pi-hypercharm-provider 1.3.41 → 1.3.43

package/.github/workflows/publish.yml

@@ -0,0 +1,114 @@
+name: Publish
+
+# Releases of pi-hypercharm-provider go out from here, and only from here.
+#
+#   1. Bump "version" in package.json (the `chore(release): X.Y.Z` commit).
+#   2. Push it to main. This workflow publishes every version that npm does
+#      not have yet; any other push is a no-op.
+#
+# Run it from the Actions tab to retry a failed release, or tick "dry_run" to
+# build, check and pack without publishing.
+#
+# Auth is npm Trusted Publishing (OIDC): npm trusts this file, so no npm token
+# is stored anywhere. Registered once with
+#   npm trust github pi-hypercharm-provider --repo monotykamary/pi-hypercharm-provider --file publish.yml --allow-publish
+#
+# Bun installs and packs exactly as `bun publish` does; npm uploads the
+# tarballs because only the npm CLI speaks trusted publishing.
+
+on:
+  push:
+    branches: [main]
+    paths: [package.json]
+  workflow_dispatch:
+    inputs:
+      dry_run:
+        description: Build, check and pack, but do not publish
+        type: boolean
+        default: false
+
+permissions:
+  contents: read
+  id-token: write
+
+concurrency:
+  group: publish
+  cancel-in-progress: false
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    timeout-minutes: 45
+    steps:
+      - uses: actions/checkout@v5
+
+      - uses: actions/setup-node@v5
+        with:
+          node-version: 24
+
+      - uses: oven-sh/setup-bun@v2
+
+      - name: Find versions npm does not have
+        id: release
+        env:
+          DRY_RUN: ${{ inputs.dry_run }}
+        run: |
+          specs=$(
+          node -p "const p = require('./package.json'); p.name + '@' + p.version"
+          )
+          missing=""
+          for spec in $specs; do
+            # npm runs from outside the checkout so the repo's devEngines do not apply.
+            if (cd "$RUNNER_TEMP" && npm view "$spec" version >/dev/null 2>&1); then
+              echo "$spec is already on npm"
+            else
+              missing="$missing $spec"
+            fi
+          done
+          if [ "$DRY_RUN" = "true" ]; then
+            mode=dry-run
+          elif [ -n "$missing" ]; then
+            mode=publish
+            echo "::notice::Publishing$missing"
+          else
+            mode=skip
+            echo "::notice::Nothing to publish"
+          fi
+          echo "mode=$mode" >> "$GITHUB_OUTPUT"
+
+      - name: Install dependencies
+        if: steps.release.outputs.mode != 'skip'
+        run: bun install --frozen-lockfile
+
+      - name: Check
+        if: steps.release.outputs.mode != 'skip'
+        run: bun run check
+
+      - name: Pack
+        if: steps.release.outputs.mode != 'skip'
+        run: |
+          bun run --if-present prepublishOnly
+          bun pm pack --destination "$RUNNER_TEMP/pack"
+
+      - name: Publish
+        if: steps.release.outputs.mode != 'skip'
+        env:
+          MODE: ${{ steps.release.outputs.mode }}
+        run: |
+          # Trusted publishing needs npm 11.5.1 or newer.
+          npm install --global npm@latest
+          cd "$RUNNER_TEMP"
+          # ./ keeps npm from reading pack/name.tgz as a GitHub repo shorthand.
+          for tarball in ./pack/*.tgz; do
+            spec=$(tar -xOzf "$tarball" package/package.json | node -p "const p = JSON.parse(require('fs').readFileSync(0, 'utf8')); p.name + '@' + p.version")
+            echo "::group::$spec"
+            tar -tzf "$tarball"
+            echo "::endgroup::"
+            if [ "$MODE" = "dry-run" ]; then
+              echo "Dry run: not publishing $spec"
+            elif npm view "$spec" version >/dev/null 2>&1; then
+              echo "$spec is already on npm"
+            else
+              npm publish "$tarball" --access public --provenance
+            fi
+          done

package/.github/workflows/update-models.yml

@@ -0,0 +1,55 @@
+name: Update models
+
+on:
+  schedule:
+    - cron: "7 0 * * *" # 07:07 Asia/Ho_Chi_Minh
+  workflow_dispatch:
+
+# This workflow only syncs the catalog and bumps the version; publish.yml does
+# the releasing. It publishes any version npm does not have yet, so a release
+# that failed earlier goes out with the next hand-off.
+permissions:
+  contents: write
+  actions: write
+
+concurrency:
+  group: update-models
+  cancel-in-progress: false
+
+jobs:
+  update:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@v5
+
+      - uses: actions/setup-node@v5
+        with:
+          node-version: 24
+
+      - name: Fetch the model catalog
+        env:
+          HYPERCHARM_API_KEY: ${{ secrets.HYPERCHARM_API_KEY }}
+        run: node scripts/update-models.js
+
+      - name: Commit, bump and push
+        run: |
+          if git diff --quiet; then
+            echo "No model changes."
+            exit 0
+          fi
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git add -A
+          git commit -m "feat: update hypercharm models from API"
+          npm version patch --no-git-tag-version
+          version=$(node -p "require('./package.json').version")
+          git commit -am "chore(release): v$version"
+          git push origin HEAD:main
+
+      # Pushes made with GITHUB_TOKEN do not start other workflows, so hand the
+      # release to publish.yml explicitly.
+      - name: Hand off to publish.yml
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: gh workflow run publish.yml --ref main

package/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 1.3.42
+
+- Pin Pi SDK development dependencies to 1.2.0 while retaining wildcard host peers; verify real manifest loading, lifecycle and native/bundled Pi hosts offline.
+
 ## 1.3.41
 
 - `/login` while the session-start catalog revalidation is still in flight now fetches the new account's catalog right away: the forced refresh aborts the old-credential revalidation and waits for it to release the sync lock instead of skipping as "locked" until the next session start.

package/README.md

@@ -20,7 +20,7 @@ Run `bun run test:pi` for offline manifest, catalog, lifecycle and streaming che
 
 ## Features
 
-- **23+ AI Models** including DeepSeek V4 Flash/Pro, GLM 5/5.1, Kimi K2.5/K2.6, Qwen3.6/3.7, MiniMax M2.7, Gemma 4, GPT-OSS, and Llama
+- **24+ AI Models** including DeepSeek V4 Flash/Pro, GLM 5/5.1, Kimi K2.5/K2.6, Qwen3.6/3.7, MiniMax M2.7, Gemma 4, GPT-OSS, and Llama
 - **DeepSeek Native Thinking** — Uses the `deepseek` thinking format for Charm Hyper requests, with native `reasoning_effort` on models that publish levels
 - **OpenAI-compatible API** via Charm Hyper's `/v1/chat/completions` endpoint
 - **OAuth Device Flow** — sign in with `/login` under the `hypercharm` provider (independent of the official provider's `hyper` registration)
@@ -48,6 +48,7 @@ Run `bun run test:pi` for offline manifest, catalog, lifecycle and streaming che
 | Kimi K3 | Text + Image | 1.0M | 16K | $3.27 | $16.33 |
 | MiniMax M2.7 | Text | 262K | 7K | $0.48 | $1.85 |
 | MiniMax M3 | Text + Image | 512K | 512K | $0.33 | $1.31 |
+| Prism | Text + Image | 1.0M | 16K | $3.27 | $16.33 |
 | Qwen3.7-Flash | Text + Image | 1.0M | 64K | $0.20 | $0.80 |
 | Qwen3.7-Max | Text | 1.0M | 64K | $2.50 | $7.50 |
 | Qwen3.7-Plus | Text + Image | 1.0M | 64K | $1.20 | $4.80 |

package/models.json

@@ -421,6 +421,29 @@
       "maxTokensField": "max_tokens"
     }
   },
+  {
+    "id": "prism",
+    "name": "Prism",
+    "reasoning": false,
+    "input": [
+      "text",
+      "image"
+    ],
+    "cost": {
+      "input": 3.2664,
+      "output": 16.332,
+      "cacheRead": 0.32664,
+      "cacheWrite": 0
+    },
+    "contextWindow": 1000000,
+    "maxTokens": 16000,
+    "compat": {
+      "supportsStore": false,
+      "supportsReasoningEffort": false,
+      "thinkingFormat": "deepseek",
+      "maxTokensField": "max_tokens"
+    }
+  },
   {
     "id": "qwen3.7-flash",
     "name": "Qwen3.7-Flash",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-hypercharm-provider",
-  "version": "1.3.41",
+  "version": "1.3.43",
   "description": "HyperCharm provider extension for pi - Access DeepSeek, GLM, Kimi, Qwen, MiniMax, Gemma, and GPT-OSS models through the Charm Hyper API",
   "type": "module",
   "main": "index.ts",
@@ -31,17 +31,17 @@
     "gpt-oss"
   ],
   "peerDependencies": {
-    "@earendil-works/pi-tui": "*",
     "@earendil-works/pi-ai": "*",
-    "@earendil-works/pi-coding-agent": "*"
+    "@earendil-works/pi-coding-agent": "*",
+    "@earendil-works/pi-tui": "*"
   },
   "overrides": {
     "brace-expansion": "5.0.12"
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "1.1.0",
-    "@earendil-works/pi-coding-agent": "1.1.0",
-    "@earendil-works/pi-tui": "1.1.0",
+    "@earendil-works/pi-ai": "1.2.0",
+    "@earendil-works/pi-coding-agent": "1.2.0",
+    "@earendil-works/pi-tui": "1.2.0",
     "@types/node": "^24.10.1",
     "jiti": "2.7.0",
     "typescript": "6.0.3",
@@ -53,5 +53,9 @@
     "extensions": [
       "./index.ts"
     ]
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/monotykamary/pi-hypercharm-provider.git"
   }
 }

package/scripts/test-pi-compat.mjs

@@ -1,4 +1,4 @@
-// Offline Pi 1.1.0 manifest, lifecycle, catalog and real transport regression.
+// Offline Pi 1.2.0 manifest, lifecycle, catalog and real transport regression.
 import assert from 'node:assert/strict';
 import { mkdtemp, readFile, rm } from 'node:fs/promises';
 import { tmpdir } from 'node:os';
@@ -18,13 +18,13 @@ try {
   const hostEntry = process.env.PI1_HOST_ENTRY === 'bundle' ? 'dist/bundle/index.js' : 'dist/index.js';
   const sdk = await import(host ? pathToFileURL(join(host, hostEntry)).href : '@earendil-works/pi-coding-agent');
   const { createAgentSession, DefaultResourceLoader, ModelRuntime, SessionManager, SettingsManager, VERSION } = sdk;
-  assert.equal(VERSION, '1.1.0', 'executing host version');
-  assert.equal((await import('@earendil-works/pi-coding-agent')).VERSION, '1.1.0', 'development host version');
+  assert.equal(VERSION, '1.2.0', 'executing host version');
+  assert.equal((await import('@earendil-works/pi-coding-agent')).VERSION, '1.2.0', 'development host version');
   const manifest = JSON.parse(await readFile(join(root, 'package.json'), 'utf8'));
   for (const name of ['@earendil-works/pi-ai', '@earendil-works/pi-agent-core', '@earendil-works/pi-coding-agent', '@earendil-works/pi-tui', 'typebox']) {
     assert.equal(manifest.dependencies?.[name], undefined, `${name}: do not bundle host packages`);
     if (manifest.peerDependencies?.[name] !== undefined) assert.equal(manifest.peerDependencies[name], '*');
-    if (name !== 'typebox' && manifest.devDependencies?.[name]) assert.equal(manifest.devDependencies[name], '1.1.0');
+    if (name !== 'typebox' && manifest.devDependencies?.[name]) assert.equal(manifest.devDependencies[name], '1.2.0');
   }
   const settingsManager = SettingsManager.inMemory({ packages: [root], compaction: { enabled: false }, retry: { enabled: false } });
   const resourceLoader = new DefaultResourceLoader({ cwd: home, agentDir: home, settingsManager,