ledung 1.0.0 → 1.2.0

package/dist/main.js

@@ -4,8 +4,8 @@ import os16 from "node:os";
 import path40 from "node:path";
 
 // src/config.ts
-import fs9 from "node:fs";
-import path12 from "node:path";
+import fs10 from "node:fs";
+import path13 from "node:path";
 import { z as z6 } from "zod";
 
 // src/platform/paths.ts
@@ -2065,30 +2065,55 @@ function readPublishedUsage(raw) {
 var USAGE_REPO = /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/;
 
 // src/accounts/store.ts
-import fs8 from "node:fs";
+import fs9 from "node:fs";
 import os5 from "node:os";
-import path11 from "node:path";
+import path12 from "node:path";
 
 // src/accounts/about-file.ts
-import fs7 from "node:fs";
-import path10 from "node:path";
+import fs8 from "node:fs";
+import path11 from "node:path";
 
 // src/accounts/signin-store.ts
 import { createHash } from "node:crypto";
-import fs6 from "node:fs";
+import fs7 from "node:fs";
 import os4 from "node:os";
-import path9 from "node:path";
+import path10 from "node:path";
 
 // src/accounts/signin.ts
 import { execFile as execFile2 } from "node:child_process";
 
 // src/runners/claude-program.ts
 import { execFile } from "node:child_process";
-import fs5 from "node:fs";
+import fs6 from "node:fs";
 import { createRequire } from "node:module";
 import os3 from "node:os";
-import path8 from "node:path";
+import path9 from "node:path";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
+
+// src/platform/exercised.ts
+import fs5 from "node:fs";
+import path8 from "node:path";
+var EXERCISED_FILE = "exercised.log";
+var MAX_BYTES = 256 * 1024;
+var DEFAULT_TARGET = {
+  console: !PACKAGED,
+  file: () => path8.join(userDataDir(), EXERCISED_FILE)
+};
+function exercisedLine(line, target = DEFAULT_TARGET) {
+  if (target.console) console.log(line);
+  try {
+    const file = target.file();
+    if (!file) return;
+    const size = fs5.statSync(file, { throwIfNoEntry: false })?.size ?? 0;
+    const text2 = `${(/* @__PURE__ */ new Date()).toISOString()} ${line}
+`;
+    if (size > MAX_BYTES) fs5.writeFileSync(file, text2);
+    else fs5.appendFileSync(file, text2);
+  } catch {
+  }
+}
+
+// src/runners/claude-program.ts
 var SDK = "@anthropic-ai/claude-agent-sdk";
 function sdkClaudeBinary(resolve = createRequire(import.meta.resolve(SDK)).resolve) {
   const exe = process.platform === "win32" ? ".exe" : "";
@@ -2109,8 +2134,8 @@ function sdkClaudeBinary(resolve = createRequire(import.meta.resolve(SDK)).resol
 }
 function sdkClaudeVersion() {
   try {
-    const sdk = path8.dirname(fileURLToPath2(import.meta.resolve(SDK)));
-    const v = JSON.parse(fs5.readFileSync(path8.join(sdk, "package.json"), "utf8")).claudeCodeVersion;
+    const sdk = path9.dirname(fileURLToPath2(import.meta.resolve(SDK)));
+    const v = JSON.parse(fs6.readFileSync(path9.join(sdk, "package.json"), "utf8")).claudeCodeVersion;
     return typeof v === "string" ? v : null;
   } catch {
     return null;
@@ -2134,6 +2159,26 @@ var runVersion = (program) => new Promise((resolve) => {
   const { command, args } = commandFor(program);
   execFile(command, [...args, "--version"], { windowsHide: true, timeout: 15e3 }, (err, stdout) => resolve(err ? null : String(stdout)));
 });
+function regValue(text2, name, env) {
+  const row = text2.split(/\r?\n/).map((l) => l.trim().split(/\s{2,}|\t/)).find((cols) => cols[0]?.toLowerCase() === name.toLowerCase() && /^REG_(EXPAND_)?SZ$/i.test(cols[1] ?? ""));
+  const value = row?.slice(2).join("  ");
+  if (!value) return null;
+  return value.replace(/%([^%]+)%/g, (whole, v) => {
+    const key = Object.keys(env).find((k) => k.toLowerCase() === v.toLowerCase());
+    return key ? env[key] ?? whole : whole;
+  });
+}
+var regQuery = (key) => new Promise((resolve) => {
+  execFile("reg", ["query", key, "/v", "Path"], { windowsHide: true, timeout: 5e3 }, (err, stdout) => resolve(err ? "" : String(stdout)));
+});
+async function windowsPath() {
+  const [machine, user] = await Promise.all([
+    regQuery("HKLM\\SYSTEM\\CurrentControlSet\\Control\\Session Manager\\Environment"),
+    regQuery("HKCU\\Environment")
+  ]);
+  const parts2 = [regValue(machine, "Path", process.env), regValue(user, "Path", process.env)].filter((v) => !!v);
+  return parts2.length ? parts2.join(";") : null;
+}
 function realLookup() {
   return {
     platform: process.platform,
@@ -2141,7 +2186,7 @@ function realLookup() {
     home: os3.homedir(),
     stat: (file) => {
       try {
-        const s = fs5.statSync(file);
+        const s = fs6.statSync(file);
         return s.isFile() ? { size: s.size, mtimeMs: s.mtimeMs } : null;
       } catch {
         return null;
@@ -2149,19 +2194,27 @@ function realLookup() {
     },
     readText: (file) => {
       try {
-        return fs5.readFileSync(file, "utf8");
+        return fs6.readFileSync(file, "utf8");
       } catch {
         return null;
       }
     },
     realpath: (file) => {
       try {
-        return fs5.realpathSync(file);
+        return fs6.realpathSync(file);
       } catch {
         return file;
       }
     },
     versionText: runVersion,
+    listDir: (dir) => {
+      try {
+        return fs6.readdirSync(dir);
+      } catch {
+        return [];
+      }
+    },
+    ...process.platform === "win32" ? { freshPath: windowsPath } : {},
     bundled: sdkClaudeBinary(),
     required: sdkClaudeVersion(),
     packaged: PACKAGED
@@ -2174,18 +2227,26 @@ function noBundledProblem(look) {
 function shimTarget(shim, look) {
   const text2 = look.readText(shim);
   if (!text2) return null;
-  const dir = path8.win32.dirname(shim);
-  const found = [...text2.matchAll(/"%~?dp0%?\\?([^"%]+?\.(?:exe|c?js|mjs))"/gi)].map((m) => path8.win32.join(dir, m[1]));
+  const dir = path9.win32.dirname(shim);
+  const found = [...text2.matchAll(/"%~?dp0%?\\?([^"%]+?\.(?:exe|c?js|mjs))"/gi)].map((m) => path9.win32.join(dir, m[1]));
   return found.reverse().find((f) => look.stat(f) !== null) ?? null;
 }
 function knownLocations(look) {
   const { home, env } = look;
   if (look.platform === "win32") {
-    const p2 = path8.win32;
+    const p2 = path9.win32;
     const appData = env.APPDATA ?? p2.join(home, "AppData", "Roaming");
-    return [p2.join(home, ".local", "bin", "claude.exe"), p2.join(appData, "npm", "claude.cmd"), ...env.npm_config_prefix ? [p2.join(env.npm_config_prefix, "claude.cmd")] : []];
+    const localAppData = env.LOCALAPPDATA ?? p2.join(home, "AppData", "Local");
+    return [
+      p2.join(home, ".local", "bin", "claude.exe"),
+      p2.join(appData, "npm", "claude.cmd"),
+      ...env.npm_config_prefix ? [p2.join(env.npm_config_prefix, "claude.cmd")] : [],
+      // `winget install Anthropic.ClaudeCode` links it here, for the user or for the whole computer (#455).
+      p2.join(localAppData, "Microsoft", "WinGet", "Links", "claude.exe"),
+      p2.join(env.ProgramFiles ?? "C:\\Program Files", "WinGet", "Links", "claude.exe")
+    ];
   }
-  const p = path8.posix;
+  const p = path9.posix;
   return [
     p.join(home, ".local", "bin", "claude"),
     p.join(home, ".claude", "local", "claude"),
@@ -2204,24 +2265,65 @@ function programOf(file, look) {
   const real2 = look.realpath(file);
   return /\.(c|m)?js$/i.test(real2) ? real2 : file;
 }
-function findInstalled(look) {
+function isDesktopApp(file) {
+  return /[\\/]AnthropicClaude[\\/](app-[^\\/]+[\\/])?claude\.exe$/i.test(file) || /[\\/]Claude\.app[\\/]Contents[\\/]MacOS[\\/]/.test(file);
+}
+function searchInstalled(look, pathVar = look.env.PATH ?? look.env.Path ?? "") {
   const win = look.platform === "win32";
   const sep = win ? ";" : ":";
   const names = win ? ["claude.exe", "claude.cmd"] : ["claude"];
-  const pathVar = look.env.PATH ?? look.env.Path ?? "";
-  const onPath = pathVar.split(sep).filter(Boolean).flatMap((dir) => names.map((n) => (win ? path8.win32 : path8.posix).join(dir, n)));
+  const onPath = pathVar.split(sep).filter(Boolean).flatMap((dir) => names.map((n) => (win ? path9.win32 : path9.posix).join(dir, n)));
   const bundled = look.bundled ? look.realpath(look.bundled) : null;
   const same = (a, b) => win ? a.toLowerCase() === b.toLowerCase() : a === b;
+  const looked = [];
   for (const file of [...onPath, ...knownLocations(look)]) {
+    if (looked.some((l) => same(l, file))) continue;
+    looked.push(file);
     if (!look.stat(file)) continue;
     const program = programOf(file, look);
     if (!program || !look.stat(program)) continue;
     const real2 = look.realpath(program);
     if (bundled && same(real2, bundled)) continue;
     if (/[\\/]node_modules[\\/]@anthropic-ai[\\/]claude-agent-sdk/i.test(real2)) continue;
-    return program;
+    if (isDesktopApp(real2)) continue;
+    return { program, looked };
   }
-  return null;
+  return { program: null, looked };
+}
+function desktopAppFolders(look) {
+  const { home, env } = look;
+  if (look.platform === "win32") {
+    const p2 = path9.win32;
+    const appData = env.APPDATA ?? p2.join(home, "AppData", "Roaming");
+    const packages = p2.join(env.LOCALAPPDATA ?? p2.join(home, "AppData", "Local"), "Packages");
+    const store = (look.listDir?.(packages) ?? []).filter((n) => /^Claude_/i.test(n)).map((n) => p2.join(packages, n, "LocalCache", "Roaming", "Claude", "claude-code"));
+    return [p2.join(appData, "Claude", "claude-code"), ...store];
+  }
+  const p = path9.posix;
+  if (look.platform === "darwin") return [p.join(home, "Library", "Application Support", "Claude", "claude-code")];
+  return [p.join(env.XDG_CONFIG_HOME ?? p.join(home, ".config"), "Claude", "claude-code")];
+}
+function appProgramIn(look, versionDir, hash2) {
+  if (look.platform === "win32") return path9.win32.join(versionDir, "claude.exe");
+  if (look.platform !== "darwin") return path9.posix.join(versionDir, "claude");
+  const inBundle = (h) => path9.posix.join(versionDir, h, "claude.app", "Contents", "MacOS", "claude");
+  if (hash2) return inBundle(hash2);
+  return (look.listDir?.(versionDir) ?? []).sort().map(inBundle).find((f) => look.stat(f)) ?? null;
+}
+function desktopAppCopy(look) {
+  const p = look.platform === "win32" ? path9.win32 : path9.posix;
+  const looked = [];
+  let best = null;
+  for (const folder of desktopAppFolders(look)) {
+    looked.push(appProgramIn(look, p.join(folder, "<version>"), "<hash>"));
+    for (const name of look.listDir?.(folder) ?? []) {
+      const version = parseVersion(name);
+      const program = version ? appProgramIn(look, p.join(folder, name)) : null;
+      if (!version || !program || !look.stat(program)) continue;
+      if (!best || !atLeast(best.version, version)) best = { program, version };
+    }
+  }
+  return { program: best?.program ?? null, looked };
 }
 var versions = /* @__PURE__ */ new Map();
 async function programVersion(program, look) {
@@ -2234,6 +2336,10 @@ async function programVersion(program, look) {
   return version;
 }
 var INSTALL_LINK = "https://code.claude.com/docs/en/setup";
+function installCommand(platform) {
+  return platform === "win32" ? "irm https://claude.ai/install.ps1 | iex" : "curl -fsSL https://claude.ai/install.sh | bash";
+}
+var appCopyLogged = false;
 async function chooseClaude(setting = "installed", look = realLookup()) {
   const required = look.required;
   const bundledVersion = look.bundled ? await programVersion(look.bundled, look) ?? required : null;
@@ -2243,20 +2349,49 @@ async function chooseClaude(setting = "installed", look = realLookup()) {
     return { ...base, installed: null, program: bundled, problem: bundled ? null : noBundledProblem(look) };
   }
   const given = setting !== "installed";
-  const found = given ? look.stat(setting) ? programOf(setting, look) : null : findInstalled(look);
+  let found;
+  let looked;
+  let app = false;
+  if (given) {
+    found = look.stat(setting) ? programOf(setting, look) : null;
+    looked = [setting];
+  } else {
+    ({ program: found, looked } = searchInstalled(look));
+    const fresh = found || !look.freshPath ? null : await look.freshPath();
+    if (fresh) {
+      const again = searchInstalled(look, fresh);
+      found = again.program;
+      looked = [...looked, ...again.looked.filter((l) => !looked.includes(l))];
+    }
+    if (!found) {
+      const copy = desktopAppCopy(look);
+      found = copy.program;
+      looked = [...looked, ...copy.looked];
+      app = found !== null;
+      if (app && !appCopyLogged) {
+        appCopyLogged = true;
+        exercisedLine("EXERCISED #455 Claude Code found as the desktop app's own copy");
+      }
+    }
+  }
   const version = found ? await programVersion(found, look) : null;
-  const installed = found ? { kind: given ? "path" : "installed", path: found, version } : null;
+  const installed = found ? { kind: given ? "path" : "installed", path: found, version, ...app ? { app: true } : {} } : null;
+  const install = `install Claude Code (\`${installCommand(look.platform)}\`, or see ${INSTALL_LINK}), then press Check again`;
   let problem2 = null;
   if (!required) {
     problem2 = "Ledung could not read which Claude Code version its Agent SDK needs (the SDK's package.json). Install Ledung again (`npm install`).";
   } else if (!found) {
     problem2 = given ? `Ledung runs your Claude Code, and there is none at ${setting} (the config's "claudeExecutable"). Install it from ${INSTALL_LINK}, or correct the path.` : `Ledung runs your Claude Code, and it isn't installed on this computer. Install it from ${INSTALL_LINK}, then press Check again.`;
+  } else if (app && !version) {
+    problem2 = `Ledung runs your Claude Code, and the only one on this computer is the Claude desktop app's own copy at ${found}, whose version couldn't be read. The app keeps that copy for itself: ${install}.`;
+  } else if (app && !atLeast(version, required)) {
+    problem2 = `Ledung runs your Claude Code, and the only one on this computer is the Claude desktop app's own copy, ${version} at ${found}; Ledung needs ${required} or newer. The app keeps that copy for itself: ${install}.`;
   } else if (!version) {
     problem2 = `Ledung runs your Claude Code, and the version of the one at ${found} couldn't be read. Update it (\`claude update\`) or install it again from ${INSTALL_LINK}.`;
   } else if (!atLeast(version, required)) {
     problem2 = `Ledung runs your Claude Code, and yours is ${version}; Ledung needs ${required} or newer. Update it (\`claude update\`), then press Check again.`;
   }
-  return { ...base, installed, program: problem2 ? null : installed, problem: problem2 };
+  return { ...base, installed, program: problem2 ? null : installed, problem: problem2, looked };
 }
 
 // src/accounts/signin.ts
@@ -2372,7 +2507,7 @@ async function removeSignIn(place, platform = process.platform, run8 = runWithIn
       const { service, account } = keychainEntry(place.folder);
       await run8("security", ["delete-generic-password", "-a", account, "-s", service], null, 2e4);
     } else {
-      fs6.rmSync(path9.join(place.folder, CREDENTIALS), { force: true });
+      fs7.rmSync(path10.join(place.folder, CREDENTIALS), { force: true });
     }
   } catch {
   }
@@ -2406,12 +2541,12 @@ function aboutText(a, platform = process.platform) {
   return lines.join(platform === "win32" ? "\r\n" : "\n") + (platform === "win32" ? "\r\n" : "\n");
 }
 function writeAboutFile(a, platform = process.platform) {
-  const file = path10.join(a.configDir, ABOUT_FILE);
+  const file = path11.join(a.configDir, ABOUT_FILE);
   const text2 = aboutText(a, platform);
   try {
-    if (!fs7.statSync(a.configDir).isDirectory()) return false;
-    if (fs7.existsSync(file) && fs7.readFileSync(file, "utf8") === text2) return false;
-    fs7.writeFileSync(file, text2);
+    if (!fs8.statSync(a.configDir).isDirectory()) return false;
+    if (fs8.existsSync(file) && fs8.readFileSync(file, "utf8") === text2) return false;
+    fs8.writeFileSync(file, text2);
     return true;
   } catch {
     return false;
@@ -2428,7 +2563,7 @@ function defaultContainerDir(name) {
   return `~/.ledung-accounts/${name}`;
 }
 function canonicalFolder(folder) {
-  return path11.resolve(folder);
+  return path12.resolve(folder);
 }
 function canonicalContainerFolder(folder) {
   const f = folder.trim().replace(/\/+$/, "");
@@ -2441,14 +2576,14 @@ function sameFolder(a, b, platform = process.platform) {
   return platform === "win32" || platform === "darwin" ? x.toLowerCase() === y.toLowerCase() : x === y;
 }
 function sharedLoginFolders() {
-  return [path11.join(os5.homedir(), ".claude"), ...process.env.CLAUDE_CONFIG_DIR ? [process.env.CLAUDE_CONFIG_DIR] : []];
+  return [path12.join(os5.homedir(), ".claude"), ...process.env.CLAUDE_CONFIG_DIR ? [process.env.CLAUDE_CONFIG_DIR] : []];
 }
 var SHARED_CONTAINER_FOLDERS = ["~/.claude"];
 var AccountStore = class {
   db;
   /** Ledung's own accounts folder: the default login folders. */
   dir;
-  constructor(db, dir = path11.join(userDataDir(), "accounts")) {
+  constructor(db, dir = path12.join(userDataDir(), "accounts")) {
     this.db = db;
     this.dir = dir;
   }
@@ -2461,7 +2596,7 @@ var AccountStore = class {
   }
   /** The default login folder on this computer for an account of this name. */
   defaultFolder(name) {
-    return canonicalFolder(path11.join(this.dir, name));
+    return canonicalFolder(path12.join(this.dir, name));
   }
   /** Adds an account: its login folder is made, empty until someone signs in to it. */
   add(a, whatItIsFor) {
@@ -2584,7 +2719,7 @@ var AccountStore = class {
 };
 function makeFolder(folder) {
   try {
-    fs8.mkdirSync(folder, { recursive: true });
+    fs9.mkdirSync(folder, { recursive: true });
   } catch (e) {
     throw new AccountError(`its sign-in folder ${folder} can't be made (${e.code ?? e.message}).`);
   }
@@ -2709,7 +2844,7 @@ function withoutNotes(raw) {
 }
 var ClaudeAccountSetting = z6.preprocess(withoutNotes, z6.object({
   whatItIsFor: z6.string().trim().max(200).optional(),
-  signInFolderOnThisComputer: z6.string().trim().min(1, "give a folder, or leave the field out for Ledung's own").refine((f) => path12.isAbsolute(f), "give the whole path, such as D:\\Claude sign-ins\\work or /Users/you/claude-signins/work").refine((f) => !sharedLoginFolders().some((s) => sameFolder(s, f)), "that is this computer's own Claude Code folder; an account needs a folder of its own").optional(),
+  signInFolderOnThisComputer: z6.string().trim().min(1, "give a folder, or leave the field out for Ledung's own").refine((f) => path13.isAbsolute(f), "give the whole path, such as D:\\Claude sign-ins\\work or /Users/you/claude-signins/work").refine((f) => !sharedLoginFolders().some((s) => sameFolder(s, f)), "that is this computer's own Claude Code folder; an account needs a folder of its own").optional(),
   signInFolderInContainers: z6.string().trim().min(1, "give a folder, or leave the field out for ~/.ledung-accounts/<name>").refine((f) => canonicalContainerFolder(f) !== null, "starts with ~/ or /, of letters, digits and . _ / + - only").refine((f) => canonicalContainerFolder(f) !== "~/.claude", "that is the container user's own Claude Code folder; an account needs a folder of its own").optional()
 }).strict());
 var ClaudeAccountsSetting = z6.preprocess(withoutNotes, z6.record(z6.string(), ClaudeAccountSetting)).default({}).superRefine((accounts, ctx) => {
@@ -2758,7 +2893,7 @@ var LocalProject = z6.object({
    * Folders outside the project folder where its sessions may also work, such as where its git worktrees
    * go (start_session's cwd, decision of 2026-10-14). None: only the project folder and folders inside it.
    */
-  extraFolders: z6.array(z6.string().min(1).refine((f) => path12.isAbsolute(f), "Give each extra folder as a full path.")).max(20).optional(),
+  extraFolders: z6.array(z6.string().min(1).refine((f) => path13.isAbsolute(f), "Give each extra folder as a full path.")).max(20).optional(),
   model: z6.string().optional(),
   /** Its manager's model; none: the same as its sessions (decision of 2026-10-13). */
   managerModel: z6.string().optional(),
@@ -2875,7 +3010,7 @@ var Config = z6.object({
    * One that is missing or older than the SDK needs is never run: sessions are refused and the page says how to fix it
    * (Martin, 2026-10-27). "bundled" only when set here. Containers run their own.
    */
-  claudeExecutable: z6.string().min(1).refine((v) => v === "installed" || v === "bundled" || path12.isAbsolute(v), 'claudeExecutable is "installed", "bundled" or a full path to Claude Code.').default("installed"),
+  claudeExecutable: z6.string().min(1).refine((v) => v === "installed" || v === "bundled" || path13.isAbsolute(v), 'claudeExecutable is "installed", "bundled" or a full path to Claude Code.').default("installed"),
   /** The shell a "!" command from the message box runs in on Windows (issue #212): Git Bash, as Claude's Bash tool, or PowerShell. */
   windowsShell: z6.enum(["bash", "powershell"]).default("bash"),
   board: BoardSetting,
@@ -2908,9 +3043,9 @@ function boardConfig(config) {
 }
 function configPath(packaged = PACKAGED) {
   const set = envSetting("CONFIG");
-  if (set) return path12.resolve(set);
-  if (packaged) return path12.join(userDataDir(), "ledung.config.json");
-  return path12.join(appDir(), "ledung.config.local.json");
+  if (set) return path13.resolve(set);
+  if (packaged) return path13.join(userDataDir(), "ledung.config.json");
+  return path13.join(appDir(), "ledung.config.local.json");
 }
 function parseConfig(raw) {
   const result = Config.safeParse(raw);
@@ -2949,9 +3084,9 @@ var FIRST_CONFIG = {
   port: DEFAULT_PORT2
 };
 function createDefaultConfig(file = configPath()) {
-  fs9.mkdirSync(path12.dirname(file), { recursive: true });
+  fs10.mkdirSync(path13.dirname(file), { recursive: true });
   try {
-    fs9.writeFileSync(file, `${JSON.stringify(FIRST_CONFIG, null, 2)}
+    fs10.writeFileSync(file, `${JSON.stringify(FIRST_CONFIG, null, 2)}
 `, { flag: "wx" });
   } catch (e) {
     if (e.code === "EEXIST") return false;
@@ -2960,12 +3095,12 @@ function createDefaultConfig(file = configPath()) {
   return true;
 }
 function loadConfig(file = configPath()) {
-  if (!fs9.existsSync(file)) {
+  if (!fs10.existsSync(file)) {
     throw new Error(`No config file at ${file}. Copy ledung.config.example.json to ledung.config.local.json and fill it in.`);
   }
   let raw;
   try {
-    raw = JSON.parse(fs9.readFileSync(file, "utf8"));
+    raw = JSON.parse(fs10.readFileSync(file, "utf8"));
   } catch (e) {
     throw new Error(`The config file ${file} is not valid JSON: ${e.message}`);
   }
@@ -3029,31 +3164,6 @@ function configProblem(text2) {
 // src/config-watch.ts
 import fs11 from "node:fs";
 import path14 from "node:path";
-
-// src/platform/exercised.ts
-import fs10 from "node:fs";
-import path13 from "node:path";
-var EXERCISED_FILE = "exercised.log";
-var MAX_BYTES = 256 * 1024;
-var DEFAULT_TARGET = {
-  console: !PACKAGED,
-  file: () => path13.join(userDataDir(), EXERCISED_FILE)
-};
-function exercisedLine(line, target = DEFAULT_TARGET) {
-  if (target.console) console.log(line);
-  try {
-    const file = target.file();
-    if (!file) return;
-    const size = fs10.statSync(file, { throwIfNoEntry: false })?.size ?? 0;
-    const text2 = `${(/* @__PURE__ */ new Date()).toISOString()} ${line}
-`;
-    if (size > MAX_BYTES) fs10.writeFileSync(file, text2);
-    else fs10.appendFileSync(file, text2);
-  } catch {
-  }
-}
-
-// src/config-watch.ts
 var exercised358 = false;
 var ConfigWatcher = class {
   opts;
@@ -3224,344 +3334,81 @@ function lanNames(setting) {
 
 // src/platform/shortcuts.ts
 import { execFile as execFile4 } from "node:child_process";
-import fs12 from "node:fs";
+import fs13 from "node:fs";
 import os7 from "node:os";
+import path16 from "node:path";
+
+// src/server/security.ts
+import crypto3 from "node:crypto";
+import fs12 from "node:fs";
 import path15 from "node:path";
 
-// src/platform/icons.ts
-var PNG = Buffer.from([137, 80, 78, 71, 13, 10, 26, 10]);
-function pngSize(png) {
-  if (png.length < 24 || !png.subarray(0, 8).equals(PNG)) throw new Error("Not a PNG image.");
-  return { width: png.readUInt32BE(16), height: png.readUInt32BE(20) };
-}
-function icoFromPng(png) {
-  const { width, height } = pngSize(png);
-  if (width > 256 || height > 256) throw new Error(`An .ico image is at most 256 pixels, not ${width}\xD7${height}.`);
-  const head = Buffer.alloc(6 + 16);
-  head.writeUInt16LE(0, 0);
-  head.writeUInt16LE(1, 2);
-  head.writeUInt16LE(1, 4);
-  head.writeUInt8(width % 256, 6);
-  head.writeUInt8(height % 256, 7);
-  head.writeUInt8(0, 8);
-  head.writeUInt8(0, 9);
-  head.writeUInt16LE(1, 10);
-  head.writeUInt16LE(32, 12);
-  head.writeUInt32LE(png.length, 14);
-  head.writeUInt32LE(head.length, 18);
-  return Buffer.concat([head, png]);
-}
-var ICNS_TYPES = { 256: "ic08", 512: "ic09", 1024: "ic10" };
-function icnsFromPngs(pngs) {
-  const parts2 = pngs.map((png) => {
-    const { width, height } = pngSize(png);
-    const type = width === height ? ICNS_TYPES[width] : void 0;
-    if (!type) throw new Error(`An .icns here takes square images of 256, 512 or 1024 pixels, not ${width}\xD7${height}.`);
-    const head2 = Buffer.alloc(8);
-    head2.write(type, 0, "latin1");
-    head2.writeUInt32BE(8 + png.length, 4);
-    return Buffer.concat([head2, png]);
-  });
-  const head = Buffer.alloc(8);
-  head.write("icns", 0, "latin1");
-  head.writeUInt32BE(8 + parts2.reduce((n, p) => n + p.length, 0), 4);
-  return Buffer.concat([head, ...parts2]);
+// src/platform/running.ts
+import crypto from "node:crypto";
+var NONCE = /^[0-9a-f]{32}$/;
+function runningProof(token, nonce) {
+  return crypto.createHmac("sha256", token).update(`ledung-running:${nonce}`).digest("hex");
 }
 
-// src/platform/shortcuts.ts
-var ASKED_KEY = "shortcuts-asked";
-var BUNDLE_ID = "org.ledung.launcher";
-var LABELS = { desktop: "Desktop", "start-menu": "Start menu", applications: "Applications" };
-var ENV_FILE = "shortcut.env";
-function launchTarget(dataDir = userDataDir(), app = appDir(), packaged = PACKAGED) {
-  const releaseLauncher = path15.join(dataDir, "launcher.mjs");
-  const fromRelease = !path15.relative(path15.join(dataDir, "app"), app).startsWith("..") && fs12.existsSync(releaseLauncher);
-  const script = fromRelease ? releaseLauncher : path15.join(app, packaged ? path15.join("dist", "cli.js") : path15.join("src", "cli.ts"));
-  const env = {};
-  for (const name of ["DATA_DIR", "CONFIG"]) {
-    const value = envSetting(name);
-    if (value) env[`LEDUNG_${name}`] = path15.resolve(value);
-  }
-  return Object.keys(env).length ? { node: process.execPath, script, env } : { node: process.execPath, script };
-}
-function envFileText(env) {
-  return Object.entries(env).map(([name, value]) => {
-    if (/[\r\n]/.test(value) || value.includes("'") && value.includes("`")) throw new Error(`${name} can't be passed to a shortcut: ${value}`);
-    return value.includes("'") ? `${name}=\`${value}\`
-` : `${name}='${value}'
-`;
-  }).join("");
-}
-function iconFiles(app = appDir()) {
-  const built = path15.join(app, "web", "dist");
-  const dir = fs12.existsSync(path15.join(built, "icon-256.png")) ? built : path15.join(app, "web", "public");
-  return { png256: path15.join(dir, "icon-256.png"), png512: path15.join(dir, "icon-512.png") };
-}
-function powershell(script, env) {
-  return new Promise((resolve, reject) => {
-    execFile4("powershell.exe", ["-NoProfile", "-NonInteractive", "-Command", `[Console]::OutputEncoding = [Text.Encoding]::UTF8; ${script}`], { env: { ...process.env, ...env }, windowsHide: true, timeout: 3e4 }, (error, stdout, stderr) => {
-      if (error) reject(new Error(stderr.trim() || error.message));
-      else resolve(stdout);
-    });
-  });
-}
-async function windowsFolders() {
-  const out = await powershell("@{ desktop = [Environment]::GetFolderPath('Desktop'); programs = [Environment]::GetFolderPath('Programs') } | ConvertTo-Json -Compress", {});
-  const { desktop, programs } = JSON.parse(out);
-  return { desktop, "start-menu": programs };
-}
-function macFolders() {
-  try {
-    fs12.accessSync("/Applications", fs12.constants.W_OK);
-    return { applications: "/Applications" };
-  } catch {
-    return { applications: path15.join(os7.homedir(), "Applications") };
-  }
+// src/server/devices.ts
+import crypto2 from "node:crypto";
+var DEVICE_COOKIE = "__Host-ledung_device";
+var PAIR_CODE_MS = 10 * 60 * 1e3;
+var PAIR_CODE_CHARS = "abcdefghijklmnopqrstuvwxyz0123456789";
+var PAIR_CODE_LENGTH = 20;
+var PASSKEY_WINDOW_MS = 10 * 60 * 1e3;
+var TOUCH_MS = 60 * 1e3;
+var COMPUTER_IDLE_MS = 14 * 24 * 60 * 60 * 1e3;
+var COOKIE_RENEW_MS = 24 * 60 * 60 * 1e3;
+var OLD_COOKIE_GRACE_MS = 60 * 1e3;
+var hash = (secret) => crypto2.createHash("sha256").update(secret).digest("hex");
+function toDevice(r) {
+  return {
+    id: r.id,
+    name: r.name,
+    createdAt: Number(r.created_at),
+    lastUsedAt: r.last_used_at == null ? null : Number(r.last_used_at),
+    credentialId: r.credential_id ?? null,
+    publicKey: r.public_key ? new Uint8Array(r.public_key) : null,
+    counter: Number(r.counter ?? 0),
+    passkeyAt: r.passkey_at == null ? null : Number(r.passkey_at),
+    kind: r.kind === "computer" ? "computer" : "phone",
+    partitioned: !!r.partitioned,
+    loggedOnAt: r.logged_on_at == null ? null : Number(r.logged_on_at),
+    cookieAt: r.cookie_at == null ? null : Number(r.cookie_at),
+    pairedVia: r.paired_via ?? null
+  };
 }
-function ownDataFolders(platform) {
-  const root = path15.join(userDataDir(), "shortcuts");
-  return platform === "win32" ? { desktop: path15.join(root, "Desktop"), "start-menu": path15.join(root, "Start menu") } : { applications: path15.join(root, "Applications") };
+var deviceView = (d) => ({ id: d.id, name: d.name, createdAt: d.createdAt, lastUsedAt: d.lastUsedAt, passkey: !!d.credentialId, passkeyAt: d.passkeyAt, kind: d.kind, pairedVia: d.pairedVia });
+function deviceName(raw) {
+  const name = typeof raw === "string" ? raw.replace(/[\u0000-\u001f\u007f]/g, " ").trim().slice(0, 60) : "";
+  return name || "Phone";
 }
-var shQuote = (s) => `'${s.replace(/'/g, `'\\''`)}'`;
-var xmlEscape = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
-var PLIST = (version) => `<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-  <key>CFBundleExecutable</key><string>Ledung</string>
-  <key>CFBundleIconFile</key><string>Ledung</string>
-  <key>CFBundleIdentifier</key><string>${BUNDLE_ID}</string>
-  <key>CFBundleName</key><string>Ledung</string>
-  <key>CFBundleDisplayName</key><string>Ledung</string>
-  <key>CFBundlePackageType</key><string>APPL</string>
-  <key>CFBundleShortVersionString</key><string>${xmlEscape(version)}</string>
-  <key>LSMinimumSystemVersion</key><string>10.13</string>
-</dict>
-</plist>
-`;
-var Shortcuts = class {
-  opts;
-  platform;
-  folderCache = null;
-  constructor(opts) {
-    this.opts = opts;
-    this.platform = opts.platform ?? process.platform;
+var Devices = class {
+  db;
+  now;
+  code = null;
+  constructor(db, now = Date.now) {
+    this.db = db;
+    this.now = now;
   }
-  kind() {
-    return this.platform === "win32" ? "windows" : this.platform === "darwin" ? "mac" : "other";
+  /**
+   * A new pairing code; any earlier one stops working. Letters and digits only, 20 of them (103 bits, plenty for
+   * one code that lives 10 minutes): the QR code carries the link in capitals, in its denser alphanumeric mode,
+   * so the code is matched in either case (#194).
+   */
+  newPairCode(kind = "phone", via = null) {
+    const code = Array.from({ length: PAIR_CODE_LENGTH }, () => PAIR_CODE_CHARS[crypto2.randomInt(PAIR_CODE_CHARS.length)]).join("");
+    const expiresAt = this.now() + PAIR_CODE_MS;
+    this.code = { value: Buffer.from(code), expiresAt, kind, via: via?.name ?? null, viaLink: via?.link ?? null };
+    return { code, expiresAt, kind };
   }
-  folders() {
-    this.folderCache ??= this.opts.folders?.() ?? (envSetting("DATA_DIR") ? Promise.resolve(ownDataFolders(this.platform)) : this.platform === "win32" ? windowsFolders() : Promise.resolve(macFolders()));
-    this.folderCache.catch(() => this.folderCache = null);
-    return this.folderCache;
-  }
-  async places() {
-    const kind = this.kind();
-    if (kind === "other") return [];
-    const folders = await this.folders();
-    const ids = kind === "windows" ? ["desktop", "start-menu"] : ["applications"];
-    return ids.flatMap((id) => {
-      const folder = folders[id];
-      if (!folder) return [];
-      const file = path15.join(folder, kind === "windows" ? "Ledung.lnk" : "Ledung.app");
-      return [{ id, label: LABELS[id], file, present: kind === "windows" ? fs12.existsSync(file) : isOurApp(file) }];
-    });
-  }
-  async view() {
-    const kind = this.kind();
-    const asked = this.opts.meta.get(ASKED_KEY) !== null;
-    if (kind === "other") {
-      return { kind, available: false, reason: "Shortcuts are made on Windows and macOS. Here, start Ledung with ledung.sh or the ledung command.", asked, places: [] };
-    }
-    return { kind, available: true, reason: null, asked, places: await this.places() };
-  }
-  /** Add or Remove, or No to the first-run question. Add and No answer it for good; Remove leaves it answered. */
-  async act(action) {
-    if (action === "decline") {
-      this.opts.meta.set(ASKED_KEY, "declined");
-      return this.view();
-    }
-    if (this.kind() === "other") throw new Error("Shortcuts are made on Windows and macOS.");
-    const places = await this.places();
-    if (action === "add") {
-      this.writeEnvFile();
-      if (this.kind() === "windows") await this.addWindows(places.filter((p) => !p.present));
-      else {
-        for (const p of places.filter((p2) => !p2.present)) {
-          if (fs12.existsSync(p.file)) throw new Error(`There is already a Ledung.app in ${path15.dirname(p.file)} that Ledung didn't make. Rename or remove it, then add the shortcut again.`);
-          this.addMac(p.file);
-        }
-      }
-      this.opts.meta.set(ASKED_KEY, "added");
-    } else {
-      for (const p of places.filter((p2) => p2.present)) this.remove(p.file);
-      if (this.kind() === "windows") fs12.rmSync(this.icoFile(), { force: true });
-      fs12.rmSync(this.envFile(), { force: true });
-    }
-    return this.view();
-  }
-  icoFile() {
-    return path15.join(this.opts.iconDir, "Ledung.ico");
-  }
-  envFile() {
-    return path15.join(this.opts.iconDir, ENV_FILE);
-  }
-  /** The env file for a launch that carries settings, else none; the shortcuts then pass it with --env-file. */
-  writeEnvFile() {
-    const env = this.opts.launch.env ?? {};
-    if (!Object.keys(env).length) return void fs12.rmSync(this.envFile(), { force: true });
-    fs12.mkdirSync(this.opts.iconDir, { recursive: true });
-    fs12.writeFileSync(this.envFile(), envFileText(env));
-  }
-  /** Node's own options for a shortcut: --env-file when the launch carries settings. */
-  nodeOptions() {
-    return Object.keys(this.opts.launch.env ?? {}).length ? [`--env-file=${this.envFile()}`] : [];
-  }
-  async addWindows(places) {
-    if (!places.length) return;
-    fs12.mkdirSync(this.opts.iconDir, { recursive: true });
-    fs12.writeFileSync(this.icoFile(), icoFromPng(fs12.readFileSync(this.opts.icons.png256)));
-    for (const p of places) fs12.mkdirSync(path15.dirname(p.file), { recursive: true });
-    const { node, script } = this.opts.launch;
-    const args = [...this.nodeOptions(), script].map((a) => `"${a}"`).join(" ");
-    const spec = { files: places.map((p) => p.file), target: node, arguments: args, workdir: os7.homedir(), icon: this.icoFile(), description: "Open Ledung, and start it if it is not running" };
-    await powershell([
-      "$spec = $env:SHORTCUT_SPEC | ConvertFrom-Json",
-      "$shell = New-Object -ComObject WScript.Shell",
-      "foreach ($file in $spec.files) {",
-      "  $s = $shell.CreateShortcut($file)",
-      "  $s.TargetPath = $spec.target; $s.Arguments = $spec.arguments; $s.WorkingDirectory = $spec.workdir",
-      '  $s.IconLocation = "$($spec.icon),0"; $s.WindowStyle = 7; $s.Description = $spec.description',
-      "  $s.Save()",
-      "}"
-    ].join("\n"), { SHORTCUT_SPEC: JSON.stringify(spec) });
-  }
-  /**
-   * Ledung.app: a script that opens a running Ledung's page (--open-only), or else opens Terminal on start.command,
-   * which runs the launcher there, so Ledung has a window to stop it from. Made by Ledung on this computer, so it
-   * carries no quarantine and Gatekeeper lets it open.
-   */
-  addMac(app) {
-    const { node, script } = this.opts.launch;
-    const contents = path15.join(app, "Contents");
-    fs12.mkdirSync(path15.join(contents, "MacOS"), { recursive: true });
-    fs12.mkdirSync(path15.join(contents, "Resources"), { recursive: true });
-    let version = "1";
-    try {
-      version = String(JSON.parse(fs12.readFileSync(path15.join(appDir(), "package.json"), "utf8")).version ?? "1");
-    } catch {
-    }
-    fs12.writeFileSync(path15.join(contents, "Info.plist"), PLIST(version));
-    fs12.writeFileSync(path15.join(contents, "Resources", "Ledung.icns"), icnsFromPngs([fs12.readFileSync(this.opts.icons.png256), fs12.readFileSync(this.opts.icons.png512)]));
-    const run8 = [...this.nodeOptions(), script].map(shQuote).join(" ");
-    fs12.writeFileSync(path15.join(contents, "Resources", "start.command"), [
-      "#!/bin/sh",
-      "# Starts Ledung in this Terminal window; closing it stops Ledung. Made by Ledung's Settings (issue #415).",
-      `NODE=${shQuote(node)}`,
-      '[ -x "$NODE" ] || NODE=node',
-      `exec "$NODE" ${run8}`,
-      ""
-    ].join("\n"), { mode: 493 });
-    fs12.writeFileSync(path15.join(contents, "MacOS", "Ledung"), [
-      "#!/bin/sh",
-      "# Opens a running Ledung's page, or starts Ledung in a Terminal window. Made by Ledung's Settings (issue #415).",
-      `NODE=${shQuote(node)}`,
-      `[ -x "$NODE" ] || NODE=$("\${SHELL:-/bin/zsh}" -lic 'command -v node' 2>/dev/null | tail -n 1)`,
-      `[ -x "$NODE" ] || { osascript -e 'display alert "Ledung cannot find Node.js" message "Install Node.js 24, or add the shortcut again in Settings in Ledung."'; exit 1; }`,
-      `"$NODE" ${run8} --open-only && exit 0`,
-      'exec open -a Terminal "$(dirname "$0")/../Resources/start.command"',
-      ""
-    ].join("\n"), { mode: 493 });
-  }
-  /** Takes away Ledung.lnk, or a Ledung.app that is Ledung's own (its bundle id), never anything else. */
-  remove(file) {
-    if (file.endsWith(".lnk")) {
-      fs12.rmSync(file, { force: true });
-      return;
-    }
-    if (!isOurApp(file)) throw new Error(`${file} is not the Ledung.app that Ledung made; remove it yourself if you want it gone.`);
-    fs12.rmSync(file, { recursive: true, force: true });
-  }
-};
-function isOurApp(app) {
-  try {
-    return fs12.readFileSync(path15.join(app, "Contents", "Info.plist"), "utf8").includes(`<string>${BUNDLE_ID}</string>`);
-  } catch {
-    return false;
-  }
-}
-
-// src/server/security.ts
-import crypto3 from "node:crypto";
-import fs13 from "node:fs";
-import path16 from "node:path";
-
-// src/platform/running.ts
-import crypto from "node:crypto";
-var NONCE = /^[0-9a-f]{32}$/;
-function runningProof(token, nonce) {
-  return crypto.createHmac("sha256", token).update(`ledung-running:${nonce}`).digest("hex");
-}
-
-// src/server/devices.ts
-import crypto2 from "node:crypto";
-var DEVICE_COOKIE = "__Host-ledung_device";
-var PAIR_CODE_MS = 10 * 60 * 1e3;
-var PAIR_CODE_CHARS = "abcdefghijklmnopqrstuvwxyz0123456789";
-var PAIR_CODE_LENGTH = 20;
-var PASSKEY_WINDOW_MS = 10 * 60 * 1e3;
-var TOUCH_MS = 60 * 1e3;
-var COMPUTER_IDLE_MS = 14 * 24 * 60 * 60 * 1e3;
-var COOKIE_RENEW_MS = 24 * 60 * 60 * 1e3;
-var OLD_COOKIE_GRACE_MS = 60 * 1e3;
-var hash = (secret) => crypto2.createHash("sha256").update(secret).digest("hex");
-function toDevice(r) {
-  return {
-    id: r.id,
-    name: r.name,
-    createdAt: Number(r.created_at),
-    lastUsedAt: r.last_used_at == null ? null : Number(r.last_used_at),
-    credentialId: r.credential_id ?? null,
-    publicKey: r.public_key ? new Uint8Array(r.public_key) : null,
-    counter: Number(r.counter ?? 0),
-    passkeyAt: r.passkey_at == null ? null : Number(r.passkey_at),
-    kind: r.kind === "computer" ? "computer" : "phone",
-    partitioned: !!r.partitioned,
-    loggedOnAt: r.logged_on_at == null ? null : Number(r.logged_on_at),
-    cookieAt: r.cookie_at == null ? null : Number(r.cookie_at),
-    pairedVia: r.paired_via ?? null
-  };
-}
-var deviceView = (d) => ({ id: d.id, name: d.name, createdAt: d.createdAt, lastUsedAt: d.lastUsedAt, passkey: !!d.credentialId, passkeyAt: d.passkeyAt, kind: d.kind, pairedVia: d.pairedVia });
-function deviceName(raw) {
-  const name = typeof raw === "string" ? raw.replace(/[\u0000-\u001f\u007f]/g, " ").trim().slice(0, 60) : "";
-  return name || "Phone";
-}
-var Devices = class {
-  db;
-  now;
-  code = null;
-  constructor(db, now = Date.now) {
-    this.db = db;
-    this.now = now;
-  }
-  /**
-   * A new pairing code; any earlier one stops working. Letters and digits only, 20 of them (103 bits, plenty for
-   * one code that lives 10 minutes): the QR code carries the link in capitals, in its denser alphanumeric mode,
-   * so the code is matched in either case (#194).
-   */
-  newPairCode(kind = "phone", via = null) {
-    const code = Array.from({ length: PAIR_CODE_LENGTH }, () => PAIR_CODE_CHARS[crypto2.randomInt(PAIR_CODE_CHARS.length)]).join("");
-    const expiresAt = this.now() + PAIR_CODE_MS;
-    this.code = { value: Buffer.from(code), expiresAt, kind, via: via?.name ?? null, viaLink: via?.link ?? null };
-    return { code, expiresAt, kind };
-  }
-  /**
-   * Unlinking stops what the link gave (review 275, Important 1): an open code a linked computer asked for, and that
-   * computer is no longer linked, is closed.
-   */
-  closeCodeUnlessLinked(links) {
-    if (this.code?.viaLink && !links.has(this.code.viaLink)) this.code = null;
+  /**
+   * Unlinking stops what the link gave (review 275, Important 1): an open code a linked computer asked for, and that
+   * computer is no longer linked, is closed.
+   */
+  closeCodeUnlessLinked(links) {
+    if (this.code?.viaLink && !links.has(this.code.viaLink)) this.code = null;
   }
   /** The linked computer the open code was made for (issue #273), while `code` is that code; null otherwise. */
   codeVia(code) {
@@ -3693,143 +3540,563 @@ var Devices = class {
 
 // src/server/security.ts
 var COOKIE_NAME = "ledung_auth";
-function loadOrCreateToken(file = path16.join(userDataDir(), "auth-token")) {
-  if (fs13.existsSync(file)) {
-    const token2 = fs13.readFileSync(file, "utf8").trim();
+function loadOrCreateToken(file = path15.join(userDataDir(), "auth-token")) {
+  if (fs12.existsSync(file)) {
+    const token2 = fs12.readFileSync(file, "utf8").trim();
     if (/^[0-9a-f]{64}$/.test(token2)) return token2;
   }
-  const token = crypto3.randomBytes(32).toString("hex");
-  fs13.writeFileSync(file, token, { mode: 384 });
-  return token;
-}
-var Guard = class {
-  token;
-  port;
-  lanNames;
-  hosts = /* @__PURE__ */ new Set();
-  origins = /* @__PURE__ */ new Set();
-  lanHosts = /* @__PURE__ */ new Set();
-  lanOpen;
-  remote = null;
-  /** Sockets that came through the relay tunnel; see isPublic. */
-  tunnel = /* @__PURE__ */ new WeakSet();
-  /**
-   * `lanNames`: extra names Ledung answers to on the local network (empty when it isn't opened to it).
-   * `lanOpen`: requests through those names need no sign-in.
-   * `remote`: the public name and how a device cookie is checked; null: no public name.
-   */
-  constructor(token, port, lanNames2 = [], lanOpen = false, remote = null) {
-    this.token = Buffer.from(token);
-    this.port = port;
-    this.lanNames = lanNames2.map((n) => n.toLowerCase());
-    this.lanOpen = lanOpen;
-    this.setRemote(remote);
+  const token = crypto3.randomBytes(32).toString("hex");
+  fs12.writeFileSync(file, token, { mode: 384 });
+  return token;
+}
+var Guard = class {
+  token;
+  port;
+  lanNames;
+  hosts = /* @__PURE__ */ new Set();
+  origins = /* @__PURE__ */ new Set();
+  lanHosts = /* @__PURE__ */ new Set();
+  lanOpen;
+  remote = null;
+  /** Sockets that came through the relay tunnel; see isPublic. */
+  tunnel = /* @__PURE__ */ new WeakSet();
+  /**
+   * `lanNames`: extra names Ledung answers to on the local network (empty when it isn't opened to it).
+   * `lanOpen`: requests through those names need no sign-in.
+   * `remote`: the public name and how a device cookie is checked; null: no public name.
+   */
+  constructor(token, port, lanNames2 = [], lanOpen = false, remote = null) {
+    this.token = Buffer.from(token);
+    this.port = port;
+    this.lanNames = lanNames2.map((n) => n.toLowerCase());
+    this.lanOpen = lanOpen;
+    this.setRemote(remote);
+  }
+  /** The public name changed: joining or leaving a relay from Settings (issue #237), with no restart. */
+  setRemote(remote) {
+    this.remote = remote;
+    const lan = this.lanNames.filter((n) => n !== remote?.publicName);
+    const names = ["127.0.0.1", "localhost", ...lan];
+    this.hosts = new Set(names.map((n) => `${n}:${this.port}`));
+    this.origins = new Set(names.map((n) => `http://${n}:${this.port}`));
+    this.lanHosts = new Set(lan.map((n) => `${n}:${this.port}`));
+  }
+  /**
+   * The request came in through the public name: exactly the name, as browsers send it for HTTPS on 443.
+   * No port and no other spelling, so a lookalike or "<name>:4317" is an unknown host.
+   */
+  isPublic(req) {
+    if (this.tunnelled(req)) return true;
+    return !!this.remote && (req.headers.host ?? "").toLowerCase() === this.remote.publicName;
+  }
+  /** A connection the relay tunnel handed to the server (LedungServer.tunnelConnection), never a local one. */
+  markTunnel(socket) {
+    this.tunnel.add(socket);
+  }
+  tunnelled(req) {
+    return this.tunnel.has(req.socket);
+  }
+  /** The live device signed in through the public name, or null (always null for local requests). */
+  deviceOf(req) {
+    if (!this.remote || !this.isPublic(req)) return null;
+    for (const cookie of readCookies(req, DEVICE_COOKIE)) {
+      const device = this.remote.device(cookie);
+      if (device) return device;
+    }
+    return null;
+  }
+  /** Signed in, or come in through a trusted network address; through the public name, a live paired device only. */
+  mayUse(req) {
+    if (this.isPublic(req)) return this.deviceOf(req) !== null;
+    return this.signedIn(req) || this.lanOpen && this.lanHosts.has((req.headers.host ?? "").toLowerCase());
+  }
+  hostAllowed(req) {
+    if (this.isPublic(req)) return !!this.remote;
+    return this.hosts.has((req.headers.host ?? "").toLowerCase());
+  }
+  /**
+   * True only when the request says it comes from Ledung's own page, on the kind of name it was sent to:
+   * through the public name only https://<name>; locally never that one.
+   */
+  originAllowed(req) {
+    const origin = req.headers.origin;
+    if (typeof origin !== "string") return false;
+    if (this.isPublic(req)) return !!this.remote && origin.toLowerCase() === `https://${this.remote.publicName}`;
+    return this.origins.has(origin.toLowerCase());
+  }
+  tokenMatches(candidate) {
+    if (!candidate) return false;
+    const given = Buffer.from(candidate);
+    return given.length === this.token.length && crypto3.timingSafeEqual(given, this.token);
+  }
+  /** The launchers' proof that this Ledung holds the token, for their nonce (src/platform/running.ts). */
+  runningProof(nonce) {
+    return runningProof(this.token.toString(), nonce);
+  }
+  /** The install's token cookie; never counts through the public name. */
+  signedIn(req) {
+    return !this.isPublic(req) && this.tokenMatches(readCookie(req, COOKIE_NAME));
+  }
+  cookieHeader() {
+    return `${COOKIE_NAME}=${this.token.toString()}; HttpOnly; SameSite=Strict; Path=/; Max-Age=31536000`;
+  }
+};
+function deviceCookieHeader(value, framed = false) {
+  return `${DEVICE_COOKIE}=${value}; Secure; HttpOnly; ${framed ? "SameSite=None; Partitioned" : "SameSite=Strict"}; Path=/; Max-Age=31536000`;
+}
+function readCookie(req, name) {
+  return readCookies(req, name)[0] ?? null;
+}
+function readCookies(req, name) {
+  const found = [];
+  for (const part of (req.headers.cookie ?? "").split(";")) {
+    const [k, ...v] = part.trim().split("=");
+    if (k === name) found.push(v.join("="));
+  }
+  return found;
+}
+function securityHeaders(port, lanNames2 = [], imageHosts = [], publicName, frames = {}) {
+  const ancestors = frames.ancestors ?? [];
+  const sources = frames.sources ?? [];
+  const live = [...["127.0.0.1", "localhost", ...lanNames2].map((n) => `ws://${n}:${port}`), ...publicName ? [`wss://${publicName}`] : []];
+  return {
+    "Content-Security-Policy": [
+      "default-src 'self'",
+      `connect-src 'self' ${live.join(" ")}`,
+      // Extra hosts only for the board's people list (their pictures, decision 5 of the message board).
+      `img-src ${["'self'", "data:", ...imageHosts].join(" ")}`,
+      "style-src 'self' 'unsafe-inline'",
+      `frame-ancestors ${ancestors.length ? ancestors.join(" ") : "'none'"}`,
+      ...sources.length ? [`frame-src 'self' ${sources.join(" ")}`] : [],
+      "base-uri 'none'",
+      "form-action 'self'"
+    ].join("; "),
+    // Older browsers know only this header; it can't list pages, so it goes only when some may frame this one.
+    ...ancestors.length ? {} : { "X-Frame-Options": "DENY" },
+    "X-Content-Type-Options": "nosniff",
+    "Referrer-Policy": "no-referrer",
+    "Cache-Control": "no-store"
+  };
+}
+
+// src/platform/background.ts
+var LOG_FILE = "ledung.log";
+var MAX_LOG_BYTES = 10 * 1024 * 1024;
+
+// src/platform/icons.ts
+var PNG = Buffer.from([137, 80, 78, 71, 13, 10, 26, 10]);
+function pngSize(png) {
+  if (png.length < 24 || !png.subarray(0, 8).equals(PNG)) throw new Error("Not a PNG image.");
+  return { width: png.readUInt32BE(16), height: png.readUInt32BE(20) };
+}
+function icoFromPng(png) {
+  const { width, height } = pngSize(png);
+  if (width > 256 || height > 256) throw new Error(`An .ico image is at most 256 pixels, not ${width}\xD7${height}.`);
+  const head = Buffer.alloc(6 + 16);
+  head.writeUInt16LE(0, 0);
+  head.writeUInt16LE(1, 2);
+  head.writeUInt16LE(1, 4);
+  head.writeUInt8(width % 256, 6);
+  head.writeUInt8(height % 256, 7);
+  head.writeUInt8(0, 8);
+  head.writeUInt8(0, 9);
+  head.writeUInt16LE(1, 10);
+  head.writeUInt16LE(32, 12);
+  head.writeUInt32LE(png.length, 14);
+  head.writeUInt32LE(head.length, 18);
+  return Buffer.concat([head, png]);
+}
+var ICNS_TYPES = { 256: "ic08", 512: "ic09", 1024: "ic10" };
+function icnsFromPngs(pngs) {
+  const parts2 = pngs.map((png) => {
+    const { width, height } = pngSize(png);
+    const type = width === height ? ICNS_TYPES[width] : void 0;
+    if (!type) throw new Error(`An .icns here takes square images of 256, 512 or 1024 pixels, not ${width}\xD7${height}.`);
+    const head2 = Buffer.alloc(8);
+    head2.write(type, 0, "latin1");
+    head2.writeUInt32BE(8 + png.length, 4);
+    return Buffer.concat([head2, png]);
+  });
+  const head = Buffer.alloc(8);
+  head.write("icns", 0, "latin1");
+  head.writeUInt32BE(8 + parts2.reduce((n, p) => n + p.length, 0), 4);
+  return Buffer.concat([head, ...parts2]);
+}
+
+// src/platform/shortcuts.ts
+var ASKED_KEY = "shortcuts-asked";
+var BUNDLE_ID = "org.ledung.launcher";
+var AGENT_LABEL = "org.ledung.signin";
+var STARTER_FILE = "Ledung-start.js";
+var LABELS = { desktop: "Desktop", "start-menu": "Start menu", applications: "Applications" };
+var ENV_FILE = "shortcut.env";
+var LOG_FILE_SETTING = "LEDUNG_LOG_FILE";
+function launchTarget(dataDir = userDataDir(), app = appDir(), packaged = PACKAGED) {
+  const releaseLauncher = path16.join(dataDir, "launcher.mjs");
+  const fromRelease = !path16.relative(path16.join(dataDir, "app"), app).startsWith("..") && fs13.existsSync(releaseLauncher);
+  const script = fromRelease ? releaseLauncher : path16.join(app, packaged ? path16.join("dist", "cli.js") : path16.join("src", "cli.ts"));
+  const env = {};
+  for (const name of ["DATA_DIR", "CONFIG"]) {
+    const value = envSetting(name);
+    if (value) env[`LEDUNG_${name}`] = path16.resolve(value);
+  }
+  return Object.keys(env).length ? { node: process.execPath, script, env } : { node: process.execPath, script };
+}
+function startsInBackground(launch) {
+  return path16.basename(launch.script) !== "launcher.mjs";
+}
+function envFileText(env) {
+  return Object.entries(env).map(([name, value]) => {
+    if (/[\r\n]/.test(value) || value.includes("'") && value.includes("`")) throw new Error(`${name} can't be passed to a shortcut: ${value}`);
+    return value.includes("'") ? `${name}=\`${value}\`
+` : `${name}='${value}'
+`;
+  }).join("");
+}
+function starterText(head, tail2) {
+  const literal = (s) => JSON.stringify(s).replace(/[^\x20-\x7e]/g, (c) => `\\u${c.charCodeAt(0).toString(16).padStart(4, "0")}`);
+  return [
+    "// Starts Ledung with no window. Made by Ledung's Settings (issue #456).",
+    "var shell = new ActiveXObject('WScript.Shell');",
+    "var extra = '';",
+    `for (var i = 0; i < WScript.Arguments.length; i++) extra += ' "' + WScript.Arguments(i) + '"';`,
+    `shell.Run(${literal(head)} + extra + ${literal(tail2)}, 0, false);`,
+    ""
+  ].join("\r\n");
+}
+function iconFiles(app = appDir()) {
+  const built = path16.join(app, "web", "dist");
+  const dir = fs13.existsSync(path16.join(built, "icon-256.png")) ? built : path16.join(app, "web", "public");
+  return { png256: path16.join(dir, "icon-256.png"), png512: path16.join(dir, "icon-512.png") };
+}
+function powershell(script, env) {
+  return new Promise((resolve, reject) => {
+    execFile4("powershell.exe", ["-NoProfile", "-NonInteractive", "-Command", `[Console]::OutputEncoding = [Text.Encoding]::UTF8; ${script}`], { env: { ...process.env, ...env }, windowsHide: true, timeout: 3e4 }, (error, stdout, stderr) => {
+      if (error) reject(new Error(stderr.trim() || error.message));
+      else resolve(stdout);
+    });
+  });
+}
+async function windowsFolders() {
+  const out = await powershell("@{ desktop = [Environment]::GetFolderPath('Desktop'); programs = [Environment]::GetFolderPath('Programs'); startup = [Environment]::GetFolderPath('Startup') } | ConvertTo-Json -Compress", {});
+  const { desktop, programs, startup } = JSON.parse(out);
+  return { desktop, "start-menu": programs, startup };
+}
+function macFolders() {
+  const startup = path16.join(os7.homedir(), "Library", "LaunchAgents");
+  try {
+    fs13.accessSync("/Applications", fs13.constants.W_OK);
+    return { applications: "/Applications", startup };
+  } catch {
+    return { applications: path16.join(os7.homedir(), "Applications"), startup };
+  }
+}
+function linuxFolders() {
+  return { startup: path16.join(process.env.XDG_CONFIG_HOME ?? path16.join(os7.homedir(), ".config"), "autostart") };
+}
+function ownDataFolders(platform) {
+  const root = path16.join(userDataDir(), "shortcuts");
+  return platform === "win32" ? { desktop: path16.join(root, "Desktop"), "start-menu": path16.join(root, "Start menu"), startup: path16.join(root, "Startup") } : platform === "darwin" ? { applications: path16.join(root, "Applications"), startup: path16.join(root, "LaunchAgents") } : { startup: path16.join(root, "autostart") };
+}
+var shQuote = (s) => `'${s.replace(/'/g, `'\\''`)}'`;
+var winQuote = (s) => `"${s}"`;
+var desktopArg = (s) => `"${s.replace(/(["`$\\])/g, "\\$1")}"`.replace(/\\/g, "\\\\").replace(/%/g, "%%");
+var xmlEscape = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+var PLIST = (version) => `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>CFBundleExecutable</key><string>Ledung</string>
+  <key>CFBundleIconFile</key><string>Ledung</string>
+  <key>CFBundleIdentifier</key><string>${BUNDLE_ID}</string>
+  <key>CFBundleName</key><string>Ledung</string>
+  <key>CFBundleDisplayName</key><string>Ledung</string>
+  <key>CFBundlePackageType</key><string>APPL</string>
+  <key>CFBundleShortVersionString</key><string>${xmlEscape(version)}</string>
+  <key>LSMinimumSystemVersion</key><string>10.13</string>
+</dict>
+</plist>
+`;
+var AGENT_PLIST = (args, log) => `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key><string>${AGENT_LABEL}</string>
+  <key>ProgramArguments</key>
+  <array>
+${args.map((a) => `    <string>${xmlEscape(a)}</string>`).join("\n")}
+  </array>
+  <key>RunAtLoad</key><true/>
+  <key>AbandonProcessGroup</key><true/>
+  <key>StandardOutPath</key><string>${xmlEscape(log)}</string>
+  <key>StandardErrorPath</key><string>${xmlEscape(log)}</string>
+  <key>EnvironmentVariables</key>
+  <dict>
+    <key>${LOG_FILE_SETTING}</key><string>${xmlEscape(log)}</string>
+  </dict>
+</dict>
+</plist>
+`;
+var SIGN_IN_FILES = {
+  windows: "Ledung at sign-in.lnk",
+  mac: `${AGENT_LABEL}.plist`,
+  other: `${AGENT_LABEL}.desktop`
+};
+var SIGN_IN_LABELS = {
+  windows: "Start Ledung when I sign in to Windows",
+  mac: "Start Ledung when I log in to this Mac",
+  other: "Start Ledung when I log in"
+};
+var Shortcuts = class {
+  opts;
+  platform;
+  folderCache = null;
+  constructor(opts) {
+    this.opts = opts;
+    this.platform = opts.platform ?? process.platform;
+  }
+  kind() {
+    return this.platform === "win32" ? "windows" : this.platform === "darwin" ? "mac" : "other";
+  }
+  folders() {
+    this.folderCache ??= this.opts.folders?.() ?? (envSetting("DATA_DIR") ? Promise.resolve(ownDataFolders(this.platform)) : this.platform === "win32" ? windowsFolders() : Promise.resolve(this.platform === "darwin" ? macFolders() : linuxFolders()));
+    this.folderCache.catch(() => this.folderCache = null);
+    return this.folderCache;
+  }
+  async places() {
+    const kind = this.kind();
+    if (kind === "other") return [];
+    const folders = await this.folders();
+    const ids = kind === "windows" ? ["desktop", "start-menu"] : ["applications"];
+    return ids.flatMap((id) => {
+      const folder = folders[id];
+      if (!folder) return [];
+      const file = path16.join(folder, kind === "windows" ? "Ledung.lnk" : "Ledung.app");
+      return [{ id, label: LABELS[id], file, present: kind === "windows" ? fs13.existsSync(file) : isOurApp(file) }];
+    });
+  }
+  /** The sign-in start's file in Startup, LaunchAgents or autostart (SIGN_IN_FILES). */
+  async signInFile() {
+    const folder = (await this.folders()).startup;
+    if (!folder) return null;
+    const kind = this.kind();
+    return path16.join(folder, SIGN_IN_FILES[kind]);
+  }
+  async signInView() {
+    const label = SIGN_IN_LABELS[this.kind()];
+    const file = await this.signInFile();
+    if (!file) return { available: false, reason: "Ledung cannot start itself at login on this system.", label, on: false, file: null };
+    return { available: true, reason: null, label, on: fs13.existsSync(file), file };
   }
-  /** The public name changed: joining or leaving a relay from Settings (issue #237), with no restart. */
-  setRemote(remote) {
-    this.remote = remote;
-    const lan = this.lanNames.filter((n) => n !== remote?.publicName);
-    const names = ["127.0.0.1", "localhost", ...lan];
-    this.hosts = new Set(names.map((n) => `${n}:${this.port}`));
-    this.origins = new Set(names.map((n) => `http://${n}:${this.port}`));
-    this.lanHosts = new Set(lan.map((n) => `${n}:${this.port}`));
+  async view() {
+    const kind = this.kind();
+    const asked = this.opts.meta.get(ASKED_KEY) !== null;
+    const log = { file: this.logFile(), active: envSetting("LOG_FILE") !== void 0 && path16.resolve(envSetting("LOG_FILE")) === path16.resolve(this.logFile()) };
+    const signIn = await this.signInView();
+    if (kind === "other") {
+      return { kind, available: false, reason: "Shortcuts are made on Windows and macOS. Here, start Ledung with ledung.sh or the ledung command.", asked, places: [], signIn, log };
+    }
+    return { kind, available: true, reason: null, asked, places: await this.places(), signIn, log };
   }
   /**
-   * The request came in through the public name: exactly the name, as browsers send it for HTTPS on 443.
-   * No port and no other spelling, so a lookalike or "<name>:4317" is an unknown host.
+   * Add or Remove, or No to the first-run question. Add and No answer it for good; Remove leaves it answered.
+   * sign-in-on and sign-in-off switch the start at sign-in (#456).
    */
-  isPublic(req) {
-    if (this.tunnelled(req)) return true;
-    return !!this.remote && (req.headers.host ?? "").toLowerCase() === this.remote.publicName;
+  async act(action) {
+    if (action === "decline") {
+      this.opts.meta.set(ASKED_KEY, "declined");
+      return this.view();
+    }
+    if (action === "sign-in-on" || action === "sign-in-off") {
+      await this.signIn(action === "sign-in-on");
+      return this.view();
+    }
+    if (this.kind() === "other") throw new Error("Shortcuts are made on Windows and macOS.");
+    const places = await this.places();
+    if (action === "add") {
+      this.writeEnvFile();
+      if (this.kind() === "windows") await this.addWindows(places.filter((p) => !p.present));
+      else {
+        for (const p of places.filter((p2) => !p2.present)) {
+          if (fs13.existsSync(p.file)) throw new Error(`There is already a Ledung.app in ${path16.dirname(p.file)} that Ledung didn't make. Rename or remove it, then add the shortcut again.`);
+          this.addMac(p.file);
+        }
+      }
+      this.opts.meta.set(ASKED_KEY, "added");
+    } else {
+      for (const p of places.filter((p2) => p2.present)) this.remove(p.file);
+      if (this.kind() === "windows") fs13.rmSync(this.icoFile(), { force: true });
+      if (!(await this.signInView()).on) this.removeShared();
+    }
+    return this.view();
   }
-  /** A connection the relay tunnel handed to the server (LedungServer.tunnelConnection), never a local one. */
-  markTunnel(socket) {
-    this.tunnel.add(socket);
+  icoFile() {
+    return path16.join(this.opts.iconDir, "Ledung.ico");
   }
-  tunnelled(req) {
-    return this.tunnel.has(req.socket);
+  envFile() {
+    return path16.join(this.opts.iconDir, ENV_FILE);
   }
-  /** The live device signed in through the public name, or null (always null for local requests). */
-  deviceOf(req) {
-    if (!this.remote || !this.isPublic(req)) return null;
-    for (const cookie of readCookies(req, DEVICE_COOKIE)) {
-      const device = this.remote.device(cookie);
-      if (device) return device;
-    }
-    return null;
+  starterFile() {
+    return path16.join(this.opts.iconDir, STARTER_FILE);
   }
-  /** Signed in, or come in through a trusted network address; through the public name, a live paired device only. */
-  mayUse(req) {
-    if (this.isPublic(req)) return this.deviceOf(req) !== null;
-    return this.signedIn(req) || this.lanOpen && this.lanHosts.has((req.headers.host ?? "").toLowerCase());
+  logFile() {
+    return this.opts.logFile ?? path16.join(this.opts.iconDir, LOG_FILE);
   }
-  hostAllowed(req) {
-    if (this.isPublic(req)) return !!this.remote;
-    return this.hosts.has((req.headers.host ?? "").toLowerCase());
+  /** The env file and the start script, which the icons and the start at sign-in share. */
+  removeShared() {
+    fs13.rmSync(this.envFile(), { force: true });
+    fs13.rmSync(this.starterFile(), { force: true });
+  }
+  /** The env file for a launch that carries settings, else none; the shortcuts then pass it with --env-file. */
+  writeEnvFile() {
+    const env = this.opts.launch.env ?? {};
+    if (!Object.keys(env).length) return void fs13.rmSync(this.envFile(), { force: true });
+    fs13.mkdirSync(this.opts.iconDir, { recursive: true });
+    fs13.writeFileSync(this.envFile(), envFileText(env));
+  }
+  /** Node's own options for a shortcut: --env-file when the launch carries settings. */
+  nodeOptions() {
+    return Object.keys(this.opts.launch.env ?? {}).length ? [`--env-file=${this.envFile()}`] : [];
   }
   /**
-   * True only when the request says it comes from Ledung's own page, on the kind of name it was sent to:
-   * through the public name only https://<name>; locally never that one.
+   * The start script for Windows Script Host (#456). The `ledung` command goes to the background by itself; the
+   * release launcher runs through cmd.exe, hidden too, so its output goes to the log, and LEDUNG_LOG_FILE says so to
+   * Settings.
    */
-  originAllowed(req) {
-    const origin = req.headers.origin;
-    if (typeof origin !== "string") return false;
-    if (this.isPublic(req)) return !!this.remote && origin.toLowerCase() === `https://${this.remote.publicName}`;
-    return this.origins.has(origin.toLowerCase());
-  }
-  tokenMatches(candidate) {
-    if (!candidate) return false;
-    const given = Buffer.from(candidate);
-    return given.length === this.token.length && crypto3.timingSafeEqual(given, this.token);
+  writeStarter() {
+    const { node, script } = this.opts.launch;
+    const run8 = [node, ...this.nodeOptions(), script].map(winQuote).join(" ");
+    const text2 = startsInBackground(this.opts.launch) ? starterText(run8, "") : starterText(`cmd.exe /d /s /c "set ${winQuote(`${LOG_FILE_SETTING}=${this.logFile()}`)}&& ${run8}`, ` >> ${winQuote(this.logFile())} 2>&1"`);
+    fs13.mkdirSync(this.opts.iconDir, { recursive: true });
+    fs13.writeFileSync(this.starterFile(), text2);
+  }
+  /** The Windows Script Host that runs the start script with no window, and its arguments. */
+  windowsStart(extra) {
+    const wscript = path16.join(process.env.SystemRoot ?? "C:\\Windows", "System32", "wscript.exe");
+    return { target: wscript, arguments: ["//Nologo", this.starterFile(), ...extra].map(winQuote).join(" ") };
+  }
+  async writeLinks(files, extra, icon, description) {
+    for (const file of files) fs13.mkdirSync(path16.dirname(file), { recursive: true });
+    const spec = { files, ...this.windowsStart(extra), workdir: os7.homedir(), icon: icon ? `${icon},0` : "", description };
+    await powershell([
+      "$spec = $env:SHORTCUT_SPEC | ConvertFrom-Json",
+      "$shell = New-Object -ComObject WScript.Shell",
+      "foreach ($file in $spec.files) {",
+      "  $s = $shell.CreateShortcut($file)",
+      "  $s.TargetPath = $spec.target; $s.Arguments = $spec.arguments; $s.WorkingDirectory = $spec.workdir",
+      "  if ($spec.icon) { $s.IconLocation = $spec.icon }",
+      "  $s.Description = $spec.description",
+      "  $s.Save()",
+      "}"
+    ].join("\n"), { SHORTCUT_SPEC: JSON.stringify(spec) });
   }
-  /** The launchers' proof that this Ledung holds the token, for their nonce (src/platform/running.ts). */
-  runningProof(nonce) {
-    return runningProof(this.token.toString(), nonce);
+  async addWindows(places) {
+    if (!places.length) return;
+    fs13.mkdirSync(this.opts.iconDir, { recursive: true });
+    fs13.writeFileSync(this.icoFile(), icoFromPng(fs13.readFileSync(this.opts.icons.png256)));
+    this.writeStarter();
+    await this.writeLinks(places.map((p) => p.file), [], this.icoFile(), "Open Ledung, and start it if it is not running");
+  }
+  /** Turns the start at sign-in on or off (#456). On starts Ledung without opening its page. */
+  async signIn(on) {
+    const file = await this.signInFile();
+    if (!file) throw new Error("Ledung cannot start itself at login on this system.");
+    if (!on) {
+      fs13.rmSync(file, { force: true });
+      if (!(await this.places()).some((p) => p.present)) this.removeShared();
+      return;
+    }
+    this.writeEnvFile();
+    fs13.mkdirSync(path16.dirname(file), { recursive: true });
+    const { node, script } = this.opts.launch;
+    const kind = this.kind();
+    if (kind === "windows") {
+      this.writeStarter();
+      await this.writeLinks([file], ["--no-open"], null, "Start Ledung in the background");
+    } else if (kind === "mac") {
+      const run8 = [...this.nodeOptions(), script, ...startsInBackground(this.opts.launch) ? ["--foreground"] : [], "--no-open"].map(shQuote).join(" ");
+      fs13.writeFileSync(file, AGENT_PLIST(["/bin/sh", "-c", signInScript(node, run8, "/bin/zsh").join("\n")], this.logFile()));
+    } else {
+      const run8 = [...this.nodeOptions(), script, "--no-open"].map(shQuote).join(" ");
+      fs13.writeFileSync(file, [
+        "[Desktop Entry]",
+        "Type=Application",
+        "Name=Ledung",
+        "Comment=Start Ledung in the background. Made by Ledung's Settings (issue #456).",
+        `Exec=${["/bin/sh", "-c", signInScript(node, run8, "/bin/sh").join("; ")].map(desktopArg).join(" ")}`,
+        "Terminal=false",
+        "X-GNOME-Autostart-enabled=true",
+        ""
+      ].join("\n"));
+    }
   }
-  /** The install's token cookie; never counts through the public name. */
-  signedIn(req) {
-    return !this.isPublic(req) && this.tokenMatches(readCookie(req, COOKIE_NAME));
+  /**
+   * Ledung.app: a script that opens a running Ledung's page (--open-only), or else starts Ledung in the background
+   * (#456): the `ledung` command goes there by itself; the release launcher is started with nohup, its output in the
+   * log. Made by Ledung on this computer, so it carries no quarantine and Gatekeeper lets it open.
+   */
+  addMac(app) {
+    const { node, script } = this.opts.launch;
+    const contents = path16.join(app, "Contents");
+    fs13.mkdirSync(path16.join(contents, "MacOS"), { recursive: true });
+    fs13.mkdirSync(path16.join(contents, "Resources"), { recursive: true });
+    let version = "1";
+    try {
+      version = String(JSON.parse(fs13.readFileSync(path16.join(appDir(), "package.json"), "utf8")).version ?? "1");
+    } catch {
+    }
+    fs13.writeFileSync(path16.join(contents, "Info.plist"), PLIST(version));
+    fs13.writeFileSync(path16.join(contents, "Resources", "Ledung.icns"), icnsFromPngs([fs13.readFileSync(this.opts.icons.png256), fs13.readFileSync(this.opts.icons.png512)]));
+    const run8 = [...this.nodeOptions(), script].map(shQuote).join(" ");
+    fs13.writeFileSync(path16.join(contents, "MacOS", "Ledung"), [
+      "#!/bin/sh",
+      "# Opens a running Ledung's page, or starts Ledung in the background. Made by Ledung's Settings (issues #415, #456).",
+      ...findNode(node),
+      `[ -x "$NODE" ] || { osascript -e 'display alert "Ledung cannot find Node.js" message "Install Node.js 24, or add the shortcut again in Settings in Ledung."'; exit 1; }`,
+      `"$NODE" ${run8} --open-only && exit 0`,
+      // Only for a start: opening a running Ledung's page doesn't wait for the login shell.
+      ...loginPath("/bin/zsh"),
+      ...nodeOnPath(),
+      startsInBackground(this.opts.launch) ? `exec "$NODE" ${run8}` : `${LOG_FILE_SETTING}=${shQuote(this.logFile())} nohup "$NODE" ${run8} >> ${shQuote(this.logFile())} 2>&1 &`,
+      ""
+    ].join("\n"), { mode: 493 });
   }
-  cookieHeader() {
-    return `${COOKIE_NAME}=${this.token.toString()}; HttpOnly; SameSite=Strict; Path=/; Max-Age=31536000`;
+  /** Takes away Ledung.lnk, or a Ledung.app that is Ledung's own (its bundle id), never anything else. */
+  remove(file) {
+    if (file.endsWith(".lnk")) {
+      fs13.rmSync(file, { force: true });
+      return;
+    }
+    if (!isOurApp(file)) throw new Error(`${file} is not the Ledung.app that Ledung made; remove it yourself if you want it gone.`);
+    fs13.rmSync(file, { recursive: true, force: true });
   }
 };
-function deviceCookieHeader(value, framed = false) {
-  return `${DEVICE_COOKIE}=${value}; Secure; HttpOnly; ${framed ? "SameSite=None; Partitioned" : "SameSite=Strict"}; Path=/; Max-Age=31536000`;
+function findNode(node) {
+  return [`NODE=${shQuote(node)}`, `[ -x "$NODE" ] || NODE=$("\${SHELL:-/bin/zsh}" -lic 'command -v node' 2>/dev/null | tail -n 1)`];
 }
-function readCookie(req, name) {
-  return readCookies(req, name)[0] ?? null;
+var LOGIN_PATH_TICKS = 40;
+var PATH_MARKER = "LEDUNG_PATH=";
+function loginPath(fallbackShell) {
+  const ask = `"\${SHELL:-${fallbackShell}}" -lic 'printf "\\n${PATH_MARKER}%s\\n" "$PATH"' </dev/null >"$T" 2>/dev/null & P=$!`;
+  return [
+    'L=; T=$(mktemp "${TMPDIR:-/tmp}/ledung-path.XXXXXX" 2>/dev/null) || T=',
+    `[ -z "$T" ] || { ${ask}; I=0; while kill -0 "$P" 2>/dev/null && [ "$I" -lt ${LOGIN_PATH_TICKS} ]; do sleep 0.2; I=$((I + 1)); done; kill -KILL "$P" 2>/dev/null; L=$(sed -n 's/^${PATH_MARKER}//p' "$T" | tail -n 1); rm -f "$T"; } 2>/dev/null`,
+    'if [ -n "$L" ]; then PATH=$L; LEDUNG_START_PATH=login; else LEDUNG_START_PATH=fallback; fi'
+  ];
 }
-function readCookies(req, name) {
-  const found = [];
-  for (const part of (req.headers.cookie ?? "").split(";")) {
-    const [k, ...v] = part.trim().split("=");
-    if (k === name) found.push(v.join("="));
-  }
-  return found;
+function nodeOnPath() {
+  return ['case ":$PATH:" in *":${NODE%/*}:"*) ;; *) PATH="$PATH:${NODE%/*}" ;; esac', "export PATH LEDUNG_START_PATH"];
 }
-function securityHeaders(port, lanNames2 = [], imageHosts = [], publicName, frames = {}) {
-  const ancestors = frames.ancestors ?? [];
-  const sources = frames.sources ?? [];
-  const live = [...["127.0.0.1", "localhost", ...lanNames2].map((n) => `ws://${n}:${port}`), ...publicName ? [`wss://${publicName}`] : []];
-  return {
-    "Content-Security-Policy": [
-      "default-src 'self'",
-      `connect-src 'self' ${live.join(" ")}`,
-      // Extra hosts only for the board's people list (their pictures, decision 5 of the message board).
-      `img-src ${["'self'", "data:", ...imageHosts].join(" ")}`,
-      "style-src 'self' 'unsafe-inline'",
-      `frame-ancestors ${ancestors.length ? ancestors.join(" ") : "'none'"}`,
-      ...sources.length ? [`frame-src 'self' ${sources.join(" ")}`] : [],
-      "base-uri 'none'",
-      "form-action 'self'"
-    ].join("; "),
-    // Older browsers know only this header; it can't list pages, so it goes only when some may frame this one.
-    ...ancestors.length ? {} : { "X-Frame-Options": "DENY" },
-    "X-Content-Type-Options": "nosniff",
-    "Referrer-Policy": "no-referrer",
-    "Cache-Control": "no-store"
-  };
+function signInScript(node, run8, fallbackShell) {
+  const missing = 'echo "Ledung cannot find Node.js. Install Node.js 24, or switch Start at sign-in off and on in Settings in Ledung." >&2; exit 1';
+  return [...loginPath(fallbackShell), ...findNode(node), `[ -x "$NODE" ] || { ${missing}; }`, ...nodeOnPath(), `exec "$NODE" ${run8}`];
+}
+function isOurApp(app) {
+  try {
+    return fs13.readFileSync(path16.join(app, "Contents", "Info.plist"), "utf8").includes(`<string>${BUNDLE_ID}</string>`);
+  } catch {
+    return false;
+  }
 }
 
 // src/server/server.ts
@@ -3852,6 +4119,22 @@ function displayVersion(version) {
   if (!m) return `v${version}`;
   return m[2] === "0" ? `v${m[1]}` : `v${m[1]}.${m[2]}`;
 }
+var CHANNELS = ["public", "dev"];
+var CHANNEL_TAG = { public: "latest", dev: "dev" };
+function parseVersion2(version) {
+  const m = /^(\d+)\.(\d+)\.(\d+)$/.exec(version);
+  return m ? [Number(m[1]), Number(m[2]), Number(m[3])] : null;
+}
+function compareVersions(a, b) {
+  const x = parseVersion2(a);
+  const y = parseVersion2(b);
+  if (!x || !y) return (x ? 1 : 0) - (y ? 1 : 0);
+  return x[0] - y[0] || x[1] - y[1] || x[2] - y[2];
+}
+function offeredVersion(channel, tags) {
+  const candidates = (channel === "dev" ? [tags.dev, tags.latest] : [tags.latest]).filter((v) => !!v && !!parseVersion2(v));
+  return candidates.sort(compareVersions).at(-1) ?? null;
+}
 
 // src/server/source.ts
 var ANTHROPIC_NOTICE = "Ledung runs Anthropic's Claude Agent SDK and Claude Code, installed from npm under Anthropic's own terms (https://code.claude.com/docs/en/legal-and-compliance). They are not covered by Ledung's license (AGPL-3.0-only, see LICENSE).";
@@ -12509,6 +12792,7 @@ var SessionManager = class _SessionManager {
       choices: this.accountChoices(),
       signedOut: this.signedOut(),
       claudeProblem: this.claudeProblem,
+      claudeLooked: this.claudeProblem ? this.claudeLooked : [],
       configFileProblems: this.accountFileProblems
     };
   }
@@ -12542,9 +12826,12 @@ var SessionManager = class _SessionManager {
   );
   /** Claude Code missing or too old on this computer (issue #341), for the page's banner; null: none. */
   claudeProblem = null;
+  /** Where that last look went (#455), shown under the banner so a "not found" can be acted on. */
+  claudeLooked = [];
   /** Looks for the Claude Code sessions run, and tells the page when its problem changed. Never throws. */
   async checkClaude() {
     const view = await this.claudeCodeView();
+    this.claudeLooked = view.looked ?? [];
     if (view.problem !== this.claudeProblem) {
       this.claudeProblem = view.problem;
       this.publishAccounts();
@@ -12564,6 +12851,7 @@ var SessionManager = class _SessionManager {
     const all = names ?? [DEFAULT_ACCOUNT, ...this.accounts.list().map((a) => a.name)];
     const [claude] = await Promise.all([this.claudeCodeView(), ...all.map((n) => this.checkSignInOf(n))]);
     this.claudeProblem = claude.problem;
+    this.claudeLooked = claude.looked ?? [];
     this.publishAccounts();
   }
   /**
@@ -14205,6 +14493,10 @@ var GIT_LIMIT_MS = 2 * 6e4;
 var INSTALL_LIMIT_MS = 10 * 6e4;
 var RELEASE_LIMIT_MS = 15 * 6e4;
 var NPM_REASON = "Ledung was installed from npm, so updates come from npm: run npm install -g ledung, then press Restart Ledung.";
+var NPM_DEV_REASON = "Ledung was installed from npm, so updates come from npm: run npm install -g ledung@dev, then press Restart Ledung.";
+var PACKAGE = "ledung";
+var CHANNEL_KEY = "update-channel";
+var devCheckTraced = false;
 function readRunningRelease(appDir2) {
   const own = readJson(path30.join(appDir2, "release.json"));
   if (own && typeof own.source === "string") {
@@ -14215,9 +14507,12 @@ function readRunningRelease(appDir2) {
 var npm = process.platform === "win32" ? "npm.cmd" : "npm";
 var NPM_INSTALL = { cmd: npm, args: ["install", "--no-audit", "--no-fund"], shell: process.platform === "win32", limitMs: INSTALL_LIMIT_MS };
 var NPM_RELEASE = { cmd: npm, args: ["run", "release"], shell: process.platform === "win32", limitMs: RELEASE_LIMIT_MS };
+var NPM_DIST_TAGS = { cmd: npm, args: ["view", PACKAGE, "dist-tags", "--json"], shell: process.platform === "win32" };
+var npmGlobalInstall = (spec) => ({ cmd: npm, args: ["install", "-g", spec, "--no-audit", "--no-fund"], shell: process.platform === "win32", limitMs: INSTALL_LIMIT_MS });
 var Updater = class {
   opts;
   check = null;
+  npmCheck = null;
   checkError = null;
   checking = false;
   steps = [];
@@ -14231,16 +14526,30 @@ var Updater = class {
   running() {
     return this.opts.npmVersion ? null : readRunningRelease(this.opts.appDir);
   }
+  /** Public or Dev (#461); Public until chosen otherwise. A clone install keeps updating from main either way. */
+  channel() {
+    return this.opts.meta?.get(CHANNEL_KEY) === "dev" ? "dev" : "public";
+  }
+  setChannel(channel) {
+    if (!CHANNELS.includes(channel)) throw new Error(`The channel is ${CHANNELS.join(" or ")}.`);
+    if (!this.opts.meta) throw new Error("The update channel cannot be kept here.");
+    this.opts.meta.set(CHANNEL_KEY, channel);
+    this.npmCheck = null;
+    return this.view();
+  }
   view() {
     const running = this.running();
     const npm2 = this.opts.npmVersion;
+    const channel = this.channel();
     return {
       available: !!running,
-      reason: running ? void 0 : npm2 ? NPM_REASON : "This Ledung runs straight from a source folder, not from a release, so it has nothing to update. Start it from a release (npm run release).",
+      reason: running ? void 0 : npm2 ? channel === "dev" ? NPM_DEV_REASON : NPM_REASON : "This Ledung runs straight from a source folder, not from a release, so it has nothing to update. Start it from a release (npm run release).",
       npm: npm2 ? { version: npm2 } : void 0,
+      channel,
       canRestart: !!this.opts.onRestart,
       running: running ? { commit: running.commit, source: running.source, releasedAt: running.releasedAt } : null,
       check: this.check,
+      npmCheck: this.npmCheck,
       checkError: this.checkError,
       checking: this.checking,
       steps: this.steps,
@@ -14249,6 +14558,102 @@ var Updater = class {
       restarting: this.restarting
     };
   }
+  /** Check for updates: on npm the channel's version (#461), otherwise origin/main in the source folder. */
+  checkForUpdates() {
+    return this.opts.npmVersion ? this.runNpmCheck() : this.runCheck();
+  }
+  /** Update Ledung: on npm installs the channel's version and restarts (#461), otherwise pulls main and releases. */
+  runUpdate() {
+    return this.opts.npmVersion ? this.startNpmUpdate() : this.startUpdate();
+  }
+  /** Asks npm for the channel's version and says whether it is newer than the installed one. */
+  async runNpmCheck() {
+    const installed = this.opts.npmVersion;
+    if (!installed || this.checking || this.updating) return this.view();
+    this.checking = true;
+    this.checkError = null;
+    try {
+      const channel = this.channel();
+      const offered = offeredVersion(channel, await this.distTags());
+      this.npmCheck = { checkedAt: (/* @__PURE__ */ new Date()).toISOString(), channel, offered, upToDate: !offered || compareVersions(offered, installed) <= 0 };
+      if (channel === "dev" && !devCheckTraced) {
+        devCheckTraced = true;
+        exercisedLine(`EXERCISED #461 npm update check followed the dev tag (${offered ?? "none"})`);
+      }
+    } catch (e) {
+      this.checkError = e.message;
+    } finally {
+      this.checking = false;
+    }
+    return this.view();
+  }
+  async distTags() {
+    const r = await this.run(this.opts.distTags ?? NPM_DIST_TAGS, this.opts.dataDir);
+    if (r.timedOut || r.code !== 0) throw new Error(`npm view ${PACKAGE} dist-tags failed:
+${r.tail}`);
+    try {
+      const tags = JSON.parse(r.out);
+      if (tags && typeof tags === "object") {
+        return Object.fromEntries(Object.entries(tags).filter((e) => typeof e[1] === "string"));
+      }
+    } catch {
+    }
+    throw new Error(`npm view ${PACKAGE} dist-tags did not answer with its tags:
+${r.tail}`);
+  }
+  /** Installs the channel's version globally with npm, then restarts into it; refusals as for a git update. */
+  startNpmUpdate() {
+    const installed = this.opts.npmVersion;
+    if (!installed || this.updating) return this.view();
+    if (this.checking) {
+      this.refused = "A check for updates is still running. Update again when it has finished.";
+      this.steps = [];
+      return this.view();
+    }
+    this.refused = null;
+    this.steps = [];
+    if (!this.opts.onRestart) {
+      this.refused = "This Ledung was not started by the ledung command, so it cannot restart itself into the new version. Start it with ledung first.";
+      return this.view();
+    }
+    this.updating = true;
+    void this.npmUpdate(installed).finally(() => {
+      this.updating = false;
+    });
+    return this.view();
+  }
+  async npmUpdate(installed) {
+    const channel = this.channel();
+    this.steps = [`Ask npm for the ${channel === "dev" ? "Dev" : "Public"} version`, `npm install -g ${PACKAGE}@${CHANNEL_TAG[channel]}`, "Restart Ledung"].map((label) => ({ label, state: "waiting" }));
+    const step = (i, state, output, label) => {
+      this.steps = this.steps.map((s, j) => j === i ? { ...s, state, output, label: label ?? s.label } : s);
+    };
+    const refuse = (i, reason, output) => {
+      step(i, "failed", output);
+      this.refused = `${reason} The running Ledung was not changed.`;
+    };
+    step(0, "running");
+    let offered;
+    try {
+      offered = offeredVersion(channel, await this.distTags());
+    } catch (e) {
+      return refuse(0, "npm could not be asked for the version.", e.message);
+    }
+    if (!offered) return refuse(0, `npm has no ${channel === "dev" ? "Dev" : "Public"} version of ${PACKAGE}.`);
+    this.npmCheck = { checkedAt: (/* @__PURE__ */ new Date()).toISOString(), channel, offered, upToDate: compareVersions(offered, installed) <= 0 };
+    if (this.npmCheck.upToDate) return refuse(0, `${displayVersion(installed)} is already the newest on this channel.`);
+    step(0, "done");
+    const spec = `${PACKAGE}@${offered}`;
+    step(1, "running", void 0, `npm install -g ${spec}`);
+    const command = this.opts.npmInstall?.(spec) ?? npmGlobalInstall(spec);
+    const result = await this.run(command, this.opts.dataDir);
+    if (result.timedOut) return refuse(1, `npm install -g ${spec} did not finish within ${Math.round((command.limitMs ?? GIT_LIMIT_MS) / 6e4)} minutes and was stopped.`, result.tail);
+    if (result.code !== 0) return refuse(1, `npm install -g ${spec} failed (exit code ${result.code}).`, result.tail);
+    step(1, "done", result.tail);
+    step(2, "running");
+    this.restarting = true;
+    setTimeout(() => this.opts.onRestart?.(), 1500);
+  }
   /** Fetches origin/main in the source folder and says what is new since the running release. */
   async runCheck() {
     const running = this.running();
@@ -16376,6 +16781,14 @@ var LedungServer = class {
         if (!this.opts.onRestart) throw new HttpError(404, "Restarting is not available.");
         setTimeout(() => this.opts.onRestart?.(), 100);
         return;
+      // Stop Ledung (issue #456): only from this computer, whose icon or `ledung` starts it again; a phone or another
+      // computer could stop it but never start it. The cookie and Origin as for every change; `ledung stop` sends both.
+      case "POST stop":
+        this.requireLocal(req, "Ledung is stopped");
+        if (!fromThisComputer(req)) throw new HttpError(403, "Ledung is stopped on the computer it runs on.");
+        if (!this.opts.onStop) throw new HttpError(404, "Stopping is not available.");
+        setTimeout(() => this.opts.onStop?.(), 100);
+        return;
       // Shortcuts on this computer's Desktop, Start menu or Applications (issue #415): only from a page on this computer
       // itself, not a phone or another computer on the network, and changes only from the open page.
       case "GET shortcuts":
@@ -16385,7 +16798,9 @@ var LedungServer = class {
         this.requireThisComputer(req);
         await this.requirePage(req, url);
         const action = (await readJson2(req)).action;
-        if (action !== "add" && action !== "remove" && action !== "decline") throw new HttpError(400, "The action is add, remove or decline.");
+        if (action !== "add" && action !== "remove" && action !== "decline" && action !== "sign-in-on" && action !== "sign-in-off") {
+          throw new HttpError(400, "The action is add, remove or decline, or sign-in-on or sign-in-off for the start at sign-in.");
+        }
         try {
           return await this.shortcuts().act(action);
         } catch (e) {
@@ -16395,9 +16810,19 @@ var LedungServer = class {
       case "GET update":
         return this.updater().view();
       case "POST update-check":
-        return this.updater().runCheck();
+        return this.updater().checkForUpdates();
       case "POST update":
-        return this.updater().startUpdate();
+        return this.updater().runUpdate();
+      // Settings → About's Public / Dev (#461): guarded as the update it steers (sign-in, origin, an unlocked device).
+      case "POST update-channel": {
+        const channel = (await readJson2(req)).channel;
+        if (channel !== "public" && channel !== "dev") throw new HttpError(400, "The channel is public or dev.");
+        try {
+          return this.updater().setChannel(channel);
+        } catch (e) {
+          throw new HttpError(400, e.message);
+        }
+      }
       case "POST certificate-check":
         if (this.opts.onCertificateCheck) this.opts.onCertificateCheck();
         else if (!this.remoteLink?.checkNow()) throw new HttpError(404, "This Ledung gets no certificate by ACME.");
@@ -20737,6 +21162,8 @@ async function main() {
   }
   if (PACKAGED && createDefaultConfig()) console.log(`Wrote a default config to ${configPath()}.`);
   const config = loadConfig();
+  const startPath = envSetting("START_PATH");
+  if (startPath) exercisedLine(`EXERCISED #464 started with the ${startPath === "login" ? "login shell's" : "fallback"} PATH`);
   const remote = config.remote ?? savedRemote(remoteDir());
   if (!fs38.existsSync(databaseFile())) console.log(ANTHROPIC_NOTICE);
   const db = openDatabase();
@@ -20800,9 +21227,19 @@ async function main() {
     store,
     manager,
     onRestart,
+    // Stop Ledung in Settings and `ledung stop` (issue #456): the same stop as Ctrl+C in its window.
+    onStop: () => void shutdown(false),
     // Made only when asked, in the first-run question or Settings (issue #415).
     shortcuts: new Shortcuts({ launch: launchTarget(), iconDir: userDataDir(), icons: iconFiles(), meta: { get: (k) => store.getMeta(k), set: (k, v) => store.setMeta(k, v) } }),
-    updater: new Updater({ appDir: appDir(), dataDir: userDataDir(), configPath: configPath(), onRestart, npmVersion: PACKAGED ? appVersion() : void 0 }),
+    updater: new Updater({
+      appDir: appDir(),
+      dataDir: userDataDir(),
+      configPath: configPath(),
+      onRestart,
+      npmVersion: PACKAGED ? appVersion() : void 0,
+      // The update channel (#461) is this computer's, like its shortcuts.
+      meta: { get: (k) => store.getMeta(k), set: (k, v) => store.setMeta(k, v) }
+    }),
     lanNames: lan,
     lanBind: config.lan === true ? "0.0.0.0" : config.lan || void 0,
     lanOpen: !config.lanSignIn,