@herbertgao/pi-extensions 2026.8.7 → 2026.8.8

package/node_modules/pi-web-access/index.ts

@@ -34,7 +34,7 @@ import {
 	type SummaryMeta,
 } from "./summary-review.ts";
 import { randomUUID } from "node:crypto";
-import { execFileSync } from "node:child_process";
+import { execFileSync, spawn } from "node:child_process";
 import { createRequire } from "node:module";
 import { platform } from "node:os";
 import { existsSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";
@@ -744,11 +744,26 @@ function closeCurator(callId?: string): void {
 
 async function openInBrowser(pi: ExtensionAPI, url: string): Promise<void> {
 	const plat = platform();
+	if (plat !== "darwin" && plat !== "win32") {
+		await new Promise<void>((resolve, reject) => {
+			const child = spawn("xdg-open", [url], { detached: true, stdio: "ignore" });
+			const timer = setTimeout(resolve, 100);
+			child.once("error", (err) => {
+				clearTimeout(timer);
+				reject(err);
+			});
+			child.once("exit", (code) => {
+				clearTimeout(timer);
+				if (code === 0) resolve();
+				else reject(new Error(`Failed to open browser (exit code ${code ?? "unknown"})`));
+			});
+			child.unref();
+		});
+		return;
+	}
 	const result = plat === "darwin"
 		? await pi.exec("open", [url])
-		: plat === "win32"
-			? await pi.exec("cmd", ["/c", "start", "", url])
-			: await pi.exec("xdg-open", [url]);
+		: await pi.exec("cmd", ["/c", "start", "", url]);
 	if (result.code !== 0) {
 		throw new Error(result.stderr || `Failed to open browser (exit code ${result.code})`);
 	}

package/node_modules/pi-web-access/openai-search.ts

@@ -19,7 +19,7 @@ const MODEL_PREFERENCE = [
 	(id: string) => id.includes("terra"),
 	(id: string) => /^gpt-\d+(\.\d+)?$/.test(id),
 ];
-const SEARCH_PROVIDERS = ["openai-codex", "openai"] as const;
+const DEFAULT_SEARCH_PROVIDERS: readonly string[] = ["openai-codex", "openai"];
 
 function pickSearchModel<T extends { id: string }>(models: readonly T[]): T | undefined {
 	const candidates = models
@@ -36,12 +36,13 @@ interface WebSearchConfig {
 	openaiApiKey?: unknown;
 	openaiResponsesUrl?: unknown;
 	openaiSearchModel?: unknown;
+	openaiSearchProviders?: unknown;
 }
 
 type ProviderHeaders = Record<string, string | null>;
 
 interface OpenAIAuth {
-	provider: "openai-codex" | "openai";
+	provider: string;
 	apiKey: string;
 	model: string;
 	headers: ProviderHeaders;
@@ -149,6 +150,14 @@ function resolveConfiguredResponsesUrl(value: unknown): string {
 	return url.toString();
 }
 
+function resolveConfiguredSearchProviders(value: unknown): readonly string[] {
+	if (value === undefined) return DEFAULT_SEARCH_PROVIDERS;
+	if (!Array.isArray(value) || value.some((entry) => typeof entry !== "string" || entry.trim().length === 0)) {
+		throw new Error(`openaiSearchProviders in ${CONFIG_PATH} must be an array of non-empty Pi provider ids`);
+	}
+	return value.map((entry) => entry.trim());
+}
+
 function resolveConfiguredSearchModel(value: unknown): string | undefined {
 	if (value == null) return undefined;
 	if (typeof value !== "string" || value.trim().length === 0) {
@@ -165,14 +174,14 @@ function toRequestHeaders(headers: ProviderHeaders): Record<string, string> {
 	return requestHeaders;
 }
 
-async function resolvePiAuth(ctx: ExtensionContext, responsesUrl: string, modelOverride?: string): Promise<OpenAIAuth | undefined> {
+async function resolvePiAuth(ctx: ExtensionContext, responsesUrl: string, providers: readonly string[], modelOverride?: string): Promise<OpenAIAuth | undefined> {
 	let models: ReturnType<typeof ctx.modelRegistry.getAll>;
 	try {
 		models = ctx.modelRegistry.getAll();
 	} catch {
 		return undefined;
 	}
-	for (const provider of SEARCH_PROVIDERS) {
+	for (const provider of providers) {
 		const preferred = pickSearchModel(models.filter((model) => model.provider === provider));
 		if (!preferred) continue;
 		try {
@@ -196,8 +205,9 @@ export async function resolveOpenAIAuth(ctx?: ExtensionContext, signal?: AbortSi
 	const config = loadConfig();
 	const responsesUrl = resolveConfiguredResponsesUrl(config.openaiResponsesUrl);
 	const modelOverride = resolveConfiguredSearchModel(config.openaiSearchModel);
+	const providers = resolveConfiguredSearchProviders(config.openaiSearchProviders);
 	if (ctx) {
-		const auth = await resolvePiAuth(ctx, responsesUrl, modelOverride);
+		const auth = await resolvePiAuth(ctx, responsesUrl, providers, modelOverride);
 		if (auth) return auth;
 	}
 
@@ -221,7 +231,8 @@ export async function resolveOpenAIAuth(ctx?: ExtensionContext, signal?: AbortSi
 export async function isOpenAISearchAvailable(ctx?: ExtensionContext): Promise<boolean> {
 	const config = loadConfig();
 	const responsesUrl = resolveConfiguredResponsesUrl(config.openaiResponsesUrl);
-	if (ctx && await resolvePiAuth(ctx, responsesUrl)) return true;
+	const providers = resolveConfiguredSearchProviders(config.openaiSearchProviders);
+	if (ctx && await resolvePiAuth(ctx, responsesUrl, providers)) return true;
 	return hasCredentialSource({
 		provider: "OpenAI",
 		configuredValue: config.openaiApiKey,

package/node_modules/pi-web-access/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-web-access",
-  "version": "0.24.0",
+  "version": "0.24.1",
   "description": "Web search, URL fetching, GitHub repo cloning, PDF extraction, YouTube video understanding, and local video analysis for Pi coding agent. Supports OpenAI, Brave, Parallel, TinyFish, Search1API, Searchinfinity, Querit, Tavily, Firecrawl, Jina, SERPdive, Kagi, Ollama, AnySearch, Bright Data SERP, SerpBase, SearXNG, Exa, Perplexity, and Gemini.",
   "type": "module",
   "scripts": {

package/node_modules/pi-web-access/pdf-extract.ts

@@ -51,6 +51,7 @@ export const PDF_PROVIDER_VALUES = new Set<PDFProvider>([
 export interface PDFConfig {
 	enabled: boolean;
 	maxSizeMB: number;
+	maxPages: number;
 	provider: PDFProvider;
 	datalabMode: DatalabMode;
 	datalabTimeoutMs: number;
@@ -69,6 +70,7 @@ export function loadPDFConfig(): PDFConfig {
 		return {
 			enabled: true,
 			maxSizeMB: DEFAULT_PDF_MAX_SIZE_MB,
+			maxPages: DEFAULT_MAX_PAGES,
 			provider: "auto",
 			datalabMode: normalizeDatalabMode(process.env.DATALAB_MODE),
 			datalabTimeoutMs: DEFAULT_DATALAB_TIMEOUT_MS,
@@ -98,6 +100,13 @@ export function loadPDFConfig(): PDFConfig {
 		configured > 0
 			? Math.min(configured, MAX_PDF_MAX_SIZE_MB)
 			: DEFAULT_PDF_MAX_SIZE_MB;
+	const configuredMaxPages = pdf.maxPages;
+	const maxPages =
+		typeof configuredMaxPages === "number" &&
+		Number.isFinite(configuredMaxPages) &&
+		configuredMaxPages > 0
+			? Math.max(1, Math.floor(configuredMaxPages))
+			: DEFAULT_MAX_PAGES;
 
 	const provider =
 		typeof pdf.provider === "string" &&
@@ -120,6 +129,7 @@ export function loadPDFConfig(): PDFConfig {
 	return {
 		enabled,
 		maxSizeMB: normalized,
+		maxPages,
 		provider,
 		datalabMode,
 		datalabTimeoutMs,
@@ -155,18 +165,21 @@ export async function extractPDFToMarkdown(
 	options: PDFExtractOptions = {},
 ): Promise<PDFExtractResult> {
 	const {
-		maxPages = DEFAULT_MAX_PAGES,
+		maxPages,
 		outputDir = DEFAULT_OUTPUT_DIR,
 		filename,
 		signal,
 		geminiTimeoutMs,
 	} = options;
 
-	const safeMaxPages = Number.isFinite(maxPages)
-		? Math.max(1, Math.floor(maxPages))
-		: DEFAULT_MAX_PAGES;
-	const urlTitle = extractTitleFromURL(url);
 	const pdfConfig = loadPDFConfig();
+	const safeMaxPages =
+		maxPages === undefined
+			? pdfConfig.maxPages
+			: Number.isFinite(maxPages)
+				? Math.max(1, Math.floor(maxPages))
+				: DEFAULT_MAX_PAGES;
+	const urlTitle = extractTitleFromURL(url);
 	const provider = pdfConfig.provider;
 
 	if (provider === "auto" || provider === "datalab") {

package/node_modules/pi-web-access/ssrf-protection.ts

@@ -5,6 +5,7 @@ import { getWebSearchConfigPath } from "./utils.ts";
 
 const DEFAULT_MAX_REDIRECTS = 5;
 const REDIRECT_STATUSES = new Set([301, 302, 303, 307, 308]);
+const LOOPBACK_ALLOW_RANGES = ["127.0.0.0/8", "::1", "::ffff:127.0.0.0/104"];
 
 export type LookupAddress = { address: string; family: number };
 export type Lookup = (hostname: string) => Promise<LookupAddress[]>;
@@ -152,6 +153,8 @@ interface ValidationOptions {
 	 * the local SSRF preflight. This does not configure proxy transport.
 	 */
 	trustEnvProxy?: boolean;
+	/** Allow loopback URLs for explicit provider base endpoints, not fetched targets. */
+	allowLoopback?: boolean;
 }
 
 /** Parsed entry from `allowRanges`: a network address (4 or 16 bytes) + prefix length. */
@@ -185,7 +188,11 @@ export async function validateRemoteUrl(rawUrl: string | URL, options: Validatio
 
 	const hostname = normalizeHostname(url.hostname);
 	if (!hostname) throw new Error("URL must include a hostname");
-	if (hostname === "localhost" || hostname.endsWith(".localhost")) {
+	if (hostname === "localhost") {
+		if (options.allowLoopback === true) return url;
+		throw new Error(`Blocked internal hostname: ${hostname}`);
+	}
+	if (hostname.endsWith(".localhost")) {
 		throw new Error(`Blocked internal hostname: ${hostname}`);
 	}
 
@@ -193,7 +200,10 @@ export async function validateRemoteUrl(rawUrl: string | URL, options: Validatio
 	assertDomainPolicy(hostname, options.domainPolicy);
 
 	if (net.isIP(hostname)) {
-		assertPublicAddress(hostname, hostname, allowRanges);
+		const addressAllowRanges = options.allowLoopback === true
+			? [...allowRanges, ...parseAllowRanges(LOOPBACK_ALLOW_RANGES)]
+			: allowRanges;
+		assertPublicAddress(hostname, hostname, addressAllowRanges);
 		return url;
 	}
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@herbertgao/pi-extensions",
-  "version": "2026.8.7",
+  "version": "2026.8.8",
   "description": "Aggregate installer for HerbertGao-maintained Pi extensions.",
   "keywords": [
     "extensions",
@@ -42,7 +42,7 @@
     "@earendil-works/pi-tui": "^0.84.2",
     "@effect/platform-node": "4.0.0-beta.103",
     "@effect/platform-node-shared": "4.0.0-beta.103",
-    "@herbertgao/pi-cc-extensions": "0.8.56",
+    "@herbertgao/pi-cc-extensions": "0.8.57",
     "@herbertgao/pi-copy-response": "0.2.6",
     "@herbertgao/pi-handoff": "1.1.2",
     "@herbertgao/pi-inline-skills": "1.0.5",
@@ -53,18 +53,18 @@
     "@herbertgao/pi-stash": "0.1.1",
     "@herbertgao/pi-subagents": "0.16.0",
     "@herbertgao/pi-titlebar-spinner": "0.1.3",
-    "@juicesharp/rpiv-ask-user-question": "2.6.4",
-    "@juicesharp/rpiv-config": "^2.6.4",
+    "@juicesharp/rpiv-ask-user-question": "2.7.0",
+    "@juicesharp/rpiv-config": "^2.7.0",
     "@modelcontextprotocol/client": "2.0.0",
     "@modelcontextprotocol/core": "2.0.0",
     "@modelcontextprotocol/ext-apps": "^1.2.2",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@mozilla/readability": "^0.6.0",
     "@napi-rs/keyring": "^1.3.0",
-    "@narumitw/pi-btw": "0.55.0",
-    "@narumitw/pi-tui-kit": "^0.56.0",
+    "@narumitw/pi-btw": "0.55.1",
+    "@narumitw/pi-tui-kit": "^0.57.0",
     "@noble/ed25519": "^3.1.0",
-    "@pi-plugins/fast-mode": "0.1.9",
+    "@pi-plugins/fast-mode": "0.1.10",
     "@shikijs/cli": "^4.0.2",
     "@sinclair/typebox": "^0.34.49",
     "ajv": "^8.17.1",
@@ -82,9 +82,9 @@
     "open": "^10.2.0",
     "p-limit": "^6.1.0",
     "pi-footer": "0.5.1",
-    "pi-lens": "4.1.0",
+    "pi-lens": "4.1.1",
     "pi-mcp-adapter": "2.27.0",
-    "pi-web-access": "0.24.0",
+    "pi-web-access": "0.24.1",
     "pidusage": "^4.0.1",
     "promise.try": "^2.0.1",
     "qrcode-terminal": "^0.12.0",