@sixb/desktop 0.0.0-stage → 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Sixb contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,84 @@
-# Temporary Holding Version
+# `@sixb/desktop`
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Ships a Sixb project's app as a desktop app, built with [Electron](https://www.electronjs.org).
+Install it in a project, and the `sixb` CLI does the rest:
+
+```bash
+bun add -d @sixb/desktop
+bun sixb dev --desktop      # the dev server, and the app in a desktop window
+bun sixb desktop build      # the deployed app, packaged for this machine
+```
+
+See [Desktop App](https://docs.sixb.ai/apps/desktop) for what the desktop app takes from the app,
+signing, and distribution. The rest of this file is how it works.
+
+## How it works
+
+The CLI does not depend on this package, because it brings Electron. It loads the project's copy
+and calls its two exports, `openDesktopApp` and `buildDesktopApp`, with the app's URL and the API's
+origin. Both generate the same Electron app first:
+
+```
+<app>/app.webmanifest ─▶ name, icon        (src/identity.ts)
+        │
+        ▼
+.sixb/desktop/app/        rewritten on every call (src/generate.ts)
+  main.js                 the main process, compiled from src/shell/main.ts
+  preload.js              what the page can reach, compiled from src/shell/preload.ts
+  shell.json              name, app URL, API origin
+  index.html              the page shown while the app loads
+  icon.png
+        │
+        ├─ openDesktopApp   electron .sixb/desktop/app
+        └─ buildDesktopApp  @electron/packager ─▶ .sixb/desktop/dist/
+```
+
+The window loads the app from where it is served; `app/` is not compiled into the binary. The
+page runs sandboxed, with no Node, and reaches the shell only through what `src/shell/bridge.ts`
+exposes, which says how to add to it. The window stays on the app and API origins
+(`src/shell/window.ts`): any other link opens in the user's browser.
+
+### macOS builds
+
+- **Icon.** `src/mac-icon.ts` redraws the icon on Apple's grid, a rounded square of 824 pixels with
+  continuous corners in a canvas of 1024, over a soft shadow. Both were measured against Apple's
+  Notes icon. An icon drawn to its edges otherwise stands larger than every icon beside it. It runs
+  AppKit through `osascript`, and `sips` and `iconutil` turn the result into `.icns`.
+- **Signature.** Packaging breaks the ad-hoc signature Electron ships with, and macOS calls a
+  downloaded app with a broken signature damaged, with no way to open it. An unsigned build is
+  re-signed ad hoc, so users can allow it. With `APPLE_API_KEY`, `APPLE_API_KEY_ID` and
+  `APPLE_API_ISSUER`, the packager signs with the keychain's Developer ID certificate and notarizes
+  instead.
+- **Packager.** `@electron/packager` fails under Bun whenever it verifies a download, so
+  `src/packager.mjs` runs it under Electron's own binary as Node.
+
+### Signing in
+
+A window like this cannot finish a sign-in on its own: a magic link opens in the user's browser,
+not in the window, and identity providers refuse embedded browsers. So the shell sends the window
+to `GET /auth/sign-in/device` instead of the sign-in page, and opens the approval page in the
+system browser:
+
+```
+window                         API                          system browser
+  │  app redirects to /auth/sign-in                              │
+  │  shell loads /auth/sign-in/device ─▶ creates an authorization│
+  │◀─ "Continue in your browser", cookie holds its secret        │
+  │  shell opens /auth/device?user_code=… ──────────────────────▶│ signs in if needed,
+  │                                      ◀── Authorize ──────────│ approves
+  │  page reloads ─▶ approved: session cookie, back to the app   │
+```
+
+The session is an ordinary browser session, kept in the window's persistent cookie store, so later
+launches open straight into the app. `src/shell/navigation.ts` holds those two decisions as a pure
+function; `src/shell/main.ts` wires them to the window.
+
+### Title bar
+
+On macOS the window has no title bar: the app draws to the top edge and the window controls float
+over it. Two things a title bar did then come from the shell (`src/shell/window.ts`):
+
+- A 36px strip across the top is the handle the window is dragged by. Buttons, links and form
+  controls under it still take their clicks; the space between them moves the window.
+- `<html data-sixb-desktop="inset">` and `--sixb-desktop-controls-height` let an app make room for
+  the controls. The sidebar of the default `AppShell` is moved down for it already.

package/dist/generate.d.ts

@@ -0,0 +1,30 @@
+export interface DesktopAppOptions {
+    /** The Sixb project. The desktop app is generated under its `.sixb/desktop`. */
+    readonly projectRoot: string;
+    /** Where the app is served. The window opens it; the desktop app takes its name and icon from it. */
+    readonly appUrl: string;
+    /** The project's API. Its sign-in pages are where the window is approved. */
+    readonly apiOrigin: string;
+}
+/** The Electron app `writeDesktopApp` generated, and what it is called. */
+export interface GeneratedApp {
+    readonly dir: string;
+    readonly name: string;
+    readonly version: string;
+    /** The app's icon in `dir`, when it declares one. */
+    readonly icon: string | null;
+}
+/** Where a project's desktop app is generated (`app`) and packaged (`dist`). */
+export declare function desktopDir(projectRoot: string, part: "app" | "dist"): string;
+/**
+ * Writes the Electron app that opens `appUrl` into the project's `.sixb/desktop/app`. The directory
+ * is build-owned, like the rest of `.sixb`: it is cleared on every call.
+ */
+export declare function writeDesktopApp(options: DesktopAppOptions): Promise<GeneratedApp>;
+/** The page the window shows while the app loads, and when it cannot reach the app. */
+export declare function renderShellPage(template: string, page: {
+    readonly name: string;
+    readonly appUrl: string;
+    readonly icon: boolean;
+}): string;
+//# sourceMappingURL=generate.d.ts.map

package/dist/generate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../src/generate.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,iBAAiB;IAChC,gFAAgF;IAChF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,qGAAqG;IACrG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,6EAA6E;IAC7E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,2EAA2E;AAC3E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAKD,gFAAgF;AAChF,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAE5E;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,CA4CvF;AAED,uFAAuF;AACvF,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAC/E,MAAM,CAYR"}

package/dist/identity.d.ts

@@ -0,0 +1,22 @@
+/** What the desktop app takes from the web app it opens. */
+export interface AppIdentity {
+    /** The app's name: `metadata.title` in `app/layout.tsx`. */
+    readonly name: string;
+    /**
+     * The app's maskable icon, such as `app/public/icon-maskable-512.png`, or else its largest PNG
+     * icon, such as `app/public/icon-512.png`.
+     */
+    readonly icon: Uint8Array | null;
+}
+/**
+ * Reads the app's web app manifest, the one a browser installs the app from. The desktop app is
+ * the same app installed another way, so it takes the same name and icon and has no settings of
+ * its own.
+ */
+export declare function readAppIdentity(appUrl: string): Promise<AppIdentity>;
+/**
+ * The app's id on the desktop, from the address it opens: `https://orders.acme.com` becomes
+ * `com.acme.orders`. Each deployment gets its own, so a staging build installs beside production.
+ */
+export declare function bundleIdentifier(appUrl: string): string;
+//# sourceMappingURL=identity.d.ts.map

package/dist/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,MAAM,WAAW,WAAW;IAC1B,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI,CAAA;CACjC;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAa1E;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAOvD"}

package/dist/index.d.ts

@@ -0,0 +1,18 @@
+import { type DesktopAppOptions } from "./generate";
+export type { DesktopAppOptions } from "./generate";
+export interface DesktopWindow {
+    /** Resolves with Electron's exit code once the user quits it. */
+    readonly exited: Promise<number>;
+    close(): void;
+}
+export interface DesktopBuild {
+    /** What to hand to users: a zip of the app on macOS, the app's folder elsewhere. */
+    readonly path: string;
+    /** Whether it was signed and notarized, and so opens without a warning. */
+    readonly signed: boolean;
+}
+/** Opens the app in a desktop window. `sixb dev --desktop` calls this. */
+export declare function openDesktopApp(options: DesktopAppOptions): Promise<DesktopWindow>;
+/** Packages the app for this machine's platform. `sixb desktop build` calls this. */
+export declare function buildDesktopApp(options: DesktopAppOptions): Promise<DesktopBuild>;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,iBAAiB,EAA+B,MAAM,YAAY,CAAA;AAIhF,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAEnD,MAAM,WAAW,aAAa;IAC5B,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IAChC,KAAK,IAAI,IAAI,CAAA;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,oFAAoF;IACpF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CACzB;AAMD,0EAA0E;AAC1E,wBAAsB,cAAc,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC,CAsBvF;AAED,qFAAqF;AACrF,wBAAsB,eAAe,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,CAiCvF"}

package/dist/index.js

@@ -0,0 +1,326 @@
+// @bun
+// src/index.ts
+import { mkdir as mkdir2, readdir, rm as rm2 } from "fs/promises";
+import { createRequire } from "module";
+import { dirname, join as join2 } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
+
+// src/generate.ts
+import { mkdir, readFile, rm, writeFile } from "fs/promises";
+import { join } from "path";
+import { fileURLToPath } from "url";
+
+// src/identity.ts
+async function readAppIdentity(appUrl) {
+  const manifestUrl = new URL("/app.webmanifest", appUrl);
+  const manifest = await (await fetchFromApp(manifestUrl)).json();
+  const { name, icons } = typeof manifest === "object" && manifest !== null ? manifest : {};
+  const iconUrl = desktopIcon(icons, manifestUrl);
+  return {
+    name: typeof name === "string" && name.trim() ? name.trim() : "Sixb",
+    icon: iconUrl ? new Uint8Array(await (await fetchFromApp(iconUrl)).arrayBuffer()) : null
+  };
+}
+function bundleIdentifier(appUrl) {
+  const labels = new URL(appUrl).hostname.split(".").reverse().map((label) => label.toLowerCase().replaceAll(/[^a-z0-9-]/g, "-")).filter(Boolean);
+  return (labels.length > 1 ? labels : ["local", ...labels]).join(".");
+}
+function desktopIcon(icons, manifestUrl) {
+  let best = null;
+  for (const icon of Array.isArray(icons) ? icons : []) {
+    if (typeof icon !== "object" || icon === null)
+      continue;
+    const { src, sizes, type, purpose } = icon;
+    if (typeof src !== "string")
+      continue;
+    const url = new URL(src, manifestUrl);
+    if (type === undefined ? !url.pathname.endsWith(".png") : type !== "image/png")
+      continue;
+    const maskable = typeof purpose === "string" && purpose.split(/\s+/).includes("maskable");
+    const size = Math.max(0, ...(typeof sizes === "string" ? sizes.split(/\s+/) : []).map((entry) => Number.parseInt(entry, 10) || 0));
+    const rank = [maskable ? 1 : 0, size];
+    if (!best || rank[0] > best.rank[0] || rank[0] === best.rank[0] && rank[1] > best.rank[1]) {
+      best = { url, rank };
+    }
+  }
+  return best?.url ?? null;
+}
+async function fetchFromApp(url) {
+  let response;
+  try {
+    response = await fetch(url);
+  } catch (error) {
+    throw new Error(`[SixbDesktop] Could not reach ${url} (${error instanceof Error ? error.message : error}). ` + "The desktop app takes its name and icon from the app, so the app must be running there.");
+  }
+  if (!response.ok)
+    throw new Error(`[SixbDesktop] ${url} answered ${response.status}.`);
+  return response;
+}
+
+// src/run.ts
+async function run(command, failure) {
+  const child = Bun.spawn([...command], {
+    stdio: ["ignore", "ignore", "pipe"],
+    timeout: 120000
+  });
+  const [exitCode, errors] = await Promise.all([child.exited, new Response(child.stderr).text()]);
+  if (exitCode !== 0) {
+    throw new Error(`[SixbDesktop] ${failure}${errors.trim() ? `
+${errors.trim()}` : ""}`);
+  }
+}
+
+// src/mac-icon.ts
+async function drawMacIcon(png, out) {
+  await run(["osascript", "-l", "JavaScript", "-e", MAC_ICON_SCRIPT, png, out], "Could not draw the macOS icon.");
+}
+var MAC_ICON_SCRIPT = `
+ObjC.import("AppKit")
+ObjC.import("CoreGraphics")
+
+function run([input, output]) {
+  const canvas = 1024
+  const body = 824
+  const radius = 185.4
+  const min = (canvas - body) / 2
+  const max = min + body
+
+  // One corner, as offsets in radii from the edge it leaves and the edge it joins.
+  const corner = [
+    [[1.52866483, 0]],
+    [[0.66993427, 0.065496], [1.08849323, 0], [0.86840689, 0.02065986]],
+    [[0.63149399, 0.074911]],
+    [[0.074911, 0.63149399], [0.37282392, 0.16906933], [0.16906933, 0.37282392]],
+    [[0.065496, 0.66993427]],
+    [[0, 1.52866483], [0.02065986, 0.86840689], [0, 1.08849323]],
+  ]
+  const corners = [
+    ([u, v]) => $.NSMakePoint(max - u * radius, max - v * radius),
+    ([u, v]) => $.NSMakePoint(max - v * radius, min + u * radius),
+    ([u, v]) => $.NSMakePoint(min + u * radius, min + v * radius),
+    ([u, v]) => $.NSMakePoint(min + v * radius, max - u * radius),
+  ]
+  const shape = $.NSBezierPath.bezierPath
+  shape.moveToPoint(corners[3]([0, 1.52866483]))
+  for (const at of corners) {
+    for (const [to, c1, c2] of corner) {
+      if (c1) shape.curveToPointControlPoint1ControlPoint2(at(to), at(c1), at(c2))
+      else shape.lineToPoint(at(to))
+    }
+  }
+  shape.closePath
+
+  const image = $.NSImage.alloc.initWithContentsOfFile(input)
+  if (image.isNil()) throw new Error("Cannot read " + input)
+  const bitmap = $.NSBitmapImageRep.alloc
+    .initWithBitmapDataPlanesPixelsWidePixelsHighBitsPerSampleSamplesPerPixelHasAlphaIsPlanarColorSpaceNameBytesPerRowBitsPerPixel(
+      null, canvas, canvas, 8, 4, true, false, $.NSDeviceRGBColorSpace, 0, 0
+    )
+  const context = $.NSGraphicsContext.graphicsContextWithBitmapImageRep(bitmap)
+  $.NSGraphicsContext.setCurrentContext(context)
+  context.setImageInterpolation($.NSImageInterpolationHigh)
+
+  const shadow = $.NSShadow.alloc.init
+  shadow.setShadowOffset($.NSMakeSize(0, -8))
+  shadow.setShadowBlurRadius(30)
+  shadow.setShadowColor($.NSColor.colorWithWhiteAlpha(0, 0.22))
+  shadow.set
+  // A layer, so the shadow falls from the clipped icon and not from the clip.
+  $.CGContextBeginTransparencyLayer(context.CGContext, null)
+  shape.addClip
+  image.drawInRectFromRectOperationFraction(
+    $.NSMakeRect(min, min, body, body), $.NSZeroRect, $.NSCompositingOperationSourceOver, 1
+  )
+  $.CGContextEndTransparencyLayer(context.CGContext)
+  context.flushGraphics
+
+  const png = bitmap.representationUsingTypeProperties($.NSBitmapImageFileTypePNG, $.NSDictionary.dictionary)
+  if (!png.writeToFileAtomically(output, true)) throw new Error("Cannot write " + output)
+}
+`;
+
+// src/generate.ts
+var SHELL_SOURCE_DIR = fileURLToPath(new URL("../src/shell", import.meta.url));
+function desktopDir(projectRoot, part) {
+  return join(projectRoot, ".sixb", "desktop", part);
+}
+async function writeDesktopApp(options) {
+  const identity = await readAppIdentity(options.appUrl);
+  const version = await readProjectVersion(options.projectRoot);
+  const dir = desktopDir(options.projectRoot, "app");
+  await rm(dir, { recursive: true, force: true });
+  await mkdir(dir, { recursive: true });
+  const config = {
+    name: identity.name,
+    appUrl: new URL(options.appUrl).href,
+    apiOrigin: new URL(options.apiOrigin).origin
+  };
+  const manifest = {
+    name: "sixb-desktop-app",
+    productName: identity.name,
+    version,
+    private: true,
+    main: "main.js"
+  };
+  const icon = identity.icon ? await writeIcon(dir, identity.icon) : null;
+  const template = await readFile(join(SHELL_SOURCE_DIR, "index.html"), "utf-8");
+  await Promise.all([
+    writeFile(join(dir, "package.json"), `${JSON.stringify(manifest, null, 2)}
+`),
+    writeFile(join(dir, "shell.json"), `${JSON.stringify(config, null, 2)}
+`),
+    writeFile(join(dir, "index.html"), renderShellPage(template, { ...config, icon: !!icon }))
+  ]);
+  await run([
+    process.execPath,
+    "build",
+    join(SHELL_SOURCE_DIR, "main.ts"),
+    join(SHELL_SOURCE_DIR, "preload.ts"),
+    "--target=node",
+    "--format=cjs",
+    "--external=electron",
+    `--outdir=${dir}`
+  ], "Could not compile the desktop shell.");
+  return { dir, name: identity.name, version, icon };
+}
+function renderShellPage(template, page) {
+  const initial = Array.from(page.name.trim())[0]?.toUpperCase() ?? "";
+  const markup = {
+    name: escapeHtml(page.name),
+    host: escapeHtml(new URL(page.appUrl).host),
+    appUrl: escapeHtml(page.appUrl),
+    mark: page.icon ? '<img class="mark" src="icon.png" alt="" />' : `<div class="mark" aria-hidden="true">${escapeHtml(initial)}</div>`
+  };
+  return template.replaceAll(/\{\{(\w+)\}\}/g, (_match, key) => markup[key] ?? "");
+}
+async function writeIcon(dir, png) {
+  const icon = join(dir, "icon.png");
+  if (process.platform !== "darwin") {
+    await writeFile(icon, png);
+    return icon;
+  }
+  const source = join(dir, "..", "icon-source.png");
+  await writeFile(source, png);
+  await drawMacIcon(source, icon);
+  return icon;
+}
+async function readProjectVersion(projectRoot) {
+  try {
+    const manifest = JSON.parse(await readFile(join(projectRoot, "package.json"), "utf-8"));
+    const version = manifest?.version;
+    return typeof version === "string" ? version : "0.0.0";
+  } catch {
+    return "0.0.0";
+  }
+}
+function escapeHtml(value) {
+  return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;");
+}
+
+// src/index.ts
+var packageRequire = createRequire(import.meta.url);
+var PACKAGER_SCRIPT = fileURLToPath2(new URL("../src/packager.mjs", import.meta.url));
+async function openDesktopApp(options) {
+  const app = await writeDesktopApp(options);
+  const log = join2(dirname(app.dir), "electron.log");
+  const electron = Bun.spawn([electronBinary(), app.dir], {
+    stdio: ["ignore", "ignore", Bun.file(log)]
+  });
+  let closing = false;
+  const exited = electron.exited.then((code) => {
+    if (code !== 0 && !closing) {
+      console.error(`[SixbDesktop] The desktop window quit with exit code ${code}. See ${log}.`);
+    }
+    return code;
+  });
+  return {
+    exited,
+    close: () => {
+      closing = true;
+      electron.kill();
+    }
+  };
+}
+async function buildDesktopApp(options) {
+  const app = await writeDesktopApp(options);
+  const out = desktopDir(options.projectRoot, "dist");
+  await rm2(out, { recursive: true, force: true });
+  const mac = process.platform === "darwin";
+  const notarize = mac ? appleNotarization() : null;
+  const packaged = await packageApp({
+    dir: app.dir,
+    name: app.name,
+    out,
+    appBundleId: bundleIdentifier(options.appUrl),
+    appVersion: app.version,
+    electronVersion: packageRequire("electron/package.json").version,
+    ...mac && app.icon ? { icon: await macIcon(app.icon) } : {},
+    ...notarize ? { osxSign: {}, osxNotarize: notarize } : {}
+  });
+  if (!mac)
+    return { path: packaged, signed: false };
+  const name = (await readdir(packaged)).find((entry) => entry.endsWith(".app"));
+  if (!name)
+    throw new Error(`[SixbDesktop] The packaged app is missing from ${packaged}.`);
+  const bundle = join2(packaged, name);
+  if (!notarize) {
+    await run(["codesign", "--force", "--deep", "--sign", "-", bundle], "Could not sign the app.");
+  }
+  const zip = `${packaged}.zip`;
+  await run(["ditto", "-c", "-k", "--keepParent", bundle, zip], "Could not zip the app.");
+  return { path: zip, signed: notarize !== null };
+}
+function appleNotarization() {
+  const { APPLE_API_KEY, APPLE_API_KEY_ID, APPLE_API_ISSUER } = process.env;
+  if (!APPLE_API_KEY && !APPLE_API_KEY_ID && !APPLE_API_ISSUER)
+    return null;
+  if (!APPLE_API_KEY || !APPLE_API_KEY_ID || !APPLE_API_ISSUER) {
+    throw new Error("[SixbDesktop] Set all of APPLE_API_KEY, APPLE_API_KEY_ID and APPLE_API_ISSUER to sign the " + "macOS app, or none of them to build it unsigned.");
+  }
+  return {
+    appleApiKey: APPLE_API_KEY,
+    appleApiKeyId: APPLE_API_KEY_ID,
+    appleApiIssuer: APPLE_API_ISSUER
+  };
+}
+async function macIcon(png) {
+  const desktop = dirname(dirname(png));
+  const iconset = join2(desktop, "icon.iconset");
+  await rm2(iconset, { recursive: true, force: true });
+  await mkdir2(iconset);
+  const sizes = [16, 32, 128, 256, 512].flatMap((points) => [
+    { name: `icon_${points}x${points}.png`, pixels: points },
+    { name: `icon_${points}x${points}@2x.png`, pixels: points * 2 }
+  ]);
+  await Promise.all(sizes.map(({ name, pixels }) => run(["sips", "-z", `${pixels}`, `${pixels}`, png, "--out", join2(iconset, name)], "Could not scale the icon.")));
+  const icns = join2(desktop, "icon.icns");
+  await run(["iconutil", "-c", "icns", iconset, "-o", icns], "Could not convert the icon.");
+  return icns;
+}
+async function packageApp(options) {
+  const packager = Bun.spawn([electronBinary(), PACKAGER_SCRIPT, JSON.stringify({ ...options, quiet: true })], {
+    stdio: ["ignore", "inherit", "inherit"],
+    env: { ...process.env, ELECTRON_RUN_AS_NODE: "1", ELECTRON_NO_ASAR: "1" }
+  });
+  if (await packager.exited !== 0) {
+    throw new Error("[SixbDesktop] Packaging failed. See the output above.");
+  }
+  const [written] = await readdir(options.out);
+  if (!written)
+    throw new Error(`[SixbDesktop] The packager wrote nothing to ${options.out}.`);
+  return join2(options.out, written);
+}
+function electronBinary() {
+  try {
+    return packageRequire("electron");
+  } catch {
+    const electronDir = dirname(packageRequire.resolve("electron/package.json"));
+    throw new Error("[SixbDesktop] Electron's binary is missing: its install script did not run. " + `Run \`bun run --cwd ${electronDir} postinstall\`, then try again.`);
+  }
+}
+export {
+  buildDesktopApp,
+  openDesktopApp
+};
+
+//# debugId=AA1E41BFA25EB6CC64756E2164756E21

package/dist/index.js.map

@@ -0,0 +1,14 @@
+{
+  "version": 3,
+  "sources": ["../src/index.ts", "../src/generate.ts", "../src/identity.ts", "../src/run.ts", "../src/mac-icon.ts"],
+  "sourcesContent": [
+    "import { mkdir, readdir, rm } from \"node:fs/promises\"\nimport { createRequire } from \"node:module\"\nimport { dirname, join } from \"node:path\"\nimport { fileURLToPath } from \"node:url\"\nimport { type DesktopAppOptions, desktopDir, writeDesktopApp } from \"./generate\"\nimport { bundleIdentifier } from \"./identity\"\nimport { run } from \"./run\"\n\nexport type { DesktopAppOptions } from \"./generate\"\n\nexport interface DesktopWindow {\n  /** Resolves with Electron's exit code once the user quits it. */\n  readonly exited: Promise<number>\n  close(): void\n}\n\nexport interface DesktopBuild {\n  /** What to hand to users: a zip of the app on macOS, the app's folder elsewhere. */\n  readonly path: string\n  /** Whether it was signed and notarized, and so opens without a warning. */\n  readonly signed: boolean\n}\n\nconst packageRequire = createRequire(import.meta.url)\n// From the package's `src`, like the shell: see `SHELL_SOURCE_DIR`.\nconst PACKAGER_SCRIPT = fileURLToPath(new URL(\"../src/packager.mjs\", import.meta.url))\n\n/** Opens the app in a desktop window. `sixb dev --desktop` calls this. */\nexport async function openDesktopApp(options: DesktopAppOptions): Promise<DesktopWindow> {\n  const app = await writeDesktopApp(options)\n  // Chromium writes plenty to stderr when all is well, so it goes to a file, named if the window\n  // quits on its own with an error.\n  const log = join(dirname(app.dir), \"electron.log\")\n  const electron = Bun.spawn([electronBinary(), app.dir], {\n    stdio: [\"ignore\", \"ignore\", Bun.file(log)],\n  })\n  let closing = false\n  const exited = electron.exited.then((code) => {\n    if (code !== 0 && !closing) {\n      console.error(`[SixbDesktop] The desktop window quit with exit code ${code}. See ${log}.`)\n    }\n    return code\n  })\n  return {\n    exited,\n    close: () => {\n      closing = true\n      electron.kill()\n    },\n  }\n}\n\n/** Packages the app for this machine's platform. `sixb desktop build` calls this. */\nexport async function buildDesktopApp(options: DesktopAppOptions): Promise<DesktopBuild> {\n  const app = await writeDesktopApp(options)\n  const out = desktopDir(options.projectRoot, \"dist\")\n  await rm(out, { recursive: true, force: true })\n\n  const mac = process.platform === \"darwin\"\n  const notarize = mac ? appleNotarization() : null\n  const packaged = await packageApp({\n    dir: app.dir,\n    name: app.name,\n    out,\n    appBundleId: bundleIdentifier(options.appUrl),\n    appVersion: app.version,\n    electronVersion: (packageRequire(\"electron/package.json\") as { readonly version: string })\n      .version,\n    ...(mac && app.icon ? { icon: await macIcon(app.icon) } : {}),\n    // Signs with the Developer ID certificate in the keychain, which notarization requires.\n    ...(notarize ? { osxSign: {}, osxNotarize: notarize } : {}),\n  })\n  if (!mac) return { path: packaged, signed: false }\n\n  const name = (await readdir(packaged)).find((entry) => entry.endsWith(\".app\"))\n  if (!name) throw new Error(`[SixbDesktop] The packaged app is missing from ${packaged}.`)\n  const bundle = join(packaged, name)\n  // Packaging breaks the ad-hoc signature Electron ships with. macOS calls a downloaded app with a\n  // broken signature damaged, and offers no way to open it; signed ad hoc, it can be allowed.\n  if (!notarize) {\n    await run([\"codesign\", \"--force\", \"--deep\", \"--sign\", \"-\", bundle], \"Could not sign the app.\")\n  }\n  // `ditto`, not `zip`: it keeps the bundle's symlinks, and with them its signature.\n  const zip = `${packaged}.zip`\n  await run([\"ditto\", \"-c\", \"-k\", \"--keepParent\", bundle, zip], \"Could not zip the app.\")\n  return { path: zip, signed: notarize !== null }\n}\n\n/**\n * An App Store Connect API key, which notarizes the app so macOS opens it without a warning.\n * Without one, the app is built unsigned.\n */\nfunction appleNotarization(): {\n  readonly appleApiKey: string\n  readonly appleApiKeyId: string\n  readonly appleApiIssuer: string\n} | null {\n  const { APPLE_API_KEY, APPLE_API_KEY_ID, APPLE_API_ISSUER } = process.env\n  if (!APPLE_API_KEY && !APPLE_API_KEY_ID && !APPLE_API_ISSUER) return null\n  if (!APPLE_API_KEY || !APPLE_API_KEY_ID || !APPLE_API_ISSUER) {\n    throw new Error(\n      \"[SixbDesktop] Set all of APPLE_API_KEY, APPLE_API_KEY_ID and APPLE_API_ISSUER to sign the \" +\n        \"macOS app, or none of them to build it unsigned.\"\n    )\n  }\n  return {\n    appleApiKey: APPLE_API_KEY,\n    appleApiKeyId: APPLE_API_KEY_ID,\n    appleApiIssuer: APPLE_API_ISSUER,\n  }\n}\n\n/**\n * The packager wants `.icns`: every size macOS shows, scaled from the 1024-pixel icon, in one file.\n * `sips` and `iconutil` ship with every Mac. Written beside the app, not in it: everything in the\n * app's directory ships inside the bundle.\n */\nasync function macIcon(png: string): Promise<string> {\n  const desktop = dirname(dirname(png))\n  const iconset = join(desktop, \"icon.iconset\")\n  await rm(iconset, { recursive: true, force: true })\n  await mkdir(iconset)\n  const sizes = [16, 32, 128, 256, 512].flatMap((points) => [\n    { name: `icon_${points}x${points}.png`, pixels: points },\n    { name: `icon_${points}x${points}@2x.png`, pixels: points * 2 },\n  ])\n  await Promise.all(\n    sizes.map(({ name, pixels }) =>\n      run(\n        [\"sips\", \"-z\", `${pixels}`, `${pixels}`, png, \"--out\", join(iconset, name)],\n        \"Could not scale the icon.\"\n      )\n    )\n  )\n  const icns = join(desktop, \"icon.icns\")\n  await run([\"iconutil\", \"-c\", \"icns\", iconset, \"-o\", icns], \"Could not convert the icon.\")\n  return icns\n}\n\n/**\n * Runs `@electron/packager` into `options.out`, which starts empty, and resolves with the one\n * directory it wrote there. Under Electron's own binary, which doubles as the Node the packager was\n * written for: under Bun, the packager fails whenever it verifies a download (its checksum\n * dependency does not load).\n */\nasync function packageApp(\n  options: { readonly out: string } & Record<string, unknown>\n): Promise<string> {\n  const packager = Bun.spawn(\n    [electronBinary(), PACKAGER_SCRIPT, JSON.stringify({ ...options, quiet: true })],\n    {\n      stdio: [\"ignore\", \"inherit\", \"inherit\"],\n      // Without the second, Electron's file system reads the `app.asar` the packager writes as a\n      // directory.\n      env: { ...process.env, ELECTRON_RUN_AS_NODE: \"1\", ELECTRON_NO_ASAR: \"1\" },\n    }\n  )\n  if ((await packager.exited) !== 0) {\n    throw new Error(\"[SixbDesktop] Packaging failed. See the output above.\")\n  }\n  const [written] = await readdir(options.out)\n  if (!written) throw new Error(`[SixbDesktop] The packager wrote nothing to ${options.out}.`)\n  return join(options.out, written)\n}\n\n// Outside Electron, `require(\"electron\")` is the path of the binary its install script fetched.\nfunction electronBinary(): string {\n  try {\n    return packageRequire(\"electron\") as string\n  } catch {\n    const electronDir = dirname(packageRequire.resolve(\"electron/package.json\"))\n    throw new Error(\n      \"[SixbDesktop] Electron's binary is missing: its install script did not run. \" +\n        `Run \\`bun run --cwd ${electronDir} postinstall\\`, then try again.`\n    )\n  }\n}\n",
+    "import { mkdir, readFile, rm, writeFile } from \"node:fs/promises\"\nimport { join } from \"node:path\"\nimport { fileURLToPath } from \"node:url\"\nimport { readAppIdentity } from \"./identity\"\nimport { drawMacIcon } from \"./mac-icon\"\nimport { run } from \"./run\"\nimport type { ShellConfig } from \"./shell/navigation\"\n\nexport interface DesktopAppOptions {\n  /** The Sixb project. The desktop app is generated under its `.sixb/desktop`. */\n  readonly projectRoot: string\n  /** Where the app is served. The window opens it; the desktop app takes its name and icon from it. */\n  readonly appUrl: string\n  /** The project's API. Its sign-in pages are where the window is approved. */\n  readonly apiOrigin: string\n}\n\n/** The Electron app `writeDesktopApp` generated, and what it is called. */\nexport interface GeneratedApp {\n  readonly dir: string\n  readonly name: string\n  readonly version: string\n  /** The app's icon in `dir`, when it declares one. */\n  readonly icon: string | null\n}\n\n// Read from the package's `src`, which ships, whether this module runs from `src` or `dist`.\nconst SHELL_SOURCE_DIR = fileURLToPath(new URL(\"../src/shell\", import.meta.url))\n\n/** Where a project's desktop app is generated (`app`) and packaged (`dist`). */\nexport function desktopDir(projectRoot: string, part: \"app\" | \"dist\"): string {\n  return join(projectRoot, \".sixb\", \"desktop\", part)\n}\n\n/**\n * Writes the Electron app that opens `appUrl` into the project's `.sixb/desktop/app`. The directory\n * is build-owned, like the rest of `.sixb`: it is cleared on every call.\n */\nexport async function writeDesktopApp(options: DesktopAppOptions): Promise<GeneratedApp> {\n  const identity = await readAppIdentity(options.appUrl)\n  const version = await readProjectVersion(options.projectRoot)\n  const dir = desktopDir(options.projectRoot, \"app\")\n  await rm(dir, { recursive: true, force: true })\n  await mkdir(dir, { recursive: true })\n\n  const config: ShellConfig = {\n    name: identity.name,\n    appUrl: new URL(options.appUrl).href,\n    apiOrigin: new URL(options.apiOrigin).origin,\n  }\n  const manifest = {\n    name: \"sixb-desktop-app\",\n    // Names the folder the window's cookies are kept in, so each app has its own sign-in.\n    productName: identity.name,\n    version,\n    private: true,\n    main: \"main.js\",\n  }\n  const icon = identity.icon ? await writeIcon(dir, identity.icon) : null\n  const template = await readFile(join(SHELL_SOURCE_DIR, \"index.html\"), \"utf-8\")\n  await Promise.all([\n    writeFile(join(dir, \"package.json\"), `${JSON.stringify(manifest, null, 2)}\\n`),\n    writeFile(join(dir, \"shell.json\"), `${JSON.stringify(config, null, 2)}\\n`),\n    writeFile(join(dir, \"index.html\"), renderShellPage(template, { ...config, icon: !!icon })),\n  ])\n\n  // Electron loads plain JavaScript. A child process, because an in-process `Bun.build()` that\n  // wedges takes its caller down with it.\n  await run(\n    [\n      process.execPath,\n      \"build\",\n      join(SHELL_SOURCE_DIR, \"main.ts\"),\n      join(SHELL_SOURCE_DIR, \"preload.ts\"),\n      \"--target=node\",\n      \"--format=cjs\",\n      \"--external=electron\",\n      `--outdir=${dir}`,\n    ],\n    \"Could not compile the desktop shell.\"\n  )\n  return { dir, name: identity.name, version, icon }\n}\n\n/** The page the window shows while the app loads, and when it cannot reach the app. */\nexport function renderShellPage(\n  template: string,\n  page: { readonly name: string; readonly appUrl: string; readonly icon: boolean }\n): string {\n  const initial = Array.from(page.name.trim())[0]?.toUpperCase() ?? \"\"\n  const markup: Record<string, string> = {\n    name: escapeHtml(page.name),\n    host: escapeHtml(new URL(page.appUrl).host),\n    appUrl: escapeHtml(page.appUrl),\n    // The app's icon, or the first letter of its name standing in for one.\n    mark: page.icon\n      ? '<img class=\"mark\" src=\"icon.png\" alt=\"\" />'\n      : `<div class=\"mark\" aria-hidden=\"true\">${escapeHtml(initial)}</div>`,\n  }\n  return template.replaceAll(/\\{\\{(\\w+)\\}\\}/g, (_match, key: string) => markup[key] ?? \"\")\n}\n\n/** Writes the app's icon into `dir` as `icon.png`; on macOS, drawn the way macOS draws app icons. */\nasync function writeIcon(dir: string, png: Uint8Array): Promise<string> {\n  const icon = join(dir, \"icon.png\")\n  if (process.platform !== \"darwin\") {\n    await writeFile(icon, png)\n    return icon\n  }\n  // The original goes beside the app, not in it: everything in the app's directory ships.\n  const source = join(dir, \"..\", \"icon-source.png\")\n  await writeFile(source, png)\n  await drawMacIcon(source, icon)\n  return icon\n}\n\nasync function readProjectVersion(projectRoot: string): Promise<string> {\n  try {\n    const manifest: unknown = JSON.parse(await readFile(join(projectRoot, \"package.json\"), \"utf-8\"))\n    const version = (manifest as { readonly version?: unknown } | null)?.version\n    return typeof version === \"string\" ? version : \"0.0.0\"\n  } catch {\n    return \"0.0.0\"\n  }\n}\n\nfunction escapeHtml(value: string): string {\n  return value\n    .replaceAll(\"&\", \"&amp;\")\n    .replaceAll(\"<\", \"&lt;\")\n    .replaceAll(\">\", \"&gt;\")\n    .replaceAll('\"', \"&quot;\")\n}\n",
+    "/** What the desktop app takes from the web app it opens. */\nexport interface AppIdentity {\n  /** The app's name: `metadata.title` in `app/layout.tsx`. */\n  readonly name: string\n  /**\n   * The app's maskable icon, such as `app/public/icon-maskable-512.png`, or else its largest PNG\n   * icon, such as `app/public/icon-512.png`.\n   */\n  readonly icon: Uint8Array | null\n}\n\n/**\n * Reads the app's web app manifest, the one a browser installs the app from. The desktop app is\n * the same app installed another way, so it takes the same name and icon and has no settings of\n * its own.\n */\nexport async function readAppIdentity(appUrl: string): Promise<AppIdentity> {\n  const manifestUrl = new URL(\"/app.webmanifest\", appUrl)\n  const manifest: unknown = await (await fetchFromApp(manifestUrl)).json()\n  const { name, icons } = (typeof manifest === \"object\" && manifest !== null ? manifest : {}) as {\n    readonly name?: unknown\n    readonly icons?: unknown\n  }\n\n  const iconUrl = desktopIcon(icons, manifestUrl)\n  return {\n    name: typeof name === \"string\" && name.trim() ? name.trim() : \"Sixb\",\n    icon: iconUrl ? new Uint8Array(await (await fetchFromApp(iconUrl)).arrayBuffer()) : null,\n  }\n}\n\n/**\n * The app's id on the desktop, from the address it opens: `https://orders.acme.com` becomes\n * `com.acme.orders`. Each deployment gets its own, so a staging build installs beside production.\n */\nexport function bundleIdentifier(appUrl: string): string {\n  const labels = new URL(appUrl).hostname\n    .split(\".\")\n    .reverse()\n    .map((label) => label.toLowerCase().replaceAll(/[^a-z0-9-]/g, \"-\"))\n    .filter(Boolean)\n  return (labels.length > 1 ? labels : [\"local\", ...labels]).join(\".\")\n}\n\n// A maskable icon is drawn to its edges for a platform to cut its own shape from, which is what\n// macOS does with it. Any other icon may carry its own shape and margins.\nfunction desktopIcon(icons: unknown, manifestUrl: URL): URL | null {\n  let best: { readonly url: URL; readonly rank: readonly [number, number] } | null = null\n  for (const icon of Array.isArray(icons) ? icons : []) {\n    if (typeof icon !== \"object\" || icon === null) continue\n    const { src, sizes, type, purpose } = icon as Record<string, unknown>\n    if (typeof src !== \"string\") continue\n    const url = new URL(src, manifestUrl)\n    if (type === undefined ? !url.pathname.endsWith(\".png\") : type !== \"image/png\") continue\n\n    const maskable = typeof purpose === \"string\" && purpose.split(/\\s+/).includes(\"maskable\")\n    const size = Math.max(\n      0,\n      ...(typeof sizes === \"string\" ? sizes.split(/\\s+/) : []).map(\n        (entry) => Number.parseInt(entry, 10) || 0\n      )\n    )\n    const rank = [maskable ? 1 : 0, size] as const\n    if (!best || rank[0] > best.rank[0] || (rank[0] === best.rank[0] && rank[1] > best.rank[1])) {\n      best = { url, rank }\n    }\n  }\n  return best?.url ?? null\n}\n\nasync function fetchFromApp(url: URL): Promise<Response> {\n  let response: Response\n  try {\n    response = await fetch(url)\n  } catch (error) {\n    throw new Error(\n      `[SixbDesktop] Could not reach ${url} (${error instanceof Error ? error.message : error}). ` +\n        \"The desktop app takes its name and icon from the app, so the app must be running there.\"\n    )\n  }\n  if (!response.ok) throw new Error(`[SixbDesktop] ${url} answered ${response.status}.`)\n  return response\n}\n",
+    "/** Runs a command to completion, quietly unless it fails: then it throws `failure` and its errors. */\nexport async function run(command: readonly string[], failure: string): Promise<void> {\n  const child = Bun.spawn([...command], {\n    stdio: [\"ignore\", \"ignore\", \"pipe\"],\n    timeout: 120_000,\n  })\n  const [exitCode, errors] = await Promise.all([child.exited, new Response(child.stderr).text()])\n  if (exitCode !== 0) {\n    throw new Error(`[SixbDesktop] ${failure}${errors.trim() ? `\\n${errors.trim()}` : \"\"}`)\n  }\n}\n",
+    "import { run } from \"./run\"\n\n/**\n * Draws `png` the way macOS draws app icons, into `out`: on Apple's grid, a rounded square of 824\n * pixels with continuous corners in a canvas of 1024, over the soft shadow Apple's own icons have.\n * An icon drawn to its edges otherwise stands larger than every other icon in the Dock.\n */\nexport async function drawMacIcon(png: string, out: string): Promise<void> {\n  await run(\n    [\"osascript\", \"-l\", \"JavaScript\", \"-e\", MAC_ICON_SCRIPT, png, out],\n    \"Could not draw the macOS icon.\"\n  )\n}\n\n// AppKit, through the JavaScript `osascript` runs, which every Mac has. The corner is the curve\n// UIKit rounds continuous corners with; with this radius it matches the outline of Apple's Notes\n// icon to a few pixels, and the shadow matches its shadow.\nconst MAC_ICON_SCRIPT = `\nObjC.import(\"AppKit\")\nObjC.import(\"CoreGraphics\")\n\nfunction run([input, output]) {\n  const canvas = 1024\n  const body = 824\n  const radius = 185.4\n  const min = (canvas - body) / 2\n  const max = min + body\n\n  // One corner, as offsets in radii from the edge it leaves and the edge it joins.\n  const corner = [\n    [[1.52866483, 0]],\n    [[0.66993427, 0.065496], [1.08849323, 0], [0.86840689, 0.02065986]],\n    [[0.63149399, 0.074911]],\n    [[0.074911, 0.63149399], [0.37282392, 0.16906933], [0.16906933, 0.37282392]],\n    [[0.065496, 0.66993427]],\n    [[0, 1.52866483], [0.02065986, 0.86840689], [0, 1.08849323]],\n  ]\n  const corners = [\n    ([u, v]) => $.NSMakePoint(max - u * radius, max - v * radius),\n    ([u, v]) => $.NSMakePoint(max - v * radius, min + u * radius),\n    ([u, v]) => $.NSMakePoint(min + u * radius, min + v * radius),\n    ([u, v]) => $.NSMakePoint(min + v * radius, max - u * radius),\n  ]\n  const shape = $.NSBezierPath.bezierPath\n  shape.moveToPoint(corners[3]([0, 1.52866483]))\n  for (const at of corners) {\n    for (const [to, c1, c2] of corner) {\n      if (c1) shape.curveToPointControlPoint1ControlPoint2(at(to), at(c1), at(c2))\n      else shape.lineToPoint(at(to))\n    }\n  }\n  shape.closePath\n\n  const image = $.NSImage.alloc.initWithContentsOfFile(input)\n  if (image.isNil()) throw new Error(\"Cannot read \" + input)\n  const bitmap = $.NSBitmapImageRep.alloc\n    .initWithBitmapDataPlanesPixelsWidePixelsHighBitsPerSampleSamplesPerPixelHasAlphaIsPlanarColorSpaceNameBytesPerRowBitsPerPixel(\n      null, canvas, canvas, 8, 4, true, false, $.NSDeviceRGBColorSpace, 0, 0\n    )\n  const context = $.NSGraphicsContext.graphicsContextWithBitmapImageRep(bitmap)\n  $.NSGraphicsContext.setCurrentContext(context)\n  context.setImageInterpolation($.NSImageInterpolationHigh)\n\n  const shadow = $.NSShadow.alloc.init\n  shadow.setShadowOffset($.NSMakeSize(0, -8))\n  shadow.setShadowBlurRadius(30)\n  shadow.setShadowColor($.NSColor.colorWithWhiteAlpha(0, 0.22))\n  shadow.set\n  // A layer, so the shadow falls from the clipped icon and not from the clip.\n  $.CGContextBeginTransparencyLayer(context.CGContext, null)\n  shape.addClip\n  image.drawInRectFromRectOperationFraction(\n    $.NSMakeRect(min, min, body, body), $.NSZeroRect, $.NSCompositingOperationSourceOver, 1\n  )\n  $.CGContextEndTransparencyLayer(context.CGContext)\n  context.flushGraphics\n\n  const png = bitmap.representationUsingTypeProperties($.NSBitmapImageFileTypePNG, $.NSDictionary.dictionary)\n  if (!png.writeToFileAtomically(output, true)) throw new Error(\"Cannot write \" + output)\n}\n`\n"
+  ],
+  "mappings": ";;AAAA,kBAAS,uBAAgB;AACzB;AACA,0BAAkB;AAClB,0BAAS;;;ACHT;AACA;AACA;;;ACcO,eAAe,eAAe,CAAC,QAAsC;AAAA,EAC1E,MAAM,cAAc,IAAI,IAAI,oBAAoB,MAAM;AAAA,EACtD,MAAM,WAAoB,OAAO,MAAM,aAAa,WAAW,GAAG,KAAK;AAAA,EACvE,QAAQ,MAAM,UAAW,OAAO,aAAa,YAAY,aAAa,OAAO,WAAW,CAAC;AAAA,EAKzF,MAAM,UAAU,YAAY,OAAO,WAAW;AAAA,EAC9C,OAAO;AAAA,IACL,MAAM,OAAO,SAAS,YAAY,KAAK,KAAK,IAAI,KAAK,KAAK,IAAI;AAAA,IAC9D,MAAM,UAAU,IAAI,WAAW,OAAO,MAAM,aAAa,OAAO,GAAG,YAAY,CAAC,IAAI;AAAA,EACtF;AAAA;AAOK,SAAS,gBAAgB,CAAC,QAAwB;AAAA,EACvD,MAAM,SAAS,IAAI,IAAI,MAAM,EAAE,SAC5B,MAAM,GAAG,EACT,QAAQ,EACR,IAAI,CAAC,UAAU,MAAM,YAAY,EAAE,WAAW,eAAe,GAAG,CAAC,EACjE,OAAO,OAAO;AAAA,EACjB,QAAQ,OAAO,SAAS,IAAI,SAAS,CAAC,SAAS,GAAG,MAAM,GAAG,KAAK,GAAG;AAAA;AAKrE,SAAS,WAAW,CAAC,OAAgB,aAA8B;AAAA,EACjE,IAAI,OAA+E;AAAA,EACnF,WAAW,QAAQ,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,GAAG;AAAA,IACpD,IAAI,OAAO,SAAS,YAAY,SAAS;AAAA,MAAM;AAAA,IAC/C,QAAQ,KAAK,OAAO,MAAM,YAAY;AAAA,IACtC,IAAI,OAAO,QAAQ;AAAA,MAAU;AAAA,IAC7B,MAAM,MAAM,IAAI,IAAI,KAAK,WAAW;AAAA,IACpC,IAAI,SAAS,YAAY,CAAC,IAAI,SAAS,SAAS,MAAM,IAAI,SAAS;AAAA,MAAa;AAAA,IAEhF,MAAM,WAAW,OAAO,YAAY,YAAY,QAAQ,MAAM,KAAK,EAAE,SAAS,UAAU;AAAA,IACxF,MAAM,OAAO,KAAK,IAChB,GACA,IAAI,OAAO,UAAU,WAAW,MAAM,MAAM,KAAK,IAAI,CAAC,GAAG,IACvD,CAAC,UAAU,OAAO,SAAS,OAAO,EAAE,KAAK,CAC3C,CACF;AAAA,IACA,MAAM,OAAO,CAAC,WAAW,IAAI,GAAG,IAAI;AAAA,IACpC,IAAI,CAAC,QAAQ,KAAK,KAAK,KAAK,KAAK,MAAO,KAAK,OAAO,KAAK,KAAK,MAAM,KAAK,KAAK,KAAK,KAAK,IAAK;AAAA,MAC3F,OAAO,EAAE,KAAK,KAAK;AAAA,IACrB;AAAA,EACF;AAAA,EACA,OAAO,MAAM,OAAO;AAAA;AAGtB,eAAe,YAAY,CAAC,KAA6B;AAAA,EACvD,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,WAAW,MAAM,MAAM,GAAG;AAAA,IAC1B,OAAO,OAAO;AAAA,IACd,MAAM,IAAI,MACR,iCAAiC,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,aAChF,yFACJ;AAAA;AAAA,EAEF,IAAI,CAAC,SAAS;AAAA,IAAI,MAAM,IAAI,MAAM,iBAAiB,gBAAgB,SAAS,SAAS;AAAA,EACrF,OAAO;AAAA;;;AChFF,eAAe,GAAG,CAAC,SAA4B,SAAgC;AAAA,EACpF,MAAM,QAAQ,IAAI,MAAM,CAAC,GAAG,OAAO,GAAG;AAAA,IACpC,OAAO,CAAC,UAAU,UAAU,MAAM;AAAA,IAClC,SAAS;AAAA,EACX,CAAC;AAAA,EACD,OAAO,UAAU,UAAU,MAAM,QAAQ,IAAI,CAAC,MAAM,QAAQ,IAAI,SAAS,MAAM,MAAM,EAAE,KAAK,CAAC,CAAC;AAAA,EAC9F,IAAI,aAAa,GAAG;AAAA,IAClB,MAAM,IAAI,MAAM,iBAAiB,UAAU,OAAO,KAAK,IAAI;AAAA,EAAK,OAAO,KAAK,MAAM,IAAI;AAAA,EACxF;AAAA;;;ACFK,eAAe,WAAW,CAAC,KAAa,KAA4B;AAAA,EACzE,MAAM,IACJ,CAAC,aAAa,MAAM,cAAc,MAAM,iBAAiB,KAAK,GAAG,GACjE,gCACF;AAAA;AAMF,IAAM,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;AHUxB,IAAM,mBAAmB,cAAc,IAAI,IAAI,gBAAgB,YAAY,GAAG,CAAC;AAGxE,SAAS,UAAU,CAAC,aAAqB,MAA8B;AAAA,EAC5E,OAAO,KAAK,aAAa,SAAS,WAAW,IAAI;AAAA;AAO5C,eAAe,eAAe,CAAC,SAAmD;AAAA,EACvF,MAAM,WAAW,MAAM,gBAAgB,QAAQ,MAAM;AAAA,EACrD,MAAM,UAAU,MAAM,mBAAmB,QAAQ,WAAW;AAAA,EAC5D,MAAM,MAAM,WAAW,QAAQ,aAAa,KAAK;AAAA,EACjD,MAAM,GAAG,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EAC9C,MAAM,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AAAA,EAEpC,MAAM,SAAsB;AAAA,IAC1B,MAAM,SAAS;AAAA,IACf,QAAQ,IAAI,IAAI,QAAQ,MAAM,EAAE;AAAA,IAChC,WAAW,IAAI,IAAI,QAAQ,SAAS,EAAE;AAAA,EACxC;AAAA,EACA,MAAM,WAAW;AAAA,IACf,MAAM;AAAA,IAEN,aAAa,SAAS;AAAA,IACtB;AAAA,IACA,SAAS;AAAA,IACT,MAAM;AAAA,EACR;AAAA,EACA,MAAM,OAAO,SAAS,OAAO,MAAM,UAAU,KAAK,SAAS,IAAI,IAAI;AAAA,EACnE,MAAM,WAAW,MAAM,SAAS,KAAK,kBAAkB,YAAY,GAAG,OAAO;AAAA,EAC7E,MAAM,QAAQ,IAAI;AAAA,IAChB,UAAU,KAAK,KAAK,cAAc,GAAG,GAAG,KAAK,UAAU,UAAU,MAAM,CAAC;AAAA,CAAK;AAAA,IAC7E,UAAU,KAAK,KAAK,YAAY,GAAG,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC;AAAA,CAAK;AAAA,IACzE,UAAU,KAAK,KAAK,YAAY,GAAG,gBAAgB,UAAU,KAAK,QAAQ,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;AAAA,EAC3F,CAAC;AAAA,EAID,MAAM,IACJ;AAAA,IACE,QAAQ;AAAA,IACR;AAAA,IACA,KAAK,kBAAkB,SAAS;AAAA,IAChC,KAAK,kBAAkB,YAAY;AAAA,IACnC;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY;AAAA,EACd,GACA,sCACF;AAAA,EACA,OAAO,EAAE,KAAK,MAAM,SAAS,MAAM,SAAS,KAAK;AAAA;AAI5C,SAAS,eAAe,CAC7B,UACA,MACQ;AAAA,EACR,MAAM,UAAU,MAAM,KAAK,KAAK,KAAK,KAAK,CAAC,EAAE,IAAI,YAAY,KAAK;AAAA,EAClE,MAAM,SAAiC;AAAA,IACrC,MAAM,WAAW,KAAK,IAAI;AAAA,IAC1B,MAAM,WAAW,IAAI,IAAI,KAAK,MAAM,EAAE,IAAI;AAAA,IAC1C,QAAQ,WAAW,KAAK,MAAM;AAAA,IAE9B,MAAM,KAAK,OACP,+CACA,wCAAwC,WAAW,OAAO;AAAA,EAChE;AAAA,EACA,OAAO,SAAS,WAAW,kBAAkB,CAAC,QAAQ,QAAgB,OAAO,QAAQ,EAAE;AAAA;AAIzF,eAAe,SAAS,CAAC,KAAa,KAAkC;AAAA,EACtE,MAAM,OAAO,KAAK,KAAK,UAAU;AAAA,EACjC,IAAI,QAAQ,aAAa,UAAU;AAAA,IACjC,MAAM,UAAU,MAAM,GAAG;AAAA,IACzB,OAAO;AAAA,EACT;AAAA,EAEA,MAAM,SAAS,KAAK,KAAK,MAAM,iBAAiB;AAAA,EAChD,MAAM,UAAU,QAAQ,GAAG;AAAA,EAC3B,MAAM,YAAY,QAAQ,IAAI;AAAA,EAC9B,OAAO;AAAA;AAGT,eAAe,kBAAkB,CAAC,aAAsC;AAAA,EACtE,IAAI;AAAA,IACF,MAAM,WAAoB,KAAK,MAAM,MAAM,SAAS,KAAK,aAAa,cAAc,GAAG,OAAO,CAAC;AAAA,IAC/F,MAAM,UAAW,UAAoD;AAAA,IACrE,OAAO,OAAO,YAAY,WAAW,UAAU;AAAA,IAC/C,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AAIX,SAAS,UAAU,CAAC,OAAuB;AAAA,EACzC,OAAO,MACJ,WAAW,KAAK,OAAO,EACvB,WAAW,KAAK,MAAM,EACtB,WAAW,KAAK,MAAM,EACtB,WAAW,KAAK,QAAQ;AAAA;;;AD5G7B,IAAM,iBAAiB,cAAc,YAAY,GAAG;AAEpD,IAAM,kBAAkB,eAAc,IAAI,IAAI,uBAAuB,YAAY,GAAG,CAAC;AAG9E,eAAe,cAAc,CAAC,SAAoD;AAAA,EACvF,MAAM,MAAM,MAAM,gBAAgB,OAAO;AAAA,EAGzC,MAAM,MAAM,MAAK,QAAQ,IAAI,GAAG,GAAG,cAAc;AAAA,EACjD,MAAM,WAAW,IAAI,MAAM,CAAC,eAAe,GAAG,IAAI,GAAG,GAAG;AAAA,IACtD,OAAO,CAAC,UAAU,UAAU,IAAI,KAAK,GAAG,CAAC;AAAA,EAC3C,CAAC;AAAA,EACD,IAAI,UAAU;AAAA,EACd,MAAM,SAAS,SAAS,OAAO,KAAK,CAAC,SAAS;AAAA,IAC5C,IAAI,SAAS,KAAK,CAAC,SAAS;AAAA,MAC1B,QAAQ,MAAM,wDAAwD,aAAa,MAAM;AAAA,IAC3F;AAAA,IACA,OAAO;AAAA,GACR;AAAA,EACD,OAAO;AAAA,IACL;AAAA,IACA,OAAO,MAAM;AAAA,MACX,UAAU;AAAA,MACV,SAAS,KAAK;AAAA;AAAA,EAElB;AAAA;AAIK,eAAe,eAAe,CAAC,SAAmD;AAAA,EACvF,MAAM,MAAM,MAAM,gBAAgB,OAAO;AAAA,EACzC,MAAM,MAAM,WAAW,QAAQ,aAAa,MAAM;AAAA,EAClD,MAAM,IAAG,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EAE9C,MAAM,MAAM,QAAQ,aAAa;AAAA,EACjC,MAAM,WAAW,MAAM,kBAAkB,IAAI;AAAA,EAC7C,MAAM,WAAW,MAAM,WAAW;AAAA,IAChC,KAAK,IAAI;AAAA,IACT,MAAM,IAAI;AAAA,IACV;AAAA,IACA,aAAa,iBAAiB,QAAQ,MAAM;AAAA,IAC5C,YAAY,IAAI;AAAA,IAChB,iBAAkB,eAAe,uBAAuB,EACrD;AAAA,OACC,OAAO,IAAI,OAAO,EAAE,MAAM,MAAM,QAAQ,IAAI,IAAI,EAAE,IAAI,CAAC;AAAA,OAEvD,WAAW,EAAE,SAAS,CAAC,GAAG,aAAa,SAAS,IAAI,CAAC;AAAA,EAC3D,CAAC;AAAA,EACD,IAAI,CAAC;AAAA,IAAK,OAAO,EAAE,MAAM,UAAU,QAAQ,MAAM;AAAA,EAEjD,MAAM,QAAQ,MAAM,QAAQ,QAAQ,GAAG,KAAK,CAAC,UAAU,MAAM,SAAS,MAAM,CAAC;AAAA,EAC7E,IAAI,CAAC;AAAA,IAAM,MAAM,IAAI,MAAM,kDAAkD,WAAW;AAAA,EACxF,MAAM,SAAS,MAAK,UAAU,IAAI;AAAA,EAGlC,IAAI,CAAC,UAAU;AAAA,IACb,MAAM,IAAI,CAAC,YAAY,WAAW,UAAU,UAAU,KAAK,MAAM,GAAG,yBAAyB;AAAA,EAC/F;AAAA,EAEA,MAAM,MAAM,GAAG;AAAA,EACf,MAAM,IAAI,CAAC,SAAS,MAAM,MAAM,gBAAgB,QAAQ,GAAG,GAAG,wBAAwB;AAAA,EACtF,OAAO,EAAE,MAAM,KAAK,QAAQ,aAAa,KAAK;AAAA;AAOhD,SAAS,iBAAiB,GAIjB;AAAA,EACP,QAAQ,eAAe,kBAAkB,qBAAqB,QAAQ;AAAA,EACtE,IAAI,CAAC,iBAAiB,CAAC,oBAAoB,CAAC;AAAA,IAAkB,OAAO;AAAA,EACrE,IAAI,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,kBAAkB;AAAA,IAC5D,MAAM,IAAI,MACR,+FACE,kDACJ;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,aAAa;AAAA,IACb,eAAe;AAAA,IACf,gBAAgB;AAAA,EAClB;AAAA;AAQF,eAAe,OAAO,CAAC,KAA8B;AAAA,EACnD,MAAM,UAAU,QAAQ,QAAQ,GAAG,CAAC;AAAA,EACpC,MAAM,UAAU,MAAK,SAAS,cAAc;AAAA,EAC5C,MAAM,IAAG,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EAClD,MAAM,OAAM,OAAO;AAAA,EACnB,MAAM,QAAQ,CAAC,IAAI,IAAI,KAAK,KAAK,GAAG,EAAE,QAAQ,CAAC,WAAW;AAAA,IACxD,EAAE,MAAM,QAAQ,UAAU,cAAc,QAAQ,OAAO;AAAA,IACvD,EAAE,MAAM,QAAQ,UAAU,iBAAiB,QAAQ,SAAS,EAAE;AAAA,EAChE,CAAC;AAAA,EACD,MAAM,QAAQ,IACZ,MAAM,IAAI,GAAG,MAAM,aACjB,IACE,CAAC,QAAQ,MAAM,GAAG,UAAU,GAAG,UAAU,KAAK,SAAS,MAAK,SAAS,IAAI,CAAC,GAC1E,2BACF,CACF,CACF;AAAA,EACA,MAAM,OAAO,MAAK,SAAS,WAAW;AAAA,EACtC,MAAM,IAAI,CAAC,YAAY,MAAM,QAAQ,SAAS,MAAM,IAAI,GAAG,6BAA6B;AAAA,EACxF,OAAO;AAAA;AAST,eAAe,UAAU,CACvB,SACiB;AAAA,EACjB,MAAM,WAAW,IAAI,MACnB,CAAC,eAAe,GAAG,iBAAiB,KAAK,UAAU,KAAK,SAAS,OAAO,KAAK,CAAC,CAAC,GAC/E;AAAA,IACE,OAAO,CAAC,UAAU,WAAW,SAAS;AAAA,IAGtC,KAAK,KAAK,QAAQ,KAAK,sBAAsB,KAAK,kBAAkB,IAAI;AAAA,EAC1E,CACF;AAAA,EACA,IAAK,MAAM,SAAS,WAAY,GAAG;AAAA,IACjC,MAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AAAA,EACA,OAAO,WAAW,MAAM,QAAQ,QAAQ,GAAG;AAAA,EAC3C,IAAI,CAAC;AAAA,IAAS,MAAM,IAAI,MAAM,+CAA+C,QAAQ,MAAM;AAAA,EAC3F,OAAO,MAAK,QAAQ,KAAK,OAAO;AAAA;AAIlC,SAAS,cAAc,GAAW;AAAA,EAChC,IAAI;AAAA,IACF,OAAO,eAAe,UAAU;AAAA,IAChC,MAAM;AAAA,IACN,MAAM,cAAc,QAAQ,eAAe,QAAQ,uBAAuB,CAAC;AAAA,IAC3E,MAAM,IAAI,MACR,iFACE,uBAAuB,4CAC3B;AAAA;AAAA;",
+  "debugId": "AA1E41BFA25EB6CC64756E2164756E21",
+  "names": []
+}

package/dist/mac-icon.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Draws `png` the way macOS draws app icons, into `out`: on Apple's grid, a rounded square of 824
+ * pixels with continuous corners in a canvas of 1024, over the soft shadow Apple's own icons have.
+ * An icon drawn to its edges otherwise stands larger than every other icon in the Dock.
+ */
+export declare function drawMacIcon(png: string, out: string): Promise<void>;
+//# sourceMappingURL=mac-icon.d.ts.map

package/dist/mac-icon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mac-icon.d.ts","sourceRoot":"","sources":["../src/mac-icon.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKzE"}

package/dist/run.d.ts

@@ -0,0 +1,3 @@
+/** Runs a command to completion, quietly unless it fails: then it throws `failure` and its errors. */
+export declare function run(command: readonly string[], failure: string): Promise<void>;
+//# sourceMappingURL=run.d.ts.map

package/dist/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../src/run.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,wBAAsB,GAAG,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CASpF"}

package/dist/shell/bridge.d.ts

@@ -0,0 +1,16 @@
+/** The name a page finds the desktop app under, through `useDesktop` in `@sixb/client/hooks`. */
+export declare const DESKTOP_BRIDGE_NAME = "sixbDesktop";
+/**
+ * What the shell offers the page. `SixbDesktop` in `@sixb/client` is the page's view of this, and
+ * `tests/app.test.ts` holds the two together.
+ *
+ * The page is remote, and anything here is open to whatever runs in it. To offer more:
+ *  1. Add one narrow method here, calling `ipcRenderer.invoke`, never a general way to run a command
+ *     or read a file. The page asks; the person decides, in a native dialog, what it gets.
+ *  2. Handle it in `main.ts`, refusing any sender that `isAppUrl` does not accept.
+ *  3. Add it to `SixbDesktop` as optional, because a page can outlive the shell it runs in.
+ */
+export declare function desktopBridge<const Platform extends NodeJS.Platform>(platform: Platform): {
+    platform: Platform;
+};
+//# sourceMappingURL=bridge.d.ts.map

package/dist/shell/bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../src/shell/bridge.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,eAAO,MAAM,mBAAmB,gBAAgB,CAAA;AAEhD;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,KAAK,CAAC,QAAQ,SAAS,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ;;EAEvF"}

package/dist/shell/main.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=main.d.ts.map

package/dist/shell/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../src/shell/main.ts"],"names":[],"mappings":""}