pi-oracle 0.7.19 → 0.7.21

package/CHANGELOG.md

@@ -1,5 +1,28 @@
 # Changelog
 
+## 0.7.21 - 2026-09-26
+
+### Fixed
+- recognize ChatGPT's current `Ask ChatGPT` input as well as `Chat with ChatGPT`, so authenticated browser verification finishes and closes the browser; share the aliases with prompt entry and response/upload boundaries
+- retry auth observations interrupted by CDP navigation without closing the browser while concurrent reads are still running
+- stop treating anonymous `ua-*` visitor IDs as signed-in account identities that need account-selection clicks or reloads
+- distinguish browser verification failures from rejected source cookies in auth recovery guidance
+- support ChatGPT's current Power slider and version-prefixed Pro button, verifying the selected tier before submitting
+- restore the worker jobs-directory binding so cleanup can promote queued jobs
+
+### Validation
+- reproduced the renamed-composer failure before the fix and verified a live `/oracle-auth` refresh saved the auth seed and closed Chrome automatically
+- passed the local Oracle verification suite and independent correctness review
+
+## 0.7.20 - 2026-07-28
+
+### Fixed
+- accepted undifferentiated ChatGPT Pro compact menus (bare Pro / Instant 5.5) so pro presets can configure without Standard/Extended rows
+- replaced `\S` tool-schema non-blank patterns with a GBNF-safe character class so llama.cpp-backed OpenAI-compatible servers can compile oracle tool schemas
+
+### Validation
+- ran the full `npm run release:check` local gate before release
+
 ## 0.7.19 - 2026-07-16
 
 ### Changed

package/README.md

@@ -2,7 +2,7 @@
 
 `pi-oracle` lets a `pi` agent send hard, long-running work to ChatGPT.com or Grok through the web app, with repo archives, background execution, saved results, and a best-effort wake-up back into `pi` when the answer is ready.
 
-> Status: experimental public beta. Current local validation baseline is pi `0.80.9`; the platform-smoke harness covers macOS, Linux, and Windows native with Chromium-family browsers. Pi `0.80.9+` is the suggested tested floor for project-trust-aware package/runtime validation, but pi-bundled runtime packages remain optional wildcard peers so npm peer ranges do not block users from trying newer pi releases. Normal oracle jobs run in an isolated browser profile, not your active browser window.
+> Status: experimental public beta. Current source qualification baseline is official pi `0.86.1`; the platform-smoke harness covers macOS, Linux, and Windows native with Chromium-family browsers. Pi `0.80.9+` is the suggested tested floor for project-trust-aware package/runtime validation, but pi-bundled runtime packages remain optional wildcard peers so npm peer ranges do not block users from trying newer pi releases. Normal oracle jobs run in an isolated browser profile, not your active browser window.
 
 ## What a successful run looks like
 
@@ -284,6 +284,8 @@ Grok uploads now use `.tar.gz` archives. Grok may accept `.tar.zst` uploads, but
 
 For ChatGPT, `oracle_submit` accepts canonical preset ids or a matching human-readable preset label. Keep config values on canonical ids. For Grok, use `provider: "grok"`; only Heavy is supported today.
 
+ChatGPT's compact picker and current **Power** slider expose fewer choices than the legacy settings dialog: both Instant presets use Instant when no auto-switch toggle exists; Thinking Light/Standard use Medium, Extended uses High, and Heavy uses Extra High. Both Pro presets use the single Pro tier when separate effort choices are unavailable. Oracle verifies the visible selection rather than assuming the saved preference.
+
 ## Outputs and cleanup
 
 - Jobs persist response text, metadata, logs, and artifacts under `${PI_ORACLE_JOBS_DIR:-/tmp}/oracle-<job-id>/` by default.
@@ -319,7 +321,9 @@ Review the code and design docs before using it with private or regulated materi
 - For custom Chromium cookie sources, confirm `auth.chromeCookiePath` points at that profile's `Cookies` DB. On macOS, also confirm `auth.chromiumKeychain.services` names the browser's safe-storage Keychain service. On Linux, leave `auth.chromiumKeychain` unset and use Sweet Cookie's `SWEET_COOKIE_LINUX_KEYRING`, `SWEET_COOKIE_CHROME_SAFE_STORAGE_PASSWORD`, or `SWEET_COOKIE_BRAVE_SAFE_STORAGE_PASSWORD` options for encrypted Chrome/Chromium/Brave cookies.
 - Re-run `/oracle-auth`.
 - Agent callers can use `oracle_auth({})` once before retrying a stale-auth oracle submission.
-- If the provider is half-logged-in or challenge flow state looks weird, finish the login/challenge in the headed auth browser and retry.
+- If ChatGPT reports an anonymous visitor session, sign in in the configured **source browser profile**, quit that browser fully, and rerun `/oracle-auth`. This command imports an existing login; the isolated verification window is not a manual-login setup flow.
+- Navigation interruptions during verification are retried until the auth deadline. A closed browser or verification timeout does not by itself mean the source cookies are invalid; leave the isolated window open and inspect the printed diagnostics if retries fail.
+- If the provider presents a challenge and Oracle explicitly leaves the headed auth browser open, complete the challenge there and retry.
 
 ### Custom Chromium auth says cookies synced but the session is rejected
 
@@ -371,6 +375,8 @@ Inspect the job directory under `${PI_ORACLE_JOBS_DIR:-/tmp}/oracle-<job-id>/`.
 
 ## Verification
 
+For credential-free host qualification, run `npm ci --ignore-scripts` then `npm run check:compat` with an empty HOME/agent profile. It runs the existing syntax, type, isolated sanity, and pack checks plus native Pi `/oracle-status` dispatch, asserting that no browser job is created. Sanity uses fixture browser/keychain commands and private job/state directories; it needs local archive utilities (`tar` and `zstd`), not browser credentials. This is source/host proof, not authenticated ChatGPT/Grok or packed cross-platform release proof. The older suggested floor is historical support guidance, not requalified by a current-host run.
+
 Useful local checks:
 
 ```bash
@@ -384,6 +390,8 @@ npm test
 npm run verify:oracle
 ```
 
+`npm test` runs `npm run verify:oracle`, so it is not a separate gate from the final line above.
+
 `npm publish` is guarded by `prepublishOnly`, which runs `npm run release:check`. That release gate now blocks unless fresh live ChatGPT preset proof exists for every canonical preset, then requires doctor-first macOS, Ubuntu, and Windows native Crabbox evidence. The required Crabbox runtime suite uses packed-install proof, not source-tree `pi -e` loading.
 
 Use the narrowest validation workflow that proves the change:

package/docs/ORACLE_DESIGN.md

@@ -143,6 +143,9 @@ Auth bootstrap flow:
 7. clear isolated browser cookies and seed the staged profile with imported provider cookies
 8. open the configured provider in the isolated browser
 9. verify auth with provider-specific readiness checks
+   - recognize both `Chat with ChatGPT` and `Ask ChatGPT` composer labels via the shared UI helpers; the same aliases apply to prompt entry and response/upload boundaries
+   - drain concurrent page reads and discard the whole observation if a CDP evaluation was interrupted by navigation; retry within the existing bootstrap deadline without relaunching a closed browser
+   - ChatGPT's anonymous `ua-*` visitor IDs are not account identity evidence; a login page/public login controls with an anonymous probe require refreshing the source browser login, not account-selection clicks or reloads
 10. on success, close the isolated browser so Chrome flushes profile state cleanly
 11. atomically swap the staged profile into `browser.authSeedProfileDir`, keeping `*.prev` as rollback
 12. write a seed-generation marker used by future runtime clones
@@ -195,7 +198,7 @@ Per job:
    - login required
    - challenge/verification page
    - transient outage after one retry
-6. configure ChatGPT model family/effort or Grok Heavy
+6. configure ChatGPT model family/effort or Grok Heavy; for the current Power slider, use its keyboard controls and verify both the numeric position and accessible tier announcement before closing it. Preserve the compact-menu mapping (Instant; Medium for Light/Standard; High for Extended; Extra High for Heavy; undifferentiated Pro). Reject unknown ranges or mismatched announcements instead of guessing.
 7. upload archive
 8. wait for upload confirmation scoped to the active composer
 9. fill prompt

package/docs/ORACLE_ISOLATED_PI_VALIDATION.md

@@ -33,7 +33,7 @@ The local extension now intercepts TUI `/oracle` and `/oracle-followup` before p
 
 Do not add `https://github.com/fitchmultz/pi-oracle` to this repository's `.pi/settings.json` just to test local oracle changes. If you already keep `npm:pi-oracle` installed globally, mixing the global npm package with a project-local git package creates two distinct package identities and can trigger prompt/tool conflicts. Use the explicit CLI extension flag above instead.
 
-`oracle_submit` now preflights missing, unreadable, or unverified auth seed profiles before it creates an archive or persists a job. For archive-inspection smoke tests that intentionally run without real auth, use `oracle_preflight` for the blocker path or create a test seed only in a purpose-built fixture that includes the `.oracle-seed-generation` marker.
+`oracle_submit` now preflights missing, unreadable, or unverified auth seed profiles before it creates an archive or persists a job. For archive-inspection smoke tests that intentionally run without real auth, use `oracle_preflight` for the blocker path or create a test seed only in a purpose-built fixture with a non-empty `.oracle-seed-generation` value.
 
 ## Preset requirements
 
@@ -98,9 +98,11 @@ mkdir -p \
 mkdir -p \
   "$TEST1_AGENT/extensions/oracle-auth-seed-profile" \
   "$TEST2_AGENT/extensions/oracle-auth-seed-profile"
-touch \
-  "$TEST1_AGENT/extensions/oracle-auth-seed-profile/.oracle-seed-generation" \
-  "$TEST2_AGENT/extensions/oracle-auth-seed-profile/.oracle-seed-generation"
+for seed in \
+  "$TEST1_AGENT/extensions/oracle-auth-seed-profile" \
+  "$TEST2_AGENT/extensions/oracle-auth-seed-profile"; do
+  printf '%s\n' 'isolated-smoke-fixture' > "$seed/.oracle-seed-generation"
+done
 
 echo 'secret' > "$OUTSIDE/secret.txt"
 ln -s "$OUTSIDE" "$FIXTURE/linked-outside"
@@ -181,8 +183,8 @@ Expected behavior:
 Notes:
 
 - this smoke test does not require `/oracle-auth`
-- the snippet creates an isolated test auth seed profile plus `.oracle-seed-generation` marker for `TEST1_AGENT` because `oracle_submit` now rejects missing or unverified seed profiles before archiving
-- with that marker-only seed profile, the worker still fails later due to missing real auth, which is useful because the archive remains on disk for inspection
+- the snippet creates an isolated test seed profile with a non-empty `.oracle-seed-generation` value; an empty file is rejected before archiving
+- this marker is fixture setup, not authenticated account access; the worker still fails later due to missing real auth, leaving the archive available for inspection
 
 ### Test 2: symlink escape rejection
 
@@ -204,7 +206,7 @@ TMUX_CMD1="cd '$REPO' && env PI_CODING_AGENT_DIR='$TEST1_AGENT' PI_ORACLE_JOBS_D
 
 Use the same pattern for additional sessions, swapping the session/job directories as needed. This keeps the test on the in-repo extension and hidden in-repo command prompt without depending on `.pi/settings.json` package entries.
 
-`/oracle` now starts by calling `oracle_preflight`. If you want the command flow to proceed past that early guard in an isolated test without using your normal auth state, run `/oracle-auth` in the isolated agent dir or create a purpose-built verified seed fixture with `.oracle-seed-generation`.
+`/oracle` now starts by calling `oracle_preflight`. If you want the command flow to proceed past that early guard in an isolated test without using your normal auth state, run `/oracle-auth` in the isolated agent dir or create a purpose-built test seed fixture with a non-empty `.oracle-seed-generation` value.
 
 ## Additional failure-mode smoke tests
 

package/extensions/oracle/lib/tools.ts

@@ -81,7 +81,7 @@ const ORACLE_SUBMIT_PARAMS = Type.Object({
   files: Type.Array(Type.String({
     description: "Project-relative file or directory path to include in the archive.",
     minLength: 1,
-    pattern: "^.*\\S.*$",
+    pattern: "^.*[^ \\t\\r\\n].*$",
   }), {
     description: "Exact project-relative files/directories to include in the oracle archive.",
     minItems: 1,
@@ -99,7 +99,7 @@ const ORACLE_SUBMIT_PARAMS = Type.Object({
   chatGptConversationId: Type.Optional(Type.String({
     description: "Existing ChatGPT conversation id, or full https://chatgpt.com/c/... URL, to continue. Omit for default behavior: starting a fresh oracle thread. Do not combine with followUpJobId.",
     minLength: 1,
-    pattern: "^.*\\S.*$",
+    pattern: "^.*[^ \\t\\r\\n].*$",
   })),
 }, { additionalProperties: false });
 
@@ -109,7 +109,7 @@ const ORACLE_PREFLIGHT_PARAMS = Type.Object({
   chatGptConversationId: Type.Optional(Type.String({
     description: "Existing ChatGPT conversation id, or full https://chatgpt.com/c/... URL, whose provider/thread readiness should be checked. Do not combine with followUpJobId.",
     minLength: 1,
-    pattern: "^.*\\S.*$",
+    pattern: "^.*[^ \\t\\r\\n].*$",
   })),
 }, { additionalProperties: false });
 

package/extensions/oracle/worker/auth-bootstrap.mjs

@@ -17,9 +17,9 @@ import {
 import { ensureAccountCookie, filterImportableAuthCookies } from "./auth-cookie-policy.mjs";
 import { getCookiesFromConfiguredChromiumSource } from "./chromium-cookie-source.mjs";
 import { parseSnapshotEntries } from "./artifact-heuristics.mjs";
-import { buildAllowedChatGptOrigins } from "./chatgpt-ui-helpers.mjs";
+import { buildAllowedChatGptOrigins, CHATGPT_COMPOSER_LABELS } from "./chatgpt-ui-helpers.mjs";
 import { stripUrlQueryAndHash } from "./chatgpt-flow-helpers.mjs";
-import { buildAccountChooserCandidateLabels, classifyChatAuthPage, normalizeLoginProbeResult } from "./auth-flow-helpers.mjs";
+import { buildAccountChooserCandidateLabels, classifyChatAuthPage, isAuthNavigationError, normalizeLoginProbeResult } from "./auth-flow-helpers.mjs";
 
 const rawConfig = process.argv[2];
 if (!rawConfig) {
@@ -427,7 +427,7 @@ async function snapshotText() {
 }
 
 async function pageText() {
-  const { stdout } = await targetCommand("get", "text", "body", { allowFailure: true, logLabel: "get text body" });
+  const { stdout } = await targetCommand("get", "text", "body", { logLabel: "get text body" });
   return stdout || "";
 }
 
@@ -515,7 +515,16 @@ function formatAuthFailureGuidance(error) {
   const reason = error instanceof Error ? error.message : String(error);
   const lines = ["Oracle auth failed.", "", `Reason: ${reason}`, "", "Likely causes:"];
 
-  if (usesConfiguredChromiumCookieSource()) {
+  if (isAuthNavigationError(error) || /browser was closed|Timed out verifying synced/i.test(reason)) {
+    lines.push(
+      "- the isolated browser navigated, closed, or never settled during verification",
+      "- this browser verification failure does not by itself prove the source cookies are invalid",
+      "",
+      "Next:",
+      "1. Re-run /oracle-auth and leave the isolated browser open while verification completes.",
+      "2. If it fails again, inspect the diagnostics below.",
+    );
+  } else if (usesConfiguredChromiumCookieSource()) {
     lines.push(
       "- the configured cookie DB is stale or from the wrong browser profile",
       `- ${providerName()} is logged out in that browser profile`,
@@ -708,6 +717,7 @@ function buildLoginProbeScript(timeoutMs) {
     let bodyKeys = [];
     let bodyHasId = false;
     let bodyHasEmail = false;
+    let bodyIsAnonymous = false;
     let resultName = '';
     let responsePreview = '';
     try {
@@ -727,6 +737,7 @@ function buildLoginProbeScript(timeoutMs) {
             if (data && typeof data === 'object' && !Array.isArray(data)) {
               bodyKeys = Object.keys(data).slice(0, 12);
               bodyHasId = typeof data.id === 'string' && data.id.length > 0;
+              bodyIsAnonymous = typeof data.id === 'string' && data.id.startsWith('ua-');
               bodyHasEmail = typeof data.email === 'string' && data.email.includes('@');
               const name = typeof data.name === 'string' ? data.name.trim() : '';
               if (name) resultName = name;
@@ -757,6 +768,7 @@ function buildLoginProbeScript(timeoutMs) {
       bodyKeys,
       bodyHasId,
       bodyHasEmail,
+      bodyIsAnonymous,
       name: resultName,
       responsePreview,
     };
@@ -868,13 +880,25 @@ async function waitForImportedAuthReady() {
   let iteration = 0;
   while (Date.now() < timeoutAt) {
     iteration += 1;
-    const [url, snapshot, body, probe] = await Promise.all([getUrl(), snapshotText(), pageText(), loginProbe()]);
+    // Drain all reads before retrying or closing the browser. Promise.all can
+    // reject while the other CDP commands are still running against the page.
+    const reads = await Promise.allSettled([getUrl(), snapshotText(), pageText(), loginProbe()]);
+    const failures = reads.filter((read) => read.status === "rejected");
+    const fatal = failures.find((read) => !isAuthNavigationError(read.reason));
+    if (fatal) throw fatal.reason;
+    if (failures.length > 0) {
+      await log(`poll ${iteration}: auth page navigated during verification; discarding partial reads and retrying`);
+      await ensureBrowserConnected();
+      await sleep(config.auth.pollMs);
+      continue;
+    }
+    const [url, snapshot, body, probe] = reads.map((read) => read.value);
     await writeFile(URL_PATH, `${url}\n`, { mode: 0o600 }).catch(() => undefined);
     await writeFile(SNAPSHOT_PATH, `${snapshot}\n`, { mode: 0o600 }).catch(() => undefined);
     await writeFile(BODY_PATH, `${body}\n`, { mode: 0o600 }).catch(() => undefined);
     const classification = classifyChatPage({ url, snapshot, body, probe });
     await log(
-      `poll ${iteration}: url=${JSON.stringify(url)} probe=${JSON.stringify(probe)} classification=${classification.state} hasComposer=${preferredProvider() === "grok" ? snapshot.includes('Ask Grok anything') || snapshot.includes('contenteditable') : snapshot.includes(`textbox \"${CHATGPT_LABELS.composer}\"`)} hasAddFiles=${preferredProvider() === "grok" ? snapshot.includes('button \"Attach\"') : snapshot.includes(`button \"${CHATGPT_LABELS.addFiles}\"`)}`,
+      `poll ${iteration}: url=${JSON.stringify(url)} probe=${JSON.stringify(probe)} classification=${classification.state} hasComposer=${preferredProvider() === "grok" ? snapshot.includes('Ask Grok anything') || snapshot.includes('contenteditable') : CHATGPT_COMPOSER_LABELS.some((label) => snapshot.includes(`textbox \"${label}\"`))} hasAddFiles=${preferredProvider() === "grok" ? snapshot.includes('button \"Attach\"') : snapshot.includes(`button \"${CHATGPT_LABELS.addFiles}\"`)}`,
     );
     if (classification.state === "authenticated_and_ready") return classification;
     if (classification.state === "auth_transitioning") {

package/extensions/oracle/worker/auth-flow-helpers.d.mts

@@ -8,6 +8,7 @@ export interface OracleAuthLoginProbe {
   bodyKeys?: string[];
   bodyHasId?: boolean;
   bodyHasEmail?: boolean;
+  bodyIsAnonymous?: boolean;
   name?: string;
   responsePreview?: string;
 }
@@ -26,6 +27,7 @@ export interface OracleAuthPageClassification {
 }
 
 export declare function normalizeLoginProbeResult(result: unknown): OracleAuthLoginProbe;
+export declare function isAuthNavigationError(error: unknown): boolean;
 export declare function buildAccountChooserCandidateLabels(name?: string): string[];
 export declare function classifyChatAuthPage(args: {
   url: string;

package/extensions/oracle/worker/auth-flow-helpers.mjs

@@ -4,7 +4,7 @@
 // Usage: Imported by auth-bootstrap.mjs and sanity tests to exercise auth classification behavior without driving a browser.
 // Invariants/Assumptions: Inputs are already captured snapshots/probe results from the live browser session; outputs are deterministic and side-effect free.
 
-import { snapshotHasUsableComposerControls } from "./chatgpt-ui-helpers.mjs";
+import { CHATGPT_COMPOSER_LABELS, snapshotHasUsableComposerControls } from "./chatgpt-ui-helpers.mjs";
 
 /** @typedef {import("./auth-flow-helpers.d.mts").OracleAuthLoginProbe} OracleAuthLoginProbe */
 /** @typedef {import("./auth-flow-helpers.d.mts").OracleAuthPageClassification} OracleAuthPageClassification */
@@ -31,11 +31,23 @@ export function normalizeLoginProbeResult(result) {
     bodyKeys: Array.isArray(value.bodyKeys) ? value.bodyKeys.filter((entry) => typeof entry === "string") : [],
     bodyHasId: value.bodyHasId === true,
     bodyHasEmail: value.bodyHasEmail === true,
+    bodyIsAnonymous: value.bodyIsAnonymous === true,
     name: typeof value.name === "string" ? value.name : undefined,
     responsePreview: typeof value.responsePreview === "string" ? value.responsePreview : undefined,
   };
 }
 
+/**
+ * CDP evaluations can be interrupted by normal redirects. Do not retry arbitrary
+ * protocol failures or explicitly closed/disconnected browser errors.
+ * @param {unknown} error
+ * @returns {boolean}
+ */
+export function isAuthNavigationError(error) {
+  const message = error instanceof Error ? error.message : String(error);
+  return /Inspected target navigated or closed|Execution context was destroyed|Cannot find context with specified id/i.test(message);
+}
+
 /**
  * @param {string | undefined} name
  * @returns {string[]}
@@ -69,7 +81,7 @@ export function classifyChatAuthPage(args) {
   const onAllowedOrigin = args.allowedOrigins.some((origin) => args.url.startsWith(origin));
   const hasComposer = args.snapshot.includes(`textbox "${composerLabel}"`);
   const hasAddFiles = args.snapshot.includes(`button "${addFilesLabel}"`);
-  const hasUsableComposer = composerLabel === DEFAULT_COMPOSER_LABEL && addFilesLabel === DEFAULT_ADD_FILES_LABEL
+  const hasUsableComposer = CHATGPT_COMPOSER_LABELS.includes(composerLabel) && addFilesLabel === DEFAULT_ADD_FILES_LABEL
     ? snapshotHasUsableComposerControls(args.snapshot)
     : hasComposer && hasAddFiles;
 
@@ -112,7 +124,16 @@ export function classifyChatAuthPage(args) {
     return { state: "transient_outage_error", message: `ChatGPT is showing a transient outage/error page. Logs: ${args.logPath}` };
   }
 
-  const probeHasAccountIdentity = args.probe?.bodyHasId === true || args.probe?.bodyHasEmail === true;
+  // /backend-api/me also returns HTTP 200 and an id for anonymous visitors.
+  // Those ua-* identities must not drive account selection or auth reloads.
+  if (args.probe?.bodyIsAnonymous && (args.probe?.onAuthPage || args.probe?.domLoginCta)) {
+    return {
+      state: "login_required",
+      message: `Synced cookies from ${args.cookieSourceLabel}, but ChatGPT returned an anonymous visitor session, not a signed-in account. Sign in to ChatGPT in the source browser profile, quit that browser, then rerun /oracle-auth. Logs: ${args.logPath}`,
+    };
+  }
+
+  const probeHasAccountIdentity = !args.probe?.bodyIsAnonymous && (args.probe?.bodyHasId === true || args.probe?.bodyHasEmail === true);
 
   if (args.probe?.status === 401 || (args.probe?.status === 403 && (!onAllowedOrigin || !hasUsableComposer))) {
     return {

package/extensions/oracle/worker/chatgpt-flow-helpers.mjs

@@ -4,6 +4,8 @@
 // Usage: Imported by run-job.mjs and sanity tests to validate conversation-state heuristics without driving a browser.
 // Invariants/Assumptions: Snapshot text comes from agent-browser `snapshot -i`; URL inputs may be malformed and must fail safely.
 
+import { CHATGPT_COMPOSER_LABELS } from "./chatgpt-ui-helpers.mjs";
+
 /** @typedef {import("./chatgpt-flow-helpers.d.mts").OracleStableValueState} OracleStableValueState */
 /** @typedef {import("./chatgpt-flow-helpers.d.mts").OracleSendAcceptanceState} OracleSendAcceptanceState */
 
@@ -23,8 +25,9 @@ export function assistantSnapshotSlice(snapshot, composerLabel, responseIndex) {
   const nextAssistantIndex = assistantHeadingIndices[responseIndex + 1];
   if (nextAssistantIndex !== undefined) endCandidates.push(nextAssistantIndex);
 
+  const composerLabels = CHATGPT_COMPOSER_LABELS.includes(composerLabel) ? CHATGPT_COMPOSER_LABELS : [composerLabel];
   const composerIndex = lines.findIndex(
-    (line, index) => index > startIndex && line.includes(`textbox "${composerLabel}"`),
+    (line, index) => index > startIndex && composerLabels.some((label) => line.includes(`textbox "${label}"`)),
   );
   if (composerIndex !== -1) endCandidates.push(composerIndex);
 

package/extensions/oracle/worker/chatgpt-ui-helpers.d.mts

@@ -7,6 +7,7 @@ export interface OracleUiSelection {
   autoSwitchToThinking?: boolean;
 }
 
+export declare const CHATGPT_COMPOSER_LABELS: readonly string[];
 export declare const CHATGPT_CANONICAL_APP_ORIGINS: readonly string[];
 
 export declare function buildAllowedChatGptOrigins(chatUrl: string, authUrl?: string): string[];

package/extensions/oracle/worker/chatgpt-ui-helpers.mjs

@@ -13,6 +13,8 @@ import { parseSnapshotEntries } from "./artifact-heuristics.mjs";
 /** @typedef {{ responseText: string; artifactLabels?: string[]; suspiciousArtifactLabels?: string[] }} CompletionSignatureArgs */
 /** @typedef {{ hasStopStreaming: boolean; hasTargetCopyResponse: boolean; responseText: string; artifactLabels?: string[]; suspiciousArtifactLabels?: string[] }} DerivedCompletionSignatureArgs */
 
+export const CHATGPT_COMPOSER_LABELS = Object.freeze(["Chat with ChatGPT", "Ask ChatGPT"]);
+
 export const CHATGPT_CANONICAL_APP_ORIGINS = Object.freeze([
   "https://chatgpt.com",
   "https://chat.openai.com",
@@ -29,9 +31,10 @@ const AUTO_SWITCH_LABEL = "Auto-switch to Thinking";
 const THINKING_EFFORT_COMBOBOX_LABEL = "Thinking effort";
 const PRO_THINKING_EFFORT_COMBOBOX_LABEL = "Pro thinking effort";
 const EFFORT_LABELS = new Set(["Light", "Standard", "Extended", "Heavy"]);
-const COMPACT_INTELLIGENCE_MENU_PATTERN = /(?:Intelligence.*Instant.*Medium.*High.*Pro|^(?:Instant|Medium|High|Extra High|Pro Standard|Pro Extended)$)/i;
-const COMPACT_INTELLIGENCE_CONTROL_PATTERN = /^(?:Instant(?:\s+5s)?|Medium(?:\s+5\s*[–-]\s*30s)?|High(?:\s+15\s*[–-]\s*60s)?|Extra High|Pro\s+5\+\s*min|Pro Standard|Pro Extended)$/i;
-const COMPACT_INTELLIGENCE_OPENER_PATTERN = /^(?:Instant|Medium|High|Extra High|Pro|Pro Standard|Pro Extended)$/i;
+const COMPACT_INTELLIGENCE_MENU_PATTERN = /(?:Intelligence.*Instant.*Medium.*High.*Pro|^(?:Instant|Medium|High|Extra High|Pro(?: Standard| Extended)?)$)/i;
+// Bare Instant is the legacy top-level family radio; compact Instant rows are versioned (Instant 5s / Instant 5.5).
+const COMPACT_INTELLIGENCE_CONTROL_PATTERN = /^(?:Instant\s+[\d.]+s?|Medium(?:\s+5\s*[–-]\s*30s)?|High(?:\s+15\s*[–-]\s*60s)?|Extra High|Pro(?:\s+5\+\s*min|\s+Standard|\s+Extended)?)$/i;
+const COMPACT_INTELLIGENCE_OPENER_PATTERN = /^(?:Instant(?:\s+[\d.]+s?)?|Medium|High|Extra High|Pro(?: Standard| Extended)?)$/i;
 const BARE_EFFORT_PATTERN = /^(light|standard|extended|heavy)(?:, click to remove)?$/i;
 const INSTANT_CHIP_PATTERN = /^instant(?:, click to remove)?$/i;
 const THINKING_CHIP_PATTERN = /^(?:(light|standard|extended|heavy)\s+)?thinking(?:, click to remove)?$/i;
@@ -131,7 +134,7 @@ export function requestedEffortLabel(selection) {
  * @returns {string}
  */
 function normalizeChipLabel(label) {
-  return normalizeText(label).replace(/, click to remove$/i, "").trim();
+  return normalizeText(label).replace(/, click to remove$/i, "").replace(/^\d+(?:\.\d+)?\s+(?=Pro$)/i, "").trim();
 }
 
 function parseComposerChipSelection(label) {
@@ -184,7 +187,7 @@ function parseCompactIntelligenceSelection(label) {
   const normalized = normalizeChipLabel(label);
   if (!COMPACT_INTELLIGENCE_CONTROL_PATTERN.test(normalized)) return undefined;
 
-  if (/^Instant(?:\s+5s)?$/i.test(normalized)) {
+  if (/^Instant\s+[\d.]+s?$/i.test(normalized)) {
     return {
       modelFamily: /** @type {OracleUiModelFamily} */ ("instant"),
       compactTier: "instant",
@@ -219,6 +222,8 @@ function parseCompactIntelligenceSelection(label) {
       compactTier: "pro",
     };
   }
+  // "Pro 5+ min" is always the compact Pro tier. Bare "Pro" is ambiguous with the
+// legacy top-level family radio and is handled with sibling context below.
   if (/^Pro\s+5\+\s*min$/i.test(normalized)) {
     return {
       modelFamily: /** @type {OracleUiModelFamily} */ ("pro"),
@@ -229,6 +234,24 @@ function parseCompactIntelligenceSelection(label) {
   return undefined;
 }
 
+function parseBareProCompactSelection(label) {
+  if (/click to remove/i.test(String(label || ""))) return undefined;
+  if (!/^Pro$/i.test(normalizeChipLabel(label))) return undefined;
+  return {
+    modelFamily: /** @type {OracleUiModelFamily} */ ("pro"),
+    compactTier: "pro",
+  };
+}
+
+function snapshotHasCompactTierSiblings(entries, exceptLabel) {
+  const except = normalizeChipLabel(exceptLabel).toLowerCase();
+  return entries.some((entry) => {
+    if (entry.disabled || entry.kind !== "menuitemradio") return false;
+    if (normalizeChipLabel(entry.label).toLowerCase() === except) return false;
+    return Boolean(parseCompactIntelligenceSelection(entry.label));
+  });
+}
+
 function hasRemovableComposerModelChip(entries) {
   return entries.some(
     (entry) => entry.kind === "button" && /click to remove/i.test(String(entry.label || "")) && parseComposerChipSelection(entry.label),
@@ -237,7 +260,7 @@ function hasRemovableComposerModelChip(entries) {
 
 function hasCompactIntelligenceMenuContext(entries) {
   return entries.some((entry) => !entry.disabled && entry.kind === "menu" && COMPACT_INTELLIGENCE_MENU_PATTERN.test(normalizeText(entry.label)))
-    || entries.some((entry) => !entry.disabled && entry.kind === "menuitemradio" && checkedState(entry) === true && parseCompactIntelligenceSelection(entry.label));
+    || entries.some((entry) => !entry.disabled && entry.kind === "menuitemradio" && checkedState(entry) === true && compactSelectionFromEntry(entry, entries));
 }
 
 function hasLegacyEffortCombobox(entries) {
@@ -248,18 +271,36 @@ function hasLegacyEffortCombobox(entries) {
   });
 }
 
-function compactSelectionFromEntry(entry, _entries, options = {}) {
+function compactSelectionFromEntry(entry, entries = [], options = {}) {
   if (entry.disabled) return undefined;
   const kind = entry.kind || "";
-  if (COMPACT_INTELLIGENCE_CONTROL_KINDS.has(kind)) return parseCompactIntelligenceSelection(entry.label);
+  if (COMPACT_INTELLIGENCE_CONTROL_KINDS.has(kind)) {
+    const parsed = parseCompactIntelligenceSelection(entry.label);
+    if (parsed) return parsed;
+    // Bare "Pro" is compact only when versioned Instant / Medium / High / Extra High siblings exist.
+    if (snapshotHasCompactTierSiblings(entries, entry.label)) {
+      return parseBareProCompactSelection(entry.label);
+    }
+    return undefined;
+  }
   if (options.allowClosedButtons && kind === "button" && !/\bexpanded=true\b/.test(String(entry.line || ""))) {
-    return parseCompactIntelligenceSelection(entry.label);
+    const parsed = parseCompactIntelligenceSelection(entry.label);
+    if (parsed) return parsed;
+    const barePro = parseBareProCompactSelection(entry.label);
+    if (barePro) return barePro;
+    // Closed composer pills keep bare Instant after the compact menu closes.
+    if (/^Instant$/i.test(normalizeChipLabel(entry.label))) {
+      return {
+        modelFamily: /** @type {OracleUiModelFamily} */ ("instant"),
+        compactTier: "instant",
+      };
+    }
   }
   return undefined;
 }
 
 export function matchesCompactIntelligenceControlLabel(label) {
-  return Boolean(parseCompactIntelligenceSelection(label));
+  return Boolean(parseCompactIntelligenceSelection(label) || parseBareProCompactSelection(label));
 }
 
 export function snapshotHasClosedCompactSelection(snapshot, selection) {
@@ -330,7 +371,7 @@ function detectCompactIntelligenceSelection(entries) {
 }
 
 export function matchesRequestedModelControlLabel(label, selection) {
-  const compactSelection = parseCompactIntelligenceSelection(label);
+  const compactSelection = parseCompactIntelligenceSelection(label) || parseBareProCompactSelection(label);
   if (compactSelection) return compactSelectionMatchesRequested(selection, compactSelection);
   return matchesModelFamilyLabel(label, selection.modelFamily);
 }
@@ -455,7 +496,7 @@ export function snapshotHasModelConfigurationUi(snapshot) {
       ),
   );
   const visibleCompactControls = entries.filter(
-    (entry) => !entry.disabled && entry.kind === "menuitemradio" && parseCompactIntelligenceSelection(entry.label),
+    (entry) => !entry.disabled && entry.kind === "menuitemradio" && compactSelectionFromEntry(entry, entries),
   );
   const hasCompactIntelligenceMenu = entries.some(
     (entry) => !entry.disabled && entry.kind === "menu" && COMPACT_INTELLIGENCE_MENU_PATTERN.test(normalizeText(entry.label)),
@@ -464,7 +505,9 @@ export function snapshotHasModelConfigurationUi(snapshot) {
   const hasEffortCombobox = entries.some(
     (entry) => entry.kind === "combobox" && EFFORT_LABELS.has(entry.value || "") && !entry.disabled,
   );
-  return visibleFamilies.size >= 2 || visibleRadioFamilies.size >= 2 || visibleCompactControls.length >= 2 || hasCompactIntelligenceMenu || hasIntelligenceHeading || hasEffortCombobox;
+  const hasPowerSliderMenu = entries.some((entry) => entry.kind === "menuitem" && entry.label === "Power" && !entry.disabled)
+    && entries.some((entry) => entry.kind === "menuitem" && entry.label === "Select model" && !entry.disabled);
+  return visibleFamilies.size >= 2 || visibleRadioFamilies.size >= 2 || visibleCompactControls.length >= 2 || hasCompactIntelligenceMenu || hasIntelligenceHeading || hasEffortCombobox || hasPowerSliderMenu;
 }
 
 /**
@@ -474,7 +517,7 @@ export function snapshotHasModelConfigurationUi(snapshot) {
 export function snapshotHasUsableComposerControls(snapshot) {
   /** @type {SnapshotEntry[]} */
   const entries = parseSnapshotEntries(snapshot);
-  const hasComposer = entries.some((entry) => entry.kind === "textbox" && entry.label === "Chat with ChatGPT" && !entry.disabled);
+  const hasComposer = entries.some((entry) => entry.kind === "textbox" && CHATGPT_COMPOSER_LABELS.includes(entry.label || "") && !entry.disabled);
   const hasAddFiles = entries.some((entry) => entry.kind === "button" && entry.label === "Add files and more" && !entry.disabled);
   return hasComposer && hasAddFiles;
 }

package/extensions/oracle/worker/run-job.mjs

@@ -23,6 +23,7 @@ import { getOracleJobsDir } from "../shared/state-path-helpers.mjs";
 import { extractArtifactLabels, FILE_LABEL_PATTERN_SOURCE, GENERIC_ARTIFACT_LABELS, parseSnapshotEntries, partitionStructuralArtifactCandidates } from "./artifact-heuristics.mjs";
 import {
   buildAllowedChatGptOrigins,
+  CHATGPT_COMPOSER_LABELS,
   deriveAssistantCompletionSignature,
   matchesCompactIntelligenceControlLabel,
   matchesCompactIntelligenceOpenerLabel,
@@ -51,7 +52,8 @@ if (!jobId) {
   process.exit(1);
 }
 
-const jobDir = join(getOracleJobsDir(), `oracle-${jobId}`);
+const ORACLE_JOBS_DIR = getOracleJobsDir();
+const jobDir = join(ORACLE_JOBS_DIR, `oracle-${jobId}`);
 const jobPath = `${jobDir}/job.json`;
 const CHATGPT_LABELS = {
   composer: "Chat with ChatGPT",
@@ -820,6 +822,7 @@ function buildLoginProbeScript(timeoutMs) {
     let bodyKeys = [];
     let bodyHasId = false;
     let bodyHasEmail = false;
+    let bodyIsAnonymous = false;
     try {
       if (typeof fetch === 'function') {
         const controller = new AbortController();
@@ -837,6 +840,7 @@ function buildLoginProbeScript(timeoutMs) {
             if (data && typeof data === 'object' && !Array.isArray(data)) {
               bodyKeys = Object.keys(data).slice(0, 12);
               bodyHasId = typeof data.id === 'string' && data.id.length > 0;
+              bodyIsAnonymous = typeof data.id === 'string' && data.id.startsWith('ua-');
               bodyHasEmail = typeof data.email === 'string' && data.email.includes('@');
             }
           }
@@ -860,6 +864,7 @@ function buildLoginProbeScript(timeoutMs) {
       bodyKeys,
       bodyHasId,
       bodyHasEmail,
+      bodyIsAnonymous,
     };
   `);
 }
@@ -895,8 +900,8 @@ function snapshotHasCompactIntelligenceMenuControls(snapshot) {
   return Boolean(findEntry(snapshot, (candidate) => {
     if (candidate.disabled) return false;
     const label = normalizeSnapshotLabel(candidate.label);
-    return (candidate.kind === "menu" && /(?:Intelligence.*Instant.*Medium.*High.*Pro|^(?:Instant|Medium|High|Extra High|Pro Extended)$)/i.test(label))
-      || (candidate.kind === "menuitemradio" && /^(?:Instant(?:\s+5s)?|Medium(?:\s+5\s*[–-]\s*30s)?|High(?:\s+15\s*[–-]\s*60s)?|Extra High|Pro\s+5\+\s*min|Pro Standard|Pro Extended)$/i.test(label));
+    return (candidate.kind === "menu" && /(?:Intelligence.*Instant.*Medium.*High.*Pro|^(?:Instant|Medium|High|Extra High|Pro(?: Standard| Extended)?)$)/i.test(label))
+      || (candidate.kind === "menuitemradio" && /^(?:Instant\s+[\d.]+s?|Medium(?:\s+5\s*[–-]\s*30s)?|High(?:\s+15\s*[–-]\s*60s)?|Extra High|Pro(?:\s+5\+\s*min|\s+Standard|\s+Extended)?)$/i.test(label));
   }));
 }
 
@@ -904,7 +909,7 @@ function matchesRequestedModelControl(candidate, selection, options = {}) {
   if (!["button", "radio", "menuitemradio"].includes(candidate.kind || "") || typeof candidate.label !== "string" || candidate.disabled) return false;
   if (candidate.kind === "button") {
     if (/\bexpanded=true\b/.test(String(candidate.line || ""))) return false;
-    if (options.ignoreCompactTierButtons && /^(?:Instant|Medium|High|Extra High|Pro|Pro Extended)$/i.test(candidate.label)) return false;
+    if (options.ignoreCompactTierButtons && /^(?:Instant(?:\s+[\d.]+s?)?|Medium|High|Extra High|Pro(?: Standard| Extended)?)$/i.test(candidate.label)) return false;
     if (options.ignoreCompactOnlyButtons && /^(?:Medium|High|Extra High)$/i.test(candidate.label)) return false;
   }
   if (selection.modelFamily === "pro" && /^Pro(?:\s+Extended)?$/i.test(candidate.label)) return true;
@@ -936,7 +941,7 @@ function composerControlsVisible(snapshot, job = currentJob) {
   const entries = parseSnapshotEntries(snapshot);
   const hasComposer = isGrokJob(job)
     ? entries.some((entry) => !entry.disabled && ((entry.kind === "textbox" && entry.label === labels.composer) || /editable/.test(String(entry.line || ""))))
-    : entries.some((entry) => entry.kind === "textbox" && entry.label === labels.composer && !entry.disabled);
+    : entries.some((entry) => entry.kind === "textbox" && CHATGPT_COMPOSER_LABELS.includes(entry.label) && !entry.disabled);
   const hasAddFiles = entries.some(
     (entry) => entry.kind === "button" && entry.label === labels.addFiles && !entry.disabled,
   );
@@ -1041,8 +1046,7 @@ async function setComposerText(job, text) {
     return;
   }
   const snapshot = await snapshotText(job);
-  const labels = labelsForJob(job);
-  const entry = findEntry(snapshot, (candidate) => candidate.kind === "textbox" && candidate.label === labels.composer);
+  const entry = findEntry(snapshot, (candidate) => candidate.kind === "textbox" && CHATGPT_COMPOSER_LABELS.includes(candidate.label) && !candidate.disabled);
   if (!entry) throw new Error("Could not find ChatGPT composer textbox");
   await agentBrowser(job, "fill", entry.ref, text);
 }
@@ -1075,7 +1079,11 @@ function classifyChatPage({ job, url, snapshot, body, probe }) {
   const onAuthPath = typeof url === "string" && url.includes("/auth/");
   const hasUsableComposer = snapshotHasUsableComposerControls(snapshot);
 
-  const probeHasAccountIdentity = probe?.bodyHasId === true || probe?.bodyHasEmail === true;
+  if (probe?.bodyIsAnonymous && (probe?.onAuthPage || probe?.domLoginCta)) {
+    return { state: "login_required", message: "ChatGPT shows login controls and returned an anonymous visitor session, not a signed-in account. Sign in to ChatGPT in the configured source browser profile, then run /oracle-auth." };
+  }
+
+  const probeHasAccountIdentity = !probe?.bodyIsAnonymous && (probe?.bodyHasId === true || probe?.bodyHasEmail === true);
 
   if (probe?.status === 401 || (probe?.status === 403 && (!onAllowedOrigin || !hasUsableComposer))) {
     return { state: "login_required", message: "ChatGPT login is required. Run /oracle-auth." };
@@ -1268,10 +1276,10 @@ function detectResponseFailureText(text) {
 
 function composerSnapshotSlice(snapshot, job = currentJob) {
   const lines = snapshot.split("\n");
-  const labels = labelsForJob(job);
+  const composerLabels = isGrokJob(job) ? [GROK_LABELS.composer] : CHATGPT_COMPOSER_LABELS;
   let composerIndex = -1;
   for (let index = lines.length - 1; index >= 0; index -= 1) {
-    if (lines[index].includes(`textbox "${labels.composer}"`) || (isGrokJob(job) && lines[index].includes("contenteditable"))) {
+    if (composerLabels.some((label) => lines[index].includes(`textbox "${label}"`)) || (isGrokJob(job) && lines[index].includes("contenteditable"))) {
       composerIndex = index;
       break;
     }
@@ -1526,6 +1534,54 @@ async function waitForModelConfigurationToSettle(job, options = {}) {
   throw new Error(`Could not verify requested model settings after configuration for ${job.selection.modelFamily}`);
 }
 
+async function configurePowerSlider(job) {
+  // The current picker retains the compact tier semantics, but exposes keyboard
+  // interaction on a Power menuitem rather than accessible tier radio buttons.
+  const tiers = ["Instant", "Medium", "High", "Extra High", "Pro"];
+  const requested = job.selection.modelFamily === "instant" ? "Instant"
+    : job.selection.modelFamily === "pro" ? "Pro"
+    : job.selection.effort === "heavy" ? "Extra High"
+    : job.selection.effort === "extended" ? "High" : "Medium";
+  const target = tiers.indexOf(requested);
+  const selector = '[data-testid="composer-intelligence-picker-content"] [role="menuitem"][aria-label="Power"]';
+  await agentBrowser(job, "focus", selector);
+  const timeoutAt = Date.now() + MODEL_CONFIGURATION_SETTLE_TIMEOUT_MS;
+  let moves = 0;
+  while (Date.now() < timeoutAt && moves < tiers.length) {
+    const state = await evalPage(job, toJsonScript(`
+      const control = document.querySelector(${JSON.stringify(selector)});
+      const slider = control?.querySelector('[role="slider"]');
+      if (!slider || control.closest('[inert]')) return null;
+      const description = (control.getAttribute('aria-describedby') || '').split(/\\s+/)
+        .map(id => document.getElementById(id)?.textContent || '').join(' ');
+      return { min: slider.getAttribute('aria-valuemin'), max: slider.getAttribute('aria-valuemax'),
+        value: slider.getAttribute('aria-valuenow'), description };
+    `));
+    // The menuitem can appear before React mounts its slider, especially headless.
+    if (!state) {
+      await sleep(150);
+      continue;
+    }
+    const value = Number(state.value);
+    if (state.min !== "0" || state.max !== "4" || typeof state.value !== "string" || !Number.isInteger(value) || value < 0 || value > 4) {
+      throw new Error("ChatGPT Power slider has an unrecognized range; refusing to guess model settings");
+    }
+    if (value === target) {
+      if (!state.description.startsWith(`${requested}, ${target + 1} of ${tiers.length}.`)) {
+        throw new Error(`Could not verify ChatGPT Power tier: ${requested}`);
+      }
+      await log(`Verified ChatGPT Power tier ${requested} for family=${job.selection.modelFamily} effort=${job.selection.effort || "(none)"}`);
+      await agentBrowser(job, "press", "Escape");
+      await waitForModelConfigurationToSettle(job, { stronglyVerified: true });
+      return;
+    }
+    await agentBrowser(job, "press", value < target ? "ArrowRight" : "ArrowLeft");
+    moves++;
+    await sleep(150);
+  }
+  throw new Error(`ChatGPT Power slider did not reach requested tier: ${requested}`);
+}
+
 async function configureModel(job) {
   if (isGrokJob(job)) return configureGrokModel(job);
   const initialSnapshot = await snapshotText(job);
@@ -1536,6 +1592,10 @@ async function configureModel(job) {
 
   await log(`Configuring model family=${job.selection.modelFamily} effort=${job.selection?.effort || "(none)"}`);
   let familySnapshot = await openModelConfiguration(job);
+  if (findEntry(familySnapshot, (entry) => entry.kind === "menuitem" && entry.label === "Power" && !entry.disabled)) {
+    await configurePowerSlider(job);
+    return;
+  }
   let verificationSnapshot = familySnapshot;
 
   const alreadyConfiguredInUi = snapshotStronglyMatchesRequestedModel(familySnapshot, job.selection);
@@ -1582,25 +1642,34 @@ async function configureModel(job) {
     if (effortLabel && !effortSelectionVisible(familySnapshot, effortLabel)) {
       const opened = await openEffortDropdown(job);
       if (!opened) {
-        throw new Error(`Could not open effort dropdown for requested effort: ${effortLabel}`);
-      }
-      await agentBrowser(job, "wait", "300");
-      if (job.selection.modelFamily === "pro" && await maybeClickLabeledEntry(job, `Pro ${effortLabel}`, { kind: "menuitemradio" })) {
-        // Current ChatGPT exposes Pro effort choices as nested menu radio items.
+        // Current ChatGPT Pro menus sometimes expose only undifferentiated "Pro" with no Standard/Extended rows.
+        const afterOpenAttempt = await snapshotText(job);
+        if (job.selection.modelFamily === "pro" && snapshotStronglyMatchesRequestedModel(afterOpenAttempt, job.selection)) {
+          await log(`Pro effort dropdown unavailable for ${effortLabel}; accepting undifferentiated Pro selection`);
+          verificationSnapshot = afterOpenAttempt;
+          familySnapshot = afterOpenAttempt;
+        } else {
+          throw new Error(`Could not open effort dropdown for requested effort: ${effortLabel}`);
+        }
       } else {
-        await clickLabeledEntry(job, effortLabel, { kind: "option" });
-      }
-      await agentBrowser(job, "wait", "400");
-      const effortSnapshot = await snapshotText(job);
-      verificationSnapshot = effortSnapshot;
-      const selectedEffort = findEntry(
-        effortSnapshot,
-        (candidate) => candidate.kind === "combobox" && candidate.value === effortLabel && !candidate.disabled,
-      );
-      if (!selectedEffort && !effortSelectionVisible(effortSnapshot, effortLabel)) {
-        throw new Error(`Requested effort did not remain selected: ${effortLabel}`);
+        await agentBrowser(job, "wait", "300");
+        if (job.selection.modelFamily === "pro" && await maybeClickLabeledEntry(job, `Pro ${effortLabel}`, { kind: "menuitemradio" })) {
+          // Current ChatGPT exposes Pro effort choices as nested menu radio items.
+        } else {
+          await clickLabeledEntry(job, effortLabel, { kind: "option" });
+        }
+        await agentBrowser(job, "wait", "400");
+        const effortSnapshot = await snapshotText(job);
+        verificationSnapshot = effortSnapshot;
+        const selectedEffort = findEntry(
+          effortSnapshot,
+          (candidate) => candidate.kind === "combobox" && candidate.value === effortLabel && !candidate.disabled,
+        );
+        if (!selectedEffort && !effortSelectionVisible(effortSnapshot, effortLabel)) {
+          throw new Error(`Requested effort did not remain selected: ${effortLabel}`);
+        }
+        familySnapshot = effortSnapshot;
       }
-      familySnapshot = effortSnapshot;
     }
   }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-oracle",
-  "version": "0.7.19",
+  "version": "0.7.21",
   "description": "ChatGPT and Grok web-oracle extension for pi with isolated browser auth, async jobs, and project-context archives.",
   "private": false,
   "license": "MIT",
@@ -37,6 +37,8 @@
     "scripts/platform-smoke.mjs",
     "scripts/platform-smoke",
     "scripts/oracle-real-smoke.mjs",
+    "scripts/oracle-auth.test.mjs",
+    "scripts/oracle-model.test.mjs",
     "scripts/oracle-chatgpt-preset-proof.mjs"
   ],
   "pi": {
@@ -51,10 +53,11 @@
     "check:oracle-extension": "node --check extensions/oracle/shared/browser-profile-helpers.mjs && node --check extensions/oracle/shared/process-helpers.mjs && node --check extensions/oracle/shared/state-path-helpers.mjs && node --check extensions/oracle/shared/time-helpers.mjs && node --check extensions/oracle/shared/state-coordination-helpers.mjs && node --check extensions/oracle/shared/job-coordination-helpers.mjs && node --check extensions/oracle/shared/job-lifecycle-helpers.mjs && node --check extensions/oracle/shared/job-observability-helpers.mjs && node --check extensions/oracle/worker/run-job.mjs && node --check extensions/oracle/worker/state-locks.mjs && node --check extensions/oracle/worker/artifact-heuristics.mjs && node --check extensions/oracle/worker/chatgpt-ui-helpers.mjs && node --check extensions/oracle/worker/chatgpt-flow-helpers.mjs && node --check extensions/oracle/worker/auth-flow-helpers.mjs && node --check extensions/oracle/worker/auth-cookie-policy.mjs && node --check extensions/oracle/worker/chromium-cookie-source.mjs && node --check extensions/oracle/worker/auth-bootstrap.mjs && esbuild extensions/oracle/index.ts --bundle --platform=node --format=esm --external:@earendil-works/pi-ai --external:@earendil-works/pi-coding-agent --external:typebox --outfile=/tmp/pi-oracle-extension-check.js",
     "typecheck": "tsc --noEmit -p tsconfig.json",
     "typecheck:worker-helpers": "tsc --noEmit -p tsconfig.worker-helpers.json",
-    "sanity:oracle": "node scripts/oracle-sanity-runner.mjs",
+    "sanity:oracle": "node --test scripts/oracle-auth.test.mjs scripts/oracle-model.test.mjs && node scripts/oracle-sanity-runner.mjs",
     "pack:check": "npm pack --dry-run",
     "verify:oracle": "npm run check:oracle-extension && npm run check:platform-smoke && npm run check:oracle-real-smoke && npm run check:oracle-release-proof && npm run typecheck && npm run typecheck:worker-helpers && npm run sanity:oracle && npm run pack:check",
     "test": "npm run verify:oracle",
+    "check:compat": "npm run verify:oracle && node --test scripts/oracle-native.test.mjs",
     "prepublishOnly": "npm run release:check",
     "check:platform-smoke": "node --check scripts/platform-smoke.mjs && node --check scripts/platform-smoke/assertions.mjs && node --check scripts/platform-smoke/artifacts.mjs && node --check scripts/platform-smoke/crabbox-runner.mjs && node --check scripts/platform-smoke/doctor.mjs && node --check scripts/platform-smoke/targets.mjs && node scripts/platform-smoke/invariants.mjs",
     "smoke:platform": "node scripts/platform-smoke.mjs",
@@ -71,7 +74,7 @@
     "release:proof:chatgpt-presets": "node scripts/oracle-chatgpt-preset-proof.mjs check",
     "smoke:real:packed": "node scripts/oracle-real-smoke.mjs run --mode packed",
     "smoke:real:source": "node scripts/oracle-real-smoke.mjs run --mode source",
-    "sanity:oracle:platform": "node scripts/oracle-sanity-runner.mjs --mode platform",
+    "sanity:oracle:platform": "node --test scripts/oracle-auth.test.mjs scripts/oracle-model.test.mjs && node scripts/oracle-sanity-runner.mjs --mode platform",
     "verify:oracle:platform": "npm run check:oracle-extension && npm run check:platform-smoke && npm run check:oracle-real-smoke && npm run check:oracle-release-proof && npm run sanity:oracle:platform && npm run pack:check"
   },
   "dependencies": {
@@ -87,8 +90,8 @@
     "protobufjs": "7.6.1"
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "^0.80.9",
-    "@earendil-works/pi-coding-agent": "^0.80.9",
+    "@earendil-works/pi-ai": "0.86.1",
+    "@earendil-works/pi-coding-agent": "0.86.1",
     "@types/node": "^22.19.19",
     "esbuild": "^0.28.0",
     "tsx": "^4.22.3",

package/scripts/oracle-auth.test.mjs

@@ -0,0 +1,129 @@
+// Regression coverage for auth observations interrupted by navigation and
+// ChatGPT's anonymous /backend-api/me responses. No real cookies or browser.
+import assert from "node:assert/strict";
+import { readFile } from "node:fs/promises";
+import vm from "node:vm";
+import test from "node:test";
+import { classifyChatAuthPage, isAuthNavigationError, normalizeLoginProbeResult } from "../extensions/oracle/worker/auth-flow-helpers.mjs";
+import { CHATGPT_COMPOSER_LABELS } from "../extensions/oracle/worker/chatgpt-ui-helpers.mjs";
+
+const bootstrap = await readFile(new URL("../extensions/oracle/worker/auth-bootstrap.mjs", import.meta.url), "utf8");
+const worker = await readFile(new URL("../extensions/oracle/worker/run-job.mjs", import.meta.url), "utf8");
+function functionSource(source, name) {
+  const start = source.indexOf(`function ${name}(`);
+  assert.notEqual(start, -1);
+  const end = source.indexOf("\n}", start) + 2;
+  return `${source.slice(start - 6, start) === "async " ? "async " : ""}${source.slice(start, end)}`;
+}
+const readySnapshot = '- textbox "Chat with ChatGPT" [ref=e1]\n- button "Add files and more" [ref=e2]';
+const readyProbe = { ok: true, status: 200, bodyHasId: true, bodyHasEmail: true };
+const classify = (observation) => classifyChatAuthPage({ ...observation,
+  allowedOrigins: ["https://chatgpt.com"], cookieSourceLabel: "Chrome profile Default",
+  runtimeProfileDir: "/fixture/seed", logPath: "/fixture/auth.log" });
+const navigationError = () => new Error("✗ CDP error (Runtime.evaluate): Inspected target navigated or closed");
+
+function pollingHarness(overrides = {}) {
+  const logs = [];
+  let captures = 0;
+  const context = {
+    Date, Promise, Error, isAuthNavigationError, CHATGPT_COMPOSER_LABELS,
+    config: { auth: { bootstrapTimeoutMs: 2000, pollMs: 1 } },
+    getUrl: async () => "https://chatgpt.com/", snapshotText: async () => readySnapshot,
+    pageText: async () => "", loginProbe: async () => readyProbe,
+    writeFile: async () => {}, URL_PATH: "url", SNAPSHOT_PATH: "snapshot", BODY_PATH: "body", LOG_PATH: "log",
+    classifyChatPage: classify, log: async (line) => { logs.push(line); },
+    ensureBrowserConnected: async () => {},
+    sleep: (ms) => new Promise((resolve) => setTimeout(resolve, ms)),
+    preferredProvider: () => "chatgpt", providerName: () => "ChatGPT",
+    CHATGPT_LABELS: { composer: "Chat with ChatGPT", addFiles: "Add files and more" },
+    captureDiagnostics: async () => { captures++; }, authConfigRemediation: () => "Refresh source login.",
+    // Any reload/click on an anonymous login page is a regression.
+    openUrl: async () => assert.fail("unexpected auth navigation"),
+    targetCommand: async () => assert.fail("unexpected reload"),
+    ...overrides,
+  };
+  const poll = vm.runInNewContext(`(${functionSource(bootstrap, "waitForImportedAuthReady")})`, context);
+  return { poll, logs, get captures() { return captures; } };
+}
+
+test("auth polling retries a complete observation after each navigation-interrupted read", async () => {
+  for (const read of ["getUrl", "snapshotText", "pageText", "loginProbe"]) {
+    let calls = 0;
+    const good = { getUrl: "https://chatgpt.com/", snapshotText: readySnapshot, pageText: "", loginProbe: readyProbe };
+    const h = pollingHarness({ [read]: async () => { if (++calls === 1) throw navigationError(); return good[read]; } });
+    assert.equal((await h.poll()).state, "authenticated_and_ready");
+    assert.equal(calls, 2);
+    assert(h.logs.some((line) => line.includes("discarding partial reads")));
+  }
+});
+
+test("auth polling drains concurrent commands before surfacing a fatal failure", async () => {
+  let drained = false;
+  const failure = new Error("CDP permission denied");
+  const h = pollingHarness({ loginProbe: async () => { throw failure; }, pageText: async () => {
+    await new Promise((resolve) => setTimeout(resolve, 10)); drained = true; return "";
+  } });
+  await assert.rejects(h.poll(), (error) => error === failure && drained);
+});
+
+test("fatal failures take precedence over concurrent navigation failures", async () => {
+  const h = pollingHarness({ loginProbe: async () => { throw navigationError(); }, getUrl: async () => { throw new Error("Browser disconnected"); } });
+  await assert.rejects(h.poll(), /Browser disconnected/);
+});
+
+test("closed browsers are not relaunched and persistent navigation respects the deadline", async () => {
+  const closed = pollingHarness({ loginProbe: async () => { throw navigationError(); },
+    ensureBrowserConnected: async () => { throw new Error("The isolated oracle browser was closed"); } });
+  await assert.rejects(closed.poll(), /browser was closed/);
+  const navigating = pollingHarness({ loginProbe: async () => { throw navigationError(); },
+    config: { auth: { bootstrapTimeoutMs: 20, pollMs: 1 } } });
+  await assert.rejects(navigating.poll(), /Timed out verifying/);
+  assert.equal(navigating.captures, 1);
+});
+
+test("only known navigation/context destruction errors are retryable", () => {
+  for (const message of ["Execution context was destroyed, most likely because of a navigation", "Cannot find context with specified id", navigationError().message]) {
+    assert(isAuthNavigationError(new Error(message)));
+  }
+  for (const message of ["Target closed", "Browser disconnected", "CDP permission denied", "command timed out"]) {
+    assert.equal(isAuthNavigationError(new Error(message)), false);
+  }
+});
+
+for (const [name, source] of [["bootstrap", bootstrap], ["job worker", worker]]) {
+  test(`${name} probe distinguishes anonymous ua-* IDs from account IDs`, async () => {
+    const build = vm.runInNewContext(`(${functionSource(source, "buildLoginProbeScript")})`, {
+      toAsyncJsonScript: (body) => `(async () => { ${body} })()`,
+    });
+    for (const id of ["ua-visitor", "user-signed-in"]) {
+      const probe = normalizeLoginProbeResult(await vm.runInNewContext(build(50), {
+        location: { href: "https://chatgpt.com/auth/login", hostname: "chatgpt.com", pathname: "/auth/login" },
+        document: { querySelectorAll: () => [] }, AbortController, setTimeout, clearTimeout,
+        fetch: async () => ({ status: 200, headers: { get: () => "application/json" },
+          clone: () => ({ json: async () => ({ id, email: "", name: "" }) }) }),
+      }));
+      assert.equal(probe.bodyIsAnonymous, id.startsWith("ua-"));
+      const result = classify({ url: "https://chatgpt.com/auth/login", snapshot: "", body: "Log in or sign up", probe });
+      assert.equal(result.state, id.startsWith("ua-") ? "login_required" : "auth_transitioning");
+      if (id.startsWith("ua-")) {
+        const h = pollingHarness({ loginProbe: async () => probe });
+        await assert.rejects(h.poll(), /anonymous visitor session/);
+      }
+    }
+  });
+}
+
+test("auth recognizes current and legacy ready composers without trusting anonymous identity", () => {
+  // Cookie-only /me probes may run before hydration or without the app's bearer token.
+  const probe = { ...readyProbe, bodyIsAnonymous: true, bodyHasEmail: false };
+  const observe = (snapshot, overrides = {}) => classify({ url: "https://chatgpt.com/", snapshot, body: "", probe: { ...probe, ...overrides } }).state;
+  assert.equal(observe(""), "unknown");
+  for (const label of ["Chat with ChatGPT", "Ask ChatGPT"]) {
+    const snapshot = `- button "Open profile menu" [ref=e1]\n- button "Add files and more" [ref=e2]\n- textbox "${label}" [ref=e3]\n- button "Select ChatGPT model" [ref=e4]`;
+    assert.equal(observe(snapshot), "authenticated_and_ready", `${label} should finish auth verification`);
+    assert.equal(observe(snapshot, { domLoginCta: true }), "login_required");
+    assert.equal(observe(snapshot.replace('[ref=e3]', '[disabled, ref=e3]')), "unknown");
+    assert.equal(observe(snapshot.replace('- button "Add files and more" [ref=e2]', '')), "unknown");
+  }
+  assert.equal(observe('- textbox "Search" [ref=e1]\n- button "Add files and more" [ref=e2]'), "unknown");
+});

package/scripts/oracle-model.test.mjs

@@ -0,0 +1,83 @@
+import assert from "node:assert/strict";
+import { readFile } from "node:fs/promises";
+import vm from "node:vm";
+import test from "node:test";
+import * as ui from "../extensions/oracle/worker/chatgpt-ui-helpers.mjs";
+import { parseSnapshotEntries } from "../extensions/oracle/worker/artifact-heuristics.mjs";
+
+const worker = await readFile(new URL("../extensions/oracle/worker/run-job.mjs", import.meta.url), "utf8");
+const names = ["findEntry", "matchesModelConfigurationOpener", "canUseOpenModelMenuForSelection",
+  "openModelConfiguration", "configurePowerSlider", "configureModel", "waitForModelConfigurationToSettle", "toJsonScript"];
+const functions = names.flatMap((name) => {
+  const start = worker.indexOf(`function ${name}(`);
+  if (start < 0) return []; // Allows the same regression to run against the pre-slider worker.
+  const end = worker.indexOf("\n}", start) + 2;
+  return `${worker.slice(start - 6, start) === "async " ? "async " : ""}${worker.slice(start, end)}`;
+}).join("\n");
+
+function harness({ initial = 3, max = "4", wrongLabel = false, stuck = false, mountingReads = 0 } = {}) {
+  const labels = ["Instant", "Medium", "High", "Extra High", "Pro"];
+  let value = initial;
+  let open = false;
+  let verified = false;
+  const snapshot = () => open
+    ? '- button "Thinking effort" [expanded=true, ref=e1]\n- menu "Thinking effort" [ref=e2]\n- menuitem "Select model" [ref=e3]\n- menuitem "Power" [ref=e4]'
+    : `- button "${value === 4 ? "6 Pro" : labels[value]}" [expanded=false, ref=e1]\n- textbox "Ask ChatGPT" [ref=e5]\n- button "Add files and more" [ref=e6]`;
+  const control = {
+    closest: () => null,
+    getAttribute: () => "description",
+    querySelector: () => mountingReads-- > 0 ? null : ({ getAttribute: (name) => ({ "aria-valuemin": "0", "aria-valuemax": max, "aria-valuenow": String(value) })[name] }),
+  };
+  const context = vm.createContext({ ...ui, parseSnapshotEntries, Date, Error, JSON, Number,
+    CHATGPT_LABELS: { configure: "Configure..." },
+    MODEL_CONFIGURATION_OPEN_TIMEOUT_MS: 30, MODEL_CONFIGURATION_SETTLE_TIMEOUT_MS: 30,
+    MODEL_CONFIGURATION_CLOSE_RETRY_MS: 1, MODEL_CONFIGURATION_SETTLE_POLL_MS: 0,
+    isGrokJob: () => false, snapshotText: async () => snapshot(),
+    throwIfProviderTransientError: () => {}, dismissProFeedbackModal: async () => false,
+    clickRef: async () => { open = !open; }, sleep: async () => {},
+    composerControlsVisible: ui.snapshotHasUsableComposerControls,
+    log: async (line) => { if (line.startsWith("Verified ChatGPT Power tier")) verified = true; },
+    agentBrowser: async (_job, command, arg) => {
+      if (command === "focus") { assert(open); return; }
+      if (command !== "press") return;
+      if (arg === "Escape") open = false;
+      else if (!stuck) value = Math.max(0, Math.min(4, value + (arg === "ArrowRight" ? 1 : -1)));
+    },
+    evalPage: async (_job, script) => JSON.parse(vm.runInNewContext(script, { document: {
+      querySelector: () => open ? control : null,
+      getElementById: () => ({ textContent: `${wrongLabel ? "Unknown" : labels[value]}, ${value + 1} of 5.` }),
+    } })),
+  });
+  vm.runInContext(functions, context);
+  return { configure: (selection) => context.configureModel({ selection }),
+    get state() { return { value, open, verified }; } };
+}
+
+test("worker configures every preset through the current Power picker and closes it", async () => {
+  for (const [selection, expected] of [
+    [{ modelFamily: "instant", autoSwitchToThinking: false }, 0],
+    [{ modelFamily: "instant", autoSwitchToThinking: true }, 0],
+    [{ modelFamily: "thinking", effort: "light" }, 1],
+    [{ modelFamily: "thinking", effort: "standard" }, 1],
+    [{ modelFamily: "thinking", effort: "extended" }, 2],
+    [{ modelFamily: "thinking", effort: "heavy" }, 3],
+    [{ modelFamily: "pro", effort: "standard" }, 4],
+    [{ modelFamily: "pro", effort: "extended" }, 4],
+  ]) {
+    const h = harness({ initial: expected === 4 ? 0 : 4, mountingReads: 2 });
+    await h.configure(selection);
+    assert.deepEqual(h.state, { value: expected, open: false, verified: true });
+  }
+});
+
+test("worker refuses unknown, mislabelled, or unresponsive Power controls", async () => {
+  for (const [options, error] of [
+    [{ max: "5" }, /unrecognized range/],
+    [{ wrongLabel: true }, /Could not verify ChatGPT Power tier/],
+    [{ stuck: true }, /did not reach requested tier/],
+  ]) {
+    const h = harness(options);
+    await assert.rejects(h.configure({ modelFamily: "instant", autoSwitchToThinking: false }), error);
+    assert.equal(h.state.verified, false);
+  }
+});

package/scripts/oracle-real-smoke.mjs

@@ -11,7 +11,8 @@ import { basename, dirname, join, resolve } from "node:path";
 const DEFAULT_PROVIDER = "zai";
 const DEFAULT_MODEL = "glm-5.2";
 const DEFAULT_TIMEOUT_MS = 180_000;
-const EXPECTED_PI_VERSION = "0.80.9";
+const EXPECTED_PI_VERSION = process.env.PI_COMPAT_EXPECTED_VERSION
+  ?? JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8")).devDependencies["@earendil-works/pi-coding-agent"];
 const PACKAGE_NAME = "pi-oracle";
 
 function usage() {
@@ -22,6 +23,8 @@ Modes:
   source  Inner-loop/debug only. Loads this checkout with pi --no-extensions -e extensions/oracle/index.ts.
 
 Environment:
+  PI_HOST_CLI                  selected Pi manifest bin entry, invoked with this Node executable (default: pi on PATH)
+  PI_COMPAT_EXPECTED_VERSION   expected Pi version (default: package development baseline)
   PI_ORACLE_REAL_TEST_PROVIDER   pi provider for the test agent (default: ${DEFAULT_PROVIDER})
   PI_ORACLE_REAL_TEST_MODEL      pi model for the test agent (default: ${DEFAULT_MODEL})
   PI_ORACLE_REAL_TEST_TIMEOUT_MS per-agent timeout in ms (default: ${DEFAULT_TIMEOUT_MS})
@@ -65,7 +68,10 @@ function positiveTimeoutMs(value, label) {
 
 function commandExists(command, args = ["--version"]) {
   return new Promise((resolvePromise) => {
-    const child = spawn(command, args, { stdio: "ignore", shell: process.platform === "win32" });
+    const selectedCli = command === piCommand() && env("PI_HOST_CLI");
+    const child = spawn(selectedCli ? process.execPath : command, selectedCli ? [selectedCli, ...args] : args, {
+      stdio: "ignore", shell: !selectedCli && process.platform === "win32",
+    });
     child.on("error", () => resolvePromise(false));
     child.on("exit", (code) => resolvePromise(code === 0 || code === 1));
   });
@@ -104,7 +110,7 @@ async function doctor() {
   const failures = [];
   const warnings = [];
   const requiredCommands = [
-    [process.platform === "win32" ? "pi.cmd" : "pi", ["--version"], "pi CLI"],
+    [piCommand(), ["--version"], "pi CLI"],
     [process.platform === "win32" ? "tar.exe" : "tar", ["--version"], "tar"],
     ["zstd", ["--version"], "zstd"],
     [process.platform === "win32" ? "agent-browser.cmd" : "agent-browser", ["--version"], "agent-browser"],
@@ -134,10 +140,11 @@ async function doctor() {
 function runCommand(command, args, options) {
   const timeoutMs = positiveTimeoutMs(options.timeoutMs, "command timeout");
   return new Promise((resolvePromise) => {
-    const child = spawn(command, args, {
+    const selectedCli = command === piCommand() && env("PI_HOST_CLI");
+    const child = spawn(selectedCli ? process.execPath : command, selectedCli ? [selectedCli, ...args] : args, {
       cwd: options.cwd,
       env: options.env,
-      shell: process.platform === "win32",
+      shell: !selectedCli && process.platform === "win32",
       stdio: ["ignore", "pipe", "pipe"],
     });
     let stdout = "";
@@ -234,7 +241,7 @@ function entryExists(entries, path) {
 }
 
 function piCommand() {
-  return process.platform === "win32" ? "pi.cmd" : "pi";
+  return env("PI_HOST_CLI") ?? (process.platform === "win32" ? "pi.cmd" : "pi");
 }
 
 function npmCommand() {