A small collection of extensions for pi-coding-agent.
| File | What it does | How to use | Requirements |
|---|---|---|---|
auth-backup.ts |
Manages backups of ~/.pi/agent/auth.json through a single interactive command |
Run /auth-backup |
Interactive UI |
branch-pr-widget.ts |
Shows the GitHub PR for the current branch | Auto-runs on session start and after agent turns | gh installed, current repo branch associated with a PR |
docs-changes.ts |
Shows changed files under docs/ as a widget |
Auto-runs on session start and after agent turns | Git repo with a docs/ directory |
export-dialogue.ts |
Exports the current branch to a dated, LLM-titled JSONL file | Run /xp |
Active model credentials; optional PI_XP_PATH |
git-diff-stats.ts |
Appends whole-branch +added -deleted line counts, plus an uncommitted marker, after the branch name on the footer's cwd line |
Auto-runs on session start, after agent turns, and after mutating tools | Git repo; TUI mode |
replace-pi-with-claude-code.ts |
Rewrites pi to claude code in the system prompt |
Auto-runs before each agent start and before each provider request | None |
read-url.ts |
Adds a read_url tool that reads public URLs as Markdown through Jina Reader |
Agent calls read_url when it needs external docs |
Optional JINA_API_KEY for authenticated Jina quota |
usage-widget.ts |
Shows Anthropic or Codex usage bars for the active provider | Auto-runs on session start, model change, and after agent turns | Valid Anthropic OAuth or OpenAI Codex auth |
fix-anthropic-thinking-block-drop.ts |
Reinjects signed thinking blocks that pi-ai drops, avoiding Anthropic 400 errors on Opus/Sonnet 4.8 |
Auto-runs before each Anthropic provider request | Anthropic model with thinking enabled |
Copy any extension file into your pi extensions directory:
cp auth-backup.ts ~/.pi/agent/extensions/
cp branch-pr-widget.ts ~/.pi/agent/extensions/
cp docs-changes.ts ~/.pi/agent/extensions/
cp export-dialogue.ts ~/.pi/agent/extensions/
cp git-diff-stats.ts ~/.pi/agent/extensions/
cp replace-pi-with-claude-code.ts ~/.pi/agent/extensions/
cp read-url.ts ~/.pi/agent/extensions/
cp usage-widget.ts ~/.pi/agent/extensions/
cp fix-anthropic-thinking-block-drop.ts ~/.pi/agent/extensions/Then reload pi:
/reload
You can also load a file directly for testing:
pi -e ./auth-backup.tsInteractive auth backup manager for ~/.pi/agent/auth.json.
Behavior:
- Stores backups under
~/.pi/agent/auth-backups/ - Uses one command:
/auth-backup - Shows an interactive list with:
+ New auth backup- existing backups with creation time and provider summary
- For an existing backup, opens an action menu:
Backup current auth hereRestore this backupDelete this backup
Restore overwrites the full ~/.pi/agent/auth.json and reloads pi.
Use it when:
- you switch between multiple auth setups
- you want to save the current login state before replacing it
- you want to restore a previous full auth state quickly
Backup list:
Action menu:
Shows the GitHub PR number and URL for the current branch.
Behavior:
- Runs
gh pr view --json number,url - Displays a widget when a PR is found
- Refreshes on:
session_startagent_end
Use it when:
- you work in a GitHub repo with branch-to-PR mapping
- you want the active PR visible in the UI
Shows changed files in docs/ as a widget.
Behavior:
- Reads tracked changes from
git diff --name-status HEAD -- docs/ - Reads untracked files from
git ls-files --others --exclude-standard -- docs/ - Ignores
docs/index.mdand nestedindex.md - Refreshes on:
session_startagent_end
Use it when:
- you are editing documentation alongside code
- you want a compact docs change summary visible at all times
Shows how much the current branch diverges from the integration branch, inline on the footer's cwd line:
~/.pi/agent/extensions (feature-x) +42 -7 ⦁
The trailing ⦁ means part of that work is not committed yet, the same idiom editors use for an
unsaved buffer. It is a state flag rather than a second pair of numbers on purpose: "how big is
my PR" is an occasional deliberate lookup that needs a figure, while "is anything uncommitted"
is an ambient yes/no, and four digits in a footer become something you parse instead of absorb.
It appears for unstaged edits, staged edits, and untracked files, and can show on its own when
edits happen to net out to zero lines.
It renders in dim, matching the usage bars rather than standing out. An unclean tree is an
ordinary resting state, not a condition to flag, so the marker deliberately sits below the
counts in the visual hierarchy instead of competing with them.
The glyph is U+2981 Z NOTATION SPOT. Glyph class drives vertical placement: U+25CF BLACK CIRCLE
is a Geometric Shape centred on the em box, which sits below the optical centre of lowercase text
and reads as bottom-aligned inline, while U+2022 BULLET aligns correctly but is too small to
register once dimmed. U+2981 is a Mathematical Operator, so it rides the same axis as the + and
- beside it while carrying more weight than a bullet. It reports width 1 under pi-tui, so footer
truncation math is unaffected.
The counts always mean one thing: everything you have that the integration branch does not. There is no per-branch special case, so the number never silently changes meaning as you switch branches. On a feature branch it keeps growing as you commit, staying a live estimate of the eventual PR size.
| Where you are | What shows up |
|---|---|
| Feature branch | Branch commits + staged + unstaged + untracked |
| Integration branch, work pushed | Staged + unstaged + untracked |
| Integration branch, local commits not pushed | Those commits + staged + unstaged + untracked |
The last row falls out of the same rule rather than being special-cased, which is why unpushed
work on main is visible instead of silently reading as zero.
That line is rendered by pi's built-in footer, and ctx.ui.setFooter() replaces the footer
wholesale. Instead of reimplementing it, the extension constructs the built-in FooterComponent
over a small ExtensionContext adapter and rewrites only line 0 of its output, so the
stats/model line keeps upstream behavior.
Base branch resolution:
- Reads the remote's advertised default branch via
git symbolic-ref refs/remotes/origin/HEAD, so repos ondeveloportrunkwork without configuration - Falls back to probing
origin/main,origin/master,main,masterin that order, preferring remote refs because a localmainis often stale - Never fetches. Resolution is local-only, so the footer never blocks on the network
Behavior:
- Diffs against
git merge-base <base> HEAD, not the base branch tip. Diffing the tip would fold commits that landed on the base branch after the fork point into your count as deletions - Passing a single commit to
git diffcompares it against the working tree, so branch commits and uncommitted edits are counted in one call - On the integration branch the merge base collapses to
HEADonce your commits are pushed, so the general rule degrades to uncommitted-only without needing a branch check - Falls back to
HEADon unrelated histories, on shallow clones missing the fork point, and when no base branch exists; then to--cachedon a repo with no commits - Adds untracked file line counts from
git ls-files --others --exclude-standard(setINCLUDE_UNTRACKED = falseto skip) - Skips binary and oversized untracked files, and caps the untracked scan at 200 files
- Omits a side entirely when it is zero, so a clean-of-deletions tree shows
+42, not+42 -0 - Detects an unclean tree with
git diff --quiet, which writes nothing and exits 1 on a difference, so the check stays cheap no matter how large the diff is - Refreshes on:
session_startagent_endtool_resultforbash/edit/write/multi_edit/apply_patch, throttled to 1.5s- git branch changes, via
footerData.onBranchChange
Use it when:
- you commit repeatedly on a branch and want a running total of the eventual PR size
- you want churn visible without running
git diff --stat - you review agent-made edits before committing
Exports the active session branch to JSONL with a filename generated by the active model.
Behavior:
- Registers
/xp - Waits for the current agent run to settle, then snapshots the active branch
- Uses the current model and compaction-aware session context to generate a concise title without appending the title request to the session
- Writes
{YYYY-MM-DD}-{title}.jsonl - Re-chains branch entry parent IDs into a linear JSONL session
- Overwrites an existing file with the same name
- Reads the destination directory from
PI_XP_PATH, falling back to pi's current working directory - Requires the destination directory to exist and be writable
Optional destination configuration:
export PI_XP_PATH="/Users/sukit/Mars/life-engineering/5. Dialogues"Use it when:
- you want a portable JSONL transcript of the current branch
- you want dialogue exports named by topic instead of session UUID
Rewrites occurrences of pi in the system prompt to claude code before each run.
Behavior:
- Hooks
before_agent_startfor turns started by typed input orsendUserMessage - Hooks
before_provider_requestand rewrites the serializedsystemblocks, covering turns triggered by extension custom messages (pi.sendMessagewithtriggerTurn), which never firebefore_agent_start - Replaces
picase-insensitively withclaude code - Preserves
cache_controland other block fields; leaves message content and non-Anthropic payload shapes untouched - Idempotent: an already-rewritten prompt passes through unchanged
Use it when:
- you want the agent framed as Claude Code instead of pi
- you use Anthropic subscription OAuth, whose billing classifier rejects requests that do not look like Claude Code with 400 "You're out of extra usage" even when quota remains
Adds a read_url tool for reading public HTTPS URLs as LLM-friendly Markdown using Jina Reader.
Behavior:
- Registers a
read_urltool callable by the agent - Uses anonymous Jina Reader requests first
- Falls back to
JINA_API_KEYwhen anonymous quota is exhausted and the environment variable is set - Caches successful fetches for 30 days under
~/.pi/agent/caches/read-url/ - Stores each cached document as:
content.mdmeta.json
- Uses readable cache directory names, with a short URL hash suffix to avoid collisions
- Canonicalizes document URLs by default:
- removes fragments
- strips query parameters
- removes non-root trailing slashes
- Supports line-based pagination with
offsetandlimit - Provides compact TUI rendering, with expandable results
- Returns actionable error messages for Jina rate limits, missing API keys, invalid API keys, insufficient balance, and stale-cache fallback
Tool parameters:
| Parameter | Default | Description |
|---|---|---|
url |
required | HTTPS URL to read. Non-HTTPS URLs are refused |
offset |
1 |
1-based line offset for pagination |
limit |
300 |
Number of lines to return, max 1000 |
refresh |
false |
Force re-fetch and overwrite cache. Do not use by default |
preserveQuery |
false |
Preserve query parameters when they are required for page content |
Cache example:
~/.pi/agent/caches/read-url/
openai.com--index-introducing-trusted-contact-in-chatgpt--178cf0649d10/
content.md
meta.json
Optional authenticated quota:
export JINA_API_KEY="..."Use it when:
- you want the agent to inspect public documentation, blog posts, changelogs, or API references
- you want cached URL reading with pagination instead of manually pasting Markdown into the prompt
- you want anonymous Jina usage by default, with API-key fallback only when needed
Security note:
read_url puts external webpage content into the agent context. Treat every fetched page as untrusted input. Do not read random links, suspicious pages, or user-generated content you do not trust. A page can contain prompt injection text that tells the agent to ignore previous instructions, reveal secrets, call tools, run commands, or follow links.
The extension reduces this risk in a few ways:
- Tool output labels fetched content as untrusted external content
- Fetched content is wrapped inside a
<document>boundary - The tool guidelines tell the agent not to follow instructions inside fetched pages
- The tool does not use browser cookies or your logged-in Chrome session
- The tool refuses non-HTTPS URLs, so fetched content is not retrieved over unauthenticated HTTP transport
These are prompt-level mitigations, not a security boundary. They do not guarantee that the agent will never be influenced by malicious content. Only read URLs from sources you trust, such as official documentation, vendor docs, repository docs, and known technical blogs.
Limitations:
- Does not use browser cookies or your logged-in Chrome session
- Does not read non-HTTPS URLs
- Does not read private documents unless Jina Reader can access them publicly
- Query parameters are stripped by default; pass
preserveQuery: truefor search, pagination, filters, or pages where query parameters define the content - Prompt injection remains possible if the fetched page contains malicious instructions
Shows usage information for the active provider when supported.
Supported providers:
anthropicopenai-codex
Behavior:
- Displays usage bars for primary and secondary windows
- Shows reset times
- Computes a 7-day pace delta for Anthropic-style usage windows
- Caches usage briefly to avoid excessive requests
- Refreshes on:
session_startmodel_selectagent_end
Data sources:
- Anthropic:
https://api.anthropic.com/api/oauth/usage - Codex:
https://chatgpt.com/backend-api/wham/usage
Use it when:
- you want quota visibility while working
- you switch between Anthropic and Codex models
Workaround for an Anthropic 400 error seen on Opus/Sonnet 4.8:
thinking or redacted_thinking blocks in the latest assistant message cannot be modified
The root cause is in pi-ai: when building the Anthropic payload it drops any thinking block whose visible text is empty, even when the block is signed. With adaptive (summarized) thinking the model often emits signed thinking blocks with an empty summary, and Opus/Sonnet 4.8 rejects the replay when one is missing.
Behavior:
- Hooks
before_provider_requestand only acts on theanthropic-messagesAPI - Aligns each assistant message in the outgoing payload with the original session message from the tail
- Reinjects any signed, empty-text thinking block that pi-ai dropped, at its correct position
- Repairs same-model turns only; cross-model thinking drops are intentional and left untouched
- Bails out without modifying the payload if its model of pi-ai's transform diverges from the actual payload
- Sets a status line reporting how many blocks were reinjected
Use it when:
- you run Anthropic Opus/Sonnet 4.8 with adaptive (
summarized) thinking - you hit
thinking ... blocks in the latest assistant message cannot be modified400 errors - you want a stopgap until upstream pi-ai keeps signed thinking blocks regardless of text emptiness
| Extension | Notes |
|---|---|
auth-backup.ts |
Requires interactive UI. Restore replaces the full auth file, not a single provider entry. |
branch-pr-widget.ts |
Hidden when no PR is associated with the current branch or gh is unavailable. |
docs-changes.ts |
Hidden when there is no docs/ directory or no matching changes. |
export-dialogue.ts |
/xp makes a separate title-generation request with the active model. The request is not persisted in the exported session. |
git-diff-stats.ts |
Replaces the footer, so it conflicts with any other setFooter extension (last one to run wins). It reuses the built-in FooterComponent, but cannot read the auto-compaction flag, so the stats line always shows (auto). The base branch is resolved from local refs only; after a long gap without fetching, a branch rebased onto newer upstream commits can report a stale merge base. Shows nothing outside a git repo or when the branch has no net change. |
replace-pi-with-claude-code.ts |
Only affects system prompt text (agent state and serialized provider payload), not UI labels, command names, or message content. |
read-url.ts |
Reads public URLs through Jina Reader. Set JINA_API_KEY only if you want authenticated fallback after anonymous quota is exhausted. |
usage-widget.ts |
Hidden when the active provider is unsupported or no usage data is available. |
fix-anthropic-thinking-block-drop.ts |
Workaround for a pi-ai thinking-block drop bug. Acts only on the anthropic-messages API and same-model turns. Remove once pi-ai keeps signed empty-text thinking blocks. |
MIT License


