feat(pi): add BYOK Exa search to Create PR

[BillLeoutsakosvl346]

Summary

• add a default-off internet search option to Pi Create PR backed exclusively by workspace Exa BYOK
• isolate the model process from Exa and GitHub credentials with a bounded capability broker, hardened extension hooks, and a fresh finalizer sandbox
• add fenced search budgets, cleanup/migrations, deployment configuration, documentation, and extensive security/integration coverage

Test plan

• focused Pi Exa suite (17 files, 134 tests)
• real PostgreSQL capability integration tests, including stale fencing, settlement, and cleanup
• full monorepo test suite (1,105 files, 14,245 tests)
• Sim TypeScript check
• production monorepo build
• strict API validation, migration safety, monorepo boundaries, realtime prune, client boundary, and React Query audits
• two independent reviewed-development cycles with no remaining Critical, High, or Medium findings
• credentialed staging Pi/Exa smoke before enabling the default-off server feature flag

Made with Cursor

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs	Skipped		Jul 24, 2026 3:18pm

[gitguardian]

️✅ There are no secrets present in this pull request anymore.

If these secrets were true positive and are still valid, we highly recommend you to revoke them.
While these secrets were previously flagged, we no longer have a reference to the
specific commits where they were detected. Once a secret has been leaked into a git
repository, you should consider it compromised, even if it was deleted immediately.
Find here more information about risks.

---

^{_{🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.}}

[greptile-apps]

Greptile Summary

Adds default-off, workspace-BYOK Exa search to Pi Create PR.

• Introduces a bounded search capability broker with reservation, settlement, expiration, and cleanup.
• Isolates model, Exa, and GitHub credentials through hardened extension hooks and a fresh finalizer sandbox.
• Adds deployment configuration, database migrations, documentation, CI checks, and focused security and integration coverage.

Confidence Score: 5/5

The PR appears safe to merge because no blocking failure related to the previous credential-isolation thread remains.

No blocking failure remains.

Important Files Changed

Filename	Overview
apps/sim/executor/handlers/pi/cloud-search-backend.ts	Orchestrates the isolated search-enabled worker and credential-bearing finalizer flow.
apps/sim/executor/handlers/pi/pi-search-extension.ts	Adds repository-confined tools, sanitized subprocess execution, search access, and secret filtering.
apps/sim/app/api/internal/pi/exa-search/route.ts	Implements the authenticated, budgeted Exa BYOK capability broker.
apps/sim/lib/pi/exa-search/capabilities.ts	Implements capability authentication, leasing, fencing, settlement, and cleanup.
packages/db/migrations/0269_swift_talisman.sql	Adds persistent state required for bounded Pi search capabilities.

Sequence Diagram

sequenceDiagram
  participant Pi as Pi worker
  participant Broker as Exa capability broker
  participant DB as Capability store
  participant Exa as Exa API
  participant Finalizer as Fresh finalizer sandbox
  Pi->>Broker: Search request + short-lived capability
  Broker->>DB: Authenticate and reserve budget
  Broker->>Exa: Search with workspace BYOK
  Exa-->>Broker: Bounded results
  Broker->>DB: Settle reservation
  Broker-->>Pi: Sanitized search results
  Pi-->>Finalizer: Validated change manifest
  Finalizer->>Finalizer: Re-clone, build commit, and push

Loading

_{Reviews (5): Last reviewed commit: "fix(sandbox): enforce Daytona output lim..." | Re-trigger Greptile}

[BillLeoutsakosvl346]

@greptile

[BillLeoutsakosvl346]

@cursor review

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

1 issue from previous review remains unresolved.

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 05579af. Configure here.}

[BillLeoutsakosvl346]

@greptile

[BillLeoutsakosvl346]

@cursor review

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

2 issues from previous reviews remain unresolved.

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit ac4a7bf. Configure here.}

[greptile-apps]

Want your agent to iterate on Greptile's feedback? Try greploops.

[BillLeoutsakosvl346]

@greptile

[BillLeoutsakosvl346]

@cursor review

[BillLeoutsakosvl346]

@greptile

[BillLeoutsakosvl346]

@cursor review

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit faf7e93. Configure here.}