copilotz 1.0.0-rc.1 → 1.0.0-rc.2

package/CHANGELOG.md

@@ -1,3 +1,20 @@
+## 1.0.0-rc.2 — 2026-10-30
+
+- **Orgs:** an org's socket is in its own address (`/o/<org>/oxian`), beside the shared `/oxian`, so
+  a browser that sends no cookies with a WebSocket (Safari) reaches its org. The web host's page
+  says which socket to use (`socket`) and its base (`base`).
+- **Web:** a person shows as their name, from their profile, not as their id: the viewer has a
+  `label` beside its `name`, which the shell's account menu and the chat's greeting use.
+- **Computers:** one machine serves many apps, or many orgs of one. Each is a computer of its own
+  there, with its own id and secret, all in one program; a state kept before becomes its one
+  connection. `computer list` says which and where; `computer disconnect <app-url>` leaves one. An
+  org's spaces go in a folder named for the org (`~/Copilotz/acme-studio`, `~/Copilotz/personal`): a
+  code made on an org says it (`folder`), and the install lines pass it on (`--folder`).
+- **The computer program's release:** each release on GitHub has it, made by the publish workflow on
+  a Mac. When the program is the same as the last release's (`source` in its manifest), the release
+  has that one's binaries, version and all, so computers don't download what they have.
+  `computerDownloads()` serves this Copilotz's own release by default.
+
 ## 1.0.0-rc.1 — 2026-10-30
 
 Copilotz 1.0 is a new runtime, written from scratch: one runtime for agents and the apps around

package/README.md

@@ -22,7 +22,7 @@ bun add copilotz                     # Bun
 deno add jsr:@copilotz/copilotz      # Deno (or `deno add npm:copilotz`)
 ```
 
-On Deno, name it `copilotz` in `deno.json` (`"copilotz": "jsr:@copilotz/copilotz@^1.0.0-rc.1"`), and
+On Deno, name it `copilotz` in `deno.json` (`"copilotz": "jsr:@copilotz/copilotz@^1.0.0-rc.2"`), and
 the imports below are the same everywhere. Some pieces need a package of their own, installed beside
 it: `esbuild` to bundle the web host on Node, `@electric-sql/pglite` for PostgreSQL in the process,
 and `@types/react` for the front ends' types.
@@ -196,18 +196,26 @@ each socket to the runtime of the org its request is for:
 ## Installing a computer
 
 People's computers run the computer program (`plugins/compute/computers/program/`), a single
-executable for macOS, Linux and Windows that an app serves from its own origin once it's built:
-
-```sh
-node scripts/computer/build.ts      # dist/computer/<version>/: a binary per platform (by Bun),
-                                    # install.sh, install.ps1, manifest.json (sizes, SHA-256)
-```
+executable for macOS, Linux and Windows. Each Copilotz release on GitHub has it (`v<version>`: a
+binary per platform, `install.sh`, `install.ps1`, and `manifest.json` with their sizes and SHA-256),
+and an app serves it from there by default:
 
 ```ts
 import { computerDownloads } from "copilotz/plugins/compute/downloads";
 
-plugins: [...plugins, await computerDownloads({ dir: "dist/computer/1.0.0-rc.1" })], // /computer/download/
-plugins: [...plugins, await computerDownloads({ url: "https://…/releases/download/…/" })], // or elsewhere
+plugins: [...plugins, await computerDownloads()], // this Copilotz's release
+plugins: [...plugins, await computerDownloads({ dir: "dist/computer/1.0.0-rc.2" })], // its own: /computer/download/
+plugins: [...plugins, await computerDownloads({ url: "https://downloads.example.com/computer/" })], // or elsewhere
+```
+
+The publish workflow makes it when a `v1.*` tag is pushed, on a Mac (the macOS binaries are signed
+there). A release whose program is the same as the last one's (`source` in the manifest: a hash of
+its code, without its version, its install scripts and the Bun that builds it) has that release's
+binaries, version and all, so computers don't update to what they have. To build one yourself:
+
+```sh
+node scripts/computer/build.ts                 # dist/computer/<version>/
+node scripts/computer/build.ts --reuse <url>   # that release's, when it's the same program
 ```
 
 A space's Computer tab (or `/computer connect`) then gives the one line to run on the machine, for
@@ -232,6 +240,11 @@ and its binary's URL, size and SHA-256; it checks them, and that the new one run
 starts again. The binaries aren't signed yet, so macOS and Windows warn about one downloaded with a
 browser; the line doesn't need that.
 
+One machine can serve several apps, or several orgs of one: run the line from each, and each is a
+computer of its own there, in one program. Each one's spaces go in a folder of its own under
+`~/Copilotz`, named for the org (the line from an org says it: `--folder acme`), else for the app's
+host. `computer list` says which and where; `computer disconnect <app-url>` leaves one.
+
 ## Plugins
 
 Plugins come in themes. Every plugin is a plain object, and its settings are a resource under its

package/hosts/orgs/mod.d.ts

@@ -19,7 +19,9 @@
  * - `POST /signout`: out of the directory and every org.
  * - `/o/<org>/…`: that org, by its address, for what reaches it without a
  *   browser's session: its API (a key), its webhooks (signed), its
- *   computers' socket and downloads. The org's own handlers say who may.
+ *   computers' downloads. The org's own handlers say who may.
+ * - `/o/<org>/oxian`: that org's socket, for its pages and its computers
+ *   (a ticket or a computer's credentials say who); no cookie needed.
  * - Staff's console: `GET /console/orgs`; `POST /console/orgs/<id>`
  *   `{ suspended?, name? }`; `POST …/<id>/move` `{ schema }` (its rows to
  *   another schema); `GET …/<id>/export` (its rows, as SQL); `POST
@@ -30,7 +32,7 @@
  * its tenant), its plugins with the host's `here` (the org's name, and how
  * it reaches the directory), and `admit` for its browsers.
  */
-import type { Actor, Plugins, Runtime } from "../../runtime/mod.js";
+import type { Actor, Plugins, Runtime, Transport } from "../../runtime/mod.js";
 import { type Code, type WebServerOptions } from "../web/server.js";
 /** An org as the host opens it. */
 export type OrgInfo = {
@@ -44,10 +46,15 @@ export type OrgInfo = {
 export type OrgsHostOptions = Pick<WebServerOptions, "title" | "theme" | "google" | "dev" | "assets"> & {
     /** The directory's runtime: identity, a sign-in method, and the directory plugin. */
     directory: Runtime;
-    /** Opens an org: the app's runtime for it, with these plugins too and this `admit`. */
+    /**
+     * Opens an org: the app's runtime for it, with these plugins too, this
+     * `admit`, and these `transports` (its socket, at `/oxian` and at its
+     * address, `/o/<org>/oxian`).
+     */
     open(org: OrgInfo, given: {
         plugins: Plugins;
         admit: (ticket: string) => Actor | undefined;
+        transports: Transport[];
     }): Promise<Runtime>;
     /** The socket upgrade for an org's runtime (its transport for browsers). */
     upgrade(runtime: Runtime, request: Request): Response | Promise<Response>;

package/hosts/orgs/mod.js

@@ -1,12 +1,18 @@
 import { definePlugin } from "../../runtime/mod.js";
 import { createTickets } from "../web/tickets.js";
-import { cookieOf, setCookie, webServer } from "../web/server.js";
+import { cookieOf, setCookie, socket, webServer, } from "../web/server.js";
 const DIRECTORY = "dir";
 const CURRENT = "org";
 const MONTH = 30 * 86_400;
 const sessionOf = (org) => `s_${org}`;
 /** Where an org is reached by its address: `/o/<org>`. */
 const baseOf = (org) => `/o/${encodeURIComponent(org)}`;
+/**
+ * Where a page's or a computer's socket reaches an org: under its address
+ * (`/o/<org>/oxian`), which names it without cookies (Safari sends none with
+ * a socket). Its runtime takes sockets there and at `/oxian` (`given.transports`).
+ */
+const socketOf = (org) => `${baseOf(org)}${socket.config.path}`;
 /** The org a path addresses (`/o/<org>/…`), and the path within it. */
 const addressed = (path) => {
     const found = /^\/o\/([^/]+)(\/.*)?$/.exec(path);
@@ -54,7 +60,11 @@ export function orgsHost(options) {
         if (!cell) {
             cell = (async () => {
                 const tickets = createTickets();
-                const runtime = await options.open(org, { plugins: [here(org)], admit: tickets.admit });
+                const runtime = await options.open(org, {
+                    plugins: [here(org)],
+                    admit: tickets.admit,
+                    transports: [socket, { type: "websocket", config: { path: socketOf(org.id) } }],
+                });
                 const serve = webServer({
                     runtime,
                     tickets,
@@ -68,6 +78,7 @@ export function orgsHost(options) {
                     cookie: sessionOf(org.id),
                     signIn: false,
                     base: baseOf(org.id),
+                    socket: socketOf(org.id),
                 });
                 const made = { org, runtime, tickets, serve, last: Date.now() };
                 live.set(org.id, made);
@@ -293,6 +304,9 @@ export function orgsHost(options) {
                     return json({ error: "This org is suspended." }, { status: 403 });
                 const cell = await cellOf(org);
                 cell.last = Date.now();
+                // Its socket, as it came: its runtime takes sockets at this address too.
+                if (at.path === socket.config.path)
+                    return await options.upgrade(cell.runtime, request);
                 const inner = new URL(url);
                 inner.pathname = at.path;
                 return await cell.serve(new Request(inner, request));
@@ -475,12 +489,12 @@ export function orgsHost(options) {
          * before its socket connects; one not open yet is a retry for the client.
          */
         openRuntime(request) {
-            const at = addressed(new URL(request.url).pathname);
-            const org = at?.org ?? cookieOf(request, CURRENT);
+            const named = addressed(new URL(request.url).pathname)?.org;
+            const org = named ?? cookieOf(request, CURRENT);
             const cell = org ? live.get(org) : undefined;
-            // An org addressed but closed (a computer connecting first) opens for its retry.
-            if (!cell && at) {
-                void orgInfo(at.org).then((info) => {
+            // An org named but closed (a computer connecting first) opens for its retry.
+            if (!cell && named) {
+                void orgInfo(named).then((info) => {
                     if (info && !info.suspended)
                         void cellOf(info).catch(() => { });
                 }).catch(() => { });

package/hosts/web/host.js

@@ -96,7 +96,7 @@ export async function web(options) {
     void loadOrgs();
     let fresh = first.ticket;
     const url = options.url ??
-        `${location.protocol === "https:" ? "wss" : "ws"}://${location.host}/oxian`;
+        `${location.protocol === "https:" ? "wss" : "ws"}://${location.host}${config().socket ?? "/oxian"}`;
     const client = connect({
         transport: { type: "websocket", config: { url, allowInsecureLoopback: true } },
         // The first connection takes the ticket in hand; a new one asks again.
@@ -113,7 +113,12 @@ export async function web(options) {
         plugins: options.plugins,
     });
     await client.ready;
-    const viewer = { kind: "person", name: first.person };
+    // Who they are (their id), and what they're shown as (their name).
+    const viewer = {
+        kind: "person",
+        name: first.person,
+        ...(first.name ? { label: first.name } : {}),
+    };
     session.client = client;
     session.viewer = viewer;
     let space = (await options.start?.(client, first.person))?.space;

package/hosts/web/node/serve.js

@@ -20,7 +20,9 @@ export async function serve(options) {
 export async function listen(options) {
     const { hostname = "127.0.0.1", port = 0, signal } = options;
     const prepare = (request) => {
-        const to = new URL(request.url).pathname === socket.config.path
+        // The socket's path, or a runtime's own under it (an org's: `/o/<org>/oxian`).
+        const path = new URL(request.url).pathname;
+        const to = path === socket.config.path || path.endsWith(socket.config.path)
             ? options.hypervisor(request)
             : undefined;
         return to ? to.prepare(request) : { kind: "response", response: options.fetch(request) };

package/hosts/web/server.d.ts

@@ -76,6 +76,13 @@ export type WebServerOptions = {
      * The page tells its code (`appBase()`), so the addresses it shows work.
      */
     base?: string;
+    /**
+     * Where the page's socket connects, when it isn't the runtime's own
+     * `/oxian`: a host serving many orgs gives each org its address there
+     * (`/o/<org>/oxian`), so the socket finds it without cookies, which Safari
+     * doesn't send with a socket.
+     */
+    socket?: string;
     /**
      * The app's theme, as its front ends give it (`themeOf(plugins)`, of those
      * with a `theme` resource): the page carries it for its first paint.

package/hosts/web/server.js

@@ -103,6 +103,7 @@ JSON.stringify({
     google: options.google ?? null,
     dev: options.dev ?? false,
     ...(options.base ? { base: options.base } : {}),
+    ...(options.socket ? { socket: options.socket } : {}),
 })
     .replaceAll("<", "\\u003c")}</script>
 </head>
@@ -189,7 +190,18 @@ export function webServer(options) {
                     const actor = await whom(request);
                     if (!actor)
                         return json({ error: "Not signed in" }, { status: 401 });
-                    return json({ ticket: tickets.issue(actor), person: actor.id });
+                    // What the page shows them as: their name as they signed in, else their email.
+                    const profile = actor.kind === "person"
+                        ? await runtime.query("person.profile", {
+                            person: actor.id,
+                        }).catch(() => null)
+                        : null;
+                    const name = profile?.name ?? profile?.email;
+                    return json({
+                        ticket: tickets.issue(actor),
+                        person: actor.id,
+                        ...(name ? { name } : {}),
+                    });
                 }
                 case "POST /signin/google": {
                     if (!options.google || !signIn)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "copilotz",
-  "version": "1.0.0-rc.1",
+  "version": "1.0.0-rc.2",
   "description": "Copilotz: one runtime for Node, Deno, Bun, Cloudflare Workers and the browser.",
   "keywords": [
     "agents",

package/plugins/agents/chat/views/web/home.js

@@ -19,7 +19,7 @@ export const homeView = (_, ctx) => {
     const to = String(ctx.hints.query?.to ?? "");
     const suggestions = Object.values((ctx.resources.suggestions ?? {}))
         .filter((s) => typeof s === "string");
-    const name = greeted(ctx.viewer?.name ?? "");
+    const name = greeted(ctx.viewer?.label ?? ctx.viewer?.name ?? "");
     const shared = space && space.kind !== "personal";
     // What other front ends show over the greeting.
     const tops = Object.values((ctx.resources.home ?? {}))

package/plugins/agents/chat/views/web/who.d.ts

@@ -8,7 +8,8 @@ export declare const byAgent: (m: Message) => boolean;
 /** Names as a sentence says them: "ana", "ana and bob", "ana, bob and cy". */
 export declare const names: (list: string[]) => string;
 /**
- * What home greets someone as: their name, capitalised; signed in by email,
- * its first part, up to a dot ("ana.lima@example.com" is "Ana").
+ * What home greets someone as: their first name, capitalised; signed in by
+ * email, its first part, up to a dot ("ana.lima@example.com" is "Ana"). An
+ * id that isn't a name ("google:1234") greets no one by name.
  */
 export declare const greeted: (name: string) => string;

package/plugins/agents/chat/views/web/who.js

@@ -3,10 +3,13 @@ export const byAgent = (m) => m.turn !== undefined || (m.hops ?? 0) > 0 || m.too
 /** Names as a sentence says them: "ana", "ana and bob", "ana, bob and cy". */
 export const names = (list) => list.length < 2 ? list.join("") : `${list.slice(0, -1).join(", ")} and ${list[list.length - 1]}`;
 /**
- * What home greets someone as: their name, capitalised; signed in by email,
- * its first part, up to a dot ("ana.lima@example.com" is "Ana").
+ * What home greets someone as: their first name, capitalised; signed in by
+ * email, its first part, up to a dot ("ana.lima@example.com" is "Ana"). An
+ * id that isn't a name ("google:1234") greets no one by name.
  */
 export const greeted = (name) => {
-    const first = name.split("@")[0].split(/[._+-]/).find(Boolean) ?? "";
+    if (/^[a-z]+:/.test(name))
+        return "";
+    const first = name.split("@")[0].split(/[\s._+-]/).find(Boolean) ?? "";
     return first ? first[0].toLocaleUpperCase() + first.slice(1) : "";
 };

package/plugins/compute/computers/actions/code.js

@@ -5,10 +5,13 @@
  * which is them saying yes. It works once, for minutes. With it, where the
  * computer connects, when the app says (`computers.url`), and where the
  * program is downloaded from, when it says (`downloads`: the release's base,
- * on the app's origin unless absolute, its version and binaries).
+ * on the app's origin unless absolute, its version and binaries). On an org,
+ * the folder its spaces go in on that computer (`folder`): the org's name,
+ * plain, `personal` for one's own (it's named for them).
  */
 import { defineAction } from "../../../../runtime/mod.js";
 import { mustBeAble } from "../shared/desks.js";
+import { plainName } from "../shared/folder.js";
 import { code, hash } from "../shared/secret.js";
 import { settingsOf } from "../shared/settings.js";
 export const codeAction = defineAction({
@@ -33,11 +36,14 @@ export const codeAction = defineAction({
             in: space,
         });
         const downloads = ctx.resources.downloads;
+        const org = ctx.resources.org;
+        const folder = org?.kind === "personal" ? "personal" : org?.name && plainName(org.name, "");
         return {
             code: made,
             expires,
             in: space,
             ...(url ? { url } : {}),
+            ...(folder ? { folder } : {}),
             ...(downloads ? { downloads: { base: downloads.base, ...downloads.manifest } } : {}),
         };
     },

package/plugins/compute/computers/program/release.d.ts

@@ -1,10 +1,3 @@
-/**
- * A release of the computer program, as `scripts/computer/build.ts` makes it
- * and an app serves it (the computers plugin's `downloads`): `install.sh` and
- * `install.ps1`, a binary per platform, and `manifest.json`, which says the
- * version and each binary's file, size and SHA-256. Plain data and functions
- * only: the build, the app, its web front end and the program all read it.
- */
 /**
  * The work an app offers a computer a newer release with (`computer.update`;
  * the computers plugin's `computer` workers serve it beside `WORK`'s): the
@@ -33,9 +26,14 @@ export type Binary = Platform & {
     size: number;
     sha256: string;
 };
-/** What `manifest.json` says. */
+/**
+ * What `manifest.json` says: the program's version, its binaries, and what
+ * the program is (`source`: a SHA-256 of what it's built from, its version
+ * left out; the same program, the same `source`).
+ */
 export type Manifest = {
     version: string;
+    source?: string;
     binaries: Binary[];
 };
 /**
@@ -74,12 +72,14 @@ export declare const binaryFor: (manifest: Manifest, { os, arch }: Platform) =>
 /**
  * The one line that installs the program and connects it with `code`: on
  * macOS and Linux (`sh`), or in Windows' PowerShell. `base` is where the
- * release is (absolute), named only when it isn't the app's own.
+ * release is (absolute), named only when it isn't the app's own; `folder`,
+ * the folder its spaces go in (its org's name), plain, so the line needs no quoting.
  */
-export declare function installCommand(shell: "sh" | "powershell", { app, code, base }: {
+export declare function installCommand(shell: "sh" | "powershell", { app, code, base, folder }: {
     app: string;
     code: string;
     base: string;
+    folder?: string;
 }): string;
 /** Whether version `a` is newer than `b`, as semver orders them (`1.0.0-rc.2` < `1.0.0`). */
 export declare function newer(a: string, b: string): boolean;

package/plugins/compute/computers/program/release.js

@@ -5,6 +5,7 @@
  * version and each binary's file, size and SHA-256. Plain data and functions
  * only: the build, the app, its web front end and the program all read it.
  */
+import { plainName } from "../shared/folder.js";
 /**
  * The work an app offers a computer a newer release with (`computer.update`;
  * the computers plugin's `computer` workers serve it beside `WORK`'s): the
@@ -42,13 +43,15 @@ export const binaryFor = (manifest, { os, arch }) => manifest.binaries.find((bin
 /**
  * The one line that installs the program and connects it with `code`: on
  * macOS and Linux (`sh`), or in Windows' PowerShell. `base` is where the
- * release is (absolute), named only when it isn't the app's own.
+ * release is (absolute), named only when it isn't the app's own; `folder`,
+ * the folder its spaces go in (its org's name), plain, so the line needs no quoting.
  */
-export function installCommand(shell, { app, code, base }) {
+export function installCommand(shell, { app, code, base, folder }) {
     const own = base === new URL(DOWNLOADS, app).href;
+    const named = folder ? plainName(folder, "") : "";
     return shell === "sh"
-        ? `curl -fsSL ${base}install.sh | sh -s -- ${app} --code ${code}${own ? "" : ` --from ${base}`}`
-        : `& ([scriptblock]::Create((irm ${base}install.ps1))) ${app} -Code ${code}${own ? "" : ` -From ${base}`}`;
+        ? `curl -fsSL ${base}install.sh | sh -s -- ${app} --code ${code}${own ? "" : ` --from ${base}`}${named ? ` --folder ${named}` : ""}`
+        : `& ([scriptblock]::Create((irm ${base}install.ps1))) ${app} -Code ${code}${own ? "" : ` -From ${base}`}${named ? ` -Folder ${named}` : ""}`;
 }
 /** A version's parts: its numbers, and its pre-release's (`1.0.0-rc.1`: rc, 1). */
 const parts = (version) => {

package/plugins/compute/computers/program/version.d.ts

@@ -0,0 +1,2 @@
+/** The computer program's version, as `computer.info` and `--version` say it, and its builds are named. */
+export declare const VERSION = "1.0.0-rc.2";

package/plugins/compute/computers/program/version.js

@@ -0,0 +1,2 @@
+/** The computer program's version, as `computer.info` and `--version` say it, and its builds are named. */
+export const VERSION = "1.0.0-rc.2";

package/plugins/compute/computers/resources/commands.js

@@ -71,19 +71,19 @@ export const commands = {
             const [what, n, ...name] = rest.trim().split(/\s+/);
             const { space, all } = await listed(term);
             if (what === "connect") {
-                const { code, expires, url, downloads } = await term.runtime.call("computer.code", space ? { in: space } : {});
+                const { code, expires, url, folder, downloads } = await term.runtime.call("computer.code", space ? { in: space } : {});
                 const minutes = Math.round((Date.parse(expires) - Date.now()) / 60_000);
                 const app = url ?? "<app url>";
                 // From the app's release when it has one; else from a copy of the app's code.
                 const base = downloads && url ? new URL(downloads.base, url).href : undefined;
                 return await term.print(`On the computer this space's agents should use, run:\n\n` +
                     (base
-                        ? `  ${installCommand("sh", { app, code, base })}\n\n` +
+                        ? `  ${installCommand("sh", { app, code, base, folder })}\n\n` +
                             `On Windows, in PowerShell:\n\n` +
-                            `  ${installCommand("powershell", { app, code, base })}\n\n` +
+                            `  ${installCommand("powershell", { app, code, base, folder })}\n\n` +
                             dim("It installs the computer program, connects it, and keeps it running (from " +
                                 "login on). Their folders go under ~/Copilotz there. ")
-                        : `  deno task computer connect ${app} --code ${code}\n\n` +
+                        : `  deno task computer connect ${app} --code ${code}${folder ? ` --folder ${folder}` : ""}\n\n` +
                             dim("Their folders go under ~/Copilotz there (--root puts them elsewhere). ")) +
                     dim(`The code works once, for ${minutes} minutes.`));
             }

package/plugins/compute/computers/resources/downloads.d.ts

@@ -1,5 +1,9 @@
 import { type Plugin } from "../../../../runtime/mod.js";
 import { type Manifest } from "../program/release.js";
+/** Where Copilotz's releases are: each one's computer program, at `v<version>/`. */
+export declare const RELEASES = "https://github.com/copilotzhq/copilotz/releases/download/";
+/** This Copilotz's release of the computer program (the default `computerDownloads`). */
+export declare const releaseOf: (version?: string) => string;
 /**
  * What the resource says: where the release is (absolute, or on the app's
  * origin), and what's in it. The plugin's Actions read it by type alone, so
@@ -9,8 +13,8 @@ export type Downloads = {
     base: string;
     manifest: Manifest;
 };
-/** The app's downloads (see above), from a release folder of its own or at a URL. */
-export declare function computerDownloads(from: {
+/** The app's downloads (see above): this Copilotz's release, a release folder of its own, or at a URL. */
+export declare function computerDownloads(from?: {
     dir: string;
 } | {
     url: string;

package/plugins/compute/computers/resources/downloads.js

@@ -5,14 +5,17 @@
  * connect flow shows the install command and the binaries from it; a
  * computer older than it updates itself to it (`computer.ready`).
  *
- * `computerDownloads` gives an app both, as a plugin: a release folder of its
+ * `computerDownloads` gives an app both, as a plugin: by default this
+ * Copilotz's own release on GitHub (`v<version>`: every release has the
+ * program, built again only when it changed); or a release folder of its
  * own, served from its origin at `/computer/download/` (a `routes` entry of
- * the web host: only the release's files, as they are), or one at a URL (a
- * GitHub release, a bucket), whose manifest it reads once, as it starts.
+ * the web host: only the release's files, as they are); or one at a URL (a
+ * bucket, another release). It reads the manifest once, as it starts.
  *
  * ```ts
- * plugins: [...plugins, await computerDownloads({ dir: "dist/computer/1.0.0-rc.1" })]
- * plugins: [...plugins, await computerDownloads({ url: "https://github.com/…/releases/download/…/" })]
+ * plugins: [...plugins, await computerDownloads()]
+ * plugins: [...plugins, await computerDownloads({ dir: "dist/computer/1.0.0-rc.2" })]
+ * plugins: [...plugins, await computerDownloads({ url: "https://downloads.example.com/computer/" })]
  * ```
  */
 import { createReadStream } from "node:fs";
@@ -21,6 +24,11 @@ import { join, resolve } from "node:path";
 import { Readable } from "node:stream";
 import { definePlugin } from "../../../../runtime/mod.js";
 import { DOWNLOADS } from "../program/release.js";
+import { VERSION } from "../program/version.js";
+/** Where Copilotz's releases are: each one's computer program, at `v<version>/`. */
+export const RELEASES = "https://github.com/copilotzhq/copilotz/releases/download/";
+/** This Copilotz's release of the computer program (the default `computerDownloads`). */
+export const releaseOf = (version = VERSION) => `${RELEASES}v${version}/`;
 /** A manifest, checked for what everything reading it relies on. */
 function checked(value, from) {
     const manifest = value;
@@ -71,8 +79,8 @@ function serveRelease(dir, manifest) {
         return new Response(body, { headers });
     };
 }
-/** The app's downloads (see above), from a release folder of its own or at a URL. */
-export async function computerDownloads(from) {
+/** The app's downloads (see above): this Copilotz's release, a release folder of its own, or at a URL. */
+export async function computerDownloads(from = { url: releaseOf() }) {
     if ("url" in from) {
         const base = from.url.endsWith("/") ? from.url : `${from.url}/`;
         const response = await fetch(new URL("manifest.json", base));

package/plugins/compute/computers/shared/folder.d.ts

@@ -1,2 +1,4 @@
-/** A space's folder name on a computer: its name, plain (one segment, lowercase), kept apart from the others'. */
+/** A name as a folder's: plain (one segment, lowercase), or `fallback` when nothing's left. */
+export declare function plainName(name: string, fallback?: string): string;
+/** A space's folder name on a computer: its name, plain, kept apart from the others'. */
 export declare function folderFor(name: string, taken: string[]): string;

package/plugins/compute/computers/shared/folder.js

@@ -1,7 +1,11 @@
-/** A space's folder name on a computer: its name, plain (one segment, lowercase), kept apart from the others'. */
+/** A name as a folder's: plain (one segment, lowercase), or `fallback` when nothing's left. */
+export function plainName(name, fallback = "space") {
+    return name.normalize("NFKD").replace(/[̀-ͯ]/g, "").toLowerCase()
+        .replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 40) || fallback;
+}
+/** A space's folder name on a computer: its name, plain, kept apart from the others'. */
 export function folderFor(name, taken) {
-    const base = name.normalize("NFKD").replace(/[̀-ͯ]/g, "").toLowerCase()
-        .replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 40) || "space";
+    const base = plainName(name);
     let folder = base;
     for (let n = 2; taken.includes(folder); n++)
         folder = `${base}-${n}`;

package/plugins/compute/computers/views/web/connect.js

@@ -122,7 +122,7 @@ export function ConnectDialog({ open, onClose, call, computers, here, where, not
                                                         ? (_jsxs(_Fragment, { children: [_jsx("span", { children: "This code has run out." }), _jsx(Button, { size: "sm", icon: "refresh", onClick: () => void fresh(), children: "New code" })] }))
                                                         : (_jsxs(_Fragment, { children: [_jsx(Icon, { name: "lock", size: 13 }), _jsxs("span", { children: ["The code works once, for", " ", _jsx("b", { className: "connect-left", children: clock(left) }), " more"] })] })) }))
                                                 : null, release && code
-                                                ? (_jsx(Direct, { release: release, system: system, mine: system === visitorSystem(), arch: arch, app: app, code: code.code, spent: expired }))
+                                                ? (_jsx(Direct, { release: release, system: system, mine: system === visitorSystem(), arch: arch, app: app, code: code.code, folder: code.folder, spent: expired }))
                                                 : null] })] }), _jsxs("li", { children: [_jsx("span", { className: "connect-step-number", "aria-hidden": "true", children: "2" }), _jsx("div", { className: "connect-step", children: _jsx("p", { children: release
                                                 ? (_jsxs(_Fragment, { children: ["It connects, then keeps running in the background, and starts when you log in. Each space gets a folder in", " ", _jsx("code", { children: system === "win32" ? "%USERPROFILE%\\Copilotz" : "~/Copilotz" }), " ", "on it."] }))
                                                 : (_jsxs(_Fragment, { children: ["Leave it running. Each space gets a folder in ", _jsx("code", { children: "~/Copilotz" }), " ", "on that computer (", _jsx("code", { children: "--root" }), " puts them elsewhere), and next time", " ", _jsx("code", { children: "deno task computer" }), " starts it again."] })) }) })] }), code && !expired
@@ -135,16 +135,23 @@ export function ConnectDialog({ open, onClose, call, computers, here, where, not
 function Command({ code, app, system, spent }) {
     const release = code.downloads;
     if (!release) {
-        const command = `deno task computer connect ${app} --code ${code.code}`;
+        const folder = code.folder ? ` --folder ${code.folder}` : "";
+        const command = `deno task computer connect ${app} --code ${code.code}${folder}`;
         return (_jsx(CodeBlock, { className: "connect-command", label: "The command to run", code: [
                 { text: "$ ", tone: "muted" },
                 { text: `deno task computer connect ${app} \\\n    --code ` },
                 { text: code.code, tone: spent ? "muted" : "accent" },
+                ...(folder ? [{ text: folder }] : []),
             ], copy: spent ? false : command }));
     }
     const base = within(release.base, app);
     const windows = system === "win32";
-    const command = installCommand(windows ? "powershell" : "sh", { app, code: code.code, base });
+    const command = installCommand(windows ? "powershell" : "sh", {
+        app,
+        code: code.code,
+        base,
+        folder: code.folder,
+    });
     return (_jsx(CodeBlock, { className: "connect-command", label: "The command that installs it", code: parts(command, code.code, spent, windows ? "PS> " : "$ "), copy: spent ? false : command }));
 }
 /**
@@ -152,7 +159,7 @@ function Command({ code, app, system, spent }) {
  * when it's theirs and their architecture is known), each with its size and
  * SHA-256, and how to run one; behind a disclosure.
  */
-function Direct({ release, system, mine, arch, app, code, spent }) {
+function Direct({ release, system, mine, arch, app, code, folder, spent }) {
     const base = within(release.base, app);
     const binaries = release.binaries.filter((b) => b.os === system)
         .sort((a, b) => Number(mine && b.arch === arch) - Number(mine && a.arch === arch));
@@ -165,9 +172,10 @@ function Direct({ release, system, mine, arch, app, code, spent }) {
         : undefined;
     const windows = system === "win32";
     const path = windows ? `$HOME\\Downloads\\${first.file}` : `~/Downloads/${first.file}`;
+    const named = folder ? ` --folder ${folder}` : "";
     const run = windows
-        ? `& "${path}" install ${app} --code ${code}`
-        : `chmod +x ${path} && ${path} install ${app} --code ${code}`;
+        ? `& "${path}" install ${app} --code ${code}${named}`
+        : `chmod +x ${path} && ${path} install ${app} --code ${code}${named}`;
     return (_jsxs("details", { className: "connect-direct", children: [_jsxs("summary", { children: [_jsx(Icon, { name: "chevron", size: 14, className: "connect-direct-chevron" }), "Download it instead", _jsxs("span", { className: "connect-direct-version", children: ["v", release.version] })] }), _jsxs("div", { className: "connect-direct-body", children: [_jsx("ul", { className: "connect-binaries", "aria-label": `For ${OS_NAMES[system]}`, children: binaries.map((b) => (_jsxs("li", { className: "connect-binary", children: [_jsxs("div", { className: "connect-binary-text", children: [_jsxs("span", { className: "connect-binary-name", children: [archName(b.os, b.arch), yours === b ? _jsx("span", { className: "connect-binary-yours", children: "this computer" }) : null] }), _jsxs("span", { className: "connect-binary-facts", children: [_jsx("code", { children: b.file }), " \u00B7 ", bytes(b.size)] }), _jsxs("span", { className: "connect-binary-sha", title: b.sha256, children: ["SHA-256 ", _jsxs("code", { children: [b.sha256.slice(0, 12), "\u2026", b.sha256.slice(-8)] }), _jsx(CopyButton, { text: b.sha256, label: "Copy SHA-256" })] })] }), _jsx(Button, { size: "sm", icon: "download", href: `${base}${b.file}`, download: b.file, children: "Download" })] }, b.file))) }), _jsx("p", { children: "Then, where you saved it, run it with your code:" }), _jsx(CodeBlock, { className: "connect-command", label: "How to run the download", code: parts(run, code, spent, windows ? "PS> " : "$ "), copy: spent ? false : run }), _jsxs("p", { className: "connect-unsigned", children: [_jsx(Icon, { name: "alert", size: 13 }), _jsx("span", { children: windows
                                     ? "The program isn't signed yet, so Windows may say it doesn't recognize it (More " +
                                         "info, then Run anyway). The command above doesn't need that."

package/plugins/interfaces/web/views/frame.d.ts

@@ -21,13 +21,15 @@ import { type PaletteSource } from "../shared/palette.js";
 import type { UserMenuEntry } from "../shared/menu.js";
 import { type Offered } from "./panel.js";
 type Call = <R = unknown>(action: string, input?: unknown) => Promise<R>;
-export declare function Frame({ path, brand, viewer, sidebar, menu, call, panel, palette, children }: {
+export declare function Frame({ path, brand, viewer, label, sidebar, menu, call, panel, palette, children }: {
     /** Where the page is: going elsewhere closes the drawer, and the panel's sheet. */
     path: string;
     /** The app's name, which its logo says (or shows). */
     brand: string;
     /** Who's looking: the panel is kept as they left it. */
     viewer: string;
+    /** What the viewer is shown as, when not their id (their name). */
+    label?: string;
     sidebar: ReactNode;
     /** What front ends put in the person's menu (the `userMenu` resource). */
     menu: UserMenuEntry[];

package/plugins/interfaces/web/views/frame.js

@@ -36,7 +36,7 @@ const phone = {
     },
     matches: () => matchMedia(PHONE).matches,
 };
-export function Frame({ path, brand, viewer, sidebar, menu, call, panel, palette, children }) {
+export function Frame({ path, brand, viewer, label, sidebar, menu, call, panel, palette, children }) {
     const narrow = useSyncExternalStore(phone.subscribe, phone.matches);
     const [open, setOpen] = useState(false);
     useEffect(() => setOpen(false), [path, narrow]);
@@ -104,7 +104,7 @@ export function Frame({ path, brand, viewer, sidebar, menu, call, panel, palette
                         : (_jsx("a", { className: "copilotz-brand", href: "/", children: _jsx(Logo, { variant: "full", name: brand, size: 32 }) })), narrow
                         ? _jsx(IconButton, { icon: "close", label: "Close sidebar", onClick: () => setOpen(false) })
                         : null] }), _jsx("div", { className: "copilotz-find", children: _jsx(NavItem, { quiet: true, icon: "search", onClick: find, end: narrow ? null : _jsx(Kbd, { children: shortcutOf(mac) }), title: `Search spaces and chats, or run a command (${shortcutOf(mac)})`, children: "Search" }) }), _jsx("nav", { className: "copilotz-sections", "aria-label": "Spaces and chats", children: sidebar }), viewer
-                ? (_jsx(Me, { name: viewer, email: orgs?.email, menu: menu, ...(orgs ? { orgs: { here: !!here, standing, staff: orgs.staff } } : {}) }))
+                ? (_jsx(Me, { name: label ?? viewer, email: orgs?.email, menu: menu, ...(orgs ? { orgs: { here: !!here, standing, staff: orgs.staff } } : {}) }))
                 : null] }));
     return (_jsxs("div", { className: "copilotz-shell", "data-staff": staff || undefined, children: [_jsx("style", { href: "web-shell", precedence: "copilotz", children: STYLE }), staff
                 ? (_jsx("div", { className: "copilotz-staff-line", role: "note", children: _jsx("span", { className: "copilotz-sr", children: "You're in this org as platform staff: what you do is on its record." }) }))

package/plugins/interfaces/web/views/shell.js

@@ -19,7 +19,8 @@ export const shellView = (where, ctx) => {
     const open = kind ? ctx.show(kind, id ? { _id: id } : {}, asked) : ctx.show("home", {}, asked);
     const panel = ctx.resources.panel;
     const viewer = ctx.viewer?.name ?? "";
-    return (_jsx(Frame, { path: where.path + (where.space ?? ""), brand: app, viewer: viewer, palette: {
+    const label = ctx.viewer?.label;
+    return (_jsx(Frame, { path: where.path + (where.space ?? ""), brand: app, viewer: viewer, ...(label ? { label } : {}), palette: {
             sources: sourcesOf(ctx.resources.palette),
             hints: {
                 ...hints,

package/runtime/define.d.ts

@@ -169,10 +169,15 @@ export type Merged = {
 export type Views = Record<string, Record<string, ViewDef>>;
 /** A View: an item, for a medium. Its context says what showing another View returns there. */
 export type ViewDef = (item: any, ctx: ViewContext<any>) => unknown;
-/** Who looks: a View renders relative to it (your own messages, your bubbles). */
+/**
+ * Who looks: a View renders relative to it (your own messages, your bubbles).
+ * `name` is who they are (a person's id); `label` what they're shown as, when
+ * it isn't that (a person's own name, as they signed in).
+ */
 export type Viewer = {
     name: string;
     kind?: string;
+    label?: string;
 };
 export type RenderOptions = {
     viewer?: Viewer;