Refactor multiple flows to enhance performance, boost scalability, and ensure stability.

.github/workflows/docker.yaml

@@ -6,11 +6,15 @@ on:
       - main
     tags:
       - "v*"
-    paths-ignore:
-      - "**/*.md"
-      - ".github/*"
-      - "LICENSE"
-      - ".gitignore"
+    paths:
+      - "app/**"
+      - "config/**"
+      - "pyproject.toml"
+      - "uv.lock"
+      - "Dockerfile"
+      - "run.py"
+      - ".github/workflows/docker.yaml"
+  workflow_dispatch:
 
 env:
   REGISTRY: ghcr.io
@@ -25,24 +29,24 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v4
+        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
 
       - name: Log in to Container Registry
-        uses: docker/login-action@v4
+        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Extract metadata
         id: meta
-        uses: docker/metadata-action@v6
+        uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           tags: |
@@ -54,7 +58,7 @@ jobs:
             type=raw,value=latest,enable={{is_default_branch}}
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@v7
+        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7
         with:
           context: .
           push: true

.github/workflows/lint.yaml

@@ -0,0 +1,41 @@
+name: Lint and Type Check
+
+on:
+  push:
+    paths:
+      - "**.py"
+      - "pyproject.toml"
+      - "uv.lock"
+      - ".github/workflows/lint.yaml"
+  pull_request:
+    paths:
+      - "**.py"
+      - "pyproject.toml"
+      - "uv.lock"
+      - ".github/workflows/lint.yaml"
+
+permissions:
+  contents: read
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
+
+      - name: Install dependencies
+        run: uv sync --all-groups
+
+      - name: Run Ruff
+        run: uv run ruff check .
+
+      - name: Run Ruff Format
+        run: uv run ruff format . --check
+
+      - name: Run Ty Check
+        run: uv run ty check

.github/workflows/track.yml

@@ -2,7 +2,7 @@ name: Update gemini-webapi
 
 on:
   schedule:
-    - cron: "0 0 * * *" # Runs every day at midnight
+    - cron: "0 0 * * *"
   workflow_dispatch:
 
 jobs:
@@ -11,13 +11,13 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
+
     steps:
-      - uses: actions/checkout@v6
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v7
-        with:
-          version: "latest"
+        uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
 
       - name: Update gemini-webapi
         id: update
@@ -33,8 +33,8 @@ jobs:
           fi
           echo "Current gemini-webapi version: $OLD_VERSION"
 
-          # Update the package using uv, which handles pyproject.toml and uv.lock
-          uv add --upgrade gemini-webapi
+          # Update gemini-webapi to the latest version
+          uv lock --upgrade-package gemini-webapi
 
           # Get new version of gemini-webapi after upgrade
           NEW_VERSION=$(uv pip show gemini-webapi | grep ^Version: | awk '{print $2}')
@@ -56,7 +56,7 @@ jobs:
 
       - name: Create Pull Request
         if: steps.update.outputs.updated == 'true'
-        uses: peter-evans/create-pull-request@v8
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           commit-message: ":arrow_up: update gemini-webapi to ${{ steps.update.outputs.version }}"

Dockerfile

@@ -3,10 +3,14 @@ FROM ghcr.io/astral-sh/uv:python3.13-trixie-slim
 LABEL org.opencontainers.image.title="Gemini-FastAPI" \
       org.opencontainers.image.description="Web-based Gemini models wrapped into an OpenAI-compatible API."
 
+USER root
+
 WORKDIR /app
 
+SHELL ["/bin/bash", "-o", "pipefail", "-c"]
+
 RUN apt-get update && apt-get install -y --no-install-recommends \
-    tini \
+    tini curl ca-certificates git \
     && rm -rf /var/lib/apt/lists/*
 
 ENV UV_COMPILE_BYTECODE=1 \
@@ -22,6 +26,9 @@ COPY run.py .
 
 EXPOSE 8000
 
+HEALTHCHECK --interval=30s --timeout=10s --start-period=300s --retries=3 \
+    CMD curl -f http://localhost:8000/health || exit 1
+
 ENTRYPOINT ["/usr/bin/tini", "--"]
 
 CMD ["uv", "run", "--no-dev", "run.py"]

README.md

@@ -1,22 +1,22 @@
 # Gemini-FastAPI
 
 [![Python 3.13](https://img.shields.io/badge/python-3.13+-blue.svg)](https://www.python.org/downloads/)
-[![FastAPI](https://img.shields.io/badge/FastAPI-0.115+-green.svg)](https://fastapi.tiangolo.com/)
+[![FastAPI](https://img.shields.io/badge/FastAPI-green.svg)](https://fastapi.tiangolo.com/)
 [![License](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 
 [ English | [中文](README.zh.md) ]
 
 Web-based Gemini models wrapped into an OpenAI-compatible API. Powered by [HanaokaYuzu/Gemini-API](https://github.com/HanaokaYuzu/Gemini-API).
 
-**✅ Call Gemini's web-based models via API without an API Key, completely free!**
+**Call Gemini's web-based models via API without an API Key, completely free!**
 
 ## Features
 
-- **🔐 No Google API Key Required**: Use web cookies to freely access Gemini's models via API.
-- **🔍 Google Search Included**: Get up-to-date answers using web-based Gemini's search capabilities.
-- **💾 Conversation Persistence**: LMDB-based storage supporting multi-turn conversations.
-- **🖼️ Multi-modal Support**: Support for handling text, images, and file uploads.
-- **⚖️ Multi-account Load Balancing**: Distribute requests across multiple accounts with per-account proxy settings.
+- **No Google API Key Required**: Use web cookies to freely access Gemini's models via API.
+- **Google Search Included**: Get up-to-date answers using web-based Gemini's search capabilities.
+- **Conversation Persistence**: LMDB-based storage supporting multi-turn conversations.
+- **Multi-modal Support**: Support for handling text, images, and file uploads.
+- **Multi-account Load Balancing**: Distribute requests across multiple accounts with per-account proxy settings.
 
 ## Quick Start
 
@@ -25,7 +25,7 @@ Web-based Gemini models wrapped into an OpenAI-compatible API. Powered by [Hanao
 ### Prerequisites
 
 - Python 3.13
-- Google account with Gemini access on web
+- Google account with Gemini access on web (Enable **[Gemini Apps activity](https://myactivity.google.com/product/gemini)** for best conversation persistence)
 - `secure_1psid` and `secure_1psidts` cookies from Gemini web interface
 
 ### Installation
@@ -57,6 +57,7 @@ gemini:
       secure_1psid: "YOUR_SECURE_1PSID_HERE"
       secure_1psidts: "YOUR_SECURE_1PSIDTS_HERE"
       proxy: null # Optional proxy URL (null/empty keeps direct connection)
+      impersonate: null # Optional browser impersonation target (null uses library default)
 ```
 
 > [!NOTE]
@@ -96,7 +97,7 @@ These endpoints are designed to be compatible with OpenAI's API structure, allow
 ### Utility Endpoints
 
 - **`GET /health`**: Health check endpoint. Returns the status of the server, configured Gemini clients, and conversation storage.
-- **`GET /images/{filename}`**: Internal endpoint to serve generated images. Requires a valid token (automatically included in image URLs returned by the API).
+- **`GET /media/{filename}`**: Internal endpoint to serve generated media. Requires a valid token (automatically included in image URLs returned by the API).
 
 ## Docker Deployment
 
@@ -180,6 +181,10 @@ export CONFIG_GEMINI__CLIENTS__0__SECURE_1PSIDTS="your-secure-1psidts"
 # Override optional proxy settings for client 0
 export CONFIG_GEMINI__CLIENTS__0__PROXY="socks5://127.0.0.1:1080"
 
+# Override browser impersonation for client 0
+export CONFIG_GEMINI__CLIENTS__0__IMPERSONATE="chrome"
+
+
 # Override conversation storage size limit
 export CONFIG_STORAGE__MAX_SIZE=268435456  # 256 MB
 ```
@@ -204,13 +209,35 @@ To use Gemini-FastAPI, you need to extract your Gemini session cookies:
    - `__Secure-1PSID`
    - `__Secure-1PSIDTS`
 
+> [!IMPORTANT]
+> **Enable [Gemini Apps activity](https://myactivity.google.com/product/gemini)** to ensure stable conversation persistence.
+>
+> While active chat turns may work temporarily without it, any transient error, TLS session restart, or server reboot can cause Google to expire the conversation metadata. If this setting is disabled, the model will **completely lose the context of your multi-turn conversation**, making old threads unreachable even if they are stored in your local LMDB.
+
 > [!TIP]
 > For detailed instructions, refer to the [HanaokaYuzu/Gemini-API authentication guide](https://github.com/HanaokaYuzu/Gemini-API?tab=readme-ov-file#authentication).
 
 ### Proxy Settings
 
 Each client entry can be configured with a different proxy to work around rate limits. Omit the `proxy` field or set it to `null` or an empty string to keep a direct connection.
 
+### Browser Impersonation
+
+Each client can optionally set an `impersonate` value to control the TLS/HTTP fingerprint used by `curl_cffi`.
+
+- Set to `null` (default) to use the library's default.
+- Set to any value supported by [`curl_cffi`'s `BrowserTypeLiteral`](https://github.com/lexiforest/curl_cffi).
+- The value is validated at startup; an invalid value will prevent the server from starting.
+
+```yaml
+gemini:
+  clients:
+    - id: "client-a"
+      impersonate: "chrome" # Use Chrome fingerprint
+    - id: "client-b"
+      impersonate: null # Use library default
+```
+
 ### Custom Models
 
 You can define custom models in `config/config.yaml` or via environment variables.