docs: update TODO_AGENTS — current display_control status + future ideas section

docs/build: update README + compiled dist for list-modes/set-mode features
README: - set_display_layout: note idempotent behavior (no flicker if already in state) - add list_display_modes and set_display_mode rows to bridge table - add list-modes and set-mode to Option B test commands dist/: compiled output from tsc (system_handlers, preload, index)
2026-05-20 18:43:14 -04:00 · 2026-05-20 18:27:58 -04:00 · 2026-05-20 18:24:33 -04:00 · 2026-05-20 18:17:17 -04:00 · 2026-05-20 18:16:43 -04:00 · 2026-05-20 18:14:26 -04:00
70 changed files with 4830 additions and 2154 deletions
--- a/.gitignore
+++ b/.gitignore
@@ -27,3 +27,6 @@ aether_native_app_config.json
 # package-lock.json
 builds/
 resources/seed_config.json
+event.env
+.playwright-mcp/
+builds.tar.gz
--- a/AE_app_native_Electron_2026-04-20.tar.gz
+++ b/AE_app_native_Electron_2026-04-20.tar.gz
--- a/README.md
+++ b/README.md
@@ -10,6 +10,22 @@ This application serves as the "Native Mode" runtime for Aether podiums and devi
 - **Hardware Telemetry:** Direct access to CPU, RAM, and Network interface data.
 - **Remote Control:** Slide navigation and application control via WebSocket intents.

+## Launcher Terminology
+
+Use these terms consistently when working on the launcher bridge:
+
+- **Launch Profiles**: the Svelte-side map keyed by file extension.
+- **Launch Profile**: one resolved config object selected from that map for a file.
+- **Native Template**: the single AppleScript or shell command string Electron executes after
+  the file has been copied to temp. This is an implementation detail of the bridge.
+
+In short, the profiles are the policy; the launch profile is the selected policy entry; the
+native template is the executable string produced by that policy.
+
+Do not use `launch_scripts` as the public/config-facing term. If that wording appears in old
+comments or generated output, treat it as stale naming drift and update it to `launch_profiles`
+when referring to the Svelte-side map or `native_template` when referring to the resolved string.
+
 ## 🖥️ Onsite Deployment

 **Current hardware:** MacBook Air 2018 — Intel x64. All current deployments use `aether_launcher-darwin-x64`.
@@ -18,6 +34,15 @@ This application serves as the "Native Mode" runtime for Aether podiums and devi
 SSH user on all laptops: **`speaker ready`**
 IP pattern: `192.168.32.1XX` (XX = zero-padded laptop number, e.g. 03 → `.103`). Find/replace this prefix for other onsite environments.

+Deploy files live in `deploy/`:
+
+| File | Purpose |
+| --- | --- |
+| `deploy/deploy.sh` | Deploy script — handles arch detection, scp, and seed.json |
+| `deploy/devices.conf` | Laptop list: number, IP, `event_device_id` |
+| `deploy/event.env` | **Gitignored** — per-event API key and URLs (create from example) |
+| `deploy/event.env.example` | Template for `event.env` |
+
 ### Step 1 — Build the app (workstation)

 ```bash
@@ -29,35 +54,106 @@ npm run package:mac
 Only rebuild if source code has changed. The `.app` bundle is identical for all Intel laptops —
 only `~/seed.json` differs per device.

-### Step 2 — Determine target architecture and copy the .app
+> **Note:** The build will print `WARNING: Could not find icon "..." with extension ".icon"`. This
+> is cosmetic — `electron-packager` checks for several icon format variants and warns for each it
+> doesn't find. The `.icns` file is correctly embedded as `electron.icns` inside the app bundle.
+
+### Step 2 — Create event.env

-Check the target Mac's CPU if unsure:
 ```bash
-ssh "speaker ready"@192.168.32.103 "uname -m"
-# x86_64  → use aether_launcher-darwin-x64    (MacBook Air 2018 and all current Intel Macs)
-# arm64   → use aether_launcher-darwin-arm64   (Apple Silicon M1/M2/M3/M4)
+cp deploy/event.env.example deploy/event.env
+# Edit deploy/event.env — fill in AETHER_API_KEY
 ```

-Copy from the workstation (replace `103` with the target IP last octet):
+Create the API key in the Aether admin panel before the show (Core → Accounts or Events →
+Devices API key section). All laptops share one key per event. Delete it after the show.
+
+### Step 3 — Run the deploy script
+
 ```bash
-# Intel (current hardware):
+# Deploy specific laptops:
+./deploy/deploy.sh 01 02 03
+
+# Deploy all laptops in devices.conf:
+./deploy/deploy.sh all
+
+# Update seed.json only (no .app copy — e.g. when rotating the API key):
+./deploy/deploy.sh --seed-only all
+
+# Deploy and re-grant Accessibility permission in one pass:
+./deploy/deploy.sh --fix-accessibility all
+```
+
+The script auto-detects each Mac's CPU architecture, copies the correct `.app` build, writes
+`seed.json`, and verifies. One SSH connection failure won't abort the batch — it logs and
+continues, then reports which laptops need a retry.
+
+### Step 4 — Verify and launch
+
+After the script completes, launch the app on each laptop and confirm it connects and shows
+the correct device name in the Launcher UI.
+
+### macOS Accessibility Permission
+
+The launcher sends keystrokes to PowerPoint and Keynote via AppleScript. macOS requires
+explicit **Accessibility** access for this. Every time a new `.app` binary is deployed, macOS
+invalidates the stored permission because the code signature changes — even when rsync
+updates in-place.
+
+**Symptom:** Slide control silently fails; `osascript` eventually returns a permissions error.
+
+**Manual fix** (GUI — always works):
+1. System Settings → Privacy & Security → Accessibility
+2. Find `aether_launcher` in the list → remove it (− button)
+3. Re-add it (+ button → `/Applications/aether_launcher.app`) and toggle it on
+
+**Automated fix** — use the `--fix-accessibility` deploy flag:
+```bash
+./deploy/deploy.sh --fix-accessibility 01 02 03
+./deploy/deploy.sh --build --fix-accessibility all
+```
+This runs `tccutil reset` (no password required) then attempts a direct TCC database grant
+via `sudo sqlite3`. The sqlite3 step requires NOPASSWD sudo on each Mac — one-time setup:
+
+```bash
+ssh "speaker ready"@192.168.32.1XX "sudo visudo -f /etc/sudoers.d/aether-tcc"
+```
+Add this line, then save:
+```text
+speaker ready ALL=(ALL) NOPASSWD: /usr/bin/sqlite3 /Library/Application\ Support/com.apple.TCC/TCC.db *
+```
+
+If the sqlite3 grant fails (SIP enabled, sudoers not configured), the script logs a warning
+and falls back gracefully — a fresh permission prompt appears the first time the app uses
+accessibility. The `--fix-accessibility` flag can be combined with any other flag.
+
+**Long-term fix:** Code-sign the app with an Apple Developer certificate. A stable signature
+means macOS never invalidates the permission on updates. Currently out of scope.
+
+### Adding SSH key to a new laptop (first time only)
+
+```bash
+ssh-copy-id "speaker ready"@192.168.32.1XX
+```
+
+Run once per laptop before deploying.
+
+---
+
+### Manual deploy reference
+
+The script covers the normal case. For one-off fixes or if the script isn't available:
+
+```bash
+# Detect arch
+ssh "speaker ready"@192.168.32.103 "uname -m"
+# x86_64 → darwin-x64  |  arm64 → darwin-arm64
+
+# Copy .app (Intel example):
 scp -r builds/aether_launcher-darwin-x64/aether_launcher.app \
    "speaker ready"@192.168.32.103:/Applications/aether_launcher.app

-# Apple Silicon (future hardware):
-scp -r builds/aether_launcher-darwin-arm64/aether_launcher.app \
-    "speaker ready"@192.168.32.103:/Applications/aether_launcher.app
-```
-
-If `/Applications/aether_launcher.app` already exists, `scp -r` overwrites it. No need to
-remove the old version first.
-
-### Step 3 — Write seed.json on the target laptop
-
-The seed file lives at `~/seed.json` (`/Users/speaker ready/seed.json`) on each Mac.
-It is intentionally outside the app bundle so it can be updated without redeploying.
-
-```bash
+# Write seed.json:
 ssh "speaker ready"@192.168.32.103 "cat > ~/seed.json" << 'EOF'
 {
  "event_device_id": "DEVICE_ID_FOR_THIS_LAPTOP",
@@ -67,57 +163,13 @@ ssh "speaker ready"@192.168.32.103 "cat > ~/seed.json" << 'EOF'
  "onsite_api_base_url": null
 }
 EOF
+
+# Verify:
+ssh "speaker ready"@192.168.32.103 "cat ~/seed.json"
 ```

 `event_device_id` values by laptop — see the **Device Reference** table below.

-### Step 4 — Verify
-
-```bash
-# Confirm seed.json landed correctly
-ssh "speaker ready"@192.168.32.103 "cat ~/seed.json"
-
-# Confirm the .app is present
-ssh "speaker ready"@192.168.32.103 "ls /Applications/aether_launcher.app"
-```
-
-Then launch the app on the laptop and confirm it connects and shows the correct device name
-in the Launcher UI.
-
-### Updating seed.json only (no app reinstall)
-
-If only the device config needs updating (e.g. changing `event_device_id` or `onsite_api_base_url`):
-
-```bash
-ssh "speaker ready"@192.168.32.103 "cat > ~/seed.json" << 'EOF'
-{ ... }
-EOF
-```
-
-No need to re-copy the `.app`. Restart the Electron app after writing the new seed.
-
-### Deploy to multiple laptops at once
-
-Repeat Steps 2–3 for each laptop, or use a loop:
-
-```bash
-for OCTET in 103 104 105 106; do
-  echo "=== Deploying to 192.168.32.$OCTET ==="
-  scp -r builds/aether_launcher-darwin-x64/aether_launcher.app \
-      "speaker ready"@192.168.32.$OCTET:/Applications/aether_launcher.app
-done
-```
-
-`seed.json` must still be written per-device (each has a unique `event_device_id`).
-
-### Adding SSH key to a new laptop (first time only)
-
-```bash
-ssh-copy-id "speaker ready"@192.168.32.1XX
-```
-
-Run once per laptop before attempting any of the deploy steps above.
-
 ---

 ## 📋 Device Reference
@@ -202,35 +254,187 @@ explicitly coordinated across all devices.

 The bridge is exposed to the renderer via `contextBridge`. It can be accessed in the web UI via `window.aetherNative`.

-### Core Methods
+**Design principle:** The Electron app is a thin OS primitive layer. Business logic (which script
+runs for which file type, how to sequence operations, etc.) belongs in the SvelteKit/Svelte side
+where it can be changed without a rebuild and redeployment. Electron handlers should rarely need
+to change.
+
+### File Cache

 | Method | Description |
 | --- | --- |
-| `list_tools()` | Returns a JSON manifest of all available native functions. |
-| `launch_presentation({path, app})` | Launches a presentation with auto-focus and slideshow start. |
-| `control_presentation({app, action})` | Sends `next`, `prev`, `start`, or `stop` to active decks. |
-| `open_folder(path)` | Opens a local directory in the OS file explorer. |
-| `get_device_info()` | Returns hardware metadata (RAM, IPs, Hostname). |
+| `check_cache({cache_root, hash, hash_prefix_length?, verify_hash?})` | Checks if a file exists in the hashed cache. `verify_hash: true` re-hashes the file to confirm integrity. |
+| `download_to_cache({url, cache_root, hash, api_key, account_id, hash_prefix_length?})` | Streams a file from the API into the hashed cache. Verifies SHA-256 integrity before finalizing. |
+| `copy_from_cache_to_temp({cache_root, hash, temp_root, filename, hash_prefix_length?})` | **Preferred primitive.** Copies cached file to temp dir with original filename. Returns `{ success, path }`. The Svelte caller decides what to do next. |
+| `launch_from_cache({cache_root, hash, temp_root, filename, hash_prefix_length?, native_template?})` | Combines copy + launch. The Svelte side resolves the Launch Profile to a single `native_template` string (AppleScript or `shell:` prefixed command). If no template is supplied, it returns an error. |
+
+### Shell & OS
+
+| Method | Description |
+| --- | --- |
+| `run_cmd({cmd, timeout?, return_stdout?})` | Async shell command execution. |
+| `run_cmd_sync({cmd})` | Synchronous shell command execution. |
+| `run_osascript(script)` | **Hardened.** Runs AppleScript via temp `.scpt` file — handles multi-line scripts and paths with spaces/special characters correctly. macOS only. |
+| `open_folder(path)` | Opens a directory in Finder / system file manager. |
+| `open_local_file_v2(path)` | Opens a file with its default OS application. |
+| `open_external({url, app?})` | Opens a URL in Chrome, Firefox, or the default browser. |
+| `kill_processes({process_name_li})` | Terminates processes by name. macOS/Linux: `pkill -f`. Windows: `taskkill /F`. |
+
+### Presentations (Phase 5 — legacy specialized handlers)
+
+| Method | Description |
+| --- | --- |
+| `launch_presentation({path, app?, os?})` | Platform-aware launcher. Resolves `[home]`/`[tmp]` placeholders. Hardened (2026-05-11): AppleScript written to temp `.scpt` file, same as `run_osascript`. For new flows prefer `copy_from_cache_to_temp` + `run_osascript` for full control. |
+| `control_presentation({app, action})` | Slide navigation (`next`/`prev`/`start`/`stop`) for PowerPoint or Keynote via AppleScript. macOS only. |
+
+### System Management (Phase 5)
+
+| Method | Description |
+| --- | --- |
+| `get_device_config()` | Returns hydrated device config injected at startup from `seed.json` + API. |
+| `get_device_info()` | Returns OS metadata: platform, hostname, IPs, CPU count, free RAM, home/tmp paths. |
+| `window_control({action, value?})` | Electron window: maximize, minimize, restore, close, fullscreen, kiosk, devtools, reload. |
+| `set_wallpaper({path?, url?, url_external?, display?, api_key?, account_id?})` | Sets desktop wallpaper. Accepts a local `path` or downloads from `url` (cached to `~/Library/Caches/OSIT/wallpaper/`). `url_external` sets a separate image on the projector/second display. `display`: `'all'` (default) \| `'primary'` \| `'external'`. macOS only in production; Linux returns a dev-mode preview payload without applying. |
+| `power_control({action})` | Shutdown, reboot, or sleep. macOS + Linux. Requires sudo for shutdown/reboot. |
+| `set_display_layout({mode, configStr?})` | Mirror/extend displays. macOS only. **Idempotent** — returns success immediately if the displays are already in the requested state (no flicker). **Primary path:** bundled `display_control` binary (native CoreGraphics, no Homebrew). **Fallback:** `displayplacer` — used when the binary is absent or when a `configStr` override is set. `configStr` is a full `displayplacer` string stored in `event_device.data_json` for per-device tuning. Build `display_control` via `scripts/build-display-control.sh` on a Mac and commit `resources/bin/display_control`. |
+| `list_display_modes()` | Returns all online displays with every usable `CGDisplayMode` per display: logical size, pixel size, refresh rate, HiDPI flag, and which mode is currently active. macOS only. JSON is parsed for you — result is `{ success, displays: DisplayInfo[] }`. Use this to populate a resolution picker in the UI. |
+| `set_display_mode({display_index, width, height, refresh_rate?, hidpi?})` | Sets the resolution/refresh of one display via `CGConfigureDisplayWithDisplayMode`. `display_index` matches the `index` from `list_display_modes`. `hidpi`: `true` = force HiDPI (Retina scaling), `false` = force non-HiDPI, `null`/omit = auto (prefers HiDPI on built-in, non-HiDPI on externals). Picks the highest available refresh rate when multiple modes match. macOS only. |
+| `manage_recording({action, options?})` | Screen recording via bundled `aperture` binary. macOS only. |
+| `update_app(args)` | **Stub.** Downloads update package but does not install. Not functional. |
+| `list_tools()` | Returns a self-describing manifest of all available bridge functions. |
+
+### Example Usage (preferred composable pattern)

-### Example Usage (UI Relay)
 ```typescript
 import * as native from '$lib/electron/electron_relay';

-// Launch a file from local cache
-await native.launch_presentation({ 
-    path: '[tmp]/my_deck.pptx', 
-    app: 'powerpoint' 
+// Step 1: copy the cached file to temp and get the resolved path
+const copy = await native.copy_from_cache_to_temp({
+    cache_root: $ae_loc.local_file_cache_path,
+    hash: event_file_obj.hash_sha256,
+    temp_root: $ae_loc.host_file_temp_path,
+    filename: event_file_obj.filename
 });
+if (!copy.success) { /* handle error */ return; }

-// Navigate slides
-await native.control_presentation({ 
-    app: 'powerpoint', 
-    action: 'next' 
-});
+// Step 2: run whatever script/command you want with that path
+// Option A — AppleScript (macOS):
+await native.run_osascript(`
+    tell application "Microsoft PowerPoint"
+        activate
+        open (POSIX file "${copy.path}")
+        delay 3
+    end tell
+`);
+
+// Option B — shell command:
+await native.run_cmd({ cmd: `open "${copy.path}"` });
+
+// Option C — use a template from device config (data-driven, no rebuild needed):
+const template = $ae_loc.native_device?.launch_profiles?.pptx;
+if (template) {
+    const script = template.replace(/\{\{path\}\}/g, copy.path);
+    await native.run_osascript(script);
+}
 ```

+### Configurable Launch Profiles (no rebuild needed)
+
+`launch_profiles` is the Svelte-side map stored in `event_device.data_json.launch_profiles`.
+`launch_from_cache` receives the resolved `native_template` string, not the profile map.
+Keys are lowercase extensions (`pptx`, `key`, `pdf`, etc.); `default` is a catch-all.
+Profiles use `{{path}}` as the file path placeholder.
+AppleScript strings run via `run_osascript`; prefix with `shell:` for shell commands.
+
+See `documentation/PROJECT__AE_Events_Launcher_Native_integration.md` Section 8 for full details.
+
 ## 🛠️ Development

 - **Preload:** Logic defined in `src/preload/index.ts`.
- **Handlers:** OS-level logic in `src/main/shell_handlers.ts` and `src/main/file_handlers.ts`.
+- **Handlers:** OS-level logic in `src/main/shell_handlers.ts`, `src/main/file_handlers.ts`, and `src/main/system_handlers.ts`.
 - **Types:** Shared TypeScript interfaces in `src/shared/types.ts`.
+
+### One-Time: Build the `display_control` Binary (macOS)
+
+The `display_control` binary provides native CoreGraphics display mirror/extend without any Homebrew dependency. It must be compiled on a Mac (Xcode CLT required) and committed to the repo so it is bundled into every packaged app. Produces a universal binary (x86_64 + arm64) that runs on both Intel and Apple Silicon Macs.
+
+Rebuild only if `scripts/display_control.m` changes.
+
+#### Option A — From the Linux workstation (preferred)
+
+Laptop 01 (`192.168.32.101`) is the designated build Mac — Xcode CLT is installed there.
+The remote build script copies the source over SSH, compiles on that Mac, and pulls the binary back.
+
+```bash
+# From the repo root on the workstation:
+./scripts/remote-build-display-control.sh
+
+# Override the build Mac IP if needed:
+./scripts/remote-build-display-control.sh 192.168.32.102
+```
+
+The script prints `file resources/bin/display_control` at the end. Confirm both arches appear:
+```
+resources/bin/display_control: Mach-O universal binary with 2 architectures: [x86_64] [arm64]
+```
+
+Then commit:
+```bash
+git add resources/bin/display_control
+git commit -m "build: update display_control binary (universal)"
+```
+
+#### Option B — Directly on a Mac
+
+If you have repo access on the Mac itself (Xcode CLT required — `xcode-select --install`):
+
+```bash
+./scripts/build-display-control.sh
+# Expected last output line: x86_64 arm64
+
+# Test with a second display connected:
+./resources/bin/display_control status
+./resources/bin/display_control extend
+./resources/bin/display_control mirror
+./resources/bin/display_control list-modes
+./resources/bin/display_control set-mode 0 1920 1080
+./resources/bin/display_control set-mode 1 1920 1080 --refresh 60 --no-hidpi
+
+git add resources/bin/display_control
+git commit -m "build: update display_control binary (universal)"
+```
+
+Once committed, `brew install displayplacer` is no longer required on any venue Mac. The `displayplacer` fallback remains in the handler only for `configStr` per-device overrides.
+
+---
+
+### Build Requirements (System Dependencies)
+
+`bsdtar` (libarchive) must be present on the build host. It is used by the `postinstall` patch
+to work around a hard hang in `@electron/packager` 20 on Node 26.
+
+| OS | Install |
+| --- | --- |
+| Arch Linux | `sudo pacman -S libarchive` |
+| macOS | `brew install libarchive` (or use the system bsdtar included in Xcode CLT) |
+| Ubuntu/Debian | `sudo apt install libarchive-tools` |
+
+### Why bsdtar — Node 26 Packaging Bug
+
+**Symptom:** `npm run package:mac` or `npm run package:linux` prints
+`Packaging app for platform ... using electron v42.x` then hangs forever (or exits 0 with no output).
+
+**Root cause:** `yauzl` 2.10.0 (used by `extract-zip` inside `@electron/packager` 20) creates
+read streams that never emit `data` events under Node 26. The zip extraction call blocks
+indefinitely.
+
+**Fix:** `scripts/patch-packager-unzip.js` (run automatically via `postinstall`) replaces the
+`extractElectronZip` function in `node_modules/@electron/packager/dist/unzip.js` with a
+`child_process.execSync` call to `bsdtar -xf`. `bsdtar` was chosen over `7z` because `7z`
+refuses to extract macOS `.app` bundles that contain symlinks chained through other symlinks
+(e.g. `Electron Framework.framework/Libraries → Versions/Current/Libraries`, where
+`Versions/Current` is itself a symlink).
+
+**This patch is re-applied automatically on every `npm install`** via the `postinstall` hook.
+If a future release of `@electron/packager` or `extract-zip` fixes Node 26 compatibility,
+remove the `postinstall` line from `package.json` and delete `scripts/patch-packager-unzip.js`.
--- a/deploy/deploy.sh
+++ b/deploy/deploy.sh
@@ -0,0 +1,246 @@
+#!/usr/bin/env bash
+# deploy.sh — Deploy Aether Native Launcher to onsite Mac laptops
+#
+# USAGE:
+#   ./deploy.sh <num> [num ...]                       Deploy to one or more laptops (e.g. 03 04 05)
+#   ./deploy.sh all                                    Deploy to all laptops in devices.conf
+#   ./deploy.sh --seed-only <num>                      Update seed.json only — skip .app copy
+#   ./deploy.sh --seed-only all
+#   ./deploy.sh --build <num> [num ...]                Build first (npm run package:mac), then deploy
+#   ./deploy.sh --build all
+#   ./deploy.sh --fix-accessibility <num> [num ...]    Re-grant macOS Accessibility permission after .app update
+#   ./deploy.sh --fix-accessibility all                (requires NOPASSWD sudo for sqlite3 — see README)
+#
+# REQUIRES:
+#   event.env   — copy from event.env.example and fill in AETHER_API_KEY
+#   builds/     — pre-built, or use --build to build before deploying
+#
+# SSH keys must already be installed on each target (run ssh-copy-id once per laptop).
+
+set -uo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+DEVICES_FILE="$SCRIPT_DIR/devices.conf"
+EVENT_ENV="$SCRIPT_DIR/event.env"
+SSH_USER="speaker ready"
+BUILD_DIR="$SCRIPT_DIR/../builds"
+
+# ── Argument parsing ──────────────────────────────────────────────────────────
+
+SEED_ONLY=false
+BUILD_FIRST=false
+FIX_ACCESSIBILITY=false
+TARGETS=()
+# Bundle ID as embedded in Info.plist by electron-packager (no --app-bundle-id override)
+BUNDLE_ID="com.electron.aetherlauncher"
+
+usage() {
+    grep '^#' "$0" | grep -v '^#!/' | sed 's/^# \{0,1\}//'
+    exit 1
+}
+
+if [[ $# -eq 0 ]]; then usage; fi
+
+while [[ $# -gt 0 ]]; do
+    case "$1" in
+        --seed-only)           SEED_ONLY=true ;;
+        --build)               BUILD_FIRST=true ;;
+        --fix-accessibility)   FIX_ACCESSIBILITY=true ;;
+        --help|-h)             usage ;;
+        all)         TARGETS+=("all") ;;
+        *)           TARGETS+=("$1") ;;
+    esac
+    shift
+done
+
+if [[ ${#TARGETS[@]} -eq 0 ]]; then
+    echo "ERROR: No targets specified."
+    usage
+fi
+
+# ── Load event config ─────────────────────────────────────────────────────────
+
+if [[ ! -f "$EVENT_ENV" ]]; then
+    echo "ERROR: $EVENT_ENV not found."
+    echo "  Copy event.env.example → event.env and fill in AETHER_API_KEY."
+    exit 1
+fi
+
+# shellcheck source=/dev/null
+source "$EVENT_ENV"
+
+: "${AETHER_API_KEY:?event.env must set AETHER_API_KEY}"
+: "${PRIMARY_API_BASE_URL:?event.env must set PRIMARY_API_BASE_URL}"
+: "${BACKUP_API_BASE_URL:?event.env must set BACKUP_API_BASE_URL}"
+
+# Render onsite URL as JSON null or quoted string
+if [[ -n "${ONSITE_API_BASE_URL:-}" ]]; then
+    ONSITE_JSON="\"$ONSITE_API_BASE_URL\""
+else
+    ONSITE_JSON="null"
+fi
+
+# ── Device list helpers ───────────────────────────────────────────────────────
+
+# Returns "ip device_id" for a laptop number, or empty if not found
+lookup_device() {
+    local num="$1"
+    grep -v '^[[:space:]]*#' "$DEVICES_FILE" \
+        | grep -E "^[[:space:]]*${num}[[:space:]]" \
+        | awk '{print $2, $3}' \
+        | head -1
+}
+
+# Returns all laptop numbers from devices.conf (first column, non-comment lines)
+all_device_nums() {
+    grep -v '^[[:space:]]*#' "$DEVICES_FILE" \
+        | grep -v '^[[:space:]]*$' \
+        | awk '{print $1}'
+}
+
+# ── Deploy one laptop ─────────────────────────────────────────────────────────
+
+deploy_laptop() {
+    local num="$1"
+
+    local info
+    info=$(lookup_device "$num")
+    if [[ -z "$info" ]]; then
+        echo "  ERROR: Laptop $num not found in devices.conf"
+        return 1
+    fi
+
+    local ip device_id
+    ip=$(echo "$info" | awk '{print $1}')
+    device_id=$(echo "$info" | awk '{print $2}')
+
+    echo ""
+    echo "══════════════════════════════════════════════"
+    echo "  Laptop $num  ·  $ip  ·  $device_id"
+    echo "══════════════════════════════════════════════"
+
+    # ── Copy .app ──────────────────────────────────────────────────────────
+    if [[ "$SEED_ONLY" != "true" ]]; then
+        echo "  Detecting architecture..."
+        local arch
+        arch=$(ssh "$SSH_USER@$ip" "uname -m" 2>/dev/null) || {
+            echo "  ERROR: SSH failed for $ip — is the laptop on the network?"
+            return 1
+        }
+
+        local bundle
+        case "$arch" in
+            x86_64) bundle="$BUILD_DIR/aether_launcher-darwin-x64/aether_launcher.app" ;;
+            arm64)  bundle="$BUILD_DIR/aether_launcher-darwin-arm64/aether_launcher.app" ;;
+            *)
+                echo "  ERROR: Unknown arch '$arch' on $ip"
+                return 1
+                ;;
+        esac
+
+        if [[ ! -d "$bundle" ]]; then
+            echo "  ERROR: Build not found: $bundle"
+            echo "         Run: npm run package:mac"
+            return 1
+        fi
+
+        echo "  Arch: $arch → syncing $(basename "$bundle")..."
+        # rsync --delete syncs contents in-place without removing the top-level .app dir.
+        # This preserves the inode so macOS Aliases and Desktop shortcuts keep working.
+        rsync -a --delete -e ssh "$bundle/" "$SSH_USER@$ip:/Applications/aether_launcher.app/" || {
+            echo "  ERROR: rsync failed."
+            return 1
+        }
+        echo "  .app synced."
+    else
+        echo "  (--seed-only: skipping .app copy)"
+    fi
+
+    # ── Write seed.json ────────────────────────────────────────────────────
+    echo "  Writing seed.json..."
+    ssh "$SSH_USER@$ip" "cat > ~/seed.json" <<EOF
+{
+  "event_device_id": "$device_id",
+  "aether_api_key": "$AETHER_API_KEY",
+  "primary_api_base_url": "$PRIMARY_API_BASE_URL",
+  "backup_api_base_url": "$BACKUP_API_BASE_URL",
+  "onsite_api_base_url": $ONSITE_JSON
+}
+EOF
+
+    # ── Accessibility permission ───────────────────────────────────────────
+    if [[ "$FIX_ACCESSIBILITY" == "true" ]]; then
+        echo "  Resetting Accessibility permission (tccutil)..."
+        if ssh "$SSH_USER@$ip" "tccutil reset Accessibility $BUNDLE_ID" 2>/dev/null; then
+            echo "  tccutil reset OK."
+        else
+            echo "  WARNING: tccutil reset failed (non-fatal)."
+        fi
+
+        echo "  Granting Accessibility via TCC database (requires NOPASSWD sudo)..."
+        # shellcheck disable=SC2016
+        TCC_SQL="INSERT OR REPLACE INTO access(service,client,client_type,auth_value,auth_reason,auth_version) VALUES('kTCCServiceAccessibility','$BUNDLE_ID',0,2,4,1);"
+        if ssh "$SSH_USER@$ip" "sudo sqlite3 '/Library/Application Support/com.apple.TCC/TCC.db' \"$TCC_SQL\"" 2>/dev/null; then
+            echo "  ✓ Accessibility granted."
+        else
+            echo "  WARNING: TCC grant failed — manual re-authorization required."
+            echo "           See README: macOS Accessibility Permission."
+        fi
+    fi
+
+    # ── Verify ─────────────────────────────────────────────────────────────
+    echo "  Verifying..."
+    ssh "$SSH_USER@$ip" "cat ~/seed.json"
+    if [[ "$SEED_ONLY" != "true" ]]; then
+        ssh "$SSH_USER@$ip" \
+            "test -d /Applications/aether_launcher.app && echo '  ✓ .app present' || echo '  ✗ .app NOT found'"
+    fi
+
+    echo "  ✓ Laptop $num done."
+    return 0
+}
+
+# ── Build if requested ───────────────────────────────────────────────────────
+
+if [[ "$BUILD_FIRST" == "true" ]]; then
+    echo "══════════════════════════════════════════════"
+    echo "  Building: npm run package:mac"
+    echo "══════════════════════════════════════════════"
+    (cd "$SCRIPT_DIR/.." && npm run package:mac) || {
+        echo "ERROR: Build failed. Aborting deploy."
+        exit 1
+    }
+    echo ""
+fi
+
+# ── Expand "all" target ───────────────────────────────────────────────────────
+
+EXPANDED_TARGETS=()
+for t in "${TARGETS[@]}"; do
+    if [[ "$t" == "all" ]]; then
+        while IFS= read -r num; do
+            EXPANDED_TARGETS+=("$num")
+        done < <(all_device_nums)
+    else
+        EXPANDED_TARGETS+=("$t")
+    fi
+done
+
+# ── Run deploys ───────────────────────────────────────────────────────────────
+
+FAILED=()
+for num in "${EXPANDED_TARGETS[@]}"; do
+    if ! deploy_laptop "$num"; then
+        FAILED+=("$num")
+    fi
+done
+
+echo ""
+echo "══════════════════════════════════════════════"
+if [[ ${#FAILED[@]} -eq 0 ]]; then
+    echo "  All done. ✓"
+else
+    echo "  FAILED: ${FAILED[*]}"
+    echo "  Re-run with just those numbers to retry."
+    exit 1
+fi
--- a/deploy/devices.conf
+++ b/deploy/devices.conf
@@ -0,0 +1,28 @@
+# Aether Native Launcher — Device List
+# Fields: laptop_num  ip_address  event_device_id  [notes]
+# Blank lines and lines starting with # are ignored.
+#
+# IP pattern: 192.168.32.1XX (XX = zero-padded laptop number)
+# SSH user: "speaker ready" on all laptops
+# Find/replace 192.168.32 for other venue network prefixes.
+#
+# num   ip                 event_device_id   notes
+01      192.168.32.101     tFLL1fLQfnk
+02      192.168.32.102     rpbfunVPEzw
+03      192.168.192.203     1EPfPX8kfw8
+04      192.168.192.204     zvgyLM5yieU
+05      192.168.192.205     QOc046GoeSc
+06      192.168.192.206     2o8j6eb0L6s
+07      192.168.32.107     Oa1tlxPEVSQ
+08      192.168.32.108     fY4yznpUZ48
+09      192.168.32.109     YlgGCyjo9bY
+10      192.168.32.110     GcTnFsp1mHI
+# 11      192.168.32.111     6z88m9oEZio
+# 12      192.168.32.112     EggJqL2kWkA
+# 13      192.168.32.113     O11eckHFdVE
+# 14      192.168.32.114     reI0SecUEhI
+# 15      192.168.32.115     crozxT8mA44
+# 16      192.168.32.116     0nP4VZsvr2Q
+# 17      192.168.32.117     Gm2gNqPGzLA
+# 19      192.168.32.119     6tpukvRVugU
+# x20     192.168.32.120     rwLYnKUNd1M     old 04, spare/retired
--- a/deploy/event.env.example
+++ b/deploy/event.env.example
@@ -0,0 +1,15 @@
+# event.env — Per-event deployment config for deploy.sh
+# Copy this file to event.env and fill in the values before deploying.
+# event.env is gitignored — never commit it (contains the API key).
+#
+# AETHER_API_KEY: shared across all laptops for this event deployment.
+# Create in Aether admin (Core → Accounts or Events → Devices API key section)
+# before the show. Delete after the show.
+#
+# ONSITE_API_BASE_URL: set to the local onsite API if running one (e.g.
+# http://192.168.32.1/api). Leave blank to use null (cloud-only mode).
+
+AETHER_API_KEY="your_api_key_here"
+PRIMARY_API_BASE_URL="https://api.oneskyit.com"
+BACKUP_API_BASE_URL="https://bak-api.oneskyit.com"
+ONSITE_API_BASE_URL=""
--- a/dist/main/api_client.js
+++ b/dist/main/api_client.js
@@ -18,7 +18,7 @@ async function fetchFullConfig(seed) {
                headers: {
                    'Content-Type': 'application/json',
                    'x-aether-api-key': seed.aether_api_key,
-                    'x-no-account-id': 'Nothing to See Here'
+                    'x-no-account-id': 'bypass'
                },
            });
            if (!deviceResponse.ok) {
@@ -29,20 +29,16 @@ async function fetchFullConfig(seed) {
            // Use 'app_base_url' as the FQDN for the site lookup
            const fqdn = deviceData.app_base_url || 'native-demo.oneskyit.com';
            // --- STEP 2: Get Site Context ---
-            const searchUrl = `${baseUrl}/v3/crud/site_domain/search`;
+            const searchUrl = `${baseUrl}/v3/crud/site_domain/search?limit=1`;
            const siteResponse = await fetch(searchUrl, {
                method: 'POST',
                headers: {
                    'Content-Type': 'application/json',
                    'x-aether-api-key': seed.aether_api_key,
-                    'x-no-account-id': 'Nothing to See Here',
                    'x-account-id': deviceData.account_id_random || deviceData.account_id || ''
                },
                body: JSON.stringify({
-                    search_query: {
-                        and: [{ field: 'fqdn', op: 'eq', value: fqdn }]
-                    },
-                    limit: 1
+                    and: [{ field: 'fqdn', op: 'eq', value: fqdn }]
                })
            });
            if (!siteResponse.ok) {
--- a/dist/main/api_client.js.map
+++ b/dist/main/api_client.js.map
@@ -1 +1 @@
-{"version":3,"file":"api_client.js","sourceRoot":"","sources":["../../src/main/api_client.ts"],"names":[],"mappings":";;AAEA,0CA4EC;AA5EM,KAAK,UAAU,eAAe,CAAC,IAAgB;IACpD,MAAM,OAAO,GAAG;QACd,IAAI,CAAC,mBAAmB;QACxB,IAAI,CAAC,oBAAoB;QACzB,IAAI,CAAC,mBAAmB;KACzB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,CAAa,CAAC;IAE/D,IAAI,SAAS,GAAQ,IAAI,CAAC;IAE1B,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,uCAAuC,OAAO,KAAK,CAAC,CAAC;YAEjE,oCAAoC;YACpC,MAAM,SAAS,GAAG,GAAG,OAAO,yBAAyB,IAAI,CAAC,eAAe,EAAE,CAAC;YAC5E,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;gBAC5C,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,kBAAkB,EAAE,IAAI,CAAC,cAAc;oBACvC,iBAAiB,EAAE,qBAAqB;iBACzC;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,yBAAyB,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,CAAC;YACjD,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,IAAI,YAAY,CAAC;YAErD,qDAAqD;YACrD,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,IAAI,0BAA0B,CAAC;YAEnE,mCAAmC;YACnC,MAAM,SAAS,GAAG,GAAG,OAAO,6BAA6B,CAAC;YAC1D,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;gBAC1C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,kBAAkB,EAAE,IAAI,CAAC,cAAc;oBACvC,iBAAiB,EAAE,qBAAqB;oBACxC,cAAc,EAAE,UAAU,CAAC,iBAAiB,IAAI,UAAU,CAAC,UAAU,IAAI,EAAE;iBAC5E;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,YAAY,EAAE;wBACZ,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;qBAChD;oBACD,KAAK,EAAE,CAAC;iBACT,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,+BAA+B,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;YACzE,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;YAC7C,MAAM,UAAU,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAE/F,OAAO,CAAC,GAAG,CAAC,2BAA2B,OAAO,EAAE,CAAC,CAAC;YAElD,OAAO;gBACL,GAAG,UAAU;gBACb,aAAa,EAAE,UAAU;gBACzB,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,mCAAmC;aACxE,CAAC;QAEJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,wBAAwB,OAAO,IAAI,EAAE,KAAK,CAAC,CAAC;YACzD,SAAS,GAAG,KAAK,CAAC;YAClB,SAAS,CAAC,eAAe;QAC3B,CAAC;IACH,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,0DAA0D,EAAE,SAAS,CAAC,CAAC;IACrF,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"api_client.js","sourceRoot":"","sources":["../../src/main/api_client.ts"],"names":[],"mappings":";;AAEA,0CAwEC;AAxEM,KAAK,UAAU,eAAe,CAAC,IAAgB;IACpD,MAAM,OAAO,GAAG;QACd,IAAI,CAAC,mBAAmB;QACxB,IAAI,CAAC,oBAAoB;QACzB,IAAI,CAAC,mBAAmB;KACzB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,SAAS,CAAa,CAAC;IAE/D,IAAI,SAAS,GAAQ,IAAI,CAAC;IAE1B,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,CAAC,GAAG,CAAC,uCAAuC,OAAO,KAAK,CAAC,CAAC;YAEjE,oCAAoC;YACpC,MAAM,SAAS,GAAG,GAAG,OAAO,yBAAyB,IAAI,CAAC,eAAe,EAAE,CAAC;YAC5E,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;gBAC5C,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,kBAAkB,EAAE,IAAI,CAAC,cAAc;oBACvC,iBAAiB,EAAE,QAAQ;iBAC5B;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;gBACvB,MAAM,IAAI,KAAK,CAAC,yBAAyB,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,CAAC;YACjD,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,IAAI,YAAY,CAAC;YAErD,qDAAqD;YACrD,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,IAAI,0BAA0B,CAAC;YAEnE,mCAAmC;YACnC,MAAM,SAAS,GAAG,GAAG,OAAO,qCAAqC,CAAC;YAClE,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;gBAC1C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,kBAAkB,EAAE,IAAI,CAAC,cAAc;oBACvC,cAAc,EAAE,UAAU,CAAC,iBAAiB,IAAI,UAAU,CAAC,UAAU,IAAI,EAAE;iBAC5E;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;iBAChD,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,+BAA+B,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;YACzE,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;YAC7C,MAAM,UAAU,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAE/F,OAAO,CAAC,GAAG,CAAC,2BAA2B,OAAO,EAAE,CAAC,CAAC;YAElD,OAAO;gBACL,GAAG,UAAU;gBACb,aAAa,EAAE,UAAU;gBACzB,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,mCAAmC;aACxE,CAAC;QAEJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,wBAAwB,OAAO,IAAI,EAAE,KAAK,CAAC,CAAC;YACzD,SAAS,GAAG,KAAK,CAAC;YAClB,SAAS,CAAC,eAAe;QAC3B,CAAC;IACH,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,0DAA0D,EAAE,SAAS,CAAC,CAAC;IACrF,OAAO,IAAI,CAAC;AACd,CAAC"}
--- a/dist/main/file_handlers.js
+++ b/dist/main/file_handlers.js
@@ -100,8 +100,7 @@ function registerFileHandlers() {
                method: 'get', url, responseType: 'stream',
                headers: {
                    'x-aether-api-key': api_key,
-                    'x-account-id': account_id || '',
-                    'x-no-account-id': 'Nothing to See Here'
+                    'x-account-id': account_id || ''
                }
            });
            const writer = fs.createWriteStream(tmp_path);
@@ -131,84 +130,84 @@ function registerFileHandlers() {
            endpoints_in_progress = endpoints_in_progress.filter(e => e !== url);
        }
    });
-    electron_1.ipcMain.handle('native:launch-from-cache', async (event, { cache_root, hash, temp_root, filename, hash_prefix_length = 2 }) => {
+    electron_1.ipcMain.handle('native:launch-from-cache', async (event, { cache_root, hash, temp_root, filename, hash_prefix_length = 2, native_template = null }) => {
        try {
            const source = get_organized_hashed_path(cache_root, hash, hash_prefix_length);
            const expanded_temp = (0, file_utils_1.expandPath)(temp_root);
            const target = path.join(expanded_temp, filename);
            console.log(`Native: Launching from Cache -> ${filename}`);
+            if (!fs.existsSync(source)) {
+                return { success: false, error: `File not in cache: ${hash}` };
+            }
            if (!fs.existsSync(expanded_temp))
                fs.mkdirSync(expanded_temp, { recursive: true });
            // 1. Copy the file to temp folder with original name
            fs.copyFileSync(source, target);
-            // 2. Determine file type
-            const ext = path.extname(filename).toLowerCase().replace('.', '');
-            const is_pres = ['pptx', 'ppt', 'key', 'pdf', 'odp'].includes(ext);
-            // 3. Optimized Launch (LibreOffice / AppleScript)
-            if (is_pres) {
-                if (os.platform() === 'linux') {
-                    console.log(`Native: Launching LibreOffice (--impress) for ${target}`);
-                    return new Promise((resolve) => {
-                        (0, child_process_1.exec)(`libreoffice --impress "${target}"`, (err) => {
-                            if (err)
-                                resolve({ success: false, error: err.message });
-                            else
-                                resolve({ success: true });
-                        });
-                    });
-                }
-                if (os.platform() === 'darwin') {
-                    let script = '';
-                    if (ext === 'key') {
-                        script = `
-              tell application "Keynote"
-                activate
-                open (POSIX file "${target}")
-                delay 1
-                start (front document)
-              end tell
-            `;
-                    }
-                    else if (ext === 'pptx' || ext === 'ppt') {
-                        script = `
-              tell application "Microsoft PowerPoint"
-                activate
-                open (POSIX file "${target}")
-                delay 1
-                run slide show of active presentation
-              end tell
-            `;
-                    }
-                    if (script) {
-                        console.log(`Native: Launching ${ext} via AppleScript for ${target}`);
-                        // Write to a temp .scpt file instead of passing via -e flag.
-                        // The -e approach breaks on multi-line scripts and paths with spaces or quotes.
-                        const tmp_script_path = path.join(os.tmpdir(), `ae_launch_${Date.now()}.scpt`);
-                        return new Promise((resolve) => {
-                            try {
-                                fs.writeFileSync(tmp_script_path, script.trim());
-                            }
-                            catch (e) {
-                                resolve({ success: false, error: `Failed to write AppleScript temp file: ${e.message}` });
-                                return;
-                            }
-                            (0, child_process_1.exec)(`osascript "${tmp_script_path}"`, (err) => {
-                                try {
-                                    fs.unlinkSync(tmp_script_path);
-                                }
-                                catch { }
-                                if (err)
-                                    resolve({ success: false, error: err.message });
-                                else
-                                    resolve({ success: true });
-                            });
-                        });
-                    }
-                }
+            // 2a. Data-driven launcher template (no rebuild needed for config changes).
+            //     Svelte resolves a Launch Profile to a single native_template string.
+            //     Format: AppleScript string with {{path}} placeholder, OR "shell:<cmd> {{path}}"
+            if (!native_template) {
+                return { success: false, error: 'No native template configured for this file' };
            }
-            // 4. Default Fallback
-            await electron_1.shell.openPath(target);
-            return { success: true };
+            const resolved = native_template.replace(/\{\{path\}\}/g, target);
+            if (resolved.startsWith('shell:')) {
+                const cmd = resolved.slice(6).trim();
+                console.log(`Native: Running custom shell template for ${filename}`);
+                return new Promise((resolve_fn) => {
+                    (0, child_process_1.exec)(cmd, (err, stdout, stderr) => {
+                        if (err)
+                            resolve_fn({ success: false, error: err.message, stderr: stderr.trim() });
+                        else
+                            resolve_fn({ success: true, stdout: stdout.trim() });
+                    });
+                });
+            }
+            console.log(`Native: Running custom AppleScript template for ${filename}`);
+            const tmp_script_path = path.join(os.tmpdir(), `ae_launch_${Date.now()}.scpt`);
+            return new Promise((resolve_fn) => {
+                try {
+                    fs.writeFileSync(tmp_script_path, resolved.trim());
+                }
+                catch (e) {
+                    resolve_fn({ success: false, error: `Failed to write AppleScript temp file: ${e.message}` });
+                    return;
+                }
+                (0, child_process_1.exec)(`osascript "${tmp_script_path}"`, (err) => {
+                    try {
+                        fs.unlinkSync(tmp_script_path);
+                    }
+                    catch { }
+                    if (err)
+                        resolve_fn({ success: false, error: err.message });
+                    else
+                        resolve_fn({ success: true });
+                });
+            });
+        }
+        catch (error) {
+            return { success: false, error: error.message };
+        }
+    });
+    // Thin primitive: copy a cached file to the temp directory with its original filename,
+    // then return the resolved path. The caller (Svelte side) decides what to do next —
+    // run_osascript, run_cmd, open_local_file, etc.
+    //
+    // This is the preferred building block for custom launch flows. Use launch_from_cache
+    // when Svelte has already resolved a native template; use copy_from_cache_to_temp when
+    // you want full control over what happens after the file lands in temp.
+    electron_1.ipcMain.handle('native:copy-from-cache-to-temp', async (event, { cache_root, hash, temp_root, filename, hash_prefix_length = 2 }) => {
+        try {
+            const source = get_organized_hashed_path(cache_root, hash, hash_prefix_length);
+            if (!fs.existsSync(source)) {
+                return { success: false, error: `File not in cache: ${hash}` };
+            }
+            const expanded_temp = (0, file_utils_1.expandPath)(temp_root);
+            const target = path.join(expanded_temp, filename);
+            if (!fs.existsSync(expanded_temp))
+                fs.mkdirSync(expanded_temp, { recursive: true });
+            fs.copyFileSync(source, target);
+            console.log(`Native: Copied from cache to temp -> ${target}`);
+            return { success: true, path: target };
        }
        catch (error) {
            return { success: false, error: error.message };
--- a/dist/main/file_handlers.js.map
+++ b/dist/main/file_handlers.js.map
--- a/dist/main/index.js
+++ b/dist/main/index.js
@@ -50,8 +50,8 @@ async function createWindow() {
        cachedFullConfig = await (0, api_client_1.fetchFullConfig)(cachedSeed);
    }
    mainWindow = new electron_1.BrowserWindow({
-        width: 1600,
-        height: 900,
+        width: 1280,
+        height: 800,
        title: 'OSIT Aether Launcher (Native)',
        webPreferences: {
            preload: path.join(__dirname, '../preload/index.js'),
@@ -59,6 +59,9 @@ async function createWindow() {
            nodeIntegration: false,
        },
    });
+    // Let the native window manager maximize — more reliable than using screen.workArea,
+    // which Electron under-reports on KDE and other Linux DEs.
+    mainWindow.maximize();
    let targetUrl = 'http://demo.localhost:5173';
    if (cachedFullConfig && cachedFullConfig.native_device) {
        const device = cachedFullConfig.native_device;
@@ -82,15 +85,29 @@ async function createWindow() {
 (0, shell_handlers_1.registerShellHandlers)();
 (0, file_handlers_1.registerFileHandlers)();
 (0, system_handlers_1.registerSystemHandlers)();
-electron_1.app.on('ready', createWindow);
-electron_1.app.on('window-all-closed', () => {
-    if (process.platform !== 'darwin')
-        electron_1.app.quit();
-});
-electron_1.app.on('activate', () => {
-    if (mainWindow === null)
-        createWindow();
-});
+// Single instance lock — if another instance is already running, focus it and quit.
+const gotTheLock = electron_1.app.requestSingleInstanceLock();
+if (!gotTheLock) {
+    electron_1.app.quit();
+}
+else {
+    electron_1.app.on('second-instance', () => {
+        if (mainWindow) {
+            if (mainWindow.isMinimized())
+                mainWindow.restore();
+            mainWindow.focus();
+        }
+    });
+    electron_1.app.on('ready', createWindow);
+    electron_1.app.on('window-all-closed', () => {
+        if (process.platform !== 'darwin')
+            electron_1.app.quit();
+    });
+    electron_1.app.on('activate', () => {
+        if (mainWindow === null)
+            createWindow();
+    });
+}
 electron_1.ipcMain.handle('get-seed-config', async () => cachedSeed || await (0, config_loader_1.loadSeedConfig)());
 electron_1.ipcMain.handle('get-device-config', async () => cachedFullConfig);
 electron_1.ipcMain.handle('get-jwt', async () => null);
--- a/dist/main/index.js.map
+++ b/dist/main/index.js.map
@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/main/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAuD;AACvD,2CAA6B;AAC7B,uCAAyB;AACzB,mDAAiD;AACjD,6CAA+C;AAC/C,qDAAyD;AACzD,mDAAuD;AACvD,uDAA2D;AAG3D,IAAI,UAAU,GAAyB,IAAI,CAAC;AAC5C,IAAI,UAAU,GAAsB,IAAI,CAAC;AACzC,IAAI,gBAAgB,GAAQ,IAAI,CAAC;AAEjC,KAAK,UAAU,YAAY;IACzB,UAAU,GAAG,MAAM,IAAA,8BAAc,GAAE,CAAC;IACpC,IAAI,UAAU,EAAE,CAAC;QACf,gBAAgB,GAAG,MAAM,IAAA,4BAAe,EAAC,UAAU,CAAC,CAAC;IACvD,CAAC;IAED,UAAU,GAAG,IAAI,wBAAa,CAAC;QAC7B,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,GAAG;QACX,KAAK,EAAE,+BAA+B;QACtC,cAAc,EAAE;YACd,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC;YACpD,gBAAgB,EAAE,IAAI;YACtB,eAAe,EAAE,KAAK;SACvB;KACF,CAAC,CAAC;IAEH,IAAI,SAAS,GAAG,4BAA4B,CAAC;IAC7C,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,aAAa,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,gBAAgB,CAAC,aAAa,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,QAAQ,CAAC;QAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,IAAI,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAAC;QACrF,mEAAmE;QACnE,uFAAuF;QACvF,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,IAAI,qBAAqB,CAAC;QAC1D,8DAA8D;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAC/D,SAAS,GAAG,GAAG,QAAQ,MAAM,IAAI,WAAW,OAAO,aAAa,UAAU,EAAE,CAAC;IAC/E,CAAC;IAED,mEAAmE;IACnE,IAAI,CAAC,cAAG,CAAC,UAAU;QAAE,UAAU,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;IAC3D,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QACvC,UAAU,EAAE,OAAO,CAAC,gCAAgC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,IAAA,sCAAqB,GAAE,CAAC;AACxB,IAAA,oCAAoB,GAAE,CAAC;AACvB,IAAA,wCAAsB,GAAE,CAAC;AAEzB,cAAG,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;AAE9B,cAAG,CAAC,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;IAC/B,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,cAAG,CAAC,IAAI,EAAE,CAAC;AAChD,CAAC,CAAC,CAAC;AAEH,cAAG,CAAC,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE;IACtB,IAAI,UAAU,KAAK,IAAI;QAAE,YAAY,EAAE,CAAC;AAC1C,CAAC,CAAC,CAAC;AAEH,kBAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,IAAI,MAAM,IAAA,8BAAc,GAAE,CAAC,CAAC;AACpF,kBAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE,CAAC,gBAAgB,CAAC,CAAC;AAClE,kBAAO,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;AAE5C,kBAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;IAC3C,MAAM,UAAU,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAE,EAAE,CAAC;YACpC,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAC3C,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE;QACvB,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE;QACrB,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;QACf,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE;QACvB,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM;QACtB,SAAS,EAAE,EAAE,CAAC,QAAQ,EAAE;QACxB,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE;QACtB,YAAY,EAAE,SAAS;QACvB,cAAc,EAAE,EAAE,CAAC,OAAO,EAAE;QAC5B,aAAa,EAAE,EAAE,CAAC,MAAM,EAAE;KAC3B,CAAC;AACJ,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/main/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAuD;AACvD,2CAA6B;AAC7B,uCAAyB;AACzB,mDAAiD;AACjD,6CAA+C;AAC/C,qDAAyD;AACzD,mDAAuD;AACvD,uDAA2D;AAG3D,IAAI,UAAU,GAAyB,IAAI,CAAC;AAC5C,IAAI,UAAU,GAAsB,IAAI,CAAC;AACzC,IAAI,gBAAgB,GAAQ,IAAI,CAAC;AAEjC,KAAK,UAAU,YAAY;IACzB,UAAU,GAAG,MAAM,IAAA,8BAAc,GAAE,CAAC;IACpC,IAAI,UAAU,EAAE,CAAC;QACf,gBAAgB,GAAG,MAAM,IAAA,4BAAe,EAAC,UAAU,CAAC,CAAC;IACvD,CAAC;IAED,UAAU,GAAG,IAAI,wBAAa,CAAC;QAC7B,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,GAAG;QACX,KAAK,EAAE,+BAA+B;QACtC,cAAc,EAAE;YACd,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC;YACpD,gBAAgB,EAAE,IAAI;YACtB,eAAe,EAAE,KAAK;SACvB;KACF,CAAC,CAAC;IAEH,qFAAqF;IACrF,2DAA2D;IAC3D,UAAU,CAAC,QAAQ,EAAE,CAAC;IAEtB,IAAI,SAAS,GAAG,4BAA4B,CAAC;IAC7C,IAAI,gBAAgB,IAAI,gBAAgB,CAAC,aAAa,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,gBAAgB,CAAC,aAAa,CAAC;QAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,QAAQ,CAAC;QAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,IAAI,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAAC;QACrF,mEAAmE;QACnE,uFAAuF;QACvF,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,IAAI,qBAAqB,CAAC;QAC1D,8DAA8D;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAC/D,SAAS,GAAG,GAAG,QAAQ,MAAM,IAAI,WAAW,OAAO,aAAa,UAAU,EAAE,CAAC;IAC/E,CAAC;IAED,mEAAmE;IACnE,IAAI,CAAC,cAAG,CAAC,UAAU;QAAE,UAAU,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;IAC3D,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;QACvC,UAAU,EAAE,OAAO,CAAC,gCAAgC,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,IAAA,sCAAqB,GAAE,CAAC;AACxB,IAAA,oCAAoB,GAAE,CAAC;AACvB,IAAA,wCAAsB,GAAE,CAAC;AAEzB,oFAAoF;AACpF,MAAM,UAAU,GAAG,cAAG,CAAC,yBAAyB,EAAE,CAAC;AACnD,IAAI,CAAC,UAAU,EAAE,CAAC;IAChB,cAAG,CAAC,IAAI,EAAE,CAAC;AACb,CAAC;KAAM,CAAC;IACN,cAAG,CAAC,EAAE,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC7B,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,UAAU,CAAC,WAAW,EAAE;gBAAE,UAAU,CAAC,OAAO,EAAE,CAAC;YACnD,UAAU,CAAC,KAAK,EAAE,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,cAAG,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAE9B,cAAG,CAAC,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAC/B,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAAE,cAAG,CAAC,IAAI,EAAE,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,cAAG,CAAC,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE;QACtB,IAAI,UAAU,KAAK,IAAI;YAAE,YAAY,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,kBAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,IAAI,MAAM,IAAA,8BAAc,GAAE,CAAC,CAAC;AACpF,kBAAO,CAAC,MAAM,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE,CAAC,gBAAgB,CAAC,CAAC;AAClE,kBAAO,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;AAE5C,kBAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;IAC3C,MAAM,UAAU,GAAG,EAAE,CAAC,iBAAiB,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAE,EAAE,CAAC;YACpC,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAC3C,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE;QACvB,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE;QACrB,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;QACf,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE;QACvB,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,MAAM;QACtB,SAAS,EAAE,EAAE,CAAC,QAAQ,EAAE;QACxB,QAAQ,EAAE,EAAE,CAAC,OAAO,EAAE;QACtB,YAAY,EAAE,SAAS;QACvB,cAAc,EAAE,EAAE,CAAC,OAAO,EAAE;QAC5B,aAAa,EAAE,EAAE,CAAC,MAAM,EAAE;KAC3B,CAAC;AACJ,CAAC,CAAC,CAAC"}
--- a/dist/main/shell_handlers.js
+++ b/dist/main/shell_handlers.js
@@ -36,6 +36,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerShellHandlers = registerShellHandlers;
 const electron_1 = require("electron");
 const child_process_1 = require("child_process");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
 const os = __importStar(require("os"));
 const file_utils_1 = require("./file_utils");
 function registerShellHandlers() {
@@ -65,10 +67,29 @@ function registerShellHandlers() {
    electron_1.ipcMain.handle('native:run-osascript', async (event, script) => {
        if (os.platform() !== 'darwin')
            return { success: false, error: 'AppleScript is only available on macOS' };
-        const escapedScript = script.replace(/"/g, '\"');
-        const cmd = `osascript -e "${escapedScript}"`;
+        // HARDENED: Write script to a temp .scpt file rather than passing inline via -e.
+        // The old -e approach (`osascript -e "..."`) has two fatal flaws:
+        //   1. It breaks on multi-line scripts.
+        //   2. It breaks on paths containing spaces or special characters (quotes, parens, etc.)
+        // Writing to a file sidesteps both — no shell escaping needed at all.
+        // The .scpt file is deleted immediately after execution (success or failure).
+        // Worst case on crash: a stale .scpt in /tmp, cleared on next OS reboot.
+        //
+        // LEGACY (removed): const cmd = `osascript -e "${script.replace(/"/g, '\\"')}"`;
+        const tmp_script_path = path.join(os.tmpdir(), `ae_osa_${Date.now()}.scpt`);
        return new Promise((resolve) => {
-            (0, child_process_1.exec)(cmd, (error, stdout, stderr) => {
+            try {
+                fs.writeFileSync(tmp_script_path, script.trim());
+            }
+            catch (e) {
+                resolve({ success: false, error: `Failed to write AppleScript temp file: ${e.message}` });
+                return;
+            }
+            (0, child_process_1.exec)(`osascript "${tmp_script_path}"`, (error, stdout, stderr) => {
+                try {
+                    fs.unlinkSync(tmp_script_path);
+                }
+                catch { }
                resolve({ success: !error, stdout: stdout.trim(), stderr: stderr.trim(), error: error ? error.message : null });
            });
        });
@@ -113,28 +134,39 @@ function registerShellHandlers() {
            let script = '';
            if (appType === 'keynote') {
                script = `
-          tell application "Keynote"
-            activate
-            open (POSIX file "${cleanedPath}")
-            delay 1
-            start (front document)
-          end tell
-        `;
+tell application "Keynote"
+  activate
+  open (POSIX file "${cleanedPath}")
+  delay 1
+  start (front document)
+end tell
+        `.trim();
            }
            else if (appType === 'powerpoint') {
                script = `
-          tell application "Microsoft PowerPoint"
-            activate
-            open (POSIX file "${cleanedPath}")
-            delay 1
-            run slide show of active presentation
-          end tell
-        `;
+tell application "Microsoft PowerPoint"
+  activate
+  open (POSIX file "${cleanedPath}")
+  delay 1
+  run slide show of active presentation
+end tell
+        `.trim();
            }
            if (script) {
+                const tmp_script_path = path.join(os.tmpdir(), `ae_launch_${Date.now()}.scpt`);
                return new Promise((resolve) => {
-                    const escapedScript = script.replace(/"/g, '\\"');
-                    (0, child_process_1.exec)(`osascript -e "${escapedScript}"`, (err, stdout, stderr) => {
+                    try {
+                        fs.writeFileSync(tmp_script_path, script);
+                    }
+                    catch (e) {
+                        resolve({ success: false, error: `Failed to write AppleScript temp file: ${e.message}` });
+                        return;
+                    }
+                    (0, child_process_1.exec)(`osascript "${tmp_script_path}"`, (err) => {
+                        try {
+                            fs.unlinkSync(tmp_script_path);
+                        }
+                        catch { }
                        if (err)
                            resolve({ success: false, error: err.message });
                        else
@@ -192,65 +224,115 @@ function registerShellHandlers() {
    });
    electron_1.ipcMain.handle('native:list-tools', async () => {
        return [
+            // --- Config & Info ---
+            {
+                name: 'get_device_config',
+                description: 'Returns hydrated device config injected at startup from seed.json + API.',
+                params: {}
+            },
+            {
+                name: 'get_device_info',
+                description: 'Returns OS metadata: platform, hostname, IPs, CPU count, free RAM, home/tmp paths.',
+                params: {}
+            },
+            // --- File Cache ---
+            {
+                name: 'check_cache',
+                description: 'Checks if a file exists in the hashed cache. verify_hash:true re-hashes to confirm integrity.',
+                params: { cache_root: 'string', hash: 'string', hash_prefix_length: 'number (optional, default 2)', verify_hash: 'boolean (optional)' }
+            },
+            {
+                name: 'download_to_cache',
+                description: 'Streams a file from the API into the hashed cache with SHA-256 integrity check. Cleans stale .tmp files older than 5 min.',
+                params: { url: 'string', cache_root: 'string', hash: 'string', api_key: 'string', account_id: 'string', hash_prefix_length: 'number (optional, default 2)' }
+            },
+            {
+                name: 'copy_from_cache_to_temp',
+                description: 'Preferred primitive. Copies a cached file to temp with its original filename. Returns { success, path }. Caller decides what to do next.',
+                params: { cache_root: 'string', hash: 'string', temp_root: 'string', filename: 'string', hash_prefix_length: 'number (optional, default 2)' }
+            },
+            {
+                name: 'launch_from_cache',
+                description: 'Combines copy_from_cache_to_temp + execute. Runs native_template after copying — AppleScript string with {{path}} placeholder, or "shell:<cmd>" prefix. Returns error if native_template is null.',
+                params: { cache_root: 'string', hash: 'string', temp_root: 'string', filename: 'string', hash_prefix_length: 'number (optional)', native_template: 'string | null' }
+            },
+            // --- Shell & OS ---
            {
                name: 'open_folder',
-                description: 'Opens a directory in the OS file explorer (Finder/Files/Explorer).',
+                description: 'Opens a directory in the OS file explorer (Finder on macOS).',
                params: { path: 'string' }
            },
            {
                name: 'run_cmd',
-                description: 'Executes an asynchronous shell command with a timeout.',
-                params: { cmd: 'string', timeout: 'number (optional)' }
+                description: 'Async shell command execution with timeout.',
+                params: { cmd: 'string', timeout: 'number (optional, default 30000ms)' }
            },
            {
                name: 'run_cmd_sync',
-                description: 'Executes a synchronous shell command.',
+                description: 'Synchronous shell command execution.',
                params: { cmd: 'string' }
            },
            {
                name: 'run_osascript',
-                description: 'Executes a raw AppleScript string (macOS only).',
+                description: 'Hardened AppleScript executor — writes to temp .scpt file, handles multi-line scripts and paths with special characters. macOS only.',
                params: { script: 'string' }
            },
            {
                name: 'kill_processes',
-                description: 'Forcefully terminates processes by name.',
+                description: 'Terminates processes by name. macOS/Linux: pkill -f. Windows: taskkill /F.',
                params: { process_name_li: 'string[]' }
            },
            {
                name: 'open_local_file_v2',
-                description: 'Opens a local file using the default OS handler.',
-                params: { filePath: 'string' }
+                description: 'Opens a file with its default OS application via shell.openPath.',
+                params: { path: 'string' }
            },
+            {
+                name: 'open_external',
+                description: 'Opens a URL in Chrome, Firefox, or the system default browser.',
+                params: { url: 'string', app: 'chrome | firefox | default (optional)' }
+            },
+            // --- Presentations ---
            {
                name: 'launch_presentation',
-                description: 'Phase 5: Specialized launcher for PowerPoint, Keynote, and LibreOffice with auto-focus.',
-                params: { path: 'string', app: 'default|powerpoint|keynote' }
+                description: 'Platform-aware launcher for PowerPoint, Keynote, LibreOffice. Resolves [home]/[tmp] placeholders. Hardened AppleScript (2026-05-11). Prefer copy_from_cache_to_temp + run_osascript for new flows.',
+                params: { path: 'string', app: 'default | powerpoint | keynote (optional)', os_platform: 'string (optional)' }
            },
            {
                name: 'control_presentation',
-                description: 'Phase 5: Remote navigation for active slideshows.',
-                params: { app: 'powerpoint|keynote', action: 'next|prev|start|stop' }
+                description: 'Slide navigation for active PowerPoint or Keynote via AppleScript. macOS only.',
+                params: { app: 'powerpoint | keynote', action: 'next | prev | start | stop' }
+            },
+            // --- System Management ---
+            {
+                name: 'set_wallpaper',
+                description: 'Sets desktop wallpaper. Downloads from url (cached to ~/Library/Caches/OSIT/wallpaper/) or applies local path. url_external targets projector/second display separately. macOS only in production.',
+                params: { path: 'string (optional)', url: 'string (optional)', url_external: 'string (optional)', display: 'all | primary | external (optional, default all)', api_key: 'string (optional)', account_id: 'string (optional)' }
            },
            {
-                name: 'check_cache',
-                description: 'Checks if a file exists in the local organized cache.',
-                params: { cache_root: 'string', hash: 'string', hash_prefix_length: 'number' }
+                name: 'set_display_layout',
+                description: 'Mirror or extend displays via bundled displayplacer. macOS only. Auto-detects displays when no configStr given; configStr is an optional manual override.',
+                params: { mode: 'mirror | extend', configStr: 'string (optional)' }
            },
            {
-                name: 'download_to_cache',
-                description: 'Downloads a file from the API directly into the native cache.',
-                params: { url: 'string', cache_root: 'string', hash: 'string', api_key: 'string', account_id: 'string' }
+                name: 'window_control',
+                description: 'Electron window management.',
+                params: { action: 'maximize | unmaximize | minimize | restore | close | fullscreen | kiosk | devtools | reload', value: 'boolean (optional, used by fullscreen/kiosk/devtools)' }
            },
            {
-                name: 'launch_from_cache',
-                description: 'Atomic operation: Copies file from cache to temp with original name and launches via specialized handler.',
-                params: { cache_root: 'string', hash: 'string', temp_root: 'string', filename: 'string' }
+                name: 'power_control',
+                description: 'Shutdown, reboot, or sleep the host machine. macOS + Linux. May require sudo for shutdown/reboot.',
+                params: { action: 'shutdown | reboot | sleep' }
            },
            {
-                name: 'get_device_info',
-                description: 'Returns hardware and OS metadata (CPUs, RAM, IP addresses, Hostname).',
-                params: {}
+                name: 'manage_recording',
+                description: 'Screen recording via bundled aperture binary. macOS only.',
+                params: { action: 'start | stop | status', options: '{ fps?, audioDeviceId?, output? } (optional)' }
+            },
+            {
+                name: 'update_app',
+                description: 'STUB: Downloads update package but does not install. Not functional.',
+                params: { source: 'url | file', url: 'string (optional)', path: 'string (optional)' }
            }
        ];
    });
--- a/dist/main/shell_handlers.js.map
+++ b/dist/main/shell_handlers.js.map
--- a/dist/main/system_handlers.js
+++ b/dist/main/system_handlers.js
@@ -100,17 +100,162 @@ function registerSystemHandlers() {
        return { success: true };
    });
    // 2. Set Wallpaper
-    electron_1.ipcMain.handle('native:set-wallpaper', async (event, { path: imagePath }) => {
-        const cleanPath = (0, file_utils_1.expandPath)(imagePath);
-        if (!fs.existsSync(cleanPath))
-            return { success: false, error: 'Image file not found' };
-        if (os.platform() === 'darwin') {
-            const script = `tell application "System Events" to set picture of every desktop to "${cleanPath}"`;
-            return await runExec(`osascript -e '${script}'`);
+    // Supports local path OR URL download. URL images are saved to a stable cache dir
+    // so macOS can reference them persistently after reboot.
+    // display: 'all' (default) | 'primary' (built-in) | 'external' (projector/second screen)
+    // url_external: optional second URL for the external display only.
+    electron_1.ipcMain.handle('native:set-wallpaper', async (event, { path: imagePath, url, url_external, display = 'all', api_key, account_id }) => {
+        // Cache dir: ~/Library/Caches/OSIT/wallpaper on macOS, ~/.cache/osit/wallpaper on Linux.
+        // Using a stable path means macOS keeps the reference across reboots.
+        const wallpaper_cache_dir = os.platform() === 'darwin'
+            ? path.join(os.homedir(), 'Library', 'Caches', 'OSIT', 'wallpaper')
+            : path.join(os.homedir(), '.cache', 'osit', 'wallpaper');
+        async function download_wallpaper_image(image_url, basename) {
+            if (!fs.existsSync(wallpaper_cache_dir)) {
+                fs.mkdirSync(wallpaper_cache_dir, { recursive: true });
+            }
+            // Infer extension from URL path, fall back to .jpg
+            let ext = '.jpg';
+            try {
+                const url_path = new URL(image_url).pathname;
+                const inferred = path.extname(url_path).toLowerCase();
+                if (['.jpg', '.jpeg', '.png', '.webp'].includes(inferred)) {
+                    ext = inferred === '.jpeg' ? '.jpg' : inferred;
+                }
+            }
+            catch { }
+            const dest_path = path.join(wallpaper_cache_dir, basename + ext);
+            const headers = {};
+            if (api_key)
+                headers['x-aether-api-key'] = api_key;
+            if (account_id)
+                headers['x-account-id'] = account_id;
+            try {
+                const response = await (0, axios_1.default)({ method: 'get', url: image_url, responseType: 'stream', headers });
+                const content_type = (response.headers['content-type'] ?? '');
+                if (!content_type.startsWith('image/')) {
+                    response.data.destroy();
+                    return { success: false, error: `URL did not return an image (Content-Type: ${content_type})` };
+                }
+                const writer = fs.createWriteStream(dest_path);
+                response.data.pipe(writer);
+                await new Promise((resolve, reject) => {
+                    writer.on('finish', resolve);
+                    writer.on('error', reject);
+                });
+                const file_size = fs.statSync(dest_path).size;
+                if (file_size === 0) {
+                    try {
+                        fs.unlinkSync(dest_path);
+                    }
+                    catch { }
+                    return { success: false, error: 'Wallpaper download incomplete (0 bytes)' };
+                }
+                return { success: true, path: dest_path };
+            }
+            catch (e) {
+                return { success: false, error: `Wallpaper download failed: ${e.message}` };
+            }
        }
-        else if (os.platform() === 'linux') {
-            // Gnome/Ubuntu default
-            return await runExec(`gsettings set org.gnome.desktop.background picture-uri "file://${cleanPath}"`);
+        // HARDENED: write AppleScript to a temp file, same pattern as native:run-osascript.
+        // The old osascript -e approach breaks on paths with spaces or special characters.
+        async function apply_mac_wallpaper(img_path, display_target) {
+            const escaped = img_path.replace(/\\/g, '\\\\').replace(/"/g, '\\"');
+            let script;
+            if (display_target === 'primary') {
+                script = `tell application "System Events"\n\ttell desktop 1\n\t\tset picture to "${escaped}"\n\tend tell\nend tell`;
+            }
+            else if (display_target === 'external') {
+                script = `tell application "System Events"\n\ttell desktop 2\n\t\tset picture to "${escaped}"\n\tend tell\nend tell`;
+            }
+            else {
+                script = `tell application "System Events"\n\ttell every desktop\n\t\tset picture to "${escaped}"\n\tend tell\nend tell`;
+            }
+            const script_path = path.join(os.tmpdir(), `ae_wallpaper_${Date.now()}.scpt`);
+            fs.writeFileSync(script_path, script, 'utf-8');
+            try {
+                return await runExec(`osascript "${script_path}"`);
+            }
+            finally {
+                try {
+                    fs.unlinkSync(script_path);
+                }
+                catch { }
+            }
+        }
+        if (os.platform() === 'darwin') {
+            // Resolve primary image path
+            let primary_path = null;
+            if (imagePath) {
+                const clean = (0, file_utils_1.expandPath)(imagePath);
+                if (!fs.existsSync(clean))
+                    return { success: false, error: 'Image file not found' };
+                primary_path = clean;
+            }
+            else if (url) {
+                const result = await download_wallpaper_image(url, 'wallpaper_primary');
+                if (!result.success || !result.path)
+                    return { success: false, error: result.error };
+                primary_path = result.path;
+            }
+            if (!primary_path && url_external && display === 'external') {
+                const ext_result = await download_wallpaper_image(url_external, 'wallpaper_external');
+                if (!ext_result.success || !ext_result.path)
+                    return { success: false, error: ext_result.error };
+                return await apply_mac_wallpaper(ext_result.path, 'external');
+            }
+            if (!primary_path)
+                return { success: false, error: 'No image source provided' };
+            if (url_external) {
+                // Different images for each display: set primary display first, then external
+                const primary_result = await apply_mac_wallpaper(primary_path, 'primary');
+                if (!primary_result.success)
+                    return primary_result;
+                const ext_result = await download_wallpaper_image(url_external, 'wallpaper_external');
+                if (!ext_result.success || !ext_result.path)
+                    return { success: false, error: ext_result.error };
+                return await apply_mac_wallpaper(ext_result.path, 'external');
+            }
+            else {
+                return await apply_mac_wallpaper(primary_path, display);
+            }
+        }
+        if (os.platform() === 'linux') {
+            // Dev test mode: never touch the desktop on Linux. Running gsettings during
+            // development would reset the dev workstation monitors on every test cycle.
+            // Return what would have run so the Svelte side can show a debug popup.
+            const would_run = [];
+            const cache_dir = wallpaper_cache_dir;
+            if (!imagePath && !url && !url_external) {
+                return { success: false, error: 'No image source provided' };
+            }
+            if (imagePath) {
+                const clean = (0, file_utils_1.expandPath)(imagePath);
+                if (!fs.existsSync(clean))
+                    return { success: false, error: 'Image file not found' };
+            }
+            if (url)
+                would_run.push(`download: ${url}\n  → ${path.join(cache_dir, 'wallpaper_primary.jpg')}`);
+            if (url_external)
+                would_run.push(`download: ${url_external}\n  → ${path.join(cache_dir, 'wallpaper_external.jpg')}`);
+            if (imagePath) {
+                would_run.push(`gsettings set org.gnome.desktop.background picture-uri "file://${(0, file_utils_1.expandPath)(imagePath)}"`);
+            }
+            else if (url) {
+                would_run.push(`gsettings set org.gnome.desktop.background picture-uri "file://${path.join(cache_dir, 'wallpaper_primary.jpg')}"`);
+            }
+            if (url_external) {
+                would_run.push(`(external display: gsettings has no per-display wallpaper support)`);
+            }
+            return {
+                success: true,
+                linux_test_mode: true,
+                platform: 'linux',
+                display,
+                url: url ?? null,
+                url_external: url_external ?? null,
+                would_run
+            };
        }
        return { success: false, error: 'Platform not supported' };
    });
@@ -139,7 +284,7 @@ function registerSystemHandlers() {
        }
        if (!cmd)
            return { success: false, error: 'Action not supported' };
-        // NOTE: These commands often require root. 
+        // NOTE: These commands often require root.
        // For a kiosk, you might configure sudoers to allow this specific command without password.
        return await runExec(cmd);
    });
@@ -215,33 +360,128 @@ function registerSystemHandlers() {
        }
        return { success: false, error: 'Unknown action' };
    });
-    // 6. Set Display Layout (Displayplacer)
+    // 6. Set Display Layout
+    // Primary path: display_control (native CoreGraphics, no external deps).
+    //   Build from scripts/display_control.m via scripts/build-display-control.sh on a Mac.
+    //   Commit the resulting resources/bin/display_control binary to the repo.
+    // Fallback: displayplacer (requires: brew install displayplacer on each venue Mac).
+    //   Also supports per-device configStr override (displayplacer format).
    electron_1.ipcMain.handle('native:set-display-layout', async (event, { mode, configStr }) => {
        if (os.platform() !== 'darwin')
            return { success: false, error: 'Display control only supported on macOS' };
-        const binPath = electron_1.app.isPackaged
-            ? path.join(process.resourcesPath, 'bin', 'displayplacer')
-            : path.join(__dirname, '../../resources/bin/displayplacer');
-        let cmd = '';
+        // Primary: display_control — native CoreGraphics, no Homebrew dependency.
+        // Derived from OSIT MasterKey app (LegacyUtilities.m). No configStr support needed —
+        // CoreGraphics auto-detects all connected displays.
+        const dc_bin = electron_1.app.isPackaged
+            ? path.join(process.resourcesPath, 'bin', 'display_control')
+            : path.join(__dirname, '../../resources/bin/display_control');
+        if (fs.existsSync(dc_bin) && !configStr) {
+            if (mode !== 'mirror' && mode !== 'extend') {
+                return { success: false, error: `Unsupported display mode: ${mode}` };
+            }
+            return await runExec(`"${dc_bin}" ${mode}`);
+        }
+        // Fallback: displayplacer — required when display_control binary is not built yet,
+        // or when a per-device configStr override is set (displayplacer-format string from event_device.data_json).
+        // Install: brew install displayplacer
+        const _dp_candidates = electron_1.app.isPackaged
+            ? [path.join(process.resourcesPath, 'bin', 'displayplacer')]
+            : [
+                path.join(__dirname, '../../resources/bin/displayplacer'),
+                '/opt/homebrew/bin/displayplacer', // Apple Silicon Homebrew
+                '/usr/local/bin/displayplacer', // Intel Homebrew
+            ];
+        const dpPath = _dp_candidates.find(p => fs.existsSync(p)) ?? _dp_candidates[0];
+        // Explicit configStr takes priority — allows manual per-device override.
+        if (configStr) {
+            return await runExec(`"${dpPath}" ${configStr}`);
+        }
+        // Auto-detect via `displayplacer list`.
+        const list_result = await runExec(`"${dpPath}" list`);
+        if (!list_result.success || !list_result.stdout) {
+            return { success: false, error: `displayplacer not available. Build display_control from scripts/build-display-control.sh or run: brew install displayplacer` };
+        }
+        // The command line looks like: displayplacer "id:xxx res:... origin:(0,0) ..." "id:yyy ..."
+        const cmd_line = list_result.stdout.split('\n').find(l => l.trim().startsWith('displayplacer "'));
+        if (!cmd_line) {
+            return { success: false, error: 'Only one display connected or displayplacer list output unrecognised' };
+        }
+        const display_strings = [...cmd_line.matchAll(/"([^"]+)"/g)].map(m => m[1]);
+        if (display_strings.length < 2) {
+            return { success: false, error: 'Only one display found; cannot change layout' };
+        }
        if (mode === 'mirror') {
-            // This usually requires querying current IDs, which is complex.
-            // If configStr is provided (output of 'displayplacer list'), use it.
-            if (configStr) {
-                cmd = `"${binPath}" ${configStr}`;
+            const primary_id_match = display_strings[0].match(/\bid:([^\s]+)/);
+            if (!primary_id_match) {
+                return { success: false, error: 'Could not parse primary display ID from displayplacer output' };
            }
-            else {
-                return { success: false, error: 'Config string required for now' };
+            const primary_id = primary_id_match[1];
+            const mirror_args = display_strings.map((s, i) => {
+                if (i === 0)
+                    return `"${s}"`;
+                const without_existing_mirror = s.replace(/\s*mirror_of_display:\S+/g, '').trim();
+                return `"${without_existing_mirror} mirror_of_display:${primary_id}"`;
+            }).join(' ');
+            return await runExec(`"${dpPath}" ${mirror_args}`);
+        }
+        if (mode === 'extend') {
+            const any_mirrored = display_strings.some(s => /\bmirror_of_display:\S+/.test(s));
+            if (!any_mirrored) {
+                return await runExec(`"${dpPath}" ${display_strings.map(s => `"${s}"`).join(' ')}`);
            }
+            let x_offset = 0;
+            const extend_args = display_strings.map((s) => {
+                const without_mirror = s.replace(/\s*mirror_of_display:\S+/g, '').trim();
+                const res_match = without_mirror.match(/\bres:(\d+)x\d+/);
+                const width = res_match ? parseInt(res_match[1]) : 1920;
+                const updated = without_mirror.replace(/\borigin:\([^)]+\)/, `origin:(${x_offset},0)`);
+                x_offset += width;
+                return `"${updated}"`;
+            }).join(' ');
+            return await runExec(`"${dpPath}" ${extend_args}`);
        }
-        else if (mode === 'extend') {
-            if (configStr) {
-                cmd = `"${binPath}" ${configStr}`;
-            }
+        return { success: false, error: `Unsupported display mode: ${mode}` };
+    });
+    // 6b. List Display Modes
+    electron_1.ipcMain.handle('native:list-display-modes', async () => {
+        if (os.platform() !== 'darwin')
+            return { success: false, error: 'Display control only supported on macOS' };
+        const dc_bin = electron_1.app.isPackaged
+            ? path.join(process.resourcesPath, 'bin', 'display_control')
+            : path.join(__dirname, '../../resources/bin/display_control');
+        if (!fs.existsSync(dc_bin)) {
+            return { success: false, error: 'display_control binary not found. Build via scripts/build-display-control.sh.' };
        }
-        if (cmd) {
-            return await runExec(cmd);
+        const result = await runExec(`"${dc_bin}" list-modes`);
+        if (!result.success || !result.stdout) {
+            return { success: false, error: result.error ?? 'list-modes returned no output' };
        }
-        return { success: false, error: 'Invalid mode or missing config' };
+        try {
+            const displays = JSON.parse(result.stdout);
+            return { success: true, displays };
+        }
+        catch (e) {
+            return { success: false, error: `Failed to parse list-modes output: ${e.message}`, raw: result.stdout };
+        }
+    });
+    // 6c. Set Display Mode
+    electron_1.ipcMain.handle('native:set-display-mode', async (event, { display_index, width, height, refresh_rate, hidpi }) => {
+        if (os.platform() !== 'darwin')
+            return { success: false, error: 'Display control only supported on macOS' };
+        const dc_bin = electron_1.app.isPackaged
+            ? path.join(process.resourcesPath, 'bin', 'display_control')
+            : path.join(__dirname, '../../resources/bin/display_control');
+        if (!fs.existsSync(dc_bin)) {
+            return { success: false, error: 'display_control binary not found. Build via scripts/build-display-control.sh.' };
+        }
+        let cmd = `"${dc_bin}" set-mode ${display_index} ${width} ${height}`;
+        if (refresh_rate)
+            cmd += ` --refresh ${refresh_rate}`;
+        if (hidpi === true)
+            cmd += ' --hidpi';
+        if (hidpi === false)
+            cmd += ' --no-hidpi';
+        return await runExec(cmd);
    });
    // 7. Update App
    electron_1.ipcMain.handle('native:update-app', async (event, { source, url, path: localPath }) => {
--- a/dist/main/system_handlers.js.map
+++ b/dist/main/system_handlers.js.map
--- a/dist/preload/index.js
+++ b/dist/preload/index.js
@@ -14,6 +14,7 @@ electron_1.contextBridge.exposeInMainWorld('aetherNative', {
    open_local_file_v2: (path) => electron_1.ipcRenderer.invoke('native:open-local-file-v2', path),
    check_cache: (args) => electron_1.ipcRenderer.invoke('native:check-cache', args),
    download_to_cache: (args) => electron_1.ipcRenderer.invoke('native:download-to-cache', args),
+    copy_from_cache_to_temp: (args) => electron_1.ipcRenderer.invoke('native:copy-from-cache-to-temp', args),
    launch_from_cache: (args) => electron_1.ipcRenderer.invoke('native:launch-from-cache', args),
    launch_presentation: (args) => electron_1.ipcRenderer.invoke('native:launch-presentation', args),
    control_presentation: (args) => electron_1.ipcRenderer.invoke('native:control-presentation', args),
@@ -24,6 +25,8 @@ electron_1.contextBridge.exposeInMainWorld('aetherNative', {
    window_control: (args) => electron_1.ipcRenderer.invoke('native:window-control', args),
    manage_recording: (args) => electron_1.ipcRenderer.invoke('native:manage-recording', args),
    set_display_layout: (args) => electron_1.ipcRenderer.invoke('native:set-display-layout', args),
+    list_display_modes: () => electron_1.ipcRenderer.invoke('native:list-display-modes'),
+    set_display_mode: (args) => electron_1.ipcRenderer.invoke('native:set-display-mode', args),
    power_control: (args) => electron_1.ipcRenderer.invoke('native:power-control', args),
    open_external: (args) => electron_1.ipcRenderer.invoke('native:open-external', args),
 });
--- a/dist/preload/index.js.map
+++ b/dist/preload/index.js.map
@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/preload/index.ts"],"names":[],"mappings":";;AAAA,uCAAsD;AAEtD,wBAAa,CAAC,iBAAiB,CAAC,cAAc,EAAE;IAC9C,eAAe,EAAE,GAAG,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC;IAC5D,iBAAiB,EAAE,GAAG,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,mBAAmB,CAAC;IAChE,OAAO,EAAE,GAAG,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,SAAS,CAAC;IAC5C,eAAe,EAAE,GAAG,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC;IAE5D,WAAW,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,oBAAoB,EAAE,IAAI,CAAC;IAC7E,OAAO,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC;IAClE,YAAY,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,qBAAqB,EAAE,IAAI,CAAC;IAC5E,aAAa,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACrF,cAAc,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,uBAAuB,EAAE,IAAI,CAAC;IAChF,kBAAkB,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,2BAA2B,EAAE,IAAI,CAAC;IAE3F,WAAW,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,oBAAoB,EAAE,IAAI,CAAC;IAC1E,iBAAiB,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,0BAA0B,EAAE,IAAI,CAAC;IACtF,iBAAiB,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,0BAA0B,EAAE,IAAI,CAAC;IACtF,mBAAmB,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,4BAA4B,EAAE,IAAI,CAAC;IAC1F,oBAAoB,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,6BAA6B,EAAE,IAAI,CAAC;IAC5F,UAAU,EAAE,GAAG,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,mBAAmB,CAAC;IAEzD,uBAAuB;IACvB,aAAa,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,sBAAsB,EAAE,IAAI,CAAC;IAC9E,UAAU,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,mBAAmB,EAAE,IAAI,CAAC;IACxE,cAAc,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,uBAAuB,EAAE,IAAI,CAAC;IAChF,gBAAgB,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,yBAAyB,EAAE,IAAI,CAAC;IACpF,kBAAkB,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,2BAA2B,EAAE,IAAI,CAAC;IACxF,aAAa,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,sBAAsB,EAAE,IAAI,CAAC;IAC9E,aAAa,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,sBAAsB,EAAE,IAAI,CAAC;CAC/E,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/preload/index.ts"],"names":[],"mappings":";;AAAA,uCAAsD;AAEtD,wBAAa,CAAC,iBAAiB,CAAC,cAAc,EAAE;IAC9C,eAAe,EAAE,GAAG,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC;IAC5D,iBAAiB,EAAE,GAAG,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,mBAAmB,CAAC;IAChE,OAAO,EAAE,GAAG,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,SAAS,CAAC;IAC5C,eAAe,EAAE,GAAG,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,iBAAiB,CAAC;IAE5D,WAAW,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,oBAAoB,EAAE,IAAI,CAAC;IAC7E,OAAO,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC;IAClE,YAAY,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,qBAAqB,EAAE,IAAI,CAAC;IAC5E,aAAa,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACrF,cAAc,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,uBAAuB,EAAE,IAAI,CAAC;IAChF,kBAAkB,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,2BAA2B,EAAE,IAAI,CAAC;IAE3F,WAAW,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,oBAAoB,EAAE,IAAI,CAAC;IAC1E,iBAAiB,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,0BAA0B,EAAE,IAAI,CAAC;IACtF,uBAAuB,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,gCAAgC,EAAE,IAAI,CAAC;IAClG,iBAAiB,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,0BAA0B,EAAE,IAAI,CAAC;IACtF,mBAAmB,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,4BAA4B,EAAE,IAAI,CAAC;IAC1F,oBAAoB,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,6BAA6B,EAAE,IAAI,CAAC;IAC5F,UAAU,EAAE,GAAG,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,mBAAmB,CAAC;IAEzD,uBAAuB;IACvB,aAAa,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,sBAAsB,EAAE,IAAI,CAAC;IAC9E,UAAU,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,mBAAmB,EAAE,IAAI,CAAC;IACxE,cAAc,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,uBAAuB,EAAE,IAAI,CAAC;IAChF,gBAAgB,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,yBAAyB,EAAE,IAAI,CAAC;IACpF,kBAAkB,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,2BAA2B,EAAE,IAAI,CAAC;IACxF,kBAAkB,EAAE,GAAG,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,2BAA2B,CAAC;IACzE,gBAAgB,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,yBAAyB,EAAE,IAAI,CAAC;IACpF,aAAa,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,sBAAsB,EAAE,IAAI,CAAC;IAC9E,aAAa,EAAE,CAAC,IAAS,EAAE,EAAE,CAAC,sBAAW,CAAC,MAAM,CAAC,sBAAsB,EAAE,IAAI,CAAC;CAC/E,CAAC,CAAC"}
--- a/documentation/TODO_AGENTS.md
+++ b/documentation/TODO_AGENTS.md
@@ -0,0 +1,148 @@
+# Native App Agent Task List
+> Use this file to track steps for complex features or bug fixes.
+> **Status:** Stable - ongoing development.
+
+## Current Investigation
+- This started as an API contract review for the native Electron bootstrap path and expanded into a packaging/runtime issue after the deploy step stopped producing bundles.
+- We now know the API side was not the root cause. The bootstrap request shape in `src/main/api_client.ts` was wrong and has been corrected.
+- The packaging blocker has been diagnosed and fixed (see below).
+
+## Launcher Terminology Cleanup
+- Align the native docs/comments with the Svelte-side terminology: **Launch Profile** = the
+   Svelte config object keyed by extension; **Native Template** = the AppleScript or shell
+   string Electron actually executes after the file lands in temp.
+- Update `src/main/file_handlers.ts` comments and any bridge-facing wording so they describe the
+   resolved `native_template` string accurately. `launch_profiles` is only the Svelte-side map;
+   the IPC payload is the single executable string. Do not reintroduce `launch_scripts` as the
+   public term.
+- Keep the source of truth in Svelte. Electron should remain a thin executor/copy layer.
+- After source/docs updates, rebuild/regenerate `dist/main/file_handlers.js` from source; do not
+   hand-edit the generated file.
+- If any parameter names remain awkward in source, preserve runtime behavior first and rename
+   only when the signature ripple is understood.
+
+## What Was Fixed
+- Updated the native bootstrap flow to use the direct `site_domain/search` request body expected by API V3.
+- Standardized the account-bypass header to `x-no-account-id: bypass` where that narrow bypass is intended.
+- Removed a redundant `x-no-account-id` header from file download calls.
+- Rewrote the device lookup smoke test so it validates the real two-step bootstrap path end to end.
+- Upgraded Electron from 34.x to 42.0.1.
+- Replaced deprecated `electron-packager` with `@electron/packager` 20.0.0.
+- Added a `package:linux` smoke test path so packaging failures can be isolated from macOS-specific behavior.
+- **Fixed packaging hang on Node 26:** `yauzl` 2.10.0 (used by `extract-zip` in `@electron/packager`) emits no `data` events on Node 26 streams, causing zip extraction to hang indefinitely. Fix: patched `@electron/packager/dist/unzip.js` to use `bsdtar` (libarchive) instead of `extract-zip`. `bsdtar` was chosen over `7z` because `7z` refuses macOS `.app` bundles with chained symlinks inside framework bundles. Patch is re-applied on every `npm install` via the `postinstall` script at `scripts/patch-packager-unzip.js`.
+
+## Verified So Far
+- `npm run dev` works once the Electron binary is present locally.
+- Manual Electron cache extraction restored a runnable checkout on this machine.
+- API validation confirmed the backend responds correctly for:
+	- `event_device/{id}` lookup
+	- `site_domain/search?limit=1` with the direct `SearchQuery` body
+- The returned `site_domain.account_id` matches the device account context in the verified bootstrap flow.
+- The SvelteKit frontend bootstrap path already follows the correct API contract and does not need the same fix.
+- **`npm run package:linux` now produces `builds/aether_launcher-linux-x64/`** with a complete bundle (confirmed 2026-05-11).
+- **`npm run package:mac` now produces `builds/aether_launcher-darwin-x64/` and `builds/aether_launcher-darwin-arm64/`** with `aether_launcher.app` inside each (confirmed 2026-05-11). Initial fix used `7z` but it refused chained symlinks inside macOS framework bundles; switched to `bsdtar` (libarchive) which handles both Linux and macOS zips correctly.
+- `deploy/deploy.sh` output directory names (`aether_launcher-darwin-x64`, `aether_launcher-darwin-arm64`) match packager output — no script changes needed.
+
+## Remaining Items
+1. Test that the packaged Linux binary runs end-to-end against the dev API.
+
+## Root Cause Summary (Packaging Hang)
+- **Tool chain:** Node 26.1.0 + `@electron/packager` 20.0.0 + `extract-zip` 2.0.1 + `yauzl` 2.10.0
+- **Symptom:** `npm run package:linux` exits 0 but produces no output. Debug log shows it starts extraction but never finishes.
+- **Root cause:** `yauzl` opens a read stream for the first zip entry, but on Node 26, no `data` events are ever emitted on that stream. The `pipeline(readStream, writeStream)` call in `extract-zip` blocks forever.
+- **Fix:** Replace the one-liner `extractElectronZip` function in `node_modules/@electron/packager/dist/unzip.js` with a `child_process.execSync` call to `bsdtar -xf`. `bsdtar` was chosen over `7z` because `7z` refuses macOS `.app` bundles with chained symlinks (e.g. `Electron Framework.framework/Libraries → Versions/Current/Libraries`). A `postinstall` npm script re-applies this patch after each `npm install`.
+- **Build-time dependency:** `libarchive` (provides `bsdtar`) must be installed on the build host. On Arch: `pacman -S libarchive`; macOS: included in Xcode CLT or `brew install libarchive`; Ubuntu/Debian: `apt install libarchive-tools`.
+
+## References
+- Electron 42 release notes: https://www.electronjs.org/blog/electron-42-0
+- Related Electron packaging discussion: https://github.com/aaddrick/claude-desktop-debian/pull/587
+- Electron packaging/runtime change reference: https://github.com/electron/electron/pull/49328
+- yauzl Node 26 stream issue: `yauzl` 2.10.0 uses legacy Node streams (streams1 style); Node 26 changed stream internal behavior so `openReadStream` returns a stream that never emits `data` without a proper pipeline consumer.
+
+## Notes
+- Was on Electron 34.
+- The problem is not the backend API keys or the frontend site bootstrap flow.
+- The packaging fix is a node_modules patch, not upstream. If `@electron/packager` or `extract-zip` releases a Node 26-compatible version, the `postinstall` script should be removed.
+
+---
+
+## set_display_layout — Setup & Status (updated 2026-05-20)
+
+**Primary approach: `display_control` (native CoreGraphics — no Homebrew required)**
+- Source: `scripts/display_control.m` (derived from OSIT MasterKey app, Ian Kohl 2019)
+- Build: run `scripts/build-display-control.sh` on a Mac (requires Xcode CLT only)
+- Output: `resources/bin/display_control` — commit this binary to the repo
+- Uses `CGConfigureDisplayMirrorOfDisplay` — same CoreGraphics API macOS uses internally
+- Supports 3+ displays; auto-detects all connected displays; no config string needed
+
+**Fallback approach: `displayplacer` (requires `brew install displayplacer` on each venue Mac)**
+- Reference: [jakehilborn/displayplacer](https://github.com/jakehilborn/displayplacer)
+- Still used when `display_control` binary is not present
+- Also used for per-device `configStr` overrides (displayplacer-format strings in `event_device.data_json`)
+
+**Current state (2026-05-20):**
+
+- ✅ Correct `mirror_of_display:<uuid>` syntax used in displayplacer fallback
+- ✅ Failures logged to Electron console (`[Launcher] set_display_layout:`)
+- ✅ Display Mode toggle in Launcher config (Native OS section) — always visible
+- ✅ `display_control` binary built (universal x86_64 + arm64), committed to repo
+- ✅ **Idempotency** — `mirror` and `extend` both no-op with a clean message if already in the requested state (no display flicker)
+- ✅ **`list-modes`** — JSON array of all online displays + every usable `CGDisplayMode` (width, height, refresh, pixel size, HiDPI flag, is_current)
+- ✅ **`set-mode`** — sets resolution/refresh via `CGConfigureDisplayWithDisplayMode`; supports `--refresh`, `--hidpi`, `--no-hidpi`; auto-prefers HiDPI on built-in, non-HiDPI on externals
+- ✅ IPC handlers `native:list-display-modes` + `native:set-display-mode` wired through full bridge stack (system_handlers → preload → types → electron_relay)
+- ✅ Remote build script (`scripts/remote-build-display-control.sh`) — compiles on laptop-01 via SSH from Linux workstation; uses `ssh cat` pipe pattern (avoids scp space-in-username bug)
+
+**To rebuild `display_control` after source changes:**
+```bash
+# From repo root on workstation (laptop-01 must be reachable):
+./scripts/remote-build-display-control.sh
+
+# Or directly on a Mac:
+./scripts/build-display-control.sh
+
+# Test with a second display connected:
+./resources/bin/display_control status
+./resources/bin/display_control extend
+./resources/bin/display_control mirror
+./resources/bin/display_control list-modes
+./resources/bin/display_control set-mode 0 1920 1080
+./resources/bin/display_control set-mode 1 1920 1080 --refresh 60 --no-hidpi
+
+# Commit:
+git add resources/bin/display_control
+git commit -m "build: update display_control binary (universal)"
+```
+
+**Optional per-device override (displayplacer format, for edge cases):**
+For rooms where auto-detection produces the wrong result, store the raw configStr in `event_device.data_json`:
+```json
+{
+  "displayplacer_config_extend": "<output of displayplacer list in extended layout>",
+  "displayplacer_config_mirror": "<output of displayplacer list in mirrored layout>"
+}
+```
+`configStr` is passed from the Svelte call site and uses the displayplacer fallback path directly.
+
+---
+
+## Future Ideas
+
+Capabilities worth adding as the Launcher matures. Roughly ordered by venue-day impact.
+
+### 1. Display reconfiguration events (push IPC)
+`CGDisplayRegisterReconfigurationCallback` fires when a display is connected or removed. Wrapping this in a `webContents.send('native:display-changed', payload)` push event would let the Svelte UI auto-mirror the moment a projector cable lands — eliminating the most common operator action during show setup. Currently the UI must poll `status` or the operator presses Mirror manually.
+
+### 2. Audio output routing
+When mirroring to a projector the audio output should follow. CoreAudio (`AudioObjectSetPropertyData` on `kAudioHardwarePropertyDefaultOutputDevice`) can switch the default output device programmatically. Candidate bridge method: `set_audio_output({device_name?, prefer_hdmi?})`. Could be called automatically as part of the mirror flow, or exposed as a standalone control.
+
+### 3. Battery / power status in telemetry
+`get_device_info` returns CPU and RAM but nothing about power. On venue MacBook Airs this matters operationally. IOKit (`IOPSCopyPowerSourcesInfo` / `IOPSGetPowerSourceDescription`) can surface: charge %, is-charging, time-remaining, health. Low-cost addition to the existing telemetry handler.
+
+### 4. Presentation state feedback
+`control_presentation` is fire-and-forget. AppleScript can query the current slide index and total slide count from both PowerPoint (`current slide index of active presentation`) and Keynote (`slide number of current slide of front document`). A `get_presentation_state()` bridge method returning `{ app, slide, total, presenting }` would let the Launcher UI show "Slide 7 of 42" — useful for operators monitoring multiple rooms.
+
+### 5. Push event channel (IPC renderer notifications)
+All bridge calls are currently request-response. Adding a `webContents.send` channel for unsolicited Electron → renderer events would unlock: display plug/unplug (#1 above), file download progress, network state changes, "presentation ended" detection. A thin `ipcMain.on('native:subscribe', ...)` registration pattern on the Electron side and a corresponding `ipcRenderer.on` listener in the preload would cover all use cases without breaking the existing handler structure.
+
+### 6. Kiosk / accidental-quit hardening
+A speaker or operator can accidentally Cmd+Q the launcher mid-presentation. `app.on('before-quit')` with either a confirmation dialog or an API-controlled lock flag (`event_device.data_json.kiosk_locked: true`) would prevent this. Can be toggled remotely — lock before the show, unlock after.
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22.zip
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22.zip
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/.gitignore
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/.gitignore
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/README.md
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/README.md
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey.xcodeproj/project.pbxproj
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey.xcodeproj/project.pbxproj
@@ -0,0 +1,567 @@
+// !$*UTF8*$!
+{
+	archiveVersion = 1;
+	classes = {
+	};
+	objectVersion = 50;
+	objects = {
+
+/* Begin PBXBuildFile section */
+		3C278DA7225CF5C6004FFC53 /* masterkey.app in CopyFiles */ = {isa = PBXBuildFile; fileRef = 3C41339F2227E09B0041136E /* masterkey.app */; };
+		3C39A72F2267ABA90061367B /* WordMacAssistant.swift in Sources */ = {isa = PBXBuildFile; fileRef = 3C39A72E2267ABA90061367B /* WordMacAssistant.swift */; };
+		3C39A7312267ACCF0061367B /* AcrobatWindowsAssistant.swift in Sources */ = {isa = PBXBuildFile; fileRef = 3C39A7302267ACCF0061367B /* AcrobatWindowsAssistant.swift */; };
+		3C39A7332267ACF60061367B /* Windows Application Names in Resources */ = {isa = PBXBuildFile; fileRef = 3C39A7322267ACF60061367B /* Windows Application Names */; };
+		3C39A7352267AF040061367B /* WindowsVideoAssistant.swift in Sources */ = {isa = PBXBuildFile; fileRef = 3C39A7342267AF040061367B /* WindowsVideoAssistant.swift */; };
+		3C39A739226A347A0061367B /* ExcelAssistant.swift in Sources */ = {isa = PBXBuildFile; fileRef = 3C39A738226A347A0061367B /* ExcelAssistant.swift */; };
+		3C4133A32227E09B0041136E /* AppDelegate.swift in Sources */ = {isa = PBXBuildFile; fileRef = 3C4133A22227E09B0041136E /* AppDelegate.swift */; };
+		3C4133A52227E09F0041136E /* Assets.xcassets in Resources */ = {isa = PBXBuildFile; fileRef = 3C4133A42227E09F0041136E /* Assets.xcassets */; };
+		3C4133A82227E09F0041136E /* MainMenu.xib in Resources */ = {isa = PBXBuildFile; fileRef = 3C4133A62227E09F0041136E /* MainMenu.xib */; };
+		3C4133B42227E09F0041136E /* masterkeyTests.swift in Sources */ = {isa = PBXBuildFile; fileRef = 3C4133B32227E09F0041136E /* masterkeyTests.swift */; };
+		3C4133C02227E1B70041136E /* PowerPointMacAssistant.swift in Sources */ = {isa = PBXBuildFile; fileRef = 3C4133BF2227E1B70041136E /* PowerPointMacAssistant.swift */; };
+		3C4133C22227E1C90041136E /* PowerPointWindowsAssistant.swift in Sources */ = {isa = PBXBuildFile; fileRef = 3C4133C12227E1C90041136E /* PowerPointWindowsAssistant.swift */; };
+		3C4133C42227E1D60041136E /* KeynoteAssistant.swift in Sources */ = {isa = PBXBuildFile; fileRef = 3C4133C32227E1D60041136E /* KeynoteAssistant.swift */; };
+		3C4133C62227E1E50041136E /* LegacyKeynoteAssistant.swift in Sources */ = {isa = PBXBuildFile; fileRef = 3C4133C52227E1E40041136E /* LegacyKeynoteAssistant.swift */; };
+		3C4133C82227E2010041136E /* AcrobatAssistant.swift in Sources */ = {isa = PBXBuildFile; fileRef = 3C4133C72227E2010041136E /* AcrobatAssistant.swift */; };
+		3C4133CA2227E2960041136E /* ApplicationAssistant.swift in Sources */ = {isa = PBXBuildFile; fileRef = 3C4133C92227E2960041136E /* ApplicationAssistant.swift */; };
+		3C88C06A225DADDD0048E01A /* VideoAssistant.swift in Sources */ = {isa = PBXBuildFile; fileRef = 3C88C069225DADDD0048E01A /* VideoAssistant.swift */; };
+		3CE21AD62259B3EE00F666B9 /* Utilities.swift in Sources */ = {isa = PBXBuildFile; fileRef = 3CE21AD52259B3EE00F666B9 /* Utilities.swift */; };
+		3CE21AD92259B4A000F666B9 /* LegacyUtilities.m in Sources */ = {isa = PBXBuildFile; fileRef = 3CE21AD82259B4A000F666B9 /* LegacyUtilities.m */; };
+		3CE21ADC225A674800F666B9 /* LibreOfficeAssistant.swift in Sources */ = {isa = PBXBuildFile; fileRef = 3CE21ADB225A674800F666B9 /* LibreOfficeAssistant.swift */; };
+/* End PBXBuildFile section */
+
+/* Begin PBXContainerItemProxy section */
+		3C4133B02227E09F0041136E /* PBXContainerItemProxy */ = {
+			isa = PBXContainerItemProxy;
+			containerPortal = 3C4133972227E09B0041136E /* Project object */;
+			proxyType = 1;
+			remoteGlobalIDString = 3C41339E2227E09B0041136E;
+			remoteInfo = masterkey;
+		};
+/* End PBXContainerItemProxy section */
+
+/* Begin PBXCopyFilesBuildPhase section */
+		3CE0D699224155AE00E7FC1C /* CopyFiles */ = {
+			isa = PBXCopyFilesBuildPhase;
+			buildActionMask = 2147483647;
+			dstPath = /Users/Ian/Desktop;
+			dstSubfolderSpec = 0;
+			files = (
+				3C278DA7225CF5C6004FFC53 /* masterkey.app in CopyFiles */,
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+/* End PBXCopyFilesBuildPhase section */
+
+/* Begin PBXFileReference section */
+		3C39A72E2267ABA90061367B /* WordMacAssistant.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = WordMacAssistant.swift; sourceTree = "<group>"; };
+		3C39A7302267ACCF0061367B /* AcrobatWindowsAssistant.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = AcrobatWindowsAssistant.swift; sourceTree = "<group>"; };
+		3C39A7322267ACF60061367B /* Windows Application Names */ = {isa = PBXFileReference; lastKnownFileType = text; path = "Windows Application Names"; sourceTree = "<group>"; };
+		3C39A7342267AF040061367B /* WindowsVideoAssistant.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = WindowsVideoAssistant.swift; sourceTree = "<group>"; };
+		3C39A738226A347A0061367B /* ExcelAssistant.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ExcelAssistant.swift; sourceTree = "<group>"; };
+		3C41339F2227E09B0041136E /* masterkey.app */ = {isa = PBXFileReference; explicitFileType = wrapper.application; includeInIndex = 0; path = masterkey.app; sourceTree = BUILT_PRODUCTS_DIR; };
+		3C4133A22227E09B0041136E /* AppDelegate.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = AppDelegate.swift; sourceTree = "<group>"; };
+		3C4133A42227E09F0041136E /* Assets.xcassets */ = {isa = PBXFileReference; lastKnownFileType = folder.assetcatalog; path = Assets.xcassets; sourceTree = "<group>"; };
+		3C4133A72227E09F0041136E /* Base */ = {isa = PBXFileReference; lastKnownFileType = file.xib; name = Base; path = Base.lproj/MainMenu.xib; sourceTree = "<group>"; };
+		3C4133A92227E09F0041136E /* Info.plist */ = {isa = PBXFileReference; lastKnownFileType = text.plist.xml; path = Info.plist; sourceTree = "<group>"; };
+		3C4133AA2227E09F0041136E /* masterkey.entitlements */ = {isa = PBXFileReference; lastKnownFileType = text.plist.entitlements; path = masterkey.entitlements; sourceTree = "<group>"; };
+		3C4133AF2227E09F0041136E /* masterkeyTests.xctest */ = {isa = PBXFileReference; explicitFileType = wrapper.cfbundle; includeInIndex = 0; path = masterkeyTests.xctest; sourceTree = BUILT_PRODUCTS_DIR; };
+		3C4133B32227E09F0041136E /* masterkeyTests.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = masterkeyTests.swift; sourceTree = "<group>"; };
+		3C4133B52227E09F0041136E /* Info.plist */ = {isa = PBXFileReference; lastKnownFileType = text.plist.xml; path = Info.plist; sourceTree = "<group>"; };
+		3C4133BF2227E1B70041136E /* PowerPointMacAssistant.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = PowerPointMacAssistant.swift; sourceTree = "<group>"; };
+		3C4133C12227E1C90041136E /* PowerPointWindowsAssistant.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = PowerPointWindowsAssistant.swift; sourceTree = "<group>"; };
+		3C4133C32227E1D60041136E /* KeynoteAssistant.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = KeynoteAssistant.swift; sourceTree = "<group>"; };
+		3C4133C52227E1E40041136E /* LegacyKeynoteAssistant.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = LegacyKeynoteAssistant.swift; sourceTree = "<group>"; };
+		3C4133C72227E2010041136E /* AcrobatAssistant.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = AcrobatAssistant.swift; sourceTree = "<group>"; };
+		3C4133C92227E2960041136E /* ApplicationAssistant.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ApplicationAssistant.swift; sourceTree = "<group>"; };
+		3C88C069225DADDD0048E01A /* VideoAssistant.swift */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.swift; path = VideoAssistant.swift; sourceTree = "<group>"; };
+		3CE21AD52259B3EE00F666B9 /* Utilities.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = Utilities.swift; sourceTree = "<group>"; };
+		3CE21AD72259B4A000F666B9 /* masterkey-Bridging-Header.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; path = "masterkey-Bridging-Header.h"; sourceTree = "<group>"; };
+		3CE21AD82259B4A000F666B9 /* LegacyUtilities.m */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.objc; path = LegacyUtilities.m; sourceTree = "<group>"; };
+		3CE21ADA2259B5B900F666B9 /* LegacyUtilities.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; path = LegacyUtilities.h; sourceTree = "<group>"; };
+		3CE21ADB225A674800F666B9 /* LibreOfficeAssistant.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = LibreOfficeAssistant.swift; sourceTree = "<group>"; };
+/* End PBXFileReference section */
+
+/* Begin PBXFrameworksBuildPhase section */
+		3C41339C2227E09B0041136E /* Frameworks */ = {
+			isa = PBXFrameworksBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+		3C4133AC2227E09F0041136E /* Frameworks */ = {
+			isa = PBXFrameworksBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+/* End PBXFrameworksBuildPhase section */
+
+/* Begin PBXGroup section */
+		3C4133962227E09B0041136E = {
+			isa = PBXGroup;
+			children = (
+				3C4133A12227E09B0041136E /* masterkey */,
+				3C4133B22227E09F0041136E /* masterkeyTests */,
+				3C4133A02227E09B0041136E /* Products */,
+			);
+			sourceTree = "<group>";
+		};
+		3C4133A02227E09B0041136E /* Products */ = {
+			isa = PBXGroup;
+			children = (
+				3C41339F2227E09B0041136E /* masterkey.app */,
+				3C4133AF2227E09F0041136E /* masterkeyTests.xctest */,
+			);
+			name = Products;
+			sourceTree = "<group>";
+		};
+		3C4133A12227E09B0041136E /* masterkey */ = {
+			isa = PBXGroup;
+			children = (
+				3C4133BE2227E0B90041136E /* ApplicationAssistants */,
+				3C4133C92227E2960041136E /* ApplicationAssistant.swift */,
+				3C4133A22227E09B0041136E /* AppDelegate.swift */,
+				3C4133A42227E09F0041136E /* Assets.xcassets */,
+				3C4133A62227E09F0041136E /* MainMenu.xib */,
+				3C4133A92227E09F0041136E /* Info.plist */,
+				3C4133AA2227E09F0041136E /* masterkey.entitlements */,
+				3CE21AD52259B3EE00F666B9 /* Utilities.swift */,
+				3CE21ADA2259B5B900F666B9 /* LegacyUtilities.h */,
+				3CE21AD82259B4A000F666B9 /* LegacyUtilities.m */,
+				3CE21AD72259B4A000F666B9 /* masterkey-Bridging-Header.h */,
+				3C39A7322267ACF60061367B /* Windows Application Names */,
+			);
+			path = masterkey;
+			sourceTree = "<group>";
+		};
+		3C4133B22227E09F0041136E /* masterkeyTests */ = {
+			isa = PBXGroup;
+			children = (
+				3C4133B32227E09F0041136E /* masterkeyTests.swift */,
+				3C4133B52227E09F0041136E /* Info.plist */,
+			);
+			path = masterkeyTests;
+			sourceTree = "<group>";
+		};
+		3C4133BE2227E0B90041136E /* ApplicationAssistants */ = {
+			isa = PBXGroup;
+			children = (
+				3C4133BF2227E1B70041136E /* PowerPointMacAssistant.swift */,
+				3C4133C12227E1C90041136E /* PowerPointWindowsAssistant.swift */,
+				3C39A72E2267ABA90061367B /* WordMacAssistant.swift */,
+				3C4133C32227E1D60041136E /* KeynoteAssistant.swift */,
+				3C4133C52227E1E40041136E /* LegacyKeynoteAssistant.swift */,
+				3C4133C72227E2010041136E /* AcrobatAssistant.swift */,
+				3C39A7302267ACCF0061367B /* AcrobatWindowsAssistant.swift */,
+				3CE21ADB225A674800F666B9 /* LibreOfficeAssistant.swift */,
+				3C88C069225DADDD0048E01A /* VideoAssistant.swift */,
+				3C39A7342267AF040061367B /* WindowsVideoAssistant.swift */,
+				3C39A738226A347A0061367B /* ExcelAssistant.swift */,
+			);
+			path = ApplicationAssistants;
+			sourceTree = "<group>";
+		};
+/* End PBXGroup section */
+
+/* Begin PBXNativeTarget section */
+		3C41339E2227E09B0041136E /* masterkey */ = {
+			isa = PBXNativeTarget;
+			buildConfigurationList = 3C4133B82227E09F0041136E /* Build configuration list for PBXNativeTarget "masterkey" */;
+			buildPhases = (
+				3C41339B2227E09B0041136E /* Sources */,
+				3C41339C2227E09B0041136E /* Frameworks */,
+				3C41339D2227E09B0041136E /* Resources */,
+				3CE0D699224155AE00E7FC1C /* CopyFiles */,
+			);
+			buildRules = (
+			);
+			dependencies = (
+			);
+			name = masterkey;
+			productName = masterkey;
+			productReference = 3C41339F2227E09B0041136E /* masterkey.app */;
+			productType = "com.apple.product-type.application";
+		};
+		3C4133AE2227E09F0041136E /* masterkeyTests */ = {
+			isa = PBXNativeTarget;
+			buildConfigurationList = 3C4133BB2227E09F0041136E /* Build configuration list for PBXNativeTarget "masterkeyTests" */;
+			buildPhases = (
+				3C4133AB2227E09F0041136E /* Sources */,
+				3C4133AC2227E09F0041136E /* Frameworks */,
+				3C4133AD2227E09F0041136E /* Resources */,
+			);
+			buildRules = (
+			);
+			dependencies = (
+				3C4133B12227E09F0041136E /* PBXTargetDependency */,
+			);
+			name = masterkeyTests;
+			productName = masterkeyTests;
+			productReference = 3C4133AF2227E09F0041136E /* masterkeyTests.xctest */;
+			productType = "com.apple.product-type.bundle.unit-test";
+		};
+/* End PBXNativeTarget section */
+
+/* Begin PBXProject section */
+		3C4133972227E09B0041136E /* Project object */ = {
+			isa = PBXProject;
+			attributes = {
+				LastSwiftUpdateCheck = 1010;
+				LastUpgradeCheck = 1010;
+				ORGANIZATIONNAME = "One Sky IT";
+				TargetAttributes = {
+					3C41339E2227E09B0041136E = {
+						CreatedOnToolsVersion = 10.1;
+						LastSwiftMigration = 1020;
+						SystemCapabilities = {
+							com.apple.Sandbox = {
+								enabled = 0;
+							};
+						};
+					};
+					3C4133AE2227E09F0041136E = {
+						CreatedOnToolsVersion = 10.1;
+						TestTargetID = 3C41339E2227E09B0041136E;
+					};
+				};
+			};
+			buildConfigurationList = 3C41339A2227E09B0041136E /* Build configuration list for PBXProject "masterkey" */;
+			compatibilityVersion = "Xcode 9.3";
+			developmentRegion = en;
+			hasScannedForEncodings = 0;
+			knownRegions = (
+				en,
+				Base,
+			);
+			mainGroup = 3C4133962227E09B0041136E;
+			productRefGroup = 3C4133A02227E09B0041136E /* Products */;
+			projectDirPath = "";
+			projectRoot = "";
+			targets = (
+				3C41339E2227E09B0041136E /* masterkey */,
+				3C4133AE2227E09F0041136E /* masterkeyTests */,
+			);
+		};
+/* End PBXProject section */
+
+/* Begin PBXResourcesBuildPhase section */
+		3C41339D2227E09B0041136E /* Resources */ = {
+			isa = PBXResourcesBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+				3C4133A52227E09F0041136E /* Assets.xcassets in Resources */,
+				3C4133A82227E09F0041136E /* MainMenu.xib in Resources */,
+				3C39A7332267ACF60061367B /* Windows Application Names in Resources */,
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+		3C4133AD2227E09F0041136E /* Resources */ = {
+			isa = PBXResourcesBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+/* End PBXResourcesBuildPhase section */
+
+/* Begin PBXSourcesBuildPhase section */
+		3C41339B2227E09B0041136E /* Sources */ = {
+			isa = PBXSourcesBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+				3C4133CA2227E2960041136E /* ApplicationAssistant.swift in Sources */,
+				3C4133C22227E1C90041136E /* PowerPointWindowsAssistant.swift in Sources */,
+				3C4133A32227E09B0041136E /* AppDelegate.swift in Sources */,
+				3C4133C42227E1D60041136E /* KeynoteAssistant.swift in Sources */,
+				3C39A739226A347A0061367B /* ExcelAssistant.swift in Sources */,
+				3C39A72F2267ABA90061367B /* WordMacAssistant.swift in Sources */,
+				3C4133C02227E1B70041136E /* PowerPointMacAssistant.swift in Sources */,
+				3CE21AD92259B4A000F666B9 /* LegacyUtilities.m in Sources */,
+				3C4133C62227E1E50041136E /* LegacyKeynoteAssistant.swift in Sources */,
+				3C39A7312267ACCF0061367B /* AcrobatWindowsAssistant.swift in Sources */,
+				3CE21AD62259B3EE00F666B9 /* Utilities.swift in Sources */,
+				3C39A7352267AF040061367B /* WindowsVideoAssistant.swift in Sources */,
+				3C4133C82227E2010041136E /* AcrobatAssistant.swift in Sources */,
+				3C88C06A225DADDD0048E01A /* VideoAssistant.swift in Sources */,
+				3CE21ADC225A674800F666B9 /* LibreOfficeAssistant.swift in Sources */,
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+		3C4133AB2227E09F0041136E /* Sources */ = {
+			isa = PBXSourcesBuildPhase;
+			buildActionMask = 2147483647;
+			files = (
+				3C4133B42227E09F0041136E /* masterkeyTests.swift in Sources */,
+			);
+			runOnlyForDeploymentPostprocessing = 0;
+		};
+/* End PBXSourcesBuildPhase section */
+
+/* Begin PBXTargetDependency section */
+		3C4133B12227E09F0041136E /* PBXTargetDependency */ = {
+			isa = PBXTargetDependency;
+			target = 3C41339E2227E09B0041136E /* masterkey */;
+			targetProxy = 3C4133B02227E09F0041136E /* PBXContainerItemProxy */;
+		};
+/* End PBXTargetDependency section */
+
+/* Begin PBXVariantGroup section */
+		3C4133A62227E09F0041136E /* MainMenu.xib */ = {
+			isa = PBXVariantGroup;
+			children = (
+				3C4133A72227E09F0041136E /* Base */,
+			);
+			name = MainMenu.xib;
+			sourceTree = "<group>";
+		};
+/* End PBXVariantGroup section */
+
+/* Begin XCBuildConfiguration section */
+		3C4133B62227E09F0041136E /* Debug */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				ALWAYS_EMBED_SWIFT_STANDARD_LIBRARIES = YES;
+				ALWAYS_SEARCH_USER_PATHS = NO;
+				CLANG_ANALYZER_NONNULL = YES;
+				CLANG_ANALYZER_NUMBER_OBJECT_CONVERSION = YES_AGGRESSIVE;
+				CLANG_CXX_LANGUAGE_STANDARD = "gnu++14";
+				CLANG_CXX_LIBRARY = "libc++";
+				CLANG_ENABLE_MODULES = YES;
+				CLANG_ENABLE_OBJC_ARC = YES;
+				CLANG_ENABLE_OBJC_WEAK = YES;
+				CLANG_WARN_BLOCK_CAPTURE_AUTORELEASING = YES;
+				CLANG_WARN_BOOL_CONVERSION = YES;
+				CLANG_WARN_COMMA = YES;
+				CLANG_WARN_CONSTANT_CONVERSION = YES;
+				CLANG_WARN_DEPRECATED_OBJC_IMPLEMENTATIONS = YES;
+				CLANG_WARN_DIRECT_OBJC_ISA_USAGE = YES_ERROR;
+				CLANG_WARN_DOCUMENTATION_COMMENTS = YES;
+				CLANG_WARN_EMPTY_BODY = YES;
+				CLANG_WARN_ENUM_CONVERSION = YES;
+				CLANG_WARN_INFINITE_RECURSION = YES;
+				CLANG_WARN_INT_CONVERSION = YES;
+				CLANG_WARN_NON_LITERAL_NULL_CONVERSION = YES;
+				CLANG_WARN_OBJC_IMPLICIT_RETAIN_SELF = YES;
+				CLANG_WARN_OBJC_LITERAL_CONVERSION = YES;
+				CLANG_WARN_OBJC_ROOT_CLASS = YES_ERROR;
+				CLANG_WARN_RANGE_LOOP_ANALYSIS = YES;
+				CLANG_WARN_STRICT_PROTOTYPES = YES;
+				CLANG_WARN_SUSPICIOUS_MOVE = YES;
+				CLANG_WARN_UNGUARDED_AVAILABILITY = YES_AGGRESSIVE;
+				CLANG_WARN_UNREACHABLE_CODE = YES;
+				CLANG_WARN__DUPLICATE_METHOD_MATCH = YES;
+				CODE_SIGN_IDENTITY = "-";
+				CODE_SIGN_INJECT_BASE_ENTITLEMENTS = NO;
+				CODE_SIGN_STYLE = Automatic;
+				COPY_PHASE_STRIP = NO;
+				DEBUG_INFORMATION_FORMAT = dwarf;
+				ENABLE_STRICT_OBJC_MSGSEND = YES;
+				ENABLE_TESTABILITY = YES;
+				GCC_C_LANGUAGE_STANDARD = gnu11;
+				GCC_DYNAMIC_NO_PIC = NO;
+				GCC_NO_COMMON_BLOCKS = YES;
+				GCC_OPTIMIZATION_LEVEL = 0;
+				GCC_PREPROCESSOR_DEFINITIONS = (
+					"DEBUG=1",
+					"$(inherited)",
+				);
+				GCC_WARN_64_TO_32_BIT_CONVERSION = YES;
+				GCC_WARN_ABOUT_RETURN_TYPE = YES_ERROR;
+				GCC_WARN_UNDECLARED_SELECTOR = YES;
+				GCC_WARN_UNINITIALIZED_AUTOS = YES_AGGRESSIVE;
+				GCC_WARN_UNUSED_FUNCTION = YES;
+				GCC_WARN_UNUSED_VARIABLE = YES;
+				MACOSX_DEPLOYMENT_TARGET = 10.12;
+				MTL_ENABLE_DEBUG_INFO = INCLUDE_SOURCE;
+				MTL_FAST_MATH = YES;
+				ONLY_ACTIVE_ARCH = YES;
+				SDKROOT = macosx;
+				SWIFT_ACTIVE_COMPILATION_CONDITIONS = DEBUG;
+				SWIFT_OPTIMIZATION_LEVEL = "-Onone";
+			};
+			name = Debug;
+		};
+		3C4133B72227E09F0041136E /* Release */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				ALWAYS_EMBED_SWIFT_STANDARD_LIBRARIES = YES;
+				ALWAYS_SEARCH_USER_PATHS = NO;
+				CLANG_ANALYZER_NONNULL = YES;
+				CLANG_ANALYZER_NUMBER_OBJECT_CONVERSION = YES_AGGRESSIVE;
+				CLANG_CXX_LANGUAGE_STANDARD = "gnu++14";
+				CLANG_CXX_LIBRARY = "libc++";
+				CLANG_ENABLE_MODULES = YES;
+				CLANG_ENABLE_OBJC_ARC = YES;
+				CLANG_ENABLE_OBJC_WEAK = YES;
+				CLANG_WARN_BLOCK_CAPTURE_AUTORELEASING = YES;
+				CLANG_WARN_BOOL_CONVERSION = YES;
+				CLANG_WARN_COMMA = YES;
+				CLANG_WARN_CONSTANT_CONVERSION = YES;
+				CLANG_WARN_DEPRECATED_OBJC_IMPLEMENTATIONS = YES;
+				CLANG_WARN_DIRECT_OBJC_ISA_USAGE = YES_ERROR;
+				CLANG_WARN_DOCUMENTATION_COMMENTS = YES;
+				CLANG_WARN_EMPTY_BODY = YES;
+				CLANG_WARN_ENUM_CONVERSION = YES;
+				CLANG_WARN_INFINITE_RECURSION = YES;
+				CLANG_WARN_INT_CONVERSION = YES;
+				CLANG_WARN_NON_LITERAL_NULL_CONVERSION = YES;
+				CLANG_WARN_OBJC_IMPLICIT_RETAIN_SELF = YES;
+				CLANG_WARN_OBJC_LITERAL_CONVERSION = YES;
+				CLANG_WARN_OBJC_ROOT_CLASS = YES_ERROR;
+				CLANG_WARN_RANGE_LOOP_ANALYSIS = YES;
+				CLANG_WARN_STRICT_PROTOTYPES = YES;
+				CLANG_WARN_SUSPICIOUS_MOVE = YES;
+				CLANG_WARN_UNGUARDED_AVAILABILITY = YES_AGGRESSIVE;
+				CLANG_WARN_UNREACHABLE_CODE = YES;
+				CLANG_WARN__DUPLICATE_METHOD_MATCH = YES;
+				CODE_SIGN_IDENTITY = "-";
+				CODE_SIGN_INJECT_BASE_ENTITLEMENTS = NO;
+				CODE_SIGN_STYLE = Automatic;
+				COPY_PHASE_STRIP = NO;
+				DEBUG_INFORMATION_FORMAT = "dwarf-with-dsym";
+				ENABLE_NS_ASSERTIONS = NO;
+				ENABLE_STRICT_OBJC_MSGSEND = YES;
+				GCC_C_LANGUAGE_STANDARD = gnu11;
+				GCC_NO_COMMON_BLOCKS = YES;
+				GCC_WARN_64_TO_32_BIT_CONVERSION = YES;
+				GCC_WARN_ABOUT_RETURN_TYPE = YES_ERROR;
+				GCC_WARN_UNDECLARED_SELECTOR = YES;
+				GCC_WARN_UNINITIALIZED_AUTOS = YES_AGGRESSIVE;
+				GCC_WARN_UNUSED_FUNCTION = YES;
+				GCC_WARN_UNUSED_VARIABLE = YES;
+				MACOSX_DEPLOYMENT_TARGET = 10.12;
+				MTL_ENABLE_DEBUG_INFO = NO;
+				MTL_FAST_MATH = YES;
+				SDKROOT = macosx;
+				SWIFT_COMPILATION_MODE = wholemodule;
+				SWIFT_OPTIMIZATION_LEVEL = "-O";
+			};
+			name = Release;
+		};
+		3C4133B92227E09F0041136E /* Debug */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				ASSETCATALOG_COMPILER_APPICON_NAME = AppIcon;
+				CLANG_ENABLE_MODULES = YES;
+				CODE_SIGN_IDENTITY = "-";
+				CODE_SIGN_STYLE = Manual;
+				COMBINE_HIDPI_IMAGES = YES;
+				DEVELOPMENT_TEAM = "";
+				INFOPLIST_FILE = masterkey/Info.plist;
+				LD_RUNPATH_SEARCH_PATHS = (
+					"$(inherited)",
+					"@executable_path/../Frameworks",
+				);
+				MACOSX_DEPLOYMENT_TARGET = 10.12;
+				PRODUCT_BUNDLE_IDENTIFIER = com.oneskyit.masterkey;
+				PRODUCT_NAME = "$(TARGET_NAME)";
+				PROVISIONING_PROFILE_SPECIFIER = "";
+				SWIFT_OBJC_BRIDGING_HEADER = "masterkey/masterkey-Bridging-Header.h";
+				SWIFT_OPTIMIZATION_LEVEL = "-Onone";
+				SWIFT_VERSION = 4.2;
+			};
+			name = Debug;
+		};
+		3C4133BA2227E09F0041136E /* Release */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				ASSETCATALOG_COMPILER_APPICON_NAME = AppIcon;
+				CLANG_ENABLE_MODULES = YES;
+				CODE_SIGN_IDENTITY = "-";
+				CODE_SIGN_STYLE = Manual;
+				COMBINE_HIDPI_IMAGES = YES;
+				DEVELOPMENT_TEAM = "";
+				INFOPLIST_FILE = masterkey/Info.plist;
+				LD_RUNPATH_SEARCH_PATHS = (
+					"$(inherited)",
+					"@executable_path/../Frameworks",
+				);
+				MACOSX_DEPLOYMENT_TARGET = 10.12;
+				PRODUCT_BUNDLE_IDENTIFIER = com.oneskyit.masterkey;
+				PRODUCT_NAME = "$(TARGET_NAME)";
+				PROVISIONING_PROFILE_SPECIFIER = "";
+				SWIFT_OBJC_BRIDGING_HEADER = "masterkey/masterkey-Bridging-Header.h";
+				SWIFT_VERSION = 4.2;
+			};
+			name = Release;
+		};
+		3C4133BC2227E09F0041136E /* Debug */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				ALWAYS_EMBED_SWIFT_STANDARD_LIBRARIES = YES;
+				BUNDLE_LOADER = "$(TEST_HOST)";
+				CODE_SIGN_STYLE = Manual;
+				COMBINE_HIDPI_IMAGES = YES;
+				DEVELOPMENT_TEAM = "";
+				INFOPLIST_FILE = masterkeyTests/Info.plist;
+				LD_RUNPATH_SEARCH_PATHS = (
+					"$(inherited)",
+					"@executable_path/../Frameworks",
+					"@loader_path/../Frameworks",
+				);
+				PRODUCT_BUNDLE_IDENTIFIER = com.oneskyit.masterkeyTests;
+				PRODUCT_NAME = "$(TARGET_NAME)";
+				PROVISIONING_PROFILE_SPECIFIER = "";
+				SWIFT_VERSION = 4.2;
+				TEST_HOST = "$(BUILT_PRODUCTS_DIR)/masterkey.app/Contents/MacOS/masterkey";
+			};
+			name = Debug;
+		};
+		3C4133BD2227E09F0041136E /* Release */ = {
+			isa = XCBuildConfiguration;
+			buildSettings = {
+				ALWAYS_EMBED_SWIFT_STANDARD_LIBRARIES = YES;
+				BUNDLE_LOADER = "$(TEST_HOST)";
+				CODE_SIGN_STYLE = Manual;
+				COMBINE_HIDPI_IMAGES = YES;
+				DEVELOPMENT_TEAM = "";
+				INFOPLIST_FILE = masterkeyTests/Info.plist;
+				LD_RUNPATH_SEARCH_PATHS = (
+					"$(inherited)",
+					"@executable_path/../Frameworks",
+					"@loader_path/../Frameworks",
+				);
+				PRODUCT_BUNDLE_IDENTIFIER = com.oneskyit.masterkeyTests;
+				PRODUCT_NAME = "$(TARGET_NAME)";
+				PROVISIONING_PROFILE_SPECIFIER = "";
+				SWIFT_VERSION = 4.2;
+				TEST_HOST = "$(BUILT_PRODUCTS_DIR)/masterkey.app/Contents/MacOS/masterkey";
+			};
+			name = Release;
+		};
+/* End XCBuildConfiguration section */
+
+/* Begin XCConfigurationList section */
+		3C41339A2227E09B0041136E /* Build configuration list for PBXProject "masterkey" */ = {
+			isa = XCConfigurationList;
+			buildConfigurations = (
+				3C4133B62227E09F0041136E /* Debug */,
+				3C4133B72227E09F0041136E /* Release */,
+			);
+			defaultConfigurationIsVisible = 0;
+			defaultConfigurationName = Release;
+		};
+		3C4133B82227E09F0041136E /* Build configuration list for PBXNativeTarget "masterkey" */ = {
+			isa = XCConfigurationList;
+			buildConfigurations = (
+				3C4133B92227E09F0041136E /* Debug */,
+				3C4133BA2227E09F0041136E /* Release */,
+			);
+			defaultConfigurationIsVisible = 0;
+			defaultConfigurationName = Release;
+		};
+		3C4133BB2227E09F0041136E /* Build configuration list for PBXNativeTarget "masterkeyTests" */ = {
+			isa = XCConfigurationList;
+			buildConfigurations = (
+				3C4133BC2227E09F0041136E /* Debug */,
+				3C4133BD2227E09F0041136E /* Release */,
+			);
+			defaultConfigurationIsVisible = 0;
+			defaultConfigurationName = Release;
+		};
+/* End XCConfigurationList section */
+	};
+	rootObject = 3C4133972227E09B0041136E /* Project object */;
+}
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey.xcodeproj/project.xcworkspace/contents.xcworkspacedata
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey.xcodeproj/project.xcworkspace/contents.xcworkspacedata
@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<Workspace
+   version = "1.0">
+   <FileRef
+      location = "self:masterkey.xcodeproj">
+   </FileRef>
+</Workspace>
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey.xcodeproj/project.xcworkspace/xcshareddata/IDEWorkspaceChecks.plist
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey.xcodeproj/project.xcworkspace/xcshareddata/IDEWorkspaceChecks.plist
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>IDEDidComputeMac32BitWarning</key>
+	<true/>
+</dict>
+</plist>
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey.xcodeproj/xcuserdata/Ian.xcuserdatad/xcschemes/xcschememanagement.plist
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey.xcodeproj/xcuserdata/Ian.xcuserdatad/xcschemes/xcschememanagement.plist
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>SchemeUserState</key>
+	<dict>
+		<key>masterkey.xcscheme_^#shared#^_</key>
+		<dict>
+			<key>orderHint</key>
+			<integer>0</integer>
+		</dict>
+	</dict>
+</dict>
+</plist>
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/AppDelegate.swift
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/AppDelegate.swift
@@ -0,0 +1,275 @@
+//
+//  AppDelegate.swift
+//  masterkey
+//
+//  Created by Ian Kohl on 2/28/19.
+//  Copyright © 2019 One Sky IT. All rights reserved.
+//
+
+//Open/Close
+//quicktime - MP4
+//Text
+//Doc
+
+import Cocoa
+import OSAKit
+
+enum ApplicationNameConstants: String {
+    case PowerPointMac = "Microsoft PowerPoint"
+    case PowerPointWin = "Microsoft Office PowerPoint"
+    case Keynote = "Keynote"
+    case LibreOffice = "LibreOffice"
+    case AdobeAcrobat = "Adobe Acrobat Reader DC"
+    case GoogleChrome = "Google Chrome"
+    case VLC = "VLC"
+}
+
+extension ApplicationNameConstants: CaseIterable {}
+
+extension String {
+    func fileName() -> String {
+        return NSURL(fileURLWithPath: self).deletingPathExtension?.lastPathComponent ?? ""
+    }
+    
+    func fileExtension() -> String {
+        return NSURL(fileURLWithPath: self).pathExtension ?? ""
+    }
+}
+
+@NSApplicationMain
+class AppDelegate: NSObject, NSApplicationDelegate {
+    var assistant:ApplicationAssistant!
+    
+    var openingFile = false
+    
+    //No window
+    //@IBOutlet weak var window: NSWindow!
+    
+    func applicationDidFinishLaunching(_ aNotification: Notification) {
+        if !openingFile {
+            NSLog("Not opening a file. Displaying setup dialog...")
+            if setupDialog() {
+                NSLog("Proceeding to trigger all security warnings...")
+                if triggerSecurity() {
+                    NSLog("Presentation applications have been opened..")
+                }
+            }
+        }
+        
+        NSLog("Terminating applicaiton...")
+        terminateApplication()
+    }
+    
+    func terminateApplication() {
+        NSLog("Terminating...")
+        NSApplication.shared.terminate(self)
+    }
+    
+    func applicationWillTerminate(_ aNotification: Notification) {
+        
+    }
+    
+    func application(_ sender: NSApplication, openFile filename: String) -> Bool {
+        NSLog("Version 2.0")
+        
+        openingFile = true
+        
+        //Used to open a group of files
+        //let first_filename = filenames[0];
+        
+        //open a single file
+        let filename_extension = String(filename.fileExtension().lowercased());
+        
+        NSLog("Filename Extension: \(filename_extension)")
+        
+        var assistantFlag = false
+        
+        //Args to pass to application - not currently used
+        //var args = ""
+        
+        //once we are ready with a single presentation file (lowercase, valid ext) get into the switch
+        switch filename_extension {
+        case "pptx",
+             "ppt",
+             "pptmac",
+             "pptxmac":
+            NSLog("Mac PPT File...");
+            assistant = PowerPointMacAssistant();
+        case "pptxwin",
+             "pptwin":
+            NSLog("Windows PPT File...")
+            assistant = PowerPointWindowsAssistant();
+        case "pdf",
+             "pdfmac":
+            NSLog("PDF File...")
+            //args = "pagemode=FullScreen"
+            assistant = AcrobatAssistant();
+        case "pdfwin":
+            NSLog("PDF Windows File...")
+            assistant = AcrobatWindowsAssistant();
+        case "key":
+            NSLog("Keynote File...")
+            assistant = KeynoteAssistant();
+        case "odp":
+            NSLog("LibreOffice File...")
+            assistant = LibreOfficeAssistant();
+        case "mp4",
+             "mkv",
+             "mov",
+             "mpeg",
+             "avi",
+             "flv",
+             "ogg",
+             "mp3",
+             "ogv":
+            NSLog("Video (VLC) File...")
+            assistant = VideoAssistant();
+        case "wmv":
+            NSLog("Windows Video (VLC) File...")
+            assistant = WindowsVideoAssistant();
+        case "doc",
+             "docx":
+            NSLog("Microsoft Word Document...")
+            assistant = WordMacAssistant();
+        default:
+            NSLog("Generic File...")
+            assistantFlag = true
+        }
+        
+        let legacyUtilities: LegacyUtilities = LegacyUtilities()
+        
+        if assistantFlag {
+            NSLog("Is assistant...")
+            legacyUtilities.undoMirror()
+            //TODO: Window to mirror
+            NSWorkspace.shared.openFile(filename)
+        } else {
+            if assistant.shouldUnmirror {
+                legacyUtilities.undoMirror()
+            }
+            
+            NSLog("Opening file...")
+            NSWorkspace.shared.openFile(filename, withApplication: assistant.applicationName)
+            NSLog("Sleeping...")
+            sleep(assistant!.delay)
+            NSLog("Activating application...")
+            let apps = NSRunningApplication.runningApplications(withBundleIdentifier: assistant.bundleID)
+            for app in apps as [NSRunningApplication] {
+                if app.bundleIdentifier == assistant.bundleID {
+                    app.activate(options: .activateIgnoringOtherApps)
+                }
+            }
+           
+            NSLog("Running Automation...")
+            if self.runAutomation() {
+                NSLog("Mirror check...")
+                if assistant.mirrored {
+                    NSLog("Mirroring...")
+                    legacyUtilities.setupMirror()
+                }
+            }
+        }
+        
+        //Start recording code
+        var screens = 2
+
+        //TODO: get actual number of screens as mirroring/unmirroring should be done at this point
+        if assistant.mirrored {
+            screens = 1
+        }
+
+        let utils = Utilities()
+        let rec_result = utils.startRecording(filename: filename,num_screens: screens)
+        NSLog("Recording result...")
+        NSLog(rec_result)
+        //End recording code
+        
+        // Return true for successfully opening the file.
+        return true
+    }
+    
+    //TODO: Merge this and security as it is the same code
+    func runAutomation() -> Bool {
+        NSLog("Run automation...")
+        NSLog(assistant.scriptString)
+        let script = OSAScript.init(source: assistant.scriptString, language: OSALanguage.init(forName: "JavaScript"));
+        var compileError : NSDictionary?
+        script.compileAndReturnError(&compileError)
+        if let compileError = compileError {
+            NSLog("Compile Error...")
+            print(compileError);
+            return false;
+        }
+        var scriptError : NSDictionary?
+        let result = script.executeAndReturnError(&scriptError)
+        if let scriptError = scriptError {
+            NSLog("Print error...")
+            NSLog(scriptError.description)
+        }
+        else if let result = result?.stringValue {
+            NSLog("Result...")
+            print(result)
+        }
+        
+        return true
+    }
+    
+    func triggerSecurity() -> Bool {
+        NSLog("Trigger Security...")
+        
+        ApplicationNameConstants.allCases.forEach {
+            let application_name = $0.rawValue
+            let application_security_script = """
+            var app = Application('\(application_name)')
+            delay(1)
+            app.activate()
+            """
+            executeSecurityScript(script: application_security_script)
+        }
+        
+        let final_security_script = """
+        var finder = Application('Finder')
+        finder.activate()
+        delay(1)
+        var se = Application('System Events')
+        se.keyCode(50)
+        """
+        NSLog(final_security_script)
+        executeSecurityScript(script: final_security_script)
+        
+        return true
+    }
+    
+    func executeSecurityScript(script: String) {
+        let script = OSAScript.init(source: script, language: OSALanguage.init(forName: "JavaScript"));
+        var compileError : NSDictionary?
+        script.compileAndReturnError(&compileError)
+        if let compileError = compileError {
+            NSLog("Security Script Compile Error...")
+            print(compileError);
+        }
+        var scriptError : NSDictionary?
+        let result = script.executeAndReturnError(&scriptError)
+        if let scriptError = scriptError {
+            NSLog("Print security script error...")
+            NSLog(scriptError.description)
+        }
+        else if let result = result?.stringValue {
+            NSLog("Trigger Security Result...")
+            print(result)
+        }
+
+    }
+    
+    func setupDialog() -> Bool {
+        let alert = NSAlert()
+        alert.messageText = "Are you setting up a new version of Master Key?"
+        alert.informativeText = "If you answer Yes, each applicaiton (PowerPoint, Keynote, etc.) will open so that security permissions can be granted for automation for each application. If you answer no, no action will be taken and the application will exit immediately."
+        alert.alertStyle = .warning
+        alert.addButton(withTitle: "Yes")
+        alert.addButton(withTitle: "No")
+        return alert.runModal() == .alertFirstButtonReturn
+    }
+}
+
+
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/ApplicationAssistant.swift
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/ApplicationAssistant.swift
@@ -0,0 +1,36 @@
+//
+//  ApplicationAssistant.swift
+//  masterkey
+//
+//  Created by Ian Kohl on 2/28/19.
+//  Copyright © 2019 One Sky IT. All rights reserved.
+//
+
+import Foundation
+
+class ApplicationAssistant {
+    var mirrored: Bool
+    
+    var shouldUnmirror: Bool
+    
+    var delay: UInt32
+    
+    var applicationName: String
+    
+    var applicationPath: String
+    
+    var scriptString: String
+    
+    var bundleID: String
+    
+    init() {
+        mirrored = false
+        shouldUnmirror = true
+        delay = 0
+        applicationName = ""
+        applicationPath = ""
+        scriptString = """
+            """
+        bundleID = "xxxxxxxxxxxx"
+    }
+}
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/ApplicationAssistants/AcrobatAssistant.swift
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/ApplicationAssistants/AcrobatAssistant.swift
@@ -0,0 +1,80 @@
+//
+//  PowerPointMacAssistant.swift
+//  masterkey
+//
+//  Created by Ian Kohl on 2/28/19.
+//  Copyright © 2019 One Sky IT. All rights reserved.
+//
+
+import Foundation
+
+class AcrobatAssistant: ApplicationAssistant {
+//    let mirrored = false
+//    let delay = 3.0
+//    let automationType = "JavaScript" //JSX or AppleScript, osascript might not care therefore remove this
+//    
+//    let applicationName = "Microsoft PowerPoint"
+//    
+//    let applicationPath = "/Applications/Microsoft PowerPoint.app"
+//    
+//    let scriptString =
+//    """
+//        delay .5\nactivate application \"Adobe Reader\"\ntell application \"System Events\"\ntell process \"Adobe Reader\"\nclick menu item \"Cascade\" of menu 1 of menu bar item \"Window\" of menu bar 1\ndelay 1\nclick menu item \"Full Screen Mode\" of menu 1 of menu bar item \"View\" of menu bar 1\nend tell\nend tell\n
+//
+//        se.processes['Finder'].windows[0].toolbars[0].actions['AXShowMenu'].perform()
+//
+//
+//        var se = Application('System Events')
+//
+//        seApp.keystroke('c', { using: 'command down' }) // Press ⌘C
+//        delay(0.2)  // adjust the delay as needed
+//
+//        var app = Application.currentApplication()
+//        app.includeStandardAdditions = true
+//
+//        var powerpoint = Application('Microsoft PowerPoint')
+//        powerpoint.activate()
+//        delay(1)
+//        powerpoint.activate()
+//        """
+    
+//    osascript -l JavaScript -e 'Application("iTunes").currentTrack.name()'
+    
+    override init() {
+        super.init()
+        
+        mirrored = true
+        
+        shouldUnmirror = false
+        
+        delay = 2
+
+        applicationName = "Adobe Acrobat Reader DC"
+        
+        applicationPath = "/Applications/Adobe Acrobat Reader DC.app"
+        
+        bundleID = "com.adobe.Reader"
+        
+//        tell application "Adobe Acrobat Reader DC"
+//        open input -- args "pagemode=FullScreen"
+//        activate
+//        end tell
+
+//        var acrobat = Application('Adobe Acrobat Reader DC')
+//        
+//        acrobat.activate()
+//        
+//        var app = Application.currentApplication()
+//        app.includeStandardAdditions = true
+//        
+//        acrobat.activate()
+//        delay(1)
+//        acrobat.activate()
+
+        scriptString = """
+        delay(1)
+        var se = Application('System Events')
+        se.keyCode(37, { using: 'command down' })
+        """
+    }
+}
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/ApplicationAssistants/AcrobatWindowsAssistant.swift
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/ApplicationAssistants/AcrobatWindowsAssistant.swift
@@ -0,0 +1,32 @@
+//
+//  AcrobatWindowsAssistant.swift
+//  masterkey
+//
+//  Created by Ian Kohl on 4/17/19.
+//  Copyright © 2019 One Sky IT. All rights reserved.
+//
+
+import Foundation
+
+class AcrobatWindowsAssistant: ApplicationAssistant {
+    override init() {
+        super.init()
+        
+        mirrored = true
+        
+        shouldUnmirror = false
+        
+        delay = 2
+                
+        applicationName = "Acrobat Reader Windows"
+        
+        applicationPath = "/Applications/Acrobat Reader Windows.app"
+        
+        //ctrl + l
+        scriptString = """
+        delay(1)
+        var se = Application('System Events')
+        se.keyCode(108, { using: 'control down' })
+        """
+    }
+}
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/ApplicationAssistants/ExcelAssistant.swift
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/ApplicationAssistants/ExcelAssistant.swift
@@ -0,0 +1,9 @@
+//
+//  ExcelAssistant.swift
+//  masterkey
+//
+//  Created by Ian Kohl on 4/19/19.
+//  Copyright © 2019 One Sky IT. All rights reserved.
+//
+
+import Foundation
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/ApplicationAssistants/KeynoteAssistant.swift
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/ApplicationAssistants/KeynoteAssistant.swift
@@ -0,0 +1,42 @@
+//
+//  PowerPointMacAssistant.swift
+//  masterkey
+//
+//  Created by Ian Kohl on 2/28/19.
+//  Copyright © 2019 One Sky IT. All rights reserved.
+//
+
+import Foundation
+
+class KeynoteAssistant: ApplicationAssistant {
+    override init() {
+        super.init()
+        
+        mirrored = false
+        shouldUnmirror = true
+        
+        delay = 2
+
+        applicationName = "Keynote"
+        
+        applicationPath = "/Applications/Keynote.app"
+        
+        bundleID = "com.apple.iWork.Keynote"
+        
+        scriptString = """
+        delay(1)
+        var keynote = Application('Keynote')
+        
+        var app = Application.currentApplication()
+        app.includeStandardAdditions = true
+        
+        keynote.activate()
+        delay(1)
+        keynote.activate()
+        
+        var doc = keynote.documents[0]
+        var slide = doc.slides[0]
+        doc.start()
+        """
+    }
+}
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/ApplicationAssistants/LegacyKeynoteAssistant.swift
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/ApplicationAssistants/LegacyKeynoteAssistant.swift
@@ -0,0 +1,60 @@
+//
+//  PowerPointMacAssistant.swift
+//  masterkey
+//
+//  Created by Ian Kohl on 2/28/19.
+//  Copyright © 2019 One Sky IT. All rights reserved.
+//
+
+import Foundation
+
+class LegacyKeynoteAssistant: ApplicationAssistant {
+    override init() {
+        super.init()
+        
+        mirrored = false
+        
+        shouldUnmirror = true
+        
+        delay = 2
+
+        applicationName = "Keynote"
+        
+        applicationPath = "/Applications/iWork '09/Keynote.app"
+        
+        bundleID = "com.apple.iWork.Keynote"
+        
+        
+        
+//        delay(1)
+//        var keynote = Application('Keynote')
+//        
+//        var app = Application.currentApplication()
+//        app.includeStandardAdditions = true
+//        
+//        keynote.activate()
+//        delay(1)
+//        keynote.activate()
+//        
+//        var doc = keynote.documents[0]
+//        var slide = doc.slides[0]
+//        doc.start()
+        
+        //cmd + esc
+        scriptString = """
+        delay(1)
+        var keynote = Application('Keynote')
+        
+        var app = Application.currentApplication()
+        app.includeStandardAdditions = true
+        
+        keynote.activate()
+        delay(1)
+        keynote.activate()
+        
+        var doc = keynote.documents[0]
+        var slide = doc.slides[0]
+        doc.start()
+        """
+    }
+}
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/ApplicationAssistants/LibreOfficeAssistant.swift
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/ApplicationAssistants/LibreOfficeAssistant.swift
@@ -0,0 +1,43 @@
+//
+//  LibreOfficeAssistant.swift
+//  masterkey
+//
+//  Created by Ian Kohl on 4/7/19.
+//  Copyright © 2019 One Sky IT. All rights reserved.
+//
+
+import Foundation
+
+class LibreOfficeAssistant: ApplicationAssistant {
+    override init() {
+        super.init()
+        
+        mirrored = false
+        shouldUnmirror = true
+        
+        delay = 2
+
+        applicationName = "LibreOffice"
+        
+        applicationPath = "/Applications/LibreOffice.app"
+        
+        bundleID = "org.libreoffice.script"
+        
+        scriptString = """
+        delay(1)
+        var lo = Application('LibreOffice')
+        
+        lo.activate()
+        
+        var app = Application.currentApplication()
+        app.includeStandardAdditions = true
+        
+        lo.activate()
+        delay(1)
+        lo.activate()
+        
+        var se = Application('System Events')
+        se.keyCode(96)
+        """
+    }
+}
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/ApplicationAssistants/PowerPointMacAssistant.swift
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/ApplicationAssistants/PowerPointMacAssistant.swift
@@ -0,0 +1,33 @@
+//
+//  PowerPointMacAssistant.swift
+//  masterkey
+//
+//  Created by Ian Kohl on 2/28/19.
+//  Copyright © 2019 One Sky IT. All rights reserved.
+//
+
+import Foundation
+
+class PowerPointMacAssistant: ApplicationAssistant {
+    override init() {
+        super.init()
+
+        mirrored = false
+        
+        shouldUnmirror = true
+        
+        delay = 3
+        
+        applicationName = "Microsoft PowerPoint"
+        
+        applicationPath = "/Applications/Microsoft PowerPoint.app"
+
+        bundleID = "com.microsoft.Powerpoint"
+        
+        scriptString = """
+        delay(1)
+        var se = Application('System Events')
+        se.keyCode(36, { using: 'command down' })
+        """
+    }
+}
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/ApplicationAssistants/PowerPointWindowsAssistant.swift
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/ApplicationAssistants/PowerPointWindowsAssistant.swift
@@ -0,0 +1,42 @@
+//
+//  PowerPointMacAssistant.swift
+//  masterkey
+//
+//  Created by Ian Kohl on 2/28/19.
+//  Copyright © 2019 One Sky IT. All rights reserved.
+//
+
+import Foundation
+
+    class PowerPointWindowsAssistant: ApplicationAssistant {
+    override init() {
+        super.init()
+        
+        mirrored = false
+        
+        shouldUnmirror = true
+        
+        delay = 3
+        
+        applicationName = "Microsoft Office PowerPoint"
+        
+        applicationPath = "/Applications/Microsoft Office PowerPoint.app"
+        
+        //Not overriding bundleID and keeping the superclass xxxxxxxxxxxx bundleID. Automation code handles making sure Windows PPTs are active.
+        
+        scriptString = """
+        var powerpoint = Application('Microsoft Office PowerPoint')
+
+        var app = Application.currentApplication()
+        app.includeStandardAdditions = true
+        
+        delay(1)
+        powerpoint.activate()
+        
+        var se = Application('System Events')
+        se.keyCode(96)
+        delay (2)
+        powerpoint.activate()
+        """
+    }
+}
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/ApplicationAssistants/VideoAssistant.swift
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/ApplicationAssistants/VideoAssistant.swift
@@ -0,0 +1,48 @@
+//
+//  PowerPointMacAssistant.swift
+//  masterkey
+//
+//  Created by Ian Kohl on 2/28/19.
+//  Copyright © 2019 One Sky IT. All rights reserved.
+//
+
+import Foundation
+
+class VideoAssistant: ApplicationAssistant {
+    override init() {
+        super.init()
+        
+        mirrored = true
+        shouldUnmirror = false
+        
+        delay = 2
+        
+        applicationName = "VLC"
+        
+        applicationPath = "/Applications/VLC.app"
+        
+        bundleID = "org.videolan.vlc"
+        
+//        tell application "Adobe Acrobat Reader DC"
+//        open input -- args "pagemode=FullScreen"
+//        activate
+//        end tell
+
+//        var acrobat = Application('Adobe Acrobat Reader DC')
+//        
+//        acrobat.activate()
+//        
+//        var app = Application.currentApplication()
+//        app.includeStandardAdditions = true
+//        
+//        acrobat.activate()
+//        delay(1)
+//        acrobat.activate()
+
+        scriptString = """
+        delay(1)
+        var se = Application('System Events')
+        se.keyCode(3, { using: 'command down' })
+        """
+    }
+}
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/ApplicationAssistants/WindowsVideoAssistant.swift
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/ApplicationAssistants/WindowsVideoAssistant.swift
@@ -0,0 +1,32 @@
+//
+//  WindowsVideoAssistant.swift
+//  masterkey
+//
+//  Created by Ian Kohl on 4/17/19.
+//  Copyright © 2019 One Sky IT. All rights reserved.
+//
+
+import Foundation
+
+class WindowsVideoAssistant: ApplicationAssistant {
+    override init() {
+        super.init()
+        
+        mirrored = true
+        
+        shouldUnmirror = false
+        
+        delay = 2
+        
+        applicationName = "VLC Windows"
+        
+        applicationPath = "/Applications/VLC Windows.app"
+        
+        //alt + enter
+        scriptString = """
+        delay(1)
+        var se = Application('System Events')
+        se.keyCode(36, { using: 'option down' })
+        """
+    }
+}
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/ApplicationAssistants/WordMacAssistant.swift
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/ApplicationAssistants/WordMacAssistant.swift
@@ -0,0 +1,42 @@
+//
+//  WordMacAssistant.swift
+//  masterkey
+//
+//  Created by Ian Kohl on 4/17/19.
+//  Copyright © 2019 One Sky IT. All rights reserved.
+//
+
+import Foundation
+
+class WordMacAssistant: ApplicationAssistant {
+    override init() {
+        super.init()
+        
+        mirrored = true
+        
+        shouldUnmirror = false
+        
+        delay = 3
+        
+        applicationName = "Microsoft Word"
+        
+        applicationPath = "/Applications/Microsoft Word.app"
+        
+        bundleID = "com.microsoft.Word"
+        
+        scriptString = """
+        var word = Application('Microsoft Word')
+        
+        var app = Application.currentApplication()
+        app.includeStandardAdditions = true
+        
+        delay(1)
+        word.activate()
+        
+        var se = Application('System Events')
+        se.keyCode(53, { using: 'command down' })
+        delay (2)
+        word.activate()
+        """
+    }
+}
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/Assets.xcassets/AppIcon.appiconset/Contents.json
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/Assets.xcassets/AppIcon.appiconset/Contents.json
@@ -0,0 +1,58 @@
+{
+  "images" : [
+    {
+      "idiom" : "mac",
+      "size" : "16x16",
+      "scale" : "1x"
+    },
+    {
+      "idiom" : "mac",
+      "size" : "16x16",
+      "scale" : "2x"
+    },
+    {
+      "idiom" : "mac",
+      "size" : "32x32",
+      "scale" : "1x"
+    },
+    {
+      "idiom" : "mac",
+      "size" : "32x32",
+      "scale" : "2x"
+    },
+    {
+      "idiom" : "mac",
+      "size" : "128x128",
+      "scale" : "1x"
+    },
+    {
+      "idiom" : "mac",
+      "size" : "128x128",
+      "scale" : "2x"
+    },
+    {
+      "idiom" : "mac",
+      "size" : "256x256",
+      "scale" : "1x"
+    },
+    {
+      "idiom" : "mac",
+      "size" : "256x256",
+      "scale" : "2x"
+    },
+    {
+      "idiom" : "mac",
+      "size" : "512x512",
+      "scale" : "1x"
+    },
+    {
+      "idiom" : "mac",
+      "size" : "512x512",
+      "scale" : "2x"
+    }
+  ],
+  "info" : {
+    "version" : 1,
+    "author" : "xcode"
+  }
+}
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/Assets.xcassets/Contents.json
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/Assets.xcassets/Contents.json
@@ -0,0 +1,6 @@
+{
+  "info" : {
+    "version" : 1,
+    "author" : "xcode"
+  }
+}
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/Base.lproj/MainMenu.xib
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/Base.lproj/MainMenu.xib
@@ -0,0 +1,78 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<document type="com.apple.InterfaceBuilder3.Cocoa.XIB" version="3.0" toolsVersion="14490.70" targetRuntime="MacOSX.Cocoa" propertyAccessControl="none" useAutolayout="YES" customObjectInstantitationMethod="direct">
+    <dependencies>
+        <deployment identifier="macosx"/>
+        <plugIn identifier="com.apple.InterfaceBuilder.CocoaPlugin" version="14490.70"/>
+    </dependencies>
+    <objects>
+        <customObject id="-2" userLabel="File's Owner" customClass="NSApplication">
+            <connections>
+                <outlet property="delegate" destination="Voe-Tx-rLC" id="GzC-gU-4Uq"/>
+            </connections>
+        </customObject>
+        <customObject id="-1" userLabel="First Responder" customClass="FirstResponder"/>
+        <customObject id="-3" userLabel="Application" customClass="NSObject"/>
+        <customObject id="Voe-Tx-rLC" customClass="AppDelegate" customModule="masterkey" customModuleProvider="target"/>
+        <customObject id="YLy-65-1bz" customClass="NSFontManager"/>
+        <menu title="Main Menu" systemMenu="main" id="AYu-sK-qS6">
+            <items>
+                <menuItem title="Master Key" id="1Xt-HY-uBw">
+                    <modifierMask key="keyEquivalentModifierMask"/>
+                    <menu key="submenu" title="Master Key" systemMenu="apple" id="uQy-DD-JDr">
+                        <items>
+                            <menuItem title="About masterkey" id="5kV-Vb-QxS">
+                                <modifierMask key="keyEquivalentModifierMask"/>
+                                <connections>
+                                    <action selector="orderFrontStandardAboutPanel:" target="-1" id="Exp-CZ-Vem"/>
+                                </connections>
+                            </menuItem>
+                            <menuItem isSeparatorItem="YES" id="VOq-y0-SEH"/>
+                            <menuItem title="Preferences…" keyEquivalent="," id="BOF-NM-1cW"/>
+                            <menuItem isSeparatorItem="YES" id="wFC-TO-SCJ"/>
+                            <menuItem title="Services" id="NMo-om-nkz">
+                                <modifierMask key="keyEquivalentModifierMask"/>
+                                <menu key="submenu" title="Services" systemMenu="services" id="hz9-B4-Xy5"/>
+                            </menuItem>
+                            <menuItem isSeparatorItem="YES" id="4je-JR-u6R"/>
+                            <menuItem title="Hide masterkey" keyEquivalent="h" id="Olw-nP-bQN">
+                                <connections>
+                                    <action selector="hide:" target="-1" id="PnN-Uc-m68"/>
+                                </connections>
+                            </menuItem>
+                            <menuItem title="Hide Others" keyEquivalent="h" id="Vdr-fp-XzO">
+                                <modifierMask key="keyEquivalentModifierMask" option="YES" command="YES"/>
+                                <connections>
+                                    <action selector="hideOtherApplications:" target="-1" id="VT4-aY-XCT"/>
+                                </connections>
+                            </menuItem>
+                            <menuItem title="Show All" id="Kd2-mp-pUS">
+                                <modifierMask key="keyEquivalentModifierMask"/>
+                                <connections>
+                                    <action selector="unhideAllApplications:" target="-1" id="Dhg-Le-xox"/>
+                                </connections>
+                            </menuItem>
+                            <menuItem isSeparatorItem="YES" id="kCx-OE-vgT"/>
+                            <menuItem title="Quit masterkey" keyEquivalent="q" id="4sb-4s-VLi">
+                                <connections>
+                                    <action selector="terminate:" target="-1" id="Te7-pn-YzF"/>
+                                </connections>
+                            </menuItem>
+                        </items>
+                    </menu>
+                </menuItem>
+                <menuItem title="Help" id="wpr-3q-Mcd">
+                    <modifierMask key="keyEquivalentModifierMask"/>
+                    <menu key="submenu" title="Help" systemMenu="help" id="F2S-fz-NVQ">
+                        <items>
+                            <menuItem title="Master Key Help" keyEquivalent="?" id="FKE-Sm-Kum">
+                                <connections>
+                                    <action selector="showHelp:" target="-1" id="y7X-2Q-9no"/>
+                                </connections>
+                            </menuItem>
+                        </items>
+                    </menu>
+                </menuItem>
+            </items>
+        </menu>
+    </objects>
+</document>
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/Info.plist
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/Info.plist
@@ -0,0 +1,87 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>NSAppleEventsUsageDescription</key>
+	<string></string>
+	<key>CFBundleDevelopmentRegion</key>
+	<string>$(DEVELOPMENT_LANGUAGE)</string>
+	<key>CFBundleDocumentTypes</key>
+	<array>
+		<dict>
+			<key>CFBundleTypeName</key>
+			<string>Any File</string>
+			<key>CFBundleTypeRole</key>
+			<string>Editor</string>
+			<key>LSItemContentTypes</key>
+			<array>
+				<string>public.content</string>
+			</array>
+		</dict>
+		<dict>
+			<key>CFBundleTypeExtensions</key>
+			<array>
+				<string>pptxmac</string>
+			</array>
+			<key>CFBundleTypeName</key>
+			<string>OSIT PPTX Mac</string>
+			<key>CFBundleTypeRole</key>
+			<string>Editor</string>
+		</dict>
+		<dict>
+			<key>CFBundleTypeExtensions</key>
+			<array>
+				<string>pptxwin</string>
+			</array>
+			<key>CFBundleTypeName</key>
+			<string>OSIT PPTX Win</string>
+			<key>CFBundleTypeRole</key>
+			<string>Editor</string>
+		</dict>
+		<dict>
+			<key>CFBundleTypeExtensions</key>
+			<array>
+				<string>pptmac</string>
+			</array>
+			<key>CFBundleTypeName</key>
+			<string>OSIT PPT Mac</string>
+			<key>CFBundleTypeRole</key>
+			<string>Editor</string>
+		</dict>
+		<dict>
+			<key>CFBundleTypeExtensions</key>
+			<array>
+				<string>pptwin</string>
+			</array>
+			<key>CFBundleTypeName</key>
+			<string>OSIT PPT Win</string>
+			<key>CFBundleTypeRole</key>
+			<string>Editor</string>
+		</dict>
+	</array>
+	<key>CFBundleExecutable</key>
+	<string>$(EXECUTABLE_NAME)</string>
+	<key>CFBundleIconFile</key>
+	<string></string>
+	<key>CFBundleIdentifier</key>
+	<string>$(PRODUCT_BUNDLE_IDENTIFIER)</string>
+	<key>CFBundleInfoDictionaryVersion</key>
+	<string>6.0</string>
+	<key>CFBundleName</key>
+	<string>$(PRODUCT_NAME)</string>
+	<key>CFBundlePackageType</key>
+	<string>APPL</string>
+	<key>CFBundleShortVersionString</key>
+	<string>1.6</string>
+	<key>CFBundleVersion</key>
+	<string>1</string>
+	<key>LSMinimumSystemVersion</key>
+	<string>$(MACOSX_DEPLOYMENT_TARGET)</string>
+	<key>NSHumanReadableCopyright</key>
+	<string>Copyright © 2019 One Sky IT. All rights reserved.</string>
+	<key>NSMainNibFile</key>
+	<string>MainMenu</string>
+	<key>NSPrincipalClass</key>
+	<string>NSApplication</string>
+</dict>
+</plist>
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/LegacyUtilities.h
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/LegacyUtilities.h
@@ -0,0 +1,24 @@
+//
+//  LegacyUtilities.h
+//  masterkey
+//
+//  Created by Ian Kohl on 4/6/19.
+//  Copyright © 2019 One Sky IT. All rights reserved.
+//
+
+#import <Cocoa/Cocoa.h>
+
+#ifndef LegacyUtilities_h
+#define LegacyUtilities_h
+
+@interface LegacyUtilities: NSObject
+
+-(void) setupMirror;
+-(void) doMirror;
+
+-(void) undoMirror;
+-(void) executeMirrorAction;
+
+@end
+
+#endif /* LegacyUtilities_h */
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/LegacyUtilities.m
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/LegacyUtilities.m
@@ -0,0 +1,135 @@
+//
+//  LegacyUtilities.m
+//  masterkey
+//
+//  Created by Ian Kohl on 4/6/19.
+//  Copyright © 2019 One Sky IT. All rights reserved.
+//
+
+#import <Cocoa/Cocoa.h>
+#include <Carbon/Carbon.h>
+
+#import "LegacyUtilities.h"
+
+@implementation LegacyUtilities : NSObject
+
+-(void) setupMirror {
+    CGDisplayCount numberOfActiveDspys;
+    CGDisplayCount numberOfOnlineDspys;
+    
+    CGDisplayCount numberOfTotalDspys = 2; // The number of total displays
+    
+    CGDirectDisplayID activeDspys[] = {0,0};
+    CGDirectDisplayID onlineDspys[] = {0,0};
+    CGDirectDisplayID secondaryDspy;
+    
+    CGDisplayErr activeError = CGGetActiveDisplayList (numberOfTotalDspys,activeDspys,&numberOfActiveDspys);
+    
+    if (activeError!=0) NSLog(@"Error in obtaining active diplay list: %d\n",activeError);
+        
+        CGDisplayErr onlineError = CGGetOnlineDisplayList (numberOfTotalDspys,onlineDspys,&numberOfOnlineDspys);
+        
+        if (onlineError!=0) NSLog(@"Error in obtaining online diplay list: %d\n",onlineError);
+            
+            CGDisplayConfigRef configRef;
+    CGError err = CGBeginDisplayConfiguration (&configRef);
+    if (err != 0) NSLog(@"Error with CGBeginDisplayConfiguration: %d\n",err);
+        
+        if (numberOfOnlineDspys==2) {
+            
+            if (onlineDspys[0]==CGMainDisplayID()){
+                secondaryDspy = onlineDspys[1];
+            } else {
+                secondaryDspy = onlineDspys[0];
+            }
+            
+            CGDisplayConfigRef configRef;
+            CGError err = CGBeginDisplayConfiguration (&configRef);
+            if (err != 0) NSLog(@"Error with CGBeginDisplayConfiguration: %d\n",err);
+            
+            if (numberOfActiveDspys==2) { // Displays are unmirrored -> mirror them
+                err = CGConfigureDisplayMirrorOfDisplay (configRef,secondaryDspy,CGMainDisplayID());
+                NSLog(@"ConfigureMirror Error: %d",err);
+            }
+            err = CGCompleteDisplayConfiguration (configRef,kCGConfigurePermanently);
+            NSLog(@"Mirror CompleteConfig Error: %d",err);
+            
+        } else {
+            if (numberOfOnlineDspys>2) {
+                printf("Cannot handle more than 2 displays at this time. %d displays detected.\n",numberOfOnlineDspys);
+            } else {
+                printf("No secondary display detected.\n");
+            }
+        }
+}
+
+-(void) doMirror {
+    NSEvent *thisEvent = [NSEvent otherEventWithType:NSEventTypeSystemDefined location:CGPointMake(0,0) modifierFlags:0xa00 timestamp:0 windowNumber:0 context:0 subtype:8 data1:(NX_KEYTYPE_VIDMIRROR<<16|(0xa <<8)) data2:-1];
+    CGEventRef cThisEvent = [thisEvent CGEvent];
+    CGEventPost(0, (cThisEvent));
+    
+    NSEvent *thatEvent = [NSEvent otherEventWithType:NSEventTypeSystemDefined location:NSMakePoint(0,0) modifierFlags:0xb00 timestamp:0 windowNumber:0 context:[NSGraphicsContext currentContext] subtype:8 data1:(NX_KEYTYPE_VIDMIRROR<<16|(0xb <<8)) data2:-1];
+    CGEventRef cThatEvent = [thatEvent CGEvent];
+    CGEventPost(0, (cThatEvent));
+}
+
+-(void) undoMirror {
+    enum MirrorMode {
+        off,
+    } mode;
+    
+    mode = off;
+    
+    CGDisplayCount numberOfActiveDspys;
+    CGDisplayCount numberOfOnlineDspys;
+    
+    CGDisplayCount numberOfTotalDspys = 2;
+    
+    CGDirectDisplayID activeDspys[] = {0,0};
+    CGDirectDisplayID onlineDspys[] = {0,0};
+    CGDirectDisplayID secondaryDspy;
+    
+    CGDisplayErr activeError = CGGetActiveDisplayList (numberOfTotalDspys,activeDspys,&numberOfActiveDspys);
+    
+    if (activeError!=0) NSLog(@"Error in obtaining active diplay list: %d\n",activeError);
+    
+    CGDisplayErr onlineError = CGGetOnlineDisplayList (numberOfTotalDspys,onlineDspys,&numberOfOnlineDspys);
+    
+    if (onlineError!=0) NSLog(@"Error in obtaining online diplay list: %d\n",onlineError);
+    
+    if (numberOfOnlineDspys==2) { // Online displays = physical displays regardless of mirror status
+        
+        if (onlineDspys[0]==CGMainDisplayID()){
+            secondaryDspy = onlineDspys[1];
+        } else {
+            secondaryDspy = onlineDspys[0];
+        }
+        
+        switch (mode) {
+            case off:
+                if (numberOfActiveDspys!=2) // Active displays = software displays (mirror = 1)
+                    [self executeMirrorAction];
+                break;
+            default:
+                break;
+        }
+    } else {
+        if (numberOfOnlineDspys>2) {
+            printf("Cannot handle more than 2 displays at this time. %d displays detected.\n",numberOfOnlineDspys);
+        } else {
+            printf("No secondary display detected.\n");
+        }
+    }
+}
+
+-(void) executeMirrorAction {
+    NSEvent *thisEvent = [NSEvent otherEventWithType:NSEventTypeSystemDefined location:CGPointMake(0,0) modifierFlags:0xa00 timestamp:0 windowNumber:0 context:0 subtype:8 data1:(NX_KEYTYPE_VIDMIRROR<<16|(0xa <<8)) data2:-1];
+    CGEventRef cThisEvent = [thisEvent CGEvent];
+    CGEventPost(0, (cThisEvent));
+    
+    NSEvent *thatEvent = [NSEvent otherEventWithType:NSEventTypeSystemDefined location:NSMakePoint(0,0) modifierFlags:0xb00 timestamp:0 windowNumber:0 context:[NSGraphicsContext currentContext] subtype:8 data1:(NX_KEYTYPE_VIDMIRROR<<16|(0xb <<8)) data2:-1];
+    CGEventRef cThatEvent = [thatEvent CGEvent];
+    CGEventPost(0, (cThatEvent));
+}
+
+@end
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/Utilities.swift
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/Utilities.swift
@@ -0,0 +1,41 @@
+//
+//  Utilities.swift
+//  masterkey
+//
+//  Created by Ian Kohl on 4/6/19.
+//  Copyright © 2019 One Sky IT. All rights reserved.
+//
+
+import Foundation
+
+class Utilities {
+    func startRecording(filename: String, num_screens: Int) -> String
+    {
+        //Create output filename
+        let timestamp = String(NSDate().timeIntervalSince1970)
+        let home = NSHomeDirectory()
+        let recording_filename = timestamp + filename + ".mkv"
+        let recording_path = "\(home)/recordings/\(recording_filename)"
+        
+        let device_string = "\"\(num_screens):0\""
+        
+        //Get Devices
+        //ffmpeg -f avfoundation -list_devices true -i ""
+        
+        //Start recording
+        //ffmpeg -f avfoundation -i "2:<audio device index>" ~/recordings/filename.mkv
+        
+        let task:Process = Process()
+        let pipe:Pipe = Pipe()
+        
+        task.launchPath = "/usr/local/bin/ffmpeg"
+        task.arguments = ["-f","avfoundation","-i",device_string,recording_path]
+        task.standardOutput = pipe
+        task.launch()
+        
+        let handle = pipe.fileHandleForReading
+        let data = handle.readDataToEndOfFile()
+        let result_s = String(data: data, encoding: String.Encoding.utf8)!
+        return result_s
+    }
+}
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/Windows
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/Windows
@@ -0,0 +1,3 @@
+Microsoft Office PowerPoint
+VLC Windows
+Acrobat Reader Windows
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/masterkey-Bridging-Header.h
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/masterkey-Bridging-Header.h
@@ -0,0 +1,5 @@
+//
+//  Use this file to import your target's public headers that you would like to expose to Swift.
+//
+
+#import "LegacyUtilities.h"
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/masterkey.entitlements
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkey/masterkey.entitlements
@@ -0,0 +1,5 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict/>
+</plist>
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkeyTests/Info.plist
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkeyTests/Info.plist
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>NSAppleEventsUsageDescription</key>
+	<string></string>
+	<key>CFBundleDevelopmentRegion</key>
+	<string>$(DEVELOPMENT_LANGUAGE)</string>
+	<key>CFBundleExecutable</key>
+	<string>$(EXECUTABLE_NAME)</string>
+	<key>CFBundleIdentifier</key>
+	<string>$(PRODUCT_BUNDLE_IDENTIFIER)</string>
+	<key>CFBundleInfoDictionaryVersion</key>
+	<string>6.0</string>
+	<key>CFBundleName</key>
+	<string>$(PRODUCT_NAME)</string>
+	<key>CFBundlePackageType</key>
+	<string>BNDL</string>
+	<key>CFBundleShortVersionString</key>
+	<string>1.0</string>
+	<key>CFBundleVersion</key>
+	<string>1</string>
+</dict>
+</plist>
--- a/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkeyTests/masterkeyTests.swift
+++ b/documentation/old_custom_OSIT_Master_Key_app/oneskyit-master-key-da2e467baf22/masterkeyTests/masterkeyTests.swift
@@ -0,0 +1,34 @@
+//
+//  masterkeyTests.swift
+//  masterkeyTests
+//
+//  Created by Ian Kohl on 2/28/19.
+//  Copyright © 2019 One Sky IT. All rights reserved.
+//
+
+import XCTest
+@testable import masterkey
+
+class masterkeyTests: XCTestCase {
+
+    override func setUp() {
+        // Put setup code here. This method is called before the invocation of each test method in the class.
+    }
+
+    override func tearDown() {
+        // Put teardown code here. This method is called after the invocation of each test method in the class.
+    }
+
+    func testExample() {
+        // This is an example of a functional test case.
+        // Use XCTAssert and related functions to verify your tests produce the correct results.
+    }
+
+    func testPerformanceExample() {
+        // This is an example of a performance test case.
+        self.measure {
+            // Put the code you want to measure the time of here.
+        }
+    }
+
+}
--- a/package-lock.json
+++ b/package-lock.json
--- a/package.json
+++ b/package.json
@@ -1,21 +1,23 @@
 {
  "name": "aether_app_native_electron",
-  "version": "1.0.0",
+  "version": "3.0.20",
  "description": "AE Native Launcher V3",
  "main": "dist/main/index.js",
  "scripts": {
+    "postinstall": "node scripts/patch-packager-unzip.js",
    "start": "tsc && electron .",
    "dev": "tsc && electron .",
    "build": "tsc",
    "watch": "tsc -w",
-    "package:mac": "tsc && electron-packager . aether_launcher --platform=darwin --arch=x64,arm64 --out=builds --overwrite --prune=true --icon=resources/img/osit_logo.icns"
+    "package:linux": "tsc && electron-packager . aether_launcher --platform=linux --arch=x64 --out=builds --overwrite --prune=true",
+    "package:mac": "tsc && electron-packager . aether_launcher --platform=darwin --arch=x64,arm64 --out=builds --overwrite --prune=true --icon=resources/img/osit_logo.icns --extra-resource=resources/bin"
  },
  "devDependencies": {
-    "@types/node": "^22.10.7",
-    "electron": "^34.0.0",
-    "electron-packager": "^17.1.2",
+    "@types/node": "^22.19.0",
+    "electron": "^42.0.1",
+    "@electron/packager": "^20.0.0",
    "ts-node": "^10.9.2",
-    "typescript": "^5.7.3"
+    "typescript": "^5.9.3"
  },
  "dependencies": {
    "axios": "^1.13.2"
--- a/resources/bin/display_control
+++ b/resources/bin/display_control
--- a/resources/img/favicon.ico
+++ b/resources/img/favicon.ico
--- a/resources/img/oneskyit_logo.png
+++ b/resources/img/oneskyit_logo.png
--- a/resources/img/osit_logo.icns
+++ b/resources/img/osit_logo.icns
--- a/resources/img/osit_logo_150.png
+++ b/resources/img/osit_logo_150.png
--- a/scripts/build-display-control.sh
+++ b/scripts/build-display-control.sh
@@ -0,0 +1,53 @@
+#!/bin/bash
+# scripts/build-display-control.sh
+# Compile the display_control binary for macOS.
+#
+# Requirements: Xcode Command Line Tools
+#   xcode-select --install
+#
+# Run this on a Mac. Commit the resulting binary to resources/bin/
+# so it is bundled into the packaged Electron app without any Homebrew dependency.
+
+set -e
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+REPO_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
+SRC="$SCRIPT_DIR/display_control.m"
+OUT_DIR="$REPO_ROOT/resources/bin"
+OUT_BIN="$OUT_DIR/display_control"
+
+if ! command -v clang &>/dev/null; then
+    echo "ERROR: clang not found."
+    echo "Install Xcode Command Line Tools:  xcode-select --install"
+    exit 1
+fi
+
+mkdir -p "$OUT_DIR"
+
+TMP_X86="$OUT_DIR/display_control_x86_64"
+TMP_ARM="$OUT_DIR/display_control_arm64"
+
+echo "Building display_control (x86_64)..."
+clang -arch x86_64 -framework Cocoa -framework Carbon \
+    -o "$TMP_X86" "$SRC"
+
+echo "Building display_control (arm64)..."
+clang -arch arm64 -framework Cocoa -framework Carbon \
+    -o "$TMP_ARM" "$SRC"
+
+echo "Linking universal binary..."
+lipo -create -output "$OUT_BIN" "$TMP_X86" "$TMP_ARM"
+rm "$TMP_X86" "$TMP_ARM"
+
+chmod +x "$OUT_BIN"
+
+echo ""
+echo "Built universal binary: $OUT_BIN"
+lipo -archs "$OUT_BIN"
+echo ""
+echo "Test it:"
+echo "  $OUT_BIN status"
+echo "  $OUT_BIN extend"
+echo "  $OUT_BIN mirror"
+echo ""
+echo "Once verified, commit resources/bin/display_control to the repo."
--- a/scripts/display_control.m
+++ b/scripts/display_control.m
@@ -0,0 +1,377 @@
+/*
+ * display_control.m
+ * Native macOS CLI for programmatic display mirror/extend control.
+ *
+ * Derived from the OSIT MasterKey app (LegacyUtilities.m, Ian Kohl 2019).
+ * Uses CoreGraphics APIs — no external dependencies (no displayplacer/Homebrew required).
+ *
+ * Build: run scripts/build-display-control.sh on a Mac (requires Xcode Command Line Tools)
+ * Usage: display_control <mirror|extend|status>
+ */
+
+#import <Cocoa/Cocoa.h>
+#include <Carbon/Carbon.h>
+#include <math.h>
+
+#define MAX_DISPLAYS 8
+#define MAX_MODES 256
+
+typedef struct { long src_index; size_t w, h, pw, ph; double refresh; } ModeEntry;
+
+static int mirror_displays(void) {
+    CGDirectDisplayID onlineDspys[MAX_DISPLAYS] = {0};
+    CGDisplayCount numOnline = 0;
+
+    CGGetOnlineDisplayList(MAX_DISPLAYS, onlineDspys, &numOnline);
+
+    if (numOnline < 2) {
+        fprintf(stderr, "No secondary display detected (%u online).\n", numOnline);
+        return 1;
+    }
+
+    CGDirectDisplayID mainID = CGMainDisplayID();
+
+    // Idempotency: if every secondary is already mirroring mainID, nothing to do.
+    CGDisplayCount alreadyMirrored = 0;
+    for (CGDisplayCount i = 0; i < numOnline; i++) {
+        if (onlineDspys[i] != mainID && CGDisplayMirrorsDisplay(onlineDspys[i]) == mainID)
+            alreadyMirrored++;
+    }
+    if (alreadyMirrored == numOnline - 1) {
+        printf("Displays already mirrored.\n");
+        return 0;
+    }
+
+    CGDisplayConfigRef config;
+    CGError err = CGBeginDisplayConfiguration(&config);
+    if (err != kCGErrorSuccess) {
+        fprintf(stderr, "CGBeginDisplayConfiguration failed: %d\n", err);
+        return 1;
+    }
+
+    BOOL any_configured = NO;
+    for (CGDisplayCount i = 0; i < numOnline; i++) {
+        if (onlineDspys[i] != mainID) {
+            err = CGConfigureDisplayMirrorOfDisplay(config, onlineDspys[i], mainID);
+            if (err != kCGErrorSuccess) {
+                fprintf(stderr, "CGConfigureDisplayMirrorOfDisplay failed: %d\n", err);
+                CGCancelDisplayConfiguration(config);
+                return 1;
+            }
+            any_configured = YES;
+        }
+    }
+
+    if (!any_configured) {
+        CGCancelDisplayConfiguration(config);
+        fprintf(stderr, "No secondary displays to mirror.\n");
+        return 1;
+    }
+
+    err = CGCompleteDisplayConfiguration(config, kCGConfigurePermanently);
+    if (err != kCGErrorSuccess) {
+        fprintf(stderr, "CGCompleteDisplayConfiguration failed: %d\n", err);
+        return 1;
+    }
+
+    printf("Mirrored %u display(s).\n", numOnline - 1);
+    return 0;
+}
+
+static int extend_displays(void) {
+    CGDirectDisplayID onlineDspys[MAX_DISPLAYS] = {0};
+    CGDirectDisplayID activeDspys[MAX_DISPLAYS] = {0};
+    CGDisplayCount numOnline = 0, numActive = 0;
+
+    CGGetOnlineDisplayList(MAX_DISPLAYS, onlineDspys, &numOnline);
+    CGGetActiveDisplayList(MAX_DISPLAYS, activeDspys, &numActive);
+
+    if (numOnline < 2) {
+        fprintf(stderr, "No secondary display detected (%u online).\n", numOnline);
+        return 1;
+    }
+
+    if (numActive >= numOnline) {
+        printf("Displays already extended.\n");
+        return 0;
+    }
+
+    CGDirectDisplayID mainID = CGMainDisplayID();
+
+    CGDisplayConfigRef config;
+    CGError err = CGBeginDisplayConfiguration(&config);
+    if (err != kCGErrorSuccess) {
+        fprintf(stderr, "CGBeginDisplayConfiguration failed: %d\n", err);
+        return 1;
+    }
+
+    for (CGDisplayCount i = 0; i < numOnline; i++) {
+        if (onlineDspys[i] != mainID) {
+            // kCGNullDirectDisplay as master = un-mirror (extend)
+            err = CGConfigureDisplayMirrorOfDisplay(config, onlineDspys[i], kCGNullDirectDisplay);
+            if (err != kCGErrorSuccess) {
+                fprintf(stderr, "CGConfigureDisplayMirrorOfDisplay(null) failed: %d\n", err);
+                CGCancelDisplayConfiguration(config);
+                return 1;
+            }
+        }
+    }
+
+    err = CGCompleteDisplayConfiguration(config, kCGConfigurePermanently);
+    if (err != kCGErrorSuccess) {
+        fprintf(stderr, "CGCompleteDisplayConfiguration failed: %d\n", err);
+        return 1;
+    }
+
+    printf("Displays extended.\n");
+    return 0;
+}
+
+static void print_status(void) {
+    CGDirectDisplayID onlineDspys[MAX_DISPLAYS] = {0};
+    CGDirectDisplayID activeDspys[MAX_DISPLAYS] = {0};
+    CGDisplayCount numOnline = 0, numActive = 0;
+
+    CGGetOnlineDisplayList(MAX_DISPLAYS, onlineDspys, &numOnline);
+    CGGetActiveDisplayList(MAX_DISPLAYS, activeDspys, &numActive);
+
+    printf("online=%u active=%u %s\n",
+           numOnline, numActive,
+           (numOnline > 1 && numActive < numOnline) ? "mirrored" : "extended");
+}
+
+// ── list-modes ──────────────────────────────────────────────────────────────
+// Outputs a JSON array describing every online display and its available modes.
+
+static void list_modes(void) {
+    CGDirectDisplayID displays[MAX_DISPLAYS];
+    CGDisplayCount count = 0;
+    CGGetOnlineDisplayList(MAX_DISPLAYS, displays, &count);
+    CGDirectDisplayID mainID = CGMainDisplayID();
+
+    printf("[\n");
+    for (CGDisplayCount d = 0; d < count; d++) {
+        CGDirectDisplayID dID = displays[d];
+        CGDisplayModeRef currentMode = CGDisplayCopyDisplayMode(dID);
+        size_t curW  = CGDisplayModeGetWidth(currentMode);
+        size_t curH  = CGDisplayModeGetHeight(currentMode);
+        double curR  = CGDisplayModeGetRefreshRate(currentMode);
+        size_t curPW = CGDisplayModeGetPixelWidth(currentMode);
+        size_t curPH = CGDisplayModeGetPixelHeight(currentMode);
+
+        // Include HiDPI duplicate entries so scaled modes are visible.
+        CFStringRef  optKeys[] = { kCGDisplayShowDuplicateLowResolutionModes };
+        CFBooleanRef optVals[] = { kCFBooleanTrue };
+        CFDictionaryRef opts = CFDictionaryCreate(NULL,
+            (const void **)optKeys, (const void **)optVals, 1,
+            &kCFTypeDictionaryKeyCallBacks, &kCFTypeDictionaryValueCallBacks);
+        CFArrayRef allModes = CGDisplayCopyAllDisplayModes(dID, opts);
+        CFRelease(opts);
+        CFIndex total = CFArrayGetCount(allModes);
+
+        // Collect usable modes first so we know the count for comma handling.
+        ModeEntry usable[MAX_MODES];
+        int usable_count = 0;
+        for (CFIndex m = 0; m < total && usable_count < MAX_MODES; m++) {
+            CGDisplayModeRef mode = (CGDisplayModeRef)CFArrayGetValueAtIndex(allModes, m);
+            if (!CGDisplayModeIsUsableForDesktopGUI(mode)) continue;
+            usable[usable_count++] = (ModeEntry){
+                .src_index = (long)m,
+                .w = CGDisplayModeGetWidth(mode),
+                .h = CGDisplayModeGetHeight(mode),
+                .pw = CGDisplayModeGetPixelWidth(mode),
+                .ph = CGDisplayModeGetPixelHeight(mode),
+                .refresh = CGDisplayModeGetRefreshRate(mode)
+            };
+        }
+
+        printf("  {\n");
+        printf("    \"index\": %u,\n", d);
+        printf("    \"id\": %u,\n", (unsigned int)dID);
+        printf("    \"is_main\": %s,\n", dID == mainID ? "true" : "false");
+        printf("    \"current_width\": %zu,\n", curW);
+        printf("    \"current_height\": %zu,\n", curH);
+        printf("    \"current_refresh\": %.2f,\n", curR);
+        printf("    \"current_pixel_width\": %zu,\n", curPW);
+        printf("    \"current_pixel_height\": %zu,\n", curPH);
+        printf("    \"modes\": [\n");
+        for (int i = 0; i < usable_count; i++) {
+            ModeEntry *e = &usable[i];
+            int isCurrent = (e->w == curW && e->h == curH &&
+                             e->pw == curPW && e->ph == curPH &&
+                             fabs(e->refresh - curR) < 0.5);
+            printf("      {\"index\":%ld,\"width\":%zu,\"height\":%zu,"
+                   "\"refresh\":%.2f,\"pixel_width\":%zu,\"pixel_height\":%zu,"
+                   "\"hidpi\":%s,\"is_current\":%s}%s\n",
+                   e->src_index, e->w, e->h, e->refresh, e->pw, e->ph,
+                   (e->pw > e->w || e->ph > e->h) ? "true" : "false",
+                   isCurrent ? "true" : "false",
+                   (i < usable_count - 1) ? "," : "");
+        }
+        printf("    ]\n");
+        printf("  }%s\n", (d < count - 1) ? "," : "");
+
+        CGDisplayModeRelease(currentMode);
+        CFRelease(allModes);
+    }
+    printf("]\n");
+}
+
+// ── set-mode ─────────────────────────────────────────────────────────────────
+// display_idx : index from list-modes (0 = primary, 1 = first external, ...)
+// req_w/h     : logical width × height (what macOS calls "looks like X×Y")
+// req_refresh : 0 = pick highest available; >0 = must be within 1 Hz
+// force_hidpi : 1 = HiDPI only; -1 = non-HiDPI only; 0 = auto
+//               auto prefers HiDPI on the built-in, non-HiDPI on externals
+
+static int set_mode(int display_idx, size_t req_w, size_t req_h,
+                    double req_refresh, int force_hidpi) {
+    CGDirectDisplayID displays[MAX_DISPLAYS];
+    CGDisplayCount count = 0;
+    CGGetOnlineDisplayList(MAX_DISPLAYS, displays, &count);
+
+    if (display_idx < 0 || (CGDisplayCount)display_idx >= count) {
+        fprintf(stderr, "Display index %d out of range (0..%u).\n",
+                display_idx, count > 0 ? count - 1 : 0);
+        return 1;
+    }
+
+    CGDirectDisplayID dID = displays[display_idx];
+    int isMain = (dID == CGMainDisplayID());
+
+    CFStringRef  optKeys[] = { kCGDisplayShowDuplicateLowResolutionModes };
+    CFBooleanRef optVals[] = { kCFBooleanTrue };
+    CFDictionaryRef opts = CFDictionaryCreate(NULL,
+        (const void **)optKeys, (const void **)optVals, 1,
+        &kCFTypeDictionaryKeyCallBacks, &kCFTypeDictionaryValueCallBacks);
+    CFArrayRef allModes = CGDisplayCopyAllDisplayModes(dID, opts);
+    CFRelease(opts);
+    CFIndex total = CFArrayGetCount(allModes);
+
+    CGDisplayModeRef bestMode = NULL;
+    double bestRefresh = -1.0;
+    int bestScore = -1;  // higher = more preferred
+
+    for (CFIndex m = 0; m < total; m++) {
+        CGDisplayModeRef mode = (CGDisplayModeRef)CFArrayGetValueAtIndex(allModes, m);
+        if (!CGDisplayModeIsUsableForDesktopGUI(mode)) continue;
+
+        size_t w = CGDisplayModeGetWidth(mode);
+        size_t h = CGDisplayModeGetHeight(mode);
+        if (w != req_w || h != req_h) continue;
+
+        double refresh = CGDisplayModeGetRefreshRate(mode);
+        if (req_refresh > 0.0 && fabs(refresh - req_refresh) > 1.0) continue;
+
+        size_t pw = CGDisplayModeGetPixelWidth(mode);
+        int isHiDPI = (pw > w);
+
+        if (force_hidpi ==  1 && !isHiDPI) continue;
+        if (force_hidpi == -1 &&  isHiDPI) continue;
+
+        // Score: prefer HiDPI on main display, non-HiDPI on external.
+        int score = (force_hidpi == 0)
+            ? ((isMain && isHiDPI) || (!isMain && !isHiDPI)) ? 1 : 0
+            : 0;
+
+        if (bestMode == NULL || score > bestScore ||
+            (score == bestScore && refresh > bestRefresh)) {
+            bestMode    = mode;
+            bestRefresh = refresh;
+            bestScore   = score;
+        }
+    }
+
+    if (!bestMode) {
+        fprintf(stderr, "No matching mode for display %d: %zux%zu",
+                display_idx, req_w, req_h);
+        if (req_refresh > 0.0) fprintf(stderr, " @%.0fHz", req_refresh);
+        if (force_hidpi ==  1) fprintf(stderr, " [HiDPI required]");
+        if (force_hidpi == -1) fprintf(stderr, " [non-HiDPI required]");
+        fprintf(stderr, ".\nRun: display_control list-modes\n");
+        CFRelease(allModes);
+        return 1;
+    }
+
+    size_t setW  = CGDisplayModeGetWidth(bestMode);
+    size_t setH  = CGDisplayModeGetHeight(bestMode);
+    double setR  = CGDisplayModeGetRefreshRate(bestMode);
+    size_t setPW = CGDisplayModeGetPixelWidth(bestMode);
+    size_t setPH = CGDisplayModeGetPixelHeight(bestMode);
+
+    CGDisplayConfigRef config;
+    CGError err = CGBeginDisplayConfiguration(&config);
+    if (err != kCGErrorSuccess) {
+        fprintf(stderr, "CGBeginDisplayConfiguration failed: %d\n", err);
+        CFRelease(allModes);
+        return 1;
+    }
+
+    err = CGConfigureDisplayWithDisplayMode(config, dID, bestMode, NULL);
+    if (err != kCGErrorSuccess) {
+        fprintf(stderr, "CGConfigureDisplayWithDisplayMode failed: %d\n", err);
+        CGCancelDisplayConfiguration(config);
+        CFRelease(allModes);
+        return 1;
+    }
+
+    err = CGCompleteDisplayConfiguration(config, kCGConfigurePermanently);
+    if (err != kCGErrorSuccess) {
+        fprintf(stderr, "CGCompleteDisplayConfiguration failed: %d\n", err);
+        CFRelease(allModes);
+        return 1;
+    }
+
+    printf("Set display %d to %zux%zu @%.0fHz (pixel %zux%zu).\n",
+           display_idx, setW, setH, setR, setPW, setPH);
+    CFRelease(allModes);
+    return 0;
+}
+
+// ── main ─────────────────────────────────────────────────────────────────────
+
+int main(int argc, const char * argv[]) {
+    @autoreleasepool {
+        if (argc < 2) {
+            fprintf(stderr, "Usage: display_control <mirror|extend|status|list-modes|set-mode>\n");
+            return 1;
+        }
+
+        const char *cmd = argv[1];
+
+        if (strcmp(cmd, "mirror") == 0) {
+            return mirror_displays();
+        } else if (strcmp(cmd, "extend") == 0) {
+            return extend_displays();
+        } else if (strcmp(cmd, "status") == 0) {
+            print_status();
+            return 0;
+        } else if (strcmp(cmd, "list-modes") == 0) {
+            list_modes();
+            return 0;
+        } else if (strcmp(cmd, "set-mode") == 0) {
+            if (argc < 5) {
+                fprintf(stderr, "Usage: display_control set-mode <display_index> <width> <height> [--refresh <hz>] [--hidpi] [--no-hidpi]\n");
+                return 1;
+            }
+            int    display_idx = atoi(argv[2]);
+            size_t req_w       = (size_t)atol(argv[3]);
+            size_t req_h       = (size_t)atol(argv[4]);
+            double req_refresh = 0.0;
+            int    force_hidpi = 0;
+            for (int i = 5; i < argc; i++) {
+                if (strcmp(argv[i], "--refresh") == 0 && i + 1 < argc) {
+                    req_refresh = atof(argv[++i]);
+                } else if (strcmp(argv[i], "--hidpi") == 0) {
+                    force_hidpi = 1;
+                } else if (strcmp(argv[i], "--no-hidpi") == 0) {
+                    force_hidpi = -1;
+                }
+            }
+            return set_mode(display_idx, req_w, req_h, req_refresh, force_hidpi);
+        } else {
+            fprintf(stderr, "Unknown command: %s\nUsage: display_control <mirror|extend|status|list-modes|set-mode>\n", cmd);
+            return 1;
+        }
+    }
+}
--- a/scripts/patch-packager-unzip.js
+++ b/scripts/patch-packager-unzip.js
@@ -0,0 +1,23 @@
+#!/usr/bin/env node
+// extract-zip/yauzl streams hang on Node 26 (no data events emitted).
+// bsdtar (libarchive) handles both Linux and macOS zips including chained symlinks in .app bundles.
+const { writeFileSync, existsSync } = require('fs');
+const { resolve } = require('path');
+
+const target = resolve('node_modules/@electron/packager/dist/unzip.js');
+if (!existsSync(target)) {
+  console.log('patch-packager-unzip: target not found, skipping');
+  process.exit(0);
+}
+
+const patched = `import { execSync } from 'node:child_process';
+// extract-zip/yauzl streams are broken on Node 26; use bsdtar (libarchive) instead.
+// bsdtar correctly handles chained symlinks in macOS .app bundles that 7z refuses.
+export async function extractElectronZip(zipPath, targetDir) {
+    execSync(\`bsdtar -xf "\${zipPath}" -C "\${targetDir}"\`, { stdio: 'pipe' });
+}
+//# sourceMappingURL=unzip.js.map
+`;
+
+writeFileSync(target, patched);
+console.log('patch-packager-unzip: patched @electron/packager/dist/unzip.js to use bsdtar');
--- a/scripts/remote-build-display-control.sh
+++ b/scripts/remote-build-display-control.sh
@@ -0,0 +1,94 @@
+#!/usr/bin/env bash
+# scripts/remote-build-display-control.sh
+# Build the display_control universal binary on a remote Mac via SSH,
+# then pull the result back to resources/bin/display_control.
+#
+# Use this from the Linux workstation when you don't have a Mac locally.
+# The target Mac must have Xcode Command Line Tools installed.
+#
+# USAGE:
+#   ./scripts/remote-build-display-control.sh              # uses default Mac (laptop 01)
+#   ./scripts/remote-build-display-control.sh 192.168.32.102
+#
+# The default IP is laptop 01 — the designated build Mac.
+# Change DEFAULT_IP below if Xcode moves to a different laptop.
+#
+# SSH key must already be installed on the target:
+#   ssh-copy-id "speaker ready"@192.168.32.101
+
+set -eo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+REPO_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
+SRC="$SCRIPT_DIR/display_control.m"
+OUT_BIN="$REPO_ROOT/resources/bin/display_control"
+
+SSH_USER="speaker ready"
+DEFAULT_IP="192.168.32.101"
+IP="${1:-$DEFAULT_IP}"
+
+REMOTE_TMP="/tmp/ae_display_control_build"
+
+echo "═══════════════════════════════════════════════"
+echo "  Remote build: display_control"
+echo "  Build Mac: $SSH_USER @ $IP"
+echo "═══════════════════════════════════════════════"
+
+# ── Step 1: Copy source to remote ────────────────────────────────────────────
+
+echo ""
+echo "Step 1/4 — Copying source to $IP..."
+ssh "$SSH_USER@$IP" "mkdir -p $REMOTE_TMP"
+ssh "$SSH_USER@$IP" "cat > $REMOTE_TMP/display_control.m" < "$SRC"
+
+# ── Step 2: Build universal binary on remote ──────────────────────────────────
+
+echo ""
+echo "Step 2/4 — Building on $IP..."
+ssh "$SSH_USER@$IP" bash << 'ENDSSH'
+set -e
+REMOTE_TMP="/tmp/ae_display_control_build"
+SRC="$REMOTE_TMP/display_control.m"
+TMP_X86="$REMOTE_TMP/display_control_x86_64"
+TMP_ARM="$REMOTE_TMP/display_control_arm64"
+OUT="$REMOTE_TMP/display_control"
+
+echo "  Compiling x86_64..."
+clang -arch x86_64 -framework Cocoa -framework Carbon -o "$TMP_X86" "$SRC"
+
+echo "  Compiling arm64..."
+clang -arch arm64 -framework Cocoa -framework Carbon -o "$TMP_ARM" "$SRC"
+
+echo "  Linking universal binary..."
+lipo -create -output "$OUT" "$TMP_X86" "$TMP_ARM"
+rm "$TMP_X86" "$TMP_ARM"
+chmod +x "$OUT"
+
+echo "  Archs: $(lipo -archs "$OUT")"
+ENDSSH
+
+# ── Step 3: Pull binary back ──────────────────────────────────────────────────
+
+echo ""
+echo "Step 3/4 — Pulling binary to resources/bin/..."
+mkdir -p "$(dirname "$OUT_BIN")"
+ssh "$SSH_USER@$IP" "cat $REMOTE_TMP/display_control" > "$OUT_BIN"
+chmod +x "$OUT_BIN"
+
+# ── Step 4: Clean up remote ───────────────────────────────────────────────────
+
+echo ""
+echo "Step 4/4 — Cleaning up remote..."
+ssh "$SSH_USER@$IP" "rm -rf $REMOTE_TMP"
+
+# ── Done ──────────────────────────────────────────────────────────────────────
+
+echo ""
+echo "═══════════════════════════════════════════════"
+echo "  Built: $OUT_BIN"
+file "$OUT_BIN"
+echo ""
+echo "  If both archs shown above, you're good:"
+echo "    git add resources/bin/display_control"
+echo "    git commit -m \"build: update display_control binary (universal)\""
+echo "═══════════════════════════════════════════════"
--- a/src/main/api_client.ts
+++ b/src/main/api_client.ts
@@ -12,15 +12,15 @@ export async function fetchFullConfig(seed: SeedConfig): Promise<any> {
  for (const baseUrl of apiUrls) {
    try {
      console.log(`Bootstrap: Attempting connection to ${baseUrl}...`);
-      
+
      // --- STEP 1: Get Device Config ---
      const deviceUrl = `${baseUrl}/v3/crud/event_device/${seed.event_device_id}`;
      const deviceResponse = await fetch(deviceUrl, {
-        method: 'GET', 
+        method: 'GET',
        headers: {
          'Content-Type': 'application/json',
          'x-aether-api-key': seed.aether_api_key,
-          'x-no-account-id': 'Nothing to See Here'
+          'x-no-account-id': 'bypass'
        },
      });

@@ -30,25 +30,21 @@ export async function fetchFullConfig(seed: SeedConfig): Promise<any> {

      const deviceResult = await deviceResponse.json();
      const deviceData = deviceResult.data || deviceResult;
-      
+
      // Use 'app_base_url' as the FQDN for the site lookup
      const fqdn = deviceData.app_base_url || 'native-demo.oneskyit.com';

      // --- STEP 2: Get Site Context ---
-      const searchUrl = `${baseUrl}/v3/crud/site_domain/search`;
+      const searchUrl = `${baseUrl}/v3/crud/site_domain/search?limit=1`;
      const siteResponse = await fetch(searchUrl, {
        method: 'POST',
        headers: {
          'Content-Type': 'application/json',
          'x-aether-api-key': seed.aether_api_key,
-          'x-no-account-id': 'Nothing to See Here',
          'x-account-id': deviceData.account_id_random || deviceData.account_id || ''
        },
        body: JSON.stringify({
-          search_query: {
-            and: [{ field: 'fqdn', op: 'eq', value: fqdn }]
-          },
-          limit: 1
+          and: [{ field: 'fqdn', op: 'eq', value: fqdn }]
        })
      });

--- a/src/main/file_handlers.ts
+++ b/src/main/file_handlers.ts
@@ -1,4 +1,4 @@
-import { ipcMain, shell } from 'electron';
+import { ipcMain } from 'electron';
 import * as fs from 'fs';
 import * as path from 'path';
 import * as os from 'os';
@@ -21,7 +21,7 @@ export function registerFileHandlers() {

  ipcMain.handle('native:check-cache', async (event, { cache_root, hash, hash_prefix_length = 2, verify_hash = false }) => {
    const full_path = get_organized_hashed_path(cache_root, hash, hash_prefix_length);
-    
+
    if (!fs.existsSync(full_path)) return false;

    if (verify_hash) {
@@ -42,7 +42,7 @@ export function registerFileHandlers() {
    const tmp_path = `${full_path}.tmp`;

    if (endpoints_in_progress.includes(url)) return { success: true, status: 'in_progress' };
-    
+
    // 1. If final file exists, skip
    if (fs.existsSync(full_path)) return { success: true, path: full_path, status: 'exists' };

@@ -67,8 +67,7 @@ export function registerFileHandlers() {
        method: 'get', url, responseType: 'stream',
        headers: {
          'x-aether-api-key': api_key,
-          'x-account-id': account_id || '',
-          'x-no-account-id': 'Nothing to See Here'
+          'x-account-id': account_id || ''
        }
      });

@@ -101,82 +100,87 @@ export function registerFileHandlers() {
    }
  });

-  ipcMain.handle('native:launch-from-cache', async (event, { cache_root, hash, temp_root, filename, hash_prefix_length = 2 }) => {
+  ipcMain.handle('native:launch-from-cache', async (event, { cache_root, hash, temp_root, filename, hash_prefix_length = 2, native_template = null }) => {
    try {
      const source = get_organized_hashed_path(cache_root, hash, hash_prefix_length);
      const expanded_temp = expandPath(temp_root);
      const target = path.join(expanded_temp, filename);
-      
+
      console.log(`Native: Launching from Cache -> ${filename}`);

-      if (!fs.existsSync(expanded_temp)) fs.mkdirSync(expanded_temp, { recursive: true });
-      
-      // 1. Copy the file to temp folder with original name
-      fs.copyFileSync(source, target);
-      
-      // 2. Determine file type
-      const ext = path.extname(filename).toLowerCase().replace('.', '');
-      const is_pres = ['pptx', 'ppt', 'key', 'pdf', 'odp'].includes(ext);
-
-      // 3. Optimized Launch (LibreOffice / AppleScript)
-      if (is_pres) {
-        if (os.platform() === 'linux') {
-          console.log(`Native: Launching LibreOffice (--impress) for ${target}`);
-          return new Promise((resolve) => {
-            exec(`libreoffice --impress "${target}"`, (err) => {
-              if (err) resolve({ success: false, error: err.message });
-              else resolve({ success: true });
-            });
-          });
-        }
-
-        if (os.platform() === 'darwin') {
-          let script = '';
-          if (ext === 'key') {
-            script = `
-              tell application "Keynote"
-                activate
-                open (POSIX file "${target}")
-                delay 1
-                start (front document)
-              end tell
-            `;
-          } else if (ext === 'pptx' || ext === 'ppt') {
-            script = `
-              tell application "Microsoft PowerPoint"
-                activate
-                open (POSIX file "${target}")
-                delay 1
-                run slide show of active presentation
-              end tell
-            `;
-          }
-
-          if (script) {
-            console.log(`Native: Launching ${ext} via AppleScript for ${target}`);
-            // Write to a temp .scpt file instead of passing via -e flag.
-            // The -e approach breaks on multi-line scripts and paths with spaces or quotes.
-            const tmp_script_path = path.join(os.tmpdir(), `ae_launch_${Date.now()}.scpt`);
-            return new Promise((resolve) => {
-              try {
-                fs.writeFileSync(tmp_script_path, script.trim());
-              } catch (e: any) {
-                resolve({ success: false, error: `Failed to write AppleScript temp file: ${e.message}` });
-                return;
-              }
-              exec(`osascript "${tmp_script_path}"`, (err) => {
-                try { fs.unlinkSync(tmp_script_path); } catch {}
-                if (err) resolve({ success: false, error: err.message });
-                else resolve({ success: true });
-              });
-            });
-          }
-        }
+      if (!fs.existsSync(source)) {
+        return { success: false, error: `File not in cache: ${hash}` };
      }

-      // 4. Default Fallback
-      await shell.openPath(target);
-      return { success: true };
+      if (!fs.existsSync(expanded_temp)) fs.mkdirSync(expanded_temp, { recursive: true });
+
+      // 1. Copy the file to temp folder with original name
+      fs.copyFileSync(source, target);
+
+      // 2a. Data-driven launcher template (no rebuild needed for config changes).
+      //     Svelte resolves a Launch Profile to a single native_template string.
+      //     Format: AppleScript string with {{path}} placeholder, OR "shell:<cmd> {{path}}"
+      if (!native_template) {
+        return { success: false, error: 'No native template configured for this file' };
+      }
+
+      const resolved = native_template.replace(/\{\{path\}\}/g, target);
+      if (resolved.startsWith('shell:')) {
+        const cmd = resolved.slice(6).trim();
+        console.log(`Native: Running custom shell template for ${filename}`);
+        return new Promise((resolve_fn) => {
+          exec(cmd, (err, stdout, stderr) => {
+            if (err) resolve_fn({ success: false, error: err.message, stderr: stderr.trim() });
+            else resolve_fn({ success: true, stdout: stdout.trim() });
+          });
+        });
+      }
+
+      console.log(`Native: Running custom AppleScript template for ${filename}`);
+      const tmp_script_path = path.join(os.tmpdir(), `ae_launch_${Date.now()}.scpt`);
+      return new Promise((resolve_fn) => {
+        try {
+          fs.writeFileSync(tmp_script_path, resolved.trim());
+        } catch (e: any) {
+          resolve_fn({ success: false, error: `Failed to write AppleScript temp file: ${e.message}` });
+          return;
+        }
+        exec(`osascript "${tmp_script_path}"`, (err) => {
+          try { fs.unlinkSync(tmp_script_path); } catch {}
+          if (err) resolve_fn({ success: false, error: err.message });
+          else resolve_fn({ success: true });
+        });
+      });
+
+    } catch (error: any) {
+      return { success: false, error: error.message };
+    }
+  });
+
+  // Thin primitive: copy a cached file to the temp directory with its original filename,
+  // then return the resolved path. The caller (Svelte side) decides what to do next —
+  // run_osascript, run_cmd, open_local_file, etc.
+  //
+  // This is the preferred building block for custom launch flows. Use launch_from_cache
+  // when Svelte has already resolved a native template; use copy_from_cache_to_temp when
+  // you want full control over what happens after the file lands in temp.
+  ipcMain.handle('native:copy-from-cache-to-temp', async (event, { cache_root, hash, temp_root, filename, hash_prefix_length = 2 }) => {
+    try {
+      const source = get_organized_hashed_path(cache_root, hash, hash_prefix_length);
+
+      if (!fs.existsSync(source)) {
+        return { success: false, error: `File not in cache: ${hash}` };
+      }
+
+      const expanded_temp = expandPath(temp_root);
+      const target = path.join(expanded_temp, filename);
+
+      if (!fs.existsSync(expanded_temp)) fs.mkdirSync(expanded_temp, { recursive: true });
+
+      fs.copyFileSync(source, target);
+      console.log(`Native: Copied from cache to temp -> ${target}`);
+
+      return { success: true, path: target };
    } catch (error: any) {
      return { success: false, error: error.message };
    }
--- a/src/main/index.ts
+++ b/src/main/index.ts
@@ -19,8 +19,8 @@ async function createWindow() {
  }

  mainWindow = new BrowserWindow({
-    width: 1600,
-    height: 900,
+    width: 1280,
+    height: 800,
    title: 'OSIT Aether Launcher (Native)',
    webPreferences: {
      preload: path.join(__dirname, '../preload/index.js'),
@@ -29,6 +29,10 @@ async function createWindow() {
    },
  });

+  // Let the native window manager maximize — more reliable than using screen.workArea,
+  // which Electron under-reports on KDE and other Linux DEs.
+  mainWindow.maximize();
+
  let targetUrl = 'http://demo.localhost:5173';
  if (cachedFullConfig && cachedFullConfig.native_device) {
    const device = cachedFullConfig.native_device;
@@ -55,15 +59,28 @@ registerShellHandlers();
 registerFileHandlers();
 registerSystemHandlers();

-app.on('ready', createWindow);
+// Single instance lock — if another instance is already running, focus it and quit.
+const gotTheLock = app.requestSingleInstanceLock();
+if (!gotTheLock) {
+  app.quit();
+} else {
+  app.on('second-instance', () => {
+    if (mainWindow) {
+      if (mainWindow.isMinimized()) mainWindow.restore();
+      mainWindow.focus();
+    }
+  });

-app.on('window-all-closed', () => {
-  if (process.platform !== 'darwin') app.quit();
-});
+  app.on('ready', createWindow);

-app.on('activate', () => {
-  if (mainWindow === null) createWindow();
-});
+  app.on('window-all-closed', () => {
+    if (process.platform !== 'darwin') app.quit();
+  });
+
+  app.on('activate', () => {
+    if (mainWindow === null) createWindow();
+  });
+}

 ipcMain.handle('get-seed-config', async () => cachedSeed || await loadSeedConfig());
 ipcMain.handle('get-device-config', async () => cachedFullConfig);
--- a/src/main/shell_handlers.ts
+++ b/src/main/shell_handlers.ts
@@ -1,6 +1,7 @@
 import { ipcMain, shell } from 'electron';
 import { exec, execSync } from 'child_process';
 import * as fs from 'fs';
+import * as path from 'path';
 import * as os from 'os';
 import { expandPath } from './file_utils';

@@ -32,10 +33,27 @@ export function registerShellHandlers() {

  ipcMain.handle('native:run-osascript', async (event, script: string) => {
    if (os.platform() !== 'darwin') return { success: false, error: 'AppleScript is only available on macOS' };
-    const escapedScript = script.replace(/"/g, '\"');
-    const cmd = `osascript -e "${escapedScript}"`;
+
+    // HARDENED: Write script to a temp .scpt file rather than passing inline via -e.
+    // The old -e approach (`osascript -e "..."`) has two fatal flaws:
+    //   1. It breaks on multi-line scripts.
+    //   2. It breaks on paths containing spaces or special characters (quotes, parens, etc.)
+    // Writing to a file sidesteps both — no shell escaping needed at all.
+    // The .scpt file is deleted immediately after execution (success or failure).
+    // Worst case on crash: a stale .scpt in /tmp, cleared on next OS reboot.
+    //
+    // LEGACY (removed): const cmd = `osascript -e "${script.replace(/"/g, '\\"')}"`;
+
+    const tmp_script_path = path.join(os.tmpdir(), `ae_osa_${Date.now()}.scpt`);
    return new Promise((resolve) => {
-      exec(cmd, (error, stdout, stderr) => {
+      try {
+        fs.writeFileSync(tmp_script_path, script.trim());
+      } catch (e: any) {
+        resolve({ success: false, error: `Failed to write AppleScript temp file: ${e.message}` });
+        return;
+      }
+      exec(`osascript "${tmp_script_path}"`, (error, stdout, stderr) => {
+        try { fs.unlinkSync(tmp_script_path); } catch {}
        resolve({ success: !error, stdout: stdout.trim(), stderr: stderr.trim(), error: error ? error.message : null });
      });
    });
@@ -45,8 +63,8 @@ export function registerShellHandlers() {
    console.log(`Native: Killing processes -> `, process_name_li);
    const results = [];
    for (const name of process_name_li) {
-      const cmd = os.platform() === 'win32' 
-        ? `taskkill /F /IM ${name} /T` 
+      const cmd = os.platform() === 'win32'
+        ? `taskkill /F /IM ${name} /T`
        : `pkill -f ${name}`;
      try {
        execSync(cmd);
@@ -82,28 +100,35 @@ export function registerShellHandlers() {
      let script = '';
      if (appType === 'keynote') {
        script = `
-          tell application "Keynote"
-            activate
-            open (POSIX file "${cleanedPath}")
-            delay 1
-            start (front document)
-          end tell
-        `;
+tell application "Keynote"
+  activate
+  open (POSIX file "${cleanedPath}")
+  delay 1
+  start (front document)
+end tell
+        `.trim();
      } else if (appType === 'powerpoint') {
        script = `
-          tell application "Microsoft PowerPoint"
-            activate
-            open (POSIX file "${cleanedPath}")
-            delay 1
-            run slide show of active presentation
-          end tell
-        `;
+tell application "Microsoft PowerPoint"
+  activate
+  open (POSIX file "${cleanedPath}")
+  delay 1
+  run slide show of active presentation
+end tell
+        `.trim();
      }

      if (script) {
+        const tmp_script_path = path.join(os.tmpdir(), `ae_launch_${Date.now()}.scpt`);
        return new Promise((resolve) => {
-          const escapedScript = script.replace(/"/g, '\\"');
-          exec(`osascript -e "${escapedScript}"`, (err, stdout, stderr) => {
+          try {
+            fs.writeFileSync(tmp_script_path, script);
+          } catch (e: any) {
+            resolve({ success: false, error: `Failed to write AppleScript temp file: ${e.message}` });
+            return;
+          }
+          exec(`osascript "${tmp_script_path}"`, (err) => {
+            try { fs.unlinkSync(tmp_script_path); } catch {}
            if (err) resolve({ success: false, error: err.message });
            else resolve({ success: true });
          });
@@ -117,7 +142,7 @@ export function registerShellHandlers() {

  ipcMain.handle('native:control-presentation', async (event, { app, action }) => {
    if (os.platform() !== 'darwin') return { success: false, error: 'Presentation control is only available on macOS' };
-    
+
    let script = '';
    if (app === 'powerpoint') {
      switch (action) {
@@ -146,65 +171,115 @@ export function registerShellHandlers() {

  ipcMain.handle('native:list-tools', async () => {
    return [
+      // --- Config & Info ---
+      {
+        name: 'get_device_config',
+        description: 'Returns hydrated device config injected at startup from seed.json + API.',
+        params: {}
+      },
+      {
+        name: 'get_device_info',
+        description: 'Returns OS metadata: platform, hostname, IPs, CPU count, free RAM, home/tmp paths.',
+        params: {}
+      },
+      // --- File Cache ---
+      {
+        name: 'check_cache',
+        description: 'Checks if a file exists in the hashed cache. verify_hash:true re-hashes to confirm integrity.',
+        params: { cache_root: 'string', hash: 'string', hash_prefix_length: 'number (optional, default 2)', verify_hash: 'boolean (optional)' }
+      },
+      {
+        name: 'download_to_cache',
+        description: 'Streams a file from the API into the hashed cache with SHA-256 integrity check. Cleans stale .tmp files older than 5 min.',
+        params: { url: 'string', cache_root: 'string', hash: 'string', api_key: 'string', account_id: 'string', hash_prefix_length: 'number (optional, default 2)' }
+      },
+      {
+        name: 'copy_from_cache_to_temp',
+        description: 'Preferred primitive. Copies a cached file to temp with its original filename. Returns { success, path }. Caller decides what to do next.',
+        params: { cache_root: 'string', hash: 'string', temp_root: 'string', filename: 'string', hash_prefix_length: 'number (optional, default 2)' }
+      },
+      {
+        name: 'launch_from_cache',
+        description: 'Combines copy_from_cache_to_temp + execute. Runs native_template after copying — AppleScript string with {{path}} placeholder, or "shell:<cmd>" prefix. Returns error if native_template is null.',
+        params: { cache_root: 'string', hash: 'string', temp_root: 'string', filename: 'string', hash_prefix_length: 'number (optional)', native_template: 'string | null' }
+      },
+      // --- Shell & OS ---
      {
        name: 'open_folder',
-        description: 'Opens a directory in the OS file explorer (Finder/Files/Explorer).',
+        description: 'Opens a directory in the OS file explorer (Finder on macOS).',
        params: { path: 'string' }
      },
      {
        name: 'run_cmd',
-        description: 'Executes an asynchronous shell command with a timeout.',
-        params: { cmd: 'string', timeout: 'number (optional)' }
+        description: 'Async shell command execution with timeout.',
+        params: { cmd: 'string', timeout: 'number (optional, default 30000ms)' }
      },
      {
        name: 'run_cmd_sync',
-        description: 'Executes a synchronous shell command.',
+        description: 'Synchronous shell command execution.',
        params: { cmd: 'string' }
      },
      {
        name: 'run_osascript',
-        description: 'Executes a raw AppleScript string (macOS only).',
+        description: 'Hardened AppleScript executor — writes to temp .scpt file, handles multi-line scripts and paths with special characters. macOS only.',
        params: { script: 'string' }
      },
      {
        name: 'kill_processes',
-        description: 'Forcefully terminates processes by name.',
+        description: 'Terminates processes by name. macOS/Linux: pkill -f. Windows: taskkill /F.',
        params: { process_name_li: 'string[]' }
      },
      {
        name: 'open_local_file_v2',
-        description: 'Opens a local file using the default OS handler.',
-        params: { filePath: 'string' }
+        description: 'Opens a file with its default OS application via shell.openPath.',
+        params: { path: 'string' }
      },
+      {
+        name: 'open_external',
+        description: 'Opens a URL in Chrome, Firefox, or the system default browser.',
+        params: { url: 'string', app: 'chrome | firefox | default (optional)' }
+      },
+      // --- Presentations ---
      {
        name: 'launch_presentation',
-        description: 'Phase 5: Specialized launcher for PowerPoint, Keynote, and LibreOffice with auto-focus.',
-        params: { path: 'string', app: 'default|powerpoint|keynote' }
+        description: 'Platform-aware launcher for PowerPoint, Keynote, LibreOffice. Resolves [home]/[tmp] placeholders. Hardened AppleScript (2026-05-11). Prefer copy_from_cache_to_temp + run_osascript for new flows.',
+        params: { path: 'string', app: 'default | powerpoint | keynote (optional)', os_platform: 'string (optional)' }
      },
      {
        name: 'control_presentation',
-        description: 'Phase 5: Remote navigation for active slideshows.',
-        params: { app: 'powerpoint|keynote', action: 'next|prev|start|stop' }
+        description: 'Slide navigation for active PowerPoint or Keynote via AppleScript. macOS only.',
+        params: { app: 'powerpoint | keynote', action: 'next | prev | start | stop' }
+      },
+      // --- System Management ---
+      {
+        name: 'set_wallpaper',
+        description: 'Sets desktop wallpaper. Downloads from url (cached to ~/Library/Caches/OSIT/wallpaper/) or applies local path. url_external targets projector/second display separately. macOS only in production.',
+        params: { path: 'string (optional)', url: 'string (optional)', url_external: 'string (optional)', display: 'all | primary | external (optional, default all)', api_key: 'string (optional)', account_id: 'string (optional)' }
      },
      {
-        name: 'check_cache',
-        description: 'Checks if a file exists in the local organized cache.',
-        params: { cache_root: 'string', hash: 'string', hash_prefix_length: 'number' }
+        name: 'set_display_layout',
+        description: 'Mirror or extend displays via bundled displayplacer. macOS only. Auto-detects displays when no configStr given; configStr is an optional manual override.',
+        params: { mode: 'mirror | extend', configStr: 'string (optional)' }
      },
      {
-        name: 'download_to_cache',
-        description: 'Downloads a file from the API directly into the native cache.',
-        params: { url: 'string', cache_root: 'string', hash: 'string', api_key: 'string', account_id: 'string' }
+        name: 'window_control',
+        description: 'Electron window management.',
+        params: { action: 'maximize | unmaximize | minimize | restore | close | fullscreen | kiosk | devtools | reload', value: 'boolean (optional, used by fullscreen/kiosk/devtools)' }
      },
      {
-        name: 'launch_from_cache',
-        description: 'Atomic operation: Copies file from cache to temp with original name and launches via specialized handler.',
-        params: { cache_root: 'string', hash: 'string', temp_root: 'string', filename: 'string' }
+        name: 'power_control',
+        description: 'Shutdown, reboot, or sleep the host machine. macOS + Linux. May require sudo for shutdown/reboot.',
+        params: { action: 'shutdown | reboot | sleep' }
      },
      {
-        name: 'get_device_info',
-        description: 'Returns hardware and OS metadata (CPUs, RAM, IP addresses, Hostname).',
-        params: {}
+        name: 'manage_recording',
+        description: 'Screen recording via bundled aperture binary. macOS only.',
+        params: { action: 'start | stop | status', options: '{ fps?, audioDeviceId?, output? } (optional)' }
+      },
+      {
+        name: 'update_app',
+        description: 'STUB: Downloads update package but does not install. Not functional.',
+        params: { source: 'url | file', url: 'string (optional)', path: 'string (optional)' }
      }
    ];
  });
--- a/src/main/system_handlers.ts
+++ b/src/main/system_handlers.ts
@@ -23,7 +23,7 @@ const runExec = (cmd: string): Promise<{ success: boolean; stdout?: string; stde
 let recordingProcess: any = null;

 export function registerSystemHandlers() {
-  
+
  // 1. Window Control
  ipcMain.handle('native:window-control', async (event, { action, value }) => {
    const win = BrowserWindow.fromWebContents(event.sender);
@@ -35,7 +35,7 @@ export function registerSystemHandlers() {
      case 'minimize': win.minimize(); break;
      case 'restore': win.restore(); break;
      case 'close': win.close(); break;
-      case 'devtools': 
+      case 'devtools':
        if (value) win.webContents.openDevTools();
        else win.webContents.closeDevTools();
        break;
@@ -48,18 +48,173 @@ export function registerSystemHandlers() {
  });

  // 2. Set Wallpaper
-  ipcMain.handle('native:set-wallpaper', async (event, { path: imagePath }) => {
-    const cleanPath = expandPath(imagePath);
-    if (!fs.existsSync(cleanPath)) return { success: false, error: 'Image file not found' };
+  // Supports local path OR URL download. URL images are saved to a stable cache dir
+  // so macOS can reference them persistently after reboot.
+  // display: 'all' (default) | 'primary' (built-in) | 'external' (projector/second screen)
+  // url_external: optional second URL for the external display only.
+  ipcMain.handle('native:set-wallpaper', async (event, {
+    path: imagePath,
+    url,
+    url_external,
+    display = 'all',
+    api_key,
+    account_id
+  }: {
+    path?: string;
+    url?: string;
+    url_external?: string;
+    display?: 'all' | 'primary' | 'external';
+    api_key?: string;
+    account_id?: string;
+  }) => {
+    // Cache dir: ~/Library/Caches/OSIT/wallpaper on macOS, ~/.cache/osit/wallpaper on Linux.
+    // Using a stable path means macOS keeps the reference across reboots.
+    const wallpaper_cache_dir = os.platform() === 'darwin'
+      ? path.join(os.homedir(), 'Library', 'Caches', 'OSIT', 'wallpaper')
+      : path.join(os.homedir(), '.cache', 'osit', 'wallpaper');
+
+    async function download_wallpaper_image(image_url: string, basename: string): Promise<{ success: boolean; path?: string; error?: string }> {
+      if (!fs.existsSync(wallpaper_cache_dir)) {
+        fs.mkdirSync(wallpaper_cache_dir, { recursive: true });
+      }
+
+      // Infer extension from URL path, fall back to .jpg
+      let ext = '.jpg';
+      try {
+        const url_path = new URL(image_url).pathname;
+        const inferred = path.extname(url_path).toLowerCase();
+        if (['.jpg', '.jpeg', '.png', '.webp'].includes(inferred)) {
+          ext = inferred === '.jpeg' ? '.jpg' : inferred;
+        }
+      } catch {}
+
+      const dest_path = path.join(wallpaper_cache_dir, basename + ext);
+
+      const headers: Record<string, string> = {};
+      if (api_key) headers['x-aether-api-key'] = api_key;
+      if (account_id) headers['x-account-id'] = account_id;
+
+      try {
+        const response = await axios({ method: 'get', url: image_url, responseType: 'stream', headers });
+        const content_type = (response.headers['content-type'] ?? '') as string;
+        if (!content_type.startsWith('image/')) {
+          response.data.destroy();
+          return { success: false, error: `URL did not return an image (Content-Type: ${content_type})` };
+        }
+
+        const writer = fs.createWriteStream(dest_path);
+        response.data.pipe(writer);
+        await new Promise<void>((resolve, reject) => {
+          writer.on('finish', resolve);
+          writer.on('error', reject);
+        });
+        const file_size = fs.statSync(dest_path).size;
+        if (file_size === 0) {
+          try { fs.unlinkSync(dest_path); } catch {}
+          return { success: false, error: 'Wallpaper download incomplete (0 bytes)' };
+        }
+        return { success: true, path: dest_path };
+      } catch (e: any) {
+        return { success: false, error: `Wallpaper download failed: ${e.message}` };
+      }
+    }
+
+    // HARDENED: write AppleScript to a temp file, same pattern as native:run-osascript.
+    // The old osascript -e approach breaks on paths with spaces or special characters.
+    async function apply_mac_wallpaper(img_path: string, display_target: 'all' | 'primary' | 'external'): Promise<{ success: boolean; stdout?: string; stderr?: string; error?: string }> {
+      const escaped = img_path.replace(/\\/g, '\\\\').replace(/"/g, '\\"');
+      let script: string;
+      if (display_target === 'primary') {
+        script = `tell application "System Events"\n\ttell desktop 1\n\t\tset picture to "${escaped}"\n\tend tell\nend tell`;
+      } else if (display_target === 'external') {
+        script = `tell application "System Events"\n\ttell desktop 2\n\t\tset picture to "${escaped}"\n\tend tell\nend tell`;
+      } else {
+        script = `tell application "System Events"\n\ttell every desktop\n\t\tset picture to "${escaped}"\n\tend tell\nend tell`;
+      }
+
+      const script_path = path.join(os.tmpdir(), `ae_wallpaper_${Date.now()}.scpt`);
+      fs.writeFileSync(script_path, script, 'utf-8');
+      try {
+        return await runExec(`osascript "${script_path}"`);
+      } finally {
+        try { fs.unlinkSync(script_path); } catch {}
+      }
+    }

    if (os.platform() === 'darwin') {
-      const script = `tell application "System Events" to set picture of every desktop to "${cleanPath}"`;
-      return await runExec(`osascript -e '${script}'`);
-    } else if (os.platform() === 'linux') {
-      // Gnome/Ubuntu default
-      return await runExec(`gsettings set org.gnome.desktop.background picture-uri "file://${cleanPath}"`);
+      // Resolve primary image path
+      let primary_path: string | null = null;
+
+      if (imagePath) {
+        const clean = expandPath(imagePath);
+        if (!fs.existsSync(clean)) return { success: false, error: 'Image file not found' };
+        primary_path = clean;
+      } else if (url) {
+        const result = await download_wallpaper_image(url, 'wallpaper_primary');
+        if (!result.success || !result.path) return { success: false, error: result.error };
+        primary_path = result.path;
+      }
+
+      if (!primary_path && url_external && display === 'external') {
+        const ext_result = await download_wallpaper_image(url_external, 'wallpaper_external');
+        if (!ext_result.success || !ext_result.path) return { success: false, error: ext_result.error };
+        return await apply_mac_wallpaper(ext_result.path, 'external');
+      }
+
+      if (!primary_path) return { success: false, error: 'No image source provided' };
+
+      if (url_external) {
+        // Different images for each display: set primary display first, then external
+        const primary_result = await apply_mac_wallpaper(primary_path, 'primary');
+        if (!primary_result.success) return primary_result;
+
+        const ext_result = await download_wallpaper_image(url_external, 'wallpaper_external');
+        if (!ext_result.success || !ext_result.path) return { success: false, error: ext_result.error };
+        return await apply_mac_wallpaper(ext_result.path, 'external');
+      } else {
+        return await apply_mac_wallpaper(primary_path, display);
+      }
    }
-    
+
+    if (os.platform() === 'linux') {
+      // Dev test mode: never touch the desktop on Linux. Running gsettings during
+      // development would reset the dev workstation monitors on every test cycle.
+      // Return what would have run so the Svelte side can show a debug popup.
+      const would_run: string[] = [];
+      const cache_dir = wallpaper_cache_dir;
+
+      if (!imagePath && !url && !url_external) {
+        return { success: false, error: 'No image source provided' };
+      }
+
+      if (imagePath) {
+        const clean = expandPath(imagePath);
+        if (!fs.existsSync(clean)) return { success: false, error: 'Image file not found' };
+      }
+
+      if (url) would_run.push(`download: ${url}\n  → ${path.join(cache_dir, 'wallpaper_primary.jpg')}`);
+      if (url_external) would_run.push(`download: ${url_external}\n  → ${path.join(cache_dir, 'wallpaper_external.jpg')}`);
+
+      if (imagePath) {
+        would_run.push(`gsettings set org.gnome.desktop.background picture-uri "file://${expandPath(imagePath)}"`);
+      } else if (url) {
+        would_run.push(`gsettings set org.gnome.desktop.background picture-uri "file://${path.join(cache_dir, 'wallpaper_primary.jpg')}"`);
+      }
+      if (url_external) {
+        would_run.push(`(external display: gsettings has no per-display wallpaper support)`);
+      }
+
+      return {
+        success: true,
+        linux_test_mode: true,
+        platform: 'linux',
+        display,
+        url: url ?? null,
+        url_external: url_external ?? null,
+        would_run
+      };
+    }
+
    return { success: false, error: 'Platform not supported' };
  });

@@ -81,8 +236,8 @@ export function registerSystemHandlers() {
    }

    if (!cmd) return { success: false, error: 'Action not supported' };
-    
-    // NOTE: These commands often require root. 
+
+    // NOTE: These commands often require root.
    // For a kiosk, you might configure sudoers to allow this specific command without password.
    return await runExec(cmd);
  });
@@ -102,7 +257,7 @@ export function registerSystemHandlers() {
            return await runExec(`firefox "${url}"`);
        }
    }
-    
+
    // Default system handler
    await shell.openExternal(url);
    return { success: true };
@@ -111,30 +266,30 @@ export function registerSystemHandlers() {
  // 5. Manage Recording (Aperture Wrapper)
  ipcMain.handle('native:manage-recording', async (event, { action, options }) => {
    if (os.platform() !== 'darwin') return { success: false, error: 'Recording only supported on macOS' };
-    
+
    // Path to bundled aperture binary
    // In dev: ./resources/bin/aperture
    // In prod: process.resourcesPath/bin/aperture
-    const binPath = app.isPackaged 
+    const binPath = app.isPackaged
      ? path.join(process.resourcesPath, 'bin', 'aperture')
      : path.join(__dirname, '../../resources/bin/aperture'); // Adjust based on structure

    if (action === 'start') {
      if (recordingProcess) return { success: false, error: 'Recording already in progress' };
-      
+
      const { fps = 30, audioDeviceId, output } = options || {};
      const cleanOutput = expandPath(output || '~/tmp/recording.mp4');
-      
+
      const args = ['run', '--fps', fps, '--output', cleanOutput];
      if (audioDeviceId) args.push('--audio-device-id', audioDeviceId);
-      
+
      // Spawn process
      // Note: aperture is a CLI tool. We might need 'aperture' node package or the binary.
      // Assuming binary usage here.
      try {
        console.log(`Starting recording: ${binPath} ${args.join(' ')}`);
        recordingProcess = spawn(binPath, args);
-        
+
        recordingProcess.on('error', (err: any) => {
            console.error('Recording error:', err);
            recordingProcess = null;
@@ -152,7 +307,7 @@ export function registerSystemHandlers() {

    } else if (action === 'stop') {
      if (!recordingProcess) return { success: false, error: 'No recording in progress' };
-      
+
      recordingProcess.kill('SIGINT'); // Send interrupt to stop cleanly
      recordingProcess = null;
      return { success: true };
@@ -163,35 +318,156 @@ export function registerSystemHandlers() {
    return { success: false, error: 'Unknown action' };
  });

-  // 6. Set Display Layout (Displayplacer)
+  // 6. Set Display Layout
+  // Primary path: display_control (native CoreGraphics, no external deps).
+  //   Build from scripts/display_control.m via scripts/build-display-control.sh on a Mac.
+  //   Commit the resulting resources/bin/display_control binary to the repo.
+  // Fallback: displayplacer (requires: brew install displayplacer on each venue Mac).
+  //   Also supports per-device configStr override (displayplacer format).
  ipcMain.handle('native:set-display-layout', async (event, { mode, configStr }) => {
    if (os.platform() !== 'darwin') return { success: false, error: 'Display control only supported on macOS' };
-    
-    const binPath = app.isPackaged 
-      ? path.join(process.resourcesPath, 'bin', 'displayplacer')
-      : path.join(__dirname, '../../resources/bin/displayplacer');

-    let cmd = '';
-    
+    // Primary: display_control — native CoreGraphics, no Homebrew dependency.
+    // Derived from OSIT MasterKey app (LegacyUtilities.m). No configStr support needed —
+    // CoreGraphics auto-detects all connected displays.
+    const dc_bin = app.isPackaged
+      ? path.join(process.resourcesPath, 'bin', 'display_control')
+      : path.join(__dirname, '../../resources/bin/display_control');
+
+    if (fs.existsSync(dc_bin) && !configStr) {
+      if (mode !== 'mirror' && mode !== 'extend') {
+        return { success: false, error: `Unsupported display mode: ${mode}` };
+      }
+      return await runExec(`"${dc_bin}" ${mode}`);
+    }
+
+    // Fallback: displayplacer — required when display_control binary is not built yet,
+    // or when a per-device configStr override is set (displayplacer-format string from event_device.data_json).
+    // Install: brew install displayplacer
+    const _dp_candidates = app.isPackaged
+      ? [path.join(process.resourcesPath, 'bin', 'displayplacer')]
+      : [
+          path.join(__dirname, '../../resources/bin/displayplacer'),
+          '/opt/homebrew/bin/displayplacer',   // Apple Silicon Homebrew
+          '/usr/local/bin/displayplacer',       // Intel Homebrew
+        ];
+    const dpPath = _dp_candidates.find(p => fs.existsSync(p)) ?? _dp_candidates[0];
+
+    // Explicit configStr takes priority — allows manual per-device override.
+    if (configStr) {
+      return await runExec(`"${dpPath}" ${configStr}`);
+    }
+
+    // Auto-detect via `displayplacer list`.
+    const list_result = await runExec(`"${dpPath}" list`);
+    if (!list_result.success || !list_result.stdout) {
+      return { success: false, error: `displayplacer not available. Build display_control from scripts/build-display-control.sh or run: brew install displayplacer` };
+    }
+
+    // The command line looks like: displayplacer "id:xxx res:... origin:(0,0) ..." "id:yyy ..."
+    const cmd_line = list_result.stdout.split('\n').find(l => l.trim().startsWith('displayplacer "'));
+    if (!cmd_line) {
+      return { success: false, error: 'Only one display connected or displayplacer list output unrecognised' };
+    }
+
+    const display_strings = [...cmd_line.matchAll(/"([^"]+)"/g)].map(m => m[1]);
+    if (display_strings.length < 2) {
+      return { success: false, error: 'Only one display found; cannot change layout' };
+    }
+
    if (mode === 'mirror') {
-        // This usually requires querying current IDs, which is complex.
-        // If configStr is provided (output of 'displayplacer list'), use it.
-        if (configStr) {
-            cmd = `"${binPath}" ${configStr}`;
-        } else {
-             return { success: false, error: 'Config string required for now' };
-        }
-    } else if (mode === 'extend') {
-        if (configStr) {
-            cmd = `"${binPath}" ${configStr}`;
-        }
+      const primary_id_match = display_strings[0].match(/\bid:([^\s]+)/);
+      if (!primary_id_match) {
+        return { success: false, error: 'Could not parse primary display ID from displayplacer output' };
+      }
+      const primary_id = primary_id_match[1];
+
+      const mirror_args = display_strings.map((s, i) => {
+        if (i === 0) return `"${s}"`;
+        const without_existing_mirror = s.replace(/\s*mirror_of_display:\S+/g, '').trim();
+        return `"${without_existing_mirror} mirror_of_display:${primary_id}"`;
+      }).join(' ');
+
+      return await runExec(`"${dpPath}" ${mirror_args}`);
    }

-    if (cmd) {
-        return await runExec(cmd);
+    if (mode === 'extend') {
+      const any_mirrored = display_strings.some(s => /\bmirror_of_display:\S+/.test(s));
+      if (!any_mirrored) {
+        return await runExec(`"${dpPath}" ${display_strings.map(s => `"${s}"`).join(' ')}`);
+      }
+
+      let x_offset = 0;
+      const extend_args = display_strings.map((s) => {
+        const without_mirror = s.replace(/\s*mirror_of_display:\S+/g, '').trim();
+        const res_match = without_mirror.match(/\bres:(\d+)x\d+/);
+        const width = res_match ? parseInt(res_match[1]) : 1920;
+        const updated = without_mirror.replace(/\borigin:\([^)]+\)/, `origin:(${x_offset},0)`);
+        x_offset += width;
+        return `"${updated}"`;
+      }).join(' ');
+
+      return await runExec(`"${dpPath}" ${extend_args}`);
    }
-    
-    return { success: false, error: 'Invalid mode or missing config' };
+
+    return { success: false, error: `Unsupported display mode: ${mode}` };
+  });
+
+  // 6b. List Display Modes
+  ipcMain.handle('native:list-display-modes', async () => {
+    if (os.platform() !== 'darwin') return { success: false, error: 'Display control only supported on macOS' };
+
+    const dc_bin = app.isPackaged
+      ? path.join(process.resourcesPath, 'bin', 'display_control')
+      : path.join(__dirname, '../../resources/bin/display_control');
+
+    if (!fs.existsSync(dc_bin)) {
+      return { success: false, error: 'display_control binary not found. Build via scripts/build-display-control.sh.' };
+    }
+
+    const result = await runExec(`"${dc_bin}" list-modes`);
+    if (!result.success || !result.stdout) {
+      return { success: false, error: result.error ?? 'list-modes returned no output' };
+    }
+
+    try {
+      const displays = JSON.parse(result.stdout);
+      return { success: true, displays };
+    } catch (e: any) {
+      return { success: false, error: `Failed to parse list-modes output: ${e.message}`, raw: result.stdout };
+    }
+  });
+
+  // 6c. Set Display Mode
+  ipcMain.handle('native:set-display-mode', async (event, {
+    display_index,
+    width,
+    height,
+    refresh_rate,
+    hidpi
+  }: {
+    display_index: number;
+    width: number;
+    height: number;
+    refresh_rate?: number;
+    hidpi?: boolean | null;
+  }) => {
+    if (os.platform() !== 'darwin') return { success: false, error: 'Display control only supported on macOS' };
+
+    const dc_bin = app.isPackaged
+      ? path.join(process.resourcesPath, 'bin', 'display_control')
+      : path.join(__dirname, '../../resources/bin/display_control');
+
+    if (!fs.existsSync(dc_bin)) {
+      return { success: false, error: 'display_control binary not found. Build via scripts/build-display-control.sh.' };
+    }
+
+    let cmd = `"${dc_bin}" set-mode ${display_index} ${width} ${height}`;
+    if (refresh_rate) cmd += ` --refresh ${refresh_rate}`;
+    if (hidpi === true)  cmd += ' --hidpi';
+    if (hidpi === false) cmd += ' --no-hidpi';
+
+    return await runExec(cmd);
  });

  // 7. Update App
@@ -210,10 +486,10 @@ export function registerSystemHandlers() {
                url: url,
                responseType: 'stream'
            });
-            
+
            const writer = fs.createWriteStream(destPath);
            response.data.pipe(writer);
-            
+
            await new Promise((resolve, reject) => {
                writer.on('finish', () => resolve(true));
                writer.on('error', reject);
@@ -237,9 +513,9 @@ export function registerSystemHandlers() {
    // Real implementation depends on OS and packaging format.
    // macOS: Mount DMG, copy .app to /Applications? Or Unzip .app?
    // Linux: chmod +x AppImage and move?
-    
+
    console.log(`Ready to install update from: ${updateFile}`);
-    
+
    // For now, just return success so the UI knows we "downloaded" it.
    return { success: true, message: 'Update downloaded/located. Installation logic requires packaging specifics.', downloadedPath: updateFile };
  });
--- a/src/preload/index.ts
+++ b/src/preload/index.ts
@@ -5,7 +5,7 @@ contextBridge.exposeInMainWorld('aetherNative', {
  get_device_config: () => ipcRenderer.invoke('get-device-config'),
  get_jwt: () => ipcRenderer.invoke('get-jwt'),
  get_device_info: () => ipcRenderer.invoke('get-device-info'),
-  
+
  open_folder: (path: string) => ipcRenderer.invoke('native:open-folder', path),
  run_cmd: (args: any) => ipcRenderer.invoke('native:run-cmd', args),
  run_cmd_sync: (args: any) => ipcRenderer.invoke('native:run-cmd-sync', args),
@@ -15,6 +15,7 @@ contextBridge.exposeInMainWorld('aetherNative', {

  check_cache: (args: any) => ipcRenderer.invoke('native:check-cache', args),
  download_to_cache: (args: any) => ipcRenderer.invoke('native:download-to-cache', args),
+  copy_from_cache_to_temp: (args: any) => ipcRenderer.invoke('native:copy-from-cache-to-temp', args),
  launch_from_cache: (args: any) => ipcRenderer.invoke('native:launch-from-cache', args),
  launch_presentation: (args: any) => ipcRenderer.invoke('native:launch-presentation', args),
  control_presentation: (args: any) => ipcRenderer.invoke('native:control-presentation', args),
@@ -26,6 +27,8 @@ contextBridge.exposeInMainWorld('aetherNative', {
  window_control: (args: any) => ipcRenderer.invoke('native:window-control', args),
  manage_recording: (args: any) => ipcRenderer.invoke('native:manage-recording', args),
  set_display_layout: (args: any) => ipcRenderer.invoke('native:set-display-layout', args),
+  list_display_modes: () => ipcRenderer.invoke('native:list-display-modes'),
+  set_display_mode: (args: any) => ipcRenderer.invoke('native:set-display-mode', args),
  power_control: (args: any) => ipcRenderer.invoke('native:power-control', args),
  open_external: (args: any) => ipcRenderer.invoke('native:open-external', args),
 });
--- a/src/shared/types.ts
+++ b/src/shared/types.ts
@@ -1,3 +1,26 @@
+export interface DisplayMode {
+  index: number;
+  width: number;
+  height: number;
+  refresh: number;
+  pixel_width: number;
+  pixel_height: number;
+  hidpi: boolean;
+  is_current: boolean;
+}
+
+export interface DisplayInfo {
+  index: number;
+  id: number;
+  is_main: boolean;
+  current_width: number;
+  current_height: number;
+  current_refresh: number;
+  current_pixel_width: number;
+  current_pixel_height: number;
+  modes: DisplayMode[];
+}
+
 export interface SeedConfig {
  event_device_id: string;
  primary_api_base_url: string;
@@ -11,7 +34,7 @@ export interface AetherNativeBridge {
  get_device_config: () => Promise<any>;
  get_jwt: () => Promise<string | null>;
  get_device_info: () => Promise<any>;
-  
+
  // Shell Handlers
  open_folder: (path: string) => Promise<{success: boolean, error?: string}>;
  run_cmd: (args: {cmd: string, timeout?: number}) => Promise<{success: boolean, stdout: string, stderr: string, error?: string}>;
@@ -23,12 +46,24 @@ export interface AetherNativeBridge {
  // File/Cache Handlers
  check_cache: (args: {cache_root: string, hash: string, hash_prefix_length?: number}) => Promise<boolean>;
  download_to_cache: (args: {url: string, cache_root: string, hash: string, api_key: string, account_id?: string, hash_prefix_length?: number}) => Promise<{success: boolean, error?: string}>;
-  launch_from_cache: (args: {cache_root: string, hash: string, temp_root: string, filename: string, hash_prefix_length?: number}) => Promise<{success: boolean, error?: string}>;
-  
+  copy_from_cache_to_temp: (args: {cache_root: string, hash: string, temp_root: string, filename: string, hash_prefix_length?: number}) => Promise<{success: boolean, path?: string, error?: string}>;
+  launch_from_cache: (args: {cache_root: string, hash: string, temp_root: string, filename: string, hash_prefix_length?: number, native_template?: string}) => Promise<{success: boolean, error?: string}>;
+
  // Specialized Presentation Handlers (Phase 5)
  launch_presentation: (args: {path: string, app?: string}) => Promise<{success: boolean, error?: string, stdout?: string, stderr?: string}>;
  control_presentation: (args: {app: 'powerpoint' | 'keynote', action: 'next' | 'prev' | 'start' | 'stop'}) => Promise<{success: boolean, error?: string, stdout?: string, stderr?: string}>;
-  
+
+  // System Handlers (Phase 5)
+  window_control: (args: {action: 'maximize' | 'unmaximize' | 'minimize' | 'restore' | 'close' | 'devtools' | 'kiosk' | 'fullscreen' | 'reload', value?: boolean}) => Promise<{success: boolean, error?: string}>;
+  set_wallpaper: (args: {path: string}) => Promise<{success: boolean, error?: string, stdout?: string, stderr?: string}>;
+  power_control: (args: {action: 'shutdown' | 'reboot' | 'sleep'}) => Promise<{success: boolean, error?: string}>;
+  open_external: (args: {url: string, app?: 'chrome' | 'firefox'}) => Promise<{success: boolean, error?: string}>;
+  manage_recording: (args: {action: 'start' | 'stop' | 'status', options?: {fps?: number, audioDeviceId?: string, output?: string}}) => Promise<{success: boolean, isRecording?: boolean, pid?: number, error?: string}>;
+  set_display_layout: (args: {mode: 'mirror' | 'extend', configStr?: string | null}) => Promise<{success: boolean, error?: string, stdout?: string, stderr?: string}>;
+  list_display_modes: () => Promise<{success: boolean, displays?: DisplayInfo[], error?: string, raw?: string}>;
+  set_display_mode: (args: {display_index: number, width: number, height: number, refresh_rate?: number, hidpi?: boolean | null}) => Promise<{success: boolean, stdout?: string, stderr?: string, error?: string}>;
+  update_app: (args: {source: 'url' | 'file', url?: string, path?: string}) => Promise<{success: boolean, message?: string, downloadedPath?: string, error?: string}>;
+
  // Self-Documentation
  list_tools: () => Promise<Array<{name: string, description: string, params: object}>>;
 }
--- a/tests/test_device_lookup.py
+++ b/tests/test_device_lookup.py
@@ -1,55 +1,90 @@
 import requests
 import json

-def test_device_lookup():
-    device_id = 'dbgMWS3KEHE'
-    api_key = 'INSdG85ANwsEIru3nUttMw'
-    base_url = 'https://dev-api.oneskyit.com'
-    endpoint = f'{base_url}/v3/crud/event_device/{device_id}'
-    
-    headers = {
+def test_bootstrap(device_id, api_key, base_url='https://dev-api.oneskyit.com'):
+    """
+    Replicates the two-step bootstrap sequence in api_client.ts:
+      Step 1: GET event_device  →  extract account_id + app_base_url (fqdn)
+      Step 2: POST site_domain/search  →  returns the correct site context
+    """
+    print(f'\n=== Bootstrap test ===')
+    print(f'Device:   {device_id}')
+    print(f'Base URL: {base_url}')
+
+    # --- Step 1: Get Device Config ---
+    device_url = f'{base_url}/v3/crud/event_device/{device_id}'
+    headers_step1 = {
+        'Content-Type': 'application/json',
        'x-aether-api-key': api_key,
-        'x-no-account-id': 'Nothing to See Here',
-        'Content-Type': 'application/json'
-    }
-    
-    params = {
-        'view': 'enriched'
+        'x-no-account-id': 'bypass',
    }

-    print(f'Testing lookup for device: {device_id}')
-    print(f'Endpoint: {endpoint}')
-    
+    print(f'\n-- Step 1: GET {device_url}')
    try:
-        response = requests.get(endpoint, headers=headers, params=params)
-        print(f'Status Code: {response.status_code}')
-        
-        if response.status_code == 200:
-            data = response.json()
-            device_data = data.get('data', {})
-            
-            print('Returned Fields (Key Values):')
-            important_fields = [
-                'account_id_random',
-                'app_base_url',
-                'code',
-                'name',
-                'event_id_random',
-                'event_location_id_random',
-                'local_file_cache_path',
-                'host_file_temp_path',
-                'recording_path',
-                'cfg_json'
-            ]
-            
-            for field in important_fields:
-                val = device_data.get(field, 'MISSING')
-                print(f'  {field}: {val}')
-        else:
-            print(f'Error Response: {response.text}')
-            
+        r1 = requests.get(device_url, headers=headers_step1)
+        print(f'   Status: {r1.status_code}')
+        if r1.status_code != 200:
+            print(f'   Error: {r1.text}')
+            return
+
+        device_data = r1.json().get('data', {})
+        important_fields = [
+            'account_id', 'app_base_url', 'code', 'name',
+            'event_id', 'event_location_id',
+            'local_file_cache_path', 'host_file_temp_path', 'recording_path',
+        ]
+        for field in important_fields:
+            print(f'   {field}: {device_data.get(field, "MISSING")}')
+
+        account_id = device_data.get('account_id') or device_data.get('account_id_random')
+        fqdn = device_data.get('app_base_url', 'native-demo.oneskyit.com')
+
    except Exception as e:
-        print(f'Request failed: {e}')
+        print(f'   Request failed: {e}')
+        return
+
+    # --- Step 2: Get Site Context ---
+    search_url = f'{base_url}/v3/crud/site_domain/search?limit=1'
+    headers_step2 = {
+        'Content-Type': 'application/json',
+        'x-aether-api-key': api_key,
+        'x-account-id': account_id or '',
+    }
+    body = {
+        'and': [{'field': 'fqdn', 'op': 'eq', 'value': fqdn}]
+    }
+
+    print(f'\n-- Step 2: POST {search_url}')
+    print(f'   Searching for fqdn: {fqdn}')
+    try:
+        r2 = requests.post(search_url, headers=headers_step2, json=body)
+        print(f'   Status: {r2.status_code}')
+        if r2.status_code != 200:
+            print(f'   Error: {r2.text}')
+            return
+
+        results = r2.json().get('data', [])
+        print(f'   Results returned: {len(results)}')
+        if results:
+            sd = results[0]
+            print(f'   fqdn:       {sd.get("fqdn")}')
+            print(f'   account_id: {sd.get("account_id")}')
+            print(f'   site_id:    {sd.get("site_id")}')
+            if sd.get('account_id') != account_id:
+                print(f'   WARNING: site_domain account_id does not match device account_id!')
+            else:
+                print(f'   OK: account_id matches device.')
+        else:
+            print(f'   WARNING: No site_domain found for fqdn "{fqdn}"')
+
+    except Exception as e:
+        print(f'   Request failed: {e}')
+

 if __name__ == '__main__':
-    test_device_lookup()
+    # Dev device (dev-api)
+    test_bootstrap(
+        device_id='dbgMWS3KEHE',
+        api_key='INSdG85ANwsEIru3nUttMw',
+        base_url='https://dev-api.oneskyit.com',
+    )
Author	SHA1	Message	Date
Scott Idem	99e0ebb7c3	docs: update TODO_AGENTS — current display_control status + future ideas section	2026-05-20 18:43:14 -04:00
Scott Idem	51db51d991	docs/build: update README + compiled dist for list-modes/set-mode features README: - set_display_layout: note idempotent behavior (no flicker if already in state) - add list_display_modes and set_display_mode rows to bridge table - add list-modes and set-mode to Option B test commands dist/: compiled output from tsc (system_handlers, preload, index)	2026-05-20 18:27:58 -04:00
Scott Idem	6cddd69891	fix(display): skip mirror/extend if already in requested state mirror_displays() now checks CGDisplayMirrorsDisplay() for each secondary before calling CGBeginDisplayConfiguration — avoids a needless display reconfiguration (and potential flicker) when already mirrored. extend_displays() already had this check; no change needed there.	2026-05-20 18:24:33 -04:00
Scott Idem	58060aea8a	build: rebuild display_control binary (list-modes + set-mode)	2026-05-20 18:17:17 -04:00
Scott Idem	54308c6d4a	feat(display): add list-modes and set-mode commands display_control.m: list-modes — JSON array of all online displays with every usable mode (width, height, refresh, pixel_width, pixel_height, hidpi, is_current) set-mode <display_index> <width> <height> [--refresh <hz>] [--hidpi] [--no-hidpi] — picks best matching CGDisplayMode; auto-prefers HiDPI on built-in and non-HiDPI on externals; highest refresh wins on ties system_handlers.ts: native:list-display-modes — runs binary, parses JSON, returns displays[] native:set-display-mode — runs binary with supplied args preload/index.ts + shared/types.ts: list_display_modes() / set_display_mode() exposed through bridge with full types	2026-05-20 18:16:43 -04:00
Scott Idem	b2cd0736df	fix: use window.maximize() instead of explicit workArea dimensions Electron screen.workArea is unreliable on KDE — returns full bounds, causing the window to extend behind the taskbar. Delegating to the native WM via mainWindow.maximize() works correctly on KDE, macOS, and Linux.	2026-05-20 18:14:26 -04:00
Scott Idem	a230ff09de	fix: use workArea instead of bounds for initial window size Respects taskbar on Linux (KDE etc.) and menu bar on macOS. bounds caused the window to extend behind the taskbar on KDE. workArea gives {x, y, width, height} of the usable screen region.	2026-05-20 17:54:05 -04:00
Scott Idem	7199d45719	feat: single instance lock; auto-size window to primary display bounds - requestSingleInstanceLock(): second launch focuses existing window and quits. - Window width/height/x/y set from screen.getPrimaryDisplay().bounds so the app fills the built-in display exactly on launch, regardless of resolution.	2026-05-20 17:48:09 -04:00
Scott Idem	48e24af84e	build: recompile dist after display_control fail-fast fix	2026-05-20 17:45:01 -04:00
Scott Idem	cd1cd02bc2	build: commit display_control universal binary; fix packaging to extract to Resources/bin - resources/bin/display_control: universal Mach-O (x86_64 + arm64), built via scripts/remote-build-display-control.sh on laptop 01. - package:mac: add --extra-resource=resources/bin so the binary lands at [AppName].app/Contents/Resources/bin/ (outside app.asar) and is executable at runtime via process.resourcesPath.	2026-05-20 17:32:08 -04:00
Scott Idem	0ae0d644a9	build: add display_control binary (universal x86_64+arm64)	2026-05-20 17:28:39 -04:00
Scott Idem	ce2832a584	fix(build): replace scp with ssh+cat to handle space in username scp's own user@host:path parser splits on the space in 'speaker ready' even when the shell argument is quoted. ssh already handles it correctly. Upload: ssh cat < file; Download: ssh cat > file.	2026-05-20 17:22:34 -04:00
Scott Idem	b6b902ad4a	feat(build): add remote-build-display-control.sh for workstation → Mac builds Copies display_control.m to laptop 01 via SSH, compiles universal binary (x86_64 + arm64) on the remote Mac, pulls binary back to resources/bin/. Defaults to 192.168.32.101; accepts optional IP override as $1. README: restructure display_control build section — Option A (remote from workstation, preferred) and Option B (direct on Mac).	2026-05-20 17:16:25 -04:00
Scott Idem	3da3b187ec	build(display): universal binary — compile x86_64 + arm64 and lipo into fat binary Compiles both arches separately then links with lipo -create. Prevents silent failure when a binary built on Apple Silicon is deployed to Intel venue Macs (MacBook Air 2018 fleet).	2026-05-20 17:10:56 -04:00
Scott Idem	86ea73bfbd	fix(display): fail fast on invalid mode in display_control path; update docs - Primary display_control path now validates mode explicitly ('mirror'\|'extend') and returns an error instead of silently defaulting to extend. Passes mode directly to binary (simpler, avoids redundant ternary). - README: update set_display_layout bridge table row to correctly describe display_control as primary and displayplacer as fallback. - README: add one-time 'Build display_control Binary' section in Development with xcode-select, build, test, and git commit steps.	2026-05-20 17:04:39 -04:00
Scott Idem	a14c7c7a3f	feat(display): add display_control CoreGraphics binary, replace displayplacer as primary path Derived from OSIT MasterKey app (LegacyUtilities.m, Ian Kohl 2019). Uses CGConfigureDisplayMirrorOfDisplay — native macOS API, no Homebrew dependency. Handler now tries display_control first; falls back to displayplacer for missing binary or per-device configStr overrides. Build the binary via scripts/build-display-control.sh on a Mac (requires Xcode CLT only), then commit resources/bin/display_control. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-20 16:48:19 -04:00
Scott Idem	9df9d884e5	fix(display): fix mirror_of_display syntax, add Homebrew fallback, update docs - `mirror:` was wrong; correct displayplacer param is `mirror_of_display:<uuid>` - Same fix applied to the strip regex (extend path) and mirror detection check - Binary lookup now tries resources/bin → /opt/homebrew/bin → /usr/local/bin so dev/venue Macs with `brew install displayplacer` work without bundling - Updated TODO_AGENTS.md: marks auto-detection complete, documents one-time brew install step, bundling path, and optional per-device configStr override Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-20 16:33:25 -04:00
Scott Idem	2bf4d7c141	New build for Mac	2026-05-20 15:52:35 -04:00
Scott Idem	e37fd1ddbb	docs: sync README and list_tools() to current handler reality README: correct set_display_layout (auto-detection default, configStr optional); update set_wallpaper signature ({path?,url?,url_external?,display?,api_key?, account_id?}); remove stale note on launch_presentation -e flag (hardened 2026-05-11). list_tools(): expand from 13 entries to 22 — adds copy_from_cache_to_temp, set_wallpaper, set_display_layout, window_control, power_control, manage_recording, update_app, open_external, get_device_config; updates launch_from_cache params (adds native_template); adds category comments; improves all descriptions to reflect current behavior. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-20 15:39:27 -04:00
Scott Idem	a1e74829e8	fix(display): auto-detect displays for mirror/extend via displayplacer list The handler was a stub that required an explicit configStr — the Svelte caller never provides one, so mirror/extend silently failed every launch. Now auto-detects connected displays: - mirror: parses displayplacer list output, adds mirror:<primary_id> to secondary display(s); removes any existing mirror key first. - extend: re-applies current layout if already extended; otherwise strips mirror keys and computes side-by-side origins from each display's width. - configStr still takes priority when provided (manual per-device override). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-20 15:23:01 -04:00
Scott Idem	2c7b609295	Updated dist files	2026-05-13 19:09:09 -04:00
Scott Idem	1008a55ec3	Adjust Linux wallpaper test mode	2026-05-13 18:57:27 -04:00
Scott Idem	c8fdb8b1e7	Harden wallpaper downloads	2026-05-13 18:43:58 -04:00
Scott Idem	bb51771dc7	Expand wallpaper handling	2026-05-13 18:08:49 -04:00
Scott Idem	53d200f10e	Version bump because things are in a good state.	2026-05-13 17:31:16 -04:00
Scott Idem	7693b12aeb	Clarify native template bridge contract	2026-05-13 11:44:36 -04:00
Scott Idem	72d928f907	Rename launch payload to native_template	2026-05-13 11:28:09 -04:00
Scott Idem	9b98b454fd	Align launcher terminology docs	2026-05-13 11:25:55 -04:00
Scott Idem	ec29a576d5	feat(deploy): add --fix-accessibility flag + document TCC requirement macOS invalidates Accessibility permission whenever the app binary changes (code signature shifts on each build). New --fix-accessibility flag runs tccutil reset + a sudo sqlite3 TCC grant via SSH after the .app is synced. Falls back gracefully if sqlite3 grant fails (SIP or missing sudoers), logging a warning with a pointer to the manual steps. README documents the symptom, manual fix, sudoers one-time setup, and bundle ID (com.electron.aetherlauncher). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-12 14:09:34 -04:00
Scott Idem	1f90c819a0	docs(bridge): update types + docs for set_display_layout configStr - Add set_display_layout (+ other missing system handler methods) to AetherNativeBridge interface in types.ts - README: clarify configStr source (event_device.data_json) and no-op behaviour when absent - TODO_AGENTS: correct 7z→bsdtar throughout; mark Electron-side set_display_layout items done; remove completed bsdtar doc item Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-12 13:36:38 -04:00
Scott Idem	9f76d6b7f4	Noting the warning about icons missing	2026-05-11 17:24:50 -04:00
Scott Idem	ca4fddd57f	fix(bridge): expose copy_from_cache_to_temp + harden launch_presentation copy_from_cache_to_temp IPC handler was registered in file_handlers.ts but never added to the preload bridge, making it unreachable from Svelte despite being the documented preferred primitive for custom launch flows. launch_presentation was the last handler still using osascript -e with inline path injection. Converted to the temp-.scpt-file approach already used by run_osascript and launch_from_cache — prevents breakage on presentation filenames with spaces, quotes, or parentheses. Also adds a pre-copy existence check to launch_from_cache so a missing cache entry returns a meaningful error instead of a raw ENOENT. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-11 17:15:36 -04:00
Scott Idem	c5a368aee5	chore: ignore builds.tar.gz	2026-05-11 17:07:22 -04:00
Scott Idem	b8199375a9	chore: ignore .playwright-mcp session artifacts	2026-05-11 16:59:47 -04:00
Scott Idem	bab08cd8a7	fix(packaging): workaround yauzl/Node 26 hang + fix API bootstrap contract Packaging was silently hanging forever because yauzl 2.10.0 read streams emit no data events under Node 26, causing extract-zip to block indefinitely inside @electron/packager 20. Fix: postinstall script patches @electron/packager/dist/unzip.js to use bsdtar (libarchive) instead. bsdtar was chosen over 7z because 7z refuses chained symlinks in macOS .app framework bundles. Both package:linux and package:mac now produce correct output. Also corrects the V3 API bootstrap contract in api_client.ts: - SearchQuery body was wrapped in an extra {search_query: ...} layer — removed - x-no-account-id header standardised to 'bypass' - Redundant x-no-account-id removed from file download headers - Smoke test rewritten to validate the real two-step bootstrap path Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-11 16:48:15 -04:00
Scott Idem	36aed19169	feat(launcher): thin primitive architecture + run_osascript hardening - file_handlers: add script_template param to native:launch-from-cache (AppleScript or shell: prefix; falls back to hardcoded defaults when null) - file_handlers: add native:copy-from-cache-to-temp as composable primitive (copies cached file to temp, returns path — caller handles launch logic) - shell_handlers: harden native:run-osascript with temp .scpt file approach (replaces -e flag; handles multi-line scripts and paths with special chars) - README: rewrite Native Bridge section — full method table, composable pattern example, configurable launch scripts note - deploy/devices.conf: update IPs for devices 03-06, uncomment entries	2026-05-11 13:40:05 -04:00
Scott Idem	5b59dbc2da	Old files for reference to help with AppleScript and related.	2026-04-20 17:02:46 -04:00
Scott Idem	002c27e73c	fix(file_handlers): use keystroke Cmd+Return to start pptx slideshow Replace unreliable AppleScript PowerPoint API (run slide show of settings) with System Events keystroke approach, matching proven behavior from the old MasterKey app. Opens the file, waits 3s for load, then sends Cmd+Return to start the slideshow from slide 1.	2026-04-20 17:01:04 -04:00
Scott Idem	3feaf1bbc3	feat(deploy): add deploy script and per-device config files deploy/deploy.sh — automated deploy: arch detection, scp .app, write seed.json, verify. Supports single laptop, list, or "all"; --seed-only flag skips .app copy for key-rotation runs. deploy/devices.conf — all 19 laptops (num / IP / event_device_id). deploy/event.env.example — template for gitignored event.env (API key). README updated: deploy/ table, script usage, manual steps moved to reference section. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-04-20 15:02:15 -04:00
Scott Idem	b8b7b253bb	assets: add logo and icon files for packaging Add OSIT logo images (PNG, ICO) and .icns icon used by electron-packager when producing macOS .app bundles.	2026-04-20 14:27:05 -04:00