@herbertgao/pi-extensions 2026.9.19 → 2026.10.0

package/node_modules/@pi-plugins/fast-mode/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-plugins/fast-mode",
-  "version": "0.1.12",
+  "version": "0.1.13",
   "description": "Fast service-tier extension for pi-agent.",
   "keywords": [
     "fast",
@@ -35,8 +35,8 @@
     "access": "public"
   },
   "devDependencies": {
-    "@earendil-works/pi-coding-agent": "0.83.0",
-    "@earendil-works/pi-tui": "0.83.0",
+    "@earendil-works/pi-coding-agent": "0.99.1",
+    "@earendil-works/pi-tui": "0.99.1",
     "@effect/platform-node": "4.0.0-rc.115",
     "@types/node": "26.1.2",
     "effect": "4.0.0-rc.115",
@@ -45,9 +45,9 @@
     "tsdown": "0.22.14",
     "typescript": "7.0.2",
     "@pi-plugins/fmt": "0.0.0",
-    "@pi-plugins/tsconfig": "0.0.0",
+    "@pi-plugins/lint": "0.0.0",
     "@pi-plugins/shared": "0.0.0",
-    "@pi-plugins/lint": "0.0.0"
+    "@pi-plugins/tsconfig": "0.0.0"
   },
   "peerDependencies": {
     "@earendil-works/pi-coding-agent": "*",

package/node_modules/pi-antigravity/README.md

@@ -174,6 +174,9 @@ All primary environment variables start with `ANTIGRAVITY_`. The legacy `NOAGY_`
 | `ANTIGRAVITY_CLIENT_SECRET` | Use a custom Google OAuth client secret. Keep it out of source control and shell history. |
 | `ANTIGRAVITY_NO_KEEPALIVE` | Set to `1` to skip the keep-alive connection pool. |
 | `ANTIGRAVITY_NO_PREWARM` | Set to `1` to skip the TLS pre-warm request made on the first Antigravity request. |
+| `ANTIGRAVITY_NO_EXTRA_TOOLS` | Set to `1` to stop registering the model-facing `google_search` and `generate_image` tools. The `/antigravity.search` and `/antigravity.image` commands stay available. |
+| `ANTIGRAVITY_NO_SEARCH_TOOL` | Set to `1` to skip only the `google_search` tool, e.g. when another extension provides web search. |
+| `ANTIGRAVITY_NO_IMAGE_TOOL` | Set to `1` to skip only the `generate_image` tool. |
 
 By default, the provider tries `https://daily-cloudcode-pa.googleapis.com`, then the sandbox host, then `https://cloudcode-pa.googleapis.com`. Prefer the built-in OAuth client unless you have a reason to use your own credentials.
 

package/node_modules/pi-antigravity/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-antigravity",
-  "version": "0.8.1",
+  "version": "0.9.0",
   "description": "Personal Antigravity / Cloud Code Assist provider for Pi Coding Agent",
   "author": "Rahul Arya",
   "license": "MIT",
@@ -39,7 +39,7 @@
     "format": "prettier --write .",
     "format:check": "prettier --check .",
     "security-check": "node scripts/run-ts.mjs scripts/security-check.ts",
-    "test": "node scripts/run-ts.mjs scripts/test-model-routing.ts && node scripts/run-ts.mjs scripts/test-model-discovery.ts && node scripts/run-ts.mjs scripts/test-usage-formatter.ts && node scripts/run-ts.mjs scripts/test-stream-sse.ts && node scripts/run-ts.mjs scripts/test-stream-header-deadline.ts && node scripts/run-ts.mjs scripts/test-http-proxy.ts && node scripts/run-ts.mjs scripts/test-image-gen.ts && node scripts/run-ts.mjs scripts/test-transcript-context.ts && node scripts/run-ts.mjs scripts/test-accounts.ts && node scripts/run-ts.mjs scripts/test-search.ts",
+    "test": "node scripts/run-ts.mjs scripts/test-sanitize-text.ts && node scripts/run-ts.mjs scripts/test-model-routing.ts && node scripts/run-ts.mjs scripts/test-model-discovery.ts && node scripts/run-ts.mjs scripts/test-usage-formatter.ts && node scripts/run-ts.mjs scripts/test-stream-sse.ts && node scripts/run-ts.mjs scripts/test-stream-header-deadline.ts && node scripts/run-ts.mjs scripts/test-http-proxy.ts && node scripts/run-ts.mjs scripts/test-oauth-fetch.ts && node scripts/run-ts.mjs scripts/test-image-gen.ts && node scripts/run-ts.mjs scripts/test-transcript-context.ts && node scripts/run-ts.mjs scripts/test-accounts.ts && node scripts/run-ts.mjs scripts/test-search.ts && node scripts/run-ts.mjs scripts/test-extra-tools-toggle.ts",
     "smoke:tools": "node scripts/run-ts.mjs scripts/smoke-tool-schema.ts",
     "smoke:models": "node scripts/run-ts.mjs scripts/smoke-all-models.mjs",
     "audit": "yarn npm audit --environment production --recursive && yarn npm audit --severity high --all --recursive",
@@ -55,18 +55,18 @@
     "@earendil-works/pi-coding-agent": "*"
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "^0.84.2",
-    "@earendil-works/pi-coding-agent": "^0.84.2",
+    "@earendil-works/pi-ai": "^0.86.1",
+    "@earendil-works/pi-coding-agent": "^0.86.1",
     "@eslint/js": "^10.0.1",
-    "@types/node": "^26.1.1",
-    "eslint": "^10.7.0",
+    "@types/node": "^26.6.2",
+    "eslint": "^10.11.0",
     "eslint-config-prettier": "^10.1.8",
     "globals": "^17.7.0",
-    "prettier": "^3.9.5",
+    "prettier": "^3.9.8",
     "typescript": "^6.0.3",
     "typescript-eslint": "^8.64.0"
   },
   "dependencies": {
-    "undici": "^8.10.0"
+    "undici": "^8.11.2"
   }
 }

package/node_modules/pi-antigravity/src/auth/oauth.ts

@@ -1,5 +1,6 @@
 import { createHash, randomBytes } from "node:crypto";
 import { createServer, type Server } from "node:http";
+import { fetch as oauthFetch } from "undici";
 import type { OAuthCredentials, OAuthLoginCallbacks } from "@earendil-works/pi-ai";
 import { defaultProjectId, loadCodeAssist } from "../client/client.js";
 import { escapeHtml, antigravityEnv } from "../utils/util.js";
@@ -74,7 +75,7 @@ function generatePKCE(): { verifier: string; challenge: string } {
 
 async function getUserEmail(token: string): Promise<string | undefined> {
   try {
-    const res = await fetch("https://www.googleapis.com/oauth2/v1/userinfo?alt=json", {
+    const res = await oauthFetch("https://www.googleapis.com/oauth2/v1/userinfo?alt=json", {
       headers: { Authorization: `Bearer ${token}` },
     });
     if (!res.ok) return undefined;
@@ -348,7 +349,7 @@ export async function loginAntigravity(
     });
     if (returnedState !== state) throw new Error("OAuth state mismatch");
 
-    const tokenResponse = await fetch(TOKEN_URL, {
+    const tokenResponse = await oauthFetch(TOKEN_URL, {
       method: "POST",
       headers: { "Content-Type": "application/x-www-form-urlencoded" },
       body: new URLSearchParams({
@@ -395,7 +396,9 @@ export async function loginAntigravity(
 export async function refreshAntigravityToken(
   credentials: OAuthCredentials,
 ): Promise<AntigravityOAuthCredentials> {
-  const response = await fetch(TOKEN_URL, {
+  // SDK hosts may use Node 26 built-in fetch with a separate Undici dispatcher.
+  // Use Undici's fetch to keep response decompression on the same implementation.
+  const response = await oauthFetch(TOKEN_URL, {
     method: "POST",
     headers: { "Content-Type": "application/x-www-form-urlencoded" },
     body: new URLSearchParams({

package/node_modules/pi-antigravity/src/index.ts

@@ -38,7 +38,7 @@ import {
   formatUsageSummary,
   resolveApiKeyFromContext,
 } from "./usage/index.js";
-import { redactSecrets, maskEmail } from "./utils/index.js";
+import { isExtraToolEnabled, redactSecrets, maskEmail } from "./utils/index.js";
 
 /**
  * Pi's interactive `notify` writes into the chat transcript. `console.log` in that
@@ -353,118 +353,122 @@ export default function (pi: ExtensionAPI): void {
     },
   });
 
-  pi.registerTool({
-    name: "generate_image",
-    label: "Generate image",
-    description:
-      "Generate an image via Antigravity using the signed-in Google account. Saves under .pi/generated-images/ unless path is set.",
-    promptSnippet: "Generate images via Antigravity OAuth (Gemini image models)",
-    promptGuidelines: [
-      "Use generate_image when the user asks to create, draw, or generate an image.",
-    ],
-    parameters: Type.Object({
-      prompt: Type.String({ description: "Image description." }),
-      aspectRatio: Type.Optional(StringEnum(IMAGE_ASPECT_RATIOS)),
-      model: Type.Optional(
-        Type.String({
-          description: `Image model id. Default: ${DEFAULT_IMAGE_MODEL}.`,
-        }),
-      ),
-      path: Type.Optional(
-        Type.String({
-          description: "Project-relative file or directory to save the image.",
-        }),
-      ),
-    }),
-    async execute(_toolCallId, params, signal, onUpdate, ctx) {
-      const apiKey = await ctx.modelRegistry.getApiKeyForProvider("antigravity");
-      if (!apiKey) {
-        throw new Error("No Antigravity credentials. Run /login antigravity first.");
-      }
-      onUpdate?.({ content: [{ type: "text", text: "Generating image…" }], details: {} });
-      const result = await generateAntigravityImage({
-        apiKey,
-        cwd: ctx.cwd,
-        prompt: params.prompt,
-        aspectRatio: params.aspectRatio,
-        model: params.model,
-        path: params.path,
-        signal,
-      });
-      const notes = result.text.join(" ").trim();
-      return {
-        content: [
-          {
-            type: "text" as const,
-            text: `Saved image to ${result.savedPaths.join(", ")}${notes ? `. ${notes}` : ""}`,
-          },
-          ...result.images.map((image) => ({
-            type: "image" as const,
-            data: image.data,
-            mimeType: image.mimeType,
-          })),
-        ],
-        details: { model: result.model, savedPaths: result.savedPaths },
-      };
-    },
-  });
-
-  pi.registerTool({
-    name: "google_search",
-    label: "Google Search",
-    description:
-      "Search the web using Google Search via Antigravity Grounding powered by Gemini 3 Flash. Returns real-time web results with multi-angle deep search and source citations. Use this whenever current, real-time information or web research is needed.",
-    promptSnippet: "Real-time Google Search grounding via Antigravity (Gemini 3 Flash)",
-    promptGuidelines: [
-      "Use google_search when you need real-time, up-to-date web information, latest news, documentation, or fact checking.",
-      "Pass specific URLs into the urls array if you want the search engine to fetch and analyze specific pages.",
-      "Set instruction to provide special research directives from the lead agent (e.g. focus on issues, compare benchmarks, restrict time range).",
-    ],
-    parameters: Type.Object({
-      query: Type.String({ description: "Search query or question." }),
-      instruction: Type.Optional(
-        Type.String({
-          description:
-            "Specific directive or focus from the lead agent (e.g., '重点关注英文社区近七天的讨论', 'focus on GitHub issues and benchmarks', 'ignore marketing announcements').",
-        }),
-      ),
-      urls: Type.Optional(
-        Type.Array(Type.String(), {
-          description: "Optional specific URLs to fetch and analyze alongside the search.",
-        }),
-      ),
-      thinking: Type.Optional(
-        Type.Boolean({
-          description: "Enable deeper thinking for complex analysis (default: false).",
-        }),
-      ),
-    }),
-    async execute(_toolCallId, params, signal, onUpdate, ctx) {
-      const apiKey = await ctx.modelRegistry.getApiKeyForProvider("antigravity");
-      if (!apiKey) {
-        throw new Error("No Antigravity credentials. Run /login antigravity first.");
-      }
-      onUpdate?.({
-        content: [{ type: "text", text: `Searching Google for: "${params.query}"…` }],
-        details: {},
-      });
-      try {
-        const result = await executeAntigravitySearch({
+  if (isExtraToolEnabled("IMAGE")) {
+    pi.registerTool({
+      name: "generate_image",
+      label: "Generate image",
+      description:
+        "Generate an image via Antigravity using the signed-in Google account. Saves under .pi/generated-images/ unless path is set.",
+      promptSnippet: "Generate images via Antigravity OAuth (Gemini image models)",
+      promptGuidelines: [
+        "Use generate_image when the user asks to create, draw, or generate an image.",
+      ],
+      parameters: Type.Object({
+        prompt: Type.String({ description: "Image description." }),
+        aspectRatio: Type.Optional(StringEnum(IMAGE_ASPECT_RATIOS)),
+        model: Type.Optional(
+          Type.String({
+            description: `Image model id. Default: ${DEFAULT_IMAGE_MODEL}.`,
+          }),
+        ),
+        path: Type.Optional(
+          Type.String({
+            description: "Project-relative file or directory to save the image.",
+          }),
+        ),
+      }),
+      async execute(_toolCallId, params, signal, onUpdate, ctx) {
+        const apiKey = await ctx.modelRegistry.getApiKeyForProvider("antigravity");
+        if (!apiKey) {
+          throw new Error("No Antigravity credentials. Run /login antigravity first.");
+        }
+        onUpdate?.({ content: [{ type: "text", text: "Generating image…" }], details: {} });
+        const result = await generateAntigravityImage({
           apiKey,
-          query: params.query,
-          instruction: params.instruction,
-          urls: params.urls,
-          thinking: params.thinking,
+          cwd: ctx.cwd,
+          prompt: params.prompt,
+          aspectRatio: params.aspectRatio,
+          model: params.model,
+          path: params.path,
           signal,
         });
+        const notes = result.text.join(" ").trim();
         return {
-          content: [{ type: "text", text: result }],
-          details: {},
+          content: [
+            {
+              type: "text" as const,
+              text: `Saved image to ${result.savedPaths.join(", ")}${notes ? `. ${notes}` : ""}`,
+            },
+            ...result.images.map((image) => ({
+              type: "image" as const,
+              data: image.data,
+              mimeType: image.mimeType,
+            })),
+          ],
+          details: { model: result.model, savedPaths: result.savedPaths },
         };
-      } catch (error) {
-        const msg = error instanceof Error ? error.message : String(error);
-        throw new Error(redactSecrets(msg), { cause: error });
-      }
-    },
-  });
+      },
+    });
+  }
+
+  if (isExtraToolEnabled("SEARCH")) {
+    pi.registerTool({
+      name: "google_search",
+      label: "Google Search",
+      description:
+        "Search the web using Google Search via Antigravity Grounding powered by Gemini 3 Flash. Returns real-time web results with multi-angle deep search and source citations. Use this whenever current, real-time information or web research is needed.",
+      promptSnippet: "Real-time Google Search grounding via Antigravity (Gemini 3 Flash)",
+      promptGuidelines: [
+        "Use google_search when you need real-time, up-to-date web information, latest news, documentation, or fact checking.",
+        "Pass specific URLs into the urls array if you want the search engine to fetch and analyze specific pages.",
+        "Set instruction to provide special research directives from the lead agent (e.g. focus on issues, compare benchmarks, restrict time range).",
+      ],
+      parameters: Type.Object({
+        query: Type.String({ description: "Search query or question." }),
+        instruction: Type.Optional(
+          Type.String({
+            description:
+              "Specific directive or focus from the lead agent (e.g., '重点关注英文社区近七天的讨论', 'focus on GitHub issues and benchmarks', 'ignore marketing announcements').",
+          }),
+        ),
+        urls: Type.Optional(
+          Type.Array(Type.String(), {
+            description: "Optional specific URLs to fetch and analyze alongside the search.",
+          }),
+        ),
+        thinking: Type.Optional(
+          Type.Boolean({
+            description: "Enable deeper thinking for complex analysis (default: false).",
+          }),
+        ),
+      }),
+      async execute(_toolCallId, params, signal, onUpdate, ctx) {
+        const apiKey = await ctx.modelRegistry.getApiKeyForProvider("antigravity");
+        if (!apiKey) {
+          throw new Error("No Antigravity credentials. Run /login antigravity first.");
+        }
+        onUpdate?.({
+          content: [{ type: "text", text: `Searching Google for: "${params.query}"…` }],
+          details: {},
+        });
+        try {
+          const result = await executeAntigravitySearch({
+            apiKey,
+            query: params.query,
+            instruction: params.instruction,
+            urls: params.urls,
+            thinking: params.thinking,
+            signal,
+          });
+          return {
+            content: [{ type: "text", text: result }],
+            details: {},
+          };
+        } catch (error) {
+          const msg = error instanceof Error ? error.message : String(error);
+          throw new Error(redactSecrets(msg), { cause: error });
+        }
+      },
+    });
+  }
 }

package/node_modules/pi-antigravity/src/stream/stream.ts

@@ -118,7 +118,7 @@ interface PiAiTranscriptModule {
 }
 
 function transcriptModule(): PiAiTranscriptModule {
-  return piAi as unknown as PiAiTranscriptModule;
+  return piAi;
 }
 
 function asSystemMessages(messages: Context["messages"] | undefined): SystemMessageLike[] {

package/node_modules/pi-antigravity/src/utils/util.ts

@@ -5,6 +5,15 @@ export function antigravityEnv(name: string): string | undefined {
   return process.env[`ANTIGRAVITY_${name}`] || process.env[`NOAGY_${name}`];
 }
 
+/**
+ * Whether a model-facing extra tool (`google_search`, `generate_image`) is registered.
+ * `ANTIGRAVITY_NO_EXTRA_TOOLS=1` disables both; `ANTIGRAVITY_NO_SEARCH_TOOL=1` and
+ * `ANTIGRAVITY_NO_IMAGE_TOOL=1` disable one, e.g. to avoid clashing with another search provider.
+ */
+export function isExtraToolEnabled(tool: "SEARCH" | "IMAGE"): boolean {
+  return antigravityEnv("NO_EXTRA_TOOLS") !== "1" && antigravityEnv(`NO_${tool}_TOOL`) !== "1";
+}
+
 export function isRecord(value: unknown): value is Record<string, unknown> {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -14,7 +23,15 @@ export function asString(value: unknown): string | undefined {
 }
 
 export function sanitizeText(text: unknown): string {
-  return String(text ?? "").replace(/[\uD800-\uDFFF]/g, "\uFFFD");
+  const str = String(text ?? "");
+  const toWellFormed = (str as unknown as { toWellFormed?: () => string }).toWellFormed;
+  if (typeof toWellFormed === "function") {
+    return toWellFormed.call(str);
+  }
+  return str.replace(
+    /(?:[\uD800-\uDBFF](?![\uDC00-\uDFFF]))|(?:(?<![\uD800-\uDBFF])[\uDC00-\uDFFF])/g,
+    "\uFFFD",
+  );
 }
 
 export function escapeHtml(text: string): string {

package/node_modules/pi-multi-account/CHANGELOG.md

@@ -4,6 +4,26 @@ All notable changes to this project are documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [1.24.0] — 2026-10-03
+
+### Added
+
+- Explicit `/multi-account pin provider/model`, `unpin provider-or-family` and `pins [list]` controls (#74). Pins persist one preference per account group across reload/restart, without changing Pi's foreground model, shared registry or startup defaults. Exact siblings, account availability and automatic quality bands still win; missing models remain saved but inactive. All extension config commands share locked field-scoped persistence, preserving concurrent unrelated settings. Pins reject busy, passive-child, closed or stale sessions and cannot authorize cheaper provider-only switching or automatic compaction. Thanks @MarsLuay for the feature request.
+
+### Fixed
+
+- Refresh expired opaque Anthropic OAuth tokens from their stored expiry before proxy forwarding, including seconds/milliseconds and flight slack; the newly persisted token reaches upstream (#79, thanks @unclejobs-ai).
+- Numbered Anthropic OAuth slots publish a non-secret OAuth-shaped placeholder so Pi retains native Claude identity, `x-app: cli`, tool-name serialization and response mapping (#80). Real credentials stay parent-side. Sidecar-backed legacy publications migrate safely; production refresh writes privately under the auth lock without briefly unshadowing a child. API-key aliases remain direct and real API keys are not rewritten. Parent/native and real `pi --no-extensions` tool roundtrips run against deterministic fake upstreams. A disconnected proxy caller aborts its upstream request without poisoning provider health. These tests do not claim live Anthropic acceptance.
+- Normalize only Codex `/images/generations` and `/images/edits` routes by adding exactly one `/codex` segment, preserving queries and leaving chat, usage, authentication and similar paths unchanged (#83, thanks @hantusk). Live image-service success remains outside the deterministic routing guarantee.
+- Update the Anthropic billing-header Claude Code version to **2.1.288**, the current registry version at release preparation (#81).
+
+### Compatibility
+
+- Bind OAuth, catalogs and transports to the running host's public SDK surfaces, including Pi **0.99.2 and 1.0.0** alongside **0.85.1, 0.86.1 and 0.87.1** (#82, thanks @zieglar). Both SDKs are host peers; a private runtime SDK is no longer required for the factory bridge. Pi 0.99+ requires Node >=22.19.0.
+- Pi-owned virtual selections and configured image/classifier models remain host-owned and never become account chat fallback targets. Modern transcript/context conversion preserves system instructions, tools and streamed tool results.
+- Replace the split SDK updates in #84/#87 with a matched development pair at **0.87.1** and a regenerated lockfile. Update protobuf to **2.15.0** (#85) and Node types to **22.20.4** (#86). Thanks to Dependabot for the dependency updates.
+
 ## [1.23.2] — 2026-09-24
 
 ### Fixed

package/node_modules/pi-multi-account/README.md

@@ -8,6 +8,7 @@ When the account you are using hits a quota or rate limit, `pi-multi-account` tr
 
 - **Auto-discovers** every authenticated account from `~/.pi/agent/auth.json` (Anthropic Claude Pro/Max, OpenAI/ChatGPT Codex, Kimi For Coding, Cursor, Qwen/Alibaba, and Ollama) and builds the failover rotation dynamically — no manual config editing.
 - **Grows the rotation on login.** Run `/login`, choose **Use a subscription**, then select a numbered slot such as `anthropic-account-3` or `openai-codex-account-5`. The next discovery sweep adds it to the rotation automatically.
+- **Pins a preferred model per account group.** `/multi-account pin provider/model` persists a routing preference across sibling accounts; `unpin` removes it and `pins` explains its current applicability. It never changes the current model, Pi's registry, cooldowns, startup defaults, or automatic quality-band rules.
 - **Auto-discovers new Codex models per account.** At session start (and on `reload` / `rediscover`) it reads OpenAI's authenticated model catalog, mirrors each account's actually available models onto its Pi alias, and follows OpenAI's server priority. A new flagship can therefore win immediately without an extension release or a hard-coded model id.
 - **Handles auth failures without poisoning healthy OAuth accounts.** A generic final 401 briefly cools down a refreshable account and moves the current task forward. Explicit provider verdicts such as `authentication token has been invalidated` force an early refresh; if the refresh token is dead too, the slot is removed and Pi prints the interactive `/login` recovery steps.
 - **Fails over on quota / rate-limit** (429 / 402 / 403 and friends): the exhausted account goes on cooldown (parsed from the provider's own reset metadata when available) and Pi first tries another account with the same model. If it must leave the family, it preserves the model's quality band — Sol/Opus/other frontier flagships stay frontier; Terra/Sonnet stay balanced; Luna/Haiku stay fast — and keeps the session's thinking level. A fresh provider verdict of `blocked` or 100% is skipped automatically instead of wasting the turn; manual `next` remains an explicit one-attempt override for stale telemetry.
@@ -26,13 +27,17 @@ pi install npm:pi-multi-account
 
 Restart Pi or run `/reload` after installation.
 
-Requires Node 22+ and Agent Pi / pi-ai **>=0.85.1, <0.88.0** (CI covers 0.85.1, 0.86.1 and 0.87.1).
-Pi's host package is a peer. `pi-ai` is a runtime dependency for the OAuth/catalog bridge:
-Pi-managed installs intentionally do not install extension peer dependencies, but subscription
-login must be able to locate pi-ai on disk. Provider transports still use Pi's **host-bound**
-imports, not that filesystem-resolved bridge copy, so a stale nested pi-ai cannot remove tools or
-system instructions. Standalone SDK callers must pair their context with the installed pi-ai
-version. If the OAuth bridge is unavailable, API-key account discovery still works.
+Requires Node 22+ and Agent Pi / pi-ai **>=0.85.1, <0.88.0; >=0.99.0, <0.100.0; or >=1.0.0, <2.0.0**.
+CI covers Pi **0.85.1, 0.86.1, 0.87.1, 0.99.2 and 1.0.0**; Pi 0.99+ requires Node >=22.19.0.
+Both Pi SDK packages are peers supplied by the running host. OAuth, catalogs and transports
+use public host-bound imports; do not install a private runtime pi-ai copy alongside this extension.
+Standalone SDK callers must supply matching Pi SDK versions. Pi 0.99+ support retains numbered
+account aliases and existing rotation/continuation semantics; it does not introduce a virtual model.
+Pi-owned virtual selections and image/classifier models are not account chat failover targets.
+
+This release does not arbitrate multiple extensions calling `pi.setModel`. Keep one automatic
+foreground selection owner: independent routing extensions can otherwise overwrite each other's
+choices. Account failover still owns ordinary selected chat accounts; virtual models remain host-owned.
 
 Kimi OAuth spares remain available in `/login`, but are not written to `models.json`: without a
 Kimi child OAuth proxy those aliases would be resolvable but unauthenticated. Only real API-key
@@ -105,6 +110,9 @@ All three names are aliases for the same command: `/multi-account`, `/provider-f
 | `add [anthropic\|codex\|kimi\|cursor\|ollama\|qwen]` | Print the next free account slot to select from the interactive `/login` picker. Subscription families (Anthropic, Codex, Kimi, Cursor) are logged in through `/login`; API-key families are filled in `auth.json`. |
 | `remove [anthropic\|codex\|kimi\|cursor\|ollama\|qwen\|<provider-id>]` | Remove an account from `auth.json` and rotation. Family name drops the highest numbered alias slot; a full provider id removes that exact slot. Aliases: `rm`, `delete`. |
 | `next` | Manually switch to the next compatible-quality fallback, deliberately overriding recorded cooldowns for one attempt. Use explicit `switch` to select a different tier. |
+| `pin <provider/model>` | Persist a model preference for that provider's account group. A numbered alias applies to its siblings too. Requires an idle live parent; does not select the model. |
+| `unpin <provider-or-family>` | Remove one group's pin without changing its underlying `preferredModels` or catalog order. Idempotent; requires an idle live parent. |
+| `pins [list]` | Read-only sorted list of pins and known catalog/account/cooldown/quality applicability. Never refreshes credentials or probes providers. |
 | `pick` | Open a model picker for the current account only. Uses native model selection and its thinking default; never removes models from the shared registry. Requires an idle interactive session. Built-in `/model` remains unchanged. |
 | `save-default` | Save the current model and effective thinking level together as global startup defaults for new sessions. Preserves other models' thinking preferences. Project overrides, explicit CLI options, and resumed-session settings still take precedence. Automatic rotation never invokes this. |
 | `only-active [on\|off]` | Legacy picker preference; use `pick` for a current-account-only menu. The complete Pi model registry remains available to all clients. Alias: `focus`. |
@@ -113,6 +121,27 @@ All three names are aliases for the same command: `/multi-account`, `/provider-f
 | `reload` | Reload config from disk and re-discover accounts. |
 | `enable` / `disable` | Turn failover on/off for the current Pi process. |
 
+### Model pins
+
+```text
+/multi-account pin openai-codex-account-2/gpt-5.4
+/multi-account pins
+/multi-account unpin openai-codex
+```
+
+Pins live in `provider-failover.json` under `pinnedModels`, keyed by account group (for example
+`openai-codex`, `anthropic` or a custom provider's base ID). Other sessions adopt edits on
+`reload` or restart. Extension configuration commands share a locked read-latest transaction;
+unrelated settings and other groups' pins survive concurrent extension writes. A failed/cancelled write does not change the runtime preference.
+
+A pin leads the group's underlying preference/catalog order, but **a healthy exact-model
+sibling still wins**. A pin is not evidence that an older model is a newer flagship. Missing
+models remain saved but inactive until the catalog supplies them; cooling or unauthenticated
+accounts stay ineligible. A cheaper pin cannot demote frontier work. Select the cheaper model
+explicitly with `/model`, `pick` or `switch provider/model` to enter that quality band. A
+provider-only `switch` and automatic compaction cannot use a pin as cheaper-tier consent. Pi-owned
+virtual/image/classifier models cannot be pinned as account chat fallbacks.
+
 ## How rotation membership works
 
 - **Joins the rotation** when an account has a present, non-expired credential in `auth.json` (after `/login`).
@@ -163,7 +192,8 @@ A default config is created at `~/.pi/agent/provider-failover.json` on first run
 | `debugLog` | `true` | Write a structured "black box" decision log to `provider-failover-debug.log` (no credentials — only provider/model ids and truncated reasons). View with `/multi-account log`. |
 | `preferLatestModel` | `true` | Rank the strongest/current model ahead of older siblings within the current quality band during automatic failover. |
 | `reasoningLevel` | `"auto"` | `"auto"` follows the level the session actually runs at (your Pi default, `/thinking`, per-agent `--thinking`) and only restores it after switches. Set an explicit level (`"off"`…`"xhigh"`) to **force** it on every turn regardless of the session — `"xhigh"` only if you really want the extreme level. |
-| `preferredModels` | `{}` | Optional manual strongest-first override per family; when present it wins over live catalog priority. |
+| `preferredModels` | `{}` | Optional manual strongest-first override per family; when present it wins over live catalog priority. A model pin leads this order without rewriting it. |
+| `pinnedModels` | `{}` | One explicit model ID per account group, managed by `pin` / `unpin`. Inactive when unavailable/incompatible; never grants account health or a different automatic quality band. |
 
 State (cooldowns, invalidations, recent switches, credential-free Codex model catalogs, and a diagnostic pending marker) is persisted to `~/.pi/agent/provider-failover-state.json`. The actual pending task is session-local: one Pi window never consumes or resumes another window's work. Pending work is discarded when its owning session closes.
 
@@ -217,6 +247,14 @@ A failover is only useful if the agent actually keeps working afterward. These g
 the suite on the supported newer Pi versions. Host-binding tests load the real extension wrapper
 through Pi with a deliberately incompatible nested pi-ai, inspect native request bodies, and
 complete a streamed tool-call/result cycle without real credentials or provider traffic.
+A real `pi --no-extensions` subprocess also exercises a numbered Anthropic OAuth slot and native
+`read` tool roundtrip against a fake upstream. Its non-secret OAuth-shaped placeholder preserves
+native identity and tool mapping; real credentials remain in the parent. Legacy publications
+migrate only with an intact parent-side recovery copy. Production refresh persists into the
+private sidecar under the auth lock without briefly replacing the child's placeholder. API-key
+aliases remain direct native publications; stale loopback metadata accepts only the current key.
+Cancellation aborts the proxy's upstream request; ordinary API-key request semantics remain unchanged. These are deterministic regressions,
+not a claim of live Anthropic or Codex-image acceptance.
 
 The optional companion Goal integration is selected explicitly; it never assumes a personal path:
 

package/node_modules/pi-multi-account/config-file-transaction.ts

@@ -0,0 +1,42 @@
+/** Shared read-latest/field-scoped transaction for every extension config writer. */
+import { randomUUID } from "node:crypto";
+import { createRequire } from "node:module";
+import { readFileSync, realpathSync, renameSync, rmSync, writeFileSync } from "node:fs";
+
+const require = createRequire(import.meta.url);
+const pause = new Int32Array(new SharedArrayBuffer(4));
+
+export function mutateConfigFile(
+	path: string,
+	patch: (disk: Record<string, any>) => Record<string, unknown>,
+	canCommit: () => boolean = () => true,
+): Record<string, any> {
+	// Preserve config symlinks and make aliases coordinate on the same target lock.
+	const target = realpathSync(path);
+	const lockfile = require("proper-lockfile") as { lockSync(path: string, options: object): () => void };
+	let release: (() => void) | undefined;
+	const deadline = Date.now() + 250;
+	while (!release) {
+		if (!canCommit()) throw new Error("session changed before config persistence");
+		try { release = lockfile.lockSync(target, { realpath: false }); }
+		catch (error: any) {
+			if (error?.code !== "ELOCKED" || Date.now() >= deadline) throw error;
+			Atomics.wait(pause, 0, 0, 5);
+		}
+	}
+	const temp = `${target}.${process.pid}.${randomUUID()}.tmp`;
+	try {
+		const disk = JSON.parse(readFileSync(target, "utf8"));
+		if (!disk || typeof disk !== "object" || Array.isArray(disk)) throw new Error("config must be an object");
+		const delta = patch(disk);
+		if (!delta || typeof delta !== "object" || Array.isArray(delta)) throw new Error("config patch must be an object");
+		const next = { ...disk, ...delta };
+		if (!canCommit()) throw new Error("session changed before config persistence");
+		writeFileSync(temp, `${JSON.stringify(next, null, "\t")}\n`, { mode: 0o600, flag: "wx" });
+		if (!canCommit()) throw new Error("session changed before config persistence");
+		renameSync(temp, target);
+		return next;
+	} finally {
+		try { rmSync(temp, { force: true }); } finally { release(); }
+	}
+}