@steipete/oracle 0.5.6 → 0.6.1

package/dist/src/cli/sessionRunner.js

@@ -19,7 +19,6 @@ import { formatElapsed } from '../oracle/format.js';
 import { sanitizeOscProgress } from './oscUtils.js';
 import { readFiles } from '../oracle/files.js';
 import { formatUSD } from '../oracle/format.js';
-import { SESSIONS_DIR } from '../sessionManager.js';
 import { cwd as getCwd } from 'node:process';
 const isTty = process.stdout.isTTY;
 const dim = (text) => (isTty ? kleur.dim(text) : text);
@@ -361,11 +360,6 @@ export async function performSessionRun({ sessionMeta, runOptions, mode, browser
                 }
                 : undefined,
         });
-        if (mode === 'browser') {
-            log(dim('Next steps (browser fallback):')); // guides users when automation breaks
-            log(dim('- Rerun with --engine api to bypass Chrome entirely.'));
-            log(dim('- Or rerun with --engine api --render-markdown [--file …] to generate a single markdown bundle you can paste into ChatGPT manually (add --browser-bundle-files if you still want attachments).'));
-        }
         if (modelForStatus) {
             await sessionStore.updateModelRun(sessionMeta.id, modelForStatus, {
                 status: 'error',
@@ -386,7 +380,7 @@ async function writeAssistantOutput(targetPath, content, log) {
         return;
     }
     const normalizedTarget = path.resolve(targetPath);
-    const normalizedSessionsDir = path.resolve(SESSIONS_DIR);
+    const normalizedSessionsDir = path.resolve(sessionStore.sessionsDir());
     if (normalizedTarget === normalizedSessionsDir ||
         normalizedTarget.startsWith(`${normalizedSessionsDir}${path.sep}`)) {
         log(dim(`write-output skipped: refusing to write inside session storage (${normalizedSessionsDir}).`));
@@ -442,7 +436,7 @@ function buildFallbackPath(original) {
     const dir = getCwd();
     const candidate = ext ? `${stem}.fallback${ext}` : `${stem}.fallback`;
     const fallback = path.join(dir, candidate);
-    const normalizedSessionsDir = path.resolve(SESSIONS_DIR);
+    const normalizedSessionsDir = path.resolve(sessionStore.sessionsDir());
     const normalizedFallback = path.resolve(fallback);
     if (normalizedFallback === normalizedSessionsDir ||
         normalizedFallback.startsWith(`${normalizedSessionsDir}${path.sep}`)) {

package/dist/src/cli/tui/index.js

@@ -388,6 +388,7 @@ async function askOracleFlow(version, userConfig) {
         sessionId: undefined,
         verbose: false,
         heartbeatIntervalMs: undefined,
+        browserAttachments: 'auto',
         browserInlineFiles: false,
         browserBundleFiles: false,
         background: undefined,

package/dist/src/config.js

@@ -1,10 +1,9 @@
 import fs from 'node:fs/promises';
-import os from 'node:os';
 import path from 'node:path';
 import JSON5 from 'json5';
+import { getOracleHomeDir } from './oracleHome.js';
 function resolveConfigPath() {
-    const oracleHome = process.env.ORACLE_HOME_DIR ?? path.join(os.homedir(), '.oracle');
-    return path.join(oracleHome, 'config.json');
+    return path.join(getOracleHomeDir(), 'config.json');
 }
 export async function loadUserConfig() {
     const CONFIG_PATH = resolveConfigPath();

package/dist/src/oracle/config.js

@@ -3,17 +3,18 @@ import { countTokens as countTokensGpt5Pro } from 'gpt-tokenizer/model/gpt-5-pro
 import { countTokens as countTokensAnthropicRaw } from '@anthropic-ai/tokenizer';
 import { stringifyTokenizerInput } from './tokenStringifier.js';
 export const DEFAULT_MODEL = 'gpt-5.1-pro';
-export const PRO_MODELS = new Set(['gpt-5.1-pro', 'gpt-5-pro', 'claude-4.5-sonnet', 'claude-4.1-opus']);
+export const PRO_MODELS = new Set(['gpt-5.1-pro', 'gpt-5-pro', 'gpt-5.2-pro', 'claude-4.5-sonnet', 'claude-4.1-opus']);
 const countTokensAnthropic = (input) => countTokensAnthropicRaw(stringifyTokenizerInput(input));
 export const MODEL_CONFIGS = {
     'gpt-5.1-pro': {
         model: 'gpt-5.1-pro',
+        apiModel: 'gpt-5.2-pro',
         provider: 'openai',
         tokenizer: countTokensGpt5Pro,
         inputLimit: 196000,
         pricing: {
-            inputPerToken: 15 / 1_000_000,
-            outputPerToken: 120 / 1_000_000,
+            inputPerToken: 21 / 1_000_000,
+            outputPerToken: 168 / 1_000_000,
         },
         reasoning: null,
     },
@@ -50,6 +51,40 @@ export const MODEL_CONFIGS = {
         },
         reasoning: { effort: 'high' },
     },
+    'gpt-5.2': {
+        model: 'gpt-5.2',
+        provider: 'openai',
+        tokenizer: countTokensGpt5,
+        inputLimit: 196000,
+        pricing: {
+            inputPerToken: 1.75 / 1_000_000,
+            outputPerToken: 14 / 1_000_000,
+        },
+        reasoning: { effort: 'xhigh' },
+    },
+    'gpt-5.2-instant': {
+        model: 'gpt-5.2-instant',
+        apiModel: 'gpt-5.2-chat-latest',
+        provider: 'openai',
+        tokenizer: countTokensGpt5,
+        inputLimit: 196000,
+        pricing: {
+            inputPerToken: 1.75 / 1_000_000,
+            outputPerToken: 14 / 1_000_000,
+        },
+        reasoning: null,
+    },
+    'gpt-5.2-pro': {
+        model: 'gpt-5.2-pro',
+        provider: 'openai',
+        tokenizer: countTokensGpt5Pro,
+        inputLimit: 196000,
+        pricing: {
+            inputPerToken: 21 / 1_000_000,
+            outputPerToken: 168 / 1_000_000,
+        },
+        reasoning: { effort: 'xhigh' },
+    },
     'gemini-3-pro': {
         model: 'gemini-3-pro',
         provider: 'google',

package/dist/src/oracle/errors.js

@@ -95,13 +95,13 @@ export function toTransportError(error, model) {
         const apiMessage = apiError.error?.message ||
             apiError.message ||
             (apiError.status ? `${apiError.status} OpenAI API error` : 'OpenAI API error');
-        // TODO: Remove once gpt-5.1-pro is available via the Responses API.
-        if (model === 'gpt-5.1-pro' &&
+        // Friendly guidance when a pro-tier model isn't available on this base URL / API key.
+        if (model === 'gpt-5.2-pro' &&
             (code === 'model_not_found' ||
                 messageText.includes('does not exist') ||
                 messageText.includes('unknown model') ||
                 messageText.includes('model_not_found'))) {
-            return new OracleTransportError('model-unavailable', 'gpt-5.1-pro is not yet available on this API base. Using gpt-5-pro until OpenAI enables it. // TODO: Remove once gpt-5.1-pro is available', apiError);
+            return new OracleTransportError('model-unavailable', 'gpt-5.2-pro is not available on this API base/key. Try gpt-5-pro or gpt-5.2, or switch to the browser engine.', apiError);
         }
         if (apiError.status === 404 || apiError.status === 405) {
             return new OracleTransportError('unsupported-endpoint', 'HTTP 404/405 from the Responses API; this base URL or gateway likely does not expose /v1/responses. Set OPENAI_BASE_URL to api.openai.com/v1, update your Azure API version/deployment, or use the browser engine.', apiError);

package/dist/src/oracle/gemini.js

@@ -1,10 +1,13 @@
 import { GoogleGenAI, HarmCategory, HarmBlockThreshold } from '@google/genai';
 const MODEL_ID_MAP = {
     'gemini-3-pro': 'gemini-3-pro-preview',
-    'gpt-5.1-pro': 'gpt-5.1-pro', // unused, normalize TS map
+    'gpt-5.1-pro': 'gpt-5.1-pro',
     'gpt-5-pro': 'gpt-5-pro',
     'gpt-5.1': 'gpt-5.1',
     'gpt-5.1-codex': 'gpt-5.1-codex',
+    'gpt-5.2': 'gpt-5.2',
+    'gpt-5.2-instant': 'gpt-5.2-instant',
+    'gpt-5.2-pro': 'gpt-5.2-pro',
     'claude-4.5-sonnet': 'claude-4.5-sonnet',
     'claude-4.1-opus': 'claude-4.1-opus',
     'grok-4.1': 'grok-4.1',

package/dist/src/oracle/run.js

@@ -186,17 +186,14 @@ export async function runOracle(options, deps = {}) {
             : DEFAULT_TIMEOUT_NON_PRO_MS / 1000
         : options.timeoutSeconds;
     const timeoutMs = timeoutSeconds * 1000;
-    const apiModelFromConfig = modelConfig.apiModel ?? modelConfig.model;
-    const modelDowngraded = apiModelFromConfig === 'gpt-5.1-pro';
-    const resolvedApiModelId = modelDowngraded ? 'gpt-5-pro' : apiModelFromConfig;
     // Track the concrete model id we dispatch to (especially for Gemini preview aliases)
     const effectiveModelId = options.effectiveModelId ??
         (options.model.startsWith('gemini')
             ? resolveGeminiModelId(options.model)
-            : resolvedApiModelId);
+            : (modelConfig.apiModel ?? modelConfig.model));
     const headerModelLabel = richTty ? chalk.cyan(modelConfig.model) : modelConfig.model;
     const requestBody = buildRequestBody({
-        modelConfig: { ...modelConfig, apiModel: resolvedApiModelId },
+        modelConfig,
         systemPrompt,
         userPrompt: promptWithFiles,
         searchEnabled,
@@ -222,8 +219,8 @@ export async function runOracle(options, deps = {}) {
         if (baseUrl) {
             log(dim(`Base URL: ${formatBaseUrlForLog(baseUrl)}`));
         }
-        if (modelDowngraded) {
-            log(dim('gpt-5.1-pro is not yet available via API; sending request with gpt-5-pro instead.'));
+        if (effectiveModelId !== modelConfig.model) {
+            log(dim(`Resolved model: ${modelConfig.model} → ${effectiveModelId}`));
         }
         if (options.background && !supportsBackground) {
             log(dim('Background runs are not supported for this model; streaming in foreground instead.'));

package/dist/src/oracleHome.js

@@ -0,0 +1,13 @@
+import os from 'node:os';
+import path from 'node:path';
+let oracleHomeDirOverride = null;
+/**
+ * Test-only hook: avoid mutating process.env (shared across Vitest worker threads).
+ * This override is scoped to the current Node worker.
+ */
+export function setOracleHomeDirOverrideForTest(dir) {
+    oracleHomeDirOverride = dir;
+}
+export function getOracleHomeDir() {
+    return oracleHomeDirOverride ?? process.env.ORACLE_HOME_DIR ?? path.join(os.homedir(), '.oracle');
+}

package/dist/src/remote/server.js

@@ -4,12 +4,12 @@ import path from 'node:path';
 import net from 'node:net';
 import { randomBytes, randomUUID } from 'node:crypto';
 import { spawn, spawnSync } from 'node:child_process';
-import { existsSync } from 'node:fs';
 import { mkdtemp, rm, mkdir, writeFile } from 'node:fs/promises';
 import chalk from 'chalk';
 import { runBrowserMode } from '../browserMode.js';
 import { loadChromeCookies } from '../browser/chromeCookies.js';
 import { CHATGPT_URL } from '../browser/constants.js';
+import { cleanupStaleProfileState, readDevToolsPort, verifyDevToolsReachable, writeChromePid, writeDevToolsActivePort, } from '../browser/profileState.js';
 import { normalizeChatgptUrl } from '../browser/utils.js';
 async function findAvailablePort() {
     return await new Promise((resolve, reject) => {
@@ -209,10 +209,17 @@ export async function serveRemote(options = {}) {
         if (preferManualLogin) {
             await mkdir(manualProfileDir, { recursive: true });
             console.log(`Cookie extraction is unavailable on this platform. Using manual-login Chrome profile at ${manualProfileDir}. Remote runs will reuse this profile; sign in once when the browser opens.`);
-            const devtoolsPortFile = path.join(manualProfileDir, 'DevToolsActivePort');
-            const alreadyRunning = existsSync(devtoolsPortFile);
-            if (alreadyRunning) {
-                console.log('Detected an existing automation Chrome session; will reuse it for manual login.');
+            const existingPort = await readDevToolsPort(manualProfileDir);
+            if (existingPort) {
+                const reachable = await verifyDevToolsReachable({ port: existingPort });
+                if (reachable.ok) {
+                    console.log('Detected an existing automation Chrome session; will reuse it for manual login.');
+                }
+                else {
+                    console.log(`Found stale DevToolsActivePort (port ${existingPort}, ${reachable.error}); launching a fresh manual-login Chrome.`);
+                    await cleanupStaleProfileState(manualProfileDir, console.log, { lockRemovalMode: 'never' });
+                    void launchManualLoginChrome(manualProfileDir, CHATGPT_URL, console.log);
+                }
             }
             else {
                 void launchManualLoginChrome(manualProfileDir, CHATGPT_URL, console.log);
@@ -459,12 +466,11 @@ async function launchManualLoginChrome(profileDir, url, logger) {
         });
         const chosenPort = chrome?.port ?? debugPort ?? null;
         if (chosenPort) {
-            // Write DevToolsActivePort eagerly so maybeReuseRunningChrome can attach on the next run
-            const devtoolsFile = path.join(profileDir, 'DevToolsActivePort');
-            const devtoolsFileDefault = path.join(profileDir, 'Default', 'DevToolsActivePort');
-            const contents = `${chosenPort}\n/devtools/browser`;
-            await writeFile(devtoolsFile, contents).catch(() => undefined);
-            await writeFile(devtoolsFileDefault, contents).catch(() => undefined);
+            // Persist DevToolsActivePort eagerly so future runs can attach/reuse this Chrome.
+            await writeDevToolsActivePort(profileDir, chosenPort);
+            if (chrome?.pid) {
+                await writeChromePid(profileDir, chrome.pid);
+            }
             logger(`Manual-login Chrome DevTools port: ${chosenPort}`);
             logger(`If needed, DevTools JSON at http://127.0.0.1:${chosenPort}/json/version`);
         }

package/dist/src/sessionManager.js

@@ -1,11 +1,12 @@
-import os from 'node:os';
 import path from 'node:path';
 import fs from 'node:fs/promises';
 import { createWriteStream } from 'node:fs';
 import { DEFAULT_MODEL } from './oracle.js';
 import { safeModelSlug } from './oracle/modelResolver.js';
-const ORACLE_HOME = process.env.ORACLE_HOME_DIR ?? path.join(os.homedir(), '.oracle');
-const SESSIONS_DIR = path.join(ORACLE_HOME, 'sessions');
+import { getOracleHomeDir } from './oracleHome.js';
+export function getSessionsDir() {
+    return path.join(getOracleHomeDir(), 'sessions');
+}
 const METADATA_FILENAME = 'meta.json';
 const LEGACY_SESSION_FILENAME = 'session.json';
 const LEGACY_REQUEST_FILENAME = 'request.json';
@@ -22,7 +23,7 @@ async function ensureDir(dirPath) {
     await fs.mkdir(dirPath, { recursive: true });
 }
 export async function ensureSessionStorage() {
-    await ensureDir(SESSIONS_DIR);
+    await ensureDir(getSessionsDir());
 }
 function slugify(text, maxWords = MAX_SLUG_WORDS) {
     const normalized = text?.toLowerCase() ?? '';
@@ -50,7 +51,7 @@ export function createSessionId(prompt, customSlug) {
     return slugify(prompt);
 }
 function sessionDir(id) {
-    return path.join(SESSIONS_DIR, id);
+    return path.join(getSessionsDir(), id);
 }
 function metaPath(id) {
     return path.join(sessionDir(id), METADATA_FILENAME);
@@ -191,6 +192,7 @@ export async function initializeSession(options, cwd, notifications) {
             browserConfig,
             verbose: options.verbose,
             heartbeatIntervalMs: options.heartbeatIntervalMs,
+            browserAttachments: options.browserAttachments,
             browserInlineFiles: options.browserInlineFiles,
             browserBundleFiles: options.browserBundleFiles,
             background: options.background,
@@ -287,7 +289,7 @@ export function createSessionLogWriter(sessionId, model) {
 }
 export async function listSessionsMetadata() {
     await ensureSessionStorage();
-    const entries = await fs.readdir(SESSIONS_DIR).catch(() => []);
+    const entries = await fs.readdir(getSessionsDir()).catch(() => []);
     const metas = [];
     for (const entry of entries) {
         let meta = await readSessionMetadata(entry);
@@ -379,7 +381,7 @@ export async function readSessionRequest(sessionId) {
 }
 export async function deleteSessionsOlderThan({ hours = 24, includeAll = false, } = {}) {
     await ensureSessionStorage();
-    const entries = await fs.readdir(SESSIONS_DIR).catch(() => []);
+    const entries = await fs.readdir(getSessionsDir()).catch(() => []);
     if (!entries.length) {
         return { deleted: 0, remaining: 0 };
     }
@@ -415,7 +417,7 @@ export async function deleteSessionsOlderThan({ hours = 24, includeAll = false,
 export async function wait(ms) {
     return new Promise((resolve) => setTimeout(resolve, ms));
 }
-export { ORACLE_HOME, SESSIONS_DIR, MAX_STATUS_LIMIT };
+export { MAX_STATUS_LIMIT };
 export { ZOMBIE_MAX_AGE_MS };
 export async function getSessionPaths(sessionId) {
     const dir = sessionDir(sessionId);

package/dist/src/sessionStore.js

@@ -1,4 +1,4 @@
-import { ensureSessionStorage, initializeSession, readSessionMetadata, updateSessionMetadata, createSessionLogWriter, readSessionLog, readModelLog, readSessionRequest, listSessionsMetadata, filterSessionsByRange, deleteSessionsOlderThan, updateModelRunMetadata, getSessionPaths, SESSIONS_DIR, } from './sessionManager.js';
+import { ensureSessionStorage, initializeSession, readSessionMetadata, updateSessionMetadata, createSessionLogWriter, readSessionLog, readModelLog, readSessionRequest, listSessionsMetadata, filterSessionsByRange, deleteSessionsOlderThan, updateModelRunMetadata, getSessionPaths, getSessionsDir, } from './sessionManager.js';
 class FileSessionStore {
     ensureStorage() {
         return ensureSessionStorage();
@@ -40,7 +40,7 @@ class FileSessionStore {
         return getSessionPaths(sessionId);
     }
     sessionsDir() {
-        return SESSIONS_DIR;
+        return getSessionsDir();
     }
 }
 export const sessionStore = new FileSessionStore();

package/package.json

@@ -1,33 +1,13 @@
 {
   "name": "@steipete/oracle",
-  "version": "0.5.6",
-  "description": "CLI wrapper around OpenAI Responses API with GPT-5.1 Pro, GPT-5.1, and GPT-5.1 Codex high reasoning modes.",
+  "version": "0.6.1",
+  "description": "CLI wrapper around OpenAI Responses API with GPT-5.2 Pro (via gpt-5.1-pro alias), GPT-5.2, GPT-5.1, and GPT-5.1 Codex high reasoning modes.",
   "type": "module",
   "main": "dist/bin/oracle-cli.js",
   "bin": {
     "oracle": "dist/bin/oracle-cli.js",
     "oracle-mcp": "dist/bin/oracle-mcp.js"
   },
-  "scripts": {
-    "docs:list": "tsx scripts/docs-list.ts",
-    "build": "tsc -p tsconfig.build.json && pnpm run build:vendor",
-    "build:vendor": "node -e \"const fs=require('fs'); const path=require('path'); const src=path.join('vendor','oracle-notifier'); const dest=path.join('dist','vendor','oracle-notifier'); fs.mkdirSync(dest,{recursive:true}); if(fs.existsSync(src)){ fs.cpSync(src,dest,{recursive:true,force:true}); }\"",
-    "start": "pnpm run build && node ./dist/scripts/run-cli.js",
-    "oracle": "pnpm start",
-    "check": "pnpm run typecheck",
-    "typecheck": "tsc --noEmit",
-    "lint": "pnpm run typecheck && biome lint .",
-    "test": "vitest run",
-    "test:mcp": "pnpm run build && pnpm run test:mcp:unit && pnpm run test:mcp:mcporter",
-    "test:mcp:unit": "vitest run tests/mcp*.test.ts tests/mcp/**/*.test.ts",
-    "test:mcp:mcporter": "npx -y mcporter list oracle-local --schema --config config/mcporter.json && npx -y mcporter call oracle-local.sessions limit:1 --config config/mcporter.json",
-    "test:browser": "pnpm run build && tsx scripts/test-browser.ts && ./scripts/browser-smoke.sh",
-    "test:live": "ORACLE_LIVE_TEST=1 vitest run tests/live --exclude tests/live/openai-live.test.ts",
-    "test:pro": "ORACLE_LIVE_TEST=1 vitest run tests/live/openai-live.test.ts",
-    "test:coverage": "vitest run --coverage",
-    "prepare": "pnpm run build",
-    "mcp": "pnpm run build && node ./dist/bin/oracle-mcp.js"
-  },
   "files": [
     "dist/**/*",
     "assets-oracle-icon.png",
@@ -103,19 +83,23 @@
   "optionalDependencies": {
     "win-dpapi": "npm:@primno/dpapi@2.0.1"
   },
-  "pnpm": {
-    "overrides": {
-      "zod": "4.1.13",
-      "win-dpapi": "npm:@primno/dpapi@2.0.1",
-      "zod-to-json-schema": "3.25.0",
-      "devtools-protocol": "0.0.1551306"
-    },
-    "onlyBuiltDependencies": [
-      "@cdktf/node-pty-prebuilt-multiarch",
-      "keytar",
-      "sqlite3",
-      "win-dpapi"
-    ]
-  },
-  "packageManager": "pnpm@10.23.0+sha512.21c4e5698002ade97e4efe8b8b4a89a8de3c85a37919f957e7a0f30f38fbc5bbdd05980ffe29179b2fb6e6e691242e098d945d1601772cad0fef5fb6411e2a4b"
-}
+  "scripts": {
+    "docs:list": "tsx scripts/docs-list.ts",
+    "build": "tsc -p tsconfig.build.json && pnpm run build:vendor",
+    "build:vendor": "node -e \"const fs=require('fs'); const path=require('path'); const src=path.join('vendor','oracle-notifier'); const dest=path.join('dist','vendor','oracle-notifier'); fs.mkdirSync(dest,{recursive:true}); if(fs.existsSync(src)){ fs.cpSync(src,dest,{recursive:true,force:true}); }\"",
+    "start": "pnpm run build && node ./dist/scripts/run-cli.js",
+    "oracle": "pnpm start",
+    "check": "pnpm run typecheck",
+    "typecheck": "tsc --noEmit",
+    "lint": "pnpm run typecheck && biome lint .",
+    "test": "vitest run",
+    "test:mcp": "pnpm run build && pnpm run test:mcp:unit && pnpm run test:mcp:mcporter",
+    "test:mcp:unit": "vitest run tests/mcp*.test.ts tests/mcp/**/*.test.ts",
+    "test:mcp:mcporter": "npx -y mcporter list oracle-local --schema --config config/mcporter.json && npx -y mcporter call oracle-local.sessions limit:1 --config config/mcporter.json",
+    "test:browser": "pnpm run build && tsx scripts/test-browser.ts && ./scripts/browser-smoke.sh",
+    "test:live": "ORACLE_LIVE_TEST=1 vitest run tests/live --exclude tests/live/openai-live.test.ts",
+    "test:pro": "ORACLE_LIVE_TEST=1 vitest run tests/live/openai-live.test.ts",
+    "test:coverage": "vitest run --coverage",
+    "mcp": "pnpm run build && node ./dist/bin/oracle-mcp.js"
+  }
+}

package/vendor/oracle-notifier/README.md

@@ -1,24 +0,0 @@
-# Oracle Notifier helper (macOS, arm64)
-
-Builds a tiny signed helper app for macOS notifications with the Oracle icon.
-
-## Build
-
-```bash
-cd vendor/oracle-notifier
-# Optional: notarize by setting App Store Connect key credentials
-export APP_STORE_CONNECT_API_KEY_P8="$(cat AuthKey_XXXXXX.p8)" # with literal newlines or \n escaped
-export APP_STORE_CONNECT_KEY_ID=XXXXXX
-export APP_STORE_CONNECT_ISSUER_ID=YYYYYYYY-YYYY-YYYY-YYYY-YYYYYYYYYYYY
-./build-notifier.sh
-```
-
-- Requires Xcode command line tools (swiftc) and a macOS Developer ID certificate. Without a valid cert, the build fails (no ad-hoc fallback).
-- If `APP_STORE_CONNECT_*` vars are set, the script notarizes and staples the ticket.
-- Output: `OracleNotifier.app` (arm64 only), bundled with `OracleIcon.icns`.
-
-## Usage
-The CLI prefers this helper on macOS; if it fails or is missing, it falls back to toasted-notifier/terminal-notifier.
-
-## Permissions
-After first run, allow notifications for “Oracle Notifier” in System Settings → Notifications.