@underactive/pi-topping-web-tools 0.2.2 → 0.2.3

package/CHANGELOG.md

@@ -2,6 +2,17 @@
 
 ## [Unreleased]
 
+## [0.2.3] - 2026-09-20
+
+### Changed
+
+- Bumped the pinned `@earendil-works/pi-ai`, `@earendil-works/pi-coding-agent`, and `@earendil-works/pi-tui` devDependencies from 0.82.1 to 0.86.0 so `npm run typecheck` matches the 0.86.0 runtime API.
+
+### Fixed
+
+- `web_browser`, `pdf_extract`: tool result `details` no longer carry undefined-valued properties, keeping them JSON-compatible as pi 0.86.0's `ToolResultMessage.details` requires. `web_browser` omits `statusCode` for same-document navigations; `pdf_extract` omits `firstPage`/`lastPage` for a zero-page PDF and no longer prints "pages undefined-undefined" in its no-text-layer message.
+- `pdf_extract`: strip `</untrusted-content` fence breaks case-insensitively so mixed-case closing tags cannot bypass sanitization.
+
 ## [0.2.2] - 2026-09-02
 
 ### Added

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@underactive/pi-topping-web-tools",
-	"version": "0.2.2",
+	"version": "0.2.3",
 	"description": "Pi extensions for the web: fetch_markdown (URL to markdown, cached, keyless), pdf_extract (PDF text extraction) and web_browser (headless Playwright automation), sharing a preapproved-host allowlist.",
 	"keywords": ["pi-package", "pi-extension"],
 	"license": "MIT",
@@ -53,9 +53,9 @@
 		"typebox": "*"
 	},
 	"devDependencies": {
-		"@earendil-works/pi-ai": "0.82.1",
-		"@earendil-works/pi-coding-agent": "0.82.1",
-		"@earendil-works/pi-tui": "0.82.1",
+		"@earendil-works/pi-ai": "0.86.0",
+		"@earendil-works/pi-coding-agent": "0.86.0",
+		"@earendil-works/pi-tui": "0.86.0",
 		"@types/node": "^24.0.0",
 		"@types/turndown": "^5.0.5",
 		"typebox": "^1.3.3",

package/src/pdf-extract.ts

@@ -48,10 +48,6 @@ export function clearPdfExtractCache(): void {
 
 const _activeFetches = new Set<AbortController>();
 
-export function _activeFetchCountForTests(): number {
-	return _activeFetches.size;
-}
-
 export function _cleanup(): void {
 	PDF_CACHE.clear();
 	for (const controller of _activeFetches) {
@@ -342,12 +338,14 @@ Usage notes:
 			.join("\n\n");
 
 		const hasText = trimmed.some((text) => text.length > 0);
+		const range =
+			selected.length > 0 ? { firstPage: selected[0], lastPage: selected[selected.length - 1] } : undefined;
 		const baseDetails = {
 			source,
 			totalPages: loaded.totalPages,
 			pageCount: selected.length,
-			firstPage: selected[0],
-			lastPage: selected[selected.length - 1],
+			// Empty only for a zero-page PDF; omit the keys rather than storing undefined.
+			...(range ?? {}),
 			bytes: loaded.bytes,
 			durationMs: Date.now() - start,
 			cached: loaded.cached,
@@ -358,7 +356,9 @@ Usage notes:
 				content: [
 					{
 						type: "text" as const,
-						text: `No extractable text layer found in ${source} (pages ${baseDetails.firstPage}-${baseDetails.lastPage} of ${loaded.totalPages}). The PDF is likely scanned or image-only. This tool does not perform OCR.`,
+						text: `No extractable text layer found in ${source}${
+							range ? ` (pages ${range.firstPage}-${range.lastPage} of ${loaded.totalPages})` : ` (0 of ${loaded.totalPages} page(s))`
+						}. The PDF is likely scanned or image-only. This tool does not perform OCR.`,
 					},
 				],
 				details: baseDetails satisfies PdfExtractDetails,
@@ -367,7 +367,7 @@ Usage notes:
 
 		const offset = Math.max(0, Math.floor(params.offset ?? 0));
 		const slice = sliceContent(body, offset);
-		const sanitizedText = slice.text.replaceAll("</untrusted-content", "");
+		const sanitizedText = slice.text.replaceAll(/<\/untrusted-content/gi, "");
 		const safeSource = source.replaceAll('"', "%22");
 
 		return {

package/src/web-browser/index.ts

@@ -516,7 +516,8 @@ export default function (pi: ExtensionAPI) {
 								action,
 								url: result.url,
 								title: result.title,
-								statusCode: result.statusCode,
+								// A same-document navigation has no response; omit the key rather than storing undefined.
+								...(result.statusCode !== undefined ? { statusCode: result.statusCode } : {}),
 								bytes: Buffer.byteLength(text),
 							} satisfies WebBrowserDetails,
 						};