latticesql 4.2.3 → 4.2.4

package/dist/index.d.ts

@@ -4764,6 +4764,74 @@ declare class SQLiteAdapter implements StorageAdapter {
     withClient<T>(fn: (tx: TxClient) => Promise<T>): Promise<T>;
 }
 
+/**
+ * SQLite adapter backed by the runtime's built-in `node:sqlite` `DatabaseSync`
+ * (synchronous) instead of the `better-sqlite3` native addon. This exists so
+ * Lattice can run under a runtime that ships `node:sqlite` but cannot load
+ * native N-API addons (the desktop build). The surface is a 1:1 mirror of the
+ * better-sqlite3 adapter — same StorageAdapter contract, same SQL — with three
+ * substitutions where the two SQLite bindings differ:
+ *
+ *   1. pragmas are issued via `exec()` (no `.pragma()` helper);
+ *   2. the `data_version` half of changeProbe is read with a plain
+ *      `PRAGMA data_version` statement (no `{ simple: true }` option);
+ *   3. BLOB columns read back as `Uint8Array` rather than `Buffer`. Lattice's
+ *      own file storage is disk-based (content-addressed blobs), so the core
+ *      never round-trips file bytes through a BLOB column; a user-defined
+ *      `blob` column consumed specifically as a Node `Buffer` is the only place
+ *      the difference is observable. `Buffer` is itself a `Uint8Array`, so byte
+ *      access is identical; only Buffer-only methods would differ.
+ */
+interface NodeSqliteRunResult {
+    changes: number | bigint;
+    lastInsertRowid: number | bigint;
+}
+interface NodeStatementSync {
+    run(...params: unknown[]): NodeSqliteRunResult;
+    get(...params: unknown[]): Row | undefined;
+    all(...params: unknown[]): Row[];
+}
+interface NodeDatabaseSync {
+    exec(sql: string): void;
+    prepare(sql: string): NodeStatementSync;
+    close(): void;
+}
+declare class DenoSqliteAdapter implements StorageAdapter {
+    readonly dialect: "sqlite";
+    private _db;
+    private readonly _path;
+    private readonly _wal;
+    private readonly _busyTimeout;
+    constructor(path: string, options?: {
+        wal?: boolean;
+        busyTimeout?: number;
+    });
+    get db(): NodeDatabaseSync;
+    open(): void;
+    close(): void;
+    run(sql: string, params?: unknown[]): void;
+    get(sql: string, params?: unknown[]): Row | undefined;
+    all(sql: string, params?: unknown[]): Row[];
+    prepare(sql: string): PreparedStatement;
+    introspectColumns(table: string): string[];
+    /** Mirror of SQLiteAdapter.addColumn — SQLite ALTER quirks are binding-agnostic. */
+    addColumn(table: string, column: string, typeSpec: string): void;
+    /**
+     * O(1) watch-loop change-probe — same composition as SQLiteAdapter, but
+     * `data_version` is read with a plain prepared statement because node:sqlite
+     * has no `.pragma(name, { simple: true })` scalar helper.
+     */
+    changeProbe(): string;
+    runAsync(sql: string, params?: unknown[]): Promise<void>;
+    getAsync(sql: string, params?: unknown[]): Promise<Row | undefined>;
+    allAsync(sql: string, params?: unknown[]): Promise<Row[]>;
+    introspectColumnsAsync(table: string): Promise<string[]>;
+    introspectAllColumns(tables: string[]): Promise<Map<string, Set<string>>>;
+    addColumnAsync(table: string, column: string, typeSpec: string): Promise<void>;
+    /** BEGIN/COMMIT around an awaited fn; ROLLBACK on throw. Mirror of SQLiteAdapter. */
+    withClient<T>(fn: (tx: TxClient) => Promise<T>): Promise<T>;
+}
+
 /**
  * Pluggable Postgres backend for Lattice.
  *
@@ -6707,6 +6775,13 @@ interface StartGuiServerOptions {
      * it overrides `selfUpdate`'s default factory.
      */
     updateServiceFactory?: (emit: (type: string, data: unknown) => void) => UpdateService;
+    /**
+     * Desktop shell only: open an external URL in the OS default browser. The
+     * embedded desktop webview has no tabs, so `target="_blank"` links are routed
+     * to `GET /api/desktop/open` which calls this. Omitted for the web/CLI GUI —
+     * the route then 404s, so a browser-served GUI can never trigger an OS open.
+     */
+    desktopOpenExternal?: (url: string) => void;
 }
 interface GuiServerHandle {
     server: Server;
@@ -7117,4 +7192,4 @@ declare function dedupeAndDetectViews(plan: ProposedSchema, data: Record<string,
     views: DetectedView[];
 };
 
-export { ALL_PROVENANCE_FIELDS, type AddWorkspaceOptions, type AdoptNativeOptions, type AdoptResult, type AggregateFunction, type AggregateHaving, type AggregateOptions, type AggregateResult, type AggregateSpec, type ApplyWriteResult, type AsOfCandidate, type AsOfColumnCandidate, type AsOfInputs, type AudienceRowCtx, type AuditEvent, type AutoUpdateResult, type BacklinkSignal, type BelongsToRelation, type BelongsToSource, type BenchmarkOptions, type BenchmarkReport, type BenchmarkScale, type BlobMetadata, BoundedReadError, type BuiltinTemplateName, CLOUD_SETTING_SYSTEM_PROMPT, CLOUD_SETTING_WORKSPACE_LOGO, CLOUD_SETTING_WORKSPACE_LOGO_ETAG, CONFIG_SUBDIR, type CatalogEntity, type CatalogRecord, type ChangeEntry, type ChangelogOptions, type ChunkedMigrationOptions, type ChunkedMigrationResult, type ChunkerFn, type ClassifyMatch, type CleanupOptions, type CleanupResult, type CloudProbeResult, type CloudS3Secret, ComputedColumnCycleError, type ComputedColumnSpec, type CountOptions, type CrawlOptions, type CrawlResult, type CustomSignal, type CustomSource, DEFAULT_ENTRY_TYPES, DEFAULT_MAX_NODES, DEFAULT_TYPE_ALIASES, type DetectedView, type DiagnoseOptions, type DiscoveredTable, EMBEDDINGS_TABLE, EmbeddingDimensionMismatchError, type EmbeddingRefreshResult, EmbeddingScanTooLargeError, type EmbeddingsConfig, type EnrichOptions, type EnrichResult, type EnrichedSource, type EnrichmentLookup, type EntityContextDefinition, type EntityContextManifestEntry, type EntityFileManifestInfo, type EntityFileSource, type EntityFileSpec, type EntityMatch, type EntityProfileField, type EntityProfileSection, type EntityProfileTemplate, type EntityRenderSpec, type EntityRenderTemplate, type EntitySectionPerRow, type EntitySectionsTemplate, type EntityTableColumn, type EntityTableTemplate, type EvalQuery, type EvalRegression, type ExistingTable, type ExtensionAvailability, type ExtractEdgesSpec, type ExtractedObject, FileSourceKeyStore, type FileSourceKeyStoreOptions, type FilesRow, type Filter, type FilterAnd, type FilterExpr, type FilterOp, type FilterOr, FoldCache, type FtsConfig, type FtsGroup, type FtsHit, type FtsOptions, type FtsResult, type GraphBoostOptions, type GraphBoostResult, type GraphEdge, type GraphNode, type GraphTraversalResult, type GuiServerHandle, type HasManyRelation, type HasManySource, type HealthIssueKind, type HealthSeverity, type HybridScoreBreakdown, type HybridSearchOptions, type HybridSearchResult, type ImportMode, type ImportProgress, InMemorySourceKeyStore, InMemoryStateStore, type InferredColumn, type InferredDimension, type InferredEntity, type InferredLinkage, type InferredType, type InitOptions, LEGACY_MEMBER_GROUP, LOCAL_DB_RELPATH, type LatencyStats, Lattice, type LatticeConfig, type LatticeConfigInput, type LatticeEntityDef, type LatticeEntityRenderSpec, type LatticeFieldDef, type LatticeFieldType, type LatticeManifest, type LatticeOptions, type LinkOptions, type LlmClient, type LlmMessage, MAX_TRAVERSAL_DEPTH, type ManyToManySource, type MarkdownTableColumn, type MaterializeCtx, type MaterializeOptions, type MaterializeResult, type MaterializedRollupSpec, type MigrateResult, type Migration, type MigrationCheckpoint, type MigrationOptions, type MigrationProgress, type MigrationResult, type MigrationStatus, type MultiTableDefinition, NATIVE_ENTITY_DEFS, NATIVE_ENTITY_NAMES, NATIVE_REGISTRY_TABLE, type Observation, type OrderBySpec, type OrganizeOptions, type OrganizeResult, type OrganizedCreation, type OrganizedLink, type ParseError, type ParseResult, type ParsedConfig, type PdfOptions, type PdfSenderInput, type PerQueryEval, type PkLookup, PostgresAdapter, type PostgresAdapterOptions, type PreparedStatement, type PrimaryKey, ProgressThrottle, type ProposedSchema, type ProvenanceConfig, type ProvenanceField, ProvenanceImmutableError, type QueryOptions, type QueryPageOptions, type QueryPageResult, type QueryProjection, READ_ONLY_HEADER, ROOT_DIRNAME, type RankingOptions, type ReadOnlyHeaderOptions, type RecencySignal, type ReconcileOptions, type ReconcileResult, type RefKind, type RefProvider, type ReferenceMetadata, ReferenceUnavailableError, type RefreshEmbeddingsOptions, type Relation, type RelevanceLabel, type RemoteBlobStore, type RenderHooks, type RenderOptions, type RenderProgress, type RenderProgressCallback, type RenderProgressKind, type RenderResult, type RenderSpec, type ReportConfig, type ReportResult, type ReportSection, type ReportSectionResult, type RerankCandidate, type RerankScore, type RerankerFn, type ResolveOptions, type RetrievalEvalOptions, type RetrievalEvalSummary, type RetrievalHealthIssue, type RetrievalHealthReport, type RetrievalHealthSpec, type RetrievalSlo, type Retriever, type RetryOptions, type ReverseSeedDetection, type ReverseSeedResult, type ReverseSeedTableResult, type ReverseSyncError, type ReverseSyncResult, type ReverseSyncUpdate, type RewardScores, type RewardSignal, type RollupFunction, type Row, type RowVisibilityDefault, type S3Config, type S3StoreConfig, S3UnavailableError, S3_SECRET_TABLE, SQLiteAdapter, type SchemaEntity, type SchemaMatch, type SearchOptions, type SearchResult, type SecurityOptions, type SeedConfig, type SeedLinkSpec, SeedReconciliationError, type SeedResult, type SelfSource, type SemanticChunkerOptions, type SessionEntry, type SessionParseOptions, type SessionWriteEntry, type SessionWriteOp, type SessionWriteParseResult, type SloViolation, type SourceHandle, type SourceKeyStore, type SourceMetadata, type SourceQueryOptions, SourceShreddedError, type StartGuiServerOptions, type StopFn, type StorageAdapter, type SyncResult, TRUST_COLUMNS, type TableDefinition, type TableHealth, type TablePolicy, type TemplateRenderSpec, type TextChunk, type TraversalDirection, type TraversalNode, type TraversalOptions, type TrustConfig, type TrustState, type TurnParams, type TurnResult, type UnresolvedLink, type UpsertByNaturalKeyOptions, type UserIdentity, type UserPreferences, type VectorHit, type Viewer, type VisionOptions, type VisionSenderInput, WORKSPACES_SUBDIR, type WatchOptions, type WorkspacePaths, type WorkspaceRecord, type WorkspaceRegistry, type WriteHook, type WriteHookContext, type WritebackDefinition, type WritebackStateStore, type WritebackValidationResult, activeWorkspaceLabel, addEdge, addEdges, addWorkspace, adoptNativeEntities, allComputedDeps, analyticsEnabled, applyChunkedMigration, applyReranker, applyTokenBudget, applyWriteEntry, archiveLocalSqlite, assertSafeUrl, attachBlob, audiencePredicate, audienceViewSql, autoFtsColumns, autoUpdate, backfillOwnership, backlinkBoost, benchmarkRetrieval, buildVectorIndex, canManageRoles, checkSlos, chunkText, classifyLinks, cloudRlsInstalled, computeColumns, computedColumnDdl, computedColumnOrder, concatRowText, configDir, contentHash, cosineSimilarity, crawlUrl, createReadOnlyHeader, createS3Store, createSQLiteStateStore, decrypt, dedupeAndDetectViews, defaultWorkspaceYaml, deleteDbCredential, deleteToken, deriveCanonicalContexts, deriveKey, describeImage, describePdf, detectAsOf, detectAsOfCandidates, detectAsOfColumns, detectRetrievalRegressions, diagnoseRetrieval, discoverCloudTables, dropVectorIndex, enableAudienceView, enableChangelogRls, enableRlsForTable, encrypt, enrichKnowledge, ensureCheckpointTable, ensureEdgesTable, ensureEmbeddingsTable, ensureFtsIndex, ensureLatticeRoot, entityFileNames, estimateTokens, evaluateRetrieval, excelToRecords, extractEdgesFromColumn, extractObjects, filePresignSql, findLatticeRoot, fixSchemaConflicts, foldEntity, formatHealthReport, frontmatter, ftsTableName, fullTextSearch, generateEntryId, generateMemberPassword, generateWriteEntryId, getActiveWorkspace, getCloudSetting, getDbCredential, getMigrationCheckpoint, getOrCreateMasterKey, getTablePolicy, getWorkspace, grantPresignerToMemberGroup, graphAdjacencyBoost, hasFilePresigner, hasFtsIndex, hasVectorIndex, hashFile, hybridSearch, importLegacyUserConfig, inferFieldType, inferSchema, installCloudRls, installCloudSettings, installFilePresigner, isEncrypted, isNativeEntity, isPostgresUrl, isPrivateIp, isRetryableDbError, isRowAudience, latencyStats, listDbCredentials, listMigrationCheckpoints, listNativeBindings, listTokens, listWorkspaces, loadColumnPolicy, manifestPath, markdownTable, matchSchemaToExisting, materializeImport, memberGroupFor, memberRoleName, migrateLatticeData, neighbors, normalizeName, observationVisible, observationsFromChange, openTargetLatticeForMigration, openUnderSource, organizeSource, parseCellDate, parseConfigFile, parseConfigString, parseMarkdownEntries, parseMatches, parseObjects, parseSessionMD, parseSessionWrites, percentile, probeCloud, provenanceColumns, providerForUrl, provisionMemberRole, rankingBoost, readIdentity, readManifest, readPreferences, readRegistry, readToken, recencyBoost, referenceLocalFile, referenceUrl, refreshEmbeddings, regenerateAudienceViewFromDb, registerNativeEntities, registryPath, removeEdge, removeEmbedding, renameEntities, resolveActiveS3Config, resolveLatticeRoot, resolveProvenanceFields, resolveSource, resolveTrustDefault, resolveWorkspacePaths, resumeMigration, revertMigration, revokeMemberRole, rewardBoost, rollupColumnDdl, rootConfigDir, s3Key, saveDbCredential, saveDbCredentialForTeam, sealUnderSource, searchByEmbedding, searchVectorIndex, secureCloud, seedColumnPolicyFromYaml, semanticChunker, setActiveWorkspace, setCloudS3Secret, setCloudSetting, setColumnAudience, setRowVisibility, setTableDefaultVisibility, setTableNeverShare, shredSource, slugify, sourceRecords, startGuiServer, storeEmbedding, summarizeText, tableNeedsAudienceView, toSafeDirName, traverse, truncate, validateEntryId, vectorIndexAvailable, vectorIndexName, withRetry, workspaceBlobsDir, workspaceConfigPath, workspaceContextDir, workspaceDataDir, workspaceDbPath, workspaceDir, workspacesDir, writeIdentity, writeManifest, writePreferences, writeRegistry, writeToken };
+export { ALL_PROVENANCE_FIELDS, type AddWorkspaceOptions, type AdoptNativeOptions, type AdoptResult, type AggregateFunction, type AggregateHaving, type AggregateOptions, type AggregateResult, type AggregateSpec, type ApplyWriteResult, type AsOfCandidate, type AsOfColumnCandidate, type AsOfInputs, type AudienceRowCtx, type AuditEvent, type AutoUpdateResult, type BacklinkSignal, type BelongsToRelation, type BelongsToSource, type BenchmarkOptions, type BenchmarkReport, type BenchmarkScale, type BlobMetadata, BoundedReadError, type BuiltinTemplateName, CLOUD_SETTING_SYSTEM_PROMPT, CLOUD_SETTING_WORKSPACE_LOGO, CLOUD_SETTING_WORKSPACE_LOGO_ETAG, CONFIG_SUBDIR, type CatalogEntity, type CatalogRecord, type ChangeEntry, type ChangelogOptions, type ChunkedMigrationOptions, type ChunkedMigrationResult, type ChunkerFn, type ClassifyMatch, type CleanupOptions, type CleanupResult, type CloudProbeResult, type CloudS3Secret, ComputedColumnCycleError, type ComputedColumnSpec, type CountOptions, type CrawlOptions, type CrawlResult, type CustomSignal, type CustomSource, DEFAULT_ENTRY_TYPES, DEFAULT_MAX_NODES, DEFAULT_TYPE_ALIASES, DenoSqliteAdapter, type DetectedView, type DiagnoseOptions, type DiscoveredTable, EMBEDDINGS_TABLE, EmbeddingDimensionMismatchError, type EmbeddingRefreshResult, EmbeddingScanTooLargeError, type EmbeddingsConfig, type EnrichOptions, type EnrichResult, type EnrichedSource, type EnrichmentLookup, type EntityContextDefinition, type EntityContextManifestEntry, type EntityFileManifestInfo, type EntityFileSource, type EntityFileSpec, type EntityMatch, type EntityProfileField, type EntityProfileSection, type EntityProfileTemplate, type EntityRenderSpec, type EntityRenderTemplate, type EntitySectionPerRow, type EntitySectionsTemplate, type EntityTableColumn, type EntityTableTemplate, type EvalQuery, type EvalRegression, type ExistingTable, type ExtensionAvailability, type ExtractEdgesSpec, type ExtractedObject, FileSourceKeyStore, type FileSourceKeyStoreOptions, type FilesRow, type Filter, type FilterAnd, type FilterExpr, type FilterOp, type FilterOr, FoldCache, type FtsConfig, type FtsGroup, type FtsHit, type FtsOptions, type FtsResult, type GraphBoostOptions, type GraphBoostResult, type GraphEdge, type GraphNode, type GraphTraversalResult, type GuiServerHandle, type HasManyRelation, type HasManySource, type HealthIssueKind, type HealthSeverity, type HybridScoreBreakdown, type HybridSearchOptions, type HybridSearchResult, type ImportMode, type ImportProgress, InMemorySourceKeyStore, InMemoryStateStore, type InferredColumn, type InferredDimension, type InferredEntity, type InferredLinkage, type InferredType, type InitOptions, LEGACY_MEMBER_GROUP, LOCAL_DB_RELPATH, type LatencyStats, Lattice, type LatticeConfig, type LatticeConfigInput, type LatticeEntityDef, type LatticeEntityRenderSpec, type LatticeFieldDef, type LatticeFieldType, type LatticeManifest, type LatticeOptions, type LinkOptions, type LlmClient, type LlmMessage, MAX_TRAVERSAL_DEPTH, type ManyToManySource, type MarkdownTableColumn, type MaterializeCtx, type MaterializeOptions, type MaterializeResult, type MaterializedRollupSpec, type MigrateResult, type Migration, type MigrationCheckpoint, type MigrationOptions, type MigrationProgress, type MigrationResult, type MigrationStatus, type MultiTableDefinition, NATIVE_ENTITY_DEFS, NATIVE_ENTITY_NAMES, NATIVE_REGISTRY_TABLE, type Observation, type OrderBySpec, type OrganizeOptions, type OrganizeResult, type OrganizedCreation, type OrganizedLink, type ParseError, type ParseResult, type ParsedConfig, type PdfOptions, type PdfSenderInput, type PerQueryEval, type PkLookup, PostgresAdapter, type PostgresAdapterOptions, type PreparedStatement, type PrimaryKey, ProgressThrottle, type ProposedSchema, type ProvenanceConfig, type ProvenanceField, ProvenanceImmutableError, type QueryOptions, type QueryPageOptions, type QueryPageResult, type QueryProjection, READ_ONLY_HEADER, ROOT_DIRNAME, type RankingOptions, type ReadOnlyHeaderOptions, type RecencySignal, type ReconcileOptions, type ReconcileResult, type RefKind, type RefProvider, type ReferenceMetadata, ReferenceUnavailableError, type RefreshEmbeddingsOptions, type Relation, type RelevanceLabel, type RemoteBlobStore, type RenderHooks, type RenderOptions, type RenderProgress, type RenderProgressCallback, type RenderProgressKind, type RenderResult, type RenderSpec, type ReportConfig, type ReportResult, type ReportSection, type ReportSectionResult, type RerankCandidate, type RerankScore, type RerankerFn, type ResolveOptions, type RetrievalEvalOptions, type RetrievalEvalSummary, type RetrievalHealthIssue, type RetrievalHealthReport, type RetrievalHealthSpec, type RetrievalSlo, type Retriever, type RetryOptions, type ReverseSeedDetection, type ReverseSeedResult, type ReverseSeedTableResult, type ReverseSyncError, type ReverseSyncResult, type ReverseSyncUpdate, type RewardScores, type RewardSignal, type RollupFunction, type Row, type RowVisibilityDefault, type S3Config, type S3StoreConfig, S3UnavailableError, S3_SECRET_TABLE, SQLiteAdapter, type SchemaEntity, type SchemaMatch, type SearchOptions, type SearchResult, type SecurityOptions, type SeedConfig, type SeedLinkSpec, SeedReconciliationError, type SeedResult, type SelfSource, type SemanticChunkerOptions, type SessionEntry, type SessionParseOptions, type SessionWriteEntry, type SessionWriteOp, type SessionWriteParseResult, type SloViolation, type SourceHandle, type SourceKeyStore, type SourceMetadata, type SourceQueryOptions, SourceShreddedError, type StartGuiServerOptions, type StopFn, type StorageAdapter, type SyncResult, TRUST_COLUMNS, type TableDefinition, type TableHealth, type TablePolicy, type TemplateRenderSpec, type TextChunk, type TraversalDirection, type TraversalNode, type TraversalOptions, type TrustConfig, type TrustState, type TurnParams, type TurnResult, type UnresolvedLink, type UpsertByNaturalKeyOptions, type UserIdentity, type UserPreferences, type VectorHit, type Viewer, type VisionOptions, type VisionSenderInput, WORKSPACES_SUBDIR, type WatchOptions, type WorkspacePaths, type WorkspaceRecord, type WorkspaceRegistry, type WriteHook, type WriteHookContext, type WritebackDefinition, type WritebackStateStore, type WritebackValidationResult, activeWorkspaceLabel, addEdge, addEdges, addWorkspace, adoptNativeEntities, allComputedDeps, analyticsEnabled, applyChunkedMigration, applyReranker, applyTokenBudget, applyWriteEntry, archiveLocalSqlite, assertSafeUrl, attachBlob, audiencePredicate, audienceViewSql, autoFtsColumns, autoUpdate, backfillOwnership, backlinkBoost, benchmarkRetrieval, buildVectorIndex, canManageRoles, checkSlos, chunkText, classifyLinks, cloudRlsInstalled, computeColumns, computedColumnDdl, computedColumnOrder, concatRowText, configDir, contentHash, cosineSimilarity, crawlUrl, createReadOnlyHeader, createS3Store, createSQLiteStateStore, decrypt, dedupeAndDetectViews, defaultWorkspaceYaml, deleteDbCredential, deleteToken, deriveCanonicalContexts, deriveKey, describeImage, describePdf, detectAsOf, detectAsOfCandidates, detectAsOfColumns, detectRetrievalRegressions, diagnoseRetrieval, discoverCloudTables, dropVectorIndex, enableAudienceView, enableChangelogRls, enableRlsForTable, encrypt, enrichKnowledge, ensureCheckpointTable, ensureEdgesTable, ensureEmbeddingsTable, ensureFtsIndex, ensureLatticeRoot, entityFileNames, estimateTokens, evaluateRetrieval, excelToRecords, extractEdgesFromColumn, extractObjects, filePresignSql, findLatticeRoot, fixSchemaConflicts, foldEntity, formatHealthReport, frontmatter, ftsTableName, fullTextSearch, generateEntryId, generateMemberPassword, generateWriteEntryId, getActiveWorkspace, getCloudSetting, getDbCredential, getMigrationCheckpoint, getOrCreateMasterKey, getTablePolicy, getWorkspace, grantPresignerToMemberGroup, graphAdjacencyBoost, hasFilePresigner, hasFtsIndex, hasVectorIndex, hashFile, hybridSearch, importLegacyUserConfig, inferFieldType, inferSchema, installCloudRls, installCloudSettings, installFilePresigner, isEncrypted, isNativeEntity, isPostgresUrl, isPrivateIp, isRetryableDbError, isRowAudience, latencyStats, listDbCredentials, listMigrationCheckpoints, listNativeBindings, listTokens, listWorkspaces, loadColumnPolicy, manifestPath, markdownTable, matchSchemaToExisting, materializeImport, memberGroupFor, memberRoleName, migrateLatticeData, neighbors, normalizeName, observationVisible, observationsFromChange, openTargetLatticeForMigration, openUnderSource, organizeSource, parseCellDate, parseConfigFile, parseConfigString, parseMarkdownEntries, parseMatches, parseObjects, parseSessionMD, parseSessionWrites, percentile, probeCloud, provenanceColumns, providerForUrl, provisionMemberRole, rankingBoost, readIdentity, readManifest, readPreferences, readRegistry, readToken, recencyBoost, referenceLocalFile, referenceUrl, refreshEmbeddings, regenerateAudienceViewFromDb, registerNativeEntities, registryPath, removeEdge, removeEmbedding, renameEntities, resolveActiveS3Config, resolveLatticeRoot, resolveProvenanceFields, resolveSource, resolveTrustDefault, resolveWorkspacePaths, resumeMigration, revertMigration, revokeMemberRole, rewardBoost, rollupColumnDdl, rootConfigDir, s3Key, saveDbCredential, saveDbCredentialForTeam, sealUnderSource, searchByEmbedding, searchVectorIndex, secureCloud, seedColumnPolicyFromYaml, semanticChunker, setActiveWorkspace, setCloudS3Secret, setCloudSetting, setColumnAudience, setRowVisibility, setTableDefaultVisibility, setTableNeverShare, shredSource, slugify, sourceRecords, startGuiServer, storeEmbedding, summarizeText, tableNeedsAudienceView, toSafeDirName, traverse, truncate, validateEntryId, vectorIndexAvailable, vectorIndexName, withRetry, workspaceBlobsDir, workspaceConfigPath, workspaceContextDir, workspaceDataDir, workspaceDbPath, workspaceDir, workspacesDir, writeIdentity, writeManifest, writePreferences, writeRegistry, writeToken };

package/dist/index.js

@@ -719,17 +719,179 @@ var init_sqlite = __esm({
   }
 });
 
+// src/db/sqlite-deno.ts
+import { createRequire as createRequire2 } from "module";
+function runtimeRequire2() {
+  const importMetaUrl = import.meta.url;
+  return importMetaUrl ? createRequire2(importMetaUrl) : __require;
+}
+function loadNodeSqlite() {
+  if (_ctor2) return _ctor2;
+  const mod = runtimeRequire2()("node:sqlite");
+  if (!mod.DatabaseSync) {
+    throw new Error(
+      "node:sqlite is unavailable in this runtime \u2014 cannot open the Deno SQLite adapter"
+    );
+  }
+  _ctor2 = mod.DatabaseSync;
+  return _ctor2;
+}
+var _ctor2, DenoSqliteAdapter;
+var init_sqlite_deno = __esm({
+  "src/db/sqlite-deno.ts"() {
+    "use strict";
+    _ctor2 = null;
+    DenoSqliteAdapter = class {
+      dialect = "sqlite";
+      _db = null;
+      _path;
+      _wal;
+      _busyTimeout;
+      constructor(path3, options) {
+        this._path = path3;
+        this._wal = options?.wal ?? true;
+        this._busyTimeout = options?.busyTimeout ?? 5e3;
+      }
+      get db() {
+        if (!this._db) throw new Error("DenoSqliteAdapter: not open \u2014 call open() first");
+        return this._db;
+      }
+      open() {
+        const Ctor = loadNodeSqlite();
+        this._db = new Ctor(this._path);
+        this._db.exec(`PRAGMA busy_timeout = ${this._busyTimeout.toString()}`);
+        if (this._wal) {
+          this._db.exec("PRAGMA journal_mode = WAL");
+        }
+      }
+      close() {
+        this._db?.close();
+        this._db = null;
+      }
+      run(sql, params = []) {
+        this.db.prepare(sql).run(...params);
+      }
+      get(sql, params = []) {
+        return this.db.prepare(sql).get(...params);
+      }
+      all(sql, params = []) {
+        return this.db.prepare(sql).all(...params);
+      }
+      prepare(sql) {
+        const stmt = this.db.prepare(sql);
+        return {
+          run: (...params) => {
+            const info = stmt.run(...params);
+            return {
+              changes: Number(info.changes),
+              lastInsertRowid: info.lastInsertRowid
+            };
+          },
+          get: (...params) => stmt.get(...params),
+          all: (...params) => stmt.all(...params)
+        };
+      }
+      introspectColumns(table) {
+        const rows = this.all(`PRAGMA table_info("${table}")`);
+        return rows.map((r6) => r6.name);
+      }
+      /** Mirror of SQLiteAdapter.addColumn — SQLite ALTER quirks are binding-agnostic. */
+      addColumn(table, column, typeSpec) {
+        const upperType = typeSpec.toUpperCase();
+        if (upperType.includes("PRIMARY KEY")) return;
+        const hasNonConstantDefault = upperType.includes("CURRENT_TIMESTAMP") || /DATETIME\s*\(\s*'NOW'\s*\)/i.test(typeSpec) || upperType.includes("RANDOM()");
+        if (hasNonConstantDefault) {
+          const safeType = typeSpec.replace(/\bNOT\s+NULL\b/gi, "").replace(/\bDEFAULT\s+\(?\s*CURRENT_TIMESTAMP\s*\)?/gi, "").replace(/\bDEFAULT\s+\(?\s*datetime\([^)]*\)\s*\)?/gi, "").replace(/\bDEFAULT\s+\(?\s*RANDOM\(\)\s*\)?/gi, "").replace(/\s+/g, " ").trim();
+          this.run(`ALTER TABLE "${table}" ADD COLUMN "${column}" ${safeType || "TEXT"}`);
+          this.run(`UPDATE "${table}" SET "${column}" = CURRENT_TIMESTAMP WHERE "${column}" IS NULL`);
+        } else {
+          this.run(`ALTER TABLE "${table}" ADD COLUMN "${column}" ${typeSpec}`);
+        }
+      }
+      /**
+       * O(1) watch-loop change-probe — same composition as SQLiteAdapter, but
+       * `data_version` is read with a plain prepared statement because node:sqlite
+       * has no `.pragma(name, { simple: true })` scalar helper.
+       */
+      changeProbe() {
+        const dataVersion = this.db.prepare("PRAGMA data_version").get().data_version;
+        const totalChanges = this.db.prepare("SELECT total_changes() AS n").get().n;
+        return `${String(dataVersion)}:${String(totalChanges)}`;
+      }
+      // ── Async surface (sync under the hood; mirrors SQLiteAdapter) ──────────
+      // eslint-disable-next-line @typescript-eslint/require-await
+      async runAsync(sql, params) {
+        this.run(sql, params);
+      }
+      // eslint-disable-next-line @typescript-eslint/require-await
+      async getAsync(sql, params) {
+        return this.get(sql, params);
+      }
+      // eslint-disable-next-line @typescript-eslint/require-await
+      async allAsync(sql, params) {
+        return this.all(sql, params);
+      }
+      // eslint-disable-next-line @typescript-eslint/require-await
+      async introspectColumnsAsync(table) {
+        return this.introspectColumns(table);
+      }
+      // eslint-disable-next-line @typescript-eslint/require-await
+      async introspectAllColumns(tables) {
+        const map = /* @__PURE__ */ new Map();
+        for (const t8 of tables) {
+          try {
+            const cols = this.introspectColumns(t8);
+            if (cols.length > 0) map.set(t8, new Set(cols));
+          } catch {
+          }
+        }
+        return map;
+      }
+      // eslint-disable-next-line @typescript-eslint/require-await
+      async addColumnAsync(table, column, typeSpec) {
+        this.addColumn(table, column, typeSpec);
+      }
+      /** BEGIN/COMMIT around an awaited fn; ROLLBACK on throw. Mirror of SQLiteAdapter. */
+      async withClient(fn) {
+        const dbRef = this.db;
+        const getSync = this.get.bind(this);
+        const allSync = this.all.bind(this);
+        const tx = {
+          run: (sql, params) => {
+            const info = dbRef.prepare(sql).run(...params ?? []);
+            return Promise.resolve({ changes: Number(info.changes) });
+          },
+          get: (sql, params) => Promise.resolve(getSync(sql, params ?? [])),
+          all: (sql, params) => Promise.resolve(allSync(sql, params ?? []))
+        };
+        this.run("BEGIN");
+        try {
+          const result = await fn(tx);
+          this.run("COMMIT");
+          return result;
+        } catch (err) {
+          try {
+            this.run("ROLLBACK");
+          } catch {
+          }
+          throw err;
+        }
+      }
+    };
+  }
+});
+
 // src/db/postgres.ts
 import path2 from "path";
 import { fileURLToPath } from "url";
-import { createRequire as createRequire2 } from "module";
+import { createRequire as createRequire3 } from "module";
 function moduleContext() {
   if (_moduleContext) return _moduleContext;
   const importMetaUrl = import.meta.url;
   if (importMetaUrl) {
     _moduleContext = {
       dir: path2.dirname(fileURLToPath(importMetaUrl)),
-      require: createRequire2(importMetaUrl)
+      require: createRequire3(importMetaUrl)
     };
   } else {
     _moduleContext = { dir: __dirname, require: __require };
@@ -9937,6 +10099,9 @@ function buildAdapter(dbPath, options) {
   const adapterOpts = {};
   if (options.wal !== void 0) adapterOpts.wal = options.wal;
   if (options.busyTimeout !== void 0) adapterOpts.busyTimeout = options.busyTimeout;
+  if (typeof globalThis.Deno !== "undefined") {
+    return new DenoSqliteAdapter(sqlitePath, adapterOpts);
+  }
   return new SQLiteAdapter(sqlitePath, adapterOpts);
 }
 function _resolveTemplateName(render) {
@@ -9956,6 +10121,7 @@ var init_lattice = __esm({
     init_render_cursor();
     init_adapter();
     init_sqlite();
+    init_sqlite_deno();
     init_postgres();
     init_pk();
     init_manager();
@@ -52484,7 +52650,7 @@ var init_table_policy = __esm({
 });
 
 // src/ai/llm-client.ts
-import { createRequire as createRequire3 } from "module";
+import { createRequire as createRequire4 } from "module";
 var DEFAULT_MODEL, CHEAPEST_MODEL;
 var init_llm_client = __esm({
   "src/ai/llm-client.ts"() {
@@ -52658,7 +52824,7 @@ var init_summarize = __esm({
 import { JSDOM } from "jsdom";
 import { Readability } from "@mozilla/readability";
 import { basename as basename5 } from "path";
-import { createRequire as createRequire4 } from "module";
+import { createRequire as createRequire5 } from "module";
 async function crawlUrl(rawUrl, opts = {}) {
   const u2 = await assertSafeUrl(rawUrl, opts.allowPrivate ?? false);
   const fetchImpl = opts.fetcher ?? fetch;
@@ -52905,7 +53071,7 @@ async function renderViaPlaywright(url, timeoutMs, warnIfMissing = false) {
   let chromium;
   try {
     const importMetaUrl = import.meta.url;
-    const req = importMetaUrl ? createRequire4(importMetaUrl) : __require;
+    const req = importMetaUrl ? createRequire5(importMetaUrl) : __require;
     const pw = req("playwright");
     chromium = pw.chromium;
   } catch {
@@ -54105,9 +54271,6 @@ async function resolveClaudeAuth(db) {
   const apiKey = await resolveAnthropicKey(db);
   return apiKey ? { apiKey } : null;
 }
-async function hasClaudeAuth(db) {
-  return Boolean(await readMachineCredential(db, CLAUDE_OAUTH_KIND)) || await hasCredential(db, "anthropic", "ANTHROPIC_API_KEY");
-}
 async function claudeAuthKind(db) {
   if (await readMachineCredential(db, CLAUDE_OAUTH_KIND)) return "oauth";
   if (await hasCredential(db, "anthropic", "ANTHROPIC_API_KEY")) return "key";
@@ -54135,7 +54298,6 @@ async function dispatchAssistantRoute(req, res, ctx) {
       hasAnthropicKey,
       hasOpenaiKey,
       hasElevenlabsKey,
-      hasClaudeAuth: await hasClaudeAuth(db),
       claudeAuthKind: await claudeAuthKind(db),
       hasVoiceKey: voice !== null,
       sttProvider: voice?.provider ?? null,
@@ -54263,13 +54425,17 @@ async function dispatchAssistantRoute(req, res, ctx) {
     const verifier = generatePkceVerifier();
     const state2 = generateState();
     const cookieOpts = "HttpOnly; Path=/; Max-Age=600; SameSite=Lax";
-    res.writeHead(302, {
-      Location: buildAuthorizeUrl(cfg, state2, pkceChallengeFor(verifier)),
-      "Set-Cookie": [
-        `lat_oauth_verifier=${verifier}; ${cookieOpts}`,
-        `lat_oauth_state=${state2}; ${cookieOpts}`
-      ]
-    });
+    const setCookie = [
+      `lat_oauth_verifier=${verifier}; ${cookieOpts}`,
+      `lat_oauth_state=${state2}; ${cookieOpts}`
+    ];
+    const authorizeUrl = buildAuthorizeUrl(cfg, state2, pkceChallengeFor(verifier));
+    if ((req.headers.accept ?? "").includes("application/json")) {
+      res.writeHead(200, { "Content-Type": "application/json", "Set-Cookie": setCookie });
+      res.end(JSON.stringify({ authorizeUrl }));
+      return true;
+    }
+    res.writeHead(302, { Location: authorizeUrl, "Set-Cookie": setCookie });
     res.end();
     return true;
   }
@@ -57580,7 +57746,7 @@ var init_tools = __esm({
 });
 
 // src/gui/ai/chat.ts
-import { createRequire as createRequire7 } from "module";
+import { createRequire as createRequire8 } from "module";
 function capToolResult(s2) {
   if (s2.length <= MAX_TOOL_RESULT_CHARS) return s2;
   if (s2.length > MAX_TOOL_RESULT_SKIP)
@@ -57813,7 +57979,7 @@ async function* runChat(opts) {
 function loadSdk() {
   if (!_sdk) {
     const importMetaUrl = import.meta.url;
-    const req = importMetaUrl ? createRequire7(importMetaUrl) : __require;
+    const req = importMetaUrl ? createRequire8(importMetaUrl) : __require;
     try {
       _sdk = req("@anthropic-ai/sdk");
     } catch (err) {
@@ -58428,6 +58594,7 @@ async function autoUpdate(opts) {
 
 // src/index.ts
 init_sqlite();
+init_sqlite_deno();
 init_postgres();
 init_computed();
 init_governance();
@@ -59751,7 +59918,7 @@ function isBetter(next, prev) {
 
 // src/ai/vision.ts
 init_llm_client();
-import { createRequire as createRequire5 } from "module";
+import { createRequire as createRequire6 } from "module";
 import { readFile as readFile5 } from "fs/promises";
 var DEFAULT_PROMPT = "Describe this image for a knowledge base in 2-4 factual sentences: what it shows, any visible text, and notable details. No preamble.";
 var MAX_DIM = 1568;
@@ -59813,7 +59980,7 @@ function buildVisionAnthropicConfig(auth) {
 function defaultSender(auth) {
   return async (input) => {
     const importMetaUrl = import.meta.url;
-    const req = importMetaUrl ? createRequire5(importMetaUrl) : __require;
+    const req = importMetaUrl ? createRequire6(importMetaUrl) : __require;
     const sdk = req("@anthropic-ai/sdk");
     const Anthropic = sdk.Anthropic ?? sdk.default;
     if (!Anthropic) throw new Error("Could not resolve Anthropic from '@anthropic-ai/sdk'");
@@ -59840,7 +60007,7 @@ function defaultSender(auth) {
 function defaultPdfSender(auth) {
   return async (input) => {
     const importMetaUrl = import.meta.url;
-    const req = importMetaUrl ? createRequire5(importMetaUrl) : __require;
+    const req = importMetaUrl ? createRequire6(importMetaUrl) : __require;
     const sdk = req("@anthropic-ai/sdk");
     const Anthropic = sdk.Anthropic ?? sdk.default;
     if (!Anthropic) throw new Error("Could not resolve Anthropic from '@anthropic-ai/sdk'");
@@ -60151,12 +60318,12 @@ init_postgres();
 
 // src/gui/realtime.ts
 import { EventEmitter } from "events";
-import { createRequire as createRequire6 } from "module";
+import { createRequire as createRequire7 } from "module";
 var _pgModule = null;
 function loadPg() {
   if (_pgModule) return _pgModule;
   const importMetaUrl = import.meta.url;
-  const requireFromHere = importMetaUrl ? createRequire6(importMetaUrl) : (
+  const requireFromHere = importMetaUrl ? createRequire7(importMetaUrl) : (
     // CJS fallback — Node provides `require` on every CJS module scope.
     __require
   );
@@ -63515,6 +63682,20 @@ var displayConfigJs = `
       });
     }
 
+    // SINGLE SOURCE OF TRUTH for the assistant's Claude connection state, derived
+    // from /api/assistant/config's claudeAuthKind (oauth | key | null). EVERY
+    // place that shows "Connected with Claude" / opens the API-key panel / gates
+    // on "the assistant has auth" MUST go through this \u2014 never re-derive from raw
+    // fields, or the signals disagree (a stray "or hasAnthropicKey" once made
+    // onboarding show "Connected with Claude" for an API-key-only setup while the
+    // settings panel showed not-connected).
+    //   .oauth -> a Claude SUBSCRIPTION is connected ("Connected with Claude")
+    //   .any   -> some working auth exists (subscription OR API key)
+    function claudeAuth(cfg) {
+      var kind = (cfg && cfg.claudeAuthKind) || null; // 'oauth' | 'key' | null
+      return { kind: kind, oauth: kind === 'oauth', any: kind != null };
+    }
+
     // Disable a button + show an inline spinner for the duration of an
     // async action so a slow server round-trip can't be double-clicked.
     // The fn arg should return a Promise; the button is restored on settle.
@@ -64305,7 +64486,12 @@ var offlineEditQueueJs = `    // \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u250
         if (eventStreamClosed) return;
         // Unexpected drop: show the disconnect on the pill and auto-reconnect with
         // backoff (the server replays state + render snapshot on reconnect).
-        setStatusPill('cloud', 'disconnected');
+        // Preserve the KNOWN mode (cloudMode is the single source of truth, set
+        // from the server's realtime-state message) \u2014 never hardcode 'cloud',
+        // which on a LOCAL (SQLite) workspace would flip cloudMode=true and divert
+        // writes into the offline queue with a bogus "will sync when cloud
+        // reconnects" toast against a workspace that has no cloud.
+        setStatusPill(cloudMode ? 'cloud' : 'local', 'disconnected');
         scheduleEventStreamReconnect();
       };
     }
@@ -68213,7 +68399,7 @@ var rowContextJs = `    // \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u250
         var cfg = res[1];
         st.name = (id && id.display_name) || '';
         st.email = (id && id.email) || '';
-        st.connected = !!(cfg && (cfg.claudeAuthKind === 'oauth' || cfg.hasAnthropicKey));
+        st.connected = claudeAuth(cfg).oauth;
         if (!st.wsName && st.name) st.wsName = st.name + "'s Workspace";
         render();
       });
@@ -68874,7 +69060,7 @@ var dataModelJs = `    // \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
             '</p>' +
             // Connect-with-Claude is the primary path (use your subscription, no
             // API key). A pasted API key is demoted to an "Advanced" disclosure.
-            (cfg.claudeAuthKind === 'oauth'
+            (claudeAuth(cfg).oauth
               ? '<div style="display:flex;align-items:center;gap:10px;margin-bottom:10px">' +
                   '<span class="feed-source" style="background:var(--accent-soft);color:var(--accent)">Connected with Claude</span>' +
                   '<button id="asst-oauth-disconnect" class="btn">Disconnect</button>' +
@@ -68896,7 +69082,7 @@ var dataModelJs = `    // \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
                   '</div>' +
                   '<div id="connect-claude-msg" style="margin-top:6px;font-size:12px;color:var(--text-muted)"></div>' +
                 '</div>') +
-            '<details style="margin-bottom:12px"' + (cfg.claudeAuthKind === 'key' ? ' open' : '') + '>' +
+            '<details style="margin-bottom:12px"' + (claudeAuth(cfg).kind === 'key' ? ' open' : '') + '>' +
               '<summary style="cursor:pointer;font-size:12px;color:var(--text-muted)">Advanced \u2014 use an API key instead</summary>' +
               '<div style="margin-top:8px">' +
                 rowHtml('asst-anthropic', 'Claude API token (chat)', !!cfg.hasAnthropicKey, 'sk-ant-\u2026') +
@@ -70888,7 +71074,7 @@ var createDatabaseWizardJs = `    // \u2500\u2500\u2500\u2500\u2500\u2500\u2500\
     function renderComposer() {
       var host = document.getElementById('rail-composer'); if (!host) return;
       fetchJson('/api/assistant/config').then(function (cfg) {
-        if (cfg && cfg.hasClaudeAuth) {
+        if (claudeAuth(cfg).any) {
           var micHtml = cfg.hasVoiceKey
             ? '<button class="composer-mic" id="chat-mic" title="Record voice">\u{1F399}</button>'
             : '';
@@ -77239,6 +77425,7 @@ async function startGuiServer(options) {
   }
   const autoRender = options.autoRender ?? false;
   const guiVersion = options.version ?? "";
+  const desktopOpenExternal = options.desktopOpenExternal;
   const sessionId = crypto.randomUUID();
   let updateService = null;
   let activeRef = bootConfigPath && bootOutputDir ? await openConfig(bootConfigPath, bootOutputDir, autoRender, options.realtimeWatchdogMs) : null;
@@ -77421,6 +77608,20 @@ async function startGuiServer(options) {
           sendJson(res, { version: guiVersion });
           return;
         }
+        if (method === "GET" && pathname === "/api/desktop/open") {
+          if (!desktopOpenExternal) {
+            sendJson(res, { error: "not found" }, 404);
+            return;
+          }
+          const target = new URL(req.url ?? "", "http://localhost").searchParams.get("url");
+          if (!target || !/^https?:\/\//i.test(target)) {
+            sendJson(res, { error: "url must be http(s)" }, 400);
+            return;
+          }
+          desktopOpenExternal(target);
+          sendJson(res, { ok: true });
+          return;
+        }
         if (method === "GET" && pathname === "/api/update/status") {
           sendJson(
             res,
@@ -77988,6 +78189,7 @@ export {
   DEFAULT_ENTRY_TYPES,
   DEFAULT_MAX_NODES,
   DEFAULT_TYPE_ALIASES,
+  DenoSqliteAdapter,
   EMBEDDINGS_TABLE,
   EmbeddingDimensionMismatchError,
   EmbeddingScanTooLargeError,

package/docs/desktop.md

@@ -0,0 +1,75 @@
+# Lattice Desktop app
+
+A downloadable, double-click desktop build of the Lattice GUI — no terminal, no
+`npm install`. It runs the **exact same** GUI server as `lattice gui`, served into
+a native window, so there is only one GUI to maintain.
+
+## Install
+
+Download the installer for your OS from **[latticesql.com/install](https://latticesql.com/install)**:
+
+- **macOS** — `Lattice.dmg` (Apple silicon + Intel)
+- **Windows** — `Lattice.msi`
+
+The CLI path keeps working unchanged: `npm i -g latticesql && lattice gui`.
+
+> **Unsigned builds (current):** the v1 installers are not yet code-signed, so the
+> first launch shows an "unidentified developer" (macOS Gatekeeper) or "unknown
+> publisher" (Windows SmartScreen) prompt. Choose **Open anyway** / **Run anyway**.
+> Signed builds remove this step.
+
+## How it works
+
+The desktop app is built with [`deno desktop`](https://docs.deno.com/runtime/desktop/).
+It boots the standard `startGuiServer()` on a local port and points a native
+webview window at it — the webview talks to the local server exactly like a
+browser tab.
+
+- **Same version as the web GUI.** The app and its installer report the same
+  `latticesql` version the web GUI shows (one build constant; `deno.json`'s
+  version is kept in lockstep with `package.json` by `scripts/sync-desktop-version.mjs`).
+- **SQLite without native addons.** `better-sqlite3` is a native N-API addon that
+  cannot load under Deno, so the desktop build uses [`DenoSqliteAdapter`](../src/db/sqlite-deno.ts),
+  a drop-in adapter over the runtime's built-in `node:sqlite` `DatabaseSync`. The
+  npm/Node distribution is unchanged and still uses `better-sqlite3`.
+- **External links open in your browser.** A webview has no tabs/popups, so the
+  desktop shell routes `target="_blank"` links and `window.open()` to the system
+  default browser. "Connect with Claude" opens the provider page in your browser
+  while keeping the auth session local to the app.
+- **Upgrade-on-run.** On launch the app checks the release channel via
+  `Deno.autoUpdate()` and the `latest.json` manifest published with each release.
+- **Upgrade-on-install.** The download page always links the latest release, so a
+  fresh install is always current.
+
+## Build from source
+
+Requires a Deno **canary** build (`deno desktop` is canary-only for now):
+
+```bash
+deno upgrade canary
+npm ci
+
+# macOS .dmg → dist-desktop/Lattice.dmg
+npm run desktop:build:mac
+
+# Windows .msi → dist-desktop/Lattice.msi
+npm run desktop:build:win
+
+# Run the windowed app directly during development
+npm run desktop:dev
+```
+
+The app identity (name, bundle id, per-platform icons, update base URL) lives in
+[`deno.json`](../deno.json) under the `desktop` key.
+
+Releases are cut by the `Desktop Release` workflow on a `v*` tag: it builds both
+OSes, generates `latest.json`, and uploads the installers + manifest to the
+GitHub Release.
+
+## Limitations
+
+- **Image processing (`sharp`) and `sqlite-vec` acceleration are unavailable** in
+  the desktop build — both are native addons that do not load under Deno. Vector
+  search falls back to an in-process scan; image-dependent features are disabled.
+  Use the npm/Node build if you need them.
+- The build is large (it embeds its runtime + dependencies) and currently unsigned.