[dependabot]

Bumps @earendil-works/pi-agent-core from 0.75.5 to 0.80.10.

Release notes

Sourced from @​earendil-works/pi-agent-core's releases.

v0.80.10

New Features

• Kimi Coding thinking compatibility — Kimi Coding models now use adaptive thinking correctly; K3 exposes its supported max level and supports replaying empty-signature thinking blocks. See Kimi For Coding setup and Model Options.

Fixed

• Fixed inherited Kimi Coding requests to use Anthropic adaptive thinking effort without token budgets, and enabled empty thinking signatures for K3 and kimi-for-coding.
• Fixed inherited Kimi K3 pricing metadata for Moonshot AI and Moonshot AI China.
• Fixed inherited Kimi Coding K3 thinking-level metadata to expose only the supported max level (#6737).
• Fixed inherited catalog generation restoring xAI models removed in 0.80.9 (#6736).

v0.80.9

New Features

• Kimi K3 and deferred tool loading — Use Kimi K3 across built-in providers, including progressive extension tool activation through Kimi’s native protocol. See Dynamic Tool Loading, OpenAI Compatibility, and the kimi-deferred-tools.ts example.

Added

• Added inherited Kimi K3 support for Kimi Coding, Moonshot AI, Moonshot AI China, OpenRouter, and Vercel AI Gateway.
• Added Kimi deferred tool loading for extension-driven tool activation. See Dynamic Tool Loading, OpenAI Compatibility, and the kimi-deferred-tools.ts example.

Changed

• Changed xAI login to use a prefilled device-authorization link labeled “Sign in with SuperGrok or X Premium,” and changed the default xAI model to Grok 4.5 (#6734 by @​Jaaneek).

Fixed

• Fixed inherited Kimi K3 output limits for Vercel AI Gateway and OpenRouter models.
• Fixed cloning or forking a session before its first assistant response to explain that the session must be saved first.

Removed

• Removed Grok 3, Grok 3 Fast, Grok 4.20 variants, and Grok Code Fast 1 from the built-in xAI model catalog (#6734 by @​Jaaneek).

v0.80.8

New Features

• Unified model runtime and provider authentication — ModelRuntime centralizes model configuration, provider-owned /login, and dynamic provider catalogs. See Providers.
• Live model catalog refresh — /model refreshes configured providers in the background, and pi update --models forces an immediate refresh. See Install and Manage.
• xAI device-code OAuth and Grok 4.5 Responses support — Sign in to xAI with a device code and use Grok 4.5 with low, medium, or high thinking. See xAI.

Breaking Changes

• Replaced the SDK's CreateAgentSessionOptions.authStorage and modelRegistry options with the async modelRuntime option. AuthStorage and its storage backends are no longer exported; use ModelRuntime (or a custom pi-ai CredentialStore), or readStoredCredential() for one-off reads of auth.json.
• Removed redundant ModelRuntime.getAll(), find(), getSnapshot(), and getAuthOptions() projections. Use the pi-ai Models methods getModels(), getModel(), getProviders(), and checkAuth() directly.
• Replaced SDK request-auth assembly through ModelRegistry.getApiKeyAndHeaders() with ModelRuntime.getAuth(). Passing a provider ID returns provider-scoped auth; passing a model also resolves built-in, models.json, and extension model headers.
• Changed extension-facing ModelRegistry.refresh() from synchronous void to Promise<void> because models.json loading is asynchronous. Extensions must await it before making synchronous registry reads.
• Moved canonical dynamic catalog refresh to async ModelRuntime.refresh()/pi-ai Models.refresh(). Legacy extension OAuth modifyModels remains supported as a synchronous compatibility projection after credential initialization.

... (truncated)

Changelog

Sourced from @​earendil-works/pi-agent-core's changelog.

[0.80.10] - 2026-07-16

[0.80.9] - 2026-07-16

[0.80.8] - 2026-07-16

[0.80.7] - 2026-07-14

Added

• Added AgentToolResult.addedToolNames propagation to ToolResultMessage so tools introduced by a result can be loaded from that transcript point onward (#6474).

[0.80.6] - 2026-07-09

Added

• Added the max model thinking level after xhigh.

[0.80.5] - 2026-07-09

[0.80.4] - 2026-07-09

Added

• Added configurable harness session context entry transforms and custom-entry message projectors.
• Added custom metadata support in JSONL session headers (#6417 by @​ArcadiaLin).
• Exported InMemorySessionStorage and JsonlSessionStorage (#6435).

Fixed

• Fixed harness split-turn compaction to serialize summary requests so single-concurrency providers are not asked to run overlapping generations (#5536).
• Fixed harness tool calls from length-truncated assistant messages to fail instead of waiting for missing tool results (#6285).
• Fixed harness session ingestion to normalize null message content before context projection, avoiding crashes on lax imported transcripts (#6343).
• Fixed non-positive or oversized harness shell execution timeouts to fail with a clear validation error instead of being clamped to an immediate timeout (#6181).
• Fixed harness session storage short entry ids to use the random tail of the generated uuidv7 instead of the timestamp prefix, which was nearly constant between calls (#6242).

[0.80.3] - 2026-06-30

Added

• Added prepareNextTurnWithContext for Agent users that need the next-turn loop context.

Fixed

• Fixed Agent.prepareNextTurn to keep receiving the run abort signal instead of the next-turn context.

[0.80.2] - 2026-06-23

Changed

... (truncated)

Commits

• 8dc7883 Release v0.80.10
• f7e0603 Add [Unreleased] section for next cycle
• 2d16f92 Release v0.80.9
• e022eec Add [Unreleased] section for next cycle
• fae7176 Release v0.80.8
• 5e336cf Merge origin/main into model runtime changes
• cd7cad4 feat(coding-agent): merge origin/main into model runtime facade
• 9d09075 Add [Unreleased] section for next cycle
• 818d674 Release v0.80.7
• 9993c96 feat(coding-agent): replace model registry with model runtime
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​earendil-works/pi-agent-core since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, node. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

Superseded by #17.