Bridge workflow + MCP browser controls

[kmccleary3301]

This is a bunch of quality of life stuff I made to get this thing working on linux, bridging to other machines when I can't do that, supporting attachments, and supporting gpt-5.2-pro's different effort settings. Also a few other little things.

Summary

This PR adds a first-class bridge workflow for Oracle's ChatGPT browser engine (keep an authenticated ChatGPT session on a host machine, run Oracle from other machines), plus browser/MCP improvements that help agent runtimes (Codex CLI / Claude Code) use the browser engine correctly.

Key features

• Bridge CLI: oracle bridge host|client|doctor|codex-config|claude-config
  • Host runs a token-protected remote browser service and (optionally) maintains an SSH reverse tunnel.
  • Client stores the connection once (config-driven) and browser runs route through the host automatically.
  • Doctor prints actionable diagnostics (TCP reachability + auth health).
• Remote service health: token-protected GET /health endpoint for fast connectivity/auth checks.
• MCP (oracle-mcp) browser controls:
  • consult supports browser-specific overrides used by agent runtimes:
    • browserAttachments: "auto"|"never"|"always" (use "always" for real file/image uploads)
    • browserBundleFiles, browserThinkingEffort, browserKeepBrowser, browserKeepTabs, browserModelLabel
  • Tool + input schema descriptions expanded so Codex/Claude understand intended usage.
• Browser robustness:
  • Supports binary uploads (e.g. images) when --browser-attachments always / browserAttachments:"always" without tripping the 1MB text preflight.
  • Improves assistant turn capture by falling back to textContent when the UI renders empty innerText.

Docs

• docs/bridge.md (new)
• docs/mcp.md updated with MCP inputs
• docs/configuration.md updated with bridge config keys

Tests

• Added unit tests for bridge connection parsing, doctor output, and remote service config precedence.
• pnpm test passes locally.

Notes

• Does not implement automated cookie extraction/decryption from arbitrary browser profiles; bridge is token-protected and defaults to safe loopback bindings.

[steipete]

Thank you! Seems this PR is based of an older version, can you rebase it?

It’s 59 commits behind (base commit: cd128ea)

[steipete]

Is oracle bridge the same concept as oracle serve to connect to a remote browser?

At least it should - I built it serve for that use case. So you can connect to a remote browser instance.