@sixb/desktop 0.2.0 → 0.2.1

package/README.md

@@ -73,6 +73,28 @@ The session is an ordinary browser session, kept in the window's persistent cook
 launches open straight into the app. `src/shell/navigation.ts` holds those two decisions as a pure
 function; `src/shell/main.ts` wires them to the window.
 
+### Running the agent on this computer
+
+`writeDesktopApp` compiles the runner the CLI names into `.sixb/desktop/runner`, and packaging copies it
+to `Resources/runner`, outside the archive, because a program has to be a file of its own to run.
+
+```
+page ── useDesktop().computer ──▶ main.ts (isAppUrl, native dialogs) ──▶ src/shell/runner.ts
+                                                                          │ JSON lines, stdin/stdout
+project API ◀── sessions, turns, device sign-in ── sixb-runner ◀──────────┘
+```
+
+- **The runner holds the sign-in**, where `sixb login` keeps its own, which the agent's sandbox denies.
+  The keychain wouldn't do: `security find-generic-password` answers from inside the sandbox. The main
+  process only opens the approval page, if `isApiPage` accepts it.
+- **The window's sign-in is denied too.** It's a plain cookie in the app's data folder, so the shell names
+  that folder to the runner, whose sandboxes deny it.
+- **It can't outlive the app.** It ends with its stdin, and `before-quit` lets a running turn record its
+  end, within a limit. While the app is open it restarts after a wait that grows.
+- **The agent needs a runtime** for its own `sixb`. A `bun` script beside the runner stands in, last on
+  the PATH so that a person's own wins. The PATH comes from their login shell, as an app opened from the
+  Dock is given a bare one.
+
 ### Title bar
 
 On macOS the window has no title bar: the app draws to the top edge and the window controls float

package/dist/generate.d.ts

@@ -5,6 +5,11 @@ export interface DesktopAppOptions {
     readonly appUrl: string;
     /** The project's API. Its sign-in pages are where the window is approved. */
     readonly apiOrigin: string;
+    /**
+     * What the app compiles to run the agent on this computer: the CLI names its own, as this package
+     * doesn't depend on it. Without one, the app has no way to run the agent here: see `writeRunner`.
+     */
+    readonly runnerEntry?: string;
 }
 /** The Electron app `writeDesktopApp` generated, and what it is called. */
 export interface GeneratedApp {
@@ -14,13 +19,23 @@ export interface GeneratedApp {
     /** The app's icon in `dir`, when it declares one. */
     readonly icon: string | null;
 }
-/** Where a project's desktop app is generated (`app`) and packaged (`dist`). */
-export declare function desktopDir(projectRoot: string, part: "app" | "dist"): string;
+/**
+ * Where a project's desktop app is generated (`app`), what runs the agent is compiled (`runner`, beside
+ * the app as everything in the app's directory ships inside its archive), and it's packaged (`dist`).
+ */
+export declare function desktopDir(projectRoot: string, part: "app" | "dist" | "runner"): string;
 /**
  * Writes the Electron app that opens `appUrl` into the project's `.sixb/desktop/app`. The directory
  * is build-owned, like the rest of `.sixb`: it is cleared on every call.
  */
 export declare function writeDesktopApp(options: DesktopAppOptions): Promise<GeneratedApp>;
+/**
+ * Compiles what runs the agent into one program, so that the app needs nothing installed, and a `bun`
+ * beside it. The agent's own `sixb` runs on Bun or Node, which a person may have neither of, and the
+ * program can stand in for Bun: last on the PATH the shell gives it, after any they have. Returns its
+ * directory: null with no entry, and on Windows, which has no local sandbox to run the agent in.
+ */
+export declare function writeRunner(options: DesktopAppOptions): Promise<string | null>;
 /** The page the window shows while the app loads, and when it cannot reach the app. */
 export declare function renderShellPage(template: string, page: {
     readonly name: string;

package/dist/generate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../src/generate.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,iBAAiB;IAChC,gFAAgF;IAChF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,qGAAqG;IACrG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,6EAA6E;IAC7E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,2EAA2E;AAC3E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAKD,gFAAgF;AAChF,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CAE5E;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,CA4CvF;AAED,uFAAuF;AACvF,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAC/E,MAAM,CAYR"}
+{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../src/generate.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,iBAAiB;IAChC,gFAAgF;IAChF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,qGAAqG;IACrG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,6EAA6E;IAC7E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,2EAA2E;AAC3E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,qDAAqD;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAKD;;;GAGG;AACH,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,CAEvF;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,CA4CvF;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAqBpF;AAED,uFAAuF;AACvF,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAC/E,MAAM,CAYR"}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,iBAAiB,EAA+B,MAAM,YAAY,CAAA;AAIhF,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAEnD,MAAM,WAAW,aAAa;IAC5B,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IAChC,KAAK,IAAI,IAAI,CAAA;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,oFAAoF;IACpF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CACzB;AAMD,0EAA0E;AAC1E,wBAAsB,cAAc,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC,CAsBvF;AAED,qFAAqF;AACrF,wBAAsB,eAAe,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,CAiCvF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,KAAK,iBAAiB,EAA4C,MAAM,YAAY,CAAA;AAI7F,YAAY,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAEnD,MAAM,WAAW,aAAa;IAC5B,iEAAiE;IACjE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IAChC,KAAK,IAAI,IAAI,CAAA;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,oFAAoF;IACpF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CACzB;AAMD,0EAA0E;AAC1E,wBAAsB,cAAc,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC,CA2BvF;AAED,qFAAqF;AACrF,wBAAsB,eAAe,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,CAoCvF"}

package/dist/index.js

@@ -139,6 +139,9 @@ function run([input, output]) {
 }
 `;
 
+// src/shell/runner.ts
+var RUNNER_BINARY = "sixb-runner";
+
 // src/generate.ts
 var SHELL_SOURCE_DIR = fileURLToPath(new URL("../src/shell", import.meta.url));
 function desktopDir(projectRoot, part) {
@@ -183,6 +186,24 @@ async function writeDesktopApp(options) {
   ], "Could not compile the desktop shell.");
   return { dir, name: identity.name, version, icon };
 }
+async function writeRunner(options) {
+  const dir = desktopDir(options.projectRoot, "runner");
+  await rm(dir, { recursive: true, force: true });
+  if (!options.runnerEntry || process.platform === "win32")
+    return null;
+  await mkdir(dir, { recursive: true });
+  await run([
+    process.execPath,
+    "build",
+    "--compile",
+    options.runnerEntry,
+    `--outfile=${join(dir, RUNNER_BINARY)}`
+  ], "Could not compile what runs the agent.");
+  await writeFile(join(dir, "bun"), `#!/bin/sh
+BUN_BE_BUN=1 exec "$(dirname "$0")/${RUNNER_BINARY}" "$@"
+`, { mode: 493 });
+  return dir;
+}
 function renderShellPage(template, page) {
   const initial = Array.from(page.name.trim())[0]?.toUpperCase() ?? "";
   const markup = {
@@ -222,6 +243,9 @@ var packageRequire = createRequire(import.meta.url);
 var PACKAGER_SCRIPT = fileURLToPath2(new URL("../src/packager.mjs", import.meta.url));
 async function openDesktopApp(options) {
   const app = await writeDesktopApp(options);
+  await writeRunner(options).catch((error) => {
+    console.error("[SixbDesktop] Conversations will run in the cloud.", error);
+  });
   const log = join2(dirname(app.dir), "electron.log");
   const electron = Bun.spawn([electronBinary(), app.dir], {
     stdio: ["ignore", "ignore", Bun.file(log)]
@@ -243,6 +267,7 @@ async function openDesktopApp(options) {
 }
 async function buildDesktopApp(options) {
   const app = await writeDesktopApp(options);
+  const runner = await writeRunner(options);
   const out = desktopDir(options.projectRoot, "dist");
   await rm2(out, { recursive: true, force: true });
   const mac = process.platform === "darwin";
@@ -255,6 +280,7 @@ async function buildDesktopApp(options) {
     appVersion: app.version,
     electronVersion: packageRequire("electron/package.json").version,
     ...mac && app.icon ? { icon: await macIcon(app.icon) } : {},
+    ...runner ? { extraResource: [runner] } : {},
     ...notarize ? { osxSign: {}, osxNotarize: notarize } : {}
   });
   if (!mac)
@@ -315,7 +341,7 @@ function electronBinary() {
     return packageRequire("electron");
   } catch {
     const electronDir = dirname(packageRequire.resolve("electron/package.json"));
-    throw new Error("[SixbDesktop] Electron's binary is missing: its install script did not run. " + `Run \`bun run --cwd ${electronDir} postinstall\`, then try again.`);
+    throw new Error("[SixbDesktop] Electron's binary is missing: its install script did not run. " + `Run \`bun ${join2(electronDir, "install.js")}\`, then try again.`);
   }
 }
 export {
@@ -323,4 +349,4 @@ export {
   openDesktopApp
 };
 
-//# debugId=AA1E41BFA25EB6CC64756E2164756E21
+//# debugId=D20C8A734FA0DFE264756E2164756E21

package/dist/index.js.map

@@ -1,14 +1,15 @@
 {
   "version": 3,
-  "sources": ["../src/index.ts", "../src/generate.ts", "../src/identity.ts", "../src/run.ts", "../src/mac-icon.ts"],
+  "sources": ["../src/index.ts", "../src/generate.ts", "../src/identity.ts", "../src/run.ts", "../src/mac-icon.ts", "../src/shell/runner.ts"],
   "sourcesContent": [
-    "import { mkdir, readdir, rm } from \"node:fs/promises\"\nimport { createRequire } from \"node:module\"\nimport { dirname, join } from \"node:path\"\nimport { fileURLToPath } from \"node:url\"\nimport { type DesktopAppOptions, desktopDir, writeDesktopApp } from \"./generate\"\nimport { bundleIdentifier } from \"./identity\"\nimport { run } from \"./run\"\n\nexport type { DesktopAppOptions } from \"./generate\"\n\nexport interface DesktopWindow {\n  /** Resolves with Electron's exit code once the user quits it. */\n  readonly exited: Promise<number>\n  close(): void\n}\n\nexport interface DesktopBuild {\n  /** What to hand to users: a zip of the app on macOS, the app's folder elsewhere. */\n  readonly path: string\n  /** Whether it was signed and notarized, and so opens without a warning. */\n  readonly signed: boolean\n}\n\nconst packageRequire = createRequire(import.meta.url)\n// From the package's `src`, like the shell: see `SHELL_SOURCE_DIR`.\nconst PACKAGER_SCRIPT = fileURLToPath(new URL(\"../src/packager.mjs\", import.meta.url))\n\n/** Opens the app in a desktop window. `sixb dev --desktop` calls this. */\nexport async function openDesktopApp(options: DesktopAppOptions): Promise<DesktopWindow> {\n  const app = await writeDesktopApp(options)\n  // Chromium writes plenty to stderr when all is well, so it goes to a file, named if the window\n  // quits on its own with an error.\n  const log = join(dirname(app.dir), \"electron.log\")\n  const electron = Bun.spawn([electronBinary(), app.dir], {\n    stdio: [\"ignore\", \"ignore\", Bun.file(log)],\n  })\n  let closing = false\n  const exited = electron.exited.then((code) => {\n    if (code !== 0 && !closing) {\n      console.error(`[SixbDesktop] The desktop window quit with exit code ${code}. See ${log}.`)\n    }\n    return code\n  })\n  return {\n    exited,\n    close: () => {\n      closing = true\n      electron.kill()\n    },\n  }\n}\n\n/** Packages the app for this machine's platform. `sixb desktop build` calls this. */\nexport async function buildDesktopApp(options: DesktopAppOptions): Promise<DesktopBuild> {\n  const app = await writeDesktopApp(options)\n  const out = desktopDir(options.projectRoot, \"dist\")\n  await rm(out, { recursive: true, force: true })\n\n  const mac = process.platform === \"darwin\"\n  const notarize = mac ? appleNotarization() : null\n  const packaged = await packageApp({\n    dir: app.dir,\n    name: app.name,\n    out,\n    appBundleId: bundleIdentifier(options.appUrl),\n    appVersion: app.version,\n    electronVersion: (packageRequire(\"electron/package.json\") as { readonly version: string })\n      .version,\n    ...(mac && app.icon ? { icon: await macIcon(app.icon) } : {}),\n    // Signs with the Developer ID certificate in the keychain, which notarization requires.\n    ...(notarize ? { osxSign: {}, osxNotarize: notarize } : {}),\n  })\n  if (!mac) return { path: packaged, signed: false }\n\n  const name = (await readdir(packaged)).find((entry) => entry.endsWith(\".app\"))\n  if (!name) throw new Error(`[SixbDesktop] The packaged app is missing from ${packaged}.`)\n  const bundle = join(packaged, name)\n  // Packaging breaks the ad-hoc signature Electron ships with. macOS calls a downloaded app with a\n  // broken signature damaged, and offers no way to open it; signed ad hoc, it can be allowed.\n  if (!notarize) {\n    await run([\"codesign\", \"--force\", \"--deep\", \"--sign\", \"-\", bundle], \"Could not sign the app.\")\n  }\n  // `ditto`, not `zip`: it keeps the bundle's symlinks, and with them its signature.\n  const zip = `${packaged}.zip`\n  await run([\"ditto\", \"-c\", \"-k\", \"--keepParent\", bundle, zip], \"Could not zip the app.\")\n  return { path: zip, signed: notarize !== null }\n}\n\n/**\n * An App Store Connect API key, which notarizes the app so macOS opens it without a warning.\n * Without one, the app is built unsigned.\n */\nfunction appleNotarization(): {\n  readonly appleApiKey: string\n  readonly appleApiKeyId: string\n  readonly appleApiIssuer: string\n} | null {\n  const { APPLE_API_KEY, APPLE_API_KEY_ID, APPLE_API_ISSUER } = process.env\n  if (!APPLE_API_KEY && !APPLE_API_KEY_ID && !APPLE_API_ISSUER) return null\n  if (!APPLE_API_KEY || !APPLE_API_KEY_ID || !APPLE_API_ISSUER) {\n    throw new Error(\n      \"[SixbDesktop] Set all of APPLE_API_KEY, APPLE_API_KEY_ID and APPLE_API_ISSUER to sign the \" +\n        \"macOS app, or none of them to build it unsigned.\"\n    )\n  }\n  return {\n    appleApiKey: APPLE_API_KEY,\n    appleApiKeyId: APPLE_API_KEY_ID,\n    appleApiIssuer: APPLE_API_ISSUER,\n  }\n}\n\n/**\n * The packager wants `.icns`: every size macOS shows, scaled from the 1024-pixel icon, in one file.\n * `sips` and `iconutil` ship with every Mac. Written beside the app, not in it: everything in the\n * app's directory ships inside the bundle.\n */\nasync function macIcon(png: string): Promise<string> {\n  const desktop = dirname(dirname(png))\n  const iconset = join(desktop, \"icon.iconset\")\n  await rm(iconset, { recursive: true, force: true })\n  await mkdir(iconset)\n  const sizes = [16, 32, 128, 256, 512].flatMap((points) => [\n    { name: `icon_${points}x${points}.png`, pixels: points },\n    { name: `icon_${points}x${points}@2x.png`, pixels: points * 2 },\n  ])\n  await Promise.all(\n    sizes.map(({ name, pixels }) =>\n      run(\n        [\"sips\", \"-z\", `${pixels}`, `${pixels}`, png, \"--out\", join(iconset, name)],\n        \"Could not scale the icon.\"\n      )\n    )\n  )\n  const icns = join(desktop, \"icon.icns\")\n  await run([\"iconutil\", \"-c\", \"icns\", iconset, \"-o\", icns], \"Could not convert the icon.\")\n  return icns\n}\n\n/**\n * Runs `@electron/packager` into `options.out`, which starts empty, and resolves with the one\n * directory it wrote there. Under Electron's own binary, which doubles as the Node the packager was\n * written for: under Bun, the packager fails whenever it verifies a download (its checksum\n * dependency does not load).\n */\nasync function packageApp(\n  options: { readonly out: string } & Record<string, unknown>\n): Promise<string> {\n  const packager = Bun.spawn(\n    [electronBinary(), PACKAGER_SCRIPT, JSON.stringify({ ...options, quiet: true })],\n    {\n      stdio: [\"ignore\", \"inherit\", \"inherit\"],\n      // Without the second, Electron's file system reads the `app.asar` the packager writes as a\n      // directory.\n      env: { ...process.env, ELECTRON_RUN_AS_NODE: \"1\", ELECTRON_NO_ASAR: \"1\" },\n    }\n  )\n  if ((await packager.exited) !== 0) {\n    throw new Error(\"[SixbDesktop] Packaging failed. See the output above.\")\n  }\n  const [written] = await readdir(options.out)\n  if (!written) throw new Error(`[SixbDesktop] The packager wrote nothing to ${options.out}.`)\n  return join(options.out, written)\n}\n\n// Outside Electron, `require(\"electron\")` is the path of the binary its install script fetched.\nfunction electronBinary(): string {\n  try {\n    return packageRequire(\"electron\") as string\n  } catch {\n    const electronDir = dirname(packageRequire.resolve(\"electron/package.json\"))\n    throw new Error(\n      \"[SixbDesktop] Electron's binary is missing: its install script did not run. \" +\n        `Run \\`bun run --cwd ${electronDir} postinstall\\`, then try again.`\n    )\n  }\n}\n",
-    "import { mkdir, readFile, rm, writeFile } from \"node:fs/promises\"\nimport { join } from \"node:path\"\nimport { fileURLToPath } from \"node:url\"\nimport { readAppIdentity } from \"./identity\"\nimport { drawMacIcon } from \"./mac-icon\"\nimport { run } from \"./run\"\nimport type { ShellConfig } from \"./shell/navigation\"\n\nexport interface DesktopAppOptions {\n  /** The Sixb project. The desktop app is generated under its `.sixb/desktop`. */\n  readonly projectRoot: string\n  /** Where the app is served. The window opens it; the desktop app takes its name and icon from it. */\n  readonly appUrl: string\n  /** The project's API. Its sign-in pages are where the window is approved. */\n  readonly apiOrigin: string\n}\n\n/** The Electron app `writeDesktopApp` generated, and what it is called. */\nexport interface GeneratedApp {\n  readonly dir: string\n  readonly name: string\n  readonly version: string\n  /** The app's icon in `dir`, when it declares one. */\n  readonly icon: string | null\n}\n\n// Read from the package's `src`, which ships, whether this module runs from `src` or `dist`.\nconst SHELL_SOURCE_DIR = fileURLToPath(new URL(\"../src/shell\", import.meta.url))\n\n/** Where a project's desktop app is generated (`app`) and packaged (`dist`). */\nexport function desktopDir(projectRoot: string, part: \"app\" | \"dist\"): string {\n  return join(projectRoot, \".sixb\", \"desktop\", part)\n}\n\n/**\n * Writes the Electron app that opens `appUrl` into the project's `.sixb/desktop/app`. The directory\n * is build-owned, like the rest of `.sixb`: it is cleared on every call.\n */\nexport async function writeDesktopApp(options: DesktopAppOptions): Promise<GeneratedApp> {\n  const identity = await readAppIdentity(options.appUrl)\n  const version = await readProjectVersion(options.projectRoot)\n  const dir = desktopDir(options.projectRoot, \"app\")\n  await rm(dir, { recursive: true, force: true })\n  await mkdir(dir, { recursive: true })\n\n  const config: ShellConfig = {\n    name: identity.name,\n    appUrl: new URL(options.appUrl).href,\n    apiOrigin: new URL(options.apiOrigin).origin,\n  }\n  const manifest = {\n    name: \"sixb-desktop-app\",\n    // Names the folder the window's cookies are kept in, so each app has its own sign-in.\n    productName: identity.name,\n    version,\n    private: true,\n    main: \"main.js\",\n  }\n  const icon = identity.icon ? await writeIcon(dir, identity.icon) : null\n  const template = await readFile(join(SHELL_SOURCE_DIR, \"index.html\"), \"utf-8\")\n  await Promise.all([\n    writeFile(join(dir, \"package.json\"), `${JSON.stringify(manifest, null, 2)}\\n`),\n    writeFile(join(dir, \"shell.json\"), `${JSON.stringify(config, null, 2)}\\n`),\n    writeFile(join(dir, \"index.html\"), renderShellPage(template, { ...config, icon: !!icon })),\n  ])\n\n  // Electron loads plain JavaScript. A child process, because an in-process `Bun.build()` that\n  // wedges takes its caller down with it.\n  await run(\n    [\n      process.execPath,\n      \"build\",\n      join(SHELL_SOURCE_DIR, \"main.ts\"),\n      join(SHELL_SOURCE_DIR, \"preload.ts\"),\n      \"--target=node\",\n      \"--format=cjs\",\n      \"--external=electron\",\n      `--outdir=${dir}`,\n    ],\n    \"Could not compile the desktop shell.\"\n  )\n  return { dir, name: identity.name, version, icon }\n}\n\n/** The page the window shows while the app loads, and when it cannot reach the app. */\nexport function renderShellPage(\n  template: string,\n  page: { readonly name: string; readonly appUrl: string; readonly icon: boolean }\n): string {\n  const initial = Array.from(page.name.trim())[0]?.toUpperCase() ?? \"\"\n  const markup: Record<string, string> = {\n    name: escapeHtml(page.name),\n    host: escapeHtml(new URL(page.appUrl).host),\n    appUrl: escapeHtml(page.appUrl),\n    // The app's icon, or the first letter of its name standing in for one.\n    mark: page.icon\n      ? '<img class=\"mark\" src=\"icon.png\" alt=\"\" />'\n      : `<div class=\"mark\" aria-hidden=\"true\">${escapeHtml(initial)}</div>`,\n  }\n  return template.replaceAll(/\\{\\{(\\w+)\\}\\}/g, (_match, key: string) => markup[key] ?? \"\")\n}\n\n/** Writes the app's icon into `dir` as `icon.png`; on macOS, drawn the way macOS draws app icons. */\nasync function writeIcon(dir: string, png: Uint8Array): Promise<string> {\n  const icon = join(dir, \"icon.png\")\n  if (process.platform !== \"darwin\") {\n    await writeFile(icon, png)\n    return icon\n  }\n  // The original goes beside the app, not in it: everything in the app's directory ships.\n  const source = join(dir, \"..\", \"icon-source.png\")\n  await writeFile(source, png)\n  await drawMacIcon(source, icon)\n  return icon\n}\n\nasync function readProjectVersion(projectRoot: string): Promise<string> {\n  try {\n    const manifest: unknown = JSON.parse(await readFile(join(projectRoot, \"package.json\"), \"utf-8\"))\n    const version = (manifest as { readonly version?: unknown } | null)?.version\n    return typeof version === \"string\" ? version : \"0.0.0\"\n  } catch {\n    return \"0.0.0\"\n  }\n}\n\nfunction escapeHtml(value: string): string {\n  return value\n    .replaceAll(\"&\", \"&amp;\")\n    .replaceAll(\"<\", \"&lt;\")\n    .replaceAll(\">\", \"&gt;\")\n    .replaceAll('\"', \"&quot;\")\n}\n",
+    "import { mkdir, readdir, rm } from \"node:fs/promises\"\nimport { createRequire } from \"node:module\"\nimport { dirname, join } from \"node:path\"\nimport { fileURLToPath } from \"node:url\"\nimport { type DesktopAppOptions, desktopDir, writeDesktopApp, writeRunner } from \"./generate\"\nimport { bundleIdentifier } from \"./identity\"\nimport { run } from \"./run\"\n\nexport type { DesktopAppOptions } from \"./generate\"\n\nexport interface DesktopWindow {\n  /** Resolves with Electron's exit code once the user quits it. */\n  readonly exited: Promise<number>\n  close(): void\n}\n\nexport interface DesktopBuild {\n  /** What to hand to users: a zip of the app on macOS, the app's folder elsewhere. */\n  readonly path: string\n  /** Whether it was signed and notarized, and so opens without a warning. */\n  readonly signed: boolean\n}\n\nconst packageRequire = createRequire(import.meta.url)\n// From the package's `src`, like the shell: see `SHELL_SOURCE_DIR`.\nconst PACKAGER_SCRIPT = fileURLToPath(new URL(\"../src/packager.mjs\", import.meta.url))\n\n/** Opens the app in a desktop window. `sixb dev --desktop` calls this. */\nexport async function openDesktopApp(options: DesktopAppOptions): Promise<DesktopWindow> {\n  const app = await writeDesktopApp(options)\n  // The window is still worth opening without it, for a project not using the agent: conversations\n  // run in the cloud. A build, which people get, fails instead.\n  await writeRunner(options).catch((error: unknown) => {\n    console.error(\"[SixbDesktop] Conversations will run in the cloud.\", error)\n  })\n  // Chromium writes plenty to stderr when all is well, so it goes to a file, named if the window\n  // quits on its own with an error.\n  const log = join(dirname(app.dir), \"electron.log\")\n  const electron = Bun.spawn([electronBinary(), app.dir], {\n    stdio: [\"ignore\", \"ignore\", Bun.file(log)],\n  })\n  let closing = false\n  const exited = electron.exited.then((code) => {\n    if (code !== 0 && !closing) {\n      console.error(`[SixbDesktop] The desktop window quit with exit code ${code}. See ${log}.`)\n    }\n    return code\n  })\n  return {\n    exited,\n    close: () => {\n      closing = true\n      electron.kill()\n    },\n  }\n}\n\n/** Packages the app for this machine's platform. `sixb desktop build` calls this. */\nexport async function buildDesktopApp(options: DesktopAppOptions): Promise<DesktopBuild> {\n  const app = await writeDesktopApp(options)\n  const runner = await writeRunner(options)\n  const out = desktopDir(options.projectRoot, \"dist\")\n  await rm(out, { recursive: true, force: true })\n\n  const mac = process.platform === \"darwin\"\n  const notarize = mac ? appleNotarization() : null\n  const packaged = await packageApp({\n    dir: app.dir,\n    name: app.name,\n    out,\n    appBundleId: bundleIdentifier(options.appUrl),\n    appVersion: app.version,\n    electronVersion: (packageRequire(\"electron/package.json\") as { readonly version: string })\n      .version,\n    ...(mac && app.icon ? { icon: await macIcon(app.icon) } : {}),\n    // Beside the app's archive, not in it: a program has to be a file of its own to run.\n    ...(runner ? { extraResource: [runner] } : {}),\n    // Signs with the Developer ID certificate in the keychain, which notarization requires.\n    ...(notarize ? { osxSign: {}, osxNotarize: notarize } : {}),\n  })\n  if (!mac) return { path: packaged, signed: false }\n\n  const name = (await readdir(packaged)).find((entry) => entry.endsWith(\".app\"))\n  if (!name) throw new Error(`[SixbDesktop] The packaged app is missing from ${packaged}.`)\n  const bundle = join(packaged, name)\n  // Packaging breaks the ad-hoc signature Electron ships with. macOS calls a downloaded app with a\n  // broken signature damaged, and offers no way to open it; signed ad hoc, it can be allowed.\n  if (!notarize) {\n    await run([\"codesign\", \"--force\", \"--deep\", \"--sign\", \"-\", bundle], \"Could not sign the app.\")\n  }\n  // `ditto`, not `zip`: it keeps the bundle's symlinks, and with them its signature.\n  const zip = `${packaged}.zip`\n  await run([\"ditto\", \"-c\", \"-k\", \"--keepParent\", bundle, zip], \"Could not zip the app.\")\n  return { path: zip, signed: notarize !== null }\n}\n\n/**\n * An App Store Connect API key, which notarizes the app so macOS opens it without a warning.\n * Without one, the app is built unsigned.\n */\nfunction appleNotarization(): {\n  readonly appleApiKey: string\n  readonly appleApiKeyId: string\n  readonly appleApiIssuer: string\n} | null {\n  const { APPLE_API_KEY, APPLE_API_KEY_ID, APPLE_API_ISSUER } = process.env\n  if (!APPLE_API_KEY && !APPLE_API_KEY_ID && !APPLE_API_ISSUER) return null\n  if (!APPLE_API_KEY || !APPLE_API_KEY_ID || !APPLE_API_ISSUER) {\n    throw new Error(\n      \"[SixbDesktop] Set all of APPLE_API_KEY, APPLE_API_KEY_ID and APPLE_API_ISSUER to sign the \" +\n        \"macOS app, or none of them to build it unsigned.\"\n    )\n  }\n  return {\n    appleApiKey: APPLE_API_KEY,\n    appleApiKeyId: APPLE_API_KEY_ID,\n    appleApiIssuer: APPLE_API_ISSUER,\n  }\n}\n\n/**\n * The packager wants `.icns`: every size macOS shows, scaled from the 1024-pixel icon, in one file.\n * `sips` and `iconutil` ship with every Mac. Written beside the app, not in it: everything in the\n * app's directory ships inside the bundle.\n */\nasync function macIcon(png: string): Promise<string> {\n  const desktop = dirname(dirname(png))\n  const iconset = join(desktop, \"icon.iconset\")\n  await rm(iconset, { recursive: true, force: true })\n  await mkdir(iconset)\n  const sizes = [16, 32, 128, 256, 512].flatMap((points) => [\n    { name: `icon_${points}x${points}.png`, pixels: points },\n    { name: `icon_${points}x${points}@2x.png`, pixels: points * 2 },\n  ])\n  await Promise.all(\n    sizes.map(({ name, pixels }) =>\n      run(\n        [\"sips\", \"-z\", `${pixels}`, `${pixels}`, png, \"--out\", join(iconset, name)],\n        \"Could not scale the icon.\"\n      )\n    )\n  )\n  const icns = join(desktop, \"icon.icns\")\n  await run([\"iconutil\", \"-c\", \"icns\", iconset, \"-o\", icns], \"Could not convert the icon.\")\n  return icns\n}\n\n/**\n * Runs `@electron/packager` into `options.out`, which starts empty, and resolves with the one\n * directory it wrote there. Under Electron's own binary, which doubles as the Node the packager was\n * written for: under Bun, the packager fails whenever it verifies a download (its checksum\n * dependency does not load).\n */\nasync function packageApp(\n  options: { readonly out: string } & Record<string, unknown>\n): Promise<string> {\n  const packager = Bun.spawn(\n    [electronBinary(), PACKAGER_SCRIPT, JSON.stringify({ ...options, quiet: true })],\n    {\n      stdio: [\"ignore\", \"inherit\", \"inherit\"],\n      // Without the second, Electron's file system reads the `app.asar` the packager writes as a\n      // directory.\n      env: { ...process.env, ELECTRON_RUN_AS_NODE: \"1\", ELECTRON_NO_ASAR: \"1\" },\n    }\n  )\n  if ((await packager.exited) !== 0) {\n    throw new Error(\"[SixbDesktop] Packaging failed. See the output above.\")\n  }\n  const [written] = await readdir(options.out)\n  if (!written) throw new Error(`[SixbDesktop] The packager wrote nothing to ${options.out}.`)\n  return join(options.out, written)\n}\n\n// Outside Electron, `require(\"electron\")` is the path of the binary its install script fetched.\nfunction electronBinary(): string {\n  try {\n    return packageRequire(\"electron\") as string\n  } catch {\n    const electronDir = dirname(packageRequire.resolve(\"electron/package.json\"))\n    throw new Error(\n      \"[SixbDesktop] Electron's binary is missing: its install script did not run. \" +\n        `Run \\`bun ${join(electronDir, \"install.js\")}\\`, then try again.`\n    )\n  }\n}\n",
+    "import { mkdir, readFile, rm, writeFile } from \"node:fs/promises\"\nimport { join } from \"node:path\"\nimport { fileURLToPath } from \"node:url\"\nimport { readAppIdentity } from \"./identity\"\nimport { drawMacIcon } from \"./mac-icon\"\nimport { run } from \"./run\"\nimport type { ShellConfig } from \"./shell/navigation\"\nimport { RUNNER_BINARY } from \"./shell/runner\"\n\nexport interface DesktopAppOptions {\n  /** The Sixb project. The desktop app is generated under its `.sixb/desktop`. */\n  readonly projectRoot: string\n  /** Where the app is served. The window opens it; the desktop app takes its name and icon from it. */\n  readonly appUrl: string\n  /** The project's API. Its sign-in pages are where the window is approved. */\n  readonly apiOrigin: string\n  /**\n   * What the app compiles to run the agent on this computer: the CLI names its own, as this package\n   * doesn't depend on it. Without one, the app has no way to run the agent here: see `writeRunner`.\n   */\n  readonly runnerEntry?: string\n}\n\n/** The Electron app `writeDesktopApp` generated, and what it is called. */\nexport interface GeneratedApp {\n  readonly dir: string\n  readonly name: string\n  readonly version: string\n  /** The app's icon in `dir`, when it declares one. */\n  readonly icon: string | null\n}\n\n// Read from the package's `src`, which ships, whether this module runs from `src` or `dist`.\nconst SHELL_SOURCE_DIR = fileURLToPath(new URL(\"../src/shell\", import.meta.url))\n\n/**\n * Where a project's desktop app is generated (`app`), what runs the agent is compiled (`runner`, beside\n * the app as everything in the app's directory ships inside its archive), and it's packaged (`dist`).\n */\nexport function desktopDir(projectRoot: string, part: \"app\" | \"dist\" | \"runner\"): string {\n  return join(projectRoot, \".sixb\", \"desktop\", part)\n}\n\n/**\n * Writes the Electron app that opens `appUrl` into the project's `.sixb/desktop/app`. The directory\n * is build-owned, like the rest of `.sixb`: it is cleared on every call.\n */\nexport async function writeDesktopApp(options: DesktopAppOptions): Promise<GeneratedApp> {\n  const identity = await readAppIdentity(options.appUrl)\n  const version = await readProjectVersion(options.projectRoot)\n  const dir = desktopDir(options.projectRoot, \"app\")\n  await rm(dir, { recursive: true, force: true })\n  await mkdir(dir, { recursive: true })\n\n  const config: ShellConfig = {\n    name: identity.name,\n    appUrl: new URL(options.appUrl).href,\n    apiOrigin: new URL(options.apiOrigin).origin,\n  }\n  const manifest = {\n    name: \"sixb-desktop-app\",\n    // Names the folder the window's cookies are kept in, so each app has its own sign-in.\n    productName: identity.name,\n    version,\n    private: true,\n    main: \"main.js\",\n  }\n  const icon = identity.icon ? await writeIcon(dir, identity.icon) : null\n  const template = await readFile(join(SHELL_SOURCE_DIR, \"index.html\"), \"utf-8\")\n  await Promise.all([\n    writeFile(join(dir, \"package.json\"), `${JSON.stringify(manifest, null, 2)}\\n`),\n    writeFile(join(dir, \"shell.json\"), `${JSON.stringify(config, null, 2)}\\n`),\n    writeFile(join(dir, \"index.html\"), renderShellPage(template, { ...config, icon: !!icon })),\n  ])\n\n  // Electron loads plain JavaScript. A child process, because an in-process `Bun.build()` that\n  // wedges takes its caller down with it.\n  await run(\n    [\n      process.execPath,\n      \"build\",\n      join(SHELL_SOURCE_DIR, \"main.ts\"),\n      join(SHELL_SOURCE_DIR, \"preload.ts\"),\n      \"--target=node\",\n      \"--format=cjs\",\n      \"--external=electron\",\n      `--outdir=${dir}`,\n    ],\n    \"Could not compile the desktop shell.\"\n  )\n  return { dir, name: identity.name, version, icon }\n}\n\n/**\n * Compiles what runs the agent into one program, so that the app needs nothing installed, and a `bun`\n * beside it. The agent's own `sixb` runs on Bun or Node, which a person may have neither of, and the\n * program can stand in for Bun: last on the PATH the shell gives it, after any they have. Returns its\n * directory: null with no entry, and on Windows, which has no local sandbox to run the agent in.\n */\nexport async function writeRunner(options: DesktopAppOptions): Promise<string | null> {\n  const dir = desktopDir(options.projectRoot, \"runner\")\n  await rm(dir, { recursive: true, force: true })\n  if (!options.runnerEntry || process.platform === \"win32\") return null\n  await mkdir(dir, { recursive: true })\n  await run(\n    [\n      process.execPath,\n      \"build\",\n      \"--compile\",\n      options.runnerEntry,\n      `--outfile=${join(dir, RUNNER_BINARY)}`,\n    ],\n    \"Could not compile what runs the agent.\"\n  )\n  await writeFile(\n    join(dir, \"bun\"),\n    `#!/bin/sh\\nBUN_BE_BUN=1 exec \"$(dirname \"$0\")/${RUNNER_BINARY}\" \"$@\"\\n`,\n    { mode: 0o755 }\n  )\n  return dir\n}\n\n/** The page the window shows while the app loads, and when it cannot reach the app. */\nexport function renderShellPage(\n  template: string,\n  page: { readonly name: string; readonly appUrl: string; readonly icon: boolean }\n): string {\n  const initial = Array.from(page.name.trim())[0]?.toUpperCase() ?? \"\"\n  const markup: Record<string, string> = {\n    name: escapeHtml(page.name),\n    host: escapeHtml(new URL(page.appUrl).host),\n    appUrl: escapeHtml(page.appUrl),\n    // The app's icon, or the first letter of its name standing in for one.\n    mark: page.icon\n      ? '<img class=\"mark\" src=\"icon.png\" alt=\"\" />'\n      : `<div class=\"mark\" aria-hidden=\"true\">${escapeHtml(initial)}</div>`,\n  }\n  return template.replaceAll(/\\{\\{(\\w+)\\}\\}/g, (_match, key: string) => markup[key] ?? \"\")\n}\n\n/** Writes the app's icon into `dir` as `icon.png`; on macOS, drawn the way macOS draws app icons. */\nasync function writeIcon(dir: string, png: Uint8Array): Promise<string> {\n  const icon = join(dir, \"icon.png\")\n  if (process.platform !== \"darwin\") {\n    await writeFile(icon, png)\n    return icon\n  }\n  // The original goes beside the app, not in it: everything in the app's directory ships.\n  const source = join(dir, \"..\", \"icon-source.png\")\n  await writeFile(source, png)\n  await drawMacIcon(source, icon)\n  return icon\n}\n\nasync function readProjectVersion(projectRoot: string): Promise<string> {\n  try {\n    const manifest: unknown = JSON.parse(await readFile(join(projectRoot, \"package.json\"), \"utf-8\"))\n    const version = (manifest as { readonly version?: unknown } | null)?.version\n    return typeof version === \"string\" ? version : \"0.0.0\"\n  } catch {\n    return \"0.0.0\"\n  }\n}\n\nfunction escapeHtml(value: string): string {\n  return value\n    .replaceAll(\"&\", \"&amp;\")\n    .replaceAll(\"<\", \"&lt;\")\n    .replaceAll(\">\", \"&gt;\")\n    .replaceAll('\"', \"&quot;\")\n}\n",
     "/** What the desktop app takes from the web app it opens. */\nexport interface AppIdentity {\n  /** The app's name: `metadata.title` in `app/layout.tsx`. */\n  readonly name: string\n  /**\n   * The app's maskable icon, such as `app/public/icon-maskable-512.png`, or else its largest PNG\n   * icon, such as `app/public/icon-512.png`.\n   */\n  readonly icon: Uint8Array | null\n}\n\n/**\n * Reads the app's web app manifest, the one a browser installs the app from. The desktop app is\n * the same app installed another way, so it takes the same name and icon and has no settings of\n * its own.\n */\nexport async function readAppIdentity(appUrl: string): Promise<AppIdentity> {\n  const manifestUrl = new URL(\"/app.webmanifest\", appUrl)\n  const manifest: unknown = await (await fetchFromApp(manifestUrl)).json()\n  const { name, icons } = (typeof manifest === \"object\" && manifest !== null ? manifest : {}) as {\n    readonly name?: unknown\n    readonly icons?: unknown\n  }\n\n  const iconUrl = desktopIcon(icons, manifestUrl)\n  return {\n    name: typeof name === \"string\" && name.trim() ? name.trim() : \"Sixb\",\n    icon: iconUrl ? new Uint8Array(await (await fetchFromApp(iconUrl)).arrayBuffer()) : null,\n  }\n}\n\n/**\n * The app's id on the desktop, from the address it opens: `https://orders.acme.com` becomes\n * `com.acme.orders`. Each deployment gets its own, so a staging build installs beside production.\n */\nexport function bundleIdentifier(appUrl: string): string {\n  const labels = new URL(appUrl).hostname\n    .split(\".\")\n    .reverse()\n    .map((label) => label.toLowerCase().replaceAll(/[^a-z0-9-]/g, \"-\"))\n    .filter(Boolean)\n  return (labels.length > 1 ? labels : [\"local\", ...labels]).join(\".\")\n}\n\n// A maskable icon is drawn to its edges for a platform to cut its own shape from, which is what\n// macOS does with it. Any other icon may carry its own shape and margins.\nfunction desktopIcon(icons: unknown, manifestUrl: URL): URL | null {\n  let best: { readonly url: URL; readonly rank: readonly [number, number] } | null = null\n  for (const icon of Array.isArray(icons) ? icons : []) {\n    if (typeof icon !== \"object\" || icon === null) continue\n    const { src, sizes, type, purpose } = icon as Record<string, unknown>\n    if (typeof src !== \"string\") continue\n    const url = new URL(src, manifestUrl)\n    if (type === undefined ? !url.pathname.endsWith(\".png\") : type !== \"image/png\") continue\n\n    const maskable = typeof purpose === \"string\" && purpose.split(/\\s+/).includes(\"maskable\")\n    const size = Math.max(\n      0,\n      ...(typeof sizes === \"string\" ? sizes.split(/\\s+/) : []).map(\n        (entry) => Number.parseInt(entry, 10) || 0\n      )\n    )\n    const rank = [maskable ? 1 : 0, size] as const\n    if (!best || rank[0] > best.rank[0] || (rank[0] === best.rank[0] && rank[1] > best.rank[1])) {\n      best = { url, rank }\n    }\n  }\n  return best?.url ?? null\n}\n\nasync function fetchFromApp(url: URL): Promise<Response> {\n  let response: Response\n  try {\n    response = await fetch(url)\n  } catch (error) {\n    throw new Error(\n      `[SixbDesktop] Could not reach ${url} (${error instanceof Error ? error.message : error}). ` +\n        \"The desktop app takes its name and icon from the app, so the app must be running there.\"\n    )\n  }\n  if (!response.ok) throw new Error(`[SixbDesktop] ${url} answered ${response.status}.`)\n  return response\n}\n",
     "/** Runs a command to completion, quietly unless it fails: then it throws `failure` and its errors. */\nexport async function run(command: readonly string[], failure: string): Promise<void> {\n  const child = Bun.spawn([...command], {\n    stdio: [\"ignore\", \"ignore\", \"pipe\"],\n    timeout: 120_000,\n  })\n  const [exitCode, errors] = await Promise.all([child.exited, new Response(child.stderr).text()])\n  if (exitCode !== 0) {\n    throw new Error(`[SixbDesktop] ${failure}${errors.trim() ? `\\n${errors.trim()}` : \"\"}`)\n  }\n}\n",
-    "import { run } from \"./run\"\n\n/**\n * Draws `png` the way macOS draws app icons, into `out`: on Apple's grid, a rounded square of 824\n * pixels with continuous corners in a canvas of 1024, over the soft shadow Apple's own icons have.\n * An icon drawn to its edges otherwise stands larger than every other icon in the Dock.\n */\nexport async function drawMacIcon(png: string, out: string): Promise<void> {\n  await run(\n    [\"osascript\", \"-l\", \"JavaScript\", \"-e\", MAC_ICON_SCRIPT, png, out],\n    \"Could not draw the macOS icon.\"\n  )\n}\n\n// AppKit, through the JavaScript `osascript` runs, which every Mac has. The corner is the curve\n// UIKit rounds continuous corners with; with this radius it matches the outline of Apple's Notes\n// icon to a few pixels, and the shadow matches its shadow.\nconst MAC_ICON_SCRIPT = `\nObjC.import(\"AppKit\")\nObjC.import(\"CoreGraphics\")\n\nfunction run([input, output]) {\n  const canvas = 1024\n  const body = 824\n  const radius = 185.4\n  const min = (canvas - body) / 2\n  const max = min + body\n\n  // One corner, as offsets in radii from the edge it leaves and the edge it joins.\n  const corner = [\n    [[1.52866483, 0]],\n    [[0.66993427, 0.065496], [1.08849323, 0], [0.86840689, 0.02065986]],\n    [[0.63149399, 0.074911]],\n    [[0.074911, 0.63149399], [0.37282392, 0.16906933], [0.16906933, 0.37282392]],\n    [[0.065496, 0.66993427]],\n    [[0, 1.52866483], [0.02065986, 0.86840689], [0, 1.08849323]],\n  ]\n  const corners = [\n    ([u, v]) => $.NSMakePoint(max - u * radius, max - v * radius),\n    ([u, v]) => $.NSMakePoint(max - v * radius, min + u * radius),\n    ([u, v]) => $.NSMakePoint(min + u * radius, min + v * radius),\n    ([u, v]) => $.NSMakePoint(min + v * radius, max - u * radius),\n  ]\n  const shape = $.NSBezierPath.bezierPath\n  shape.moveToPoint(corners[3]([0, 1.52866483]))\n  for (const at of corners) {\n    for (const [to, c1, c2] of corner) {\n      if (c1) shape.curveToPointControlPoint1ControlPoint2(at(to), at(c1), at(c2))\n      else shape.lineToPoint(at(to))\n    }\n  }\n  shape.closePath\n\n  const image = $.NSImage.alloc.initWithContentsOfFile(input)\n  if (image.isNil()) throw new Error(\"Cannot read \" + input)\n  const bitmap = $.NSBitmapImageRep.alloc\n    .initWithBitmapDataPlanesPixelsWidePixelsHighBitsPerSampleSamplesPerPixelHasAlphaIsPlanarColorSpaceNameBytesPerRowBitsPerPixel(\n      null, canvas, canvas, 8, 4, true, false, $.NSDeviceRGBColorSpace, 0, 0\n    )\n  const context = $.NSGraphicsContext.graphicsContextWithBitmapImageRep(bitmap)\n  $.NSGraphicsContext.setCurrentContext(context)\n  context.setImageInterpolation($.NSImageInterpolationHigh)\n\n  const shadow = $.NSShadow.alloc.init\n  shadow.setShadowOffset($.NSMakeSize(0, -8))\n  shadow.setShadowBlurRadius(30)\n  shadow.setShadowColor($.NSColor.colorWithWhiteAlpha(0, 0.22))\n  shadow.set\n  // A layer, so the shadow falls from the clipped icon and not from the clip.\n  $.CGContextBeginTransparencyLayer(context.CGContext, null)\n  shape.addClip\n  image.drawInRectFromRectOperationFraction(\n    $.NSMakeRect(min, min, body, body), $.NSZeroRect, $.NSCompositingOperationSourceOver, 1\n  )\n  $.CGContextEndTransparencyLayer(context.CGContext)\n  context.flushGraphics\n\n  const png = bitmap.representationUsingTypeProperties($.NSBitmapImageFileTypePNG, $.NSDictionary.dictionary)\n  if (!png.writeToFileAtomically(output, true)) throw new Error(\"Cannot write \" + output)\n}\n`\n"
+    "import { run } from \"./run\"\n\n/**\n * Draws `png` the way macOS draws app icons, into `out`: on Apple's grid, a rounded square of 824\n * pixels with continuous corners in a canvas of 1024, over the soft shadow Apple's own icons have.\n * An icon drawn to its edges otherwise stands larger than every other icon in the Dock.\n */\nexport async function drawMacIcon(png: string, out: string): Promise<void> {\n  await run(\n    [\"osascript\", \"-l\", \"JavaScript\", \"-e\", MAC_ICON_SCRIPT, png, out],\n    \"Could not draw the macOS icon.\"\n  )\n}\n\n// AppKit, through the JavaScript `osascript` runs, which every Mac has. The corner is the curve\n// UIKit rounds continuous corners with; with this radius it matches the outline of Apple's Notes\n// icon to a few pixels, and the shadow matches its shadow.\nconst MAC_ICON_SCRIPT = `\nObjC.import(\"AppKit\")\nObjC.import(\"CoreGraphics\")\n\nfunction run([input, output]) {\n  const canvas = 1024\n  const body = 824\n  const radius = 185.4\n  const min = (canvas - body) / 2\n  const max = min + body\n\n  // One corner, as offsets in radii from the edge it leaves and the edge it joins.\n  const corner = [\n    [[1.52866483, 0]],\n    [[0.66993427, 0.065496], [1.08849323, 0], [0.86840689, 0.02065986]],\n    [[0.63149399, 0.074911]],\n    [[0.074911, 0.63149399], [0.37282392, 0.16906933], [0.16906933, 0.37282392]],\n    [[0.065496, 0.66993427]],\n    [[0, 1.52866483], [0.02065986, 0.86840689], [0, 1.08849323]],\n  ]\n  const corners = [\n    ([u, v]) => $.NSMakePoint(max - u * radius, max - v * radius),\n    ([u, v]) => $.NSMakePoint(max - v * radius, min + u * radius),\n    ([u, v]) => $.NSMakePoint(min + u * radius, min + v * radius),\n    ([u, v]) => $.NSMakePoint(min + v * radius, max - u * radius),\n  ]\n  const shape = $.NSBezierPath.bezierPath\n  shape.moveToPoint(corners[3]([0, 1.52866483]))\n  for (const at of corners) {\n    for (const [to, c1, c2] of corner) {\n      if (c1) shape.curveToPointControlPoint1ControlPoint2(at(to), at(c1), at(c2))\n      else shape.lineToPoint(at(to))\n    }\n  }\n  shape.closePath\n\n  const image = $.NSImage.alloc.initWithContentsOfFile(input)\n  if (image.isNil()) throw new Error(\"Cannot read \" + input)\n  const bitmap = $.NSBitmapImageRep.alloc\n    .initWithBitmapDataPlanesPixelsWidePixelsHighBitsPerSampleSamplesPerPixelHasAlphaIsPlanarColorSpaceNameBytesPerRowBitsPerPixel(\n      null, canvas, canvas, 8, 4, true, false, $.NSDeviceRGBColorSpace, 0, 0\n    )\n  const context = $.NSGraphicsContext.graphicsContextWithBitmapImageRep(bitmap)\n  $.NSGraphicsContext.setCurrentContext(context)\n  context.setImageInterpolation($.NSImageInterpolationHigh)\n\n  const shadow = $.NSShadow.alloc.init\n  shadow.setShadowOffset($.NSMakeSize(0, -8))\n  shadow.setShadowBlurRadius(30)\n  shadow.setShadowColor($.NSColor.colorWithWhiteAlpha(0, 0.22))\n  shadow.set\n  // A layer, so the shadow falls from the clipped icon and not from the clip.\n  $.CGContextBeginTransparencyLayer(context.CGContext, null)\n  shape.addClip\n  image.drawInRectFromRectOperationFraction(\n    $.NSMakeRect(min, min, body, body), $.NSZeroRect, $.NSCompositingOperationSourceOver, 1\n  )\n  $.CGContextEndTransparencyLayer(context.CGContext)\n  context.flushGraphics\n\n  const png = bitmap.representationUsingTypeProperties($.NSBitmapImageFileTypePNG, $.NSDictionary.dictionary)\n  if (!png.writeToFileAtomically(output, true)) throw new Error(\"Cannot write \" + output)\n}\n`\n",
+    "import { spawn } from \"node:child_process\"\nimport { delimiter } from \"node:path\"\n\n/** The program `writeDesktopApp` compiles, in the runner's directory. */\nexport const RUNNER_BINARY = \"sixb-runner\"\n\n/** How long a person's shell gets to say what their PATH is. */\nconst LOGIN_SHELL_WAIT_MS = 3_000\n/** How long a page waits to hear which folders are allowed, before asking for one instead. */\nconst FOLDERS_WAIT_MS = 10_000\n/** How long the runner gets to end a running turn and close its sessions. */\nconst STOP_WAIT_MS = 12_000\nconst RESTART_WAIT_MS = { first: 2_000, longest: 60_000 } as const\n/** Running this long, the runner wasn't what failed quickly: the next restart waits the least again. */\nconst STEADY_MS = 60_000\n/** Exit status of a runner whose sign-in ended. */\nconst EXIT_SIGNED_OUT = 3\n\nexport interface RunnerProcess {\n  /** One line of JSON from the runner. */\n  onLine(listener: (line: string) => void): void\n  readonly exited: Promise<number>\n  write(line: string): void\n  /** Close its stdin, which it ends with. */\n  end(): void\n  kill(): void\n}\n\nexport interface DesktopComputer {\n  readonly id: string\n  readonly name: string\n}\n\ntype RunnerCommand = {\n  readonly type: \"allow\" | \"forget\"\n  readonly folder: string\n}\n\n/**\n * The main process's hold on the program that runs the agent on this computer: it starts it, keeps it\n * started while the app is open, and stops it on quit. It holds no sign-in: the program does, and\n * only says where to send the person to approve one.\n */\nexport class DesktopRunner {\n  private process: RunnerProcess | null = null\n  private computer: DesktopComputer | null = null\n  private folderList: readonly string[] = []\n  private waitingForComputer: {\n    readonly resolve: (computer: DesktopComputer) => void\n    readonly reject: (error: Error) => void\n  }[] = []\n  private foldersKnown = false\n  private waitingForFolders: ((folders: readonly string[]) => void)[] = []\n  private unsent: RunnerCommand[] = []\n  private restart: ReturnType<typeof setTimeout> | null = null\n  private restartWait: number = RESTART_WAIT_MS.first\n  private stopping = false\n\n  constructor(\n    private readonly options: {\n      readonly start: () => RunnerProcess\n      /** A page in the system browser to approve this computer's sign-in on. */\n      readonly onSignIn: (url: string) => void\n      readonly onProblem: (message: string) => void\n    }\n  ) {}\n\n  start(): void {\n    if (this.stopping) return\n    const started = Date.now()\n    const process = this.options.start()\n    this.process = process\n    process.onLine((line) => this.hear(line))\n    for (const command of this.unsent.splice(0)) process.write(JSON.stringify(command))\n    void process.exited.then((code) => {\n      this.process = null\n      if (this.stopping) return\n      if (Date.now() - started >= STEADY_MS) this.restartWait = RESTART_WAIT_MS.first\n      // A sign-in that ended is no problem to report: started again, it waits for a new one.\n      if (code !== EXIT_SIGNED_OUT) {\n        this.options.onProblem(`What runs the agent quit with exit code ${code}.`)\n      }\n      // Told it failed, not that there's nothing to run on: a message mustn't go elsewhere on a guess.\n      for (const { reject } of this.waitingForComputer.splice(0)) {\n        reject(new Error(\"[SixbDesktop] What runs the agent on this computer couldn't start.\"))\n      }\n      this.answerFolders()\n      this.restart = setTimeout(() => this.start(), this.restartWait)\n      this.restartWait = Math.min(this.restartWait * 2, RESTART_WAIT_MS.longest)\n    })\n  }\n\n  /** This computer, once the runner has said. Rejects if it quits before it does. */\n  about(): Promise<DesktopComputer> {\n    if (this.computer) return Promise.resolve(this.computer)\n    return new Promise((resolve, reject) => this.waitingForComputer.push({ resolve, reject }))\n  }\n\n  /** The folders allowed, once the runner knows: a page asking early mustn't take them for none. */\n  folders(): Promise<readonly string[]> {\n    if (this.foldersKnown) return Promise.resolve(this.folderList)\n    return new Promise((resolve) => {\n      // A runner that can't read its config keeps trying, and a message mustn't wait on that for good.\n      const timer = setTimeout(() => this.answerFolders(), FOLDERS_WAIT_MS)\n      this.waitingForFolders.push((folders) => {\n        clearTimeout(timer)\n        resolve(folders)\n      })\n    })\n  }\n\n  allow(folder: string): void {\n    this.send({ type: \"allow\", folder })\n    // A page asking right after choosing finds it there, before the runner has said so.\n    if (!this.folderList.includes(folder)) this.folderList = [...this.folderList, folder]\n  }\n\n  forget(folder: string): void {\n    this.send({ type: \"forget\", folder })\n    this.folderList = this.folderList.filter((known) => known !== folder)\n  }\n\n  /** Let it end a running turn and close its sessions, within a limit. */\n  async stop(): Promise<void> {\n    this.stopping = true\n    if (this.restart) clearTimeout(this.restart)\n    const process = this.process\n    if (!process) return\n    process.end()\n    let timer: ReturnType<typeof setTimeout> | undefined\n    const late = new Promise<\"late\">((resolve) => {\n      timer = setTimeout(() => resolve(\"late\"), STOP_WAIT_MS)\n    })\n    if ((await Promise.race([process.exited, late])) === \"late\") process.kill()\n    clearTimeout(timer)\n  }\n\n  private send(command: RunnerCommand): void {\n    if (this.process) this.process.write(JSON.stringify(command))\n    else this.unsent.push(command)\n  }\n\n  private answerFolders(): void {\n    this.foldersKnown = true\n    for (const answer of this.waitingForFolders.splice(0)) answer(this.folderList)\n  }\n\n  private hear(line: string): void {\n    let event: Record<string, unknown>\n    try {\n      event = JSON.parse(line)\n    } catch {\n      return\n    }\n    switch (event.type) {\n      case \"computer\":\n        if (typeof event.id === \"string\" && typeof event.name === \"string\") {\n          const computer = { id: event.id, name: event.name }\n          this.computer = computer\n          for (const { resolve } of this.waitingForComputer.splice(0)) resolve(computer)\n        }\n        return\n      case \"folders\":\n        if (Array.isArray(event.folders)) this.folderList = event.folders.map(String)\n        this.answerFolders()\n        return\n      // Nothing runs in the list on file until it's signed in: none, so the next message asks, and\n      // answering signs in. It would otherwise wait on a sign-in nobody was asked for.\n      case \"signed-out\":\n      case \"signed-out-waiting\":\n        this.folderList = []\n        this.answerFolders()\n        return\n      // It can't say which until the project answers: the last it said, for now.\n      case \"unreachable\":\n        this.answerFolders()\n        return\n      case \"sign-in\":\n        if (typeof event.url === \"string\") this.options.onSignIn(event.url)\n        return\n      case \"sign-in-failed\":\n        this.folderList = []\n        if (typeof event.message === \"string\") this.options.onProblem(event.message)\n        return\n      case \"session.lost\":\n      case \"error\":\n        if (typeof event.message === \"string\") this.options.onProblem(event.message)\n    }\n  }\n}\n\n/** The runner as a child process of this one, its stderr for the app's own log. */\nexport function startRunnerProcess(\n  command: readonly [string, ...string[]],\n  env: NodeJS.ProcessEnv\n): RunnerProcess {\n  const [file, ...args] = command\n  const child = spawn(file, args, { env, stdio: [\"pipe\", \"pipe\", \"inherit\"] })\n  // A runner that's gone by the time this writes: its restart is what answers that.\n  child.stdin.on(\"error\", () => {})\n  const exited = new Promise<number>((resolve) => {\n    child.once(\"error\", () => resolve(-1))\n    child.once(\"exit\", (code) => resolve(code ?? -1))\n  })\n  return {\n    onLine(listener) {\n      let rest = \"\"\n      child.stdout.setEncoding(\"utf8\").on(\"data\", (chunk: string) => {\n        rest += chunk\n        const lines = rest.split(\"\\n\")\n        rest = lines.pop() ?? \"\"\n        for (const line of lines) listener(line)\n      })\n    },\n    exited,\n    write: (line) => void child.stdin.write(`${line}\\n`),\n    end: () => void child.stdin.end(),\n    kill: () => void child.kill(\"SIGKILL\"),\n  }\n}\n\n/**\n * The environment the runner, and the agent's commands, run in. An app opened from the Dock gets a\n * bare PATH, so the person's shell says what theirs is: the agent uses the tools they do. The `bun`\n * beside the runner comes last, for someone with neither Bun nor Node.\n */\nexport async function runnerEnvironment(\n  runnerDir: string,\n  base: NodeJS.ProcessEnv\n): Promise<NodeJS.ProcessEnv> {\n  const shell = await readLoginShell(base.SHELL).catch(() => null)\n  const env = Object.fromEntries(\n    // What a terminal `sixb dev` was told about its own project is no business of this one.\n    Object.entries(base).filter(([name]) => !name.startsWith(\"SIXB_\"))\n  )\n  return {\n    ...env,\n    PATH: [shell?.path ?? base.PATH ?? \"\", runnerDir].join(delimiter),\n    // Where `sixb` keeps its sign-in, and so what the agent's commands are kept from.\n    ...(shell?.configHome ? { XDG_CONFIG_HOME: shell.configHome } : {}),\n  }\n}\n\n/**\n * Between markers, as a shell's startup files may print whatever they like.\n *\n * In a session of its own, with no terminal: an interactive shell takes over the one it inherits. Under\n * `sixb dev --desktop` that's the person's, and whatever reads a key or a mouse move there meanwhile is\n * stopped by it, for good, leaving the terminal as it was.\n *\n * A limit of its own, and a kill that can't be ignored: an interactive shell ignores `execFile`'s, and\n * what it started can hold the pipe open long after it's gone. A startup file that waits on a person\n * mustn't stop the agent.\n */\nfunction readLoginShell(\n  shell: string | undefined\n): Promise<{ readonly path: string; readonly configHome: string } | null> {\n  if (!shell) return Promise.resolve(null)\n  return new Promise((resolve) => {\n    // `spawn`, not `execFile`, which ignores `detached`.\n    const child = spawn(\n      shell,\n      [\"-ilc\", 'printf \"__SIXB_SHELL__%s\\\\n%s__SIXB_SHELL__\" \"$PATH\" \"$XDG_CONFIG_HOME\"'],\n      { detached: true, stdio: [\"ignore\", \"pipe\", \"ignore\"] }\n    )\n    let printed = \"\"\n    const said = () => {\n      const [path, configHome] =\n        /__SIXB_SHELL__(.*)__SIXB_SHELL__/s.exec(printed)?.[1]?.split(\"\\n\") ?? []\n      return path ? { path, configHome: configHome ?? \"\" } : null\n    }\n    const timer = setTimeout(() => {\n      // The whole group: it's alone in it, with whatever its startup files began.\n      if (child.pid) {\n        try {\n          process.kill(-child.pid, \"SIGKILL\")\n        } catch {\n          // Gone already.\n        }\n      }\n      // What it said counts, whatever it left holding the pipe.\n      resolve(said())\n    }, LOGIN_SHELL_WAIT_MS)\n    child.stdout.on(\"data\", (chunk) => {\n      printed += String(chunk)\n    })\n    child.once(\"error\", () => {\n      clearTimeout(timer)\n      resolve(null)\n    })\n    child.once(\"close\", () => {\n      clearTimeout(timer)\n      resolve(said())\n    })\n  })\n}\n"
   ],
-  "mappings": ";;AAAA,kBAAS,uBAAgB;AACzB;AACA,0BAAkB;AAClB,0BAAS;;;ACHT;AACA;AACA;;;ACcO,eAAe,eAAe,CAAC,QAAsC;AAAA,EAC1E,MAAM,cAAc,IAAI,IAAI,oBAAoB,MAAM;AAAA,EACtD,MAAM,WAAoB,OAAO,MAAM,aAAa,WAAW,GAAG,KAAK;AAAA,EACvE,QAAQ,MAAM,UAAW,OAAO,aAAa,YAAY,aAAa,OAAO,WAAW,CAAC;AAAA,EAKzF,MAAM,UAAU,YAAY,OAAO,WAAW;AAAA,EAC9C,OAAO;AAAA,IACL,MAAM,OAAO,SAAS,YAAY,KAAK,KAAK,IAAI,KAAK,KAAK,IAAI;AAAA,IAC9D,MAAM,UAAU,IAAI,WAAW,OAAO,MAAM,aAAa,OAAO,GAAG,YAAY,CAAC,IAAI;AAAA,EACtF;AAAA;AAOK,SAAS,gBAAgB,CAAC,QAAwB;AAAA,EACvD,MAAM,SAAS,IAAI,IAAI,MAAM,EAAE,SAC5B,MAAM,GAAG,EACT,QAAQ,EACR,IAAI,CAAC,UAAU,MAAM,YAAY,EAAE,WAAW,eAAe,GAAG,CAAC,EACjE,OAAO,OAAO;AAAA,EACjB,QAAQ,OAAO,SAAS,IAAI,SAAS,CAAC,SAAS,GAAG,MAAM,GAAG,KAAK,GAAG;AAAA;AAKrE,SAAS,WAAW,CAAC,OAAgB,aAA8B;AAAA,EACjE,IAAI,OAA+E;AAAA,EACnF,WAAW,QAAQ,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,GAAG;AAAA,IACpD,IAAI,OAAO,SAAS,YAAY,SAAS;AAAA,MAAM;AAAA,IAC/C,QAAQ,KAAK,OAAO,MAAM,YAAY;AAAA,IACtC,IAAI,OAAO,QAAQ;AAAA,MAAU;AAAA,IAC7B,MAAM,MAAM,IAAI,IAAI,KAAK,WAAW;AAAA,IACpC,IAAI,SAAS,YAAY,CAAC,IAAI,SAAS,SAAS,MAAM,IAAI,SAAS;AAAA,MAAa;AAAA,IAEhF,MAAM,WAAW,OAAO,YAAY,YAAY,QAAQ,MAAM,KAAK,EAAE,SAAS,UAAU;AAAA,IACxF,MAAM,OAAO,KAAK,IAChB,GACA,IAAI,OAAO,UAAU,WAAW,MAAM,MAAM,KAAK,IAAI,CAAC,GAAG,IACvD,CAAC,UAAU,OAAO,SAAS,OAAO,EAAE,KAAK,CAC3C,CACF;AAAA,IACA,MAAM,OAAO,CAAC,WAAW,IAAI,GAAG,IAAI;AAAA,IACpC,IAAI,CAAC,QAAQ,KAAK,KAAK,KAAK,KAAK,MAAO,KAAK,OAAO,KAAK,KAAK,MAAM,KAAK,KAAK,KAAK,KAAK,IAAK;AAAA,MAC3F,OAAO,EAAE,KAAK,KAAK;AAAA,IACrB;AAAA,EACF;AAAA,EACA,OAAO,MAAM,OAAO;AAAA;AAGtB,eAAe,YAAY,CAAC,KAA6B;AAAA,EACvD,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,WAAW,MAAM,MAAM,GAAG;AAAA,IAC1B,OAAO,OAAO;AAAA,IACd,MAAM,IAAI,MACR,iCAAiC,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,aAChF,yFACJ;AAAA;AAAA,EAEF,IAAI,CAAC,SAAS;AAAA,IAAI,MAAM,IAAI,MAAM,iBAAiB,gBAAgB,SAAS,SAAS;AAAA,EACrF,OAAO;AAAA;;;AChFF,eAAe,GAAG,CAAC,SAA4B,SAAgC;AAAA,EACpF,MAAM,QAAQ,IAAI,MAAM,CAAC,GAAG,OAAO,GAAG;AAAA,IACpC,OAAO,CAAC,UAAU,UAAU,MAAM;AAAA,IAClC,SAAS;AAAA,EACX,CAAC;AAAA,EACD,OAAO,UAAU,UAAU,MAAM,QAAQ,IAAI,CAAC,MAAM,QAAQ,IAAI,SAAS,MAAM,MAAM,EAAE,KAAK,CAAC,CAAC;AAAA,EAC9F,IAAI,aAAa,GAAG;AAAA,IAClB,MAAM,IAAI,MAAM,iBAAiB,UAAU,OAAO,KAAK,IAAI;AAAA,EAAK,OAAO,KAAK,MAAM,IAAI;AAAA,EACxF;AAAA;;;ACFK,eAAe,WAAW,CAAC,KAAa,KAA4B;AAAA,EACzE,MAAM,IACJ,CAAC,aAAa,MAAM,cAAc,MAAM,iBAAiB,KAAK,GAAG,GACjE,gCACF;AAAA;AAMF,IAAM,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;AHUxB,IAAM,mBAAmB,cAAc,IAAI,IAAI,gBAAgB,YAAY,GAAG,CAAC;AAGxE,SAAS,UAAU,CAAC,aAAqB,MAA8B;AAAA,EAC5E,OAAO,KAAK,aAAa,SAAS,WAAW,IAAI;AAAA;AAO5C,eAAe,eAAe,CAAC,SAAmD;AAAA,EACvF,MAAM,WAAW,MAAM,gBAAgB,QAAQ,MAAM;AAAA,EACrD,MAAM,UAAU,MAAM,mBAAmB,QAAQ,WAAW;AAAA,EAC5D,MAAM,MAAM,WAAW,QAAQ,aAAa,KAAK;AAAA,EACjD,MAAM,GAAG,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EAC9C,MAAM,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AAAA,EAEpC,MAAM,SAAsB;AAAA,IAC1B,MAAM,SAAS;AAAA,IACf,QAAQ,IAAI,IAAI,QAAQ,MAAM,EAAE;AAAA,IAChC,WAAW,IAAI,IAAI,QAAQ,SAAS,EAAE;AAAA,EACxC;AAAA,EACA,MAAM,WAAW;AAAA,IACf,MAAM;AAAA,IAEN,aAAa,SAAS;AAAA,IACtB;AAAA,IACA,SAAS;AAAA,IACT,MAAM;AAAA,EACR;AAAA,EACA,MAAM,OAAO,SAAS,OAAO,MAAM,UAAU,KAAK,SAAS,IAAI,IAAI;AAAA,EACnE,MAAM,WAAW,MAAM,SAAS,KAAK,kBAAkB,YAAY,GAAG,OAAO;AAAA,EAC7E,MAAM,QAAQ,IAAI;AAAA,IAChB,UAAU,KAAK,KAAK,cAAc,GAAG,GAAG,KAAK,UAAU,UAAU,MAAM,CAAC;AAAA,CAAK;AAAA,IAC7E,UAAU,KAAK,KAAK,YAAY,GAAG,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC;AAAA,CAAK;AAAA,IACzE,UAAU,KAAK,KAAK,YAAY,GAAG,gBAAgB,UAAU,KAAK,QAAQ,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;AAAA,EAC3F,CAAC;AAAA,EAID,MAAM,IACJ;AAAA,IACE,QAAQ;AAAA,IACR;AAAA,IACA,KAAK,kBAAkB,SAAS;AAAA,IAChC,KAAK,kBAAkB,YAAY;AAAA,IACnC;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY;AAAA,EACd,GACA,sCACF;AAAA,EACA,OAAO,EAAE,KAAK,MAAM,SAAS,MAAM,SAAS,KAAK;AAAA;AAI5C,SAAS,eAAe,CAC7B,UACA,MACQ;AAAA,EACR,MAAM,UAAU,MAAM,KAAK,KAAK,KAAK,KAAK,CAAC,EAAE,IAAI,YAAY,KAAK;AAAA,EAClE,MAAM,SAAiC;AAAA,IACrC,MAAM,WAAW,KAAK,IAAI;AAAA,IAC1B,MAAM,WAAW,IAAI,IAAI,KAAK,MAAM,EAAE,IAAI;AAAA,IAC1C,QAAQ,WAAW,KAAK,MAAM;AAAA,IAE9B,MAAM,KAAK,OACP,+CACA,wCAAwC,WAAW,OAAO;AAAA,EAChE;AAAA,EACA,OAAO,SAAS,WAAW,kBAAkB,CAAC,QAAQ,QAAgB,OAAO,QAAQ,EAAE;AAAA;AAIzF,eAAe,SAAS,CAAC,KAAa,KAAkC;AAAA,EACtE,MAAM,OAAO,KAAK,KAAK,UAAU;AAAA,EACjC,IAAI,QAAQ,aAAa,UAAU;AAAA,IACjC,MAAM,UAAU,MAAM,GAAG;AAAA,IACzB,OAAO;AAAA,EACT;AAAA,EAEA,MAAM,SAAS,KAAK,KAAK,MAAM,iBAAiB;AAAA,EAChD,MAAM,UAAU,QAAQ,GAAG;AAAA,EAC3B,MAAM,YAAY,QAAQ,IAAI;AAAA,EAC9B,OAAO;AAAA;AAGT,eAAe,kBAAkB,CAAC,aAAsC;AAAA,EACtE,IAAI;AAAA,IACF,MAAM,WAAoB,KAAK,MAAM,MAAM,SAAS,KAAK,aAAa,cAAc,GAAG,OAAO,CAAC;AAAA,IAC/F,MAAM,UAAW,UAAoD;AAAA,IACrE,OAAO,OAAO,YAAY,WAAW,UAAU;AAAA,IAC/C,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AAIX,SAAS,UAAU,CAAC,OAAuB;AAAA,EACzC,OAAO,MACJ,WAAW,KAAK,OAAO,EACvB,WAAW,KAAK,MAAM,EACtB,WAAW,KAAK,MAAM,EACtB,WAAW,KAAK,QAAQ;AAAA;;;AD5G7B,IAAM,iBAAiB,cAAc,YAAY,GAAG;AAEpD,IAAM,kBAAkB,eAAc,IAAI,IAAI,uBAAuB,YAAY,GAAG,CAAC;AAG9E,eAAe,cAAc,CAAC,SAAoD;AAAA,EACvF,MAAM,MAAM,MAAM,gBAAgB,OAAO;AAAA,EAGzC,MAAM,MAAM,MAAK,QAAQ,IAAI,GAAG,GAAG,cAAc;AAAA,EACjD,MAAM,WAAW,IAAI,MAAM,CAAC,eAAe,GAAG,IAAI,GAAG,GAAG;AAAA,IACtD,OAAO,CAAC,UAAU,UAAU,IAAI,KAAK,GAAG,CAAC;AAAA,EAC3C,CAAC;AAAA,EACD,IAAI,UAAU;AAAA,EACd,MAAM,SAAS,SAAS,OAAO,KAAK,CAAC,SAAS;AAAA,IAC5C,IAAI,SAAS,KAAK,CAAC,SAAS;AAAA,MAC1B,QAAQ,MAAM,wDAAwD,aAAa,MAAM;AAAA,IAC3F;AAAA,IACA,OAAO;AAAA,GACR;AAAA,EACD,OAAO;AAAA,IACL;AAAA,IACA,OAAO,MAAM;AAAA,MACX,UAAU;AAAA,MACV,SAAS,KAAK;AAAA;AAAA,EAElB;AAAA;AAIK,eAAe,eAAe,CAAC,SAAmD;AAAA,EACvF,MAAM,MAAM,MAAM,gBAAgB,OAAO;AAAA,EACzC,MAAM,MAAM,WAAW,QAAQ,aAAa,MAAM;AAAA,EAClD,MAAM,IAAG,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EAE9C,MAAM,MAAM,QAAQ,aAAa;AAAA,EACjC,MAAM,WAAW,MAAM,kBAAkB,IAAI;AAAA,EAC7C,MAAM,WAAW,MAAM,WAAW;AAAA,IAChC,KAAK,IAAI;AAAA,IACT,MAAM,IAAI;AAAA,IACV;AAAA,IACA,aAAa,iBAAiB,QAAQ,MAAM;AAAA,IAC5C,YAAY,IAAI;AAAA,IAChB,iBAAkB,eAAe,uBAAuB,EACrD;AAAA,OACC,OAAO,IAAI,OAAO,EAAE,MAAM,MAAM,QAAQ,IAAI,IAAI,EAAE,IAAI,CAAC;AAAA,OAEvD,WAAW,EAAE,SAAS,CAAC,GAAG,aAAa,SAAS,IAAI,CAAC;AAAA,EAC3D,CAAC;AAAA,EACD,IAAI,CAAC;AAAA,IAAK,OAAO,EAAE,MAAM,UAAU,QAAQ,MAAM;AAAA,EAEjD,MAAM,QAAQ,MAAM,QAAQ,QAAQ,GAAG,KAAK,CAAC,UAAU,MAAM,SAAS,MAAM,CAAC;AAAA,EAC7E,IAAI,CAAC;AAAA,IAAM,MAAM,IAAI,MAAM,kDAAkD,WAAW;AAAA,EACxF,MAAM,SAAS,MAAK,UAAU,IAAI;AAAA,EAGlC,IAAI,CAAC,UAAU;AAAA,IACb,MAAM,IAAI,CAAC,YAAY,WAAW,UAAU,UAAU,KAAK,MAAM,GAAG,yBAAyB;AAAA,EAC/F;AAAA,EAEA,MAAM,MAAM,GAAG;AAAA,EACf,MAAM,IAAI,CAAC,SAAS,MAAM,MAAM,gBAAgB,QAAQ,GAAG,GAAG,wBAAwB;AAAA,EACtF,OAAO,EAAE,MAAM,KAAK,QAAQ,aAAa,KAAK;AAAA;AAOhD,SAAS,iBAAiB,GAIjB;AAAA,EACP,QAAQ,eAAe,kBAAkB,qBAAqB,QAAQ;AAAA,EACtE,IAAI,CAAC,iBAAiB,CAAC,oBAAoB,CAAC;AAAA,IAAkB,OAAO;AAAA,EACrE,IAAI,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,kBAAkB;AAAA,IAC5D,MAAM,IAAI,MACR,+FACE,kDACJ;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,aAAa;AAAA,IACb,eAAe;AAAA,IACf,gBAAgB;AAAA,EAClB;AAAA;AAQF,eAAe,OAAO,CAAC,KAA8B;AAAA,EACnD,MAAM,UAAU,QAAQ,QAAQ,GAAG,CAAC;AAAA,EACpC,MAAM,UAAU,MAAK,SAAS,cAAc;AAAA,EAC5C,MAAM,IAAG,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EAClD,MAAM,OAAM,OAAO;AAAA,EACnB,MAAM,QAAQ,CAAC,IAAI,IAAI,KAAK,KAAK,GAAG,EAAE,QAAQ,CAAC,WAAW;AAAA,IACxD,EAAE,MAAM,QAAQ,UAAU,cAAc,QAAQ,OAAO;AAAA,IACvD,EAAE,MAAM,QAAQ,UAAU,iBAAiB,QAAQ,SAAS,EAAE;AAAA,EAChE,CAAC;AAAA,EACD,MAAM,QAAQ,IACZ,MAAM,IAAI,GAAG,MAAM,aACjB,IACE,CAAC,QAAQ,MAAM,GAAG,UAAU,GAAG,UAAU,KAAK,SAAS,MAAK,SAAS,IAAI,CAAC,GAC1E,2BACF,CACF,CACF;AAAA,EACA,MAAM,OAAO,MAAK,SAAS,WAAW;AAAA,EACtC,MAAM,IAAI,CAAC,YAAY,MAAM,QAAQ,SAAS,MAAM,IAAI,GAAG,6BAA6B;AAAA,EACxF,OAAO;AAAA;AAST,eAAe,UAAU,CACvB,SACiB;AAAA,EACjB,MAAM,WAAW,IAAI,MACnB,CAAC,eAAe,GAAG,iBAAiB,KAAK,UAAU,KAAK,SAAS,OAAO,KAAK,CAAC,CAAC,GAC/E;AAAA,IACE,OAAO,CAAC,UAAU,WAAW,SAAS;AAAA,IAGtC,KAAK,KAAK,QAAQ,KAAK,sBAAsB,KAAK,kBAAkB,IAAI;AAAA,EAC1E,CACF;AAAA,EACA,IAAK,MAAM,SAAS,WAAY,GAAG;AAAA,IACjC,MAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AAAA,EACA,OAAO,WAAW,MAAM,QAAQ,QAAQ,GAAG;AAAA,EAC3C,IAAI,CAAC;AAAA,IAAS,MAAM,IAAI,MAAM,+CAA+C,QAAQ,MAAM;AAAA,EAC3F,OAAO,MAAK,QAAQ,KAAK,OAAO;AAAA;AAIlC,SAAS,cAAc,GAAW;AAAA,EAChC,IAAI;AAAA,IACF,OAAO,eAAe,UAAU;AAAA,IAChC,MAAM;AAAA,IACN,MAAM,cAAc,QAAQ,eAAe,QAAQ,uBAAuB,CAAC;AAAA,IAC3E,MAAM,IAAI,MACR,iFACE,uBAAuB,4CAC3B;AAAA;AAAA;",
-  "debugId": "AA1E41BFA25EB6CC64756E2164756E21",
+  "mappings": ";;AAAA,kBAAS,uBAAgB;AACzB;AACA,0BAAkB;AAClB,0BAAS;;;ACHT;AACA;AACA;;;ACcO,eAAe,eAAe,CAAC,QAAsC;AAAA,EAC1E,MAAM,cAAc,IAAI,IAAI,oBAAoB,MAAM;AAAA,EACtD,MAAM,WAAoB,OAAO,MAAM,aAAa,WAAW,GAAG,KAAK;AAAA,EACvE,QAAQ,MAAM,UAAW,OAAO,aAAa,YAAY,aAAa,OAAO,WAAW,CAAC;AAAA,EAKzF,MAAM,UAAU,YAAY,OAAO,WAAW;AAAA,EAC9C,OAAO;AAAA,IACL,MAAM,OAAO,SAAS,YAAY,KAAK,KAAK,IAAI,KAAK,KAAK,IAAI;AAAA,IAC9D,MAAM,UAAU,IAAI,WAAW,OAAO,MAAM,aAAa,OAAO,GAAG,YAAY,CAAC,IAAI;AAAA,EACtF;AAAA;AAOK,SAAS,gBAAgB,CAAC,QAAwB;AAAA,EACvD,MAAM,SAAS,IAAI,IAAI,MAAM,EAAE,SAC5B,MAAM,GAAG,EACT,QAAQ,EACR,IAAI,CAAC,UAAU,MAAM,YAAY,EAAE,WAAW,eAAe,GAAG,CAAC,EACjE,OAAO,OAAO;AAAA,EACjB,QAAQ,OAAO,SAAS,IAAI,SAAS,CAAC,SAAS,GAAG,MAAM,GAAG,KAAK,GAAG;AAAA;AAKrE,SAAS,WAAW,CAAC,OAAgB,aAA8B;AAAA,EACjE,IAAI,OAA+E;AAAA,EACnF,WAAW,QAAQ,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,GAAG;AAAA,IACpD,IAAI,OAAO,SAAS,YAAY,SAAS;AAAA,MAAM;AAAA,IAC/C,QAAQ,KAAK,OAAO,MAAM,YAAY;AAAA,IACtC,IAAI,OAAO,QAAQ;AAAA,MAAU;AAAA,IAC7B,MAAM,MAAM,IAAI,IAAI,KAAK,WAAW;AAAA,IACpC,IAAI,SAAS,YAAY,CAAC,IAAI,SAAS,SAAS,MAAM,IAAI,SAAS;AAAA,MAAa;AAAA,IAEhF,MAAM,WAAW,OAAO,YAAY,YAAY,QAAQ,MAAM,KAAK,EAAE,SAAS,UAAU;AAAA,IACxF,MAAM,OAAO,KAAK,IAChB,GACA,IAAI,OAAO,UAAU,WAAW,MAAM,MAAM,KAAK,IAAI,CAAC,GAAG,IACvD,CAAC,UAAU,OAAO,SAAS,OAAO,EAAE,KAAK,CAC3C,CACF;AAAA,IACA,MAAM,OAAO,CAAC,WAAW,IAAI,GAAG,IAAI;AAAA,IACpC,IAAI,CAAC,QAAQ,KAAK,KAAK,KAAK,KAAK,MAAO,KAAK,OAAO,KAAK,KAAK,MAAM,KAAK,KAAK,KAAK,KAAK,IAAK;AAAA,MAC3F,OAAO,EAAE,KAAK,KAAK;AAAA,IACrB;AAAA,EACF;AAAA,EACA,OAAO,MAAM,OAAO;AAAA;AAGtB,eAAe,YAAY,CAAC,KAA6B;AAAA,EACvD,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,WAAW,MAAM,MAAM,GAAG;AAAA,IAC1B,OAAO,OAAO;AAAA,IACd,MAAM,IAAI,MACR,iCAAiC,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,aAChF,yFACJ;AAAA;AAAA,EAEF,IAAI,CAAC,SAAS;AAAA,IAAI,MAAM,IAAI,MAAM,iBAAiB,gBAAgB,SAAS,SAAS;AAAA,EACrF,OAAO;AAAA;;;AChFF,eAAe,GAAG,CAAC,SAA4B,SAAgC;AAAA,EACpF,MAAM,QAAQ,IAAI,MAAM,CAAC,GAAG,OAAO,GAAG;AAAA,IACpC,OAAO,CAAC,UAAU,UAAU,MAAM;AAAA,IAClC,SAAS;AAAA,EACX,CAAC;AAAA,EACD,OAAO,UAAU,UAAU,MAAM,QAAQ,IAAI,CAAC,MAAM,QAAQ,IAAI,SAAS,MAAM,MAAM,EAAE,KAAK,CAAC,CAAC;AAAA,EAC9F,IAAI,aAAa,GAAG;AAAA,IAClB,MAAM,IAAI,MAAM,iBAAiB,UAAU,OAAO,KAAK,IAAI;AAAA,EAAK,OAAO,KAAK,MAAM,IAAI;AAAA,EACxF;AAAA;;;ACFK,eAAe,WAAW,CAAC,KAAa,KAA4B;AAAA,EACzE,MAAM,IACJ,CAAC,aAAa,MAAM,cAAc,MAAM,iBAAiB,KAAK,GAAG,GACjE,gCACF;AAAA;AAMF,IAAM,kBAAkB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACbjB,IAAM,gBAAgB;;;AJ6B7B,IAAM,mBAAmB,cAAc,IAAI,IAAI,gBAAgB,YAAY,GAAG,CAAC;AAMxE,SAAS,UAAU,CAAC,aAAqB,MAAyC;AAAA,EACvF,OAAO,KAAK,aAAa,SAAS,WAAW,IAAI;AAAA;AAO5C,eAAe,eAAe,CAAC,SAAmD;AAAA,EACvF,MAAM,WAAW,MAAM,gBAAgB,QAAQ,MAAM;AAAA,EACrD,MAAM,UAAU,MAAM,mBAAmB,QAAQ,WAAW;AAAA,EAC5D,MAAM,MAAM,WAAW,QAAQ,aAAa,KAAK;AAAA,EACjD,MAAM,GAAG,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EAC9C,MAAM,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AAAA,EAEpC,MAAM,SAAsB;AAAA,IAC1B,MAAM,SAAS;AAAA,IACf,QAAQ,IAAI,IAAI,QAAQ,MAAM,EAAE;AAAA,IAChC,WAAW,IAAI,IAAI,QAAQ,SAAS,EAAE;AAAA,EACxC;AAAA,EACA,MAAM,WAAW;AAAA,IACf,MAAM;AAAA,IAEN,aAAa,SAAS;AAAA,IACtB;AAAA,IACA,SAAS;AAAA,IACT,MAAM;AAAA,EACR;AAAA,EACA,MAAM,OAAO,SAAS,OAAO,MAAM,UAAU,KAAK,SAAS,IAAI,IAAI;AAAA,EACnE,MAAM,WAAW,MAAM,SAAS,KAAK,kBAAkB,YAAY,GAAG,OAAO;AAAA,EAC7E,MAAM,QAAQ,IAAI;AAAA,IAChB,UAAU,KAAK,KAAK,cAAc,GAAG,GAAG,KAAK,UAAU,UAAU,MAAM,CAAC;AAAA,CAAK;AAAA,IAC7E,UAAU,KAAK,KAAK,YAAY,GAAG,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC;AAAA,CAAK;AAAA,IACzE,UAAU,KAAK,KAAK,YAAY,GAAG,gBAAgB,UAAU,KAAK,QAAQ,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;AAAA,EAC3F,CAAC;AAAA,EAID,MAAM,IACJ;AAAA,IACE,QAAQ;AAAA,IACR;AAAA,IACA,KAAK,kBAAkB,SAAS;AAAA,IAChC,KAAK,kBAAkB,YAAY;AAAA,IACnC;AAAA,IACA;AAAA,IACA;AAAA,IACA,YAAY;AAAA,EACd,GACA,sCACF;AAAA,EACA,OAAO,EAAE,KAAK,MAAM,SAAS,MAAM,SAAS,KAAK;AAAA;AAS5C,eAAe,WAAW,CAAC,SAAoD;AAAA,EACpF,MAAM,MAAM,WAAW,QAAQ,aAAa,QAAQ;AAAA,EACpD,MAAM,GAAG,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EAC9C,IAAI,CAAC,QAAQ,eAAe,QAAQ,aAAa;AAAA,IAAS,OAAO;AAAA,EACjE,MAAM,MAAM,KAAK,EAAE,WAAW,KAAK,CAAC;AAAA,EACpC,MAAM,IACJ;AAAA,IACE,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,IACR,aAAa,KAAK,KAAK,aAAa;AAAA,EACtC,GACA,wCACF;AAAA,EACA,MAAM,UACJ,KAAK,KAAK,KAAK,GACf;AAAA,qCAAiD;AAAA,GACjD,EAAE,MAAM,IAAM,CAChB;AAAA,EACA,OAAO;AAAA;AAIF,SAAS,eAAe,CAC7B,UACA,MACQ;AAAA,EACR,MAAM,UAAU,MAAM,KAAK,KAAK,KAAK,KAAK,CAAC,EAAE,IAAI,YAAY,KAAK;AAAA,EAClE,MAAM,SAAiC;AAAA,IACrC,MAAM,WAAW,KAAK,IAAI;AAAA,IAC1B,MAAM,WAAW,IAAI,IAAI,KAAK,MAAM,EAAE,IAAI;AAAA,IAC1C,QAAQ,WAAW,KAAK,MAAM;AAAA,IAE9B,MAAM,KAAK,OACP,+CACA,wCAAwC,WAAW,OAAO;AAAA,EAChE;AAAA,EACA,OAAO,SAAS,WAAW,kBAAkB,CAAC,QAAQ,QAAgB,OAAO,QAAQ,EAAE;AAAA;AAIzF,eAAe,SAAS,CAAC,KAAa,KAAkC;AAAA,EACtE,MAAM,OAAO,KAAK,KAAK,UAAU;AAAA,EACjC,IAAI,QAAQ,aAAa,UAAU;AAAA,IACjC,MAAM,UAAU,MAAM,GAAG;AAAA,IACzB,OAAO;AAAA,EACT;AAAA,EAEA,MAAM,SAAS,KAAK,KAAK,MAAM,iBAAiB;AAAA,EAChD,MAAM,UAAU,QAAQ,GAAG;AAAA,EAC3B,MAAM,YAAY,QAAQ,IAAI;AAAA,EAC9B,OAAO;AAAA;AAGT,eAAe,kBAAkB,CAAC,aAAsC;AAAA,EACtE,IAAI;AAAA,IACF,MAAM,WAAoB,KAAK,MAAM,MAAM,SAAS,KAAK,aAAa,cAAc,GAAG,OAAO,CAAC;AAAA,IAC/F,MAAM,UAAW,UAAoD;AAAA,IACrE,OAAO,OAAO,YAAY,WAAW,UAAU;AAAA,IAC/C,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AAIX,SAAS,UAAU,CAAC,OAAuB;AAAA,EACzC,OAAO,MACJ,WAAW,KAAK,OAAO,EACvB,WAAW,KAAK,MAAM,EACtB,WAAW,KAAK,MAAM,EACtB,WAAW,KAAK,QAAQ;AAAA;;;ADlJ7B,IAAM,iBAAiB,cAAc,YAAY,GAAG;AAEpD,IAAM,kBAAkB,eAAc,IAAI,IAAI,uBAAuB,YAAY,GAAG,CAAC;AAG9E,eAAe,cAAc,CAAC,SAAoD;AAAA,EACvF,MAAM,MAAM,MAAM,gBAAgB,OAAO;AAAA,EAGzC,MAAM,YAAY,OAAO,EAAE,MAAM,CAAC,UAAmB;AAAA,IACnD,QAAQ,MAAM,sDAAsD,KAAK;AAAA,GAC1E;AAAA,EAGD,MAAM,MAAM,MAAK,QAAQ,IAAI,GAAG,GAAG,cAAc;AAAA,EACjD,MAAM,WAAW,IAAI,MAAM,CAAC,eAAe,GAAG,IAAI,GAAG,GAAG;AAAA,IACtD,OAAO,CAAC,UAAU,UAAU,IAAI,KAAK,GAAG,CAAC;AAAA,EAC3C,CAAC;AAAA,EACD,IAAI,UAAU;AAAA,EACd,MAAM,SAAS,SAAS,OAAO,KAAK,CAAC,SAAS;AAAA,IAC5C,IAAI,SAAS,KAAK,CAAC,SAAS;AAAA,MAC1B,QAAQ,MAAM,wDAAwD,aAAa,MAAM;AAAA,IAC3F;AAAA,IACA,OAAO;AAAA,GACR;AAAA,EACD,OAAO;AAAA,IACL;AAAA,IACA,OAAO,MAAM;AAAA,MACX,UAAU;AAAA,MACV,SAAS,KAAK;AAAA;AAAA,EAElB;AAAA;AAIK,eAAe,eAAe,CAAC,SAAmD;AAAA,EACvF,MAAM,MAAM,MAAM,gBAAgB,OAAO;AAAA,EACzC,MAAM,SAAS,MAAM,YAAY,OAAO;AAAA,EACxC,MAAM,MAAM,WAAW,QAAQ,aAAa,MAAM;AAAA,EAClD,MAAM,IAAG,KAAK,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EAE9C,MAAM,MAAM,QAAQ,aAAa;AAAA,EACjC,MAAM,WAAW,MAAM,kBAAkB,IAAI;AAAA,EAC7C,MAAM,WAAW,MAAM,WAAW;AAAA,IAChC,KAAK,IAAI;AAAA,IACT,MAAM,IAAI;AAAA,IACV;AAAA,IACA,aAAa,iBAAiB,QAAQ,MAAM;AAAA,IAC5C,YAAY,IAAI;AAAA,IAChB,iBAAkB,eAAe,uBAAuB,EACrD;AAAA,OACC,OAAO,IAAI,OAAO,EAAE,MAAM,MAAM,QAAQ,IAAI,IAAI,EAAE,IAAI,CAAC;AAAA,OAEvD,SAAS,EAAE,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC;AAAA,OAExC,WAAW,EAAE,SAAS,CAAC,GAAG,aAAa,SAAS,IAAI,CAAC;AAAA,EAC3D,CAAC;AAAA,EACD,IAAI,CAAC;AAAA,IAAK,OAAO,EAAE,MAAM,UAAU,QAAQ,MAAM;AAAA,EAEjD,MAAM,QAAQ,MAAM,QAAQ,QAAQ,GAAG,KAAK,CAAC,UAAU,MAAM,SAAS,MAAM,CAAC;AAAA,EAC7E,IAAI,CAAC;AAAA,IAAM,MAAM,IAAI,MAAM,kDAAkD,WAAW;AAAA,EACxF,MAAM,SAAS,MAAK,UAAU,IAAI;AAAA,EAGlC,IAAI,CAAC,UAAU;AAAA,IACb,MAAM,IAAI,CAAC,YAAY,WAAW,UAAU,UAAU,KAAK,MAAM,GAAG,yBAAyB;AAAA,EAC/F;AAAA,EAEA,MAAM,MAAM,GAAG;AAAA,EACf,MAAM,IAAI,CAAC,SAAS,MAAM,MAAM,gBAAgB,QAAQ,GAAG,GAAG,wBAAwB;AAAA,EACtF,OAAO,EAAE,MAAM,KAAK,QAAQ,aAAa,KAAK;AAAA;AAOhD,SAAS,iBAAiB,GAIjB;AAAA,EACP,QAAQ,eAAe,kBAAkB,qBAAqB,QAAQ;AAAA,EACtE,IAAI,CAAC,iBAAiB,CAAC,oBAAoB,CAAC;AAAA,IAAkB,OAAO;AAAA,EACrE,IAAI,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,kBAAkB;AAAA,IAC5D,MAAM,IAAI,MACR,+FACE,kDACJ;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,aAAa;AAAA,IACb,eAAe;AAAA,IACf,gBAAgB;AAAA,EAClB;AAAA;AAQF,eAAe,OAAO,CAAC,KAA8B;AAAA,EACnD,MAAM,UAAU,QAAQ,QAAQ,GAAG,CAAC;AAAA,EACpC,MAAM,UAAU,MAAK,SAAS,cAAc;AAAA,EAC5C,MAAM,IAAG,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,EAClD,MAAM,OAAM,OAAO;AAAA,EACnB,MAAM,QAAQ,CAAC,IAAI,IAAI,KAAK,KAAK,GAAG,EAAE,QAAQ,CAAC,WAAW;AAAA,IACxD,EAAE,MAAM,QAAQ,UAAU,cAAc,QAAQ,OAAO;AAAA,IACvD,EAAE,MAAM,QAAQ,UAAU,iBAAiB,QAAQ,SAAS,EAAE;AAAA,EAChE,CAAC;AAAA,EACD,MAAM,QAAQ,IACZ,MAAM,IAAI,GAAG,MAAM,aACjB,IACE,CAAC,QAAQ,MAAM,GAAG,UAAU,GAAG,UAAU,KAAK,SAAS,MAAK,SAAS,IAAI,CAAC,GAC1E,2BACF,CACF,CACF;AAAA,EACA,MAAM,OAAO,MAAK,SAAS,WAAW;AAAA,EACtC,MAAM,IAAI,CAAC,YAAY,MAAM,QAAQ,SAAS,MAAM,IAAI,GAAG,6BAA6B;AAAA,EACxF,OAAO;AAAA;AAST,eAAe,UAAU,CACvB,SACiB;AAAA,EACjB,MAAM,WAAW,IAAI,MACnB,CAAC,eAAe,GAAG,iBAAiB,KAAK,UAAU,KAAK,SAAS,OAAO,KAAK,CAAC,CAAC,GAC/E;AAAA,IACE,OAAO,CAAC,UAAU,WAAW,SAAS;AAAA,IAGtC,KAAK,KAAK,QAAQ,KAAK,sBAAsB,KAAK,kBAAkB,IAAI;AAAA,EAC1E,CACF;AAAA,EACA,IAAK,MAAM,SAAS,WAAY,GAAG;AAAA,IACjC,MAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AAAA,EACA,OAAO,WAAW,MAAM,QAAQ,QAAQ,GAAG;AAAA,EAC3C,IAAI,CAAC;AAAA,IAAS,MAAM,IAAI,MAAM,+CAA+C,QAAQ,MAAM;AAAA,EAC3F,OAAO,MAAK,QAAQ,KAAK,OAAO;AAAA;AAIlC,SAAS,cAAc,GAAW;AAAA,EAChC,IAAI;AAAA,IACF,OAAO,eAAe,UAAU;AAAA,IAChC,MAAM;AAAA,IACN,MAAM,cAAc,QAAQ,eAAe,QAAQ,uBAAuB,CAAC;AAAA,IAC3E,MAAM,IAAI,MACR,iFACE,aAAa,MAAK,aAAa,YAAY,sBAC/C;AAAA;AAAA;",
+  "debugId": "D20C8A734FA0DFE264756E2164756E21",
   "names": []
 }

package/dist/shell/bridge.d.ts

@@ -1,5 +1,14 @@
 /** The name a page finds the desktop app under, through `useDesktop` in `@sixb/client/hooks`. */
 export declare const DESKTOP_BRIDGE_NAME = "sixbDesktop";
+/** How the page's `computer` methods reach the main process. */
+export declare const COMPUTER_CHANNELS: {
+    readonly about: "sixb:computer:about";
+    readonly folders: "sixb:computer:folders";
+    readonly pickFolder: "sixb:computer:pick-folder";
+    readonly allowFolder: "sixb:computer:allow-folder";
+    readonly forgetFolder: "sixb:computer:forget-folder";
+};
+type Invoke = (channel: string, ...args: unknown[]) => Promise<any>;
 /**
  * What the shell offers the page. `SixbDesktop` in `@sixb/client` is the page's view of this, and
  * `tests/app.test.ts` holds the two together.
@@ -10,7 +19,15 @@ export declare const DESKTOP_BRIDGE_NAME = "sixbDesktop";
  *  2. Handle it in `main.ts`, refusing any sender that `isAppUrl` does not accept.
  *  3. Add it to `SixbDesktop` as optional, because a page can outlive the shell it runs in.
  */
-export declare function desktopBridge<const Platform extends NodeJS.Platform>(platform: Platform): {
+export declare function desktopBridge<const Platform extends NodeJS.Platform>(platform: Platform, invoke: Invoke): {
     platform: Platform;
+    computer: {
+        about: () => Promise<any>;
+        folders: () => Promise<any>;
+        pickFolder: () => Promise<any>;
+        allowFolder: (folder: string) => Promise<any>;
+        forgetFolder: (folder: string) => Promise<any>;
+    };
 };
+export {};
 //# sourceMappingURL=bridge.d.ts.map

package/dist/shell/bridge.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../src/shell/bridge.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,eAAO,MAAM,mBAAmB,gBAAgB,CAAA;AAEhD;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,KAAK,CAAC,QAAQ,SAAS,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ;;EAEvF"}
+{"version":3,"file":"bridge.d.ts","sourceRoot":"","sources":["../../src/shell/bridge.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,eAAO,MAAM,mBAAmB,gBAAgB,CAAA;AAEhD,gEAAgE;AAChE,eAAO,MAAM,iBAAiB;;;;;;CAMpB,CAAA;AAIV,KAAK,MAAM,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAA;AAEnE;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,KAAK,CAAC,QAAQ,SAAS,MAAM,CAAC,QAAQ,EAClE,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,MAAM;;;;;;8BAQY,MAAM;+BACL,MAAM;;EAGlC"}

package/dist/shell/runner.d.ts

@@ -0,0 +1,60 @@
+/** The program `writeDesktopApp` compiles, in the runner's directory. */
+export declare const RUNNER_BINARY = "sixb-runner";
+export interface RunnerProcess {
+    /** One line of JSON from the runner. */
+    onLine(listener: (line: string) => void): void;
+    readonly exited: Promise<number>;
+    write(line: string): void;
+    /** Close its stdin, which it ends with. */
+    end(): void;
+    kill(): void;
+}
+export interface DesktopComputer {
+    readonly id: string;
+    readonly name: string;
+}
+/**
+ * The main process's hold on the program that runs the agent on this computer: it starts it, keeps it
+ * started while the app is open, and stops it on quit. It holds no sign-in: the program does, and
+ * only says where to send the person to approve one.
+ */
+export declare class DesktopRunner {
+    private readonly options;
+    private process;
+    private computer;
+    private folderList;
+    private waitingForComputer;
+    private foldersKnown;
+    private waitingForFolders;
+    private unsent;
+    private restart;
+    private restartWait;
+    private stopping;
+    constructor(options: {
+        readonly start: () => RunnerProcess;
+        /** A page in the system browser to approve this computer's sign-in on. */
+        readonly onSignIn: (url: string) => void;
+        readonly onProblem: (message: string) => void;
+    });
+    start(): void;
+    /** This computer, once the runner has said. Rejects if it quits before it does. */
+    about(): Promise<DesktopComputer>;
+    /** The folders allowed, once the runner knows: a page asking early mustn't take them for none. */
+    folders(): Promise<readonly string[]>;
+    allow(folder: string): void;
+    forget(folder: string): void;
+    /** Let it end a running turn and close its sessions, within a limit. */
+    stop(): Promise<void>;
+    private send;
+    private answerFolders;
+    private hear;
+}
+/** The runner as a child process of this one, its stderr for the app's own log. */
+export declare function startRunnerProcess(command: readonly [string, ...string[]], env: NodeJS.ProcessEnv): RunnerProcess;
+/**
+ * The environment the runner, and the agent's commands, run in. An app opened from the Dock gets a
+ * bare PATH, so the person's shell says what theirs is: the agent uses the tools they do. The `bun`
+ * beside the runner comes last, for someone with neither Bun nor Node.
+ */
+export declare function runnerEnvironment(runnerDir: string, base: NodeJS.ProcessEnv): Promise<NodeJS.ProcessEnv>;
+//# sourceMappingURL=runner.d.ts.map

package/dist/shell/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/shell/runner.ts"],"names":[],"mappings":"AAGA,yEAAyE;AACzE,eAAO,MAAM,aAAa,gBAAgB,CAAA;AAc1C,MAAM,WAAW,aAAa;IAC5B,wCAAwC;IACxC,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAA;IAC9C,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;IAChC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,2CAA2C;IAC3C,GAAG,IAAI,IAAI,CAAA;IACX,IAAI,IAAI,IAAI,CAAA;CACb;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAOD;;;;GAIG;AACH,qBAAa,aAAa;IAgBtB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAf1B,OAAO,CAAC,OAAO,CAA6B;IAC5C,OAAO,CAAC,QAAQ,CAA+B;IAC/C,OAAO,CAAC,UAAU,CAAwB;IAC1C,OAAO,CAAC,kBAAkB,CAGlB;IACR,OAAO,CAAC,YAAY,CAAQ;IAC5B,OAAO,CAAC,iBAAiB,CAA+C;IACxE,OAAO,CAAC,MAAM,CAAsB;IACpC,OAAO,CAAC,OAAO,CAA6C;IAC5D,OAAO,CAAC,WAAW,CAAgC;IACnD,OAAO,CAAC,QAAQ,CAAQ;gBAGL,OAAO,EAAE;QACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,aAAa,CAAA;QACnC,0EAA0E;QAC1E,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;QACxC,QAAQ,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;KAC9C;IAGH,KAAK,IAAI,IAAI;IAyBb,mFAAmF;IACnF,KAAK,IAAI,OAAO,CAAC,eAAe,CAAC;IAKjC,kGAAkG;IAClG,OAAO,IAAI,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC;IAYrC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAM3B,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAK5B,wEAAwE;IAClE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAc3B,OAAO,CAAC,IAAI;IAKZ,OAAO,CAAC,aAAa;IAKrB,OAAO,CAAC,IAAI;CA0Cb;AAED,mFAAmF;AACnF,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,EACvC,GAAG,EAAE,MAAM,CAAC,UAAU,GACrB,aAAa,CAwBf;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,CAAC,UAAU,GACtB,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAY5B"}

package/dist/shell/window.d.ts

@@ -9,6 +9,8 @@ export declare function mayNavigate(config: ShellConfig, url: string): boolean;
  * and not a frame it embeds from elsewhere.
  */
 export declare function isAppUrl(config: ShellConfig, url: string): boolean;
+/** Whether `url` is a web page of the project's API, the only place a sign-in is approved. */
+export declare function isApiPage(config: ShellConfig, url: string): boolean;
 /**
  * What the window paints before a page has: the loading page's own background, so the window
  * opens, and passes from that page to the app, without a flash of white.

package/dist/shell/window.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"window.d.ts","sourceRoot":"","sources":["../../src/shell/window.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAE/C;;;GAGG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAOrE;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAMlE;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB;;;CAAiD,CAAA;AAE/E;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM;;;;;EAEjD;AAED,qFAAqF;AACrF,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,OAAO,CAEpE;AAED,iGAAiG;AACjG,eAAO,MAAM,kBAAkB,KAAK,CAAA;AAEpC;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,QAsBvB,CAAA"}
+{"version":3,"file":"window.d.ts","sourceRoot":"","sources":["../../src/shell/window.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAE/C;;;GAGG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAOrE;AAED;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAMlE;AAED,8FAA8F;AAC9F,wBAAgB,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CASnE;AAED;;;GAGG;AACH,eAAO,MAAM,iBAAiB;;;CAAiD,CAAA;AAE/E;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM;;;;;EAEjD;AAED,qFAAqF;AACrF,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,OAAO,CAEpE;AAED,iGAAiG;AACjG,eAAO,MAAM,kBAAkB,KAAK,CAAA;AAEpC;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,oBAAoB,QAsBvB,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sixb/desktop",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "Ship a Sixb project's app as a desktop app",
   "keywords": [
     "sixb",

package/src/generate.ts

@@ -5,6 +5,7 @@ import { readAppIdentity } from "./identity"
 import { drawMacIcon } from "./mac-icon"
 import { run } from "./run"
 import type { ShellConfig } from "./shell/navigation"
+import { RUNNER_BINARY } from "./shell/runner"
 
 export interface DesktopAppOptions {
   /** The Sixb project. The desktop app is generated under its `.sixb/desktop`. */
@@ -13,6 +14,11 @@ export interface DesktopAppOptions {
   readonly appUrl: string
   /** The project's API. Its sign-in pages are where the window is approved. */
   readonly apiOrigin: string
+  /**
+   * What the app compiles to run the agent on this computer: the CLI names its own, as this package
+   * doesn't depend on it. Without one, the app has no way to run the agent here: see `writeRunner`.
+   */
+  readonly runnerEntry?: string
 }
 
 /** The Electron app `writeDesktopApp` generated, and what it is called. */
@@ -27,8 +33,11 @@ export interface GeneratedApp {
 // Read from the package's `src`, which ships, whether this module runs from `src` or `dist`.
 const SHELL_SOURCE_DIR = fileURLToPath(new URL("../src/shell", import.meta.url))
 
-/** Where a project's desktop app is generated (`app`) and packaged (`dist`). */
-export function desktopDir(projectRoot: string, part: "app" | "dist"): string {
+/**
+ * Where a project's desktop app is generated (`app`), what runs the agent is compiled (`runner`, beside
+ * the app as everything in the app's directory ships inside its archive), and it's packaged (`dist`).
+ */
+export function desktopDir(projectRoot: string, part: "app" | "dist" | "runner"): string {
   return join(projectRoot, ".sixb", "desktop", part)
 }
 
@@ -82,6 +91,35 @@ export async function writeDesktopApp(options: DesktopAppOptions): Promise<Gener
   return { dir, name: identity.name, version, icon }
 }
 
+/**
+ * Compiles what runs the agent into one program, so that the app needs nothing installed, and a `bun`
+ * beside it. The agent's own `sixb` runs on Bun or Node, which a person may have neither of, and the
+ * program can stand in for Bun: last on the PATH the shell gives it, after any they have. Returns its
+ * directory: null with no entry, and on Windows, which has no local sandbox to run the agent in.
+ */
+export async function writeRunner(options: DesktopAppOptions): Promise<string | null> {
+  const dir = desktopDir(options.projectRoot, "runner")
+  await rm(dir, { recursive: true, force: true })
+  if (!options.runnerEntry || process.platform === "win32") return null
+  await mkdir(dir, { recursive: true })
+  await run(
+    [
+      process.execPath,
+      "build",
+      "--compile",
+      options.runnerEntry,
+      `--outfile=${join(dir, RUNNER_BINARY)}`,
+    ],
+    "Could not compile what runs the agent."
+  )
+  await writeFile(
+    join(dir, "bun"),
+    `#!/bin/sh\nBUN_BE_BUN=1 exec "$(dirname "$0")/${RUNNER_BINARY}" "$@"\n`,
+    { mode: 0o755 }
+  )
+  return dir
+}
+
 /** The page the window shows while the app loads, and when it cannot reach the app. */
 export function renderShellPage(
   template: string,

package/src/index.ts

@@ -2,7 +2,7 @@ import { mkdir, readdir, rm } from "node:fs/promises"
 import { createRequire } from "node:module"
 import { dirname, join } from "node:path"
 import { fileURLToPath } from "node:url"
-import { type DesktopAppOptions, desktopDir, writeDesktopApp } from "./generate"
+import { type DesktopAppOptions, desktopDir, writeDesktopApp, writeRunner } from "./generate"
 import { bundleIdentifier } from "./identity"
 import { run } from "./run"
 
@@ -28,6 +28,11 @@ const PACKAGER_SCRIPT = fileURLToPath(new URL("../src/packager.mjs", import.meta
 /** Opens the app in a desktop window. `sixb dev --desktop` calls this. */
 export async function openDesktopApp(options: DesktopAppOptions): Promise<DesktopWindow> {
   const app = await writeDesktopApp(options)
+  // The window is still worth opening without it, for a project not using the agent: conversations
+  // run in the cloud. A build, which people get, fails instead.
+  await writeRunner(options).catch((error: unknown) => {
+    console.error("[SixbDesktop] Conversations will run in the cloud.", error)
+  })
   // Chromium writes plenty to stderr when all is well, so it goes to a file, named if the window
   // quits on its own with an error.
   const log = join(dirname(app.dir), "electron.log")
@@ -53,6 +58,7 @@ export async function openDesktopApp(options: DesktopAppOptions): Promise<Deskto
 /** Packages the app for this machine's platform. `sixb desktop build` calls this. */
 export async function buildDesktopApp(options: DesktopAppOptions): Promise<DesktopBuild> {
   const app = await writeDesktopApp(options)
+  const runner = await writeRunner(options)
   const out = desktopDir(options.projectRoot, "dist")
   await rm(out, { recursive: true, force: true })
 
@@ -67,6 +73,8 @@ export async function buildDesktopApp(options: DesktopAppOptions): Promise<Deskt
     electronVersion: (packageRequire("electron/package.json") as { readonly version: string })
       .version,
     ...(mac && app.icon ? { icon: await macIcon(app.icon) } : {}),
+    // Beside the app's archive, not in it: a program has to be a file of its own to run.
+    ...(runner ? { extraResource: [runner] } : {}),
     // Signs with the Developer ID certificate in the keychain, which notarization requires.
     ...(notarize ? { osxSign: {}, osxNotarize: notarize } : {}),
   })
@@ -171,7 +179,7 @@ function electronBinary(): string {
     const electronDir = dirname(packageRequire.resolve("electron/package.json"))
     throw new Error(
       "[SixbDesktop] Electron's binary is missing: its install script did not run. " +
-        `Run \`bun run --cwd ${electronDir} postinstall\`, then try again.`
+        `Run \`bun ${join(electronDir, "install.js")}\`, then try again.`
     )
   }
 }

package/src/shell/bridge.ts

@@ -1,6 +1,19 @@
 /** The name a page finds the desktop app under, through `useDesktop` in `@sixb/client/hooks`. */
 export const DESKTOP_BRIDGE_NAME = "sixbDesktop"
 
+/** How the page's `computer` methods reach the main process. */
+export const COMPUTER_CHANNELS = {
+  about: "sixb:computer:about",
+  folders: "sixb:computer:folders",
+  pickFolder: "sixb:computer:pick-folder",
+  allowFolder: "sixb:computer:allow-folder",
+  forgetFolder: "sixb:computer:forget-folder",
+} as const
+
+// Typed by `SixbDesktop` in `@sixb/client`, which the page reads: an `any` that a test holds to it.
+// biome-ignore lint/suspicious/noExplicitAny: each channel answers its own type.
+type Invoke = (channel: string, ...args: unknown[]) => Promise<any>
+
 /**
  * What the shell offers the page. `SixbDesktop` in `@sixb/client` is the page's view of this, and
  * `tests/app.test.ts` holds the two together.
@@ -11,6 +24,18 @@ export const DESKTOP_BRIDGE_NAME = "sixbDesktop"
  *  2. Handle it in `main.ts`, refusing any sender that `isAppUrl` does not accept.
  *  3. Add it to `SixbDesktop` as optional, because a page can outlive the shell it runs in.
  */
-export function desktopBridge<const Platform extends NodeJS.Platform>(platform: Platform) {
-  return { platform }
+export function desktopBridge<const Platform extends NodeJS.Platform>(
+  platform: Platform,
+  invoke: Invoke
+) {
+  return {
+    platform,
+    computer: {
+      about: () => invoke(COMPUTER_CHANNELS.about),
+      folders: () => invoke(COMPUTER_CHANNELS.folders),
+      pickFolder: () => invoke(COMPUTER_CHANNELS.pickFolder),
+      allowFolder: (folder: string) => invoke(COMPUTER_CHANNELS.allowFolder, folder),
+      forgetFolder: (folder: string) => invoke(COMPUTER_CHANNELS.forgetFolder, folder),
+    },
+  }
 }

package/src/shell/main.ts

@@ -1,12 +1,28 @@
 // The desktop shell's main process. `writeDesktopApp` compiles this file into the generated
 // Electron app; nothing imports it.
 import { existsSync, readFileSync } from "node:fs"
-import { join } from "node:path"
-import { app, BrowserWindow, type Event, nativeTheme, session, shell } from "electron"
+import { realpath, stat } from "node:fs/promises"
+import { hostname } from "node:os"
+import { isAbsolute, join } from "node:path"
+import {
+  app,
+  BrowserWindow,
+  dialog,
+  type Event,
+  type IpcMainInvokeEvent,
+  ipcMain,
+  type MessageBoxOptions,
+  nativeTheme,
+  session,
+  shell,
+} from "electron"
+import { COMPUTER_CHANNELS } from "./bridge"
 import { createNavigationState, isWebUrl, nextNavigationStep, type ShellConfig } from "./navigation"
+import { DesktopRunner, RUNNER_BINARY, runnerEnvironment, startRunnerProcess } from "./runner"
 import {
   HIDDEN_TITLE_BAR_CSS,
   hasHiddenTitleBar,
+  isApiPage,
   isAppUrl,
   mayNavigate,
   pageWebPreferences,
@@ -85,6 +101,109 @@ function createWindow(): void {
   void win.loadFile(loadingPage).then(() => load(config.appUrl))
 }
 
+/** Beside the app's archive once packaged, and beside the generated app before that. */
+const runnerDir = app.isPackaged
+  ? join(process.resourcesPath, "runner")
+  : join(appDir, "..", "runner")
+const runnerProgram = join(runnerDir, RUNNER_BINARY)
+let runnerEnv: NodeJS.ProcessEnv = process.env
+const runner = existsSync(runnerProgram)
+  ? new DesktopRunner({
+      start: () =>
+        startRunnerProcess(
+          // Its data: the window's sign-in is in there, as cookies the agent's commands mustn't read.
+          [
+            runnerProgram,
+            config.apiOrigin,
+            `${config.name} on ${hostname()}`,
+            app.getPath("userData"),
+          ],
+          runnerEnv
+        ),
+      // The runner holds the sign-in, and only says where to approve it: on the API, as the window's.
+      onSignIn: (url) => {
+        if (isApiPage(config, url)) void shell.openExternal(url)
+        else console.error(`[SixbDesktop] Refused to open a sign-in away from the API: ${url}`)
+      },
+      onProblem: (message) => console.error(`[SixbDesktop] ${message}`),
+    })
+  : null
+
+/** Answer the page's `computer` methods, asking whoever calls for the app's own origin first. */
+function answerComputer(
+  channel: string,
+  answer: (event: IpcMainInvokeEvent, ...args: unknown[]) => unknown
+): void {
+  ipcMain.handle(channel, (event, ...args) => {
+    if (!isAppUrl(config, event.senderFrame?.url ?? "")) {
+      throw new Error("[SixbDesktop] Only the app may ask for this.")
+    }
+    return answer(event, ...args)
+  })
+}
+
+/** What a page named as a folder: it gets here unchecked, so nothing is taken on its word. */
+async function namedFolder(value: unknown): Promise<string | null> {
+  if (typeof value !== "string" || !isAbsolute(value)) return null
+  const folder = await realpath(value).catch(() => null)
+  if (!folder) return null
+  return (await stat(folder)).isDirectory() ? folder : null
+}
+
+function installComputerAccess(running: DesktopRunner): void {
+  answerComputer(COMPUTER_CHANNELS.about, () => running.about())
+  answerComputer(COMPUTER_CHANNELS.folders, () => running.folders())
+  answerComputer(COMPUTER_CHANNELS.pickFolder, async (event) => {
+    const options = {
+      title: "Choose a folder",
+      message:
+        "Choose where the agent works. Messages you send from here or the web run in this folder, " +
+        "as you, and its commands run without asking.",
+      buttonLabel: "Work Here",
+      properties: ["openDirectory", "createDirectory"] as ("openDirectory" | "createDirectory")[],
+    }
+    const owner = BrowserWindow.fromWebContents(event.sender)
+    const { canceled, filePaths } = owner
+      ? await dialog.showOpenDialog(owner, options)
+      : await dialog.showOpenDialog(options)
+    const folder = canceled ? null : await namedFolder(filePaths[0])
+    if (folder) running.allow(folder)
+    return folder
+  })
+  answerComputer(COMPUTER_CHANNELS.allowFolder, async (event, value) => {
+    const owner = BrowserWindow.fromWebContents(event.sender)
+    const ask = (options: MessageBoxOptions) =>
+      owner ? dialog.showMessageBox(owner, options) : dialog.showMessageBox(options)
+    const folder = await namedFolder(value)
+    if (!folder) {
+      // Its button would otherwise do nothing, with nothing to say why.
+      await ask({
+        type: "warning",
+        message: "That folder isn't on this computer now.",
+        detail: "Put it back, or continue in the cloud.",
+      })
+      return false
+    }
+    const { response } = await ask({
+      type: "question",
+      message: `Let the agent work in ${folder}?`,
+      detail:
+        "Messages you send from here or the web, in any conversation in this folder, run on this " +
+        "computer, as you. The agent's commands run there without asking.",
+      buttons: ["Allow", "Cancel"],
+      // A page can ask at any moment: the Return they were about to press isn't their answer.
+      defaultId: 1,
+      cancelId: 1,
+    })
+    if (response !== 0) return false
+    running.allow(folder)
+    return true
+  })
+  answerComputer(COMPUTER_CHANNELS.forgetFolder, async (_event, value) => {
+    if (typeof value === "string") running.forget(value)
+  })
+}
+
 void app.whenReady().then(() => {
   // A packaged app carries its icon in its bundle. Run from source, it would show Electron's.
   if (icon && !app.isPackaged) app.dock?.setIcon(icon)
@@ -96,12 +215,34 @@ void app.whenReady().then(() => {
     }
   )
 
+  if (runner) {
+    installComputerAccess(runner)
+    void runnerEnvironment(runnerDir, process.env).then((env) => {
+      runnerEnv = env
+      runner.start()
+    })
+  } else {
+    answerComputer(COMPUTER_CHANNELS.about, () => null)
+    answerComputer(COMPUTER_CHANNELS.folders, () => [])
+  }
+
   createWindow()
   app.on("activate", () => {
     if (BrowserWindow.getAllWindows().length === 0) createWindow()
   })
 })
 
+// Waits for the runner, so that a turn running here records its end before the app is gone.
+let runnerStopped = false
+app.on("before-quit", (event) => {
+  if (!runner || runnerStopped) return
+  event.preventDefault()
+  void runner.stop().finally(() => {
+    runnerStopped = true
+    app.quit()
+  })
+})
+
 app.on("window-all-closed", () => {
   if (process.platform !== "darwin") app.quit()
 })

package/src/shell/preload.ts

@@ -1,10 +1,13 @@
 // Runs in every page the window shows, before the page's own scripts, in a world of its own. Electron
 // sandboxes it: of what it imports, only `electron` may remain once compiled.
-import { contextBridge } from "electron"
+import { contextBridge, ipcRenderer } from "electron"
 import { DESKTOP_BRIDGE_NAME, desktopBridge } from "./bridge"
 import { CONTROLS_HEIGHT_PX, hasHiddenTitleBar } from "./window"
 
-contextBridge.exposeInMainWorld(DESKTOP_BRIDGE_NAME, desktopBridge(process.platform))
+contextBridge.exposeInMainWorld(
+  DESKTOP_BRIDGE_NAME,
+  desktopBridge(process.platform, (channel, ...args) => ipcRenderer.invoke(channel, ...args))
+)
 
 if (hasHiddenTitleBar(process.platform)) installHiddenTitleBar()
 

package/src/shell/runner.ts

@@ -0,0 +1,296 @@
+import { spawn } from "node:child_process"
+import { delimiter } from "node:path"
+
+/** The program `writeDesktopApp` compiles, in the runner's directory. */
+export const RUNNER_BINARY = "sixb-runner"
+
+/** How long a person's shell gets to say what their PATH is. */
+const LOGIN_SHELL_WAIT_MS = 3_000
+/** How long a page waits to hear which folders are allowed, before asking for one instead. */
+const FOLDERS_WAIT_MS = 10_000
+/** How long the runner gets to end a running turn and close its sessions. */
+const STOP_WAIT_MS = 12_000
+const RESTART_WAIT_MS = { first: 2_000, longest: 60_000 } as const
+/** Running this long, the runner wasn't what failed quickly: the next restart waits the least again. */
+const STEADY_MS = 60_000
+/** Exit status of a runner whose sign-in ended. */
+const EXIT_SIGNED_OUT = 3
+
+export interface RunnerProcess {
+  /** One line of JSON from the runner. */
+  onLine(listener: (line: string) => void): void
+  readonly exited: Promise<number>
+  write(line: string): void
+  /** Close its stdin, which it ends with. */
+  end(): void
+  kill(): void
+}
+
+export interface DesktopComputer {
+  readonly id: string
+  readonly name: string
+}
+
+type RunnerCommand = {
+  readonly type: "allow" | "forget"
+  readonly folder: string
+}
+
+/**
+ * The main process's hold on the program that runs the agent on this computer: it starts it, keeps it
+ * started while the app is open, and stops it on quit. It holds no sign-in: the program does, and
+ * only says where to send the person to approve one.
+ */
+export class DesktopRunner {
+  private process: RunnerProcess | null = null
+  private computer: DesktopComputer | null = null
+  private folderList: readonly string[] = []
+  private waitingForComputer: {
+    readonly resolve: (computer: DesktopComputer) => void
+    readonly reject: (error: Error) => void
+  }[] = []
+  private foldersKnown = false
+  private waitingForFolders: ((folders: readonly string[]) => void)[] = []
+  private unsent: RunnerCommand[] = []
+  private restart: ReturnType<typeof setTimeout> | null = null
+  private restartWait: number = RESTART_WAIT_MS.first
+  private stopping = false
+
+  constructor(
+    private readonly options: {
+      readonly start: () => RunnerProcess
+      /** A page in the system browser to approve this computer's sign-in on. */
+      readonly onSignIn: (url: string) => void
+      readonly onProblem: (message: string) => void
+    }
+  ) {}
+
+  start(): void {
+    if (this.stopping) return
+    const started = Date.now()
+    const process = this.options.start()
+    this.process = process
+    process.onLine((line) => this.hear(line))
+    for (const command of this.unsent.splice(0)) process.write(JSON.stringify(command))
+    void process.exited.then((code) => {
+      this.process = null
+      if (this.stopping) return
+      if (Date.now() - started >= STEADY_MS) this.restartWait = RESTART_WAIT_MS.first
+      // A sign-in that ended is no problem to report: started again, it waits for a new one.
+      if (code !== EXIT_SIGNED_OUT) {
+        this.options.onProblem(`What runs the agent quit with exit code ${code}.`)
+      }
+      // Told it failed, not that there's nothing to run on: a message mustn't go elsewhere on a guess.
+      for (const { reject } of this.waitingForComputer.splice(0)) {
+        reject(new Error("[SixbDesktop] What runs the agent on this computer couldn't start."))
+      }
+      this.answerFolders()
+      this.restart = setTimeout(() => this.start(), this.restartWait)
+      this.restartWait = Math.min(this.restartWait * 2, RESTART_WAIT_MS.longest)
+    })
+  }
+
+  /** This computer, once the runner has said. Rejects if it quits before it does. */
+  about(): Promise<DesktopComputer> {
+    if (this.computer) return Promise.resolve(this.computer)
+    return new Promise((resolve, reject) => this.waitingForComputer.push({ resolve, reject }))
+  }
+
+  /** The folders allowed, once the runner knows: a page asking early mustn't take them for none. */
+  folders(): Promise<readonly string[]> {
+    if (this.foldersKnown) return Promise.resolve(this.folderList)
+    return new Promise((resolve) => {
+      // A runner that can't read its config keeps trying, and a message mustn't wait on that for good.
+      const timer = setTimeout(() => this.answerFolders(), FOLDERS_WAIT_MS)
+      this.waitingForFolders.push((folders) => {
+        clearTimeout(timer)
+        resolve(folders)
+      })
+    })
+  }
+
+  allow(folder: string): void {
+    this.send({ type: "allow", folder })
+    // A page asking right after choosing finds it there, before the runner has said so.
+    if (!this.folderList.includes(folder)) this.folderList = [...this.folderList, folder]
+  }
+
+  forget(folder: string): void {
+    this.send({ type: "forget", folder })
+    this.folderList = this.folderList.filter((known) => known !== folder)
+  }
+
+  /** Let it end a running turn and close its sessions, within a limit. */
+  async stop(): Promise<void> {
+    this.stopping = true
+    if (this.restart) clearTimeout(this.restart)
+    const process = this.process
+    if (!process) return
+    process.end()
+    let timer: ReturnType<typeof setTimeout> | undefined
+    const late = new Promise<"late">((resolve) => {
+      timer = setTimeout(() => resolve("late"), STOP_WAIT_MS)
+    })
+    if ((await Promise.race([process.exited, late])) === "late") process.kill()
+    clearTimeout(timer)
+  }
+
+  private send(command: RunnerCommand): void {
+    if (this.process) this.process.write(JSON.stringify(command))
+    else this.unsent.push(command)
+  }
+
+  private answerFolders(): void {
+    this.foldersKnown = true
+    for (const answer of this.waitingForFolders.splice(0)) answer(this.folderList)
+  }
+
+  private hear(line: string): void {
+    let event: Record<string, unknown>
+    try {
+      event = JSON.parse(line)
+    } catch {
+      return
+    }
+    switch (event.type) {
+      case "computer":
+        if (typeof event.id === "string" && typeof event.name === "string") {
+          const computer = { id: event.id, name: event.name }
+          this.computer = computer
+          for (const { resolve } of this.waitingForComputer.splice(0)) resolve(computer)
+        }
+        return
+      case "folders":
+        if (Array.isArray(event.folders)) this.folderList = event.folders.map(String)
+        this.answerFolders()
+        return
+      // Nothing runs in the list on file until it's signed in: none, so the next message asks, and
+      // answering signs in. It would otherwise wait on a sign-in nobody was asked for.
+      case "signed-out":
+      case "signed-out-waiting":
+        this.folderList = []
+        this.answerFolders()
+        return
+      // It can't say which until the project answers: the last it said, for now.
+      case "unreachable":
+        this.answerFolders()
+        return
+      case "sign-in":
+        if (typeof event.url === "string") this.options.onSignIn(event.url)
+        return
+      case "sign-in-failed":
+        this.folderList = []
+        if (typeof event.message === "string") this.options.onProblem(event.message)
+        return
+      case "session.lost":
+      case "error":
+        if (typeof event.message === "string") this.options.onProblem(event.message)
+    }
+  }
+}
+
+/** The runner as a child process of this one, its stderr for the app's own log. */
+export function startRunnerProcess(
+  command: readonly [string, ...string[]],
+  env: NodeJS.ProcessEnv
+): RunnerProcess {
+  const [file, ...args] = command
+  const child = spawn(file, args, { env, stdio: ["pipe", "pipe", "inherit"] })
+  // A runner that's gone by the time this writes: its restart is what answers that.
+  child.stdin.on("error", () => {})
+  const exited = new Promise<number>((resolve) => {
+    child.once("error", () => resolve(-1))
+    child.once("exit", (code) => resolve(code ?? -1))
+  })
+  return {
+    onLine(listener) {
+      let rest = ""
+      child.stdout.setEncoding("utf8").on("data", (chunk: string) => {
+        rest += chunk
+        const lines = rest.split("\n")
+        rest = lines.pop() ?? ""
+        for (const line of lines) listener(line)
+      })
+    },
+    exited,
+    write: (line) => void child.stdin.write(`${line}\n`),
+    end: () => void child.stdin.end(),
+    kill: () => void child.kill("SIGKILL"),
+  }
+}
+
+/**
+ * The environment the runner, and the agent's commands, run in. An app opened from the Dock gets a
+ * bare PATH, so the person's shell says what theirs is: the agent uses the tools they do. The `bun`
+ * beside the runner comes last, for someone with neither Bun nor Node.
+ */
+export async function runnerEnvironment(
+  runnerDir: string,
+  base: NodeJS.ProcessEnv
+): Promise<NodeJS.ProcessEnv> {
+  const shell = await readLoginShell(base.SHELL).catch(() => null)
+  const env = Object.fromEntries(
+    // What a terminal `sixb dev` was told about its own project is no business of this one.
+    Object.entries(base).filter(([name]) => !name.startsWith("SIXB_"))
+  )
+  return {
+    ...env,
+    PATH: [shell?.path ?? base.PATH ?? "", runnerDir].join(delimiter),
+    // Where `sixb` keeps its sign-in, and so what the agent's commands are kept from.
+    ...(shell?.configHome ? { XDG_CONFIG_HOME: shell.configHome } : {}),
+  }
+}
+
+/**
+ * Between markers, as a shell's startup files may print whatever they like.
+ *
+ * In a session of its own, with no terminal: an interactive shell takes over the one it inherits. Under
+ * `sixb dev --desktop` that's the person's, and whatever reads a key or a mouse move there meanwhile is
+ * stopped by it, for good, leaving the terminal as it was.
+ *
+ * A limit of its own, and a kill that can't be ignored: an interactive shell ignores `execFile`'s, and
+ * what it started can hold the pipe open long after it's gone. A startup file that waits on a person
+ * mustn't stop the agent.
+ */
+function readLoginShell(
+  shell: string | undefined
+): Promise<{ readonly path: string; readonly configHome: string } | null> {
+  if (!shell) return Promise.resolve(null)
+  return new Promise((resolve) => {
+    // `spawn`, not `execFile`, which ignores `detached`.
+    const child = spawn(
+      shell,
+      ["-ilc", 'printf "__SIXB_SHELL__%s\\n%s__SIXB_SHELL__" "$PATH" "$XDG_CONFIG_HOME"'],
+      { detached: true, stdio: ["ignore", "pipe", "ignore"] }
+    )
+    let printed = ""
+    const said = () => {
+      const [path, configHome] =
+        /__SIXB_SHELL__(.*)__SIXB_SHELL__/s.exec(printed)?.[1]?.split("\n") ?? []
+      return path ? { path, configHome: configHome ?? "" } : null
+    }
+    const timer = setTimeout(() => {
+      // The whole group: it's alone in it, with whatever its startup files began.
+      if (child.pid) {
+        try {
+          process.kill(-child.pid, "SIGKILL")
+        } catch {
+          // Gone already.
+        }
+      }
+      // What it said counts, whatever it left holding the pipe.
+      resolve(said())
+    }, LOGIN_SHELL_WAIT_MS)
+    child.stdout.on("data", (chunk) => {
+      printed += String(chunk)
+    })
+    child.once("error", () => {
+      clearTimeout(timer)
+      resolve(null)
+    })
+    child.once("close", () => {
+      clearTimeout(timer)
+      resolve(said())
+    })
+  })
+}

package/src/shell/window.ts

@@ -25,6 +25,18 @@ export function isAppUrl(config: ShellConfig, url: string): boolean {
   }
 }
 
+/** Whether `url` is a web page of the project's API, the only place a sign-in is approved. */
+export function isApiPage(config: ShellConfig, url: string): boolean {
+  try {
+    const { origin, protocol } = new URL(url)
+    return (
+      (protocol === "https:" || protocol === "http:") && origin === new URL(config.apiOrigin).origin
+    )
+  } catch {
+    return false
+  }
+}
+
 /**
  * What the window paints before a page has: the loading page's own background, so the window
  * opens, and passes from that page to the app, without a flash of white.