@steipete/oracle 0.6.1 → 0.7.0

package/README.md

@@ -21,26 +21,29 @@ Use `npx -y @steipete/oracle …` (not `pnpx`)—pnpx's sandboxed cache can’t
 
 ```bash
 # Copy the bundle and paste into ChatGPT
-npx @steipete/oracle --render --copy -p "Review the TS data layer for schema drift" --file "src/**/*.ts,*/*.test.ts"
+npx -y @steipete/oracle --render --copy -p "Review the TS data layer for schema drift" --file "src/**/*.ts,*/*.test.ts"
 
 # Minimal API run (expects OPENAI_API_KEY in your env)
-npx @steipete/oracle -p "Write a concise architecture note for the storage adapters" --file src/storage/README.md
+npx -y @steipete/oracle -p "Write a concise architecture note for the storage adapters" --file src/storage/README.md
 
 # Multi-model API run
-npx @steipete/oracle -p "Cross-check the data layer assumptions" --models gpt-5.1-pro,gemini-3-pro --file "src/**/*.ts"
+npx -y @steipete/oracle -p "Cross-check the data layer assumptions" --models gpt-5.1-pro,gemini-3-pro --file "src/**/*.ts"
 
 # Preview without spending tokens
-npx @steipete/oracle --dry-run summary -p "Check release notes" --file docs/release-notes.md
+npx -y @steipete/oracle --dry-run summary -p "Check release notes" --file docs/release-notes.md
 
 # Browser run (no API key, will open ChatGPT)
-npx @steipete/oracle --engine browser -p "Walk through the UI smoke test" --file "src/**/*.ts"
+npx -y @steipete/oracle --engine browser -p "Walk through the UI smoke test" --file "src/**/*.ts"
+
+# Gemini browser mode (no API key; uses Chrome cookies from gemini.google.com)
+npx -y @steipete/oracle --engine browser --model gemini-3-pro --prompt "a cute robot holding a banana" --generate-image out.jpg --aspect 1:1
 
 # Sessions (list and replay)
-npx @steipete/oracle status --hours 72
-npx @steipete/oracle session <id> --render
+npx -y @steipete/oracle status --hours 72
+npx -y @steipete/oracle session <id> --render
 
 # TUI (interactive, only for humans)
-npx @steipete/oracle tui
+npx -y @steipete/oracle tui
 ```
 
 Engine auto-picks API when `OPENAI_API_KEY` is set, otherwise browser; browser is stable on macOS and works on Linux and Windows. On Linux pass `--browser-chrome-path/--browser-cookie-path` if detection fails; on Windows prefer `--browser-manual-login` or inline cookies if decryption is blocked.
@@ -49,6 +52,8 @@ Engine auto-picks API when `OPENAI_API_KEY` is set, otherwise browser; browser i
 
 **CLI**
 - API mode expects API keys in your environment: `OPENAI_API_KEY` (GPT-5.x), `GEMINI_API_KEY` (Gemini 3 Pro), `ANTHROPIC_API_KEY` (Claude Sonnet 4.5 / Opus 4.1).
+- Gemini browser mode uses Chrome cookies instead of an API key—just be logged into `gemini.google.com` in Chrome (no Python/venv required).
+- If your Gemini account can’t access “Pro”, Oracle auto-falls back to a supported model for web runs (and logs the fallback in verbose mode).
 - Prefer API mode or `--copy` + manual paste; browser automation is experimental.
 - Browser support: stable on macOS; works on Linux (add `--browser-chrome-path/--browser-cookie-path` when needed) and Windows (manual-login or inline cookies recommended when app-bound cookies block decryption).
 - Remote browser service: `oracle serve` on a signed-in host; clients use `--remote-host/--remote-token`.
@@ -109,6 +114,9 @@ npx -y @steipete/oracle oracle-mcp
 | `--dry-run [summary\|json\|full]` | Preview without sending. |
 | `--remote-host`, `--remote-token` | Use a remote `oracle serve` host (browser). |
 | `--remote-chrome <host:port>` | Attach to an existing remote Chrome session (browser). |
+| `--youtube <url>` | YouTube video URL to analyze (Gemini browser mode). |
+| `--generate-image <file>` | Generate image and save to file (Gemini browser mode). |
+| `--edit-image <file>` | Edit existing image with `--output` (Gemini browser mode). |
 | `--azure-endpoint`, `--azure-deployment`, `--azure-api-version` | Target Azure OpenAI endpoints (picks Azure client automatically). |
 
 ## Configuration

package/dist/bin/oracle-cli.js

@@ -18,6 +18,7 @@ import { DEFAULT_MODEL, MODEL_CONFIGS, readFiles, estimateRequestTokens, buildRe
 import { isKnownModel } from '../src/oracle/modelResolver.js';
 import { CHATGPT_URL } from '../src/browserMode.js';
 import { createRemoteBrowserExecutor } from '../src/remote/client.js';
+import { createGeminiWebExecutor } from '../src/gemini-web/index.js';
 import { applyHelpStyling } from '../src/cli/help.js';
 import { collectPaths, collectModelList, parseFloatOption, parseIntOption, parseSearchOption, usesDefaultStatusFilters, resolvePreviewMode, normalizeModelOption, normalizeBaseUrl, resolveApiModel, inferModelFromLabel, parseHeartbeatOption, parseTimeoutOption, mergePathLikeOptions, } from '../src/cli/options.js';
 import { copyToClipboard } from '../src/cli/clipboard.js';
@@ -26,6 +27,7 @@ import { shouldDetachSession } from '../src/cli/detach.js';
 import { applyHiddenAliases } from '../src/cli/hiddenAliases.js';
 import { buildBrowserConfig, resolveBrowserModelLabel } from '../src/cli/browserConfig.js';
 import { performSessionRun } from '../src/cli/sessionRunner.js';
+import { isMediaFile } from '../src/browser/prompt.js';
 import { attachSession, showStatus, formatCompletionSummary } from '../src/cli/sessionDisplay.js';
 import { formatCompactNumber } from '../src/cli/format.js';
 import { formatIntroLine } from '../src/cli/tagline.js';
@@ -114,7 +116,7 @@ program
     .addOption(new Option('--models <models>', 'Comma-separated API model list to query in parallel (e.g., "gpt-5.1-pro,gemini-3-pro").')
     .argParser(collectModelList)
     .default([]))
-    .addOption(new Option('-e, --engine <mode>', 'Execution engine (api | browser). Engine is preferred; --mode is a legacy alias. If omitted, oracle picks api when OPENAI_API_KEY is set, otherwise browser.').choices(['api', 'browser']))
+    .addOption(new Option('-e, --engine <mode>', 'Execution engine (api | browser). Browser engine: GPT models automate ChatGPT; Gemini models use a cookie-based client for gemini.google.com. If omitted, oracle picks api when OPENAI_API_KEY is set, otherwise browser.').choices(['api', 'browser']))
     .addOption(new Option('--mode <mode>', 'Alias for --engine (api | browser).').choices(['api', 'browser']).hideHelp())
     .option('--files-report', 'Show token usage per attached file (also prints automatically when files exceed the token budget).', false)
     .option('-v, --verbose', 'Enable verbose logging for all operations.', false)
@@ -182,6 +184,12 @@ program
     .addOption(new Option('--remote-token <token>', 'Access token for the remote `oracle serve` instance.'))
     .addOption(new Option('--browser-inline-files', 'Alias for --browser-attachments never (force pasting file contents inline).').default(false))
     .addOption(new Option('--browser-bundle-files', 'Bundle all attachments into a single archive before uploading.').default(false))
+    .addOption(new Option('--youtube <url>', 'YouTube video URL to analyze (Gemini web/cookie mode only; uses your signed-in Chrome cookies for gemini.google.com).'))
+    .addOption(new Option('--generate-image <file>', 'Generate image and save to file (Gemini web/cookie mode only; requires gemini.google.com Chrome cookies).'))
+    .addOption(new Option('--edit-image <file>', 'Edit existing image (use with --output, Gemini web/cookie mode only).'))
+    .addOption(new Option('--output <file>', 'Output file path for image operations (Gemini web/cookie mode only).'))
+    .addOption(new Option('--aspect <ratio>', 'Aspect ratio for image generation: 16:9, 1:1, 4:3, 3:4 (Gemini web/cookie mode only).'))
+    .addOption(new Option('--gemini-show-thoughts', 'Display Gemini thinking process (Gemini web/cookie mode only).').default(false))
     .option('--retain-hours <hours>', 'Prune stored sessions older than this many hours before running (set 0 to disable).', parseFloatOption)
     .option('--force', 'Force start a new session even if an identical prompt is already running.', false)
     .option('--debug-help', 'Show the advanced/debug option set and exit.', false)
@@ -512,18 +520,13 @@ async function runRootCommand(options) {
     const isCodex = primaryModelCandidate.startsWith('gpt-5.1-codex');
     const isClaude = primaryModelCandidate.startsWith('claude');
     const userForcedBrowser = options.browser || options.engine === 'browser';
-    const hasNonGptBrowserTarget = (engine === 'browser' || userForcedBrowser) &&
+    const isBrowserCompatible = (model) => model.startsWith('gpt-') || model.startsWith('gemini');
+    const hasNonBrowserCompatibleTarget = (engine === 'browser' || userForcedBrowser) &&
         (normalizedMultiModels.length > 0
-            ? normalizedMultiModels.some((model) => !model.startsWith('gpt-'))
-            : !resolvedModelCandidate.startsWith('gpt-'));
-    if (hasNonGptBrowserTarget) {
-        throw new Error('Browser engine only supports GPT-series ChatGPT models. Re-run with --engine api for Grok, Claude, Gemini, or other non-GPT models.');
-    }
-    if (isGemini && userForcedBrowser) {
-        throw new Error('Gemini is only supported via API. Use --engine api.');
-    }
-    if (isGemini && engine === 'browser') {
-        engine = 'api';
+            ? normalizedMultiModels.some((model) => !isBrowserCompatible(model))
+            : !isBrowserCompatible(resolvedModelCandidate));
+    if (hasNonBrowserCompatibleTarget) {
+        throw new Error('Browser engine only supports GPT and Gemini models. Re-run with --engine api for Grok, Claude, or other models.');
     }
     if (isClaude && engine === 'browser') {
         console.log(chalk.dim('Browser engine is not supported for Claude models; switching to API.'));
@@ -672,7 +675,11 @@ async function runRootCommand(options) {
         return;
     }
     if (options.file && options.file.length > 0) {
-        await readFiles(options.file, { cwd: process.cwd() });
+        const isBrowserMode = engine === 'browser' || userForcedBrowser;
+        const filesToValidate = isBrowserMode ? options.file.filter((f) => !isMediaFile(f)) : options.file;
+        if (filesToValidate.length > 0) {
+            await readFiles(filesToValidate, { cwd: process.cwd() });
+        }
     }
     const getSource = (key) => program.getOptionValueSource?.(key) ?? undefined;
     applyBrowserDefaultsFromConfig(options, userConfig, getSource);
@@ -698,6 +705,19 @@ async function runRootCommand(options) {
         };
         console.log(chalk.dim(`Routing browser automation to remote host ${remoteHost}`));
     }
+    else if (browserConfig && resolvedModel.startsWith('gemini')) {
+        browserDeps = {
+            executeBrowser: createGeminiWebExecutor({
+                youtube: options.youtube,
+                generateImage: options.generateImage,
+                editImage: options.editImage,
+                outputPath: options.output,
+                aspectRatio: options.aspect,
+                showThoughts: options.geminiShowThoughts,
+            }),
+        };
+        console.log(chalk.dim('Using Gemini web client for browser automation'));
+    }
     const remoteExecutionActive = Boolean(browserDeps);
     if (options.dryRun) {
         const baseRunOptions = buildRunOptions(resolvedOptions, {

package/dist/src/browser/prompt.js

@@ -6,10 +6,32 @@ import { isKnownModel } from '../oracle/modelResolver.js';
 import { buildPromptMarkdown } from '../oracle/promptAssembly.js';
 import { buildAttachmentPlan } from './policies.js';
 const DEFAULT_BROWSER_INLINE_CHAR_BUDGET = 60_000;
+const MEDIA_EXTENSIONS = new Set([
+    '.mp4', '.mov', '.avi', '.mkv', '.webm', '.m4v',
+    '.mp3', '.wav', '.aac', '.flac', '.ogg', '.m4a',
+    '.jpg', '.jpeg', '.png', '.gif', '.webp', '.bmp', '.svg', '.heic', '.heif',
+    '.pdf',
+]);
+export function isMediaFile(filePath) {
+    const ext = path.extname(filePath).toLowerCase();
+    return MEDIA_EXTENSIONS.has(ext);
+}
 export async function assembleBrowserPrompt(runOptions, deps = {}) {
     const cwd = deps.cwd ?? process.cwd();
     const readFilesFn = deps.readFilesImpl ?? readFiles;
-    const files = await readFilesFn(runOptions.file ?? [], { cwd });
+    const allFilePaths = runOptions.file ?? [];
+    const textFilePaths = allFilePaths.filter((f) => !isMediaFile(f));
+    const mediaFilePaths = allFilePaths.filter((f) => isMediaFile(f));
+    const mediaAttachments = await Promise.all(mediaFilePaths.map(async (filePath) => {
+        const resolvedPath = path.isAbsolute(filePath) ? filePath : path.resolve(cwd, filePath);
+        const stats = await fs.stat(resolvedPath);
+        return {
+            path: resolvedPath,
+            displayPath: path.relative(cwd, resolvedPath) || path.basename(resolvedPath),
+            sizeBytes: stats.size,
+        };
+    }));
+    const files = await readFilesFn(textFilePaths, { cwd });
     const basePrompt = (runOptions.prompt ?? '').trim();
     const userPrompt = basePrompt;
     const systemPrompt = runOptions.system?.trim() || '';
@@ -40,9 +62,10 @@ export async function assembleBrowserPrompt(runOptions, deps = {}) {
         .filter(Boolean)
         .join('\n\n')
         .trim();
-    const attachments = selectedPlan.attachments.slice();
+    const attachments = [...selectedPlan.attachments, ...mediaAttachments];
     const shouldBundle = selectedPlan.shouldBundle;
     let bundleText = null;
+    let bundled = null;
     if (shouldBundle) {
         const bundleDir = await fs.mkdtemp(path.join(os.tmpdir(), 'oracle-browser-bundle-'));
         const bundlePath = path.join(bundleDir, 'attachments-bundle.txt');
@@ -59,6 +82,8 @@ export async function assembleBrowserPrompt(runOptions, deps = {}) {
             displayPath: bundlePath,
             sizeBytes: Buffer.byteLength(bundleText, 'utf8'),
         });
+        attachments.push(...mediaAttachments);
+        bundled = { originalCount: sections.length, bundlePath };
     }
     const inlineFileCount = selectedPlan.inlineFileCount;
     const modelConfig = isKnownModel(runOptions.model) ? MODEL_CONFIGS[runOptions.model] : MODEL_CONFIGS['gpt-5.1'];
@@ -85,7 +110,7 @@ export async function assembleBrowserPrompt(runOptions, deps = {}) {
     let fallback = null;
     if (attachmentsPolicy === 'auto' && selectedPlan.mode === 'inline' && sections.length > 0) {
         const fallbackComposerText = baseComposerSections.join('\n\n').trim();
-        const fallbackAttachments = uploadPlan.attachments.slice();
+        const fallbackAttachments = [...uploadPlan.attachments, ...mediaAttachments];
         let fallbackBundled = null;
         if (uploadPlan.shouldBundle) {
             const bundleDir = await fs.mkdtemp(path.join(os.tmpdir(), 'oracle-browser-bundle-'));
@@ -103,6 +128,7 @@ export async function assembleBrowserPrompt(runOptions, deps = {}) {
                 displayPath: bundlePath,
                 sizeBytes: Buffer.byteLength(fallbackBundleText, 'utf8'),
             });
+            fallbackAttachments.push(...mediaAttachments);
             fallbackBundled = { originalCount: sections.length, bundlePath };
         }
         fallback = {
@@ -121,8 +147,6 @@ export async function assembleBrowserPrompt(runOptions, deps = {}) {
         attachmentsPolicy,
         attachmentMode: selectedPlan.mode,
         fallback,
-        bundled: shouldBundle && attachments.length === 1 && attachments[0]?.displayPath
-            ? { originalCount: sections.length, bundlePath: attachments[0].displayPath }
-            : null,
+        bundled,
     };
 }

package/dist/src/browser/sessionRunner.js

@@ -5,11 +5,6 @@ import { runBrowserMode } from '../browserMode.js';
 import { assembleBrowserPrompt } from './prompt.js';
 import { BrowserAutomationError } from '../oracle/errors.js';
 export async function runBrowserSessionExecution({ runOptions, browserConfig, cwd, log }, deps = {}) {
-    if (runOptions.model.startsWith('gemini')) {
-        throw new BrowserAutomationError('Gemini models are not available in browser mode. Re-run with --engine api.', {
-            stage: 'preflight',
-        });
-    }
     const assemblePrompt = deps.assemblePrompt ?? assembleBrowserPrompt;
     const executeBrowser = deps.executeBrowser ?? runBrowserMode;
     const promptArtifacts = await assemblePrompt(runOptions, { cwd });

package/dist/src/cli/runOptions.js

@@ -13,7 +13,6 @@ export function resolveRunOptionsFromConfig({ prompt, files = [], model, models,
     const resolvedModel = resolvedEngine === 'browser' && normalizedRequestedModels.length === 0
         ? inferModelFromLabel(cliModelArg)
         : resolveApiModel(cliModelArg);
-    const isGemini = resolvedModel.startsWith('gemini');
     const isCodex = resolvedModel.startsWith('gpt-5.1-codex');
     const isClaude = resolvedModel.startsWith('claude');
     const isGrok = resolvedModel.startsWith('grok');
@@ -21,13 +20,13 @@ export function resolveRunOptionsFromConfig({ prompt, files = [], model, models,
     const allModels = normalizedRequestedModels.length > 0
         ? Array.from(new Set(normalizedRequestedModels.map((entry) => resolveApiModel(entry))))
         : [resolvedModel];
-    const hasNonGptBrowserTarget = (browserRequested || browserConfigured) && allModels.some((m) => !m.startsWith('gpt-'));
-    if (hasNonGptBrowserTarget) {
-        throw new PromptValidationError('Browser engine only supports GPT-series ChatGPT models. Re-run with --engine api for Grok, Claude, Gemini, or other non-GPT models.', { engine: 'browser', models: allModels });
+    const isBrowserCompatible = (m) => m.startsWith('gpt-') || m.startsWith('gemini');
+    const hasNonBrowserCompatibleTarget = (browserRequested || browserConfigured) && allModels.some((m) => !isBrowserCompatible(m));
+    if (hasNonBrowserCompatibleTarget) {
+        throw new PromptValidationError('Browser engine only supports GPT and Gemini models. Re-run with --engine api for Grok, Claude, or other models.', { engine: 'browser', models: allModels });
     }
-    const engineCoercedToApi = engineWasBrowser && (isGemini || isCodex || isClaude || isGrok);
-    // When Gemini, Claude, or Grok is selected, force API engine for auto-browser detection; codex also forces API.
-    const fixedEngine = isGemini || isCodex || isClaude || isGrok || normalizedRequestedModels.length > 0 ? 'api' : resolvedEngine;
+    const engineCoercedToApi = engineWasBrowser && (isCodex || isClaude || isGrok);
+    const fixedEngine = isCodex || isClaude || isGrok || normalizedRequestedModels.length > 0 ? 'api' : resolvedEngine;
     const promptWithSuffix = userConfig?.promptSuffix && userConfig.promptSuffix.trim().length > 0
         ? `${prompt.trim()}\n${userConfig.promptSuffix}`
         : prompt;

package/dist/src/cli/sessionRunner.js

@@ -38,9 +38,6 @@ export async function performSessionRun({ sessionMeta, runOptions, mode, browser
     const modelForStatus = runOptions.model ?? sessionMeta.model;
     try {
         if (mode === 'browser') {
-            if (runOptions.model.startsWith('gemini')) {
-                throw new Error('Gemini models are not available in browser mode. Re-run with --engine api.');
-            }
             if (!browserConfig) {
                 throw new Error('Missing browser configuration for session.');
             }

package/dist/src/gemini-web/client.js

@@ -0,0 +1,322 @@
+import { mkdir, readFile, writeFile } from 'node:fs/promises';
+import path from 'node:path';
+const USER_AGENT = 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36';
+const MODEL_HEADER_NAME = 'x-goog-ext-525001261-jspb';
+const MODEL_HEADERS = {
+    'gemini-3-pro': '[1,null,null,null,"9d8ca3786ebdfbea",null,null,0,[4]]',
+    'gemini-2.5-pro': '[1,null,null,null,"4af6c7f5da75d65d",null,null,0,[4]]',
+    'gemini-2.5-flash': '[1,null,null,null,"9ec249fc9ad08861",null,null,0,[4]]',
+};
+const GEMINI_APP_URL = 'https://gemini.google.com/app';
+const GEMINI_STREAM_GENERATE_URL = 'https://gemini.google.com/_/BardChatUi/data/assistant.lamda.BardFrontendService/StreamGenerate';
+const GEMINI_UPLOAD_URL = 'https://content-push.googleapis.com/upload';
+const GEMINI_UPLOAD_PUSH_ID = 'feeds/mcudyrk2a4khkz';
+function getNestedValue(value, pathParts, fallback) {
+    let current = value;
+    for (const part of pathParts) {
+        if (current == null)
+            return fallback;
+        if (typeof part === 'number') {
+            if (!Array.isArray(current))
+                return fallback;
+            current = current[part];
+        }
+        else {
+            if (typeof current !== 'object')
+                return fallback;
+            current = current[part];
+        }
+    }
+    return current ?? fallback;
+}
+function buildCookieHeader(cookieMap) {
+    return Object.entries(cookieMap)
+        .filter(([, value]) => typeof value === 'string' && value.length > 0)
+        .map(([name, value]) => `${name}=${value}`)
+        .join('; ');
+}
+export async function fetchGeminiAccessToken(cookieMap) {
+    const cookieHeader = buildCookieHeader(cookieMap);
+    const res = await fetch(GEMINI_APP_URL, {
+        redirect: 'follow',
+        headers: {
+            cookie: cookieHeader,
+            'user-agent': USER_AGENT,
+        },
+    });
+    const html = await res.text();
+    const tokens = ['SNlM0e', 'thykhd'];
+    for (const key of tokens) {
+        const match = html.match(new RegExp(`"${key}":"(.*?)"`));
+        if (match?.[1])
+            return match[1];
+    }
+    throw new Error('Unable to locate Gemini access token on gemini.google.com/app (missing SNlM0e/thykhd).');
+}
+function trimGeminiJsonEnvelope(text) {
+    const start = text.indexOf('[');
+    const end = text.lastIndexOf(']');
+    if (start === -1 || end === -1 || end <= start) {
+        throw new Error('Gemini response did not contain a JSON payload.');
+    }
+    return text.slice(start, end + 1);
+}
+function extractErrorCode(responseJson) {
+    const code = getNestedValue(responseJson, [0, 5, 2, 0, 1, 0], -1);
+    return typeof code === 'number' && code >= 0 ? code : undefined;
+}
+function extractGgdlUrls(rawText) {
+    const matches = rawText.match(/https:\/\/lh3\.googleusercontent\.com\/gg-dl\/[^\s"']+/g) ?? [];
+    const seen = new Set();
+    const urls = [];
+    for (const match of matches) {
+        if (seen.has(match))
+            continue;
+        seen.add(match);
+        urls.push(match);
+    }
+    return urls;
+}
+function ensureFullSizeImageUrl(url) {
+    if (url.includes('=s2048'))
+        return url;
+    if (url.includes('=s'))
+        return url;
+    return `${url}=s2048`;
+}
+async function fetchWithCookiePreservingRedirects(url, init, maxRedirects = 10) {
+    let current = url;
+    for (let i = 0; i <= maxRedirects; i += 1) {
+        const res = await fetch(current, { ...init, redirect: 'manual' });
+        if (res.status >= 300 && res.status < 400) {
+            const location = res.headers.get('location');
+            if (!location)
+                return res;
+            current = new URL(location, current).toString();
+            continue;
+        }
+        return res;
+    }
+    throw new Error(`Too many redirects while downloading image (>${maxRedirects}).`);
+}
+async function downloadGeminiImage(url, cookieMap, outputPath) {
+    const cookieHeader = buildCookieHeader(cookieMap);
+    const res = await fetchWithCookiePreservingRedirects(ensureFullSizeImageUrl(url), {
+        headers: {
+            cookie: cookieHeader,
+            'user-agent': USER_AGENT,
+        },
+    });
+    if (!res.ok) {
+        throw new Error(`Failed to download image: ${res.status} ${res.statusText} (${res.url})`);
+    }
+    const data = new Uint8Array(await res.arrayBuffer());
+    await mkdir(path.dirname(outputPath), { recursive: true });
+    await writeFile(outputPath, data);
+}
+async function uploadGeminiFile(filePath) {
+    const absPath = path.resolve(process.cwd(), filePath);
+    const data = await readFile(absPath);
+    const fileName = path.basename(absPath);
+    const form = new FormData();
+    form.append('file', new Blob([data]), fileName);
+    const res = await fetch(GEMINI_UPLOAD_URL, {
+        method: 'POST',
+        redirect: 'follow',
+        headers: {
+            'push-id': GEMINI_UPLOAD_PUSH_ID,
+            'user-agent': USER_AGENT,
+        },
+        body: form,
+    });
+    const text = await res.text();
+    if (!res.ok) {
+        throw new Error(`File upload failed: ${res.status} ${res.statusText} (${text.slice(0, 200)})`);
+    }
+    return { id: text, name: fileName };
+}
+function buildGeminiFReqPayload(prompt, uploaded, chatMetadata) {
+    const promptPayload = uploaded.length > 0
+        ? [
+            prompt,
+            0,
+            null,
+            // Matches gemini-webapi payload format: [[[fileId, 1]]] for a single attachment.
+            // Keep it extensible for multiple uploads by emitting one [[id, 1]] entry per file.
+            uploaded.map((file) => [[file.id, 1]]),
+        ]
+        : [prompt];
+    const innerList = [promptPayload, null, chatMetadata ?? null];
+    return JSON.stringify([null, JSON.stringify(innerList)]);
+}
+export function parseGeminiStreamGenerateResponse(rawText) {
+    const responseJson = JSON.parse(trimGeminiJsonEnvelope(rawText));
+    const errorCode = extractErrorCode(responseJson);
+    const parts = Array.isArray(responseJson) ? responseJson : [];
+    let bodyIndex = 0;
+    let body = null;
+    for (let i = 0; i < parts.length; i += 1) {
+        const partBody = getNestedValue(parts[i], [2], null);
+        if (!partBody)
+            continue;
+        try {
+            const parsed = JSON.parse(partBody);
+            const candidateList = getNestedValue(parsed, [4], []);
+            if (Array.isArray(candidateList) && candidateList.length > 0) {
+                bodyIndex = i;
+                body = parsed;
+                break;
+            }
+        }
+        catch {
+            // ignore
+        }
+    }
+    const candidateList = getNestedValue(body, [4], []);
+    const firstCandidate = candidateList[0];
+    const textRaw = getNestedValue(firstCandidate, [1, 0], '');
+    const cardContent = /^http:\/\/googleusercontent\.com\/card_content\/\d+/.test(textRaw);
+    const text = cardContent
+        ? (getNestedValue(firstCandidate, [22, 0], null) ?? textRaw)
+        : textRaw;
+    const thoughts = getNestedValue(firstCandidate, [37, 0, 0], null);
+    const metadata = getNestedValue(body, [1], []);
+    const images = [];
+    const webImages = getNestedValue(firstCandidate, [12, 1], []);
+    for (const webImage of webImages) {
+        const url = getNestedValue(webImage, [0, 0, 0], null);
+        if (!url)
+            continue;
+        images.push({
+            kind: 'web',
+            url,
+            title: getNestedValue(webImage, [7, 0], undefined),
+            alt: getNestedValue(webImage, [0, 4], undefined),
+        });
+    }
+    const hasGenerated = Boolean(getNestedValue(firstCandidate, [12, 7, 0], null));
+    if (hasGenerated) {
+        let imgBody = null;
+        for (let i = bodyIndex; i < parts.length; i += 1) {
+            const partBody = getNestedValue(parts[i], [2], null);
+            if (!partBody)
+                continue;
+            try {
+                const parsed = JSON.parse(partBody);
+                const candidateImages = getNestedValue(parsed, [4, 0, 12, 7, 0], null);
+                if (candidateImages != null) {
+                    imgBody = parsed;
+                    break;
+                }
+            }
+            catch {
+                // ignore
+            }
+        }
+        const imgCandidate = getNestedValue(imgBody ?? body, [4, 0], null);
+        const generated = getNestedValue(imgCandidate, [12, 7, 0], []);
+        for (const genImage of generated) {
+            const url = getNestedValue(genImage, [0, 3, 3], null);
+            if (!url)
+                continue;
+            images.push({
+                kind: 'generated',
+                url,
+                title: '[Generated Image]',
+                alt: '',
+            });
+        }
+    }
+    return { metadata, text, thoughts, images, errorCode };
+}
+export function isGeminiModelUnavailable(errorCode) {
+    return errorCode === 1052;
+}
+export async function runGeminiWebOnce(input) {
+    const cookieHeader = buildCookieHeader(input.cookieMap);
+    const at = await fetchGeminiAccessToken(input.cookieMap);
+    const uploaded = [];
+    for (const file of input.files ?? []) {
+        uploaded.push(await uploadGeminiFile(file));
+    }
+    const fReq = buildGeminiFReqPayload(input.prompt, uploaded, input.chatMetadata ?? null);
+    const params = new URLSearchParams();
+    params.set('at', at);
+    params.set('f.req', fReq);
+    const res = await fetch(GEMINI_STREAM_GENERATE_URL, {
+        method: 'POST',
+        redirect: 'follow',
+        headers: {
+            'content-type': 'application/x-www-form-urlencoded;charset=utf-8',
+            origin: 'https://gemini.google.com',
+            referer: 'https://gemini.google.com/',
+            'x-same-domain': '1',
+            'user-agent': USER_AGENT,
+            cookie: cookieHeader,
+            [MODEL_HEADER_NAME]: MODEL_HEADERS[input.model],
+        },
+        body: params.toString(),
+    });
+    const rawResponseText = await res.text();
+    if (!res.ok) {
+        return {
+            rawResponseText,
+            text: '',
+            thoughts: null,
+            metadata: input.chatMetadata ?? null,
+            images: [],
+            errorMessage: `Gemini request failed: ${res.status} ${res.statusText}`,
+        };
+    }
+    try {
+        const parsed = parseGeminiStreamGenerateResponse(rawResponseText);
+        return {
+            rawResponseText,
+            text: parsed.text ?? '',
+            thoughts: parsed.thoughts,
+            metadata: parsed.metadata,
+            images: parsed.images,
+            errorCode: parsed.errorCode,
+        };
+    }
+    catch (error) {
+        let responseJson = null;
+        try {
+            responseJson = JSON.parse(trimGeminiJsonEnvelope(rawResponseText));
+        }
+        catch {
+            responseJson = null;
+        }
+        const errorCode = extractErrorCode(responseJson);
+        return {
+            rawResponseText,
+            text: '',
+            thoughts: null,
+            metadata: input.chatMetadata ?? null,
+            images: [],
+            errorCode: typeof errorCode === 'number' ? errorCode : undefined,
+            errorMessage: error instanceof Error ? error.message : String(error ?? ''),
+        };
+    }
+}
+export async function runGeminiWebWithFallback(input) {
+    const attempt = await runGeminiWebOnce(input);
+    if (isGeminiModelUnavailable(attempt.errorCode) && input.model !== 'gemini-2.5-flash') {
+        const fallback = await runGeminiWebOnce({ ...input, model: 'gemini-2.5-flash' });
+        return { ...fallback, effectiveModel: 'gemini-2.5-flash' };
+    }
+    return { ...attempt, effectiveModel: input.model };
+}
+export async function saveFirstGeminiImageFromOutput(output, cookieMap, outputPath) {
+    const generatedOrWeb = output.images.find((img) => img.kind === 'generated') ?? output.images[0];
+    if (generatedOrWeb?.url) {
+        await downloadGeminiImage(generatedOrWeb.url, cookieMap, outputPath);
+        return { saved: true, imageCount: output.images.length };
+    }
+    const ggdl = extractGgdlUrls(output.rawResponseText);
+    if (ggdl[0]) {
+        await downloadGeminiImage(ggdl[0], cookieMap, outputPath);
+        return { saved: true, imageCount: ggdl.length };
+    }
+    return { saved: false, imageCount: 0 };
+}

package/dist/src/gemini-web/executor.js

@@ -0,0 +1,204 @@
+import path from 'node:path';
+import { runGeminiWebWithFallback, saveFirstGeminiImageFromOutput } from './client.js';
+function estimateTokenCount(text) {
+    return Math.ceil(text.length / 4);
+}
+function resolveInvocationPath(value) {
+    if (!value)
+        return undefined;
+    const trimmed = value.trim();
+    if (!trimmed)
+        return undefined;
+    return path.isAbsolute(trimmed) ? trimmed : path.resolve(process.cwd(), trimmed);
+}
+function resolveGeminiWebModel(desiredModel, log) {
+    const desired = typeof desiredModel === 'string' ? desiredModel.trim() : '';
+    if (!desired)
+        return 'gemini-3-pro';
+    switch (desired) {
+        case 'gemini-3-pro':
+        case 'gemini-3.0-pro':
+            return 'gemini-3-pro';
+        case 'gemini-2.5-pro':
+            return 'gemini-2.5-pro';
+        case 'gemini-2.5-flash':
+            return 'gemini-2.5-flash';
+        default:
+            if (desired.startsWith('gemini-')) {
+                log?.(`[gemini-web] Unsupported Gemini web model "${desired}". Falling back to gemini-3-pro.`);
+            }
+            return 'gemini-3-pro';
+    }
+}
+async function loadGeminiCookiesFromChrome(browserConfig, log) {
+    try {
+        const mod = (await import('chrome-cookies-secure'));
+        const chromeCookies = mod.default ??
+            mod;
+        const profile = typeof browserConfig?.chromeProfile === 'string' &&
+            browserConfig.chromeProfile.trim().length > 0
+            ? browserConfig.chromeProfile.trim()
+            : undefined;
+        const sources = [
+            'https://gemini.google.com',
+            'https://accounts.google.com',
+            'https://www.google.com',
+        ];
+        const wantNames = [
+            '__Secure-1PSID',
+            '__Secure-1PSIDTS',
+            '__Secure-1PSIDCC',
+            '__Secure-1PAPISID',
+            'NID',
+            'AEC',
+            'SOCS',
+            '__Secure-BUCKET',
+            '__Secure-ENID',
+            'SID',
+            'HSID',
+            'SSID',
+            'APISID',
+            'SAPISID',
+            '__Secure-3PSID',
+            '__Secure-3PSIDTS',
+            '__Secure-3PAPISID',
+            'SIDCC',
+        ];
+        const cookieMap = {};
+        for (const url of sources) {
+            const cookies = (await chromeCookies.getCookiesPromised(url, 'puppeteer', profile));
+            for (const name of wantNames) {
+                if (cookieMap[name])
+                    continue;
+                const matches = cookies.filter((cookie) => cookie.name === name);
+                if (matches.length === 0)
+                    continue;
+                const preferredDomain = matches.find((cookie) => cookie.domain === '.google.com' && (cookie.path ?? '/') === '/');
+                const googleDomain = matches.find((cookie) => (cookie.domain ?? '').endsWith('google.com'));
+                const value = (preferredDomain ?? googleDomain ?? matches[0])?.value;
+                if (value)
+                    cookieMap[name] = value;
+            }
+        }
+        if (!cookieMap['__Secure-1PSID'] || !cookieMap['__Secure-1PSIDTS']) {
+            return {};
+        }
+        log?.(`[gemini-web] Loaded Gemini cookies from Chrome (node): ${Object.keys(cookieMap).length} cookie(s).`);
+        return cookieMap;
+    }
+    catch (error) {
+        log?.(`[gemini-web] Failed to load Chrome cookies via node: ${error instanceof Error ? error.message : String(error ?? '')}`);
+        return {};
+    }
+}
+export function createGeminiWebExecutor(geminiOptions) {
+    return async (runOptions) => {
+        const startTime = Date.now();
+        const log = runOptions.log;
+        log?.('[gemini-web] Starting Gemini web executor (TypeScript)');
+        const cookieMap = await loadGeminiCookiesFromChrome(runOptions.config, log);
+        if (!cookieMap['__Secure-1PSID'] || !cookieMap['__Secure-1PSIDTS']) {
+            throw new Error('Gemini browser mode requires Chrome cookies for google.com (missing __Secure-1PSID/__Secure-1PSIDTS).');
+        }
+        const generateImagePath = resolveInvocationPath(geminiOptions.generateImage);
+        const editImagePath = resolveInvocationPath(geminiOptions.editImage);
+        const outputPath = resolveInvocationPath(geminiOptions.outputPath);
+        const attachmentPaths = (runOptions.attachments ?? []).map((attachment) => attachment.path);
+        let prompt = runOptions.prompt;
+        if (geminiOptions.aspectRatio && (generateImagePath || editImagePath)) {
+            prompt = `${prompt} (aspect ratio: ${geminiOptions.aspectRatio})`;
+        }
+        if (geminiOptions.youtube) {
+            prompt = `${prompt}\n\nYouTube video: ${geminiOptions.youtube}`;
+        }
+        if (generateImagePath && !editImagePath) {
+            prompt = `Generate an image: ${prompt}`;
+        }
+        const model = resolveGeminiWebModel(runOptions.config?.desiredModel, log);
+        let response;
+        if (editImagePath) {
+            const intro = await runGeminiWebWithFallback({
+                prompt: 'Here is an image to edit',
+                files: [editImagePath],
+                model,
+                cookieMap,
+                chatMetadata: null,
+            });
+            const editPrompt = `Use image generation tool to ${prompt}`;
+            const out = await runGeminiWebWithFallback({
+                prompt: editPrompt,
+                files: attachmentPaths,
+                model,
+                cookieMap,
+                chatMetadata: intro.metadata,
+            });
+            response = {
+                text: out.text ?? null,
+                thoughts: geminiOptions.showThoughts ? out.thoughts : null,
+                has_images: false,
+                image_count: 0,
+            };
+            const resolvedOutputPath = outputPath ?? generateImagePath ?? 'generated.png';
+            const imageSave = await saveFirstGeminiImageFromOutput(out, cookieMap, resolvedOutputPath);
+            response.has_images = imageSave.saved;
+            response.image_count = imageSave.imageCount;
+            if (!imageSave.saved) {
+                throw new Error(`No images generated. Response text:\n${out.text || '(empty response)'}`);
+            }
+        }
+        else if (generateImagePath) {
+            const out = await runGeminiWebWithFallback({
+                prompt,
+                files: attachmentPaths,
+                model,
+                cookieMap,
+                chatMetadata: null,
+            });
+            response = {
+                text: out.text ?? null,
+                thoughts: geminiOptions.showThoughts ? out.thoughts : null,
+                has_images: false,
+                image_count: 0,
+            };
+            const imageSave = await saveFirstGeminiImageFromOutput(out, cookieMap, generateImagePath);
+            response.has_images = imageSave.saved;
+            response.image_count = imageSave.imageCount;
+            if (!imageSave.saved) {
+                throw new Error(`No images generated. Response text:\n${out.text || '(empty response)'}`);
+            }
+        }
+        else {
+            const out = await runGeminiWebWithFallback({
+                prompt,
+                files: attachmentPaths,
+                model,
+                cookieMap,
+                chatMetadata: null,
+            });
+            response = {
+                text: out.text ?? null,
+                thoughts: geminiOptions.showThoughts ? out.thoughts : null,
+                has_images: out.images.length > 0,
+                image_count: out.images.length,
+            };
+        }
+        const answerText = response.text ?? '';
+        let answerMarkdown = answerText;
+        if (geminiOptions.showThoughts && response.thoughts) {
+            answerMarkdown = `## Thinking\n\n${response.thoughts}\n\n## Response\n\n${answerText}`;
+        }
+        if (response.has_images && response.image_count > 0) {
+            const imagePath = generateImagePath || outputPath || 'generated.png';
+            answerMarkdown += `\n\n*Generated ${response.image_count} image(s). Saved to: ${imagePath}*`;
+        }
+        const tookMs = Date.now() - startTime;
+        log?.(`[gemini-web] Completed in ${tookMs}ms`);
+        return {
+            answerText,
+            answerMarkdown,
+            tookMs,
+            answerTokens: estimateTokenCount(answerText),
+            answerChars: answerText.length,
+        };
+    };
+}

package/dist/src/gemini-web/index.js

@@ -0,0 +1 @@
+export { createGeminiWebExecutor } from './executor.js';

package/dist/src/gemini-web/types.js

@@ -0,0 +1 @@
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@steipete/oracle",
-  "version": "0.6.1",
+  "version": "0.7.0",
   "description": "CLI wrapper around OpenAI Responses API with GPT-5.2 Pro (via gpt-5.1-pro alias), GPT-5.2, GPT-5.1, and GPT-5.1 Codex high reasoning modes.",
   "type": "module",
   "main": "dist/bin/oracle-cli.js",
@@ -86,7 +86,7 @@
   "scripts": {
     "docs:list": "tsx scripts/docs-list.ts",
     "build": "tsc -p tsconfig.build.json && pnpm run build:vendor",
-    "build:vendor": "node -e \"const fs=require('fs'); const path=require('path'); const src=path.join('vendor','oracle-notifier'); const dest=path.join('dist','vendor','oracle-notifier'); fs.mkdirSync(dest,{recursive:true}); if(fs.existsSync(src)){ fs.cpSync(src,dest,{recursive:true,force:true}); }\"",
+    "build:vendor": "node -e \"const fs=require('fs'); const path=require('path'); const vendorRoot=path.join('dist','vendor'); fs.rmSync(vendorRoot,{recursive:true,force:true}); const vendors=[['oracle-notifier']]; vendors.forEach(([name])=>{const src=path.join('vendor',name); const dest=path.join(vendorRoot,name); fs.mkdirSync(dest,{recursive:true}); if(fs.existsSync(src)){fs.cpSync(src,dest,{recursive:true,force:true});}});\"",
     "start": "pnpm run build && node ./dist/scripts/run-cli.js",
     "oracle": "pnpm start",
     "check": "pnpm run typecheck",

package/dist/vendor/oracle-notifier/oracle-notifier/OracleNotifier.app/Contents/Info.plist

@@ -1,20 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-  <key>CFBundleIdentifier</key>
-  <string>com.steipete.oracle.notifier</string>
-  <key>CFBundleName</key>
-  <string>OracleNotifier</string>
-  <key>CFBundleDisplayName</key>
-  <string>Oracle Notifier</string>
-  <key>CFBundleExecutable</key>
-  <string>OracleNotifier</string>
-  <key>CFBundleIconFile</key>
-  <string>OracleIcon</string>
-  <key>CFBundlePackageType</key>
-  <string>APPL</string>
-  <key>LSMinimumSystemVersion</key>
-  <string>13.0</string>
-</dict>
-</plist>

package/dist/vendor/oracle-notifier/oracle-notifier/OracleNotifier.app/Contents/_CodeSignature/CodeResources

@@ -1,128 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-	<key>files</key>
-	<dict>
-		<key>Resources/OracleIcon.icns</key>
-		<data>
-		edUHAMetayIv3xtc3Vb92VXRLfM=
-		</data>
-	</dict>
-	<key>files2</key>
-	<dict>
-		<key>Resources/OracleIcon.icns</key>
-		<dict>
-			<key>hash2</key>
-			<data>
-			AVPJK/6w6IOsDLmZTW4hL+Za+/4wHMxZiIp0t6m3NRA=
-			</data>
-		</dict>
-	</dict>
-	<key>rules</key>
-	<dict>
-		<key>^Resources/</key>
-		<true/>
-		<key>^Resources/.*\.lproj/</key>
-		<dict>
-			<key>optional</key>
-			<true/>
-			<key>weight</key>
-			<real>1000</real>
-		</dict>
-		<key>^Resources/.*\.lproj/locversion.plist$</key>
-		<dict>
-			<key>omit</key>
-			<true/>
-			<key>weight</key>
-			<real>1100</real>
-		</dict>
-		<key>^Resources/Base\.lproj/</key>
-		<dict>
-			<key>weight</key>
-			<real>1010</real>
-		</dict>
-		<key>^version.plist$</key>
-		<true/>
-	</dict>
-	<key>rules2</key>
-	<dict>
-		<key>.*\.dSYM($|/)</key>
-		<dict>
-			<key>weight</key>
-			<real>11</real>
-		</dict>
-		<key>^(.*/)?\.DS_Store$</key>
-		<dict>
-			<key>omit</key>
-			<true/>
-			<key>weight</key>
-			<real>2000</real>
-		</dict>
-		<key>^(Frameworks|SharedFrameworks|PlugIns|Plug-ins|XPCServices|Helpers|MacOS|Library/(Automator|Spotlight|LoginItems))/</key>
-		<dict>
-			<key>nested</key>
-			<true/>
-			<key>weight</key>
-			<real>10</real>
-		</dict>
-		<key>^.*</key>
-		<true/>
-		<key>^Info\.plist$</key>
-		<dict>
-			<key>omit</key>
-			<true/>
-			<key>weight</key>
-			<real>20</real>
-		</dict>
-		<key>^PkgInfo$</key>
-		<dict>
-			<key>omit</key>
-			<true/>
-			<key>weight</key>
-			<real>20</real>
-		</dict>
-		<key>^Resources/</key>
-		<dict>
-			<key>weight</key>
-			<real>20</real>
-		</dict>
-		<key>^Resources/.*\.lproj/</key>
-		<dict>
-			<key>optional</key>
-			<true/>
-			<key>weight</key>
-			<real>1000</real>
-		</dict>
-		<key>^Resources/.*\.lproj/locversion.plist$</key>
-		<dict>
-			<key>omit</key>
-			<true/>
-			<key>weight</key>
-			<real>1100</real>
-		</dict>
-		<key>^Resources/Base\.lproj/</key>
-		<dict>
-			<key>weight</key>
-			<real>1010</real>
-		</dict>
-		<key>^[^/]+$</key>
-		<dict>
-			<key>nested</key>
-			<true/>
-			<key>weight</key>
-			<real>10</real>
-		</dict>
-		<key>^embedded\.provisionprofile$</key>
-		<dict>
-			<key>weight</key>
-			<real>20</real>
-		</dict>
-		<key>^version\.plist$</key>
-		<dict>
-			<key>weight</key>
-			<real>20</real>
-		</dict>
-	</dict>
-</dict>
-</plist>

package/dist/vendor/oracle-notifier/oracle-notifier/OracleNotifier.swift

@@ -1,45 +0,0 @@
-import Foundation
-import UserNotifications
-
-let args = CommandLine.arguments
-// Usage: OracleNotifier <title> <message> [soundName]
-if args.count < 3 {
-  fputs("usage: OracleNotifier <title> <message> [soundName]\n", stderr)
-  exit(1)
-}
-let title = args[1]
-let message = args[2]
-let soundName = args.count >= 4 ? args[3] : "Glass"
-
-let center = UNUserNotificationCenter.current()
-let group = DispatchGroup()
-group.enter()
-center.requestAuthorization(options: [.alert, .sound, .badge]) { granted, error in
-  if let error = error {
-    fputs("auth error: \(error)\n", stderr)
-    group.leave()
-    return
-  }
-  if !granted {
-    fputs("authorization not granted\n", stderr)
-    group.leave()
-    return
-  }
-  let content = UNMutableNotificationContent()
-  content.title = title
-  content.body = message
-  if !soundName.isEmpty {
-    content.sound = UNNotificationSound(named: UNNotificationSoundName(rawValue: soundName))
-  } else {
-    content.sound = UNNotificationSound.default
-  }
-  let request = UNNotificationRequest(identifier: UUID().uuidString, content: content, trigger: nil)
-  center.add(request) { addError in
-    if let addError = addError {
-      fputs("add error: \(addError)\n", stderr)
-    }
-    group.leave()
-  }
-}
-_ = group.wait(timeout: .now() + 2)
-RunLoop.current.run(until: Date().addingTimeInterval(1))

package/dist/vendor/oracle-notifier/oracle-notifier/README.md

@@ -1,24 +0,0 @@
-# Oracle Notifier helper (macOS, arm64)
-
-Builds a tiny signed helper app for macOS notifications with the Oracle icon.
-
-## Build
-
-```bash
-cd vendor/oracle-notifier
-# Optional: notarize by setting App Store Connect key credentials
-export APP_STORE_CONNECT_API_KEY_P8="$(cat AuthKey_XXXXXX.p8)" # with literal newlines or \n escaped
-export APP_STORE_CONNECT_KEY_ID=XXXXXX
-export APP_STORE_CONNECT_ISSUER_ID=YYYYYYYY-YYYY-YYYY-YYYY-YYYYYYYYYYYY
-./build-notifier.sh
-```
-
-- Requires Xcode command line tools (swiftc) and a macOS Developer ID certificate. Without a valid cert, the build fails (no ad-hoc fallback).
-- If `APP_STORE_CONNECT_*` vars are set, the script notarizes and staples the ticket.
-- Output: `OracleNotifier.app` (arm64 only), bundled with `OracleIcon.icns`.
-
-## Usage
-The CLI prefers this helper on macOS; if it fails or is missing, it falls back to toasted-notifier/terminal-notifier.
-
-## Permissions
-After first run, allow notifications for “Oracle Notifier” in System Settings → Notifications.

package/dist/vendor/oracle-notifier/oracle-notifier/build-notifier.sh

@@ -1,93 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-cd "$(dirname "$0")"
-
-ICON_SRC=../../assets-oracle-icon.png
-APP=OracleNotifier.app
-CONTENTS="$APP/Contents"
-MACOS="$CONTENTS/MacOS"
-RESOURCES="$CONTENTS/Resources"
-ICONSET=OracleIcon.iconset
-ICNS=OracleIcon.icns
-IDENTITY="${CODESIGN_ID:-Developer ID Application: Peter Steinberger (Y5PE65HELJ)}"
-ZIP="/tmp/OracleNotifierNotarize.zip"
-
-NOTARY_KEY_P8="${APP_STORE_CONNECT_API_KEY_P8:-}"
-NOTARY_KEY_ID="${APP_STORE_CONNECT_KEY_ID:-}"
-NOTARY_ISSUER_ID="${APP_STORE_CONNECT_ISSUER_ID:-}"
-DITTO_BIN=${DITTO_BIN:-/usr/bin/ditto}
-
-cleanup() {
-  rm -f "$ZIP" /tmp/oracle-notifier-api-key.p8
-}
-trap cleanup EXIT
-
-rm -rf "$APP" "$ICONSET" "$ICNS"
-mkdir -p "$MACOS" "$RESOURCES"
-
-# Build ICNS from PNG
-mkdir "$ICONSET"
-for sz in 16 32 64 128 256 512; do
-  sips -z $sz $sz "$ICON_SRC" --out "$ICONSET/icon_${sz}x${sz}.png" >/dev/null
-  sips -z $((sz*2)) $((sz*2)) "$ICON_SRC" --out "$ICONSET/icon_${sz}x${sz}@2x.png" >/dev/null
-done
-iconutil -c icns --output "$ICNS" "$ICONSET"
-mv "$ICNS" "$RESOURCES/OracleIcon.icns"
-rm -rf "$ICONSET"
-
-# Write Info.plist
-cat > "$CONTENTS/Info.plist" <<'PLIST'
-<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-  <key>CFBundleIdentifier</key>
-  <string>com.steipete.oracle.notifier</string>
-  <key>CFBundleName</key>
-  <string>OracleNotifier</string>
-  <key>CFBundleDisplayName</key>
-  <string>Oracle Notifier</string>
-  <key>CFBundleExecutable</key>
-  <string>OracleNotifier</string>
-  <key>CFBundleIconFile</key>
-  <string>OracleIcon</string>
-  <key>CFBundlePackageType</key>
-  <string>APPL</string>
-  <key>LSMinimumSystemVersion</key>
-  <string>13.0</string>
-</dict>
-</plist>
-PLIST
-
-# Compile Swift helper (arm64)
-swiftc -target arm64-apple-macos13 -o "$MACOS/OracleNotifier" OracleNotifier.swift -framework Foundation -framework UserNotifications
-
-echo "Signing with $IDENTITY"
-if ! codesign --force --deep --options runtime --timestamp --sign "$IDENTITY" "$APP"; then
-  echo "codesign failed. Set CODESIGN_ID to a valid Developer ID Application certificate." >&2
-  exit 1
-fi
-
-# Notarize if credentials are provided
-if [[ -n "$NOTARY_KEY_P8" && -n "$NOTARY_KEY_ID" && -n "$NOTARY_ISSUER_ID" ]]; then
-  echo "$NOTARY_KEY_P8" | sed 's/\\n/\n/g' > /tmp/oracle-notifier-api-key.p8
-  echo "Packaging for notarization"
-  "$DITTO_BIN" -c -k --keepParent --sequesterRsrc "$APP" "$ZIP"
-
-  echo "Submitting for notarization"
-  xcrun notarytool submit "$ZIP" \
-    --key /tmp/oracle-notifier-api-key.p8 \
-    --key-id "$NOTARY_KEY_ID" \
-    --issuer "$NOTARY_ISSUER_ID" \
-    --wait
-
-  echo "Stapling ticket"
-  xcrun stapler staple "$APP"
-  xcrun stapler validate "$APP"
-else
-  echo "Skipping notarization (APP_STORE_CONNECT_* env vars not set)."
-fi
-
-spctl -a -t exec -vv "$APP" || true
-
-echo "Built $APP"