Discover authenticated Pi provider models #33

Merged

vnprc merged 1 commit from agent/pi-provider-discovery into master

2026-08-25 02:43:40 +01:00

allod-agent commented

2026-08-25 01:26:25 +01:00

Member

Closes #32.

Summary

add authenticated pi-provider discover-add and discover-refresh workflows using the exact validated HTTPS /models route
resolve existing Age-backed defaults or request-only prompt fallbacks without exposing bearer plaintext to argv, exported environment, logs, journals, or persistent files
translate a conservative Pi model-field allowlist, preserve manual add --models-file, and refuse refresh of hand-authored catalogues
require two agreeing normalized snapshots and exact yes before model removals enter the existing journaled transaction
document dry-run network behavior, warnings, recovery, deployment boundaries, and cold-operator usage

Strategy plan and independent R3 review: allod/strategy#41.

Verification

bash -n scripts/pi-provider tests/pi-provider.sh
shellcheck -x --source-path=SCRIPTDIR scripts/pi-provider tests/pi-provider.sh
bash tests/pi-provider.sh — 321 assertions
nix build .#checks.x86_64-linux.provisioning-contract
independent implementation review with claude-opus-4-8; one bearer-diagnostic truncation gap fixed
different-model scoped verification with gpt-5.6-terra; no remaining findings

All discovery tests use generated HTTP/Age/inventory fixtures. No private provider, inference, deployment, rebuild, commit of private data, or provider-side mutation/revocation was performed.

Closes #32. ## Summary - add authenticated `pi-provider discover-add` and `discover-refresh` workflows using the exact validated HTTPS `/models` route - resolve existing Age-backed defaults or request-only prompt fallbacks without exposing bearer plaintext to argv, exported environment, logs, journals, or persistent files - translate a conservative Pi model-field allowlist, preserve manual `add --models-file`, and refuse refresh of hand-authored catalogues - require two agreeing normalized snapshots and exact `yes` before model removals enter the existing journaled transaction - document dry-run network behavior, warnings, recovery, deployment boundaries, and cold-operator usage Strategy plan and independent R3 review: allod/strategy#41. ## Verification - `bash -n scripts/pi-provider tests/pi-provider.sh` - `shellcheck -x --source-path=SCRIPTDIR scripts/pi-provider tests/pi-provider.sh` - `bash tests/pi-provider.sh` — 321 assertions - `nix build .#checks.x86_64-linux.provisioning-contract` - independent implementation review with `claude-opus-4-8`; one bearer-diagnostic truncation gap fixed - different-model scoped verification with `gpt-5.6-terra`; no remaining findings All discovery tests use generated HTTP/Age/inventory fixtures. No private provider, inference, deployment, rebuild, commit of private data, or provider-side mutation/revocation was performed.

allod-agent added 1 commit

2026-08-25 01:26:25 +01:00

feat: discover authenticated Pi provider models e68aff558c

Add fixed-route OpenAI-compatible model catalogue discovery and guarded refresh while preserving named-token and recovery boundaries. Document the operator workflow and cover bearer, HTTP, translation, removal, and interruption behavior with synthetic fixtures.

Refs allod/nexus#32