For AI agents: fetch the complete documentation index at /llms.txt, the full documentation corpus at /llms-full.txt, the agent skill at /skill.md, or this page as Markdown at /docs/desktop/session.md (or send Accept: text/markdown).
Sign-in and sessions
Use the Web app's accounts and session rules inside the native window, including deep links that return to the app.
Setup and configuration
The desktop shell does not implement its own login. It opens the Web app in the system webview, and sign-in happens on that origin with the same session and workspace rules as a browser. The webview profile keeps cookies and local storage in the app's data directory between launches.
The supastack:// deep-link scheme maps links back to same-origin app routes. Invitations, password recovery, and other links must resolve to paths the app serves; links to another origin are ignored rather than opened inside the privileged window. Production builds must allow the scheme the server hands out.
Implementation workflow
Sign in, quit the app, and reopen it: the session should return without a second login. Sign out and repeat to confirm the session is gone. Test an expired session and an invite link, then clear the app data directory to reproduce a first launch.
Verification and troubleshooting
Authentication matches the Web app's behavior.
If you want to continue setup, read Test the desktop shell.