stagent 0.1.3 → 0.1.5

package/README.md

@@ -1,34 +1,19 @@
 # Stagent
 
-> A governed AI agent operations workspace for running, supervising, and reusing AI work through projects, workflows, documents, profiles, schedules, inbox approvals, and live monitoring.
-
-[![Download macOS Desktop](https://img.shields.io/badge/Download-macOS_Desktop-0a7cff?style=for-the-badge&logo=apple)](https://github.com/navam-io/stagent/releases/latest/download/Stagent.dmg) [![GitHub Releases](https://img.shields.io/github/v/release/navam-io/stagent?display_name=release&style=for-the-badge)](https://github.com/navam-io/stagent/releases/latest)
+> Governed AI agent operations with reusable profiles, workflow blueprints, scheduled runs, and local-first oversight.
 
 [![Next.js 16](https://img.shields.io/badge/Next.js-16-black)](https://nextjs.org/) [![React 19](https://img.shields.io/badge/React-19-61DAFB)](https://react.dev/) [![TypeScript](https://img.shields.io/badge/TypeScript-strict-3178C6)](https://www.typescriptlang.org/) [![Claude Agent SDK](https://img.shields.io/badge/Claude-Agent_SDK-D97706)](https://docs.anthropic.com/) [![OpenAI Codex App Server](https://img.shields.io/badge/OpenAI-Codex_App_Server-10A37F)](https://developers.openai.com/codex/app-server) [![License](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](LICENSE)
 
-## Why Stagent
-
-AI agents are powerful, but production deployment breaks down when teams cannot see what the agent is doing, understand which rules it is following, or intervene before an unsafe action lands. Stagent solves that operating problem.
-
-Stagent is a local-first AI operations workspace built around governed execution and reusable automation primitives. Instead of treating every agent run as a one-off prompt, it gives teams a structured system of home workspace signals, execution dashboards, project context, workflow blueprints, reusable profiles, schedules, documents, inbox approvals, and live monitoring.
-
-## Get Started
+## Quick Start
 
-### Download Desktop for macOS
-
-**Primary install path:** [Download the latest macOS desktop release](https://github.com/navam-io/stagent/releases/latest/download/Stagent.dmg)
-
-Grab the latest `Stagent.dmg` or `Stagent.app.zip` asset from GitHub Releases, then move `Stagent.app` into `/Applications`.
-
-Current desktop release notes:
-
-- macOS-only for now
-- GitHub desktop releases are intended to be Developer ID signed and notarized; local smoke builds created with `npm run desktop:release -- --skip-upload` will still warn if Apple credentials are not configured
-- the current desktop wrapper expects `node` to be available on the machine
+```bash
+npx stagent
+```
 
-<img src="./output/playwright/home-playwright-after.png" alt="Stagent home workspace" width="1200" />
+Open [localhost:3000](http://localhost:3000).
 
-### Repository development
+<details>
+<summary>Contributor setup (clone + dev server)</summary>
 
 ```bash
 git clone <repo-url> && cd stagent && npm install
@@ -43,7 +28,29 @@ EOF
 npm run dev
 ```
 
-Open [localhost:3000](http://localhost:3000) to get started.
+</details>
+
+**Profiles & Policies** · **Blueprints & Schedules** · **Open Source**
+
+<img src="https://unpkg.com/stagent@latest/public/readme/home-workspace.png" alt="Stagent home workspace" width="1200" />
+
+| Home Workspace | Reusable Profiles | Workflow Blueprints | Governed Execution |
+|:-:|:-:|:-:|:-:|
+| Workspace briefing with active work, pending review, project signals, and live activity | Specialist definitions with prompts, tool policy, and runtime tuning you can reuse | Pre-configured templates with dynamic forms, YAML editing, and lineage tracking | Human-in-the-loop approvals, tool permissions, and ambient supervision |
+
+---
+
+## Why Stagent
+
+AI agents are powerful — but production use breaks down when teams cannot see what the agent is doing, which rules it follows, or intervene before an unsafe action lands. Stagent gives you a governed operations workspace where every run is visible, every profile is reusable, and every approval is auditable. Run it locally with `npx stagent` and own your data from day one.
+
+---
+
+## Runtime Bridge
+
+Stagent ships a shared runtime registry that routes tasks, schedules, and workflow steps through two governed execution backends: **Claude Code** (Anthropic Claude Agent SDK) and **OpenAI Codex App Server**. Both land in the same inbox, monitoring, and task-state surfaces — so switching providers is a config change, not a rewrite.
+
+---
 
 ## Feature Highlights
 
@@ -69,33 +76,7 @@ Open [localhost:3000](http://localhost:3000) to get started.
 
 ## Architecture
 
-```
-┌─────────────────────────────────────────────────────────┐
-│                    Browser (React 19)                    │
-│  Home · Dashboard · Projects · Documents · Workflows     │
-│  Profiles · Schedules · Inbox · Monitor · Settings       │
-└──────────────┬──────────────────────┬────────────────────┘
-               │ Server Components    │ API Routes
-               │ (direct DB queries)  │ (mutations only)
-┌──────────────▼──────────────────────▼────────────────────┐
-│                  Next.js 16 Server                        │
-│                                                           │
-│  ┌─────────────┐  ┌──────────────┐  ┌────────────────┐  │
-│  │ Drizzle ORM │  │ Runtime      │  │ SSE Stream     │  │
-│  │ (SQLite)    │  │ Registry     │  │ (Logs)         │  │
-│  └──────┬──────┘  └──────┬───────┘  └─────┬──────────┘  │
-│         │                │                 │              │
-│  ┌──────┴──────┐  ┌─────┴────────────┐  ┌─┴───────────┐ │
-│  │ Scheduler   │  │ Claude + OpenAI  │  │ Permission  │ │
-│  │ Engine      │  │ runtime adapters │  │ Checker     │ │
-│  └─────────────┘  └──────────────────┘  └─────────────┘ │
-└──────────┬────────────────┬─────────────────┬────────────┘
-           │                │                 │
-    ┌──────▼──────┐  ┌─────▼─────────────┐  ┌─────▼──────┐
-    │ ~/.stagent/ │  │ Anthropic / OpenAI│  │  Browser   │
-    │ stagent.db  │  │ runtime backends  │  │ EventSource│
-    └─────────────┘  └───────────────────┘  └────────────┘
-```
+<img src="https://unpkg.com/stagent@latest/public/readme/architecture.svg" alt="Stagent architecture diagram" width="900" />
 
 **Key design decisions:**
 
@@ -125,7 +106,7 @@ Create and organize projects as containers for related tasks. Each project can s
 ### Agent
 
 #### Provider Runtimes
-Stagent now supports two governed execution runtimes behind a shared runtime registry:
+Stagent supports two governed execution runtimes behind a shared runtime registry:
 - **Claude Code** via the Anthropic Claude Agent SDK
 - **OpenAI Codex App Server** via `codex app-server`
 
@@ -149,7 +130,7 @@ Multi-step task orchestration with three patterns:
 State machine engine with step-level retry, project association, and real-time status visualization.
 
 #### Parallel + Swarm Workflows
-Stagent now supports two bounded expansion patterns on top of the workflow engine:
+Stagent supports two bounded expansion patterns on top of the workflow engine:
 - **Parallel research fork/join** — 2-5 concurrent branches followed by one synthesis step
 - **Swarm orchestration** — mayor → worker pool → refinery with retryable stages and configurable worker concurrency
 
@@ -217,10 +198,7 @@ File upload with drag-and-drop in task creation. Type-aware content preview for
 Configuration hub with provider-aware sections: Claude authentication (API key or OAuth), OpenAI Codex runtime API-key management, tool permissions (saved "Always Allow" patterns with revoke), and data management.
 
 #### CLI
-Stagent still uses a small Node sidecar under the hood. It is built from `bin/cli.ts` into `dist/cli.js`, but it is now an internal desktop bootstrap rather than a user-facing distribution channel.
-
-#### Tauri Desktop
-The repo produces macOS desktop artifacts via Tauri. Local development uses `npm run desktop:dev`, local packaging uses `npm run desktop:build`, and release publishing now runs locally via `npm run desktop:release` so the uploaded GitHub assets stay on stable names: `Stagent.dmg` and `Stagent.app.zip`. Published releases must be built with `APPLE_SIGNING_IDENTITY` plus notarization credentials so the downloaded app clears Gatekeeper without the "Apple could not verify" malware warning. Keep `public/desktop-icon-512.png` as the dedicated rounded desktop source icon with transparent corners; `public/icon-512.png` remains the square web/PWA icon. The local release script also stamps the same branded icon onto the mounted DMG volume so Finder shows the corrected Stagent icon during install.
+The `npx stagent` entry point boots a Next.js server from the published npm package. It is built from `bin/cli.ts` into `dist/cli.js` using tsup, and serves as the primary distribution channel — no clone required.
 
 #### Database
 SQLite with WAL mode via better-sqlite3 + Drizzle ORM. Eight tables: `projects`, `tasks`, `workflows`, `agent_logs`, `notifications`, `documents`, `schedules`, `settings`. Self-healing bootstrap — tables are created on startup if missing.
@@ -257,29 +235,6 @@ npm test               # Run Vitest
 npm run test:coverage  # Coverage report
 ```
 
-## Desktop Release Checklist
-
-```bash
-npm run desktop:release
-```
-
-For a build-only smoke check, run `npm run desktop:release -- --skip-upload`.
-
-Before publishing a real desktop release, configure Apple signing once on the release machine:
-
-```bash
-export APPLE_SIGNING_IDENTITY="Developer ID Application: Your Name (TEAMID)"
-xcrun notarytool store-credentials stagent-notary \
-  --apple-id "you@example.com" \
-  --team-id "TEAMID" \
-  --password "app-specific-password"
-export APPLE_NOTARY_PROFILE="stagent-notary"
-```
-
-You can use direct credentials instead of a keychain profile by exporting `APPLE_ID`, `APPLE_APP_SPECIFIC_PASSWORD`, and `APPLE_TEAM_ID`.
-
-The release script builds locally on macOS, signs the app, notarizes and staples the app bundle and DMG when Apple credentials are configured, verifies the DMG, creates or updates the `desktop-v<package.json version>` GitHub release, uploads `Stagent.dmg` and `Stagent.app.zip`, and refreshes the stable download URL at `https://github.com/navam-io/stagent/releases/latest/download/Stagent.dmg`. Uploads now fail fast unless Developer ID signing and notarization are configured so unsigned artifacts are not published by accident.
-
 ### Project Structure
 
 ```
@@ -383,7 +338,6 @@ All 14 features shipped across three layers:
 | **Agent Self-Improvement** | Agents learn patterns and update context with human approval |
 | **Document Output Generation** | Agent-generated documents as deliverables |
 | **Parallel Workflows** | Concurrent step execution within workflows |
-| **Tauri Desktop** | Native desktop app packaging |
 
 ---
 
@@ -395,7 +349,7 @@ All 14 features shipped across three layers:
 4. Run `npm test` and `npx tsc --noEmit`
 5. Submit a pull request
 
-See `CLAUDE.md` for architecture details and development conventions.
+See `AGENTS.md` for architecture details and development conventions.
 
 ## License
 

package/dist/cli.js

@@ -63,15 +63,12 @@ function resolveNextEntrypoint(cwd, exists = existsSync) {
 function buildNextLaunchArgs({
   isPrebuilt,
   port,
-  host = SIDECAR_LOOPBACK_HOST,
-  turbopack = true
+  host = SIDECAR_LOOPBACK_HOST
 }) {
   if (isPrebuilt) {
     return ["start", "--hostname", host, "--port", String(port)];
   }
-  const args = ["dev", "--hostname", host, "--port", String(port)];
-  if (turbopack) args.push("--turbopack");
-  return args;
+  return ["dev", "--hostname", host, "--port", String(port)];
 }
 function buildSidecarUrl(port, host = SIDECAR_LOOPBACK_HOST) {
   return `http://${host}:${port}`;
@@ -364,15 +361,15 @@ Data:
   Logs             ${join3(DATA_DIR, "logs")}
 
 Environment variables:
-  STAGENT_DATA_DIR Custom data directory for the desktop sidecar and web app
+  STAGENT_DATA_DIR Custom data directory for the web app
   ANTHROPIC_API_KEY Claude runtime access
   OPENAI_API_KEY   OpenAI Codex runtime access
 
 Examples:
   node dist/cli.js --port 3210 --no-open
-  STAGENT_DATA_DIR=/tmp/stagent-desktop node dist/cli.js --reset
+  STAGENT_DATA_DIR=/tmp/stagent node dist/cli.js --reset
 `;
-program.name("stagent").description("Governed desktop AI agent workspace").version(pkg.version).addHelpText("after", HELP_TEXT).option("-p, --port <number>", "port to start on", "3000").option("--reset", "delete the local database before starting").option("--no-open", "don't auto-open browser").parse();
+program.name("stagent").description("Governed AI agent workspace").version(pkg.version).addHelpText("after", HELP_TEXT).option("-p, --port <number>", "port to start on", "3000").option("--reset", "delete the local database before starting").option("--no-open", "don't auto-open browser").parse();
 var opts = program.opts();
 var requestedPort = Number.parseInt(opts.port, 10);
 if (Number.isNaN(requestedPort) || requestedPort <= 0) {
@@ -465,8 +462,7 @@ async function main() {
   const isPrebuilt = existsSync2(join3(effectiveCwd, ".next", "BUILD_ID"));
   const nextArgs = buildNextLaunchArgs({
     isPrebuilt,
-    port: actualPort,
-    turbopack: effectiveCwd === appDir
+    port: actualPort
   });
   const sidecarUrl = buildSidecarUrl(actualPort);
   console.log(`Stagent ${pkg.version}`);

package/next.config.mjs

@@ -1,15 +1,7 @@
-import { dirname } from "path";
-import { fileURLToPath } from "url";
-
-const __dirname = dirname(fileURLToPath(import.meta.url));
-
 /** @type {import('next').NextConfig} */
 const nextConfig = {
   serverExternalPackages: ["better-sqlite3"],
   devIndicators: false,
-  turbopack: {
-    root: __dirname,
-  },
 };
 
 export default nextConfig;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "stagent",
-  "version": "0.1.3",
-  "description": "Governed desktop AI agent workspace for supervised local execution, workflows, documents, and provider runtimes.",
+  "version": "0.1.5",
+  "description": "Governed AI agent workspace for supervised local execution, workflows, documents, and provider runtimes.",
   "keywords": [
     "ai",
     "agents",
@@ -40,12 +40,6 @@
     "dev": "next dev --turbopack",
     "build": "next build",
     "build:cli": "tsup",
-    "desktop:dev": "node scripts/tauri.mjs dev",
-    "desktop:build": "node scripts/tauri.mjs build",
-    "desktop:smoke": "node scripts/desktop-sidecar-smoke.mjs",
-    "desktop:smoke:dmg": "node scripts/desktop-mounted-dmg-smoke.mjs",
-    "desktop:icon": "node scripts/tauri.mjs icon",
-    "desktop:release": "node scripts/release-desktop.mjs",
     "test": "vitest run",
     "test:watch": "vitest",
     "test:coverage": "vitest run --coverage",

package/public/readme/architecture.svg

@@ -0,0 +1,192 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 900 520" font-family="system-ui, -apple-system, 'Segoe UI', sans-serif">
+  <defs>
+    <linearGradient id="bgGrad" x1="0" y1="0" x2="0" y2="1">
+      <stop offset="0%" stop-color="#0F172A"/>
+      <stop offset="100%" stop-color="#1E293B"/>
+    </linearGradient>
+    <linearGradient id="browserGrad" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0%" stop-color="#2563EB"/>
+      <stop offset="100%" stop-color="#22D3EE"/>
+    </linearGradient>
+    <linearGradient id="serverGrad" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0%" stop-color="#1E293B"/>
+      <stop offset="100%" stop-color="#334155"/>
+    </linearGradient>
+    <linearGradient id="externalGrad" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0%" stop-color="#7C3AED"/>
+      <stop offset="100%" stop-color="#A78BFA"/>
+    </linearGradient>
+    <filter id="glow">
+      <feGaussianBlur stdDeviation="2" result="blur"/>
+      <feMerge><feMergeNode in="blur"/><feMergeNode in="SourceGraphic"/></feMerge>
+    </filter>
+    <filter id="shadow">
+      <feDropShadow dx="0" dy="2" stdDeviation="4" flood-color="#000" flood-opacity="0.3"/>
+    </filter>
+  </defs>
+
+  <!-- Background -->
+  <rect width="900" height="520" rx="16" fill="url(#bgGrad)"/>
+
+  <!-- Title -->
+  <text x="450" y="36" text-anchor="middle" fill="#94A3B8" font-size="12" font-weight="500" letter-spacing="2">STAGENT ARCHITECTURE</text>
+
+  <!-- ═══════════ BROWSER LAYER ═══════════ -->
+  <rect x="40" y="52" width="820" height="78" rx="12" fill="none" stroke="url(#browserGrad)" stroke-width="1.5" opacity="0.8" filter="url(#shadow)"/>
+  <rect x="40" y="52" width="820" height="78" rx="12" fill="#0F172A" opacity="0.6"/>
+
+  <text x="64" y="74" fill="#22D3EE" font-size="11" font-weight="700" letter-spacing="1.5">BROWSER</text>
+  <text x="152" y="74" fill="#475569" font-size="10">React 19</text>
+
+  <!-- Route pills -->
+  <rect x="64" y="86" width="60" height="24" rx="12" fill="#2563EB" opacity="0.2"/>
+  <text x="94" y="102" text-anchor="middle" fill="#60A5FA" font-size="10" font-weight="500">Home</text>
+
+  <rect x="132" y="86" width="76" height="24" rx="12" fill="#2563EB" opacity="0.2"/>
+  <text x="170" y="102" text-anchor="middle" fill="#60A5FA" font-size="10" font-weight="500">Dashboard</text>
+
+  <rect x="216" y="86" width="68" height="24" rx="12" fill="#2563EB" opacity="0.2"/>
+  <text x="250" y="102" text-anchor="middle" fill="#60A5FA" font-size="10" font-weight="500">Projects</text>
+
+  <rect x="292" y="86" width="56" height="24" rx="12" fill="#2563EB" opacity="0.2"/>
+  <text x="320" y="102" text-anchor="middle" fill="#60A5FA" font-size="10" font-weight="500">Docs</text>
+
+  <rect x="356" y="86" width="76" height="24" rx="12" fill="#2563EB" opacity="0.2"/>
+  <text x="394" y="102" text-anchor="middle" fill="#60A5FA" font-size="10" font-weight="500">Workflows</text>
+
+  <rect x="440" y="86" width="64" height="24" rx="12" fill="#2563EB" opacity="0.2"/>
+  <text x="472" y="102" text-anchor="middle" fill="#60A5FA" font-size="10" font-weight="500">Profiles</text>
+
+  <rect x="512" y="86" width="76" height="24" rx="12" fill="#2563EB" opacity="0.2"/>
+  <text x="550" y="102" text-anchor="middle" fill="#60A5FA" font-size="10" font-weight="500">Schedules</text>
+
+  <rect x="596" y="86" width="52" height="24" rx="12" fill="#2563EB" opacity="0.2"/>
+  <text x="622" y="102" text-anchor="middle" fill="#60A5FA" font-size="10" font-weight="500">Inbox</text>
+
+  <rect x="656" y="86" width="66" height="24" rx="12" fill="#2563EB" opacity="0.2"/>
+  <text x="689" y="102" text-anchor="middle" fill="#60A5FA" font-size="10" font-weight="500">Monitor</text>
+
+  <rect x="730" y="86" width="68" height="24" rx="12" fill="#2563EB" opacity="0.2"/>
+  <text x="764" y="102" text-anchor="middle" fill="#60A5FA" font-size="10" font-weight="500">Settings</text>
+
+  <!-- Connection lines from browser to server -->
+  <line x1="300" y1="130" x2="300" y2="162" stroke="#22D3EE" stroke-width="1" opacity="0.4"/>
+  <line x1="600" y1="130" x2="600" y2="162" stroke="#22D3EE" stroke-width="1" opacity="0.4"/>
+
+  <!-- Connection labels -->
+  <text x="240" y="150" fill="#475569" font-size="9">Server Components</text>
+  <text x="237" y="159" fill="#334155" font-size="8">(direct DB queries)</text>
+  <text x="562" y="150" fill="#475569" font-size="9">API Routes</text>
+  <text x="550" y="159" fill="#334155" font-size="8">(mutations only)</text>
+
+  <!-- ═══════════ SERVER LAYER ═══════════ -->
+  <rect x="40" y="164" width="820" height="200" rx="12" fill="url(#serverGrad)" opacity="0.5" filter="url(#shadow)"/>
+  <rect x="40" y="164" width="820" height="200" rx="12" fill="none" stroke="#334155" stroke-width="1"/>
+
+  <text x="64" y="186" fill="#F8FAFC" font-size="11" font-weight="700" letter-spacing="1.5">NEXT.JS 16 SERVER</text>
+
+  <!-- Row 1: Core services -->
+  <!-- Drizzle ORM -->
+  <rect x="64" y="200" width="200" height="60" rx="8" fill="#1E293B" stroke="#334155" stroke-width="1"/>
+  <rect x="64" y="200" width="4" height="60" rx="2" fill="#22D3EE"/>
+  <text x="80" y="222" fill="#F1F5F9" font-size="12" font-weight="600">Drizzle ORM</text>
+  <text x="80" y="240" fill="#64748B" font-size="10">SQLite · WAL mode</text>
+  <text x="80" y="252" fill="#64748B" font-size="10">8 tables · Self-healing bootstrap</text>
+
+  <!-- Runtime Registry -->
+  <rect x="280" y="200" width="220" height="60" rx="8" fill="#1E293B" stroke="#334155" stroke-width="1"/>
+  <rect x="280" y="200" width="4" height="60" rx="2" fill="#2563EB"/>
+  <text x="296" y="222" fill="#F1F5F9" font-size="12" font-weight="600">Runtime Registry</text>
+  <text x="296" y="240" fill="#64748B" font-size="10">Provider abstraction layer</text>
+  <text x="296" y="252" fill="#64748B" font-size="10">Claude + OpenAI adapters</text>
+
+  <!-- SSE Stream -->
+  <rect x="516" y="200" width="160" height="60" rx="8" fill="#1E293B" stroke="#334155" stroke-width="1"/>
+  <rect x="516" y="200" width="4" height="60" rx="2" fill="#7C3AED"/>
+  <text x="532" y="222" fill="#F1F5F9" font-size="12" font-weight="600">SSE Stream</text>
+  <text x="532" y="240" fill="#64748B" font-size="10">Real-time log push</text>
+  <text x="532" y="252" fill="#64748B" font-size="10">/api/logs/stream</text>
+
+  <!-- Profile Engine -->
+  <rect x="692" y="200" width="152" height="60" rx="8" fill="#1E293B" stroke="#334155" stroke-width="1"/>
+  <rect x="692" y="200" width="4" height="60" rx="2" fill="#F59E0B"/>
+  <text x="708" y="222" fill="#F1F5F9" font-size="12" font-weight="600">Profile Engine</text>
+  <text x="708" y="240" fill="#64748B" font-size="10">13 agent profiles</text>
+  <text x="708" y="252" fill="#64748B" font-size="10">MCP · Tools · Tuning</text>
+
+  <!-- Row 2: Engines -->
+  <!-- Scheduler Engine -->
+  <rect x="64" y="276" width="200" height="60" rx="8" fill="#1E293B" stroke="#334155" stroke-width="1"/>
+  <rect x="64" y="276" width="4" height="60" rx="2" fill="#10B981"/>
+  <text x="80" y="298" fill="#F1F5F9" font-size="12" font-weight="600">Scheduler Engine</text>
+  <text x="80" y="316" fill="#64748B" font-size="10">Cron + intervals · Poll-based</text>
+  <text x="80" y="328" fill="#64748B" font-size="10">One-shot &amp; recurring</text>
+
+  <!-- Workflow Engine -->
+  <rect x="280" y="276" width="220" height="60" rx="8" fill="#1E293B" stroke="#334155" stroke-width="1"/>
+  <rect x="280" y="276" width="4" height="60" rx="2" fill="#EC4899"/>
+  <text x="296" y="298" fill="#F1F5F9" font-size="12" font-weight="600">Workflow Engine</text>
+  <text x="296" y="316" fill="#64748B" font-size="10">Sequence · Planner-Executor</text>
+  <text x="296" y="328" fill="#64748B" font-size="10">Parallel · Swarm · Checkpoints</text>
+
+  <!-- Permission Checker -->
+  <rect x="516" y="276" width="160" height="60" rx="8" fill="#1E293B" stroke="#334155" stroke-width="1"/>
+  <rect x="516" y="276" width="4" height="60" rx="2" fill="#EF4444"/>
+  <text x="532" y="298" fill="#F1F5F9" font-size="12" font-weight="600">Permission Gate</text>
+  <text x="532" y="316" fill="#64748B" font-size="10">Always Allow patterns</text>
+  <text x="532" y="328" fill="#64748B" font-size="10">canUseTool polling</text>
+
+  <!-- Document Processor -->
+  <rect x="692" y="276" width="152" height="60" rx="8" fill="#1E293B" stroke="#334155" stroke-width="1"/>
+  <rect x="692" y="276" width="4" height="60" rx="2" fill="#06B6D4"/>
+  <text x="708" y="298" fill="#F1F5F9" font-size="12" font-weight="600">Doc Processor</text>
+  <text x="708" y="316" fill="#64748B" font-size="10">5-format extraction</text>
+  <text x="708" y="328" fill="#64748B" font-size="10">Context injection</text>
+
+  <!-- Connection lines from server to externals -->
+  <line x1="164" y1="364" x2="164" y2="404" stroke="#22D3EE" stroke-width="1" opacity="0.4"/>
+  <line x1="450" y1="364" x2="450" y2="404" stroke="#2563EB" stroke-width="1" opacity="0.4"/>
+  <line x1="736" y1="364" x2="736" y2="404" stroke="#7C3AED" stroke-width="1" opacity="0.4"/>
+
+  <!-- ═══════════ EXTERNAL LAYER ═══════════ -->
+  <!-- Database -->
+  <rect x="64" y="408" width="200" height="72" rx="12" fill="none" stroke="#22D3EE" stroke-width="1" opacity="0.6"/>
+  <rect x="64" y="408" width="200" height="72" rx="12" fill="#0F172A" opacity="0.8"/>
+  <!-- Database icon -->
+  <ellipse cx="100" cy="432" rx="12" ry="6" fill="none" stroke="#22D3EE" stroke-width="1.2"/>
+  <line x1="88" y1="432" x2="88" y2="446" stroke="#22D3EE" stroke-width="1.2"/>
+  <line x1="112" y1="432" x2="112" y2="446" stroke="#22D3EE" stroke-width="1.2"/>
+  <ellipse cx="100" cy="446" rx="12" ry="6" fill="none" stroke="#22D3EE" stroke-width="1.2"/>
+  <text x="122" y="436" fill="#F1F5F9" font-size="12" font-weight="600">~/.stagent/</text>
+  <text x="122" y="452" fill="#64748B" font-size="10">stagent.db</text>
+  <text x="80" y="472" fill="#475569" font-size="9">SQLite · WAL · better-sqlite3</text>
+
+  <!-- Runtime Backends -->
+  <rect x="300" y="408" width="300" height="72" rx="12" fill="none" stroke="#2563EB" stroke-width="1" opacity="0.6"/>
+  <rect x="300" y="408" width="300" height="72" rx="12" fill="#0F172A" opacity="0.8"/>
+  <!-- Anthropic -->
+  <circle cx="332" cy="436" r="10" fill="none" stroke="#D97706" stroke-width="1.2"/>
+  <text x="332" y="440" text-anchor="middle" fill="#D97706" font-size="10" font-weight="700">A</text>
+  <text x="350" y="436" fill="#F1F5F9" font-size="11" font-weight="600">Anthropic</text>
+  <text x="350" y="450" fill="#64748B" font-size="9">Claude Agent SDK</text>
+  <!-- OpenAI -->
+  <circle cx="482" cy="436" r="10" fill="none" stroke="#10A37F" stroke-width="1.2"/>
+  <text x="482" y="440" text-anchor="middle" fill="#10A37F" font-size="10" font-weight="700">O</text>
+  <text x="500" y="436" fill="#F1F5F9" font-size="11" font-weight="600">OpenAI</text>
+  <text x="500" y="450" fill="#64748B" font-size="9">Codex App Server</text>
+  <text x="370" y="472" fill="#475569" font-size="9">Governed runtime backends</text>
+
+  <!-- Browser EventSource -->
+  <rect x="636" y="408" width="220" height="72" rx="12" fill="none" stroke="#7C3AED" stroke-width="1" opacity="0.6"/>
+  <rect x="636" y="408" width="220" height="72" rx="12" fill="#0F172A" opacity="0.8"/>
+  <!-- Signal icon -->
+  <circle cx="668" cy="436" r="3" fill="#7C3AED"/>
+  <path d="M656 424 A16 16 0 0 1 680 424" fill="none" stroke="#7C3AED" stroke-width="1" opacity="0.5"/>
+  <path d="M652 418 A22 22 0 0 1 684 418" fill="none" stroke="#7C3AED" stroke-width="1" opacity="0.3"/>
+  <text x="688" y="436" fill="#F1F5F9" font-size="12" font-weight="600">EventSource</text>
+  <text x="688" y="452" fill="#64748B" font-size="10">Browser SSE client</text>
+  <text x="656" y="472" fill="#475569" font-size="9">Real-time log streaming</text>
+
+  <!-- Footer -->
+  <text x="450" y="508" text-anchor="middle" fill="#334155" font-size="10">Local-first · Zero external dependencies · Your data stays on your machine</text>
+</svg>

package/src/lib/desktop/__tests__/sidecar-launch.test.ts

@@ -42,22 +42,12 @@ describe("desktop sidecar launch helpers", () => {
     ).toEqual(["start", "--hostname", "127.0.0.1", "--port", "3210"]);
   });
 
-  it("launches Next on loopback for development builds with turbopack", () => {
+  it("launches Next on loopback for development builds", () => {
     expect(
       buildNextLaunchArgs({
         isPrebuilt: false,
         port: 3210,
       }),
-    ).toEqual(["dev", "--hostname", "127.0.0.1", "--port", "3210", "--turbopack"]);
-  });
-
-  it("launches Next without turbopack when turbopack is false", () => {
-    expect(
-      buildNextLaunchArgs({
-        isPrebuilt: false,
-        port: 3210,
-        turbopack: false,
-      }),
     ).toEqual(["dev", "--hostname", "127.0.0.1", "--port", "3210"]);
   });
 

package/src/lib/desktop/sidecar-launch.ts

@@ -68,20 +68,16 @@ export function buildNextLaunchArgs({
   isPrebuilt,
   port,
   host = SIDECAR_LOOPBACK_HOST,
-  turbopack = true,
 }: {
   isPrebuilt: boolean;
   port: number;
   host?: string;
-  turbopack?: boolean;
 }): string[] {
   if (isPrebuilt) {
     return ["start", "--hostname", host, "--port", String(port)];
   }
 
-  const args = ["dev", "--hostname", host, "--port", String(port)];
-  if (turbopack) args.push("--turbopack");
-  return args;
+  return ["dev", "--hostname", host, "--port", String(port)];
 }
 
 export function buildSidecarUrl(port: number, host = SIDECAR_LOOPBACK_HOST): string {

package/src/lib/notifications/actionable.ts

@@ -17,7 +17,7 @@ export const APPROVAL_ACTION_IDS = [
 ] as const;
 
 export type ApprovalActionId = (typeof APPROVAL_ACTION_IDS)[number];
-export type NotificationChannelId = "in_app" | "browser" | "tauri";
+export type NotificationChannelId = "in_app" | "browser";
 
 export interface ActionableNotificationPayload {
   notificationId: string;

package/src/lib/tauri-bridge.ts

@@ -1,138 +0,0 @@
-type TauriDialogFilter = {
-  name: string;
-  extensions: string[];
-};
-
-type TauriDialogOptions = {
-  directory?: boolean;
-  multiple?: boolean;
-  filters?: TauriDialogFilter[];
-};
-
-type TauriNotificationPayload = {
-  title: string;
-  body?: string;
-};
-
-type TauriNotificationApi = {
-  isPermissionGranted?: () => Promise<boolean>;
-  requestPermission?: () => Promise<boolean | "granted" | "denied" | "default">;
-  sendNotification?: (
-    payload: string | TauriNotificationPayload
-  ) => Promise<void> | void;
-};
-
-type TauriDialogApi = {
-  open?: (options?: TauriDialogOptions) => Promise<unknown>;
-};
-
-declare global {
-  interface Window {
-    __TAURI__?: {
-      dialog?: TauriDialogApi;
-      notification?: TauriNotificationApi;
-    };
-  }
-}
-
-function getTauriApi() {
-  if (typeof window === "undefined") return null;
-  return window.__TAURI__ ?? null;
-}
-
-export const isTauri = () => Boolean(getTauriApi());
-
-export async function showNativeNotification(
-  title: string,
-  body?: string
-): Promise<boolean> {
-  const tauriApi = getTauriApi();
-
-  if (tauriApi?.notification?.sendNotification) {
-    const permissionCheck = tauriApi.notification.isPermissionGranted;
-    const requestPermission = tauriApi.notification.requestPermission;
-
-    let granted = true;
-    if (permissionCheck) {
-      granted = await permissionCheck();
-    }
-
-    if (!granted && requestPermission) {
-      const result = await requestPermission();
-      granted = result === true || result === "granted";
-    }
-
-    if (granted) {
-      await tauriApi.notification.sendNotification({ title, body });
-      return true;
-    }
-
-    return false;
-  }
-
-  if (typeof window === "undefined" || typeof Notification === "undefined") {
-    return false;
-  }
-
-  if (Notification.permission === "granted") {
-    new Notification(title, body ? { body } : undefined);
-    return true;
-  }
-
-  if (Notification.permission !== "denied") {
-    const permission = await Notification.requestPermission();
-    if (permission === "granted") {
-      new Notification(title, body ? { body } : undefined);
-      return true;
-    }
-  }
-
-  return false;
-}
-
-export async function selectFile(options?: TauriDialogOptions): Promise<
-  string | string[] | null
-> {
-  const tauriApi = getTauriApi();
-
-  if (tauriApi?.dialog?.open) {
-    const result = await tauriApi.dialog.open(options);
-    if (Array.isArray(result)) {
-      return result.filter((value): value is string => typeof value === "string");
-    }
-    return typeof result === "string" ? result : null;
-  }
-
-  if (typeof window === "undefined" || options?.directory) {
-    return null;
-  }
-
-  return new Promise((resolve) => {
-    const input = document.createElement("input");
-    input.type = "file";
-    input.multiple = Boolean(options?.multiple);
-
-    if (options?.filters?.length) {
-      input.accept = options.filters
-        .flatMap((filter) => filter.extensions.map((extension) => `.${extension}`))
-        .join(",");
-    }
-
-    input.addEventListener(
-      "change",
-      () => {
-        const files = input.files;
-        if (!files || files.length === 0) {
-          resolve(null);
-          return;
-        }
-
-        const names = Array.from(files, (file) => file.name);
-        resolve(options?.multiple ? names : names[0] ?? null);
-      },
-      { once: true }
-    );
-
-    input.click();
-  });
-}