pi-hypercharm-provider 1.3.40 → 1.3.42

package/.github/workflows/update-models.yml

@@ -0,0 +1,60 @@
+name: Update models
+
+on:
+  schedule:
+    - cron: "7 0 * * *" # 07:07 Asia/Ho_Chi_Minh
+  workflow_dispatch:
+
+# Publishing uses npm Trusted Publishing (OIDC) bound to this workflow file, so
+# no npm token is stored. A version pushed while publishing was unavailable is
+# published by the next run that finds it missing from npm.
+permissions:
+  contents: write
+  id-token: write
+
+concurrency:
+  group: update-models
+  cancel-in-progress: false
+
+jobs:
+  update:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@v5
+
+      - uses: actions/setup-node@v5
+        with:
+          node-version: 24
+
+      - name: Fetch the model catalog
+        env:
+          HYPERCHARM_API_KEY: ${{ secrets.HYPERCHARM_API_KEY }}
+        run: node scripts/update-models.js
+
+      - name: Commit, bump and push
+        run: |
+          if git diff --quiet; then
+            echo "No model changes."
+            exit 0
+          fi
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git add -A
+          git commit -m "feat: update hypercharm models from API"
+          npm version patch --no-git-tag-version
+          version=$(node -p "require('./package.json').version")
+          git commit -am "chore(release): v$version"
+          git push origin HEAD:main
+
+      - name: Publish to npm if this version is missing
+        run: |
+          name=$(node -p "require('./package.json').name")
+          version=$(node -p "require('./package.json').version")
+          if npm view "$name@$version" version >/dev/null 2>&1; then
+            echo "$name@$version is already on npm."
+            exit 0
+          fi
+          # Trusted publishing needs npm 11.5.1 or newer.
+          npm install --global npm@latest
+          npm publish --access public --provenance

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Changelog
 
+## 1.3.42
+
+- Pin Pi SDK development dependencies to 1.2.0 while retaining wildcard host peers; verify real manifest loading, lifecycle and native/bundled Pi hosts offline.
+
+## 1.3.41
+
+- `/login` while the session-start catalog revalidation is still in flight now fetches the new account's catalog right away: the forced refresh aborts the old-credential revalidation and waits for it to release the sync lock instead of skipping as "locked" until the next session start.
+
 ## 1.3.40
 
 - Quiet startup sync: background `/v1/provider` revalidation runs only with credentials, only when the disk cache is older than 1 hour (`PI_PROVIDER_SYNC_TTL_MS`, `0` = always), missing, or fetched with different credentials, and only in one pi process at a time (lock file next to the cache). Failed refreshes back off for 5 minutes; sessions that skip adopt a cache refreshed by another process. A completed `/login` forces a revalidation.

package/index.ts

@@ -526,6 +526,8 @@ let cachedApiKey: string | undefined;
 // Stable identity behind cachedApiKey for the quiet-sync fingerprints.
 let cachedSyncIdentity: string | undefined;
 let revalidateAbort: AbortController | null = null;
+// The in-flight catalog revalidation (session start or /login); it never rejects.
+let modelSync: Promise<void> = Promise.resolve();
 
 const AUTH_PATH = path.join(getAgentDir(), "auth.json");
 
@@ -1338,7 +1340,12 @@ export default function (pi: ExtensionAPI) {
 		lastCreditsFetchAt = 0;
 		const epoch = statusEpoch;
 		setTimeout(() => {
-			void syncModels(epoch, revalidateAbort?.signal, true).catch(() => {});
+			// The new credentials supersede an in-flight revalidation, which must
+			// release its sync lock first, or this forced refresh would skip as "locked".
+			revalidateAbort?.abort();
+			revalidateAbort = new AbortController();
+			const signal = revalidateAbort.signal;
+			modelSync = modelSync.then(() => (signal.aborted ? undefined : syncModels(epoch, signal, true))).catch(() => {});
 		}, 0);
 	};
 
@@ -1370,7 +1377,7 @@ export default function (pi: ExtensionAPI) {
 		// the provider API. Nothing is awaited and every rejection is swallowed.
 		// A key-resolution failure is surfaced (it used to vanish), then we keep
 		// serving the embedded/cached catalog.
-		void resolveApiKey(ctx.modelRegistry)
+		modelSync = resolveApiKey(ctx.modelRegistry)
 			.catch((err) => {
 				notifier.warn(`Unable to resolve HyperCharm credentials: ${describeError(err)} — serving cached/embedded models.`);
 			})

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-hypercharm-provider",
-  "version": "1.3.40",
+  "version": "1.3.42",
   "description": "HyperCharm provider extension for pi - Access DeepSeek, GLM, Kimi, Qwen, MiniMax, Gemma, and GPT-OSS models through the Charm Hyper API",
   "type": "module",
   "main": "index.ts",
@@ -31,17 +31,17 @@
     "gpt-oss"
   ],
   "peerDependencies": {
-    "@earendil-works/pi-tui": "*",
     "@earendil-works/pi-ai": "*",
-    "@earendil-works/pi-coding-agent": "*"
+    "@earendil-works/pi-coding-agent": "*",
+    "@earendil-works/pi-tui": "*"
   },
   "overrides": {
     "brace-expansion": "5.0.12"
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "1.1.0",
-    "@earendil-works/pi-coding-agent": "1.1.0",
-    "@earendil-works/pi-tui": "1.1.0",
+    "@earendil-works/pi-ai": "1.2.0",
+    "@earendil-works/pi-coding-agent": "1.2.0",
+    "@earendil-works/pi-tui": "1.2.0",
     "@types/node": "^24.10.1",
     "jiti": "2.7.0",
     "typescript": "6.0.3",
@@ -53,5 +53,9 @@
     "extensions": [
       "./index.ts"
     ]
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/monotykamary/pi-hypercharm-provider.git"
   }
 }

package/scripts/test-pi-compat.mjs

@@ -1,4 +1,4 @@
-// Offline Pi 1.1.0 manifest, lifecycle, catalog and real transport regression.
+// Offline Pi 1.2.0 manifest, lifecycle, catalog and real transport regression.
 import assert from 'node:assert/strict';
 import { mkdtemp, readFile, rm } from 'node:fs/promises';
 import { tmpdir } from 'node:os';
@@ -18,13 +18,13 @@ try {
   const hostEntry = process.env.PI1_HOST_ENTRY === 'bundle' ? 'dist/bundle/index.js' : 'dist/index.js';
   const sdk = await import(host ? pathToFileURL(join(host, hostEntry)).href : '@earendil-works/pi-coding-agent');
   const { createAgentSession, DefaultResourceLoader, ModelRuntime, SessionManager, SettingsManager, VERSION } = sdk;
-  assert.equal(VERSION, '1.1.0', 'executing host version');
-  assert.equal((await import('@earendil-works/pi-coding-agent')).VERSION, '1.1.0', 'development host version');
+  assert.equal(VERSION, '1.2.0', 'executing host version');
+  assert.equal((await import('@earendil-works/pi-coding-agent')).VERSION, '1.2.0', 'development host version');
   const manifest = JSON.parse(await readFile(join(root, 'package.json'), 'utf8'));
   for (const name of ['@earendil-works/pi-ai', '@earendil-works/pi-agent-core', '@earendil-works/pi-coding-agent', '@earendil-works/pi-tui', 'typebox']) {
     assert.equal(manifest.dependencies?.[name], undefined, `${name}: do not bundle host packages`);
     if (manifest.peerDependencies?.[name] !== undefined) assert.equal(manifest.peerDependencies[name], '*');
-    if (name !== 'typebox' && manifest.devDependencies?.[name]) assert.equal(manifest.devDependencies[name], '1.1.0');
+    if (name !== 'typebox' && manifest.devDependencies?.[name]) assert.equal(manifest.devDependencies[name], '1.2.0');
   }
   const settingsManager = SettingsManager.inMemory({ packages: [root], compaction: { enabled: false }, retry: { enabled: false } });
   const resourceLoader = new DefaultResourceLoader({ cwd: home, agentDir: home, settingsManager,

package/tests/quiet-startup-sync.test.ts

@@ -363,6 +363,33 @@ describe("HyperCharm quiet sync variants", () => {
     expect(new Headers(fetch.mock.calls[0][1]?.headers).get("Authorization")).toBe("Bearer fresh-access");
   });
 
+  it("fetches the new account's catalog when /login races the session revalidation holding the lock", async () => {
+    setupHome();
+    writeCache(2 * HOUR);
+    vi.doMock("../oauth", () => ({
+      USER_AGENT: "pi-hypercharm-provider/test",
+      loginHypercharm: async () => ({ type: "oauth", refresh: "fresh-refresh", access: "fresh-access", expires: Date.now() + HOUR }),
+      refreshHypercharmToken: async (c: unknown) => c,
+    }));
+    let release!: () => void;
+    const fetch = stubFetch((_url, init) => new Promise<Response>((resolve, reject) => {
+      const signal = init?.signal;
+      signal?.addEventListener("abort", () => reject(signal.reason));
+      release = () => resolve(liveModelsResponse());
+    }));
+    const ext = await loadExtension();
+    await ext.startSession();
+    await vi.waitFor(() => expect(catalogCalls(fetch)).toHaveLength(1)); // session sync in flight, lock held
+
+    await ext.registrations[0].oauth.login({});
+    await vi.waitFor(() => expect(catalogCalls(fetch)).toHaveLength(2));
+    release();
+    await vi.waitFor(() => expect(hasLiveModel(ext.registrations.at(-1))).toBe(true));
+    expect(new Headers(catalogCalls(fetch)[1][1]?.headers).get("Authorization")).toBe("Bearer fresh-access");
+    expect(JSON.parse(fs.readFileSync(syncMetaPath(cachePath), "utf8")).keyFingerprint).toBe(keyFingerprint("oauth:fresh-refresh"));
+    expect(fs.existsSync(syncLockPath(cachePath))).toBe(false);
+  });
+
   it("skips the startup account poll without a UI (print mode, child agents)", async () => {
     setupHome();
     writeCache(10 * 60 * 1000);