akanjs 3.0.0-beta.26 → 3.0.0-beta.28

package/vendor/@akanjs/native/packages/cli/src/platforms/windows-installer.ts

@@ -0,0 +1,436 @@
+
+
+import { existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { exec } from "../lib/exec.ts";
+import { CliError, log, ToolchainError } from "../lib/log.ts";
+import type { BuildContext } from "../lib/prepare.ts";
+import { akanNativeHome } from "../lib/toolchains.ts";
+import { hostArch } from "../lib/updates.ts";
+import { windowsVersion } from "./windows.ts";
+
+/** Microsoft's permanent link to the Evergreen Bootstrapper (MicrosoftEdgeWebview2Setup.exe). */
+export const WEBVIEW2_BOOTSTRAPPER_URL = "https://go.microsoft.com/fwlink/p/?LinkId=2124703";
+/** The WebView2 Runtime's EdgeUpdate client id; its `pv` value is the installed version. */
+const WEBVIEW2_CLIENT = "{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}";
+/** MAX_PATH less its NUL: what a PC without long paths enabled (the Windows default) can open or unpack. */
+export const WINDOWS_MAX_PATH = 259;
+/** `C:\Users\` + a 20-character user name + `\AppData\Local\Programs\`. */
+const INSTALL_ROOT = "C:\\Users\\".length + 20 + "\\AppData\\Local\\Programs\\".length;
+/** `.update-<version>-<sequence>\`: an update unpacks next to the app, under the app's name again, before the swap. */
+const STAGING = ".update-".length + 24 + 1;
+
+export interface InstallerInput {
+  name: string;
+  id: string;
+  exe: string;
+  version: string;
+  build: number;
+  /** The built app folder, copied whole. */
+  folder: string;
+  /** Its top-level files and folders: what an update or uninstall removes. */
+  entries: { name: string; dir: boolean }[];
+  icon?: string;
+  bootstrapper: string;
+  stopScript: string;
+  outFile: string;
+}
+
+/** `$` is NSIS's variable sigil; the names that reach a script cannot hold a quote (config.ts app.name). */
+const nsis = (value: string) => value.replace(/\$/g, "$$$$");
+
+const removal = (entries: InstallerInput["entries"]) =>
+  entries
+    .map(({ name, dir }) => (dir ? `  RMDir /r "$INSTDIR\\${nsis(name)}"` : `  Delete "$INSTDIR\\${nsis(name)}"`))
+    .join("\n");
+
+const moveIn = (entries: InstallerInput["entries"]) =>
+  entries.map(({ name }) => `      Rename "$INSTDIR.setup-new\\${nsis(name)}" "$INSTDIR\\${nsis(name)}"`).join("\n");
+
+export function installerScript(input: InstallerInput): string {
+  const version = windowsVersion(input.version, input.build);
+  const icon = input.icon ? `!define MUI_ICON "${nsis(input.icon)}"\n!define MUI_UNICON "${nsis(input.icon)}"\n` : "";
+  return `Unicode true
+ManifestDPIAware true
+ManifestLongPathAware true
+SetCompressor /SOLID lzma
+RequestExecutionLevel user
+
+!include "MUI2.nsh"
+!include "FileFunc.nsh"
+!include "LogicLib.nsh"
+
+!define APP_NAME "${nsis(input.name)}"
+!define EXE "${nsis(input.exe)}"
+!define APP_ID "${nsis(input.id)}"
+!define UNINSTALL_KEY "Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\${input.id}"
+!define RUN_KEY "Software\\Microsoft\\Windows\\CurrentVersion\\Run"
+!define STARTUP_APPROVED_KEY "Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartupApproved\\Run"
+!define WEBVIEW2_KEY "SOFTWARE\\Microsoft\\EdgeUpdate\\Clients\\${WEBVIEW2_CLIENT}"
+
+Name "\${APP_NAME}"
+OutFile "${nsis(input.outFile)}"
+InstallDir "$LOCALAPPDATA\\Programs\\\${APP_NAME}"
+BrandingText "\${APP_NAME} ${nsis(input.version)}"
+VIProductVersion "${version}"
+VIAddVersionKey "ProductName" "\${APP_NAME}"
+VIAddVersionKey "ProductVersion" "${nsis(input.version)}"
+VIAddVersionKey "FileVersion" "${version}"
+VIAddVersionKey "FileDescription" "\${APP_NAME} Setup"
+
+${icon}!define MUI_FINISHPAGE_RUN "$INSTDIR\\\${EXE}"
+!insertmacro MUI_PAGE_INSTFILES
+!insertmacro MUI_PAGE_FINISH
+!insertmacro MUI_UNPAGE_CONFIRM
+!insertmacro MUI_UNPAGE_INSTFILES
+!insertmacro MUI_LANGUAGE "English"
+!insertmacro MUI_LANGUAGE "Korean"
+
+Var AppStopped
+Var RunAfter
+
+Function RunApp
+  \${If} \${FileExists} "$INSTDIR\\\${EXE}"
+    SetOutPath "$LOCALAPPDATA"
+    Exec '"$INSTDIR\\\${EXE}"'
+  \${EndIf}
+FunctionEnd
+
+!macro Fail MESSAGE
+  DetailPrint "\${MESSAGE}"
+  \${IfNot} \${Silent}
+    MessageBox MB_ICONSTOP|MB_OK "\${MESSAGE}"
+  \${EndIf}
+  \${If} $AppStopped == 1
+  \${AndIf} $RunAfter == 1
+    Call RunApp
+  \${EndIf}
+  SetErrorLevel 2
+  Abort
+!macroend
+
+!macro RemoveEntries
+${removal(input.entries)}
+!macroend
+
+!macro RemoveApp
+  \${If} \${FileExists} "$INSTDIR\\\${EXE}"
+    RMDir /r "$INSTDIR"
+  \${Else}
+    !insertmacro RemoveEntries
+  \${EndIf}
+!macroend
+
+; Windows refuses to rename a folder while a file in it is open: a stopped process's handles, and an antivirus
+; scan of files just written, close a moment later. $R2 is "done" once the rename went through.
+!macro RenameRetry FROM TO
+  StrCpy $R2 0
+  \${Do}
+    ClearErrors
+    Rename "\${FROM}" "\${TO}"
+    \${IfNot} \${Errors}
+      StrCpy $R2 "done"
+      \${ExitDo}
+    \${EndIf}
+    IntOp $R2 $R2 + 1
+    Sleep 250
+  \${LoopWhile} $R2 < 40
+!macroend
+
+!macro RemoveSiblings SUFFIX
+  FindFirst $R0 $R1 "$INSTDIR.\${SUFFIX}*"
+  \${DoWhile} $R1 != ""
+    RMDir /r "$INSTDIR\\..\\$R1"
+    FindNext $R0 $R1
+  \${Loop}
+  FindClose $R0
+!macroend
+
+Function WebView2Version
+  SetRegView 64
+  ReadRegStr $0 HKLM "\${WEBVIEW2_KEY}" "pv"
+  SetRegView 32
+  \${If} $0 == ""
+  \${OrIf} $0 == "0.0.0.0"
+    ReadRegStr $0 HKLM "\${WEBVIEW2_KEY}" "pv"
+  \${EndIf}
+  \${If} $0 == ""
+  \${OrIf} $0 == "0.0.0.0"
+    ReadRegStr $0 HKCU "\${WEBVIEW2_KEY}" "pv"
+  \${EndIf}
+  \${If} $0 == "0.0.0.0"
+    StrCpy $0 ""
+  \${EndIf}
+FunctionEnd
+
+Function EnsureWebView2
+  Call WebView2Version
+  \${If} $0 != ""
+    DetailPrint "WebView2 Runtime $0"
+    Return
+  \${EndIf}
+  DetailPrint "Installing the WebView2 Runtime"
+  File "/oname=$PLUGINSDIR\\MicrosoftEdgeWebview2Setup.exe" "${nsis(input.bootstrapper)}"
+  ExecWait '"$PLUGINSDIR\\MicrosoftEdgeWebview2Setup.exe" /silent /install' $1
+  DetailPrint "WebView2 Runtime setup exited with $1"
+  Call WebView2Version
+  \${If} $0 != ""
+    DetailPrint "WebView2 Runtime $0"
+    Return
+  \${EndIf}
+  \${If} \${Silent}
+    !insertmacro Fail "The WebView2 Runtime could not be installed (setup exited with $1), and \${APP_NAME} does not start without it."
+  \${EndIf}
+  MessageBox MB_ICONEXCLAMATION|MB_OKCANCEL "The WebView2 Runtime could not be installed (setup exited with $1), and \${APP_NAME} does not start without it. Install \${APP_NAME} anyway?" IDOK webview2_anyway
+  SetErrorLevel 2
+  Abort
+webview2_anyway:
+  DetailPrint "Installing without the WebView2 Runtime"
+FunctionEnd
+
+Section "Install"
+  \${If} \${Silent}
+    \${GetParameters} $0
+    ClearErrors
+    \${GetOptions} $0 "/RUN" $1
+    \${IfNot} \${Errors}
+      StrCpy $RunAfter 1
+    \${EndIf}
+  \${EndIf}
+  ; A setup cut off between its two renames left the app only in .setup-old.
+  \${DirState} "$INSTDIR" $0
+  \${If} $0 == -1
+  \${AndIf} \${FileExists} "$INSTDIR.setup-old\\\${EXE}"
+    Rename "$INSTDIR.setup-old" "$INSTDIR"
+  \${EndIf}
+  RMDir /r "$INSTDIR.setup-new"
+  \${If} \${FileExists} "$INSTDIR\\\${EXE}"
+  \${OrIfNot} \${FileExists} "$INSTDIR.setup-old\\\${EXE}"
+    RMDir /r "$INSTDIR.setup-old"
+  \${EndIf}
+  \${DirState} "$INSTDIR" $0
+  \${If} $0 == 1
+  \${AndIfNot} \${FileExists} "$INSTDIR\\\${EXE}"
+  \${AndIf} "$INSTDIR" != "$LOCALAPPDATA\\Programs\\\${APP_NAME}"
+    !insertmacro Fail "$INSTDIR holds other files. Install into an empty folder, or where \${APP_NAME} is installed."
+  \${EndIf}
+  InitPluginsDir
+  Call EnsureWebView2
+  SetOutPath "$INSTDIR.setup-new"
+  ClearErrors
+  File /r "${nsis(input.folder)}\\*"
+  \${If} \${Errors}
+    SetOutPath "$LOCALAPPDATA"
+    RMDir /r "$INSTDIR.setup-new"
+    !insertmacro Fail "Some files could not be written beside $INSTDIR. Windows refuses a path over 260 characters unless long paths are enabled."
+  \${EndIf}
+  ; SetOutPath is also the installer's working folder, which Windows does not let anyone rename.
+  SetOutPath "$LOCALAPPDATA"
+  File "/oname=$PLUGINSDIR\\stop-app.ps1" "${nsis(input.stopScript)}"
+  nsExec::Exec 'powershell.exe -NoProfile -NonInteractive -ExecutionPolicy Bypass -File "$PLUGINSDIR\\stop-app.ps1" "$INSTDIR"'
+  Pop $0
+  StrCpy $AppStopped 1
+  \${If} \${FileExists} "$INSTDIR\\\${EXE}"
+    !insertmacro RenameRetry "$INSTDIR" "$INSTDIR.setup-old"
+    \${If} $R2 != "done"
+      RMDir /r "$INSTDIR.setup-new"
+      !insertmacro Fail "$INSTDIR is in use and could not be replaced; \${APP_NAME} is left as it was."
+    \${EndIf}
+    !insertmacro RenameRetry "$INSTDIR.setup-new" "$INSTDIR"
+    \${If} $R2 != "done"
+      !insertmacro RenameRetry "$INSTDIR.setup-old" "$INSTDIR"
+      RMDir /r "$INSTDIR.setup-new"
+      !insertmacro Fail "The new files could not take the place of $INSTDIR; \${APP_NAME} is left as it was."
+    \${EndIf}
+    RMDir /r "$INSTDIR.setup-old"
+  \${Else}
+    !insertmacro RemoveEntries
+    RMDir "$INSTDIR"
+    \${DirState} "$INSTDIR" $0
+    \${If} $0 == 1
+      ClearErrors
+${moveIn(input.entries)}
+      \${If} \${Errors}
+        !insertmacro Fail "Some files could not be moved into $INSTDIR."
+      \${EndIf}
+      RMDir /r "$INSTDIR.setup-new"
+    \${Else}
+      !insertmacro RenameRetry "$INSTDIR.setup-new" "$INSTDIR"
+      \${If} $R2 != "done"
+        RMDir /r "$INSTDIR.setup-new"
+        !insertmacro Fail "$INSTDIR could not be made."
+      \${EndIf}
+    \${EndIf}
+  \${EndIf}
+  ClearErrors
+  WriteUninstaller "$INSTDIR.uninstall.exe"
+  \${If} \${Errors}
+    !insertmacro Fail "$INSTDIR.uninstall.exe could not be written: install into a folder under one this user may write to."
+  \${EndIf}
+  CreateShortcut "$SMPROGRAMS\\\${APP_NAME}.lnk" "$INSTDIR\\\${EXE}"
+  WriteRegStr HKCU "\${UNINSTALL_KEY}" "DisplayName" "\${APP_NAME}"
+  WriteRegStr HKCU "\${UNINSTALL_KEY}" "DisplayVersion" "${nsis(input.version)}"
+  WriteRegStr HKCU "\${UNINSTALL_KEY}" "DisplayIcon" "$INSTDIR\\\${EXE}"
+  WriteRegStr HKCU "\${UNINSTALL_KEY}" "InstallLocation" "$INSTDIR"
+  WriteRegStr HKCU "\${UNINSTALL_KEY}" "UninstallString" '"$INSTDIR.uninstall.exe"'
+  WriteRegStr HKCU "\${UNINSTALL_KEY}" "QuietUninstallString" '"$INSTDIR.uninstall.exe" /S'
+  WriteRegDWORD HKCU "\${UNINSTALL_KEY}" "NoModify" 1
+  WriteRegDWORD HKCU "\${UNINSTALL_KEY}" "NoRepair" 1
+  \${GetSize} "$INSTDIR" "/S=0K" $0 $1 $2
+  WriteRegDWORD HKCU "\${UNINSTALL_KEY}" "EstimatedSize" $0
+  \${If} $RunAfter == 1
+    Call RunApp
+  \${EndIf}
+SectionEnd
+
+Function un.onInit
+  ReadRegStr $INSTDIR HKCU "\${UNINSTALL_KEY}" "InstallLocation"
+  \${If} $INSTDIR == ""
+    \${IfNot} \${Silent}
+      MessageBox MB_ICONSTOP|MB_OK "\${APP_NAME} is not installed for this user."
+    \${EndIf}
+    SetErrorLevel 2
+    Abort
+  \${EndIf}
+FunctionEnd
+
+Section "Uninstall"
+  InitPluginsDir
+  File "/oname=$PLUGINSDIR\\stop-app.ps1" "${nsis(input.stopScript)}"
+  nsExec::Exec 'powershell.exe -NoProfile -NonInteractive -ExecutionPolicy Bypass -File "$PLUGINSDIR\\stop-app.ps1" "$INSTDIR"'
+  Pop $0
+  Delete "$SMPROGRAMS\\\${APP_NAME}.lnk"
+  RMDir /r "$INSTDIR.previous"
+  !insertmacro RemoveSiblings "update-"
+  !insertmacro RemoveSiblings "failed-"
+  !insertmacro RemoveSiblings "setup-"
+  !insertmacro RemoveApp
+  RMDir "$INSTDIR"
+  Delete "$INSTDIR.uninstall.exe"
+  DeleteRegKey HKCU "\${UNINSTALL_KEY}"
+  DeleteRegValue HKCU "\${RUN_KEY}" "\${APP_ID}"
+  DeleteRegValue HKCU "\${STARTUP_APPROVED_KEY}" "\${APP_ID}"
+  RMDir /r "$LOCALAPPDATA\\\${APP_ID}\\akan-native-updates"
+  Delete "$LOCALAPPDATA\\\${APP_ID}\\akan-native-relaunch.json"
+  RMDir "$LOCALAPPDATA\\\${APP_ID}"
+SectionEnd
+`;
+}
+
+/**
+ * Stops every process running from the install folder, and waits (up to 10 s) until they are gone. Through
+ * WMI: the installer is a 32-bit program, so its PowerShell is too, and a 32-bit process cannot read a
+ * 64-bit one's path (Get-Process's Path comes back empty).
+ */
+export const STOP_SCRIPT = `param([string]$Dir)
+$prefix = [IO.Path]::GetFullPath($Dir).TrimEnd('\\') + '\\'
+$running = { Get-CimInstance Win32_Process | Where-Object { $_.ExecutablePath -and $_.ExecutablePath.StartsWith($prefix, [StringComparison]::OrdinalIgnoreCase) } }
+& $running | ForEach-Object { Stop-Process -Id $_.ProcessId -Force -ErrorAction SilentlyContinue }
+for ($i = 0; $i -lt 50 -and (& $running); $i++) { Start-Sleep -Milliseconds 200 }
+`;
+
+/** The longest path under `folder`, relative and with Windows separators. Links are not followed. */
+export function deepestPath(folder: string): string {
+  let deepest = "";
+  const walk = (dir: string, prefix: string) => {
+    for (const entry of readdirSync(dir, { withFileTypes: true })) {
+      const path = `${prefix}${entry.name}`;
+      if (path.length > deepest.length) deepest = path;
+      if (entry.isDirectory()) walk(join(dir, entry.name), `${path}\\`);
+    }
+  };
+  walk(folder, "");
+  return deepest;
+}
+
+/** How long `relative` gets on a typical PC while an update unpacks, the longest it ever is: root, app, staging, app. */
+export function installedPathLength(appName: string, relative: string): number {
+  return INSTALL_ROOT + appName.length + STAGING + appName.length + 1 + relative.length;
+}
+
+/** makensis: AKAN_NATIVE_MAKENSIS, PATH, then where the NSIS installer puts it. */
+export function findMakensis(env: Record<string, string | undefined> = process.env): string | null {
+  if (env.AKAN_NATIVE_MAKENSIS) return env.AKAN_NATIVE_MAKENSIS;
+  const onPath = Bun.which("makensis");
+  if (onPath) return onPath;
+  for (const base of [env["ProgramFiles(x86)"], env.ProgramFiles]) {
+    const candidate = base ? join(base, "NSIS", "makensis.exe") : null;
+    if (candidate && existsSync(candidate)) return candidate;
+  }
+  return null;
+}
+
+/** The Evergreen Bootstrapper, downloaded once into the akan-native cache and checked. */
+async function webview2Bootstrapper(): Promise<string> {
+  const file = join(akanNativeHome(), "cache", "webview2", "MicrosoftEdgeWebview2Setup.exe");
+  if (!existsSync(file)) {
+    log.info(`downloading the WebView2 Evergreen Bootstrapper (${WEBVIEW2_BOOTSTRAPPER_URL})`);
+    const response = await fetch(WEBVIEW2_BOOTSTRAPPER_URL, { redirect: "follow" });
+    if (!response.ok) throw new CliError(`the WebView2 bootstrapper download answered ${response.status}`);
+    const bytes = new Uint8Array(await response.arrayBuffer());
+    if (bytes.length < 100_000 || bytes[0] !== 0x4d || bytes[1] !== 0x5a)
+      throw new CliError("the WebView2 bootstrapper download is not a Windows program");
+    mkdirSync(join(file, ".."), { recursive: true });
+    writeFileSync(file, bytes);
+  }
+  if (process.platform === "win32") {
+    const signer = await exec(
+      [
+        "powershell.exe",
+        "-NoProfile",
+        "-NonInteractive",
+        "-Command",
+        "$s = Get-AuthenticodeSignature -LiteralPath $env:AKAN_NATIVE_WEBVIEW2_SETUP; if ($s.Status -eq 'Valid') { $s.SignerCertificate.Subject }",
+      ],
+      { echo: false, env: { AKAN_NATIVE_WEBVIEW2_SETUP: file } },
+    );
+    if (!signer.stdout.includes("O=Microsoft Corporation"))
+      throw new CliError(`${file} is not signed by Microsoft; delete it to download it again`);
+  }
+  return file;
+}
+
+/** Writes the setup program next to the app folder and answers its path. */
+export async function buildWindowsInstaller(ctx: BuildContext, folder: string): Promise<string> {
+  const makensis = findMakensis();
+  if (!makensis)
+    throw new ToolchainError(
+      "NSIS (makensis) builds the installer: winget install NSIS.NSIS on Windows (or set AKAN_NATIVE_MAKENSIS)",
+    );
+  const { config } = ctx.project;
+  const gen = join(ctx.outDir, "gen");
+  mkdirSync(gen, { recursive: true });
+  const stopScript = join(gen, "stop-app.ps1");
+  writeFileSync(stopScript, STOP_SCRIPT);
+  const icon = join(gen, "app.ico");
+  const outFile = join(ctx.outDir, `${config.app.fileName}-${config.app.version}-${hostArch()}-setup.exe`);
+  const script = join(gen, "installer.nsi");
+  const deepest = deepestPath(folder);
+  const longest = installedPathLength(config.app.name, deepest);
+  if (longest > WINDOWS_MAX_PATH - 20)
+    log.warn(
+      `${deepest} reaches about ${longest} characters under %LOCALAPPDATA%\\Programs while an update unpacks: Windows refuses paths over ${WINDOWS_MAX_PATH} unless long paths are enabled, so the installer or an update fails on such a PC. Shorten app.name or that path.`,
+    );
+  writeFileSync(
+    script,
+    `${installerScript({
+      name: config.app.name,
+      id: config.app.id,
+      exe: `${config.app.fileName}.exe`,
+      version: config.app.version,
+      build: config.app.build,
+      folder,
+      entries: readdirSync(folder).map((name) => ({ name, dir: statSync(join(folder, name)).isDirectory() })),
+      ...(existsSync(icon) ? { icon } : {}),
+      bootstrapper: await webview2Bootstrapper(),
+      stopScript,
+      outFile,
+    })}`,
+  );
+  log.step("installer: makensis");
+  const result = await exec([makensis, "/V2", script], { echo: false });
+  if (result.code !== 0 || !existsSync(outFile))
+    throw new CliError(`makensis failed:\n${(result.stdout + result.stderr).trim().split("\n").slice(-20).join("\n")}`);
+  log.info(`installer ${outFile} (${Math.round(readFileSync(outFile).length / 1024 / 1024)} MB)`);
+  return outFile;
+}

package/vendor/@akanjs/native/packages/cli/src/platforms/windows.ts

@@ -17,6 +17,7 @@ import {
   runExecutable,
   writeDesktopResources,
 } from "./desktop.ts";
+import { buildWindowsInstaller } from "./windows-installer.ts";
 
 /** Characters left for the app id under C:\Users\<name>\AppData\Local\ before WebView2's own paths reach MAX_PATH. */
 const WEBVIEW2_ID_BUDGET = 40;
@@ -70,6 +71,7 @@ export async function buildWindows(ctx: BuildContext): Promise<string> {
   const resources = resourcesOf("windows", dir);
   writeDesktopResources(ctx, resources, "windows");
   if (art) writeFileSync(join(resources, "icon.rgba"), windowIcon(art.master));
+  if (ctx.windows?.installer) ctx.artifacts.push({ kind: "installer", path: await buildWindowsInstaller(ctx, dir) });
   return dir;
 }
 

package/vendor/@akanjs/native/packages/core/src/runtime.ts

@@ -93,7 +93,7 @@ export function runtime(): Runtime {
     };
     if (rt.transport) w.addEventListener?.("pageshow", (e) => e.persisted && w.location?.reload());
     
-    if (boot.dev && rt.transport && boot.platform !== "android") forwardConsole(rt);
+    if (boot.dev && rt.transport) forwardConsole(boot.platform);
   }
   return g.__runtime as Runtime;
 }
@@ -102,7 +102,7 @@ export function runtime(): Runtime {
  * Dev builds on native hosts: mirror console output and uncaught errors to the host,
  * which prints them next to its own logs (WV-3).
  */
-function forwardConsole(_rt: Runtime): void {
+function forwardConsole(platform: AkanNativeBoot["platform"]): void {
 
   const g = akanNativeGlobal() as { __consolePatched?: boolean };
   if (g.__consolePatched) return;
@@ -110,13 +110,32 @@ function forwardConsole(_rt: Runtime): void {
   const c = globalThis.console as unknown as Record<string, (...args: unknown[]) => void>;
   const format = (value: unknown): string => {
     if (typeof value === "string") return value;
-    if (value instanceof Error) return value.stack ?? `${value.name}: ${value.message}`;
+    
+    if (value instanceof Error) {
+      const head = `${value.name}: ${value.message}`;
+      return value.stack?.startsWith(head) ? value.stack : `${head}${value.stack ? `\n${value.stack}` : ""}`;
+    }
     try {
       return JSON.stringify(value) ?? String(value);
     } catch {
       return String(value);
     }
   };
+  
+  const render = (args: unknown[]): string => {
+    const [first, ...rest] = args;
+    if (typeof first !== "string" || !/%[sdifoOc]/.test(first)) return args.map(format).join(" ");
+    const text = first.replace(/%([sdifoOc%])/g, (match, spec: string) => {
+      if (spec === "%") return "%";
+      if (rest.length === 0) return match;
+      const value = rest.shift();
+      if (spec === "c") return "";
+      if (spec === "d" || spec === "i") return String(Number.parseInt(String(value), 10));
+      if (spec === "f") return String(Number(value));
+      return format(value);
+    });
+    return [text, ...rest.map(format)].join(" ");
+  };
   const send = (level: string, args: unknown[]) => {
     const rt = akanNativeGlobal().__runtime as Runtime | undefined;
     if (!rt?.transport || !rt.boot.dev) return;
@@ -125,10 +144,12 @@ function forwardConsole(_rt: Runtime): void {
       id: ++rt.nextId,
       plugin: CONSOLE_PLUGIN,
       method: level,
-      args: { message: args.map(format).join(" ") },
+      args: { message: render(args).replace(/\n+$/, "") },
     };
     rt.transport.send(request).catch(() => {});
   };
+  
+  if (platform === "android") send("attach", []);
   for (const level of ["log", "info", "warn", "error", "debug"]) {
     const original = c[level]!.bind(globalThis.console);
     c[level] = (...args: unknown[]) => {
@@ -137,7 +158,7 @@ function forwardConsole(_rt: Runtime): void {
     };
   }
   const w = globalThis as { addEventListener?: (type: string, fn: (e: any) => void) => void };
-  w.addEventListener?.("error", (e) => send("error", [`uncaught: ${e.error?.stack ?? e.message}`]));
+  w.addEventListener?.("error", (e) => send("error", ["uncaught:", e.error ?? e.message]));
   w.addEventListener?.("unhandledrejection", (e) => send("error", ["unhandled rejection:", e.reason]));
 }
 

package/vendor/@akanjs/native/packages/desktop/src/dispatcher.ts

@@ -22,6 +22,7 @@ import type { Lifecycle } from "./lifecycle.ts";
 import type {
   DesktopContext,
   DesktopPlugin,
+  DesktopServerStatus,
   DocumentInfo,
   DocumentScope,
   EmitTarget,
@@ -40,7 +41,14 @@ export const SETUP_WAIT_MS = 5000;
 
 export interface HostServices {
   app: AppInfo;
+  dev?: boolean;
   appDataDir: string;
+  /** paths.ts appLocalDataDir; appDataDir when not given. */
+  appLocalDataDir?: string;
+  /** desktop.bin in the app's resources, or null. */
+  binDir?: string | null;
+  /** The carried server (resources/server.json), or null. */
+  server?: DesktopServerStatus | null;
   /** Sends an event (numbered for its document) to a window's page. */
   emit(window: number, message: BridgeEvent): void;
   /**
@@ -203,6 +211,7 @@ export function createDispatcher(
 ): Dispatcher {
   const byId = new Map(plugins.map((p) => [p.id, p]));
   let dataDirReady = false;
+  let localDataDirReady = false;
   const launch: Launch = { window: {} };
   let launching = true;
   const duringLaunch = (plugin: DesktopPlugin, what: string, apply: () => void) => {
@@ -215,6 +224,7 @@ export function createDispatcher(
     if (!ctx) {
       ctx = {
         app: services.app,
+        dev: services.dev === true,
         get appDataDir() {
           if (!dataDirReady) {
             mkdirSync(services.appDataDir, { recursive: true });
@@ -222,6 +232,16 @@ export function createDispatcher(
           }
           return services.appDataDir;
         },
+        get appLocalDataDir() {
+          const dir = services.appLocalDataDir ?? services.appDataDir;
+          if (!localDataDirReady) {
+            mkdirSync(dir, { recursive: true });
+            localDataDirReady = true;
+          }
+          return dir;
+        },
+        binDir: services.binDir ?? null,
+        server: services.server ?? null,
         emit: (event, data, target) => deliver(plugin.id, event, data, target),
         registerFile: (path, mime) => services.registerFile(path, mime),
         shell: (op, args) =>

package/vendor/@akanjs/native/packages/desktop/src/grants.ts

@@ -0,0 +1,47 @@
+
+
+import { createHmac, randomBytes } from "node:crypto";
+import { chmodSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+
+export type GrantMode = "read" | "write" | "folder";
+
+export interface FileGrant {
+  path: string;
+  mode: GrantMode;
+}
+
+const grants = new Map<string, FileGrant>();
+
+export function devGrantKeyFile(home = homedir()): string {
+  return process.env.AKAN_NATIVE_DEV_GRANT_KEY || join(home, ".akan", "native", "dev-file-grant.key");
+}
+
+export function grantFile(path: string, mode: GrantMode, { dev = false }: { dev?: boolean } = {}): string {
+  if (dev) {
+    const body = `${mode}:${Buffer.from(path).toString("base64url")}`;
+    return `dev:${body}:${createHmac("sha256", devGrantKey()).update(body).digest("base64url")}`;
+  }
+  const id = randomBytes(18).toString("base64url");
+  grants.set(id, { path, mode });
+  return id;
+}
+
+export function resolveGrant(id: unknown): FileGrant | null {
+  return typeof id === "string" ? (grants.get(id) ?? null) : null;
+}
+
+export function devGrantKey(file = devGrantKeyFile()): Buffer {
+  try {
+    return readFileSync(file);
+  } catch {
+    mkdirSync(dirname(file), { recursive: true });
+    try {
+      writeFileSync(file, randomBytes(32), { mode: 0o600, flag: "wx" });
+      chmodSync(file, 0o600);
+    } catch {
+    }
+    return readFileSync(file);
+  }
+}