privateer-agent 0.12.2 → 0.12.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "privateer-agent",
-  "version": "0.12.2",
+  "version": "0.12.3",
   "description": "Privacy-first terminal coding agent — bring your own model across 20 providers (Anthropic, OpenAI, OpenRouter, Google, local Ollama…). Safe-by-default permissions, MCP, sub-agents, workflows, and verifiable TEE inference. Built on the Pi toolkit.",
   "type": "module",
   "license": "MIT",

package/src/auth/privateer.ts

@@ -451,8 +451,14 @@ export async function runDeviceLogin(opts: {
 // Pass the server's own message through so the user learns what to actually do.
 async function spawnFailure(res: Response): Promise<Error> {
   if (res.status === 401) {
-    clearCredentials();
-    notifySessionExpired();
+    // Announce only the signed-in → signed-out transition: concurrent launch-time
+    // spawns (warmSession + the account-channel seed) can both 401 on the same dead
+    // login, and whichever lands second must stay silent. Same guard as
+    // handleServerRevoke.
+    if (hasCredentials()) {
+      clearCredentials();
+      notifySessionExpired();
+    }
     return new Error("Your Privateer session expired. Run /login to sign in again.");
   }
   let message: string | undefined;

package/src/providers/account.ts

@@ -56,6 +56,10 @@ const DEFAULT_MODELS = [
   "anthropic/claude-sonnet-5",
   "openai/gpt-5.6-sol",
   "deepseek/deepseek-v4-flash",
+  // 2026-08 releases, confirmed live on OpenRouter (ZDR-covered ids reach the
+  // account catalog automatically; these seeds just make them resolve at launch).
+  "moonshotai/kimi-k3",
+  "z-ai/glm-5.2",
 ];
 
 function seedModel(id: string) {
@@ -816,7 +820,10 @@ export async function armAccountCredential(
     // so staying silent leaves the user to discover it as a bare "No API key found for
     // privateer" on their first prompt.
     const c = ctx as SeedContext;
-    if (opts.notify !== false && c?.hasUI) {
+    // If the credentials vanished during the call, the spawn hit a 401 and
+    // onSessionExpired already announced the sign-out — a second line here would
+    // just repeat it (we returned early above if we STARTED signed out).
+    if (opts.notify !== false && c?.hasUI && hasCredentials()) {
       c.ui?.notify?.(`Privateer account channel unavailable — ${(e as Error).message}`, "error");
     }
     return false;

package/src/providers/catalog.ts

@@ -59,7 +59,7 @@ export const PROVIDERS: ProviderEntry[] = [
     api: "openai-completions",
     keyEnv: "${DASHSCOPE_API_KEY}",
     compat: { thinkingFormat: "qwen" },
-    seedModels: ["qwen3-max", "qwen3-coder-plus", "qwen-max-latest"],
+    seedModels: ["qwen3.8-max-preview", "qwen3-max", "qwen3-coder-plus", "qwen-max-latest"],
   },
   { id: "ollama", source: "pi-privacy" },
   { id: "nearai", source: "pi-privacy" },

package/src/providers/genModelsJson.ts

@@ -36,6 +36,13 @@ export interface ModelsJson {
   providers: Record<string, ModelsJsonProvider>;
 }
 
+// Per-id context-window overrides for seeds whose real window is far from the
+// Appendix A.4 default (kept until the live listing refines them). Qwen3.8-Max
+// serves ~1M tokens (983,616 advertised at launch, 2026-08-03).
+const SEED_CONTEXT: Record<string, number> = {
+  "qwen3.8-max-preview": 1_000_000,
+};
+
 function seedModel(id: string, compat?: Record<string, unknown>): ModelsJsonModel {
   return {
     id,
@@ -43,7 +50,7 @@ function seedModel(id: string, compat?: Record<string, unknown>): ModelsJsonMode
     reasoning: false,
     input: ["text"],
     cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
-    contextWindow: 128000,
+    contextWindow: SEED_CONTEXT[id] ?? 128000,
     maxTokens: 16384,
     ...(compat ? { compat } : {}),
   };