local-operator-ui 0.19.6 → 0.20.0

package/out/main/index.js

@@ -1,19 +1,17 @@
 "use strict";
 const fs = require("node:fs");
-const path = require("node:path");
+const path$1 = require("node:path");
 const node_url = require("node:url");
 const utils = require("@electron-toolkit/utils");
 const electron = require("electron");
 const posthogNode = require("posthog-node");
-const require$$1 = require("path");
+const path = require("path");
 const node_child_process = require("node:child_process");
 const node_crypto = require("node:crypto");
 const os = require("node:os");
 const node_util = require("node:util");
 const zod = require("zod");
-const require$$0 = require("fs");
-const require$$2 = require("os");
-const require$$3 = require("crypto");
+const dotenv = require("dotenv");
 const electronLog = require("electron-log");
 const https = require("node:https");
 const electronUpdater = require("electron-updater");
@@ -33,9 +31,9 @@ function _interopNamespaceDefault(e) {
   n.default = e;
   return Object.freeze(n);
 }
-const path__namespace = /* @__PURE__ */ _interopNamespaceDefault(path);
+const path__namespace = /* @__PURE__ */ _interopNamespaceDefault(path$1);
 const https__namespace = /* @__PURE__ */ _interopNamespaceDefault(https);
-const icon = require$$1.join(__dirname, "../../resources/icon.png");
+const icon = path.join(__dirname, "../../resources/icon.png");
 const id$1 = zod.z.string().min(1).max(128).regex(/^[a-zA-Z0-9_-]+$/);
 const MAX_UPLOAD_BYTES = 16 * 1024 * 1024;
 const MAX_DOWNLOAD_BYTES = 32 * 1024 * 1024;
@@ -475,6 +473,11 @@ const desktopRequestSchema = zod.z.discriminatedUnion("op", [
     visible: zod.z.boolean(),
     canNotify: zod.z.boolean()
   }).strict(),
+  // Speculative runtime engage. Carries no payload BY DESIGN: it admits no
+  // work, so it is not receipt-keyed and not a `MESSAGE_OPS` member - see
+  // `desktopRequestByteBudget`. Firing it costs the control budget and a
+  // 2-byte body, which is what lets the renderer issue it from a keystroke.
+  zod.z.object({ op: zod.z.literal("sessions.warm"), sessionId }).strict(),
   // The legacy surface, reached through the same authenticated vocabulary as
   // everything else. These routes are gated in managed mode (agent inventory,
   // cwd paths, job history and conversation content are the same tenant's data
@@ -944,6 +947,16 @@ function desktopEndpoint(request) {
           can_notify: request.canNotify
         }
       };
+    case "sessions.warm":
+      return {
+        path: `/v1/desktop/sessions/${request.sessionId}/warm`,
+        method: "POST",
+        // `{}` rather than `undefined`: the transport only sets
+        // Content-Type when a body exists, and the route's pydantic input
+        // forbids extras but still wants a JSON OBJECT. An omitted body
+        // makes a legal call answer 422.
+        body: {}
+      };
     case "legacy.models": {
       const query = new URLSearchParams();
       if (request.provider) query.set("provider", request.provider);
@@ -1329,7 +1342,7 @@ function insideAppBundle(path2) {
   return path2.split(PATH_SEPARATORS).some((segment) => segment.length > 4 && segment.endsWith(".app"));
 }
 function pythonBytecodeCacheDir(userDataDir) {
-  return path.join(userDataDir, PYTHON_BYTECODE_CACHE_DIR_NAME);
+  return path$1.join(userDataDir, PYTHON_BYTECODE_CACHE_DIR_NAME);
 }
 function withPythonBytecodeCache(env, userDataDir) {
   const existing = env.PYTHONPYCACHEPREFIX?.trim();
@@ -1338,7 +1351,7 @@ function withPythonBytecodeCache(env, userDataDir) {
 }
 const BUNDLED_PYTHON_TREE_NAMES = ["python", "python_aarch64"];
 function bundledPythonTreePaths(resourcesPath) {
-  return BUNDLED_PYTHON_TREE_NAMES.map((name) => path.join(resourcesPath, name));
+  return BUNDLED_PYTHON_TREE_NAMES.map((name) => path$1.join(resourcesPath, name));
 }
 const FIND = "/usr/bin/find";
 const CHMOD = "/bin/chmod";
@@ -1411,279 +1424,6 @@ function applyAce(tree, selector, ace, failures) {
   for (const byte of run.stdout) if (byte === 0) selected += 1;
   return selected;
 }
-var main = { exports: {} };
-const version = "16.5.0";
-const require$$4 = {
-  version
-};
-var hasRequiredMain;
-function requireMain() {
-  if (hasRequiredMain) return main.exports;
-  hasRequiredMain = 1;
-  const fs2 = require$$0;
-  const path2 = require$$1;
-  const os2 = require$$2;
-  const crypto = require$$3;
-  const packageJson = require$$4;
-  const version2 = packageJson.version;
-  const LINE = /(?:^|^)\s*(?:export\s+)?([\w.-]+)(?:\s*=\s*?|:\s+?)(\s*'(?:\\'|[^'])*'|\s*"(?:\\"|[^"])*"|\s*`(?:\\`|[^`])*`|[^#\r\n]+)?\s*(?:#.*)?(?:$|$)/mg;
-  function parse(src) {
-    const obj = {};
-    let lines = src.toString();
-    lines = lines.replace(/\r\n?/mg, "\n");
-    let match;
-    while ((match = LINE.exec(lines)) != null) {
-      const key = match[1];
-      let value = match[2] || "";
-      value = value.trim();
-      const maybeQuote = value[0];
-      value = value.replace(/^(['"`])([\s\S]*)\1$/mg, "$2");
-      if (maybeQuote === '"') {
-        value = value.replace(/\\n/g, "\n");
-        value = value.replace(/\\r/g, "\r");
-      }
-      obj[key] = value;
-    }
-    return obj;
-  }
-  function _parseVault(options) {
-    const vaultPath = _vaultPath(options);
-    const result = DotenvModule.configDotenv({ path: vaultPath });
-    if (!result.parsed) {
-      const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
-      err.code = "MISSING_DATA";
-      throw err;
-    }
-    const keys = _dotenvKey(options).split(",");
-    const length = keys.length;
-    let decrypted;
-    for (let i = 0; i < length; i++) {
-      try {
-        const key = keys[i].trim();
-        const attrs = _instructions(result, key);
-        decrypted = DotenvModule.decrypt(attrs.ciphertext, attrs.key);
-        break;
-      } catch (error) {
-        if (i + 1 >= length) {
-          throw error;
-        }
-      }
-    }
-    return DotenvModule.parse(decrypted);
-  }
-  function _warn(message) {
-    console.log(`[dotenv@${version2}][WARN] ${message}`);
-  }
-  function _debug(message) {
-    console.log(`[dotenv@${version2}][DEBUG] ${message}`);
-  }
-  function _dotenvKey(options) {
-    if (options && options.DOTENV_KEY && options.DOTENV_KEY.length > 0) {
-      return options.DOTENV_KEY;
-    }
-    if (process.env.DOTENV_KEY && process.env.DOTENV_KEY.length > 0) {
-      return process.env.DOTENV_KEY;
-    }
-    return "";
-  }
-  function _instructions(result, dotenvKey) {
-    let uri;
-    try {
-      uri = new URL(dotenvKey);
-    } catch (error) {
-      if (error.code === "ERR_INVALID_URL") {
-        const err = new Error("INVALID_DOTENV_KEY: Wrong format. Must be in valid uri format like dotenv://:key_1234@dotenvx.com/vault/.env.vault?environment=development");
-        err.code = "INVALID_DOTENV_KEY";
-        throw err;
-      }
-      throw error;
-    }
-    const key = uri.password;
-    if (!key) {
-      const err = new Error("INVALID_DOTENV_KEY: Missing key part");
-      err.code = "INVALID_DOTENV_KEY";
-      throw err;
-    }
-    const environment = uri.searchParams.get("environment");
-    if (!environment) {
-      const err = new Error("INVALID_DOTENV_KEY: Missing environment part");
-      err.code = "INVALID_DOTENV_KEY";
-      throw err;
-    }
-    const environmentKey = `DOTENV_VAULT_${environment.toUpperCase()}`;
-    const ciphertext = result.parsed[environmentKey];
-    if (!ciphertext) {
-      const err = new Error(`NOT_FOUND_DOTENV_ENVIRONMENT: Cannot locate environment ${environmentKey} in your .env.vault file.`);
-      err.code = "NOT_FOUND_DOTENV_ENVIRONMENT";
-      throw err;
-    }
-    return { ciphertext, key };
-  }
-  function _vaultPath(options) {
-    let possibleVaultPath = null;
-    if (options && options.path && options.path.length > 0) {
-      if (Array.isArray(options.path)) {
-        for (const filepath of options.path) {
-          if (fs2.existsSync(filepath)) {
-            possibleVaultPath = filepath.endsWith(".vault") ? filepath : `${filepath}.vault`;
-          }
-        }
-      } else {
-        possibleVaultPath = options.path.endsWith(".vault") ? options.path : `${options.path}.vault`;
-      }
-    } else {
-      possibleVaultPath = path2.resolve(process.cwd(), ".env.vault");
-    }
-    if (fs2.existsSync(possibleVaultPath)) {
-      return possibleVaultPath;
-    }
-    return null;
-  }
-  function _resolveHome(envPath) {
-    return envPath[0] === "~" ? path2.join(os2.homedir(), envPath.slice(1)) : envPath;
-  }
-  function _configVault(options) {
-    const debug = Boolean(options && options.debug);
-    if (debug) {
-      _debug("Loading env from encrypted .env.vault");
-    }
-    const parsed = DotenvModule._parseVault(options);
-    let processEnv = process.env;
-    if (options && options.processEnv != null) {
-      processEnv = options.processEnv;
-    }
-    DotenvModule.populate(processEnv, parsed, options);
-    return { parsed };
-  }
-  function configDotenv(options) {
-    const dotenvPath = path2.resolve(process.cwd(), ".env");
-    let encoding = "utf8";
-    const debug = Boolean(options && options.debug);
-    if (options && options.encoding) {
-      encoding = options.encoding;
-    } else {
-      if (debug) {
-        _debug("No encoding is specified. UTF-8 is used by default");
-      }
-    }
-    let optionPaths = [dotenvPath];
-    if (options && options.path) {
-      if (!Array.isArray(options.path)) {
-        optionPaths = [_resolveHome(options.path)];
-      } else {
-        optionPaths = [];
-        for (const filepath of options.path) {
-          optionPaths.push(_resolveHome(filepath));
-        }
-      }
-    }
-    let lastError;
-    const parsedAll = {};
-    for (const path22 of optionPaths) {
-      try {
-        const parsed = DotenvModule.parse(fs2.readFileSync(path22, { encoding }));
-        DotenvModule.populate(parsedAll, parsed, options);
-      } catch (e) {
-        if (debug) {
-          _debug(`Failed to load ${path22} ${e.message}`);
-        }
-        lastError = e;
-      }
-    }
-    let processEnv = process.env;
-    if (options && options.processEnv != null) {
-      processEnv = options.processEnv;
-    }
-    DotenvModule.populate(processEnv, parsedAll, options);
-    if (lastError) {
-      return { parsed: parsedAll, error: lastError };
-    } else {
-      return { parsed: parsedAll };
-    }
-  }
-  function config(options) {
-    if (_dotenvKey(options).length === 0) {
-      return DotenvModule.configDotenv(options);
-    }
-    const vaultPath = _vaultPath(options);
-    if (!vaultPath) {
-      _warn(`You set DOTENV_KEY but you are missing a .env.vault file at ${vaultPath}. Did you forget to build it?`);
-      return DotenvModule.configDotenv(options);
-    }
-    return DotenvModule._configVault(options);
-  }
-  function decrypt(encrypted, keyStr) {
-    const key = Buffer.from(keyStr.slice(-64), "hex");
-    let ciphertext = Buffer.from(encrypted, "base64");
-    const nonce = ciphertext.subarray(0, 12);
-    const authTag = ciphertext.subarray(-16);
-    ciphertext = ciphertext.subarray(12, -16);
-    try {
-      const aesgcm = crypto.createDecipheriv("aes-256-gcm", key, nonce);
-      aesgcm.setAuthTag(authTag);
-      return `${aesgcm.update(ciphertext)}${aesgcm.final()}`;
-    } catch (error) {
-      const isRange = error instanceof RangeError;
-      const invalidKeyLength = error.message === "Invalid key length";
-      const decryptionFailed = error.message === "Unsupported state or unable to authenticate data";
-      if (isRange || invalidKeyLength) {
-        const err = new Error("INVALID_DOTENV_KEY: It must be 64 characters long (or more)");
-        err.code = "INVALID_DOTENV_KEY";
-        throw err;
-      } else if (decryptionFailed) {
-        const err = new Error("DECRYPTION_FAILED: Please check your DOTENV_KEY");
-        err.code = "DECRYPTION_FAILED";
-        throw err;
-      } else {
-        throw error;
-      }
-    }
-  }
-  function populate(processEnv, parsed, options = {}) {
-    const debug = Boolean(options && options.debug);
-    const override = Boolean(options && options.override);
-    if (typeof parsed !== "object") {
-      const err = new Error("OBJECT_REQUIRED: Please check the processEnv argument being passed to populate");
-      err.code = "OBJECT_REQUIRED";
-      throw err;
-    }
-    for (const key of Object.keys(parsed)) {
-      if (Object.prototype.hasOwnProperty.call(processEnv, key)) {
-        if (override === true) {
-          processEnv[key] = parsed[key];
-        }
-        if (debug) {
-          if (override === true) {
-            _debug(`"${key}" is already defined and WAS overwritten`);
-          } else {
-            _debug(`"${key}" is already defined and was NOT overwritten`);
-          }
-        }
-      } else {
-        processEnv[key] = parsed[key];
-      }
-    }
-  }
-  const DotenvModule = {
-    configDotenv,
-    _configVault,
-    _parseVault,
-    config,
-    decrypt,
-    parse,
-    populate
-  };
-  main.exports.configDotenv = DotenvModule.configDotenv;
-  main.exports._configVault = DotenvModule._configVault;
-  main.exports._parseVault = DotenvModule._parseVault;
-  main.exports.config = DotenvModule.config;
-  main.exports.decrypt = DotenvModule.decrypt;
-  main.exports.parse = DotenvModule.parse;
-  main.exports.populate = DotenvModule.populate;
-  main.exports = DotenvModule;
-  return main.exports;
-}
-var mainExports = requireMain();
 var LogFileType = /* @__PURE__ */ ((LogFileType2) => {
   LogFileType2["INSTALLER"] = "backend-installer.log";
   LogFileType2["BACKEND"] = "backend-service.log";
@@ -1700,9 +1440,9 @@ class Logger {
    */
   constructor() {
     if (process.platform === "win32") {
-      this.logPath = path.join(electron.app.getPath("userData"), "logs");
+      this.logPath = path$1.join(electron.app.getPath("userData"), "logs");
     } else if (process.platform === "darwin") {
-      this.logPath = path.join(
+      this.logPath = path$1.join(
         electron.app.getPath("home"),
         "Library",
         "Application Support",
@@ -1710,7 +1450,7 @@ class Logger {
         "logs"
       );
     } else {
-      this.logPath = path.join(
+      this.logPath = path$1.join(
         electron.app.getPath("home"),
         ".config",
         "local-operator",
@@ -1723,7 +1463,7 @@ class Logger {
     this.loggers = /* @__PURE__ */ new Map();
     for (const logFileType of Object.values(LogFileType)) {
       const logger2 = electronLog.create(`logger-${logFileType}`);
-      logger2.transports.file.resolvePath = () => path.join(this.logPath, logFileType);
+      logger2.transports.file.resolvePath = () => path$1.join(this.logPath, logFileType);
       logger2.transports.file.level = "debug";
       logger2.transports.file.format = "[{y}-{m}-{d} {h}:{i}:{s}.{ms}] [{level}] {text}";
       logger2.transports.file.maxSize = 10 * 1024 * 1024;
@@ -1837,8 +1577,8 @@ class Logger {
   }
 }
 const logger = Logger.getInstance();
-const envResult = mainExports.config({
-  path: path.join(process.cwd(), ".env"),
+const envResult = dotenv.config({
+  path: path$1.join(process.cwd(), ".env"),
   override: true
 });
 if (envResult.error) {
@@ -2027,9 +1767,9 @@ class BackendServiceManager {
       );
     }
     if (process.platform === "win32") {
-      this.venvPath = path.join(this.appDataPath, "local-operator-venv");
+      this.venvPath = path$1.join(this.appDataPath, "local-operator-venv");
     } else if (process.platform === "darwin") {
-      this.venvPath = path.join(
+      this.venvPath = path$1.join(
         electron.app.getPath("home"),
         "Library",
         "Application Support",
@@ -2037,7 +1777,7 @@ class BackendServiceManager {
         "local-operator-venv"
       );
     } else {
-      this.venvPath = path.join(
+      this.venvPath = path$1.join(
         electron.app.getPath("home"),
         ".config",
         "local-operator",
@@ -2120,10 +1860,10 @@ class BackendServiceManager {
   async loadMacOSEnvironment() {
     const home = os.homedir();
     const possibleFiles = [
-      path.join(home, ".zshrc"),
-      path.join(home, ".bash_profile"),
-      path.join(home, ".bashrc"),
-      path.join(home, ".profile")
+      path$1.join(home, ".zshrc"),
+      path$1.join(home, ".bash_profile"),
+      path$1.join(home, ".bashrc"),
+      path$1.join(home, ".profile")
     ];
     let shellConfigFile = null;
     for (const file of possibleFiles) {
@@ -2170,9 +1910,9 @@ class BackendServiceManager {
   async loadLinuxEnvironment() {
     const home = os.homedir();
     const possibleFiles = [
-      path.join(home, ".bashrc"),
-      path.join(home, ".zshrc"),
-      path.join(home, ".profile")
+      path$1.join(home, ".bashrc"),
+      path$1.join(home, ".zshrc"),
+      path$1.join(home, ".profile")
     ];
     let shellConfigFile = null;
     for (const file of possibleFiles) {
@@ -2228,9 +1968,9 @@ class BackendServiceManager {
         }
       }
       const userProfile = process.env.USERPROFILE || os.homedir();
-      const pyenvDir = path.join(userProfile, ".pyenv");
-      const pyenvBinPath = path.join(pyenvDir, "pyenv-win", "bin");
-      const pyenvShimsPath = path.join(pyenvDir, "pyenv-win", "shims");
+      const pyenvDir = path$1.join(userProfile, ".pyenv");
+      const pyenvBinPath = path$1.join(pyenvDir, "pyenv-win", "bin");
+      const pyenvShimsPath = path$1.join(pyenvDir, "pyenv-win", "shims");
       if (fs.existsSync(pyenvBinPath) && fs.existsSync(pyenvShimsPath)) {
         logger.info(
           `Found pyenv-win directories at ${pyenvBinPath} and ${pyenvShimsPath}`,
@@ -2243,7 +1983,7 @@ class BackendServiceManager {
         if (!currentPath.includes(pyenvShimsPath)) {
           this.shellEnv.PATH = `${pyenvShimsPath};${this.shellEnv.PATH}`;
         }
-        const pyenvWinPath = path.join(pyenvDir, "pyenv-win");
+        const pyenvWinPath = path$1.join(pyenvDir, "pyenv-win");
         this.shellEnv.PYENV = pyenvWinPath;
         this.shellEnv.PYENV_HOME = pyenvWinPath;
         logger.info(
@@ -2256,7 +1996,7 @@ class BackendServiceManager {
           LogFileType.BACKEND
         );
       }
-      const venvScriptsPath = path.join(this.venvPath, "Scripts");
+      const venvScriptsPath = path$1.join(this.venvPath, "Scripts");
       if (fs.existsSync(venvScriptsPath)) {
         const currentPath = this.shellEnv.PATH || "";
         if (!currentPath.includes(venvScriptsPath)) {
@@ -2445,7 +2185,7 @@ class BackendServiceManager {
         let cmd;
         let args;
         if (process.platform === "win32") {
-          const localOperatorExe = path.join(
+          const localOperatorExe = path$1.join(
             this.venvPath,
             "Scripts",
             "local-operator.exe"
@@ -2454,7 +2194,7 @@ class BackendServiceManager {
             cmd = localOperatorExe;
             args = ["serve", "--port", this.port.toString()];
           } else {
-            const pythonExe = path.join(this.venvPath, "Scripts", "python.exe");
+            const pythonExe = path$1.join(this.venvPath, "Scripts", "python.exe");
             if (fs.existsSync(pythonExe)) {
               cmd = pythonExe;
               args = [
@@ -2465,7 +2205,7 @@ class BackendServiceManager {
                 this.port.toString()
               ];
             } else {
-              const activateScript = path.join(
+              const activateScript = path$1.join(
                 this.venvPath,
                 "Scripts",
                 "Activate.ps1"
@@ -2480,7 +2220,7 @@ class BackendServiceManager {
             }
           }
         } else {
-          const activateScript = path.join(this.venvPath, "bin", "activate");
+          const activateScript = path$1.join(this.venvPath, "bin", "activate");
           cmd = "bash";
           args = [
             "-c",
@@ -3550,9 +3290,9 @@ class BackendInstaller {
    */
   constructor() {
     if (process.platform === "win32") {
-      this.venvPath = path.join(this.appDataPath, "local-operator-venv");
+      this.venvPath = path$1.join(this.appDataPath, "local-operator-venv");
     } else if (process.platform === "darwin") {
-      this.venvPath = path.join(
+      this.venvPath = path$1.join(
         electron.app.getPath("home"),
         "Library",
         "Application Support",
@@ -3560,14 +3300,14 @@ class BackendInstaller {
         "local-operator-venv"
       );
     } else {
-      this.venvPath = path.join(
+      this.venvPath = path$1.join(
         electron.app.getPath("home"),
         ".config",
         "local-operator",
         "local-operator-venv"
       );
     }
-    this.resourcesPath = process.env.NODE_ENV === "development" ? path.join(process.cwd(), "resources") : path.join(process.resourcesPath);
+    this.resourcesPath = process.env.NODE_ENV === "development" ? path$1.join(process.cwd(), "resources") : path$1.join(process.resourcesPath);
     if (electron.app.isPackaged) {
       const seal = sealPythonInterpreterTrees(
         bundledPythonTreePaths(process.resourcesPath)
@@ -3598,31 +3338,31 @@ class BackendInstaller {
     const possibilities = [];
     if (process.arch === "arm64") {
       possibilities.push(
-        path.join(process.resourcesPath, "python_aarch64", "bin", "python3"),
+        path$1.join(process.resourcesPath, "python_aarch64", "bin", "python3"),
         // Packaged app (aarch64)
-        path.join(process.cwd(), "resources", "python_aarch64", "bin", "python3")
+        path$1.join(process.cwd(), "resources", "python_aarch64", "bin", "python3")
         // Development (aarch64)
       );
     } else if (process.arch === "x64") {
       possibilities.push(
-        path.join(process.resourcesPath, "python", "bin", "python3"),
+        path$1.join(process.resourcesPath, "python", "bin", "python3"),
         // Packaged app (x86_64)
-        path.join(process.cwd(), "resources", "python", "bin", "python3")
+        path$1.join(process.cwd(), "resources", "python", "bin", "python3")
         // Development (x86_64)
       );
     }
     if (process.platform === "win32") {
       const userProfile = process.env.USERPROFILE || electron.app.getPath("home");
-      const pyenvDir = path.join(userProfile, ".pyenv");
+      const pyenvDir = path$1.join(userProfile, ".pyenv");
       possibilities.push(
         // In packaged app (Windows)
-        path.join(process.resourcesPath, "python", "python.exe"),
+        path$1.join(process.resourcesPath, "python", "python.exe"),
         // In development (Windows)
-        path.join(process.cwd(), "resources", "python", "python.exe"),
+        path$1.join(process.cwd(), "resources", "python", "python.exe"),
         // Check for pyenv-win Python
-        path.join(pyenvDir, "pyenv-win", "versions", "3.12.0", "python.exe"),
+        path$1.join(pyenvDir, "pyenv-win", "versions", "3.12.0", "python.exe"),
         // Check for pyenv-win shims
-        path.join(pyenvDir, "pyenv-win", "shims", "python.exe")
+        path$1.join(pyenvDir, "pyenv-win", "shims", "python.exe")
       );
     }
     for (const path2 of possibilities) {
@@ -3652,7 +3392,7 @@ class BackendInstaller {
       }
       let localOperatorPath;
       if (process.platform === "win32") {
-        localOperatorPath = path.join(
+        localOperatorPath = path$1.join(
           this.venvPath,
           "Scripts",
           "local-operator.exe"
@@ -3665,7 +3405,7 @@ class BackendInstaller {
           return false;
         }
       } else {
-        localOperatorPath = path.join(this.venvPath, "bin", "local-operator");
+        localOperatorPath = path$1.join(this.venvPath, "bin", "local-operator");
         if (!fs.existsSync(localOperatorPath)) {
           logger.info(
             `local-operator executable not found at ${localOperatorPath}`,
@@ -3714,18 +3454,18 @@ class BackendInstaller {
       let args;
       const tempDir = os.tmpdir();
       if (process.platform === "win32") {
-        scriptPath = path.join(tempDir, "install-backend-windows.ps1");
+        scriptPath = path$1.join(tempDir, "install-backend-windows.ps1");
         fs.writeFileSync(scriptPath, windowsInstallScript);
         cmd = "powershell.exe";
         args = ["-ExecutionPolicy", "Bypass", "-File", scriptPath];
       } else if (process.platform === "darwin") {
-        scriptPath = path.join(tempDir, "install-backend-macos.sh");
+        scriptPath = path$1.join(tempDir, "install-backend-macos.sh");
         fs.writeFileSync(scriptPath, macosInstallScript);
         cmd = "bash";
         args = [scriptPath];
         fs.chmodSync(scriptPath, "755");
       } else {
-        scriptPath = path.join(tempDir, "install-backend-linux.sh");
+        scriptPath = path$1.join(tempDir, "install-backend-linux.sh");
         fs.writeFileSync(scriptPath, linuxInstallScript);
         cmd = "bash";
         args = [scriptPath];
@@ -3753,7 +3493,7 @@ class BackendInstaller {
            moves with it. */
         backgroundColor: "#16130e",
         webPreferences: {
-          preload: path.join(__dirname, "../preload/index.js"),
+          preload: path$1.join(__dirname, "../preload/index.js"),
           sandbox: false
         }
       });
@@ -3762,7 +3502,7 @@ class BackendInstaller {
           `${process.env.ELECTRON_RENDERER_URL}/installer`
         );
       } else {
-        progressWindow.loadFile(path.join(__dirname, "../renderer/installer.html"));
+        progressWindow.loadFile(path$1.join(__dirname, "../renderer/installer.html"));
       }
       progressWindow.setMenuBarVisibility(false);
       let installationCancelled = false;
@@ -3926,7 +3666,7 @@ class BackendInstaller {
           "Backend installation completed successfully",
           LogFileType.INSTALLER
         );
-        const localOperatorPath = process.platform === "win32" ? path.join(this.venvPath, "Scripts", "local-operator.exe") : path.join(this.venvPath, "bin", "local-operator");
+        const localOperatorPath = process.platform === "win32" ? path$1.join(this.venvPath, "Scripts", "local-operator.exe") : path$1.join(this.venvPath, "bin", "local-operator");
         if (!fs.existsSync(localOperatorPath)) {
           logger.error(
             `Installation verification failed: ${localOperatorPath} not found`,
@@ -3960,7 +3700,7 @@ class BackendInstaller {
         }
         await new Promise((resolve) => setTimeout(resolve, 500));
         if (process.platform === "win32") {
-          const transcriptPath = path.join(
+          const transcriptPath = path$1.join(
             this.appDataPath,
             "backend-install-shell.log"
           );
@@ -4040,6 +3780,13 @@ function guardForegroundReceipts(window, send) {
     return send(input);
   };
 }
+function relayedBytes(value) {
+  if (value instanceof ArrayBuffer) return new Uint8Array(value);
+  if (!(value instanceof Uint8Array)) return null;
+  const { buffer, byteOffset, byteLength } = value;
+  if (!(buffer instanceof ArrayBuffer)) return null;
+  return new Uint8Array(buffer, byteOffset, byteLength);
+}
 function registerDesktopIPC(window, expectedUrl, request, streams, media, notifier) {
   const opened = /* @__PURE__ */ new Map();
   function authorize(event) {
@@ -4076,7 +3823,7 @@ function registerDesktopIPC(window, expectedUrl, request, streams, media, notifi
   if (media) {
     electron.ipcMain.handle("desktop-media", (event, input, bytes) => {
       authorize(event);
-      const payload = bytes instanceof Uint8Array ? bytes : bytes instanceof ArrayBuffer ? new Uint8Array(bytes) : null;
+      const payload = relayedBytes(bytes);
       return media(input, payload);
     });
   }
@@ -4326,9 +4073,9 @@ class DesktopNotifier {
    * reading of the backend, so an older probe still in flight must not settle
    * on top of it.
    */
-  setNotificationContract(version2) {
+  setNotificationContract(version) {
     this.contractGeneration++;
-    this.applyNotificationContract(version2);
+    this.applyNotificationContract(version);
     this.contractAnswered = true;
   }
   /**
@@ -4337,8 +4084,8 @@ class DesktopNotifier {
    * That invariant is the fix for R2-1, so a third caller that resets the
    * value without answering re-opens it.
    */
-  applyNotificationContract(version2) {
-    this.notificationContract = typeof version2 === "number" && Number.isFinite(version2) && version2 > 0 ? version2 : 0;
+  applyNotificationContract(version) {
+    this.notificationContract = typeof version === "number" && Number.isFinite(version) && version > 0 ? version : 0;
   }
   /**
    * Renderer heartbeat. Forwarded to the backend as the watch lease for the
@@ -4595,6 +4342,21 @@ class DesktopNotifier {
     notification.show();
   }
 }
+const lastPickedDirectory = /* @__PURE__ */ new Map();
+function withRememberedDirectory(kind, options, fallbackDirectory) {
+  if (options.defaultPath) return options;
+  const remembered = lastPickedDirectory.get(kind);
+  if (remembered && fs.existsSync(remembered)) {
+    return { ...options, defaultPath: remembered };
+  }
+  if (remembered) lastPickedDirectory.delete(kind);
+  return { ...options, defaultPath: fallbackDirectory };
+}
+function rememberPickedDirectory(kind, filePaths, directoryPicked = false) {
+  const [first] = filePaths;
+  if (!first) return;
+  lastPickedDirectory.set(kind, directoryPicked ? first : path$1.dirname(first));
+}
 const PENDING_INSTALL_MARKER_FILE = "pending-update-install.json";
 const INSTALL_DISK_SLACK_BYTES = 256 * 1024 * 1024;
 const DOWNLOAD_PAGE_URL = "https://local-operator.com/download";
@@ -4611,7 +4373,7 @@ const BAD_BUNDLE_MARKERS = [
   "-67062"
 ];
 function appBundleFromExecutable(execPath) {
-  const marker = `${path.join("Contents", "MacOS")}/`;
+  const marker = `${path$1.join("Contents", "MacOS")}/`;
   const index = execPath.lastIndexOf(marker);
   if (index <= 0) return null;
   return execPath.slice(0, index - 1);
@@ -4634,10 +4396,10 @@ ${probe.stderr}`.trim();
     detail: marker ? `${marker}: ${output || "no output"}` : `codesign --verify exited ${probe.exitCode}: ${output || "no output"}`
   };
 }
-function installedBundleSealBlock(appBundlePath, detail, version2) {
+function installedBundleSealBlock(appBundlePath, detail, version) {
   return {
     code: "installed-bundle-not-sealed",
-    message: version2 ? `This install of Local Operator can't be updated in place, so the update to version ${version2} was stopped before the app quit.` : "This install of Local Operator can't be updated in place, so the update was stopped before the app quit.",
+    message: version ? `This install of Local Operator can't be updated in place, so the update to version ${version} was stopped before the app quit.` : "This install of Local Operator can't be updated in place, so the update was stopped before the app quit.",
     remedy: {
       text: "Quit Local Operator, then download a fresh copy and replace the app in Applications.",
       url: DOWNLOAD_PAGE_URL
@@ -4663,29 +4425,29 @@ function parseSealViolations(output) {
   }
   return violations;
 }
-function canonicalPath(path$1) {
+function canonicalPath(path2) {
   try {
-    return fs.realpathSync(path$1);
+    return fs.realpathSync(path2);
   } catch {
     try {
-      return path.join(fs.realpathSync(path.dirname(path$1)), path.basename(path$1));
+      return path$1.join(fs.realpathSync(path$1.dirname(path2)), path$1.basename(path2));
     } catch {
-      return path$1;
+      return path2;
     }
   }
 }
 const BUNDLED_PYTHON_DIRS = ["python", "python_aarch64"];
 function isPythonBytecodePath(bundlePath, candidate) {
   const bundle = canonicalPath(bundlePath);
-  const path$1 = canonicalPath(candidate);
+  const path2 = canonicalPath(candidate);
   const dirs = BUNDLED_PYTHON_DIRS.map(
-    (name) => path.join(bundle, "Contents", "Resources", name)
+    (name) => path$1.join(bundle, "Contents", "Resources", name)
   );
   const separator = "/";
-  if (!path$1.endsWith(".pyc")) return false;
-  const segments = path$1.split(separator);
+  if (!path2.endsWith(".pyc")) return false;
+  const segments = path2.split(separator);
   if (!segments.includes("__pycache__")) return false;
-  return dirs.some((dir) => path$1.startsWith(`${dir}${separator}`));
+  return dirs.some((dir) => path2.startsWith(`${dir}${separator}`));
 }
 function planPythonBytecodeHeal(bundlePath, violations) {
   const added = violations.filter((violation) => violation.kind === "added");
@@ -4751,8 +4513,8 @@ function healPythonBytecode(bundlePath, violations, remove = (path2) => fs.rmSyn
   return { ...plan, removed };
 }
 function metadataBasenames(filePath, updatePath) {
-  const names = [path.basename(filePath)];
-  if (updatePath) names.push(path.basename(updatePath));
+  const names = [path$1.basename(filePath)];
+  if (updatePath) names.push(path$1.basename(updatePath));
   return names;
 }
 function matchArtifactMetadata(filePath, files, updatePath) {
@@ -4764,7 +4526,7 @@ function matchArtifactMetadata(filePath, files, updatePath) {
         url = decodeURIComponent(url);
       } catch {
       }
-      if (path.basename(url) === name) return file;
+      if (path$1.basename(url) === name) return file;
     }
   }
   return null;
@@ -4781,7 +4543,7 @@ function measureDirectoryBytes(root) {
     if (!stats.isDirectory()) return stats.size;
     let total = 0;
     for (const entry of fs.readdirSync(root)) {
-      const child = path.join(root, entry);
+      const child = path$1.join(root, entry);
       let childStats;
       try {
         childStats = fs.lstatSync(child);
@@ -4800,18 +4562,18 @@ function measureDirectoryBytes(root) {
     return null;
   }
 }
-function versionClause(version2) {
-  return version2 ? ` to version ${version2}` : "";
+function versionClause(version) {
+  return version ? ` to version ${version}` : "";
 }
 function verifyStagedArtifact(input) {
-  const name = path.basename(input.filePath);
-  const version2 = input.version ?? null;
+  const name = path$1.basename(input.filePath);
+  const version = input.version ?? null;
   if (input.metadata == null) {
     return {
       ok: false,
       block: {
         code: "artifact-metadata-missing",
-        message: `The downloaded update${versionClause(version2)} isn't listed in the release metadata, so it wasn't installed.`,
+        message: `The downloaded update${versionClause(version)} isn't listed in the release metadata, so it wasn't installed.`,
         remedy: {
           text: "Check for updates again to re-download the release."
         },
@@ -4825,7 +4587,7 @@ function verifyStagedArtifact(input) {
       ok: false,
       block: {
         code: "download-verification-failed",
-        message: `The downloaded update${versionClause(version2)} doesn't match the published release, so it wasn't installed.`,
+        message: `The downloaded update${versionClause(version)} doesn't match the published release, so it wasn't installed.`,
         remedy: {
           text: "Check for updates again to re-download the release."
         },
@@ -4839,7 +4601,7 @@ function verifyStagedArtifact(input) {
       ok: false,
       block: {
         code: "download-verification-failed",
-        message: `The downloaded update${versionClause(version2)} doesn't match the published release, so it wasn't installed.`,
+        message: `The downloaded update${versionClause(version)} doesn't match the published release, so it wasn't installed.`,
         remedy: {
           text: "Check for updates again to re-download the release."
         },
@@ -4858,7 +4620,7 @@ function verifyStagedArtifact(input) {
       ok: false,
       block: {
         code: "insufficient-disk-space",
-        message: `There isn't enough free disk space to install the update${versionClause(version2)}, so it wasn't installed.`,
+        message: `There isn't enough free disk space to install the update${versionClause(version)}, so it wasn't installed.`,
         remedy: {
           text: `Free up about ${formatGiB(needed - input.freeBytes)}, then check for updates again.`
         },
@@ -4878,12 +4640,12 @@ function resolveStagedArtifactPath(input) {
   const entries = input.listDir(input.pendingDir);
   for (const name of input.candidateNames) {
     const match = entries.find((entry) => entry === name);
-    if (match) return path.join(input.pendingDir, match);
+    if (match) return path$1.join(input.pendingDir, match);
   }
   return null;
 }
 function pendingInstallMarkerPath(dir) {
-  return path.join(dir, PENDING_INSTALL_MARKER_FILE);
+  return path$1.join(dir, PENDING_INSTALL_MARKER_FILE);
 }
 function writePendingInstallMarker(dir, marker) {
   fs.mkdirSync(dir, { recursive: true });
@@ -4927,7 +4689,7 @@ function clearPendingInstallMarker(dir) {
 }
 const LAST_INSTALL_ATTEMPT_FILE = "last-update-install.json";
 function lastInstallAttemptPath(dir) {
-  return path.join(dir, LAST_INSTALL_ATTEMPT_FILE);
+  return path$1.join(dir, LAST_INSTALL_ATTEMPT_FILE);
 }
 function readLastInstallAttempt(dir) {
   const path2 = lastInstallAttemptPath(dir);
@@ -5014,7 +4776,7 @@ function shipItJobLabel(bundleId) {
   return `${bundleId}.ShipIt`;
 }
 function shipItCacheDir(cacheRoot, bundleId) {
-  return path.join(cacheRoot, shipItJobLabel(bundleId));
+  return path$1.join(cacheRoot, shipItJobLabel(bundleId));
 }
 function watchdogSwapTarget(input) {
   if (!input.target) return null;
@@ -5304,7 +5066,7 @@ function reapFailedInstall(input) {
     if (!input.exists(cacheDir)) return result;
     for (const entry of input.listDir(cacheDir)) {
       if (!entry.startsWith("update.")) continue;
-      const staging = path.join(cacheDir, entry);
+      const staging = path$1.join(cacheDir, entry);
       try {
         input.removeDir(staging);
         result.removedStaging.push(staging);
@@ -5337,14 +5099,14 @@ const LOCAL_OPERATOR_DIST_INFO = /^local[-_]operator[-_]/;
 function resolveDistributionMarkers(prefix) {
   const sitePackages = [];
   try {
-    for (const entry of fs.readdirSync(path.join(prefix, "lib"))) {
+    for (const entry of fs.readdirSync(path$1.join(prefix, "lib"))) {
       if (!PYTHON_LIB_DIR.test(entry)) continue;
-      const candidate = path.join(prefix, "lib", entry, "site-packages");
+      const candidate = path$1.join(prefix, "lib", entry, "site-packages");
       if (fs.existsSync(candidate)) sitePackages.push(candidate);
     }
   } catch {
   }
-  const windowsSitePackages = path.join(prefix, "Lib", "site-packages");
+  const windowsSitePackages = path$1.join(prefix, "Lib", "site-packages");
   if (fs.existsSync(windowsSitePackages)) sitePackages.push(windowsSitePackages);
   let installer = null;
   let editable = false;
@@ -5358,15 +5120,15 @@ function resolveDistributionMarkers(prefix) {
     for (const entry of entries) {
       if (!LOCAL_OPERATOR_DIST_INFO.test(entry)) continue;
       if (!entry.endsWith(".dist-info")) continue;
-      const distInfo = path.join(dir, entry);
+      const distInfo = path$1.join(dir, entry);
       try {
-        const installerText = fs.readFileSync(path.join(distInfo, "INSTALLER"), "utf8");
+        const installerText = fs.readFileSync(path$1.join(distInfo, "INSTALLER"), "utf8");
         installer = installerText.trim().toLowerCase() || installer;
       } catch {
       }
       try {
         const payload = JSON.parse(
-          fs.readFileSync(path.join(distInfo, "direct_url.json"), "utf8")
+          fs.readFileSync(path$1.join(distInfo, "direct_url.json"), "utf8")
         );
         if (payload.editable === true || payload.dir_info?.editable === true) {
           editable = true;
@@ -5386,11 +5148,11 @@ function commandSearchDirs(env, home) {
     if (trimmed.length === 0 || dirs.includes(trimmed)) return;
     dirs.push(trimmed);
   };
-  for (const dir of (env.PATH ?? "").split(path.delimiter)) add(dir);
+  for (const dir of (env.PATH ?? "").split(path$1.delimiter)) add(dir);
   add(env.UV_TOOL_BIN_DIR);
   add(env.XDG_BIN_HOME);
-  if (env.XDG_DATA_HOME) add(path.join(env.XDG_DATA_HOME, "..", "bin"));
-  add(path.join(home, ".local", "bin"));
+  if (env.XDG_DATA_HOME) add(path$1.join(env.XDG_DATA_HOME, "..", "bin"));
+  add(path$1.join(home, ".local", "bin"));
   add("/opt/homebrew/bin");
   add("/usr/local/bin");
   add("/usr/bin");
@@ -5398,12 +5160,12 @@ function commandSearchDirs(env, home) {
   return dirs;
 }
 function uvToolBinDirs(env, home, listDir, platform) {
-  const root = env.UV_TOOL_DIR ?? (env.XDG_DATA_HOME ? path.join(env.XDG_DATA_HOME, "uv", "tools") : path.join(home, ".local", "share", "uv", "tools"));
+  const root = env.UV_TOOL_DIR ?? (env.XDG_DATA_HOME ? path$1.join(env.XDG_DATA_HOME, "uv", "tools") : path$1.join(home, ".local", "share", "uv", "tools"));
   const scriptDir = platform === "win32" ? "Scripts" : "bin";
   const dirs = [];
   try {
     for (const entry of listDir(root)) {
-      dirs.push(path.join(root, entry, scriptDir));
+      dirs.push(path$1.join(root, entry, scriptDir));
     }
   } catch {
   }
@@ -5422,10 +5184,10 @@ function windowsCommandExtensions(env) {
   return extensions;
 }
 function commandCandidates(dir, name, env, platform) {
-  const candidates = [path.join(dir, name)];
+  const candidates = [path$1.join(dir, name)];
   if (platform !== "win32") return candidates;
   for (const extension of windowsCommandExtensions(env)) {
-    candidates.push(path.join(dir, name + extension));
+    candidates.push(path$1.join(dir, name + extension));
   }
   return candidates;
 }
@@ -5471,15 +5233,15 @@ function readInstallIdentity(shimPath) {
     shebang = null;
   }
   const executable = realPath ?? shimPath;
-  const prefix = path.dirname(path.dirname(executable));
+  const prefix = path$1.dirname(path$1.dirname(executable));
   const existing = (candidate) => fs.existsSync(candidate) ? candidate : null;
   const markers = resolveDistributionMarkers(prefix);
   return {
     path: shimPath,
     realPath,
     shebang,
-    uvReceipt: existing(path.join(prefix, "uv-receipt.toml")),
-    venvPrefix: fs.existsSync(path.join(prefix, "pyvenv.cfg")) ? prefix : null,
+    uvReceipt: existing(path$1.join(prefix, "uv-receipt.toml")),
+    venvPrefix: fs.existsSync(path$1.join(prefix, "pyvenv.cfg")) ? prefix : null,
     installer: markers.installer,
     editable: markers.editable
   };
@@ -5571,8 +5333,8 @@ const PIP_SHOW_VERSION_REGEX = /^Version:\s*(.+)$/m;
 function parsePipShowVersion(stdout) {
   const match = stdout.match(PIP_SHOW_VERSION_REGEX);
   if (!match) return null;
-  const version2 = match[1].trim();
-  return version2.length > 0 ? version2 : null;
+  const version = match[1].trim();
+  return version.length > 0 ? version : null;
 }
 function didUpgradeLand(input) {
   const { before, after, target: target2 } = input;
@@ -5588,8 +5350,8 @@ const BETA_VERSION_REGEX = /v\d+\.\d+\.\d+\.beta\.\d+/;
 const BUNDLE_ID_REGEX = /^[\w.-]+$/;
 const LAUNCHCTL_NOT_LOADED_REGEX = /could not find|no such process/i;
 const SEAL_PROBE_TIMEOUT_MS = 45e3;
-function versionSuffix(version2) {
-  return version2 ? ` to version ${version2}` : "";
+function versionSuffix(version) {
+  return version ? ` to version ${version}` : "";
 }
 function runCommand(command, args, options = {}) {
   return new Promise((resolve) => {
@@ -5766,14 +5528,14 @@ class UpdateService {
    * forgets, and the whole point of these checks is that the user gets an
    * explanation instead of an app that quits and never returns.
    */
-  sendInstallBlock(block, version2) {
+  sendInstallBlock(block, version) {
     logger.error(
       `Update refused (${block.code}): ${block.detail}`,
       LogFileType.UPDATE_SERVICE
     );
     this.sendToRenderer("update-install-blocked", {
       code: block.code,
-      version: version2 ?? null,
+      version: version ?? null,
       message: block.message,
       remedy: block.remedy,
       detail: block.detail
@@ -5852,7 +5614,7 @@ class UpdateService {
     if (!bundlePath) return null;
     const value = readCommandOutput("/usr/bin/defaults", [
       "read",
-      path.join(bundlePath, "Contents", "Info.plist"),
+      path$1.join(bundlePath, "Contents", "Info.plist"),
       "CFBundleIdentifier"
     ]);
     return value && BUNDLE_ID_REGEX.test(value) ? value : null;
@@ -5874,8 +5636,8 @@ class UpdateService {
   shipItLog() {
     const bundleId = this.bundleIdentifier();
     if (!bundleId) return null;
-    const candidate = path.join(
-      shipItCacheDir(path.join(os.homedir(), "Library", "Caches"), bundleId),
+    const candidate = path$1.join(
+      shipItCacheDir(path$1.join(os.homedir(), "Library", "Caches"), bundleId),
       "ShipIt_stderr.log"
     );
     return fs.existsSync(candidate) ? candidate : null;
@@ -5897,7 +5659,7 @@ class UpdateService {
     try {
       const result = reapFailedInstall({
         bundleId: this.bundleIdentifier(),
-        cacheRoot: path.join(os.homedir(), "Library", "Caches"),
+        cacheRoot: path$1.join(os.homedir(), "Library", "Caches"),
         removeJob: (label) => {
           const result2 = node_child_process.spawnSync("/bin/launchctl", ["remove", label], {
             encoding: "utf8",
@@ -6025,7 +5787,7 @@ class UpdateService {
    * those files restores the seal (measured; see `healPythonBytecode`), where a
    * bundle broken any other way still gets the reinstall refusal below.
    */
-  async probeInstalledBundleSeal(version2) {
+  async probeInstalledBundleSeal(version) {
     if (process.platform !== "darwin" || !electron.app.isPackaged) return null;
     const bundlePath = appBundleFromExecutable(process.execPath);
     if (!bundlePath) {
@@ -6075,7 +5837,7 @@ class UpdateService {
         `Installed bundle is not healable in place: ${heal.reason}`,
         LogFileType.UPDATE_SERVICE
       );
-      return installedBundleSealBlock(bundlePath, seal.detail, version2);
+      return installedBundleSealBlock(bundlePath, seal.detail, version);
     }
     logger.info(
       `Removed ${heal.removed.length} bytecode file(s) our own interpreter had written into the sealed bundle: ${heal.reason}. Paths:
@@ -6094,17 +5856,17 @@ ${heal.removed.join("\n")}`,
       `Installed bundle still fails its seal check after healing: ${healed.detail}`,
       LogFileType.UPDATE_SERVICE
     );
-    return installedBundleSealBlock(bundlePath, healed.detail, version2);
+    return installedBundleSealBlock(bundlePath, healed.detail, version);
   }
   /** File names the updater's metadata knows this update by. */
   stagedArtifactCandidates(info) {
     const names = /* @__PURE__ */ new Set();
-    if (info?.path) names.add(path.basename(info.path));
+    if (info?.path) names.add(path$1.basename(info.path));
     for (const file of info?.files ?? []) {
-      if (file.url) names.add(path.basename(decodeURIComponent(file.url)));
+      if (file.url) names.add(path$1.basename(decodeURIComponent(file.url)));
     }
     if (this.downloadedArtifactPath) {
-      names.add(path.basename(this.downloadedArtifactPath));
+      names.add(path$1.basename(this.downloadedArtifactPath));
     }
     return [...names];
   }
@@ -6253,7 +6015,7 @@ ${heal.removed.join("\n")}`,
     if (!bundlePath) return null;
     const plan = buildWatchdogPlan({
       appBundlePath: bundlePath,
-      executableName: path.basename(process.execPath),
+      executableName: path$1.basename(process.execPath),
       // The app's own pid, captured here - before the quit - because the
       // watchdog cannot ask a name about its own ancestor (review R1).
       appPid: process.pid,
@@ -6916,12 +6678,12 @@ ${heal.removed.join("\n")}`,
           const { stdout } = await execAsync("pip show local-operator");
           const match = stdout.match(VERSION_LINE_REGEX);
           if (match) {
-            const version2 = match[1].trim();
+            const version = match[1].trim();
             logger.info(
-              `Backend version from pip: ${version2}`,
+              `Backend version from pip: ${version}`,
               LogFileType.UPDATE_SERVICE
             );
-            return version2;
+            return version;
           }
         } catch (pipError) {
           logger.error(
@@ -7248,10 +7010,10 @@ ${heal.removed.join("\n")}`,
     const deadline = Date.now() + timeoutMs;
     let last = null;
     while (Date.now() < deadline) {
-      const version2 = await this.getInstalledBackendVersion();
-      if (version2 && version2 !== "Unknown") {
-        last = version2;
-        if (target2 == null || version2 === target2) return version2;
+      const version = await this.getInstalledBackendVersion();
+      if (version && version !== "Unknown") {
+        last = version;
+        if (target2 == null || version === target2) return version;
       }
       await new Promise((resolve) => setTimeout(resolve, intervalMs));
     }
@@ -7340,7 +7102,7 @@ ${heal.removed.join("\n")}`,
       if (venvPath && electron.app.isPackaged) {
         const venvBinDir = process.platform === "win32" ? "Scripts" : "bin";
         const pythonName = process.platform === "win32" ? "python.exe" : "python3";
-        pythonPath = path.join(venvPath, venvBinDir, pythonName);
+        pythonPath = path$1.join(venvPath, venvBinDir, pythonName);
       }
       if (!pythonPath || !fs.existsSync(pythonPath)) {
         logger.error(
@@ -7739,6 +7501,9 @@ const posthogClient = new posthogNode.PostHog(backendConfig.VITE_PUBLIC_POSTHOG_
   host: backendConfig.VITE_PUBLIC_POSTHOG_HOST,
   enableExceptionAutocapture: true
 });
+function pickerFallbackDirectory() {
+  return electron.app.getPath("home");
+}
 function createApplicationMenu() {
   const isDev = Boolean(process.env.ELECTRON_RENDERER_URL);
   const zoomInHandler = () => {
@@ -7892,7 +7657,7 @@ function createWindow() {
     title: "Local Operator",
     icon,
     webPreferences: {
-      preload: path.join(__dirname, "../preload/index.js"),
+      preload: path$1.join(__dirname, "../preload/index.js"),
       sandbox: false,
       // Only enable devTools when running with 'pnpm dev'
       // Disable for 'pnpm start' and production builds
@@ -7963,7 +7728,7 @@ function createWindow() {
     if (isTrustedAuthDomain) {
       return {
         action: "allow",
-        features: {
+        overrideBrowserWindowOptions: {
           width: 800,
           height: 700,
           // Increased height for better visibility
@@ -7994,7 +7759,7 @@ function createWindow() {
   if (utils.is.dev && process.env.ELECTRON_RENDERER_URL) {
     mainWindow2.loadURL(process.env.ELECTRON_RENDERER_URL);
   } else {
-    mainWindow2.loadFile(path.join(__dirname, "../renderer/index.html"));
+    mainWindow2.loadFile(path$1.join(__dirname, "../renderer/index.html"));
   }
   return mainWindow2;
 }
@@ -8074,7 +7839,7 @@ electron.app.whenReady().then(async () => {
   });
   registerDesktopIPC(
     () => mainWindow,
-    process.env.ELECTRON_RENDERER_URL || node_url.pathToFileURL(path.join(__dirname, "../renderer/index.html")).href,
+    process.env.ELECTRON_RENDERER_URL || node_url.pathToFileURL(path$1.join(__dirname, "../renderer/index.html")).href,
     sendDesktop,
     () => backendService.getStreamRelay(),
     (input, bytes) => backendService.requestDesktopMedia(input, bytes),
@@ -8091,7 +7856,7 @@ electron.app.whenReady().then(async () => {
     "read-file",
     async (_, filePath, encoding = "utf-8") => {
       try {
-        const normalizedPath = filePath.startsWith("~/") ? path.join(electron.app.getPath("home"), filePath.slice(2)) : filePath;
+        const normalizedPath = filePath.startsWith("~/") ? path$1.join(electron.app.getPath("home"), filePath.slice(2)) : filePath;
         const data = fs.readFileSync(normalizedPath, encoding);
         return { success: true, data };
       } catch (error) {
@@ -8118,7 +7883,7 @@ electron.app.whenReady().then(async () => {
     "save-file",
     async (_, filePath, content, encoding = "utf-8") => {
       try {
-        const normalizedPath = filePath.startsWith("~/") ? path.join(electron.app.getPath("home"), filePath.slice(2)) : filePath;
+        const normalizedPath = filePath.startsWith("~/") ? path$1.join(electron.app.getPath("home"), filePath.slice(2)) : filePath;
         fs.writeFileSync(normalizedPath, content, encoding);
       } catch (error) {
         logger.error("Error saving file:", LogFileType.BACKEND, error);
@@ -8127,12 +7892,12 @@ electron.app.whenReady().then(async () => {
     }
   );
   electron.ipcMain.handle("file-exists", async (_, filePath) => {
-    const normalizedPath = filePath.startsWith("~/") ? path.join(electron.app.getPath("home"), filePath.slice(2)) : filePath;
+    const normalizedPath = filePath.startsWith("~/") ? path$1.join(electron.app.getPath("home"), filePath.slice(2)) : filePath;
     return fs.existsSync(normalizedPath);
   });
   electron.ipcMain.handle("directory-exists", async (_, dirPath) => {
     const home = electron.app.getPath("home");
-    const normalizedPath = dirPath === "~" ? home : dirPath.startsWith("~/") ? path.join(home, dirPath.slice(2)) : dirPath;
+    const normalizedPath = dirPath === "~" ? home : dirPath.startsWith("~/") ? path$1.join(home, dirPath.slice(2)) : dirPath;
     try {
       return fs.statSync(normalizedPath, { throwIfNoEntry: false })?.isDirectory() ?? false;
     } catch {
@@ -8147,7 +7912,16 @@ electron.app.whenReady().then(async () => {
       );
       return { canceled: true, filePaths: [] };
     }
-    return electron.dialog.showOpenDialog(mainWindow, options);
+    const result = await electron.dialog.showOpenDialog(
+      mainWindow,
+      withRememberedDirectory(
+        "open-file",
+        options,
+        pickerFallbackDirectory()
+      )
+    );
+    rememberPickedDirectory("open-file", result.filePaths);
+    return result;
   });
   electron.ipcMain.handle("select-directory", async () => {
     if (!mainWindow) {
@@ -8157,13 +7931,22 @@ electron.app.whenReady().then(async () => {
       );
       return void 0;
     }
-    const result = await electron.dialog.showOpenDialog(mainWindow, {
+    const directoryOptions = {
       properties: ["openDirectory"],
       title: "Select Working Directory",
       // More appropriate title
       buttonLabel: "Select Folder"
       // Correct button label
-    });
+    };
+    const result = await electron.dialog.showOpenDialog(
+      mainWindow,
+      withRememberedDirectory(
+        "select-directory",
+        directoryOptions,
+        pickerFallbackDirectory()
+      )
+    );
+    rememberPickedDirectory("select-directory", result.filePaths, true);
     if (!result.canceled && result.filePaths.length > 0) {
       return result.filePaths[0];
     }
@@ -8177,11 +7960,20 @@ electron.app.whenReady().then(async () => {
       );
       return void 0;
     }
-    const result = await electron.dialog.showOpenDialog(mainWindow, {
+    const fileOptions = {
       properties: ["openFile"],
       title: "Select File",
       buttonLabel: "Open"
-    });
+    };
+    const result = await electron.dialog.showOpenDialog(
+      mainWindow,
+      withRememberedDirectory(
+        "select-file",
+        fileOptions,
+        pickerFallbackDirectory()
+      )
+    );
+    rememberPickedDirectory("select-file", result.filePaths);
     if (!result.canceled && result.filePaths.length > 0) {
       const filePath = result.filePaths[0];
       try {