@lowdefy/shell 0.0.0-experimental-20261019052246

package/metro.config.js

@@ -0,0 +1,73 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/
+
+const fs = require('node:fs');
+const path = require('node:path');
+const { getDefaultConfig } = require('expo/metro-config');
+
+const readShellConfig = require('./readShellConfig.js');
+const { getExclusions, getShellVariant } = require('./shellVariant.js');
+
+const projectRoot = __dirname;
+
+function findWorkspaceRoot(directory) {
+  if (fs.existsSync(path.join(directory, 'pnpm-workspace.yaml'))) {
+    return directory;
+  }
+  const parent = path.dirname(directory);
+  return parent === directory ? null : findWorkspaceRoot(parent);
+}
+
+const config = getDefaultConfig(projectRoot);
+config.resolver.unstable_enableSymlinks = true;
+
+// A shell resolves the feature modules its capability profile leaves out to empty ones
+// (getExclusions in shellVariant.js). A release shell (LOWDEFY_SHELL_VARIANT=release, the default
+// for every shell but Lowdefy Dev) leaves out the developer features: the dev-tab client, connect
+// flow and shake menu are not in its bundle (scripts/checkReleaseBundle.mjs checks it).
+const excludedEntries = new Set(
+  getExclusions({ shell: readShellConfig().shell, variant: getShellVariant() }).jsEntries
+);
+
+// Lowdefy packages shared with the server import a few Node built-ins in code the client never
+// runs (@lowdefy/errors reads build maps with `path`). The web client's bundler leaves them empty
+// in the browser; Metro does the same here.
+const SERVER_ONLY_BUILTINS = new Set(['path']);
+const resolveDefault = config.resolver.resolveRequest;
+config.resolver.resolveRequest = (context, moduleName, platform) => {
+  if (SERVER_ONLY_BUILTINS.has(moduleName)) {
+    return { type: 'empty' };
+  }
+  const resolution = (resolveDefault ?? context.resolveRequest)(context, moduleName, platform);
+  if (resolution.type === 'sourceFile' && excludedEntries.has(resolution.filePath)) {
+    return { type: 'empty' };
+  }
+  return resolution;
+};
+
+// In a pnpm workspace (the Lowdefy monorepo) the shell's Lowdefy packages are symlinks to their
+// workspace folders: Metro watches the whole workspace and resolves from the shell's own
+// node_modules before the workspace root's.
+const workspaceRoot = findWorkspaceRoot(path.dirname(projectRoot));
+if (workspaceRoot !== null) {
+  config.watchFolders = [workspaceRoot];
+  config.resolver.nodeModulesPaths = [
+    path.join(projectRoot, 'node_modules'),
+    path.join(workspaceRoot, 'node_modules'),
+  ];
+}
+
+module.exports = config;

package/native-fingerprint.json

@@ -0,0 +1,12 @@
+{
+  "nativeVersion": 2,
+  "hash": "32a477d7fe75d305f87e57d1f633f2fe6d3f9a59",
+  "profiles": {
+    "basic": "cd8736936deaf720f1427407d9401b1f900a9d75",
+    "field": "5375e8ffcc85dfb3a9c0f9abc0b7ee6cd1dfeea4",
+    "field-nfc": "5375e8ffcc85dfb3a9c0f9abc0b7ee6cd1dfeea4",
+    "field-tracking": "5375e8ffcc85dfb3a9c0f9abc0b7ee6cd1dfeea4",
+    "dev": "654adfb2adfcd0c77034176aa02ac36c20a449c2",
+    "development": "654adfb2adfcd0c77034176aa02ac36c20a449c2"
+  }
+}

package/package.json

@@ -0,0 +1,130 @@
+{
+  "name": "@lowdefy/shell",
+  "version": "0.0.0-experimental-20261019052246",
+  "license": "Apache-2.0",
+  "description": "Lowdefy Shell - the Expo app every Lowdefy phone app is built from",
+  "homepage": "https://lowdefy.com",
+  "keywords": [
+    "lowdefy",
+    "react native",
+    "expo"
+  ],
+  "bugs": {
+    "url": "https://github.com/lowdefy/lowdefy/issues"
+  },
+  "contributors": [
+    {
+      "name": "Sam Tolmay",
+      "url": "https://github.com/SamTolmay"
+    },
+    {
+      "name": "Gerrie van Wyk",
+      "url": "https://github.com/Gervwyk"
+    }
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/lowdefy/lowdefy.git"
+  },
+  "main": "expo-router/entry",
+  "nativeVersion": 2,
+  "files": [
+    "app/*",
+    "scripts/*",
+    "src/*",
+    "app.config.ts",
+    "applyShellPlugins.js",
+    "authCallbackIntentFilters.js",
+    "babel.config.js",
+    "checkShellConfig.js",
+    "checkShellPlugins.js",
+    "getPrivacyManifest.js",
+    "metro.config.js",
+    "native-fingerprint.json",
+    "profiles.js",
+    "readShellConfig.js",
+    "resolveShellPlugins.js",
+    "runtimeVersion.js",
+    "shell.dev.json",
+    "shellVariant.js",
+    "withExcludedNativeModules.js",
+    "!**/*.test.*",
+    "!scripts/checkNativeVersion.mjs"
+  ],
+  "dependencies": {
+    "@expo/ui": "58.0.20",
+    "@lowdefy/actions-core": "0.0.0-experimental-20261019052246",
+    "@lowdefy/blocks-native": "0.0.0-experimental-20261019052246",
+    "@lowdefy/client-core": "0.0.0-experimental-20261019052246",
+    "@lowdefy/client-native": "0.0.0-experimental-20261019052246",
+    "@lowdefy/engine": "0.0.0-experimental-20261019052246",
+    "@lowdefy/helpers": "0.0.0-experimental-20261019052246",
+    "@lowdefy/node-utils": "0.0.0-experimental-20261019052246",
+    "@lowdefy/operators-change-case": "0.0.0-experimental-20261019052246",
+    "@lowdefy/operators-cron": "0.0.0-experimental-20261019052246",
+    "@lowdefy/operators-dayjs": "0.0.0-experimental-20261019052246",
+    "@lowdefy/operators-diff": "0.0.0-experimental-20261019052246",
+    "@lowdefy/operators-js": "0.0.0-experimental-20261019052246",
+    "@lowdefy/operators-jsonata": "0.0.0-experimental-20261019052246",
+    "@lowdefy/operators-mql": "0.0.0-experimental-20261019052246",
+    "@lowdefy/operators-nunjucks": "0.0.0-experimental-20261019052246",
+    "@lowdefy/operators-uuid": "0.0.0-experimental-20261019052246",
+    "@lowdefy/operators-yaml": "0.0.0-experimental-20261019052246",
+    "dayjs": "1.11.20",
+    "expo": "58.0.14",
+    "expo-clipboard": "58.0.3",
+    "expo-camera": "58.0.10",
+    "expo-constants": "58.0.12",
+    "expo-crypto": "58.0.7",
+    "expo-dev-client": "58.0.14",
+    "expo-font": "58.0.8",
+    "expo-image": "58.0.15",
+    "expo-linking": "58.0.13",
+    "expo-local-authentication": "58.0.2",
+    "expo-network": "58.0.3",
+    "expo-router": "58.0.23",
+    "expo-secure-store": "58.0.2",
+    "expo-sensors": "58.0.4",
+    "expo-speech-recognition": "58.0.0",
+    "expo-splash-screen": "58.0.10",
+    "expo-sqlite": "58.0.13",
+    "expo-updates": "58.0.17",
+    "expo-web-browser": "58.0.6",
+    "jimp-compact": "0.16.1",
+    "react": "19.3.0",
+    "react-native": "0.88.0",
+    "react-native-safe-area-context": "5.10.1",
+    "react-native-screens": "4.30.0",
+    "react-native-svg": "15.16.0",
+    "react-native-view-shot": "6.1.1"
+  },
+  "devDependencies": {
+    "@babel/core": "7.29.6",
+    "@babel/plugin-transform-class-static-block": "7.29.7",
+    "@expo/fingerprint": "0.21.5",
+    "@jest/globals": "29.7.0",
+    "@lowdefy/build": "0.0.0-experimental-20261019052246",
+    "@lowdefy/logger": "0.0.0-experimental-20261019052246",
+    "@react-native/babel-preset": "0.88.0",
+    "@react-native/jest-preset": "0.88.0",
+    "@testing-library/react-native": "14.1.0",
+    "babel-jest": "29.7.0",
+    "babel-preset-expo": "58.0.17",
+    "jest": "29.7.0",
+    "test-renderer": "1.3.1"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "dayjs-locales": "node scripts/createDayjsLocales.mjs",
+    "check:native-version": "node scripts/checkNativeVersion.mjs",
+    "check:release-bundle": "node scripts/checkReleaseBundle.mjs",
+    "export:android": "expo export --platform android --output-dir dist/android",
+    "export:ios": "expo export --platform ios --output-dir dist/ios",
+    "start": "expo start",
+    "test": "jest && node --test fixtures/hello.test.mjs scripts/createDayjsLocales.test.mjs checkShellConfig.test.mjs checkShellPlugins.test.mjs profiles.test.mjs resolveShellPlugins.test.mjs runtimeVersion.test.mjs shellVariant.test.mjs storeCompliance.test.mjs authCallbackIntentFilters.test.mjs scripts/checkNativeVersion.test.mjs scripts/createTypeManifest.test.mjs",
+    "shell-version": "node scripts/createShellVersion.mjs --write && prettier --config ../../.prettierrc --write src/version/shellVersion.js",
+    "type-manifest": "node scripts/createTypeManifest.mjs --write && prettier --config ../../.prettierrc --write src/plugins/typeManifest.js"
+  }
+}

package/profiles.js

@@ -0,0 +1,274 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/
+
+const path = require('node:path');
+
+/*
+  The capability profiles a shell picks from (shell.json `profile`). A shell cannot pick modules one
+  by one: every shell on one profile carries the same native modules, so a fleet of shells has a
+  handful of native variants to test, and a shell carries no permission text or store declaration
+  for a feature its profile does not have.
+
+  Each entry lists what the profile adds to the one it `extends`:
+  - capabilities: the device features it gives the app (shell.json `capabilities`).
+  - modules: { [package]: nativeModuleName }, the native modules it links. The name is the one the
+    module's JavaScript asks for, which scripts/checkReleaseBundle.mjs looks for in a bundle that
+    should not carry it; null for a module with no JavaScript of its own in the bundle.
+  - plugins: the config plugin entries app.config.ts applies. A profile's entry for a plugin its
+    parent also has replaces the parent's.
+  - permissions: the iOS Info.plist keys and Android permissions its modules ask for.
+  - jsEntries: the feature modules only it uses. A bundle for any other profile resolves them to
+    empty modules (metro.config.js).
+  - privacyReasons: the required-reason APIs its modules use, for the iOS privacy manifest, as
+    { category, reasons } (Apple's NSPrivacyAccessedAPIType and NSPrivacyAccessedAPITypeReasons).
+  - dataCollected: the data its features let the app collect, for the App Store privacy label and
+    Google Play's data safety form, as { type, purpose }.
+
+  Every native module the shell package depends on is in some profile. A build leaves out every one
+  not in its profile (getExclusions in shellVariant.js), and a release build also leaves out the
+  developer features (`dev`'s own entries), whatever its profile.
+*/
+
+// Lowdefy Dev's developer features: connect, shake menu and dev-tab client (src/dev).
+const DEV_ENTRY = path.join(__dirname, 'src', 'dev', 'index.js');
+
+// One microphone purpose text for every plugin that writes NSMicrophoneUsageDescription: speech
+// (basic) and expo-camera (field, dev). expo-camera writes its own default when no earlier plugin
+// set the key, so it is given the same text and plugin order cannot change what a shell shows.
+const MICROPHONE_PERMISSION =
+  '$(PRODUCT_NAME) uses the microphone when you tap the microphone button, to turn what you say into text.';
+const SPEECH_RECOGNITION_PERMISSION =
+  '$(PRODUCT_NAME) turns what you say into text on this device. Your voice is not recorded or sent anywhere.';
+
+const PROFILES = {
+  // What every shell carries: the runtime, native blocks, sign-in, biometric unlock and on-device
+  // dictation (expo-speech-recognition, for the Composer and AgentChat mic).
+  basic: {
+    capabilities: ['biometrics', 'sign-in', 'speech'],
+    modules: {
+      '@expo/ui': 'ExpoUI',
+      'expo-clipboard': 'ExpoClipboard',
+      'expo-constants': 'ExponentConstants',
+      'expo-crypto': 'ExpoCrypto',
+      'expo-font': 'ExpoFontLoader',
+      'expo-image': 'ExpoImage',
+      'expo-linking': 'ExpoLinking',
+      'expo-local-authentication': 'ExpoLocalAuthentication',
+      'expo-network': 'ExpoNetwork',
+      'expo-router': null,
+      'expo-secure-store': 'ExpoSecureStore',
+      'expo-speech-recognition': 'ExpoSpeechRecognition',
+      'expo-splash-screen': 'ExpoSplashScreen',
+      'expo-sqlite': 'ExpoSQLite',
+      'expo-updates': 'ExpoUpdates',
+      'expo-web-browser': 'ExpoWebBrowser',
+      'react-native-safe-area-context': 'RNCSafeAreaContext',
+      'react-native-screens': 'RNSModule',
+      'react-native-svg': 'RNSVGSvgViewModule',
+    },
+    plugins: [
+      'expo-router',
+      [
+        'expo-local-authentication',
+        { faceIDPermission: 'Allow $(PRODUCT_NAME) to use Face ID to unlock the app.' },
+      ],
+      [
+        'expo-secure-store',
+        { faceIDPermission: 'Allow $(PRODUCT_NAME) to use Face ID to unlock the app.' },
+      ],
+      [
+        'expo-speech-recognition',
+        {
+          microphonePermission: MICROPHONE_PERMISSION,
+          speechRecognitionPermission: SPEECH_RECOGNITION_PERMISSION,
+        },
+      ],
+      'expo-splash-screen',
+      'expo-sqlite',
+      'expo-web-browser',
+    ],
+    permissions: [
+      'NSFaceIDUsageDescription',
+      'android.permission.USE_BIOMETRIC',
+      'NSMicrophoneUsageDescription',
+      'NSSpeechRecognitionUsageDescription',
+      'android.permission.RECORD_AUDIO',
+    ],
+    jsEntries: [],
+    // React Native's own (file timestamps, UserDefaults, boot time), and the free disk space
+    // expo-sqlite checks before it writes.
+    privacyReasons: [
+      { category: 'NSPrivacyAccessedAPICategoryFileTimestamp', reasons: ['C617.1'] },
+      { category: 'NSPrivacyAccessedAPICategoryUserDefaults', reasons: ['CA92.1'] },
+      { category: 'NSPrivacyAccessedAPICategorySystemBootTime', reasons: ['35F9.1'] },
+      { category: 'NSPrivacyAccessedAPICategoryDiskSpace', reasons: ['E174.1'] },
+    ],
+    dataCollected: [
+      { type: 'emailAddress', purpose: 'appFunctionality' },
+      { type: 'userId', purpose: 'appFunctionality' },
+    ],
+  },
+  // Field work: the camera and scanning. Photos, location, maps and signatures join it as the
+  // shell gains them.
+  field: {
+    extends: 'basic',
+    capabilities: ['camera'],
+    modules: { 'expo-camera': 'ExpoCamera' },
+    // The camera does not add Android's microphone permission: the shell takes no video.
+    // RECORD_AUDIO comes from basic, for speech.
+    plugins: [
+      [
+        'expo-camera',
+        {
+          cameraPermission: 'Allow $(PRODUCT_NAME) to use the camera.',
+          microphonePermission: MICROPHONE_PERMISSION,
+          recordAudioAndroid: false,
+        },
+      ],
+    ],
+    permissions: ['NSCameraUsageDescription', 'android.permission.CAMERA'],
+    dataCollected: [{ type: 'photos', purpose: 'appFunctionality' }],
+  },
+  // `field` and NFC, which joins it as the shell gains it.
+  'field-nfc': {
+    extends: 'field',
+  },
+  // `field` and background location and geofences, which join it as the shell gains them. Its
+  // session token stays readable while the phone is locked (src/auth/isBackgroundShell.js).
+  'field-tracking': {
+    extends: 'field',
+  },
+  // Lowdefy Dev: `field` and the developer features, which read the code `lowdefy dev` prints with
+  // the camera, open the dev menu on a shake (expo-sensors) and take screenshots for the dev tab
+  // (react-native-view-shot). expo-dev-client lets a development build load a local bundle.
+  dev: {
+    extends: 'field',
+    capabilities: [],
+    modules: {
+      'expo-dev-client': null,
+      'expo-sensors': 'ExponentAccelerometer',
+      'react-native-view-shot': 'RNViewShot',
+    },
+    plugins: [
+      [
+        'expo-camera',
+        {
+          cameraPermission: 'Allow $(PRODUCT_NAME) to scan the code lowdefy dev prints.',
+          microphonePermission: MICROPHONE_PERMISSION,
+          recordAudioAndroid: false,
+        },
+      ],
+    ],
+    permissions: ['NSMotionUsageDescription'],
+    jsEntries: [DEV_ENTRY],
+  },
+  // A development build of a developer's own shell (`lowdefy mobile build --profile development`):
+  // Lowdefy Dev's features, for apps whose shell plugins Lowdefy Dev does not carry.
+  development: {
+    extends: 'dev',
+  },
+};
+
+// The profiles a store or testing build of an app's shell picks from.
+const RELEASE_PROFILES = ['basic', 'field', 'field-nfc', 'field-tracking'];
+
+function pluginName(plugin) {
+  return Array.isArray(plugin) ? plugin[0] : plugin;
+}
+
+function unique(values) {
+  return [...new Set(values)];
+}
+
+// Merges two resolved profiles, or a profile entry onto its resolved parent: lists are joined
+// without duplicates, and `added`'s modules and plugins replace `base`'s of the same name.
+function mergeProfiles(base, added) {
+  const plugins = [...base.plugins];
+  (added.plugins ?? []).forEach((plugin) => {
+    const index = plugins.findIndex((existing) => pluginName(existing) === pluginName(plugin));
+    if (index === -1) {
+      plugins.push(plugin);
+    } else {
+      plugins[index] = plugin;
+    }
+  });
+  const privacyReasons = base.privacyReasons.map((reason) => ({ ...reason }));
+  (added.privacyReasons ?? []).forEach(({ category, reasons }) => {
+    const existing = privacyReasons.find((reason) => reason.category === category);
+    if (existing) {
+      existing.reasons = unique([...existing.reasons, ...reasons]);
+    } else {
+      privacyReasons.push({ category, reasons: [...reasons] });
+    }
+  });
+  const dataCollected = [...base.dataCollected];
+  (added.dataCollected ?? []).forEach((data) => {
+    if (!dataCollected.some(({ type }) => type === data.type)) {
+      dataCollected.push(data);
+    }
+  });
+  return {
+    name: added.name ?? base.name,
+    capabilities: unique([...base.capabilities, ...(added.capabilities ?? [])]),
+    modules: { ...base.modules, ...added.modules },
+    plugins,
+    permissions: unique([...base.permissions, ...(added.permissions ?? [])]),
+    jsEntries: unique([...base.jsEntries, ...(added.jsEntries ?? [])]),
+    privacyReasons,
+    dataCollected,
+  };
+}
+
+const EMPTY_PROFILE = {
+  capabilities: [],
+  modules: {},
+  plugins: [],
+  permissions: [],
+  jsEntries: [],
+  privacyReasons: [],
+  dataCollected: [],
+};
+
+/**
+ * Everything a capability profile carries, with the profiles it extends folded in.
+ *
+ * @param {string} name The profile's name (shell.json `profile`).
+ * @returns {{ name, capabilities, modules, plugins, permissions, jsEntries, privacyReasons,
+ *   dataCollected }}
+ */
+function resolveProfile(name) {
+  if (!Object.prototype.hasOwnProperty.call(PROFILES, name)) {
+    throw new Error(
+      `Shell profile ${JSON.stringify(name)} does not exist. Use one of ${Object.keys(
+        PROFILES
+      ).join(', ')}.`
+    );
+  }
+  const entry = PROFILES[name];
+  const base = entry.extends ? resolveProfile(entry.extends) : EMPTY_PROFILE;
+  return mergeProfiles(base, { ...entry, name });
+}
+
+module.exports = {
+  DEV_ENTRY,
+  MICROPHONE_PERMISSION,
+  PROFILES,
+  RELEASE_PROFILES,
+  mergeProfiles,
+  pluginName,
+  resolveProfile,
+  SPEECH_RECOGNITION_PERMISSION,
+};

package/readShellConfig.js

@@ -0,0 +1,36 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/
+
+const fs = require('node:fs');
+const path = require('node:path');
+
+const checkShellConfig = require('./checkShellConfig.js');
+
+// The shell's config comes from shell.json, written for each shell at build: LOWDEFY_SHELL_CONFIG
+// is its path. Without it the shell is Lowdefy Dev (shell.dev.json), which opens `lowdefy dev`.
+// app.config.ts, metro.config.js and scripts/checkReleaseBundle.mjs read it here.
+function readShellConfig(env = process.env) {
+  const configPath = env.LOWDEFY_SHELL_CONFIG
+    ? path.resolve(env.LOWDEFY_SHELL_CONFIG)
+    : path.join(__dirname, 'shell.dev.json');
+  const shell = checkShellConfig({
+    configPath,
+    shell: JSON.parse(fs.readFileSync(configPath, 'utf8')),
+  });
+  return { configPath, shell };
+}
+
+module.exports = readShellConfig;

package/resolveShellPlugins.js

@@ -0,0 +1,109 @@
+/*
+  Copyright 2020-2026 Lowdefy, Inc
+
+  Licensed under the Apache License, Version 2.0 (the "License");
+  you may not use this file except in compliance with the License.
+  You may obtain a copy of the License at
+
+      http://www.apache.org/licenses/LICENSE-2.0
+
+  Unless required by applicable law or agreed to in writing, software
+  distributed under the License is distributed on an "AS IS" BASIS,
+  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  See the License for the specific language governing permissions and
+  limitations under the License.
+*/
+
+/*
+  A shell's plugins (shell.json `plugins`): npm packages that add native code beyond the shell's
+  capability profile (profiles.js). Each is a Lowdefy shell plugin, which exports:
+
+  - `./shell` (CommonJS): an entry shaped like one row of the profiles table, which app.config.ts
+    folds into the shell's resolved profile (applyShellPlugins.js):
+    - capabilities: the device features it gives the app.
+    - modules: { [package]: nativeModuleName }, the native modules it links. Never one
+      @lowdefy/shell carries itself (checkShellPlugins.js).
+    - plugins: the Expo config plugin entries it applies, or a function of the plugin's `options`
+      (shell.json `plugins[].options`) that returns them.
+    - permissions: the iOS Info.plist keys and Android permissions its modules ask for.
+    - privacyReasons: the required-reason APIs its modules use, as { category, reasons }.
+    - dataCollected: the data it lets the app collect, as { type, purpose }.
+  - `./native` (optional): its native types, as named exports `blocks` and `actions`, each
+    { [typeName]: implementation }. `lowdefy mobile config` writes src/plugins/appTypes.js in the
+    copied shell to import them, with the plugin's `typePrefix` applied (prefixTypes.js), and
+    src/plugins/types.js registers them after the built-in types.
+  - `./types` (optional): its type names as other plugins give them, with its native ones under
+    `native: { blocks, actions, blockMetas, icons }`. scripts/createTypeManifest.mjs adds
+    `native.blocks` and `native.actions` to the type manifest.
+
+  Its native modules and `expo` are optional peerDependencies, so the web server's install leaves
+  them out and `lowdefy mobile config` adds them to the shell project.
+*/
+
+function isObject(value) {
+  return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+
+const LIST_KEYS = ['capabilities', 'permissions', 'privacyReasons', 'dataCollected'];
+
+function loadEntry({ name, require }) {
+  try {
+    return require(`${name}/shell`);
+  } catch (error) {
+    throw new Error(
+      `Shell plugin "${name}" could not be loaded from "${name}/shell". A shell plugin exports "./shell", the native modules, config plugins, permissions, privacy reasons and data it brings. ${error.message}`,
+      { cause: error }
+    );
+  }
+}
+
+function checkEntry({ entry, name }) {
+  const where = `Shell plugin "${name}" "./shell"`;
+  if (!isObject(entry)) {
+    throw new Error(`${where} should export an object. Received ${JSON.stringify(entry)}.`);
+  }
+  LIST_KEYS.forEach((key) => {
+    if (entry[key] !== undefined && !Array.isArray(entry[key])) {
+      throw new Error(
+        `${where} "${key}" should be an array. Received ${JSON.stringify(entry[key])}.`
+      );
+    }
+  });
+  if (entry.modules !== undefined && !isObject(entry.modules)) {
+    throw new Error(
+      `${where} "modules" should be { [package]: nativeModuleName }. Received ${JSON.stringify(
+        entry.modules
+      )}.`
+    );
+  }
+  if (!Array.isArray(entry.plugins)) {
+    throw new Error(
+      `${where} "plugins" should be an array of config plugin entries, or a function of the plugin's options that returns one. Received ${JSON.stringify(
+        entry.plugins
+      )}.`
+    );
+  }
+}
+
+/**
+ * Loads the `./shell` entry of each plugin a shell lists, with a `plugins` function called with the
+ * plugin's options.
+ *
+ * @param {Object} params
+ * @param {Object} params.shell The shell config (shell.json).
+ * @param {Function} params.require Resolves the plugin packages: the shell project's own, so
+ *   `lowdefy mobile` resolves them from the copied project.
+ * @returns {{ name: string, version: string, typePrefix?: string, options?: Object, entry: Object }[]}
+ */
+function resolveShellPlugins({ shell, require }) {
+  return (shell.plugins ?? []).map(({ name, version, typePrefix, options }) => {
+    const loaded = loadEntry({ name, require });
+    const plugins =
+      typeof loaded?.plugins === 'function' ? loaded.plugins(options ?? {}) : loaded?.plugins ?? [];
+    const entry = isObject(loaded) ? { ...loaded, plugins } : loaded;
+    checkEntry({ entry, name });
+    return { name, version, typePrefix, options, entry };
+  });
+}
+
+module.exports = resolveShellPlugins;