# Changelog

## 0.2.1

- OAuth loopback callback is single-use: first terminal `/callback` settles and closes the server
- Validate `access_token` (and sane `expires_in`) on token responses
- Truncate untrusted API/error bodies before they appear in thrown Errors

## 0.2.0

- Live model discovery from `GET https://api.x.ai/v1/models`
- Fallback catalog when offline / pre-login / discovery fails
- `/supergrok-refresh-models` slash command
- Split into modules: `oauth`, `models`, `provider`, `constants`, `fallback-models`
- Packaged for `pi install` / npm / git (`pi-package` keyword)

## 0.1.0

- Initial SuperGrok OAuth provider (browser PKCE + device code)
- Static Grok model list
