synartesis 0.5.2 → 0.6.2

package/CHANGELOG.md

@@ -2,6 +2,97 @@
 
 What changed, and why it mattered. Dates are release dates.
 
+## 0.6.2 — 2026-09-12
+
+### Fixed
+
+- **The application could not be built on Windows or Linux at all**, which the
+  first release build found out the hard way. On Windows, pnpm compiles
+  better-sqlite3 from source -- ignoring the `gypfile: false` that tells npm
+  not to bother -- and a runner whose Visual Studio is newer than node-gyp
+  knows about simply fails. It never needed compiling: the package ships a
+  prebuilt binary for every platform it supports, and its loader prefers one
+  over anything built locally, so what node-gyp produced here was never
+  loaded. On Linux, dpkg refuses to build a `.deb` without a maintainer, and
+  nothing named one.
+
+- **The release workflow can be rehearsed.** Run with the tag box empty, it
+  builds the branch on all three platforms and publishes nothing. Finding out
+  whether a build works should not cost a version number each time.
+
+## 0.6.1 — 2026-09-12
+
+### Added
+
+- **A `release` workflow** builds the application on macOS, Windows and Linux --
+  each on its own machine, since an installer cannot honestly be built anywhere
+  else -- and attaches the `.dmg`, `.exe`, AppImage and `.deb` to the release
+  for a `v*` tag. It signs and notarises where the secrets exist and produces
+  unsigned builds where they do not, so a fork of this repository can still
+  build it.
+
+### Fixed
+
+- **The packaging script could not have run on Windows.** It started
+  electron-builder through the shim in `node_modules/.bin`, which is a `.cmd`
+  there and something node will not spawn without a shell. It runs the
+  builder's own entry file instead -- the same file on every platform -- and
+  the check that refuses a stale bundle now knows where Windows and Linux keep
+  the archive as well as where macOS does.
+
+- **An empty secret is not a certificate.** A CI job passes every secret it was
+  told about whether the repository holds one or not, so a build with no
+  signing certificate was handed `CSC_LINK=""`. electron-builder reads
+  "defined" as "use it": it took the empty string for the path to a
+  certificate, resolved it against the project directory, and stopped with
+  "`<repo>/app not a file`" -- a message with no visible relationship to its
+  cause. Blank credentials are dropped before the builder starts, so a build
+  without a certificate is simply unsigned.
+
+- **A `.DS_Store` could make a current bundle look stale.** Finder leaves one in
+  any directory somebody has looked at, and the staleness check was counting it
+  as input to the bundle even though nothing packs it.
+
+## 0.6.0 — 2026-09-12
+
+### Added
+
+- **A desktop window.** You talk to a model; every tool it calls goes through
+  the same proxy the CLI installs, so what it did is journalled and reversible
+  without the window implementing any of that itself. Each call gets a card
+  naming the server, the tool, the class it was given and whether the state it
+  replaced was captured; a call that cannot be undone stops and waits for a
+  person rather than happening behind one; and "put it back" is the CLI's own
+  two steps — the real plan, then the confirmation. Claude, Gemini, Mistral,
+  OpenAI, and anything speaking `/v1/chat/completions`, which includes Ollama,
+  LM Studio and vLLM on the same machine. Keys are pasted by you and kept in the
+  OS keychain; they are never written to the journal or a log.
+
+  It is a separate download rather than part of this package: a browser engine
+  inside a CLI would put 200 MB into every install of a command that is a few
+  hundred kilobytes. Both share one journal, so either can undo what the other
+  did.
+
+- **`synartesis desktop`** opens that window if it is installed, and says where
+  to get it if it is not.
+
+### Fixed
+
+- **Opening the window no longer leaves an empty session behind.** A run is
+  begun whether or not anybody says anything, and closing one is a chain of
+  waits — each server is asked to stop, and a child process takes its time
+  going. Quitting the application ended the process partway through, so the
+  empty row survived: thirteen of them in one afternoon of testing, thirteen
+  lines of `synartesis list` between somebody and the run they were looking for.
+  The tidy-up now happens before the servers are waited on — nothing can be
+  recorded once the model's client is shut, so the count is already final — and
+  quit is held until the engine has put itself away.
+
+- **A held call explains itself in words.** An MCP server returns its errors as
+  a content envelope, and the most common reason of all — the file does not
+  exist yet, so there is nothing to keep — was reaching the screen as a wall of
+  `{"content":[{"type":"text"...` with the sentence that mattered inside it.
+
 ## 0.5.2 — 2026-09-10
 
 ### Changed

package/README.md

@@ -76,6 +76,73 @@ synartesis
 One screen: what agents have done, what is held for approval, every AI on the
 machine, and undo — all on the arrow keys.
 
+## The desktop window
+
+The same engine, with a conversation in front of it. You talk to a model — any
+model — and every tool it calls goes through the proxy on its way out, so the
+undo is not a feature the window implements. It is one it can already offer.
+
+![The Synartesis desktop window: a turn that wrote a file, with the tool card showing it was captured and can be put back](https://raw.githubusercontent.com/ArhaanDev24/Synartesis/main/brand/synartesis-desktop.png)
+
+Every call gets a card: which server, which tool, the class Synartesis gave it,
+and whether the state it replaced was captured. The ledger at the top counts the
+same thing for the whole conversation. Nothing there is a promise about what
+should have happened — it is read back out of the journal after the fact.
+
+A call that cannot be undone does not happen behind your back. It stops, and
+waits for you, with the reason it cannot be reversed written out:
+
+![A held call in the desktop window, asking whether to allow a write whose prior state could not be captured](https://raw.githubusercontent.com/ArhaanDev24/Synartesis/main/brand/synartesis-desktop-approval.png)
+
+And putting it back is the same two steps the CLI takes: the real plan first,
+built from the journal, then the confirmation.
+
+![The undo plan in the desktop window, showing one call skipped and one reverted](https://raw.githubusercontent.com/ArhaanDev24/Synartesis/main/brand/synartesis-desktop-undo.png)
+
+It talks to Claude, Gemini, Mistral, OpenAI, or anything speaking
+`/v1/chat/completions` — including Ollama, LM Studio and vLLM on your own
+machine, which cost nothing and send nothing anywhere. Keys are pasted by you,
+kept in the OS keychain through Electron's `safeStorage`, and never written to
+the journal or a log. There is a parchment and a dark setting:
+
+![The desktop window in its dark setting](https://raw.githubusercontent.com/ArhaanDev24/Synartesis/main/brand/synartesis-desktop-dark.png)
+
+**Getting it.** `synartesis desktop` opens it, and says where to get it if it is
+not installed. It is a separate download on purpose: shipping a browser engine
+inside a CLI would put 200 MB into every install of a command that is a few
+hundred kilobytes.
+
+On macOS it installs the way anything does — open the `.dmg`, drag Synartesis to
+Applications — and on Windows the `.exe` installer puts it where the Start menu
+can find it. After that, either the icon or `synartesis desktop` opens it; the
+command looks where each platform actually installs things rather than asking
+you to remember a path.
+
+**The builds are not signed yet, and the first launch says so.** macOS refuses
+an application it cannot check with Apple: open System Settings → Privacy &
+Security and press *Open Anyway*, or `xattr -dr com.apple.quarantine
+/Applications/Synartesis.app` to say the same thing in one line. Windows shows
+a SmartScreen warning, behind *More info*. Both of those are the operating
+system telling you the truth — nobody has vouched for this binary — and the
+honest fix is a Developer ID certificate rather than a page telling you to
+click past it. Building from the clone below avoids the question entirely,
+since an application you built is one you have already vouched for.
+
+To build it yourself instead:
+
+```bash
+pnpm install && pnpm app:dist
+```
+
+That writes an installer for the machine it runs on to `app/release` — a `.dmg`
+and a `.app` on macOS, an `.exe` on Windows, an AppImage and a `.deb` on Linux.
+It is unsigned, so it runs where it was built and Gatekeeper refuses it
+anywhere it has been downloaded to: signing and notarisation need an Apple
+developer account, and [`app/README.md`](app/README.md) lists exactly what they
+want. The `release` workflow builds all three platforms on their own machines
+and attaches the installers to the release for a tag. Both the window and the terminal share
+one journal, so either can undo what the other did.
+
 ## What it can and cannot do
 
 Every tool gets one of four classifications, written down in a manifest:
@@ -114,6 +181,9 @@ every line it would write over and stops; `--force --yes` goes ahead.
 
 ## Commands
 
+`synartesis desktop` opens [the window](#the-desktop-window), and says where to
+get it if it is not installed.
+
 | Command | Does |
 |---|---|
 | `synartesis` | The screen. Everything below can be done from it |

package/dist/cli.js

@@ -39,8 +39,9 @@ import {
 } from "./chunk-YVOO3PTV.js";
 
 // src/cli.ts
-import { existsSync as existsSync7, mkdirSync as mkdirSync2, readFileSync as readFileSync4, statSync, writeFileSync as writeFileSync3 } from "fs";
-import { dirname as dirname3, join as join2, resolve as resolve3 } from "path";
+import { spawn } from "child_process";
+import { existsSync as existsSync8, mkdirSync as mkdirSync2, readFileSync as readFileSync4, statSync, writeFileSync as writeFileSync3 } from "fs";
+import { dirname as dirname3, join as join3, resolve as resolve3 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 
 // src/init/draft.ts
@@ -389,6 +390,10 @@ async function rollback(options) {
   const projected = /* @__PURE__ */ new Map();
   for (const action of inScope) {
     let forcedOver;
+    if (action.class === "readonly") {
+      steps.push({ ...describeStep(action), kind: "skip", reason: "readonly", verified: true });
+      continue;
+    }
     const early = classify(action, policies !== void 0, force || dryRun);
     if (early?.kind === "halt") {
       const seen = action.error ?? "";
@@ -403,10 +408,6 @@ ${seen}` : seen;
       steps.push({ ...describeStep(action), ...early });
       continue;
     }
-    if (action.class === "readonly") {
-      steps.push({ ...describeStep(action), kind: "skip", reason: "readonly", verified: true });
-      continue;
-    }
     const rebuilt = replan(action);
     const parsedPlan = inversePlan.safeParse(rebuilt.inverse ?? action.inverse);
     if (!parsedPlan.success) {
@@ -2465,6 +2466,61 @@ async function openConsole(options) {
   }
 }
 
+// src/desktop.ts
+import { existsSync as existsSync7 } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join2 } from "path";
+var RELEASES = "https://github.com/ArhaanDev24/Synartesis/releases";
+function candidates(platform2 = process.platform) {
+  const home = homedir2();
+  if (platform2 === "darwin") {
+    return [
+      "/Applications/Synartesis.app",
+      join2(home, "Applications/Synartesis.app")
+    ];
+  }
+  if (platform2 === "win32") {
+    const local = process.env["LOCALAPPDATA"] ?? join2(home, "AppData/Local");
+    return [
+      join2(local, "Programs/Synartesis/Synartesis.exe"),
+      join2(process.env["PROGRAMFILES"] ?? "C:/Program Files", "Synartesis/Synartesis.exe")
+    ];
+  }
+  return [
+    "/opt/Synartesis/synartesis-desktop",
+    "/usr/bin/synartesis-desktop",
+    join2(home, ".local/bin/synartesis-desktop"),
+    join2(home, "Applications/Synartesis.AppImage")
+  ];
+}
+function findDesktop(platform2 = process.platform, here = existsSync7) {
+  for (const path of candidates(platform2)) {
+    if (!here(path)) {
+      continue;
+    }
+    if (platform2 === "darwin") {
+      return { path, open: { command: "open", args: ["-a", path] } };
+    }
+    return { path, open: { command: path, args: [] } };
+  }
+  return void 0;
+}
+function whereToGetIt(platform2 = process.platform) {
+  const asset = platform2 === "darwin" ? "the .dmg for your chip (Apple silicon or Intel)" : platform2 === "win32" ? "the Windows installer" : "the AppImage or .deb";
+  return [
+    "The Synartesis desktop application is not installed.",
+    "",
+    `Download ${asset} from:`,
+    `  ${RELEASES}`,
+    "",
+    "It is a separate download on purpose. Shipping it through npm would mean",
+    "every install of this command line tool pulled a browser engine with it.",
+    "",
+    "The journal is shared either way: something the window does is undoable",
+    "here with `synartesis undo`, and the other way round."
+  ].join("\n");
+}
+
 // src/cli.ts
 var NODE_MAJOR = Number(process.versions.node.split(".")[0]);
 if (NODE_MAJOR < 22) {
@@ -2494,6 +2550,7 @@ var COMMANDS = `
                   [--journal <path>]
                   [--http <port> --token <secret>]      for a client that
                                                         cannot start one
+  synartesis desktop
   synartesis watch [--by <name>] [--journal <path>]
   synartesis approve [actionId|--all] [--by <name>] [--journal <path>]
   synartesis deny [actionId|--all] [--by <name>] [--reason <text>] [--journal <path>]
@@ -2505,6 +2562,10 @@ Cursor or Codex already list, writes a policy covering all of it -- using the on
 ship where they fit -- and points each entry at the proxy. The original config
 is copied aside first, and uninstall puts it back. status says what is covered.
 
+desktop opens the window, if it is installed. It is a separate download --
+shipping it through npm would put a browser engine inside every install of
+this command. Both share one journal, so either can undo what the other did.
+
 close ends a run left active by a proxy that was killed; nothing guesses at
 that, since several proxies can share one journal.
 
@@ -2736,7 +2797,7 @@ async function runUninstall(argv) {
 }
 function openIfPresent(journalPath) {
   try {
-    return existsSync7(journalPath) ? openJournal(journalPath, { mustExist: true }) : void 0;
+    return existsSync8(journalPath) ? openJournal(journalPath, { mustExist: true }) : void 0;
   } catch {
     return void 0;
   }
@@ -2769,7 +2830,7 @@ function runStatus(argv) {
   const journalPath = findJournal(flag(argv, "--journal"), manifestPath);
   out("");
   out(
-    `  ${style.label("policy")}   ${existsSync7(manifestPath) ? style.strong(manifestPath) : style.quiet(`${manifestPath} (none yet)`)}`
+    `  ${style.label("policy")}   ${existsSync8(manifestPath) ? style.strong(manifestPath) : style.quiet(`${manifestPath} (none yet)`)}`
   );
   out(
     `  ${style.label("journal")}  ${bytesOf(journalPath) === void 0 ? style.quiet(`${journalPath} (none yet)`) : `${style.strong(journalPath)} ${style.quiet(sizeOf(journalPath))}`}`
@@ -2822,7 +2883,7 @@ async function runInit(argv) {
   }
   const path = findManifest(flag(argv, "--manifest"));
   const force = argv.includes("--force");
-  const present = existsSync7(path);
+  const present = existsSync8(path);
   if (present && force) {
     throw new UsageError(
       `--force would discard ${path}. Delete it yourself if that is what you want; init will otherwise add to it.`
@@ -2855,17 +2916,17 @@ async function runInit(argv) {
   out("");
   return 0;
 }
-function pick(candidates, given, noun, newest = false) {
+function pick(candidates2, given, noun, newest = false) {
   const listed = (items) => items.map((item) => `  ${item.id}`).join("\n");
   if (given === void 0) {
-    const [only, ...rest2] = candidates;
+    const [only, ...rest2] = candidates2;
     if (only === void 0) {
       throw new UsageError(`there is no ${noun.one} to act on`);
     }
     if (rest2.length > 0 && !newest) {
       throw new UsageError(
-        `there are ${String(candidates.length)} ${noun.many}; name one, or use --all:
-${listed(candidates)}`
+        `there are ${String(candidates2.length)} ${noun.many}; name one, or use --all:
+${listed(candidates2)}`
       );
     }
     return only;
@@ -2873,11 +2934,11 @@ ${listed(candidates)}`
   if (given === "") {
     throw new UsageError(`no ${noun.one} was named; an empty id is usually an unset variable`);
   }
-  const exact = candidates.find((item) => item.id === given);
+  const exact = candidates2.find((item) => item.id === given);
   if (exact !== void 0) {
     return exact;
   }
-  const matches = candidates.filter((item) => item.id.startsWith(given));
+  const matches = candidates2.filter((item) => item.id.startsWith(given));
   const [first, ...rest] = matches;
   if (first === void 0) {
     throw new UsageError(`no ${noun.one} matches ${given}`);
@@ -3533,7 +3594,7 @@ var FLAGS = /* @__PURE__ */ new Set([
 function version() {
   try {
     const root = dirname3(fileURLToPath2(import.meta.url));
-    const parsed = JSON.parse(readFileSync4(join2(root, "..", "package.json"), "utf8"));
+    const parsed = JSON.parse(readFileSync4(join3(root, "..", "package.json"), "utf8"));
     const found = typeof parsed === "object" && parsed !== null ? parsed.version : void 0;
     return typeof found === "string" ? found : "unknown";
   } catch {
@@ -3551,7 +3612,7 @@ function rejectUnknownFlags(argv) {
   }
 }
 function openJournalOrExplain(journalPath) {
-  if (!existsSync7(journalPath)) {
+  if (!existsSync8(journalPath)) {
     throw new UsageError(
       `nothing has been recorded yet: there is no journal at ${journalPath}. One appears the first time an agent calls a tool through synartesis proxy.`
     );
@@ -3641,7 +3702,7 @@ ${COMMANDS}`);
     });
   }
   journalArg = given === void 0 ? "" : ` --journal ${resolve3(given)}`;
-  if (!existsSync7(journalPath) && (command === "list" || command === "show" || command === "gates")) {
+  if (!existsSync8(journalPath) && (command === "list" || command === "show" || command === "gates")) {
     if (asJson) {
       out(JSON.stringify(command === "show" ? { run: null, actions: [] } : []));
       return 0;
@@ -3655,6 +3716,9 @@ ${COMMANDS}`);
     out("");
     return 0;
   }
+  if (command === "desktop") {
+    return runDesktop();
+  }
   const journal = openJournalOrExplain(journalPath);
   try {
     switch (command) {
@@ -3681,6 +3745,21 @@ ${COMMANDS}`);
     journal.close();
   }
 }
+function runDesktop() {
+  const found = findDesktop();
+  if (found === void 0) {
+    process.stderr.write(`${whereToGetIt()}
+`);
+    return 2;
+  }
+  const child = spawn(found.open.command, [...found.open.args], {
+    detached: true,
+    stdio: "ignore"
+  });
+  child.unref();
+  out(`opening ${found.path}`);
+  return 0;
+}
 try {
   process.exitCode = await main(process.argv.slice(2));
 } catch (error) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "synartesis",
-  "version": "0.5.2",
+  "version": "0.6.2",
   "description": "An undo layer for AI agents.",
   "type": "module",
   "private": false,
@@ -43,11 +43,18 @@
   },
   "scripts": {
     "build": "tsup",
-    "typecheck": "tsc --noEmit",
+    "typecheck": "tsc --noEmit && tsc -p app/renderer --noEmit",
     "lint": "eslint .",
     "test": "vitest run",
     "test:watch": "vitest",
     "pretest": "tsup --silent",
+    "app": "pnpm app:build && electron app/dist/main/index.js",
+    "app:build": "tsup --config app/tsup.config.ts && vite build --config app/vite.config.ts",
+    "app:icon": "electron app/build/make-icon.mjs",
+    "app:logo": "python3 app/build/make-logo.py && pnpm app:icon",
+    "app:sandbox": "pnpm app:build && node app/dev/sandbox.mjs",
+    "app:pack": "pnpm app:build && node app/build/pack.mjs --dir",
+    "app:dist": "pnpm app:build && node app/build/pack.mjs",
     "demo": "tsup --silent && ./demo/filesystem-demo.sh",
     "demo:memory": "tsup --silent && ./demo/memory-demo.sh",
     "prepublishOnly": "tsup"
@@ -59,14 +66,34 @@
     "yaml": "^2.9.0",
     "zod": "^4.4.3"
   },
+  "//pnpm": "better-sqlite3 ships a prebuilt binary for every platform it supports, and its loader prefers one over anything compiled locally -- so what node-gyp builds here is never loaded. npm knows not to bother, because the package sets gypfile: false; pnpm builds it anyway, which needs a C toolchain on every machine that installs this and fails outright on a Windows runner whose Visual Studio is newer than node-gyp.",
+  "pnpm": {
+    "neverBuiltDependencies": [
+      "better-sqlite3"
+    ]
+  },
   "devDependencies": {
+    "@anthropic-ai/sdk": "^0.125.0",
+    "@electron/notarize": "^3.1.1",
+    "@fontsource/cormorant-garamond": "^5.3.0",
+    "@fontsource/ibm-plex-mono": "^5.3.0",
+    "@fontsource/ibm-plex-sans": "^5.3.0",
+    "@google/genai": "^2.22.0",
     "@modelcontextprotocol/server-filesystem": "^2026.7.10",
     "@types/better-sqlite3": "^9.6.0",
     "@types/node": "^26.2.0",
+    "@types/react": "^19.3.0",
+    "@types/react-dom": "^19.3.0",
+    "@vitejs/plugin-react": "^6.1.1",
+    "electron": "^44.3.0",
+    "electron-builder": "^26.15.3",
     "eslint": "^10.8.1",
+    "react": "^19.3.0",
+    "react-dom": "^19.3.0",
     "tsup": "^8.5.1",
     "typescript": "^5.9.3",
     "typescript-eslint": "^8.67.0",
+    "vite": "^8.3.0",
     "vitest": "^4.1.11"
   },
   "packageManager": "pnpm@9.15.9+sha512.68046141893c66fad01c079231128e9afb89ef87e2691d69e4d40eee228988295fd4682181bae55b58418c3a253bde65a505ec7c5f9403ece5cc3cd37dcf2531"