@steipete/oracle 0.21.0 → 0.21.1

package/dist/bin/oracle-cli.js

@@ -651,7 +651,7 @@ program
     .option("--remote-host <host:port>", "Delegate browser runs to a remote `oracle serve` instance.")
     .option("--remote-token <token>", "Access token for the remote `oracle serve` instance.")
     .action(async (sessionId, _options, cmd) => {
-    const restartOptions = cmd.opts();
+    const restartOptions = cmd.optsWithGlobals();
     await restartSession(sessionId, restartOptions);
 });
 function buildRunOptions(options, overrides = {}) {
@@ -1462,9 +1462,9 @@ async function runRootCommand(options) {
     });
     let browserDeps;
     if (browserConfig && remoteHost) {
-        const { createRemoteBrowserExecutor } = await import("../src/remote/client.js");
+        const { resolveBrowserExecutor } = await import("../src/browser/executor.js");
         browserDeps = {
-            executeBrowser: createRemoteBrowserExecutor({ host: remoteHost, token: remoteToken }),
+            executeBrowser: await resolveBrowserExecutor({ ...resolvedOptions, model: activeModel }, { host: remoteHost, token: remoteToken }),
         };
         console.log(chalk.dim(`Routing browser automation to remote host ${remoteHost}`));
     }
@@ -1776,9 +1776,12 @@ async function restartSession(sessionId, options) {
     }
     let browserDeps;
     if (browserConfig && remoteHost) {
-        const { createRemoteBrowserExecutor } = await import("../src/remote/client.js");
+        const { resolveBrowserExecutor } = await import("../src/browser/executor.js");
         browserDeps = {
-            executeBrowser: createRemoteBrowserExecutor({ host: remoteHost, token: remoteToken }),
+            executeBrowser: await resolveBrowserExecutor(runOptions, {
+                host: remoteHost,
+                token: remoteToken,
+            }),
         };
         console.log(chalk.dim(`Routing browser automation to remote host ${remoteHost}`));
     }

package/dist/docs-site/browser-mode.html

@@ -515,13 +515,14 @@ body:not(.home) .doc>h1:first-child{display:none}
 <p>``<code>bash oracle serve </code>``</p>
 <p>Oracle picks a free port, launches Chrome, starts an HTTP/SSE API, and prints:</p>
 <p>``<code> Listening at 0.0.0.0:9473 Access token: c4e5f9... </code>``</p>
-<p>Use <code>--host</code>, <code>--port</code>, or <code>--token</code> to override the defaults if needed. On first use, sign in to ChatGPT in the dedicated automation Chrome window. The service keeps that profile for later runs.</p>
+<p>Use <code>--host</code>, <code>--port</code>, or <code>--token</code> to override the defaults if needed. On first use, sign in to ChatGPT or Gemini in the dedicated automation Chrome window, according to the models you use. The service keeps that profile for later runs.</p>
 <ol>
 <li><strong>Run from your laptop</strong></li>
 </ol>
 <p>``<code>bash oracle --engine browser \ --remote-host 192.168.64.2:9473 \ --remote-token c4e5f9... \ --prompt &quot;Summarize the incident doc&quot; \ --file docs/incidents/latest.md </code>``</p>
 <ul>
 <li><code>--remote-host</code> points the CLI at the VM.</li>
+<li><code>--model gemini-3.5-flash</code> (or another supported Gemini browser model) selects the Gemini web executor on the host. Upgrade both endpoints for remote Gemini; see <a href="gemini.html">Gemini</a> for supported options. GPT models keep the ChatGPT browser path.</li>
 <li><code>--remote-token</code> matches the token printed by <code>oracle serve</code> (set <code>ORACLE_REMOTE_TOKEN</code> to avoid repeating it).</li>
 <li>You can also set defaults in <code>~/.oracle/config.json</code> (<code>browser.remoteHost</code>, <code>browser.remoteToken</code>) so you don’t need the flags; env vars still override those when present.</li>
 <li>Cookies are <strong>not</strong> transferred from your laptop. The service reuses the dedicated automation profile on the host.</li>

package/dist/docs-site/gemini.html

@@ -289,10 +289,10 @@ body:not(.home) .doc>h1:first-child{display:none}
 <li>Legacy <code>gemini-3-pro</code>, <code>gemini-2.5-pro</code>, and <code>gemini-2.5-flash</code> browser names remain accepted and map to current Gemini web models.</li>
 <li>If your logged-in Gemini account can’t access the requested model, Oracle auto-falls back to Gemini 3.1 Flash-Lite and logs the fallback in verbose mode.</li>
 <li>Pass <code>--no-gemini-fallback</code> to fail instead when the requested web model is unavailable.</li>
-<li>If Google&#39;s session response exceeds Node&#39;s header limit, start Oracle with <code>NODE_OPTIONS=--max-http-header-size=65536</code> (append this to existing Node options). Oracle reports this condition explicitly and retains the process&#39;s configured proxy/TLS transport.</li>
+<li>Gemini web requests accept response headers up to 64 KiB automatically, including Google&#39;s large security and reporting policies; no Node options are required. These requests honor <code>HTTP_PROXY</code>, <code>HTTPS_PROXY</code>, and <code>NO_PROXY</code> (including lowercase equivalents) and Node&#39;s TLS trust configuration.</li>
 <li>This path runs fully in Node/TypeScript (no Python/venv dependency).</li>
 <li>Local MCP consultations and detached workers use the same Gemini executor as the CLI and preserve the session&#39;s saved Gemini options. The explicit model key takes precedence over ChatGPT picker labels.</li>
-<li>Oracle&#39;s remote browser service supports ChatGPT only. Gemini requests with <code>--remote-host</code> are rejected before submission; run Gemini locally instead.</li>
+<li>Gemini browser runs also support <code>--remote-host</code>. Upgrade both endpoints, sign into Gemini on the service host, then run <code>oracle --engine browser --model gemini-3.5-flash --remote-host &lt;host:port&gt; --remote-token &lt;token&gt; --prompt &quot;Say OK.&quot;</code>. New runs and restarts dispatch the Gemini web executor on that host; Google cookies and browser state stay there. Host manual-login profiles and <code>oracle serve --browser-attach-running</code> are supported. Text, file attachments, YouTube prompts, thoughts, and <code>--no-gemini-fallback</code> are forwarded; image generation/editing still require a local Gemini run.</li>
 <li><code>--browser-model-strategy</code> only affects ChatGPT automation; Gemini web always uses the explicit Gemini model ID.</li>
 <li><code>gemini-3-deep-think</code> is browser-only for now. <code>--engine api</code> rejects it instead of silently falling back to regular Gemini Pro.</li>
 <li>Oracle intentionally does not expose generic <code>low</code> / <code>medium</code> / <code>high</code> Gemini aliases. Explicit IDs keep model choice, billing, and thinking-effort configuration distinct.</li>
@@ -313,6 +313,7 @@ body:not(.home) .doc>h1:first-child{display:none}
 <ul>
 <li><code>src/gemini-web/models.ts</code> — centralizes current private web model headers, legacy aliases, and fallback selection.</li>
 <li><code>src/gemini-web/client.ts</code> — talks to <code>gemini.google.com</code> and downloads generated images via authenticated <code>gg-dl</code> redirects.</li>
+<li><code>src/gemini-web/http.ts</code> — uses a reusable, Gemini-only Undici dispatcher with a 64 KiB response-header limit. It does not change the global dispatcher or replay failed requests. Embedders with custom dispatcher/proxy/TLS settings can use <code>createGeminiWebDispatcher(options)</code> and pass <code>dispatcher</code> to <code>fetchGeminiWebResource</code>; an explicitly supplied dispatcher owns its header limit. Global dispatcher customizations do not configure this dedicated transport.</li>
 <li><code>src/gemini-web/executor.ts</code> — browser-engine executor for Gemini (loads Chrome cookies and runs the web client).</li>
 </ul>
 <h2 id="testing"><a class="anchor" href="#testing" aria-label="Anchor link">#</a>Testing</h2>

package/dist/src/browser/executor.js

@@ -1,6 +1,13 @@
 import { resolveBrowserProvider } from "./provider.js";
-export async function resolveLocalBrowserExecutor(options) {
+export async function resolveBrowserExecutor(options, remote) {
     const provider = resolveBrowserProvider(options.model);
+    if (!provider) {
+        throw new Error(`Unsupported browser model: ${options.model}. Use a GPT or Gemini model.`);
+    }
+    if (remote) {
+        const { createRemoteBrowserExecutor } = await import("../remote/client.js");
+        return createRemoteBrowserExecutor({ ...remote, runOptions: options });
+    }
     if (provider === "gemini") {
         const { createGeminiWebExecutor } = await import("../gemini-web/index.js");
         return createGeminiWebExecutor({
@@ -13,7 +20,5 @@ export async function resolveLocalBrowserExecutor(options) {
             allowModelFallback: options.geminiAllowModelFallback,
         });
     }
-    if (provider === "chatgpt")
-        return (await import("../browserMode.js")).runBrowserMode;
-    throw new Error(`Unsupported browser model: ${options.model}. Use a GPT or Gemini model.`);
+    return (await import("../browserMode.js")).runBrowserMode;
 }

package/dist/src/browser/provider.js

@@ -8,4 +8,18 @@ export function resolveBrowserProvider(model) {
         return "chatgpt";
     return undefined;
 }
-export const REMOTE_GEMINI_UNSUPPORTED_MESSAGE = "Gemini browser runs are supported locally; remote browser services support ChatGPT only.";
+export function resolveRemoteBrowserModel(model, desiredModel) {
+    if (model !== undefined) {
+        if (typeof model === "string" && resolveBrowserProvider(model))
+            return model;
+        throw new Error(`Unsupported browser model: ${String(model)}. Use a GPT or Gemini model.`);
+    }
+    if (typeof desiredModel === "string" && resolveBrowserProvider(desiredModel))
+        return desiredModel;
+    // Older ChatGPT clients send only a picker label, or omit the selection entirely.
+    if (desiredModel == null ||
+        (typeof desiredModel === "string" &&
+            /^(?:|latest|auto|pro|thinking|instant)(?:\s.*)?$/i.test(desiredModel.trim())))
+        return undefined;
+    throw new Error(`Unsupported browser model: ${String(desiredModel)}. Use a GPT or Gemini model.`);
+}

package/dist/src/browser/sessionRunner.js

@@ -1,7 +1,7 @@
 import chalk from "chalk";
 import { formatTokenCount } from "../oracle/runUtils.js";
 import { formatFinishLine } from "../oracle/finishLine.js";
-import { resolveLocalBrowserExecutor } from "./executor.js";
+import { resolveBrowserExecutor } from "./executor.js";
 import { DEFAULT_BROWSER_CONFIG } from "./config.js";
 import { redactBrowserConfigForDebugLog } from "./configLogging.js";
 import { assembleBrowserPrompt, cleanupGeneratedBrowserBundles, materializeBrowserFallback, } from "./prompt.js";
@@ -67,7 +67,7 @@ export async function runBrowserSessionExecution({ runOptions, browserConfig, cw
     if (signal?.aborted) {
         throw new BrowserRunCancelledError();
     }
-    const executeBrowser = deps.executeBrowser ?? (await resolveLocalBrowserExecutor(runOptions));
+    const executeBrowser = deps.executeBrowser ?? (await resolveBrowserExecutor(runOptions));
     try {
         promptArtifacts = await Promise.race([
             assemblePrompt(runOptions, { cwd }).then(async (artifacts) => {

package/dist/src/gemini-web/browserSessionManager.js

@@ -1,7 +1,8 @@
 import path from "node:path";
 import os from "node:os";
 import { mkdir } from "node:fs/promises";
-import { launchChrome, connectWithNewTab, closeTab } from "../browser/chromeLifecycle.js";
+import { launchChrome, connectWithNewTab, connectToRemoteChrome, closeTab, } from "../browser/chromeLifecycle.js";
+import { resolveAttachRunningConnection } from "../browser/attachRunning.js";
 import { resolveBrowserConfig } from "../browser/config.js";
 import { readDevToolsPort, writeDevToolsActivePort, writeChromePid, cleanupStaleProfileState, verifyDevToolsReachable, } from "../browser/profileState.js";
 export async function openGeminiBrowserSession(input) {
@@ -12,8 +13,20 @@ export async function openGeminiBrowserSession(input) {
         keepBrowser: browserConfig?.keepBrowser ?? keepBrowserDefault,
     });
     const profileDir = resolvedConfig.manualLoginProfileDir ?? path.join(os.homedir(), ".oracle", "browser-profile");
-    await mkdir(profileDir, { recursive: true });
     const keepBrowser = Boolean(resolvedConfig.keepBrowser);
+    if (resolvedConfig.attachRunning || resolvedConfig.remoteChrome) {
+        const logger = log ?? (() => { });
+        const endpoint = await resolveAttachRunningConnection(resolvedConfig, logger);
+        const connection = await connectToRemoteChrome(endpoint.host, endpoint.port, logger, "about:blank", endpoint.browserWSEndpoint, { approvalWaitMs: resolvedConfig.approvalWaitMs, fallbackToDefault: false });
+        return {
+            profileDir: endpoint.profileRoot ?? profileDir,
+            port: endpoint.port,
+            client: connection.client,
+            targetId: connection.targetId,
+            close: () => connection.close({ preserveTarget: keepBrowser }),
+        };
+    }
+    await mkdir(profileDir, { recursive: true });
     let port = await readDevToolsPort(profileDir);
     let launchedChrome = null;
     let chromeWasLaunched = false;

package/dist/src/gemini-web/executor.js

@@ -228,7 +228,7 @@ async function loadGeminiCookies(browserConfig, log, options) {
     if (hasInlineRequired) {
         return inlineResult;
     }
-    const manualNoKeychain = Boolean(browserConfig?.manualLogin) || Boolean(options?.preferManualNoKeychain);
+    const manualNoKeychain = Boolean(browserConfig?.manualLogin || browserConfig?.attachRunning || browserConfig?.remoteChrome) || Boolean(options?.preferManualNoKeychain);
     if (manualNoKeychain) {
         log?.("[gemini-web] Using manual-login cookie extraction path (no keychain cookie read).");
         const cdpResult = await loadGeminiCookiesFromCDP(browserConfig, log);

package/dist/src/gemini-web/http.js

@@ -1,6 +1,15 @@
+import { EnvHttpProxyAgent } from "undici";
+// Gemini's /app policy/reporting headers exceed Node's default 16 KiB limit.
+const GEMINI_MAX_HEADER_SIZE = 64 * 1024;
+let geminiDispatcher;
+export function createGeminiWebDispatcher(options = {}) {
+    return new EnvHttpProxyAgent({ ...options, maxHeaderSize: GEMINI_MAX_HEADER_SIZE });
+}
 export async function fetchGeminiWebResource(url, init = {}) {
     try {
-        return await fetch(url, init);
+        const dispatcher = init.dispatcher ?? (geminiDispatcher ??= createGeminiWebDispatcher());
+        const options = { ...init, dispatcher };
+        return await fetch(url, options);
     }
     catch (error) {
         const cause = error instanceof Error ? error.cause : undefined;
@@ -8,7 +17,7 @@ export async function fetchGeminiWebResource(url, init = {}) {
             typeof cause === "object" &&
             "code" in cause &&
             cause.code === "UND_ERR_HEADERS_OVERFLOW") {
-            throw new Error("Gemini response headers exceed Node's configured limit. Start Oracle with NODE_OPTIONS=--max-http-header-size=65536 (preserving any existing Node options) and retry.", { cause: error });
+            throw new Error("Gemini response headers exceed the HTTP transport's configured limit (Oracle's default is 64 KiB).", { cause: error });
         }
         throw error;
     }

package/dist/src/remote/client.js

@@ -11,16 +11,18 @@ import { checkRemoteHealth } from "./health.js";
 import { parseHostPort } from "../bridge/connection.js";
 import { BrowserRunCancelledError } from "../oracle/errors.js";
 import { resolveSiblingImagePath } from "../browser/chatgptImages.js";
-import { resolveBrowserProvider, REMOTE_GEMINI_UNSUPPORTED_MESSAGE } from "../browser/provider.js";
-export function createRemoteBrowserExecutor({ host, token }) {
+import { resolveBrowserProvider, resolveRemoteBrowserModel } from "../browser/provider.js";
+export function createRemoteBrowserExecutor({ host, token, runOptions }) {
     // Return a drop-in replacement for runBrowserMode so the browser session runner can stay unchanged.
     return async function remoteBrowserExecutor(options) {
-        if (options.model !== undefined && !resolveBrowserProvider(options.model)) {
-            throw new Error(`Unsupported browser model: ${options.model}. Remote services support ChatGPT only.`);
-        }
-        if (resolveBrowserProvider(options.model) === "gemini" ||
-            resolveBrowserProvider(options.config?.desiredModel) === "gemini") {
-            throw new Error(REMOTE_GEMINI_UNSUPPORTED_MESSAGE);
+        const model = resolveRemoteBrowserModel(options.model ?? runOptions?.model, options.config?.desiredModel);
+        const gemini = resolveBrowserProvider(model) === "gemini";
+        if (gemini &&
+            (runOptions?.editImage ||
+                runOptions?.generateImage ||
+                options.generateImagePath ||
+                options.outputPath)) {
+            throw new Error("Remote Gemini image generation and editing are not supported; run these requests locally.");
         }
         if (options.config?.researchMode === "search") {
             throw new Error("Web Search is a local browser pilot; --remote-host does not negotiate this capability yet. Use local Chrome or --browser-attach-running.");
@@ -46,8 +48,22 @@ export function createRemoteBrowserExecutor({ host, token }) {
             prompt: options.prompt,
             attachments: await serializeAttachments(options.attachments ?? []),
             fallbackSubmission: await serializeFallback(options.fallbackSubmission, { host, token }),
-            browserConfig: options.config ?? {},
+            browserConfig: {
+                ...options.config,
+                // Keep old hosts fail-closed for Gemini even when the picker label is unrelated.
+                ...(gemini ? { desiredModel: model } : {}),
+                inlineCookies: null,
+                inlineCookiesSource: null,
+            },
             options: {
+                model,
+                ...(gemini
+                    ? {
+                        youtube: runOptions?.youtube,
+                        geminiShowThoughts: runOptions?.geminiShowThoughts,
+                        geminiAllowModelFallback: runOptions?.geminiAllowModelFallback,
+                    }
+                    : {}),
                 heartbeatIntervalMs: options.heartbeatIntervalMs,
                 verbose: options.verbose,
                 sessionId: options.sessionId,

package/dist/src/remote/server.js

@@ -9,7 +9,7 @@ import { spawn, spawnSync } from "node:child_process";
 import { mkdtemp, rm, mkdir, writeFile, stat, realpath } from "node:fs/promises";
 import chalk from "chalk";
 import { materializeStagedFallbackBundle } from "../browser/prompt.js";
-import { runBrowserMode } from "../browserMode.js";
+import { resolveBrowserExecutor } from "../browser/executor.js";
 import { resolveBrowserConfig } from "../browser/config.js";
 import { RunSlots } from "./runSlots.js";
 export { RunSlots } from "./runSlots.js";
@@ -19,7 +19,7 @@ import { getCookies } from "@steipete/sweet-cookie";
 import { CHATGPT_URL } from "../browser/constants.js";
 import { getCliVersion } from "../version.js";
 import { getOracleHomeDir } from "../oracleHome.js";
-import { resolveBrowserProvider, REMOTE_GEMINI_UNSUPPORTED_MESSAGE } from "../browser/provider.js";
+import { resolveBrowserProvider, resolveRemoteBrowserModel } from "../browser/provider.js";
 import { cleanupStaleProfileState, readDevToolsPort, verifyDevToolsReachable, writeChromePid, writeDevToolsActivePort, } from "../browser/profileState.js";
 import { normalizeChatgptUrl } from "../browser/utils.js";
 import { computeFileSha256, resolveSessionArtifactsDir, sanitizeArtifactFilename, sanitizeArtifactMimeType, validateArtifactFile, } from "../browser/artifacts.js";
@@ -60,7 +60,6 @@ function validateAdmissionOptions(options) {
         throw new Error("--max-queued-runs must be a nonnegative integer.");
 }
 export async function createRemoteServer(options = {}, deps = {}) {
-    const runBrowser = deps.runBrowser ?? runBrowserMode;
     const attachedBrowser = usesHostBrowserAttachment(options.browserConfig);
     const manualLoginDefault = !attachedBrowser && options.manualLoginDefault;
     const hostBrowserConfig = options.browserConfig
@@ -231,13 +230,20 @@ export async function createRemoteServer(options = {}, deps = {}) {
             await abandon();
             return;
         }
-        if (resolveBrowserProvider(payload.browserConfig?.desiredModel) === "gemini") {
+        let model;
+        try {
+            model = resolveRemoteBrowserModel(payload.options.model, payload.browserConfig?.desiredModel);
+            if (resolveBrowserProvider(model) === "gemini" && payload.options.imageOutputRequested) {
+                throw new Error("Remote Gemini image generation and editing are not supported; run these requests locally.");
+            }
+        }
+        catch (error) {
             await abandon();
             if (!res.destroyed) {
                 res.writeHead(400, { "Content-Type": "application/json" });
                 res.end(JSON.stringify({
                     error: "unsupported_browser_provider",
-                    message: REMOTE_GEMINI_UNSUPPORTED_MESSAGE,
+                    message: error instanceof Error ? error.message : String(error),
                 }));
             }
             return;
@@ -362,8 +368,16 @@ export async function createRemoteServer(options = {}, deps = {}) {
                     logger(`[serve] Enforcing manual-login profile at ${options.manualLoginProfileDir ?? "default"} for remote run ${runId}`);
                 }
             }
+            const runBrowser = deps.runBrowser ??
+                (await resolveBrowserExecutor({
+                    model: model ?? "gpt-5.5",
+                    youtube: typeof payload.options.youtube === "string" ? payload.options.youtube : undefined,
+                    geminiShowThoughts: payload.options.geminiShowThoughts === true,
+                    geminiAllowModelFallback: payload.options.geminiAllowModelFallback !== false,
+                }));
             const result = await runBrowser({
                 prompt: payload.prompt,
+                model,
                 attachments,
                 fallbackSubmission,
                 config: payload.browserConfig,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@steipete/oracle",
-  "version": "0.21.0",
+  "version": "0.21.1",
   "description": "CLI wrapper around OpenAI Responses API with GPT-5.6 Sol, GPT-5.6, GPT-5.5 Pro, GPT-5.5, GPT-5.4, GPT-5.2, GPT-5.1, and GPT-5.1 Codex high reasoning modes.",
   "keywords": [],
   "homepage": "https://askoracle.sh",
@@ -79,6 +79,7 @@
     "shiki": "^4.4.3",
     "toasted-notifier": "^10.1.0",
     "tokentally": "^0.1.6",
+    "undici": "^7.29.1",
     "zod": "^4.6.2"
   },
   "devDependencies": {