pi-oracle 0.7.17 → 0.7.19

package/CHANGELOG.md

@@ -1,6 +1,19 @@
 # Changelog
 
-## Unreleased
+## 0.7.19 - 2026-07-16
+
+### Changed
+- refreshed the local Pi/pi-ai development lock, sanity contracts, safe-loader version check, and compatibility guidance for Pi 0.80.9; Oracle does not use the removed SDK auth/session options
+
+## 0.7.18 - 2026-07-14
+
+### Changed
+- refreshed the local Pi/pi-ai development lock, sanity contracts, safe-loader version check, and compatibility guidance for Pi 0.80.7
+- updated the local Pi and pi-ai development baseline to 0.80.6
+- switched provider and mode tool schemas to Pi's Google-compatible `StringEnum` helper
+
+### Fixed
+- made the sanity harness independent of the caller's browser profile layout and installed `agent-browser` sessions
 
 ## 0.7.17 - 2026-07-01
 

package/README.md

@@ -2,7 +2,7 @@
 
 `pi-oracle` lets a `pi` agent send hard, long-running work to ChatGPT.com or Grok through the web app, with repo archives, background execution, saved results, and a best-effort wake-up back into `pi` when the answer is ready.
 
-> Status: experimental public beta. Current local validation baseline is pi `0.80.2`; the platform-smoke harness covers macOS, Linux, and Windows native with Chromium-family browsers. Pi `0.80.2+` is the suggested tested floor for project-trust-aware package/runtime validation, but pi-bundled runtime packages remain optional wildcard peers so npm peer ranges do not block users from trying newer pi releases. Normal oracle jobs run in an isolated browser profile, not your active browser window.
+> Status: experimental public beta. Current local validation baseline is pi `0.80.9`; the platform-smoke harness covers macOS, Linux, and Windows native with Chromium-family browsers. Pi `0.80.9+` is the suggested tested floor for project-trust-aware package/runtime validation, but pi-bundled runtime packages remain optional wildcard peers so npm peer ranges do not block users from trying newer pi releases. Normal oracle jobs run in an isolated browser profile, not your active browser window.
 
 ## What a successful run looks like
 
@@ -79,7 +79,7 @@ You need:
 
 - macOS, Linux, or Windows native
 - Node.js 22.19.0 or newer for package install/use; platform smoke/release validation currently expects Node 24+ per `platform-smoke.config.mjs`
-- Suggested tested floor: `pi` 0.80.2 or newer; older pi versions are not blocked by package metadata but are outside the current validation baseline
+- Suggested tested floor: `pi` 0.80.9 or newer; older pi versions are not blocked by package metadata but are outside the current validation baseline
 - Google Chrome/Chromium or another Chromium-family browser
 - ChatGPT or Grok already signed in to the configured local browser profile for the provider you plan to use
 - `agent-browser` and `tar` available on the machine; `zstd` is also required when submitting ChatGPT `.tar.zst` archives

package/docs/ORACLE_DESIGN.md

@@ -7,7 +7,7 @@ Companion doc:
 - `docs/ORACLE_RECOVERY_DRILL.md` — safe expired-auth recovery validation drill
 
 Compatibility target:
-- `pi` 0.80.2+ is the suggested tested floor for current project-trust-aware package/runtime validation
+- `pi` 0.80.9+ is the suggested tested floor for current project-trust-aware package/runtime validation
 - package metadata keeps pi runtime packages as optional wildcard peers, so this suggested floor is not enforced as a hard npm install requirement
 - current extension lifecycle only; no backward-compatibility shims for removed `session_switch` / `session_fork` events
 
@@ -639,6 +639,10 @@ Remaining non-blocking hardening work:
 - keep hardening model-selection verification against future ChatGPT UI variation
 
 Recent proof points:
+- Pi 0.80.7 local gate: `npm run verify:oracle` passed on 2026-07-14, including syntax/bundle checks, both typechecks, the isolated sanity harness, and `npm pack --dry-run`
+- Pi 0.80.7 safe loader smokes: `.artifacts/real-smoke/run-1784068526377-67yb2l` passed source loading, and `.artifacts/real-smoke/run-1784068527234-t2a5xm` passed packed-install loading through the real Pi CLI; both executed `/oracle-status` without creating an external oracle job or requiring provider credentials
+- Pi 0.80.6 local gate: `npm run verify:oracle` passed three consecutive runs on 2026-07-11; each run completed syntax/bundle checks, both typechecks, the isolated sanity harness, and `npm pack --dry-run` without an `ENOTEMPTY` cleanup failure
+- Pi 0.80.6 safe loader smokes: `.artifacts/real-smoke/run-1783810473367-cn72at` passed source loading, and `.artifacts/real-smoke/run-1783810475290-hj0pfs` passed packed-install loading through the real Pi CLI; both recorded `pi --version` as 0.80.6 and executed `/oracle-status` without creating an external oracle job or requiring provider credentials
 - Pi 0.80.2 local gate: `npm run verify:oracle` passed on 2026-06-24 after the JSON command output, prompt-manifest, schema, and lazy Chrome-probe audit fixes
 - Pi 0.80.2 isolated extension smokes: `.artifacts/real-smoke/run-1782321054924-jnq0x3` passed source proof, and `.artifacts/real-smoke/run-1782321056224-yuq5a2` passed packed-install proof
 - Pi 0.80.2 JSON command smoke: `pi --no-extensions -e ./extensions/oracle/index.ts --mode json --no-session --no-approve "/oracle-status"` emitted displayed `oracle-command-output` JSON events
@@ -658,6 +662,6 @@ Recent proof points:
 - expired-auth drill post-repair success: `fa26a2a7-0057-4a21-b3e0-71c1d020facf`
 - successful multi-artifact completion: `b6b3599c-6b91-4315-adfa-8a83aa5eda9b`
 - repo-owned sanity harness: `npm run sanity:oracle`
-- real installed-extension smoke source of truth: `scripts/oracle-real-smoke.mjs`; required release proof runs packed-install mode (`npm run smoke:real:packed`) and executes installed-package `oracle_submit` deterministically, with optional slower model-agent debugging via `PI_ORACLE_REAL_TEST_MODEL_AGENT=1`; source mode (`npm run smoke:real:source`) is inner-loop/debug only
+- real installed-extension smoke source of truth: `scripts/oracle-real-smoke.mjs`; required release proof runs packed-install mode (`npm run smoke:real:packed`), asserts Pi 0.80.9, and executes `/oracle-status` through Pi's installed-package loader without provider credentials or an external oracle job; optional slower model-agent submission debugging remains behind `PI_ORACLE_REAL_TEST_MODEL_AGENT=1`; source mode (`npm run smoke:real:source`) is inner-loop/debug only
 - macOS, Ubuntu, and Windows native package/build/runtime smoke source of truth: `docs/platform-smoke.md`; use `npm run verify:oracle` for everyday local iteration, `npm run smoke:platform:doctor` plus a focused target/suite run for platform-sensitive changes, `npm run smoke:platform:all` for doctor-first platform matrix evidence, and `npm run release:check` for the full local-plus-platform release gate
 - release gate: `npm run release:check`, also used by `prepublishOnly`, combines static verification, fresh loaded-extension ChatGPT preset proof via `npm run release:proof:chatgpt-presets`, and all required Crabbox platform smokes

package/extensions/oracle/lib/tools.ts

@@ -9,6 +9,7 @@ import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { createArchive, type ArchiveCreationResult, type ArchiveSizeBreakdownRow } from "./archive.js";
 import { runOracleAuthBootstrap } from "./auth.js";
+import { StringEnum } from "@earendil-works/pi-ai";
 import type { ExtensionAPI, ExtensionContext } from "@earendil-works/pi-coding-agent";
 import { Type, type Static } from "typebox";
 import { formatOracleCancelOutcome, formatOracleJobSummary, formatOracleSubmitResponse } from "../shared/job-observability-helpers.mjs";
@@ -68,13 +69,11 @@ import {
 } from "./runtime.js";
 
 const ORACLE_PROVIDER_PARAM_DESCRIPTION = `Oracle web provider. Omit to use the configured default provider. Supported providers: ${ORACLE_PROVIDERS.join(", ")}.`;
-const ORACLE_PROVIDER_PARAM = Type.Optional(Type.String({
+const ORACLE_PROVIDER_PARAM = Type.Optional(StringEnum(ORACLE_PROVIDERS, {
   description: ORACLE_PROVIDER_PARAM_DESCRIPTION,
-  enum: [...ORACLE_PROVIDERS],
 }));
-const ORACLE_GROK_MODE_PARAM = Type.Optional(Type.String({
+const ORACLE_GROK_MODE_PARAM = Type.Optional(StringEnum(GROK_MODES, {
   description: "Provider mode. For Grok, only heavy is currently supported. Omit to use the configured default mode.",
-  enum: [...GROK_MODES],
 }));
 
 const ORACLE_SUBMIT_PARAMS = Type.Object({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-oracle",
-  "version": "0.7.17",
+  "version": "0.7.19",
   "description": "ChatGPT and Grok web-oracle extension for pi with isolated browser auth, async jobs, and project-context archives.",
   "private": false,
   "license": "MIT",
@@ -48,7 +48,7 @@
     ]
   },
   "scripts": {
-    "check:oracle-extension": "node --check extensions/oracle/shared/browser-profile-helpers.mjs && node --check extensions/oracle/shared/process-helpers.mjs && node --check extensions/oracle/shared/state-path-helpers.mjs && node --check extensions/oracle/shared/time-helpers.mjs && node --check extensions/oracle/shared/state-coordination-helpers.mjs && node --check extensions/oracle/shared/job-coordination-helpers.mjs && node --check extensions/oracle/shared/job-lifecycle-helpers.mjs && node --check extensions/oracle/shared/job-observability-helpers.mjs && node --check extensions/oracle/worker/run-job.mjs && node --check extensions/oracle/worker/state-locks.mjs && node --check extensions/oracle/worker/artifact-heuristics.mjs && node --check extensions/oracle/worker/chatgpt-ui-helpers.mjs && node --check extensions/oracle/worker/chatgpt-flow-helpers.mjs && node --check extensions/oracle/worker/auth-flow-helpers.mjs && node --check extensions/oracle/worker/auth-cookie-policy.mjs && node --check extensions/oracle/worker/chromium-cookie-source.mjs && node --check extensions/oracle/worker/auth-bootstrap.mjs && esbuild extensions/oracle/index.ts --bundle --platform=node --format=esm --external:@earendil-works/pi-coding-agent --external:typebox --outfile=/tmp/pi-oracle-extension-check.js",
+    "check:oracle-extension": "node --check extensions/oracle/shared/browser-profile-helpers.mjs && node --check extensions/oracle/shared/process-helpers.mjs && node --check extensions/oracle/shared/state-path-helpers.mjs && node --check extensions/oracle/shared/time-helpers.mjs && node --check extensions/oracle/shared/state-coordination-helpers.mjs && node --check extensions/oracle/shared/job-coordination-helpers.mjs && node --check extensions/oracle/shared/job-lifecycle-helpers.mjs && node --check extensions/oracle/shared/job-observability-helpers.mjs && node --check extensions/oracle/worker/run-job.mjs && node --check extensions/oracle/worker/state-locks.mjs && node --check extensions/oracle/worker/artifact-heuristics.mjs && node --check extensions/oracle/worker/chatgpt-ui-helpers.mjs && node --check extensions/oracle/worker/chatgpt-flow-helpers.mjs && node --check extensions/oracle/worker/auth-flow-helpers.mjs && node --check extensions/oracle/worker/auth-cookie-policy.mjs && node --check extensions/oracle/worker/chromium-cookie-source.mjs && node --check extensions/oracle/worker/auth-bootstrap.mjs && esbuild extensions/oracle/index.ts --bundle --platform=node --format=esm --external:@earendil-works/pi-ai --external:@earendil-works/pi-coding-agent --external:typebox --outfile=/tmp/pi-oracle-extension-check.js",
     "typecheck": "tsc --noEmit -p tsconfig.json",
     "typecheck:worker-helpers": "tsc --noEmit -p tsconfig.worker-helpers.json",
     "sanity:oracle": "node scripts/oracle-sanity-runner.mjs",
@@ -78,6 +78,7 @@
     "@steipete/sweet-cookie": "^0.3.0"
   },
   "peerDependencies": {
+    "@earendil-works/pi-ai": "*",
     "@earendil-works/pi-coding-agent": "*",
     "typebox": "*"
   },
@@ -86,8 +87,8 @@
     "protobufjs": "7.6.1"
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "^0.80.2",
-    "@earendil-works/pi-coding-agent": "^0.80.2",
+    "@earendil-works/pi-ai": "^0.80.9",
+    "@earendil-works/pi-coding-agent": "^0.80.9",
     "@types/node": "^22.19.19",
     "esbuild": "^0.28.0",
     "tsx": "^4.22.3",
@@ -104,6 +105,9 @@
   ],
   "packageManager": "npm@11.16.0",
   "peerDependenciesMeta": {
+    "@earendil-works/pi-ai": {
+      "optional": true
+    },
     "@earendil-works/pi-coding-agent": {
       "optional": true
     },

package/scripts/oracle-real-smoke.mjs

@@ -5,17 +5,13 @@
 import { spawn } from "node:child_process";
 import { existsSync, mkdirSync, readFileSync, readdirSync, rmSync, symlinkSync, writeFileSync } from "node:fs";
 import { mkdtempSync } from "node:fs";
-import { createRequire } from "node:module";
 import { tmpdir } from "node:os";
 import { basename, dirname, join, resolve } from "node:path";
-import { pathToFileURL } from "node:url";
-
-const require = createRequire(import.meta.url);
-const tsxCli = require.resolve("tsx/cli");
 
 const DEFAULT_PROVIDER = "zai";
 const DEFAULT_MODEL = "glm-5.2";
 const DEFAULT_TIMEOUT_MS = 180_000;
+const EXPECTED_PI_VERSION = "0.80.9";
 const PACKAGE_NAME = "pi-oracle";
 
 function usage() {
@@ -31,7 +27,7 @@ Environment:
   PI_ORACLE_REAL_TEST_TIMEOUT_MS per-agent timeout in ms (default: ${DEFAULT_TIMEOUT_MS})
   PI_ORACLE_REAL_TEST_ARTIFACT_ROOT artifact root (default: .artifacts/real-smoke)
   PI_ORACLE_REAL_TEST_KEEP_TMP   keep temporary fixture directory when set to 1/true/yes
-  PI_ORACLE_REAL_TEST_MODEL_AGENT run oracle_submit through a model-agent turn instead of direct installed-tool execution (off by default)
+  PI_ORACLE_REAL_TEST_MODEL_AGENT run oracle_submit through a credentialed model-agent turn instead of the safe loader command (off by default)
   PI_ORACLE_REAL_TEST_NEGATIVE_SYMLINK run optional second-agent symlink rejection check (off by default; covered by sanity:oracle)
 `);
 }
@@ -299,39 +295,14 @@ function hasCreatedJobArchive(jobsDir) {
   return Boolean(jobDir && archivePath && existsSync(archivePath));
 }
 
-async function runDirectOracleSubmit({ prepared, agentDir, sessionDir, jobsDir, outDir, timeoutMs }) {
+async function runPiLoaderStatus({ prepared, agentDir, sessionDir, jobsDir, outDir, timeoutMs }) {
   mkdirSync(outDir, { recursive: true });
-  const sessionFile = join(sessionDir, "real-smoke-session.jsonl");
-  const fakeWorkerPath = join(outDir, "fake-worker.mjs");
-  const scriptPath = join(outDir, "direct-submit.mjs");
-  const packageRoot = prepared.mode === "packed" ? join(prepared.cwd, "node_modules", PACKAGE_NAME) : process.cwd();
-  const toolsUrl = pathToFileURL(join(packageRoot, "extensions", "oracle", "lib", "tools.ts")).href;
   mkdirSync(sessionDir, { recursive: true });
-  writeFileSync(sessionFile, "");
-  writeFileSync(fakeWorkerPath, "process.exit(0);\n");
-  writeFileSync(scriptPath, `
-import { registerOracleTools } from ${JSON.stringify(toolsUrl)};
-const tools = new Map();
-const pi = {
-  on() { return undefined; },
-  registerTool(tool) { tools.set(tool.name, tool); },
-};
-registerOracleTools(pi, ${JSON.stringify(fakeWorkerPath)});
-const submit = tools.get("oracle_submit");
-if (!submit) throw new Error("oracle_submit was not registered by the installed package");
-const ctx = {
-  cwd: process.cwd(),
-  sessionManager: { getSessionFile() { return ${JSON.stringify(sessionFile)}; } },
-};
-const result = await submit.execute("real-smoke", {
-  prompt: "Real smoke archive test. Reply OK if this reaches the provider.",
-  files: ["."],
-  preset: "instant",
-}, new AbortController().signal, () => undefined, ctx);
-console.log(JSON.stringify(result, null, 2));
-`);
-  writeFileSync(join(outDir, "command.json"), `${JSON.stringify({ command: process.execPath, args: [tsxCli, scriptPath], cwd: prepared.cwd, mode: prepared.mode, extensionPath: prepared.extensionPath }, null, 2)}\n`);
-  const result = await runCommand(process.execPath, [tsxCli, scriptPath], {
+  const args = ["--mode", "json", "--no-session", prepared.mode === "packed" ? "--approve" : "--no-approve", "--session-dir", sessionDir];
+  if (prepared.mode === "source") args.push("--no-extensions", "-e", prepared.extensionPath);
+  args.push("/oracle-status");
+  writeFileSync(join(outDir, "command.json"), `${JSON.stringify({ command: piCommand(), args, cwd: prepared.cwd, mode: prepared.mode, extensionPath: prepared.extensionPath }, null, 2)}\n`);
+  const result = await runCommand(piCommand(), args, {
     cwd: prepared.cwd,
     env: {
       ...process.env,
@@ -341,9 +312,9 @@ console.log(JSON.stringify(result, null, 2));
     },
     timeoutMs,
   });
-  writeRunResult(outDir, "direct-submit", result);
-  if (result.timedOut) throw new Error(`direct oracle_submit timed out after ${timeoutMs}ms`);
-  if (result.code !== 0) throw new Error(`direct oracle_submit exited ${result.code}; see ${join(outDir, "direct-submit.stderr.txt")}`);
+  writeRunResult(outDir, "pi-loader", result);
+  if (result.timedOut) throw new Error(`Pi loader smoke timed out after ${timeoutMs}ms`);
+  if (result.code !== 0) throw new Error(`Pi loader smoke exited ${result.code}; see ${join(outDir, "pi-loader.stderr.txt")}`);
   return result;
 }
 
@@ -385,10 +356,12 @@ async function run(mode = "packed") {
   const artifactRoot = resolve(env("PI_ORACLE_REAL_TEST_ARTIFACT_ROOT") ?? ".artifacts/real-smoke");
   const runId = `run-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
   const runDir = join(artifactRoot, runId);
-  const tmpRoot = mkdtempSync(join(tmpdir(), "pi-oracle-real-smoke-"));
   const assertions = [];
 
   mkdirSync(runDir, { recursive: true });
+  const piVersion = await mustRun(runDir, "pi-version", piCommand(), ["--version"], { cwd: process.cwd(), env: process.env, timeoutMs: 30_000 });
+  if (piVersion.stdout.trim() !== EXPECTED_PI_VERSION) throw new Error(`real smoke requires Pi ${EXPECTED_PI_VERSION}; found ${piVersion.stdout.trim() || "unknown"}`);
+  const tmpRoot = mkdtempSync(join(tmpdir(), "pi-oracle-real-smoke-"));
   const prepared = mode === "packed"
     ? await preparePackedProject({ runDir, provider, model, timeoutMs })
     : prepareSourceProject({ provider, model });
@@ -411,7 +384,8 @@ async function run(mode = "packed") {
     mkdirSync(sessions1, { recursive: true });
     mkdirSync(jobs1, { recursive: true });
 
-    const submitResult = truthy(env("PI_ORACLE_REAL_TEST_MODEL_AGENT"))
+    const modelAgent = truthy(env("PI_ORACLE_REAL_TEST_MODEL_AGENT"));
+    const submitResult = modelAgent
       ? await runPiAgent({
         prepared,
         agentDir: agent1,
@@ -423,7 +397,7 @@ async function run(mode = "packed") {
         stopAfterJobArchive: true,
         prompt: 'Call oracle_submit directly with prompt "Real smoke archive test. Reply OK if this reaches the provider." files ["."] and preset "instant". Do not use bash, read, edit, write, or any tool except oracle_submit.',
       })
-      : await runDirectOracleSubmit({
+      : await runPiLoaderStatus({
         prepared,
         agentDir: agent1,
         sessionDir: sessions1,
@@ -433,16 +407,21 @@ async function run(mode = "packed") {
       });
 
     const jobDir1 = latestJobDir(jobs1);
-    const archivePath = parseJobArchivePath(jobDir1);
-    writeFileSync(join(test1, "job-dir.txt"), `${jobDir1 ?? ""}\n`);
-    writeFileSync(join(test1, "archive-path.txt"), `${archivePath ?? ""}\n`);
-    assert("whole-repo-job-created", Boolean(jobDir1), `whole-repo submit did not create an oracle job; stdout=${submitResult.stdout.slice(-1000)} stderr=${submitResult.stderr.slice(-1000)}`);
-    assert("whole-repo-archive-created", Boolean(archivePath && existsSync(archivePath)), `whole-repo submit did not create a readable archive; jobDir=${jobDir1 ?? "<none>"} stdout=${submitResult.stdout.slice(-1000)} stderr=${submitResult.stderr.slice(-1000)}`);
-    const entries = await tarList(archivePath);
-    writeFileSync(join(test1, "archive-list.txt"), `${entries.join("\n")}\n`);
-    assert("archive-includes-readme", entryExists(entries, "README.md"), "archive should include README.md");
-    for (const excluded of [".pi", ".oracle-context", ".scratchpad.md", ".artifacts", ".crabbox", ".debug"]) {
-      assert(`archive-excludes-${excluded.replace(/[^a-z0-9]+/gi, "-")}`, !entryExists(entries, excluded), `archive should exclude ${excluded}`);
+    if (modelAgent) {
+      const archivePath = parseJobArchivePath(jobDir1);
+      writeFileSync(join(test1, "job-dir.txt"), `${jobDir1 ?? ""}\n`);
+      writeFileSync(join(test1, "archive-path.txt"), `${archivePath ?? ""}\n`);
+      assert("whole-repo-job-created", Boolean(jobDir1), `whole-repo submit did not create an oracle job; stdout=${submitResult.stdout.slice(-1000)} stderr=${submitResult.stderr.slice(-1000)}`);
+      assert("whole-repo-archive-created", Boolean(archivePath && existsSync(archivePath)), `whole-repo submit did not create a readable archive; jobDir=${jobDir1 ?? "<none>"} stdout=${submitResult.stdout.slice(-1000)} stderr=${submitResult.stderr.slice(-1000)}`);
+      const entries = await tarList(archivePath);
+      writeFileSync(join(test1, "archive-list.txt"), `${entries.join("\n")}\n`);
+      assert("archive-includes-readme", entryExists(entries, "README.md"), "archive should include README.md");
+      for (const excluded of [".pi", ".oracle-context", ".scratchpad.md", ".artifacts", ".crabbox", ".debug"]) {
+        assert(`archive-excludes-${excluded.replace(/[^a-z0-9]+/gi, "-")}`, !entryExists(entries, excluded), `archive should exclude ${excluded}`);
+      }
+    } else {
+      assert("pi-loader-command-output", submitResult.stdout.includes('"customType":"oracle-command-output"'), "Pi loader smoke should execute the oracle command through the loaded extension");
+      assert("pi-loader-no-external-job", !jobDir1, "safe Pi loader smoke should not create an oracle job");
     }
     if (prepared.mode === "packed") {
       assert("packed-mode-no-source-extension", !readFileSync(join(test1, "command.json"), "utf8").includes("extensions/oracle/index.ts"), "packed real smoke must not use source extension path");

package/scripts/platform-smoke/invariants.mjs

@@ -101,7 +101,8 @@ function testCanonicalWorkflowConfig() {
 
 function testRealSmokeExpensiveAgentPathsAreOptIn() {
   const source = readFileSync(new URL("../oracle-real-smoke.mjs", import.meta.url), "utf8");
-  assert.match(source, /runDirectOracleSubmit/, "default real smoke should use deterministic installed-tool execution");
+  assert.match(source, /runPiLoaderStatus/, "default real smoke should execute a deterministic command through Pi's extension loader");
+  assert.doesNotMatch(source, /tsx\/cli|runDirectOracleSubmit/, "default real smoke must not bypass Pi's loader through checkout tsx");
   assert.match(source, /PI_ORACLE_REAL_TEST_MODEL_AGENT/, "real smoke should expose the optional model-agent toggle");
   const targetsSource = readFileSync(new URL("./targets.mjs", import.meta.url), "utf8");
   assert.match(targetsSource, /PI_ORACLE_REAL_TEST_MODEL_AGENT/, "platform real-extension command should forward the optional model-agent toggle");