Changed
- The model-lock is now reliable and no longer touches your environment. 0.2.6 hid extra providers by deleting their API-key env vars before startup, which (a) missed HuggingFace (its token is
HF_TOKEN, not*_API_KEY) and (b) could not hide providers discovered from dual-use credentials (AWS Bedrock, Google Vertex) without also deleting those credentials — which the agent's shell tool legitimately needs. The lock now leaves every credential in your shell intact and instead scopes the model picker to just the free-pi model. SetFREEPI_KEEP_ENV_PROVIDERS=1to unlock the picker and use your own providers.