Summary
On macOS, pi-web-access repeatedly shows a system Keychain password prompt for Chrome cookie access:
security wants to use your confidential information stored in "Chrome Safe Storage" in your keychain.
To allow this, enter the "login" keychain password.
Even after entering the password and clicking "Always Allow", the same prompt keeps appearing on later tool calls.
Environment
- pi version:
0.55.0
- pi-web-access version:
0.10.2
- OS:
macOS 26.3 (25D125)
- install:
pi install npm:pi-web-access
Repro
- Install
pi-web-access
- Keep
~/.pi/web-search.json without perplexityApiKey / geminiApiKey
- Run
web_search(...) from Pi (provider auto/gemini path)
- Enter password in the Keychain popup and choose "Always Allow"
- Run
web_search(...) again
Actual
The Keychain popup keeps reappearing, despite selecting "Always Allow".
Expected
Either:
- "Always Allow" should persist and suppress future prompts, or
- if there is no valid Chrome/Gemini auth session, skip prompting repeatedly and fail with a direct actionable message.
Extra context
In this repro, user was not signed into gemini.google.com in Chrome yet.
That may explain search failure, but it is still surprising to get repeated password prompts before any successful auth path is available.
README currently mentions first-time Keychain access may prompt once. This report is specifically about repeated prompts and "Always Allow" not sticking.
Summary
On macOS,
pi-web-accessrepeatedly shows a system Keychain password prompt for Chrome cookie access:Even after entering the password and clicking "Always Allow", the same prompt keeps appearing on later tool calls.
Environment
0.55.00.10.2macOS 26.3 (25D125)pi install npm:pi-web-accessRepro
pi-web-access~/.pi/web-search.jsonwithoutperplexityApiKey/geminiApiKeyweb_search(...)from Pi (provider auto/gemini path)web_search(...)againActual
The Keychain popup keeps reappearing, despite selecting "Always Allow".
Expected
Either:
Extra context
In this repro, user was not signed into
gemini.google.comin Chrome yet.That may explain search failure, but it is still surprising to get repeated password prompts before any successful auth path is available.
README currently mentions first-time Keychain access may prompt once. This report is specifically about repeated prompts and "Always Allow" not sticking.