@alivault/pico 0.14.0 → 0.16.1

package/.output/public/assets/{xml-eU7M3iZJ.js → xml-BrFkMwfd.js}

@@ -1 +1 @@
-import{n as e}from"./rolldown-runtime-S-ySWqyJ.js";import{t}from"./java-DVLnIrqC.js";var n=e({default:()=>i}),r=Object.freeze(JSON.parse(`{"displayName":"XML","name":"xml","patterns":[{"begin":"(<\\\\?)\\\\s*([-0-9A-Z_a-z]+)","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"entity.name.tag.xml"}},"end":"(\\\\?>)","name":"meta.tag.preprocessor.xml","patterns":[{"match":" ([-A-Za-z]+)","name":"entity.other.attribute-name.xml"},{"include":"#doublequotedString"},{"include":"#singlequotedString"}]},{"begin":"(<!)(DOCTYPE)\\\\s+([:A-Z_a-z][-.0-:A-Z_a-z]*)","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"keyword.other.doctype.xml"},"3":{"name":"variable.language.documentroot.xml"}},"end":"\\\\s*(>)","name":"meta.tag.sgml.doctype.xml","patterns":[{"include":"#internalSubset"}]},{"include":"#comments"},{"begin":"(<)((?:([-0-9A-Z_a-z]+)(:))?([-0-:A-Z_a-z]+))(?=(\\\\s[^>]*)?></\\\\2>)","beginCaptures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"entity.name.tag.xml"},"3":{"name":"entity.name.tag.namespace.xml"},"4":{"name":"punctuation.separator.namespace.xml"},"5":{"name":"entity.name.tag.localname.xml"}},"end":"(>)(</)((?:([-0-9A-Z_a-z]+)(:))?([-0-:A-Z_a-z]+))(>)","endCaptures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"punctuation.definition.tag.xml"},"3":{"name":"entity.name.tag.xml"},"4":{"name":"entity.name.tag.namespace.xml"},"5":{"name":"punctuation.separator.namespace.xml"},"6":{"name":"entity.name.tag.localname.xml"},"7":{"name":"punctuation.definition.tag.xml"}},"name":"meta.tag.no-content.xml","patterns":[{"include":"#tagStuff"}]},{"begin":"(</?)(?:([-.\\\\w]+)((:)))?([-.:\\\\w]+)","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"entity.name.tag.namespace.xml"},"3":{"name":"entity.name.tag.xml"},"4":{"name":"punctuation.separator.namespace.xml"},"5":{"name":"entity.name.tag.localname.xml"}},"end":"(/?>)","name":"meta.tag.xml","patterns":[{"include":"#tagStuff"}]},{"include":"#entity"},{"include":"#bare-ampersand"},{"begin":"<%@","beginCaptures":{"0":{"name":"punctuation.section.embedded.begin.xml"}},"end":"%>","endCaptures":{"0":{"name":"punctuation.section.embedded.end.xml"}},"name":"source.java-props.embedded.xml","patterns":[{"match":"page|include|taglib","name":"keyword.other.page-props.xml"}]},{"begin":"<%[!=]?(?!--)","beginCaptures":{"0":{"name":"punctuation.section.embedded.begin.xml"}},"end":"(?!--)%>","endCaptures":{"0":{"name":"punctuation.section.embedded.end.xml"}},"name":"source.java.embedded.xml","patterns":[{"include":"source.java"}]},{"begin":"<!\\\\[CDATA\\\\[","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"]]>","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.unquoted.cdata.xml"}],"repository":{"EntityDecl":{"begin":"(<!)(ENTITY)\\\\s+(%\\\\s+)?([:A-Z_a-z][-.0-:A-Z_a-z]*)(\\\\s+(?:SYSTEM|PUBLIC)\\\\s+)?","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"keyword.other.entity.xml"},"3":{"name":"punctuation.definition.entity.xml"},"4":{"name":"variable.language.entity.xml"},"5":{"name":"keyword.other.entitytype.xml"}},"end":"(>)","patterns":[{"include":"#doublequotedString"},{"include":"#singlequotedString"}]},"bare-ampersand":{"match":"&","name":"invalid.illegal.bad-ampersand.xml"},"comments":{"patterns":[{"begin":"<%--","captures":{"0":{"name":"punctuation.definition.comment.xml"},"end":"--%>","name":"comment.block.xml"}},{"begin":"<!--","captures":{"0":{"name":"punctuation.definition.comment.xml"}},"end":"-->","name":"comment.block.xml","patterns":[{"begin":"--(?!>)","captures":{"0":{"name":"invalid.illegal.bad-comments-or-CDATA.xml"}}}]}]},"doublequotedString":{"begin":"\\"","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"\\"","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.quoted.double.xml","patterns":[{"include":"#entity"},{"include":"#bare-ampersand"}]},"entity":{"captures":{"1":{"name":"punctuation.definition.constant.xml"},"3":{"name":"punctuation.definition.constant.xml"}},"match":"(&)([:A-Z_a-z][-.0-:A-Z_a-z]*|#[0-9]+|#x\\\\h+)(;)","name":"constant.character.entity.xml"},"internalSubset":{"begin":"(\\\\[)","captures":{"1":{"name":"punctuation.definition.constant.xml"}},"end":"(])","name":"meta.internalsubset.xml","patterns":[{"include":"#EntityDecl"},{"include":"#parameterEntity"},{"include":"#comments"}]},"parameterEntity":{"captures":{"1":{"name":"punctuation.definition.constant.xml"},"3":{"name":"punctuation.definition.constant.xml"}},"match":"(%)([:A-Z_a-z][-.0-:A-Z_a-z]*)(;)","name":"constant.character.parameter-entity.xml"},"singlequotedString":{"begin":"'","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"'","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.quoted.single.xml","patterns":[{"include":"#entity"},{"include":"#bare-ampersand"}]},"tagStuff":{"patterns":[{"captures":{"1":{"name":"entity.other.attribute-name.namespace.xml"},"2":{"name":"entity.other.attribute-name.xml"},"3":{"name":"punctuation.separator.namespace.xml"},"4":{"name":"entity.other.attribute-name.localname.xml"}},"match":"(?:^|\\\\s+)(?:([-.\\\\w]+)((:)))?([-.:\\\\w]+)\\\\s*="},{"include":"#doublequotedString"},{"include":"#singlequotedString"}]}},"scopeName":"text.xml","embeddedLangs":["java"]}`)),i=[...t,r];export{n,i as t};
+import{n as e}from"./rolldown-runtime-S-ySWqyJ.js";import{t}from"./java-BYO3uQJZ.js";var n=e({default:()=>i}),r=Object.freeze(JSON.parse(`{"displayName":"XML","name":"xml","patterns":[{"begin":"(<\\\\?)\\\\s*([-0-9A-Z_a-z]+)","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"entity.name.tag.xml"}},"end":"(\\\\?>)","name":"meta.tag.preprocessor.xml","patterns":[{"match":" ([-A-Za-z]+)","name":"entity.other.attribute-name.xml"},{"include":"#doublequotedString"},{"include":"#singlequotedString"}]},{"begin":"(<!)(DOCTYPE)\\\\s+([:A-Z_a-z][-.0-:A-Z_a-z]*)","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"keyword.other.doctype.xml"},"3":{"name":"variable.language.documentroot.xml"}},"end":"\\\\s*(>)","name":"meta.tag.sgml.doctype.xml","patterns":[{"include":"#internalSubset"}]},{"include":"#comments"},{"begin":"(<)((?:([-0-9A-Z_a-z]+)(:))?([-0-:A-Z_a-z]+))(?=(\\\\s[^>]*)?></\\\\2>)","beginCaptures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"entity.name.tag.xml"},"3":{"name":"entity.name.tag.namespace.xml"},"4":{"name":"punctuation.separator.namespace.xml"},"5":{"name":"entity.name.tag.localname.xml"}},"end":"(>)(</)((?:([-0-9A-Z_a-z]+)(:))?([-0-:A-Z_a-z]+))(>)","endCaptures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"punctuation.definition.tag.xml"},"3":{"name":"entity.name.tag.xml"},"4":{"name":"entity.name.tag.namespace.xml"},"5":{"name":"punctuation.separator.namespace.xml"},"6":{"name":"entity.name.tag.localname.xml"},"7":{"name":"punctuation.definition.tag.xml"}},"name":"meta.tag.no-content.xml","patterns":[{"include":"#tagStuff"}]},{"begin":"(</?)(?:([-.\\\\w]+)((:)))?([-.:\\\\w]+)","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"entity.name.tag.namespace.xml"},"3":{"name":"entity.name.tag.xml"},"4":{"name":"punctuation.separator.namespace.xml"},"5":{"name":"entity.name.tag.localname.xml"}},"end":"(/?>)","name":"meta.tag.xml","patterns":[{"include":"#tagStuff"}]},{"include":"#entity"},{"include":"#bare-ampersand"},{"begin":"<%@","beginCaptures":{"0":{"name":"punctuation.section.embedded.begin.xml"}},"end":"%>","endCaptures":{"0":{"name":"punctuation.section.embedded.end.xml"}},"name":"source.java-props.embedded.xml","patterns":[{"match":"page|include|taglib","name":"keyword.other.page-props.xml"}]},{"begin":"<%[!=]?(?!--)","beginCaptures":{"0":{"name":"punctuation.section.embedded.begin.xml"}},"end":"(?!--)%>","endCaptures":{"0":{"name":"punctuation.section.embedded.end.xml"}},"name":"source.java.embedded.xml","patterns":[{"include":"source.java"}]},{"begin":"<!\\\\[CDATA\\\\[","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"]]>","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.unquoted.cdata.xml"}],"repository":{"EntityDecl":{"begin":"(<!)(ENTITY)\\\\s+(%\\\\s+)?([:A-Z_a-z][-.0-:A-Z_a-z]*)(\\\\s+(?:SYSTEM|PUBLIC)\\\\s+)?","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"keyword.other.entity.xml"},"3":{"name":"punctuation.definition.entity.xml"},"4":{"name":"variable.language.entity.xml"},"5":{"name":"keyword.other.entitytype.xml"}},"end":"(>)","patterns":[{"include":"#doublequotedString"},{"include":"#singlequotedString"}]},"bare-ampersand":{"match":"&","name":"invalid.illegal.bad-ampersand.xml"},"comments":{"patterns":[{"begin":"<%--","captures":{"0":{"name":"punctuation.definition.comment.xml"},"end":"--%>","name":"comment.block.xml"}},{"begin":"<!--","captures":{"0":{"name":"punctuation.definition.comment.xml"}},"end":"-->","name":"comment.block.xml","patterns":[{"begin":"--(?!>)","captures":{"0":{"name":"invalid.illegal.bad-comments-or-CDATA.xml"}}}]}]},"doublequotedString":{"begin":"\\"","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"\\"","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.quoted.double.xml","patterns":[{"include":"#entity"},{"include":"#bare-ampersand"}]},"entity":{"captures":{"1":{"name":"punctuation.definition.constant.xml"},"3":{"name":"punctuation.definition.constant.xml"}},"match":"(&)([:A-Z_a-z][-.0-:A-Z_a-z]*|#[0-9]+|#x\\\\h+)(;)","name":"constant.character.entity.xml"},"internalSubset":{"begin":"(\\\\[)","captures":{"1":{"name":"punctuation.definition.constant.xml"}},"end":"(])","name":"meta.internalsubset.xml","patterns":[{"include":"#EntityDecl"},{"include":"#parameterEntity"},{"include":"#comments"}]},"parameterEntity":{"captures":{"1":{"name":"punctuation.definition.constant.xml"},"3":{"name":"punctuation.definition.constant.xml"}},"match":"(%)([:A-Z_a-z][-.0-:A-Z_a-z]*)(;)","name":"constant.character.parameter-entity.xml"},"singlequotedString":{"begin":"'","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"'","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.quoted.single.xml","patterns":[{"include":"#entity"},{"include":"#bare-ampersand"}]},"tagStuff":{"patterns":[{"captures":{"1":{"name":"entity.other.attribute-name.namespace.xml"},"2":{"name":"entity.other.attribute-name.xml"},"3":{"name":"punctuation.separator.namespace.xml"},"4":{"name":"entity.other.attribute-name.localname.xml"}},"match":"(?:^|\\\\s+)(?:([-.\\\\w]+)((:)))?([-.:\\\\w]+)\\\\s*="},{"include":"#doublequotedString"},{"include":"#singlequotedString"}]}},"scopeName":"text.xml","embeddedLangs":["java"]}`)),i=[...t,r];export{n,i as t};

package/.output/public/assets/{xsl-DSqe4nTO.js → xsl-OmCo2PyZ.js}

@@ -1 +1 @@
-import{t as e}from"./xml-eU7M3iZJ.js";var t=Object.freeze(JSON.parse(`{"displayName":"XSL","name":"xsl","patterns":[{"begin":"(<)(xsl)((:))(template)","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"entity.name.tag.namespace.xml"},"3":{"name":"entity.name.tag.xml"},"4":{"name":"punctuation.separator.namespace.xml"},"5":{"name":"entity.name.tag.localname.xml"}},"end":"(>)","name":"meta.tag.xml.template","patterns":[{"captures":{"1":{"name":"entity.other.attribute-name.namespace.xml"},"2":{"name":"entity.other.attribute-name.xml"},"3":{"name":"punctuation.separator.namespace.xml"},"4":{"name":"entity.other.attribute-name.localname.xml"}},"match":" (?:([-0-9A-Z_a-z]+)((:)))?([-A-Za-z]+)"},{"include":"#doublequotedString"},{"include":"#singlequotedString"}]},{"include":"text.xml"}],"repository":{"doublequotedString":{"begin":"\\"","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"\\"","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.quoted.double.xml"},"singlequotedString":{"begin":"'","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"'","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.quoted.single.xml"}},"scopeName":"text.xml.xsl","embeddedLangs":["xml"]}`)),n=[...e,t];export{n as default};
+import{t as e}from"./xml-BrFkMwfd.js";var t=Object.freeze(JSON.parse(`{"displayName":"XSL","name":"xsl","patterns":[{"begin":"(<)(xsl)((:))(template)","captures":{"1":{"name":"punctuation.definition.tag.xml"},"2":{"name":"entity.name.tag.namespace.xml"},"3":{"name":"entity.name.tag.xml"},"4":{"name":"punctuation.separator.namespace.xml"},"5":{"name":"entity.name.tag.localname.xml"}},"end":"(>)","name":"meta.tag.xml.template","patterns":[{"captures":{"1":{"name":"entity.other.attribute-name.namespace.xml"},"2":{"name":"entity.other.attribute-name.xml"},"3":{"name":"punctuation.separator.namespace.xml"},"4":{"name":"entity.other.attribute-name.localname.xml"}},"match":" (?:([-0-9A-Z_a-z]+)((:)))?([-A-Za-z]+)"},{"include":"#doublequotedString"},{"include":"#singlequotedString"}]},{"include":"text.xml"}],"repository":{"doublequotedString":{"begin":"\\"","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"\\"","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.quoted.double.xml"},"singlequotedString":{"begin":"'","beginCaptures":{"0":{"name":"punctuation.definition.string.begin.xml"}},"end":"'","endCaptures":{"0":{"name":"punctuation.definition.string.end.xml"}},"name":"string.quoted.single.xml"}},"scopeName":"text.xml.xsl","embeddedLangs":["xml"]}`)),n=[...e,t];export{n as default};

package/.output/public/index.html

@@ -0,0 +1,19 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>Pico</title>
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="alternate icon" type="image/png" href="/favicon.png" />
+    <link rel="apple-touch-icon" href="/apple-touch-icon.png" />
+    <link rel="manifest" href="/manifest.json" />
+    <script type="module" crossorigin src="/assets/index-FOqZaR4L.js"></script>
+    <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-S-ySWqyJ.js">
+    <link rel="modulepreload" crossorigin href="/assets/preload-helper-Csz9R64u.js">
+    <link rel="stylesheet" crossorigin href="/assets/index-C-mxWGZ5.css">
+  </head>
+  <body class="h-svh overflow-hidden bg-background text-foreground antialiased">
+    <div id="app" class="h-full min-h-0 overflow-hidden"></div>
+  </body>
+</html>

package/README.md

@@ -1,6 +1,6 @@
 # Pico
 
-Pico is a local, keyboard-friendly workspace for Pi coding-agent sessions, available in the browser and as a native SwiftUI app for macOS and iOS.
+Pico is a local, keyboard-friendly workspace for Pi coding-agent sessions, available in the browser, as a native GPUI desktop app, and as a SwiftUI app for iPhone and iPad.
 
 It gives you a persistent session browser, a live conversation shell, git tools, and project-aware prompt helpers in one app.
 
@@ -14,13 +14,16 @@ It gives you a persistent session browser, a live conversation shell, git tools,
 | ----------------------------------------------------------------------- | ---------------------------------------------------------------------------- |
 | ![Pico mobile browser in dark mode](public/screenshots/pico-mobile.png) | ![Pico mobile browser in light mode](public/screenshots/pico-mobile-alt.png) |
 
-## Native Apple clients
+## Native clients
 
-Pico also includes a shared SwiftUI client with platform-native layouts for macOS and iOS. Both clients connect to the same local Pico server, stream live session updates, manage conversations, and provide native Git and project-file workflows.
+The native desktop client is written in Rust with GPUI and
+[GPUI Component](https://github.com/longbridge/gpui-component). It follows the
+web workspace's three-pane session, conversation, and files layout while using
+the same HTTP JSON and SSE server contracts. Its integrated terminal uses
+libghostty's terminal core with a native GPUI renderer.
 
-| macOS dark                                                                       | macOS light                                                                        |
-| -------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------- |
-| ![Pico native macOS client in dark mode](public/screenshots/pico-macos-dark.jpg) | ![Pico native macOS client in light mode](public/screenshots/pico-macos-light.jpg) |
+The SwiftUI client is now focused on iPhone and iPad instead of sharing its UI
+with macOS.
 
 | iOS dark                                                                     | iOS light                                                                      |
 | ---------------------------------------------------------------------------- | ------------------------------------------------------------------------------ |
@@ -41,15 +44,24 @@ Pico also includes a shared SwiftUI client with platform-native layouts for macO
 
 ## Built on Pi
 
-Pico runs Pi locally through the bundled `@earendil-works/pi-coding-agent` SDK dependency, pinned to `0.80.6` for reproducible installs. You do not need a separate global Pi install for normal use.
-
-If you intentionally want to test Pico against a different Pi SDK checkout or install, set:
-
-```bash
-PI_REMOTE_PI_SDK_DIR=/path/to/pi-coding-agent
-```
-
-To update the bundled Pi SDK dependency:
+The native Pico server runs the standalone Pi RPC executable and keeps Pi
+sessions alive independently of browser and desktop clients. Native release
+bundles include Pi `0.84.4` and the compiled Pi authentication bridge, so normal
+use does not require a global Pi installation or a Node server runtime.
+
+Pico also bundles pinned versions of
+[`pi-codex-conversion`](https://github.com/IgorWarzocha/howaboua-pi-stuff/tree/main/packages/pi-codex-conversion)
+and
+[`pi-codex-web-run`](https://github.com/IgorWarzocha/howaboua-pi-stuff/tree/main/packages/pi-codex-web-run).
+The Codex tool adapter applies to Codex-like GPT models, and Pico exposes the
+`web_run` search and browsing tool only while an `openai-codex` model is active.
+Set `PICO_DISABLE_DEFAULT_PI_EXTENSIONS=1` to opt out, or
+`PICO_PI_EXTENSIONS=/path/to/extension` to replace Pico's default extension
+bundle. Pi extensions execute with the same system access as Pi itself.
+
+The repository still pins `@earendil-works/pi-coding-agent` to the same version
+for building Pi release artifacts and the authentication bridge. Refresh it
+with:
 
 ```bash
 pnpm update:pi
@@ -70,6 +82,11 @@ npm install -g @alivault/pico
 pico-app
 ```
 
+On first launch, the npm command downloads the matching release bundle for
+macOS or Linux, verifies its SHA-256 checksum, and starts the native Rust
+server. If a compatible persistent server is already running, `pico-app`
+attaches to it instead of starting a duplicate.
+
 Pico starts locally and opens:
 
 ```text
@@ -88,6 +105,11 @@ Update a global install with:
 pico-app update
 ```
 
+Updates verify the server/API protocol first, stop accepting new prompt work,
+wait for active Pi runs and queued follow-ups to finish, replace the package,
+and restart the server so SSE clients reconnect. A protocol-changing release is
+never installed automatically.
+
 ## Developing from source
 
 Install dependencies:
@@ -96,7 +118,9 @@ Install dependencies:
 pnpm install
 ```
 
-Start Pico in development mode:
+Start Pico in development mode. This builds and launches the Rust backend on
+port 3142, launches Vite on port 3141, and proxies API, SSE, and terminal
+WebSocket traffic to Rust:
 
 ```bash
 pnpm dev
@@ -108,43 +132,120 @@ Then open:
 http://localhost:3141
 ```
 
-## Developing the native macOS and iOS app
+## Developing the native GPUI desktop app
+
+The GPUI client lives in `crates/pico-desktop`. Start a Pico server first, then
+run the desktop client from the repository root:
+
+```bash
+pnpm desktop
+```
 
-The native SwiftUI client lives in `apps/apple/Pico` and builds for both macOS and iOS. It connects to an already-running Pico server over HTTP JSON and SSE; it does not embed the Pi runtime. The native clients are currently built from source and are not distributed through the npm package.
+The desktop client uses the same server contracts as the web workspace and
+includes live session sync, global session search and management, persistent
+drafts, image prompts, skills, steer/follow-up queues, model and thinking
+controls, provider authentication, extension UI requests, project files,
+working-tree and commit diffs, Git mutations, session tree/fork tools, a
+server-owned terminal, completion notifications, settings, and keyboard
+commands. Press `⌘K` to open the command palette.
 
-Open the shared project in Xcode:
+It defaults to `http://127.0.0.1:3141` and the current working directory. You
+can override either value:
 
 ```bash
-open apps/apple/Pico/Pico.xcodeproj
+PICO_SERVER_URL=http://127.0.0.1:4142 \
+PICO_DIRECTORY=/path/to/project \
+pnpm desktop
 ```
 
-Select the `Pico` scheme and a macOS, iPhone, or iPad destination.
+For UI development, use the watch mode:
 
-Build and launch the macOS app:
+```bash
+pnpm desktop:dev
+```
+
+The watcher rebuilds and relaunches the GPUI process when files under
+`crates/pico-desktop` or the root `Cargo.toml` change. It is process-level hot
+reload rather than state-preserving in-process patching; the stable viewer
+context reconnects to the existing server session after each relaunch.
+
+The first desktop build downloads the pinned Zig compiler required by
+libghostty into the ignored `.pico-dev` directory. Pico verifies the download's
+SHA-256 checksum. Set `ZIG=/path/to/zig` to use an existing Zig 0.14.1 binary.
+
+Check the desktop crate without launching it:
 
 ```bash
-xcodebuild \
-  -project apps/apple/Pico/Pico.xcodeproj \
-  -scheme Pico \
-  -destination 'platform=macOS' \
-  -derivedDataPath /tmp/pico-macos-build \
-  build
+pnpm desktop:check
+```
+
+## Developing the native iOS app
+
+The iPhone and iPad SwiftUI client lives in `apps/apple/Pico` and connects to
+an already-running Pico server over HTTP JSON and SSE.
+
+```bash
+open apps/apple/Pico/Pico.xcodeproj
+```
+
+Select the `Pico` scheme and an iPhone or iPad destination.
+
+### Dogfooding Pico safely
+
+Keep the stable server on port `3141` as the known-good control environment.
+The GPUI client is client-only during development, so rebuilding or crashing it
+does not terminate server-owned Pi work.
 
-open /tmp/pico-macos-build/Build/Products/Debug/Pico.app
+For full-stack server work, launch an isolated target server on port `4142`:
+
+```bash
+pnpm dogfood:server
+pnpm dogfood:server:status
+pnpm dogfood:server:stop
 ```
 
-The macOS client defaults to `http://localhost:3141`. Keep Pico on a trusted local machine or network; the server does not currently provide remote pairing or token authentication.
+The target is managed as an on-demand `launchd` job. Restart builds the
+candidate first, lets the currently deployed development server drain active Pi
+work, atomically deploys the candidate, and then starts it. Its state, control
+socket, logs, and Pi sessions live under
+`~/Library/Application Support/Pico Development`. It uses Pi's existing
+`~/.pi/agent` configuration and `AuthStorage` while passing an independent
+session directory to Pi, preventing the stable and development servers from
+owning the same session process.
+
+Point the GPUI client at the isolated server with
+`PICO_SERVER_URL=http://127.0.0.1:4142 pnpm desktop:dev`.
 
-Run the shared native tests on macOS:
+To expose only the target server to a trusted private or VPN interface, set one
+exact address and restart it:
 
 ```bash
-xcodebuild \
-  -project apps/apple/Pico/Pico.xcodeproj \
-  -scheme Pico \
-  -destination 'platform=macOS' \
-  test
+pnpm dogfood:server:network -- 100.64.0.10
+pnpm dogfood:server:restart
 ```
 
+Never point the target at a wildcard listener or at the stable server's data or
+session directory. Validate a release candidate against the isolated server
+without disturbing the stable server that owns active work.
+
+### Connecting over a trusted private network
+
+Configure the Pico server with one specific private or VPN interface address,
+then enter that server URL in the iOS client or pass it through
+`PICO_SERVER_URL` to the desktop client.
+
+Pico continues listening on `127.0.0.1:3141` and adds the configured address on
+port `3141`. Browser clients can open `http://<address>:3141` or a resolvable
+hostname such as `http://macbook-pro:3141`. If the configured interface is
+unavailable, local Pico access remains available and the menu app reports that
+the remote listener could not start.
+
+This mode intentionally has no Pico-level authentication and accepts any valid
+HTTP hostname on its exact listeners. Use only an address protected by a private
+network you trust, such as a VPN interface, and treat every device and browser
+on that network as trusted. Never use `0.0.0.0` or expose port `3141` to the
+public internet.
+
 Run the iOS tests with an installed simulator:
 
 ```bash
@@ -155,12 +256,31 @@ xcodebuild \
   test
 ```
 
+### Packaging native CLI releases
+
+Build one downloadable CLI bundle with the Rust server, standalone Pi, compiled
+Pi bridge, and browser assets:
+
+```bash
+pnpm package:native -- --target darwin-arm64
+# darwin-x64, linux-arm64, and linux-x64 are also supported
+```
+
+Tagged releases publish all four checksum-protected bundles plus generated
+Homebrew formula metadata. The formula includes a headless `brew services`
+configuration. GPUI desktop application packaging is a separate release flow.
+Formula templates live under `packaging/homebrew`.
+
 ## Development commands
 
 ```bash
-pnpm dev        # start the dev server
-pnpm build      # build for production
-pnpm preview    # preview the production build
+pnpm dev          # start Rust plus the Vite browser client
+pnpm desktop      # build and launch the GPUI desktop client
+pnpm desktop:dev  # rebuild and relaunch GPUI after desktop source changes
+pnpm desktop:check # typecheck the GPUI desktop crate
+pnpm dogfood:server # safely rebuild/restart the isolated target server on 4142
+pnpm build      # build the static browser application
+pnpm preview    # preview the static browser build (Rust remains on 3142)
 pnpm check      # format/lint/typecheck
 pnpm check:fix  # format/lint/typecheck with fixes
 pnpm release patch # check, build, version, tag, and push a release
@@ -176,20 +296,25 @@ pnpm release minor
 pnpm release major
 ```
 
-The release script verifies a clean, up-to-date `main`, runs checks and build, bumps `package.json`, creates the matching `v*.*.*` tag, and pushes the branch plus tags. The GitHub release workflow publishes the npm package from the pushed tag.
+The release script verifies a clean, up-to-date `main`, runs checks and build,
+keeps the npm and Rust server versions aligned, creates the matching `v*.*.*`
+tag, and pushes the branch plus tags. The GitHub release workflow publishes the
+four native bundles, generated Homebrew metadata, and npm launcher from the
+pushed tag.
 
 ## Tech stack
 
 Pico is built with:
 
-- TanStack Start, Router, Query, Store, Hotkeys, and Pacer
-- Native SwiftUI for macOS and iOS
-- React 19
-- TypeScript
-- Vite+ and Nitro
+- Rust, Tokio, Axum, portable-pty, and Inkjet for the persistent server
+- Standalone Pi RPC and a compiled Pi SDK authentication bridge
+- TanStack Router, Query, Store, Hotkeys, and Pacer
+- GPUI and GPUI Component for the native desktop client
+- Native SwiftUI for iPhone and iPad
+- React 19 and TypeScript
+- Vite+ static SPA builds
 - Tailwind CSS v4
 - Base UI / shadcn-style components
-- Pi SDK
 
 ## License
 

package/bin/native-runtime.mjs

@@ -0,0 +1,265 @@
+import { spawnSync } from "node:child_process"
+import {
+  chmodSync,
+  existsSync,
+  mkdirSync,
+  mkdtempSync,
+  readFileSync,
+  renameSync,
+  rmSync,
+  writeFileSync,
+} from "node:fs"
+import { createHash } from "node:crypto"
+import { homedir, tmpdir } from "node:os"
+import { basename, dirname, join, resolve } from "node:path"
+
+const TARGETS = {
+  "darwin-arm64": {
+    rust: "aarch64-apple-darwin",
+    pi: "darwin-arm64",
+  },
+  "darwin-x64": {
+    rust: "x86_64-apple-darwin",
+    pi: "darwin-x64",
+  },
+  "linux-arm64": {
+    rust: "aarch64-unknown-linux-gnu",
+    pi: "linux-arm64",
+  },
+  "linux-x64": {
+    rust: "x86_64-unknown-linux-gnu",
+    pi: "linux-x64",
+  },
+}
+
+export function nativeTarget() {
+  const target = `${process.platform}-${process.arch}`
+  if (!TARGETS[target]) {
+    throw new Error(
+      `Pico does not provide a native server for ${process.platform}/${process.arch}.`
+    )
+  }
+  return target
+}
+
+export function nativeAssetName(version, target = nativeTarget()) {
+  return `pico-native-${version}-${target}.tar.gz`
+}
+
+function defaultCacheRoot() {
+  if (process.env.PICO_NATIVE_CACHE_DIR) {
+    return resolve(process.env.PICO_NATIVE_CACHE_DIR)
+  }
+  if (process.platform === "darwin") {
+    return join(homedir(), "Library", "Caches", "Pico", "native")
+  }
+  return join(
+    process.env.XDG_CACHE_HOME || join(homedir(), ".cache"),
+    "pico",
+    "native"
+  )
+}
+
+function executablePath(root, name) {
+  const path = join(root, name)
+  return existsSync(path) ? path : undefined
+}
+
+function bundleAt(root, packageRoot) {
+  const server = executablePath(root, "pico-server")
+  if (!server) return undefined
+  return {
+    root,
+    server,
+    pi: process.env.PICO_PI_BIN || executablePath(root, "pi") || "pi",
+    bridge:
+      process.env.PICO_PI_BRIDGE_BIN || executablePath(root, "pico-pi-bridge"),
+    web:
+      process.env.PICO_WEB_DIR ||
+      (existsSync(join(root, "web"))
+        ? join(root, "web")
+        : join(packageRoot, ".output", "public")),
+  }
+}
+
+function explicitBundle(packageRoot) {
+  const server = process.env.PICO_SERVER_BIN
+  if (!server) return undefined
+  const absoluteServer = resolve(server)
+  if (!existsSync(absoluteServer)) {
+    throw new Error(`PICO_SERVER_BIN does not exist: ${absoluteServer}`)
+  }
+  const root = dirname(absoluteServer)
+  return {
+    root,
+    server: absoluteServer,
+    pi: process.env.PICO_PI_BIN || executablePath(root, "pi") || "pi",
+    bridge:
+      process.env.PICO_PI_BRIDGE_BIN || executablePath(root, "pico-pi-bridge"),
+    web: process.env.PICO_WEB_DIR || join(packageRoot, ".output", "public"),
+  }
+}
+
+function developmentBundle(packageRoot, target) {
+  const targetInfo = TARGETS[target]
+  const serverCandidates = [
+    join(packageRoot, "target", targetInfo.rust, "release"),
+    join(packageRoot, "target", "release"),
+    join(packageRoot, "target", targetInfo.rust, "debug"),
+    join(packageRoot, "target", "debug"),
+  ]
+  const root = serverCandidates.find((candidate) =>
+    existsSync(join(candidate, "pico-server"))
+  )
+  if (!root) return undefined
+
+  const packageJson = JSON.parse(
+    readFileSync(join(packageRoot, "package.json"), "utf8")
+  )
+  const piVersion =
+    packageJson.dependencies?.["@earendil-works/pi-coding-agent"]
+  const piArtifact = piVersion
+    ? join(packageRoot, "artifacts", "pi", piVersion, targetInfo.pi, "pi", "pi")
+    : undefined
+  return {
+    root,
+    server: join(root, "pico-server"),
+    pi:
+      process.env.PICO_PI_BIN ||
+      (piArtifact && existsSync(piArtifact) ? piArtifact : "pi"),
+    bridge:
+      process.env.PICO_PI_BRIDGE_BIN ||
+      (existsSync(join(packageRoot, "target", "pico-pi-bridge"))
+        ? join(packageRoot, "target", "pico-pi-bridge")
+        : undefined),
+    web: process.env.PICO_WEB_DIR || join(packageRoot, ".output", "public"),
+  }
+}
+
+function releaseBaseUrl(version) {
+  return (
+    process.env.PICO_NATIVE_RELEASE_URL ||
+    `https://github.com/alivault/pico/releases/download/v${version}`
+  ).replace(/\/$/, "")
+}
+
+async function download(url) {
+  const response = await fetch(url, {
+    headers: { "user-agent": "pico-app-native-launcher" },
+    redirect: "follow",
+  })
+  if (!response.ok) {
+    throw new Error(`Failed to download ${url}: HTTP ${response.status}`)
+  }
+  return Buffer.from(await response.arrayBuffer())
+}
+
+async function installDownloadedBundle(packageRoot, version, target) {
+  const destination = join(defaultCacheRoot(), version, target)
+  const existing = bundleAt(destination, packageRoot)
+  if (existing) return existing
+
+  const asset = nativeAssetName(version, target)
+  const baseUrl = releaseBaseUrl(version)
+  const [archive, checksumFile] = await Promise.all([
+    download(`${baseUrl}/${asset}`),
+    download(`${baseUrl}/${asset}.sha256`),
+  ])
+  const expectedChecksum = checksumFile.toString("utf8").trim().split(/\s+/)[0]
+  if (!/^[a-f\d]{64}$/i.test(expectedChecksum)) {
+    throw new Error(`Release checksum is invalid for ${asset}`)
+  }
+  const actualChecksum = createHash("sha256").update(archive).digest("hex")
+  if (actualChecksum !== expectedChecksum.toLowerCase()) {
+    throw new Error(
+      `Checksum mismatch for ${asset}: expected ${expectedChecksum}, got ${actualChecksum}`
+    )
+  }
+
+  const temporaryRoot = mkdtempSync(join(tmpdir(), "pico-native-"))
+  const archivePath = join(temporaryRoot, asset)
+  const extracted = join(temporaryRoot, "bundle")
+  mkdirSync(extracted)
+  writeFileSync(archivePath, archive)
+  const result = spawnSync("tar", ["-xzf", archivePath, "-C", extracted], {
+    stdio: "inherit",
+  })
+  if (result.error || result.status !== 0) {
+    rmSync(temporaryRoot, { recursive: true, force: true })
+    throw result.error || new Error(`Could not extract ${asset}`)
+  }
+  for (const name of ["pico-server", "pi", "pico-pi-bridge"]) {
+    const path = join(extracted, name)
+    if (!existsSync(path)) {
+      rmSync(temporaryRoot, { recursive: true, force: true })
+      throw new Error(`${asset} is missing ${name}`)
+    }
+    chmodSync(path, 0o755)
+  }
+  if (!existsSync(join(extracted, "web"))) {
+    rmSync(temporaryRoot, { recursive: true, force: true })
+    throw new Error(`${asset} is missing browser assets`)
+  }
+
+  mkdirSync(dirname(destination), { recursive: true })
+  try {
+    renameSync(extracted, destination)
+  } catch (error) {
+    if (!bundleAt(destination, packageRoot)) {
+      rmSync(temporaryRoot, { recursive: true, force: true })
+      throw error
+    }
+  }
+  rmSync(temporaryRoot, { recursive: true, force: true })
+  return bundleAt(destination, packageRoot)
+}
+
+export async function resolveNativeBundle(packageRoot, version) {
+  const target = nativeTarget()
+  if (process.env.PICO_FORCE_NATIVE_DOWNLOAD !== "1") {
+    const explicit = explicitBundle(packageRoot)
+    if (explicit) return explicit
+
+    const packaged = bundleAt(join(packageRoot, "native", target), packageRoot)
+    if (packaged) return packaged
+
+    const development = developmentBundle(packageRoot, target)
+    if (development) return development
+  }
+
+  if (process.env.PICO_DISABLE_NATIVE_DOWNLOAD === "1") {
+    throw new Error(
+      `Pico native server ${target} is not installed and downloads are disabled.`
+    )
+  }
+  console.log(`Downloading Pico native server ${version} for ${target}...`)
+  return installDownloadedBundle(packageRoot, version, target)
+}
+
+export async function fetchLatestNativeManifest() {
+  const url =
+    process.env.PICO_NATIVE_MANIFEST_URL ||
+    "https://github.com/alivault/pico/releases/latest/download/pico-native-manifest.json"
+  const response = await fetch(url, {
+    headers: { "user-agent": "pico-app-native-launcher" },
+    redirect: "follow",
+  })
+  if (!response.ok) {
+    throw new Error(
+      `Could not check the latest native Pico release: HTTP ${response.status}`
+    )
+  }
+  const manifest = await response.json()
+  if (
+    typeof manifest?.version !== "string" ||
+    !Number.isInteger(manifest?.serverProtocolVersion) ||
+    !Number.isInteger(manifest?.apiContractVersion)
+  ) {
+    throw new Error("The native Pico release manifest is invalid.")
+  }
+  return manifest
+}
+
+export function nativeBundleSummary(bundle) {
+  return `${basename(bundle.server)} (${bundle.root})`
+}