@oai404iao/pi-codex-web-search 0.1.0 → 0.2.0

package/README.md

@@ -2,7 +2,7 @@
 
 Alpha bootstrap candidate; initial npm publication is still pending.
 
-Peer floor: Pi 0.85.1; tested against 0.85.1.
+Peer floor: Pi 0.86.1; tested against 0.86.1.
 
 Installs `web_search` and search activity rendering. Depends only on
 `pi-codex-runtime`, not core, imagegen or the old bundle.
@@ -10,6 +10,11 @@ Catalog-supported standalone profiles call `alpha/search` using Pi's model
 registry authentication. Hosted profiles require core; without it the tool stays
 inactive and explicit execution reports the missing provider capability.
 
+Optional Code Mode discovery offers `codex_web__web_search` on standalone
+profiles only, reusing the same authentication/client and capturing turn identity
+and history before auth I/O. It requires an exact Code Mode grant and adds no
+Code Mode dependency. Hosted placeholders remain direct; no direct tool is hidden.
+
 When core is present, the broker contributes response-local search capture and
 citation signatures without a second provider registration.
 Uses the existing

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oai404iao/pi-codex-web-search",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "private": false,
   "description": "Unpublished pi-codex-web-search workspace for the staged Codex split",
   "type": "module",
@@ -28,9 +28,9 @@
     ]
   },
   "peerDependencies": {
-    "@earendil-works/pi-ai": ">=0.85.1",
-    "@earendil-works/pi-coding-agent": ">=0.85.1",
-    "@earendil-works/pi-tui": ">=0.85.1",
+    "@earendil-works/pi-ai": ">=0.86.1",
+    "@earendil-works/pi-coding-agent": ">=0.86.1",
+    "@earendil-works/pi-tui": ">=0.86.1",
     "typebox": "*"
   },
   "peerDependenciesMeta": {
@@ -45,12 +45,12 @@
     }
   },
   "dependencies": {
-    "@oai404iao/pi-codex-runtime": "0.1.0"
+    "@oai404iao/pi-codex-runtime": "0.3.0"
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "0.85.1",
-    "@earendil-works/pi-coding-agent": "0.85.1",
-    "@earendil-works/pi-tui": "0.85.1",
+    "@earendil-works/pi-ai": "0.86.1",
+    "@earendil-works/pi-coding-agent": "0.86.1",
+    "@earendil-works/pi-tui": "0.86.1",
     "@types/node": "^26.2.0",
     "tsx": "^4.20.6",
     "typebox": "^1.1.24",
@@ -77,5 +77,5 @@
   "engines": {
     "node": ">=22.19.0"
   },
-  "gitHead": "88cb6f56447d88b71232cd764ca5b29251341d23"
+  "gitHead": "b02484cecad9081886797bf9b4438135aaae1e07"
 }

package/src/code-mode-adapter.ts

@@ -0,0 +1,23 @@
+import type { ExtensionAPI, ExtensionContext } from "@earendil-works/pi-coding-agent";
+import { registerCodeModeContribution, type OwnedCodeModeTool } from "@oai404iao/pi-codex-runtime/internal/code-mode-contributions";
+import { loadModelSettings } from "@oai404iao/pi-codex-runtime/internal/model-catalog/runtime";
+import { standaloneWebSearch, webSearchToolSchema, type WebSearchInput } from "./tools/web-search.js";
+
+export function registerSearchContribution(pi: ExtensionAPI): void {
+	const enabled = (ctx: ExtensionContext) => {
+		const settings = loadModelSettings(ctx.model, ctx.cwd);
+		return settings.enabled && settings.webSearchImplementation === "standalone";
+	};
+	const tool: OwnedCodeModeTool = {
+		name: "web_search", effect: "read", parallel: true,
+		description: "Run the installed Codex standalone alpha/search client with the current model/profile and Pi credentials. Returns text and structured results to JavaScript. Sends the owner's bounded recent conversation tail. Hosted placeholders are never executed; Pi direct tool hooks are not inherited.",
+		parameters: webSearchToolSchema,
+		async invoke(input, ctx) {
+			ctx.signal.throwIfAborted();
+			if (!ctx.pi || !enabled(ctx.pi)) throw new Error("Only an enabled Codex standalone search profile can be nested; hosted search stays direct");
+			const result = await standaloneWebSearch(input as WebSearchInput, ctx.pi, ctx.signal);
+			return { value: { text: result.content.map((part) => part.text).join("\n"), results: result.details.results } };
+		},
+	};
+	registerCodeModeContribution(pi, "codex_web", (ctx) => enabled(ctx) ? [tool] : []);
+}

package/src/index.ts

@@ -1,20 +1,23 @@
 import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
 import { addPackageTool, ensureCodexServices } from "@oai404iao/pi-codex-runtime";
+import { registerCodeModeOwnedTool } from "@oai404iao/pi-codex-runtime/internal/code-mode-contributions";
 import { currentCodexTurn, resolveCodexRequestIdentity } from "@oai404iao/pi-codex-runtime/internal/codex-wire-identity";
 import { createWebSearchToolDefinition } from "./tools/web-search.js";
 import { createWebSearchCapture } from "./tools/web-search/capture.js";
 import { registerWebSearchActivityRenderer } from "./tools/web-search/render.js";
+import { registerSearchContribution } from "./code-mode-adapter.js";
 
 export default function codexWebSearch(pi: ExtensionAPI): void {
 	const broker = ensureCodexServices(pi);
 	if (!broker.claim("package:web-search")) return;
+	registerSearchContribution(pi);
 	broker.addPresentation("web_search", {
 		clear() {}, flush() {}, scheduleFlush() {},
 		registerRenderers: () => registerWebSearchActivityRenderer(pi),
 		streamEffects: () => ({ createEventObserver: createWebSearchCapture }),
 	});
 	addPackageTool(broker, "web_search", () => {
-		pi.registerTool(createWebSearchToolDefinition({
+		registerCodeModeOwnedTool(pi, createWebSearchToolDefinition({
 			getCurrentTurnId: sessionId => currentCodexTurn(sessionId)?.turnId,
 			getRequestIdentity: sessionId => resolveCodexRequestIdentity(sessionId, undefined, "turn"),
 			hasProviderRuntime: () => broker.coreEnabled,

package/src/tools/web-search.ts

@@ -241,6 +241,7 @@ export async function standaloneWebSearch(
 	signal?: AbortSignal,
 	invocation: StandaloneWebSearchInvocation = {},
 ) {
+	signal?.throwIfAborted();
 	const model = ctx.model;
 	if (!model || !ctx.modelRegistry) throw new Error("No active model is available for standalone web search.");
 	const settings = loadModelSettings(model, ctx.cwd);
@@ -257,15 +258,6 @@ export async function standaloneWebSearch(
 	if (input.image_query?.length && !contentTypes.includes("image")) {
 		throw new Error("Image search is disabled by the current model profile.");
 	}
-	const auth = await ctx.modelRegistry.getApiKeyAndHeaders(model);
-	if (!auth.ok) throw new Error(auth.error);
-	if (!hasCodexRequestAuth({
-		modelHeaders: model.headers,
-		auth: { apiKey: auth.apiKey, headers: auth.headers },
-	})) {
-		throw new Error(`No request authentication for provider: ${model.provider}`);
-	}
-
 	const url = resolveCodexApiEndpoint(model.baseUrl, settings.apiKeyMode, "alpha/search");
 	const piSessionId = ctx.sessionManager?.getSessionId();
 	const identity = invocation.identity
@@ -293,6 +285,14 @@ export async function standaloneWebSearch(
 				model: model.id,
 			})
 		: undefined;
+	// A nested cell may survive a user-turn rollover while auth is pending.
+	// Identity and visible history must describe this invocation, not that later turn.
+	const auth = await ctx.modelRegistry.getApiKeyAndHeaders(model);
+	signal?.throwIfAborted();
+	if (!auth.ok) throw new Error(auth.error);
+	if (!hasCodexRequestAuth({ modelHeaders: model.headers, auth: { apiKey: auth.apiKey, headers: auth.headers } })) {
+		throw new Error(`No request authentication for provider: ${model.provider}`);
+	}
 	const response = await fetch(url, {
 		method: "POST",
 		headers: buildCodexJsonHeaders({
@@ -322,6 +322,7 @@ export async function standaloneWebSearch(
 		throw new Error(`Standalone web search failed: HTTP ${response.status}: ${await response.text()}`);
 	}
 	const result = await response.json() as StandaloneSearchResponse;
+	signal?.throwIfAborted();
 	if (typeof result.output !== "string" || !result.output.trim()) {
 		throw new Error("Standalone web search returned no output.");
 	}