@schlessera/brain-ui-server 0.24.0 → 0.26.0

package/dist/routes/web-search.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Web-search configuration for the pi backend's `pi-web-access` extension —
+ * the Settings UI's way to pick a search provider and store its API key
+ * without a shell on the host.
+ *
+ * The extension reads `web-search.json` from the pi config dir; these routes
+ * read-modify-write that same file, touching ONLY the managed fields (the
+ * `provider` selector and the per-provider `<name>ApiKey` entries) so any
+ * hand-edited config beside them survives.
+ *
+ * Defaults are deliberate: no file (or `provider: "auto"`) means the
+ * extension's automatic chain, which starts with Exa's keyless MCP endpoint —
+ * free, throttled. Adding an `exaApiKey` lifts the throttle; picking another
+ * provider routes searches there instead.
+ *
+ * Key VALUES never leave the server: GET reports only which providers have a
+ * key configured. Mount BEHIND the /api auth guard.
+ */
+import { Hono } from "hono";
+import type { AgentConfig } from "../config/env.js";
+/** One selectable provider, as the Settings UI renders it. */
+export interface WebSearchProviderView {
+    id: string;
+    label: string;
+    /** Whether this provider accepts an API key ("auto" does not). */
+    hasKeyField: boolean;
+    /** True when a key for it is present in the config file. */
+    keyConfigured: boolean;
+    /** True when the provider works without any key (Exa's free MCP tier). */
+    keyless: boolean;
+}
+export interface WebSearchConfigView {
+    /** False when the pi backend is not configured — the client hides the card. */
+    configured: boolean;
+    /** The active provider selection ("auto" when unset). */
+    provider: string;
+    providers: WebSearchProviderView[];
+}
+export interface WebSearchRoutesDeps {
+    agent: AgentConfig;
+    /** Test seam — overrides the config file location. */
+    configPath?: string;
+    /** Test seam — forwarded to loadBackendModule. */
+    importer?: (specifier: string) => Promise<unknown>;
+}
+export declare function createWebSearchRoutes(deps: WebSearchRoutesDeps): Hono;
+//# sourceMappingURL=web-search.d.ts.map

package/dist/routes/web-search.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-search.d.ts","sourceRoot":"","sources":["../../src/routes/web-search.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAIpD,8DAA8D;AAC9D,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,WAAW,EAAE,OAAO,CAAC;IACrB,4DAA4D;IAC5D,aAAa,EAAE,OAAO,CAAC;IACvB,0EAA0E;IAC1E,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,mBAAmB;IAClC,+EAA+E;IAC/E,UAAU,EAAE,OAAO,CAAC;IACpB,yDAAyD;IACzD,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,qBAAqB,EAAE,CAAC;CACpC;AA4BD,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,WAAW,CAAC;IACnB,sDAAsD;IACtD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kDAAkD;IAClD,QAAQ,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACpD;AA0BD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,mBAAmB,GAAG,IAAI,CAmHrE"}

package/dist/routes/web-search.js

@@ -0,0 +1,167 @@
+/**
+ * Web-search configuration for the pi backend's `pi-web-access` extension —
+ * the Settings UI's way to pick a search provider and store its API key
+ * without a shell on the host.
+ *
+ * The extension reads `web-search.json` from the pi config dir; these routes
+ * read-modify-write that same file, touching ONLY the managed fields (the
+ * `provider` selector and the per-provider `<name>ApiKey` entries) so any
+ * hand-edited config beside them survives.
+ *
+ * Defaults are deliberate: no file (or `provider: "auto"`) means the
+ * extension's automatic chain, which starts with Exa's keyless MCP endpoint —
+ * free, throttled. Adding an `exaApiKey` lifts the throttle; picking another
+ * provider routes searches there instead.
+ *
+ * Key VALUES never leave the server: GET reports only which providers have a
+ * key configured. Mount BEHIND the /api auth guard.
+ */
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "fs";
+import { dirname, join } from "path";
+import { Hono } from "hono";
+import { resolvePiConfigDir } from "../config/env.js";
+import { loadBackendModule } from "../agent/backend.js";
+/**
+ * The providers this surface manages. A curated subset of pi-web-access's
+ * catalog: the ones configurable by a single `<id>ApiKey` field. The
+ * extension itself accepts more (SearXNG endpoints, Ollama, …) — those stay
+ * hand-edited config, deliberately outside this UI.
+ */
+const MANAGED_PROVIDERS = [
+    { id: "auto", label: "Auto — Exa (free) with fallbacks", keyField: null, keyless: true },
+    { id: "exa", label: "Exa", keyField: "exaApiKey", keyless: true },
+    { id: "openai", label: "OpenAI", keyField: "openaiApiKey", keyless: false },
+    { id: "brave", label: "Brave", keyField: "braveApiKey", keyless: false },
+    { id: "tavily", label: "Tavily", keyField: "tavilyApiKey", keyless: false },
+    { id: "perplexity", label: "Perplexity", keyField: "perplexityApiKey", keyless: false },
+    { id: "firecrawl", label: "Firecrawl", keyField: "firecrawlApiKey", keyless: false },
+    { id: "jina", label: "Jina", keyField: "jinaApiKey", keyless: false },
+    { id: "kagi", label: "Kagi", keyField: "kagiApiKey", keyless: false },
+    { id: "gemini", label: "Gemini", keyField: "geminiApiKey", keyless: false },
+];
+const MANAGED_IDS = new Set(MANAGED_PROVIDERS.map((p) => p.id));
+function readConfig(path) {
+    if (!existsSync(path))
+        return {};
+    try {
+        const parsed = JSON.parse(readFileSync(path, "utf-8"));
+        return parsed && typeof parsed === "object" && !Array.isArray(parsed)
+            ? parsed
+            : {};
+    }
+    catch {
+        // Unreadable config: treat as empty for GET; PUT refuses instead of
+        // silently clobbering whatever the user had there.
+        return {};
+    }
+}
+function writeConfig(path, config) {
+    mkdirSync(dirname(path), { recursive: true });
+    // Atomic-enough: temp file + rename, so the extension never reads a torn write.
+    const tmp = `${path}.${process.pid}.tmp`;
+    writeFileSync(tmp, JSON.stringify(config, null, 2) + "\n", { encoding: "utf-8", mode: 0o600 });
+    renameSync(tmp, path);
+}
+export function createWebSearchRoutes(deps) {
+    const { agent } = deps;
+    const configPath = () => deps.configPath ?? join(resolvePiConfigDir(), "web-search.json");
+    const piConfigured = () => Boolean(agent.piProfilesJson) || (agent.backend || "claude") === "pi";
+    function view() {
+        const config = readConfig(configPath());
+        const provider = typeof config.provider === "string" && MANAGED_IDS.has(config.provider)
+            ? config.provider
+            : "auto";
+        return {
+            configured: true,
+            provider,
+            providers: MANAGED_PROVIDERS.map((p) => ({
+                id: p.id,
+                label: p.label,
+                hasKeyField: p.keyField !== null,
+                keyConfigured: p.keyField !== null &&
+                    typeof config[p.keyField] === "string" &&
+                    config[p.keyField].trim() !== "",
+                keyless: p.keyless,
+            })),
+        };
+    }
+    return new Hono()
+        .get("/web-search", (c) => {
+        // Not-configured is a normal state, not an error: the client hides the
+        // whole card (same convention as /pi-auth/providers).
+        if (!piConfigured()) {
+            return c.json({ configured: false, provider: "auto", providers: [] });
+        }
+        return c.json(view());
+    })
+        .put("/web-search", async (c) => {
+        if (!piConfigured()) {
+            return c.json({ error: "The pi backend is not configured." }, 409);
+        }
+        const body = (await c.req.json().catch(() => null));
+        if (!body || typeof body !== "object") {
+            return c.json({ error: "Invalid body." }, 400);
+        }
+        const path = configPath();
+        if (existsSync(path)) {
+            // A config that exists but does not parse must not be clobbered by a
+            // settings save — that would eat hand-written provider config.
+            try {
+                JSON.parse(readFileSync(path, "utf-8"));
+            }
+            catch {
+                return c.json({ error: `${path} exists but is not valid JSON — fix or remove it first.` }, 409);
+            }
+        }
+        const config = readConfig(path);
+        if (body.provider !== undefined) {
+            if (typeof body.provider !== "string" || !MANAGED_IDS.has(body.provider)) {
+                return c.json({ error: "Unknown provider." }, 400);
+            }
+            // "auto" is the extension's default — store it as absence, so an
+            // untouched deployment and a reset-to-default one look identical.
+            if (body.provider === "auto")
+                delete config.provider;
+            else
+                config.provider = body.provider;
+        }
+        if (body.apiKeys !== undefined) {
+            if (!body.apiKeys || typeof body.apiKeys !== "object" || Array.isArray(body.apiKeys)) {
+                return c.json({ error: "apiKeys must be an object." }, 400);
+            }
+            for (const [id, value] of Object.entries(body.apiKeys)) {
+                const spec = MANAGED_PROVIDERS.find((p) => p.id === id);
+                if (!spec || spec.keyField === null) {
+                    return c.json({ error: `Provider "${id}" does not take an API key here.` }, 400);
+                }
+                if (value === null || value === "") {
+                    delete config[spec.keyField];
+                }
+                else if (typeof value === "string") {
+                    const trimmed = value.trim();
+                    if (!trimmed || trimmed.length > 512 || /[\r\n]/.test(trimmed)) {
+                        return c.json({ error: `Invalid API key for "${id}".` }, 400);
+                    }
+                    config[spec.keyField] = trimmed;
+                }
+                else {
+                    return c.json({ error: `Invalid API key for "${id}".` }, 400);
+                }
+            }
+        }
+        writeConfig(path, config);
+        // Extension modules cache their config per process; clearing pi's
+        // extension cache makes NEW sessions re-read web-search.json. Best
+        // effort: on failure the change still lands, it just needs a restart
+        // (or a naturally recycled session) to apply.
+        try {
+            const mod = (await loadBackendModule("pi", deps.importer));
+            await mod.invalidateExtensionCache?.();
+        }
+        catch {
+            /* config written; cache clearing is an optimization */
+        }
+        return c.json(view());
+    });
+}
+//# sourceMappingURL=web-search.js.map

package/dist/routes/web-search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-search.js","sourceRoot":"","sources":["../../src/routes/web-search.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACpF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAsBxD;;;;;GAKG;AACH,MAAM,iBAAiB,GAKlB;IACH,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,kCAAkC,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;IACxF,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE;IACjE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE;IAC3E,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE;IACxE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE;IAC3E,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,kBAAkB,EAAE,OAAO,EAAE,KAAK,EAAE;IACvF,EAAE,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE;IACpF,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE;IACrE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE;IACrE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE;CAC5E,CAAC;AAEF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAYhE,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAY,CAAC;QAClE,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACnE,CAAC,CAAE,MAAqB;YACxB,CAAC,CAAC,EAAE,CAAC;IACT,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;QACpE,mDAAmD;QACnD,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,MAAkB;IACnD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,gFAAgF;IAChF,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/F,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAyB;IAC7D,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IACvB,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,kBAAkB,EAAE,EAAE,iBAAiB,CAAC,CAAC;IAE1F,MAAM,YAAY,GAAG,GAAG,EAAE,CACxB,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC,KAAK,IAAI,CAAC;IAExE,SAAS,IAAI;QACX,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;QACxC,MAAM,QAAQ,GACZ,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC;YACrE,CAAC,CAAC,MAAM,CAAC,QAAQ;YACjB,CAAC,CAAC,MAAM,CAAC;QACb,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,QAAQ;YACR,SAAS,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACvC,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,WAAW,EAAE,CAAC,CAAC,QAAQ,KAAK,IAAI;gBAChC,aAAa,EACX,CAAC,CAAC,QAAQ,KAAK,IAAI;oBACnB,OAAO,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ;oBACrC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAY,CAAC,IAAI,EAAE,KAAK,EAAE;gBAC9C,OAAO,EAAE,CAAC,CAAC,OAAO;aACnB,CAAC,CAAC;SACJ,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,IAAI,EAAE;SACd,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE;QACxB,uEAAuE;QACvE,sDAAsD;QACtD,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACxB,CAAC,CAAC;SACD,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9B,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;YACpB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAG1C,CAAC;QACT,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;QAC1B,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,qEAAqE;YACrE,+DAA+D;YAC/D,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;YAC1C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,GAAG,IAAI,yDAAyD,EAAE,EAC3E,GAAG,CACJ,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAEhC,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;YACD,iEAAiE;YACjE,kEAAkE;YAClE,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM;gBAAE,OAAO,MAAM,CAAC,QAAQ,CAAC;;gBAChD,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QACvC,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrF,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,EAAE,GAAG,CAAC,CAAC;YAC9D,CAAC;YACD,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,OAAqB,CAAC,EAAE,CAAC;gBACrE,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBACxD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;oBACpC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,kCAAkC,EAAE,EAAE,GAAG,CAAC,CAAC;gBACnF,CAAC;gBACD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;oBACnC,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC/B,CAAC;qBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACrC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;oBAC7B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;wBAC/D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;oBAChE,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC;gBAClC,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;gBAChE,CAAC;YACH,CAAC;QACH,CAAC;QAED,WAAW,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAE1B,kEAAkE;QAClE,mEAAmE;QACnE,qEAAqE;QACrE,8CAA8C;QAC9C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,CAAC,MAAM,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,CAExD,CAAC;YACF,MAAM,GAAG,CAAC,wBAAwB,EAAE,EAAE,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,uDAAuD;QACzD,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@schlessera/brain-ui-server",
-  "version": "0.24.0",
+  "version": "0.26.0",
   "description": "brain-kit chat-UI server: Hono app factory, WebSocket turn coordinator, auth (password/passkeys/tailscale/proxy), session catalog, and brain/files/voice routes",
   "license": "MIT",
   "keywords": [
@@ -51,8 +51,8 @@
   "dependencies": {
     "@opentelemetry/api": "^1.9.1",
     "@opentelemetry/api-logs": "0.221.0",
-    "@schlessera/brain-render-template": "0.24.0",
-    "@schlessera/brain-ui-sdk": "0.24.0",
+    "@schlessera/brain-render-template": "0.26.0",
+    "@schlessera/brain-ui-sdk": "0.26.0",
     "@simplewebauthn/server": "^13.3.2",
     "hono": "^4",
     "ignore": "^7.0.5",

package/src/agent/backend.ts

@@ -210,6 +210,12 @@ export interface BackendRegistryOptions {
    * to the Claude roster as declared OpenRouter profiles at runtime.
    */
   getCustomOpenRouterModels?: () => string[];
+  /**
+   * Per-profile reasoning-effort overrides (from the app's settings table),
+   * applied over the pi roster's configured levels at read time — no rebuild
+   * or redeploy needed.
+   */
+  getThinkingOverrides?: () => Record<string, PiThinkingLevel>;
   /**
    * Per-profile billing-mode overrides (from the app's settings table).
    * Consulted LAST: an override wins over both the declared-credential rule
@@ -747,8 +753,9 @@ export function createBackendRegistry(
     const mod = (await loadBackendModule("pi")) as {
       createPiBackend?: (opts: {
         brainPath: string;
-        profiles?: PiProfileInput[];
+        profiles?: PiProfileInput[] | (() => PiProfileInput[]);
         log?: BackendLogFn;
+        confirmBashPatterns?: readonly string[];
       }) => AgentBackend;
     };
     if (typeof mod.createPiBackend !== "function") {
@@ -759,10 +766,26 @@ export function createBackendRegistry(
     // Re-parsed here (assertBackendResolvable already validated at boot) so an
     // injected-registry path without the boot assert still fails loudly.
     const profiles = parsePiProfiles(agent.piProfilesJson, agent.profilesJson);
+    // A FUNCTION, so per-profile thinking overrides from settings are read on
+    // every use (roster listing AND new-session model resolution) — a change
+    // in Settings applies to the next turn without a rebuild.
+    const withOverrides = (): PiProfileInput[] => {
+      const overrides = options.getThinkingOverrides?.() ?? {};
+      return profiles.map((profile) =>
+        overrides[profile.id]
+          ? { ...profile, thinkingLevel: overrides[profile.id] }
+          : profile
+      );
+    };
     return mod.createPiBackend({
       brainPath,
-      ...(profiles.length > 0 ? { profiles } : {}),
+      ...(profiles.length > 0 ? { profiles: withOverrides } : {}),
       ...(backendLog ? { log: backendLog } : {}),
+      // Same shared confirm-pattern config as the Claude backend, so both
+      // backends stop on the same destructive bash shapes.
+      ...(agent.confirmBashPatterns !== null
+        ? { confirmBashPatterns: agent.confirmBashPatterns }
+        : {}),
     });
   }
 

package/src/app.ts

@@ -16,6 +16,7 @@ import { createRenderRoutes, type AppRenderer } from "./routes/render.js";
 import { createProviderRoutes } from "./routes/providers.js";
 import { createModelRoutes } from "./routes/models.js";
 import { createPiAuthRoutes } from "./routes/pi-auth.js";
+import { createWebSearchRoutes } from "./routes/web-search.js";
 import { createGraphRoutes } from "./routes/graph.js";
 import {
   resolveAuthMode,
@@ -39,6 +40,7 @@ import {
   getCustomOpenRouterModels,
   getDefaultModelId,
   getHiddenModelIds,
+  getThinkingOverrides,
 } from "./db/settings.js";
 import { createActivityRuntime } from "./activity/runtime.js";
 import { createModelPricing } from "./pricing/model-pricing.js";
@@ -207,6 +209,7 @@ export function createApp(options: CreateAppOptions = {}): BrainUiApp {
       getHiddenModelIds: () => getHiddenModelIds(db, dbLog),
       getDefaultModelId: () => getDefaultModelId(db, dbLog),
       getCustomOpenRouterModels: () => getCustomOpenRouterModels(db, dbLog),
+      getThinkingOverrides: () => getThinkingOverrides(db, dbLog),
       getBillingOverrides: () => getBillingOverrides(db, dbLog),
       log: observability.logger("agent"),
     });
@@ -353,6 +356,7 @@ export function createApp(options: CreateAppOptions = {}): BrainUiApp {
     createModelRoutes({ registry, db, pricing, log: observability.logger("models") })
   );
   app.route("/api", createPiAuthRoutes({ agent: config.agent }));
+  app.route("/api", createWebSearchRoutes({ agent: config.agent }));
   app.route(
     "/api",
     createGraphRoutes({ brainRoot: config.brainPath, log: observability.logger("graph") })

package/src/config/env.ts

@@ -60,10 +60,26 @@ export const ENV_VARS: readonly EnvVarDescriptor[] = [
   },
   {
     name: "HOME",
-    description: "Fallback anchor for the BRAIN_PATH default only.",
+    description:
+      "Fallback anchor for the BRAIN_PATH default and the pi config dir (~/.pi).",
     default: "/root",
     required: false,
   },
+  {
+    name: "PI_CODING_AGENT_DIR",
+    description:
+      "pi config dir override — where the web-search settings write the " +
+      "pi-web-access extension's web-search.json (same precedence the " +
+      "extension itself uses).",
+    default: "$XDG_CONFIG_HOME/pi, else $HOME/.pi",
+    required: false,
+  },
+  {
+    name: "XDG_CONFIG_HOME",
+    description: "Second-precedence anchor for the pi config dir ($XDG_CONFIG_HOME/pi).",
+    default: null,
+    required: false,
+  },
   {
     name: "DB_PATH",
     description: "SQLite file for the UI's own database (sessions, passkeys, settings).",
@@ -624,3 +640,15 @@ export function resolveServerConfig(env: EnvRecord = process.env): ServerConfig
 export function subprocessEnv(extra: Record<string, string> = {}): EnvRecord {
   return { ...process.env, ...extra };
 }
+
+/**
+ * The pi config directory, resolved with EXACTLY the precedence pi-web-access
+ * uses for its `web-search.json` (PI_CODING_AGENT_DIR, then XDG_CONFIG_HOME/pi,
+ * then ~/.pi) — the settings routes write the file the extension reads, so
+ * the two resolutions must never diverge.
+ */
+export function resolvePiConfigDir(env: EnvRecord = process.env): string {
+  if (env.PI_CODING_AGENT_DIR) return env.PI_CODING_AGENT_DIR;
+  if (env.XDG_CONFIG_HOME) return join(env.XDG_CONFIG_HOME, "pi");
+  return join(env.HOME || "/root", ".pi");
+}

package/src/db/settings.ts

@@ -8,12 +8,18 @@
 
 import type { Logger } from "@opentelemetry/api-logs";
 import type { Database } from "bun:sqlite";
-import { isBillingMode, type BillingMode } from "@schlessera/brain-ui-sdk/protocol";
+import {
+  isBillingMode,
+  isThinkingLevel,
+  type BillingMode,
+  type ThinkingLevel,
+} from "@schlessera/brain-ui-sdk/protocol";
 
 const HIDDEN_MODELS_KEY = "models.hidden";
 const BILLING_OVERRIDES_KEY = "models.billing";
 const DEFAULT_MODEL_KEY = "models.default";
 const CUSTOM_OPENROUTER_KEY = "models.customOpenRouter";
+const THINKING_OVERRIDES_KEY = "models.thinking";
 const DETAIL_RETENTION_KEY = "activity.retention.detailDays";
 const DETAIL_RETENTION_DEFAULT_DAYS = 7;
 
@@ -119,6 +125,39 @@ export function setCustomOpenRouterModels(db: Database, models: string[]): void
   setSetting(db, CUSTOM_OPENROUTER_KEY, unique);
 }
 
+/**
+ * Per-profile reasoning-effort overrides: profile id → forced level. A
+ * profile absent from the record keeps its configured default. Invalid
+ * levels are dropped on read (same degradation discipline as billing).
+ */
+export function getThinkingOverrides(
+  db: Database,
+  log?: Logger
+): Record<string, ThinkingLevel> {
+  const value = getSetting<unknown>(db, THINKING_OVERRIDES_KEY, {}, log);
+  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+    return Object.create(null);
+  }
+  const overrides: Record<string, ThinkingLevel> = Object.create(null);
+  for (const [profileId, level] of Object.entries(value)) {
+    if (isThinkingLevel(level)) overrides[profileId] = level;
+  }
+  return overrides;
+}
+
+/** Replace the override record (the client always sends the full record, not a delta). */
+export function setThinkingOverrides(
+  db: Database,
+  overrides: Record<string, ThinkingLevel>
+): void {
+  const clean = Object.fromEntries(
+    Object.entries(overrides).filter(
+      ([profileId, level]) => profileId && isThinkingLevel(level)
+    )
+  );
+  setSetting(db, THINKING_OVERRIDES_KEY, clean);
+}
+
 /** Minimum days a finished run keeps its detail (spans/events) before the
  *  digest-covered prune may take it. 0 is valid (prune as soon as covered);
  *  anything non-numeric or negative degrades to the default. */

package/src/routes/models.ts

@@ -10,9 +10,11 @@ import { Hono } from "hono";
 import type { Database } from "bun:sqlite";
 import {
   isBillingMode,
+  isThinkingLevel,
   type BillingMode,
   type ModelCatalogEntry,
   type ModelCatalogResponse,
+  type ThinkingLevel,
 } from "@schlessera/brain-ui-sdk";
 import type { BackendRegistry } from "../agent/backend.js";
 import type { ModelPricingState } from "../pricing/model-pricing.js";
@@ -21,10 +23,12 @@ import {
   getCustomOpenRouterModels,
   getDefaultModelId,
   getHiddenModelIds,
+  getThinkingOverrides,
   setBillingOverrides,
   setCustomOpenRouterModels,
   setDefaultModelId,
   setHiddenModelIds,
+  setThinkingOverrides,
 } from "../db/settings.js";
 
 export function createModelRoutes(deps: {
@@ -41,6 +45,7 @@ export function createModelRoutes(deps: {
   const source = await registry.getModelSource();
   const hidden = new Set(getHiddenModelIds(db));
   const overrides = getBillingOverrides(db);
+  const thinking = getThinkingOverrides(db);
   // `billingMode` already rides each provider entry (the registry applies the
   // override last); the catalog additionally tags WHICH rows carry an explicit
   // override, so the settings screen can render auto vs forced.
@@ -50,6 +55,10 @@ export function createModelRoutes(deps: {
     ...profile,
     hidden: hidden.has(profile.id),
     ...(overrides[profile.id] ? { billingOverride: overrides[profile.id] } : {}),
+    // `thinkingLevel` on the profile is already the EFFECTIVE level (the
+    // registry applies overrides at read time); this tags which rows carry
+    // an explicit user choice, so the UI can render default vs forced.
+    ...(thinking[profile.id] ? { thinkingOverride: thinking[profile.id] } : {}),
   }));
 
   const state = source?.state();
@@ -176,6 +185,39 @@ export function createModelRoutes(deps: {
     return c.json(await buildCatalog());
   })
 
+  .put("/models/thinking", async (c) => {
+    const body = (await c.req.json().catch(() => null)) as unknown;
+    const thinking = (body as { thinking?: unknown } | null)?.thinking;
+    if (
+      typeof thinking !== "object" ||
+      thinking === null ||
+      Array.isArray(thinking) ||
+      Object.values(thinking).some((level) => !isThinkingLevel(level))
+    ) {
+      return c.json(
+        { error: "thinking must map profile ids to a reasoning-effort level" },
+        400
+      );
+    }
+    // Only rows that actually take an effort level accept an override — a
+    // stray id would be stored dead weight and mislead the settings UI.
+    const known = await registry.listAllProviders({ includeHidden: true });
+    const supported = new Set(
+      known.filter((profile) => profile.thinkingLevel).map((profile) => profile.id)
+    );
+    const stray = Object.keys(thinking).find((id) => !supported.has(id));
+    if (stray !== undefined) {
+      return c.json(
+        { error: `Profile "${stray}" does not take a reasoning-effort level.` },
+        400
+      );
+    }
+
+    setThinkingOverrides(db, thinking as Record<string, ThinkingLevel>);
+    registry.invalidateProfiles();
+    return c.json(await buildCatalog());
+  })
+
   .put("/models/billing", async (c) => {
     const body = (await c.req.json().catch(() => null)) as unknown;
     const billing = (body as { billing?: unknown } | null)?.billing;