@herbertgao/pi-extensions 2026.8.7 → 2026.8.9

package/node_modules/pi-web-access/github-extract.ts

@@ -1,6 +1,7 @@
-import { existsSync, readFileSync, rmSync, statSync, readdirSync, openSync, readSync, closeSync, realpathSync } from "node:fs";
+import { closeSync, existsSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, realpathSync, rmSync, statSync, unlinkSync } from "node:fs";
 import { execFile, spawn, type ChildProcess } from "node:child_process";
-import { extname, join, resolve as resolvePath, sep as pathSep } from "node:path";
+import { createHash } from "node:crypto";
+import { basename, dirname, extname, join, resolve as resolvePath, sep as pathSep } from "node:path";
 import { activityMonitor } from "./activity.ts";
 import type { ExtractedContent } from "./extract.ts";
 import { checkGhAvailable, checkRepoSize, fetchViaApi, showGhHint } from "./github-api.ts";
@@ -39,10 +40,15 @@ export interface GitHubUrlInfo {
 }
 
 interface CachedClone {
-	localPath: string;
+	destination: CloneDestination;
 	clonePromise: Promise<string | null>;
 }
 
+interface CloneDestination {
+	rootPath: string;
+	localPath: string;
+}
+
 interface GitHubCloneConfig {
 	enabled: boolean;
 	maxRepoSizeMB: number;
@@ -137,20 +143,21 @@ export function parseGitHubUrl(url: string): GitHubUrlInfo | null {
 	const host = parsed.hostname.toLowerCase();
 	if (host !== "github.com" && host !== "www.github.com") return null;
 
-	const segments = parsed.pathname
-		.split("/")
-		.filter(Boolean)
-		.map((segment) => {
-			try {
-				return decodeURIComponent(segment);
-			} catch {
-				return segment;
-			}
-		});
+	const segments: string[] = [];
+	for (const segment of parsed.pathname.split("/").filter(Boolean)) {
+		try {
+			segments.push(decodeURIComponent(segment));
+		} catch {
+			return null;
+		}
+	}
 	if (segments.length < 2) return null;
 
 	const owner = segments[0];
 	const repo = segments[1].replace(/\.git$/, "");
+	if (!/^[A-Za-z0-9](?:[A-Za-z0-9-]{0,37}[A-Za-z0-9])?$/.test(owner)) return null;
+	if (owner.includes("--")) return null;
+	if (!/^[A-Za-z0-9._-]{1,100}$/.test(repo) || repo === "." || repo === "..") return null;
 
 	if (NON_CODE_SEGMENTS.has(segments[2]?.toLowerCase())) return null;
 
@@ -163,6 +170,7 @@ export function parseGitHubUrl(url: string): GitHubUrlInfo | null {
 	if (segments.length < 4) return null;
 
 	const ref = segments[3];
+	if (ref.length === 0 || ref.length > 1024 || /[\0-\x1f\x7f]/.test(ref)) return null;
 	const refIsFullSha = /^[0-9a-f]{40}$/.test(ref);
 	const pathParts = segments.slice(4);
 	const path = pathParts.length > 0 ? pathParts.join("/") : "";
@@ -181,9 +189,32 @@ function cacheKey(owner: string, repo: string, ref?: string): string {
 	return ref ? `${owner}/${repo}@${ref}` : `${owner}/${repo}`;
 }
 
-function cloneDir(config: GitHubCloneConfig, owner: string, repo: string, ref?: string): string {
-	const dirName = ref ? `${repo}@${ref}` : repo;
-	return join(config.clonePath, owner, dirName);
+function cloneDestination(config: GitHubCloneConfig, owner: string, repo: string, ref?: string): CloneDestination | null {
+	try {
+		mkdirSync(resolvePath(config.clonePath), { recursive: true });
+		const rootPath = realpathSync(resolvePath(config.clonePath));
+		const digest = createHash("sha256").update(JSON.stringify([owner, repo, ref ?? null])).digest("hex");
+		const localPath = resolvePath(rootPath, digest);
+		if (dirname(localPath) !== rootPath) return null;
+		return { rootPath, localPath };
+	} catch {
+		return null;
+	}
+}
+
+function removeCloneDestination(destination: CloneDestination): boolean {
+	const rootPath = resolvePath(destination.rootPath);
+	const localPath = resolvePath(destination.localPath);
+	if (dirname(localPath) !== rootPath || !/^[0-9a-f]{64}$/.test(basename(localPath))) return false;
+	try {
+		const entry = lstatSync(localPath);
+		if (entry.isSymbolicLink()) unlinkSync(localPath);
+		else rmSync(localPath, { recursive: true, force: true });
+		return true;
+	} catch (err) {
+		if (err && typeof err === "object" && "code" in err && err.code === "ENOENT") return true;
+		return false;
+	}
 }
 
 const PROCESS_KILL_GRACE_MS = 3000;
@@ -225,8 +256,9 @@ function terminateProcessTree(child: ChildProcess): void {
 	forceKill.unref();
 }
 
-function execClone(args: string[], localPath: string, timeoutMs: number, signal?: AbortSignal): Promise<string | null> {
+function execClone(args: string[], destination: CloneDestination, timeoutMs: number, signal?: AbortSignal): Promise<string | null> {
 	return new Promise((resolve) => {
+		const { localPath } = destination;
 		let settled = false;
 		let timeout: ReturnType<typeof setTimeout> | undefined;
 		let onAbort: (() => void) | undefined;
@@ -238,10 +270,7 @@ function execClone(args: string[], localPath: string, timeoutMs: number, signal?
 			if (signal && onAbort) signal.removeEventListener("abort", onAbort);
 
 			if (!success) {
-				try {
-					rmSync(localPath, { recursive: true, force: true });
-				} catch {
-				}
+				removeCloneDestination(destination);
 				resolve(null);
 				return;
 			}
@@ -282,14 +311,11 @@ async function cloneRepo(
 	repo: string,
 	ref: string | undefined,
 	config: GitHubCloneConfig,
+	destination: CloneDestination,
 	signal?: AbortSignal,
 ): Promise<string | null> {
-	const localPath = cloneDir(config, owner, repo, ref);
-
-	try {
-		rmSync(localPath, { recursive: true, force: true });
-	} catch {
-	}
+	const { localPath } = destination;
+	if (!removeCloneDestination(destination)) return null;
 
 	const timeoutMs = config.cloneTimeoutSeconds * 1000;
 	const hasGh = await checkGhAvailable();
@@ -297,7 +323,7 @@ async function cloneRepo(
 	if (hasGh) {
 		const args = ["gh", "repo", "clone", `${owner}/${repo}`, localPath, "--", "--depth", "1", "--single-branch"];
 		if (ref) args.push("--branch", ref);
-		return execClone(args, localPath, timeoutMs, signal);
+		return execClone(args, destination, timeoutMs, signal);
 	}
 
 	showGhHint();
@@ -306,7 +332,7 @@ async function cloneRepo(
 	const args = ["git", "clone", "--depth", "1", "--single-branch"];
 	if (ref) args.push("--branch", ref);
 	args.push(gitUrl, localPath);
-	return execClone(args, localPath, timeoutMs, signal);
+	return execClone(args, destination, timeoutMs, signal);
 }
 
 function isBinaryFile(filePath: string): boolean {
@@ -671,9 +697,15 @@ export async function extractGitHub(
 		return cachedResult;
 	}
 
-	const clonePromise = cloneRepo(owner, repo, info.ref, config, signal);
-	const localPath = cloneDir(config, owner, repo, info.ref);
-	cloneCache.set(key, { localPath, clonePromise });
+	const destination = cloneDestination(config, owner, repo, info.ref);
+	if (!destination) {
+		const apiFallback = await fetchViaApi(url, owner, repo, info);
+		if (apiFallback) activityMonitor.logComplete(activityId, 200);
+		else activityMonitor.logError(activityId, "invalid clone destination");
+		return apiFallback;
+	}
+	const clonePromise = cloneRepo(owner, repo, info.ref, config, destination, signal);
+	cloneCache.set(key, { destination, clonePromise });
 
 	const result = await clonePromise;
 	if (signal?.aborted) {
@@ -707,10 +739,7 @@ export async function extractGitHub(
 
 export function clearCloneCache(): void {
 	for (const entry of cloneCache.values()) {
-		try {
-			rmSync(entry.localPath, { recursive: true, force: true });
-		} catch {
-		}
+		removeCloneDestination(entry.destination);
 	}
 	cloneCache.clear();
 	cachedConfig = null;

package/node_modules/pi-web-access/index.ts

@@ -34,7 +34,7 @@ import {
 	type SummaryMeta,
 } from "./summary-review.ts";
 import { randomUUID } from "node:crypto";
-import { execFileSync } from "node:child_process";
+import { execFileSync, spawn } from "node:child_process";
 import { createRequire } from "node:module";
 import { platform } from "node:os";
 import { existsSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";
@@ -152,7 +152,7 @@ interface WebSearchConfig {
 	};
 }
 
-interface ProviderAvailability {
+export interface ProviderAvailability {
 	all: boolean;
 	openai: boolean;
 	brave: boolean;
@@ -184,7 +184,7 @@ interface ProviderAvailability {
 
 type WebSearchWorkflow = "none" | "summary-review" | "auto-summary";
 type CuratorWorkflow = "summary-review";
-type CuratorProvider = Exclude<SearchProvider, "auto">;
+export type CuratorProvider = Exclude<SearchProvider, "auto">;
 type SummaryWorkflow = "summary-review" | "auto-summary";
 
 interface CuratorBootstrap {
@@ -420,13 +420,16 @@ async function getProviderAvailability(ctx: ExtensionContext): Promise<ProviderA
 	};
 }
 
-function shouldPreferOpenAI(options?: Pick<PendingCurate, "numResults" | "recencyFilter">): boolean {
-	if (!options) return true;
-	if (options.recencyFilter) return false;
-	if (typeof options.numResults === "number" && Number.isFinite(options.numResults) && Math.floor(options.numResults) !== 5) {
+function shouldUseOpenAICodexDefault(ctx?: Pick<ExtensionContext, "model">): boolean {
+	return ctx?.model?.provider === "openai-codex";
+}
+
+function shouldPreferOpenAI(options: Pick<PendingCurate, "numResults" | "recencyFilter"> | undefined, preferOpenAICodexDefault: boolean): boolean {
+	if (options?.recencyFilter) return false;
+	if (typeof options?.numResults === "number" && Number.isFinite(options.numResults) && Math.floor(options.numResults) !== 5) {
 		return false;
 	}
-	return true;
+	return preferOpenAICodexDefault;
 }
 
 async function loadCuratorBootstrap(
@@ -439,15 +442,25 @@ async function loadCuratorBootstrap(
 	if (Array.isArray(provider)) availableProviders.all = true;
 	return {
 		availableProviders,
-		defaultProvider: resolveProvider(provider, availableProviders, options),
+		defaultProvider: resolveCuratorDefaultProvider(provider, availableProviders, ctx, options),
 		timeoutSeconds: getCuratorTimeoutSeconds(),
 	};
 }
 
+export function resolveCuratorDefaultProvider(
+	provider: SearchProviderSelection,
+	available: ProviderAvailability,
+	ctx?: Pick<ExtensionContext, "model">,
+	options?: Pick<PendingCurate, "numResults" | "recencyFilter">,
+): CuratorProvider {
+	return resolveProvider(provider, available, options, shouldUseOpenAICodexDefault(ctx));
+}
+
 function firstAvailableProvider(available: ProviderAvailability, preferOpenAI: boolean, fallback: ResolvedSearchProvider): ResolvedSearchProvider {
 	if (available.searxng) return "searxng";
 	if (preferOpenAI && available.openai) return "openai";
 	if (available.exa) return "exa";
+	if (available.openai) return "openai";
 	if (available.brave) return "brave";
 	if (available.parallel) return "parallel";
 	if (available.tinyfish) return "tinyfish";
@@ -470,9 +483,10 @@ function resolveProvider(
 	provider: SearchProviderSelection,
 	available: ProviderAvailability,
 	options?: Pick<PendingCurate, "numResults" | "recencyFilter">,
+	preferOpenAICodexDefault = false,
 ): CuratorProvider {
 	if (Array.isArray(provider)) return "all";
-	const preferOpenAI = shouldPreferOpenAI(options);
+	const preferOpenAI = shouldPreferOpenAI(options, preferOpenAICodexDefault);
 
 	if (provider === "auto") {
 		const routing = getConfiguredSearchRouting();
@@ -744,11 +758,26 @@ function closeCurator(callId?: string): void {
 
 async function openInBrowser(pi: ExtensionAPI, url: string): Promise<void> {
 	const plat = platform();
+	if (plat !== "darwin" && plat !== "win32") {
+		await new Promise<void>((resolve, reject) => {
+			const child = spawn("xdg-open", [url], { detached: true, stdio: "ignore" });
+			const timer = setTimeout(resolve, 100);
+			child.once("error", (err) => {
+				clearTimeout(timer);
+				reject(err);
+			});
+			child.once("exit", (code) => {
+				clearTimeout(timer);
+				if (code === 0) resolve();
+				else reject(new Error(`Failed to open browser (exit code ${code ?? "unknown"})`));
+			});
+			child.unref();
+		});
+		return;
+	}
 	const result = plat === "darwin"
 		? await pi.exec("open", [url])
-		: plat === "win32"
-			? await pi.exec("cmd", ["/c", "start", "", url])
-			: await pi.exec("xdg-open", [url]);
+		: await pi.exec("cmd", ["/c", "start", "", url]);
 	if (result.code !== 0) {
 		throw new Error(result.stderr || `Failed to open browser (exit code ${result.code})`);
 	}
@@ -1645,7 +1674,7 @@ export default function (pi: ExtensionAPI) {
 		name: toolNames.webSearch,
 		label: "Web Search",
 		description:
-			`Search the web using OpenAI, Brave, Parallel, Parallel MCP, TinyFish, Search1API, Searchinfinity, Querit, Tavily, Firecrawl, Jina, SERPdive, Kagi, Bocha, Ollama, SearXNG, DuckDuckGo, Exa, Perplexity, Gemini, AnySearch, Valyu, xAI, Bright Data, SerpBase, or Serper. Pass a provider array to search only those providers simultaneously, or use provider "all" to search every eligible provider except Parallel MCP, DuckDuckGo, AnySearch, Valyu, xAI, Bright Data, SerpBase, and Serper. Returns an AI-synthesized answer with source citations. OpenAI search uses a Codex subscription or OpenAI API key; xAI search uses a SuperGrok/X Premium subscription or xAI API key. Parallel MCP, DuckDuckGo, AnySearch, Valyu, xAI, Bright Data, SerpBase, and Serper are available only when explicitly selected. For comprehensive research, prefer queries (plural) with 2-4 varied angles over a single query — each query gets its own synthesized answer, so varying phrasing and scope gives much broader coverage. When includeContent is true, full page content is fetched in the background. Searches auto-open the interactive browser curator and stream results live; set workflow to "none" to skip curation or "auto-summary" for a model-generated summary without the browser curator. The configured provider is used when provider is omitted or set to auto; omit provider unless explicitly overriding it. Without a configured provider, auto-selects OpenAI when suitable and available, then Exa, Brave, Parallel, TinyFish, Search1API, Searchinfinity, Querit, Tavily, Firecrawl, Jina, SERPdive, Kagi, Bocha, Ollama, Perplexity, Gemini API, or Gemini Web. When SearXNG is configured, it is preferred first for local/private search.`,
+			`Search the web using OpenAI, Brave, Parallel, Parallel MCP, TinyFish, Search1API, Searchinfinity, Querit, Tavily, Firecrawl, Jina, SERPdive, Kagi, Bocha, Ollama, SearXNG, DuckDuckGo, Exa, Perplexity, Gemini, AnySearch, Valyu, xAI, Bright Data, SerpBase, or Serper. Pass a provider array to search only those providers simultaneously, or use provider "all" to search every eligible provider except Parallel MCP, DuckDuckGo, AnySearch, Valyu, xAI, Bright Data, SerpBase, and Serper. Returns an AI-synthesized answer with source citations. OpenAI search uses a Codex subscription or OpenAI API key; xAI search uses a SuperGrok/X Premium subscription or xAI API key. Parallel MCP, DuckDuckGo, AnySearch, Valyu, xAI, Bright Data, SerpBase, and Serper are available only when explicitly selected. For comprehensive research, prefer queries (plural) with 2-4 varied angles over a single query — each query gets its own synthesized answer, so varying phrasing and scope gives much broader coverage. When includeContent is true, full page content is fetched in the background. Searches auto-open the interactive browser curator and stream results live; set workflow to "none" to skip curation or "auto-summary" for a model-generated summary without the browser curator. The configured provider is used when provider is omitted or set to auto; omit provider unless explicitly overriding it. Without a configured provider, SearXNG is preferred first for local/private search. When the active Pi model is openai-codex, Codex-backed OpenAI search is preferred next. Otherwise Exa is preferred before OpenAI, then Brave, Parallel, TinyFish, Search1API, Searchinfinity, Querit, Tavily, Firecrawl, Jina, SERPdive, Kagi, Bocha, Ollama, Perplexity, Gemini API, or Gemini Web.`,
 		promptSnippet:
 			"Use for web research questions. Prefer {queries:[...]} with 2-4 varied angles over a single query for broader coverage. Omit provider unless explicitly overriding the configured default.",
 		parameters: Type.Object({

package/node_modules/pi-web-access/openai-search.ts

@@ -19,7 +19,7 @@ const MODEL_PREFERENCE = [
 	(id: string) => id.includes("terra"),
 	(id: string) => /^gpt-\d+(\.\d+)?$/.test(id),
 ];
-const SEARCH_PROVIDERS = ["openai-codex", "openai"] as const;
+const DEFAULT_SEARCH_PROVIDERS: readonly string[] = ["openai-codex", "openai"];
 
 function pickSearchModel<T extends { id: string }>(models: readonly T[]): T | undefined {
 	const candidates = models
@@ -36,12 +36,13 @@ interface WebSearchConfig {
 	openaiApiKey?: unknown;
 	openaiResponsesUrl?: unknown;
 	openaiSearchModel?: unknown;
+	openaiSearchProviders?: unknown;
 }
 
 type ProviderHeaders = Record<string, string | null>;
 
 interface OpenAIAuth {
-	provider: "openai-codex" | "openai";
+	provider: string;
 	apiKey: string;
 	model: string;
 	headers: ProviderHeaders;
@@ -149,6 +150,14 @@ function resolveConfiguredResponsesUrl(value: unknown): string {
 	return url.toString();
 }
 
+function resolveConfiguredSearchProviders(value: unknown): readonly string[] {
+	if (value === undefined) return DEFAULT_SEARCH_PROVIDERS;
+	if (!Array.isArray(value) || value.some((entry) => typeof entry !== "string" || entry.trim().length === 0)) {
+		throw new Error(`openaiSearchProviders in ${CONFIG_PATH} must be an array of non-empty Pi provider ids`);
+	}
+	return value.map((entry) => entry.trim());
+}
+
 function resolveConfiguredSearchModel(value: unknown): string | undefined {
 	if (value == null) return undefined;
 	if (typeof value !== "string" || value.trim().length === 0) {
@@ -165,14 +174,14 @@ function toRequestHeaders(headers: ProviderHeaders): Record<string, string> {
 	return requestHeaders;
 }
 
-async function resolvePiAuth(ctx: ExtensionContext, responsesUrl: string, modelOverride?: string): Promise<OpenAIAuth | undefined> {
+async function resolvePiAuth(ctx: ExtensionContext, responsesUrl: string, providers: readonly string[], modelOverride?: string): Promise<OpenAIAuth | undefined> {
 	let models: ReturnType<typeof ctx.modelRegistry.getAll>;
 	try {
 		models = ctx.modelRegistry.getAll();
 	} catch {
 		return undefined;
 	}
-	for (const provider of SEARCH_PROVIDERS) {
+	for (const provider of providers) {
 		const preferred = pickSearchModel(models.filter((model) => model.provider === provider));
 		if (!preferred) continue;
 		try {
@@ -196,8 +205,9 @@ export async function resolveOpenAIAuth(ctx?: ExtensionContext, signal?: AbortSi
 	const config = loadConfig();
 	const responsesUrl = resolveConfiguredResponsesUrl(config.openaiResponsesUrl);
 	const modelOverride = resolveConfiguredSearchModel(config.openaiSearchModel);
+	const providers = resolveConfiguredSearchProviders(config.openaiSearchProviders);
 	if (ctx) {
-		const auth = await resolvePiAuth(ctx, responsesUrl, modelOverride);
+		const auth = await resolvePiAuth(ctx, responsesUrl, providers, modelOverride);
 		if (auth) return auth;
 	}
 
@@ -221,7 +231,8 @@ export async function resolveOpenAIAuth(ctx?: ExtensionContext, signal?: AbortSi
 export async function isOpenAISearchAvailable(ctx?: ExtensionContext): Promise<boolean> {
 	const config = loadConfig();
 	const responsesUrl = resolveConfiguredResponsesUrl(config.openaiResponsesUrl);
-	if (ctx && await resolvePiAuth(ctx, responsesUrl)) return true;
+	const providers = resolveConfiguredSearchProviders(config.openaiSearchProviders);
+	if (ctx && await resolvePiAuth(ctx, responsesUrl, providers)) return true;
 	return hasCredentialSource({
 		provider: "OpenAI",
 		configuredValue: config.openaiApiKey,

package/node_modules/pi-web-access/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-web-access",
-  "version": "0.24.0",
+  "version": "0.24.2",
   "description": "Web search, URL fetching, GitHub repo cloning, PDF extraction, YouTube video understanding, and local video analysis for Pi coding agent. Supports OpenAI, Brave, Parallel, TinyFish, Search1API, Searchinfinity, Querit, Tavily, Firecrawl, Jina, SERPdive, Kagi, Ollama, AnySearch, Bright Data SERP, SerpBase, SearXNG, Exa, Perplexity, and Gemini.",
   "type": "module",
   "scripts": {

package/node_modules/pi-web-access/pdf-extract.ts

@@ -51,6 +51,7 @@ export const PDF_PROVIDER_VALUES = new Set<PDFProvider>([
 export interface PDFConfig {
 	enabled: boolean;
 	maxSizeMB: number;
+	maxPages: number;
 	provider: PDFProvider;
 	datalabMode: DatalabMode;
 	datalabTimeoutMs: number;
@@ -69,6 +70,7 @@ export function loadPDFConfig(): PDFConfig {
 		return {
 			enabled: true,
 			maxSizeMB: DEFAULT_PDF_MAX_SIZE_MB,
+			maxPages: DEFAULT_MAX_PAGES,
 			provider: "auto",
 			datalabMode: normalizeDatalabMode(process.env.DATALAB_MODE),
 			datalabTimeoutMs: DEFAULT_DATALAB_TIMEOUT_MS,
@@ -98,6 +100,13 @@ export function loadPDFConfig(): PDFConfig {
 		configured > 0
 			? Math.min(configured, MAX_PDF_MAX_SIZE_MB)
 			: DEFAULT_PDF_MAX_SIZE_MB;
+	const configuredMaxPages = pdf.maxPages;
+	const maxPages =
+		typeof configuredMaxPages === "number" &&
+		Number.isFinite(configuredMaxPages) &&
+		configuredMaxPages > 0
+			? Math.max(1, Math.floor(configuredMaxPages))
+			: DEFAULT_MAX_PAGES;
 
 	const provider =
 		typeof pdf.provider === "string" &&
@@ -120,6 +129,7 @@ export function loadPDFConfig(): PDFConfig {
 	return {
 		enabled,
 		maxSizeMB: normalized,
+		maxPages,
 		provider,
 		datalabMode,
 		datalabTimeoutMs,
@@ -155,18 +165,21 @@ export async function extractPDFToMarkdown(
 	options: PDFExtractOptions = {},
 ): Promise<PDFExtractResult> {
 	const {
-		maxPages = DEFAULT_MAX_PAGES,
+		maxPages,
 		outputDir = DEFAULT_OUTPUT_DIR,
 		filename,
 		signal,
 		geminiTimeoutMs,
 	} = options;
 
-	const safeMaxPages = Number.isFinite(maxPages)
-		? Math.max(1, Math.floor(maxPages))
-		: DEFAULT_MAX_PAGES;
-	const urlTitle = extractTitleFromURL(url);
 	const pdfConfig = loadPDFConfig();
+	const safeMaxPages =
+		maxPages === undefined
+			? pdfConfig.maxPages
+			: Number.isFinite(maxPages)
+				? Math.max(1, Math.floor(maxPages))
+				: DEFAULT_MAX_PAGES;
+	const urlTitle = extractTitleFromURL(url);
 	const provider = pdfConfig.provider;
 
 	if (provider === "auto" || provider === "datalab") {

package/node_modules/pi-web-access/ssrf-protection.ts

@@ -5,6 +5,7 @@ import { getWebSearchConfigPath } from "./utils.ts";
 
 const DEFAULT_MAX_REDIRECTS = 5;
 const REDIRECT_STATUSES = new Set([301, 302, 303, 307, 308]);
+const LOOPBACK_ALLOW_RANGES = ["127.0.0.0/8", "::1", "::ffff:127.0.0.0/104"];
 
 export type LookupAddress = { address: string; family: number };
 export type Lookup = (hostname: string) => Promise<LookupAddress[]>;
@@ -152,6 +153,8 @@ interface ValidationOptions {
 	 * the local SSRF preflight. This does not configure proxy transport.
 	 */
 	trustEnvProxy?: boolean;
+	/** Allow loopback URLs for explicit provider base endpoints, not fetched targets. */
+	allowLoopback?: boolean;
 }
 
 /** Parsed entry from `allowRanges`: a network address (4 or 16 bytes) + prefix length. */
@@ -185,7 +188,11 @@ export async function validateRemoteUrl(rawUrl: string | URL, options: Validatio
 
 	const hostname = normalizeHostname(url.hostname);
 	if (!hostname) throw new Error("URL must include a hostname");
-	if (hostname === "localhost" || hostname.endsWith(".localhost")) {
+	if (hostname === "localhost") {
+		if (options.allowLoopback === true) return url;
+		throw new Error(`Blocked internal hostname: ${hostname}`);
+	}
+	if (hostname.endsWith(".localhost")) {
 		throw new Error(`Blocked internal hostname: ${hostname}`);
 	}
 
@@ -193,7 +200,10 @@ export async function validateRemoteUrl(rawUrl: string | URL, options: Validatio
 	assertDomainPolicy(hostname, options.domainPolicy);
 
 	if (net.isIP(hostname)) {
-		assertPublicAddress(hostname, hostname, allowRanges);
+		const addressAllowRanges = options.allowLoopback === true
+			? [...allowRanges, ...parseAllowRanges(LOOPBACK_ALLOW_RANGES)]
+			: allowRanges;
+		assertPublicAddress(hostname, hostname, addressAllowRanges);
 		return url;
 	}
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@herbertgao/pi-extensions",
-  "version": "2026.8.7",
+  "version": "2026.8.9",
   "description": "Aggregate installer for HerbertGao-maintained Pi extensions.",
   "keywords": [
     "extensions",
@@ -36,35 +36,35 @@
   "dependencies": {
     "@ast-grep/cli": "^0.45.0",
     "@ast-grep/napi": "^0.45.0",
-    "@czottmann/pi-automode": "1.11.0",
+    "@czottmann/pi-automode": "1.12.0",
     "@dietrichgebert/ponytail": "4.9.0",
     "@earendil-works/pi-coding-agent": "^0.84.2",
     "@earendil-works/pi-tui": "^0.84.2",
     "@effect/platform-node": "4.0.0-beta.103",
     "@effect/platform-node-shared": "4.0.0-beta.103",
-    "@herbertgao/pi-cc-extensions": "0.8.56",
+    "@herbertgao/pi-cc-extensions": "0.8.58",
     "@herbertgao/pi-copy-response": "0.2.6",
-    "@herbertgao/pi-handoff": "1.1.2",
+    "@herbertgao/pi-handoff": "2.0.0",
     "@herbertgao/pi-inline-skills": "1.0.5",
-    "@herbertgao/pi-mermaid-open": "0.1.3",
-    "@herbertgao/pi-preferred-thinking": "0.3.0",
-    "@herbertgao/pi-recap": "0.4.4",
-    "@herbertgao/pi-rename": "0.4.2",
-    "@herbertgao/pi-stash": "0.1.1",
-    "@herbertgao/pi-subagents": "0.16.0",
+    "@herbertgao/pi-mermaid-open": "0.2.0",
+    "@herbertgao/pi-preferred-thinking": "0.4.0",
+    "@herbertgao/pi-recap": "0.4.5",
+    "@herbertgao/pi-rename": "0.5.0",
+    "@herbertgao/pi-stash": "0.1.2",
+    "@herbertgao/pi-subagents": "0.16.1",
     "@herbertgao/pi-titlebar-spinner": "0.1.3",
-    "@juicesharp/rpiv-ask-user-question": "2.6.4",
-    "@juicesharp/rpiv-config": "^2.6.4",
+    "@juicesharp/rpiv-ask-user-question": "2.7.0",
+    "@juicesharp/rpiv-config": "^2.7.0",
     "@modelcontextprotocol/client": "2.0.0",
     "@modelcontextprotocol/core": "2.0.0",
     "@modelcontextprotocol/ext-apps": "^1.2.2",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@mozilla/readability": "^0.6.0",
     "@napi-rs/keyring": "^1.3.0",
-    "@narumitw/pi-btw": "0.55.0",
-    "@narumitw/pi-tui-kit": "^0.56.0",
+    "@narumitw/pi-btw": "0.55.1",
+    "@narumitw/pi-tui-kit": "^0.57.0",
     "@noble/ed25519": "^3.1.0",
-    "@pi-plugins/fast-mode": "0.1.9",
+    "@pi-plugins/fast-mode": "0.1.10",
     "@shikijs/cli": "^4.0.2",
     "@sinclair/typebox": "^0.34.49",
     "ajv": "^8.17.1",
@@ -73,7 +73,7 @@
     "croner": "^10.0.1",
     "cross-spawn": "^7.0.6",
     "effect": "4.0.0-beta.103",
-    "grok-mermaid": "^0.2.2",
+    "grok-mermaid": "0.2.2",
     "jiti": "^2.7.0",
     "js-yaml": "^5.2.2",
     "linkedom": "^0.16.0",
@@ -82,9 +82,9 @@
     "open": "^10.2.0",
     "p-limit": "^6.1.0",
     "pi-footer": "0.5.1",
-    "pi-lens": "4.1.0",
+    "pi-lens": "4.1.1",
     "pi-mcp-adapter": "2.27.0",
-    "pi-web-access": "0.24.0",
+    "pi-web-access": "0.24.2",
     "pidusage": "^4.0.1",
     "promise.try": "^2.0.1",
     "qrcode-terminal": "^0.12.0",
@@ -159,6 +159,7 @@
       "./node_modules/@herbertgao/pi-cc-extensions/themes/cc-light.json"
     ],
     "skills": [
+      "./node_modules/@czottmann/pi-automode/skills",
       "./node_modules/@dietrichgebert/ponytail/skills",
       "./node_modules/pi-mcp-adapter/skills",
       "./node_modules/pi-lens/skills"