@akanjs/cli 3.0.1 → 3.0.2

package/{index-150s07n8.js → index-50wb2a26.js}

@@ -517,7 +517,7 @@ import {
   stat as stat2,
   symlink
 } from "fs/promises";
-import path9 from "path";
+import path10 from "path";
 import { pathToFileURL } from "url";
 import {
   capitalize,
@@ -1044,8 +1044,9 @@ class AkanAppConfig {
       "activity",
       "files"
     ],
-    desktop: ["indexPath", "server", "recovery", "window", "screenCapture", "entitlements"],
+    desktop: ["indexPath", "server", "recovery", "window", "screenCapture", "entitlements", "dmg"],
     desktopServer: ["omit"],
+    dmg: ["background", "background2x", "window", "iconSize", "textSize", "app", "applications"],
     deepLinks: ["schemes", "domains"]
   };
   static #movedKeys = {
@@ -1074,6 +1075,7 @@ class AkanAppConfig {
     check(settings.android, AkanAppConfig.#nativeKeys.android, `${where}.android`, "android");
     check(settings.desktop, AkanAppConfig.#nativeKeys.desktop, `${where}.desktop`, "desktop");
     check(settings.desktop?.server, AkanAppConfig.#nativeKeys.desktopServer, `${where}.desktop.server`, "desktopServer");
+    check(settings.desktop?.dmg, AkanAppConfig.#nativeKeys.dmg, `${where}.desktop.dmg`, "dmg");
     check(settings.deepLinks, AkanAppConfig.#nativeKeys.deepLinks, `${where}.deepLinks`, "deepLinks");
   }
   static #androidFilePattern = /^(?:res\/[^/]+\/[^/]+|assets\/.+)$/;
@@ -1352,10 +1354,85 @@ var shiftBuildNum = async (app, delta) => {
 };
 var increaseBuildNum = async (app) => await shiftBuildNum(app, 1);
 var decreaseBuildNum = async (app) => await shiftBuildNum(app, -1);
+// pkgs/@akanjs/devkit/jsonFormatter.ts
+import path6 from "path";
+
+class JsonFormatter {
+  static lineWidth = 120;
+  static stringify(value, filePath) {
+    const json = JSON.stringify(value, null, 2);
+    if (path6.basename(filePath) === "package.json")
+      return `${json}
+`;
+    return `${JsonFormatter.#print(JSON.parse(json), 0, { column: 0, trailing: 0 })}
+`;
+  }
+  static #print(value, depth, placement) {
+    if (Array.isArray(value))
+      return JsonFormatter.#printArray(value, depth, placement);
+    if (value === null || typeof value !== "object")
+      return JSON.stringify(value);
+    const entries = Object.entries(value);
+    if (!entries.length)
+      return "{}";
+    const indent = "  ".repeat(depth + 1);
+    const members = entries.map(([key, member], idx) => {
+      const prefix = `${indent}${JSON.stringify(key)}: `;
+      const trailing = idx < entries.length - 1 ? 1 : 0;
+      return `${prefix}${JsonFormatter.#print(member, depth + 1, { column: Bun.stringWidth(prefix), trailing })}`;
+    });
+    return `{
+${members.join(`,
+`)}
+${"  ".repeat(depth)}}`;
+  }
+  static #printArray(items, depth, { column, trailing }) {
+    if (!items.length)
+      return "[]";
+    const flat = JsonFormatter.#flat(items);
+    if (flat !== null && column + Bun.stringWidth(flat) + trailing <= JsonFormatter.lineWidth)
+      return flat;
+    const indent = "  ".repeat(depth + 1);
+    const isLast = (idx) => idx === items.length - 1;
+    const body = items.every((item) => typeof item === "number") ? JsonFormatter.#fill(items.map((item, idx) => `${JSON.stringify(item)}${isLast(idx) ? "" : ","}`), indent) : items.map((item, idx) => {
+      const placement = { column: indent.length, trailing: isLast(idx) ? 0 : 1 };
+      return `${indent}${JsonFormatter.#print(item, depth + 1, placement)}`;
+    }).join(`,
+`);
+    return `[
+${body}
+${"  ".repeat(depth)}]`;
+  }
+  static #fill(tokens, indent) {
+    const lines = [];
+    let line = "";
+    for (const token of tokens) {
+      if (line && Bun.stringWidth(line) + 1 + Bun.stringWidth(token) <= JsonFormatter.lineWidth) {
+        line = `${line} ${token}`;
+        continue;
+      }
+      if (line)
+        lines.push(line);
+      line = `${indent}${token}`;
+    }
+    return [...lines, line].join(`
+`);
+  }
+  static #flat(value) {
+    if (Array.isArray(value)) {
+      const items = value.map((item) => JsonFormatter.#flat(item));
+      return items.includes(null) ? null : `[${items.join(", ")}]`;
+    }
+    if (value === null || typeof value !== "object")
+      return JSON.stringify(value);
+    return Object.keys(value).length ? null : "{}";
+  }
+}
+
 // pkgs/@akanjs/devkit/linter.ts
 import { spawn } from "child_process";
 import { existsSync, readFileSync } from "fs";
-import path6 from "path";
+import path7 from "path";
 import chalk from "chalk";
 var parseBiomeReport = (output) => {
   for (let start = output.indexOf("{");start !== -1; start = output.indexOf("{", start + 1)) {
@@ -1421,13 +1498,13 @@ class Linter {
   #biomeBin;
   constructor(cwdPath) {
     this.lintRoot = this.#findBiomeRootPath(cwdPath);
-    this.configPath = Linter.#configPathIn(this.lintRoot) ?? path6.join(this.lintRoot, "biome.json");
-    const localBiomeBin = path6.join(this.lintRoot, "node_modules", ".bin", Linter.biomeBinName);
+    this.configPath = Linter.#configPathIn(this.lintRoot) ?? path7.join(this.lintRoot, "biome.json");
+    const localBiomeBin = path7.join(this.lintRoot, "node_modules", ".bin", Linter.biomeBinName);
     this.#biomeBin = existsSync(localBiomeBin) ? localBiomeBin : "biome";
   }
   static #configPathIn(dir) {
     for (const fileName of BIOME_CONFIG_FILES) {
-      const configPath = path6.join(dir, fileName);
+      const configPath = path7.join(dir, fileName);
       if (existsSync(configPath))
         return configPath;
     }
@@ -1436,19 +1513,19 @@ class Linter {
   #findBiomeRootPath(dir) {
     if (Linter.#configPathIn(dir))
       return dir;
-    const parentDir = path6.dirname(dir);
+    const parentDir = path7.dirname(dir);
     if (parentDir === dir)
       throw new Error(`biome.json not found from ${dir}`);
     return this.#findBiomeRootPath(parentDir);
   }
   #toBiomePath(filePath) {
-    const relativePath = path6.relative(this.lintRoot, filePath);
-    if (!relativePath.startsWith("..") && !path6.isAbsolute(relativePath))
+    const relativePath = path7.relative(this.lintRoot, filePath);
+    if (!relativePath.startsWith("..") && !path7.isAbsolute(relativePath))
       return relativePath;
     return filePath;
   }
   #resolveFilePath(filePath) {
-    return path6.isAbsolute(filePath) ? filePath : path6.join(this.lintRoot, filePath);
+    return path7.isAbsolute(filePath) ? filePath : path7.join(this.lintRoot, filePath);
   }
   async#runBiome(args, input) {
     return await new Promise((resolve, reject) => {
@@ -1473,7 +1550,7 @@ class Linter {
     const diagnosticPath = diagnostic.location?.path;
     if (!diagnosticPath)
       return fallbackFilePath;
-    return path6.isAbsolute(diagnosticPath) ? diagnosticPath : path6.join(this.lintRoot, diagnosticPath);
+    return path7.isAbsolute(diagnosticPath) ? diagnosticPath : path7.join(this.lintRoot, diagnosticPath);
   }
   #createLintMessage(diagnostic) {
     const start = diagnostic.location?.start;
@@ -1679,9 +1756,137 @@ ${errorText}, ${warningText} found`];
   }
 }
 
+// pkgs/@akanjs/devkit/libSource.ts
+class LibSource {
+  static manifestKey = "akan";
+  static unhashedDirs = ["env"];
+  #lib;
+  constructor(lib) {
+    this.#lib = lib;
+  }
+  get #prefix() {
+    return `libs/${this.#lib.name}/`;
+  }
+  #isHashed(file) {
+    const relative = file.slice(this.#prefix.length);
+    return !LibSource.unhashedDirs.includes(relative.split("/")[0] ?? "");
+  }
+  static unstamped(manifestContent) {
+    const manifest = JSON.parse(manifestContent);
+    delete manifest[LibSource.manifestKey];
+    return JSON.stringify(manifest);
+  }
+  static async hashFiles(files, manifestFile, read) {
+    const hasher = new Bun.CryptoHasher("sha256");
+    for (const file of files) {
+      const content = await read(file);
+      hasher.update(file);
+      hasher.update("\x00");
+      hasher.update(file === manifestFile ? LibSource.unstamped(content) : content);
+      hasher.update("\x00");
+    }
+    return hasher.digest("hex").slice(0, 32);
+  }
+  async computeHash() {
+    const files = (await this.#lib.workspace.listGitFiles([`libs/${this.#lib.name}`], { untracked: true })).filter((file) => this.#isHashed(file));
+    return await LibSource.hashFiles(files, `${this.#prefix}package.json`, (file) => this.#lib.workspace.readFile(file));
+  }
+  async read() {
+    const manifest = await this.#lib.getPackageJson();
+    const akan = manifest[LibSource.manifestKey];
+    return akan?.source ?? null;
+  }
+  async write({ origin, sha }) {
+    const [manifest, hash] = await Promise.all([this.#lib.getPackageJson(), this.computeHash()]);
+    const akan = manifest[LibSource.manifestKey] ?? {};
+    const stamp = { origin, sha, hash, syncedAt: new Date().toISOString() };
+    await this.#lib.setPackageJson({ ...manifest, [LibSource.manifestKey]: { ...akan, source: stamp } });
+    return stamp;
+  }
+  async syncStamp({ origin, sha }) {
+    const [current, hash] = await Promise.all([this.read(), this.computeHash()]);
+    if (current?.origin === origin && current.sha === sha && current.hash === hash)
+      return { stamp: current, changed: false };
+    return { stamp: await this.write({ origin, sha }), changed: true };
+  }
+  async status() {
+    const [stamp, hash] = await Promise.all([this.read(), this.computeHash()]);
+    const drift = !stamp ? "unstamped" : stamp.hash === hash ? "clean" : "drifted";
+    return { lib: this.#lib.name, drift, stamp, hash };
+  }
+}
+function formatLibStatuses(statuses) {
+  const marks = { clean: "clean    ", drifted: "DRIFTED  ", unstamped: "unstamped" };
+  const sections = [
+    "Akan Library Source Status",
+    "",
+    ...statuses.map((status) => {
+      const origin = status.stamp ? `${status.stamp.origin}@${status.stamp.sha}` : "no akan.source in package.json";
+      return `  ${marks[status.drift]} libs/${status.lib}  ${origin}`;
+    }),
+    "",
+    `drifted: ${statuses.filter((status) => status.drift === "drifted").length} / ${statuses.length}`
+  ];
+  return sections.join(`
+`);
+}
+
+// pkgs/@akanjs/devkit/manifestDependencies.ts
+class ManifestDependencies {
+  #root;
+  #runtime;
+  #typeOnly;
+  #isKept;
+  constructor(root, { runtime, typeOnly }, isKept) {
+    this.#root = root;
+    this.#runtime = new Set(runtime);
+    this.#typeOnly = new Set(typeOnly);
+    this.#isKept = isKept;
+  }
+  static keptBy(manifest) {
+    const { keepDependencies } = manifest[LibSource.manifestKey] ?? {};
+    return Array.isArray(keepDependencies) ? keepDependencies.filter((dep) => typeof dep === "string") : [];
+  }
+  realign(manifest) {
+    const removed = [];
+    const unverifiable = [];
+    const dependencies = {};
+    for (const [dep, version] of Object.entries(manifest.dependencies ?? {})) {
+      if (this.#typeOnly.has(dep))
+        continue;
+      const rootVersion = this.#rootVersionOf(dep);
+      if (!rootVersion) {
+        unverifiable.push(dep);
+        dependencies[dep] = version;
+      } else if (this.#runtime.has(dep) || this.#isKept(dep))
+        dependencies[dep] = rootVersion;
+      else
+        removed.push(dep);
+    }
+    const runtimeOfRootDependencies = [...this.#runtime].filter((dep) => this.#root.dependencies?.[dep]);
+    this.#append(dependencies, runtimeOfRootDependencies);
+    const devDependencies = {};
+    for (const [dep, version] of Object.entries(manifest.devDependencies ?? {}))
+      if (!Object.hasOwn(dependencies, dep))
+        devDependencies[dep] = this.#rootVersionOf(dep) ?? version;
+    this.#append(devDependencies, [...this.#typeOnly]);
+    return { dependencies, devDependencies, removed, unverifiable };
+  }
+  #append(map, deps) {
+    for (const dep of deps.filter((dep) => !Object.hasOwn(map, dep)).sort((a, b) => a < b ? -1 : 1)) {
+      const rootVersion = this.#rootVersionOf(dep);
+      if (rootVersion)
+        map[dep] = rootVersion;
+    }
+  }
+  #rootVersionOf(dep) {
+    return this.#root.dependencies?.[dep] ?? this.#root.devDependencies?.[dep];
+  }
+}
+
 // pkgs/@akanjs/devkit/repoIdentity.ts
 import { execFileSync } from "child_process";
-import path7 from "path";
+import path8 from "path";
 var resolved = new Map;
 var readRemoteName = (workspaceRoot) => {
   try {
@@ -1699,13 +1904,13 @@ var resolveRepoName = (workspaceRoot) => {
   const cached = resolved.get(workspaceRoot);
   if (cached)
     return cached;
-  const repoName = readRemoteName(workspaceRoot) ?? path7.basename(workspaceRoot);
+  const repoName = readRemoteName(workspaceRoot) ?? path8.basename(workspaceRoot);
   resolved.set(workspaceRoot, repoName);
   return repoName;
 };
 
 // pkgs/@akanjs/devkit/scanInfo.ts
-import path8 from "path";
+import path9 from "path";
 
 // pkgs/@akanjs/devkit/workspaceLayout.ts
 var appRootAllowedFiles = new Set([
@@ -1778,6 +1983,14 @@ var libFacetRootAllowedFiles = new Set([
 ]);
 var libFacetRootTestPattern = /^[A-Za-z][A-Za-z0-9_-]*\.signal\.(test|spec)\.(ts|tsx)$/;
 var isAllowedLibFacetRootFile = (filename) => libFacetRootAllowedFiles.has(filename) || libFacetRootTestPattern.test(filename);
+var barrelFacetDirs = ["ui", "webkit", "srvkit", "common", "plugin"];
+var barrelShadowingIndexFiles = new Set(["index.tsx", "index.jsx", "index.mts"]);
+var facetIndexShadowOf = (sysRelativePath) => {
+  const [facet, filename = "", ...nested] = sysRelativePath.split("/");
+  if (nested.length || !barrelShadowingIndexFiles.has(filename) || !barrelFacetDirs.some((dir) => dir === facet))
+    return null;
+  return `shadows the generated ${facet}/index.ts: Bun loads ${filename} and TypeScript checks index.ts, so a name only ` + `the generated barrel exports typechecks and is undefined at runtime. Delete it, since the generated barrel ` + `re-exports every file and folder in ${facet}/; a namespace it builds belongs in ${facet}/<Folder>/index.tsx`;
+};
 var retiredAppRootEntries = new Set([
   "android",
   "ios",
@@ -1786,7 +1999,7 @@ var retiredAppRootEntries = new Set([
   "capacitor.config.js",
   "capacitor.config.json"
 ]);
-var rootEntryHintOf = (type, name) => type === "app" && retiredAppRootEntries.has(name) ? "a Capacitor-era entry; the native runtime generates its projects under .akan/native/<target>, so delete it" : null;
+var rootEntryHintOf = (type, name) => type === "app" && retiredAppRootEntries.has(name) ? "a Capacitor-era entry; the native runtime generates its projects under dist/native/<app>/<target>, so delete it" : null;
 var isScannedRootEntry = (type, name) => !name.startsWith(".") || rootAllowedDirs[type].has(name);
 
 // pkgs/@akanjs/devkit/scanInfo.ts
@@ -1816,9 +2029,9 @@ var moduleUiFileTypes = {
   scalar: new Set(["Template", "Unit"])
 };
 var createDependencyScanner = async (exec) => (await import("./dependencyScanner-06z2dmrr.js")).TypeScriptDependencyScanner.from(exec);
-var getScanPath = (exec, relativePath) => path8.posix.join(`${exec.type}s`, exec.name, relativePath.split(path8.sep).join("/"));
+var getScanPath = (exec, relativePath) => path9.posix.join(`${exec.type}s`, exec.name, relativePath.split(path9.sep).join("/"));
 var getModuleNameFromPath = (kind, modulePath) => {
-  const dirname = path8.basename(modulePath);
+  const dirname = path9.basename(modulePath);
   return kind === "service" ? dirname.replace(/^_+/, "") : dirname;
 };
 async function assertScanConvention(exec, libRoot) {
@@ -1835,22 +2048,28 @@ async function assertScanConvention(exec, libRoot) {
   for (const dirname of dirs)
     if (!allowedRootDirs.has(dirname))
       addViolation(dirname, rootEntryHintOf(exec.type, dirname) ?? `unsupported ${exec.type} root folder`);
+  for (const facet of barrelFacetDirs)
+    for (const filename of await exec.readdir(facet)) {
+      const shadow = facetIndexShadowOf(`${facet}/${filename}`);
+      if (shadow)
+        addViolation(path9.join(facet, filename), shadow);
+    }
   if (exec.type === "lib")
     for (const { relativePath, reason } of await exec.getPageConventionViolations())
       addViolation(relativePath, reason);
   for (const filename of libRoot.files)
     if (!isAllowedLibFacetRootFile(filename))
-      addViolation(path8.join("lib", filename), "unsupported lib facet root file");
+      addViolation(path9.join("lib", filename), "unsupported lib facet root file");
   for (const dirname of libRoot.dirs)
     if (dirname.startsWith("__") && !internalLibDirs.has(dirname))
-      addViolation(path8.join("lib", dirname), "unsupported internal lib folder");
+      addViolation(path9.join("lib", dirname), "unsupported internal lib folder");
   const databaseDirs = libRoot.dirs.filter((dirname) => !dirname.startsWith("_"));
   const serviceDirs = libRoot.dirs.filter((dirname) => dirname.startsWith("_") && !dirname.startsWith("__"));
   const scalarDirs = await exec.readdir("lib/__scalar");
   await Promise.all([
-    ...databaseDirs.map((dirname) => validateModuleFiles(exec, violations, "database", path8.join("lib", dirname))),
-    ...serviceDirs.map((dirname) => validateModuleFiles(exec, violations, "service", path8.join("lib", dirname))),
-    ...scalarDirs.map((dirname) => validateModuleFiles(exec, violations, "scalar", path8.join("lib/__scalar", dirname)))
+    ...databaseDirs.map((dirname) => validateModuleFiles(exec, violations, "database", path9.join("lib", dirname))),
+    ...serviceDirs.map((dirname) => validateModuleFiles(exec, violations, "service", path9.join("lib", dirname))),
+    ...scalarDirs.map((dirname) => validateModuleFiles(exec, violations, "scalar", path9.join("lib/__scalar", dirname)))
   ]);
   if (violations.length > 0) {
     throw new Error(`[scan-convention]
@@ -1862,11 +2081,11 @@ async function validateModuleFiles(exec, violations, kind, modulePath) {
   const { files, dirs } = await exec.getFilesAndDirs(modulePath);
   const moduleName = getModuleNameFromPath(kind, modulePath);
   dirs.forEach((dirname) => {
-    violations.push(`${getScanPath(exec, path8.join(modulePath, dirname))}: unsupported module folder`);
+    violations.push(`${getScanPath(exec, path9.join(modulePath, dirname))}: unsupported module folder`);
   });
   const uiModuleName = moduleName[0].toUpperCase() + moduleName.slice(1);
   for (const filename of files) {
-    const scanPath = getScanPath(exec, path8.join(modulePath, filename));
+    const scanPath = getScanPath(exec, path9.join(modulePath, filename));
     if (filename === "index.ts" || filename === "index.tsx" || /\.(test|spec)\.(ts|tsx)$/.test(filename))
       continue;
     if (filename === `${moduleName}.abstract.md`)
@@ -1939,16 +2158,16 @@ class ScanInfo {
       }
     };
     await Promise.all([
-      ...databaseDirs.map((name) => collect(path8.join("lib", name), name, "databases")),
-      ...serviceDirs.map((dirname) => collect(path8.join("lib", dirname), dirname.slice(1), "services")),
-      ...scalarDirs.map((name) => collect(path8.join("lib/__scalar", name), name, "scalars"))
+      ...databaseDirs.map((name) => collect(path9.join("lib", name), name, "databases")),
+      ...serviceDirs.map((dirname) => collect(path9.join("lib", dirname), dirname.slice(1), "services")),
+      ...scalarDirs.map((name) => collect(path9.join("lib/__scalar", name), name, "scalars"))
     ]);
     const routes = exec.type === "lib" ? [] : await exec.getPageKeys();
     const common = {
       name: exec.name,
       type: exec.type,
       repoName: exec.workspace.repoName,
-      serveDomain: WorkspaceExecutor.getBaseDevEnv(path8.join(exec.workspace.workspaceRoot, ".env")).serveDomain,
+      serveDomain: WorkspaceExecutor.getBaseDevEnv(path9.join(exec.workspace.workspaceRoot, ".env")).serveDomain,
       files,
       libDeps,
       pkgDeps,
@@ -2330,10 +2549,10 @@ class Executor {
     return this.#settle(proc, target, { redStderr: true }).then(({ code, signal }) => ({ code, signal }));
   }
   getPath(filePath) {
-    if (path9.isAbsolute(filePath))
+    if (path10.isAbsolute(filePath))
       return filePath;
     if (filePath.startsWith("."))
-      return path9.join(this.cwdPath, filePath);
+      return path10.join(this.cwdPath, filePath);
     const baseParts = this.cwdPath.split(/[\\/]/).filter(Boolean);
     const targetParts = filePath.split(/[\\/]/).filter(Boolean);
     let overlapLength = 0;
@@ -2347,7 +2566,7 @@ class Executor {
       if (isOverlap)
         overlapLength = i;
     }
-    return path9.join(this.cwdPath, ...targetParts.slice(overlapLength));
+    return path10.join(this.cwdPath, ...targetParts.slice(overlapLength));
   }
   async mkdir(dirPath) {
     const writePath = this.getPath(dirPath);
@@ -2388,7 +2607,7 @@ class Executor {
     return this;
   }
   async removeDir(dirPath) {
-    const readPath = path9.join(this.getPath(dirPath), ".");
+    const readPath = path10.join(this.getPath(dirPath), ".");
     if (await FileSys2.entryExists(readPath))
       await rm3(readPath, { recursive: true, force: true });
     this.logger.verbose(`Remove directory ${readPath}`);
@@ -2396,11 +2615,10 @@ class Executor {
   }
   async writeFile(filePath, content, { overwrite = true, silent = false } = {}) {
     const writePath = this.getPath(filePath);
-    const dir = path9.dirname(writePath);
+    const dir = path10.dirname(writePath);
     if (!await FileSys2.dirExists(dir))
       await mkdir2(dir, { recursive: true });
-    let contentStr = typeof content === "string" ? content : `${JSON.stringify(content, null, 2)}
-`;
+    let contentStr = typeof content === "string" ? content : JsonFormatter.stringify(content, writePath);
     if (await FileSys2.fileExists(writePath)) {
       const currentContent = await FileSys2.readText(writePath);
       if (currentContent === contentStr || !overwrite) {
@@ -2422,7 +2640,7 @@ class Executor {
     await this.writeFile(filePath, content);
   }
   async getLocalFile(targetPath) {
-    const filePath = path9.isAbsolute(targetPath) ? targetPath : targetPath.replace(this.cwdPath, "");
+    const filePath = path10.isAbsolute(targetPath) ? targetPath : targetPath.replace(this.cwdPath, "");
     const content = await this.readFile(filePath);
     return { filePath, content };
   }
@@ -2509,9 +2727,9 @@ class Executor {
       const result = await getContent.default(scanInfo ?? null, dict, options);
       if (result === null)
         return null;
-      const filename = typeof result === "object" ? result.filename : path9.basename(targetPath).replace(".js", ".ts");
+      const filename = typeof result === "object" ? result.filename : path10.basename(targetPath).replace(".js", ".ts");
       const content = typeof result === "object" ? result.content : result;
-      const convertedTargetPath = convertPath(`${path9.dirname(targetPath)}/${filename}`);
+      const convertedTargetPath = convertPath(`${path10.dirname(targetPath)}/${filename}`);
       this.logger.verbose(`Apply template ${templatePath} to ${convertedTargetPath}`);
       return this.writeFile(convertedTargetPath, content, { overwrite });
     } else if (targetPath.endsWith(".template")) {
@@ -2520,10 +2738,10 @@ class Executor {
       const convertedContent = Object.entries(dict).reduce((data, [key, value]) => data.replace(new RegExp(`<%= ${key} %>`, "g"), value), content);
       this.logger.verbose(`Apply template ${templatePath} to ${convertedTargetPath}`);
       return this.writeFile(convertedTargetPath, convertedContent, { overwrite });
-    } else if (staticTemplateFileExtensions.has(path9.extname(targetPath).toLowerCase())) {
+    } else if (staticTemplateFileExtensions.has(path10.extname(targetPath).toLowerCase())) {
       const convertedTargetPath = convertPath(targetPath);
       const writePath = this.getPath(convertedTargetPath);
-      const dirname = path9.dirname(writePath);
+      const dirname = path10.dirname(writePath);
       if (!await FileSys2.dirExists(dirname))
         await mkdir2(dirname, { recursive: true });
       await copyFile(templatePath, writePath);
@@ -2545,7 +2763,7 @@ class Executor {
     if ((await stat2(templatePath)).isFile()) {
       const fileContent = await this.#applyTemplateFile({
         templatePath,
-        targetPath: path9.join(basePath, path9.basename(templatePath)),
+        targetPath: path10.join(basePath, path10.basename(templatePath)),
         scanInfo,
         overwrite
       }, dict, options);
@@ -2553,19 +2771,19 @@ class Executor {
     } else {
       const subdirs = await readDirEntries(templatePath);
       const fileContents = (await Promise.all(subdirs.map(async (subdir) => {
-        const subpath = path9.join(templatePath, subdir);
+        const subpath = path10.join(templatePath, subdir);
         if ((await stat2(subpath)).isFile()) {
           const fileContent = await this.#applyTemplateFile({
             templatePath: subpath,
-            targetPath: path9.join(basePath, subdir),
+            targetPath: path10.join(basePath, subdir),
             scanInfo,
             overwrite
           }, dict, options);
           return fileContent ? [fileContent] : [];
         } else
           return await this._applyTemplate({
-            basePath: path9.join(basePath, subdir),
-            template: path9.join(template, subdir),
+            basePath: path10.join(basePath, subdir),
+            template: path10.join(template, subdir),
             scanInfo,
             dict,
             overwrite,
@@ -2577,8 +2795,8 @@ class Executor {
   }
   async#resolveTemplateRoot() {
     const candidates = [
-      path9.resolve(getDirname2(import.meta.url), "templates"),
-      path9.resolve(getDirname2(import.meta.url), "../cli/templates")
+      path10.resolve(getDirname2(import.meta.url), "templates"),
+      path10.resolve(getDirname2(import.meta.url), "../cli/templates")
     ];
     for (const candidate of candidates) {
       if (await FileSys2.dirExists(candidate))
@@ -2646,11 +2864,11 @@ class Executor {
   async#resolveTypecheckWorkerEntry() {
     const dirname = getDirname2(import.meta.url);
     const candidates = [
-      path9.join(process.cwd(), "pkgs/@akanjs/devkit/typecheck/typecheck.proc.ts"),
-      path9.join(process.cwd(), "node_modules/@akanjs/devkit/typecheck/typecheck.proc.ts"),
-      path9.join(dirname, "typecheck/typecheck.proc.ts"),
-      path9.join(dirname, "typecheck.proc.js"),
-      path9.join(dirname, "typecheck.proc.ts")
+      path10.join(process.cwd(), "pkgs/@akanjs/devkit/typecheck/typecheck.proc.ts"),
+      path10.join(process.cwd(), "node_modules/@akanjs/devkit/typecheck/typecheck.proc.ts"),
+      path10.join(dirname, "typecheck/typecheck.proc.ts"),
+      path10.join(dirname, "typecheck.proc.js"),
+      path10.join(dirname, "typecheck.proc.ts")
     ];
     for (const candidate of candidates)
       if (await Bun.file(candidate).exists())
@@ -2770,7 +2988,7 @@ class WorkspaceExecutor extends Executor {
       await Promise.all(dirs.map(async (dir) => {
         if (dir.includes("_") || AVOID_DIRS.includes(dir))
           return;
-        const dirPath = path9.join(dirname, dir);
+        const dirPath = path10.join(dirname, dir);
         if ((await stat2(dirPath)).isDirectory()) {
           results.push(`${prefix}${dir}`);
           if (maxDepth > 0)
@@ -2807,9 +3025,9 @@ class WorkspaceExecutor extends Executor {
       await Promise.all(dirs.map(async (dir) => {
         if (AVOID_DIRS.includes(dir))
           return;
-        const dirPath = path9.join(dirname, dir);
+        const dirPath = path10.join(dirname, dir);
         if (await FileSys2.dirExists(dirPath)) {
-          const hasTargetFile = await FileSys2.fileExists(path9.join(dirPath, targetFilename));
+          const hasTargetFile = await FileSys2.fileExists(path10.join(dirPath, targetFilename));
           if (hasTargetFile)
             results.push(`${prefix}${dir}`);
           if (maxDepth > 0)
@@ -2839,7 +3057,6 @@ class WorkspaceExecutor extends Executor {
     return await this.#fromEverySys((sys) => sys.getViewsSourceCode());
   }
 }
-var scanFacetDirs = ["ui", "webkit", "srvkit", "common", "plugin"];
 
 class SysExecutor extends Executor {
   workspace;
@@ -2869,7 +3086,7 @@ class SysExecutor extends Executor {
       return [];
     const violations = [];
     for (const entry of await this.getAllFiles("**/*", { cwd: this.getPath("page") })) {
-      const relativePath = entry.split(path9.sep).join("/");
+      const relativePath = entry.split(path10.sep).join("/");
       const reason = getPageSourceFileViolation(relativePath);
       if (reason)
         violations.push({ relativePath: `page/${relativePath}`, reason });
@@ -2894,7 +3111,7 @@ class SysExecutor extends Executor {
       this._applyTemplate({ basePath: ".", template: "server.ts", scanInfo }),
       this._applyTemplate({ basePath: ".", template: "client.ts", scanInfo }),
       this.type === "lib" ? this._applyTemplate({ basePath: ".", template: "index.ts", scanInfo }) : null,
-      ...scanFacetDirs.map((facet) => this._applyTemplate({
+      ...barrelFacetDirs.map((facet) => this._applyTemplate({
         basePath: facet,
         template: "facetIndex/index.ts",
         scanInfo,
@@ -2923,11 +3140,9 @@ class SysExecutor extends Executor {
       await CodegenLock.run(this.workspace.workspaceRoot, `scan:${this.name}`, async () => {
         await Promise.all(this.#getScanTemplateTasks(scanInfo));
         await this.writeJson(`akan.${this.type}.json`, scanInfo.getScanResult());
-        if (this.type === "lib")
-          this.#updateDependencies(scanInfo);
+        await this.#updateDependencies(scanInfo);
         if (writeLib) {
           const libInfos = [...scanInfo.getLibInfos().values()];
-          await this.#updateDependencies(scanInfo);
           await Promise.all(libInfos.flatMap((libInfo) => libInfo.exec.#getScanTemplateTasks(libInfo)));
         }
         await this.syncAgentsIndex(scanInfo);
@@ -2946,27 +3161,27 @@ class SysExecutor extends Executor {
       await this.writeFile("CLAUDE.md", renderScopeClaudeMd(scope));
   }
   async#updateDependencies(scanInfo) {
-    const rootPackageJson = await this.workspace.getPackageJson();
-    const libPackageJson = await this.getPackageJson();
-    const dependencies = scanInfo.getScanResult().dependencies;
-    const devDependencies = scanInfo.getScanResult().devDependencies;
-    const dependencySet = new Set(dependencies);
-    const devDependencySet = new Set(devDependencies);
-    const libPkgJsonWithDeps = {
-      ...libPackageJson,
-      dependencies: {
-        ...Object.fromEntries(Object.entries(libPackageJson.dependencies ?? {}).filter(([dep]) => !devDependencySet.has(dep))),
-        ...Object.fromEntries(dependencies.filter((dep) => rootPackageJson.dependencies?.[dep]).sort().map((dep) => [dep, rootPackageJson.dependencies?.[dep]]))
-      },
-      devDependencies: {
-        ...Object.fromEntries(Object.entries(libPackageJson.devDependencies ?? {}).filter(([dep]) => !dependencySet.has(dep))),
-        ...Object.fromEntries(devDependencies.filter((dep) => rootPackageJson.dependencies?.[dep] || rootPackageJson.devDependencies?.[dep]).sort().map((dep) => [dep, rootPackageJson.devDependencies?.[dep] ?? rootPackageJson.dependencies?.[dep]]))
-      }
-    };
-    await this.setPackageJson(libPkgJsonWithDeps);
+    const [rootPackageJson, packageJson] = await Promise.all([
+      this.workspace.getPackageJson(),
+      this.getPackageJson({ refresh: true })
+    ]);
+    const { dependencies: runtime, devDependencies: typeOnly, akanConfig } = scanInfo.getScanResult();
+    const kept = new Set([
+      ...ManifestDependencies.keptBy(packageJson),
+      ...akanConfig.externalLibs,
+      ...akanConfig.trustedDependencies
+    ]);
+    const isKept = (dep) => kept.has(dep) || isAkanFrameworkDependency(dep);
+    const { dependencies, devDependencies, removed, unverifiable } = new ManifestDependencies(rootPackageJson, { runtime, typeOnly }, isKept).realign(packageJson);
+    const manifestPath = `${this.type}s/${this.name}/package.json`;
+    if (removed.length)
+      this.logger.info(`Removed from ${manifestPath}, declared by the root and imported nowhere: ${removed.join(", ")} (list one in akan.keepDependencies to keep it)`);
+    if (unverifiable.length)
+      this.logger.warn(`${manifestPath} lists ${unverifiable.join(", ")}, which the root package.json does not declare, so sync cannot tell whether it is used; kept as is`);
+    await this.setPackageJson({ ...packageJson, dependencies, devDependencies });
   }
   async getLocalFile(targetPath) {
-    const filePath = path9.isAbsolute(targetPath) ? targetPath : `${this.type}s/${this.name}/${targetPath}`;
+    const filePath = path10.isAbsolute(targetPath) ? targetPath : `${this.type}s/${this.name}/${targetPath}`;
     const content = await this.workspace.readFile(filePath);
     return { filePath, content };
   }
@@ -3054,14 +3269,19 @@ class AppExecutor extends SysExecutor {
   static from(executor, name) {
     return new AppExecutor({ workspace: executor instanceof WorkspaceExecutor ? executor : executor.workspace, name });
   }
-  static #keptOnStart = [path9.join(".akan", "native"), path9.join(".akan", "cache", "bin")];
+  static #keptOnStart = [path10.join(".akan", "cache", "bin")];
+  static #legacyNative = path10.join(".akan", "native");
   async#removeDevOutput(dir = ".akan") {
     const entries = await readDirEntries(this.getPath(dir)).catch(() => []);
     await Promise.all(entries.map(async (name) => {
-      const entry = path9.join(dir, name);
+      const entry = path10.join(dir, name);
+      if (entry === AppExecutor.#legacyNative) {
+        this.logger.warn(`apps/${this.name}/.akan/native holds native builds from before they moved to dist/native/${this.name}: upload any release waiting in its updates folders, then delete it.`);
+        return;
+      }
       if (AppExecutor.#keptOnStart.includes(entry))
         return;
-      if (AppExecutor.#keptOnStart.some((kept) => kept.startsWith(`${entry}${path9.sep}`)))
+      if (AppExecutor.#keptOnStart.some((kept) => kept.startsWith(`${entry}${path10.sep}`)))
         return await this.#removeDevOutput(entry);
       await this.removeDir(entry);
     }));
@@ -3133,10 +3353,10 @@ class AppExecutor extends SysExecutor {
     });
     if (type === "build") {
       const buildEnv = { ...env };
-      delete buildEnv.AKAN_PUBLIC_CLIENT_PORT;
-      delete buildEnv.AKAN_PUBLIC_SERVER_PORT;
-      delete buildEnv.AKAN_PUBLIC_OPERATION_MODE;
-      delete process.env.AKAN_PUBLIC_OPERATION_MODE;
+      for (const key of ["AKAN_PUBLIC_CLIENT_PORT", "AKAN_PUBLIC_SERVER_PORT", "AKAN_PUBLIC_OPERATION_MODE"]) {
+        delete buildEnv[key];
+        delete process.env[key];
+      }
       Object.assign(process.env, buildEnv);
     }
     return { env };
@@ -3185,13 +3405,13 @@ class AppExecutor extends SysExecutor {
         absolute: false,
         onlyFiles: true
       })) {
-        const segments = rel.split(path9.sep);
+        const segments = rel.split(path10.sep);
         if (segments.some((s) => s === "node_modules"))
           continue;
         const posix = `${root.keyPrefix}${segments.join("/")}`;
         if (!root.keyPrefix && libKeyPrefixes.some((prefix) => posix.startsWith(prefix)))
           continue;
-        const absPath = path9.join(root.dir, ...segments);
+        const absPath = path10.join(root.dir, ...segments);
         validatePageSourceFile(posix, { filePath: absPath });
         if (!isRouteSourceFile(posix))
           continue;
@@ -3332,7 +3552,7 @@ class AppExecutor extends SysExecutor {
   static async#linkLibAsset(targetPath, linkPath) {
     const isWindows = process.platform === "win32";
     try {
-      const target = isWindows ? targetPath : path9.relative(path9.dirname(linkPath), targetPath);
+      const target = isWindows ? targetPath : path10.relative(path10.dirname(linkPath), targetPath);
       await symlink(target, linkPath, isWindows ? "junction" : "dir");
     } catch (error) {
       if (!isWindows)
@@ -3375,7 +3595,7 @@ class AppExecutor extends SysExecutor {
         await this.writeFile(rel, content, opts);
       },
       readEnvClient: async () => {
-        const envClientPath = path9.join(this.cwdPath, "env", "env.client.ts");
+        const envClientPath = path10.join(this.cwdPath, "env", "env.client.ts");
         if (!await FileSys2.fileExists(envClientPath))
           return null;
         try {
@@ -3469,7 +3689,7 @@ class PkgExecutor extends Executor {
       return overrideVersion;
     try {
       const packageJsonPath = `pkgs/${dep}/package.json`;
-      if (!await Bun.file(path9.join(this.workspace.workspaceRoot, packageJsonPath)).exists())
+      if (!await Bun.file(path10.join(this.workspace.workspaceRoot, packageJsonPath)).exists())
         return;
       const packageJson = await this.workspace.readJson(packageJsonPath);
       if (packageJson.name === dep)
@@ -3562,4 +3782,4 @@ class ModuleExecutor extends Executor {
   }
 }
 
-export { AGENT_BLOCK_START, AGENT_BLOCK_END, stampBlockVersion, extractBlockVersion, readDevkitVersion, upsertAgentBlock, extractAgentBlock, renderRecipeEntries, collectScopeRecipeSources, renderScopeAgentBlock, CLAUDE_COMMENT_RULE, binPlatforms, AsyncDefaultExportDetector, resolveSsrPageEntriesForApp, CodegenLock, Linter, rootAllowedFiles, rootAllowedDirs, isAllowedLibFacetRootFile, rootEntryHintOf, isScannedRootEntry, AppInfo, Spinner, Executor, WorkspaceExecutor, SysExecutor, AppExecutor, LibExecutor, PkgExecutor, ModuleExecutor };
+export { AGENT_BLOCK_START, AGENT_BLOCK_END, stampBlockVersion, extractBlockVersion, readDevkitVersion, upsertAgentBlock, extractAgentBlock, renderRecipeEntries, collectScopeRecipeSources, renderScopeAgentBlock, CLAUDE_COMMENT_RULE, binPlatforms, AsyncDefaultExportDetector, resolveSsrPageEntriesForApp, CodegenLock, Linter, LibSource, formatLibStatuses, rootAllowedFiles, rootAllowedDirs, isAllowedLibFacetRootFile, barrelFacetDirs, facetIndexShadowOf, rootEntryHintOf, isScannedRootEntry, AppInfo, Spinner, Executor, WorkspaceExecutor, SysExecutor, AppExecutor, LibExecutor, PkgExecutor, ModuleExecutor };