@selesai/code 0.13.15 → 0.13.16

package/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 All notable changes to `@selesai/code` will be documented in this file.
 
+## [0.13.16] - 2026-09-06
+
+### Fixed
+- **Capability gateway inline-skill routing.** `$skill` references expanded by inline skills are no longer re-recommended through `capability_skill_show`; embedded `<skill>` blocks are excluded from prompt routing.
+- **TokenIn search backend URL.** A custom `baseUrl` ending in `/v1` no longer produces a doubled `/v1/v1/search/…` path, and accounts with a blank `apiKey` are now treated as unconfigured instead of triggering doomed requests.
+- **TokenIn search fallback typing.** Search fallback metadata can now reference any provider, matching actual failover behavior.
+
 ## [0.13.15] - 2026-09-06
 
 ### Added

package/dist/extensions/capability-gateway/index.ts

@@ -62,6 +62,17 @@ function catalogEntries(pi: ExtensionAPI): CatalogEntry[] {
 	return [...tools, ...skills];
 }
 
+const EMBEDDED_SKILL_BLOCK = /<skill\s+name="([^"]+)"[^>]*>[\s\S]*?<\/skill>/gi;
+
+function routePrompt(prompt: string, entries: CatalogEntry[]): ReturnType<typeof route> {
+	const loadedSkills = new Set([...prompt.matchAll(EMBEDDED_SKILL_BLOCK)].map((match) => match[1]!.toLowerCase()));
+	const query = prompt.replace(EMBEDDED_SKILL_BLOCK, " ");
+	return route(
+		query,
+		entries.filter((entry) => entry.kind !== "skill" || !loadedSkills.has(entry.name.toLowerCase())),
+	);
+}
+
 function formatCatalog(entries: CatalogEntry[]): string {
 	const lines = entries.map(
 		(entry) =>
@@ -253,7 +264,7 @@ export default function capabilityGatewayExtension(pi: ExtensionAPI): void {
 	// ambiguity hints, or nothing for unrelated prompts.
 	// ------------------------------------------------------------------
 	pi.on("before_agent_start", (event) => {
-		const result = route(event.prompt, catalogEntries(pi));
+		const result = routePrompt(event.prompt, catalogEntries(pi));
 		if (result.action === "none") return undefined;
 		if (result.action === "activate" && result.entry) {
 			const active = pi.getActiveTools();

package/dist/extensions/capability-gateway/integration.test.ts

@@ -16,6 +16,7 @@ import {
 const EXTENSIONS_DIR = fileURLToPath(new URL("../../", import.meta.url));
 const GATEWAY_DIR = fileURLToPath(new URL(".", import.meta.url));
 const GREP_APP_DIR = fileURLToPath(new URL("../grep-app", import.meta.url));
+const INLINE_SKILLS_FILE = fileURLToPath(new URL("../inline-skills.ts", import.meta.url));
 
 interface Harness {
 	session: AgentSession;
@@ -212,4 +213,26 @@ describe("capability gateway integration", () => {
 		expect(result?.messages?.[0]?.content).toContain("research");
 		expect(h.session.systemPrompt).not.toContain("Research instructions body.");
 	});
+
+	it("does not recommend capability_skill_show for an inline-loaded $skill", async () => {
+		const h = await createGatewaySession({
+			enabled: true,
+			withSkill: true,
+			extensions: [GATEWAY_DIR, GREP_APP_DIR, INLINE_SKILLS_FILE],
+		});
+		harnesses.push(h);
+		const runner = h.session.extensionRunner;
+		const input = await runner.emitInput("Use $research now", undefined, "interactive", undefined);
+		expect(input.action).toBe("transform");
+		if (input.action !== "transform") throw new Error("inline skill was not expanded");
+		expect(input.text).toContain("Research instructions body.");
+
+		const result = await runner.emitBeforeAgentStart(
+			input.text,
+			undefined,
+			h.session.systemPrompt,
+			{ cwd: process.cwd() } as never,
+		);
+		expect(result).toBeUndefined();
+	});
 });

package/dist/extensions/pi-web-agent/src/backends/config.ts

@@ -1,4 +1,5 @@
 import type { FanoutMode, SearchProviderName } from '../types.js';
+import { hasActiveTokenInAccount } from './settings-reader.js';
 
 export type SearxngOptions = {
   categories?: string[];

package/dist/extensions/pi-web-agent/src/backends/settings-reader.ts

@@ -19,9 +19,11 @@ export function hasActiveTokenInAccount(authPath: string = join(getAgentDir(), '
 		if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) return false;
 		const auth = parsed as { accounts?: unknown; activeId?: unknown };
 		if (!Array.isArray(auth.accounts) || typeof auth.activeId !== 'string') return false;
-		return auth.accounts.some(
-			(a) => a && typeof a === 'object' && !Array.isArray(a) && (a as { id?: unknown }).id === auth.activeId
-		);
+		return auth.accounts.some((a) => {
+			if (!a || typeof a !== 'object' || Array.isArray(a)) return false;
+			const account = a as { id?: unknown; apiKey?: unknown };
+			return account.id === auth.activeId && typeof account.apiKey === 'string' && account.apiKey.trim() !== '';
+		});
 	} catch {
 		return false;
 	}

package/dist/extensions/pi-web-agent/src/search/tokenin.ts

@@ -27,7 +27,9 @@ export function readActiveTokenInAccount(
     if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) return undefined;
     const auth = parsed as TokenInAuth;
     if (!Array.isArray(auth.accounts) || typeof auth.activeId !== 'string') return undefined;
-    return auth.accounts.find((a) => a && typeof a === 'object' && a.id === auth.activeId && typeof a.apiKey === 'string');
+    return auth.accounts.find(
+      (a) => a && typeof a === 'object' && a.id === auth.activeId && typeof a.apiKey === 'string' && a.apiKey.trim() !== ''
+    );
   } catch {
     return undefined;
   }
@@ -82,8 +84,10 @@ export function createTokenInSearchTool({
       });
     }
 
-    const baseUrl = (account.baseUrl ?? TOKENIN_DEFAULT_BASE_URL).replace(/\/+$/, '');
-    const url = `${baseUrl}/v1/search/${TOKENIN_SEARCH_TOOL_NAME}`;
+    const rootUrl = (account.baseUrl ?? TOKENIN_DEFAULT_BASE_URL)
+      .replace(/\/+$/, '')
+      .replace(/\/v1$/, '');
+    const url = `${rootUrl}/v1/search/${TOKENIN_SEARCH_TOOL_NAME}`;
 
     try {
       const response = await fetchImpl(url, {

package/dist/extensions/pi-web-agent/src/types.ts

@@ -34,7 +34,7 @@ export type ToolError = {
 export type SearchMetadata = {
   backend: SearchProviderName;
   cacheHit: boolean;
-  fallbackFrom?: Exclude<SearchProviderName, 'tokenin'>;
+  fallbackFrom?: SearchProviderName;
   fallbackReason?: string;
   fanout?: FanoutMetadata;
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@selesai/code",
-  "version": "0.13.15",
+  "version": "0.13.16",
   "description": "Maintained, extension-first Pi coding agent with built-in workflows, subagents, web research, questions, skills, and an enhanced terminal UI.",
   "type": "module",
   "repository": {