@steipete/oracle 0.8.5 → 0.9.0

package/dist/src/oracle/client.js

@@ -1,34 +1,63 @@
-import OpenAI, { AzureOpenAI } from 'openai';
+import OpenAI from 'openai';
 import path from 'node:path';
 import { createRequire } from 'node:module';
 import { createGeminiClient } from './gemini.js';
 import { createClaudeClient } from './claude.js';
 import { isOpenRouterBaseUrl } from './modelResolver.js';
+/**
+ * Known native API base URLs that should still use their dedicated SDKs.
+ * Any other custom base URL is treated as an OpenAI-compatible proxy and
+ * all models are routed through the chat/completions adapter.
+ */
+const NATIVE_API_HOSTS = [
+    'api.openai.com',
+    'api.anthropic.com',
+    'generativelanguage.googleapis.com',
+    'api.x.ai',
+];
+export function isCustomBaseUrl(baseUrl) {
+    if (!baseUrl)
+        return false;
+    try {
+        const url = new URL(baseUrl);
+        return !NATIVE_API_HOSTS.some((host) => url.hostname === host || url.hostname.endsWith(`.${host}`));
+    }
+    catch {
+        return false;
+    }
+}
+export function buildAzureResponsesBaseUrl(endpoint) {
+    return `${endpoint.replace(/\/+$/, '')}/openai/v1`;
+}
 export function createDefaultClientFactory() {
     const customFactory = loadCustomClientFactory();
     if (customFactory)
         return customFactory;
     return (key, options) => {
-        if (options?.model?.startsWith('gemini')) {
-            // Gemini client uses its own SDK; allow passing the already-resolved id for transparency/logging.
-            return createGeminiClient(key, options.model, options.resolvedModelId);
-        }
-        if (options?.model?.startsWith('claude')) {
-            return createClaudeClient(key, options.model, options.resolvedModelId, options.baseUrl);
+        const openRouter = isOpenRouterBaseUrl(options?.baseUrl);
+        const customProxy = isCustomBaseUrl(options?.baseUrl);
+        // When using any custom/proxy base URL (OpenRouter, LiteLLM, vLLM, Together, etc.),
+        // route ALL models through the OpenAI chat/completions adapter instead of native SDKs
+        // which would reject the proxy's API key.
+        if (!openRouter && !customProxy) {
+            if (options?.model?.startsWith('gemini')) {
+                // Gemini client uses its own SDK; allow passing the already-resolved id for transparency/logging.
+                return createGeminiClient(key, options.model, options.resolvedModelId);
+            }
+            if (options?.model?.startsWith('claude')) {
+                return createClaudeClient(key, options.model, options.resolvedModelId, options.baseUrl);
+            }
         }
         let instance;
-        const openRouter = isOpenRouterBaseUrl(options?.baseUrl);
         const defaultHeaders = openRouter ? buildOpenRouterHeaders() : undefined;
         const httpTimeoutMs = typeof options?.httpTimeoutMs === 'number' && Number.isFinite(options.httpTimeoutMs) && options.httpTimeoutMs > 0
             ? options.httpTimeoutMs
             : 20 * 60 * 1000;
         if (options?.azure?.endpoint) {
-            instance = new AzureOpenAI({
+            instance = new OpenAI({
                 apiKey: key,
-                endpoint: options.azure.endpoint,
-                apiVersion: options.azure.apiVersion,
-                deployment: options.azure.deployment,
                 timeout: httpTimeoutMs,
+                baseURL: buildAzureResponsesBaseUrl(options.azure.endpoint),
             });
         }
         else {
@@ -39,7 +68,7 @@ export function createDefaultClientFactory() {
                 defaultHeaders,
             });
         }
-        if (openRouter) {
+        if (openRouter || customProxy) {
             return buildOpenRouterCompletionClient(instance);
         }
         return {

package/dist/src/oracle/config.js

@@ -2,19 +2,19 @@ import { countTokens as countTokensGpt5 } from 'gpt-tokenizer/model/gpt-5';
 import { countTokens as countTokensGpt5Pro } from 'gpt-tokenizer/model/gpt-5-pro';
 import { countTokens as countTokensAnthropicRaw } from '@anthropic-ai/tokenizer';
 import { stringifyTokenizerInput } from './tokenStringifier.js';
-export const DEFAULT_MODEL = 'gpt-5.2-pro';
-export const PRO_MODELS = new Set(['gpt-5.1-pro', 'gpt-5-pro', 'gpt-5.2-pro', 'claude-4.5-sonnet', 'claude-4.1-opus']);
+export const DEFAULT_MODEL = 'gpt-5.4-pro';
+export const PRO_MODELS = new Set(['gpt-5.4-pro', 'gpt-5.1-pro', 'gpt-5-pro', 'gpt-5.2-pro', 'claude-4.5-sonnet', 'claude-4.1-opus']);
 const countTokensAnthropic = (input) => countTokensAnthropicRaw(stringifyTokenizerInput(input));
 export const MODEL_CONFIGS = {
     'gpt-5.1-pro': {
         model: 'gpt-5.1-pro',
-        apiModel: 'gpt-5.2-pro',
+        apiModel: 'gpt-5.4-pro',
         provider: 'openai',
         tokenizer: countTokensGpt5Pro,
         inputLimit: 196000,
         pricing: {
-            inputPerToken: 21 / 1_000_000,
-            outputPerToken: 168 / 1_000_000,
+            inputPerToken: 30 / 1_000_000,
+            outputPerToken: 180 / 1_000_000,
         },
         reasoning: null,
     },
@@ -51,6 +51,28 @@ export const MODEL_CONFIGS = {
         },
         reasoning: { effort: 'high' },
     },
+    'gpt-5.4': {
+        model: 'gpt-5.4',
+        provider: 'openai',
+        tokenizer: countTokensGpt5,
+        inputLimit: 196000,
+        pricing: {
+            inputPerToken: 2.5 / 1_000_000,
+            outputPerToken: 15 / 1_000_000,
+        },
+        reasoning: { effort: 'xhigh' },
+    },
+    'gpt-5.4-pro': {
+        model: 'gpt-5.4-pro',
+        provider: 'openai',
+        tokenizer: countTokensGpt5Pro,
+        inputLimit: 196000,
+        pricing: {
+            inputPerToken: 30 / 1_000_000,
+            outputPerToken: 180 / 1_000_000,
+        },
+        reasoning: { effort: 'xhigh' },
+    },
     'gpt-5.2': {
         model: 'gpt-5.2',
         provider: 'openai',
@@ -76,15 +98,29 @@ export const MODEL_CONFIGS = {
     },
     'gpt-5.2-pro': {
         model: 'gpt-5.2-pro',
+        apiModel: 'gpt-5.4-pro',
         provider: 'openai',
         tokenizer: countTokensGpt5Pro,
         inputLimit: 196000,
         pricing: {
-            inputPerToken: 21 / 1_000_000,
-            outputPerToken: 168 / 1_000_000,
+            inputPerToken: 30 / 1_000_000,
+            outputPerToken: 180 / 1_000_000,
         },
         reasoning: { effort: 'xhigh' },
     },
+    'gemini-3.1-pro': {
+        model: 'gemini-3.1-pro',
+        provider: 'google',
+        tokenizer: countTokensGpt5Pro,
+        inputLimit: 200000,
+        pricing: {
+            inputPerToken: 2 / 1_000_000,
+            outputPerToken: 12 / 1_000_000,
+        },
+        reasoning: null,
+        supportsBackground: false,
+        supportsSearch: true,
+    },
     'gemini-3-pro': {
         model: 'gemini-3-pro',
         provider: 'google',

package/dist/src/oracle/errors.js

@@ -96,12 +96,12 @@ export function toTransportError(error, model) {
             apiError.message ||
             (apiError.status ? `${apiError.status} OpenAI API error` : 'OpenAI API error');
         // Friendly guidance when a pro-tier model isn't available on this base URL / API key.
-        if (model === 'gpt-5.2-pro' &&
+        if (model === 'gpt-5.4-pro' &&
             (code === 'model_not_found' ||
                 messageText.includes('does not exist') ||
                 messageText.includes('unknown model') ||
                 messageText.includes('model_not_found'))) {
-            return new OracleTransportError('model-unavailable', 'gpt-5.2-pro is not available on this API base/key. Try gpt-5-pro or gpt-5.2, or switch to the browser engine.', apiError);
+            return new OracleTransportError('model-unavailable', 'gpt-5.4-pro is not available on this API base/key. Try gpt-5-pro or gpt-5.4, or switch to the browser engine.', apiError);
         }
         if (apiError.status === 404 || apiError.status === 405) {
             return new OracleTransportError('unsupported-endpoint', 'HTTP 404/405 from the Responses API; this base URL or gateway likely does not expose /v1/responses. Set OPENAI_BASE_URL to api.openai.com/v1, update your Azure API version/deployment, or use the browser engine.', apiError);

package/dist/src/oracle/files.js

@@ -2,10 +2,10 @@ import fs from 'node:fs/promises';
 import path from 'node:path';
 import fg from 'fast-glob';
 import { FileValidationError } from './errors.js';
-const MAX_FILE_SIZE_BYTES = 1 * 1024 * 1024; // 1 MB
+export const DEFAULT_MAX_FILE_SIZE_BYTES = 1 * 1024 * 1024; // 1 MB
 const DEFAULT_FS = fs;
 const DEFAULT_IGNORED_DIRS = ['node_modules', 'dist', 'coverage', '.git', '.turbo', '.next', 'build', 'tmp'];
-export async function readFiles(filePaths, { cwd = process.cwd(), fsModule = DEFAULT_FS, maxFileSizeBytes = MAX_FILE_SIZE_BYTES, readContents = true, } = {}) {
+export async function readFiles(filePaths, { cwd = process.cwd(), fsModule = DEFAULT_FS, maxFileSizeBytes = DEFAULT_MAX_FILE_SIZE_BYTES, readContents = true, } = {}) {
     if (!filePaths || filePaths.length === 0) {
         return [];
     }
@@ -76,7 +76,7 @@ export async function readFiles(filePaths, { cwd = process.cwd(), fsModule = DEF
         accepted.push(filePath);
     }
     if (oversized.length > 0) {
-        throw new FileValidationError(`The following files exceed the 1 MB limit:\n- ${oversized.join('\n- ')}`, {
+        throw new FileValidationError(`The following files exceed the ${formatBytes(maxFileSizeBytes)} limit:\n- ${oversized.join('\n- ')}`, {
             files: oversized,
             limitBytes: maxFileSizeBytes,
         });
@@ -347,13 +347,28 @@ function stripTrailingSlashes(value) {
 }
 function formatBytes(size) {
     if (size >= 1024 * 1024) {
-        return `${(size / (1024 * 1024)).toFixed(1)} MB`;
+        return `${formatScaled(size / (1024 * 1024))} MB`;
     }
     if (size >= 1024) {
-        return `${(size / 1024).toFixed(1)} KB`;
+        return `${formatScaled(size / 1024)} KB`;
     }
     return `${size} B`;
 }
+function formatScaled(value) {
+    return value.toFixed(1).replace(/\.0$/, '');
+}
+export function normalizeMaxFileSizeBytes(value, source = 'max file size') {
+    if (value == null || value === '') {
+        return undefined;
+    }
+    const parsed = typeof value === 'number'
+        ? value
+        : Number.parseInt(typeof value === 'string' ? value.trim() : String(value), 10);
+    if (!Number.isSafeInteger(parsed) || parsed <= 0) {
+        throw new Error(`${source} must be a positive integer number of bytes.`);
+    }
+    return parsed;
+}
 function relativePath(targetPath, cwd) {
     const relative = path.relative(cwd, targetPath);
     return relative || targetPath;

package/dist/src/oracle/gemini.js

@@ -1,6 +1,9 @@
 import { GoogleGenAI, HarmCategory, HarmBlockThreshold } from '@google/genai';
 const MODEL_ID_MAP = {
+    'gemini-3.1-pro': 'gemini-3.1-pro-preview',
     'gemini-3-pro': 'gemini-3-pro-preview',
+    'gpt-5.4': 'gpt-5.4',
+    'gpt-5.4-pro': 'gpt-5.4-pro',
     'gpt-5.1-pro': 'gpt-5.1-pro',
     'gpt-5-pro': 'gpt-5-pro',
     'gpt-5.1': 'gpt-5.1',

package/dist/src/oracle/modelResolver.js

@@ -38,9 +38,30 @@ export function safeModelSlug(model) {
 }
 const catalogCache = new Map();
 const CACHE_TTL_MS = 5 * 60 * 1000;
+const MAX_CACHE_ENTRIES = 20;
+/**
+ * Prune stale entries from the catalog cache to prevent unbounded growth.
+ * Removes entries older than TTL and enforces a maximum cache size.
+ */
+function pruneCatalogCache(now) {
+    // Remove stale entries first
+    for (const [key, entry] of catalogCache) {
+        if (now - entry.fetchedAt >= CACHE_TTL_MS) {
+            catalogCache.delete(key);
+        }
+    }
+    // If still over limit, evict oldest fetched entries (not true LRU; no last-access tracking).
+    if (catalogCache.size > MAX_CACHE_ENTRIES) {
+        const entries = [...catalogCache.entries()].sort((a, b) => a[1].fetchedAt - b[1].fetchedAt);
+        const toRemove = entries.slice(0, catalogCache.size - MAX_CACHE_ENTRIES);
+        for (const [key] of toRemove) {
+            catalogCache.delete(key);
+        }
+    }
+}
 async function fetchOpenRouterCatalog(apiKey, fetcher) {
-    const cached = catalogCache.get(apiKey);
     const now = Date.now();
+    const cached = catalogCache.get(apiKey);
     if (cached && now - cached.fetchedAt < CACHE_TTL_MS) {
         return cached.models;
     }
@@ -55,6 +76,8 @@ async function fetchOpenRouterCatalog(apiKey, fetcher) {
     const json = (await response.json());
     const models = json?.data ?? [];
     catalogCache.set(apiKey, { fetchedAt: now, models });
+    // Prune after insert so the max-size constraint is strictly enforced.
+    pruneCatalogCache(now);
     return models;
 }
 function mapToOpenRouterId(candidate, catalog, providerHint) {
@@ -149,3 +172,12 @@ export async function resolveModelConfig(model, options = {}) {
 export function isProModel(model) {
     return isKnownModel(model) && PRO_MODELS.has(model);
 }
+export function resetOpenRouterCatalogCacheForTest() {
+    catalogCache.clear();
+}
+export function getOpenRouterCatalogCacheSizeForTest() {
+    return catalogCache.size;
+}
+export function getOpenRouterCatalogCacheMaxEntriesForTest() {
+    return MAX_CACHE_ENTRIES;
+}

package/dist/src/oracle/request.js

@@ -11,10 +11,11 @@ export function buildPrompt(basePrompt, files, cwd = process.cwd()) {
     const sectionText = sections.map((section) => section.sectionText).join('\n\n');
     return `${basePrompt.trim()}\n\n${sectionText}`;
 }
-export function buildRequestBody({ modelConfig, systemPrompt, userPrompt, searchEnabled, maxOutputTokens, background, storeResponse, }) {
+export function buildRequestBody({ modelConfig, systemPrompt, userPrompt, searchEnabled, maxOutputTokens, background, storeResponse, previousResponseId, }) {
     const searchToolType = modelConfig.searchToolType ?? 'web_search_preview';
     return {
         model: modelConfig.apiModel ?? modelConfig.model,
+        previous_response_id: previousResponseId ? previousResponseId : undefined,
         instructions: systemPrompt,
         input: [
             {
@@ -37,7 +38,11 @@ export function buildRequestBody({ modelConfig, systemPrompt, userPrompt, search
 export async function renderPromptMarkdown(options, deps = {}) {
     const cwd = deps.cwd ?? process.cwd();
     const fsModule = deps.fs ?? createFsAdapter(fs);
-    const files = await readFiles(options.file ?? [], { cwd, fsModule });
+    const files = await readFiles(options.file ?? [], {
+        cwd,
+        fsModule,
+        maxFileSizeBytes: options.maxFileSizeBytes,
+    });
     const sections = createFileSections(files, cwd);
     const systemPrompt = options.system?.trim() || DEFAULT_SYSTEM_PROMPT;
     const userPrompt = (options.prompt ?? '').trim();

package/dist/src/oracle/run.js

@@ -12,7 +12,7 @@ import { formatElapsed } from './format.js';
 import { formatFinishLine } from './finishLine.js';
 import { getFileTokenStats, printFileTokenStats } from './tokenStats.js';
 import { OracleResponseError, OracleTransportError, PromptValidationError, describeTransportError, toTransportError, } from './errors.js';
-import { createDefaultClientFactory } from './client.js';
+import { createDefaultClientFactory, isCustomBaseUrl } from './client.js';
 import { formatBaseUrlForLog, maskApiKey } from './logging.js';
 import { startHeartbeat } from '../heartbeat.js';
 import { startOscProgress } from './oscProgress.js';
@@ -145,7 +145,7 @@ export async function runOracle(options, deps = {}) {
     const supportsBackground = modelConfig.supportsBackground !== false;
     const useBackground = supportsBackground ? options.background ?? isLongRunningModel : false;
     const inputTokenBudget = options.maxInput ?? modelConfig.inputLimit;
-    const files = await readFiles(options.file ?? [], { cwd, fsModule });
+    const files = await readFiles(options.file ?? [], { cwd, fsModule, maxFileSizeBytes: options.maxFileSizeBytes });
     const searchEnabled = options.search !== false;
     logVerbose(`cwd: ${cwd}`);
     let pendingNoFilesTip = null;
@@ -189,11 +189,17 @@ export async function runOracle(options, deps = {}) {
             : DEFAULT_TIMEOUT_NON_PRO_MS / 1000
         : options.timeoutSeconds;
     const timeoutMs = timeoutSeconds * 1000;
+    const azureDeploymentName = isAzureOpenAI ? options.azure?.deployment?.trim() : undefined;
     // Track the concrete model id we dispatch to (especially for Gemini preview aliases)
     const effectiveModelId = options.effectiveModelId ??
-        (options.model.startsWith('gemini')
-            ? resolveGeminiModelId(options.model)
-            : (modelConfig.apiModel ?? modelConfig.model));
+        (azureDeploymentName
+            ? azureDeploymentName
+            : options.model.startsWith('gemini')
+                ? resolveGeminiModelId(options.model)
+                : (modelConfig.apiModel ?? modelConfig.model));
+    if (!isPreview && options.previousResponseId) {
+        log(dim(`Continuing from response ${options.previousResponseId}`));
+    }
     const requestBody = buildRequestBody({
         modelConfig,
         systemPrompt,
@@ -201,8 +207,11 @@ export async function runOracle(options, deps = {}) {
         searchEnabled,
         maxOutputTokens: options.maxOutput,
         background: useBackground,
-        storeResponse: useBackground,
+        // Storing makes follow-ups possible (Responses API chaining relies on stored response state).
+        storeResponse: useBackground || Boolean(options.previousResponseId),
+        previousResponseId: options.previousResponseId,
     });
+    requestBody.model = effectiveModelId;
     const estimatedInputTokens = estimateRequestTokens(requestBody, modelConfig);
     const tokenLabel = formatTokenEstimate(estimatedInputTokens, (text) => (richTty ? chalk.green(text) : text));
     const fileLabel = richTty ? chalk.magenta(fileCount.toString()) : fileCount.toString();
@@ -225,9 +234,9 @@ export async function runOracle(options, deps = {}) {
             log(dim(`Using ${envVar}=${maskedKey} for model ${modelConfig.model}${resolvedSuffix}`));
         }
         if (!options.suppressHeader &&
-            modelConfig.model === 'gpt-5.1-pro' &&
-            effectiveModelId === 'gpt-5.2-pro') {
-            log(dim('Note: `gpt-5.1-pro` is a stable CLI alias; OpenAI API uses `gpt-5.2-pro`.'));
+            (modelConfig.model === 'gpt-5.1-pro' || modelConfig.model === 'gpt-5.2-pro') &&
+            effectiveModelId === 'gpt-5.4-pro') {
+            log(dim(`Note: \`${modelConfig.model}\` is a stable CLI alias; OpenAI API uses \`gpt-5.4-pro\`.`));
         }
         if (baseUrl) {
             log(dim(`Base URL: ${formatBaseUrlForLog(baseUrl)}`));
@@ -280,10 +289,11 @@ export async function runOracle(options, deps = {}) {
             inputTokenBudget,
         };
     }
+    const proxyCompatibleBaseUrl = baseUrl && (isOpenRouterBaseUrl(baseUrl) || isCustomBaseUrl(baseUrl)) ? baseUrl : undefined;
     const apiEndpoint = modelConfig.model.startsWith('gemini')
-        ? undefined
-        : isOpenRouterBaseUrl(baseUrl)
-            ? baseUrl
+        ? proxyCompatibleBaseUrl
+        : proxyCompatibleBaseUrl
+            ? proxyCompatibleBaseUrl
             : modelConfig.model.startsWith('claude')
                 ? process.env.ANTHROPIC_BASE_URL ?? baseUrl
                 : baseUrl;

package/dist/src/sessionManager.js

@@ -151,9 +151,9 @@ export async function updateModelRunMetadata(sessionId, model, updates) {
 export async function readModelRunMetadata(sessionId, model) {
     return readModelRunFile(sessionId, model);
 }
-export async function initializeSession(options, cwd, notifications) {
+export async function initializeSession(options, cwd, notifications, baseSlugOverride) {
     await ensureSessionStorage();
-    const baseSlug = createSessionId(options.prompt || DEFAULT_SLUG, options.slug);
+    const baseSlug = baseSlugOverride || createSessionId(options.prompt || DEFAULT_SLUG, options.slug);
     const sessionId = await ensureUniqueSessionId(baseSlug);
     const dir = sessionDir(sessionId);
     await ensureDir(dir);
@@ -181,8 +181,12 @@ export async function initializeSession(options, cwd, notifications) {
         options: {
             prompt: options.prompt,
             file: options.file ?? [],
+            maxFileSizeBytes: options.maxFileSizeBytes,
             model: options.model,
             models: modelList,
+            previousResponseId: options.previousResponseId,
+            followupSessionId: options.followupSessionId,
+            followupModel: options.followupModel,
             effectiveModelId: options.effectiveModelId,
             maxInput: options.maxInput,
             system: options.system,
@@ -206,6 +210,13 @@ export async function initializeSession(options, cwd, notifications) {
             zombieTimeoutMs: options.zombieTimeoutMs,
             zombieUseLastActivity: options.zombieUseLastActivity,
             writeOutputPath: options.writeOutputPath,
+            waitPreference: options.waitPreference,
+            youtube: options.youtube,
+            generateImage: options.generateImage,
+            editImage: options.editImage,
+            outputPath: options.outputPath,
+            aspectRatio: options.aspectRatio,
+            geminiShowThoughts: options.geminiShowThoughts,
         },
     };
     await ensureDir(modelsDir(sessionId));

package/dist/src/sessionStore.js

@@ -3,8 +3,8 @@ class FileSessionStore {
     ensureStorage() {
         return ensureSessionStorage();
     }
-    createSession(options, cwd, notifications) {
-        return initializeSession(options, cwd, notifications);
+    createSession(options, cwd, notifications, baseSlugOverride) {
+        return initializeSession(options, cwd, notifications, baseSlugOverride);
     }
     readSession(sessionId) {
         return readSessionMetadata(sessionId);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@steipete/oracle",
-  "version": "0.8.5",
-  "description": "CLI wrapper around OpenAI Responses API with GPT-5.2 Pro (via gpt-5.1-pro alias), GPT-5.2, GPT-5.1, and GPT-5.1 Codex high reasoning modes.",
+  "version": "0.9.0",
+  "description": "CLI wrapper around OpenAI Responses API with GPT-5.4 Pro, GPT-5.4, GPT-5.2, GPT-5.1, and GPT-5.1 Codex high reasoning modes.",
   "type": "module",
   "main": "dist/bin/oracle-cli.js",
   "bin": {
@@ -62,49 +62,49 @@
   "homepage": "https://github.com/steipete/oracle#readme",
   "dependencies": {
     "@anthropic-ai/tokenizer": "^0.0.4",
-    "@google/genai": "^1.35.0",
+    "@google/genai": "^1.44.0",
     "@google/generative-ai": "^0.24.1",
-    "@modelcontextprotocol/sdk": "^1.25.2",
-    "@steipete/sweet-cookie": "^0.1.0",
+    "@modelcontextprotocol/sdk": "^1.27.1",
+    "@steipete/sweet-cookie": "^0.2.0",
     "chalk": "^5.6.2",
     "chrome-launcher": "^1.2.1",
-    "chrome-remote-interface": "^0.33.3",
-    "clipboardy": "^5.0.2",
-    "commander": "^14.0.2",
-    "dotenv": "^17.2.3",
+    "chrome-remote-interface": "^0.34.0",
+    "clipboardy": "^5.3.1",
+    "commander": "^14.0.3",
+    "dotenv": "^17.3.1",
     "fast-glob": "^3.3.3",
     "gpt-tokenizer": "^3.4.0",
-    "inquirer": "13.2.0",
+    "inquirer": "13.3.0",
     "json5": "^2.2.3",
     "kleur": "^4.1.5",
     "markdansi": "0.2.1",
-    "openai": "^6.16.0",
-    "osc-progress": "^0.2.0",
-    "qs": "^6.14.1",
-    "shiki": "^3.21.0",
+    "openai": "^6.27.0",
+    "osc-progress": "^0.3.0",
+    "qs": "^6.15.0",
+    "shiki": "^4.0.1",
     "toasted-notifier": "^10.1.0",
     "tokentally": "^0.1.1",
-    "zod": "^4.3.5"
+    "zod": "^4.3.6"
   },
   "devDependencies": {
     "@anthropic-ai/tokenizer": "^0.0.4",
-    "@biomejs/biome": "^2.3.11",
+    "@biomejs/biome": "^2.4.6",
     "@cdktf/node-pty-prebuilt-multiarch": "0.10.2",
     "@types/chrome-remote-interface": "^0.33.0",
     "@types/inquirer": "^9.0.9",
-    "@types/node": "^25.0.6",
-    "@vitest/coverage-v8": "4.0.17",
-    "devtools-protocol": "0.0.1568893",
-    "es-toolkit": "^1.43.0",
-    "esbuild": "^0.27.2",
-    "puppeteer-core": "^24.35.0",
+    "@types/node": "^25.3.5",
+    "@vitest/coverage-v8": "4.0.18",
+    "devtools-protocol": "0.0.1595872",
+    "es-toolkit": "^1.45.1",
+    "esbuild": "^0.27.3",
+    "puppeteer-core": "^24.38.0",
     "tsx": "^4.21.0",
     "typescript": "^5.9.3",
-    "vitest": "^4.0.17"
+    "vitest": "^4.0.18"
   },
   "pnpm": {
     "overrides": {
-      "devtools-protocol": "0.0.1568893"
+      "devtools-protocol": "0.0.1595872"
     },
     "onlyBuiltDependencies": [
       "@cdktf/node-pty-prebuilt-multiarch",