mitsupi 1.4.0 → 1.6.0

package/skills/google-workspace/scripts/workspace.js

@@ -9,6 +9,7 @@ const {
   formatScopes,
   getGoogleApis,
   loadToken,
+  normalizeEmail,
   resolveAuthMode,
 } = require('./common');
 
@@ -16,10 +17,10 @@ function printHelp() {
   console.log(`Google Workspace API helper (exec-only)
 
 Usage:
-  node scripts/workspace.js exec [--script 'return 1'] [--timeout 30000] [--scopes s1,s2]
+  node scripts/workspace.js exec --email user@example.com [--script 'return 1'] [--timeout 30000] [--scopes s1,s2]
 
 Example:
-  node scripts/workspace.js exec <<'JS'
+  node scripts/workspace.js exec --email user@example.com <<'JS'
   const me = await workspace.whoAmI();
   const files = await workspace.call('drive', 'files.list', {
     pageSize: 3,
@@ -46,6 +47,7 @@ function parseTimeout(raw) {
 function parseOptions(argv) {
   const positional = [];
   const options = {
+    email: undefined,
     scopes: undefined,
     timeout: undefined,
     script: undefined,
@@ -54,6 +56,16 @@ function parseOptions(argv) {
   for (let i = 0; i < argv.length; i += 1) {
     const arg = argv[i];
 
+    if (arg === '--email') {
+      const value = argv[i + 1];
+      if (!value) {
+        throw new Error('--email requires a value');
+      }
+      options.email = normalizeEmail(value);
+      i += 1;
+      continue;
+    }
+
     if (arg === '--scopes') {
       const value = argv[i + 1];
       if (!value) {
@@ -119,6 +131,7 @@ async function callApi({
   version,
   scopes,
   authClient,
+  email,
 }) {
   const google = getGoogleApis();
   const factory = google[service];
@@ -129,6 +142,7 @@ async function callApi({
   const auth =
     authClient ||
     (await authorize({
+      email,
       interactive: true,
       scopes: scopes && scopes.length > 0 ? scopes : undefined,
     }));
@@ -155,8 +169,9 @@ function getServiceClient({ google, auth, service, version }) {
   });
 }
 
-function createWorkspaceHelper({ auth, google }) {
+function createWorkspaceHelper({ auth, google, email }) {
   return {
+    accountEmail: email,
     versions: { ...DEFAULT_VERSIONS },
 
     async call(service, methodPath, params = {}, options = {}) {
@@ -166,6 +181,7 @@ function createWorkspaceHelper({ auth, google }) {
         params,
         version: options.version,
         authClient: auth,
+        email,
       });
     },
 
@@ -302,20 +318,51 @@ function readStdinText() {
   });
 }
 
-function errorPayload(error, logs, timeoutMs) {
+function createUnauthorizedHint(message, email) {
+  const msg = String(message || '').toLowerCase();
+  const looksUnauthorized =
+    msg.includes('401') ||
+    msg.includes('unauthorized') ||
+    msg.includes('invalid credentials') ||
+    msg.includes('insufficient permissions') ||
+    msg.includes('forbidden');
+
+  if (!looksUnauthorized) {
+    return null;
+  }
+
+  return [
+    `Auth/account hint: this request may not be authorized for ${email}.`,
+    'List known accounts with: node scripts/auth.js accounts',
+    `Sign in or refresh this account with: node scripts/auth.js login --email ${email}`,
+    'Then retry workspace.js exec with the intended --email.',
+  ].join(' ');
+}
+
+function errorPayload(error, logs, timeoutMs, email) {
+  const baseMessage = error?.message || String(error);
+  const hint = createUnauthorizedHint(baseMessage, email);
+
   return {
     ok: false,
     timeoutMs,
     logs,
     error: {
       name: error?.name || 'Error',
-      message: error?.message || String(error),
+      message: hint ? `${baseMessage}\n${hint}` : baseMessage,
       stack: error?.stack || null,
     },
   };
 }
 
 async function cmdExec(args, options) {
+  if (!options.email) {
+    throw new Error(
+      'Missing required --email <account@example.com>. ' +
+        'Use node scripts/auth.js accounts to list known accounts.',
+    );
+  }
+
   let script = options.script;
 
   if (!script && args.length > 0) {
@@ -330,7 +377,7 @@ async function cmdExec(args, options) {
 
   if (!script) {
     throw new Error(
-      'Usage: exec [--script "..."] (or pipe script via stdin / heredoc)',
+      'Usage: exec --email user@example.com [--script "..."] (or pipe script via stdin / heredoc)',
     );
   }
 
@@ -339,6 +386,7 @@ async function cmdExec(args, options) {
 
   try {
     const auth = await authorize({
+      email: options.email,
       interactive: true,
       scopes: options.scopes && options.scopes.length > 0
         ? options.scopes
@@ -346,7 +394,7 @@ async function cmdExec(args, options) {
     });
 
     const google = getGoogleApis();
-    const workspace = createWorkspaceHelper({ auth, google });
+    const workspace = createWorkspaceHelper({ auth, google, email: options.email });
 
     const context = vm.createContext({
       Buffer,
@@ -381,12 +429,13 @@ ${script}
     );
 
     const result = await withTimeout(resultPromise, timeoutMs);
-    const token = loadToken();
+    const token = loadToken(options.email);
 
     console.log(
       JSON.stringify(
         {
           ok: true,
+          email: options.email,
           authMode: resolveAuthMode(token),
           timeoutMs,
           logs,
@@ -397,7 +446,13 @@ ${script}
       ),
     );
   } catch (error) {
-    console.log(JSON.stringify(errorPayload(error, logs, timeoutMs), null, 2));
+    console.log(
+      JSON.stringify(
+        errorPayload(error, logs, timeoutMs, options.email),
+        null,
+        2,
+      ),
+    );
     process.exitCode = 1;
   }
 }

package/skills/native-web-search/SKILL.md

@@ -45,3 +45,5 @@ The script instructs the model to:
 
 - No extra npm install is required.
 - If module resolution fails, set `PI_AI_MODULE_PATH` to `@mariozechner/pi-ai`'s `dist/index.js` path.
+- If OAuth helper resolution fails, set `PI_AI_OAUTH_MODULE_PATH` to `@mariozechner/pi-ai`'s `dist/oauth.js` path.
+- For OAuth providers, the script can fall back to a still-valid cached `access` token from `~/.pi/agent/auth.json`.

package/skills/native-web-search/search.mjs

@@ -159,7 +159,7 @@ function findPiExecutable() {
 	return first || undefined;
 }
 
-function collectModuleCandidates() {
+function collectModuleCandidates(fileName = "index.js", envVarName = "PI_AI_MODULE_PATH") {
 	const candidates = new Set();
 
 	const add = (p) => {
@@ -168,16 +168,16 @@ function collectModuleCandidates() {
 		candidates.add(abs);
 	};
 
-	if (process.env.PI_AI_MODULE_PATH) add(process.env.PI_AI_MODULE_PATH);
+	if (envVarName && process.env[envVarName]) add(process.env[envVarName]);
 
 	const cwd = process.cwd();
 	const scriptDir = dirname(fileURLToPath(import.meta.url));
 	for (const start of [cwd, scriptDir]) {
 		let dir = start;
 		for (let i = 0; i < 8; i++) {
-			add(join(dir, "node_modules", "@mariozechner", "pi-ai", "dist", "index.js"));
-			add(join(dir, "packages", "ai", "dist", "index.js"));
-			add(join(dir, "ai", "dist", "index.js"));
+			add(join(dir, "node_modules", "@mariozechner", "pi-ai", "dist", fileName));
+			add(join(dir, "packages", "ai", "dist", fileName));
+			add(join(dir, "ai", "dist", fileName));
 			const parent = dirname(dir);
 			if (parent === dir) break;
 			dir = parent;
@@ -189,16 +189,16 @@ function collectModuleCandidates() {
 		try {
 			const piReal = realpathSync(piExec);
 			const piDir = dirname(piReal);
-			add(join(piDir, "..", "..", "ai", "dist", "index.js"));
-			add(join(piDir, "..", "..", "pi-ai", "dist", "index.js"));
-			add(join(piDir, "..", "node_modules", "@mariozechner", "pi-ai", "dist", "index.js"));
-			add(join(piDir, "..", "..", "node_modules", "@mariozechner", "pi-ai", "dist", "index.js"));
+			add(join(piDir, "..", "..", "ai", "dist", fileName));
+			add(join(piDir, "..", "..", "pi-ai", "dist", fileName));
+			add(join(piDir, "..", "node_modules", "@mariozechner", "pi-ai", "dist", fileName));
+			add(join(piDir, "..", "..", "node_modules", "@mariozechner", "pi-ai", "dist", fileName));
 		} catch {
 			// ignore
 		}
 	}
 
-	add(join(homedir(), "Development", "pi-mono", "packages", "ai", "dist", "index.js"));
+	add(join(homedir(), "Development", "pi-mono", "packages", "ai", "dist", fileName));
 
 	return Array.from(candidates);
 }
@@ -212,7 +212,7 @@ async function loadPiAi() {
 		tried.push(`@mariozechner/pi-ai (${err?.code || err?.message || "not found"})`);
 	}
 
-	for (const candidate of collectModuleCandidates()) {
+	for (const candidate of collectModuleCandidates("index.js", "PI_AI_MODULE_PATH")) {
 		if (!existsSync(candidate)) continue;
 		try {
 			return await import(pathToFileURL(candidate).href);
@@ -226,6 +226,81 @@ async function loadPiAi() {
 	);
 }
 
+async function loadPiAiOAuth(piAi) {
+	if (typeof piAi?.getOAuthApiKey === "function") {
+		return { getOAuthApiKey: piAi.getOAuthApiKey.bind(piAi) };
+	}
+
+	const tried = [];
+
+	try {
+		const oauth = await import("@mariozechner/pi-ai/oauth");
+		if (typeof oauth.getOAuthApiKey === "function") {
+			return { getOAuthApiKey: oauth.getOAuthApiKey.bind(oauth) };
+		}
+		tried.push("@mariozechner/pi-ai/oauth (missing getOAuthApiKey export)");
+	} catch (err) {
+		tried.push(`@mariozechner/pi-ai/oauth (${err?.code || err?.message || "not found"})`);
+	}
+
+	for (const candidate of collectModuleCandidates("oauth.js", "PI_AI_OAUTH_MODULE_PATH")) {
+		if (!existsSync(candidate)) continue;
+		try {
+			const oauth = await import(pathToFileURL(candidate).href);
+			if (typeof oauth.getOAuthApiKey === "function") {
+				return { getOAuthApiKey: oauth.getOAuthApiKey.bind(oauth) };
+			}
+			tried.push(`${candidate} (missing getOAuthApiKey export)`);
+		} catch (err) {
+			tried.push(`${candidate} (${err?.code || err?.message || "failed"})`);
+		}
+	}
+
+	return {
+		getOAuthApiKey: undefined,
+		error: `Could not load getOAuthApiKey. Set PI_AI_OAUTH_MODULE_PATH to pi-ai dist/oauth.js.\nTried:\n- ${tried.join("\n- ")}`,
+	};
+}
+
+function parseExpiryTimestamp(expires) {
+	if (typeof expires === "number" && Number.isFinite(expires)) {
+		if (expires <= 0) return undefined;
+		return expires < 1_000_000_000_000 ? expires * 1000 : expires;
+	}
+
+	if (typeof expires === "string") {
+		const trimmed = expires.trim();
+		if (!trimmed) return undefined;
+
+		const numeric = Number(trimmed);
+		if (Number.isFinite(numeric)) {
+			return parseExpiryTimestamp(numeric);
+		}
+
+		const parsed = Date.parse(trimmed);
+		if (Number.isFinite(parsed)) return parsed;
+	}
+
+	return undefined;
+}
+
+function getCachedOAuthAccess(entry, now = Date.now()) {
+	if (!entry || typeof entry !== "object") return undefined;
+
+	const apiKey = resolveConfigValue(entry.access);
+	if (!apiKey) return undefined;
+
+	const expiresAt = parseExpiryTimestamp(entry.expires);
+	if (!expiresAt) return undefined;
+
+	if (now + 30_000 >= expiresAt) return undefined;
+
+	return {
+		apiKey,
+		accountId: entry.accountId,
+	};
+}
+
 function pickFastModel(provider, requestedModel, piAi) {
 	const models = typeof piAi.getModels === "function" ? piAi.getModels(provider) : [];
 	if (!Array.isArray(models) || models.length === 0) {
@@ -272,8 +347,12 @@ async function resolveApiKey(provider, auth, authPath, piAi) {
 		throw new Error(`Unsupported credential type for ${provider}: ${String(entry.type || "unknown")}`);
 	}
 
-	if (typeof piAi.getOAuthApiKey !== "function") {
-		throw new Error("Loaded pi-ai module does not export getOAuthApiKey");
+	const fallbackToken = getCachedOAuthAccess(entry);
+	const oauth = await loadPiAiOAuth(piAi);
+
+	if (typeof oauth.getOAuthApiKey !== "function") {
+		if (fallbackToken) return fallbackToken;
+		throw new Error(oauth.error || "Loaded pi-ai module does not export getOAuthApiKey");
 	}
 
 	const oauthCreds = {};
@@ -283,8 +362,16 @@ async function resolveApiKey(provider, auth, authPath, piAi) {
 		}
 	}
 
-	const refreshed = await piAi.getOAuthApiKey(provider, oauthCreds);
-	if (!refreshed) {
+	let refreshed;
+	try {
+		refreshed = await oauth.getOAuthApiKey(provider, oauthCreds);
+	} catch (err) {
+		if (fallbackToken) return fallbackToken;
+		throw err;
+	}
+
+	if (!refreshed?.apiKey) {
+		if (fallbackToken) return fallbackToken;
 		throw new Error(`No OAuth credentials available for provider '${provider}'`);
 	}
 

package/skills/pi-share/SKILL.md

@@ -1,11 +1,11 @@
 ---
 name: pi-share
-description: "Load and parse session transcripts from shittycodingagent.ai/buildwithpi.ai/buildwithpi.com (pi-share) URLs. Fetches gists, decodes embedded session data, and extracts conversation history."
+description: "Load and parse session transcripts from shittycodingagent.ai/buildwithpi.ai/buildwithpi.com/pi.dev (pi-share) URLs. Fetches gists, decodes embedded session data, and extracts conversation history."
 ---
 
 # pi-share / buildwithpi Session Loader
 
-Load and parse session transcripts from pi-share URLs (shittycodingagent.ai, buildwithpi.ai, buildwithpi.com).
+Load and parse session transcripts from pi-share URLs (shittycodingagent.ai, buildwithpi.ai, buildwithpi.com, pi.dev).
 
 ## When to Use
 
@@ -13,7 +13,10 @@ Load and parse session transcripts from pi-share URLs (shittycodingagent.ai, bui
 - `https://shittycodingagent.ai/session/?<gist_id>`
 - `https://buildwithpi.ai/session/?<gist_id>`
 - `https://buildwithpi.com/session/?<gist_id>`
+- `https://pi.dev/session/?<gist_id>`
+- `https://pi.dev/session/#<gist_id>`
 - Or just a gist ID like `46aee35206aefe99257bc5d5e60c6121`
+- Or hash-prefixed shorthand like `#46aee35206aefe99257bc5d5e60c6121`
 
 **Human summaries:** Use `--human-summary` when the user asks you to:
 - Summarize what a human did in a pi/coding agent session

package/skills/pi-share/fetch-session.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 /**
- * Fetch and parse pi-share (shittycodingagent.ai/buildwithpi.ai/buildwithpi.com) session exports.
+ * Fetch and parse pi-share (shittycodingagent.ai/buildwithpi.ai/buildwithpi.com/pi.dev) session exports.
  * 
  * Usage:
  *   node fetch-session.mjs <url-or-gist-id> [--header] [--entries] [--system] [--tools] [--human-summary] [--no-cache]
@@ -51,21 +51,52 @@ function writeCache(gistId, data) {
 
 // Extract gist ID from URL or use directly
 function extractGistId(input) {
-  // Handle full URLs like https://shittycodingagent.ai/session/?<id>
-  const queryMatch = input.match(/[?&]([a-f0-9]{32})/i);
-  if (queryMatch) return queryMatch[1];
+  const HEX_ID_RE = /^[a-f0-9]{8,40}$/i;
+  const normalize = (value = '') => value.trim().replace(/^#/, '');
+
+  // Handle direct gist ID and #<gist-id>
+  const normalizedInput = normalize(input);
+  if (HEX_ID_RE.test(normalizedInput)) return normalizedInput;
+
+  // Parse URL forms (supports shittycodingagent.ai, buildwithpi.ai/.com, pi.dev aliases)
+  try {
+    const url = new URL(input);
+
+    // Handle old query style: /session/?<gist-id>
+    const bareQuery = normalize(url.search.replace(/^\?/, ''));
+    if (HEX_ID_RE.test(bareQuery)) return bareQuery;
+
+    // Handle keyed query params: ?id=<gist-id>, ?gist=<gist-id>, etc.
+    for (const value of url.searchParams.values()) {
+      const normalizedValue = normalize(value);
+      if (HEX_ID_RE.test(normalizedValue)) return normalizedValue;
+    }
+
+    // Handle hash style: /session/#<gist-id>
+    const hashValue = normalize(url.hash);
+    if (HEX_ID_RE.test(hashValue)) return hashValue;
+
+    // Handle path-based URLs like /session/<gist-id>
+    const segments = url.pathname.split('/').filter(Boolean);
+    for (let i = 0; i < segments.length; i++) {
+      if (segments[i] === 'session' && HEX_ID_RE.test(segments[i + 1] || '')) {
+        return segments[i + 1];
+      }
+    }
+
+    // Handle gist.github.com URLs
+    if (url.hostname === 'gist.github.com') {
+      const gistCandidate = segments[segments.length - 1];
+      if (HEX_ID_RE.test(gistCandidate || '')) return gistCandidate;
+    }
+  } catch {
+    // Not a URL; continue with regex fallback below
+  }
+
+  // Regex fallback for unknown URL formats containing a gist ID
+  const fallbackMatch = input.match(/([a-f0-9]{8,40})/i);
+  if (fallbackMatch) return fallbackMatch[1];
 
-  // Handle path-based URLs like https://buildwithpi.ai/session/<id>
-  const pathMatch = input.match(/\/session\/?([a-f0-9]{32})/i);
-  if (pathMatch) return pathMatch[1];
-  
-  // Handle direct gist ID
-  if (/^[a-f0-9]{32}$/i.test(input)) return input;
-  
-  // Handle gist.github.com URLs
-  const gistMatch = input.match(/gist\.github\.com\/[^/]+\/([a-f0-9]+)/i);
-  if (gistMatch) return gistMatch[1];
-  
   throw new Error(`Cannot extract gist ID from: ${input}`);
 }
 

package/skills/summarize/SKILL.md

@@ -6,6 +6,7 @@ description: "Fetch a URL or convert a local file (PDF/DOCX/HTML/etc.) into Mark
 Turn “things” (URLs, PDFs, Word docs, PowerPoints, HTML pages, text files, etc.) into **Markdown** so they can be inspected/quoted/processed like normal text.
 
 `markitdown` can fetch URLs by itself; this skill mainly wraps it to make saving + summarizing convenient.
+For PDF inputs, use the `markitdown[pdf]` extra (or the wrapper below, which now does this automatically).
 
 ## When to use
 
@@ -21,7 +22,7 @@ Use this skill when you need to:
 Run from **this skill folder** (the agent should `cd` here first):
 
 ```bash
-uvx markitdown <url-or-path>
+uvx --from 'markitdown[pdf]' markitdown <url-or-path>
 ```
 
 To write Markdown to a temp file (prints the path) use the wrapper:
@@ -35,7 +36,7 @@ Tip: when summarizing, the script will **always** write the full converted Markd
 Write Markdown to a specific file:
 
 ```bash
-uvx markitdown <url-or-path> > /tmp/doc.md
+uvx --from 'markitdown[pdf]' markitdown <url-or-path> > /tmp/doc.md
 ```
 
 ### Convert + summarize with haiku-4-5 (pass context!)
@@ -53,6 +54,6 @@ node to-markdown.mjs <url-or-path> --summary --prompt "Focus on security implica
 ```
 
 This will:
-1) convert to Markdown via `uvx markitdown`
+1) convert to Markdown via `uvx --from 'markitdown[pdf]' markitdown`
 2) write the full Markdown to a temp `.md` file and print its path as a "Hint" line
 3) run `pi --model claude-haiku-4-5` (no-tools, no-session) to summarize using your extra prompt

package/skills/summarize/to-markdown.mjs

@@ -132,7 +132,9 @@ for (let i = 0; i < argv.length; i++) {
 if (!input) usageAndExit(1);
 
 function runMarkitdown(arg) {
-  const result = spawnSync('uvx', ['markitdown', arg], {
+  // Include PDF support by default because many document URLs (for example arXiv PDFs)
+  // are detected as PDFs only after fetching, so extension-based switching is unreliable.
+  const result = spawnSync('uvx', ['--from', 'markitdown[pdf]', 'markitdown', arg], {
     encoding: 'utf-8',
     maxBuffer: 50 * 1024 * 1024
   });

package/skills/web-browser/SKILL.md

@@ -17,6 +17,12 @@ Minimal CDP tools for collaborative site exploration.
 
 Start Chrome on `:9222` with remote debugging.
 
+If Chrome is installed in a non-standard location, set:
+
+```bash
+BROWSER_BIN=/path/to/chrome ./scripts/start.js
+```
+
 ## Navigate
 
 ```bash

package/skills/web-browser/scripts/start.js

@@ -1,30 +1,40 @@
 #!/usr/bin/env node
 
 import { spawn, execSync } from "node:child_process";
+import { existsSync, rmSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 
-const useProfile = process.argv[2] === "--profile";
+const args = new Set(process.argv.slice(2));
+const useProfile = args.has("--profile");
 
-if (process.argv[2] && process.argv[2] !== "--profile") {
-  console.log("Usage: start.ts [--profile]");
+const unknownArgs = [...args].filter((arg) => arg !== "--profile");
+if (unknownArgs.length > 0) {
+  console.log("Usage: start.js [--profile]");
   console.log("\nOptions:");
   console.log(
     "  --profile  Copy your default Chrome profile (cookies, logins)",
   );
   console.log("\nExamples:");
-  console.log("  start.ts            # Start with fresh profile");
-  console.log("  start.ts --profile  # Start with your Chrome profile");
+  console.log("  start.js            # Start with fresh profile");
+  console.log("  start.js --profile  # Start with your Chrome profile");
   process.exit(1);
 }
 
-// Kill existing Chrome
-try {
-  execSync("killall 'Google Chrome'", { stdio: "ignore" });
-} catch {}
+async function isDebugEndpointUp() {
+  try {
+    const response = await fetch("http://localhost:9222/json/version");
+    return response.ok;
+  } catch {
+    return false;
+  }
+}
 
-// Wait a bit for processes to fully die
-await new Promise((r) => setTimeout(r, 1000));
+// If something is already listening on :9222, reuse it instead of killing Chrome.
+if (await isDebugEndpointUp()) {
+  console.log("✓ Chrome already running on :9222 (reusing existing instance)");
+  process.exit(0);
+}
 
 // Setup profile directory
 execSync("mkdir -p ~/.cache/scraping", { stdio: "ignore" });
@@ -32,24 +42,60 @@ execSync("mkdir -p ~/.cache/scraping", { stdio: "ignore" });
 if (useProfile) {
   // Sync profile with rsync (much faster on subsequent runs)
   execSync(
-    `rsync -a --delete "${process.env["HOME"]}/Library/Application Support/Google/Chrome/" ~/.cache/scraping/`,
+    `rsync -a --delete --exclude 'Singleton*' --exclude 'DevToolsActivePort*' "${process.env["HOME"]}/Library/Application Support/Google/Chrome/" ~/.cache/scraping/`,
     { stdio: "pipe" },
   );
 }
 
-// Start Chrome in background (detached so Node can exit)
-spawn(
-  "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome",
-  [
-    "--remote-debugging-port=9222",
-    `--user-data-dir=${process.env["HOME"]}/.cache/scraping`,
-    "--profile-directory=Default",
-    "--disable-search-engine-choice-screen",
-    "--no-first-run",
-    "--disable-features=ProfilePicker",
-  ],
-  { detached: true, stdio: "ignore" },
-).unref();
+// Remove stale singleton/debug artifacts that can make Chrome forward to an
+// already running browser instance (which drops our debug flags).
+for (const staleFile of [
+  "SingletonCookie",
+  "SingletonLock",
+  "SingletonSocket",
+  "DevToolsActivePort",
+  "DevToolsActivePort.lock",
+]) {
+  try {
+    rmSync(`${process.env["HOME"]}/.cache/scraping/${staleFile}`, { force: true });
+  } catch {
+    // ignore
+  }
+}
+
+function resolveChromeBinary() {
+  if (process.env.BROWSER_BIN && existsSync(process.env.BROWSER_BIN)) {
+    return process.env.BROWSER_BIN;
+  }
+
+  const candidates = [
+    "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome",
+    "/Applications/Chromium.app/Contents/MacOS/Chromium",
+    "/Applications/Google Chrome Canary.app/Contents/MacOS/Google Chrome Canary",
+  ];
+
+  return candidates.find((path) => existsSync(path)) || null;
+}
+
+const chromeBinary = resolveChromeBinary();
+
+if (!chromeBinary) {
+  console.error("✗ Could not find Chrome/Chromium binary");
+  console.error("  Set BROWSER_BIN=/path/to/chrome and retry");
+  process.exit(1);
+}
+
+const chromeArgs = [
+  "--remote-debugging-port=9222",
+  `--user-data-dir=${process.env["HOME"]}/.cache/scraping`,
+  "--profile-directory=Default",
+  "--disable-search-engine-choice-screen",
+  "--no-first-run",
+  "--disable-features=ProfilePicker",
+];
+
+const chromeProc = spawn(chromeBinary, chromeArgs, { detached: true, stdio: "ignore" });
+chromeProc.unref();
 
 // Wait for Chrome to be ready by checking the debugging endpoint
 let connected = false;
@@ -61,12 +107,14 @@ for (let i = 0; i < 30; i++) {
       break;
     }
   } catch {
-    await new Promise((r) => setTimeout(r, 500));
+    // ignore; wait below
   }
+  await new Promise((r) => setTimeout(r, 500));
 }
 
 if (!connected) {
-  console.error("✗ Failed to connect to Chrome");
+  console.error("✗ Failed to connect to Chrome on :9222");
+  console.error(`  Attempted binary: ${chromeBinary}`);
   process.exit(1);
 }