akanjs 3.0.0-beta.27 → 3.0.0-beta.28

package/base/baseEnv.ts

@@ -112,11 +112,15 @@ export const resetEnvCache = () => {
 };
 
 const csrServerUrl = (): URL | null => {
-  const value = process.env.AKAN_PUBLIC_SERVER_URL;
+  const runtime = (globalThis as { __AKAN_NATIVE__?: { env?: Record<string, string | undefined> } }).__AKAN_NATIVE__
+    ?.env?.PUBLIC_AKAN_SERVER_URL;
+  const [key, value] = runtime
+    ? ["PUBLIC_AKAN_SERVER_URL", runtime]
+    : ["AKAN_PUBLIC_SERVER_URL", process.env.AKAN_PUBLIC_SERVER_URL];
   if (!value) return null;
   const url = new URL(value);
   if (url.protocol !== "http:" && url.protocol !== "https:")
-    throw new Error(`AKAN_PUBLIC_SERVER_URL must be an http(s) URL, got "${value}".`);
+    throw new Error(`${key} must be an http(s) URL, got "${value}".`);
   return url;
 };
 
@@ -125,10 +129,12 @@ const nativeDevGatewayOrigin = (): string | null =>
     ? `${window.location.protocol}//${window.location.host}`
     : null;
 
+const devServerOrigin = () => `http://localhost:${process.env.AKAN_PUBLIC_SERVER_PORT ?? "8282"}`;
+
 const nativeDevServerUrl = (operationMode: BaseEnv["operationMode"]): URL | null => {
   const platform = (globalThis as { __AKAN_NATIVE__?: { platform?: string } }).__AKAN_NATIVE__?.platform;
   if (operationMode !== "local" || !platform || platform === "web") return null;
-  return new URL(`http://localhost:${process.env.AKAN_PUBLIC_SERVER_PORT ?? "8282"}`);
+  return new URL(devServerOrigin());
 };
 
 const missingPublicEnv = (key: string) =>
@@ -179,8 +185,9 @@ export const getEnv = (): ClientEnv => {
         : "https:";
   const clientHttpUri = `${clientHttpProtocol}//${clientHost}${clientPort === 443 ? "" : `:${clientPort}`}`;
   const csrClient = side === "client" && renderMode === "csr";
-  const pageOrigin = csrClient && !process.env.AKAN_PUBLIC_SERVER_URL ? nativeDevGatewayOrigin() : null;
-  const serverUrl = csrClient && !pageOrigin ? (csrServerUrl() ?? nativeDevServerUrl(operationMode)) : null;
+  const pinnedServerUrl = csrClient ? csrServerUrl() : null;
+  const pageOrigin = csrClient && !pinnedServerUrl ? nativeDevGatewayOrigin() : null;
+  const serverUrl = csrClient && !pageOrigin ? (pinnedServerUrl ?? nativeDevServerUrl(operationMode)) : null;
   
   const hostFromPage =
     side === "client" && !serverUrl && (!!pageOrigin || operationMode === "local" || renderMode !== "csr");
@@ -251,3 +258,10 @@ export const getEnv = (): ClientEnv => {
   cachedEnv = env;
   return env;
 };
+
+export const getServerOrigin = (): string => {
+  const env = getEnv();
+  const behindGateway =
+    env.side === "client" && env.renderMode === "csr" && !csrServerUrl() && !!nativeDevGatewayOrigin();
+  return behindGateway ? devServerOrigin() : new URL(env.serverHttpUri).origin;
+};

package/client/device.ts

@@ -13,25 +13,41 @@ const globalWithProcess = globalThis as typeof globalThis & { process?: ProcessE
 const debugSessionId = Math.random().toString(36).slice(2, 8);
 let debugSeq = 0;
 
-const isFrameDebugEnabled = () => {
-  if (typeof window === "undefined") return false;
-  if (new URLSearchParams(window.location.search).get("akanFrameDebug") === "1") return true;
+const FRAME_TRACE_LIMIT = 2000;
+const frameTrace: { seq: number; event: string; details: DebugPayload }[] = [];
+
+const readFrameDebugFlag = () => {
+  const fromSearch = new URLSearchParams(window.location.search).get("akanFrameDebug");
+  if (fromSearch) return fromSearch;
   try {
-    return window.localStorage.getItem("akan:debug:frame") === "1";
+    return window.localStorage.getItem("akan:debug:frame");
   } catch {
     
-    return false;
+    return null;
   }
 };
 
+const frameDebugMode = (): "console" | "memory" | null => {
+  if (typeof window === "undefined") return null;
+  const flag = readFrameDebugFlag();
+  return flag === "1" ? "console" : flag === "memory" ? "memory" : null;
+};
+
 export function debugFrame(event: string, payload: DebugPayload = {}) {
-  if (!isFrameDebugEnabled()) return;
+  const mode = frameDebugMode();
+  if (!mode) return;
   debugSeq += 1;
   const details = {
     href: window.location.href,
     now: Math.round(performance.now()),
     ...payload,
   };
+  if (mode === "memory") {
+    frameTrace.push({ seq: debugSeq, event, details });
+    if (frameTrace.length > FRAME_TRACE_LIMIT) frameTrace.splice(0, frameTrace.length - FRAME_TRACE_LIMIT);
+    (window as { __AKAN_FRAME_TRACE__?: typeof frameTrace }).__AKAN_FRAME_TRACE__ = frameTrace;
+    return;
+  }
   
   console.debug(`[akan:frame:${debugSessionId}:${debugSeq}] ${event}`, details);
 }

package/client/index.ts

@@ -8,6 +8,7 @@ export * from "./device";
 export * from "./frameConfig";
 export * from "./locale";
 export * from "./makePageProto";
+export * from "./resolveServerUrl";
 export * from "./route";
 export * from "./router";
 export * from "./rscNavigation";

package/client/native/accessibility.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/accessibility/src/index.ts";

package/client/native/app-state.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/app-state/src/index.ts";

package/client/native/app.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/app/src/index.ts";

package/client/native/appearance.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/appearance/src/index.ts";

package/client/native/auth-session.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/auth-session/src/index.ts";

package/client/native/autostart.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/autostart/src/index.ts";

package/client/native/badge.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/badge/src/index.ts";

package/client/native/biometric.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/biometric/src/index.ts";

package/client/native/browser.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/browser/src/index.ts";

package/client/native/camera.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/camera/src/index.ts";

package/client/native/clipboard.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/clipboard/src/index.ts";

package/client/native/contacts.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/contacts/src/index.ts";

package/client/native/device.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/device/src/index.ts";

package/client/native/dialog.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/dialog/src/index.ts";

package/client/native/dock.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/dock/src/index.ts";

package/client/native/file-picker.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/file-picker/src/index.ts";

package/client/native/filesystem.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/filesystem/src/index.ts";

package/client/native/geolocation.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/geolocation/src/index.ts";

package/client/native/global-shortcut.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/global-shortcut/src/index.ts";

package/client/native/haptics.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/haptics/src/index.ts";

package/client/native/http.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/http/src/index.ts";

package/client/native/iap.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/iap/src/index.ts";

package/client/native/keep-awake.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/keep-awake/src/index.ts";

package/client/native/keyboard.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/keyboard/src/index.ts";

package/client/native/local-notifications.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/local-notifications/src/index.ts";

package/client/native/menu.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/menu/src/index.ts";

package/client/native/network.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/network/src/index.ts";

package/client/native/opener.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/opener/src/index.ts";

package/client/native/preferences.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/preferences/src/index.ts";

package/client/native/push.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/push/src/index.ts";

package/client/native/screen-orientation.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/screen-orientation/src/index.ts";

package/client/native/screen.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/screen/src/index.ts";

package/client/native/secure-storage.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/secure-storage/src/index.ts";

package/client/native/share.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/share/src/index.ts";

package/client/native/single-instance.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/single-instance/src/index.ts";

package/client/native/splash-screen.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/splash-screen/src/index.ts";

package/client/native/sqlite.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/sqlite/src/index.ts";

package/client/native/toast.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/toast/src/index.ts";

package/client/native/tray.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/tray/src/index.ts";

package/client/native/updates.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/updates/src/index.ts";

package/client/native/volume.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/volume/src/index.ts";

package/client/native/window-state.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/window-state/src/index.ts";

package/client/native/window.ts

@@ -0,0 +1 @@
+export * from "../../vendor/@akanjs/native/plugins/window/src/index.ts";

package/client/native.ts

@@ -2,14 +2,36 @@ import { isNative, platform } from "../vendor/@akanjs/native/packages/core/src/i
 import { browser } from "../vendor/@akanjs/native/plugins/browser/src/index.ts";
 import { opener } from "../vendor/@akanjs/native/plugins/opener/src/index.ts";
 
-export { AkanNativeError, fileBlob, releaseFile } from "../vendor/@akanjs/native/packages/core/src/index.ts";
+export type { LiveValue, Plugin } from "../vendor/@akanjs/native/packages/core/src/index.ts";
+export {
+  AkanNativeError,
+  createLiveValue,
+  definePlugin,
+  defineWebPlugin,
+  fileBlob,
+  isAkanNativeError,
+  releaseFile,
+  shallowEqual,
+} from "../vendor/@akanjs/native/packages/core/src/index.ts";
 export { app } from "../vendor/@akanjs/native/plugins/app/src/index.ts";
 export { appState } from "../vendor/@akanjs/native/plugins/app-state/src/index.ts";
+export type { AuthSessionApi } from "../vendor/@akanjs/native/plugins/auth-session/src/index.ts";
+export { authSession } from "../vendor/@akanjs/native/plugins/auth-session/src/index.ts";
 export type { Photo } from "../vendor/@akanjs/native/plugins/camera/src/index.ts";
 export type { Contact } from "../vendor/@akanjs/native/plugins/contacts/src/index.ts";
 export type { DeviceInfo } from "../vendor/@akanjs/native/plugins/device/src/index.ts";
 export { device } from "../vendor/@akanjs/native/plugins/device/src/index.ts";
 export { dialog } from "../vendor/@akanjs/native/plugins/dialog/src/index.ts";
+export type {
+  DirectoryFile,
+  PickDirectoryOptions,
+  PickDirectoryResult,
+  PickedFile,
+  PickFilesOptions,
+  SaveFileOptions,
+  SaveFileResult,
+} from "../vendor/@akanjs/native/plugins/file-picker/src/index.ts";
+export { filePicker } from "../vendor/@akanjs/native/plugins/file-picker/src/index.ts";
 export type { Position } from "../vendor/@akanjs/native/plugins/geolocation/src/index.ts";
 export { haptics } from "../vendor/@akanjs/native/plugins/haptics/src/index.ts";
 export type { IapProduct, IapTransaction } from "../vendor/@akanjs/native/plugins/iap/src/index.ts";
@@ -23,6 +45,11 @@ export type {
 } from "../vendor/@akanjs/native/plugins/push/src/index.ts";
 export { push } from "../vendor/@akanjs/native/plugins/push/src/index.ts";
 export { secureStorage } from "../vendor/@akanjs/native/plugins/secure-storage/src/index.ts";
+export type { UpdateCheck, UpdateProgress, UpdateState } from "../vendor/@akanjs/native/plugins/updates/src/index.ts";
+export { markReady, updates, useUpdateState } from "../vendor/@akanjs/native/plugins/updates/src/index.ts";
+export type { VolumeState } from "../vendor/@akanjs/native/plugins/volume/src/index.ts";
+export { volume } from "../vendor/@akanjs/native/plugins/volume/src/index.ts";
+export { useLiveValue, usePluginEvent } from "../vendor/@akanjs/native/packages/react/src/index.ts";
 export { browser, opener };
 
 export const loadCamera = () => import("../vendor/@akanjs/native/plugins/camera/src/index.ts");
@@ -33,6 +60,9 @@ export const loadIap = () => import("../vendor/@akanjs/native/plugins/iap/src/in
 /** Inside an iOS or Android shell of the native runtime; a mobile target opened in a browser is not. */
 export const isNativeApp = () => isNative && (platform === "ios" || platform === "android");
 
+/** Inside any shell of the native runtime, desktop included. */
+export const isNativeShell = () => isNative;
+
 export const nativePlatform = () => (isNativeApp() ? (platform as "ios" | "android") : null);
 
 export const desktopPlatform = () =>

package/client/resolveServerUrl.ts

@@ -0,0 +1,11 @@
+import { getEnv } from "akanjs/base";
+
+export const resolveServerUrl = (url: string): string => {
+  if (!url.startsWith("/") || url.startsWith("//")) return url;
+  const env = getEnv();
+  if (env.side !== "client" || env.renderMode !== "csr") return url;
+  if (url !== env.apiPrefix && !url.startsWith(`${env.apiPrefix}/`)) return url;
+  const server = new URL(env.serverHttpUri);
+  const serverOrigin = `${server.protocol}//${server.host}`;
+  return serverOrigin === `${window.location.protocol}//${window.location.host}` ? url : `${serverOrigin}${url}`;
+};

package/client/router.ts

@@ -160,6 +160,7 @@ class Router {
   #indexPath = "/";
   #navigation: Promise<void> = Promise.resolve();
   #historyIdx = 0;
+  #redirects = 0;
   #instance: RouterInstance = {
     push: (href: string) => {
       const { href: fullHref } = this.#getPathInfo(href);
@@ -407,6 +408,11 @@ class Router {
     this.#instance.refresh();
     return undefined as never;
   }
+  /** Client-side redirects so far: a render that saw this change while it ran redirected instead of drawing. A method
+   * for the reason `navigation()` is one. */
+  redirectCount(): number {
+    return this.#redirects;
+  }
   redirect(href: string, options: RedirectOptions = {}): never {
     const method = options.method ?? "replace";
     const status = options.status ?? 307;
@@ -422,6 +428,7 @@ class Router {
       Logger.info(`redirect to:${pathname}`);
       throw new AkanRedirectError(fullHref, method, status);
     } else {
+      this.#redirects += 1;
       this.#instance[method](href);
     }
     return undefined as never;
@@ -432,6 +439,7 @@ class Router {
       throw new AkanNotFoundError();
     }
     this.#checkInitialized();
+    this.#redirects += 1;
     this.#instance.replace("/404");
     return undefined as never;
   }

package/index.ts

@@ -1,3 +1,4 @@
+import type { AkanNativeConfig } from "./vendor/@akanjs/native/packages/cli/src/config.ts";
 import type { AkanI18nConfig } from "akanjs/common";
 import type { AkanImageConfig } from "akanjs/server";
 
@@ -27,6 +28,41 @@ export interface LibDockerConfig {
   postRuns: DockerRun[];
 }
 
+/** `${process.platform}-${process.arch}` of the computer a desktop app is built on, which is the one it runs on. */
+export const binPlatforms = [
+  "darwin-arm64",
+  "darwin-x64",
+  "linux-arm64",
+  "linux-x64",
+  "win32-arm64",
+  "win32-x64",
+] as const;
+export type BinPlatform = (typeof binPlatforms)[number];
+
+/** Downloaded when the desktop app is built; the file must hash to `sha256`, so plain http is as safe as https. */
+export interface AkanBinUrlSource {
+  url: string;
+  sha256: string;
+  /** The executable inside the archive `url` names (.zip, .tar.gz, .tgz, .tar.xz, .tar.bz2, .tar). */
+  file?: string;
+}
+
+/** A file on the building computer, relative to the `akan.config.ts` that declares it. */
+export interface AkanBinPathSource {
+  path: string;
+  /** The executable inside the archive `path` names. */
+  file?: string;
+}
+
+export type AkanBinSource = AkanBinUrlSource | AkanBinPathSource;
+
+/**
+ * Executables a desktop app carries, by the name its code spawns and then by platform. Their folder comes first on
+ * the app's PATH, so the carried server's `spawn("ffmpeg")` runs the carried file; a native plugin finds it in
+ * `ctx.binDir`.
+ */
+export type AkanBinConfig = Record<string, { [platform in BinPlatform]?: AkanBinSource }>;
+
 export interface AkanRouteDomains {
   main?: string[];
   develop?: string[];
@@ -67,8 +103,10 @@ export type MobileEnv = "local" | "debug" | "develop" | "main";
 export type MobilePermission = "camera" | "contacts" | "location" | "push" | "speech";
 
 export interface AkanMobileTargetAssets {
-  icon?: string;
-  splash?: string;
+  /** A square PNG, relative to the app folder, or it with the color behind its transparent areas. */
+  icon?: string | { image: string; backgroundColor?: string };
+  /** A PNG shown centered at launch, or the launch screen's color, image and when it hides. */
+  splash?: string | NonNullable<AkanNativeConfig["splash"]>;
 }
 
 export interface AkanMobileTargetDeepLinks {
@@ -106,15 +144,72 @@ export interface AkanMobileNativeConfig {
     activity?: string[];
     /** The Firebase project's google-services.json, relative to the app folder, for FCM push on Android. */
     googleServices?: string;
+    /** Media plays with sound without a tap first, as it does on iOS and the desktop: a signage screen. */
+    autoplay?: boolean;
+  };
+  /** Android's notification channel, status bar icon (relative to the app folder) and accent color. */
+  push?: AkanNativeConfig["push"];
+  /** The app's part of the iOS privacy manifest (PrivacyInfo.xcprivacy), which an App Store upload requires. */
+  privacy?: AkanNativeConfig["privacy"];
+  desktop?: {
+    /**
+     * The desktop app carries the app's server (API only, database mode single, on loopback) and its pages call
+     * nothing else. `build-desktop`, `start-desktop` and `publish-update` all read it, and an installed app refuses
+     * a release that carries a server when it has none, or none when it has one.
+     */
+    server?: boolean;
+    /**
+     * `"reload"`: a window whose page's process ends (a crash, a hang) loads it again every time, waiting
+     * longer after each end in a row, and the app relaunches when the webview's browser process ends — for an
+     * app nobody attends. `"errorPage"` (default): one reload, then an error page, and a quit for the browser.
+     */
+    recovery?: "errorPage" | "reload";
+    /** The main window from its first frame: borderless fullscreen, and no taskbar button (Windows, Linux). */
+    window?: { fullscreen?: boolean; skipTaskbar?: boolean };
+    /**
+     * Windows: `"auto"` answers getDisplayMedia() with the first screen at once, no picker or gesture — remote
+     * support on an unattended screen; it covers every media request, so not for an app that asks for a camera.
+     */
+    screenCapture?: "picker" | "auto";
   };
 }
 
+/**
+ * Where an installed app looks for newer releases of itself (the native runtime's updates plugin): the whole app on a
+ * desktop, the web bundle on a phone. `akan publish-update` writes and signs a release with a key on this machine;
+ * `akan pack-update` writes an unsigned phone bundle for whoever holds the key to sign.
+ */
+export interface AkanMobileUpdatesConfig {
+  /**
+   * A static base URL, https in a release build: `<url>/<os>-<arch>/<channel>.json` (desktop) or `<url>/<platform>/…`
+   * (a phone's web bundle).
+   */
+  url: string;
+  /** The update key's public half, the raw 32-byte Ed25519 key in base64 (`akan update-keygen` prints it). */
+  publicKey: string;
+  /**
+   * The manifest the app follows, e.g. a "pilot" target's "pilot". Default: the backend env the app is built for
+   * (`main`, `develop`, `debug`, `local`).
+   */
+  channel?: string;
+  /** How long a newly applied release has to call notifyReady() before it is rolled back, ms. Default 10000. */
+  readyTimeout?: number;
+}
+
+/**
+ * One bundle id, or one per platform, for an app whose store listings already carry different ids. A platform without
+ * its own takes `default`.
+ */
+export type AkanMobileAppId =
+  | string
+  | { default?: string; ios?: string; android?: string; macos?: string; windows?: string; linux?: string };
+
 export interface AkanMobileTargetConfig {
   name: string;
   basePath?: string;
   indexPath?: string;
   appName: string;
-  appId: string;
+  appId: AkanMobileAppId;
   /** Executables, archives and the Swift module; letters, digits, `.`, `_` and `-`. Default: the app's folder name. */
   fileName?: string;
   version: string;
@@ -124,16 +219,19 @@ export interface AkanMobileTargetConfig {
   deepLinks?: AkanMobileTargetDeepLinks;
   files?: AkanMobileTargetFiles;
   native?: AkanMobileNativeConfig;
+  /** Over mobile.updates, field by field: a pilot target names its own channel. */
+  updates?: Partial<AkanMobileUpdatesConfig>;
 }
 
 export interface AkanMobileConfig {
   appName: string;
-  appId: string;
+  appId: AkanMobileAppId;
   fileName?: string;
   version: string;
   buildNum: number;
   files?: AkanMobileTargetFiles;
   native?: AkanMobileNativeConfig;
+  updates?: AkanMobileUpdatesConfig;
   targets: Record<string, AkanMobileTargetConfig>;
 }
 
@@ -228,6 +326,10 @@ export interface AppConfigResult {
    */
   syncPageLibs?: string[] | boolean;
   externalLibs: string[];
+  /** Dependencies whose install scripts `bun install --production` runs, in the image and in a desktop app's server. */
+  trustedDependencies: string[];
+  /** Every desktop build, run and dev session carries these, server or not; the image installs through `docker`. */
+  bin: AkanBinConfig;
   barrelImports: string[];
   optimizeImports: string[];
   images: AkanImageConfig;
@@ -240,6 +342,9 @@ export interface AppConfigResult {
 
 export interface LibConfigResult {
   externalLibs: string[];
+  trustedDependencies: string[];
+  /** Carried by the desktop app of every app that depends on this lib; an app's own entry of the same name wins. */
+  bin: AkanBinConfig;
   /** Image steps every app that mounts this lib inherits, unless that app declares a whole Dockerfile. */
   docker: LibDockerConfig;
   /** Which of this lib's own public fonts every app that mounts it must keep. */
@@ -260,12 +365,16 @@ export interface LibConfigContext {
   readonly type: "lib";
 }
 
-export type AppConfigInput = Omit<DeepPartial<AppConfigResult>, "docker" | "web"> & {
+export type AppConfigInput = Omit<DeepPartial<AppConfigResult>, "docker" | "web" | "bin"> & {
   docker?: DockerOption;
   web?: AkanWebOption;
+  bin?: AkanBinConfig;
+  plugins?: AkanPlugin[];
+};
+export type LibConfigInput = Omit<DeepPartial<LibConfigResult>, "bin"> & {
+  bin?: AkanBinConfig;
   plugins?: AkanPlugin[];
 };
-export type LibConfigInput = DeepPartial<LibConfigResult> & { plugins?: AkanPlugin[] };
 export interface SubspaceDeclaration {
   /** Short name used on the command line and as the git remote suffix. */
   name: string;

package/native/desktop.ts

@@ -0,0 +1,5 @@
+
+
+export { AkanNativeError, mimeFor } from "../vendor/@akanjs/native/packages/core/src/index.ts";
+export type { DesktopContext, DesktopPlugin, NativeEvent } from "../vendor/@akanjs/native/packages/desktop/src/plugin.ts";
+export { createPageVeto, defineDesktopPlugin, externalOpenAllowed } from "../vendor/@akanjs/native/packages/desktop/src/plugin.ts";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "akanjs",
-  "version": "3.0.0-beta.27",
+  "version": "3.0.0-beta.28",
   "sourceType": "module",
   "type": "module",
   "publishConfig": {
@@ -95,6 +95,16 @@
       "import": "./client/native.ts",
       "default": "./client/native.ts"
     },
+    "./client/native/*": {
+      "types": "./types/client/native/*.d.ts",
+      "import": "./client/native/*.ts",
+      "default": "./client/native/*.ts"
+    },
+    "./native/desktop": {
+      "types": "./types/native/desktop.d.ts",
+      "import": "./native/desktop.ts",
+      "default": "./native/desktop.ts"
+    },
     "./webkit": {
       "types": "./types/webkit/index.d.ts",
       "import": "./webkit/index.ts",