build(deps): update Pi to v0.80.10

[mrbro-bot]

This PR contains the following updates:

Package	Change	Age	Confidence	OpenSSF	Code Search
@earendil-works/pi-ai (source)	0.80.7 → 0.80.10
@earendil-works/pi-coding-agent (source)	0.80.7 → 0.80.10

---

Release Notes

earendil-works/pi (@​earendil-works/pi-ai)

v0.80.10

Compare Source

Fixed

• Fixed Kimi Coding requests to use Anthropic adaptive thinking effort without token budgets, and enabled empty thinking signatures for K3 and kimi-for-coding.
• Fixed Kimi K3 pricing metadata for Moonshot AI and Moonshot AI China.
• Fixed Kimi Coding K3 thinking-level metadata to expose only the supported max level (#​6737).
• Fixed catalog generation restoring xAI models removed in 0.80.9 (#​6736).

v0.80.9

Compare Source

Added

• Added Kimi K3 support for Kimi Coding, Moonshot AI, Moonshot AI China, OpenRouter, and Vercel AI Gateway.
• Added Kimi deferred tool loading to OpenAI-compatible Chat Completions through compat.deferredToolsMode.

Changed

• Changed xAI device OAuth to open a prefilled authorization link and added provider-specific OAuth login labels (#​6734 by @​Jaaneek).

Fixed

• Fixed Kimi K3 output limits for Vercel AI Gateway and OpenRouter models.

Removed

• Removed Grok 3, Grok 3 Fast, Grok 4.20 variants, and Grok Code Fast 1 from the built-in xAI model catalog (#​6734 by @​Jaaneek).

v0.80.8

Compare Source

Breaking Changes

• Changed runtime authentication to provider-scoped Models.checkAuth(), getAuth(), login(), and logout() APIs. checkAuth() now returns AuthCheck | undefined, and API-key auth resolvers no longer receive a model.
• Removed the legacy built-in OAuth provider objects, global OAuth registry APIs, and public low-level built-in login/refresh functions. Use canonical Provider.auth.oauth methods instead; the oauth subpath now retains only extension compatibility types.
• Renamed the canonical login interaction interface from AuthLoginCallbacks to AuthInteraction; it exposes the provider-neutral prompt()/notify() protocol used by API-key and OAuth flows.
• Changed the Models request contract: getAuth(model) now includes model headers, while getAuth(providerId) remains provider-scoped, and Models stream options may include transformHeaders. Custom Models implementations must execute the transform after merging auth/model and explicit headers, then remove it before provider dispatch.
• Changed dynamic model refresh to Models.refresh(options), which refreshes every configured dynamic provider and returns per-provider errors/cancellation state. Provider.refreshModels(context) now receives the effective credential, scoped model storage, network policy, and abort signal.

Added

• Added provider-owned authentication and availability resolution to Models, including stored OAuth refresh and interactive login support through CredentialStore.
• Added async non-secret credential enumeration through CredentialStore.list() and credential-aware Provider.filterModels() availability policy.
• Added neutral auth-flow information/link events and provider-owned Amazon Bedrock and Google Vertex AI credential selection flows.
• Added ModelsStore with an in-memory default for restoring and persisting dynamic provider catalogs.
• Added the dynamic Radius pi-messages gateway provider with OAuth and credential-specific catalog refresh.
• Added Models.refresh({ force: true }) to let providers bypass freshness checks for explicit refreshes.
• Added xAI device-code OAuth login and routed Grok 4.5 through OpenAI Responses, with low, medium, and high thinking support (#​6651 by @​Jaaneek).

Changed

• Changed Models.getAuth(model) to include model headers and added a Models-only transformHeaders stream option that runs after auth and explicit header assembly but is not forwarded to providers.

Fixed

• Fixed Cloudflare Workers AI and AI Gateway streams to materialize account and gateway endpoint placeholders after auth resolution, including compat streaming with custom model objects.
• Fixed lazy provider streams to preserve their final assistant message when forwarding an inner stream.
• Fixed OpenAI Codex session IDs longer than 64 characters to meet the API limit (#​6630).

earendil-works/pi (@​earendil-works/pi-coding-agent)

v0.80.10

Compare Source

New Features

• Kimi Coding thinking compatibility — Kimi Coding models now use adaptive thinking correctly; K3 exposes its supported max level and supports replaying empty-signature thinking blocks. See Kimi For Coding setup and Model Options.

Fixed

• Fixed inherited Kimi Coding requests to use Anthropic adaptive thinking effort without token budgets, and enabled empty thinking signatures for K3 and kimi-for-coding.
• Fixed inherited Kimi K3 pricing metadata for Moonshot AI and Moonshot AI China.
• Fixed inherited Kimi Coding K3 thinking-level metadata to expose only the supported max level (#​6737).
• Fixed inherited catalog generation restoring xAI models removed in 0.80.9 (#​6736).

v0.80.9

Compare Source

New Features

• Kimi K3 and deferred tool loading — Use Kimi K3 across built-in providers, including progressive extension tool activation through Kimi’s native protocol. See Dynamic Tool Loading, OpenAI Compatibility, and the kimi-deferred-tools.ts example.

Added

• Added inherited Kimi K3 support for Kimi Coding, Moonshot AI, Moonshot AI China, OpenRouter, and Vercel AI Gateway.
• Added Kimi deferred tool loading for extension-driven tool activation. See Dynamic Tool Loading, OpenAI Compatibility, and the kimi-deferred-tools.ts example.

Changed

• Changed xAI login to use a prefilled device-authorization link labeled “Sign in with SuperGrok or X Premium,” and changed the default xAI model to Grok 4.5 (#​6734 by @​Jaaneek).

Fixed

• Fixed inherited Kimi K3 output limits for Vercel AI Gateway and OpenRouter models.
• Fixed cloning or forking a session before its first assistant response to explain that the session must be saved first.

Removed

• Removed Grok 3, Grok 3 Fast, Grok 4.20 variants, and Grok Code Fast 1 from the built-in xAI model catalog (#​6734 by @​Jaaneek).

v0.80.8

Compare Source

New Features

• Unified model runtime and provider authentication — ModelRuntime centralizes model configuration, provider-owned /login, and dynamic provider catalogs. See Providers.
• Live model catalog refresh — /model refreshes configured providers in the background, and pi update --models forces an immediate refresh. See Install and Manage.
• xAI device-code OAuth and Grok 4.5 Responses support — Sign in to xAI with a device code and use Grok 4.5 with low, medium, or high thinking. See xAI.

Breaking Changes

• Replaced the SDK's CreateAgentSessionOptions.authStorage and modelRegistry options with the async modelRuntime option. AuthStorage and its storage backends are no longer exported; use ModelRuntime (or a custom pi-ai CredentialStore), or readStoredCredential() for one-off reads of auth.json.
• Removed redundant ModelRuntime.getAll(), find(), getSnapshot(), and getAuthOptions() projections. Use the pi-ai Models methods getModels(), getModel(), getProviders(), and checkAuth() directly.
• Replaced SDK request-auth assembly through ModelRegistry.getApiKeyAndHeaders() with ModelRuntime.getAuth(). Passing a provider ID returns provider-scoped auth; passing a model also resolves built-in, models.json, and extension model headers.
• Changed extension-facing ModelRegistry.refresh() from synchronous void to Promise<void> because models.json loading is asynchronous. Extensions must await it before making synchronous registry reads.
• Moved canonical dynamic catalog refresh to async ModelRuntime.refresh()/pi-ai Models.refresh(). Legacy extension OAuth modifyModels remains supported as a synchronous compatibility projection after credential initialization.

Added

• Added ModelRuntime as the canonical async SDK and internal model/auth facade while preserving the synchronous extension-facing ModelRegistry API. ModelRuntime.create() accepts any pi-ai CredentialStore through its credentials option.
• Added provider-owned /login discovery directly from registered pi-ai providers, including ambient auth status and informational links.
• Added file-backed dynamic catalogs in models-store.json, per-provider pi.dev catalog overlays, and Radius gateway support including offline migration from legacy credential-cached catalogs.
• Added extension provider refreshModels(context) support for dynamic model discovery with optional provider-controlled persistence.
• Added pi update --models to force an immediate model catalog refresh without updating pi or extensions.
• Added inherited xAI device-code OAuth login and Grok 4.5 OpenAI Responses support, with low, medium, and high thinking levels (#​6651 by @​Jaaneek).

Changed

• Changed ModelRuntime to compose built-in providers, immutable models.json configuration, and extension overlays through ad-hoc pi-ai provider methods.
• Changed ModelRuntime to own final request assembly: getAuth(model) includes configured model headers, stream methods resolve auth once, and before_provider_headers runs as the Models-only header transform before provider dispatch.
• Changed /model to render the current model snapshot immediately, refresh configured providers in the background, and update the open selector with partial results or timeout errors.

Fixed

• Fixed configured-provider catalog refresh to parse pi.dev's model-ID keyed responses, throttle checks to once per four hours, send the versioned pi user agent, treat unimplemented routes as unavailable overlays, and show concise refresh status in /model.
• Fixed adjacent assistant thinking blocks to render as one thinking section.
• Fixed inherited OpenAI Codex session IDs longer than 64 characters to meet the API limit (#​6630).
• Fixed inherited terminal output to normalize tab characters consistently (#​6697 by @​xz-dev).
• Fixed the Windows terminal title after checking npm packages (#​6629).
• Fixed Bun standalone binaries to bundle OAuth adapters for interactive logins.

---

Configuration

📅 Schedule: (in timezone America/Phoenix)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[mrbro-bot]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: bun.lock

Command failed: install-tool bun 1.3.14