arisa 4.0.2 → 4.0.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arisa",
-  "version": "4.0.2",
+  "version": "4.0.4",
   "description": "Telegram + Pi Agent modular assistant",
   "type": "module",
   "main": "src/index.js",

package/src/core/agent/agent-manager.js

@@ -23,6 +23,25 @@ function requiresProviderAuth(model) {
   return !isLocalBaseUrl(model?.baseUrl);
 }
 
+async function promptAndThrowOnAssistantError(session, prompt) {
+  let assistantErrorMessage = "";
+  const unsubscribe = session.subscribe((event) => {
+    if (event.type === "message_end" && event.message?.stopReason === "error") {
+      assistantErrorMessage = event.message.errorMessage || "assistant message ended with error";
+    }
+  });
+
+  try {
+    await session.prompt(prompt);
+  } finally {
+    unsubscribe();
+  }
+
+  if (assistantErrorMessage) {
+    throw new Error(assistantErrorMessage);
+  }
+}
+
 function mimeMatches(pattern, mimeType = "") {
   if (!pattern || !mimeType) return false;
   if (pattern === mimeType) return true;
@@ -72,6 +91,10 @@ export class AgentManager {
     this.pendingNewSessions.add(sessionKey);
   }
 
+  clearSessionCache(chatId) {
+    this.sessions.delete(String(chatId));
+  }
+
   createSessionManager(chatId) {
     const sessionKey = String(chatId);
     const sessionDir = getChatPiSessionsDir(sessionKey);
@@ -103,7 +126,7 @@ export class AgentManager {
       model,
       sessionManager: SessionManager.inMemory(),
     });
-    await withTimeout(session.prompt("Reply with exactly: OK"), {
+    await withTimeout(promptAndThrowOnAssistantError(session, "Reply with exactly: OK"), {
       timeoutMs: piValidationTimeoutMs,
       label: "Pi validation prompt"
     });

package/src/core/agent/auth-flow.js

@@ -46,27 +46,40 @@ export function getPiAuthStatus(config) {
   };
 }
 
-export function buildPiAuthTelegramMessage({ config, issue = null }) {
+export function buildPiAuthTelegramMessage({ config, issue = null, verified = false }) {
   const status = getPiAuthStatus(config);
-  const lines = [
-    issue
-      ? `Pi authentication needs attention for ${status.provider}/${status.model}.`
-      : `Pi authentication status for ${status.provider}/${status.model}.`
-  ];
+  let title = `Pi authentication status for ${status.provider}/${status.model}.`;
+  if (issue) {
+    title = `Pi authentication needs attention for ${status.provider}/${status.model}.`;
+  } else if (verified) {
+    title = `Pi authentication is working for ${status.provider}/${status.model}.`;
+  }
+  const lines = [title];
 
   if (issue?.kind === "invalidated-token") {
     lines.push("The provider says the current authentication token was invalidated.");
   } else if (issue?.kind === "missing-auth") {
     lines.push("Arisa could not find usable authentication for this provider.");
+  } else if (issue?.kind === "validation-failed") {
+    lines.push("Arisa could not validate the current Pi authentication.");
+  } else if (verified) {
+    lines.push(status.hasApiKey
+      ? "The configured Pi API key was accepted by the provider."
+      : "The stored auth was accepted by the provider.");
   } else {
-    lines.push(`Stored auth: ${status.hasStoredAuth ? "detected" : "not detected"}.`);
+    lines.push(`Stored auth record: ${status.hasStoredAuth ? "detected" : "not detected"}.`);
+    lines.push("This only checks whether credentials are stored, not whether the provider will accept them.");
   }
 
   if (issue?.message) {
     lines.push(`Details: ${issue.message}`);
   }
 
-  if (status.hasApiKey) {
+  if (verified) {
+    lines.push("No action needed.");
+  } else if (!issue) {
+    lines.push("Run `/auth` to validate these credentials against the provider.");
+  } else if (status.hasApiKey) {
     lines.push("A Pi API key is configured, but the provider rejected the current request. Update the key and restart Arisa.");
   } else if (status.supportsOAuth) {
     lines.push("For now, re-run `arisa --bootstrap` on the host and complete Pi login again.");
@@ -74,6 +87,8 @@ export function buildPiAuthTelegramMessage({ config, issue = null }) {
     lines.push("This provider needs a Pi API key. Re-run `arisa --bootstrap`, provide a key, and restart Arisa.");
   }
 
-  lines.push("Telegram-based renewal is not wired yet, but this /auth path is ready for that flow.");
+  if (issue) {
+    lines.push("Telegram-based renewal is not wired yet, but this /auth path is ready for that flow.");
+  }
   return lines.join("\n");
 }

package/src/transport/telegram/bot.js

@@ -529,7 +529,16 @@ export async function createTelegramBot({ config, artifactStore, toolRegistry, t
   bot.command("auth", async (ctx) => {
     const auth = await authorizeChat({ config, chatId: ctx.chat.id, saveConfig, chatMeta: getIncomingChatMeta(ctx) });
     if (!auth.ok) return;
-    await ctx.reply(buildPiAuthTelegramMessage({ config }));
+    await withTyping(ctx, async () => {
+      try {
+        await agentManager.validatePiAgent();
+        agentManager.clearSessionCache(ctx.chat.id);
+        await ctx.reply(buildPiAuthTelegramMessage({ config, verified: true }));
+      } catch (error) {
+        const issue = getPiAuthIssue(error) || { kind: "validation-failed", message: getErrorMessage(error) };
+        await ctx.reply(buildPiAuthTelegramMessage({ config, issue }));
+      }
+    });
   });
 
   bot.on("message", async (ctx) => {