@diegopetrucci/pi-extensions 0.1.80 → 0.1.82

package/extensions/test-runner/package.json

@@ -0,0 +1,40 @@
+{
+  "name": "@diegopetrucci/pi-test-runner",
+  "version": "0.1.0",
+  "description": "A standalone pi extension that adds a test_runner subagent tool that runs exact validation steps in an isolated child agent.",
+  "keywords": [
+    "pi-package",
+    "pi",
+    "testing",
+    "validation",
+    "subagent"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/diegopetrucci/pi-extensions.git",
+    "directory": "extensions/test-runner"
+  },
+  "files": [
+    "index.ts",
+    "README.md",
+    ".pi-fleet-tested-version"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "pi": {
+    "extensions": [
+      "index.ts"
+    ]
+  },
+  "peerDependencies": {
+    "@earendil-works/pi-ai": "*",
+    "@earendil-works/pi-coding-agent": "*",
+    "typebox": "*"
+  },
+  "type": "module",
+  "engines": {
+    "node": ">=22.19.0"
+  }
+}

package/extensions/triage-comments/index.ts

@@ -175,11 +175,39 @@ const SAFE_GIT_BRANCH_FLAGS = new Set([
   "--remotes",
   "-v",
   "-vv",
+  "--verbose",
+  "-l",
+  "--list",
   "--show-current",
+  "--column",
+  "--no-column",
+  "--color",
+  "--no-color",
+  "-i",
+  "--ignore-case",
+]);
+const SAFE_GIT_BRANCH_VALUE_FLAGS = new Set([
+  "--contains",
+  "--no-contains",
+  "--merged",
+  "--no-merged",
+  "--points-at",
+  "--sort",
+  "--format",
+]);
+// Flags that make `git branch` list instead of create a branch from positional args.
+const GIT_BRANCH_LISTING_FLAGS = new Set([
+  "-a",
+  "--all",
+  "-r",
+  "--remotes",
+  "-l",
   "--list",
   "--contains",
+  "--no-contains",
   "--merged",
   "--no-merged",
+  "--points-at",
 ]);
 const SAFE_GIT_GLOBAL_FLAGS = new Set(["--no-pager", "--no-optional-locks"]);
 const SAFE_GIT_CONFIG_OVERRIDES = [
@@ -1015,22 +1043,27 @@ function getGitSubcommand(tokens: string[]): {
 function isSafeGitBranchCommand(tokens: string[], subcommandIndex: number): boolean {
   const args = tokens.slice(subcommandIndex + 1);
   if (args.length === 0) return true;
-  if (
-    args.some(
-      (arg) =>
-        /^-(?:d|D|m|M|c|C|f)$/.test(arg) ||
-        /^--(?:delete|move|copy|force|set-upstream-to|unset-upstream)$/.test(arg),
-    )
-  ) {
+  let hasListingMode = false;
+  let hasPositional = false;
+  for (const arg of args) {
+    if (!arg.startsWith("-")) {
+      hasPositional = true;
+      continue;
+    }
+    const name = arg.split("=", 1)[0] ?? "";
+    const hasValue = arg.includes("=");
+    if (!hasValue && SAFE_GIT_BRANCH_FLAGS.has(arg)) {
+      if (GIT_BRANCH_LISTING_FLAGS.has(arg)) hasListingMode = true;
+      continue;
+    }
+    if (SAFE_GIT_BRANCH_VALUE_FLAGS.has(name)) {
+      if (GIT_BRANCH_LISTING_FLAGS.has(name)) hasListingMode = true;
+      continue;
+    }
     return false;
   }
-  return args.some(
-    (arg) =>
-      SAFE_GIT_BRANCH_FLAGS.has(arg) ||
-      arg.startsWith("--contains=") ||
-      arg.startsWith("--merged=") ||
-      arg.startsWith("--no-merged="),
-  );
+  if (args.includes("--show-current")) return !hasPositional;
+  return !hasPositional || hasListingMode;
 }
 
 function isSafeGitRemoteCommand(tokens: string[], subcommandIndex: number): boolean {
@@ -1038,7 +1071,7 @@ function isSafeGitRemoteCommand(tokens: string[], subcommandIndex: number): bool
   if (args.length === 0) return true;
   if (args.length === 1 && (args[0] === "-v" || args[0] === "--verbose")) return true;
   const remoteAction = args.find((arg) => !arg.startsWith("-"));
-  return remoteAction === "show" || remoteAction === "get-url";
+  return remoteAction === "get-url";
 }
 
 function isBlockedGitLocalFileOption(
@@ -1143,7 +1176,7 @@ function getBlockedGitReason(command: string): string | undefined {
   }
   if (parsed.subcommand === "remote") {
     if (!isSafeGitRemoteCommand(tokens, parsed.index)) {
-      return "Triage bash allows git remote only for read-only list/show/get-url queries.";
+      return "Triage bash allows git remote only for read-only list or get-url queries.";
     }
     return undefined;
   }
@@ -1193,6 +1226,9 @@ function getBlockedGhApiReason(tokens: string[]): string | undefined {
     ) {
       return "Triage bash allows read-only gh api calls only; request fields and input files are blocked.";
     }
+    if (token === "--cache" || lowerToken.startsWith("--cache=")) {
+      return "Triage bash blocks gh api --cache because it writes local cache files.";
+    }
 
     let method: string | undefined;
     if (lowerToken === "-x" || lowerToken === "--method") {
@@ -1238,6 +1274,20 @@ function getBlockedGhReason(command: string): string | undefined {
   if (/\bgh\s+auth\s+(?:login|logout|refresh|setup-git|token)\b/i.test(command)) {
     return "Triage bash blocks gh auth commands and token inspection.";
   }
+  if (
+    tokens.some((token) => {
+      const lowerToken = token.toLowerCase();
+      return (
+        lowerToken === "--web" ||
+        lowerToken === "-w" ||
+        (/^-[a-z]{2,}$/i.test(token) && lowerToken.includes("w")) ||
+        lowerToken.startsWith("--web=") ||
+        lowerToken.startsWith("-w=")
+      );
+    })
+  ) {
+    return "Triage bash blocks gh --web because it can launch external browser helpers.";
+  }
   const apiReason = getBlockedGhApiReason(tokens);
   if (apiReason) return apiReason;
   if (

package/extensions/triage-comments/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@diegopetrucci/pi-triage-comments",
-  "version": "0.1.17",
+  "version": "0.1.18",
   "description": "A pi extension that adds /triage-comments and a read-only triage_comments subagent tool for review-comment triage.",
   "keywords": [
     "pi-package",

package/extensions/web-scout/.pi-fleet-tested-version

@@ -0,0 +1 @@
+0.84.4

package/extensions/web-scout/README.md

@@ -0,0 +1,67 @@
+# web-scout
+
+Adds a `web_scout` subagent tool that adapts The Last Harness [`web-scout`](https://github.com/diegopetrucci/the-last-harness/blob/main/agents/subagents/web-scout.md) prompt into a standalone pi extension.
+
+Use it for focused, read-only web research that needs cited sources. The subagent searches and fetches pages through the hosted [Exa](https://exa.ai) MCP endpoint and reports findings with URLs, retrieval timestamps, and short verbatim quotes. Blockers are reported in the final result; the subagent cannot ask follow-up questions.
+
+## Install
+
+### Standalone npm package
+
+```bash
+pi install npm:@diegopetrucci/pi-web-scout
+```
+
+### Collection package
+
+```bash
+pi install npm:@diegopetrucci/pi-extensions
+```
+
+### GitHub package
+
+```bash
+pi install git:github.com/diegopetrucci/pi-extensions
+```
+
+Then reload pi:
+
+```text
+/reload
+```
+
+## `web_scout` tool behavior
+
+The tool accepts:
+
+- `task` — required research question
+- `cwd` — optional working directory used for local read-only context; defaults to the current session directory
+
+The subagent runs in-process in an isolated child session with:
+
+- the current session model (no automatic model selection and no persisted `/config` commands);
+- `medium` thinking, clamped to the model's supported levels;
+- `web_search` and `fetch_url`, implemented in this package by calling `https://mcp.exa.ai/mcp` with plain JSON-RPC over HTTP (`web_search_exa` / `web_fetch_exa`); no SDK dependency;
+- read-only built-in tools: `read`, `grep`, `find`, `ls`;
+- configured MCP tools (run without confirmation in the subagent; may have side effects; requires host Pi >=1.0.4; older hosts degrade to no MCP, no error); the global `mcp.json` always applies; a project `.pi/mcp.json` is loaded only when the host session has already trusted the project;
+- a local-checkout path guard for file inspection.
+
+The output is a markdown report: research target, key findings with citations, limitations, and next steps. The tool appends a run-details suffix with the model, effective thinking level, turn count, tool calls, duration, working directory, and tools used.
+
+## API key
+
+No API key is required. If `EXA_API_KEY` is set in the environment it is passed to Exa (`exaApiKey` query parameter) for higher rate limits. The key is never logged or echoed: it is redacted from error messages and is not shown to the model.
+
+## Guarantees
+
+- `fetch_url` accepts only `http://` and `https://` URLs; other schemes are rejected before any request.
+- Each Exa request has a 30 second timeout; tool output is truncated (20,000 characters), and `fetch_url` page size is capped.
+- Rate limits (HTTP 429 or Exa rate-limit errors) and network failures produce clear tool errors rather than silent empty results.
+- Fetched content is treated as untrusted data; the prompt requires citations and forbids fabrication.
+- Runtime guards block write/edit/bash tools and path traversal outside the checkout. Guards apply to built-in tools only; configured MCP tools pass the guard and are limited only by prompt guidance.
+
+## Limitations
+
+- The subagent has an 8-turn and 8-minute budget; tool use is disabled on the final turn so it can answer.
+- Web access depends on the Exa hosted endpoint's availability and unauthenticated rate limits.
+- Search and fetch contents are sent to Exa; do not include secrets in the research task.