nicobailon/pi-web-access v0.14.0 on GitHub

Added

Added optional fetchContent.domainPolicy hostname allow/deny rules for fetch_content, checked before target requests and redirects while preserving SSRF protection and local-source behavior. Thanks Joseph Maliksi (@jmaliksi) for #79.
Added explicit-only AnySearch direct search provider with anonymous access, optional anysearchApiKey / ANYSEARCH_API_KEY credentials, strict response validation, and request-time credential sources. Thanks Robin (@choronz) for #130.
Added SERPdive search provider with request-time credential sources, a free-tier krill default that never spends on install, opt-in mako/moby retrieval depth, locally applied domain filters, and recency documented as a query hint rather than a guaranteed freshness filter. Thanks Eden d'Alexis (@edendalexis) for #139.
Added opt-in ordered search routing through searchRouting.providers with explicit transient, quota, and network fallback kinds; named providers remain strict, single-provider config retains precedence, and exhausted routes preserve per-provider diagnostics. Thanks @smithyyang for #77.
Added optional self-hosted SearXNG search with SSRF-guarded base URLs, local-first auto selection, result filters, and documented ssrf.allowRanges opt-ins. Thanks to Marcos A. Núñez (@marnunez) for PR #107 and Avinash Kanaujiya (@avinashkanaujiya) for issue #105.
Added optional self-hosted Firecrawl extraction for fetch_content, using /v2/scrape by default (or /v1/scrape for older images), request-time credential sources, cache-only requests by default, cross-origin redirect credential stripping, and local-first fallback behavior when configured. Thanks Florian Kinder (@fank) for PR #123 and Avinash Kanaujiya (@avinashkanaujiya) for issue #105.
Added opt-in configurable public tool names for environments where another extension or model reserves the defaults, while keeping web_search, source_check, fetch_content, and get_search_content unchanged by default. Thanks Kaiqiang (@youkq95) for reporting #138.
Added SECURITY.md guidance for private vulnerability reporting. Thanks Aurelio Ribeiro (@aurelio-ribeiro) for #128.
Added request-time $ENV_VAR and !command credential sources for every provider API-key field, including escaped $$ and $! literals, while preserving legacy environment precedence for literal config values. Thanks to Eugene Strizhok (@estrizhok) for #159.
Added request-time $ENV_VAR and !command credential sources for Exa and Gemini API configuration, with bounded output, redacted failures, strict source precedence, and shell-local 1Password session forwarding limited to the resolver command. Thanks to Ezra Miller (@ezmill) for #137.
Added source_check machine-readable research artifacts with passage-level provenance, bounded page fetching, durable session retrieval, and conservative claim assessments. Thanks Clark Everson (@gr3enarr0w) for PR #111 and issue #108.

Changed

Limited the published package contents to runtime files, docs, and declared assets, keeping internal tests out of the npm tarball.
Deferred the heavy content extraction module until the first fetch_content or includeContent search call, reducing extension startup work. Thanks Kaushik Gopal (@kaushikgopal) for PR #125.
Send direct Gemini API credentials in x-goog-api-key headers for generate, upload, status, and delete requests instead of URL query parameters.

Removed

Removed the bundled librarian skill from this package instead of keeping a second research workflow coupled to GitHub clone internals. Thanks mcwalrus (@mcwalrus) for #136 and gravewhisper (@gravewhisper) for #23.

Fixed

Prevented opt-in Gemini Web browser cookies from crossing origins on redirects, disabled automatic redirects for cookie-bearing generation and upload requests, and restored local file reads for Gemini Web uploads.
Preserved caller cancellation in non-curated multi-query searches instead of continuing with later queries, and passed the active extension context into curator-added searches.
Hardened new provider result boundaries and removed a dead auto-routing condition without changing provider behavior.
Hardened unreleased config/result boundaries by rejecting malformed config roots, reporting malformed SSRF JSON, normalizing invalid Perplexity result counts, and rejecting contradictory curator summary metadata.
Reworked opt-in Gemini Web browser-cookie extraction to scan non-default Chromium profiles, preflight required cookie names before Keychain/secret-tool access, and cache encryption passwords only in-process. Thanks Kevin Truong (@kevinQTruong) for the originating PR #14, Jessica Black (@jssblck) for reporting #9, János Veres (@jveres) for reporting #2, and RimuruW (@RimuruW) for reporting #15.
Added read-only sqlite3 CLI and Python stdlib fallbacks when node:sqlite is unavailable, with sanitized actionable diagnostics instead of silently reporting Gemini Web as unavailable.
Bounded curator summary-model generation and returned a deterministic, phase-labeled fallback when a draft exceeds its deadline, while preserving caller cancellation and model-resolution errors. Thanks torn1147 (@torn1147) for reporting #43.
Used gemini-2.5-flash as the Gemini API grounded-search default while preserving configured searchModel values and the shared URL/video defaults. Thanks lajarre for reporting #11.
Used the configured search provider when tool calls omit provider or emit the schema's auto default, while preserving explicit provider overrides and auto fallback without configuration. Thanks Pavlo (@fxposter) for reporting #17.
Clarified that githubClone.enabled: false disables GitHub clone/API specialization while leaving generic URL extraction available. Thanks Carlos Peralta (@cperalt) for issue #26.
Added an opt-in ssrf.trustEnvProxy setting that skips local DNS preflight only for hostnames routed through configured HTTP(S) proxy environment variables, while retaining localhost, literal private-IP, and NO_PROXY protections. This addresses the DNS failure described in #104 without claiming full proxy transport support. Thanks Daniel Birn (@DBPhoenix) for PR #109 and mystery4f for reporting #104.
Kept PDF extraction compatible with runtimes without native Promise.try and limited PDF.js output to errors. Thanks Guido Witt-Dörring (@guwidoe) for PRs #33 and #34.
Returned fetched URL content from get_search_content in bounded slices with explicit offset/limit continuation metadata, preventing large stored pages from overflowing the next model request. Thanks @manfredlift for reporting #112.
Kept oversized local videos recognizable for ffmpeg frame/timestamp extraction while preserving the Gemini analysis upload size limit. Thanks @Xandaar for reporting #135.
Declared typebox as a regular runtime dependency so clean/global installs can load the extension without relying on Pi or Feynman to provide that peer. Thanks @DuskyElf, @tonytziorvas, and @53able for reporting #59, #63, and #66.
Preserved OpenAI/Codex answers even when the provider returns no source citations instead of replacing them with No results found. Thanks AstroHan (@Astro-Han) for reporting #117.
Prevented browser auto-open failures from crashing the curator fallback path with ReferenceError: sendCuratorFallbackUpdate is not defined. Thanks Nisarg Patel (@pnisarg) for PR #121; Apostol Apostolov (@apoapostolov), @2seoik, and Demetre Dzmanashvili (@demetere) for related PRs #133, #120, and #114; and @ruanlinxin, @bluewatercg, @tonydiep, and @pinion05 for reports #103, #116, #126, and #127.
Added a focused SSRF error hint for TUN/fake-IP 198.18.0.0/15 addresses that points users to the existing ssrf.allowRanges opt-in. Thanks Aaron (@BenjaminAaron196) for PR #141 and AstroHan (@Astro-Han) for reporting #134.
Registered the web activity widget with Pi's supported string-array API to prevent content is not a function crashes when toggling non-default shortcuts. Thanks @llllllllqq for reporting #158.
Registered the web activity widget as a Pi component factory instead of passing a Text instance directly. Thanks Trey Hoover (@treyhoover) for PR #132.