build(deps-dev): bump @earendil-works/pi-ai from 0.79.5 to 0.80.3

[dependabot]

Bumps @earendil-works/pi-ai from 0.79.5 to 0.80.3.

Release notes

Sourced from @​earendil-works/pi-ai's releases.

v0.80.3

New Features

• Anthropic Claude Sonnet 5 support - Claude Sonnet 5 is available through inherited Anthropic-compatible and Bedrock provider catalogs with adaptive thinking enabled. See Providers and Model Options.
• Configurable output spacing - outputPad controls horizontal padding for user messages, assistant messages, and thinking blocks. See Settings.
• External editor configuration - externalEditor lets Ctrl+G use a configured editor before $VISUAL/$EDITOR fallbacks. See Settings and Keybindings.
• Richer RPC session tree access - RPC clients can inspect session entries and tree snapshots with get_entries and get_tree. See get_entries and get_tree.
• Extension session metadata updates - Extensions can observe session name changes through session_info_changed. See session_info_changed.
• Modern Azure Foundry endpoint support - Azure OpenAI Responses provider setup supports current Microsoft Foundry endpoint URLs. See Azure OpenAI.

Added

• Added inherited Anthropic Claude Sonnet 5 model support.
• Added get_entries and get_tree RPC commands for reading session entries and tree snapshots over RPC (#6078 by @​geraschenko).
• Added a package ./rpc-entry export for launching Pi directly in RPC mode.
• Added session-name change events for extensions (#6175 by @​xl0).
• Added inherited Azure OpenAI Responses support for modern Microsoft Foundry endpoint URLs (#6004 by @​gukoff).
• Added inherited Usage.reasoning token counts for providers that report reasoning/thinking token usage (#6057).
• Added an externalEditor settings.json override for Ctrl+G external editor commands, with default fallbacks to Notepad on Windows and nano elsewhere (#6122).
• Added an outputPad setting for user message, assistant message, and thinking horizontal padding (#6168).

Changed

• Changed the default OpenAI model to gpt-5.5.
• Changed inherited OpenAI Codex Responses SSE response-header waits to use the configured HTTP timeout instead of the previous fixed 20 second timeout, reducing false timeouts on slow connections (#4945).

Fixed

• Fixed inherited Claude Sonnet 5 metadata to use adaptive thinking payloads for Anthropic-compatible and Bedrock requests.
• Fixed inherited generated Xiaomi MiMo model pricing to match current pay-as-you-go pricing from models.dev (#6138).
• Fixed inherited provider HTTP errors to include response bodies instead of opaque SDK messages (#5832 by @​stephanmck).
• Fixed inherited streamSimple() max-token caps so providers that count input and output against one context window do not reject long requests (#5595).
• Fixed inherited OpenAI Responses streams to preserve reasoning replay state when output items finish out of order (#6009).
• Fixed inherited Z.AI preserved thinking requests to send thinking.clear_thinking: false when thinking is enabled, allowing replayed reasoning_content to participate in provider caching (#6083).
• Fixed pre-prompt compaction to stop after compaction instead of continuing immediately (#6074 by @​yzhg1983).
• Fixed resource notifications to stay before messages when resuming sessions (#6048 by @​haoqixu).
• Fixed startup benchmark timing output to print after TUI shutdown, preserve extension timings, and drain terminal-query replies before stopping benchmark mode (#6030 by @​xl0, #6063 by @​xl0).
• Fixed extension tool changes to apply before the next provider request in the same agent run without dropping before_agent_start system-prompt overrides (#6162).
• Fixed a crash when undici emits an internal client error while terminating a mid-stream HTTP response (#6133).
• Fixed the compaction event regression test to cover status indicator cleanup and keep CI passing.
• Fixed interactive status indicators so ending work, retry, compaction, or branch-summary indicators no longer shrink the TUI when clear-on-shrink is enabled (#6026).
• Fixed --session and SessionManager.open() to reject non-empty invalid session files without overwriting them (#6002).
• Fixed user-message transcript rendering to keep visible backslashes in Markdown escape sequences such as \" (#6105).
• Fixed assistant messages stopped by output length to show a visible incomplete-response error (#4290).
• Fixed --no-session --session-id so ephemeral CLI runs can use deterministic session IDs for provider cache affinity (#6070).
• Fixed disk BMP image files to be detected, converted to PNG, and attached through read and CLI @file inputs (#6047).
• Fixed auto-retry for provider stream errors that explicitly tell callers to retry the request (#6019).

v0.80.2

Changed

... (truncated)

Changelog

Sourced from @​earendil-works/pi-ai's changelog.

[0.80.3] - 2026-06-30

Added

• Added Anthropic Claude Sonnet 5 model metadata for Anthropic-compatible, Bedrock, OpenRouter, and Vercel AI Gateway providers.
• Added Azure OpenAI Responses support for modern Microsoft Foundry endpoint URLs (#6004 by @​gukoff).
• Added an optional reasoning field to Usage reporting reasoning/thinking token counts as a subset of output. Populated for Anthropic (output_tokens_details.thinking_tokens), OpenAI Responses/Codex/Azure (output_tokens_details.reasoning_tokens), OpenAI Completions (completion_tokens_details.reasoning_tokens), and Google Generative AI / Vertex (thoughtsTokenCount). Bedrock Converse and Mistral are not populated because those APIs do not return a reasoning token breakdown (#6057).

Changed

• Changed OpenAI Codex Responses SSE response-header waits to use the configured HTTP timeout instead of the previous fixed 20 second timeout, reducing false timeouts on slow connections (#4945).

Fixed

• Fixed Claude Sonnet 5 metadata to use adaptive thinking payloads for Anthropic-compatible and Bedrock requests.
• Fixed generated Xiaomi MiMo model pricing to match current pay-as-you-go pricing from models.dev (#6138).
• Fixed provider HTTP errors to include response bodies instead of opaque SDK messages (#5832 by @​stephanmck).
• Fixed streamSimple() to send a context-aware max-token cap so providers that count input and output against one context window do not reject long requests (#5595).
• Fixed OpenAI Responses streams to preserve reasoning replay state when output items finish out of order (#6009).
• Fixed retry classification for provider errors that explicitly tell callers to retry the request (#6019).
• Fixed Z.AI preserved thinking requests to send thinking.clear_thinking: false when thinking is enabled, allowing replayed reasoning_content to participate in provider caching (#6083).

[0.80.2] - 2026-06-23

Changed

• Changed ApiKeyCredential to use the auth.json-compatible discriminator type: "api_key" and provider-scoped env values instead of type: "api-key" and metadata.

Fixed

• Fixed Anthropic-compatible custom models to use explicit compatibility metadata instead of provider-name heuristics for session-affinity headers and unsupported tool-field omissions.
• Fixed request-scoped apiKey and env values to participate in provider auth resolution, so providers such as Cloudflare can derive request-specific base URLs from explicit call options (#6021).
• Restored temporary legacy per-API stream aliases such as streamSimpleOpenAICompletions on the compat entrypoint (#6016, #6017).
• Restored runtime detectCompat fallback in openai-completions for models without explicit compat metadata (#6020).

[0.80.1] - 2026-06-23

Fixed

• Fixed a regression in Amazon Bedrock scoped AWS_PROFILE endpoint resolution for built-in inference profile endpoints.
• Fixed Fireworks Anthropic-compatible requests to apply session-affinity and unsupported tool-field defaults for custom Fireworks models.
• Fixed Together MiniMax M2.7 metadata to avoid unsupported Together reasoning toggles.

[0.80.0] - 2026-06-23

Breaking Changes

• The root entrypoint (@earendil-works/pi-ai) is now core-only and side-effect free. The old global API moved to the temporary @earendil-works/pi-ai/compat entrypoint, a strict superset of the root: switching a file's import path is the only migration step. Moved symbols include stream/complete/streamSimple/completeSimple, getModel/getModels/getProviders (now deprecated aliases of getBuiltinModel/getBuiltinModels/getBuiltinProviders from @earendil-works/pi-ai/providers/all), registerApiProvider/unregisterApiProviders/resetApiProviders/getApiProvider, getEnvApiKey/findEnvKeys, setBedrockProviderModule, the per-API lazy stream wrappers (anthropicMessagesApi, ...), and the image-generation API.
• Renamed the Provider type to ProviderId. Provider now names the runtime provider interface (id, name, auth, model listing, stream behavior).
• API implementation modules moved from src/providers/ to @earendil-works/pi-ai/api/*, renamed by API id (anthropic -> api/anthropic-messages, google -> api/google-generative-ai, mistral -> api/mistral-conversations, amazon-bedrock -> api/bedrock-converse-stream), each exporting exactly stream and streamSimple. The old per-impl export names (streamAnthropic, streamSimpleAnthropic, ...) and legacy raw API subpaths (./anthropic, ./google, ./openai-completions, ...) are gone; import raw API implementations through @earendil-works/pi-ai/api/*.

... (truncated)

Commits

• a23abe4 Release v0.80.3
• f98a154 docs: audit changelog entries
• 5c1a297 fix(ai): update generated model catalogue
• 3d6acb3 fix(ai): regenerate model catalog
• 6fbeba5 Merge pull request #5832 from stephanmck/fix/provider-error-body-passthrough-...
• b91bdd5 fix(ai): preserve Z.AI thinking content
• 5411373 fix(ai): use HTTP timeout for Codex SSE headers
• 09f1059 fix(ai): clamp streamSimple max tokens
• f78b163 fix(ai): revert minimax max token clamp
• 62fad94 fix(ai): surface provider HTTP error body instead of opaque SDK message
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

^{Need help on this PR? Tag /codesmith with what you need. Autofix is disabled.}

---

Summary by cubic

Upgrade dev dependency @earendil-works/pi-ai from 0.79.5 to 0.80.3. Adds Claude Sonnet 5 support and upstream fixes (clearer HTTP error bodies, safer max-token caps) with no product code changes.

• Migration
  • If any code imports the global API from @earendil-works/pi-ai, switch to @earendil-works/pi-ai/compat (required since 0.80.0).

^{Written for commit 8120e5c. Summary will update on new commits.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​earendil-works/​pi-ai@​0.80.3

View full report