway) {
+const OAUTH_CLIENT_ID = "pi-gateway";
+const OAUTH_SCOPE = "gateway offline_access";
+const OAUTH_DEVICE_CODE_GRANT_TYPE = "urn:ietf:params:oauth:grant-type:device_code";
+async function loadRadiusOAuthDiscovery(gateway) {
     const response = await fetch(new URL("/v1/oauth", gateway), {
         headers: { accept: "application/json" },
     });
     if (!response.ok) {
         throw new Error(`Could not load Radius OAuth config from ${gateway}: ${response.status} ${await response.text()}`);
     }
-    return (await response.json());
+    const discovery = (await response.json());
+    if (typeof discovery.authorizationEndpoint !== "string") {
+        throw new Error(`Invalid Radius OAuth config from ${gateway}`);
+    }
+    return { authorizationEndpoint: discovery.authorizationEndpoint };
 }
 class OAuthResponseError extends Error {
     status;
@@ -64,10 +72,10 @@ async function readOAuthResponseError(response, message) {
     }
     return new OAuthResponseError(response.status, oauthError, description, message);
 }
-async function requestOAuthToken(oauth, body, signal) {
+async function requestOAuthToken(gateway, body, signal) {
     let response;
     try {
-        response = await fetch(oauth.tokenEndpoint, {
+        response = await fetch(new URL("/v1/oauth/token", gateway), {
             method: "POST",
             headers: { accept: "application/json", "content-type": "application/x-www-form-urlencoded" },
             body,
@@ -157,15 +165,15 @@ function startOAuthCallbackServer(expectedState, signal) {
         });
     });
 }
-async function loginWithBrowser(oauth, interaction) {
+async function loginWithBrowser(gateway, authorizationEndpoint, interaction) {
     const { verifier, challenge } = await generatePKCE();
     const state = crypto.randomUUID();
-    const authorizeUrl = new URL(oauth.authorizationEndpoint);
+    const authorizeUrl = new URL(authorizationEndpoint);
     authorizeUrl.search = new URLSearchParams({
         response_type: "code",
-        client_id: oauth.clientId,
+        client_id: OAUTH_CLIENT_ID,
         redirect_uri: REDIRECT_URI,
-        scope: oauth.scope,
+        scope: OAUTH_SCOPE,
         code_challenge: challenge,
         code_challenge_method: "S256",
         handoff: "url",
@@ -186,9 +194,9 @@ async function loginWithBrowser(oauth, interaction) {
             }
             throw new Error("OAuth callback did not complete.");
         }
-        return await requestOAuthToken(oauth, new URLSearchParams({
+        return await requestOAuthToken(gateway, new URLSearchParams({
             grant_type: "authorization_code",
-            client_id: oauth.clientId,
+            client_id: OAUTH_CLIENT_ID,
             redirect_uri: REDIRECT_URI,
             code,
             code_verifier: verifier,
@@ -198,13 +206,13 @@ async function loginWithBrowser(oauth, interaction) {
         callbackServer.close();
     }
 }
-async function requestDeviceAuthorization(oauth, signal) {
+async function requestDeviceAuthorization(gateway, signal) {
     let response;
     try {
-        response = await fetch(oauth.deviceAuthorizationEndpoint, {
+        response = await fetch(new URL("/v1/oauth/device", gateway), {
             method: "POST",
             headers: { accept: "application/json", "content-type": "application/x-www-form-urlencoded" },
-            body: new URLSearchParams({ client_id: oauth.clientId, scope: oauth.scope }),
+            body: new URLSearchParams({ client_id: OAUTH_CLIENT_ID, scope: OAUTH_SCOPE }),
             signal,
         });
     }
@@ -218,24 +226,23 @@ async function requestDeviceAuthorization(oauth, signal) {
         throw await readOAuthResponseError(response, "Radius OAuth device authorization failed");
     }
     const data = (await response.json());
-    if (!data.device_code || !data.user_code || !data.expires_in) {
+    if (!data.device_code || !data.user_code || !data.verification_uri || !data.expires_in) {
         throw new Error("Radius OAuth device authorization response is missing required fields");
     }
     return {
         device_code: data.device_code,
         user_code: data.user_code,
         verification_uri: data.verification_uri,
-        verification_uri_complete: data.verification_uri_complete,
         expires_in: data.expires_in,
         interval: data.interval,
     };
 }
-async function loginWithDeviceCode(oauth, interaction) {
-    const device = await requestDeviceAuthorization(oauth, interaction.signal);
+async function loginWithDeviceCode(gateway, interaction) {
+    const device = await requestDeviceAuthorization(gateway, interaction.signal);
     interaction.notify({
         type: "device_code",
         userCode: device.user_code,
-        verificationUri: device.verification_uri || oauth.verificationEndpoint,
+        verificationUri: device.verification_uri,
         intervalSeconds: device.interval,
         expiresInSeconds: device.expires_in,
     });
@@ -245,9 +252,9 @@ async function loginWithDeviceCode(oauth, interaction) {
         signal: interaction.signal,
         poll: async () => {
             try {
-                const credentials = await requestOAuthToken(oauth, new URLSearchParams({
-                    grant_type: oauth.deviceCodeGrantType,
-                    client_id: oauth.clientId,
+                const credentials = await requestOAuthToken(gateway, new URLSearchParams({
+                    grant_type: OAUTH_DEVICE_CODE_GRANT_TYPE,
+                    client_id: OAUTH_CLIENT_ID,
                     device_code: device.device_code,
                 }), interaction.signal);
                 return { status: "complete", value: credentials };
@@ -277,7 +284,6 @@ export function createRadiusOAuth(options) {
     return {
         name: options.name,
         async login(interaction) {
-            const oauth = await loadRadiusOAuthConfig(gateway);
             const loginMethod = await interaction.prompt({
                 type: "select",
                 message: `Sign in to ${options.name}:`,
@@ -289,23 +295,19 @@ export function createRadiusOAuth(options) {
                     },
                 ],
             });
-            let credential;
             if (loginMethod === LOGIN_METHOD_DEVICE_CODE) {
-                credential = await loginWithDeviceCode(oauth, interaction);
-            }
-            else if (loginMethod === LOGIN_METHOD_BROWSER) {
-                credential = await loginWithBrowser(oauth, interaction);
+                return loginWithDeviceCode(gateway, interaction);
             }
-            else {
-                throw new Error(`Unknown ${options.name} sign-in method: ${loginMethod}`);
+            if (loginMethod === LOGIN_METHOD_BROWSER) {
+                const discovery = await loadRadiusOAuthDiscovery(gateway);
+                return loginWithBrowser(gateway, discovery.authorizationEndpoint, interaction);
             }
-            return credential;
+            throw new Error(`Unknown ${options.name} sign-in method: ${loginMethod}`);
         },
         async refresh(credential, signal) {
-            const oauth = await loadRadiusOAuthConfig(gateway);
-            const refreshed = await requestOAuthToken(oauth, new URLSearchParams({
+            const refreshed = await requestOAuthToken(gateway, new URLSearchParams({
                 grant_type: "refresh_token",
-                client_id: oauth.clientId,
+                client_id: OAUTH_CLIENT_ID,
                 refresh_token: credential.refresh,
             }), signal);
             return refreshed;

package/node_modules/@earendil-works/pi-ai/dist/auth/resolve.js

@@ -1,11 +1,21 @@
+import { formatThrownValue } from "../utils/diagnostics.js";
 export class ModelsError extends Error {
     code;
     constructor(code, message, options) {
-        super(message, options);
+        super(withCauseDetail(message, options?.cause), options);
         this.name = "ModelsError";
         this.code = code;
     }
 }
+/** Callers surface `error.message` only, so keep the underlying reason in it. */
+function withCauseDetail(message, cause) {
+    if (cause === undefined || cause === null)
+        return message;
+    const detail = formatThrownValue(cause).trim();
+    if (!detail || message.includes(detail))
+        return message;
+    return `${message}: ${detail}`;
+}
 /**
  * Auth resolution shared by the `Models` and `ImagesModels` collections.
  * A stored credential owns the provider: ambient/env is consulted only when

package/node_modules/@earendil-works/pi-ai/dist/providers/data/.manifest.json

@@ -1 +1 @@
-{"schemaVersion":3,"generatedAt":"2026-07-25T04:49:49.529Z","structureHash":"7da5294256e6c090a31898f6395e37190af6a91e1967ece9eb5bac23f88509d4","files":{"amazon-bedrock.json":"dcd1ea8bd2cd948f8f5b2e6dd1ea97dc9678848a32eac6c157a540ff164d05ef","ant-ling.json":"4979fe79d99ed97382d7ce40170c6132e932e77906de1eb54464c042e7d63633","anthropic.json":"830afd9b99a5f7306903858e4b6fb49f6e28573ab73338c7a876eff69dd0b269","azure-openai-responses.json":"2d13ecc23826b5be73f3628fca5f70cc2c5c15ff609b41e4acba8167cd40934b","cerebras.json":"3fd3e19b83ab4be07d27817e25e5be0ffe4158b1394f0311d6a22d9f03847728","cloudflare-ai-gateway.json":"9974b65a0c6dda063ea3a30f4a819cab7bf70f9a25e5e3ee2feaf85cfc167b9b","cloudflare-workers-ai.json":"03b19d69433c843512e953390d51d4578e9b91f19098a9b14ff820c001623598","deepseek.json":"0dcc807a4e5827b488c6ceac87884ff6e735e01cf4f2ddfec9dd812e6fde041b","fireworks.json":"0ea306d50e72343439f71995dcda0776473e0e43a8500c4ff42769f085fee09d","github-copilot.json":"62a6256926ef2cb44e717ad30031dfbe2c3777ed38fd0db24e48b01666254a6c","google-vertex.json":"99d0b89ac9d8dc460ed922236abffbe88c9381af4d35046d2ad3a8f08fa2560c","google.json":"bcf8a8d59ccbb75bc6fb4a261a37ac4b7c806f40ee7313b4411178964be5fa37","groq.json":"868c90a897f75f866e09a585f6aee5cb991e40a9c3281497b5842a23de7d9add","huggingface.json":"e001db7b5925939c5850f31cd08b323cd40eb586222e2f74d7890eb52a30f161","kimi-coding.json":"ba42a26a69e5cb2122c0b384ba572efae93f42239ad86f26c2b7320a14aa75a1","minimax-cn.json":"8ccd71ff838f4b78bb88809babb0dc32a4fcfaec2bc4f4083841000428df4f77","minimax.json":"253edd4c910a41c8bb252400ba099f3a4de0a8900ce154319288ab091b372987","mistral.json":"44531201e872713923b7544a1f75a048d31fa25292e3e1f9f896f608a52e412d","moonshotai-cn.json":"1e6146ff3477883636448c0f44222f0a52b3c4562ef8f4eecf7e941cdd59d12e","moonshotai.json":"d8d5209873058ddccd37c1f026833e2ea3f9476c3dc9628b4a940d407acc0b2e","nvidia.json":"f476e23d9c3743c8ed3bb24a7d43b33cf90d1539ebe61c070ea2323555853e25","openai-codex.json":"c3313710bc6910e6bbcb06d5867247e97ec3fa6c2af9bc780f8a3eefb03e32e1","openai.json":"8e3852ef3567b23d2ab03b0f52f1caeb77e6e776f248e6111f851ccbe0fca8b6","opencode-go.json":"57a677764bc885c83fbbba46ad5d418baabe012a062424a0f6d8d488352102ce","opencode.json":"080500ebc60933e415c05f6e1a4e5fcc1751571ec1a46fea3d0289445257866d","openrouter.json":"3be497ceaa7ec70a2689a73f505b2abce55385c09e09a648020b2cb93a56cfa0","qwen-token-plan-cn.json":"a1495ccc21835c51d438207652f948aa9ecf4a3d784e81deaf313e484bdab1ec","qwen-token-plan.json":"597fae649f549a8ffb0b6a28426ea6761b7ece41a78b6fdef49ca970ac029970","together.json":"1d46a57e99da9be6f7e78d8f98f5610adbb266df3de7b0a13652d6fa175086e7","vercel-ai-gateway.json":"d4802bd7cf1905103c03b5819c1cbc6b55dec57d76f8330bd76baff1189a0b58","xai.json":"4cbdbfbbf915246369b9bacbc6f1feeb56accdac9f3444456343f750547f2f38","xiaomi-token-plan-ams.json":"7ce8ed244672c45737d286ff3ca9c3a2686a5d4b2f0c5f71ab9348c14b14daf3","xiaomi-token-plan-cn.json":"684892b5fe6fa371d6040d2011c0fa33facd650d2eaf19f5dbee8efb33016200","xiaomi-token-plan-sgp.json":"b19e79b82ac4fdcb080e6d220106797504c885ed70b27fc2b3c1aa4810f32963","xiaomi.json":"810368d3828c8bb9498012a0d48639030c0c216b8c13e79da02daa515aa23448","zai-coding-cn.json":"28fcb04ce65b4c6612a6b866902e0c832e18b685e5374578c4e2872569131d39","zai.json":"474670a0cf1109f4c296ea93d2c5c6eb8f53541dc9c0bddbb0e6cb054b971ebe"}}
+{"schemaVersion":3,"generatedAt":"2026-07-27T03:47:01.896Z","structureHash":"af3ded7a9ebefec1131521259cd58cea6f00df4283da89abfb4de141e3519b7f","files":{"amazon-bedrock.json":"1aabd3227d32b332727eec7638cebdbd1323d2e7eedbf9b174226c5d38196df9","ant-ling.json":"4979fe79d99ed97382d7ce40170c6132e932e77906de1eb54464c042e7d63633","anthropic.json":"fea1226a62396c8d4a3d9c3b7f65d4dc527ac025d05719880418d3a2b0665a69","azure-openai-responses.json":"2d13ecc23826b5be73f3628fca5f70cc2c5c15ff609b41e4acba8167cd40934b","cerebras.json":"3fd3e19b83ab4be07d27817e25e5be0ffe4158b1394f0311d6a22d9f03847728","cloudflare-ai-gateway.json":"692b375a3bcb11743a9c1899442caecc3861163d9424356d3d073d9fa5c04091","cloudflare-workers-ai.json":"03b19d69433c843512e953390d51d4578e9b91f19098a9b14ff820c001623598","deepseek.json":"0dcc807a4e5827b488c6ceac87884ff6e735e01cf4f2ddfec9dd812e6fde041b","fireworks.json":"0ea306d50e72343439f71995dcda0776473e0e43a8500c4ff42769f085fee09d","github-copilot.json":"1215a0792908480ff709a26954b1c4b76bcfec5d31f31d0843d505770c764c1e","google-vertex.json":"99d0b89ac9d8dc460ed922236abffbe88c9381af4d35046d2ad3a8f08fa2560c","google.json":"bcf8a8d59ccbb75bc6fb4a261a37ac4b7c806f40ee7313b4411178964be5fa37","groq.json":"868c90a897f75f866e09a585f6aee5cb991e40a9c3281497b5842a23de7d9add","huggingface.json":"e001db7b5925939c5850f31cd08b323cd40eb586222e2f74d7890eb52a30f161","kimi-coding.json":"ba42a26a69e5cb2122c0b384ba572efae93f42239ad86f26c2b7320a14aa75a1","minimax-cn.json":"8ccd71ff838f4b78bb88809babb0dc32a4fcfaec2bc4f4083841000428df4f77","minimax.json":"253edd4c910a41c8bb252400ba099f3a4de0a8900ce154319288ab091b372987","mistral.json":"44531201e872713923b7544a1f75a048d31fa25292e3e1f9f896f608a52e412d","moonshotai-cn.json":"1e6146ff3477883636448c0f44222f0a52b3c4562ef8f4eecf7e941cdd59d12e","moonshotai.json":"d8d5209873058ddccd37c1f026833e2ea3f9476c3dc9628b4a940d407acc0b2e","nvidia.json":"79482f617066917a4525f78c19738c3b392e1e2e35c9d8ba3183b874bb504463","openai-codex.json":"c3313710bc6910e6bbcb06d5867247e97ec3fa6c2af9bc780f8a3eefb03e32e1","openai.json":"8e3852ef3567b23d2ab03b0f52f1caeb77e6e776f248e6111f851ccbe0fca8b6","opencode-go.json":"57a677764bc885c83fbbba46ad5d418baabe012a062424a0f6d8d488352102ce","opencode.json":"905b27bf3d7e48f35ca862991411b97a93782ad92b24129a2c3ee377fd1e3675","openrouter.json":"3dcc960f1fe6a84e6e1773425884195a70c43e5364bc34ae1f411d52072631e1","qwen-token-plan-cn.json":"a1495ccc21835c51d438207652f948aa9ecf4a3d784e81deaf313e484bdab1ec","qwen-token-plan.json":"597fae649f549a8ffb0b6a28426ea6761b7ece41a78b6fdef49ca970ac029970","together.json":"1d46a57e99da9be6f7e78d8f98f5610adbb266df3de7b0a13652d6fa175086e7","vercel-ai-gateway.json":"61242947db49d08e4a70ccf4cd16eea9d58758effc35c2f6abdd953f8da64013","xai.json":"4cbdbfbbf915246369b9bacbc6f1feeb56accdac9f3444456343f750547f2f38","xiaomi-token-plan-ams.json":"7ce8ed244672c45737d286ff3ca9c3a2686a5d4b2f0c5f71ab9348c14b14daf3","xiaomi-token-plan-cn.json":"684892b5fe6fa371d6040d2011c0fa33facd650d2eaf19f5dbee8efb33016200","xiaomi-token-plan-sgp.json":"b19e79b82ac4fdcb080e6d220106797504c885ed70b27fc2b3c1aa4810f32963","xiaomi.json":"810368d3828c8bb9498012a0d48639030c0c216b8c13e79da02daa515aa23448","zai-coding-cn.json":"28fcb04ce65b4c6612a6b866902e0c832e18b685e5374578c4e2872569131d39","zai.json":"474670a0cf1109f4c296ea93d2c5c6eb8f53541dc9c0bddbb0e6cb054b971ebe"}}