acrylblends 1.3.2 → 1.5.0

package/lib/cordis/door.js

@@ -2,7 +2,7 @@ import { t as Acryl } from "../app-CQcGWjrk.js";
 import { r as streamSSE } from "../streaming-BlDaph8U.js";
 import { r as loopbackAuthority } from "../loopback-only-BbasoF7R.js";
 import "../helpers-BEjcdbgw.js";
-import { n as clientModules } from "../client-modules-Bkdr83jO.js";
+import { n as clientModules } from "../client-modules-C5qiVroz.js";
 import { a as MAX_WAIT_MS, d as parseChannelToHost, l as UiControlError, p as parseUiRequest, r as MAX_SNAPSHOT_NODES, u as WINDOW_ID } from "../protocol-CQ_if7Dg.js";
 import { a as INVALID_JSON, c as operatorOnly, d as AuditLog, f as auditPath, i as DOOR_PREFIX, l as privateApi, o as error, p as UiChannel, r as pageChannelRoutes, s as jsonBody, t as renderSnapshot, u as readJson } from "../snapshot-text-CXTnjxGx.js";
 import "../src-iBJ2ysV9.js";
@@ -464,15 +464,20 @@ const VERB_SPECS = {
 		}
 	},
 	"plugin-pull": {
-		usage: "plugin pull <source>: fetch a plugin someone released (github:<owner>/<repo>[@<version>][@sha256:<digest>], or a .tgz), check it and start it, live",
-		description: "Fetch a plugin someone released, without running anything; check its digest, that it works on every OS and that this app has the services it needs; then install and start it without a restart. A refusal says why and changes nothing.",
+		usage: "plugin pull <source> | --from <list>: fetch a plugin someone released (github:<owner>/<repo>[@<version>][@sha256:<digest>], or a .tgz), or every plugin of a group's list, check each and start it, live",
+		description: "Fetch a plugin someone released, without running anything; check its digest, that it works on every OS and that this app has the services it needs; then install and start it without a restart. A refusal says why and changes nothing. With from instead of source, pull every source of a group's list (one per line, # comments); each is pulled on its own, so a refused one is named with its reason and the others still come in.",
 		arguments: {
 			type: "object",
-			properties: { source: {
-				type: "string",
-				description: "github:<owner>/<repo>[@<version>][@sha256:<digest>], or a .tgz path or https address"
-			} },
-			required: ["source"],
+			properties: {
+				source: {
+					type: "string",
+					description: "github:<owner>/<repo>[@<version>][@sha256:<digest>], or a .tgz path or https address"
+				},
+				from: {
+					type: "string",
+					description: "instead of source: a list of sources, a file in the app (e.g. group.txt) or an https address"
+				}
+			},
 			additionalProperties: false
 		}
 	},
@@ -708,7 +713,7 @@ var Door = class {
 			}
 			case "plugin-list": return this.plugin((plugins) => plugins.list(), false, this.installed());
 			case "plugin-add": return this.plugin((extensions) => extensions.install(this.insideApp(input.folder)));
-			case "plugin-pull": return this.pull(input.source);
+			case "plugin-pull": return input.from === void 0 ? this.pull(input.source) : this.pullList(input.from, input.source);
 			case "plugin-publish": return this.planPublish(input);
 			case "plugin-remove": {
 				const name = input.name;
@@ -997,13 +1002,29 @@ var Door = class {
 	async pull(source) {
 		if (typeof source !== "string" || source === "") throw new DoorError("invalid", "plugin pull needs a source, e.g. plugin pull github:someone/pomodoro@0.1.0");
 		const value = await this.share().pull(source);
-		if (!value.ok) throw new DoorError("refused", `${value.reason ?? "the pull was refused"}. ${value.next ?? "nothing changed"}.`);
+		if (!value.ok) throw new DoorError("refused", `${sentence(value.reason ?? "the pull was refused")} ${sentence(value.next ?? "nothing changed")}`);
 		if (value.action !== "unchanged" && this.deps.reloadOnChange !== false) await this.deps.channel.reloadAll();
 		return {
 			value,
 			text: JSON.stringify(value, null, 2)
 		};
 	}
+	/** A group's list: every source is pulled on its own, so one refused plugin is named with its reason and the others still install and run. */
+	async pullList(from, source) {
+		if (source !== void 0) throw new DoorError("invalid", "plugin pull takes a source or --from <list>, not both");
+		if (typeof from !== "string" || from === "") throw new DoorError("invalid", "plugin pull --from needs a list, e.g. plugin pull --from group.txt");
+		const value = await this.share().pullList(from);
+		if (!value.ok) throw new DoorError("refused", `${sentence(value.reason)} ${sentence(value.next)}`);
+		if (value.entries.some((entry) => entry.result.ok && entry.result.action !== "unchanged") && this.deps.reloadOnChange !== false) await this.deps.channel.reloadAll();
+		const lines = value.entries.map((entry) => `${entry.source}: ${pullLine(entry.result)}`);
+		const refused = value.entries.filter((entry) => !entry.result.ok);
+		const summary = `${String(value.entries.length - refused.length)} of ${String(value.entries.length)} from ${value.from} pulled`;
+		if (refused.length > 0) throw new DoorError("refused", [`${summary}; ${String(refused.length)} refused, the others are in and running.`, ...lines].join("\n"));
+		return {
+			value,
+			text: [`${summary}.`, ...lines].join("\n")
+		};
+	}
 	/** A folder named by an agent, resolved from the app folder; it must be inside the app. */
 	insideApp(folder) {
 		if (typeof folder !== "string" || folder === "") throw new DoorError("invalid", "plugin add needs a folder, e.g. plugins/pomodoro");
@@ -1040,6 +1061,16 @@ var Door = class {
 		};
 	}
 };
+/** One source's outcome in a list pull, as a person reads it. */
+function pullLine(result) {
+	if (!result.ok) return `refused: ${sentence(result.reason ?? "the pull was refused")} ${sentence(result.next ?? "nothing changed")}`;
+	return `${result.action ?? "pulled"}${result.name === void 0 ? "" : ` ${result.name}`}`;
+}
+/** A text as one sentence: the full stop added only when it has no closing punctuation of its own (a reason may end with one, a next step often does). */
+function sentence(text) {
+	const trimmed = text.trim();
+	return /[.!?]$/u.test(trimmed) ? trimmed : `${trimmed}.`;
+}
 //#endregion
 //#region ../../plugins/acryl-door/src/host/chat-tools.ts
 /**

package/lib/node-server/register.js

@@ -1,4 +1,4 @@
-import { n as compileModule } from "../transpile-QUK9b3eG.js";
+import { n as compileModule, r as usePackagesOfProgram } from "../transpile-CRRaixyS.js";
 import { registerHooks } from "node:module";
 import { existsSync, readFileSync } from "node:fs";
 import { fileURLToPath, pathToFileURL } from "node:url";
@@ -35,6 +35,11 @@ registerHooks({ load(url, context, nextLoad) {
 */
 const plugins = new URL("../../", import.meta.url);
 const appRoot = new URL("../", plugins).href;
+const family = new URL("instance/bundle.ts", plugins);
+if (existsSync(fileURLToPath(family))) {
+	const { appTree } = await import(family.href);
+	if (appTree(process.env, fileURLToPath(appRoot)) !== void 0) usePackagesOfProgram(fileURLToPath(appRoot));
+}
 const resolver = new URL("extensions/resolve.ts", plugins);
 if (existsSync(fileURLToPath(new URL("acryl-router/src/index.ts", plugins))) && existsSync(fileURLToPath(resolver))) {
 	const { routerAliases } = await import(resolver.href);

package/lib/node-server.js

@@ -1,5 +1,5 @@
 import { a as serve, d as RequestError, i as createAdaptorServer, n as UpgradeEmitter, o as upgradeWebSocket, r as UpgradeHub, s as getRequestListener, t as testWebSocket } from "./test-websocket-CQOSvBth.js";
 import { t as serveStatic } from "./serve-static-C1Nkj_xB.js";
 import { t as getConnInfo } from "./conninfo-CWJwieh4.js";
-import { n as clientModules, t as buildClientModules } from "./client-modules-Bkdr83jO.js";
+import { n as clientModules, t as buildClientModules } from "./client-modules-C5qiVroz.js";
 export { RequestError, UpgradeEmitter, UpgradeHub, buildClientModules, clientModules, createAdaptorServer, getConnInfo, getRequestListener, serve, serveStatic, testWebSocket, upgradeWebSocket };

package/lib/{transpile-QUK9b3eG.js → transpile-CRRaixyS.js}

@@ -23,10 +23,25 @@ const importSources = /* @__PURE__ */ new Map();
 * @returns the compiler.
 * @throws MissingTypeScriptError when the app has no `typescript`.
 */
+/** The nearest folder from `start` up whose node_modules has `typescript`, or undefined. */
+function typescriptOwner(start) {
+	for (let dir = start;; dir = dirname(dir)) {
+		if (existsSync(join(dir, "node_modules", "typescript", "package.json"))) return dir;
+		if (dirname(dir) === dir) return void 0;
+	}
+}
+/** The Program's folder when this process is a desktop product's frame host: the person's source has no packages, the bundle has them. */
+let programPackages;
+/**
+* In a desktop product's frame host, compile with the Program's packages when a file's own chain has none (`register.ts` calls this once it finds the
+* product's app tree, plugins/instance/bundle.ts). Nowhere else: an app without `typescript` is told so.
+*/
+function usePackagesOfProgram(dir) {
+	programPackages = dir;
+}
 function compilerFor(file, what) {
-	let owner;
-	for (let dir = dirname(file); owner === void 0; dir = dirname(dir)) if (existsSync(join(dir, "node_modules", "typescript", "package.json"))) owner = dir;
-	else if (dirname(dir) === dir) throw new MissingTypeScriptError(file, what);
+	const owner = typescriptOwner(dirname(file)) ?? (programPackages === void 0 ? void 0 : typescriptOwner(programPackages));
+	if (owner === void 0) throw new MissingTypeScriptError(file, what);
 	const path = createRequire(join(owner, "package.json")).resolve("typescript");
 	let compiler = compilers.get(path);
 	if (compiler === void 0) {
@@ -87,4 +102,4 @@ function rewriteSpecifiers(ts, code, rewrite) {
 	return result + code.slice(last);
 }
 //#endregion
-export { compileModule as n, MissingTypeScriptError as t };
+export { compileModule as n, usePackagesOfProgram as r, MissingTypeScriptError as t };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "acrylblends",
-  "version": "1.3.2",
+  "version": "1.5.0",
   "description": "The Acryl web framework (import { Acryl } from \"acrylblends\") and the acrylblends command that scaffolds Cordis apps.",
   "license": "MIT",
   "type": "module",

package/plugins/acryl-door/src/cli/acryl.ts

@@ -17,7 +17,7 @@ import { fileURLToPath } from 'node:url'
 import { readDoorFile, STATE_DIR, DOOR_FILE } from '../host/door-file.ts'
 
 const ACT_OPS = new Set(['click', 'type', 'select', 'press', 'scroll', 'wait', 'reload', 'navigate'])
-const VALUED = new Set(['--dir', '--owner', '--license', '--ref', '--text', '--option', '--key', '--direction', '--amount', '--cursor', '--max-nodes', '--role', '--name', '--timeout-ms', '--id', '--width', '--height', '--window', '--tool', '--args', '--path'])
+const VALUED = new Set(['--dir', '--owner', '--license', '--ref', '--text', '--option', '--key', '--direction', '--amount', '--cursor', '--max-nodes', '--role', '--name', '--timeout-ms', '--id', '--width', '--height', '--window', '--tool', '--args', '--path', '--from'])
 const FLAGS = new Set(['--json', '--submit', '--no-clear', '--gone', '--force', '--help'])
 
 export class UsageError extends Error {}
@@ -139,7 +139,12 @@ export function parseInvocation(argv: readonly string[], env: NodeJS.ProcessEnv
     case 'plugin': {
       if (second === 'list' || second === 'reload') return make(`plugin-${second}`)
       if (second === 'add') { if (third === undefined) throw new UsageError('plugin add needs a folder, e.g. plugin add plugins/pomodoro'); return make('plugin-add', { folder: third }) }
-      if (second === 'pull') { if (third === undefined) throw new UsageError('plugin pull needs a source, e.g. plugin pull github:someone/pomodoro@0.1.0'); return make('plugin-pull', { source: third }) }
+      if (second === 'pull') {
+        const from = values.get('--from')
+        if (from !== undefined) { if (third !== undefined) throw new UsageError('plugin pull takes a source or --from <list>, not both'); return make('plugin-pull', { from }) }
+        if (third === undefined) throw new UsageError('plugin pull needs a source, e.g. plugin pull github:someone/pomodoro@0.1.0, or --from <list>')
+        return make('plugin-pull', { source: third })
+      }
       if (second === 'publish') {
         if (third === undefined) throw new UsageError('plugin publish needs a plugin name, e.g. plugin publish pomodoro')
         const owner = values.get('--owner')
@@ -191,13 +196,17 @@ export function parseInvocation(argv: readonly string[], env: NodeJS.ProcessEnv
   }
 }
 
-/** The app folder: `--dir`, or the nearest folder upward from `cwd` that has `.acryl/door.json` (or at least `.acryl/`). */
+/**
+ * The app folder: `--dir`, or the nearest folder upward from `cwd` that has `.acryl/door.json`. When no app is running, the nearest folder that is an app (it
+ * has a `blend.yaml`), so "no running app in <that folder>" names the app. A folder that only has a `.acryl/` is not an app: the person's `~/.acryl` is ACRYL's
+ * own home, and it must never be taken for the app the command was run in.
+ */
 export function findApp(cwd: string, dir: string | undefined): string | undefined {
   if (dir !== undefined) return resolve(cwd, dir)
   let fallback: string | undefined
   for (let at = resolve(cwd); ; at = dirname(at)) {
     if (existsSync(join(at, STATE_DIR, DOOR_FILE))) return at
-    if (fallback === undefined && existsSync(join(at, STATE_DIR))) fallback = at
+    if (fallback === undefined && existsSync(join(at, 'blend.yaml'))) fallback = at
     if (dirname(at) === at) return fallback
   }
 }

package/plugins/acryl-door/src/host/door.ts

@@ -41,11 +41,21 @@ export interface PluginSharePort {
   list(): readonly unknown[]
   /** Take a plugin out and forget its record; a pulled folder still holding the release as pulled goes too. */
   remove(name: string): Promise<unknown>
-  pull(source: string): Promise<{ readonly ok: boolean; readonly action?: string; readonly reason?: string; readonly next?: string }>
+  pull(source: string): Promise<PullView>
+  /** Pull each source of a group's list on its own: one that is refused does not stop the others. */
+  pullList(from: string): Promise<PullListView>
   planPublish(name: string, options?: PublishOptionsView): Promise<PublishPlanView | { readonly ok: false; readonly reason: string; readonly next: string }>
   publish(name: string, confirmed: PublishPlanView, options?: PublishOptionsView): Promise<{ readonly ok: boolean; readonly reason?: string }>
 }
 
+/** What one pull did, or why it was refused. */
+export interface PullView { readonly ok: boolean; readonly action?: string; readonly name?: string; readonly reason?: string; readonly next?: string }
+
+/** What a list pull did for each source, or why the list itself was refused (then nothing was pulled). */
+export type PullListView =
+  | { readonly ok: true; readonly from: string; readonly entries: readonly { readonly line: number; readonly source: string; readonly result: PullView }[] }
+  | { readonly ok: false; readonly reason: string; readonly next: string }
+
 /** Who a plan publishes as, and under which license; the service's defaults when absent. */
 export interface PublishOptionsView {
   readonly owner?: string
@@ -159,7 +169,7 @@ export class Door {
       }
       case 'plugin-list': return this.plugin(plugins => plugins.list(), false, this.installed())
       case 'plugin-add': return this.plugin(extensions => extensions.install(this.insideApp(input.folder)))
-      case 'plugin-pull': return this.pull(input.source)
+      case 'plugin-pull': return input.from === undefined ? this.pull(input.source) : this.pullList(input.from, input.source)
       case 'plugin-publish': return this.planPublish(input)
       case 'plugin-remove': {
         const name = input.name
@@ -388,12 +398,28 @@ export class Door {
     if (typeof source !== 'string' || source === '') throw new DoorError('invalid', 'plugin pull needs a source, e.g. plugin pull github:someone/pomodoro@0.1.0')
     const value = await this.share().pull(source)
     // A refusal is a failed command, so a script does not read it as done; it changed nothing, and the open pages stay.
-    if (!value.ok) throw new DoorError('refused', `${value.reason ?? 'the pull was refused'}. ${value.next ?? 'nothing changed'}.`)
+    if (!value.ok) throw new DoorError('refused', `${sentence(value.reason ?? 'the pull was refused')} ${sentence(value.next ?? 'nothing changed')}`)
     // Neither did pulling what is already there change anything.
     if (value.action !== 'unchanged' && this.deps.reloadOnChange !== false) await this.deps.channel.reloadAll()
     return { value, text: JSON.stringify(value, null, 2) }
   }
 
+  /** A group's list: every source is pulled on its own, so one refused plugin is named with its reason and the others still install and run. */
+  private async pullList(from: unknown, source: unknown): Promise<VerbAnswer> {
+    if (source !== undefined) throw new DoorError('invalid', 'plugin pull takes a source or --from <list>, not both')
+    if (typeof from !== 'string' || from === '') throw new DoorError('invalid', 'plugin pull --from needs a list, e.g. plugin pull --from group.txt')
+    const value = await this.share().pullList(from)
+    if (!value.ok) throw new DoorError('refused', `${sentence(value.reason)} ${sentence(value.next)}`)
+    const changed = value.entries.some(entry => entry.result.ok && entry.result.action !== 'unchanged')
+    if (changed && this.deps.reloadOnChange !== false) await this.deps.channel.reloadAll()
+    const lines = value.entries.map(entry => `${entry.source}: ${pullLine(entry.result)}`)
+    const refused = value.entries.filter(entry => !entry.result.ok)
+    const summary = `${String(value.entries.length - refused.length)} of ${String(value.entries.length)} from ${value.from} pulled`
+    // Some refused: the command failed, so a script sees it, but the ones that came in stay in and keep running.
+    if (refused.length > 0) throw new DoorError('refused', [`${summary}; ${String(refused.length)} refused, the others are in and running.`, ...lines].join('\n'))
+    return { value, text: [`${summary}.`, ...lines].join('\n') }
+  }
+
   /** A folder named by an agent, resolved from the app folder; it must be inside the app. */
   private insideApp(folder: unknown): string {
     if (typeof folder !== 'string' || folder === '') throw new DoorError('invalid', 'plugin add needs a folder, e.g. plugins/pomodoro')
@@ -426,3 +452,15 @@ export class Door {
     return { value, text: typeof value === 'string' ? value : JSON.stringify(value, null, 2) }
   }
 }
+
+/** One source's outcome in a list pull, as a person reads it. */
+function pullLine(result: PullView): string {
+  if (!result.ok) return `refused: ${sentence(result.reason ?? 'the pull was refused')} ${sentence(result.next ?? 'nothing changed')}`
+  return `${result.action ?? 'pulled'}${result.name === undefined ? '' : ` ${result.name}`}`
+}
+
+/** A text as one sentence: the full stop added only when it has no closing punctuation of its own (a reason may end with one, a next step often does). */
+function sentence(text: string): string {
+  const trimmed = text.trim()
+  return /[.!?]$/u.test(trimmed) ? trimmed : `${trimmed}.`
+}

package/plugins/acryl-door/src/host/verbs.ts

@@ -87,9 +87,9 @@ export const VERB_SPECS: Readonly<Record<Verb, VerbSpec>> = {
     arguments: { type: 'object', properties: { folder: { type: 'string', description: 'a folder inside the app, e.g. plugins/pomodoro' } }, required: ['folder'], additionalProperties: false },
   },
   'plugin-pull': {
-    usage: 'plugin pull <source>: fetch a plugin someone released (github:<owner>/<repo>[@<version>][@sha256:<digest>], or a .tgz), check it and start it, live',
-    description: 'Fetch a plugin someone released, without running anything; check its digest, that it works on every OS and that this app has the services it needs; then install and start it without a restart. A refusal says why and changes nothing.',
-    arguments: { type: 'object', properties: { source: { type: 'string', description: 'github:<owner>/<repo>[@<version>][@sha256:<digest>], or a .tgz path or https address' } }, required: ['source'], additionalProperties: false },
+    usage: 'plugin pull <source> | --from <list>: fetch a plugin someone released (github:<owner>/<repo>[@<version>][@sha256:<digest>], or a .tgz), or every plugin of a group\'s list, check each and start it, live',
+    description: 'Fetch a plugin someone released, without running anything; check its digest, that it works on every OS and that this app has the services it needs; then install and start it without a restart. A refusal says why and changes nothing. With from instead of source, pull every source of a group\'s list (one per line, # comments); each is pulled on its own, so a refused one is named with its reason and the others still come in.',
+    arguments: { type: 'object', properties: { source: { type: 'string', description: 'github:<owner>/<repo>[@<version>][@sha256:<digest>], or a .tgz path or https address' }, from: { type: 'string', description: 'instead of source: a list of sources, a file in the app (e.g. group.txt) or an https address' } }, additionalProperties: false },
   },
   'plugin-publish': {
     usage: 'plugin publish <name> [--owner <account>] [--license <id>]: show what publishing this plugin would send; in a person\'s own terminal, ask them',

package/plugins/acryl-node-server/src/register.ts

@@ -10,7 +10,7 @@
 import { existsSync, readFileSync } from 'node:fs'
 import { registerHooks } from 'node:module'
 import { fileURLToPath, pathToFileURL } from 'node:url'
-import { compileModule } from './transpile.ts'
+import { compileModule, usePackagesOfProgram } from './transpile.ts'
 
 /** The JSX runtime the docs set up; an app's tsconfig.json (or a file's own `@jsxImportSource` pragma) chooses another. */
 const DEFAULT_IMPORT_SOURCE = 'acrylblends/jsx'
@@ -36,6 +36,15 @@ registerHooks({
  */
 const plugins = new URL('../../', import.meta.url)
 const appRoot = new URL('../', plugins).href
+// A desktop product's frame host runs the Program from the bundle on an app's source, which holds only the person's files: their JSX compiles with the
+// Program's `typescript` (the instance family says whether this is such a host; a published framework has no family beside it).
+const family = new URL('instance/bundle.ts', plugins)
+if (existsSync(fileURLToPath(family))) {
+  const { appTree } = (await import(family.href)) as {
+    appTree(env: NodeJS.ProcessEnv, bundle: string): unknown
+  }
+  if (appTree(process.env, fileURLToPath(appRoot)) !== undefined) usePackagesOfProgram(fileURLToPath(appRoot))
+}
 const resolver = new URL('extensions/resolve.ts', plugins)
 if (existsSync(fileURLToPath(new URL('acryl-router/src/index.ts', plugins))) && existsSync(fileURLToPath(resolver))) {
   const { routerAliases } = (await import(resolver.href)) as { routerAliases(): Record<string, string> }

package/plugins/acryl-node-server/src/transpile.ts

@@ -36,13 +36,32 @@ const importSources = new Map<string, string>()
  * @returns the compiler.
  * @throws MissingTypeScriptError when the app has no `typescript`.
  */
-function compilerFor(file: string, what: string): Compiler {
-  // Only the app's own node_modules chain counts: Node's global folders (NODE_PATH, which a package manager's shims may set) are not the app.
-  let owner: string | undefined
-  for (let dir = dirname(file); owner === undefined; dir = dirname(dir)) {
-    if (existsSync(join(dir, 'node_modules', 'typescript', 'package.json'))) owner = dir
-    else if (dirname(dir) === dir) throw new MissingTypeScriptError(file, what)
+/** The nearest folder from `start` up whose node_modules has `typescript`, or undefined. */
+function typescriptOwner(start: string): string | undefined {
+  for (let dir = start; ; dir = dirname(dir)) {
+    if (existsSync(join(dir, 'node_modules', 'typescript', 'package.json'))) return dir
+    if (dirname(dir) === dir) return undefined
   }
+}
+
+/** The Program's folder when this process is a desktop product's frame host: the person's source has no packages, the bundle has them. */
+let programPackages: string | undefined
+
+/**
+ * In a desktop product's frame host, compile with the Program's packages when a file's own chain has none (`register.ts` calls this once it finds the
+ * product's app tree, plugins/instance/bundle.ts). Nowhere else: an app without `typescript` is told so.
+ */
+export function usePackagesOfProgram(dir: string): void {
+  programPackages = dir
+}
+
+function compilerFor(file: string, what: string): Compiler {
+  // Only the app's own node_modules chain counts: Node's global folders (NODE_PATH, which a package manager's shims may set) are not the app. In a
+  // desktop product the app is the person's source with the Program's packages.
+  const owner =
+    typescriptOwner(dirname(file)) ??
+    (programPackages === undefined ? undefined : typescriptOwner(programPackages))
+  if (owner === undefined) throw new MissingTypeScriptError(file, what)
   const path = createRequire(join(owner, 'package.json')).resolve('typescript')
   let compiler = compilers.get(path)
   if (compiler === undefined) {

package/plugins/acryl-page/src/favicon.ts

@@ -0,0 +1,19 @@
+/**
+ * The page's own icon: the ACRYL Blends logo (plugins/desktop/assets/acrylblends-logo.png at 64 px) inside an SVG, which is what a browser tab reads at 16 px. The wordmark is
+ * unreadable that small. The frontend package the page borrows its scripts from ships DeepSeek's whale as favicon.svg, so the page answers every icon request itself and
+ * never serves that file.
+ */
+export const ACRYL_FAVICON_SVG =
+  "<svg xmlns=\"http://www.w3.org/2000/svg\" xmlns:xlink=\"http://www.w3.org/1999/xlink\" viewBox=\"0 0 64 64\" role=\"img\" aria-label=\"ACRYL Blends\"><image width=\"64\" height=\"64\" xlink:href=\"data:image/png;base64,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\"/></svg>"
+
+/** The web manifest of an app page: its title and the icon above, not the frontend package's own. */
+export function pageManifest(title: string): string {
+  return JSON.stringify({
+    name: title,
+    short_name: title,
+    start_url: './',
+    scope: './',
+    display: 'standalone',
+    icons: [{ src: 'favicon.svg', sizes: 'any', type: 'image/svg+xml', purpose: 'any' }],
+  })
+}

package/plugins/acryl-page/src/index.ts

@@ -10,6 +10,7 @@ import { dirname, extname, join, normalize, sep } from 'node:path'
 import type { IncomingMessage, ServerResponse } from 'node:http'
 import type { Context } from '@deepseek-ai/cordis'
 import type {} from 'acryl-web-server'
+import { ACRYL_FAVICON_SVG, pageManifest } from './favicon.ts'
 
 /** Stable Cordis plugin name, equal to the package name and the Loader row id. */
 export const name = 'acryl-page'
@@ -64,12 +65,17 @@ export function clientAssetTags(indexHtml: string): string {
 
 /** Our document: minimal on purpose; the frame renders into `#root`, and the taps add the boot wire before `</head>`. */
 export function pageDocument(tags: string, title: string, taps: (html: string) => string): string {
+  // The title is an app's name, typed by a person: markup in it is text, never the page's.
+  const text = title.replace(/[&<>"']/gu, (character) => `&#${String(character.charCodeAt(0))};`)
   const document = `<!doctype html>
 <html lang="en">
   <head>
     <meta charset="utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1" />
-    <title>${title}</title>
+    <title>${text}</title>
+    <meta name="application-name" content="${text}" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <link rel="manifest" href="/manifest.webmanifest" />
     ${tags}
   </head>
   <body>
@@ -143,21 +149,20 @@ export function apply(ctx: Context, config: Partial<Config> = {}): void {
       await serveFile(assets, pathname.slice('/assets'.length), res, req.method ?? 'GET')
     },
   })
-  // Browsers ask for /favicon.ico unconditionally; the built light icon answers it.
+  // Browsers ask for /favicon.ico unconditionally. The icon is ours (the ACRYL mark), never the frontend package's DeepSeek whale.
+  const sendIcon = async (req: IncomingMessage, res: ServerResponse): Promise<void> => {
+    res.writeHead(200, { 'content-type': 'image/svg+xml', 'content-length': String(Buffer.byteLength(ACRYL_FAVICON_SVG)), 'cache-control': 'no-cache' })
+    res.end(req.method === 'HEAD' ? undefined : ACRYL_FAVICON_SVG)
+  }
+  for (const path of ['/favicon.ico', '/favicon.svg', '/favicon-dark.svg'])
+    ctx.webServer.register({ kind: 'exact', path, handler: sendIcon })
   ctx.webServer.register({
     kind: 'exact',
-    path: '/favicon.ico',
+    path: '/manifest.webmanifest',
     handler: async (req: IncomingMessage, res: ServerResponse) => {
-      await serveFile(dist, 'favicon.svg', res, req.method ?? 'GET')
+      const manifest = pageManifest(title)
+      res.writeHead(200, { 'content-type': 'application/manifest+json', 'content-length': String(Buffer.byteLength(manifest)) })
+      res.end(req.method === 'HEAD' ? undefined : manifest)
     },
   })
-  for (const file of ['favicon.svg', 'favicon-dark.svg', 'manifest.webmanifest']) {
-    ctx.webServer.register({
-      kind: 'exact',
-      path: `/${file}`,
-      handler: async (req: IncomingMessage, res: ServerResponse) => {
-        await serveFile(dist, file, res, req.method ?? 'GET')
-      },
-    })
-  }
 }

package/plugins/agent-panel/client/main.ts

@@ -525,6 +525,8 @@ export async function start(prefix: string = '/api/agent-panel'): Promise<void>
   const watch = async (source: RunSource, own: boolean): Promise<void> => {
     let live = true
     let changed = false
+    // Every run the server finishes ends with `done` or `error`; a stream that stops without either lost its server, and the run with it.
+    let finished = false
     let answer: HTMLElement | undefined
     let answered = ''
     // The Assistant's steps on the page, shown under its answer in one line, as the person reads what it did.
@@ -592,11 +594,18 @@ export async function start(prefix: string = '/api/agent-panel'): Promise<void>
           changed = true
           line(`plugin ${String(data.extension)}: ${String(data.action)}`, 'tool')
         } else if (event === 'error') {
+          finished = true
           line(String(data.message ?? 'The run failed.'), 'err')
         } else if (event === 'done') {
+          finished = true
           changed = changed || data.changed === true
         }
       }
+      if (live && working !== undefined && !finished)
+        line(
+          'The app stopped while the agent was working, and the run ended with it (`npm run dev` restarts the app when a file it runs changes). Ask again to go on.',
+          'err',
+        )
     } catch (error) {
       line(`The request failed: ${error instanceof Error ? error.message : String(error)}`, 'err')
     } finally {

package/plugins/agent-panel/headless.ts

@@ -1,9 +1,9 @@
 /** The panel's own drivers, all `chat`: the app's agent, and the coding agents (`claude`, `codex`, `pi`) started headless in the app folder. */
 import { type ChildProcess, spawn, spawnSync } from 'node:child_process'
 import { readFileSync } from 'node:fs'
-import { homedir } from 'node:os'
 import { join } from 'node:path'
 import type { Context } from '@deepseek-ai/cordis'
+import { personHome } from '../instance/storage.ts'
 import type { ChatDriver, ChatEvent } from './drivers.ts'
 import { resolveLaunch } from './launch.ts'
 
@@ -78,7 +78,7 @@ export function onPath(program: string): boolean {
 /** Whether pi can reach DeepSeek: the key in the environment, or the one pi stored for itself when its owner logged in (`~/.pi/agent/auth.json`, a `deepseek` entry). */
 export function piHasDeepseekKey(
   env: NodeJS.ProcessEnv = process.env,
-  home: string = homedir(),
+  home: string = personHome(env),
 ): boolean {
   if (env.DEEPSEEK_API_KEY) return true
   try {