pi-oracle 0.6.15 → 0.6.16

package/CHANGELOG.md

@@ -2,6 +2,18 @@
 
 ## Unreleased
 
+### Changed
+- made `/oracle-auth` success and failure output easier to scan, with compact source summaries and source-specific troubleshooting for configured Chromium cookie sources
+
+## 0.6.16 - 2026-05-07
+
+### Changed
+- migrated the local pi development baseline and peer metadata from deprecated `@mariozechner/*` packages to maintained `@earendil-works/*` `0.74.0`
+- regenerated the npm lockfile against the current stable dependency graph and refreshed the `basic-ftp` override to the current patched major
+
+### Compatibility
+- reviewed the pi `0.74.0` changelog and confirmed the oracle extension remains compatible with current extension lifecycle and package install/update guidance
+
 ## 0.6.15 - 2026-05-03
 
 ### Fixed

package/README.md

@@ -223,6 +223,17 @@ Project config should only override safe, non-privileged settings.
 - Re-run `/oracle-auth`.
 - If ChatGPT is half-logged-in or challenge flow state looks weird, finish the login/challenge in the headed auth browser and retry.
 
+### Custom Chromium auth says cookies synced but the session is rejected
+
+This usually means the cookie import worked but the source cookies are not the active ChatGPT session you expected.
+
+1. Open the configured browser profile.
+2. Confirm ChatGPT works there without logging in again.
+3. Quit the browser fully so its `Cookies` DB is stable.
+4. Confirm `auth.chromeCookiePath` points at that exact profile's `Cookies` DB.
+5. Confirm `auth.chromiumKeychain.services` names the browser's safe-storage Keychain service for that DB.
+6. Re-run `/oracle-auth`.
+
 ### You hit a challenge / verification page
 
 - Solve it in the auth/bootstrap browser if prompted.

package/docs/ORACLE_DESIGN.md

@@ -73,7 +73,7 @@ The extension now follows the current `pi` session lifecycle model:
 ### Commands
 
 - `/oracle-auth`
-  - syncs ChatGPT cookies from the user’s real Chrome into the isolated oracle profile and verifies them there
+  - syncs ChatGPT cookies from the configured local browser profile into the isolated oracle profile and verifies them there
 - `/oracle-read [job-id]`
   - shows job status plus the saved response preview
 - `/oracle-status [job-id]`

package/extensions/oracle/index.ts

@@ -5,7 +5,7 @@
 // Invariants/Assumptions: Oracle only runs against persisted sessions, and startup maintenance should be best-effort without breaking session initialization.
 import { fileURLToPath } from "node:url";
 import { dirname, join } from "node:path";
-import type { ExtensionAPI, ExtensionContext } from "@mariozechner/pi-coding-agent";
+import type { ExtensionAPI, ExtensionContext } from "@earendil-works/pi-coding-agent";
 import { loadOracleConfig } from "./lib/config.js";
 import { registerOracleCommands } from "./lib/commands.js";
 import { getSessionFile, pruneTerminalOracleJobs, reconcileStaleOracleJobs } from "./lib/jobs.js";

package/extensions/oracle/lib/commands.ts

@@ -5,7 +5,7 @@
 // Invariants/Assumptions: Commands operate on persisted project-scoped jobs and rely on shared observability formatting for detached-state clarity.
 import { existsSync } from "node:fs";
 import { readFile } from "node:fs/promises";
-import type { ExtensionAPI, ExtensionCommandContext } from "@mariozechner/pi-coding-agent";
+import type { ExtensionAPI, ExtensionCommandContext } from "@earendil-works/pi-coding-agent";
 import { formatOracleCancelOutcome, formatOracleJobSummary } from "../shared/job-observability-helpers.mjs";
 import { runOracleAuthBootstrap } from "./auth.js";
 import {
@@ -67,9 +67,9 @@ function readScopedJob(jobId: string, cwd: string) {
 
 export function registerOracleCommands(pi: ExtensionAPI, authWorkerPath: string, workerPath: string): void {
   pi.registerCommand("oracle-auth", {
-    description: "Sync ChatGPT cookies from real Chrome into the oracle auth seed profile",
+    description: "Sync ChatGPT cookies from the configured local browser profile into the oracle auth seed profile",
     handler: async (_args, ctx) => {
-      ctx.ui.notify("Syncing ChatGPT cookies from real Chrome into the oracle auth seed profile…", "info");
+      ctx.ui.notify("Syncing ChatGPT cookies from the configured local browser profile into the oracle auth seed profile…", "info");
       try {
         const result = await runOracleAuthBootstrap(authWorkerPath, ctx.cwd);
         ctx.ui.notify(result, "info");

package/extensions/oracle/lib/config.ts

@@ -6,7 +6,7 @@
 import { execFileSync } from "node:child_process";
 import { existsSync, readFileSync } from "node:fs";
 import { homedir } from "node:os";
-import { getAgentDir } from "@mariozechner/pi-coding-agent";
+import { getAgentDir } from "@earendil-works/pi-coding-agent";
 import { isAbsolute, join, normalize } from "node:path";
 import { getProjectId } from "./runtime.js";
 

package/extensions/oracle/lib/jobs.ts

@@ -7,7 +7,7 @@ import { createHash, randomUUID } from "node:crypto";
 import { existsSync, readdirSync, readFileSync, realpathSync } from "node:fs";
 import { chmod, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
 import { isAbsolute, join, relative as relativePath, resolve, sep } from "node:path";
-import type { ExtensionContext } from "@mariozechner/pi-coding-agent";
+import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
 import {
   ACTIVE_ORACLE_JOB_STATUSES,
   applyOracleJobCleanupWarnings,

package/extensions/oracle/lib/poller.ts

@@ -4,7 +4,7 @@
 // Usage: Imported by the oracle extension entrypoint to start or stop per-session oracle polling.
 // Invariants/Assumptions: Poller scans are serialized per session key, wake-up delivery is best-effort, and terminal-job notifications always re-read durable job state before send.
 import { existsSync } from "node:fs";
-import type { ExtensionAPI, ExtensionContext } from "@mariozechner/pi-coding-agent";
+import type { ExtensionAPI, ExtensionContext } from "@earendil-works/pi-coding-agent";
 import { buildOracleStatusText, buildOracleWakeupNotificationContent } from "../shared/job-observability-helpers.mjs";
 import { isProcessAlive, readProcessStartedAt } from "../shared/process-helpers.mjs";
 import { isLockTimeoutError, listLeaseMetadata, releaseLease, withGlobalReconcileLock, writeLeaseMetadata } from "./locks.js";

package/extensions/oracle/lib/tools.ts

@@ -8,7 +8,7 @@ import { lstat, mkdtemp, readdir, rename, rm, stat, writeFile } from "node:fs/pr
 import { tmpdir } from "node:os";
 import { basename, join, posix } from "node:path";
 import { runOracleAuthBootstrap } from "./auth.js";
-import type { ExtensionAPI, ExtensionContext } from "@mariozechner/pi-coding-agent";
+import type { ExtensionAPI, ExtensionContext } from "@earendil-works/pi-coding-agent";
 import { Type } from "typebox";
 import { formatOracleCancelOutcome, formatOracleJobSummary, formatOracleSubmitResponse } from "../shared/job-observability-helpers.mjs";
 import { getLatestOracleJobLifecycleEvent, getLatestOracleTerminalLifecycleEvent, transitionOracleJobPhase } from "../shared/job-lifecycle-helpers.mjs";

package/extensions/oracle/worker/auth-bootstrap.mjs

@@ -463,13 +463,97 @@ function cookieSource() {
   return config.auth.chromeCookiePath || config.auth.chromeProfile;
 }
 
+function usesConfiguredChromiumCookieSource() {
+  return Boolean(config.auth.chromeCookiePath && config.auth.chromiumKeychain);
+}
+
+function browserSourceName() {
+  if (config.browser.executablePath) return basename(config.browser.executablePath);
+  if (usesConfiguredChromiumCookieSource()) return "configured Chromium browser";
+  return "Google Chrome";
+}
+
+function keychainSummary() {
+  const keychain = config.auth.chromiumKeychain;
+  if (!keychain) return undefined;
+  const services = Array.isArray(keychain.services) && keychain.services.length > 0 ? keychain.services.join(", ") : "(none configured)";
+  const label = keychain.label || services;
+  return `${label} (account: ${keychain.account}, services: ${services})`;
+}
+
 function cookieSourceLabel() {
-  if (config.auth.chromeCookiePath && config.auth.chromiumKeychain) return `Chromium cookie DB ${config.auth.chromeCookiePath}`;
+  if (usesConfiguredChromiumCookieSource()) return `configured Chromium cookie DB ${config.auth.chromeCookiePath}`;
   return config.auth.chromeCookiePath
     ? `Chrome cookie DB ${config.auth.chromeCookiePath}`
     : `Chrome profile ${config.auth.chromeProfile}`;
 }
 
+function formatAuthSuccessMessage({ classificationMessage, appliedCount, targetDir }) {
+  const lines = [
+    "Oracle auth synced.",
+    "",
+    "Source:",
+    `- Browser: ${browserSourceName()}`,
+  ];
+
+  if (config.auth.chromeCookiePath) lines.push(`- Cookie DB: ${config.auth.chromeCookiePath}`);
+  else lines.push(`- Profile: ${config.auth.chromeProfile}`);
+
+  const keychain = keychainSummary();
+  if (keychain) lines.push(`- Keychain: ${keychain}`);
+  lines.push(`- Cookies synced: ${appliedCount}`);
+  lines.push("", "Auth seed profile:", targetDir, "", "Diagnostics:", DIAGNOSTICS_DIR, "", "Status:", classificationMessage);
+  return lines.join("\n");
+}
+
+function formatAuthFailureGuidance(error) {
+  const reason = error instanceof Error ? error.message : String(error);
+  const lines = ["Oracle auth failed.", "", `Reason: ${reason}`, "", "Likely causes:"];
+
+  if (usesConfiguredChromiumCookieSource()) {
+    lines.push(
+      "- the configured cookie DB is stale or from the wrong browser profile",
+      "- ChatGPT is logged out in that browser profile",
+      "- auth.chromiumKeychain does not match the browser safe-storage item for that cookie DB",
+      "- the target browser was still running while /oracle-auth read its Cookies DB",
+      "",
+      "Next:",
+      "1. Open the configured browser profile.",
+      "2. Confirm ChatGPT works there.",
+      "3. Quit the browser fully.",
+      "4. Confirm auth.chromeCookiePath points at that profile's Cookies DB.",
+      "5. Confirm auth.chromiumKeychain.services names the browser's safe-storage Keychain service.",
+      "6. Re-run /oracle-auth.",
+    );
+  } else {
+    lines.push(
+      "- ChatGPT is logged out in the configured local browser profile",
+      "- auth.chromeProfile or auth.chromeCookiePath points at the wrong profile",
+      "- the profile cookie store is stale or unreadable",
+      "",
+      "Next:",
+      "1. Open the configured local browser profile.",
+      "2. Confirm ChatGPT works there.",
+      "3. Quit the browser fully.",
+      "4. Re-run /oracle-auth.",
+    );
+  }
+
+  lines.push(
+    "",
+    "Details:",
+    `- Source: ${cookieSourceLabel()}`,
+    `- Browser: ${browserSourceName()}`,
+    `- Auth seed profile: ${config.browser.authSeedProfileDir}`,
+    `- Diagnostics: ${DIAGNOSTICS_DIR || "(oracle-auth diagnostics dir unavailable)"}`,
+    `- Log: ${LOG_PATH}`,
+    "",
+    authConfigSummary(),
+  );
+
+  return lines.join("\n");
+}
+
 async function readRawSourceCookies() {
   if (config.auth.chromeCookiePath && config.auth.chromiumKeychain) {
     return await getCookiesFromConfiguredChromiumSource({
@@ -825,9 +909,7 @@ async function run() {
       const generation = new Date().toISOString();
       await writeFile(join(profilePlan.targetDir, ".oracle-seed-generation"), `${generation}\n`, { encoding: "utf8", mode: 0o600 });
       committedProfile = true;
-      process.stdout.write(
-        `${classification.message} Synced ${appliedCount} cookies into ${profilePlan.targetDir}. Diagnostics: ${DIAGNOSTICS_DIR}`,
-      );
+      process.stdout.write(formatAuthSuccessMessage({ classificationMessage: classification.message, appliedCount, targetDir: profilePlan.targetDir }));
     } catch (error) {
       shouldPreserveBrowser = Boolean(error && typeof error === "object" && error.preserveBrowser === true);
       await log(`Auth bootstrap failed: ${error instanceof Error ? error.message : String(error)}`);
@@ -843,8 +925,6 @@ async function run() {
 }
 
 run().catch((error) => {
-  process.stderr.write(
-    `${error instanceof Error ? error.message : String(error)}\nSee ${LOG_PATH} and diagnostics in ${DIAGNOSTICS_DIR || "(oracle-auth diagnostics dir unavailable)"}\n${authConfigSummary()}\nIf needed, ensure the configured browser profile is already logged into ChatGPT and grant macOS Keychain access when prompted.`,
-  );
+  process.stderr.write(formatAuthFailureGuidance(error));
   process.exit(1);
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-oracle",
-  "version": "0.6.15",
+  "version": "0.6.16",
   "description": "ChatGPT web-oracle extension for pi with isolated browser auth, async jobs, and project-context archives.",
   "private": false,
   "license": "MIT",
@@ -42,7 +42,7 @@
     ]
   },
   "scripts": {
-    "check:oracle-extension": "node --check extensions/oracle/shared/process-helpers.mjs && node --check extensions/oracle/shared/state-coordination-helpers.mjs && node --check extensions/oracle/shared/job-coordination-helpers.mjs && node --check extensions/oracle/shared/job-lifecycle-helpers.mjs && node --check extensions/oracle/shared/job-observability-helpers.mjs && node --check extensions/oracle/worker/run-job.mjs && node --check extensions/oracle/worker/state-locks.mjs && node --check extensions/oracle/worker/artifact-heuristics.mjs && node --check extensions/oracle/worker/chatgpt-ui-helpers.mjs && node --check extensions/oracle/worker/chatgpt-flow-helpers.mjs && node --check extensions/oracle/worker/auth-flow-helpers.mjs && node --check extensions/oracle/worker/auth-cookie-policy.mjs && node --check extensions/oracle/worker/chromium-cookie-source.mjs && node --check extensions/oracle/worker/auth-bootstrap.mjs && esbuild extensions/oracle/index.ts --bundle --platform=node --format=esm --external:@mariozechner/pi-coding-agent --external:@mariozechner/pi-ai --external:typebox --outfile=/tmp/pi-oracle-extension-check.js",
+    "check:oracle-extension": "node --check extensions/oracle/shared/process-helpers.mjs && node --check extensions/oracle/shared/state-coordination-helpers.mjs && node --check extensions/oracle/shared/job-coordination-helpers.mjs && node --check extensions/oracle/shared/job-lifecycle-helpers.mjs && node --check extensions/oracle/shared/job-observability-helpers.mjs && node --check extensions/oracle/worker/run-job.mjs && node --check extensions/oracle/worker/state-locks.mjs && node --check extensions/oracle/worker/artifact-heuristics.mjs && node --check extensions/oracle/worker/chatgpt-ui-helpers.mjs && node --check extensions/oracle/worker/chatgpt-flow-helpers.mjs && node --check extensions/oracle/worker/auth-flow-helpers.mjs && node --check extensions/oracle/worker/auth-cookie-policy.mjs && node --check extensions/oracle/worker/chromium-cookie-source.mjs && node --check extensions/oracle/worker/auth-bootstrap.mjs && esbuild extensions/oracle/index.ts --bundle --platform=node --format=esm --external:@earendil-works/pi-coding-agent --external:@earendil-works/pi-ai --external:typebox --outfile=/tmp/pi-oracle-extension-check.js",
     "typecheck": "tsc --noEmit -p tsconfig.json",
     "typecheck:worker-helpers": "tsc --noEmit -p tsconfig.worker-helpers.json",
     "sanity:oracle": "node scripts/oracle-sanity-runner.mjs",
@@ -55,19 +55,19 @@
     "@steipete/sweet-cookie": "^0.2.0"
   },
   "peerDependencies": {
-    "typebox": "*",
-    "@mariozechner/pi-coding-agent": "*"
+    "@earendil-works/pi-coding-agent": "*",
+    "typebox": "*"
   },
   "overrides": {
-    "basic-ftp": "5.3.0",
+    "basic-ftp": "6.0.1",
     "protobufjs": "7.5.5"
   },
   "devDependencies": {
-    "@mariozechner/pi-coding-agent": "^0.72.0",
-    "@types/node": "^25.6.0",
+    "@earendil-works/pi-coding-agent": "^0.74.0",
+    "@types/node": "^25.6.1",
     "esbuild": "^0.28.0",
     "tsx": "^4.21.0",
-    "typebox": "^1.1.37",
+    "typebox": "^1.1.38",
     "typescript": "^6.0.3"
   },
   "engines": {
@@ -76,5 +76,5 @@
   "os": [
     "darwin"
   ],
-  "packageManager": "npm@10.9.8"
+  "packageManager": "npm@11.14.0"
 }