sideby 0.12.0 → 0.13.0

package/README.md

@@ -77,7 +77,7 @@ cc-switch's docs describe that switch: it writes the live settings file ([README
 | See Claude quota (Codex needs no setup) | `sideby quota setup claude --yes` | [Claude quota](docs/guide/usage.md#claude-quota) |
 | Find the cheapest auto-compact size from your own sessions, and use it in one click | `sideby tune` (or the panel's Context tuning tab) | [Context tuning](docs/guide/usage.md#context-tuning) |
 | See each account's model and effort, and set them per account | `sideby model <account>` (or click the model in the panel) | [Model and effort](docs/guide/usage.md#model-and-effort) |
-| Stop Claude sessions from connecting to claude.ai by themselves (Remote Control), for every account at once | `sideby remote-control off` (or the panel's banner) | [Remote Control](docs/guide/usage.md#remote-control) |
+| Choose whether Claude sessions connect to claude.ai by themselves (Remote Control), for every account at once | `sideby remote-control off` or `on` (or the panel's Settings) | [Remote Control](docs/guide/usage.md#remote-control) |
 | Move on when an account hits its limit | `sideby next claude` | [Handoff](docs/guide/usage.md#when-an-account-hits-its-limit) |
 | Let a running task move to the next account by itself when quota runs low (off by default; see the risk) | `sideby handoff enable` (or the panel) | [Auto Handoff](docs/guide/usage.md#auto-handoff) |
 | Short commands such as `ccw` | `sideby alias add ccw claude:work` | [Shell functions](docs/guide/configuration.md#shell-functions) |

package/dist/build.json

@@ -1 +1 @@
-{"id":"20261016T071613-e5f0f1"}
+{"id":"20261016T155413-627722"}

package/dist/src/cli/commands.d.ts

@@ -44,8 +44,8 @@ export declare function cmdResume(a: ParsedArgs, io: Io): Promise<number>;
 export declare function cmdNext(a: ParsedArgs, io: Io): Promise<number>;
 export declare function cmdDoctor(a: ParsedArgs, io: Io): Promise<number>;
 /**
- * `sideby remote-control [off|undo] [--yes] [--json]` (spec §3.22, ADR-0017): whether Claude sessions connect to
- * claude.ai by themselves, and turning that off for every Account (a preview with exit 10 until --yes).
+ * `sideby remote-control [on|off|undo] [--yes] [--json]` (spec §3.22, ADR-0017): whether Claude sessions connect to
+ * claude.ai by themselves, and turning that on or off for every Account (a preview with exit 10 until --yes).
  */
 export declare function cmdRemoteControl(a: ParsedArgs, io: Io): Promise<number>;
 /**
@@ -74,6 +74,8 @@ export declare function cmdApp(a: ParsedArgs, io: Io): Promise<number>;
  * a Grok Bot window, new or open, and with `--remove` its removal (ADR-0019).
  */
 export declare function cmdDesktop(a: ParsedArgs, io: Io): Promise<number>;
+/** `sideby browser [--enable|--disable] [--yes]` and `sideby browser open <account> [--profile <p>]` (spec §3.24). */
+export declare function cmdBrowser(a: ParsedArgs, io: Io): Promise<number>;
 export declare function cmdAlias(a: ParsedArgs, io: Io): Promise<number>;
 /** `sideby families [family]`: each Family's layout, sign-in and Shared Items, from its FamilyDef (spec §3.16). */
 export declare function cmdFamilies(a: ParsedArgs, io: Io): Promise<number>;

package/dist/src/cli/commands.js

@@ -1,17 +1,18 @@
 import { fileURLToPath } from 'node:url';
 import { aliasesByAccount } from '../core/accounts.js';
 import { listAppProfiles, openAppProfile, parseProfileRef, removeAppProfile } from '../core/app-profiles.js';
+import { browserReport, openInBrowser, setBrowserSignIns } from '../core/browser-profiles.js';
 import { aliasRefs } from '../core/config.js';
 import { openDesktopApp, withDesktopApps } from '../core/desktop-app.js';
 import { UserError } from '../core/errors.js';
 import { requestHandoff } from '../core/handoff-chain.js';
 import { explain, readyDecision, runWithHandoff } from '../core/handoff-run.js';
 import { configureHandoff, handoffHint, handoffStatus } from '../core/handoff-status.js';
-import { runHost } from '../core/launch.js';
+import { installHint, runHost } from '../core/launch.js';
 import { accountModel, setAccountModel } from '../core/model-choice.js';
 import { resolvePaths, tildify } from '../core/paths.js';
 import { USAGE_DAYS } from '../core/quota-levels.js';
-import { groupsToTurnOff, groupsToUndo, } from '../core/remote-control.js';
+import { groupsToTurnOff, groupsToTurnOn, groupsToUndo, } from '../core/remote-control.js';
 import { SHELLS } from '../core/shell-init.js';
 import { suggestAlias, suggestName } from '../panel/page-logic.js';
 import { createRuntime, UnknownFamilyError } from '../runtime.js';
@@ -85,12 +86,13 @@ export async function cmdList(a, io) {
         io.out('No accounts found yet.');
         const installed = families.filter((f) => f.installed);
         if (installed.length === 0)
-            io.out(`Install a host first: ${families.map((f) => `${f.title} (${f.installUrl})`).join(', ')}`);
+            io.out(`Install a host first: ${families.map((f) => `${f.title} (${installHint(f)})`).join(', ')}`);
         else
             io.out(`Run ${installed.map((f) => f.bin).join(' or ')} once, then \`sideby new <family> <name>\`.`);
     }
     else {
         // `= main`: the other Accounts of its Same Login, which share its Quota (spec §3.21).
+        const brokenOf = (id) => families.find((f) => f.id === id)?.brokenBin;
         const sameMark = (refs) => refs?.length ? ` ${c.dim(`= ${refs.map((r) => r.slice(r.indexOf(':') + 1)).join(', ')}`)}` : '';
         const rows = statuses.map((s) => [
             `${c.bold(s.ref)}${sameMark(s.sameLogin)}`,
@@ -104,10 +106,17 @@ export async function cmdList(a, io) {
                         : c.dim('?'),
             s.identity?.email ?? c.dim('—'),
             s.model ?? c.dim('—'),
-            s.hostInstalled ? tildify(s.dir, home) : `${tildify(s.dir, home)} ${c.yellow('(host not installed)')}`,
+            s.hostInstalled
+                ? tildify(s.dir, home)
+                : `${tildify(s.dir, home)} ${c.yellow(brokenOf(s.family) ? '(host install broken)' : '(host not installed)')}`,
             ...(hasDesktop ? [s.desktopApp?.running ? c.green('open') : c.dim('—')] : []),
         ]);
         io.out(table(rows, ['ACCOUNT', 'TYPE', 'LOGIN', 'EMAIL', 'MODEL', 'DIR', ...(hasDesktop ? ['DESKTOP'] : [])]));
+        // One line per Host that cannot run, with what to do: the rows only say which accounts it affects.
+        for (const f of families.filter((x) => !x.installed && statuses.some((s) => s.family === x.id)))
+            io.out(c.yellow(f.brokenBin
+                ? `\n${f.title}'s install is broken (${tildify(f.brokenBin, home)} cannot run, often after an interrupted upgrade); reinstall it: ${installHint(f)}`
+                : `\n${f.title} is not installed; install it: ${installHint(f)}`));
         if (statuses.some((s) => s.sameLogin?.length))
             io.out(c.dim('\n= <account>: signed in as the same login as that account, so they share one quota.'));
         io.out(c.dim('\nsideby run <account>  ·  sideby new <family> <name>  ·  sideby quota  ·  sideby ui'));
@@ -471,13 +480,14 @@ function rcGroupLine(g, home) {
     return `  ${paint(state)} ${c.bold(g.accounts.join(', '))}  ${c.dim(where)}`;
 }
 /**
- * `sideby remote-control [off|undo] [--yes] [--json]` (spec §3.22, ADR-0017): whether Claude sessions connect to
- * claude.ai by themselves, and turning that off for every Account (a preview with exit 10 until --yes).
+ * `sideby remote-control [on|off|undo] [--yes] [--json]` (spec §3.22, ADR-0017): whether Claude sessions connect to
+ * claude.ai by themselves, and turning that on or off for every Account (a preview with exit 10 until --yes).
  */
 export async function cmdRemoteControl(a, io) {
     const [action, extra] = a.positionals;
-    if (extra !== undefined || (action !== undefined && action !== 'off' && action !== 'undo'))
-        throw new UsageError('usage: sideby remote-control [off|undo] [--yes] [--json]');
+    if (extra !== undefined ||
+        (action !== undefined && action !== 'on' && action !== 'off' && action !== 'undo'))
+        throw new UsageError('usage: sideby remote-control [on|off|undo] [--yes] [--json]');
     const wantJson = a.flags.has('json');
     const rt = await createRuntime();
     const home = rt.paths.home;
@@ -501,9 +511,15 @@ export async function cmdRemoteControl(a, io) {
             io.out(c.cyan('\nRun `sideby remote-control off` so no session connects by itself (it shows the change first).'));
         return 0;
     }
-    const todo = action === 'off' ? groupsToTurnOff(groups) : groupsToUndo(groups);
+    const apply = () => action === 'off' ? rt.remoteControlOff() : action === 'on' ? rt.remoteControlOn() : rt.remoteControlUndo();
+    const todo = action === 'off'
+        ? groupsToTurnOff(groups)
+        : action === 'on'
+            ? groupsToTurnOn(groups)
+            : groupsToUndo(groups);
+    const verb = action === 'off' ? 'turn it off' : action === 'on' ? 'turn it on' : 'undo';
     if (todo.length === 0) {
-        const r = action === 'off' ? await rt.remoteControlOff() : await rt.remoteControlUndo();
+        const r = await apply();
         if (wantJson)
             out({ applied: false, groups: show(groups), message: r.message });
         else
@@ -515,26 +531,30 @@ export async function cmdRemoteControl(a, io) {
             out({
                 applied: false,
                 groups: show(todo),
-                message: `Run again with --yes to ${action === 'off' ? 'turn it off' : 'undo'}.`,
+                message: `Run again with --yes to ${verb}.`,
             });
         else {
             io.out(action === 'off'
                 ? 'Turn off Remote Control at startup?'
-                : 'Put back the Remote Control setting sideby replaced?');
+                : action === 'on'
+                    ? 'Turn on Remote Control at startup?'
+                    : 'Put back the Remote Control setting sideby replaced?');
             for (const g of todo) {
-                const to = action === 'off' ? 'false' : 'what it was before';
+                const to = action === 'off' ? 'false' : action === 'on' ? 'true' : 'what it was before';
                 const from = g.state === 'default' ? 'not set' : g.state === 'on' ? 'true' : 'false';
                 io.out(`  ${tildify(g.file, home)}: remoteControlAtStartup ${from} -> ${to}`);
                 io.out(c.dim(`    used by ${g.accounts.join(', ')}`));
             }
             io.out(action === 'off'
                 ? 'Sessions already running stay connected until you restart them. You can still start it in a session with /remote-control, and undo this with `sideby remote-control undo`.'
-                : 'New sessions go back to the previous setting.');
-            io.out(`Run again with --yes to ${action === 'off' ? 'turn it off' : 'undo'}.`);
+                : action === 'on'
+                    ? 'Every new session then connects to claude.ai and the Claude app, where every device signed in to that account can read it. Undo this with `sideby remote-control undo`.'
+                    : 'New sessions go back to the previous setting.');
+            io.out(`Run again with --yes to ${verb}.`);
         }
         return 10;
     }
-    const r = action === 'off' ? await rt.remoteControlOff() : await rt.remoteControlUndo();
+    const r = await apply();
     const results = r.results.map((x) => ({ ...x, file: tildify(x.file, home) }));
     if (wantJson)
         out({ applied: r.ok, results, message: r.message });
@@ -1069,6 +1089,7 @@ export async function cmdUpdate(a, io) {
             updated: r.ok,
             message: r.message,
             restartedPanel: r.restartedPanel,
+            refreshedApp: r.refreshedApp,
             skill: SKILL_INSTALL,
             ...(r.ok ? {} : { output: r.output }),
         });
@@ -1081,6 +1102,8 @@ export async function cmdUpdate(a, io) {
     io.out(`${c.green('✓')} ${r.message}.`);
     if (r.restartedPanel)
         io.out('  The background panel is restarting with the new version; open pages reload by themselves.');
+    if (r.refreshedApp)
+        io.out('  The desktop app now starts the new version and shows its icon.');
     io.out('  A `sideby ui` running in a terminal and sessions already running keep the old version until you restart them.');
     io.out(`  If you use the sideby skill, update it too: ${SKILL_INSTALL}`);
     return 0;
@@ -1180,6 +1203,83 @@ export async function cmdDesktop(a, io) {
         io.err(c.cyan(n));
     return 0;
 }
+/** `sideby browser [--enable|--disable] [--yes]` and `sideby browser open <account> [--profile <p>]` (spec §3.24). */
+export async function cmdBrowser(a, io) {
+    const [sub, ref, ...extra] = a.positionals;
+    const rt = await createRuntime();
+    const home = rt.paths.home;
+    if (sub === 'open') {
+        if (!ref || extra.length || a.rest.length)
+            throw new UsageError('usage: sideby browser open <account> [--profile <folder|name>]');
+        const profile = a.flags.get('profile');
+        const r = await openInBrowser(rt, await rt.resolve(ref), typeof profile === 'string' ? profile : undefined);
+        if (a.flags.has('json'))
+            json(io, r);
+        else
+            io.out(`${c.green('✓')} opened ${r.url} in Chrome as ${c.bold(r.profile.name)} for ${c.bold(r.ref)}`);
+        return 0;
+    }
+    if (sub !== undefined || a.rest.length)
+        throw new UsageError('usage: sideby browser [--enable|--disable] [--yes] | sideby browser open <account>');
+    const enable = a.flags.has('enable');
+    if (enable || a.flags.has('disable')) {
+        if (enable && a.flags.has('disable'))
+            throw new UsageError('pass --enable or --disable, not both');
+        const r = await setBrowserSignIns(rt, enable, { apply: a.flags.has('yes') });
+        if (a.flags.has('json'))
+            json(io, r);
+        else if (!r.changed)
+            io.out(`Finding browser sign-ins is already ${enable ? 'on' : 'off'}; nothing to change.`);
+        else if (!r.applied) {
+            if (enable) {
+                io.out('sideby will read, on this computer only (nothing is sent anywhere):');
+                for (const x of r.reads)
+                    io.out(`  - ${x}`);
+                io.out('It never opens cookies, saved passwords or the Keychain, and never changes Chrome.');
+            }
+            io.out(`\nChange to ${tildify(r.file, home)}: browser.signIns ${enable ? 'off → on' : 'on → off'}`);
+            io.out(c.cyan(`Apply it with \`sideby browser --${enable ? 'enable' : 'disable'} --yes\`.`));
+        }
+        else
+            io.out(`${c.green('✓')} finding browser sign-ins is ${enable ? 'on' : 'off'}.`);
+        return r.changed && !r.applied ? 10 : 0;
+    }
+    const accounts = await rt.accounts();
+    const r = await browserReport(rt, accounts);
+    if (a.flags.has('json')) {
+        json(io, r);
+        return 0;
+    }
+    for (const p of r.problems)
+        io.err(c.yellow(p));
+    if (!r.enabled) {
+        io.out('Finding which Chrome browser user signed in to each account is off.');
+        io.out(c.cyan('Turn it on with `sideby browser --enable` (it shows what it reads first).'));
+        io.out(c.dim('Without it, open a website in a browser user you name: sideby browser open <account> --profile <name>'));
+        return 0;
+    }
+    if (!r.found) {
+        io.out('Google Chrome has no data on this computer yet; open it once, then try again.');
+        return 0;
+    }
+    const signedIn = new Set(r.profiles.flatMap((p) => p.signIns));
+    const now = new Date();
+    io.out(table(r.profiles.map((p) => [
+        p.name,
+        p.email ?? c.dim('-'),
+        p.dir,
+        p.signIns.join(', ') || c.dim('-'),
+        p.changedAt ? clock(p.changedAt, now) : '-',
+    ]), ['Browser user', 'Google account', 'Folder', 'Signed in to', 'Changed']));
+    const missing = accounts.filter((x) => r.families.matched.includes(x.family) && x.kind !== 'api' && !signedIn.has(x.ref));
+    if (missing.length)
+        io.out(c.dim(`\nNo browser user found for: ${missing.map((x) => x.ref).join(', ')}`));
+    if (r.families.openOnly.length)
+        io.out(c.dim(`${r.families.openOnly.join(', ')}: the website keeps no id to match; open it with --profile.`));
+    io.out(c.dim('\nRead from Chrome on this computer only; a browser user that signed out may still show.'));
+    io.out(c.dim('Open one: sideby browser open <account> [--profile <name>]'));
+    return 0;
+}
 export async function cmdAlias(a, io) {
     const [sub, alias, target, ...more] = a.positionals;
     const usage = 'usage: sideby alias add <short-command> <account> [-- host args]  |  sideby alias rm <short-command>';
@@ -1221,7 +1321,7 @@ export async function cmdFamilies(a, io) {
     families.forEach((f, i) => {
         if (i)
             io.out('');
-        io.out(`${c.bold(f.title)} (${f.id})  ${f.installed ? c.green('installed') : c.yellow(`not installed: ${f.installUrl}`)}`);
+        io.out(`${c.bold(f.title)} (${f.id})  ${f.installed ? c.green('installed') : c.yellow(f.brokenBin ? `install broken (${tildify(f.brokenBin, rt.paths.home)} cannot run); reinstall: ${installHint(f)}` : `not installed: ${installHint(f)}`)}`);
         io.out(`  Accounts   ~/${f.layout.main} (main), ~/${f.layout.account}; selected with ${f.selectVar}`);
         io.out(`  Sign in    sideby login ${f.id}:<name>  ${c.dim(f.login.args ? `(runs ${[f.bin, ...f.login.args].join(' ')})` : `(${f.login.hint})`)}`);
         const yes = (b) => (b ? c.green('yes') : c.dim('no public source'));

package/dist/src/cli/json-schemas.js

@@ -50,7 +50,9 @@ const FamilyInfo = Type.Object({
     title: Str,
     bin: Str,
     installUrl: Str,
+    installCommand: Type.Optional(Str),
     installed: Type.Boolean(),
+    brokenBin: Type.Optional(Str),
     plugin: Str,
     tuning: Type.Boolean(),
 });
@@ -256,7 +258,12 @@ export const OUTPUT_SCHEMAS = {
     }, { title: 'sideby tune apply|undo --json' }),
     'remote-control': Type.Object({
         schemaVersion: Version,
-        action: Type.Union([Type.Literal('status'), Type.Literal('off'), Type.Literal('undo')]),
+        action: Type.Union([
+            Type.Literal('status'),
+            Type.Literal('on'),
+            Type.Literal('off'),
+            Type.Literal('undo'),
+        ]),
         applied: Type.Optional(Type.Boolean({ description: 'True once the change was written (or undone).' })),
         groups: Type.Optional(Type.Array(Type.Object({
             file: Str,
@@ -491,6 +498,47 @@ export const OUTPUT_SCHEMAS = {
             description: 'False when only the plan was shown; run again with --yes (exit 10).',
         }),
     }, { title: 'sideby desktop grok-bot:<name> --remove --json' }),
+    browser: Type.Object({
+        schemaVersion: Version,
+        enabled: Type.Boolean({
+            description: 'config `browser.signIns`. When false nothing of the browser was read and `profiles` is empty.',
+        }),
+        browser: Type.String({ description: 'The browser read, `Google Chrome`.' }),
+        found: Type.Boolean({ description: "Chrome's user data folder exists on this Mac." }),
+        profiles: Type.Array(Type.Object({
+            dir: Type.String({ description: "The browser user's folder, such as `Default` or `Profile 7`." }),
+            name: Type.String({ description: 'The name Chrome shows; it may be an email.' }),
+            email: Type.Optional(Type.String({ description: 'The Google account this browser user is signed in to Chrome with.' })),
+            signIns: Type.Array(Str, {
+                description: "Refs of the accounts this browser user signed in to on the vendor's website, as far as its local data shows; it may be left over from before a sign-out.",
+            }),
+            changedAt: Type.Optional(Type.String({ description: 'When its Local Storage last changed (ISO 8601).' })),
+        }), { description: 'Most recently changed first.' }),
+        families: Type.Object({
+            matched: Type.Array(Str, { description: 'Families whose accounts can be matched (claude, codex).' }),
+            openOnly: Type.Array(Str, {
+                description: 'Families that can only be opened in a browser user given with --profile (grok).',
+            }),
+        }),
+        problems: Type.Array(Str),
+    }, { title: 'sideby browser --json' }),
+    'browser-switch': Type.Object({
+        schemaVersion: Version,
+        enabled: Type.Boolean({ description: 'The value asked for.' }),
+        changed: Type.Boolean(),
+        applied: Type.Boolean({
+            description: 'False when only the change was shown; run again with --yes (exit 10).',
+        }),
+        file: Type.String({ description: 'The config file.' }),
+        reads: Type.Array(Str, { description: 'What sideby reads while it is on, all on this computer.' }),
+    }, { title: 'sideby browser --enable|--disable --json' }),
+    'browser-open': Type.Object({
+        schemaVersion: Version,
+        ref: Str,
+        url: Str,
+        profile: Type.Object({ dir: Str, name: Str }),
+        command: Type.Array(Str, { description: 'The `open` command sideby ran.' }),
+    }, { title: 'sideby browser open --json' }),
     update: Type.Object({
         schemaVersion: Version,
         current: Type.String({ description: 'The running sideby version.' }),
@@ -513,6 +561,9 @@ export const OUTPUT_SCHEMAS = {
         restartedPanel: Type.Optional(Type.Boolean({
             description: 'A background Panel was running and starts again with the new version.',
         })),
+        refreshedApp: Type.Optional(Type.Boolean({
+            description: 'The desktop app (`sideby app install`) was installed and was written again by the new version.',
+        })),
         skill: Type.Optional(Type.String({ description: 'The command that updates the sideby skill; sideby never runs it.' })),
         output: Type.Optional(Type.String({ description: 'What the failed install command printed.' })),
     }, { title: 'sideby update --json' }),

package/dist/src/cli/main.js

@@ -34,7 +34,7 @@ Usage:
                                       from your last 7 days of sessions (read-only)
   sideby model <account> [<model>|default] [--effort <level>|default] [--yes]
                                       show or set the model and effort sideby starts this account with
-  sideby remote-control [off|undo] [--yes]
+  sideby remote-control [on|off|undo] [--yes]
                                       whether Claude sessions connect to claude.ai by themselves;
                                       off stops that for every account (shows the change first)
   sideby handoff status               what Auto Handoff still needs on this machine
@@ -52,6 +52,10 @@ Usage:
   sideby desktop <account>            open the desktop app (Claude Desktop, the Codex app) as this
                                       account, next to the others (macOS)
   sideby desktop grok-bot:<name>      open a Grok Bot window, a new one for a new name (macOS)
+  sideby browser [--enable [--yes]]   which Chrome browser user signed in to each account's website
+                                      (read on this computer only; off until you enable it)
+  sideby browser open <account> [--profile <name>]
+                                      open claude.ai, chatgpt.com or grok.com in that browser user
   sideby app install [--url <url>]    add a sideby app that opens the panel (macOS, Linux)
   sideby app uninstall                remove that app
   sideby shell-init zsh|bash          print shell functions, e.g. eval "$(sideby shell-init zsh)"
@@ -62,8 +66,8 @@ Usage:
 
 Options:
   --json        machine-readable output (list, new, next, alias, doctor, quota, tune, model, remote-control, handoff,
-                families, plugins, app, desktop, update)
-  -h, --help    show this help; \`sideby <command> --help\` for new, alias, login, doctor, families, desktop
+                families, plugins, app, desktop, browser, update)
+  -h, --help    show this help; \`sideby <command> --help\` for new, alias, login, doctor, families, desktop, browser
   -v, --version show the version
 
 An <account> is <family>:<name> (claude:work) or just <name> when it is unique.
@@ -164,6 +168,30 @@ Examples:
   sideby desktop grok-bot:002 --remove --yes
 Exit: 0 opened, brought to the front or removed; 1 not macOS, no desktop app for that host, API account, app not
 installed, a bad window name, or the app did not open; 10 --remove without --yes; 2 malformed command line.`,
+    browser: `sideby browser [--enable|--disable] [--yes] [--json]
+       sideby browser open <account> [--profile <folder|name>] [--json]
+
+Find which Google Chrome browser user signed in to each account's website (claude.ai for claude accounts,
+chatgpt.com for codex accounts), and open the website in that browser user. macOS only for now.
+
+Everything is read on this computer and sent nowhere. sideby reads each browser user's name, the key names (never
+the values) claude.ai and chatgpt.com keep in that browser user's Local Storage, and the account id in each Claude and
+Codex login file, only to compare. It never opens cookies, saved passwords or the Keychain, and never changes Chrome.
+It is off until you turn it on: --enable shows what it reads and changes config browser.signIns after --yes.
+
+"Signed in to" means that browser user's data shows a sign-in as that account; it may be left over from before a
+sign-out. grok.com keeps no id to match, so grok accounts can only be opened with --profile.
+
+open uses the one browser user that signed in to the account, or the one --profile names (folder such as
+"Profile 7", or the name Chrome shows). It runs: open -na "Google Chrome" --args --profile-directory=<folder> <url>.
+
+Examples:
+  sideby browser --enable --yes
+  sideby browser
+  sideby browser open cc008
+  sideby browser open grok:main --profile Work
+Exit: 0 shown, changed or opened; 1 not macOS, Chrome not installed, no or several browser users to choose from, or
+Chrome did not open; 10 --enable/--disable without --yes; 2 malformed command line.`,
     families: `sideby families [family] [--json]
 
 For each host (built in or from a plugin): where its accounts live, the variable that selects one, how to sign
@@ -204,6 +232,7 @@ const COMMANDS = {
     ui: { flags: ['no-open', 'background', 'stop', 'serve-detached'], valued: ['port'] },
     app: { flags: ['json'], valued: ['url'] },
     desktop: { flags: ['json', 'remove', 'yes'] },
+    browser: { flags: ['json', 'enable', 'disable', 'yes'], valued: ['profile'] },
     'shell-init': { flags: ['write'] },
     plugins: { flags: ['json'] },
     families: { flags: ['json'] },
@@ -379,6 +408,8 @@ async function dispatch(cmd, parsed, io, cmds) {
             return await cmds.cmdApp(parsed, io);
         case 'desktop':
             return await cmds.cmdDesktop(parsed, io);
+        case 'browser':
+            return await cmds.cmdBrowser(parsed, io);
         case 'shell-init':
             return await cmds.cmdShellInit(parsed, io);
         case 'plugins':

package/dist/src/core/brand-mark.d.ts

@@ -64,12 +64,6 @@ export declare const MARK_VIEWBOX: {
     readonly y: 3;
     readonly size: 69;
 };
-/** The square around one buddy at full size, for the small cut (favicon). */
-export declare const BUDDY_VIEWBOX: {
-    readonly x: 3;
-    readonly y: 10.5;
-    readonly size: 58;
-};
 /**
  * The mark as SVG children (no outer <svg>). With `front` omitted the blue buddy's body has no fill of its own, so it
  * takes the surrounding `fill` (the Panel's `--logo-fg`, which Portals set with `logoColor`); everything else is fixed.
@@ -79,5 +73,9 @@ export declare function markSvgBody(front?: string): string;
 export declare const MARK_SVG: string;
 /** `<basePath>/icon.svg`: the whole mark on a transparent square, for a Portal's tab or menu (ADR-0006 amendment). */
 export declare const ICON_SVG: string;
-/** `<basePath>/favicon.svg`: the small cut, the blue buddy alone, for sizes below about 24 px (ADR-0022). */
+/**
+ * `<basePath>/favicon.svg`: the small cut for sizes below about 24 px, redrawn for a 16 pt browser tab (ADR-0022):
+ * the blue buddy alone on a 32 grid, its body filling the width, short feet and no arms, `>` or mouth, bigger eyes,
+ * and a 2-unit outline (about 6% of the canvas). The same rules as the Local tools Portal's tab icons.
+ */
 export declare const FAVICON_SVG: string;

package/dist/src/core/brand-mark.js

@@ -46,8 +46,6 @@ export const MARK = {
 };
 /** The square the pair is drawn in, in mark units (the Panel's 40 px tile and the app icon tile). */
 export const MARK_VIEWBOX = { x: -2.5, y: 3, size: 69 };
-/** The square around one buddy at full size, for the small cut (favicon). */
-export const BUDDY_VIEWBOX = { x: 3, y: 10.5, size: 58 };
 function buddySvg(b, line, bodyFill) {
     const color = (fill) => {
         if (fill === 'none')
@@ -83,6 +81,21 @@ export const MARK_SVG = `<svg viewBox="${viewBox(MARK_VIEWBOX)}">${markSvgBody()
 /** `<basePath>/icon.svg`: the whole mark on a transparent square, for a Portal's tab or menu (ADR-0006 amendment). */
 export const ICON_SVG = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="${viewBox(MARK_VIEWBOX)}" role="img" aria-label="sideby">` +
     `${markSvgBody(MARK_COLORS.blue.body)}</svg>`;
-/** `<basePath>/favicon.svg`: the small cut, the blue buddy alone, for sizes below about 24 px (ADR-0022). */
-export const FAVICON_SVG = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="${viewBox(BUDDY_VIEWBOX)}">` +
-    `<g ${OUTLINE}>${buddySvg({ ...MARK.front, x: 0, y: 0, scale: 1 }, MARK.line)}</g></svg>`;
+/**
+ * `<basePath>/favicon.svg`: the small cut for sizes below about 24 px, redrawn for a 16 pt browser tab (ADR-0022):
+ * the blue buddy alone on a 32 grid, its body filling the width, short feet and no arms, `>` or mouth, bigger eyes,
+ * and a 2-unit outline (about 6% of the canvas). The same rules as the Local tools Portal's tab icons.
+ */
+export const FAVICON_SVG = (() => {
+    const blue = MARK_COLORS.blue;
+    const ink = MARK_COLORS.ink;
+    const light = MARK_COLORS.light;
+    const body = BUDDY.paths[2].d;
+    return (`<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32" role="img" aria-label="sideby">` +
+        `<g stroke-linecap="round" stroke-linejoin="round" transform="translate(0 -1.3)">` +
+        `<path d="M8.5 25 Q7.6 31 11.5 30.6 Q14 30.4 14 26.6 M18 26.6 Q18 30.4 20.5 30.6 Q24.4 31 23.5 25" fill="${blue.shade}" stroke="${ink}" stroke-width="2"/>` +
+        `<g transform="translate(-7.2 -12.675) scale(0.725)"><path d="${body}" fill="${blue.body}" stroke="${ink}" stroke-width="2.759"/>` +
+        `<ellipse cx="22.5" cy="38" rx="5.5" ry="7" fill="${ink}"/><ellipse cx="41.5" cy="38" rx="5.5" ry="7" fill="${ink}"/>` +
+        `<ellipse cx="20.6" cy="35.4" rx="2.1" ry="2.6" fill="${light}"/><ellipse cx="39.6" cy="35.4" rx="2.1" ry="2.6" fill="${light}"/>` +
+        `</g></g></svg>`);
+})();

package/dist/src/core/browser-profiles.d.ts

@@ -0,0 +1,71 @@
+import type { Runtime } from '../runtime.ts';
+import type { Account } from '../types.ts';
+export declare const CHROME: {
+    title: string;
+    bundleId: string;
+    bundleNames: string[];
+};
+export declare const CHROME_DOWNLOAD = "https://www.google.com/chrome/";
+/** Chrome's user data folder on macOS. */
+export declare function chromeUserData(home: string): string;
+export interface BrowserProfile {
+    /** The profile's folder inside Chrome's user data, such as `Default` or `Profile 7`. */
+    dir: string;
+    /** The name Chrome shows for it. May be an email; the Panel masks it with identities. */
+    name: string;
+    /** The Google account this browser user is signed in to Chrome with, if any. */
+    email?: string;
+    /** Refs of the Accounts this profile signed in to, as far as its local data shows. */
+    signIns: string[];
+    /** When its Local Storage last changed (ISO 8601), if known. */
+    changedAt?: string;
+}
+export interface BrowserReport {
+    /** config `browser.signIns`; when false nothing of the browser was read. */
+    enabled: boolean;
+    browser: string;
+    /** Chrome's user data folder exists (macOS, and Windows' Chrome on WSL). */
+    found: boolean;
+    /** Newest change first. */
+    profiles: BrowserProfile[];
+    /** Families whose Accounts can be matched, and those that can only be opened in a profile the user picks. */
+    families: {
+        matched: string[];
+        openOnly: string[];
+    };
+    /** Problems met while reading, without file contents. */
+    problems: string[];
+}
+/** `id` appears in `key` as a whole segment: not glued to another letter, digit or underscore. */
+export declare function keyHasId(key: string, id: string): boolean;
+/** The Browser Report for `sideby browser` and the Panel. Reads nothing of the browser while it is off. */
+export declare function browserReport(rt: Runtime, accounts: readonly Account[]): Promise<BrowserReport>;
+export interface BrowserOpenResult {
+    ref: string;
+    url: string;
+    profile: {
+        dir: string;
+        name: string;
+    };
+    command: string[];
+}
+/**
+ * Opens an Account's vendor website in one Browser Profile: the one given (folder or name), else the only profile
+ * that signed in to it. Several or none: refuses with the choices, so the caller can ask. `profile` must be a folder
+ * Chrome lists in `Local State`.
+ */
+export declare function openInBrowser(rt: Runtime, account: Account, profile?: string): Promise<BrowserOpenResult>;
+/** What turning Browser Sign-ins on reads, for the confirmation in the CLI and the Panel. */
+export declare const BROWSER_READS: readonly ["the name of each Google Chrome browser user and the Google account email it uses in Chrome (from Chrome's Local State)", 'the key names claude.ai and chatgpt.com keep in each browser user’s Local Storage, never their values', 'the account id in each Claude and Codex login file, only to compare; it is never shown or saved'];
+export interface BrowserSwitch {
+    enabled: boolean;
+    changed: boolean;
+    applied: boolean;
+    file: string;
+    /** What is read while it is on. */
+    reads: readonly string[];
+}
+/** Turns Browser Sign-ins on or off in config `browser.signIns`; without `apply`, shows the change only. */
+export declare function setBrowserSignIns(rt: Runtime, on: boolean, opts: {
+    apply: boolean;
+}): Promise<BrowserSwitch>;