@multiplatform.one/config 6.7.0 → 7.0.0

package/lib/index.js

@@ -1,5 +1,5 @@
-import { t as createViteConfig } from "./vite-C6psj1Lz.js";
-import { createStorybookViteConfig } from "./storybook.js";
+import { t as createViteConfig } from "./vite-DzOl_bpS.js";
+import { t as createStorybookViteConfig } from "./storybook-CrdwuS_Y.js";
 import { createVitestConfig } from "./vitest.js";
 
 export { createStorybookViteConfig, createViteConfig, createVitestConfig };

package/lib/storybook-CrdwuS_Y.js

@@ -0,0 +1,274 @@
+import { r as resolvePackageMainSource, t as discoverPublicPackageRoots } from "./workspacePublicPackages-COicQSj4.js";
+import { createRequire } from "node:module";
+import fs from "node:fs";
+import path from "node:path";
+
+//#region src/unexportedDepAliases.ts
+/**
+* Package subtrees that consumers deep-import but the publisher never declared
+* in its `exports` map.
+*
+* `one`'s `fork/SSRNavigationContainer` (every dist flavour plus its source)
+* imports three `@react-navigation/core` internals:
+*
+*   @react-navigation/core/lib/module/NavigationBuilderContext
+*   @react-navigation/core/lib/module/NavigationStateContext
+*   @react-navigation/core/lib/module/EnsureSingleNavigator
+*
+* The published package exports only "." and "./package.json", so those are
+* undeclared subpaths of a bare specifier — Node rejects them with
+* ERR_PACKAGE_PATH_NOT_EXPORTED and Rolldown (Vite 8) rejects them at build
+* time. Both are behaving correctly; the deep imports are the bug.
+*
+* vxrn papers over it by rewriting the dependency's package.json in place
+* (`vxrn` builtInDepPatches, which leaves a package.json.vxrn.original behind),
+* but that only runs when something invokes vxrn — never during a plain
+* `vite build` or `storybook build`, and never on a fresh CI install. Mapping
+* the subtree to its real directory resolves those files by path, which is
+* exactly where the missing exports entries would have pointed.
+*/
+const UNEXPORTED_SUBTREES = ["@react-navigation/core/lib/module"];
+/**
+* Vite `resolve.alias` entries that let known-undeclared package internals
+* resolve by filesystem path.
+*
+* Scoped to one subtree of one package: Vite alias keys match the whole
+* specifier or a `key + "/"` prefix, so sibling paths (`lib/moduleOther`) and
+* the package's own entry (`@react-navigation/core`) keep going through the
+* `exports` map. Nothing here disables exports enforcement globally.
+*
+* Entries are omitted when the package (or the target directory) is absent, so
+* consumers that do not install `one`/react-navigation are unaffected.
+*
+* @param root Directory whose `node_modules` the packages resolve from.
+*/
+function unexportedDepAliases(root = process.cwd()) {
+	const aliases = {};
+	const requireFrom = createRequire(path.join(root, "package.json"));
+	for (const specifier of UNEXPORTED_SUBTREES) {
+		const [pkgName, subpath] = splitPackageSubpath(specifier);
+		const pkgDir = resolvePackageDir(pkgName, root, requireFrom);
+		if (!pkgDir) continue;
+		const target = path.join(pkgDir, subpath);
+		if (fs.existsSync(target)) aliases[specifier] = target;
+	}
+	return aliases;
+}
+function splitPackageSubpath(specifier) {
+	const segments = specifier.split("/");
+	const nameLength = specifier.startsWith("@") ? 2 : 1;
+	return [segments.slice(0, nameLength).join("/"), segments.slice(nameLength).join("/")];
+}
+function resolvePackageDir(pkgName, root, requireFrom) {
+	try {
+		return path.dirname(requireFrom.resolve(`${pkgName}/package.json`));
+	} catch {
+		const hoisted = path.join(root, "node_modules", ...pkgName.split("/"));
+		return fs.existsSync(path.join(hoisted, "package.json")) ? hoisted : void 0;
+	}
+}
+
+//#endregion
+//#region src/storybook.ts
+/**
+* Creates a Vite configuration for Storybook in the multiplatform.one monorepo.
+*
+* Auto-discovers packages/ entries (multiplatform.one, package, and root
+* multiplatform.one scopes) and every workspace package under public/ with a
+* package.json name (including other scopes such as bitspur). Aliases point at
+* TypeScript source; sub-path exports come from each package exports field.
+*
+* Includes React plugin, node:async_hooks stub, and Storybook optimizeDeps.
+*
+* @example
+* ```ts
+* // apps/storybook/vite.config.ts
+* import { createStorybookViteConfig } from "@multiplatform.one/config/storybook";
+*
+* export default createStorybookViteConfig();
+* ```
+*/
+function createStorybookViteConfig(options = {}) {
+	const workspaceRoot = options.workspaceRoot || findWorkspaceRoot();
+	const aliases = {
+		...discoverPackageAliases(path.join(workspaceRoot, "packages")),
+		...discoverPublicPackageViteAliases(workspaceRoot),
+		...unexportedDepAliases(workspaceRoot)
+	};
+	if (options.aliases) Object.assign(aliases, options.aliases);
+	const sortedAliases = {};
+	for (const key of Object.keys(aliases).sort((a, b) => b.length - a.length)) sortedAliases[key] = aliases[key];
+	return {
+		define: {
+			"process.env.VITE_ENVIRONMENT": JSON.stringify("client"),
+			...options.define
+		},
+		resolve: {
+			conditions: ["default"],
+			extensions: [
+				".storybook.ts",
+				".storybook.tsx",
+				".storybook.js",
+				".storybook.jsx",
+				".web.ts",
+				".web.tsx",
+				".web.js",
+				".web.jsx",
+				".ts",
+				".tsx",
+				".js",
+				".jsx",
+				".mjs",
+				".json"
+			],
+			alias: sortedAliases
+		},
+		optimizeDeps: {
+			include: [
+				"react",
+				"react-dom",
+				"react-native-web",
+				"@tamagui/core",
+				"@tamagui/web",
+				"@tamagui/helpers-icon",
+				"tamagui",
+				"@mdx-js/react",
+				"i18next",
+				"react-i18next",
+				"d3-shape",
+				"d3-scale",
+				"@storybook-community/storybook-dark-mode",
+				"use-latest-callback",
+				"escape-string-regexp",
+				"use-sync-external-store",
+				"use-sync-external-store/with-selector",
+				"fast-deep-equal",
+				"color",
+				"query-string",
+				"react-is"
+			],
+			exclude: [
+				"one/dist/esm/vite/one-server-only.mjs",
+				"@storybook/preview-api",
+				"@storybook/theming",
+				"@react-navigation/core",
+				"@react-navigation/native",
+				"@react-navigation/routers",
+				"@react-navigation/elements",
+				"@react-navigation/bottom-tabs",
+				"@react-navigation/native-stack"
+			]
+		},
+		plugins: [nodeAsyncHooksStub(), ...options.plugins || []]
+	};
+}
+/**
+* Scans packages/ for workspace packages (multiplatform.one and package scopes)
+* and returns resolve aliases.
+*/
+function discoverPackageAliases(packagesDir) {
+	const aliases = {};
+	if (!fs.existsSync(packagesDir)) return aliases;
+	const entries = fs.readdirSync(packagesDir, { withFileTypes: true });
+	for (const entry of entries) {
+		if (!entry.isDirectory()) continue;
+		const pkgDir = path.join(packagesDir, entry.name);
+		const pkgJsonPath = path.join(pkgDir, "package.json");
+		if (!fs.existsSync(pkgJsonPath)) continue;
+		let pkgJson;
+		try {
+			pkgJson = JSON.parse(fs.readFileSync(pkgJsonPath, "utf-8"));
+		} catch {
+			continue;
+		}
+		const pkgName = pkgJson.name;
+		if (!pkgName) continue;
+		if (!pkgName.startsWith("@multiplatform.one/") && !pkgName.startsWith("@package/") && pkgName !== "multiplatform.one") continue;
+		mergePackageResolveAliases(pkgDir, pkgName, pkgJson, aliases);
+	}
+	return aliases;
+}
+/** All workspace packages under public/ (any npm scope), including export subpaths. */
+function discoverPublicPackageViteAliases(workspaceRoot) {
+	const aliases = {};
+	for (const [pkgName, pkgDir] of discoverPublicPackageRoots(workspaceRoot)) {
+		const pkgJsonPath = path.join(pkgDir, "package.json");
+		let pkgJson;
+		try {
+			pkgJson = JSON.parse(fs.readFileSync(pkgJsonPath, "utf-8"));
+		} catch {
+			continue;
+		}
+		mergePackageResolveAliases(pkgDir, pkgName, pkgJson, aliases);
+	}
+	return aliases;
+}
+function mergePackageResolveAliases(pkgDir, pkgName, pkgJson, aliases) {
+	const mainEntry = resolvePackageMainSource(pkgDir);
+	if (mainEntry) aliases[pkgName] = mainEntry;
+	if (pkgJson.exports && typeof pkgJson.exports === "object") for (const exportKey of Object.keys(pkgJson.exports)) {
+		if (exportKey === "." || exportKey === "./package.json") continue;
+		const subpath = exportKey.replace(/^\.\//, "");
+		if (path.extname(subpath)) {
+			const parentDir = path.dirname(subpath);
+			if (parentDir && parentDir !== ".") {
+				const fullParentDir = path.join(pkgDir, parentDir);
+				if (fs.existsSync(fullParentDir) && fs.statSync(fullParentDir).isDirectory()) aliases[`${pkgName}/${parentDir}`] = fullParentDir;
+			}
+		} else {
+			const resolved = resolveSubpathSource(pkgDir, subpath);
+			if (resolved) aliases[`${pkgName}/${subpath}`] = resolved;
+		}
+	}
+}
+function resolveSubpathSource(pkgDir, subpath) {
+	const candidates = [
+		path.join(pkgDir, "src", `${subpath}.storybook.ts`),
+		path.join(pkgDir, "src", `${subpath}.storybook.tsx`),
+		path.join(pkgDir, "src", `${subpath}.ts`),
+		path.join(pkgDir, "src", `${subpath}.tsx`),
+		path.join(pkgDir, "src", subpath, "index.storybook.ts"),
+		path.join(pkgDir, "src", subpath, "index.storybook.tsx"),
+		path.join(pkgDir, "src", subpath, "index.ts"),
+		path.join(pkgDir, "src", subpath, "index.tsx"),
+		path.join(pkgDir, `${subpath}.storybook.ts`),
+		path.join(pkgDir, `${subpath}.storybook.tsx`),
+		path.join(pkgDir, `${subpath}.ts`),
+		path.join(pkgDir, `${subpath}.tsx`),
+		path.join(pkgDir, subpath, "index.storybook.ts"),
+		path.join(pkgDir, subpath, "index.storybook.tsx"),
+		path.join(pkgDir, subpath, "index.ts"),
+		path.join(pkgDir, subpath, "index.tsx"),
+		path.join(pkgDir, subpath, "index.js")
+	];
+	for (const c of candidates) if (fs.existsSync(c)) return c;
+	const dirPath = path.join(pkgDir, subpath);
+	if (fs.existsSync(dirPath) && fs.statSync(dirPath).isDirectory()) return dirPath;
+}
+/** Virtual module plugin that stubs `node:async_hooks` for browser environments. */
+function nodeAsyncHooksStub() {
+	return {
+		name: "storybook:node-async-hooks-stub",
+		resolveId(id) {
+			if (id === "node:async_hooks") return "\0node:async_hooks";
+		},
+		load(id) {
+			if (id === "\0node:async_hooks") return "export class AsyncLocalStorage {}";
+		}
+	};
+}
+function findWorkspaceRoot() {
+	let dir = process.cwd();
+	while (dir !== path.dirname(dir)) {
+		if (fs.existsSync(path.join(dir, "pnpm-workspace.yaml"))) return dir;
+		const pkgJsonPath = path.join(dir, "package.json");
+		if (fs.existsSync(pkgJsonPath)) try {
+			if (JSON.parse(fs.readFileSync(pkgJsonPath, "utf-8")).workspaces) return dir;
+		} catch {}
+		dir = path.dirname(dir);
+	}
+	return process.cwd();
+}
+
+//#endregion
+export { createStorybookViteConfig as t };

package/lib/storybook.js

@@ -1,206 +1,3 @@
-import { r as resolvePackageMainSource, t as discoverPublicPackageRoots } from "./workspacePublicPackages-CkDbm3QT.js";
-import fs from "node:fs";
-import path from "node:path";
+import { t as createStorybookViteConfig } from "./storybook-CrdwuS_Y.js";
 
-//#region src/storybook.ts
-/**
-* Creates a Vite configuration for Storybook in the multiplatform.one monorepo.
-*
-* Auto-discovers packages/ entries (multiplatform.one, package, and root
-* multiplatform.one scopes) and every workspace package under public/ with a
-* package.json name (including other scopes such as bitspur). Aliases point at
-* TypeScript source; sub-path exports come from each package exports field.
-*
-* Includes React plugin, node:async_hooks stub, and Storybook optimizeDeps.
-*
-* @example
-* ```ts
-* // apps/storybook/vite.config.ts
-* import { createStorybookViteConfig } from "@multiplatform.one/config/storybook";
-*
-* export default createStorybookViteConfig();
-* ```
-*/
-function createStorybookViteConfig(options = {}) {
-	const workspaceRoot = options.workspaceRoot || findWorkspaceRoot();
-	const aliases = {
-		...discoverPackageAliases(path.join(workspaceRoot, "packages")),
-		...discoverPublicPackageViteAliases(workspaceRoot)
-	};
-	if (options.aliases) Object.assign(aliases, options.aliases);
-	const sortedAliases = {};
-	for (const key of Object.keys(aliases).sort((a, b) => b.length - a.length)) sortedAliases[key] = aliases[key];
-	return {
-		define: {
-			"process.env.VITE_ENVIRONMENT": JSON.stringify("client"),
-			...options.define
-		},
-		resolve: {
-			conditions: ["default"],
-			extensions: [
-				".storybook.ts",
-				".storybook.tsx",
-				".storybook.js",
-				".storybook.jsx",
-				".web.ts",
-				".web.tsx",
-				".web.js",
-				".web.jsx",
-				".ts",
-				".tsx",
-				".js",
-				".jsx",
-				".mjs",
-				".json"
-			],
-			alias: sortedAliases
-		},
-		optimizeDeps: {
-			include: [
-				"react",
-				"react-dom",
-				"react-native-web",
-				"@tamagui/core",
-				"@tamagui/web",
-				"@tamagui/helpers-icon",
-				"tamagui",
-				"@mdx-js/react",
-				"i18next",
-				"react-i18next",
-				"d3-shape",
-				"d3-scale",
-				"@storybook-community/storybook-dark-mode",
-				"use-latest-callback",
-				"escape-string-regexp",
-				"use-sync-external-store",
-				"use-sync-external-store/with-selector",
-				"fast-deep-equal",
-				"color",
-				"query-string",
-				"react-is"
-			],
-			exclude: [
-				"one/dist/esm/vite/one-server-only.mjs",
-				"@storybook/preview-api",
-				"@storybook/theming",
-				"@react-navigation/core",
-				"@react-navigation/native",
-				"@react-navigation/routers",
-				"@react-navigation/elements",
-				"@react-navigation/bottom-tabs",
-				"@react-navigation/native-stack"
-			]
-		},
-		plugins: [nodeAsyncHooksStub(), ...options.plugins || []]
-	};
-}
-/**
-* Scans packages/ for workspace packages (multiplatform.one and package scopes)
-* and returns resolve aliases.
-*/
-function discoverPackageAliases(packagesDir) {
-	const aliases = {};
-	if (!fs.existsSync(packagesDir)) return aliases;
-	const entries = fs.readdirSync(packagesDir, { withFileTypes: true });
-	for (const entry of entries) {
-		if (!entry.isDirectory()) continue;
-		const pkgDir = path.join(packagesDir, entry.name);
-		const pkgJsonPath = path.join(pkgDir, "package.json");
-		if (!fs.existsSync(pkgJsonPath)) continue;
-		let pkgJson;
-		try {
-			pkgJson = JSON.parse(fs.readFileSync(pkgJsonPath, "utf-8"));
-		} catch {
-			continue;
-		}
-		const pkgName = pkgJson.name;
-		if (!pkgName) continue;
-		if (!pkgName.startsWith("@multiplatform.one/") && !pkgName.startsWith("@package/") && pkgName !== "multiplatform.one") continue;
-		mergePackageResolveAliases(pkgDir, pkgName, pkgJson, aliases);
-	}
-	return aliases;
-}
-/** All workspace packages under public/ (any npm scope), including export subpaths. */
-function discoverPublicPackageViteAliases(workspaceRoot) {
-	const aliases = {};
-	for (const [pkgName, pkgDir] of discoverPublicPackageRoots(workspaceRoot)) {
-		const pkgJsonPath = path.join(pkgDir, "package.json");
-		let pkgJson;
-		try {
-			pkgJson = JSON.parse(fs.readFileSync(pkgJsonPath, "utf-8"));
-		} catch {
-			continue;
-		}
-		mergePackageResolveAliases(pkgDir, pkgName, pkgJson, aliases);
-	}
-	return aliases;
-}
-function mergePackageResolveAliases(pkgDir, pkgName, pkgJson, aliases) {
-	const mainEntry = resolvePackageMainSource(pkgDir);
-	if (mainEntry) aliases[pkgName] = mainEntry;
-	if (pkgJson.exports && typeof pkgJson.exports === "object") for (const exportKey of Object.keys(pkgJson.exports)) {
-		if (exportKey === "." || exportKey === "./package.json") continue;
-		const subpath = exportKey.replace(/^\.\//, "");
-		if (path.extname(subpath)) {
-			const parentDir = path.dirname(subpath);
-			if (parentDir && parentDir !== ".") {
-				const fullParentDir = path.join(pkgDir, parentDir);
-				if (fs.existsSync(fullParentDir) && fs.statSync(fullParentDir).isDirectory()) aliases[`${pkgName}/${parentDir}`] = fullParentDir;
-			}
-		} else {
-			const resolved = resolveSubpathSource(pkgDir, subpath);
-			if (resolved) aliases[`${pkgName}/${subpath}`] = resolved;
-		}
-	}
-}
-function resolveSubpathSource(pkgDir, subpath) {
-	const candidates = [
-		path.join(pkgDir, "src", `${subpath}.storybook.ts`),
-		path.join(pkgDir, "src", `${subpath}.storybook.tsx`),
-		path.join(pkgDir, "src", `${subpath}.ts`),
-		path.join(pkgDir, "src", `${subpath}.tsx`),
-		path.join(pkgDir, "src", subpath, "index.storybook.ts"),
-		path.join(pkgDir, "src", subpath, "index.storybook.tsx"),
-		path.join(pkgDir, "src", subpath, "index.ts"),
-		path.join(pkgDir, "src", subpath, "index.tsx"),
-		path.join(pkgDir, `${subpath}.storybook.ts`),
-		path.join(pkgDir, `${subpath}.storybook.tsx`),
-		path.join(pkgDir, `${subpath}.ts`),
-		path.join(pkgDir, `${subpath}.tsx`),
-		path.join(pkgDir, subpath, "index.storybook.ts"),
-		path.join(pkgDir, subpath, "index.storybook.tsx"),
-		path.join(pkgDir, subpath, "index.ts"),
-		path.join(pkgDir, subpath, "index.tsx"),
-		path.join(pkgDir, subpath, "index.js")
-	];
-	for (const c of candidates) if (fs.existsSync(c)) return c;
-	const dirPath = path.join(pkgDir, subpath);
-	if (fs.existsSync(dirPath) && fs.statSync(dirPath).isDirectory()) return dirPath;
-}
-/** Virtual module plugin that stubs `node:async_hooks` for browser environments. */
-function nodeAsyncHooksStub() {
-	return {
-		name: "storybook:node-async-hooks-stub",
-		resolveId(id) {
-			if (id === "node:async_hooks") return "\0node:async_hooks";
-		},
-		load(id) {
-			if (id === "\0node:async_hooks") return "export class AsyncLocalStorage {}";
-		}
-	};
-}
-function findWorkspaceRoot() {
-	let dir = process.cwd();
-	while (dir !== path.dirname(dir)) {
-		if (fs.existsSync(path.join(dir, "pnpm-workspace.yaml"))) return dir;
-		const pkgJsonPath = path.join(dir, "package.json");
-		if (fs.existsSync(pkgJsonPath)) try {
-			if (JSON.parse(fs.readFileSync(pkgJsonPath, "utf-8")).workspaces) return dir;
-		} catch {}
-		dir = path.dirname(dir);
-	}
-	return process.cwd();
-}
-
-//#endregion
 export { createStorybookViteConfig };

package/lib/{vite-C6psj1Lz.js → vite-DzOl_bpS.js}

@@ -1,4 +1,4 @@
-import { t as discoverPublicPackageRoots } from "./workspacePublicPackages-CkDbm3QT.js";
+import { t as discoverPublicPackageRoots } from "./workspacePublicPackages-COicQSj4.js";
 import { createRequire } from "node:module";
 import fs from "node:fs";
 import path from "node:path";
@@ -77,7 +77,7 @@ function lookupProjectRoot() {
 * ```
 */
 function createViteConfig(options = {}) {
-	const { projectRoot: _projectRoot, publicConfigKeys = [], tamagui = true, i18n = false, one = false, ssr, server, plugins: extraPlugins = [], externalReactRouter, ssrDeps, ssrEntries } = options;
+	const { projectRoot: _projectRoot, publicConfigKeys = [], tamagui = true, i18n = false, one = false, ssr, server, plugins: extraPlugins = [], externalReactRouter, ssrDeps, ssrEntries, ssrCjsExternal, nativeFixes } = options;
 	const projectRoot = _projectRoot || findProjectRoot();
 	dotenv.config({ path: path.resolve(projectRoot, ".env") });
 	if (publicConfigKeys.length > 0) process.env.VITE_MP_CONFIG = JSON.stringify(resolveConfig(publicConfigKeys));
@@ -89,6 +89,9 @@ function createViteConfig(options = {}) {
 		registerNativeEngineIoBrowserTransports();
 		registerNativeWorkspaceEntries();
 		registerNativePhosphorIcons();
+		if (nativeFixes?.protoShadow !== false) registerNativeProtoShadowFix();
+		if (nativeFixes?.web3Stub !== false) registerNativeWeb3Stub();
+		if (ssrCjsExternal !== false) vitePlugins.push(ssrCjsExternalFixPlugin([...DEFAULT_SSR_CJS_EXTERNAL, ...ssrCjsExternal ?? []]));
 	}
 	if (tamagui) {
 		const tamaguiOpts = typeof tamagui === "object" ? tamagui : {};
@@ -324,6 +327,111 @@ function registerNativeWorkspaceEntries() {
 		}
 	});
 }
+/**
+* CJS-only ids (no usable ESM build) that escape Vite's SSR dep optimizer and
+* hit the ESM evaluator ("module is not defined" / "exports is not defined")
+* unless Node's native CJS loader handles them. Union of the lists the
+* monorepo's apps/one and downstream consumer apps (desibox) carried as
+* app-side ssrExternalFix plugins; ids for packages an app never imports are
+* inert, so one shared default list is safe.
+*/
+const DEFAULT_SSR_CJS_EXTERNAL = [
+	"better-sqlite3",
+	"dotenv",
+	"color",
+	"use-sync-external-store",
+	"use-sync-external-store/shim",
+	"use-sync-external-store/shim/with-selector",
+	"highlight.js",
+	"highlight.js/lib/core",
+	"turndown",
+	"@mixmark-io/domino",
+	"lowlight",
+	"shallowequal",
+	"@emotion/is-prop-valid",
+	"hoist-non-react-statics",
+	"qrcode"
+];
+/**
+* Force-append CJS-only ids to `ssr.external`. The one() plugin REPLACES
+* ssr.external with its own list during the config hook, dropping anything
+* set statically by createViteConfig — configResolved runs after all config
+* hooks are merged, so appends here survive.
+*/
+function ssrCjsExternalFixPlugin(extras) {
+	return {
+		name: "multiplatform-ssr-cjs-external-fix",
+		configResolved(config) {
+			const external = config.ssr.external ?? [];
+			if (!Array.isArray(external)) return;
+			for (const e of extras) if (!external.includes(e)) external.push(e);
+			config.ssr.external = external;
+		}
+	};
+}
+/**
+* Restore Object.prototype methods shadowed by hoisted globals on NATIVE.
+*
+* vxrn's rolldown native mode emits the whole dev bundle as ONE classic
+* script and forces Hermes V1. Hermes V1 implements spec-compliant global
+* var hoisting, so a flattened module's top-level `var hasOwnProperty`
+* (e.g. acorn via an mdx pipeline) creates
+* `globalThis.hasOwnProperty = undefined` at parse time, shadowing
+* Object.prototype.hasOwnProperty for the entire runtime. React Native core
+* calls `global.hasOwnProperty()` during boot (FuseboxSessionObserver) and
+* dies with "undefined is not a function". Prepend a snippet that copies any
+* Object.prototype method back over an undefined shadowing own-property
+* before any module code runs — the shadowed vars are reassigned by their
+* own modules on init, so this only bridges the parse-to-init window.
+* Registered through globalThis.__vxrnAddNativePlugins (vxrn's native engine
+* ignores vite resolve/config). Web/SSR bundles are ESM (module-scoped vars)
+* and unaffected.
+*/
+function registerNativeProtoShadowFix() {
+	const g = globalThis;
+	const name = "vxrn-proto-shadow-fix";
+	g.__vxrnAddNativePlugins = g.__vxrnAddNativePlugins ?? [];
+	if (g.__vxrnAddNativePlugins.some((p) => p?.name === name)) return;
+	const snippet = "(function(){var p=Object.prototype,h=p.hasOwnProperty,ns=Object.getOwnPropertyNames(p);for(var i=0;i<ns.length;i++){var k=ns[i];if(typeof p[k]===\"function\"&&globalThis[k]===void 0&&h.call(globalThis,k)){try{globalThis[k]=p[k]}catch(e){}}}})();";
+	g.__vxrnAddNativePlugins.push({
+		name,
+		renderChunk(code) {
+			return {
+				code: `${snippet}\n${code}`,
+				map: null
+			};
+		}
+	});
+}
+/**
+* Redirect the OPTIONAL `@multiplatform.one/web3` native import to a no-op
+* shim on NATIVE when the package is not installed (see the nativeFixes
+* option docs). Rolldown leaves the unresolvable specifier as a bare dynamic
+* `import()` in the classic-script native bundle — Hermes rejects that at
+* lazy-compile time ("SyntaxError: Invalid expression encountered"), killing
+* the root _layout route. Web/SSR resolve the same specifier through vite's
+* normal pipeline and are unaffected.
+*/
+function registerNativeWeb3Stub() {
+	const g = globalThis;
+	const name = "vxrn-web3-stub";
+	g.__vxrnAddNativePlugins = g.__vxrnAddNativePlugins ?? [];
+	if (g.__vxrnAddNativePlugins.some((p) => p?.name === name)) return;
+	try {
+		__require.resolve("@multiplatform.one/web3", { paths: [findProjectRoot(), process.cwd()] });
+		return;
+	} catch {}
+	const here = path.dirname(new URL(import.meta.url).pathname);
+	const shim = [path.resolve(here, "shims/web3Stub.native.js"), path.resolve(here, "../src/shims/web3Stub.native.js")].find((candidate) => fs.existsSync(candidate));
+	if (!shim) return;
+	g.__vxrnAddNativePlugins.push({
+		name,
+		resolveId(id) {
+			if (id === "@multiplatform.one/web3/native" || id === "@multiplatform.one/web3") return shim;
+			return null;
+		}
+	});
+}
 function findProjectRoot() {
 	try {
 		const { execSync } = __require("node:child_process");

package/lib/vite.js

@@ -1,4 +1,4 @@
-import { t as createViteConfig } from "./vite-C6psj1Lz.js";
-import { n as publicPackageViteSourceAliases, t as discoverPublicPackageRoots } from "./workspacePublicPackages-CkDbm3QT.js";
+import { t as createViteConfig } from "./vite-DzOl_bpS.js";
+import { n as publicPackageViteSourceAliases, t as discoverPublicPackageRoots } from "./workspacePublicPackages-COicQSj4.js";
 
 export { createViteConfig, discoverPublicPackageRoots, publicPackageViteSourceAliases };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@multiplatform.one/config",
-  "version": "6.7.0",
+  "version": "7.0.0",
   "description": "Shared build and test configuration presets for multiplatform.one",
   "keywords": [
     "config",
@@ -80,14 +80,14 @@
     "access": "public"
   },
   "dependencies": {
-    "@tamagui/vite-plugin": "2.0.0-rc.41",
+    "@tamagui/vite-plugin": "2.7.6",
     "@vitejs/plugin-react": "^6.0.1",
     "dotenv": "^17.4.2",
     "vite": "^8.0.10",
     "vite-plugin-external": "^6.2.2",
     "vite-plugin-i18next-loader": "^3.1.3",
     "vitest": "^4.1.5",
-    "@multiplatform.one/utils": "6.7.0"
+    "@multiplatform.one/utils": "7.0.0"
   },
   "devDependencies": {
     "tsdown": "^0.21.10",
@@ -110,6 +110,7 @@
   },
   "scripts": {
     "typecheck": "tsgo --noEmit",
-    "build": "rm -rf lib types 2>/dev/null && tsc -p tsconfig.build.json && tsdown"
+    "build": "rm -rf lib types 2>/dev/null && tsc -p tsconfig.build.json && tsdown",
+    "test": "vitest run --coverage --coverage.provider=v8 --coverage.reporter=text --coverage.reporter=lcov --coverage.reporter=html"
   }
 }

package/src/shims/web3Stub.native.js

@@ -0,0 +1,18 @@
+/**
+ * No-op `@multiplatform.one/web3(/native)` shim for NATIVE runs.
+ *
+ * `@multiplatform.one/core`'s loadWalletProvider.native.ts lazily
+ * `import("@multiplatform.one/web3/native")` — an OPTIONAL package many apps
+ * do not install. vxrn's rolldown native bundler leaves the unresolvable
+ * specifier as a bare dynamic `import()` expression in the classic-script
+ * bundle, which Hermes rejects at lazy-compile time with "SyntaxError:
+ * Invalid expression encountered", killing the root _layout route.
+ * createViteConfig's registerNativeWeb3Stub redirects the specifier here so
+ * the import inlines and parses; it auto-skips when web3 is installed.
+ *
+ * Plain JS (not TS): vxrn's native pipeline does not transform node_modules
+ * TypeScript.
+ */
+export function WalletProvider({ children }) {
+  return children ?? null;
+}

package/src/storybook.ts

@@ -1,6 +1,7 @@
 import fs from "node:fs";
 import path from "node:path";
 import type { Plugin, UserConfig } from "vite";
+import { unexportedDepAliases } from "./unexportedDepAliases.js";
 import { discoverPublicPackageRoots, resolvePackageMainSource } from "./workspacePublicPackages.js";
 
 export interface CreateStorybookViteConfigOptions {
@@ -54,6 +55,7 @@ export function createStorybookViteConfig(
   const aliases = {
     ...discoverPackageAliases(packagesDir),
     ...discoverPublicPackageViteAliases(workspaceRoot),
+    ...unexportedDepAliases(workspaceRoot),
   };
 
   if (options.aliases) {
@@ -81,10 +83,18 @@ export function createStorybookViteConfig(
       // transitive deps (color, query-string, etc.) to be served raw,
       // causing "require is not defined" / missing-export errors in the browser.
       //
-      // "default" must be included: Rolldown 8 strictly enforces exports fields
-      // and requires "default" in the conditions list to resolve unconditional
-      // (plain-string) sub-path exports, e.g. @react-navigation/core's
-      // "./lib/module/EnsureSingleNavigator" entry.
+      // This list does NOT resolve @react-navigation/core's internals. Those are
+      // undeclared subpaths, so no condition can reach them — see
+      // unexportedDepAliases, which maps them by filesystem path instead.
+      //
+      // "default" must be included: Rolldown 8 strictly enforces exports
+      // fields and needs "default" in the conditions list to reach a target
+      // that is only reachable through the default branch — including the
+      // "./lib/module/*" subpath patches/@react-navigation__core@7.17.2.patch
+      // adds, which one's SSRNavigationContainer fork deep-imports. Stock
+      // 7.17.2 exports only "." and "./package.json", so no condition list
+      // alone resolves those files; the patch is what makes them reachable
+      // and this entry is what lets the resolver pick its default target.
       conditions: ["default"],
       extensions: [
         ".storybook.ts",
@@ -141,11 +151,11 @@ export function createStorybookViteConfig(
         "query-string",
         "react-is",
       ],
-      // Rolldown rc.10+ enforces exports fields strictly — @react-navigation/core has
-      // internal files (EnsureSingleNavigator etc.) not listed in its exports map,
-      // causing dep pre-bundle to crash. Exclude the nav packages from pre-bundling;
-      // their CJS transitive deps (color, use-sync-external-store, fast-deep-equal)
-      // are already explicitly in include above so they are still pre-bundled.
+      // Keeps the nav packages out of dep pre-bundling; their CJS transitive deps
+      // (color, use-sync-external-store, fast-deep-equal) are already explicitly in
+      // include above so they are still pre-bundled. Note this only covers the dev
+      // optimizer — the undeclared @react-navigation/core internals that `one`
+      // deep-imports are handled for dev AND build by unexportedDepAliases.
       exclude: [
         "one/dist/esm/vite/one-server-only.mjs",
         "@storybook/preview-api",

package/src/unexportedDepAliases.spec.ts

@@ -0,0 +1,90 @@
+import fs from "node:fs";
+import { createRequire } from "node:module";
+import os from "node:os";
+import path from "node:path";
+import { afterAll, beforeAll, describe, expect, it } from "vitest";
+import { unexportedDepAliases } from "./unexportedDepAliases";
+
+/**
+ * Builds a throwaway tree carrying the PUBLISHED @react-navigation/core exports
+ * map — the one CI installs, before vxrn rewrites it in place. The real tree on
+ * a dev machine is usually already patched, so asserting against it would prove
+ * nothing about the state this alias exists for.
+ */
+function writePristineFixture(root: string, { withPackage = true } = {}) {
+  fs.mkdirSync(root, { recursive: true });
+  fs.writeFileSync(path.join(root, "package.json"), JSON.stringify({ name: "fixture-root" }));
+  if (!withPackage) return;
+
+  const pkgDir = path.join(root, "node_modules", "@react-navigation", "core");
+  fs.mkdirSync(path.join(pkgDir, "lib", "module"), { recursive: true });
+  fs.writeFileSync(
+    path.join(pkgDir, "package.json"),
+    JSON.stringify({
+      name: "@react-navigation/core",
+      version: "7.17.2",
+      main: "./lib/module/index.js",
+      // Verbatim shape of the published manifest: no ./lib/module/* entries.
+      exports: { ".": { default: "./lib/module/index.js" }, "./package.json": "./package.json" },
+    }),
+  );
+  fs.writeFileSync(
+    path.join(pkgDir, "lib", "module", "EnsureSingleNavigator.js"),
+    "export const SingleNavigatorContext = {};\n",
+  );
+  fs.writeFileSync(path.join(pkgDir, "lib", "module", "index.js"), "export const x = 1;\n");
+}
+
+describe("unexportedDepAliases", () => {
+  // realpath: macOS /var is a symlink to /private/var, and require.resolve
+  // reports the resolved path.
+  const root = fs.realpathSync(fs.mkdtempSync(path.join(os.tmpdir(), "unexported-dep-aliases-")));
+  const deepSpecifier = "@react-navigation/core/lib/module/EnsureSingleNavigator";
+
+  beforeAll(() => writePristineFixture(root));
+  afterAll(() => fs.rmSync(root, { recursive: true, force: true }));
+
+  it("positive control: the published exports map really does reject the deep import", () => {
+    // Without this, every assertion below could be green against a package that
+    // resolves fine on its own — i.e. an alias guarding nothing.
+    const requireFrom = createRequire(path.join(root, "package.json"));
+    expect(() => requireFrom.resolve(deepSpecifier)).toThrowError(
+      expect.objectContaining({ code: "ERR_PACKAGE_PATH_NOT_EXPORTED" }),
+    );
+  });
+
+  it("maps the internals `one` deep-imports onto a directory that holds them", () => {
+    const aliases = unexportedDepAliases(root);
+    const target = aliases["@react-navigation/core/lib/module"];
+
+    expect(target).toBe(
+      path.join(root, "node_modules", "@react-navigation", "core", "lib", "module"),
+    );
+    // The alias is only worth anything if rewriting the specifier lands on a
+    // real file — Vite replaces the matched key and resolves the rest by path.
+    const rewritten = deepSpecifier.replace("@react-navigation/core/lib/module", target);
+    expect(fs.existsSync(`${rewritten}.js`)).toBe(true);
+  });
+
+  it("scopes the alias to the subtree, leaving the package entry on its exports map", () => {
+    const keys = Object.keys(unexportedDepAliases(root));
+
+    // Vite matches an alias key exactly or as a `key + "/"` prefix. A bare
+    // "@react-navigation/core" key would swallow the package's own entry, and a
+    // trailing slash would stop the key matching at all.
+    expect(keys).toEqual(["@react-navigation/core/lib/module"]);
+    expect(keys[0]).not.toMatch(/\/$/);
+  });
+
+  it("emits nothing when the package is not installed", () => {
+    const bare = fs.realpathSync(
+      fs.mkdtempSync(path.join(os.tmpdir(), "unexported-dep-aliases-bare-")),
+    );
+    writePristineFixture(bare, { withPackage: false });
+    try {
+      expect(unexportedDepAliases(bare)).toEqual({});
+    } finally {
+      fs.rmSync(bare, { recursive: true, force: true });
+    }
+  });
+});

package/src/unexportedDepAliases.ts

@@ -0,0 +1,77 @@
+import fs from "node:fs";
+import { createRequire } from "node:module";
+import path from "node:path";
+
+/**
+ * Package subtrees that consumers deep-import but the publisher never declared
+ * in its `exports` map.
+ *
+ * `one`'s `fork/SSRNavigationContainer` (every dist flavour plus its source)
+ * imports three `@react-navigation/core` internals:
+ *
+ *   @react-navigation/core/lib/module/NavigationBuilderContext
+ *   @react-navigation/core/lib/module/NavigationStateContext
+ *   @react-navigation/core/lib/module/EnsureSingleNavigator
+ *
+ * The published package exports only "." and "./package.json", so those are
+ * undeclared subpaths of a bare specifier — Node rejects them with
+ * ERR_PACKAGE_PATH_NOT_EXPORTED and Rolldown (Vite 8) rejects them at build
+ * time. Both are behaving correctly; the deep imports are the bug.
+ *
+ * vxrn papers over it by rewriting the dependency's package.json in place
+ * (`vxrn` builtInDepPatches, which leaves a package.json.vxrn.original behind),
+ * but that only runs when something invokes vxrn — never during a plain
+ * `vite build` or `storybook build`, and never on a fresh CI install. Mapping
+ * the subtree to its real directory resolves those files by path, which is
+ * exactly where the missing exports entries would have pointed.
+ */
+const UNEXPORTED_SUBTREES: readonly string[] = ["@react-navigation/core/lib/module"];
+
+/**
+ * Vite `resolve.alias` entries that let known-undeclared package internals
+ * resolve by filesystem path.
+ *
+ * Scoped to one subtree of one package: Vite alias keys match the whole
+ * specifier or a `key + "/"` prefix, so sibling paths (`lib/moduleOther`) and
+ * the package's own entry (`@react-navigation/core`) keep going through the
+ * `exports` map. Nothing here disables exports enforcement globally.
+ *
+ * Entries are omitted when the package (or the target directory) is absent, so
+ * consumers that do not install `one`/react-navigation are unaffected.
+ *
+ * @param root Directory whose `node_modules` the packages resolve from.
+ */
+export function unexportedDepAliases(root: string = process.cwd()): Record<string, string> {
+  const aliases: Record<string, string> = {};
+  const requireFrom = createRequire(path.join(root, "package.json"));
+
+  for (const specifier of UNEXPORTED_SUBTREES) {
+    const [pkgName, subpath] = splitPackageSubpath(specifier);
+    const pkgDir = resolvePackageDir(pkgName, root, requireFrom);
+    if (!pkgDir) continue;
+    const target = path.join(pkgDir, subpath);
+    if (fs.existsSync(target)) aliases[specifier] = target;
+  }
+
+  return aliases;
+}
+
+function splitPackageSubpath(specifier: string): [pkgName: string, subpath: string] {
+  const segments = specifier.split("/");
+  const nameLength = specifier.startsWith("@") ? 2 : 1;
+  return [segments.slice(0, nameLength).join("/"), segments.slice(nameLength).join("/")];
+}
+
+function resolvePackageDir(
+  pkgName: string,
+  root: string,
+  requireFrom: NodeRequire,
+): string | undefined {
+  try {
+    return path.dirname(requireFrom.resolve(`${pkgName}/package.json`));
+  } catch {
+    // Packages that don't export "./package.json" can't be resolved that way.
+    const hoisted = path.join(root, "node_modules", ...pkgName.split("/"));
+    return fs.existsSync(path.join(hoisted, "package.json")) ? hoisted : undefined;
+  }
+}

package/src/vite.spec.ts

@@ -0,0 +1,117 @@
+/**
+ * createViteConfig — absorbed consumer workarounds (ssr CJS externals +
+ * native Hermes fixes). These used to live per-app (apps/one and downstream
+ * consumer vite configs); the spec pins the shared defaults and their
+ * escape hatches.
+ */
+
+import { beforeEach, describe, expect, it } from "vitest";
+import type { Plugin } from "vite";
+import { createViteConfig } from "./vite.js";
+
+type NativePlugin = {
+  name?: string;
+  renderChunk?: (code: string) => { code: string; map: null };
+};
+
+const globalWithNativePlugins = globalThis as unknown as {
+  __vxrnAddNativePlugins?: NativePlugin[];
+};
+
+function findPlugin(config: ReturnType<typeof createViteConfig>, name: string): Plugin | undefined {
+  return (config.plugins as Plugin[]).flat().find((p) => p && (p as Plugin).name === name) as
+    | Plugin
+    | undefined;
+}
+
+function runConfigResolved(plugin: Plugin, ssrExternal: string[] | boolean | undefined) {
+  const fakeConfig = { ssr: { external: ssrExternal } } as any;
+  (plugin.configResolved as any)(fakeConfig);
+  return fakeConfig.ssr.external;
+}
+
+beforeEach(() => {
+  // Native fix registration is global and deduped — reset between tests.
+  delete globalWithNativePlugins.__vxrnAddNativePlugins;
+});
+
+describe("ssrCjsExternal", () => {
+  it("appends the default CJS-only ids to ssr.external after one() replaces the list", () => {
+    const config = createViteConfig({ one: true });
+    const plugin = findPlugin(config, "multiplatform-ssr-cjs-external-fix");
+    expect(plugin).toBeDefined();
+    // Simulate one() having replaced ssr.external with its own list.
+    const external = runConfigResolved(plugin!, ["one-framework-entry"]) as string[];
+    expect(external).toContain("one-framework-entry");
+    expect(external).toContain("use-sync-external-store");
+    expect(external).toContain("use-sync-external-store/shim/with-selector");
+    expect(external).toContain("highlight.js/lib/core");
+    expect(external).toContain("turndown");
+    expect(external).toContain("@mixmark-io/domino");
+    expect(external).toContain("qrcode");
+  });
+
+  it("does not duplicate ids already present", () => {
+    const config = createViteConfig({ one: true });
+    const plugin = findPlugin(config, "multiplatform-ssr-cjs-external-fix");
+    const external = runConfigResolved(plugin!, ["use-sync-external-store"]) as string[];
+    expect(external.filter((e) => e === "use-sync-external-store")).toHaveLength(1);
+  });
+
+  it("extends the default list with consumer extras", () => {
+    const config = createViteConfig({ one: true, ssrCjsExternal: ["my-cjs-dep"] });
+    const plugin = findPlugin(config, "multiplatform-ssr-cjs-external-fix");
+    const external = runConfigResolved(plugin!, []) as string[];
+    expect(external).toContain("my-cjs-dep");
+    expect(external).toContain("use-sync-external-store");
+  });
+
+  it("leaves ssr.external: true untouched (everything already external)", () => {
+    const config = createViteConfig({ one: true });
+    const plugin = findPlugin(config, "multiplatform-ssr-cjs-external-fix");
+    expect(runConfigResolved(plugin!, true)).toBe(true);
+  });
+
+  it("can be disabled with ssrCjsExternal: false", () => {
+    const config = createViteConfig({ one: true, ssrCjsExternal: false });
+    expect(findPlugin(config, "multiplatform-ssr-cjs-external-fix")).toBeUndefined();
+  });
+
+  it("is not added without the one framework", () => {
+    const config = createViteConfig({ one: false });
+    expect(findPlugin(config, "multiplatform-ssr-cjs-external-fix")).toBeUndefined();
+  });
+});
+
+describe("nativeFixes.protoShadow", () => {
+  it("registers the Hermes proto-shadow renderChunk fix by default", () => {
+    createViteConfig({ one: true });
+    const plugin = globalWithNativePlugins.__vxrnAddNativePlugins?.find(
+      (p) => p.name === "vxrn-proto-shadow-fix",
+    );
+    expect(plugin).toBeDefined();
+    const result = plugin!.renderChunk!("var x = 1;");
+    // The restore snippet is PREPENDED so it runs before any module code.
+    expect(result.code.endsWith("var x = 1;")).toBe(true);
+    expect(result.code).toContain("Object.prototype");
+    expect(result.code).toContain("hasOwnProperty");
+  });
+
+  it("can be disabled with nativeFixes.protoShadow: false", () => {
+    createViteConfig({ one: true, nativeFixes: { protoShadow: false } });
+    expect(
+      globalWithNativePlugins.__vxrnAddNativePlugins?.some(
+        (p) => p.name === "vxrn-proto-shadow-fix",
+      ),
+    ).toBeFalsy();
+  });
+});
+
+describe("nativeFixes.web3Stub", () => {
+  it("auto-skips when @multiplatform.one/web3 is installed (monorepo has it)", () => {
+    createViteConfig({ one: true });
+    expect(
+      globalWithNativePlugins.__vxrnAddNativePlugins?.some((p) => p.name === "vxrn-web3-stub"),
+    ).toBeFalsy();
+  });
+});

package/src/vite.ts

@@ -114,6 +114,41 @@ export interface CreateViteConfigOptions {
    * Only used when `one` is enabled.
    */
   ssrEntries?: string[];
+
+  /**
+   * CJS-only package ids force-appended to `ssr.external` AFTER the one()
+   * plugin replaces the list (via configResolved), so Node's native CJS
+   * loader handles them instead of Vite's ESM evaluator (which chokes on
+   * `module.exports` with "module is not defined"). Only used when `one` is
+   * enabled. Defaults to a list covering use-sync-external-store,
+   * highlight.js, turndown, and friends; pass an array to EXTEND the default
+   * list or `false` to disable entirely.
+   */
+  ssrCjsExternal?: string[] | false;
+
+  /**
+   * Native (vxrn rolldown / Hermes) workaround toggles. Only used when `one`
+   * is enabled; all default to true.
+   */
+  nativeFixes?: {
+    /**
+     * Prepend a snippet to the classic-script native bundle that restores
+     * Object.prototype methods shadowed by hoisted top-level vars (Hermes V1
+     * spec-compliant var hoisting turns a flattened module's
+     * `var hasOwnProperty` into `globalThis.hasOwnProperty = undefined` at
+     * parse time, and React Native core dies at boot calling it).
+     */
+    protoShadow?: boolean;
+    /**
+     * When `@multiplatform.one/web3` is NOT installed, redirect the OPTIONAL
+     * `@multiplatform.one/web3/native` import (from core's
+     * loadWalletProvider.native.ts) to a no-op shim — rolldown otherwise
+     * leaves the unresolvable specifier as a bare dynamic `import()` in the
+     * classic-script bundle, which Hermes rejects at lazy-compile time.
+     * Auto-skipped when web3 is installed.
+     */
+    web3Stub?: boolean;
+  };
 }
 
 /**
@@ -150,6 +185,8 @@ export function createViteConfig(options: CreateViteConfigOptions = {}): UserCon
     externalReactRouter,
     ssrDeps,
     ssrEntries,
+    ssrCjsExternal,
+    nativeFixes,
   } = options;
 
   const projectRoot = _projectRoot || findProjectRoot();
@@ -189,6 +226,19 @@ export function createViteConfig(options: CreateViteConfigOptions = {}): UserCon
     // react-native-svg, so source keeps importing @phosphor-icons/react and
     // native transparently gets the RN implementation.
     registerNativePhosphorIcons();
+    // Hermes V1 hoisted-var Object.prototype shadow fix (see the nativeFixes
+    // option docs). Every rolldown classic-script native bundle is exposed.
+    if (nativeFixes?.protoShadow !== false) registerNativeProtoShadowFix();
+    // Optional-web3 stub for apps that don't install @multiplatform.one/web3
+    // (auto-skipped when the package resolves).
+    if (nativeFixes?.web3Stub !== false) registerNativeWeb3Stub();
+    // CJS-only ids must land on ssr.external AFTER the one() plugin replaces
+    // the list during config — configResolved runs last, so the appends stick.
+    if (ssrCjsExternal !== false) {
+      vitePlugins.push(
+        ssrCjsExternalFixPlugin([...DEFAULT_SSR_CJS_EXTERNAL, ...(ssrCjsExternal ?? [])]),
+      );
+    }
   }
 
   // Tamagui plugin
@@ -571,6 +621,132 @@ function registerNativeWorkspaceEntries(): void {
   });
 }
 
+/**
+ * CJS-only ids (no usable ESM build) that escape Vite's SSR dep optimizer and
+ * hit the ESM evaluator ("module is not defined" / "exports is not defined")
+ * unless Node's native CJS loader handles them. Union of the lists the
+ * monorepo's apps/one and downstream consumer apps (desibox) carried as
+ * app-side ssrExternalFix plugins; ids for packages an app never imports are
+ * inert, so one shared default list is safe.
+ */
+const DEFAULT_SSR_CJS_EXTERNAL = [
+  "better-sqlite3",
+  "dotenv",
+  "color",
+  "use-sync-external-store",
+  "use-sync-external-store/shim",
+  "use-sync-external-store/shim/with-selector",
+  "highlight.js",
+  "highlight.js/lib/core",
+  "turndown",
+  "@mixmark-io/domino",
+  "lowlight",
+  // CJS-only (module.exports / exports, no usable ESM build) pulled in by
+  // connectkit/wagmi/framer-motion.
+  "shallowequal",
+  "@emotion/is-prop-valid",
+  "hoist-non-react-statics",
+  "qrcode",
+];
+
+/**
+ * Force-append CJS-only ids to `ssr.external`. The one() plugin REPLACES
+ * ssr.external with its own list during the config hook, dropping anything
+ * set statically by createViteConfig — configResolved runs after all config
+ * hooks are merged, so appends here survive.
+ */
+function ssrCjsExternalFixPlugin(extras: string[]): Plugin {
+  return {
+    name: "multiplatform-ssr-cjs-external-fix",
+    configResolved(config) {
+      const external = config.ssr.external ?? [];
+      if (!Array.isArray(external)) return; // true = everything external already
+      for (const e of extras) {
+        if (!external.includes(e)) external.push(e);
+      }
+      (config.ssr as { external?: string[] | boolean }).external = external;
+    },
+  };
+}
+
+/**
+ * Restore Object.prototype methods shadowed by hoisted globals on NATIVE.
+ *
+ * vxrn's rolldown native mode emits the whole dev bundle as ONE classic
+ * script and forces Hermes V1. Hermes V1 implements spec-compliant global
+ * var hoisting, so a flattened module's top-level `var hasOwnProperty`
+ * (e.g. acorn via an mdx pipeline) creates
+ * `globalThis.hasOwnProperty = undefined` at parse time, shadowing
+ * Object.prototype.hasOwnProperty for the entire runtime. React Native core
+ * calls `global.hasOwnProperty()` during boot (FuseboxSessionObserver) and
+ * dies with "undefined is not a function". Prepend a snippet that copies any
+ * Object.prototype method back over an undefined shadowing own-property
+ * before any module code runs — the shadowed vars are reassigned by their
+ * own modules on init, so this only bridges the parse-to-init window.
+ * Registered through globalThis.__vxrnAddNativePlugins (vxrn's native engine
+ * ignores vite resolve/config). Web/SSR bundles are ESM (module-scoped vars)
+ * and unaffected.
+ */
+function registerNativeProtoShadowFix(): void {
+  const g = globalThis as unknown as { __vxrnAddNativePlugins?: unknown[] };
+  const name = "vxrn-proto-shadow-fix";
+  g.__vxrnAddNativePlugins = g.__vxrnAddNativePlugins ?? [];
+  if (g.__vxrnAddNativePlugins.some((p) => (p as { name?: string })?.name === name)) return;
+  const snippet =
+    `(function(){var p=Object.prototype,h=p.hasOwnProperty,ns=Object.getOwnPropertyNames(p);` +
+    `for(var i=0;i<ns.length;i++){var k=ns[i];` +
+    `if(typeof p[k]==="function"&&globalThis[k]===void 0&&h.call(globalThis,k)){` +
+    `try{globalThis[k]=p[k]}catch(e){}}}})();`;
+  g.__vxrnAddNativePlugins.push({
+    name,
+    renderChunk(code: string) {
+      return { code: `${snippet}\n${code}`, map: null };
+    },
+  });
+}
+
+/**
+ * Redirect the OPTIONAL `@multiplatform.one/web3` native import to a no-op
+ * shim on NATIVE when the package is not installed (see the nativeFixes
+ * option docs). Rolldown leaves the unresolvable specifier as a bare dynamic
+ * `import()` in the classic-script native bundle — Hermes rejects that at
+ * lazy-compile time ("SyntaxError: Invalid expression encountered"), killing
+ * the root _layout route. Web/SSR resolve the same specifier through vite's
+ * normal pipeline and are unaffected.
+ */
+function registerNativeWeb3Stub(): void {
+  const g = globalThis as unknown as { __vxrnAddNativePlugins?: unknown[] };
+  const name = "vxrn-web3-stub";
+  g.__vxrnAddNativePlugins = g.__vxrnAddNativePlugins ?? [];
+  if (g.__vxrnAddNativePlugins.some((p) => (p as { name?: string })?.name === name)) return;
+  try {
+    // web3 installed — its real native entry resolves; no stub needed.
+    require.resolve("@multiplatform.one/web3", { paths: [findProjectRoot(), process.cwd()] });
+    return;
+  } catch {
+    // not installed — stub below
+  }
+  // The shim ships as plain JS (vxrn does not transform node_modules TS).
+  // Resolve it relative to this module: `src/shims/` when running from
+  // source, `../src/shims/` from the built `lib/` bundle (src ships in the
+  // published tarball).
+  const here = path.dirname(new URL(import.meta.url).pathname);
+  const shim = [
+    path.resolve(here, "shims/web3Stub.native.js"),
+    path.resolve(here, "../src/shims/web3Stub.native.js"),
+  ].find((candidate) => fs.existsSync(candidate));
+  if (!shim) return;
+  g.__vxrnAddNativePlugins.push({
+    name,
+    resolveId(id: string) {
+      if (id === "@multiplatform.one/web3/native" || id === "@multiplatform.one/web3") {
+        return shim;
+      }
+      return null;
+    },
+  });
+}
+
 function findProjectRoot(): string {
   try {
     const { execSync } = require("node:child_process");

package/types/storybook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storybook.d.ts","sourceRoot":"","sources":["../src/storybook.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAU,UAAU,EAAE,MAAM,MAAM,CAAC;AAG/C,MAAM,WAAW,gCAAgC;IAC/C;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEjC;;OAEG;IACH,OAAO,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;IAEhC;;OAEG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,GAAE,gCAAqC,GAC7C,UAAU,CAiHZ"}
+{"version":3,"file":"storybook.d.ts","sourceRoot":"","sources":["../src/storybook.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAU,UAAU,EAAE,MAAM,MAAM,CAAC;AAI/C,MAAM,WAAW,gCAAgC;IAC/C;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEjC;;OAEG;IACH,OAAO,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;IAEhC;;OAEG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;CAC/B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,GAAE,gCAAqC,GAC7C,UAAU,CA0HZ"}

package/types/unexportedDepAliases.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Vite `resolve.alias` entries that let known-undeclared package internals
+ * resolve by filesystem path.
+ *
+ * Scoped to one subtree of one package: Vite alias keys match the whole
+ * specifier or a `key + "/"` prefix, so sibling paths (`lib/moduleOther`) and
+ * the package's own entry (`@react-navigation/core`) keep going through the
+ * `exports` map. Nothing here disables exports enforcement globally.
+ *
+ * Entries are omitted when the package (or the target directory) is absent, so
+ * consumers that do not install `one`/react-navigation are unaffected.
+ *
+ * @param root Directory whose `node_modules` the packages resolve from.
+ */
+export declare function unexportedDepAliases(root?: string): Record<string, string>;
+//# sourceMappingURL=unexportedDepAliases.d.ts.map

package/types/unexportedDepAliases.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unexportedDepAliases.d.ts","sourceRoot":"","sources":["../src/unexportedDepAliases.ts"],"names":[],"mappings":"AA6BA;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,GAAE,MAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAazF"}

package/types/vite.d.ts

@@ -95,6 +95,39 @@ export interface CreateViteConfigOptions {
      * Only used when `one` is enabled.
      */
     ssrEntries?: string[];
+    /**
+     * CJS-only package ids force-appended to `ssr.external` AFTER the one()
+     * plugin replaces the list (via configResolved), so Node's native CJS
+     * loader handles them instead of Vite's ESM evaluator (which chokes on
+     * `module.exports` with "module is not defined"). Only used when `one` is
+     * enabled. Defaults to a list covering use-sync-external-store,
+     * highlight.js, turndown, and friends; pass an array to EXTEND the default
+     * list or `false` to disable entirely.
+     */
+    ssrCjsExternal?: string[] | false;
+    /**
+     * Native (vxrn rolldown / Hermes) workaround toggles. Only used when `one`
+     * is enabled; all default to true.
+     */
+    nativeFixes?: {
+        /**
+         * Prepend a snippet to the classic-script native bundle that restores
+         * Object.prototype methods shadowed by hoisted top-level vars (Hermes V1
+         * spec-compliant var hoisting turns a flattened module's
+         * `var hasOwnProperty` into `globalThis.hasOwnProperty = undefined` at
+         * parse time, and React Native core dies at boot calling it).
+         */
+        protoShadow?: boolean;
+        /**
+         * When `@multiplatform.one/web3` is NOT installed, redirect the OPTIONAL
+         * `@multiplatform.one/web3/native` import (from core's
+         * loadWalletProvider.native.ts) to a no-op shim — rolldown otherwise
+         * leaves the unresolvable specifier as a bare dynamic `import()` in the
+         * classic-script bundle, which Hermes rejects at lazy-compile time.
+         * Auto-skipped when web3 is installed.
+         */
+        web3Stub?: boolean;
+    };
 }
 /**
  * Creates a shared Vite configuration for multiplatform.one apps.

package/types/vite.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vite.d.ts","sourceRoot":"","sources":["../src/vite.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAU,UAAU,EAAE,MAAM,MAAM,CAAC;AAI/C,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B;;OAEG;IACH,OAAO,CAAC,EACJ,OAAO,GACP;QACE;;;WAGG;QACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QAEtB;;;WAGG;QACH,MAAM,CAAC,EAAE,MAAM,CAAC;QAEhB;;WAEG;QACH,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IAEN;;OAEG;IACH,IAAI,CAAC,EACD,OAAO,GACP;QACE;;;WAGG;QACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAEjB;;WAEG;QACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC;IAEN;;;OAGG;IACH,GAAG,CAAC,EACA,OAAO,GACP;QACE,MAAM,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC3B,GAAG,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACtD,KAAK,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;QAC/B,MAAM,CAAC,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC1B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAChC,CAAC;IAEN;;OAEG;IACH,GAAG,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IAExB;;OAEG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IAE9B;;OAEG;IACH,OAAO,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;IAEhC;;OAEG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAE9B;;OAEG;IACH,OAAO,CAAC,EAAE;QACR,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;IAEF;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,uBAA4B,GAAG,UAAU,CA0QlF;AAED,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,8BAA8B,CAAC"}
+{"version":3,"file":"vite.d.ts","sourceRoot":"","sources":["../src/vite.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAU,UAAU,EAAE,MAAM,MAAM,CAAC;AAI/C,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B;;OAEG;IACH,OAAO,CAAC,EACJ,OAAO,GACP;QACE;;;WAGG;QACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QAEtB;;;WAGG;QACH,MAAM,CAAC,EAAE,MAAM,CAAC;QAEhB;;WAEG;QACH,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IAEN;;OAEG;IACH,IAAI,CAAC,EACD,OAAO,GACP;QACE;;;WAGG;QACH,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;QAEjB;;WAEG;QACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC;IAEN;;;OAGG;IACH,GAAG,CAAC,EACA,OAAO,GACP;QACE,MAAM,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC3B,GAAG,CAAC,EAAE;YAAE,MAAM,CAAC,EAAE,MAAM,CAAC;YAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QACtD,KAAK,CAAC,EAAE;YAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;SAAE,CAAC;QAC/B,MAAM,CAAC,EAAE;YAAE,GAAG,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;QAC1B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAChC,CAAC;IAEN;;OAEG;IACH,GAAG,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IAExB;;OAEG;IACH,MAAM,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IAE9B;;OAEG;IACH,OAAO,CAAC,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;IAEhC;;OAEG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAE9B;;OAEG;IACH,OAAO,CAAC,EAAE;QACR,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QACnB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC;IAEF;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAEtB;;;;;;;;OAQG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAElC;;;OAGG;IACH,WAAW,CAAC,EAAE;QACZ;;;;;;WAMG;QACH,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB;;;;;;;WAOG;QACH,QAAQ,CAAC,EAAE,OAAO,CAAC;KACpB,CAAC;CACH;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,GAAE,uBAA4B,GAAG,UAAU,CAyRlF;AAED,OAAO,EACL,0BAA0B,EAC1B,8BAA8B,GAC/B,MAAM,8BAA8B,CAAC"}