@bastani/atomic 0.9.9 → 0.9.10

package/dist/builtin/subagents/src/shared/types-config.ts

@@ -62,11 +62,17 @@ export interface RunSyncOptions {
 	allowIntercomDetach?: boolean;
 	intercomEvents?: IntercomEventBus;
 	onDetachedExit?: (result: SingleResult) => void;
+	/** Shared foreground-group signal used to release sibling supervision after one exact child commits Intercom detach. */
+	intercomDetachSignal?: AbortSignal;
+	/** Releases every active foreground sibling only after this exact child accepts a detach commit. */
+	onIntercomDetachCommit?: () => void;
 	onUpdate?: (r: AgentToolResult<Details>) => void;
 	onControlEvent?: (event: ControlEvent) => void;
 	controlConfig?: ResolvedControlConfig;
 	intercomSessionName?: string;
 	orchestratorIntercomTarget?: string;
+	/** Resolved intercom home group for the spawned child (explicit subagent group or inherited stage group). */
+	intercomGroup?: string;
 	maxOutput?: MaxOutputConfig;
 	artifactsDir?: string;
 	artifactConfig?: ArtifactConfig;

package/dist/builtin/subagents/src/slash/slash-commands.ts

@@ -1,7 +1,7 @@
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs";
 import * as path from "node:path";
-import { keyHint, type ExtensionAPI, type ExtensionContext } from "@bastani/atomic";
+import { keyHintIfBound, type ExtensionAPI, type ExtensionContext } from "@bastani/atomic";
 import { Key, matchesKey } from "@earendil-works/pi-tui";
 import { discoverAgents, discoverAgentsAll, type ChainConfig } from "../agents/agents.ts";
 import type { SubagentParamsLike } from "../runs/foreground/subagent-executor.ts";
@@ -164,7 +164,8 @@ async function requestSlashRun(
 			if (!ctx.hasUI) return;
 			const tool = update.currentTool ? ` ${update.currentTool}` : "";
 			const count = update.toolCount ?? 0;
-			ctx.ui.setStatus("subagent-slash", `${count} tools${tool} | ${keyHint("app.tools.expand", "live detail")}`);
+			const expandHint = keyHintIfBound("app.tools.expand", "live detail");
+			ctx.ui.setStatus("subagent-slash", `${count} tools${tool}${expandHint ? ` | ${expandHint}` : ""}`);
 		};
 
 		const onTerminalInput = ctx.hasUI

package/dist/builtin/subagents/src/tui/render-result-compact.ts

@@ -1,4 +1,4 @@
-import { keyHint } from "@bastani/atomic";
+import { keyHintIfBound } from "@bastani/atomic";
 import { Container, Text, type Component } from "@earendil-works/pi-tui";
 import type { AgentProgress, AsyncJobStep, Details } from "../shared/types.ts";
 import { shortenPath } from "../shared/formatters.ts";
@@ -46,7 +46,8 @@ export function renderSingleCompact(d: Details, r: Details["results"][number], t
 		c.addChild(new Text(truncLine(theme.fg("dim", `  ⎿  ${activity}`), width), 0, 0));
 		const liveStatus = buildLiveStatusLine(r.progress, progressSnapshotNow);
 		if (liveStatus && liveStatus !== activity) c.addChild(new Text(truncLine(theme.fg("dim", `     ${liveStatus}`), width), 0, 0));
-		c.addChild(new Text(truncLine(theme.fg("accent", `  Press ${keyHint("app.tools.expand", "for live detail")}`), width), 0, 0));
+		const expandHint = keyHintIfBound("app.tools.expand", "for live detail");
+		if (expandHint) c.addChild(new Text(truncLine(theme.fg("accent", `  Press ${expandHint}`), width), 0, 0));
 		if (r.artifactPaths) c.addChild(new Text(truncLine(theme.fg("dim", `  output: ${shortenPath(r.artifactPaths.outputPath)}`), width), 0, 0));
 		return c;
 	}
@@ -142,7 +143,8 @@ export function renderMultiCompact(d: Details, theme: Theme, now?: number, pulse
 		if (rRunning && rProg && "status" in rProg) {
 			const activity = compactCurrentActivity(rProg, now);
 			c.addChild(new Text(truncLine(theme.fg("dim", `    ⎿  ${activity}`), width), 0, 0));
-			c.addChild(new Text(truncLine(theme.fg("accent", `    Press ${keyHint("app.tools.expand", "for live detail")}`), width), 0, 0));
+			const expandHint = keyHintIfBound("app.tools.expand", "for live detail");
+			if (expandHint) c.addChild(new Text(truncLine(theme.fg("accent", `    Press ${expandHint}`), width), 0, 0));
 		} else if (!rPending && (r.exitCode !== 0 || r.interrupted || r.detached || hasEmptyTextOutputWithoutOutputTarget(r.task, output))) {
 			c.addChild(new Text(truncLine(theme.fg(r.exitCode !== 0 ? "error" : "dim", `    ⎿  ${resultStatusLine(r, output)}`), width), 0, 0));
 		}

package/dist/builtin/subagents/src/tui/render-result.ts

@@ -1,5 +1,5 @@
 import type { AgentToolResult } from "@earendil-works/pi-agent-core";
-import { getMarkdownTheme, keyHint } from "@bastani/atomic";
+import { getMarkdownTheme, keyHintIfBound } from "@bastani/atomic";
 import { Container, Markdown, Spacer, Text, type Component } from "@earendil-works/pi-tui";
 import type { AgentProgress, AsyncJobStep, Details } from "../shared/types.ts";
 import { formatDuration, formatTokens, formatUsage, shortenPath } from "../shared/formatters.ts";
@@ -123,7 +123,8 @@ export function renderSubagentResult(
 			if (liveStatusLine) {
 				c.addChild(new Text(fit(theme.fg("accent", liveStatusLine)), 0, 0));
 			}
-			c.addChild(new Text(fit(theme.fg("accent", `Press ${keyHint("app.tools.expand", "for live detail")}`)), 0, 0));
+			const expandHint = keyHintIfBound("app.tools.expand", "for live detail");
+			if (expandHint) c.addChild(new Text(fit(theme.fg("accent", `Press ${expandHint}`)), 0, 0));
 			if (r.artifactPaths) {
 				c.addChild(new Text(fit(theme.fg("dim", `Artifacts: ${shortenPath(r.artifactPaths.outputPath)}`)), 0, 0));
 			}
@@ -357,7 +358,8 @@ export function renderSubagentResult(
 			if (liveStatusLine) {
 				c.addChild(new Text(fit(theme.fg("accent", `    ${liveStatusLine}`)), 0, 0));
 			}
-			c.addChild(new Text(fit(theme.fg("accent", `    Press ${keyHint("app.tools.expand", "for live detail")}`)), 0, 0));
+			const expandHint = keyHintIfBound("app.tools.expand", "for live detail");
+			if (expandHint) c.addChild(new Text(fit(theme.fg("accent", `    Press ${expandHint}`)), 0, 0));
 			if (r.artifactPaths) {
 				c.addChild(new Text(fit(theme.fg("dim", `    artifacts: ${shortenPath(r.artifactPaths.outputPath)}`)), 0, 0));
 			}

package/dist/builtin/subagents/src/tui/render-widget-graph.ts

@@ -1,4 +1,4 @@
-import { keyHint } from "@bastani/atomic";
+import { keyHintIfBound } from "@bastani/atomic";
 import type { AsyncJobState } from "../shared/types.ts";
 import { shortenPath } from "../shared/formatters.ts";
 import { aggregateStepStatus, formatParallelOutcome } from "../shared/status-format.ts";
@@ -79,7 +79,8 @@ export function foregroundStyleWidgetStepLines(
 		lines.push(`    ${nestedLine}`);
 	}
 	if (step.status === "running") {
-		if (!expanded) lines.push(`    ${theme.fg("accent", `Press ${keyHint("app.tools.expand", "for live detail")}`)}`);
+		const expandHint = keyHintIfBound("app.tools.expand", "for live detail");
+		if (!expanded && expandHint) lines.push(`    ${theme.fg("accent", `Press ${expandHint}`)}`);
 		const output = widgetOutputPath(job, step);
 		if (output) lines.push(`    ${theme.fg("dim", `output: ${shortenPath(output)}`)}`);
 		if (expanded) {
@@ -150,7 +151,8 @@ export function compactSingleWidgetLines(job: AsyncJobState, theme: Theme, width
 			if (output) lines.push(`    ${theme.fg("dim", `output: ${shortenPath(output)}`)}`);
 		}
 	}
-	if (job.steps.some((step) => step.status === "running")) lines.push(theme.fg("accent", `  Press ${keyHint("app.tools.expand", "for live detail")}`));
+	const expandHint = keyHintIfBound("app.tools.expand", "for live detail");
+	if (expandHint && job.steps.some((step) => step.status === "running")) lines.push(theme.fg("accent", `  Press ${expandHint}`));
 	return lines.map((line) => truncLine(line, width));
 }
 
@@ -162,8 +164,9 @@ export function fitWidgetLineBudget(lines: string[], theme: Theme, width: number
 	if (lines.length <= budget) return lines;
 	const visibleLines = Math.max(1, budget - 1);
 	const hiddenCount = lines.length - visibleLines;
+	const expandHint = keyHintIfBound("app.tools.expand", "expands");
 	const hint = expanded
 		? `… ${hiddenCount} live-detail lines hidden`
-		: `… ${hiddenCount} lines hidden · ${keyHint("app.tools.expand", "expands")}`;
+		: `… ${hiddenCount} lines hidden${expandHint ? ` · ${expandHint}` : ""}`;
 	return [...lines.slice(0, visibleLines), truncLine(theme.fg("dim", hint), width)];
 }

package/dist/builtin/web-access/CHANGELOG.md

@@ -4,6 +4,28 @@ All notable changes to this project will be documented in this file.
 
 ## [Unreleased]
 
+## [0.9.10] - 2026-07-20
+
+### Changed
+
+- Converted the reachable synchronous subprocess paths in video/YouTube extraction and the Glimpse browser-curator probe to a shared asynchronous Bun subprocess helper (`runBunSubprocess`). `ffmpeg` frame capture, `ffprobe`/`yt-dlp` duration and stream probes, and the global `npm root -g` lookup no longer block the event loop via `execFileSync`: each child now streams stdout/stderr concurrently into byte-capped buffers (binary-safe for JPEG frame output), enforces a timeout with `SIGTERM`→`SIGKILL` escalation, honors an optional caller `AbortSignal` with the same tree-kill escalation, and maps timeout/abort/non-zero-exit/`ENOENT`/output-overflow into typed errors that preserve the existing user-facing `ffmpeg`/`ffprobe`/`yt-dlp` failure messages. Video and YouTube extraction functions now thread an optional `AbortSignal` from callers that already own one, and the Glimpse module resolver caches a single in-flight global-root probe so concurrent curator opens never spawn duplicate `npm` processes.
+
+### Fixed
+
+- Fixed collapsed web-search results hardcoding `CTRL+O`; the line-count hint now uses the effective `app.tools.expand` binding and keeps its factual counts when expansion is unbound.
+- Preserved provider-owned null header suppression and credential-specific `baseUrl` overrides for search-query rewriting and summary generation ([#1875](https://github.com/bastani-inc/atomic/issues/1875)).
+
+## [0.9.10-alpha.1] - 2026-07-19
+
+### Changed
+
+- Converted the reachable synchronous subprocess paths in video/YouTube extraction and the Glimpse browser-curator probe to a shared asynchronous Bun subprocess helper (`runBunSubprocess`). `ffmpeg` frame capture, `ffprobe`/`yt-dlp` duration and stream probes, and the global `npm root -g` lookup no longer block the event loop via `execFileSync`: each child now streams stdout/stderr concurrently into byte-capped buffers (binary-safe for JPEG frame output), enforces a timeout with `SIGTERM`→`SIGKILL` escalation, honors an optional caller `AbortSignal` with the same tree-kill escalation, and maps timeout/abort/non-zero-exit/`ENOENT`/output-overflow into typed errors that preserve the existing user-facing `ffmpeg`/`ffprobe`/`yt-dlp` failure messages. Video and YouTube extraction functions now thread an optional `AbortSignal` from callers that already own one, and the Glimpse module resolver caches a single in-flight global-root probe so concurrent curator opens never spawn duplicate `npm` processes.
+
+### Fixed
+
+- Fixed collapsed web-search results hardcoding `CTRL+O`; the line-count hint now uses the effective `app.tools.expand` binding and keeps its factual counts when expansion is unbound.
+- Preserved provider-owned null header suppression and credential-specific `baseUrl` overrides for search-query rewriting and summary generation ([#1875](https://github.com/bastani-inc/atomic/issues/1875)).
+
 ## [0.9.9] - 2026-07-15
 
 ### Changed

package/dist/builtin/web-access/extract-frames.ts

@@ -66,10 +66,10 @@ function buildFrameResult(
 }
 
 async function extractLocalFrames(
-	filePath: string, timestamps: number[],
+	filePath: string, timestamps: number[], signal?: AbortSignal,
 ): Promise<{ frames: VideoFrame[]; error: string | null }> {
 	const results = await Promise.all(timestamps.map(async (t) => {
-		const frame = await extractVideoFrame(filePath, t);
+		const frame = await extractVideoFrame(filePath, t, signal);
 		if ("error" in frame) return { error: frame.error };
 		return { ...frame, timestamp: formatSeconds(t) };
 	}));
@@ -89,12 +89,13 @@ function safeVideoInfo(url: string): { info: ReturnType<typeof isVideoFile>; err
 export async function extractRequestedFrames(
 	url: string,
 	options?: ExtractOptions,
+	signal?: AbortSignal,
 ): Promise<ExtractedContent | null> {
 	if (options?.frames && !options.timestamp) {
 		const frameCount = options.frames;
 		const ytInfo = isYouTubeURL(url);
 		if (ytInfo.isYouTube && ytInfo.videoId) {
-			const streamInfo = await getYouTubeStreamInfo(ytInfo.videoId);
+			const streamInfo = await getYouTubeStreamInfo(ytInfo.videoId, signal);
 			if ("error" in streamInfo) {
 				return { url, title: "Frames", content: streamInfo.error, error: streamInfo.error };
 			}
@@ -104,7 +105,7 @@ export async function extractRequestedFrames(
 			}
 			const dur = Math.floor(streamInfo.duration);
 			const timestamps = computeRangeTimestamps(0, dur, frameCount);
-			const result = await extractYouTubeFrames(ytInfo.videoId, timestamps, streamInfo);
+			const result = await extractYouTubeFrames(ytInfo.videoId, timestamps, streamInfo, signal);
 			const label = `${formatSeconds(0)}-${formatSeconds(dur)}`;
 			return buildFrameResult(url, label, timestamps.length, result.frames, result.error, streamInfo.duration);
 		}
@@ -114,13 +115,13 @@ export async function extractRequestedFrames(
 			return { url, title: "", content: "", error: localVideo.error };
 		}
 		if (localVideo.info) {
-			const durationResult = await getLocalVideoDuration(localVideo.info.absolutePath);
+			const durationResult = await getLocalVideoDuration(localVideo.info.absolutePath, signal);
 			if (typeof durationResult !== "number") {
 				return { url, title: "Frames", content: durationResult.error, error: durationResult.error };
 			}
 			const dur = Math.floor(durationResult);
 			const timestamps = computeRangeTimestamps(0, dur, frameCount);
-			const result = await extractLocalFrames(localVideo.info.absolutePath, timestamps);
+			const result = await extractLocalFrames(localVideo.info.absolutePath, timestamps, signal);
 			const label = `${formatSeconds(0)}-${formatSeconds(dur)}`;
 			return buildFrameResult(url, label, timestamps.length, result.frames, result.error, durationResult);
 		}
@@ -142,7 +143,7 @@ export async function extractRequestedFrames(
 		const frameCount = options.frames;
 		const ytInfo = isYouTubeURL(url);
 		if (ytInfo.isYouTube && ytInfo.videoId) {
-			const streamInfo = await getYouTubeStreamInfo(ytInfo.videoId);
+			const streamInfo = await getYouTubeStreamInfo(ytInfo.videoId, signal);
 			if ("error" in streamInfo) {
 				if (spec.type === "range") {
 					const label = `${formatSeconds(spec.start)}-${formatSeconds(spec.end)}`;
@@ -165,7 +166,7 @@ export async function extractRequestedFrames(
 				const timestamps = frameCount
 					? computeRangeTimestamps(spec.start, spec.end, frameCount)
 					: computeRangeTimestamps(spec.start, spec.end);
-				const result = await extractYouTubeFrames(ytInfo.videoId, timestamps, streamInfo);
+				const result = await extractYouTubeFrames(ytInfo.videoId, timestamps, streamInfo, signal);
 				return buildFrameResult(url, label, timestamps.length, result.frames, result.error, result.duration ?? undefined);
 			}
 
@@ -177,7 +178,7 @@ export async function extractRequestedFrames(
 					return { url, title: `Frames ${label}`, content: error, error };
 				}
 				const timestamps = computeRangeTimestamps(spec.seconds, end, frameCount);
-				const result = await extractYouTubeFrames(ytInfo.videoId, timestamps, streamInfo);
+				const result = await extractYouTubeFrames(ytInfo.videoId, timestamps, streamInfo, signal);
 				return buildFrameResult(url, label, timestamps.length, result.frames, result.error, result.duration ?? undefined);
 			}
 
@@ -185,7 +186,7 @@ export async function extractRequestedFrames(
 				const error = `Timestamp ${formatSeconds(spec.seconds)} exceeds video duration (${formatSeconds(Math.floor(streamInfo.duration))})`;
 				return { url, title: `Frame at ${options.timestamp}`, content: error, error };
 			}
-			const frame = await extractYouTubeFrame(ytInfo.videoId, spec.seconds, streamInfo);
+			const frame = await extractYouTubeFrame(ytInfo.videoId, spec.seconds, streamInfo, signal);
 			if ("error" in frame) {
 				return { url, title: `Frame at ${options.timestamp}`, content: frame.error, error: frame.error };
 			}
@@ -201,7 +202,7 @@ export async function extractRequestedFrames(
 				const timestamps = frameCount
 					? computeRangeTimestamps(spec.start, spec.end, frameCount)
 					: computeRangeTimestamps(spec.start, spec.end);
-				const result = await extractLocalFrames(localVideo.info.absolutePath, timestamps);
+				const result = await extractLocalFrames(localVideo.info.absolutePath, timestamps, signal);
 				const label = `${formatSeconds(spec.start)}-${formatSeconds(spec.end)}`;
 				return buildFrameResult(url, label, timestamps.length, result.frames, result.error);
 			}
@@ -209,12 +210,12 @@ export async function extractRequestedFrames(
 			if (frameCount) {
 				const end = spec.seconds + (frameCount - 1) * MIN_FRAME_INTERVAL;
 				const timestamps = computeRangeTimestamps(spec.seconds, end, frameCount);
-				const result = await extractLocalFrames(localVideo.info.absolutePath, timestamps);
+				const result = await extractLocalFrames(localVideo.info.absolutePath, timestamps, signal);
 				const label = `${formatSeconds(spec.seconds)}-${formatSeconds(end)}`;
 				return buildFrameResult(url, label, timestamps.length, result.frames, result.error);
 			}
 
-			const frame = await extractVideoFrame(localVideo.info.absolutePath, spec.seconds);
+			const frame = await extractVideoFrame(localVideo.info.absolutePath, spec.seconds, signal);
 			if ("error" in frame) {
 				return { url, title: `Frame at ${options.timestamp}`, content: frame.error, error: frame.error };
 			}

package/dist/builtin/web-access/extract.ts

@@ -145,7 +145,7 @@ export async function extractContent(
 		return { url, title: "", content: "", error: "Aborted" };
 	}
 
-	const frameResult = await extractRequestedFrames(url, options);
+	const frameResult = await extractRequestedFrames(url, options, signal);
 	if (frameResult) return frameResult;
 
 	const localVideo = safeVideoInfo(url);
@@ -451,7 +451,7 @@ async function extractViaHttp(
 			};
 		}
 
-		const markdown = turndown.turndown(article.content);
+		const markdown = turndown.turndown(article.content ?? "");
 		activityMonitor.logComplete(activityId, response.status);
 
 		if (markdown.length < MIN_USEFUL_CONTENT) {

package/dist/builtin/web-access/gemini-api.ts

@@ -1,7 +1,4 @@
 import { existsSync, readFileSync } from "node:fs";
-import { homedir } from "node:os";
-import { join } from "node:path";
-import { CONFIG_DIR_NAME } from "@bastani/atomic";
 import { findReadableConfigPath } from "./config-paths.ts";
 
 export const API_BASE = "https://generativelanguage.googleapis.com/v1beta";

package/dist/builtin/web-access/gemini-web-config.ts

@@ -1,7 +1,5 @@
 import { existsSync, readFileSync } from "node:fs";
-import { homedir } from "node:os";
-import { join } from "node:path";
-import { APP_NAME, CONFIG_DIR_NAME } from "@bastani/atomic";
+import { APP_NAME } from "@bastani/atomic";
 import { findReadableConfigPath } from "./config-paths.ts";
 
 const CONFIG_PATH = findReadableConfigPath();

package/dist/builtin/web-access/gemini-web.ts

@@ -1,3 +1,4 @@
+import { readFileSync } from "node:fs";
 import { basename } from "node:path";
 import { type CookieMap, getGoogleCookies } from "./chrome-cookies.js";
 import { getChromeProfileFromConfig, isBrowserCookieAccessAllowed, normalizeChromeProfile } from "./gemini-web-config.ts";

package/dist/builtin/web-access/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bastani/web-access",
-  "version": "0.9.9",
+  "version": "0.9.10",
   "private": true,
   "description": "Atomic extension for web search, URL fetching, GitHub repo cloning, PDF/video extraction. Fork of: https://github.com/nicobailon/pi-web-access",
   "contributors": [
@@ -31,7 +31,7 @@
   },
   "peerDependencies": {
     "@bastani/atomic": "*",
-    "@earendil-works/pi-tui": "^0.80.7"
+    "@earendil-works/pi-tui": "^0.80.10"
   },
   "peerDependenciesMeta": {
     "@bastani/atomic": {

package/dist/builtin/web-access/perplexity.ts

@@ -1,7 +1,4 @@
 import { existsSync, readFileSync } from "node:fs";
-import { homedir } from "node:os";
-import { join } from "node:path";
-import { CONFIG_DIR_NAME } from "@bastani/atomic";
 import { activityMonitor } from "./activity.js";
 import type { ExtractedContent } from "./extract.js";
 import { findReadableConfigPath } from "./config-paths.ts";

package/dist/builtin/web-access/result-renderers.ts

@@ -1,4 +1,4 @@
-import type { ToolDefinition } from "@bastani/atomic";
+import { keyHintIfBound, type ToolDefinition } from "@bastani/atomic";
 import { Box, Text } from "@earendil-works/pi-tui";
 import { formatSeconds } from "./utils.js";
 
@@ -89,7 +89,7 @@ function progressBar(progress: number): string {
 	return "\u2588".repeat(filled) + "\u2591".repeat(10 - filled);
 }
 
-export const renderWebSearchResult: ToolResultRenderer = (result, { expanded, isPartial }, theme) => {
+export const renderWebSearchResult = ((result, { expanded, isPartial }, theme) => {
 	const details = result.details as WebSearchResultDetails | undefined;
 
 	if (isPartial) {
@@ -241,13 +241,15 @@ export const renderWebSearchResult: ToolResultRenderer = (result, { expanded, is
 		}
 		const moreLines = Math.max(0, totalLines - collapsedLines);
 		if (moreLines > 0) {
-			box.addChild(new Text(theme.fg("muted", `\n... (${moreLines} more lines, ${totalLines} total, CTRL+O Expand)`), 0, 0));
+			const expandHint = keyHintIfBound("app.tools.expand", "Expand");
+			const prefix = theme.fg("muted", `\n... (${moreLines} more lines, ${totalLines} total${expandHint ? ", " : ")"}`);
+			box.addChild(new Text(prefix + (expandHint ? expandHint + theme.fg("muted", ")") : ""), 0, 0));
 		}
 		return box;
 	}
 
 	return new Text(lines.join("\n"), 0, 0);
-};
+}) satisfies ToolResultRenderer;
 
 export const renderCodeSearchResult: ToolResultRenderer = (result, { expanded }, theme) => {
 	const details = result.details as CodeSearchResultDetails | undefined;
@@ -349,7 +351,7 @@ export const renderGetSearchContentResult: ToolResultRenderer = (result, { expan
 export function renderWebAccessToolResult(name: string, args: ToolRenderResultArgs): ToolRenderResult {
 	switch (name) {
 		case "web_search":
-			return renderWebSearchResult(...args);
+			return renderWebSearchResult(args[0], args[1], args[2]);
 		case "code_search":
 			return renderCodeSearchResult(...args);
 		case "fetch_content":

package/dist/builtin/web-access/subprocess.ts

@@ -0,0 +1,100 @@
+export interface BunSubprocessOptions {
+	timeoutMs: number;
+	maxStdoutBytes: number;
+	maxStderrBytes?: number;
+	signal?: AbortSignal;
+	cwd?: string;
+	env?: Record<string, string>;
+}
+
+export interface BunSubprocessResult {
+	exitCode: number;
+	stdout: Buffer;
+	stderr: string;
+}
+
+export class AsyncSubprocessError extends Error {
+	readonly code?: string;
+	readonly stderr: string;
+	readonly killed: boolean;
+	constructor(message: string, options: { code?: string; stderr?: string; killed?: boolean } = {}) {
+		super(message);
+		this.name = "AsyncSubprocessError";
+		this.code = options.code;
+		this.stderr = options.stderr ?? "";
+		this.killed = options.killed === true;
+	}
+}
+
+async function readBounded(
+	stream: ReadableStream<Uint8Array>,
+	maxBytes: number,
+	onOverflow: () => void,
+): Promise<Buffer> {
+	const reader = stream.getReader();
+	const chunks: Uint8Array[] = [];
+	let bytes = 0;
+	try {
+		while (true) {
+			const { done, value } = await reader.read();
+			if (done) break;
+			bytes += value.byteLength;
+			if (bytes > maxBytes) {
+				onOverflow();
+				throw new AsyncSubprocessError(`Subprocess output exceeded ${maxBytes} bytes`, { code: "ENOBUFS", killed: true });
+			}
+			chunks.push(value);
+		}
+	} finally {
+		reader.releaseLock();
+	}
+	return Buffer.concat(chunks.map((chunk) => Buffer.from(chunk)), bytes);
+}
+
+export async function runBunSubprocess(
+	command: string,
+	args: readonly string[],
+	options: BunSubprocessOptions,
+): Promise<BunSubprocessResult> {
+	let proc: ReturnType<typeof Bun.spawn>;
+	try {
+		proc = Bun.spawn([command, ...args], {
+			cwd: options.cwd,
+			env: options.env ? { ...process.env, ...options.env } : process.env,
+			stdin: "ignore",
+			stdout: "pipe",
+			stderr: "pipe",
+		});
+	} catch (error) {
+		const failure = error instanceof Error ? error : new Error(String(error));
+		throw new AsyncSubprocessError(failure.message, { code: (failure as Error & { code?: string }).code });
+	}
+	let timedOut = false;
+	let aborted = false;
+	const terminate = (): void => {
+		try { proc.kill("SIGTERM"); } catch {}
+		void Promise.race([proc.exited, Bun.sleep(500)]).then(() => {
+			if (proc.exitCode === null) try { proc.kill("SIGKILL"); } catch {}
+		});
+	};
+	const onAbort = (): void => { aborted = true; terminate(); };
+	options.signal?.addEventListener("abort", onAbort, { once: true });
+	const timeout = setTimeout(() => { timedOut = true; terminate(); }, options.timeoutMs);
+	try {
+		const stdoutPromise = readBounded(proc.stdout as ReadableStream<Uint8Array>, options.maxStdoutBytes, terminate);
+		const stderrPromise = readBounded(proc.stderr as ReadableStream<Uint8Array>, options.maxStderrBytes ?? 256 * 1024, terminate);
+		const [exitCode, stdout, stderrBuffer] = await Promise.all([proc.exited, stdoutPromise, stderrPromise]);
+		const stderr = stderrBuffer.toString("utf8");
+		if (timedOut) throw new AsyncSubprocessError(`${command} timed out`, { code: "ETIMEDOUT", stderr, killed: true });
+		if (aborted) throw new AsyncSubprocessError(`${command} aborted`, { code: "ABORT_ERR", stderr, killed: true });
+		if (exitCode !== 0) throw new AsyncSubprocessError(`${command} exited with code ${exitCode}`, { code: String(exitCode), stderr });
+		return { exitCode, stdout, stderr };
+	} catch (error) {
+		terminate();
+		if (error instanceof AsyncSubprocessError) throw error;
+		throw new AsyncSubprocessError(error instanceof Error ? error.message : String(error), { killed: true });
+	} finally {
+		clearTimeout(timeout);
+		options.signal?.removeEventListener("abort", onAbort);
+	}
+}

package/dist/builtin/web-access/summary-review.ts

@@ -1,3 +1,4 @@
+import type { ProviderHeaders } from "@earendil-works/pi-ai";
 import { complete, getModel, type Message, type Model } from "@earendil-works/pi-ai/compat";
 import type { ExtensionContext } from "@bastani/atomic";
 import type { QueryResultData } from "./storage.js";
@@ -180,7 +181,7 @@ export function buildDeterministicSummary(results: QueryResultData[]): { summary
 async function resolveSummaryModel(
 	ctx: SummaryGenerationContext,
 	modelOverride?: string,
-): Promise<{ model: Model; apiKey: string; headers?: Record<string, string> }> {
+): Promise<{ model: Model; apiKey: string; headers?: ProviderHeaders }> {
 	const normalizedOverride = typeof modelOverride === "string" ? modelOverride.trim() : "";
 	if (normalizedOverride.length > 0) {
 		const slashIndex = normalizedOverride.indexOf("/");
@@ -197,14 +198,24 @@ async function resolveSummaryModel(
 		if (!selectedAuth.ok || !selectedAuth.apiKey) {
 			throw new Error(`No API key available for summary model ${normalizedOverride}`);
 		}
-		return { model: selectedModel, apiKey: selectedAuth.apiKey, headers: selectedAuth.headers };
+		return {
+			model: selectedAuth.baseUrl === undefined ? selectedModel : { ...selectedModel, baseUrl: selectedAuth.baseUrl },
+			apiKey: selectedAuth.apiKey,
+			headers: selectedAuth.headers,
+		};
 	}
 
 	for (const { provider, id } of PREFERRED_SUMMARY_MODELS) {
 		const model = getModel(provider, id);
 		if (!model) continue;
 		const auth = await ctx.modelRegistry.getApiKeyAndHeaders(model);
-		if (auth.ok && auth.apiKey) return { model, apiKey: auth.apiKey, headers: auth.headers };
+		if (auth.ok && auth.apiKey) {
+			return {
+				model: auth.baseUrl === undefined ? model : { ...model, baseUrl: auth.baseUrl },
+				apiKey: auth.apiKey,
+				headers: auth.headers,
+			};
+		}
 	}
 
 	throw new Error(`No API key available for summary models: ${PREFERRED_SUMMARY_MODELS.map(c => `${c.provider}/${c.id}`).join(", ")}`);

package/dist/builtin/web-access/video-extract.ts

@@ -1,15 +1,13 @@
-import { execFileSync } from "node:child_process";
 import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
 import { readFile } from "node:fs/promises";
 import { resolve, extname, basename, join, dirname } from "node:path";
-import { homedir } from "node:os";
-import { CONFIG_DIR_NAME } from "@bastani/atomic";
 import { activityMonitor } from "./activity.js";
 import { isGeminiWebAvailable, queryWithCookies } from "./gemini-web.js";
 import { queryGeminiApiWithVideo, getApiKey, API_BASE } from "./gemini-api.js";
 import { extractHeadingTitle, type ExtractedContent, type ExtractOptions, type FrameResult } from "./extract.js";
 import { readExecError, trimErrorText, mapFfmpegError } from "./utils.js";
 import { findReadableConfigPath } from "./config-paths.ts";
+import { runBunSubprocess } from "./subprocess.ts";
 
 const CONFIG_PATH = findReadableConfigPath();
 const UPLOAD_BASE = "https://generativelanguage.googleapis.com/upload/v1beta";
@@ -173,7 +171,7 @@ export async function extractVideo(
 		?? await tryVideoGeminiWeb(info, effectivePrompt, effectiveModel, signal);
 
 	if (result) {
-		const thumbnail = await extractVideoFrame(info.absolutePath);
+		const thumbnail = await extractVideoFrame(info.absolutePath, 1, signal);
 		if (!("error" in thumbnail)) {
 			result.thumbnail = thumbnail;
 		}
@@ -197,28 +195,25 @@ function mapFfprobeError(err: unknown): string {
 	return snippet ? `ffprobe failed: ${snippet}` : "ffprobe failed";
 }
 
-export async function extractVideoFrame(filePath: string, seconds: number = 1): Promise<FrameResult> {
+export async function extractVideoFrame(filePath: string, seconds: number = 1, signal?: AbortSignal): Promise<FrameResult> {
 	try {
-		const buffer = execFileSync("ffmpeg", [
+		const { stdout } = await runBunSubprocess("ffmpeg", [
 			"-ss", String(seconds), "-i", filePath,
 			"-frames:v", "1", "-f", "image2pipe", "-vcodec", "mjpeg", "pipe:1",
-		], { maxBuffer: 5 * 1024 * 1024, timeout: 10000, stdio: ["pipe", "pipe", "pipe"] });
-		if (buffer.length === 0) return { error: "ffmpeg failed: empty output" };
-		return { data: buffer.toString("base64"), mimeType: "image/jpeg" };
+		], { timeoutMs: 10_000, maxStdoutBytes: 5 * 1024 * 1024, signal });
+		if (stdout.length === 0) return { error: "ffmpeg failed: empty output" };
+		return { data: stdout.toString("base64"), mimeType: "image/jpeg" };
 	} catch (err) {
 		return { error: mapFfmpegError(err) };
 	}
 }
 
-export async function getLocalVideoDuration(filePath: string): Promise<number | { error: string }> {
+export async function getLocalVideoDuration(filePath: string, signal?: AbortSignal): Promise<number | { error: string }> {
 	try {
-		const output = execFileSync("ffprobe", [
-			"-v", "quiet",
-			"-show_entries", "format=duration",
-			"-of", "csv=p=0",
-			filePath,
-		], { timeout: 10000, encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
-		const duration = Number.parseFloat(output);
+		const { stdout } = await runBunSubprocess("ffprobe", [
+			"-v", "quiet", "-show_entries", "format=duration", "-of", "csv=p=0", filePath,
+		], { timeoutMs: 10_000, maxStdoutBytes: 64 * 1024, signal });
+		const duration = Number.parseFloat(stdout.toString("utf8").trim());
 		if (!Number.isFinite(duration)) return { error: "ffprobe failed: invalid duration output" };
 		return duration;
 	} catch (err) {