@tt-a1i/openpi 0.5.0 → 0.6.0

package/README.md

@@ -20,7 +20,7 @@
 <p align="center">
   <a href="https://www.npmjs.com/package/@tt-a1i/openpi"><img alt="npm version" src="https://img.shields.io/npm/v/@tt-a1i/openpi?style=flat-square&color=cb3837"></a>
   <a href="https://github.com/openpi-dev/openpi/actions/workflows/ci.yml"><img alt="CI status" src="https://github.com/openpi-dev/openpi/actions/workflows/ci.yml/badge.svg"></a>
-  <a href="https://github.com/earendil-works/pi-mono"><img alt="Pi 0.84.1+" src="https://img.shields.io/badge/Pi-0.84.1%2B-2f81f7?style=flat-square"></a>
+  <a href="https://github.com/earendil-works/pi-mono"><img alt="Pi 0.85.1+" src="https://img.shields.io/badge/Pi-0.85.1%2B-2f81f7?style=flat-square"></a>
   <img alt="Node.js 22.19+" src="https://img.shields.io/badge/Node.js-22.19%2B-3fb950?style=flat-square&logo=nodedotjs&logoColor=white">
   <a href="LICENSE"><img alt="License: MIT" src="https://img.shields.io/badge/license-MIT-3fb950?style=flat-square"></a>
 </p>
@@ -123,13 +123,14 @@ OpenPI 把成熟 Coding Agent 的工作习惯做成 Pi-native 能力，但不复
 | 工作面       | 已包含的能力                                                                                              |
 | ------------ | --------------------------------------------------------------------------------------------------------- |
 | 执行         | Background Terminal、Pi-native Subagent、Dynamic Workflow、隔离 Worktree                                  |
-| 编排         | `pipeline` / `parallel`、结构化输出、Result Handoff、Operator、Acceptance Ledger、Safe Replay、派生 Graph |
+| 编排         | `pipeline` / `parallel`、结构化输出、Result Handoff、Operator、Safe Replay、派生 Graph |
 | 连续性       | Tasks、Goal、Plan Mode、Context Pivot、Session Browser、Session-scoped Cron                               |
 | 自定义 Agent | `explorer` / `implementer` / `reviewer` / `advisor`，支持全局与项目角色文件、独立模型与 effort            |
 | 终端工作台   | 自定义 Footer 与任务栏、运行状态、紧凑 Tool Result、Next-action Suggestion、Git / PR 信号                 |
 | 快捷工作流   | `/btw` 旁路提问（TUI）、`/lg` 浏览 Diff（TUI）、`/pr` 查 PR、`/copy-all`、`fd`、`rg`、只读 Git 工具       |
 | 人类决策     | `ask_user` 草稿与最终复核、parent-only `human_handoff`、Plan Ready 实施门禁                               |
 | 统一配置     | `/openpi-setup` 管理 OpenPI 自有模型、并发、Footer、输出密度与 Post-edit 偏好                             |
+| 模型授权     | `/login google-antigravity`；实验性的 `/login cursor`（仅聊天，不执行 Cursor 原生工具）                   |
 
 OpenPI 采用 [MIT License](LICENSE)；第三方来源与保留声明见 [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md)。
 
@@ -270,7 +271,7 @@ return agent("Synthesize the verified findings", {
 | `phase()`    | 标记当前阶段                                                               |
 | `log()`      | 向实时界面与最终报告追加一行进度                                           |
 | `usage()`    | 读取累计 Token、缓存、成本及本轮并发/调用余量；Token 是 lower bound，不是预算器 |
-| `agent()`    | 启动 Pi Agent；支持 role、schema、acceptance、inputs、operator 与 worktree |
+| `agent()`    | 启动 Pi Agent；支持 role、schema、inputs、operator 与 worktree |
 | `pipeline()` | 每个 item 完成上阶段后立即进入下一阶段；多阶段 fan-out 的默认选择          |
 | `parallel()` | 并发 barrier；只在下一阶段确实需要全部结果时使用                           |
 
@@ -308,9 +309,11 @@ OpenPI 把一次调用拆成可以审计的生命周期，而不是把“进程
 
 `operator: "name"` 在同一 Run 内复用一个内存 Child Session，并把同名 activation 串行化。首个 activation 固定 model、role/tool surface、effort、structured mode 与 cwd。Operator 不与 per-call Worktree 或 Replay 混用，也不承诺跨重启持久记忆。
 
-### Explicit Acceptance
+### Deprecated Acceptance compatibility
 
-可选 `acceptance: { criteria: [...] }` 要求同一个 Agent 返回 evidence ledger。支持 1–32 条验收条件；`description` 为人类可读说明（1–500 字符），可选的 `requiredEvidence` 为字符串数组（至多 16 个标签，每项至多 120 字符），子 Agent 必须在 `acceptance.criteria[].evidence` 中返回完全匹配的标签：
+`acceptance` 自 OpenPI 0.5 起弃用，并计划在 1.0 删除。兼容期仍读取旧 DSL、journal 与 artifact，但 ledger 只是执行任务的同一个模型所写的 `model-self-attestation`，不是 runtime-observed evidence，也不再决定 `agent().ok`；`ok` 只表示 child execution 与结果制品是否成功。
+
+新 Workflow 应使用普通 `schema` 返回判断材料，由父模型结合退出码、测试结果、文件指纹和 tool receipts 等真实运行时事实综合判断。旧的可选 `acceptance: { criteria: [...] }` 仍可要求同一个 Agent 返回 ledger：
 
 ```js
 acceptance: {
@@ -324,7 +327,7 @@ acceptance: {
 }
 ```
 
-条件缺失、格式错误或被拒绝时，调用返回 `ok: false`，但原始输出与 ledger 仍保留。OpenPI 不会暗中再启动 reviewer、Shell 或额外 Judge 模型。
+条件缺失、格式错误或被拒绝时，原始输出与 ledger 仍保留并明确标注 authority/deprecation；它们不会把成功执行改成失败，也不会把失败执行改成成功。OpenPI 不会暗中再启动 reviewer、Shell 或额外 Judge 模型。
 
 未设置 `requiredEvidence` 的 criterion 是对 `description` 的自我声明，不是有证据约束的验收门禁；需要 evidence-backed gate 时，必须声明所需证据标签。
 
@@ -408,12 +411,14 @@ macOS/Linux arm64 与 x64 缺少二进制时，OpenPI 会从官方 Release 下
 
 无参数时，OpenPI 展示当前状态并引导修改；带自然语言时只改指定项：
 
-<!-- config-contract: capabilities.discovery suggestions.enabled suggestions.model workflows.concurrency workflows.maxAgentCalls ui.showHeader ui.customFooter ui.footerStyle ui.footerLines ui.subagentResultDisplay ui.bashToolDisplay ui.fileMutationDisplay postEdit.command subagents.roleModels -->
+<!-- config-contract: capabilities.discovery suggestions.enabled suggestions.model workflows.concurrency workflows.maxAgentCalls ui.webTheme ui.showHeader ui.customFooter ui.footerStyle ui.footerLines ui.subagentResultDisplay ui.bashToolDisplay ui.fileMutationDisplay postEdit.command subagents.roleModels -->
 
 ```text
 /openpi-setup 开启下一步预测，选择 Registry 里的轻量模型，minimal 推理
 /openpi-setup 让模型在合适时自主发现并采用 OpenPI 能力
 /openpi-setup workflow 同时跑 16 个 agent，总调用最多 256
+/openpi-setup Web 主题跟随系统
+/openpi-setup Web 使用深色主题
 /openpi-setup Footer 两行：cwd flex model / context cost flex git
 /openpi-setup Bash 展开，Write/Edit 保持紧凑
 /openpi-setup 编辑后自动跑 npm run format
@@ -434,18 +439,18 @@ Footer 布局以 `footerLines` 作为唯一持久化格式。旧版 `footerItems
 | Capability discovery         | `explicit`；`adaptive` 必须显式开启            |
 | Next-action Suggestion       | 关闭；启用时显式选择 Registry 模型与 reasoning |
 | Workflow 并发 / 总调用       | 8 / 128；硬上限 64 / 1024                      |
+| Web 主题                    | `system`；可选 `light` / `dark`                 |
 | 大型 Header                  | 关闭                                           |
 | Dashboard Footer             | 开启；单行 `plain`                           |
 | Subagent / Bash / Write/Edit | `compact` / `compact` / `compact`             |
 | Post-edit 命令               | 关闭；单条命令最多 500 字符                    |
 | 内置角色模型                 | 全部继承父模型                                 |
-| 主题                         | 保留用户现有选择                               |
 
 </details>
 
 ### 安装要求与来源
 
-- Pi `0.84.1` 或更新版本；
+- Pi `0.85.1` 或更新版本；
 - Node.js `22.19.0` 或更新版本；
 - npm 安装：`pi install npm:@tt-a1i/openpi`；
 - GitHub 安装：`pi install git:github.com/openpi-dev/openpi`。
@@ -606,6 +611,8 @@ Capability discovery 默认是 `explicit`：普通父 Session 不常驻任何 Op
 
 `subagent_spawn` 立即返回，结束后自动回传并重新唤醒主 Agent。交互会话没有其他工作时，主 Agent 应结束当前轮、让用户继续交互；“下一步依赖结果”本身不是阻塞理由。只有用户明确要求当前回复等完，或非交互自动化必须在同一次调用中返回完整结果时，才应调用 `subagent_wait`。
 
+需要机器可验证的 review findings、research evidence 或 test matrix 时，可为 `subagent_spawn` 提供可选 `output_schema`。该次 Direct Subagent 只会额外获得 terminating `structured_output`，未提交匹配结果会明确失败；验证后的 JSON 会有界回传并写入私有 content-addressed artifact。省略 schema 的普通文本路径不会加载该 child tool 或 structured instruction。
+
 </details>
 
 <details>
@@ -646,6 +653,7 @@ Plan Mode 不猜“任意 Shell 是否只读”，只放行由已知安全零件
 
 ```text
 extensions/
+├── ai-providers/          # Antigravity 与实验性 Cursor OAuth 模型 Provider
 ├── setup/                 # /openpi-setup 与受限配置工具
 ├── capabilities/          # 最小能力发现入口与 Session 工具面加载
 ├── background-terminals/  # 长进程、日志、/ps
@@ -691,6 +699,6 @@ npm 仍用于发布包的 `pack` / clean-install 验证，因为用户通过 npm
 
 本项目最初基于 [davis7dotsh/my-pi-setup](https://github.com/davis7dotsh/my-pi-setup) 演进，现作为独立发行版维护。感谢原作者提供起点。
 
-`extensions/sessions/` 改编自 [jayshah5696/pi-agent-extensions](https://github.com/jayshah5696/pi-agent-extensions)。独立可选的顶层 Session 通信 package 见 [pi-intercom](https://github.com/nicobailon/pi-intercom)。完整第三方说明见 [`THIRD_PARTY_NOTICES.md`](THIRD_PARTY_NOTICES.md)。
+`extensions/ai-providers/` 的部分协议实现改编自 [oh-my-pi](https://github.com/can1357/oh-my-pi)；`extensions/sessions/` 改编自 [jayshah5696/pi-agent-extensions](https://github.com/jayshah5696/pi-agent-extensions)。独立可选的顶层 Session 通信 package 见 [pi-intercom](https://github.com/nicobailon/pi-intercom)。完整第三方说明见 [`THIRD_PARTY_NOTICES.md`](THIRD_PARTY_NOTICES.md)。
 
 本项目以 MIT 许可证发布（见 [`LICENSE`](LICENSE)）；`THIRD_PARTY_NOTICES.md` 记录第三方来源与各自许可。

package/SETUP.md

@@ -1,6 +1,6 @@
 # Setup
 
-Use Node.js 22.19.0 or newer. Install the public Pi package:
+Use Pi 0.85.1 or newer and Node.js 22.19.0 or newer. Upgrade Pi before installing this OpenPI version; the temporary Pi 0.85.0 SDK import workaround has been removed. Install the public Pi package:
 
 ```sh
 pi install npm:@tt-a1i/openpi
@@ -32,6 +32,8 @@ Add the included theme to `~/.pi/agent/settings.json` while keeping your existin
 
 Pi will load the extensions and theme the next time it starts. OpenPI's Background, Subagent, and Workflow Skill files remain in the package, but ordinary turns do not advertise them in the system prompt; the matching path is disclosed only after explicit capability intent or after the model loads that group through the opt-in adaptive gateway.
 
+The terminal theme above remains Pi-owned. OpenPI Web has a separate package-owned `system` / `light` / `dark` preference configured only through `/openpi-setup`; `system` is the default and follows the browser or operating-system color scheme.
+
 ## Configure this package
 
 Use the single canonical package-owned command. `/my-pi-setup` remains a compatibility alias. With no arguments, the current model explains the configurable areas and uses `ask_user`: first run initializes them; later runs explain the saved state and ask whether to keep it, change one area, or review everything. With arguments, it treats the rest as a targeted natural-language request. Persist still goes through the typed `configure_my_pi_setup` tool. The writer stays hidden while a busy Session queues the setup request, becomes active only when that exact request is delivered to the model, and is hidden again afterward. One successful apply completes the episode. If the run settles without a successful apply, OpenPI appends a visible, durable closure receipt to the Session and later model context; it says that the writer is hidden and re-entry requires `/openpi-setup <request>`. OpenPI also verifies that the active writer belongs to the package source before announcing an active setup episode; duplicate or mismatched sources fail closed without injecting the setup request. A later configuration change starts a new episode with `/openpi-setup <request>` rather than reusing the hidden tool:
@@ -43,6 +45,8 @@ Use the single canonical package-owned command. `/my-pi-setup` remains a compati
 /openpi-setup 开启下一步预测，使用 seal/deepseek-v4-flash，关闭推理
 /openpi-setup 关闭下一步预测
 /openpi-setup workflow 同时跑 16 个 agent，总任务最多 256 个
+/openpi-setup Web theme follows the system
+/openpi-setup use dark theme in OpenPI Web
 /openpi-setup 显示大标题
 /openpi-setup 切换 Footer 为 powerline
 /openpi-setup 用 mono powerline Footer
@@ -58,9 +62,11 @@ Use the single canonical package-owned command. `/my-pi-setup` remains a compati
 
 Capability discovery defaults to `explicit`, preserving the zero-resident OpenPI tool surface until the user asks for a capability. The case-insensitive English words `subagent` and `workflow` are reserved authorization words: entering either word is sufficient to load its capability group, and the interactive editor shows it in Claude Code-style lavender before submission, with a darker purple fallback for light themes. This makes discussion that contains either English word an intentional opt-in tradeoff; conditional and negated clauses remain inert, while Chinese capability names still require a recognized action request. `adaptive` is an explicit opt-in that keeps only `openpi_load_tools` visible and allows the model to load a useful group on its own; because this can start Subagents, Workflows, or background processes, normal permission and configured concurrency/call limits still apply. Changing the setting updates the current Session immediately, while already loaded groups remain stable for that Session. Accepted Suggestion text is classified only after it becomes real editor input. The visual feedback and runtime activation share one fail-closed intent classifier. Next-action suggestions default to off. Run `/openpi-setup` to explicitly choose an available model and reasoning level. After a fully settled main-agent run, one suggestion may appear as dim inline text on the first row of an empty editor; reserved cells at the row end keep CJK IME preedit from overwriting it. `Right` accepts it into the editor without submitting, while any other editor input dismisses it. Suggestions are ephemeral and never enter session history or model context. Workflows default to 8 concurrent agents and 128 total agent calls per run; configurable hard maxima are 64 and 1024. The large decorative header defaults off and the custom dashboard footer defaults on with a one-line plain layout (`model context |flex| git pr cwd`; `thinking`, `cache`, `cost`, and `throughput` remain opt-in metrics). Footer presets are `powerline`, `powerline-mono`, and `compact`; style can also be set independently to `plain`, `powerline`, or `powerline-mono`. Custom layouts use a 2D `footerLines` array with at most one `flex` per row for left/right alignment. Nerd Font affects powerline separator glyphs (``) and adds Codex-style outline icons to compact read, terminal, edit, search, and directory activity rows; all accompanying text remains readable without it. Footer metrics use one Codicon outline family (`` model, `` context, and `` directory) plus `⎇` for the branch. A Nerd Font containing Codicons renders them as designed; without one, the text labels remain readable even if an icon falls back to an empty box. Footer changes apply immediately in the active TUI session. Subagent results default to a compact status summary; full mode remains available as a per-user setting, and `app.tools.expand` (`Ctrl+O` by default) reveals the available child report. Ordinary `read`, `grep`, `find`, and `ls` operations render as one-line semantic activity summaries. Bash and Write/Edit default to the same activity-row projection, showing the target, running/success/failure state, and useful line or diff counts without replaying stdout or previews. Select full independently for Bash or Write/Edit to keep Pi's native rendering expanded. `app.tools.expand` temporarily restores the native arguments, output, errors, diff, timing, images, truncation notices, and full-output metadata; it never changes Session history or model context. An optional post-edit command is off by default: set one (for example `npm run format`, maximum 500 characters) and it runs once in the background after each interactive-TUI turn with successful Write/Edit operations, with failures reported as a notification. It deliberately does not guess whether arbitrary Bash commands changed files. Built-in Agent roles `explorer`, `implementer`, `reviewer`, and `advisor` are shared by `subagent_spawn.agent_type` and Workflow `agent(..., { agent_type })`; all inherit the parent model by default. `/openpi-setup` may assign a currently available Registry model to any subset; clearing one returns it to inheritance and omitted roles stay unchanged. Model precedence is explicit call > selected role-file model > setup assignment > parent inheritance; effort is explicit call > selected role > parent. A trusted project `.pi/agents/<role>.md` overrides global `~/.pi/agent/agents/<role>.md`, which overrides the complete built-in role definition; overrides are diagnosed. Role-model changes apply to the next spawn or Workflow agent call without reload. Configuration is stored privately at `~/.pi/agent/my-pi-setup.json`.
 
+OpenPI Web theme defaults to `system`; `light` and `dark` are explicit canonical setup choices, and the browser consumes them from each authoritative snapshot without writing a competing local preference.
+
 Legacy `footerItems` is accepted and migrated at the input boundary, but new setup writes persist only canonical `footerLines`. Configurations written by this version are not guaranteed to retain their Footer layout when read by an older OpenPI version.
 
-<!-- config-contract: capabilities.discovery suggestions.enabled suggestions.model workflows.concurrency workflows.maxAgentCalls ui.showHeader ui.customFooter ui.footerStyle ui.footerLines ui.subagentResultDisplay ui.bashToolDisplay ui.fileMutationDisplay postEdit.command subagents.roleModels -->
+<!-- config-contract: capabilities.discovery suggestions.enabled suggestions.model workflows.concurrency workflows.maxAgentCalls ui.webTheme ui.showHeader ui.customFooter ui.footerStyle ui.footerLines ui.subagentResultDisplay ui.bashToolDisplay ui.fileMutationDisplay postEdit.command subagents.roleModels -->
 
 ## Optional cross-session communication
 

package/THIRD_PARTY_NOTICES.md

@@ -1,5 +1,21 @@
 # Third-Party Notices
 
+## OAuth model providers
+
+`extensions/ai-providers/` adapts protocol and OAuth details from
+[`oh-my-pi`](https://github.com/can1357/oh-my-pi) (Antigravity Cloud Code
+Assist and Cursor AgentService). The upstream project is distributed under the
+MIT License. Its copyright notice states `Copyright (c) 2025 Mario Zechner`,
+`Copyright (c) 2025-2026 Can Bölük`, and `Copyright (c) 2026 Stencil Labs, Inc.`;
+the complete license text is included at
+[`extensions/ai-providers/LICENSE.upstream`](extensions/ai-providers/LICENSE.upstream).
+The local Antigravity message conversion is adapted from the same project's
+pi-ai 0.84.1 Google conversion implementation so the installed extension does
+not depend on a non-public Pi runtime module.
+
+Cursor support in this package is chat-only: it does not copy or execute
+Cursor-native coding tools.
+
 ## Sessions extension
 
 `extensions/sessions/` is adapted from

package/bin/openpi.js

@@ -67,7 +67,17 @@ const stop = () => {
 };
 
 try {
-  const jiti = createJiti(import.meta.url);
+  const bootstrap = createJiti(import.meta.url);
+  const { missingPiCodingAgentDiagnostic, resolveStandaloneJitiAliases } =
+    await bootstrap.import("../web/host/pi-coding-agent-entry.ts");
+  const aliases = resolveStandaloneJitiAliases({
+    fromUrl: import.meta.url,
+  });
+  if (!aliases["@earendil-works/pi-coding-agent"]) {
+    console.error(missingPiCodingAgentDiagnostic());
+    process.exit(1);
+  }
+  const jiti = createJiti(import.meta.url, { alias: aliases });
   const [browserModule, hostModule, runtimeModule, statusModule, traceModule] =
     await Promise.all([
       jiti.import("../web/host/browser-launcher.ts"),
@@ -95,6 +105,20 @@ try {
       : {}),
   });
   await host.start();
+  const onStopSignal = () => {
+    void stop().then(
+      () => process.exit(0),
+      (error) => {
+        console.error(
+          `Failed to stop OpenPI Web Workbench: ${error instanceof Error ? error.message : String(error)}`,
+        );
+        process.exit(1);
+      },
+    );
+  };
+  for (const signal of ["SIGINT", "SIGTERM"]) {
+    process.once(signal, onStopSignal);
+  }
   traceWeb("web_started", {
     ...(runtime.workspaceSelected === true ? { cwd: runtime.cwd } : {}),
     origin: host.origin,
@@ -112,20 +136,6 @@ try {
     console.log(`OpenPI Web Workbench is running at ${host.origin}`);
     if (!opened) console.log(`Open this URL in a browser: ${host.url}`);
   }
-
-  for (const signal of ["SIGINT", "SIGTERM"]) {
-    process.once(signal, () => {
-      void stop().then(
-        () => process.exit(0),
-        (error) => {
-          console.error(
-            `Failed to stop OpenPI Web Workbench: ${error instanceof Error ? error.message : String(error)}`,
-          );
-          process.exit(1);
-        },
-      );
-    });
-  }
 } catch (error) {
   let cleanupError;
   try {

package/extensions/ai-providers/LICENSE.upstream

@@ -0,0 +1,23 @@
+MIT License
+
+Copyright (c) 2025 Mario Zechner
+Copyright (c) 2025-2026 Can Bölük
+Copyright (c) 2026 Stencil Labs, Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/extensions/ai-providers/README.md

@@ -0,0 +1,59 @@
+# OAuth model providers
+
+This extension registers two opt-in model providers backed by account OAuth:
+
+- `google-antigravity` uses Google Cloud Code Assist and supports ordinary Pi
+  tool calls.
+- `cursor` uses Cursor AgentService and is experimental, chat-only support.
+  It does not advertise or execute Cursor-native coding tools. If the server
+  requests one, the request fails explicitly instead of bypassing Pi's tool and
+  permission lifecycle.
+
+After installing OpenPI, restart Pi or run `/reload`, then authenticate and
+select a model:
+
+```text
+/login google-antigravity
+/login cursor
+/model
+```
+
+For source-checkout testing, follow the repository's
+[development runtime provenance procedure](../../README.md#开发运行时区分-npm-与当前源码).
+Remove any previously installed OpenPI source, install the checkout, and verify
+that `pi list` reports this checkout as the only OpenPI source before reloading
+Pi. Do not mix an installed OpenPI package with an explicitly loaded checkout
+extension, because that does not prove which source owns the runtime behavior.
+
+```sh
+pi list
+OLD_OPENPI_SOURCE=/absolute/path/to/old/openpi
+pi remove "$OLD_OPENPI_SOURCE"
+pi install "$PWD"
+pi list
+```
+
+The model catalog is refreshed from the authenticated account and persisted by
+Pi. A failed refresh retains the last successful account catalog; Antigravity
+also has a validated static baseline, while Cursor keeps the server-side `Auto`
+route as its baseline. No provider is contacted until it is selected.
+
+Pi's interactive clipboard flow inserts an image's local path into the editor.
+When Cursor is selected, a supported PNG/JPEG/GIF/WebP path at the start of an
+interactive prompt is converted into an actual image attachment (up to 10 MiB)
+before the request is sent. The absolute path is not exposed to the model.
+
+The provider also adds an explicit chat-only rule so the normal Pi coding
+system prompt cannot cause Cursor to attempt unavailable read or shell tools.
+
+Cursor's token delta describes generated output only, so the provider does not
+publish it as complete context usage. Pi 0.84.3+ can estimate an all-Cursor
+history and trigger threshold compaction without provider usage. Older Pi hosts
+retain the correct unknown-usage state but cannot automatically threshold-
+compact a session with no usage-backed response. Project-wide Pi baseline
+tracking is kept in [#328](https://github.com/openpi-dev/openpi/issues/328).
+
+Cursor model discovery and chat use HTTP/2. They honor `PI_PROXY_CURSOR`, then
+`PI_PROXY`, the standard `HTTPS_PROXY`/`HTTP_PROXY` variables, and `ALL_PROXY`;
+`NO_PROXY` bypass rules apply. The proxy must support HTTP CONNECT and preserve
+HTTP/2 ALPN negotiation to Cursor.

package/extensions/ai-providers/antigravity/credentials.ts

@@ -0,0 +1,52 @@
+/**
+ * Credential codec for the Antigravity provider.
+ *
+ * pi persists whatever object `login` returns into auth.json and hands it back
+ * to `refreshToken`/`getApiKey` verbatim, so the Antigravity-specific extras
+ * (projectId, email) ride along as additional fields. `getApiKey` then packs
+ * everything the stream needs into the single `apiKey` string pi threads into
+ * `SimpleStreamOptions.apiKey`.
+ */
+
+import type { OAuthCredentials } from "@earendil-works/pi-ai/compat";
+
+/** Stored credential shape: pi's OAuth fields plus Antigravity extras. */
+export interface AntigravityCredentials extends OAuthCredentials {
+  /** Cloud Code Assist project resolved during login provisioning. */
+  projectId?: string;
+  /** Google account email, best-effort display metadata. */
+  email?: string;
+}
+
+/** What the stream function needs, packed into the apiKey string. */
+export interface AntigravityApiKeyPayload {
+  token: string;
+  projectId?: string;
+}
+
+export function encodeApiKey(credentials: AntigravityCredentials): string {
+  const payload: AntigravityApiKeyPayload = {
+    token: credentials.access,
+    projectId: credentials.projectId,
+  };
+  return JSON.stringify(payload);
+}
+
+export function decodeApiKey(raw: string): AntigravityApiKeyPayload {
+  try {
+    const parsed: unknown = JSON.parse(raw);
+    if (parsed !== null && typeof parsed === "object" && "token" in parsed) {
+      const token = parsed.token;
+      if (typeof token === "string") {
+        const projectId =
+          "projectId" in parsed && typeof parsed.projectId === "string"
+            ? parsed.projectId
+            : undefined;
+        return { token, projectId };
+      }
+    }
+  } catch {
+    // Not JSON: tolerate a bare access token (e.g. hand-written auth.json).
+  }
+  return { token: raw };
+}

package/extensions/ai-providers/antigravity/discovery.ts

@@ -0,0 +1,130 @@
+/**
+ * Antigravity model discovery.
+ *
+ * `POST /v1internal:fetchAvailableModels` returns a map of wire model id to
+ * metadata (reference: omp packages/catalog/src/discovery/antigravity.ts).
+ * Static models are the provider baseline. Network/protocol failures throw so
+ * createProvider can retain the last successfully persisted dynamic catalog.
+ */
+
+import type { RefreshModelsContext } from "@earendil-works/pi-ai";
+import { Type, type Static } from "typebox";
+import { Value } from "typebox/value";
+import { ensureAntigravityVersion, getAntigravityUserAgent } from "./oauth.ts";
+import {
+  ANTIGRAVITY_API_URL,
+  type AntigravityProviderModel,
+} from "./models.ts";
+import {
+  collapseAntigravityModels,
+  type AntigravityModelDefinition,
+} from "./routing.ts";
+
+const DISCOVERY_ENDPOINTS = [
+  "https://daily-cloudcode-pa.googleapis.com",
+  "https://daily-cloudcode-pa.sandbox.googleapis.com",
+] as const;
+const FETCH_AVAILABLE_MODELS_PATH = "/v1internal:fetchAvailableModels";
+
+// Reference: omp ANTIGRAVITY_DISCOVERY_DENYLIST.
+const DISCOVERY_DENYLIST: Record<string, true> = {
+  chat_20706: true,
+  chat_23310: true,
+  "gemini-2.5-pro": true,
+};
+
+const DEFAULT_CONTEXT_WINDOW = 200_000;
+const DEFAULT_MAX_TOKENS = 64_000;
+
+const DiscoveryModelSchema = Type.Object({
+  displayName: Type.Optional(Type.String()),
+  supportsImages: Type.Optional(Type.Boolean()),
+  supportsThinking: Type.Optional(Type.Boolean()),
+  maxTokens: Type.Optional(Type.Number()),
+  maxOutputTokens: Type.Optional(Type.Number()),
+  isInternal: Type.Optional(Type.Boolean()),
+});
+
+const DiscoveryResponseSchema = Type.Object({
+  models: Type.Optional(Type.Record(Type.String(), DiscoveryModelSchema)),
+});
+
+type DiscoveryResponse = Static<typeof DiscoveryResponseSchema>;
+
+type DiscoveredModel = AntigravityProviderModel & AntigravityModelDefinition;
+
+function positiveNumber(value: number | undefined, fallback: number): number {
+  return value !== undefined && Number.isFinite(value) && value > 0
+    ? value
+    : fallback;
+}
+
+function toModelDefinition(
+  id: string,
+  meta: Static<typeof DiscoveryModelSchema>,
+): DiscoveredModel {
+  const advertisedMaxTokens = positiveNumber(
+    meta.maxOutputTokens,
+    DEFAULT_MAX_TOKENS,
+  );
+  return {
+    id,
+    name: meta.displayName ?? id,
+    api: "antigravity-cloudcode",
+    provider: "google-antigravity",
+    baseUrl: ANTIGRAVITY_API_URL,
+    reasoning: meta.supportsThinking === true,
+    input: meta.supportsImages === true ? ["text", "image"] : ["text"],
+    cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
+    contextWindow: positiveNumber(meta.maxTokens, DEFAULT_CONTEXT_WINDOW),
+    maxTokens: id.toLowerCase().includes("claude")
+      ? Math.min(advertisedMaxTokens, DEFAULT_MAX_TOKENS)
+      : advertisedMaxTokens,
+  };
+}
+
+export async function fetchAntigravityModels(
+  context: RefreshModelsContext,
+): Promise<DiscoveredModel[]> {
+  if (!context.allowNetwork) return [];
+  context.signal.throwIfAborted();
+  const credential = context.credential;
+  if (!credential || credential.type !== "oauth") return [];
+  await ensureAntigravityVersion(context.signal);
+
+  for (const endpoint of DISCOVERY_ENDPOINTS) {
+    if (context.signal.aborted) break;
+    try {
+      const response = await fetch(
+        `${endpoint}${FETCH_AVAILABLE_MODELS_PATH}`,
+        {
+          method: "POST",
+          headers: {
+            Authorization: `Bearer ${credential.access}`,
+            "Content-Type": "application/json",
+            "User-Agent": getAntigravityUserAgent(),
+          },
+          body: "{}",
+          signal: context.signal,
+        },
+      );
+      if (!response.ok) continue;
+      const parsed = Value.Parse(
+        DiscoveryResponseSchema,
+        await response.json(),
+      ) as DiscoveryResponse;
+      if (!parsed.models) continue;
+      const discovered = Object.entries(parsed.models)
+        .filter(
+          ([id, meta]) =>
+            !Object.hasOwn(DISCOVERY_DENYLIST, id) && meta.isInternal !== true,
+        )
+        .map(([id, meta]) => toModelDefinition(id, meta));
+      return collapseAntigravityModels(discovered);
+    } catch {
+      // Try the next endpoint; total failure must preserve the stored catalog.
+    }
+  }
+  context.signal.throwIfAborted();
+  throw new Error("Antigravity model discovery failed on all endpoints");
+}