@steipete/oracle 0.14.1 → 0.15.1

package/dist/src/remote/server.js

@@ -1,17 +1,29 @@
 import http from "node:http";
+import { createReadStream } from "node:fs";
+import { pipeline } from "node:stream/promises";
 import os from "node:os";
 import path from "node:path";
 import net from "node:net";
 import { randomBytes, randomUUID } from "node:crypto";
 import { spawn, spawnSync } from "node:child_process";
-import { mkdtemp, rm, mkdir, writeFile } from "node:fs/promises";
+import { mkdtemp, rm, mkdir, writeFile, stat, realpath } from "node:fs/promises";
 import chalk from "chalk";
 import { runBrowserMode } from "../browserMode.js";
+import { MAX_REMOTE_ARTIFACT_BYTES } from "./types.js";
 import { getCookies } from "@steipete/sweet-cookie";
 import { CHATGPT_URL } from "../browser/constants.js";
 import { getCliVersion } from "../version.js";
+import { getOracleHomeDir } from "../oracleHome.js";
 import { cleanupStaleProfileState, readDevToolsPort, verifyDevToolsReachable, writeChromePid, writeDevToolsActivePort, } from "../browser/profileState.js";
 import { normalizeChatgptUrl } from "../browser/utils.js";
+import { computeFileSha256, sanitizeArtifactFilename, sanitizeArtifactMimeType, validateArtifactFile, } from "../browser/artifacts.js";
+const ARTIFACT_PROTOCOL_VERSION = 1;
+const REMOTE_ARTIFACT_TTL_MS = 30 * 60 * 1000;
+const ARTIFACT_CAPABILITIES = {
+    artifactTransfer: true,
+    artifactProtocolVersion: ARTIFACT_PROTOCOL_VERSION,
+    maxArtifactBytes: MAX_REMOTE_ARTIFACT_BYTES,
+};
 async function findAvailablePort() {
     return await new Promise((resolve, reject) => {
         const srv = net.createServer();
@@ -40,6 +52,7 @@ export async function createRemoteServer(options = {}, deps = {}) {
         : (_formatter, msg) => msg;
     // Single-flight guard: remote Chrome can only host one run at a time, so we serialize requests.
     let busy = false;
+    const artifactRegistry = new Map();
     if (!process.listenerCount("unhandledRejection")) {
         process.on("unhandledRejection", (reason) => {
             logger(`Unhandled promise rejection in remote server: ${reason instanceof Error ? reason.message : String(reason)}`);
@@ -67,9 +80,24 @@ export async function createRemoteServer(options = {}, deps = {}) {
                 ok: true,
                 version: getCliVersion(),
                 uptimeSeconds: Math.round((Date.now() - startedAt) / 1000),
+                capabilities: ARTIFACT_CAPABILITIES,
             }));
             return;
         }
+        const artifactMatch = matchArtifactRequest(req);
+        if (artifactMatch) {
+            await serveRemoteArtifact({
+                req,
+                res,
+                authToken,
+                artifactRegistry,
+                logger,
+                verbose,
+                runId: artifactMatch.runId,
+                artifactId: artifactMatch.artifactId,
+            });
+            return;
+        }
         if (req.method !== "POST" || req.url !== "/runs") {
             res.statusCode = 404;
             res.end();
@@ -190,8 +218,30 @@ export async function createRemoteServer(options = {}, deps = {}) {
                 sessionId: payload.options.sessionId,
                 followUpPrompts: payload.options.followUpPrompts,
             });
-            sendEvent({ type: "result", result: sanitizeResult(result) });
-            logger(`[serve] Run ${runId} completed in ${Date.now() - runStartedAt}ms`);
+            const artifactRegistration = await registerRemoteArtifacts({
+                runId,
+                result,
+                artifactRegistry,
+                logger,
+            });
+            const artifactDescriptors = artifactRegistration.descriptors;
+            if (artifactDescriptors.length > 0) {
+                sendEvent({
+                    type: "log",
+                    message: `[browser] ${artifactDescriptors.length} artifact(s) ready for bridge transfer. ` +
+                        "If no cloud-local artifact path appears, upgrade both Oracle bridge endpoints or copy the file manually from the Windows browser host.",
+                });
+            }
+            for (const artifact of artifactDescriptors) {
+                sendEvent({ type: "artifact-ready", runId, artifact });
+            }
+            sendEvent({
+                type: "result",
+                result: sanitizeResult(result, artifactRegistration.warnings),
+            });
+            logger(`[serve] Run ${runId} completed in ${Date.now() - runStartedAt}ms${artifactDescriptors.length > 0
+                ? `; ${artifactDescriptors.length} artifact(s) ready for bridge transfer`
+                : ""}`);
         }
         catch (error) {
             const message = error instanceof Error ? error.message : String(error);
@@ -303,6 +353,190 @@ export async function serveRemote(options = {}) {
         process.on("SIGTERM", shutdown);
     });
 }
+function matchArtifactRequest(req) {
+    if (req.method !== "GET" || !req.url) {
+        return null;
+    }
+    let url;
+    try {
+        url = new URL(req.url, "http://oracle.local");
+    }
+    catch {
+        return null;
+    }
+    const match = /^\/runs\/([^/]+)\/artifacts\/([^/]+)$/.exec(url.pathname);
+    if (!match) {
+        return null;
+    }
+    try {
+        return {
+            runId: decodeURIComponent(match[1] ?? ""),
+            artifactId: decodeURIComponent(match[2] ?? ""),
+        };
+    }
+    catch {
+        return null;
+    }
+}
+async function serveRemoteArtifact(params) {
+    const authHeader = params.req.headers.authorization ?? "";
+    if (authHeader !== `Bearer ${params.authToken}`) {
+        if (params.verbose) {
+            params.logger(`[serve] Unauthorized artifact transfer attempt from ${formatSocket(params.req)} (missing/invalid token)`);
+        }
+        params.res.writeHead(401, { "Content-Type": "application/json" });
+        params.res.end(JSON.stringify({ error: "unauthorized" }));
+        return;
+    }
+    pruneExpiredArtifacts(params.artifactRegistry);
+    const key = remoteArtifactKey(params.runId, params.artifactId);
+    const artifact = params.artifactRegistry.get(key);
+    if (!artifact) {
+        params.res.writeHead(404, { "Content-Type": "application/json" });
+        params.res.end(JSON.stringify({ error: "artifact_not_found" }));
+        return;
+    }
+    if (Date.now() > artifact.expiresAt) {
+        params.artifactRegistry.delete(key);
+        params.res.writeHead(410, { "Content-Type": "application/json" });
+        params.res.end(JSON.stringify({ error: "artifact_expired" }));
+        return;
+    }
+    const fileStat = await stat(artifact.filePath).catch(() => null);
+    if (!fileStat?.isFile() || fileStat.size <= 0) {
+        params.res.writeHead(410, { "Content-Type": "application/json" });
+        params.res.end(JSON.stringify({ error: "artifact_unavailable" }));
+        return;
+    }
+    if (fileStat.size > MAX_REMOTE_ARTIFACT_BYTES) {
+        params.res.writeHead(413, { "Content-Type": "application/json" });
+        params.res.end(JSON.stringify({ error: "artifact_too_large" }));
+        return;
+    }
+    const filename = sanitizeArtifactFilename(artifact.descriptor.filename, "artifact.bin");
+    params.res.writeHead(200, {
+        "Content-Type": sanitizeArtifactMimeType(artifact.descriptor.mimeType) ?? "application/octet-stream",
+        "Content-Length": fileStat.size,
+        "Content-Disposition": `attachment; filename="${filename.replace(/"/g, "")}"`,
+        "Cache-Control": "no-store",
+        "X-Content-Type-Options": "nosniff",
+        "X-Oracle-Artifact-Id": artifact.descriptor.artifactId,
+        "X-Oracle-Artifact-Sha256": artifact.descriptor.sha256,
+    });
+    await pipeline(createReadStream(artifact.filePath), params.res).catch((error) => {
+        params.logger(`[serve] Artifact transfer failed for ${artifact.descriptor.artifactId}: ${error instanceof Error ? error.message : String(error)}`);
+    });
+}
+function pruneExpiredArtifacts(artifactRegistry) {
+    const now = Date.now();
+    for (const [key, artifact] of artifactRegistry) {
+        if (artifact.expiresAt <= now) {
+            artifactRegistry.delete(key);
+        }
+    }
+}
+function remoteArtifactKey(runId, artifactId) {
+    return `${runId}:${artifactId}`;
+}
+async function registerRemoteArtifacts(params) {
+    pruneExpiredArtifacts(params.artifactRegistry);
+    const seen = new Set();
+    const fileArtifacts = [
+        ...(params.result.savedFiles ?? []),
+        ...(params.result.artifacts ?? []).filter((artifact) => artifact.kind === "file"),
+    ];
+    const descriptors = [];
+    const warnings = [];
+    for (const artifact of fileArtifacts) {
+        if (!artifact?.path || seen.has(artifact.path)) {
+            continue;
+        }
+        seen.add(artifact.path);
+        const registration = await buildRemoteArtifactRegistration(params.runId, artifact).catch((error) => {
+            const filename = sanitizeArtifactFilename(path.basename(artifact.path), "artifact.bin");
+            params.logger(`[serve] Skipping remote artifact descriptor: ${error instanceof Error ? error.message : String(error)}`);
+            warnings.push({
+                code: "remote-artifact-registration-failed",
+                severity: "warning",
+                message: `Oracle captured the browser text response, but the bridge host could not prepare ${filename} for transfer. ` +
+                    "Open the ChatGPT browser on the bridge host, download the ZIP/file shown in the current response, and copy it to a cloud-readable path.",
+            });
+            return null;
+        });
+        if (!registration) {
+            continue;
+        }
+        params.artifactRegistry.set(remoteArtifactKey(params.runId, registration.descriptor.artifactId), {
+            descriptor: registration.descriptor,
+            filePath: registration.filePath,
+            expiresAt: Date.now() + REMOTE_ARTIFACT_TTL_MS,
+        });
+        descriptors.push(registration.descriptor);
+    }
+    return { descriptors, warnings };
+}
+async function buildRemoteArtifactRegistration(runId, artifact) {
+    if (artifact.path.endsWith(".crdownload")) {
+        throw new Error("artifact is still a Chrome partial download");
+    }
+    const filePath = await resolveRegisteredArtifactPath(artifact.path);
+    const fileStat = await stat(filePath);
+    if (!fileStat.isFile() || fileStat.size <= 0) {
+        throw new Error("artifact is not a completed non-empty file");
+    }
+    if (fileStat.size > MAX_REMOTE_ARTIFACT_BYTES) {
+        throw new Error("artifact exceeds bridge transfer size limit");
+    }
+    const filename = sanitizeArtifactFilename(path.basename(filePath), "artifact.bin");
+    const mimeType = sanitizeArtifactMimeType(artifact.mimeType);
+    // Recompute security metadata from the exact file registered for transfer.
+    const validation = await validateArtifactFile({
+        path: filePath,
+        filename,
+        mimeType,
+    });
+    const sha256 = await computeFileSha256(filePath);
+    return {
+        filePath,
+        descriptor: {
+            artifactId: randomUUID(),
+            runId,
+            kind: "file",
+            filename,
+            mimeType,
+            byteSize: fileStat.size,
+            sha256,
+            validation,
+            sourceUrlKind: classifySourceUrlKind(artifact.sourceUrl),
+            transferStatus: "ready",
+        },
+    };
+}
+async function resolveRegisteredArtifactPath(filePath) {
+    const [resolvedFile, sessionsRoot] = await Promise.all([
+        realpath(filePath),
+        realpath(path.join(getOracleHomeDir(), "sessions")),
+    ]);
+    const relative = path.relative(sessionsRoot, resolvedFile);
+    const segments = relative.split(path.sep);
+    if (!relative ||
+        relative.startsWith(`..${path.sep}`) ||
+        path.isAbsolute(relative) ||
+        segments.length < 3 ||
+        segments[1] !== "artifacts") {
+        throw new Error("artifact is outside Oracle's session artifact boundary");
+    }
+    return resolvedFile;
+}
+function classifySourceUrlKind(sourceUrl) {
+    if (sourceUrl?.startsWith("sandbox:")) {
+        return "sandbox";
+    }
+    if (sourceUrl === "browser-download") {
+        return "browser-download";
+    }
+    return "chatgpt-file-endpoint";
+}
 async function readRequestBody(req) {
     const chunks = [];
     for await (const chunk of req) {
@@ -313,7 +547,7 @@ async function readRequestBody(req) {
 function sanitizeName(raw) {
     return raw.replace(/[^a-zA-Z0-9._-]/g, "_");
 }
-function sanitizeResult(result) {
+function sanitizeResult(result, warnings = []) {
     return {
         answerText: result.answerText,
         answerMarkdown: result.answerMarkdown,
@@ -321,6 +555,7 @@ function sanitizeResult(result) {
         tookMs: result.tookMs,
         answerTokens: result.answerTokens,
         answerChars: result.answerChars,
+        warnings: warnings.length > 0 ? warnings : undefined,
         chromePid: undefined,
         chromePort: undefined,
         userDataDir: undefined,

package/dist/src/remote/types.js

@@ -1 +1 @@
-export {};
+export const MAX_REMOTE_ARTIFACT_BYTES = 512 * 1024 * 1024;

package/dist/src/sessionManager.js

@@ -197,6 +197,7 @@ export async function initializeSession(options, cwd, notifications, baseSlugOve
             followupSessionId: options.followupSessionId,
             followupModel: options.followupModel,
             effectiveModelId: options.effectiveModelId,
+            modelOverrides: options.modelOverrides,
             maxInput: options.maxInput,
             system: options.system,
             maxOutput: options.maxOutput,

package/dist/vendor/oracle-notifier/OracleNotifier.app/Contents/Info.plist

@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>CFBundleIdentifier</key>
+  <string>com.steipete.oracle.notifier</string>
+  <key>CFBundleName</key>
+  <string>OracleNotifier</string>
+  <key>CFBundleDisplayName</key>
+  <string>Oracle Notifier</string>
+  <key>CFBundleExecutable</key>
+  <string>OracleNotifier</string>
+  <key>CFBundleIconFile</key>
+  <string>OracleIcon</string>
+  <key>CFBundlePackageType</key>
+  <string>APPL</string>
+  <key>LSMinimumSystemVersion</key>
+  <string>13.0</string>
+</dict>
+</plist>

package/dist/vendor/oracle-notifier/OracleNotifier.app/Contents/_CodeSignature/CodeResources

@@ -0,0 +1,128 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>files</key>
+	<dict>
+		<key>Resources/OracleIcon.icns</key>
+		<data>
+		edUHAMetayIv3xtc3Vb92VXRLfM=
+		</data>
+	</dict>
+	<key>files2</key>
+	<dict>
+		<key>Resources/OracleIcon.icns</key>
+		<dict>
+			<key>hash2</key>
+			<data>
+			AVPJK/6w6IOsDLmZTW4hL+Za+/4wHMxZiIp0t6m3NRA=
+			</data>
+		</dict>
+	</dict>
+	<key>rules</key>
+	<dict>
+		<key>^Resources/</key>
+		<true/>
+		<key>^Resources/.*\.lproj/</key>
+		<dict>
+			<key>optional</key>
+			<true/>
+			<key>weight</key>
+			<real>1000</real>
+		</dict>
+		<key>^Resources/.*\.lproj/locversion.plist$</key>
+		<dict>
+			<key>omit</key>
+			<true/>
+			<key>weight</key>
+			<real>1100</real>
+		</dict>
+		<key>^Resources/Base\.lproj/</key>
+		<dict>
+			<key>weight</key>
+			<real>1010</real>
+		</dict>
+		<key>^version.plist$</key>
+		<true/>
+	</dict>
+	<key>rules2</key>
+	<dict>
+		<key>.*\.dSYM($|/)</key>
+		<dict>
+			<key>weight</key>
+			<real>11</real>
+		</dict>
+		<key>^(.*/)?\.DS_Store$</key>
+		<dict>
+			<key>omit</key>
+			<true/>
+			<key>weight</key>
+			<real>2000</real>
+		</dict>
+		<key>^(Frameworks|SharedFrameworks|PlugIns|Plug-ins|XPCServices|Helpers|MacOS|Library/(Automator|Spotlight|LoginItems))/</key>
+		<dict>
+			<key>nested</key>
+			<true/>
+			<key>weight</key>
+			<real>10</real>
+		</dict>
+		<key>^.*</key>
+		<true/>
+		<key>^Info\.plist$</key>
+		<dict>
+			<key>omit</key>
+			<true/>
+			<key>weight</key>
+			<real>20</real>
+		</dict>
+		<key>^PkgInfo$</key>
+		<dict>
+			<key>omit</key>
+			<true/>
+			<key>weight</key>
+			<real>20</real>
+		</dict>
+		<key>^Resources/</key>
+		<dict>
+			<key>weight</key>
+			<real>20</real>
+		</dict>
+		<key>^Resources/.*\.lproj/</key>
+		<dict>
+			<key>optional</key>
+			<true/>
+			<key>weight</key>
+			<real>1000</real>
+		</dict>
+		<key>^Resources/.*\.lproj/locversion.plist$</key>
+		<dict>
+			<key>omit</key>
+			<true/>
+			<key>weight</key>
+			<real>1100</real>
+		</dict>
+		<key>^Resources/Base\.lproj/</key>
+		<dict>
+			<key>weight</key>
+			<real>1010</real>
+		</dict>
+		<key>^[^/]+$</key>
+		<dict>
+			<key>nested</key>
+			<true/>
+			<key>weight</key>
+			<real>10</real>
+		</dict>
+		<key>^embedded\.provisionprofile$</key>
+		<dict>
+			<key>weight</key>
+			<real>20</real>
+		</dict>
+		<key>^version\.plist$</key>
+		<dict>
+			<key>weight</key>
+			<real>20</real>
+		</dict>
+	</dict>
+</dict>
+</plist>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@steipete/oracle",
-  "version": "0.14.1",
+  "version": "0.15.1",
   "description": "CLI wrapper around OpenAI Responses API with GPT-5.5 Pro, GPT-5.5, GPT-5.4, GPT-5.2, GPT-5.1, and GPT-5.1 Codex high reasoning modes.",
   "keywords": [],
   "homepage": "https://askoracle.sh",
@@ -28,9 +28,37 @@
   ],
   "type": "module",
   "main": "dist/bin/oracle-cli.js",
+  "scripts": {
+    "docs:list": "tsx scripts/docs-list.ts",
+    "docs:check": "node --no-deprecation --import tsx bin/oracle-cli.ts docs check",
+    "docs:site": "node scripts/build-docs-site.mjs",
+    "build": "tsgo -p tsconfig.build.json && pnpm run build:vendor",
+    "build:vendor": "node -e \"const fs=require('fs'); const path=require('path'); const vendorRoot=path.join('dist','vendor'); fs.rmSync(vendorRoot,{recursive:true,force:true}); const vendors=[['oracle-notifier']]; vendors.forEach(([name])=>{const src=path.join('vendor',name); const dest=path.join(vendorRoot,name); fs.mkdirSync(dest,{recursive:true}); if(fs.existsSync(src)){fs.cpSync(src,dest,{recursive:true,force:true});}});\"",
+    "start": "pnpm run build && node ./dist/scripts/run-cli.js",
+    "oracle": "pnpm start",
+    "check": "pnpm run format:check && pnpm run lint",
+    "typecheck": "tsgo --noEmit",
+    "format": "oxfmt --write .",
+    "format:check": "oxfmt --check .",
+    "format:diff": "oxfmt --write . && git --no-pager diff",
+    "lint": "pnpm run typecheck && oxlint",
+    "lint:fix": "oxlint --fix && pnpm run format",
+    "test": "vitest run",
+    "test:mcp": "pnpm run build && pnpm run test:mcp:unit && pnpm run test:mcp:mcporter",
+    "test:mcp:unit": "vitest run tests/mcp*.test.ts tests/mcp/**/*.test.ts",
+    "test:mcp:mcporter": "CHROME_DEVTOOLS_URL=http://127.0.0.1:0 pnpm dlx mcporter list oracle-local --schema --config config/mcporter.json && CHROME_DEVTOOLS_URL=http://127.0.0.1:0 pnpm dlx mcporter call oracle-local.sessions limit:1 --config config/mcporter.json",
+    "test:browser": "pnpm run build && tsx scripts/test-browser.ts && ./scripts/browser-smoke.sh",
+    "test:packed-cli": "node scripts/packed-cli-smoke.mjs",
+    "test:live": "ORACLE_LIVE_TEST=1 vitest run tests/live --exclude tests/live/openai-live.test.ts",
+    "test:live:fast": "ORACLE_LIVE_TEST=1 ORACLE_LIVE_TEST_FAST=1 vitest run tests/live/browser-fast-live.test.ts",
+    "test:pro": "ORACLE_LIVE_TEST=1 vitest run tests/live/openai-live.test.ts",
+    "test:coverage": "vitest run --coverage",
+    "prepare": "pnpm run build",
+    "mcp": "pnpm run build && node ./dist/bin/oracle-mcp.js"
+  },
   "dependencies": {
     "@anthropic-ai/tokenizer": "^0.0.4",
-    "@google/genai": "^2.8.0",
+    "@google/genai": "^2.9.0",
     "@google/generative-ai": "^0.24.1",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@steipete/sweet-cookie": "^0.4.0",
@@ -46,8 +74,8 @@
     "json5": "^2.2.3",
     "kleur": "^4.1.5",
     "markdansi": "0.3.1",
-    "openai": "^6.42.0",
-    "osc-progress": "^0.3.0",
+    "openai": "^6.44.0",
+    "osc-progress": "^0.3.1",
     "qs": "^6.15.2",
     "shiki": "^4.2.0",
     "toasted-notifier": "^10.1.0",
@@ -57,19 +85,19 @@
   "devDependencies": {
     "@anthropic-ai/tokenizer": "^0.0.4",
     "@types/chrome-remote-interface": "^0.34.0",
-    "@types/inquirer": "^9.0.9",
-    "@types/node": "^25.9.2",
-    "@typescript/native-preview": "7.0.0-dev.20260612.1",
-    "@vitest/coverage-v8": "4.1.8",
-    "devtools-protocol": "0.0.1643702",
-    "es-toolkit": "^1.47.0",
-    "esbuild": "^0.28.0",
-    "oxfmt": "0.54.0",
-    "oxlint": "^1.69.0",
-    "puppeteer-core": "^25.1.0",
+    "@types/inquirer": "^9.0.10",
+    "@types/node": "^26.0.0",
+    "@typescript/native-preview": "7.0.0-dev.20260623.1",
+    "@vitest/coverage-v8": "4.1.9",
+    "devtools-protocol": "0.0.1648812",
+    "es-toolkit": "^1.48.1",
+    "esbuild": "^0.28.1",
+    "oxfmt": "0.56.0",
+    "oxlint": "^1.71.0",
+    "puppeteer-core": "^25.2.0",
     "tsx": "^4.22.4",
     "typescript": "^6.0.3",
-    "vitest": "^4.1.8"
+    "vitest": "^4.1.9"
   },
   "devEngines": {
     "runtime": [
@@ -82,31 +110,5 @@
   "engines": {
     "node": ">=24"
   },
-  "scripts": {
-    "docs:list": "tsx scripts/docs-list.ts",
-    "docs:check": "node --no-deprecation --import tsx bin/oracle-cli.ts docs check",
-    "docs:site": "node scripts/build-docs-site.mjs",
-    "build": "tsgo -p tsconfig.build.json && pnpm run build:vendor",
-    "build:vendor": "node -e \"const fs=require('fs'); const path=require('path'); const vendorRoot=path.join('dist','vendor'); fs.rmSync(vendorRoot,{recursive:true,force:true}); const vendors=[['oracle-notifier']]; vendors.forEach(([name])=>{const src=path.join('vendor',name); const dest=path.join(vendorRoot,name); fs.mkdirSync(dest,{recursive:true}); if(fs.existsSync(src)){fs.cpSync(src,dest,{recursive:true,force:true});}});\"",
-    "start": "pnpm run build && node ./dist/scripts/run-cli.js",
-    "oracle": "pnpm start",
-    "check": "pnpm run format:check && pnpm run lint",
-    "typecheck": "tsgo --noEmit",
-    "format": "oxfmt --write .",
-    "format:check": "oxfmt --check .",
-    "format:diff": "oxfmt --write . && git --no-pager diff",
-    "lint": "pnpm run typecheck && oxlint",
-    "lint:fix": "oxlint --fix && pnpm run format",
-    "test": "vitest run",
-    "test:mcp": "pnpm run build && pnpm run test:mcp:unit && pnpm run test:mcp:mcporter",
-    "test:mcp:unit": "vitest run tests/mcp*.test.ts tests/mcp/**/*.test.ts",
-    "test:mcp:mcporter": "CHROME_DEVTOOLS_URL=http://127.0.0.1:0 pnpm dlx mcporter list oracle-local --schema --config config/mcporter.json && CHROME_DEVTOOLS_URL=http://127.0.0.1:0 pnpm dlx mcporter call oracle-local.sessions limit:1 --config config/mcporter.json",
-    "test:browser": "pnpm run build && tsx scripts/test-browser.ts && ./scripts/browser-smoke.sh",
-    "test:packed-cli": "node scripts/packed-cli-smoke.mjs",
-    "test:live": "ORACLE_LIVE_TEST=1 vitest run tests/live --exclude tests/live/openai-live.test.ts",
-    "test:live:fast": "ORACLE_LIVE_TEST=1 ORACLE_LIVE_TEST_FAST=1 vitest run tests/live/browser-fast-live.test.ts",
-    "test:pro": "ORACLE_LIVE_TEST=1 vitest run tests/live/openai-live.test.ts",
-    "test:coverage": "vitest run --coverage",
-    "mcp": "pnpm run build && node ./dist/bin/oracle-mcp.js"
-  }
-}
+  "packageManager": "pnpm@10.33.2"
+}

package/vendor/oracle-notifier/OracleNotifier.app/Contents/Info.plist

@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>CFBundleIdentifier</key>
+  <string>com.steipete.oracle.notifier</string>
+  <key>CFBundleName</key>
+  <string>OracleNotifier</string>
+  <key>CFBundleDisplayName</key>
+  <string>Oracle Notifier</string>
+  <key>CFBundleExecutable</key>
+  <string>OracleNotifier</string>
+  <key>CFBundleIconFile</key>
+  <string>OracleIcon</string>
+  <key>CFBundlePackageType</key>
+  <string>APPL</string>
+  <key>LSMinimumSystemVersion</key>
+  <string>13.0</string>
+</dict>
+</plist>