pinomad 0.8.0 → 0.9.1

package/dist/{chunk-jjtr7fr5.js → chunk-n8cz7skh.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   serveWebClient
-} from "./chunk-r6w5aqkw.js";
+} from "./chunk-wb10efyq.js";
 import {
   Published,
   constantValue,
@@ -21,7 +21,7 @@ import {
   readServerBinding,
   readServerConfig,
   resolveRelayOrigin
-} from "./chunk-r2ssa2ex.js";
+} from "./chunk-5gp9svzs.js";
 import {
   relayHostId,
   relayWsBase,
@@ -30,7 +30,7 @@ import {
 import {
   packagedVersion,
   webRoot
-} from "./chunk-p56xf1r8.js";
+} from "./chunk-fqgvf8v0.js";
 import {
   ATTACHMENT_TTL_MS,
   INVALID_FRAME_CLOSE_CODE,
@@ -153,7 +153,8 @@ var QuestionDoc = defineDoc({
   scope: "conversation",
   history: "latest",
   fork: "initial",
-  initial: () => ({ requests: [] })
+  initial: () => ({ requests: [] }),
+  checkpointWhen: () => false
 });
 var resolutionOf = (value, requestId) => value?.requests.find((request) => request.id === requestId)?.resolution;
 var createWait = (tx, owner, requestId) => tx.createTask(QuestionWait, { requestId }, { ownership: { kind: "task", taskId: owner } });
@@ -472,7 +473,8 @@ var RoleDoc = defineDoc2({
   scope: "conversation",
   history: "rewindable",
   fork: "asOf",
-  initial: () => ({})
+  initial: () => ({}),
+  checkpointWhen: () => false
 });
 
 // apps/host/src/organization.ts
@@ -480,7 +482,8 @@ var IndexDoc = defineDoc3({
   kind: "pinomad.index",
   version: 1,
   scope: "session",
-  initial: () => ({ projects: [], conversations: [] })
+  initial: () => ({ projects: [], conversations: [] }),
+  checkpointWhen: () => false
 });
 async function ensureIndex(harness, context) {
   await harness.commit(async (tx) => {
@@ -1273,7 +1276,8 @@ var SubagentDoc = defineDoc4({
   scope: "conversation",
   history: "latest",
   fork: "initial",
-  initial: () => ({})
+  initial: () => ({}),
+  checkpointWhen: () => false
 });
 
 // apps/host/src/extensions/subagent.ts
@@ -1423,7 +1427,8 @@ var TodoDoc = defineDoc5({
   scope: "conversation",
   history: "rewindable",
   fork: "asOf",
-  initial: () => ({ items: [] })
+  initial: () => ({ items: [] }),
+  checkpointWhen: () => false
 });
 var todoWrite = defineTool3({
   name: "todo_write",
@@ -1760,6 +1765,7 @@ function nodeRtcFactory(loaded) {
       let settled = false;
       let deadline;
       let pollTimer;
+      let commitTimer;
       let resolveAnswer;
       let rejectAnswer;
       const answer = new Promise((resolve4, reject) => {
@@ -1782,6 +1788,10 @@ function nodeRtcFactory(loaded) {
           timers.clearTimeout(pollTimer);
           pollTimer = undefined;
         }
+        if (commitTimer !== undefined) {
+          timers.clearTimeout(commitTimer);
+          commitTimer = undefined;
+        }
       };
       const fail = (error) => {
         if (settled)
@@ -1794,12 +1804,18 @@ function nodeRtcFactory(loaded) {
         rejectAnswer(error);
       };
       const commit = () => {
-        if (settled || localSdp === undefined)
+        if (settled)
+          return;
+        const local = pc.localDescription();
+        if (local !== null)
+          localSdp = local.sdp;
+        if (localSdp === undefined)
           return;
         for (const candidate of sdpCandidates(localSdp))
           addCandidate(candidate);
         if (candidates.size === 0) {
-          fail(new Error("no usable local ICE candidates"));
+          if (deadlineReached)
+            fail(new Error("no usable local ICE candidates"));
           return;
         }
         settled = true;
@@ -1807,18 +1823,37 @@ function nodeRtcFactory(loaded) {
         resolveAnswer(withRtcCandidates(localSdp, [...candidates]));
       };
       const maybeCommit = () => {
+        if (commitTimer !== undefined && !deadlineReached)
+          return;
         if (localSdp !== undefined && (gatheringDone || deadlineReached))
           commit();
       };
+      const scheduleCommit = () => {
+        if (settled)
+          return;
+        if (commitTimer !== undefined)
+          timers.clearTimeout(commitTimer);
+        commitTimer = timers.setTimeout(() => {
+          commitTimer = undefined;
+          maybeCommit();
+        }, 0);
+      };
       pc.onLocalDescription((sdp) => {
         localSdp = sdp;
-        maybeCommit();
+        if (gatheringDone)
+          scheduleCommit();
+        else
+          maybeCommit();
+      });
+      pc.onLocalCandidate((candidate) => {
+        addCandidate(candidate);
+        if (gatheringDone)
+          scheduleCommit();
       });
-      pc.onLocalCandidate((candidate) => addCandidate(candidate));
       pc.onGatheringStateChange((state) => {
         if (state === "complete") {
           gatheringDone = true;
-          maybeCommit();
+          scheduleCommit();
         }
       });
       pc.onStateChange((state) => {
@@ -1855,7 +1890,10 @@ function nodeRtcFactory(loaded) {
         const local = pc.localDescription();
         if (local !== null) {
           localSdp = local.sdp;
-          maybeCommit();
+          if (gatheringDone)
+            scheduleCommit();
+          else
+            maybeCommit();
         }
         if (!settled)
           pollTimer = timers.setTimeout(poll, 25);
@@ -2699,7 +2737,8 @@ var TitleDoc = defineDoc6({
   scope: "conversation",
   history: "latest",
   fork: "initial",
-  initial: () => ({})
+  initial: () => ({}),
+  checkpointWhen: () => false
 });
 
 // apps/host/src/auto-title.ts
@@ -2875,7 +2914,8 @@ var PushDoc = defineDoc7({
   version: 2,
   scope: "session",
   initial: () => ({ registrations: [] }),
-  migrate: () => ({ registrations: [] })
+  migrate: () => ({ registrations: [] }),
+  checkpointWhen: () => false
 });
 var APNS_TOKEN_PATTERN = /^(?:[0-9a-f]{2})+$/;
 var APNS_TOKEN_MAX_CHARS = 256;
@@ -3331,10 +3371,7 @@ async function startGateway(options) {
     return parsed.endpointSet;
   };
   const currentEndpointSet = () => checkedEndpointSet(currentAdvertisement().endpoints);
-  const register = (connection, devicePublicKey, joined) => {
-    if (joined?.source === "account") {
-      broadcast("info", `New device "${joined.name}" joined through your account`);
-    }
+  const register = (connection, devicePublicKey) => {
     const client = new GatewayClient(connection, options, conversations, fileLister, skillLister, imageVariants, {
       devicePublicKey,
       rtcHello,
@@ -6212,7 +6249,7 @@ var CUSTOM_ID = /^[a-z0-9][a-z0-9-]{0,63}$/;
 var LOGIN_TIMEOUT_MS = 15 * 60000;
 var FINISHED_LOGIN_TTL_MS = 60000;
 var ENDPOINT_TIMEOUT_MS = 1e4;
-var sameModel = (a, b) => a.provider === b.provider && a.modelId === b.modelId && a.name === b.name && a.contextWindow === b.contextWindow && sameList(a.thinkingLevels, b.thinkingLevels, (x, y) => x === y);
+var sameModel = (a, b) => a.provider === b.provider && a.modelId === b.modelId && a.name === b.name && a.contextWindow === b.contextWindow && a.images === b.images && sameList(a.thinkingLevels, b.thinkingLevels, (x, y) => x === y);
 var sameLogin = (a, b) => a.providerId === b.providerId && a.name === b.name && a.kind === b.kind && a.subscription === b.subscription;
 async function readModelsFile(path) {
   let text;
@@ -6483,6 +6520,8 @@ async function openModelAuth(runtime, options) {
       const ids = [...new Set(input.models.map((model) => model.trim()).filter((model) => model !== ""))];
       if (ids.length === 0)
         throw new Error("Add at least one model");
+      const key = typeof apiKey === "string" && apiKey !== "" ? apiKey : apiKey !== null && custom.has(input.id) ? (await runtime.getAuth(input.id))?.auth.apiKey : undefined;
+      const reported = new Map((await fetchEndpointModels(input.api, input.baseUrl, key).catch(() => [])).map((model) => [model.id, model]));
       await updateModelsFile((file) => {
         const previous = file.providers[input.id] ?? {};
         const previousModels = new Map((Array.isArray(previous.models) ? previous.models : []).map((model) => [model.id, model]));
@@ -6491,7 +6530,7 @@ async function openModelAuth(runtime, options) {
           name,
           api: input.api,
           baseUrl: input.baseUrl,
-          models: ids.map((id) => previousModels.get(id) ?? { id })
+          models: ids.map((id) => ({ ...reported.get(id), ...previousModels.get(id) ?? { id } }))
         };
       });
       await runtime.refresh({ providers: [input.id], allowNetwork: false });
@@ -6518,7 +6557,7 @@ async function openModelAuth(runtime, options) {
       if (key === undefined && input.providerId !== undefined && custom.has(input.providerId)) {
         key = (await runtime.getAuth(input.providerId))?.auth.apiKey;
       }
-      return fetchEndpointModels(input.api, input.baseUrl, key);
+      return (await fetchEndpointModels(input.api, input.baseUrl, key)).map((model) => model.id);
     },
     close() {
       closed = true;
@@ -6556,10 +6595,34 @@ async function fetchEndpointModels(api, baseUrl, key) {
   if (!response.ok)
     throw new Error(`${url.host} answered ${response.status} for /models`);
   const body = await response.json();
-  const ids = api === "google-generative-ai" ? (body.models ?? []).flatMap((model) => typeof model.name === "string" ? [model.name.replace(/^models\//, "")] : []) : (body.data ?? []).flatMap((model) => typeof model.id === "string" ? [model.id] : []);
-  if (ids.length === 0)
+  const models = api === "google-generative-ai" ? (body.models ?? []).flatMap((model) => typeof model.name === "string" ? [
+    endpointModel(model.name.replace(/^models\//, ""), {
+      contextWindow: positive(model.inputTokenLimit),
+      maxTokens: positive(model.outputTokenLimit),
+      reasoning: model.thinking === true,
+      image: false
+    })
+  ] : []) : (body.data ?? []).flatMap((model) => typeof model.id === "string" ? [
+    endpointModel(model.id, {
+      contextWindow: positive(model.context_window) ?? positive(model.context_length) ?? positive(model.max_input_tokens),
+      maxTokens: positive(model.max_output_tokens),
+      reasoning: model.reasoning === true,
+      image: Array.isArray(model.modalities?.input) && model.modalities.input.includes("image")
+    })
+  ] : []);
+  if (models.length === 0)
     throw new Error(`${url.host} listed no models`);
-  return ids;
+  return models;
+}
+var positive = (value) => typeof value === "number" && Number.isFinite(value) && value > 0 ? value : undefined;
+function endpointModel(id, reported) {
+  return {
+    id,
+    ...reported.contextWindow === undefined ? {} : { contextWindow: reported.contextWindow },
+    ...reported.maxTokens === undefined ? {} : { maxTokens: reported.maxTokens },
+    ...reported.reasoning ? { reasoning: true } : {},
+    ...reported.image ? { input: ["text", "image"] } : {}
+  };
 }
 
 // apps/host/src/main.ts

package/dist/{chunk-ddh6wfv2.js → chunk-nj5gz6qh.js}

@@ -9,7 +9,7 @@ import {
   loadRelayKey,
   readServerConfig,
   removeServerConfig
-} from "./chunk-r2ssa2ex.js";
+} from "./chunk-5gp9svzs.js";
 import {
   relayHostId
 } from "./chunk-khcpv54k.js";
@@ -18,10 +18,10 @@ import {
   restartService,
   serviceManager,
   withoutRelayArgs
-} from "./chunk-73vxwjs7.js";
+} from "./chunk-32g3m2h0.js";
 import"./chunk-kzbzacz9.js";
-import"./chunk-p56xf1r8.js";
-import"./chunk-a4b61tx5.js";
+import"./chunk-fqgvf8v0.js";
+import"./chunk-4sepcfpy.js";
 import"./chunk-jgd38rna.js";
 import"./chunk-sygeb9qb.js";
 import {

package/dist/{chunk-mv94ksvb.js → chunk-vax4zspw.js}

@@ -1,6 +1,6 @@
 import {
   connectRemoteDurable
-} from "./chunk-a4b61tx5.js";
+} from "./chunk-4sepcfpy.js";
 import"./chunk-jgd38rna.js";
 import {
   isLoopbackUrl

package/dist/{chunk-r6w5aqkw.js → chunk-wb10efyq.js}

@@ -13,7 +13,24 @@ var WEB_TYPES = {
   ".woff2": "font/woff2"
 };
 var NOT_BUILT = "Web client not built: run bun run build";
+var SECURITY_HEADERS = {
+  "content-security-policy": [
+    "default-src 'self'",
+    "script-src 'self'",
+    "style-src 'self' 'unsafe-inline'",
+    "img-src 'self' data:",
+    "connect-src 'self' ws: wss:",
+    "object-src 'none'",
+    "base-uri 'self'",
+    "form-action 'self'",
+    "frame-ancestors 'none'"
+  ].join("; "),
+  "x-content-type-options": "nosniff",
+  "referrer-policy": "no-referrer"
+};
 async function serveWebClient(request, response, webRoot) {
+  for (const [name, value] of Object.entries(SECURITY_HEADERS))
+    response.setHeader(name, value);
   if (request.method !== "GET" && request.method !== "HEAD") {
     response.writeHead(405).end();
     return;

package/dist/pinomad.js

@@ -5,22 +5,22 @@ import {
 } from "./chunk-kzbzacz9.js";
 import {
   packagedVersion
-} from "./chunk-p56xf1r8.js";
+} from "./chunk-fqgvf8v0.js";
 import {
   __require
 } from "./chunk-df32avw6.js";
 
 // apps/cli/src/pinomad.ts
 var COMMANDS = {
-  host: () => import("./chunk-jjtr7fr5.js"),
-  server: () => import("./chunk-1r8a2434.js"),
-  relay: () => import("./chunk-1r8a2434.js"),
-  service: () => import("./chunk-ptjyk94f.js"),
-  upgrade: () => import("./chunk-fes7wjw1.js"),
-  link: () => import("./chunk-p15hqqjz.js"),
-  pair: () => import("./chunk-mv94ksvb.js"),
-  join: () => import("./chunk-cytnycs9.js"),
-  leave: () => import("./chunk-ddh6wfv2.js")
+  host: () => import("./chunk-n8cz7skh.js"),
+  server: () => import("./chunk-cx8jgpdt.js"),
+  relay: () => import("./chunk-cx8jgpdt.js"),
+  service: () => import("./chunk-3gcpzpjq.js"),
+  upgrade: () => import("./chunk-azarj0f4.js"),
+  link: () => import("./chunk-029mmh7d.js"),
+  pair: () => import("./chunk-vax4zspw.js"),
+  join: () => import("./chunk-n58m5hgh.js"),
+  leave: () => import("./chunk-nj5gz6qh.js")
 };
 var USAGE = `pinomad — PiNomad host, server, and utilities
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pinomad",
-  "version": "0.8.0",
+  "version": "0.9.1",
   "description": "PiNomad — self-hosted coding agent: host, relay, and web client in one package",
   "license": "Apache-2.0",
   "type": "module",
@@ -20,12 +20,12 @@
   },
   "homepage": "https://github.com/bubbleptr/pinomad",
   "dependencies": {
-    "@earendil-works/chord": "1.2.0",
-    "@earendil-works/pi-ai": "1.2.0",
-    "@earendil-works/pi-codemode": "1.2.0",
-    "@earendil-works/pi-coding-agent": "1.2.0",
-    "@earendil-works/pi-durable": "1.2.0",
-    "@earendil-works/pi-mcp": "1.2.0",
+    "@earendil-works/chord": "1.4.0",
+    "@earendil-works/pi-ai": "1.4.0",
+    "@earendil-works/pi-codemode": "1.4.0",
+    "@earendil-works/pi-coding-agent": "1.4.0",
+    "@earendil-works/pi-durable": "1.4.0",
+    "@earendil-works/pi-mcp": "1.4.0",
     "@noble/curves": "2.4.0",
     "diff": "8.0.4",
     "node-datachannel": "0.33.4",
@@ -35,6 +35,9 @@
     "uqr": "0.1.3",
     "ws": "8.22.0",
     "@noble/ciphers": "2.4.0",
-    "@noble/hashes": "2.4.0"
+    "@noble/hashes": "2.4.0",
+    "@earendil-works/pi-agent-core": "1.4.0",
+    "@earendil-works/pi-telemetry": "1.4.0",
+    "@earendil-works/pi-tui": "1.4.0"
   }
 }