pi-ui-extend 1.0.16 → 1.0.19

package/dist/schemas/pi-tools-suite-schema.d.ts

@@ -122,6 +122,7 @@ export declare const PiToolsSuiteConfigSchema: Type.TObject<{
             fallbackModels: Type.TOptional<Type.TArray<Type.TString>>;
             thinking: Type.TOptional<Type.TString>;
             tools: Type.TOptional<Type.TArray<Type.TString>>;
+            isolatedSkills: Type.TOptional<Type.TArray<Type.TString>>;
             extraArgs: Type.TOptional<Type.TArray<Type.TString>>;
             promptAppend: Type.TOptional<Type.TString>;
             promptOverride: Type.TOptional<Type.TString>;

package/dist/schemas/pi-tools-suite-schema.js

@@ -153,6 +153,7 @@ const SubagentTypeConfig = Type.Object({
     fallbackModels: Type.Optional(Type.Array(Type.String(), { description: "Ordered model fallbacks." })),
     thinking: Type.Optional(Type.String({ description: "Thinking level." })),
     tools: Type.Optional(Type.Array(Type.String(), { description: "Enabled tools for this type." })),
+    isolatedSkills: Type.Optional(Type.Array(Type.String(), { description: "Explicit skill files loaded after disabling normal skill discovery for this type." })),
     extraArgs: Type.Optional(Type.Array(Type.String(), { description: "Extra CLI arguments." })),
     promptAppend: Type.Optional(Type.String({ description: "Extra prompt text appended after generated prompt." })),
     promptOverride: Type.Optional(Type.String({ description: "Full prompt replacement." })),

package/external/pi-tools-suite/README.md

@@ -14,7 +14,7 @@ This package keeps shared Pi tools as ordinary source folders under `src/` and r
 - `src/repo-discovery` — `/idx-init`, `/idx-update`, and indexed-only `repo_architecture` / `repo_structure` / `repo_ast` / `repo_search` / `repo_explain` / `repo_deps`; tools register only when the launch project has `.indexer-cli`
 - `src/antigravity-auth` — `antigravity` custom provider with Google Antigravity OAuth login, startup account list, auth.json-only runtime account loading, `/antigravity-add-account` OAuth append into rotation, `/antigravity-account` status display, account rotation/failover, Antigravity plus Gemini CLI model registration, and streaming through the Cloud Code Assist unified gateway
 - `src/opencode-import` — `/opencode-import` for bounded migration of supported OpenCode OpenAI/Codex, GitHub Copilot, Z.ai, and Antigravity credentials into Pi; existing entries are preserved unless `--force` is passed
-- `src/todo` — `todo` tool, `/todos`, `/todos-persist`, and `/todos-scope`; supports parent/subtask hierarchy, blockers, ready-task filtering, deferred out-of-scope items, batch operations, JSON/Markdown import/export, automatic clearing when all visible todos are completed, and optional project persistence via `/todos persist on` or `/todos-persist on`; localization/i18n has been removed
+- `src/todo` — `todo` tool, `/todos`, `/todos-persist`, `/todos-scope`, and `/todos-clear` (also `/todos clear`); supports parent/subtask hierarchy, blockers, ready-task filtering, deferred out-of-scope items, batch operations, JSON/Markdown import/export, automatic clearing when all visible todos are completed, and optional project persistence via `/todos persist on` or `/todos-persist on`; localization/i18n has been removed
 - `src/model-tools` — model-specific tool aliases such as Claude/GLM-style `Read` / `Edit` / `Write` / `Bash` / `Grep` / `Glob` / `LS`, GPT/Codex-style `shell`, and model-gated `apply_patch`
 - `src/usage` — `/usage` command and startup hint for read-only AI quota checks across OpenAI, Zhipu AI, Z.ai, and Google Antigravity, including Antigravity quota by model
 - `src/web-search` — `web_search` and `web_fetch` tools migrated from `@ollama/pi-web-search`; uses local Ollama by default or the official Ollama cloud API when an API key is configured, supports Tavily Search/Extract fallback, provides `/web-credentials` for secure user-level key storage, honors `OLLAMA_HOST`, supports request timeouts via `timeout_ms` / `PI_WEB_SEARCH_TIMEOUT_MS`, and reports provider-specific errors
@@ -243,7 +243,60 @@ Project-local overrides can be added in `.pi/pi-tools-suite.jsonc`; pi-tools-sui
 
 Sub-agent model routing normally follows task overrides, subagent type config, then `ASYNC_SUBAGENTS_MODEL` / `PI_SUBAGENTS_MODEL` fallbacks. Set `ASYNC_SUBAGENTS_FORCE_CURRENT_MODEL=1` (or `PI_SUBAGENTS_FORCE_CURRENT_MODEL=1`) to ignore task/config/env model choices and launch every sub-agent with the current parent session model. When this flag is enabled, any `--model` entries in sub-agent extra args are stripped so they cannot override the current model.
 
-For an oh-my-openagent-style workflow, run `/ultrawork` or `/ulw` to ask the parent agent to split broad work into configured async-subagents roles (`quick`, `scan`, `research`, `docs`, `frontend`, `implement`, `tests`, `review`, `deep`, `oracle`). Set `ULTRAWORK=1` before launching Pi to apply that compact routing prompt to normal non-slash user inputs automatically. Set `ULTRAWORK_AUTO=1` to ask the lightweight router model to classify only the first normal user input on non-GPT parent models: clear broad/parallel work is transformed into ultrawork, vague potentially-complex work gets a soft delegation hint, and narrow work is left unchanged. GPT-like parent models skip only this automatic transform; they can still use `/ultrawork` and `subagents` normally. `frontend` is for UI/UX, styling, layout, responsive behavior, and visual component polish; `review` covers security/performance/audit tracks; `implement` covers refactors; `deep` covers debugging/root-cause; `oracle` is for sparse cross-provider second opinions on high-stakes uncertainty. Run `/hyperplan` to pressure-test a plan before implementation.
+For an oh-my-openagent-style workflow, run `/ultrawork` or `/ulw` to ask the parent agent to split broad work into configured async-subagents roles (`quick`, `scan`, `research`, `docs`, `frontend`, `browser-qa`, `implement`, `tests`, `review`, `deep`, `oracle`). Set `ULTRAWORK=1` before launching Pi to apply that compact routing prompt to normal non-slash user inputs automatically. Set `ULTRAWORK_AUTO=1` to ask the lightweight router model to classify only the first normal user input on non-GPT parent models: clear broad/parallel work is transformed into ultrawork, vague potentially-complex work gets a soft delegation hint, and narrow work is left unchanged. GPT-like parent models skip only this automatic transform; they can still use `/ultrawork` and `subagents` normally. `frontend` is for UI/UX, styling, layout, responsive behavior, and visual component polish; `browser-qa` reproduces browser bugs and proves fixes with deterministic assertions plus screenshot/video/trace evidence; `review` covers security/performance/audit tracks; `implement` covers refactors; `deep` covers debugging/root-cause; `oracle` is for sparse cross-provider second opinions on high-stakes uncertainty. Run `/hyperplan` to pressure-test a plan before implementation.
+
+### Private browser QA and project auth
+
+The built-in `browser-qa` role runs on `antigravity/gemini-3-flash-preview`, with
+`openai-codex/gpt-5.4-mini` as its fallback. Its browser workflow is an explicit
+private skill under `src/async-subagents/private-skills/`, outside normal Pi skill
+discovery. The role's first-class `isolatedSkills` setting launches the child with
+`--no-skills` plus only that skill, so parent and ordinary sub-agent sessions do
+not discover it.
+
+Keep named dev/staging auth profiles in project `.pi/qa_auth.jsonc` (there is no
+`/qa-auth` command). The private runner supports `form`, `cookie`, `localStorage`,
+`sessionStorage`, `bearer`, and existing Playwright `storageState` auth. Every
+profile must declare exact `allowedOrigins`; select the profile id explicitly when
+spawning QA. On POSIX, keep the config at mode `0600`. During a run those origins
+also form the fail-closed HTTP(S)/WebSocket allowlist and service workers are
+blocked. Example:
+
+```jsonc
+{
+  "profiles": {
+    "staging-admin": {
+      "description": "Staging administrator",
+      "traits": ["role:admin", "plan:enterprise"],
+      "baseUrl": "https://staging.example.test",
+      "allowedOrigins": ["https://staging.example.test"],
+      "auth": {
+        "type": "form",
+        "loginUrl": "https://staging.example.test/login",
+        "fields": [
+          { "selector": "input[name=email]", "value": "admin@example.test" },
+          { "selector": "input[name=password]", "value": "replace-me" }
+        ],
+        "submitSelector": "button[type=submit]",
+        "success": { "selector": "[data-testid=user-menu]" }
+      }
+    }
+  }
+}
+```
+
+Do not place credential values in prompts, QA flows, shell arguments, reports,
+or evidence. The helper reads JSONC internally, emits only redacted statuses, and
+caches generated storage state under `.pi/qa-auth-state`. Evidence is isolated by
+run/profile under `.pi/qa-runs`; trace archives have network records and non-image
+resources removed, then known configured/runtime credential values are redacted
+and verified before the trace is retained. Missing, ambiguous, rejected, or
+expired auth returns `QA_PROFILE_REQUIRED` or `QA_AUTH_UPDATE_REQUIRED`, naming
+only the profile/file/reason needed for the parent to ask the user for an update
+and rerun. See
+`src/async-subagents/private-skills/browser-qa/references/qa-auth.example.jsonc`
+for complete profile shapes and `references/qa-flow.example.jsonc` beside it for
+the declarative, non-executable QA action/assertion format.
 
 Async-subagents also injects a lightweight oh-my-openagent-style system-prompt strategy by model: non-GPT parents get `parallel-first`, an orchestration-first hint that favors ultrawork/subagents for broad work, while GPT-like parents get `deep-work`, a direct deep-worker hint that uses subagents only when clearly useful. Explicit custom system prompts (`--system-prompt`, `SYSTEM.md`, custom templates) are respected and skip this injection by default. Disable it with `PI_AGENT_STRATEGY=off`; force a strategy with `PI_AGENT_STRATEGY=parallel-first` or `PI_AGENT_STRATEGY=deep-work`; set `PI_AGENT_STRATEGY_WITH_CUSTOM_PROMPT=1` to append it even when a custom prompt is present.
 

package/external/pi-tools-suite/docs/browser-qa-subagent.md

@@ -0,0 +1,81 @@
+# Browser QA sub-agent specification
+
+## Goal
+
+Provide a cheap, fast `browser-qa` async-subagent that reproduces browser bugs
+and proves fixes with deterministic assertions plus screenshot, video, and trace
+evidence. The role uses `antigravity/gemini-3-flash-preview`, falling back to
+`openai-codex/gpt-5.4-mini`.
+
+## Private skill isolation
+
+- The browser QA skill lives under `src/async-subagents/private-skills/`, outside
+  Pi's normal skill discovery roots.
+- Sub-agent processes disable normal extension discovery, then always load the
+  suite's model-tools and Antigravity provider extensions explicitly, regardless
+  of the selected model. This keeps the process isolated without making any
+  Antigravity-backed role unavailable.
+- A type profile may declare `isolatedSkills`. Spawning that profile adds
+  `--no-skills` followed by one explicit `--skill` per configured path.
+- Other sub-agent profiles and the parent session must not discover the private
+  skill automatically.
+
+## Authentication contract
+
+- Auth profiles live in project-local `.pi/qa_auth.jsonc` and are selected by
+  explicit id. The file must be a real project-local file with mode `0600` on
+  POSIX. Profile listings expose only `id`, description, and traits.
+- When authenticated QA first needs credentials and that file is absent, the
+  runner creates a private empty template and returns `provide_credentials`.
+  The sub-agent must explicitly ask the user to fill the reported file and
+  rerun QA; it must not read or edit the credential values itself.
+- Every profile requires one or more exact `allowedOrigins`. Secret-bearing auth
+  is applied only to those origins; all other HTTP(S)/WebSocket traffic and
+  service workers are blocked during QA.
+- Supported auth types are `form`, `cookie`, `localStorage`, `sessionStorage`,
+  `bearer`, and existing Playwright `storageState`.
+- The bundled runner reads secrets internally. Credentials must never be copied
+  into prompts, generated QA flows, shell arguments, transcripts, reports,
+  or QA evidence.
+- Generated browser state is private cache under `.pi/qa-auth-state`; evidence
+  is written under `.pi/qa-runs`. Multiple profiles always use separate browser
+  contexts and evidence directories.
+- Missing, ambiguous, rejected, or expired auth returns a machine-readable
+  update-required/profile-required status naming only the profile id, config
+  file, and redacted reason. The parent asks the user to update the file and
+  reruns; there is no `/qa-auth` command.
+
+## QA execution contract
+
+- A model-authored QA flow is declarative JSONC, not executable JavaScript. The
+  trusted runner implements a bounded set of navigation, interaction,
+  assertion, screenshot, and auth-rejection actions and never gives the flow a
+  Playwright context or credential values.
+- The runner owns browser lifecycle, origin checks, auth application, tracing,
+  screenshots, video finalization, and redacted result output. Before retaining
+  a trace it removes network/non-image resource entries, redacts configured and
+  runtime storage credentials, and verifies those values are absent.
+- Success and post-launch failure results include typed artifact groups. Every
+  item has an absolute filesystem path and a `file:` URI; the sub-agent must
+  present each item as a clickable Markdown link instead of reporting only the
+  evidence directory.
+- Success requires deterministic assertions. Visual inspection supplements,
+  but never replaces, explicit expected-state checks.
+- Auth rejection discovered by a QA flow is reported through the
+  `authRejectedIf` action so the parent gets an update-required status.
+
+## Acceptance criteria
+
+1. `browser-qa` resolves to the intended model/fallback and private skill, and
+   its isolated child process can register the configured Antigravity model.
+2. Spawn args contain `--no-skills` and only the explicit private skill for this
+   profile; ordinary profiles retain existing skill discovery behavior.
+3. Auth profile listing and all error output are redacted; model-authored input
+   cannot execute code in the credential-bearing process.
+4. Runner tests cover explicit profile selection, all auth modes, fail-closed
+   origins, path/mode hardening, private empty-template creation, explicit
+   credential requests, non-executable flows, and successful redacted evidence
+   creation.
+5. Completed test runs report clickable screenshot, video, and trace links
+   whenever those artifacts exist.
+6. Suite tests/typecheck, host checks, and suite sync pass.

package/external/pi-tools-suite/src/async-subagents/async-subagents.sample.jsonc

@@ -116,6 +116,7 @@
         "research": { "model": "zai/glm-5-turbo", "thinking": "low" },
         "docs": { "model": "zai/glm-4.5-air", "thinking": "low" },
         "frontend": { "model": "antigravity/gemini-3-flash-preview", "fallbackModels": ["zai/glm-5.3"], "thinking": "medium" },
+        "browser-qa": { "model": "antigravity/gemini-3-flash-preview", "fallbackModels": ["openai-codex/gpt-5.4-mini"], "thinking": "medium" },
         "tests": { "model": "zai/glm-5-turbo", "thinking": "medium" },
         "review": { "model": "zai/glm-5.3", "thinking": "high" },
         "implement": { "model": "zai/glm-5.3", "thinking": "high" },
@@ -131,6 +132,7 @@
         "research": { "model": "openai-codex/gpt-5.6-terra", "fallbackModels": ["zai/glm-5-turbo"], "thinking": "low" },
         "docs": { "model": "openai-codex/gpt-5.6-luna", "fallbackModels": ["zai/glm-4.5-air"], "thinking": "low" },
         "frontend": { "model": "openai-codex/gpt-5.6-terra", "fallbackModels": ["antigravity/gemini-3-flash-preview", "zai/glm-5.3"], "thinking": "medium" },
+        "browser-qa": { "model": "antigravity/gemini-3-flash-preview", "fallbackModels": ["openai-codex/gpt-5.4-mini"], "thinking": "medium" },
         "tests": { "model": "openai-codex/gpt-5.6-terra", "fallbackModels": ["zai/glm-5-turbo"], "thinking": "medium" },
         "review": { "model": "openai-codex/gpt-5.6-sol", "fallbackModels": ["zai/glm-5.3"], "thinking": "high" },
         "implement": { "model": "openai-codex/gpt-5.6-sol", "fallbackModels": ["zai/glm-5.3"], "thinking": "high" },
@@ -146,6 +148,7 @@
         "research": { "model": "antigravity/gemini-3.1-pro-preview", "fallbackModels": ["openai-codex/gpt-5.4-mini", "zai/glm-5-turbo"], "thinking": "medium" },
         "docs": { "model": "antigravity/gemini-2.5-flash", "fallbackModels": ["openai-codex/gpt-5.3-codex-spark", "zai/glm-4.5-air"], "thinking": "medium" },
         "frontend": { "model": "antigravity/gemini-3.1-pro-preview-customtools", "fallbackModels": ["openai-codex/gpt-5.4-mini", "zai/glm-5.3"], "thinking": "low" },
+        "browser-qa": { "model": "antigravity/gemini-3-flash-preview", "fallbackModels": ["openai-codex/gpt-5.4-mini"], "thinking": "medium" },
         "tests": { "model": "antigravity/antigravity-claude-sonnet-4-6", "fallbackModels": ["openai-codex/gpt-5.4-mini", "zai/glm-5-turbo"], "thinking": "high" },
         "review": { "model": "antigravity/antigravity-claude-sonnet-4-6", "fallbackModels": ["openai-codex/gpt-5.6-sol", "zai/glm-5.3"], "thinking": "high" },
         "implement": { "model": "openai-codex/gpt-5.6-sol", "fallbackModels": ["zai/glm-5.3"], "thinking": "high" },
@@ -194,6 +197,14 @@
       ]
     },
 
+    "browser-qa": {
+      "description": "Use for browser-based visual QA: reproduce UI bugs and verify fixes with deterministic assertions, screenshots, video, and traces.",
+      "model": "antigravity/gemini-3-flash-preview",
+      "fallbackModels": ["openai-codex/gpt-5.4-mini"],
+      "thinking": "medium",
+      "tools": ["read", "grep", "bash"]
+    },
+
     "tests": {
       "description": "Use for tests: locate coverage, find gaps, run/check targeted test commands, diagnose failing tests.",
       "model": "zai/glm-5-turbo",

package/external/pi-tools-suite/src/async-subagents/core/config.ts

@@ -27,6 +27,8 @@ export interface SubagentTypeConfig {
 	modelByParent?: Record<string, ModelByParentEntry>;
 	thinking?: string;
 	tools?: string[];
+	/** Explicit skill files loaded after disabling normal skill discovery. */
+	isolatedSkills?: string[];
 	extraArgs?: string[];
 	/** Extra prompt text appended after the generated or overridden prompt. */
 	promptAppend?: string;
@@ -118,6 +120,8 @@ export interface CopySubagentConfigSampleResult {
 export interface ResolvedAgentTaskConfig {
 	task: AgentTask;
 	extraArgs: string[];
+	/** Explicit skill files loaded with normal skill discovery disabled. */
+	isolatedSkills: string[];
 	/** Ordered model fallbacks for the resolved model. Current-process exhausted models are skipped before spawning. */
 	fallbackModels: string[];
 	profile?: SubagentTypeConfig;
@@ -201,6 +205,14 @@ const BUILTIN_CONFIG: SubagentConfig = {
 				"When no mockup exists, choose a clear aesthetic direction and explain it briefly. Verify with targeted build/lint/tests or screenshot-relevant checks when possible.",
 			].join("\n"),
 		},
+		"browser-qa": {
+			description: "Use for browser-based visual QA: reproduce UI bugs and verify fixes with deterministic assertions, screenshots, video, and traces.",
+			model: "antigravity/gemini-3-flash-preview",
+			fallbackModels: ["openai-codex/gpt-5.4-mini"],
+			thinking: "medium",
+			tools: ["read", "grep", "bash"],
+			isolatedSkills: [getBrowserQaSkillPath()],
+		},
 		implement: {
 			description: "Use when the sub-agent should make or plan code changes for a feature, bug fix, or refactor.",
 			thinking: "high",
@@ -272,6 +284,10 @@ export function getSubagentConfigSamplePath(): string {
 	return path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..", "async-subagents.sample.jsonc");
 }
 
+export function getBrowserQaSkillPath(): string {
+	return path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..", "private-skills", "browser-qa", "SKILL.md");
+}
+
 export function getSubagentConfigInitTargetPath(cwd: string, env: NodeJS.ProcessEnv = process.env): string {
 	return explicitSubagentConfigPath(cwd, env) ?? getDefaultSubagentConfigPath();
 }
@@ -365,6 +381,7 @@ export function resolveAgentTaskConfig(
 	return {
 		profile,
 		extraArgs,
+		isolatedSkills: arrayOfStrings(profile?.isolatedSkills) ?? [],
 		fallbackModels,
 		retry: resolveRetryConfig(config.retry, profile?.retry),
 		maxResultBytes: profile?.maxResultBytes ?? config.maxResultBytes,
@@ -507,6 +524,7 @@ function normalizeConfig(value: Record<string, unknown>, file: string): Partial<
 			modelByParent: normalizeModelByParent(rawProfile.modelByParent, name, file),
 			thinking: trimString(rawProfile.thinking),
 			tools: arrayOfStrings(rawProfile.tools),
+			isolatedSkills: arrayOfStrings(rawProfile.isolatedSkills),
 			extraArgs: arrayOfStrings(rawProfile.extraArgs),
 			promptAppend: textBlock(rawProfile.promptAppend),
 			promptOverride: textBlock(rawProfile.promptOverride),
@@ -583,6 +601,7 @@ function compactProfile(profile: SubagentTypeConfig): SubagentTypeConfig {
 	if (profile.modelByParent) compact.modelByParent = profile.modelByParent;
 	if (profile.thinking) compact.thinking = profile.thinking;
 	if (profile.tools && profile.tools.length > 0) compact.tools = profile.tools;
+	if (profile.isolatedSkills && profile.isolatedSkills.length > 0) compact.isolatedSkills = profile.isolatedSkills;
 	if (profile.extraArgs && profile.extraArgs.length > 0) compact.extraArgs = profile.extraArgs;
 	if (profile.promptAppend) compact.promptAppend = profile.promptAppend;
 	if (profile.promptOverride) compact.promptOverride = profile.promptOverride;

package/external/pi-tools-suite/src/async-subagents/core/spawn.ts

@@ -19,6 +19,8 @@ export interface SpawnAgentOptions {
 	parentSession?: string;
 	timeoutMs?: number;
 	maxResultBytes?: number;
+	/** Explicit skills to load after disabling normal skill discovery. */
+	isolatedSkills?: string[];
 }
 
 export const DEFAULT_AGENT_TIMEOUT_MS = 30 * 60 * 1000;
@@ -88,6 +90,13 @@ export function spawnAgent(
 	else piArgs.push("--no-session");
 	piArgs.push("--no-extensions");
 	piArgs.push("--extension", getModelToolsExtensionPath());
+	// `--no-extensions` keeps sub-agents isolated, but the suite-owned provider
+	// is infrastructure: always restore it, regardless of the selected model.
+	piArgs.push("--extension", getAntigravityAuthExtensionPath());
+	if (options.isolatedSkills && options.isolatedSkills.length > 0) {
+		piArgs.push("--no-skills");
+		for (const skillPath of options.isolatedSkills) piArgs.push("--skill", skillPath);
+	}
 	const envModel = task.model || getEnvModel();
 	if (envModel) piArgs.push("--model", envModel);
 	const selectedTools = task.tools ? filterSubagentTools(selectSuitableToolsForModel(envModel, task.tools)) : undefined;
@@ -98,7 +107,7 @@ export function spawnAgent(
 	if (task.thinking) piArgs.push("--thinking", task.thinking);
 
 	// User-supplied extra args (e.g. --thinking high)
-	piArgs.push(...extraArgs);
+	piArgs.push(...(options.isolatedSkills?.length ? withoutSkillArgs(extraArgs) : extraArgs));
 	// Keep recursive/interactive parent-only tools disabled even if explicit
 	// sub-agent extraArgs load additional extensions or override --tools.
 	piArgs.push("--extension", getSubagentToolGuardExtensionPath());
@@ -389,10 +398,28 @@ export function spawnAgent(
 	return { pid, agentDir, process: proc };
 }
 
+function withoutSkillArgs(args: string[]): string[] {
+	const filtered: string[] = [];
+	for (let index = 0; index < args.length; index += 1) {
+		const arg = args[index];
+		if (arg === "--skill") {
+			index += 1;
+			continue;
+		}
+		if (arg === "--no-skills" || arg.startsWith("--skill=")) continue;
+		filtered.push(arg);
+	}
+	return filtered;
+}
+
 function getModelToolsExtensionPath(): string {
 	return path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..", "..", "model-tools", "index.ts");
 }
 
+function getAntigravityAuthExtensionPath(): string {
+	return path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..", "..", "antigravity-auth", "index.ts");
+}
+
 function terminateChildProcess(proc: ChildProcess, signal: NodeJS.Signals): void {
 	if (proc.pid) {
 		terminateProcess(proc.pid, signal as "SIGTERM" | "SIGINT" | "SIGKILL");

package/external/pi-tools-suite/src/async-subagents/lib.ts

@@ -23,6 +23,7 @@ export {
 	DEFAULT_ROUTING_CONFIG,
 	existingSubagentConfigFiles,
 	getDefaultSubagentConfigPath,
+	getBrowserQaSkillPath,
 	getSubagentConfigInitTargetPath,
 	getSubagentConfigSamplePath,
 	isBlindModelRef,

package/external/pi-tools-suite/src/async-subagents/private-skills/browser-qa/SKILL.md

@@ -0,0 +1,76 @@
+---
+name: browser-qa-private
+description: Private workflow for deterministic browser bug reproduction and fix verification with redacted project auth and Playwright evidence.
+---
+
+# Browser QA
+
+Use the bundled runner; do not read, print, grep, copy, or edit credential values
+from `.pi/qa_auth.jsonc` yourself.
+
+## Workflow
+
+1. Resolve `scripts/browser-qa-runner.mjs` relative to this skill.
+2. Run `node <runner> profiles`. Choose a profile only when the task names its
+   id or safe profile traits make the choice unambiguous. Otherwise stop with
+   `QA_PROFILE_REQUIRED` and list only ids, descriptions, and traits.
+3. Inspect the target code and write a declarative JSONC flow under
+   `.pi/qa-flows/`. Never put credentials or executable JavaScript in it.
+4. Run:
+   `node <runner> run --profile <id> --base-url <url> --flow <flow.jsonc>`.
+   Profile id, URL, and flow path are non-secret; never pass credentials as
+   arguments or environment variables.
+5. Report deterministic assertions and every artifact returned by the runner.
+   For each screenshot, video, or trace, emit a separate clickable Markdown
+   link using its `uri` and also show its absolute `path`. Do this for failed
+   runs too whenever `artifacts` is present; never report only `evidenceDir`.
+   Visual inspection supplements assertions; it does not replace them.
+
+The flow is `{ "steps": [...] }` with at most 100 steps. Supported actions:
+
+- navigation: `goto`, `reload`, `waitFor`, `waitForTimeout`
+- interaction: `click`, `doubleClick`, `hover`, `fill`, `press`, `check`,
+  `uncheck`, `selectOption`
+- assertions: `assertVisible`, `assertHidden`, `assertEnabled`,
+  `assertDisabled`, `assertChecked`, `assertUnchecked`, `assertText`,
+  `assertValue`, `assertCount`, `assertURL`
+- evidence/auth: `screenshot`, `authRejectedIf`
+
+Locators accept one of `testId`, `role` (plus optional `name`), `label`,
+`placeholder`, `text`, or `css`; add `exact: true` where useful. String
+assertions require exactly one of `equals` or `includes`.
+
+```jsonc
+{
+  "steps": [
+    { "action": "goto", "path": "/settings" },
+    { "action": "authRejectedIf", "urlIncludes": "/login" },
+    {
+      "action": "assertVisible",
+      "locator": { "role": "heading", "name": "Settings", "exact": true }
+    },
+    { "action": "click", "locator": { "testId": "save-settings" } },
+    { "action": "assertText", "locator": { "testId": "toast" }, "includes": "Saved" }
+  ]
+}
+```
+
+The runner owns Playwright/browser lifecycle, strict network-origin boundaries,
+auth application, assertions, screenshots, video, trace sanitization, and
+cleanup. Do not start an additional shared/default browser session. For multiple
+profiles, invoke the runner separately; each invocation gets an isolated context
+and exclusive evidence directory.
+
+If the runner returns `QA_AUTH_UPDATE_REQUIRED`, stop and explicitly report that
+browser QA requires credentials or an auth-config update. Ask the user to fill
+the reported file and rerun QA. If `templateCreated` is true, say that a private
+empty template was created at that path. Relay only the runner's profile, file,
+reason, action, and template-created state; never read the generated file or
+attempt to recover by exposing or replaying credentials.
+
+After any runner invocation that actually performed browser testing, include
+all non-empty `artifacts.screenshots`, `artifacts.videos`, and
+`artifacts.traces` groups in the final response. These links are mandatory so
+the user can open the evidence directly.
+
+See `references/qa-auth.example.jsonc` and `references/qa-flow.example.jsonc`.

package/external/pi-tools-suite/src/async-subagents/private-skills/browser-qa/references/qa-auth.example.jsonc

@@ -0,0 +1,87 @@
+{
+  // Copy to <project>/.pi/qa_auth.jsonc. This file is private and ignored by
+  // the host repository's default .gitignore rule for .pi/. On POSIX, run
+  // chmod 600 .pi/qa_auth.jsonc.
+  "profiles": {
+    "staging-admin": {
+      "description": "Staging administrator",
+      "traits": ["role:admin", "plan:enterprise"],
+      "baseUrl": "https://staging.example.test",
+      "allowedOrigins": ["https://staging.example.test"],
+      "auth": {
+        "type": "form",
+        "loginUrl": "https://staging.example.test/login",
+        "fields": [
+          { "selector": "input[name=email]", "value": "admin@example.test" },
+          { "selector": "input[name=password]", "value": "replace-me" }
+        ],
+        "submitSelector": "button[type=submit]",
+        "success": { "url": "**/dashboard", "selector": "[data-testid=user-menu]" }
+      }
+    },
+    "staging-subscriber": {
+      "description": "Staging paid subscriber",
+      "traits": ["role:user", "plan:paid"],
+      "baseUrl": "https://staging.example.test",
+      "allowedOrigins": ["https://staging.example.test"],
+      "auth": {
+        "type": "cookie",
+        "cookies": [
+          {
+            "name": "session",
+            "value": "replace-me",
+            "domain": "staging.example.test",
+            "path": "/",
+            "httpOnly": true,
+            "secure": true,
+            "sameSite": "Lax"
+          }
+        ]
+      }
+    },
+    "staging-local-storage": {
+      "description": "Local-storage auth example",
+      "traits": ["role:user", "auth:localStorage"],
+      "baseUrl": "https://staging.example.test",
+      "allowedOrigins": ["https://staging.example.test"],
+      "auth": {
+        "type": "localStorage",
+        "origin": "https://staging.example.test",
+        "entries": { "access_token": "replace-me" }
+      }
+    },
+    "staging-session-storage": {
+      "description": "Session-storage auth example",
+      "traits": ["role:user", "auth:sessionStorage"],
+      "baseUrl": "https://staging.example.test",
+      "allowedOrigins": ["https://staging.example.test"],
+      "auth": {
+        "type": "sessionStorage",
+        "origin": "https://staging.example.test",
+        "entries": { "access_token": "replace-me" }
+      }
+    },
+    "staging-bearer": {
+      "description": "Bearer-token API auth example",
+      "traits": ["role:service", "auth:bearer"],
+      "baseUrl": "https://staging.example.test",
+      "allowedOrigins": ["https://staging.example.test"],
+      "auth": {
+        "type": "bearer",
+        "token": "replace-me",
+        "header": "Authorization",
+        "prefix": "Bearer "
+      }
+    },
+    "staging-storage-state": {
+      "description": "Existing Playwright storage-state example",
+      "traits": ["role:user", "auth:storageState"],
+      "baseUrl": "https://staging.example.test",
+      "allowedOrigins": ["https://staging.example.test"],
+      "auth": {
+        "type": "storageState",
+        "path": ".pi/qa-auth-state/imported-user.json"
+      }
+    }
+  }
+}

package/external/pi-tools-suite/src/async-subagents/private-skills/browser-qa/references/qa-flow.example.jsonc

@@ -0,0 +1,19 @@
+{
+  "timeoutMs": 15000,
+  "steps": [
+    { "action": "goto", "path": "/settings" },
+    { "action": "authRejectedIf", "urlIncludes": "/login" },
+    {
+      "action": "assertVisible",
+      "locator": { "role": "heading", "name": "Settings", "exact": true }
+    },
+    {
+      "action": "fill",
+      "locator": { "label": "Display name", "exact": true },
+      "value": "QA Example"
+    },
+    { "action": "click", "locator": { "testId": "save-settings" } },
+    { "action": "assertText", "locator": { "testId": "toast" }, "includes": "Saved" },
+    { "action": "screenshot", "name": "settings-saved" }
+  ]
+}