@symerian/symi 2.6.36 → 2.6.38

package/dist/{onboarding.finalize-CLQL7PKW.js → onboarding.finalize-DQm4Tey0.js}

@@ -1,7 +1,7 @@
 import "./paths-Cqn-zk3M.js";
 import { h as pathExists, y as resolveUserPath } from "./utils-B-0b9bGM.js";
 import "./thinking-EAliFiVK.js";
-import "./reply-C68F3IMq.js";
+import "./reply-YphHjxHp.js";
 import "./registry-Cja8eT7G.js";
 import { p as restoreTerminalState } from "./subsystem-D9vIQve0.js";
 import "./exec-CWkblSrI.js";
@@ -15,19 +15,19 @@ import "./message-channel-aT-I_DTX.js";
 import "./send-CZr1hVHY.js";
 import "./config-CHwyw6l5.js";
 import "./manifest-registry-C4BxOMWX.js";
-import "./runner-CUglpiFP.js";
-import "./image-D9uvDTrc.js";
+import "./runner-DmM2HhB-.js";
+import "./image-BwXkayiM.js";
 import "./models-config-qyOXrOli.js";
 import "./pi-model-discovery-4uUnLc3n.js";
-import "./pi-embedded-helpers-CNPyv_ax.js";
-import "./sandbox-C-T6hOMv.js";
+import "./pi-embedded-helpers-BuVSLhG_.js";
+import "./sandbox-DAOxwUQm.js";
 import "./chrome-DtPkPq9T.js";
 import "./tailscale-D5dKabOc.js";
 import "./auth-B741uFtk.js";
-import "./server-context-CEpFjqSk.js";
+import "./server-context-CHYWo_TC.js";
 import "./frontmatter-DWQhtOo7.js";
 import "./skills-6jdJQ5ZL.js";
-import "./routes-Ba9CUQ8M.js";
+import "./routes-B1-BfEDm.js";
 import "./redact-f-Q-hFt_.js";
 import "./errors-BF3TeRH2.js";
 import "./fs-safe-CUjO1ca2.js";
@@ -53,16 +53,16 @@ import "./fetch-guard-DOPkVbh3.js";
 import "./api-key-rotation-CzuPlV2t.js";
 import "./local-roots-aAFLQGkY.js";
 import "./sqlite-Dx3J_aSE.js";
-import "./model-catalog-DvBJ8pMD.js";
+import "./model-catalog-r6v4orfa.js";
 import "./tokens-BuceUQDl.js";
-import "./with-timeout-gmK6RciS.js";
-import "./deliver-CWR_98sK.js";
-import "./diagnostic-DjBRPfu9.js";
+import "./with-timeout-D2z7OkiK.js";
+import "./deliver-DrFtaFZt.js";
+import "./diagnostic-CH0skkp6.js";
 import "./diagnostic-session-state-CUslJyKP.js";
 import "./send-Cutb0ZDY.js";
 import "./model-tWhwnFf8.js";
 import "./reply-prefix-CE2YmmsD.js";
-import "./memory-cli-Ca5r9AUb.js";
+import "./memory-cli-CPONmMrJ.js";
 import "./manager-D4LJSRyZ.js";
 import "./retry-BoS4e4X_.js";
 import "./target-errors-7AvoVa10.js";
@@ -72,13 +72,13 @@ import "./ir-DZam9q5M.js";
 import "./render-CXDO_kgw.js";
 import "./commands-BNLCWX6e.js";
 import "./commands-registry-BT0-zzs3.js";
-import "./client-CQSyCS4M.js";
-import "./call-CJaS1iRF.js";
+import "./client-jI1oE0_k.js";
+import "./call-CFhGTNtt.js";
 import "./pairing-token-CX3NN_qj.js";
 import "./channel-activity-BOiuJS3t.js";
 import "./fetch-DTNGXEzX.js";
 import "./tables-BEzT0Da4.js";
-import "./send-DkfYiRx5.js";
+import "./send-Cgcbuw8U.js";
 import "./pairing-store-CK726Dzq.js";
 import "./proxy-DU7W9XSc.js";
 import "./links-3i1eUga4.js";
@@ -89,31 +89,32 @@ import "./resolve-route-BMoTaVAH.js";
 import "./replies-vgss3_QA.js";
 import "./skill-commands-Cxw-jNxU.js";
 import "./workspace-dirs-GpkFi6Kw.js";
-import "./session-cost-usage-UxUgrslM.js";
-import "./outbound-attachment-mQQiYZ3C.js";
-import "./delivery-queue-CxuV9EeG.js";
-import "./send-DWYkPSUs.js";
-import { b as waitForGatewayReachable, f as openUrl, g as resolveControlUiLinks, i as detectBrowserOpenSupport, m as probeGatewayReachable, o as formatControlUiSshHint } from "./onboard-helpers-ZmZYzlq3.js";
-import "./prompt-style-8JqOYj0q.js";
-import "./pairing-labels-2S6x2UoV.js";
-import "./exec-approvals-Kn31mBcW.js";
-import "./nodes-screen-VBGXKdLk.js";
-import "./pi-tools.policy-CIDBbw6x.js";
-import "./control-service-Bz7rxLWq.js";
-import "./stagger-BUClb97_.js";
-import "./channel-selection-DuWs0Aak.js";
-import "./runtime-guard-B37eizu-.js";
-import "./program-context-Dm-BSkOd.js";
-import "./note-DeHoW7xO.js";
-import { r as installCompletion } from "./completion-cli-BmYBAxqM.js";
-import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-2mwX-jqj.js";
-import { r as isSystemdUserServiceAvailable } from "./systemd-riq8uNJQ.js";
-import { t as resolveGatewayService } from "./service-Cl74hx8J.js";
-import { r as healthCommand } from "./health-pFcca1cU.js";
-import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-Z947tKLt.js";
-import { t as formatHealthCheckFailure } from "./health-format-DSwnXZPU.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-4SDl6ZEA.js";
-import { t as runTui } from "./tui-CriznorL.js";
+import "./pi-auth-json-zHckislA.js";
+import "./session-cost-usage-BXAI7CNH.js";
+import "./outbound-attachment-Bw-c5Cdp.js";
+import "./delivery-queue-CAxX6nGq.js";
+import "./send-ZI2bG_Jc.js";
+import { b as waitForGatewayReachable, f as openUrl, g as resolveControlUiLinks, i as detectBrowserOpenSupport, m as probeGatewayReachable, o as formatControlUiSshHint } from "./onboard-helpers-CAjcAisT.js";
+import "./prompt-style-CnkMpSXt.js";
+import "./pairing-labels-DyXoD1DS.js";
+import "./exec-approvals-DXM2pQYL.js";
+import "./nodes-screen-8Bq7DiSa.js";
+import "./pi-tools.policy-C6MWZ59E.js";
+import "./control-service-Dtn-qw2s.js";
+import "./stagger-CvFURHzt.js";
+import "./channel-selection-V2xDgw16.js";
+import "./runtime-guard-Dik20CVM.js";
+import "./program-context-B2BcluHm.js";
+import "./note-DQ9BvHF2.js";
+import { r as installCompletion } from "./completion-cli-DrDwlbAX.js";
+import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-COZ4usfy.js";
+import { r as isSystemdUserServiceAvailable } from "./systemd-DT6SbCim.js";
+import { t as resolveGatewayService } from "./service-osK70kTZ.js";
+import { r as healthCommand } from "./health-9z0Hpkuc.js";
+import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-B7moDVHX.js";
+import { t as formatHealthCheckFailure } from "./health-format-DRCaak6L.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-B8IZFxo9.js";
+import { t as runTui } from "./tui-DLaU7tTx.js";
 import os from "node:os";
 import path from "node:path";
 import fs from "node:fs/promises";
@@ -178,7 +179,7 @@ async function finalizeOnboardingWizard(options) {
 	const systemdAvailable = process.platform === "linux" ? await isSystemdUserServiceAvailable() : true;
 	if (process.platform === "linux" && !systemdAvailable) await prompter.note("Systemd user services are unavailable. Skipping lingering checks and service install.", "Systemd");
 	if (process.platform === "linux" && systemdAvailable) {
-		const { ensureSystemdUserLingerInteractive } = await import("./systemd-linger-aQ75ZlXY.js").then((n) => n.r);
+		const { ensureSystemdUserLingerInteractive } = await import("./systemd-linger-DCskIKcx.js").then((n) => n.r);
 		await ensureSystemdUserLingerInteractive({
 			runtime,
 			prompter: {

package/dist/{onboarding.finalize-CGGB37q-.js → onboarding.finalize-dP5Igu4h.js}

@@ -4,17 +4,18 @@ import { r as resolveCliName, t as formatCliCommand } from "./command-format-BtY
 import "./exec-CBKBIMpA.js";
 import { h as DEFAULT_BOOTSTRAP_FILENAME } from "./agent-scope-D-jRCY0d.js";
 import "./github-copilot-token-DuFIqfeC.js";
+import "./pi-auth-json-LXkL5WS_.js";
 import "./model-DiCH8rkE.js";
 import "./pi-model-discovery-Do3xMEtM.js";
 import "./frontmatter-B8duUx_6.js";
 import "./skills-hAdgFdrv.js";
 import "./manifest-registry-Czr39pxG.js";
 import "./config-DHBLS1Hl.js";
-import "./client-DMBZpU6X.js";
-import "./call-BcE47FtD.js";
+import "./client-T3qcxXru.js";
+import "./call-DIDhYlsx.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
-import "./subagent-registry-BXI3DyAX.js";
+import "./subagent-registry-aZczbtLM.js";
 import "./sessions-CJXnZVjR.js";
 import "./tokens-Csntmwwn.js";
 import "./plugins-CwSlLxM8.js";
@@ -68,8 +69,8 @@ import "./commands-CkrIpKCc.js";
 import "./commands-registry-D1K_inhv.js";
 import "./image-CO4meYzg.js";
 import "./tool-display-CXwOC-qw.js";
-import "./runner-BORIO-D3.js";
-import "./model-catalog-CqCsARJX.js";
+import "./runner-CW9KEL7W.js";
+import "./model-catalog-Bn0ffe1O.js";
 import "./session-utils-Bka9dR4m.js";
 import "./skill-commands-C8BcwE33.js";
 import "./workspace-dirs-CPNL2Acu.js";
@@ -94,24 +95,24 @@ import "./cli-utils-CCaEbxAz.js";
 import "./help-format-B0pWGnZs.js";
 import "./progress-BAHiAaDW.js";
 import "./replies-DO80zq73.js";
-import { b as waitForGatewayReachable, f as openUrl, g as resolveControlUiLinks, i as detectBrowserOpenSupport, m as probeGatewayReachable, o as formatControlUiSshHint } from "./onboard-helpers-_pit1NZW.js";
+import { b as waitForGatewayReachable, f as openUrl, g as resolveControlUiLinks, i as detectBrowserOpenSupport, m as probeGatewayReachable, o as formatControlUiSshHint } from "./onboard-helpers-DASpwgat.js";
 import "./prompt-style-DwCXob2h.js";
 import "./pairing-labels-D1HDboV2.js";
 import "./pi-tools.policy-De00gPXt.js";
 import "./note-DDecZomM.js";
-import "./register.subclis-DcBHO9E8.js";
-import "./command-registry-CrYpGtIt.js";
+import "./register.subclis-Bi4jmYW6.js";
+import "./command-registry-Dk55OGO6.js";
 import "./program-context-CqzR_m-7.js";
-import { r as installCompletion } from "./completion-cli-GqPGf3Kq.js";
+import { r as installCompletion } from "./completion-cli-1HmgP7tY.js";
 import { a as gatewayInstallErrorHint, i as buildGatewayInstallPlan, n as GATEWAY_DAEMON_RUNTIME_OPTIONS, t as DEFAULT_GATEWAY_DAEMON_RUNTIME } from "./daemon-runtime-CfRwa6qh.js";
 import "./runtime-guard-D7waq_Ho.js";
 import { r as isSystemdUserServiceAvailable } from "./systemd-DlMdyFDY.js";
 import { t as resolveGatewayService } from "./service-Cm9j9WzQ.js";
-import { r as healthCommand } from "./health-BNxdveY8.js";
+import { r as healthCommand } from "./health-NTpZ8ssG.js";
 import { t as ensureControlUiAssetsBuilt } from "./control-ui-assets-BseSWee1.js";
 import { t as formatHealthCheckFailure } from "./health-format-CzgUHmmX.js";
-import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-CL0NHlCA.js";
-import { t as runTui } from "./tui-BJB80muc.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-D6tzA47C.js";
+import { t as runTui } from "./tui-2nWOvxxE.js";
 import os from "node:os";
 import path from "node:path";
 import fs from "node:fs/promises";

package/dist/{onboarding.gateway-config-BQFO9a_h.js → onboarding.gateway-config-D6SN3HBb.js}

@@ -4,8 +4,8 @@ import "./agent-scope-D-jRCY0d.js";
 import "./github-copilot-token-DuFIqfeC.js";
 import "./manifest-registry-Czr39pxG.js";
 import "./config-DHBLS1Hl.js";
-import "./client-DMBZpU6X.js";
-import "./call-BcE47FtD.js";
+import "./client-T3qcxXru.js";
+import "./call-DIDhYlsx.js";
 import "./message-channel-C9dERklz.js";
 import "./pairing-token-Byh6drgn.js";
 import "./sessions-CJXnZVjR.js";
@@ -18,7 +18,7 @@ import { a as findTailscaleBinary } from "./tailscale-CbbvYNVw.js";
 import "./dock-DKxQXuAg.js";
 import "./accounts-D51FXYdA.js";
 import "./paths-DNdWAq7b.js";
-import { h as randomToken, u as normalizeGatewayTokenInput, y as validateGatewayPasswordInput } from "./onboard-helpers-_pit1NZW.js";
+import { h as randomToken, u as normalizeGatewayTokenInput, y as validateGatewayPasswordInput } from "./onboard-helpers-DASpwgat.js";
 import "./prompt-style-DwCXob2h.js";
 import { i as TAILSCALE_MISSING_BIN_NOTE_LINES, n as TAILSCALE_DOCS_LINES, r as TAILSCALE_EXPOSURE_OPTIONS, t as validateIPv4AddressInput } from "./ipv4-B-xy96ST.js";
 

package/dist/{onboarding.gateway-config-CJUgDC6Y.js → onboarding.gateway-config-DOna9Sr4.js}

@@ -21,12 +21,12 @@ import "./accounts-DyJN4_vR.js";
 import "./bindings-DFaVVCsf.js";
 import "./logging-w5jq5901.js";
 import "./paths-CyhzMxFA.js";
-import "./client-CQSyCS4M.js";
-import "./call-CJaS1iRF.js";
+import "./client-jI1oE0_k.js";
+import "./call-CFhGTNtt.js";
 import "./pairing-token-CX3NN_qj.js";
-import { h as randomToken, u as normalizeGatewayTokenInput, y as validateGatewayPasswordInput } from "./onboard-helpers-ZmZYzlq3.js";
-import "./prompt-style-8JqOYj0q.js";
-import { i as TAILSCALE_MISSING_BIN_NOTE_LINES, n as TAILSCALE_DOCS_LINES, r as TAILSCALE_EXPOSURE_OPTIONS, t as validateIPv4AddressInput } from "./ipv4-CxY-xbsH.js";
+import { h as randomToken, u as normalizeGatewayTokenInput, y as validateGatewayPasswordInput } from "./onboard-helpers-CAjcAisT.js";
+import "./prompt-style-CnkMpSXt.js";
+import { i as TAILSCALE_MISSING_BIN_NOTE_LINES, n as TAILSCALE_DOCS_LINES, r as TAILSCALE_EXPOSURE_OPTIONS, t as validateIPv4AddressInput } from "./ipv4-CjlyK5jc.js";
 
 //#region src/wizard/onboarding.gateway-config.ts
 const DEFAULT_DANGEROUS_NODE_DENY_COMMANDS = [

package/dist/{openai-model-default-DMjQRsb1.js → openai-model-default-WqcGxyFM.js}

@@ -1,7 +1,7 @@
 import { g as resolveConfigDir, l as escapeRegExp } from "./utils-B-0b9bGM.js";
 import { Kt as DEFAULT_PROVIDER, f as resolveAllowlistModelKey } from "./model-selection-CyFvYcRt.js";
 import { n as fetchWithTimeout } from "./fetch-timeout-Db3da8yR.js";
-import { St as ZAI_GLOBAL_BASE_URL, bt as ZAI_CODING_CN_BASE_URL, xt as ZAI_CODING_GLOBAL_BASE_URL, yt as ZAI_CN_BASE_URL } from "./auth-token-BnOynwk4.js";
+import { St as ZAI_GLOBAL_BASE_URL, bt as ZAI_CODING_CN_BASE_URL, xt as ZAI_CODING_GLOBAL_BASE_URL, yt as ZAI_CN_BASE_URL } from "./auth-token-Cay2jwzn.js";
 import fs from "node:fs";
 import path from "node:path";
 

package/dist/{outbound-3MZ12YrQ.js → outbound-BihTVvMr.js}

@@ -1,12 +1,12 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { B as toWhatsappJid, T as escapeRegExp, tt as getChildLogger } from "./registry-BhoUuugi.js";
 import { t as createSubsystemLogger } from "./subsystem-CZixfwU8.js";
-import { n as loadConfig } from "./config-BmV60pPT.js";
+import { n as loadConfig } from "./config-DBqxAhpU.js";
 import { n as resolveMarkdownTableMode } from "./markdown-tables-DawaaZEe.js";
 import { a as loadWebMedia } from "./ir-F0moAwIl.js";
 import { n as normalizePollInput } from "./polls-DQcEziPg.js";
 import { t as convertMarkdownTables } from "./tables-COnZ169v.js";
-import { n as requireActiveWebListener } from "./active-listener-1krIj9TM.js";
+import { n as requireActiveWebListener } from "./active-listener-Dx_Y1ouV.js";
 import { randomUUID } from "node:crypto";
 
 //#region src/markdown/whatsapp.ts

package/dist/{outbound-DB5Zus0-.js → outbound-DyBiNY4z.js}

@@ -6,7 +6,7 @@ import { n as resolveMarkdownTableMode } from "./markdown-tables-CEbN0fEm.js";
 import { a as loadWebMedia } from "./ir-DZam9q5M.js";
 import { n as normalizePollInput } from "./polls-DhH5YkzN.js";
 import { t as convertMarkdownTables } from "./tables-BEzT0Da4.js";
-import { n as requireActiveWebListener } from "./active-listener-kvXhlgwu.js";
+import { n as requireActiveWebListener } from "./active-listener-SKkHHqlN.js";
 import { randomUUID } from "node:crypto";
 
 //#region src/markdown/whatsapp.ts

package/dist/{outbound-CtMCmwxR.js → outbound-UwQEXYXv.js}

@@ -1,12 +1,12 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { D as escapeRegExp, H as toWhatsappJid, rt as getChildLogger } from "./registry-DYq1AYOv.js";
 import { t as createSubsystemLogger } from "./subsystem-BjyjJF-d.js";
-import { n as loadConfig } from "./config-5SdHIcHU.js";
-import { n as resolveMarkdownTableMode } from "./markdown-tables-C-BmIap8.js";
-import { a as loadWebMedia } from "./ir-CTiz95Vb.js";
-import { n as normalizePollInput } from "./polls-CCuCaqgv.js";
-import { t as convertMarkdownTables } from "./tables-qMwbq29u.js";
-import { n as requireActiveWebListener } from "./active-listener-CfHHV2SU.js";
+import { n as loadConfig } from "./config-4Iu6iHCA.js";
+import { n as resolveMarkdownTableMode } from "./markdown-tables-Dnj2LQUc.js";
+import { a as loadWebMedia } from "./ir-JAy_3A3B.js";
+import { n as normalizePollInput } from "./polls-BKbIUHj7.js";
+import { t as convertMarkdownTables } from "./tables-BuM4FKR3.js";
+import { n as requireActiveWebListener } from "./active-listener-Br2FcRv7.js";
 import { randomUUID } from "node:crypto";
 
 //#region src/markdown/whatsapp.ts

package/dist/{outbound-attachment-DJldbweZ.js → outbound-attachment-BzwVH4Pn.js}

@@ -1,5 +1,5 @@
 import { r as saveMediaBuffer } from "./store-01F_JM7O.js";
-import { a as loadWebMedia } from "./ir-CTiz95Vb.js";
+import { a as loadWebMedia } from "./ir-JAy_3A3B.js";
 
 //#region src/media/outbound-attachment.ts
 async function resolveOutboundAttachmentFromUrl(mediaUrl, maxBytes, options) {

package/dist/{pairing-cli-CBLfGvqW.js → pairing-cli-CpKm3M-X.js}

@@ -17,8 +17,8 @@ import "./bindings-DFaVVCsf.js";
 import "./logging-w5jq5901.js";
 import { l as listPairingChannels, n as approveChannelPairingCode, r as listChannelPairingRequests, u as notifyPairingApproved } from "./pairing-store-CK726Dzq.js";
 import { t as formatDocsLink } from "./links-3i1eUga4.js";
-import { t as resolvePairingIdLabel } from "./pairing-labels-2S6x2UoV.js";
-import { t as renderTable } from "./table-BTgkRafz.js";
+import { t as resolvePairingIdLabel } from "./pairing-labels-DyXoD1DS.js";
+import { t as renderTable } from "./table-BKlH0YlA.js";
 
 //#region src/cli/pairing-cli.ts
 /** Parse channel, allowing extension channels not in core registry. */

package/dist/{path-env-MnzRq6nD.js → path-env-BaQ2E7uD.js}

@@ -1,5 +1,5 @@
 import { t as isTruthyEnvValue } from "./env-DPCHYPeH.js";
-import { n as resolveBrewPathDirs } from "./brew-DjNEjKAo.js";
+import { n as resolveBrewPathDirs } from "./brew-DZPKCJr0.js";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";

package/dist/{pi-auth-json-D6YbgrAe.js → pi-auth-json-BloyLEwh.js}

@@ -1,14 +1,10 @@
-import "./paths-CE7eVGHg.js";
-import "./registry-BhoUuugi.js";
-import "./agent-scope-Cbl5pNe1.js";
-import "./subsystem-CZixfwU8.js";
-import { U as ensureAuthProfileStore, c as normalizeProviderId } from "./model-selection-BQCG9ah0.js";
-import "./github-copilot-token-BbsJ0Qbo.js";
-import "./env-CQ_DQOwT.js";
+import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
+import { U as ensureAuthProfileStore, Y as normalizeOptionalSecretInput, c as normalizeProviderId } from "./model-selection-B8QKPmTL.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 
 //#region src/agents/pi-auth-json.ts
+var pi_auth_json_exports = /* @__PURE__ */ __exportAll({ ensurePiAuthJsonFromAuthProfiles: () => ensurePiAuthJsonFromAuthProfiles });
 async function readAuthJson(filePath) {
 	try {
 		const raw = await fs.readFile(filePath, "utf8");
@@ -78,8 +74,16 @@ function credentialsEqual(a, b) {
 * registry/catalog output.
 *
 * Syncs all credential types: api_key, token (as api_key), and oauth.
+*
+* When a SymiConfig is supplied via options.config, any provider in
+* config.models.providers that declares an inline apiKey is also seeded into
+* auth.json (for providers not already covered by an auth-profile). This is
+* required for user-defined OpenAI-compatible endpoints (e.g. CoreWeave vLLM
+* with apiKey: "none"): without an auth.json entry, pi-coding-agent's
+* AuthStorage treats the provider as unauthenticated and the SDK fails with
+* "Connection error" before any HTTP request is made.
 */
-async function ensurePiAuthJsonFromAuthProfiles(agentDir) {
+async function ensurePiAuthJsonFromAuthProfiles(agentDir, options) {
 	const store = ensureAuthProfileStore(agentDir, { allowKeychainPrompt: false });
 	const authPath = path.join(agentDir, "auth.json");
 	const providerCredentials = /* @__PURE__ */ new Map();
@@ -89,6 +93,17 @@ async function ensurePiAuthJsonFromAuthProfiles(agentDir) {
 		const converted = convertCredential(cred);
 		if (converted) providerCredentials.set(provider, converted);
 	}
+	const inlineProviders = options?.config?.models?.providers;
+	if (inlineProviders) for (const [providerKey, providerCfg] of Object.entries(inlineProviders)) {
+		const provider = normalizeProviderId(String(providerKey ?? "")).trim();
+		if (!provider || providerCredentials.has(provider)) continue;
+		const inlineKey = normalizeOptionalSecretInput(providerCfg?.apiKey);
+		if (!inlineKey) continue;
+		providerCredentials.set(provider, {
+			type: "api_key",
+			key: inlineKey
+		});
+	}
 	if (providerCredentials.size === 0) return {
 		wrote: false,
 		authPath
@@ -115,4 +130,4 @@ async function ensurePiAuthJsonFromAuthProfiles(agentDir) {
 }
 
 //#endregion
-export { ensurePiAuthJsonFromAuthProfiles };
+export { pi_auth_json_exports as n, ensurePiAuthJsonFromAuthProfiles as t };

package/dist/{pi-auth-json-CaX_1WHk.js → pi-auth-json-CCaxCywz.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { L as normalizeProviderId, b as ensureAuthProfileStore } from "./auth-profiles-Q1xTr5SX.js";
+import { C as normalizeProviderId, U as normalizeOptionalSecretInput, d as ensureAuthProfileStore } from "./auth-profiles-q3HjbboY.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 
@@ -74,8 +74,16 @@ function credentialsEqual(a, b) {
 * registry/catalog output.
 *
 * Syncs all credential types: api_key, token (as api_key), and oauth.
+*
+* When a SymiConfig is supplied via options.config, any provider in
+* config.models.providers that declares an inline apiKey is also seeded into
+* auth.json (for providers not already covered by an auth-profile). This is
+* required for user-defined OpenAI-compatible endpoints (e.g. CoreWeave vLLM
+* with apiKey: "none"): without an auth.json entry, pi-coding-agent's
+* AuthStorage treats the provider as unauthenticated and the SDK fails with
+* "Connection error" before any HTTP request is made.
 */
-async function ensurePiAuthJsonFromAuthProfiles(agentDir) {
+async function ensurePiAuthJsonFromAuthProfiles(agentDir, options) {
 	const store = ensureAuthProfileStore(agentDir, { allowKeychainPrompt: false });
 	const authPath = path.join(agentDir, "auth.json");
 	const providerCredentials = /* @__PURE__ */ new Map();
@@ -85,6 +93,17 @@ async function ensurePiAuthJsonFromAuthProfiles(agentDir) {
 		const converted = convertCredential(cred);
 		if (converted) providerCredentials.set(provider, converted);
 	}
+	const inlineProviders = options?.config?.models?.providers;
+	if (inlineProviders) for (const [providerKey, providerCfg] of Object.entries(inlineProviders)) {
+		const provider = normalizeProviderId(String(providerKey ?? "")).trim();
+		if (!provider || providerCredentials.has(provider)) continue;
+		const inlineKey = normalizeOptionalSecretInput(providerCfg?.apiKey);
+		if (!inlineKey) continue;
+		providerCredentials.set(provider, {
+			type: "api_key",
+			key: inlineKey
+		});
+	}
 	if (providerCredentials.size === 0) return {
 		wrote: false,
 		authPath

package/dist/{pi-auth-json-Bk8ERadJ.js → pi-auth-json-LXkL5WS_.js}

@@ -1,16 +1,10 @@
-import "./paths-CE7eVGHg.js";
-import "./registry-DYq1AYOv.js";
-import "./agent-scope-CpEJ0B88.js";
-import "./subsystem-BjyjJF-d.js";
-import "./workspace-DscDraUb.js";
-import { C as normalizeProviderId, d as ensureAuthProfileStore } from "./auth-profiles-DdK1Hxaa.js";
-import "./env-BDXYbTKj.js";
-import "./github-copilot-token-cCYzSU9h.js";
-import "./boolean-CE7i9tBR.js";
+import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
+import { L as normalizeProviderId, Tt as normalizeOptionalSecretInput, b as ensureAuthProfileStore } from "./auth-profiles-Q1xTr5SX.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 
 //#region src/agents/pi-auth-json.ts
+var pi_auth_json_exports = /* @__PURE__ */ __exportAll({ ensurePiAuthJsonFromAuthProfiles: () => ensurePiAuthJsonFromAuthProfiles });
 async function readAuthJson(filePath) {
 	try {
 		const raw = await fs.readFile(filePath, "utf8");
@@ -80,8 +74,16 @@ function credentialsEqual(a, b) {
 * registry/catalog output.
 *
 * Syncs all credential types: api_key, token (as api_key), and oauth.
+*
+* When a SymiConfig is supplied via options.config, any provider in
+* config.models.providers that declares an inline apiKey is also seeded into
+* auth.json (for providers not already covered by an auth-profile). This is
+* required for user-defined OpenAI-compatible endpoints (e.g. CoreWeave vLLM
+* with apiKey: "none"): without an auth.json entry, pi-coding-agent's
+* AuthStorage treats the provider as unauthenticated and the SDK fails with
+* "Connection error" before any HTTP request is made.
 */
-async function ensurePiAuthJsonFromAuthProfiles(agentDir) {
+async function ensurePiAuthJsonFromAuthProfiles(agentDir, options) {
 	const store = ensureAuthProfileStore(agentDir, { allowKeychainPrompt: false });
 	const authPath = path.join(agentDir, "auth.json");
 	const providerCredentials = /* @__PURE__ */ new Map();
@@ -91,6 +93,17 @@ async function ensurePiAuthJsonFromAuthProfiles(agentDir) {
 		const converted = convertCredential(cred);
 		if (converted) providerCredentials.set(provider, converted);
 	}
+	const inlineProviders = options?.config?.models?.providers;
+	if (inlineProviders) for (const [providerKey, providerCfg] of Object.entries(inlineProviders)) {
+		const provider = normalizeProviderId(String(providerKey ?? "")).trim();
+		if (!provider || providerCredentials.has(provider)) continue;
+		const inlineKey = normalizeOptionalSecretInput(providerCfg?.apiKey);
+		if (!inlineKey) continue;
+		providerCredentials.set(provider, {
+			type: "api_key",
+			key: inlineKey
+		});
+	}
 	if (providerCredentials.size === 0) return {
 		wrote: false,
 		authPath
@@ -117,4 +130,4 @@ async function ensurePiAuthJsonFromAuthProfiles(agentDir) {
 }
 
 //#endregion
-export { ensurePiAuthJsonFromAuthProfiles };
+export { pi_auth_json_exports as n, ensurePiAuthJsonFromAuthProfiles as t };

package/dist/pi-auth-json-zHckislA.js

@@ -0,0 +1,133 @@
+import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
+import { At as ensureAuthProfileStore, l as normalizeProviderId, zt as normalizeOptionalSecretInput } from "./model-selection-CyFvYcRt.js";
+import path from "node:path";
+import fs from "node:fs/promises";
+
+//#region src/agents/pi-auth-json.ts
+var pi_auth_json_exports = /* @__PURE__ */ __exportAll({ ensurePiAuthJsonFromAuthProfiles: () => ensurePiAuthJsonFromAuthProfiles });
+async function readAuthJson(filePath) {
+	try {
+		const raw = await fs.readFile(filePath, "utf8");
+		const parsed = JSON.parse(raw);
+		if (!parsed || typeof parsed !== "object") return {};
+		return parsed;
+	} catch {
+		return {};
+	}
+}
+/**
+* Convert an Symi auth-profiles credential to pi-coding-agent auth.json format.
+* Returns null if the credential cannot be converted.
+*/
+function convertCredential(cred) {
+	if (cred.type === "api_key") {
+		const key = typeof cred.key === "string" ? cred.key.trim() : "";
+		if (!key) return null;
+		return {
+			type: "api_key",
+			key
+		};
+	}
+	if (cred.type === "token") {
+		const token = typeof cred.token === "string" ? cred.token.trim() : "";
+		if (!token) return null;
+		const expires = typeof cred.expires === "number" ? cred.expires : NaN;
+		if (Number.isFinite(expires) && expires > 0 && Date.now() >= expires) return null;
+		return {
+			type: "api_key",
+			key: token
+		};
+	}
+	if (cred.type === "oauth") {
+		const accessRaw = cred.access;
+		const refreshRaw = cred.refresh;
+		const expiresRaw = cred.expires;
+		const access = typeof accessRaw === "string" ? accessRaw.trim() : "";
+		const refresh = typeof refreshRaw === "string" ? refreshRaw.trim() : "";
+		const expires = typeof expiresRaw === "number" ? expiresRaw : NaN;
+		if (!access || !refresh || !Number.isFinite(expires) || expires <= 0) return null;
+		return {
+			type: "oauth",
+			access,
+			refresh,
+			expires
+		};
+	}
+	return null;
+}
+/**
+* Check if two auth.json credentials are equivalent.
+*/
+function credentialsEqual(a, b) {
+	if (!a || typeof a !== "object") return false;
+	if (a.type !== b.type) return false;
+	if (a.type === "api_key" && b.type === "api_key") return a.key === b.key;
+	if (a.type === "oauth" && b.type === "oauth") return a.access === b.access && a.refresh === b.refresh && a.expires === b.expires;
+	return false;
+}
+/**
+* pi-coding-agent's ModelRegistry/AuthStorage expects credentials in auth.json.
+*
+* Symi stores credentials in auth-profiles.json instead. This helper
+* bridges all credentials into agentDir/auth.json so pi-coding-agent can
+* (a) consider providers authenticated and (b) include built-in models in its
+* registry/catalog output.
+*
+* Syncs all credential types: api_key, token (as api_key), and oauth.
+*
+* When a SymiConfig is supplied via options.config, any provider in
+* config.models.providers that declares an inline apiKey is also seeded into
+* auth.json (for providers not already covered by an auth-profile). This is
+* required for user-defined OpenAI-compatible endpoints (e.g. CoreWeave vLLM
+* with apiKey: "none"): without an auth.json entry, pi-coding-agent's
+* AuthStorage treats the provider as unauthenticated and the SDK fails with
+* "Connection error" before any HTTP request is made.
+*/
+async function ensurePiAuthJsonFromAuthProfiles(agentDir, options) {
+	const store = ensureAuthProfileStore(agentDir, { allowKeychainPrompt: false });
+	const authPath = path.join(agentDir, "auth.json");
+	const providerCredentials = /* @__PURE__ */ new Map();
+	for (const [, cred] of Object.entries(store.profiles)) {
+		const provider = normalizeProviderId(String(cred.provider ?? "")).trim();
+		if (!provider || providerCredentials.has(provider)) continue;
+		const converted = convertCredential(cred);
+		if (converted) providerCredentials.set(provider, converted);
+	}
+	const inlineProviders = options?.config?.models?.providers;
+	if (inlineProviders) for (const [providerKey, providerCfg] of Object.entries(inlineProviders)) {
+		const provider = normalizeProviderId(String(providerKey ?? "")).trim();
+		if (!provider || providerCredentials.has(provider)) continue;
+		const inlineKey = normalizeOptionalSecretInput(providerCfg?.apiKey);
+		if (!inlineKey) continue;
+		providerCredentials.set(provider, {
+			type: "api_key",
+			key: inlineKey
+		});
+	}
+	if (providerCredentials.size === 0) return {
+		wrote: false,
+		authPath
+	};
+	const existing = await readAuthJson(authPath);
+	let changed = false;
+	for (const [provider, cred] of providerCredentials) if (!credentialsEqual(existing[provider], cred)) {
+		existing[provider] = cred;
+		changed = true;
+	}
+	if (!changed) return {
+		wrote: false,
+		authPath
+	};
+	await fs.mkdir(agentDir, {
+		recursive: true,
+		mode: 448
+	});
+	await fs.writeFile(authPath, `${JSON.stringify(existing, null, 2)}\n`, { mode: 384 });
+	return {
+		wrote: true,
+		authPath
+	};
+}
+
+//#endregion
+export { pi_auth_json_exports as n, ensurePiAuthJsonFromAuthProfiles as t };