# Download directory

Drop distributable artifacts here — they're served at `/download/<file>` by both
the prod (`deploy/docker-compose.yml`) and LAN (`deploy/lan/`) web containers via a
read-only volume mount. No image rebuild needed; the container picks up new files
immediately.

## The App Lab onboarding app

```sh
# 1. build the zip (bakes in the cloud token)
export ANTHROPIC_OAUTH_TOKEN=sk-ant-oat01-…
./deploy/uno-q/package-onboard-app.sh

# 2. place it here for download
cp deploy/uno-q/dist/apess-onboard.zip deploy/download/

# 3. students fetch it (then App Lab → "Import an app" → Run)
#    https://apess.redclaw.dev/download/apess-onboard.zip
```

## ⚠️ Secret

`apess-onboard.zip` contains a **baked cloud token**. Never commit it (this dir's
`*.zip` is gitignored). Treat the download URL as a secret — serve it on the
workshop network, or behind the workshop's access, not as a public link.