@steipete/oracle 0.14.1 → 0.15.0

package/dist/src/browser/windowsCookies.js

@@ -0,0 +1,219 @@
+import crypto from 'node:crypto';
+import fs from 'node:fs/promises';
+import { existsSync, promises as fsp } from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import sqlite3 from 'sqlite3';
+import { createRequire } from 'node:module';
+import { spawnSync } from 'node:child_process';
+let cachedUnprotect = null;
+function getUnprotectData() {
+    if (cachedUnprotect) {
+        return cachedUnprotect;
+    }
+    try {
+        // win-dpapi is CommonJS; require it explicitly and support both named/default shapes.
+        const dpapiModule = createRequire(import.meta.url)('win-dpapi');
+        const unprotect = dpapiModule?.Dpapi?.unprotectData ??
+            dpapiModule?.default?.unprotectData ??
+            ((_) => {
+                throw new Error('win-dpapi unprotectData not available');
+            });
+        cachedUnprotect = unprotect;
+        return unprotect;
+    }
+    catch (error) {
+        if (process.platform !== 'win32') {
+            // On macOS/Linux we don't need DPAPI; return a function that makes misuse obvious.
+            cachedUnprotect = () => {
+                throw new Error('win-dpapi is unavailable on non-Windows platforms');
+            };
+            return cachedUnprotect;
+        }
+        throw error;
+    }
+}
+export async function loadWindowsCookies(dbPath, filterNames) {
+    if (process.platform !== 'win32') {
+        throw new Error('loadWindowsCookies is only supported on Windows');
+    }
+    const localStatePath = await locateLocalState(dbPath);
+    const cookiesCopy = await copyLockedFile(dbPath, 'Cookies'); // name the copy exactly "Cookies"
+    const cookiesDirForFallback = await ensureCookiesDirForFallback(cookiesCopy);
+    const localStateCopy = await copyLockedFile(localStatePath, 'Local State');
+    const aesKey = await extractWindowsAesKey(localStateCopy);
+    const rows = await readChromeCookiesDb(cookiesCopy, filterNames);
+    const cookies = [];
+    for (const row of rows) {
+        const enc = row.encrypted_value && row.encrypted_value.length > 0 ? row.encrypted_value : Buffer.from(row.value ?? '', 'utf8');
+        const decrypted = enc.length > 0 ? decryptCookie(enc, aesKey) : '';
+        cookies.push({
+            name: row.name,
+            value: decrypted,
+            domain: row.host_key?.startsWith('.') ? row.host_key.slice(1) : row.host_key,
+            path: row.path ?? '/',
+            expires: normalizeExpiration(row.expires_utc),
+            secure: Boolean(row.is_secure),
+            httpOnly: Boolean(row.is_httponly),
+        });
+    }
+    if (process.env.ORACLE_DEBUG_COOKIES === '1') {
+        // eslint-disable-next-line no-console
+        console.log(`[cookies] windows decrypt decoded ${cookies.length} cookies from ${cookiesCopy} (fallback dir ${cookiesDirForFallback})`);
+    }
+    return cookies.filter((c) => c.value);
+}
+function decryptCookie(value, aesKey) {
+    const prefix = value.slice(0, 3).toString();
+    // Chrome prefixes AES-GCM encrypted cookies with version markers like v10/v11/v20; treat all v** the same.
+    if (/^v\d{2}$/u.test(prefix)) {
+        const iv = value.slice(3, 15);
+        const tag = value.slice(value.length - 16);
+        const data = value.slice(15, value.length - 16);
+        const decipher = crypto.createDecipheriv('aes-256-gcm', aesKey, iv);
+        decipher.setAuthTag(tag);
+        const decrypted = Buffer.concat([decipher.update(data), decipher.final()]);
+        return decrypted.toString('utf8');
+    }
+    const unprotectData = getUnprotectData();
+    const unprotected = unprotectData(value, undefined, 'CurrentUser');
+    return Buffer.from(unprotected).toString('utf8');
+}
+async function locateLocalState(dbPath) {
+    // Prefer sibling Local State near the profile path; fall back to default location.
+    const guess = path.resolve(path.join(path.dirname(dbPath), '..', 'Local State'));
+    if (existsSync(guess))
+        return guess;
+    const localState = path.join(os.homedir(), 'AppData', 'Local', 'Google', 'Chrome', 'User Data', 'Local State');
+    if (existsSync(localState))
+        return localState;
+    throw new Error('Chrome Local State not found for AES key');
+}
+async function extractWindowsAesKey(localStatePath) {
+    const raw = await fs.readFile(localStatePath, 'utf8');
+    const state = JSON.parse(raw);
+    const encKeyB64 = state?.os_crypt?.encrypted_key;
+    if (!encKeyB64)
+        throw new Error('encrypted_key missing in Local State');
+    const encKey = Buffer.from(encKeyB64, 'base64');
+    const dpapiBlob = encKey.slice(5); // strip "DPAPI"
+    const unprotectData = getUnprotectData();
+    const unprotected = unprotectData(dpapiBlob, undefined, 'CurrentUser');
+    return Buffer.from(unprotected);
+}
+async function readChromeCookiesDb(dbPath, filterNames) {
+    const db = await openSqlite(dbPath);
+    const placeholders = filterNames && filterNames.size > 0 ? `AND name IN (${Array.from(filterNames).map(() => '?').join(',')})` : '';
+    const params = filterNames ? Array.from(filterNames) : [];
+    const sql = `SELECT name,value,encrypted_value,host_key,path,expires_utc,is_secure,is_httponly FROM cookies WHERE host_key LIKE '%chatgpt.com%' ${placeholders}`;
+    try {
+        return await allSqlite(db, sql, params);
+    }
+    finally {
+        db.close();
+    }
+}
+function openSqlite(dbPath) {
+    return new Promise((resolve, reject) => {
+        const db = new sqlite3.Database(dbPath, sqlite3.OPEN_READONLY, (err) => {
+            if (err)
+                reject(err);
+            else
+                resolve(db);
+        });
+    });
+}
+async function copyLockedFile(sourcePath, targetName) {
+    const tempDir = await fs.mkdtemp(path.join(os.tmpdir(), 'oracle-cookie-'));
+    const tempPath = targetName ? path.join(tempDir, targetName) : path.join(tempDir, path.basename(sourcePath));
+    const psScript = `
+$src = '${sourcePath.replace(/'/g, "''")}'
+$dst = '${tempPath.replace(/'/g, "''")}'
+try {
+  $fs = [System.IO.File]::Open($src, [System.IO.FileMode]::Open, [System.IO.FileAccess]::Read, [System.IO.FileShare]::ReadWrite)
+  $bytes = New-Object byte[] $fs.Length
+  $null = $fs.Read($bytes, 0, $fs.Length)
+  $fs.Close()
+  [System.IO.File]::WriteAllBytes($dst, $bytes)
+  exit 0
+} catch {
+  exit 1
+}
+`;
+    const encoded = Buffer.from(psScript, 'utf16le').toString('base64');
+    const result = spawnSync('powershell.exe', ['-NoProfile', '-NonInteractive', '-EncodedCommand', encoded], {
+        timeout: 15000,
+        encoding: 'utf8',
+    });
+    if (result.status !== 0) {
+        // Fallback: best-effort normal copy
+        await fs.copyFile(sourcePath, tempPath);
+    }
+    if (process.env.ORACLE_DEBUG_COOKIES === '1') {
+        // eslint-disable-next-line no-console
+        console.log(`[cookies] copied locked file ${sourcePath} -> ${tempPath}`);
+    }
+    return tempPath;
+}
+// Create a directory containing a file named "Cookies" for chrome-cookies-secure fallback
+export async function ensureCookiesDirForFallback(cookieFile) {
+    const dir = await fs.mkdtemp(path.join(os.tmpdir(), 'oracle-cookies-secure-'));
+    const target = path.join(dir, 'Cookies');
+    await fs.copyFile(cookieFile, target);
+    return dir;
+}
+function allSqlite(db, sql, params) {
+    return new Promise((resolve, reject) => {
+        db.all(sql, params, (err, rows) => {
+            if (err)
+                reject(err);
+            else
+                resolve((rows ?? []));
+        });
+    });
+}
+function normalizeExpiration(expires) {
+    if (!expires || Number.isNaN(expires)) {
+        return undefined;
+    }
+    const value = Number(expires);
+    if (value <= 0)
+        return undefined;
+    if (value > 1_000_000_000_000) {
+        return Math.round(value / 1_000_000 - 11644473600);
+    }
+    if (value > 1_000_000_000) {
+        return Math.round(value / 1000);
+    }
+    return Math.round(value);
+}
+export async function materializeCookieFile(sourcePath) {
+    if (process.platform !== 'win32')
+        return sourcePath;
+    const resolved = await resolveDirectoryCandidate(sourcePath);
+    const tempDir = await fs.mkdtemp(path.join(os.tmpdir(), 'oracle-cookies-'));
+    const tempPath = path.join(tempDir, 'Cookies');
+    await fs.copyFile(resolved, tempPath);
+    return tempPath;
+}
+async function resolveDirectoryCandidate(inputPath) {
+    const stat = await fs.stat(inputPath).catch(() => null);
+    if (!stat?.isDirectory())
+        return inputPath;
+    const network = path.join(inputPath, 'Network', 'Cookies');
+    const direct = path.join(inputPath, 'Cookies');
+    if (await fileExists(network))
+        return network;
+    if (await fileExists(direct))
+        return direct;
+    return inputPath;
+}
+async function fileExists(candidate) {
+    try {
+        const stat = await fsp.stat(candidate);
+        return stat.isFile();
+    }
+    catch {
+        return false;
+    }
+}

package/dist/src/cli/browserConfig.js

@@ -64,6 +64,18 @@ export function normalizeChatGptModelForBrowser(model) {
     return model;
 }
 export async function buildBrowserConfig(options) {
+    if (options.copyProfile && options.browserKeepBrowser) {
+        throw new Error("--copy-profile cannot be combined with --browser-keep-browser: the copied profile is a throwaway that is deleted after the run, so it must not be retained.");
+    }
+    if (options.copyProfile && options.browserManualLogin) {
+        throw new Error("--copy-profile cannot be combined with --browser-manual-login: choose either a throwaway copied profile or the persistent manual-login profile.");
+    }
+    if (options.copyProfile && options.remoteChrome) {
+        throw new Error("--copy-profile cannot be combined with --remote-chrome: copied profiles require a locally launched Chrome instance.");
+    }
+    if (options.copyProfile && options.remoteHost) {
+        throw new Error("--copy-profile cannot be combined with --remote-host: the local profile source is not available to the remote browser service.");
+    }
     const desiredModelOverride = options.browserModelLabel?.trim();
     const normalizedOverride = desiredModelOverride?.toLowerCase() ?? "";
     const baseModel = options.model.toLowerCase();
@@ -98,7 +110,9 @@ export async function buildBrowserConfig(options) {
             ? desiredModelOverride
             : mapModelToBrowserLabel(options.model);
     return {
-        chromeProfile: options.browserChromeProfile ?? DEFAULT_CHROME_PROFILE,
+        chromeProfile: options.copyProfile
+            ? (options.browserChromeProfile ?? null)
+            : (options.browserChromeProfile ?? DEFAULT_CHROME_PROFILE),
         chromePath: options.browserChromePath ?? null,
         chromeCookiePath: options.browserCookiePath ?? null,
         attachRunning,
@@ -146,6 +160,7 @@ export async function buildBrowserConfig(options) {
         keepBrowser: options.browserKeepBrowser ? true : undefined,
         manualLogin: options.browserManualLogin === undefined ? undefined : options.browserManualLogin,
         manualLoginProfileDir: options.browserManualLoginProfileDir ?? undefined,
+        copyProfileSource: options.copyProfile ?? undefined,
         hideWindow: options.browserHideWindow ? true : undefined,
         desiredModel,
         modelStrategy,
@@ -171,6 +186,7 @@ function validateAttachRunningOptions(options, { attachRunning, hasInlineCookies
         options.browserKeepBrowser ? "--browser-keep-browser" : null,
         options.browserManualLogin ? "--browser-manual-login" : null,
         options.browserManualLoginProfileDir ? "--browser-manual-login-profile-dir" : null,
+        options.copyProfile ? "--copy-profile" : null,
         hasInlineCookies ? "--browser-inline-cookies/--browser-inline-cookies-file" : null,
         options.browserPort != null || options.browserDebugPort != null
             ? "--browser-port/--browser-debug-port"

package/dist/src/cli/sessionRunner.js

@@ -389,6 +389,7 @@ export async function performSessionRun({ sessionMeta, runOptions, mode, browser
             userError.details?.stage === "assistant-timeout";
         const cloudflareChallenge = userError?.category === "browser-automation" &&
             userError.details?.stage === "cloudflare-challenge";
+        const browserCanReattach = !browserConfig?.copyProfileSource;
         let reattachGuidanceLogged = false;
         const logBrowserReattachGuidance = (runtime) => {
             if (reattachGuidanceLogged || mode !== "browser")
@@ -399,7 +400,7 @@ export async function performSessionRun({ sessionMeta, runOptions, mode, browser
             reattachGuidanceLogged = true;
             log(formatBrowserReattachGuidance(sessionMeta.id));
         };
-        if (connectionLost && mode === "browser") {
+        if (connectionLost && mode === "browser" && browserCanReattach) {
             const runtime = userError.details
                 ?.runtime;
             const recoverableRuntime = runtime ?? sessionMeta.browser?.runtime;
@@ -456,7 +457,7 @@ export async function performSessionRun({ sessionMeta, runOptions, mode, browser
             logBrowserReattachGuidance(recoverableRuntime);
             return;
         }
-        if (assistantTimeout && mode === "browser") {
+        if (assistantTimeout && mode === "browser" && browserCanReattach) {
             const runtime = userError.details
                 ?.runtime;
             log(dim("Assistant response timed out; marking capture incomplete for reattach."));
@@ -509,9 +510,14 @@ export async function performSessionRun({ sessionMeta, runOptions, mode, browser
         }
         if (cloudflareChallenge && mode === "browser") {
             const details = userError.details;
-            log(dim("Cloudflare challenge detected; browser left running so you can complete the check."));
-            if (details?.reuseProfileHint) {
-                log(dim(`Reuse this browser profile with: ${details.reuseProfileHint}`));
+            if (browserCanReattach) {
+                log(dim("Cloudflare challenge detected; browser left running so you can complete the check."));
+                if (details?.reuseProfileHint) {
+                    log(dim(`Reuse this browser profile with: ${details.reuseProfileHint}`));
+                }
+            }
+            else {
+                log(dim("Cloudflare challenge detected; copied profile closed and removed."));
             }
         }
         if (userError) {
@@ -527,10 +533,10 @@ export async function performSessionRun({ sessionMeta, runOptions, mode, browser
         if (transportLine) {
             log(dim(`Transport: ${transportLine}`));
         }
-        const browserRuntime = mode === "browser"
+        const browserRuntime = mode === "browser" && browserCanReattach
             ? userError?.details?.runtime
             : undefined;
-        if (!cloudflareChallenge) {
+        if (!cloudflareChallenge && browserCanReattach) {
             logBrowserReattachGuidance(browserRuntime ?? sessionMeta.browser?.runtime);
         }
         await sessionStore.updateSession(sessionMeta.id, {

package/dist/vendor/oracle-notifier/OracleNotifier.app/Contents/Info.plist

@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>CFBundleIdentifier</key>
+  <string>com.steipete.oracle.notifier</string>
+  <key>CFBundleName</key>
+  <string>OracleNotifier</string>
+  <key>CFBundleDisplayName</key>
+  <string>Oracle Notifier</string>
+  <key>CFBundleExecutable</key>
+  <string>OracleNotifier</string>
+  <key>CFBundleIconFile</key>
+  <string>OracleIcon</string>
+  <key>CFBundlePackageType</key>
+  <string>APPL</string>
+  <key>LSMinimumSystemVersion</key>
+  <string>13.0</string>
+</dict>
+</plist>

package/dist/vendor/oracle-notifier/OracleNotifier.app/Contents/_CodeSignature/CodeResources

@@ -0,0 +1,128 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>files</key>
+	<dict>
+		<key>Resources/OracleIcon.icns</key>
+		<data>
+		edUHAMetayIv3xtc3Vb92VXRLfM=
+		</data>
+	</dict>
+	<key>files2</key>
+	<dict>
+		<key>Resources/OracleIcon.icns</key>
+		<dict>
+			<key>hash2</key>
+			<data>
+			AVPJK/6w6IOsDLmZTW4hL+Za+/4wHMxZiIp0t6m3NRA=
+			</data>
+		</dict>
+	</dict>
+	<key>rules</key>
+	<dict>
+		<key>^Resources/</key>
+		<true/>
+		<key>^Resources/.*\.lproj/</key>
+		<dict>
+			<key>optional</key>
+			<true/>
+			<key>weight</key>
+			<real>1000</real>
+		</dict>
+		<key>^Resources/.*\.lproj/locversion.plist$</key>
+		<dict>
+			<key>omit</key>
+			<true/>
+			<key>weight</key>
+			<real>1100</real>
+		</dict>
+		<key>^Resources/Base\.lproj/</key>
+		<dict>
+			<key>weight</key>
+			<real>1010</real>
+		</dict>
+		<key>^version.plist$</key>
+		<true/>
+	</dict>
+	<key>rules2</key>
+	<dict>
+		<key>.*\.dSYM($|/)</key>
+		<dict>
+			<key>weight</key>
+			<real>11</real>
+		</dict>
+		<key>^(.*/)?\.DS_Store$</key>
+		<dict>
+			<key>omit</key>
+			<true/>
+			<key>weight</key>
+			<real>2000</real>
+		</dict>
+		<key>^(Frameworks|SharedFrameworks|PlugIns|Plug-ins|XPCServices|Helpers|MacOS|Library/(Automator|Spotlight|LoginItems))/</key>
+		<dict>
+			<key>nested</key>
+			<true/>
+			<key>weight</key>
+			<real>10</real>
+		</dict>
+		<key>^.*</key>
+		<true/>
+		<key>^Info\.plist$</key>
+		<dict>
+			<key>omit</key>
+			<true/>
+			<key>weight</key>
+			<real>20</real>
+		</dict>
+		<key>^PkgInfo$</key>
+		<dict>
+			<key>omit</key>
+			<true/>
+			<key>weight</key>
+			<real>20</real>
+		</dict>
+		<key>^Resources/</key>
+		<dict>
+			<key>weight</key>
+			<real>20</real>
+		</dict>
+		<key>^Resources/.*\.lproj/</key>
+		<dict>
+			<key>optional</key>
+			<true/>
+			<key>weight</key>
+			<real>1000</real>
+		</dict>
+		<key>^Resources/.*\.lproj/locversion.plist$</key>
+		<dict>
+			<key>omit</key>
+			<true/>
+			<key>weight</key>
+			<real>1100</real>
+		</dict>
+		<key>^Resources/Base\.lproj/</key>
+		<dict>
+			<key>weight</key>
+			<real>1010</real>
+		</dict>
+		<key>^[^/]+$</key>
+		<dict>
+			<key>nested</key>
+			<true/>
+			<key>weight</key>
+			<real>10</real>
+		</dict>
+		<key>^embedded\.provisionprofile$</key>
+		<dict>
+			<key>weight</key>
+			<real>20</real>
+		</dict>
+		<key>^version\.plist$</key>
+		<dict>
+			<key>weight</key>
+			<real>20</real>
+		</dict>
+	</dict>
+</dict>
+</plist>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@steipete/oracle",
-  "version": "0.14.1",
+  "version": "0.15.0",
   "description": "CLI wrapper around OpenAI Responses API with GPT-5.5 Pro, GPT-5.5, GPT-5.4, GPT-5.2, GPT-5.1, and GPT-5.1 Codex high reasoning modes.",
   "keywords": [],
   "homepage": "https://askoracle.sh",
@@ -28,6 +28,34 @@
   ],
   "type": "module",
   "main": "dist/bin/oracle-cli.js",
+  "scripts": {
+    "docs:list": "tsx scripts/docs-list.ts",
+    "docs:check": "node --no-deprecation --import tsx bin/oracle-cli.ts docs check",
+    "docs:site": "node scripts/build-docs-site.mjs",
+    "build": "tsgo -p tsconfig.build.json && pnpm run build:vendor",
+    "build:vendor": "node -e \"const fs=require('fs'); const path=require('path'); const vendorRoot=path.join('dist','vendor'); fs.rmSync(vendorRoot,{recursive:true,force:true}); const vendors=[['oracle-notifier']]; vendors.forEach(([name])=>{const src=path.join('vendor',name); const dest=path.join(vendorRoot,name); fs.mkdirSync(dest,{recursive:true}); if(fs.existsSync(src)){fs.cpSync(src,dest,{recursive:true,force:true});}});\"",
+    "start": "pnpm run build && node ./dist/scripts/run-cli.js",
+    "oracle": "pnpm start",
+    "check": "pnpm run format:check && pnpm run lint",
+    "typecheck": "tsgo --noEmit",
+    "format": "oxfmt --write .",
+    "format:check": "oxfmt --check .",
+    "format:diff": "oxfmt --write . && git --no-pager diff",
+    "lint": "pnpm run typecheck && oxlint",
+    "lint:fix": "oxlint --fix && pnpm run format",
+    "test": "vitest run",
+    "test:mcp": "pnpm run build && pnpm run test:mcp:unit && pnpm run test:mcp:mcporter",
+    "test:mcp:unit": "vitest run tests/mcp*.test.ts tests/mcp/**/*.test.ts",
+    "test:mcp:mcporter": "CHROME_DEVTOOLS_URL=http://127.0.0.1:0 pnpm dlx mcporter list oracle-local --schema --config config/mcporter.json && CHROME_DEVTOOLS_URL=http://127.0.0.1:0 pnpm dlx mcporter call oracle-local.sessions limit:1 --config config/mcporter.json",
+    "test:browser": "pnpm run build && tsx scripts/test-browser.ts && ./scripts/browser-smoke.sh",
+    "test:packed-cli": "node scripts/packed-cli-smoke.mjs",
+    "test:live": "ORACLE_LIVE_TEST=1 vitest run tests/live --exclude tests/live/openai-live.test.ts",
+    "test:live:fast": "ORACLE_LIVE_TEST=1 ORACLE_LIVE_TEST_FAST=1 vitest run tests/live/browser-fast-live.test.ts",
+    "test:pro": "ORACLE_LIVE_TEST=1 vitest run tests/live/openai-live.test.ts",
+    "test:coverage": "vitest run --coverage",
+    "prepare": "pnpm run build",
+    "mcp": "pnpm run build && node ./dist/bin/oracle-mcp.js"
+  },
   "dependencies": {
     "@anthropic-ai/tokenizer": "^0.0.4",
     "@google/genai": "^2.8.0",
@@ -60,7 +88,7 @@
     "@types/inquirer": "^9.0.9",
     "@types/node": "^25.9.2",
     "@typescript/native-preview": "7.0.0-dev.20260612.1",
-    "@vitest/coverage-v8": "4.1.8",
+    "@vitest/coverage-v8": "4.1.9",
     "devtools-protocol": "0.0.1643702",
     "es-toolkit": "^1.47.0",
     "esbuild": "^0.28.0",
@@ -69,7 +97,7 @@
     "puppeteer-core": "^25.1.0",
     "tsx": "^4.22.4",
     "typescript": "^6.0.3",
-    "vitest": "^4.1.8"
+    "vitest": "^4.1.9"
   },
   "devEngines": {
     "runtime": [
@@ -82,31 +110,5 @@
   "engines": {
     "node": ">=24"
   },
-  "scripts": {
-    "docs:list": "tsx scripts/docs-list.ts",
-    "docs:check": "node --no-deprecation --import tsx bin/oracle-cli.ts docs check",
-    "docs:site": "node scripts/build-docs-site.mjs",
-    "build": "tsgo -p tsconfig.build.json && pnpm run build:vendor",
-    "build:vendor": "node -e \"const fs=require('fs'); const path=require('path'); const vendorRoot=path.join('dist','vendor'); fs.rmSync(vendorRoot,{recursive:true,force:true}); const vendors=[['oracle-notifier']]; vendors.forEach(([name])=>{const src=path.join('vendor',name); const dest=path.join(vendorRoot,name); fs.mkdirSync(dest,{recursive:true}); if(fs.existsSync(src)){fs.cpSync(src,dest,{recursive:true,force:true});}});\"",
-    "start": "pnpm run build && node ./dist/scripts/run-cli.js",
-    "oracle": "pnpm start",
-    "check": "pnpm run format:check && pnpm run lint",
-    "typecheck": "tsgo --noEmit",
-    "format": "oxfmt --write .",
-    "format:check": "oxfmt --check .",
-    "format:diff": "oxfmt --write . && git --no-pager diff",
-    "lint": "pnpm run typecheck && oxlint",
-    "lint:fix": "oxlint --fix && pnpm run format",
-    "test": "vitest run",
-    "test:mcp": "pnpm run build && pnpm run test:mcp:unit && pnpm run test:mcp:mcporter",
-    "test:mcp:unit": "vitest run tests/mcp*.test.ts tests/mcp/**/*.test.ts",
-    "test:mcp:mcporter": "CHROME_DEVTOOLS_URL=http://127.0.0.1:0 pnpm dlx mcporter list oracle-local --schema --config config/mcporter.json && CHROME_DEVTOOLS_URL=http://127.0.0.1:0 pnpm dlx mcporter call oracle-local.sessions limit:1 --config config/mcporter.json",
-    "test:browser": "pnpm run build && tsx scripts/test-browser.ts && ./scripts/browser-smoke.sh",
-    "test:packed-cli": "node scripts/packed-cli-smoke.mjs",
-    "test:live": "ORACLE_LIVE_TEST=1 vitest run tests/live --exclude tests/live/openai-live.test.ts",
-    "test:live:fast": "ORACLE_LIVE_TEST=1 ORACLE_LIVE_TEST_FAST=1 vitest run tests/live/browser-fast-live.test.ts",
-    "test:pro": "ORACLE_LIVE_TEST=1 vitest run tests/live/openai-live.test.ts",
-    "test:coverage": "vitest run --coverage",
-    "mcp": "pnpm run build && node ./dist/bin/oracle-mcp.js"
-  }
-}
+  "packageManager": "pnpm@10.33.2"
+}

package/vendor/oracle-notifier/OracleNotifier.app/Contents/Info.plist

@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>CFBundleIdentifier</key>
+  <string>com.steipete.oracle.notifier</string>
+  <key>CFBundleName</key>
+  <string>OracleNotifier</string>
+  <key>CFBundleDisplayName</key>
+  <string>Oracle Notifier</string>
+  <key>CFBundleExecutable</key>
+  <string>OracleNotifier</string>
+  <key>CFBundleIconFile</key>
+  <string>OracleIcon</string>
+  <key>CFBundlePackageType</key>
+  <string>APPL</string>
+  <key>LSMinimumSystemVersion</key>
+  <string>13.0</string>
+</dict>
+</plist>