Codex/pro flash 0.1.6 update

.claude/settings.local.json

@@ -0,0 +1,9 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(pnpm run:*)",
+      "Bash(pnpm install:*)",
+      "Bash(npx tsc:*)"
+    ]
+  }
+}

.env.example

@@ -0,0 +1,3 @@
+# Gemini API Key (optional - for AI session analysis feature)
+# Get your API key from: https://makersuite.google.com/app/apikey
+VITE_GEMINI_API_KEY=

.github/workflows/build.yml

@@ -0,0 +1,166 @@
+name: Build Beta Installers
+
+permissions:
+  contents: write
+
+on:
+  push:
+    tags:
+      - 'v*'
+      - 'beta-v*'
+  pull_request:
+    branches:
+      - main
+      - master
+  workflow_dispatch:
+
+jobs:
+  build:
+    strategy:
+      fail-fast: false
+      matrix:
+        platform:
+          - os: windows-latest
+            rust_target: x86_64-pc-windows-msvc
+            artifact_label: Windows-x64
+          - os: macos-latest
+            rust_target: aarch64-apple-darwin
+            artifact_label: macOS-arm64
+          - os: macos-latest
+            rust_target: x86_64-apple-darwin
+            artifact_label: macOS-x64
+
+    runs-on: ${{ matrix.platform.os }}
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+
+      - name: Install pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 10
+
+      - name: Get pnpm store directory
+        shell: bash
+        run: |
+          echo "STORE_PATH=$(pnpm store path --silent)" >> $GITHUB_ENV
+
+      - name: Setup pnpm cache
+        uses: actions/cache@v4
+        with:
+          path: ${{ env.STORE_PATH }}
+          key: ${{ runner.os }}-pnpm-store-${{ hashFiles('**/pnpm-lock.yaml') }}
+          restore-keys: |
+            ${{ runner.os }}-pnpm-store-
+
+      - name: Install Rust stable
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: ${{ matrix.platform.rust_target }}
+
+      - name: Install frontend dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Validate build workflow contract
+        run: node tools/check-build-workflow-contract.mjs
+
+      - name: Configure signing environment
+        shell: bash
+        env:
+          TAURI_SIGNING_PRIVATE_KEY_SECRET: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
+          TAURI_SIGNING_PRIVATE_KEY_PASSWORD_SECRET: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
+          APPLE_CERTIFICATE_SECRET: ${{ secrets.APPLE_CERTIFICATE }}
+          APPLE_CERTIFICATE_PASSWORD_SECRET: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
+          APPLE_SIGNING_IDENTITY_SECRET: ${{ secrets.APPLE_SIGNING_IDENTITY }}
+          APPLE_ID_SECRET: ${{ secrets.APPLE_ID }}
+          APPLE_PASSWORD_SECRET: ${{ secrets.APPLE_PASSWORD }}
+          APPLE_TEAM_ID_SECRET: ${{ secrets.APPLE_TEAM_ID }}
+        run: |
+          set -euo pipefail
+
+          write_env_if_set() {
+            local name="$1"
+            local value="$2"
+            local delimiter
+
+            if [[ -z "${value}" ]]; then
+              return
+            fi
+
+            delimiter="FRAMECULL_${name}_${RANDOM}${RANDOM}"
+            {
+              printf '%s<<%s\n' "${name}" "${delimiter}"
+              printf '%s\n' "${value}"
+              printf '%s\n' "${delimiter}"
+            } >> "${GITHUB_ENV}"
+          }
+
+          write_env_if_set TAURI_SIGNING_PRIVATE_KEY "${TAURI_SIGNING_PRIVATE_KEY_SECRET}"
+          write_env_if_set TAURI_SIGNING_PRIVATE_KEY_PASSWORD "${TAURI_SIGNING_PRIVATE_KEY_PASSWORD_SECRET}"
+
+          if [[ "${RUNNER_OS}" == "macOS" ]]; then
+            write_env_if_set APPLE_CERTIFICATE "${APPLE_CERTIFICATE_SECRET}"
+            write_env_if_set APPLE_CERTIFICATE_PASSWORD "${APPLE_CERTIFICATE_PASSWORD_SECRET}"
+            if [[ "${RUNNER_OS}" == "macOS" && -z "${APPLE_CERTIFICATE_SECRET}" ]]; then
+              printf 'APPLE_SIGNING_IDENTITY=-\n' >> "${GITHUB_ENV}"
+            else
+              write_env_if_set APPLE_SIGNING_IDENTITY "${APPLE_SIGNING_IDENTITY_SECRET}"
+            fi
+            write_env_if_set APPLE_ID "${APPLE_ID_SECRET}"
+            write_env_if_set APPLE_PASSWORD "${APPLE_PASSWORD_SECRET}"
+            write_env_if_set APPLE_TEAM_ID "${APPLE_TEAM_ID_SECRET}"
+          fi
+
+      - name: Build and check release frontend
+        run: pnpm run build:release
+
+      - name: Build Tauri app
+        uses: tauri-apps/tauri-action@v0
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          tagName: ${{ github.ref_name }}
+          releaseName: 'FrameCull AI Beta __VERSION__'
+          releaseBody: |
+            FrameCull AI external beta installers.
+
+            ## Installation
+            - **Windows**: Download and run the `.exe` installer first.
+            - **macOS**: Download the `.dmg`, drag FrameCull AI to Applications, then launch it.
+          releaseDraft: true
+          prerelease: true
+          tauriScript: pnpm run tauri
+          args: ${{ matrix.platform.rust_target && format('--target {0}', matrix.platform.rust_target) || '' }}
+
+  build-release:
+    if: startsWith(github.ref, 'refs/tags/v')
+    needs: build
+    runs-on: ubuntu-latest
+    steps:
+      - name: Publish Release
+        uses: actions/github-script@v7
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+          script: |
+            const { owner, repo } = context.repo;
+            const releases = await github.rest.repos.listReleases({
+              owner,
+              repo,
+            });
+
+            const draft = releases.data.find(r => r.draft && r.tag_name === context.ref.replace('refs/tags/', ''));
+            if (draft) {
+              await github.rest.repos.updateRelease({
+                owner,
+                repo,
+                release_id: draft.id,
+                draft: false,
+              });
+              console.log('Release published successfully');
+            }