@multiplatform.one/core 6.7.0 → 7.1.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@multiplatform.one/core",
-  "version": "6.7.0",
+  "version": "7.1.0",
   "description": "Core framework shell, provider composition, and layout factories for multiplatform.one",
   "keywords": [
     "app",
@@ -46,11 +46,11 @@
     "@tanstack/react-form-devtools": "0.2.22",
     "@tanstack/react-pacer-devtools": "^0.7.0",
     "react-cookie": "^8.1.2",
-    "@multiplatform.one/store": "6.7.0",
-    "@multiplatform.one/theme": "6.7.0",
-    "@multiplatform.one/logger": "6.7.0",
-    "@multiplatform.one/platform": "6.7.0",
-    "@multiplatform.one/i18n": "6.7.0"
+    "@multiplatform.one/i18n": "7.1.0",
+    "@multiplatform.one/logger": "7.1.0",
+    "@multiplatform.one/platform": "7.1.0",
+    "@multiplatform.one/store": "7.1.0",
+    "@multiplatform.one/theme": "7.1.0"
   },
   "devDependencies": {
     "@sentry/react": "^10.51.0",
@@ -60,14 +60,16 @@
     "i18next": "^25.10.10",
     "one": "^1.16.5",
     "react": "19.2.5",
+    "react-dom": "19.2.5",
     "react-i18next": "^16.6.6",
     "react-native": "0.83.2",
     "react-native-gesture-handler": "~2.31.1",
     "react-native-safe-area-context": "~5.7.0",
-    "tamagui": "2.0.0-rc.41",
+    "tamagui": "2.7.6",
     "typescript": "~5.9.3",
-    "@multiplatform.one/frappe": "6.7.0",
-    "@multiplatform.one/web3": "6.7.0"
+    "vitest": "^4.1.5",
+    "@multiplatform.one/frappe": "7.1.0",
+    "@multiplatform.one/web3": "7.1.0"
   },
   "peerDependencies": {
     "@sentry/react": "^9.0.0",
@@ -83,10 +85,10 @@
     "react-native-gesture-handler": ">=2.0.0",
     "react-native-safe-area-context": ">=4.0.0",
     "tamagui": "^2.0.0-rc",
-    "@multiplatform.one/frappe": "^6.7.0",
-    "@multiplatform.one/web3": "^6.7.0",
-    "@multiplatform.one/frappe-ui": "^6.7.0",
-    "@multiplatform.one/keycloak": "^6.7.0"
+    "@multiplatform.one/frappe": "^7.1.0",
+    "@multiplatform.one/frappe-ui": "^7.1.0",
+    "@multiplatform.one/keycloak": "^7.1.0",
+    "@multiplatform.one/web3": "^7.1.0"
   },
   "peerDependenciesMeta": {
     "@multiplatform.one/web3": {
@@ -116,6 +118,7 @@
   },
   "scripts": {
     "typecheck": "tsgo --noEmit",
-    "build": "rm -rf types 2>/dev/null && tsc -p tsconfig.build.json"
+    "build": "rm -rf types 2>/dev/null && tsc -p tsconfig.build.json",
+    "test": "vitest run"
   }
 }

package/src/app/CreateRootLayout.native.tsx

@@ -11,6 +11,7 @@ import { config } from "@multiplatform.one/platform";
 import { createI18nConfig } from "@multiplatform.one/i18n";
 import { logger } from "@multiplatform.one/logger";
 import type { CreateRootLayoutConfig } from "./rootLayoutShared";
+import { useNativeDeepLinks } from "./useNativeDeepLinks";
 
 export type {
   CreateRootLayoutConfig,
@@ -48,6 +49,15 @@ export function createRootLayout(cfg: CreateRootLayoutConfig): ComponentType {
 
   const fontsMap = cfg.fonts ?? {};
 
+  // Rendered inside the mounted tree (after the fonts gate) so the router
+  // context is live when the bridge navigates — mirrors the position the
+  // consumer-app bridges proved out.
+  function DeepLinkBridge() {
+    useNativeDeepLinks();
+    return null;
+  }
+  DeepLinkBridge.displayName = "DeepLinkBridge";
+
   function Layout() {
     const [fontsLoaded, fontError] = useFonts(fontsMap);
     // Gate on fonts being ready, but never block forever: if font loading
@@ -59,6 +69,7 @@ export function createRootLayout(cfg: CreateRootLayoutConfig): ComponentType {
         <SafeAreaProvider>
           <SchemeProvider>
             <NativeRootProvider>
+              {cfg.deepLinks !== false && <DeepLinkBridge />}
               <RootLayout>
                 <Slot />
               </RootLayout>

package/src/app/CreateRootLayout.tsx

@@ -16,7 +16,8 @@ export type {
 } from "./rootLayoutShared";
 
 /**
- * Creates a root layout component (universal fallback for Tauri / desktop).
+ * Creates a root layout component (universal fallback for non-web hosts —
+ * Tauri, GNOME, extensions).
  *
  * Handles i18n initialization, color-scheme detection via `matchMedia`,
  * and wraps content in `LoadProgressBar` → `AppProvider` → `RootLayout` → `<Slot />`.

package/src/app/CreateRootLayout.web.tsx

@@ -8,6 +8,7 @@ import { config, isDev, platform } from "@multiplatform.one/platform";
 import { createI18nConfig } from "@multiplatform.one/i18n";
 import { logger } from "@multiplatform.one/logger";
 import { storage } from "@multiplatform.one/store";
+import { RuntimePublicConfigScript } from "./RuntimePublicConfigScript";
 import type { CreateRootLayoutConfig, RootLoaderData } from "./rootLayoutShared";
 
 export type {
@@ -142,6 +143,14 @@ export function createRootLayout(cfg: CreateRootLayoutConfig): ComponentType {
       <html lang={htmlLang}>
         <head>
           <meta charSet="utf-8" />
+          {/* RUNTIME public config, first thing after charset so it is parsed
+              and executed before the deferred app bundle constructs Config.
+              Without it the browser has NO path to config at all: Config's env
+              lookup reads process.env, which does not exist there, so a
+              container env var (MARKETPLACE_API_URL, FRAPPE_ENABLED, …) could
+              never reach the SPA and the image had to be rebuilt per
+              environment. See RuntimePublicConfigScript. */}
+          <RuntimePublicConfigScript />
           {interFonts && (
             <>
               <link

package/src/app/RuntimePublicConfigScript.spec.tsx

@@ -0,0 +1,73 @@
+import { readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { runtimePublicConfigKey } from "@multiplatform.one/platform";
+import { renderToStaticMarkup } from "react-dom/server";
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { RuntimePublicConfigScript } from "./RuntimePublicConfigScript";
+
+// vitest runs this suite in the node environment, so `window` is undefined and
+// `platform.isServer` is true — i.e. every render below is the SSR branch, the
+// one that actually writes the served document.
+function renderDocument(): string {
+  return renderToStaticMarkup(<RuntimePublicConfigScript />);
+}
+
+afterEach(() => {
+  vi.unstubAllEnvs();
+});
+
+describe("RuntimePublicConfigScript", () => {
+  it("emits the public payload into the SSR document", () => {
+    vi.stubEnv("VITE_MP_PUBLIC_CONFIG_KEYS", JSON.stringify(["MARKETPLACE_API_URL"]));
+    vi.stubEnv("MARKETPLACE_API_URL", "https://api.marketplace.example.org");
+    const html = renderDocument();
+    // The whole point of the seam: the VALUE the SSR process holds in its own
+    // env at request time is in the bytes the browser receives. Nothing about
+    // this depends on what the image was BUILT with.
+    expect(html).toContain("<script");
+    expect(html).toContain(runtimePublicConfigKey);
+    expect(html).toContain("https://api.marketplace.example.org");
+  });
+
+  it("emits FRAPPE_ENABLED so the frappe provider can mount in the browser", () => {
+    // CreateApp.tsx: `cfg.enabled ?? config.get("FRAPPE_ENABLED") === "1"`.
+    vi.stubEnv("VITE_MP_PUBLIC_CONFIG_KEYS", JSON.stringify(["FRAPPE_ENABLED"]));
+    vi.stubEnv("FRAPPE_ENABLED", "1");
+    expect(renderDocument()).toContain('"FRAPPE_ENABLED":"1"');
+  });
+
+  it("keeps a private key out of the SSR document", () => {
+    vi.stubEnv("VITE_MP_PUBLIC_CONFIG_KEYS", JSON.stringify(["MARKETPLACE_API_URL"]));
+    vi.stubEnv("MARKETPLACE_API_URL", "https://api.marketplace.example.org");
+    vi.stubEnv("SECRET", "hunter2");
+    vi.stubEnv("DATABASE_PASSWORD", "hunter2");
+    const html = renderDocument();
+    expect(html).not.toContain("SECRET");
+    expect(html).not.toContain("DATABASE_PASSWORD");
+    expect(html).not.toContain("hunter2");
+  });
+
+  it("cannot be closed out of by a value that looks like markup", () => {
+    vi.stubEnv("VITE_MP_PUBLIC_CONFIG_KEYS", JSON.stringify(["BASE_URL"]));
+    vi.stubEnv("BASE_URL", "</script><script>alert(1)</script>");
+    const html = renderDocument();
+    expect(html).not.toContain("</script><script>");
+    expect(html).toContain("\\u003c");
+  });
+});
+
+describe("createRootLayout (web)", () => {
+  it("mounts RuntimePublicConfigScript in the document head", () => {
+    // The component only reaches a browser if the root layout renders it, and
+    // the root layout is a `one` route module that cannot be instantiated
+    // outside a router — so the mount is pinned at the source level. Delete
+    // the element from <head> and this reds.
+    const source = readFileSync(
+      join(dirname(fileURLToPath(import.meta.url)), "CreateRootLayout.web.tsx"),
+      "utf-8",
+    );
+    const head = source.slice(source.indexOf("<head>"), source.indexOf("</head>"));
+    expect(head).toContain("<RuntimePublicConfigScript />");
+  });
+});

package/src/app/RuntimePublicConfigScript.tsx

@@ -0,0 +1,54 @@
+import {
+  platform,
+  runtimePublicConfigKey,
+  serializeRuntimePublicConfig,
+} from "@multiplatform.one/platform";
+
+/**
+ * Publishes the SSR-resolved PUBLIC config into the served document.
+ *
+ * Mounted in `<head>` by `createRootLayout` (web). Deliberately the SAME shape
+ * one uses for `__one_server_context__` — an inline `<script>` assigning a
+ * `globalThis` key, `async` + `href` so React 19 keys it stably, and
+ * `suppressHydrationWarning` because the client renders an EMPTY body for the
+ * already-executed script (one's `server/ServerContextScript` does exactly
+ * this). It is a sibling payload on the established seam, not a second
+ * transport.
+ *
+ * XSS: the injected string is NOT user content. It is built by
+ * `serializeRuntimePublicConfig`, which (a) walks the BUILD-TIME public key
+ * allowlist rather than any request-derived input, and (b) emits the values
+ * through a JSON serializer that escapes `<`, `>`, U+2028 and U+2029 — so the
+ * body cannot close its own `</script>` tag or terminate a JS statement. This
+ * is the same sanitizer shape one ships as `utils/htmlEscape.safeJsonStringify`
+ * for the server-context payload. React offers no other way to emit a script
+ * body: text children of `<script>` are HTML-escaped, which would corrupt the
+ * JSON quoting.
+ *
+ * Ordering: an inline classic script in `<head>` runs during document parse,
+ * while the app bundle is a deferred module script — so `globalThis` already
+ * carries the payload by the time `@multiplatform.one/platform` constructs its
+ * `Config`.
+ *
+ * On the browser the body is empty: `serializeRuntimePublicConfig()` reads
+ * `process.env`, which only exists on the server. Rendering it client-side
+ * would publish an EMPTY payload over the real one.
+ */
+export function RuntimePublicConfigScript() {
+  return (
+    <script
+      async
+      // @ts-expect-error `href` is not on React's ScriptHTMLAttributes — React 19
+      // keys hoisted scripts by it anyway, and `one`'s ServerContextScript (the
+      // sibling payload this deliberately mirrors) carries the identical
+      // suppression on the identical line. Copying the transport means copying
+      // this, not inventing a differently-keyed script.
+      href={runtimePublicConfigKey}
+      suppressHydrationWarning
+      dangerouslySetInnerHTML={{
+        __html: platform.isServer ? serializeRuntimePublicConfig() : "",
+      }}
+    />
+  );
+}
+RuntimePublicConfigScript.displayName = "RuntimePublicConfigScript";

package/src/app/deepLinkPath.spec.ts

@@ -0,0 +1,43 @@
+/**
+ * @vitest-environment node
+ */
+
+import { describe, expect, it } from "vitest";
+import { deepLinkUrlToPath } from "./deepLinkPath";
+
+describe("deepLinkUrlToPath", () => {
+  it("maps a scheme host to the first path segment", () => {
+    expect(deepLinkUrlToPath("myapp://pos")).toBe("/pos");
+  });
+
+  it("keeps nested paths and query strings", () => {
+    expect(deepLinkUrlToPath("myapp://order/123?tab=items")).toBe("/order/123?tab=items");
+  });
+
+  it("strips trailing slashes", () => {
+    expect(deepLinkUrlToPath("myapp://kds/")).toBe("/kds");
+    expect(deepLinkUrlToPath("myapp://kds///")).toBe("/kds");
+  });
+
+  it("supports dotted/plus/hyphen scheme names", () => {
+    expect(deepLinkUrlToPath("com.example.app://board")).toBe("/board");
+    expect(deepLinkUrlToPath("my-app+beta://menu")).toBe("/menu");
+  });
+
+  it("handles the scheme://host/path shape from https-style links", () => {
+    expect(deepLinkUrlToPath("https://example.com/admin")).toBe("/example.com/admin");
+  });
+
+  it("returns null for root-only or empty URLs (no-op, keep current route)", () => {
+    expect(deepLinkUrlToPath("myapp://")).toBeNull();
+    expect(deepLinkUrlToPath("myapp:///")).toBeNull();
+    expect(deepLinkUrlToPath("")).toBeNull();
+    expect(deepLinkUrlToPath(null)).toBeNull();
+    expect(deepLinkUrlToPath(undefined)).toBeNull();
+  });
+
+  it("returns null for non-URL strings", () => {
+    expect(deepLinkUrlToPath("not a url")).toBeNull();
+    expect(deepLinkUrlToPath("/already/a/path")).toBeNull();
+  });
+});

package/src/app/deepLinkPath.ts

@@ -0,0 +1,20 @@
+/**
+ * Pure deep-link URL → router path mapping (platform-free, unit-tested).
+ *
+ * One's built-in NavigationContainer linking never applies scheme URLs on
+ * native — the router is always initialized with location "/" (one's
+ * Root.native pins initialLocation, ignoring the launch URL) and warm url
+ * events don't dispatch — so OS URLs are mapped to router navigation by the
+ * native root layout instead (see useNativeDeepLinks).
+ *
+ * `scheme://host/path?query` → `/host/path?query` (the scheme's "host" is
+ * the first path segment: `myapp://pos` → `/pos`). Returns null for empty /
+ * root-only URLs so callers can no-op instead of clobbering the current
+ * route.
+ */
+export function deepLinkUrlToPath(url: string | null | undefined): string | null {
+  const rest = url?.match(/^[\w.+-]+:\/\/+(.*)$/)?.[1];
+  if (!rest) return null;
+  const path = `/${rest.replace(/\/+$/, "")}`;
+  return path === "/" ? null : path;
+}

package/src/app/index.ts

@@ -19,6 +19,7 @@
  *   `.ios.tsx` > `.native.tsx` > `.tsx` (on iOS)
  *   `.web.tsx` > `.tsx` (on web)
  *   `.tauri.tsx` > `.tsx` (on Tauri)
+ *   `.native.tsx` > `.tsx` (on GNOME — see apps/one/vite.config.gnome.ts)
  *
  * When creating platform-specific variants, always keep a universal
  * fallback file (e.g. `index.ts`) that exports the default API.

package/src/app/rootLayoutShared.ts

@@ -68,4 +68,13 @@ export interface CreateRootLayoutConfig {
    * Ignored on web (fonts are loaded via CSS side-effect imports).
    */
   fonts?: Record<string, number>;
+  /**
+   * Native deep-link bridge (default true; ignored on web). One's built-in
+   * NavigationContainer linking never applies scheme URLs on native (the
+   * Root pins initialLocation to "/" and warm url events don't dispatch), so
+   * the root layout maps them itself: cold-start launch URL →
+   * `router.replace`, warm url events → `router.push`
+   * (`myapp://pos` → `/pos`). Set false for apps that own their own linking.
+   */
+  deepLinks?: boolean;
 }

package/src/app/useNativeDeepLinks.native.ts

@@ -0,0 +1,36 @@
+import { useEffect } from "react";
+import { Linking } from "react-native";
+import type { Href } from "one";
+import { useRouter } from "one";
+import { deepLinkUrlToPath } from "./deepLinkPath";
+
+/**
+ * Deep-link bridge (native): One's built-in NavigationContainer linking
+ * never applies scheme URLs — the router is always initialized with
+ * location "/" (one's Root.native pins initialLocation, so the launch URL
+ * is ignored) and warm url events never dispatch. Map OS URLs to router
+ * navigation instead: the cold-start launch URL replaces (so back doesn't
+ * land on the ignored "/") and warm url events push.
+ *
+ * Wired by createRootLayout's native Layout; opt out with
+ * `createRootLayout({ deepLinks: false, ... })`.
+ */
+export function useNativeDeepLinks(): void {
+  const router = useRouter();
+  useEffect(() => {
+    let cancelled = false;
+    Linking.getInitialURL().then((url) => {
+      if (cancelled) return;
+      const path = deepLinkUrlToPath(url);
+      if (path) router.replace(path as Href);
+    });
+    const subscription = Linking.addEventListener("url", ({ url }) => {
+      const path = deepLinkUrlToPath(url);
+      if (path) router.push(path as Href);
+    });
+    return () => {
+      cancelled = true;
+      subscription.remove();
+    };
+  }, [router]);
+}

package/src/app/useNativeDeepLinks.ts

@@ -0,0 +1,8 @@
+/**
+ * Web / type-resolution twin of useNativeDeepLinks.native.ts — deep links on
+ * web are just URLs, the browser and One's web router already apply them.
+ * Only the `.native` sibling does anything.
+ */
+export function useNativeDeepLinks(): void {
+  // no-op on web
+}

package/types/app/CreateRootLayout.d.ts

@@ -2,7 +2,8 @@ import { type ComponentType } from "react";
 import type { CreateRootLayoutConfig } from "./rootLayoutShared";
 export type { CreateRootLayoutConfig, HeadConfig, RootLayoutProps, RootLoaderData, SentryConfig, } from "./rootLayoutShared";
 /**
- * Creates a root layout component (universal fallback for Tauri / desktop).
+ * Creates a root layout component (universal fallback for non-web hosts —
+ * Tauri, GNOME, extensions).
  *
  * Handles i18n initialization, color-scheme detection via `matchMedia`,
  * and wraps content in `LoadProgressBar` → `AppProvider` → `RootLayout` → `<Slot />`.

package/types/app/CreateRootLayout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CreateRootLayout.d.ts","sourceRoot":"","sources":["../../src/app/CreateRootLayout.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAuB,KAAK,aAAa,EAAkB,MAAM,OAAO,CAAC;AAKhF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAEjE,YAAY,EACV,sBAAsB,EACtB,UAAU,EACV,eAAe,EACf,cAAc,EACd,YAAY,GACb,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,sBAAsB,GAAG,aAAa,CAwC3E"}
+{"version":3,"file":"CreateRootLayout.d.ts","sourceRoot":"","sources":["../../src/app/CreateRootLayout.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAuB,KAAK,aAAa,EAAkB,MAAM,OAAO,CAAC;AAKhF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAEjE,YAAY,EACV,sBAAsB,EACtB,UAAU,EACV,eAAe,EACf,cAAc,EACd,YAAY,GACb,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,sBAAsB,GAAG,aAAa,CAwC3E"}

package/types/app/CreateRootLayout.native.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CreateRootLayout.native.d.ts","sourceRoot":"","sources":["../../src/app/CreateRootLayout.native.tsx"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAa,MAAM,OAAO,CAAC;AAQtD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAEjE,YAAY,EACV,sBAAsB,EACtB,UAAU,EACV,eAAe,EACf,cAAc,EACd,YAAY,GACb,MAAM,oBAAoB,CAAC;AAM5B;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,sBAAsB,GAAG,aAAa,CAsC3E"}
+{"version":3,"file":"CreateRootLayout.native.d.ts","sourceRoot":"","sources":["../../src/app/CreateRootLayout.native.tsx"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAa,MAAM,OAAO,CAAC;AAQtD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAGjE,YAAY,EACV,sBAAsB,EACtB,UAAU,EACV,eAAe,EACf,cAAc,EACd,YAAY,GACb,MAAM,oBAAoB,CAAC;AAM5B;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,sBAAsB,GAAG,aAAa,CAgD3E"}

package/types/app/CreateRootLayout.web.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CreateRootLayout.web.d.ts","sourceRoot":"","sources":["../../src/app/CreateRootLayout.web.tsx"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAa,MAAM,OAAO,CAAC;AAOtD,OAAO,KAAK,EAAE,sBAAsB,EAAkB,MAAM,oBAAoB,CAAC;AAEjF,YAAY,EACV,sBAAsB,EACtB,UAAU,EACV,eAAe,EACf,cAAc,EACd,YAAY,GACb,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,sBAAsB,GAAG,aAAa,CAoL3E"}
+{"version":3,"file":"CreateRootLayout.web.d.ts","sourceRoot":"","sources":["../../src/app/CreateRootLayout.web.tsx"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAa,MAAM,OAAO,CAAC;AAQtD,OAAO,KAAK,EAAE,sBAAsB,EAAkB,MAAM,oBAAoB,CAAC;AAEjF,YAAY,EACV,sBAAsB,EACtB,UAAU,EACV,eAAe,EACf,cAAc,EACd,YAAY,GACb,MAAM,oBAAoB,CAAC;AAE5B;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,sBAAsB,GAAG,aAAa,CA4L3E"}

package/types/app/RuntimePublicConfigScript.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Publishes the SSR-resolved PUBLIC config into the served document.
+ *
+ * Mounted in `<head>` by `createRootLayout` (web). Deliberately the SAME shape
+ * one uses for `__one_server_context__` — an inline `<script>` assigning a
+ * `globalThis` key, `async` + `href` so React 19 keys it stably, and
+ * `suppressHydrationWarning` because the client renders an EMPTY body for the
+ * already-executed script (one's `server/ServerContextScript` does exactly
+ * this). It is a sibling payload on the established seam, not a second
+ * transport.
+ *
+ * XSS: the injected string is NOT user content. It is built by
+ * `serializeRuntimePublicConfig`, which (a) walks the BUILD-TIME public key
+ * allowlist rather than any request-derived input, and (b) emits the values
+ * through a JSON serializer that escapes `<`, `>`, U+2028 and U+2029 — so the
+ * body cannot close its own `</script>` tag or terminate a JS statement. This
+ * is the same sanitizer shape one ships as `utils/htmlEscape.safeJsonStringify`
+ * for the server-context payload. React offers no other way to emit a script
+ * body: text children of `<script>` are HTML-escaped, which would corrupt the
+ * JSON quoting.
+ *
+ * Ordering: an inline classic script in `<head>` runs during document parse,
+ * while the app bundle is a deferred module script — so `globalThis` already
+ * carries the payload by the time `@multiplatform.one/platform` constructs its
+ * `Config`.
+ *
+ * On the browser the body is empty: `serializeRuntimePublicConfig()` reads
+ * `process.env`, which only exists on the server. Rendering it client-side
+ * would publish an EMPTY payload over the real one.
+ */
+export declare function RuntimePublicConfigScript(): import("react/jsx-runtime").JSX.Element;
+export declare namespace RuntimePublicConfigScript {
+    var displayName: string;
+}
+//# sourceMappingURL=RuntimePublicConfigScript.d.ts.map

package/types/app/RuntimePublicConfigScript.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"RuntimePublicConfigScript.d.ts","sourceRoot":"","sources":["../../src/app/RuntimePublicConfigScript.tsx"],"names":[],"mappings":"AAMA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,yBAAyB,4CAgBxC;yBAhBe,yBAAyB"}

package/types/app/deepLinkPath.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Pure deep-link URL → router path mapping (platform-free, unit-tested).
+ *
+ * One's built-in NavigationContainer linking never applies scheme URLs on
+ * native — the router is always initialized with location "/" (one's
+ * Root.native pins initialLocation, ignoring the launch URL) and warm url
+ * events don't dispatch — so OS URLs are mapped to router navigation by the
+ * native root layout instead (see useNativeDeepLinks).
+ *
+ * `scheme://host/path?query` → `/host/path?query` (the scheme's "host" is
+ * the first path segment: `myapp://pos` → `/pos`). Returns null for empty /
+ * root-only URLs so callers can no-op instead of clobbering the current
+ * route.
+ */
+export declare function deepLinkUrlToPath(url: string | null | undefined): string | null;
+//# sourceMappingURL=deepLinkPath.d.ts.map

package/types/app/deepLinkPath.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deepLinkPath.d.ts","sourceRoot":"","sources":["../../src/app/deepLinkPath.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAK/E"}

package/types/app/index.d.ts

@@ -19,6 +19,7 @@
  *   `.ios.tsx` > `.native.tsx` > `.tsx` (on iOS)
  *   `.web.tsx` > `.tsx` (on web)
  *   `.tauri.tsx` > `.tsx` (on Tauri)
+ *   `.native.tsx` > `.tsx` (on GNOME — see apps/one/vite.config.gnome.ts)
  *
  * When creating platform-specific variants, always keep a universal
  * fallback file (e.g. `index.ts`) that exports the default API.

package/types/app/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/app/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/app/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC"}

package/types/app/rootLayoutShared.d.ts

@@ -63,5 +63,14 @@ export interface CreateRootLayoutConfig {
      * Ignored on web (fonts are loaded via CSS side-effect imports).
      */
     fonts?: Record<string, number>;
+    /**
+     * Native deep-link bridge (default true; ignored on web). One's built-in
+     * NavigationContainer linking never applies scheme URLs on native (the
+     * Root pins initialLocation to "/" and warm url events don't dispatch), so
+     * the root layout maps them itself: cold-start launch URL →
+     * `router.replace`, warm url events → `router.push`
+     * (`myapp://pos` → `/pos`). Set false for apps that own their own linking.
+     */
+    deepLinks?: boolean;
 }
 //# sourceMappingURL=rootLayoutShared.d.ts.map

package/types/app/rootLayoutShared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rootLayoutShared.d.ts","sourceRoot":"","sources":["../../src/app/rootLayoutShared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,OAAO,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,WAAW,UAAU;IACzB,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;;;OASG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,0EAA0E;IAC1E,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,qEAAqE;AACrE,MAAM,WAAW,cAAc;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yEAAyE;IACzE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAgB,SAAQ,iBAAiB;IACxD,6DAA6D;IAC7D,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,6DAA6D;IAC7D,WAAW,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAC;IAC7C,oFAAoF;IACpF,UAAU,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;IAC3C,8FAA8F;IAC9F,IAAI,EAAE,iBAAiB,CAAC;IACxB,qDAAqD;IACrD,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,oFAAoF;IACpF,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC"}
+{"version":3,"file":"rootLayoutShared.d.ts","sourceRoot":"","sources":["../../src/app/rootLayoutShared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,OAAO,CAAC;AAC9D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,MAAM,WAAW,UAAU;IACzB,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;;;OASG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,0EAA0E;IAC1E,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,qEAAqE;AACrE,MAAM,WAAW,cAAc;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yEAAyE;IACzE,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,eAAgB,SAAQ,iBAAiB;IACxD,6DAA6D;IAC7D,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB;IACrC,6DAA6D;IAC7D,WAAW,EAAE,aAAa,CAAC,gBAAgB,CAAC,CAAC;IAC7C,oFAAoF;IACpF,UAAU,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;IAC3C,8FAA8F;IAC9F,IAAI,EAAE,iBAAiB,CAAC;IACxB,qDAAqD;IACrD,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,oFAAoF;IACpF,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB"}

package/types/app/useNativeDeepLinks.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Web / type-resolution twin of useNativeDeepLinks.native.ts — deep links on
+ * web are just URLs, the browser and One's web router already apply them.
+ * Only the `.native` sibling does anything.
+ */
+export declare function useNativeDeepLinks(): void;
+//# sourceMappingURL=useNativeDeepLinks.d.ts.map

package/types/app/useNativeDeepLinks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useNativeDeepLinks.d.ts","sourceRoot":"","sources":["../../src/app/useNativeDeepLinks.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC"}

package/types/app/useNativeDeepLinks.native.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Deep-link bridge (native): One's built-in NavigationContainer linking
+ * never applies scheme URLs — the router is always initialized with
+ * location "/" (one's Root.native pins initialLocation, so the launch URL
+ * is ignored) and warm url events never dispatch. Map OS URLs to router
+ * navigation instead: the cold-start launch URL replaces (so back doesn't
+ * land on the ignored "/") and warm url events push.
+ *
+ * Wired by createRootLayout's native Layout; opt out with
+ * `createRootLayout({ deepLinks: false, ... })`.
+ */
+export declare function useNativeDeepLinks(): void;
+//# sourceMappingURL=useNativeDeepLinks.native.d.ts.map

package/types/app/useNativeDeepLinks.native.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useNativeDeepLinks.native.d.ts","sourceRoot":"","sources":["../../src/app/useNativeDeepLinks.native.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAkBzC"}