@herbertgao/pi-extensions 2026.9.17 → 2026.9.19

package/node_modules/@juicesharp/rpiv-ask-user-question/package.json

@@ -1,101 +1,101 @@
 {
-	"name": "@juicesharp/rpiv-ask-user-question",
-	"version": "2.11.0",
-	"description": "Pi extension. A structured questionnaire the model can put to you when it would otherwise guess, with typed options instead of free-form replies.",
-	"keywords": [
-		"pi-package",
-		"pi-extension",
-		"rpiv"
-	],
-	"type": "module",
-	"exports": {
-		".": "./index.ts",
-		"./events": "./events.ts"
-	},
-	"license": "MIT",
-	"author": "juicesharp",
-	"repository": {
-		"type": "git",
-		"url": "git+https://github.com/juicesharp/rpiv-mono.git",
-		"directory": "packages/rpiv-ask-user-question"
-	},
-	"homepage": "https://github.com/juicesharp/rpiv-mono/tree/main/packages/rpiv-ask-user-question#readme",
-	"bugs": {
-		"url": "https://github.com/juicesharp/rpiv-mono/issues"
-	},
-	"publishConfig": {
-		"access": "public"
-	},
-	"scripts": {
-		"test": "vitest run"
-	},
-	"files": [
-		"ask-user-question.ts",
-		"rpc-fallback.ts",
-		"config.ts",
-		"events.ts",
-		"index.ts",
-		"reconcile.ts",
-		"LICENSE",
-		"locales/",
-		"docs/",
-		"!docs/*.png",
-		"!docs/*.jpg",
-		"!docs/*.svg",
-		"README.md",
-		"state/build-questionnaire.ts",
-		"state/external-editor.ts",
-		"state/i18n-bridge.ts",
-		"state/key-router.ts",
-		"state/questionnaire-session.ts",
-		"state/row-intent.ts",
-		"state/selectors/contract.ts",
-		"state/selectors/derivations.ts",
-		"state/selectors/focus.ts",
-		"state/selectors/projections.ts",
-		"state/state-reducer.ts",
-		"state/state.ts",
-		"tool/format-answer.ts",
-		"tool/normalize-params.ts",
-		"tool/response-envelope.ts",
-		"tool/types.ts",
-		"tool/validate-questionnaire.ts",
-		"view/component-binding.ts",
-		"view/components/inline-input.ts",
-		"view/components/multi-select-view.ts",
-		"view/components/option-list-view.ts",
-		"view/components/preview/markdown-content-cache.ts",
-		"view/components/preview/preview-block-renderer.ts",
-		"view/components/preview/preview-box-renderer.ts",
-		"view/components/preview/preview-layout-decider.ts",
-		"view/components/preview/preview-pane.ts",
-		"view/components/submit-picker.ts",
-		"view/components/tab-bar.ts",
-		"view/components/wrapping-select.ts",
-		"view/dialog-builder.ts",
-		"view/props-adapter.ts",
-		"view/stateful-view.ts",
-		"view/tab-components.ts",
-		"view/tab-content-strategy.ts"
-	],
-	"pi": {
-		"image": "https://raw.githubusercontent.com/juicesharp/rpiv-mono/main/packages/rpiv-ask-user-question/docs/cover.png",
-		"extensions": [
-			"./index.ts"
-		]
-	},
-	"peerDependencies": {
-		"@juicesharp/rpiv-i18n": "*",
-		"@earendil-works/pi-coding-agent": "*",
-		"@earendil-works/pi-tui": "*"
-	},
-	"peerDependenciesMeta": {
-		"@juicesharp/rpiv-i18n": {
-			"optional": true
-		}
-	},
-	"dependencies": {
-		"@juicesharp/rpiv-config": "^2.11.0",
-		"typebox": "^1.1.24"
-	}
+  "name": "@juicesharp/rpiv-ask-user-question",
+  "version": "2.11.0",
+  "description": "Pi extension. A structured questionnaire the model can put to you when it would otherwise guess, with typed options instead of free-form replies.",
+  "keywords": [
+    "pi-package",
+    "pi-extension",
+    "rpiv"
+  ],
+  "type": "module",
+  "exports": {
+    ".": "./index.ts",
+    "./events": "./events.ts"
+  },
+  "license": "MIT",
+  "author": "juicesharp",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/juicesharp/rpiv-mono.git",
+    "directory": "packages/rpiv-ask-user-question"
+  },
+  "homepage": "https://github.com/juicesharp/rpiv-mono/tree/main/packages/rpiv-ask-user-question#readme",
+  "bugs": {
+    "url": "https://github.com/juicesharp/rpiv-mono/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "test": "vitest run"
+  },
+  "files": [
+    "ask-user-question.ts",
+    "rpc-fallback.ts",
+    "config.ts",
+    "events.ts",
+    "index.ts",
+    "reconcile.ts",
+    "LICENSE",
+    "locales/",
+    "docs/",
+    "!docs/*.png",
+    "!docs/*.jpg",
+    "!docs/*.svg",
+    "README.md",
+    "state/build-questionnaire.ts",
+    "state/external-editor.ts",
+    "state/i18n-bridge.ts",
+    "state/key-router.ts",
+    "state/questionnaire-session.ts",
+    "state/row-intent.ts",
+    "state/selectors/contract.ts",
+    "state/selectors/derivations.ts",
+    "state/selectors/focus.ts",
+    "state/selectors/projections.ts",
+    "state/state-reducer.ts",
+    "state/state.ts",
+    "tool/format-answer.ts",
+    "tool/normalize-params.ts",
+    "tool/response-envelope.ts",
+    "tool/types.ts",
+    "tool/validate-questionnaire.ts",
+    "view/component-binding.ts",
+    "view/components/inline-input.ts",
+    "view/components/multi-select-view.ts",
+    "view/components/option-list-view.ts",
+    "view/components/preview/markdown-content-cache.ts",
+    "view/components/preview/preview-block-renderer.ts",
+    "view/components/preview/preview-box-renderer.ts",
+    "view/components/preview/preview-layout-decider.ts",
+    "view/components/preview/preview-pane.ts",
+    "view/components/submit-picker.ts",
+    "view/components/tab-bar.ts",
+    "view/components/wrapping-select.ts",
+    "view/dialog-builder.ts",
+    "view/props-adapter.ts",
+    "view/stateful-view.ts",
+    "view/tab-components.ts",
+    "view/tab-content-strategy.ts"
+  ],
+  "pi": {
+    "image": "https://raw.githubusercontent.com/juicesharp/rpiv-mono/main/packages/rpiv-ask-user-question/docs/cover.png",
+    "extensions": [
+      "./index.ts"
+    ]
+  },
+  "peerDependencies": {
+    "@juicesharp/rpiv-i18n": "*",
+    "@earendil-works/pi-coding-agent": "*",
+    "@earendil-works/pi-tui": "*",
+    "typebox": "*"
+  },
+  "peerDependenciesMeta": {
+    "@juicesharp/rpiv-i18n": {
+      "optional": true
+    }
+  },
+  "dependencies": {
+    "@juicesharp/rpiv-config": "^2.11.0"
+  }
 }

package/node_modules/@pi-plugins/fast-mode/package.json

@@ -66,4 +66,4 @@
     "format": "oxfmt",
     "format:check": "oxfmt --check"
   }
-}
+}

package/node_modules/@tifan/pi-handoff/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tifan/pi-handoff",
-  "version": "2.2.1",
+  "version": "2.2.2",
   "description": "Transfer pi session context to a new session and query past sessions.",
   "keywords": [
     "handoff",

package/node_modules/@tifan/pi-handoff/src/index.ts

@@ -139,6 +139,39 @@ function getCommandError(stdout: string, stderr: string): string {
   return stderr.trim() || stdout.trim() || "unknown error"
 }
 
+type HerdrCommandResult = {
+  code: number
+  stdout: string
+  stderr: string
+}
+
+const HERDR_AGENT_START_ATTEMPTS = 20
+const HERDR_AGENT_START_RETRY_DELAY_MS = 250
+
+export function startHerdrAgentWithRetry(
+  start: () => Promise<HerdrCommandResult>,
+): Promise<void> {
+  async function attemptStart(attempt: number): Promise<void> {
+    const result = await start()
+    if (result.code === 0) return
+
+    const error = getCommandError(result.stdout, result.stderr)
+    if (
+      !error.includes("agent_pane_busy") ||
+      attempt === HERDR_AGENT_START_ATTEMPTS - 1
+    ) {
+      throw new Error(`Could not start Pi in Herdr tab: ${error}`)
+    }
+
+    await new Promise<void>((resolve) => {
+      setTimeout(resolve, HERDR_AGENT_START_RETRY_DELAY_MS)
+    })
+    return attemptStart(attempt + 1)
+  }
+
+  return attemptStart(0)
+}
+
 async function startHandoffInHerdr(options: {
   pi: ExtensionAPI
   ctx: ExtensionCommandContext
@@ -192,33 +225,30 @@ async function startHandoffInHerdr(options: {
   const agentName = `handoff-${randomUUID().slice(0, 8)}`
   const model = options.ctx.model!
 
-  const startedAgent = await options.pi.exec(
-    "herdr",
-    [
-      "agent",
-      "start",
-      agentName,
-      "--kind",
-      "pi",
-      "--pane",
-      rootPaneId,
-      "--",
-      "--session",
-      childSessionPath,
-      "--name",
-      options.sessionName,
-      "--provider",
-      model.provider,
-      "--model",
-      model.id,
-    ],
-    { timeout: 35_000 },
+  await startHerdrAgentWithRetry(() =>
+    options.pi.exec(
+      "herdr",
+      [
+        "agent",
+        "start",
+        agentName,
+        "--kind",
+        "pi",
+        "--pane",
+        rootPaneId,
+        "--",
+        "--session",
+        childSessionPath,
+        "--name",
+        options.sessionName,
+        "--provider",
+        model.provider,
+        "--model",
+        model.id,
+      ],
+      { timeout: 35_000 },
+    ),
   )
-  if (startedAgent.code !== 0) {
-    throw new Error(
-      `Could not start Pi in Herdr tab: ${getCommandError(startedAgent.stdout, startedAgent.stderr)}`,
-    )
-  }
 
   const promptedAgent = await options.pi.exec("herdr", [
     "agent",

package/node_modules/@tifan/pi-mermaid-open/package.json

@@ -33,7 +33,7 @@
     "grok-mermaid": "0.2.2"
   },
   "peerDependencies": {
-    "@earendil-works/pi-tui": ">=0.84.0"
+    "@earendil-works/pi-tui": "*"
   },
   "engines": {
     "node": ">=20"

package/node_modules/@tifan/pi-preferred-thinking/package.json

@@ -29,7 +29,7 @@
     "provenance": true
   },
   "peerDependencies": {
-    "@earendil-works/pi-coding-agent": ">=0.84.2"
+    "@earendil-works/pi-coding-agent": "*"
   },
   "engines": {
     "node": ">=20"

package/node_modules/@tifan/pi-recap/package.json

@@ -29,7 +29,7 @@
     "provenance": true
   },
   "peerDependencies": {
-    "@earendil-works/pi-coding-agent": ">=0.84.3"
+    "@earendil-works/pi-coding-agent": "*"
   },
   "engines": {
     "node": ">=20"

package/node_modules/@tifan/pi-rename/package.json

@@ -34,7 +34,7 @@
     "provenance": true
   },
   "peerDependencies": {
-    "@earendil-works/pi-coding-agent": ">=0.84.2"
+    "@earendil-works/pi-coding-agent": "*"
   },
   "engines": {
     "node": ">=20"

package/node_modules/pi-antigravity/README.md

@@ -1,6 +1,7 @@
 # pi-antigravity
 
 [![npm version](https://img.shields.io/npm/v/pi-antigravity?logo=npm)](https://www.npmjs.com/package/pi-antigravity)
+[![npm downloads](https://img.shields.io/npm/dm/pi-antigravity?logo=npm)](https://www.npmjs.com/package/pi-antigravity)
 [![license](https://img.shields.io/npm/l/pi-antigravity)](LICENSE)
 [![Sponsor](https://img.shields.io/badge/Sponsor-GitHub-ea4aaa?logo=github)](https://github.com/sponsors/Rahularya01)
 
@@ -44,6 +45,8 @@ Or install the latest repository version:
 pi install git:github.com/Rahularya01/pi-antigravity
 ```
 
+On Oh My Pi, install the same package with `omp plugin install npm:pi-antigravity`.
+
 Restart Pi (or run `/reload`) after installation. To update the npm package later, use `pi update npm:pi-antigravity`.
 
 ## Quick start
@@ -58,6 +61,17 @@ Restart Pi (or run `/reload`) after installation. To update the npm package late
 
 4. Start working. If a request fails, run `/antigravity.doctor` for sanitized diagnostics.
 
+To link another account without losing the existing one, run `/login antigravity`
+again and complete Google sign-in with the other account. Manage linked accounts with:
+
+```text
+/antigravity.accounts
+/antigravity.accounts switch <index|email>
+/antigravity.accounts remove <index|email>
+```
+
+On a hard quota wall (HTTP 429 with a reset hint), the provider automatically tries the next linked account.
+
 ## Authentication and credential safety
 
 The provider uses the OAuth 2.0 Authorization Code flow with PKCE, so credentials are only ever exchanged with Google — never typed into Pi.
@@ -65,8 +79,9 @@ The provider uses the OAuth 2.0 Authorization Code flow with PKCE, so credential
 1. `/login antigravity` opens Google sign-in and starts a temporary callback listener at `http://localhost:51121/oauth-callback`.
 2. After you approve access, Pi exchanges the callback code for tokens and stores the provider credentials in Pi's auth store (normally `~/.pi/agent/auth.json`).
 3. Pi refreshes access tokens automatically when they expire — you shouldn't need to sign in again unless a token is revoked.
+4. Successful logins and token rotations are also kept in `~/.pi/agent/antigravity-accounts.json` with owner-only permissions so linked accounts can be switched without re-authenticating.
 
-The callback listener binds only to a loopback host, so it isn't reachable from outside your machine. The auth file it writes to contains sensitive access and refresh tokens: **do not commit it, paste it into issues, or share its contents.**
+The callback listener binds only to a loopback host, so it isn't reachable from outside your machine. The auth and account files it writes to contain sensitive access and refresh tokens: **do not commit them, paste them into issues, or share their contents.**
 
 Signing in requests these Google OAuth scopes:
 
@@ -90,15 +105,19 @@ Review these permissions before approving access. If your credentials expire or
 | `/model antigravity/<model-id>` | Choose a registered Antigravity model. |
 | `/antigravity.usage` | Show the server-reported shared quota groups and reset times. |
 | `/antigravity.models` | List available runtime models, remaining shared-pool quota, and capabilities. |
+| `/antigravity.accounts` | List linked accounts; use `switch` or `remove` with an index or email to manage them. |
 | `/antigravity.models all` | Include tab/chat models normally hidden from the model list. |
 | `/antigravity.refresh` | Force refresh the dynamic model catalog from Antigravity. |
 | `/antigravity.doctor` | Show sanitized provider diagnostics, including the endpoint, status, and resolved runtime model. |
 | `/antigravity.image <prompt>` | Generate an image via Antigravity and save it under `.pi/generated-images/`. Optional `--ratio 16:9`, `--model`, `--path`. |
+| `/antigravity.search <query>` | Search the web using Google Search Grounding via Antigravity. Optional `--thinking`, `--url <url>`. |
 
 Model availability, entitlement, quota groups, and resets are returned by the service and can differ by account. The quota percentage shown for a model can represent a shared pool, not a private per-model allowance.
 
 The extension also registers a `generate_image` tool the model can call. Images are written inside the project directory (default `.pi/generated-images/`). Image models such as `gemini-3-pro-image` are account-dependent; `/antigravity.image` falls back to other advertised Gemini image IDs on 404.
 
+It also registers a `google_search` tool allowing models to perform real-time web search and URL analysis using Google Search Grounding over Cloud Code Assist (powered by `gemini-3-flash` with dynamic fallback). It supports optional lead agent directives (`instruction`), specific target URLs (`urls`), and deep reasoning (`thinking: true`).
+
 ## Models and routing
 
 After you sign in, the provider refreshes its catalog from Antigravity (`fetchAvailableModels`) and groups runtime thinking variants into public Pi model IDs. Newly enabled models — for example a new Gemini Flash generation — become selectable after that refresh without waiting for an extension release. A last-known-good cache is kept for offline/cold start; the static table below is only the conservative fallback and a routing reference.
@@ -154,13 +173,13 @@ All primary environment variables start with `ANTIGRAVITY_`. The legacy `NOAGY_`
 | `ANTIGRAVITY_CLIENT_ID` | Use a custom Google OAuth client ID. |
 | `ANTIGRAVITY_CLIENT_SECRET` | Use a custom Google OAuth client secret. Keep it out of source control and shell history. |
 | `ANTIGRAVITY_NO_KEEPALIVE` | Set to `1` to skip the keep-alive connection pool. |
-| `ANTIGRAVITY_NO_PREWARM` | Set to `1` to skip the TLS pre-warm request made when the extension loads. |
+| `ANTIGRAVITY_NO_PREWARM` | Set to `1` to skip the TLS pre-warm request made on the first Antigravity request. |
 
 By default, the provider tries `https://daily-cloudcode-pa.googleapis.com`, then the sandbox host, then `https://cloudcode-pa.googleapis.com`. Prefer the built-in OAuth client unless you have a reason to use your own credentials.
 
 ### Latency
 
-Provider requests reuse a keep-alive connection pool when the runtime supports it, so consecutive turns do not repeat the DNS, TCP, and TLS handshake. When `HTTP_PROXY`, `HTTPS_PROXY`, or `ALL_PROXY` is set, that pool is skipped so Pi's proxy-aware dispatcher is used instead. The connection is also opened when the extension loads so the first message of a session skips the handshake too. For the lowest time-to-first-token, pick a fast runtime: `gemini-3.8-flash` with reasoning off routes to `gemini-3.8-flash-low` at thinking level `LOW`. Setting `ANTIGRAVITY_PROJECT_ID` also removes the project-discovery round-trip when credentials do not already carry a project ID.
+Provider requests reuse a keep-alive connection pool when the runtime supports it, so consecutive turns do not repeat the DNS, TCP, and TLS handshake. When `HTTP_PROXY`, `HTTPS_PROXY`, or `ALL_PROXY` is set, that pool is skipped so Pi's proxy-aware dispatcher is used instead. The connection is opened on the first Antigravity request rather than at Pi startup, so other extensions are not stalled by an unauthenticated handshake. For the lowest time-to-first-token, pick a fast runtime: `gemini-3.8-flash` with reasoning off routes to `gemini-3.8-flash-low` at thinking level `LOW`. Setting `ANTIGRAVITY_PROJECT_ID` also removes the project-discovery round-trip when credentials do not already carry a project ID.
 
 ## Troubleshooting
 
@@ -173,16 +192,20 @@ Provider requests reuse a keep-alive connection pool when the runtime supports i
 - **Claude/GPT tool-call schema error:** Upgrade to the latest package release. The provider adapts Pi's JSON Schema tool definitions for the Cloud Code Assist custom-tool bridge.
 - **Quota or rate limit:** Run `/antigravity.usage`. A `429` response usually indicates quota or rate limiting; changing models may still draw from the same shared pool.
 - **Need a safe diagnostic:** `/antigravity.doctor` redacts recognized secrets from its error output. Still review output before sharing it publicly.
+- **Oh My Pi says `registerApiProvider` is not exported:** Upgrade to 0.8.1 or later. Older builds statically import a Pi compat export that Oh My Pi's bundled runtime does not provide. The provider still registers through `pi.registerProvider` on that host.
 
 ## Development
 
-This repo uses [Bun](https://bun.sh) for install, scripts, and CI. The published extension itself runs on Node (Pi's CLI).
+This repo uses [Yarn 4](https://yarnpkg.com/) via Corepack for install, scripts, and CI. The published extension itself runs on Node (Pi's CLI).
 
 ```bash
-bun install
-bun run check
+corepack enable
+yarn install
+yarn check
 ```
 
+Installs are hardened against common supply-chain attacks: lifecycle scripts are off, lockfile checksums must match the npm registry, and package versions younger than three days are rejected. Do not add a second registry or enable `enableScripts` without a review.
+
 The package declares its Pi extension in `package.json` under `pi.extensions`. See the [Pi package documentation](https://pi.dev/docs/latest/packages) for package installation, manifest, and gallery conventions.
 
 ## Support the project

package/node_modules/pi-antigravity/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-antigravity",
-  "version": "0.7.2",
+  "version": "0.8.1",
   "description": "Personal Antigravity / Cloud Code Assist provider for Pi Coding Agent",
   "author": "Rahul Arya",
   "license": "MIT",
@@ -28,18 +28,22 @@
     "src",
     "tsconfig.json"
   ],
-  "packageManager": "bun@1.4.0",
+  "packageManager": "yarn@4.18.0+sha512.fcb8716fe7cd0eece141ffc18b92193a9df9204c1ba83189c288835223fc0bbe64af473bab0d5e9927a7daeb5caf2bb07eb2787cc9338ca040ea125f2a1f2f7e",
+  "engines": {
+    "node": ">=22.15.0"
+  },
   "scripts": {
     "typecheck": "tsc --noEmit",
     "lint": "eslint src",
     "lint:fix": "eslint src --fix",
     "format": "prettier --write .",
     "format:check": "prettier --check .",
-    "security-check": "bun scripts/security-check.ts",
-    "test": "bun scripts/test-model-routing.ts && bun scripts/test-model-discovery.ts && bun scripts/test-usage-formatter.ts && bun scripts/test-stream-sse.ts && bun scripts/test-stream-header-deadline.ts && bun scripts/test-http-proxy.ts && bun scripts/test-image-gen.ts",
-    "smoke:tools": "bun scripts/smoke-tool-schema.ts",
-    "smoke:models": "bun scripts/smoke-all-models.mjs",
-    "check": "bun run typecheck && bun run lint && bun run format:check && bun run security-check && bun run test"
+    "security-check": "node scripts/run-ts.mjs scripts/security-check.ts",
+    "test": "node scripts/run-ts.mjs scripts/test-model-routing.ts && node scripts/run-ts.mjs scripts/test-model-discovery.ts && node scripts/run-ts.mjs scripts/test-usage-formatter.ts && node scripts/run-ts.mjs scripts/test-stream-sse.ts && node scripts/run-ts.mjs scripts/test-stream-header-deadline.ts && node scripts/run-ts.mjs scripts/test-http-proxy.ts && node scripts/run-ts.mjs scripts/test-image-gen.ts && node scripts/run-ts.mjs scripts/test-transcript-context.ts && node scripts/run-ts.mjs scripts/test-accounts.ts && node scripts/run-ts.mjs scripts/test-search.ts",
+    "smoke:tools": "node scripts/run-ts.mjs scripts/smoke-tool-schema.ts",
+    "smoke:models": "node scripts/run-ts.mjs scripts/smoke-all-models.mjs",
+    "audit": "yarn npm audit --environment production --recursive && yarn npm audit --severity high --all --recursive",
+    "check": "yarn typecheck && yarn lint && yarn format:check && yarn security-check && yarn test && yarn audit"
   },
   "pi": {
     "extensions": [
@@ -47,11 +51,12 @@
     ]
   },
   "peerDependencies": {
-    "@earendil-works/pi-ai": ">=0.80.0",
-    "@earendil-works/pi-coding-agent": ">=0.80.0"
+    "@earendil-works/pi-ai": "*",
+    "@earendil-works/pi-coding-agent": "*"
   },
   "devDependencies": {
     "@earendil-works/pi-ai": "^0.84.2",
+    "@earendil-works/pi-coding-agent": "^0.84.2",
     "@eslint/js": "^10.0.1",
     "@types/node": "^26.1.1",
     "eslint": "^10.7.0",