@astrale-os/cli 1.0.0-beta.19 → 1.0.0-beta.20

package/dist/astrale.js

@@ -2578,7 +2578,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@astrale-os/cli",
-    version: "1.0.0-beta.19",
+    version: "1.0.0-beta.20",
     description: "Astrale CLI — connect to existing Astrale kernels",
     keywords: [
       "astrale",
@@ -2654,8 +2654,8 @@ var init_package = __esm(() => {
     },
     devDependencies: {
       "@astrale-os/ox": ">=0.1.3 <1.0.0",
-      "@astrale-os/sdk": "0.5.0-beta.49",
-      "@astrale-os/shell": "0.4.2-beta.3",
+      "@astrale-os/sdk": "0.5.0-beta.50",
+      "@astrale-os/shell": "0.4.2-beta.5",
       "@astrale/commitlint-config": "jsr:~2.0.1",
       "@commitlint/cli": "21.2.2",
       "@commitlint/config-conventional": "21.2.2",
@@ -33806,7 +33806,7 @@ var init_paths = __esm(() => {
   init_url();
 });
 
-// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.49_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/auth/exchange/configuration.js
+// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.50_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/auth/exchange/configuration.js
 var init_configuration3 = __esm(() => {
   init_configuration2();
   init_paths();
@@ -34023,12 +34023,12 @@ var init_exchange = __esm(() => {
   init_errors5();
 });
 
-// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.49_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/auth/exchange/response.js
+// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.50_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/auth/exchange/response.js
 var init_response = __esm(() => {
   init_exchange();
 });
 
-// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.49_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/auth/exchange/index.js
+// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.50_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/auth/exchange/index.js
 var exports_exchange = {};
 __export(exports_exchange, {
   MEDIA_TYPE: () => MEDIA_TYPE,
@@ -34042,7 +34042,7 @@ var init_exchange2 = __esm(() => {
   init_response();
 });
 
-// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.49_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/auth/index.js
+// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.50_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/auth/index.js
 var init_auth4 = __esm(() => {
   init_auth3();
   init_exchange2();
@@ -37691,7 +37691,7 @@ var init_dns_label = __esm(() => {
   dnsLabelSchema = exports_external.string().min(1).max(63).regex(DNS_LABEL_RE, "must be a lowercase DNS label [a-z0-9-], ≤63 chars, no leading/trailing hyphen");
 });
 
-// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.49_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/value/index.js
+// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.50_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/value/index.js
 var init_value3 = __esm(() => {
   init_dns_label();
   init_value();
@@ -47274,18 +47274,18 @@ var init_graph4 = __esm(() => {
   init_query();
 });
 
-// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.49_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/client/index.js
+// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.50_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/client/index.js
 var init_client3 = __esm(() => {
   init_graph4();
   init_dist2();
 });
 
-// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.49_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/graph/node/index.js
+// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.50_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/graph/node/index.js
 var init_node2 = __esm(() => {
   init_node();
 });
 
-// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.49_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/graph/path/index.js
+// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.50_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/graph/path/index.js
 var init_path3 = __esm(() => {
   init_path2();
 });
@@ -47761,10 +47761,36 @@ async function realpathIfExists(path2) {
     throw error52;
   }
 }
-async function writeInstallMetadata(meta3, path2 = INSTALL_PATH) {
-  await mkdir6(dirname6(path2), { recursive: true });
-  await writeFile2(path2, JSON.stringify(meta3, null, 2) + `
+async function writeInstallMetadata(meta3, path2 = INSTALL_PATH, filesystem = { mkdir: mkdir6, rename: rename2, rm, writeFile: writeFile2 }) {
+  const staged = `${path2}.next`;
+  const previous = `${path2}.previous`;
+  await filesystem.mkdir(dirname6(path2), { recursive: true });
+  await filesystem.rm(staged, { force: true });
+  await filesystem.rm(previous, { force: true });
+  await filesystem.writeFile(staged, JSON.stringify(meta3, null, 2) + `
 `);
+  let backedUp = false;
+  try {
+    try {
+      await filesystem.rename(path2, previous);
+      backedUp = true;
+    } catch (error52) {
+      if (!isMissingFile(error52))
+        throw error52;
+    }
+    await filesystem.rename(staged, path2);
+    await filesystem.rm(previous, { force: true });
+  } catch (error52) {
+    const rollback = [];
+    if (backedUp) {
+      await filesystem.rename(previous, path2).catch((failure) => rollback.push(failure));
+    }
+    await filesystem.rm(staged, { force: true }).catch((failure) => rollback.push(failure));
+    if (rollback.length > 0) {
+      throw new AggregateError([error52, ...rollback], "Install metadata update and rollback both failed.");
+    }
+    throw error52;
+  }
 }
 function releaseBase(meta3, req) {
   if (process.env.ASTRALE_UPDATE_BASE)
@@ -47783,7 +47809,101 @@ async function fetchManifest(base2) {
 function shouldUpdate(currentVersion, manifestVersion) {
   return currentVersion !== manifestVersion;
 }
-async function updateAstrale(req) {
+async function replaceStandaloneCohort(installedBinary, nextBinary, nextViewerDist, filesystem = {}) {
+  const fs = { ...defaultCohortFilesystem, ...filesystem };
+  const binDirectory = dirname6(installedBinary);
+  const previousBinary = `${installedBinary}.previous`;
+  const stagedBinary = `${installedBinary}.next`;
+  const viewer = join4(binDirectory, "viewer");
+  const previousViewer = join4(binDirectory, "viewer.previous");
+  const stagedViewer = join4(binDirectory, "viewer.next");
+  const stagedViewerDist = join4(stagedViewer, "dist");
+  try {
+    await fs.rm(stagedViewer, { recursive: true, force: true });
+    await fs.mkdir(stagedViewerDist, { recursive: true });
+    await fs.copyFile(join4(nextViewerDist, "main.js"), join4(stagedViewerDist, "main.js"));
+    await fs.copyFile(join4(nextViewerDist, "index.html"), join4(stagedViewerDist, "index.html"));
+    await fs.copyFile(installedBinary, previousBinary);
+    await fs.copyFile(nextBinary, stagedBinary);
+    await fs.chmod(stagedBinary, 493);
+  } catch (error52) {
+    await fs.rm(stagedViewer, { recursive: true, force: true }).catch(() => {
+      return;
+    });
+    await fs.rm(stagedBinary, { force: true }).catch(() => {
+      return;
+    });
+    throw error52;
+  }
+  await fs.rm(previousViewer, { recursive: true, force: true });
+  let viewerBackedUp = false;
+  let viewerCommitted = false;
+  let binaryCommitted = false;
+  try {
+    try {
+      await fs.rename(viewer, previousViewer);
+      viewerBackedUp = true;
+    } catch (error52) {
+      if (error52.code !== "ENOENT")
+        throw error52;
+    }
+    await fs.rename(stagedViewer, viewer);
+    viewerCommitted = true;
+    await fs.rename(stagedBinary, installedBinary);
+    binaryCommitted = true;
+  } catch (error52) {
+    const rollback = [];
+    if (binaryCommitted) {
+      await fs.copyFile(previousBinary, installedBinary).catch((failure) => rollback.push(failure));
+      await fs.chmod(installedBinary, 493).catch((failure) => rollback.push(failure));
+    }
+    if (viewerCommitted) {
+      await fs.rm(viewer, { recursive: true, force: true }).catch((failure) => rollback.push(failure));
+    }
+    if (viewerBackedUp) {
+      await fs.rename(previousViewer, viewer).catch((failure) => rollback.push(failure));
+    }
+    if (rollback.length > 0) {
+      throw new AggregateError([error52, ...rollback], "Standalone update and rollback both failed.");
+    }
+    throw error52;
+  } finally {
+    await fs.rm(stagedViewer, { recursive: true, force: true }).catch(() => {
+      return;
+    });
+    await fs.rm(stagedBinary, { force: true }).catch(() => {
+      return;
+    });
+  }
+  let settled = false;
+  return Object.freeze({
+    finalize: async () => {
+      if (settled)
+        return;
+      settled = true;
+      await fs.rm(previousViewer, { recursive: true, force: true }).catch(() => {
+        return;
+      });
+    },
+    rollback: async () => {
+      if (settled)
+        return;
+      settled = true;
+      const rollback = [];
+      await fs.copyFile(previousBinary, installedBinary).catch((failure) => rollback.push(failure));
+      await fs.chmod(installedBinary, 493).catch((failure) => rollback.push(failure));
+      await fs.rm(viewer, { recursive: true, force: true }).catch((failure) => rollback.push(failure));
+      if (viewerBackedUp) {
+        await fs.rename(previousViewer, viewer).catch((failure) => rollback.push(failure));
+      }
+      if (rollback.length > 0) {
+        throw new AggregateError(rollback, "Standalone update rollback failed.");
+      }
+    }
+  });
+}
+async function updateAstrale(req, dependencies = {}) {
+  const update = { ...defaultUpdateDependencies, ...dependencies };
   const execution = req.execution ?? detectUpdateExecution();
   if (execution.kind === "package-managed") {
     return {
@@ -47832,22 +47952,26 @@ async function updateAstrale(req) {
     }
     await extractTarGz(archive, tmp);
     const nextBin = join4(tmp, "astrale");
+    const nextViewer = join4(tmp, "viewer", "dist");
     await chmod2(nextBin, 493);
     await smokeVersion(nextBin, manifest.binaryVersion ?? manifest.version);
-    const previous = `${meta3.bin}.previous`;
-    const staged = `${meta3.bin}.next`;
-    await copyFile(meta3.bin, previous).catch(() => {
-      return;
-    });
-    await copyFile(nextBin, staged);
-    await chmod2(staged, 493);
-    await rename2(staged, meta3.bin);
-    await writeInstallMetadata({
-      ...meta3,
-      channel: manifest.channel,
-      version: manifest.version,
-      installedAt: new Date().toISOString()
-    }, req.installPath);
+    const replacement = await update.replaceStandaloneCohort(meta3.bin, nextBin, nextViewer);
+    try {
+      await update.writeInstallMetadata({
+        ...meta3,
+        channel: manifest.channel,
+        version: manifest.version,
+        installedAt: new Date().toISOString()
+      }, req.installPath);
+    } catch (error52) {
+      try {
+        await replacement.rollback();
+      } catch (rollbackError) {
+        throw new AggregateError([error52, rollbackError], "Standalone update metadata commit and cohort rollback both failed.");
+      }
+      throw error52;
+    }
+    await replacement.finalize();
     return {
       status: "updated",
       previousVersion: currentVersion,
@@ -47910,7 +48034,7 @@ async function smokeVersion(bin, expectedVersion) {
     throw new Error(`Updated binary reported version ${actual}, expected ${expectedVersion}`);
   }
 }
-var DEFAULT_REPO = "astrale-os/cli", DEFAULT_UPDATE_CHANNEL = "beta", InstallMetadataSchema, ManifestAssetSchema, UpdateManifestSchema, admittedScriptInstall;
+var DEFAULT_REPO = "astrale-os/cli", DEFAULT_UPDATE_CHANNEL = "beta", InstallMetadataSchema, ManifestAssetSchema, UpdateManifestSchema, admittedScriptInstall, defaultCohortFilesystem, defaultUpdateDependencies;
 var init_update = __esm(() => {
   init_zod();
   init_errors2();
@@ -47939,6 +48063,8 @@ var init_update = __esm(() => {
     ]))
   });
   admittedScriptInstall = Symbol("admittedScriptInstall");
+  defaultCohortFilesystem = { chmod: chmod2, copyFile, mkdir: mkdir6, rename: rename2, rm };
+  defaultUpdateDependencies = Object.freeze({ replaceStandaloneCohort, writeInstallMetadata });
 });
 
 // src/lib/admin-target.ts
@@ -75670,7 +75796,7 @@ var init_schema8 = __esm(() => {
   init_core5();
 });
 
-// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.49_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/schema/index.js
+// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.50_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/schema/index.js
 var KernelSchema2;
 var init_schema9 = __esm(() => {
   init_schema8();
@@ -79267,7 +79393,7 @@ var init_session2 = __esm(() => {
   init_reference3();
 });
 
-// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.49_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/client/session/index.js
+// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.50_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/client/session/index.js
 var init_session3 = __esm(() => {
   init_session2();
 });
@@ -81855,7 +81981,7 @@ Examples:
   };
 });
 
-// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.49_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/graph/class/index.js
+// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.50_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/graph/class/index.js
 var init_class5 = __esm(() => {
   init_addressing();
 });
@@ -81881,7 +82007,7 @@ var init_class6 = __esm(() => {
   init_path3();
 });
 
-// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.49_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/application/mutation/index.js
+// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.50_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/application/mutation/index.js
 var init_mutation2 = __esm(() => {
   init_mutate();
 });
@@ -81910,7 +82036,7 @@ function isLegacyPatchData(input) {
 var init_mutation3 = __esm(() => {
   init_mutation2();
 });
-// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.49_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/application/query/index.js
+// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.50_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/application/query/index.js
 var init_query5 = __esm(() => {
   init_query();
 });
@@ -82701,6 +82827,32 @@ async function findFreePort(start, span = 20, host = LOOPBACK) {
 var LOOPBACK = "127.0.0.1";
 var init_port = () => {};
 
+// src/lib/view/external-open-origins.ts
+function admitExternalOpenOrigins(input) {
+  if (input === undefined)
+    return Object.freeze([]);
+  const admitted = new Set;
+  for (const candidate2 of input) {
+    let url3;
+    try {
+      url3 = new URL(candidate2);
+    } catch (cause) {
+      throw invalidExternalOrigin(candidate2, cause);
+    }
+    if (url3.protocol !== "https:" || url3.hostname.includes("*") || url3.username !== "" || url3.password !== "" || url3.pathname !== "/" || url3.search !== "" || url3.hash !== "") {
+      throw invalidExternalOrigin(candidate2);
+    }
+    admitted.add(url3.origin);
+  }
+  return Object.freeze([...admitted]);
+}
+function invalidExternalOrigin(candidate2, cause) {
+  return new AstraleError("INVALID_EXTERNAL_ORIGIN", `External navigation grant "${candidate2}" is not an exact HTTPS origin.`, "Pass an origin such as https://connect.example.com with no credentials, path, query, or fragment.", cause === undefined ? undefined : { cause });
+}
+var init_external_open_origins = __esm(() => {
+  init_errors2();
+});
+
 // src/lib/view/session.ts
 import { closeSync, fchmodSync, openSync } from "node:fs";
 import { chmod as chmod3, mkdir as mkdir9, readdir as readdir2, readFile as readFile12, rm as rm2 } from "node:fs/promises";
@@ -82873,7 +83025,7 @@ import { existsSync as existsSync5, statSync } from "node:fs";
 import { copyFile as copyFile2 } from "node:fs/promises";
 import { dirname as dirname9, join as join13 } from "node:path";
 import { fileURLToPath } from "node:url";
-function viewerDistDir(moduleUrl = import.meta.url, entry2 = process.argv[1] ?? ".") {
+function viewerDistDir(moduleUrl = import.meta.url, entry2 = process.argv[1] ?? ".", executable = process.execPath) {
   const override = process.env.ASTRALE_VIEWER_DIR;
   if (override)
     return override;
@@ -82881,7 +83033,8 @@ function viewerDistDir(moduleUrl = import.meta.url, entry2 = process.argv[1] ??
   const published = join13(moduleDirectory, "..", "viewer", "dist");
   const source2 = join13(moduleDirectory, "..", "..", "..", "viewer", "dist");
   const legacy = join13(dirname9(entry2), "..", "viewer", "dist");
-  const complete = [published, source2, legacy].find(hasViewerBundle);
+  const standalone = entry2.startsWith("/$bunfs/") ? join13(dirname9(executable), "viewer", "dist") : undefined;
+  const complete = [standalone, published, source2, legacy].find((candidate2) => candidate2 !== undefined && hasViewerBundle(candidate2));
   if (complete)
     return complete;
   if (hasViewerSource(join13(source2, "..")))
@@ -82991,7 +83144,8 @@ function startViewServer(config2) {
         kernelIssuer: proxy.issuer,
         identity: session3.identity ?? null,
         instance: session3.instance ?? null,
-        sessionId: session3.id
+        sessionId: session3.id,
+        externalOrigins: config2.externalOrigins
       });
       return;
     }
@@ -83204,11 +83358,15 @@ var init_snapshot = __esm(() => {
 // src/commands/view.ts
 var exports_view3 = {};
 __export(exports_view3, {
+  createViewServeConfig: () => createViewServeConfig,
   default: () => view_default,
   devDistIsStale: () => devDistIsStale,
+  directServeRuntime: () => directServeRuntime,
   rejectUnrepresentableOverrides: () => rejectUnrepresentableOverrides,
+  resolveServeRuntime: () => resolveServeRuntime,
   resolveSession: () => resolveSession,
-  runSnapshotExtras: () => runSnapshotExtras
+  runSnapshotExtras: () => runSnapshotExtras,
+  viewServeInvocation: () => viewServeInvocation
 });
 import { randomBytes } from "node:crypto";
 import { closeSync as closeSync2, existsSync as existsSync6, statSync as statSync2 } from "node:fs";
@@ -83259,18 +83417,30 @@ async function chooseCandidate(candidates, anchor, selector, opts) {
   }
   throw new AstraleError("AMBIGUOUS_VIEW", `${anchor} resolves ${candidates.length} views — pick one with --view <slug>: ${candidates.map(candidateSlug).join(", ")}`);
 }
-async function resolveServeRuntime() {
-  const entry2 = process.argv[1];
-  const node4 = await findOnPath("node");
-  if (node4 && entry2?.endsWith(".js") && existsSync6(entry2))
+async function resolveServeRuntime(environment = {}) {
+  const entry2 = environment.entry ?? process.argv[1];
+  const executable = environment.executable ?? process.execPath;
+  const exists = environment.exists ?? existsSync6;
+  const find = environment.find ?? findOnPath;
+  const node4 = await find("node");
+  if (node4 && entry2?.endsWith(".js") && exists(entry2))
     return { file: node4, args: [entry2] };
   if (node4 && entry2?.endsWith(".ts")) {
     const dist = join15(dirname10(entry2), "..", "dist", "astrale.js");
     await ensureDevDist(entry2, dist);
-    if (existsSync6(dist))
+    if (exists(dist))
       return { file: node4, args: [dist] };
   }
-  return { file: process.execPath, args: entry2 && existsSync6(entry2) ? [entry2] : [] };
+  return directServeRuntime(executable, entry2, entry2 !== undefined && exists(entry2));
+}
+function directServeRuntime(executable, entry2, entryExists = entry2 !== undefined && existsSync6(entry2)) {
+  return {
+    file: executable,
+    args: entry2 && !entry2.startsWith("/$bunfs/") && entryExists ? [entry2] : []
+  };
+}
+function viewServeInvocation(runtime, config2) {
+  return { file: runtime.file, args: [...runtime.args, "__view-serve", "--config", config2] };
 }
 async function findOnPath(name) {
   const lookup = process.platform === "win32" ? run("where", [name]) : run("sh", ["-c", `command -v ${name}`]);
@@ -83333,6 +83503,26 @@ async function startSession(view2, opts) {
   ]);
   return withViewPortAllocationLock(() => startSessionLocked(view2, opts, kernelTarget, instances.active, identities.default, runtime));
 }
+function createViewServeConfig(record12, opts, kernelTarget) {
+  return {
+    session: record12,
+    kernel: {
+      url: opts.url,
+      instance: opts.instance,
+      as: opts.as,
+      creds: opts.creds,
+      timeout: opts.timeout
+    },
+    proxy: {
+      kernelUrl: kernelTarget.url,
+      issuer: kernelTarget.kernelIssuer,
+      caFile: kernelTarget.caFile,
+      direct: isPublicHttps(kernelTarget.url) && !kernelTarget.caFile
+    },
+    externalOrigins: admitExternalOpenOrigins(opts.allowExternalOrigin),
+    idleMs: IDLE_MS
+  };
+}
 async function startSessionLocked(view2, opts, kernelTarget, activeInstance, defaultIdentity, runtime) {
   const port = await findFreePort(VIEW_PORT_BASE, VIEW_PORT_SPAN);
   if (port === null) {
@@ -83351,26 +83541,11 @@ async function startSessionLocked(view2, opts, kernelTarget, activeInstance, def
     identity: opts.creds ? "(pre-signed creds)" : opts.as ?? defaultIdentity,
     createdAt: new Date().toISOString()
   };
-  const serveConfig = {
-    session: record12,
-    kernel: {
-      url: opts.url,
-      instance: opts.instance,
-      as: opts.as,
-      creds: opts.creds,
-      timeout: opts.timeout
-    },
-    proxy: {
-      kernelUrl: kernelTarget.url,
-      issuer: kernelTarget.kernelIssuer,
-      caFile: kernelTarget.caFile,
-      direct: isPublicHttps(kernelTarget.url) && !kernelTarget.caFile
-    },
-    idleMs: IDLE_MS
-  };
+  const serveConfig = createViewServeConfig(record12, opts, kernelTarget);
   await saveServeConfig(serveConfig);
   const logFd = await openSessionLog(id);
-  const child3 = spawnHandle(runtime.file, [...runtime.args, "__view-serve", "--config", configPath(id)], {
+  const invocation3 = viewServeInvocation(runtime, configPath(id));
+  const child3 = spawnHandle(invocation3.file, invocation3.args, {
     detached: true,
     stdio: ["ignore", logFd, logFd]
   });
@@ -83538,6 +83713,7 @@ var init_view7 = __esm(() => {
   init_output();
   init_port();
   init_proc();
+  init_external_open_origins();
   init_port_allocation();
   init_resolve2();
   init_server();
@@ -83581,7 +83757,11 @@ var init_view7 = __esm(() => {
         flags: "--close [id]",
         description: "Close a view session (bare: the only open one; with --all: every session)"
       },
-      { flags: "--all", description: "With --close: close every session" }
+      { flags: "--all", description: "With --close: close every session" },
+      {
+        flags: "--allow-external-origin <origin...>",
+        description: "Grant this View exact HTTPS origins it may open in a new browser context"
+      }
     ],
     afterHelpText: `
 What it does:
@@ -83600,6 +83780,7 @@ Examples:
   $ astrale view /:crm.example.dev:view.dashboard
   $ astrale view /:agents.astrale.ai:view.agent --target @f00d1234 --as alice
   $ astrale view @customer --snapshot
+  $ astrale view /:integrations.astrale.ai:view.application --allow-external-origin https://connect.nango.dev https://connect.composio.dev
   $ astrale view --list
   $ astrale view --sessions ; astrale view --close --all
 `,
@@ -86313,7 +86494,7 @@ var init_dist20 = __esm(() => {
   init_issuer2();
 });
 
-// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.49_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/publication/index.js
+// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.50_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/publication/index.js
 var init_publication4 = __esm(() => {
   init_dist20();
 });
@@ -87237,17 +87418,17 @@ var init_create5 = __esm(() => {
   };
 });
 
-// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.49_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/graph/edge/index.js
+// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.50_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/graph/edge/index.js
 var init_edge3 = __esm(() => {
   init_edge();
 });
 
-// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.49_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/graph/properties/index.js
+// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.50_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/graph/properties/index.js
 var init_properties2 = __esm(() => {
   init_properties();
 });
 
-// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.49_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/graph/index.js
+// node_modules/.pnpm/@astrale-os+sdk@0.5.0-beta.50_@astrale-os+ox@0.1.3_oxfmt@0.63.0_oxlint@1.78.0__msgpackr@2.0.5_oxlint@1.78.0/node_modules/@astrale-os/sdk/dist/platform/graph/index.js
 var init_graph7 = __esm(() => {
   init_graph2();
   init_edge3();