pi-clinepass 0.1.1 → 0.1.3

package/CHANGELOG.md

@@ -2,6 +2,23 @@
 
 All notable changes to this project will be documented in this file.
 
+## 0.1.3 - 2026-08-31
+
+- Corrected model input modalities: `glm-5.3` and `deepseek-v4-flash` are text-only, `mimo-v2.5` and `qwen3.8-max` accept images
+
+## 0.1.2 - 2026-08-30
+
+- New paid model: `cline-pass/glm-5.3-flash` ($0.15/$0.50/$0.03)
+- New free model: `cline-free/longcat-2.0`
+- Model picker shows prices
+- Price calibration via `/clinepass` measures real billing and updates the whole panel; fatal errors abort the run
+- `/clinepass` runs in a centered modal: dashboard (prices, plan sidebar) and calibration (live per-model progress, esc-esc cancel)
+- Prices stored in `clinepass-prices.json`, seeded on install, synced per release
+- Gateway thinking-stream corruption repaired
+- pi's built-in cost estimate off for ClinePass (the footer meter is the single cost display, turn cost includes every tool-calling round)
+- Free-route headers applied to every free model
+- 403 on free routes classified as route gate, not subscription
+
 ## 0.1.1 - 2026-08-27
 
 - Catalog: `stealth/ox-alpha` is now `z-ai/glm-5.3-flash` (renamed)

package/README.md

@@ -2,7 +2,7 @@
 
 # pi-clinepass
 
-**ClinePass provider for [pi](https://pi.dev) coding agent**
+**ClinePass for [pi](https://pi.dev) coding agent**
 
 Dollar-based limits, live cost tracking, and plan cap reporting.
 
@@ -25,9 +25,10 @@ Dollar-based limits, live cost tracking, and plan cap reporting.
 
 ## Highlights
 
-- **16 Models**: 13 ClinePass models on a dollar-based limit system plus 3 free tier models
+- **18 Models**: 14 ClinePass models on a dollar-based limit system plus 4 free tier models
 - **Live Status Meter**: Per-turn and session cost directly in the pi footer
 - **Plan Utilization**: 5-hour, weekly, and monthly caps tracked via `/clinepass`
+- **Price Calibration**: measure real gateway billing from `/clinepass` to keep displayed prices honest
 - **Simple Auth**: One-time login via Cline CLI, browser, or API key
 
 ---
@@ -68,7 +69,7 @@ Select **ClinePass** to choose your sign-in method:
 
 ### 2. Select a Model
 
-Pick any model using the interactive selector:
+Pick any model using the interactive selector — prices are shown right in the picker:
 
 ```
 /model
@@ -84,6 +85,10 @@ View the live rate sheet and plan limit utilization anytime:
 /clinepass
 ```
 
+The command opens a menu: the dashboard shows model rates and plan utilization
+in a centered modal, or run **price calibration** to measure real gateway
+billing and update the whole panel (uses ~5-10% of the 5-hour quota).
+
 <div align="center">
   <img src="https://raw.githubusercontent.com/fifidayone/pi-clinepass/main/assets/report.png" alt="ClinePass report with pricing and plan limits" width="620">
 </div>

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "pi-clinepass",
-  "version": "0.1.1",
-  "description": "ClinePass provider for pi — static measured-price catalog, server-truth billing meter, free models",
+  "version": "0.1.3",
+  "description": "ClinePass for pi — static measured-price catalog, server-truth billing meter, free models",
   "keywords": [
     "ai",
     "cline",
@@ -37,7 +37,8 @@
   },
   "peerDependencies": {
     "@earendil-works/pi-ai": "*",
-    "@earendil-works/pi-coding-agent": "*"
+    "@earendil-works/pi-coding-agent": "*",
+    "@earendil-works/pi-tui": "*"
   },
   "devDependencies": {
     "@types/node": "^26.3.0",

package/src/auth.ts

@@ -178,7 +178,10 @@ export function resolvePiStoredCredential(options: AuthOptions = {}): ClineAuthC
  * produced rotated tokens — if the server rotates single-use refresh
  * tokens, discarding the new one would leave pi's stored credential dead
  * and force a re-login. Waits for pi's lock file (`<auth.json>.lock`, held
- * by proper-lockfile while pi writes) to clear before merging.
+ * by proper-lockfile while pi writes) to clear before merging, then verifies
+ * after writing: the meter refresh and pi's own chat-path refresh can fire at
+ * the same near-expiry moment, so if pi rewrote the file in between, the
+ * merge is redone once on top of the newer content instead of dropping it.
  */
 export async function persistOAuthCredential(
   credential: OAuthCredentials,
@@ -187,26 +190,35 @@ export async function persistOAuthCredential(
   const { homeDir, readFile, fileExists, writeFile } = resolveOptions(options);
   const authPath = join(homeDir(), ".pi", "agent", "auth.json");
   const lockPath = `${authPath}.lock`;
+  const entry = {
+    type: "oauth",
+    access: credential.access,
+    refresh: credential.refresh,
+    expires: credential.expires,
+  };
 
-  for (let attempt = 0; attempt < 20 && fileExists(lockPath); attempt++) {
-    await new Promise((resolve) => setTimeout(resolve, 100));
-  }
+  for (let pass = 0; pass < 2; pass++) {
+    for (let attempt = 0; attempt < 20 && fileExists(lockPath); attempt++) {
+      await new Promise((resolve) => setTimeout(resolve, 100));
+    }
+
+    const current = fileExists(authPath) ? readFile(authPath) : "{}";
+    const parsed: unknown = current.trim() ? JSON.parse(current) : {};
+    if (!isRecord(parsed)) {
+      throw new Error("auth.json is not a JSON object");
+    }
+    const serialized = JSON.stringify({ ...parsed, clinepass: entry }, null, 2);
+    writeFile(authPath, serialized);
 
-  const current = fileExists(authPath) ? readFile(authPath) : "{}";
-  const parsed: unknown = current.trim() ? JSON.parse(current) : {};
-  if (!isRecord(parsed)) {
-    throw new Error("auth.json is not a JSON object");
+    let contended = false;
+    for (let attempt = 0; attempt < 20 && fileExists(lockPath); attempt++) {
+      contended = true;
+      await new Promise((resolve) => setTimeout(resolve, 100));
+    }
+    // Done only when pi never contended and the file still holds exactly what
+    // we wrote; otherwise loop once more and merge over the newer content.
+    if (!contended && (!fileExists(authPath) || readFile(authPath) === serialized)) return;
   }
-  const next = {
-    ...parsed,
-    clinepass: {
-      type: "oauth",
-      access: credential.access,
-      refresh: credential.refresh,
-      expires: credential.expires,
-    },
-  };
-  writeFile(authPath, JSON.stringify(next, null, 2));
 }
 
 // ─── Login chain ──────────────────────────────────────────────────────────