pi-oracle 0.7.20 → 0.7.22

package/extensions/oracle/worker/run-job.mjs

@@ -23,6 +23,7 @@ import { getOracleJobsDir } from "../shared/state-path-helpers.mjs";
 import { extractArtifactLabels, FILE_LABEL_PATTERN_SOURCE, GENERIC_ARTIFACT_LABELS, parseSnapshotEntries, partitionStructuralArtifactCandidates } from "./artifact-heuristics.mjs";
 import {
   buildAllowedChatGptOrigins,
+  CHATGPT_COMPOSER_LABELS,
   deriveAssistantCompletionSignature,
   matchesCompactIntelligenceControlLabel,
   matchesCompactIntelligenceOpenerLabel,
@@ -51,7 +52,8 @@ if (!jobId) {
   process.exit(1);
 }
 
-const jobDir = join(getOracleJobsDir(), `oracle-${jobId}`);
+const ORACLE_JOBS_DIR = getOracleJobsDir();
+const jobDir = join(ORACLE_JOBS_DIR, `oracle-${jobId}`);
 const jobPath = `${jobDir}/job.json`;
 const CHATGPT_LABELS = {
   composer: "Chat with ChatGPT",
@@ -820,6 +822,7 @@ function buildLoginProbeScript(timeoutMs) {
     let bodyKeys = [];
     let bodyHasId = false;
     let bodyHasEmail = false;
+    let bodyIsAnonymous = false;
     try {
       if (typeof fetch === 'function') {
         const controller = new AbortController();
@@ -837,6 +840,7 @@ function buildLoginProbeScript(timeoutMs) {
             if (data && typeof data === 'object' && !Array.isArray(data)) {
               bodyKeys = Object.keys(data).slice(0, 12);
               bodyHasId = typeof data.id === 'string' && data.id.length > 0;
+              bodyIsAnonymous = typeof data.id === 'string' && data.id.startsWith('ua-');
               bodyHasEmail = typeof data.email === 'string' && data.email.includes('@');
             }
           }
@@ -860,6 +864,7 @@ function buildLoginProbeScript(timeoutMs) {
       bodyKeys,
       bodyHasId,
       bodyHasEmail,
+      bodyIsAnonymous,
     };
   `);
 }
@@ -936,7 +941,7 @@ function composerControlsVisible(snapshot, job = currentJob) {
   const entries = parseSnapshotEntries(snapshot);
   const hasComposer = isGrokJob(job)
     ? entries.some((entry) => !entry.disabled && ((entry.kind === "textbox" && entry.label === labels.composer) || /editable/.test(String(entry.line || ""))))
-    : entries.some((entry) => entry.kind === "textbox" && entry.label === labels.composer && !entry.disabled);
+    : entries.some((entry) => entry.kind === "textbox" && CHATGPT_COMPOSER_LABELS.includes(entry.label) && !entry.disabled);
   const hasAddFiles = entries.some(
     (entry) => entry.kind === "button" && entry.label === labels.addFiles && !entry.disabled,
   );
@@ -1041,8 +1046,7 @@ async function setComposerText(job, text) {
     return;
   }
   const snapshot = await snapshotText(job);
-  const labels = labelsForJob(job);
-  const entry = findEntry(snapshot, (candidate) => candidate.kind === "textbox" && candidate.label === labels.composer);
+  const entry = findEntry(snapshot, (candidate) => candidate.kind === "textbox" && CHATGPT_COMPOSER_LABELS.includes(candidate.label) && !candidate.disabled);
   if (!entry) throw new Error("Could not find ChatGPT composer textbox");
   await agentBrowser(job, "fill", entry.ref, text);
 }
@@ -1075,7 +1079,11 @@ function classifyChatPage({ job, url, snapshot, body, probe }) {
   const onAuthPath = typeof url === "string" && url.includes("/auth/");
   const hasUsableComposer = snapshotHasUsableComposerControls(snapshot);
 
-  const probeHasAccountIdentity = probe?.bodyHasId === true || probe?.bodyHasEmail === true;
+  if (probe?.bodyIsAnonymous && (probe?.onAuthPage || probe?.domLoginCta)) {
+    return { state: "login_required", message: "ChatGPT shows login controls and returned an anonymous visitor session, not a signed-in account. Sign in to ChatGPT in the configured source browser profile, then run /oracle-auth." };
+  }
+
+  const probeHasAccountIdentity = !probe?.bodyIsAnonymous && (probe?.bodyHasId === true || probe?.bodyHasEmail === true);
 
   if (probe?.status === 401 || (probe?.status === 403 && (!onAllowedOrigin || !hasUsableComposer))) {
     return { state: "login_required", message: "ChatGPT login is required. Run /oracle-auth." };
@@ -1268,10 +1276,10 @@ function detectResponseFailureText(text) {
 
 function composerSnapshotSlice(snapshot, job = currentJob) {
   const lines = snapshot.split("\n");
-  const labels = labelsForJob(job);
+  const composerLabels = isGrokJob(job) ? [GROK_LABELS.composer] : CHATGPT_COMPOSER_LABELS;
   let composerIndex = -1;
   for (let index = lines.length - 1; index >= 0; index -= 1) {
-    if (lines[index].includes(`textbox "${labels.composer}"`) || (isGrokJob(job) && lines[index].includes("contenteditable"))) {
+    if (composerLabels.some((label) => lines[index].includes(`textbox "${label}"`)) || (isGrokJob(job) && lines[index].includes("contenteditable"))) {
       composerIndex = index;
       break;
     }
@@ -1526,6 +1534,58 @@ async function waitForModelConfigurationToSettle(job, options = {}) {
   throw new Error(`Could not verify requested model settings after configuration for ${job.selection.modelFamily}`);
 }
 
+async function configurePowerSlider(job, powerRef) {
+  // The current picker retains the compact tier semantics, but exposes keyboard
+  // interaction on a Power menuitem rather than accessible tier radio buttons.
+  const tiers = ["Instant", "Medium", "High", "Extra High", "Pro"];
+  const requested = job.selection.modelFamily === "instant" ? "Instant"
+    : job.selection.modelFamily === "pro" ? "Pro"
+    : job.selection.effort === "heavy" ? "Extra High"
+    : job.selection.effort === "extended" ? "High" : "Medium";
+  const target = tiers.indexOf(requested);
+  const selector = '[role="menuitem"][aria-label="Power"]';
+  const timeoutAt = Date.now() + MODEL_CONFIGURATION_SETTLE_TIMEOUT_MS;
+  let moves = 0;
+  let focused = false;
+  while (Date.now() < timeoutAt && moves < tiers.length) {
+    const state = await evalPage(job, toJsonScript(`
+      const control = document.querySelector(${JSON.stringify(selector)});
+      const slider = control?.querySelector('[role="slider"]');
+      if (!slider || control.closest('[inert]')) return null;
+      const description = (control.getAttribute('aria-describedby') || '').split(/\\s+/)
+        .map(id => document.getElementById(id)?.textContent || '').join(' ');
+      return { min: slider.getAttribute('aria-valuemin'), max: slider.getAttribute('aria-valuemax'),
+        value: slider.getAttribute('aria-valuenow'), description };
+    `));
+    // The menuitem can appear before React mounts its slider, especially headless.
+    if (!state) {
+      await sleep(150);
+      continue;
+    }
+    const value = Number(state.value);
+    if (state.min !== "0" || state.max !== "4" || typeof state.value !== "string" || !Number.isInteger(value) || value < 0 || value > 4) {
+      throw new Error("ChatGPT Power slider has an unrecognized range; refusing to guess model settings");
+    }
+    if (!focused) {
+      await agentBrowser(job, "focus", powerRef);
+      focused = true;
+    }
+    if (value === target) {
+      if (!state.description.startsWith(`${requested}, ${target + 1} of ${tiers.length}.`)) {
+        throw new Error(`Could not verify ChatGPT Power tier: ${requested}`);
+      }
+      await log(`Verified ChatGPT Power tier ${requested} for family=${job.selection.modelFamily} effort=${job.selection.effort || "(none)"}`);
+      await agentBrowser(job, "press", "Escape");
+      await waitForModelConfigurationToSettle(job, { stronglyVerified: true });
+      return;
+    }
+    await agentBrowser(job, "press", value < target ? "ArrowRight" : "ArrowLeft");
+    moves++;
+    await sleep(150);
+  }
+  throw new Error(`ChatGPT Power slider did not reach requested tier: ${requested}`);
+}
+
 async function configureModel(job) {
   if (isGrokJob(job)) return configureGrokModel(job);
   const initialSnapshot = await snapshotText(job);
@@ -1536,6 +1596,11 @@ async function configureModel(job) {
 
   await log(`Configuring model family=${job.selection.modelFamily} effort=${job.selection?.effort || "(none)"}`);
   let familySnapshot = await openModelConfiguration(job);
+  const powerEntry = findEntry(familySnapshot, (entry) => entry.kind === "menuitem" && entry.label === "Power" && !entry.disabled);
+  if (powerEntry) {
+    await configurePowerSlider(job, powerEntry.ref);
+    return;
+  }
   let verificationSnapshot = familySnapshot;
 
   const alreadyConfiguredInUi = snapshotStronglyMatchesRequestedModel(familySnapshot, job.selection);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-oracle",
-  "version": "0.7.20",
+  "version": "0.7.22",
   "description": "ChatGPT and Grok web-oracle extension for pi with isolated browser auth, async jobs, and project-context archives.",
   "private": false,
   "license": "MIT",
@@ -37,6 +37,9 @@
     "scripts/platform-smoke.mjs",
     "scripts/platform-smoke",
     "scripts/oracle-real-smoke.mjs",
+    "scripts/oracle-auth.test.mjs",
+    "scripts/oracle-cookie-import.test.mjs",
+    "scripts/oracle-model.test.mjs",
     "scripts/oracle-chatgpt-preset-proof.mjs"
   ],
   "pi": {
@@ -48,13 +51,14 @@
     ]
   },
   "scripts": {
-    "check:oracle-extension": "node --check extensions/oracle/shared/browser-profile-helpers.mjs && node --check extensions/oracle/shared/process-helpers.mjs && node --check extensions/oracle/shared/state-path-helpers.mjs && node --check extensions/oracle/shared/time-helpers.mjs && node --check extensions/oracle/shared/state-coordination-helpers.mjs && node --check extensions/oracle/shared/job-coordination-helpers.mjs && node --check extensions/oracle/shared/job-lifecycle-helpers.mjs && node --check extensions/oracle/shared/job-observability-helpers.mjs && node --check extensions/oracle/worker/run-job.mjs && node --check extensions/oracle/worker/state-locks.mjs && node --check extensions/oracle/worker/artifact-heuristics.mjs && node --check extensions/oracle/worker/chatgpt-ui-helpers.mjs && node --check extensions/oracle/worker/chatgpt-flow-helpers.mjs && node --check extensions/oracle/worker/auth-flow-helpers.mjs && node --check extensions/oracle/worker/auth-cookie-policy.mjs && node --check extensions/oracle/worker/chromium-cookie-source.mjs && node --check extensions/oracle/worker/auth-bootstrap.mjs && esbuild extensions/oracle/index.ts --bundle --platform=node --format=esm --external:@earendil-works/pi-ai --external:@earendil-works/pi-coding-agent --external:typebox --outfile=/tmp/pi-oracle-extension-check.js",
+    "check:oracle-extension": "node --check extensions/oracle/shared/browser-profile-helpers.mjs && node --check extensions/oracle/shared/process-helpers.mjs && node --check extensions/oracle/shared/state-path-helpers.mjs && node --check extensions/oracle/shared/time-helpers.mjs && node --check extensions/oracle/shared/state-coordination-helpers.mjs && node --check extensions/oracle/shared/job-coordination-helpers.mjs && node --check extensions/oracle/shared/job-lifecycle-helpers.mjs && node --check extensions/oracle/shared/job-observability-helpers.mjs && node --check extensions/oracle/worker/run-job.mjs && node --check extensions/oracle/worker/state-locks.mjs && node --check extensions/oracle/worker/artifact-heuristics.mjs && node --check extensions/oracle/worker/chatgpt-ui-helpers.mjs && node --check extensions/oracle/worker/chatgpt-flow-helpers.mjs && node --check extensions/oracle/worker/auth-flow-helpers.mjs && node --check extensions/oracle/worker/auth-cookie-policy.mjs && node --check extensions/oracle/worker/chromium-cookie-source.mjs && node --check extensions/oracle/worker/linux-chromium-cookie-source.mjs && node --check extensions/oracle/worker/auth-bootstrap.mjs && esbuild extensions/oracle/index.ts --bundle --platform=node --format=esm --external:@earendil-works/pi-ai --external:@earendil-works/pi-coding-agent --external:typebox --outfile=/tmp/pi-oracle-extension-check.js",
     "typecheck": "tsc --noEmit -p tsconfig.json",
     "typecheck:worker-helpers": "tsc --noEmit -p tsconfig.worker-helpers.json",
-    "sanity:oracle": "node scripts/oracle-sanity-runner.mjs",
+    "sanity:oracle": "node --test scripts/oracle-auth.test.mjs scripts/oracle-cookie-import.test.mjs scripts/oracle-model.test.mjs && node scripts/oracle-sanity-runner.mjs",
     "pack:check": "npm pack --dry-run",
     "verify:oracle": "npm run check:oracle-extension && npm run check:platform-smoke && npm run check:oracle-real-smoke && npm run check:oracle-release-proof && npm run typecheck && npm run typecheck:worker-helpers && npm run sanity:oracle && npm run pack:check",
     "test": "npm run verify:oracle",
+    "check:compat": "npm run verify:oracle && node --test scripts/oracle-native.test.mjs",
     "prepublishOnly": "npm run release:check",
     "check:platform-smoke": "node --check scripts/platform-smoke.mjs && node --check scripts/platform-smoke/assertions.mjs && node --check scripts/platform-smoke/artifacts.mjs && node --check scripts/platform-smoke/crabbox-runner.mjs && node --check scripts/platform-smoke/doctor.mjs && node --check scripts/platform-smoke/targets.mjs && node scripts/platform-smoke/invariants.mjs",
     "smoke:platform": "node scripts/platform-smoke.mjs",
@@ -71,7 +75,7 @@
     "release:proof:chatgpt-presets": "node scripts/oracle-chatgpt-preset-proof.mjs check",
     "smoke:real:packed": "node scripts/oracle-real-smoke.mjs run --mode packed",
     "smoke:real:source": "node scripts/oracle-real-smoke.mjs run --mode source",
-    "sanity:oracle:platform": "node scripts/oracle-sanity-runner.mjs --mode platform",
+    "sanity:oracle:platform": "node --test scripts/oracle-auth.test.mjs scripts/oracle-cookie-import.test.mjs scripts/oracle-model.test.mjs && node scripts/oracle-sanity-runner.mjs --mode platform",
     "verify:oracle:platform": "npm run check:oracle-extension && npm run check:platform-smoke && npm run check:oracle-real-smoke && npm run check:oracle-release-proof && npm run sanity:oracle:platform && npm run pack:check"
   },
   "dependencies": {
@@ -83,17 +87,17 @@
     "typebox": "*"
   },
   "overrides": {
-    "basic-ftp": "6.0.1",
-    "protobufjs": "7.6.1"
+    "basic-ftp": "6.2.1",
+    "protobufjs": "7.6.6"
   },
   "devDependencies": {
-    "@earendil-works/pi-ai": "^0.80.9",
-    "@earendil-works/pi-coding-agent": "^0.80.9",
+    "@earendil-works/pi-ai": "1.0.0",
+    "@earendil-works/pi-coding-agent": "1.0.0",
     "@types/node": "^22.19.19",
     "esbuild": "^0.28.0",
     "tsx": "^4.22.3",
-    "typebox": "^1.1.39",
-    "typescript": "^6.0.3"
+    "typebox": "1.3.34",
+    "typescript": "^7.0.0"
   },
   "engines": {
     "node": ">=22.19.0"
@@ -103,7 +107,7 @@
     "linux",
     "win32"
   ],
-  "packageManager": "npm@11.16.0",
+  "packageManager": "npm@11.21.0",
   "peerDependenciesMeta": {
     "@earendil-works/pi-ai": {
       "optional": true

package/platform-smoke.config.mjs

@@ -6,33 +6,12 @@ export default {
   artifactRoot: ".artifacts/platform-smoke",
   requiredTargets: ["macos", "ubuntu", "windows-native"],
   requiredSuites: ["platform-build", "real-extension"],
-  workflows: {
-    everyday: {
-      description: "Fast local validation for normal iteration.",
-      commands: ["npm run verify:oracle"],
-    },
-    platformSensitive: {
-      description: "Doctor plus focused platform target/suite runs for platform-sensitive changes.",
-      commands: [
-        "npm run smoke:platform:doctor",
-        "node scripts/platform-smoke.mjs run --target <target> --suite <suite>",
-      ],
-    },
-    platformMatrix: {
-      description: "Doctor-first packed-install macOS/Ubuntu/Windows platform proof.",
-      commands: ["npm run smoke:platform:all"],
-    },
-    release: {
-      description: "Full release gate: local verification, fresh ChatGPT preset proof, plus the doctor-first platform matrix.",
-      commands: ["npm run release:check"],
-    },
-  },
   requiredCrabbox: {
     source: "https://github.com/openclaw/crabbox",
     minVersion: "0.26.0",
   },
   ubuntuContainerImage: "pi-oracle-platform-smoke:node24",
-  ubuntuContainerBaseImage: "cimg/node:24.16",
+  ubuntuContainerBaseImage: "cimg/node:24.21",
   windowsParallels: {
     sourceVm: "pi-extension-windows-template",
     snapshot: "crabbox-ready",

package/scripts/oracle-auth.test.mjs

@@ -0,0 +1,164 @@
+// Regression coverage for auth observations interrupted by navigation and
+// ChatGPT's anonymous /backend-api/me responses. No real cookies or browser.
+import assert from "node:assert/strict";
+import { readFile } from "node:fs/promises";
+import vm from "node:vm";
+import test from "node:test";
+import { classifyChatAuthPage, isAuthNavigationError, normalizeLoginProbeResult } from "../extensions/oracle/worker/auth-flow-helpers.mjs";
+import { CHATGPT_COMPOSER_LABELS } from "../extensions/oracle/worker/chatgpt-ui-helpers.mjs";
+
+const bootstrap = await readFile(new URL("../extensions/oracle/worker/auth-bootstrap.mjs", import.meta.url), "utf8");
+const worker = await readFile(new URL("../extensions/oracle/worker/run-job.mjs", import.meta.url), "utf8");
+function functionSource(source, name) {
+  const start = source.indexOf(`function ${name}(`);
+  assert.notEqual(start, -1);
+  const end = source.indexOf("\n}", start) + 2;
+  return `${source.slice(start - 6, start) === "async " ? "async " : ""}${source.slice(start, end)}`;
+}
+const readySnapshot = '- textbox "Chat with ChatGPT" [ref=e1]\n- button "Add files and more" [ref=e2]';
+const readyProbe = { ok: true, status: 200, bodyHasId: true, bodyHasEmail: true };
+const classify = (observation) => classifyChatAuthPage({ ...observation,
+  allowedOrigins: ["https://chatgpt.com"], cookieSourceLabel: "Chrome profile Default",
+  runtimeProfileDir: "/fixture/seed", logPath: "/fixture/auth.log" });
+const navigationError = () => new Error("✗ CDP error (Runtime.evaluate): Inspected target navigated or closed");
+
+function pollingHarness(overrides = {}) {
+  const logs = [];
+  let captures = 0;
+  const context = {
+    Date, Promise, Error, isAuthNavigationError, CHATGPT_COMPOSER_LABELS,
+    config: { auth: { bootstrapTimeoutMs: 2000, pollMs: 1 } },
+    getUrl: async () => "https://chatgpt.com/", snapshotText: async () => readySnapshot,
+    pageText: async () => "", loginProbe: async () => readyProbe,
+    writeFile: async () => {}, URL_PATH: "url", SNAPSHOT_PATH: "snapshot", BODY_PATH: "body", LOG_PATH: "log",
+    classifyChatPage: classify, log: async (line) => { logs.push(line); },
+    ensureBrowserConnected: async () => {},
+    sleep: (ms) => new Promise((resolve) => setTimeout(resolve, ms)),
+    preferredProvider: () => "chatgpt", providerName: () => "ChatGPT",
+    CHATGPT_LABELS: { composer: "Chat with ChatGPT", addFiles: "Add files and more" },
+    captureDiagnostics: async () => { captures++; }, authConfigRemediation: () => "Refresh source login.",
+    // Any reload/click on an anonymous login page is a regression.
+    openUrl: async () => assert.fail("unexpected auth navigation"),
+    targetCommand: async () => assert.fail("unexpected reload"),
+    ...overrides,
+  };
+  const poll = vm.runInNewContext(`(${functionSource(bootstrap, "waitForImportedAuthReady")})`, context);
+  return { poll, logs, get captures() { return captures; } };
+}
+
+test("auth launch waits for a closing daemon only on the known pre-launch socket failure", async () => {
+  const socketFailure = "Could not configure browser: Failed to connect: No such file or directory (os error 2)";
+  for (const [failures, message, succeeds] of [
+    [1, socketFailure, true],
+    [Infinity, socketFailure, false],
+    [1, "Chrome exited before startup", false],
+  ]) {
+    let now = 0;
+    let launches = 0;
+    const launch = vm.runInNewContext(`(${functionSource(bootstrap, "launchTargetBrowser")})`, {
+      Date: { now: () => now }, Math, Error, JSON,
+      AGENT_BROWSER_BIN: "agent-browser", AGENT_BROWSER_COMMAND_TIMEOUT_MS: 500,
+      closeTargetBrowser: async () => {},
+      targetBrowserBaseArgs: () => ["--session", "fixture-auth", "--profile", "/fixture/seed"],
+      log: async () => {},
+      sleep: async (ms) => { now += ms; },
+      spawnCommand: async (_command, args, options) => {
+        assert.equal(args.at(-1), "about:blank");
+        assert(options.timeoutMs > 0 && options.timeoutMs <= 500);
+        return ++launches <= failures
+          ? { code: 1, stdout: "", stderr: message }
+          : { code: 0, stdout: "Browser opened", stderr: "" };
+      },
+    });
+    if (succeeds) {
+      await launch();
+      assert.equal(launches, 2);
+    } else {
+      await assert.rejects(launch(), (error) => error.message === message);
+      if (message === socketFailure) assert(now <= 500 && launches > 1, "persistent socket failure must stop at the launch deadline");
+      else assert.equal(launches, 1, "other launch failures must not be retried");
+    }
+  }
+});
+
+test("auth polling retries a complete observation after each navigation-interrupted read", async () => {
+  for (const read of ["getUrl", "snapshotText", "pageText", "loginProbe"]) {
+    let calls = 0;
+    const good = { getUrl: "https://chatgpt.com/", snapshotText: readySnapshot, pageText: "", loginProbe: readyProbe };
+    const h = pollingHarness({ [read]: async () => { if (++calls === 1) throw navigationError(); return good[read]; } });
+    assert.equal((await h.poll()).state, "authenticated_and_ready");
+    assert.equal(calls, 2);
+    assert(h.logs.some((line) => line.includes("discarding partial reads")));
+  }
+});
+
+test("auth polling drains concurrent commands before surfacing a fatal failure", async () => {
+  let drained = false;
+  const failure = new Error("CDP permission denied");
+  const h = pollingHarness({ loginProbe: async () => { throw failure; }, pageText: async () => {
+    await new Promise((resolve) => setTimeout(resolve, 10)); drained = true; return "";
+  } });
+  await assert.rejects(h.poll(), (error) => error === failure && drained);
+});
+
+test("fatal failures take precedence over concurrent navigation failures", async () => {
+  const h = pollingHarness({ loginProbe: async () => { throw navigationError(); }, getUrl: async () => { throw new Error("Browser disconnected"); } });
+  await assert.rejects(h.poll(), /Browser disconnected/);
+});
+
+test("closed browsers are not relaunched and persistent navigation respects the deadline", async () => {
+  const closed = pollingHarness({ loginProbe: async () => { throw navigationError(); },
+    ensureBrowserConnected: async () => { throw new Error("The isolated oracle browser was closed"); } });
+  await assert.rejects(closed.poll(), /browser was closed/);
+  const navigating = pollingHarness({ loginProbe: async () => { throw navigationError(); },
+    config: { auth: { bootstrapTimeoutMs: 20, pollMs: 1 } } });
+  await assert.rejects(navigating.poll(), /Timed out verifying/);
+  assert.equal(navigating.captures, 1);
+});
+
+test("only known navigation/context destruction errors are retryable", () => {
+  for (const message of ["Execution context was destroyed, most likely because of a navigation", "Cannot find context with specified id", navigationError().message]) {
+    assert(isAuthNavigationError(new Error(message)));
+  }
+  for (const message of ["Target closed", "Browser disconnected", "CDP permission denied", "command timed out"]) {
+    assert.equal(isAuthNavigationError(new Error(message)), false);
+  }
+});
+
+for (const [name, source] of [["bootstrap", bootstrap], ["job worker", worker]]) {
+  test(`${name} probe distinguishes anonymous ua-* IDs from account IDs`, async () => {
+    const build = vm.runInNewContext(`(${functionSource(source, "buildLoginProbeScript")})`, {
+      toAsyncJsonScript: (body) => `(async () => { ${body} })()`,
+    });
+    for (const id of ["ua-visitor", "user-signed-in"]) {
+      const probe = normalizeLoginProbeResult(await vm.runInNewContext(build(50), {
+        location: { href: "https://chatgpt.com/auth/login", hostname: "chatgpt.com", pathname: "/auth/login" },
+        document: { querySelectorAll: () => [] }, AbortController, setTimeout, clearTimeout,
+        fetch: async () => ({ status: 200, headers: { get: () => "application/json" },
+          clone: () => ({ json: async () => ({ id, email: "", name: "" }) }) }),
+      }));
+      assert.equal(probe.bodyIsAnonymous, id.startsWith("ua-"));
+      const result = classify({ url: "https://chatgpt.com/auth/login", snapshot: "", body: "Log in or sign up", probe });
+      assert.equal(result.state, id.startsWith("ua-") ? "login_required" : "auth_transitioning");
+      if (id.startsWith("ua-")) {
+        const h = pollingHarness({ loginProbe: async () => probe });
+        await assert.rejects(h.poll(), /anonymous visitor session/);
+      }
+    }
+  });
+}
+
+test("auth recognizes current and legacy ready composers without trusting anonymous identity", () => {
+  // Cookie-only /me probes may run before hydration or without the app's bearer token.
+  const probe = { ...readyProbe, bodyIsAnonymous: true, bodyHasEmail: false };
+  const observe = (snapshot, overrides = {}) => classify({ url: "https://chatgpt.com/", snapshot, body: "", probe: { ...probe, ...overrides } }).state;
+  assert.equal(observe(""), "unknown");
+  for (const label of ["Chat with ChatGPT", "Ask ChatGPT"]) {
+    const snapshot = `- button "Open profile menu" [ref=e1]\n- button "Add files and more" [ref=e2]\n- textbox "${label}" [ref=e3]\n- button "Select ChatGPT model" [ref=e4]`;
+    assert.equal(observe(snapshot), "authenticated_and_ready", `${label} should finish auth verification`);
+    assert.equal(observe(snapshot, { domLoginCta: true }), "login_required");
+    assert.equal(observe(snapshot.replace('[ref=e3]', '[disabled, ref=e3]')), "unknown");
+    assert.equal(observe(snapshot.replace('- button "Add files and more" [ref=e2]', '')), "unknown");
+  }
+  assert.equal(observe('- textbox "Search" [ref=e1]\n- button "Add files and more" [ref=e2]'), "unknown");
+});

package/scripts/oracle-chatgpt-preset-proof.mjs

@@ -6,6 +6,7 @@
 
 import { execFileSync } from "node:child_process";
 import { existsSync, readFileSync } from "node:fs";
+import { createRequire } from "node:module";
 import { dirname, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 
@@ -69,18 +70,24 @@ function currentGitStatus() {
 }
 
 function canonicalPresets() {
-  const configSource = readFileSync(resolve(REPO_ROOT, "extensions/oracle/lib/config.ts"), "utf8");
-  const registryMatch = configSource.match(/export const ORACLE_SUBMIT_PRESETS = \{([\s\S]*?)\n\} as const;/);
-  if (!registryMatch) throw new Error("Could not locate ORACLE_SUBMIT_PRESETS registry in extensions/oracle/lib/config.ts");
-  const entries = [...registryMatch[1].matchAll(
-    /^\s{2}([a-z0-9_]+):\s*\{\s*label:\s*"[^"]+",\s*modelFamily:\s*"([a-z]+)"\s+as const(?:,\s*effort:\s*"([a-z]+)"\s+as const)?,\s*autoSwitchToThinking:\s*(true|false)\s*\}/gm,
-  )];
-  if (entries.length === 0) throw new Error("Could not parse ORACLE_SUBMIT_PRESETS registry entries");
-  return Object.fromEntries(entries.map((match) => [match[1], {
-    modelFamily: match[2],
-    effort: match[3],
-    autoSwitchToThinking: match[4] === "true",
-  }]));
+  // Derive the canonical registry by importing the real config module so a
+  // formatting change in config.ts can never silently drop a preset from the
+  // release proof's required set.
+  const tsx = createRequire(import.meta.url).resolve("tsx");
+  const stdout = execFileSync(process.execPath, [
+    "--import", tsx,
+    "--input-type=module",
+    "--eval",
+    "const mod = await import('./extensions/oracle/lib/config.ts');" +
+    "const presets = Object.fromEntries(Object.entries(mod.ORACLE_SUBMIT_PRESETS).map(([id, preset]) => [id, {" +
+    "modelFamily: preset.modelFamily, effort: preset.effort, autoSwitchToThinking: preset.autoSwitchToThinking }]));" +
+    "process.stdout.write(JSON.stringify(presets));",
+  ], { cwd: REPO_ROOT, encoding: "utf8" });
+  const presets = JSON.parse(stdout);
+  if (!presets || typeof presets !== "object" || Object.keys(presets).length === 0) {
+    throw new Error("ORACLE_SUBMIT_PRESETS registry resolved to no presets");
+  }
+  return presets;
 }
 
 function canonicalPresetIds() {