release: 0.1.9, with a bun that runs without AVX2HEADmain

The tarball shipped bun's default x64 build, which requires AVX2 -- so sl0ppi
installed cleanly on a plain KVM guest and then died with "Illegal instruction"
the first time anything ran pi. Known since 0.1.7 and carried as an open item;
not something to ship a third time.

packaging/fetch-vendor.sh now fetches bun-linux-x64-baseline.zip. Verified
without needing such a machine, on an emulated CPU that has none:

  qemu-x86_64 -cpu Nehalem <baseline>/bun --version   ->  1.3.14
  qemu-x86_64 -cpu Nehalem <default>/bun  --version   ->  Illegal instruction

Also drops the installer's closing note about the status bar asking for
permissions on first launch: shipped plugins are granted implicitly now, so the
prompt it told people to expect no longer appears. (That text is baked into the
0.1.9 tarball; it is wrong but harmless, and corrected for the next one.)

And gitignores *.core -- qemu writes one where you stand when it kills a target
on an illegal instruction, and a 100MB core dump nearly went into this commit.

0.1.9 contains everything since 0.1.8: the split button actually visible and
clickable where it is drawn, including on stacked panes; shipped plugins not
asking for permission; the status bar as a framed box in the pane style with a
new-tab button and margins matching the pane gap, collapsing to a single line
in the mobile layout; and runtime tabs keeping a status bar without losing the
purpose the CLI uses for identity.

3 files changed, 10 insertions, 6 deletions

diff --git a/packaging/fetch-vendor.sh b/packaging/fetch-vendor.sh
index 07eafe2..2d34b55 100755
--- a/packaging/fetch-vendor.sh
+++ b/packaging/fetch-vendor.sh
@@ -50,12 +50,17 @@ if [ ! -x "$BUN_DIR/bun" ]; then
     log "fetching bun $BUN_VERSION"
     tmp="$(mktemp -d)"
     trap 'rm -rf "$tmp"' EXIT
+    # BASELINE, not the default build: bun-linux-x64.zip requires AVX2, and a
+    # plain KVM guest without it dies with "Illegal instruction" the first time
+    # anything runs pi -- i.e. the tarball installs fine and then does not work,
+    # on exactly the kind of machine this project exists to install on. Baseline
+    # costs some JS throughput we do not notice and runs everywhere.
     curl -fsSL -o "$tmp/bun.zip" \
-        "https://github.com/oven-sh/bun/releases/download/bun-v$BUN_VERSION/bun-linux-x64.zip"
-    record_or_verify "bun-linux-x64-$BUN_VERSION.zip" "$tmp/bun.zip"
+        "https://github.com/oven-sh/bun/releases/download/bun-v$BUN_VERSION/bun-linux-x64-baseline.zip"
+    record_or_verify "bun-linux-x64-baseline-$BUN_VERSION.zip" "$tmp/bun.zip"
     unzip -q -d "$tmp" "$tmp/bun.zip"
     mkdir -p "$BUN_DIR"
-    install -m755 "$tmp"/bun-linux-x64/bun "$BUN_DIR/bun"
+    install -m755 "$tmp"/bun-linux-x64-baseline/bun "$BUN_DIR/bun"
     rm -rf "$tmp"; trap - EXIT
 else
     log "bun $BUN_VERSION already vendored"
diff --git a/packaging/install.sh b/packaging/install.sh
index 657085a..97f53f4 100755
--- a/packaging/install.sh
+++ b/packaging/install.sh
@@ -148,6 +148,4 @@ say "start with: sl0ppi up      (in a directory that holds your projects)"
 echo "    sl0ppi doctor            check this installation"
 echo "    sl0ppi init              make the current directory a project"
 echo "    sl0ppij                  the multiplexer on its own, if you prefer"
-echo
-echo "    On the very first launch the status bar plugin asks for permissions"
-echo "    (\"... Allow? (y/n)\") -- press y once and it is remembered."
+
diff --git a/packaging/pins.sha256 b/packaging/pins.sha256
index cbb73a7..9e8b140 100644
--- a/packaging/pins.sha256
+++ b/packaging/pins.sha256
@@ -1 +1,2 @@
 951ee2aee855f08595aeec6225226a298d3fea83a3dcd6465c09cbccdf7e848f bun-linux-x64-1.3.14.zip
+a063908ae08b7852ca10939bbdc6ceed3ddabce8fb9402dce83d65d73b36e6c7 bun-linux-x64-baseline-1.3.14.zip