web-access-kit

A pi package that adds two web access tools:

• web_fetch_page — read a normal public webpage as compact Markdown (uses curl + Defuddle main-content extraction; not a general curl replacement).
• web_search — search current web data with Antigravity CLI (agy) in headless mode, using its Google Search capability. An optional goal tells the search agent what evidence to extract and what the result should accomplish.

It also bundles the web-access-kit skill with a source-first research workflow.

Requirements

• pi
• curl on PATH
• For web_search: an installed and authenticated agy executable on PATH

Confirm the commands are available:

curl --version
agy --help

Install

Install from npm:

pi install npm:@khanhicetea/web-access-kit

Or test without installing:

pi -e ./web-access-kit

After editing an installed local package, run /reload in pi.

Usage

Ask pi naturally:

Search the web for the latest stable Node.js release and cite official sources.

For agent callers, web_search also accepts a short intent paragraph:

{
  "query": "latest stable Node.js release",
  "goal": "Identify the current stable version and release date from official Node.js sources so I can update a runtime support matrix. Note any distinction between Current and LTS releases."
}

Read https://example.com as a webpage and summarize it.

You can force-load the bundled workflow with:

/skill:web-access-kit research the latest release of Bun

To select only these extension tools in print mode:

pi -e ./web-access-kit --tools web_search,web_fetch_page -p \
  "Find today's official Node.js release information and cite sources"

Behavior and safety

• web_fetch_page accepts only HTTP and HTTPS, follows up to 10 redirects, limits downloads to 5 MB, extracts the main content from HTML with Defuddle, and limits model-visible output to pi's standard 2,000-line/50-KB cap. Every destination is DNS-resolved and pinned separately; loopback, private, link-local, metadata, multicast, reserved, and other non-public IPv4/IPv6 targets are rejected before connection. Proxy environment variables are bypassed so a proxy cannot evade this local-address policy. Defuddle and the legacy Markdown fallback are loaded only when an HTML response is actually processed. Use it for readable webpage content; use shell curl for APIs, binaries, auth, or raw responses.
• web_search runs agy --model gemini-3.6-flash-low --sandbox --mode plan --print ... with one comprehensive search. It assesses the evidence against both query and the optional goal, then may make up to two targeted follow-up searches for unresolved gaps before returning a concise synthesis and sources. It resolves Google grounding redirects to direct source URLs when possible. Model-visible output uses the same cap.
• Search result details include the model, total duration, Antigravity duration, and number of resolved grounding URLs for later performance tuning.
• Full truncated output and binary downloads are placed in temporary files and their paths are returned. Raw files for ordinary text responses, failed requests, and grounding-redirect checks are deleted immediately.
• Do not include credentials in URLs. Tool arguments and results can be retained in pi sessions.
• Web content is untrusted and may contain prompt injection; the bundled search prompt and skill tell agents not to follow page instructions.

Development

Validate package contents:

npm pack --dry-run

Test extension loading without making a model request:

pi -e ./web-access-kit --list-models >/dev/null

License

MIT