@akanjs/cli 3.0.0-beta.29 → 3.0.0-beta.30

package/guidelines/runtimeRule/runtimeRule.instruction.md

@@ -1,4 +1,4 @@
-# Runtime Rule — Serving, Processes, Logging, Image, Desktop Server, Assets
+# Runtime Rule — Serving, Processes, Logging, Image, Native Apps, Desktop Server, Assets
 
 How an Akan app is built, what it serves, how many processes it runs, where its logs go, and what ends up in
 its image. Everything here is declared in `akan.config.ts` or narrowed by an env at boot; none of it is reached
@@ -11,14 +11,14 @@ on; the other two are declared in `akan.config.ts` as **`web: true | false | { c
 narrowed again per deployment.
 
 ```ts
-const config: AppConfig = { web: { csr: false } }; // web without the mobile bundle
+const config: AppConfig = { web: { csr: false } }; // web without the CSR bundle the native apps ship
 const config: AppConfig = { web: false }; // api only
 ```
 
 - **`web: { csr: false }`** drops the CSR build phase and the `/__csr` + `?csr=true` routes. The CSR bundle is
-  what the native mobile build ships, so a web-only deployment never needs it — and an app that declares a
-  `mobile` section is refused, because `akan build-ios` copies `dist/apps/<app>/csr/<target>.html` into the
-  target's web root, `.akan/mobile/<target>/web`.
+  what the native apps ship, so a web-only deployment never needs it — and an app that declares a `native` section
+  is refused, because every native build copies `dist/apps/<app>/csr/<target>.html` into the target's web root,
+  `.akan/native/<target>/web`.
 - **`web: false`** is an API-only build: no base artifact, no pages or client bundles, no RSC worker
   entrypoint, and no `public/` in the image (the web router's catch-all is its only reader). Nothing under
   `page/` is served, including routes a lib contributed through `syncPageLibs`.
@@ -184,16 +184,88 @@ const config: AppConfig = { docker: "FROM oven/bun:1-slim\n…" }; // verbatim,
 - `AkanAppConfig.docker` is the resolved declaration; `AkanAppConfig.dockerfile` is the text `akan build` writes
   to `dist/apps/<app>/Dockerfile`.
 
+## Native Apps — The `native` Section
+
+An app's iOS, Android and desktop (macOS, Windows, Linux) apps are the `native` section of its `akan.config.ts`.
+Each ships the CSR bundle on the native runtime, so one set of pages serves the web and every app.
+
+```ts
+const config: AppConfig = {
+  native: {
+    appName: "Board",
+    appId: "com.example.board", // or one per platform: { default, ios, android, macos, windows, linux }
+    version: "1.2.0",
+    buildNum: 12,
+    indexPath: "/explore", // the first page, and where a deep link's stack and a back with no history land
+    permissions: ["camera", "push"],
+    plugins: ["file-picker", "keep-awake"],
+    deepLinks: { schemes: ["board"], domains: ["board.example.com"] },
+    ios: { teamId: "ABCDE12345" }, // universal links for deepLinks.domains
+    android: { googleServices: "secrets/google-services.json", sha256CertFingerprints: ["…"] }, // FCM, app links
+    desktop: { server: true },
+  },
+};
+```
+
+- **Without `targets` the app has one target, `default`** — the usual case, with every setting in the section
+  itself; `native: { desktop: { server: true } }` alone is a whole desktop app that carries its server. Defaults:
+  the app's folder name for `appName` and `fileName`, an id made from the repository's and the app's names for
+  `appId`, `0.0.1` and `1`.
+- **A target is another app made from the section.** It has the section's shape minus `targets` and overrides it
+  field by field: plain objects merge key by key — `ios`, `android`, `desktop`, `deepLinks`, `updates` and the
+  objects inside them — and every other value replaces the section's, a list included, so a target's `plugins` or
+  `permissions` is its whole list. An `icon` or `splash` object is one value. Once `targets` is declared, only the
+  targets it names are built:
+
+  ```ts
+  native: {
+    appId: "com.example.board",
+    plugins: ["file-picker"],
+    targets: {
+      board: {},
+      lobby: { appId: "com.example.lobby", plugins: ["file-picker", "keep-awake"], desktop: { recovery: "reload" } },
+    },
+  },
+  ```
+
+- **`basePath` is the client a target opens.** An app with no basePaths leaves it out. Without `targets`, the one
+  target opens the basePath named like the app when there is one; in an app with basePaths, a target that names
+  none is a template, and `--target <basePath>` builds that client from it.
+- Every native command takes `--target <name>`. `build-*`, `release-*`, `update-keygen` and `publish-update` also
+  take `all`; `start-*` and `pack-update` handle one target at a time.
+- **Everything a build makes is under `apps/<app>/.akan/native/<target>/`**: `build/<platform>` (`build-ios`,
+  `build-android`, `build-desktop`), `dev/<platform>` (the dev builds `start-*` run), `updates` (what
+  `publish-update` signs and `pack-update` packs), `web` (the bundle the app loads) and `bin`. `akan start` leaves
+  the folder alone.
+- **`start-ios` / `start-android` / `start-desktop` run a dev build that loads its pages from `akan start`.** It has
+  to be running — except for a desktop app that carries its server, which starts it when none of this checkout
+  answers. `--release true` runs a release build of the app's own bundle instead.
+- **A desktop app builds only for the computer that builds it** — a `.app` on macOS, signed ad hoc or with the
+  development identity, and an unsigned folder on Windows and Linux. `build-desktop --installer true` adds a
+  per-user NSIS setup on Windows (`/S` installs silently). Distribution signing and notarization are not akan
+  commands yet.
+- **`updates: { url, publicKey }` lets an installed app update itself** — the whole app on a desktop, the web
+  bundle on a phone. `akan update-keygen <app>` makes the signing key once
+  (`~/.akan/native/keys/<app id>.update.key`, or the path `AKAN_NATIVE_UPDATE_KEY` names) and prints the
+  `publicKey`. `akan publish-update <app>` builds and signs a release into `updates/`: upload that folder to `url`,
+  the manifests last. `akan pack-update` writes an unsigned phone bundle for whoever holds the key to sign. The
+  channel is the backend env the binary was built for unless `channel` names one, and a release that does not
+  come up is rolled back to the one before.
+- **An unattended screen** — signage, a kiosk — takes `desktop.recovery: "reload"` (a crashed page loads again,
+  and the app relaunches when the webview ends), `desktop.window: { fullscreen, skipTaskbar }`,
+  `desktop.screenCapture: "auto"` (Windows answers `getDisplayMedia()` with the first screen, no picker) and
+  `android.autoplay` (media plays with sound without a tap).
+
 ## A Desktop App's Server — `bin` And `trustedDependencies`
 
-A mobile target that declares `native: { desktop: { server: true } }` carries the app's server: `akan build-desktop`,
-`start-desktop --release` and `publish-update` put the backend `akan build` made into the app — everything the
-backend build wrote (the `.js`, `akan.build.json`, `private/`, a bundled package's `.node`, `.wasm` or file asset)
-but the Dockerfile, the RSC worker, the console, `csr/` and `public/` — and install its packages first with
-`bun install --production --prefer-offline`, before `akan build` runs. `start-desktop` without `--release` starts
-`akan start` beside the app when no dev server of this checkout answers. The setting is the app's backend,
-so it does not change under an installed app: an update whose release carries a server when the app has none, or
-none when it has one, is refused, and switching means a reinstall.
+A desktop app whose `native` section, or target, declares `desktop: { server: true }` carries the app's server:
+`akan build-desktop`, `start-desktop --release` and `publish-update` put the backend `akan build` made into the
+app — everything the backend build wrote (the `.js`, `akan.build.json`, `private/`, a bundled package's `.node`,
+`.wasm` or file asset) but the Dockerfile, the RSC worker, the console, `csr/` and `public/` — and install its
+packages first with `bun install --production --prefer-offline`, before `akan build` runs. `start-desktop` without
+`--release` starts `akan start` beside the app when no dev server of this checkout answers. The setting is the
+app's backend, so it does not change under an installed app: an update whose release carries a server when the app
+has none, or none when it has one, is refused, and switching means a reinstall.
 A desktop app builds only for the computer it is built on, so every native addon's prebuild matches the one it runs
 on. It runs as an API-only edge server on SQLite, on a loopback port the launcher picks — the last session's when
 it is free, which is not a guarantee, so a provider that needs an exact redirect URI signs in through a cloud
@@ -278,8 +350,8 @@ was still starting — the server sees its parent gone and ends the group itself
 later for whatever ignored it. On Windows the job object ends them all with the app. A process started `detached`
 leaves the group, or the job, and keeps running.
 
-**A file the user picks reaches the server as a grant, never as a copy or a path.** With `native.plugins:
-["file-picker"]` on the target, `filePicker.pickFiles({ forServer: true })` (also `pickDirectory` and `saveFile`,
+**A file the user picks reaches the server as a grant, never as a copy or a path.** With `"file-picker"` in
+`native.plugins`, `filePicker.pickFiles({ forServer: true })` (also `pickDirectory` and `saveFile`,
 from `akanjs/client/native`) copies nothing, whatever the size: its FileRefs serve the originals for a preview, and
 each result carries a `grant`. The page hands the grant to an endpoint, and the server exchanges it:
 
@@ -293,8 +365,9 @@ and nothing else, and no page ever holds a path. Behind a dev build `akan start`
 against a key in `~/.akan/native` instead, in `operationMode` local only; every other server refuses a grant.
 
 **Devices belong to the shell, not the server.** Displays and their changes (`screen`), windows placed on them
-(`window`), the system volume and mute (`volume`), global shortcuts, keep-awake and launch at login are native
-runtime plugins, each added to the target's `native.plugins`. Every builtin plugin's page API is
+(`window`), the system volume and mute (`volume`), global shortcuts (`global-shortcut`), keep-awake (`keep-awake`)
+and launch at login (`autostart`) are native runtime plugins, each added to `native.plugins`. Every builtin plugin's
+page API is
 `akanjs/client/native/<id>` (`akanjs/client/native/window`, `…/screen`, `…/global-shortcut`), imported in a `webkit/`
 hook; `volume` and `filePicker` also come from `akanjs/client/native` itself. A capability the shell
 lacks is added there: an app's own plugin runs as Bun code in the plugin host and cannot add a native shell op.

package/guidelines/workspaceOnboarding/workspaceOnboarding.instruction.md

@@ -7,6 +7,8 @@
 - `apps/<app>/page` holds server-side file-routed pages: `<routeName>.tsx` serves `/routeName`, a directory's
   `_index.tsx` serves that directory, `_layout.tsx` nests a layout, and `[modelId]` is a dynamic segment. Each route
   file is one chain — `export default page()…render()`, or `layout()` / `rootLayout()` in a `_layout.tsx`.
+- The `native` section of `akan.config.ts` makes the app an iOS, Android and desktop app built from the same pages,
+  and `apps/<app>/native/<id>` holds a native plugin the app owns.
 
 The file roles inside a module — which file owns persistence, business logic, state, and each UI shape — are in
 the convention set above under **Domain Module Conventions**.
@@ -112,6 +114,22 @@ For the default generated app, start with:
 akan start <%= appName %>
 ```
 
+### Native Apps — iOS, Android, Desktop
+
+`native: { desktop: { server: true } }` in `akan.config.ts` is all a desktop app that carries its own server needs.
+A `start-*` command loads its pages from `akan start`, so run that first; a desktop app that carries its server
+starts it itself. The full contract — targets, updates, what the carried server ships — is
+`akan guideline show runtimeRule`.
+
+```bash
+akan start-desktop <%= appName %>                   # Run the desktop app on this computer
+akan start-ios <%= appName %>                       # Run it in a simulator or on an iPhone (start-android alike)
+akan build-desktop <%= appName %>                   # Build it for this computer into .akan/native/<target>/build
+akan build-desktop <%= appName %> --installer true  # Windows: add a per-user setup program
+akan update-keygen <%= appName %>                   # Make the update signing key once; print its public key
+akan publish-update <%= appName %>                  # Build and sign a desktop release to upload to updates.url
+```
+
 ### The Essential Loop: Workflow -> Sync -> Check
 
 Almost every Akan.js change follows this pattern. **Missing sync or repair is the #1 cause of agent confusion.**
@@ -200,6 +218,8 @@ final fallback when no CLI command covers the change.
 | Add a React hook or browser helper | `webkit/` → camelCase `.ts` with `"use client"` | `akan sync <name>` |
 | Add a server-only guard, middleware, or adaptor | `srvkit/` → PascalCase `.ts` | `akan sync <name>` |
 | Add a pure helper (no DOM, no server API) | `common/` → camelCase `.ts` | `akan sync <name>` |
+| Make the app an iOS, Android or desktop app | `akan.config.ts` → `native: { … }`; `desktop: { server: true }` puts the server in the desktop app | `akan start-desktop <name>` (or `start-ios` / `start-android`) |
+| Add a device capability the framework lacks | `native/<id>/` → `native-plugin.json`, `src/index.ts` (page API, used from a `webkit/` hook), `src/desktop.ts`, Kotlin, Swift | the platform's `akan start-*` |
 
 ## Workflow Recipes
 

package/incrementalBuilder.proc.js

@@ -8,7 +8,7 @@ import {
   CodegenLock,
   WorkspaceExecutor,
   AppExecutor
-} from "./index-r8gp8zk3.js";
+} from "./index-n3jk2501.js";
 import"./index-52w0fvh8.js";
 import {
   GraphClientEntryDiscovery,
@@ -20,7 +20,7 @@ import {
   DevChangePlanner,
   DevGeneratedIndexSync,
   SsrDevBundler
-} from "./index-ttn00pr3.js";
+} from "./index-6x9p8dpb.js";
 import {
   prepareDevWatchBatch
 } from "./index-a5vmm6x4.js";

package/{index-2z30v4k5.js → index-0ncc0mbk.js}

@@ -5,13 +5,13 @@ import {
   writeGeneratedSyncState,
   createRepairReport,
   renderRepairReport
-} from "./index-2s2e5qnd.js";
+} from "./index-hmdq5pqm.js";
 import {
   AkanContextAnalyzer
-} from "./index-0pqzrbpr.js";
+} from "./index-tzc1gtrg.js";
 import {
   runner
-} from "./index-b68zfsvz.js";
+} from "./index-xb7qhxa8.js";
 
 // pkgs/@akanjs/cli/repair/repair.runner.ts
 var spawnShell = async (workspace, command) => await workspace.spawn("bash", ["-lc", command.startsWith("akan ") ? `bun run ${command}` : command], {

package/{index-2yvy9ztj.js → index-167c77aq.js}

@@ -1,16 +1,16 @@
 // @bun
 import {
   jsonText
-} from "./index-2s2e5qnd.js";
+} from "./index-hmdq5pqm.js";
 import {
   akanMcpInstallTargets
-} from "./index-0pqzrbpr.js";
+} from "./index-tzc1gtrg.js";
 import {
   script
-} from "./index-b68zfsvz.js";
+} from "./index-xb7qhxa8.js";
 import {
   ContextRunner2
-} from "./index-16k7m3cs.js";
+} from "./index-hqd0h1pb.js";
 
 // pkgs/@akanjs/cli/context/context.script.ts
 import { Logger } from "akanjs/common";

package/{index-nbg9bfnr.js → index-35mmm9ca.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   AppInfo
-} from "./index-r8gp8zk3.js";
+} from "./index-n3jk2501.js";
 
 // pkgs/@akanjs/devkit/slicePlanner.ts
 class SlicePlanner {

package/{index-fy42hyb9.js → index-376gpdds.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   resolveSsrPageEntriesForApp
-} from "./index-r8gp8zk3.js";
+} from "./index-n3jk2501.js";
 import {
   computeRouteSeedIndex,
   saveRouteSeedIndex,
@@ -16,7 +16,7 @@ import {
   CsrEntryFiles,
   PagesEntrySourceGenerator,
   PagesBundleBuilder
-} from "./index-ttn00pr3.js";
+} from "./index-6x9p8dpb.js";
 import {
   SOURCE_EXTS
 } from "./index-48k96p55.js";
@@ -1638,13 +1638,13 @@ class SsrBaseArtifactBuilder {
       i18n: akanConfig.i18n,
       imageConfig: akanConfig.images,
       web: SsrBaseArtifactBuilder.servedWeb(this.#command, akanConfig.web),
-      deepLinkAssociations: Object.values(akanConfig.mobile.targets).filter((target) => (target.deepLinks?.domains?.length ?? 0) > 0).map((target) => ({
+      deepLinkAssociations: Object.values(akanConfig.native.targets).filter((target) => (target.deepLinks?.domains?.length ?? 0) > 0).map((target) => ({
         targetName: target.name,
         iosAppId: SsrBaseArtifactBuilder.#appIdOn(target.appId, "ios"),
         androidAppId: SsrBaseArtifactBuilder.#appIdOn(target.appId, "android"),
         domains: target.deepLinks?.domains ?? [],
-        iosTeamId: target.deepLinks?.ios?.teamId,
-        androidSha256CertFingerprints: target.deepLinks?.android?.sha256CertFingerprints
+        iosTeamId: target.ios?.teamId,
+        androidSha256CertFingerprints: target.android?.sha256CertFingerprints
       }))
     };
     await Bun.write(path8.join(this.#absArtifactDir, "base-artifact.json"), `${JSON.stringify(artifact, null, 2)}

package/{index-n9gxx7bp.js → index-3rh7thcx.js}

@@ -37,29 +37,29 @@ import {
 import {
   runner,
   script
-} from "./index-b68zfsvz.js";
+} from "./index-xb7qhxa8.js";
 import {
   WorkspaceExecutor,
   AppExecutor,
   LibExecutor,
   PkgExecutor
-} from "./index-r8gp8zk3.js";
+} from "./index-n3jk2501.js";
 import {
   DesktopServerStage,
   resolveMobileTargets,
   resolveAppId,
   NativeApp
-} from "./index-1hs6jrys.js";
+} from "./index-kb16nzyt.js";
 import {
   LibraryScript
-} from "./index-qtz88kh0.js";
+} from "./index-gxamdf18.js";
 import {
   stripAnsi
 } from "./index-7md2g9vw.js";
 import {
   SlicePlanner,
   formatSlicePlan
-} from "./index-nbg9bfnr.js";
+} from "./index-35mmm9ca.js";
 import {
   openBrowser
 } from "./index-9dp031by.js";
@@ -1867,7 +1867,7 @@ ${uniqueCandidates.map((candidate) => `  - ${candidate}`).join(`
 
 // pkgs/@akanjs/cli/application/application.runner.ts
 import { Logger as Logger3 } from "akanjs/common";
-var loadBuildRunner = async () => (await import("./applicationBuildRunner-ez37p161.js")).ApplicationBuildRunner;
+var loadBuildRunner = async () => (await import("./applicationBuildRunner-qkt6spd5.js")).ApplicationBuildRunner;
 var loadPrompts = async () => await import("@inquirer/prompts");
 
 class ApplicationRunner extends runner("application") {
@@ -2109,7 +2109,7 @@ try {
     const targets = await resolveMobileTargets(app, target);
     const [mobileTarget] = targets;
     if (!mobileTarget || targets.length > 1)
-      throw new Error(`start-${platform === "ios" || platform === "android" ? platform : "desktop"} runs one mobile target at a time; pass --target <name>.`);
+      throw new Error(`start-${platform === "ios" || platform === "android" ? platform : "desktop"} runs one native target at a time; pass --target <name>.`);
     return mobileTarget;
   }
   static async answers(url, appName, workspaceRoot) {
@@ -2156,7 +2156,7 @@ try {
     const targets = await resolveMobileTargets(app, target);
     const [mobileTarget] = targets;
     if (!mobileTarget || targets.length > 1)
-      throw new Error("pack-update packs one mobile target at a time; pass --target <name>.");
+      throw new Error("pack-update packs one native target at a time; pass --target <name>.");
     await this.#buildMobileCsr(app, env);
     const packed = await new NativeApp(app, mobileTarget, env).packUpdate(platform, { out });
     const size = packed.manifest.files.reduce((sum, file) => sum + file.size, 0);
@@ -2183,10 +2183,10 @@ try {
       seen.add(appId);
       const { publicKey, keyPath, created } = await new NativeApp(app, mobileTarget).updateKeygen(nativePlatform);
       app.log(`${appId}: ${created ? "made" : "read"} ${keyPath}${created ? " (keep it private and backed up: without it, installed apps take no more updates)" : ""}`);
-      app.log(`  mobile: { updates: { url: "https://\u2026/${app.name}", publicKey: ${JSON.stringify(publicKey)} } }`);
+      app.log(`  native: { updates: { url: "https://\u2026/${app.name}", publicKey: ${JSON.stringify(publicKey)} } }`);
       const declared = mobileTarget.config.updates?.publicKey;
       if (declared && declared !== publicKey)
-        app.logger.warn(`mobile.targets.${mobileTarget.name}.updates.publicKey is another key's; releases would not verify.`);
+        app.logger.warn(`native.targets.${mobileTarget.name}.updates.publicKey is another key's; releases would not verify.`);
     }
   }
   async publishUpdate(app, platform, { target, env = "main", channel } = {}) {
@@ -2218,7 +2218,7 @@ try {
       app.log(`${app.name}/${mobileTarget.name} ${artifact.kind}: ${artifact.path}`);
   }
   static carriesServer({ config }, platform = NativeApp.desktopPlatform()) {
-    return platform !== "ios" && platform !== "android" && config.native?.desktop?.server === true;
+    return platform !== "ios" && platform !== "android" && config.desktop?.server === true;
   }
   async#stageMobile(app, platform, targets, env) {
     const stage = targets.some((mobileTarget) => ApplicationRunner.carriesServer(mobileTarget, platform)) ? new DesktopServerStage(app) : null;
@@ -2263,9 +2263,9 @@ try {
       return;
     for (const failure of failures) {
       const message = failure.error instanceof Error ? failure.error.message : String(failure.error);
-      Logger3.rawLog(`Mobile target ${failure.target} failed: ${message}`, undefined, "error");
+      Logger3.rawLog(`Native target ${failure.target} failed: ${message}`, undefined, "error");
     }
-    throw new Error(`${failures.length}/${results.length} mobile targets failed`);
+    throw new Error(`${failures.length}/${results.length} native targets failed`);
   }
   #getLocalDatabaseServices(mode) {
     if (mode === "single")

package/{index-rrt9pnb4.js → index-5rp0h6na.js}

@@ -6,11 +6,11 @@ import {
 } from "./index-94s080qm.js";
 import {
   runner
-} from "./index-b68zfsvz.js";
+} from "./index-xb7qhxa8.js";
 import {
   WorkspaceExecutor,
   AppExecutor
-} from "./index-r8gp8zk3.js";
+} from "./index-n3jk2501.js";
 import {
   openBrowser
 } from "./index-9dp031by.js";

package/{index-ttn00pr3.js → index-6x9p8dpb.js}

@@ -9,7 +9,7 @@ import {
 import {
   AsyncDefaultExportDetector,
   resolveSsrPageEntriesForApp
-} from "./index-r8gp8zk3.js";
+} from "./index-n3jk2501.js";
 
 // pkgs/@akanjs/devkit/artifact/routeSeedIndex.ts
 import path from "path";

package/{index-8ej6r02m.js → index-8tv7356t.js}

@@ -116,7 +116,7 @@ class SubagentPool2 {
     }
   }
   async#run(id, kind, prompt, signal) {
-    const { CodeAgent } = await import("./CodeAgent-86q8d13j.js");
+    const { CodeAgent } = await import("./CodeAgent-xnfyyz8h.js");
     const budget = this.#options.parent.tools.subagent;
     const child = SubagentPool2.childOf(this.#options.parent, kind);
     const agent = await CodeAgent.create({

package/{index-k7809wmg.js → index-a4s954kq.js}

@@ -2,13 +2,13 @@
 import {
   runner,
   script
-} from "./index-b68zfsvz.js";
+} from "./index-xb7qhxa8.js";
 import {
   FileSys2
 } from "./index-52w0fvh8.js";
 import {
   PkgExecutor
-} from "./index-r8gp8zk3.js";
+} from "./index-n3jk2501.js";
 import {
   TypeScriptDependencyScanner2
 } from "./index-2ahj896a.js";

package/{index-rbeahw6j.js → index-bxmejydw.js}

@@ -2,7 +2,7 @@
 import {
   runner,
   script
-} from "./index-b68zfsvz.js";
+} from "./index-xb7qhxa8.js";
 import {
   AGENT_BLOCK_START,
   AGENT_BLOCK_END,
@@ -13,14 +13,14 @@ import {
   CLAUDE_COMMENT_RULE,
   AppExecutor,
   LibExecutor
-} from "./index-r8gp8zk3.js";
+} from "./index-n3jk2501.js";
 import {
   collectRecipeSources2,
   scanRecipes2
 } from "./index-hj6w4ka1.js";
 import {
   AkanContextAnalyzer
-} from "./index-0pqzrbpr.js";
+} from "./index-tzc1gtrg.js";
 import {
   Prompter2
 } from "./index-zzvvc845.js";

package/{index-qtz88kh0.js → index-gxamdf18.js}

@@ -2,10 +2,10 @@
 import {
   runner,
   script
-} from "./index-b68zfsvz.js";
+} from "./index-xb7qhxa8.js";
 import {
   LibExecutor
-} from "./index-r8gp8zk3.js";
+} from "./index-n3jk2501.js";
 import {
   LibSource,
   formatLibStatuses

package/{index-20r2g1t3.js → index-hf6f4xnb.js}

@@ -1,12 +1,12 @@
 // @bun
 import {
   script
-} from "./index-b68zfsvz.js";
+} from "./index-xb7qhxa8.js";
 import {
   AppExecutor,
   LibExecutor,
   ModuleExecutor
-} from "./index-r8gp8zk3.js";
+} from "./index-n3jk2501.js";
 import {
   workflowStatus,
   compactDiagnostics,
@@ -41,10 +41,10 @@ import {
   hasSignalFactoryEntry,
   insertSignalFactoryEntry,
   addFieldUiPolicyForType
-} from "./index-2s2e5qnd.js";
+} from "./index-hmdq5pqm.js";
 import {
   ModuleScript
-} from "./index-genegfnt.js";
+} from "./index-wfwgcnyc.js";
 
 // pkgs/@akanjs/cli/primitive/primitive.script.ts
 import { capitalize, lowerlize } from "akanjs/common";

package/{index-2s2e5qnd.js → index-hmdq5pqm.js}

@@ -2,7 +2,7 @@
 import {
   AppExecutor,
   LibExecutor
-} from "./index-r8gp8zk3.js";
+} from "./index-n3jk2501.js";
 
 // pkgs/@akanjs/devkit/workflow/utils.ts
 var jsonText = (value, { trailingNewline = true } = {}) => `${JSON.stringify(value, null, 2)}${trailingNewline ? `

package/{index-16k7m3cs.js → index-hqd0h1pb.js}

@@ -1,13 +1,13 @@
 // @bun
 import {
   AppExecutor
-} from "./index-r8gp8zk3.js";
+} from "./index-n3jk2501.js";
 import {
   jsonText,
   createWorkflowBaselineSummary,
   buildAkanModuleContextIndex,
   toolingRolloutGate
-} from "./index-2s2e5qnd.js";
+} from "./index-hmdq5pqm.js";
 import {
   buildResourceList,
   codexMcpConfigPath,
@@ -17,25 +17,25 @@ import {
   upsertCodexMcpServerBlock,
   renderDoctorText,
   AkanContextAnalyzer
-} from "./index-0pqzrbpr.js";
+} from "./index-tzc1gtrg.js";
 import {
   runner
-} from "./index-b68zfsvz.js";
+} from "./index-xb7qhxa8.js";
 import {
   getMobileTargets,
   appIdsOf,
   NativeApp,
   isPlaceholderAppId
-} from "./index-1hs6jrys.js";
+} from "./index-kb16nzyt.js";
 import {
   Prompter2
 } from "./index-zzvvc845.js";
 import {
   RepairRunner
-} from "./index-2z30v4k5.js";
+} from "./index-0ncc0mbk.js";
 import {
   WorkflowRunner
-} from "./index-h9ed99ax.js";
+} from "./index-rtwhw4aq.js";
 
 // pkgs/@akanjs/devkit/akanMcpContract.ts
 import path from "path";
@@ -593,7 +593,7 @@ class ContextRunner2 extends runner("context") {
     for (const appName of appNames) {
       const app = AppExecutor.from(workspace, appName);
       const config = await app.getConfig();
-      if (!config.hasMobileConfig)
+      if (!config.hasNativeConfig)
         continue;
       if (!toolchainChecked) {
         toolchainChecked = true;
@@ -614,7 +614,7 @@ class ContextRunner2 extends runner("context") {
           severity: "warning",
           code: "mobile-appid-placeholder",
           path: `apps/${appName}/akan.config.ts`,
-          message: `Mobile target '${name}' uses placeholder bundle id '${placeholder}'. Apple's developer portal almost always already claims it, so signing to a physical device fails with "cannot be registered to your development team". Set a unique mobile.appId (reverse-DNS of your org).`
+          message: `Native target '${name}' uses placeholder bundle id '${placeholder}'. Apple's developer portal almost always already claims it, so signing to a physical device fails with "cannot be registered to your development team". Set a unique native.appId (reverse-DNS of your org).`
         });
       }
     }
@@ -623,7 +623,7 @@ class ContextRunner2 extends runner("context") {
       return jsonText({ schemaVersion: 1, kind: "ios", status, diagnostics });
     const lines = [`Akan iOS diagnostics for ${workspace.repoName}`];
     if (diagnostics.length === 0)
-      lines.push("  No mobile configuration issues found.");
+      lines.push("  No native configuration issues found.");
     else
       for (const diagnostic of diagnostics) {
         lines.push(`  [${diagnostic.severity}] ${diagnostic.code}: ${diagnostic.message}`);