diff --git a/.changes/fix-geo-haptics-specta-skip.md b/.changes/fix-geo-haptics-specta-skip.md
deleted file mode 100644
index c52adc335..000000000
--- a/.changes/fix-geo-haptics-specta-skip.md
+++ /dev/null
@@ -1,6 +0,0 @@
----
-haptics: patch
-geolocation: patch
----
-
-Fixed a build failure when the `specta` feature is enabled: the `Error` type used the `#[serde(skip)]` helper attribute, which recent `specta` versions no longer register. It now uses `#[specta(skip)]`.
diff --git a/.changes/global-api-script-reuse-core.md b/.changes/global-api-script-reuse-core.md
deleted file mode 100644
index 7fd096bcf..000000000
--- a/.changes/global-api-script-reuse-core.md
+++ /dev/null
@@ -1,58 +0,0 @@
----
-"autostart": patch
-"autostart-js": patch
-"barcode-scanner": patch
-"barcode-scanner-js": patch
-"biometric": patch
-"biometric-js": patch
-"cli": patch
-"cli-js": patch
-"clipboard-manager": patch
-"clipboard-manager-js": patch
-"deep-link": patch
-"deep-link-js": patch
-"dialog": patch
-"dialog-js": patch
-"fs": patch
-"fs-js": patch
-"geolocation": patch
-"geolocation-js": patch
-"global-shortcut": patch
-"global-shortcut-js": patch
-"haptics": patch
-"haptics-js": patch
-"http": patch
-"http-js": patch
-"log": patch
-"log-js": patch
-"nfc": patch
-"nfc-js": patch
-"notification": patch
-"notification-js": patch
-"opener": patch
-"opener-js": patch
-"os": patch
-"os-js": patch
-"positioner": patch
-"positioner-js": patch
-"process": patch
-"process-js": patch
-"shell": patch
-"shell-js": patch
-"sql": patch
-"sql-js": patch
-"store": patch
-"store-js": patch
-"stronghold": patch
-"stronghold-js": patch
-"updater": patch
-"updater-js": patch
-"upload": patch
-"upload-js": patch
-"websocket": patch
-"websocket-js": patch
-"window-state": patch
-"window-state-js": patch
----
-
-The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
diff --git a/.github/workflows/audit-javascript.yml b/.github/workflows/audit-javascript.yml
index 1c9942b0e..ce56c0265 100644
--- a/.github/workflows/audit-javascript.yml
+++ b/.github/workflows/audit-javascript.yml
@@ -40,18 +40,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - name: Cache pnpm modules
-        uses: actions/cache@v6
-        with:
-          path: ~/.pnpm-store
-          key: ${{ runner.os }}-${{ hashFiles('**/pnpm-lock.yaml') }}
-          restore-keys: |
-            ${{ runner.os }}-
       - uses: actions/setup-node@v7
         with:
           node-version: 'lts/*'
       - uses: pnpm/action-setup@v6
         with:
           run_install: true
+          cache: true # the pnpm store, keyed by OS and lockfile hash and shared by every workflow
       - name: audit
         run: pnpm audit
diff --git a/.github/workflows/check-generated-files.yml b/.github/workflows/check-generated-files.yml
index 0ea70c49b..11f40d1b1 100644
--- a/.github/workflows/check-generated-files.yml
+++ b/.github/workflows/check-generated-files.yml
@@ -158,19 +158,13 @@ jobs:
     steps:
       - uses: actions/checkout@v7
 
-      - name: Cache pnpm modules
-        uses: actions/cache@v6
-        with:
-          path: ~/.pnpm-store
-          key: ${{ runner.os }}-${{ hashFiles('**/pnpm-lock.yaml') }}
-          restore-keys: |
-            ${{ runner.os }}-
       - uses: actions/setup-node@v7
         with:
           node-version: 'lts/*'
       - uses: pnpm/action-setup@v6
         with:
           run_install: true
+          cache: true # the pnpm store, keyed by OS and lockfile hash and shared by every workflow
 
       - name: build api
         working-directory: plugins/${{ matrix.package }}
diff --git a/.github/workflows/covector-version-or-publish.yml b/.github/workflows/covector-version-or-publish.yml
index 3c056cad4..d85a98c9c 100644
--- a/.github/workflows/covector-version-or-publish.yml
+++ b/.github/workflows/covector-version-or-publish.yml
@@ -20,7 +20,51 @@ permissions:
   pull-requests: write
 
 jobs:
+  # covector publishes once no pending change files are left (the version update PR consumed them)
+  # and otherwise opens that PR, which does not need the tests below. In pre-release mode the
+  # change files stay in `.changes` and `pre.json` lists the ones already released.
+  check-publish:
+    runs-on: ubuntu-latest
+    outputs:
+      publish: ${{ steps.check.outputs.publish }}
+    steps:
+      - uses: actions/checkout@v7
+      - id: check
+        run: |
+          released=$(if [ -f .changes/pre.json ]; then jq -r '.changes[]' .changes/pre.json; fi)
+          # grep exits 1 when every change file was released; any other failure fails the step
+          pending=$(find .changes -maxdepth 1 -name '*.md' ! -iname 'readme.md' \
+            | { grep -vxF -e "$released" || [ $? -eq 1 ]; })
+          if [ -n "$pending" ]; then
+            printf 'pending change files:\n%s\n' "$pending"
+            echo "publish=false" >> "$GITHUB_OUTPUT"
+          else
+            echo "publish=true" >> "$GITHUB_OUTPUT"
+          fi
+
+  integration-tests:
+    needs: check-publish
+    if: needs.check-publish.outputs.publish == 'true'
+    uses: ./.github/workflows/integration-tests.yml
+
+  test-api-e2e:
+    needs: check-publish
+    if: needs.check-publish.outputs.publish == 'true'
+    uses: ./.github/workflows/test-api-e2e.yml
+    secrets: inherit
+
+  test-api-e2e-mobile:
+    needs: check-publish
+    if: needs.check-publish.outputs.publish == 'true'
+    uses: ./.github/workflows/test-api-e2e-mobile.yml
+
   version-or-publish:
+    needs:
+      - integration-tests
+      - test-api-e2e
+      - test-api-e2e-mobile
+    # the tests are skipped when covector only versions
+    if: ${{ !cancelled() && !failure() }}
     runs-on: ubuntu-latest
     timeout-minutes: 65
     outputs:
diff --git a/.github/workflows/fmt.yml b/.github/workflows/fmt.yml
index b6023261f..bc23cdcef 100644
--- a/.github/workflows/fmt.yml
+++ b/.github/workflows/fmt.yml
@@ -29,19 +29,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - name: Cache pnpm modules
-        uses: actions/cache@v6
-        with:
-          path: ~/.pnpm-store
-          key: ${{ runner.os }}-${{ hashFiles('**/pnpm-lock.yaml') }}
-          restore-keys: |
-            ${{ runner.os }}-
       - uses: actions/setup-node@v7
         with:
           node-version: 'lts/*'
       - uses: pnpm/action-setup@v6
         with:
           run_install: true
+          cache: true # the pnpm store, keyed by OS and lockfile hash and shared by every workflow
       - run: pnpm format:check
 
   taplo:
diff --git a/.github/workflows/integration-tests.yml b/.github/workflows/integration-tests.yml
index c82fa21a5..350fee796 100644
--- a/.github/workflows/integration-tests.yml
+++ b/.github/workflows/integration-tests.yml
@@ -6,6 +6,8 @@ name: integration tests
 
 on:
   workflow_dispatch:
+  # run before publishing, see covector-version-or-publish.yml
+  workflow_call:
   push:
     branches:
       - v1
@@ -14,6 +16,7 @@ on:
     paths:
       - '.github/workflows/integration-tests.yml'
       - 'plugins/updater/src/**'
+      - 'plugins/updater/tests/**'
   pull_request:
     branches:
       - v1
@@ -22,10 +25,14 @@ on:
     paths:
       - '.github/workflows/integration-tests.yml'
       - 'plugins/updater/src/**'
+      - 'plugins/updater/tests/**'
 
 permissions:
   contents: read
 
+env:
+  CARGO_PROFILE_DEV_DEBUG: 0 # no debuginfo: faster builds and a much smaller target dir to cache
+
 jobs:
   run-integration-tests:
     runs-on: ${{ matrix.platform }}
@@ -47,12 +54,21 @@ jobs:
         if: matrix.platform == 'ubuntu-22.04'
         run: |
           sudo apt-get update
-          sudo apt-get install -y webkit2gtk-4.0 libwebkit2gtk-4.1-dev libgtk-4-dev libayatana-appindicator3-dev libfuse2
+          sudo apt-get install -y webkit2gtk-4.0 libwebkit2gtk-4.1-dev libgtk-4-dev libayatana-appindicator3-dev libfuse2 rpm
 
       - uses: Swatinem/rust-cache@v2
+        with:
+          # Only `v2`/`v3` write to the cache: an entry saved from a pull request lives on its
+          # merge ref, where nothing else can restore it, and every write evicts an entry
+          # that other runs would have hit (10 GB repository limit, LRU eviction).
+          save-if: ${{ github.ref == 'refs/heads/v2' || github.ref == 'refs/heads/v3' }}
 
       - name: install Tauri CLI
-        run: cargo install tauri-cli --git https://github.com/tauri-apps/tauri --branch dev
+        # `--debug --target-dir target`: a dev-profile build in the workspace target dir reuses
+        # the cached dependencies (shared with the test build below) instead of a from-scratch
+        # release build in a temporary dir. `--locked` keeps the dependency versions stable
+        # between runs, so the cached artifacts stay valid.
+        run: cargo install tauri-cli --git https://github.com/tauri-apps/tauri --branch dev --locked --debug --target-dir target
 
       - name: run integration tests
         run: cargo test --test '*' -- --ignored
diff --git a/.github/workflows/lint-javascript.yml b/.github/workflows/lint-javascript.yml
index 81a764b6e..3e530398b 100644
--- a/.github/workflows/lint-javascript.yml
+++ b/.github/workflows/lint-javascript.yml
@@ -13,6 +13,7 @@ on:
     paths:
       - '.github/workflows/lint-javascript.yml'
       - 'plugins/*/guest-js/**'
+      - 'packages/**'
       - '.eslintignore'
       - '.eslintrc.json'
       - '.prettierignore'
@@ -25,6 +26,7 @@ on:
     paths:
       - '.github/workflows/lint-javascript.yml'
       - 'plugins/*/guest-js/**'
+      - 'packages/**'
       - '.eslintignore'
       - '.eslintrc.json'
       - '.prettierignore'
@@ -42,18 +44,18 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
-      - name: Cache pnpm modules
-        uses: actions/cache@v6
-        with:
-          path: ~/.pnpm-store
-          key: ${{ runner.os }}-${{ hashFiles('**/pnpm-lock.yaml') }}
-          restore-keys: |
-            ${{ runner.os }}-
       - uses: actions/setup-node@v7
         with:
           node-version: 'lts/*'
       - uses: pnpm/action-setup@v6
         with:
           run_install: true
+          cache: true # the pnpm store, keyed by OS and lockfile hash and shared by every workflow
+      # the type-checked lint rules (and packages/api-e2e) resolve the plugins'
+      # types from their dist-js build output
+      - name: build
+        run: pnpm build
       - name: eslint
         run: pnpm lint
+      - name: ts:check
+        run: pnpm ts:check
diff --git a/.github/workflows/lint-rust.yml b/.github/workflows/lint-rust.yml
index 097ebedb1..2ef372532 100644
--- a/.github/workflows/lint-rust.yml
+++ b/.github/workflows/lint-rust.yml
@@ -40,6 +40,7 @@ jobs:
       pull-requests: read
     outputs:
       packages: ${{ steps.filter.outputs.changes }}
+      saver: ${{ steps.saver.outputs.saver }}
     steps:
       - uses: actions/checkout@v7
       - uses: dorny/paths-filter@v2
@@ -131,6 +132,22 @@ jobs:
               - .github/workflows/lint-rust.yml
               - plugins/window-state/**
 
+      # Every package job for a platform restores the same rust-cache entry, and exactly one
+      # of them saves it (see the `save-if` of the rust-cache step). Prefer the packages whose
+      # dependency tree covers most of the other plugins' dependencies, so the entry is as
+      # useful as possible for the packages that did not save it.
+      - name: pick the package that saves the cache
+        id: saver
+        env:
+          PACKAGES: ${{ steps.filter.outputs.changes }}
+        run: |
+          saver="$(jq -rn --argjson packages "${PACKAGES:-[]}" '
+            ["tauri-plugin-upload", "tauri-plugin-sql", "tauri-plugin-updater", "tauri-plugin-single-instance"]
+            | map(select(. as $p | $packages | index($p) != null))
+            | first // $packages[0] // empty
+          ')"
+          echo "saver=$saver" >> "$GITHUB_OUTPUT"
+
   clippy:
     needs: changes
     if: ${{ needs.changes.outputs.packages != '[]' && needs.changes.outputs.packages != '' }}
@@ -154,6 +171,11 @@ jobs:
           components: clippy
 
       - uses: Swatinem/rust-cache@v2
+        with:
+          # One entry shared by every package job (the default key is per job, not per
+          # matrix entry), only written from `v2`/`v3` and by a single package job; see
+          # test-rust.yml for the reasoning.
+          save-if: ${{ (github.ref == 'refs/heads/v2' || github.ref == 'refs/heads/v3') && matrix.package == needs.changes.outputs.saver }}
 
       - name: clippy ${{ matrix.package }}
         run: cargo clippy --package ${{ matrix.package }} --all-targets -- -D warnings
diff --git a/.github/workflows/sync.yml b/.github/workflows/sync.yml
index 31aebb06a..643262c08 100644
--- a/.github/workflows/sync.yml
+++ b/.github/workflows/sync.yml
@@ -28,14 +28,6 @@ jobs:
       - name: Fetch git tags
         run: git fetch origin 'refs/tags/*:refs/tags/*'
 
-      - name: Cache pnpm modules
-        uses: actions/cache@v6
-        with:
-          path: ~/.pnpm-store
-          key: ${{ runner.os }}-${{ hashFiles('**/pnpm-lock.yaml') }}
-          restore-keys: |
-            ${{ runner.os }}-
-
       - uses: actions/setup-node@v7
         with:
           node-version: 'lts/*'
@@ -43,6 +35,7 @@ jobs:
       - uses: pnpm/action-setup@v6
         with:
           run_install: true
+          cache: true # the pnpm store, keyed by OS and lockfile hash and shared by every workflow
 
       - name: Build packages
         run: pnpm build
diff --git a/.github/workflows/test-android.yml b/.github/workflows/test-android.yml
index e1ff429a6..9045e984c 100644
--- a/.github/workflows/test-android.yml
+++ b/.github/workflows/test-android.yml
@@ -27,6 +27,9 @@ jobs:
       matrix:
         platform: [ubuntu-latest, macos-latest, windows-latest]
 
+    # No caches on purpose: this workflow only runs on pull requests, so anything it saved
+    # would live on the merge ref where no other run can restore it, while still counting
+    # against the repository's 10 GB cache limit and evicting entries that `v2`/`v3` saved.
     steps:
       - uses: actions/checkout@v7
 
@@ -44,14 +47,12 @@ jobs:
         with:
           distribution: temurin
           java-version: 21
-          cache: gradle
 
       - name: Setup NDK
         uses: nttld/setup-ndk@v1
         id: setup-ndk
         with:
           ndk-version: r25
-          local-cache: true
 
       # TODO check after https://github.com/nttld/setup-ndk/issues/518 is fixed
       - name: Restore Android Symlinks
@@ -67,8 +68,6 @@ jobs:
               echo "Changed $(basename "$link") from $current_target to $new_target"
           done
 
-      - uses: Swatinem/rust-cache@v2
-
       - name: build API
         run: pnpm build
 
diff --git a/.github/workflows/test-api-e2e-mobile.yml b/.github/workflows/test-api-e2e-mobile.yml
new file mode 100644
index 000000000..7a97a15be
--- /dev/null
+++ b/.github/workflows/test-api-e2e-mobile.yml
@@ -0,0 +1,239 @@
+# Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+# SPDX-License-Identifier: Apache-2.0
+# SPDX-License-Identifier: MIT
+
+name: test plugins e2e (mobile)
+
+on:
+  workflow_dispatch:
+  # run before publishing, see covector-version-or-publish.yml
+  workflow_call:
+  push:
+    branches:
+      - v2
+    paths:
+      - '.github/workflows/test-api-e2e-mobile.yml'
+      - 'packages/api-e2e/**'
+      - 'examples/api/**'
+      - 'plugins/*/guest-js/**'
+      - 'plugins/*/src/**'
+      - 'plugins/*/android/**'
+      - 'plugins/*/ios/**'
+      - 'plugins/*/permissions/**'
+      - 'plugins/*/build.rs'
+  pull_request:
+    branches:
+      - v2
+    paths:
+      - '.github/workflows/test-api-e2e-mobile.yml'
+      - 'packages/api-e2e/**'
+      - 'examples/api/**'
+      - 'plugins/*/guest-js/**'
+      - 'plugins/*/src/**'
+      - 'plugins/*/android/**'
+      - 'plugins/*/ios/**'
+      - 'plugins/*/permissions/**'
+      - 'plugins/*/build.rs'
+
+env:
+  RUST_BACKTRACE: 1
+  CARGO_PROFILE_DEV_DEBUG: 0 # keeps the target folder small for better cache efficiency
+
+concurrency:
+  # `github.workflow` is the caller's name in a `workflow_call` run, so the suffix keeps the
+  # desktop and mobile suites from sharing (and cancelling) one group there.
+  group: ${{ github.workflow }}-api-e2e-mobile-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  android:
+    runs-on: ubuntu-latest
+    env:
+      # The emulator runs the host architecture, so only that target is built.
+      E2E_ANDROID_TARGET: x86_64
+
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: install Rust stable
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: x86_64-linux-android
+
+      - name: setup node
+        uses: actions/setup-node@v7
+        with:
+          node-version: 'lts/*'
+      - uses: pnpm/action-setup@v6
+        with:
+          cache: true # the pnpm store, keyed by OS and lockfile hash and shared by every workflow
+
+      - uses: actions/setup-java@v5
+        with:
+          distribution: temurin
+          java-version: 21
+
+      # Same rule as the rust-cache step below: every run restores the Gradle cache and only
+      # `v2`/`v3` save it. setup-java's own `cache: gradle` has no such switch, so the restore
+      # and save steps are spelled out here (same paths and key inputs as setup-java uses).
+      - name: restore gradle cache
+        id: gradle-cache
+        uses: actions/cache/restore@v6
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-${{ runner.os }}-${{ hashFiles('**/*.gradle*', '**/gradle-wrapper.properties') }}
+          restore-keys: gradle-${{ runner.os }}-
+
+      - name: Setup NDK
+        uses: nttld/setup-ndk@v1
+        id: setup-ndk
+        with:
+          ndk-version: r25
+          local-cache: true
+
+      # TODO check after https://github.com/nttld/setup-ndk/issues/518 is fixed
+      - name: Restore Android Symlinks
+        run: |
+          directory="${{ steps.setup-ndk.outputs.ndk-path }}/toolchains/llvm/prebuilt/linux-x86_64/bin"
+          find "$directory" -type l | while read link; do
+              current_target=$(readlink "$link")
+              new_target="$directory/$(basename "$current_target")"
+              ln -sf "$new_target" "$link"
+              echo "Changed $(basename "$link") from $current_target to $new_target"
+          done
+
+      # Hardware acceleration for the emulator.
+      - name: enable KVM
+        run: |
+          echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' | sudo tee /etc/udev/rules.d/99-kvm4all.rules
+          sudo udevadm control --reload-rules
+          sudo udevadm trigger --name-match=kvm
+
+      - uses: Swatinem/rust-cache@v2
+        with:
+          key: android
+          # Only `v2`/`v3` write to the cache: an entry saved from a pull request lives on its
+          # merge ref, where nothing else can restore it, and every write evicts an entry
+          # that other runs would have hit (10 GB repository limit, LRU eviction).
+          save-if: ${{ github.ref == 'refs/heads/v2' || github.ref == 'refs/heads/v3' }}
+
+      - name: install dependencies
+        run: pnpm i --frozen-lockfile
+
+      - name: build plugins
+        run: pnpm build
+
+      # Built before the emulator is up so it does not sit idle (and time out)
+      # during the Rust and Gradle builds; the suite then reuses the APK.
+      - name: build the APK
+        working-directory: ./examples/api
+        env:
+          NDK_HOME: ${{ steps.setup-ndk.outputs.ndk-path }}
+          # a debug build without debug info, which would otherwise grow the APK
+          # past what the emulator can install (see androidBuildEnv in wdio.mobile.ts)
+          CARGO_PROFILE_DEV_DEBUG: '0'
+        run: pnpm tauri android build --debug --apk --target $E2E_ANDROID_TARGET
+
+      - name: save gradle cache
+        if: ${{ (github.ref == 'refs/heads/v2' || github.ref == 'refs/heads/v3') && steps.gradle-cache.outputs.cache-hit != 'true' }}
+        uses: actions/cache/save@v6
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: ${{ steps.gradle-cache.outputs.cache-primary-key }}
+
+      - name: run e2e tests
+        uses: reactivecircus/android-emulator-runner@v2
+        timeout-minutes: 60
+        with:
+          api-level: 35
+          arch: x86_64
+          # google_apis images ship an up-to-date Android System WebView.
+          target: google_apis
+          profile: pixel_6
+          emulator-options: -no-window -gpu swiftshader_indirect -noaudio -no-boot-anim -camera-back none
+          disable-animations: true
+          script: E2E_SKIP_BUILD=1 E2E_SPEC_RETRIES=1 pnpm test:api-e2e:android
+
+      - name: upload appium logs
+        if: failure()
+        uses: actions/upload-artifact@v7
+        with:
+          name: android-appium-logs
+          path: packages/api-e2e/logs
+          if-no-files-found: ignore
+
+  ios:
+    runs-on: macos-latest
+
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: install Rust stable
+        uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: aarch64-apple-ios-sim
+
+      - name: setup node
+        uses: actions/setup-node@v7
+        with:
+          node-version: 'lts/*'
+      - uses: pnpm/action-setup@v6
+        with:
+          cache: true # the pnpm store, keyed by OS and lockfile hash and shared by every workflow
+
+      - uses: Swatinem/rust-cache@v2
+        with:
+          key: ios
+          # Only `v2`/`v3` write to the cache: an entry saved from a pull request lives on its
+          # merge ref, where nothing else can restore it, and every write evicts an entry
+          # that other runs would have hit (10 GB repository limit, LRU eviction).
+          save-if: ${{ github.ref == 'refs/heads/v2' || github.ref == 'refs/heads/v3' }}
+
+      - name: install dependencies
+        run: pnpm i --frozen-lockfile
+
+      - name: build plugins
+        run: pnpm build
+
+      # Simulator build (`aarch64-sim` on the Apple Silicon runners), unsigned.
+      # Built ahead of the suite for symmetry with the Android job.
+      - name: build the simulator app
+        working-directory: ./examples/api
+        run: pnpm tauri ios build --debug --target aarch64-sim --no-sign
+
+      # wdio.ios.conf picks the iPhone simulator on the newest installed runtime
+      # (no device name is hardcoded) and Appium boots it; the XCUITest driver
+      # compiles WebDriverAgent on the first session.
+      - name: run e2e tests
+        timeout-minutes: 60
+        env:
+          E2E_SKIP_BUILD: '1'
+          E2E_SPEC_RETRIES: '1'
+        run: pnpm test:api-e2e:ios
+
+      - name: upload appium logs
+        if: failure()
+        uses: actions/upload-artifact@v7
+        with:
+          name: ios-appium-logs
+          path: packages/api-e2e/logs
+          if-no-files-found: ignore
+
+      - name: collect app crash reports
+        if: failure()
+        run: .scripts/ci/collect-macos-crash-reports.sh "$RUNNER_TEMP/crash-reports"
+
+      - name: upload app crash reports
+        if: failure()
+        uses: actions/upload-artifact@v7
+        with:
+          name: ios-crash-reports
+          path: ${{ runner.temp }}/crash-reports
+          if-no-files-found: ignore
diff --git a/.github/workflows/test-api-e2e.yml b/.github/workflows/test-api-e2e.yml
new file mode 100644
index 000000000..248997345
--- /dev/null
+++ b/.github/workflows/test-api-e2e.yml
@@ -0,0 +1,180 @@
+# Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+# SPDX-License-Identifier: Apache-2.0
+# SPDX-License-Identifier: MIT
+
+name: test plugins e2e
+
+on:
+  workflow_dispatch:
+  # run before publishing, see covector-version-or-publish.yml
+  workflow_call:
+  push:
+    branches:
+      - v2
+    paths:
+      - '.github/workflows/test-api-e2e.yml'
+      - 'packages/api-e2e/**'
+      - 'examples/api/**'
+      - 'plugins/*/guest-js/**'
+      - 'plugins/*/src/**'
+      - 'plugins/*/permissions/**'
+      - 'plugins/*/build.rs'
+  pull_request:
+    branches:
+      - v2
+    paths:
+      - '.github/workflows/test-api-e2e.yml'
+      - 'packages/api-e2e/**'
+      - 'examples/api/**'
+      - 'plugins/*/guest-js/**'
+      - 'plugins/*/src/**'
+      - 'plugins/*/permissions/**'
+      - 'plugins/*/build.rs'
+
+env:
+  RUST_BACKTRACE: 1
+  CARGO_PROFILE_DEV_DEBUG: 0 # keeps the target folder small for better cache efficiency
+  MSEDGEDRIVER_TOOL_REV: 8c4b34f51b45f5cf08013366d703de464ab871d1
+
+concurrency:
+  # `github.workflow` is the caller's name in a `workflow_call` run, so the suffix keeps the
+  # desktop and mobile suites from sharing (and cancelling) one group there.
+  group: ${{ github.workflow }}-api-e2e-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: ${{ matrix.platform.os }}
+
+    strategy:
+      fail-fast: false
+      matrix:
+        platform:
+          - { name: Linux, os: ubuntu-latest }
+          - { name: Windows, os: windows-latest }
+          - { name: macOS, os: macos-latest }
+
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: install Rust stable
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: setup node
+        uses: actions/setup-node@v7
+        with:
+          node-version: 'lts/*'
+      - uses: pnpm/action-setup@v6
+        with:
+          cache: true # the pnpm store, keyed by OS and lockfile hash and shared by every workflow
+
+      - name: install Linux dependencies
+        if: runner.os == 'Linux'
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y \
+            libwebkit2gtk-4.1-dev \
+            webkit2gtk-driver \
+            libgtk-3-dev \
+            libayatana-appindicator3-dev \
+            librsvg2-dev \
+            dbus \
+            xvfb \
+            fluxbox \
+            desktop-file-utils \
+            xdg-utils
+
+      # msedgedriver has to match the installed WebView2 runtime, so msedgedriver-tool
+      # downloads the right version at run time. The tool itself is built from a pinned git
+      # revision and kept in its own small cache entry (accessed by every Windows run, so it
+      # stays hot) instead of being rebuilt from source on every run.
+      - name: restore msedgedriver-tool (Windows)
+        if: runner.os == 'Windows'
+        id: msedgedriver-tool-cache
+        uses: actions/cache@v6
+        with:
+          path: ${{ runner.tool_cache }}/msedgedriver-tool
+          key: msedgedriver-tool-${{ runner.os }}-${{ env.MSEDGEDRIVER_TOOL_REV }}
+
+      - name: install msedgedriver-tool (Windows)
+        if: runner.os == 'Windows' && steps.msedgedriver-tool-cache.outputs.cache-hit != 'true'
+        run: cargo install --git https://github.com/chippers/msedgedriver-tool --rev ${{ env.MSEDGEDRIVER_TOOL_REV }} --locked --root ${{ runner.tool_cache }}/msedgedriver-tool
+
+      - name: install msedgedriver (Windows)
+        if: runner.os == 'Windows'
+        run: |
+          & "${{ runner.tool_cache }}/msedgedriver-tool/bin/msedgedriver-tool.exe"
+          $PWD.Path >> $env:GITHUB_PATH
+
+      - uses: Swatinem/rust-cache@v2
+        with:
+          key: ${{ matrix.platform.os }}
+          # Only `v2`/`v3` write to the cache: an entry saved from a pull request lives on its
+          # merge ref, where nothing else can restore it, and every write evicts an entry
+          # that other runs would have hit (10 GB repository limit, LRU eviction).
+          save-if: ${{ github.ref == 'refs/heads/v2' || github.ref == 'refs/heads/v3' }}
+
+      - name: install dependencies
+        run: pnpm i --frozen-lockfile
+
+      - name: build plugins
+        run: pnpm build
+
+      - name: run e2e tests (Linux)
+        if: runner.os == 'Linux'
+        timeout-minutes: 45
+        # A real window manager (fluxbox) is started so that window-state tests
+        # (size restore) behave, and a session D-Bus so the notification and
+        # clipboard plugins can reach their desktop services.
+        env:
+          E2E_SPEC_RETRIES: '1'
+        run: |
+          xvfb-run --auto-servernum -- dbus-run-session -- bash -c '
+            fluxbox >/dev/null 2>&1 &
+            sleep 1
+            pnpm test:api-e2e
+          '
+
+      - name: run e2e tests (Windows)
+        if: runner.os == 'Windows'
+        timeout-minutes: 45
+        shell: pwsh
+        # msedgedriver hands the app the `--remote-debugging-port` it attaches to through
+        # `WEBVIEW2_ADDITIONAL_BROWSER_ARGUMENTS`, and WebView2 ignores that variable in an
+        # elevated process, which is what the runner gives us. gsudo runs the suite at medium
+        # integrity instead, and the workspace is opened up so the de-elevated process can use it.
+        # See https://github.com/tauri-apps/wry/issues/1782 and
+        # https://github.com/MicrosoftEdge/WebView2Feedback/issues/5645.
+        env:
+          E2E_SPEC_RETRIES: '1'
+        run: |
+          winget install gerardog.gsudo --accept-source-agreements --accept-package-agreements
+          icacls "$env:GITHUB_WORKSPACE" /grant "Everyone:(OI)(CI)F"
+          sudo --integrity Medium pnpm test:api-e2e
+
+      - name: run e2e tests (macOS)
+        if: runner.os == 'macOS' && env.CN_API_KEY != ''
+        timeout-minutes: 45
+        env:
+          CN_API_KEY: ${{ secrets.TAURI_E2E_CN_API_KEY }}
+          E2E_SPEC_RETRIES: '1'
+        # macOS has no native WebDriver for WKWebView, so the app is driven through the
+        # CrabNebula Webdriver (tauri-plugin-automation + test-runner-backend), which
+        # authenticates with CN_API_KEY. wdio.conf enables it automatically on darwin and
+        # builds the `.app` bundle it needs.
+        run: pnpm test:api-e2e
+
+      - name: collect app crash reports (macOS)
+        if: runner.os == 'macOS' && failure()
+        run: .scripts/ci/collect-macos-crash-reports.sh "$RUNNER_TEMP/crash-reports"
+
+      - name: upload app crash reports (macOS)
+        if: runner.os == 'macOS' && failure()
+        uses: actions/upload-artifact@v7
+        with:
+          name: macos-crash-reports
+          path: ${{ runner.temp }}/crash-reports
+          if-no-files-found: ignore
diff --git a/.github/workflows/test-rust.yml b/.github/workflows/test-rust.yml
index 4ed59067e..303cb9c12 100644
--- a/.github/workflows/test-rust.yml
+++ b/.github/workflows/test-rust.yml
@@ -28,6 +28,10 @@ on:
       - '**/Cargo.toml'
       - '**/Cargo.lock'
 
+env:
+  CARGO_PROFILE_DEV_DEBUG: 0 # no debuginfo: faster builds and a much smaller target dir to cache
+  CROSS_REV: 51f46f296253d8122c927c5bb933e3c4f27cc317
+
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
@@ -42,6 +46,7 @@ jobs:
       pull-requests: read
     outputs:
       packages: ${{ steps.filter.outputs.changes }}
+      saver: ${{ steps.saver.outputs.saver }}
     steps:
       - uses: actions/checkout@v7
       - uses: dorny/paths-filter@v2
@@ -188,6 +193,22 @@ jobs:
               - Cargo.lock
               - plugins/window-state/**
 
+      # Every package job for a platform restores the same rust-cache entry, and exactly one
+      # of them saves it (see the `save-if` of the rust-cache step). Prefer the packages whose
+      # dependency tree covers most of the other plugins' dependencies, so the entry is as
+      # useful as possible for the packages that did not save it.
+      - name: pick the package that saves the cache
+        id: saver
+        env:
+          PACKAGES: ${{ steps.filter.outputs.changes }}
+        run: |
+          saver="$(jq -rn --argjson packages "${PACKAGES:-[]}" '
+            ["tauri-plugin-upload", "tauri-plugin-sql", "tauri-plugin-updater", "tauri-plugin-single-instance"]
+            | map(select(. as $p | $packages | index($p) != null))
+            | first // $packages[0] // empty
+          ')"
+          echo "saver=$saver" >> "$GITHUB_OUTPUT"
+
   test:
     needs: changes
     if: ${{ needs.changes.outputs.packages != '[]' && needs.changes.outputs.packages != '' }}
@@ -244,11 +265,34 @@ jobs:
 
       - uses: Swatinem/rust-cache@v2
         with:
-          key: cache-${{ matrix.package }}-${{ matrix.platform.target }}
+          # One entry per platform, shared by every package job: the plugins share most of
+          # their dependency tree (tauri, wry, tao...), and an entry per package and platform
+          # (26 × 5 entries of 500-800 MB each) never fits the repository's 10 GB cache limit.
+          key: ${{ matrix.platform.target }}
+          # Only `v2`/`v3` write to the cache: an entry saved from a pull request lives on its
+          # merge ref, where nothing else can restore it, and every write evicts an entry
+          # that other runs would have hit (10 GB repository limit, LRU eviction).
+          # A single package job saves the shared entry, so the jobs don't race for the key.
+          save-if: ${{ (github.ref == 'refs/heads/v2' || github.ref == 'refs/heads/v3') && matrix.package == needs.changes.outputs.saver }}
+
+      # `cross` is built from a pinned git revision (its latest release predates the Android
+      # targets we need). Keep the binary in its own small cache entry (accessed by every run,
+      # so it stays hot) instead of rebuilding it from source on every run.
+      - name: restore cross
+        if: ${{ matrix.platform.runner == 'cross' }}
+        id: cross-cache
+        uses: actions/cache@v6
+        with:
+          path: ${{ runner.tool_cache }}/cross
+          key: cross-${{ runner.os }}-${{ env.CROSS_REV }}
 
       - name: install cross
+        if: ${{ matrix.platform.runner == 'cross' && steps.cross-cache.outputs.cache-hit != 'true' }}
+        run: cargo +stable install cross --git https://github.com/cross-rs/cross --rev ${{ env.CROSS_REV }} --locked --root ${{ runner.tool_cache }}/cross
+
+      - name: add cross to PATH
         if: ${{ matrix.platform.runner == 'cross' }}
-        run: cargo +stable install cross --git https://github.com/cross-rs/cross
+        run: echo "${{ runner.tool_cache }}/cross/bin" >> $GITHUB_PATH
 
       - name: test ${{ matrix.package }}
         if: ${{ matrix.package != 'tauri-plugin-http' && matrix.package != 'tauri-plugin-dialog' }}
@@ -257,3 +301,13 @@ jobs:
       - name: test ${{ matrix.package }}
         if: ${{ matrix.package == 'tauri-plugin-http' || matrix.package == 'tauri-plugin-dialog' }}
         run: ${{ matrix.platform.runner }} ${{ matrix.platform.command }} --package ${{ matrix.package }} --target ${{ matrix.platform.target }} --all-targets
+
+      # `--all-targets` above does not include doc tests, so they are run separately.
+      # Only on the platforms we actually test on, since cargo skips doc tests when cross compiling.
+      - name: doc test ${{ matrix.package }}
+        if: ${{ matrix.platform.command == 'test' && matrix.package != 'tauri-plugin-http' && matrix.package != 'tauri-plugin-dialog' }}
+        run: ${{ matrix.platform.runner }} test --doc --package ${{ matrix.package }} --target ${{ matrix.platform.target }} --all-features
+
+      - name: doc test ${{ matrix.package }}
+        if: ${{ matrix.platform.command == 'test' && (matrix.package == 'tauri-plugin-http' || matrix.package == 'tauri-plugin-dialog') }}
+        run: ${{ matrix.platform.runner }} test --doc --package ${{ matrix.package }} --target ${{ matrix.platform.target }}
diff --git a/.scripts/ci/collect-macos-crash-reports.sh b/.scripts/ci/collect-macos-crash-reports.sh
new file mode 100755
index 000000000..17067077a
--- /dev/null
+++ b/.scripts/ci/collect-macos-crash-reports.sh
@@ -0,0 +1,50 @@
+#!/bin/bash
+
+# Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+# SPDX-License-Identifier: Apache-2.0
+# SPDX-License-Identifier: MIT
+
+# Collects and prints macOS crash reports after a failed plugins e2e run.
+#
+# The CrabNebula Webdriver proxies every command to a server running *inside* the app
+# process, so when the app dies the suite only ever reports `connection refused` — the
+# actual cause is never in the job log. The app's stdout/stderr is inherited and no panic
+# message is printed, which means it goes down on a signal. macOS records the reason in a
+# crash report, and that is the only place it survives the run.
+#
+# Copies every report into $1 (default: $RUNNER_TEMP/crash-reports) for upload.
+
+set -euo pipefail
+
+dest="${1:-${RUNNER_TEMP:-/tmp}/crash-reports}"
+mkdir -p "$dest"
+
+# ReportCrash writes asynchronously; give the last crash a moment to land.
+sleep 5
+
+found=0
+for f in "$HOME/Library/Logs/DiagnosticReports"/*.ips \
+         "$HOME/Library/Logs/DiagnosticReports/Retired"/*.ips; do
+  [ -e "$f" ] || continue
+  found=$((found + 1))
+  cp "$f" "$dest/"
+  echo "::group::$(basename "$f")"
+  # An .ips file is a one-line JSON header followed by the JSON report body.
+  head -n 1 "$f"
+  tail -n +2 "$f" | jq -r '
+    "exception:   \(.exception // {} | tojson)",
+    "termination: \(.termination // {} | tojson)",
+    "asi:         \(.asi // {} | tojson)",
+    "faulting thread \(.faultingThread // 0):",
+    (. as $r
+      | $r.threads[$r.faultingThread // 0].frames[]?
+      | "  \($r.usedImages[.imageIndex].name // "?")  \(.symbol // "?")  +\(.imageOffset)"),
+    "last ObjC exception:",
+    (. as $r
+      | $r.lastExceptionBacktrace[]?
+      | "  \($r.usedImages[.imageIndex].name // "?")  \(.symbol // "?")  +\(.imageOffset)")
+  ' || cat "$f"
+  echo "::endgroup::"
+done
+
+[ "$found" -gt 0 ] || echo "no crash reports under $HOME/Library/Logs/DiagnosticReports"
diff --git a/Cargo.lock b/Cargo.lock
index 516a33784..199f32065 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -70,13 +70,28 @@ version = "2.0.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "cc7bb162ec39d46ab1ca8c77bf72e890535becd1751bb45f64c597edb4c8c6b3"
 
+[[package]]
+name = "alloc-no-stdlib"
+version = "3.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c2fb6cfd47bf496ff64095c20eaba0c201404ee38714d4142fcfa1dc334fcc7a"
+
 [[package]]
 name = "alloc-stdlib"
 version = "0.2.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "0e76a019e91224d279006ff972f1e984179a6e9feb050adba6ce8274aef23195"
 dependencies = [
- "alloc-no-stdlib",
+ "alloc-no-stdlib 2.0.4",
+]
+
+[[package]]
+name = "alloc-stdlib"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b5c1865780388bfa186411ab5f247819487fc4864c6e9c3106611fa347586e1"
+dependencies = [
+ "alloc-no-stdlib 3.0.0",
 ]
 
 [[package]]
@@ -201,10 +216,13 @@ dependencies = [
  "serde_json",
  "tauri",
  "tauri-build",
+ "tauri-plugin-automation",
+ "tauri-plugin-autostart",
  "tauri-plugin-barcode-scanner",
  "tauri-plugin-biometric",
  "tauri-plugin-cli",
  "tauri-plugin-clipboard-manager",
+ "tauri-plugin-deep-link",
  "tauri-plugin-dialog",
  "tauri-plugin-fs",
  "tauri-plugin-geolocation",
@@ -216,11 +234,14 @@ dependencies = [
  "tauri-plugin-notification",
  "tauri-plugin-opener",
  "tauri-plugin-os",
+ "tauri-plugin-positioner",
  "tauri-plugin-process",
  "tauri-plugin-shell",
+ "tauri-plugin-sql",
  "tauri-plugin-store",
  "tauri-plugin-updater",
  "tauri-plugin-upload",
+ "tauri-plugin-websocket",
  "tauri-plugin-window-state",
  "tauri-runtime-cef",
  "tauri-runtime-wry",
@@ -709,9 +730,20 @@ version = "8.0.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "5cc91aac060a7a1e25823bdccbfb6af1875b88f17c6daac97894eed8207166b3"
 dependencies = [
- "alloc-no-stdlib",
- "alloc-stdlib",
- "brotli-decompressor",
+ "alloc-no-stdlib 2.0.4",
+ "alloc-stdlib 0.2.4",
+ "brotli-decompressor 5.0.3",
+]
+
+[[package]]
+name = "brotli"
+version = "9.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8b851b75c23ca7873623d612fe49bd1989aeb03d08fb9432187eb253d3d4c6b"
+dependencies = [
+ "alloc-no-stdlib 3.0.0",
+ "alloc-stdlib 0.3.0",
+ "brotli-decompressor 6.0.1",
 ]
 
 [[package]]
@@ -720,8 +752,18 @@ version = "5.0.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3a32acac15fe1967bc3986b2a6347dffc965602354ea6f450ad07e8bfd253583"
 dependencies = [
- "alloc-no-stdlib",
- "alloc-stdlib",
+ "alloc-no-stdlib 2.0.4",
+ "alloc-stdlib 0.2.4",
+]
+
+[[package]]
+name = "brotli-decompressor"
+version = "6.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "941cd9bd4ddab83cb46fa5a2d428f1c857b24ac78cb876cf7beb710840934bd7"
+dependencies = [
+ "alloc-no-stdlib 3.0.0",
+ "alloc-stdlib 0.3.0",
 ]
 
 [[package]]
@@ -1171,7 +1213,7 @@ version = "0.4.41"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "58a6d0db8759036a783bc7c3f7a07f8cef3bf9470eb1db3bc86e8bcd1c5d0fe8"
 dependencies = [
- "brotli",
+ "brotli 8.0.4",
  "compression-core",
  "flate2",
  "memchr",
@@ -4692,9 +4734,15 @@ checksum = "d49e936b501e5c5bf01fda3a9452ff86dc3ea98ad5f283e1455153142d97518c"
 dependencies = [
  "bitflags 2.13.2",
  "block2",
+ "libc",
  "objc2",
+ "objc2-cloud-kit",
+ "objc2-core-data",
  "objc2-core-foundation",
  "objc2-core-graphics",
+ "objc2-core-image",
+ "objc2-core-text",
+ "objc2-core-video",
  "objc2-foundation",
  "objc2-quartz-core",
 ]
@@ -4725,6 +4773,7 @@ version = "0.3.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "0b402a653efbb5e82ce4df10683b6b28027616a2715e90009947d50b8dd298fa"
 dependencies = [
+ "bitflags 2.13.2",
  "objc2",
  "objc2-foundation",
 ]
@@ -4794,8 +4843,10 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "d425caf1df73233f29fd8a5c3e5edbc30d2d4307870f802d18f00d83dc5141a6"
 dependencies = [
  "bitflags 2.13.2",
+ "objc2",
  "objc2-core-foundation",
  "objc2-core-graphics",
+ "objc2-io-surface",
 ]
 
 [[package]]
@@ -7647,6 +7698,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e73e30ecc62ae079d8a0f2c0d33963d7c360396e7795d748e005497e9276cab4"
 dependencies = [
  "base64 0.22.1",
+ "brotli 9.0.0",
  "ico",
  "json-patch",
  "plist",
@@ -7696,6 +7748,22 @@ dependencies = [
  "walkdir",
 ]
 
+[[package]]
+name = "tauri-plugin-automation"
+version = "3.0.0-alpha.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da5c599a6e27903f61b1078b0c614070e3a906aaac5acff37cbcb86fac3e3040"
+dependencies = [
+ "libloading 0.8.9",
+ "objc2-app-kit",
+ "serde",
+ "serde_json",
+ "tauri",
+ "tauri-plugin",
+ "tokio",
+ "tracing",
+]
+
 [[package]]
 name = "tauri-plugin-autostart"
 version = "3.0.0-alpha.1"
@@ -7939,8 +8007,6 @@ dependencies = [
  "thiserror 2.0.20",
  "time",
  "url",
- "win7-notifications",
- "windows-version",
 ]
 
 [[package]]
@@ -8278,6 +8344,7 @@ checksum = "643fe91e92f59e637be07901565e0a5c11bc3355f74b78281de77b4e964f9a0c"
 dependencies = [
  "aes-gcm",
  "anyhow",
+ "brotli 9.0.0",
  "cargo_metadata 0.19.2",
  "ctor",
  "dom_query",
@@ -8410,7 +8477,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd"
 dependencies = [
  "fastrand",
- "getrandom 0.3.4",
+ "getrandom 0.4.3",
  "once_cell",
  "rustix",
  "windows-sys 0.61.2",
@@ -9575,16 +9642,6 @@ dependencies = [
  "wasite",
 ]
 
-[[package]]
-name = "win7-notifications"
-version = "0.4.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "63b4745047a00800bd8f2b8fb4b0eb6f7d96822084127f0ff7d68d07f692fe38"
-dependencies = [
- "once_cell",
- "windows-sys 0.59.0",
-]
-
 [[package]]
 name = "winapi"
 version = "0.3.9"
diff --git a/Cargo.toml b/Cargo.toml
index b97e94519..2113eb56b 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -28,7 +28,7 @@ glob = "0.3"
 zbus = "5.9"
 
 [workspace.package]
-edition = "2021"
+edition = "2024"
 authors = ["Tauri Programme within The Commons Conservancy"]
 license = "Apache-2.0 OR MIT"
 rust-version = "1.95"
diff --git a/examples/api/CHANGELOG.md b/examples/api/CHANGELOG.md
index 10deb85ef..758f4f714 100644
--- a/examples/api/CHANGELOG.md
+++ b/examples/api/CHANGELOG.md
@@ -44,6 +44,28 @@
 - Upgraded to `store-js@3.0.0-alpha.0`
 - Upgraded to `updater-js@3.0.0-alpha.0`
 
+## [2.0.46]
+
+### Dependencies
+
+- Upgraded to `fs-js@2.6.0`
+- Upgraded to `notification-js@2.5.0`
+- Upgraded to `barcode-scanner-js@2.5.0`
+- Upgraded to `biometric-js@2.4.0`
+- Upgraded to `cli-js@2.5.0`
+- Upgraded to `clipboard-manager-js@2.4.0`
+- Upgraded to `dialog-js@2.8.0`
+- Upgraded to `global-shortcut-js@2.4.0`
+- Upgraded to `http-js@2.7.0`
+- Upgraded to `log-js@2.10.0`
+- Upgraded to `nfc-js@2.4.0`
+- Upgraded to `opener-js@2.6.0`
+- Upgraded to `os-js@2.4.0`
+- Upgraded to `process-js@2.4.0`
+- Upgraded to `shell-js@2.4.0`
+- Upgraded to `store-js@2.5.0`
+- Upgraded to `updater-js@2.13.0`
+
 ## [2.0.45]
 
 ### Dependencies
diff --git a/examples/api/package.json b/examples/api/package.json
index 4605ba17e..fa94b4a66 100644
--- a/examples/api/package.json
+++ b/examples/api/package.json
@@ -15,6 +15,7 @@
     "@tauri-apps/plugin-biometric": "workspace:*",
     "@tauri-apps/plugin-cli": "workspace:*",
     "@tauri-apps/plugin-clipboard-manager": "workspace:*",
+    "@tauri-apps/plugin-deep-link": "workspace:*",
     "@tauri-apps/plugin-dialog": "workspace:*",
     "@tauri-apps/plugin-fs": "workspace:*",
     "@tauri-apps/plugin-geolocation": "workspace:*",
@@ -25,11 +26,14 @@
     "@tauri-apps/plugin-notification": "workspace:*",
     "@tauri-apps/plugin-opener": "workspace:*",
     "@tauri-apps/plugin-os": "workspace:*",
+    "@tauri-apps/plugin-positioner": "workspace:*",
     "@tauri-apps/plugin-process": "workspace:*",
     "@tauri-apps/plugin-shell": "workspace:*",
+    "@tauri-apps/plugin-sql": "workspace:*",
     "@tauri-apps/plugin-store": "workspace:*",
     "@tauri-apps/plugin-updater": "workspace:*",
     "@tauri-apps/plugin-upload": "workspace:*",
+    "@tauri-apps/plugin-websocket": "workspace:*",
     "@zerodevx/svelte-json-view": "2.0.0"
   },
   "devDependencies": {
diff --git a/examples/api/src-tauri/CHANGELOG.md b/examples/api/src-tauri/CHANGELOG.md
index 1a49b7f01..34229d040 100644
--- a/examples/api/src-tauri/CHANGELOG.md
+++ b/examples/api/src-tauri/CHANGELOG.md
@@ -50,6 +50,30 @@
 - Upgraded to `haptics@3.0.0-alpha.0`
 - Upgraded to `geolocation@3.0.0-alpha.0`
 
+## [2.0.50]
+
+### Dependencies
+
+- Upgraded to `barcode-scanner@2.5.0`
+- Upgraded to `biometric@2.4.0`
+- Upgraded to `clipboard-manager@2.4.0`
+- Upgraded to `dialog@2.8.0`
+- Upgraded to `fs@2.6.0`
+- Upgraded to `geolocation@2.4.0`
+- Upgraded to `haptics@2.4.0`
+- Upgraded to `nfc@2.4.0`
+- Upgraded to `notification@2.5.0`
+- Upgraded to `opener@2.6.0`
+- Upgraded to `shell@2.4.0`
+- Upgraded to `cli@2.5.0`
+- Upgraded to `global-shortcut@2.4.0`
+- Upgraded to `http@2.8.0`
+- Upgraded to `log@2.10.0`
+- Upgraded to `os@2.4.0`
+- Upgraded to `process@2.4.0`
+- Upgraded to `store@2.5.0`
+- Upgraded to `updater@2.13.0`
+
 ## [2.0.49]
 
 ### Dependencies
diff --git a/examples/api/src-tauri/Cargo.toml b/examples/api/src-tauri/Cargo.toml
index 6cecb51c9..cfe18e449 100644
--- a/examples/api/src-tauri/Cargo.toml
+++ b/examples/api/src-tauri/Cargo.toml
@@ -3,7 +3,7 @@ name = "api"
 publish = false
 version = "3.0.0-alpha.1"
 description = "An example Tauri Application showcasing the api"
-edition = "2021"
+edition = "2024"
 rust-version = { workspace = true }
 license = "Apache-2.0 OR MIT"
 
@@ -42,6 +42,17 @@ tauri-plugin-opener = { path = "../../../plugins/opener", version = "3.0.0-alpha
 tauri-plugin-shell = { path = "../../../plugins/shell", version = "3.0.0-alpha.1" }
 tauri-plugin-store = { path = "../../../plugins/store", version = "3.0.0-alpha.1" }
 tauri-plugin-upload = { path = "../../../plugins/upload", version = "3.0.0-alpha.1" }
+tauri-plugin-deep-link = { path = "../../../plugins/deep-link", version = "3.0.0-alpha.1" }
+tauri-plugin-sql = { path = "../../../plugins/sql", version = "3.0.0-alpha.1", features = [
+  "sqlite",
+] }
+tauri-plugin-websocket = { path = "../../../plugins/websocket", version = "3.0.0-alpha.1" }
+
+# WebDriver automation bridge, used by the plugins e2e suite (packages/api-e2e).
+# Desktop-only and behind the off-by-default `automation` feature so it never ships in a
+# regular build.
+[target."cfg(not(any(target_os = \"android\", target_os = \"ios\")))".dependencies]
+tauri-plugin-automation = { version = "3.0.0-alpha.2", optional = true }
 
 [dependencies.tauri]
 workspace = true
@@ -69,8 +80,12 @@ optional = true
 features = ["macos-private-api"]
 
 [target."cfg(any(target_os = \"macos\", windows, target_os = \"linux\", target_os = \"dragonfly\", target_os = \"freebsd\", target_os = \"openbsd\", target_os = \"netbsd\"))".dependencies]
+tauri-plugin-autostart = { path = "../../../plugins/autostart", version = "3.0.0-alpha.1" }
 tauri-plugin-cli = { path = "../../../plugins/cli", version = "3.0.0-alpha.1" }
 tauri-plugin-global-shortcut = { path = "../../../plugins/global-shortcut", version = "3.0.0-alpha.1" }
+tauri-plugin-positioner = { path = "../../../plugins/positioner", version = "3.0.0-alpha.1", features = [
+  "tray-icon",
+] }
 tauri-plugin-updater = { path = "../../../plugins/updater", version = "3.0.0-alpha.1" }
 tauri-plugin-window-state = { path = "../../../plugins/window-state", version = "3.0.0-alpha.1" }
 
@@ -82,6 +97,8 @@ tauri-plugin-geolocation = { path = "../../../plugins/geolocation/", version = "
 tauri-plugin-haptics = { path = "../../../plugins/haptics/", version = "3.0.0-alpha.1" }
 
 [features]
+# Enables the WebDriver automation bridge; set by the e2e suite's build (packages/api-e2e).
+automation = ["dep:tauri-plugin-automation"]
 default = ["wry"]
 # wry is a GTK 3 application on Linux, so it can use the plugin's GTK 3 dialogs.
 wry = ["dep:tauri-runtime-wry", "tauri-plugin-dialog/gtk3"]
diff --git a/examples/api/src-tauri/capabilities/base.json b/examples/api/src-tauri/capabilities/base.json
index ff81cc970..d0f6be1a1 100644
--- a/examples/api/src-tauri/capabilities/base.json
+++ b/examples/api/src-tauri/capabilities/base.json
@@ -18,10 +18,13 @@
     "core:app:allow-set-app-theme",
     "core:window:allow-minimize",
     "core:window:allow-toggle-maximize",
+    "core:window:allow-set-size",
     "core:window:allow-close",
+    "core:webview:allow-create-webview-window",
     "core:window:allow-start-dragging",
     "notification:default",
-    "os:allow-platform",
+    "os:default",
+    "os:allow-hostname",
     "dialog:default",
     {
       "identifier": "shell:allow-spawn",
@@ -48,6 +51,31 @@
         }
       ]
     },
+    {
+      "identifier": "shell:allow-execute",
+      "allow": [
+        {
+          "name": "sh",
+          "cmd": "sh",
+          "args": [
+            "-c",
+            {
+              "validator": ".+"
+            }
+          ]
+        },
+        {
+          "name": "cmd",
+          "cmd": "cmd",
+          "args": [
+            "/C",
+            {
+              "validator": ".+"
+            }
+          ]
+        }
+      ]
+    },
     "shell:allow-kill",
     "shell:allow-stdin-write",
     "process:allow-exit",
@@ -56,6 +84,8 @@
     "clipboard-manager:allow-write-text",
     "clipboard-manager:allow-read-image",
     "clipboard-manager:allow-write-image",
+    "clipboard-manager:allow-write-html",
+    "clipboard-manager:allow-clear",
     "fs:default",
     "fs:read-meta",
     "fs:allow-open",
@@ -65,6 +95,11 @@
     "fs:allow-mkdir",
     "fs:allow-remove",
     "fs:allow-write-file",
+    "fs:allow-create",
+    "fs:allow-copy-file",
+    "fs:allow-seek",
+    "fs:allow-truncate",
+    "fs:allow-ftruncate",
     "fs:scope-download-recursive",
     "fs:scope-resource-recursive",
     {
@@ -94,6 +129,13 @@
       "identifier": "opener:allow-open-path",
       "allow": [{ "path": "$APPDATA" }, { "path": "$APPDATA/**" }]
     },
-    "upload:default"
+    "upload:default",
+    "deep-link:default",
+    "deep-link:allow-register",
+    "deep-link:allow-unregister",
+    "deep-link:allow-is-registered",
+    "sql:default",
+    "sql:allow-execute",
+    "websocket:default"
   ]
 }
diff --git a/examples/api/src-tauri/capabilities/desktop.json b/examples/api/src-tauri/capabilities/desktop.json
index 2c6fcf8ad..26722c2fd 100644
--- a/examples/api/src-tauri/capabilities/desktop.json
+++ b/examples/api/src-tauri/capabilities/desktop.json
@@ -5,11 +5,15 @@
   "windows": ["main"],
   "platforms": ["linux", "macOS", "windows"],
   "permissions": [
+    "autostart:default",
     "cli:default",
+    "positioner:default",
     "updater:default",
     "global-shortcut:allow-unregister",
     "global-shortcut:allow-register",
     "global-shortcut:allow-unregister-all",
+    "global-shortcut:allow-is-registered",
+    "window-state:default",
     { "identifier": "fs:allow-watch", "allow": ["*", "**/*"] }
   ]
 }
diff --git a/examples/api/src-tauri/gen/apple/Podfile b/examples/api/src-tauri/gen/apple/Podfile
index 24605d24a..f4d3303b8 100644
--- a/examples/api/src-tauri/gen/apple/Podfile
+++ b/examples/api/src-tauri/gen/apple/Podfile
@@ -1,7 +1,7 @@
 # Uncomment the next line to define a global platform for your project
 
 target 'api_iOS' do
-platform :ios, '14.0'
+platform :ios, '15.0'
   # Pods for api_iOS
 end
 
diff --git a/examples/api/src-tauri/gen/apple/api.xcodeproj/project.pbxproj b/examples/api/src-tauri/gen/apple/api.xcodeproj/project.pbxproj
index 11be7126e..e01e3a610 100644
--- a/examples/api/src-tauri/gen/apple/api.xcodeproj/project.pbxproj
+++ b/examples/api/src-tauri/gen/apple/api.xcodeproj/project.pbxproj
@@ -304,7 +304,7 @@
 				GCC_WARN_UNINITIALIZED_AUTOS = YES_AGGRESSIVE;
 				GCC_WARN_UNUSED_FUNCTION = YES;
 				GCC_WARN_UNUSED_VARIABLE = YES;
-				IPHONEOS_DEPLOYMENT_TARGET = 14.0;
+				IPHONEOS_DEPLOYMENT_TARGET = 15.0;
 				MTL_ENABLE_DEBUG_INFO = NO;
 				MTL_FAST_MATH = YES;
 				PRODUCT_NAME = "$(TARGET_NAME)";
@@ -366,7 +366,7 @@
 				GCC_WARN_UNINITIALIZED_AUTOS = YES_AGGRESSIVE;
 				GCC_WARN_UNUSED_FUNCTION = YES;
 				GCC_WARN_UNUSED_VARIABLE = YES;
-				IPHONEOS_DEPLOYMENT_TARGET = 14.0;
+				IPHONEOS_DEPLOYMENT_TARGET = 15.0;
 				MTL_ENABLE_DEBUG_INFO = INCLUDE_SOURCE;
 				MTL_FAST_MATH = YES;
 				ONLY_ACTIVE_ARCH = YES;
@@ -400,8 +400,8 @@
 					"$(inherited)",
 					"@executable_path/Frameworks",
 				);
-				"LIBRARY_SEARCH_PATHS[arch=arm64]" = "$(inherited) $(PROJECT_DIR)/Externals/arm64/$(CONFIGURATION) $(SDKROOT)/usr/lib/swift $(TOOLCHAIN_DIR)/usr/lib/swift/$(PLATFORM_NAME) $(TOOLCHAIN_DIR)/usr/lib/swift-5.0/$(PLATFORM_NAME)";
-				"LIBRARY_SEARCH_PATHS[arch=x86_64]" = "$(inherited) $(PROJECT_DIR)/Externals/x86_64/$(CONFIGURATION) $(SDKROOT)/usr/lib/swift $(TOOLCHAIN_DIR)/usr/lib/swift/$(PLATFORM_NAME) $(TOOLCHAIN_DIR)/usr/lib/swift-5.0/$(PLATFORM_NAME)";
+				"LIBRARY_SEARCH_PATHS[arch=arm64]" = "$(inherited) $(PROJECT_DIR)/Externals/arm64/$(CONFIGURATION) $(SDKROOT)/usr/lib/swift $(DEVELOPER_DIR)/Toolchains/XcodeDefault.xctoolchain/usr/lib/swift/$(PLATFORM_NAME) $(DEVELOPER_DIR)/Toolchains/XcodeDefault.xctoolchain/usr/lib/swift-5.0/$(PLATFORM_NAME)";
+				"LIBRARY_SEARCH_PATHS[arch=x86_64]" = "$(inherited) $(PROJECT_DIR)/Externals/x86_64/$(CONFIGURATION) $(SDKROOT)/usr/lib/swift $(DEVELOPER_DIR)/Toolchains/XcodeDefault.xctoolchain/usr/lib/swift/$(PLATFORM_NAME) $(DEVELOPER_DIR)/Toolchains/XcodeDefault.xctoolchain/usr/lib/swift-5.0/$(PLATFORM_NAME)";
 				PRODUCT_BUNDLE_IDENTIFIER = com.tauri.api;
 				PRODUCT_NAME = "Tauri API";
 				SDKROOT = iphoneos;
@@ -432,8 +432,8 @@
 					"$(inherited)",
 					"@executable_path/Frameworks",
 				);
-				"LIBRARY_SEARCH_PATHS[arch=arm64]" = "$(inherited) $(PROJECT_DIR)/Externals/arm64/$(CONFIGURATION) $(SDKROOT)/usr/lib/swift $(TOOLCHAIN_DIR)/usr/lib/swift/$(PLATFORM_NAME) $(TOOLCHAIN_DIR)/usr/lib/swift-5.0/$(PLATFORM_NAME)";
-				"LIBRARY_SEARCH_PATHS[arch=x86_64]" = "$(inherited) $(PROJECT_DIR)/Externals/x86_64/$(CONFIGURATION) $(SDKROOT)/usr/lib/swift $(TOOLCHAIN_DIR)/usr/lib/swift/$(PLATFORM_NAME) $(TOOLCHAIN_DIR)/usr/lib/swift-5.0/$(PLATFORM_NAME)";
+				"LIBRARY_SEARCH_PATHS[arch=arm64]" = "$(inherited) $(PROJECT_DIR)/Externals/arm64/$(CONFIGURATION) $(SDKROOT)/usr/lib/swift $(DEVELOPER_DIR)/Toolchains/XcodeDefault.xctoolchain/usr/lib/swift/$(PLATFORM_NAME) $(DEVELOPER_DIR)/Toolchains/XcodeDefault.xctoolchain/usr/lib/swift-5.0/$(PLATFORM_NAME)";
+				"LIBRARY_SEARCH_PATHS[arch=x86_64]" = "$(inherited) $(PROJECT_DIR)/Externals/x86_64/$(CONFIGURATION) $(SDKROOT)/usr/lib/swift $(DEVELOPER_DIR)/Toolchains/XcodeDefault.xctoolchain/usr/lib/swift/$(PLATFORM_NAME) $(DEVELOPER_DIR)/Toolchains/XcodeDefault.xctoolchain/usr/lib/swift-5.0/$(PLATFORM_NAME)";
 				PRODUCT_BUNDLE_IDENTIFIER = com.tauri.api;
 				PRODUCT_NAME = "Tauri API";
 				SDKROOT = iphoneos;
diff --git a/examples/api/src-tauri/gen/apple/project.yml b/examples/api/src-tauri/gen/apple/project.yml
index d789500eb..55c95eff2 100644
--- a/examples/api/src-tauri/gen/apple/project.yml
+++ b/examples/api/src-tauri/gen/apple/project.yml
@@ -2,7 +2,7 @@ name: api
 options:
   bundleIdPrefix: com.tauri.api
   deploymentTarget:
-    iOS: 14.0
+    iOS: 15.0
 fileGroups: [../../src]
 configs:
   debug: debug
@@ -65,8 +65,8 @@ targets:
         ENABLE_BITCODE: false
         ARCHS: [arm64]
         VALID_ARCHS: arm64 
-        LIBRARY_SEARCH_PATHS[arch=x86_64]: $(inherited) $(PROJECT_DIR)/Externals/x86_64/$(CONFIGURATION) $(SDKROOT)/usr/lib/swift $(TOOLCHAIN_DIR)/usr/lib/swift/$(PLATFORM_NAME) $(TOOLCHAIN_DIR)/usr/lib/swift-5.0/$(PLATFORM_NAME)
-        LIBRARY_SEARCH_PATHS[arch=arm64]: $(inherited) $(PROJECT_DIR)/Externals/arm64/$(CONFIGURATION) $(SDKROOT)/usr/lib/swift $(TOOLCHAIN_DIR)/usr/lib/swift/$(PLATFORM_NAME) $(TOOLCHAIN_DIR)/usr/lib/swift-5.0/$(PLATFORM_NAME)
+        LIBRARY_SEARCH_PATHS[arch=x86_64]: $(inherited) $(PROJECT_DIR)/Externals/x86_64/$(CONFIGURATION) $(SDKROOT)/usr/lib/swift $(DEVELOPER_DIR)/Toolchains/XcodeDefault.xctoolchain/usr/lib/swift/$(PLATFORM_NAME) $(DEVELOPER_DIR)/Toolchains/XcodeDefault.xctoolchain/usr/lib/swift-5.0/$(PLATFORM_NAME)
+        LIBRARY_SEARCH_PATHS[arch=arm64]: $(inherited) $(PROJECT_DIR)/Externals/arm64/$(CONFIGURATION) $(SDKROOT)/usr/lib/swift $(DEVELOPER_DIR)/Toolchains/XcodeDefault.xctoolchain/usr/lib/swift/$(PLATFORM_NAME) $(DEVELOPER_DIR)/Toolchains/XcodeDefault.xctoolchain/usr/lib/swift-5.0/$(PLATFORM_NAME)
         ALWAYS_EMBED_SWIFT_STANDARD_LIBRARIES: true
         EXCLUDED_ARCHS[sdk=iphoneos*]: x86_64
       groups: [app]
diff --git a/examples/api/src-tauri/src/lib.rs b/examples/api/src-tauri/src/lib.rs
index 464e43c80..7479eda1a 100644
--- a/examples/api/src-tauri/src/lib.rs
+++ b/examples/api/src-tauri/src/lib.rs
@@ -10,8 +10,8 @@ mod tray;
 
 use serde::Serialize;
 use tauri::{
-    webview::{PageLoadEvent, WebviewWindowBuilder},
     App, AppHandle, Emitter, Listener, RunEvent, WebviewUrl,
+    webview::{PageLoadEvent, WebviewWindowBuilder},
 };
 
 #[derive(Clone, Serialize)]
@@ -33,11 +33,21 @@ pub fn run() {
     #[cfg(not(feature = "cef"))]
     let builder = tauri::Builder::default().runtime(tauri_runtime_wry::Wry::default());
 
+    // WebDriver automation bridge for the plugins e2e suite (packages/api-e2e).
+    // Registered as early as possible per the plugin's docs, behind the
+    // off-by-default `automation` feature.
+    #[cfg(all(desktop, feature = "automation"))]
+    let builder = builder.plugin(tauri_plugin_automation::init());
+
     #[allow(unused_mut)]
     let mut builder = builder
         .plugin(
             tauri_plugin_log::Builder::default()
                 .level(log::LevelFilter::Info)
+                // forward records to the webview so `attachLogger`/`attachConsole` work
+                .target(tauri_plugin_log::Target::new(
+                    tauri_plugin_log::TargetKind::Webview,
+                ))
                 .build(),
         )
         .plugin(tauri_plugin_fs::init())
@@ -51,12 +61,33 @@ pub fn run() {
         .plugin(tauri_plugin_shell::init())
         .plugin(tauri_plugin_store::Builder::default().build())
         .plugin(tauri_plugin_upload::init())
+        .plugin(tauri_plugin_deep_link::init())
+        .plugin(tauri_plugin_websocket::init())
+        .plugin(
+            tauri_plugin_sql::Builder::new()
+                .add_migrations(
+                    "sqlite:api.db",
+                    vec![tauri_plugin_sql::Migration {
+                        version: 1,
+                        description: "create_todos_table",
+                        sql: "CREATE TABLE todos (id INTEGER PRIMARY KEY AUTOINCREMENT, title TEXT NOT NULL, done INTEGER NOT NULL DEFAULT 0);",
+                        kind: tauri_plugin_sql::MigrationKind::Up,
+                    }],
+                )
+                .build(),
+        )
         .setup(move |app| {
             #[cfg(desktop)]
             {
+                // registered before the tray, whose events it tracks
+                app.handle().plugin(tauri_plugin_positioner::init())?;
                 #[cfg(not(feature = "cef"))]
                 tray::create_tray(app.handle())?;
                 app.handle().plugin(tauri_plugin_cli::init())?;
+                app.handle().plugin(tauri_plugin_autostart::init(
+                    tauri_plugin_autostart::MacosLauncher::LaunchAgent,
+                    None,
+                ))?;
                 app.handle()
                     .plugin(tauri_plugin_global_shortcut::Builder::new().build())?;
                 app.handle()
@@ -98,10 +129,7 @@ pub fn run() {
                 webview_window_builder = webview_window_builder.transparent(true);
             }
 
-            let webview = webview_window_builder.build().unwrap();
-
-            #[cfg(debug_assertions)]
-            webview.open_devtools();
+            let _webview = webview_window_builder.build().unwrap();
 
             std::thread::spawn(|| {
                 let server = match tiny_http::Server::http("localhost:3003") {
@@ -185,12 +213,12 @@ pub fn run() {
         // Only the tray icon keeps this app useful without windows, and there is
         // no tray on CEF.
         #[cfg(all(desktop, not(feature = "cef")))]
-        if let RunEvent::ExitRequested { code, api, .. } = &_event {
-            if code.is_none() {
-                // Keep the event loop running even if all windows are closed
-                // This allow us to catch system tray events when there is no window
-                api.prevent_exit();
-            }
+        if let RunEvent::ExitRequested { code, api, .. } = &_event
+            && code.is_none()
+        {
+            // Keep the event loop running even if all windows are closed
+            // This allow us to catch system tray events when there is no window
+            api.prevent_exit();
         }
     })
 }
diff --git a/examples/api/src-tauri/src/tray.rs b/examples/api/src-tauri/src/tray.rs
index 7b1321a57..f0fdff344 100644
--- a/examples/api/src-tauri/src/tray.rs
+++ b/examples/api/src-tauri/src/tray.rs
@@ -4,9 +4,9 @@
 
 use std::sync::atomic::{AtomicBool, Ordering};
 use tauri::{
+    Manager, Runtime, WebviewUrl, WebviewWindowBuilder,
     menu::{Menu, MenuItem},
     tray::{MouseButton, MouseButtonState, TrayIconBuilder, TrayIconEvent},
-    Manager, Runtime, WebviewUrl, WebviewWindowBuilder,
 };
 
 pub fn create_tray<R: Runtime>(app: &tauri::AppHandle<R>) -> tauri::Result<()> {
@@ -107,6 +107,8 @@ pub fn create_tray<R: Runtime>(app: &tauri::AppHandle<R>) -> tauri::Result<()> {
             _ => {}
         })
         .on_tray_icon_event(|tray, event| {
+            // lets the positioner plugin place windows relative to the tray icon
+            tauri_plugin_positioner::on_tray_event(tray.app_handle(), &event);
             if let TrayIconEvent::Click {
                 button_state: MouseButtonState::Down,
                 button: MouseButton::Left,
diff --git a/examples/api/src-tauri/tauri.conf.json b/examples/api/src-tauri/tauri.conf.json
index 56dccd6bb..5c0dd8c32 100644
--- a/examples/api/src-tauri/tauri.conf.json
+++ b/examples/api/src-tauri/tauri.conf.json
@@ -104,7 +104,7 @@
       }
     },
     "iOS": {
-      "minimumSystemVersion": "14.0"
+      "minimumSystemVersion": "15.0"
     }
   }
 }
diff --git a/examples/api/src/App.svelte b/examples/api/src/App.svelte
index 00b914810..205b46f07 100644
--- a/examples/api/src/App.svelte
+++ b/examples/api/src/App.svelte
@@ -33,6 +33,11 @@
   import Geolocation from './views/Geolocation.svelte'
   import Haptics from './views/Haptics.svelte'
   import Nfc from './views/Nfc.svelte'
+  import Autostart from './views/Autostart.svelte'
+  import DeepLink from './views/DeepLink.svelte'
+  import Positioner from './views/Positioner.svelte'
+  import Sql from './views/Sql.svelte'
+  import WebSocket from './views/WebSocket.svelte'
 
   import TitleBar from './lib/TitleBar.svelte'
 
@@ -131,6 +136,31 @@
       component: WebRTC,
       icon: 'i-ph-broadcast'
     },
+    {
+      label: 'WebSocket',
+      component: WebSocket,
+      icon: 'i-ph-plugs-connected'
+    },
+    {
+      label: 'SQL',
+      component: Sql,
+      icon: 'i-ph-database'
+    },
+    {
+      label: 'Deep link',
+      component: DeepLink,
+      icon: 'i-ph-link'
+    },
+    !isMobile && {
+      label: 'Autostart',
+      component: Autostart,
+      icon: 'i-ph-power'
+    },
+    !isMobile && {
+      label: 'Positioner',
+      component: Positioner,
+      icon: 'i-ph-arrows-out-cardinal'
+    },
     isMobile && {
       label: 'Scanner',
       component: Scanner,
diff --git a/examples/api/src/views/Autostart.svelte b/examples/api/src/views/Autostart.svelte
new file mode 100644
index 000000000..1f8c557d3
--- /dev/null
+++ b/examples/api/src/views/Autostart.svelte
@@ -0,0 +1,30 @@
+<script>
+  import { enable, disable, isEnabled } from '@tauri-apps/plugin-autostart'
+  import { onMount } from 'svelte'
+
+  export let onMessage
+
+  let enabled = false
+
+  async function refresh() {
+    enabled = await isEnabled()
+  }
+
+  function toggle() {
+    ;(enabled ? disable() : enable())
+      .then(refresh)
+      .then(() => onMessage(`Autostart ${enabled ? 'enabled' : 'disabled'}`))
+      .catch(onMessage)
+  }
+
+  onMount(() => {
+    refresh().catch(onMessage)
+  })
+</script>
+
+<div class="flex flex-row gap-2 items-center">
+  <button class="btn" on:click={toggle}>
+    {enabled ? 'Disable' : 'Enable'} autostart
+  </button>
+  <span>Launching at login is {enabled ? 'enabled' : 'disabled'}</span>
+</div>
diff --git a/examples/api/src/views/DeepLink.svelte b/examples/api/src/views/DeepLink.svelte
new file mode 100644
index 000000000..9a1a19153
--- /dev/null
+++ b/examples/api/src/views/DeepLink.svelte
@@ -0,0 +1,67 @@
+<script>
+  import {
+    getCurrent,
+    onOpenUrl,
+    register,
+    unregister,
+    isRegistered
+  } from '@tauri-apps/plugin-deep-link'
+  import { onMount, onDestroy } from 'svelte'
+
+  export let onMessage
+
+  let current = null
+  let protocol = 'tauri-api'
+  let unlisten
+
+  onMount(async () => {
+    try {
+      current = await getCurrent()
+      unlisten = await onOpenUrl((urls) => {
+        current = urls
+        onMessage(`Opened with ${urls.join(', ')}`)
+      })
+    } catch (error) {
+      onMessage(error)
+    }
+  })
+
+  onDestroy(() => {
+    unlisten?.()
+  })
+
+  function registerProtocol() {
+    register(protocol)
+      .then(() => onMessage(`Registered ${protocol}://`))
+      .catch(onMessage)
+  }
+
+  function unregisterProtocol() {
+    unregister(protocol)
+      .then(() => onMessage(`Unregistered ${protocol}://`))
+      .catch(onMessage)
+  }
+
+  function checkProtocol() {
+    isRegistered(protocol)
+      .then((registered) =>
+        onMessage(
+          `${protocol}:// is ${registered ? '' : 'not '}handled by this app`
+        )
+      )
+      .catch(onMessage)
+  }
+</script>
+
+<div class="flex flex-col gap-2">
+  <div>
+    Current deep link: <code>{current ? current.join(', ') : 'none'}</code>
+  </div>
+
+  <div class="flex flex-row gap-2 items-center">
+    <input class="input grow" placeholder="Scheme" bind:value={protocol} />
+    <button class="btn" on:click={registerProtocol}>Register</button>
+    <button class="btn" on:click={unregisterProtocol}>Unregister</button>
+    <button class="btn" on:click={checkProtocol}>Is registered?</button>
+  </div>
+</div>
diff --git a/examples/api/src/views/Positioner.svelte b/examples/api/src/views/Positioner.svelte
new file mode 100644
index 000000000..1f79167c1
--- /dev/null
+++ b/examples/api/src/views/Positioner.svelte
@@ -0,0 +1,40 @@
+<script>
+  import {
+    moveWindow,
+    moveWindowConstrained,
+    Position
+  } from '@tauri-apps/plugin-positioner'
+
+  export let onMessage
+
+  // `Position` is a numeric enum, so it also maps the values back to their names
+  const positions = Object.keys(Position).filter((key) => isNaN(Number(key)))
+
+  let position = 'Center'
+  let constrained = false
+
+  function move() {
+    ;(constrained ? moveWindowConstrained : moveWindow)(Position[position])
+      .then(() => onMessage(`Moved the window to ${position}`))
+      .catch(onMessage)
+  }
+</script>
+
+<div class="flex flex-col gap-2">
+  <p>
+    The tray positions only resolve once the tray icon has been clicked, which
+    reports its location to the plugin.
+  </p>
+  <div class="flex flex-row gap-2 items-center">
+    <select class="input" bind:value={position}>
+      {#each positions as name}
+        <option value={name}>{name}</option>
+      {/each}
+    </select>
+    <label>
+      <input type="checkbox" bind:checked={constrained} />
+      Constrain to the tray icon's monitor
+    </label>
+    <button class="btn" on:click={move}>Move window</button>
+  </div>
+</div>
diff --git a/examples/api/src/views/Sql.svelte b/examples/api/src/views/Sql.svelte
new file mode 100644
index 000000000..45e656e44
--- /dev/null
+++ b/examples/api/src/views/Sql.svelte
@@ -0,0 +1,68 @@
+<script>
+  import Database from '@tauri-apps/plugin-sql'
+  import { onMount } from 'svelte'
+
+  export let onMessage
+
+  // the `todos` table is created by the migration the app registers for this database
+  let db
+  let todos = []
+  let title = ''
+
+  async function refresh() {
+    todos = await db.select('SELECT * FROM todos ORDER BY id')
+  }
+
+  onMount(async () => {
+    try {
+      db = await Database.load('sqlite:api.db')
+      await refresh()
+    } catch (error) {
+      onMessage(error)
+    }
+  })
+
+  function add() {
+    db.execute('INSERT INTO todos (title) VALUES ($1)', [title])
+      .then((result) => {
+        onMessage(result)
+        title = ''
+        return refresh()
+      })
+      .catch(onMessage)
+  }
+
+  function toggle(todo) {
+    db.execute('UPDATE todos SET done = $1 WHERE id = $2', [
+      todo.done ? 0 : 1,
+      todo.id
+    ])
+      .then(refresh)
+      .catch(onMessage)
+  }
+
+  function remove(todo) {
+    db.execute('DELETE FROM todos WHERE id = $1', [todo.id])
+      .then(refresh)
+      .catch(onMessage)
+  }
+</script>
+
+<div class="flex flex-col gap-2">
+  <form class="flex flex-row gap-2" on:submit|preventDefault={add}>
+    <input class="input grow" placeholder="New todo" bind:value={title} />
+    <button class="btn" type="submit" disabled={!db || !title}>Add</button>
+  </form>
+
+  {#each todos as todo (todo.id)}
+    <div class="flex flex-row gap-2 items-center">
+      <input
+        type="checkbox"
+        checked={todo.done === 1}
+        on:change={() => toggle(todo)}
+      />
+      <span class="grow" class:line-through={todo.done === 1}>{todo.title}</span>
+      <button class="btn" on:click={() => remove(todo)}>Delete</button>
+    </div>
+  {/each}
+</div>
diff --git a/examples/api/src/views/Store.svelte b/examples/api/src/views/Store.svelte
index b03f563db..6ba9a9a59 100644
--- a/examples/api/src/views/Store.svelte
+++ b/examples/api/src/views/Store.svelte
@@ -61,7 +61,7 @@
 
   async function reload() {
     try {
-      await store.reload({ overrideDefaults: true })
+      await store.reload({ ignoreDefaults: true })
     } catch (error) {
       onMessage(error)
     }
diff --git a/examples/api/src/views/WebSocket.svelte b/examples/api/src/views/WebSocket.svelte
new file mode 100644
index 000000000..9a91f89ab
--- /dev/null
+++ b/examples/api/src/views/WebSocket.svelte
@@ -0,0 +1,55 @@
+<script>
+  import WebSocket from '@tauri-apps/plugin-websocket'
+  import { onDestroy } from 'svelte'
+
+  export let onMessage
+
+  let url = 'wss://echo.websocket.org'
+  let message = ''
+  let ws
+
+  async function connect() {
+    try {
+      ws = await WebSocket.connect(url)
+      ws.addListener((received) => {
+        onMessage(received)
+        if (received.type === 'Close') {
+          ws = null
+        }
+      })
+      onMessage(`Connected to ${url}`)
+    } catch (error) {
+      onMessage(error)
+    }
+  }
+
+  function send() {
+    ws.send(message)
+      .then(() => (message = ''))
+      .catch(onMessage)
+  }
+
+  function disconnect() {
+    ws.disconnect().catch(onMessage)
+    ws = null
+  }
+
+  onDestroy(() => {
+    ws?.disconnect().catch(() => {})
+  })
+</script>
+
+<div class="flex flex-col gap-2">
+  {#if ws}
+    <form class="flex flex-row gap-2" on:submit|preventDefault={send}>
+      <input class="input grow" placeholder="Message" bind:value={message} />
+      <button class="btn" type="submit">Send</button>
+      <button class="btn" type="button" on:click={disconnect}>Disconnect</button>
+    </form>
+  {:else}
+    <form class="flex flex-row gap-2" on:submit|preventDefault={connect}>
+      <input class="input grow" placeholder="ws:// or wss:// URL" bind:value={url} />
+      <button class="btn" type="submit">Connect</button>
+    </form>
+  {/if}
+</div>
diff --git a/package.json b/package.json
index 7fe38ce34..73d79771f 100644
--- a/package.json
+++ b/package.json
@@ -8,6 +8,10 @@
     "lint": "eslint .",
     "format": "prettier --write .",
     "format:check": "prettier --check .",
+    "ts:check": "pnpm run -r ts:check",
+    "test:api-e2e": "pnpm run --filter \"api-e2e\" e2e",
+    "test:api-e2e:android": "pnpm run --filter \"api-e2e\" e2e:android",
+    "test:api-e2e:ios": "pnpm run --filter \"api-e2e\" e2e:ios",
     "example:api:dev": "pnpm run --filter \"api\" tauri dev"
   },
   "devDependencies": {
diff --git a/packages/api-e2e/README.md b/packages/api-e2e/README.md
new file mode 100644
index 000000000..07e97920c
--- /dev/null
+++ b/packages/api-e2e/README.md
@@ -0,0 +1,250 @@
+# Plugins end-to-end tests
+
+WebdriverIO suite that exercises the JavaScript API of the plugins in this
+repository against a **real** Tauri app — the [`examples/api`](../../examples/api)
+validation app — rather than a mocked backend, on desktop (Linux, macOS, Windows)
+and mobile (Android, iOS). Each plugin has its own spec file, shared by every
+platform, and adding coverage for a new plugin API is normally just dropping in
+one more spec.
+
+It mirrors the [`@tauri-apps/api` e2e suite](https://github.com/tauri-apps/tauri/tree/dev/packages/api-e2e)
+in the core repository; the `@tauri-apps/api` modules themselves are covered there.
+
+## How it works
+
+- The example app is built with `withGlobalTauri: true`, so the `@tauri-apps/api` surface
+  is reachable on `window.__TAURI__` inside the webview, and every plugin's `api-iife.js`
+  registers its API next to it (`window.__TAURI__.fs`, `window.__TAURI__.clipboardManager`,
+  …, the package name without the `@tauri-apps/plugin-` prefix, camel-cased).
+- On desktop, WebdriverIO drives the app through [`@crabnebula/tauri-driver`](https://www.npmjs.com/package/@crabnebula/tauri-driver),
+  which bridges the WebDriver protocol to each platform's webview:
+  - **macOS** — the CrabNebula Webdriver, which needs [`tauri-plugin-automation`](https://crates.io/crates/tauri-plugin-automation)
+    (registered in `examples/api` behind its off-by-default `automation` Cargo feature, which
+    the suite's build enables) and a locally-running `@crabnebula/test-runner-backend`,
+    authenticated with `CN_API_KEY`.
+  - **Linux** — `webkit2gtk-driver` (`WebKitWebDriver` on `PATH`).
+  - **Windows** — `msedgedriver.exe` on `PATH`. It hands the app the `--remote-debugging-port`
+    it attaches to through `WEBVIEW2_ADDITIONAL_BROWSER_ARGUMENTS`, which WebView2 ignores in an
+    elevated process ([wry#1782](https://github.com/tauri-apps/wry/issues/1782)), so the suite has
+    to run unelevated.
+- On mobile, WebdriverIO drives the app through [Appium](https://appium.io) (started by
+  `@wdio/appium-service`; the drivers are plain devDependencies of this package, which Appium
+  picks up on its own):
+  - **Android** — the UiAutomator2 driver. The suite switches to the app's `WEBVIEW_*`
+    context, which chromedriver reaches through the WebView's debugging socket. Debug builds
+    turn that on (`setWebContentsDebuggingEnabled`), so the suite builds a debug APK. A
+    chromedriver matching the device's WebView is downloaded on demand (see `E2E_CHROMEDRIVER`).
+  - **iOS** — the XCUITest driver on a simulator, attaching to the WKWebView through the
+    WebKit remote inspector. Debug builds mark the webview `isInspectable`, so the suite
+    builds an unsigned debug simulator app. The inspector identifies an app by the
+    `application-identifier` entitlement that Xcode embeds when it code signs a simulator
+    build; an unsigned one has none and is listed as `process-<executable name>` instead of
+    its bundle identifier, so the config has the driver match that name too
+    (`appium:additionalWebviewBundleIds`). The driver also starts with a script timeout of
+    0, which the config raises to the 30s the other drivers default to, or every
+    `executeAsync` would time out at once.
+- Specs never `eval` in the page. They pass a function to the [`tauri()`](test/helpers/index.ts)
+  helper, which serializes it and runs it via the driver's own (CSP-exempt) script injection,
+  handing it `window.__TAURI__` as the first argument and returning its JSON result.
+- Each spec file gets its own session — a fresh `tauri-driver` (and therefore a fresh app
+  instance) on desktop, a fresh Appium session (which relaunches the app) on mobile — so
+  each plugin's suite runs in isolation.
+- A small [fixture server](test/helpers/server.ts) is started for the whole run. It serves
+  the updater manifest the desktop e2e build points the updater at (see
+  [`tauri.e2e.conf.json`](tauri.e2e.conf.json)) and the upload/download fixtures. It listens
+  on the host's loopback; the iOS simulator shares that network stack, and on Android the
+  mobile config runs `adb reverse` so the same `127.0.0.1` URL works on the device. The
+  `http` specs use the echo server the example app itself spawns on port 3003, since that
+  is the only `http://` origin in the example's http scope. The fixture server also has a
+  WebSocket echo endpoint (`ws://127.0.0.1:3004/ws`) for the `websocket` specs.
+
+## What is (not) covered
+
+The example only registers each plugin on the platforms it supports, so the suites
+split three ways: desktop-only plugins are skipped on mobile, mobile-only plugins are
+skipped on desktop, and the rest run everywhere with the odd test gated.
+
+| Plugin              | Coverage                                                                                                                                                               | On mobile                                                                                |
+| ------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------- |
+| `autostart`         | enable/disable/isEnabled, restoring the host's original state.                                                                                                         | Skipped — desktop-only plugin.                                                           |
+| `cli`               | `getMatches` shape for an argument-less launch.                                                                                                                        | Skipped — desktop-only plugin.                                                           |
+| `clipboard-manager` | text, HTML and image round-trips, `clear`, error paths.                                                                                                                | Text only; HTML and images are unsupported there.                                        |
+| `deep-link`         | `getCurrent` on a plain launch, `onOpenUrl` delivery, runtime `register`/`isRegistered`/`unregister` on Linux and Windows.                                             | Only that runtime registration is unsupported.                                           |
+| `dialog`            | Only that the API is registered — every dialog blocks on native UI the driver cannot operate.                                                                          | Same.                                                                                    |
+| `fs`                | read/write/stat/copy/rename/remove/truncate, `FileHandle`, line iteration, watchers, scope.                                                                            | All but the watchers (`fs:allow-watch` is desktop-only here).                            |
+| `global-shortcut`   | register/unregister/isRegistered/unregisterAll and error paths. Shortcuts cannot be triggered.                                                                         | Skipped — desktop-only plugin.                                                           |
+| `http`              | `fetch` methods, headers, JSON/bytes/multipart bodies, the cookie jar, abort, scope, failures.                                                                         | Same.                                                                                    |
+| `log`               | `attachLogger`/`attachConsole` for webview and Rust records, level filtering.                                                                                          | Same.                                                                                    |
+| `notification`      | Permission model and the `window.Notification` override. Sending is fire-and-forget and display is not observable.                                                     | Action types, pending/active lists after cancel/remove, channels, listeners — see below. |
+| `opener`            | Scope enforcement only — a successful open launches an external app the suite cannot close.                                                                            | Same.                                                                                    |
+| `os`                | Every function but `version` (which has nothing to compare against), checked against what the app was built for and the host.                                          | Same, minus `hostname`.                                                                  |
+| `positioner`        | Screen and tray positions (with a tray rect handed in through `handleIconState`), `moveWindowConstrained`, the missing-tray error (WM dependent).                      | Skipped — desktop-only plugin.                                                           |
+| `process`           | Only that the API is registered — `exit`/`relaunch` terminate the app under test.                                                                                      | Same.                                                                                    |
+| `shell`             | `execute`, `spawn` with stdout/stderr/close events, stdin, `kill`, scope enforcement.                                                                                  | Scope only on iOS, which cannot spawn a process at all.                                  |
+| `sql`               | SQLite `load`/`execute`/`select`/`close`, bound values, column types, app-registered migrations, error paths.                                                          | Same.                                                                                    |
+| `store`             | CRUD, persistence, auto-save, defaults/reset, reload, `getStore`, `LazyStore`, change events.                                                                          | Same.                                                                                    |
+| `updater`           | `check` against the fixture manifest (update / 204 / older release). Installing is never exercised.                                                                    | Skipped — desktop-only plugin.                                                           |
+| `upload`            | `download` and `upload` with progress, methods, headers and error paths.                                                                                               | Same (through `adb reverse` on Android).                                                 |
+| `websocket`         | Text/binary echo, ping/pong, handshake headers, listener removal, server and client close, connection and argument errors, against the fixture server.                 | Same (through `adb reverse` on Android).                                                 |
+| `window-state`      | `filename`, save/restore, and that a re-created window gets its saved size (WM dependent).                                                                             | Skipped — desktop-only plugin.                                                           |
+| mobile-only plugins | `barcode-scanner`, `biometric`, `geolocation`, `haptics` and `nfc` need hardware or native UI the driver cannot operate, so only their global API surface is asserted. | Only there.                                                                              |
+
+The notification permission specs are desktop-only: a mobile app starts out ungranted and
+`requestPermission` puts up a system dialog the session would then block on. The rest of the
+notification API (action types, channels, the pending/active lists, listeners) only exists on
+mobile, and is covered there without the permission.
+
+The [`plugins.spec.ts`](test/specs/plugins.spec.ts) spec additionally asserts that every
+plugin the platform registers injects its global API with its documented members, and that
+the _other_ platform's plugins are absent. That is what catches a plugin whose
+`global_api_script_path` is missing from its `build.rs`, or a crate that is not target-gated
+in the example's `Cargo.toml`.
+
+## Prerequisites
+
+```sh
+# from the repo root
+pnpm install
+pnpm build        # examples/api resolves the plugins' JS from their dist-js output
+```
+
+Platform driver dependencies:
+
+| Platform | Requirement                                                                                                                                                                                                                                               |
+| -------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| macOS    | `CN_API_KEY` env var (CrabNebula Cloud). The automation plugin and test-runner-backend are wired up already.                                                                                                                                              |
+| Linux    | `webkit2gtk-driver` package (provides `WebKitWebDriver`).                                                                                                                                                                                                 |
+| Windows  | `msedgedriver.exe` matching your Edge version, on `PATH`. Run the suite unelevated.                                                                                                                                                                       |
+| Android  | The usual Tauri Android setup (`ANDROID_HOME`, `NDK_HOME`, a JDK), which also provides the `adb` the suite shells out to, plus a running emulator or a connected device with USB debugging. Network access the first time, for the chromedriver download. |
+| iOS      | macOS with Xcode and an iOS simulator runtime. The first session compiles WebDriverAgent (a few minutes).                                                                                                                                                 |
+
+## Running
+
+```sh
+# desktop, from the repo root
+pnpm test:api-e2e
+
+# or from this package
+pnpm e2e
+
+# iterate without rebuilding the app every run
+E2E_SKIP_BUILD=1 pnpm e2e
+
+# run a single plugin's spec
+pnpm exec wdio run ./wdio.conf.ts --spec test/specs/fs.spec.ts
+
+# mobile (from the repo root; or `pnpm e2e:android` / `pnpm e2e:ios` from this package)
+pnpm test:api-e2e:android
+pnpm test:api-e2e:ios
+```
+
+The first desktop run builds the app with [`tauri.e2e.conf.json`](tauri.e2e.conf.json) as a
+config override, which enables the example's `automation` feature and points the updater at
+the fixture server; afterwards use `E2E_SKIP_BUILD=1` to reuse the existing binary. A binary
+supplied through `E2E_SKIP_BUILD` or `E2E_APP_PATH` must have been built with that override:
+the `updater` specs rely on its endpoint, and the CrabNebula Webdriver (always on macOS)
+relies on the automation feature.
+
+The mobile configs ([`wdio.android.conf.ts`](wdio.android.conf.ts), [`wdio.ios.conf.ts`](wdio.ios.conf.ts),
+sharing [`wdio.mobile.ts`](wdio.mobile.ts)) run `tauri android build --debug --apk` /
+`tauri ios build --debug --target aarch64-sim --no-sign`, compiling only the Rust target the
+device runs (the Android one is read from the connected device through `adb`). The Android
+Studio and Xcode projects are committed under `examples/api/src-tauri/gen`, so they are only
+initialized if that directory is missing. The app must be a **debug** build — release builds
+have webview debugging off, and Appium cannot see the page. `E2E_SKIP_BUILD` and
+`E2E_APP_PATH` (an `.apk` / simulator `.app`) work as on desktop. No config override is
+passed there: both things it turns on belong to desktop-only plugins.
+
+## Environment variables
+
+| Variable            | Purpose                                                                                  |
+| ------------------- | ---------------------------------------------------------------------------------------- |
+| `CN_API_KEY`        | CrabNebula Cloud key. Required on macOS (and whenever `E2E_CN_WEBDRIVER=1`).             |
+| `E2E_SKIP_BUILD`    | Skip the `tauri build` step and reuse the existing binary.                               |
+| `E2E_APP_PATH`      | Absolute path to a prebuilt app/binary to test (also implies skip-build).                |
+| `E2E_SKIP`          | Comma-separated plugin names to skip, e.g. `E2E_SKIP=clipboard-manager,global-shortcut`. |
+| `E2E_SKIP_WM`       | Skip window-manager-dependent tests (the window-state size restore).                     |
+| `E2E_SPEC_RETRIES`  | Retry count for flaky spec files (default `0`).                                          |
+| `E2E_CN_WEBDRIVER`  | Use the CrabNebula Webdriver on Linux/Windows too (instead of the native driver).        |
+| `E2E_NATIVE_DRIVER` | Path passed to `tauri-driver --native-driver` (e.g. a specific chromedriver).            |
+| `CARGO_TARGET_DIR`  | Override the target dir the app binary is looked up in.                                  |
+
+Mobile only:
+
+| Variable             | Purpose                                                                                              |
+| -------------------- | ---------------------------------------------------------------------------------------------------- |
+| `E2E_ANDROID_TARGET` | Rust target for the APK (`aarch64`, `armv7`, `i686`, `x86_64`); default: the connected device's ABI. |
+| `E2E_ANDROID_DEVICE` | `adb` serial of the device/emulator to use (`appium:udid`); default: the first connected one.        |
+| `E2E_ANDROID_AVD`    | Name of an AVD for Appium to boot (`appium:avd`) instead of using an already-running emulator.       |
+| `E2E_CHROMEDRIVER`   | chromedriver binary matching the device's WebView, instead of letting Appium download one.           |
+| `E2E_IOS_TARGET`     | Rust target for the simulator app (`aarch64-sim` or `x86_64`); default: the host architecture.       |
+| `E2E_IOS_DEVICE`     | Simulator UDID or name (as in `xcrun simctl list`); default: a booted iPhone, else the newest one.   |
+| `E2E_PLATFORM`       | Set by the mobile configs for the spec workers (`android`/`ios`) — see `platform` in the helpers.    |
+
+Appium's own log is written to `logs/wdio-appium.log` in this package.
+
+## Adding tests for a new plugin API
+
+1. **Add a spec.** Create `test/specs/<plugin>.spec.ts` and use `describePlugin('<plugin>', …)`
+   with the `tauri()` helper. It is picked up automatically by the `test/specs/**/*.spec.ts`
+   glob. Minimal example:
+
+   ```ts
+   import { expect } from '@wdio/globals'
+   import { tauri, describePlugin } from '../helpers/index.js'
+
+   describePlugin('os', () => {
+     it('reports the platform', async () => {
+       expect(await tauri((api) => api.os.platform())).toBe('linux')
+     })
+   })
+   ```
+
+   If the plugin is new to the example, register it in
+   [`examples/api/src-tauri/src/lib.rs`](../../examples/api/src-tauri/src/lib.rs), add it to
+   the example's `package.json`/`Cargo.toml`, add its `workspace:*` package to this package's
+   `devDependencies` and its namespace to the matching interface in
+   [`test/helpers/index.ts`](test/helpers/index.ts) — `CommonPluginApi`, `DesktopPluginApi` or
+   `MobilePluginApi` — plus the member list in `plugins.spec.ts`.
+
+2. **Grant permissions if needed.** If the API calls a command that the example does not
+   allow yet, add the permission to
+   [`examples/api/src-tauri/capabilities/base.json`](../../examples/api/src-tauri/capabilities/base.json)
+   (or `desktop.json`/`mobile.json` for platform-specific plugins). Each plugin documents its
+   permissions under `plugins/<plugin>/permissions/autogenerated/reference.md`.
+
+3. **Need a server?** Add a route to the [fixture server](test/helpers/server.ts) rather than
+   hitting the network; its URL is exported as `FIXTURE_SERVER_URL`.
+
+4. **Handle environment-sensitive cases.** Use `itWm` (instead of `it`) for assertions that
+   depend on a real window manager, and `eventually()` to poll for state that is applied
+   asynchronously. Branch on `platform` from the helpers (never `process.platform`, which is
+   the host running the emulator/simulator on mobile) for platform-specific behavior.
+   Files go under `scratchDir('<plugin>')`, relative to `BaseDirectory.AppData`, which the
+   example's fs scope allows.
+
+5. **Gate what mobile does not have.** The same specs run on Android and iOS. Wrap tests of
+   desktop-only behavior — a command the mobile build does not expose, a mobile implementation
+   that answers "Unsupported on this platform", or a permission only the desktop capability
+   grants — in `itDesktop`, use `itOn('android', …)` / `itOn('ios', …)` for platform-specific
+   APIs, and pass `{ desktopOnly: true }` (or `{ mobileOnly: true }`) to `describePlugin` for
+   plugins the example does not register on the other side. Skipped tests show up as pending
+   rather than silently disappearing.
+
+### Rules for `tauri()` page functions
+
+The function you pass to `tauri()` runs **inside the webview**, serialized as a string:
+
+- It **cannot** close over anything from the spec module — pass every value it needs through
+  the trailing `tauri(fn, ...args)` arguments.
+- It may only reference `api` (the `window.__TAURI__` object), those args, and browser
+  globals (`window`, `document`, `setTimeout`, `Promise`, …).
+- Its return value must be JSON-serializable — return plain objects/primitives, not class
+  instances (call methods and return their results instead), and remember that `undefined`
+  values are dropped.
+- Restore any app state you mutate (clipboard, registered shortcuts, window size, …); tests
+  within a spec file share the same app instance.
+- For in-page waiting, wrap logic in a `Promise` with an explicit `setTimeout` rejection so a
+  failure surfaces as a message rather than an opaque driver timeout.
+
+Use `tauriError(fn, ...args)` to assert that a call rejects; it returns the rejection message.
diff --git a/packages/api-e2e/package.json b/packages/api-e2e/package.json
new file mode 100644
index 000000000..00ea969a9
--- /dev/null
+++ b/packages/api-e2e/package.json
@@ -0,0 +1,61 @@
+{
+  "name": "api-e2e",
+  "private": true,
+  "version": "0.0.0",
+  "description": "End-to-end test suite for the plugins' JavaScript APIs, driven against the examples/api app via WebdriverIO (tauri-driver on desktop, Appium on mobile).",
+  "license": "MIT OR Apache-2.0",
+  "type": "module",
+  "scripts": {
+    "e2e": "wdio run ./wdio.conf.ts",
+    "e2e:skip-build": "cross-env E2E_SKIP_BUILD=true wdio run ./wdio.conf.ts",
+    "e2e:android": "wdio run ./wdio.android.conf.ts",
+    "e2e:ios": "wdio run ./wdio.ios.conf.ts",
+    "ts:check": "tsc --noEmit"
+  },
+  "devDependencies": {
+    "@crabnebula/tauri-driver": "^2.0.9",
+    "@crabnebula/test-runner-backend": "^0.3.0",
+    "@tauri-apps/api": "^3.0.0-alpha.1",
+    "@tauri-apps/plugin-autostart": "workspace:*",
+    "@tauri-apps/plugin-barcode-scanner": "workspace:*",
+    "@tauri-apps/plugin-biometric": "workspace:*",
+    "@tauri-apps/plugin-cli": "workspace:*",
+    "@tauri-apps/plugin-clipboard-manager": "workspace:*",
+    "@tauri-apps/plugin-deep-link": "workspace:*",
+    "@tauri-apps/plugin-dialog": "workspace:*",
+    "@tauri-apps/plugin-fs": "workspace:*",
+    "@tauri-apps/plugin-geolocation": "workspace:*",
+    "@tauri-apps/plugin-global-shortcut": "workspace:*",
+    "@tauri-apps/plugin-haptics": "workspace:*",
+    "@tauri-apps/plugin-http": "workspace:*",
+    "@tauri-apps/plugin-log": "workspace:*",
+    "@tauri-apps/plugin-nfc": "workspace:*",
+    "@tauri-apps/plugin-notification": "workspace:*",
+    "@tauri-apps/plugin-opener": "workspace:*",
+    "@tauri-apps/plugin-os": "workspace:*",
+    "@tauri-apps/plugin-positioner": "workspace:*",
+    "@tauri-apps/plugin-process": "workspace:*",
+    "@tauri-apps/plugin-shell": "workspace:*",
+    "@tauri-apps/plugin-sql": "workspace:*",
+    "@tauri-apps/plugin-store": "workspace:*",
+    "@tauri-apps/plugin-updater": "workspace:*",
+    "@tauri-apps/plugin-upload": "workspace:*",
+    "@tauri-apps/plugin-websocket": "workspace:*",
+    "@tauri-apps/plugin-window-state": "workspace:*",
+    "@types/node": "^22.10.0",
+    "@types/ws": "^8.18.1",
+    "@wdio/appium-service": "^9.31.9",
+    "@wdio/cli": "^9.31.9",
+    "@wdio/globals": "^9.31.3",
+    "@wdio/local-runner": "^9.31.9",
+    "@wdio/mocha-framework": "^9.31.9",
+    "@wdio/spec-reporter": "^9.31.2",
+    "appium": "^3.7.0",
+    "appium-uiautomator2-driver": "^8.7.0",
+    "appium-xcuitest-driver": "^12.12.4",
+    "cross-env": "^10.1.0",
+    "typescript": "6.0.3",
+    "webdriverio": "^9.31.9",
+    "ws": "^8.18.0"
+  }
+}
diff --git a/packages/api-e2e/tauri.e2e.conf.json b/packages/api-e2e/tauri.e2e.conf.json
new file mode 100644
index 000000000..278624b3a
--- /dev/null
+++ b/packages/api-e2e/tauri.e2e.conf.json
@@ -0,0 +1,13 @@
+{
+  "$schema": "../../examples/api/node_modules/@tauri-apps/cli/config.schema.json",
+  "build": {
+    "features": ["automation"]
+  },
+  "plugins": {
+    "updater": {
+      "endpoints": [
+        "http://127.0.0.1:3004/updater/{{target}}/{{arch}}/{{current_version}}"
+      ]
+    }
+  }
+}
diff --git a/packages/api-e2e/test/helpers/index.ts b/packages/api-e2e/test/helpers/index.ts
new file mode 100644
index 000000000..519f2aa96
--- /dev/null
+++ b/packages/api-e2e/test/helpers/index.ts
@@ -0,0 +1,351 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+import { browser } from '@wdio/globals'
+import type * as TauriApi from '@tauri-apps/api'
+import type * as Autostart from '@tauri-apps/plugin-autostart'
+import type * as BarcodeScanner from '@tauri-apps/plugin-barcode-scanner'
+import type * as Biometric from '@tauri-apps/plugin-biometric'
+import type * as Cli from '@tauri-apps/plugin-cli'
+import type * as ClipboardManager from '@tauri-apps/plugin-clipboard-manager'
+import type * as DeepLink from '@tauri-apps/plugin-deep-link'
+import type * as Dialog from '@tauri-apps/plugin-dialog'
+import type * as Fs from '@tauri-apps/plugin-fs'
+import type * as Geolocation from '@tauri-apps/plugin-geolocation'
+import type * as GlobalShortcut from '@tauri-apps/plugin-global-shortcut'
+import type * as Haptics from '@tauri-apps/plugin-haptics'
+import type * as Http from '@tauri-apps/plugin-http'
+import type * as Log from '@tauri-apps/plugin-log'
+import type * as Nfc from '@tauri-apps/plugin-nfc'
+import type * as Notification from '@tauri-apps/plugin-notification'
+import type * as Opener from '@tauri-apps/plugin-opener'
+import type * as Os from '@tauri-apps/plugin-os'
+import type * as Positioner from '@tauri-apps/plugin-positioner'
+import type * as Process from '@tauri-apps/plugin-process'
+import type * as Shell from '@tauri-apps/plugin-shell'
+import type * as Sql from '@tauri-apps/plugin-sql'
+import type * as Store from '@tauri-apps/plugin-store'
+import type * as Updater from '@tauri-apps/plugin-updater'
+import type * as Upload from '@tauri-apps/plugin-upload'
+import type * as WebSocket from '@tauri-apps/plugin-websocket'
+import type * as WindowState from '@tauri-apps/plugin-window-state'
+
+/**
+ * The plugin APIs the example registers on every platform, keyed by the name
+ * each plugin's `api-iife.js` defines on `window.__TAURI__` (the package name
+ * without the `@tauri-apps/plugin-` prefix, camel-cased). `sql` and `websocket`
+ * only have a default export, so their global is that class itself.
+ */
+export interface CommonPluginApi {
+  clipboardManager: typeof ClipboardManager
+  deepLink: typeof DeepLink
+  dialog: typeof Dialog
+  fs: typeof Fs
+  http: typeof Http
+  log: typeof Log
+  notification: typeof Notification
+  opener: typeof Opener
+  os: typeof Os
+  process: typeof Process
+  shell: typeof Shell
+  sql: typeof Sql.default
+  store: typeof Store
+  upload: typeof Upload
+  websocket: typeof WebSocket.default
+}
+
+/** The plugin APIs the example only registers on desktop (`#[cfg(desktop)]`). */
+export interface DesktopPluginApi {
+  autostart: typeof Autostart
+  cli: typeof Cli
+  globalShortcut: typeof GlobalShortcut
+  positioner: typeof Positioner
+  updater: typeof Updater
+  windowState: typeof WindowState
+}
+
+/** The plugin APIs the example only registers on mobile (`#[cfg(mobile)]`). */
+export interface MobilePluginApi {
+  barcodeScanner: typeof BarcodeScanner
+  biometric: typeof Biometric
+  geolocation: typeof Geolocation
+  haptics: typeof Haptics
+  nfc: typeof Nfc
+}
+
+/**
+ * Every plugin API the example can register. Only the platform-appropriate
+ * half is actually on `window.__TAURI__` at runtime — see `describePlugin`'s
+ * `desktopOnly`/`mobileOnly` options and `plugins.spec.ts`.
+ */
+export type PluginApi = CommonPluginApi & DesktopPluginApi & MobilePluginApi
+
+/** The `@tauri-apps/api` surface plus every plugin, as exposed on `window.__TAURI__`. */
+export type Api = typeof TauriApi & PluginApi
+
+/** OS the app under test runs on. */
+export type Platform = NodeJS.Platform | 'android' | 'ios'
+
+/**
+ * The platform of the app under test. The desktop suite drives an app on the
+ * host, so it is `process.platform`; the mobile configs (`wdio.android.conf.ts`,
+ * `wdio.ios.conf.ts`) drive an emulator/simulator and set `E2E_PLATFORM` for
+ * the spec workers instead.
+ */
+export const platform: Platform =
+  (process.env.E2E_PLATFORM as Platform | undefined) ?? process.platform
+
+export const isMobile = platform === 'android' || platform === 'ios'
+
+type PageOutcome<T> =
+  | { ok: true; value: T }
+  | { ok: false; error: string; stack?: string }
+
+/** Thrown when the function passed to {@link tauri} rejects inside the webview. */
+export class TauriPageError extends Error {
+  pageStack?: string
+  constructor(message: string, pageStack?: string) {
+    super(message)
+    this.name = 'TauriPageError'
+    this.pageStack = pageStack
+  }
+}
+
+/**
+ * Runs `fn` inside the app's webview with `window.__TAURI__` as its first argument
+ * and resolves with its (JSON-serializable) return value.
+ *
+ * `fn` is serialized with `Function.prototype.toString`, so it **cannot close over
+ * anything in the spec module** — every value it needs must be passed through `args`,
+ * and it may only reference `api`, those args, and browser globals (`window`,
+ * `document`, `setTimeout`, `Promise`, ...).
+ *
+ * @example
+ * const platform = await tauri((api) => api.os.platform())
+ * const sum = await tauri((api, a, b) => a + b, 2, 3)
+ */
+export async function tauri<R, A extends unknown[]>(
+  fn: (api: Api, ...args: A) => R,
+  ...args: A
+): Promise<Awaited<R>> {
+  // A string body (rather than passing `fn` directly) keeps this working across
+  // both the classic and bidi WebDriver protocols and avoids any in-page eval of
+  // our own — the driver injects this script itself, which is exempt from the
+  // app's CSP. `executeAsync` is used because promise support in `execute` is not
+  // uniform across the platform drivers tauri-driver and Appium proxy to.
+  //
+  // The outcome crosses the driver as a JSON string rather than an object so no
+  // driver gets to interpret its shape: the Selenium atoms that Appium runs
+  // scripts through on iOS turn any object with a numeric `length` property
+  // into an array.
+  const script = `
+    var done = arguments[arguments.length - 1];
+    var args = Array.prototype.slice.call(arguments, 0, arguments.length - 1);
+    var fn = (${fn.toString()});
+    Promise.resolve()
+      .then(function () { return fn.apply(null, [window.__TAURI__].concat(args)); })
+      .then(
+        function (value) { return { ok: true, value: value === undefined ? null : value }; },
+        function (error) {
+          // Mobile plugins reject with a \`{ message, code?, data? }\` object
+          // rather than a string or an Error.
+          var message =
+            error instanceof Error
+              ? error.message
+              : error && typeof error === 'object' && typeof error.message === 'string'
+                ? error.message
+                : typeof error === 'object'
+                  ? JSON.stringify(error)
+                  : String(error);
+          return {
+            ok: false,
+            error: message,
+            stack: error instanceof Error ? error.stack : undefined
+          };
+        }
+      )
+      .then(function (outcome) {
+        try {
+          done(JSON.stringify(outcome));
+        } catch (error) {
+          done(JSON.stringify({ ok: false, error: 'result is not JSON-serializable: ' + error }));
+        }
+      });
+  `
+  const raw: unknown = await browser.executeAsync(script, ...args)
+  const outcome = (
+    typeof raw === 'string' ? JSON.parse(raw) : raw
+  ) as PageOutcome<Awaited<R>> | null
+  if (!outcome || typeof outcome !== 'object' || !('ok' in outcome)) {
+    throw new Error(
+      `tauri() bridge returned an unexpected value: ${JSON.stringify(outcome)}`
+    )
+  }
+  if (!outcome.ok) {
+    throw new TauriPageError(outcome.error, outcome.stack)
+  }
+  return outcome.value
+}
+
+/**
+ * Asserts that the page-side call rejects and returns the rejection message,
+ * so specs can assert on it. Throws if the call unexpectedly resolves.
+ */
+export async function tauriError<A extends unknown[]>(
+  fn: (api: Api, ...args: A) => unknown,
+  ...args: A
+): Promise<string> {
+  try {
+    await tauri(fn, ...args)
+  } catch (error) {
+    if (error instanceof TauriPageError) {
+      return error.message
+    }
+    // Some platform drivers (notably the Linux WebKitWebDriver) surface a
+    // page-side `invoke` rejection as a WebDriver-level error on the
+    // `execute/async` command instead of letting the in-page bridge report it
+    // as an `{ ok: false }` outcome. Fall back to that error's message so the
+    // backend rejection is still assertable. This is safe for error-path specs:
+    // they match the message against an expected pattern, so a genuine driver
+    // failure (whose message won't match) still fails the test.
+    if (error instanceof Error) {
+      return error.message
+    }
+    throw error
+  }
+  throw new Error('expected the API call to reject, but it resolved')
+}
+
+/**
+ * Polls `check` until it returns without throwing or `timeout` elapses.
+ * Use for state that is applied asynchronously (window manager, file watcher, ...).
+ */
+export async function eventually<T>(
+  check: () => T | Promise<T>,
+  {
+    timeout = 10_000,
+    interval = 250
+  }: { timeout?: number; interval?: number } = {}
+): Promise<T> {
+  const deadline = Date.now() + timeout
+  let lastError: unknown
+  for (;;) {
+    try {
+      return await check()
+    } catch (error) {
+      lastError = error
+    }
+    if (Date.now() > deadline) {
+      throw lastError instanceof Error
+        ? lastError
+        : new Error(String(lastError))
+    }
+    await new Promise((resolve) => setTimeout(resolve, interval))
+  }
+}
+
+const skippedModules = (process.env.E2E_SKIP ?? '')
+  .split(',')
+  .map((entry) => entry.trim())
+  .filter(Boolean)
+
+export interface DescribePluginOptions {
+  /**
+   * The example only registers the plugin on desktop (`autostart`, `cli`,
+   * `global-shortcut`, `positioner`, `updater`, `window-state`), so the whole
+   * suite is skipped on mobile.
+   */
+  desktopOnly?: boolean
+  /**
+   * The example only registers the plugin on mobile (`barcode-scanner`,
+   * `biometric`, `geolocation`, `haptics`, `nfc`), so the whole suite is
+   * skipped on desktop.
+   */
+  mobileOnly?: boolean
+}
+
+/**
+ * `describe` wrapper keyed by plugin name (the `@tauri-apps/plugin-*` suffix).
+ * Any plugin listed in the comma-separated `E2E_SKIP` env var
+ * (e.g. `E2E_SKIP=clipboard-manager,global-shortcut`) is skipped.
+ */
+export function describePlugin(plugin: string, fn: () => void): void
+export function describePlugin(
+  plugin: string,
+  options: DescribePluginOptions,
+  fn: () => void
+): void
+export function describePlugin(
+  plugin: string,
+  optionsOrFn: DescribePluginOptions | (() => void),
+  maybeFn?: () => void
+): void {
+  const [options, fn] =
+    typeof optionsOrFn === 'function'
+      ? [{} as DescribePluginOptions, optionsOrFn]
+      : [optionsOrFn, maybeFn!]
+  const title = `@tauri-apps/plugin-${plugin}`
+  if (
+    skippedModules.includes(plugin)
+    || (options.desktopOnly && isMobile)
+    || (options.mobileOnly && !isMobile)
+  ) {
+    describe.skip(title, fn)
+  } else {
+    describe(title, fn)
+  }
+}
+
+/**
+ * `it` restricted to the given platform(s); skipped (as pending) elsewhere.
+ * Use for behavior that only exists on one OS.
+ */
+export function itOn(
+  platforms: Platform | Platform[],
+  title: string,
+  fn: () => void | Promise<void>
+): void {
+  const list = Array.isArray(platforms) ? platforms : [platforms]
+  if (list.includes(platform)) {
+    it(title, fn)
+  } else {
+    it.skip(title, fn)
+  }
+}
+
+/**
+ * `it` for desktop-only behavior of a plugin that *is* registered on mobile:
+ * a command the mobile build does not expose (`#[cfg(desktop)]`), a mobile
+ * implementation that answers "Unsupported on this platform", or a permission
+ * the example only grants in its desktop capability.
+ */
+export function itDesktop(title: string, fn: () => void | Promise<void>): void {
+  if (isMobile) {
+    it.skip(title, fn)
+  } else {
+    it(title, fn)
+  }
+}
+
+/**
+ * `it` for assertions that depend on a real window manager (window size and
+ * position restore, ...). Skipped entirely when `E2E_SKIP_WM` is set (e.g.
+ * bare headless CI), and on mobile, which has no window manager.
+ */
+export function itWm(title: string, fn: () => void | Promise<void>): void {
+  if (process.env.E2E_SKIP_WM || isMobile) {
+    it.skip(title, fn)
+  } else {
+    it(title, fn)
+  }
+}
+
+/**
+ * A scratch directory the fs-backed specs may freely write to. It is relative
+ * to `BaseDirectory.AppData` (`$APPDATA`), which the example's fs scope allows
+ * recursively; `name` keeps each spec file's files apart.
+ */
+export function scratchDir(name: string): string {
+  return `e2e/${name}`
+}
diff --git a/packages/api-e2e/test/helpers/server.ts b/packages/api-e2e/test/helpers/server.ts
new file mode 100644
index 000000000..230d92df3
--- /dev/null
+++ b/packages/api-e2e/test/helpers/server.ts
@@ -0,0 +1,158 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+import http from 'node:http'
+import { WebSocketServer } from 'ws'
+
+/**
+ * Where the fixture server listens. The port is fixed because the updater
+ * endpoint is baked into the app at build time (see `tauri.e2e.conf.json`).
+ */
+export const FIXTURE_SERVER_PORT = 3004
+export const FIXTURE_SERVER_URL = `http://127.0.0.1:${FIXTURE_SERVER_PORT}`
+
+/** Version the `/updater` endpoint advertises by default. */
+export const UPDATER_FIXTURE_VERSION = '2.1.0'
+export const UPDATER_FIXTURE_NOTES = 'Test update from the e2e fixture server'
+/** `{{target}}` values with special behavior on the `/updater` endpoint. */
+export const UPDATER_TARGET_NO_UPDATE = 'e2e-no-update'
+export const UPDATER_TARGET_OLDER = 'e2e-older'
+export const UPDATER_FIXTURE_OLDER_VERSION = '1.0.0'
+
+/** Body served by `GET /download`. */
+export const DOWNLOAD_FIXTURE_BODY =
+  'hello from the plugins e2e fixture server\n'.repeat(64)
+
+/** WebSocket endpoint of the fixture server (the `ws://` twin of {@link FIXTURE_SERVER_URL}). */
+export const WEBSOCKET_FIXTURE_URL = `ws://127.0.0.1:${FIXTURE_SERVER_PORT}/ws`
+/** Text message that makes the `/ws` endpoint close the connection with {@link WEBSOCKET_CLOSE_CODE}. */
+export const WEBSOCKET_CLOSE_REQUEST = 'close-me'
+export const WEBSOCKET_CLOSE_CODE = 4000
+export const WEBSOCKET_CLOSE_REASON = 'closed by the fixture server'
+
+export interface FixtureServer {
+  close(): void
+}
+
+/**
+ * A tiny HTTP server the network-facing specs (updater, upload) talk to:
+ *
+ * - `GET /updater/{{target}}/{{arch}}/{{current_version}}` — an updater
+ *   manifest in the dynamic format. Advertises {@link UPDATER_FIXTURE_VERSION},
+ *   or {@link UPDATER_FIXTURE_OLDER_VERSION} when the target is
+ *   {@link UPDATER_TARGET_OLDER}, and replies `204 No Content` when it is
+ *   {@link UPDATER_TARGET_NO_UPDATE}.
+ * - `GET /download` — {@link DOWNLOAD_FIXTURE_BODY} with a `Content-Length`.
+ * - `* /echo` — a JSON description of the request (`method`, `url`, `headers`
+ *   and the utf-8 `body`).
+ * - `ws /ws` — a WebSocket echo endpoint: text and binary messages are sent
+ *   back as-is, and {@link WEBSOCKET_CLOSE_REQUEST} makes the server close the
+ *   connection with {@link WEBSOCKET_CLOSE_CODE}. On `/ws/headers` the server
+ *   answers the first message with the upgrade request's headers as a JSON
+ *   text message instead (not sent on connect, where it could arrive before
+ *   the client attached a listener).
+ */
+export function startFixtureServer(): Promise<FixtureServer> {
+  const server = http.createServer((req, res) => {
+    const chunks: Buffer[] = []
+    req.on('data', (chunk: Buffer) => chunks.push(chunk))
+    req.on('end', () => {
+      const body = Buffer.concat(chunks)
+      const url = new URL(req.url ?? '/', FIXTURE_SERVER_URL)
+      const [, route, ...rest] = url.pathname.split('/')
+
+      if (route === 'updater' && req.method === 'GET') {
+        const [target] = rest
+        if (target === UPDATER_TARGET_NO_UPDATE) {
+          res.writeHead(204).end()
+          return
+        }
+        json(res, {
+          version:
+            target === UPDATER_TARGET_OLDER
+              ? UPDATER_FIXTURE_OLDER_VERSION
+              : UPDATER_FIXTURE_VERSION,
+          notes: UPDATER_FIXTURE_NOTES,
+          pub_date: '2026-03-01T14:04:20Z',
+          url: `${FIXTURE_SERVER_URL}/download`,
+          signature: ''
+        })
+        return
+      }
+
+      if (route === 'download' && req.method === 'GET') {
+        res
+          .writeHead(200, {
+            'content-type': 'text/plain',
+            'content-length': Buffer.byteLength(DOWNLOAD_FIXTURE_BODY)
+          })
+          .end(DOWNLOAD_FIXTURE_BODY)
+        return
+      }
+
+      if (route === 'echo') {
+        json(res, {
+          method: req.method,
+          url: req.url,
+          headers: req.headers,
+          body: body.toString('utf8')
+        })
+        return
+      }
+
+      res.writeHead(404).end()
+    })
+  })
+
+  const wss = new WebSocketServer({ noServer: true })
+  server.on('upgrade', (req, socket, head) => {
+    const { pathname } = new URL(req.url ?? '/', FIXTURE_SERVER_URL)
+    if (pathname !== '/ws' && pathname !== '/ws/headers') {
+      socket.destroy()
+      return
+    }
+    wss.handleUpgrade(req, socket, head, (ws) => {
+      let sendHeaders = pathname === '/ws/headers'
+      ws.on('message', (data, isBinary) => {
+        if (sendHeaders) {
+          sendHeaders = false
+          ws.send(JSON.stringify(req.headers))
+        } else if (
+          !isBinary
+          && Buffer.isBuffer(data)
+          && data.toString('utf8') === WEBSOCKET_CLOSE_REQUEST
+        ) {
+          ws.close(WEBSOCKET_CLOSE_CODE, WEBSOCKET_CLOSE_REASON)
+        } else {
+          ws.send(data, { binary: isBinary })
+        }
+      })
+    })
+  })
+
+  return new Promise((resolve, reject) => {
+    server.once('error', reject)
+    server.listen(FIXTURE_SERVER_PORT, '127.0.0.1', () => {
+      server.off('error', reject)
+      resolve({
+        close: () => {
+          for (const client of wss.clients) client.terminate()
+          wss.close()
+          server.closeAllConnections()
+          server.close()
+        }
+      })
+    })
+  })
+}
+
+function json(res: http.ServerResponse, value: unknown) {
+  const payload = JSON.stringify(value)
+  res
+    .writeHead(200, {
+      'content-type': 'application/json',
+      'content-length': Buffer.byteLength(payload)
+    })
+    .end(payload)
+}
diff --git a/packages/api-e2e/test/specs/app.spec.ts b/packages/api-e2e/test/specs/app.spec.ts
new file mode 100644
index 000000000..a76604ede
--- /dev/null
+++ b/packages/api-e2e/test/specs/app.spec.ts
@@ -0,0 +1,71 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+import { expect } from '@wdio/globals'
+import { tauri } from '../helpers/index.js'
+
+// The example app's own commands and events, which its "Communication" view
+// drives; they double as a check that the app under test is the right one.
+
+describe('examples/api', () => {
+  it('is built from the example config', async () => {
+    const info = await tauri(async (api) => ({
+      name: await api.app.getName(),
+      version: await api.app.getVersion(),
+      identifier: await api.app.getIdentifier(),
+      label: api.window.getCurrentWindow().label
+    }))
+    expect(info).toEqual({
+      name: 'Tauri API',
+      version: '2.0.0',
+      identifier: 'com.tauri.api',
+      label: 'main'
+    })
+  })
+
+  it('perform_request returns the backend response', async () => {
+    const response = await tauri((api) =>
+      api.core.invoke('perform_request', {
+        endpoint: 'dummy endpoint arg',
+        body: { id: 5, name: 'test' }
+      })
+    )
+    expect(response).toBe('message response')
+  })
+
+  it('log_operation accepts an optional payload', async () => {
+    await tauri(async (api) => {
+      await api.core.invoke('log_operation', { event: 'tauri-click' })
+      await api.core.invoke('log_operation', {
+        event: 'tauri-click',
+        payload: 'from e2e'
+      })
+      return null
+    })
+  })
+
+  it('js-event is answered with rust-event', async () => {
+    const reply = await tauri(
+      (api) =>
+        new Promise<{ data: string }>((resolve, reject) => {
+          const webview = api.webview.getCurrentWebview()
+          webview
+            .listen<{ data: string }>('rust-event', (event) =>
+              resolve(event.payload)
+            )
+            .then((unlisten) => {
+              webview
+                .emit('js-event', 'this is the payload string')
+                .catch(reject)
+              setTimeout(() => {
+                unlisten()
+                reject(new Error('no rust-event reply received'))
+              }, 5000)
+            })
+            .catch(reject)
+        })
+    )
+    expect(reply).toEqual({ data: 'something else' })
+  })
+})
diff --git a/packages/api-e2e/test/specs/autostart.spec.ts b/packages/api-e2e/test/specs/autostart.spec.ts
new file mode 100644
index 000000000..b45a0af68
--- /dev/null
+++ b/packages/api-e2e/test/specs/autostart.spec.ts
@@ -0,0 +1,58 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+import { expect } from '@wdio/globals'
+import { tauri, describePlugin } from '../helpers/index.js'
+
+// Enabling autostart registers the app with the host for real (a Launch Agent
+// on macOS, an XDG autostart entry on Linux, a `Run` registry value on
+// Windows), so the spec puts back whatever state it found.
+
+describePlugin('autostart', { desktopOnly: true }, () => {
+  let initiallyEnabled = false
+
+  before(async () => {
+    initiallyEnabled = await tauri((api) => api.autostart.isEnabled())
+  })
+
+  after(async () => {
+    await tauri(
+      (api, enabled) =>
+        enabled ? api.autostart.enable() : api.autostart.disable(),
+      initiallyEnabled
+    )
+  })
+
+  it('enable and disable toggle isEnabled', async () => {
+    const states = await tauri(async (api) => {
+      await api.autostart.enable()
+      const enabled = await api.autostart.isEnabled()
+      await api.autostart.disable()
+      return { enabled, disabled: await api.autostart.isEnabled() }
+    })
+    expect(states).toEqual({ enabled: true, disabled: false })
+  })
+
+  it('enabling twice keeps it enabled', async () => {
+    const enabled = await tauri(async (api) => {
+      await api.autostart.enable()
+      await api.autostart.enable()
+      const enabled = await api.autostart.isEnabled()
+      await api.autostart.disable()
+      return enabled
+    })
+    expect(enabled).toBe(true)
+  })
+
+  it('disable resolves when autostart is already disabled', async () => {
+    // Windows used to fail here, having no `Run` registry value to delete
+    const disabled = await tauri(async (api) => {
+      await api.autostart.enable()
+      await api.autostart.disable()
+      await api.autostart.disable()
+      return !(await api.autostart.isEnabled())
+    })
+    expect(disabled).toBe(true)
+  })
+})
diff --git a/packages/api-e2e/test/specs/cli.spec.ts b/packages/api-e2e/test/specs/cli.spec.ts
new file mode 100644
index 000000000..e817bcc2b
--- /dev/null
+++ b/packages/api-e2e/test/specs/cli.spec.ts
@@ -0,0 +1,33 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+import { expect } from '@wdio/globals'
+import { tauri, describePlugin } from '../helpers/index.js'
+
+// The driver launches the app without arguments, so the matches reflect the
+// CLI definition in the example's `tauri.conf.json` with nothing set. The
+// example only registers the plugin on desktop, so the suite is skipped on
+// mobile (which has no command line to begin with).
+
+describePlugin('cli', { desktopOnly: true }, () => {
+  it('getMatches reports every defined argument as unset', async () => {
+    const matches = await tauri((api) => api.cli.getMatches())
+    expect(Object.keys(matches.args).sort()).toEqual([
+      'config',
+      'theme',
+      'verbose'
+    ])
+    // flags resolve to `false`, arguments taking a value to `null`
+    expect(matches.args.verbose).toEqual({ value: false, occurrences: 0 })
+    expect(matches.args.config).toEqual({ value: null, occurrences: 0 })
+    expect(matches.args.theme).toEqual({ value: null, occurrences: 0 })
+  })
+
+  it('getMatches reports no subcommand', async () => {
+    const subcommand = await tauri(
+      async (api) => (await api.cli.getMatches()).subcommand
+    )
+    expect(subcommand).toBeNull()
+  })
+})
diff --git a/packages/api-e2e/test/specs/clipboard-manager.spec.ts b/packages/api-e2e/test/specs/clipboard-manager.spec.ts
new file mode 100644
index 000000000..f5bf0e428
--- /dev/null
+++ b/packages/api-e2e/test/specs/clipboard-manager.spec.ts
@@ -0,0 +1,158 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+import { expect } from '@wdio/globals'
+import {
+  tauri,
+  tauriError,
+  describePlugin,
+  itDesktop,
+  isMobile
+} from '../helpers/index.js'
+
+// The mobile implementation only carries plain text: `write_html`, `write_image`
+// and `read_image` answer "Unsupported on this platform" there.
+describePlugin('clipboard-manager', () => {
+  it('writeText and readText round-trip', async () => {
+    const text = 'clipboard text from e2e — ✓'
+    expect(
+      await tauri(async (api, text) => {
+        await api.clipboardManager.writeText(text)
+        return api.clipboardManager.readText()
+      }, text)
+    ).toBe(text)
+  })
+
+  it('writeText replaces the previous contents', async () => {
+    expect(
+      await tauri(async (api) => {
+        await api.clipboardManager.writeText('first')
+        await api.clipboardManager.writeText('second')
+        return api.clipboardManager.readText()
+      })
+    ).toBe('second')
+  })
+
+  itDesktop('writeHtml exposes the alt text as plain text', async () => {
+    expect(
+      await tauri(async (api) => {
+        await api.clipboardManager.writeHtml(
+          '<b>bold from e2e</b>',
+          'bold from e2e (alt)'
+        )
+        return api.clipboardManager.readText()
+      })
+    ).toBe('bold from e2e (alt)')
+  })
+
+  itDesktop('writeImage and readImage round-trip pixels', async () => {
+    // a 2x2 PNG: red, green / blue, white
+    const png = [
+      137, 80, 78, 71, 13, 10, 26, 10, 0, 0, 0, 13, 73, 72, 68, 82, 0, 0, 0, 2,
+      0, 0, 0, 2, 8, 6, 0, 0, 0, 114, 182, 13, 36, 0, 0, 0, 18, 73, 68, 65, 84,
+      120, 218, 99, 248, 207, 192, 240, 31, 12, 129, 52, 24, 0, 0, 73, 200, 9,
+      247, 3, 217, 100, 241, 0, 0, 0, 0, 73, 69, 78, 68, 174, 66, 96, 130
+    ]
+    const rgba = [
+      255, 0, 0, 255, 0, 255, 0, 255, 0, 0, 255, 255, 255, 255, 255, 255
+    ]
+    const result = await tauri(async (api, png) => {
+      // encoded bytes are decoded by the plugin before hitting the clipboard
+      await api.clipboardManager.writeImage(new Uint8Array(png))
+      const read = await api.clipboardManager.readImage()
+      const size = await read.size()
+      const bytes = Array.from(await read.rgba())
+      await read.close()
+      return { size, bytes }
+    }, png)
+    expect(result.size).toEqual({ width: 2, height: 2 })
+    expect(result.bytes).toEqual(rgba)
+  })
+
+  itDesktop(
+    'writeImage accepts an Image built with the core image API',
+    async () => {
+      // `window.__TAURI__.image.Image` and the class the plugin's global script
+      // sees must be the same one for `transformImage`'s `instanceof` to hold.
+      const rgba = [
+        255, 0, 0, 255, 0, 255, 0, 255, 0, 0, 255, 255, 255, 255, 255, 255
+      ]
+      const result = await tauri(async (api, rgba) => {
+        const image = await api.image.Image.new(rgba, 2, 2)
+        await api.clipboardManager.writeImage(image)
+        const read = await api.clipboardManager.readImage()
+        const size = await read.size()
+        const bytes = Array.from(await read.rgba())
+        await image.close()
+        await read.close()
+        return { size, bytes }
+      }, rgba)
+      expect(result.size).toEqual({ width: 2, height: 2 })
+      expect(result.bytes).toEqual(rgba)
+    }
+  )
+
+  itDesktop(
+    'an Image read from the clipboard can be written back',
+    async () => {
+      const result = await tauri(async (api) => {
+        const read = await api.clipboardManager.readImage()
+        await api.clipboardManager.writeText('replaced by text')
+        // `Image` instances are passed by resource id
+        await api.clipboardManager.writeImage(read)
+        const again = await api.clipboardManager.readImage()
+        const size = await again.size()
+        await read.close()
+        await again.close()
+        return size
+      })
+      expect(result).toEqual({ width: 2, height: 2 })
+    }
+  )
+
+  itDesktop('writeImage accepts a 1x1 image', async () => {
+    // a 1x1 transparent PNG
+    const png = [
+      137, 80, 78, 71, 13, 10, 26, 10, 0, 0, 0, 13, 73, 72, 68, 82, 0, 0, 0, 1,
+      0, 0, 0, 1, 8, 6, 0, 0, 0, 31, 21, 196, 137, 0, 0, 0, 11, 73, 68, 65, 84,
+      120, 156, 99, 96, 0, 2, 0, 0, 5, 0, 1, 122, 94, 171, 63, 0, 0, 0, 0, 73,
+      69, 78, 68, 174, 66, 96, 130
+    ]
+    const size = await tauri(async (api, png) => {
+      await api.clipboardManager.writeImage(new Uint8Array(png))
+      const read = await api.clipboardManager.readImage()
+      const size = await read.size()
+      await read.close()
+      return size
+    }, png)
+    expect(size).toEqual({ width: 1, height: 1 })
+  })
+
+  it('readImage rejects when the clipboard holds text', async () => {
+    const message = await tauriError(async (api) => {
+      await api.clipboardManager.writeText('not an image')
+      await api.clipboardManager.readImage()
+    })
+    expect(message).toMatch(
+      isMobile
+        ? /Unsupported on this platform/
+        : /not available in the requested format/
+    )
+  })
+
+  it('clear empties the clipboard', async () => {
+    // reading an empty clipboard rejects on some platforms and yields an
+    // empty string on others
+    const text = await tauri(async (api) => {
+      await api.clipboardManager.writeText('to be cleared')
+      await api.clipboardManager.clear()
+      try {
+        return await api.clipboardManager.readText()
+      } catch {
+        return ''
+      }
+    })
+    expect(text).toBe('')
+  })
+})
diff --git a/packages/api-e2e/test/specs/deep-link.spec.ts b/packages/api-e2e/test/specs/deep-link.spec.ts
new file mode 100644
index 000000000..1deb711b5
--- /dev/null
+++ b/packages/api-e2e/test/specs/deep-link.spec.ts
@@ -0,0 +1,92 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+import { expect } from '@wdio/globals'
+import { tauri, tauriError, describePlugin, itOn } from '../helpers/index.js'
+
+// The suite launches the app without a URL, so there is no current deep link,
+// and it cannot open one through the OS either. `onOpenUrl` is exercised by
+// emitting the event the plugin itself emits when the app is opened with one.
+//
+// Registering a scheme at runtime is only implemented on Linux (a `.desktop`
+// handler plus `xdg-mime`) and Windows (the registry); macOS and mobile read
+// the schemes from the bundle and report the runtime APIs as unsupported.
+
+/** A scheme no real app handles, so registering it cannot clobber anything. */
+const scheme = 'tauri-plugins-e2e'
+
+describePlugin('deep-link', () => {
+  it('getCurrent is null when the app was not opened with a URL', async () => {
+    expect(await tauri((api) => api.deepLink.getCurrent())).toBeNull()
+  })
+
+  it('onOpenUrl delivers the opened URLs until unlistened', async () => {
+    const received = await tauri(
+      async (api, urls) => {
+        const received: string[][] = []
+        const unlisten = await api.deepLink.onOpenUrl((urls) =>
+          received.push(urls)
+        )
+        await api.event.emit('deep-link://new-url', urls)
+        await new Promise((resolve) => setTimeout(resolve, 500))
+        unlisten()
+        await api.event.emit('deep-link://new-url', ['ignored://'])
+        await new Promise((resolve) => setTimeout(resolve, 500))
+        return received
+      },
+      [`${scheme}://open/path?query=1`]
+    )
+    expect(received).toEqual([[`${scheme}://open/path?query=1`]])
+  })
+
+  itOn(
+    ['linux', 'win32'],
+    'register and unregister toggle the scheme handler',
+    async () => {
+      const result = await tauri(async (api, scheme) => {
+        await api.deepLink.register(scheme)
+        const registered = await api.deepLink.isRegistered(scheme)
+        await api.deepLink.unregister(scheme)
+        return {
+          registered,
+          afterUnregister: await api.deepLink.isRegistered(scheme)
+        }
+      }, scheme)
+      expect(result).toEqual({ registered: true, afterUnregister: false })
+    }
+  )
+
+  itOn(
+    ['linux', 'win32'],
+    'isRegistered is false for an unknown scheme',
+    async () => {
+      expect(
+        await tauri(
+          (api, scheme) => api.deepLink.isRegistered(scheme),
+          `${scheme}-unknown`
+        )
+      ).toBe(false)
+    }
+  )
+
+  itOn(
+    ['darwin', 'android', 'ios'],
+    'runtime registration is unsupported',
+    async () => {
+      for (const command of [
+        'register',
+        'unregister',
+        'isRegistered'
+      ] as const) {
+        const error = await tauriError(
+          // eslint-disable-next-line security/detect-object-injection
+          (api, command, scheme) => api.deepLink[command](scheme),
+          command,
+          scheme
+        )
+        expect(error).toMatch(/unsupported platform/i)
+      }
+    }
+  )
+})
diff --git a/packages/api-e2e/test/specs/fs.spec.ts b/packages/api-e2e/test/specs/fs.spec.ts
new file mode 100644
index 000000000..dcf52e0ac
--- /dev/null
+++ b/packages/api-e2e/test/specs/fs.spec.ts
@@ -0,0 +1,447 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+import { expect } from '@wdio/globals'
+import {
+  tauri,
+  tauriError,
+  describePlugin,
+  itDesktop,
+  scratchDir
+} from '../helpers/index.js'
+
+// Every path below is relative to `BaseDirectory.AppData`, which the example's
+// fs scope allows recursively (`fs:scope-appdata-recursive`).
+const dir = scratchDir('fs')
+
+describePlugin('fs', () => {
+  before(async () => {
+    await tauri(async (api, dir) => {
+      const baseDir = api.fs.BaseDirectory.AppData
+      if (await api.fs.exists(dir, { baseDir })) {
+        await api.fs.remove(dir, { baseDir, recursive: true })
+      }
+      await api.fs.mkdir(dir, { baseDir, recursive: true })
+    }, dir)
+  })
+
+  after(async () => {
+    await tauri(async (api, dir) => {
+      const baseDir = api.fs.BaseDirectory.AppData
+      if (await api.fs.exists(dir, { baseDir })) {
+        await api.fs.remove(dir, { baseDir, recursive: true })
+      }
+    }, dir)
+  })
+
+  it('mkdir and exists report the scratch directory', async () => {
+    const result = await tauri(async (api, dir) => {
+      const baseDir = api.fs.BaseDirectory.AppData
+      return {
+        dir: await api.fs.exists(dir, { baseDir }),
+        missing: await api.fs.exists(`${dir}/does-not-exist`, { baseDir })
+      }
+    }, dir)
+    expect(result).toEqual({ dir: true, missing: false })
+  })
+
+  it('writeTextFile and readTextFile round-trip utf-8 text', async () => {
+    const text = 'Hello from the e2e suite — olá, 世界! 🎉\nsecond line\n'
+    const read = await tauri(
+      async (api, path, text) => {
+        const baseDir = api.fs.BaseDirectory.AppData
+        await api.fs.writeTextFile(path, text, { baseDir })
+        return api.fs.readTextFile(path, { baseDir })
+      },
+      `${dir}/text.txt`,
+      text
+    )
+    expect(read).toBe(text)
+  })
+
+  it('writeTextFile appends when asked to', async () => {
+    const read = await tauri(async (api, path) => {
+      const baseDir = api.fs.BaseDirectory.AppData
+      await api.fs.writeTextFile(path, 'first', { baseDir })
+      await api.fs.writeTextFile(path, ' second', { baseDir, append: true })
+      return api.fs.readTextFile(path, { baseDir })
+    }, `${dir}/append.txt`)
+    expect(read).toBe('first second')
+  })
+
+  it('writeFile and writeTextFile work without options', async () => {
+    const result = await tauri(async (api, dir) => {
+      const path = await api.path.join(
+        await api.path.appDataDir(),
+        dir,
+        'no-options.txt'
+      )
+      await api.fs.writeTextFile(path, 'text')
+      const text = await api.fs.readTextFile(path)
+      await api.fs.writeFile(path, new Uint8Array([98, 121, 116, 101, 115]))
+      return { text, bytes: await api.fs.readTextFile(path) }
+    }, dir)
+    expect(result).toEqual({ text: 'text', bytes: 'bytes' })
+  })
+
+  it('writeFile and readFile round-trip binary data', async () => {
+    const bytes = [0, 1, 2, 3, 250, 251, 252, 253, 254, 255]
+    const read = await tauri(
+      async (api, path, bytes) => {
+        const baseDir = api.fs.BaseDirectory.AppData
+        await api.fs.writeFile(path, new Uint8Array(bytes), { baseDir })
+        return Array.from(await api.fs.readFile(path, { baseDir }))
+      },
+      `${dir}/binary.bin`,
+      bytes
+    )
+    expect(read).toEqual(bytes)
+  })
+
+  it('stat, lstat and size describe files and directories', async () => {
+    const result = await tauri(async (api, dir) => {
+      const baseDir = api.fs.BaseDirectory.AppData
+      const file = `${dir}/stat.txt`
+      await api.fs.writeTextFile(file, '0123456789', { baseDir })
+      const fileStat = await api.fs.stat(file, { baseDir })
+      const fileLstat = await api.fs.lstat(file, { baseDir })
+      const dirStat = await api.fs.stat(dir, { baseDir })
+      return {
+        file: {
+          isFile: fileStat.isFile,
+          isDirectory: fileStat.isDirectory,
+          isSymlink: fileStat.isSymlink,
+          size: fileStat.size,
+          hasMtime: fileStat.mtime instanceof Date
+        },
+        lstatSize: fileLstat.size,
+        size: await api.fs.size(file, { baseDir }),
+        absoluteSize: await api.fs.size(
+          await api.path.join(await api.path.appDataDir(), file)
+        ),
+        dirSize: await api.fs.size(dir, { baseDir }),
+        dir: { isFile: dirStat.isFile, isDirectory: dirStat.isDirectory }
+      }
+    }, dir)
+    expect(result.file).toEqual({
+      isFile: true,
+      isDirectory: false,
+      isSymlink: false,
+      size: 10,
+      hasMtime: true
+    })
+    expect(result.lstatSize).toBe(10)
+    expect(result.size).toBe(10)
+    expect(result.absoluteSize).toBe(10)
+    expect(result.dirSize).toBeGreaterThanOrEqual(10)
+    expect(result.dir).toEqual({ isFile: false, isDirectory: true })
+  })
+
+  it('copyFile, rename and readDir', async () => {
+    const result = await tauri(async (api, dir) => {
+      const baseDir = api.fs.BaseDirectory.AppData
+      const sub = `${dir}/tree`
+      await api.fs.mkdir(`${sub}/nested`, { baseDir, recursive: true })
+      await api.fs.writeTextFile(`${sub}/a.txt`, 'a', { baseDir })
+      await api.fs.copyFile(`${sub}/a.txt`, `${sub}/b.txt`, {
+        fromPathBaseDir: baseDir,
+        toPathBaseDir: baseDir
+      })
+      await api.fs.rename(`${sub}/b.txt`, `${sub}/c.txt`, {
+        oldPathBaseDir: baseDir,
+        newPathBaseDir: baseDir
+      })
+      const entries = await api.fs.readDir(sub, { baseDir })
+      return {
+        entries: entries
+          .map((e) => ({
+            name: e.name,
+            isFile: e.isFile,
+            isDirectory: e.isDirectory
+          }))
+          .sort((x, y) => x.name.localeCompare(y.name)),
+        copied: await api.fs.readTextFile(`${sub}/c.txt`, { baseDir }),
+        renamedAway: await api.fs.exists(`${sub}/b.txt`, { baseDir })
+      }
+    }, dir)
+    expect(result.entries).toEqual([
+      { name: 'a.txt', isFile: true, isDirectory: false },
+      { name: 'c.txt', isFile: true, isDirectory: false },
+      { name: 'nested', isFile: false, isDirectory: true }
+    ])
+    expect(result.copied).toBe('a')
+    expect(result.renamedAway).toBe(false)
+  })
+
+  it('remove deletes files and (recursively) directories', async () => {
+    const result = await tauri(async (api, dir) => {
+      const baseDir = api.fs.BaseDirectory.AppData
+      const sub = `${dir}/to-remove`
+      await api.fs.mkdir(`${sub}/nested`, { baseDir, recursive: true })
+      await api.fs.writeTextFile(`${sub}/nested/file.txt`, 'x', { baseDir })
+      await api.fs.remove(`${sub}/nested/file.txt`, { baseDir })
+      const fileGone = !(await api.fs.exists(`${sub}/nested/file.txt`, {
+        baseDir
+      }))
+      await api.fs.writeTextFile(`${sub}/nested/other.txt`, 'x', { baseDir })
+      let nonRecursiveError: string | null = null
+      try {
+        await api.fs.remove(sub, { baseDir })
+      } catch (error) {
+        nonRecursiveError = String(error)
+      }
+      await api.fs.remove(sub, { baseDir, recursive: true })
+      return {
+        fileGone,
+        nonRecursiveError,
+        dirGone: !(await api.fs.exists(sub, { baseDir }))
+      }
+    }, dir)
+    expect(result.fileGone).toBe(true)
+    // a non-empty directory cannot be removed without `recursive`
+    expect(result.nonRecursiveError).not.toBeNull()
+    expect(result.dirGone).toBe(true)
+  })
+
+  it('truncate shortens a file', async () => {
+    const result = await tauri(async (api, path) => {
+      const baseDir = api.fs.BaseDirectory.AppData
+      await api.fs.writeTextFile(path, '0123456789', { baseDir })
+      await api.fs.truncate(path, 4, { baseDir })
+      const shortened = await api.fs.readTextFile(path, { baseDir })
+      await api.fs.truncate(path, undefined, { baseDir })
+      return {
+        shortened,
+        emptied: await api.fs.readTextFile(path, { baseDir })
+      }
+    }, `${dir}/truncate.txt`)
+    expect(result).toEqual({ shortened: '0123', emptied: '' })
+  })
+
+  it('readTextFileLines iterates a file line by line', async () => {
+    const lines = await tauri(async (api, path) => {
+      const baseDir = api.fs.BaseDirectory.AppData
+      await api.fs.writeTextFile(path, 'one\ntwo\r\nthree', { baseDir })
+      const result: string[] = []
+      for await (const line of await api.fs.readTextFileLines(path, {
+        baseDir
+      })) {
+        result.push(line)
+      }
+      return result
+    }, `${dir}/lines.txt`)
+    expect(lines).toEqual(['one', 'two', 'three'])
+  })
+
+  it('readTextFileLines closes the file when a loop exits early', async () => {
+    const result = await tauri(async (api, path) => {
+      const baseDir = api.fs.BaseDirectory.AppData
+      await api.fs.writeTextFile(path, 'one\ntwo\nthree', { baseDir })
+      const lines = await api.fs.readTextFileLines(path, { baseDir })
+      // the iterator keeps the id of the open file in `rid`
+      const state = lines as unknown as { rid: number | null }
+      let rid: number | null = null
+      let first: string | null = null
+      for await (const line of lines) {
+        first = line
+        rid = state.rid
+        break
+      }
+      let closeError: string | null = null
+      try {
+        await api.core.invoke('plugin:resources|close', { rid })
+      } catch (error) {
+        closeError = String(error)
+      }
+      // iterating again starts over
+      const all: string[] = []
+      for await (const line of lines) {
+        all.push(line)
+      }
+      return { first, ridAfter: state.rid, closeError, all }
+    }, `${dir}/lines-break.txt`)
+    expect(result.first).toBe('one')
+    expect(result.ridAfter).toBeNull()
+    // the resource was already closed by the iterator
+    expect(result.closeError).toMatch(/resource id \d+ is invalid/)
+    expect(result.all).toEqual(['one', 'two', 'three'])
+  })
+
+  it('readTextFileLines rejects when the file cannot be read', async () => {
+    // a directory: opening it fails on Windows, reading it fails elsewhere,
+    // which used to yield empty lines forever
+    const message = await tauriError(async (api, path) => {
+      const baseDir = api.fs.BaseDirectory.AppData
+      await api.fs.mkdir(path, { baseDir, recursive: true })
+      const lines = await api.fs.readTextFileLines(path, { baseDir })
+      for (let i = 0; i < 1000; i++) {
+        const { done } = await lines.next()
+        if (done) return
+      }
+      throw new Error('readTextFileLines kept yielding lines for a directory')
+    }, `${dir}/lines-dir`)
+    expect(message).not.toMatch(/kept yielding/)
+    expect(message).toMatch(/failed to (read line|open file)/)
+  })
+
+  it('FileHandle supports write, seek, read, stat and truncate', async () => {
+    const result = await tauri(async (api, path) => {
+      const baseDir = api.fs.BaseDirectory.AppData
+      const encoder = new TextEncoder()
+      const decoder = new TextDecoder()
+
+      const created = await api.fs.create(path, { baseDir })
+      const written = await created.write(encoder.encode('hello world'))
+      const statAfterWrite = await created.stat()
+      await created.close()
+
+      const file = await api.fs.open(path, { baseDir, read: true, write: true })
+      // seek past "hello " and read the rest
+      const position = await file.seek(6, api.fs.SeekMode.Start)
+      const buffer = new Uint8Array(32)
+      const read = await file.read(buffer)
+      const rest = decoder.decode(buffer.subarray(0, read ?? 0))
+      // at EOF, read reports null
+      const atEof = await file.read(new Uint8Array(8))
+      // relative and end-relative seeks
+      const fromEnd = await file.seek(-5, api.fs.SeekMode.End)
+      const relative = await file.seek(-1, api.fs.SeekMode.Current)
+      await file.truncate(5)
+      const statAfterTruncate = await file.stat()
+      await file.close()
+
+      return {
+        written,
+        sizeAfterWrite: statAfterWrite.size,
+        position,
+        read,
+        rest,
+        atEof,
+        fromEnd,
+        relative,
+        sizeAfterTruncate: statAfterTruncate.size,
+        contents: await api.fs.readTextFile(path, { baseDir })
+      }
+    }, `${dir}/handle.txt`)
+    expect(result).toEqual({
+      written: 11,
+      sizeAfterWrite: 11,
+      position: 6,
+      read: 5,
+      rest: 'world',
+      atEof: null,
+      fromEnd: 6,
+      relative: 5,
+      sizeAfterTruncate: 5,
+      contents: 'hello'
+    })
+  })
+
+  it('a closed FileHandle cannot be used again', async () => {
+    const message = await tauriError(async (api, path) => {
+      const baseDir = api.fs.BaseDirectory.AppData
+      const file = await api.fs.create(path, { baseDir })
+      await file.close()
+      await file.stat()
+    }, `${dir}/closed.txt`)
+    expect(message).toMatch(/resource id \d+ is invalid/)
+  })
+
+  it('rejects paths outside the configured scope', async () => {
+    // `$HOME` itself is not in the example's fs scope (only the app dirs,
+    // `$DOWNLOAD` and `$RESOURCE` are).
+    const message = await tauriError(async (api) =>
+      api.fs.readTextFile('e2e-forbidden.txt', {
+        baseDir: api.fs.BaseDirectory.Home
+      })
+    )
+    expect(message).toMatch(/forbidden path/)
+  })
+
+  it('rejects paths escaping the scope through `..`', async () => {
+    const message = await tauriError(async (api) =>
+      api.fs.writeTextFile('../../e2e-escape.txt', 'nope', {
+        baseDir: api.fs.BaseDirectory.AppData
+      })
+    )
+    expect(message).toMatch(/cannot traverse directory|forbidden path/)
+  })
+
+  // The watch specs are desktop-only: `fs:allow-watch` is granted in the
+  // example's desktop capability only.
+  itDesktop(
+    'watchImmediate reports changes in a watched directory',
+    async () => {
+      const result = await tauri(async (api, watched) => {
+        const baseDir = api.fs.BaseDirectory.AppData
+        await api.fs.mkdir(watched, { baseDir, recursive: true })
+        const events: { kind: string; paths: string[] }[] = []
+        const watcher = await api.fs.watchImmediate(
+          watched,
+          (event) => {
+            events.push({ kind: event.type, paths: event.paths })
+          },
+          { baseDir, recursive: true }
+        )
+        await api.fs.writeTextFile(`${watched}/touched.txt`, 'watched', {
+          baseDir
+        })
+        // give the notifier a moment to deliver
+        const deadline = Date.now() + 10_000
+        while (
+          !events.some((e) => e.paths.some((p) => p.endsWith('touched.txt')))
+        ) {
+          if (Date.now() > deadline) {
+            throw new Error(
+              `no watch event for touched.txt, got ${JSON.stringify(events)}`
+            )
+          }
+          await new Promise((resolve) => setTimeout(resolve, 100))
+        }
+        await watcher.close()
+        return events
+      }, `${dir}/watched`)
+      expect(
+        result.some((e) => e.paths.some((p) => p.endsWith('touched.txt')))
+      ).toBe(true)
+    }
+  )
+
+  itDesktop(
+    'watch debounces and closing the watcher stops delivery',
+    async () => {
+      const result = await tauri(async (api, watched) => {
+        const baseDir = api.fs.BaseDirectory.AppData
+        await api.fs.mkdir(watched, { baseDir, recursive: true })
+        let count = 0
+        const watcher = await api.fs.watch(
+          watched,
+          () => {
+            count++
+          },
+          { baseDir, delayMs: 200 }
+        )
+        await api.fs.writeTextFile(`${watched}/debounced.txt`, 'a', {
+          baseDir
+        })
+        const deadline = Date.now() + 10_000
+        while (count === 0) {
+          if (Date.now() > deadline) {
+            throw new Error('no debounced watch event received')
+          }
+          await new Promise((resolve) => setTimeout(resolve, 100))
+        }
+        const afterFirst = count
+        await watcher.close()
+        await api.fs.writeTextFile(`${watched}/after-unwatch.txt`, 'b', {
+          baseDir
+        })
+        await new Promise((resolve) => setTimeout(resolve, 1000))
+        return { afterFirst, afterUnwatch: count }
+      }, `${dir}/debounced`)
+      expect(result.afterFirst).toBeGreaterThan(0)
+      expect(result.afterUnwatch).toBe(result.afterFirst)
+    }
+  )
+})
diff --git a/packages/api-e2e/test/specs/global-shortcut.spec.ts b/packages/api-e2e/test/specs/global-shortcut.spec.ts
new file mode 100644
index 000000000..89aa30076
--- /dev/null
+++ b/packages/api-e2e/test/specs/global-shortcut.spec.ts
@@ -0,0 +1,103 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+import { expect } from '@wdio/globals'
+import {
+  tauri,
+  tauriError,
+  describePlugin,
+  platform
+} from '../helpers/index.js'
+
+// Triggering a shortcut needs OS-level synthetic input the WebDriver session
+// cannot produce, so the specs cover the registry (register / isRegistered /
+// unregister / unregisterAll) and the error paths. The plugin is desktop-only,
+// so the whole suite is skipped on mobile.
+
+describePlugin('global-shortcut', { desktopOnly: true }, () => {
+  afterEach(async () => {
+    await tauri((api) => api.globalShortcut.unregisterAll())
+  })
+
+  it('register and unregister update isRegistered', async () => {
+    const result = await tauri(async (api) => {
+      const shortcut = 'CommandOrControl+Shift+F9'
+      const before = await api.globalShortcut.isRegistered(shortcut)
+      await api.globalShortcut.register(shortcut, () => {})
+      const registered = await api.globalShortcut.isRegistered(shortcut)
+      await api.globalShortcut.unregister(shortcut)
+      const after = await api.globalShortcut.isRegistered(shortcut)
+      return { before, registered, after }
+    })
+    expect(result).toEqual({ before: false, registered: true, after: false })
+  })
+
+  it('register accepts a list of shortcuts and unregister a list too', async () => {
+    const result = await tauri(async (api) => {
+      const shortcuts = ['Alt+Shift+F7', 'Alt+Shift+F8']
+      await api.globalShortcut.register(shortcuts, () => {})
+      const registered = await Promise.all(
+        shortcuts.map((s) => api.globalShortcut.isRegistered(s))
+      )
+      await api.globalShortcut.unregister(shortcuts)
+      const after = await Promise.all(
+        shortcuts.map((s) => api.globalShortcut.isRegistered(s))
+      )
+      return { registered, after }
+    })
+    expect(result.registered).toEqual([true, true])
+    expect(result.after).toEqual([false, false])
+  })
+
+  it('unregisterAll clears every registration', async () => {
+    const result = await tauri(async (api) => {
+      await api.globalShortcut.register('Alt+Shift+F5', () => {})
+      await api.globalShortcut.register('Alt+Shift+F6', () => {})
+      await api.globalShortcut.unregisterAll()
+      return [
+        await api.globalShortcut.isRegistered('Alt+Shift+F5'),
+        await api.globalShortcut.isRegistered('Alt+Shift+F6')
+      ]
+    })
+    expect(result).toEqual([false, false])
+  })
+
+  it('shortcut names are normalized when checking registrations', async () => {
+    const result = await tauri(async (api) => {
+      await api.globalShortcut.register('CmdOrCtrl+Alt+F10', () => {})
+      return {
+        aliased: await api.globalShortcut.isRegistered(
+          'CommandOrControl+Alt+F10'
+        ),
+        reordered: await api.globalShortcut.isRegistered('Alt+CmdOrCtrl+F10')
+      }
+    })
+    expect(result).toEqual({ aliased: true, reordered: true })
+  })
+
+  it('registering the same shortcut twice rejects', async () => {
+    const message = await tauriError(async (api) => {
+      await api.globalShortcut.register('Alt+Shift+F11', () => {})
+      try {
+        await api.globalShortcut.register('Alt+Shift+F11', () => {})
+      } finally {
+        await api.globalShortcut.unregister('Alt+Shift+F11')
+      }
+    })
+    // macOS does not check for duplicates itself: the OS rejects the second
+    // `RegisterEventHotKey` call and the error is the generic one
+    expect(message).toMatch(
+      platform === 'darwin'
+        ? /RegisterEventHotKey failed for F11/
+        : /already registered/i
+    )
+  })
+
+  it('rejects shortcuts that cannot be parsed', async () => {
+    const message = await tauriError((api) =>
+      api.globalShortcut.register('NotAKey+Nope', () => {})
+    )
+    expect(message).toMatch(/NotAKey/)
+  })
+})
diff --git a/packages/api-e2e/test/specs/http.spec.ts b/packages/api-e2e/test/specs/http.spec.ts
new file mode 100644
index 000000000..cd283200a
--- /dev/null
+++ b/packages/api-e2e/test/specs/http.spec.ts
@@ -0,0 +1,149 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+import { expect } from '@wdio/globals'
+import { tauri, tauriError, describePlugin } from '../helpers/index.js'
+
+// The example spawns an echo server on this port: it replies with the request
+// body and the request headers, and sets a `session-token` cookie on requests
+// that do not carry one. It is also the only `http://` origin in the example's
+// http scope.
+const echoServer = 'http://localhost:3003'
+
+describePlugin('http', () => {
+  it('fetch performs a GET and exposes status, url and headers', async () => {
+    const response = await tauri(async (api, url) => {
+      const response = await api.http.fetch(url, {
+        headers: { 'x-e2e-header': 'present' }
+      })
+      return {
+        ok: response.ok,
+        status: response.status,
+        url: response.url,
+        // the echo server mirrors the request headers back
+        echoedHeader: response.headers.get('x-e2e-header'),
+        body: await response.text()
+      }
+    }, echoServer)
+    expect(response.ok).toBe(true)
+    expect(response.status).toBe(200)
+    expect(response.url).toBe(`${echoServer}/`)
+    expect(response.echoedHeader).toBe('present')
+    expect(response.body).toBe('')
+  })
+
+  it('fetch sends a JSON body and parses the echoed response', async () => {
+    const payload = { message: 'hello from e2e', nested: { list: [1, 2, 3] } }
+    const response = await tauri(
+      async (api, url, payload) => {
+        const response = await api.http.fetch(`${url}/json`, {
+          method: 'POST',
+          headers: { 'content-type': 'application/json' },
+          body: JSON.stringify(payload)
+        })
+        return {
+          status: response.status,
+          contentType: response.headers.get('content-type'),
+          body: (await response.json()) as unknown
+        }
+      },
+      echoServer,
+      payload
+    )
+    expect(response.status).toBe(200)
+    expect(response.contentType).toBe('application/json')
+    expect(response.body).toEqual(payload)
+  })
+
+  it('fetch sends binary bodies and reads them back as bytes', async () => {
+    const bytes = [0, 1, 2, 127, 128, 254, 255]
+    const echoed = await tauri(
+      async (api, url, bytes) => {
+        const response = await api.http.fetch(`${url}/bytes`, {
+          method: 'PUT',
+          body: new Uint8Array(bytes)
+        })
+        return Array.from(new Uint8Array(await response.arrayBuffer()))
+      },
+      echoServer,
+      bytes
+    )
+    expect(echoed).toEqual(bytes)
+  })
+
+  it('fetch sends multipart form data', async () => {
+    const body = await tauri(async (api, url) => {
+      const form = new FormData()
+      form.append('foo', 'baz')
+      form.append('bar', 'qux')
+      const response = await api.http.fetch(`${url}/form`, {
+        method: 'POST',
+        body: form
+      })
+      return {
+        contentType: response.headers.get('content-type'),
+        text: await response.text()
+      }
+    }, echoServer)
+    expect(body.contentType).toMatch(/^multipart\/form-data; boundary=/)
+    expect(body.text).toContain('name="foo"')
+    expect(body.text).toContain('baz')
+    expect(body.text).toContain('name="bar"')
+    expect(body.text).toContain('qux')
+  })
+
+  it('the cookie jar stores and replays cookies across requests', async () => {
+    const result = await tauri(async (api, url) => {
+      // The jar is persisted in the app data dir, so an earlier run (or the
+      // requests above) may already hold the cookie: the first request then
+      // replays it instead of being handed a new one.
+      const first = await api.http.fetch(`${url}/cookies`)
+      await first.text()
+      // Either way the jar attaches it to the next request, which the echo
+      // server mirrors back as a `cookie` header without setting a new one.
+      const second = await api.http.fetch(`${url}/cookies`)
+      await second.text()
+      return {
+        setCookie: first.headers.get('set-cookie'),
+        replayedFirst: first.headers.get('cookie'),
+        replayed: second.headers.get('cookie'),
+        setAgain: second.headers.get('set-cookie')
+      }
+    }, echoServer)
+    if (result.replayedFirst === null) {
+      expect(result.setCookie).toMatch(/^session-token=test-value/)
+    } else {
+      expect(result.replayedFirst).toContain('session-token=test-value')
+    }
+    expect(result.replayed).toContain('session-token=test-value')
+    expect(result.setAgain).toBeNull()
+  })
+
+  it('fetch can be aborted', async () => {
+    const message = await tauriError(async (api, url) => {
+      const controller = new AbortController()
+      controller.abort()
+      await api.http.fetch(`${url}/aborted`, { signal: controller.signal })
+    }, echoServer)
+    expect(message).toMatch(/abort|cancel/i)
+  })
+
+  it('rejects URLs outside the configured scope', async () => {
+    const message = await tauriError((api) =>
+      api.http.fetch('http://localhost:3999/not-in-scope')
+    )
+    expect(message).toMatch(/url not allowed on the configured scope/)
+  })
+
+  it('network failures reject', async () => {
+    // Every in-scope origin is reachable, so route the request through a proxy
+    // nothing listens on to force a connection error.
+    const message = await tauriError(
+      (api, url) =>
+        api.http.fetch(url, { proxy: { all: 'http://127.0.0.1:1' } }),
+      echoServer
+    )
+    expect(message).toMatch(/error sending request/)
+  })
+})
diff --git a/packages/api-e2e/test/specs/log.spec.ts b/packages/api-e2e/test/specs/log.spec.ts
new file mode 100644
index 000000000..74467f687
--- /dev/null
+++ b/packages/api-e2e/test/specs/log.spec.ts
@@ -0,0 +1,188 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+import { expect } from '@wdio/globals'
+import { tauri, describePlugin, isMobile } from '../helpers/index.js'
+
+// The example registers the plugin with a `Webview` target, so records logged
+// from the page (and from Rust) are forwarded back to `attachLogger`.
+//
+// The plugin's default format differs per platform: `[date][time][target][level]
+// message` on desktop, and just `[target] message` on mobile, where the platform
+// logger (logcat / os_log) already stamps the time and level.
+
+interface Record {
+  level: number
+  message: string
+}
+
+type Level = 'error' | 'warn' | 'info' | 'debug' | 'trace'
+
+/** Logs `message` at `level` and resolves with the records `attachLogger` saw. */
+function logAndCollect(level: Level, message: string) {
+  return tauri(
+    (api, level, message) =>
+      new Promise<Record[]>((resolve, reject) => {
+        const records: Record[] = []
+        api.log
+          .attachLogger((record) => {
+            if (record.message.includes(message)) {
+              records.push(record)
+            }
+          })
+          .then(async (detach) => {
+            // eslint-disable-next-line security/detect-object-injection
+            await api.log[level](message)
+            setTimeout(() => {
+              detach()
+              resolve(records)
+            }, 1000)
+          })
+          .catch(reject)
+      }),
+    level,
+    message
+  )
+}
+
+describePlugin('log', () => {
+  it('attachLogger receives records logged from the webview', async () => {
+    const records = await logAndCollect('info', 'info record from e2e')
+    expect(records).toHaveLength(1)
+    expect(records[0].level).toBe(3) // LogLevel.Info
+    expect(records[0].message).toMatch(
+      isMobile
+        ? /\[webview[^\]]*\] info record from e2e$/
+        : /\[webview[^\]]*\]\[INFO\] info record from e2e$/
+    )
+  })
+
+  it('records carry the level they were logged at', async () => {
+    const error = await logAndCollect('error', 'error record from e2e')
+    const warn = await logAndCollect('warn', 'warn record from e2e')
+    expect(error[0].level).toBe(5) // LogLevel.Error
+    expect(warn[0].level).toBe(4) // LogLevel.Warn
+    if (!isMobile) {
+      // the level is only part of the formatted message on desktop
+      expect(error[0].message).toContain('[ERROR]')
+      expect(warn[0].message).toContain('[WARN]')
+    }
+  })
+
+  it('records below the configured level are dropped', async () => {
+    // the example sets the level filter to Info
+    const debug = await logAndCollect('debug', 'debug record from e2e')
+    const trace = await logAndCollect('trace', 'trace record from e2e')
+    expect(debug).toHaveLength(0)
+    expect(trace).toHaveLength(0)
+  })
+
+  it('log options are accepted', async () => {
+    const records = await tauri(
+      (api, needle) =>
+        new Promise<Record[]>((resolve, reject) => {
+          const records: Record[] = []
+          api.log
+            .attachLogger((record) => {
+              if (record.message.includes(needle)) records.push(record)
+            })
+            .then(async (detach) => {
+              await api.log.info(needle, {
+                file: 'e2e.spec.ts',
+                line: 42,
+                keyValues: { suite: 'plugins-e2e' }
+              })
+              setTimeout(() => {
+                detach()
+                resolve(records)
+              }, 1000)
+            })
+            .catch(reject)
+        }),
+      'record with options from e2e'
+    )
+    expect(records).toHaveLength(1)
+    expect(records[0].level).toBe(3)
+  })
+
+  it('detaching the logger stops delivery', async () => {
+    const count = await tauri(
+      (api, needle) =>
+        new Promise<number>((resolve, reject) => {
+          let count = 0
+          api.log
+            .attachLogger((record) => {
+              if (record.message.includes(needle)) count++
+            })
+            .then(async (detach) => {
+              await api.log.info(needle)
+              await new Promise((r) => setTimeout(r, 500))
+              detach()
+              await api.log.info(needle)
+              await new Promise((r) => setTimeout(r, 1000))
+              resolve(count)
+            })
+            .catch(reject)
+        }),
+      'detached record from e2e'
+    )
+    expect(count).toBe(1)
+  })
+
+  it('attachConsole forwards records to the console', async () => {
+    const forwarded = await tauri(
+      (api, needle) =>
+        new Promise<string[]>((resolve, reject) => {
+          const seen: string[] = []
+          // Info records are forwarded to `console.info`
+          const original = console.info
+          console.info = (...args: unknown[]) => {
+            const text = args.map(String).join(' ')
+            if (text.includes(needle)) seen.push(text)
+            original.apply(console, args)
+          }
+          api.log
+            .attachConsole()
+            .then(async (detach) => {
+              await api.log.info(needle)
+              setTimeout(() => {
+                detach()
+                console.info = original
+                resolve(seen)
+              }, 1000)
+            })
+            .catch(reject)
+        }),
+      'console record from e2e'
+    )
+    expect(forwarded.length).toBeGreaterThan(0)
+  })
+
+  it('records logged from Rust are forwarded to the webview too', async () => {
+    // the example's `log_operation` command logs its arguments at Info
+    const message = await tauri(
+      (api, needle) =>
+        new Promise<string>((resolve, reject) => {
+          api.log
+            .attachLogger((record) => {
+              if (record.message.includes(needle)) resolve(record.message)
+            })
+            .then(() =>
+              api.core.invoke('log_operation', {
+                event: 'tauri-click',
+                payload: needle
+              })
+            )
+            .catch(reject)
+          setTimeout(() => reject(new Error('record not received')), 5000)
+        }),
+      'rust log from e2e'
+    )
+    expect(message).toContain(
+      isMobile ? '[api_lib::cmd] tauri-click' : '[INFO] tauri-click'
+    )
+    expect(message).toContain('rust log from e2e')
+    expect(message).not.toContain('[webview')
+  })
+})
diff --git a/packages/api-e2e/test/specs/notification.spec.ts b/packages/api-e2e/test/specs/notification.spec.ts
new file mode 100644
index 000000000..c67256c44
--- /dev/null
+++ b/packages/api-e2e/test/specs/notification.spec.ts
@@ -0,0 +1,141 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+import { expect } from '@wdio/globals'
+import {
+  tauri,
+  tauriError,
+  describePlugin,
+  itDesktop,
+  itOn
+} from '../helpers/index.js'
+
+// Whether a notification actually shows up depends on the desktop session
+// (a notification daemon on Linux, the app's registration on Windows and
+// macOS), which the suite cannot observe, and sending is fire-and-forget, so
+// only the permission model is covered on desktop.
+//
+// The permission specs are desktop-only: mobile starts out ungranted and
+// `requestPermission` puts up a system dialog the session would then block on.
+//
+// Scheduling, action types, channels, the pending/active lists and the
+// listeners are only implemented on mobile. None of them need the permission,
+// so they are covered there on an app that has not been granted it.
+
+describePlugin('notification', () => {
+  itDesktop('permission is granted on desktop', async () => {
+    const result = await tauri(async (api) => ({
+      granted: await api.notification.isPermissionGranted(),
+      requested: await api.notification.requestPermission()
+    }))
+    expect(result).toEqual({ granted: true, requested: 'granted' })
+  })
+
+  itDesktop('the plugin overrides window.Notification', async () => {
+    const result = await tauri(async () => ({
+      permission: window.Notification.permission,
+      requested: await window.Notification.requestPermission()
+    }))
+    expect(result).toEqual({ permission: 'granted', requested: 'granted' })
+  })
+
+  itOn(
+    ['android', 'ios'],
+    'action types register, and cancel/remove leave nothing pending or active',
+    async () => {
+      const result = await tauri(async (api) => {
+        await api.notification.registerActionTypes([
+          {
+            id: 'e2e-actions',
+            actions: [
+              { id: 'reply', title: 'Reply', input: true },
+              { id: 'dismiss', title: 'Dismiss', destructive: true }
+            ]
+          }
+        ])
+        await api.notification.cancel([424242])
+        await api.notification.cancelAll()
+        await api.notification.removeActive([{ id: 424242 }])
+        await api.notification.removeAllActive()
+        return {
+          pending: await api.notification.pending(),
+          active: await api.notification.active()
+        }
+      })
+      expect(result).toEqual({ pending: [], active: [] })
+    }
+  )
+
+  itOn('android', 'channels can be created, listed and removed', async () => {
+    const result = await tauri(async (api) => {
+      const { Importance, Visibility } = api.notification
+      await api.notification.createChannel({
+        id: 'e2e-channel',
+        name: 'e2e channel',
+        description: 'created by the e2e suite',
+        importance: Importance.High,
+        visibility: Visibility.Public,
+        vibration: true
+      })
+      const created = (await api.notification.channels()).find(
+        (channel) => channel.id === 'e2e-channel'
+      )
+      await api.notification.removeChannel('e2e-channel')
+      const removed = (await api.notification.channels()).some(
+        (channel) => channel.id === 'e2e-channel'
+      )
+      return {
+        created: created && {
+          name: created.name,
+          description: created.description,
+          importance: created.importance,
+          vibration: created.vibration
+        },
+        removed
+      }
+    })
+    expect(result).toEqual({
+      created: {
+        name: 'e2e channel',
+        description: 'created by the e2e suite',
+        importance: 4, // Importance.High
+        vibration: true
+      },
+      removed: false
+    })
+  })
+
+  itOn('ios', 'channels are not implemented', async () => {
+    for (const call of ['create', 'remove', 'list'] as const) {
+      const error = await tauriError(
+        (api, call) =>
+          call === 'create'
+            ? api.notification.createChannel({ id: 'e2e', name: 'e2e' })
+            : call === 'remove'
+              ? api.notification.removeChannel('e2e')
+              : api.notification.channels(),
+        call
+      )
+      expect(error).toMatch(/not implemented/)
+    }
+  })
+
+  itOn(
+    ['android', 'ios'],
+    'onNotificationReceived and onAction listeners register and unregister',
+    async () => {
+      const result = await tauri(async (api) => {
+        const received = await api.notification.onNotificationReceived(() => {})
+        const action = await api.notification.onAction(() => {})
+        await received.unregister()
+        await action.unregister()
+        return { received: received.event, action: action.event }
+      })
+      expect(result).toEqual({
+        received: 'notification',
+        action: 'actionPerformed'
+      })
+    }
+  )
+})
diff --git a/packages/api-e2e/test/specs/opener.spec.ts b/packages/api-e2e/test/specs/opener.spec.ts
new file mode 100644
index 000000000..cc636e7bb
--- /dev/null
+++ b/packages/api-e2e/test/specs/opener.spec.ts
@@ -0,0 +1,47 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+import { expect } from '@wdio/globals'
+import { tauriError, describePlugin } from '../helpers/index.js'
+
+// A successful open launches an external application (browser, file manager)
+// the suite cannot control or close, so only the scope enforcement is covered.
+// The example allows `mailto:`, `tel:`, `http(s)://` URLs (opener:default),
+// `https://` URLs specifically with `inAppBrowser`, and paths under `$APPDATA`.
+
+describePlugin('opener', () => {
+  it('openUrl rejects URL schemes outside the scope', async () => {
+    const message = await tauriError((api) =>
+      api.opener.openUrl('ftp://example.com/file')
+    )
+    expect(message).toMatch(
+      /Not allowed to open url ftp:\/\/example\.com\/file/
+    )
+  })
+
+  it('openUrl rejects an app that is not in the scope for the URL', async () => {
+    // `inAppBrowser` is only allowed for `https://` URLs
+    const message = await tauriError((api) =>
+      api.opener.openUrl('http://example.com', 'inAppBrowser')
+    )
+    expect(message).toMatch(/Not allowed to open url http:\/\/example\.com/)
+  })
+
+  it('openPath rejects paths outside the scope', async () => {
+    const message = await tauriError(async (api) =>
+      api.opener.openPath(await api.path.join(await api.path.homeDir(), 'e2e'))
+    )
+    expect(message).toMatch(/Not allowed to open path/)
+  })
+
+  it('revealItemsInDir rejects paths that do not exist', async () => {
+    const message = await tauriError(async (api) =>
+      api.opener.revealItemsInDir(
+        await api.path.join(await api.path.appDataDir(), 'does-not-exist-e2e')
+      )
+    )
+    // the `std::io` NotFound message on Unix, the shell path lookup's on Windows
+    expect(message).toMatch(/os error 2|path doesn't exist/)
+  })
+})
diff --git a/packages/api-e2e/test/specs/os.spec.ts b/packages/api-e2e/test/specs/os.spec.ts
new file mode 100644
index 000000000..82484752e
--- /dev/null
+++ b/packages/api-e2e/test/specs/os.spec.ts
@@ -0,0 +1,109 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+import os from 'node:os'
+import { expect } from '@wdio/globals'
+import {
+  tauri,
+  describePlugin,
+  itDesktop,
+  platform,
+  isMobile
+} from '../helpers/index.js'
+
+// Everything the plugin reports is baked in at compile time, so it describes
+// the *app's* platform — the host for the desktop suite, but the emulator or
+// simulator for the mobile ones, which is why nothing here compares against
+// Node's view of the host unless the two are the same machine.
+
+const nodePlatformToTauri: Record<string, string> = {
+  linux: 'linux',
+  win32: 'windows',
+  darwin: 'macos',
+  freebsd: 'freebsd',
+  openbsd: 'openbsd',
+  android: 'android',
+  ios: 'ios'
+}
+
+const nodeArchToTauri: Record<string, string> = {
+  x64: 'x86_64',
+  ia32: 'x86',
+  arm64: 'aarch64',
+  arm: 'arm',
+  riscv64: 'riscv64',
+  ppc64: 'powerpc64',
+  s390x: 's390x'
+}
+
+// `Arch` in the plugin's guest-js.
+const architectures = [
+  'x86',
+  'x86_64',
+  'arm',
+  'aarch64',
+  'mips',
+  'mips64',
+  'powerpc',
+  'powerpc64',
+  'riscv64',
+  's390x',
+  'sparc64'
+]
+
+describePlugin('os', () => {
+  it('platform, type and family match the target', async () => {
+    const info = await tauri((api) => ({
+      platform: api.os.platform(),
+      type: api.os.type(),
+      family: api.os.family()
+    }))
+    // eslint-disable-next-line security/detect-object-injection
+    expect(info.platform).toBe(nodePlatformToTauri[platform])
+    // eslint-disable-next-line security/detect-object-injection
+    expect(info.type).toBe(nodePlatformToTauri[platform])
+    expect(info.family).toBe(platform === 'win32' ? 'windows' : 'unix')
+  })
+
+  it('arch reports a known architecture', async () => {
+    const arch = await tauri((api) => api.os.arch())
+    if (isMobile) {
+      // The device/simulator is not necessarily the host's architecture (see
+      // `E2E_ANDROID_TARGET` / `E2E_IOS_TARGET`).
+      expect(architectures).toContain(arch)
+    } else {
+      expect(arch).toBe(nodeArchToTauri[process.arch])
+    }
+  })
+
+  it('eol and exeExtension match the platform conventions', async () => {
+    const info = await tauri((api) => ({
+      eol: api.os.eol(),
+      exeExtension: api.os.exeExtension()
+    }))
+    expect(info.eol).toBe(platform === 'win32' ? '\r\n' : '\n')
+    expect(info.exeExtension).toBe(platform === 'win32' ? 'exe' : '')
+  })
+
+  it('locale is null or a language tag', async () => {
+    const locale = await tauri((api) => api.os.locale())
+    // The plugin forwards the environment's POSIX locale as-is, so a host with
+    // no locale configured (CI runners default to `LANG=C.UTF-8`) reports the
+    // POSIX default instead of a language tag.
+    if (locale !== null && locale !== 'C' && locale !== 'POSIX') {
+      // e.g. `en-US`
+      const [language, ...subtags] = locale.split(/[-_]/)
+      expect(language).toMatch(/^[A-Za-z]{2,3}$/)
+      for (const subtag of subtags) {
+        expect(subtag).toMatch(/^[A-Za-z0-9]+$/)
+      }
+    }
+  })
+
+  itDesktop('hostname matches the host', async () => {
+    const hostname = await tauri((api) => api.os.hostname())
+    // Windows can report the name in a different case than Node does.
+    expect(hostname!.toLowerCase()).toBe(os.hostname().toLowerCase())
+  })
+})
diff --git a/packages/api-e2e/test/specs/plugins.spec.ts b/packages/api-e2e/test/specs/plugins.spec.ts
new file mode 100644
index 000000000..834282f1e
--- /dev/null
+++ b/packages/api-e2e/test/specs/plugins.spec.ts
@@ -0,0 +1,233 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+import { expect } from '@wdio/globals'
+import {
+  tauri,
+  isMobile,
+  type CommonPluginApi,
+  type DesktopPluginApi,
+  type MobilePluginApi
+} from '../helpers/index.js'
+
+/**
+ * The members each plugin's `api-iife.js` is expected to define on
+ * `window.__TAURI__.<plugin>`. This is the one place the suite covers the
+ * plugins whose commands cannot be driven from a WebDriver session (dialog
+ * blocks on native UI, process terminates the app, the mobile plugins need
+ * hardware or native UI), and it catches a plugin whose global API script is
+ * missing from its `build.rs`.
+ */
+type Surface<T> = { [P in keyof T]: (keyof T[P])[] }
+
+/** Plugins the example registers on every platform. */
+const commonSurface: Surface<CommonPluginApi> = {
+  clipboardManager: [
+    'writeText',
+    'readText',
+    'writeHtml',
+    'clear',
+    'readImage',
+    'writeImage'
+  ],
+  deepLink: [
+    'getCurrent',
+    'register',
+    'unregister',
+    'isRegistered',
+    'onOpenUrl'
+  ],
+  dialog: ['open', 'save', 'message', 'ask', 'confirm'],
+  fs: [
+    'BaseDirectory',
+    'FileHandle',
+    'SeekMode',
+    'create',
+    'open',
+    'copyFile',
+    'mkdir',
+    'readDir',
+    'readFile',
+    'readTextFile',
+    'readTextFileLines',
+    'remove',
+    'rename',
+    'stat',
+    'lstat',
+    'truncate',
+    'writeFile',
+    'writeTextFile',
+    'exists',
+    'watch',
+    'watchImmediate',
+    'size'
+  ],
+  http: ['fetch'],
+  log: [
+    'LogLevel',
+    'error',
+    'warn',
+    'info',
+    'debug',
+    'trace',
+    'attachLogger',
+    'attachConsole'
+  ],
+  notification: [
+    'isPermissionGranted',
+    'requestPermission',
+    'sendNotification',
+    'registerActionTypes',
+    'pending',
+    'cancel',
+    'cancelAll',
+    'active',
+    'removeActive',
+    'removeAllActive',
+    'createChannel',
+    'removeChannel',
+    'channels',
+    'onNotificationReceived',
+    'onAction'
+  ],
+  opener: ['openUrl', 'openPath', 'revealItemsInDir'],
+  os: [
+    'eol',
+    'platform',
+    'family',
+    'version',
+    'type',
+    'arch',
+    'locale',
+    'exeExtension',
+    'hostname'
+  ],
+  process: ['exit', 'relaunch'],
+  shell: ['Command', 'Child', 'EventEmitter'],
+  // the `Database` class itself
+  sql: ['load', 'get'],
+  store: ['load', 'getStore', 'LazyStore', 'Store'],
+  upload: ['download', 'upload', 'HttpMethod'],
+  // the `WebSocket` class itself
+  websocket: ['connect']
+}
+
+/** Plugins the example only registers on desktop. */
+const desktopSurface: Surface<DesktopPluginApi> = {
+  autostart: ['enable', 'disable', 'isEnabled'],
+  cli: ['getMatches'],
+  globalShortcut: ['register', 'unregister', 'unregisterAll', 'isRegistered'],
+  positioner: [
+    'Position',
+    'moveWindow',
+    'moveWindowConstrained',
+    'handleIconState'
+  ],
+  updater: ['check', 'Update'],
+  windowState: [
+    'StateFlags',
+    'restoreState',
+    'restoreStateCurrent',
+    'saveWindowState',
+    'filename'
+  ]
+}
+
+/** Plugins the example only registers on mobile. */
+const mobileSurface: Surface<MobilePluginApi> = {
+  barcodeScanner: [
+    'Format',
+    'scan',
+    'cancel',
+    'checkPermissions',
+    'requestPermissions',
+    'openAppSettings'
+  ],
+  biometric: ['BiometryType', 'checkStatus', 'authenticate'],
+  geolocation: [
+    'watchPosition',
+    'getCurrentPosition',
+    'clearWatch',
+    'checkPermissions',
+    'requestPermissions'
+  ],
+  // `ImpactFeedbackStyle` and `NotificationFeedbackType` are type aliases, so
+  // they are not part of the runtime namespace.
+  haptics: [
+    'vibrate',
+    'impactFeedback',
+    'notificationFeedback',
+    'selectionFeedback'
+  ],
+  nfc: [
+    'NFCTypeNameFormat',
+    'TechKind',
+    'RTD_TEXT',
+    'RTD_URI',
+    'record',
+    'textRecord',
+    'uriRecord',
+    'scan',
+    'write',
+    'isAvailable'
+  ]
+}
+
+const surface = {
+  ...commonSurface,
+  ...(isMobile ? mobileSurface : desktopSurface)
+} as Record<string, string[]>
+
+/** The other platform's plugins, which must *not* be in this build. */
+const foreign = Object.keys(isMobile ? desktopSurface : mobileSurface)
+
+describe('plugin globals', () => {
+  it('every plugin this platform registers exposes its API on window.__TAURI__', async () => {
+    const missing = await tauri(
+      (api, plugins) =>
+        plugins.filter((plugin) => {
+          // eslint-disable-next-line security/detect-object-injection
+          const global = (api as unknown as Record<string, unknown>)[plugin]
+          // a module namespace, or the class a default-export-only module (sql, websocket) defines
+          return typeof global !== 'object' && typeof global !== 'function'
+        }),
+      Object.keys(surface)
+    )
+    expect(missing).toEqual([])
+  })
+
+  it('the other platform’s plugins are not in the build', async () => {
+    // Their Rust crates are target-gated in the example's Cargo.toml, so their
+    // `global_api_script_path` is never injected either.
+    const present = await tauri(
+      (api, plugins) =>
+        plugins.filter(
+          (plugin) =>
+            // eslint-disable-next-line security/detect-object-injection
+            (api as unknown as Record<string, unknown>)[plugin] !== undefined
+        ),
+      foreign
+    )
+    expect(present).toEqual([])
+  })
+
+  for (const [plugin, members] of Object.entries(surface)) {
+    it(`${plugin} exposes its documented members`, async () => {
+      const missing = await tauri(
+        (api, plugin, members) => {
+          const namespaces = api as unknown as Record<
+            string,
+            Record<string, unknown>
+          >
+          // eslint-disable-next-line security/detect-object-injection
+          const namespace = namespaces[plugin]
+          return members.filter((member) => !(member in namespace))
+        },
+        plugin,
+        members
+      )
+      expect(missing).toEqual([])
+    })
+  }
+})
diff --git a/packages/api-e2e/test/specs/positioner.spec.ts b/packages/api-e2e/test/specs/positioner.spec.ts
new file mode 100644
index 000000000..d0e7986d3
--- /dev/null
+++ b/packages/api-e2e/test/specs/positioner.spec.ts
@@ -0,0 +1,145 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+import { expect } from '@wdio/globals'
+import { tauri, tauriError, describePlugin, itWm } from '../helpers/index.js'
+
+// Positions are computed from the window's current monitor and outer size, so
+// the specs compute the expected physical position the same way and compare
+// once the window manager has applied the move. The tray positions need the
+// tray icon's rect, which normally comes from a click on the icon; the spec
+// hands one in through `handleIconState`, as a JS tray event handler would.
+// The moved window is not put back: each spec file gets a fresh app.
+
+interface Geometry {
+  monitor: { x: number; y: number; width: number; height: number }
+  window: { width: number; height: number }
+}
+
+/** Moves the main window and reports where it ended up along with the geometry the position is derived from. */
+function moveAndMeasure(position: string, constrained = false) {
+  return tauri(
+    async (api, position, constrained) => {
+      const win = api.window.getCurrentWindow()
+      const { Position } = api.positioner
+      const value = Position[position as keyof typeof Position]
+      await (constrained
+        ? api.positioner.moveWindowConstrained(value)
+        : api.positioner.moveWindow(value))
+      await new Promise((resolve) => setTimeout(resolve, 500))
+      const monitor = await api.window.currentMonitor()
+      const size = await win.outerSize()
+      const outer = await win.outerPosition()
+      return {
+        monitor: {
+          x: monitor!.position.x,
+          y: monitor!.position.y,
+          width: monitor!.size.width,
+          height: monitor!.size.height
+        },
+        window: { width: size.width, height: size.height },
+        position: { x: outer.x, y: outer.y }
+      }
+    },
+    position,
+    constrained
+  )
+}
+
+function center({ monitor, window }: Geometry) {
+  return {
+    x: monitor.x + Math.trunc(monitor.width / 2) - Math.trunc(window.width / 2),
+    y:
+      monitor.y + Math.trunc(monitor.height / 2) - Math.trunc(window.height / 2)
+  }
+}
+
+describePlugin('positioner', { desktopOnly: true }, () => {
+  // must run before any tray rect is handed in
+  it('tray positions are rejected until the tray icon reported its rect', async () => {
+    const error = await tauriError((api) =>
+      api.positioner.moveWindow(api.positioner.Position.TrayCenter)
+    )
+    expect(error).toMatch(/Tray position not set/)
+  })
+
+  it('the Position enum matches the plugin', async () => {
+    const names = await tauri((api) =>
+      Object.keys(api.positioner.Position).filter((key) => isNaN(Number(key)))
+    )
+    expect(names).toEqual([
+      'TopLeft',
+      'TopRight',
+      'BottomLeft',
+      'BottomRight',
+      'TopCenter',
+      'BottomCenter',
+      'LeftCenter',
+      'RightCenter',
+      'Center',
+      'TrayLeft',
+      'TrayBottomLeft',
+      'TrayRight',
+      'TrayBottomRight',
+      'TrayCenter',
+      'TrayBottomCenter'
+    ])
+  })
+
+  itWm('moveWindow centers the window on its monitor', async () => {
+    const result = await moveAndMeasure('Center')
+    expect(result.position).toEqual(center(result))
+  })
+
+  itWm(
+    'moveWindowConstrained behaves like moveWindow for screen positions',
+    async () => {
+      const result = await moveAndMeasure('Center', true)
+      expect(result.position).toEqual(center(result))
+    }
+  )
+
+  itWm('tray positions are relative to the reported tray rect', async () => {
+    // The example's 1000x800 window barely fits the CI screens (1024x768 on
+    // Windows, 1280x1024 on Xvfb), so wherever the tray "icon" is it sticks out
+    // of the monitor and `moveWindowConstrained` clamps it back on both axes.
+    // The window is shrunk and the tray placed near the monitor's top left
+    // corner, far enough from the edges that both positions keep the window on
+    // screen and neither the OS-specific flips nor the constraint kick in.
+    const tray = await tauri(async (api) => {
+      const win = api.window.getCurrentWindow()
+      await win.setSize(new api.dpi.LogicalSize(600, 400))
+      await new Promise((resolve) => setTimeout(resolve, 500))
+      const monitor = await api.window.currentMonitor()
+      const size = await win.outerSize()
+      const rect = {
+        x: monitor!.position.x + Math.trunc(size.width / 2) + 50,
+        y: monitor!.position.y + 50,
+        width: 20,
+        height: 20
+      }
+      await api.positioner.handleIconState({
+        type: 'Click',
+        id: 'e2e',
+        position: new api.dpi.PhysicalPosition(rect.x, rect.y),
+        rect: {
+          position: new api.dpi.PhysicalPosition(rect.x, rect.y),
+          size: new api.dpi.PhysicalSize(rect.width, rect.height)
+        },
+        button: 'Left',
+        buttonState: 'Down'
+      })
+      return rect
+    })
+
+    const bottomLeft = await moveAndMeasure('TrayBottomLeft')
+    expect(bottomLeft.position).toEqual({ x: tray.x, y: tray.y })
+
+    const bottomCenter = await moveAndMeasure('TrayBottomCenter', true)
+    expect(bottomCenter.position).toEqual({
+      x: tray.x + tray.width / 2 - Math.trunc(bottomCenter.window.width / 2),
+      y: tray.y
+    })
+  })
+})
diff --git a/packages/api-e2e/test/specs/shell.spec.ts b/packages/api-e2e/test/specs/shell.spec.ts
new file mode 100644
index 000000000..80af53cd3
--- /dev/null
+++ b/packages/api-e2e/test/specs/shell.spec.ts
@@ -0,0 +1,230 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+import { expect } from '@wdio/globals'
+import {
+  tauri,
+  tauriError,
+  describePlugin,
+  platform
+} from '../helpers/index.js'
+
+// The example's shell scope allows `sh -c <script>` and `cmd /C <script>`.
+const shell =
+  platform === 'win32'
+    ? { program: 'cmd', flag: '/C' }
+    : { program: 'sh', flag: '-c' }
+
+// Running a child process works on desktop and on Android (`/system/bin/sh`),
+// but iOS does not let an app spawn one at all. The scope specs below stay on
+// every platform: `prepare_cmd` rejects before anything is executed.
+const itSpawns = platform === 'ios' ? it.skip : it
+
+/**
+ * Puts a directory in the form the two sides of the working directory
+ * assertion can be compared in: the shell may print it with a different path
+ * style, and on Android `/data/user/<n>/<pkg>` (which `appDataDir` reports) is
+ * a symlink to `/data/data/<pkg>` (which `pwd` resolves it to).
+ */
+function normalizeDir(dir: string): string {
+  return dir
+    .replace(/[\\/]+$/, '')
+    .replace(/\\/g, '/')
+    .replace(/^\/data\/user\/\d+\//, '/data/data/')
+    .toLowerCase()
+}
+
+describePlugin('shell', () => {
+  itSpawns('execute collects stdout, stderr and the exit code', async () => {
+    const output = await tauri(
+      async (api, program, flag, script) => {
+        const result = await api.shell.Command.create(program, [
+          flag,
+          script
+        ]).execute()
+        return {
+          code: result.code,
+          signal: result.signal,
+          stdout: result.stdout.trim(),
+          stderr: result.stderr.trim()
+        }
+      },
+      shell.program,
+      shell.flag,
+      platform === 'win32'
+        ? 'echo hello from e2e && echo warning 1>&2 && exit 3'
+        : 'echo "hello from e2e"; echo "warning" >&2; exit 3'
+    )
+    expect(output.code).toBe(3)
+    expect(output.signal).toBeNull()
+    expect(output.stdout).toBe('hello from e2e')
+    expect(output.stderr).toBe('warning')
+  })
+
+  itSpawns(
+    'execute passes environment variables and the working directory',
+    async () => {
+      const cwd = await tauri((api) => api.path.appDataDir())
+      const output = await tauri(
+        async (api, program, flag, script, cwd) => {
+          const result = await api.shell.Command.create(
+            program,
+            [flag, script],
+            {
+              cwd,
+              env: { E2E_VALUE: 'from-e2e' }
+            }
+          ).execute()
+          return { code: result.code, stdout: result.stdout.trim() }
+        },
+        shell.program,
+        shell.flag,
+        platform === 'win32'
+          ? 'echo %E2E_VALUE% && cd'
+          : 'echo "$E2E_VALUE"; pwd',
+        cwd
+      )
+      expect(output.code).toBe(0)
+      // `cmd` echoes everything between `echo ` and `&&`, the space before the
+      // separator included, so every line is trimmed and not just the ends of
+      // the output as a whole.
+      const [value, reportedCwd] = output.stdout
+        .split(/\r?\n/)
+        .map((line) => line.trim())
+      expect(value).toBe('from-e2e')
+      expect(normalizeDir(reportedCwd ?? '')).toBe(normalizeDir(cwd))
+    }
+  )
+
+  itSpawns(
+    'spawn streams stdout and stderr lines and reports close',
+    async () => {
+      const events = await tauri(
+        (api, program, flag, script) =>
+          new Promise<{
+            stdout: string[]
+            stderr: string[]
+            close: { code: number | null; signal: number | null }
+            pid: number
+          }>((resolve, reject) => {
+            const stdout: string[] = []
+            const stderr: string[] = []
+            let pid = 0
+            const command = api.shell.Command.create(program, [flag, script])
+            command.stdout.on('data', (line) => stdout.push(line.trim()))
+            command.stderr.on('data', (line) => stderr.push(line.trim()))
+            command.on('error', (error) => reject(new Error(error)))
+            command.on('close', (payload) =>
+              resolve({
+                stdout,
+                stderr,
+                close: { code: payload.code, signal: payload.signal },
+                pid
+              })
+            )
+            command
+              .spawn()
+              .then((child) => {
+                pid = child.pid
+              })
+              .catch(reject)
+            setTimeout(() => reject(new Error('command never closed')), 15000)
+          }),
+        shell.program,
+        shell.flag,
+        platform === 'win32'
+          ? 'echo one && echo two && echo err 1>&2'
+          : 'echo one; echo two; echo err >&2'
+      )
+      expect(events.pid).toBeGreaterThan(0)
+      expect(events.stdout).toEqual(['one', 'two'])
+      expect(events.stderr).toEqual(['err'])
+      expect(events.close.code).toBe(0)
+    }
+  )
+
+  itSpawns('write sends to stdin', async () => {
+    const output = await tauri(
+      (api, program, flag, script) =>
+        new Promise<string>((resolve, reject) => {
+          let out = ''
+          const command = api.shell.Command.create(program, [flag, script])
+          command.stdout.on('data', (line) => {
+            out += line
+          })
+          command.on('error', (error) => reject(new Error(error)))
+          command.on('close', () => resolve(out.trim()))
+          command
+            .spawn()
+            .then((child) => child.write('ping from e2e\n'))
+            .catch(reject)
+          setTimeout(() => reject(new Error('command never closed')), 15000)
+        }),
+      shell.program,
+      shell.flag,
+      // `call` makes cmd expand `%line%` after `set /p` ran, rather than
+      // when the line is parsed
+      platform === 'win32'
+        ? 'set /p line= & call echo got: %line%'
+        : 'read line; echo "got: $line"'
+    )
+    expect(output).toBe('got: ping from e2e')
+  })
+
+  itSpawns('kill terminates a running child', async () => {
+    const result = await tauri(
+      (api, program, flag, script) =>
+        new Promise<{ code: number | null; signal: number | null }>(
+          (resolve, reject) => {
+            const command = api.shell.Command.create(program, [flag, script])
+            command.on('error', (error) => reject(new Error(error)))
+            command.on('close', (payload) =>
+              resolve({ code: payload.code, signal: payload.signal })
+            )
+            command
+              .spawn()
+              .then((child) =>
+                // give the shell a moment to start before killing it
+                new Promise((r) => setTimeout(r, 500)).then(() => child.kill())
+              )
+              .catch(reject)
+            setTimeout(() => reject(new Error('child was not killed')), 15000)
+          }
+        ),
+      shell.program,
+      shell.flag,
+      // The script has to keep the shell itself busy rather than start another
+      // process: `kill` only signals the direct child, and a surviving
+      // grandchild holds the stdout/stderr pipes open, which withholds the
+      // `close` event until it exits on its own. Both shells block on their
+      // built-in stdin read, and the test never writes to stdin.
+      platform === 'win32' ? 'set /p killme=' : 'read killme'
+    )
+    if (platform === 'win32') {
+      // TerminateProcess sets an exit code of 1
+      expect(result.code).not.toBe(0)
+    } else {
+      // killed by SIGKILL, so no exit code
+      expect(result.code).toBeNull()
+      expect(result.signal).toBe(9)
+    }
+  })
+
+  it('rejects programs that are not in the scope', async () => {
+    const message = await tauriError((api) =>
+      api.shell.Command.create('e2e-not-allowed').execute()
+    )
+    expect(message).toMatch(/program not allowed on the configured shell scope/)
+  })
+
+  it('rejects arguments that do not match the scope', async () => {
+    // the scope only allows `-c`/`/C` followed by a non-empty script
+    const message = await tauriError(
+      (api, program) =>
+        api.shell.Command.create(program, ['--version']).execute(),
+      shell.program
+    )
+    expect(message).toMatch(/not allowed|validator|scope/i)
+  })
+})
diff --git a/packages/api-e2e/test/specs/sql.spec.ts b/packages/api-e2e/test/specs/sql.spec.ts
new file mode 100644
index 000000000..f20f28a31
--- /dev/null
+++ b/packages/api-e2e/test/specs/sql.spec.ts
@@ -0,0 +1,168 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+import { expect } from '@wdio/globals'
+import { tauri, tauriError, describePlugin } from '../helpers/index.js'
+
+// SQLite databases live in the app config directory. The spec works on its
+// own database, recreating its table before each test, and only reads the
+// example's `sqlite:api.db` to check the migration the app registers for it.
+
+const db = 'sqlite:e2e-sql.db'
+
+interface Row {
+  id: number
+  name: string
+  score: number | null
+  ratio: number | null
+}
+
+describePlugin('sql', () => {
+  beforeEach(async () => {
+    await tauri(async (api, db) => {
+      const database = await api.sql.load(db)
+      await database.execute('DROP TABLE IF EXISTS e2e')
+      await database.execute(
+        'CREATE TABLE e2e (id INTEGER PRIMARY KEY AUTOINCREMENT, name TEXT NOT NULL, score INTEGER, ratio REAL)'
+      )
+    }, db)
+  })
+
+  it('load resolves with a database for the given path', async () => {
+    const path = await tauri(
+      async (api, db) => (await api.sql.load(db)).path,
+      db
+    )
+    expect(path).toBe(db)
+  })
+
+  it('migrations registered by the app run when their database is loaded', async () => {
+    const result = await tauri(async (api) => {
+      const database = await api.sql.load('sqlite:api.db')
+      return {
+        tables: await database.select<{ name: string }[]>(
+          "SELECT name FROM sqlite_master WHERE type = 'table' AND name = 'todos'"
+        ),
+        migrations: await database.select<
+          { version: number; description: string; success: number }[]
+        >('SELECT version, description, success FROM _sqlx_migrations')
+      }
+    })
+    expect(result.tables).toEqual([{ name: 'todos' }])
+    // `success` is declared BOOLEAN but stored, and read back, as an integer
+    expect(result.migrations).toEqual([
+      { version: 1, description: 'create_todos_table', success: 1 }
+    ])
+  })
+
+  it('execute reports affected rows and the last insert id', async () => {
+    const results = await tauri(async (api, db) => {
+      const database = api.sql.get(db)
+      const first = await database.execute(
+        'INSERT INTO e2e (name, score) VALUES ($1, $2)',
+        ['first', 1]
+      )
+      const second = await database.execute(
+        'INSERT INTO e2e (name, score) VALUES ($1, $2)',
+        ['second', 2]
+      )
+      const update = await database.execute('UPDATE e2e SET score = score + 10')
+      return { first, second, update }
+    }, db)
+    expect(results.first).toEqual({ rowsAffected: 1, lastInsertId: 1 })
+    expect(results.second).toEqual({ rowsAffected: 1, lastInsertId: 2 })
+    expect(results.update.rowsAffected).toBe(2)
+  })
+
+  it('select returns rows as objects, with bound values and column types', async () => {
+    const rows = await tauri(async (api, db) => {
+      const database = api.sql.get(db)
+      await database.execute(
+        'INSERT INTO e2e (name, score, ratio) VALUES ($1, $2, $3), ($4, $5, $6)',
+        ['alpha', 42, 0.5, 'beta', null, null]
+      )
+      return {
+        all: await database.select<Row[]>('SELECT * FROM e2e ORDER BY id'),
+        filtered: await database.select<Row[]>(
+          'SELECT name FROM e2e WHERE score = $1',
+          [42]
+        ),
+        none: await database.select<Row[]>(
+          'SELECT * FROM e2e WHERE name = $1',
+          ['missing']
+        )
+      }
+    }, db)
+    expect(rows.all).toEqual([
+      { id: 1, name: 'alpha', score: 42, ratio: 0.5 },
+      { id: 2, name: 'beta', score: null, ratio: null }
+    ])
+    expect(rows.filtered).toEqual([{ name: 'alpha' }])
+    expect(rows.none).toEqual([])
+  })
+
+  it('column order follows the query', async () => {
+    const columns = await tauri(async (api, db) => {
+      const database = api.sql.get(db)
+      await database.execute("INSERT INTO e2e (name, score) VALUES ('x', 1)")
+      const [row] = await database.select<Record<string, unknown>[]>(
+        'SELECT score, name, id FROM e2e'
+      )
+      return Object.keys(row)
+    }, db)
+    expect(columns).toEqual(['score', 'name', 'id'])
+  })
+
+  it('invalid statements reject', async () => {
+    const error = await tauriError(
+      (api, db) => api.sql.get(db).execute('INSERT INTO missing VALUES (1)'),
+      db
+    )
+    expect(error).toMatch(/no such table: missing/)
+    const constraint = await tauriError(
+      (api, db) =>
+        api.sql.get(db).execute('INSERT INTO e2e (name) VALUES ($1)', [null]),
+      db
+    )
+    expect(constraint).toMatch(/NOT NULL constraint failed/)
+  })
+
+  it('a database that was never loaded is rejected', async () => {
+    const error = await tauriError((api) =>
+      api.sql.get('sqlite:never-loaded.db').select('SELECT 1')
+    )
+    expect(error).toMatch(/database sqlite:never-loaded\.db not loaded/)
+  })
+
+  it('close shuts the pool down until the database is loaded again', async () => {
+    const result = await tauri(async (api, db) => {
+      const database = api.sql.get(db)
+      await database.execute("INSERT INTO e2e (name) VALUES ('persisted')")
+      const closed = await database.close(db)
+      let error = ''
+      try {
+        await database.select('SELECT * FROM e2e')
+      } catch (e) {
+        error = String(e)
+      }
+      const reloaded = await api.sql.load(db)
+      return {
+        closed,
+        error,
+        rows: await reloaded.select<{ name: string }[]>('SELECT name FROM e2e')
+      }
+    }, db)
+    expect(result.closed).toBe(true)
+    expect(result.error).toMatch(/closed/i)
+    // the data was written to disk, not just to the closed pool
+    expect(result.rows).toEqual([{ name: 'persisted' }])
+  })
+
+  it('closing a database that was never loaded is rejected', async () => {
+    const error = await tauriError((api) =>
+      api.sql.get('sqlite:never-loaded.db').close('sqlite:never-loaded.db')
+    )
+    expect(error).toMatch(/not loaded/)
+  })
+})
diff --git a/packages/api-e2e/test/specs/store.spec.ts b/packages/api-e2e/test/specs/store.spec.ts
new file mode 100644
index 000000000..519a106af
--- /dev/null
+++ b/packages/api-e2e/test/specs/store.spec.ts
@@ -0,0 +1,261 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+import { expect } from '@wdio/globals'
+import { tauri, describePlugin, scratchDir } from '../helpers/index.js'
+
+// Store paths are relative to `$APPDATA`, which is also inside the example's
+// fs scope, so the specs can inspect what the plugin persists.
+const dir = scratchDir('store')
+const storePath = `${dir}/e2e.json`
+
+describePlugin('store', () => {
+  before(async () => {
+    await tauri(async (api, dir) => {
+      const baseDir = api.fs.BaseDirectory.AppData
+      if (await api.fs.exists(dir, { baseDir })) {
+        await api.fs.remove(dir, { baseDir, recursive: true })
+      }
+      await api.fs.mkdir(dir, { baseDir, recursive: true })
+    }, dir)
+  })
+
+  after(async () => {
+    await tauri(async (api, dir) => {
+      const baseDir = api.fs.BaseDirectory.AppData
+      if (await api.fs.exists(dir, { baseDir })) {
+        await api.fs.remove(dir, { baseDir, recursive: true })
+      }
+    }, dir)
+  })
+
+  it('set, get, has, keys, values, entries, length and delete', async () => {
+    const result = await tauri(async (api, path) => {
+      const store = await api.store.load(path, { autoSave: false })
+      await store.set('string', 'value')
+      await store.set('number', 42)
+      await store.set('object', { nested: [1, 2, 3] })
+      const snapshot = {
+        string: await store.get<string>('string'),
+        number: await store.get<number>('number'),
+        object: await store.get<{ nested: number[] }>('object'),
+        // `undefined` is normalized so the result survives serialization
+        missing: (await store.get('missing')) ?? null,
+        hasString: await store.has('string'),
+        hasMissing: await store.has('missing'),
+        keys: (await store.keys()).sort(),
+        values: await store.values(),
+        entries: (await store.entries()).sort(([a], [b]) => a.localeCompare(b)),
+        length: await store.length()
+      }
+      const deleted = await store.delete('number')
+      const deletedAgain = await store.delete('number')
+      const lengthAfterDelete = await store.length()
+      await store.clear()
+      const lengthAfterClear = await store.length()
+      await store.close()
+      return {
+        ...snapshot,
+        deleted,
+        deletedAgain,
+        lengthAfterDelete,
+        lengthAfterClear
+      }
+    }, storePath)
+
+    expect(result.string).toBe('value')
+    expect(result.number).toBe(42)
+    expect(result.object).toEqual({ nested: [1, 2, 3] })
+    expect(result.missing).toBeNull()
+    expect(result.hasString).toBe(true)
+    expect(result.hasMissing).toBe(false)
+    expect(result.keys).toEqual(['number', 'object', 'string'])
+    expect(result.values).toHaveLength(3)
+    expect(result.entries).toEqual([
+      ['number', 42],
+      ['object', { nested: [1, 2, 3] }],
+      ['string', 'value']
+    ])
+    expect(result.length).toBe(3)
+    expect(result.deleted).toBe(true)
+    expect(result.deletedAgain).toBe(false)
+    expect(result.lengthAfterDelete).toBe(2)
+    expect(result.lengthAfterClear).toBe(0)
+  })
+
+  it('save persists to disk and load reads it back', async () => {
+    const result = await tauri(async (api, path) => {
+      const baseDir = api.fs.BaseDirectory.AppData
+      const store = await api.store.load(path, { autoSave: false })
+      await store.set('persisted', { answer: 42 })
+      await store.save()
+      await store.close()
+
+      const onDisk = JSON.parse(
+        await api.fs.readTextFile(path, { baseDir })
+      ) as Record<string, unknown>
+
+      const reloaded = await api.store.load(path, { autoSave: false })
+      const value = await reloaded.get<{ answer: number }>('persisted')
+      await reloaded.close()
+      return { onDisk, value }
+    }, `${dir}/persisted.json`)
+    expect(result.onDisk).toEqual({ persisted: { answer: 42 } })
+    expect(result.value).toEqual({ answer: 42 })
+  })
+
+  it('autoSave writes changes without an explicit save', async () => {
+    const onDisk = await tauri(async (api, path) => {
+      const baseDir = api.fs.BaseDirectory.AppData
+      const store = await api.store.load(path, { autoSave: 50 })
+      await store.set('auto', true)
+      // autoSave is debounced; wait for it to flush
+      const deadline = Date.now() + 10_000
+      while (!(await api.fs.exists(path, { baseDir }))) {
+        if (Date.now() > deadline) {
+          throw new Error('store was never auto-saved')
+        }
+        await new Promise((resolve) => setTimeout(resolve, 100))
+      }
+      const contents = JSON.parse(
+        await api.fs.readTextFile(path, { baseDir })
+      ) as Record<string, unknown>
+      await store.close()
+      return contents
+    }, `${dir}/autosave.json`)
+    expect(onDisk).toEqual({ auto: true })
+  })
+
+  it('defaults apply on load and reset restores them', async () => {
+    const result = await tauri(async (api, path) => {
+      const store = await api.store.load(path, {
+        autoSave: false,
+        defaults: { theme: 'dark', volume: 5 }
+      })
+      const initial = {
+        theme: await store.get('theme'),
+        volume: await store.get('volume')
+      }
+      await store.set('theme', 'light')
+      await store.set('extra', 1)
+      await store.reset()
+      const afterReset = {
+        theme: await store.get('theme'),
+        volume: await store.get('volume'),
+        extra: (await store.get('extra')) ?? null,
+        length: await store.length()
+      }
+      await store.close()
+      return { initial, afterReset }
+    }, `${dir}/defaults.json`)
+    expect(result.initial).toEqual({ theme: 'dark', volume: 5 })
+    expect(result.afterReset).toEqual({
+      theme: 'dark',
+      volume: 5,
+      extra: null,
+      length: 2
+    })
+  })
+
+  it('reload merges the on-disk state, or replaces it with ignoreDefaults', async () => {
+    const result = await tauri(async (api, path) => {
+      const store = await api.store.load(path, { autoSave: false })
+      await store.set('saved', 1)
+      await store.save()
+      await store.set('saved', 2)
+      await store.set('unsaved', true)
+      // a plain reload only re-applies what is on disk on top of the cache
+      await store.reload()
+      const merged = {
+        saved: await store.get('saved'),
+        unsaved: (await store.get('unsaved')) ?? null
+      }
+      // ignoreDefaults makes the store match the disk exactly
+      await store.set('unsaved', true)
+      await store.reload({ ignoreDefaults: true })
+      const replaced = {
+        saved: await store.get('saved'),
+        unsaved: (await store.get('unsaved')) ?? null
+      }
+      await store.close()
+      return { merged, replaced }
+    }, `${dir}/reload.json`)
+    expect(result.merged).toEqual({ saved: 1, unsaved: true })
+    expect(result.replaced).toEqual({ saved: 1, unsaved: null })
+  })
+
+  it('getStore returns the already-loaded instance, or null', async () => {
+    const result = await tauri(async (api, path) => {
+      const before = await api.store.getStore(path)
+      const store = await api.store.load(path, { autoSave: false })
+      await store.set('shared', 'yes')
+      const existing = await api.store.getStore(path)
+      const sharedValue = existing ? await existing.get<string>('shared') : null
+      await store.close()
+      const afterClose = await api.store.getStore(path)
+      return { before, sharedValue, afterClose }
+    }, `${dir}/get-store.json`)
+    expect(result.before).toBeNull()
+    expect(result.sharedValue).toBe('yes')
+    expect(result.afterClose).toBeNull()
+  })
+
+  it('LazyStore initializes on first use and errors after close', async () => {
+    const result = await tauri(async (api, path) => {
+      const store = new api.store.LazyStore(path, { autoSave: false })
+      await store.set('lazy', 'loaded')
+      const value = await store.get<string>('lazy')
+      await store.close()
+      let closedError: string | null = null
+      try {
+        await store.get('lazy')
+      } catch (error) {
+        closedError = String(error)
+      }
+      return { value, closedError }
+    }, `${dir}/lazy.json`)
+    expect(result.value).toBe('loaded')
+    expect(result.closedError).not.toBeNull()
+  })
+
+  it('change listeners fire for set and delete', async () => {
+    const changes = await tauri(async (api, path) => {
+      const store = await api.store.load(path, { autoSave: false })
+      const changes: { key: string; value: unknown }[] = []
+      const unlisten = await store.onChange((key, value) => {
+        // `undefined` does not survive JSON serialization
+        changes.push({ key, value: value === undefined ? null : value })
+      })
+      await store.set('watched', 1)
+      await store.delete('watched')
+      // events are delivered asynchronously
+      await new Promise((resolve) => setTimeout(resolve, 500))
+      unlisten()
+      await store.close()
+      return changes
+    }, `${dir}/on-change.json`)
+    expect(changes).toEqual([
+      { key: 'watched', value: 1 },
+      { key: 'watched', value: null }
+    ])
+  })
+
+  it('onKeyChange only fires for the watched key', async () => {
+    const values = await tauri(async (api, path) => {
+      const store = await api.store.load(path, { autoSave: false })
+      const values: unknown[] = []
+      const unlisten = await store.onKeyChange('watched', (value) => {
+        values.push(value === undefined ? null : value)
+      })
+      await store.set('other', 'ignored')
+      await store.set('watched', 'a')
+      await store.set('watched', 'b')
+      await new Promise((resolve) => setTimeout(resolve, 500))
+      unlisten()
+      await store.close()
+      return values
+    }, `${dir}/on-key-change.json`)
+    expect(values).toEqual(['a', 'b'])
+  })
+})
diff --git a/packages/api-e2e/test/specs/updater.spec.ts b/packages/api-e2e/test/specs/updater.spec.ts
new file mode 100644
index 000000000..49d0a12ad
--- /dev/null
+++ b/packages/api-e2e/test/specs/updater.spec.ts
@@ -0,0 +1,75 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+import { expect } from '@wdio/globals'
+import { tauri, describePlugin } from '../helpers/index.js'
+import {
+  UPDATER_FIXTURE_VERSION,
+  UPDATER_FIXTURE_NOTES,
+  UPDATER_TARGET_NO_UPDATE,
+  UPDATER_TARGET_OLDER
+} from '../helpers/server.js'
+
+// The e2e build points the updater endpoint at the fixture server (see
+// `tauri.e2e.conf.json`), which answers based on the `{{target}}` placeholder.
+// Only `check` is exercised: installing would replace the binary under test.
+// The plugin is desktop-only, so the whole suite is skipped on mobile (the
+// mobile builds are not built with the override config either).
+
+describePlugin('updater', { desktopOnly: true }, () => {
+  it('check finds a newer release on the endpoint', async () => {
+    const update = await tauri(async (api) => {
+      const update = await api.updater.check()
+      if (!update) return null
+      const info = {
+        currentVersion: update.currentVersion,
+        version: update.version,
+        body: update.body,
+        date: update.date,
+        rawVersion: (update.rawJson as { version?: string }).version
+      }
+      await update.close()
+      return info
+    })
+    expect(update).not.toBeNull()
+    expect(update!.currentVersion).toBe('2.0.0')
+    expect(update!.version).toBe(UPDATER_FIXTURE_VERSION)
+    expect(update!.body).toBe(UPDATER_FIXTURE_NOTES)
+    expect(update!.date).toContain('2026-03-01')
+    expect(update!.rawVersion).toBe(UPDATER_FIXTURE_VERSION)
+  })
+
+  it('check resolves null when the endpoint has no update (204)', async () => {
+    const update = await tauri(
+      (api, target) => api.updater.check({ target }),
+      UPDATER_TARGET_NO_UPDATE
+    )
+    expect(update).toBeNull()
+  })
+
+  it('check ignores a release older than the current version', async () => {
+    // Downgrades are a build-time decision (the plugin's `allowDowngrades`
+    // config), not something `check` can be asked for, so the older manifest
+    // can only be checked for the update being ignored.
+    const update = await tauri(
+      (api, target) => api.updater.check({ target }),
+      UPDATER_TARGET_OLDER
+    )
+    expect(update).toBeNull()
+  })
+
+  it('check forwards custom headers and honors the timeout option', async () => {
+    // a successful check with extra headers and a generous timeout
+    const version = await tauri(async (api) => {
+      const update = await api.updater.check({
+        headers: { 'x-e2e-updater': 'yes' },
+        timeout: 30_000
+      })
+      const version = update?.version ?? null
+      await update?.close()
+      return version
+    })
+    expect(version).toBe(UPDATER_FIXTURE_VERSION)
+  })
+})
diff --git a/packages/api-e2e/test/specs/upload.spec.ts b/packages/api-e2e/test/specs/upload.spec.ts
new file mode 100644
index 000000000..9a17fa598
--- /dev/null
+++ b/packages/api-e2e/test/specs/upload.spec.ts
@@ -0,0 +1,163 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+import { expect } from '@wdio/globals'
+import {
+  tauri,
+  tauriError,
+  describePlugin,
+  scratchDir
+} from '../helpers/index.js'
+import { FIXTURE_SERVER_URL, DOWNLOAD_FIXTURE_BODY } from '../helpers/server.js'
+
+// The plugin only takes absolute paths; these are resolved against `$APPDATA`
+// inside the page, which is inside the example's fs scope so the specs can
+// prepare and inspect the files.
+const dir = scratchDir('upload')
+
+interface Progress {
+  progress: number
+  progressTotal: number
+  total: number
+  transferSpeed: number
+}
+
+describePlugin('upload', () => {
+  before(async () => {
+    await tauri(async (api, dir) => {
+      const baseDir = api.fs.BaseDirectory.AppData
+      if (await api.fs.exists(dir, { baseDir })) {
+        await api.fs.remove(dir, { baseDir, recursive: true })
+      }
+      await api.fs.mkdir(dir, { baseDir, recursive: true })
+    }, dir)
+  })
+
+  after(async () => {
+    await tauri(async (api, dir) => {
+      const baseDir = api.fs.BaseDirectory.AppData
+      if (await api.fs.exists(dir, { baseDir })) {
+        await api.fs.remove(dir, { baseDir, recursive: true })
+      }
+    }, dir)
+  })
+
+  it('download writes the response to disk and reports progress', async () => {
+    const result = await tauri(
+      async (api, url, relativePath) => {
+        const baseDir = api.fs.BaseDirectory.AppData
+        const path = await api.path.join(
+          await api.path.appDataDir(),
+          relativePath
+        )
+        const events: Progress[] = []
+        await api.upload.download(
+          url,
+          path,
+          (progress) => events.push(progress),
+          { headers: new Map([['x-e2e-download', 'yes']]) }
+        )
+        return {
+          contents: await api.fs.readTextFile(relativePath, { baseDir }),
+          events
+        }
+      },
+      `${FIXTURE_SERVER_URL}/download`,
+      `${dir}/downloaded.txt`
+    )
+    expect(result.contents).toBe(DOWNLOAD_FIXTURE_BODY)
+    expect(result.events.length).toBeGreaterThan(0)
+    const last = result.events[result.events.length - 1]
+    const expectedSize = Buffer.byteLength(DOWNLOAD_FIXTURE_BODY)
+    // the fixture server sends a Content-Length, so the total is known
+    expect(last.total).toBe(expectedSize)
+    expect(last.progressTotal).toBe(expectedSize)
+    expect(result.events.reduce((sum, event) => sum + event.progress, 0)).toBe(
+      expectedSize
+    )
+  })
+
+  it('download rejects on a non-success status', async () => {
+    const message = await tauriError(
+      async (api, url, relativePath) =>
+        api.upload.download(
+          url,
+          await api.path.join(await api.path.appDataDir(), relativePath)
+        ),
+      `${FIXTURE_SERVER_URL}/does-not-exist`,
+      `${dir}/missing.txt`
+    )
+    expect(message).toMatch(/404/)
+  })
+
+  it('upload streams a file with the requested method and headers', async () => {
+    const contents = 'upload me\n'.repeat(1000)
+    const result = await tauri(
+      async (api, url, relativePath, contents) => {
+        const baseDir = api.fs.BaseDirectory.AppData
+        await api.fs.writeTextFile(relativePath, contents, { baseDir })
+        const path = await api.path.join(
+          await api.path.appDataDir(),
+          relativePath
+        )
+        const events: Progress[] = []
+        const response = await api.upload.upload(
+          url,
+          path,
+          (progress) => events.push(progress),
+          {
+            headers: new Map([['x-e2e-upload', 'yes']]),
+            method: api.upload.HttpMethod.Put
+          }
+        )
+        return { response: JSON.parse(response) as unknown, events }
+      },
+      `${FIXTURE_SERVER_URL}/echo`,
+      `${dir}/to-upload.txt`,
+      contents
+    )
+    const echoed = result.response as {
+      method: string
+      headers: Record<string, string>
+      body: string
+    }
+    expect(echoed.method).toBe('PUT')
+    expect(echoed.headers['x-e2e-upload']).toBe('yes')
+    expect(echoed.body).toBe(contents)
+    const size = Buffer.byteLength(contents)
+    expect(result.events.length).toBeGreaterThan(0)
+    expect(result.events[result.events.length - 1].total).toBe(size)
+    expect(result.events[result.events.length - 1].progressTotal).toBe(size)
+  })
+
+  it('upload defaults to POST', async () => {
+    const method = await tauri(
+      async (api, url, relativePath) => {
+        const baseDir = api.fs.BaseDirectory.AppData
+        await api.fs.writeTextFile(relativePath, 'post me', { baseDir })
+        const response = await api.upload.upload(
+          url,
+          await api.path.join(await api.path.appDataDir(), relativePath)
+        )
+        return (JSON.parse(response) as { method: string }).method
+      },
+      `${FIXTURE_SERVER_URL}/echo`,
+      `${dir}/to-post.txt`
+    )
+    expect(method).toBe('POST')
+  })
+
+  it('upload rejects when the file does not exist', async () => {
+    const message = await tauriError(
+      async (api, url, relativePath) =>
+        api.upload.upload(
+          url,
+          await api.path.join(await api.path.appDataDir(), relativePath)
+        ),
+      `${FIXTURE_SERVER_URL}/echo`,
+      `${dir}/does-not-exist.txt`
+    )
+    expect(message).toMatch(/os error 2/)
+  })
+})
diff --git a/packages/api-e2e/test/specs/websocket.spec.ts b/packages/api-e2e/test/specs/websocket.spec.ts
new file mode 100644
index 000000000..474ad4ee0
--- /dev/null
+++ b/packages/api-e2e/test/specs/websocket.spec.ts
@@ -0,0 +1,192 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+import { expect } from '@wdio/globals'
+import { tauri, tauriError, describePlugin } from '../helpers/index.js'
+import {
+  WEBSOCKET_FIXTURE_URL,
+  WEBSOCKET_CLOSE_REQUEST,
+  WEBSOCKET_CLOSE_CODE,
+  WEBSOCKET_CLOSE_REASON
+} from '../helpers/server.js'
+
+// Every test talks to the fixture server's `/ws` echo endpoint (through
+// `adb reverse` on Android). Messages reach the page through the plugin's
+// channel, so each page function collects them until it has what it expects,
+// with its own timeout so a missing message fails with a readable error.
+
+interface Message {
+  type: string
+  data: unknown
+}
+
+describePlugin('websocket', () => {
+  it('echoes text and binary messages', async () => {
+    const messages = await tauri(async (api, url) => {
+      const ws = await api.websocket.connect(url)
+      const received: Message[] = []
+      // a copy taken once the echoes are in: the close acknowledgement that
+      // `disconnect` triggers may arrive before this function returns
+      const echoes = await new Promise<Message[]>((resolve, reject) => {
+        setTimeout(() => reject(new Error('echo not received')), 5000)
+        ws.addListener((message) => {
+          received.push(message)
+          if (received.length === 3) resolve(received.slice())
+        })
+        ws.send('hello')
+          .then(() => ws.send([1, 2, 3]))
+          .then(() => ws.send({ type: 'Text', data: 'explicit' }))
+          .catch(reject)
+      })
+      await ws.disconnect()
+      return echoes
+    }, WEBSOCKET_FIXTURE_URL)
+    expect(messages).toEqual([
+      { type: 'Text', data: 'hello' },
+      { type: 'Binary', data: [1, 2, 3] },
+      { type: 'Text', data: 'explicit' }
+    ])
+  })
+
+  it('a ping is answered with a pong carrying its payload', async () => {
+    const message = await tauri(async (api, url) => {
+      const ws = await api.websocket.connect(url)
+      const pong = await new Promise<Message>((resolve, reject) => {
+        setTimeout(() => reject(new Error('pong not received')), 5000)
+        ws.addListener((message) => {
+          if (message.type === 'Pong') resolve(message)
+        })
+        ws.send({ type: 'Ping', data: [7, 8, 9] }).catch(reject)
+      })
+      await ws.disconnect()
+      return pong
+    }, WEBSOCKET_FIXTURE_URL)
+    expect(message).toEqual({ type: 'Pong', data: [7, 8, 9] })
+  })
+
+  it('sends the configured headers with the upgrade request', async () => {
+    const headers = await tauri(async (api, url) => {
+      const ws = await api.websocket.connect(url, {
+        headers: { 'x-e2e-header': 'from the plugin' }
+      })
+      const message = await new Promise<Message>((resolve, reject) => {
+        setTimeout(() => reject(new Error('headers not received')), 5000)
+        ws.addListener(resolve)
+        ws.send('headers').catch(reject)
+      })
+      await ws.disconnect()
+      return JSON.parse(message.data as string) as Record<string, string>
+    }, `${WEBSOCKET_FIXTURE_URL}/headers`)
+    expect(headers['x-e2e-header']).toBe('from the plugin')
+  })
+
+  it('a listener stops receiving once removed', async () => {
+    const counts = await tauri(async (api, url) => {
+      const ws = await api.websocket.connect(url)
+      let removed = 0
+      let kept = 0
+      const remove = ws.addListener(() => removed++)
+      // counted once both echoes are in, before `disconnect`'s close
+      // acknowledgement can reach the listener still attached
+      const counts = await new Promise<{ removed: number; kept: number }>(
+        (resolve, reject) => {
+          setTimeout(() => reject(new Error('echoes not received')), 5000)
+          ws.addListener(() => {
+            kept++
+            if (kept === 1) {
+              remove()
+              ws.send('second').catch(reject)
+            } else {
+              resolve({ removed, kept })
+            }
+          })
+          ws.send('first').catch(reject)
+        }
+      )
+      await ws.disconnect()
+      return counts
+    }, WEBSOCKET_FIXTURE_URL)
+    expect(counts).toEqual({ removed: 1, kept: 2 })
+  })
+
+  it('a close from the server is delivered and ends the connection', async () => {
+    const result = await tauri(
+      async (api, url, closeRequest) => {
+        const ws = await api.websocket.connect(url)
+        const close = await new Promise<Message>((resolve, reject) => {
+          setTimeout(() => reject(new Error('close not received')), 5000)
+          ws.addListener((message) => {
+            if (message.type === 'Close') resolve(message)
+          })
+          ws.send(closeRequest).catch(reject)
+        })
+        let sendError = ''
+        try {
+          await ws.send('after close')
+        } catch (error) {
+          sendError = String(error)
+        }
+        return { close, sendError }
+      },
+      WEBSOCKET_FIXTURE_URL,
+      WEBSOCKET_CLOSE_REQUEST
+    )
+    expect(result.close).toEqual({
+      type: 'Close',
+      data: { code: WEBSOCKET_CLOSE_CODE, reason: WEBSOCKET_CLOSE_REASON }
+    })
+    expect(result.sendError).toMatch(/connection not found/)
+  })
+
+  it('disconnect sends a normal close frame', async () => {
+    const close = await tauri(async (api, url) => {
+      const ws = await api.websocket.connect(url)
+      // the server acknowledges the close with the same frame
+      return await new Promise<Message>((resolve, reject) => {
+        setTimeout(() => reject(new Error('close not received')), 5000)
+        ws.addListener((message) => {
+          if (message.type === 'Close') resolve(message)
+        })
+        ws.disconnect().catch(reject)
+      })
+    }, WEBSOCKET_FIXTURE_URL)
+    expect(close).toEqual({
+      type: 'Close',
+      data: { code: 1000, reason: 'Disconnected by client' }
+    })
+  })
+
+  it('connecting to a closed port is rejected', async () => {
+    // port 1 (tcpmux) is never listening on the loopback interface
+    const error = await tauriError((api) =>
+      api.websocket.connect('ws://127.0.0.1:1/')
+    )
+    expect(error).toMatch(/refused|connect/i)
+  })
+
+  it('invalid URLs and header names are rejected', async () => {
+    const url = await tauriError((api) => api.websocket.connect('not a url'))
+    expect(url).toMatch(/invalid uri/i)
+    const header = await tauriError(
+      (api, url) =>
+        api.websocket.connect(url, { headers: [['bad header', 'value']] }),
+      WEBSOCKET_FIXTURE_URL
+    )
+    // Chromium (Android) already rejects the name in the `Headers` constructor;
+    // WebKit passes it through and the plugin rejects it
+    expect(header).toMatch(/invalid (header )?name/i)
+  })
+
+  it('sending an unsupported message type throws', async () => {
+    const error = await tauriError(async (api, url) => {
+      const ws = await api.websocket.connect(url)
+      try {
+        await ws.send(42 as unknown as string)
+      } finally {
+        await ws.disconnect()
+      }
+    }, WEBSOCKET_FIXTURE_URL)
+    expect(error).toMatch(/invalid `message` type/)
+  })
+})
diff --git a/packages/api-e2e/test/specs/window-state.spec.ts b/packages/api-e2e/test/specs/window-state.spec.ts
new file mode 100644
index 000000000..f46d05576
--- /dev/null
+++ b/packages/api-e2e/test/specs/window-state.spec.ts
@@ -0,0 +1,130 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+import { expect } from '@wdio/globals'
+import { tauri, eventually, describePlugin, itWm } from '../helpers/index.js'
+
+// The plugin is desktop-only: a mobile window is the whole screen and has no
+// state to persist, so the whole suite is skipped there.
+describePlugin('window-state', { desktopOnly: true }, () => {
+  it('filename reports the state file name', async () => {
+    expect(await tauri((api) => api.windowState.filename())).toBe(
+      '.window-state.json'
+    )
+  })
+
+  it('saveWindowState and restoreState resolve', async () => {
+    await tauri(async (api) => {
+      await api.windowState.saveWindowState(api.windowState.StateFlags.ALL)
+      await api.windowState.restoreState('main', api.windowState.StateFlags.ALL)
+      await api.windowState.restoreStateCurrent()
+      return null
+    })
+  })
+
+  it('StateFlags combine as a bit set', async () => {
+    const flags = await tauri((api) => api.windowState.StateFlags)
+    expect(flags.ALL).toBe(
+      flags.SIZE
+        | flags.POSITION
+        | flags.MAXIMIZED
+        | flags.VISIBLE
+        | flags.DECORATIONS
+        | flags.FULLSCREEN
+    )
+  })
+
+  itWm(
+    'a new window is restored to the size it was last saved with',
+    async () => {
+      // The plugin applies the cached state of a label whenever a window with
+      // that label is created, which is what persists sizes across sessions.
+      const label = 'e2e-window-state'
+      const scale = await tauri((api) =>
+        api.window.getCurrentWindow().scaleFactor()
+      )
+
+      const create = (width: number, height: number) =>
+        tauri(
+          (api, label, width, height) =>
+            new Promise<void>((resolve, reject) => {
+              const window = new api.webviewWindow.WebviewWindow(label, {
+                width,
+                height
+              })
+              window.once('tauri://created', () => resolve()).catch(reject)
+              window
+                .once('tauri://error', (event) =>
+                  reject(
+                    new Error(
+                      `window creation failed: ${String(event.payload)}`
+                    )
+                  )
+                )
+                .catch(reject)
+              setTimeout(
+                () => reject(new Error('window creation timed out')),
+                8000
+              )
+            }),
+          label,
+          width,
+          height
+        )
+      const innerSize = () =>
+        tauri(async (api, label) => {
+          const window = await api.webviewWindow.WebviewWindow.getByLabel(label)
+          if (!window) throw new Error(`window ${label} not found`)
+          const size = await window.innerSize()
+          return { width: size.width, height: size.height }
+        }, label)
+      const close = async () => {
+        await tauri(async (api, label) => {
+          const window = await api.webviewWindow.WebviewWindow.getByLabel(label)
+          await window?.close()
+          return null
+        }, label)
+        await eventually(async () => {
+          const labels = await tauri(async (api) =>
+            (await api.webviewWindow.getAllWebviewWindows()).map((w) => w.label)
+          )
+          if (labels.includes(label)) {
+            throw new Error('window is still present after close')
+          }
+        })
+      }
+      const expectSize = (width: number, height: number) =>
+        eventually(async () => {
+          const size = await innerSize()
+          const tolerance = Math.ceil(scale) * 8
+          if (
+            Math.abs(size.width - width) > tolerance
+            || Math.abs(size.height - height) > tolerance
+          ) {
+            throw new Error(
+              `size ${size.width}x${size.height} not near ${width}x${height}`
+            )
+          }
+        })
+
+      // create the window at one size and save that state
+      await create(500, 400)
+      await expectSize(500 * scale, 400 * scale)
+      const saved = await innerSize()
+      await tauri((api) =>
+        api.windowState.saveWindowState(api.windowState.StateFlags.SIZE)
+      )
+      await close()
+
+      // a new window with the same label asks for another size, and gets the
+      // saved one back
+      await create(700, 600)
+      try {
+        await expectSize(saved.width, saved.height)
+      } finally {
+        await close()
+      }
+    }
+  )
+})
diff --git a/packages/api-e2e/test/types/global.d.ts b/packages/api-e2e/test/types/global.d.ts
new file mode 100644
index 000000000..8be93acaa
--- /dev/null
+++ b/packages/api-e2e/test/types/global.d.ts
@@ -0,0 +1,18 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+// The examples/api app is built with `withGlobalTauri: true`, so the whole
+// `@tauri-apps/api` surface, plus every plugin's API (registered by its
+// `api-iife.js`), is available on `window.__TAURI__` inside the webview.
+// This mirrors that for the functions we serialize and run in the page.
+
+import type { Api } from '../helpers/index.js'
+
+declare global {
+  interface Window {
+    __TAURI__: Api
+  }
+}
+
+export {}
diff --git a/packages/api-e2e/tsconfig.json b/packages/api-e2e/tsconfig.json
new file mode 100644
index 000000000..dd173ff1d
--- /dev/null
+++ b/packages/api-e2e/tsconfig.json
@@ -0,0 +1,20 @@
+{
+  "compilerOptions": {
+    "target": "ES2023",
+    "module": "ESNext",
+    // The specs run through tsx (esbuild, pulled in by @wdio/cli), and the
+    // plugins' published type definitions use extensionless relative imports,
+    // so bundler-style resolution is what matches the runtime and resolves
+    // the plugin types.
+    "moduleResolution": "Bundler",
+    "lib": ["ES2023", "DOM", "DOM.AsyncIterable"],
+    "types": ["node", "@wdio/globals/types", "@wdio/mocha-framework"],
+    "strict": true,
+    "skipLibCheck": true,
+    "noEmit": true,
+    "esModuleInterop": true,
+    "resolveJsonModule": true,
+    "forceConsistentCasingInFileNames": true
+  },
+  "include": ["wdio.*.ts", "test/**/*.ts"]
+}
diff --git a/packages/api-e2e/wdio.android.conf.ts b/packages/api-e2e/wdio.android.conf.ts
new file mode 100644
index 000000000..09d1e3bec
--- /dev/null
+++ b/packages/api-e2e/wdio.android.conf.ts
@@ -0,0 +1,10 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+// Plugins e2e suite against the examples/api app on an Android device or
+// emulator, through Appium's UiAutomator2 driver. See wdio.mobile.ts.
+
+import { mobileConfig } from './wdio.mobile.js'
+
+export const config = mobileConfig('android')
diff --git a/packages/api-e2e/wdio.conf.ts b/packages/api-e2e/wdio.conf.ts
new file mode 100644
index 000000000..29de10ea1
--- /dev/null
+++ b/packages/api-e2e/wdio.conf.ts
@@ -0,0 +1,306 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+import path from 'node:path'
+import fs from 'node:fs'
+import { spawn, spawnSync, type ChildProcess } from 'node:child_process'
+import { fileURLToPath } from 'node:url'
+import { waitTauriDriverReady } from '@crabnebula/tauri-driver'
+import {
+  startFixtureServer,
+  type FixtureServer
+} from './test/helpers/server.js'
+
+const dirname = path.dirname(fileURLToPath(import.meta.url))
+const repoRoot = path.resolve(dirname, '..', '..')
+const appDir = path.join(repoRoot, 'examples', 'api')
+const targetDir = process.env.CARGO_TARGET_DIR ?? path.join(repoRoot, 'target')
+
+// macOS has no native WebDriver for WKWebView, so the CrabNebula Webdriver
+// (backed by tauri-plugin-automation + the test-runner-backend) is required there.
+// It can be opted into on the other platforms via E2E_CN_WEBDRIVER for parity.
+const useCrabNebulaWebdriver =
+  process.platform === 'darwin' || !!process.env.E2E_CN_WEBDRIVER
+
+// Path passed to the driver as `tauri:options.application`.
+const application =
+  process.env.E2E_APP_PATH
+  ?? (process.platform === 'darwin'
+    ? path.join(targetDir, 'debug', 'bundle', 'macos', 'Tauri API.app')
+    : process.platform === 'win32'
+      ? path.join(targetDir, 'debug', 'api.exe')
+      : path.join(targetDir, 'debug', 'api'))
+
+let tauriDriver: ChildProcess | undefined
+let killedTauriDriver = false
+let testRunnerBackend: ChildProcess | undefined
+let killedTestRunnerBackend = false
+let fixtureServer: FixtureServer | undefined
+
+export const config: WebdriverIO.Config = {
+  hostname: '127.0.0.1',
+  port: 4444,
+  specs: ['./test/specs/**/*.spec.ts'],
+  // The driver spawns a single app instance and speaks WebDriver to it, so the
+  // suite must run serially.
+  maxInstances: 1,
+  capabilities: [
+    {
+      maxInstances: 1,
+      // `tauri:options` is understood by tauri-driver, not by the WebdriverIO types.
+      'tauri:options': { application }
+    } as unknown as WebdriverIO.Capabilities
+  ],
+  reporters: ['spec'],
+  framework: 'mocha',
+  mochaOpts: {
+    ui: 'bdd',
+    timeout: 120000
+  },
+  connectionRetryCount: 0,
+  specFileRetries: Number(process.env.E2E_SPEC_RETRIES ?? 0),
+
+  onPrepare: async () => {
+    // The example (and the specs' type-checking) resolve the plugins' JS
+    // packages from their `dist-js` build output. Fail early with a clear
+    // message instead of a confusing vite/tsc error.
+    if (
+      !fs.existsSync(
+        path.join(repoRoot, 'plugins', 'fs', 'dist-js', 'index.js')
+      )
+    ) {
+      throw new Error(
+        'the plugins are not built — run `pnpm build` at the repo root before the e2e suite.'
+      )
+    }
+
+    if (!process.env.E2E_SKIP_BUILD && !process.env.E2E_APP_PATH) {
+      // The override config enables the example's off-by-default `automation`
+      // feature (which registers tauri-plugin-automation) and points the updater
+      // at the fixture server, for this (debug, test-only) build.
+      // Passed as an appDir-relative path to sidestep shell quoting.
+      const overrideConfig = path.relative(
+        appDir,
+        path.join(dirname, 'tauri.e2e.conf.json')
+      )
+      const buildArgs = [
+        'tauri',
+        'build',
+        '--debug',
+        '--config',
+        overrideConfig,
+        ...(process.platform === 'darwin'
+          ? ['--bundles', 'app'] // the .app bundle is needed for tauri:options
+          : ['--no-bundle'])
+      ]
+      const build = spawnSync('pnpm', buildArgs, {
+        cwd: appDir,
+        stdio: 'inherit',
+        shell: true
+      })
+      if (build.status !== 0) {
+        throw new Error(
+          `\`pnpm ${buildArgs.join(' ')}\` failed with status ${build.status}`
+        )
+      }
+    }
+
+    // eslint-disable-next-line security/detect-non-literal-fs-filename
+    if (!fs.existsSync(application)) {
+      throw new Error(
+        `app not found at ${application} — build it (unset E2E_SKIP_BUILD) or point E2E_APP_PATH at an existing build.`
+      )
+    }
+
+    // Serves the updater manifest and the upload/download fixtures the
+    // network-facing specs hit. Lives in the launcher process so it outlives
+    // the per-spec worker processes.
+    fixtureServer = await startFixtureServer()
+
+    if (useCrabNebulaWebdriver) {
+      if (!process.env.CN_API_KEY) {
+        throw new Error(
+          'CN_API_KEY is required for the CrabNebula Webdriver (mandatory on macOS, or when E2E_CN_WEBDRIVER=1).'
+        )
+      }
+      testRunnerBackend = spawn('pnpm', ['exec', 'test-runner-backend'], {
+        cwd: dirname,
+        stdio: 'inherit',
+        shell: true,
+        // Lead a new process group so the whole tree (sh -> pnpm ->
+        // test-runner-backend) can be torn down together. See killProcessTree.
+        detached: process.platform !== 'win32'
+      })
+      testRunnerBackend.on('error', (error) => {
+        console.error('test-runner-backend error:', error)
+        process.exit(1)
+      })
+      testRunnerBackend.on('exit', (code) => {
+        if (!killedTestRunnerBackend) {
+          console.error('test-runner-backend exited with code:', code)
+          process.exit(1)
+        }
+      })
+      const { waitTestRunnerBackendReady } =
+        await import('@crabnebula/test-runner-backend')
+      await waitTestRunnerBackendReady()
+      process.env.REMOTE_WEBDRIVER_URL = 'http://127.0.0.1:3000'
+    }
+  },
+
+  // A fresh tauri-driver (and therefore a fresh app instance) per spec file,
+  // so each plugin's suite runs in isolation.
+  beforeSession: async () => {
+    const args = ['exec', 'tauri-driver']
+    if (process.env.E2E_NATIVE_DRIVER) {
+      args.push('--native-driver', process.env.E2E_NATIVE_DRIVER)
+    }
+    // Reset before each (re)spawn so the `exit` handler below still treats an
+    // unexpected driver crash as fatal on retried spec files.
+    killedTauriDriver = false
+    tauriDriver = spawn('pnpm', args, {
+      cwd: dirname,
+      stdio: [null, process.stdout, process.stderr],
+      shell: true,
+      // Lead a new process group so the whole tree (sh -> pnpm -> tauri-driver
+      // -> native webdriver) can be torn down together. See killProcessTree.
+      detached: process.platform !== 'win32'
+    })
+    tauriDriver.on('error', (error) => {
+      console.error('tauri-driver error:', error)
+      process.exit(1)
+    })
+    tauriDriver.on('exit', (code) => {
+      if (!killedTauriDriver) {
+        console.error('tauri-driver exited with code:', code)
+        process.exit(1)
+      }
+    })
+    await waitTauriDriverReady()
+  },
+
+  // The session is created as soon as the app's window exists, which can be
+  // before the webview has navigated to the app's page: WebView2 on a cold start
+  // (the first launches on a fresh Windows runner) still shows `about:blank`
+  // for a few seconds, so the first spec's scripts ran in a page without
+  // `window.__TAURI__`. Every spec goes through that global, so block until
+  // it exists.
+  before: async (_capabilities, _specs, browser: WebdriverIO.Browser) => {
+    await browser.waitUntil(
+      async () => {
+        try {
+          const ready: unknown = await browser.executeAsync(
+            'var done = arguments[arguments.length - 1]; done(typeof window.__TAURI__ !== "undefined");'
+          )
+          return ready === true
+        } catch {
+          // A command issued mid-navigation can fail on a stale execution
+          // context; that just means "not ready yet".
+          return false
+        }
+      },
+      {
+        timeout: 30_000,
+        interval: 250,
+        timeoutMsg:
+          'window.__TAURI__ never became available — the app did not load its page.'
+      }
+    )
+  },
+
+  // Awaited so the driver (and its port) is fully gone before the next spec's
+  // beforeSession spawns a new one on the same port.
+  afterSession: async () => {
+    await closeTauriDriver()
+  },
+
+  onComplete: () => {
+    closeAll()
+  }
+}
+
+/**
+ * Kills a shell-spawned child and everything it started. `child.kill()` only
+ * signals the `sh`/`cmd` wrapper, orphaning the real process (which keeps
+ * holding the WebDriver port and poisons every later spec), so we take down the
+ * whole process group/tree instead.
+ */
+function killProcessTree(
+  child: ChildProcess | undefined,
+  signal: NodeJS.Signals = 'SIGTERM'
+): void {
+  const pid = child?.pid
+  if (!pid || child?.exitCode !== null) return
+  if (process.platform === 'win32') {
+    spawnSync('taskkill', ['/pid', String(pid), '/T', '/F'], {
+      stdio: 'ignore'
+    })
+  } else {
+    try {
+      // Negative pid targets the whole process group (see `detached` above).
+      process.kill(-pid, signal)
+    } catch {
+      try {
+        child.kill(signal)
+      } catch {
+        // already gone
+      }
+    }
+  }
+}
+
+async function closeTauriDriver(): Promise<void> {
+  killedTauriDriver = true
+  const driver = tauriDriver
+  tauriDriver = undefined
+  if (!driver || driver.exitCode !== null) return
+  const exited = new Promise<void>((resolve) =>
+    driver.once('exit', () => resolve())
+  )
+  killProcessTree(driver)
+  // Give it a moment to release the port, then escalate to SIGKILL.
+  let timer: ReturnType<typeof setTimeout> | undefined
+  await Promise.race([
+    exited,
+    new Promise<void>((resolve) => {
+      timer = setTimeout(() => {
+        killProcessTree(driver, 'SIGKILL')
+        resolve()
+      }, 5000)
+    })
+  ])
+  if (timer) clearTimeout(timer)
+}
+
+function closeAll() {
+  killedTauriDriver = true
+  killProcessTree(tauriDriver)
+  tauriDriver = undefined
+  killedTestRunnerBackend = true
+  killProcessTree(testRunnerBackend)
+  testRunnerBackend = undefined
+  fixtureServer?.close()
+  fixtureServer = undefined
+}
+
+function onShutdown(fn: () => void) {
+  const cleanup = () => {
+    try {
+      fn()
+    } finally {
+      process.exit()
+    }
+  }
+  for (const signal of [
+    'exit',
+    'SIGINT',
+    'SIGTERM',
+    'SIGHUP',
+    'SIGBREAK'
+  ] as const) {
+    process.on(signal, cleanup)
+  }
+}
+
+onShutdown(closeAll)
diff --git a/packages/api-e2e/wdio.ios.conf.ts b/packages/api-e2e/wdio.ios.conf.ts
new file mode 100644
index 000000000..7a352f273
--- /dev/null
+++ b/packages/api-e2e/wdio.ios.conf.ts
@@ -0,0 +1,10 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+// Plugins e2e suite against the examples/api app on an iOS simulator, through
+// Appium's XCUITest driver. See wdio.mobile.ts.
+
+import { mobileConfig } from './wdio.mobile.js'
+
+export const config = mobileConfig('ios')
diff --git a/packages/api-e2e/wdio.mobile.ts b/packages/api-e2e/wdio.mobile.ts
new file mode 100644
index 000000000..4622ccfa6
--- /dev/null
+++ b/packages/api-e2e/wdio.mobile.ts
@@ -0,0 +1,504 @@
+// Copyright 2019-2023 Tauri Programme within The Commons Conservancy
+// SPDX-License-Identifier: Apache-2.0
+// SPDX-License-Identifier: MIT
+
+// Shared WebdriverIO configuration for the mobile suites (`wdio.android.conf.ts`
+// and `wdio.ios.conf.ts`). Instead of tauri-driver, the example app is driven
+// through Appium: the UiAutomator2 driver (Android; chromedriver attaches to the
+// WebView) or the XCUITest driver (iOS simulator; WebKit remote inspector).
+// Debug builds enable webview debugging on both platforms, which is what makes
+// the `WEBVIEW_*` context — and `browser.executeAsync` inside it — available.
+
+import path from 'node:path'
+import fs from 'node:fs'
+import { spawnSync, type SpawnSyncReturns } from 'node:child_process'
+import { fileURLToPath } from 'node:url'
+import {
+  startFixtureServer,
+  FIXTURE_SERVER_PORT,
+  type FixtureServer
+} from './test/helpers/server.js'
+
+export type MobilePlatform = 'android' | 'ios'
+
+const dirname = path.dirname(fileURLToPath(import.meta.url))
+const repoRoot = path.resolve(dirname, '..', '..')
+const appDir = path.join(repoRoot, 'examples', 'api')
+const tauriDir = path.join(appDir, 'src-tauri')
+
+/** `identifier` in examples/api's tauri.conf.json. */
+const appId = 'com.tauri.api'
+
+/** Where Appium looks for drivers; they are devDependencies of this package. */
+process.env.APPIUM_HOME ??= dirname
+
+let fixtureServer: FixtureServer | undefined
+
+export function mobileConfig(platform: MobilePlatform): WebdriverIO.Config {
+  const ios = platform === 'ios' ? iosTarget() : undefined
+
+  // Path passed to the driver as `appium:app`.
+  const application =
+    process.env.E2E_APP_PATH
+    ?? (ios
+      ? path.join(
+          tauriDir,
+          'gen',
+          'apple',
+          'build',
+          ios.outputArch,
+          'Tauri API.app'
+        )
+      : path.join(
+          tauriDir,
+          'gen',
+          'android',
+          'app',
+          'build',
+          'outputs',
+          'apk',
+          'universal',
+          'debug',
+          'app-universal-debug.apk'
+        ))
+
+  return {
+    specs: ['./test/specs/**/*.spec.ts'],
+    // One device/simulator, one app instance: the suite runs serially.
+    maxInstances: 1,
+    capabilities: [
+      platform === 'android'
+        ? androidCapabilities(application)
+        : iosCapabilities(application)
+    ],
+    services: [
+      [
+        'appium',
+        {
+          args: {
+            address: '127.0.0.1',
+            // Appium 3 requires insecure features to be scoped to a driver.
+            // chromedriver_autodownload lets the UiAutomator2 driver fetch a
+            // chromedriver matching the device's WebView (see E2E_CHROMEDRIVER).
+            allowInsecure: 'uiautomator2:chromedriver_autodownload'
+          },
+          // First-session setup (chromedriver download, WebDriverAgent build)
+          // can be slow, hence the generous timeout.
+          appiumStartTimeout: 120_000,
+          logPath: path.join(dirname, 'logs')
+        }
+      ]
+    ],
+    reporters: ['spec'],
+    framework: 'mocha',
+    mochaOpts: {
+      ui: 'bdd',
+      timeout: 120000
+    },
+    connectionRetryCount: 0,
+    // The first session boots the simulator/emulator, installs the app and, on
+    // iOS, compiles WebDriverAgent — well over the 120s default that the
+    // request to create the session would otherwise be cut at (the driver
+    // timeouts in the capabilities below are what actually bound it).
+    connectionRetryTimeout: 600_000,
+    specFileRetries: Number(process.env.E2E_SPEC_RETRIES ?? 0),
+    // Tells the specs (which run in worker processes) what the app runs on;
+    // `process.platform` there is the host. See `platform` in test/helpers.
+    runnerEnv: { E2E_PLATFORM: platform },
+
+    onPrepare: async () => {
+      // The example (and the specs' type-checking) resolve the plugins' JS
+      // packages from their `dist-js` build output. Fail early with a clear
+      // message instead of a confusing vite/tsc error.
+      const pluginsBuilt = fs.existsSync(
+        path.join(repoRoot, 'plugins', 'fs', 'dist-js', 'index.js')
+      )
+      if (!pluginsBuilt) {
+        throw new Error(
+          'the plugins are not built — run `pnpm build` at the repo root before the e2e suite.'
+        )
+      }
+
+      if (!process.env.E2E_SKIP_BUILD && !process.env.E2E_APP_PATH) {
+        // The Android Studio / Xcode projects are committed in this repository
+        // (`examples/api/src-tauri/gen`), so this only runs if they were wiped.
+        // The build installs the Rust target it needs itself, so init skips that.
+        // eslint-disable-next-line security/detect-non-literal-fs-filename
+        const projectGenerated = fs.existsSync(
+          path.join(tauriDir, 'gen', ios ? 'apple' : 'android')
+        )
+        if (!projectGenerated) {
+          tauriCli([platform, 'init', '--ci', '--skip-targets-install'])
+        }
+        // `tauri ios build` exports the simulator app with `fs::rename`, which
+        // fails with "Directory not empty" when a previous build is still
+        // there, so clear it out first.
+        // eslint-disable-next-line security/detect-non-literal-fs-filename
+        if (ios && fs.existsSync(application)) {
+          fs.rmSync(application, { recursive: true, force: true })
+        }
+        // A debug build, so wry turns on webview debugging (Android
+        // `setWebContentsDebuggingEnabled`, iOS `isInspectable`), which is what
+        // lets Appium reach the page. Only the target that the device/emulator
+        // actually runs is compiled.
+        //
+        // Unlike the desktop suite this passes no `tauri.e2e.conf.json`
+        // override: both things it turns on (the automation plugin and the
+        // updater endpoint) belong to desktop-only plugins.
+        tauriCli(
+          ios
+            ? [
+                'ios',
+                'build',
+                '--debug',
+                '--target',
+                ios.name,
+                // Simulator builds are not code signed (see
+                // `additionalWebviewBundleIds` in `iosCapabilities`).
+                '--no-sign'
+              ]
+            : [
+                'android',
+                'build',
+                '--debug',
+                '--apk',
+                '--target',
+                androidTarget()
+              ],
+          ios ? {} : androidBuildEnv()
+        )
+      }
+
+      // eslint-disable-next-line security/detect-non-literal-fs-filename
+      if (!fs.existsSync(application)) {
+        throw new Error(
+          `app not found at ${application} — build it (unset E2E_SKIP_BUILD) or point E2E_APP_PATH at an existing build.`
+        )
+      }
+
+      // Serves the upload/download fixtures the `upload` specs hit. Lives in
+      // the launcher process so it outlives the per-spec worker processes.
+      // (The updater manifest it also serves is only used on desktop, where
+      // the updater plugin is registered.)
+      fixtureServer = await startFixtureServer()
+    },
+
+    // The session starts in the native (`NATIVE_APP`) context. Every spec goes
+    // through `window.__TAURI__`, so switch to the app's webview as soon as it
+    // is attachable and then block until the page has loaded (as the desktop
+    // config does).
+    before: async (_capabilities, _specs, browser: WebdriverIO.Browser) => {
+      if (platform === 'android') {
+        // The fixture server listens on the host's loopback, which on a device
+        // (or emulator) is the device's own. `adb reverse` forwards the same
+        // port from the device back to the host so `FIXTURE_SERVER_URL` works
+        // unchanged in the page. The iOS simulator shares the host's network
+        // stack, so it needs nothing. Re-run per spec file (it is idempotent)
+        // because Appium may only have booted the emulator with the first
+        // session.
+        adbReverse(FIXTURE_SERVER_PORT)
+      }
+
+      let webview: string | undefined
+      await browser.waitUntil(
+        async () => {
+          const contexts = (await browser.getAppiumContexts())
+            // Detailed objects are only returned with `appium:fullContextList`.
+            .map((context) =>
+              typeof context === 'string' ? context : context.id
+            )
+          // Android names the context after the package, and lists every
+          // debuggable WebView on the device (other apps included), so match
+          // ours exactly. iOS names it `WEBVIEW_<pid>.<n>` and only lists the
+          // app under test's webviews, so the first one is it.
+          webview =
+            contexts.find((name) => name === `WEBVIEW_${appId}`)
+            ?? (platform === 'ios'
+              ? contexts.find((name) => name.startsWith('WEBVIEW_'))
+              : undefined)
+          return webview !== undefined
+        },
+        {
+          // Covers a cold app start plus, on Android, the on-demand chromedriver
+          // download for the first session.
+          timeout: 120_000,
+          interval: 1000,
+          timeoutMsg:
+            'no WEBVIEW context appeared — is the app a debug build (webview debugging enabled)?'
+        }
+      )
+      await browser.switchAppiumContext(webview!)
+      // The specs run the page through `executeAsync`, and the XCUITest driver
+      // starts with a script timeout of 0 (every async script times out at
+      // once) rather than the 30s the other drivers default to.
+      await browser.setTimeout({ script: 30_000 })
+
+      await browser.waitUntil(
+        async () => {
+          try {
+            const ready: unknown = await browser.executeAsync(
+              'var done = arguments[arguments.length - 1]; done(typeof window.__TAURI__ !== "undefined");'
+            )
+            return ready === true
+          } catch {
+            // A command issued mid-navigation can fail on a stale execution
+            // context; that just means "not ready yet".
+            return false
+          }
+        },
+        {
+          timeout: 30_000,
+          interval: 250,
+          timeoutMsg:
+            'window.__TAURI__ never became available — the app did not load its page.'
+        }
+      )
+    },
+
+    onComplete: () => {
+      closeFixtureServer()
+    }
+  }
+}
+
+function closeFixtureServer(): void {
+  fixtureServer?.close()
+  fixtureServer = undefined
+}
+
+for (const signal of [
+  'exit',
+  'SIGINT',
+  'SIGTERM',
+  'SIGHUP',
+  'SIGBREAK'
+] as const) {
+  process.on(signal, () => {
+    try {
+      closeFixtureServer()
+    } finally {
+      process.exit()
+    }
+  })
+}
+
+/** Runs `pnpm tauri <args>` in examples/api, failing loudly. */
+function tauriCli(args: string[], env: NodeJS.ProcessEnv = {}): void {
+  const result = spawnSync('pnpm', ['tauri', ...args], {
+    cwd: appDir,
+    stdio: 'inherit',
+    shell: true,
+    env: { ...process.env, ...env }
+  })
+  if (result.status !== 0) {
+    throw new Error(
+      `\`pnpm tauri ${args.join(' ')}\` failed with status ${result.status}`
+    )
+  }
+}
+
+// --- Android -----------------------------------------------------------------
+
+/**
+ * Environment for the Android build.
+ *
+ * - No debug info: the suite needs a debug build (webview debugging follows
+ *   `debug_assertions`), but with the sql and websocket plugins the
+ *   debug info alone grows the APK past what a default emulator can install
+ *   ("not enough space").
+ */
+function androidBuildEnv(): NodeJS.ProcessEnv {
+  return { CARGO_PROFILE_DEV_DEBUG: '0' }
+}
+
+/** `adb` from the Android SDK, else whatever is on `PATH`. */
+function adb(args: string[]): SpawnSyncReturns<string> {
+  const sdk = process.env.ANDROID_HOME ?? process.env.ANDROID_SDK_ROOT
+  const binary = sdk ? path.join(sdk, 'platform-tools', 'adb') : 'adb'
+  return spawnSync(
+    binary,
+    [
+      ...(process.env.E2E_ANDROID_DEVICE
+        ? ['-s', process.env.E2E_ANDROID_DEVICE]
+        : []),
+      ...args
+    ],
+    { encoding: 'utf8', timeout: 20_000 }
+  )
+}
+
+function adbReverse(port: number): void {
+  const result = adb(['reverse', `tcp:${port}`, `tcp:${port}`])
+  if (result.status !== 0) {
+    console.warn(
+      `\`adb reverse tcp:${port}\` failed — the upload specs will not reach the fixture server.\n${result.stderr ?? ''}`
+    )
+  }
+}
+
+function androidCapabilities(app: string): WebdriverIO.Capabilities {
+  return {
+    platformName: 'Android',
+    'appium:automationName': 'UiAutomator2',
+    'appium:app': app,
+    'appium:appPackage': appId,
+    'appium:appActivity': '.MainActivity',
+    // Every build has the same version code, and Appium otherwise skips
+    // installing an APK whose version is already on the device, so a rebuilt
+    // app would never replace the installed one.
+    'appium:enforceAppInstall': true,
+    // Which device/emulator to use; Appium picks the first connected one
+    // otherwise. E2E_ANDROID_AVD instead boots that AVD.
+    ...(process.env.E2E_ANDROID_DEVICE
+      ? { 'appium:udid': process.env.E2E_ANDROID_DEVICE }
+      : {}),
+    ...(process.env.E2E_ANDROID_AVD
+      ? { 'appium:avd': process.env.E2E_ANDROID_AVD }
+      : {}),
+    // chromedriver must match the WebView's Chrome version: either a specific
+    // binary, or one Appium downloads on demand.
+    ...(process.env.E2E_CHROMEDRIVER
+      ? { 'appium:chromedriverExecutable': process.env.E2E_CHROMEDRIVER }
+      : { 'appium:chromedriverAutodownload': true }),
+    // Grants the runtime permissions the manifest declares (POST_NOTIFICATIONS
+    // among them) so the notification specs do not stop on a system dialog.
+    'appium:autoGrantPermissions': true,
+    // Emulators in CI are slow; give the UiAutomator2 server and adb room.
+    'appium:uiautomator2ServerInstallTimeout': 120_000,
+    'appium:uiautomator2ServerLaunchTimeout': 120_000,
+    'appium:adbExecTimeout': 60_000,
+    'appium:newCommandTimeout': 300
+  }
+}
+
+const androidTargets: Record<string, string> = {
+  // `ro.product.cpu.abi` -> `tauri android build --target`
+  'arm64-v8a': 'aarch64',
+  'armeabi-v7a': 'armv7',
+  x86_64: 'x86_64',
+  x86: 'i686'
+}
+
+/**
+ * The Rust target to build the APK for: `E2E_ANDROID_TARGET`, else the ABI of
+ * the connected device/emulator (via adb), else the host's (emulators run the
+ * host architecture).
+ */
+function androidTarget(): string {
+  if (process.env.E2E_ANDROID_TARGET) {
+    return process.env.E2E_ANDROID_TARGET
+  }
+  const abi = adb(['shell', 'getprop', 'ro.product.cpu.abi'])
+  const detected =
+    abi.status === 0 ? androidTargets[abi.stdout.trim()] : undefined
+  return detected ?? (process.arch === 'arm64' ? 'aarch64' : 'x86_64')
+}
+
+// --- iOS ---------------------------------------------------------------------
+
+function iosCapabilities(app: string): WebdriverIO.Capabilities {
+  return {
+    platformName: 'iOS',
+    'appium:automationName': 'XCUITest',
+    'appium:app': app,
+    'appium:bundleId': appId,
+    // The driver looks the app up in the simulator's Web Inspector listing by
+    // bundle identifier. The inspector identifies an app by the
+    // `application-identifier` entitlement Xcode embeds when it code signs a
+    // simulator build (`__TEXT,__entitlements`); `--no-sign` skips signing
+    // altogether (`CODE_SIGNING_ALLOWED=NO`), so the entitlement is missing and
+    // the inspector falls back to `process-<executable name>`. Match that too.
+    'appium:additionalWebviewBundleIds': [
+      `process-${path.basename(app, '.app')}`
+    ],
+    'appium:udid': iosSimulator(),
+    // No Simulator.app window. Besides not needing one, the driver otherwise
+    // shuts a simulator that is booted without a visible UI down to relaunch it
+    // with one, on every session — and that shutdown regularly outlasts the
+    // driver's 15s limit on it.
+    'appium:isHeadless': true,
+    // WebDriverAgent is compiled on the first session, which takes minutes on
+    // a CI runner.
+    'appium:wdaLaunchTimeout': 240_000,
+    'appium:wdaStartupRetries': 3,
+    'appium:simulatorStartupTimeout': 240_000,
+    'appium:newCommandTimeout': 300
+  }
+}
+
+/**
+ * The Rust target to build the simulator app for (`E2E_IOS_TARGET`, else the
+ * host's architecture) and the directory the CLI exports it to.
+ */
+function iosTarget(): { name: string; outputArch: string } {
+  const name =
+    process.env.E2E_IOS_TARGET
+    ?? (process.arch === 'arm64' ? 'aarch64-sim' : 'x86_64')
+  // `tauri ios build` writes to gen/apple/build/<arch>/ (cargo-mobile2's
+  // `arch` for the target).
+  const outputArch = name === 'aarch64-sim' ? 'arm64-sim' : name
+  return { name, outputArch }
+}
+
+interface SimctlDevice {
+  name: string
+  udid: string
+  state: string
+  isAvailable: boolean
+  deviceTypeIdentifier?: string
+}
+
+/**
+ * UDID of the simulator to run on: `E2E_IOS_DEVICE` (a UDID or device name),
+ * else an already-booted iPhone, else the iPhone on the newest installed
+ * runtime. Resolved through `simctl` so nothing has to be hardcoded per Xcode
+ * version.
+ */
+function iosSimulator(): string {
+  const requested = process.env.E2E_IOS_DEVICE
+  if (requested && /^[0-9A-F-]{36}$/i.test(requested)) {
+    return requested
+  }
+  const list = spawnSync(
+    'xcrun',
+    ['simctl', 'list', 'devices', 'available', '--json'],
+    { encoding: 'utf8' }
+  )
+  if (list.status !== 0) {
+    throw new Error(
+      `\`xcrun simctl list\` failed — is Xcode installed?\n${list.stderr}`
+    )
+  }
+  const { devices: runtimes } = JSON.parse(list.stdout) as {
+    devices: Record<string, SimctlDevice[]>
+  }
+  const iphones = Object.entries(runtimes)
+    // e.g. `com.apple.CoreSimulator.SimRuntime.iOS-18-2`
+    .filter(([runtime]) => runtime.includes('.iOS-'))
+    .sort(([a], [b]) => runtimeVersion(b) - runtimeVersion(a))
+    .flatMap(([, devices]) =>
+      devices.filter(
+        (device) =>
+          device.isAvailable
+          && (device.deviceTypeIdentifier ?? device.name).includes('iPhone')
+      )
+    )
+  const device = requested
+    ? iphones.find((candidate) => candidate.name === requested)
+    : (iphones.find((candidate) => candidate.state === 'Booted') ?? iphones[0])
+  if (!device) {
+    throw new Error(
+      requested
+        ? `no available iPhone simulator named "${requested}" (E2E_IOS_DEVICE)`
+        : 'no available iPhone simulator found — install an iOS runtime in Xcode.'
+    )
+  }
+  return device.udid
+}
+
+function runtimeVersion(runtime: string): number {
+  const [major = '0', minor = '0'] = (runtime.split('.iOS-')[1] ?? '').split(
+    '-'
+  )
+  return Number(major) * 100 + Number(minor)
+}
diff --git a/plugins/autostart/CHANGELOG.md b/plugins/autostart/CHANGELOG.md
index 704f2ba2e..6ade83734 100644
--- a/plugins/autostart/CHANGELOG.md
+++ b/plugins/autostart/CHANGELOG.md
@@ -8,6 +8,12 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.6.0]
+
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
 ## \[2.5.1]
 
 - [`93426f85`](https://github.com/tauri-apps/plugins-workspace/commit/93426f85120f49beb9f40222bff45185a32d54a9) Fixed an issue that caused docs.rs builds to fail. No user facing changes.
@@ -116,3 +122,8 @@
 ## \[2.0.0-alpha.0]
 
 - [`717ae67`](https://github.com/tauri-apps/plugins-workspace/commit/717ae670978feb4492fac1f295998b93f2b9347f)([#371](https://github.com/tauri-apps/plugins-workspace/pull/371)) First v2 alpha release!
+alpha.11.
+
+## \[2.0.0-alpha.0]
+
+- [`717ae67`](https://github.com/tauri-apps/plugins-workspace/commit/717ae670978feb4492fac1f295998b93f2b9347f)([#371](https://github.com/tauri-apps/plugins-workspace/pull/371)) First v2 alpha release!
diff --git a/plugins/autostart/guest-js/index.ts b/plugins/autostart/guest-js/index.ts
index fca8344ff..063066b7f 100644
--- a/plugins/autostart/guest-js/index.ts
+++ b/plugins/autostart/guest-js/index.ts
@@ -2,16 +2,53 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+/**
+ * Automatically launch your application at startup.
+ *
+ * @module
+ */
+
 import { invoke } from '@tauri-apps/api/core'
 
+/**
+ * Checks whether autostart is enabled for the application.
+ * @example
+ * ```typescript
+ * import { isEnabled } from '@tauri-apps/plugin-autostart';
+ * const enabled = await isEnabled();
+ * ```
+ *
+ * @returns A promise resolving to `true` if the application launches at startup, `false` otherwise.
+ * @since 2.0.0
+ */
 export async function isEnabled(): Promise<boolean> {
   return await invoke('plugin:autostart|is_enabled')
 }
 
+/**
+ * Enables autostart for the application.
+ * @example
+ * ```typescript
+ * import { enable } from '@tauri-apps/plugin-autostart';
+ * await enable();
+ * ```
+ *
+ * @since 2.0.0
+ */
 export async function enable(): Promise<void> {
   await invoke('plugin:autostart|enable')
 }
 
+/**
+ * Disables autostart for the application.
+ * @example
+ * ```typescript
+ * import { disable } from '@tauri-apps/plugin-autostart';
+ * await disable();
+ * ```
+ *
+ * @since 2.0.0
+ */
 export async function disable(): Promise<void> {
   await invoke('plugin:autostart|disable')
 }
diff --git a/plugins/autostart/src/lib.rs b/plugins/autostart/src/lib.rs
index e4b55601b..1be3642dd 100644
--- a/plugins/autostart/src/lib.rs
+++ b/plugins/autostart/src/lib.rs
@@ -11,28 +11,38 @@
 #![cfg(not(any(target_os = "android", target_os = "ios")))]
 
 use auto_launch::{AutoLaunch, AutoLaunchBuilder};
-use serde::{ser::Serializer, Serialize};
+use serde::{Serialize, ser::Serializer};
 use tauri::{
-    command,
+    Manager, Runtime, State, command,
     plugin::{Builder as PluginBuilder, TauriPlugin},
-    Manager, Runtime, State,
 };
 
 use std::env::current_exe;
 
 type Result<T> = std::result::Result<T, Error>;
 
+/// The strategy used to register the application for auto start on macOS.
+///
+/// The builder's default is [`MacosLauncher::LaunchAgent`].
 #[derive(Debug, Default, Copy, Clone)]
 pub enum MacosLauncher {
+    /// Auto start by installing a Launch Agent plist under `~/Library/LaunchAgents`,
+    /// which macOS starts automatically at login.
     #[default]
     LaunchAgent,
+    /// Auto start by adding a login item through an AppleScript command sent to the
+    /// "System Events" application.
     AppleScript,
 }
 
+/// The error type of this plugin.
 #[derive(Debug, thiserror::Error)]
 pub enum Error {
+    /// An I/O error, for example while resolving the current executable's path.
     #[error(transparent)]
     Io(#[from] std::io::Error),
+    /// An error forwarded from the underlying `auto_launch` operation, converted to its
+    /// string representation.
     #[error("{0}")]
     Anyhow(String),
 }
@@ -46,9 +56,19 @@ impl Serialize for Error {
     }
 }
 
+/// Manages the auto start (launch at login) state of the application.
+///
+/// An instance is created and managed as Tauri state when the plugin is built; access it
+/// through [`ManagerExt::autolaunch`].
 pub struct AutoLaunchManager(AutoLaunch);
 
 impl AutoLaunchManager {
+    /// Enables auto start, registering the application to launch at login.
+    ///
+    /// ## Errors
+    ///
+    /// Returns [`Error::Anyhow`] if the platform-specific registration fails, for example
+    /// when the application path does not exist or is not absolute.
     pub fn enable(&self) -> Result<()> {
         self.0
             .enable()
@@ -56,13 +76,26 @@ impl AutoLaunchManager {
             .map_err(Error::Anyhow)
     }
 
+    /// Disables auto start, removing the application from the list of programs launched at login.
+    ///
+    /// ## Errors
+    ///
+    /// Returns [`Error::Anyhow`] if the platform-specific removal fails.
     pub fn disable(&self) -> Result<()> {
-        self.0
-            .disable()
-            .map_err(|e| e.to_string())
-            .map_err(Error::Anyhow)
+        match self.0.disable() {
+            // On Windows, disabling deletes the app's `Run` registry value, which fails with
+            // "not found" when autostart is already disabled. macOS and Linux treat that as a
+            // no-op, so do the same here.
+            Err(auto_launch::Error::Io(e)) if e.kind() == std::io::ErrorKind::NotFound => Ok(()),
+            result => result.map_err(|e| e.to_string()).map_err(Error::Anyhow),
+        }
     }
 
+    /// Returns whether auto start is currently enabled for the application.
+    ///
+    /// ## Errors
+    ///
+    /// Returns [`Error::Anyhow`] if the platform-specific check fails.
     pub fn is_enabled(&self) -> Result<bool> {
         self.0
             .is_enabled()
@@ -71,6 +104,8 @@ impl AutoLaunchManager {
     }
 }
 
+/// Extensions to [`tauri::App`], [`tauri::AppHandle`], [`tauri::WebviewWindow`], [`tauri::Webview`]
+/// and [`tauri::Window`] to access the autostart APIs.
 pub trait ManagerExt<R: Runtime> {
     fn autostart(&self) -> State<'_, AutoLaunchManager>;
 }
@@ -96,6 +131,8 @@ async fn is_enabled(manager: State<'_, AutoLaunchManager>) -> Result<bool> {
     manager.is_enabled()
 }
 
+/// Builder for the autostart plugin, used to configure the startup arguments, application
+/// name, and — on macOS — the launch strategy before calling [`Builder::build`].
 #[derive(Default)]
 pub struct Builder {
     #[cfg(target_os = "macos")]
@@ -114,11 +151,10 @@ impl Builder {
     ///
     /// ## Examples
     ///
-    /// ```no_run
-    /// Builder::new()
+    /// ```
+    /// tauri_plugin_autostart::Builder::new()
     ///     .arg("--from-autostart")
-    ///     .arg("--hey")
-    ///     .build();
+    ///     .arg("--hey");
     /// ```
     pub fn arg<S: Into<String>>(mut self, arg: S) -> Self {
         self.args.push(arg.into());
@@ -129,10 +165,8 @@ impl Builder {
     ///
     /// ## Examples
     ///
-    /// ```no_run
-    /// Builder::new()
-    ///     .args(["--from-autostart", "--hey"])
-    ///     .build();
+    /// ```
+    /// tauri_plugin_autostart::Builder::new().args(["--from-autostart", "--hey"]);
     /// ```
     pub fn args<I, S>(mut self, args: I) -> Self
     where
@@ -157,16 +191,19 @@ impl Builder {
     ///
     /// ## Examples
     ///
-    /// ```no_run
-    /// Builder::new()
-    ///     .app_name("My Custom Name")
-    ///     .build();
+    /// ```
+    /// tauri_plugin_autostart::Builder::new().app_name("My Custom Name");
     /// ```
     pub fn app_name<S: Into<String>>(mut self, app_name: S) -> Self {
         self.app_name = Some(app_name.into());
         self
     }
 
+    /// Builds the autostart [`TauriPlugin`] with the configured options.
+    ///
+    /// On setup, it resolves the current executable's path (or the AppImage path on Linux,
+    /// when available) and manages an [`AutoLaunchManager`] built from it, so that
+    /// [`ManagerExt::autolaunch`] can be used from anywhere in the application.
     pub fn build<R: Runtime>(self) -> TauriPlugin<R> {
         PluginBuilder::new("autostart")
             .invoke_handler(tauri::generate_handler![enable, disable, is_enabled])
diff --git a/plugins/barcode-scanner/CHANGELOG.md b/plugins/barcode-scanner/CHANGELOG.md
index 11adc281f..41f59f2b4 100644
--- a/plugins/barcode-scanner/CHANGELOG.md
+++ b/plugins/barcode-scanner/CHANGELOG.md
@@ -8,6 +8,12 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.5.0]
+
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
 ## [2.4.6]
 
 - [`db9c5998`](https://github.com/tauri-apps/plugins-workspace/commit/db9c5998feff9384f9cbbefcbe0d45937c00a1fc) ([#3531](https://github.com/tauri-apps/plugins-workspace/pull/3531) by [@Legend-Master](https://github.com/tauri-apps/plugins-workspace/../../Legend-Master)) Fix missing `consumer-rules.pro` on Gradle v9.
@@ -161,3 +167,7 @@
   .
   commit/454428cd50ce4962f0bad8e355aebc68af8cc61f)([#536](https://github.com/tauri-apps/plugins-workspace/pull/536)) Initial release.
   github.com/tauri-apps/plugins-workspace/pull/536)) Initial release.
+ebc68af8cc61f)([#536](https://github.com/tauri-apps/plugins-workspace/pull/536)) Initial release.
+  .
+  commit/454428cd50ce4962f0bad8e355aebc68af8cc61f)([#536](https://github.com/tauri-apps/plugins-workspace/pull/536)) Initial release.
+  github.com/tauri-apps/plugins-workspace/pull/536)) Initial release.
diff --git a/plugins/barcode-scanner/android/build.gradle.kts b/plugins/barcode-scanner/android/build.gradle.kts
index b3f32c0c6..def5fdfa2 100644
--- a/plugins/barcode-scanner/android/build.gradle.kts
+++ b/plugins/barcode-scanner/android/build.gradle.kts
@@ -1,3 +1,5 @@
+import org.jetbrains.kotlin.gradle.dsl.JvmTarget
+
 plugins {
     id("com.android.library")
     id("org.jetbrains.kotlin.android")
@@ -18,8 +20,11 @@ android {
         sourceCompatibility = JavaVersion.VERSION_1_8
         targetCompatibility = JavaVersion.VERSION_1_8
     }
-    kotlinOptions {
-        jvmTarget = "1.8"
+}
+
+kotlin {
+    compilerOptions {
+        jvmTarget = JvmTarget.JVM_1_8
     }
 }
 
diff --git a/plugins/barcode-scanner/guest-js/index.ts b/plugins/barcode-scanner/guest-js/index.ts
index 9781b4bae..f74b32a72 100644
--- a/plugins/barcode-scanner/guest-js/index.ts
+++ b/plugins/barcode-scanner/guest-js/index.ts
@@ -2,6 +2,12 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+/**
+ * Scan QR codes, EAN-13 and other kinds of barcodes with the device's camera on Android and iOS.
+ *
+ * @module
+ */
+
 import {
   invoke,
   requestPermissions as requestPermissions_,
@@ -10,55 +16,136 @@ import {
 
 export type { PermissionState } from '@tauri-apps/api/core'
 
+/**
+ * The barcode symbologies that can be scanned, or used to restrict a scan via {@link ScanOptions.formats}.
+ */
 export enum Format {
+  /**
+   * QR code, a two-dimensional matrix barcode.
+   */
   QRCode = 'QR_CODE',
   /**
+   * UPC-A, a 12-digit numeric barcode commonly used on retail products in North America.
+   *
    * Not supported on iOS.
    */
   UPC_A = 'UPC_A',
+  /**
+   * UPC-E, a compressed 6-digit variant of UPC-A used on small packaging.
+   */
   UPC_E = 'UPC_E',
+  /**
+   * EAN-8, an 8-digit numeric barcode used on small retail packaging.
+   */
   EAN8 = 'EAN_8',
+  /**
+   * EAN-13, a 13-digit numeric barcode used worldwide on retail products.
+   */
   EAN13 = 'EAN_13',
+  /**
+   * Code 39, an alphanumeric barcode used in logistics and inventory tracking.
+   */
   Code39 = 'CODE_39',
+  /**
+   * Code 93, a compact alphanumeric barcode similar to Code 39.
+   */
   Code93 = 'CODE_93',
+  /**
+   * Code 128, a high-density alphanumeric barcode used in shipping and packaging.
+   */
   Code128 = 'CODE_128',
   /**
+   * Codabar, a numeric barcode commonly used by libraries and blood banks.
+   *
    * Not supported on iOS.
    */
   Codabar = 'CODABAR',
+  /**
+   * ITF (Interleaved 2 of 5), a numeric barcode encoding an even number of digits.
+   */
   ITF = 'ITF',
+  /**
+   * Aztec code, a two-dimensional matrix barcode often used on tickets and boarding passes.
+   */
   Aztec = 'AZTEC',
+  /**
+   * Data Matrix, a two-dimensional matrix barcode used to encode small amounts of data.
+   */
   DataMatrix = 'DATA_MATRIX',
+  /**
+   * PDF417, a stacked linear barcode used on IDs, boarding passes and shipping labels.
+   */
   PDF417 = 'PDF_417',
   /**
+   * GS1 DataBar, a compact barcode used to mark variable-measure items such as fresh food.
+   *
    * Not supported on Android. Requires iOS 15.4+
    */
   GS1DataBar = 'GS1_DATA_BAR',
   /**
+   * The limited variant of {@link Format.GS1DataBar}, encoding fewer digits in a smaller symbol.
+   *
    * Not supported on Android. Requires iOS 15.4+
    */
   GS1DataBarLimited = 'GS1_DATA_BAR_LIMITED',
   /**
+   * The expanded variant of {@link Format.GS1DataBar}, capable of encoding additional data such as weight.
+   *
    * Not supported on Android. Requires iOS 15.4+
    */
   GS1DataBarExpanded = 'GS1_DATA_BAR_EXPANDED'
 }
 
+/**
+ * Options to configure a {@link scan} call.
+ */
 export interface ScanOptions {
+  /**
+   * Which camera to use for scanning. Defaults to `back`.
+   */
   cameraDirection?: 'back' | 'front'
+  /**
+   * The barcode formats to scan for. Defaults to all supported formats.
+   */
   formats?: Format[]
+  /**
+   * Whether to show the camera in a small window instead of taking over the whole screen. Defaults to `false`.
+   */
   windowed?: boolean
 }
 
+/**
+ * The result of a successful {@link scan} call.
+ */
 export interface Scanned {
+  /**
+   * The decoded content of the barcode.
+   */
   content: string
+  /**
+   * The format of the scanned barcode.
+   */
   format: Format
+  /**
+   * The bounding box of the scanned barcode within the camera frame, when reported by the platform.
+   */
   bounds: unknown
 }
 
 /**
- * Start scanning.
- * @param options
+ * Start scanning, opening the device's camera. The returned promise resolves once a barcode
+ * matching the given options has been scanned, or rejects if the scan is cancelled.
+ *
+ * @example
+ * ```typescript
+ * import { scan, Format } from '@tauri-apps/plugin-barcode-scanner';
+ *
+ * const scanned = await scan({ windowed: true, formats: [Format.QRCode] });
+ * ```
+ *
+ * @param options Configuration for the scan.
+ * @returns A promise resolving to the scanned barcode.
+ * @since 2.0.0
  */
 export async function scan(options?: ScanOptions): Promise<Scanned> {
   return await invoke('plugin:barcode-scanner|scan', { ...options })
@@ -66,13 +153,32 @@ export async function scan(options?: ScanOptions): Promise<Scanned> {
 
 /**
  * Cancel the current scan process.
+ *
+ * @example
+ * ```typescript
+ * import { cancel } from '@tauri-apps/plugin-barcode-scanner';
+ *
+ * await cancel();
+ * ```
+ *
+ * @since 2.0.0
  */
 export async function cancel(): Promise<void> {
   await invoke('plugin:barcode-scanner|cancel')
 }
 
 /**
- * Get permission state.
+ * Get the current state of the camera permission.
+ *
+ * @example
+ * ```typescript
+ * import { checkPermissions } from '@tauri-apps/plugin-barcode-scanner';
+ *
+ * const permissionState = await checkPermissions();
+ * ```
+ *
+ * @returns A promise resolving to the current state of the camera permission.
+ * @since 2.0.0
  */
 export async function checkPermissions(): Promise<PermissionState> {
   return await checkPermissions_<{ camera: PermissionState }>(
@@ -82,6 +188,16 @@ export async function checkPermissions(): Promise<PermissionState> {
 
 /**
  * Request permissions to use the camera.
+ *
+ * @example
+ * ```typescript
+ * import { requestPermissions } from '@tauri-apps/plugin-barcode-scanner';
+ *
+ * const permissionState = await requestPermissions();
+ * ```
+ *
+ * @returns A promise resolving to the new state of the camera permission.
+ * @since 2.0.0
  */
 export async function requestPermissions(): Promise<PermissionState> {
   return await requestPermissions_<{ camera: PermissionState }>(
@@ -91,6 +207,15 @@ export async function requestPermissions(): Promise<PermissionState> {
 
 /**
  * Open application settings. Useful if permission was denied and the user must manually enable it.
+ *
+ * @example
+ * ```typescript
+ * import { openAppSettings } from '@tauri-apps/plugin-barcode-scanner';
+ *
+ * await openAppSettings();
+ * ```
+ *
+ * @since 2.0.0
  */
 export async function openAppSettings(): Promise<void> {
   await invoke('plugin:barcode-scanner|open_app_settings')
diff --git a/plugins/barcode-scanner/src/error.rs b/plugins/barcode-scanner/src/error.rs
index 339e763b1..17d502e6a 100644
--- a/plugins/barcode-scanner/src/error.rs
+++ b/plugins/barcode-scanner/src/error.rs
@@ -2,14 +2,19 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
-use serde::{ser::Serializer, Serialize};
+use serde::{Serialize, ser::Serializer};
 
+/// Alias for the result type returned by this crate's functions.
 pub type Result<T> = std::result::Result<T, Error>;
 
+/// The error type returned by this crate's APIs. Serialized as its [`Display`](std::fmt::Display)
+/// string when it crosses the IPC boundary.
 #[derive(Debug, thiserror::Error)]
 pub enum Error {
+    /// An I/O error occurred.
     #[error(transparent)]
     Io(#[from] std::io::Error),
+    /// Failed to run a command on the mobile plugin implementation (Kotlin on Android, Swift on iOS).
     #[cfg(mobile)]
     #[error(transparent)]
     PluginInvoke(#[from] tauri::plugin::mobile::PluginInvokeError),
diff --git a/plugins/barcode-scanner/src/lib.rs b/plugins/barcode-scanner/src/lib.rs
index 2f2e7ee95..5ca9d9751 100644
--- a/plugins/barcode-scanner/src/lib.rs
+++ b/plugins/barcode-scanner/src/lib.rs
@@ -2,15 +2,17 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+//! Scan QR codes, EAN-13 and other kinds of barcodes with the device's camera.
+//!
+//! - Supported platforms: Android and iOS.
+
 #![cfg(mobile)]
 
 use tauri::{
-    plugin::{Builder, PluginHandle, TauriPlugin},
     Manager, Runtime,
+    plugin::{Builder, PluginHandle, TauriPlugin},
 };
 
-pub use models::*;
-
 mod error;
 mod models;
 
@@ -29,6 +31,7 @@ impl<R: Runtime> BarcodeScanner<R> {}
 
 /// Extensions to [`tauri::App`], [`tauri::AppHandle`], [`tauri::WebviewWindow`], [`tauri::Webview`] and [`tauri::Window`] to access the barcode scanner APIs.
 pub trait BarcodeScannerExt<R: Runtime> {
+    /// Returns the [`BarcodeScanner`] instance managed by the app.
     fn barcode_scanner(&self) -> &BarcodeScanner<R>;
 }
 
diff --git a/plugins/biometric/CHANGELOG.md b/plugins/biometric/CHANGELOG.md
index ba765800e..170ce8e5d 100644
--- a/plugins/biometric/CHANGELOG.md
+++ b/plugins/biometric/CHANGELOG.md
@@ -8,6 +8,12 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.4.0]
+
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
 ## [2.3.3]
 
 - [`db9c5998`](https://github.com/tauri-apps/plugins-workspace/commit/db9c5998feff9384f9cbbefcbe0d45937c00a1fc) ([#3531](https://github.com/tauri-apps/plugins-workspace/pull/3531) by [@Legend-Master](https://github.com/tauri-apps/plugins-workspace/../../Legend-Master)) Fix missing `consumer-rules.pro` on Gradle v9.
@@ -120,3 +126,7 @@
   .
   commit/8df28a987519ecfa03dcb8635443025f8d010362)([#829](https://github.com/tauri-apps/plugins-workspace/pull/829)) Initial release.
   ithub.com/tauri-apps/plugins-workspace/pull/829)) Initial release.
+43025f8d010362)([#829](https://github.com/tauri-apps/plugins-workspace/pull/829)) Initial release.
+  .
+  commit/8df28a987519ecfa03dcb8635443025f8d010362)([#829](https://github.com/tauri-apps/plugins-workspace/pull/829)) Initial release.
+  ithub.com/tauri-apps/plugins-workspace/pull/829)) Initial release.
diff --git a/plugins/biometric/Cargo.toml b/plugins/biometric/Cargo.toml
index 15bbb62f3..0e8ec639b 100644
--- a/plugins/biometric/Cargo.toml
+++ b/plugins/biometric/Cargo.toml
@@ -3,6 +3,7 @@ name = "tauri-plugin-biometric"
 version = "3.0.0-alpha.1"
 description = "Prompt the user for biometric authentication on Android and iOS."
 edition = { workspace = true }
+rust-version = { workspace = true }
 authors = { workspace = true }
 license = { workspace = true }
 repository = { workspace = true }
diff --git a/plugins/biometric/android/build.gradle.kts b/plugins/biometric/android/build.gradle.kts
index 86ecccfff..546182102 100644
--- a/plugins/biometric/android/build.gradle.kts
+++ b/plugins/biometric/android/build.gradle.kts
@@ -1,3 +1,5 @@
+import org.jetbrains.kotlin.gradle.dsl.JvmTarget
+
 plugins {
     id("com.android.library")
     id("org.jetbrains.kotlin.android")
@@ -18,8 +20,11 @@ android {
         sourceCompatibility = JavaVersion.VERSION_1_8
         targetCompatibility = JavaVersion.VERSION_1_8
     }
-    kotlinOptions {
-        jvmTarget = "1.8"
+}
+
+kotlin {
+    compilerOptions {
+        jvmTarget = JvmTarget.JVM_1_8
     }
 }
 
diff --git a/plugins/biometric/guest-js/index.ts b/plugins/biometric/guest-js/index.ts
index 5c3eb8df2..cf17bc69b 100644
--- a/plugins/biometric/guest-js/index.ts
+++ b/plugins/biometric/guest-js/index.ts
@@ -2,22 +2,40 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+/**
+ * Prompt the user for biometric authentication on Android and iOS.
+ *
+ * @module
+ */
+
 import { invoke } from '@tauri-apps/api/core'
 
+/**
+ * The kind of biometry hardware detected on the device.
+ */
 export enum BiometryType {
+  /** No biometry hardware is available, or it is not enrolled with the operating system. */
   None = 0,
-  // Apple TouchID or Android fingerprint
+  /** Apple TouchID or Android fingerprint. */
   TouchID = 1,
-  // Apple FaceID or Android face authentication
+  /** Apple FaceID or Android face authentication. */
   FaceID = 2,
-  // Android iris authentication
+  /** Android iris authentication. */
   Iris = 3
 }
 
+/**
+ * The result of {@linkcode checkStatus}, describing whether biometric authentication can
+ * currently be used.
+ */
 export interface Status {
+  /** Whether the device can currently authenticate using biometrics. */
   isAvailable: boolean
+  /** The kind of biometry hardware detected on the device, even when {@linkcode isAvailable} is `false`. */
   biometryType: BiometryType
+  /** A human-readable reason why biometric authentication is unavailable. Only set when {@linkcode isAvailable} is `false`. */
   error?: string
+  /** A platform-specific error code describing why biometric authentication is unavailable. Only set when {@linkcode isAvailable} is `false`. */
   errorCode?:
     | 'appCancel'
     | 'authenticationFailed'
@@ -32,23 +50,43 @@ export interface Status {
     | 'biometryNotEnrolled'
 }
 
+/**
+ * Options for the {@linkcode authenticate} biometric prompt.
+ */
 export interface AuthOptions {
+  /** Enables authentication using the device's password or PIN. Available on both Android and iOS. */
   allowDeviceCredential?: boolean
+  /** Label for the cancel button. Available on both Android and iOS. */
   cancelTitle?: string
 
   // iOS options
+  /** Text displayed on the fallback button if biometric authentication fails. **iOS only.** */
   fallbackTitle?: string
 
   // android options
+  /** Title indicating the purpose of the biometric verification. **Android only.** */
   title?: string
+  /** Subtitle providing contextual information of the biometric verification. **Android only.** */
   subtitle?: string
+  /** Whether additional user confirmation is required, such as pressing a button, after successful biometric authentication. **Android only.** */
   confirmationRequired?: boolean
+  /** Maximum number of attempts allowed before the prompt is dismissed. Defaults to `3`. **Android only.** */
   maxAttemps?: number
 }
 
 /**
  * Checks if the biometric authentication is available.
+ * @example
+ * ```typescript
+ * import { checkStatus } from '@tauri-apps/plugin-biometric';
+ *
+ * const status = await checkStatus();
+ * if (status.isAvailable) {
+ *   // do something
+ * }
+ * ```
  * @returns a promise resolving to an object containing all the information about the status of the biometry.
+ * @since 2.0.0
  */
 export async function checkStatus(): Promise<Status> {
   return await invoke('plugin:biometric|status')
@@ -58,13 +96,15 @@ export async function checkStatus(): Promise<Status> {
  * Prompts the user for authentication using the system interface (touchID, faceID or Android Iris).
  * Rejects if the authentication fails.
  *
- * ```javascript
+ * @example
+ * ```typescript
  * import { authenticate } from "@tauri-apps/plugin-biometric";
  * await authenticate('Open your wallet');
  * ```
- * @param reason
- * @param options
- * @returns
+ * @param reason A message shown to the user explaining why authentication is requested.
+ * @param options Configuration for the biometric prompt.
+ * @returns a promise resolving to `void` once the user is successfully authenticated.
+ * @since 2.0.0
  */
 export async function authenticate(
   reason: string,
diff --git a/plugins/biometric/src/error.rs b/plugins/biometric/src/error.rs
index 339e763b1..8fbd0bd11 100644
--- a/plugins/biometric/src/error.rs
+++ b/plugins/biometric/src/error.rs
@@ -2,14 +2,20 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
-use serde::{ser::Serializer, Serialize};
+use serde::{Serialize, ser::Serializer};
 
+/// Alias for a [`Result`](std::result::Result) with the error type [`Error`].
 pub type Result<T> = std::result::Result<T, Error>;
 
+/// The error types returned by this plugin.
 #[derive(Debug, thiserror::Error)]
 pub enum Error {
+    /// An I/O error occurred.
     #[error(transparent)]
     Io(#[from] std::io::Error),
+    /// The invocation of the underlying Android or iOS plugin failed, for example because
+    /// biometric authentication was unavailable, was not enrolled, failed, or was canceled by
+    /// the user.
     #[cfg(mobile)]
     #[error(transparent)]
     PluginInvoke(#[from] tauri::plugin::mobile::PluginInvokeError),
diff --git a/plugins/biometric/src/lib.rs b/plugins/biometric/src/lib.rs
index f79a104d3..03f3fc1d7 100644
--- a/plugins/biometric/src/lib.rs
+++ b/plugins/biometric/src/lib.rs
@@ -2,12 +2,16 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+//! Prompt the user for biometric authentication.
+//!
+//! - Supported platforms: Android and iOS.
+
 #![cfg(mobile)]
 
 use serde::Serialize;
 use tauri::{
-    plugin::{Builder, PluginHandle, TauriPlugin},
     Manager, Runtime,
+    plugin::{Builder, PluginHandle, TauriPlugin},
 };
 
 pub use models::*;
@@ -34,10 +38,16 @@ struct AuthenticatePayload {
 }
 
 impl<R: Runtime> Biometric<R> {
+    /// Checks the device's availability and type of biometric authentication, as reported by the
+    /// operating system. Errors if the underlying mobile plugin invocation fails.
     pub fn status(&self) -> crate::Result<Status> {
         self.0.run_mobile_plugin("status", ()).map_err(Into::into)
     }
 
+    /// Prompts the user for biometric authentication using the system UI (Android
+    /// `BiometricPrompt` or iOS `LocalAuthentication`), showing `reason` as the purpose of the
+    /// request. Resolves once the user is authenticated and errors if authentication fails, is
+    /// canceled, or the underlying mobile plugin invocation fails.
     pub fn authenticate(&self, reason: String, options: AuthOptions) -> crate::Result<()> {
         self.0
             .run_mobile_plugin("authenticate", AuthenticatePayload { reason, options })
@@ -47,6 +57,7 @@ impl<R: Runtime> Biometric<R> {
 
 /// Extensions to [`tauri::App`], [`tauri::AppHandle`], [`tauri::WebviewWindow`], [`tauri::Webview`] and [`tauri::Window`] to access the biometric APIs.
 pub trait BiometricExt<R: Runtime> {
+    /// Returns the [`Biometric`] instance managed by the app.
     fn biometric(&self) -> &Biometric<R>;
 }
 
diff --git a/plugins/biometric/src/models.rs b/plugins/biometric/src/models.rs
index 49c843004..33547d364 100644
--- a/plugins/biometric/src/models.rs
+++ b/plugins/biometric/src/models.rs
@@ -4,6 +4,7 @@
 
 use serde::{Deserialize, Serialize};
 
+/// Options for [`Biometric::authenticate`](crate::Biometric::authenticate).
 #[derive(Debug, Default, Serialize)]
 #[serde(rename_all = "camelCase")]
 pub struct AuthOptions {
@@ -21,19 +22,31 @@ pub struct AuthOptions {
     pub confirmation_required: Option<bool>,
 }
 
+/// The kind of biometry hardware detected on the device.
 #[derive(Debug, Clone, serde_repr::Deserialize_repr)]
 #[repr(u8)]
 pub enum BiometryType {
+    /// No biometry hardware is available, or it is not enrolled with the operating system.
     None = 0,
+    /// Fingerprint authentication (Apple Touch ID or Android fingerprint).
     TouchID = 1,
+    /// Face authentication (Apple Face ID or Android face authentication).
     FaceID = 2,
 }
 
+/// The result of [`Biometric::status`](crate::Biometric::status), describing whether biometric
+/// authentication can currently be used.
 #[derive(Debug, Clone, Deserialize)]
 #[serde(rename_all = "camelCase")]
 pub struct Status {
+    /// Whether the device can currently authenticate using biometrics.
     pub is_available: bool,
+    /// The kind of biometry hardware detected on the device, even when [`Self::is_available`] is `false`.
     pub biometry_type: BiometryType,
+    /// A human-readable reason why biometric authentication is unavailable. Only set when
+    /// [`Self::is_available`] is `false`.
     pub error: Option<String>,
+    /// A platform-specific error code describing why biometric authentication is unavailable.
+    /// Only set when [`Self::is_available`] is `false`.
     pub error_code: Option<String>,
 }
diff --git a/plugins/cli/CHANGELOG.md b/plugins/cli/CHANGELOG.md
index d05504c4b..2978e842a 100644
--- a/plugins/cli/CHANGELOG.md
+++ b/plugins/cli/CHANGELOG.md
@@ -8,6 +8,12 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.5.0]
+
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
 ## \[2.4.1]
 
 - [`93426f85`](https://github.com/tauri-apps/plugins-workspace/commit/93426f85120f49beb9f40222bff45185a32d54a9) Fixed an issue that caused docs.rs builds to fail. No user facing changes.
diff --git a/plugins/cli/guest-js/index.ts b/plugins/cli/guest-js/index.ts
index 7a7f4acf3..153a4ffe2 100644
--- a/plugins/cli/guest-js/index.ts
+++ b/plugins/cli/guest-js/index.ts
@@ -11,6 +11,8 @@
 import { invoke } from '@tauri-apps/api/core'
 
 /**
+ * The resolution of a single CLI argument match.
+ *
  * @since 2.0.0
  */
 interface ArgMatch {
@@ -27,18 +29,26 @@ interface ArgMatch {
 }
 
 /**
+ * The result of matching a subcommand of the CLI definition.
+ *
  * @since 2.0.0
  */
 interface SubcommandMatch {
+  /** The name of the matched subcommand. */
   name: string
+  /** The argument matches of the subcommand, resolved the same way as the parent command's matches. */
   matches: CliMatches
 }
 
 /**
+ * The resolved matches of the CLI arguments and, if any, its matched subcommand.
+ *
  * @since 2.0.0
  */
 interface CliMatches {
+  /** The matched arguments, keyed by argument name. */
   args: Record<string, ArgMatch>
+  /** The matched subcommand, or `null` if no subcommand was invoked. */
   subcommand: SubcommandMatch | null
 }
 
@@ -61,6 +71,7 @@ interface CliMatches {
  * }
  * ```
  *
+ * @returns A promise resolving to the parsed CLI matches.
  * @since 2.0.0
  */
 async function getMatches(): Promise<CliMatches> {
diff --git a/plugins/cli/src/error.rs b/plugins/cli/src/error.rs
index 2b5e16029..66455352a 100644
--- a/plugins/cli/src/error.rs
+++ b/plugins/cli/src/error.rs
@@ -4,8 +4,11 @@
 
 use serde::{Serialize, Serializer};
 
+/// Errors that can be returned from the CLI plugin's commands.
 #[derive(Debug, thiserror::Error)]
 pub enum Error {
+    /// Parsing the process arguments against the CLI definition in `tauri.conf.json` failed,
+    /// e.g. because a required argument is missing or an unknown flag was passed.
     #[error("failed to parse arguments: {0}")]
     ParseCli(#[from] clap::Error),
 }
@@ -19,4 +22,5 @@ impl Serialize for Error {
     }
 }
 
+/// Alias for a [`std::result::Result`] with the error type [`Error`].
 pub type Result<T> = std::result::Result<T, Error>;
diff --git a/plugins/cli/src/lib.rs b/plugins/cli/src/lib.rs
index e927a348b..7857b0518 100644
--- a/plugins/cli/src/lib.rs
+++ b/plugins/cli/src/lib.rs
@@ -12,8 +12,8 @@
 )]
 
 use tauri::{
-    plugin::{Builder, PluginApi, TauriPlugin},
     AppHandle, Manager, Runtime, State,
+    plugin::{Builder, PluginApi, TauriPlugin},
 };
 
 mod config;
@@ -25,19 +25,27 @@ use config::{Arg, Config};
 pub use error::{Error, Result};
 pub use parser::{ArgData, Matches, SubcommandMatches};
 
+/// Access to the CLI APIs, managed by the app once the plugin is initialized.
 pub struct Cli<R: Runtime>(PluginApi<R, Config>);
 
 impl<R: Runtime> Cli<R> {
+    /// Parses the arguments the current process was started with against the CLI definition
+    /// configured under `plugins.cli` in `tauri.conf.json` and returns the resolved
+    /// [`parser::Matches`]. Errors if the arguments do not satisfy the CLI definition.
     pub fn matches(&self) -> Result<parser::Matches> {
         parser::get_matches(self.0.config(), self.0.app().package_info(), None)
     }
 
+    /// Same as [`Self::matches`], but parses the given `args` instead of the current process'
+    /// arguments. Errors if `args` does not satisfy the CLI definition.
     pub fn matches_from(&self, args: Vec<String>) -> Result<parser::Matches> {
         parser::get_matches(self.0.config(), self.0.app().package_info(), Some(args))
     }
 }
 
+/// Extension trait to access the CLI APIs.
 pub trait CliExt<R: Runtime> {
+    /// Returns the [`Cli`] instance managed by the app.
     fn cli(&self) -> &Cli<R>;
 }
 
@@ -52,6 +60,8 @@ fn cli_matches<R: Runtime>(_app: AppHandle<R>, cli: State<'_, Cli<R>>) -> Result
     cli.matches()
 }
 
+/// Initializes the plugin, reading the CLI definition from the `plugins.cli` object in
+/// `tauri.conf.json`.
 pub fn init<R: Runtime>() -> TauriPlugin<R, Config> {
     Builder::new("cli")
         .invoke_handler(tauri::generate_handler![cli_matches])
diff --git a/plugins/cli/src/parser.rs b/plugins/cli/src/parser.rs
index 466885f14..ed94f0858 100644
--- a/plugins/cli/src/parser.rs
+++ b/plugins/cli/src/parser.rs
@@ -3,9 +3,9 @@
 // SPDX-License-Identifier: MIT
 
 use clap::{
+    Arg as ClapArg, ArgAction, ArgMatches, Command,
     builder::{PossibleValue, PossibleValuesParser},
     error::ErrorKind,
-    Arg as ClapArg, ArgAction, ArgMatches, Command,
 };
 use serde::Serialize;
 use serde_json::Value;
@@ -134,17 +134,16 @@ fn get_matches_internal(config: &Config, matches: &ArgMatches) -> Matches {
     let mut cli_matches = Matches::default();
     map_matches(config, matches, &mut cli_matches);
 
-    if let Some((subcommand_name, subcommand_matches)) = matches.subcommand() {
-        if let Some(subcommand_config) = config
+    if let Some((subcommand_name, subcommand_matches)) = matches.subcommand()
+        && let Some(subcommand_config) = config
             .subcommands
             .as_ref()
             .and_then(|s| s.get(subcommand_name))
-        {
-            cli_matches.set_subcommand(
-                subcommand_name.to_string(),
-                get_matches_internal(subcommand_config, subcommand_matches),
-            );
-        }
+    {
+        cli_matches.set_subcommand(
+            subcommand_name.to_string(),
+            get_matches_internal(subcommand_config, subcommand_matches),
+        );
     }
 
     cli_matches
diff --git a/plugins/clipboard-manager/CHANGELOG.md b/plugins/clipboard-manager/CHANGELOG.md
index c5522f39e..dcd62acaa 100644
--- a/plugins/clipboard-manager/CHANGELOG.md
+++ b/plugins/clipboard-manager/CHANGELOG.md
@@ -8,6 +8,12 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.4.0]
+
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
 ## [2.3.3]
 
 - [`db9c5998`](https://github.com/tauri-apps/plugins-workspace/commit/db9c5998feff9384f9cbbefcbe0d45937c00a1fc) ([#3531](https://github.com/tauri-apps/plugins-workspace/pull/3531) by [@Legend-Master](https://github.com/tauri-apps/plugins-workspace/../../Legend-Master)) Fix missing `consumer-rules.pro` on Gradle v9.
@@ -158,3 +164,8 @@
 ## \[2.0.0-alpha.0]
 
 - [`717ae67`](https://github.com/tauri-apps/plugins-workspace/commit/717ae670978feb4492fac1f295998b93f2b9347f)([#371](https://github.com/tauri-apps/plugins-workspace/pull/371)) First v2 alpha release!
+55](https://github.com/tauri-apps/plugins-workspace/pull/555)) Update to alpha.11.
+
+## \[2.0.0-alpha.0]
+
+- [`717ae67`](https://github.com/tauri-apps/plugins-workspace/commit/717ae670978feb4492fac1f295998b93f2b9347f)([#371](https://github.com/tauri-apps/plugins-workspace/pull/371)) First v2 alpha release!
diff --git a/plugins/clipboard-manager/android/build.gradle.kts b/plugins/clipboard-manager/android/build.gradle.kts
index e3640d3f9..87118e823 100644
--- a/plugins/clipboard-manager/android/build.gradle.kts
+++ b/plugins/clipboard-manager/android/build.gradle.kts
@@ -1,3 +1,5 @@
+import org.jetbrains.kotlin.gradle.dsl.JvmTarget
+
 plugins {
     id("com.android.library")
     id("org.jetbrains.kotlin.android")
@@ -18,8 +20,11 @@ android {
         sourceCompatibility = JavaVersion.VERSION_1_8
         targetCompatibility = JavaVersion.VERSION_1_8
     }
-    kotlinOptions {
-        jvmTarget = "1.8"
+}
+
+kotlin {
+    compilerOptions {
+        jvmTarget = JvmTarget.JVM_1_8
     }
 }
 
diff --git a/plugins/clipboard-manager/guest-js/index.ts b/plugins/clipboard-manager/guest-js/index.ts
index a37bbfab1..bea789ee1 100644
--- a/plugins/clipboard-manager/guest-js/index.ts
+++ b/plugins/clipboard-manager/guest-js/index.ts
@@ -20,6 +20,9 @@ import { Image, transformImage } from '@tauri-apps/api/image'
  * assert(await readText(), 'Tauri is awesome!');
  * ```
  *
+ * @param text The plain text to write to the clipboard.
+ * @param opts Additional configuration for the write operation.
+ * @param opts.label A label describing the copied content. **Android only**, ignored on other platforms.
  * @returns A promise indicating the success or failure of the operation.
  *
  * @since 2.0.0
@@ -41,6 +44,7 @@ async function writeText(
  * import { readText } from '@tauri-apps/plugin-clipboard-manager';
  * const clipboardText = await readText();
  * ```
+ * @returns A promise resolving to the clipboard contents as plain text.
  * @since 2.0.0
  */
 async function readText(): Promise<string> {
@@ -67,6 +71,7 @@ async function readText(): Promise<string> {
  * await writeImage(buffer);
  * ```
  *
+ * @param image The image to write, as a path, raw RGBA bytes, or an existing {@link Image}.
  * @returns A promise indicating the success or failure of the operation.
  *
  * @since 2.0.0
@@ -94,6 +99,7 @@ async function writeImage(
  * const blob = new Blob([await clipboardImage.rgba()], { type: 'image' })
  * const url = URL.createObjectURL(blob)
  * ```
+ * @returns A promise resolving to the clipboard contents as an {@link Image}.
  * @since 2.0.0
  */
 async function readImage(): Promise<Image> {
@@ -119,6 +125,8 @@ async function readImage(): Promise<Image> {
  * assert(await readText(), '<h1>Tauri is awesome!</h1>');
  * ```
  *
+ * @param html The HTML markup to write to the clipboard.
+ * @param altText The plain text fallback written alongside the HTML, used by targets that cannot render it.
  * @returns A promise indicating the success or failure of the operation.
  *
  * @since 2.0.0
diff --git a/plugins/clipboard-manager/src/commands.rs b/plugins/clipboard-manager/src/commands.rs
index a8dd94ac0..a903e9844 100644
--- a/plugins/clipboard-manager/src/commands.rs
+++ b/plugins/clipboard-manager/src/commands.rs
@@ -2,7 +2,7 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
-use tauri::{command, image::JsImage, AppHandle, Manager, ResourceId, Runtime, State, Webview};
+use tauri::{AppHandle, Manager, ResourceId, Runtime, State, Webview, command, image::JsImage};
 
 use crate::{Clipboard, Result};
 
diff --git a/plugins/clipboard-manager/src/desktop.rs b/plugins/clipboard-manager/src/desktop.rs
index f3570cc0c..6cb1ca9b7 100644
--- a/plugins/clipboard-manager/src/desktop.rs
+++ b/plugins/clipboard-manager/src/desktop.rs
@@ -4,7 +4,7 @@
 
 use arboard::ImageData;
 use serde::de::DeserializeOwned;
-use tauri::{image::Image, plugin::PluginApi, AppHandle, Runtime};
+use tauri::{AppHandle, Runtime, image::Image, plugin::PluginApi};
 
 use std::{borrow::Cow, sync::Mutex};
 
@@ -28,6 +28,12 @@ pub struct Clipboard<R: Runtime> {
 }
 
 impl<R: Runtime> Clipboard<R> {
+    /// Writes plain text to the system clipboard.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`crate::Error::Clipboard`] if the clipboard could not be initialized or the
+    /// underlying [`arboard`] operation fails.
     pub fn write_text<'a, T: Into<Cow<'a, str>>>(&self, text: T) -> crate::Result<()> {
         match &self.clipboard {
             Ok(clipboard) => clipboard
@@ -41,6 +47,12 @@ impl<R: Runtime> Clipboard<R> {
         }
     }
 
+    /// Writes an image to the system clipboard as RGBA data.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`crate::Error::Clipboard`] if the clipboard could not be initialized or the
+    /// underlying [`arboard`] operation fails.
     pub fn write_image(&self, image: &Image<'_>) -> crate::Result<()> {
         match &self.clipboard {
             Ok(clipboard) => clipboard
@@ -69,6 +81,13 @@ impl<R: Runtime> Clipboard<R> {
         }
     }
 
+    /// Writes HTML to the system clipboard, with an optional plain text fallback for targets
+    /// that cannot render it.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`crate::Error::Clipboard`] if the clipboard could not be initialized or the
+    /// underlying [`arboard`] operation fails.
     pub fn write_html<'a, T: Into<Cow<'a, str>>>(
         &self,
         html: T,
@@ -86,6 +105,12 @@ impl<R: Runtime> Clipboard<R> {
         }
     }
 
+    /// Clears the system clipboard.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`crate::Error::Clipboard`] if the clipboard could not be initialized or the
+    /// underlying [`arboard`] operation fails.
     pub fn clear(&self) -> crate::Result<()> {
         match &self.clipboard {
             Ok(clipboard) => clipboard
diff --git a/plugins/clipboard-manager/src/error.rs b/plugins/clipboard-manager/src/error.rs
index 1b8cf482b..e945f9874 100644
--- a/plugins/clipboard-manager/src/error.rs
+++ b/plugins/clipboard-manager/src/error.rs
@@ -2,17 +2,22 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
-use serde::{ser::Serializer, Serialize};
+use serde::{Serialize, ser::Serializer};
 
+/// Alias for `Result<T, Error>` used throughout this crate.
 pub type Result<T> = std::result::Result<T, Error>;
 
+/// Errors that can occur while interacting with the system clipboard.
 #[derive(Debug, thiserror::Error)]
 pub enum Error {
+    /// Forwarding a request to, or receiving a response from, the mobile plugin failed.
     #[cfg(mobile)]
     #[error(transparent)]
     PluginInvoke(#[from] tauri::plugin::mobile::PluginInvokeError),
+    /// The underlying clipboard operation failed, or the operation is not supported on this platform.
     #[error("{0}")]
     Clipboard(String),
+    /// An error forwarded from the Tauri core.
     #[error(transparent)]
     Tauri(#[from] tauri::Error),
 }
diff --git a/plugins/clipboard-manager/src/lib.rs b/plugins/clipboard-manager/src/lib.rs
index 0cbb4e41e..024f6f593 100644
--- a/plugins/clipboard-manager/src/lib.rs
+++ b/plugins/clipboard-manager/src/lib.rs
@@ -10,8 +10,8 @@
 )]
 
 use tauri::{
+    Manager, Runtime,
     plugin::{Builder, TauriPlugin},
-    Manager, RunEvent, Runtime,
 };
 
 #[cfg(desktop)]
@@ -31,6 +31,7 @@ pub use mobile::Clipboard;
 
 /// Extensions to [`tauri::App`], [`tauri::AppHandle`], [`tauri::WebviewWindow`], [`tauri::Webview`] and [`tauri::Window`] to access the clipboard APIs.
 pub trait ClipboardExt<R: Runtime> {
+    /// Returns a handle to the [`Clipboard`] APIs.
     fn clipboard(&self) -> &Clipboard<R>;
 }
 
@@ -61,7 +62,7 @@ pub fn init<R: Runtime>() -> TauriPlugin<R> {
         })
         .on_event(|_app, _event| {
             #[cfg(desktop)]
-            if let RunEvent::Exit = _event {
+            if let tauri::RunEvent::Exit = _event {
                 _app.clipboard().cleanup();
             }
         })
diff --git a/plugins/clipboard-manager/src/mobile.rs b/plugins/clipboard-manager/src/mobile.rs
index 72d5f6e06..bb71b6ce7 100644
--- a/plugins/clipboard-manager/src/mobile.rs
+++ b/plugins/clipboard-manager/src/mobile.rs
@@ -5,9 +5,9 @@
 use serde::de::DeserializeOwned;
 use serde::{Deserialize, Serialize};
 use tauri::{
+    AppHandle, Runtime,
     image::Image,
     plugin::{PluginApi, PluginHandle},
-    AppHandle, Runtime,
 };
 
 use std::borrow::Cow;
@@ -34,6 +34,11 @@ pub fn init<R: Runtime, C: DeserializeOwned>(
 pub struct Clipboard<R: Runtime>(PluginHandle<R>);
 
 impl<R: Runtime> Clipboard<R> {
+    /// Writes plain text to the system clipboard, without a label.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`crate::Error::PluginInvoke`] if the underlying mobile plugin call fails.
     pub fn write_text<'a, T: Into<Cow<'a, str>>>(&self, text: T) -> crate::Result<()> {
         let text = text.into().to_string();
         self.0
@@ -41,6 +46,13 @@ impl<R: Runtime> Clipboard<R> {
             .map_err(Into::into)
     }
 
+    /// Writes plain text to the system clipboard along with a label describing the content.
+    ///
+    /// The label is only used on Android (it becomes the `ClipData` label); iOS ignores it.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`crate::Error::PluginInvoke`] if the underlying mobile plugin call fails.
     pub fn write_text_with_label<'a, T: Into<Cow<'a, str>>>(
         &self,
         text: T,
@@ -59,12 +71,22 @@ impl<R: Runtime> Clipboard<R> {
             .map_err(Into::into)
     }
 
+    /// Not supported on mobile.
+    ///
+    /// # Errors
+    ///
+    /// Always returns [`crate::Error::Clipboard`].
     pub fn write_image(&self, _image: &Image<'_>) -> crate::Result<()> {
         Err(crate::Error::Clipboard(
             "Unsupported on this platform".to_string(),
         ))
     }
 
+    /// Reads the system clipboard as plain text.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`crate::Error::PluginInvoke`] if the underlying mobile plugin call fails.
     pub fn read_text(&self) -> crate::Result<String> {
         self.0
             .run_mobile_plugin("readText", ())
@@ -74,6 +96,11 @@ impl<R: Runtime> Clipboard<R> {
             .map_err(Into::into)
     }
 
+    /// Not supported on mobile.
+    ///
+    /// # Errors
+    ///
+    /// Always returns [`crate::Error::Clipboard`].
     pub fn read_image(&self) -> crate::Result<Image<'_>> {
         Err(crate::Error::Clipboard(
             "Unsupported on this platform".to_string(),
@@ -81,6 +108,11 @@ impl<R: Runtime> Clipboard<R> {
     }
 
     // Treat HTML as unsupported on mobile until tested
+    /// Not supported on mobile.
+    ///
+    /// # Errors
+    ///
+    /// Always returns [`crate::Error::Clipboard`].
     pub fn write_html<'a, T: Into<Cow<'a, str>>>(
         &self,
         _html: T,
@@ -91,6 +123,14 @@ impl<R: Runtime> Clipboard<R> {
         ))
     }
 
+    /// Clears the system clipboard.
+    ///
+    /// On Android this only works on SDK 28 and above; on older versions the clipboard is
+    /// instead overwritten with an empty string.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`crate::Error::PluginInvoke`] if the underlying mobile plugin call fails.
     pub fn clear(&self) -> crate::Result<()> {
         self.0.run_mobile_plugin("clear", ()).map_err(Into::into)
     }
diff --git a/plugins/deep-link/CHANGELOG.md b/plugins/deep-link/CHANGELOG.md
index 45926fbfc..8b20a71cc 100644
--- a/plugins/deep-link/CHANGELOG.md
+++ b/plugins/deep-link/CHANGELOG.md
@@ -8,6 +8,12 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.5.0]
+
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
 ## [2.4.10]
 
 - [`db9c5998`](https://github.com/tauri-apps/plugins-workspace/commit/db9c5998feff9384f9cbbefcbe0d45937c00a1fc) ([#3531](https://github.com/tauri-apps/plugins-workspace/pull/3531) by [@Legend-Master](https://github.com/tauri-apps/plugins-workspace/../../Legend-Master)) Fix missing `consumer-rules.pro` on Gradle v9.
@@ -209,3 +215,9 @@
   ]\(https://github.com/tauri-apps/plugins-workspace/commit/eccd6f977af7629255b6f5a5205666c9079a86ed)([#504](https://github.com/tauri-apps/plugins-workspace/pull/504)) Initial release.
   commit/eccd6f977af7629255b6f5a5205666c9079a86ed)([#504](https://github.com/tauri-apps/plugins-workspace/pull/504)) Initial release.
   ithub.com/tauri-apps/plugins-workspace/pull/504)) Initial release.
+55b6f5a5205666c9079a86ed)([#504](https://github.com/tauri-apps/plugins-workspace/pull/504)) Initial release.
+  commit/eccd6f977af7629255b6f5a5205666c9079a86ed)([#504](https://github.com/tauri-apps/plugins-workspace/pull/504)) Initial release.
+  ithub.com/tauri-apps/plugins-workspace/pull/504)) Initial release.
+  ]\(https://github.com/tauri-apps/plugins-workspace/commit/eccd6f977af7629255b6f5a5205666c9079a86ed)([#504](https://github.com/tauri-apps/plugins-workspace/pull/504)) Initial release.
+  commit/eccd6f977af7629255b6f5a5205666c9079a86ed)([#504](https://github.com/tauri-apps/plugins-workspace/pull/504)) Initial release.
+  ithub.com/tauri-apps/plugins-workspace/pull/504)) Initial release.
diff --git a/plugins/deep-link/android/build.gradle.kts b/plugins/deep-link/android/build.gradle.kts
index e3d7a455f..828f5c391 100644
--- a/plugins/deep-link/android/build.gradle.kts
+++ b/plugins/deep-link/android/build.gradle.kts
@@ -1,3 +1,5 @@
+import org.jetbrains.kotlin.gradle.dsl.JvmTarget
+
 plugins {
     id("com.android.library")
     id("org.jetbrains.kotlin.android")
@@ -18,8 +20,11 @@ android {
         sourceCompatibility = JavaVersion.VERSION_1_8
         targetCompatibility = JavaVersion.VERSION_1_8
     }
-    kotlinOptions {
-        jvmTarget = "1.8"
+}
+
+kotlin {
+    compilerOptions {
+        jvmTarget = JvmTarget.JVM_1_8
     }
 }
 
diff --git a/plugins/deep-link/examples/app/CHANGELOG.md b/plugins/deep-link/examples/app/CHANGELOG.md
index 63ec2198a..2e990d805 100644
--- a/plugins/deep-link/examples/app/CHANGELOG.md
+++ b/plugins/deep-link/examples/app/CHANGELOG.md
@@ -12,6 +12,12 @@
 
 - Upgraded to `deep-link-js@3.0.0-alpha.0`
 
+## [2.2.14]
+
+### Dependencies
+
+- Upgraded to `deep-link-js@2.5.0`
+
 ## [2.2.13]
 
 ### Dependencies
diff --git a/plugins/deep-link/guest-js/index.ts b/plugins/deep-link/guest-js/index.ts
index e766a4547..41b2fe882 100644
--- a/plugins/deep-link/guest-js/index.ts
+++ b/plugins/deep-link/guest-js/index.ts
@@ -2,6 +2,12 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+/**
+ * Set your Tauri application as the default handler for a URL, or check which URL(s) it was opened with.
+ *
+ * @module
+ */
+
 import { invoke } from '@tauri-apps/api/core'
 import { type UnlistenFn, listen } from '@tauri-apps/api/event'
 
@@ -17,9 +23,10 @@ import { type UnlistenFn, listen } from '@tauri-apps/api/event'
  * #### Platform-specific
  *
  * - **Windows / Linux:** This function reads the command line arguments and checks if there's only one value, which must be an URL with scheme matching one of the configured values.
- *   Note that you must manually check the arguments when registering deep link schemes dynamically with [`Self::register`].
+ *   Note that you must manually check the arguments when registering deep link schemes dynamically with {@link register}.
  *   Additionally, the deep link might have been provided as a CLI argument so you should check if its format matches what you expect.
  *
+ * @returns A promise resolving to the list of URLs that triggered the deep link, or `null` if the app was not started via a deep link.
  * @since 2.0.0
  */
 export async function getCurrent(): Promise<string[] | null> {
@@ -41,6 +48,7 @@ export async function getCurrent(): Promise<string[] | null> {
  *
  * - **macOS / Android / iOS:** Unsupported.
  *
+ * @returns A promise that resolves once the protocol has been registered.
  * @since 2.0.0
  */
 export async function register(protocol: string): Promise<null> {
@@ -60,8 +68,11 @@ export async function register(protocol: string): Promise<null> {
  *
  * #### Platform-specific
  *
- * - **macOS / Linux / Android / iOS:** Unsupported.
+ * - **Windows:** Requires admin rights if the protocol is registered on the local machine (this can happen when registered from the NSIS installer when the install mode is set to both or per machine).
+ * - **Linux:** Can only unregister the scheme if it was initially registered with {@link register}. May not work on older distros.
+ * - **macOS / Android / iOS:** Unsupported.
  *
+ * @returns A promise that resolves once the protocol has been unregistered.
  * @since 2.0.0
  */
 export async function unregister(protocol: string): Promise<null> {
@@ -83,6 +94,7 @@ export async function unregister(protocol: string): Promise<null> {
  *
  * - **macOS / Android / iOS:** Unsupported.
  *
+ * @returns A promise resolving to `true` if the app is the default handler for the protocol, `false` otherwise.
  * @since 2.0.0
  */
 export async function isRegistered(protocol: string): Promise<boolean> {
@@ -90,9 +102,9 @@ export async function isRegistered(protocol: string): Promise<boolean> {
 }
 
 /**
- * Helper function for the `deep-link://new-url` event to run a function each time the protocol is triggered while the app is running. Use `getCurrent` on app load to check whether your app was started via a deep link.
+ * Helper function for the `deep-link://new-url` event to run a function each time the protocol is triggered while the app is running. Use {@link getCurrent} on app load to check whether your app was started via a deep link.
  *
- * @param protocol The name of the protocol without `://`.
+ * @param handler The function to call with the list of URLs the app was requested to open, every time this happens while the app is running.
  *
  * @example
  * ```typescript
@@ -104,6 +116,7 @@ export async function isRegistered(protocol: string): Promise<boolean> {
  *
  * - **Windows / Linux:** Unsupported without the single-instance plugin. The OS will spawn a new app instance passing the URL as a CLI argument.
  *
+ * @returns A promise resolving to a function that unregisters the event listener.
  * @since 2.0.0
  */
 export async function onOpenUrl(
diff --git a/plugins/deep-link/src/commands.rs b/plugins/deep-link/src/commands.rs
index 078adfb1e..31d852f9c 100644
--- a/plugins/deep-link/src/commands.rs
+++ b/plugins/deep-link/src/commands.rs
@@ -2,7 +2,7 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
-use tauri::{command, AppHandle, Runtime, State, Window};
+use tauri::{AppHandle, Runtime, State, Window, command};
 
 use crate::{DeepLink, Result};
 
diff --git a/plugins/deep-link/src/config.rs b/plugins/deep-link/src/config.rs
index 49de68e3d..e4465719b 100644
--- a/plugins/deep-link/src/config.rs
+++ b/plugins/deep-link/src/config.rs
@@ -50,7 +50,9 @@ impl AssociatedDomain {
             }
             if self.scheme.iter().any(|s| s == "http") && !self.scheme.iter().any(|s| s == "https")
             {
-                eprintln!("Warning: AppLink uses only 'http' — allowed on Android but not secure for production.");
+                eprintln!(
+                    "Warning: AppLink uses only 'http' — allowed on Android but not secure for production."
+                );
             }
         }
 
@@ -68,12 +70,12 @@ where
     D: Deserializer<'de>,
 {
     let opt = Option::<String>::deserialize(deserializer)?;
-    if let Some(ref host) = opt {
-        if let Some((scheme, _)) = host.split_once("://") {
-            return Err(serde::de::Error::custom(format!(
-                "host `{host}` cannot start with a scheme, please remove the `{scheme}://` prefix"
-            )));
-        }
+    if let Some(ref host) = opt
+        && let Some((scheme, _)) = host.split_once("://")
+    {
+        return Err(serde::de::Error::custom(format!(
+            "host `{host}` cannot start with a scheme, please remove the `{scheme}://` prefix"
+        )));
     }
     Ok(opt)
 }
diff --git a/plugins/deep-link/src/error.rs b/plugins/deep-link/src/error.rs
index 1ef7aa6ba..6dbe237ee 100644
--- a/plugins/deep-link/src/error.rs
+++ b/plugins/deep-link/src/error.rs
@@ -2,24 +2,35 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
-use serde::{ser::Serializer, Serialize};
+use serde::{Serialize, ser::Serializer};
 
+/// Alias for a [`Result`](std::result::Result) with the error type [`Error`].
 pub type Result<T> = std::result::Result<T, Error>;
 
+/// The error type for this plugin.
 #[derive(Debug, thiserror::Error)]
 pub enum Error {
+    /// The requested operation (usually registering or unregistering a protocol scheme at
+    /// runtime) is not supported on the current platform.
     #[error("unsupported platform")]
     UnsupportedPlatform,
+    /// Transparent wrapper around an [`std::io::Error`].
     #[error(transparent)]
     Io(#[from] std::io::Error),
+    /// Transparent wrapper around a [`tauri::Error`].
     #[error(transparent)]
     Tauri(#[from] tauri::Error),
+    /// Transparent wrapper around a [`windows_result::Error`]. Only used on Windows.
     #[cfg(target_os = "windows")]
     #[error(transparent)]
     Windows(#[from] windows_result::Error),
+    /// Transparent wrapper around an [`ini::Error`], returned when reading or writing the
+    /// `.desktop` file used to register a protocol scheme. Only used on Linux.
     #[cfg(target_os = "linux")]
     #[error(transparent)]
     Ini(#[from] ini::Error),
+    /// Transparent wrapper around an [`ini::ParseError`], returned when parsing the
+    /// `.desktop` file used to register a protocol scheme. Only used on Linux.
     #[cfg(target_os = "linux")]
     #[error(transparent)]
     ParseIni(#[from] ini::ParseError),
diff --git a/plugins/deep-link/src/lib.rs b/plugins/deep-link/src/lib.rs
index 574a79881..272dcb529 100644
--- a/plugins/deep-link/src/lib.rs
+++ b/plugins/deep-link/src/lib.rs
@@ -2,9 +2,17 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+//! Set your Tauri application as the default handler for a URL, or check which URL(s) it was
+//! opened with.
+//!
+//! On Windows and Linux, protocol schemes can additionally be registered and unregistered at
+//! runtime with [`DeepLink::register`] and [`DeepLink::unregister`]. On macOS, Android and iOS
+//! the schemes declared in the Tauri configuration are registered at build time instead, so
+//! calling those methods returns [`Error::UnsupportedPlatform`].
+
 use tauri::{
-    plugin::{Builder, PluginApi, TauriPlugin},
     AppHandle, EventId, Listener, Manager, Runtime,
+    plugin::{Builder, PluginApi, TauriPlugin},
 };
 
 mod commands;
@@ -25,8 +33,8 @@ fn init_deep_link<R: Runtime>(
         let _api = api;
 
         use tauri::{
-            ipc::{Channel, InvokeResponseBody},
             Emitter,
+            ipc::{Channel, InvokeResponseBody},
         };
 
         let handle = _api.register_android_plugin(PLUGIN_IDENTIFIER, "DeepLinkPlugin")?;
@@ -57,10 +65,10 @@ fn init_deep_link<R: Runtime>(
             },
         )?;
 
-        return Ok(DeepLink {
+        Ok(DeepLink {
             app: app.clone(),
             plugin_handle: handle,
-        });
+        })
     }
 
     #[cfg(target_os = "ios")]
@@ -86,7 +94,7 @@ fn init_deep_link<R: Runtime>(
 
 #[cfg(target_os = "android")]
 mod imp {
-    use tauri::{ipc::Channel, plugin::PluginHandle, AppHandle, Runtime};
+    use tauri::{AppHandle, Runtime, ipc::Channel, plugin::PluginHandle};
 
     use serde::{Deserialize, Serialize};
 
@@ -140,7 +148,7 @@ mod imp {
         ///
         /// ## Platform-specific:
         ///
-        /// - **Linux**: Can only unregister the scheme if it was initially registered with [`register`](`Self::register`). May not work on older distros.
+        /// - **Linux**: Can only unregister the scheme if it was initially registered with [`register`](`Self::register`). Needs the `update-desktop-database` command available on the system. May not work on older distros.
         /// - **macOS / Android / iOS**: Unsupported, will return [`Error::UnsupportedPlatform`](`crate::Error::UnsupportedPlatform`).
         pub fn unregister<S: AsRef<str>>(&self, _protocol: S) -> crate::Result<()> {
             Err(crate::Error::UnsupportedPlatform)
@@ -164,7 +172,7 @@ mod imp {
     use std::sync::Mutex;
     #[cfg(target_os = "linux")]
     use std::{
-        fs::{create_dir_all, File},
+        fs::{File, create_dir_all},
         io::Write,
         process::Command,
     };
@@ -215,7 +223,9 @@ mod imp {
                         current.replace(vec![url.clone()]);
                         let _ = self.app.emit("deep-link://new-url", vec![url]);
                     } else if cfg!(debug_assertions) {
-                        tracing::warn!("argument {url} does not match any configured deep link scheme; skipping it");
+                        tracing::warn!(
+                            "argument {url} does not match any configured deep link scheme; skipping it"
+                        );
                     }
                 }
             }
@@ -373,7 +383,7 @@ mod imp {
         ///
         /// - **Windows**: Requires admin rights if the protocol is registered on local machine
         ///   (this can happen when registered from the NSIS installer when the install mode is set to both or per machine)
-        /// - **Linux**: Can only unregister the scheme if it was initially registered with [`register`](`Self::register`). May not work on older distros.
+        /// - **Linux**: Can only unregister the scheme if it was initially registered with [`register`](`Self::register`). Refreshes the desktop database with the `update-desktop-database` command; without it, [`is_registered`](`Self::is_registered`) may keep returning `true`. May not work on older distros.
         /// - **macOS / Android / iOS**: Unsupported, will return [`Error::UnsupportedPlatform`](`crate::Error::UnsupportedPlatform`).
         pub fn unregister<S: AsRef<str>>(&self, _protocol: S) -> crate::Result<()> {
             #[cfg(windows)]
@@ -391,9 +401,6 @@ mod imp {
 
             #[cfg(target_os = "linux")]
             {
-                let mimeapps_path = self.app.path().config_dir()?.join("mimeapps.list");
-                let mut mimeapps = ini::Ini::load_from_file(&mimeapps_path)?;
-
                 let file_name = format!(
                     "{}-handler.desktop",
                     tauri::utils::platform::current_exe()?
@@ -401,16 +408,55 @@ mod imp {
                         .unwrap()
                         .to_string_lossy()
                 );
+                let mime_type = format!("x-scheme-handler/{}", _protocol.as_ref());
 
-                if let Some(section) = mimeapps.section_mut(Some("Default Applications")) {
-                    let scheme = format!("x-scheme-handler/{}", _protocol.as_ref());
-
-                    if section.get(&scheme).unwrap_or_default() == file_name {
-                        section.remove(scheme);
+                // stop being the default handler
+                let mimeapps_path = self.app.path().config_dir()?.join("mimeapps.list");
+                if mimeapps_path.exists() {
+                    let mut mimeapps = ini::Ini::load_from_file(&mimeapps_path)?;
+                    if let Some(section) = mimeapps.section_mut(Some("Default Applications"))
+                        && section.get(&mime_type).unwrap_or_default() == file_name
+                    {
+                        section.remove(&mime_type);
                     }
+                    mimeapps.write_to_file(&mimeapps_path)?;
                 }
 
-                mimeapps.write_to_file(mimeapps_path)?;
+                // Stop declaring the scheme in the handler's `.desktop` file too: the desktop
+                // database indexes it, and with no default set `xdg-mime` falls back to that
+                // index, so the app would otherwise still be the handler.
+                let applications = self.app.path().data_dir()?.join("applications");
+                let desktop_file_path = applications.join(&file_name);
+                // Only the `MimeType` key is touched: the file may carry other changes.
+                if let Ok(mut desktop_file) = ini::Ini::load_from_file(&desktop_file_path) {
+                    if let Some(section) = desktop_file.section_mut(Some("Desktop Entry")) {
+                        let mime_types = section
+                            .get("MimeType")
+                            .unwrap_or_default()
+                            .split(';')
+                            .filter(|mime| !mime.is_empty() && *mime != mime_type)
+                            .map(ToString::to_string)
+                            .collect::<Vec<_>>();
+                        if mime_types.is_empty() {
+                            section.remove("MimeType");
+                        } else {
+                            section.insert("MimeType", mime_types.join(";"));
+                        }
+                    }
+                    desktop_file.write_to_file(&desktop_file_path)?;
+
+                    // Without the refreshed index `xdg-mime` may keep reporting the app as the
+                    // handler, but the scheme is unregistered as far as the app can tell, so a
+                    // missing command is not an error.
+                    if let Err(e) = Command::new("update-desktop-database")
+                        .arg(&applications)
+                        .status()
+                    {
+                        tracing::warn!(
+                            "Failed to run OS command `update-desktop-database`, the desktop database may still list the app as the `{mime_type}` handler: {e}"
+                        );
+                    }
+                }
 
                 Ok(())
             }
@@ -477,6 +523,7 @@ use url::Url;
 
 /// Extensions to [`tauri::App`], [`tauri::AppHandle`], [`tauri::WebviewWindow`], [`tauri::Webview`] and [`tauri::Window`] to access the deep-link APIs.
 pub trait DeepLinkExt<R: Runtime> {
+    /// Returns a reference to the [`DeepLink`] API.
     fn deep_link(&self) -> &DeepLink<R>;
 }
 
@@ -511,16 +558,14 @@ impl<R: Runtime> DeepLink<R> {
     ///
     /// Use `get_current` on app load to check whether your app was started via a deep link.
     pub fn on_open_url<F: Fn(OpenUrlEvent) + Send + Sync + 'static>(&self, f: F) -> EventId {
-        let event_id = self.app.listen("deep-link://new-url", move |event| {
+        self.app.listen("deep-link://new-url", move |event| {
             if let Ok(urls) = serde_json::from_str(event.payload()) {
                 f(OpenUrlEvent {
                     id: event.id(),
                     urls,
                 })
             }
-        });
-
-        event_id
+        })
     }
 }
 
diff --git a/plugins/dialog/CHANGELOG.md b/plugins/dialog/CHANGELOG.md
index 73031ce29..5bdb4cfea 100644
--- a/plugins/dialog/CHANGELOG.md
+++ b/plugins/dialog/CHANGELOG.md
@@ -16,6 +16,16 @@
 
 - Upgraded to `fs@3.0.0-alpha.0`
 
+## [2.8.0]
+
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
+### Dependencies
+
+- Upgraded to `fs-js@2.6.0`
+
 ## [2.7.3]
 
 - [`db9c5998`](https://github.com/tauri-apps/plugins-workspace/commit/db9c5998feff9384f9cbbefcbe0d45937c00a1fc) ([#3531](https://github.com/tauri-apps/plugins-workspace/pull/3531) by [@Legend-Master](https://github.com/tauri-apps/plugins-workspace/../../Legend-Master)) Fix missing `consumer-rules.pro` on Gradle v9.
@@ -355,4 +365,6 @@
 - [`717ae67`](https://github.com/tauri-apps/plugins-workspace/commit/717ae670978feb4492fac1f295998b93f2b9347f)([#371](https://github.com/tauri-apps/plugins-workspace/pull/371)) First v2 alpha release!
   d6e80b)([#545](https://github.com/tauri-apps/plugins-workspace/pull/545)) Fixes docs.rs build by enabling the `tauri/dox` feature flag.
 g.
+apps/plugins-workspace/commit/717ae670978feb4492fac1f295998b93f2b9347f)([#371](https://github.com/tauri-apps/plugins-workspace/pull/371)) First v2 alpha release!
+  d6e80b)([#545](https://github.com/tauri-apps/plugins-workspace/pull/545)) Fixes docs.rs build by enabling the `tauri/dox` feature flag.
 g.
diff --git a/plugins/dialog/android/build.gradle.kts b/plugins/dialog/android/build.gradle.kts
index 96abbf572..e4e4c957c 100644
--- a/plugins/dialog/android/build.gradle.kts
+++ b/plugins/dialog/android/build.gradle.kts
@@ -1,3 +1,5 @@
+import org.jetbrains.kotlin.gradle.dsl.JvmTarget
+
 plugins {
     id("com.android.library")
     id("org.jetbrains.kotlin.android")
@@ -18,8 +20,11 @@ android {
         sourceCompatibility = JavaVersion.VERSION_1_8
         targetCompatibility = JavaVersion.VERSION_1_8
     }
-    kotlinOptions {
-        jvmTarget = "1.8"
+}
+
+kotlin {
+    compilerOptions {
+        jvmTarget = JvmTarget.JVM_1_8
     }
 }
 
diff --git a/plugins/dialog/guest-js/index.ts b/plugins/dialog/guest-js/index.ts
index 52e57d63f..d0549679b 100644
--- a/plugins/dialog/guest-js/index.ts
+++ b/plugins/dialog/guest-js/index.ts
@@ -2,6 +2,12 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+/**
+ * Native system dialogs for opening and saving files, along with message, ask and confirm dialogs.
+ *
+ * @module
+ */
+
 import { invoke } from '@tauri-apps/api/core'
 
 /**
@@ -10,7 +16,7 @@ import { invoke } from '@tauri-apps/api/core'
  * @since 2.0.0
  */
 interface DialogFilter {
-  /** Filter name. */
+  /** The name of the filter, shown to the user in the dialog's filter selector. */
   name: string
   /**
    * Extensions to filter, without a `.` prefix.
@@ -171,11 +177,11 @@ type BanExcept<Allowed extends ButtonKey> = Partial<
  * @since 2.4.0
  */
 export type MessageDialogButtonsYesNoCancel = {
-  /** The Yes button. */
+  /** The label of the Yes button. */
   yes: string
-  /** The No button. */
+  /** The label of the No button. */
   no: string
-  /** The Cancel button. */
+  /** The label of the Cancel button. */
   cancel: string
 } & BanExcept<'yes' | 'no' | 'cancel'>
 
@@ -185,9 +191,9 @@ export type MessageDialogButtonsYesNoCancel = {
  * @since 2.4.0
  */
 export type MessageDialogButtonsOkCancel = {
-  /** The Ok button. */
+  /** The label of the Ok button. */
   ok: string
-  /** The Cancel button. */
+  /** The label of the Cancel button. */
   cancel: string
 } & BanExcept<'ok' | 'cancel'>
 
@@ -197,7 +203,7 @@ export type MessageDialogButtonsOkCancel = {
  * @since 2.4.0
  */
 export type MessageDialogButtonsOk = {
-  /** The Ok button. */
+  /** The label of the Ok button. */
   ok: string
 } & BanExcept<'ok'>
 
@@ -221,6 +227,8 @@ export type MessageDialogButtons =
   | MessageDialogCustomButtons
 
 /**
+ * Options for the message dialog.
+ *
  * @since 2.0.0
  */
 interface MessageDialogOptions {
@@ -276,6 +284,11 @@ function buttonsToRust(buttons: MessageDialogButtons | undefined) {
   return undefined
 }
 
+/**
+ * Options for the {@linkcode ask} and {@linkcode confirm} dialogs.
+ *
+ * @since 2.0.0
+ */
 interface ConfirmDialogOptions {
   /** The title of the dialog. Defaults to the app name. */
   title?: string
@@ -287,6 +300,12 @@ interface ConfirmDialogOptions {
   cancelLabel?: string
 }
 
+/**
+ * The return type of {@linkcode open}, derived from its options: a single path, an array of
+ * paths when {@linkcode OpenDialogOptions.multiple} is `true`, or `null` when the user cancels.
+ *
+ * @since 2.0.0
+ */
 type OpenDialogReturn<T extends OpenDialogOptions> = T['directory'] extends true
   ? T['multiple'] extends true
     ? string[] | null
@@ -343,6 +362,8 @@ type OpenDialogReturn<T extends OpenDialogOptions> = T['directory'] extends true
  * }
  * ```
  *
+ * @param options The dialog's options.
+ *
  * @returns A promise resolving to the selected path(s)
  *
  * @since 2.0.0
@@ -377,6 +398,8 @@ async function open<T extends OpenDialogOptions>(
  * });
  * ```
  *
+ * @param options The dialog's options.
+ *
  * @returns A promise resolving to the selected path.
  *
  * @since 2.0.0
diff --git a/plugins/dialog/guest-js/init.ts b/plugins/dialog/guest-js/init.ts
index 520a469a7..f272c1bd5 100644
--- a/plugins/dialog/guest-js/init.ts
+++ b/plugins/dialog/guest-js/init.ts
@@ -2,6 +2,13 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+/**
+ * Injected script that replaces `window.alert` and `window.confirm` with implementations backed
+ * by native dialogs.
+ *
+ * @module
+ */
+
 import { invoke } from '@tauri-apps/api/core'
 
 window.alert = function (message: string) {
diff --git a/plugins/dialog/src/commands.rs b/plugins/dialog/src/commands.rs
index 2564a1aa0..0117fefee 100644
--- a/plugins/dialog/src/commands.rs
+++ b/plugins/dialog/src/commands.rs
@@ -5,7 +5,7 @@
 use std::path::PathBuf;
 
 use serde::{Deserialize, Serialize};
-use tauri::{command, Manager, Runtime, State, Window};
+use tauri::{Manager, Runtime, State, Window, command};
 use tauri_plugin_fs::FsExt;
 
 use crate::{
@@ -171,13 +171,13 @@ pub(crate) async fn open<R: Runtime>(
                 )
             } else {
                 let folder = dialog_builder.blocking_pick_folder();
-                if let Some(folder) = &folder {
-                    if let Ok(path) = folder.clone().into_path() {
-                        if let Some(s) = window.try_fs_scope() {
-                            s.allow_directory(&path, options.recursive)?;
-                        }
-                        tauri_scope.allow_directory(&path, options.directory)?;
+                if let Some(folder) = &folder
+                    && let Ok(path) = folder.clone().into_path()
+                {
+                    if let Some(s) = window.try_fs_scope() {
+                        s.allow_directory(&path, options.recursive)?;
                     }
+                    tauri_scope.allow_directory(&path, options.directory)?;
                 }
                 OpenResponse::Folder(folder.map(|p| p.simplified()))
             }
@@ -204,13 +204,13 @@ pub(crate) async fn open<R: Runtime>(
         let tauri_scope = window.state::<tauri::scope::Scopes>();
         let file = dialog_builder.blocking_pick_file();
 
-        if let Some(file) = &file {
-            if let Ok(path) = file.clone().into_path() {
-                if let Some(s) = window.try_fs_scope() {
-                    s.allow_file(&path)?;
-                }
-                tauri_scope.allow_file(&path)?;
+        if let Some(file) = &file
+            && let Ok(path) = file.clone().into_path()
+        {
+            if let Some(s) = window.try_fs_scope() {
+                s.allow_file(&path)?;
             }
+            tauri_scope.allow_file(&path)?;
         }
         OpenResponse::File(file.map(|f| f.simplified()))
     };
@@ -246,13 +246,13 @@ pub(crate) async fn save<R: Runtime>(
     let tauri_scope = window.state::<tauri::scope::Scopes>();
 
     let path = dialog_builder.blocking_save_file();
-    if let Some(p) = &path {
-        if let Ok(path) = p.clone().into_path() {
-            if let Some(s) = window.try_fs_scope() {
-                s.allow_file(&path)?;
-            }
-            tauri_scope.allow_file(&path)?;
+    if let Some(p) = &path
+        && let Ok(path) = p.clone().into_path()
+    {
+        if let Some(s) = window.try_fs_scope() {
+            s.allow_file(&path)?;
         }
+        tauri_scope.allow_file(&path)?;
     }
 
     Ok(path.map(|p| p.simplified()))
diff --git a/plugins/dialog/src/desktop.rs b/plugins/dialog/src/desktop.rs
index 8d3b08f95..3a6c27270 100644
--- a/plugins/dialog/src/desktop.rs
+++ b/plugins/dialog/src/desktop.rs
@@ -11,9 +11,9 @@
 use raw_window_handle::{HasDisplayHandle, HasWindowHandle, RawDisplayHandle, RawWindowHandle};
 use rfd::{AsyncFileDialog, AsyncMessageDialog};
 use serde::de::DeserializeOwned;
-use tauri::{plugin::PluginApi, AppHandle, Runtime};
+use tauri::{AppHandle, Runtime, plugin::PluginApi};
 
-use crate::{models::*, FileDialogBuilder, FilePath, MessageDialogBuilder};
+use crate::{FileDialogBuilder, FilePath, MessageDialogBuilder, models::*};
 
 pub fn init<R: Runtime, C: DeserializeOwned>(
     app: &AppHandle<R>,
diff --git a/plugins/dialog/src/error.rs b/plugins/dialog/src/error.rs
index 0c3ed5b86..97583e535 100644
--- a/plugins/dialog/src/error.rs
+++ b/plugins/dialog/src/error.rs
@@ -2,23 +2,30 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
-use serde::{ser::Serializer, Serialize};
+use serde::{Serialize, ser::Serializer};
 
+/// Alias for `Result<T, Error>` used throughout this crate.
 pub type Result<T> = std::result::Result<T, Error>;
 
+/// Errors that can occur while showing or interacting with a dialog.
 #[derive(Debug, thiserror::Error)]
 #[non_exhaustive]
 pub enum Error {
+    /// An error forwarded from the Tauri core.
     #[error(transparent)]
     Tauri(#[from] tauri::Error),
+    /// An I/O error, for example while resolving a picked path.
     #[error(transparent)]
     Io(#[from] std::io::Error),
+    /// Forwarding a request to, or receiving a response from, the mobile plugin failed.
     #[cfg(mobile)]
     #[error(transparent)]
     PluginInvoke(#[from] tauri::plugin::mobile::PluginInvokeError),
+    /// The folder picker was requested through the `open` command, but folder picking is not implemented on mobile.
     #[cfg(mobile)]
     #[error("Folder picker is not implemented on mobile")]
     FolderPickerNotImplemented,
+    /// An error forwarded from the `fs` plugin, returned when granting filesystem scope to a picked path fails.
     #[error(transparent)]
     Fs(#[from] tauri_plugin_fs::Error),
 }
diff --git a/plugins/dialog/src/lib.rs b/plugins/dialog/src/lib.rs
index f414794fc..2d692d1df 100644
--- a/plugins/dialog/src/lib.rs
+++ b/plugins/dialog/src/lib.rs
@@ -16,8 +16,8 @@
 
 use serde::{Deserialize, Serialize};
 use tauri::{
-    plugin::{Builder, TauriPlugin},
     Manager, Runtime,
+    plugin::{Builder, TauriPlugin},
 };
 
 use std::{
@@ -49,19 +49,28 @@ pub use desktop::Dialog;
 #[cfg(mobile)]
 pub use mobile::Dialog;
 
+/// The preferred mode of the file picker on mobile platforms (iOS and Android), which have
+/// distinct file and media pickers. On desktop, this option is ignored.
 #[derive(Debug, Serialize, Deserialize, Clone)]
 #[serde(rename_all = "lowercase")]
 pub enum PickerMode {
+    /// Show the generic document picker.
     Document,
+    /// Show the media picker, allowing both images and videos to be selected.
     Media,
+    /// Show the media picker restricted to images.
     Image,
+    /// Show the media picker restricted to videos.
     Video,
 }
 
+/// The file access mode of the dialog, used to control how a picked file is exposed to the app on iOS.
 #[derive(Debug, Serialize, Deserialize, Clone)]
 #[serde(rename_all = "lowercase")]
 pub enum FileAccessMode {
+    /// Copy the picked file into the app's sandbox so it can be freely read, edited or deleted.
     Copy,
+    /// Keep the file at its original location and let the system manage security-scoped access to it.
     Scoped,
 }
 
@@ -86,6 +95,7 @@ macro_rules! blocking_fn {
 
 /// Extensions to [`tauri::App`], [`tauri::AppHandle`], [`tauri::WebviewWindow`], [`tauri::Webview`] and [`tauri::Window`] to access the dialog APIs.
 pub trait DialogExt<R: Runtime> {
+    /// Returns the [`Dialog`] instance associated with this app/window.
     fn dialog(&self) -> &Dialog<R>;
 }
 
@@ -103,7 +113,7 @@ impl<R: Runtime> Dialog<R> {
     ///
     /// - Message dialog:
     ///
-    /// ```
+    /// ```no_run
     /// use tauri_plugin_dialog::DialogExt;
     ///
     /// tauri::Builder::default()
@@ -120,14 +130,14 @@ impl<R: Runtime> Dialog<R> {
     ///
     /// - Ask dialog:
     ///
-    /// ```
+    /// ```no_run
     /// use tauri_plugin_dialog::{DialogExt, MessageDialogButtons};
     ///
     /// tauri::Builder::default()
     ///   .setup(|app| {
     ///     app.dialog()
     ///       .message("Are you sure?")
-    ///       .buttons(MessageDialogButtons::OkCancelCustom("Yes", "No"))
+    ///       .buttons(MessageDialogButtons::OkCancelCustom("Yes".to_string(), "No".to_string()))
     ///       .show(|yes| {
     ///         println!("user said {}", if yes { "yes" } else { "no" });
     ///       });
@@ -137,7 +147,7 @@ impl<R: Runtime> Dialog<R> {
     ///
     /// - Message dialog with OK button:
     ///
-    /// ```
+    /// ```no_run
     /// use tauri_plugin_dialog::{DialogExt, MessageDialogButtons};
     ///
     /// tauri::Builder::default()
@@ -159,7 +169,7 @@ impl<R: Runtime> Dialog<R> {
     /// To block the current thread until the user acted on the dialog, you can use `blocking_show`,
     /// but note that it cannot be executed on the main thread as it will freeze your application.
     ///
-    /// ```
+    /// ```no_run
     /// use tauri_plugin_dialog::{DialogExt, MessageDialogButtons};
     ///
     /// tauri::Builder::default()
@@ -168,7 +178,7 @@ impl<R: Runtime> Dialog<R> {
     ///     std::thread::spawn(move || {
     ///       let yes = handle.dialog()
     ///         .message("Are you sure?")
-    ///         .buttons(MessageDialogButtons::OkCancelCustom("Yes", "No"))
+    ///         .buttons(MessageDialogButtons::OkCancelCustom("Yes".to_string(), "No".to_string()))
     ///         .blocking_show();
     ///     });
     ///
@@ -522,7 +532,7 @@ impl<R: Runtime> FileDialogBuilder<R> {
     ///
     /// # Examples
     ///
-    /// ```
+    /// ```no_run
     /// use tauri_plugin_dialog::DialogExt;
     /// tauri::Builder::default()
     ///   .setup(|app| {
@@ -549,7 +559,7 @@ impl<R: Runtime> FileDialogBuilder<R> {
     /// The file paths cannot be read directly on Android as they are behind a content URI.
     /// The recommended way to read the files is using the [`fs`](https://v2.tauri.app/plugin/file-system/) plugin:
     ///
-    /// ```
+    /// ```no_run
     /// use tauri_plugin_dialog::DialogExt;
     /// use tauri_plugin_fs::FsExt;
     /// tauri::Builder::default()
@@ -570,7 +580,7 @@ impl<R: Runtime> FileDialogBuilder<R> {
     ///
     /// # Examples
     ///
-    /// ```
+    /// ```no_run
     /// use tauri_plugin_dialog::DialogExt;
     /// tauri::Builder::default()
     ///   .setup(|app| {
@@ -594,7 +604,7 @@ impl<R: Runtime> FileDialogBuilder<R> {
     ///
     /// # Examples
     ///
-    /// ```
+    /// ```no_run
     /// use tauri_plugin_dialog::DialogExt;
     /// tauri::Builder::default()
     ///   .setup(|app| {
@@ -619,7 +629,7 @@ impl<R: Runtime> FileDialogBuilder<R> {
     ///
     /// # Examples
     ///
-    /// ```
+    /// ```no_run
     /// use tauri_plugin_dialog::DialogExt;
     /// tauri::Builder::default()
     ///   .setup(|app| {
@@ -644,7 +654,7 @@ impl<R: Runtime> FileDialogBuilder<R> {
     ///
     /// # Examples
     ///
-    /// ```
+    /// ```no_run
     /// use tauri_plugin_dialog::DialogExt;
     /// tauri::Builder::default()
     ///   .setup(|app| {
@@ -671,7 +681,7 @@ impl<R: Runtime> FileDialogBuilder<R> {
     ///
     /// # Examples
     ///
-    /// ```
+    /// ```no_run
     /// use tauri_plugin_dialog::DialogExt;
     /// #[tauri::command]
     /// async fn my_command(app: tauri::AppHandle) {
@@ -693,7 +703,7 @@ impl<R: Runtime> FileDialogBuilder<R> {
     ///
     /// # Examples
     ///
-    /// ```
+    /// ```no_run
     /// use tauri_plugin_dialog::DialogExt;
     /// #[tauri::command]
     /// async fn my_command(app: tauri::AppHandle) {
@@ -715,7 +725,7 @@ impl<R: Runtime> FileDialogBuilder<R> {
     ///
     /// # Examples
     ///
-    /// ```
+    /// ```no_run
     /// use tauri_plugin_dialog::DialogExt;
     /// #[tauri::command]
     /// async fn my_command(app: tauri::AppHandle) {
@@ -738,7 +748,7 @@ impl<R: Runtime> FileDialogBuilder<R> {
     ///
     /// # Examples
     ///
-    /// ```
+    /// ```no_run
     /// use tauri_plugin_dialog::DialogExt;
     /// #[tauri::command]
     /// async fn my_command(app: tauri::AppHandle) {
@@ -761,7 +771,7 @@ impl<R: Runtime> FileDialogBuilder<R> {
     ///
     /// # Examples
     ///
-    /// ```
+    /// ```no_run
     /// use tauri_plugin_dialog::DialogExt;
     /// #[tauri::command]
     /// async fn my_command(app: tauri::AppHandle) {
diff --git a/plugins/dialog/src/mobile.rs b/plugins/dialog/src/mobile.rs
index 46ea3a276..7718af21e 100644
--- a/plugins/dialog/src/mobile.rs
+++ b/plugins/dialog/src/mobile.rs
@@ -2,10 +2,10 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
-use serde::{de::DeserializeOwned, Deserialize};
+use serde::{Deserialize, de::DeserializeOwned};
 use tauri::{
-    plugin::{PluginApi, PluginHandle},
     AppHandle, Runtime,
+    plugin::{PluginApi, PluginHandle},
 };
 
 use crate::{FileDialogBuilder, FilePath, MessageDialogBuilder, MessageDialogResult};
diff --git a/plugins/dialog/src/models.rs b/plugins/dialog/src/models.rs
index 330388f8e..2c4f6ec78 100644
--- a/plugins/dialog/src/models.rs
+++ b/plugins/dialog/src/models.rs
@@ -69,11 +69,16 @@ pub enum MessageDialogButtons {
 /// Result of a message dialog
 #[derive(Debug, Default, Clone, PartialEq, Eq, Deserialize, Serialize)]
 pub enum MessageDialogResult {
+    /// The user pressed the `Yes` button.
     Yes,
+    /// The user pressed the `No` button.
     No,
+    /// The user pressed the `Ok` button.
     Ok,
+    /// The user pressed the `Cancel` button, or closed the dialog without pressing a button.
     #[default]
     Cancel,
+    /// The user pressed a button with a custom label, holding that label's text.
     #[serde(untagged)]
     Custom(String),
 }
diff --git a/plugins/fs/CHANGELOG.md b/plugins/fs/CHANGELOG.md
index 7a0e76d3f..c4ea5e796 100644
--- a/plugins/fs/CHANGELOG.md
+++ b/plugins/fs/CHANGELOG.md
@@ -8,6 +8,18 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.6.0]
+
+- [`97e865bc`](https://github.com/tauri-apps/plugins-workspace/commit/97e865bc138925ba29b102a9cb99d406ce1fe48e) ([#3623](https://github.com/tauri-apps/plugins-workspace/pull/3623)) Added an `options` parameter with `baseDir` to `size`, so relative paths can be measured, like the other functions and like the JSDoc example already showed. The Rust command already accepted it.
+- [`9106093f`](https://github.com/tauri-apps/plugins-workspace/commit/9106093f775a09f899561d7823518e76f9bd6b45) ([#3624](https://github.com/tauri-apps/plugins-workspace/pull/3624)) Fixed opening Android `content://` URIs with `append` or with `write`, `truncate` and `append` together: the options were turned into invalid modes such as `ra` or `wta`. They now map to the modes Android accepts (`r`, `w`, `wt`, `wa`, `rw`, `rwt`), `append` taking precedence over `read` since there is no read and append mode.
+- [`1cae06a5`](https://github.com/tauri-apps/plugins-workspace/commit/1cae06a55b3398d409fba5ac17dbac63d9cf7652) ([#3625](https://github.com/tauri-apps/plugins-workspace/pull/3625)) Fixed `readTextFileLines` yielding empty lines forever when reading fails (e.g. on a directory). The read error is now reported: the iterator rejects and the file is closed.
+- [`1cae06a5`](https://github.com/tauri-apps/plugins-workspace/commit/1cae06a55b3398d409fba5ac17dbac63d9cf7652) ([#3625](https://github.com/tauri-apps/plugins-workspace/pull/3625)) Fixed `readTextFileLines` leaving the file open until the webview is destroyed when a `for await` loop over it exits early (`break`, `return` or `throw`). The iterator now implements `return()`, which closes the file.
+- [`0c84c917`](https://github.com/tauri-apps/plugins-workspace/commit/0c84c917e32af391fed9eaac9e131e447d0a1148) ([#3621](https://github.com/tauri-apps/plugins-workspace/pull/3621)) File watcher errors (e.g. the watched directory was removed or the inotify limit was reached) are now logged instead of being silently dropped.
+- [`b46a88ff`](https://github.com/tauri-apps/plugins-workspace/commit/b46a88ff55948367e40a90f4fcec807f8e43cbc9) ([#3622](https://github.com/tauri-apps/plugins-workspace/pull/3622)) `writeFile` and `writeTextFile` now fail when their options cannot be parsed instead of silently ignoring them (including `baseDir`, `append` and `createNew`) and writing to the raw path. Data sent as a JSON array is rejected if it contains values that are not bytes, instead of truncating them.
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
 ## [2.5.2]
 
 - [`db9c5998`](https://github.com/tauri-apps/plugins-workspace/commit/db9c5998feff9384f9cbbefcbe0d45937c00a1fc) ([#3531](https://github.com/tauri-apps/plugins-workspace/pull/3531) by [@Legend-Master](https://github.com/tauri-apps/plugins-workspace/../../Legend-Master)) Fix missing `consumer-rules.pro` on Gradle v9.
@@ -238,3 +250,8 @@
 ## \[2.0.0-alpha.0]
 
 - [`717ae67`](https://github.com/tauri-apps/plugins-workspace/commit/717ae670978feb4492fac1f295998b93f2b9347f)([#371](https://github.com/tauri-apps/plugins-workspace/pull/371)) First v2 alpha release!
+55](https://github.com/tauri-apps/plugins-workspace/pull/555)) Update to alpha.11.
+
+## \[2.0.0-alpha.0]
+
+- [`717ae67`](https://github.com/tauri-apps/plugins-workspace/commit/717ae670978feb4492fac1f295998b93f2b9347f)([#371](https://github.com/tauri-apps/plugins-workspace/pull/371)) First v2 alpha release!
diff --git a/plugins/fs/android/build.gradle.kts b/plugins/fs/android/build.gradle.kts
index b1b6af15d..4863e7772 100644
--- a/plugins/fs/android/build.gradle.kts
+++ b/plugins/fs/android/build.gradle.kts
@@ -1,3 +1,5 @@
+import org.jetbrains.kotlin.gradle.dsl.JvmTarget
+
 plugins {
     id("com.android.library")
     id("org.jetbrains.kotlin.android")
@@ -19,8 +21,11 @@ android {
         sourceCompatibility = JavaVersion.VERSION_1_8
         targetCompatibility = JavaVersion.VERSION_1_8
     }
-    kotlinOptions {
-        jvmTarget = "1.8"
+}
+
+kotlin {
+    compilerOptions {
+        jvmTarget = JvmTarget.JVM_1_8
     }
 }
 
diff --git a/plugins/fs/api-iife.js b/plugins/fs/api-iife.js
index c340328e1..99291f206 100644
--- a/plugins/fs/api-iife.js
+++ b/plugins/fs/api-iife.js
@@ -1 +1 @@
-if("__TAURI__"in window){var __TAURI_PLUGIN_FS__=function(e,n,t){"use strict";var i;function o(e){return{isFile:e.isFile,isDirectory:e.isDirectory,isSymlink:e.isSymlink,size:e.size,mtime:null!==e.mtime?new Date(e.mtime):null,atime:null!==e.atime?new Date(e.atime):null,birthtime:null!==e.birthtime?new Date(e.birthtime):null,readonly:e.readonly,fileAttributes:e.fileAttributes,dev:e.dev,ino:e.ino,mode:e.mode,nlink:e.nlink,uid:e.uid,gid:e.gid,rdev:e.rdev,blksize:e.blksize,blocks:e.blocks}}e.SeekMode=void 0,(i=e.SeekMode||(e.SeekMode={}))[i.Start=0]="Start",i[i.Current=1]="Current",i[i.End=2]="End";class r extends t.Resource{async read(e){if(0===e.byteLength)return 0;const n=await t.invoke("plugin:fs|read",{rid:this.rid,len:e.byteLength}),i=function(e){const n=new Uint8ClampedArray(e),t=n.byteLength;let i=0;for(let e=0;e<t;e++)i*=256,i+=n[e];return i}(n.slice(-8)),o=n instanceof ArrayBuffer?new Uint8Array(n):n;return e.set(o.slice(0,o.length-8)),0===i?null:i}async seek(e,n){return await t.invoke("plugin:fs|seek",{rid:this.rid,offset:e,whence:n})}async stat(){return o(await t.invoke("plugin:fs|fstat",{rid:this.rid}))}async truncate(e){await t.invoke("plugin:fs|ftruncate",{rid:this.rid,len:e})}async write(e){return await t.invoke("plugin:fs|write",{rid:this.rid,data:e})}}async function a(e,n){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");const i=await t.invoke("plugin:fs|open",{path:e instanceof URL?e.toString():e,options:n});return new r(i)}async function s(e,n){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");const i=await t.invoke("plugin:fs|read_file",{path:e instanceof URL?e.toString():e,options:n});return i instanceof ArrayBuffer?new Uint8Array(i):Uint8Array.from(i)}async function c(e,n,i){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");if(n instanceof ReadableStream){const t=await a(e,{read:!1,create:!0,write:!0,...i}),o=n.getReader();try{for(;;){const{done:e,value:n}=await o.read();if(e)break;await t.write(n)}}finally{o.releaseLock(),await t.close()}}else await t.invoke("plugin:fs|write_file",n,{headers:{path:encodeURIComponent(e instanceof URL?e.toString():e),options:JSON.stringify(i)}})}class f extends t.Resource{}async function l(e,n,i){const o=Array.isArray(e)?e:[e];for(const e of o)if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");const r=new t.Channel;r.onmessage=n;const a=await t.invoke("plugin:fs|watch",{paths:o.map(e=>e instanceof URL?e.toString():e),options:i,onEvent:r});return new f(a)}return Object.defineProperty(e,"BaseDirectory",{enumerable:!0,get:function(){return n.BaseDirectory}}),e.FileHandle=r,e.Watcher=f,e.copyFile=async function(e,n,i){if(e instanceof URL&&"file:"!==e.protocol||n instanceof URL&&"file:"!==n.protocol)throw new TypeError("Must be a file URL.");await t.invoke("plugin:fs|copy_file",{fromPath:e instanceof URL?e.toString():e,toPath:n instanceof URL?n.toString():n,options:i})},e.create=async function(e,n){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");const i=await t.invoke("plugin:fs|create",{path:e instanceof URL?e.toString():e,options:n});return new r(i)},e.exists=async function(e,n){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");return await t.invoke("plugin:fs|exists",{path:e instanceof URL?e.toString():e,options:n})},e.lstat=async function(e,n){return o(await t.invoke("plugin:fs|lstat",{path:e instanceof URL?e.toString():e,options:n}))},e.mkdir=async function(e,n){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");await t.invoke("plugin:fs|mkdir",{path:e instanceof URL?e.toString():e,options:n})},e.open=a,e.readDir=async function(e,n){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");return await t.invoke("plugin:fs|read_dir",{path:e instanceof URL?e.toString():e,options:n})},e.readFile=s,e.readTextFile=async function(e,n){const t=await s(e,n);return new TextDecoder(n?.encoding??"utf-8").decode(t)},e.readTextFileLines=async function(e,n){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");const i=e instanceof URL?e.toString():e;return await Promise.resolve({path:i,rid:null,async next(){const e=new TextDecoder(n?.encoding??"utf-8");if(null===this.rid){const o=e.encoding;this.rid=await t.invoke("plugin:fs|read_text_file_lines",{path:i,options:null!=n?{...n,encoding:o}:void 0})}const o=await t.invoke("plugin:fs|read_text_file_lines_next",{rid:this.rid}),r=o instanceof ArrayBuffer?new Uint8Array(o):Uint8Array.from(o),a=1===r[r.byteLength-1];if(a)return this.rid=null,{value:null,done:a};return{value:e.decode(r.slice(0,r.byteLength-1)),done:a}},[Symbol.asyncIterator](){return this}})},e.remove=async function(e,n){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");await t.invoke("plugin:fs|remove",{path:e instanceof URL?e.toString():e,options:n})},e.rename=async function(e,n,i){if(e instanceof URL&&"file:"!==e.protocol||n instanceof URL&&"file:"!==n.protocol)throw new TypeError("Must be a file URL.");await t.invoke("plugin:fs|rename",{oldPath:e instanceof URL?e.toString():e,newPath:n instanceof URL?n.toString():n,options:i})},e.size=async function(e){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");return await t.invoke("plugin:fs|size",{path:e instanceof URL?e.toString():e})},e.startAccessingSecurityScopedResource=async function(e){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");await t.invoke("plugin:fs|start_accessing_security_scoped_resource",{path:e instanceof URL?e.toString():e})},e.stat=async function(e,n){return o(await t.invoke("plugin:fs|stat",{path:e instanceof URL?e.toString():e,options:n}))},e.stopAccessingSecurityScopedResource=async function(e){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");await t.invoke("plugin:fs|stop_accessing_security_scoped_resource",{path:e instanceof URL?e.toString():e})},e.truncate=async function(e,n,i){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");await t.invoke("plugin:fs|truncate",{path:e instanceof URL?e.toString():e,len:n,options:i})},e.watch=async function(e,n,t){return await l(e,n,{delayMs:2e3,...t})},e.watchImmediate=async function(e,n,t){return await l(e,n,{...t,delayMs:void 0})},e.writeFile=c,e.writeTextFile=async function(e,n,t){await c(e,(new TextEncoder).encode(n),t)},e}({},window.__TAURI__.path,window.__TAURI__.core);Object.defineProperty(window.__TAURI__,"fs",{value:__TAURI_PLUGIN_FS__})}
+if("__TAURI__"in window){var __TAURI_PLUGIN_FS__=function(e,n,t){"use strict";var i;function o(e){return{isFile:e.isFile,isDirectory:e.isDirectory,isSymlink:e.isSymlink,size:e.size,mtime:null!==e.mtime?new Date(e.mtime):null,atime:null!==e.atime?new Date(e.atime):null,birthtime:null!==e.birthtime?new Date(e.birthtime):null,readonly:e.readonly,fileAttributes:e.fileAttributes,dev:e.dev,ino:e.ino,mode:e.mode,nlink:e.nlink,uid:e.uid,gid:e.gid,rdev:e.rdev,blksize:e.blksize,blocks:e.blocks}}e.SeekMode=void 0,(i=e.SeekMode||(e.SeekMode={}))[i.Start=0]="Start",i[i.Current=1]="Current",i[i.End=2]="End";class r extends t.Resource{async read(e){if(0===e.byteLength)return 0;const n=await t.invoke("plugin:fs|read",{rid:this.rid,len:e.byteLength}),i=function(e){const n=new Uint8ClampedArray(e),t=n.byteLength;let i=0;for(let e=0;e<t;e++)i*=256,i+=n[e];return i}(n.slice(-8)),o=n instanceof ArrayBuffer?new Uint8Array(n):n;return e.set(o.slice(0,o.length-8)),0===i?null:i}async seek(e,n){return await t.invoke("plugin:fs|seek",{rid:this.rid,offset:e,whence:n})}async stat(){return o(await t.invoke("plugin:fs|fstat",{rid:this.rid}))}async truncate(e){await t.invoke("plugin:fs|ftruncate",{rid:this.rid,len:e})}async write(e){return await t.invoke("plugin:fs|write",{rid:this.rid,data:e})}}async function a(e,n){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");const i=await t.invoke("plugin:fs|open",{path:e instanceof URL?e.toString():e,options:n});return new r(i)}async function s(e,n){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");const i=await t.invoke("plugin:fs|read_file",{path:e instanceof URL?e.toString():e,options:n});return i instanceof ArrayBuffer?new Uint8Array(i):Uint8Array.from(i)}async function c(e,n,i){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");if(n instanceof ReadableStream){const t=await a(e,{read:!1,create:!0,write:!0,...i}),o=n.getReader();try{for(;;){const{done:e,value:n}=await o.read();if(e)break;await t.write(n)}}finally{o.releaseLock(),await t.close()}}else await t.invoke("plugin:fs|write_file",n,{headers:{path:encodeURIComponent(e instanceof URL?e.toString():e),options:JSON.stringify(i)}})}class f extends t.Resource{}async function l(e,n,i){const o=Array.isArray(e)?e:[e];for(const e of o)if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");const r=new t.Channel;r.onmessage=n;const a=await t.invoke("plugin:fs|watch",{paths:o.map(e=>e instanceof URL?e.toString():e),options:i,onEvent:r});return new f(a)}return Object.defineProperty(e,"BaseDirectory",{enumerable:!0,get:function(){return n.BaseDirectory}}),e.FileHandle=r,e.Watcher=f,e.copyFile=async function(e,n,i){if(e instanceof URL&&"file:"!==e.protocol||n instanceof URL&&"file:"!==n.protocol)throw new TypeError("Must be a file URL.");await t.invoke("plugin:fs|copy_file",{fromPath:e instanceof URL?e.toString():e,toPath:n instanceof URL?n.toString():n,options:i})},e.create=async function(e,n){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");const i=await t.invoke("plugin:fs|create",{path:e instanceof URL?e.toString():e,options:n});return new r(i)},e.exists=async function(e,n){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");return await t.invoke("plugin:fs|exists",{path:e instanceof URL?e.toString():e,options:n})},e.lstat=async function(e,n){return o(await t.invoke("plugin:fs|lstat",{path:e instanceof URL?e.toString():e,options:n}))},e.mkdir=async function(e,n){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");await t.invoke("plugin:fs|mkdir",{path:e instanceof URL?e.toString():e,options:n})},e.open=a,e.readDir=async function(e,n){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");return await t.invoke("plugin:fs|read_dir",{path:e instanceof URL?e.toString():e,options:n})},e.readFile=s,e.readTextFile=async function(e,n){const t=await s(e,n);return new TextDecoder(n?.encoding??"utf-8").decode(t)},e.readTextFileLines=async function(e,n){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");const i=e instanceof URL?e.toString():e;return await Promise.resolve({path:i,rid:null,async next(){const e=new TextDecoder(n?.encoding??"utf-8");if(null===this.rid){const o=e.encoding;this.rid=await t.invoke("plugin:fs|read_text_file_lines",{path:i,options:null!=n?{...n,encoding:o}:void 0})}let o;try{o=await t.invoke("plugin:fs|read_text_file_lines_next",{rid:this.rid})}catch(e){throw this.rid=null,e}const r=o instanceof ArrayBuffer?new Uint8Array(o):Uint8Array.from(o),a=1===r[r.byteLength-1];if(a)return this.rid=null,{value:null,done:a};return{value:e.decode(r.slice(0,r.byteLength-1)),done:a}},async return(){if(null!==this.rid){const e=this.rid;this.rid=null,await new t.Resource(e).close()}return{value:null,done:!0}},[Symbol.asyncIterator](){return this}})},e.remove=async function(e,n){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");await t.invoke("plugin:fs|remove",{path:e instanceof URL?e.toString():e,options:n})},e.rename=async function(e,n,i){if(e instanceof URL&&"file:"!==e.protocol||n instanceof URL&&"file:"!==n.protocol)throw new TypeError("Must be a file URL.");await t.invoke("plugin:fs|rename",{oldPath:e instanceof URL?e.toString():e,newPath:n instanceof URL?n.toString():n,options:i})},e.size=async function(e,n){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");return await t.invoke("plugin:fs|size",{path:e instanceof URL?e.toString():e,options:n})},e.startAccessingSecurityScopedResource=async function(e){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");await t.invoke("plugin:fs|start_accessing_security_scoped_resource",{path:e instanceof URL?e.toString():e})},e.stat=async function(e,n){return o(await t.invoke("plugin:fs|stat",{path:e instanceof URL?e.toString():e,options:n}))},e.stopAccessingSecurityScopedResource=async function(e){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");await t.invoke("plugin:fs|stop_accessing_security_scoped_resource",{path:e instanceof URL?e.toString():e})},e.truncate=async function(e,n,i){if(e instanceof URL&&"file:"!==e.protocol)throw new TypeError("Must be a file URL.");await t.invoke("plugin:fs|truncate",{path:e instanceof URL?e.toString():e,len:n,options:i})},e.watch=async function(e,n,t){return await l(e,n,{delayMs:2e3,...t})},e.watchImmediate=async function(e,n,t){return await l(e,n,{...t,delayMs:void 0})},e.writeFile=c,e.writeTextFile=async function(e,n,t){await c(e,(new TextEncoder).encode(n),t)},e}({},window.__TAURI__.path,window.__TAURI__.core);Object.defineProperty(window.__TAURI__,"fs",{value:__TAURI_PLUGIN_FS__})}
diff --git a/plugins/fs/guest-js/index.ts b/plugins/fs/guest-js/index.ts
index 7b611a2ad..1670a089f 100644
--- a/plugins/fs/guest-js/index.ts
+++ b/plugins/fs/guest-js/index.ts
@@ -88,9 +88,15 @@
 import { BaseDirectory } from '@tauri-apps/api/path'
 import { Channel, invoke, Resource } from '@tauri-apps/api/core'
 
+/**
+ * Defines how the offset given to {@linkcode FileHandle.seek} is interpreted.
+ */
 enum SeekMode {
+  /** The offset is relative to the start of the file. */
   Start = 0,
+  /** The offset is relative to the current cursor position. */
   Current = 1,
+  /** The offset is relative to the end of the file. */
   End = 2
 }
 
@@ -322,6 +328,8 @@ class FileHandle extends Resource {
    * await file.close();
    * ```
    *
+   * @param buffer The buffer the file contents are read into.
+   * @returns A promise resolving to the number of bytes read, or `null` when the end of the file was reached.
    * @since 2.0.0
    */
   async read(buffer: Uint8Array): Promise<number | null> {
@@ -377,6 +385,9 @@ class FileHandle extends Resource {
    * await file.close();
    * ```
    *
+   * @param offset The number of bytes the cursor is moved by.
+   * @param whence Defines the position the `offset` is relative to.
+   * @returns A promise resolving to the new cursor position, relative to the start of the file.
    * @since 2.0.0
    */
   async seek(offset: number, whence: SeekMode): Promise<number> {
@@ -399,6 +410,7 @@ class FileHandle extends Resource {
    * await file.close();
    * ```
    *
+   * @returns A promise resolving to the metadata of this file.
    * @since 2.0.0
    */
   async stat(): Promise<FileInfo> {
@@ -431,6 +443,7 @@ class FileHandle extends Resource {
    * await file.close();
    * ```
    *
+   * @param len The length the file is truncated or extended to, in bytes. When not provided the entire file contents are truncated.
    * @since 2.0.0
    */
   async truncate(len?: number): Promise<void> {
@@ -458,6 +471,8 @@ class FileHandle extends Resource {
    * await file.close();
    * ```
    *
+   * @param data The bytes written to the file.
+   * @returns A promise resolving to the number of bytes written.
    * @since 2.0.0
    */
   async write(data: Uint8Array): Promise<number> {
@@ -469,6 +484,8 @@ class FileHandle extends Resource {
 }
 
 /**
+ * Options for the `create` function, which creates or truncates a file.
+ *
  * @since 2.0.0
  */
 interface CreateOptions {
@@ -488,6 +505,9 @@ interface CreateOptions {
  * await file.close();
  * ```
  *
+ * @param path The path of the file, relative to `options.baseDir` when it is provided.
+ * @param options Options defining the base directory of `path`.
+ * @returns A promise resolving to the handle of the created file.
  * @since 2.0.0
  */
 async function create(
@@ -507,6 +527,8 @@ async function create(
 }
 
 /**
+ * Options for the `open` function, defining how the file is opened and which operations are allowed on it.
+ *
  * @since 2.0.0
  */
 interface OpenOptions {
@@ -573,6 +595,9 @@ interface OpenOptions {
  * await file.close();
  * ```
  *
+ * @param path The path of the file, relative to `options.baseDir` when it is provided.
+ * @param options Options defining the base directory of `path` and how the file is opened.
+ * @returns A promise resolving to the handle of the open file.
  * @since 2.0.0
  */
 async function open(
@@ -592,6 +617,8 @@ async function open(
 }
 
 /**
+ * Options for the `copyFile` function, defining the base directory of each path.
+ *
  * @since 2.0.0
  */
 interface CopyFileOptions {
@@ -609,6 +636,9 @@ interface CopyFileOptions {
  * await copyFile('app.conf', 'app.conf.bk', { fromPathBaseDir: BaseDirectory.AppConfig, toPathBaseDir: BaseDirectory.AppConfig });
  * ```
  *
+ * @param fromPath The path of the file to copy from.
+ * @param toPath The path of the file to copy to.
+ * @param options Options defining the base directory of each path.
  * @since 2.0.0
  */
 async function copyFile(
@@ -631,6 +661,8 @@ async function copyFile(
 }
 
 /**
+ * Options for the `mkdir` function, which creates a directory.
+ *
  * @since 2.0.0
  */
 interface MkdirOptions {
@@ -652,6 +684,8 @@ interface MkdirOptions {
  * await mkdir('users', { baseDir: BaseDirectory.AppLocalData });
  * ```
  *
+ * @param path The path of the directory to create.
+ * @param options Options defining the base directory of `path`, the directory permissions and whether intermediate directories are created.
  * @since 2.0.0
  */
 async function mkdir(
@@ -669,6 +703,8 @@ async function mkdir(
 }
 
 /**
+ * Options for the `readDir` function, which lists the entries of a directory.
+ *
  * @since 2.0.0
  */
 interface ReadDirOptions {
@@ -700,20 +736,23 @@ interface DirEntry {
  * ```typescript
  * import { readDir, BaseDirectory } from '@tauri-apps/plugin-fs';
  * import { join } from '@tauri-apps/api/path';
- * const dir = "users"
- * const entries = await readDir('users', { baseDir: BaseDirectory.AppLocalData });
- * processEntriesRecursively(dir, entries);
+ * const dir = 'users';
+ * const entries = await readDir(dir, { baseDir: BaseDirectory.AppLocalData });
+ * await processEntriesRecursively(dir, entries);
  * async function processEntriesRecursively(parent, entries) {
  *   for (const entry of entries) {
  *     console.log(`Entry: ${entry.name}`);
  *     if (entry.isDirectory) {
- *        const dir = await join(parent, entry.name);
- *       processEntriesRecursively(dir, await readDir(dir, { baseDir: BaseDirectory.AppLocalData }))
+ *       const entryPath = await join(parent, entry.name);
+ *       await processEntriesRecursively(entryPath, await readDir(entryPath, { baseDir: BaseDirectory.AppLocalData }));
  *     }
  *   }
  * }
  * ```
  *
+ * @param path The path of the directory to read.
+ * @param options Options defining the base directory of `path`.
+ * @returns A promise resolving to the list of entries in the directory.
  * @since 2.0.0
  */
 async function readDir(
@@ -731,6 +770,8 @@ async function readDir(
 }
 
 /**
+ * Options for the functions that read a file, such as `readFile` and `readTextFile`.
+ *
  * @since 2.0.0
  */
 interface ReadFileOptions {
@@ -749,6 +790,9 @@ interface ReadFileOptions {
  * const contents = await readFile('avatar.png', { baseDir: BaseDirectory.Resource });
  * ```
  *
+ * @param path The path of the file to read.
+ * @param options Options defining the base directory of `path`.
+ * @returns A promise resolving to the contents of the file as bytes.
  * @since 2.0.0
  */
 async function readFile(
@@ -775,6 +819,9 @@ async function readFile(
  * const contents = await readTextFile('app.conf', { baseDir: BaseDirectory.AppConfig });
  * ```
  *
+ * @param path The path of the file to read.
+ * @param options Options defining the base directory of `path` and the text encoding.
+ * @returns A promise resolving to the contents of the file as a string.
  * @since 2.0.0
  */
 async function readTextFile(
@@ -799,6 +846,9 @@ async function readTextFile(
  * You could also call {@linkcode AsyncIterableIterator.next} to advance the
  * iterator so you can lazily read the next line whenever you want.
  *
+ * @param path The path of the file to read.
+ * @param options Options defining the base directory of `path` and the text encoding.
+ * @returns A promise resolving to an iterator over the lines of the file.
  * @since 2.0.0
  */
 async function readTextFileLines(
@@ -828,10 +878,17 @@ async function readTextFileLines(
         })
       }
 
-      const arr = await invoke<ArrayBuffer | number[]>(
-        'plugin:fs|read_text_file_lines_next',
-        { rid: this.rid }
-      )
+      let arr: ArrayBuffer | number[]
+      try {
+        arr = await invoke<ArrayBuffer | number[]>(
+          'plugin:fs|read_text_file_lines_next',
+          { rid: this.rid }
+        )
+      } catch (error) {
+        // the resource is closed on errors, the next iteration starts over
+        this.rid = null
+        throw error
+      }
 
       const bytes =
         arr instanceof ArrayBuffer ? new Uint8Array(arr) : Uint8Array.from(arr)
@@ -857,6 +914,17 @@ async function readTextFileLines(
       }
     },
 
+    // called when a `for await` loop exits early (`break`, `return` or `throw`)
+    async return(): Promise<IteratorResult<string>> {
+      if (this.rid !== null) {
+        const rid = this.rid
+        this.rid = null
+        // close the file, otherwise it stays open until the webview is destroyed
+        await new Resource(rid).close()
+      }
+      return { value: null, done: true }
+    },
+
     [Symbol.asyncIterator](): AsyncIterableIterator<string> {
       return this
     }
@@ -864,6 +932,8 @@ async function readTextFileLines(
 }
 
 /**
+ * Options for the `remove` function, which deletes a file or a directory.
+ *
  * @since 2.0.0
  */
 interface RemoveOptions {
@@ -883,6 +953,8 @@ interface RemoveOptions {
  * await remove('users', { baseDir: BaseDirectory.AppLocalData });
  * ```
  *
+ * @param path The path of the file or directory to remove.
+ * @param options Options defining the base directory of `path` and whether directories are removed recursively.
  * @since 2.0.0
  */
 async function remove(
@@ -900,6 +972,8 @@ async function remove(
 }
 
 /**
+ * Options for the `rename` function, defining the base directory of each path.
+ *
  * @since 2.0.0
  */
 interface RenameOptions {
@@ -922,6 +996,9 @@ interface RenameOptions {
  * await rename('avatar.png', 'deleted.png', { oldPathBaseDir: BaseDirectory.App, newPathBaseDir: BaseDirectory.AppLocalData });
  * ```
  *
+ * @param oldPath The path of the file or directory to rename.
+ * @param newPath The path the file or directory is renamed to.
+ * @param options Options defining the base directory of each path.
  * @since 2.0.0
  */
 async function rename(
@@ -944,6 +1021,8 @@ async function rename(
 }
 
 /**
+ * Options for the `stat` and `lstat` functions, which read the metadata of a path.
+ *
  * @since 2.0.0
  */
 interface StatOptions {
@@ -962,6 +1041,9 @@ interface StatOptions {
  * console.log(fileInfo.isFile); // true
  * ```
  *
+ * @param path The path of the file or directory to inspect.
+ * @param options Options defining the base directory of `path`.
+ * @returns A promise resolving to the metadata of the file or directory.
  * @since 2.0.0
  */
 async function stat(
@@ -988,6 +1070,9 @@ async function stat(
  * console.log(fileInfo.isFile); // true
  * ```
  *
+ * @param path The path of the file, directory or symlink to inspect.
+ * @param options Options defining the base directory of `path`.
+ * @returns A promise resolving to the metadata of the path itself.
  * @since 2.0.0
  */
 async function lstat(
@@ -1003,6 +1088,8 @@ async function lstat(
 }
 
 /**
+ * Options for the `truncate` function, which truncates or extends a file.
+ *
  * @since 2.0.0
  */
 interface TruncateOptions {
@@ -1028,6 +1115,9 @@ interface TruncateOptions {
  * console.log(data);  // "Hello W"
  * ```
  *
+ * @param path The path of the file to truncate or extend.
+ * @param len The length the file is resized to, in bytes. Defaults to `0`.
+ * @param options Options defining the base directory of `path`.
  * @since 2.0.0
  */
 async function truncate(
@@ -1047,6 +1137,8 @@ async function truncate(
 }
 
 /**
+ * Options for the `writeFile` and `writeTextFile` functions, defining how the file is opened before writing to it.
+ *
  * @since 2.0.0
  */
 interface WriteFileOptions {
@@ -1073,6 +1165,9 @@ interface WriteFileOptions {
  * await writeFile('file.txt', data, { baseDir: BaseDirectory.AppLocalData });
  * ```
  *
+ * @param path The path of the file to write to.
+ * @param data The bytes written to the file, either as a buffer or as a stream of chunks.
+ * @param options Options defining the base directory of `path` and how the file is opened.
  * @since 2.0.0
  */
 async function writeFile(
@@ -1114,16 +1209,20 @@ async function writeFile(
 }
 
 /**
-  * Writes UTF-8 string `data` to the given `path`, by default creating a new file if needed, else overwriting.
-    @example
-  * ```typescript
-  * import { writeTextFile, BaseDirectory } from '@tauri-apps/plugin-fs';
-  *
-  * await writeTextFile('file.txt', "Hello world", { baseDir: BaseDirectory.AppLocalData });
-  * ```
-  *
-  * @since 2.0.0
-  */
+ * Writes UTF-8 string `data` to the given `path`, by default creating a new file if needed, else overwriting.
+ *
+ * @example
+ * ```typescript
+ * import { writeTextFile, BaseDirectory } from '@tauri-apps/plugin-fs';
+ *
+ * await writeTextFile('file.txt', "Hello world", { baseDir: BaseDirectory.AppLocalData });
+ * ```
+ *
+ * @param path The path of the file to write to.
+ * @param data The UTF-8 string written to the file.
+ * @param options Options defining the base directory of `path` and how the file is opened.
+ * @since 2.0.0
+ */
 async function writeTextFile(
   path: string | URL,
   data: string,
@@ -1133,6 +1232,8 @@ async function writeTextFile(
 }
 
 /**
+ * Options for the `exists` function, which checks whether a path exists.
+ *
  * @since 2.0.0
  */
 interface ExistsOptions {
@@ -1149,6 +1250,9 @@ interface ExistsOptions {
  * await exists('avatar.png', { baseDir: BaseDirectory.AppData });
  * ```
  *
+ * @param path The path to check.
+ * @param options Options defining the base directory of `path`.
+ * @returns A promise resolving to `true` when the path exists, `false` otherwise.
  * @since 2.0.0
  */
 async function exists(
@@ -1166,6 +1270,8 @@ async function exists(
 }
 
 /**
+ * Options for the `watchImmediate` function, which reports file system changes as they happen.
+ *
  * @since 2.0.0
  */
 interface WatchOptions {
@@ -1176,10 +1282,15 @@ interface WatchOptions {
 }
 
 /**
+ * Options for the `watch` function, which reports file system changes after a debounce delay.
+ *
  * @since 2.0.0
  */
 interface DebouncedWatchOptions extends WatchOptions {
-  /** Debounce delay */
+  /**
+   * The debounce delay in milliseconds. Changes that happen within this
+   * window are grouped and reported together. Defaults to `2000`.
+   */
   delayMs?: number
 }
 
@@ -1226,6 +1337,8 @@ type WatchEvent = WatchEventKind & {
 }
 
 /**
+ * The kind of file system change described by a `WatchEvent`.
+ *
  * @since 2.0.0
  */
 type WatchEventKind =
@@ -1237,6 +1350,8 @@ type WatchEventKind =
   | { type: 'other' }
 
 /**
+ * Describes how a file or directory was accessed.
+ *
  * @since 2.0.0
  */
 type WatchEventKindAccess =
@@ -1246,6 +1361,8 @@ type WatchEventKindAccess =
   | { kind: 'other' }
 
 /**
+ * Describes which kind of entry was created.
+ *
  * @since 2.0.0
  */
 type WatchEventKindCreate =
@@ -1255,6 +1372,8 @@ type WatchEventKindCreate =
   | { kind: 'other' }
 
 /**
+ * Describes what was modified on a file or directory.
+ *
  * @since 2.0.0
  */
 type WatchEventKindModify =
@@ -1275,6 +1394,8 @@ type WatchEventKindModify =
   | { kind: 'other' }
 
 /**
+ * Describes which kind of entry was removed.
+ *
  * @since 2.0.0
  */
 type WatchEventKindRemove =
@@ -1363,6 +1484,16 @@ async function watchImmediate(
   })
 }
 
+/**
+ * Options for the `size` function.
+ *
+ * @since 2.6.0
+ */
+interface SizeOptions {
+  /** Base directory for `path`. */
+  baseDir?: BaseDirectory
+}
+
 /**
  * Get the size of a file or directory. For files, the `stat` functions can be used as well.
  *
@@ -1376,15 +1507,22 @@ async function watchImmediate(
  * console.log(dirSize); // 1024
  * ```
  *
+ * @param path The path of the file or directory to measure.
+ * @param options Options defining the base directory of `path` (since 2.6.0).
+ * @returns A promise resolving to the size in bytes.
  * @since 2.1.0
  */
-async function size(path: string | URL): Promise<number> {
+async function size(
+  path: string | URL,
+  options?: SizeOptions
+): Promise<number> {
   if (path instanceof URL && path.protocol !== 'file:') {
     throw new TypeError('Must be a file URL.')
   }
 
   return await invoke('plugin:fs|size', {
-    path: path instanceof URL ? path.toString() : path
+    path: path instanceof URL ? path.toString() : path,
+    options
   })
 }
 
@@ -1412,6 +1550,7 @@ async function size(path: string | URL): Promise<number> {
  * // ... use the resource ...
  * ```
  *
+ * @param path The path or `file://` URL of the resource to start accessing.
  * @since 2.5.0
  */
 async function startAccessingSecurityScopedResource(
@@ -1447,6 +1586,7 @@ async function startAccessingSecurityScopedResource(
  * await stopAccessingSecurityScopedResource(filePath);
  * ```
  *
+ * @param path The path or `file://` URL of the resource to stop accessing.
  * @since 2.5.0
  */
 async function stopAccessingSecurityScopedResource(
@@ -1475,6 +1615,7 @@ export type {
   TruncateOptions,
   WriteFileOptions,
   ExistsOptions,
+  SizeOptions,
   FileInfo,
   WatchOptions,
   DebouncedWatchOptions,
diff --git a/plugins/fs/permissions/autogenerated/base-directories/appcache.toml b/plugins/fs/permissions/autogenerated/base-directories/appcache.toml
index 1fbb4ece6..50e19efc9 100644
--- a/plugins/fs/permissions/autogenerated/base-directories/appcache.toml
+++ b/plugins/fs/permissions/autogenerated/base-directories/appcache.toml
@@ -36,29 +36,47 @@ path = "$APPCACHE"
 [[set]]
 identifier = "allow-appcache-read-recursive"
 description = "This allows full recursive read access to the complete `$APPCACHE` folder, files and subdirectories."
-permissions = ["read-all", "scope-appcache-recursive"]
+permissions = [
+    "read-all",
+    "scope-appcache-recursive"
+]
 
 [[set]]
 identifier = "allow-appcache-write-recursive"
 description = "This allows full recursive write access to the complete `$APPCACHE` folder, files and subdirectories."
-permissions = ["write-all", "scope-appcache-recursive"]
+permissions = [
+    "write-all",
+    "scope-appcache-recursive"
+]
 
 [[set]]
 identifier = "allow-appcache-read"
 description = "This allows non-recursive read access to the `$APPCACHE` folder."
-permissions = ["read-all", "scope-appcache"]
+permissions = [
+    "read-all",
+    "scope-appcache"
+]
 
 [[set]]
 identifier = "allow-appcache-write"
 description = "This allows non-recursive write access to the `$APPCACHE` folder."
-permissions = ["write-all", "scope-appcache"]
+permissions = [
+    "write-all",
+    "scope-appcache"
+]
 
 [[set]]
 identifier = "allow-appcache-meta-recursive"
 description = "This allows full recursive read access to metadata of the `$APPCACHE` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-appcache-recursive"]
+permissions = [
+    "read-meta",
+    "scope-appcache-recursive"
+]
 
 [[set]]
 identifier = "allow-appcache-meta"
 description = "This allows non-recursive read access to metadata of the `$APPCACHE` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-appcache-index"]
+permissions = [
+    "read-meta",
+    "scope-appcache-index"
+]
\ No newline at end of file
diff --git a/plugins/fs/permissions/autogenerated/base-directories/appconfig.toml b/plugins/fs/permissions/autogenerated/base-directories/appconfig.toml
index 0c3b821e4..ab136956d 100644
--- a/plugins/fs/permissions/autogenerated/base-directories/appconfig.toml
+++ b/plugins/fs/permissions/autogenerated/base-directories/appconfig.toml
@@ -36,29 +36,47 @@ path = "$APPCONFIG"
 [[set]]
 identifier = "allow-appconfig-read-recursive"
 description = "This allows full recursive read access to the complete `$APPCONFIG` folder, files and subdirectories."
-permissions = ["read-all", "scope-appconfig-recursive"]
+permissions = [
+    "read-all",
+    "scope-appconfig-recursive"
+]
 
 [[set]]
 identifier = "allow-appconfig-write-recursive"
 description = "This allows full recursive write access to the complete `$APPCONFIG` folder, files and subdirectories."
-permissions = ["write-all", "scope-appconfig-recursive"]
+permissions = [
+    "write-all",
+    "scope-appconfig-recursive"
+]
 
 [[set]]
 identifier = "allow-appconfig-read"
 description = "This allows non-recursive read access to the `$APPCONFIG` folder."
-permissions = ["read-all", "scope-appconfig"]
+permissions = [
+    "read-all",
+    "scope-appconfig"
+]
 
 [[set]]
 identifier = "allow-appconfig-write"
 description = "This allows non-recursive write access to the `$APPCONFIG` folder."
-permissions = ["write-all", "scope-appconfig"]
+permissions = [
+    "write-all",
+    "scope-appconfig"
+]
 
 [[set]]
 identifier = "allow-appconfig-meta-recursive"
 description = "This allows full recursive read access to metadata of the `$APPCONFIG` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-appconfig-recursive"]
+permissions = [
+    "read-meta",
+    "scope-appconfig-recursive"
+]
 
 [[set]]
 identifier = "allow-appconfig-meta"
 description = "This allows non-recursive read access to metadata of the `$APPCONFIG` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-appconfig-index"]
+permissions = [
+    "read-meta",
+    "scope-appconfig-index"
+]
\ No newline at end of file
diff --git a/plugins/fs/permissions/autogenerated/base-directories/appdata.toml b/plugins/fs/permissions/autogenerated/base-directories/appdata.toml
index 3960f6241..1b0931e20 100644
--- a/plugins/fs/permissions/autogenerated/base-directories/appdata.toml
+++ b/plugins/fs/permissions/autogenerated/base-directories/appdata.toml
@@ -36,29 +36,47 @@ path = "$APPDATA"
 [[set]]
 identifier = "allow-appdata-read-recursive"
 description = "This allows full recursive read access to the complete `$APPDATA` folder, files and subdirectories."
-permissions = ["read-all", "scope-appdata-recursive"]
+permissions = [
+    "read-all",
+    "scope-appdata-recursive"
+]
 
 [[set]]
 identifier = "allow-appdata-write-recursive"
 description = "This allows full recursive write access to the complete `$APPDATA` folder, files and subdirectories."
-permissions = ["write-all", "scope-appdata-recursive"]
+permissions = [
+    "write-all",
+    "scope-appdata-recursive"
+]
 
 [[set]]
 identifier = "allow-appdata-read"
 description = "This allows non-recursive read access to the `$APPDATA` folder."
-permissions = ["read-all", "scope-appdata"]
+permissions = [
+    "read-all",
+    "scope-appdata"
+]
 
 [[set]]
 identifier = "allow-appdata-write"
 description = "This allows non-recursive write access to the `$APPDATA` folder."
-permissions = ["write-all", "scope-appdata"]
+permissions = [
+    "write-all",
+    "scope-appdata"
+]
 
 [[set]]
 identifier = "allow-appdata-meta-recursive"
 description = "This allows full recursive read access to metadata of the `$APPDATA` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-appdata-recursive"]
+permissions = [
+    "read-meta",
+    "scope-appdata-recursive"
+]
 
 [[set]]
 identifier = "allow-appdata-meta"
 description = "This allows non-recursive read access to metadata of the `$APPDATA` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-appdata-index"]
+permissions = [
+    "read-meta",
+    "scope-appdata-index"
+]
\ No newline at end of file
diff --git a/plugins/fs/permissions/autogenerated/base-directories/applocaldata.toml b/plugins/fs/permissions/autogenerated/base-directories/applocaldata.toml
index 8bec20d74..a6e38a31f 100644
--- a/plugins/fs/permissions/autogenerated/base-directories/applocaldata.toml
+++ b/plugins/fs/permissions/autogenerated/base-directories/applocaldata.toml
@@ -36,29 +36,47 @@ path = "$APPLOCALDATA"
 [[set]]
 identifier = "allow-applocaldata-read-recursive"
 description = "This allows full recursive read access to the complete `$APPLOCALDATA` folder, files and subdirectories."
-permissions = ["read-all", "scope-applocaldata-recursive"]
+permissions = [
+    "read-all",
+    "scope-applocaldata-recursive"
+]
 
 [[set]]
 identifier = "allow-applocaldata-write-recursive"
 description = "This allows full recursive write access to the complete `$APPLOCALDATA` folder, files and subdirectories."
-permissions = ["write-all", "scope-applocaldata-recursive"]
+permissions = [
+    "write-all",
+    "scope-applocaldata-recursive"
+]
 
 [[set]]
 identifier = "allow-applocaldata-read"
 description = "This allows non-recursive read access to the `$APPLOCALDATA` folder."
-permissions = ["read-all", "scope-applocaldata"]
+permissions = [
+    "read-all",
+    "scope-applocaldata"
+]
 
 [[set]]
 identifier = "allow-applocaldata-write"
 description = "This allows non-recursive write access to the `$APPLOCALDATA` folder."
-permissions = ["write-all", "scope-applocaldata"]
+permissions = [
+    "write-all",
+    "scope-applocaldata"
+]
 
 [[set]]
 identifier = "allow-applocaldata-meta-recursive"
 description = "This allows full recursive read access to metadata of the `$APPLOCALDATA` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-applocaldata-recursive"]
+permissions = [
+    "read-meta",
+    "scope-applocaldata-recursive"
+]
 
 [[set]]
 identifier = "allow-applocaldata-meta"
 description = "This allows non-recursive read access to metadata of the `$APPLOCALDATA` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-applocaldata-index"]
+permissions = [
+    "read-meta",
+    "scope-applocaldata-index"
+]
\ No newline at end of file
diff --git a/plugins/fs/permissions/autogenerated/base-directories/applog.toml b/plugins/fs/permissions/autogenerated/base-directories/applog.toml
index d67c648e0..a979ce76a 100644
--- a/plugins/fs/permissions/autogenerated/base-directories/applog.toml
+++ b/plugins/fs/permissions/autogenerated/base-directories/applog.toml
@@ -36,29 +36,47 @@ path = "$APPLOG"
 [[set]]
 identifier = "allow-applog-read-recursive"
 description = "This allows full recursive read access to the complete `$APPLOG` folder, files and subdirectories."
-permissions = ["read-all", "scope-applog-recursive"]
+permissions = [
+    "read-all",
+    "scope-applog-recursive"
+]
 
 [[set]]
 identifier = "allow-applog-write-recursive"
 description = "This allows full recursive write access to the complete `$APPLOG` folder, files and subdirectories."
-permissions = ["write-all", "scope-applog-recursive"]
+permissions = [
+    "write-all",
+    "scope-applog-recursive"
+]
 
 [[set]]
 identifier = "allow-applog-read"
 description = "This allows non-recursive read access to the `$APPLOG` folder."
-permissions = ["read-all", "scope-applog"]
+permissions = [
+    "read-all",
+    "scope-applog"
+]
 
 [[set]]
 identifier = "allow-applog-write"
 description = "This allows non-recursive write access to the `$APPLOG` folder."
-permissions = ["write-all", "scope-applog"]
+permissions = [
+    "write-all",
+    "scope-applog"
+]
 
 [[set]]
 identifier = "allow-applog-meta-recursive"
 description = "This allows full recursive read access to metadata of the `$APPLOG` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-applog-recursive"]
+permissions = [
+    "read-meta",
+    "scope-applog-recursive"
+]
 
 [[set]]
 identifier = "allow-applog-meta"
 description = "This allows non-recursive read access to metadata of the `$APPLOG` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-applog-index"]
+permissions = [
+    "read-meta",
+    "scope-applog-index"
+]
\ No newline at end of file
diff --git a/plugins/fs/permissions/autogenerated/base-directories/audio.toml b/plugins/fs/permissions/autogenerated/base-directories/audio.toml
index 570e2cc21..d66d68a23 100644
--- a/plugins/fs/permissions/autogenerated/base-directories/audio.toml
+++ b/plugins/fs/permissions/autogenerated/base-directories/audio.toml
@@ -36,29 +36,47 @@ path = "$AUDIO"
 [[set]]
 identifier = "allow-audio-read-recursive"
 description = "This allows full recursive read access to the complete `$AUDIO` folder, files and subdirectories."
-permissions = ["read-all", "scope-audio-recursive"]
+permissions = [
+    "read-all",
+    "scope-audio-recursive"
+]
 
 [[set]]
 identifier = "allow-audio-write-recursive"
 description = "This allows full recursive write access to the complete `$AUDIO` folder, files and subdirectories."
-permissions = ["write-all", "scope-audio-recursive"]
+permissions = [
+    "write-all",
+    "scope-audio-recursive"
+]
 
 [[set]]
 identifier = "allow-audio-read"
 description = "This allows non-recursive read access to the `$AUDIO` folder."
-permissions = ["read-all", "scope-audio"]
+permissions = [
+    "read-all",
+    "scope-audio"
+]
 
 [[set]]
 identifier = "allow-audio-write"
 description = "This allows non-recursive write access to the `$AUDIO` folder."
-permissions = ["write-all", "scope-audio"]
+permissions = [
+    "write-all",
+    "scope-audio"
+]
 
 [[set]]
 identifier = "allow-audio-meta-recursive"
 description = "This allows full recursive read access to metadata of the `$AUDIO` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-audio-recursive"]
+permissions = [
+    "read-meta",
+    "scope-audio-recursive"
+]
 
 [[set]]
 identifier = "allow-audio-meta"
 description = "This allows non-recursive read access to metadata of the `$AUDIO` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-audio-index"]
+permissions = [
+    "read-meta",
+    "scope-audio-index"
+]
\ No newline at end of file
diff --git a/plugins/fs/permissions/autogenerated/base-directories/cache.toml b/plugins/fs/permissions/autogenerated/base-directories/cache.toml
index 509247363..814319eb8 100644
--- a/plugins/fs/permissions/autogenerated/base-directories/cache.toml
+++ b/plugins/fs/permissions/autogenerated/base-directories/cache.toml
@@ -36,29 +36,47 @@ path = "$CACHE"
 [[set]]
 identifier = "allow-cache-read-recursive"
 description = "This allows full recursive read access to the complete `$CACHE` folder, files and subdirectories."
-permissions = ["read-all", "scope-cache-recursive"]
+permissions = [
+    "read-all",
+    "scope-cache-recursive"
+]
 
 [[set]]
 identifier = "allow-cache-write-recursive"
 description = "This allows full recursive write access to the complete `$CACHE` folder, files and subdirectories."
-permissions = ["write-all", "scope-cache-recursive"]
+permissions = [
+    "write-all",
+    "scope-cache-recursive"
+]
 
 [[set]]
 identifier = "allow-cache-read"
 description = "This allows non-recursive read access to the `$CACHE` folder."
-permissions = ["read-all", "scope-cache"]
+permissions = [
+    "read-all",
+    "scope-cache"
+]
 
 [[set]]
 identifier = "allow-cache-write"
 description = "This allows non-recursive write access to the `$CACHE` folder."
-permissions = ["write-all", "scope-cache"]
+permissions = [
+    "write-all",
+    "scope-cache"
+]
 
 [[set]]
 identifier = "allow-cache-meta-recursive"
 description = "This allows full recursive read access to metadata of the `$CACHE` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-cache-recursive"]
+permissions = [
+    "read-meta",
+    "scope-cache-recursive"
+]
 
 [[set]]
 identifier = "allow-cache-meta"
 description = "This allows non-recursive read access to metadata of the `$CACHE` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-cache-index"]
+permissions = [
+    "read-meta",
+    "scope-cache-index"
+]
\ No newline at end of file
diff --git a/plugins/fs/permissions/autogenerated/base-directories/config.toml b/plugins/fs/permissions/autogenerated/base-directories/config.toml
index fdde6c3bf..592210456 100644
--- a/plugins/fs/permissions/autogenerated/base-directories/config.toml
+++ b/plugins/fs/permissions/autogenerated/base-directories/config.toml
@@ -36,29 +36,47 @@ path = "$CONFIG"
 [[set]]
 identifier = "allow-config-read-recursive"
 description = "This allows full recursive read access to the complete `$CONFIG` folder, files and subdirectories."
-permissions = ["read-all", "scope-config-recursive"]
+permissions = [
+    "read-all",
+    "scope-config-recursive"
+]
 
 [[set]]
 identifier = "allow-config-write-recursive"
 description = "This allows full recursive write access to the complete `$CONFIG` folder, files and subdirectories."
-permissions = ["write-all", "scope-config-recursive"]
+permissions = [
+    "write-all",
+    "scope-config-recursive"
+]
 
 [[set]]
 identifier = "allow-config-read"
 description = "This allows non-recursive read access to the `$CONFIG` folder."
-permissions = ["read-all", "scope-config"]
+permissions = [
+    "read-all",
+    "scope-config"
+]
 
 [[set]]
 identifier = "allow-config-write"
 description = "This allows non-recursive write access to the `$CONFIG` folder."
-permissions = ["write-all", "scope-config"]
+permissions = [
+    "write-all",
+    "scope-config"
+]
 
 [[set]]
 identifier = "allow-config-meta-recursive"
 description = "This allows full recursive read access to metadata of the `$CONFIG` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-config-recursive"]
+permissions = [
+    "read-meta",
+    "scope-config-recursive"
+]
 
 [[set]]
 identifier = "allow-config-meta"
 description = "This allows non-recursive read access to metadata of the `$CONFIG` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-config-index"]
+permissions = [
+    "read-meta",
+    "scope-config-index"
+]
\ No newline at end of file
diff --git a/plugins/fs/permissions/autogenerated/base-directories/data.toml b/plugins/fs/permissions/autogenerated/base-directories/data.toml
index c384bd181..a8428ca13 100644
--- a/plugins/fs/permissions/autogenerated/base-directories/data.toml
+++ b/plugins/fs/permissions/autogenerated/base-directories/data.toml
@@ -36,29 +36,47 @@ path = "$DATA"
 [[set]]
 identifier = "allow-data-read-recursive"
 description = "This allows full recursive read access to the complete `$DATA` folder, files and subdirectories."
-permissions = ["read-all", "scope-data-recursive"]
+permissions = [
+    "read-all",
+    "scope-data-recursive"
+]
 
 [[set]]
 identifier = "allow-data-write-recursive"
 description = "This allows full recursive write access to the complete `$DATA` folder, files and subdirectories."
-permissions = ["write-all", "scope-data-recursive"]
+permissions = [
+    "write-all",
+    "scope-data-recursive"
+]
 
 [[set]]
 identifier = "allow-data-read"
 description = "This allows non-recursive read access to the `$DATA` folder."
-permissions = ["read-all", "scope-data"]
+permissions = [
+    "read-all",
+    "scope-data"
+]
 
 [[set]]
 identifier = "allow-data-write"
 description = "This allows non-recursive write access to the `$DATA` folder."
-permissions = ["write-all", "scope-data"]
+permissions = [
+    "write-all",
+    "scope-data"
+]
 
 [[set]]
 identifier = "allow-data-meta-recursive"
 description = "This allows full recursive read access to metadata of the `$DATA` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-data-recursive"]
+permissions = [
+    "read-meta",
+    "scope-data-recursive"
+]
 
 [[set]]
 identifier = "allow-data-meta"
 description = "This allows non-recursive read access to metadata of the `$DATA` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-data-index"]
+permissions = [
+    "read-meta",
+    "scope-data-index"
+]
\ No newline at end of file
diff --git a/plugins/fs/permissions/autogenerated/base-directories/desktop.toml b/plugins/fs/permissions/autogenerated/base-directories/desktop.toml
index b0b4feb12..da369fa03 100644
--- a/plugins/fs/permissions/autogenerated/base-directories/desktop.toml
+++ b/plugins/fs/permissions/autogenerated/base-directories/desktop.toml
@@ -36,29 +36,47 @@ path = "$DESKTOP"
 [[set]]
 identifier = "allow-desktop-read-recursive"
 description = "This allows full recursive read access to the complete `$DESKTOP` folder, files and subdirectories."
-permissions = ["read-all", "scope-desktop-recursive"]
+permissions = [
+    "read-all",
+    "scope-desktop-recursive"
+]
 
 [[set]]
 identifier = "allow-desktop-write-recursive"
 description = "This allows full recursive write access to the complete `$DESKTOP` folder, files and subdirectories."
-permissions = ["write-all", "scope-desktop-recursive"]
+permissions = [
+    "write-all",
+    "scope-desktop-recursive"
+]
 
 [[set]]
 identifier = "allow-desktop-read"
 description = "This allows non-recursive read access to the `$DESKTOP` folder."
-permissions = ["read-all", "scope-desktop"]
+permissions = [
+    "read-all",
+    "scope-desktop"
+]
 
 [[set]]
 identifier = "allow-desktop-write"
 description = "This allows non-recursive write access to the `$DESKTOP` folder."
-permissions = ["write-all", "scope-desktop"]
+permissions = [
+    "write-all",
+    "scope-desktop"
+]
 
 [[set]]
 identifier = "allow-desktop-meta-recursive"
 description = "This allows full recursive read access to metadata of the `$DESKTOP` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-desktop-recursive"]
+permissions = [
+    "read-meta",
+    "scope-desktop-recursive"
+]
 
 [[set]]
 identifier = "allow-desktop-meta"
 description = "This allows non-recursive read access to metadata of the `$DESKTOP` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-desktop-index"]
+permissions = [
+    "read-meta",
+    "scope-desktop-index"
+]
\ No newline at end of file
diff --git a/plugins/fs/permissions/autogenerated/base-directories/document.toml b/plugins/fs/permissions/autogenerated/base-directories/document.toml
index ad2ac2224..9feb4d0d0 100644
--- a/plugins/fs/permissions/autogenerated/base-directories/document.toml
+++ b/plugins/fs/permissions/autogenerated/base-directories/document.toml
@@ -36,29 +36,47 @@ path = "$DOCUMENT"
 [[set]]
 identifier = "allow-document-read-recursive"
 description = "This allows full recursive read access to the complete `$DOCUMENT` folder, files and subdirectories."
-permissions = ["read-all", "scope-document-recursive"]
+permissions = [
+    "read-all",
+    "scope-document-recursive"
+]
 
 [[set]]
 identifier = "allow-document-write-recursive"
 description = "This allows full recursive write access to the complete `$DOCUMENT` folder, files and subdirectories."
-permissions = ["write-all", "scope-document-recursive"]
+permissions = [
+    "write-all",
+    "scope-document-recursive"
+]
 
 [[set]]
 identifier = "allow-document-read"
 description = "This allows non-recursive read access to the `$DOCUMENT` folder."
-permissions = ["read-all", "scope-document"]
+permissions = [
+    "read-all",
+    "scope-document"
+]
 
 [[set]]
 identifier = "allow-document-write"
 description = "This allows non-recursive write access to the `$DOCUMENT` folder."
-permissions = ["write-all", "scope-document"]
+permissions = [
+    "write-all",
+    "scope-document"
+]
 
 [[set]]
 identifier = "allow-document-meta-recursive"
 description = "This allows full recursive read access to metadata of the `$DOCUMENT` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-document-recursive"]
+permissions = [
+    "read-meta",
+    "scope-document-recursive"
+]
 
 [[set]]
 identifier = "allow-document-meta"
 description = "This allows non-recursive read access to metadata of the `$DOCUMENT` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-document-index"]
+permissions = [
+    "read-meta",
+    "scope-document-index"
+]
\ No newline at end of file
diff --git a/plugins/fs/permissions/autogenerated/base-directories/download.toml b/plugins/fs/permissions/autogenerated/base-directories/download.toml
index 30953f61a..8659e3ac4 100644
--- a/plugins/fs/permissions/autogenerated/base-directories/download.toml
+++ b/plugins/fs/permissions/autogenerated/base-directories/download.toml
@@ -36,29 +36,47 @@ path = "$DOWNLOAD"
 [[set]]
 identifier = "allow-download-read-recursive"
 description = "This allows full recursive read access to the complete `$DOWNLOAD` folder, files and subdirectories."
-permissions = ["read-all", "scope-download-recursive"]
+permissions = [
+    "read-all",
+    "scope-download-recursive"
+]
 
 [[set]]
 identifier = "allow-download-write-recursive"
 description = "This allows full recursive write access to the complete `$DOWNLOAD` folder, files and subdirectories."
-permissions = ["write-all", "scope-download-recursive"]
+permissions = [
+    "write-all",
+    "scope-download-recursive"
+]
 
 [[set]]
 identifier = "allow-download-read"
 description = "This allows non-recursive read access to the `$DOWNLOAD` folder."
-permissions = ["read-all", "scope-download"]
+permissions = [
+    "read-all",
+    "scope-download"
+]
 
 [[set]]
 identifier = "allow-download-write"
 description = "This allows non-recursive write access to the `$DOWNLOAD` folder."
-permissions = ["write-all", "scope-download"]
+permissions = [
+    "write-all",
+    "scope-download"
+]
 
 [[set]]
 identifier = "allow-download-meta-recursive"
 description = "This allows full recursive read access to metadata of the `$DOWNLOAD` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-download-recursive"]
+permissions = [
+    "read-meta",
+    "scope-download-recursive"
+]
 
 [[set]]
 identifier = "allow-download-meta"
 description = "This allows non-recursive read access to metadata of the `$DOWNLOAD` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-download-index"]
+permissions = [
+    "read-meta",
+    "scope-download-index"
+]
\ No newline at end of file
diff --git a/plugins/fs/permissions/autogenerated/base-directories/exe.toml b/plugins/fs/permissions/autogenerated/base-directories/exe.toml
index e305ae3e4..94950e844 100644
--- a/plugins/fs/permissions/autogenerated/base-directories/exe.toml
+++ b/plugins/fs/permissions/autogenerated/base-directories/exe.toml
@@ -36,29 +36,47 @@ path = "$EXE"
 [[set]]
 identifier = "allow-exe-read-recursive"
 description = "This allows full recursive read access to the complete `$EXE` folder, files and subdirectories."
-permissions = ["read-all", "scope-exe-recursive"]
+permissions = [
+    "read-all",
+    "scope-exe-recursive"
+]
 
 [[set]]
 identifier = "allow-exe-write-recursive"
 description = "This allows full recursive write access to the complete `$EXE` folder, files and subdirectories."
-permissions = ["write-all", "scope-exe-recursive"]
+permissions = [
+    "write-all",
+    "scope-exe-recursive"
+]
 
 [[set]]
 identifier = "allow-exe-read"
 description = "This allows non-recursive read access to the `$EXE` folder."
-permissions = ["read-all", "scope-exe"]
+permissions = [
+    "read-all",
+    "scope-exe"
+]
 
 [[set]]
 identifier = "allow-exe-write"
 description = "This allows non-recursive write access to the `$EXE` folder."
-permissions = ["write-all", "scope-exe"]
+permissions = [
+    "write-all",
+    "scope-exe"
+]
 
 [[set]]
 identifier = "allow-exe-meta-recursive"
 description = "This allows full recursive read access to metadata of the `$EXE` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-exe-recursive"]
+permissions = [
+    "read-meta",
+    "scope-exe-recursive"
+]
 
 [[set]]
 identifier = "allow-exe-meta"
 description = "This allows non-recursive read access to metadata of the `$EXE` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-exe-index"]
+permissions = [
+    "read-meta",
+    "scope-exe-index"
+]
\ No newline at end of file
diff --git a/plugins/fs/permissions/autogenerated/base-directories/font.toml b/plugins/fs/permissions/autogenerated/base-directories/font.toml
index 2736c4c47..21840046a 100644
--- a/plugins/fs/permissions/autogenerated/base-directories/font.toml
+++ b/plugins/fs/permissions/autogenerated/base-directories/font.toml
@@ -36,29 +36,47 @@ path = "$FONT"
 [[set]]
 identifier = "allow-font-read-recursive"
 description = "This allows full recursive read access to the complete `$FONT` folder, files and subdirectories."
-permissions = ["read-all", "scope-font-recursive"]
+permissions = [
+    "read-all",
+    "scope-font-recursive"
+]
 
 [[set]]
 identifier = "allow-font-write-recursive"
 description = "This allows full recursive write access to the complete `$FONT` folder, files and subdirectories."
-permissions = ["write-all", "scope-font-recursive"]
+permissions = [
+    "write-all",
+    "scope-font-recursive"
+]
 
 [[set]]
 identifier = "allow-font-read"
 description = "This allows non-recursive read access to the `$FONT` folder."
-permissions = ["read-all", "scope-font"]
+permissions = [
+    "read-all",
+    "scope-font"
+]
 
 [[set]]
 identifier = "allow-font-write"
 description = "This allows non-recursive write access to the `$FONT` folder."
-permissions = ["write-all", "scope-font"]
+permissions = [
+    "write-all",
+    "scope-font"
+]
 
 [[set]]
 identifier = "allow-font-meta-recursive"
 description = "This allows full recursive read access to metadata of the `$FONT` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-font-recursive"]
+permissions = [
+    "read-meta",
+    "scope-font-recursive"
+]
 
 [[set]]
 identifier = "allow-font-meta"
 description = "This allows non-recursive read access to metadata of the `$FONT` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-font-index"]
+permissions = [
+    "read-meta",
+    "scope-font-index"
+]
\ No newline at end of file
diff --git a/plugins/fs/permissions/autogenerated/base-directories/home.toml b/plugins/fs/permissions/autogenerated/base-directories/home.toml
index d80ae823a..cbf48e2fb 100644
--- a/plugins/fs/permissions/autogenerated/base-directories/home.toml
+++ b/plugins/fs/permissions/autogenerated/base-directories/home.toml
@@ -36,29 +36,47 @@ path = "$HOME"
 [[set]]
 identifier = "allow-home-read-recursive"
 description = "This allows full recursive read access to the complete `$HOME` folder, files and subdirectories."
-permissions = ["read-all", "scope-home-recursive"]
+permissions = [
+    "read-all",
+    "scope-home-recursive"
+]
 
 [[set]]
 identifier = "allow-home-write-recursive"
 description = "This allows full recursive write access to the complete `$HOME` folder, files and subdirectories."
-permissions = ["write-all", "scope-home-recursive"]
+permissions = [
+    "write-all",
+    "scope-home-recursive"
+]
 
 [[set]]
 identifier = "allow-home-read"
 description = "This allows non-recursive read access to the `$HOME` folder."
-permissions = ["read-all", "scope-home"]
+permissions = [
+    "read-all",
+    "scope-home"
+]
 
 [[set]]
 identifier = "allow-home-write"
 description = "This allows non-recursive write access to the `$HOME` folder."
-permissions = ["write-all", "scope-home"]
+permissions = [
+    "write-all",
+    "scope-home"
+]
 
 [[set]]
 identifier = "allow-home-meta-recursive"
 description = "This allows full recursive read access to metadata of the `$HOME` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-home-recursive"]
+permissions = [
+    "read-meta",
+    "scope-home-recursive"
+]
 
 [[set]]
 identifier = "allow-home-meta"
 description = "This allows non-recursive read access to metadata of the `$HOME` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-home-index"]
+permissions = [
+    "read-meta",
+    "scope-home-index"
+]
\ No newline at end of file
diff --git a/plugins/fs/permissions/autogenerated/base-directories/localdata.toml b/plugins/fs/permissions/autogenerated/base-directories/localdata.toml
index 4fffb63ee..90a8f48bc 100644
--- a/plugins/fs/permissions/autogenerated/base-directories/localdata.toml
+++ b/plugins/fs/permissions/autogenerated/base-directories/localdata.toml
@@ -36,29 +36,47 @@ path = "$LOCALDATA"
 [[set]]
 identifier = "allow-localdata-read-recursive"
 description = "This allows full recursive read access to the complete `$LOCALDATA` folder, files and subdirectories."
-permissions = ["read-all", "scope-localdata-recursive"]
+permissions = [
+    "read-all",
+    "scope-localdata-recursive"
+]
 
 [[set]]
 identifier = "allow-localdata-write-recursive"
 description = "This allows full recursive write access to the complete `$LOCALDATA` folder, files and subdirectories."
-permissions = ["write-all", "scope-localdata-recursive"]
+permissions = [
+    "write-all",
+    "scope-localdata-recursive"
+]
 
 [[set]]
 identifier = "allow-localdata-read"
 description = "This allows non-recursive read access to the `$LOCALDATA` folder."
-permissions = ["read-all", "scope-localdata"]
+permissions = [
+    "read-all",
+    "scope-localdata"
+]
 
 [[set]]
 identifier = "allow-localdata-write"
 description = "This allows non-recursive write access to the `$LOCALDATA` folder."
-permissions = ["write-all", "scope-localdata"]
+permissions = [
+    "write-all",
+    "scope-localdata"
+]
 
 [[set]]
 identifier = "allow-localdata-meta-recursive"
 description = "This allows full recursive read access to metadata of the `$LOCALDATA` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-localdata-recursive"]
+permissions = [
+    "read-meta",
+    "scope-localdata-recursive"
+]
 
 [[set]]
 identifier = "allow-localdata-meta"
 description = "This allows non-recursive read access to metadata of the `$LOCALDATA` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-localdata-index"]
+permissions = [
+    "read-meta",
+    "scope-localdata-index"
+]
\ No newline at end of file
diff --git a/plugins/fs/permissions/autogenerated/base-directories/log.toml b/plugins/fs/permissions/autogenerated/base-directories/log.toml
index a93d64ec3..d505a3ce2 100644
--- a/plugins/fs/permissions/autogenerated/base-directories/log.toml
+++ b/plugins/fs/permissions/autogenerated/base-directories/log.toml
@@ -36,29 +36,47 @@ path = "$LOG"
 [[set]]
 identifier = "allow-log-read-recursive"
 description = "This allows full recursive read access to the complete `$LOG` folder, files and subdirectories."
-permissions = ["read-all", "scope-log-recursive"]
+permissions = [
+    "read-all",
+    "scope-log-recursive"
+]
 
 [[set]]
 identifier = "allow-log-write-recursive"
 description = "This allows full recursive write access to the complete `$LOG` folder, files and subdirectories."
-permissions = ["write-all", "scope-log-recursive"]
+permissions = [
+    "write-all",
+    "scope-log-recursive"
+]
 
 [[set]]
 identifier = "allow-log-read"
 description = "This allows non-recursive read access to the `$LOG` folder."
-permissions = ["read-all", "scope-log"]
+permissions = [
+    "read-all",
+    "scope-log"
+]
 
 [[set]]
 identifier = "allow-log-write"
 description = "This allows non-recursive write access to the `$LOG` folder."
-permissions = ["write-all", "scope-log"]
+permissions = [
+    "write-all",
+    "scope-log"
+]
 
 [[set]]
 identifier = "allow-log-meta-recursive"
 description = "This allows full recursive read access to metadata of the `$LOG` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-log-recursive"]
+permissions = [
+    "read-meta",
+    "scope-log-recursive"
+]
 
 [[set]]
 identifier = "allow-log-meta"
 description = "This allows non-recursive read access to metadata of the `$LOG` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-log-index"]
+permissions = [
+    "read-meta",
+    "scope-log-index"
+]
\ No newline at end of file
diff --git a/plugins/fs/permissions/autogenerated/base-directories/picture.toml b/plugins/fs/permissions/autogenerated/base-directories/picture.toml
index 9ddc8ebaa..6a760909d 100644
--- a/plugins/fs/permissions/autogenerated/base-directories/picture.toml
+++ b/plugins/fs/permissions/autogenerated/base-directories/picture.toml
@@ -36,29 +36,47 @@ path = "$PICTURE"
 [[set]]
 identifier = "allow-picture-read-recursive"
 description = "This allows full recursive read access to the complete `$PICTURE` folder, files and subdirectories."
-permissions = ["read-all", "scope-picture-recursive"]
+permissions = [
+    "read-all",
+    "scope-picture-recursive"
+]
 
 [[set]]
 identifier = "allow-picture-write-recursive"
 description = "This allows full recursive write access to the complete `$PICTURE` folder, files and subdirectories."
-permissions = ["write-all", "scope-picture-recursive"]
+permissions = [
+    "write-all",
+    "scope-picture-recursive"
+]
 
 [[set]]
 identifier = "allow-picture-read"
 description = "This allows non-recursive read access to the `$PICTURE` folder."
-permissions = ["read-all", "scope-picture"]
+permissions = [
+    "read-all",
+    "scope-picture"
+]
 
 [[set]]
 identifier = "allow-picture-write"
 description = "This allows non-recursive write access to the `$PICTURE` folder."
-permissions = ["write-all", "scope-picture"]
+permissions = [
+    "write-all",
+    "scope-picture"
+]
 
 [[set]]
 identifier = "allow-picture-meta-recursive"
 description = "This allows full recursive read access to metadata of the `$PICTURE` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-picture-recursive"]
+permissions = [
+    "read-meta",
+    "scope-picture-recursive"
+]
 
 [[set]]
 identifier = "allow-picture-meta"
 description = "This allows non-recursive read access to metadata of the `$PICTURE` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-picture-index"]
+permissions = [
+    "read-meta",
+    "scope-picture-index"
+]
\ No newline at end of file
diff --git a/plugins/fs/permissions/autogenerated/base-directories/public.toml b/plugins/fs/permissions/autogenerated/base-directories/public.toml
index 6714755c1..2e39abb45 100644
--- a/plugins/fs/permissions/autogenerated/base-directories/public.toml
+++ b/plugins/fs/permissions/autogenerated/base-directories/public.toml
@@ -36,29 +36,47 @@ path = "$PUBLIC"
 [[set]]
 identifier = "allow-public-read-recursive"
 description = "This allows full recursive read access to the complete `$PUBLIC` folder, files and subdirectories."
-permissions = ["read-all", "scope-public-recursive"]
+permissions = [
+    "read-all",
+    "scope-public-recursive"
+]
 
 [[set]]
 identifier = "allow-public-write-recursive"
 description = "This allows full recursive write access to the complete `$PUBLIC` folder, files and subdirectories."
-permissions = ["write-all", "scope-public-recursive"]
+permissions = [
+    "write-all",
+    "scope-public-recursive"
+]
 
 [[set]]
 identifier = "allow-public-read"
 description = "This allows non-recursive read access to the `$PUBLIC` folder."
-permissions = ["read-all", "scope-public"]
+permissions = [
+    "read-all",
+    "scope-public"
+]
 
 [[set]]
 identifier = "allow-public-write"
 description = "This allows non-recursive write access to the `$PUBLIC` folder."
-permissions = ["write-all", "scope-public"]
+permissions = [
+    "write-all",
+    "scope-public"
+]
 
 [[set]]
 identifier = "allow-public-meta-recursive"
 description = "This allows full recursive read access to metadata of the `$PUBLIC` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-public-recursive"]
+permissions = [
+    "read-meta",
+    "scope-public-recursive"
+]
 
 [[set]]
 identifier = "allow-public-meta"
 description = "This allows non-recursive read access to metadata of the `$PUBLIC` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-public-index"]
+permissions = [
+    "read-meta",
+    "scope-public-index"
+]
\ No newline at end of file
diff --git a/plugins/fs/permissions/autogenerated/base-directories/resource.toml b/plugins/fs/permissions/autogenerated/base-directories/resource.toml
index 1def9a083..53dfeb079 100644
--- a/plugins/fs/permissions/autogenerated/base-directories/resource.toml
+++ b/plugins/fs/permissions/autogenerated/base-directories/resource.toml
@@ -36,29 +36,47 @@ path = "$RESOURCE"
 [[set]]
 identifier = "allow-resource-read-recursive"
 description = "This allows full recursive read access to the complete `$RESOURCE` folder, files and subdirectories."
-permissions = ["read-all", "scope-resource-recursive"]
+permissions = [
+    "read-all",
+    "scope-resource-recursive"
+]
 
 [[set]]
 identifier = "allow-resource-write-recursive"
 description = "This allows full recursive write access to the complete `$RESOURCE` folder, files and subdirectories."
-permissions = ["write-all", "scope-resource-recursive"]
+permissions = [
+    "write-all",
+    "scope-resource-recursive"
+]
 
 [[set]]
 identifier = "allow-resource-read"
 description = "This allows non-recursive read access to the `$RESOURCE` folder."
-permissions = ["read-all", "scope-resource"]
+permissions = [
+    "read-all",
+    "scope-resource"
+]
 
 [[set]]
 identifier = "allow-resource-write"
 description = "This allows non-recursive write access to the `$RESOURCE` folder."
-permissions = ["write-all", "scope-resource"]
+permissions = [
+    "write-all",
+    "scope-resource"
+]
 
 [[set]]
 identifier = "allow-resource-meta-recursive"
 description = "This allows full recursive read access to metadata of the `$RESOURCE` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-resource-recursive"]
+permissions = [
+    "read-meta",
+    "scope-resource-recursive"
+]
 
 [[set]]
 identifier = "allow-resource-meta"
 description = "This allows non-recursive read access to metadata of the `$RESOURCE` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-resource-index"]
+permissions = [
+    "read-meta",
+    "scope-resource-index"
+]
\ No newline at end of file
diff --git a/plugins/fs/permissions/autogenerated/base-directories/runtime.toml b/plugins/fs/permissions/autogenerated/base-directories/runtime.toml
index 0e6636210..8dcc2a038 100644
--- a/plugins/fs/permissions/autogenerated/base-directories/runtime.toml
+++ b/plugins/fs/permissions/autogenerated/base-directories/runtime.toml
@@ -36,29 +36,47 @@ path = "$RUNTIME"
 [[set]]
 identifier = "allow-runtime-read-recursive"
 description = "This allows full recursive read access to the complete `$RUNTIME` folder, files and subdirectories."
-permissions = ["read-all", "scope-runtime-recursive"]
+permissions = [
+    "read-all",
+    "scope-runtime-recursive"
+]
 
 [[set]]
 identifier = "allow-runtime-write-recursive"
 description = "This allows full recursive write access to the complete `$RUNTIME` folder, files and subdirectories."
-permissions = ["write-all", "scope-runtime-recursive"]
+permissions = [
+    "write-all",
+    "scope-runtime-recursive"
+]
 
 [[set]]
 identifier = "allow-runtime-read"
 description = "This allows non-recursive read access to the `$RUNTIME` folder."
-permissions = ["read-all", "scope-runtime"]
+permissions = [
+    "read-all",
+    "scope-runtime"
+]
 
 [[set]]
 identifier = "allow-runtime-write"
 description = "This allows non-recursive write access to the `$RUNTIME` folder."
-permissions = ["write-all", "scope-runtime"]
+permissions = [
+    "write-all",
+    "scope-runtime"
+]
 
 [[set]]
 identifier = "allow-runtime-meta-recursive"
 description = "This allows full recursive read access to metadata of the `$RUNTIME` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-runtime-recursive"]
+permissions = [
+    "read-meta",
+    "scope-runtime-recursive"
+]
 
 [[set]]
 identifier = "allow-runtime-meta"
 description = "This allows non-recursive read access to metadata of the `$RUNTIME` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-runtime-index"]
+permissions = [
+    "read-meta",
+    "scope-runtime-index"
+]
\ No newline at end of file
diff --git a/plugins/fs/permissions/autogenerated/base-directories/temp.toml b/plugins/fs/permissions/autogenerated/base-directories/temp.toml
index 5af17ca4d..c08e1da21 100644
--- a/plugins/fs/permissions/autogenerated/base-directories/temp.toml
+++ b/plugins/fs/permissions/autogenerated/base-directories/temp.toml
@@ -36,29 +36,47 @@ path = "$TEMP"
 [[set]]
 identifier = "allow-temp-read-recursive"
 description = "This allows full recursive read access to the complete `$TEMP` folder, files and subdirectories."
-permissions = ["read-all", "scope-temp-recursive"]
+permissions = [
+    "read-all",
+    "scope-temp-recursive"
+]
 
 [[set]]
 identifier = "allow-temp-write-recursive"
 description = "This allows full recursive write access to the complete `$TEMP` folder, files and subdirectories."
-permissions = ["write-all", "scope-temp-recursive"]
+permissions = [
+    "write-all",
+    "scope-temp-recursive"
+]
 
 [[set]]
 identifier = "allow-temp-read"
 description = "This allows non-recursive read access to the `$TEMP` folder."
-permissions = ["read-all", "scope-temp"]
+permissions = [
+    "read-all",
+    "scope-temp"
+]
 
 [[set]]
 identifier = "allow-temp-write"
 description = "This allows non-recursive write access to the `$TEMP` folder."
-permissions = ["write-all", "scope-temp"]
+permissions = [
+    "write-all",
+    "scope-temp"
+]
 
 [[set]]
 identifier = "allow-temp-meta-recursive"
 description = "This allows full recursive read access to metadata of the `$TEMP` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-temp-recursive"]
+permissions = [
+    "read-meta",
+    "scope-temp-recursive"
+]
 
 [[set]]
 identifier = "allow-temp-meta"
 description = "This allows non-recursive read access to metadata of the `$TEMP` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-temp-index"]
+permissions = [
+    "read-meta",
+    "scope-temp-index"
+]
\ No newline at end of file
diff --git a/plugins/fs/permissions/autogenerated/base-directories/template.toml b/plugins/fs/permissions/autogenerated/base-directories/template.toml
index 385ba96ef..ce39f7736 100644
--- a/plugins/fs/permissions/autogenerated/base-directories/template.toml
+++ b/plugins/fs/permissions/autogenerated/base-directories/template.toml
@@ -36,29 +36,47 @@ path = "$TEMPLATE"
 [[set]]
 identifier = "allow-template-read-recursive"
 description = "This allows full recursive read access to the complete `$TEMPLATE` folder, files and subdirectories."
-permissions = ["read-all", "scope-template-recursive"]
+permissions = [
+    "read-all",
+    "scope-template-recursive"
+]
 
 [[set]]
 identifier = "allow-template-write-recursive"
 description = "This allows full recursive write access to the complete `$TEMPLATE` folder, files and subdirectories."
-permissions = ["write-all", "scope-template-recursive"]
+permissions = [
+    "write-all",
+    "scope-template-recursive"
+]
 
 [[set]]
 identifier = "allow-template-read"
 description = "This allows non-recursive read access to the `$TEMPLATE` folder."
-permissions = ["read-all", "scope-template"]
+permissions = [
+    "read-all",
+    "scope-template"
+]
 
 [[set]]
 identifier = "allow-template-write"
 description = "This allows non-recursive write access to the `$TEMPLATE` folder."
-permissions = ["write-all", "scope-template"]
+permissions = [
+    "write-all",
+    "scope-template"
+]
 
 [[set]]
 identifier = "allow-template-meta-recursive"
 description = "This allows full recursive read access to metadata of the `$TEMPLATE` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-template-recursive"]
+permissions = [
+    "read-meta",
+    "scope-template-recursive"
+]
 
 [[set]]
 identifier = "allow-template-meta"
 description = "This allows non-recursive read access to metadata of the `$TEMPLATE` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-template-index"]
+permissions = [
+    "read-meta",
+    "scope-template-index"
+]
\ No newline at end of file
diff --git a/plugins/fs/permissions/autogenerated/base-directories/video.toml b/plugins/fs/permissions/autogenerated/base-directories/video.toml
index ea40b4192..df41abdc6 100644
--- a/plugins/fs/permissions/autogenerated/base-directories/video.toml
+++ b/plugins/fs/permissions/autogenerated/base-directories/video.toml
@@ -36,29 +36,47 @@ path = "$VIDEO"
 [[set]]
 identifier = "allow-video-read-recursive"
 description = "This allows full recursive read access to the complete `$VIDEO` folder, files and subdirectories."
-permissions = ["read-all", "scope-video-recursive"]
+permissions = [
+    "read-all",
+    "scope-video-recursive"
+]
 
 [[set]]
 identifier = "allow-video-write-recursive"
 description = "This allows full recursive write access to the complete `$VIDEO` folder, files and subdirectories."
-permissions = ["write-all", "scope-video-recursive"]
+permissions = [
+    "write-all",
+    "scope-video-recursive"
+]
 
 [[set]]
 identifier = "allow-video-read"
 description = "This allows non-recursive read access to the `$VIDEO` folder."
-permissions = ["read-all", "scope-video"]
+permissions = [
+    "read-all",
+    "scope-video"
+]
 
 [[set]]
 identifier = "allow-video-write"
 description = "This allows non-recursive write access to the `$VIDEO` folder."
-permissions = ["write-all", "scope-video"]
+permissions = [
+    "write-all",
+    "scope-video"
+]
 
 [[set]]
 identifier = "allow-video-meta-recursive"
 description = "This allows full recursive read access to metadata of the `$VIDEO` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-video-recursive"]
+permissions = [
+    "read-meta",
+    "scope-video-recursive"
+]
 
 [[set]]
 identifier = "allow-video-meta"
 description = "This allows non-recursive read access to metadata of the `$VIDEO` folder, including file listing and statistics."
-permissions = ["read-meta", "scope-video-index"]
+permissions = [
+    "read-meta",
+    "scope-video-index"
+]
\ No newline at end of file
diff --git a/plugins/fs/src/android.rs b/plugins/fs/src/android.rs
index 54cd22ef5..b9a829b95 100644
--- a/plugins/fs/src/android.rs
+++ b/plugins/fs/src/android.rs
@@ -3,12 +3,18 @@
 // SPDX-License-Identifier: MIT
 
 use serde::de::DeserializeOwned;
-use tauri::{plugin::PluginApi, AppHandle, Runtime};
+use tauri::{AppHandle, Runtime, plugin::PluginApi};
 
-use crate::{models::*, FilePath, OpenOptions};
+use crate::{FilePath, OpenOptions, models::*};
 
 const PLUGIN_IDENTIFIER: &str = "com.plugin.fs";
 
+/// Access to the file system APIs on Android.
+///
+/// In addition to regular file system paths, it can read `content://` URIs
+/// and Android asset paths by resolving them with the Android plugin implementation.
+///
+/// Retrieved with [`crate::FsExt::fs`].
 pub struct Fs<R: Runtime>(tauri::plugin::PluginHandle<R>);
 
 pub fn init<R: Runtime, C: DeserializeOwned>(
@@ -36,12 +42,7 @@ impl<R: Runtime> Fs<R> {
         match path.into() {
             FilePath::Url(u) => self
                 .resolve_content_uri(u.to_string(), opts.android_mode())
-                .map_err(|e| {
-                    std::io::Error::new(
-                        std::io::ErrorKind::Other,
-                        format!("failed to open file: {e}"),
-                    )
-                }),
+                .map_err(|e| std::io::Error::other(format!("failed to open file: {e}"))),
             FilePath::Path(p) => {
                 // tauri::utils::platform::resources_dir() returns a PathBuf with the Android asset URI prefix
                 // we must resolve that file with the Android API
@@ -49,12 +50,7 @@ impl<R: Runtime> Fs<R> {
                     .is_ok()
                 {
                     self.resolve_content_uri(p.to_string_lossy(), opts.android_mode())
-                        .map_err(|e| {
-                            std::io::Error::new(
-                                std::io::ErrorKind::Other,
-                                format!("failed to open file: {e}"),
-                            )
-                        })
+                        .map_err(|e| std::io::Error::other(format!("failed to open file: {e}")))
                 } else {
                     std::fs::OpenOptions::from(opts).open(p)
                 }
diff --git a/plugins/fs/src/commands.rs b/plugins/fs/src/commands.rs
index fe82a4e02..6bf2ba136 100644
--- a/plugins/fs/src/commands.rs
+++ b/plugins/fs/src/commands.rs
@@ -6,10 +6,10 @@
 use serde::{Deserialize, Serialize, Serializer};
 use serde_repr::{Deserialize_repr, Serialize_repr};
 use tauri::{
+    Manager, Resource, ResourceId, Runtime, Webview,
     ipc::{CommandScope, GlobalScope},
     path::BaseDirectory,
     utils::config::FsScope,
-    Manager, Resource, ResourceId, Runtime, Webview,
 };
 
 use std::{
@@ -23,7 +23,7 @@ use std::{
     time::{SystemTime, UNIX_EPOCH},
 };
 
-use crate::{scope::Entry, Error, SafeFilePath};
+use crate::{Error, SafeFilePath, scope::Entry};
 
 #[derive(Debug, thiserror::Error)]
 pub enum CommandError {
@@ -159,24 +159,26 @@ impl<R: Runtime> Drop for FileHandle<R> {
             // Only clean up if we're tracking this resource
             // If start_accessing_security_scoped_resource was used, it won't be in our tracking
             // and we shouldn't interfere
-            if let FilePath::Url(url) = file_path {
-                if url.scheme() == "file" {
-                    let security_scoped_resources =
-                        self.app_handle.state::<crate::SecurityScopedResources>();
+            if let FilePath::Url(url) = file_path
+                && url.scheme() == "file"
+            {
+                let security_scoped_resources =
+                    self.app_handle.state::<crate::SecurityScopedResources>();
 
-                    // Only clean up if it's not tracked manually
-                    if !security_scoped_resources.is_tracked_manually(url.as_str()) {
-                        log::debug!(
-                            "Stopping accessing security-scoped resource for URL: {url} on drop"
-                        );
-                        let _ = self
-                            .app_handle
-                            .fs()
-                            .stop_accessing_security_scoped_resource(FilePath::Url(url.clone()));
-                        security_scoped_resources.remove(url.as_str());
-                    } else {
-                        log::debug!("Not cleaning up security-scoped resource for URL: {url} on drop (manually tracked via start_accessing_security_scoped_resource)");
-                    }
+                // Only clean up if it's not tracked manually
+                if !security_scoped_resources.is_tracked_manually(url.as_str()) {
+                    log::debug!(
+                        "Stopping accessing security-scoped resource for URL: {url} on drop"
+                    );
+                    let _ = self
+                        .app_handle
+                        .fs()
+                        .stop_accessing_security_scoped_resource(FilePath::Url(url.clone()));
+                    security_scoped_resources.remove(url.as_str());
+                } else {
+                    log::debug!(
+                        "Not cleaning up security-scoped resource for URL: {url} on drop (manually tracked via start_accessing_security_scoped_resource)"
+                    );
                 }
             }
         }
@@ -235,24 +237,24 @@ impl<R: Runtime> Drop for PathHandle<R> {
         // Only clean up if we're tracking this resource (i.e., resolve_path started it)
         // If start_accessing_security_scoped_resource was used, it won't be in our tracking
         // and we shouldn't interfere
-        if let FilePath::Url(url) = file_path {
-            if url.scheme() == "file" {
-                let security_scoped_resources =
-                    self.app_handle.state::<crate::SecurityScopedResources>();
+        if let FilePath::Url(url) = file_path
+            && url.scheme() == "file"
+        {
+            let security_scoped_resources =
+                self.app_handle.state::<crate::SecurityScopedResources>();
 
-                // Only clean up if it's not tracked manually
-                if !security_scoped_resources.is_tracked_manually(url.as_str()) {
-                    log::debug!(
-                        "Stopping accessing security-scoped resource for URL: {url} on drop"
-                    );
-                    let _ = self
-                        .app_handle
-                        .fs()
-                        .stop_accessing_security_scoped_resource(FilePath::Url(url.clone()));
-                    security_scoped_resources.remove(url.as_str());
-                } else {
-                    log::debug!("Not cleaning up security-scoped resource for URL: {url} on drop (manually tracked via start_accessing_security_scoped_resource)");
-                }
+            // Only clean up if it's not tracked manually
+            if !security_scoped_resources.is_tracked_manually(url.as_str()) {
+                log::debug!("Stopping accessing security-scoped resource for URL: {url} on drop");
+                let _ = self
+                    .app_handle
+                    .fs()
+                    .stop_accessing_security_scoped_resource(FilePath::Url(url.clone()));
+                security_scoped_resources.remove(url.as_str());
+            } else {
+                log::debug!(
+                    "Not cleaning up security-scoped resource for URL: {url} on drop (manually tracked via start_accessing_security_scoped_resource)"
+                );
             }
         }
     }
@@ -683,7 +685,12 @@ pub async fn read_text_file_lines_next<R: Runtime>(
                 bytes.push(false as u8);
                 Ok(bytes)
             }
-            Some(Err(_)) => Ok(vec![false as u8]),
+            Some(Err(e)) => {
+                // the error may be persistent (e.g. reading a directory), do not report
+                // an empty line and let the caller loop forever
+                resource_table.close(rid)?;
+                Err(format!("failed to read line with error: {e}").into())
+            }
             None => {
                 resource_table.close(rid)?;
                 Ok(vec![true as u8])
@@ -1073,11 +1080,12 @@ async fn write_file_inner<R: Runtime>(
         })
         .and_then(|p| SafeFilePath::from_str(&p).map_err(CommandError::from))?;
 
-    let options: Option<WriteFileOptions> = request
+    let options = request
         .headers()
         .get("options")
-        .and_then(|p| p.to_str().ok())
-        .and_then(|opts| serde_json::from_str(opts).ok());
+        .map(|options| parse_write_file_options(options.as_bytes()))
+        .transpose()?
+        .flatten();
 
     let mut file_handle = resolve_file(
         permission,
@@ -1120,8 +1128,12 @@ async fn write_file_inner<R: Runtime>(
         tauri::ipc::InvokeBody::Raw(data) => Cow::Borrowed(data),
         tauri::ipc::InvokeBody::Json(serde_json::Value::Array(data)) => Cow::Owned(
             data.iter()
-                .flat_map(|v| v.as_number().and_then(|v| v.as_u64().map(|v| v as u8)))
-                .collect(),
+                .map(|v| {
+                    v.as_u64()
+                        .and_then(|v| u8::try_from(v).ok())
+                        .ok_or_else(|| anyhow::anyhow!("invalid byte in the data to write: {v}"))
+                })
+                .collect::<Result<Vec<u8>, _>>()?,
         ),
         _ => return Err(anyhow::anyhow!("unexpected invoke body").into()),
     };
@@ -1137,6 +1149,20 @@ async fn write_file_inner<R: Runtime>(
         .map_err(Into::into)
 }
 
+/// Parses the `options` header of the `write_file` command.
+///
+/// Fails instead of silently falling back to the defaults, which would e.g. ignore `baseDir`.
+fn parse_write_file_options(header: &[u8]) -> CommandResult<Option<WriteFileOptions>> {
+    let header = String::from_utf8_lossy(header);
+    match header.trim() {
+        // `JSON.stringify(undefined)` is sent as `undefined` by `fetch`
+        "" | "undefined" | "null" => Ok(None),
+        options => serde_json::from_str(options)
+            .map(Some)
+            .map_err(|e| anyhow::anyhow!("invalid write file options {options}: {e}").into()),
+    }
+}
+
 #[tauri::command]
 pub async fn write_file<R: Runtime>(
     webview: Webview<R>,
@@ -1214,50 +1240,49 @@ pub fn start_accessing_security_scoped_resource<R: Runtime>(
         };
 
         // Only handle file URLs
-        if let FilePath::Url(url) = &file_path {
-            if url.scheme() == "file" {
-                use objc2_foundation::{NSString, NSURL};
+        if let FilePath::Url(url) = &file_path
+            && url.scheme() == "file"
+        {
+            use objc2_foundation::{NSString, NSURL};
 
-                let url_nsstring = NSString::from_str(url.as_str());
-                let ns_url = unsafe { NSURL::URLWithString(&url_nsstring) };
-                if let Some(ns_url) = ns_url {
-                    // Check if already active
-                    let security_scoped_resources =
-                        webview.state::<crate::SecurityScopedResources>();
-                    if security_scoped_resources.is_tracked_manually(url.as_str()) {
+            let url_nsstring = NSString::from_str(url.as_str());
+            let ns_url = NSURL::URLWithString(&url_nsstring);
+            if let Some(ns_url) = ns_url {
+                // Check if already active
+                let security_scoped_resources = webview.state::<crate::SecurityScopedResources>();
+                if security_scoped_resources.is_tracked_manually(url.as_str()) {
+                    log::debug!(
+                        "Security-scoped resource already active for URL: {}",
+                        url.as_str()
+                    );
+                    return Ok(());
+                }
+
+                // Start accessing the security-scoped resource
+                unsafe {
+                    let success = ns_url.startAccessingSecurityScopedResource();
+                    if success {
                         log::debug!(
-                            "Security-scoped resource already active for URL: {}",
+                            "Started accessing security-scoped resource for URL: {}",
                             url.as_str()
                         );
-                        return Ok(());
+                        security_scoped_resources.track_manually(url.as_str().to_string());
+                    } else {
+                        log::warn!(
+                            "Failed to start accessing security-scoped resource for URL: {}",
+                            url.as_str()
+                        );
+                        return Err(CommandError::from(format!(
+                            "Failed to start accessing security-scoped resource for URL: {}",
+                            url.as_str()
+                        )));
                     }
-
-                    // Start accessing the security-scoped resource
-                    unsafe {
-                        let success = ns_url.startAccessingSecurityScopedResource();
-                        if success {
-                            log::debug!(
-                                "Started accessing security-scoped resource for URL: {}",
-                                url.as_str()
-                            );
-                            security_scoped_resources.track_manually(url.as_str().to_string());
-                        } else {
-                            log::warn!(
-                                "Failed to start accessing security-scoped resource for URL: {}",
-                                url.as_str()
-                            );
-                            return Err(CommandError::from(format!(
-                                "Failed to start accessing security-scoped resource for URL: {}",
-                                url.as_str()
-                            )));
-                        }
-                    }
-                } else {
-                    return Err(CommandError::from(format!(
-                        "Failed to create NSURL from URL: {}",
-                        url.as_str()
-                    )));
                 }
+            } else {
+                return Err(CommandError::from(format!(
+                    "Failed to create NSURL from URL: {}",
+                    url.as_str()
+                )));
             }
         }
         Ok(())
@@ -1286,31 +1311,31 @@ pub fn stop_accessing_security_scoped_resource<R: Runtime>(
         };
 
         // Only handle file URLs
-        if let FilePath::Url(url) = file_path {
-            if url.scheme() == "file" {
-                let security_scoped_resources = webview.state::<crate::SecurityScopedResources>();
+        if let FilePath::Url(url) = file_path
+            && url.scheme() == "file"
+        {
+            let security_scoped_resources = webview.state::<crate::SecurityScopedResources>();
 
-                // Check if it's tracked
-                if !security_scoped_resources.is_tracked_manually(url.as_str()) {
-                    log::debug!(
-                        "Security-scoped resource not tracked as active for URL: {}",
-                        url.as_str()
-                    );
-                    return Ok(());
-                }
-
-                // Stop accessing the security-scoped resource
-                webview
-                    .fs()
-                    .stop_accessing_security_scoped_resource(FilePath::Url(url.clone()))?;
-
-                // Remove from tracking
-                security_scoped_resources.remove(url.as_str());
+            // Check if it's tracked
+            if !security_scoped_resources.is_tracked_manually(url.as_str()) {
                 log::debug!(
-                    "Stopped accessing security-scoped resource for URL: {}",
+                    "Security-scoped resource not tracked as active for URL: {}",
                     url.as_str()
                 );
+                return Ok(());
             }
+
+            // Stop accessing the security-scoped resource
+            webview
+                .fs()
+                .stop_accessing_security_scoped_resource(FilePath::Url(url.clone()))?;
+
+            // Remove from tracking
+            security_scoped_resources.remove(url.as_str());
+            log::debug!(
+                "Stopped accessing security-scoped resource for URL: {}",
+                url.as_str()
+            );
         }
         Ok(())
     }
@@ -1452,38 +1477,47 @@ pub fn resolve_path<R: Runtime>(
     // On iOS, start accessing security-scoped resource if the path is a file URL
     // Only if it hasn't been started already via start_accessing_security_scoped_resource
     #[cfg(target_os = "ios")]
-    if let SafeFilePath::Url(url) = &path {
-        if url.scheme() == "file" {
-            use objc2_foundation::{NSString, NSURL};
+    if let SafeFilePath::Url(url) = &path
+        && url.scheme() == "file"
+    {
+        use objc2_foundation::{NSString, NSURL};
 
-            let security_scoped_resources = webview.state::<crate::SecurityScopedResources>();
+        let security_scoped_resources = webview.state::<crate::SecurityScopedResources>();
 
-            // Check if already active (started via start_accessing_security_scoped_resource)
-            if !security_scoped_resources.is_tracked_manually(url.as_str()) {
-                let url_nsstring = NSString::from_str(url.as_str());
-                let ns_url = unsafe { NSURL::URLWithString(&url_nsstring) };
-                if let Some(ns_url) = ns_url {
-                    // Start accessing the security-scoped resource
-                    // This is required for files outside the app's sandbox (e.g., from file picker)
-                    unsafe {
-                        let success = ns_url.startAccessingSecurityScopedResource();
-                        if success {
-                            log::debug!("Started accessing security-scoped resource for URL: {} (via resolve_path)", url.as_str());
-                            // Track it so we know to clean it up
-                            security_scoped_resources.track_manually(url.as_str().to_string());
-                        } else {
-                            log::warn!(
-                                "Failed to start accessing security-scoped resource for URL: {}",
-                                url.as_str()
-                            );
-                        }
+        // Check if already active (started via start_accessing_security_scoped_resource)
+        if !security_scoped_resources.is_tracked_manually(url.as_str()) {
+            let url_nsstring = NSString::from_str(url.as_str());
+            let ns_url = NSURL::URLWithString(&url_nsstring);
+            if let Some(ns_url) = ns_url {
+                // Start accessing the security-scoped resource
+                // This is required for files outside the app's sandbox (e.g., from file picker)
+                unsafe {
+                    let success = ns_url.startAccessingSecurityScopedResource();
+                    if success {
+                        log::debug!(
+                            "Started accessing security-scoped resource for URL: {} (via resolve_path)",
+                            url.as_str()
+                        );
+                        // Track it so we know to clean it up
+                        security_scoped_resources.track_manually(url.as_str().to_string());
+                    } else {
+                        log::warn!(
+                            "Failed to start accessing security-scoped resource for URL: {}",
+                            url.as_str()
+                        );
                     }
-                } else {
-                    log::debug!("Failed to create NSURL from URL: {}, ignoring security-scoped resource access request", url.as_str());
                 }
             } else {
-                log::debug!("Security-scoped resource already active for URL: {} (started via start_accessing_security_scoped_resource), skipping", url.as_str());
+                log::debug!(
+                    "Failed to create NSURL from URL: {}, ignoring security-scoped resource access request",
+                    url.as_str()
+                );
             }
+        } else {
+            log::debug!(
+                "Security-scoped resource already active for URL: {} (started via start_accessing_security_scoped_resource), skipping",
+                url.as_str()
+            );
         }
     }
 
@@ -1772,6 +1806,25 @@ mod test {
 
     use super::LinesBytes;
 
+    #[test]
+    fn write_file_options_header() {
+        use super::parse_write_file_options;
+
+        assert!(parse_write_file_options(b"undefined").unwrap().is_none());
+        assert!(parse_write_file_options(b"null").unwrap().is_none());
+        assert!(parse_write_file_options(b"").unwrap().is_none());
+
+        let options = parse_write_file_options(br#"{"baseDir":14,"append":true}"#)
+            .unwrap()
+            .unwrap();
+        assert!(options.append);
+        assert!(options.create);
+        assert!(options.base.base_dir.is_some());
+
+        assert!(parse_write_file_options(b"{not json").is_err());
+        assert!(parse_write_file_options(br#"{"append":"yes"}"#).is_err());
+    }
+
     #[test]
     fn safe_file_path_parse() {
         use super::SafeFilePath;
diff --git a/plugins/fs/src/desktop.rs b/plugins/fs/src/desktop.rs
index 1dc77fd70..68baa2cdc 100644
--- a/plugins/fs/src/desktop.rs
+++ b/plugins/fs/src/desktop.rs
@@ -8,6 +8,9 @@ use tauri::{AppHandle, Runtime};
 
 use crate::{FilePath, OpenOptions};
 
+/// Access to the file system APIs on desktop.
+///
+/// Retrieved with [`crate::FsExt::fs`].
 pub struct Fs<R: Runtime>(pub(crate) AppHandle<R>);
 
 fn path_or_err<P: Into<FilePath>>(p: P) -> std::io::Result<PathBuf> {
diff --git a/plugins/fs/src/error.rs b/plugins/fs/src/error.rs
index 0c98e83fc..cb9685fcb 100644
--- a/plugins/fs/src/error.rs
+++ b/plugins/fs/src/error.rs
@@ -6,15 +6,20 @@ use std::path::PathBuf;
 
 use serde::{Serialize, Serializer};
 
+/// Errors that can happen while using the file system plugin.
 #[derive(Debug, thiserror::Error)]
 #[non_exhaustive]
 pub enum Error {
+    /// JSON serialization or deserialization error.
     #[error(transparent)]
     Json(#[from] serde_json::Error),
+    /// Error from the Tauri APIs, usually raised while resolving a path or a scope entry.
     #[error(transparent)]
     Tauri(#[from] tauri::Error),
+    /// Error from the underlying file system operation.
     #[error(transparent)]
     Io(#[from] std::io::Error),
+    /// The path is denied by the plugin scope or is not allowed by it.
     #[error("forbidden path: {0}")]
     PathForbidden(PathBuf),
     /// Invalid glob pattern.
@@ -24,11 +29,14 @@ pub enum Error {
     #[cfg(feature = "watch")]
     #[error(transparent)]
     Watch(#[from] notify::Error),
+    /// Error invoking the Android plugin implementation.
     #[cfg(target_os = "android")]
     #[error(transparent)]
     PluginInvoke(#[from] tauri::plugin::mobile::PluginInvokeError),
+    /// The URL cannot be converted to a file system path.
     #[error("URL is not a valid path")]
     InvalidPathUrl,
+    /// The path is not safe to use, for instance because it traverses parent directories.
     #[error("Unsafe PathBuf: {0}")]
     UnsafePathBuf(&'static str),
 }
diff --git a/plugins/fs/src/file_path.rs b/plugins/fs/src/file_path.rs
index 6316a2489..86c2aa377 100644
--- a/plugins/fs/src/file_path.rs
+++ b/plugins/fs/src/file_path.rs
@@ -190,10 +190,10 @@ impl<'de> serde::Deserialize<'de> for SafeFilePath {
 impl FromStr for FilePath {
     type Err = Infallible;
     fn from_str(s: &str) -> std::result::Result<Self, Self::Err> {
-        if let Ok(url) = url::Url::from_str(s) {
-            if url.scheme().len() != 1 {
-                return Ok(Self::Url(url));
-            }
+        if let Ok(url) = url::Url::from_str(s)
+            && url.scheme().len() != 1
+        {
+            return Ok(Self::Url(url));
         }
         Ok(Self::Path(PathBuf::from(s)))
     }
@@ -202,10 +202,10 @@ impl FromStr for FilePath {
 impl FromStr for SafeFilePath {
     type Err = Error;
     fn from_str(s: &str) -> Result<Self> {
-        if let Ok(url) = url::Url::from_str(s) {
-            if url.scheme().len() != 1 {
-                return Ok(Self::Url(url));
-            }
+        if let Ok(url) = url::Url::from_str(s)
+            && url.scheme().len() != 1
+        {
+            return Ok(Self::Url(url));
         }
 
         SafePathBuf::new(s.into())
diff --git a/plugins/fs/src/ios.rs b/plugins/fs/src/ios.rs
index c4a433542..ff36b8b09 100644
--- a/plugins/fs/src/ios.rs
+++ b/plugins/fs/src/ios.rs
@@ -3,10 +3,15 @@
 // SPDX-License-Identifier: MIT
 
 use serde::de::DeserializeOwned;
-use tauri::{plugin::PluginApi, AppHandle, Runtime};
+use tauri::{AppHandle, Runtime, plugin::PluginApi};
 
 use crate::{FilePath, OpenOptions};
 
+/// Access to the file system APIs on iOS.
+///
+/// Opening a `file://` URL automatically starts accessing the matching security-scoped resource.
+///
+/// Retrieved with [`crate::FsExt::fs`].
 pub struct Fs<R: Runtime> {
     _phantom: std::marker::PhantomData<fn() -> R>,
 }
@@ -42,7 +47,7 @@ impl<R: Runtime> Fs<R> {
 
                 // Create NSURL from the URL string
                 // URLWithString may return None for invalid URLs, but file:// URLs should be valid
-                let ns_url = unsafe { NSURL::URLWithString(&url_nsstring) };
+                let ns_url = NSURL::URLWithString(&url_nsstring);
                 if let Some(ns_url) = ns_url {
                     // Start accessing the security-scoped resource
                     // This is required for files outside the app's sandbox (e.g., from file picker)
@@ -64,7 +69,10 @@ impl<R: Runtime> Fs<R> {
                         }
                     }
                 } else {
-                    log::debug!("Failed to create NSURL from URL: {}, ignoring security-scoped resource access request", url_string);
+                    log::debug!(
+                        "Failed to create NSURL from URL: {}, ignoring security-scoped resource access request",
+                        url_string
+                    );
                 }
 
                 // Convert URL to path and open the file
@@ -119,7 +127,7 @@ impl<R: Runtime> Fs<R> {
         };
 
         let url_nsstring = NSString::from_str(&url_string);
-        let ns_url = unsafe { NSURL::URLWithString(&url_nsstring) };
+        let ns_url = NSURL::URLWithString(&url_nsstring);
         if let Some(ns_url) = ns_url {
             // Stop accessing the security-scoped resource
             unsafe {
diff --git a/plugins/fs/src/lib.rs b/plugins/fs/src/lib.rs
index b40bd2e44..000052391 100644
--- a/plugins/fs/src/lib.rs
+++ b/plugins/fs/src/lib.rs
@@ -22,10 +22,10 @@ use std::sync::Mutex;
 
 use serde::Deserialize;
 use tauri::{
+    AppHandle, DragDropEvent, Manager, RunEvent, Runtime, WindowEvent,
     ipc::ScopeObject,
     plugin::{Builder as PluginBuilder, TauriPlugin},
     utils::{acl::Value, config::FsScope},
-    AppHandle, DragDropEvent, Manager, RunEvent, Runtime, WindowEvent,
 };
 
 #[cfg(target_os = "android")]
@@ -58,6 +58,13 @@ pub use file_path::SafeFilePath;
 
 type Result<T> = std::result::Result<T, Error>;
 
+/// Options and flags which can be used to configure how a file is opened.
+///
+/// This builder exposes the ability to configure how a [`std::fs::File`] is opened and
+/// what operations are permitted on the open file. Build it with [`OpenOptions::new`],
+/// chain calls to the setter methods and pass it to [`Fs::open`].
+///
+/// The `read` option defaults to `true`, every other option defaults to `false`.
 #[derive(Debug, Default, Clone, Deserialize)]
 #[serde(rename_all = "camelCase")]
 pub struct OpenOptions {
@@ -118,11 +125,17 @@ impl OpenOptions {
     ///
     /// # Examples
     ///
-    /// ```no_run
-    /// use tauri_plugin_fs::OpenOptions;
+    /// ```rust,no_run
+    /// use std::path::Path;
+    /// use tauri_plugin_fs::{FsExt, OpenOptions};
     ///
-    /// let mut options = OpenOptions::new();
-    /// let file = options.read(true).open("foo.txt");
+    /// tauri::Builder::default()
+    ///   .setup(|app| {
+    ///     let mut options = OpenOptions::new();
+    ///     options.read(true);
+    ///     let file = app.fs().open(Path::new("foo.txt"), options)?;
+    ///     Ok(())
+    ///   });
     /// ```
     #[must_use]
     pub fn new() -> Self {
@@ -136,10 +149,17 @@ impl OpenOptions {
     ///
     /// # Examples
     ///
-    /// ```no_run
-    /// use tauri_plugin_fs::OpenOptions;
+    /// ```rust,no_run
+    /// use std::path::Path;
+    /// use tauri_plugin_fs::{FsExt, OpenOptions};
     ///
-    /// let file = OpenOptions::new().read(true).open("foo.txt");
+    /// tauri::Builder::default()
+    ///   .setup(|app| {
+    ///     let mut options = OpenOptions::new();
+    ///     options.read(true);
+    ///     let file = app.fs().open(Path::new("foo.txt"), options)?;
+    ///     Ok(())
+    ///   });
     /// ```
     pub fn read(&mut self, read: bool) -> &mut Self {
         self.read = read;
@@ -156,10 +176,17 @@ impl OpenOptions {
     ///
     /// # Examples
     ///
-    /// ```no_run
-    /// use tauri_plugin_fs::OpenOptions;
+    /// ```rust,no_run
+    /// use std::path::Path;
+    /// use tauri_plugin_fs::{FsExt, OpenOptions};
     ///
-    /// let file = OpenOptions::new().write(true).open("foo.txt");
+    /// tauri::Builder::default()
+    ///   .setup(|app| {
+    ///     let mut options = OpenOptions::new();
+    ///     options.write(true);
+    ///     let file = app.fs().open(Path::new("foo.txt"), options)?;
+    ///     Ok(())
+    ///   });
     /// ```
     pub fn write(&mut self, write: bool) -> &mut Self {
         self.write = write;
@@ -199,19 +226,28 @@ impl OpenOptions {
     /// This function doesn't create the file if it doesn't exist. Use the
     /// [`OpenOptions::create`] method to do so.
     ///
-    /// [`write()`]: Write::write "io::Write::write"
-    /// [`flush()`]: Write::flush "io::Write::flush"
-    /// [stream_position]: Seek::stream_position "io::Seek::stream_position"
-    /// [seek]: Seek::seek "io::Seek::seek"
-    /// [Current]: SeekFrom::Current "io::SeekFrom::Current"
-    /// [End]: SeekFrom::End "io::SeekFrom::End"
+    /// [`write()`]: std::io::Write::write "io::Write::write"
+    /// [`flush()`]: std::io::Write::flush "io::Write::flush"
+    /// [Seek]: std::io::Seek "io::Seek"
+    /// [stream_position]: std::io::Seek::stream_position "io::Seek::stream_position"
+    /// [seek]: std::io::Seek::seek "io::Seek::seek"
+    /// [SeekFrom]: std::io::SeekFrom "io::SeekFrom"
+    /// [Current]: std::io::SeekFrom::Current "io::SeekFrom::Current"
+    /// [End]: std::io::SeekFrom::End "io::SeekFrom::End"
     ///
     /// # Examples
     ///
-    /// ```no_run
-    /// use tauri_plugin_fs::OpenOptions;
+    /// ```rust,no_run
+    /// use std::path::Path;
+    /// use tauri_plugin_fs::{FsExt, OpenOptions};
     ///
-    /// let file = OpenOptions::new().append(true).open("foo.txt");
+    /// tauri::Builder::default()
+    ///   .setup(|app| {
+    ///     let mut options = OpenOptions::new();
+    ///     options.append(true);
+    ///     let file = app.fs().open(Path::new("foo.txt"), options)?;
+    ///     Ok(())
+    ///   });
     /// ```
     pub fn append(&mut self, append: bool) -> &mut Self {
         self.append = append;
@@ -227,10 +263,17 @@ impl OpenOptions {
     ///
     /// # Examples
     ///
-    /// ```no_run
-    /// use tauri_plugin_fs::OpenOptions;
+    /// ```rust,no_run
+    /// use std::path::Path;
+    /// use tauri_plugin_fs::{FsExt, OpenOptions};
     ///
-    /// let file = OpenOptions::new().write(true).truncate(true).open("foo.txt");
+    /// tauri::Builder::default()
+    ///   .setup(|app| {
+    ///     let mut options = OpenOptions::new();
+    ///     options.write(true).truncate(true);
+    ///     let file = app.fs().open(Path::new("foo.txt"), options)?;
+    ///     Ok(())
+    ///   });
     /// ```
     pub fn truncate(&mut self, truncate: bool) -> &mut Self {
         self.truncate = truncate;
@@ -245,10 +288,17 @@ impl OpenOptions {
     ///
     /// # Examples
     ///
-    /// ```no_run
-    /// use tauri_plugin_fs::OpenOptions;
+    /// ```rust,no_run
+    /// use std::path::Path;
+    /// use tauri_plugin_fs::{FsExt, OpenOptions};
     ///
-    /// let file = OpenOptions::new().write(true).create(true).open("foo.txt");
+    /// tauri::Builder::default()
+    ///   .setup(|app| {
+    ///     let mut options = OpenOptions::new();
+    ///     options.write(true).create(true);
+    ///     let file = app.fs().open(Path::new("foo.txt"), options)?;
+    ///     Ok(())
+    ///   });
     /// ```
     pub fn create(&mut self, create: bool) -> &mut Self {
         self.create = create;
@@ -260,7 +310,7 @@ impl OpenOptions {
     /// No file is allowed to exist at the target location, also no (dangling) symlink. In this
     /// way, if the call succeeds, the file returned is guaranteed to be new.
     /// If a file exists at the target location, creating a new file will fail with [`AlreadyExists`]
-    /// or another error based on the situation. See [`OpenOptions::open`] for a
+    /// or another error based on the situation. See [`std::fs::OpenOptions::open`] for a
     /// non-exhaustive list of likely errors.
     ///
     /// This option is useful because it is atomic. Otherwise between checking
@@ -275,16 +325,21 @@ impl OpenOptions {
     ///
     /// [`.create()`]: OpenOptions::create
     /// [`.truncate()`]: OpenOptions::truncate
-    /// [`AlreadyExists`]: io::ErrorKind::AlreadyExists
+    /// [`AlreadyExists`]: std::io::ErrorKind::AlreadyExists
     ///
     /// # Examples
     ///
-    /// ```no_run
-    /// use tauri_plugin_fs::OpenOptions;
+    /// ```rust,no_run
+    /// use std::path::Path;
+    /// use tauri_plugin_fs::{FsExt, OpenOptions};
     ///
-    /// let file = OpenOptions::new().write(true)
-    ///                              .create_new(true)
-    ///                              .open("foo.txt");
+    /// tauri::Builder::default()
+    ///   .setup(|app| {
+    ///     let mut options = OpenOptions::new();
+    ///     options.write(true).create_new(true);
+    ///     let file = app.fs().open(Path::new("foo.txt"), options)?;
+    ///     Ok(())
+    ///   });
     /// ```
     pub fn create_new(&mut self, create_new: bool) -> &mut Self {
         self.create_new = create_new;
@@ -306,28 +361,35 @@ impl std::os::unix::fs::OpenOptionsExt for OpenOptions {
 }
 
 impl OpenOptions {
-    #[cfg(target_os = "android")]
-    fn android_mode(&self) -> String {
-        let mut mode = String::new();
-
-        if self.read {
-            mode.push('r');
+    /// The mode passed to `ContentResolver.openAssetFileDescriptor` / `ParcelFileDescriptor.parseMode`,
+    /// which only accept `r`, `w`, `wt`, `wa`, `rw` and `rwt`.
+    ///
+    /// `create` and `create_new` have no equivalent: whether a missing file is created
+    /// depends on the content provider.
+    #[cfg(any(target_os = "android", test))]
+    fn android_mode(&self) -> &'static str {
+        match (self.read, self.write || self.append) {
+            (_, false) => "r",
+            // there is no read + append mode, and `read` defaults to `true` from JavaScript:
+            // honor the explicit append
+            (_, true) if self.append => "wa",
+            (true, true) if self.truncate => "rwt",
+            (true, true) => "rw",
+            (false, true) if self.truncate => "wt",
+            (false, true) => "w",
         }
-        if self.write {
-            mode.push('w');
-        }
-        if self.truncate {
-            mode.push('t');
-        }
-        if self.append {
-            mode.push('a');
-        }
-
-        mode
     }
 }
 
 impl<R: Runtime> Fs<R> {
+    /// Reads the entire contents of a file into a string.
+    ///
+    /// The file is opened in read-only mode with [`Fs::open`].
+    ///
+    /// # Errors
+    ///
+    /// Returns an error if `path` cannot be opened for reading or if its
+    /// contents are not valid UTF-8.
     pub fn read_to_string<P: Into<FilePath>>(&self, path: P) -> std::io::Result<String> {
         let mut s = String::new();
         self.open(
@@ -341,6 +403,13 @@ impl<R: Runtime> Fs<R> {
         Ok(s)
     }
 
+    /// Reads the entire contents of a file into a bytes vector.
+    ///
+    /// The file is opened in read-only mode with [`Fs::open`].
+    ///
+    /// # Errors
+    ///
+    /// Returns an error if `path` cannot be opened for reading.
     pub fn read<P: Into<FilePath>>(&self, path: P) -> std::io::Result<Vec<u8>> {
         let mut buf = Vec::new();
         self.open(
@@ -432,8 +501,37 @@ impl SecurityScopedResources {
     pub(crate) fn remove(&self, _url: &str) {}
 }
 
+/// Extension trait implemented by every [`Manager`] (the app handle, windows, webviews, ...)
+/// to access the file system plugin APIs.
+///
+/// # Examples
+///
+/// ```rust,no_run
+/// use std::path::Path;
+/// use tauri::Runtime;
+/// use tauri_plugin_fs::FsExt;
+///
+/// fn setup<R: Runtime>(app: &tauri::App<R>) -> Result<(), Box<dyn std::error::Error>> {
+///     // allow the app to access a directory that is not part of the static scope
+///     app.fs_scope().allow_directory(Path::new("/path/to/directory"), true)?;
+///
+///     let contents = app.fs().read_to_string(Path::new("/path/to/directory/file.txt"))?;
+///     println!("{contents}");
+///
+///     Ok(())
+/// }
+/// ```
 pub trait FsExt<R: Runtime> {
+    /// Returns the file system scope, which can be used to dynamically
+    /// allow or deny paths at runtime.
+    ///
+    /// # Panics
+    ///
+    /// Panics if the plugin is not registered in the app.
+    /// Use [`FsExt::try_fs_scope`] if the plugin might not be registered.
     fn fs_scope(&self) -> tauri::fs::Scope;
+
+    /// Returns the file system scope, or `None` if the plugin is not registered in the app.
     fn try_fs_scope(&self) -> Option<tauri::fs::Scope>;
 
     /// Cross platform file system APIs that also support manipulating Android files.
@@ -454,6 +552,7 @@ impl<R: Runtime, T: Manager<R>> FsExt<R> for T {
     }
 }
 
+/// Initializes the plugin.
 pub fn init<R: Runtime>() -> TauriPlugin<R, Option<config::Config>> {
     PluginBuilder::<R, Option<config::Config>>::new("fs")
         .invoke_handler(tauri::generate_handler![
@@ -528,3 +627,38 @@ pub fn init<R: Runtime>() -> TauriPlugin<R, Option<config::Config>> {
         })
         .build()
 }
+
+#[cfg(test)]
+mod tests {
+    use super::OpenOptions;
+
+    #[test]
+    fn android_modes_are_valid() {
+        let mode = |json: &str| {
+            serde_json::from_str::<OpenOptions>(json)
+                .unwrap()
+                .android_mode()
+        };
+
+        // `read` defaults to true when deserialized
+        assert_eq!(mode(r#"{}"#), "r");
+        assert_eq!(mode(r#"{ "read": false }"#), "r");
+        assert_eq!(mode(r#"{ "write": true }"#), "rw");
+        assert_eq!(mode(r#"{ "write": true, "truncate": true }"#), "rwt");
+        assert_eq!(mode(r#"{ "append": true }"#), "wa");
+        assert_eq!(mode(r#"{ "read": false, "write": true }"#), "w");
+        assert_eq!(
+            mode(r#"{ "read": false, "write": true, "truncate": true }"#),
+            "wt"
+        );
+        assert_eq!(mode(r#"{ "read": false, "append": true }"#), "wa");
+        assert_eq!(
+            mode(r#"{ "read": false, "write": true, "truncate": true, "append": true }"#),
+            "wa"
+        );
+        assert_eq!(
+            mode(r#"{ "read": false, "write": true, "create": true }"#),
+            "w"
+        );
+    }
+}
diff --git a/plugins/fs/src/watcher.rs b/plugins/fs/src/watcher.rs
index 8d5b1d5fc..00913d942 100644
--- a/plugins/fs/src/watcher.rs
+++ b/plugins/fs/src/watcher.rs
@@ -3,20 +3,20 @@
 // SPDX-License-Identifier: MIT
 
 use notify::{Config, RecommendedWatcher, RecursiveMode, Watcher};
-use notify_debouncer_full::{new_debouncer, DebouncedEvent, Debouncer, RecommendedCache};
+use notify_debouncer_full::{DebouncedEvent, Debouncer, RecommendedCache, new_debouncer};
 use serde::Deserialize;
 use tauri::{
+    Manager, Resource, ResourceId, Runtime, Webview,
     ipc::{Channel, CommandScope, GlobalScope},
     path::BaseDirectory,
-    Manager, Resource, ResourceId, Runtime, Webview,
 };
 
 use std::time::Duration;
 
 use crate::{
-    commands::{resolve_path, CommandResult},
-    scope::Entry,
     SafeFilePath,
+    commands::{CommandResult, resolve_path},
+    scope::Entry,
 };
 
 #[allow(unused)]
@@ -69,13 +69,18 @@ pub fn watch<R: Runtime>(
         let mut debouncer = new_debouncer(
             Duration::from_millis(delay),
             None,
-            move |events: Result<Vec<DebouncedEvent>, Vec<notify::Error>>| {
-                if let Ok(events) = events {
+            move |events: Result<Vec<DebouncedEvent>, Vec<notify::Error>>| match events {
+                Ok(events) => {
                     for event in events {
-                        // TODO: Should errors be emitted too?
                         let _ = on_event.send(event.event);
                     }
                 }
+                // TODO(v3): report the errors to the webview
+                Err(errors) => {
+                    for error in errors {
+                        log::error!("file watcher error: {error}");
+                    }
+                }
             },
         )?;
         for path in &resolved_paths {
@@ -84,11 +89,12 @@ pub fn watch<R: Runtime>(
         WatcherKind::Debouncer(debouncer)
     } else {
         let mut watcher = RecommendedWatcher::new(
-            move |event| {
-                if let Ok(event) = event {
-                    // TODO: Should errors be emitted too?
+            move |event: notify::Result<notify::Event>| match event {
+                Ok(event) => {
                     let _ = on_event.send(event);
                 }
+                // TODO(v3): report the errors to the webview
+                Err(error) => log::error!("file watcher error: {error}"),
             },
             Config::default(),
         )?;
@@ -106,8 +112,8 @@ pub fn watch<R: Runtime>(
 #[cfg(test)]
 mod tests {
     use notify::{
-        event::{DataChange, ModifyKind},
         Event, EventKind,
+        event::{DataChange, ModifyKind},
     };
 
     // the `WatchEvent` type of the JavaScript API relies on this format
diff --git a/plugins/geolocation/CHANGELOG.md b/plugins/geolocation/CHANGELOG.md
index 5aee1231b..f4147f0f7 100644
--- a/plugins/geolocation/CHANGELOG.md
+++ b/plugins/geolocation/CHANGELOG.md
@@ -8,6 +8,13 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.4.0]
+
+- [`d869c162`](https://github.com/tauri-apps/plugins-workspace/commit/d869c162a7d1e95629a3acbf0084bbeac3e10f77) Fixed a build failure when the `specta` feature is enabled: the `Error` type used the `#[serde(skip)]` helper attribute, which recent `specta` versions no longer register. It now uses `#[specta(skip)]`.
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
 ## [2.3.3]
 
 - [`db9c5998`](https://github.com/tauri-apps/plugins-workspace/commit/db9c5998feff9384f9cbbefcbe0d45937c00a1fc) ([#3531](https://github.com/tauri-apps/plugins-workspace/pull/3531) by [@Legend-Master](https://github.com/tauri-apps/plugins-workspace/../../Legend-Master)) Fix missing `consumer-rules.pro` on Gradle v9.
@@ -85,3 +92,6 @@
 - [`9606089b`](https://github.com/tauri-apps/plugins-workspace/commit/9606089b2add4a17f80ed5a09d59ce94824bd672) ([#1599](https://github.com/tauri-apps/plugins-workspace/pull/1599)) Initial release.
 - [`9887d1`](https://github.com/tauri-apps/plugins-workspace/commit/9887d14bd0e971c4c0f5c1188fc4005d3fc2e29e) Update to tauri RC.
   tauri-apps/plugins-workspace/commit/9887d14bd0e971c4c0f5c1188fc4005d3fc2e29e) Update to tauri RC.
+ttps://github.com/tauri-apps/plugins-workspace/pull/1599)) Initial release.
+- [`9887d1`](https://github.com/tauri-apps/plugins-workspace/commit/9887d14bd0e971c4c0f5c1188fc4005d3fc2e29e) Update to tauri RC.
+  tauri-apps/plugins-workspace/commit/9887d14bd0e971c4c0f5c1188fc4005d3fc2e29e) Update to tauri RC.
diff --git a/plugins/geolocation/Cargo.toml b/plugins/geolocation/Cargo.toml
index c97ad8579..4b1b01d32 100644
--- a/plugins/geolocation/Cargo.toml
+++ b/plugins/geolocation/Cargo.toml
@@ -3,6 +3,7 @@ name = "tauri-plugin-geolocation"
 description = "Get and track the device's current position"
 version = "3.0.0-alpha.1"
 edition = { workspace = true }
+rust-version = { workspace = true }
 authors = { workspace = true }
 license = { workspace = true }
 repository = { workspace = true }
diff --git a/plugins/geolocation/android/build.gradle.kts b/plugins/geolocation/android/build.gradle.kts
index 022f11d7b..45ad0ed88 100644
--- a/plugins/geolocation/android/build.gradle.kts
+++ b/plugins/geolocation/android/build.gradle.kts
@@ -1,3 +1,5 @@
+import org.jetbrains.kotlin.gradle.dsl.JvmTarget
+
 plugins {
     id("com.android.library")
     id("org.jetbrains.kotlin.android")
@@ -18,8 +20,11 @@ android {
         sourceCompatibility = JavaVersion.VERSION_1_8
         targetCompatibility = JavaVersion.VERSION_1_8
     }
-    kotlinOptions {
-        jvmTarget = "1.8"
+}
+
+kotlin {
+    compilerOptions {
+        jvmTarget = JvmTarget.JVM_1_8
     }
 }
 
diff --git a/plugins/geolocation/guest-js/index.ts b/plugins/geolocation/guest-js/index.ts
index 8ef5c5330..2c05bdae2 100644
--- a/plugins/geolocation/guest-js/index.ts
+++ b/plugins/geolocation/guest-js/index.ts
@@ -2,6 +2,12 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+/**
+ * Get and track the device's current position, mirroring the W3C Geolocation API.
+ *
+ * @module
+ */
+
 import {
   Channel,
   invoke,
@@ -9,6 +15,9 @@ import {
   checkPermissions as checkPluginPermissions
 } from '@tauri-apps/api/core'
 
+/**
+ * The GPS coordinates of a {@link Position}, along with the accuracy of each reading.
+ */
 export type Coordinates = {
   /**
    * Latitude in decimal degrees.
@@ -31,6 +40,9 @@ export type Coordinates = {
    * The altitude the user is at, if available.
    */
   altitude: number | null
+  /**
+   * The speed the user is traveling, in meters per second, if available.
+   */
   speed: number | null
   /**
    * The heading the user is facing, if available.
@@ -38,6 +50,9 @@ export type Coordinates = {
   heading: number | null
 }
 
+/**
+ * The current permission state for the geolocation APIs.
+ */
 export type PermissionStatus = {
   /**
    * Permission state for the location alias.
@@ -59,19 +74,32 @@ export type PermissionStatus = {
   coarseLocation: PermissionState
 }
 
+/**
+ * The individual permission aliases that can be requested with {@link requestPermissions}.
+ *
+ * `location` maps to both the coarse and fine location permissions on Android and to the standard
+ * location permission on iOS. `coarseLocation` maps to the coarse location permission only on
+ * Android, and behaves the same as `location` on iOS.
+ */
 export type PermissionType = 'location' | 'coarseLocation'
 
+/**
+ * A geolocation reading, as returned by {@link getCurrentPosition} and passed to the callback of {@link watchPosition}.
+ */
 export type Position = {
   /**
-   * Creation time for these coordinates.
+   * Creation time for these coordinates, in milliseconds since the Unix epoch.
    */
   timestamp: number
   /**
-   * The GPD coordinates along with the accuracy of the data.
+   * The GPS coordinates along with the accuracy of the data.
    */
   coords: Coordinates
 }
 
+/**
+ * Options used to configure a {@link getCurrentPosition} or {@link watchPosition} request.
+ */
 export type PositionOptions = {
   /**
    * High accuracy mode (such as GPS, if available)
@@ -92,6 +120,29 @@ export type PositionOptions = {
   maximumAge: number
 }
 
+/**
+ * Registers a callback that is invoked with the device's position whenever it changes, similar to the W3C `navigator.geolocation.watchPosition` API. Pass the returned id to {@link clearWatch} to stop watching.
+ *
+ * @example
+ * ```typescript
+ * import { watchPosition } from '@tauri-apps/plugin-geolocation';
+ * const watchId = await watchPosition(
+ *   { enableHighAccuracy: true, timeout: 10000, maximumAge: 0 },
+ *   (position, error) => {
+ *     if (error) {
+ *       console.error(error)
+ *     } else {
+ *       console.log(position)
+ *     }
+ *   }
+ * );
+ * ```
+ *
+ * @param options Configuration for the position watcher.
+ * @param cb Callback invoked with the new {@link Position} on success, or `null` and an error message when a read fails.
+ * @returns A promise resolving to the id of the registered watcher.
+ * @since 2.0.0
+ */
 export async function watchPosition(
   options: PositionOptions,
   cb: (location: Position | null, error?: string) => void
@@ -111,6 +162,19 @@ export async function watchPosition(
   return channel.id
 }
 
+/**
+ * Returns the device's current position, similar to the W3C `navigator.geolocation.getCurrentPosition` API.
+ *
+ * @example
+ * ```typescript
+ * import { getCurrentPosition } from '@tauri-apps/plugin-geolocation';
+ * const position = await getCurrentPosition();
+ * ```
+ *
+ * @param options Configuration for the position request.
+ * @returns A promise resolving to the current {@link Position}.
+ * @since 2.0.0
+ */
 export async function getCurrentPosition(
   options?: PositionOptions
 ): Promise<Position> {
@@ -119,16 +183,53 @@ export async function getCurrentPosition(
   })
 }
 
+/**
+ * Stops the position watcher registered with {@link watchPosition}.
+ *
+ * @example
+ * ```typescript
+ * import { clearWatch } from '@tauri-apps/plugin-geolocation';
+ * await clearWatch(watchId);
+ * ```
+ *
+ * @param channelId The id returned by {@link watchPosition}.
+ * @since 2.0.0
+ */
 export async function clearWatch(channelId: number): Promise<void> {
   await invoke('plugin:geolocation|clear_watch', {
     channelId
   })
 }
 
+/**
+ * Returns the current state of the geolocation permissions. Rejects if location services are disabled on the device.
+ *
+ * @example
+ * ```typescript
+ * import { checkPermissions } from '@tauri-apps/plugin-geolocation';
+ * const permission = await checkPermissions();
+ * ```
+ *
+ * @returns A promise resolving to the current {@link PermissionStatus}.
+ * @since 2.0.0
+ */
 export async function checkPermissions(): Promise<PermissionStatus> {
   return await checkPluginPermissions('geolocation')
 }
 
+/**
+ * Requests the given geolocation permissions, prompting the user if needed. Rejects if location services are disabled on the device.
+ *
+ * @example
+ * ```typescript
+ * import { requestPermissions } from '@tauri-apps/plugin-geolocation';
+ * const permission = await requestPermissions(['location']);
+ * ```
+ *
+ * @param permissions The permissions to request, or `null` to request all of them.
+ * @returns A promise resolving to the resulting {@link PermissionStatus}.
+ * @since 2.0.0
+ */
 export async function requestPermissions(
   permissions: PermissionType[] | null
 ): Promise<PermissionStatus> {
diff --git a/plugins/geolocation/src/commands.rs b/plugins/geolocation/src/commands.rs
index d2cae848f..8da077850 100644
--- a/plugins/geolocation/src/commands.rs
+++ b/plugins/geolocation/src/commands.rs
@@ -2,7 +2,7 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
-use tauri::{command, ipc::Channel, AppHandle, Runtime};
+use tauri::{AppHandle, Runtime, command, ipc::Channel};
 
 use crate::{GeolocationExt, PermissionStatus, PermissionType, Position, PositionOptions, Result};
 
diff --git a/plugins/geolocation/src/desktop.rs b/plugins/geolocation/src/desktop.rs
index 00da1fadb..70b288033 100644
--- a/plugins/geolocation/src/desktop.rs
+++ b/plugins/geolocation/src/desktop.rs
@@ -2,11 +2,11 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
-use serde::{de::DeserializeOwned, Serialize};
+use serde::{Serialize, de::DeserializeOwned};
 use tauri::{
+    AppHandle, Runtime,
     ipc::{Channel, InvokeResponseBody},
     plugin::PluginApi,
-    AppHandle, Runtime,
 };
 
 use crate::models::*;
@@ -22,6 +22,7 @@ pub fn init<R: Runtime, C: DeserializeOwned>(
 pub struct Geolocation<R: Runtime>(AppHandle<R>);
 
 impl<R: Runtime> Geolocation<R> {
+    /// Not implemented on desktop platforms; always resolves to a default, zeroed [`Position`] without reading any real location.
     pub fn get_current_position(
         &self,
         _options: Option<PositionOptions>,
@@ -29,6 +30,7 @@ impl<R: Runtime> Geolocation<R> {
         Ok(Position::default())
     }
 
+    /// Not implemented on desktop platforms. Registers a channel for `channel_id` bookkeeping, but `callback` is never invoked with a real [`WatchEvent`].
     pub fn watch_position<F: Fn(WatchEvent) + Send + Sync + 'static>(
         &self,
         options: PositionOptions,
@@ -64,14 +66,17 @@ impl<R: Runtime> Geolocation<R> {
         Ok(())
     }
 
+    /// Not implemented on desktop platforms; always succeeds without doing anything.
     pub fn clear_watch(&self, _channel_id: u32) -> crate::Result<()> {
         Ok(())
     }
 
+    /// Not implemented on desktop platforms; always resolves to the default [`PermissionStatus`] (both permissions in the [`Prompt`](tauri::plugin::PermissionState::Prompt) state).
     pub fn check_permissions(&self) -> crate::Result<PermissionStatus> {
         Ok(PermissionStatus::default())
     }
 
+    /// Not implemented on desktop platforms; always resolves to the default [`PermissionStatus`] without prompting the user.
     pub fn request_permissions(
         &self,
         _permissions: Option<Vec<PermissionType>>,
diff --git a/plugins/geolocation/src/error.rs b/plugins/geolocation/src/error.rs
index f59037de8..c8e959458 100644
--- a/plugins/geolocation/src/error.rs
+++ b/plugins/geolocation/src/error.rs
@@ -2,15 +2,18 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
-use serde::{ser::Serializer, Serialize};
+use serde::{Serialize, ser::Serializer};
 
+/// Alias for the result type returned by the geolocation APIs.
 pub type Result<T> = std::result::Result<T, Error>;
 
 // TODO: Improve Error handling (different typed errors instead of one (stringified) PluginInvokeError for all mobile errors)
 
+/// Errors that can occur while interacting with the geolocation APIs.
 #[derive(Debug, thiserror::Error)]
 #[cfg_attr(feature = "specta", derive(specta::Type))]
 pub enum Error {
+    /// Forwards an error returned by the underlying Android or iOS plugin invocation.
     #[cfg(mobile)]
     #[error(transparent)]
     PluginInvoke(
diff --git a/plugins/geolocation/src/lib.rs b/plugins/geolocation/src/lib.rs
index a1e5d2cea..2c70a04dd 100644
--- a/plugins/geolocation/src/lib.rs
+++ b/plugins/geolocation/src/lib.rs
@@ -9,8 +9,8 @@
 //! - **specta**: Add support for [`specta::specta`](https://docs.rs/specta/2.0.0-rc.25/specta/attr.specta.html) on structs like [`PermissionStatus`], [`PositionOptions`].
 
 use tauri::{
-    plugin::{Builder, TauriPlugin},
     Manager, Runtime,
+    plugin::{Builder, TauriPlugin},
 };
 
 pub use models::*;
@@ -33,6 +33,7 @@ pub use mobile::Geolocation;
 
 /// Extensions to [`tauri::App`], [`tauri::AppHandle`], [`tauri::WebviewWindow`], [`tauri::Webview`] and [`tauri::Window`] to access the geolocation APIs.
 pub trait GeolocationExt<R: Runtime> {
+    /// Returns the handle to the geolocation APIs.
     fn geolocation(&self) -> &Geolocation<R>;
 }
 
diff --git a/plugins/geolocation/src/mobile.rs b/plugins/geolocation/src/mobile.rs
index 48a3f5ded..9e1262dd6 100644
--- a/plugins/geolocation/src/mobile.rs
+++ b/plugins/geolocation/src/mobile.rs
@@ -2,11 +2,11 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
-use serde::{de::DeserializeOwned, Serialize};
+use serde::{Serialize, de::DeserializeOwned};
 use tauri::{
+    AppHandle, Runtime,
     ipc::{Channel, InvokeResponseBody},
     plugin::{PluginApi, PluginHandle},
-    AppHandle, Runtime,
 };
 
 use crate::models::*;
@@ -33,6 +33,7 @@ pub fn init<R: Runtime, C: DeserializeOwned>(
 pub struct Geolocation<R: Runtime>(PluginHandle<R>);
 
 impl<R: Runtime> Geolocation<R> {
+    /// Returns the device's current [`Position`]. On Android this returns the last known location immediately if it is still within `maximum_age`, otherwise it requests a fresh reading. Errors if location services are disabled or the required permission was not granted.
     pub fn get_current_position(
         &self,
         options: Option<PositionOptions>,
@@ -81,18 +82,21 @@ impl<R: Runtime> Geolocation<R> {
             .map_err(Into::into)
     }
 
+    /// Removes the position watcher registered with the given `channel_id`, as returned by [`Self::watch_position`]. Stops the platform location updates once no watcher remains.
     pub fn clear_watch(&self, channel_id: u32) -> crate::Result<()> {
         self.0
             .run_mobile_plugin("clearWatch", ClearWatchPayload { channel_id })
             .map_err(Into::into)
     }
 
+    /// Returns the current [`PermissionStatus`] for the geolocation APIs. Errors if location services are disabled on the device.
     pub fn check_permissions(&self) -> crate::Result<PermissionStatus> {
         self.0
             .run_mobile_plugin("checkPermissions", ())
             .map_err(Into::into)
     }
 
+    /// Requests the given `permissions` (or all of them when `None`) and returns the resulting [`PermissionStatus`]. Errors if location services are disabled on the device.
     pub fn request_permissions(
         &self,
         permissions: Option<Vec<PermissionType>>,
diff --git a/plugins/geolocation/src/models.rs b/plugins/geolocation/src/models.rs
index c08bb27a2..9dd7d3ab3 100644
--- a/plugins/geolocation/src/models.rs
+++ b/plugins/geolocation/src/models.rs
@@ -5,6 +5,7 @@
 use serde::{Deserialize, Serialize};
 use tauri::plugin::PermissionState;
 
+/// The current permission state for the geolocation APIs.
 #[derive(Debug, Clone, Default, Serialize, Deserialize)]
 #[cfg_attr(feature = "specta", derive(specta::Type))]
 #[serde(rename_all = "camelCase")]
@@ -25,6 +26,7 @@ pub struct PermissionStatus {
     pub coarse_location: PermissionState,
 }
 
+/// Options used to configure a [`get_current_position`](crate::Geolocation::get_current_position) or [`watch_position`](crate::Geolocation::watch_position) request.
 #[derive(Debug, Clone, Default, Serialize, Deserialize)]
 #[cfg_attr(feature = "specta", derive(specta::Type))]
 #[serde(rename_all = "camelCase")]
@@ -47,14 +49,18 @@ pub struct PositionOptions {
     pub maximum_age: u32,
 }
 
+/// The individual permission aliases that can be requested with [`request_permissions`](crate::Geolocation::request_permissions).
 #[derive(Debug, Clone, Serialize, Deserialize)]
 #[cfg_attr(feature = "specta", derive(specta::Type))]
 #[serde(rename_all = "camelCase")]
 pub enum PermissionType {
+    /// The `location` alias. On Android this maps to both `ACCESS_COARSE_LOCATION` and `ACCESS_FINE_LOCATION`. On iOS it maps to the standard location permission.
     Location,
+    /// The `coarseLocation` alias. On Android this maps to `ACCESS_COARSE_LOCATION` only. On iOS it behaves the same as [`Location`](Self::Location).
     CoarseLocation,
 }
 
+/// The GPS coordinates of a [`Position`], along with the accuracy of each reading.
 #[derive(Debug, Clone, Default, Serialize, Deserialize)]
 #[cfg_attr(feature = "specta", derive(specta::Type))]
 #[serde(rename_all = "camelCase")]
@@ -70,12 +76,13 @@ pub struct Coordinates {
     pub altitude_accuracy: Option<f64>,
     /// The altitude the user is at, if available.
     pub altitude: Option<f64>,
-    // The speed the user is traveling, if available.
+    /// The speed the user is traveling, in meters per second, if available.
     pub speed: Option<f64>,
     /// The heading the user is facing, if available.
     pub heading: Option<f64>,
 }
 
+/// A geolocation reading, as returned by [`get_current_position`](crate::Geolocation::get_current_position) and reported through [`WatchEvent::Position`].
 #[derive(Debug, Clone, Default, Serialize, Deserialize)]
 #[cfg_attr(feature = "specta", derive(specta::Type))]
 #[serde(rename_all = "camelCase")]
@@ -87,10 +94,13 @@ pub struct Position {
     pub coords: Coordinates,
 }
 
+/// A single update sent through the channel callback registered with [`watch_position`](crate::Geolocation::watch_position).
 #[derive(Debug, Clone, Serialize, Deserialize)]
 #[cfg_attr(feature = "specta", derive(specta::Type))]
 #[serde(untagged)]
 pub enum WatchEvent {
+    /// A new position was read successfully.
     Position(Position),
+    /// The platform failed to read a position; the string is the platform-provided error message.
     Error(String),
 }
diff --git a/plugins/global-shortcut/CHANGELOG.md b/plugins/global-shortcut/CHANGELOG.md
index f9711c27b..b3571ccc0 100644
--- a/plugins/global-shortcut/CHANGELOG.md
+++ b/plugins/global-shortcut/CHANGELOG.md
@@ -8,6 +8,12 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.4.0]
+
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
 ## \[2.3.2]
 
 - [`cb863d57`](https://github.com/tauri-apps/plugins-workspace/commit/cb863d57c60790efc41b2bd77d065bd91b4ef2b1) ([#3408](https://github.com/tauri-apps/plugins-workspace/pull/3408) by [@renovate](https://github.com/tauri-apps/plugins-workspace/../../renovate)) Update crate `global-hotkey` to 0.8 to fix cpu usage while pressing the keys on windows and to add F13-F24 mappings on Linux/X11.
diff --git a/plugins/global-shortcut/guest-js/index.ts b/plugins/global-shortcut/guest-js/index.ts
index 13e8e50e8..8f30a6919 100644
--- a/plugins/global-shortcut/guest-js/index.ts
+++ b/plugins/global-shortcut/guest-js/index.ts
@@ -10,12 +10,19 @@
 
 import { invoke, Channel } from '@tauri-apps/api/core'
 
+/**
+ * Payload sent to a shortcut handler when a registered shortcut is pressed or released.
+ */
 export interface ShortcutEvent {
+  /** The shortcut definition that triggered this event, e.g. `CommandOrControl+Shift+C`. */
   shortcut: string
+  /** Numeric identifier derived from the shortcut's modifiers and key. */
   id: number
+  /** Whether the shortcut's key combination was pressed down or released. */
   state: 'Released' | 'Pressed'
 }
 
+/** Callback invoked with a {@link ShortcutEvent} whenever a registered shortcut changes state. */
 export type ShortcutHandler = (event: ShortcutEvent) => void
 
 /**
@@ -43,7 +50,7 @@ export type ShortcutHandler = (event: ShortcutEvent) => void
  * });
  * ```
  *
- * @param shortcut Shortcut definition, modifiers and key separated by "+" e.g. CmdOrControl+Q
+ * @param shortcuts A shortcut definition, or a list of shortcut definitions, with modifiers and key separated by "+" e.g. CmdOrControl+Q
  * @param handler Shortcut handler callback - takes the triggered shortcut as argument
  *
  * @since 2.0.0
@@ -75,7 +82,7 @@ async function register(
  * await unregister(['CmdOrControl+Space', 'Alt+A']);
  * ```
  *
- * @param shortcut shortcut definition (modifiers and key separated by "+" e.g. CmdOrControl+Q), also accepts a list of shortcuts
+ * @param shortcuts A shortcut definition, or a list of shortcut definitions, with modifiers and key separated by "+" e.g. CmdOrControl+Q
  *
  * @since 2.0.0
  */
@@ -111,6 +118,7 @@ async function unregisterAll(): Promise<void> {
  * ```
  *
  * @param shortcut shortcut definition, modifiers and key separated by "+" e.g. CmdOrControl+Q
+ * @returns A promise resolving to whether the shortcut is currently registered by this application.
  *
  * @since 2.0.0
  */
diff --git a/plugins/global-shortcut/src/error.rs b/plugins/global-shortcut/src/error.rs
index 37392b321..9b8e5cbab 100644
--- a/plugins/global-shortcut/src/error.rs
+++ b/plugins/global-shortcut/src/error.rs
@@ -4,13 +4,20 @@
 
 use serde::{Serialize, Serializer};
 
+/// Errors that can happen while registering, unregistering or parsing global shortcuts.
 #[derive(Debug, thiserror::Error)]
 #[non_exhaustive]
 pub enum Error {
+    /// An error returned by the underlying `global_hotkey` crate, for example when the OS
+    /// refuses to register or unregister a shortcut, or when a shortcut string fails to parse.
     #[error("{0}")]
     GlobalHotkey(String),
+    /// Failed to receive the result of an operation dispatched to the main thread because the
+    /// sending end of the channel was dropped before it could reply.
     #[error(transparent)]
     RecvError(#[from] std::sync::mpsc::RecvError),
+    /// An error returned by the Tauri runtime, for example when dispatching a closure to run on
+    /// the main thread fails.
     #[error(transparent)]
     Tauri(#[from] tauri::Error),
 }
diff --git a/plugins/global-shortcut/src/lib.rs b/plugins/global-shortcut/src/lib.rs
index 450bb5985..f65c1de1a 100644
--- a/plugins/global-shortcut/src/lib.rs
+++ b/plugins/global-shortcut/src/lib.rs
@@ -5,6 +5,8 @@
 //! Register global shortcuts.
 //!
 //! - Supported platforms: Windows, Linux and macOS.
+//! - On macOS, registering and unregistering shortcuts must happen on the main thread, so every
+//!   [`GlobalShortcut`] operation dispatches to it and blocks until it completes.
 
 #![doc(
     html_logo_url = "https://github.com/tauri-apps/tauri/raw/dev/app-icon.png",
@@ -20,14 +22,14 @@ use std::{
 
 use global_hotkey::GlobalHotKeyEvent;
 pub use global_hotkey::{
-    hotkey::{Code, HotKey as Shortcut, Modifiers},
     GlobalHotKeyEvent as ShortcutEvent, HotKeyState as ShortcutState,
+    hotkey::{Code, HotKey as Shortcut, Modifiers},
 };
 use serde::Serialize;
 use tauri::{
+    AppHandle, Manager, Runtime, State,
     ipc::Channel,
     plugin::{Builder as PluginBuilder, TauriPlugin},
-    AppHandle, Manager, Runtime, State,
 };
 
 mod error;
@@ -38,6 +40,9 @@ type Result<T> = std::result::Result<T, Error>;
 type HotKeyId = u32;
 type HandlerFn<R> = Box<dyn Fn(&AppHandle<R>, &Shortcut, ShortcutEvent) + Send + Sync + 'static>;
 
+/// Internal wrapper around a [`Shortcut`] that lets the shortcut-accepting APIs on
+/// [`GlobalShortcut`] and [`Builder`] be generic over an already-parsed [`Shortcut`] or a
+/// string accelerator such as `"CmdOrControl+Q"`.
 pub struct ShortcutWrapper(Shortcut);
 
 impl From<Shortcut> for ShortcutWrapper {
@@ -65,6 +70,11 @@ unsafe impl Send for GlobalHotKeyManager {}
 /// SAFETY: we ensure it is run on main thread only
 unsafe impl Sync for GlobalHotKeyManager {}
 
+/// The global shortcut APIs, accessible through [`GlobalShortcutExt::global_shortcut`].
+///
+/// Registering, unregistering and checking a shortcut all dispatch the underlying
+/// `global_hotkey` call to the app's main thread and block until it finishes, since macOS
+/// requires the hotkey manager to run on the main thread.
 pub struct GlobalShortcut<R: Runtime> {
     #[allow(dead_code)]
     app: AppHandle<R>,
@@ -127,7 +137,8 @@ impl<R: Runtime> GlobalShortcut<R> {
 }
 
 impl<R: Runtime> GlobalShortcut<R> {
-    /// Register a shortcut.
+    /// Register a shortcut. Returns an error if the shortcut is invalid or already registered
+    /// by this [`GlobalShortcut`] instance.
     pub fn register<S>(&self, shortcut: S) -> Result<()>
     where
         S: TryInto<ShortcutWrapper>,
@@ -139,7 +150,10 @@ impl<R: Runtime> GlobalShortcut<R> {
         )
     }
 
-    /// Register a shortcut with a handler.
+    /// Register a shortcut with a handler that is called with the app handle, the triggered
+    /// [`Shortcut`] and the [`ShortcutEvent`] (whose `state` is [`ShortcutState::Pressed`] or
+    /// [`ShortcutState::Released`]) whenever the shortcut's key combination is pressed or
+    /// released.
     pub fn on_shortcut<S, F>(&self, shortcut: S, handler: F) -> Result<()>
     where
         S: TryInto<ShortcutWrapper>,
@@ -241,7 +255,28 @@ impl<R: Runtime> GlobalShortcut<R> {
     }
 }
 
+/// Extension trait for [`Manager`] implementors (e.g. [`AppHandle`]) that exposes access to the
+/// global shortcut APIs.
+///
+/// # Examples
+///
+/// ```rust,no_run
+/// use tauri::Runtime;
+/// use tauri_plugin_global_shortcut::{GlobalShortcutExt, ShortcutState};
+///
+/// fn setup<R: Runtime>(app: &tauri::App<R>) -> Result<(), Box<dyn std::error::Error>> {
+///     app.global_shortcut()
+///         .on_shortcut("CommandOrControl+Shift+C", |_app, shortcut, event| {
+///             if event.state == ShortcutState::Pressed {
+///                 println!("{shortcut:?} pressed");
+///             }
+///         })?;
+///
+///     Ok(())
+/// }
+/// ```
 pub trait GlobalShortcutExt<R: Runtime> {
+    /// Returns the [`GlobalShortcut`] instance managed by this plugin.
     fn global_shortcut(&self) -> &GlobalShortcut<R>;
 }
 
@@ -333,6 +368,26 @@ fn is_registered<R: Runtime>(
     Ok(global_shortcut.is_registered(parse_shortcut(shortcut)?))
 }
 
+/// Builder for the global shortcut plugin, letting you configure shortcuts and a handler that
+/// are registered as soon as the plugin is set up, before [`Builder::build`] is called.
+///
+/// # Examples
+///
+/// ```rust,no_run
+/// use tauri::Runtime;
+///
+/// fn setup<R: Runtime>(builder: tauri::Builder<R>) -> tauri::Builder<R> {
+///     builder.plugin(
+///         tauri_plugin_global_shortcut::Builder::new()
+///             .with_shortcut("CommandOrControl+Shift+C")
+///             .unwrap()
+///             .with_handler(|_app, shortcut, event| {
+///                 println!("{shortcut:?}: {event:?}");
+///             })
+///             .build(),
+///     )
+/// }
+/// ```
 pub struct Builder<R: Runtime> {
     shortcuts: Vec<Shortcut>,
     handler: Option<HandlerFn<R>>,
@@ -348,6 +403,7 @@ impl<R: Runtime> Default for Builder<R> {
 }
 
 impl<R: Runtime> Builder<R> {
+    /// Creates a new [`Builder`] with no shortcuts or handler configured.
     pub fn new() -> Self {
         Self::default()
     }
@@ -385,6 +441,11 @@ impl<R: Runtime> Builder<R> {
         self
     }
 
+    /// Builds the plugin. Shortcuts configured with [`Builder::with_shortcut`] /
+    /// [`Builder::with_shortcuts`] are registered when the plugin is set up, and the handler
+    /// configured with [`Builder::with_handler`] (if any) is called for every hotkey event, in
+    /// addition to any handler passed to [`GlobalShortcut::on_shortcut`] /
+    /// [`GlobalShortcut::on_shortcuts`] for that specific shortcut.
     pub fn build(self) -> TauriPlugin<R> {
         let handler = self.handler;
         let shortcuts = self.shortcuts;
diff --git a/plugins/haptics/CHANGELOG.md b/plugins/haptics/CHANGELOG.md
index 829e7062c..1158be4e0 100644
--- a/plugins/haptics/CHANGELOG.md
+++ b/plugins/haptics/CHANGELOG.md
@@ -8,6 +8,14 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.4.0]
+
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Migrate the Android Gradle scripts from the deprecated `kotlinOptions` DSL to `compilerOptions`, which Kotlin Gradle Plugin 2.3+ requires, to match the Tauri 2.12 Android library and templates.
+- [`d869c162`](https://github.com/tauri-apps/plugins-workspace/commit/d869c162a7d1e95629a3acbf0084bbeac3e10f77) Fixed a build failure when the `specta` feature is enabled: the `Error` type used the `#[serde(skip)]` helper attribute, which recent `specta` versions no longer register. It now uses `#[specta(skip)]`.
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
 ## [2.3.3]
 
 - [`db9c5998`](https://github.com/tauri-apps/plugins-workspace/commit/db9c5998feff9384f9cbbefcbe0d45937c00a1fc) ([#3531](https://github.com/tauri-apps/plugins-workspace/pull/3531) by [@Legend-Master](https://github.com/tauri-apps/plugins-workspace/../../Legend-Master)) Fix missing `consumer-rules.pro` on Gradle v9.
diff --git a/plugins/haptics/Cargo.toml b/plugins/haptics/Cargo.toml
index 89106c7bc..7737b4908 100644
--- a/plugins/haptics/Cargo.toml
+++ b/plugins/haptics/Cargo.toml
@@ -3,6 +3,7 @@ name = "tauri-plugin-haptics"
 description = "Haptic feedback and vibrations on Android and iOS"
 version = "3.0.0-alpha.1"
 edition = { workspace = true }
+rust-version = { workspace = true }
 authors = { workspace = true }
 license = { workspace = true }
 repository = { workspace = true }
diff --git a/plugins/haptics/android/build.gradle.kts b/plugins/haptics/android/build.gradle.kts
index a178826ae..8b42d977d 100644
--- a/plugins/haptics/android/build.gradle.kts
+++ b/plugins/haptics/android/build.gradle.kts
@@ -1,3 +1,5 @@
+import org.jetbrains.kotlin.gradle.dsl.JvmTarget
+
 plugins {
     id("com.android.library")
     id("org.jetbrains.kotlin.android")
@@ -18,8 +20,11 @@ android {
         sourceCompatibility = JavaVersion.VERSION_1_8
         targetCompatibility = JavaVersion.VERSION_1_8
     }
-    kotlinOptions {
-        jvmTarget = "1.8"
+}
+
+kotlin {
+    compilerOptions {
+        jvmTarget = JvmTarget.JVM_1_8
     }
 }
 
diff --git a/plugins/haptics/api-iife.js b/plugins/haptics/api-iife.js
index 857ed2764..0f50b70ca 100644
--- a/plugins/haptics/api-iife.js
+++ b/plugins/haptics/api-iife.js
@@ -1 +1 @@
-if("__TAURI__"in window){var __TAURI_PLUGIN_HAPTICS__=function(t,r){"use strict";const e={async vibrate(t){try{return{status:"ok",data:await r.invoke("plugin:haptics|vibrate",{duration:t})}}catch(t){if(t instanceof Error)throw t;return{status:"error",error:t}}},async impactFeedback(t){try{return{status:"ok",data:await r.invoke("plugin:haptics|impact_feedback",{style:t})}}catch(t){if(t instanceof Error)throw t;return{status:"error",error:t}}},async notificationFeedback(t){try{return{status:"ok",data:await r.invoke("plugin:haptics|notification_feedback",{type:t})}}catch(t){if(t instanceof Error)throw t;return{status:"error",error:t}}},async selectionFeedback(){try{return{status:"ok",data:await r.invoke("plugin:haptics|selection_feedback")}}catch(t){if(t instanceof Error)throw t;return{status:"error",error:t}}}},{vibrate:a,impactFeedback:i,notificationFeedback:c,selectionFeedback:n}=e;return t.impactFeedback=i,t.notificationFeedback=c,t.selectionFeedback=n,t.vibrate=a,t}({},window.__TAURI__.core);Object.defineProperty(window.__TAURI__,"haptics",{value:__TAURI_PLUGIN_HAPTICS__})}
+if("__TAURI__"in window){var __TAURI_PLUGIN_HAPTICS__=function(t,r){"use strict";const e={async vibrate(t){try{return{status:"ok",data:await r.invoke("plugin:haptics|vibrate",{duration:t})}}catch(t){if(t instanceof Error)throw t;return{status:"error",error:t}}},async impactFeedback(t){try{return{status:"ok",data:await r.invoke("plugin:haptics|impact_feedback",{style:t})}}catch(t){if(t instanceof Error)throw t;return{status:"error",error:t}}},async notificationFeedback(t){try{return{status:"ok",data:await r.invoke("plugin:haptics|notification_feedback",{type:t})}}catch(t){if(t instanceof Error)throw t;return{status:"error",error:t}}},async selectionFeedback(){try{return{status:"ok",data:await r.invoke("plugin:haptics|selection_feedback")}}catch(t){if(t instanceof Error)throw t;return{status:"error",error:t}}}};return t.impactFeedback=async function(t){return e.impactFeedback(t)},t.notificationFeedback=async function(t){return e.notificationFeedback(t)},t.selectionFeedback=async function(){return e.selectionFeedback()},t.vibrate=async function(t){return e.vibrate(t)},t}({},window.__TAURI__.core);Object.defineProperty(window.__TAURI__,"haptics",{value:__TAURI_PLUGIN_HAPTICS__})}
diff --git a/plugins/haptics/guest-js/bindings.ts b/plugins/haptics/guest-js/bindings.ts
index d12920d85..040e27861 100644
--- a/plugins/haptics/guest-js/bindings.ts
+++ b/plugins/haptics/guest-js/bindings.ts
@@ -73,12 +73,26 @@ export const commands = {
 /** user-defined types **/
 
 export type Error = never
+/**
+ * The style of an impact-feedback haptic.
+ *
+ * On iOS this maps directly to a `UIImpactFeedbackGenerator.FeedbackStyle` case. On Android,
+ * which has no equivalent system API, each style instead plays a distinct vibration waveform of
+ * increasing intensity. Has no effect on desktop platforms. Defaults to `Medium`.
+ */
 export type ImpactFeedbackStyle =
   | 'light'
   | 'medium'
   | 'heavy'
   | 'soft'
   | 'rigid'
+/**
+ * The type of notification feedback, indicating the outcome of a task or action.
+ *
+ * On iOS this maps directly to a `UINotificationFeedbackGenerator.FeedbackType` case. On
+ * Android, which has no equivalent system API, each type instead plays a distinct vibration
+ * waveform. Has no effect on desktop platforms. Defaults to `Success`.
+ */
 export type NotificationFeedbackType = 'success' | 'warning' | 'error'
 //export type RandomNumber = number;
 
diff --git a/plugins/haptics/guest-js/index.ts b/plugins/haptics/guest-js/index.ts
index 23485bdfb..9c477aaba 100644
--- a/plugins/haptics/guest-js/index.ts
+++ b/plugins/haptics/guest-js/index.ts
@@ -2,16 +2,102 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
-/* eslint-disable @typescript-eslint/unbound-method */
+/**
+ * Trigger haptic feedback on Android and iOS.
+ *
+ * @module
+ */
 
 import { commands } from './bindings'
+import type {
+  ImpactFeedbackStyle,
+  NotificationFeedbackType,
+  Result,
+  Error
+} from './bindings'
 
-export const {
-  vibrate,
-  impactFeedback,
-  notificationFeedback,
-  selectionFeedback
-} = commands
+/**
+ * Triggers a vibration for `duration` milliseconds.
+ *
+ * Has no effect on desktop platforms.
+ *
+ * @example
+ * ```typescript
+ * import { vibrate } from '@tauri-apps/plugin-haptics'
+ * await vibrate(300)
+ * ```
+ *
+ * @param duration Duration of the vibration, in milliseconds.
+ * @returns A promise resolving to the {@link Result} of the operation.
+ * @since 2.0.0
+ */
+export async function vibrate(duration: number): Promise<Result<null, Error>> {
+  return commands.vibrate(duration)
+}
+
+/**
+ * Triggers an impact-feedback haptic, indicating a collision between user interface elements.
+ *
+ * On iOS this maps to a `UIImpactFeedbackGenerator` of the given style. On Android, which has
+ * no equivalent system API, each style plays a distinct vibration waveform. Has no effect on
+ * desktop platforms.
+ *
+ * @example
+ * ```typescript
+ * import { impactFeedback } from '@tauri-apps/plugin-haptics'
+ * await impactFeedback('medium')
+ * ```
+ *
+ * @param style The style of the impact.
+ * @returns A promise resolving to the {@link Result} of the operation.
+ * @since 2.0.0
+ */
+export async function impactFeedback(
+  style: ImpactFeedbackStyle
+): Promise<Result<null, Error>> {
+  return commands.impactFeedback(style)
+}
+
+/**
+ * Triggers a notification-feedback haptic, indicating the outcome of a task or action.
+ *
+ * On iOS this maps to a `UINotificationFeedbackGenerator` of the given type. On Android, which
+ * has no equivalent system API, each type plays a distinct vibration waveform. Has no effect on
+ * desktop platforms.
+ *
+ * @example
+ * ```typescript
+ * import { notificationFeedback } from '@tauri-apps/plugin-haptics'
+ * await notificationFeedback('success')
+ * ```
+ *
+ * @param type The outcome to convey.
+ * @returns A promise resolving to the {@link Result} of the operation.
+ * @since 2.0.0
+ */
+export async function notificationFeedback(
+  type: NotificationFeedbackType
+): Promise<Result<null, Error>> {
+  return commands.notificationFeedback(type)
+}
+
+/**
+ * Triggers a haptic indicating that a selection changed, e.g. the value of a picker control.
+ *
+ * Has no effect on desktop platforms.
+ *
+ * @example
+ * ```typescript
+ * import { selectionFeedback } from '@tauri-apps/plugin-haptics'
+ * await selectionFeedback()
+ * ```
+ *
+ * @returns A promise resolving to the {@link Result} of the operation.
+ * @since 2.0.0
+ */
+export async function selectionFeedback(): Promise<Result<null, Error>> {
+  return commands.selectionFeedback()
+}
 
 export { ImpactFeedbackStyle, NotificationFeedbackType } from './bindings'
 
diff --git a/plugins/haptics/src/commands.rs b/plugins/haptics/src/commands.rs
index 76f097c09..f91313b2a 100644
--- a/plugins/haptics/src/commands.rs
+++ b/plugins/haptics/src/commands.rs
@@ -2,7 +2,7 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
-use tauri::{command, AppHandle, Runtime};
+use tauri::{AppHandle, Runtime, command};
 
 use crate::{HapticsExt, ImpactFeedbackStyle, NotificationFeedbackType, Result};
 
diff --git a/plugins/haptics/src/desktop.rs b/plugins/haptics/src/desktop.rs
index b04b75676..6011a606c 100644
--- a/plugins/haptics/src/desktop.rs
+++ b/plugins/haptics/src/desktop.rs
@@ -3,7 +3,7 @@
 // SPDX-License-Identifier: MIT
 
 use serde::de::DeserializeOwned;
-use tauri::{plugin::PluginApi, AppHandle, Runtime};
+use tauri::{AppHandle, Runtime, plugin::PluginApi};
 
 use crate::models::*;
 
@@ -18,18 +18,26 @@ pub fn init<R: Runtime, C: DeserializeOwned>(
 pub struct Haptics<R: Runtime>(AppHandle<R>);
 
 impl<R: Runtime> Haptics<R> {
+    /// No-op on desktop; haptic feedback is not supported on Linux, macOS or Windows. Always
+    /// returns `Ok`.
     pub fn vibrate(&self, _duration: u32) -> crate::Result<()> {
         Ok(())
     }
 
+    /// No-op on desktop; haptic feedback is not supported on Linux, macOS or Windows. Always
+    /// returns `Ok`.
     pub fn impact_feedback(&self, _style: ImpactFeedbackStyle) -> crate::Result<()> {
         Ok(())
     }
 
+    /// No-op on desktop; haptic feedback is not supported on Linux, macOS or Windows. Always
+    /// returns `Ok`.
     pub fn notification_feedback(&self, _type: NotificationFeedbackType) -> crate::Result<()> {
         Ok(())
     }
 
+    /// No-op on desktop; haptic feedback is not supported on Linux, macOS or Windows. Always
+    /// returns `Ok`.
     pub fn selection_feedback(&self) -> crate::Result<()> {
         Ok(())
     }
diff --git a/plugins/haptics/src/error.rs b/plugins/haptics/src/error.rs
index f59037de8..faed672af 100644
--- a/plugins/haptics/src/error.rs
+++ b/plugins/haptics/src/error.rs
@@ -2,15 +2,20 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
-use serde::{ser::Serializer, Serialize};
+use serde::{Serialize, ser::Serializer};
 
+/// Alias for a [`std::result::Result`] with the error type [`Error`].
 pub type Result<T> = std::result::Result<T, Error>;
 
 // TODO: Improve Error handling (different typed errors instead of one (stringified) PluginInvokeError for all mobile errors)
 
+/// Errors returned by the haptics APIs.
 #[derive(Debug, thiserror::Error)]
 #[cfg_attr(feature = "specta", derive(specta::Type))]
 pub enum Error {
+    /// The call to the Android or iOS plugin implementation failed, either because the
+    /// arguments could not be serialized, the response could not be deserialized, or the
+    /// native side rejected the call. Only produced on Android and iOS.
     #[cfg(mobile)]
     #[error(transparent)]
     PluginInvoke(
diff --git a/plugins/haptics/src/lib.rs b/plugins/haptics/src/lib.rs
index f297a7488..417343ac6 100644
--- a/plugins/haptics/src/lib.rs
+++ b/plugins/haptics/src/lib.rs
@@ -9,8 +9,8 @@
 //! - **specta**: Add support for [`specta::specta`](https://docs.rs/specta/2.0.0-rc.25/specta/attr.specta.html) on structs like [`ImpactFeedbackStyle`], [`NotificationFeedbackType`].
 
 use tauri::{
-    plugin::{Builder, TauriPlugin},
     Manager, Runtime,
+    plugin::{Builder, TauriPlugin},
 };
 
 pub use models::*;
@@ -33,6 +33,7 @@ pub use mobile::Haptics;
 
 /// Extensions to [`tauri::App`], [`tauri::AppHandle`], [`tauri::WebviewWindow`], [`tauri::Webview`] and [`tauri::Window`] to access the haptics APIs.
 pub trait HapticsExt<R: Runtime> {
+    /// Returns a handle to the [`Haptics`] APIs.
     fn haptics(&self) -> &Haptics<R>;
 }
 
diff --git a/plugins/haptics/src/mobile.rs b/plugins/haptics/src/mobile.rs
index 2b1e2036c..e3446eb46 100644
--- a/plugins/haptics/src/mobile.rs
+++ b/plugins/haptics/src/mobile.rs
@@ -2,10 +2,10 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
-use serde::{de::DeserializeOwned, Serialize};
+use serde::{Serialize, de::DeserializeOwned};
 use tauri::{
-    plugin::{PluginApi, PluginHandle},
     AppHandle, Runtime,
+    plugin::{PluginApi, PluginHandle},
 };
 
 use crate::models::*;
@@ -32,18 +32,40 @@ pub fn init<R: Runtime, C: DeserializeOwned>(
 pub struct Haptics<R: Runtime>(PluginHandle<R>);
 
 impl<R: Runtime> Haptics<R> {
+    /// Triggers a vibration for `duration` milliseconds.
+    ///
+    /// On iOS this plays a continuous [Core Haptics](https://developer.apple.com/documentation/corehaptics)
+    /// pattern when the device supports it, falling back to the system alert vibration
+    /// otherwise. On Android it uses [`Vibrator`](https://developer.android.com/reference/android/os/Vibrator).
+    ///
+    /// # Errors
+    ///
+    /// Returns [`Error::PluginInvoke`](crate::Error::PluginInvoke) if the underlying Android or
+    /// iOS plugin invocation fails.
     pub fn vibrate(&self, duration: u32) -> crate::Result<()> {
         self.0
             .run_mobile_plugin("vibrate", VibratePayload { duration })
             .map_err(Into::into)
     }
 
+    /// Triggers an impact-feedback haptic with the given [`ImpactFeedbackStyle`].
+    ///
+    /// # Errors
+    ///
+    /// Returns [`Error::PluginInvoke`](crate::Error::PluginInvoke) if the underlying Android or
+    /// iOS plugin invocation fails.
     pub fn impact_feedback(&self, style: ImpactFeedbackStyle) -> crate::Result<()> {
         self.0
             .run_mobile_plugin("impactFeedback", ImpactFeedbackPayload { style })
             .map_err(Into::into)
     }
 
+    /// Triggers a notification-feedback haptic for the given [`NotificationFeedbackType`].
+    ///
+    /// # Errors
+    ///
+    /// Returns [`Error::PluginInvoke`](crate::Error::PluginInvoke) if the underlying Android or
+    /// iOS plugin invocation fails.
     pub fn notification_feedback(&self, r#type: NotificationFeedbackType) -> crate::Result<()> {
         self.0
             .run_mobile_plugin(
@@ -53,6 +75,13 @@ impl<R: Runtime> Haptics<R> {
             .map_err(Into::into)
     }
 
+    /// Triggers a haptic indicating that a selection changed, e.g. when the value of a picker
+    /// control changes.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`Error::PluginInvoke`](crate::Error::PluginInvoke) if the underlying Android or
+    /// iOS plugin invocation fails.
     pub fn selection_feedback(&self) -> crate::Result<()> {
         self.0
             .run_mobile_plugin("selectionFeedback", ())
diff --git a/plugins/haptics/src/models.rs b/plugins/haptics/src/models.rs
index 50a1fb163..d59cc2029 100644
--- a/plugins/haptics/src/models.rs
+++ b/plugins/haptics/src/models.rs
@@ -13,24 +13,42 @@ pub struct HapticsOptions {
 }
  */
 
+/// The style of an impact-feedback haptic.
+///
+/// On iOS this maps directly to a `UIImpactFeedbackGenerator.FeedbackStyle` case. On Android,
+/// which has no equivalent system API, each style instead plays a distinct vibration waveform of
+/// increasing intensity. Has no effect on desktop platforms. Defaults to `Medium`.
 #[derive(Debug, Clone, Default, PartialEq, Eq, Serialize, Deserialize)]
 #[cfg_attr(feature = "specta", derive(specta::Type))]
 #[serde(rename_all = "camelCase")]
 pub enum ImpactFeedbackStyle {
+    /// A collision between small, light user interface elements.
     Light,
+    /// A collision between moderately sized user interface elements.
     #[default]
     Medium,
+    /// A collision between large, heavy user interface elements.
     Heavy,
+    /// A soft, muted impact between user interface elements.
     Soft,
+    /// A sharp, rigid impact between user interface elements.
     Rigid,
 }
 
+/// The type of notification feedback, indicating the outcome of a task or action.
+///
+/// On iOS this maps directly to a `UINotificationFeedbackGenerator.FeedbackType` case. On
+/// Android, which has no equivalent system API, each type instead plays a distinct vibration
+/// waveform. Has no effect on desktop platforms. Defaults to `Success`.
 #[derive(Debug, Clone, Default, PartialEq, Eq, Serialize, Deserialize)]
 #[cfg_attr(feature = "specta", derive(specta::Type))]
 #[serde(rename_all = "camelCase")]
 pub enum NotificationFeedbackType {
+    /// A task or action has completed successfully.
     #[default]
     Success,
+    /// A task or action has produced a warning.
     Warning,
+    /// A task or action has failed.
     Error,
 }
diff --git a/plugins/http/CHANGELOG.md b/plugins/http/CHANGELOG.md
index 6b6efd473..25898bb1b 100644
--- a/plugins/http/CHANGELOG.md
+++ b/plugins/http/CHANGELOG.md
@@ -18,6 +18,16 @@
 
 ## [2.7.0]
 
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
+### Dependencies
+
+- Upgraded to `fs-js@2.6.0`
+
+## [2.7.0]
+
 - [`1198a524`](https://github.com/tauri-apps/plugins-workspace/commit/1198a524b710abf2abeb1d9bd7b252402d26ca6d) **Security:** Added the `scopeRedirects` plugin configuration option, which checks the URL scope on every hop of a redirect chain instead of only on the URL requested by the frontend. Without it, a server on an allowed origin can redirect the request to any other origin - including `localhost` services, internal hosts and cloud metadata endpoints - and the plugin follows it, returning the response to the webview.
     
     ```json
diff --git a/plugins/http/guest-js/index.ts b/plugins/http/guest-js/index.ts
index e7666a6a0..c5980a33a 100644
--- a/plugins/http/guest-js/index.ts
+++ b/plugins/http/guest-js/index.ts
@@ -48,6 +48,11 @@ export interface Proxy {
   https?: string | ProxyConfig
 }
 
+/**
+ * Detailed configuration of a single proxy server, used when a plain URL string is not enough.
+ *
+ * @since 2.0.0
+ */
 export interface ProxyConfig {
   /**
    * The URL of the proxy server.
@@ -57,7 +62,13 @@ export interface ProxyConfig {
    * Set the `Proxy-Authorization` header using Basic auth.
    */
   basicAuth?: {
+    /**
+     * The user name sent to the proxy server.
+     */
     username: string
+    /**
+     * The password sent to the proxy server.
+     */
     password: string
   }
   /**
@@ -115,14 +126,24 @@ const ERROR_REQUEST_CANCELLED = 'Request cancelled'
  * Fetch a resource from the network. It returns a `Promise` that resolves to the
  * `Response` to that `Request`, whether it is successful or not.
  *
+ * The request is performed by the Rust backend instead of the webview, so it is not subject to
+ * CORS, but the URL must be allowed by the plugin scope.
+ *
  * @example
  * ```typescript
+ * import { fetch } from '@tauri-apps/plugin-http';
  * const response = await fetch("http://my.json.host/data.json");
  * console.log(response.status);  // e.g. 200
  * console.log(response.statusText); // e.g. "OK"
  * const jsonData = await response.json();
  * ```
  *
+ * @param input The resource to fetch, as a URL, a string or a `Request` object.
+ * @param init The standard `fetch` request options, extended with the Rust client options from
+ * {@linkcode ClientOptions}: `maxRedirections`, `connectTimeout`, `proxy` and `danger`. The
+ * `signal` option can be used to abort the request.
+ * @returns A promise resolving to the `Response` of the request.
+ *
  * @since 2.0.0
  */
 export async function fetch(
diff --git a/plugins/http/src/commands.rs b/plugins/http/src/commands.rs
index db51da87f..2a5dc4b8c 100644
--- a/plugins/http/src/commands.rs
+++ b/plugins/http/src/commands.rs
@@ -4,20 +4,20 @@
 
 use std::{future::Future, pin::Pin, str::FromStr, sync::Arc, time::Duration};
 
-use http::{header, HeaderMap, HeaderName, HeaderValue, Method, StatusCode};
-use reqwest::{redirect::Policy, NoProxy};
+use http::{HeaderMap, HeaderName, HeaderValue, Method, StatusCode, header};
+use reqwest::{NoProxy, redirect::Policy};
 use serde::{Deserialize, Serialize};
 use tauri::{
+    Manager, ResourceId, ResourceTable, Runtime, State, Webview,
     async_runtime::Mutex,
     command,
     ipc::{CommandScope, GlobalScope},
-    Manager, ResourceId, ResourceTable, Runtime, State, Webview,
 };
-use tokio::sync::oneshot::{channel, Receiver, Sender};
+use tokio::sync::oneshot::{Receiver, Sender, channel};
 
 use crate::{
-    scope::{Entry, Scope},
     Error, Http, Result,
+    scope::{Entry, Scope},
 };
 
 const HTTP_USER_AGENT: &str = concat!(env!("CARGO_PKG_NAME"), "/", env!("CARGO_PKG_VERSION"),);
@@ -251,8 +251,12 @@ pub async fn fetch<R: Runtime>(
         if is_unsafe_header(&name) {
             #[cfg(debug_assertions)]
             {
-                eprintln!("[\x1b[33mWARNING\x1b[0m] Skipping {name} header as it is a forbidden header per fetch spec https://fetch.spec.whatwg.org/#terminology-headers");
-                eprintln!("[\x1b[33mWARNING\x1b[0m] if keeping the header is a desired behavior, you can enable `unsafe-headers` feature flag in your Cargo.toml");
+                eprintln!(
+                    "[\x1b[33mWARNING\x1b[0m] Skipping {name} header as it is a forbidden header per fetch spec https://fetch.spec.whatwg.org/#terminology-headers"
+                );
+                eprintln!(
+                    "[\x1b[33mWARNING\x1b[0m] if keeping the header is a desired behavior, you can enable `unsafe-headers` feature flag in your Cargo.toml"
+                );
             }
             continue;
         }
@@ -288,7 +292,9 @@ pub async fn fetch<R: Runtime>(
                 {
                     #[cfg(debug_assertions)]
                     {
-                        eprintln!("[\x1b[33mWARNING\x1b[0m] using dangerous settings requires `dangerous-settings` feature flag in your Cargo.toml");
+                        eprintln!(
+                            "[\x1b[33mWARNING\x1b[0m] using dangerous settings requires `dangerous-settings` feature flag in your Cargo.toml"
+                        );
                     }
                     let _ = danger_config;
                     return Err(Error::DangerousSettings);
@@ -335,16 +341,16 @@ pub async fn fetch<R: Runtime>(
             }
 
             // ensure we have an Origin header set
-            if cfg!(not(feature = "unsafe-headers")) || !headers.contains_key(header::ORIGIN) {
-                if let Ok(url) = webview.url() {
-                    // The url crate returns OpaqueOrigin for tauri://localhost which serializes to "null"
-                    let origin = if url.scheme() == "tauri" {
-                        "tauri://localhost".to_string()
-                    } else {
-                        url.origin().ascii_serialization()
-                    };
-                    headers.append(header::ORIGIN, HeaderValue::from_str(&origin)?);
-                }
+            if (cfg!(not(feature = "unsafe-headers")) || !headers.contains_key(header::ORIGIN))
+                && let Ok(url) = webview.url()
+            {
+                // The url crate returns OpaqueOrigin for tauri://localhost which serializes to "null"
+                let origin = if url.scheme() == "tauri" {
+                    "tauri://localhost".to_string()
+                } else {
+                    url.origin().ascii_serialization()
+                };
+                headers.append(header::ORIGIN, HeaderValue::from_str(&origin)?);
             }
 
             // In case empty origin is passed, remove it. Some services do not like Origin header
@@ -586,8 +592,10 @@ mod tests {
                     Some(location) => format!(
                         "HTTP/1.1 302 Found\r\nLocation: {location}\r\nContent-Length: 0\r\nConnection: close\r\n\r\n"
                     ),
-                    None => "HTTP/1.1 200 OK\r\nContent-Length: 6\r\nConnection: close\r\n\r\nsecret"
-                        .to_string(),
+                    None => {
+                        "HTTP/1.1 200 OK\r\nContent-Length: 6\r\nConnection: close\r\n\r\nsecret"
+                            .to_string()
+                    }
                 };
 
                 let _ = stream.write_all(response.as_bytes());
diff --git a/plugins/http/src/error.rs b/plugins/http/src/error.rs
index ef8de0c52..2b974e692 100644
--- a/plugins/http/src/error.rs
+++ b/plugins/http/src/error.rs
@@ -5,42 +5,68 @@
 use serde::{Serialize, Serializer};
 use url::Url;
 
+/// Errors that can happen while using the HTTP plugin.
+///
+/// The error is serialized to the frontend as its [`Display`](std::fmt::Display) string.
 #[derive(Debug, thiserror::Error)]
 pub enum Error {
+    /// JSON serialization or deserialization error.
     #[error(transparent)]
     Json(#[from] serde_json::Error),
+    /// File system error, raised for instance when the cookie store file cannot be created or
+    /// opened on startup.
     #[error(transparent)]
     Io(#[from] std::io::Error),
+    /// Error from the underlying [`reqwest`] client, raised while building the client, sending the
+    /// request or reading the response body.
     #[error(transparent)]
     Network(#[from] reqwest::Error),
+    /// Error from the [`http`] crate, raised while building the response of a `data:` URL.
     #[error(transparent)]
     Http(#[from] http::Error),
+    /// A header name given by the frontend is not a valid HTTP header name.
     #[error(transparent)]
     HttpInvalidHeaderName(#[from] http::header::InvalidHeaderName),
+    /// A header value is not a valid HTTP header value.
     #[error(transparent)]
     HttpInvalidHeaderValue(#[from] http::header::InvalidHeaderValue),
     /// URL not allowed by the scope.
+    ///
+    /// Raised for the URL requested by the frontend, and - when the
+    /// [`scope_redirects`](crate::Config::scope_redirects) configuration is enabled - for any
+    /// redirect target that is not allowed by the scope.
     #[error("url not allowed on the configured scope: {0}")]
     UrlNotAllowed(Url),
+    /// Failed to parse a URL.
     #[error(transparent)]
     UrlParseError(#[from] url::ParseError),
     /// HTTP method error.
     #[error(transparent)]
     HttpMethod(#[from] http::method::InvalidMethod),
+    /// The requested URL uses an unsupported scheme. Only `http`, `https` and `data` are handled.
     #[error("scheme {0} not supported")]
     SchemeNotSupport(String),
+    /// The request was aborted by the frontend before the response was received.
     #[error("Request canceled")]
     RequestCanceled,
+    /// Error from the file system plugin.
     #[error(transparent)]
     FsError(#[from] tauri_plugin_fs::Error),
+    /// The `data:` URL could not be processed.
     #[error("failed to process data url")]
     DataUrlError,
+    /// The body of the `data:` URL could not be decoded into bytes.
     #[error("failed to decode data url into bytes")]
     DataUrlDecodeError,
+    /// Error from the Tauri APIs, raised for instance while resolving a path or while reading the
+    /// webview resource table.
     #[error(transparent)]
     Tauri(#[from] tauri::Error),
+    /// A response header value is not valid UTF-8, so it cannot be forwarded to the frontend.
     #[error(transparent)]
     Utf8(#[from] std::string::FromUtf8Error),
+    /// The frontend requested dangerous client settings, but the `dangerous-settings` Cargo
+    /// feature is not enabled.
     #[error("dangerous settings used but are not enabled")]
     DangerousSettings,
 }
@@ -54,4 +80,5 @@ impl Serialize for Error {
     }
 }
 
+/// Alias for a [`Result`](std::result::Result) with the error type [`Error`].
 pub type Result<T> = std::result::Result<T, Error>;
diff --git a/plugins/http/src/lib.rs b/plugins/http/src/lib.rs
index 818493e4b..4ab541f38 100644
--- a/plugins/http/src/lib.rs
+++ b/plugins/http/src/lib.rs
@@ -52,8 +52,8 @@
 
 pub use reqwest;
 use tauri::{
-    plugin::{Builder, TauriPlugin},
     Manager, Runtime,
+    plugin::{Builder, TauriPlugin},
 };
 
 pub use error::{Error, Result};
diff --git a/plugins/http/src/reqwest_cookie_store.rs b/plugins/http/src/reqwest_cookie_store.rs
index 0b71902bd..ef389807b 100644
--- a/plugins/http/src/reqwest_cookie_store.rs
+++ b/plugins/http/src/reqwest_cookie_store.rs
@@ -6,7 +6,7 @@
 
 use std::{
     path::PathBuf,
-    sync::{mpsc::Receiver, Mutex},
+    sync::{Mutex, mpsc::Receiver},
 };
 
 use cookie_store::{CookieStore, RawCookie, RawCookieParseError};
diff --git a/plugins/http/src/scope.rs b/plugins/http/src/scope.rs
index a7745c2cd..c39540e75 100644
--- a/plugins/http/src/scope.rs
+++ b/plugins/http/src/scope.rs
@@ -154,11 +154,13 @@ mod tests {
         assert!(scope.is_allowed(&"http://localhost:8080/file.png".parse().unwrap()));
         assert!(scope.is_allowed(&"http://localhost:8080/file.png#head".parse().unwrap()));
         assert!(scope.is_allowed(&"http://localhost:8080/assets/file.png".parse().unwrap()));
-        assert!(scope.is_allowed(
-            &"http://localhost:8080/assets/file.png?width=100&height=200"
-                .parse()
-                .unwrap()
-        ));
+        assert!(
+            scope.is_allowed(
+                &"http://localhost:8080/assets/file.png?width=100&height=200"
+                    .parse()
+                    .unwrap()
+            )
+        );
 
         assert!(!scope.is_allowed(&"http://localhost:8080/file.jpeg".parse().unwrap()));
     }
@@ -172,11 +174,13 @@ mod tests {
         assert!(scope.is_allowed(&"http://something.else#tauri".parse().unwrap()));
         assert!(scope.is_allowed(&"http://something.else/path/to/file".parse().unwrap()));
         assert!(scope.is_allowed(&"http://something.else?rel=tauri".parse().unwrap()));
-        assert!(scope.is_allowed(
-            &"http://something.else/path/to/file.mp4?start=500"
-                .parse()
-                .unwrap()
-        ));
+        assert!(
+            scope.is_allowed(
+                &"http://something.else/path/to/file.mp4?start=500"
+                    .parse()
+                    .unwrap()
+            )
+        );
 
         assert!(!scope.is_allowed(&"https://something.else".parse().unwrap()));
 
diff --git a/plugins/localhost/CHANGELOG.md b/plugins/localhost/CHANGELOG.md
index 2d025fb5c..994120796 100644
--- a/plugins/localhost/CHANGELOG.md
+++ b/plugins/localhost/CHANGELOG.md
@@ -8,6 +8,11 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.4.0]
+
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
 ## \[2.3.2]
 
 - [`8bfa4450`](https://github.com/tauri-apps/plugins-workspace/commit/8bfa4450230d6a00f836bd27944c34cd7fe43e08) ([#3112](https://github.com/tauri-apps/plugins-workspace/pull/3112) by [@lucasfernog](https://github.com/tauri-apps/plugins-workspace/../../lucasfernog)) Disable caching on responses.
diff --git a/plugins/localhost/src/lib.rs b/plugins/localhost/src/lib.rs
index 5d948b015..5641f589b 100644
--- a/plugins/localhost/src/lib.rs
+++ b/plugins/localhost/src/lib.rs
@@ -15,26 +15,33 @@ use std::collections::HashMap;
 
 use http::Uri;
 use tauri::{
-    plugin::{Builder as PluginBuilder, TauriPlugin},
     Runtime,
+    plugin::{Builder as PluginBuilder, TauriPlugin},
 };
 use tiny_http::{Header, Response as HttpResponse, Server};
 
+/// An incoming HTTP request received by the localhost server, passed to the
+/// [`Builder::on_request`] hook.
 pub struct Request {
     url: String,
 }
 
 impl Request {
+    /// The request URL (path and, if present, query string), exactly as sent by the client.
     pub fn url(&self) -> &str {
         &self.url
     }
 }
 
+/// The HTTP response the localhost server is about to send back for a matched asset. Passed
+/// mutably to the [`Builder::on_request`] hook so it can add or override headers before the
+/// response is written to the client.
 pub struct Response {
     headers: HashMap<String, String>,
 }
 
 impl Response {
+    /// Adds a header to the response, replacing any existing header with the same name.
     pub fn add_header<H: Into<String>, V: Into<String>>(&mut self, header: H, value: V) {
         self.headers.insert(header.into(), value.into());
     }
@@ -42,6 +49,11 @@ impl Response {
 
 type OnRequest = Option<Box<dyn Fn(&Request, &mut Response) + Send + Sync>>;
 
+/// Builds the localhost plugin.
+///
+/// **Note: This plugin brings considerable security risks and you should only use it if you know
+/// what you are doing. Because the server has no authentication, any local process can connect to
+/// it and read the assets it serves. If in doubt, use the default custom protocol implementation.**
 pub struct Builder {
     port: u16,
     host: Option<String>,
@@ -49,6 +61,23 @@ pub struct Builder {
 }
 
 impl Builder {
+    /// Creates a new [`Builder`] that will serve the app's assets on the given `port`, bound to
+    /// `localhost` unless [`Self::host`] is called.
+    ///
+    /// # Examples
+    ///
+    /// ```no_run
+    /// fn setup<R: tauri::Runtime>(builder: tauri::Builder<R>) -> tauri::Builder<R> {
+    ///     builder.plugin(
+    ///         tauri_plugin_localhost::Builder::new(9527)
+    ///             .host("127.0.0.1")
+    ///             .on_request(|request, response| {
+    ///                 println!("{}", request.url());
+    ///             })
+    ///             .build(),
+    ///     )
+    /// }
+    /// ```
     pub fn new(port: u16) -> Self {
         Self {
             port,
@@ -57,12 +86,15 @@ impl Builder {
         }
     }
 
-    // Change the host the plugin binds to. Defaults to `localhost`.
+    /// Sets the host the localhost server binds to. Defaults to `localhost`.
     pub fn host<H: Into<String>>(mut self, host: H) -> Self {
         self.host = Some(host.into());
         self
     }
 
+    /// Sets a hook that is called for every request that resolves to a known frontend asset,
+    /// right before the response is sent. Use it to inspect the [`Request`] and add or override
+    /// headers on the [`Response`], for example to append custom CORS or caching headers.
     pub fn on_request<F: Fn(&Request, &mut Response) + Send + Sync + 'static>(
         mut self,
         f: F,
@@ -71,6 +103,18 @@ impl Builder {
         self
     }
 
+    /// Builds the plugin, ready to be registered with [`tauri::Builder::plugin`].
+    ///
+    /// On setup it spawns a background thread that starts a `tiny_http` server bound to
+    /// `host:port`. For every incoming request whose path resolves to a known frontend asset, the
+    /// server responds with that asset's bytes, automatically setting the `Content-Type`, the
+    /// `Content-Security-Policy` (when the asset has one) and a `Cache-Control: no-cache` header,
+    /// then invoking the [`Self::on_request`] hook (if any) before writing the response.
+    ///
+    /// # Panics
+    ///
+    /// Panics on the background thread if the server fails to bind to `host:port`, or if it fails
+    /// to send a response for a request.
     pub fn build<R: Runtime>(mut self) -> TauriPlugin<R> {
         let port = self.port;
         let host = self.host.unwrap_or("localhost".to_string());
diff --git a/plugins/log/CHANGELOG.md b/plugins/log/CHANGELOG.md
index c47988c25..0f9e5de92 100644
--- a/plugins/log/CHANGELOG.md
+++ b/plugins/log/CHANGELOG.md
@@ -8,6 +8,12 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.10.0]
+
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
 ## [2.9.2]
 
 - [`2df3d936`](https://github.com/tauri-apps/plugins-workspace/commit/2df3d9368187e1d2ce736d3e0b2d4bdcae35b011) ([#3574](https://github.com/tauri-apps/plugins-workspace/pull/3574)) Log webview log target locations after 2 colons instead of 1. (e.g. `webview:myFunction@http://localhost:5173/src/myFile.ts?t=1787480723620:47:4` to `webview::myFunction@http://localhost:5173/src/myFile.ts?t=1787480723620:47:4`)
diff --git a/plugins/log/guest-js/index.ts b/plugins/log/guest-js/index.ts
index 93022a97b..87537e2e1 100644
--- a/plugins/log/guest-js/index.ts
+++ b/plugins/log/guest-js/index.ts
@@ -2,15 +2,30 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+/**
+ * Configure the Tauri application log system, and access the JavaScript-side log functions.
+ *
+ * @module
+ */
+
 import { invoke } from '@tauri-apps/api/core'
 import { listen, type UnlistenFn, type Event } from '@tauri-apps/api/event'
 
+/**
+ * Options to associate extra metadata with a log entry.
+ */
 export interface LogOptions {
+  /** The name of the file that emitted the log entry. Included in the log record's target when set. */
   file?: string
+  /** The line number in {@linkcode LogOptions.file} that emitted the log entry. */
   line?: number
+  /** Additional structured key-value pairs to attach to the log entry. */
   keyValues?: Record<string, string | undefined>
 }
 
+/**
+ * The verbosity level of a log entry, matching the levels of the Rust `log` crate.
+ */
 export enum LogLevel {
   /**
    * The "trace" level.
@@ -132,11 +147,8 @@ async function log(
 /**
  * Logs a message at the error level.
  *
- * @param message
- *
- * # Examples
- *
- * ```js
+ * @example
+ * ```typescript
  * import { error } from '@tauri-apps/plugin-log';
  *
  * const err_info = "No connection";
@@ -144,6 +156,10 @@ async function log(
  *
  * error(`Error: ${err_info} on port ${port}`);
  * ```
+ *
+ * @param message the message to log.
+ * @param options additional metadata (file, line, key-values) to attach to the log entry.
+ * @since 2.0.0
  */
 export async function error(
   message: string,
@@ -155,17 +171,18 @@ export async function error(
 /**
  * Logs a message at the warn level.
  *
- * @param message
- *
- * # Examples
- *
- * ```js
+ * @example
+ * ```typescript
  * import { warn } from '@tauri-apps/plugin-log';
  *
  * const warn_description = "Invalid Input";
  *
  * warn(`Warning! {warn_description}!`);
  * ```
+ *
+ * @param message the message to log.
+ * @param options additional metadata (file, line, key-values) to attach to the log entry.
+ * @since 2.0.0
  */
 export async function warn(
   message: string,
@@ -177,17 +194,18 @@ export async function warn(
 /**
  * Logs a message at the info level.
  *
- * @param message
- *
- * # Examples
- *
- * ```js
+ * @example
+ * ```typescript
  * import { info } from '@tauri-apps/plugin-log';
  *
  * const conn_info = { port: 40, speed: 3.20 };
  *
  * info(`Connected to port {conn_info.port} at {conn_info.speed} Mb/s`);
  * ```
+ *
+ * @param message the message to log.
+ * @param options additional metadata (file, line, key-values) to attach to the log entry.
+ * @since 2.0.0
  */
 export async function info(
   message: string,
@@ -199,17 +217,18 @@ export async function info(
 /**
  * Logs a message at the debug level.
  *
- * @param message
- *
- * # Examples
- *
- * ```js
+ * @example
+ * ```typescript
  * import { debug } from '@tauri-apps/plugin-log';
  *
  * const pos = { x: 3.234, y: -1.223 };
  *
  * debug(`New position: x: {pos.x}, y: {pos.y}`);
  * ```
+ *
+ * @param message the message to log.
+ * @param options additional metadata (file, line, key-values) to attach to the log entry.
+ * @since 2.0.0
  */
 export async function debug(
   message: string,
@@ -221,17 +240,18 @@ export async function debug(
 /**
  * Logs a message at the trace level.
  *
- * @param message
- *
- * # Examples
- *
- * ```js
+ * @example
+ * ```typescript
  * import { trace } from '@tauri-apps/plugin-log';
  *
  * let pos = { x: 3.234, y: -1.223 };
  *
  * trace(`Position is: x: {pos.x}, y: {pos.y}`);
  * ```
+ *
+ * @param message the message to log.
+ * @param options additional metadata (file, line, key-values) to attach to the log entry.
+ * @since 2.0.0
  */
 export async function trace(
   message: string,
@@ -249,9 +269,22 @@ type LoggerFn = (fn: RecordPayload) => void
 
 /**
  * Attaches a listener for the log, and calls the passed function for each log entry.
- * @param fn
  *
- * @returns a function to cancel the listener.
+ * @example
+ * ```typescript
+ * import { attachLogger } from '@tauri-apps/plugin-log';
+ *
+ * const detach = await attachLogger(({ level, message }) => {
+ *   console.log(`[${level}] ${message}`);
+ * });
+ *
+ * // detach the listener later
+ * detach();
+ * ```
+ *
+ * @param fn a function to call for every log entry emitted by the Rust side.
+ * @returns a promise resolving to a function to cancel the listener.
+ * @since 2.0.0
  */
 export async function attachLogger(fn: LoggerFn): Promise<UnlistenFn> {
   return await listen('log://log', (event: Event<RecordPayload>) => {
@@ -272,7 +305,18 @@ export async function attachLogger(fn: LoggerFn): Promise<UnlistenFn> {
 /**
  * Attaches a listener that writes log entries to the console as they come in.
  *
- * @returns a function to cancel the listener.
+ * @example
+ * ```typescript
+ * import { attachConsole } from '@tauri-apps/plugin-log';
+ *
+ * const detach = await attachConsole();
+ *
+ * // detach the listener later
+ * detach();
+ * ```
+ *
+ * @returns a promise resolving to a function to cancel the listener.
+ * @since 2.0.0
  */
 export async function attachConsole(): Promise<UnlistenFn> {
   return await attachLogger(({ level, message }: RecordPayload) => {
diff --git a/plugins/log/src/lib.rs b/plugins/log/src/lib.rs
index cb5eb1a36..c0d7aa39b 100644
--- a/plugins/log/src/lib.rs
+++ b/plugins/log/src/lib.rs
@@ -6,7 +6,7 @@
 //!
 //! ## Cargo features
 //!
-//! - **colored**: Enables [`Builder::with_colors`] `fern`'s `colored` feature for ANSI-colored outputs.
+//! - **colored**: Enables `Builder::with_colors`, which uses `fern`'s `colored` feature for ANSI-colored outputs.
 //! - **tracing**: Emit both log and tracing for the JavaScript log commands.
 
 #![doc(
@@ -27,18 +27,20 @@ use std::{
     iter::FromIterator,
     path::{Path, PathBuf},
 };
-use tauri::{
-    plugin::{self, TauriPlugin},
-    Manager, Runtime,
-};
 use tauri::{AppHandle, Emitter};
-use time::{macros::format_description, OffsetDateTime};
+use tauri::{
+    Manager, Runtime,
+    plugin::{self, TauriPlugin},
+};
+use time::{OffsetDateTime, macros::format_description};
 
 pub use fern;
 pub use log;
 
 mod commands;
 
+/// The log target prefix used for log records emitted through the JavaScript `trace`/`debug`/`info`/`warn`/`error`
+/// bindings, optionally followed by `::{location}` when the caller's source location could be determined.
 pub const WEBVIEW_TARGET: &str = "webview";
 
 #[cfg(target_os = "ios")]
@@ -59,16 +61,23 @@ const DEFAULT_LOG_TARGETS: [Target; 2] = [
 const LOG_DATE_FORMAT: &[time::format_description::FormatItem<'_>] =
     format_description!("[year]-[month]-[day]_[hour]-[minute]-[second]");
 
+/// The error type returned by this plugin's fallible operations.
 #[derive(Debug, thiserror::Error)]
 pub enum Error {
+    /// Forwarded from a call into the Tauri API, e.g. resolving the app log directory.
     #[error(transparent)]
     Tauri(#[from] tauri::Error),
+    /// Forwarded from a filesystem operation performed while creating, writing to or rotating a log file.
     #[error(transparent)]
     Io(#[from] std::io::Error),
+    /// Forwarded from formatting a timestamp with the configured [`TimezoneStrategy`].
     #[error(transparent)]
     TimeFormat(#[from] time::error::Format),
+    /// Forwarded from parsing an invalid `time` format description.
     #[error(transparent)]
     InvalidFormatDescription(#[from] time::error::InvalidFormatDescription),
+    /// Returned by [`Builder::split`] when [`Builder::skip_logger`] was called on the builder, since no logger was
+    /// created for it to return.
     #[error("Internal logger disabled and cannot be acquired or attached")]
     LoggerNotInitialized,
 }
@@ -125,6 +134,7 @@ impl From<log::Level> for LogLevel {
     }
 }
 
+/// The strategy applied to a log file when it exceeds [`Builder::max_file_size`].
 #[derive(Debug, Clone)]
 pub enum RotationStrategy {
     /// Will keep all the logs, renaming them to include the date.
@@ -135,13 +145,17 @@ pub enum RotationStrategy {
     KeepSome(usize),
 }
 
+/// The timezone used to compute the current time for log message timestamps and rotated log file names.
 #[derive(Debug, Clone)]
 pub enum TimezoneStrategy {
+    /// Use UTC time.
     UseUtc,
+    /// Use the local timezone. Falls back to UTC if the local offset cannot be determined.
     UseLocal,
 }
 
 impl TimezoneStrategy {
+    /// Returns the current time according to this strategy.
     pub fn get_now(&self) -> OffsetDateTime {
         match self {
             TimezoneStrategy::UseUtc => OffsetDateTime::now_utc(),
@@ -152,6 +166,7 @@ impl TimezoneStrategy {
     }
 }
 
+/// The strategy used to open a log file when a [`TargetKind::Folder`] or [`TargetKind::LogDir`] target is set up.
 #[derive(Debug, Clone, PartialEq)]
 pub enum FileOpenStrategy {
     /// Open existing file from last session and append, if any.
@@ -351,7 +366,9 @@ pub enum TargetKind {
     ///
     /// The plugin will ensure the directory exists before writing logs.
     Folder {
+        /// Path of the directory to write the log file to.
         path: PathBuf,
+        /// Name of the log file, without extension. Defaults to the app's package name when `None`.
         file_name: Option<String>,
     },
     /// Write logs to the OS specific logs directory.
@@ -364,7 +381,10 @@ pub enum TargetKind {
     /// | macOS/iOS | `{homeDir}/Library/Logs/{bundleIdentifier}`                                               | `/Users/Alice/Library/Logs/com.tauri.dev`                   |
     /// | Windows   | `{FOLDERID_LocalAppData}/{bundleIdentifier}/logs`                                         | `C:\Users\Alice\AppData\Local\com.tauri.dev\logs`           |
     /// | Android   | `{ConfigDir}/logs`                                                                        | `/data/data/com.tauri.dev/files/logs`                       |
-    LogDir { file_name: Option<String> },
+    LogDir {
+        /// Name of the log file, without extension. Defaults to the app's package name when `None`.
+        file_name: Option<String>,
+    },
     /// Forward logs to the webview (via the `log://log` event).
     ///
     /// This requires the webview to subscribe to log events, via this plugins `attachConsole` function.
@@ -385,6 +405,7 @@ pub struct Target {
 }
 
 impl Target {
+    /// Creates a new [`Target`] of the given [`TargetKind`], with no filters and the [`Builder`]'s formatter.
     #[inline]
     pub const fn new(kind: TargetKind) -> Self {
         Self {
@@ -394,6 +415,8 @@ impl Target {
         }
     }
 
+    /// Adds a filter that can reject log records from being sent to this target. Multiple filters may be added by
+    /// calling this method more than once.
     #[inline]
     pub fn filter<F>(mut self, filter: F) -> Self
     where
@@ -403,6 +426,8 @@ impl Target {
         self
     }
 
+    /// Sets a formatter for log records sent to this target, overriding the [`Builder`]'s formatter for this
+    /// target only.
     #[inline]
     pub fn format<F>(mut self, formatter: F) -> Self
     where
@@ -413,6 +438,8 @@ impl Target {
     }
 }
 
+/// Builds the log plugin, configuring targets, rotation, formatting and level filters before attaching the
+/// resulting logger as the global logger for the [`log`] crate.
 pub struct Builder {
     dispatch: fern::Dispatch,
     rotation_strategy: RotationStrategy,
@@ -454,6 +481,10 @@ impl Default for Builder {
 }
 
 impl Builder {
+    /// Creates a new [`Builder`] with the default configuration: targets [`TargetKind::Stdout`] and
+    /// [`TargetKind::LogDir`] (using the app's package name as the file name), [`RotationStrategy::KeepOne`],
+    /// [`TimezoneStrategy::UseUtc`], [`FileOpenStrategy::Append`], a maximum log file size of `40_000` bytes
+    /// (see [`Self::max_file_size`]) and the default `fern` formatter.
     pub fn new() -> Self {
         Default::default()
     }
@@ -601,14 +632,13 @@ impl Builder {
     /// Example usage:
     ///
     /// ```
-    /// # fn main() {
     /// tauri_plugin_log::Builder::new()
     ///     .level(log::LevelFilter::Info)
     ///     .filter(|metadata| {
     ///         // Reject messages with the `Error` log level.
-    ///         metadata.level() != log::LevelFilter::Error
-    ///     })
-    /// # }
+    ///         metadata.level() != log::Level::Error
+    ///     });
+    /// ```
     pub fn filter<F>(mut self, filter: F) -> Self
     where
         F: Fn(&log::Metadata) -> bool + Send + Sync + 'static,
@@ -658,10 +688,16 @@ impl Builder {
     /// Both scenarios require calling this method.
     ///
     /// ```rust
+    /// # struct SimpleLogger;
+    /// # impl log::Log for SimpleLogger {
+    /// #     fn enabled(&self, _metadata: &log::Metadata) -> bool { true }
+    /// #     fn log(&self, _record: &log::Record) {}
+    /// #     fn flush(&self) {}
+    /// # }
     /// static LOGGER: SimpleLogger = SimpleLogger;
     ///
-    /// log::set_logger(&SimpleLogger)?;
-    /// log::set_max_level(LevelFilter::Info);
+    /// log::set_logger(&LOGGER).expect("a logger was already set");
+    /// log::set_max_level(log::LevelFilter::Info);
     /// tauri_plugin_log::Builder::new()
     ///     .skip_logger();
     /// ```
@@ -821,6 +857,15 @@ impl Builder {
         plugin::Builder::new("log").invoke_handler(tauri::generate_handler![commands::log])
     }
 
+    /// Builds the [`TauriPlugin`] and returns it together with the configured [`log::LevelFilter`] and [`log::Log`]
+    /// implementation, instead of registering them as the global logger.
+    ///
+    /// Use this instead of [`Self::build`] when this logger needs to be combined with another one, e.g. when
+    /// forwarding logs to `tracing` via `tracing-log`, since only a single global logger can be installed.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`Error::LoggerNotInitialized`] if [`Self::skip_logger`] was called on this builder.
     #[allow(clippy::type_complexity)]
     pub fn split<R: Runtime>(
         self,
@@ -843,6 +888,8 @@ impl Builder {
         Ok((plugin.build(), max_level, log))
     }
 
+    /// Builds the [`TauriPlugin`], attaching the configured logger as the global logger for the [`log`] crate on
+    /// setup, unless [`Self::skip_logger`] was called on this builder.
     pub fn build<R: Runtime>(self) -> TauriPlugin<R> {
         Self::plugin_builder()
             .setup(move |app_handle, _api| {
diff --git a/plugins/nfc/CHANGELOG.md b/plugins/nfc/CHANGELOG.md
index ca7f866c9..4643236cc 100644
--- a/plugins/nfc/CHANGELOG.md
+++ b/plugins/nfc/CHANGELOG.md
@@ -8,6 +8,12 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.4.0]
+
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
 ## [2.3.6]
 
 - [`db9c5998`](https://github.com/tauri-apps/plugins-workspace/commit/db9c5998feff9384f9cbbefcbe0d45937c00a1fc) ([#3531](https://github.com/tauri-apps/plugins-workspace/pull/3531) by [@Legend-Master](https://github.com/tauri-apps/plugins-workspace/../../Legend-Master)) Fix missing `consumer-rules.pro` on Gradle v9.
@@ -122,3 +128,7 @@
   .
   commit/fe79adb5c7febd0e912efb5581264d671709fbb0)([#830](https://github.com/tauri-apps/plugins-workspace/pull/830)) Initial release.
   ithub.com/tauri-apps/plugins-workspace/pull/830)) Initial release.
+264d671709fbb0)([#830](https://github.com/tauri-apps/plugins-workspace/pull/830)) Initial release.
+  .
+  commit/fe79adb5c7febd0e912efb5581264d671709fbb0)([#830](https://github.com/tauri-apps/plugins-workspace/pull/830)) Initial release.
+  ithub.com/tauri-apps/plugins-workspace/pull/830)) Initial release.
diff --git a/plugins/nfc/Cargo.toml b/plugins/nfc/Cargo.toml
index 251b62606..06f3db2d7 100644
--- a/plugins/nfc/Cargo.toml
+++ b/plugins/nfc/Cargo.toml
@@ -3,6 +3,7 @@ name = "tauri-plugin-nfc"
 version = "3.0.0-alpha.1"
 description = "Read and write NFC tags on Android and iOS."
 edition = { workspace = true }
+rust-version = { workspace = true }
 authors = { workspace = true }
 license = { workspace = true }
 repository = { workspace = true }
diff --git a/plugins/nfc/android/build.gradle.kts b/plugins/nfc/android/build.gradle.kts
index bf691ef3d..012d8994e 100644
--- a/plugins/nfc/android/build.gradle.kts
+++ b/plugins/nfc/android/build.gradle.kts
@@ -1,3 +1,5 @@
+import org.jetbrains.kotlin.gradle.dsl.JvmTarget
+
 plugins {
     id("com.android.library")
     id("org.jetbrains.kotlin.android")
@@ -18,8 +20,11 @@ android {
         sourceCompatibility = JavaVersion.VERSION_1_8
         targetCompatibility = JavaVersion.VERSION_1_8
     }
-    kotlinOptions {
-        jvmTarget = "1.8"
+}
+
+kotlin {
+    compilerOptions {
+        jvmTarget = JvmTarget.JVM_1_8
     }
 }
 
diff --git a/plugins/nfc/guest-js/index.ts b/plugins/nfc/guest-js/index.ts
index 9c1fa10b2..35489b9cb 100644
--- a/plugins/nfc/guest-js/index.ts
+++ b/plugins/nfc/guest-js/index.ts
@@ -2,39 +2,95 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+/**
+ * Read and write NFC tags on Android and iOS.
+ *
+ * This plugin is mobile only, the APIs reject on desktop platforms.
+ *
+ * @module
+ */
+
 import { invoke } from '@tauri-apps/api/core'
 
+/**
+ * Record Type Definition (RTD) of an NDEF well known text record, the `"T"` (`0x54`) byte.
+ *
+ * @since 2.0.0
+ */
 export const RTD_TEXT = [0x54] // "T"
+/**
+ * Record Type Definition (RTD) of an NDEF well known URI record, the `"U"` (`0x55`) byte.
+ *
+ * @since 2.0.0
+ */
 export const RTD_URI = [0x55] // "U"
 
+/**
+ * Filters the tags to scan by the URI of their payload.
+ *
+ * Every property is optional and only the ones that are set take part in the filter.
+ * **Android only**, the iOS implementation ignores this filter.
+ */
 export interface UriFilter {
+  /** Only match URIs with this scheme, e.g. `https`. */
   scheme?: string
+  /** Only match URIs with this authority (host), e.g. `tauri.app`. */
   host?: string
+  /** Only match URIs whose path starts with this prefix, e.g. `/docs`. */
   pathPrefix?: string
 }
 
+/**
+ * The NFC technologies a tag can support, mirroring the `android.nfc.tech` classes.
+ *
+ * **Android only**, used by the `techLists` filter of an `ndef` {@link ScanKind}.
+ */
 export enum TechKind {
+  /** ISO-DEP (ISO 14443-4) properties and I/O operations. */
   IsoDep,
+  /** MIFARE Classic properties and I/O operations. */
   MifareClassic,
+  /** MIFARE Ultralight and MIFARE Ultralight C properties and I/O operations. */
   MifareUltralight,
+  /** NDEF data and operations on tags that are already formatted as NDEF. */
   Ndef,
+  /** Formatting operations on tags that can be formatted as NDEF but are not yet. */
   NdefFormatable,
+  /** NFC-A (ISO 14443-3A) properties and I/O operations. */
   NfcA,
+  /** NFC-B (ISO 14443-3B) properties and I/O operations. */
   NfcB,
+  /** NFC Barcode (Kovio NFC Barcode) properties and I/O operations. */
   NfcBarcode,
+  /** NFC-F (JIS 6319-4) properties and I/O operations. */
   NfcF,
+  /** NFC-V (ISO 15693) properties and I/O operations. */
   NfcV
 }
 
+/**
+ * The kind of scan to perform, which defines which tags are matched.
+ *
+ * Use `tag` to match any discovered tag and `ndef` to only match tags carrying an NDEF message.
+ */
 export type ScanKind =
   | {
+      /** Matches any tag that is discovered, whether it carries an NDEF message or not. */
       type: 'tag'
+      /** Only match tags whose payload URI matches this filter. **Android only**. */
       uri?: UriFilter
+      /** Only match tags whose payload has this MIME type, e.g. `text/plain`. **Android only**. */
       mimeType?: string
     }
   | {
+      /** Only matches tags that carry an NDEF message. */
       type: 'ndef'
+      /** Only match tags whose NDEF payload URI matches this filter. **Android only**. */
       uri?: UriFilter
+      /**
+       * Only match tags whose NDEF payload has this MIME type, e.g. `text/plain`.
+       * **Android only**.
+       */
       mimeType?: string
       /**
        *  Each of the tech-lists is considered independently and the activity is considered a match if
@@ -59,7 +115,13 @@ export type ScanKind =
       techLists?: TechKind[][]
     }
 
+/** Options for the {@link scan} function. */
 export interface ScanOptions {
+  /**
+   * Whether the connection to the scanned tag must be kept open after the scan resolves,
+   * so that a following {@link write} call writes to that tag instead of scanning a new one.
+   * Defaults to `false`.
+   */
   keepSessionAlive?: boolean
   /** Message displayed in the UI. iOS only. */
   message?: string
@@ -67,7 +129,12 @@ export interface ScanOptions {
   successMessage?: string
 }
 
+/** Options for the {@link write} function. */
 export interface WriteOptions {
+  /**
+   * The kind of scan to perform to find the tag to write to.
+   * Required on Android unless a {@link scan} session is kept alive.
+   */
   kind?: ScanKind
   /** Message displayed in the UI when reading the tag. iOS only. */
   message?: string
@@ -77,36 +144,101 @@ export interface WriteOptions {
   successMessage?: string
 }
 
+/**
+ * The Type Name Format (TNF) of an NDEF record,
+ * which defines how the record type is interpreted.
+ */
 export enum NFCTypeNameFormat {
+  /** The record is empty: type, identifier and payload must be empty. */
   Empty = 0,
+  /**
+   * The record type is an NFC Forum well known type, defined by a Record Type Definition (RTD)
+   * such as {@link RTD_TEXT} or {@link RTD_URI}.
+   */
   NfcWellKnown = 1,
+  /** The record type is a MIME media type as defined in RFC 2046, e.g. `text/plain`. */
   Media = 2,
+  /** The record type is an absolute URI as defined in RFC 3986. */
   AbsoluteURI = 3,
+  /** The record type is an NFC Forum external type, i.e. a type namespaced by its issuer. */
   NfcExternal = 4,
+  /**
+   * The record type is unknown: the type must be empty and the payload interpretation
+   * is left to the application.
+   */
   Unknown = 5,
+  /**
+   * The record is a middle or last chunk of a chunked record and inherits the type of the
+   * first chunk, so its own type must be empty.
+   */
   Unchanged = 6
 }
 
+/** An NDEF record read from a scanned tag. */
 export interface TagRecord {
+  /**
+   * The Type Name Format (TNF) of the record,
+   * which defines how {@link TagRecord.kind} is interpreted.
+   */
   tnf: NFCTypeNameFormat
+  /** The record type bytes. */
   kind: number[]
+  /** The record identifier bytes. Can be empty. */
   id: number[]
+  /** The record payload bytes. */
   payload: number[]
 }
 
+/** An NFC tag that has been scanned. */
 export interface Tag {
+  /** The tag identifier bytes, as reported by the operating system. */
   id: number[]
+  /** The technologies the tag supports, e.g. `["android.nfc.tech.Ndef"]` on Android. */
   kind: string[]
+  /** The NDEF records stored on the tag. Empty when the tag holds no NDEF message. */
   records: TagRecord[]
 }
 
+/**
+ * An NDEF record to be written to a tag.
+ *
+ * Use {@link record}, {@link textRecord} or {@link uriRecord} to create one.
+ */
 export interface NFCRecord {
+  /** The Type Name Format (TNF) of the record. */
   format: NFCTypeNameFormat
+  /**
+   * The record type, interpreted according to {@link NFCRecord.format}.
+   * For well known records this is a Record Type Definition (RTD) value
+   * such as {@link RTD_TEXT} or {@link RTD_URI}.
+   */
   kind: number[]
+  /** The record identifier. Can be empty. */
   id: number[]
+  /** The record payload bytes. */
   payload: number[]
 }
 
+/**
+ * Creates an NDEF record with the given type name format, type, identifier and payload.
+ *
+ * Strings are encoded as UTF-8 byte arrays.
+ *
+ * @example
+ * ```typescript
+ * import { record, NFCTypeNameFormat, write } from '@tauri-apps/plugin-nfc';
+ * const mimeRecord = record(NFCTypeNameFormat.Media, 'text/plain', '', 'hello world');
+ * await write([mimeRecord], { kind: { type: 'ndef' } });
+ * ```
+ *
+ * @param format The Type Name Format (TNF) of the record.
+ * @param kind The record type, interpreted according to `format`.
+ * @param id The record identifier. Use an empty string or array when the record has none.
+ * @param payload The record payload.
+ * @returns The NDEF record, ready to be written with {@link write}.
+ *
+ * @since 2.0.0
+ */
 export function record(
   format: NFCTypeNameFormat,
   kind: string | number[],
@@ -127,6 +259,25 @@ export function record(
   }
 }
 
+/**
+ * Creates an NDEF well known text record ({@link RTD_TEXT}).
+ *
+ * The payload is the UTF-8 encoded text prefixed by the language code
+ * and by a status byte holding the length of that language code.
+ *
+ * @example
+ * ```typescript
+ * import { textRecord, write } from '@tauri-apps/plugin-nfc';
+ * await write([textRecord('hello world')], { kind: { type: 'ndef' } });
+ * ```
+ *
+ * @param text The text to store in the record.
+ * @param id The record identifier. Defaults to an empty identifier.
+ * @param language The IANA language code of the text. Defaults to `en`.
+ * @returns The NDEF record, ready to be written with {@link write}.
+ *
+ * @since 2.0.0
+ */
 export function textRecord(
   text: string,
   id?: string | number[],
@@ -200,6 +351,24 @@ function encodeURI(uri: string): number[] {
   return encoded
 }
 
+/**
+ * Creates an NDEF well known URI record ({@link RTD_URI}).
+ *
+ * The URI is encoded with the NDEF URI abbreviation scheme: a known prefix such as
+ * `https://` is replaced by the identifier code byte that starts the payload.
+ *
+ * @example
+ * ```typescript
+ * import { uriRecord, write } from '@tauri-apps/plugin-nfc';
+ * await write([uriRecord('https://tauri.app')], { kind: { type: 'ndef' } });
+ * ```
+ *
+ * @param uri The URI to store in the record.
+ * @param id The record identifier. Defaults to an empty identifier.
+ * @returns The NDEF record, ready to be written with {@link write}.
+ *
+ * @since 2.0.0
+ */
 export function uriRecord(uri: string, id?: string | number[]): NFCRecord {
   return record(
     NFCTypeNameFormat.NfcWellKnown,
@@ -215,18 +384,22 @@ function mapScanKind(kind: ScanKind): Record<string, unknown> {
 }
 
 /**
- * Scans an NFC tag.
- *
- * ```javascript
- * import { scan } from "@tauri-apps/plugin-nfc";
- * await scan({ type: "tag" });
- * ```
+ * Scans an NFC tag, resolving when a tag matching the given filters is read.
  *
  * See <https://developer.android.com/develop/connectivity/nfc/nfc#ndef> for more information.
  *
- * @param kind
- * @param options
- * @returns
+ * @example
+ * ```typescript
+ * import { scan } from '@tauri-apps/plugin-nfc';
+ * const tag = await scan({ type: 'tag' });
+ * ```
+ *
+ * @param kind The kind of scan to perform, which defines how tags are matched.
+ * @param options Additional scan options such as the iOS UI messages and whether the
+ * session must be kept alive for a following {@link write} call.
+ * @returns A promise resolving to the tag that has been scanned.
+ *
+ * @since 2.0.0
  */
 export async function scan(
   kind: ScanKind,
@@ -241,17 +414,20 @@ export async function scan(
 /**
  * Write to an NFC tag.
  *
- * ```javascript
- * import { uriRecord, write } from "@tauri-apps/plugin-nfc";
- * await write([uriRecord("https://tauri.app")], { kind: { type: "ndef" } });
- * ```
- *
  * If you did not previously call {@link scan} with {@link ScanOptions.keepSessionAlive} set to true,
  * it will first scan the tag then write to it.
  *
- * @param records
- * @param options
- * @returns
+ * @example
+ * ```typescript
+ * import { uriRecord, write } from '@tauri-apps/plugin-nfc';
+ * await write([uriRecord('https://tauri.app')], { kind: { type: 'ndef' } });
+ * ```
+ *
+ * @param records The NDEF records to write to the tag.
+ * @param options Additional write options such as the kind of scan used to find the tag
+ * and the iOS UI messages.
+ *
+ * @since 2.0.0
  */
 export async function write(
   records: NFCRecord[],
@@ -268,6 +444,23 @@ export async function write(
   })
 }
 
+/**
+ * Checks whether NFC is supported by the device and currently usable by the app.
+ *
+ * Resolves to `false` on Android when the device has no NFC adapter or NFC is disabled in the
+ * device settings, and on iOS when the `NFCReaderUsageDescription` entry is missing from the
+ * `Info.plist` file or NFC tag reading is unavailable.
+ *
+ * @example
+ * ```typescript
+ * import { isAvailable } from '@tauri-apps/plugin-nfc';
+ * const canScan = await isAvailable();
+ * ```
+ *
+ * @returns A promise resolving to whether NFC is available on the device.
+ *
+ * @since 2.0.0
+ */
 export async function isAvailable(): Promise<boolean> {
   const { available }: { available: boolean } = await invoke(
     'plugin:nfc|is_available'
diff --git a/plugins/nfc/src/error.rs b/plugins/nfc/src/error.rs
index 339e763b1..51811c6da 100644
--- a/plugins/nfc/src/error.rs
+++ b/plugins/nfc/src/error.rs
@@ -2,14 +2,23 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
-use serde::{ser::Serializer, Serialize};
+use serde::{Serialize, ser::Serializer};
 
+/// Alias for a [`std::result::Result`] with the error type [`Error`].
 pub type Result<T> = std::result::Result<T, Error>;
 
+/// Errors returned by the NFC plugin.
+///
+/// Serializes to the error message string, so it can be returned directly from a command.
 #[derive(Debug, thiserror::Error)]
 pub enum Error {
+    /// An I/O error happened.
     #[error(transparent)]
     Io(#[from] std::io::Error),
+    /// The call to the Android or iOS plugin implementation failed,
+    /// either because the arguments could not be serialized, the response could not be
+    /// deserialized or the native side rejected the call (e.g. NFC is unavailable
+    /// or the tag could not be read or written).
     #[cfg(mobile)]
     #[error(transparent)]
     PluginInvoke(#[from] tauri::plugin::mobile::PluginInvokeError),
diff --git a/plugins/nfc/src/lib.rs b/plugins/nfc/src/lib.rs
index 33a47a96a..1bfb1b3a7 100644
--- a/plugins/nfc/src/lib.rs
+++ b/plugins/nfc/src/lib.rs
@@ -2,12 +2,20 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+//! Read and write NFC tags on Android and iOS.
+//!
+//! This plugin is mobile only: the whole crate is gated behind `#[cfg(mobile)]`,
+//! so it expands to nothing when compiling for Linux, macOS or Windows.
+//!
+//! Register the plugin with `init` and use the `NfcExt` trait to reach the
+//! `Nfc` instance from any `tauri::Manager` implementation (the app handle, a window, ...).
+
 #![cfg(mobile)]
 
 use serde::{Deserialize, Serialize};
 use tauri::{
-    plugin::{Builder, PluginHandle, TauriPlugin},
     Manager, Runtime,
+    plugin::{Builder, PluginHandle, TauriPlugin},
 };
 
 pub use models::*;
@@ -37,6 +45,12 @@ struct WriteRequest {
 }
 
 impl<R: Runtime> Nfc<R> {
+    /// Checks whether NFC is supported by the device and currently usable by the app.
+    ///
+    /// On Android this is `false` when the device has no NFC adapter or when NFC is
+    /// disabled in the device settings.
+    /// On iOS this is `false` when the `NFCReaderUsageDescription` entry is missing from the
+    /// `Info.plist` file or when NFC tag reading is not available on the device.
     pub fn is_available(&self) -> crate::Result<bool> {
         self.0
             .run_mobile_plugin::<IsAvailableResponse>("isAvailable", ())
@@ -44,6 +58,16 @@ impl<R: Runtime> Nfc<R> {
             .map_err(Into::into)
     }
 
+    /// Scans an NFC tag, blocking until a tag matching the given [`ScanRequest::kind`] filters
+    /// is read or the scan fails.
+    ///
+    /// Set [`ScanRequest::keep_session_alive`] to `true` to keep the connection to the tag open
+    /// after it has been scanned, so that a following [`Self::write`] call writes to that tag.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error when NFC is not available (see [`Self::is_available`])
+    /// or when the tag could not be read.
     pub fn scan(&self, payload: ScanRequest) -> crate::Result<ScanResponse> {
         self.0
             .run_mobile_plugin("scan", payload)
@@ -51,6 +75,19 @@ impl<R: Runtime> Nfc<R> {
             .map_err(Into::into)
     }
 
+    /// Writes the given NDEF records to an NFC tag, blocking until the write completes or fails.
+    ///
+    /// Because this API does not take a scan kind, on Android it can only write to the tag of an
+    /// ongoing session, so it must be preceded by a [`Self::scan`] call with
+    /// [`ScanRequest::keep_session_alive`] set to `true`.
+    /// On iOS an NDEF reader session is started when there is no ongoing session, and the
+    /// records are written to the first tag that is scanned.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error when NFC is not available (see [`Self::is_available`]), when there is no
+    /// connected tag on Android, when the tag is read-only, when it cannot hold the message or
+    /// when it does not support the NDEF format.
     pub fn write(&self, records: Vec<NfcRecord>) -> crate::Result<()> {
         self.0
             .run_mobile_plugin("write", WriteRequest { records })
@@ -60,6 +97,7 @@ impl<R: Runtime> Nfc<R> {
 
 /// Extensions to [`tauri::App`], [`tauri::AppHandle`], [`tauri::WebviewWindow`], [`tauri::Webview`] and [`tauri::Window`] to access the NFC APIs.
 pub trait NfcExt<R: Runtime> {
+    /// Returns the [`Nfc`] instance managed by the plugin.
     fn nfc(&self) -> &Nfc<R>;
 }
 
diff --git a/plugins/nfc/src/models.rs b/plugins/nfc/src/models.rs
index eb05cf7ac..ccb4c55e1 100644
--- a/plugins/nfc/src/models.rs
+++ b/plugins/nfc/src/models.rs
@@ -5,72 +5,132 @@
 use serde::{Deserialize, Serialize, Serializer};
 use std::fmt::Display;
 
+/// Arguments of the [`Nfc::scan`](crate::Nfc::scan) API.
 #[derive(Serialize)]
 #[serde(rename_all = "camelCase")]
 pub struct ScanRequest {
+    /// The kind of scan to perform, which defines how tags are matched.
     pub kind: ScanKind,
+    /// Whether the connection to the scanned tag must be kept open after the scan resolves.
+    ///
+    /// When `true`, a following [`Nfc::write`](crate::Nfc::write) call writes to the tag that was
+    /// scanned instead of starting a new session.
     pub keep_session_alive: bool,
 }
 
+/// An NDEF record to be written to a tag.
+///
+/// Use [`NFCTypeNameFormat`] to describe how [`Self::kind`] must be interpreted.
 #[derive(Serialize)]
 #[serde(rename_all = "camelCase")]
 pub struct NfcRecord {
+    /// The Type Name Format (TNF) of the record.
     pub format: NFCTypeNameFormat,
+    /// The record type, interpreted according to [`Self::format`].
+    ///
+    /// For [`NFCTypeNameFormat::NfcWellKnown`] records this is a Record Type Definition (RTD)
+    /// value such as `[0x54]` (`RTD_TEXT`) or `[0x55]` (`RTD_URI`).
     pub kind: Vec<u8>,
+    /// The record identifier. Can be empty.
     pub id: Vec<u8>,
+    /// The record payload bytes.
     pub payload: Vec<u8>,
 }
 
+/// The Type Name Format (TNF) of an NDEF record, which defines how the record type is interpreted.
+///
+/// Serialized as its numeric value.
 #[derive(serde_repr::Deserialize_repr, serde_repr::Serialize_repr)]
 #[repr(u8)]
 pub enum NFCTypeNameFormat {
+    /// The record is empty: type, identifier and payload must be empty.
     Empty = 0,
+    /// The record type is an NFC Forum well known type, defined by a Record Type Definition (RTD)
+    /// such as `RTD_TEXT` (`[0x54]`) or `RTD_URI` (`[0x55]`).
     NfcWellKnown = 1,
+    /// The record type is a MIME media type as defined in RFC 2046, e.g. `text/plain`.
     Media = 2,
+    /// The record type is an absolute URI as defined in RFC 3986.
     AbsoluteURI = 3,
+    /// The record type is an NFC Forum external type, i.e. a type namespaced by its issuer.
     NfcExternal = 4,
+    /// The record type is unknown: the type must be empty and the payload interpretation is
+    /// left to the application.
     Unknown = 5,
+    /// The record is a middle or last chunk of a chunked record and inherits the type of the
+    /// first chunk, so its own type must be empty.
     Unchanged = 6,
 }
 
+/// An NDEF record read from a scanned tag.
 #[derive(Deserialize)]
 pub struct NfcTagRecord {
+    /// The Type Name Format (TNF) of the record, which defines how [`Self::kind`] is interpreted.
     pub tnf: NFCTypeNameFormat,
+    /// The record type bytes.
     pub kind: Vec<u8>,
+    /// The record identifier bytes. Can be empty.
     pub id: Vec<u8>,
+    /// The record payload bytes.
     pub payload: Vec<u8>,
 }
 
+/// An NFC tag that has been scanned.
 #[derive(Deserialize)]
 pub struct NfcTag {
+    /// The tag identifier, as reported by the operating system.
     pub id: String,
+    /// The technology the tag supports.
     pub kind: String,
+    /// The NDEF records stored on the tag. Empty when the tag holds no NDEF message.
     pub records: Vec<NfcTagRecord>,
 }
 
+/// Response of the [`Nfc::scan`](crate::Nfc::scan) API.
 #[derive(Deserialize)]
 pub struct ScanResponse {
+    /// The tag that has been scanned.
     pub tag: NfcTag,
 }
 
+/// Filters the tags to scan by the URI of their NDEF payload.
+///
+/// Every field is optional and only the ones that are set take part in the filter.
+/// **Android only**: the iOS implementation ignores this filter.
 #[derive(Debug, Default, Serialize)]
 pub struct UriFilter {
+    /// Only match URIs with this scheme, e.g. `https`.
     scheme: Option<String>,
+    /// Only match URIs with this authority (host), e.g. `tauri.app`.
     host: Option<String>,
+    /// Only match URIs whose path starts with this prefix, e.g. `/docs`.
     path_prefix: Option<String>,
 }
 
+/// The NFC technologies a tag can support, mirroring the `android.nfc.tech` classes.
+///
+/// **Android only**. Serialized as the technology name, e.g. `"IsoDep"`.
 #[derive(Debug)]
 pub enum TechKind {
+    /// ISO-DEP (ISO 14443-4) properties and I/O operations.
     IsoDep,
+    /// MIFARE Classic properties and I/O operations.
     MifareClassic,
+    /// MIFARE Ultralight and MIFARE Ultralight C properties and I/O operations.
     MifareUltralight,
+    /// NDEF data and operations on tags that are already formatted as NDEF.
     Ndef,
+    /// Formatting operations on tags that can be formatted as NDEF but are not yet.
     NdefFormatable,
+    /// NFC-A (ISO 14443-3A) properties and I/O operations.
     NfcA,
+    /// NFC-B (ISO 14443-3B) properties and I/O operations.
     NfcB,
+    /// NFC Barcode (Kovio NFC Barcode) properties and I/O operations.
     NfcBarcode,
+    /// NFC-F (JIS 6319-4) properties and I/O operations.
     NfcF,
+    /// NFC-V (ISO 15693) properties and I/O operations.
     NfcV,
 }
 
@@ -104,16 +164,32 @@ impl Serialize for TechKind {
     }
 }
 
+/// The kind of scan to perform, which defines which tags are matched.
 #[derive(Debug, Serialize)]
 #[serde(rename_all = "camelCase")]
 pub enum ScanKind {
+    /// Only match tags that carry an NDEF message.
     Ndef {
+        /// Only match tags whose NDEF payload has this MIME type, e.g. `text/plain`.
+        /// **Android only**.
         mime_type: Option<String>,
+        /// Only match tags whose NDEF payload URI matches this filter. **Android only**.
         uri: Option<UriFilter>,
+        /// Only match tags supporting the listed technologies.
+        ///
+        /// Each tech list is considered independently and the tag matches when any single tech
+        /// list matches it, which provides AND (inside a list) and OR (between lists) semantics.
+        ///
+        /// **Android only**. See
+        /// <https://developer.android.com/reference/android/nfc/NfcAdapter#ACTION_TECH_DISCOVERED>
+        /// for more information.
         tech_list: Option<Vec<Vec<TechKind>>>,
     },
+    /// Match any tag that is discovered, whether it carries an NDEF message or not.
     Tag {
+        /// Only match tags whose payload has this MIME type, e.g. `text/plain`. **Android only**.
         mime_type: Option<String>,
+        /// Only match tags whose payload URI matches this filter. **Android only**.
         uri: Option<UriFilter>,
     },
 }
diff --git a/plugins/notification/CHANGELOG.md b/plugins/notification/CHANGELOG.md
index 1a24bc213..3645795be 100644
--- a/plugins/notification/CHANGELOG.md
+++ b/plugins/notification/CHANGELOG.md
@@ -8,6 +8,19 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.5.0]
+
+- [`c8c373b4`](https://github.com/tauri-apps/plugins-workspace/commit/c8c373b48bbf06b57c481dad4cf0a68638c68478) Fixed broken mobile APIs:
+    
+    - `channels()` invoked the `listChannels` command, which the `allow-list-channels` permission does not match; it now invokes `list_channels`.
+    - Unregistering an `onNotificationReceived` or `onAction` listener invokes the `remove_listener` command, which had no permission. It is now declared and part of the `default` permission set (`allow-remove-listener`).
+    - `cancelAll()` was rejected on Android and iOS, which required the list of notifications to cancel. It now cancels every pending notification.
+    - `active()` resolved with `{ values: [...] }` instead of an array on Android.
+- [`684feb25`](https://github.com/tauri-apps/plugins-workspace/commit/684feb2510f468f002c57f7bdebf675cf5c1b1d9) ([#3617](https://github.com/tauri-apps/plugins-workspace/pull/3617)) Fixed `isPermissionGranted()` always resolving to `false` on Windows. The initialization script short-circuited the permission check to avoid invoking the backend, but read the permission back before it had been set, so it settled on `denied` instead of `granted`.
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
 ## [2.4.0]
 
 - [`db9c5998`](https://github.com/tauri-apps/plugins-workspace/commit/db9c5998feff9384f9cbbefcbe0d45937c00a1fc) ([#3531](https://github.com/tauri-apps/plugins-workspace/pull/3531) by [@Legend-Master](https://github.com/tauri-apps/plugins-workspace/../../Legend-Master)) Fix missing `consumer-rules.pro` on Gradle v9.
@@ -171,3 +184,9 @@
 ## \[2.0.0-alpha.0]
 
 - [`717ae67`](https://github.com/tauri-apps/plugins-workspace/commit/717ae670978feb4492fac1f295998b93f2b9347f)([#371](https://github.com/tauri-apps/plugins-workspace/pull/371)) First v2 alpha release!
+`d8b4aca`](https://github.com/tauri-apps/plugins-workspace/commit/d8b4aca69f628b170804ecb982e2c319d026ef47)([#414](https://github.com/tauri-apps/plugins-workspace/pull/414)) Use `window.__TAURI_INVOKE__` instead of `window.__TAURI__` in init.js, fixes usage in apps without `withGlobalTauri` enabled.
+- [`7d71ad4`](https://github.com/tauri-apps/plugins-workspace/commit/7d71ad4e587bcf47ea34645f5b226945e487b765) Play a default sound when showing a notification on Windows.
+
+## \[2.0.0-alpha.0]
+
+- [`717ae67`](https://github.com/tauri-apps/plugins-workspace/commit/717ae670978feb4492fac1f295998b93f2b9347f)([#371](https://github.com/tauri-apps/plugins-workspace/pull/371)) First v2 alpha release!
diff --git a/plugins/notification/Cargo.toml b/plugins/notification/Cargo.toml
index ce822cd96..0182fd73b 100644
--- a/plugins/notification/Cargo.toml
+++ b/plugins/notification/Cargo.toml
@@ -42,12 +42,12 @@ url = { version = "2", features = ["serde"] }
 serde_repr = "0.1"
 
 
-[target."cfg(windows)".dependencies]
-win7-notifications = { version = "0.4.5", optional = true }
-windows-version = { version = "0.1", optional = true }
-
 [target."cfg(any(target_os = \"macos\", windows, target_os = \"linux\", target_os = \"dragonfly\", target_os = \"freebsd\", target_os = \"openbsd\", target_os = \"netbsd\"))".dependencies]
 notify-rust = "4.11"
 
 [features]
-windows7-compat = ["win7-notifications", "windows-version"]
+# Deprecated: tauri 2.12 no longer supports Windows 7, so this feature does nothing.
+windows7-compat = []
+# Kept so the implicit features of the removed optional dependencies still resolve.
+win7-notifications = []
+windows-version = []
diff --git a/plugins/notification/android/build.gradle.kts b/plugins/notification/android/build.gradle.kts
index f2b4cf679..6b3773e2f 100644
--- a/plugins/notification/android/build.gradle.kts
+++ b/plugins/notification/android/build.gradle.kts
@@ -1,3 +1,5 @@
+import org.jetbrains.kotlin.gradle.dsl.JvmTarget
+
 plugins {
     id("com.android.library")
     id("org.jetbrains.kotlin.android")
@@ -18,8 +20,11 @@ android {
         sourceCompatibility = JavaVersion.VERSION_1_8
         targetCompatibility = JavaVersion.VERSION_1_8
     }
-    kotlinOptions {
-        jvmTarget = "1.8"
+}
+
+kotlin {
+    compilerOptions {
+        jvmTarget = JvmTarget.JVM_1_8
     }
 }
 
diff --git a/plugins/notification/android/src/main/java/NotificationPlugin.kt b/plugins/notification/android/src/main/java/NotificationPlugin.kt
index 3ead31527..19a82833d 100644
--- a/plugins/notification/android/src/main/java/NotificationPlugin.kt
+++ b/plugins/notification/android/src/main/java/NotificationPlugin.kt
@@ -39,7 +39,8 @@ class BatchArgs {
 
 @InvokeArg
 class CancelArgs {
-  lateinit var notifications: List<Int>
+  // `cancelAll()` sends no list: cancel every pending notification
+  var notifications: List<Int>? = null
 }
 
 @InvokeArg
@@ -152,7 +153,9 @@ class NotificationPlugin(private val activity: Activity): Plugin(activity) {
   @Command
   fun cancel(invoke: Invoke) {
     val args = invoke.parseArgs(CancelArgs::class.java)
-    manager.cancel(args.notifications)
+    manager.cancel(
+      args.notifications ?: notificationStorage.getSavedNotificationIds().mapNotNull { it.toIntOrNull() }
+    )
     invoke.resolve()
   }
 
@@ -192,32 +195,33 @@ class NotificationPlugin(private val activity: Activity): Plugin(activity) {
   @SuppressLint("ObsoleteSdkInt")
   @Command
   fun getActive(invoke: Invoke) {
-    val notifications = JSArray()
+    // plain lists and maps: until tauri serializes org.json values natively,
+    // `resolveObject` turns a `JSArray` into `{ "values": [...] }`
+    val notifications = mutableListOf<Map<String, Any?>>()
     if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.M) {
       val activeNotifications = notificationManager.activeNotifications
       for (activeNotification in activeNotifications) {
-        val jsNotification = JSObject()
-        jsNotification.put("id", activeNotification.id)
-        jsNotification.put("tag", activeNotification.tag)
+        val jsNotification = mutableMapOf<String, Any?>(
+          "id" to activeNotification.id,
+          "tag" to activeNotification.tag
+        )
         val notification = activeNotification.notification
         if (notification != null) {
-          jsNotification.put("title", notification.extras.getCharSequence(android.app.Notification.EXTRA_TITLE))
-          jsNotification.put("body", notification.extras.getCharSequence(android.app.Notification.EXTRA_TEXT))
-          jsNotification.put("group", notification.group)
-          jsNotification.put(
-            "groupSummary",
+          jsNotification["title"] = notification.extras.getCharSequence(android.app.Notification.EXTRA_TITLE)?.toString()
+          jsNotification["body"] = notification.extras.getCharSequence(android.app.Notification.EXTRA_TEXT)?.toString()
+          jsNotification["group"] = notification.group
+          jsNotification["groupSummary"] =
             0 != notification.flags and android.app.Notification.FLAG_GROUP_SUMMARY
-          )
-          val extras = JSObject()
+          val extras = mutableMapOf<String, String?>()
           for (key in notification.extras.keySet()) {
-            extras.put(key!!, notification.extras.getString(key))
+            extras[key] = notification.extras.getString(key)
           }
-          jsNotification.put("data", extras)
+          jsNotification["data"] = extras
         }
-        notifications.put(jsNotification)
+        notifications.add(jsNotification)
       }
     }
-    
+
     invoke.resolveObject(notifications)
   }
 
diff --git a/plugins/notification/api-iife.js b/plugins/notification/api-iife.js
index 8eb7ac0e7..85f75b279 100644
--- a/plugins/notification/api-iife.js
+++ b/plugins/notification/api-iife.js
@@ -1 +1 @@
-if("__TAURI__"in window){var __TAURI_PLUGIN_NOTIFICATION__=function(i,n){"use strict";var e,t,o;i.ScheduleEvery=void 0,(e=i.ScheduleEvery||(i.ScheduleEvery={})).Year="year",e.Month="month",e.TwoWeeks="twoWeeks",e.Week="week",e.Day="day",e.Hour="hour",e.Minute="minute",e.Second="second";return i.Importance=void 0,(t=i.Importance||(i.Importance={}))[t.None=0]="None",t[t.Min=1]="Min",t[t.Low=2]="Low",t[t.Default=3]="Default",t[t.High=4]="High",i.Visibility=void 0,(o=i.Visibility||(i.Visibility={}))[o.Secret=-1]="Secret",o[o.Private=0]="Private",o[o.Public=1]="Public",i.Schedule=class{static at(i,n=!1,e=!1){return{at:{date:i,repeating:n,allowWhileIdle:e},interval:void 0,every:void 0}}static interval(i,n=!1){return{at:void 0,interval:{interval:i,allowWhileIdle:n},every:void 0}}static every(i,n,e=!1){return{at:void 0,interval:void 0,every:{interval:i,count:n,allowWhileIdle:e}}}},i.active=async function(){return await n.invoke("plugin:notification|get_active")},i.cancel=async function(i){await n.invoke("plugin:notification|cancel",{notifications:i})},i.cancelAll=async function(){await n.invoke("plugin:notification|cancel")},i.channels=async function(){return await n.invoke("plugin:notification|listChannels")},i.createChannel=async function(i){await n.invoke("plugin:notification|create_channel",{...i})},i.isPermissionGranted=async function(){return"default"!==window.Notification.permission?await Promise.resolve("granted"===window.Notification.permission):await n.invoke("plugin:notification|is_permission_granted")},i.onAction=async function(i){return await n.addPluginListener("notification","actionPerformed",i)},i.onNotificationReceived=async function(i){return await n.addPluginListener("notification","notification",i)},i.pending=async function(){return await n.invoke("plugin:notification|get_pending")},i.registerActionTypes=async function(i){await n.invoke("plugin:notification|register_action_types",{types:i})},i.removeActive=async function(i){await n.invoke("plugin:notification|remove_active",{notifications:i})},i.removeAllActive=async function(){await n.invoke("plugin:notification|remove_active")},i.removeChannel=async function(i){await n.invoke("plugin:notification|delete_channel",{id:i})},i.requestPermission=async function(){return await window.Notification.requestPermission()},i.sendNotification=function(i){"string"==typeof i?new window.Notification(i):new window.Notification(i.title,i)},i}({},window.__TAURI__.core);Object.defineProperty(window.__TAURI__,"notification",{value:__TAURI_PLUGIN_NOTIFICATION__})}
+if("__TAURI__"in window){var __TAURI_PLUGIN_NOTIFICATION__=function(i,n){"use strict";var e,t,o;i.ScheduleEvery=void 0,(e=i.ScheduleEvery||(i.ScheduleEvery={})).Year="year",e.Month="month",e.TwoWeeks="twoWeeks",e.Week="week",e.Day="day",e.Hour="hour",e.Minute="minute",e.Second="second";return i.Importance=void 0,(t=i.Importance||(i.Importance={}))[t.None=0]="None",t[t.Min=1]="Min",t[t.Low=2]="Low",t[t.Default=3]="Default",t[t.High=4]="High",i.Visibility=void 0,(o=i.Visibility||(i.Visibility={}))[o.Secret=-1]="Secret",o[o.Private=0]="Private",o[o.Public=1]="Public",i.Schedule=class{static at(i,n=!1,e=!1){return{at:{date:i,repeating:n,allowWhileIdle:e},interval:void 0,every:void 0}}static interval(i,n=!1){return{at:void 0,interval:{interval:i,allowWhileIdle:n},every:void 0}}static every(i,n,e=!1){return{at:void 0,interval:void 0,every:{interval:i,count:n,allowWhileIdle:e}}}},i.active=async function(){return await n.invoke("plugin:notification|get_active")},i.cancel=async function(i){await n.invoke("plugin:notification|cancel",{notifications:i})},i.cancelAll=async function(){await n.invoke("plugin:notification|cancel")},i.channels=async function(){return await n.invoke("plugin:notification|list_channels")},i.createChannel=async function(i){await n.invoke("plugin:notification|create_channel",{...i})},i.isPermissionGranted=async function(){return"default"!==window.Notification.permission?await Promise.resolve("granted"===window.Notification.permission):await n.invoke("plugin:notification|is_permission_granted")},i.onAction=async function(i){return await n.addPluginListener("notification","actionPerformed",i)},i.onNotificationReceived=async function(i){return await n.addPluginListener("notification","notification",i)},i.pending=async function(){return await n.invoke("plugin:notification|get_pending")},i.registerActionTypes=async function(i){await n.invoke("plugin:notification|register_action_types",{types:i})},i.removeActive=async function(i){await n.invoke("plugin:notification|remove_active",{notifications:i})},i.removeAllActive=async function(){await n.invoke("plugin:notification|remove_active")},i.removeChannel=async function(i){await n.invoke("plugin:notification|delete_channel",{id:i})},i.requestPermission=async function(){return await window.Notification.requestPermission()},i.sendNotification=function(i){"string"==typeof i?new window.Notification(i):new window.Notification(i.title,i)},i}({},window.__TAURI__.core);Object.defineProperty(window.__TAURI__,"notification",{value:__TAURI_PLUGIN_NOTIFICATION__})}
diff --git a/plugins/notification/build.rs b/plugins/notification/build.rs
index 4b24c755e..d7c0b3ed5 100644
--- a/plugins/notification/build.rs
+++ b/plugins/notification/build.rs
@@ -8,6 +8,7 @@ const COMMANDS: &[&str] = &[
     "is_permission_granted",
     "register_action_types",
     "register_listener",
+    "remove_listener",
     "cancel",
     "get_pending",
     "remove_active",
diff --git a/plugins/notification/guest-js/index.ts b/plugins/notification/guest-js/index.ts
index 7045ac66e..534635f14 100644
--- a/plugins/notification/guest-js/index.ts
+++ b/plugins/notification/guest-js/index.ts
@@ -35,7 +35,7 @@ interface Options {
    */
   channelId?: string
   /**
-   * Notification title.
+   * The title displayed on the notification.
    */
   title: string
   /**
@@ -139,11 +139,28 @@ interface Options {
   number?: number
 }
 
+/**
+ * The set of date fields a scheduled notification must match to be delivered.
+ *
+ * Fields that are not set match any value, so the notification fires on every date
+ * whose remaining components match.
+ */
 interface ScheduleInterval {
+  /**
+   * The year the notification fires on.
+   */
   year?: number
+  /**
+   * The month of the year the notification fires on.
+   */
   month?: number
+  /**
+   * The day of the month the notification fires on.
+   */
   day?: number
   /**
+   * The day of the week the notification fires on.
+   *
    * 1 - Sunday
    * 2 - Monday
    * 3 - Tuesday
@@ -153,26 +170,77 @@ interface ScheduleInterval {
    * 7 - Saturday
    */
   weekday?: number
+  /**
+   * The hour of the day the notification fires on, in the 24-hour clock.
+   */
   hour?: number
+  /**
+   * The minute of the hour the notification fires on.
+   */
   minute?: number
+  /**
+   * The second of the minute the notification fires on.
+   */
   second?: number
 }
 
+/**
+ * The unit of the repeating interval used by {@link Schedule.every}.
+ */
 enum ScheduleEvery {
+  /**
+   * The notification repeats every year.
+   *
+   * On Android a year is approximated as 52 weeks.
+   */
   Year = 'year',
+  /**
+   * The notification repeats every month.
+   *
+   * On Android a month is approximated as 30 days.
+   */
   Month = 'month',
+  /**
+   * The notification repeats every two weeks.
+   */
   TwoWeeks = 'twoWeeks',
+  /**
+   * The notification repeats every week.
+   */
   Week = 'week',
+  /**
+   * The notification repeats every day.
+   */
   Day = 'day',
+  /**
+   * The notification repeats every hour.
+   */
   Hour = 'hour',
+  /**
+   * The notification repeats every minute.
+   */
   Minute = 'minute',
   /**
-   * Not supported on iOS.
+   * The notification repeats every second.
+   *
+   * Not supported on iOS, where repeating triggers must be at least a minute apart.
    */
   Second = 'second'
 }
 
+/**
+ * Defines when a scheduled notification is delivered.
+ *
+ * Build one with the static {@link Schedule.at}, {@link Schedule.interval} and
+ * {@link Schedule.every} helpers, then pass it to the `schedule` option of a notification.
+ * Scheduling is only supported on mobile; desktop notifications are always shown immediately.
+ *
+ * @since 2.0.0
+ */
 class Schedule {
+  /**
+   * Set when the notification fires at a fixed date and time.
+   */
   at:
     | {
         date: Date
@@ -181,6 +249,9 @@ class Schedule {
       }
     | undefined
 
+  /**
+   * Set when the notification fires whenever the current date matches the given fields.
+   */
   interval:
     | {
         interval: ScheduleInterval
@@ -188,6 +259,9 @@ class Schedule {
       }
     | undefined
 
+  /**
+   * Set when the notification repeats on a fixed interval.
+   */
   every:
     | {
         interval: ScheduleEvery
@@ -196,6 +270,22 @@ class Schedule {
       }
     | undefined
 
+  /**
+   * Creates a schedule that fires the notification at the given date and time.
+   *
+   * @example
+   * ```typescript
+   * import { Schedule, sendNotification } from '@tauri-apps/plugin-notification';
+   * const schedule = Schedule.at(new Date(Date.now() + 60 * 1000));
+   * sendNotification({ title: 'Tauri', body: 'One minute later', schedule });
+   * ```
+   *
+   * @param date The date and time the notification fires at. It must be in the future.
+   * @param repeating Whether the notification keeps repeating, using the duration between the moment it is scheduled and `date` as the interval. The interval must be at least one minute on iOS.
+   * @param allowWhileIdle Whether the notification is allowed to fire while the device is in low-power idle (Doze) mode. Android only.
+   *
+   * @returns A schedule that can be assigned to the `schedule` option of a notification.
+   */
   static at(date: Date, repeating = false, allowWhileIdle = false): Schedule {
     return {
       at: { date, repeating, allowWhileIdle },
@@ -204,6 +294,23 @@ class Schedule {
     }
   }
 
+  /**
+   * Creates a schedule that fires the notification whenever the current date matches
+   * every field set on the given interval.
+   *
+   * @example
+   * ```typescript
+   * import { Schedule, sendNotification } from '@tauri-apps/plugin-notification';
+   * // fires every day at 9:00
+   * const schedule = Schedule.interval({ hour: 9, minute: 0 });
+   * sendNotification({ title: 'Tauri', body: 'Good morning', schedule });
+   * ```
+   *
+   * @param interval The date fields the current date must match for the notification to fire.
+   * @param allowWhileIdle Whether the notification is allowed to fire while the device is in low-power idle (Doze) mode. Android only.
+   *
+   * @returns A schedule that can be assigned to the `schedule` option of a notification.
+   */
   static interval(
     interval: ScheduleInterval,
     allowWhileIdle = false
@@ -215,6 +322,22 @@ class Schedule {
     }
   }
 
+  /**
+   * Creates a schedule that repeatedly fires the notification, once every `count` interval units.
+   *
+   * @example
+   * ```typescript
+   * import { Schedule, ScheduleEvery, sendNotification } from '@tauri-apps/plugin-notification';
+   * const schedule = Schedule.every(ScheduleEvery.Hour, 2);
+   * sendNotification({ title: 'Tauri', body: 'Every two hours', schedule });
+   * ```
+   *
+   * @param kind The unit of the repeating interval.
+   * @param count How many interval units elapse between each notification.
+   * @param allowWhileIdle Whether the notification is allowed to fire while the device is in low-power idle (Doze) mode. Android only.
+   *
+   * @returns A schedule that can be assigned to the `schedule` option of a notification.
+   */
   static every(
     kind: ScheduleEvery,
     count: number,
@@ -238,17 +361,53 @@ interface Attachment {
   url: string
 }
 
+/**
+ * A button the user can tap on a notification, belonging to an {@link ActionType}.
+ *
+ * Only used on mobile. On Android only the identifier, the title and the input flag are used.
+ */
 interface Action {
+  /**
+   * The identifier of this action, reported back when the user triggers it.
+   */
   id: string
+  /**
+   * The text displayed on the action button.
+   */
   title: string
+  /**
+   * Whether the device must be unlocked for the action to run. iOS only.
+   */
   requiresAuthentication?: boolean
+  /**
+   * Whether the app is brought to the foreground when the action is triggered. iOS only.
+   */
   foreground?: boolean
+  /**
+   * Whether the action is displayed as destructive, usually in red. iOS only.
+   */
   destructive?: boolean
+  /**
+   * Whether triggering the action lets the user type a text response.
+   */
   input?: boolean
+  /**
+   * The text displayed on the button that submits the text input. iOS only.
+   */
   inputButtonTitle?: string
+  /**
+   * The placeholder displayed on the empty text input field. iOS only.
+   */
   inputPlaceholder?: string
 }
 
+/**
+ * A group of {@link Action}s a notification can display, referenced by the
+ * `actionTypeId` option of a notification.
+ *
+ * Register it with {@link registerActionTypes} before sending a notification that uses it.
+ * Only used on mobile.
+ */
 interface ActionType {
   /**
    * The identifier of this action type
@@ -258,58 +417,206 @@ interface ActionType {
    * The list of associated actions
    */
   actions: Action[]
+  /**
+   * The placeholder shown instead of the notification body when previews are hidden. iOS only.
+   */
   hiddenPreviewsBodyPlaceholder?: string
+  /**
+   * Whether the app is notified when the user dismisses the notification. iOS only.
+   */
   customDismissAction?: boolean
+  /**
+   * Whether the notification can be displayed in a CarPlay environment. iOS only.
+   */
   allowInCarPlay?: boolean
+  /**
+   * Whether the notification title is shown even when previews are hidden. iOS only.
+   */
   hiddenPreviewsShowTitle?: boolean
+  /**
+   * Whether the notification subtitle is shown even when previews are hidden. iOS only.
+   */
   hiddenPreviewsShowSubtitle?: boolean
 }
 
+/**
+ * A notification that was scheduled and has not been delivered yet.
+ *
+ * Returned by {@link pending}, which is only supported on mobile.
+ */
 interface PendingNotification {
+  /**
+   * The identifier of the notification.
+   */
   id: number
+  /**
+   * The title of the notification, if it was set.
+   */
   title?: string
+  /**
+   * The body of the notification, if it was set.
+   */
   body?: string
+  /**
+   * The schedule that determines when the notification is delivered.
+   */
   schedule: Schedule
 }
 
+/**
+ * A notification that was delivered and is still visible in the notification center.
+ *
+ * Returned by {@link active}, which is only supported on mobile. Which fields are
+ * populated depends on the platform, since Android and iOS expose different
+ * information about delivered notifications.
+ */
 interface ActiveNotification {
+  /**
+   * The identifier of the notification.
+   */
   id: number
+  /**
+   * The tag the notification was posted with. Android only.
+   */
   tag?: string
+  /**
+   * The title of the notification, if it was set.
+   */
   title?: string
+  /**
+   * The body of the notification, if it was set.
+   */
   body?: string
+  /**
+   * The identifier of the group the notification belongs to. Android only.
+   */
   group?: string
+  /**
+   * Whether the notification is the summary of its group. Android only.
+   */
   groupSummary: boolean
+  /**
+   * The platform extras attached to the notification, as string values. Android only.
+   */
   data: Record<string, string>
+  /**
+   * The extra payload that was stored in the notification.
+   */
   extra: Record<string, unknown>
+  /**
+   * The attachments of the notification. iOS only.
+   */
   attachments: Attachment[]
+  /**
+   * The identifier of the action type the notification was registered with. iOS only.
+   */
   actionTypeId?: string
+  /**
+   * The schedule the notification was delivered with, if it was scheduled.
+   */
   schedule?: Schedule
+  /**
+   * The sound resource name of the notification. iOS only.
+   */
   sound?: string
 }
 
+/**
+ * How much the notifications of a {@link Channel} interrupt the user.
+ *
+ * It maps to the Android `NotificationManager.IMPORTANCE_*` constants and is only used on Android.
+ */
 enum Importance {
+  /**
+   * The notifications are not shown.
+   */
   None = 0,
+  /**
+   * The notifications are only shown in the shade, below the fold, without a status bar icon.
+   */
   Min,
+  /**
+   * The notifications are shown without a sound.
+   */
   Low,
+  /**
+   * The notifications are shown and make a sound.
+   *
+   * This is the value used when the channel does not define an importance.
+   */
   Default,
+  /**
+   * The notifications are shown, make a sound and pop up as a heads-up notification.
+   */
   High
 }
 
+/**
+ * How much of a notification is shown on the lock screen.
+ *
+ * It maps to the Android `Notification.VISIBILITY_*` constants and is only used on Android.
+ */
 enum Visibility {
+  /**
+   * The notification is not shown on the lock screen at all.
+   */
   Secret = -1,
+  /**
+   * The notification is shown on the lock screen with its sensitive content hidden.
+   *
+   * This is the value used when the channel does not define a visibility.
+   */
   Private,
+  /**
+   * The notification is shown in full on the lock screen.
+   */
   Public
 }
 
+/**
+ * A notification channel, the category users configure notification behavior on.
+ *
+ * Notifications reference a channel through their `channelId` option and are not delivered
+ * when the channel does not exist. Channels are only supported on Android.
+ */
 interface Channel {
+  /**
+   * The identifier of this channel.
+   */
   id: string
+  /**
+   * The user visible name of this channel.
+   */
   name: string
+  /**
+   * The user visible description of this channel.
+   */
   description?: string
+  /**
+   * The name of the sound resource played by the notifications of this channel.
+   *
+   * The resource must be placed in the app's `res/raw` folder.
+   */
   sound?: string
+  /**
+   * Whether the notifications of this channel blink the device light.
+   */
   lights?: boolean
+  /**
+   * The color of the device light, as a color string such as `#ff0000`.
+   */
   lightColor?: string
+  /**
+   * Whether the notifications of this channel vibrate the device.
+   */
   vibration?: boolean
+  /**
+   * How much the notifications of this channel interrupt the user.
+   */
   importance?: Importance
+  /**
+   * How much of the notifications of this channel is shown on the lock screen.
+   */
   visibility?: Visibility
 }
 
@@ -321,6 +628,8 @@ interface Channel {
  * const permissionGranted = await isPermissionGranted();
  * ```
  *
+ * @returns A promise resolving to whether the permission to send notifications is granted.
+ *
  * @since 2.0.0
  */
 async function isPermissionGranted(): Promise<boolean> {
@@ -366,6 +675,8 @@ async function requestPermission(): Promise<NotificationPermission> {
  * }
  * ```
  *
+ * @param options The notification content, or the notification title when a string is given.
+ *
  * @since 2.0.0
  */
 function sendNotification(options: Options | string): void {
@@ -391,6 +702,8 @@ function sendNotification(options: Options | string): void {
  * }])
  * ```
  *
+ * @param types The action types to register.
+ *
  * @returns A promise indicating the success or failure of the operation.
  *
  * @since 2.0.0
@@ -425,6 +738,8 @@ async function pending(): Promise<PendingNotification[]> {
  * await cancel([-34234, 23432, 4311]);
  * ```
  *
+ * @param notifications The identifiers of the pending notifications to cancel.
+ *
  * @returns A promise indicating the success or failure of the operation.
  *
  * @since 2.0.0
@@ -472,10 +787,12 @@ async function active(): Promise<ActiveNotification[]> {
  *
  * @example
  * ```typescript
- * import { cancel } from '@tauri-apps/plugin-notification';
- * await cancel([-34234, 23432, 4311])
+ * import { removeActive } from '@tauri-apps/plugin-notification';
+ * await removeActive([{ id: -34234 }, { id: 23432 }, { id: 4311 }])
  * ```
  *
+ * @param notifications The active notifications to remove, identified by their id and, on Android, their optional tag.
+ *
  * @returns A promise indicating the success or failure of the operation.
  *
  * @since 2.0.0
@@ -519,6 +836,8 @@ async function removeAllActive(): Promise<void> {
  * });
  * ```
  *
+ * @param channel The channel to create.
+ *
  * @returns A promise indicating the success or failure of the operation.
  *
  * @since 2.0.0
@@ -533,9 +852,11 @@ async function createChannel(channel: Channel): Promise<void> {
  * @example
  * ```typescript
  * import { removeChannel } from '@tauri-apps/plugin-notification';
- * await removeChannel();
+ * await removeChannel('new-messages');
  * ```
  *
+ * @param id The identifier of the channel to remove.
+ *
  * @returns A promise indicating the success or failure of the operation.
  *
  * @since 2.0.0
@@ -558,15 +879,54 @@ async function removeChannel(id: string): Promise<void> {
  * @since 2.0.0
  */
 async function channels(): Promise<Channel[]> {
-  return await invoke('plugin:notification|listChannels')
+  return await invoke('plugin:notification|list_channels')
 }
 
+/**
+ * Listens to notifications that are delivered while the app is running.
+ *
+ * Only emitted on mobile.
+ *
+ * @example
+ * ```typescript
+ * import { onNotificationReceived } from '@tauri-apps/plugin-notification';
+ * const unlisten = await onNotificationReceived((notification) => {
+ *   console.log(`received notification: ${notification.title}`);
+ * });
+ * ```
+ *
+ * @param cb The closure called with the notification that was delivered.
+ *
+ * @returns A promise resolving to a listener that can be used to stop listening for the event.
+ *
+ * @since 2.0.0
+ */
 async function onNotificationReceived(
   cb: (notification: Options) => void
 ): Promise<PluginListener> {
   return await addPluginListener('notification', 'notification', cb)
 }
 
+/**
+ * Listens to the actions the user performs on a notification.
+ *
+ * Only emitted on mobile, for notifications that reference an action type
+ * registered with {@link registerActionTypes}.
+ *
+ * @example
+ * ```typescript
+ * import { onAction } from '@tauri-apps/plugin-notification';
+ * const unlisten = await onAction((notification) => {
+ *   console.log(`user acted on notification: ${notification.title}`);
+ * });
+ * ```
+ *
+ * @param cb The closure called with the notification the action was performed on.
+ *
+ * @returns A promise resolving to a listener that can be used to stop listening for the event.
+ *
+ * @since 2.0.0
+ */
 async function onAction(
   cb: (notification: Options) => void
 ): Promise<PluginListener> {
diff --git a/plugins/notification/guest-js/init.ts b/plugins/notification/guest-js/init.ts
index 42d65fd99..3d1780adf 100644
--- a/plugins/notification/guest-js/init.ts
+++ b/plugins/notification/guest-js/init.ts
@@ -2,6 +2,17 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+/**
+ * Webview script injected by the notification plugin.
+ *
+ * It replaces `window.Notification` with an implementation backed by the plugin, so the
+ * standard Notification Web API sends OS notifications, and keeps
+ * `window.Notification.permission` and `window.Notification.requestPermission` in sync
+ * with the permission state reported by the plugin.
+ *
+ * @module
+ */
+
 import { invoke } from '@tauri-apps/api/core'
 import type { PermissionState } from '@tauri-apps/api/core'
 import type { Options } from './index'
@@ -10,10 +21,16 @@ import type { Options } from './index'
   let permissionValue = 'default'
 
   async function isPermissionGranted(): Promise<boolean> {
-    // @ts-expect-error __TEMPLATE_windows__ will be replaced in rust before it's injected.
-    if (window.Notification.permission !== 'default' || __TEMPLATE_windows__) {
+    if (window.Notification.permission !== 'default') {
       return await Promise.resolve(window.Notification.permission === 'granted')
     }
+    // Windows always grants the permission, and asking the backend for it from
+    // the init script makes the WebView throw a STATUS_ACCESS_VIOLATION on
+    // remote websites, so answer it here instead of invoking.
+    // @ts-expect-error __TEMPLATE_windows__ will be replaced in rust before it's injected.
+    if (__TEMPLATE_windows__) {
+      return true
+    }
     return await invoke('plugin:notification|is_permission_granted')
   }
 
diff --git a/plugins/notification/ios/Sources/NotificationPlugin.swift b/plugins/notification/ios/Sources/NotificationPlugin.swift
index 6d8391bcc..8adbff9f5 100644
--- a/plugins/notification/ios/Sources/NotificationPlugin.swift
+++ b/plugins/notification/ios/Sources/NotificationPlugin.swift
@@ -120,7 +120,8 @@ func showNotification(invoke: Invoke, notification: Notification)
 }
 
 struct CancelArgs: Decodable {
-  let notifications: [Int]
+  // `cancelAll()` sends no list: cancel every pending notification
+  let notifications: [Int]?
 }
 
 struct Action: Decodable {
@@ -216,9 +217,13 @@ class NotificationPlugin: Plugin {
   @objc func cancel(_ invoke: Invoke) throws {
     let args = try invoke.parseArgs(CancelArgs.self)
 
-    UNUserNotificationCenter.current().removePendingNotificationRequests(
-      withIdentifiers: args.notifications.map { String($0) }
-    )
+    if let notifications = args.notifications {
+      UNUserNotificationCenter.current().removePendingNotificationRequests(
+        withIdentifiers: notifications.map { String($0) }
+      )
+    } else {
+      UNUserNotificationCenter.current().removeAllPendingNotificationRequests()
+    }
     invoke.resolve()
   }
 
diff --git a/plugins/notification/permissions/autogenerated/reference.md b/plugins/notification/permissions/autogenerated/reference.md
index b0652545a..c79a441d8 100644
--- a/plugins/notification/permissions/autogenerated/reference.md
+++ b/plugins/notification/permissions/autogenerated/reference.md
@@ -14,6 +14,7 @@ It allows all notification related features.
 - `allow-notify`
 - `allow-register-action-types`
 - `allow-register-listener`
+- `allow-remove-listener`
 - `allow-cancel`
 - `allow-get-pending`
 - `allow-remove-active`
@@ -402,6 +403,32 @@ Denies the remove_active command without any pre-configured scope.
 <tr>
 <td>
 
+`notification:allow-remove-listener`
+
+</td>
+<td>
+
+Enables the remove_listener command without any pre-configured scope.
+
+</td>
+</tr>
+
+<tr>
+<td>
+
+`notification:deny-remove-listener`
+
+</td>
+<td>
+
+Denies the remove_listener command without any pre-configured scope.
+
+</td>
+</tr>
+
+<tr>
+<td>
+
 `notification:allow-request-permission`
 
 </td>
diff --git a/plugins/notification/permissions/default.toml b/plugins/notification/permissions/default.toml
index 00b4e1d0c..76d9e2757 100644
--- a/plugins/notification/permissions/default.toml
+++ b/plugins/notification/permissions/default.toml
@@ -16,6 +16,7 @@ permissions = [
   "allow-notify",
   "allow-register-action-types",
   "allow-register-listener",
+  "allow-remove-listener",
   "allow-cancel",
   "allow-get-pending",
   "allow-remove-active",
diff --git a/plugins/notification/src/commands.rs b/plugins/notification/src/commands.rs
index 99b96c5b0..c38a842e2 100644
--- a/plugins/notification/src/commands.rs
+++ b/plugins/notification/src/commands.rs
@@ -2,7 +2,7 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
-use tauri::{command, plugin::PermissionState, AppHandle, Runtime, State};
+use tauri::{AppHandle, Runtime, State, command, plugin::PermissionState};
 
 use crate::{Notification, NotificationData, Result};
 
diff --git a/plugins/notification/src/desktop.rs b/plugins/notification/src/desktop.rs
index 4ceb83088..ae115fdbd 100644
--- a/plugins/notification/src/desktop.rs
+++ b/plugins/notification/src/desktop.rs
@@ -4,12 +4,13 @@
 
 use serde::de::DeserializeOwned;
 use tauri::{
-    plugin::{PermissionState, PluginApi},
     AppHandle, Runtime,
+    plugin::{PermissionState, PluginApi},
 };
 
 use crate::NotificationBuilder;
 
+/// Initializes the desktop implementation of the notification APIs.
 pub fn init<R: Runtime, C: DeserializeOwned>(
     app: &AppHandle<R>,
     _api: PluginApi<R, C>,
@@ -23,6 +24,18 @@ pub fn init<R: Runtime, C: DeserializeOwned>(
 pub struct Notification<R: Runtime>(AppHandle<R>);
 
 impl<R: Runtime> crate::NotificationBuilder<R> {
+    /// Shows the notification.
+    ///
+    /// When no title was set with [`Self::title`], the `productName` from the Tauri configuration is used instead.
+    /// Only the title, body, icon and sound of the notification are used on desktop;
+    /// the scheduling, grouping and action related options are ignored.
+    ///
+    /// The notification is dispatched on a background task, so this returns as soon as the payload is prepared.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error when the notification could not be prepared,
+    /// e.g. when the path of the running executable cannot be resolved on Windows.
     pub fn show(self) -> crate::Result<()> {
         let mut notification = imp::Notification::new(self.app.config().identifier.clone());
 
@@ -42,11 +55,6 @@ impl<R: Runtime> crate::NotificationBuilder<R> {
         if let Some(sound) = self.data.sound {
             notification = notification.sound(sound);
         }
-        #[cfg(feature = "windows7-compat")]
-        {
-            notification.notify(&self.app)?;
-        }
-        #[cfg(not(feature = "windows7-compat"))]
         notification.show()?;
 
         Ok(())
@@ -54,14 +62,38 @@ impl<R: Runtime> crate::NotificationBuilder<R> {
 }
 
 impl<R: Runtime> Notification<R> {
+    /// Creates a new builder for a notification.
+    ///
+    /// # Examples
+    ///
+    /// ```no_run
+    /// use tauri_plugin_notification::NotificationExt;
+    ///
+    /// fn notify<R: tauri::Runtime>(app: &tauri::AppHandle<R>) {
+    ///   app.notification()
+    ///     .builder()
+    ///     .title("Tauri")
+    ///     .body("Tauri is awesome!")
+    ///     .show()
+    ///     .unwrap();
+    /// }
+    /// ```
     pub fn builder(&self) -> NotificationBuilder<R> {
         NotificationBuilder::new(self.0.clone())
     }
 
+    /// Requests the permission to send notifications.
+    ///
+    /// Desktop applications do not need to ask for this permission,
+    /// so this always resolves to [`PermissionState::Granted`] without prompting the user.
     pub fn request_permission(&self) -> crate::Result<PermissionState> {
         Ok(PermissionState::Granted)
     }
 
+    /// Checks whether the permission to send notifications was granted.
+    ///
+    /// Desktop applications do not need to ask for this permission,
+    /// so this always resolves to [`PermissionState::Granted`].
     pub fn permission_state(&self) -> crate::Result<PermissionState> {
         Ok(PermissionState::Granted)
     }
@@ -168,14 +200,6 @@ mod imp {
         ///   .run(tauri::generate_context!("test/tauri.conf.json"))
         ///   .expect("error while running tauri application");
         /// ```
-        ///
-        /// ## Platform-specific
-        ///
-        /// - **Windows**: Not supported on Windows 7. If your app targets it, enable the `windows7-compat` feature and use [`Self::notify`].
-        #[cfg_attr(
-            all(not(docsrs), feature = "windows7-compat"),
-            deprecated = "This function does not work on Windows 7. Use `Self::notify` instead."
-        )]
         pub fn show(self) -> crate::Result<()> {
             let mut notification = notify_rust::Notification::new();
             if let Some(body) = self.body {
@@ -220,70 +244,13 @@ mod imp {
             Ok(())
         }
 
-        /// Shows the notification. This API is similar to [`Self::show`], but it also works on Windows 7.
-        ///
-        /// # Examples
-        ///
-        /// ```no_run
-        /// use tauri_plugin_notification::NotificationExt;
-        ///
-        /// tauri::Builder::default()
-        ///   .setup(move |app| {
-        ///     app.notification().builder()
-        ///       .title("Tauri")
-        ///       .body("Tauri is awesome!")
-        ///       .show()
-        ///       .unwrap();
-        ///     Ok(())
-        ///   })
-        ///   .run(tauri::generate_context!("test/tauri.conf.json"))
-        ///   .expect("error while running tauri application");
-        /// ```
+        /// Shows the notification. Same as [`Self::show`].
         #[cfg(feature = "windows7-compat")]
+        #[allow(dead_code)]
         #[cfg_attr(docsrs, doc(cfg(feature = "windows7-compat")))]
-        #[allow(unused_variables)]
-        pub fn notify<R: tauri::Runtime>(self, app: &tauri::AppHandle<R>) -> crate::Result<()> {
-            #[cfg(windows)]
-            {
-                fn is_windows_7() -> bool {
-                    let v = windows_version::OsVersion::current();
-                    // windows 7 is 6.1
-                    v.major == 6 && v.minor == 1
-                }
-
-                if is_windows_7() {
-                    self.notify_win7(app)
-                } else {
-                    #[allow(deprecated)]
-                    self.show()
-                }
-            }
-            #[cfg(not(windows))]
-            {
-                #[allow(deprecated)]
-                self.show()
-            }
-        }
-
-        /// Shows the notification on Windows 7.
-        #[cfg(all(windows, feature = "windows7-compat"))]
-        fn notify_win7<R: tauri::Runtime>(self, app: &tauri::AppHandle<R>) -> crate::Result<()> {
-            let app_ = app.clone();
-            let _ = app.clone().run_on_main_thread(move || {
-                let mut notification = win7_notifications::Notification::new();
-                if let Some(body) = self.body {
-                    notification.body(&body);
-                }
-                if let Some(title) = self.title {
-                    notification.summary(&title);
-                }
-                if let Some(icon) = app_.default_window_icon() {
-                    notification.icon(icon.rgba().to_vec(), icon.width(), icon.height());
-                }
-                let _ = notification.show();
-            });
-
-            Ok(())
+        #[deprecated = "Tauri no longer supports Windows 7, use `Self::show` instead."]
+        pub fn notify<R: tauri::Runtime>(self, _app: &tauri::AppHandle<R>) -> crate::Result<()> {
+            self.show()
         }
     }
 }
diff --git a/plugins/notification/src/error.rs b/plugins/notification/src/error.rs
index 339e763b1..ff5305bef 100644
--- a/plugins/notification/src/error.rs
+++ b/plugins/notification/src/error.rs
@@ -2,14 +2,22 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
-use serde::{ser::Serializer, Serialize};
+use serde::{Serialize, ser::Serializer};
 
+/// Alias for a [`std::result::Result`] with the error type set to [`Error`].
 pub type Result<T> = std::result::Result<T, Error>;
 
+/// Errors returned by the notification plugin.
+///
+/// The error is serialized to its [`Display`](std::fmt::Display) string when it crosses the IPC boundary.
 #[derive(Debug, thiserror::Error)]
 pub enum Error {
+    /// An I/O operation failed, e.g. resolving the path of the running executable on Windows.
     #[error(transparent)]
     Io(#[from] std::io::Error),
+    /// Failed to run a command on the mobile plugin implementation (Kotlin on Android, Swift on iOS).
+    ///
+    /// Only available on mobile.
     #[cfg(mobile)]
     #[error(transparent)]
     PluginInvoke(#[from] tauri::plugin::mobile::PluginInvokeError),
diff --git a/plugins/notification/src/init-iife.js b/plugins/notification/src/init-iife.js
index c6d2081e4..141e4a49f 100644
--- a/plugins/notification/src/init-iife.js
+++ b/plugins/notification/src/init-iife.js
@@ -1 +1 @@
-!function(){"use strict";async function i(i,n={},t){return window.__TAURI_INTERNALS__.invoke(i,n,t)}"function"==typeof SuppressedError&&SuppressedError,function(){let n=!1,t="default";function o(i){n=!0,window.Notification.permission=i,n=!1}window.Notification=function(n,t){const o=t||{};!async function(n){"object"==typeof n&&Object.freeze(n),await i("plugin:notification|notify",{options:"string"==typeof n?{title:n}:n})}(Object.assign(o,{title:n}))},window.Notification.requestPermission=async function(){return await i("plugin:notification|request_permission").then(i=>(o("prompt"===i||"prompt-with-rationale"===i?"default":i),i))},Object.defineProperty(window.Notification,"permission",{enumerable:!0,get:()=>t,set:i=>{if(!n)throw new Error("Readonly property");t=i}}),async function(){return"default"!==window.Notification.permission||__TEMPLATE_windows__?await Promise.resolve("granted"===window.Notification.permission):await i("plugin:notification|is_permission_granted")}().then(function(i){o(null===i?"default":i?"granted":"denied")})}()}();
+!function(){"use strict";async function i(i,n={},t){return window.__TAURI_INTERNALS__.invoke(i,n,t)}"function"==typeof SuppressedError&&SuppressedError,function(){let n=!1,t="default";function o(i){n=!0,window.Notification.permission=i,n=!1}window.Notification=function(n,t){const o=t||{};!async function(n){"object"==typeof n&&Object.freeze(n),await i("plugin:notification|notify",{options:"string"==typeof n?{title:n}:n})}(Object.assign(o,{title:n}))},window.Notification.requestPermission=async function(){return await i("plugin:notification|request_permission").then(i=>(o("prompt"===i||"prompt-with-rationale"===i?"default":i),i))},Object.defineProperty(window.Notification,"permission",{enumerable:!0,get:()=>t,set:i=>{if(!n)throw new Error("Readonly property");t=i}}),async function(){return"default"!==window.Notification.permission?await Promise.resolve("granted"===window.Notification.permission):!!__TEMPLATE_windows__||await i("plugin:notification|is_permission_granted")}().then(function(i){o(null===i?"default":i?"granted":"denied")})}()}();
diff --git a/plugins/notification/src/lib.rs b/plugins/notification/src/lib.rs
index 334204772..8eaf07e62 100644
--- a/plugins/notification/src/lib.rs
+++ b/plugins/notification/src/lib.rs
@@ -6,7 +6,7 @@
 //!
 //! ## Cargo features
 //!
-//! - **windows7-compat**: Adds support for the legacy Windows 7 notification implementation and Windows-version detection.
+//! - **windows7-compat**: Deprecated and does nothing, since Tauri no longer supports Windows 7.
 
 #![doc(
     html_logo_url = "https://github.com/tauri-apps/tauri/raw/dev/app-icon.png",
@@ -14,13 +14,13 @@
 )]
 
 use serde::Serialize;
-#[cfg(mobile)]
-use tauri::plugin::PluginHandle;
 #[cfg(desktop)]
 use tauri::AppHandle;
+#[cfg(mobile)]
+use tauri::plugin::PluginHandle;
 use tauri::{
-    plugin::{Builder, TauriPlugin},
     Manager, Runtime,
+    plugin::{Builder, TauriPlugin},
 };
 
 pub use models::*;
@@ -75,10 +75,13 @@ impl<R: Runtime> NotificationBuilder<R> {
         self
     }
 
-    /// Identifier of the {@link Channel} that deliveres this notification.
+    /// Sets the identifier of the notification channel that delivers this notification.
     ///
     /// If the channel does not exist, the notification won't fire.
-    /// Make sure the channel exists with {@link listChannels} and {@link createChannel}.
+    /// Make sure the channel exists with `Notification::list_channels` and
+    /// `Notification::create_channel`.
+    ///
+    /// Only used on Android.
     pub fn channel_id(mut self, id: impl Into<String>) -> Self {
         self.data.channel_id.replace(id.into());
         self
@@ -213,6 +216,22 @@ impl<R: Runtime> NotificationBuilder<R> {
 
 /// Extensions to [`tauri::App`], [`tauri::AppHandle`], [`tauri::WebviewWindow`], [`tauri::Webview`] and [`tauri::Window`] to access the notification APIs.
 pub trait NotificationExt<R: Runtime> {
+    /// Returns the notification APIs managed by the plugin.
+    ///
+    /// # Examples
+    ///
+    /// ```no_run
+    /// use tauri_plugin_notification::NotificationExt;
+    ///
+    /// fn notify<R: tauri::Runtime>(app: &tauri::AppHandle<R>) {
+    ///   app.notification()
+    ///     .builder()
+    ///     .title("Tauri")
+    ///     .body("Tauri is awesome!")
+    ///     .show()
+    ///     .unwrap();
+    /// }
+    /// ```
     fn notification(&self) -> &Notification<R>;
 }
 
diff --git a/plugins/notification/src/mobile.rs b/plugins/notification/src/mobile.rs
index edfef728a..722518503 100644
--- a/plugins/notification/src/mobile.rs
+++ b/plugins/notification/src/mobile.rs
@@ -2,10 +2,10 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
-use serde::{de::DeserializeOwned, Deserialize};
+use serde::{Deserialize, de::DeserializeOwned};
 use tauri::{
-    plugin::{PermissionState, PluginApi, PluginHandle},
     AppHandle, Runtime,
+    plugin::{PermissionState, PluginApi, PluginHandle},
 };
 
 use crate::models::*;
@@ -18,7 +18,8 @@ const PLUGIN_IDENTIFIER: &str = "app.tauri.notification";
 #[cfg(target_os = "ios")]
 tauri::ios_plugin_binding!(init_plugin_notification);
 
-// initializes the Kotlin or Swift plugin classes
+/// Initializes the mobile implementation of the notification APIs by registering
+/// the Kotlin (Android) or Swift (iOS) plugin class.
 pub fn init<R: Runtime, C: DeserializeOwned>(
     _app: &AppHandle<R>,
     api: PluginApi<R, C>,
@@ -31,6 +32,12 @@ pub fn init<R: Runtime, C: DeserializeOwned>(
 }
 
 impl<R: Runtime> crate::NotificationBuilder<R> {
+    /// Shows the notification, or schedules it when [`Self::schedule`] was called.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`Error::PluginInvoke`](crate::Error::PluginInvoke) when the mobile plugin
+    /// rejects the notification, e.g. when the scheduled date is in the past.
     pub fn show(self) -> crate::Result<()> {
         self.handle
             .run_mobile_plugin::<i32>("show", self.data)
@@ -45,10 +52,29 @@ impl<R: Runtime> crate::NotificationBuilder<R> {
 pub struct Notification<R: Runtime>(PluginHandle<R>);
 
 impl<R: Runtime> Notification<R> {
+    /// Creates a new builder for a notification.
+    ///
+    /// # Examples
+    ///
+    /// ```no_run
+    /// use tauri_plugin_notification::NotificationExt;
+    ///
+    /// fn notify<R: tauri::Runtime>(app: &tauri::AppHandle<R>) {
+    ///   app.notification()
+    ///     .builder()
+    ///     .title("Tauri")
+    ///     .body("Tauri is awesome!")
+    ///     .show()
+    ///     .unwrap();
+    /// }
+    /// ```
     pub fn builder(&self) -> crate::NotificationBuilder<R> {
         crate::NotificationBuilder::new(self.0.clone())
     }
 
+    /// Requests the permission to send notifications, prompting the user when it was not decided yet.
+    ///
+    /// On Android this requests the `POST_NOTIFICATIONS` runtime permission.
     pub fn request_permission(&self) -> crate::Result<PermissionState> {
         self.0
             .run_mobile_plugin::<PermissionResponse>("requestPermissions", ())
@@ -56,6 +82,7 @@ impl<R: Runtime> Notification<R> {
             .map_err(Into::into)
     }
 
+    /// Checks the current state of the permission to send notifications without prompting the user.
     pub fn permission_state(&self) -> crate::Result<PermissionState> {
         self.0
             .run_mobile_plugin::<PermissionResponse>("checkPermissions", ())
@@ -63,6 +90,13 @@ impl<R: Runtime> Notification<R> {
             .map_err(Into::into)
     }
 
+    /// Registers the action types a notification can reference
+    /// through [`NotificationBuilder::action_type_id`](crate::NotificationBuilder::action_type_id).
+    ///
+    /// ## Platform-specific
+    ///
+    /// - **Android**: only the identifier, title and input flag of each [`Action`] are used.
+    /// - **iOS**: each action type is registered as a `UNNotificationCategory`.
     pub fn register_action_types(&self, types: Vec<ActionType>) -> crate::Result<()> {
         let mut args = HashMap::new();
         args.insert("types", types);
@@ -71,6 +105,9 @@ impl<R: Runtime> Notification<R> {
             .map_err(Into::into)
     }
 
+    /// Removes the delivered notifications with the given identifiers from the notification center.
+    ///
+    /// Use [`Self::remove_all_active`] to remove every delivered notification.
     pub fn remove_active(&self, notifications: Vec<i32>) -> crate::Result<()> {
         let mut args = HashMap::new();
         args.insert(
@@ -89,18 +126,21 @@ impl<R: Runtime> Notification<R> {
             .map_err(Into::into)
     }
 
+    /// Lists the notifications that were delivered and are still visible in the notification center.
     pub fn active(&self) -> crate::Result<Vec<ActiveNotification>> {
         self.0
             .run_mobile_plugin("getActive", ())
             .map_err(Into::into)
     }
 
+    /// Removes all delivered notifications from the notification center.
     pub fn remove_all_active(&self) -> crate::Result<()> {
         self.0
             .run_mobile_plugin("removeActive", ())
             .map_err(Into::into)
     }
 
+    /// Lists the scheduled notifications that have not been delivered yet.
     pub fn pending(&self) -> crate::Result<Vec<PendingNotification>> {
         self.0
             .run_mobile_plugin("getPending", ())
@@ -119,6 +159,12 @@ impl<R: Runtime> Notification<R> {
         self.0.run_mobile_plugin("cancel", ()).map_err(Into::into)
     }
 
+    /// Creates a notification channel, which notifications can target
+    /// through [`NotificationBuilder::channel_id`](crate::NotificationBuilder::channel_id).
+    ///
+    /// Notifications that reference a channel that does not exist are not delivered.
+    ///
+    /// Only available on Android.
     #[cfg(target_os = "android")]
     pub fn create_channel(&self, channel: Channel) -> crate::Result<()> {
         self.0
@@ -126,6 +172,9 @@ impl<R: Runtime> Notification<R> {
             .map_err(Into::into)
     }
 
+    /// Deletes the notification channel with the given identifier.
+    ///
+    /// Only available on Android.
     #[cfg(target_os = "android")]
     pub fn delete_channel(&self, id: impl Into<String>) -> crate::Result<()> {
         let mut args = HashMap::new();
@@ -135,6 +184,9 @@ impl<R: Runtime> Notification<R> {
             .map_err(Into::into)
     }
 
+    /// Lists the notification channels that are currently registered for the app.
+    ///
+    /// Only available on Android.
     #[cfg(target_os = "android")]
     pub fn list_channels(&self) -> crate::Result<Vec<Channel>> {
         self.0
diff --git a/plugins/notification/src/models.rs b/plugins/notification/src/models.rs
index e93b1e078..bb638f117 100644
--- a/plugins/notification/src/models.rs
+++ b/plugins/notification/src/models.rs
@@ -4,10 +4,13 @@
 
 use std::{collections::HashMap, fmt::Display};
 
-use serde::{de::Error as DeError, Deserialize, Deserializer, Serialize, Serializer};
+use serde::{Deserialize, Deserializer, Serialize, Serializer, de::Error as DeError};
 
 use url::Url;
 
+/// A media file attached to a notification.
+///
+/// Attachments are only used on mobile; desktop notifications ignore them.
 #[derive(Debug, Serialize, Deserialize)]
 #[serde(rename_all = "camelCase")]
 pub struct Attachment {
@@ -16,32 +19,65 @@ pub struct Attachment {
 }
 
 impl Attachment {
+    /// Creates a new attachment with the given identifier and URL.
+    ///
+    /// The URL accepts the `asset` and `file` protocols.
     pub fn new(id: impl Into<String>, url: Url) -> Self {
         Self { id: id.into(), url }
     }
 }
 
+/// The set of date fields a notification must match to be delivered.
+///
+/// Fields left as [`None`] match any value, so the notification fires on every date
+/// whose remaining components match. Used by [`Schedule::Interval`].
 #[derive(Debug, Default, Serialize, Deserialize)]
 #[serde(rename_all = "camelCase")]
 pub struct ScheduleInterval {
+    /// The year the notification fires on.
     pub year: Option<u8>,
+    /// The month of the year the notification fires on.
     pub month: Option<u8>,
+    /// The day of the month the notification fires on.
     pub day: Option<u8>,
+    /// The day of the week the notification fires on.
+    ///
+    /// 1 - Sunday, 2 - Monday, 3 - Tuesday, 4 - Wednesday, 5 - Thursday, 6 - Friday, 7 - Saturday.
     pub weekday: Option<u8>,
+    /// The hour of the day the notification fires on, in the 24-hour clock.
     pub hour: Option<u8>,
+    /// The minute of the hour the notification fires on.
     pub minute: Option<u8>,
+    /// The second of the minute the notification fires on.
     pub second: Option<u8>,
 }
 
+/// The unit of the repeating interval used by [`Schedule::Every`].
+///
+/// It is serialized as its lowercase camelCase name, e.g. `twoWeeks`.
 #[derive(Debug)]
 pub enum ScheduleEvery {
+    /// Repeats every year.
+    ///
+    /// On Android a year is approximated as 52 weeks.
     Year,
+    /// Repeats every month.
+    ///
+    /// On Android a month is approximated as 30 days.
     Month,
+    /// Repeats every two weeks.
     TwoWeeks,
+    /// Repeats every week.
     Week,
+    /// Repeats every day.
     Day,
+    /// Repeats every hour.
     Hour,
+    /// Repeats every minute.
     Minute,
+    /// Repeats every second.
+    ///
+    /// Not supported on iOS, where repeating triggers must be at least a minute apart.
     Second,
 }
 
@@ -93,31 +129,58 @@ impl<'de> Deserialize<'de> for ScheduleEvery {
     }
 }
 
+/// Defines when a notification is delivered.
+///
+/// Scheduling is only implemented on mobile; the desktop implementation delivers the
+/// notification immediately and ignores the schedule.
 #[derive(Debug, Serialize, Deserialize)]
 #[serde(rename_all = "camelCase")]
 pub enum Schedule {
+    /// Fires at a specific date and time, which must be in the future.
     #[serde(rename_all = "camelCase")]
     At {
+        /// The date and time the notification fires at, serialized as an ISO-8601 string.
         #[serde(
             serialize_with = "iso8601::serialize",
             deserialize_with = "time::serde::iso8601::deserialize"
         )]
         date: time::OffsetDateTime,
+        /// Whether the notification keeps repeating, using the duration between the moment it is
+        /// scheduled and `date` as the interval. Defaults to `false`.
+        ///
+        /// The interval must be at least one minute on iOS.
         #[serde(default)]
         repeating: bool,
+        /// Whether the notification is allowed to fire while the device is in low-power idle
+        /// (Doze) mode. Defaults to `false`.
+        ///
+        /// Only used on Android.
         #[serde(default)]
         allow_while_idle: bool,
     },
+    /// Fires whenever the current date matches every field set on the given interval.
     #[serde(rename_all = "camelCase")]
     Interval {
+        /// The date fields the current date must match for the notification to fire.
         interval: ScheduleInterval,
+        /// Whether the notification is allowed to fire while the device is in low-power idle
+        /// (Doze) mode. Defaults to `false`.
+        ///
+        /// Only used on Android.
         #[serde(default)]
         allow_while_idle: bool,
     },
+    /// Fires repeatedly, once every `count` times the given interval unit.
     #[serde(rename_all = "camelCase")]
     Every {
+        /// The unit of the repeating interval.
         interval: ScheduleEvery,
+        /// How many interval units elapse between each notification.
         count: u8,
+        /// Whether the notification is allowed to fire while the device is in low-power idle
+        /// (Doze) mode. Defaults to `false`.
+        ///
+        /// Only used on Android.
         #[serde(default)]
         allow_while_idle: bool,
     },
@@ -125,11 +188,11 @@ pub enum Schedule {
 
 // custom ISO-8601 serialization that does not use 6 digits for years.
 mod iso8601 {
-    use serde::{ser::Error as _, Serialize, Serializer};
+    use serde::{Serialize, Serializer, ser::Error as _};
     use time::{
-        format_description::well_known::iso8601::{Config, EncodedConfig},
-        format_description::well_known::Iso8601,
         OffsetDateTime,
+        format_description::well_known::Iso8601,
+        format_description::well_known::iso8601::{Config, EncodedConfig},
     };
 
     const SERDE_CONFIG: EncodedConfig = Config::DEFAULT.encode();
@@ -145,6 +208,10 @@ mod iso8601 {
     }
 }
 
+/// The payload of a notification, as sent to the platform implementation.
+///
+/// Build it with [`NotificationBuilder`](crate::NotificationBuilder) rather than constructing it directly.
+/// The identifier defaults to a random 32-bit integer when it is not provided.
 #[derive(Debug, Serialize, Deserialize)]
 #[serde(rename_all = "camelCase")]
 pub struct NotificationData {
@@ -209,6 +276,9 @@ impl Default for NotificationData {
     }
 }
 
+/// A notification that was scheduled and has not been delivered yet.
+///
+/// Returned by `Notification::pending`, which is only available on mobile.
 #[derive(Debug, Deserialize)]
 #[serde(rename_all = "camelCase")]
 pub struct PendingNotification {
@@ -219,23 +289,32 @@ pub struct PendingNotification {
 }
 
 impl PendingNotification {
+    /// The notification identifier.
     pub fn id(&self) -> i32 {
         self.id
     }
 
+    /// The notification title, if it was set.
     pub fn title(&self) -> Option<&str> {
         self.title.as_deref()
     }
 
+    /// The notification body, if it was set.
     pub fn body(&self) -> Option<&str> {
         self.body.as_deref()
     }
 
+    /// The schedule that determines when the notification is delivered.
     pub fn schedule(&self) -> &Schedule {
         &self.schedule
     }
 }
 
+/// A notification that was delivered and is still visible in the notification center.
+///
+/// Returned by `Notification::active`, which is only available on mobile.
+/// Which fields are populated depends on the platform, since Android and iOS expose
+/// different information about delivered notifications.
 #[derive(Debug, Deserialize)]
 #[serde(rename_all = "camelCase")]
 pub struct ActiveNotification {
@@ -258,55 +337,88 @@ pub struct ActiveNotification {
 }
 
 impl ActiveNotification {
+    /// The notification identifier.
     pub fn id(&self) -> i32 {
         self.id
     }
 
+    /// The tag the notification was posted with.
+    ///
+    /// Only set on Android.
     pub fn tag(&self) -> Option<&str> {
         self.tag.as_deref()
     }
 
+    /// The notification title, if it was set.
     pub fn title(&self) -> Option<&str> {
         self.title.as_deref()
     }
 
+    /// The notification body, if it was set.
     pub fn body(&self) -> Option<&str> {
         self.body.as_deref()
     }
 
+    /// The identifier of the group the notification belongs to.
+    ///
+    /// Only set on Android.
     pub fn group(&self) -> Option<&str> {
         self.group.as_deref()
     }
 
+    /// Whether the notification is the summary of its group.
+    ///
+    /// Only set on Android. Defaults to `false`.
     pub fn group_summary(&self) -> bool {
         self.group_summary
     }
 
+    /// The platform extras attached to the notification, as string values.
+    ///
+    /// Only set on Android, where it holds the `android.app.Notification` extras bundle.
     pub fn data(&self) -> &HashMap<String, String> {
         &self.data
     }
 
+    /// The extra payload that was stored in the notification.
     pub fn extra(&self) -> &HashMap<String, serde_json::Value> {
         &self.extra
     }
 
+    /// The attachments of the notification.
+    ///
+    /// Only set on iOS.
     pub fn attachments(&self) -> &[Attachment] {
         &self.attachments
     }
 
+    /// The identifier of the action type the notification was registered with.
+    ///
+    /// Only set on iOS.
     pub fn action_type_id(&self) -> Option<&str> {
         self.action_type_id.as_deref()
     }
 
+    /// The schedule the notification was delivered with, if it was scheduled.
     pub fn schedule(&self) -> Option<&Schedule> {
         self.schedule.as_ref()
     }
 
+    /// The sound resource name of the notification.
+    ///
+    /// Only set on iOS.
     pub fn sound(&self) -> Option<&str> {
         self.sound.as_deref()
     }
 }
 
+/// A group of [`Action`]s a notification can display, referenced by
+/// [`NotificationBuilder::action_type_id`](crate::NotificationBuilder::action_type_id).
+///
+/// Register it with `Notification::register_action_types` before sending a notification that uses it.
+/// It maps to a `UNNotificationCategory` on iOS and to an action group on Android.
+///
+/// Only available on mobile. Use [`ActionType::builder`] to construct one.
 #[cfg(mobile)]
 #[derive(Debug, Serialize)]
 #[serde(rename_all = "camelCase")]
@@ -320,12 +432,19 @@ pub struct ActionType {
     hidden_previews_show_subtitle: bool,
 }
 
+/// Builder for an [`ActionType`], created with [`ActionType::builder`].
+///
+/// Only available on mobile.
 #[cfg(mobile)]
 #[derive(Debug)]
 pub struct ActionTypeBuilder(ActionType);
 
 #[cfg(mobile)]
 impl ActionType {
+    /// Creates a builder for an action type with the given identifier.
+    ///
+    /// All the optional settings default to `false` or [`None`];
+    /// call [`ActionTypeBuilder::build`] to get the [`ActionType`].
     pub fn builder(id: impl Into<String>) -> ActionTypeBuilder {
         ActionTypeBuilder(Self {
             id: id.into(),
@@ -338,30 +457,47 @@ impl ActionType {
         })
     }
 
+    /// The identifier of this action type.
     pub fn id(&self) -> &str {
         &self.id
     }
 
+    /// The actions associated with this action type.
     pub fn actions(&self) -> &[Action] {
         &self.actions
     }
 
+    /// The placeholder shown instead of the notification body when previews are hidden.
+    ///
+    /// Only used on iOS.
     pub fn hidden_previews_body_placeholder(&self) -> Option<&str> {
         self.hidden_previews_body_placeholder.as_deref()
     }
 
+    /// Whether the app is notified when the user dismisses the notification.
+    ///
+    /// Only used on iOS.
     pub fn custom_dismiss_action(&self) -> bool {
         self.custom_dismiss_action
     }
 
+    /// Whether the notification can be displayed in a CarPlay environment.
+    ///
+    /// Only used on iOS.
     pub fn allow_in_car_play(&self) -> bool {
         self.allow_in_car_play
     }
 
+    /// Whether the notification title is shown even when previews are hidden.
+    ///
+    /// Only used on iOS.
     pub fn hidden_previews_show_title(&self) -> bool {
         self.hidden_previews_show_title
     }
 
+    /// Whether the notification subtitle is shown even when previews are hidden.
+    ///
+    /// Only used on iOS.
     pub fn hidden_previews_show_subtitle(&self) -> bool {
         self.hidden_previews_show_subtitle
     }
@@ -369,11 +505,15 @@ impl ActionType {
 
 #[cfg(mobile)]
 impl ActionTypeBuilder {
+    /// Sets the actions associated with this action type.
     pub fn actions(mut self, actions: Vec<Action>) -> Self {
         self.0.actions = actions;
         self
     }
 
+    /// Sets the placeholder shown instead of the notification body when previews are hidden.
+    ///
+    /// Only used on iOS.
     pub fn hidden_previews_body_placeholder(
         mut self,
         hidden_previews_body_placeholder: impl Into<String>,
@@ -384,31 +524,50 @@ impl ActionTypeBuilder {
         self
     }
 
+    /// Sets whether the app is notified when the user dismisses the notification.
+    ///
+    /// Only used on iOS.
     pub fn custom_dismiss_action(mut self, custom_dismiss_action: bool) -> Self {
         self.0.custom_dismiss_action = custom_dismiss_action;
         self
     }
 
+    /// Sets whether the notification can be displayed in a CarPlay environment.
+    ///
+    /// Only used on iOS.
     pub fn allow_in_car_play(mut self, allow_in_car_play: bool) -> Self {
         self.0.allow_in_car_play = allow_in_car_play;
         self
     }
 
+    /// Sets whether the notification title is shown even when previews are hidden.
+    ///
+    /// Only used on iOS.
     pub fn hidden_previews_show_title(mut self, hidden_previews_show_title: bool) -> Self {
         self.0.hidden_previews_show_title = hidden_previews_show_title;
         self
     }
 
+    /// Sets whether the notification subtitle is shown even when previews are hidden.
+    ///
+    /// Only used on iOS.
     pub fn hidden_previews_show_subtitle(mut self, hidden_previews_show_subtitle: bool) -> Self {
         self.0.hidden_previews_show_subtitle = hidden_previews_show_subtitle;
         self
     }
 
+    /// Builds the [`ActionType`].
     pub fn build(self) -> ActionType {
         self.0
     }
 }
 
+/// A button the user can tap on a notification, belonging to an [`ActionType`].
+///
+/// It maps to a `UNNotificationAction` on iOS. On Android only the identifier, the title
+/// and the input flag are used.
+///
+/// Only available on mobile. Use [`Action::builder`] to construct one.
 #[cfg(mobile)]
 #[derive(Debug, Serialize)]
 #[serde(rename_all = "camelCase")]
@@ -423,12 +582,19 @@ pub struct Action {
     input_placeholder: Option<String>,
 }
 
+/// Builder for an [`Action`], created with [`Action::builder`].
+///
+/// Only available on mobile.
 #[cfg(mobile)]
 #[derive(Debug)]
 pub struct ActionBuilder(Action);
 
 #[cfg(mobile)]
 impl Action {
+    /// Creates a builder for an action with the given identifier and button title.
+    ///
+    /// All the optional settings default to `false` or [`None`];
+    /// call [`ActionBuilder::build`] to get the [`Action`].
     pub fn builder(id: impl Into<String>, title: impl Into<String>) -> ActionBuilder {
         ActionBuilder(Self {
             id: id.into(),
@@ -442,34 +608,52 @@ impl Action {
         })
     }
 
+    /// The identifier of this action, reported back when the user triggers it.
     pub fn id(&self) -> &str {
         &self.id
     }
 
+    /// The text displayed on the action button.
     pub fn title(&self) -> &str {
         &self.title
     }
 
+    /// Whether the device must be unlocked for the action to run.
+    ///
+    /// Only used on iOS.
     pub fn requires_authentication(&self) -> bool {
         self.requires_authentication
     }
 
+    /// Whether the app is brought to the foreground when the action is triggered.
+    ///
+    /// Only used on iOS.
     pub fn foreground(&self) -> bool {
         self.foreground
     }
 
+    /// Whether the action is displayed as destructive, usually in red.
+    ///
+    /// Only used on iOS.
     pub fn destructive(&self) -> bool {
         self.destructive
     }
 
+    /// Whether triggering the action lets the user type a text response.
     pub fn input(&self) -> bool {
         self.input
     }
 
+    /// The text displayed on the button that submits the text input.
+    ///
+    /// Only used on iOS.
     pub fn input_button_title(&self) -> Option<&str> {
         self.input_button_title.as_deref()
     }
 
+    /// The placeholder displayed on the empty text input field.
+    ///
+    /// Only used on iOS.
     pub fn input_placeholder(&self) -> Option<&str> {
         self.input_placeholder.as_deref()
     }
@@ -477,36 +661,53 @@ impl Action {
 
 #[cfg(mobile)]
 impl ActionBuilder {
+    /// Sets whether the device must be unlocked for the action to run.
+    ///
+    /// Only used on iOS.
     pub fn requires_authentication(mut self, requires_authentication: bool) -> Self {
         self.0.requires_authentication = requires_authentication;
         self
     }
 
+    /// Sets whether the app is brought to the foreground when the action is triggered.
+    ///
+    /// Only used on iOS.
     pub fn foreground(mut self, foreground: bool) -> Self {
         self.0.foreground = foreground;
         self
     }
 
+    /// Sets whether the action is displayed as destructive, usually in red.
+    ///
+    /// Only used on iOS.
     pub fn destructive(mut self, destructive: bool) -> Self {
         self.0.destructive = destructive;
         self
     }
 
+    /// Sets whether triggering the action lets the user type a text response.
     pub fn input(mut self, input: bool) -> Self {
         self.0.input = input;
         self
     }
 
+    /// Sets the text displayed on the button that submits the text input.
+    ///
+    /// Only used on iOS.
     pub fn input_button_title(mut self, input_button_title: impl Into<String>) -> Self {
         self.0.input_button_title.replace(input_button_title.into());
         self
     }
 
+    /// Sets the placeholder displayed on the empty text input field.
+    ///
+    /// Only used on iOS.
     pub fn input_placeholder(mut self, input_placeholder: impl Into<String>) -> Self {
         self.0.input_placeholder.replace(input_placeholder.into());
         self
     }
 
+    /// Builds the [`Action`].
     pub fn build(self) -> Action {
         self.0
     }
@@ -520,30 +721,51 @@ mod android {
     use serde::{Deserialize, Serialize};
     use serde_repr::{Deserialize_repr, Serialize_repr};
 
-    #[derive(Debug, Clone, Copy, Serialize_repr, Deserialize_repr)]
+    /// How much the notifications of a [`Channel`] interrupt the user.
+    ///
+    /// It maps to the `NotificationManager.IMPORTANCE_*` constants and is serialized as its
+    /// integer value. Only available on Android.
+    #[derive(Debug, Default, Clone, Copy, Serialize_repr, Deserialize_repr)]
     #[repr(u8)]
     pub enum Importance {
+        /// The notifications are not shown.
         None = 0,
+        /// The notifications are only shown in the shade, below the fold, without a status bar icon.
         Min = 1,
+        /// The notifications are shown without a sound.
         Low = 2,
+        /// The notifications are shown and make a sound.
+        ///
+        /// This is the value used when the channel does not define an importance.
+        #[default]
         Default = 3,
+        /// The notifications are shown, make a sound and pop up as a heads-up notification.
         High = 4,
     }
 
-    impl Default for Importance {
-        fn default() -> Self {
-            Self::Default
-        }
-    }
-
+    /// How much of a notification is shown on the lock screen.
+    ///
+    /// It maps to the `Notification.VISIBILITY_*` constants and is serialized as its
+    /// integer value. Only available on Android.
     #[derive(Debug, Clone, Copy, Serialize_repr, Deserialize_repr)]
     #[repr(i8)]
     pub enum Visibility {
+        /// The notification is not shown on the lock screen at all.
         Secret = -1,
+        /// The notification is shown on the lock screen with its sensitive content hidden.
+        ///
+        /// This is the value used when the channel does not define a visibility.
         Private = 0,
+        /// The notification is shown in full on the lock screen.
         Public = 1,
     }
 
+    /// A notification channel, the category users configure notification behavior on.
+    ///
+    /// Notifications reference a channel through
+    /// [`NotificationBuilder::channel_id`](crate::NotificationBuilder::channel_id) and are not
+    /// delivered when the channel does not exist. Only available on Android.
+    /// Use [`Channel::builder`] to construct one.
     #[derive(Debug, Serialize, Deserialize)]
     #[serde(rename_all = "camelCase")]
     pub struct Channel {
@@ -558,10 +780,18 @@ mod android {
         visibility: Option<Visibility>,
     }
 
+    /// Builder for a [`Channel`], created with [`Channel::builder`].
+    ///
+    /// Only available on Android.
     #[derive(Debug)]
     pub struct ChannelBuilder(Channel);
 
     impl Channel {
+        /// Creates a builder for a channel with the given identifier and user visible name.
+        ///
+        /// Lights and vibration are disabled, the importance defaults to [`Importance::Default`]
+        /// and the remaining settings default to [`None`];
+        /// call [`ChannelBuilder::build`] to get the [`Channel`].
         pub fn builder(id: impl Into<String>, name: impl Into<String>) -> ChannelBuilder {
             ChannelBuilder(Self {
                 id: id.into(),
@@ -576,79 +806,102 @@ mod android {
             })
         }
 
+        /// The identifier of this channel.
         pub fn id(&self) -> &str {
             &self.id
         }
 
+        /// The user visible name of this channel.
         pub fn name(&self) -> &str {
             &self.name
         }
 
+        /// The user visible description of this channel.
         pub fn description(&self) -> Option<&str> {
             self.description.as_deref()
         }
 
+        /// The name of the sound resource played by the notifications of this channel.
+        ///
+        /// The resource must be placed in the app's `res/raw` folder.
         pub fn sound(&self) -> Option<&str> {
             self.sound.as_deref()
         }
 
+        /// Whether the notifications of this channel blink the device light.
         pub fn lights(&self) -> bool {
             self.lights
         }
 
+        /// The color of the device light, as a color string such as `#ff0000`.
         pub fn light_color(&self) -> Option<&str> {
             self.light_color.as_deref()
         }
 
+        /// Whether the notifications of this channel vibrate the device.
         pub fn vibration(&self) -> bool {
             self.vibration
         }
 
+        /// How much the notifications of this channel interrupt the user.
         pub fn importance(&self) -> Importance {
             self.importance
         }
 
+        /// How much of the notifications of this channel is shown on the lock screen.
+        ///
+        /// [`Visibility::Private`] is used when this is [`None`].
         pub fn visibility(&self) -> Option<Visibility> {
             self.visibility
         }
     }
 
     impl ChannelBuilder {
+        /// Sets the user visible description of the channel.
         pub fn description(mut self, description: impl Into<String>) -> Self {
             self.0.description.replace(description.into());
             self
         }
 
+        /// Sets the name of the sound resource played by the notifications of this channel.
+        ///
+        /// The resource must be placed in the app's `res/raw` folder.
         pub fn sound(mut self, sound: impl Into<String>) -> Self {
             self.0.sound.replace(sound.into());
             self
         }
 
+        /// Sets whether the notifications of this channel blink the device light.
         pub fn lights(mut self, lights: bool) -> Self {
             self.0.lights = lights;
             self
         }
 
+        /// Sets the color of the device light, as a color string such as `#ff0000`.
         pub fn light_color(mut self, color: impl Into<String>) -> Self {
             self.0.light_color.replace(color.into());
             self
         }
 
+        /// Sets whether the notifications of this channel vibrate the device.
         pub fn vibration(mut self, vibration: bool) -> Self {
             self.0.vibration = vibration;
             self
         }
 
+        /// Sets how much the notifications of this channel interrupt the user.
         pub fn importance(mut self, importance: Importance) -> Self {
             self.0.importance = importance;
             self
         }
 
+        /// Sets how much of the notifications of this channel is shown on the lock screen.
         pub fn visibility(mut self, visibility: Visibility) -> Self {
             self.0.visibility.replace(visibility);
             self
         }
 
+        /// Builds the [`Channel`].
         pub fn build(self) -> Channel {
             self.0
         }
diff --git a/plugins/opener/CHANGELOG.md b/plugins/opener/CHANGELOG.md
index c9d1ddea3..037a628a6 100644
--- a/plugins/opener/CHANGELOG.md
+++ b/plugins/opener/CHANGELOG.md
@@ -8,6 +8,12 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.6.0]
+
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
 ## [2.5.5]
 
 - [`db9c5998`](https://github.com/tauri-apps/plugins-workspace/commit/db9c5998feff9384f9cbbefcbe0d45937c00a1fc) ([#3531](https://github.com/tauri-apps/plugins-workspace/pull/3531) by [@Legend-Master](https://github.com/tauri-apps/plugins-workspace/../../Legend-Master)) Fix missing `consumer-rules.pro` on Gradle v9.
@@ -86,3 +92,8 @@
 ## \[2.0.0]
 
 - [`383e636a`](https://github.com/tauri-apps/plugins-workspace/commit/383e636a8e595aec1300999a8aeb7d9bf8c14632) ([#2019](https://github.com/tauri-apps/plugins-workspace/pull/2019) by [@amrbashir](https://github.com/tauri-apps/plugins-workspace/../../amrbashir)) Initial Release
+h each other.
+
+## \[2.0.0]
+
+- [`383e636a`](https://github.com/tauri-apps/plugins-workspace/commit/383e636a8e595aec1300999a8aeb7d9bf8c14632) ([#2019](https://github.com/tauri-apps/plugins-workspace/pull/2019) by [@amrbashir](https://github.com/tauri-apps/plugins-workspace/../../amrbashir)) Initial Release
diff --git a/plugins/opener/Cargo.toml b/plugins/opener/Cargo.toml
index b1b45ed4b..c51dd70c8 100644
--- a/plugins/opener/Cargo.toml
+++ b/plugins/opener/Cargo.toml
@@ -3,6 +3,7 @@ name = "tauri-plugin-opener"
 version = "3.0.0-alpha.1"
 description = "Open files and URLs using their default application."
 edition = { workspace = true }
+rust-version = { workspace = true }
 authors = { workspace = true }
 license = { workspace = true }
 repository = { workspace = true }
diff --git a/plugins/opener/android/build.gradle.kts b/plugins/opener/android/build.gradle.kts
index 9ed0957f1..95d510f8c 100644
--- a/plugins/opener/android/build.gradle.kts
+++ b/plugins/opener/android/build.gradle.kts
@@ -1,3 +1,5 @@
+import org.jetbrains.kotlin.gradle.dsl.JvmTarget
+
 plugins {
     id("com.android.library")
     id("org.jetbrains.kotlin.android")
@@ -18,8 +20,11 @@ android {
         sourceCompatibility = JavaVersion.VERSION_1_8
         targetCompatibility = JavaVersion.VERSION_1_8
     }
-    kotlinOptions {
-        jvmTarget = "1.8"
+}
+
+kotlin {
+    compilerOptions {
+        jvmTarget = JvmTarget.JVM_1_8
     }
 }
 
diff --git a/plugins/opener/guest-js/init.ts b/plugins/opener/guest-js/init.ts
index 4c2b631fb..d01238625 100644
--- a/plugins/opener/guest-js/init.ts
+++ b/plugins/opener/guest-js/init.ts
@@ -2,6 +2,17 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+/**
+ * Webview script injected by the opener plugin on every page load.
+ *
+ * It installs a `click` listener on `window` that intercepts clicks on `<a>` elements whose
+ * `target` is `_blank` (or that are clicked while holding `Ctrl` or `Shift`) and whose `href`
+ * uses the `http:`, `https:`, `mailto:` or `tel:` protocol, cancels the navigation and opens the
+ * link with the system's default browser through the `plugin:opener|open_url` command instead.
+ *
+ * @module
+ */
+
 import { invoke } from '@tauri-apps/api/core'
 
 // open <a href="..."> links with the API
diff --git a/plugins/opener/src/commands.rs b/plugins/opener/src/commands.rs
index f07704753..6997b3d21 100644
--- a/plugins/opener/src/commands.rs
+++ b/plugins/opener/src/commands.rs
@@ -5,11 +5,11 @@
 use std::path::{Path, PathBuf};
 
 use tauri::{
-    ipc::{CommandScope, GlobalScope},
     AppHandle, Runtime,
+    ipc::{CommandScope, GlobalScope},
 };
 
-use crate::{scope::Scope, Error, OpenerExt};
+use crate::{Error, OpenerExt, scope::Scope};
 
 #[tauri::command]
 pub async fn open_url<R: Runtime>(
diff --git a/plugins/opener/src/error.rs b/plugins/opener/src/error.rs
index 23cd2a8aa..05642fb3f 100644
--- a/plugins/opener/src/error.rs
+++ b/plugins/opener/src/error.rs
@@ -6,37 +6,61 @@ use std::path::PathBuf;
 
 use serde::{Serialize, Serializer};
 
+/// The error type returned by the opener plugin's commands and APIs.
 #[derive(Debug, thiserror::Error)]
 #[non_exhaustive]
 pub enum Error {
+    /// Forwarded from a failed call into the mobile plugin runtime.
     #[cfg(mobile)]
     #[error(transparent)]
     PluginInvoke(#[from] tauri::plugin::mobile::PluginInvokeError),
+    /// Forwarded from a [`tauri::Error`], e.g. when resolving a scoped path fails.
     #[error(transparent)]
     Tauri(#[from] tauri::Error),
+    /// Forwarded from an [`std::io::Error`] raised while opening or revealing a path.
     #[error(transparent)]
     Io(#[from] std::io::Error),
+    /// Forwarded from a [`serde_json::Error`] raised while (de)serializing a mobile plugin payload.
     #[error(transparent)]
     Json(#[from] serde_json::Error),
+    /// The program passed as `with` is not a program name known by the underlying opener.
     #[error("unknown program {0}")]
     UnknownProgramName(String),
+    /// The path is not allowed by the opener scope, optionally together with the program it was requested to be opened with.
     #[error("Not allowed to open path {}{}", .path, .with.as_ref().map(|w| format!(" with {w}")).unwrap_or_default())]
-    ForbiddenPath { path: String, with: Option<String> },
+    ForbiddenPath {
+        /// The path that was rejected by the scope.
+        path: String,
+        /// The program the path was requested to be opened with, if any.
+        with: Option<String>,
+    },
+    /// The URL is not allowed by the opener scope, optionally together with the program it was requested to be opened with.
     #[error("Not allowed to open url {}{}", .url, .with.as_ref().map(|w| format!(" with {w}")).unwrap_or_default())]
-    ForbiddenUrl { url: String, with: Option<String> },
+    ForbiddenUrl {
+        /// The URL that was rejected by the scope.
+        url: String,
+        /// The program the URL was requested to be opened with, if any.
+        with: Option<String>,
+    },
+    /// The requested API is not supported on the current platform, e.g. [`crate::reveal_item_in_dir`] on Android and iOS.
     #[error("API not supported on the current platform")]
     UnsupportedPlatform,
+    /// Forwarded from a Win32 API call, see [`windows::core::Error`].
     #[error(transparent)]
     #[cfg(windows)]
     Win32Error(#[from] windows::core::Error),
+    /// The given path has no parent directory, so it cannot be revealed in its containing folder.
     #[error("Path doesn't have a parent: {0}")]
     NoParent(PathBuf),
     // TODO: Add the underlying io::Error to this variant
+    /// Failed to convert the path to a Windows `ITEMIDLIST` while preparing it to be revealed in the file explorer.
     #[cfg(windows)]
     #[error("Failed to convert path '{0}' to ITEMIDLIST")]
     FailedToConvertPathToItemIdList(PathBuf),
+    /// Failed to convert the path to a `file://` URL, which is required to reveal it via D-Bus on Linux and BSD.
     #[error("Failed to convert path to file:// url")]
     FailedToConvertPathToFileUrl,
+    /// Forwarded from a [`zbus::Error`] raised while talking to the file manager or the desktop portal over D-Bus.
     #[error(transparent)]
     #[cfg(any(
         target_os = "linux",
diff --git a/plugins/opener/src/lib.rs b/plugins/opener/src/lib.rs
index 35a11fbbd..d6b7f0cc8 100644
--- a/plugins/opener/src/lib.rs
+++ b/plugins/opener/src/lib.rs
@@ -2,9 +2,18 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+//! Open files and URLs using their default application, and reveal files in the system's file explorer.
+//!
+//! Use the [`OpenerExt`] trait to access [`Opener::open_url`] and [`Opener::open_path`] from a
+//! running Tauri app; the plugin's `open_url` and `open_path` commands enforce the scope
+//! configured for the plugin before delegating to them. The [`open_url`] and [`open_path`] free
+//! functions and the [`Opener`] methods themselves do not perform any scope check.
+//! [`reveal_item_in_dir`] and [`reveal_items_in_dir`] return [`Error::UnsupportedPlatform`] on
+//! Android and iOS.
+
 use std::path::Path;
 
-use tauri::{plugin::TauriPlugin, Manager, Runtime};
+use tauri::{Manager, Runtime, plugin::TauriPlugin};
 
 #[cfg(mobile)]
 use tauri::plugin::PluginHandle;
@@ -29,6 +38,9 @@ type Result<T> = std::result::Result<T, Error>;
 pub use open::{open_path, open_url};
 pub use reveal_items_in_dir::{reveal_item_in_dir, reveal_items_in_dir};
 
+/// Access to the opener APIs, managed by the plugin as app state.
+///
+/// Obtain an instance via [`OpenerExt::opener`].
 pub struct Opener<R: Runtime> {
     // we use `fn() -> R` to silence the unused generic error
     // while keeping this struct `Send + Sync` without requiring `R` to be
@@ -178,6 +190,7 @@ impl<R: Runtime> Opener<R> {
 
 /// Extensions to [`tauri::App`], [`tauri::AppHandle`], [`tauri::WebviewWindow`], [`tauri::Webview`] and [`tauri::Window`] to access the opener APIs.
 pub trait OpenerExt<R: Runtime> {
+    /// Returns the [`Opener`] instance managed by the plugin.
     fn opener(&self) -> &Opener<R>;
 }
 
diff --git a/plugins/opener/src/reveal_items_in_dir.rs b/plugins/opener/src/reveal_items_in_dir.rs
index d4192dde1..5cb35272b 100644
--- a/plugins/opener/src/reveal_items_in_dir.rs
+++ b/plugins/opener/src/reveal_items_in_dir.rs
@@ -94,18 +94,18 @@ mod imp {
 
     use windows::Win32::UI::Shell::Common::ITEMIDLIST;
     use windows::{
-        core::{w, HSTRING, PCWSTR},
         Win32::{
             Foundation::ERROR_FILE_NOT_FOUND,
             System::Com::CoInitialize,
             UI::{
                 Shell::{
-                    ILCreateFromPathW, ILFree, SHOpenFolderAndSelectItems, ShellExecuteExW,
-                    SHELLEXECUTEINFOW,
+                    ILCreateFromPathW, ILFree, SHELLEXECUTEINFOW, SHOpenFolderAndSelectItems,
+                    ShellExecuteExW,
                 },
                 WindowsAndMessaging::SW_SHOWNORMAL,
             },
         },
+        core::{HSTRING, PCWSTR, w},
     };
 
     pub fn reveal_items_in_dir(paths: &[PathBuf]) -> crate::Result<()> {
@@ -288,6 +288,8 @@ mod imp {
     use std::path::PathBuf;
 
     pub fn reveal_items_in_dir(paths: &[PathBuf]) -> crate::Result<()> {
+        // these AppKit calls are only `unsafe` before objc2-app-kit 0.3.2
+        #[allow(unused_unsafe)]
         unsafe {
             let mut urls = Vec::new();
 
diff --git a/plugins/opener/src/scope.rs b/plugins/opener/src/scope.rs
index 275913d1b..393928b79 100644
--- a/plugins/opener/src/scope.rs
+++ b/plugins/opener/src/scope.rs
@@ -8,9 +8,9 @@ use std::{
     sync::Arc,
 };
 
-use tauri::{ipc::ScopeObject, utils::acl::Value, AppHandle, Manager, Runtime};
+use tauri::{AppHandle, Manager, Runtime, ipc::ScopeObject, utils::acl::Value};
 
-use crate::{scope_entry::EntryRaw, Error};
+use crate::{Error, scope_entry::EntryRaw};
 
 pub use crate::scope_entry::Application;
 
diff --git a/plugins/opener/src/windows_shell_path.rs b/plugins/opener/src/windows_shell_path.rs
index 8715641db..f3cb61529 100644
--- a/plugins/opener/src/windows_shell_path.rs
+++ b/plugins/opener/src/windows_shell_path.rs
@@ -10,7 +10,7 @@ use std::{
     path::{Component, Path, PathBuf, Prefix, PrefixComponent},
 };
 
-use windows::{core::HSTRING, Win32::Storage::FileSystem::GetFullPathNameW};
+use windows::{Win32::Storage::FileSystem::GetFullPathNameW, core::HSTRING};
 
 pub fn absolute_and_check_exists(path: &Path) -> io::Result<PathBuf> {
     let path = absolute(path)?;
diff --git a/plugins/os/CHANGELOG.md b/plugins/os/CHANGELOG.md
index f437da06a..f8857d314 100644
--- a/plugins/os/CHANGELOG.md
+++ b/plugins/os/CHANGELOG.md
@@ -8,6 +8,12 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.4.0]
+
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
 ## \[2.3.2]
 
 - [`93426f85`](https://github.com/tauri-apps/plugins-workspace/commit/93426f85120f49beb9f40222bff45185a32d54a9) Fixed an issue that caused docs.rs builds to fail. No user facing changes.
diff --git a/plugins/os/guest-js/index.ts b/plugins/os/guest-js/index.ts
index 697ae8ed3..21a5777b2 100644
--- a/plugins/os/guest-js/index.ts
+++ b/plugins/os/guest-js/index.ts
@@ -25,6 +25,9 @@ declare global {
   }
 }
 
+/**
+ * A string describing the specific operating system in use, as returned by {@link platform}.
+ */
 type Platform =
   | 'linux'
   | 'macos'
@@ -37,8 +40,14 @@ type Platform =
   | 'android'
   | 'windows'
 
+/**
+ * A coarse-grained operating system category, as returned by {@link type}.
+ */
 type OsType = 'linux' | 'windows' | 'macos' | 'ios' | 'android'
 
+/**
+ * A string describing the specific operating system architecture in use, as returned by {@link arch}.
+ */
 type Arch =
   | 'x86'
   | 'x86_64'
@@ -57,6 +66,13 @@ type Arch =
  * - `\n` on POSIX
  * - `\r\n` on Windows
  *
+ * @example
+ * ```typescript
+ * import { eol } from '@tauri-apps/plugin-os';
+ * const eolChar = eol();
+ * ```
+ *
+ * @returns The end-of-line marker for the current platform.
  * @since 2.0.0
  * */
 function eol(): string {
@@ -73,6 +89,7 @@ function eol(): string {
  * const platformName = platform();
  * ```
  *
+ * @returns The platform name.
  * @since 2.0.0
  *
  */
@@ -88,12 +105,16 @@ function platform(): Platform {
  * const osVersion = version();
  * ```
  *
+ * @returns The operating system version.
  * @since 2.0.0
  */
 function version(): string {
   return window.__TAURI_OS_PLUGIN_INTERNALS__.version
 }
 
+/**
+ * A string describing the operating system family, as returned by {@link family}.
+ */
 type Family = 'unix' | 'windows'
 
 /**
@@ -104,6 +125,7 @@ type Family = 'unix' | 'windows'
  * const family = family();
  * ```
  *
+ * @returns The operating system family.
  * @since 2.0.0
  */
 function family(): Family {
@@ -118,6 +140,7 @@ function family(): Family {
  * const osType = type();
  * ```
  *
+ * @returns The operating system type.
  * @since 2.0.0
  */
 function type(): OsType {
@@ -133,6 +156,7 @@ function type(): OsType {
  * const archName = arch();
  * ```
  *
+ * @returns The operating system architecture.
  * @since 2.0.0
  */
 function arch(): Arch {
@@ -147,6 +171,7 @@ function arch(): Arch {
  * const exeExt = exeExtension();
  * ```
  *
+ * @returns The file extension used for executable binaries on this platform.
  * @since 2.0.0
  */
 function exeExtension(): string {
@@ -164,6 +189,7 @@ function exeExtension(): string {
  * }
  * ```
  *
+ * @returns A promise resolving to the `BCP-47` language tag, or `null` if it could not be obtained.
  * @since 2.0.0
  */
 async function locale(): Promise<string | null> {
@@ -177,6 +203,9 @@ async function locale(): Promise<string | null> {
  * import { hostname } from '@tauri-apps/plugin-os';
  * const hostname = await hostname();
  * ```
+ *
+ * @returns A promise resolving to the host name of the operating system.
+ * @since 2.0.0
  */
 async function hostname(): Promise<string | null> {
   return await invoke('plugin:os|hostname')
diff --git a/plugins/os/src/error.rs b/plugins/os/src/error.rs
index f5d8816af..7c752ba03 100644
--- a/plugins/os/src/error.rs
+++ b/plugins/os/src/error.rs
@@ -4,6 +4,9 @@
 
 use serde::{Serialize, Serializer};
 
+/// All errors that can occur while running the os plugin.
+///
+/// This enum currently has no variants: none of the plugin's commands can fail.
 #[derive(Debug, thiserror::Error)]
 pub enum Error {}
 
diff --git a/plugins/os/src/lib.rs b/plugins/os/src/lib.rs
index df8da300a..2b2c6f687 100644
--- a/plugins/os/src/lib.rs
+++ b/plugins/os/src/lib.rs
@@ -12,10 +12,10 @@
 use std::fmt::Display;
 
 pub use os_info::Version;
-use serialize_to_javascript::{default_template, DefaultTemplate, Template};
+use serialize_to_javascript::{DefaultTemplate, Template, default_template};
 use tauri::{
-    plugin::{Builder, TauriPlugin},
     Runtime,
+    plugin::{Builder, TauriPlugin},
 };
 
 mod commands;
@@ -23,11 +23,17 @@ mod error;
 
 pub use error::Error;
 
+/// The type of the current operating system, as returned by [`type_`].
 pub enum OsType {
+    /// Linux and Linux-based systems such as FreeBSD, DragonFly BSD, NetBSD and OpenBSD.
     Linux,
+    /// Windows.
     Windows,
+    /// macOS.
     Macos,
+    /// iOS.
     IOS,
+    /// Android.
     Android,
 }
 
@@ -127,6 +133,7 @@ impl InitJavascript<'_> {
     }
 }
 
+/// Initializes the plugin.
 pub fn init<R: Runtime>() -> TauriPlugin<R> {
     let init_js = InitJavascript::new()
         .render_default(&Default::default())
diff --git a/plugins/persisted-scope/CHANGELOG.md b/plugins/persisted-scope/CHANGELOG.md
index b95c9f7d8..2e2da8d0a 100644
--- a/plugins/persisted-scope/CHANGELOG.md
+++ b/plugins/persisted-scope/CHANGELOG.md
@@ -16,6 +16,15 @@
 
 - Upgraded to `fs@3.0.0-alpha.0`
 
+## [2.4.0]
+
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
+### Dependencies
+
+- Upgraded to `fs@2.6.0`
+
 ## [2.3.8]
 
 - [`f8053e65`](https://github.com/tauri-apps/plugins-workspace/commit/f8053e659e4ccd85c1f52833411ff8417cbc5e69) ([#3527](https://github.com/tauri-apps/plugins-workspace/pull/3527) by [@Legend-Master](https://github.com/tauri-apps/plugins-workspace/../../Legend-Master)) Documented Cargo feature flags in each plugin's crate-level documentation.
diff --git a/plugins/persisted-scope/src/lib.rs b/plugins/persisted-scope/src/lib.rs
index 602d90864..57f84979d 100644
--- a/plugins/persisted-scope/src/lib.rs
+++ b/plugins/persisted-scope/src/lib.rs
@@ -17,13 +17,13 @@ use aho_corasick::AhoCorasick;
 use serde::{Deserialize, Serialize};
 
 use tauri::{
-    plugin::{Builder, TauriPlugin},
     Manager, Runtime,
+    plugin::{Builder, TauriPlugin},
 };
 use tauri_plugin_fs::FsExt;
 
 use std::{
-    fs::{create_dir_all, File},
+    fs::{File, create_dir_all},
     io::Write,
     path::Path,
 };
@@ -163,6 +163,14 @@ fn save_scopes(scope: &tauri::fs::Scope, app_dir: &Path, scope_state_path: &Path
         });
 }
 
+/// Initializes the plugin.
+///
+/// On setup, this restores the filesystem scope, and the `asset://` protocol scope when the
+/// `protocol-asset` feature is enabled, from the state persisted during a previous run, then
+/// listens for further scope changes to persist them again. Scopes are stored under the app's
+/// data directory; nothing is restored or persisted if that directory cannot be resolved. The
+/// `fs` plugin must be registered before this plugin, otherwise the filesystem scope is not
+/// restored or persisted (a warning is printed in debug builds).
 pub fn init<R: Runtime>() -> TauriPlugin<R> {
     Builder::new("persisted-scope")
         .setup(|app, _api| {
@@ -190,8 +198,8 @@ pub fn init<R: Runtime>() -> TauriPlugin<R> {
                 // We will still save some semi-broken values because the scope events are quite spammy and we don't want to reduce runtime performance any further.
                 let ac = AhoCorasick::new(PATTERNS).unwrap(/* This should be impossible to fail since we're using a small static input */);
 
-                if let Some(fs_scope) = &fs_scope {
-                    if fs_scope_state_path.exists() {
+                if let Some(fs_scope) = &fs_scope
+                    && fs_scope_state_path.exists() {
                         let scope: Scope = std::fs::read(&fs_scope_state_path)
                             .map_err(Error::from)
                             .and_then(|scope| bincode::deserialize(&scope).map_err(Into::into))
@@ -210,7 +218,6 @@ pub fn init<R: Runtime>() -> TauriPlugin<R> {
                         // This is needed to fix broken .peristed-scope files in case the app doesn't update the scope itself.
                         save_scopes(fs_scope, &app_dir, &fs_scope_state_path);
                     }
-                }
 
                 #[cfg(feature = "protocol-asset")]
                 if asset_scope_state_path.exists() {
diff --git a/plugins/positioner/CHANGELOG.md b/plugins/positioner/CHANGELOG.md
index 691b73f5c..d651dc3e6 100644
--- a/plugins/positioner/CHANGELOG.md
+++ b/plugins/positioner/CHANGELOG.md
@@ -8,6 +8,12 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.4.0]
+
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
 ## [2.3.4]
 
 - [`f8053e65`](https://github.com/tauri-apps/plugins-workspace/commit/f8053e659e4ccd85c1f52833411ff8417cbc5e69) ([#3527](https://github.com/tauri-apps/plugins-workspace/pull/3527) by [@Legend-Master](https://github.com/tauri-apps/plugins-workspace/../../Legend-Master)) Documented Cargo feature flags in each plugin's crate-level documentation.
diff --git a/plugins/positioner/guest-js/index.ts b/plugins/positioner/guest-js/index.ts
index 74d0295ec..ba3548078 100644
--- a/plugins/positioner/guest-js/index.ts
+++ b/plugins/positioner/guest-js/index.ts
@@ -3,6 +3,12 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+/**
+ * Move the window to well-known positions, including positions relative to the tray icon.
+ *
+ * @module
+ */
+
 import { invoke } from '@tauri-apps/api/core'
 import type { TrayIconEvent } from '@tauri-apps/api/tray'
 
@@ -10,20 +16,53 @@ import type { TrayIconEvent } from '@tauri-apps/api/tray'
  * Well known window positions.
  */
 export enum Position {
+  /** Top left corner of the screen. */
   TopLeft = 0,
+  /** Top right corner of the screen. */
   TopRight,
+  /** Bottom left corner of the screen. */
   BottomLeft,
+  /** Bottom right corner of the screen. */
   BottomRight,
+  /** Top center of the screen. */
   TopCenter,
+  /** Bottom center of the screen. */
   BottomCenter,
+  /** Vertically centered on the left edge of the screen. */
   LeftCenter,
+  /** Vertically centered on the right edge of the screen. */
   RightCenter,
+  /** Center of the screen. */
   Center,
+  /**
+   * Above the tray icon, aligned with its left edge. Requires the `tray-icon` feature and the
+   * tray icon's events to be forwarded through {@link handleIconState}.
+   */
   TrayLeft,
+  /**
+   * Directly below the tray icon, aligned with its left edge. Requires the `tray-icon` feature
+   * and the tray icon's events to be forwarded through {@link handleIconState}.
+   */
   TrayBottomLeft,
+  /**
+   * Above the tray icon, aligned with its right edge. Requires the `tray-icon` feature and the
+   * tray icon's events to be forwarded through {@link handleIconState}.
+   */
   TrayRight,
+  /**
+   * Directly below the tray icon, aligned with its right edge. Requires the `tray-icon` feature
+   * and the tray icon's events to be forwarded through {@link handleIconState}.
+   */
   TrayBottomRight,
+  /**
+   * Above the tray icon, horizontally centered on it. Requires the `tray-icon` feature and the
+   * tray icon's events to be forwarded through {@link handleIconState}.
+   */
   TrayCenter,
+  /**
+   * Directly below the tray icon, horizontally centered on it. Requires the `tray-icon` feature
+   * and the tray icon's events to be forwarded through {@link handleIconState}.
+   */
   TrayBottomCenter
 }
 
@@ -31,7 +70,15 @@ export enum Position {
  * Moves the `Window` to the given {@link Position} using `WindowExt.move_window()`
  * All positions are relative to the **current** screen.
  *
+ * @example
+ * ```typescript
+ * import { moveWindow, Position } from '@tauri-apps/plugin-positioner'
+ *
+ * await moveWindow(Position.TopRight)
+ * ```
+ *
  * @param to The {@link Position} to move to.
+ * @since 2.0.0
  */
 export async function moveWindow(to: Position): Promise<void> {
   await invoke('plugin:positioner|move_window', {
@@ -44,7 +91,16 @@ export async function moveWindow(to: Position): Promise<void> {
  *
  * This move operation constrains the window to the screen dimensions in case of
  * tray-icon positions.
+ *
+ * @example
+ * ```typescript
+ * import { moveWindowConstrained, Position } from '@tauri-apps/plugin-positioner'
+ *
+ * await moveWindowConstrained(Position.TrayCenter)
+ * ```
+ *
  * @param to The (tray) {@link Position} to move to.
+ * @since 2.1.0
  */
 export async function moveWindowConstrained(to: Position): Promise<void> {
   await invoke('plugin:positioner|move_window_constrained', {
@@ -52,6 +108,30 @@ export async function moveWindowConstrained(to: Position): Promise<void> {
   })
 }
 
+/**
+ * Reports the tray icon's current position and size so the `Tray*` {@link Position} variants
+ * can be resolved.
+ *
+ * This is an internal helper meant to be called from the tray icon's event handler (the
+ * `action` callback passed to `TrayIcon.new()`), forwarding every {@link TrayIconEvent} it
+ * receives so that {@link moveWindow} and {@link moveWindowConstrained} can later position the
+ * window relative to the tray icon.
+ *
+ * @example
+ * ```typescript
+ * import { handleIconState } from '@tauri-apps/plugin-positioner'
+ * import { TrayIcon, type TrayIconEvent } from '@tauri-apps/api/tray'
+ *
+ * const action = async (event: TrayIconEvent) => {
+ *   await handleIconState(event)
+ * }
+ *
+ * const tray = await TrayIcon.new({ id: 'main', action })
+ * ```
+ *
+ * @param event The tray icon event to read the position and size from.
+ * @since 2.0.0
+ */
 export async function handleIconState(event: TrayIconEvent): Promise<void> {
   await invoke('plugin:positioner|set_tray_icon_state', {
     position: event.rect.position,
diff --git a/plugins/positioner/src/ext.rs b/plugins/positioner/src/ext.rs
index f9d6a80d3..a27c18a96 100644
--- a/plugins/positioner/src/ext.rs
+++ b/plugins/positioner/src/ext.rs
@@ -13,28 +13,53 @@ use tauri::Monitor;
 use tauri::{PhysicalPosition, PhysicalSize, Result, Runtime, WebviewWindow, Window};
 
 /// Well known window positions.
+///
+/// The `Tray*` variants require the `tray-icon` feature and only resolve once the tray icon has
+/// reported its position (see `on_tray_event`); using one before that happens returns an error.
 #[derive(Debug, Deserialize_repr)]
 #[repr(u16)]
 pub enum Position {
+    /// Top left corner of the current screen.
     TopLeft = 0,
+    /// Top right corner of the current screen.
     TopRight,
+    /// Bottom left corner of the current screen.
     BottomLeft,
+    /// Bottom right corner of the current screen.
     BottomRight,
+    /// Top center of the current screen.
     TopCenter,
+    /// Bottom center of the current screen.
     BottomCenter,
+    /// Vertically centered on the left edge of the current screen.
     LeftCenter,
+    /// Vertically centered on the right edge of the current screen.
     RightCenter,
+    /// Center of the current screen.
     Center,
+    /// Above the tray icon, aligning the window's left edge with the tray icon's left edge. On
+    /// Windows and macOS the window moves below the icon instead when there is not enough room
+    /// above.
     #[cfg(feature = "tray-icon")]
     TrayLeft,
+    /// Directly below the tray icon, aligning the window's left edge with the tray icon's left
+    /// edge.
     #[cfg(feature = "tray-icon")]
     TrayBottomLeft,
+    /// Above the tray icon, aligning the window's left edge with the tray icon's right edge. On
+    /// Windows and macOS the window moves below the icon instead when there is not enough room
+    /// above.
     #[cfg(feature = "tray-icon")]
     TrayRight,
+    /// Directly below the tray icon, aligning the window's left edge with the tray icon's right
+    /// edge.
     #[cfg(feature = "tray-icon")]
     TrayBottomRight,
+    /// Above the tray icon, horizontally centered on it. On Windows and macOS the window moves
+    /// below the icon instead when there is not enough room above.
     #[cfg(feature = "tray-icon")]
     TrayCenter,
+    /// Directly below the tray icon, horizontally centered on it.
     #[cfg(feature = "tray-icon")]
     TrayBottomCenter,
 }
diff --git a/plugins/positioner/src/lib.rs b/plugins/positioner/src/lib.rs
index 8d9594028..a437ffe36 100644
--- a/plugins/positioner/src/lib.rs
+++ b/plugins/positioner/src/lib.rs
@@ -21,16 +21,26 @@ mod ext;
 
 pub use ext::*;
 use tauri::{
-    plugin::{self, TauriPlugin},
     Result, Runtime,
+    plugin::{self, TauriPlugin},
 };
 
 #[cfg(feature = "tray-icon")]
-use tauri::{tray::TrayIconEvent, AppHandle, Manager, PhysicalPosition, PhysicalSize};
+use tauri::{AppHandle, Manager, PhysicalPosition, PhysicalSize, tray::TrayIconEvent};
 
 #[cfg(feature = "tray-icon")]
 struct Tray(std::sync::Mutex<Option<(PhysicalPosition<f64>, PhysicalSize<f64>)>>);
 
+/// Records the tray icon's latest position and size so that the `Tray*` [`Position`] variants
+/// (e.g. [`Position::TrayLeft`]) can be resolved by [`WindowExt::move_window`] and
+/// [`WindowExt::move_window_constrained`].
+///
+/// Call this from your tray icon's event handler. Only [`TrayIconEvent::Click`],
+/// [`TrayIconEvent::Enter`], [`TrayIconEvent::Leave`] and [`TrayIconEvent::Move`] carry the
+/// icon's position and update the tracked value; other events are ignored. Until this has been
+/// called at least once, moving a window to a `Tray*` position fails.
+///
+/// Requires the `tray-icon` feature.
 #[cfg(feature = "tray-icon")]
 pub fn on_tray_event<R: Runtime>(app: &AppHandle<R>, event: &TrayIconEvent) {
     let (position, size) = {
diff --git a/plugins/process/CHANGELOG.md b/plugins/process/CHANGELOG.md
index d7a98450e..1c4aeb7dd 100644
--- a/plugins/process/CHANGELOG.md
+++ b/plugins/process/CHANGELOG.md
@@ -8,6 +8,12 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.4.0]
+
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
 ## \[2.3.1]
 
 - [`93426f85`](https://github.com/tauri-apps/plugins-workspace/commit/93426f85120f49beb9f40222bff45185a32d54a9) Fixed an issue that caused docs.rs builds to fail. No user facing changes.
diff --git a/plugins/process/src/lib.rs b/plugins/process/src/lib.rs
index b83d89648..f122ef0b3 100644
--- a/plugins/process/src/lib.rs
+++ b/plugins/process/src/lib.rs
@@ -10,12 +10,13 @@
 )]
 
 use tauri::{
-    plugin::{Builder, TauriPlugin},
     Runtime,
+    plugin::{Builder, TauriPlugin},
 };
 
 mod commands;
 
+/// Initializes the plugin, exposing commands to exit or restart the current process.
 pub fn init<R: Runtime>() -> TauriPlugin<R> {
     Builder::new("process")
         .invoke_handler(tauri::generate_handler![commands::exit, commands::restart])
diff --git a/plugins/shell/CHANGELOG.md b/plugins/shell/CHANGELOG.md
index ee2e1fb1c..d5153e406 100644
--- a/plugins/shell/CHANGELOG.md
+++ b/plugins/shell/CHANGELOG.md
@@ -8,6 +8,12 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.4.0]
+
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
 ## [2.3.6]
 
 - [`db9c5998`](https://github.com/tauri-apps/plugins-workspace/commit/db9c5998feff9384f9cbbefcbe0d45937c00a1fc) ([#3531](https://github.com/tauri-apps/plugins-workspace/pull/3531) by [@Legend-Master](https://github.com/tauri-apps/plugins-workspace/../../Legend-Master)) Fix missing `consumer-rules.pro` on Gradle v9.
@@ -165,3 +171,8 @@
 ## \[2.0.0-alpha.0]
 
 - [`717ae67`](https://github.com/tauri-apps/plugins-workspace/commit/717ae670978feb4492fac1f295998b93f2b9347f)([#371](https://github.com/tauri-apps/plugins-workspace/pull/371)) First v2 alpha release!
+55](https://github.com/tauri-apps/plugins-workspace/pull/555)) Update to alpha.11.
+
+## \[2.0.0-alpha.0]
+
+- [`717ae67`](https://github.com/tauri-apps/plugins-workspace/commit/717ae670978feb4492fac1f295998b93f2b9347f)([#371](https://github.com/tauri-apps/plugins-workspace/pull/371)) First v2 alpha release!
diff --git a/plugins/shell/guest-js/index.ts b/plugins/shell/guest-js/index.ts
index bc29f170b..b68bad156 100644
--- a/plugins/shell/guest-js/index.ts
+++ b/plugins/shell/guest-js/index.ts
@@ -62,6 +62,8 @@
 import { invoke, Channel } from '@tauri-apps/api/core'
 
 /**
+ * Options that configure how a child process is spawned.
+ *
  * @since 2.0.0
  */
 interface SpawnOptions {
@@ -83,6 +85,8 @@ interface InternalSpawnOptions extends SpawnOptions {
 }
 
 /**
+ * The output collected from a child process that ran to completion.
+ *
  * @since 2.0.0
  */
 interface ChildProcess<O extends IOPayload> {
@@ -97,6 +101,9 @@ interface ChildProcess<O extends IOPayload> {
 }
 
 /**
+ * A minimal event emitter modeled after Node.js' `EventEmitter`, used by
+ * {@link Command} and by its `stdout` and `stderr` streams.
+ *
  * @since 2.0.0
  */
 // eslint-disable-next-line @typescript-eslint/no-explicit-any
@@ -109,6 +116,18 @@ class EventEmitter<E extends Record<string, any>> {
   /**
    * Alias for `emitter.on(eventName, listener)`.
    *
+   * @example
+   * ```typescript
+   * import { Command } from '@tauri-apps/plugin-shell';
+   * const command = Command.create('node');
+   * command.addListener('error', (error) => console.error(error));
+   * ```
+   *
+   * @param eventName The name of the event to listen to.
+   * @param listener The callback invoked with the event payload.
+   *
+   * @returns A reference to the `EventEmitter`, so that calls can be chained.
+   *
    * @since 2.0.0
    */
   addListener<N extends keyof E>(
@@ -121,6 +140,20 @@ class EventEmitter<E extends Record<string, any>> {
   /**
    * Alias for `emitter.off(eventName, listener)`.
    *
+   * @example
+   * ```typescript
+   * import { Command } from '@tauri-apps/plugin-shell';
+   * const command = Command.create('node');
+   * const listener = (error: string) => console.error(error);
+   * command.addListener('error', listener);
+   * command.removeListener('error', listener);
+   * ```
+   *
+   * @param eventName The name of the event to stop listening to.
+   * @param listener The exact callback that was registered before.
+   *
+   * @returns A reference to the `EventEmitter`, so that calls can be chained.
+   *
    * @since 2.0.0
    */
   removeListener<N extends keyof E>(
@@ -138,6 +171,20 @@ class EventEmitter<E extends Record<string, any>> {
    *
    * Returns a reference to the `EventEmitter`, so that calls can be chained.
    *
+   * @example
+   * ```typescript
+   * import { Command } from '@tauri-apps/plugin-shell';
+   * const command = Command.create('node');
+   * command.on('close', (data) => {
+   *   console.log(`command finished with code ${data.code}`);
+   * });
+   * ```
+   *
+   * @param eventName The name of the event to listen to.
+   * @param listener The callback invoked with the event payload.
+   *
+   * @returns A reference to the `EventEmitter`, so that calls can be chained.
+   *
    * @since 2.0.0
    */
   on<N extends keyof E>(
@@ -160,6 +207,20 @@ class EventEmitter<E extends Record<string, any>> {
    *
    * Returns a reference to the `EventEmitter`, so that calls can be chained.
    *
+   * @example
+   * ```typescript
+   * import { Command } from '@tauri-apps/plugin-shell';
+   * const command = Command.create('node');
+   * command.once('close', (data) => {
+   *   console.log(`command finished with code ${data.code}`);
+   * });
+   * ```
+   *
+   * @param eventName The name of the event to listen to once.
+   * @param listener The callback invoked with the event payload.
+   *
+   * @returns A reference to the `EventEmitter`, so that calls can be chained.
+   *
    * @since 2.0.0
    */
   once<N extends keyof E>(
@@ -177,6 +238,20 @@ class EventEmitter<E extends Record<string, any>> {
    * Removes the all specified listener from the listener array for the event eventName
    * Returns a reference to the `EventEmitter`, so that calls can be chained.
    *
+   * @example
+   * ```typescript
+   * import { Command } from '@tauri-apps/plugin-shell';
+   * const command = Command.create('node');
+   * const listener = (error: string) => console.error(error);
+   * command.on('error', listener);
+   * command.off('error', listener);
+   * ```
+   *
+   * @param eventName The name of the event to stop listening to.
+   * @param listener The exact callback that was registered before.
+   *
+   * @returns A reference to the `EventEmitter`, so that calls can be chained.
+   *
    * @since 2.0.0
    */
   off<N extends keyof E>(
@@ -197,6 +272,19 @@ class EventEmitter<E extends Record<string, any>> {
    *
    * Returns a reference to the `EventEmitter`, so that calls can be chained.
    *
+   * @example
+   * ```typescript
+   * import { Command } from '@tauri-apps/plugin-shell';
+   * const command = Command.create('node');
+   * command.on('error', (error) => console.error(error));
+   * command.removeAllListeners('error');
+   * ```
+   *
+   * @param event The name of the event to remove the listeners of.
+   * When omitted, the listeners of every event are removed.
+   *
+   * @returns A reference to the `EventEmitter`, so that calls can be chained.
+   *
    * @since 2.0.0
    */
   removeAllListeners<N extends keyof E>(event?: N): this {
@@ -211,10 +299,23 @@ class EventEmitter<E extends Record<string, any>> {
   }
 
   /**
-   * @ignore
-   * Synchronously calls each of the listeners registered for the event named`eventName`, in the order they were registered, passing the supplied arguments
+   * Synchronously calls each of the listeners registered for the event named
+   * `eventName`, in the order they were registered, passing the supplied arguments
    * to each.
    *
+   * @ignore
+   *
+   * @example
+   * ```typescript
+   * import { EventEmitter } from '@tauri-apps/plugin-shell';
+   * const emitter = new EventEmitter<{ data: string }>();
+   * emitter.on('data', (line) => console.log(line));
+   * emitter.emit('data', 'hello');
+   * ```
+   *
+   * @param eventName The name of the event to emit.
+   * @param arg The payload passed to every registered listener.
+   *
    * @returns `true` if the event had listeners, `false` otherwise.
    *
    * @since 2.0.0
@@ -232,6 +333,18 @@ class EventEmitter<E extends Record<string, any>> {
   /**
    * Returns the number of listeners listening to the event named `eventName`.
    *
+   * @example
+   * ```typescript
+   * import { Command } from '@tauri-apps/plugin-shell';
+   * const command = Command.create('node');
+   * command.on('close', () => {});
+   * console.log(command.listenerCount('close')); // 1
+   * ```
+   *
+   * @param eventName The name of the event to count the listeners of.
+   *
+   * @returns The number of listeners registered for the given event.
+   *
    * @since 2.0.0
    */
   listenerCount<N extends keyof E>(eventName: N): number {
@@ -249,6 +362,18 @@ class EventEmitter<E extends Record<string, any>> {
    *
    * Returns a reference to the `EventEmitter`, so that calls can be chained.
    *
+   * @example
+   * ```typescript
+   * import { Command } from '@tauri-apps/plugin-shell';
+   * const command = Command.create('node');
+   * command.prependListener('error', (error) => console.error(error));
+   * ```
+   *
+   * @param eventName The name of the event to listen to.
+   * @param listener The callback invoked with the event payload.
+   *
+   * @returns A reference to the `EventEmitter`, so that calls can be chained.
+   *
    * @since 2.0.0
    */
   prependListener<N extends keyof E>(
@@ -271,6 +396,18 @@ class EventEmitter<E extends Record<string, any>> {
    *
    * Returns a reference to the `EventEmitter`, so that calls can be chained.
    *
+   * @example
+   * ```typescript
+   * import { Command } from '@tauri-apps/plugin-shell';
+   * const command = Command.create('node');
+   * command.prependOnceListener('error', (error) => console.error(error));
+   * ```
+   *
+   * @param eventName The name of the event to listen to once.
+   * @param listener The callback invoked with the event payload.
+   *
+   * @returns A reference to the `EventEmitter`, so that calls can be chained.
+   *
    * @since 2.0.0
    */
   prependOnceListener<N extends keyof E>(
@@ -288,12 +425,30 @@ class EventEmitter<E extends Record<string, any>> {
 }
 
 /**
+ * A handle to a child process spawned with {@link Command.spawn},
+ * which can be used to write to its `stdin` or to kill it.
+ *
  * @since 2.0.0
  */
 class Child {
   /** The child process `pid`. */
   pid: number
 
+  /**
+   * Creates a handle to the child process with the given process id.
+   *
+   * @example
+   * ```typescript
+   * import { Command } from '@tauri-apps/plugin-shell';
+   * // a `Child` is usually obtained by spawning a command:
+   * const child = await Command.create('node').spawn();
+   * console.log(child.pid);
+   * ```
+   *
+   * @param pid The process id of the child process.
+   *
+   * @since 2.0.0
+   */
   constructor(pid: number) {
     this.pid = pid
   }
@@ -325,6 +480,14 @@ class Child {
   /**
    * Kills the child process.
    *
+   * @example
+   * ```typescript
+   * import { Command } from '@tauri-apps/plugin-shell';
+   * const command = Command.create('node');
+   * const child = await command.spawn();
+   * await child.kill();
+   * ```
+   *
    * @returns A promise indicating the success or failure of the operation.
    *
    * @since 2.0.0
@@ -337,12 +500,25 @@ class Child {
   }
 }
 
+/**
+ * The events emitted by a {@link Command} instance.
+ *
+ * @since 2.0.0
+ */
 interface CommandEvents {
+  /** Emitted when the child process terminated, carrying its exit code and signal. */
   close: TerminatedPayload
+  /** Emitted when the child process could not be spawned or failed unexpectedly, carrying the error message. */
   error: string
 }
 
+/**
+ * The events emitted by the `stdout` and `stderr` streams of a {@link Command}.
+ *
+ * @since 2.0.0
+ */
 interface OutputEvents<O extends IOPayload> {
+  /** Emitted for each line the process wrote to the stream, or for each raw chunk when the `raw` encoding is used. */
   data: O
 }
 
@@ -399,20 +575,9 @@ class Command<O extends IOPayload> extends EventEmitter<CommandEvents> {
     this.options = options ?? {}
   }
 
-  static create(program: string, args?: string | string[]): Command<string>
-  static create(
-    program: string,
-    args?: string | string[],
-    options?: SpawnOptions & { encoding: 'raw' }
-  ): Command<Uint8Array>
-  static create(
-    program: string,
-    args?: string | string[],
-    options?: SpawnOptions
-  ): Command<string>
-
   /**
-   * Creates a command to execute the given program.
+   * Creates a command to execute the given program, decoding its output as text.
+   *
    * @example
    * ```typescript
    * import { Command } from '@tauri-apps/plugin-shell';
@@ -422,6 +587,77 @@ class Command<O extends IOPayload> extends EventEmitter<CommandEvents> {
    *
    * @param program The program to execute.
    * It must be configured in your project's capabilities.
+   * @param args The arguments to pass to the program. Defaults to no arguments.
+   *
+   * @returns The command instance, ready to be spawned or executed.
+   *
+   * @since 2.0.0
+   */
+  static create(program: string, args?: string | string[]): Command<string>
+  /**
+   * Creates a command to execute the given program, keeping its output as raw bytes.
+   *
+   * @example
+   * ```typescript
+   * import { Command } from '@tauri-apps/plugin-shell';
+   * const command = Command.create('my-app', ['run', 'tauri'], { encoding: 'raw' });
+   * const output = await command.execute();
+   * console.log(output.stdout); // a Uint8Array
+   * ```
+   *
+   * @param program The program to execute.
+   * It must be configured in your project's capabilities.
+   * @param args The arguments to pass to the program. Defaults to no arguments.
+   * @param options Spawn options using the `raw` encoding, which makes the process
+   * output be delivered as `Uint8Array` instead of `string`.
+   *
+   * @returns The command instance, ready to be spawned or executed.
+   *
+   * @since 2.0.0
+   */
+  static create(
+    program: string,
+    args?: string | string[],
+    options?: SpawnOptions & { encoding: 'raw' }
+  ): Command<Uint8Array>
+  /**
+   * Creates a command to execute the given program with the given spawn options.
+   *
+   * @example
+   * ```typescript
+   * import { Command } from '@tauri-apps/plugin-shell';
+   * const command = Command.create('my-app', ['run', 'tauri'], { cwd: '/path/to/project' });
+   * const output = await command.execute();
+   * ```
+   *
+   * @param program The program to execute.
+   * It must be configured in your project's capabilities.
+   * @param args The arguments to pass to the program. Defaults to no arguments.
+   * @param options Spawn options such as the working directory, the environment
+   * variables and the character encoding of the process output.
+   *
+   * @returns The command instance, ready to be spawned or executed.
+   *
+   * @since 2.0.0
+   */
+  static create(
+    program: string,
+    args?: string | string[],
+    options?: SpawnOptions
+  ): Command<string>
+
+  /**
+   * Creates a command to execute the given program.
+   *
+   * @param program The program to execute.
+   * It must be configured in your project's capabilities.
+   * @param args The arguments to pass to the program. Defaults to no arguments.
+   * @param options Spawn options such as the working directory, the environment
+   * variables and the character encoding of the process output.
+   *
+   * @returns The command instance, ready to be spawned or executed.
+   *
+   * @since 2.0.0
    */
   static create<O extends IOPayload>(
     program: string,
@@ -431,12 +667,74 @@ class Command<O extends IOPayload> extends EventEmitter<CommandEvents> {
     return new Command(program, args, options)
   }
 
+  /**
+   * Creates a command to execute the given sidecar program, decoding its output as text.
+   *
+   * @example
+   * ```typescript
+   * import { Command } from '@tauri-apps/plugin-shell';
+   * const command = Command.sidecar('my-sidecar');
+   * const output = await command.execute();
+   * ```
+   *
+   * @param program The sidecar program to execute.
+   * It must be configured in your project's capabilities
+   * and defined on `tauri.conf.json > bundle > externalBin`.
+   * @param args The arguments to pass to the program. Defaults to no arguments.
+   *
+   * @returns The command instance, ready to be spawned or executed.
+   *
+   * @since 2.0.0
+   */
   static sidecar(program: string, args?: string | string[]): Command<string>
+  /**
+   * Creates a command to execute the given sidecar program, keeping its output as raw bytes.
+   *
+   * @example
+   * ```typescript
+   * import { Command } from '@tauri-apps/plugin-shell';
+   * const command = Command.sidecar('my-sidecar', [], { encoding: 'raw' });
+   * const output = await command.execute();
+   * console.log(output.stdout); // a Uint8Array
+   * ```
+   *
+   * @param program The sidecar program to execute.
+   * It must be configured in your project's capabilities
+   * and defined on `tauri.conf.json > bundle > externalBin`.
+   * @param args The arguments to pass to the program. Defaults to no arguments.
+   * @param options Spawn options using the `raw` encoding, which makes the process
+   * output be delivered as `Uint8Array` instead of `string`.
+   *
+   * @returns The command instance, ready to be spawned or executed.
+   *
+   * @since 2.0.0
+   */
   static sidecar(
     program: string,
     args?: string | string[],
     options?: SpawnOptions & { encoding: 'raw' }
   ): Command<Uint8Array>
+  /**
+   * Creates a command to execute the given sidecar program with the given spawn options.
+   *
+   * @example
+   * ```typescript
+   * import { Command } from '@tauri-apps/plugin-shell';
+   * const command = Command.sidecar('my-sidecar', [], { cwd: '/path/to/project' });
+   * const output = await command.execute();
+   * ```
+   *
+   * @param program The sidecar program to execute.
+   * It must be configured in your project's capabilities
+   * and defined on `tauri.conf.json > bundle > externalBin`.
+   * @param args The arguments to pass to the program. Defaults to no arguments.
+   * @param options Spawn options such as the working directory, the environment
+   * variables and the character encoding of the process output.
+   *
+   * @returns The command instance, ready to be spawned or executed.
+   *
+   * @since 2.0.0
+   */
   static sidecar(
     program: string,
     args?: string | string[],
@@ -445,15 +743,17 @@ class Command<O extends IOPayload> extends EventEmitter<CommandEvents> {
 
   /**
    * Creates a command to execute the given sidecar program.
-   * @example
-   * ```typescript
-   * import { Command } from '@tauri-apps/plugin-shell';
-   * const command = Command.sidecar('my-sidecar');
-   * const output = await command.execute();
-   * ```
    *
-   * @param program The program to execute.
-   * It must be configured in your project's capabilities.
+   * @param program The sidecar program to execute.
+   * It must be configured in your project's capabilities
+   * and defined on `tauri.conf.json > bundle > externalBin`.
+   * @param args The arguments to pass to the program. Defaults to no arguments.
+   * @param options Spawn options such as the working directory, the environment
+   * variables and the character encoding of the process output.
+   *
+   * @returns The command instance, ready to be spawned or executed.
+   *
+   * @since 2.0.0
    */
   static sidecar<O extends IOPayload>(
     program: string,
@@ -468,6 +768,15 @@ class Command<O extends IOPayload> extends EventEmitter<CommandEvents> {
   /**
    * Executes the command as a child process, returning a handle to it.
    *
+   * @example
+   * ```typescript
+   * import { Command } from '@tauri-apps/plugin-shell';
+   * const command = Command.create('node');
+   * command.stdout.on('data', (line) => console.log(line));
+   * const child = await command.spawn();
+   * console.log('pid:', child.pid);
+   * ```
+   *
    * @returns A promise resolving to the child process handle.
    *
    * @since 2.0.0
@@ -558,7 +867,10 @@ interface TerminatedPayload {
   signal: number | null
 }
 
-/** Event payload type */
+/**
+ * The type of the data a child process writes to `stdout` and `stderr`:
+ * a `string`, or a `Uint8Array` when the `raw` encoding is configured.
+ */
 type IOPayload = string | Uint8Array
 
 /** Events emitted by the child process. */
diff --git a/plugins/shell/guest-js/init.ts b/plugins/shell/guest-js/init.ts
index 117ba778d..d0ed650d2 100644
--- a/plugins/shell/guest-js/init.ts
+++ b/plugins/shell/guest-js/init.ts
@@ -2,6 +2,17 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+/**
+ * Webview script injected by the shell plugin on every page load.
+ *
+ * It installs a `click` listener on `document.body` that intercepts clicks on
+ * `<a target="_blank">` elements whose `href` starts with `http://`, `https://`,
+ * `mailto:` or `tel:`, cancels the navigation and opens the link with the
+ * system's default application through the `plugin:shell|open` command instead.
+ *
+ * @module
+ */
+
 import { invoke } from '@tauri-apps/api/core'
 
 // open <a href="..."> links with the API
diff --git a/plugins/shell/src/commands.rs b/plugins/shell/src/commands.rs
index db15ab56f..b3467edc1 100644
--- a/plugins/shell/src/commands.rs
+++ b/plugins/shell/src/commands.rs
@@ -7,14 +7,14 @@ use std::{collections::HashMap, future::Future, path::PathBuf, pin::Pin, string:
 use encoding_rs::Encoding;
 use serde::{Deserialize, Serialize};
 use tauri::{
-    ipc::{Channel, CommandScope, GlobalScope},
     Manager, Runtime, State, Window,
+    ipc::{Channel, CommandScope, GlobalScope},
 };
 
 use crate::{
+    Shell,
     process::{CommandEvent, TerminatedPayload},
     scope::ExecuteArgs,
-    Shell,
 };
 
 type ChildId = u32;
diff --git a/plugins/shell/src/error.rs b/plugins/shell/src/error.rs
index 33fb135b2..5201c491f 100644
--- a/plugins/shell/src/error.rs
+++ b/plugins/shell/src/error.rs
@@ -6,10 +6,13 @@ use std::path::PathBuf;
 
 use serde::{Serialize, Serializer};
 
+/// Errors returned by the shell plugin.
 #[derive(Debug, thiserror::Error)]
 pub enum Error {
     #[error(transparent)]
     Io(#[from] std::io::Error),
+    /// The path of the current executable has no parent directory,
+    /// so the path of a sidecar program could not be resolved.
     #[error("current executable path has no parent")]
     CurrentExeHasNoParent,
     #[error(transparent)]
@@ -20,6 +23,7 @@ pub enum Error {
     /// Program not allowed by the scope.
     #[error("program not allowed on the configured shell scope: {0}")]
     ProgramNotAllowed(PathBuf),
+    /// The `encoding` spawn option is neither `raw` nor a label of a known character encoding.
     #[error("unknown encoding {0}")]
     UnknownEncoding(String),
     /// JSON error.
diff --git a/plugins/shell/src/lib.rs b/plugins/shell/src/lib.rs
index da8c25d4d..714ab747d 100644
--- a/plugins/shell/src/lib.rs
+++ b/plugins/shell/src/lib.rs
@@ -20,8 +20,8 @@ use std::{
 
 use process::{Command, CommandChild};
 use tauri::{
-    plugin::{Builder, TauriPlugin},
     AppHandle, Manager, RunEvent, Runtime,
+    plugin::{Builder, TauriPlugin},
 };
 
 mod commands;
@@ -35,6 +35,9 @@ type Result<T> = std::result::Result<T, Error>;
 
 type ChildStore = Arc<Mutex<HashMap<u32, CommandChild>>>;
 
+/// Access to the shell APIs.
+///
+/// Get an instance of this type with [`ShellExt::shell`].
 pub struct Shell<R: Runtime> {
     #[allow(dead_code)]
     app: AppHandle<R>,
@@ -56,7 +59,21 @@ impl<R: Runtime> Shell<R> {
     }
 }
 
+/// Extensions to [`tauri::App`], [`tauri::AppHandle`], [`tauri::WebviewWindow`],
+/// [`tauri::Webview`] and [`tauri::Window`] to access the shell APIs.
 pub trait ShellExt<R: Runtime> {
+    /// Gets the shell APIs.
+    ///
+    /// # Examples
+    ///
+    /// ```no_run
+    /// use tauri_plugin_shell::ShellExt;
+    ///
+    /// async fn run_echo<R: tauri::Runtime>(app: &tauri::AppHandle<R>) {
+    ///     let output = app.shell().command("echo").args(["hello"]).output().await.unwrap();
+    ///     println!("{}", String::from_utf8_lossy(&output.stdout));
+    /// }
+    /// ```
     fn shell(&self) -> &Shell<R>;
 }
 
diff --git a/plugins/shell/src/process/mod.rs b/plugins/shell/src/process/mod.rs
index 7a1c2db24..45e165e61 100644
--- a/plugins/shell/src/process/mod.rs
+++ b/plugins/shell/src/process/mod.rs
@@ -20,10 +20,10 @@ use std::os::windows::process::CommandExt;
 const CREATE_NO_WINDOW: u32 = 0x0800_0000;
 const NEWLINE_BYTE: u8 = b'\n';
 
-use tauri::async_runtime::{block_on as block_on_task, channel, Receiver, Sender};
+use tauri::async_runtime::{Receiver, Sender, block_on as block_on_task, channel};
 
 pub use encoding_rs::Encoding;
-use os_pipe::{pipe, PipeReader, PipeWriter};
+use os_pipe::{PipeReader, PipeWriter, pipe};
 use serde::Serialize;
 use shared_child::SharedChild;
 use tauri::utils::platform;
diff --git a/plugins/shell/src/scope.rs b/plugins/shell/src/scope.rs
index fce83cfeb..145b44462 100644
--- a/plugins/shell/src/scope.rs
+++ b/plugins/shell/src/scope.rs
@@ -7,8 +7,8 @@ use std::sync::Arc;
 use crate::process::Command;
 
 use regex::Regex;
-use tauri::ipc::ScopeObject;
 use tauri::Manager;
+use tauri::ipc::ScopeObject;
 
 /// Allowed representation of `Execute` command arguments.
 #[derive(Debug, Clone, serde::Deserialize)]
@@ -153,8 +153,8 @@ pub enum Error {
 
     /// The sidecar program validated but failed to find the sidecar path.
     #[error(
-    "The scoped sidecar command was validated, but failed to create the path to the command: {0}"
-  )]
+        "The scoped sidecar command was validated, but failed to create the path to the command: {0}"
+    )]
     Sidecar(String),
 
     /// The named command was not found in the scoped config.
@@ -163,12 +163,14 @@ pub enum Error {
 
     /// A command variable has no value set in the arguments.
     #[error(
-    "Scoped command argument at position {0} must match regex validation {1} but it was not found"
-  )]
+        "Scoped command argument at position {0} must match regex validation {1} but it was not found"
+    )]
     MissingVar(usize, String),
 
     /// At least one argument did not pass input validation.
-    #[error("Scoped command argument at position {index} was found, but failed regex validation {validation}")]
+    #[error(
+        "Scoped command argument at position {index} was found, but failed regex validation {validation}"
+    )]
     Validation {
         /// Index of the variable.
         index: usize,
diff --git a/plugins/shell/src/scope_entry.rs b/plugins/shell/src/scope_entry.rs
index 8a70fff79..61eff93cc 100644
--- a/plugins/shell/src/scope_entry.rs
+++ b/plugins/shell/src/scope_entry.rs
@@ -2,7 +2,7 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
-use serde::{de::Error as DeError, Deserialize, Deserializer};
+use serde::{Deserialize, Deserializer, de::Error as DeError};
 
 use std::path::PathBuf;
 
diff --git a/plugins/single-instance/CHANGELOG.md b/plugins/single-instance/CHANGELOG.md
index aa5f954a4..589a6981e 100644
--- a/plugins/single-instance/CHANGELOG.md
+++ b/plugins/single-instance/CHANGELOG.md
@@ -16,6 +16,15 @@
 
 - Upgraded to `deep-link@3.0.0-alpha.0`
 
+## [2.5.0]
+
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
+### Dependencies
+
+- Upgraded to `deep-link@2.5.0`
+
 ## [2.4.5]
 
 - [`67cd25a1`](https://github.com/tauri-apps/plugins-workspace/commit/67cd25a10ce3deb1b935e725228e528766f24ad7) ([#3592](https://github.com/tauri-apps/plugins-workspace/pull/3592)) On Windows, the second instance now allows the first instance to bring its window to the front before exiting, so focusing a window from the callback no longer gets refused by Windows.
diff --git a/plugins/single-instance/src/lib.rs b/plugins/single-instance/src/lib.rs
index c41a0fa10..eaf358486 100644
--- a/plugins/single-instance/src/lib.rs
+++ b/plugins/single-instance/src/lib.rs
@@ -15,7 +15,7 @@
 )]
 #![cfg(not(any(target_os = "android", target_os = "ios")))]
 
-use tauri::{plugin::TauriPlugin, AppHandle, Manager, Runtime};
+use tauri::{AppHandle, Manager, Runtime, plugin::TauriPlugin};
 
 #[cfg(target_os = "windows")]
 #[path = "platform_impl/windows.rs"]
@@ -33,16 +33,39 @@ mod semver_compat;
 pub(crate) type SingleInstanceCallback<R> =
     dyn FnMut(&AppHandle<R>, Vec<String>, String) + Send + Sync + 'static;
 
+/// Initializes the plugin, calling `f` whenever a second instance of the app is started.
+///
+/// This is a shortcut for [`Builder::new`] with [`Builder::callback`] set to `f`, then
+/// [`Builder::build`]. Use [`Builder`] directly if you need to set a custom [`Builder::dbus_id`].
+///
+/// `f` is called with the app handle, the second instance's command line arguments
+/// (as collected by [`std::env::args`], so the first element is the executable path) and its
+/// current working directory. If the `deep-link` feature is enabled, the arguments are first
+/// forwarded to [`tauri-plugin-deep-link`](https://crates.io/crates/tauri-plugin-deep-link)
+/// before `f` runs.
+///
+/// The second instance never reaches [`tauri::Builder::run`]: it hands its arguments and working
+/// directory off to the first instance and exits immediately.
 pub fn init<R: Runtime, F: FnMut(&AppHandle<R>, Vec<String>, String) + Send + Sync + 'static>(
     f: F,
 ) -> TauriPlugin<R> {
     Builder::new().callback(f).build()
 }
 
+/// Releases the resources this plugin uses to detect other instances (the named mutex on
+/// Windows, the D-Bus name on Linux or the Unix socket on macOS).
+///
+/// The plugin calls this automatically on [`tauri::RunEvent::Exit`], so you normally don't need
+/// to call it yourself. Call it manually before terminating the process through means that skip
+/// that event, such as [`std::process::exit`], so a future instance of the app isn't mistaken
+/// for a still-running one.
 pub fn destroy<R: Runtime, M: Manager<R>>(manager: &M) {
     platform_impl::destroy(manager)
 }
 
+/// Builds the single-instance plugin.
+///
+/// Created with [`Builder::new`] and consumed by [`Builder::build`].
 pub struct Builder<R: Runtime> {
     callback: Box<SingleInstanceCallback<R>>,
     dbus_id: Option<String>,
@@ -63,6 +86,10 @@ impl<R: Runtime> Default for Builder<R> {
 }
 
 impl<R: Runtime> Builder<R> {
+    /// Creates a new builder with a no-op callback (or, when the `deep-link` feature is enabled,
+    /// a callback that only forwards the arguments to the deep-link plugin) and no custom D-Bus
+    /// ID. Use [`Builder::callback`] and [`Builder::dbus_id`] to configure it, then
+    /// [`Builder::build`] to create the plugin.
     pub fn new() -> Self {
         Default::default()
     }
@@ -93,6 +120,10 @@ impl<R: Runtime> Builder<R> {
         self
     }
 
+    /// Builds the single-instance [`TauriPlugin`].
+    ///
+    /// Register it first among your app's plugins, since the plugins run in the order they were
+    /// added and a second instance must be detected before the rest of your setup runs.
     pub fn build(self) -> TauriPlugin<R> {
         platform_impl::init(
             self.callback,
diff --git a/plugins/single-instance/src/platform_impl/linux.rs b/plugins/single-instance/src/platform_impl/linux.rs
index 892baee7f..107f3e743 100644
--- a/plugins/single-instance/src/platform_impl/linux.rs
+++ b/plugins/single-instance/src/platform_impl/linux.rs
@@ -7,8 +7,8 @@ use crate::semver_compat::semver_compat_string;
 
 use crate::SingleInstanceCallback;
 use tauri::{
-    plugin::{self, TauriPlugin},
     AppHandle, Manager, RunEvent, Runtime,
+    plugin::{self, TauriPlugin},
 };
 use zbus::{blocking::Connection, interface, names::WellKnownName};
 
@@ -101,12 +101,11 @@ pub fn init<R: Runtime>(
 }
 
 pub fn destroy<R: Runtime, M: Manager<R>>(manager: &M) {
-    if let Some(connection) = manager.try_state::<ConnectionHandle>() {
-        if let Some(dbus_name) = manager
+    if let Some(connection) = manager.try_state::<ConnectionHandle>()
+        && let Some(dbus_name) = manager
             .try_state::<DBusName>()
             .and_then(|name| WellKnownName::try_from(name.0.clone()).ok())
-        {
-            let _ = connection.0.release_name(dbus_name);
-        }
+    {
+        let _ = connection.0.release_name(dbus_name);
     }
 }
diff --git a/plugins/single-instance/src/platform_impl/macos.rs b/plugins/single-instance/src/platform_impl/macos.rs
index bd2c74a7e..ccd66f360 100644
--- a/plugins/single-instance/src/platform_impl/macos.rs
+++ b/plugins/single-instance/src/platform_impl/macos.rs
@@ -8,12 +8,12 @@ use std::{
     path::PathBuf,
 };
 
+use crate::SingleInstanceCallback;
 #[cfg(feature = "semver")]
 use crate::semver_compat::semver_compat_string;
-use crate::SingleInstanceCallback;
 use tauri::{
-    plugin::{self, TauriPlugin},
     AppHandle, Config, Manager, RunEvent, Runtime,
+    plugin::{self, TauriPlugin},
 };
 use tokio::io::AsyncReadExt;
 
diff --git a/plugins/single-instance/src/platform_impl/windows.rs b/plugins/single-instance/src/platform_impl/windows.rs
index 196f7851f..075845c59 100644
--- a/plugins/single-instance/src/platform_impl/windows.rs
+++ b/plugins/single-instance/src/platform_impl/windows.rs
@@ -8,20 +8,20 @@ use crate::semver_compat::semver_compat_string;
 use crate::SingleInstanceCallback;
 use std::ffi::CStr;
 use tauri::{
-    plugin::{self, TauriPlugin},
     AppHandle, Manager, RunEvent, Runtime,
+    plugin::{self, TauriPlugin},
 };
 use windows_sys::Win32::{
-    Foundation::{CloseHandle, GetLastError, ERROR_ALREADY_EXISTS, HWND, LPARAM, LRESULT, WPARAM},
+    Foundation::{CloseHandle, ERROR_ALREADY_EXISTS, GetLastError, HWND, LPARAM, LRESULT, WPARAM},
     System::{
         DataExchange::COPYDATASTRUCT,
         LibraryLoader::GetModuleHandleW,
         Threading::{CreateMutexW, ReleaseMutex},
     },
     UI::WindowsAndMessaging::{
-        self as w32wm, AllowSetForegroundWindow, CreateWindowExW, DefWindowProcW, DestroyWindow,
-        FindWindowW, GetWindowThreadProcessId, RegisterClassExW, SendMessageW, CREATESTRUCTW,
-        GWLP_USERDATA, GWL_STYLE, WINDOW_LONG_PTR_INDEX, WM_COPYDATA, WM_CREATE, WM_DESTROY,
+        self as w32wm, AllowSetForegroundWindow, CREATESTRUCTW, CreateWindowExW, DefWindowProcW,
+        DestroyWindow, FindWindowW, GWL_STYLE, GWLP_USERDATA, GetWindowThreadProcessId,
+        RegisterClassExW, SendMessageW, WINDOW_LONG_PTR_INDEX, WM_COPYDATA, WM_CREATE, WM_DESTROY,
         WNDCLASSEXW, WS_EX_LAYERED, WS_EX_NOACTIVATE, WS_EX_TOOLWINDOW, WS_EX_TRANSPARENT,
         WS_OVERLAPPED, WS_POPUP, WS_VISIBLE,
     },
diff --git a/plugins/sql/CHANGELOG.md b/plugins/sql/CHANGELOG.md
index 7103aabff..1a893ef49 100644
--- a/plugins/sql/CHANGELOG.md
+++ b/plugins/sql/CHANGELOG.md
@@ -8,6 +8,12 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.5.0]
+
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
 ## [2.4.1]
 
 - [`f8053e65`](https://github.com/tauri-apps/plugins-workspace/commit/f8053e659e4ccd85c1f52833411ff8417cbc5e69) ([#3527](https://github.com/tauri-apps/plugins-workspace/pull/3527) by [@Legend-Master](https://github.com/tauri-apps/plugins-workspace/../../Legend-Master)) Documented Cargo feature flags in each plugin's crate-level documentation.
diff --git a/plugins/sql/guest-js/index.ts b/plugins/sql/guest-js/index.ts
index 11d39e70b..19e40afac 100644
--- a/plugins/sql/guest-js/index.ts
+++ b/plugins/sql/guest-js/index.ts
@@ -2,8 +2,19 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+/**
+ * Interface with SQL databases through [sqlx](https://github.com/launchbadge/sqlx).
+ * Which database engines can be used depends on the drivers enabled on the Rust
+ * side of the plugin: SQLite, MySQL and PostgreSQL.
+ *
+ * @module
+ */
+
 import { invoke } from '@tauri-apps/api/core'
 
+/**
+ * The outcome of a statement run through {@link Database.execute}.
+ */
 export interface QueryResult {
   /** The number of rows affected by the query. */
   rowsAffected: number
@@ -23,9 +34,30 @@ export interface QueryResult {
  *
  * The `Database` class serves as the primary interface for
  * communicating with the rust side of the sql plugin.
+ *
+ * @since 2.0.0
  */
 export default class Database {
+  /**
+   * The connection string identifying the database on the Rust side,
+   * for instance `sqlite:test.db`, `mysql://user:pass@host/database`
+   * or `postgres://user:pass@host/database`.
+   */
   path: string
+
+  /**
+   * Creates a `Database` instance for the given connection string without
+   * opening a connection to it. Use {@link Database.load} to connect to the
+   * database, or {@link Database.get} for a database that is already loaded.
+   *
+   * @param path The database connection string, such as `sqlite:test.db`.
+   *
+   * @example
+   * ```typescript
+   * import Database from '@tauri-apps/plugin-sql'
+   * const db = new Database('sqlite:test.db')
+   * ```
+   */
   constructor(path: string) {
     this.path = path
   }
@@ -41,9 +73,13 @@ export default class Database {
    * The path is relative to `tauri::path::BaseDirectory::App` and must start with `sqlite:`.
    *
    * @example
-   * ```ts
-   * const db = await Database.load("sqlite:test.db");
+   * ```typescript
+   * import Database from '@tauri-apps/plugin-sql'
+   * const db = await Database.load('sqlite:test.db')
    * ```
+   *
+   * @param path The database connection string, such as `sqlite:test.db`. The database is created if it does not exist yet, and any migration registered for it on the Rust side is run.
+   * @returns A promise resolving to a `Database` instance connected to the given database.
    */
   static async load(path: string): Promise<Database> {
     const _path = await invoke<string>('plugin:sql|load', {
@@ -65,9 +101,13 @@ export default class Database {
    * The path is relative to `tauri::path::BaseDirectory::App` and must start with `sqlite:`.
    *
    * @example
-   * ```ts
-   * const db = Database.get("sqlite:test.db");
+   * ```typescript
+   * import Database from '@tauri-apps/plugin-sql'
+   * const db = Database.get('sqlite:test.db')
    * ```
+   *
+   * @param path The database connection string, such as `sqlite:test.db`.
+   * @returns A `Database` instance bound to the given connection string.
    */
   static get(path: string): Database {
     return new Database(path)
@@ -79,7 +119,10 @@ export default class Database {
    * Passes a SQL expression to the database for execution.
    *
    * @example
-   * ```ts
+   * ```typescript
+   * import Database from '@tauri-apps/plugin-sql'
+   * const db = await Database.load('sqlite:test.db')
+   *
    * // for sqlite & postgres
    * // INSERT example
    * const result = await db.execute(
@@ -104,6 +147,10 @@ export default class Database {
    *    [ todos.title, todos.status, todos.id ]
    * );
    * ```
+   *
+   * @param query The SQL statement to run, using `$1`, `$2`, ... placeholders on SQLite and PostgreSQL and `?` placeholders on MySQL.
+   * @param bindValues The values bound to the query placeholders, in the order they appear in the statement. Defaults to no values.
+   * @returns A promise resolving to the number of rows affected by the statement and the last inserted id.
    */
   async execute(query: string, bindValues?: unknown[]): Promise<QueryResult> {
     const [rowsAffected, lastInsertId] = await invoke<[number, number]>(
@@ -126,7 +173,10 @@ export default class Database {
    * Passes in a SELECT query to the database for execution.
    *
    * @example
-   * ```ts
+   * ```typescript
+   * import Database from '@tauri-apps/plugin-sql'
+   * const db = await Database.load('sqlite:test.db')
+   *
    * // for sqlite & postgres
    * const result = await db.select(
    *    "SELECT * from todos WHERE id = $1", [ id ]
@@ -137,6 +187,10 @@ export default class Database {
    *    "SELECT * from todos WHERE id = ?", [ id ]
    * );
    * ```
+   *
+   * @param query The SQL query to run, using `$1`, `$2`, ... placeholders on SQLite and PostgreSQL and `?` placeholders on MySQL.
+   * @param bindValues The values bound to the query placeholders, in the order they appear in the query. Defaults to no values.
+   * @returns A promise resolving to the selected rows, each row being an object keyed by column name.
    */
   async select<T>(query: string, bindValues?: unknown[]): Promise<T> {
     const result = await invoke<T>('plugin:sql|select', {
@@ -154,10 +208,14 @@ export default class Database {
    * Closes the database connection pool.
    *
    * @example
-   * ```ts
+   * ```typescript
+   * import Database from '@tauri-apps/plugin-sql'
+   * const db = await Database.load('sqlite:test.db')
    * const success = await db.close()
    * ```
+   *
    * @param db - Optionally state the name of a database if you are managing more than one. Otherwise, all database pools will be in scope.
+   * @returns A promise resolving to `true` once the matching connection pools have been closed.
    */
   async close(db?: string): Promise<boolean> {
     const success = await invoke<boolean>('plugin:sql|close', {
diff --git a/plugins/sql/src/commands.rs b/plugins/sql/src/commands.rs
index 760d00b2d..89b89bea3 100644
--- a/plugins/sql/src/commands.rs
+++ b/plugins/sql/src/commands.rs
@@ -5,7 +5,7 @@
 use indexmap::IndexMap;
 use serde_json::Value as JsonValue;
 use sqlx::migrate::Migrator;
-use tauri::{command, AppHandle, Runtime, State};
+use tauri::{AppHandle, Runtime, State, command};
 
 use crate::{DbInstances, DbPool, Error, LastInsertId, Migrations};
 
diff --git a/plugins/sql/src/decode/mysql.rs b/plugins/sql/src/decode/mysql.rs
index 53fd20c7c..c8eaeffbd 100644
--- a/plugins/sql/src/decode/mysql.rs
+++ b/plugins/sql/src/decode/mysql.rs
@@ -3,7 +3,7 @@
 // SPDX-License-Identifier: MIT
 
 use serde_json::Value as JsonValue;
-use sqlx::{mysql::MySqlValueRef, TypeInfo, Value, ValueRef};
+use sqlx::{TypeInfo, Value, ValueRef, mysql::MySqlValueRef};
 use time::{Date, OffsetDateTime, PrimitiveDateTime, Time};
 
 use crate::Error;
diff --git a/plugins/sql/src/decode/postgres.rs b/plugins/sql/src/decode/postgres.rs
index 4af9b713d..083322df1 100644
--- a/plugins/sql/src/decode/postgres.rs
+++ b/plugins/sql/src/decode/postgres.rs
@@ -4,7 +4,7 @@
 
 use rust_decimal::prelude::ToPrimitive;
 use serde_json::Value as JsonValue;
-use sqlx::{postgres::PgValueRef, TypeInfo, Value, ValueRef};
+use sqlx::{TypeInfo, Value, ValueRef, postgres::PgValueRef};
 use time::{Date, OffsetDateTime, PrimitiveDateTime, Time};
 use uuid::Uuid;
 
diff --git a/plugins/sql/src/decode/sqlite.rs b/plugins/sql/src/decode/sqlite.rs
index 1f0808ae3..c310ac398 100644
--- a/plugins/sql/src/decode/sqlite.rs
+++ b/plugins/sql/src/decode/sqlite.rs
@@ -3,7 +3,7 @@
 // SPDX-License-Identifier: MIT
 
 use serde_json::Value as JsonValue;
-use sqlx::{sqlite::SqliteValueRef, TypeInfo, Value, ValueRef};
+use sqlx::{TypeInfo, Value, ValueRef, sqlite::SqliteValueRef};
 use time::{Date, PrimitiveDateTime, Time};
 
 use crate::Error;
diff --git a/plugins/sql/src/error.rs b/plugins/sql/src/error.rs
index 5ac845b8a..0f4f68198 100644
--- a/plugins/sql/src/error.rs
+++ b/plugins/sql/src/error.rs
@@ -4,16 +4,30 @@
 
 use serde::{Serialize, Serializer};
 
+/// Errors that can happen while connecting to a database, running migrations
+/// or executing a query.
+///
+/// Serializes to its [`std::fmt::Display`] representation, which is what the
+/// frontend receives when a command fails.
 #[derive(Debug, thiserror::Error)]
 pub enum Error {
+    /// An error reported by [`sqlx`], such as a failed connection or a query the database rejected.
     #[error(transparent)]
     Sql(#[from] sqlx::Error),
+    /// A migration registered with [`crate::Builder::add_migrations`] could not be resolved or applied.
     #[error(transparent)]
     Migration(#[from] sqlx::migrate::MigrateError),
+    /// The connection string is missing its `scheme:` prefix, or the scheme does not
+    /// match any of the enabled database drivers. Contains the offending connection string.
     #[error("invalid connection url: {0}")]
     InvalidDbUrl(String),
+    /// The requested database has not been connected to with the `load` command
+    /// and is not listed in the plugin's `preload` configuration.
+    /// Contains the connection string of the database.
     #[error("database {0} not loaded")]
     DatabaseNotLoaded(String),
+    /// A value selected from the database has a SQL type that cannot be converted
+    /// to JSON. Contains the name of that SQL type.
     #[error("unsupported datatype: {0}")]
     UnsupportedDatatype(String),
 }
diff --git a/plugins/sql/src/lib.rs b/plugins/sql/src/lib.rs
index e9df558a3..20eee0337 100644
--- a/plugins/sql/src/lib.rs
+++ b/plugins/sql/src/lib.rs
@@ -33,13 +33,18 @@ use sqlx::{
     migrate::{Migration as SqlxMigration, MigrationSource, MigrationType, Migrator},
 };
 use tauri::{
-    plugin::{Builder as PluginBuilder, TauriPlugin},
     Manager, RunEvent, Runtime,
+    plugin::{Builder as PluginBuilder, TauriPlugin},
 };
 use tokio::sync::{Mutex, RwLock};
 
 use std::collections::HashMap;
 
+/// The connection pools the plugin currently holds, keyed by the connection
+/// string the database was loaded with.
+///
+/// It is managed as Tauri state, so Rust code can reach the pools with
+/// [`tauri::Manager::state`] and run its own queries.
 #[derive(Default)]
 pub struct DbInstances(pub RwLock<HashMap<String, DbPool>>);
 
@@ -58,15 +63,22 @@ pub(crate) enum LastInsertId {
 
 struct Migrations(Mutex<HashMap<String, MigrationList>>);
 
+/// The `plugins > sql` section of the Tauri configuration file.
 #[derive(Default, Clone, Deserialize)]
 pub struct PluginConfig {
+    /// Connection strings of the databases to connect to when the application
+    /// starts. Empty by default.
     #[serde(default)]
     preload: Vec<String>,
 }
 
+/// The direction of a [`Migration`].
 #[derive(Debug)]
 pub enum MigrationKind {
+    /// Moves the schema forward. Only migrations of this kind are executed by the plugin.
     Up,
+    /// Reverts an [`Up`](Self::Up) migration. Migrations of this kind are currently
+    /// never executed by the plugin.
     Down,
 }
 
@@ -80,11 +92,23 @@ impl From<MigrationKind> for MigrationType {
 }
 
 /// A migration definition.
+///
+/// Migrations are attached to a database with [`Builder::add_migrations`] and run
+/// the first time that database is connected to - on startup for the databases
+/// listed in the `preload` configuration, otherwise when the frontend loads it.
+/// Only [`MigrationKind::Up`] migrations are executed, in ascending
+/// [`version`](Self::version) order, and sqlx keeps track of the versions that
+/// already ran so each one is applied at most once per database.
 #[derive(Debug)]
 pub struct Migration {
+    /// The version of this migration. Determines the order in which migrations
+    /// run and identifies the migration in the database.
     pub version: i64,
+    /// A human readable description of what the migration does.
     pub description: &'static str,
+    /// The SQL executed when the migration runs.
     pub sql: &'static str,
+    /// Whether this migration moves the schema forward or reverts it.
     pub kind: MigrationKind,
 }
 
@@ -127,9 +151,16 @@ pub struct Builder {
 }
 
 impl Builder {
+    /// Creates a new builder with no migrations registered.
+    ///
+    /// Prints a message to stderr when none of the `sqlite`, `mysql` and
+    /// `postgres` Cargo features is enabled, since no database can be
+    /// connected to in that case.
     pub fn new() -> Self {
         #[cfg(not(any(feature = "sqlite", feature = "mysql", feature = "postgres")))]
-        eprintln!("No sql driver enabled. Please set at least one of the \"sqlite\", \"mysql\", \"postgres\" feature flags.");
+        eprintln!(
+            "No sql driver enabled. Please set at least one of the \"sqlite\", \"mysql\", \"postgres\" feature flags."
+        );
 
         Self::default()
     }
@@ -143,6 +174,33 @@ impl Builder {
         self
     }
 
+    /// Builds the SQL plugin.
+    ///
+    /// On setup the plugin connects to every database listed in the `preload`
+    /// array of its [configuration](PluginConfig), running the migrations
+    /// registered for them, and it closes all connection pools when the
+    /// application exits.
+    ///
+    /// # Examples
+    ///
+    /// ```
+    /// use tauri_plugin_sql::{Builder, Migration, MigrationKind};
+    ///
+    /// fn sql_plugin<R: tauri::Runtime>(
+    /// ) -> tauri::plugin::TauriPlugin<R, Option<tauri_plugin_sql::PluginConfig>> {
+    ///     Builder::new()
+    ///         .add_migrations(
+    ///             "sqlite:mydatabase.db",
+    ///             vec![Migration {
+    ///                 version: 1,
+    ///                 description: "create todos table",
+    ///                 sql: "CREATE TABLE todos (id INTEGER PRIMARY KEY, title TEXT);",
+    ///                 kind: MigrationKind::Up,
+    ///             }],
+    ///         )
+    ///         .build()
+    /// }
+    /// ```
     pub fn build<R: Runtime>(mut self) -> TauriPlugin<R, Option<PluginConfig>> {
         PluginBuilder::<R, Option<PluginConfig>>::new("sql")
             .invoke_handler(tauri::generate_handler![
diff --git a/plugins/sql/src/wrapper.rs b/plugins/sql/src/wrapper.rs
index d47b2d1cb..da0589433 100644
--- a/plugins/sql/src/wrapper.rs
+++ b/plugins/sql/src/wrapper.rs
@@ -8,7 +8,7 @@ use std::fs::create_dir_all;
 use indexmap::IndexMap;
 use serde_json::Value as JsonValue;
 #[cfg(any(feature = "sqlite", feature = "mysql", feature = "postgres"))]
-use sqlx::{migrate::MigrateDatabase, Column, Executor, Pool, Row};
+use sqlx::{Column, Executor, Pool, Row, migrate::MigrateDatabase};
 #[cfg(any(feature = "sqlite", feature = "mysql", feature = "postgres"))]
 use tauri::Manager;
 use tauri::{AppHandle, Runtime};
@@ -22,13 +22,23 @@ use sqlx::Sqlite;
 
 use crate::LastInsertId;
 
+/// A connection pool for one of the supported database drivers.
+///
+/// The variant is picked from the scheme of the connection string
+/// (`sqlite:`, `mysql:` or `postgres:`) and only the variants whose Cargo
+/// feature is enabled exist.
 pub enum DbPool {
+    /// A SQLite connection pool. Only available with the `sqlite` Cargo feature.
     #[cfg(feature = "sqlite")]
     Sqlite(Pool<Sqlite>),
+    /// A MySQL connection pool. Only available with the `mysql` Cargo feature.
     #[cfg(feature = "mysql")]
     MySql(Pool<MySql>),
+    /// A PostgreSQL connection pool. Only available with the `postgres` Cargo feature.
     #[cfg(feature = "postgres")]
     Postgres(Pool<Postgres>),
+    /// Placeholder used when none of the `sqlite`, `mysql` and `postgres` Cargo
+    /// features is enabled. Connecting always fails and every other operation is a no-op.
     #[cfg(not(any(feature = "sqlite", feature = "mysql", feature = "postgres")))]
     None,
 }
diff --git a/plugins/store/CHANGELOG.md b/plugins/store/CHANGELOG.md
index 6f87f43d4..405cd98f3 100644
--- a/plugins/store/CHANGELOG.md
+++ b/plugins/store/CHANGELOG.md
@@ -8,6 +8,12 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.5.0]
+
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
 ## [2.4.5]
 
 - [`c050e073`](https://github.com/tauri-apps/plugins-workspace/commit/c050e073b68205bae7389fb86958cb9331e1a3be) ([#3572](https://github.com/tauri-apps/plugins-workspace/pull/3572) by [@Legend-Master](https://github.com/tauri-apps/plugins-workspace/../../Legend-Master)) Fix `apply_pending_auto_save` can deadlock the store
diff --git a/plugins/store/examples/AppSettingsManager/src-tauri/Cargo.toml b/plugins/store/examples/AppSettingsManager/src-tauri/Cargo.toml
index 9e0095c20..e4feb9efc 100644
--- a/plugins/store/examples/AppSettingsManager/src-tauri/Cargo.toml
+++ b/plugins/store/examples/AppSettingsManager/src-tauri/Cargo.toml
@@ -5,7 +5,7 @@ description = "A Tauri App"
 authors = ["you"]
 license = ""
 repository = ""
-edition = "2021"
+edition = "2024"
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
 
diff --git a/plugins/store/guest-js/index.ts b/plugins/store/guest-js/index.ts
index a634ffe5f..1b4d5eedf 100644
--- a/plugins/store/guest-js/index.ts
+++ b/plugins/store/guest-js/index.ts
@@ -2,6 +2,15 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+/**
+ * Simple, persistent key-value store.
+ *
+ * A store is persisted to a file inside the application data directory and is shared with the
+ * Rust side of the application, which can read and write the same store through its own API.
+ *
+ * @module
+ */
+
 import { listen, type UnlistenFn } from '@tauri-apps/api/event'
 
 import { invoke, Resource } from '@tauri-apps/api/core'
@@ -47,14 +56,20 @@ export type StoreOptions = {
 /**
  * Create a new Store or load the existing store with the path.
  *
+ * If the file at the given path does not exist yet, the store is created in memory with the
+ * configured defaults and the file is only written on the first save.
+ *
  * @example
  * ```typescript
- * import { Store } from '@tauri-apps/api/store';
- * const store = await Store.load('store.json');
+ * import { load } from '@tauri-apps/plugin-store';
+ * const store = await load('store.json');
  * ```
  *
  * @param path Path to save the store in `app_data_dir`
  * @param options Store configuration options
+ * @returns A promise resolving to the loaded store.
+ *
+ * @since 2.1.0
  */
 export async function load(
   path: string,
@@ -73,11 +88,14 @@ export async function load(
  *
  * @example
  * ```typescript
- * import { getStore } from '@tauri-apps/api/store';
+ * import { getStore } from '@tauri-apps/plugin-store';
  * const store = await getStore('store.json');
  * ```
  *
  * @param path Path of the store.
+ * @returns A promise resolving to the store instance, or `null` if it is not loaded.
+ *
+ * @since 2.1.0
  */
 export async function getStore(path: string): Promise<Store | null> {
   return await Store.get(path)
@@ -85,6 +103,11 @@ export async function getStore(path: string): Promise<Store | null> {
 
 /**
  * A lazy loaded key-value store persisted by the backend layer.
+ *
+ * The underlying {@linkcode Store} is only created or loaded when one of the methods of this
+ * class is called for the first time, and every call afterwards reuses that same instance.
+ *
+ * @since 2.1.0
  */
 export class LazyStore implements IStore {
   private _store?: Promise<Store>
@@ -97,9 +120,18 @@ export class LazyStore implements IStore {
   }
 
   /**
+   * Creates a handle to the store at the given path without loading it yet.
+   *
    * Note that the options are not applied if someone else already created the store
+   *
    * @param path Path to save the store in `app_data_dir`
    * @param options Store configuration options
+   *
+   * @example
+   * ```typescript
+   * import { LazyStore } from '@tauri-apps/plugin-store';
+   * const store = new LazyStore('store.json');
+   * ```
    */
   constructor(
     private readonly path: string,
@@ -108,59 +140,252 @@ export class LazyStore implements IStore {
 
   /**
    * Init/load the store if it's not loaded already
+   *
+   * @example
+   * ```typescript
+   * import { LazyStore } from '@tauri-apps/plugin-store';
+   * const store = new LazyStore('store.json');
+   * await store.init();
+   * ```
    */
   async init(): Promise<void> {
     await this.store
   }
 
+  /**
+   * Inserts a key-value pair into the store, loading it first if needed.
+   *
+   * Delegates to {@linkcode Store.set} on the underlying store.
+   *
+   * @example
+   * ```typescript
+   * import { LazyStore } from '@tauri-apps/plugin-store';
+   * const store = new LazyStore('store.json');
+   * await store.set('some-key', { value: 5 });
+   * ```
+   *
+   * @param key The key to insert the value at.
+   * @param value The value to store, which must be serializable to JSON.
+   */
   async set(key: string, value: unknown): Promise<void> {
     return (await this.store).set(key, value)
   }
 
+  /**
+   * Returns the value for the given `key` or `undefined` if the key does not exist.
+   *
+   * Delegates to {@linkcode Store.get} on the underlying store, loading it first if needed.
+   *
+   * @example
+   * ```typescript
+   * import { LazyStore } from '@tauri-apps/plugin-store';
+   * const store = new LazyStore('store.json');
+   * const value = await store.get<{ value: number }>('some-key');
+   * ```
+   *
+   * @param key The key to read the value of.
+   * @returns A promise resolving to the stored value, or `undefined` if the key does not exist.
+   */
   async get<T>(key: string): Promise<T | undefined> {
     return (await this.store).get<T>(key)
   }
 
+  /**
+   * Returns `true` if the given `key` exists in the store.
+   *
+   * Delegates to {@linkcode Store.has} on the underlying store, loading it first if needed.
+   *
+   * @example
+   * ```typescript
+   * import { LazyStore } from '@tauri-apps/plugin-store';
+   * const store = new LazyStore('store.json');
+   * const exists = await store.has('some-key');
+   * ```
+   *
+   * @param key The key to check.
+   * @returns A promise resolving to `true` if the key exists in the store.
+   */
   async has(key: string): Promise<boolean> {
     return (await this.store).has(key)
   }
 
+  /**
+   * Removes a key-value pair from the store.
+   *
+   * Delegates to {@linkcode Store.delete} on the underlying store, loading it first if needed.
+   *
+   * @example
+   * ```typescript
+   * import { LazyStore } from '@tauri-apps/plugin-store';
+   * const store = new LazyStore('store.json');
+   * const removed = await store.delete('some-key');
+   * ```
+   *
+   * @param key The key to remove.
+   * @returns A promise resolving to `true` if the key existed and was removed.
+   */
   async delete(key: string): Promise<boolean> {
     return (await this.store).delete(key)
   }
 
+  /**
+   * Clears the store, removing all key-value pairs.
+   *
+   * Note: To clear the storage and reset it to its `default` value, use {@linkcode reset} instead.
+   * Delegates to {@linkcode Store.clear} on the underlying store, loading it first if needed.
+   *
+   * @example
+   * ```typescript
+   * import { LazyStore } from '@tauri-apps/plugin-store';
+   * const store = new LazyStore('store.json');
+   * await store.clear();
+   * ```
+   */
   async clear(): Promise<void> {
     await (await this.store).clear()
   }
 
+  /**
+   * Resets the store to its `default` value.
+   *
+   * If no default value has been set, this method behaves identical to {@linkcode clear}.
+   * Delegates to {@linkcode Store.reset} on the underlying store, loading it first if needed.
+   *
+   * @example
+   * ```typescript
+   * import { LazyStore } from '@tauri-apps/plugin-store';
+   * const store = new LazyStore('store.json', { defaults: { 'some-key': 0 } });
+   * await store.reset();
+   * ```
+   */
   async reset(): Promise<void> {
     await (await this.store).reset()
   }
 
+  /**
+   * Returns a list of all keys in the store.
+   *
+   * Delegates to {@linkcode Store.keys} on the underlying store, loading it first if needed.
+   *
+   * @example
+   * ```typescript
+   * import { LazyStore } from '@tauri-apps/plugin-store';
+   * const store = new LazyStore('store.json');
+   * const keys = await store.keys();
+   * ```
+   *
+   * @returns A promise resolving to the list of keys, in arbitrary order.
+   */
   async keys(): Promise<string[]> {
     return (await this.store).keys()
   }
 
+  /**
+   * Returns a list of all values in the store.
+   *
+   * Delegates to {@linkcode Store.values} on the underlying store, loading it first if needed.
+   *
+   * @example
+   * ```typescript
+   * import { LazyStore } from '@tauri-apps/plugin-store';
+   * const store = new LazyStore('store.json');
+   * const values = await store.values();
+   * ```
+   *
+   * @returns A promise resolving to the list of values, in arbitrary order.
+   */
   async values<T>(): Promise<T[]> {
     return (await this.store).values<T>()
   }
 
+  /**
+   * Returns a list of all entries in the store.
+   *
+   * Delegates to {@linkcode Store.entries} on the underlying store, loading it first if needed.
+   *
+   * @example
+   * ```typescript
+   * import { LazyStore } from '@tauri-apps/plugin-store';
+   * const store = new LazyStore('store.json');
+   * const entries = await store.entries();
+   * ```
+   *
+   * @returns A promise resolving to the list of key-value pairs, in arbitrary order.
+   */
   async entries<T>(): Promise<Array<[key: string, value: T]>> {
     return (await this.store).entries<T>()
   }
 
+  /**
+   * Returns the number of key-value pairs in the store.
+   *
+   * Delegates to {@linkcode Store.length} on the underlying store, loading it first if needed.
+   *
+   * @example
+   * ```typescript
+   * import { LazyStore } from '@tauri-apps/plugin-store';
+   * const store = new LazyStore('store.json');
+   * const length = await store.length();
+   * ```
+   *
+   * @returns A promise resolving to the number of key-value pairs in the store.
+   */
   async length(): Promise<number> {
     return (await this.store).length()
   }
 
+  /**
+   * Attempts to load the on-disk state at the store's `path` into memory.
+   *
+   * Delegates to {@linkcode Store.reload} on the underlying store, loading it first if needed.
+   *
+   * @example
+   * ```typescript
+   * import { LazyStore } from '@tauri-apps/plugin-store';
+   * const store = new LazyStore('store.json');
+   * await store.reload({ ignoreDefaults: true });
+   * ```
+   *
+   * @param options Options to change how the on-disk state is merged into the store.
+   */
   async reload(options?: ReloadOptions): Promise<void> {
     await (await this.store).reload(options)
   }
 
+  /**
+   * Saves the store to disk at the store's `path`.
+   *
+   * Delegates to {@linkcode Store.save} on the underlying store, loading it first if needed.
+   *
+   * @example
+   * ```typescript
+   * import { LazyStore } from '@tauri-apps/plugin-store';
+   * const store = new LazyStore('store.json');
+   * await store.save();
+   * ```
+   */
   async save(): Promise<void> {
     await (await this.store).save()
   }
 
+  /**
+   * Listen to changes on a store key.
+   *
+   * Delegates to {@linkcode Store.onKeyChange} on the underlying store, loading it first if needed.
+   *
+   * @example
+   * ```typescript
+   * import { LazyStore } from '@tauri-apps/plugin-store';
+   * const store = new LazyStore('store.json');
+   * const unlisten = await store.onKeyChange<{ value: number }>('some-key', (value) => {
+   *   console.log(value);
+   * });
+   * ```
+   *
+   * @param key The key to watch for changes.
+   * @param cb Callback invoked with the new value, or `undefined` when the key was removed.
+   * @returns A promise resolving to a function to unlisten to the event.
+   */
   async onKeyChange<T>(
     key: string,
     cb: (value: T | undefined) => void
@@ -168,12 +393,43 @@ export class LazyStore implements IStore {
     return (await this.store).onKeyChange<T>(key, cb)
   }
 
+  /**
+   * Listen to changes on the store.
+   *
+   * Delegates to {@linkcode Store.onChange} on the underlying store, loading it first if needed.
+   *
+   * @example
+   * ```typescript
+   * import { LazyStore } from '@tauri-apps/plugin-store';
+   * const store = new LazyStore('store.json');
+   * const unlisten = await store.onChange<{ value: number }>((key, value) => {
+   *   console.log(key, value);
+   * });
+   * ```
+   *
+   * @param cb Callback invoked with the changed key and its new value, which is `undefined` when the key was removed.
+   * @returns A promise resolving to a function to unlisten to the event.
+   */
   async onChange<T>(
     cb: (key: string, value: T | undefined) => void
   ): Promise<UnlistenFn> {
     return (await this.store).onChange<T>(cb)
   }
 
+  /**
+   * Close the store and cleans up this resource from memory.
+   * **You should not call any method on this object anymore and should drop any reference to it.**
+   *
+   * Delegates to {@linkcode Store.close} on the underlying store.
+   * If the store was never loaded, this method does nothing.
+   *
+   * @example
+   * ```typescript
+   * import { LazyStore } from '@tauri-apps/plugin-store';
+   * const store = new LazyStore('store.json');
+   * await store.close();
+   * ```
+   */
   async close(): Promise<void> {
     if (this._store) {
       await (await this._store).close()
@@ -183,6 +439,12 @@ export class LazyStore implements IStore {
 
 /**
  * A key-value store persisted by the backend layer.
+ *
+ * The values are kept in memory and written to the store's file on {@linkcode Store.save},
+ * and automatically after every modification unless auto save is disabled with
+ * {@linkcode StoreOptions.autoSave}.
+ *
+ * @since 2.0.0
  */
 export class Store extends Resource implements IStore {
   private constructor(rid: number) {
@@ -192,14 +454,18 @@ export class Store extends Resource implements IStore {
   /**
    * Create a new Store or load the existing store with the path.
    *
+   * If the file at the given path does not exist yet, the store is created in memory with the
+   * configured defaults and the file is only written on the first save.
+   *
    * @example
    * ```typescript
-   * import { Store } from '@tauri-apps/api/store';
+   * import { Store } from '@tauri-apps/plugin-store';
    * const store = await Store.load('store.json');
    * ```
    *
    * @param path Path to save the store in `app_data_dir`
    * @param options Store configuration options
+   * @returns A promise resolving to the loaded store.
    */
   static async load(path: string, options?: StoreOptions): Promise<Store> {
     const rid = await invoke<number>('plugin:store|load', {
@@ -219,7 +485,7 @@ export class Store extends Resource implements IStore {
    *
    * @example
    * ```typescript
-   * import { Store } from '@tauri-apps/api/store';
+   * import { Store } from '@tauri-apps/plugin-store';
    * let store = await Store.get('store.json');
    * if (!store) {
    *   store = await Store.load('store.json');
@@ -227,6 +493,7 @@ export class Store extends Resource implements IStore {
    * ```
    *
    * @param path Path of the store.
+   * @returns A promise resolving to the store instance, or `null` if it is not loaded.
    */
   static async get(path: string): Promise<Store | null> {
     return await invoke<number | null>('plugin:store|get_store', { path }).then(
@@ -234,6 +501,22 @@ export class Store extends Resource implements IStore {
     )
   }
 
+  /**
+   * Inserts a key-value pair into the store.
+   *
+   * A change event is emitted for the key and, unless auto save is disabled, the store is
+   * scheduled to be written to disk.
+   *
+   * @example
+   * ```typescript
+   * import { Store } from '@tauri-apps/plugin-store';
+   * const store = await Store.load('store.json');
+   * await store.set('some-key', { value: 5 });
+   * ```
+   *
+   * @param key The key to insert the value at.
+   * @param value The value to store, which must be serializable to JSON.
+   */
   async set(key: string, value: unknown): Promise<void> {
     await invoke('plugin:store|set', {
       rid: this.rid,
@@ -242,6 +525,19 @@ export class Store extends Resource implements IStore {
     })
   }
 
+  /**
+   * Returns the value for the given `key` or `undefined` if the key does not exist.
+   *
+   * @example
+   * ```typescript
+   * import { Store } from '@tauri-apps/plugin-store';
+   * const store = await Store.load('store.json');
+   * const value = await store.get<{ value: number }>('some-key');
+   * ```
+   *
+   * @param key The key to read the value of.
+   * @returns A promise resolving to the stored value, or `undefined` if the key does not exist.
+   */
   async get<T>(key: string): Promise<T | undefined> {
     const [value, exists] = await invoke<[T, boolean]>('plugin:store|get', {
       rid: this.rid,
@@ -250,6 +546,19 @@ export class Store extends Resource implements IStore {
     return exists ? value : undefined
   }
 
+  /**
+   * Returns `true` if the given `key` exists in the store.
+   *
+   * @example
+   * ```typescript
+   * import { Store } from '@tauri-apps/plugin-store';
+   * const store = await Store.load('store.json');
+   * const exists = await store.has('some-key');
+   * ```
+   *
+   * @param key The key to check.
+   * @returns A promise resolving to `true` if the key exists in the store.
+   */
   async has(key: string): Promise<boolean> {
     return await invoke('plugin:store|has', {
       rid: this.rid,
@@ -257,6 +566,22 @@ export class Store extends Resource implements IStore {
     })
   }
 
+  /**
+   * Removes a key-value pair from the store.
+   *
+   * A change event is emitted when the key existed and, unless auto save is disabled, the store
+   * is scheduled to be written to disk.
+   *
+   * @example
+   * ```typescript
+   * import { Store } from '@tauri-apps/plugin-store';
+   * const store = await Store.load('store.json');
+   * const removed = await store.delete('some-key');
+   * ```
+   *
+   * @param key The key to remove.
+   * @returns A promise resolving to `true` if the key existed and was removed.
+   */
   async delete(key: string): Promise<boolean> {
     return await invoke('plugin:store|delete', {
       rid: this.rid,
@@ -264,38 +589,165 @@ export class Store extends Resource implements IStore {
     })
   }
 
+  /**
+   * Clears the store, removing all key-value pairs.
+   *
+   * Note: To clear the storage and reset it to its `default` value, use {@linkcode reset} instead.
+   * A change event is emitted for every removed key.
+   *
+   * @example
+   * ```typescript
+   * import { Store } from '@tauri-apps/plugin-store';
+   * const store = await Store.load('store.json');
+   * await store.clear();
+   * ```
+   */
   async clear(): Promise<void> {
     await invoke('plugin:store|clear', { rid: this.rid })
   }
 
+  /**
+   * Resets the store to its `default` value.
+   *
+   * If no default value has been set, this method behaves identical to {@linkcode clear}.
+   * A change event is emitted for every key whose value changed.
+   *
+   * @example
+   * ```typescript
+   * import { Store } from '@tauri-apps/plugin-store';
+   * const store = await Store.load('store.json', { defaults: { 'some-key': 0 } });
+   * await store.reset();
+   * ```
+   */
   async reset(): Promise<void> {
     await invoke('plugin:store|reset', { rid: this.rid })
   }
 
+  /**
+   * Returns a list of all keys in the store.
+   *
+   * @example
+   * ```typescript
+   * import { Store } from '@tauri-apps/plugin-store';
+   * const store = await Store.load('store.json');
+   * const keys = await store.keys();
+   * ```
+   *
+   * @returns A promise resolving to the list of keys, in arbitrary order.
+   */
   async keys(): Promise<string[]> {
     return await invoke('plugin:store|keys', { rid: this.rid })
   }
 
+  /**
+   * Returns a list of all values in the store.
+   *
+   * @example
+   * ```typescript
+   * import { Store } from '@tauri-apps/plugin-store';
+   * const store = await Store.load('store.json');
+   * const values = await store.values();
+   * ```
+   *
+   * @returns A promise resolving to the list of values, in arbitrary order.
+   */
   async values<T>(): Promise<T[]> {
     return await invoke('plugin:store|values', { rid: this.rid })
   }
 
+  /**
+   * Returns a list of all entries in the store.
+   *
+   * @example
+   * ```typescript
+   * import { Store } from '@tauri-apps/plugin-store';
+   * const store = await Store.load('store.json');
+   * const entries = await store.entries();
+   * ```
+   *
+   * @returns A promise resolving to the list of key-value pairs, in arbitrary order.
+   */
   async entries<T>(): Promise<Array<[key: string, value: T]>> {
     return await invoke('plugin:store|entries', { rid: this.rid })
   }
 
+  /**
+   * Returns the number of key-value pairs in the store.
+   *
+   * @example
+   * ```typescript
+   * import { Store } from '@tauri-apps/plugin-store';
+   * const store = await Store.load('store.json');
+   * const length = await store.length();
+   * ```
+   *
+   * @returns A promise resolving to the number of key-value pairs in the store.
+   */
   async length(): Promise<number> {
     return await invoke('plugin:store|length', { rid: this.rid })
   }
 
+  /**
+   * Attempts to load the on-disk state at the store's `path` into memory.
+   *
+   * This method is useful if the on-disk state was edited by the user and you want to synchronize the changes.
+   *
+   * Note:
+   *   - This method loads the data and merges it with the current store,
+   *     this behavior will be changed to resetting to default first and then merging with the on-disk state in v3,
+   *     to fully match the store with the on-disk state, set {@linkcode ReloadOptions | ignoreDefaults} to `true`
+   *   - This method does not emit change events.
+   *
+   * @example
+   * ```typescript
+   * import { Store } from '@tauri-apps/plugin-store';
+   * const store = await Store.load('store.json');
+   * await store.reload({ ignoreDefaults: true });
+   * ```
+   *
+   * @param options Options to change how the on-disk state is merged into the store.
+   */
   async reload(options?: ReloadOptions): Promise<void> {
     await invoke('plugin:store|reload', { rid: this.rid, ...options })
   }
 
+  /**
+   * Saves the store to disk at the store's `path`.
+   *
+   * Any pending auto save is cancelled, so the store is written exactly once by this call.
+   *
+   * @example
+   * ```typescript
+   * import { Store } from '@tauri-apps/plugin-store';
+   * const store = await Store.load('store.json', { autoSave: false });
+   * await store.set('some-key', { value: 5 });
+   * await store.save();
+   * ```
+   */
   async save(): Promise<void> {
     await invoke('plugin:store|save', { rid: this.rid })
   }
 
+  /**
+   * Listen to changes on a store key.
+   *
+   * The callback is only invoked for changes made to this store instance.
+   *
+   * @example
+   * ```typescript
+   * import { Store } from '@tauri-apps/plugin-store';
+   * const store = await Store.load('store.json');
+   * const unlisten = await store.onKeyChange<{ value: number }>('some-key', (value) => {
+   *   console.log(value);
+   * });
+   * ```
+   *
+   * @param key The key to watch for changes.
+   * @param cb Callback invoked with the new value, or `undefined` when the key was removed.
+   * @returns A promise resolving to a function to unlisten to the event.
+   *
+   * @since 2.0.0
+   */
   async onKeyChange<T>(
     key: string,
     cb: (value: T | undefined) => void
@@ -307,6 +759,25 @@ export class Store extends Resource implements IStore {
     })
   }
 
+  /**
+   * Listen to changes on the store.
+   *
+   * The callback is only invoked for changes made to this store instance.
+   *
+   * @example
+   * ```typescript
+   * import { Store } from '@tauri-apps/plugin-store';
+   * const store = await Store.load('store.json');
+   * const unlisten = await store.onChange<{ value: number }>((key, value) => {
+   *   console.log(key, value);
+   * });
+   * ```
+   *
+   * @param cb Callback invoked with the changed key and its new value, which is `undefined` when the key was removed.
+   * @returns A promise resolving to a function to unlisten to the event.
+   *
+   * @since 2.0.0
+   */
   async onChange<T>(
     cb: (key: string, value: T | undefined) => void
   ): Promise<UnlistenFn> {
@@ -452,7 +923,7 @@ interface IStore {
 }
 
 /**
- * Options to {@linkcode IStore.reload} a {@linkcode IStore}
+ * Options to change how a store is reloaded from its on-disk state.
  */
 export type ReloadOptions = {
   /**
diff --git a/plugins/store/src/error.rs b/plugins/store/src/error.rs
index ef5ee5938..29abf9dbc 100644
--- a/plugins/store/src/error.rs
+++ b/plugins/store/src/error.rs
@@ -4,14 +4,17 @@
 
 use serde::{Serialize, Serializer};
 
+/// Alias for a [`Result`](std::result::Result) with the error type [`Error`].
 pub type Result<T> = std::result::Result<T, Error>;
 
 /// The error types.
 #[derive(thiserror::Error, Debug)]
 #[non_exhaustive]
 pub enum Error {
+    /// The store contents could not be serialized by the configured [`SerializeFn`](crate::SerializeFn).
     #[error("Failed to serialize store. {0}")]
     Serialize(Box<dyn std::error::Error + Send + Sync>),
+    /// The store contents could not be deserialized by the configured [`DeserializeFn`](crate::DeserializeFn).
     #[error("Failed to deserialize store. {0}")]
     Deserialize(Box<dyn std::error::Error + Send + Sync>),
     /// JSON error.
diff --git a/plugins/store/src/lib.rs b/plugins/store/src/lib.rs
index 458bc4b02..6f6dc0bbd 100644
--- a/plugins/store/src/lib.rs
+++ b/plugins/store/src/lib.rs
@@ -18,10 +18,10 @@ use std::{
     sync::{Arc, RwLock},
     time::Duration,
 };
-pub use store::{resolve_store_path, DeserializeFn, SerializeFn, Store, StoreBuilder};
+pub use store::{DeserializeFn, SerializeFn, Store, StoreBuilder, resolve_store_path};
 use tauri::{
-    plugin::{self, TauriPlugin},
     AppHandle, Manager, ResourceId, RunEvent, Runtime, State,
+    plugin::{self, TauriPlugin},
 };
 
 mod error;
@@ -240,6 +240,11 @@ async fn save<R: Runtime>(app: AppHandle<R>, rid: ResourceId) -> Result<()> {
     store.save()
 }
 
+/// Extension trait to access the store APIs on a [`Manager`] such as `App`, `AppHandle`,
+/// `WebviewWindow` or `Window`.
+///
+/// The plugin must be registered with [`Builder::build`] for these methods to work,
+/// as they rely on the state it manages.
 pub trait StoreExt<R: Runtime> {
     /// Create a store or load an existing store with default settings at the given path.
     ///
@@ -336,6 +341,17 @@ fn default_deserialize(
     serde_json::from_slice(bytes).map_err(Into::into)
 }
 
+/// Builder for the store plugin.
+///
+/// It is used to register custom serialize and deserialize functions the frontend can select by
+/// name when loading a store, and to change the functions used by default (pretty printed JSON).
+///
+/// # Examples
+///
+/// ```
+/// tauri::Builder::default()
+///   .plugin(tauri_plugin_store::Builder::default().build());
+/// ```
 pub struct Builder {
     serialize_fns: HashMap<String, SerializeFn>,
     deserialize_fns: HashMap<String, DeserializeFn>,
@@ -355,6 +371,10 @@ impl Default for Builder {
 }
 
 impl Builder {
+    /// Creates a new builder using the default serialize and deserialize functions,
+    /// which read and write pretty printed JSON.
+    ///
+    /// This is the same as [`Builder::default`].
     pub fn new() -> Self {
         Self::default()
     }
@@ -450,10 +470,10 @@ impl Builder {
                     let collection = app_handle.state::<StoreState>();
                     let stores = collection.stores.read().unwrap();
                     for (path, rid) in stores.iter() {
-                        if let Ok(store) = app_handle.resources_table().get::<Store<R>>(*rid) {
-                            if let Err(err) = store.save() {
-                                tracing::error!("failed to save store {path:?} with error {err:?}");
-                            }
+                        if let Ok(store) = app_handle.resources_table().get::<Store<R>>(*rid)
+                            && let Err(err) = store.save()
+                        {
+                            tracing::error!("failed to save store {path:?} with error {err:?}");
                         }
                     }
                 }
diff --git a/plugins/store/src/store.rs b/plugins/store/src/store.rs
index 68e32b8a5..ea88510f4 100644
--- a/plugins/store/src/store.rs
+++ b/plugins/store/src/store.rs
@@ -11,18 +11,32 @@ use std::{
     sync::{Arc, Mutex},
     time::Duration,
 };
-use tauri::{path::BaseDirectory, AppHandle, Emitter, Manager, Resource, ResourceId, Runtime};
+use tauri::{AppHandle, Emitter, Manager, Resource, ResourceId, Runtime, path::BaseDirectory};
 use tokio::{
     select,
-    sync::mpsc::{unbounded_channel, UnboundedSender},
+    sync::mpsc::{UnboundedSender, unbounded_channel},
     time::sleep,
 };
 
+/// Function used to serialize the store cache to the bytes written to the store file.
+///
+/// The default implementation writes pretty printed JSON.
 pub type SerializeFn =
     fn(&HashMap<String, JsonValue>) -> Result<Vec<u8>, Box<dyn std::error::Error + Send + Sync>>;
+/// Function used to deserialize the bytes read from the store file into the store cache.
+///
+/// The default implementation parses JSON.
 pub type DeserializeFn =
     fn(&[u8]) -> Result<HashMap<String, JsonValue>, Box<dyn std::error::Error + Send + Sync>>;
 
+/// Resolves the path of a store file, relative to the app data directory
+/// ([`BaseDirectory::AppData`]).
+///
+/// This is the path the [`Store`] created with the given `path` reads from and writes to.
+///
+/// # Errors
+///
+/// Returns an error if the app data directory cannot be resolved.
 pub fn resolve_store_path<R: Runtime>(
     app: &AppHandle<R>,
     path: impl AsRef<Path>,
@@ -429,6 +443,15 @@ impl<R: Runtime> std::fmt::Debug for StoreInner<R> {
     }
 }
 
+/// A key-value store, persisted to a file resolved with [`resolve_store_path`].
+///
+/// The values are kept in memory and written to disk on [`Store::save`], and also automatically
+/// after each modification unless auto save has been disabled with
+/// [`StoreBuilder::disable_auto_save`]. Any pending auto save is applied when the store is dropped.
+///
+/// Create or load one with [`StoreExt::store`](crate::StoreExt::store) or [`StoreBuilder`].
+/// It is a [`Resource`], so it is also reachable from the frontend by its [`ResourceId`];
+/// closing that resource unregisters the store, meaning the next load creates a new instance.
 pub struct Store<R: Runtime> {
     auto_save: Option<Duration>,
     auto_save_debounce_sender: Arc<Mutex<Option<UnboundedSender<AutoSaveMessage>>>>,
@@ -620,8 +643,8 @@ mod tests {
     use super::*;
     use serde_json::json;
     use tauri::{
-        test::{mock_app, MockRuntime},
         App,
+        test::{MockRuntime, mock_app},
     };
 
     fn temp_store_path(name: &str) -> PathBuf {
diff --git a/plugins/stronghold/CHANGELOG.md b/plugins/stronghold/CHANGELOG.md
index 0a42ac028..bd5b3c5a5 100644
--- a/plugins/stronghold/CHANGELOG.md
+++ b/plugins/stronghold/CHANGELOG.md
@@ -8,6 +8,12 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.4.0]
+
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
 ## [2.3.2]
 
 - [`f8053e65`](https://github.com/tauri-apps/plugins-workspace/commit/f8053e659e4ccd85c1f52833411ff8417cbc5e69) ([#3527](https://github.com/tauri-apps/plugins-workspace/pull/3527) by [@Legend-Master](https://github.com/tauri-apps/plugins-workspace/../../Legend-Master)) Documented Cargo feature flags in each plugin's crate-level documentation.
diff --git a/plugins/stronghold/guest-js/index.ts b/plugins/stronghold/guest-js/index.ts
index c1945a210..ca751cbb1 100644
--- a/plugins/stronghold/guest-js/index.ts
+++ b/plugins/stronghold/guest-js/index.ts
@@ -2,72 +2,147 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+/**
+ * Store secrets and keys using the [IOTA Stronghold](https://github.com/iotaledger/stronghold.rs)
+ * encrypted database and secure runtime.
+ *
+ * @module
+ */
+
 import { invoke } from '@tauri-apps/api/core'
 
+/**
+ * The name of a Stronghold client, either as a UTF-8 string or as its raw byte representation.
+ */
 export type ClientPath =
   | string
   | Iterable<number>
   | ArrayLike<number>
   | ArrayBuffer
+/**
+ * The path of a vault inside a client, either as a UTF-8 string or as its raw byte representation.
+ */
 export type VaultPath =
   | string
   | Iterable<number>
   | ArrayLike<number>
   | ArrayBuffer
+/**
+ * The path of a record inside a vault, either as a UTF-8 string or as its raw byte representation.
+ */
 export type RecordPath =
   | string
   | Iterable<number>
   | ArrayLike<number>
   | ArrayBuffer
+/**
+ * The key of a record in a client store. Note that the store commands read the
+ * key as a string on the Rust side, so string keys are the safe choice.
+ */
 export type StoreKey =
   | string
   | Iterable<number>
   | ArrayLike<number>
   | ArrayBuffer
 
+/**
+ * The limits applied to the connections of a Stronghold peer-to-peer network.
+ * See {@link NetworkConfig} for a note on how these definitions are used.
+ */
 export interface ConnectionLimits {
+  /** The maximum number of incoming connections that can be pending at the same time. */
   maxPendingIncoming?: number
+  /** The maximum number of outgoing connections that can be pending at the same time. */
   maxPendingOutgoing?: number
+  /** The maximum number of established incoming connections. */
   maxEstablishedIncoming?: number
+  /** The maximum number of established outgoing connections. */
   maxEstablishedOutgoing?: number
+  /** The maximum number of established connections per peer. */
   maxEstablishedPerPeer?: number
+  /** The maximum number of established connections, incoming and outgoing combined. */
   maxEstablishedTotal?: number
 }
 
+/**
+ * The addresses on which a remote peer can be reached.
+ * See {@link NetworkConfig} for a note on how these definitions are used.
+ */
 export interface PeerAddress {
+  /** The addresses that are known for the peer, in the multiaddr format. */
   known: string[] // multiaddr
+  /** Whether the peer may be reached through a relay when its known addresses cannot be used. */
   use_relay_fallback: boolean
 }
 
+/**
+ * The address book of the peer-to-peer network.
+ * See {@link NetworkConfig} for a note on how these definitions are used.
+ */
 export interface AddressInfo {
+  /** The known addresses of each peer, keyed by the peer identifier. */
   peers: Map<string, PeerAddress>
+  /** The identifiers of the peers that can be used as relays. */
   relays: string[] // peers
 }
 
+/**
+ * The operations a remote peer is allowed to perform on a client.
+ * See {@link NetworkConfig} for a note on how these definitions are used.
+ */
 export interface ClientAccess {
+  /** The default permission to use the secrets stored in a vault. */
   useVaultDefault?: boolean
+  /** Per-vault overrides of {@link ClientAccess.useVaultDefault}. */
   useVaultExceptions?: Map<VaultPath, boolean>
+  /** The default permission to write secrets to a vault. */
   writeVaultDefault?: boolean
+  /** Per-vault overrides of {@link ClientAccess.writeVaultDefault}. */
   writeVaultExceptions?: Map<VaultPath, boolean>
+  /** The default permission to clone the secrets of a vault. */
   cloneVaultDefault?: boolean
+  /** Per-vault overrides of {@link ClientAccess.cloneVaultDefault}. */
   cloneVaultExceptions?: Map<VaultPath, boolean>
+  /** Whether the store of the client can be read. */
   readStore?: boolean
+  /** Whether the store of the client can be written to. */
   writeStore?: boolean
 }
 
+/**
+ * The access a remote peer is granted on the clients of a snapshot.
+ * See {@link NetworkConfig} for a note on how these definitions are used.
+ */
 export interface Permissions {
+  /** The access granted when no exception matches. */
   default?: ClientAccess
+  /** The access granted for specific paths, overriding {@link Permissions.default}. */
   exceptions?: Map<VaultPath, ClientAccess>
 }
 
+/**
+ * The configuration of the Stronghold peer-to-peer network.
+ *
+ * These definitions mirror the networking options of IOTA Stronghold. The plugin
+ * does not currently expose a command that consumes them, so they are only useful
+ * as type definitions.
+ */
 export interface NetworkConfig {
+  /** The maximum time to wait for the response to an outbound request. */
   requestTimeout?: Duration
+  /** The maximum time to wait when establishing a connection to a peer. */
   connectionTimeout?: Duration
+  /** The limits applied to pending and established connections. */
   connectionsLimit?: ConnectionLimits
+  /** Whether peers on the local network are discovered through mDNS. */
   enableMdns?: boolean
+  /** Whether connections relayed by another peer are enabled. */
   enableRelay?: boolean
+  /** The addresses of the known peers and of the available relays. */
   addresses?: AddressInfo
+  /** The permissions granted to specific peers, keyed by the peer identifier. */
   peerPermissions?: Map<string, Permissions>
+  /** The permissions granted to the peers that have no entry in {@link NetworkConfig.peerPermissions}. */
   permissionsDefault?: Permissions
 }
 
@@ -79,15 +154,49 @@ export interface Duration {
   nanos: number
 }
 
+/**
+ * A pointer to a record inside a vault, either addressed by its record path
+ * ({@link Location.generic}) or by a counter ({@link Location.counter}).
+ *
+ * @since 2.0.0
+ */
 export class Location {
+  /** The location kind, either `Generic` or `Counter`. */
   type: string
+  /** The location data, holding the vault path and the record path or counter. */
   payload: Record<string, unknown>
 
+  /**
+   * Creates a location of the given kind. Prefer the {@link Location.generic}
+   * and {@link Location.counter} helpers, which fill the payload for you.
+   *
+   * @example
+   * ```typescript
+   * import { Location } from '@tauri-apps/plugin-stronghold';
+   * const location = new Location('Generic', { vault: 'my-vault', record: 'my-record' });
+   * ```
+   *
+   * @param type The location kind, either `Generic` or `Counter`.
+   * @param payload The data identifying the record inside the vault.
+   */
   constructor(type: string, payload: Record<string, unknown>) {
     this.type = type
     this.payload = payload
   }
 
+  /**
+   * Creates a location addressing a record of a vault by its record path.
+   *
+   * @example
+   * ```typescript
+   * import { Location } from '@tauri-apps/plugin-stronghold';
+   * const location = Location.generic('my-vault', 'my-record');
+   * ```
+   *
+   * @param vault The path of the vault holding the record.
+   * @param record The path of the record inside the vault.
+   * @returns The location of the record.
+   */
   static generic(vault: VaultPath, record: RecordPath): Location {
     return new Location('Generic', {
       vault,
@@ -95,6 +204,19 @@ export class Location {
     })
   }
 
+  /**
+   * Creates a location addressing a record of a vault by a counter.
+   *
+   * @example
+   * ```typescript
+   * import { Location } from '@tauri-apps/plugin-stronghold';
+   * const location = Location.counter('my-vault', 0);
+   * ```
+   *
+   * @param vault The path of the vault holding the record.
+   * @param counter The counter identifying the record inside the vault.
+   * @returns The location of the record.
+   */
   static counter(vault: VaultPath, counter: number): Location {
     return new Location('Counter', {
       vault,
@@ -114,8 +236,7 @@ class ProcedureExecutor {
    * Generate a SLIP10 seed for the given location.
    * @param outputLocation Location of the record where the seed will be stored.
    * @param sizeBytes The size in bytes of the SLIP10 seed.
-   * @param hint The record hint.
-   * @returns
+   * @returns A promise resolving to the bytes returned by the procedure.
    */
   async generateSLIP10Seed(
     outputLocation: Location,
@@ -134,13 +255,13 @@ class ProcedureExecutor {
   }
 
   /**
-   * Derive a SLIP10 private key using a seed or key.
+   * Derive a SLIP10 private key using a seed or key. The derivation is always
+   * performed on the Ed25519 curve.
    * @param chain The chain path.
    * @param source The source type, either 'Seed' or 'Key'.
    * @param sourceLocation The source location, must be the `outputLocation` of a previous call to `generateSLIP10Seed` or `deriveSLIP10`.
    * @param outputLocation Location of the record where the private key will be stored.
-   * @param hint The record hint.
-   * @returns
+   * @returns A promise resolving to the bytes returned by the procedure.
    */
   async deriveSLIP10(
     chain: number[],
@@ -169,8 +290,7 @@ class ProcedureExecutor {
    * @param mnemonic The mnemonic string.
    * @param outputLocation The location of the record where the BIP39 mnemonic will be stored.
    * @param passphrase The optional mnemonic passphrase.
-   * @param hint The record hint.
-   * @returns
+   * @returns A promise resolving to the bytes returned by the procedure.
    */
   async recoverBIP39(
     mnemonic: string,
@@ -191,11 +311,10 @@ class ProcedureExecutor {
   }
 
   /**
-   * Generate a BIP39 seed.
+   * Generate a BIP39 seed. The mnemonic is generated in English.
    * @param outputLocation The location of the record where the BIP39 seed will be stored.
    * @param passphrase The optional mnemonic passphrase.
-   * @param hint The record hint.
-   * @returns
+   * @returns A promise resolving to the bytes returned by the procedure.
    */
   async generateBIP39(
     outputLocation: Location,
@@ -258,39 +377,118 @@ class ProcedureExecutor {
   }
 }
 
+/**
+ * A client of a stronghold snapshot, owning a set of vaults and a key-value store.
+ * Clients are obtained with {@link Stronghold.loadClient} and {@link Stronghold.createClient}.
+ *
+ * @since 2.0.0
+ */
 export class Client {
+  /** The path of the snapshot file this client belongs to. */
   path: string
+  /** The name identifying this client inside the snapshot. */
   name: ClientPath
 
+  /**
+   * Creates a client handle for a client that was already loaded or created.
+   * Prefer {@link Stronghold.loadClient} and {@link Stronghold.createClient},
+   * which also register the client on the Rust side.
+   *
+   * @example
+   * ```typescript
+   * import { Client } from '@tauri-apps/plugin-stronghold';
+   * const client = new Client('/path/to/snapshot.hold', 'my-client');
+   * ```
+   *
+   * @param path The path of the snapshot file the client belongs to.
+   * @param name The name identifying the client inside the snapshot.
+   */
   constructor(path: string, name: ClientPath) {
     this.path = path
     this.name = name
   }
 
   /**
-   * Get a vault by name.
-   * @param name
-   * @param flags
-   * @returns
+   * Gets a handle to the vault with the given name. The vault is created on the
+   * Rust side when the first secret is written to it.
+   *
+   * @example
+   * ```typescript
+   * import { Stronghold } from '@tauri-apps/plugin-stronghold';
+   * const stronghold = await Stronghold.load('/path/to/snapshot.hold', 'password');
+   * const client = await stronghold.createClient('my-client');
+   * const vault = client.getVault('my-vault');
+   * ```
+   *
+   * @param name The path of the vault.
+   * @returns The vault handle.
    */
   getVault(name: VaultPath): Vault {
     return new Vault(this.path, this.name, name)
   }
 
+  /**
+   * Gets a handle to the key-value store of this client.
+   *
+   * @example
+   * ```typescript
+   * import { Stronghold } from '@tauri-apps/plugin-stronghold';
+   * const stronghold = await Stronghold.load('/path/to/snapshot.hold', 'password');
+   * const client = await stronghold.createClient('my-client');
+   * const store = client.getStore();
+   * ```
+   *
+   * @returns The store handle.
+   */
   getStore(): Store {
     return new Store(this.path, this.name)
   }
 }
 
+/**
+ * The key-value store of a {@link Client}. Unlike a {@link Vault}, the values
+ * stored here can be read back directly.
+ *
+ * @since 2.0.0
+ */
 export class Store {
+  /** The path of the snapshot file this store belongs to. */
   path: string
+  /** The name of the client owning this store. */
   client: ClientPath
 
+  /**
+   * Creates a store handle for a client that was already loaded or created.
+   * Prefer {@link Client.getStore}.
+   *
+   * @example
+   * ```typescript
+   * import { Store } from '@tauri-apps/plugin-stronghold';
+   * const store = new Store('/path/to/snapshot.hold', 'my-client');
+   * ```
+   *
+   * @param path The path of the snapshot file the store belongs to.
+   * @param client The name of the client owning the store.
+   */
   constructor(path: string, client: ClientPath) {
     this.path = path
     this.client = client
   }
 
+  /**
+   * Reads the value of a record of this store.
+   *
+   * @example
+   * ```typescript
+   * import { Stronghold } from '@tauri-apps/plugin-stronghold';
+   * const stronghold = await Stronghold.load('/path/to/snapshot.hold', 'password');
+   * const client = await stronghold.createClient('my-client');
+   * const value = await client.getStore().get('my-key');
+   * ```
+   *
+   * @param key The key of the record.
+   * @returns A promise resolving to the stored value, or `null` if the key does not exist.
+   */
   async get(key: StoreKey): Promise<Uint8Array | null> {
     return await invoke<number[] | null>('plugin:stronghold|get_store_record', {
       snapshotPath: this.path,
@@ -299,6 +497,24 @@ export class Store {
     }).then((v) => v && Uint8Array.from(v))
   }
 
+  /**
+   * Inserts a record in this store, replacing the previous value of the key.
+   * Note that the snapshot is only persisted when {@link Stronghold.save} is called.
+   *
+   * @example
+   * ```typescript
+   * import { Stronghold } from '@tauri-apps/plugin-stronghold';
+   * const stronghold = await Stronghold.load('/path/to/snapshot.hold', 'password');
+   * const client = await stronghold.createClient('my-client');
+   * const data = Array.from(new TextEncoder().encode('Hello, World!'));
+   * await client.getStore().insert('my-key', data);
+   * await stronghold.save();
+   * ```
+   *
+   * @param key The key of the record.
+   * @param value The value of the record, as an array of bytes.
+   * @param lifetime The optional duration after which the record expires.
+   */
   async insert(
     key: StoreKey,
     value: number[],
@@ -313,6 +529,20 @@ export class Store {
     })
   }
 
+  /**
+   * Deletes a record from this store.
+   *
+   * @example
+   * ```typescript
+   * import { Stronghold } from '@tauri-apps/plugin-stronghold';
+   * const stronghold = await Stronghold.load('/path/to/snapshot.hold', 'password');
+   * const client = await stronghold.createClient('my-client');
+   * await client.getStore().remove('my-key');
+   * ```
+   *
+   * @param key The key of the record.
+   * @returns A promise resolving to the deleted value, or `null` if the key did not exist.
+   */
   async remove(key: StoreKey): Promise<Uint8Array | null> {
     return await invoke<number[] | null>(
       'plugin:stronghold|remove_store_record',
@@ -329,14 +559,31 @@ export class Store {
  * A key-value storage that allows create, update and delete operations.
  * It does not allow reading the data, so one of the procedures must be used to manipulate
  * the stored data, allowing secure storage of secrets.
+ *
+ * @since 2.0.0
  */
 export class Vault extends ProcedureExecutor {
-  /** The vault path. */
+  /** The path of the snapshot file this vault belongs to. */
   path: string
+  /** The name of the client owning this vault. */
   client: ClientPath
-  /** The vault name. */
+  /** The path identifying this vault inside the client. */
   name: VaultPath
 
+  /**
+   * Creates a vault handle for a client that was already loaded or created.
+   * Prefer {@link Client.getVault}.
+   *
+   * @example
+   * ```typescript
+   * import { Vault } from '@tauri-apps/plugin-stronghold';
+   * const vault = new Vault('/path/to/snapshot.hold', 'my-client', 'my-vault');
+   * ```
+   *
+   * @param path The path of the snapshot file the vault belongs to.
+   * @param client The name of the client owning the vault.
+   * @param name The path identifying the vault inside the client.
+   */
   constructor(path: string, client: ClientPath, name: VaultPath) {
     super({
       snapshotPath: path,
@@ -349,11 +596,21 @@ export class Vault extends ProcedureExecutor {
   }
 
   /**
-   * Insert a record to this vault.
-   * @param location The record location.
-   * @param record  The record data.
-   * @param recordHint The record hint.
-   * @returns
+   * Writes a secret to this vault. Note that the snapshot is only persisted
+   * when {@link Stronghold.save} is called.
+   *
+   * @example
+   * ```typescript
+   * import { Stronghold } from '@tauri-apps/plugin-stronghold';
+   * const stronghold = await Stronghold.load('/path/to/snapshot.hold', 'password');
+   * const client = await stronghold.createClient('my-client');
+   * const secret = Array.from(new TextEncoder().encode('secret value'));
+   * await client.getVault('my-vault').insert('my-record', secret);
+   * await stronghold.save();
+   * ```
+   *
+   * @param recordPath The path of the record inside this vault.
+   * @param secret The secret to store, as an array of bytes.
    */
   async insert(recordPath: RecordPath, secret: number[]): Promise<void> {
     await invoke('plugin:stronghold|save_secret', {
@@ -366,10 +623,20 @@ export class Vault extends ProcedureExecutor {
   }
 
   /**
-   * Remove a record from the vault.
-   * @param location The record location.
-   * @param gc Whether to additionally perform the gargage collection or not.
-   * @returns
+   * Deletes a secret from this vault. Only the record path of the given
+   * location is used, the vault is always this one.
+   *
+   * @example
+   * ```typescript
+   * import { Stronghold, Location } from '@tauri-apps/plugin-stronghold';
+   * const stronghold = await Stronghold.load('/path/to/snapshot.hold', 'password');
+   * const client = await stronghold.createClient('my-client');
+   * await client
+   *   .getVault('my-vault')
+   *   .remove(Location.generic('my-vault', 'my-record'));
+   * ```
+   *
+   * @param location The location of the record to delete.
    */
   async remove(location: Location): Promise<void> {
     await invoke('plugin:stronghold|remove_secret', {
@@ -383,15 +650,16 @@ export class Vault extends ProcedureExecutor {
 
 /**
  * A representation of an access to a stronghold.
+ *
+ * @since 2.0.0
  */
 export class Stronghold {
+  /** The path of the snapshot file backing this stronghold. */
   path: string
 
   /**
-   * Initializes a stronghold.
-   * If the snapshot path located at `path` exists, the password must match.
-   * @param path
-   * @param password
+   * Creates a handle to the stronghold initialized for the given snapshot path.
+   * @param path The path of the snapshot file.
    */
   private constructor(path: string) {
     this.path = path
@@ -399,8 +667,17 @@ export class Stronghold {
 
   /**
    * Load the snapshot if it exists (password must match), or start a fresh stronghold instance otherwise.
-   * @param password
-   * @returns
+   *
+   * @example
+   * ```typescript
+   * import { Stronghold } from '@tauri-apps/plugin-stronghold';
+   * import { appDataDir } from '@tauri-apps/api/path';
+   * const stronghold = await Stronghold.load(`${await appDataDir()}/vault.hold`, 'password');
+   * ```
+   *
+   * @param path The path of the snapshot file.
+   * @param password The password used to encrypt and decrypt the snapshot.
+   * @returns A promise resolving to the stronghold instance.
    */
   static async load(path: string, password: string): Promise<Stronghold> {
     return await invoke('plugin:stronghold|initialize', {
@@ -410,7 +687,14 @@ export class Stronghold {
   }
 
   /**
-   * Remove this instance from the cache.
+   * Saves the snapshot and removes this instance from the cache.
+   *
+   * @example
+   * ```typescript
+   * import { Stronghold } from '@tauri-apps/plugin-stronghold';
+   * const stronghold = await Stronghold.load('/path/to/snapshot.hold', 'password');
+   * await stronghold.unload();
+   * ```
    */
   async unload(): Promise<void> {
     await invoke('plugin:stronghold|destroy', {
@@ -418,6 +702,20 @@ export class Stronghold {
     })
   }
 
+  /**
+   * Loads an existing client from the snapshot. The promise rejects if the
+   * client does not exist in the snapshot or was already loaded.
+   *
+   * @example
+   * ```typescript
+   * import { Stronghold } from '@tauri-apps/plugin-stronghold';
+   * const stronghold = await Stronghold.load('/path/to/snapshot.hold', 'password');
+   * const client = await stronghold.loadClient('my-client');
+   * ```
+   *
+   * @param client The name of the client.
+   * @returns A promise resolving to the loaded client.
+   */
   async loadClient(client: ClientPath): Promise<Client> {
     return await invoke('plugin:stronghold|load_client', {
       snapshotPath: this.path,
@@ -425,6 +723,24 @@ export class Stronghold {
     }).then(() => new Client(this.path, client))
   }
 
+  /**
+   * Creates a new empty client on this stronghold.
+   *
+   * @example
+   * ```typescript
+   * import { Stronghold } from '@tauri-apps/plugin-stronghold';
+   * const stronghold = await Stronghold.load('/path/to/snapshot.hold', 'password');
+   * let client;
+   * try {
+   *   client = await stronghold.loadClient('my-client');
+   * } catch {
+   *   client = await stronghold.createClient('my-client');
+   * }
+   * ```
+   *
+   * @param client The name of the client.
+   * @returns A promise resolving to the created client.
+   */
   async createClient(client: ClientPath): Promise<Client> {
     return await invoke('plugin:stronghold|create_client', {
       snapshotPath: this.path,
@@ -434,7 +750,15 @@ export class Stronghold {
 
   /**
    * Persists the stronghold state to the snapshot.
-   * @returns
+   *
+   * @example
+   * ```typescript
+   * import { Stronghold } from '@tauri-apps/plugin-stronghold';
+   * const stronghold = await Stronghold.load('/path/to/snapshot.hold', 'password');
+   * const client = await stronghold.createClient('my-client');
+   * await client.getStore().insert('my-key', [1, 2, 3]);
+   * await stronghold.save();
+   * ```
    */
   async save(): Promise<void> {
     await invoke('plugin:stronghold|save', {
diff --git a/plugins/stronghold/src/kdf.rs b/plugins/stronghold/src/kdf.rs
index 2389b1c41..1bc2c6297 100644
--- a/plugins/stronghold/src/kdf.rs
+++ b/plugins/stronghold/src/kdf.rs
@@ -2,6 +2,10 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+//! Key derivation used to turn the user password into the key that encrypts a snapshot.
+//!
+//! Only available when the **kdf** Cargo feature is enabled, which is the case by default.
+
 use rand_chacha::ChaCha20Rng;
 use rand_core::{RngCore, SeedableRng};
 use std::path::Path;
@@ -10,12 +14,21 @@ use std::path::Path;
 /// This is a current limitation of Stronghold.
 const HASH_LENGTH: usize = 32;
 
+/// Password hashing functions that can be used as the key derivation function of
+/// [`Builder::new`](crate::Builder::new).
 pub struct KeyDerivation {}
 
 impl KeyDerivation {
-    /// Will create a key from [`password`] and a generated salt.
-    /// Salt will be generated to file [`salt_path`] or taken from it
-    /// if file already exists
+    /// Hashes `password` with Argon2 using the salt stored in `salt_path`, returning the
+    /// 32 bytes key used to encrypt a snapshot.
+    ///
+    /// The salt is read from `salt_path` when that file already exists, otherwise a new
+    /// random salt is generated and written to it.
+    ///
+    /// # Panics
+    ///
+    /// Panics when the salt file cannot be read or written, when its contents are not
+    /// 32 bytes long, or when hashing the password fails.
     pub fn argon2(password: &str, salt_path: &Path) -> Vec<u8> {
         let mut salt = [0u8; HASH_LENGTH];
         create_or_get_salt(&mut salt, salt_path);
@@ -32,8 +45,8 @@ fn create_or_get_salt(salt: &mut [u8], salt_path: &Path) {
         salt.clone_from_slice(&tmp);
     } else {
         // Generate new salt
-        let mut gen = ChaCha20Rng::from_os_rng();
-        gen.fill_bytes(salt);
+        let mut rng = ChaCha20Rng::from_os_rng();
+        rng.fill_bytes(salt);
         std::fs::write(salt_path, salt).expect("Failed to write salt for Stronghold")
     }
 }
diff --git a/plugins/stronghold/src/lib.rs b/plugins/stronghold/src/lib.rs
index 020bcd21b..01fb9c54d 100644
--- a/plugins/stronghold/src/lib.rs
+++ b/plugins/stronghold/src/lib.rs
@@ -23,18 +23,18 @@ use std::{
 
 use crypto::keys::bip39;
 use iota_stronghold::{
+    Client, Location,
     procedures::{
         BIP39Generate, BIP39Recover, Curve, Ed25519Sign, KeyType as StrongholdKeyType,
         MnemonicLanguage, PublicKey, Slip10Derive, Slip10DeriveInput, Slip10Generate,
         StrongholdProcedure,
     },
-    Client, Location,
 };
-use serde::{de::Visitor, Deserialize, Deserializer};
+use serde::{Deserialize, Deserializer, de::Visitor};
 use stronghold::{Error, Result, Stronghold};
 use tauri::{
-    plugin::{Builder as PluginBuilder, TauriPlugin},
     Manager, Runtime, State,
+    plugin::{Builder as PluginBuilder, TauriPlugin},
 };
 use zeroize::{Zeroize, Zeroizing};
 
@@ -108,8 +108,13 @@ impl From<Slip10DeriveInputDto> for Slip10DeriveInput {
     }
 }
 
+/// The type of a key pair handled by the plugin procedures.
+///
+/// Deserialized from the strings `ed25519` and `x25519`, ignoring case.
 pub enum KeyType {
+    /// The Ed25519 signature scheme.
     Ed25519,
+    /// The X25519 key exchange scheme.
     X25519,
 }
 
@@ -265,11 +270,11 @@ async fn destroy(
     snapshot_path: PathBuf,
 ) -> Result<()> {
     let mut collection = collection.0.lock().unwrap();
-    if let Some(stronghold) = collection.remove(&snapshot_path) {
-        if let Err(e) = stronghold.save() {
-            collection.insert(snapshot_path, stronghold);
-            return Err(e);
-        }
+    if let Some(stronghold) = collection.remove(&snapshot_path)
+        && let Err(e) = stronghold.save()
+    {
+        collection.insert(snapshot_path, stronghold);
+        return Err(e);
     }
     Ok(())
 }
@@ -423,11 +428,34 @@ enum PasswordHashFunctionKind {
     Custom(Box<PasswordHashFn>),
 }
 
+/// Builder for the stronghold plugin.
+///
+/// It defines how the password sent by the frontend is hashed into the key that
+/// encrypts the snapshot file.
 pub struct Builder {
     password_hash_function: PasswordHashFunctionKind,
 }
 
 impl Builder {
+    /// Initializes [`Self`] with a custom password hash function.
+    ///
+    /// The function is called with the password sent by the frontend and must return the
+    /// key used to encrypt the snapshot, which must be 32 bytes long.
+    ///
+    /// # Examples
+    ///
+    /// ```rust
+    /// fn init<R: tauri::Runtime>(builder: tauri::Builder<R>) -> tauri::Builder<R> {
+    ///     builder.plugin(
+    ///         tauri_plugin_stronghold::Builder::new(|_password| {
+    ///             // hash the password with a secure algorithm such as argon2 or blake2b
+    ///             // and return the resulting 32 bytes hash
+    ///             unimplemented!()
+    ///         })
+    ///         .build(),
+    ///     )
+    /// }
+    /// ```
     pub fn new<F: Fn(&str) -> Vec<u8> + Send + Sync + 'static>(password_hash_function: F) -> Self {
         Self {
             password_hash_function: PasswordHashFunctionKind::Custom(Box::new(
@@ -442,16 +470,19 @@ impl Builder {
     ///
     /// ```rust
     /// use tauri::Manager;
-    /// tauri::Builder::default()
-    ///     .setup(|app| {
+    ///
+    /// fn init<R: tauri::Runtime>(builder: tauri::Builder<R>) -> tauri::Builder<R> {
+    ///     builder.setup(|app| {
     ///         let salt_path = app
     ///             .path()
     ///             .app_local_data_dir()
     ///             .expect("could not resolve app local data path")
     ///             .join("salt.txt");
-    ///         app.handle().plugin(tauri_plugin_stronghold::Builder::with_argon2(&salt_path).build())?;
+    ///         app.handle()
+    ///             .plugin(tauri_plugin_stronghold::Builder::with_argon2(&salt_path).build())?;
     ///         Ok(())
-    ///     });
+    ///     })
+    /// }
     /// ```
     #[cfg(feature = "kdf")]
     pub fn with_argon2(salt_path: &std::path::Path) -> Self {
@@ -460,6 +491,8 @@ impl Builder {
         }
     }
 
+    /// Builds the plugin, registering the password hash function and the commands used
+    /// by the JavaScript guest bindings.
     pub fn build<R: Runtime>(self) -> TauriPlugin<R> {
         let password_hash_function = self.password_hash_function;
 
diff --git a/plugins/stronghold/src/stronghold.rs b/plugins/stronghold/src/stronghold.rs
index a5cadc26e..3e8568488 100644
--- a/plugins/stronghold/src/stronghold.rs
+++ b/plugins/stronghold/src/stronghold.rs
@@ -2,22 +2,35 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+//! Types to load, modify and persist an [IOTA Stronghold](https://github.com/iotaledger/stronghold.rs)
+//! snapshot file.
+
 use std::{convert::TryFrom, ops::Deref, path::Path};
 
 use iota_stronghold::{KeyProvider, SnapshotPath};
 use serde::{Serialize, Serializer};
 use zeroize::Zeroizing;
 
+/// Alias for a [`std::result::Result`] with the error type [`Error`].
 pub type Result<T> = std::result::Result<T, Error>;
 
+/// Errors returned by the stronghold plugin.
+///
+/// Serialized as the error message string when returned to the frontend.
 #[derive(Debug, thiserror::Error)]
 pub enum Error {
+    /// No stronghold was initialized for the given snapshot path.
     #[error("stronghold not initialized")]
     StrongholdNotInitialized,
+    /// An error from the underlying Stronghold client, e.g. when loading a snapshot
+    /// with the wrong password or when addressing a client that does not exist.
     #[error(transparent)]
     Stronghold(#[from] iota_stronghold::ClientError),
+    /// An error from the Stronghold secure memory implementation, e.g. when the
+    /// password hash is not a key size Stronghold accepts.
     #[error(transparent)]
     Memory(#[from] iota_stronghold::MemoryError),
+    /// A Stronghold procedure (key generation, key derivation, signing, ...) failed.
     #[error(transparent)]
     Procedure(#[from] iota_stronghold::procedures::ProcedureError),
 }
@@ -31,6 +44,10 @@ impl Serialize for Error {
     }
 }
 
+/// A Stronghold instance bound to a snapshot file and to the key it is encrypted with.
+///
+/// Dereferences to the underlying [`iota_stronghold::Stronghold`], so all of its client
+/// and vault operations are available on this type.
 pub struct Stronghold {
     inner: iota_stronghold::Stronghold,
     path: SnapshotPath,
@@ -38,6 +55,18 @@ pub struct Stronghold {
 }
 
 impl Stronghold {
+    /// Creates a Stronghold instance for the snapshot file at `path`, encrypted with
+    /// `password` as the key.
+    ///
+    /// When the file already exists its snapshot is loaded, which requires `password` to
+    /// be the key it was encrypted with. Otherwise an empty instance is created and
+    /// nothing is written to disk until [`Self::save`] is called.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`Error::Memory`] when `password` is not a key size Stronghold accepts
+    /// (it must be 32 bytes long) and [`Error::Stronghold`] when an existing snapshot
+    /// cannot be loaded with it.
     pub fn new<P: AsRef<Path>>(path: P, password: Vec<u8>) -> Result<Self> {
         let path = SnapshotPath::from_path(path);
         let stronghold = iota_stronghold::Stronghold::default();
@@ -52,12 +81,15 @@ impl Stronghold {
         })
     }
 
+    /// Writes the state of all clients to the snapshot file, encrypted with the key
+    /// this instance was created with.
     pub fn save(&self) -> Result<()> {
         self.inner
             .commit_with_keyprovider(&self.path, &self.keyprovider)?;
         Ok(())
     }
 
+    /// Returns a reference to the underlying [`iota_stronghold::Stronghold`] instance.
     pub fn inner(&self) -> &iota_stronghold::Stronghold {
         &self.inner
     }
diff --git a/plugins/updater/CHANGELOG.md b/plugins/updater/CHANGELOG.md
index 2a2341261..0974a6a4f 100644
--- a/plugins/updater/CHANGELOG.md
+++ b/plugins/updater/CHANGELOG.md
@@ -8,6 +8,16 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.13.0]
+
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
+### bug
+
+- [`101e1b06`](https://github.com/tauri-apps/plugins-workspace/commit/101e1b068a62aeece725362c38f8fe4179b5fe5f) ([#3615](https://github.com/tauri-apps/plugins-workspace/pull/3615)) On Linux, `check()` no longer sets `SSL_CERT_FILE` and `SSL_CERT_DIR` to Debian paths. The override pointed rustls to files that do not exist on distros with a different layout, such as ALT Linux, and left every TLS client in the app without root certificates.
+
 ## [2.12.0]
 
 - [`1308bfa3`](https://github.com/tauri-apps/plugins-workspace/commit/1308bfa399b962b3977c767100a6339d1cbfdd20) **Breaking change:** the `allowDowngrades` option was removed from the `check` command and is now read from the plugin configuration instead.
diff --git a/plugins/updater/guest-js/index.ts b/plugins/updater/guest-js/index.ts
index b646b0279..e6ce0691e 100644
--- a/plugins/updater/guest-js/index.ts
+++ b/plugins/updater/guest-js/index.ts
@@ -2,12 +2,19 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+/**
+ * In-app updates for Tauri applications: check the configured endpoints for a new release,
+ * download it and install it.
+ *
+ * @module
+ */
+
 import { invoke, Channel, Resource } from '@tauri-apps/api/core'
 
 /** Options used when checking for updates */
 interface CheckOptions {
   /**
-   * Request headers
+   * The headers to send along with the update check request.
    */
   headers?: HeadersInit
   /**
@@ -27,7 +34,7 @@ interface CheckOptions {
 /** Options used when downloading an update */
 interface DownloadOptions {
   /**
-   * Request headers
+   * The headers to send along with the update download request.
    */
   headers?: HeadersInit
   /**
@@ -59,14 +66,48 @@ type DownloadEvent =
   | { event: 'Progress'; data: { chunkLength: number } }
   | { event: 'Finished' }
 
+/**
+ * An update announced by the update server, as returned by {@linkcode check}.
+ *
+ * It holds a resource on the Rust side, so call {@linkcode Update.close} when you are done with it
+ * without installing it.
+ *
+ * @since 2.0.0
+ */
 class Update extends Resource {
   currentVersion: string
+  /**
+   * The version announced by the update server.
+   */
   version: string
+  /**
+   * The publish date of the update as an RFC 3339 string, when the server provided one.
+   */
   date?: string
+  /**
+   * The release notes of the update, when the server provided them.
+   */
   body?: string
+  /**
+   * The raw update manifest returned by the server, useful when it contains
+   * additional fields that the updater itself does not handle.
+   */
   rawJson: Record<string, unknown>
   private downloadedBytes?: Resource
 
+  /**
+   * Creates an update from the metadata returned by the backend.
+   * You should not need to call this yourself, use {@linkcode check} instead.
+   *
+   * @param metadata The update information returned by the backend, including the resource identifier of the update.
+   *
+   * @example
+   * ```typescript
+   * import { check } from '@tauri-apps/plugin-updater';
+   * // the update instance is created for you by `check`
+   * const update = await check();
+   * ```
+   */
   constructor(metadata: UpdateMetadata) {
     super(metadata.rid)
     this.currentVersion = metadata.currentVersion
@@ -76,7 +117,29 @@ class Update extends Resource {
     this.rawJson = metadata.rawJson
   }
 
-  /** Download the updater package. Call {@linkcode install} later to install it */
+  /**
+   * Downloads the updater package. Call {@linkcode install} later to install it.
+   *
+   * @example
+   * ```typescript
+   * import { check } from '@tauri-apps/plugin-updater';
+   *
+   * const update = await check();
+   * if (update) {
+   *   let downloaded = 0;
+   *   await update.download((event) => {
+   *     if (event.event === 'Progress') {
+   *       downloaded += event.data.chunkLength;
+   *       console.log(`downloaded ${downloaded} bytes`);
+   *     }
+   *   });
+   *   await update.install();
+   * }
+   * ```
+   *
+   * @param onEvent Callback invoked with a `Started` event when the first chunk is received, a `Progress` event for every downloaded chunk and a `Finished` event when the download completes.
+   * @param options The headers and the timeout to use for the download request.
+   */
   async download(
     onEvent?: (progress: DownloadEvent) => void,
     options?: DownloadOptions
@@ -101,6 +164,19 @@ class Update extends Resource {
    *
    * - **Windows:** This function exits the app after launching the updater installer successfully
    * - **macOS / Linux:** You need to relaunch the app to run the newly install version
+   *
+   * @example
+   * ```typescript
+   * import { check } from '@tauri-apps/plugin-updater';
+   *
+   * const update = await check();
+   * if (update) {
+   *   await update.download();
+   *   await update.install();
+   * }
+   * ```
+   *
+   * @param options Options for the installation, such as whether the Windows installer should restart the app afterwards.
    */
   async install(options?: InstallOptions): Promise<void> {
     if (!this.downloadedBytes) {
@@ -124,6 +200,21 @@ class Update extends Resource {
    *
    * - **Windows:** This function exits the app after launching the updater installer successfully
    * - **macOS / Linux:** You need to relaunch the app to run the newly install version
+   *
+   * @example
+   * ```typescript
+   * import { check } from '@tauri-apps/plugin-updater';
+   *
+   * const update = await check();
+   * if (update) {
+   *   await update.downloadAndInstall((event) => {
+   *     console.log(event.event);
+   *   });
+   * }
+   * ```
+   *
+   * @param onEvent Callback invoked with a `Started` event when the first chunk is received, a `Progress` event for every downloaded chunk and a `Finished` event when the download completes.
+   * @param options The headers and the timeout to use for the download request, and the installation options.
    */
   async downloadAndInstall(
     onEvent?: (progress: DownloadEvent) => void,
@@ -141,13 +232,45 @@ class Update extends Resource {
     })
   }
 
+  /**
+   * Releases the update resource and the downloaded bytes held by the backend.
+   *
+   * @example
+   * ```typescript
+   * import { check } from '@tauri-apps/plugin-updater';
+   *
+   * const update = await check();
+   * if (update) {
+   *   await update.close();
+   * }
+   * ```
+   */
   async close(): Promise<void> {
     await this.downloadedBytes?.close()
     await super.close()
   }
 }
 
-/** Check for updates, resolves to `null` if no updates are available */
+/**
+ * Checks the configured endpoints for an available update.
+ *
+ * @example
+ * ```typescript
+ * import { check } from '@tauri-apps/plugin-updater';
+ *
+ * const update = await check();
+ * if (update) {
+ *   console.log(`update ${update.version} is available`);
+ *   await update.downloadAndInstall();
+ * }
+ * ```
+ *
+ * @param options The headers, timeout, proxy and target to use for the update check request.
+ *
+ * @returns A promise resolving to the available {@linkcode Update}, or `null` when no update is available.
+ *
+ * @since 2.0.0
+ */
 async function check(options?: CheckOptions): Promise<Update | null> {
   convertToRustHeaders(options)
 
diff --git a/plugins/updater/src/commands.rs b/plugins/updater/src/commands.rs
index 72684e6d8..9657a6997 100644
--- a/plugins/updater/src/commands.rs
+++ b/plugins/updater/src/commands.rs
@@ -6,7 +6,7 @@ use crate::{Result, Update, UpdaterExt};
 
 use http::{HeaderMap, HeaderName, HeaderValue};
 use serde::Serialize;
-use tauri::{ipc::Channel, Manager, Resource, ResourceId, Runtime, Webview};
+use tauri::{Manager, Resource, ResourceId, Runtime, Webview, ipc::Channel};
 
 use std::{str::FromStr, time::Duration};
 use url::Url;
diff --git a/plugins/updater/src/config.rs b/plugins/updater/src/config.rs
index 9bd941ad5..56f01c97a 100644
--- a/plugins/updater/src/config.rs
+++ b/plugins/updater/src/config.rs
@@ -204,8 +204,12 @@ pub(crate) fn validate_endpoints(
             if url.scheme() != "https" {
                 #[cfg(debug_assertions)]
                 {
-                    eprintln!("[\x1b[33mWARNING\x1b[0m] The updater endpoint \"{url}\" doesn't use `https` protocol. This is allowed in development but will fail in release builds.");
-                    eprintln!("[\x1b[33mWARNING\x1b[0m] if this is a desired behavior, you can enable `dangerousInsecureTransportProtocol` in the plugin configuration");
+                    eprintln!(
+                        "[\x1b[33mWARNING\x1b[0m] The updater endpoint \"{url}\" doesn't use `https` protocol. This is allowed in development but will fail in release builds."
+                    );
+                    eprintln!(
+                        "[\x1b[33mWARNING\x1b[0m] if this is a desired behavior, you can enable `dangerousInsecureTransportProtocol` in the plugin configuration"
+                    );
                 }
                 #[cfg(not(debug_assertions))]
                 return Err(crate::Error::InsecureTransportProtocol);
diff --git a/plugins/updater/src/error.rs b/plugins/updater/src/error.rs
index 6621fe553..6c7c21534 100644
--- a/plugins/updater/src/error.rs
+++ b/plugins/updater/src/error.rs
@@ -25,7 +25,9 @@ pub enum Error {
     #[error("Could not fetch a valid release JSON from the remote")]
     ReleaseNotFound,
     /// Unsupported app architecture.
-    #[error("Unsupported application architecture, expected one of `x86`, `x86_64`, `arm` or `aarch64`.")]
+    #[error(
+        "Unsupported application architecture, expected one of `x86`, `x86_64`, `arm` or `aarch64`."
+    )]
     UnsupportedArch,
     /// Operating system is not supported.
     #[error("Unsupported OS, expected one of `linux`, `darwin` or `windows`.")]
@@ -43,9 +45,7 @@ pub enum Error {
     #[error("the platform `{0}` was not found in the response `platforms` object")]
     TargetNotFound(String),
     /// Neither the platform nor the fallback platform was found in the updater JSON response.
-    #[error(
-        "None of the fallback platforms `{0:?}` were found in the response `platforms` object"
-    )]
+    #[error("None of the fallback platforms `{0:?}` were found in the response `platforms` object")]
     TargetsNotFound(Vec<String>),
     /// Download failed
     #[error("`{0}`")]
@@ -57,7 +57,9 @@ pub enum Error {
     #[error(transparent)]
     Base64(#[from] base64::DecodeError),
     /// UTF8 Errors in signature.
-    #[error("The signature {0} could not be decoded, please check if it is a valid base64 string. The signature must be the contents of the `.sig` file generated by the Tauri bundler, as a string.")]
+    #[error(
+        "The signature {0} could not be decoded, please check if it is a valid base64 string. The signature must be the contents of the `.sig` file generated by the Tauri bundler, as a string."
+    )]
     SignatureUtf8(String),
     #[cfg(all(target_os = "windows", feature = "zip"))]
     /// `zip` errors.
@@ -66,24 +68,35 @@ pub enum Error {
     /// Temp dir is not on same mount mount. This prevents our updater to rename the AppImage to a temp file.
     #[error("temp directory is not on the same mount point as the AppImage")]
     TempDirNotOnSameMountPoint,
+    /// The downloaded archive does not contain a binary for the current target.
     #[error("binary for the current target not found in the archive")]
     BinaryNotFoundInArchive,
+    /// Could not create a temporary directory to store the downloaded update.
     #[error("failed to create temporary directory")]
     TempDirNotFound,
+    /// The privilege escalation prompt shown before installing a Linux package
+    /// failed or was dismissed by the user.
     #[error("Authentication failed or was cancelled")]
     AuthenticationFailed,
+    /// Installing the downloaded `.deb` package failed.
     #[error("Failed to install .deb package")]
     DebInstallFailed,
+    /// The package manager could not install the downloaded Linux package.
     #[error("Failed to install package")]
     PackageInstallFailed,
+    /// The downloaded update is not in a format the updater can install on the current platform.
     #[error("invalid updater binary format")]
     InvalidUpdaterFormat,
+    /// `http` crate errors.
     #[error(transparent)]
     Http(#[from] http::Error),
+    /// A request header value is not valid.
     #[error(transparent)]
     InvalidHeaderValue(#[from] http::header::InvalidHeaderValue),
+    /// A request header name is not valid.
     #[error(transparent)]
     InvalidHeaderName(#[from] http::header::InvalidHeaderName),
+    /// The release publish date could not be formatted as an RFC 3339 string.
     #[error("Failed to format date")]
     FormatDate,
     /// The configured updater endpoint must use a secure protocol like `https`
@@ -105,6 +118,7 @@ pub enum Error {
         "The update signature does not specify the version it was signed for, which `requireSignedVersion` requires. Re-sign and re-publish this release, or disable `requireSignedVersion`."
     )]
     MissingSignedVersion,
+    /// Tauri errors.
     #[error(transparent)]
     Tauri(#[from] tauri::Error),
 }
@@ -118,4 +132,5 @@ impl Serialize for Error {
     }
 }
 
+/// A [`Result`](std::result::Result) alias whose error type is the updater [`Error`](enum@Error).
 pub type Result<T> = std::result::Result<T, Error>;
diff --git a/plugins/updater/src/lib.rs b/plugins/updater/src/lib.rs
index 18f2a11a5..d4fd06c59 100644
--- a/plugins/updater/src/lib.rs
+++ b/plugins/updater/src/lib.rs
@@ -24,8 +24,8 @@ use std::{ffi::OsString, sync::Arc};
 use http::{HeaderMap, HeaderName, HeaderValue};
 use semver::Version;
 use tauri::{
-    plugin::{Builder as PluginBuilder, TauriPlugin},
     Manager, Runtime,
+    plugin::{Builder as PluginBuilder, TauriPlugin},
 };
 
 mod commands;
@@ -137,6 +137,21 @@ struct UpdaterState {
     headers: HeaderMap,
 }
 
+/// Builder for the updater plugin.
+///
+/// The values set here are the defaults used by every [`Updater`] created through
+/// [`UpdaterExt::updater`] and [`UpdaterExt::updater_builder`]; they can still be overridden
+/// per updater instance on the [`UpdaterBuilder`].
+///
+/// # Examples
+///
+/// ```no_run
+/// use tauri::Runtime;
+///
+/// fn register_updater<R: Runtime>(builder: tauri::Builder<R>) -> tauri::Builder<R> {
+///     builder.plugin(tauri_plugin_updater::Builder::new().build())
+/// }
+/// ```
 #[derive(Default)]
 pub struct Builder {
     target: Option<String>,
@@ -147,15 +162,26 @@ pub struct Builder {
 }
 
 impl Builder {
+    /// Creates a new builder with the default configuration.
     pub fn new() -> Self {
         Self::default()
     }
 
+    /// Sets the target name used when checking for updates.
+    ///
+    /// It replaces the `{{target}}` variable in the endpoint URLs and is used as the key to look
+    /// up the release in the `platforms` object of a static update manifest.
+    ///
+    /// When it is not set, the updater uses the current operating system name (`linux`, `darwin`
+    /// or `windows`) in the endpoint URLs and looks for `{os}-{arch}-{bundle_type}` then
+    /// `{os}-{arch}` in the manifest.
     pub fn target(mut self, target: impl Into<String>) -> Self {
         self.target.replace(target.into());
         self
     }
 
+    /// Sets the public key used to verify the update signature,
+    /// overriding the `pubkey` value of the plugin configuration.
     pub fn pubkey<S: Into<String>>(mut self, pubkey: S) -> Self {
         self.pubkey.replace(pubkey.into());
         self
@@ -189,6 +215,11 @@ impl Builder {
         self
     }
 
+    /// Adds a header to be sent on every updater request.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error if the header name or the header value is not valid.
     pub fn header<K, V>(mut self, key: K, value: V) -> Result<Self>
     where
         HeaderName: TryFrom<K>,
@@ -204,11 +235,22 @@ impl Builder {
         Ok(self)
     }
 
+    /// Replaces all the headers sent on updater requests with the given map,
+    /// discarding the ones previously added with [`Self::header`].
     pub fn headers(mut self, headers: HeaderMap) -> Self {
         self.headers = headers;
         self
     }
 
+    /// Sets the default function used to decide whether a remote release should be installed.
+    ///
+    /// The closure receives the current application version and the remote release,
+    /// and must return `true` when the release should be treated as an update.
+    ///
+    /// It applies to every updater created through [`UpdaterExt`] and takes precedence over the
+    /// `allowDowngrades` configuration value; it can still be overridden per updater instance with
+    /// [`UpdaterBuilder::version_comparator`]. When no comparator is set at all, a release is
+    /// installed only if its version is greater than the current one.
     pub fn default_version_comparator<
         F: Fn(Version, RemoteRelease) -> bool + Send + Sync + 'static,
     >(
@@ -219,6 +261,10 @@ impl Builder {
         self
     }
 
+    /// Builds the updater plugin, registering the `check`, `download`, `install`
+    /// and `download_and_install` commands used by the JavaScript API.
+    ///
+    /// Pass the returned plugin to [`tauri::Builder::plugin`].
     pub fn build<R: Runtime>(self) -> TauriPlugin<R, Config> {
         let pubkey = self.pubkey;
         let target = self.target;
diff --git a/plugins/updater/src/updater.rs b/plugins/updater/src/updater.rs
index cf65df501..628b800e7 100644
--- a/plugins/updater/src/updater.rs
+++ b/plugins/updater/src/updater.rs
@@ -5,53 +5,64 @@
 use std::{
     collections::HashMap,
     ffi::OsString,
-    io::Cursor,
     path::{Path, PathBuf},
     str::FromStr,
     sync::Arc,
     time::Duration,
 };
 
-#[cfg(not(target_os = "macos"))]
-use std::ffi::OsStr;
-
 use base64::Engine;
 use futures_util::StreamExt;
-use http::{header::ACCEPT, HeaderName};
+use http::{HeaderName, header::ACCEPT};
 use minisign_verify::{PublicKey, Signature};
 use percent_encoding::{AsciiSet, CONTROLS};
 use reqwest::{
-    header::{HeaderMap, HeaderValue},
     ClientBuilder, StatusCode,
+    header::{HeaderMap, HeaderValue},
 };
 use semver::Version;
-use serde::{de::Error as DeError, Deserialize, Deserializer, Serialize};
+use serde::{Deserialize, Deserializer, Serialize, de::Error as DeError};
+#[cfg(any(windows, target_os = "linux"))]
+use std::ffi::OsStr;
+#[cfg(desktop)]
+use std::io::Cursor;
 use tauri::{
+    AppHandle, Resource, Runtime,
     utils::{
         config::BundleType,
         platform::{bundle_type, current_exe},
     },
-    AppHandle, Resource, Runtime,
 };
 use time::OffsetDateTime;
 use url::Url;
 
 use crate::{
-    error::{Error, Result},
     Config,
+    error::{Error, Result},
 };
 
 const UPDATER_USER_AGENT: &str = concat!(env!("CARGO_PKG_NAME"), "/", env!("CARGO_PKG_VERSION"),);
 
+/// The kind of bundle the running application was installed from.
+///
+/// Its name is appended to the updater target string (`{os}-{arch}-{bundle_type}`) when looking
+/// up the release in the update manifest and replaces the `{{bundle_type}}` variable in the
+/// endpoint URLs.
 #[derive(Copy, Clone)]
 pub enum Installer {
+    /// Linux AppImage bundle, named `appimage`.
     AppImage,
+    /// Debian package, named `deb`.
     Deb,
+    /// RPM package, named `rpm`.
     Rpm,
 
+    /// macOS application bundle, named `app`. Also used for applications distributed as DMG.
     App,
 
+    /// Windows WiX (MSI) installer, named `msi`.
     Msi,
+    /// Windows NSIS installer, named `nsis`.
     Nsis,
 }
 
@@ -68,6 +79,7 @@ impl Installer {
     }
 }
 
+/// The update information of a single platform in the update manifest.
 #[derive(Debug, Deserialize, Serialize, Clone)]
 pub struct ReleaseManifestPlatform {
     /// Download URL for the platform
@@ -76,11 +88,18 @@ pub struct ReleaseManifestPlatform {
     pub signature: String,
 }
 
+/// The platform specific data of a [`RemoteRelease`], in either of the two supported shapes.
 #[derive(Debug, Deserialize, Serialize, Clone)]
 #[serde(untagged)]
 pub enum RemoteReleaseInner {
+    /// Server Format: the endpoint resolved the platform itself and returned a single
+    /// download URL and signature.
     Dynamic(ReleaseManifestPlatform),
+    /// Static Format: the manifest describes every platform it supports and the updater
+    /// picks the entry matching the current target.
     Static {
+        /// Update information for each platform, keyed by the updater target string
+        /// (e.g. `darwin-aarch64`).
         platforms: HashMap<String, ReleaseManifestPlatform>,
     },
 }
@@ -126,8 +145,16 @@ impl RemoteRelease {
     }
 }
 
+/// Function executed right before the Windows installer is spawned and the app exits.
+/// See [`UpdaterBuilder::on_before_exit`].
 pub type OnBeforeExit = Arc<dyn Fn() + Send + Sync + 'static>;
+/// Function that customizes the `reqwest` client builder used for the updater requests.
+/// See [`UpdaterBuilder::configure_client`].
 pub type OnBeforeRequest = Arc<dyn Fn(ClientBuilder) -> ClientBuilder + Send + Sync + 'static>;
+/// Function that decides whether a remote release must be installed.
+///
+/// It receives the current application version and the remote release,
+/// and returns `true` when the release should be treated as an update.
 pub type VersionComparator = Arc<dyn Fn(Version, RemoteRelease) -> bool + Send + Sync>;
 #[cfg(target_os = "macos")]
 type MainThreadClosure = Box<dyn FnOnce() + Send + Sync + 'static>;
@@ -155,6 +182,10 @@ struct UpdaterContext {
     restart_after_install: bool,
 }
 
+/// Builder for an [`Updater`] instance.
+///
+/// Get one from [`crate::UpdaterExt::updater_builder`], which pre-fills it with the plugin
+/// configuration, then call [`UpdaterBuilder::build`].
 pub struct UpdaterBuilder {
     current_version: Version,
     pub(crate) version_comparator: Option<VersionComparator>,
@@ -208,6 +239,12 @@ impl UpdaterBuilder {
         }
     }
 
+    /// Sets the function used to decide whether the remote release must be installed,
+    /// replacing the comparator set with [`crate::Builder::default_version_comparator`]
+    /// and the behavior of the `allowDowngrades` configuration value.
+    ///
+    /// When no comparator is set, a release is only installed if its version is greater
+    /// than the current application version.
     pub fn version_comparator<F: Fn(Version, RemoteRelease) -> bool + Send + Sync + 'static>(
         mut self,
         f: F,
@@ -216,11 +253,29 @@ impl UpdaterBuilder {
         self
     }
 
+    /// Sets the target name used when checking for updates.
+    ///
+    /// It replaces the `{{target}}` variable in the endpoint URLs and is used as the key to look
+    /// up the release in the `platforms` object of a static update manifest.
+    ///
+    /// When it is not set, the updater uses the current operating system name (`linux`, `darwin`
+    /// or `windows`) in the endpoint URLs and looks for `{os}-{arch}-{bundle_type}` then
+    /// `{os}-{arch}` in the manifest.
     pub fn target(mut self, target: impl Into<String>) -> Self {
         self.target.replace(target.into());
         self
     }
 
+    /// Sets the endpoints to fetch the update manifest from,
+    /// overriding the `endpoints` configuration value.
+    ///
+    /// They are checked in order and the first one that returns a valid release wins.
+    ///
+    /// # Errors
+    ///
+    /// Returns [`Error::InsecureTransportProtocol`] on release builds if an endpoint does not use
+    /// the `https` protocol and the `dangerousInsecureTransportProtocol` configuration value is
+    /// not enabled. On debug builds a warning is printed instead.
     pub fn endpoints(mut self, endpoints: Vec<Url>) -> Result<Self> {
         crate::config::validate_endpoints(
             &endpoints,
@@ -231,11 +286,19 @@ impl UpdaterBuilder {
         Ok(self)
     }
 
+    /// Sets the path of the application executable, which is used to determine where the update
+    /// must be installed. Defaults to the path of the current executable, or to the AppImage path
+    /// when the application runs as an AppImage.
     pub fn executable_path<P: AsRef<Path>>(mut self, p: P) -> Self {
         self.executable_path.replace(p.as_ref().into());
         self
     }
 
+    /// Adds a header to be sent on the update check and download requests.
+    ///
+    /// # Errors
+    ///
+    /// Returns an error if the header name or the header value is not valid.
     pub fn header<K, V>(mut self, key: K, value: V) -> Result<Self>
     where
         HeaderName: TryFrom<K>,
@@ -251,21 +314,28 @@ impl UpdaterBuilder {
         Ok(self)
     }
 
+    /// Replaces all the headers sent on the update check and download requests with the given map,
+    /// discarding the ones previously added with [`Self::header`].
     pub fn headers(mut self, headers: HeaderMap) -> Self {
         self.headers = headers;
         self
     }
 
+    /// Removes all the headers previously set on this builder.
     pub fn clear_headers(mut self) -> Self {
         self.headers.clear();
         self
     }
 
+    /// Sets the timeout of the update check and download requests.
+    /// When it is not set, the requests do not time out.
     pub fn timeout(mut self, timeout: Duration) -> Self {
         self.timeout = Some(timeout);
         self
     }
 
+    /// Sets the proxy used for the update check and download requests.
+    /// It is ignored when [`Self::no_proxy`] was called.
     pub fn proxy(mut self, proxy: Url) -> Self {
         self.proxy.replace(proxy);
         self
@@ -277,6 +347,8 @@ impl UpdaterBuilder {
         self
     }
 
+    /// Sets the public key used to verify the update signature,
+    /// overriding the `pubkey` value of the plugin configuration.
     pub fn pubkey<S: Into<String>>(mut self, pubkey: S) -> Self {
         self.context.config.pubkey = pubkey.into();
         self
@@ -362,6 +434,15 @@ impl UpdaterBuilder {
         self
     }
 
+    /// Builds the [`Updater`].
+    ///
+    /// # Errors
+    ///
+    /// - [`Error::EmptyEndpoints`]: neither [`Self::endpoints`] nor the `endpoints`
+    ///   configuration value provided an endpoint to check.
+    /// - [`Error::UnsupportedArch`]: the updater does not support the current architecture.
+    /// - [`Error::FailedToDetermineExtractPath`]: the install directory could not be resolved
+    ///   from the executable path.
     pub fn build(self) -> Result<Updater> {
         let endpoints = self
             .endpoints
@@ -412,6 +493,9 @@ impl UpdaterBuilder {
     }
 }
 
+/// Checks the configured endpoints for an application update.
+///
+/// Get one from [`crate::UpdaterExt::updater`] or by calling [`UpdaterBuilder::build`].
 pub struct Updater {
     current_version: Version,
     version_comparator: Option<VersionComparator>,
@@ -429,6 +513,25 @@ pub struct Updater {
 }
 
 impl Updater {
+    /// Checks the endpoints for an update, returning the first release that the version
+    /// comparator accepts.
+    ///
+    /// Each endpoint is requested in order, with the `{{current_version}}`, `{{target}}`,
+    /// `{{arch}}` and `{{bundle_type}}` variables replaced in its URL, until one of them
+    /// answers with a release manifest the updater can parse.
+    ///
+    /// Resolves to `None` when an endpoint replies with `204 No Content` or when the release it
+    /// announced is not considered an update - by default when its version is not greater than the
+    /// current application version.
+    ///
+    /// # Errors
+    ///
+    /// - [`Error::UnsupportedOs`]: no target was set and the updater does not support the
+    ///   current operating system.
+    /// - [`Error::ReleaseNotFound`]: no endpoint returned a release manifest.
+    /// - The last request or deserialization error when every endpoint failed.
+    /// - [`Error::TargetNotFound`] or [`Error::TargetsNotFound`]: the manifest has no entry
+    ///   for the current target.
     pub async fn check(&self) -> Result<Option<Update>> {
         // we want JSON only
         let mut headers = self.headers.clone();
@@ -436,16 +539,6 @@ impl Updater {
             headers.insert(ACCEPT, HeaderValue::from_static("application/json"));
         }
 
-        // Set SSL certs for linux if they aren't available.
-        #[cfg(target_os = "linux")]
-        {
-            if std::env::var_os("SSL_CERT_FILE").is_none() {
-                std::env::set_var("SSL_CERT_FILE", "/etc/ssl/certs/ca-certificates.crt");
-            }
-            if std::env::var_os("SSL_CERT_DIR").is_none() {
-                std::env::set_var("SSL_CERT_DIR", "/etc/ssl/certs");
-            }
-        }
         let target = if let Some(target) = &self.target {
             target
         } else {
@@ -638,6 +731,10 @@ impl Updater {
     }
 }
 
+/// An update announced by the remote server, returned by [`Updater::check`].
+///
+/// Use [`Update::download`] followed by [`Update::install`], or [`Update::download_and_install`],
+/// to apply it.
 #[derive(Clone)]
 pub struct Update {
     /// Update description
@@ -840,8 +937,8 @@ impl Update {
     /// └── ...
     fn install_inner(&self, bytes: &[u8]) -> Result<()> {
         use windows_sys::{
-            w,
             Win32::UI::{Shell::ShellExecuteW, WindowsAndMessaging::SW_SHOW},
+            w,
         };
 
         let updater_type = self.extract(bytes)?;
@@ -1088,16 +1185,16 @@ impl Update {
                         let decoder = flate2::read::GzDecoder::new(archive);
                         let mut archive = tar::Archive::new(decoder);
                         for mut entry in archive.entries()?.flatten() {
-                            if let Ok(path) = entry.path() {
-                                if path.extension() == Some(OsStr::new("AppImage")) {
-                                    // if something went wrong during the extraction, we should restore previous app
-                                    if let Err(err) = entry.unpack(&self.extract_path) {
-                                        std::fs::rename(tmp_app_image, &self.extract_path)?;
-                                        return Err(err.into());
-                                    }
-                                    // early finish we have everything we need here
-                                    return Ok(());
+                            if let Ok(path) = entry.path()
+                                && path.extension() == Some(OsStr::new("AppImage"))
+                            {
+                                // if something went wrong during the extraction, we should restore previous app
+                                if let Err(err) = entry.unpack(&self.extract_path) {
+                                    std::fs::rename(tmp_app_image, &self.extract_path)?;
+                                    return Err(err.into());
                                 }
+                                // early finish we have everything we need here
+                                return Ok(());
                             }
                         }
                         // if we have not returned early we should restore the backup
@@ -1192,19 +1289,18 @@ impl Update {
             .arg(install_arg)
             .arg(pkg_path)
             .status()
+            && status.success()
         {
-            if status.success() {
-                log::debug!("installed {pkg_path:?} with pkexec");
-                return Ok(());
-            }
+            log::debug!("installed {pkg_path:?} with pkexec");
+            return Ok(());
         }
 
         // 2. Try zenity or kdialog for a graphical sudo experience
-        if let Ok(password) = self.get_password_graphically() {
-            if self.install_with_sudo(pkg_path, &password, install_cmd, install_arg)? {
-                log::debug!("installed {pkg_path:?} with GUI sudo");
-                return Ok(());
-            }
+        if let Ok(password) = self.get_password_graphically()
+            && self.install_with_sudo(pkg_path, &password, install_cmd, install_arg)?
+        {
+            log::debug!("installed {pkg_path:?} with GUI sudo");
+            return Ok(());
         }
 
         // 3. Final fallback: terminal sudo
@@ -1232,10 +1328,10 @@ impl Update {
             ])
             .output();
 
-        if let Ok(output) = zenity_result {
-            if output.status.success() {
-                return Ok(String::from_utf8_lossy(&output.stdout).trim().to_string());
-            }
+        if let Ok(output) = zenity_result
+            && output.status.success()
+        {
+            return Ok(String::from_utf8_lossy(&output.stdout).trim().to_string());
         }
 
         // Fall back to kdialog if zenity fails or isn't available
@@ -1243,10 +1339,10 @@ impl Update {
             .args(["--password", "Enter your password to install the update:"])
             .output();
 
-        if let Ok(output) = kdialog_result {
-            if output.status.success() {
-                return Ok(String::from_utf8_lossy(&output.stdout).trim().to_string());
-            }
+        if let Ok(output) = kdialog_result
+            && output.status.success()
+        {
+            return Ok(String::from_utf8_lossy(&output.stdout).trim().to_string());
         }
 
         Err(Error::AuthenticationFailed)
@@ -1427,6 +1523,14 @@ fn updater_arch() -> Option<&'static str> {
     }
 }
 
+/// Resolves the path the update must be installed to from the path of the application executable.
+///
+/// This is the directory holding the executable, except on macOS where the `.app` bundle path is
+/// returned for executables living in `Contents/MacOS`.
+///
+/// # Errors
+///
+/// Returns [`Error::FailedToDetermineExtractPath`] when the path has no parent directory.
 pub fn extract_path_from_executable(executable_path: &Path) -> Result<PathBuf> {
     // Return the path of the current executable by default
     // Example C:\Program Files\My App\
diff --git a/plugins/updater/tests/app-updater/tests/update.rs b/plugins/updater/tests/app-updater/tests/update.rs
index 34020578d..77273836c 100644
--- a/plugins/updater/tests/app-updater/tests/update.rs
+++ b/plugins/updater/tests/app-updater/tests/update.rs
@@ -2,13 +2,14 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+#![cfg(any(target_os = "linux", target_os = "macos", windows))]
 #![allow(dead_code, unused_imports)]
 
 use std::{
     collections::HashMap,
     fs::File,
     path::{Path, PathBuf},
-    process::Command,
+    process::{Command, Stdio},
     sync::{Arc, Mutex},
 };
 
@@ -24,6 +25,54 @@ const UPDATED_EXIT_CODE: i32 = 0;
 const ERROR_EXIT_CODE: i32 = 1;
 const UP_TO_DATE_EXIT_CODE: i32 = 2;
 
+/// The port the endpoint in the app's `tauri.conf.json` points at.
+const UPDATE_PORT: u16 = 3007;
+
+/// The server a test serves its update manifest and bundle from, shut down when it goes out of
+/// scope.
+///
+/// Every test binds the same port and `BUILD_LOCK` keeps them from overlapping, so each one has to
+/// leave the port free. Shutting the server down by hand at the end of the test does not: a panic
+/// anywhere above it leaves the server listening, and because `localhost` resolves to both loopback
+/// addresses the next test binds the other one instead of failing. It then answers with the
+/// previous test's manifest and serves the previous test's bundle, so one broken test fails the
+/// ones after it with an error about the wrong package.
+struct UpdaterServer {
+    server: Arc<tiny_http::Server>,
+    requests: Option<std::thread::JoinHandle<()>>,
+}
+
+impl UpdaterServer {
+    /// Serves `localhost:port`, answering every request with `handler`.
+    fn spawn(port: u16, handler: impl Fn(tiny_http::Request) + Send + 'static) -> Self {
+        let server = Arc::new(
+            tiny_http::Server::http(format!("localhost:{port}"))
+                .unwrap_or_else(|e| panic!("failed to start updater server on {port}: {e}")),
+        );
+
+        let server_ = server.clone();
+        Self {
+            requests: Some(std::thread::spawn(move || {
+                for request in server_.incoming_requests() {
+                    handler(request);
+                }
+            })),
+            server,
+        }
+    }
+}
+
+impl Drop for UpdaterServer {
+    fn drop(&mut self) {
+        // `unblock` only ends `incoming_requests`; the port is released when the last `Arc` to the
+        // server is dropped, so the request thread has to be gone before the next test binds it
+        self.server.unblock();
+        if let Some(requests) = self.requests.take() {
+            let _ = requests.join();
+        }
+    }
+}
+
 #[derive(Serialize)]
 struct Config {
     version: &'static str,
@@ -38,6 +87,10 @@ struct Config {
 #[serde(rename_all = "camelCase")]
 struct BundleConfig {
     create_updater_artifacts: Updater,
+    /// Merged into `bundle.linux` of the app's `tauri.conf.json`. Only set by the RPM test, for
+    /// `rpm.provides` (see `rpm_self_provides`).
+    #[serde(skip_serializing_if = "Option::is_none")]
+    linux: Option<serde_json::Value>,
 }
 
 #[derive(Serialize)]
@@ -110,6 +163,154 @@ impl BundleTarget {
     }
 }
 
+#[cfg(target_os = "linux")]
+impl BundleTarget {
+    /// Where `cargo tauri build --bundles <name>` leaves the bundle of the given app version.
+    fn bundle_path(self, root_dir: &Path, version: &str) -> PathBuf {
+        root_dir.join(match self {
+            Self::AppImage => {
+                format!("target/release/bundle/appimage/app-updater_{version}_amd64.AppImage")
+            }
+            Self::Deb => format!("target/release/bundle/deb/app-updater_{version}_amd64.deb"),
+            Self::Rpm => format!("target/release/bundle/rpm/app-updater-{version}-1.x86_64.rpm"),
+            _ => unreachable!("{} is not a Linux bundle", self.name()),
+        })
+    }
+
+    /// The package manager the updater hands this bundle to, for the Linux packages.
+    fn package_manager(self) -> Option<&'static str> {
+        match self {
+            Self::Deb => Some("dpkg"),
+            Self::Rpm => Some("rpm"),
+            _ => None,
+        }
+    }
+
+    /// Whether this host can install the package without asking anything: the package manager must
+    /// be there with a database it can read, the runtime the app links against must be installed,
+    /// and `sudo` must not need a password. The update itself escalates through `pkexec`, then a
+    /// graphical password prompt, then `sudo`, and in a non-interactive run only the last one can
+    /// succeed.
+    fn installable(self) -> Result<(), String> {
+        let Some(manager) = self.package_manager() else {
+            return Ok(());
+        };
+        // listing the installed packages tells both that the manager is there and that its database
+        // works. `rpm` passes this on a Debian host too, against the empty database `apt install
+        // rpm` leaves behind; `rpm_self_provides` is what keeps the install from resolving the
+        // app's dependencies against it.
+        let list_packages: &[&str] = match self {
+            Self::Deb => &["-l"],
+            _ => &["-qa"],
+        };
+        if !command_succeeds(manager, list_packages) {
+            return Err(format!(
+                "{manager} is not installed or its database is not readable"
+            ));
+        }
+        // so nothing checks webkit2gtk at install time, but the installed app still needs it to
+        // run. `ldconfig` lists it whichever manager put it there, and lives in an `sbin` that is
+        // not always on `PATH`
+        let webkit_installed = ["ldconfig", "/usr/sbin/ldconfig", "/sbin/ldconfig"]
+            .iter()
+            .any(|ldconfig| command_stdout_contains(ldconfig, &["-p"], "libwebkit2gtk-4.1.so.0"));
+        if !webkit_installed {
+            return Err("the webkit2gtk 4.1 runtime is not installed".into());
+        }
+        if !command_succeeds("sudo", &["-n", "true"]) {
+            return Err("sudo needs a password".into());
+        }
+        Ok(())
+    }
+}
+
+#[cfg(target_os = "linux")]
+fn command_succeeds(program: &str, args: &[&str]) -> bool {
+    Command::new(program)
+        .args(args)
+        .stdout(Stdio::null())
+        .stderr(Stdio::null())
+        .status()
+        .map(|status| status.success())
+        .unwrap_or(false)
+}
+
+#[cfg(target_os = "linux")]
+fn command_stdout_contains(program: &str, args: &[&str], needle: &str) -> bool {
+    Command::new(program)
+        .args(args)
+        .stderr(Stdio::null())
+        .output()
+        .map(|output| String::from_utf8_lossy(&output.stdout).contains(needle))
+        .unwrap_or(false)
+}
+
+/// The libraries the Tauri CLI declares as RPM `Requires` of an app using wry, as
+/// `Runtime::linux_dependencies` names them, with the suffix it appends on a 64 bit target.
+#[cfg(target_os = "linux")]
+const RPM_RUNTIME_LIBRARIES: &[&str] =
+    &["libwebkit2gtk-4.1.so.0()(64bit)", "libgtk-3.so.0()(64bit)"];
+
+/// `bundle.linux` declaring the RPM `Requires` of `RPM_RUNTIME_LIBRARIES` the host's RPM database
+/// cannot resolve as `Provides` of the package itself, or `None` when it resolves all of them (and
+/// for a bundle that is not an RPM).
+///
+/// `rpm` resolves `Requires` against its own database, and on a Debian host that database is the
+/// empty one `apt install rpm` leaves behind: the libraries are there, installed by `apt` - which
+/// is what `installable` checks with `ldconfig` - but nothing in the RPM database provides them, so
+/// both the `rpm -i` that installs the app under test and the `rpm -U` the updater runs fail on
+/// them. A package's own `Provides` satisfy its own `Requires`, so declaring them is what tells
+/// `rpm` what the dynamic linker already knows. On an RPM distro the real packages provide them and
+/// nothing is declared.
+#[cfg(target_os = "linux")]
+fn rpm_self_provides(bundle_target: BundleTarget) -> Option<serde_json::Value> {
+    if !matches!(bundle_target, BundleTarget::Rpm) {
+        return None;
+    }
+
+    let unresolved = RPM_RUNTIME_LIBRARIES
+        .iter()
+        .filter(|library| !command_succeeds("rpm", &["-q", "--whatprovides", library]))
+        .collect::<Vec<_>>();
+    if unresolved.is_empty() {
+        return None;
+    }
+
+    Some(serde_json::json!({ "rpm": { "provides": unresolved } }))
+}
+
+/// Installs the package system wide, which is where the updater will later install the update over
+/// it, and returns the path of the installed executable.
+#[cfg(target_os = "linux")]
+fn install_package(bundle_target: BundleTarget, package: &Path) -> PathBuf {
+    let manager = bundle_target
+        .package_manager()
+        .expect("not a Linux package");
+    // whatever an earlier run left behind
+    remove_package(bundle_target);
+    let status = Command::new("sudo")
+        .args(["-n", manager, "-i"])
+        .arg(package)
+        .status()
+        .expect("failed to run sudo");
+    assert!(status.success(), "failed to install {}", package.display());
+    PathBuf::from("/usr/bin/app-updater")
+}
+
+#[cfg(target_os = "linux")]
+fn remove_package(bundle_target: BundleTarget) {
+    let (manager, remove) = match bundle_target {
+        BundleTarget::Deb => ("dpkg", "-r"),
+        BundleTarget::Rpm => ("rpm", "-e"),
+        _ => return,
+    };
+    let _ = Command::new("sudo")
+        .args(["-n", manager, remove, "app-updater"])
+        .stdout(Stdio::null())
+        .stderr(Stdio::null())
+        .status();
+}
+
 impl Default for BundleTarget {
     fn default() -> Self {
         #[cfg(any(target_os = "macos", target_os = "ios"))]
@@ -128,17 +329,35 @@ impl Default for BundleTarget {
 /// until the next `build_app` call. On Linux and macOS the update is also installed over the very
 /// bundle being run, which would otherwise leave a 1.0.0 app behind in the bundler output.
 ///
-/// Windows drives the executable `cargo build` leaves in `target/release`, which no bundler
-/// touches, so there is nothing to copy there.
-fn stage_app_under_test(root_dir: &Path, target: &str) -> PathBuf {
+/// Windows runs a copy of the executable `cargo build` leaves in `target/release`, patched with the
+/// bundle type (see `patch_bundle_type`). The NSIS update installs into the directory of the
+/// running executable, so the copy also keeps the install out of `target/release`.
+///
+/// A Linux package is not copied but installed: the updater hands the downloaded package to the
+/// package manager, which installs it over the one the app runs from.
+fn stage_app_under_test(root_dir: &Path, target: &str, bundle_target: BundleTarget) -> PathBuf {
     #[cfg(windows)]
     {
         let _ = target;
-        return root_dir.join("target/release/app-updater.exe");
+        let staging_dir = root_dir.join("target/release/app-under-test");
+        let _ = std::fs::remove_dir_all(&staging_dir);
+        std::fs::create_dir_all(&staging_dir).expect("failed to create the staging directory");
+
+        let staged = staging_dir.join("app-updater.exe");
+        patch_bundle_type(&app_binary(root_dir), &staged, bundle_target);
+        return staged;
+    }
+
+    #[cfg(target_os = "linux")]
+    {
+        if bundle_target.package_manager().is_some() {
+            return install_package(bundle_target, &bundle_target.bundle_path(root_dir, "0.1.0"));
+        }
     }
 
     #[cfg(not(windows))]
     {
+        let _ = bundle_target;
         let bundle_path = test_cases(root_dir, "0.1.0", target.to_string())
             .first()
             .unwrap()
@@ -158,10 +377,36 @@ fn stage_app_under_test(root_dir: &Path, target: &str) -> PathBuf {
             )
         });
 
-        return staged;
+        staged
     }
 }
 
+/// Copies `from` to `to` with the bundle type the updater reads through `bundle_type()` set to
+/// `bundle_target`, the way the Tauri CLI does it: by overwriting the first
+/// `__TAURI_BUNDLE_TYPE_VAR_UNK` in the executable.
+///
+/// The executable in `target/release` never carries it. The CLI patches it only for the time it
+/// takes to put it in the installer, then restores the unpatched one, so without this the app
+/// cannot resolve the `{target}-{bundle_type}` platform key and only finds `{target}`.
+#[cfg(windows)]
+fn patch_bundle_type(from: &Path, to: &Path, bundle_target: BundleTarget) {
+    const PLACEHOLDER: &[u8] = b"__TAURI_BUNDLE_TYPE_VAR_UNK";
+    let bundle_type: &[u8] = match bundle_target {
+        BundleTarget::Nsis => b"__TAURI_BUNDLE_TYPE_VAR_NSS",
+        BundleTarget::Msi => b"__TAURI_BUNDLE_TYPE_VAR_MSI",
+        _ => unreachable!("{} is not a Windows bundle", bundle_target.name()),
+    };
+
+    let mut binary =
+        std::fs::read(from).unwrap_or_else(|e| panic!("failed to read {}: {e}", from.display()));
+    let index = binary
+        .windows(PLACEHOLDER.len())
+        .position(|window| window == PLACEHOLDER)
+        .unwrap_or_else(|| panic!("no bundle type placeholder in {}", from.display()));
+    binary[index..index + PLACEHOLDER.len()].copy_from_slice(bundle_type);
+    std::fs::write(to, binary).unwrap_or_else(|e| panic!("failed to write {}: {e}", to.display()));
+}
+
 /// Copies a file, or a directory such as a macOS `.app`, preserving permissions.
 fn copy_recursively(from: &Path, to: &Path) -> std::io::Result<()> {
     if from.is_dir() {
@@ -186,7 +431,7 @@ fn target_to_platforms(
             platform,
             PlatformUpdate {
                 signature,
-                url: "http://localhost:3007/download".into(),
+                url: format!("http://localhost:{UPDATE_PORT}/download"),
                 with_elevated_task: false,
             },
         );
@@ -195,49 +440,68 @@ fn target_to_platforms(
     platforms
 }
 
+/// A bundle to build, the update platform key the server announces it under (none for a manifest
+/// without an update) and the exit codes expected from running the app once per entry.
+type TestCase = (BundleTarget, PathBuf, Option<String>, Vec<i32>);
+
 #[cfg(target_os = "linux")]
-fn test_cases(
-    root_dir: &Path,
-    version: &str,
-    target: String,
-) -> Vec<(BundleTarget, PathBuf, Option<String>, Vec<i32>)> {
+fn test_cases(root_dir: &Path, version: &str, target: String) -> Vec<TestCase> {
+    let appimage = BundleTarget::AppImage.bundle_path(root_dir, version);
     vec![
         // update using fallback
         (
             BundleTarget::AppImage,
-            root_dir.join(format!(
-                "target/release/bundle/appimage/app-updater_{version}_amd64.AppImage"
-            )),
+            appimage.clone(),
             Some(target.clone()),
             vec![UPDATED_EXIT_CODE, UP_TO_DATE_EXIT_CODE],
         ),
         // update using full name
         (
             BundleTarget::AppImage,
-            root_dir.join(format!(
-                "target/release/bundle/appimage/app-updater_{version}_amd64.AppImage"
-            )),
+            appimage.clone(),
             Some(format!("{target}-{}", BundleTarget::AppImage.name())),
             vec![UPDATED_EXIT_CODE, UP_TO_DATE_EXIT_CODE],
         ),
         // no update
         (
             BundleTarget::AppImage,
-            root_dir.join(format!(
-                "target/release/bundle/appimage/app-updater_{version}_amd64.AppImage"
-            )),
+            appimage,
             None,
             vec![ERROR_EXIT_CODE],
         ),
     ]
 }
 
-#[cfg(target_os = "macos")]
-fn test_cases(
+/// The cases of a Linux package: an update announced under the generic target and one under the
+/// package specific target. There is no "no update" case, the AppImage one covers that path.
+#[cfg(target_os = "linux")]
+fn package_test_cases(
     root_dir: &Path,
-    _version: &str,
+    version: &str,
     target: String,
-) -> Vec<(BundleTarget, PathBuf, Option<String>, Vec<i32>)> {
+    bundle_target: BundleTarget,
+) -> Vec<TestCase> {
+    let package = bundle_target.bundle_path(root_dir, version);
+    vec![
+        // update using fallback
+        (
+            bundle_target,
+            package.clone(),
+            Some(target.clone()),
+            vec![UPDATED_EXIT_CODE, UP_TO_DATE_EXIT_CODE],
+        ),
+        // update using full name
+        (
+            bundle_target,
+            package,
+            Some(format!("{target}-{}", bundle_target.name())),
+            vec![UPDATED_EXIT_CODE, UP_TO_DATE_EXIT_CODE],
+        ),
+    ]
+}
+
+#[cfg(target_os = "macos")]
+fn test_cases(root_dir: &Path, _version: &str, target: String) -> Vec<TestCase> {
     vec![
         (
             BundleTarget::App,
@@ -280,11 +544,7 @@ fn bundle_path(root_dir: &Path, _version: &str, v1compatible: bool) -> PathBuf {
 }
 
 #[cfg(windows)]
-fn test_cases(
-    root_dir: &Path,
-    version: &str,
-    target: String,
-) -> Vec<(BundleTarget, PathBuf, Option<String>, Vec<i32>)> {
+fn test_cases(root_dir: &Path, version: &str, target: String) -> Vec<TestCase> {
     vec![
         (
             BundleTarget::Nsis,
@@ -338,6 +598,7 @@ fn test_cases(
 }
 
 #[test]
+#[ignore = "needs the tauri CLI, a display and minutes of build time; the integration tests workflow runs it with --ignored"]
 fn update_app() {
     let _lock = BUILD_LOCK.lock().unwrap_or_else(|e| e.into_inner());
 
@@ -346,11 +607,12 @@ fn update_app() {
     let manifest_dir = PathBuf::from(env!("CARGO_MANIFEST_DIR"));
     let root_dir = manifest_dir.join("../../../..");
 
-    for mut config in [
+    for config in [
         Config {
             version: "1.0.0",
             bundle: BundleConfig {
                 create_updater_artifacts: Updater::Bool(true),
+                linux: None,
             },
             plugins: None,
         },
@@ -358,162 +620,219 @@ fn update_app() {
             version: "1.0.0",
             bundle: BundleConfig {
                 create_updater_artifacts: Updater::String(V1Compatible::V1Compatible),
+                linux: None,
             },
             plugins: None,
         },
     ] {
-        let v1_compatible = matches!(
-            config.bundle.create_updater_artifacts,
-            Updater::String(V1Compatible::V1Compatible)
+        let cases = test_cases(&root_dir, "1.0.0", target.clone());
+        run_update_cases(&manifest_dir, &root_dir, &target, config, cases);
+    }
+}
+
+/// The updater installs a deb through `dpkg` and an rpm through `rpm`, so this runs the installed
+/// app and lets the update replace it system wide. It only runs where that can happen without any
+/// prompt (see `BundleTarget::installable`) and removes the package when done.
+#[cfg(target_os = "linux")]
+#[test]
+#[ignore = "needs the tauri CLI, a display and minutes of build time; the integration tests workflow runs it with --ignored"]
+fn update_app_deb() {
+    update_linux_package(BundleTarget::Deb);
+}
+
+/// See `update_app_deb`.
+#[cfg(target_os = "linux")]
+#[test]
+#[ignore = "needs the tauri CLI, a display and minutes of build time; the integration tests workflow runs it with --ignored"]
+fn update_app_rpm() {
+    update_linux_package(BundleTarget::Rpm);
+}
+
+#[cfg(target_os = "linux")]
+fn update_linux_package(bundle_target: BundleTarget) {
+    let _lock = BUILD_LOCK.lock().unwrap_or_else(|e| e.into_inner());
+
+    if let Err(reason) = bundle_target.installable() {
+        // the integration tests workflow installs everything this needs, so a skip there means the
+        // test quietly stopped covering the package - libtest swallows the message on a pass
+        assert!(
+            std::env::var_os("CI").is_none(),
+            "cannot run the {} update test: {reason}",
+            bundle_target.name()
+        );
+        eprintln!(
+            "skipping the {} update test: {reason}",
+            bundle_target.name()
+        );
+        return;
+    }
+
+    let target =
+        tauri_plugin_updater::target().expect("running updater test in an unsupported platform");
+    let manifest_dir = PathBuf::from(env!("CARGO_MANIFEST_DIR"));
+    let root_dir = manifest_dir.join("../../../..");
+
+    // the legacy v1 updater never supported these packages, so only the v2 artifacts are tested
+    let config = Config {
+        version: "1.0.0",
+        bundle: BundleConfig {
+            create_updater_artifacts: Updater::Bool(true),
+            linux: rpm_self_provides(bundle_target),
+        },
+        plugins: None,
+    };
+    let cases = package_test_cases(&root_dir, "1.0.0", target.clone(), bundle_target);
+    run_update_cases(&manifest_dir, &root_dir, &target, config, cases);
+}
+
+/// Bundles 1.0.0 as each case's target and serves it, then bundles 0.1.0, runs it once per expected
+/// exit code and checks what it reports.
+fn run_update_cases(
+    manifest_dir: &Path,
+    root_dir: &Path,
+    target: &str,
+    mut config: Config,
+    cases: Vec<TestCase>,
+) {
+    let v1_compatible = matches!(
+        config.bundle.create_updater_artifacts,
+        Updater::String(V1Compatible::V1Compatible)
+    );
+
+    let updater_zip_ext = if v1_compatible {
+        if cfg!(windows) {
+            Some("zip")
+        } else {
+            Some("tar.gz")
+        }
+    } else if cfg!(target_os = "macos") {
+        Some("tar.gz")
+    } else {
+        None
+    };
+
+    for (bundle_target, out_bundle_path, update_platform, status_checks) in cases {
+        // bundle app update
+        config.version = "1.0.0";
+        build_app(manifest_dir, &config, Some(bundle_target));
+
+        let bundle_updater_ext = if v1_compatible {
+            out_bundle_path
+                .extension()
+                .unwrap()
+                .to_str()
+                .unwrap()
+                .replace("exe", "nsis")
+        } else {
+            out_bundle_path
+                .extension()
+                .unwrap()
+                .to_str()
+                .unwrap()
+                .to_string()
+        };
+        let updater_extension = if let Some(updater_zip_ext) = updater_zip_ext {
+            format!("{bundle_updater_ext}.{updater_zip_ext}")
+        } else {
+            bundle_updater_ext
+        };
+        let signature_extension = format!("{updater_extension}.sig");
+        let signature_path = out_bundle_path.with_extension(signature_extension);
+        let signature = std::fs::read_to_string(&signature_path).unwrap_or_else(|_| {
+            panic!("failed to read signature file {}", signature_path.display())
+        });
+        let out_updater_path = out_bundle_path.with_extension(updater_extension);
+        let updater_path = root_dir.join(format!(
+            "target/release/{}",
+            out_updater_path.file_name().unwrap().to_str().unwrap()
+        ));
+        std::fs::rename(&out_updater_path, &updater_path).expect("failed to rename bundle");
+
+        // start the updater server, shut down at the end of the iteration even if a case panics
+        let _server = UpdaterServer::spawn(UPDATE_PORT, move |request| match request.url() {
+            "/" => {
+                let platforms = target_to_platforms(update_platform.clone(), signature.clone());
+
+                let body = serde_json::to_vec(&Update {
+                    version: "1.0.0".into(),
+                    date: time::OffsetDateTime::now_utc()
+                        .format(&time::format_description::well_known::Rfc3339)
+                        .unwrap(),
+                    platforms,
+                })
+                .unwrap();
+                let len = body.len();
+                let response = tiny_http::Response::new(
+                    tiny_http::StatusCode(200),
+                    Vec::new(),
+                    std::io::Cursor::new(body),
+                    Some(len),
+                    None,
+                );
+                let _ = request.respond(response);
+            }
+            "/download" => {
+                let _ = request.respond(tiny_http::Response::from_file(
+                    File::open(&updater_path).unwrap_or_else(|_| {
+                        panic!("failed to open updater bundle {}", updater_path.display())
+                    }),
+                ));
+            }
+            _ => (),
+        });
+
+        config.version = "0.1.0";
+
+        // bundle initial app version; Linux and macOS run the bundle itself, so it cannot be
+        // skipped there
+        build_app(
+            manifest_dir,
+            &config,
+            if cfg!(windows) {
+                None
+            } else {
+                Some(bundle_target)
+            },
         );
 
-        let updater_zip_ext = if v1_compatible {
-            if cfg!(windows) {
-                Some("zip")
-            } else {
-                Some("tar.gz")
-            }
-        } else if cfg!(target_os = "macos") {
-            Some("tar.gz")
-        } else {
-            None
-        };
+        let app_path = stage_app_under_test(root_dir, target, bundle_target);
 
-        for (bundle_target, out_bundle_path, update_platform, status_checks) in
-            test_cases(&root_dir, "1.0.0", target.clone())
+        for expected_exit_code in status_checks {
+            let mut binary_cmd = if cfg!(target_os = "macos") {
+                Command::new(app_path.join("Contents/MacOS/app-updater"))
+            } else if cfg!(target_os = "linux")
+                && std::env::var("CI").map(|v| v == "true").unwrap_or_default()
+            {
+                let mut c = Command::new("xvfb-run");
+                c.arg("--auto-servernum").arg(&app_path);
+                c
+            } else {
+                Command::new(&app_path)
+            };
+
+            binary_cmd.env("TARGET", bundle_target.name());
+
+            let status = binary_cmd
+                .status()
+                .unwrap_or_else(|e| panic!("failed to run {}: {e}", app_path.display()));
+            let code = status.code().unwrap_or(-1);
+
+            if code != expected_exit_code {
+                panic!(
+                    "failed to run app bundled as {}, expected exit code {expected_exit_code}, got {code}",
+                    bundle_target.name()
+                );
+            }
+            #[cfg(windows)]
+            if code == UPDATED_EXIT_CODE {
+                // wait for the update to finish
+                std::thread::sleep(std::time::Duration::from_secs(5));
+            }
+        }
+
+        #[cfg(target_os = "linux")]
         {
-            // bundle app update
-            config.version = "1.0.0";
-            build_app(&manifest_dir, &config, Some(bundle_target));
-
-            let bundle_updater_ext = if v1_compatible {
-                out_bundle_path
-                    .extension()
-                    .unwrap()
-                    .to_str()
-                    .unwrap()
-                    .replace("exe", "nsis")
-            } else {
-                out_bundle_path
-                    .extension()
-                    .unwrap()
-                    .to_str()
-                    .unwrap()
-                    .to_string()
-            };
-            let updater_extension = if let Some(updater_zip_ext) = updater_zip_ext {
-                format!("{bundle_updater_ext}.{updater_zip_ext}")
-            } else {
-                bundle_updater_ext
-            };
-            let signature_extension = format!("{updater_extension}.sig");
-            let signature_path = out_bundle_path.with_extension(signature_extension);
-            let signature = std::fs::read_to_string(&signature_path).unwrap_or_else(|_| {
-                panic!("failed to read signature file {}", signature_path.display())
-            });
-            let out_updater_path = out_bundle_path.with_extension(updater_extension);
-            let updater_path = root_dir.join(format!(
-                "target/release/{}",
-                out_updater_path.file_name().unwrap().to_str().unwrap()
-            ));
-            std::fs::rename(&out_updater_path, &updater_path).expect("failed to rename bundle");
-
-            // start the updater server
-            let server = Arc::new(
-                tiny_http::Server::http("localhost:3007").expect("failed to start updater server"),
-            );
-
-            let server_ = server.clone();
-            std::thread::spawn(move || {
-                for request in server_.incoming_requests() {
-                    match request.url() {
-                        "/" => {
-                            let platforms =
-                                target_to_platforms(update_platform.clone(), signature.clone());
-
-                            let body = serde_json::to_vec(&Update {
-                                version: "1.0.0".into(),
-                                date: time::OffsetDateTime::now_utc()
-                                    .format(&time::format_description::well_known::Rfc3339)
-                                    .unwrap(),
-                                platforms,
-                            })
-                            .unwrap();
-                            let len = body.len();
-                            let response = tiny_http::Response::new(
-                                tiny_http::StatusCode(200),
-                                Vec::new(),
-                                std::io::Cursor::new(body),
-                                Some(len),
-                                None,
-                            );
-                            let _ = request.respond(response);
-                        }
-                        "/download" => {
-                            let _ = request.respond(tiny_http::Response::from_file(
-                                File::open(&updater_path).unwrap_or_else(|_| {
-                                    panic!(
-                                        "failed to open updater bundle {}",
-                                        updater_path.display()
-                                    )
-                                }),
-                            ));
-                        }
-                        _ => (),
-                    }
-                }
-            });
-
-            config.version = "0.1.0";
-
-            // bundle initial app version; Linux and macOS run the bundle itself, so it cannot be
-            // skipped there
-            build_app(
-                &manifest_dir,
-                &config,
-                if cfg!(windows) {
-                    None
-                } else {
-                    Some(bundle_target)
-                },
-            );
-
-            let app_path = stage_app_under_test(&root_dir, &target);
-
-            for expected_exit_code in status_checks {
-                let mut binary_cmd = if cfg!(target_os = "macos") {
-                    Command::new(app_path.join("Contents/MacOS/app-updater"))
-                } else if cfg!(target_os = "linux")
-                    && std::env::var("CI").map(|v| v == "true").unwrap_or_default()
-                {
-                    let mut c = Command::new("xvfb-run");
-                    c.arg("--auto-servernum").arg(&app_path);
-                    c
-                } else {
-                    Command::new(&app_path)
-                };
-
-                binary_cmd.env("TARGET", bundle_target.name());
-
-                let status = binary_cmd
-                    .status()
-                    .unwrap_or_else(|e| panic!("failed to run {}: {e}", app_path.display()));
-                let code = status.code().unwrap_or(-1);
-
-                if code != expected_exit_code {
-                    panic!(
-                        "failed to run app bundled as {}, expected exit code {expected_exit_code}, got {code}", bundle_target.name()
-                    );
-                }
-                #[cfg(windows)]
-                if code == UPDATED_EXIT_CODE {
-                    // wait for the update to finish
-                    std::thread::sleep(std::time::Duration::from_secs(5));
-                }
-            }
-
-            // graceful shutdown
-            server.unblock();
+            remove_package(bundle_target);
         }
     }
 }
@@ -536,14 +855,65 @@ fn app_binary(root_dir: &Path) -> PathBuf {
     })
 }
 
-/// Runs the app against the update server, restoring the binary from `pristine` first.
+/// How the app under test has to be built for an install to stay contained.
 ///
-/// A case that clears the version check goes on to actually install, and on Linux installing means
-/// writing the downloaded bytes over the running executable. Every case therefore has to start
-/// from an untouched binary, or the first one that passes leaves the update behind as the app.
+/// Windows and Linux install over the executable itself, so a bare `cargo build` is enough there.
+/// macOS replaces the whole `.app` the running executable sits in, and for an executable that is
+/// not in one the updater falls back to the directory merely holding it — `target/release`, which
+/// is also where the bundle being served and the build cache live. So macOS bundles the app and
+/// runs it out of a staged copy of that `.app`, which the install is welcome to replace.
+#[cfg(target_os = "macos")]
+const APP_UNDER_TEST_BUNDLE: Option<BundleTarget> = Some(BundleTarget::App);
+#[cfg(not(target_os = "macos"))]
+const APP_UNDER_TEST_BUNDLE: Option<BundleTarget> = None;
+
+/// Where `build_app` leaves the app under test.
+fn built_app(root_dir: &Path) -> PathBuf {
+    #[cfg(target_os = "macos")]
+    return root_dir.join("target/release/bundle/macos/app-updater.app");
+    #[cfg(not(target_os = "macos"))]
+    return app_binary(root_dir);
+}
+
+/// The copy the test runs, kept out of the way of both the bundler and the build cache.
+fn staged_app(root_dir: &Path) -> PathBuf {
+    #[cfg(target_os = "macos")]
+    return root_dir.join("target/release/app-under-test-signed/app-updater.app");
+    #[cfg(not(target_os = "macos"))]
+    return app_binary(root_dir);
+}
+
+/// The executable to launch inside the staged app.
+fn staged_binary(root_dir: &Path) -> PathBuf {
+    #[cfg(target_os = "macos")]
+    return staged_app(root_dir).join("Contents/MacOS/app-updater");
+    #[cfg(not(target_os = "macos"))]
+    return staged_app(root_dir);
+}
+
+/// Puts the pristine 0.1.0 app back where the test runs it, replacing whatever an install left.
+fn restore_app(root_dir: &Path, pristine: &Path) {
+    let app = staged_app(root_dir);
+    let _ = std::fs::remove_dir_all(&app);
+    let _ = std::fs::remove_file(&app);
+    std::fs::create_dir_all(app.parent().unwrap()).expect("failed to create the staging directory");
+    copy_recursively(pristine, &app).unwrap_or_else(|e| {
+        panic!(
+            "failed to restore {} from {}: {e}",
+            app.display(),
+            pristine.display()
+        )
+    });
+}
+
+/// Runs the app against the update server, restoring it from `pristine` first.
+///
+/// A case that clears the version check goes on to actually install, and installing means writing
+/// over what the app runs from. Every case therefore has to start from an untouched copy, or the
+/// first one that passes leaves the update behind as the app.
 fn run_app(root_dir: &Path, pristine: &Path) -> String {
-    let binary = app_binary(root_dir);
-    std::fs::copy(pristine, &binary).expect("failed to restore the app binary");
+    restore_app(root_dir, pristine);
+    let binary = staged_binary(root_dir);
 
     let mut command = if cfg!(target_os = "linux")
         && std::env::var("CI").map(|v| v == "true").unwrap_or_default()
@@ -568,6 +938,7 @@ fn run_app(root_dir: &Path, pristine: &Path) -> String {
 /// reaches the installer while an accepted one does. Both exit non-zero, which is why these assert
 /// on the error message rather than the exit code.
 #[test]
+#[ignore = "needs the tauri CLI, a display and minutes of build time; the integration tests workflow runs it with --ignored"]
 fn update_validates_signed_version() {
     let _lock = BUILD_LOCK.lock().unwrap_or_else(|e| e.into_inner());
 
@@ -584,6 +955,7 @@ fn update_validates_signed_version() {
             version: "1.0.0",
             bundle: BundleConfig {
                 create_updater_artifacts: Updater::Bool(true),
+                linux: None,
             },
             plugins: None,
         },
@@ -624,57 +996,48 @@ fn update_validates_signed_version() {
         version: "1.0.0".into(),
     }));
 
-    let server = Arc::new(
-        tiny_http::Server::http(format!("localhost:{SIGNED_VERSION_PORT}"))
-            .expect("failed to start updater server"),
-    );
-
-    let server_ = server.clone();
     let served_ = served.clone();
     let target_ = target.clone();
     let updater_path_ = updater_path.clone();
-    std::thread::spawn(move || {
-        for request in server_.incoming_requests() {
-            match request.url() {
-                "/" => {
-                    let mut platforms = HashMap::new();
-                    platforms.insert(
-                        target_.clone(),
-                        PlatformUpdate {
-                            // always the genuine 1.0.0 signature; only the version above it moves
-                            signature: signature.clone(),
-                            url: format!("http://localhost:{SIGNED_VERSION_PORT}/download"),
-                            with_elevated_task: false,
-                        },
-                    );
+    // shut down at the end of the test even if a check below panics
+    let _server = UpdaterServer::spawn(SIGNED_VERSION_PORT, move |request| match request.url() {
+        "/" => {
+            let mut platforms = HashMap::new();
+            platforms.insert(
+                target_.clone(),
+                PlatformUpdate {
+                    // always the genuine 1.0.0 signature; only the version above it moves
+                    signature: signature.clone(),
+                    url: format!("http://localhost:{SIGNED_VERSION_PORT}/download"),
+                    with_elevated_task: false,
+                },
+            );
 
-                    let body = serde_json::to_vec(&Update {
-                        version: served_.lock().unwrap().version.clone(),
-                        date: time::OffsetDateTime::now_utc()
-                            .format(&time::format_description::well_known::Rfc3339)
-                            .unwrap(),
-                        platforms,
-                    })
-                    .unwrap();
-                    let len = body.len();
-                    let _ = request.respond(tiny_http::Response::new(
-                        tiny_http::StatusCode(200),
-                        Vec::new(),
-                        std::io::Cursor::new(body),
-                        Some(len),
-                        None,
-                    ));
-                }
-                "/download" => {
-                    let _ = request.respond(tiny_http::Response::from_file(
-                        File::open(&updater_path_).unwrap_or_else(|_| {
-                            panic!("failed to open updater bundle {}", updater_path_.display())
-                        }),
-                    ));
-                }
-                _ => (),
-            }
+            let body = serde_json::to_vec(&Update {
+                version: served_.lock().unwrap().version.clone(),
+                date: time::OffsetDateTime::now_utc()
+                    .format(&time::format_description::well_known::Rfc3339)
+                    .unwrap(),
+                platforms,
+            })
+            .unwrap();
+            let len = body.len();
+            let _ = request.respond(tiny_http::Response::new(
+                tiny_http::StatusCode(200),
+                Vec::new(),
+                std::io::Cursor::new(body),
+                Some(len),
+                None,
+            ));
         }
+        "/download" => {
+            let _ = request.respond(tiny_http::Response::from_file(
+                File::open(&updater_path_).unwrap_or_else(|_| {
+                    panic!("failed to open updater bundle {}", updater_path_.display())
+                }),
+            ));
+        }
+        _ => (),
     });
 
     // `requireSignedVersion` is baked in by `generate_context!`, so each value needs its own build
@@ -686,6 +1049,7 @@ fn update_validates_signed_version() {
                 version: "0.1.0",
                 bundle: BundleConfig {
                     create_updater_artifacts: Updater::Bool(true),
+                    linux: None,
                 },
                 plugins: Some(serde_json::json!({
                     "updater": {
@@ -694,10 +1058,12 @@ fn update_validates_signed_version() {
                     }
                 })),
             },
-            None,
+            APP_UNDER_TEST_BUNDLE,
         );
-        std::fs::copy(app_binary(&root_dir), &pristine)
-            .expect("failed to keep a pristine copy of the app binary");
+        let _ = std::fs::remove_dir_all(&pristine);
+        let _ = std::fs::remove_file(&pristine);
+        copy_recursively(&built_app(&root_dir), &pristine)
+            .expect("failed to keep a pristine copy of the app");
     };
 
     let check = |announced: &str, expected: Option<&str>, unexpected: Option<&str>| {
@@ -730,9 +1096,8 @@ fn update_validates_signed_version() {
     // a signature that names a version is held to it whether or not the option is on
     check("1.5.0", Some(MISMATCH_ERROR), None);
 
-    server.unblock();
-
-    // leave a runnable binary behind rather than whichever update was installed last
-    let _ = std::fs::copy(&pristine, app_binary(&root_dir));
+    // leave the 0.1.0 app behind rather than whichever update was installed last
+    restore_app(&root_dir, &pristine);
+    let _ = std::fs::remove_dir_all(&pristine);
     let _ = std::fs::remove_file(&pristine);
 }
diff --git a/plugins/updater/tests/updater-migration/tests/update.rs b/plugins/updater/tests/updater-migration/tests/update.rs
index 813da3c61..5fa8b010d 100644
--- a/plugins/updater/tests/updater-migration/tests/update.rs
+++ b/plugins/updater/tests/updater-migration/tests/update.rs
@@ -2,6 +2,7 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+#![cfg(any(target_os = "linux", target_os = "macos", windows))]
 #![allow(dead_code, unused_imports)]
 
 use std::{
@@ -32,7 +33,7 @@ fn npm_command() -> Command {
 }
 
 mod v1 {
-    use super::{npm_command, BundleTarget, UPDATER_PRIVATE_KEY};
+    use super::{BundleTarget, UPDATER_PRIVATE_KEY, npm_command};
     use serde::Serialize;
     use std::{
         path::{Path, PathBuf},
diff --git a/plugins/updater/tests/updater-migration/v1-app/Cargo.toml b/plugins/updater/tests/updater-migration/v1-app/Cargo.toml
index e99e4108d..510c4229f 100644
--- a/plugins/updater/tests/updater-migration/v1-app/Cargo.toml
+++ b/plugins/updater/tests/updater-migration/v1-app/Cargo.toml
@@ -3,7 +3,7 @@ workspace = {}
 [package]
 name = "app-updater-v1"
 version = "0.1.0"
-edition = "2021"
+edition = "2024"
 
 [build-dependencies]
 tauri-build = { version = "1", features = [] }
diff --git a/plugins/upload/CHANGELOG.md b/plugins/upload/CHANGELOG.md
index 3c4ff5b92..c0286c78d 100644
--- a/plugins/upload/CHANGELOG.md
+++ b/plugins/upload/CHANGELOG.md
@@ -8,6 +8,12 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.5.0]
+
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
 ## [2.4.1]
 
 - [`f8053e65`](https://github.com/tauri-apps/plugins-workspace/commit/f8053e659e4ccd85c1f52833411ff8417cbc5e69) ([#3527](https://github.com/tauri-apps/plugins-workspace/pull/3527) by [@Legend-Master](https://github.com/tauri-apps/plugins-workspace/../../Legend-Master)) Documented Cargo feature flags in each plugin's crate-level documentation.
diff --git a/plugins/upload/guest-js/index.ts b/plugins/upload/guest-js/index.ts
index 1cb9d4897..9a824898d 100644
--- a/plugins/upload/guest-js/index.ts
+++ b/plugins/upload/guest-js/index.ts
@@ -2,20 +2,62 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+/**
+ * Upload files from disk to a remote server over HTTP, and download files from a remote HTTP
+ * server to disk.
+ *
+ * @module
+ */
+
 import { invoke, Channel } from '@tauri-apps/api/core'
 
+/**
+ * The payload sent to a {@link ProgressHandler} while an upload or download is in progress.
+ */
 interface ProgressPayload {
+  /**
+   * The number of bytes transferred since the previous progress event (i.e. the size of the
+   * last chunk), not the cumulative total.
+   */
   progress: number
+  /**
+   * The cumulative number of bytes transferred so far.
+   */
   progressTotal: number
+  /**
+   * The total size of the transfer in bytes. For a download this is the value of the response's
+   * `Content-Length` header, and is `0` if the server did not send it or the response body is
+   * compressed. For an upload this is the size of the file being uploaded.
+   */
   total: number
+  /**
+   * The current transfer speed, approximately in bytes per second. It is recalculated about
+   * every 500 milliseconds and stays at `0` until then.
+   */
   transferSpeed: number
 }
 
+/**
+ * A callback invoked with a {@link ProgressPayload} every time a chunk of data is
+ * uploaded or downloaded.
+ */
 type ProgressHandler = (progress: ProgressPayload) => void
 
+/**
+ * The HTTP method used to send the file to the server in {@link upload}.
+ */
 enum HttpMethod {
+  /**
+   * Send the file using an HTTP `POST` request. This is the default when no method is given.
+   */
   Post = 'POST',
+  /**
+   * Send the file using an HTTP `PUT` request.
+   */
   Put = 'PUT',
+  /**
+   * Send the file using an HTTP `PATCH` request.
+   */
   Patch = 'PATCH'
 }
 
diff --git a/plugins/upload/src/lib.rs b/plugins/upload/src/lib.rs
index 33f83288d..4ce1058de 100644
--- a/plugins/upload/src/lib.rs
+++ b/plugins/upload/src/lib.rs
@@ -21,12 +21,11 @@ mod transfer_stats;
 use transfer_stats::TransferStats;
 
 use futures_util::TryStreamExt;
-use serde::{ser::Serializer, Deserialize, Serialize};
+use serde::{Deserialize, Serialize, ser::Serializer};
 use tauri::{
-    command,
+    Runtime, command,
     ipc::Channel,
     plugin::{Builder as PluginBuilder, TauriPlugin},
-    Runtime,
 };
 use tokio::{
     fs::File,
@@ -38,24 +37,39 @@ use read_progress_stream::ReadProgressStream;
 
 use std::collections::HashMap;
 
+/// The HTTP method used to send the file in the `upload` command.
+///
+/// Serialized as an uppercase string (`"POST"`, `"PUT"` or `"PATCH"`) to match the JavaScript
+/// guest bindings.
 #[derive(Debug, Clone, Serialize, Deserialize)]
 #[serde(rename_all = "UPPERCASE")]
 pub enum HttpMethod {
+    /// Send the file with an HTTP `POST` request. This is the default when no method is given.
     Post,
+    /// Send the file with an HTTP `PUT` request.
     Put,
+    /// Send the file with an HTTP `PATCH` request.
     Patch,
 }
 
 type Result<T> = std::result::Result<T, Error>;
 
+/// The error type returned by this plugin's `upload` and `download` commands.
 #[derive(Debug, thiserror::Error)]
 pub enum Error {
+    /// An I/O error, for example failing to open, read or write the file at the given path, or
+    /// the background task that performs the transfer panicking.
     #[error(transparent)]
     Io(#[from] std::io::Error),
+    /// An error returned by the underlying [`reqwest`] HTTP client while sending the request or
+    /// reading the response.
     #[error(transparent)]
     Request(#[from] reqwest::Error),
+    /// The content length of the request or response could not be determined.
     #[error("{0}")]
     ContentLength(String),
+    /// The HTTP response did not indicate success. Contains the status code and the response
+    /// body text.
     #[error("request failed with status code {0}: {1}")]
     HttpErrorCode(u16, String),
 }
@@ -193,6 +207,7 @@ fn file_to_body(channel: Channel<ProgressPayload>, file: File, file_len: u64) ->
     ))
 }
 
+/// Initializes the upload plugin, registering the `upload` and `download` commands.
 pub fn init<R: Runtime>() -> TauriPlugin<R> {
     PluginBuilder::new("upload")
         .invoke_handler(tauri::generate_handler![download, upload])
diff --git a/plugins/websocket/CHANGELOG.md b/plugins/websocket/CHANGELOG.md
index 1a88d03f8..ea827e55b 100644
--- a/plugins/websocket/CHANGELOG.md
+++ b/plugins/websocket/CHANGELOG.md
@@ -8,6 +8,12 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.5.0]
+
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
 ## [2.4.3]
 
 - [`f8053e65`](https://github.com/tauri-apps/plugins-workspace/commit/f8053e659e4ccd85c1f52833411ff8417cbc5e69) ([#3527](https://github.com/tauri-apps/plugins-workspace/pull/3527) by [@Legend-Master](https://github.com/tauri-apps/plugins-workspace/../../Legend-Master)) Documented Cargo feature flags in each plugin's crate-level documentation.
diff --git a/plugins/websocket/examples/tauri-app/src-tauri/Cargo.toml b/plugins/websocket/examples/tauri-app/src-tauri/Cargo.toml
index 6397b7de6..7bd37e94d 100644
--- a/plugins/websocket/examples/tauri-app/src-tauri/Cargo.toml
+++ b/plugins/websocket/examples/tauri-app/src-tauri/Cargo.toml
@@ -2,7 +2,7 @@
 name = "websocket-example"
 version = "0.1.0"
 description = "A Tauri App"
-edition = "2021"
+edition = "2024"
 
 [dependencies]
 serde = { workspace = true }
diff --git a/plugins/websocket/guest-js/index.ts b/plugins/websocket/guest-js/index.ts
index 7ea7b3265..ca0af4420 100644
--- a/plugins/websocket/guest-js/index.ts
+++ b/plugins/websocket/guest-js/index.ts
@@ -2,8 +2,17 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+/**
+ * Open a WebSocket connection using a Rust client in JS.
+ *
+ * @module
+ */
+
 import { invoke, Channel } from '@tauri-apps/api/core'
 
+/**
+ * Configuration used to open a WebSocket connection, forwarded to the underlying `tungstenite` client.
+ */
 export interface ConnectionConfig {
   /**
    * Read buffer capacity. The default value is 128 KiB.
@@ -39,16 +48,29 @@ export interface ConnectionConfig {
   headers?: HeadersInit
 }
 
+/**
+ * A tagged WebSocket message, discriminated by its `type` field.
+ */
 export interface MessageKind<T, D> {
+  /** The kind of message, e.g. `'Text'`, `'Binary'`, `'Ping'`, `'Pong'` or `'Close'`. */
   type: T
+  /** The message payload, whose shape depends on {@link MessageKind.type}. */
   data: D
 }
 
+/**
+ * The code and reason sent (or received) when a WebSocket connection is closed.
+ */
 export interface CloseFrame {
+  /** The WebSocket close status code, e.g. `1000` for a normal closure. */
   code: number
+  /** A human-readable explanation for why the connection was closed. */
   reason: string
 }
 
+/**
+ * A message sent to or received from a WebSocket connection.
+ */
 export type Message =
   | MessageKind<'Text', string>
   | MessageKind<'Binary', number[]>
@@ -56,15 +78,52 @@ export type Message =
   | MessageKind<'Pong', number[]>
   | MessageKind<'Close', CloseFrame | null>
 
+/**
+ * A WebSocket connection, created with {@link WebSocket.connect}.
+ *
+ * @since 2.0.0
+ */
 export default class WebSocket {
+  /** The identifier of the underlying connection managed by the Rust side. */
   id: number
   private readonly listeners: Set<(arg: Message) => void>
 
+  /**
+   * Creates a {@link WebSocket} wrapper around an already-open connection.
+   *
+   * This is used internally by {@link WebSocket.connect}; use that instead of calling this
+   * constructor directly.
+   *
+   * @param id The identifier of the connection returned by the Rust side.
+   * @param listeners The set of callbacks to notify when a message is received.
+   * @example
+   * ```typescript
+   * import WebSocket from '@tauri-apps/plugin-websocket';
+   *
+   * // internally used by `WebSocket.connect`; prefer calling that instead
+   * const ws = await WebSocket.connect('wss://example.com');
+   * ```
+   */
   constructor(id: number, listeners: Set<(arg: Message) => void>) {
     this.id = id
     this.listeners = listeners
   }
 
+  /**
+   * Opens a WebSocket connection to the given URL.
+   * @example
+   * ```typescript
+   * import WebSocket from '@tauri-apps/plugin-websocket';
+   *
+   * const ws = await WebSocket.connect('wss://example.com');
+   * ```
+   *
+   * @param url The URL to connect to, e.g. `ws://` or `wss://` (the latter requires one of the
+   * plugin's TLS Cargo features to be enabled).
+   * @param config Configuration forwarded to the underlying `tungstenite` client.
+   * @returns A promise resolving to the connected {@link WebSocket}.
+   * @since 2.0.0
+   */
   static async connect(
     url: string,
     config?: ConnectionConfig
@@ -89,6 +148,20 @@ export default class WebSocket {
     }).then((id) => new WebSocket(id, listeners))
   }
 
+  /**
+   * Adds a listener that is called whenever a message is received on this connection, including
+   * an error message (as a `'Close'` message) when the underlying stream fails.
+   * @example
+   * ```typescript
+   * import WebSocket from '@tauri-apps/plugin-websocket';
+   *
+   * const ws = await WebSocket.connect('wss://example.com');
+   * const unlisten = ws.addListener((message) => console.log(message));
+   * ```
+   *
+   * @param cb The callback invoked with each received {@link Message}.
+   * @returns A function that removes the listener when called.
+   */
   addListener(cb: (arg: Message) => void): () => void {
     this.listeners.add(cb)
 
@@ -97,6 +170,22 @@ export default class WebSocket {
     }
   }
 
+  /**
+   * Sends a message through the WebSocket connection.
+   * @example
+   * ```typescript
+   * import WebSocket from '@tauri-apps/plugin-websocket';
+   *
+   * const ws = await WebSocket.connect('wss://example.com');
+   * await ws.send('Hello World');
+   * await ws.send([1, 2, 3]);
+   * await ws.send({ type: 'Text', data: 'Hello World' });
+   * ```
+   *
+   * @param message The message to send: a plain string (sent as a `'Text'` message), a numeric
+   * array (sent as a `'Binary'` message), or an explicit {@link Message} object.
+   * @returns A promise resolving when the message has been sent.
+   */
   async send(message: Message | string | number[]): Promise<void> {
     let m: Message
     if (typeof message === 'string') {
@@ -116,6 +205,16 @@ export default class WebSocket {
     })
   }
 
+  /**
+   * Closes the WebSocket connection, sending a normal closure (`1000`) close frame to the server.
+   * @example
+   * ```typescript
+   * import WebSocket from '@tauri-apps/plugin-websocket';
+   *
+   * const ws = await WebSocket.connect('wss://example.com');
+   * await ws.disconnect();
+   * ```
+   */
   async disconnect(): Promise<void> {
     await this.send({
       type: 'Close',
diff --git a/plugins/websocket/src/lib.rs b/plugins/websocket/src/lib.rs
index 135be836c..35a0cb421 100644
--- a/plugins/websocket/src/lib.rs
+++ b/plugins/websocket/src/lib.rs
@@ -18,13 +18,13 @@
     html_favicon_url = "https://github.com/tauri-apps/tauri/raw/dev/app-icon.png"
 )]
 
-use futures_util::{stream::SplitSink, SinkExt, StreamExt};
+use futures_util::{SinkExt, StreamExt, stream::SplitSink};
 use http::header::{HeaderName, HeaderValue};
-use serde::{ser::Serializer, Deserialize, Serialize};
+use serde::{Deserialize, Serialize, ser::Serializer};
 use tauri::{
+    Manager, Runtime, State, Window,
     ipc::Channel,
     plugin::{Builder as PluginBuilder, TauriPlugin},
-    Manager, Runtime, State, Window,
 };
 use tokio::{net::TcpStream, sync::Mutex};
 #[cfg(any(
@@ -40,12 +40,12 @@ use tokio_tungstenite::connect_async_tls_with_config;
 )))]
 use tokio_tungstenite::connect_async_with_config;
 use tokio_tungstenite::{
+    Connector, MaybeTlsStream, WebSocketStream,
     tungstenite::{
+        Message,
         client::IntoClientRequest,
         protocol::{CloseFrame as ProtocolCloseFrame, WebSocketConfig},
-        Message,
     },
-    Connector, MaybeTlsStream, WebSocketStream,
 };
 
 use std::collections::HashMap;
@@ -274,27 +274,36 @@ async fn send(
     }
 }
 
+/// Initializes the plugin with the default [`Builder`], i.e. without a custom TLS [`Connector`].
 pub fn init<R: Runtime>() -> TauriPlugin<R> {
     Builder::default().build()
 }
 
+/// Builder for the WebSocket plugin, used to configure a custom TLS [`Connector`] before calling [`Builder::build`].
 #[derive(Default)]
 pub struct Builder {
     tls_connector: Option<Connector>,
 }
 
 impl Builder {
+    /// Creates a new [`Builder`] with no custom TLS [`Connector`] configured.
     pub fn new() -> Self {
         Self {
             tls_connector: None,
         }
     }
 
+    /// Sets the TLS [`Connector`] used to establish `wss://` connections.
+    ///
+    /// When this is not called (or is called with [`Connector::Plain`]) and a `rustls-tls` or
+    /// `rustls-tls-native-roots` feature is enabled, [`Builder::build`] installs `rustls`'s `ring`
+    /// crypto provider as the process default if none is installed yet.
     pub fn tls_connector(mut self, connector: Connector) -> Self {
         self.tls_connector.replace(connector);
         self
     }
 
+    /// Builds the plugin, registering the `connect` and `send` commands and the shared connection state.
     pub fn build<R: Runtime>(self) -> TauriPlugin<R> {
         PluginBuilder::new("websocket")
             .invoke_handler(tauri::generate_handler![connect, send])
diff --git a/plugins/window-state/CHANGELOG.md b/plugins/window-state/CHANGELOG.md
index 56cf8428e..449771347 100644
--- a/plugins/window-state/CHANGELOG.md
+++ b/plugins/window-state/CHANGELOG.md
@@ -8,6 +8,12 @@
 
 - [`363438b5`](https://github.com/tauri-apps/plugins-workspace/commit/363438b50a09162379d57c7c7bfc132520c1e5d4) Update to tauri 3.0 alpha.
 
+## [2.5.0]
+
+- [`ae3c808e`](https://github.com/tauri-apps/plugins-workspace/commit/ae3c808eb60086f32b1d67bb8ccc525b95333e77) ([#3602](https://github.com/tauri-apps/plugins-workspace/pull/3602)) The plugin's global API script (used with `app.withGlobalTauri`) now resolves the core API from `window.__TAURI__` instead of bundling its own copy of `@tauri-apps/api`. Values created with the core API are now accepted by plugin APIs in global mode (e.g. an `Image` from `window.__TAURI__.image` passed to `clipboardManager.writeImage`, which previously failed the `instanceof` check against the plugin's private copy), and the script is considerably smaller.
+- [`9b29b601`](https://github.com/tauri-apps/plugins-workspace/commit/9b29b601f387ded1f4adb4386623a3c035a5598c) Update MSRV to 1.90 to match tauri.
+- [`a87a3c7d`](https://github.com/tauri-apps/plugins-workspace/commit/a87a3c7d4491bf25589a0b24c285fcd5df3d6337) Update documentation.
+
 ## \[2.4.1]
 
 - [`93426f85`](https://github.com/tauri-apps/plugins-workspace/commit/93426f85120f49beb9f40222bff45185a32d54a9) Fixed an issue that caused docs.rs builds to fail. No user facing changes.
diff --git a/plugins/window-state/guest-js/index.ts b/plugins/window-state/guest-js/index.ts
index 1cbd57332..a2351a316 100644
--- a/plugins/window-state/guest-js/index.ts
+++ b/plugins/window-state/guest-js/index.ts
@@ -2,21 +2,48 @@
 // SPDX-License-Identifier: Apache-2.0
 // SPDX-License-Identifier: MIT
 
+/**
+ * Save and restore window positions and sizes.
+ *
+ * @module
+ */
+
 import { invoke } from '@tauri-apps/api/core'
 import { type WindowLabel, getCurrentWindow } from '@tauri-apps/api/window'
 
+/**
+ * Flags controlling which parts of a window's state are saved and restored.
+ * Combine multiple flags with the bitwise OR operator (`|`).
+ */
 export enum StateFlags {
+  /** Save and restore the window size. */
   SIZE = 1 << 0,
+  /** Save and restore the window position. */
   POSITION = 1 << 1,
+  /** Save and restore whether the window is maximized. */
   MAXIMIZED = 1 << 2,
+  /** Save and restore whether the window is visible. */
   VISIBLE = 1 << 3,
+  /** Save and restore whether the window has decorations. */
   DECORATIONS = 1 << 4,
+  /** Save and restore whether the window is fullscreen. */
   FULLSCREEN = 1 << 5,
+  /** Save and restore every flag above. */
   ALL = SIZE | POSITION | MAXIMIZED | VISIBLE | DECORATIONS | FULLSCREEN
 }
 
 /**
  *  Save the state of all open windows to disk.
+ *
+ * @example
+ * ```typescript
+ * import { saveWindowState, StateFlags } from '@tauri-apps/plugin-window-state';
+ *
+ * await saveWindowState(StateFlags.ALL);
+ * ```
+ *
+ * @param flags Which parts of the state to save. Defaults to the flags passed to the plugin `Builder` (all flags if none were set).
+ * @since 2.0.0
  */
 async function saveWindowState(flags?: StateFlags): Promise<void> {
   await invoke('plugin:window-state|save_window_state', { flags })
@@ -24,6 +51,17 @@ async function saveWindowState(flags?: StateFlags): Promise<void> {
 
 /**
  *  Restore the state for the specified window from disk.
+ *
+ * @example
+ * ```typescript
+ * import { restoreState, StateFlags } from '@tauri-apps/plugin-window-state';
+ *
+ * await restoreState('main', StateFlags.ALL);
+ * ```
+ *
+ * @param label The label of the window to restore.
+ * @param flags Which parts of the state to restore. Defaults to the flags passed to the plugin `Builder` (all flags if none were set).
+ * @since 2.0.0
  */
 async function restoreState(
   label: WindowLabel,
@@ -34,12 +72,32 @@ async function restoreState(
 
 /**
  *  Restore the state for the current window from disk.
+ *
+ * @example
+ * ```typescript
+ * import { restoreStateCurrent, StateFlags } from '@tauri-apps/plugin-window-state';
+ *
+ * await restoreStateCurrent(StateFlags.ALL);
+ * ```
+ *
+ * @param flags Which parts of the state to restore. Defaults to the flags passed to the plugin `Builder` (all flags if none were set).
+ * @since 2.0.0
  */
 async function restoreStateCurrent(flags?: StateFlags): Promise<void> {
   await restoreState(getCurrentWindow().label, flags)
 }
 /**
  *  Get the name of the file used to store window state.
+ *
+ * @example
+ * ```typescript
+ * import { filename } from '@tauri-apps/plugin-window-state';
+ *
+ * const name = await filename();
+ * ```
+ *
+ * @returns A promise resolving to the name of the file used to store window state.
+ * @since 2.0.0
  */
 async function filename(): Promise<string> {
   return await invoke('plugin:window-state|filename')
diff --git a/plugins/window-state/src/cmd.rs b/plugins/window-state/src/cmd.rs
index 8b376aa90..baadc01fb 100644
--- a/plugins/window-state/src/cmd.rs
+++ b/plugins/window-state/src/cmd.rs
@@ -3,7 +3,7 @@
 // SPDX-License-Identifier: MIT
 
 use crate::{AppHandleExt, StateFlags, WindowExt};
-use tauri::{command, AppHandle, Manager, Runtime};
+use tauri::{AppHandle, Manager, Runtime, command};
 
 fn get_state_flags<R: Runtime>(
     app: &AppHandle<R>,
diff --git a/plugins/window-state/src/lib.rs b/plugins/window-state/src/lib.rs
index f3e75848a..8aeab6a44 100644
--- a/plugins/window-state/src/lib.rs
+++ b/plugins/window-state/src/lib.rs
@@ -13,9 +13,9 @@
 use bitflags::bitflags;
 use serde::{Deserialize, Serialize};
 use tauri::{
-    plugin::{Builder as PluginBuilder, TauriPlugin},
     AppHandle, Manager, Monitor, PhysicalPosition, PhysicalSize, RunEvent, Runtime, WebviewWindow,
     Window, WindowEvent,
+    plugin::{Builder as PluginBuilder, TauriPlugin},
 };
 
 use std::{
@@ -35,26 +35,41 @@ type FilterCallbackFn = dyn Fn(&str) -> bool + Send + Sync;
 /// If using a custom filename, you should probably use [`AppHandleExt::filename`] instead.
 pub const DEFAULT_FILENAME: &str = ".window-state.json";
 
+/// The error type returned by this plugin's fallible functions.
 #[derive(Debug, thiserror::Error)]
 pub enum Error {
+    /// An I/O error occurred while reading or writing the window state file.
     #[error(transparent)]
     Io(#[from] std::io::Error),
+    /// An error occurred while calling into Tauri, e.g. while resolving the app config directory
+    /// or manipulating a window.
     #[error(transparent)]
     Tauri(#[from] tauri::Error),
+    /// An error occurred while serializing or deserializing the window state file.
     #[error(transparent)]
     SerdeJson(#[from] serde_json::Error),
 }
 
+/// Alias for a [`Result`](std::result::Result) with the error type [`Error`].
 pub type Result<T> = std::result::Result<T, Error>;
 
 bitflags! {
+    /// Flags controlling which parts of a window's state are saved and restored.
+    ///
+    /// Flags can be combined with the bitwise OR operator (`|`), e.g. `StateFlags::SIZE | StateFlags::POSITION`.
     #[derive(Clone, Copy, Debug)]
     pub struct StateFlags: u32 {
+        /// Save and restore the window size.
         const SIZE        = 1 << 0;
+        /// Save and restore the window position.
         const POSITION    = 1 << 1;
+        /// Save and restore whether the window is maximized.
         const MAXIMIZED   = 1 << 2;
+        /// Save and restore whether the window is visible.
         const VISIBLE     = 1 << 3;
+        /// Save and restore whether the window has decorations.
         const DECORATIONS = 1 << 4;
+        /// Save and restore whether the window is fullscreen.
         const FULLSCREEN  = 1 << 5;
     }
 }
@@ -110,6 +125,7 @@ struct WindowStateCache(Arc<Mutex<HashMap<String, WindowState>>>);
 /// Used to prevent deadlocks from resize and position event listeners setting the cached state on restoring states
 struct RestoringWindowState(Mutex<()>);
 
+/// Extension trait for [`AppHandle`] exposing window state APIs.
 pub trait AppHandleExt {
     /// Saves all open windows state to disk
     fn save_window_state(&self, flags: StateFlags) -> Result<()>;
@@ -151,6 +167,7 @@ impl<R: Runtime> AppHandleExt for tauri::AppHandle<R> {
     }
 }
 
+/// Extension trait for [`Window`] and [`WebviewWindow`] exposing window state APIs.
 pub trait WindowExt {
     /// Restores this window state from disk
     fn restore_state(&self, flags: StateFlags) -> tauri::Result<()>;
@@ -321,6 +338,7 @@ impl<R: Runtime> WindowExtInternal for Window<R> {
     }
 }
 
+/// Builder for the window-state [plugin](TauriPlugin).
 #[derive(Default)]
 pub struct Builder {
     denylist: HashSet<String>,
@@ -332,6 +350,8 @@ pub struct Builder {
 }
 
 impl Builder {
+    /// Creates a new [`Builder`] with the default configuration:
+    /// all [`StateFlags`] enabled, no denylist, no filter, and the [`DEFAULT_FILENAME`].
     pub fn new() -> Self {
         Self::default()
     }
@@ -382,6 +402,12 @@ impl Builder {
         self
     }
 
+    /// Builds the [`TauriPlugin`].
+    ///
+    /// The plugin loads the previously saved window state on setup, restores each window's
+    /// state when it becomes ready (unless denylisted, filtered out, or opted out with
+    /// [`Builder::skip_initial_state`]), tracks move/resize events to keep the state up to date,
+    /// and saves the state of all windows to disk when the app exits.
     pub fn build<R: Runtime>(self) -> TauriPlugin<R> {
         let state_flags = self.state_flags;
         let filename = self.filename.unwrap_or_else(|| DEFAULT_FILENAME.into());
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 5f7b415e1..75fd15ec1 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -106,7 +106,9 @@ settings:
   excludeLinksFromLockfile: false
 
 overrides:
+  serialize-javascript@<7.0.5: ^7.0.5
   devalue@<5.9.1: ^5.9.1
+  morgan@<1.12.0: ^1.12.0
 
 importers:
 
@@ -114,7 +116,7 @@ importers:
     devDependencies:
       '@eslint/js':
         specifier: 10.0.1
-        version: 10.0.1(eslint@10.4.0(jiti@2.6.1))
+        version: 10.0.1(eslint@10.4.0(jiti@2.6.1)(supports-color@8.1.1))
       '@rollup/plugin-node-resolve':
         specifier: 16.0.3
         version: 16.0.3(rollup@4.63.1)
@@ -126,10 +128,10 @@ importers:
         version: 12.3.0(rollup@4.63.1)(tslib@2.8.1)(typescript@6.0.3)
       eslint:
         specifier: 10.4.0
-        version: 10.4.0(jiti@2.6.1)
+        version: 10.4.0(jiti@2.6.1)(supports-color@8.1.1)
       eslint-config-prettier:
         specifier: 10.1.8
-        version: 10.1.8(eslint@10.4.0(jiti@2.6.1))
+        version: 10.1.8(eslint@10.4.0(jiti@2.6.1)(supports-color@8.1.1))
       eslint-plugin-security:
         specifier: 4.0.1
         version: 4.0.1
@@ -147,7 +149,7 @@ importers:
         version: 6.0.3
       typescript-eslint:
         specifier: 8.70.0
-        version: 8.70.0(eslint@10.4.0(jiti@2.6.1))(typescript@6.0.3)
+        version: 8.70.0(eslint@10.4.0(jiti@2.6.1)(supports-color@8.1.1))(supports-color@8.1.1)(typescript@6.0.3)
 
   examples/api:
     dependencies:
@@ -166,6 +168,9 @@ importers:
       '@tauri-apps/plugin-clipboard-manager':
         specifier: workspace:*
         version: link:../../plugins/clipboard-manager
+      '@tauri-apps/plugin-deep-link':
+        specifier: workspace:*
+        version: link:../../plugins/deep-link
       '@tauri-apps/plugin-dialog':
         specifier: workspace:*
         version: link:../../plugins/dialog
@@ -196,12 +201,18 @@ importers:
       '@tauri-apps/plugin-os':
         specifier: workspace:*
         version: link:../../plugins/os
+      '@tauri-apps/plugin-positioner':
+        specifier: workspace:*
+        version: link:../../plugins/positioner
       '@tauri-apps/plugin-process':
         specifier: workspace:*
         version: link:../../plugins/process
       '@tauri-apps/plugin-shell':
         specifier: workspace:*
         version: link:../../plugins/shell
+      '@tauri-apps/plugin-sql':
+        specifier: workspace:*
+        version: link:../../plugins/sql
       '@tauri-apps/plugin-store':
         specifier: workspace:*
         version: link:../../plugins/store
@@ -211,6 +222,9 @@ importers:
       '@tauri-apps/plugin-upload':
         specifier: workspace:*
         version: link:../../plugins/upload
+      '@tauri-apps/plugin-websocket':
+        specifier: workspace:*
+        version: link:../../plugins/websocket
       '@zerodevx/svelte-json-view':
         specifier: 2.0.0
         version: 2.0.0(svelte@5.55.7(@typescript-eslint/types@8.70.0))
@@ -223,7 +237,7 @@ importers:
         version: 1.2.2
       '@sveltejs/vite-plugin-svelte':
         specifier: ^7.0.0
-        version: 7.0.0(svelte@5.55.7(@typescript-eslint/types@8.70.0))(vite@8.0.16(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1))
+        version: 7.0.0(svelte@5.55.7(@typescript-eslint/types@8.70.0))(vite@8.0.16(@types/node@22.20.4)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1)(yaml@2.9.1))
       '@tauri-apps/cli':
         specifier: 3.0.0-alpha.1
         version: 3.0.0-alpha.1
@@ -235,10 +249,145 @@ importers:
         version: 5.55.7(@typescript-eslint/types@8.70.0)
       unocss:
         specifier: ^66.6.7
-        version: 66.6.7(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(vite@8.0.16(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1))
+        version: 66.6.7(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3)(vite@8.0.16(@types/node@22.20.4)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1)(yaml@2.9.1))
       vite:
         specifier: ^8.0.16
-        version: 8.0.16(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1)
+        version: 8.0.16(@types/node@22.20.4)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1)(yaml@2.9.1)
+
+  packages/api-e2e:
+    devDependencies:
+      '@crabnebula/tauri-driver':
+        specifier: ^2.0.9
+        version: 2.0.9
+      '@crabnebula/test-runner-backend':
+        specifier: ^0.3.0
+        version: 0.3.0
+      '@tauri-apps/api':
+        specifier: ^3.0.0-alpha.1
+        version: 3.0.0-alpha.1
+      '@tauri-apps/plugin-autostart':
+        specifier: workspace:*
+        version: link:../../plugins/autostart
+      '@tauri-apps/plugin-barcode-scanner':
+        specifier: workspace:*
+        version: link:../../plugins/barcode-scanner
+      '@tauri-apps/plugin-biometric':
+        specifier: workspace:*
+        version: link:../../plugins/biometric
+      '@tauri-apps/plugin-cli':
+        specifier: workspace:*
+        version: link:../../plugins/cli
+      '@tauri-apps/plugin-clipboard-manager':
+        specifier: workspace:*
+        version: link:../../plugins/clipboard-manager
+      '@tauri-apps/plugin-deep-link':
+        specifier: workspace:*
+        version: link:../../plugins/deep-link
+      '@tauri-apps/plugin-dialog':
+        specifier: workspace:*
+        version: link:../../plugins/dialog
+      '@tauri-apps/plugin-fs':
+        specifier: workspace:*
+        version: link:../../plugins/fs
+      '@tauri-apps/plugin-geolocation':
+        specifier: workspace:*
+        version: link:../../plugins/geolocation
+      '@tauri-apps/plugin-global-shortcut':
+        specifier: workspace:*
+        version: link:../../plugins/global-shortcut
+      '@tauri-apps/plugin-haptics':
+        specifier: workspace:*
+        version: link:../../plugins/haptics
+      '@tauri-apps/plugin-http':
+        specifier: workspace:*
+        version: link:../../plugins/http
+      '@tauri-apps/plugin-log':
+        specifier: workspace:*
+        version: link:../../plugins/log
+      '@tauri-apps/plugin-nfc':
+        specifier: workspace:*
+        version: link:../../plugins/nfc
+      '@tauri-apps/plugin-notification':
+        specifier: workspace:*
+        version: link:../../plugins/notification
+      '@tauri-apps/plugin-opener':
+        specifier: workspace:*
+        version: link:../../plugins/opener
+      '@tauri-apps/plugin-os':
+        specifier: workspace:*
+        version: link:../../plugins/os
+      '@tauri-apps/plugin-positioner':
+        specifier: workspace:*
+        version: link:../../plugins/positioner
+      '@tauri-apps/plugin-process':
+        specifier: workspace:*
+        version: link:../../plugins/process
+      '@tauri-apps/plugin-shell':
+        specifier: workspace:*
+        version: link:../../plugins/shell
+      '@tauri-apps/plugin-sql':
+        specifier: workspace:*
+        version: link:../../plugins/sql
+      '@tauri-apps/plugin-store':
+        specifier: workspace:*
+        version: link:../../plugins/store
+      '@tauri-apps/plugin-updater':
+        specifier: workspace:*
+        version: link:../../plugins/updater
+      '@tauri-apps/plugin-upload':
+        specifier: workspace:*
+        version: link:../../plugins/upload
+      '@tauri-apps/plugin-websocket':
+        specifier: workspace:*
+        version: link:../../plugins/websocket
+      '@tauri-apps/plugin-window-state':
+        specifier: workspace:*
+        version: link:../../plugins/window-state
+      '@types/node':
+        specifier: ^22.10.0
+        version: 22.20.4
+      '@types/ws':
+        specifier: ^8.18.1
+        version: 8.18.1
+      '@wdio/appium-service':
+        specifier: ^9.31.9
+        version: 9.32.0(supports-color@8.1.1)
+      '@wdio/cli':
+        specifier: ^9.31.9
+        version: 9.32.0(@types/node@22.20.4)(expect-webdriverio@6.1.0)(supports-color@8.1.1)
+      '@wdio/globals':
+        specifier: ^9.31.3
+        version: 9.31.3(expect-webdriverio@6.1.0)(webdriverio@9.32.0(supports-color@8.1.1))
+      '@wdio/local-runner':
+        specifier: ^9.31.9
+        version: 9.32.0(@wdio/globals@9.31.3)(supports-color@8.1.1)(webdriverio@9.32.0(supports-color@8.1.1))
+      '@wdio/mocha-framework':
+        specifier: ^9.31.9
+        version: 9.32.0(supports-color@8.1.1)
+      '@wdio/spec-reporter':
+        specifier: ^9.31.2
+        version: 9.32.0
+      appium:
+        specifier: ^3.7.0
+        version: 3.8.0(@types/node@22.20.4)(debug@4.4.3(supports-color@8.1.1))(supports-color@8.1.1)
+      appium-uiautomator2-driver:
+        specifier: ^8.7.0
+        version: 8.7.0(@types/node@22.20.4)(appium@3.8.0(@types/node@22.20.4)(debug@4.4.3(supports-color@8.1.1))(supports-color@8.1.1))
+      appium-xcuitest-driver:
+        specifier: ^12.12.4
+        version: 12.13.2(@types/node@22.20.4)(appium@3.8.0(@types/node@22.20.4)(debug@4.4.3(supports-color@8.1.1))(supports-color@8.1.1))
+      cross-env:
+        specifier: ^10.1.0
+        version: 10.1.0
+      typescript:
+        specifier: 6.0.3
+        version: 6.0.3
+      webdriverio:
+        specifier: ^9.31.9
+        version: 9.32.0(supports-color@8.1.1)
+      ws:
+        specifier: ^8.18.0
+        version: 8.21.3
 
   plugins/autostart:
     dependencies:
@@ -297,7 +446,7 @@ importers:
         version: 6.0.3
       vite:
         specifier: ^8.0.16
-        version: 8.0.16(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1)
+        version: 8.0.16(@types/node@22.20.4)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1)(yaml@2.9.1)
 
   plugins/dialog:
     dependencies:
@@ -411,7 +560,7 @@ importers:
         version: 6.0.3
       vite:
         specifier: ^8.0.16
-        version: 8.0.16(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1)
+        version: 8.0.16(@types/node@22.20.4)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1)(yaml@2.9.1)
 
   plugins/stronghold:
     dependencies:
@@ -451,7 +600,7 @@ importers:
         version: 6.0.3
       vite:
         specifier: ^8.0.16
-        version: 8.0.16(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1)
+        version: 8.0.16(@types/node@22.20.4)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1)(yaml@2.9.1)
 
   plugins/window-state:
     dependencies:
@@ -464,15 +613,131 @@ packages:
   '@antfu/install-pkg@1.1.0':
     resolution: {integrity: sha512-MGQsmw10ZyI+EJo45CdSER4zEb+p31LpDAFp2Z3gkSd1yqVZGi0Ebx++YTEMonJy4oChEMLsxZ64j8FH6sSqtQ==}
 
+  '@appium/base-driver@10.8.1':
+    resolution: {integrity: sha512-7dP3hJ7DEqOqG2/SIzVikj7xdKmP5NM16HsYZXw7KcN7sfge7QJDR8mQcwTBmwI0zUIfN3DOMEbHoTaHNOL6HQ==}
+    engines: {node: ^20.19.0 || ^22.12.0 || >=24.0.0, npm: '>=10'}
+
+  '@appium/base-plugin@3.3.5':
+    resolution: {integrity: sha512-FEC8LZNhpTBAAB8A8DFgjnf8gJFoaOBmMIloeBf0/kgEJ/B3PzmuD66lE8TeX/Q5vYfvkjZ0OwSImcjTnYKOqQ==}
+    engines: {node: ^20.19.0 || ^22.12.0 || >=24.0.0, npm: '>=10'}
+
+  '@appium/docutils@3.0.1':
+    resolution: {integrity: sha512-pcEgttRXSBOAl/7/RfHv62X31slVtK6KK23Z3GD/mTtl+/TV1+0QPdNUW8KU4ReNyRgFRnGshqJBuDerVVgwdg==}
+    engines: {node: ^20.19.0 || ^22.12.0 || >=24.0.0, npm: '>=10'}
+    hasBin: true
+
+  '@appium/logger@2.0.12':
+    resolution: {integrity: sha512-ggpPTlZzflwlPAOaTALTsj4yBR6DxOL9Z93F2Kp5cLMNpOr6YvKOuIpUejMhwfIROdyoUuzWCksWIijTPgeSDQ==}
+    engines: {node: ^20.19.0 || ^22.12.0 || >=24.0.0, npm: '>=10'}
+
+  '@appium/schema@1.3.0':
+    resolution: {integrity: sha512-A/1zs8jUr9q/0Ft3dXSvWQN7JMo/bIcFv5o34fWMRtxZwtHsbl44t5PP5nirZOLZfD8G4oFvm0NSyvjs+sqAzg==}
+    engines: {node: ^20.19.0 || ^22.12.0 || >=24.0.0, npm: '>=10'}
+
+  '@appium/support@7.2.8':
+    resolution: {integrity: sha512-MU473pc+ckbu6D3E8kGvUIwHsoSML1y5LZNB0w5c7dMx9ispHK4FYP/0DglrybZQDqlLV8NEVh1fSCkI5m3eAQ==}
+    engines: {node: ^20.19.0 || ^22.12.0 || >=24.0.0, npm: '>=10'}
+
+  '@appium/types@1.7.1':
+    resolution: {integrity: sha512-xW0JZhB2LyunWItdWUH9t8FtH9pKbeFrTMLcbTynTG+4Bi6HZq5CyZqc3lKHvFj66BcM7dhlyFzu1JjRB5Yivw==}
+    engines: {node: ^20.19.0 || ^22.12.0 || >=24.0.0, npm: '>=10'}
+    peerDependencies:
+      '@appium/logger': ^2.0.0
+
+  '@babel/code-frame@7.29.7':
+    resolution: {integrity: sha512-Aup7aUOfpbAUg2ROOJN6Iw5f9DMBlzu0mIkm/malLQFN/YQgO48wCj0Kxa3sEHJvPVFg7siR+qRInwXd2qhQKw==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-validator-identifier@7.29.7':
+    resolution: {integrity: sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==}
+    engines: {node: '>=6.9.0'}
+
+  '@colors/colors@1.6.0':
+    resolution: {integrity: sha512-Ir+AOibqzrIsL6ajt3Rz3LskB7OiMVHqltZmspbW/TJuTVuyOMirVqAkjfY6JISiLHgyNqicAC8AyHHGzNd/dA==}
+    engines: {node: '>=0.1.90'}
+
+  '@colors/colors@1.6.1':
+    resolution: {integrity: sha512-dTmUJzXSuayBK+hZydEaXd2mhx61qWQwkwaBBY6LyEOVx/L9aQU5ac8eFNEsd9nrD1+zb9zvDCphLSe8g1F4Qw==}
+    engines: {node: '>=0.1.90'}
+
+  '@crabnebula/tauri-driver-darwin-arm64@2.0.9':
+    resolution: {integrity: sha512-VvO7OC6UkuEP3eU3klyl+Ka/jgWFc3yIUeCw6e8BtibQWDXSwQ/r2tzqvC0d+5psF/mWYiCqNAKMlg4v5+muvg==}
+    engines: {node: '>= 10'}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@crabnebula/tauri-driver-darwin-x64@2.0.9':
+    resolution: {integrity: sha512-AWm3CY+YjKRLxaaucYdBG9cA7sTPviBpuVjJW6rNsPHGIFlxiA3C7fOv0Eekf2L7ps6v9HRCgldjPjTLH0DvNQ==}
+    engines: {node: '>= 10'}
+    cpu: [x64]
+    os: [darwin]
+
+  '@crabnebula/tauri-driver-linux-x64-gnu@2.0.9':
+    resolution: {integrity: sha512-+H2HQtjKQrVJ+A9C5x4LaTl/6oX1QpEBlfRJxA4WqCdbJEE2NsmLgODGSQNueav+9QV7MOgjppRMl9fiW7IIqg==}
+    engines: {node: '>= 10'}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@crabnebula/tauri-driver-win32-x64-msvc@2.0.9':
+    resolution: {integrity: sha512-/xqSl8dmGy7u9FXXjtuxAe38PJuQ4g1yT6Txgft5SwRwicAVkcEvmtdLkHJ6wUqEcg64UBEsoja8Z0EbNqTIcg==}
+    engines: {node: '>= 10'}
+    cpu: [x64]
+    os: [win32]
+
+  '@crabnebula/tauri-driver@2.0.9':
+    resolution: {integrity: sha512-W+fOUkQnP0MOSu9jMykG7HSstYysTQLMnL2+b3IpenbyqPfBiBI/9uSoNC1nXjh0aYm46nPgwKC6RbiWsWa0XQ==}
+    engines: {node: '>= 10'}
+    hasBin: true
+
+  '@crabnebula/test-runner-backend-darwin-arm64@0.3.0':
+    resolution: {integrity: sha512-XnZdSeew2ew/Eix+z1BwKt5PcrJSjL+VQ7dlrV1fvRj4WUTQtluzE1VhiVV0j2EIFJsRH2IExNj5OdCWxKSPiQ==}
+    engines: {node: '>= 10'}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@crabnebula/test-runner-backend-darwin-x64@0.3.0':
+    resolution: {integrity: sha512-dpogk8TxKd2CZb8BZ2Ni1mpbogD8KSoB8J92aw+9R24S8xBeTu8I+t4w9PVNIBvFaNAhEQelYhFffxH0FDs5+Q==}
+    engines: {node: '>= 10'}
+    cpu: [x64]
+    os: [darwin]
+
+  '@crabnebula/test-runner-backend-linux-x64-gnu@0.3.0':
+    resolution: {integrity: sha512-ZzDVKdY1ydv+lqfRYs6PAdmIc8AlfOciH3ntuUxyRJ8aSq0v8y+pow6b3/CRqmumkj9riVWsUriJr7Xw2YZFTg==}
+    engines: {node: '>= 10'}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@crabnebula/test-runner-backend-win32-x64-msvc@0.3.0':
+    resolution: {integrity: sha512-xzE5bZx6QpqCkGFTpOYGxMfYidfsvYQgp3yQ1hXwuxeC5vsabOngRtE6X2DxQU6U8JzzNaooN0afG/khzoaihQ==}
+    engines: {node: '>= 10'}
+    cpu: [x64]
+    os: [win32]
+
+  '@crabnebula/test-runner-backend@0.3.0':
+    resolution: {integrity: sha512-72aldFCPV0Sflv8KGLeaNoUY4Vz8eRl7AvUsJXFwqJ7KKNDAfPKwovXjmZoqIWn6Icv01sEsd1b2w0O66Y3WEQ==}
+    engines: {node: '>= 10'}
+    hasBin: true
+
+  '@dabh/diagnostics@2.0.9':
+    resolution: {integrity: sha512-R6siwR65Hm+3yfgP7o8DKhNvputQAwfoz9zTc3kyDudnomj2/BcLmD+uGQQPICjuFUp8ounPBU+jmKsocwVVAg==}
+
   '@emnapi/core@1.10.0':
     resolution: {integrity: sha512-yq6OkJ4p82CAfPl0u9mQebQHKPJkY7WrIuk205cTYnYe+k2Z8YBh11FrbRG/H6ihirqcacOgl2BIO8oyMQLeXw==}
 
   '@emnapi/runtime@1.10.0':
     resolution: {integrity: sha512-ewvYlk86xUoGI0zQRNq/mC+16R1QeDlKQy21Ki3oSYXNgLb45GV1P6A0M+/s6nyCuNDqe5VpaY84BzXGwVbwFA==}
 
+  '@emnapi/runtime@1.11.3':
+    resolution: {integrity: sha512-Xz4Tpyki7XyrpbUK1jR1AhdAdaXyhhY4lZ3neLodmhpuWfy2PAQN5B46sAiU4liOXGLkHypn/qU+jvfWSCYYLA==}
+
   '@emnapi/wasi-threads@1.2.1':
     resolution: {integrity: sha512-uTII7OYF+/Mes/MrcIOYp5yOtSMLBWSIoLPpcgwipoiKbli6k322tcoFsxoIIxPDqW01SQGAgko4EzZi2BNv2w==}
 
+  '@epic-web/invariant@1.0.0':
+    resolution: {integrity: sha512-lrTPqgvfFQtR/eY/qkIzp98OGdNJu0m5ji3q/nJI8v3SXkRKEnWiOxMmbvcSoAIzv/cGiuvRy57k4suKQSAdwA==}
+
   '@esbuild/aix-ppc64@0.28.1':
     resolution: {integrity: sha512-Svl7tq8k/08+p6CXPpRjQ1fKX+1odH/BQbb48fV6fj3CWHhsoIOoY87w1oHXm0qEpkIK3ZfVgp0hed3XBXzXMQ==}
     engines: {node: '>=18'}
@@ -700,6 +965,330 @@ packages:
   '@iconify/utils@3.1.0':
     resolution: {integrity: sha512-Zlzem1ZXhI1iHeeERabLNzBHdOa4VhQbqAcOQaMKuTuyZCpwKbC2R4Dd0Zo3g9EAc+Y4fiarO8HIHRAth7+skw==}
 
+  '@img/colour@1.1.0':
+    resolution: {integrity: sha512-Td76q7j57o/tLVdgS746cYARfSyxk8iEfRxewL9h4OMzYhbW4TAcppl0mT4eyqXddh6L/jwoM75mo7ixa/pCeQ==}
+    engines: {node: '>=18'}
+
+  '@img/sharp-darwin-arm64@0.35.4':
+    resolution: {integrity: sha512-Uhfl4V4lhP2nbUVF9+hyH1+luj86f1gUFeo8ALYxFoULoU+G87D43BfeMP8XHsk9boxAnCY/bf2EHwhA7MuGsA==}
+    engines: {node: '>=20.9.0'}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@img/sharp-darwin-x64@0.35.4':
+    resolution: {integrity: sha512-hWniXY3bG5qKpkKrAwPe4y+VTPmf086YQAnkxWh7uA1YrlRouWGa0M0Mxj3ZjnXFkv7/TD1bTy9lGUK26vRvWw==}
+    engines: {node: '>=20.9.0'}
+    cpu: [x64]
+    os: [darwin]
+
+  '@img/sharp-freebsd-wasm32@0.35.4':
+    resolution: {integrity: sha512-lIsKw/BU+kjB4eZjxrYrZmwOJYi3Ajrv66iAlBmUPyKc3HpnloevB1g3wxGD9P/5BbQ1brBGl65VRRrCvQDEqA==}
+    engines: {node: '>=20.9.0'}
+    os: [freebsd]
+
+  '@img/sharp-libvips-darwin-arm64@1.3.3':
+    resolution: {integrity: sha512-suTBPTDGrI9WodccaDdwZItTSaBYASlBk1NSfElSHrUfzu3szG6lvIF58+WiFvnfzuK8ZBFS5zE00PxqxnRiPg==}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@img/sharp-libvips-darwin-x64@1.3.3':
+    resolution: {integrity: sha512-FVJZ5mITMobmXIz/hPDTw0EintTW5H3WfrxwLqEqjiIihlu+hVRyGrFQ60xl0Lxn7Bt3zdpevPaQi0HEzqz9fw==}
+    cpu: [x64]
+    os: [darwin]
+
+  '@img/sharp-libvips-linux-arm64@1.3.3':
+    resolution: {integrity: sha512-0DaL0A6Xu6sQSQFwe4iVCrKWU2cCTItnRsYsCdxAMm9NF6twAA9BKnoqy4hqz4+azQ0JHuA26qiUKsf1XJ/v5A==}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linux-arm@1.3.3':
+    resolution: {integrity: sha512-3rbU4vqXXc3hY/OiXdl52xZvT0F1yEngWfvqudtPJg/KkyiaQw2DRsFrNzpmLvfavbwOq3qXn36GP8obHRULQA==}
+    cpu: [arm]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linux-ppc64@1.3.3':
+    resolution: {integrity: sha512-cdn1OvUBwsXhbC0zSzJnNzf5MZ/mTrobawDvNXBTxe8VtqKAm0sRuEY2Evzovb/w9JMk4TvRxqt1mekSuJz64w==}
+    cpu: [ppc64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linux-riscv64@1.3.3':
+    resolution: {integrity: sha512-HjPVx7yKz+0lqdhDlTw1tt90wamBoxhiXpvl1XZpJLiHH4RCJ5yDTqH+VlYPv2fwFs89JFw4c1IexYOcQUi4IQ==}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linux-s390x@1.3.3':
+    resolution: {integrity: sha512-neWLh+3yCNThxnfy3c4BbVBeGgt9aftno+XbT56iK28RgeDs3UOFWviLWlUu0bArYVYJaFDK+RRohbicUNCm8Q==}
+    cpu: [s390x]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linux-x64@1.3.3':
+    resolution: {integrity: sha512-4vKmvAst9nrowcqquKFAyZJUDolUaIp8uRiN0mWFguJ1IplC9/pitXtlnnlU4aa/eJw3J7i67V+pwUL+wZGdsA==}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linuxmusl-arm64@1.3.3':
+    resolution: {integrity: sha512-Y9kQaLMuNoB0bPYOOdcZMaseNrFpPodIWWMrx+CZyydf2xn68j9WYc6sWWRrDwNkzCQjKYfc68L7jKjGlHMibw==}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@img/sharp-libvips-linuxmusl-x64@1.3.3':
+    resolution: {integrity: sha512-fj8Mv0HHfD1Rr+4I68+3agJynxDWtBFgicTbSOb9Bke6pIwzGcJ+RX/yHjmiEGFMCavY/dxvem7MyNaJF+wDiw==}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@img/sharp-linux-arm64@0.35.4':
+    resolution: {integrity: sha512-De4jpEnAU8Hd5oT0j1G3uL4ZvTuipVMn7YC6vPaJhy6/7EwEae0SVAoBrUMYQbkLGDm85taVWwuPc1a44LTzCQ==}
+    engines: {node: '>=20.9.0'}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-arm@0.35.4':
+    resolution: {integrity: sha512-7OAS8gI0EReKGVN2HssHlM6umJgxF5VI3xN0p9FA91p/YO+ou5hiNghLdZ5BEHztwaaK5+bLKRf8x/o2L2nk9A==}
+    engines: {node: '>=20.9.0'}
+    cpu: [arm]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-ppc64@0.35.4':
+    resolution: {integrity: sha512-2oYZJeIl4kCcMGk4ouZVjnkCtFrpQFlNEtJ6GbxzhHQchwH0NH/qEb9ykmOl29dqwMq+JhFdZn+1ak2FKhI9fQ==}
+    engines: {node: '>=20.9.0'}
+    cpu: [ppc64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-riscv64@0.35.4':
+    resolution: {integrity: sha512-cPbNChoRURAWdebDIHSenxRpgEdy7JkPydSnUxRm9VvKD7m0/xVaR/8Fzlu81pk5nHEvHH87UZUA7cTtwnbJSA==}
+    engines: {node: '>=20.9.0'}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-s390x@0.35.4':
+    resolution: {integrity: sha512-RY0JFY8Fd6RonCBtHz+DvadaPkXDSI1AUn6yWL9TipqkZ1vY8w8evqdgyDFnkm4/K1ve1TvZiaePP5oSd4+WVQ==}
+    engines: {node: '>=20.9.0'}
+    cpu: [s390x]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-x64@0.35.4':
+    resolution: {integrity: sha512-9qvvEAuk8k89TfWUoX2htWjbAMX8p+NxCppjpcg5k6xMsjhBQPTsoIh36h9Qde4WRuGpJeYnOjdosDn/cnv+OA==}
+    engines: {node: '>=20.9.0'}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linuxmusl-arm64@0.35.4':
+    resolution: {integrity: sha512-KB5jxpfWQTr0nc3xdHtWChdbifHrBGsd2SM62Eyxrl8afikm+f5qGBU75SJIZBT/S1MC8XyacdlXBMSWq6OURA==}
+    engines: {node: '>=20.9.0'}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@img/sharp-linuxmusl-x64@0.35.4':
+    resolution: {integrity: sha512-f+eZJZIQNEEd26RPSW+76chwOf1XtA2Y/O+5ocVyLliHkeih3e+jhLVBdNTd2rS3IbNXK8+ug93Vf5ZXtF5Lxg==}
+    engines: {node: '>=20.9.0'}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@img/sharp-wasm32@0.35.4':
+    resolution: {integrity: sha512-zQnl4Kwp7Q6NHsENtU2T/00Zi+w3AQNwz3+UaTyVBy2FpXrzXzGjndpK61onhZjRtRpQXxCTeqw19bVyXOh7jA==}
+    engines: {node: '>=20.9.0'}
+
+  '@img/sharp-webcontainers-wasm32@0.35.4':
+    resolution: {integrity: sha512-ESfNkywmCfPNyaZjxooddJQiQ+l/nTpGEOGthxiLnIHXC/CmcBixnfwUleX9mCz9ovrUUvKMap/pm8RYbzfwaA==}
+    engines: {node: '>=20.9.0'}
+    cpu: [wasm32]
+
+  '@img/sharp-win32-arm64@0.35.4':
+    resolution: {integrity: sha512-iNdlBX9gLVvqe2I3uIJSIKTq6wckP/DYxZtcqxm09x5Gi24DnFBmPAWZmr60ZyYMG0xlzo6goG3670ar+RXvRw==}
+    engines: {node: '>=20.9.0'}
+    cpu: [arm64]
+    os: [win32]
+
+  '@img/sharp-win32-ia32@0.35.4':
+    resolution: {integrity: sha512-kqRsbaa5CS6KHlpxnN7WhE6vAAugXyZButpRdvDWetlv6Qv4N9WTcrWzF7tXfB9T7MsoadqdI8hmwLq6UlLvtw==}
+    engines: {node: ^20.9.0}
+    cpu: [ia32]
+    os: [win32]
+
+  '@img/sharp-win32-x64@0.35.4':
+    resolution: {integrity: sha512-XtmnYhBcrORsJ4XJngyzr/EWP0hRZLAZRFaApdKuviyqF78+ylxh2y06ZmtULAMOnObJ3ucpN0AcwSWnMowTRg==}
+    engines: {node: '>=20.9.0'}
+    cpu: [x64]
+    os: [win32]
+
+  '@inquirer/ansi@1.0.2':
+    resolution: {integrity: sha512-S8qNSZiYzFd0wAcyG5AXCvUHC5Sr7xpZ9wZ2py9XR88jUz8wooStVx5M6dRzczbBWjic9NP7+rY0Xi7qqK/aMQ==}
+    engines: {node: '>=18'}
+
+  '@inquirer/checkbox@4.3.2':
+    resolution: {integrity: sha512-VXukHf0RR1doGe6Sm4F0Em7SWYLTHSsbGfJdS9Ja2bX5/D5uwVOEjr07cncLROdBvmnvCATYEWlHqYmXv2IlQA==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/confirm@5.1.21':
+    resolution: {integrity: sha512-KR8edRkIsUayMXV+o3Gv+q4jlhENF9nMYUZs9PA2HzrXeHI8M5uDag70U7RJn9yyiMZSbtF5/UexBtAVtZGSbQ==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/core@10.3.2':
+    resolution: {integrity: sha512-43RTuEbfP8MbKzedNqBrlhhNKVwoK//vUFNW3Q3vZ88BLcrs4kYpGg+B2mm5p2K/HfygoCxuKwJJiv8PbGmE0A==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/editor@4.2.23':
+    resolution: {integrity: sha512-aLSROkEwirotxZ1pBaP8tugXRFCxW94gwrQLxXfrZsKkfjOYC1aRvAZuhpJOb5cu4IBTJdsCigUlf2iCOu4ZDQ==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/expand@4.0.23':
+    resolution: {integrity: sha512-nRzdOyFYnpeYTTR2qFwEVmIWypzdAx/sIkCMeTNTcflFOovfqUk+HcFhQQVBftAh9gmGrpFj6QcGEqrDMDOiew==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/external-editor@1.0.3':
+    resolution: {integrity: sha512-RWbSrDiYmO4LbejWY7ttpxczuwQyZLBUyygsA9Nsv95hpzUWwnNTVQmAq3xuh7vNwCp07UTmE5i11XAEExx4RA==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/figures@1.0.15':
+    resolution: {integrity: sha512-t2IEY+unGHOzAaVM5Xx6DEWKeXlDDcNPeDyUpsRc6CUhBfU3VQOEl+Vssh7VNp1dR8MdUJBWhuObjXCsVpjN5g==}
+    engines: {node: '>=18'}
+
+  '@inquirer/input@4.3.1':
+    resolution: {integrity: sha512-kN0pAM4yPrLjJ1XJBjDxyfDduXOuQHrBB8aLDMueuwUGn+vNpF7Gq7TvyVxx8u4SHlFFj4trmj+a2cbpG4Jn1g==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/number@3.0.23':
+    resolution: {integrity: sha512-5Smv0OK7K0KUzUfYUXDXQc9jrf8OHo4ktlEayFlelCjwMXz0299Y8OrI+lj7i4gCBY15UObk76q0QtxjzFcFcg==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/password@4.0.23':
+    resolution: {integrity: sha512-zREJHjhT5vJBMZX/IUbyI9zVtVfOLiTO66MrF/3GFZYZ7T4YILW5MSkEYHceSii/KtRk+4i3RE7E1CUXA2jHcA==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/prompts@7.10.1':
+    resolution: {integrity: sha512-Dx/y9bCQcXLI5ooQ5KyvA4FTgeo2jYj/7plWfV5Ak5wDPKQZgudKez2ixyfz7tKXzcJciTxqLeK7R9HItwiByg==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/rawlist@4.1.11':
+    resolution: {integrity: sha512-+LLQB8XGr3I5LZN/GuAHo+GpDJegQwuPARLChlMICNdwW7OwV2izlCSCxN6cqpL0sMXmbKbFcItJgdQq5EBXTw==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/search@3.2.2':
+    resolution: {integrity: sha512-p2bvRfENXCZdWF/U2BXvnSI9h+tuA8iNqtUKb9UWbmLYCRQxd8WkvwWvYn+3NgYaNwdUkHytJMGG4MMLucI1kA==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/select@4.4.2':
+    resolution: {integrity: sha512-l4xMuJo55MAe+N7Qr4rX90vypFwCajSakx59qe/tMaC1aEHWLyw68wF4o0A4SLAY4E0nd+Vt+EyskeDIqu1M6w==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/type@3.0.10':
+    resolution: {integrity: sha512-BvziSRxfz5Ov8ch0z/n3oijRSEcEsHnhggm4xFZe93DHcUCTlutlq9Ox4SVENAfcRD22UQq7T/atg9Wr3k09eA==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@isaacs/cliui@8.0.2':
+    resolution: {integrity: sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==}
+    engines: {node: '>=12'}
+
+  '@jest/diff-sequences@30.5.0':
+    resolution: {integrity: sha512-OsqBjHXCn8cadasoAZBP6nWYvMsRhpMzGXTpxJ5aO04NlbdhIz+FVe3q49l0AwVhsz/cEmIpBes6gAFl1/dWQg==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  '@jest/expect-utils@30.5.2':
+    resolution: {integrity: sha512-d/HOLSrJUlBIl6n3LzOa7cjW3xdePm5H5gQw2lixZ/0h157l9sw3mLblzFqnPcTbhDzhRQdBOX3A3KcG73nm5Q==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  '@jest/get-type@30.5.0':
+    resolution: {integrity: sha512-9/2VUPitAjmBzbvDvqrxmvB7BzWsBW0WmkkojX1ODuxX1NLGxx9gfaZpHB0z8DtJ9uhGNmZG/VXBhf8uO0OV8Q==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  '@jest/pattern@30.5.0':
+    resolution: {integrity: sha512-HdNQYSdRTEBNrginaqzQtTjG0HRMfrra/z6Ok7uL3S87vSlarIVohEsJsSj5edu3MiHoHjAkvPROz5ZjoKai+w==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  '@jest/schemas@30.5.0':
+    resolution: {integrity: sha512-/hunigyNpc4RCjC0VaW3f5RCUZVM2+WQ65qP7z083Gmvac7or2LI50XVNOtE4YPgBpV0yxYiAgorAPGniCoJmg==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  '@jest/types@30.5.1':
+    resolution: {integrity: sha512-LvVYn83nnXPl+Rg98nvcFgjx6nRMTArhSn6RAX/w3ELn54S8A42TYZvsCMdGUqTM8S0wyXbtlQdU6Hi6dykj9g==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
   '@jridgewell/gen-mapping@0.3.13':
     resolution: {integrity: sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==}
 
@@ -865,9 +1454,21 @@ packages:
   '@oxc-project/types@0.133.0':
     resolution: {integrity: sha512-KzkdCd6Uxqnf6l3HOw1xfatAlUURA0g14cvBYFyJ5SaNOQbOUvBr9PKArcPcrNIeRsBdgcUzOGrhKveVpvOIGA==}
 
+  '@pkgjs/parseargs@0.11.0':
+    resolution: {integrity: sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==}
+    engines: {node: '>=14'}
+
   '@polka/url@1.0.0-next.29':
     resolution: {integrity: sha512-wwQAWhWSuHaag8c4q/KN/vCoeOJYshAIvMQwD4GpSb3OiZklFfvAgmj0VCBBImRpuF/aFgIRzllXlVX93Jevww==}
 
+  '@promptbook/utils@0.69.5':
+    resolution: {integrity: sha512-xm5Ti/Hp3o4xHrsK9Yy3MS6KbDxYbq485hDsFvxqaNA7equHLPdo8H8faTitTeb14QCDfLW4iwCxdVYu5sn6YQ==}
+
+  '@puppeteer/browsers@2.13.2':
+    resolution: {integrity: sha512-5EUZSUIc37H6aIXyWO0Z4y8NlF8NnjgmqeQgOGiswAU7pY0HOo16ho4+alIWmSfdZnjqBRawMsP3I5YqLSn6kw==}
+    engines: {node: '>=18'}
+    hasBin: true
+
   '@quansync/fs@1.0.0':
     resolution: {integrity: sha512-4TJ3DFtlf1L5LDMaM6CanJ/0lckGNtJcMjQ1NAV6zDmA0tEHKZtxNKin8EgPaVX1YzljbxckyT2tJrpQKAtngQ==}
 
@@ -1147,6 +1748,25 @@ packages:
     cpu: [x64]
     os: [win32]
 
+  '@sec-ant/readable-stream@0.4.1':
+    resolution: {integrity: sha512-831qok9r2t8AlxLko40y2ebgSDhenenCatLVeW/uBtnHPyhHOvG0C7TvfgecV+wHzIm5KUICgzmVpWS+IMEAeg==}
+
+  '@sidvind/better-ajv-errors@5.0.0':
+    resolution: {integrity: sha512-FeI/V2KGtOaDX+r0akidCGYy79lVR4YnAqk1GFgZFuHADErCAEmtZL4+IdCAcDXHqfZsII3fs9DrfC1pIR+19w==}
+    engines: {node: ^20.19 || ^22.12 || >= 24.0}
+    peerDependencies:
+      ajv: ^7.0.0 || ^8.0.0
+
+  '@sinclair/typebox@0.34.52':
+    resolution: {integrity: sha512-XiMQh7qqVlxZzcVD+kkGMNGMzcTrDMLWI7S4x7z1MkCkbDPrekpZXEUK0eZqZFMuHQg2a2DZOcDIh9o5v3Gonw==}
+
+  '@sindresorhus/merge-streams@4.0.0':
+    resolution: {integrity: sha512-tlqY9xq5ukxTUZBmoOp+m61cqwQD5pHJtFY3Mn8CA8ps6yghLH/Hw8UPdqg4OLmFW3IFlcXnQNmo/dh8HzXYIQ==}
+    engines: {node: '>=18'}
+
+  '@so-ric/colorspace@1.1.6':
+    resolution: {integrity: sha512-/KiKkpHNOBgkFJwu9sh48LkHSMYGyuTcSFK/qMBdnOAlrRJzRSXAOFB5qwzaVQuDl8wAvHVMkaASQDReTahxuw==}
+
   '@sveltejs/acorn-typescript@1.0.9':
     resolution: {integrity: sha512-lVJX6qEgs/4DOcRTpo56tmKzVPtoWAaVbL4hfO7t7NVwl9AAXzQR6cihesW1BmNMPl+bK6dreu2sOKBP2Q9CIA==}
     peerDependencies:
@@ -1238,6 +1858,9 @@ packages:
     engines: {node: '>= 10'}
     hasBin: true
 
+  '@tootallnate/quickjs-emscripten@0.23.0':
+    resolution: {integrity: sha512-C5Mc6rdnsaJDjO3UpGW/CQTHtCKaYlScZTly4JIu97Jxo/odCiH0ITnDXSJPTOrEKk/ycSZ0AOgTmkDtkOsvIA==}
+
   '@tybys/wasm-util@0.10.2':
     resolution: {integrity: sha512-RoBvJ2X0wuKlWFIjrwffGw1IqZHKQqzIchKaadZZfnNpsAYp2mM0h36JtPCjNDAHGgYez/15uMBpfGwchhiMgg==}
 
@@ -1247,15 +1870,60 @@ packages:
   '@types/estree@1.0.9':
     resolution: {integrity: sha512-GhdPgy1el4/ImP05X05Uw4cw2/M93BCUmnEvWZNStlCzEKME4Fkk+YpoA5OiHNQmoS7Cafb8Xa3Pya8m1Qrzeg==}
 
+  '@types/istanbul-lib-coverage@2.0.6':
+    resolution: {integrity: sha512-2QF/t/auWm0lsy8XtKVPG19v3sSOQlJe/YHZgfjb/KBBHOGSV+J2q/S671rcq9uTBrLAXmZpqJiaQbMT+zNU1w==}
+
+  '@types/istanbul-lib-report@3.0.3':
+    resolution: {integrity: sha512-NQn7AHQnk/RSLOxrBbGyJM/aVQ+pjj5HCgasFxc0K/KhoATfQ/47AyUl15I2yBUpihjmas+a+VJBOqecrFH+uA==}
+
+  '@types/istanbul-reports@3.0.4':
+    resolution: {integrity: sha512-pk2B1NWalF9toCRu6gjBzR69syFjP4Od8WRAX+0mmf9lAjCRicLOWc+ZrxZHx/0XRjotgkF9t6iaMJ+aXcOdZQ==}
+
   '@types/json-schema@7.0.15':
     resolution: {integrity: sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA==}
 
+  '@types/mocha@10.0.10':
+    resolution: {integrity: sha512-xPyYSz1cMPnJQhl0CLMH68j3gprKZaTjG3s5Vi+fDgx+uhG9NOXwbVt52eFS8ECyXhyKcjDLCBEqBExKuiZb7Q==}
+
+  '@types/node@20.19.43':
+    resolution: {integrity: sha512-6oYBAi5ikg4Pl+kGsoYtawUMBT2zZMCvPNF7pVLnHZfd1zf38DRiWn/gT01RYCdUqkv7Fhr+C9ot4/tb+2sVvA==}
+
+  '@types/node@22.20.4':
+    resolution: {integrity: sha512-zJRE40jpHtKqE/C4fgHrAKQLJuSpzEnP9ff9Y7YtoR3Wd2pwqzlekDeEuUQXjRd+QCYnVnNwuJYmhdk9XV8gvA==}
+
+  '@types/normalize-package-data@2.4.4':
+    resolution: {integrity: sha512-37i+OaWTh9qeK4LSHPsyRC7NahnGotNuZvjLSgcPzblpHB3rrCJxAOgI5gCdKm7coonsaX1Of0ILiTcnZjbfxA==}
+
   '@types/resolve@1.20.2':
     resolution: {integrity: sha512-60BCwRFOZCQhDncwQdxxeOEEkbc5dIMccYLwbxsS4TUNeVECQ/pBJ0j09mrHOl/JJvpRPGwO9SvE4nR2Nb/a4Q==}
 
+  '@types/sinonjs__fake-timers@8.1.5':
+    resolution: {integrity: sha512-mQkU2jY8jJEF7YHjHvsQO8+3ughTL1mcnn96igfhONmR+fUPSKIkefQYpSe8bsly2Ep7oQbn/6VG5/9/0qcArQ==}
+
+  '@types/stack-utils@2.0.3':
+    resolution: {integrity: sha512-9aEbYZ3TbYMznPdcdr3SmIrLXwC/AKZXQeCf9Pgao5CKb8CyHuEX5jzWPTkvregvhRJHcpRO6BFoGW9ycaOkYw==}
+
+  '@types/triple-beam@1.3.5':
+    resolution: {integrity: sha512-6WaYesThRMCl19iryMYP7/x2OVgCtbIVflDGFpWnb9irXI3UjYE4AzmYuiUKY1AJstGijoY+MgUszMgRxIYTYw==}
+
   '@types/trusted-types@2.0.7':
     resolution: {integrity: sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw==}
 
+  '@types/which@2.0.2':
+    resolution: {integrity: sha512-113D3mDkZDjo+EeUEHCFy0qniNc1ZpecGiAU7WSo7YDoSzolZIQKpYFHrPpjkB2nuyahcKfrmLXeQlh7gqJYdw==}
+
+  '@types/ws@8.18.1':
+    resolution: {integrity: sha512-ThVF6DCVhA8kUGy+aazFQ4kXQ7E1Ty7A3ypFOe0IcJV8O/M511G99AW24irKrW56Wt44yG9+ij8FaqoBGkuBXg==}
+
+  '@types/yargs-parser@21.0.3':
+    resolution: {integrity: sha512-I4q9QU9MQv4oEOz4tAHJtNz1cwuLxn2F3xcc2iV5WdqLPpUnj30aUuxt1mAxYTG+oe8CZMV/+6rU4S4gRDzqtQ==}
+
+  '@types/yargs@17.0.35':
+    resolution: {integrity: sha512-qUHkeCyQFxMXg79wQfTtfndEC+N9ZZg76HJftDJp+qH2tV7Gj4OJi7l+PiWwJ+pWtW8GwSmqsDj/oymhrTWXjg==}
+
+  '@types/yauzl@2.10.3':
+    resolution: {integrity: sha512-oJoftv0LSuaDZE3Le4DbKX+KS9G36NzOeSap90UIK0yMA/NhKJhqlSGtNDORNRaIbQfzjXDrQa0ytJ6mNRGz/Q==}
+
   '@typescript-eslint/eslint-plugin@8.70.0':
     resolution: {integrity: sha512-/v8HZt6RlyIZxB3ntehELOcUcfxKPVGWXnQdJuHRmzrqgF8nQypcC/oxGW+Ot4VGKDq81XugPKxx0n5PBtf9PA==}
     engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
@@ -1387,6 +2055,96 @@ packages:
     peerDependencies:
       vite: ^2.9.0 || ^3.0.0-0 || ^4.0.0 || ^5.0.0-0 || ^6.0.0-0 || ^7.0.0-0 || ^8.0.0-0
 
+  '@vitest/pretty-format@3.2.7':
+    resolution: {integrity: sha512-KUHlwqVu0sRlhCdyPdQ/wBoTfRahjUky1MubOmYw9fWfIZy1gNoHpuaaQBPAaMaVYdQYHJLurzj8ECCj5OwTqA==}
+
+  '@vitest/pretty-format@4.1.11':
+    resolution: {integrity: sha512-yiZzPbGTS9Sr/JpFl8zHrcIkAofNbFV6k21vIgQN/cY/oxZeXhJv5sc/MBJ5jFKWmWs+oJHw0UXLZjmf931+Vw==}
+
+  '@vitest/snapshot@3.2.7':
+    resolution: {integrity: sha512-7C+MwShwtBSI5Buwoyg3s/iY1eHL9PKAf+O1wVh/TdnjXUtkoL/9YQtre90i4MtNXM6edP1wJ2zOBpfCyhIS7g==}
+
+  '@vitest/snapshot@4.1.11':
+    resolution: {integrity: sha512-pN7ikn1ON7h8ee4gIAp4AzyK+zBtJPzVbqOgu5LCEh4VaJVbPQcgYQYJIMGQPXVeJJq1fnfazis7a5pFNPahog==}
+
+  '@vitest/utils@4.1.11':
+    resolution: {integrity: sha512-zTCVGpyFsGWBhllOyKlTw/vnr6D9qxsfSDyfbyZmTyjHw5N/VuvzHpHoQjm2ZJzn4RJgx5w4r7V0er69CmLgPQ==}
+
+  '@wdio/appium-service@9.32.0':
+    resolution: {integrity: sha512-gqKQFIzEdQXDrwHdtTqlDgoksumm3jLjAuXsiRxaSq4PT47vlYgum8WimPg3x2xV1KuZvHKoV7p4ZUL9UiWi7g==}
+    engines: {node: '>=18.20.0'}
+    hasBin: true
+
+  '@wdio/cli@9.32.0':
+    resolution: {integrity: sha512-JQvracXVFvRT4bTkWdcRL5HfsZS/JL3GQGTcNkGPuaL/u5S+W7nHU1loAhefGBJnUQ2MRWpCE4XRikpXLP7KsQ==}
+    engines: {node: '>=18.20.0'}
+    hasBin: true
+
+  '@wdio/config@9.32.0':
+    resolution: {integrity: sha512-HjIANiNoL5ehIuot/KbZyNa26r5SaOaVRscYBxZ6fE4BxZMoHqthiuzGsmbr54Hn6pqQm4nn46GCsEfhPxYzEA==}
+    engines: {node: '>=18.20.0'}
+
+  '@wdio/dot-reporter@9.32.0':
+    resolution: {integrity: sha512-Pp+1yqen+G2CnGErvkUdUoRpSKyrm/utKRcY/CpNSLOtMag8+B3mfEq/1VvrT6D0+nl8IVESNl5HQLVtycozbQ==}
+    engines: {node: '>=18.20.0'}
+
+  '@wdio/globals@9.31.3':
+    resolution: {integrity: sha512-ZzmRKUlwUBahNoNxHbAzst+9dNInEjLQc7Z3c86OhDRxAf3Ivw8k2rc56UCbyYiZnkd1dOpuA91zFiTrUNNORw==}
+    engines: {node: '>=18.20.0'}
+    peerDependencies:
+      expect-webdriverio: ^6.0.9
+      webdriverio: ^9.28.0
+
+  '@wdio/local-runner@9.32.0':
+    resolution: {integrity: sha512-6AhK9OHXzOMfoZb3iU95jOVwjM2VspsVVkxBmWyYBYrpnM+DluHJzPnf0kXlb0h+osnRpIL35ZNon4XmVI0Izw==}
+    engines: {node: '>=18.20.0'}
+
+  '@wdio/logger@9.29.1':
+    resolution: {integrity: sha512-0ZAEIo6PNyMIJPlOGkIgyOJUjcd0pC8/QHlVAAe1c91/IcjZ1X+k0yidXHaboJdN7dq1XPUacmhRdtua0U5EZg==}
+    engines: {node: '>=18.20.0'}
+
+  '@wdio/mocha-framework@9.32.0':
+    resolution: {integrity: sha512-POrOuA9pEN03sB7eLh13hmrhgvyZ20rQC6PwAZ/9v2LeebmW9xlSIC1UoBqiSiIKQ9qiGGf7lf7CX4NWIqzC2w==}
+    engines: {node: '>=18.20.0'}
+
+  '@wdio/protocols@9.31.5':
+    resolution: {integrity: sha512-e4H5exl5xCcITF0y/3zd6pf9kX4TmV8/0nnWDGt4X0KbgDi/+tGqlquZ+YS4YBEPbv95yTqVhnazEsaBiH85Tw==}
+
+  '@wdio/repl@9.16.2':
+    resolution: {integrity: sha512-FLTF0VL6+o5BSTCO7yLSXocm3kUnu31zYwzdsz4n9s5YWt83sCtzGZlZpt7TaTzb3jVUfxuHNQDTb8UMkCu0lQ==}
+    engines: {node: '>=18.20.0'}
+
+  '@wdio/reporter@9.32.0':
+    resolution: {integrity: sha512-9z8pG7zAayRXwheN8BH6YNuzyPJ/kFIRyPl2fsD+6IvF/LFSptXPlk2XjcnKvY9Am6Lif5oAwebDFcLHp1ztAA==}
+    engines: {node: '>=18.20.0'}
+
+  '@wdio/runner@9.32.0':
+    resolution: {integrity: sha512-/qGB9id4fX+bmC0HxdelZdh+Rm/u0uAW4y4xs7PoD0B+5qHQ137tRMwq/HAcPLeDJh/LaMYlhqcIj1LyMi6eEA==}
+    engines: {node: '>=18.20.0'}
+    peerDependencies:
+      expect-webdriverio: ^6.0.9
+      webdriverio: ^9.28.0
+
+  '@wdio/spec-reporter@9.32.0':
+    resolution: {integrity: sha512-WXL98WXqSGLffvDhLNsn4zD/sCGaWK1GF+i/gQsBxJN86vRiktL8XsB7q4SfBr7doyrR5+POwceX248M26bRgA==}
+    engines: {node: '>=18.20.0'}
+
+  '@wdio/types@9.32.0':
+    resolution: {integrity: sha512-7jMZQ4TGX45bPLgCv9du7mw/Kq7FrjEbQ5vTGg/pUgQy/wSygJ3u4FvPu8FS+DNeQUmvjSPKEUGfl4N+rZjpUg==}
+    engines: {node: '>=18.20.0'}
+
+  '@wdio/utils@9.32.0':
+    resolution: {integrity: sha512-LsU+PxRQVXJKISaj9v1NZQTmp4m9uugCh55qjN0cKvdqi3bI17V+3orMXNvDYufBgzzZ1eoGxYejJpdIKx98jA==}
+    engines: {node: '>=18.20.0'}
+
+  '@wdio/xvfb@9.32.0':
+    resolution: {integrity: sha512-K1DL05PngTMKY8mkzMNYpKNqZNPTrdJheuvTeWwwYlm4Yn9hLc8V3hw6EDsuEYw4cyEyiVeukLbLOEW+AhvqVw==}
+    engines: {node: '>=18.20.0'}
+
+  '@xmldom/xmldom@0.9.12':
+    resolution: {integrity: sha512-5AXjrcMClTryPe9LgZrygpB1lj7s0S9E0+W+AHaVKAVyHanafK86iPSvG5xHVSp/jC+VH1UXu0TAEmY279xH7A==}
+    engines: {node: '>=14.6'}
+
   '@zerodevx/svelte-json-view@2.0.0':
     resolution: {integrity: sha512-bzkyssGxz0Z6Utv80vxBBkfkTzW1ZkkJ28cAmURc2+ytMPd6zTH7LRiUJgJf14gIzdeRRYNkD7CZ/MHPlP7LVQ==}
     peerDependencies:
@@ -1395,6 +2153,18 @@ packages:
       svelte:
         optional: true
 
+  '@zip.js/zip.js@2.18.2':
+    resolution: {integrity: sha512-J1jwg0Kv5Aab50VlVZ6hp2rzGL/J0YLjBnkF6oJoIjmpxx9+tHgjRELGKryKnDZEcGXKjv7ibwxAziFiWHdR2A==}
+    engines: {bun: '>=0.7.0', deno: '>=1.0.0', node: '>=18.0.0'}
+
+  abort-controller@3.0.0:
+    resolution: {integrity: sha512-h8lQ8tacZYnR3vNQTgibj+tODHI5/+l06Au2Pcriv/Gmet0eaj4TwWH41sO9wnHDiQsEj19q0drzdWdeAHtweg==}
+    engines: {node: '>=6.5'}
+
+  accepts@2.0.0:
+    resolution: {integrity: sha512-5cvg6CtKwfgdmVqY1WIiXKc3Q1bkRqGLi+2W/6ao+6Y7gu/RCwRuAhGEzh5B4KlszSuTLgZYuqFqo5bImjNKng==}
+    engines: {node: '>= 0.6'}
+
   acorn-jsx@5.3.2:
     resolution: {integrity: sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ==}
     peerDependencies:
@@ -1405,46 +2175,405 @@ packages:
     engines: {node: '>=0.4.0'}
     hasBin: true
 
+  agent-base@6.0.2:
+    resolution: {integrity: sha512-RZNwNclF7+MS/8bDg70amg32dyeZGZxiDuQmZxKLAlQjr3jGyLx+4Kkk58UO7D2QdgFIQCovuSuZESne6RG6XQ==}
+    engines: {node: '>= 6.0.0'}
+
+  agent-base@7.1.4:
+    resolution: {integrity: sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ==}
+    engines: {node: '>= 14'}
+
+  ajv-formats@3.0.1:
+    resolution: {integrity: sha512-8iUql50EUR+uUcdRQ3HDqa6EVyo3docL8g5WJ3FNcWmu62IbkGUue/pEyLBW8VGKKucTPgqeks4fIU1DA4yowQ==}
+    peerDependencies:
+      ajv: ^8.0.0
+    peerDependenciesMeta:
+      ajv:
+        optional: true
+
   ajv@6.14.0:
     resolution: {integrity: sha512-IWrosm/yrn43eiKqkfkHis7QioDleaXQHdDVPKg0FSwwd/DuvyX79TZnFOnYpB7dcsFAMmtFztZuXPDvSePkFw==}
 
+  ajv@8.20.0:
+    resolution: {integrity: sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA==}
+
+  ansi-colors@4.1.3:
+    resolution: {integrity: sha512-/6w/C21Pm1A7aZitlI5Ni/2J6FFQN8i1Cvz3kHABAAbw93v/NlvKdVOqz7CCWz/3iv/JplRSEEZ83XION15ovw==}
+    engines: {node: '>=6'}
+
+  ansi-regex@5.0.1:
+    resolution: {integrity: sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==}
+    engines: {node: '>=8'}
+
+  ansi-regex@6.3.0:
+    resolution: {integrity: sha512-WpDfL7NO6j7tH88IDBNVdUJxDh9nmCteAVW9dsep846XdwF4naCBK+/tGLX3KJgcpgMRXCFlTM2hKGoK9FsdrQ==}
+    engines: {node: '>=12'}
+
+  ansi-styles@4.3.0:
+    resolution: {integrity: sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==}
+    engines: {node: '>=8'}
+
+  ansi-styles@5.2.0:
+    resolution: {integrity: sha512-Cxwpt2SfTzTtXcfOlzGEee8O+c+MmUgGrNiBcXnuWxuFJHe6a5Hz7qwhwe5OgaSYI0IJvkLqWX1ASG+cJOkEiA==}
+    engines: {node: '>=10'}
+
+  ansi-styles@6.2.3:
+    resolution: {integrity: sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg==}
+    engines: {node: '>=12'}
+
+  anymatch@3.1.3:
+    resolution: {integrity: sha512-KMReFUr0B4t+D+OBkjR3KYqvocp2XaSzO55UcB6mgQMd3KbcE+mWTyvVV7D/zsdEbNnV6acZUutkiHQXvTr1Rw==}
+    engines: {node: '>= 8'}
+
+  appium-uiautomator2-driver@8.7.0:
+    resolution: {integrity: sha512-5ABLmKeAkE13QkNB2Qd9hTOYl2nfia6ZQ5QNCXefMzlr2HOdsq7T79FZ8Ad2kOydjdI9c1hb6LZ3ctanbUUbOA==}
+    engines: {node: ^20.19.0 || ^22.12.0 || >=24.0.0, npm: '>=10'}
+    peerDependencies:
+      appium: ^3.0.0-rc.2
+    bundledDependencies:
+      - '@appium/css-locator-to-native'
+      - appium-adb
+      - appium-android-driver
+      - appium-uiautomator2-server
+      - asyncbox
+      - axios
+      - io.appium.settings
+      - portscanner
+      - teen_process
+
+  appium-xcuitest-driver@12.13.2:
+    resolution: {integrity: sha512-89yRd+EEBsF909JyhpGdy8XBYpiEZFmlqNWdVL+g2Kz8Miu4e+vhUQPNQrKOQ0cKnea0qR4EcZFc1zHhgz4sTA==}
+    engines: {node: ^20.19.0 || ^22.12.0 || >=24.0.0, npm: '>=10'}
+    peerDependencies:
+      appium: ^3.0.0-rc.2
+    bundledDependencies:
+      - '@appium/css-locator-to-native'
+      - '@appium/strongbox'
+      - '@colors/colors'
+      - appium-ios-device
+      - appium-ios-simulator
+      - appium-remote-debugger
+      - appium-webdriveragent
+      - appium-xcode
+      - async-lock
+      - asyncbox
+      - axios
+      - commander
+      - dayjs
+      - js2xmlparser2
+      - lru-cache
+      - node-devicectl
+      - portscanner
+      - semver
+      - teen_process
+      - winston
+      - ws
+      - appium-ios-remotexpc
+
+  appium@3.8.0:
+    resolution: {integrity: sha512-hqY6TQnBfl3x3tiv6u8kW33DI4gacKEyreoWODr02ayuFUd2P390hKxPrCikeW7K3L4SVABR4rZ6+PfECbNwGw==}
+    engines: {node: ^20.19.0 || ^22.12.0 || >=24.0.0, npm: '>=10'}
+    hasBin: true
+
+  archiver@8.0.0:
+    resolution: {integrity: sha512-fV1orZfsnPn9BaSByR/qE67rJCLJEy2Ox5bq7nJh+jquWaNh6Sfec75kJ2T6PtdGUbPQlrVoSVCEOa5SdiTQ1g==}
+    engines: {node: '>=18'}
+
+  argparse@2.0.1:
+    resolution: {integrity: sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==}
+
+  argparse@3.0.2:
+    resolution: {integrity: sha512-mFdDM6WqWKraGLsVb+C9CahPnzTXOefAOLq3jYcca2YZ8bEWpr++Tzj+zSaKW9+X9L5uSxcm1AZ3Y6aZJ09OhQ==}
+
   aria-query@5.3.1:
     resolution: {integrity: sha512-Z/ZeOgVl7bcSYZ/u/rh0fOpvEpq//LZmdbkXyc7syVzjPAhfOa9ebsdTSjEBDU4vs5nC98Kfduj1uFo0qyET3g==}
     engines: {node: '>= 0.4'}
 
+  ast-types@0.13.4:
+    resolution: {integrity: sha512-x1FCFnFifvYDDzTaLII71vG5uvDwgtmDTEVWAxrgeiR8VjMONcCXJx7E+USjDtHlwFmt9MysbqgF9b9Vjr6w+w==}
+    engines: {node: '>=4'}
+
+  async-exit-hook@2.0.1:
+    resolution: {integrity: sha512-NW2cX8m1Q7KPA7a5M2ULQeZ2wR5qI5PAbw5L0UOMxdioVk9PMZ0h1TmyZEkPYrCvYjDlFICusOu1dlEKAAeXBw==}
+    engines: {node: '>=0.12.0'}
+
+  async-lock@1.4.1:
+    resolution: {integrity: sha512-Az2ZTpuytrtqENulXwO3GGv1Bztugx6TT37NIo7imr/Qo0gsYiGtSdBa2B6fsXhTpVZDNfu1Qn3pk531e3q+nQ==}
+
+  async@3.2.6:
+    resolution: {integrity: sha512-htCUDlxyyCLMgaM3xXg0C0LW2xqfuQ6p05pCEIsXuyQ+a1koYKTuBMzRNwmybfLgvJDMd0r1LTn4+E0Ti6C2AA==}
+
+  asyncbox@6.4.3:
+    resolution: {integrity: sha512-s8SY4wNBvZkenRVOW2dEr3r43u40uHlqKGPTkEvr7QQIOMNMIzCZMMstKgDTWhTPRfeST57S+v/3OTXhoVsg0g==}
+    engines: {node: ^20.19.0 || ^22.12.0 || >=24.0.0, npm: '>=10'}
+
+  asynckit@0.4.0:
+    resolution: {integrity: sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==}
+
+  axios@1.20.0:
+    resolution: {integrity: sha512-r8aOh8j9cGKpgQAqpzrUHnSIc6a59Y3Xf/cv8sy1DrHCkZHzQGEuoq1tARk6qSyDdtQGSDgpb9kFlruzPvrgwg==}
+
   axobject-query@4.1.0:
     resolution: {integrity: sha512-qIj0G9wZbMGNLjLmg1PT6v2mE9AH2zlnADJD/2tC6E00hgmhUOfEB6greHPAfLRSufHqROIUTkw6E+M3lH0PTQ==}
     engines: {node: '>= 0.4'}
 
+  b4a@1.9.0:
+    resolution: {integrity: sha512-dpfcF9fDNR6++cthXR67iyhgqWy9CBouAvIWhIntzBG6cvK/cnIPiZQjBwi/ZqjjBEDGfoNDtmB0kTjroOJ3pQ==}
+    peerDependencies:
+      react-native-b4a: '*'
+    peerDependenciesMeta:
+      react-native-b4a:
+        optional: true
+
+  balanced-match@1.0.2:
+    resolution: {integrity: sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==}
+
   balanced-match@4.0.4:
     resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==}
     engines: {node: 18 || 20 || >=22}
 
+  bare-events@2.9.2:
+    resolution: {integrity: sha512-AIPKioV7/Y/8KfZ3AAhjPJxLLbY49S64Ym5DakZlUg75qQiTgUq9hEJoEwa4eUezPUlXRy/i5NpsKvo9jgKmoA==}
+    peerDependencies:
+      bare-abort-controller: '*'
+    peerDependenciesMeta:
+      bare-abort-controller:
+        optional: true
+
+  bare-fs@4.8.2:
+    resolution: {integrity: sha512-+ZI68KHMUvosXfKbg/UOHK0tbCdRnegbvPEdEcZ3Nd6TetieQsJPRXBRXPdLyy8+3VSEbPXtsumTpEtt78xv9w==}
+    engines: {bare: '>=1.28.0'}
+    peerDependencies:
+      bare-buffer: '*'
+    peerDependenciesMeta:
+      bare-buffer:
+        optional: true
+
+  bare-path@3.1.2:
+    resolution: {integrity: sha512-ZyKbsuuqK6Ag0K8pX6V5Txq6XeJRvY+wXucnFGRjiyVYP9YWDpIQugk/b+enRYrEYBJaqLzghRQpXPMR7341Nw==}
+
+  bare-stream@2.13.4:
+    resolution: {integrity: sha512-PcrQ8lVLbiJscNm1Kez+Yp4Gy4AHGcN1lzwjvf5NybWen7VvEgUfyfnXYJ2zNqWnzOfCb1Abq6lH8ti0syQszA==}
+    peerDependencies:
+      bare-abort-controller: '*'
+      bare-buffer: '*'
+      bare-events: '*'
+    peerDependenciesMeta:
+      bare-abort-controller:
+        optional: true
+      bare-buffer:
+        optional: true
+      bare-events:
+        optional: true
+
+  bare-url@2.5.4:
+    resolution: {integrity: sha512-Gxa7UVWBr0/edU1b+TJhn/AZvMQUj9OGspvYsaTYQrAbZA4BOTZGL3LiZxvD+CeMlDH4juwD84+eTAp/bLYW5g==}
+
+  base64-js@1.5.1:
+    resolution: {integrity: sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==}
+
+  basic-auth@2.0.1:
+    resolution: {integrity: sha512-NF+epuEdnUYVlGuhaxbbq+dvJttwLnGY+YixlXlME5KpQ5W3CnXA5cVTneY3SPbPDRkcjMbifrwmFYcClgOZeg==}
+    engines: {node: '>= 0.8'}
+
+  basic-ftp@5.3.1:
+    resolution: {integrity: sha512-bopVNp6ugyA150DDuZfPFdt1KZ5a94ZDiwX4hMgZDzF+GttD80lEy8kj98kbyhLXnPvhtIo93mdnLIjpCAeeOw==}
+    engines: {node: '>=10.0.0'}
+
+  binary-extensions@2.3.0:
+    resolution: {integrity: sha512-Ceh+7ox5qe7LJuLHoY0feh3pHuUDHAcRUeyL2VYghZwfpkNIy/+8Ocg0a3UuSoYzavmylwuLWQOf3hl0jjMMIw==}
+    engines: {node: '>=8'}
+
+  bl@4.1.0:
+    resolution: {integrity: sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==}
+
+  bluebird@3.7.2:
+    resolution: {integrity: sha512-XpNj6GDQzdfW+r2Wnn7xiSAd7TM3jzkxGXBGTtWKuSXv1xUV+azxAm8jdWZN06QTQk+2N2XB9jRDkvbmQmcRtg==}
+
+  body-parser@2.3.0:
+    resolution: {integrity: sha512-2cGmJupaNgg+QUwVLAucDuWuoMZ6EX9iHDRswZ5lsNYEmwPaRknMPCLZz07yTzVq/83p4o/wzbDZbBrTvGGTIw==}
+    engines: {node: '>=18'}
+
+  boolbase@1.0.0:
+    resolution: {integrity: sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww==}
+
+  bplist-creator@0.3.0:
+    resolution: {integrity: sha512-tpB/FR5DoHotN/szYoOGCnP0/ActTO7QI21T+Z7bA3FsiQXSnm1CrklAxgFXd8wdvWnEVvo5qedvfhGwblf7RA==}
+    engines: {node: '>=20.19.0'}
+
+  bplist-parser@0.5.0:
+    resolution: {integrity: sha512-owgQ0RGbndIGNrQkpHe99HVSslIK59t31nVyAPDRqhq9mNDc2kRl5HwYO292GuKjHqiJRdJNiaI63a02hjLFIQ==}
+    engines: {node: '>=20.19.0'}
+
+  brace-expansion@1.1.21:
+    resolution: {integrity: sha512-9zeA+KLZNNzglF2TPKRQEDyx6Yby7daAkuy8MiPzpXPsYDWi/DRM8jmwUDxokQjYqBpv5DgPiwD4h4ZZSy1Ujw==}
+
+  brace-expansion@2.1.7:
+    resolution: {integrity: sha512-uZbew1NqdmPDTMJ8ah1y+b+9QEJrfkXFk3RcTQw3X0jW/xRUvFKsg1CfQdSYGdTbXZWExtU3J3ccxtnfw1Fi0g==}
+
   brace-expansion@5.0.9:
     resolution: {integrity: sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==}
     engines: {node: 20 || >=22}
 
+  braces@3.0.3:
+    resolution: {integrity: sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==}
+    engines: {node: '>=8'}
+
+  browser-stdout@1.3.1:
+    resolution: {integrity: sha512-qhAVI1+Av2X7qelOfAIYwXONood6XlZE/fXaBSmW/T5SzLAmCgzi+eiWE7fUvbHaeNBQH13UftjpXxsfLkMpgw==}
+
+  buffer-crc32@0.2.13:
+    resolution: {integrity: sha512-VO9Ht/+p3SN7SKWqcrgEzjGbRSJYTx+Q1pTQC0wrWqHx0vpJraQ6GtHx8tvcg1rlK1byhU5gccxgOgj7B0TDkQ==}
+
+  buffer-crc32@1.0.0:
+    resolution: {integrity: sha512-Db1SbgBS/fg/392AblrMJk97KggmvYhr4pB5ZIMTWtaivCPMWLkmb7m21cJvpvgK+J3nsU2CmmixNBZx4vFj/w==}
+    engines: {node: '>=8.0.0'}
+
   buffer-from@1.1.2:
     resolution: {integrity: sha512-E+XQCRwSbaaiChtv6k6Dwgc+bx+Bs6vuKJHHl5kox/BaKbhiXzqQOwK4cO22yElGp2OCmjwVhT3HmxgyPGnJfQ==}
 
+  buffer@5.7.1:
+    resolution: {integrity: sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==}
+
+  buffer@6.0.3:
+    resolution: {integrity: sha512-FTiCpNxtwiZZHEZbcbTIcZjERVICn9yq/pDFkTl95/AxzD1naBctN7YO68riM/gLSDY7sdrMby8hofADYuuqOA==}
+
+  bytes@3.1.2:
+    resolution: {integrity: sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==}
+    engines: {node: '>= 0.8'}
+
   cac@6.7.14:
     resolution: {integrity: sha512-b6Ilus+c3RrdDk+JhLKUAQfzzgLEPy6wcXqS7f/xe1EETvsDP6GORG7SFuOs6cID5YkqchW/LXZbX5bc8j7ZcQ==}
     engines: {node: '>=8'}
 
+  call-bind-apply-helpers@1.0.2:
+    resolution: {integrity: sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==}
+    engines: {node: '>= 0.4'}
+
+  call-bound@1.0.4:
+    resolution: {integrity: sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==}
+    engines: {node: '>= 0.4'}
+
+  camelcase@6.3.0:
+    resolution: {integrity: sha512-Gmy6FhYlCY7uOElZUSbxo2UCDH8owEk996gkbrpsgGtrJLM3J7jGxl9Ic7Qwwj4ivOE5AWZWRMecDdF7hqGjFA==}
+    engines: {node: '>=10'}
+
+  chalk@4.1.2:
+    resolution: {integrity: sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==}
+    engines: {node: '>=10'}
+
+  chalk@5.6.2:
+    resolution: {integrity: sha512-7NzBL0rN6fMUW+f7A6Io4h40qQlG+xGmtMxfbnH/K7TAtt8JQWVQK+6g0UXKMeVJoyV5EkkNsErQ8pVD3bLHbA==}
+    engines: {node: ^12.17.0 || ^14.13 || >=16.0.0}
+
+  change-case@5.4.4:
+    resolution: {integrity: sha512-HRQyTk2/YPEkt9TnUPbOpr64Uw3KOicFWPVBb+xiHvd6eBx/qPr9xqfBFDT8P2vWsvvz4jbEkfDe71W3VyNu2w==}
+
+  chardet@2.2.0:
+    resolution: {integrity: sha512-rddelWYNPRrXq6PtNEN2S3f6t9ILzvqaN5pVgi4kqt9jHQaXIial9PznB5iSPVlQSLNaaH22ItWz3EJtQ10+OA==}
+
+  cheerio-select@2.1.0:
+    resolution: {integrity: sha512-9v9kG0LvzrlcungtnJtpGNxY+fzECQKhK4EGJX2vByejiMX84MFNQw4UxPJl3bFbTMw+Dfs37XaIkCwTZfLh4g==}
+
+  cheerio@1.2.0:
+    resolution: {integrity: sha512-WDrybc/gKFpTYQutKIK6UvfcuxijIZfMfXaYm8NMsPQxSYvf+13fXUJ4rztGGbJcBQ/GF55gvrZ0Bc0bj/mqvg==}
+    engines: {node: '>=20.18.1'}
+
+  chokidar@3.6.0:
+    resolution: {integrity: sha512-7VT13fmjotKpGipCW9JEQAusEPE+Ei8nl6/g4FBAmIm0GOOLMua9NDDo/DWp0ZAxCr3cPq5ZpBqmPAQgDda2Pw==}
+    engines: {node: '>= 8.10.0'}
+
+  chokidar@4.0.3:
+    resolution: {integrity: sha512-Qgzu8kfBvo+cA4962jnP1KkS6Dop5NS6g7R5LFYJr4b8Ub94PPQXUksCw9PvXoeXPRRddRNC5C1JQUR2SMGtnA==}
+    engines: {node: '>= 14.16.0'}
+
   chokidar@5.0.0:
     resolution: {integrity: sha512-TQMmc3w+5AxjpL8iIiwebF73dRDF4fBIieAqGn9RGCWaEVwQ6Fb2cGe31Yns0RRIzii5goJ1Y7xbMwo1TxMplw==}
     engines: {node: '>= 20.19.0'}
 
+  ci-info@4.4.0:
+    resolution: {integrity: sha512-77PSwercCZU2Fc4sX94eF8k8Pxte6JAwL4/ICZLFjJLqegs7kCuAsqqj/70NQF6TvDpgFjkubQB2FW2ZZddvQg==}
+    engines: {node: '>=8'}
+
+  cli-cursor@3.1.0:
+    resolution: {integrity: sha512-I/zHAwsKf9FqGoXM4WWRACob9+SNukZTd94DWF57E4toouRulbCxcUh6RKUEOQlYTHJnzkPMySvPNaaSLNfLZw==}
+    engines: {node: '>=8'}
+
+  cli-spinners@2.9.2:
+    resolution: {integrity: sha512-ywqV+5MmyL4E7ybXgKys4DugZbX0FC6LnwrhjuykIjnK9k8OQacQ7axGKnjDXWNhns0xot3bZI5h55H8yo9cJg==}
+    engines: {node: '>=6'}
+
+  cli-width@4.1.0:
+    resolution: {integrity: sha512-ouuZd4/dm2Sw5Gmqy6bGyNNNe1qt9RpmxveLSO7KcgsTnU7RXfsw+/bukWGo1abgBiMAic068rclZsO4IWmmxQ==}
+    engines: {node: '>= 12'}
+
+  cliui@7.0.4:
+    resolution: {integrity: sha512-OcRE68cOsVMXp1Yvonl/fzkQOyjLSu/8bhPDfQt0e0/Eb283TKP20Fs2MqoPsr9SwA595rRCA+QMzYc9nBP+JQ==}
+
+  cliui@8.0.1:
+    resolution: {integrity: sha512-BSeNnyus75C4//NQ9gQt1/csTXyo/8Sb+afLAkzAptFuMsod9HFokGNudZpi/oQV73hnVK+sR+5PVRMd+Dr7YQ==}
+    engines: {node: '>=12'}
+
+  cliui@9.0.1:
+    resolution: {integrity: sha512-k7ndgKhwoQveBL+/1tqGJYNz097I7WOvwbmmU2AR5+magtbjPWQTS1C5vzGkBC8Ym8UWRzfKUzUUqFLypY4Q+w==}
+    engines: {node: '>=20'}
+
+  clone@1.0.4:
+    resolution: {integrity: sha512-JQHZ2QMW6l3aH/j6xCqQThY/9OH4D/9ls34cgkUBiEeocRTU04tHfKPBsUK1PqZCUQM7GiA0IIXJSuXHI64Kbg==}
+    engines: {node: '>=0.8'}
+
   clsx@2.1.1:
     resolution: {integrity: sha512-eYm0QWBtUrBWZWG0d386OGAw16Z995PiOVo2B7bjWSbHedGl5e0ZWaq65kOGgUSNesEIDkB9ISbTg/JK9dhCZA==}
     engines: {node: '>=6'}
 
+  color-convert@2.0.1:
+    resolution: {integrity: sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==}
+    engines: {node: '>=7.0.0'}
+
+  color-convert@3.1.3:
+    resolution: {integrity: sha512-fasDH2ont2GqF5HpyO4w0+BcewlhHEZOFn9c1ckZdHpJ56Qb7MHhH/IcJZbBGgvdtwdwNbLvxiBEdg336iA9Sg==}
+    engines: {node: '>=14.6'}
+
+  color-name@1.1.4:
+    resolution: {integrity: sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==}
+
+  color-name@2.1.1:
+    resolution: {integrity: sha512-p2FdgwVx1a9yWBHP2wI0VgShkDpgN4kZISkxdNipGBJWpa5G6b04OINlVWCyJj0JmfvcPrgqt95E9k8yvaOJFg==}
+    engines: {node: '>=12.20'}
+
+  color-string@2.1.4:
+    resolution: {integrity: sha512-Bb6Cq8oq0IjDOe8wJmi4JeNn763Xs9cfrBcaylK1tPypWzyoy2G3l90v9k64kjphl/ZJjPIShFztenRomi8WTg==}
+    engines: {node: '>=18'}
+
+  color@5.0.3:
+    resolution: {integrity: sha512-ezmVcLR3xAVp8kYOm4GS45ZLLgIE6SPAFoduLr6hTDajwb3KZ2F46gulK3XpcwRFb5KKGCSezCBAY4Dw4HsyXA==}
+    engines: {node: '>=18'}
+
   colorette@2.0.20:
     resolution: {integrity: sha512-IfEDxwoWIjkeXL1eXcDiow4UbKjhLdq6/EuSVR9GMN7KVH3r9gQ83e73hsz1Nd1T3ijd5xv1wcWRYO+D6kCI2w==}
 
+  combined-stream@1.0.8:
+    resolution: {integrity: sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==}
+    engines: {node: '>= 0.8'}
+
+  commander@14.0.3:
+    resolution: {integrity: sha512-H+y0Jo/T1RZ9qPP4Eh1pkcQcLRglraJaSLoyOtHxu6AapkjWVCy2Sit1QQ4x3Dng8qDlSsZEet7g5Pq06MvTgw==}
+    engines: {node: '>=20'}
+
   commander@2.20.3:
     resolution: {integrity: sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ==}
 
+  commander@9.5.0:
+    resolution: {integrity: sha512-KRs7WVDKg86PWiuAqhDrAQnTXZKraVcCc6vFdL14qrZ/DcWwuRo7VoiYXalXO7S5GKpqYiVEwCbgFDfxNHKJBQ==}
+    engines: {node: ^12.20.0 || >=14}
+
+  compress-commons@7.0.1:
+    resolution: {integrity: sha512-g0S8KAD8qf4+V//pr3BfB1aBnARLXNz2Gx+jmHU0LEriUuoQUOPOulVquHKTJ8+EAIIO7fhseNDr9wK5Q9FKBQ==}
+    engines: {node: '>=18'}
+
+  concat-map@0.0.1:
+    resolution: {integrity: sha512-/Srv4dswyQNBfohGpz9o6Yb3Gz3SrUDqBH5rTuhGR7ahtlbYKnVxw2bCFMRljaA7EXHaXZ8wsHdodFvbkhKmqg==}
+
   confbox@0.1.8:
     resolution: {integrity: sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w==}
 
@@ -1452,14 +2581,100 @@ packages:
     resolution: {integrity: sha512-5IKcdX0nnYavi6G7TtOhwkYzyjfJlatbjMjuLSfE2kYT5pMDOilZ4OvMhi637CcDICTmz3wARPoyhqyX1Y+XvA==}
     engines: {node: ^14.18.0 || >=16.10.0}
 
+  content-disposition@1.1.0:
+    resolution: {integrity: sha512-5jRCH9Z/+DRP7rkvY83B+yGIGX96OYdJmzngqnw2SBSxqCFPd0w2km3s5iawpGX8krnwSGmF0FW5Nhr0Hfai3g==}
+    engines: {node: '>=18'}
+
+  content-type@1.0.5:
+    resolution: {integrity: sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==}
+    engines: {node: '>= 0.6'}
+
+  content-type@2.1.0:
+    resolution: {integrity: sha512-mj7UPXE0jaqaOsukNZRUEfEi2AcL7C/vwmwcHV0O97eO1E1pxBZuyjlZrx5seTaNBg1U6+o35wpa35Qfcc+7ag==}
+    engines: {node: '>=18'}
+
+  convert-source-map@2.0.0:
+    resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==}
+
+  cookie-signature@1.2.2:
+    resolution: {integrity: sha512-D76uU73ulSXrD1UXF4KE2TMxVVwhsnCgfAyTg9k8P6KGZjlXKrOLe4dJQKI3Bxi5wjesZoFXJWElNWBjPZMbhg==}
+    engines: {node: '>=6.6.0'}
+
+  cookie@0.7.2:
+    resolution: {integrity: sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==}
+    engines: {node: '>= 0.6'}
+
+  core-util-is@1.0.3:
+    resolution: {integrity: sha512-ZQBvi1DcpJ4GDqanjucZ2Hj3wEO5pZDS89BWbkcrvdxksJorwUDDZamX9ldFkp9aw2lmBDLgkObEA4DWNJ9FYQ==}
+
+  crc-32@1.2.2:
+    resolution: {integrity: sha512-ROmzCKrTnOwybPcJApAA6WBWij23HVfGVNKqqrZpuyZOHqK2CwHSvpGuyt/UNNvaIjEd8X5IFGp4Mh+Ie1IHJQ==}
+    engines: {node: '>=0.8'}
+    hasBin: true
+
+  crc32-stream@7.0.1:
+    resolution: {integrity: sha512-IBWsY8xznyQrcHn8h4bC8/4ErNke5elzgG8GcqF4RFPw6aHkWWRc7Tgw6upjaTX/CT/yQgqYENkxYsTYN+hW2g==}
+    engines: {node: '>=18'}
+
+  create-wdio@9.32.0:
+    resolution: {integrity: sha512-FDPY5NE41kNMMzvMCHMVuNOebHiwpb9fLYrX7836UYPqJ8Ntkdf0qq1CYfbM0p+Oji6GKlDV6FBrmJN/GRX7AQ==}
+    engines: {node: '>=18.20.0'}
+    hasBin: true
+
+  cross-env@10.1.0:
+    resolution: {integrity: sha512-GsYosgnACZTADcmEyJctkJIoqAhHjttw7RsFrVoJNXbsWWqaq6Ym+7kZjq6mS45O0jij6vtiReppKQEtqWy6Dw==}
+    engines: {node: '>=20'}
+    hasBin: true
+
   cross-spawn@7.0.6:
     resolution: {integrity: sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==}
     engines: {node: '>= 8'}
 
+  css-select@5.2.2:
+    resolution: {integrity: sha512-TizTzUddG/xYLA3NXodFM0fSbNizXjOKhqiQQwvhlspadZokn1KDy0NZFS0wuEubIYAV5/c1/lAr0TaaFXEXzw==}
+
+  css-shorthand-properties@1.1.2:
+    resolution: {integrity: sha512-C2AugXIpRGQTxaCW0N7n5jD/p5irUmCrwl03TrnMFBHDbdq44CFWR2zO7rK9xPN4Eo3pUxC4vQzQgbIpzrD1PQ==}
+
   css-tree@3.2.1:
     resolution: {integrity: sha512-X7sjQzceUhu1u7Y/ylrRZFU2FS6LRiFVp6rKLPg23y3x3c3DOKAwuXGDp+PAGjh6CSnCjYeAul8pcT8bAl+lSA==}
     engines: {node: ^10 || ^12.20.0 || ^14.13.0 || >=15.0.0}
 
+  css-value@0.0.1:
+    resolution: {integrity: sha512-FUV3xaJ63buRLgHrLQVlVgQnQdR4yqdLGaDu7g8CQcWjInDfM9plBTPI9FRfpahju1UBSaMckeb2/46ApS/V1Q==}
+
+  css-what@6.2.2:
+    resolution: {integrity: sha512-u/O3vwbptzhMs3L1fQE82ZSLHQQfto5gyZzwteVIEyeaY5Fc7R4dapF/BvRoSYFeqfBk4m0V1Vafq5Pjv25wvA==}
+    engines: {node: '>= 6'}
+
+  data-uri-to-buffer@6.0.2:
+    resolution: {integrity: sha512-7hvf7/GW8e86rW0ptuwS3OcBGDjIi6SZva7hCyWC0yYry2cOPmLIjXAUHI6DK2HsnwJd9ifmt57i8eV2n4YNpw==}
+    engines: {node: '>= 14'}
+
+  debug@2.6.9:
+    resolution: {integrity: sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==}
+    peerDependencies:
+      supports-color: '*'
+    peerDependenciesMeta:
+      supports-color:
+        optional: true
+
+  debug@3.1.0:
+    resolution: {integrity: sha512-OX8XqP7/1a9cqkxYw2yXss15f26NKWBpDXQd0/uK/KPqdQhxbPa994hnzjcE2VqQpDslf55723cKPUOGSmMY3g==}
+    peerDependencies:
+      supports-color: '*'
+    peerDependenciesMeta:
+      supports-color:
+        optional: true
+
+  debug@3.2.7:
+    resolution: {integrity: sha512-CFjzYYAi4ThfiQvizrFQevTTXHtnCqWfe7x1AhgEscTz6ZbLbfoLRLPugTQyBth6f8ZERVUSyWHFD/7Wu4t1XQ==}
+    peerDependencies:
+      supports-color: '*'
+    peerDependenciesMeta:
+      supports-color:
+        optional: true
+
   debug@4.4.3:
     resolution: {integrity: sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==}
     engines: {node: '>=6.0'}
@@ -1469,16 +2684,47 @@ packages:
       supports-color:
         optional: true
 
+  decamelize@4.0.0:
+    resolution: {integrity: sha512-9iE1PgSik9HeIIw2JO94IidnE3eBoQrFJ3w7sFuzSX4DpmZ3v5sZpUiV5Swcf6mQEF+Y0ru8Neo+p+nyh2J+hQ==}
+    engines: {node: '>=10'}
+
+  decamelize@6.0.1:
+    resolution: {integrity: sha512-G7Cqgaelq68XHJNGlZ7lrNQyhZGsFqpwtGFexqUv4IQdjKoSYF7ipZ9UuTJZUSQXFj/XaoBLuEVIVqr8EJngEQ==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+
+  deep-eql@5.0.2:
+    resolution: {integrity: sha512-h5k/5U50IJJFpzfL6nO9jaaumfjO/f2NjK/oYB2Djzm4p9L+3T9qWpZqZ2hAbLPuuYq9wrU08WQyBTL5GbPk5Q==}
+    engines: {node: '>=6'}
+
   deep-is@0.1.4:
     resolution: {integrity: sha512-oIPzksmTg4/MriiaYGO+okXDT7ztn/w3Eptv/+gSIdMdKsJo0u4CfYNFJPy+4SKMuCqGw2wxnA+URMg3t8a/bQ==}
 
+  deepmerge-ts@8.0.2:
+    resolution: {integrity: sha512-uqbvqLUMrc6p0MO+WBRtTxY55hmyh94WRwI5a++PZe54X+bfVh59FSN7uWCBCW1CCVjzjnrwzfI8zidE2obMMw==}
+    engines: {node: '>=16.9.0'}
+
   deepmerge@4.3.1:
     resolution: {integrity: sha512-3sUqbMEc77XqpdNO7FRyRog+eW3ph+GYCbj+rK+uYyRMuwsVy0rMiVtPn+QJlKFvWP/1PYpapqYn0Me2knFn+A==}
     engines: {node: '>=0.10.0'}
 
+  defaults@1.0.4:
+    resolution: {integrity: sha512-eFuaLoy/Rxalv2kr+lqMlUnrDWV+3j4pljOIJgLIhI058IQfWJ7vXhyEIHu+HtC738klGALYxOKDO0bQP3tg8A==}
+
   defu@6.1.6:
     resolution: {integrity: sha512-f8mefEW4WIVg4LckePx3mALjQSPQgFlg9U8yaPdlsbdYcHQyj9n2zL2LJEA52smeYxOvmd/nB7TpMtHGMTHcug==}
 
+  degenerator@5.0.1:
+    resolution: {integrity: sha512-TllpMR/t0M5sqCXfj85i4XaAzxmS5tVA16dqvdkMwGmzI+dXLXnw3J+3Vdv7VKw+ThlTMboK6i9rnZ6Nntj5CQ==}
+    engines: {node: '>= 14'}
+
+  delayed-stream@1.0.0:
+    resolution: {integrity: sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==}
+    engines: {node: '>=0.4.0'}
+
+  depd@2.0.0:
+    resolution: {integrity: sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==}
+    engines: {node: '>= 0.8'}
+
   destr@2.0.5:
     resolution: {integrity: sha512-ugFTXCtDZunbzasqBxrK93Ik/DRYsO6S/fedkWEMKqt04xZ4csmnmwGDBAb07QWNaGMAmnTIemsYZCksjATwsA==}
 
@@ -1486,21 +2732,149 @@ packages:
     resolution: {integrity: sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==}
     engines: {node: '>=8'}
 
+  detect-node@2.1.0:
+    resolution: {integrity: sha512-T0NIuQpnTvFDATNuHN5roPwSBG83rFsuO+MXXH9/3N1eFbn4wcPjttvjMLEPWJ0RGUYgQE7cGgS3tNxbqCGM7g==}
+
   devalue@5.9.4:
     resolution: {integrity: sha512-sPAT4pztbu6586/hrhOnMKS17IJrvg12mXiSPSS3W5qDeN2RGgvZ0diZCm31dBbnevfVmujNO3IM2wrS4Y2Rhg==}
 
+  diff@5.2.2:
+    resolution: {integrity: sha512-vtcDfH3TOjP8UekytvnHH1o1P4FcUdt4eQ1Y+Abap1tk/OB2MWQvcwS2ClCd1zuIhc3JKOx6p3kod8Vfys3E+A==}
+    engines: {node: '>=0.3.1'}
+
+  diff@8.0.4:
+    resolution: {integrity: sha512-DPi0FmjiSU5EvQV0++GFDOJ9ASQUVFh5kD+OzOnYdi7n3Wpm9hWWGfB/O2blfHcMVTL5WkQXSnRiK9makhrcnw==}
+    engines: {node: '>=0.3.1'}
+
+  diff@9.0.0:
+    resolution: {integrity: sha512-svtcdpS8CgJyqAjEQIXdb3OjhFVVYjzGAPO8WGCmRbrml64SPw/jJD4GoE98aR7r25A0XcgrK3F02yw9R/vhQw==}
+    engines: {node: '>=0.3.1'}
+
+  dom-serializer@2.0.0:
+    resolution: {integrity: sha512-wIkAryiqt/nV5EQKqQpo3SToSOV9J0DnbJqwK7Wv/Trc92zIAYZ4FlMu+JPFW1DfGFt81ZTCGgDEabffXeLyJg==}
+
+  domelementtype@2.3.0:
+    resolution: {integrity: sha512-OLETBj6w0OsagBwdXnPdN0cnMfF9opN69co+7ZrbfPGrdpPVNBUj02spi6B1N7wChLQiPn4CSH/zJvXw56gmHw==}
+
+  domhandler@5.0.3:
+    resolution: {integrity: sha512-cgwlv/1iFQiFnU96XXgROh8xTeetsnJiDsTc7TYCLFd9+/WNkIqPTxiM/8pSd8VIrhXGTf1Ny1q1hquVqDJB5w==}
+    engines: {node: '>= 4'}
+
+  domutils@3.2.2:
+    resolution: {integrity: sha512-6kZKyUajlDuqlHKVX1w7gyslj9MPIXzIFiz/rGu35uC1wMi+kMhQwGhl4lt9unC9Vb9INnY9Z3/ZA3+FhASLaw==}
+
+  dotenv@17.4.2:
+    resolution: {integrity: sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==}
+    engines: {node: '>=12'}
+
+  dunder-proto@1.0.1:
+    resolution: {integrity: sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==}
+    engines: {node: '>= 0.4'}
+
   duplexer@0.1.2:
     resolution: {integrity: sha512-jtD6YG370ZCIi/9GTaJKQxWTZD045+4R4hTk/x1UyoqadyJ9x9CgSi1RlVDQF8U2sxLLSnFkCaMihqljHIWgMg==}
 
+  eastasianwidth@0.2.0:
+    resolution: {integrity: sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==}
+
+  easy-table@1.2.0:
+    resolution: {integrity: sha512-OFzVOv03YpvtcWGe5AayU5G2hgybsg3iqA6drU8UaoZyB9jLGMTrz9+asnLp/E+6qPh88yEI1gvyZFZ41dmgww==}
+
+  edge-paths@3.0.5:
+    resolution: {integrity: sha512-sB7vSrDnFa4ezWQk9nZ/n0FdpdUuC6R1EOrlU3DL+bovcNFK28rqu2emmAUjujYEJTWIgQGqgVVWUZXMnc8iWg==}
+    engines: {node: '>=14.0.0'}
+
+  edgedriver@6.3.1:
+    resolution: {integrity: sha512-wCL/Ydgt0DPkWecjhhPj2/lnDxsGeHLPKeJYKKMTNol+ULFVg4WaTvxoB19GU4tieM6LSA3vZEdZxmDC0DwIpQ==}
+    engines: {node: '>=20.0.0'}
+    hasBin: true
+
+  ee-first@1.1.1:
+    resolution: {integrity: sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==}
+
+  ejs@3.1.10:
+    resolution: {integrity: sha512-UeJmFfOrAQS8OJWPZ4qtgHyWExa088/MtK5UEyoJGFH67cDEXkZSviOiKRCZ4Xij0zxI3JECgYs3oKx+AizQBA==}
+    engines: {node: '>=0.10.0'}
+    hasBin: true
+
+  emoji-regex@10.6.0:
+    resolution: {integrity: sha512-toUI84YS5YmxW219erniWD0CIVOo46xGKColeNQRgOzDorgBi1v4D71/OFzgD9GO2UGKIv1C3Sp8DAn0+j5w7A==}
+
+  emoji-regex@8.0.0:
+    resolution: {integrity: sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==}
+
+  emoji-regex@9.2.2:
+    resolution: {integrity: sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg==}
+
+  enabled@2.0.0:
+    resolution: {integrity: sha512-AKrN98kuwOzMIdAizXGI86UFBoo26CL21UM763y1h/GMSJ4/OHU9k2YlsmBpyScFo/wbLzWQJBMCW4+IO3/+OQ==}
+
+  encodeurl@2.0.0:
+    resolution: {integrity: sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==}
+    engines: {node: '>= 0.8'}
+
+  encoding-sniffer@0.2.1:
+    resolution: {integrity: sha512-5gvq20T6vfpekVtqrYQsSCFZ1wEg5+wW0/QaZMWkFr6BqD3NfKs0rLCx4rrVlSWJeZb5NBJgVLswK/w2MWU+Gw==}
+
+  end-of-stream@1.4.5:
+    resolution: {integrity: sha512-ooEGc6HP26xXq/N+GCGOT0JKCLDGrq2bQUZrQ7gyrJiZANJ/8YDTxTpQBXGMn+WbIQXNVpyWymm7KYVICQnyOg==}
+
+  entities@4.5.0:
+    resolution: {integrity: sha512-V0hjH4dGPh9Ao5p0MoRY6BVqtwCjhz6vI5LT8AJ55H+4g9/4vbHx1I54fS0XuclLhDHArPQCiMjDxjaL8fPxhw==}
+    engines: {node: '>=0.12'}
+
+  entities@6.0.1:
+    resolution: {integrity: sha512-aN97NXWF6AWBTahfVOIrB/NShkzi5H7F9r1s9mD3cDj4Ko5f2qhhVoYMibXF7GlLveb/D2ioWay8lxI97Ven3g==}
+    engines: {node: '>=0.12'}
+
+  entities@7.0.1:
+    resolution: {integrity: sha512-TWrgLOFUQTH994YUyl1yT4uyavY5nNB5muff+RtWaqNVCAK408b5ZnnbNAUEWLTCpum9w6arT70i1XdQ4UeOPA==}
+    engines: {node: '>=0.12'}
+
+  error-ex@1.3.4:
+    resolution: {integrity: sha512-sqQamAnR14VgCr1A618A3sGrygcpK+HEbenA/HiEAkkUwcZIIB/tgWqHFxWgOyDh4nB4JCRimh79dR5Ywc9MDQ==}
+
+  es-define-property@1.0.1:
+    resolution: {integrity: sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==}
+    engines: {node: '>= 0.4'}
+
+  es-errors@1.3.0:
+    resolution: {integrity: sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==}
+    engines: {node: '>= 0.4'}
+
+  es-object-atoms@1.1.2:
+    resolution: {integrity: sha512-HWcBoN6NileqtSydK2FqHbS/LoDd2pqrnQHLyJzBj4kOp/ky2MWMN694xOfkK8/SnUsW2DH7EfyVlydKCsm1Zw==}
+    engines: {node: '>= 0.4'}
+
+  es-set-tostringtag@2.1.0:
+    resolution: {integrity: sha512-j6vWzfrGVfyXxge+O0x5sh6cvxAog0a/4Rdd2K36zCMV5eJ+/+tOAngRO8cODMNWbVRdVlmGZQL2YS3yR8bIUA==}
+    engines: {node: '>= 0.4'}
+
   esbuild@0.28.1:
     resolution: {integrity: sha512-HrJrvZv5ayxBzPfwphOoNzkzOIIlifzk0KJrGK2c8R4+LKpMtpYLQeUdjnwjWv/LZlkH2laZk+4w78pi99D4Vw==}
     engines: {node: '>=18'}
     hasBin: true
 
+  escalade@3.2.0:
+    resolution: {integrity: sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==}
+    engines: {node: '>=6'}
+
+  escape-html@1.0.3:
+    resolution: {integrity: sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==}
+
+  escape-string-regexp@2.0.0:
+    resolution: {integrity: sha512-UpzcLCXolUWcNu5HtVMHYdXJjArjsF9C0aNnquZYY4uW/Vu0miy5YoWvbV345HauVvcAUnpRuhMMcqTcGOY2+w==}
+    engines: {node: '>=8'}
+
   escape-string-regexp@4.0.0:
     resolution: {integrity: sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==}
     engines: {node: '>=10'}
 
+  escodegen@2.1.0:
+    resolution: {integrity: sha512-2NlIDTwUWJN0mRPQOdtQBzbUHvdGY2P1VXSyU83Q3xKxM7WHX2Ql8dKq782Q9TgQUNOLEzEYu9bzLNj1q88I5w==}
+    engines: {node: '>=6.0'}
+    hasBin: true
+
   eslint-config-prettier@10.1.8:
     resolution: {integrity: sha512-82GZUjRS0p/jganf6q1rEO25VSoHH0hKPCTrgillPjdI/3bgBhAE1QzHrHTizjpRvy6pGAvKjDJtk2pF9NDq8w==}
     hasBin: true
@@ -1540,6 +2914,11 @@ packages:
     resolution: {integrity: sha512-7p3DrVEIopW1B1avAGLuCSh1jubc01H2JHc8B4qqGblmg5gI9yumBgACjWo4JlIc04ufug4xJ3SQI8HkS/Rgzw==}
     engines: {node: ^20.19.0 || ^22.13.0 || >=24}
 
+  esprima@4.0.1:
+    resolution: {integrity: sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A==}
+    engines: {node: '>=4'}
+    hasBin: true
+
   esquery@1.7.0:
     resolution: {integrity: sha512-Ap6G0WQwcU/LHsvLwON1fAQX9Zp0A2Y6Y/cJBl9r/JbW90Zyg4/zbG6zzKa2OTALELarYHmKu0GhpM5EO+7T0g==}
     engines: {node: '>=0.10'}
@@ -1570,15 +2949,75 @@ packages:
     resolution: {integrity: sha512-kVscqXk4OCp68SZ0dkgEKVi6/8ij300KBWTJq32P/dYeWTSwK41WyTxalN1eRmA5Z9UU/LX9D7FWSmV9SAYx6g==}
     engines: {node: '>=0.10.0'}
 
+  etag@1.8.1:
+    resolution: {integrity: sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==}
+    engines: {node: '>= 0.6'}
+
+  event-target-shim@5.0.1:
+    resolution: {integrity: sha512-i/2XbnSz/uxRCU6+NdVJgKWDTM427+MqYbkQzD321DuCQJUqOuJKIA0IM2+W2xtYHdKOmZ4dR6fExsd4SXL+WQ==}
+    engines: {node: '>=6'}
+
+  events-universal@1.0.1:
+    resolution: {integrity: sha512-LUd5euvbMLpwOF8m6ivPCbhQeSiYVNb8Vs0fQ8QjXo0JTkEHpz8pxdQf0gStltaPpw0Cca8b39KxvK9cfKRiAw==}
+
+  events@3.3.0:
+    resolution: {integrity: sha512-mQw+2fkQbALzQ7V0MY0IqdnXNOeTtP4r0lN9z7AAawCXgqea7bDii20AYrIBrFd/Hx0M2Ocz6S111CaFkUcb0Q==}
+    engines: {node: '>=0.8.x'}
+
+  execa@9.6.1:
+    resolution: {integrity: sha512-9Be3ZoN4LmYR90tUoVu2te2BsbzHfhJyfEiAVfz7N5/zv+jduIfLrV2xdQXOHbaD6KgpGdO9PRPM1Y4Q9QkPkA==}
+    engines: {node: ^18.19.0 || >=20.5.0}
+
+  exit-hook@4.0.0:
+    resolution: {integrity: sha512-Fqs7ChZm72y40wKjOFXBKg7nJZvQJmewP5/7LtePDdnah/+FH9Hp5sgMujSCMPXlxOAW2//1jrW9pnsY7o20vQ==}
+    engines: {node: '>=18'}
+
+  expect-webdriverio@6.1.0:
+    resolution: {integrity: sha512-RXgaXoH1U8IiAHPelkMhZSnWUT0HfIhkjKK8nBkIpnXRO+zJ8dRafoyZhVy5mu/LtoyIr9juRWRwN284OSNM6Q==}
+    engines: {node: '>=20'}
+    peerDependencies:
+      '@wdio/globals': ^9.0.0
+      '@wdio/logger': ^9.0.0
+      webdriverio: ^9.28.0
+
+  expect@30.5.2:
+    resolution: {integrity: sha512-0LNuMvs8/5mRYhnCR4k+lGV7fqPMs6Bnksda4S3zsCUmdxBpAn4zU4NNzXdq1pMKe/H4W5t/zVIDSJ/H3e0vDA==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  express@5.2.1:
+    resolution: {integrity: sha512-hIS4idWWai69NezIdRt2xFVofaF4j+6INOpJlVOLDO8zXGpUVEVzIYk12UUi2JzjEzWL3IOAxcTubgz9Po0yXw==}
+    engines: {node: '>= 18'}
+
+  extract-zip@2.0.1:
+    resolution: {integrity: sha512-GDhU9ntwuKyGXdZBUgTIe+vXnWj0fppUEtMDL0+idd5Sta8TGpHssn/eusA9mrPr9qNDym6SxAYZjNvCn/9RBg==}
+    engines: {node: '>= 10.17.0'}
+    hasBin: true
+
+  fast-deep-equal@2.0.1:
+    resolution: {integrity: sha512-bCK/2Z4zLidyB4ReuIsvALH6w31YfAQDmXMqMx6FyfHqvBxtjC0eRumeSu4Bs3XtXwpyIywtSTrVT99BxY1f9w==}
+
   fast-deep-equal@3.1.3:
     resolution: {integrity: sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==}
 
+  fast-fifo@1.3.2:
+    resolution: {integrity: sha512-/d9sfos4yxzpwkDkuN7k2SqFKtYNmCTzgfEpz82x34IM9/zc8KGxQoXg1liNC/izpRM/MBdt44Nmx41ZWqk+FQ==}
+
   fast-json-stable-stringify@2.1.0:
     resolution: {integrity: sha512-lhd/wF+Lk98HZoTCtlVraHtfh5XYijIjalXck7saUtuanSDyLMxnHhSXEDJqHxD7msR8D0uCmqlkwjCV8xvwHw==}
 
   fast-levenshtein@2.0.6:
     resolution: {integrity: sha512-DCXu6Ifhqcks7TZKY3Hxp3y6qphY5SJZmrWMDrKcERSOXWQdMhU9Ig/PYrzyw/ul9jOIyh0N4M0tbC5hodg8dw==}
 
+  fast-uri@3.1.8:
+    resolution: {integrity: sha512-GZMtZUTNRpOVIECoXwLNZS5xUGE+mVNbTB8h/7Rwh2TFWcBQiPzTgyZi05BF9UMZKkLJv8XBRJTlU7zg8+ZfMg==}
+
+  fastest-levenshtein@1.0.16:
+    resolution: {integrity: sha512-eRnCtTTtGZFpQCwhJiUOuxPQWRXVKYDn0b2PeHfXL6/Zi53SLAzAHfVhVWK2AryC/WH05kGfxhFIPvTF0SXQzg==}
+    engines: {node: '>= 4.9.1'}
+
+  fd-slicer@1.1.0:
+    resolution: {integrity: sha512-cE1qsB/VwyQozZ+q1dGxR8LBYNZeofhEdUNGSMbQD3Gw2lAzX9Zb3uIU6Ebc/Fmyjo9AWWfnn0AUCHqtevs/8g==}
+
   fdir@6.5.0:
     resolution: {integrity: sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==}
     engines: {node: '>=12.0.0'}
@@ -1588,41 +3027,252 @@ packages:
       picomatch:
         optional: true
 
+  fecha@4.2.3:
+    resolution: {integrity: sha512-OP2IUU6HeYKJi3i0z4A19kHMQoLVs4Hc+DPqqxI2h/DPZHTm/vjsfC6P0b4jCMy14XizLBqvndQ+UilD7707Jw==}
+
+  figures@6.1.0:
+    resolution: {integrity: sha512-d+l3qxjSesT4V7v2fh+QnmFnUWv9lSpjarhShNTgBOfA0ttejbQUAlHLitbjkoRiDulW0OPoQPYIGhIC8ohejg==}
+    engines: {node: '>=18'}
+
   file-entry-cache@8.0.0:
     resolution: {integrity: sha512-XXTUwCvisa5oacNGRP9SfNtYBNAMi+RPwBFmblZEF7N7swHYQS6/Zfk7SRwx4D5j3CH211YNRco1DEMNVfZCnQ==}
     engines: {node: '>=16.0.0'}
 
+  filelist@1.0.6:
+    resolution: {integrity: sha512-5giy2PkLYY1cP39p17Ech+2xlpTRL9HLspOfEgm0L6CwBXBTgsK5ou0JtzYuepxkaQ/tvhCFIJ5uXo0OrM2DxA==}
+
+  fill-range@7.1.1:
+    resolution: {integrity: sha512-YsGpe3WHLK8ZYi4tWDg2Jy3ebRz2rXowDxnld4bkQB00cc/1Zw9AWnC0i9ztDJitivtQvaI9KaLyKrc+hBW0yg==}
+    engines: {node: '>=8'}
+
+  finalhandler@2.1.1:
+    resolution: {integrity: sha512-S8KoZgRZN+a5rNwqTxlZZePjT/4cnm0ROV70LedRHZ0p8u9fRID0hJUZQpkKLzro8LfmC8sx23bY6tVNxv8pQA==}
+    engines: {node: '>= 18.0.0'}
+
   find-up@5.0.0:
     resolution: {integrity: sha512-78/PXT1wlLLDgTzDs7sjq9hzz0vXD+zn+7wypEe4fXQxCmdmqfGsEPQxmiCSQI3ajFV91bVSsvNtrJRiW6nGng==}
     engines: {node: '>=10'}
 
+  find-up@6.3.0:
+    resolution: {integrity: sha512-v2ZsoEuVHYy8ZIlYqwPe/39Cy+cFDzp4dXPaxNvkEuouymu+2Jbz0PxpKarJHYJTmv2HWT3O382qY8l4jMWthw==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+
   flat-cache@4.0.1:
     resolution: {integrity: sha512-f7ccFPK3SXFHpx15UIGyRJ/FJQctuKZ0zVuN3frBo4HnK3cay9VEW0R6yPYFHC0AgqhukPzKjq22t5DmAyqGyw==}
     engines: {node: '>=16'}
 
+  flat@5.0.2:
+    resolution: {integrity: sha512-b6suED+5/3rTpUBdG1gupIl8MPFCAMA0QXwmljLhvCUKcUvdE4gWky9zpuGCcXHOsz4J9wPGNWq6OKpmIzz3hQ==}
+    hasBin: true
+
   flatted@3.4.2:
     resolution: {integrity: sha512-PjDse7RzhcPkIJwy5t7KPWQSZ9cAbzQXcafsetQoD7sOJRQlGikNbx7yZp2OotDnJyrDcbyRq3Ttb18iYOqkxA==}
 
+  fn.name@1.1.0:
+    resolution: {integrity: sha512-GRnmB5gPyJpAhTQdSZTSp9uaPSvl09KoYcMQtsB9rQoOmzs9dH6ffeccH+Z+cv6P68Hu5bC6JjRh4Ah/mHSNRw==}
+
+  follow-redirects@1.16.0:
+    resolution: {integrity: sha512-y5rN/uOsadFT/JfYwhxRS5R7Qce+g3zG97+JrtFZlC9klX/W5hD7iiLzScI4nZqUS7DNUdhPgw4xI8W2LuXlUw==}
+    engines: {node: '>=4.0'}
+    peerDependencies:
+      debug: '*'
+    peerDependenciesMeta:
+      debug:
+        optional: true
+
+  foreground-child@3.3.1:
+    resolution: {integrity: sha512-gIXjKqtFuWEgzFRJA9WCQeSJLZDjgJUOMCMzxtvFq/37KojM1BFGufqsCy0r4qSQmYLsZYMeyRqzIWOMup03sw==}
+    engines: {node: '>=14'}
+
+  form-data@4.0.6:
+    resolution: {integrity: sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ==}
+    engines: {node: '>= 6'}
+
+  forwarded@0.2.0:
+    resolution: {integrity: sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==}
+    engines: {node: '>= 0.6'}
+
+  fresh@0.5.2:
+    resolution: {integrity: sha512-zJ2mQYM18rEFOudeV4GShTGIQ7RbzA7ozbU9I/XBpm7kqgMywgmylMwXHxZJmkVoYkna9d2pVXVXPdYTP9ej8Q==}
+    engines: {node: '>= 0.6'}
+
+  fresh@2.0.0:
+    resolution: {integrity: sha512-Rx/WycZ60HOaqLKAi6cHRKKI7zxWbJ31MhntmtwMoaTeF7XFH9hhBp8vITaMidfljRQ6eYWCKkaTK+ykVJHP2A==}
+    engines: {node: '>= 0.8'}
+
+  fs.realpath@1.0.0:
+    resolution: {integrity: sha512-OO0pH2lK6a0hZnAdau5ItzHPI6pUlvI7jMVnxUQRtw4owF2wk8lOSabtGDCTP4Ggrg2MbGnWO9X8K1t4+fGMDw==}
+
   fsevents@2.3.3:
     resolution: {integrity: sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==}
     engines: {node: ^8.16.0 || ^10.6.0 || >=11.0.0}
     os: [darwin]
 
+  ftp-response-parser@1.0.1:
+    resolution: {integrity: sha512-++Ahlo2hs/IC7UVQzjcSAfeUpCwTTzs4uvG5XfGnsinIFkWUYF4xWwPd5qZuK8MJrmUIxFMuHcfqaosCDjvIWw==}
+    engines: {node: '>=0.8.0'}
+
   function-bind@1.1.2:
     resolution: {integrity: sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==}
 
+  geckodriver@6.1.1:
+    resolution: {integrity: sha512-/AcCyc9o9o6hUbudaSJM2iOtXbxSLqQPOb4GrPvEN40cjraUeaX/j5kH3mSgwiroyMn7qzx2wM61AQ2XY8j3sA==}
+    engines: {node: '>=20.0.0'}
+    hasBin: true
+
+  get-caller-file@2.0.5:
+    resolution: {integrity: sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==}
+    engines: {node: 6.* || 8.* || >= 10.*}
+
+  get-east-asian-width@1.7.0:
+    resolution: {integrity: sha512-XjH1AECxf0giL2V1aU8vKyRR2ppRUb5c0EvT7zuJTokQ74bNo52zOtghqdWIqrhUD79fo3x0WfKZdOqxF6LG1Q==}
+    engines: {node: '>=18'}
+
+  get-intrinsic@1.3.0:
+    resolution: {integrity: sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==}
+    engines: {node: '>= 0.4'}
+
+  get-port@7.2.0:
+    resolution: {integrity: sha512-afP4W205ONCuMoPBqcR6PSXnzX35KTcJygfJfcp+QY+uwm3p20p1YczWXhlICIzGMCxYBQcySEcOgsJcrkyobg==}
+    engines: {node: '>=16'}
+
+  get-proto@1.0.1:
+    resolution: {integrity: sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==}
+    engines: {node: '>= 0.4'}
+
+  get-stream@5.2.0:
+    resolution: {integrity: sha512-nBF+F1rAZVCu/p7rjzgA+Yb4lfYXrpl7a6VmJrU8wF9I1CKvP/QwPNZHnOlwbTkY6dvtFIzFMSyQXbLoTQPRpA==}
+    engines: {node: '>=8'}
+
+  get-stream@9.0.1:
+    resolution: {integrity: sha512-kVCxPF3vQM/N0B1PmoqVUqgHP+EeVjmZSQn+1oCRPxd2P21P2F19lIgbR3HBosbB1PUhOAoctJnfEn2GbN2eZA==}
+    engines: {node: '>=18'}
+
+  get-uri@6.0.5:
+    resolution: {integrity: sha512-b1O07XYq8eRuVzBNgJLstU6FYc1tS6wnMtF1I1D9lE8LxZSOGZ7LhxN54yPP6mGw5f2CkXY2BQUL9Fx41qvcIg==}
+    engines: {node: '>= 14'}
+
+  glob-parent@5.1.2:
+    resolution: {integrity: sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow==}
+    engines: {node: '>= 6'}
+
   glob-parent@6.0.2:
     resolution: {integrity: sha512-XxwI8EOhVQgWp6iDL+3b0r86f4d6AX6zSU55HfB4ydCEuXLXc5FcYeOu+nnGftS4TEju/11rt4KJPTMgbfmv4A==}
     engines: {node: '>=10.13.0'}
 
+  glob@10.5.0:
+    resolution: {integrity: sha512-DfXN8DfhJ7NH3Oe7cFmu3NCu1wKbkReJ8TorzSAFbSKrlNaQSKfIzqYqVY8zlbs2NLBbWpRiU52GX2PbaBVNkg==}
+    deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
+    hasBin: true
+
+  glob@13.0.6:
+    resolution: {integrity: sha512-Wjlyrolmm8uDpm/ogGyXZXb1Z+Ca2B8NbJwqBVg0axK9GbBeoS7yGV6vjXnYdGm6X53iehEuxxbyiKp8QmN4Vw==}
+    engines: {node: 18 || 20 || >=22}
+
+  glob@8.1.0:
+    resolution: {integrity: sha512-r8hpEjiQEYlF2QU0df3dS+nxxSIreXQS1qRhMJM0Q5NDdR386C7jb7Hwwod8Fgiuex+k0GFjgft18yvxm5XoCQ==}
+    engines: {node: '>=12'}
+    deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
+
+  gopd@1.2.0:
+    resolution: {integrity: sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==}
+    engines: {node: '>= 0.4'}
+
+  graceful-fs@4.2.11:
+    resolution: {integrity: sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==}
+
+  grapheme-splitter@1.0.4:
+    resolution: {integrity: sha512-bzh50DW9kTPM00T8y4o8vQg89Di9oLJVLW/KaOGIXJWP/iqCN6WKYkbNOF04vFLJhwcpYUh9ydh/+5vpOqV4YQ==}
+
   gzip-size@6.0.0:
     resolution: {integrity: sha512-ax7ZYomf6jqPTQ4+XCpUGyXKHk5WweS+e05MBO4/y3WJ5RkmPXNKvX+bx1behVILVwr6JSQvZAku021CHPXG3Q==}
     engines: {node: '>=10'}
 
+  handle-thing@2.0.1:
+    resolution: {integrity: sha512-9Qn4yBxelxoh2Ow62nP+Ka/kMnOXRi8BXnRaUwezLNhqelnN49xKz4F/dPP8OYLxLxq6JDtZb2i9XznUQbNPTg==}
+
+  has-flag@4.0.0:
+    resolution: {integrity: sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==}
+    engines: {node: '>=8'}
+
+  has-symbols@1.1.0:
+    resolution: {integrity: sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==}
+    engines: {node: '>= 0.4'}
+
+  has-tostringtag@1.0.2:
+    resolution: {integrity: sha512-NqADB8VjPFLM2V0VvHUewwwsw0ZWBaIdgo+ieHtK3hasLz4qeCRjYcqfB6AQrBggRKppKF8L52/VqdVsO47Dlw==}
+    engines: {node: '>= 0.4'}
+
   hasown@2.0.2:
     resolution: {integrity: sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==}
     engines: {node: '>= 0.4'}
 
+  hasown@2.0.4:
+    resolution: {integrity: sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==}
+    engines: {node: '>= 0.4'}
+
+  he@1.2.0:
+    resolution: {integrity: sha512-F/1DnUGPopORZi0ni+CvrCgHQ5FyEAHRLSApuYWMmrbSwoN2Mn/7k+Gl38gJnR7yyDZk6WLXwiGod1JOWNDKGw==}
+    hasBin: true
+
+  hosted-git-info@7.0.2:
+    resolution: {integrity: sha512-puUZAUKT5m8Zzvs72XWy3HtvVbTWljRE66cP60bxJzAqf2DgICo7lYTY2IHUmLnNpjYvw5bvmoHvPc0QO2a62w==}
+    engines: {node: ^16.14.0 || >=18.0.0}
+
+  hosted-git-info@8.1.0:
+    resolution: {integrity: sha512-Rw/B2DNQaPBICNXEm8balFz9a6WpZrkCGpcWFpy7nCj+NyhSdqXipmfvtmWt9xGfp0wZnBxB+iVpLmQMYt47Tw==}
+    engines: {node: ^18.17.0 || >=20.5.0}
+
+  hosted-git-info@9.0.3:
+    resolution: {integrity: sha512-Hc+ghLoSt6QaYZUv0WBiIvmMDZuZZ7oaDvdH8MbfOO4lOsxdXLEvuC6ePoGs9H1X9oCLyq6+NVN0MKqD+ydxyg==}
+    engines: {node: ^20.17.0 || >=22.9.0}
+
+  hpack.js@2.1.6:
+    resolution: {integrity: sha512-zJxVehUdMGIKsRaNt7apO2Gqp0BdqW5yaiGHXXmbpvxgBYVZnAql+BJb4RO5ad2MgpbZKn5G6nMnegrH1FcNYQ==}
+
+  htmlfy@0.8.1:
+    resolution: {integrity: sha512-xWROBw9+MEGwxpotll0h672KCaLrKKiCYzsyN8ZgL9cQbVumFnyvsk2JqiB9ELAV1GLj1GG/jxZUjV9OZZi/yQ==}
+
+  htmlparser2@10.1.0:
+    resolution: {integrity: sha512-VTZkM9GWRAtEpveh7MSF6SjjrpNVNNVJfFup7xTY3UpFtm67foy9HDVXneLtFVt4pMz5kZtgNcvCniNFb1hlEQ==}
+
+  http-deceiver@1.2.7:
+    resolution: {integrity: sha512-LmpOGxTfbpgtGVxJrj5k7asXHCgNZp5nLfp+hWc8QQRqtb7fUy6kRY3BO1h9ddF6yIPYUARgxGOwB42DnxIaNw==}
+
+  http-errors@2.0.1:
+    resolution: {integrity: sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==}
+    engines: {node: '>= 0.8'}
+
+  http-proxy-agent@7.0.2:
+    resolution: {integrity: sha512-T1gkAiYYDWYx3V5Bmyu7HcfcvL7mUrTWiM6yOfa3PIphViJ/gFPbvidQ+veqSOHci/PxBcDabeUNCzpOODJZig==}
+    engines: {node: '>= 14'}
+
+  http-status-codes@2.3.0:
+    resolution: {integrity: sha512-RJ8XvFvpPM/Dmc5SV+dC4y5PCeOhT3x1Hq0NU3rjGeg5a/CqlhZ7uudknPwZFz4aeAXDcbAyaeP7GAo9lvngtA==}
+
+  https-proxy-agent@5.0.1:
+    resolution: {integrity: sha512-dFcAjpTQFgoLMzC2VwU+C/CbS7uRL0lWmxDITmqm7C+7F0Odmj6s9l6alZc6AELXhrnggM2CeWSXHGOdX2YtwA==}
+    engines: {node: '>= 6'}
+
+  https-proxy-agent@7.0.6:
+    resolution: {integrity: sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw==}
+    engines: {node: '>= 14'}
+
+  human-signals@8.0.1:
+    resolution: {integrity: sha512-eKCa6bwnJhvxj14kZk5NCPc6Hb6BdsU9DZcOnmQKSnO1VKrfV0zCvtttPZUsBvjmNDn8rpcJfpwSYnHBjc95MQ==}
+    engines: {node: '>=18.18.0'}
+
+  iconv-lite@0.6.3:
+    resolution: {integrity: sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==}
+    engines: {node: '>=0.10.0'}
+
+  iconv-lite@0.7.3:
+    resolution: {integrity: sha512-IKXpvIzjnC9XTAUbVBcMfGS0EPaIXtW6v+zr+RRp+hqULEpo0owZax6wyRwPOJbWbzjYspQwusTsfVr0ifh4uQ==}
+    engines: {node: '>=0.10.0'}
+
+  ieee754@1.2.1:
+    resolution: {integrity: sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==}
+
   ignore@5.3.2:
     resolution: {integrity: sha512-hsBTNUqQTDwkWtcdYI2i06Y/nUBEsNEDJKjWdigLvegy8kDuJAS8uRlpkkcQpyEXL0Z/pjDy5HBmMjRCJ2gq+g==}
     engines: {node: '>= 4'}
@@ -1631,10 +3281,47 @@ packages:
     resolution: {integrity: sha512-Hs59xBNfUIunMFgWAbGX5cq6893IbWg4KnrjbYwX3tx0ztorVgTDA6B2sxf8ejHJ4wz8BqGUMYlnzNBer5NvGg==}
     engines: {node: '>= 4'}
 
+  immediate@3.0.6:
+    resolution: {integrity: sha512-XXOFtyqDjNDAQxVfYxuF7g9Il/IbWmmlQg2MYKOH8ExIT1qg6xc4zyS3HaEEATgs1btfzxq15ciUiY7gjSXRGQ==}
+
+  import-meta-resolve@4.2.0:
+    resolution: {integrity: sha512-Iqv2fzaTQN28s/FwZAoFq0ZSs/7hMAHJVX+w8PZl3cY19Pxk6jFFalxQoIfW2826i/fDLXv8IiEZRIT0lDuWcg==}
+
   imurmurhash@0.1.4:
     resolution: {integrity: sha512-JmXMZ6wuvDmLiHEml9ykzqO6lwFbof0GG4IkcGaENdCRDDmMVnny7s5HsIgHCbaq0w2MyPhDqkhTUgS2LU2PHA==}
     engines: {node: '>=0.8.19'}
 
+  inflight@1.0.6:
+    resolution: {integrity: sha512-k92I/b08q4wvFscXCLvqfsHCrjrF7yiXsQuIVvVE7N82W3+aqpzuUdBbfhWcy/FZR3/4IgflMgKLOsvPDrGCJA==}
+    deprecated: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
+
+  inherits@2.0.4:
+    resolution: {integrity: sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==}
+
+  inquirer@12.11.1:
+    resolution: {integrity: sha512-9VF7mrY+3OmsAfjH3yKz/pLbJ5z22E23hENKw3/LNSaA/sAt3v49bDRY+Ygct1xwuKT+U+cBfTzjCPySna69Qw==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  ip-address@10.7.2:
+    resolution: {integrity: sha512-7H/2gFSIitxc0hG3nOI1glS8QLo/EHBFFLk8vEUjXY/xu0AdL8jZ9U1IzO2PUm0d2D/ofQcAifb0g6OBkt8U7w==}
+    engines: {node: '>= 12'}
+
+  ipaddr.js@1.9.1:
+    resolution: {integrity: sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==}
+    engines: {node: '>= 0.10'}
+
+  is-arrayish@0.2.1:
+    resolution: {integrity: sha512-zz06S8t0ozoDXMG+ube26zeCTNXcKIPJZJi8hBrF4idCLms4CG9QtK7qBl1boi5ODzFpjswb5JPmHCbMpjaYzg==}
+
+  is-binary-path@2.1.0:
+    resolution: {integrity: sha512-ZMERYes6pDydyuGidse7OsHxtbI7WVeUEozgR/g7rd0xUimYNlvZRE/K2MgZTjWy725IfelLeVcEM97mmtRGXw==}
+    engines: {node: '>=8'}
+
   is-core-module@2.16.1:
     resolution: {integrity: sha512-UfoeMA6fIJ8wTYFEUjelnaGI67v6+N7qXJEvQuIGa99l4xsCruSYOVSQ0uPANn4dAzm8lkYPaKLrrijLq7x23w==}
     engines: {node: '>= 0.4'}
@@ -1643,39 +3330,162 @@ packages:
     resolution: {integrity: sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ==}
     engines: {node: '>=0.10.0'}
 
+  is-fullwidth-code-point@3.0.0:
+    resolution: {integrity: sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==}
+    engines: {node: '>=8'}
+
   is-glob@4.0.3:
     resolution: {integrity: sha512-xelSayHH36ZgE7ZWhli7pW34hNbNl8Ojv5KVmkJD4hBdD3th8Tfk9vYasLM+mXWOZhFkgZfxhLSnrwRr4elSSg==}
     engines: {node: '>=0.10.0'}
 
+  is-interactive@1.0.0:
+    resolution: {integrity: sha512-2HvIEKRoqS62guEC+qBjpvRubdX910WCMuJTZ+I9yvqKU2/12eSL549HMwtabb4oupdj2sMP50k+XJfB/8JE6w==}
+    engines: {node: '>=8'}
+
   is-module@1.0.0:
     resolution: {integrity: sha512-51ypPSPCoTEIN9dy5Oy+h4pShgJmPCygKfyRCISBI+JoWT/2oJvK8QPxmwv7b/p239jXrm9M1mlQbyKJ5A152g==}
 
+  is-number@7.0.0:
+    resolution: {integrity: sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==}
+    engines: {node: '>=0.12.0'}
+
+  is-plain-obj@2.1.0:
+    resolution: {integrity: sha512-YWnfyRwxL/+SsrWYfOpUtz5b3YD+nyfkHvjbcanzk8zgyO4ASD67uVMRt8k5bM4lLMDnXfriRhOpemw+NfT1eA==}
+    engines: {node: '>=8'}
+
+  is-plain-obj@4.1.0:
+    resolution: {integrity: sha512-+Pgi+vMuUNkJyExiMBt5IlFoMyKnr5zhJ4Uspz58WOhBF5QoIZkFyNHIbBAtHwzVAgk5RtndVNsDRN61/mmDqg==}
+    engines: {node: '>=12'}
+
+  is-promise@4.0.0:
+    resolution: {integrity: sha512-hvpoI6korhJMnej285dSg6nu1+e6uxs7zG3BYAm5byqDsgJNWwxzM6z6iZiAgQR4TJ30JmBTOwqZUw3WlyH3AQ==}
+
   is-reference@3.0.3:
     resolution: {integrity: sha512-ixkJoqQvAP88E6wLydLGGqCJsrFUnqoH6HnaczB8XmDH1oaWU+xxdptvikTgaEhtZ53Ky6YXiBuUI2WXLMCwjw==}
 
+  is-stream@2.0.1:
+    resolution: {integrity: sha512-hFoiJiTl63nn+kstHGBtewWSKnQLpyb155KHheA1l39uvtO9nWIop1p3udqPcUd/xbF1VLMO4n7OI6p7RbngDg==}
+    engines: {node: '>=8'}
+
+  is-stream@4.0.1:
+    resolution: {integrity: sha512-Dnz92NInDqYckGEUJv689RbRiTSEHCQ7wOVeALbkOz999YpqT46yMRIGtSNl2iCL1waAZSx40+h59NV/EwzV/A==}
+    engines: {node: '>=18'}
+
+  is-unicode-supported@0.1.0:
+    resolution: {integrity: sha512-knxG2q4UC3u8stRGyAVJCOdxFmv5DZiRcdlIaAQXAbSfJya+OhopNotLQrstBhququ4ZpuKbDc/8S6mgXgPFPw==}
+    engines: {node: '>=10'}
+
+  is-unicode-supported@2.1.0:
+    resolution: {integrity: sha512-mE00Gnza5EEB3Ds0HfMyllZzbBrmLOX3vfWoj9A9PEnTfratQ/BcaJOuMhnkhjXvb2+FkY3VuHqtAGpTPmglFQ==}
+    engines: {node: '>=18'}
+
+  isarray@0.0.1:
+    resolution: {integrity: sha512-D2S+3GLxWH+uhrNEcoh/fnmYeP8E8/zHl644d/jdA0g2uyXvy3sb0qxotE+ne0LtccHknQzWwZEzhak7oJ0COQ==}
+
+  isarray@1.0.0:
+    resolution: {integrity: sha512-VLghIWNM6ELQzo7zwmcg0NmTVyWKYjvIeM83yjp0wRDTmUnrM678fQbcKBo6n2CJEF0szoG//ytg+TKla89ALQ==}
+
   isexe@2.0.0:
     resolution: {integrity: sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==}
 
+  isexe@4.0.0:
+    resolution: {integrity: sha512-FFUtZMpoZ8RqHS3XeXEmHWLA4thH+ZxCv2lOiPIn1Xc7CxrqhWzNSDzD+/chS/zbYezmiwWLdQC09JdQKmthOw==}
+    engines: {node: '>=20'}
+
+  jackspeak@3.4.3:
+    resolution: {integrity: sha512-OGlZQpz2yfahA/Rd1Y8Cd9SIEsqvXkLVoSw/cgwhnhFMDbsQFeZYoJJ7bIZBS9BcamUW96asq/npPWugM+RQBw==}
+
+  jake@10.9.4:
+    resolution: {integrity: sha512-wpHYzhxiVQL+IV05BLE2Xn34zW1S223hvjtqk0+gsPrwd/8JNLXJgZZM/iPFsYc1xyphF+6M6EvdE5E9MBGkDA==}
+    engines: {node: '>=10'}
+    hasBin: true
+
+  jest-diff@30.5.2:
+    resolution: {integrity: sha512-rBtHnI6BWTiWj3lM7fOLVfChx7R9B0u9VV3PRHawKs79x6ZjW1QoSrKenaigNGWlvhtoi2BqvDbABDie+Os3xQ==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest-matcher-utils@30.5.2:
+    resolution: {integrity: sha512-lFkB365PTIHOhPzwrb9T6gvlDnPpOZ7/c3ewOKKB7bzztqjVrtlyRL2MkyfJXpyY2u2SKw001JKrTx14fBUFcQ==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest-message-util@30.5.1:
+    resolution: {integrity: sha512-UdQlLdd9wL/Ys7xRErckqwD6wPlSZYueosSWuHc1r2ztGLwlgPvtSJq2+BPEgaEY13WLvfFbmhTj8pba0Sd1jg==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest-mock@30.5.2:
+    resolution: {integrity: sha512-KTHb37Fhj8xY8qPFvTFaFJHcdsumQp+ExsUlgoX232Agmc706gagBs53+CYvulV7MVQo9AgXOUxsqzzVBoJlrA==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest-regex-util@30.5.0:
+    resolution: {integrity: sha512-Mg0WK7A6xRHLSA1udJ8y9f3lM0uUhFTBnLKzwPmqB9AylvpleJ6BLemR8K9dK27DY+cesDryoA7yLZCAHsPG1A==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  jest-util@30.5.1:
+    resolution: {integrity: sha512-yKuxmNy2rSbTXw+3SIPanJo+nV4/BS1p26v44IYBFMsswSQySfMMcPHErnOncda7i9HEz0q605rIhSTBVgrZTg==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
   jiti@2.6.1:
     resolution: {integrity: sha512-ekilCSN1jwRvIbgeg/57YFh8qQDNbwDb9xT/qu2DAHbFFZUicIl4ygVaAvzveMhMVr3LnpSKTNnwt8PoOfmKhQ==}
     hasBin: true
 
+  js-tokens@4.0.0:
+    resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==}
+
+  js-yaml@4.3.2:
+    resolution: {integrity: sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==}
+    hasBin: true
+
+  jsftp@2.1.3:
+    resolution: {integrity: sha512-r79EVB8jaNAZbq8hvanL8e8JGu2ZNr2bXdHC4ZdQhRImpSPpnWwm5DYVzQ5QxJmtGtKhNNuvqGgbNaFl604fEQ==}
+    engines: {node: '>=6'}
+
   json-buffer@3.0.1:
     resolution: {integrity: sha512-4bV5BfR2mqfQTJm+V5tPPdf+ZpuhiIvTuAB5g8kcrXOZpTT/QwwVRWBywX1ozr6lEuPdbHxwaJlm9G6mI2sfSQ==}
 
+  json-parse-even-better-errors@3.0.2:
+    resolution: {integrity: sha512-fi0NG4bPjCHunUJffmLd0gxssIgkNmArMvis4iNah6Owg1MCJjWhEcDLmsK6iGkJq3tHwbDkTlce70/tmXN4cQ==}
+    engines: {node: ^14.17.0 || ^16.13.0 || >=18.0.0}
+
   json-schema-traverse@0.4.1:
     resolution: {integrity: sha512-xbbCH5dCYU5T8LcEhhuh7HJ88HXuW3qsI3Y0zOZFKfZEHcpWiHU/Jxzk629Brsab/mMiHQti9wMP+845RPe3Vg==}
 
+  json-schema-traverse@1.0.0:
+    resolution: {integrity: sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==}
+
+  json-schema@0.4.0:
+    resolution: {integrity: sha512-es94M3nTIfsEPisRafak+HDLfHXnKBhV3vU5eqPcS3flIWqcxJWgXHXiey3YrpaNsanY5ei1VoYEbOzijuq9BA==}
+
   json-stable-stringify-without-jsonify@1.0.1:
     resolution: {integrity: sha512-Bdboy+l7tA3OGW6FjyFHWkP5LuByj1Tk33Ljyq0axyzdk9//JSi2u3fP1QSmd1KNwq6VOKYGlAu87CisVir6Pw==}
 
+  jszip@3.10.2:
+    resolution: {integrity: sha512-3l+rb15IOWtUhU0H5MFqES/T6Kh7abYwjosBey/vD6hDt8zoEffkSC5Ws5SGtgVw3gBx2NEbhTeSW1+kWkpyTQ==}
+
   keyv@4.5.4:
     resolution: {integrity: sha512-oxVHkHR/EJf2CNXnWxRLW6mg7JyCCUcG0DtEGmL2ctUo1PNTin1PUil+r/+4r5MpVgC/fn1kjsx7mjSujKqIpw==}
 
+  klaw@4.1.0:
+    resolution: {integrity: sha512-1zGZ9MF9H22UnkpVeuaGKOjfA2t6WrfdrJmGjy16ykcjnKQDmHVX+KI477rpbGevz/5FD4MC3xf1oxylBgcaQw==}
+    engines: {node: '>=14.14.0'}
+
+  kleur@4.1.5:
+    resolution: {integrity: sha512-o+NO+8WrRiQEE4/7nwRJhN1HWpVmJm511pBHUxPLtp0BUISzlBplORYSmTclCnJvQq2tKu/sgl3xVpkc7ZWuQQ==}
+    engines: {node: '>=6'}
+
+  kuler@2.0.0:
+    resolution: {integrity: sha512-Xq9nH7KlWZmXAtodXDDRE7vs6DU1gTU8zYDHDiWLSip45Egwq3plLHzPn27NgvzL2r1LMPC1vdqh98sQxtqj4A==}
+
+  lazystream@1.0.1:
+    resolution: {integrity: sha512-b94GiNHQNy6JNTrt5w6zNyffMrNkXZb3KTkCZJb2V1xaEGCk093vkZ2jk3tpaeP33/OiXC+WvK9AxUebnf5nbw==}
+    engines: {node: '>= 0.6.3'}
+
   levn@0.4.1:
     resolution: {integrity: sha512-+bT2uH4E5LGE7h/n3evcS/sQlJXCpIp6ym8OWJ5eV6+67Dsql/LaaT7qJBAt2rzfoa/5QBGBhxDix1dMt2kQKQ==}
     engines: {node: '>= 0.8.0'}
 
+  lie@3.3.0:
+    resolution: {integrity: sha512-UaiMJzeWRlEujzAuw5LokY1L5ecNQYZKfmyZ9L7wDHb/p5etKaxXhohBcrw0EYby+G/NA52vRSN4N39dxHAIwQ==}
+
   lightningcss-android-arm64@1.32.0:
     resolution: {integrity: sha512-YK7/ClTt4kAK0vo6w3X+Pnm0D2cf2vPHbhOXdoNti1Ga0al1P4TBZhwjATvjNwLEBCnKvjJc2jQgHXH0NEwlAg==}
     engines: {node: '>= 12.0.0'}
@@ -1750,6 +3560,17 @@ packages:
     resolution: {integrity: sha512-NXYBzinNrblfraPGyrbPoD19C1h9lfI/1mzgWYvXUTe414Gz/X1FD2XBZSZM7rRTrMA8JL3OtAaGifrIKhQ5yQ==}
     engines: {node: '>= 12.0.0'}
 
+  lilconfig@3.1.3:
+    resolution: {integrity: sha512-/vlFKAoH5Cgt3Ie+JLhRbwOsCQePABiU3tJ1egGvyQ+33R/vcwM2Zl2QR/LzjsBeItPt3oSVXapn+m4nQDvpzw==}
+    engines: {node: '>=14'}
+
+  lines-and-columns@2.0.4:
+    resolution: {integrity: sha512-wM1+Z03eypVAVUCE7QdSqpVIvelbOakn1M0bPDoA4SGWPx3sNDVUiMo3L6To6WWGClB7VyXnhQ4Sn7gxiJbE6A==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+
+  locate-app@2.5.0:
+    resolution: {integrity: sha512-xIqbzPMBYArJRmPGUZD9CzV9wOqmVtQnaAn3wrj3s6WYW0bQvPI7x+sPYUGmDTYMHefVK//zc6HEYZ1qnxIK+Q==}
+
   locate-character@3.0.0:
     resolution: {integrity: sha512-SW13ws7BjaeJ6p7Q6CO2nchbYEc3X3J6WrmTTDto7yMPqVSZTUyY5Tjbid+Ab8gLnATtygYtiDIJGQRRn2ZOiA==}
 
@@ -1757,29 +3578,158 @@ packages:
     resolution: {integrity: sha512-iPZK6eYjbxRu3uB4/WZ3EsEIMJFMqAoopl3R+zuq0UjcAm/MO6KCweDgPfP3elTztoKP3KtnVHxTn2NHBSDVUw==}
     engines: {node: '>=10'}
 
+  locate-path@7.2.0:
+    resolution: {integrity: sha512-gvVijfZvn7R+2qyPX8mAuKcFGDf6Nc61GdvGafQsHL0sBIxfKzA+usWn4GFC/bk+QdwPUD4kWFJLhElipq+0VA==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+
+  lockfile@1.0.4:
+    resolution: {integrity: sha512-cvbTwETRfsFh4nHsL1eGWapU1XFi5Ot9E85sWAwia7Y7EgB7vfqcZhTKZ+l7hCGxSPoushMv5GKhT5PdLv03WA==}
+
+  lodash.clonedeep@4.5.0:
+    resolution: {integrity: sha512-H5ZhCF25riFd9uB5UCkVKo61m3S/xZk1x4wA6yp/L3RFP6Z/eHH1ymQcGLo7J3GMPfm0V/7m1tryHuGVxpqEBQ==}
+
+  lodash.flattendeep@4.4.0:
+    resolution: {integrity: sha512-uHaJFihxmJcEX3kT4I23ABqKKalJ/zDrDg0lsFtc1h+3uw49SIJ5beyhx5ExVRti3AvKoOJngIj7xz3oylPdWQ==}
+
+  lodash.pickby@4.6.0:
+    resolution: {integrity: sha512-AZV+GsS/6ckvPOVQPXSiFFacKvKB4kOQu6ynt9wz0F3LO4R9Ij4K1ddYsIytDpSgLz88JHd9P+oaLeej5/Sl7Q==}
+
+  lodash.union@4.6.0:
+    resolution: {integrity: sha512-c4pB2CdGrGdjMKYLA+XiRDO7Y0PRQbm/Gzg8qMj+QH+pFVAoTp5sBpO0odL3FjoPCGjK96p6qsP+yQoiLoOBcw==}
+
+  lodash.zip@4.2.0:
+    resolution: {integrity: sha512-C7IOaBBK/0gMORRBd8OETNx3kmOkgIWIPvyDpZSCTwUrpYmgZwJkjZeOD8ww4xbOUOs4/attY+pciKvadNfFbg==}
+
+  log-symbols@4.1.0:
+    resolution: {integrity: sha512-8XPvpAA8uyhfteu8pIvQxpJZ7SYYdpUivZpGy6sFsBuKRY/7rQGavedeB8aK+Zkyq6upMFVL/9AW6vOYzfRyLg==}
+    engines: {node: '>=10'}
+
+  logform@2.7.0:
+    resolution: {integrity: sha512-TFYA4jnP7PVbmlBIfhlSe+WKxs9dklXMTEGcBCIvLhE/Tn3H6Gk1norupVW7m5Cnd4bLcr08AytbyV/xj7f/kQ==}
+    engines: {node: '>= 12.0.0'}
+
+  loglevel-plugin-prefix@0.8.4:
+    resolution: {integrity: sha512-WpG9CcFAOjz/FtNht+QJeGpvVl/cdR6P0z6OcXSkr8wFJOsV2GRj2j10JLfjuA4aYkcKCNIEqRGCyTife9R8/g==}
+
+  loglevel@1.9.2:
+    resolution: {integrity: sha512-HgMmCqIJSAKqo68l0rS2AanEWfkxaZ5wNiEFb5ggm08lDs9Xl2KxBlX3PTcaD2chBM1gXAYf491/M2Rv8Jwayg==}
+    engines: {node: '>= 0.6.0'}
+
+  lru-cache@10.4.3:
+    resolution: {integrity: sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==}
+
+  lru-cache@11.5.3:
+    resolution: {integrity: sha512-U4N8FgzmWxc8k1VH8Kr6lQg18U7Fjvby6wXHVRX/ZZ7IwWbRMgrRbP0Wrb5q5NVinryp4SQampHKdvtecItxUg==}
+    engines: {node: 20 || >=22}
+
+  lru-cache@7.18.3:
+    resolution: {integrity: sha512-jumlc0BIUrS3qJGgIkWZsyfAM7NCWiBcCDhnd+3NNM5KbBmLTgHVfWBcg6W+rLUsIpzpERPsvwUP7CckAQSOoA==}
+    engines: {node: '>=12'}
+
   magic-regexp@0.10.0:
     resolution: {integrity: sha512-Uly1Bu4lO1hwHUW0CQeSWuRtzCMNO00CmXtS8N6fyvB3B979GOEEeAkiTUDsmbYLAbvpUS/Kt5c4ibosAzVyVg==}
 
   magic-string@0.30.21:
     resolution: {integrity: sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==}
 
+  math-intrinsics@1.1.0:
+    resolution: {integrity: sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==}
+    engines: {node: '>= 0.4'}
+
   mdn-data@2.27.1:
     resolution: {integrity: sha512-9Yubnt3e8A0OKwxYSXyhLymGW4sCufcLG6VdiDdUGVkPhpqLxlvP5vl1983gQjJl3tqbrM731mjaZaP68AgosQ==}
 
+  media-typer@1.1.1:
+    resolution: {integrity: sha512-yz3xRaG20c6/BOzvYoDaGtPmGscs7YivItZEEqe6GbwNfHuxu9YNmvnEkMzKldAGY4/80pRcQRZSEnhquk9XuQ==}
+    engines: {node: '>= 0.8'}
+
+  merge-descriptors@2.0.0:
+    resolution: {integrity: sha512-Snk314V5ayFLhp3fkUREub6WtjBfPdCPY1Ln8/8munuLuiYhsABgBVWsozAG+MWMbVEvcdcpbi9R7ww22l9Q3g==}
+    engines: {node: '>=18'}
+
+  method-override@3.0.0:
+    resolution: {integrity: sha512-IJ2NNN/mSl9w3kzWB92rcdHpz+HjkxhDJWNDBqSlas+zQdP8wBiJzITPg08M/k2uVvMow7Sk41atndNtt/PHSA==}
+    engines: {node: '>= 0.10'}
+
+  methods@1.1.2:
+    resolution: {integrity: sha512-iclAHeNqNm68zFtnZ0e+1L2yUIdvzNoauKU4WBA3VvH/vPFieF7qfRlwUZU+DA9P9bPXIS90ulxoUoCH23sV2w==}
+    engines: {node: '>= 0.6'}
+
+  mime-db@1.52.0:
+    resolution: {integrity: sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==}
+    engines: {node: '>= 0.6'}
+
+  mime-db@1.54.0:
+    resolution: {integrity: sha512-aU5EJuIN2WDemCcAp2vFBfp/m4EAhWJnUNSSw0ixs7/kXbd6Pg64EmwJkNdFhB8aWt1sH2CTXrLxo/iAGV3oPQ==}
+    engines: {node: '>= 0.6'}
+
+  mime-types@2.1.35:
+    resolution: {integrity: sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==}
+    engines: {node: '>= 0.6'}
+
+  mime-types@3.0.2:
+    resolution: {integrity: sha512-Lbgzdk0h4juoQ9fCKXW4by0UJqj+nOOrI9MJ1sSj4nI8aI2eo1qmvQEie4VD1glsS250n15LsWsYtCugiStS5A==}
+    engines: {node: '>=18'}
+
+  mimic-fn@2.1.0:
+    resolution: {integrity: sha512-OqbOk5oEQeAZ8WXWydlu9HJjz9WVdEIvamMCcXmuqUYjTknH/sqsWvhQ3vgwKFRR1HpjvNBKQ37nbJgYzGqGcg==}
+    engines: {node: '>=6'}
+
+  minimalistic-assert@1.0.1:
+    resolution: {integrity: sha512-UtJcAD4yEaGtjPezWuO9wC4nwUnVH/8/Im3yEHQP4b67cXlD/Qr9hdITCU1xDbSEXg2XKNaP8jsReV7vQd00/A==}
+
   minimatch@10.2.4:
     resolution: {integrity: sha512-oRjTw/97aTBN0RHbYCdtF1MQfvusSIBQM0IZEgzl6426+8jSC0nF1a/GmnVLpfB9yyr6g6FTqWqiZVbxrtaCIg==}
     engines: {node: 18 || 20 || >=22}
 
+  minimatch@3.1.5:
+    resolution: {integrity: sha512-VgjWUsnnT6n+NUk6eZq77zeFdpW2LWDzP6zFGrCbHXiYNul5Dzqk2HHQ5uFH2DNW5Xbp8+jVzaeNt94ssEEl4w==}
+
+  minimatch@5.1.9:
+    resolution: {integrity: sha512-7o1wEA2RyMP7Iu7GNba9vc0RWWGACJOCZBJX2GJWip0ikV+wcOsgVuY9uE8CPiyQhkGFSlhuSkZPavN7u1c2Fw==}
+    engines: {node: '>=10'}
+
+  minimatch@9.0.9:
+    resolution: {integrity: sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==}
+    engines: {node: '>=16 || 14 >=14.17'}
+
+  minipass@7.1.3:
+    resolution: {integrity: sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A==}
+    engines: {node: '>=16 || 14 >=14.17'}
+
+  mitt@3.0.1:
+    resolution: {integrity: sha512-vKivATfr97l2/QBCYAkXYDbrIWPM2IIKEl7YPhjCvKlG3kE2gm+uBo6nEXK3M5/Ffh/FLpKExzOQ3JJoJGFKBw==}
+
   mlly@1.8.2:
     resolution: {integrity: sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA==}
 
+  mocha@10.8.2:
+    resolution: {integrity: sha512-VZlYo/WE8t1tstuRmqgeyBgCbJc/lEdopaa+axcKzTBJ+UIdlAB9XnmvTCAH4pwR4ElNInaedhEBmZD8iCSVEg==}
+    engines: {node: '>= 14.0.0'}
+    hasBin: true
+
+  modern-tar@0.7.7:
+    resolution: {integrity: sha512-t9VmxaqrmANnEOBhpSDI6HD192Ge48k8vmWqQQL7hSFEqHEYwZbbsu49+aKLWZeRvFs3j1pMhXOqqF4kPlvjkQ==}
+    engines: {node: '>=18.0.0'}
+
+  morgan@1.12.1:
+    resolution: {integrity: sha512-tljKC0ex20AjO58Ob/eZ53JloycbVswbVNCHx6V6VLGzqt/w8dIynVGL0G8qVjNKwiA7sYSogCrN6QtJ82IV+g==}
+    engines: {node: '>= 0.8.0'}
+
   mrmime@2.0.1:
     resolution: {integrity: sha512-Y3wQdFg2Va6etvQ5I82yUhGdsKrcYox6p7FfL1LbK2J4V01F9TGlepTIhnK24t7koZibmg82KGglhA1XK5IsLQ==}
     engines: {node: '>=10'}
 
+  ms@2.0.0:
+    resolution: {integrity: sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==}
+
   ms@2.1.3:
     resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==}
 
+  mute-stream@2.0.0:
+    resolution: {integrity: sha512-WWdIxpyjEn+FhQJQQv9aQAYlHoNVdzIzUySNV1gHUPDSdZJ3yZn7pAAbQcV7B56Mvu881q9FZV+0Vx2xC44VWA==}
+    engines: {node: ^18.17.0 || >=20.5.0}
+
   nanoid@3.3.18:
     resolution: {integrity: sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==}
     engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
@@ -1788,19 +3738,79 @@ packages:
   natural-compare@1.4.0:
     resolution: {integrity: sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw==}
 
+  negotiator@1.1.0:
+    resolution: {integrity: sha512-NMPBRMJgiQHjbd8phG3Vebdx4kZ1H121rbl5IkMqeOsahptB9BKo/d7oJ3zTXqTgagn2bWlNSXkh0QUGM31RYg==}
+    engines: {node: '>=18'}
+
+  netmask@2.1.1:
+    resolution: {integrity: sha512-eonl3sLUha+S1GzTPxychyhnUzKyeQkZ7jLjKrBagJgPla13F+uQ71HgpFefyHgqrjEbCPkDArxYsjY8/+gLKA==}
+    engines: {node: '>= 0.4.0'}
+
   node-fetch-native@1.6.7:
     resolution: {integrity: sha512-g9yhqoedzIUm0nTnTqAQvueMPVOuIY16bqgAJJC8XOOubYFNwz6IER9qs0Gq2Xd0+CecCKFjtdDTMA4u4xG06Q==}
 
+  normalize-package-data@6.0.2:
+    resolution: {integrity: sha512-V6gygoYb/5EmNI+MEGrWkC+e6+Rr7mTmfHrxDbLzxQogBkgzo76rkok0Am6thgSF7Mv2nLOajAJj5vDJZEFn7g==}
+    engines: {node: ^16.14.0 || >=18.0.0}
+
+  normalize-package-data@7.0.1:
+    resolution: {integrity: sha512-linxNAT6M0ebEYZOx2tO6vBEFsVgnPpv+AVjk0wJHfaUIbq31Jm3T6vvZaarnOeWDh8ShnwXuaAyM7WT3RzErA==}
+    engines: {node: ^18.17.0 || >=20.5.0}
+
+  normalize-package-data@8.0.0:
+    resolution: {integrity: sha512-RWk+PI433eESQ7ounYxIp67CYuVsS1uYSonX3kA6ps/3LWfjVQa/ptEg6Y3T6uAMq1mWpX9PQ+qx+QaHpsc7gQ==}
+    engines: {node: ^20.17.0 || >=22.9.0}
+
+  normalize-path@3.0.0:
+    resolution: {integrity: sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==}
+    engines: {node: '>=0.10.0'}
+
+  npm-run-path@6.0.0:
+    resolution: {integrity: sha512-9qny7Z9DsQU8Ou39ERsPU4OZQlSTP47ShQzuKZ6PRXpYLtIFgl/DEBYEXKlvcEa+9tHVcK8CF81Y2V72qaZhWA==}
+    engines: {node: '>=18'}
+
+  nth-check@2.1.1:
+    resolution: {integrity: sha512-lqjrjmaOoAnWfMmBPL+XNnynZh2+swxiX3WUE0s4yEHI6m+AwrK2UZOimIRl3X/4QctVqS8AiZjFqyOGrMXb/w==}
+
+  object-inspect@1.13.4:
+    resolution: {integrity: sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==}
+    engines: {node: '>= 0.4'}
+
+  obuf@1.1.2:
+    resolution: {integrity: sha512-PX1wu0AmAdPqOL1mWhqmlOd8kOIZQwGZw6rh7uby9fTc5lhaOWFLX3I6R1hrF9k3zUY40e6igsLGkDXK92LJNg==}
+
   obug@2.1.1:
     resolution: {integrity: sha512-uTqF9MuPraAQ+IsnPf366RG4cP9RtUi7MLO1N3KEc+wb0a6yKpeL0lmk2IB1jY5KHPAlTc6T/JRdC/YqxHNwkQ==}
 
   ofetch@1.5.1:
     resolution: {integrity: sha512-2W4oUZlVaqAPAil6FUg/difl6YhqhUR7x2eZY4bQCko22UXg3hptq9KLQdqFClV+Wu85UX7hNtdGTngi/1BxcA==}
 
+  on-finished@2.4.1:
+    resolution: {integrity: sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==}
+    engines: {node: '>= 0.8'}
+
+  on-headers@1.1.0:
+    resolution: {integrity: sha512-737ZY3yNnXy37FHkQxPzt4UZ2UWPWiCZWLvFZ4fu5cueciegX0zGPnrlY6bwRg4FdQOe9YU8MkmJwGhoMybl8A==}
+    engines: {node: '>= 0.8'}
+
+  once@1.4.0:
+    resolution: {integrity: sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==}
+
+  one-time@1.0.0:
+    resolution: {integrity: sha512-5DXOiRKwuSEcQ/l0kGCF6Q3jcADFv5tSmRaJck/OqkVFcOzutB134KRSfF0xDrL39MNnqxbHBbUUcjZIhTgb2g==}
+
+  onetime@5.1.2:
+    resolution: {integrity: sha512-kbpaSSGJTWdAY5KPVeMOKXSrPtr8C8C7wodJbcsd51jRnmD+GZu8Y0VoU6Dm5Z4vWr0Ig/1NKuWRKf7j5aaYSg==}
+    engines: {node: '>=6'}
+
   optionator@0.9.4:
     resolution: {integrity: sha512-6IpQ7mKUxRcZNLIObR0hz7lxsapSSIYNZJwXPGeF0mTVqGKFIXj1DQcMoT22S3ROcLyY/rz0PWaWZ9ayWmad9g==}
     engines: {node: '>= 0.8.0'}
 
+  ora@5.4.1:
+    resolution: {integrity: sha512-5b6Y85tPxZZ7QytO+BQzysW31HJku27cRIlkbAXaNx+BdcVi+LlRFmVXzeF6a7JCwJpyw5c4b+YSVImQIrBpuQ==}
+    engines: {node: '>=10'}
+
   oxc-parser@0.115.0:
     resolution: {integrity: sha512-2w7Xn3CbS/zwzSY82S5WLemrRu3CT57uF7Lx8llrE/2bul6iMTcJE4Rbls7GDNbLn3ttATI68PfOz2Pt3KZ2cQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
@@ -1814,33 +3824,110 @@ packages:
     resolution: {integrity: sha512-TYOanM3wGwNGsZN2cVTYPArw454xnXj5qmWF1bEoAc4+cU/ol7GVh7odevjp1FNHduHc3KZMcFduxU5Xc6uJRQ==}
     engines: {node: '>=10'}
 
+  p-limit@4.0.0:
+    resolution: {integrity: sha512-5b0R4txpzjPWVw/cXXUResoD4hb6U/x9BH08L7nw+GN1sezDzPdxeRvpc9c433fZhBan/wusjbCsqwqm4EIBIQ==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+
+  p-limit@7.3.3:
+    resolution: {integrity: sha512-SKgVvDU5TNIxQ4r30U75BNLC6a+6GOEjngrk/ysM5+Zu3oJuk1SC5ApzIzY/7PjCEjoVPMWJ0zho/4QUiEB7TQ==}
+    engines: {node: '>=20'}
+
   p-locate@5.0.0:
     resolution: {integrity: sha512-LaNjtRWUBY++zB5nE/NwcaoMylSPk+S+ZHNB1TzdbMJMny6dynpAGt7X/tl/QYq3TIeE6nxHppbo2LGymrG5Pw==}
     engines: {node: '>=10'}
 
+  p-locate@6.0.0:
+    resolution: {integrity: sha512-wPrq66Llhl7/4AGC6I+cqxT07LhXvWL08LNXz1fENOw0Ap4sRZZ/gZpTTJ5jpurzzzfS2W/Ge9BY3LgLjCShcw==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+
+  pac-proxy-agent@7.2.0:
+    resolution: {integrity: sha512-TEB8ESquiLMc0lV8vcd5Ql/JAKAoyzHFXaStwjkzpOpC5Yv+pIzLfHvjTSdf3vpa2bMiUQrg9i6276yn8666aA==}
+    engines: {node: '>= 14'}
+
+  pac-resolver@7.0.1:
+    resolution: {integrity: sha512-5NPgf87AT2STgwa2ntRMr45jTKrYBGkVU36yT0ig/n/GMAa3oPqhZfIQ2kMEimReg0+t9kZViDVZ83qfVUlckg==}
+    engines: {node: '>= 14'}
+
+  package-json-from-dist@1.0.1:
+    resolution: {integrity: sha512-UEZIS3/by4OC8vL3P2dTXRETpebLI2NiI5vIrjaD/5UtrkFX/tNbwjTSRAGC/+7CAo2pIcBaRgWmcBBHcsaCIw==}
+
   package-manager-detector@1.6.0:
     resolution: {integrity: sha512-61A5ThoTiDG/C8s8UMZwSorAGwMJ0ERVGj2OjoW5pAalsNOg15+iQiPzrLJ4jhZ1HJzmC2PIHT2oEiH3R5fzNA==}
 
+  pako@1.0.11:
+    resolution: {integrity: sha512-4hLB8Py4zZce5s4yd9XzopqwVv/yGNhV1Bl8NTmCq1763HeK2+EwVTv+leGeL13Dnh2wfbqowVPXCIO0z4taYw==}
+
+  parse-json@7.1.1:
+    resolution: {integrity: sha512-SgOTCX/EZXtZxBE5eJ97P4yGM5n37BwRU+YMsH4vNzFqJV/oWFXXCmwFlgWUM4PrakybVOueJJ6pwHqSVhTFDw==}
+    engines: {node: '>=16'}
+
+  parse-listing@1.1.3:
+    resolution: {integrity: sha512-a1p1i+9Qyc8pJNwdrSvW1g5TPxRH0sywVi6OzVvYHRo6xwF9bDWBxtH0KkxeOOvhUE8vAMtiSfsYQFOuK901eA==}
+    engines: {node: '>=0.6.21'}
+
+  parse-ms@4.0.0:
+    resolution: {integrity: sha512-TXfryirbmq34y8QBwgqCVLi+8oA3oWx2eAnSn62ITyEhEYaWRlVZ2DvMM9eZbMs/RfxPu/PK/aBLyGj4IrqMHw==}
+    engines: {node: '>=18'}
+
+  parse5-htmlparser2-tree-adapter@7.1.0:
+    resolution: {integrity: sha512-ruw5xyKs6lrpo9x9rCZqZZnIUntICjQAd0Wsmp396Ul9lN/h+ifgVV1x1gZHi8euej6wTfpqX8j+BFQxF0NS/g==}
+
+  parse5-parser-stream@7.1.2:
+    resolution: {integrity: sha512-JyeQc9iwFLn5TbvvqACIF/VXG6abODeB3Fwmv/TGdLk2LfbWkaySGY72at4+Ty7EkPZj854u4CrICqNk2qIbow==}
+
+  parse5@7.3.0:
+    resolution: {integrity: sha512-IInvU7fabl34qmi9gY8XOVxhYyMyuH2xUNpb2q8/Y+7552KlejkRvqvD19nMoUW/uQGGbqNpA6Tufu5FL5BZgw==}
+
+  parseurl@1.3.3:
+    resolution: {integrity: sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==}
+    engines: {node: '>= 0.8'}
+
   path-exists@4.0.0:
     resolution: {integrity: sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w==}
     engines: {node: '>=8'}
 
+  path-exists@5.0.0:
+    resolution: {integrity: sha512-RjhtfwJOxzcFmNOi6ltcbcu4Iu+FL3zEj83dk4kAS+fVpTxXLO1b38RvJgT/0QwvV/L3aY9TAnyv0EOqW4GoMQ==}
+    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
+
   path-key@3.1.1:
     resolution: {integrity: sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==}
     engines: {node: '>=8'}
 
+  path-key@4.0.0:
+    resolution: {integrity: sha512-haREypq7xkM7ErfgIyA0z+Bj4AGKlMSdlQE2jvJo6huWD1EdkKYV+G/T4nq0YEF2vgTT8kqMFKo1uHn950r4SQ==}
+    engines: {node: '>=12'}
+
   path-parse@1.0.7:
     resolution: {integrity: sha512-LDJzPVEEEPR+y48z93A0Ed0yXb8pAByGWo/k5YYdYgpY2/2EsOsksJrq7lOHxryrVOn1ejG6oAp8ahvOIQD8sw==}
 
+  path-scurry@1.11.1:
+    resolution: {integrity: sha512-Xa4Nw17FS9ApQFJ9umLiJS4orGjm7ZzwUrwamcGQuHSzDyth9boKDaycYdDcZDuqYATXw4HFXgaqWTctW/v1HA==}
+    engines: {node: '>=16 || 14 >=14.18'}
+
+  path-scurry@2.0.2:
+    resolution: {integrity: sha512-3O/iVVsJAPsOnpwWIeD+d6z/7PmqApyQePUtCndjatj/9I5LylHvt5qluFaBT3I5h3r1ejfR056c+FCv+NnNXg==}
+    engines: {node: 18 || 20 || >=22}
+
+  path-to-regexp@8.4.2:
+    resolution: {integrity: sha512-qRcuIdP69NPm4qbACK+aDogI5CBDMi1jKe0ry5rSQJz8JVLsC7jV8XpiJjGRLLol3N+R5ihGYcrPLTno6pAdBA==}
+
   pathe@2.0.3:
     resolution: {integrity: sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==}
 
+  pend@1.2.0:
+    resolution: {integrity: sha512-F3asv42UuXchdzt+xXqfW1OGlVBe+mxa2mqI0pg5yAHZPvFmY3Y6drSf/GQ1A86WgWEN9Kzh/WrgKa6iGcHXLg==}
+
   perfect-debounce@2.1.0:
     resolution: {integrity: sha512-LjgdTytVFXeUgtHZr9WYViYSM/g8MkcTPYDlPa3cDqMirHjKiSZPYd6DoL7pK8AJQr+uWkQvCjHNdiMqsrJs+g==}
 
   picocolors@1.1.1:
     resolution: {integrity: sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==}
 
+  picomatch@2.3.2:
+    resolution: {integrity: sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==}
+    engines: {node: '>=8.6'}
+
   picomatch@4.0.4:
     resolution: {integrity: sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==}
     engines: {node: '>=12'}
@@ -1848,6 +3935,14 @@ packages:
   pkg-types@1.3.1:
     resolution: {integrity: sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ==}
 
+  plist@4.0.0:
+    resolution: {integrity: sha512-4dOqNo0Y2NpfSf9q4+zr4bh7pzNWeckIam34Z0KYJhg8qtNNfh59VbD+Yna5SjwcxawVvLKx5w5FtuCijpEF4Q==}
+    engines: {node: '>=18'}
+
+  pluralize@8.0.0:
+    resolution: {integrity: sha512-Nc3IT5yHzflTfbjgqWcCPpo7DaKy4FnpB0l/zCAW0Tc7jxAiuqSxHasntB3D7887LSrA93kDJ9IXovxJYxyLCA==}
+    engines: {node: '>=4'}
+
   postcss@8.5.23:
     resolution: {integrity: sha512-g50586zr4bZmwFiTlflMu8E0bDTb5I5gertgwAKmsdUlTQIhZtunzUlD1WSzwcVWPoAVpsrA6vlfCD7oXvRwgg==}
     engines: {node: ^10 || ^12 || >=14}
@@ -1861,26 +3956,144 @@ packages:
     engines: {node: '>=14'}
     hasBin: true
 
+  pretty-format@30.5.1:
+    resolution: {integrity: sha512-byhRAPguVKMQIj4kjJwJ5lAskVhfuiSdiYl/aLTWpgkGEmic2jYhJh1yE9ih8Ox44Xg9ccCT11/S6QrzSJuNrg==}
+    engines: {node: ^18.14.0 || ^20.0.0 || ^22.0.0 || >=24.0.0}
+
+  pretty-ms@9.3.1:
+    resolution: {integrity: sha512-HzMy3Geq23nVALD/M2LliU+F+M+gVNsvkQWWqeBZ8HDiCgzo6YPJ/Omrmtq24EFrIsk0a3EkQGEd7bDOo+IhGA==}
+    engines: {node: '>=18'}
+
+  process-nextick-args@2.0.1:
+    resolution: {integrity: sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag==}
+
+  process@0.11.10:
+    resolution: {integrity: sha512-cdGef/drWFoydD1JsMzuFf8100nZl+GT+yacc2bEced5f9Rjk4z+WtFUTBu9PhOi9j/jfmBPu0mMEY4wIdAF8A==}
+    engines: {node: '>= 0.6.0'}
+
+  progress@2.0.3:
+    resolution: {integrity: sha512-7PiHtLll5LdnKIMw100I+8xJXR5gW2QwWYkT6iJva0bXitZKa/XMrSbdmg3r2Xnaidz9Qumd0VPaMrZlF9V9sA==}
+    engines: {node: '>=0.4.0'}
+
+  proxy-addr@2.0.8:
+    resolution: {integrity: sha512-5nnx0yGyVUcY6t9RnWcARWtwT9F1D8O9rt08htPvnd49W1IgZtmLkhu9WfMzQj1cFxjHIO6connUNVW5k7AVyQ==}
+    engines: {node: '>= 0.10'}
+
+  proxy-agent@6.5.0:
+    resolution: {integrity: sha512-TmatMXdr2KlRiA2CyDu8GqR8EjahTG3aY3nXjdzFyoZbmB8hrBsTyMezhULIXKnC0jpfjlmiZ3+EaCzoInSu/A==}
+    engines: {node: '>= 14'}
+
+  proxy-from-env@1.1.0:
+    resolution: {integrity: sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg==}
+
+  proxy-from-env@2.1.0:
+    resolution: {integrity: sha512-cJ+oHTW1VAEa8cJslgmUZrc+sjRKgAKl3Zyse6+PV38hZe/V6Z14TbCuXcan9F9ghlz4QrFr2c92TNF82UkYHA==}
+    engines: {node: '>=10'}
+
+  pump@3.0.4:
+    resolution: {integrity: sha512-VS7sjc6KR7e1ukRFhQSY5LM2uBWAUPiOPa/A3mkKmiMwSmRFUITt0xuj+/lesgnCv+dPIEYlkzrcyXgquIHMcA==}
+
   punycode@2.3.1:
     resolution: {integrity: sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==}
     engines: {node: '>=6'}
 
+  qs@6.16.0:
+    resolution: {integrity: sha512-h6fhOIaRrID2CbEY2fqs+7t+UXZo+MLAnU5gRIq85uFtdiUPCdsApMlHhXogKVM4HM2DVbIjGNTTYH2OcmP1vA==}
+    engines: {node: '>=0.6'}
+
   quansync@1.0.0:
     resolution: {integrity: sha512-5xZacEEufv3HSTPQuchrvV6soaiACMFnq1H8wkVioctoH3TRha9Sz66lOxRwPK/qZj7HPiSveih9yAyh98gvqA==}
 
+  query-selector-shadow-dom@1.0.1:
+    resolution: {integrity: sha512-lT5yCqEBgfoMYpf3F2xQRK7zEr1rhIIZuceDK6+xRkJQ4NMbHTwXqk4NkwDwQMNqXgG9r9fyHnzwNVs6zV5KRw==}
+
+  range-parser@1.3.0:
+    resolution: {integrity: sha512-hek2mFQpPuI4E1BBKrSto+BU3e3x4xuarsbiwr3+lf7p44juvFMV0XFWQAP3xUyqXA4RrXLIoaSUGbSt056ZMw==}
+    engines: {node: '>= 0.6'}
+
+  raw-body@3.0.2:
+    resolution: {integrity: sha512-K5zQjDllxWkf7Z5xJdV0/B0WTNqx6vxG70zJE4N0kBs4LovmEYWJzQGxC9bS9RAKu3bgM40lrd5zoLJ12MQ5BA==}
+    engines: {node: '>= 0.10'}
+
+  react-is@18.3.1:
+    resolution: {integrity: sha512-/LLMVyas0ljjAtoYiPqYiL8VWXzUUdThrmU5+n20DZv+a+ClRoevUzw5JxU+Ieh5/c87ytoTBV9G1FiKfNJdmg==}
+
+  react-is@19.3.0:
+    resolution: {integrity: sha512-UpMYezM4v5/18F28aC66AEsjXIgE02kyEMH6yLdgLXu/UTfa1Ntwck/nNLrbqJsEXW7gPb0coNO9FQse9WTovA==}
+
+  read-pkg-up@10.1.0:
+    resolution: {integrity: sha512-aNtBq4jR8NawpKJQldrQcSW9y/d+KWH4v24HWkHljOZ7H0av+YTGANBzRh9A5pw7v/bLVsLVPpOhJ7gHNVy8lA==}
+    engines: {node: '>=16'}
+
+  read-pkg@8.1.0:
+    resolution: {integrity: sha512-PORM8AgzXeskHO/WEv312k9U03B8K9JSiWF/8N9sUuFjBa+9SF2u6K7VClzXwDXab51jCd8Nd36CNM+zR97ScQ==}
+    engines: {node: '>=16'}
+
+  readable-stream@1.1.14:
+    resolution: {integrity: sha512-+MeVjFf4L44XUkhM1eYbD8fyEsxcV81pqMSR5gblfcLCHfZvbrqy4/qYHE+/R5HoBUT11WV5O08Cr1n3YXkWVQ==}
+
+  readable-stream@2.3.8:
+    resolution: {integrity: sha512-8p0AUk4XODgIewSi0l8Epjs+EVnWiK7NoDIEGU0HhE7+ZyY8D1IMY7odu5lRrFXGg71L15KG8QrPmum45RTtdA==}
+
+  readable-stream@3.6.2:
+    resolution: {integrity: sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==}
+    engines: {node: '>= 6'}
+
+  readable-stream@4.7.0:
+    resolution: {integrity: sha512-oIGGmcpTLwPga8Bn6/Z75SVaH1z5dUut2ibSyAMVhmUggWpmDn2dapB0n7f8nwaSiRtepAsfJyfXIO5DCVAODg==}
+    engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
+
+  readdir-glob@3.0.0:
+    resolution: {integrity: sha512-AhNB2KgKeVJr16nK9LLZbJNWnYoT23ZrumNKFDebHBdkC8KHSqWo871JAUhoWC/RtjEVdqNMFpM6qrwRbaUqpw==}
+    engines: {node: '>=18'}
+
+  readdirp@3.6.0:
+    resolution: {integrity: sha512-hOS089on8RduqdbhvQ5Z37A0ESjsqz6qnRcffsMU3495FuTdqSm+7bhJ29JvIOsBDEEnan5DPu9t3To9VRlMzA==}
+    engines: {node: '>=8.10.0'}
+
+  readdirp@4.1.2:
+    resolution: {integrity: sha512-GDhwkLfywWL2s6vEjyhri+eXmfH6j1L7JE27WhqLeYzoh/A3DBaYGEj2H/HFZCn/kMfim73FXxEJTw06WtxQwg==}
+    engines: {node: '>= 14.18.0'}
+
   readdirp@5.0.0:
     resolution: {integrity: sha512-9u/XQ1pvrQtYyMpZe7DXKv2p5CNvyVwzUB6uhLAnQwHMSgKMBR62lc7AHljaeteeHXn11XTAaLLUVZYVZyuRBQ==}
     engines: {node: '>= 20.19.0'}
 
+  recursive-readdir@2.2.3:
+    resolution: {integrity: sha512-8HrF5ZsXk5FAH9dgsx3BlUer73nIhuj+9OrQwEbLTPOBzGkL1lsFCR01am+v+0m2Cmbs1nP12hLDl5FA7EszKA==}
+    engines: {node: '>=6.0.0'}
+
   regexp-tree@0.1.27:
     resolution: {integrity: sha512-iETxpjK6YoRWJG5o6hXLwvjYAoW+FEZn9os0PD/b6AP6xQwsa/Y7lCVgIixBbUPMfhu+i2LtdeAqVTgGlQarfA==}
     hasBin: true
 
+  require-directory@2.1.1:
+    resolution: {integrity: sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q==}
+    engines: {node: '>=0.10.0'}
+
+  require-from-string@2.0.2:
+    resolution: {integrity: sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==}
+    engines: {node: '>=0.10.0'}
+
   resolve@1.22.11:
     resolution: {integrity: sha512-RfqAvLnMl313r7c9oclB1HhUEAezcpLjz95wFH4LVuhk9JF/r22qmVP9AMmOU4vMX7Q8pN8jwNg/CSpdFnMjTQ==}
     engines: {node: '>= 0.4'}
     hasBin: true
 
+  resq@1.11.0:
+    resolution: {integrity: sha512-G10EBz+zAAy3zUd/CDoBbXRL6ia9kOo3xRHrMDsHljI0GDkhYlyjwoCx5+3eCC4swi1uCoZQhskuJkj7Gp57Bw==}
+
+  restore-cursor@3.1.0:
+    resolution: {integrity: sha512-l+sSefzHpj5qimhFSE5a8nufZYAM3sBSVMAPtYkmC+4EH2anSGaEMXSD0izRQbu9nfyQ9y5JrVmp7E8oZrUjvA==}
+    engines: {node: '>=8'}
+
+  ret@0.5.0:
+    resolution: {integrity: sha512-I1XxrZSQ+oErkRR4jYbAyEEu2I0avBvvMM5JN+6EBprOGRCs63ENqZ3vjavq8fBw2+62G5LF5XelKwuJpcvcxw==}
+    engines: {node: '>=10'}
+
+  rgb2hex@0.2.5:
+    resolution: {integrity: sha512-22MOP1Rh7sAo1BZpDG6R5RFYzR2lYEgwq7HEmyW2qcsOqR2lQKmn+O//xV3YG/0rrhMC6KVX2hU+ZXuaw9a5bw==}
+
   rolldown@1.0.3:
     resolution: {integrity: sha512-i00lAJ2ks1BYr7rjNjKC7BcqAS7nVfiT3QX1SI5aY+AFHblCmaUf9OE9dbdzDvW6dJxbi2ZCZiy9v3CcwOiX3g==}
     engines: {node: ^20.19.0 || >=22.12.0}
@@ -1891,18 +4104,92 @@ packages:
     engines: {node: '>=18.0.0', npm: '>=8.0.0'}
     hasBin: true
 
+  router@2.2.0:
+    resolution: {integrity: sha512-nLTrUKm2UyiL7rlhapu/Zl45FwNgkZGaCpZbIHajDYgwlJCOzLSk+cIPAnsEqV955GjILJnKbdQC1nVPz+gAYQ==}
+    engines: {node: '>= 18'}
+
+  run-async@4.0.6:
+    resolution: {integrity: sha512-IoDlSLTs3Yq593mb3ZoKWKXMNu3UpObxhgA/Xuid5p4bbfi2jdY1Hj0m1K+0/tEuQTxIGMhQDqGjKb7RuxGpAQ==}
+    engines: {node: '>=0.12.0'}
+
+  rxjs@7.8.2:
+    resolution: {integrity: sha512-dhKf903U/PQZY6boNNtAGdWbG85WAbjT/1xYoZIC7FAY0yWapOBQVsVrDl58W86//e1VpMNBtRV4MaXfdMySFA==}
+
+  safaridriver@1.0.1:
+    resolution: {integrity: sha512-jkg4434cYgtrIF2AeY/X0Wmd2W73cK5qIEFE3hDrrQenJH/2SDJIXGvPAigfvQTcE9+H31zkiNHbUqcihEiMRA==}
+    engines: {node: '>=18.0.0'}
+
+  safe-buffer@5.1.2:
+    resolution: {integrity: sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g==}
+
+  safe-buffer@5.2.1:
+    resolution: {integrity: sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==}
+
+  safe-regex2@5.1.1:
+    resolution: {integrity: sha512-mOSBvHGDZMuIEZMdOz/aCEYDCv0E7nfcNsIhUF+/P+xC7Hyf3FkvymqgPbg9D1EdSGu+uKbJgy09K/RKKc7kJA==}
+    hasBin: true
+
   safe-regex@2.1.1:
     resolution: {integrity: sha512-rx+x8AMzKb5Q5lQ95Zoi6ZbJqwCLkqi3XuJXp5P3rT8OEc6sZCJG5AE5dU3lsgRr/F4Bs31jSlVN+j5KrsGu9A==}
 
+  safe-stable-stringify@2.5.0:
+    resolution: {integrity: sha512-b3rppTKm9T+PsVCBEOUR46GWI7fdOs00VKZ1+9c1EWDaDMvjQc6tUwuFyIprgGgTcWoVHSKrU8H31ZHA2e0RHA==}
+    engines: {node: '>=10'}
+
+  safer-buffer@2.1.2:
+    resolution: {integrity: sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==}
+
+  sanitize-filename@1.6.4:
+    resolution: {integrity: sha512-9ZyI08PsvdQl2r/bBIGubpVdR3RR9sY6RDiWFPreA21C/EFlQhmgo20UZlNjZMMZNubusLhAQozkA0Od5J21Eg==}
+
+  select-hose@2.0.0:
+    resolution: {integrity: sha512-mEugaLK+YfkijB4fx0e6kImuJdCIt2LxCRcbEYPqRGCs4F2ogyfZU5IAZRdjCP8JPq2AtdNoC/Dux63d9Kiryg==}
+
   semver@7.7.4:
     resolution: {integrity: sha512-vFKC2IEtQnVhpT78h1Yp8wzwrf8CM+MzKMHGJZfBtzhZNycRFnXsHk6E5TxIkkMsgNS7mdX3AGB7x2QM2di4lA==}
     engines: {node: '>=10'}
     hasBin: true
 
+  semver@7.8.5:
+    resolution: {integrity: sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==}
+    engines: {node: '>=10'}
+    hasBin: true
+
+  send@1.2.1:
+    resolution: {integrity: sha512-1gnZf7DFcoIcajTjTwjwuDjzuz4PPcY2StKPlsGAQ1+YH20IRVrBaXSWmdjowTJ6u8Rc01PoYOGHXfP1mYcZNQ==}
+    engines: {node: '>= 18'}
+
+  serialize-error@12.0.0:
+    resolution: {integrity: sha512-ZYkZLAvKTKQXWuh5XpBw7CdbSzagarX39WyZ2H07CDLC5/KfsRGlIXV8d4+tfqX1M7916mRqR1QfNHSij+c9Pw==}
+    engines: {node: '>=18'}
+
   serialize-javascript@7.0.5:
     resolution: {integrity: sha512-F4LcB0UqUl1zErq+1nYEEzSHJnIwb3AF2XWB94b+afhrekOUijwooAYqFyRbjYkm2PAKBabx6oYv/xDxNi8IBw==}
     engines: {node: '>=20.0.0'}
 
+  serve-favicon@2.5.1:
+    resolution: {integrity: sha512-JndLBslCLA/ebr7rS3d+/EKkzTsTi1jI2T9l+vHfAaGJ7A7NhtDpSZ0lx81HCNWnnE0yHncG+SSnVf9IMxOwXQ==}
+    engines: {node: '>= 0.8.0'}
+
+  serve-static@2.2.1:
+    resolution: {integrity: sha512-xRXBn0pPqQTVQiC8wyQrKs2MOlX24zQ0POGaj0kultvoOCstBQM5yvOhAVSUwOMjQtTvsPWoNCHfPGwaaQJhTw==}
+    engines: {node: '>= 18'}
+
+  setimmediate@1.0.5:
+    resolution: {integrity: sha512-MATJdZp8sLqDl/68LfQmbP8zKPLQNV6BIZoIgrscFDQ+RsvK/BxeDQOgyxKKoh0y/8h3BqVFnCqQ/gd+reiIXA==}
+
+  setprototypeof@1.2.0:
+    resolution: {integrity: sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==}
+
+  sharp@0.35.4:
+    resolution: {integrity: sha512-n++8XWcj+jCOr2IOl7h8LbKnGBDY4aPbmprMONBNFdn0ImXqpGVv5zliDs0V9HbmbCQLpbuo2ej9rAoOQTvMDA==}
+    engines: {node: '>=20.9.0'}
+    peerDependencies:
+      '@types/node': '*'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
   shebang-command@2.0.0:
     resolution: {integrity: sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==}
     engines: {node: '>=8'}
@@ -1911,14 +4198,57 @@ packages:
     resolution: {integrity: sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==}
     engines: {node: '>=8'}
 
+  shell-quote@1.10.0:
+    resolution: {integrity: sha512-w1aiOKwKuRgtwAReIIj89puqg+I7GvX4IbLrvmhXbzQsj1+Zwi4VO3+fa6ZF91TWSjIxoEkKnMeHcLEODK5ZXA==}
+    engines: {node: '>= 0.4'}
+
+  side-channel-list@1.0.1:
+    resolution: {integrity: sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==}
+    engines: {node: '>= 0.4'}
+
+  side-channel-map@1.0.1:
+    resolution: {integrity: sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==}
+    engines: {node: '>= 0.4'}
+
+  side-channel-weakmap@1.0.2:
+    resolution: {integrity: sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==}
+    engines: {node: '>= 0.4'}
+
+  side-channel@1.1.1:
+    resolution: {integrity: sha512-6x6dK6zJdpTzF4sQeNYxwtvBzf6Eg4GtlesS94HOvTudUeyK2WXAaIfmDgsyslYrRBeFIlsi54AYsFGUuhmvrQ==}
+    engines: {node: '>= 0.4'}
+
+  signal-exit@3.0.7:
+    resolution: {integrity: sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==}
+
+  signal-exit@4.1.0:
+    resolution: {integrity: sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw==}
+    engines: {node: '>=14'}
+
   sirv@3.0.2:
     resolution: {integrity: sha512-2wcC/oGxHis/BoHkkPwldgiPSYcpZK3JU28WoMVv55yHJgcZ8rlXvuG9iZggz+sU1d4bRgIGASwyWqjxu3FM0g==}
     engines: {node: '>=18'}
 
+  slash@3.0.0:
+    resolution: {integrity: sha512-g9Q1haeby36OSStwb4ntCGGGaKsaVSjQ68fBxoQcutl5fS1vuY18H3wSt3jFyFtrkx+Kz0V1G85A4MyAdDMi2Q==}
+    engines: {node: '>=8'}
+
+  smart-buffer@4.2.0:
+    resolution: {integrity: sha512-94hK0Hh8rPqQl2xXc3HsaBoOXKV20MToPkcXvwbISWLEs+64sBq5kFgn2kJDHb1Pry9yrP0dxrCI9RRci7RXKg==}
+    engines: {node: '>= 6.0.0', npm: '>= 3.0.0'}
+
   smob@1.6.1:
     resolution: {integrity: sha512-KAkBqZl3c2GvNgNhcoyJae1aKldDW0LO279wF9bk1PnluRTETKBq0WyzRXxEhoQLk56yHaOY4JCBEKDuJIET5g==}
     engines: {node: '>=20.0.0'}
 
+  socks-proxy-agent@8.0.5:
+    resolution: {integrity: sha512-HehCEsotFqbPW9sJ8WVYB6UbmIMv7kUUORIF2Nncq4VQvBfNBLibW9YZR5dlYCSUhwcD628pRllm7n+E+YTzJw==}
+    engines: {node: '>= 14'}
+
+  socks@2.8.10:
+    resolution: {integrity: sha512-e0VyvkVTwVYViNovRkZ9aodhxVlyoMn7eJhVUPxZ+eK9P/7CBkxvvsBOHqFPEH416726W8tLXXXjKwqgTErrCQ==}
+    engines: {node: '>= 10.0.0', npm: '>= 3.0.0'}
+
   source-map-js@1.2.1:
     resolution: {integrity: sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==}
     engines: {node: '>=0.10.0'}
@@ -1930,6 +4260,102 @@ packages:
     resolution: {integrity: sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==}
     engines: {node: '>=0.10.0'}
 
+  spacetrim@0.11.59:
+    resolution: {integrity: sha512-lLYsktklSRKprreOm7NXReW8YiX2VBjbgmXYEziOoGf/qsJqAEACaDvoTtUOycwjpaSh+bT8eu0KrJn7UNxiCg==}
+
+  spdx-correct@3.2.0:
+    resolution: {integrity: sha512-kN9dJbvnySHULIluDHy32WHRUu3Og7B9sbY7tsFLctQkIqnMh3hErYgdMjTYuqmcXX+lK5T1lnUt3G7zNswmZA==}
+
+  spdx-exceptions@2.5.0:
+    resolution: {integrity: sha512-PiU42r+xO4UbUS1buo3LPJkjlO7430Xn5SVAhdpzzsPHsjbYVflnnFdATgabnLude+Cqu25p6N+g2lw/PFsa4w==}
+
+  spdx-expression-parse@3.0.1:
+    resolution: {integrity: sha512-cbqHunsQWnJNE6KhVSMsMeH5H/L9EpymbzqTQ3uLwNCLZ1Q481oWaofqH7nO6V07xlXwY6PhQdQ2IedWx/ZK4Q==}
+
+  spdx-license-ids@3.0.24:
+    resolution: {integrity: sha512-cLS9TtWkIQFyLkJ3/5aFQAOHOSKTlOs/7WDut/XPSdjom1fJhUdkepeJAKXa9Y05+FabHd0sti+Et559vDtkpQ==}
+
+  spdy-transport@3.0.0:
+    resolution: {integrity: sha512-hsLVFE5SjA6TCisWeJXFKniGGOpBgMLmerfO2aCyCU5s7nJ/rpAepqmFifv/GCbSbueEeAJJnmSQ2rKC/g8Fcw==}
+
+  spdy@4.0.2:
+    resolution: {integrity: sha512-r46gZQZQV+Kl9oItvl1JZZqJKGr+oEkB08A6BzkiR7593/7IbtuncXHd2YoYeTsG4157ZssMu9KYvUHLcjcDoA==}
+    engines: {node: '>=6.0.0'}
+
+  split2@4.2.0:
+    resolution: {integrity: sha512-UcjcJOWknrNkF6PLX83qcHM6KHgVKNkV62Y8a5uYDVv9ydGQVwAHMKqHdJje1VTWpljG0WYpCDhrCdAOYH4TWg==}
+    engines: {node: '>= 10.x'}
+
+  stack-trace@0.0.10:
+    resolution: {integrity: sha512-KGzahc7puUKkzyMt+IqAep+TVNbKP+k2Lmwhub39m1AsTSkaDutx56aDCo+HLDzf/D26BIHTJWNiTG1KAJiQCg==}
+
+  stack-utils@2.0.6:
+    resolution: {integrity: sha512-XlkWvfIm6RmsWtNJx+uqtKLS8eqFbxUg0ZzLXqY0caEy9l7hruX8IpiDnjsLavoBgqCCR71TqWO8MaXYheJ3RQ==}
+    engines: {node: '>=10'}
+
+  statuses@2.0.2:
+    resolution: {integrity: sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==}
+    engines: {node: '>= 0.8'}
+
+  stream-buffers@3.0.3:
+    resolution: {integrity: sha512-pqMqwQCso0PBJt2PQmDO0cFj0lyqmiwOMiMSkVtRokl7e+ZTRYgDHKnuZNbqjiJXgsg4nuqtD/zxuo9KqTp0Yw==}
+    engines: {node: '>= 0.10.0'}
+
+  stream-combiner@0.2.2:
+    resolution: {integrity: sha512-6yHMqgLYDzQDcAkL+tjJDC5nSNuNIx0vZtRZeiPh7Saef7VHX9H5Ijn9l2VIol2zaNYlYEX6KyuT/237A58qEQ==}
+
+  streamx@2.28.1:
+    resolution: {integrity: sha512-zEzXb0s5Cds7tqMH6rhZ05lcJydCWiQPEwiNngVqzsxCc962vLY4Uw+mW7od8kDH258k2Uz/JrOkdIAAhSh9VA==}
+
+  string-width@4.2.3:
+    resolution: {integrity: sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==}
+    engines: {node: '>=8'}
+
+  string-width@5.1.2:
+    resolution: {integrity: sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==}
+    engines: {node: '>=12'}
+
+  string-width@7.2.0:
+    resolution: {integrity: sha512-tsaTIkKW9b4N+AEj+SVA+WhJzV7/zMhcSu78mLKWSk7cXMOSHsBKFWUs0fWwq8QyK3MgJBQRX6Gbi4kYbdvGkQ==}
+    engines: {node: '>=18'}
+
+  string-width@8.3.0:
+    resolution: {integrity: sha512-ZbmZM0JCihQN91dWnxoipT2KOEyHqEyfRXUyjuRhW8b/xnqPDoq4gWEVApTVa9db2wN8mmoikgFBbjh71+cGeQ==}
+    engines: {node: '>=20'}
+
+  string_decoder@0.10.31:
+    resolution: {integrity: sha512-ev2QzSzWPYmy9GuqfIVildA4OdcGLeFZQrq5ys6RtiuF+RQQiZWr8TZNyAcuVXyQRYfEO+MsoB/1BuQVhOJuoQ==}
+
+  string_decoder@1.1.1:
+    resolution: {integrity: sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg==}
+
+  string_decoder@1.3.0:
+    resolution: {integrity: sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==}
+
+  strip-ansi@6.0.1:
+    resolution: {integrity: sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==}
+    engines: {node: '>=8'}
+
+  strip-ansi@7.2.0:
+    resolution: {integrity: sha512-yDPMNjp4WyfYBkHnjIRLfca1i6KMyGCtsVgoKe/z1+6vukgaENdgGBZt+ZmKPc4gavvEZ5OgHfHdrazhgNyG7w==}
+    engines: {node: '>=12'}
+
+  strip-final-newline@4.0.0:
+    resolution: {integrity: sha512-aulFJcD6YK8V1G7iRB5tigAP4TsHBZZrOV8pjV++zdUwmeV8uzbY7yn6h9MswN62adStNZFuCIx4haBnRuMDaw==}
+    engines: {node: '>=18'}
+
+  strip-json-comments@3.1.1:
+    resolution: {integrity: sha512-6fPc+R4ihwqP6N/aIv2f1gMH8lOVtWQHoqC4yK6oSDVVocumAsfCqjkXnqiYMhmMwS/mEHLp7Vehlt3ql6lEig==}
+    engines: {node: '>=8'}
+
+  supports-color@7.2.0:
+    resolution: {integrity: sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==}
+    engines: {node: '>=8'}
+
+  supports-color@8.1.1:
+    resolution: {integrity: sha512-MpUEN2OodtUzxvKQl72cUF7RQ5EiHsGvSsVG0ia9c5RbWGL2CI4C7EpPS8UTBIplnlzZiNuV56w+FuNxy3ty2Q==}
+    engines: {node: '>=10'}
+
   supports-preserve-symlinks-flag@1.0.0:
     resolution: {integrity: sha512-ot0WnXS9fgdkgIcePe6RHNk1WA8+muPa6cSjeR3V8K27q9BB1rTE3R1p7Hv0z1ZyAc8s6Vvv8DIyWf681MAt0w==}
     engines: {node: '>= 0.4'}
@@ -1938,11 +4364,37 @@ packages:
     resolution: {integrity: sha512-ymI5ykLPwIHW839E053FQbI1G+jnRFJEw3Kv5Y4njixVWywQBx+NUFpkkKyk5LIb36Fg9DVXSYpqiGekLD0hyw==}
     engines: {node: '>=18'}
 
+  tagged-tag@1.0.0:
+    resolution: {integrity: sha512-yEFYrVhod+hdNyx7g5Bnkkb0G6si8HJurOoOEgC8B/O0uXLHlaey/65KRv6cuWBNhBgHKAROVpc7QyYqE5gFng==}
+    engines: {node: '>=20'}
+
+  tar-fs@3.1.3:
+    resolution: {integrity: sha512-/hU4AXnIdZu+Gvl1pk0oI5f5HxWsCJRtY2aFaJdk9VvyL48DWU6iU5WAIPG+wIi1YvWA6eTJvIviP/tMAZZNwQ==}
+
+  tar-stream@3.2.1:
+    resolution: {integrity: sha512-nqsEO8zLZJvrOMdEwkA0QdCLFbetHMn95Zqu4fKwX+hkaTWJPZZOrxx/PwtxoK0MMGQmBQNRW3CPs8IFYQz4cQ==}
+
+  teen_process@4.2.1:
+    resolution: {integrity: sha512-jtLcBR01HF2z2FGhfvuMpbr+y8wnVQumrh947dLz5Iodv2iZGIJg79TVYK9oznXb5gkQznxdwgonxGQLhmWeWg==}
+    engines: {node: ^20.19.0 || ^22.12.0 || >=24.0.0, npm: '>=10'}
+
+  teex@1.0.1:
+    resolution: {integrity: sha512-eYE6iEI62Ni1H8oIa7KlDU6uQBtqr4Eajni3wX7rpfXD8ysFx8z0+dri+KWEPWpBsxXfxu58x/0jvTVT1ekOSg==}
+
   terser@5.46.1:
     resolution: {integrity: sha512-vzCjQO/rgUuK9sf8VJZvjqiqiHFaZLnOiimmUuOKODxWL8mm/xua7viT7aqX7dgPY60otQjUotzFMmCB4VdmqQ==}
     engines: {node: '>=10'}
     hasBin: true
 
+  text-decoder@1.2.7:
+    resolution: {integrity: sha512-vlLytXkeP4xvEq2otHeJfSQIRyWxo/oZGEbXrtEEF9Hnmrdly59sUbzZ/QgyWuLYHctCHxFF4tRQZNQ9k60ExQ==}
+
+  text-hex@1.0.0:
+    resolution: {integrity: sha512-uuVGNWzgJ4yhRaNSiubPY7OjISw4sw4E5Uv0wbjp+OzcbmVU/rsT8ujgcXJhn9ypzsgr5vlzpPqP+MBBKcGvbg==}
+
+  through@2.3.8:
+    resolution: {integrity: sha512-w89qg7PI8wAdvX60bMDP+bFoD5Dvhm9oLheFp5O4a2QF0cSBGsBX4qZmadPMvVqlLJBBci+WqGGOAPvcDeNSVg==}
+
   tinyexec@1.0.4:
     resolution: {integrity: sha512-u9r3uZC0bdpGOXtlxUIdwf9pkmvhqJdrVCH9fapQtgy/OeTTMZ1nqH7agtvEfmGui6e1XxjcdrlxvxJvc3sMqw==}
     engines: {node: '>=18'}
@@ -1951,10 +4403,37 @@ packages:
     resolution: {integrity: sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==}
     engines: {node: '>=12.0.0'}
 
+  tinyrainbow@2.0.0:
+    resolution: {integrity: sha512-op4nsTR47R6p0vMUUoYl/a+ljLFVtlfaXkLQmqfLR1qHma1h/ysYk4hEXZ880bf2CYgTskvTa/e196Vd5dDQXw==}
+    engines: {node: '>=14.0.0'}
+
+  tinyrainbow@3.1.1:
+    resolution: {integrity: sha512-yau8yJdTt989Mm0Bd/236QnzEiPf2xLLTqUZRUJOo/3CB078LSwzei343DgtJVmfJKJE3TMINY1u42SQsP6mXw==}
+    engines: {node: '>=14.0.0'}
+
+  to-regex-range@5.0.1:
+    resolution: {integrity: sha512-65P7iz6X5yEr1cwcgvQxbbIw7Uk3gOy5dIdtZ4rDveLqhrdJP+Li/Hx6tyK0NEb+2GCyneCMJiGqrADCSNk8sQ==}
+    engines: {node: '>=8.0'}
+
+  toidentifier@1.0.1:
+    resolution: {integrity: sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==}
+    engines: {node: '>=0.6'}
+
   totalist@3.0.1:
     resolution: {integrity: sha512-sf4i37nQ2LBx4m3wB74y+ubopq6W/dIzXg0FDGjsYnZHVa1Da8FH853wlL2gtUhg+xJXjfk3kUZS3BRoQeoQBQ==}
     engines: {node: '>=6'}
 
+  tree-kill@1.2.2:
+    resolution: {integrity: sha512-L0Orpi8qGpRG//Nd+H90vFB+3iHnue1zSSGmNOOCh1GLJ7rUKVwV2HvijphGQS2UmhUZewS9VgvxYIdgr+fG1A==}
+    hasBin: true
+
+  triple-beam@1.4.1:
+    resolution: {integrity: sha512-aZbgViZrg1QNcG+LULa7nhZpJTZSLm/mXnHXnbAbjmN5aSa0y7V+wvv6+4WaBtpISJzThKy+PIPxc1Nq1EJ9mg==}
+    engines: {node: '>= 14.0.0'}
+
+  truncate-utf8-bytes@1.0.2:
+    resolution: {integrity: sha512-95Pu1QXQvruGEhv62XCMO3Mm90GscOCClvrIUwCM0PYOXK3kaF3l3sIHxx71ThJfcbM2O5Au6SO3AWCSEfW4mQ==}
+
   ts-api-utils@2.5.0:
     resolution: {integrity: sha512-OJ/ibxhPlqrMM0UiNHJ/0CKQkoKF243/AEmplt3qpRgkW8VG7IfOS41h7V8TjITqdByHzrjcS/2si+y4lIh8NA==}
     engines: {node: '>=18.12'}
@@ -1973,6 +4452,26 @@ packages:
     resolution: {integrity: sha512-XleUoc9uwGXqjWwXaUTZAmzMcFZ5858QA2vvx1Ur5xIcixXIP+8LnFDgRplU30us6teqdlskFfu+ae4K79Ooew==}
     engines: {node: '>= 0.8.0'}
 
+  type-fest@3.13.1:
+    resolution: {integrity: sha512-tLq3bSNx+xSpwvAJnzrK0Ep5CLNWjvFTOp71URMaAEWBfRb9nnJiBoUe0tF8bI4ZFO3omgBR6NvnbzVUT3Ly4g==}
+    engines: {node: '>=14.16'}
+
+  type-fest@4.26.0:
+    resolution: {integrity: sha512-OduNjVJsFbifKb57UqZ2EMP1i4u64Xwow3NYXUtBbD4vIwJdQd4+xl8YDou1dlm4DVrtwT/7Ky8z8WyCULVfxw==}
+    engines: {node: '>=16'}
+
+  type-fest@4.41.0:
+    resolution: {integrity: sha512-TeTSQ6H5YHvpqVwBRcnLDCBnDOHWYu7IvGbHT6N8AOymcr9PJGjc1GTtiWZTYg0NCgYwvnYWEkVChQAr9bjfwA==}
+    engines: {node: '>=16'}
+
+  type-fest@5.10.0:
+    resolution: {integrity: sha512-NoSdpq/WEiAg5sjmBkmV/hfxv6HJH4NqPNrqjtSO5CwRmpsDfaf4begxW34KdJykH/l1yHtwBWQkCRdoXO8mPA==}
+    engines: {node: '>=20'}
+
+  type-is@2.1.0:
+    resolution: {integrity: sha512-faYHw0anBbc/kWF3zFTEnxSFOAGUX9GFbOBthvDdLsIlEoWOFOtS0zgCiQYwIskL9iGXZL3kAXD8OoZ4GmMATA==}
+    engines: {node: '>= 18'}
+
   type-level-regexp@0.1.17:
     resolution: {integrity: sha512-wTk4DH3cxwk196uGLK/E9pE45aLfeKJacKmcEgEOA/q5dnPGNxXt0cfYdFxb57L+sEpf1oJH4Dnx/pnRcku9jg==}
 
@@ -1997,6 +4496,21 @@ packages:
   unconfig@7.5.0:
     resolution: {integrity: sha512-oi8Qy2JV4D3UQ0PsopR28CzdQ3S/5A1zwsUwp/rosSbfhJ5z7b90bIyTwi/F7hCLD4SGcZVjDzd4XoUQcEanvA==}
 
+  undici-types@6.21.0:
+    resolution: {integrity: sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==}
+
+  undici@6.29.0:
+    resolution: {integrity: sha512-R+RODBqp6i2pPflGdq+xIOUkl+RNfGgHwoinecKu/JCuf2uO06cOKoDbI2P7Dn6KcswdKwrczbU6IYJ6K8X+wg==}
+    engines: {node: '>=18.17'}
+
+  undici@7.30.0:
+    resolution: {integrity: sha512-dkrQXeHSaoamnItlYbmzG0wFYrM0ZwDxCIg0A7aKjTyyhh9svRzCNFEzV+Vm05/yehjCzjDZ31KXfGEjYSztDQ==}
+    engines: {node: '>=20.18.1'}
+
+  unicorn-magic@0.3.0:
+    resolution: {integrity: sha512-+QBBXBCvifc56fsbuxZQ6Sic3wqqc3WWaqxs58gvJrcOuN83HGTCwz3oS5phzU9LthRNE9VrJCFCLUgHeeFnfA==}
+    engines: {node: '>=18'}
+
   unocss@66.6.7:
     resolution: {integrity: sha512-TdZ/JnKhrqkknrMvLl0KOwrGzFThEspFIyYiylFYJki2JkMN/5EJIr+vIZEGRX69hFTjTLi6utIpbipueqzNbw==}
     engines: {node: '>=14'}
@@ -2012,6 +4526,14 @@ packages:
       '@unocss/webpack':
         optional: true
 
+  unorm@1.6.0:
+    resolution: {integrity: sha512-b2/KCUlYZUeA7JFUuRJZPUtr4gZvBh7tavtv4fvk4+KV9pfGiR6CQAQAWl49ZpR3ts2dk4FYkP7EIgDJoiOLDA==}
+    engines: {node: '>= 0.4.0'}
+
+  unpipe@1.0.0:
+    resolution: {integrity: sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==}
+    engines: {node: '>= 0.8'}
+
   unplugin-utils@0.3.1:
     resolution: {integrity: sha512-5lWVjgi6vuHhJ526bI4nlCOmkCIF3nnfXkCMDeMJrtdvxTs6ZFCM8oNufGTsDbKv/tJ/xj8RpvXjRuPBZJuJog==}
     engines: {node: '>=20.19.0'}
@@ -2023,6 +4545,30 @@ packages:
   uri-js@4.4.1:
     resolution: {integrity: sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg==}
 
+  urlpattern-polyfill@10.1.0:
+    resolution: {integrity: sha512-IGjKp/o0NL3Bso1PymYURCJxMPNAf/ILOpendP9f5B6e1rTJgdgiOvgfoT8VxCAdY+Wisb9uhGaJJf3yZ2V9nw==}
+
+  userhome@1.0.1:
+    resolution: {integrity: sha512-5cnLm4gseXjAclKowC4IjByaGsjtAoV6PrOQOljplNB54ReUYJP8HdAFq2muHinSDAh09PPX/uXDPfdxRHvuSA==}
+    engines: {node: '>= 0.8.0'}
+
+  utf8-byte-length@1.0.5:
+    resolution: {integrity: sha512-Xn0w3MtiQ6zoz2vFyUVruaCL53O/DwUvkEeOvj+uulMm0BkUGYWmBYVyElqZaSLhY6ZD0ulfU3aBra2aVT4xfA==}
+
+  util-deprecate@1.0.2:
+    resolution: {integrity: sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==}
+
+  uuid@14.0.2:
+    resolution: {integrity: sha512-xZe/16rV4aa+HGSOCiY2YeLT1OybRLrrkL/Rqaq7p7GMVXjFh+6wN4oMYgjFmnSnhY8t6Xpdl2l9qmnHYuMHwQ==}
+    hasBin: true
+
+  validate-npm-package-license@3.0.4:
+    resolution: {integrity: sha512-DpKm2Ui/xN7/HQKCtpZxoRWBhZ9Z0kqtygG8XCgNQ8ZlDnxuQmWhj566j8fN4Cu3/JmbhsDo7fcAJq4s9h27Ew==}
+
+  vary@1.1.2:
+    resolution: {integrity: sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==}
+    engines: {node: '>= 0.8'}
+
   vite@8.0.16:
     resolution: {integrity: sha512-h9bXPmJichP5fLmVQo3PyaGSDE2n3aPuomeAlVRm0JLmt4rY6zmPKd59HYI4LNW8oTK7tlTsuC7l/m7awx9Jcw==}
     engines: {node: ^20.19.0 || >=22.12.0}
@@ -2074,25 +4620,173 @@ packages:
       vite:
         optional: true
 
+  wait-port@1.1.0:
+    resolution: {integrity: sha512-3e04qkoN3LxTMLakdqeWth8nih8usyg+sf1Bgdf9wwUkp05iuK1eSY/QpLvscT/+F/gA89+LpUmmgBtesbqI2Q==}
+    engines: {node: '>=10'}
+    hasBin: true
+
+  wbuf@1.7.3:
+    resolution: {integrity: sha512-O84QOnr0icsbFGLS0O3bI5FswxzRr8/gHwWkDlQFskhSPryQXvrTMxjxGP4+iWYoauLoBvfDpkrOauZ+0iZpDA==}
+
+  wcwidth@1.0.1:
+    resolution: {integrity: sha512-XHPEwS0q6TaxcvG85+8EYkbiCux2XtWG2mkc47Ng2A77BQu9+DqIOJldST4HgPkuea7dvKSj5VgX3P1d4rW8Tg==}
+
+  webdriver@9.32.0:
+    resolution: {integrity: sha512-1Z7mydyw3v3UfzQ6UtrRvu3ij1eHuSoitxBMWlnKi2e3Zpvc1EBPp6FhsXBYhdFg0F4900j6sUTkoF//CkpbpQ==}
+    engines: {node: '>=18.20.0'}
+
+  webdriverio@9.32.0:
+    resolution: {integrity: sha512-A7r7SnvZ6eEJROIWAG6GMOlV82W2Pl7FDjXLn/tJ4L8BEc3yjCrDWzY4EB9i4MtPZwlNZoHgNV9fYYKn7JWAew==}
+    engines: {node: '>=18.20.0'}
+    peerDependencies:
+      puppeteer-core: '>=22.x <=24.x'
+    peerDependenciesMeta:
+      puppeteer-core:
+        optional: true
+
   webpack-virtual-modules@0.6.2:
     resolution: {integrity: sha512-66/V2i5hQanC51vBQKPH4aI8NMAcBW59FVBs+rC7eGHupMyfn34q7rZIE+ETlJ+XTevqfUhVVBgSUNSW2flEUQ==}
 
+  whatwg-encoding@3.1.1:
+    resolution: {integrity: sha512-6qN4hJdMwfYBtE3YBTTHhoeuUrDBPZmbQaxWAqSALV/MeEnR5z1xd8UKud2RAkFoPkmB+hli1TZSnyi84xz1vQ==}
+    engines: {node: '>=18'}
+    deprecated: Use @exodus/bytes instead for a more spec-conformant and faster implementation
+
+  whatwg-mimetype@4.0.0:
+    resolution: {integrity: sha512-QaKxh0eNIi2mE9p2vEdzfagOKHCcj1pJ56EEHGQOVxp8r9/iszLUUV7v89x9O1p/T+NlTM5W7jW6+cz4Fq1YVg==}
+    engines: {node: '>=18'}
+
   which@2.0.2:
     resolution: {integrity: sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==}
     engines: {node: '>= 8'}
     hasBin: true
 
+  which@6.0.1:
+    resolution: {integrity: sha512-oGLe46MIrCRqX7ytPUf66EAYvdeMIZYn3WaocqqKZAxrBpkqHfL/qvTyJ/bTk5+AqHCjXmrv3CEWgy368zhRUg==}
+    engines: {node: ^20.17.0 || >=22.9.0}
+    hasBin: true
+
+  winston-transport@4.9.0:
+    resolution: {integrity: sha512-8drMJ4rkgaPo1Me4zD/3WLfI/zPdA9o2IipKODunnGDcuqbHwjsbB79ylv04LCGGzU0xQ6vTznOMpQGaLhhm6A==}
+    engines: {node: '>= 12.0.0'}
+
+  winston@3.19.0:
+    resolution: {integrity: sha512-LZNJgPzfKR+/J3cHkxcpHKpKKvGfDZVPS4hfJCc4cCG0CgYzvlD6yE/S3CIL/Yt91ak327YCpiF/0MyeZHEHKA==}
+    engines: {node: '>= 12.0.0'}
+
   word-wrap@1.2.5:
     resolution: {integrity: sha512-BN22B5eaMMI9UMtjrGd5g5eCYPpCPDUy0FJXbYsaT5zYxjFOckS53SQDE3pWkVoWpHXVb3BrYcEN4Twa55B5cA==}
     engines: {node: '>=0.10.0'}
 
+  workerpool@6.5.1:
+    resolution: {integrity: sha512-Fs4dNYcsdpYSAfVxhnl1L5zTksjvOJxtC5hzMNl+1t9B8hTJTdKDyZ5ju7ztgPy+ft9tBFXoOlDNiOT9WUXZlA==}
+
+  wrap-ansi@6.2.0:
+    resolution: {integrity: sha512-r6lPcBGxZXlIcymEu7InxDMhdW0KDxpLgoFLcguasxCaJ/SOIZwINatK9KY/tf+ZrlywOKU0UDj3ATXUBfxJXA==}
+    engines: {node: '>=8'}
+
+  wrap-ansi@7.0.0:
+    resolution: {integrity: sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==}
+    engines: {node: '>=10'}
+
+  wrap-ansi@8.1.0:
+    resolution: {integrity: sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==}
+    engines: {node: '>=12'}
+
+  wrap-ansi@9.0.2:
+    resolution: {integrity: sha512-42AtmgqjV+X1VpdOfyTGOYRi0/zsoLqtXQckTmqTeybT+BDIbM/Guxo7x3pE2vtpr1ok6xRqM9OpBe+Jyoqyww==}
+    engines: {node: '>=18'}
+
+  wrappy@1.0.2:
+    resolution: {integrity: sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==}
+
+  ws@8.21.3:
+    resolution: {integrity: sha512-201TZ/kPWxoPr/OKWjquZR1SWKXcvxdH+e1xrx89b3YbmzLMFCLfnaG1HFIgWzJOEWZ7MvpK++odZufgYR50Rw==}
+    engines: {node: '>=10.0.0'}
+    peerDependencies:
+      bufferutil: ^4.0.1
+      utf-8-validate: '>=5.0.2'
+    peerDependenciesMeta:
+      bufferutil:
+        optional: true
+      utf-8-validate:
+        optional: true
+
+  xmlbuilder@15.1.1:
+    resolution: {integrity: sha512-yMqGBqtXyeN1e3TGYvgNgDVZ3j84W4cwkOXQswghol6APgZWaff9lnbvN7MHYJOiXsvGPXtjTYJEiC9J2wv9Eg==}
+    engines: {node: '>=8.0'}
+
+  xpath@0.0.34:
+    resolution: {integrity: sha512-FxF6+rkr1rNSQrhUNYrAFJpRXNzlDoMxeXN5qI84939ylEv3qqPFKa85Oxr6tDaJKqwW6KKyo2v26TSv3k6LeA==}
+    engines: {node: '>=0.6.0'}
+
+  y18n@5.0.8:
+    resolution: {integrity: sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA==}
+    engines: {node: '>=10'}
+
+  yaml@2.9.1:
+    resolution: {integrity: sha512-3NxN8+78OdzbT7C/WjGsyfPAtJaN3FNDsWxv7Y7mcDsT/oOmgW8BpyQQFFBnvZE3j9Y2Sdz1ULFLezL7Eb2yFw==}
+    engines: {node: '>= 14.6'}
+    hasBin: true
+
+  yargs-parser@20.2.9:
+    resolution: {integrity: sha512-y11nGElTIV+CT3Zv9t7VKl+Q3hTQoT9a1Qzezhhl6Rp21gJ/IVTW7Z3y9EWXhuUBC2Shnf+DX0antecpAwSP8w==}
+    engines: {node: '>=10'}
+
+  yargs-parser@21.1.1:
+    resolution: {integrity: sha512-tVpsJW7DdjecAiFpbIB1e3qxIQsE6NoPc5/eTdrbbIC4h0LVsWhnoa3g+m2HclBIujHzsxZ4VJVA+GUuc2/LBw==}
+    engines: {node: '>=12'}
+
+  yargs-parser@22.0.0:
+    resolution: {integrity: sha512-rwu/ClNdSMpkSrUb+d6BRsSkLUq1fmfsY6TOpYzTwvwkg1/NRG85KBy3kq++A8LKQwX6lsu+aWad+2khvuXrqw==}
+    engines: {node: ^20.19.0 || ^22.12.0 || >=23}
+
+  yargs-unparser@2.0.0:
+    resolution: {integrity: sha512-7pRTIA9Qc1caZ0bZ6RYRGbHJthJWuakf+WmHK0rVeLkNrrGhfoabBNdue6kdINI6r4if7ocq9aD/n7xwKOdzOA==}
+    engines: {node: '>=10'}
+
+  yargs@16.2.2:
+    resolution: {integrity: sha512-Nt9ZJjXTv5R8MHbqby/wXQ6Gi0Bb3TcYZkR1bzuL4yB2OxWPkXknz513gEF0GoA6tn00UpbPvERW8rzCuWCA6w==}
+    engines: {node: '>=10'}
+
+  yargs@17.7.3:
+    resolution: {integrity: sha512-GZtjxm/J/4TSxuL3FNYjCmLktBTnIw/rVmKSIyKeYAZpmJB2ig9VauCC5xsa82GNKVKDAqpOn3KVzNt0zmrU0g==}
+    engines: {node: '>=12'}
+
+  yargs@18.1.0:
+    resolution: {integrity: sha512-2rAgRKu54VsHkqI0/tYkmluGXHD4KW7yZoycuqDQ15QOTnc2VVfy0nN/1eMhnQLO00A+dwtK20xuCnc1YGeUyg==}
+    engines: {node: ^20.19.0 || ^22.12.0 || >=23}
+
+  yauzl@2.10.0:
+    resolution: {integrity: sha512-p4a9I6X6nu6IhoGmBqAcbJy1mlC4j27vEPZX9F4L4/vZT3Lyq1VkFHw/V/PUcB9Buo+DG3iHkT0x3Qya58zc3g==}
+
+  yauzl@3.4.0:
+    resolution: {integrity: sha512-jIH9yLR9wqr0wOS0TpBvo/g/2UgZH5qePVbjgRliiF0BYvOZyaBknKsF+x9Iht0O6sqgnB93rCICdOZFecJuDw==}
+    engines: {node: '>=12'}
+
   yocto-queue@0.1.0:
     resolution: {integrity: sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q==}
     engines: {node: '>=10'}
 
+  yocto-queue@1.2.2:
+    resolution: {integrity: sha512-4LCcse/U2MHZ63HAJVE+v71o7yOdIe4cZ70Wpf8D/IyjDKYQLV5GD46B+hSTjJsvV5PztjvHoU580EftxjDZFQ==}
+    engines: {node: '>=12.20'}
+
+  yoctocolors-cjs@2.1.3:
+    resolution: {integrity: sha512-U/PBtDf35ff0D8X8D0jfdzHYEPFxAI7jJlxZXwCSez5M3190m+QobIfh+sWDWSHMCWWJN2AWamkegn6vr6YBTw==}
+    engines: {node: '>=18'}
+
+  yoctocolors@2.2.0:
+    resolution: {integrity: sha512-xYqdZFUK/VYazNl/oCDYN+3WloWQwMfZxBoiNt6qNyk+xfOdi598muWE42rNZFp1kNOiqW936q5RhUdnpqElSg==}
+    engines: {node: '>=18'}
+
   zimmerframe@1.1.4:
     resolution: {integrity: sha512-B58NGBEoc8Y9MWWCQGl/gq9xBCe4IiKM0a2x7GZdQKOW5Exr8S1W24J6OgM1njK8xCRGvAJIL/MxXHf6SkmQKQ==}
 
+  zip-stream@7.0.5:
+    resolution: {integrity: sha512-dSvYKdvLsAHCDqPOhIwk/q5CvuWtTB3Dgpoe0uVEFjTzIOAmsQpprX25InCvrvJsirEbu1OHyy67n/kAj1Sw/w==}
+    engines: {node: '>=18'}
+
 snapshots:
 
   '@antfu/install-pkg@1.1.0':
@@ -2100,6 +4794,174 @@ snapshots:
       package-manager-detector: 1.6.0
       tinyexec: 1.0.4
 
+  '@appium/base-driver@10.8.1(@appium/logger@2.0.12)(@types/node@22.20.4)(debug@4.4.3(supports-color@8.1.1))(supports-color@8.1.1)':
+    dependencies:
+      '@appium/support': 7.2.8(@types/node@22.20.4)(debug@4.4.3(supports-color@8.1.1))(supports-color@8.1.1)
+      '@appium/types': 1.7.1(@appium/logger@2.0.12)
+      async-lock: 1.4.1
+      asyncbox: 6.4.3
+      axios: 1.20.0(debug@4.4.3(supports-color@8.1.1))(supports-color@8.1.1)
+      body-parser: 2.3.0(supports-color@8.1.1)
+      express: 5.2.1(supports-color@8.1.1)
+      fastest-levenshtein: 1.0.16
+      http-status-codes: 2.3.0
+      lru-cache: 11.5.3
+      method-override: 3.0.0(supports-color@8.1.1)
+      morgan: 1.12.1(supports-color@8.1.1)
+      path-to-regexp: 8.4.2
+      serve-favicon: 2.5.1
+      type-fest: 5.10.0
+    optionalDependencies:
+      spdy: 4.0.2(supports-color@8.1.1)
+    transitivePeerDependencies:
+      - '@appium/logger'
+      - '@types/node'
+      - bare-abort-controller
+      - bare-buffer
+      - debug
+      - react-native-b4a
+      - supports-color
+
+  '@appium/base-plugin@3.3.5(@appium/logger@2.0.12)(@types/node@22.20.4)(debug@4.4.3(supports-color@8.1.1))(supports-color@8.1.1)':
+    dependencies:
+      '@appium/base-driver': 10.8.1(@appium/logger@2.0.12)(@types/node@22.20.4)(debug@4.4.3(supports-color@8.1.1))(supports-color@8.1.1)
+      '@appium/support': 7.2.8(@types/node@22.20.4)(debug@4.4.3(supports-color@8.1.1))(supports-color@8.1.1)
+      '@appium/types': 1.7.1(@appium/logger@2.0.12)
+    transitivePeerDependencies:
+      - '@appium/logger'
+      - '@types/node'
+      - bare-abort-controller
+      - bare-buffer
+      - debug
+      - react-native-b4a
+      - supports-color
+
+  '@appium/docutils@3.0.1(@types/node@22.20.4)(debug@4.4.3(supports-color@8.1.1))(supports-color@8.1.1)':
+    dependencies:
+      '@appium/support': 7.2.8(@types/node@22.20.4)(debug@4.4.3(supports-color@8.1.1))(supports-color@8.1.1)
+      consola: 3.4.2
+      diff: 9.0.0
+      lilconfig: 3.1.3
+      normalize-package-data: 8.0.0
+      teen_process: 4.2.1
+      type-fest: 5.10.0
+      yaml: 2.9.1
+      yargs: 18.1.0
+      yargs-parser: 22.0.0
+    transitivePeerDependencies:
+      - '@types/node'
+      - bare-abort-controller
+      - bare-buffer
+      - debug
+      - react-native-b4a
+      - supports-color
+
+  '@appium/logger@2.0.12':
+    dependencies:
+      lru-cache: 11.5.3
+
+  '@appium/schema@1.3.0':
+    dependencies:
+      json-schema: 0.4.0
+
+  '@appium/support@7.2.8(@types/node@22.20.4)(debug@4.4.3(supports-color@8.1.1))(supports-color@8.1.1)':
+    dependencies:
+      '@appium/logger': 2.0.12
+      '@appium/types': 1.7.1(@appium/logger@2.0.12)
+      archiver: 8.0.0
+      asyncbox: 6.4.3
+      axios: 1.20.0(debug@4.4.3(supports-color@8.1.1))(supports-color@8.1.1)
+      bluebird: 3.7.2
+      bplist-creator: 0.3.0
+      bplist-parser: 0.5.0
+      form-data: 4.0.6
+      glob: 13.0.6
+      jsftp: 2.1.3(supports-color@8.1.1)
+      klaw: 4.1.0
+      lockfile: 1.0.4
+      normalize-package-data: 8.0.0
+      plist: 4.0.0
+      pluralize: 8.0.0
+      sanitize-filename: 1.6.4
+      semver: 7.8.5
+      shell-quote: 1.10.0
+      teen_process: 4.2.1
+      type-fest: 5.10.0
+      uuid: 14.0.2
+      which: 6.0.1
+      yauzl: 3.4.0
+    optionalDependencies:
+      sharp: 0.35.4(@types/node@22.20.4)
+    transitivePeerDependencies:
+      - '@types/node'
+      - bare-abort-controller
+      - bare-buffer
+      - debug
+      - react-native-b4a
+      - supports-color
+
+  '@appium/types@1.7.1(@appium/logger@2.0.12)':
+    dependencies:
+      '@appium/logger': 2.0.12
+      '@appium/schema': 1.3.0
+      type-fest: 5.10.0
+
+  '@babel/code-frame@7.29.7':
+    dependencies:
+      '@babel/helper-validator-identifier': 7.29.7
+      js-tokens: 4.0.0
+      picocolors: 1.1.1
+
+  '@babel/helper-validator-identifier@7.29.7': {}
+
+  '@colors/colors@1.6.0': {}
+
+  '@colors/colors@1.6.1': {}
+
+  '@crabnebula/tauri-driver-darwin-arm64@2.0.9':
+    optional: true
+
+  '@crabnebula/tauri-driver-darwin-x64@2.0.9':
+    optional: true
+
+  '@crabnebula/tauri-driver-linux-x64-gnu@2.0.9':
+    optional: true
+
+  '@crabnebula/tauri-driver-win32-x64-msvc@2.0.9':
+    optional: true
+
+  '@crabnebula/tauri-driver@2.0.9':
+    optionalDependencies:
+      '@crabnebula/tauri-driver-darwin-arm64': 2.0.9
+      '@crabnebula/tauri-driver-darwin-x64': 2.0.9
+      '@crabnebula/tauri-driver-linux-x64-gnu': 2.0.9
+      '@crabnebula/tauri-driver-win32-x64-msvc': 2.0.9
+
+  '@crabnebula/test-runner-backend-darwin-arm64@0.3.0':
+    optional: true
+
+  '@crabnebula/test-runner-backend-darwin-x64@0.3.0':
+    optional: true
+
+  '@crabnebula/test-runner-backend-linux-x64-gnu@0.3.0':
+    optional: true
+
+  '@crabnebula/test-runner-backend-win32-x64-msvc@0.3.0':
+    optional: true
+
+  '@crabnebula/test-runner-backend@0.3.0':
+    optionalDependencies:
+      '@crabnebula/test-runner-backend-darwin-arm64': 0.3.0
+      '@crabnebula/test-runner-backend-darwin-x64': 0.3.0
+      '@crabnebula/test-runner-backend-linux-x64-gnu': 0.3.0
+      '@crabnebula/test-runner-backend-win32-x64-msvc': 0.3.0
+
+  '@dabh/diagnostics@2.0.9':
+    dependencies:
+      '@so-ric/colorspace': 1.1.6
+      enabled: 2.0.0
+      kuler: 2.0.0
+
   '@emnapi/core@1.10.0':
     dependencies:
       '@emnapi/wasi-threads': 1.2.1
@@ -2111,11 +4973,18 @@ snapshots:
       tslib: 2.8.1
     optional: true
 
+  '@emnapi/runtime@1.11.3':
+    dependencies:
+      tslib: 2.8.1
+    optional: true
+
   '@emnapi/wasi-threads@1.2.1':
     dependencies:
       tslib: 2.8.1
     optional: true
 
+  '@epic-web/invariant@1.0.0': {}
+
   '@esbuild/aix-ppc64@0.28.1':
     optional: true
 
@@ -2194,17 +5063,17 @@ snapshots:
   '@esbuild/win32-x64@0.28.1':
     optional: true
 
-  '@eslint-community/eslint-utils@4.9.1(eslint@10.4.0(jiti@2.6.1))':
+  '@eslint-community/eslint-utils@4.9.1(eslint@10.4.0(jiti@2.6.1)(supports-color@8.1.1))':
     dependencies:
-      eslint: 10.4.0(jiti@2.6.1)
+      eslint: 10.4.0(jiti@2.6.1)(supports-color@8.1.1)
       eslint-visitor-keys: 3.4.3
 
   '@eslint-community/regexpp@4.12.2': {}
 
-  '@eslint/config-array@0.23.5':
+  '@eslint/config-array@0.23.5(supports-color@8.1.1)':
     dependencies:
       '@eslint/object-schema': 3.0.5
-      debug: 4.4.3
+      debug: 4.4.3(supports-color@8.1.1)
       minimatch: 10.2.4
     transitivePeerDependencies:
       - supports-color
@@ -2217,9 +5086,9 @@ snapshots:
     dependencies:
       '@types/json-schema': 7.0.15
 
-  '@eslint/js@10.0.1(eslint@10.4.0(jiti@2.6.1))':
+  '@eslint/js@10.0.1(eslint@10.4.0(jiti@2.6.1)(supports-color@8.1.1))':
     optionalDependencies:
-      eslint: 10.4.0(jiti@2.6.1)
+      eslint: 10.4.0(jiti@2.6.1)(supports-color@8.1.1)
 
   '@eslint/object-schema@3.0.5': {}
 
@@ -2260,6 +5129,274 @@ snapshots:
       '@iconify/types': 2.0.0
       mlly: 1.8.2
 
+  '@img/colour@1.1.0':
+    optional: true
+
+  '@img/sharp-darwin-arm64@0.35.4':
+    optionalDependencies:
+      '@img/sharp-libvips-darwin-arm64': 1.3.3
+    optional: true
+
+  '@img/sharp-darwin-x64@0.35.4':
+    optionalDependencies:
+      '@img/sharp-libvips-darwin-x64': 1.3.3
+    optional: true
+
+  '@img/sharp-freebsd-wasm32@0.35.4':
+    dependencies:
+      '@img/sharp-wasm32': 0.35.4
+    optional: true
+
+  '@img/sharp-libvips-darwin-arm64@1.3.3':
+    optional: true
+
+  '@img/sharp-libvips-darwin-x64@1.3.3':
+    optional: true
+
+  '@img/sharp-libvips-linux-arm64@1.3.3':
+    optional: true
+
+  '@img/sharp-libvips-linux-arm@1.3.3':
+    optional: true
+
+  '@img/sharp-libvips-linux-ppc64@1.3.3':
+    optional: true
+
+  '@img/sharp-libvips-linux-riscv64@1.3.3':
+    optional: true
+
+  '@img/sharp-libvips-linux-s390x@1.3.3':
+    optional: true
+
+  '@img/sharp-libvips-linux-x64@1.3.3':
+    optional: true
+
+  '@img/sharp-libvips-linuxmusl-arm64@1.3.3':
+    optional: true
+
+  '@img/sharp-libvips-linuxmusl-x64@1.3.3':
+    optional: true
+
+  '@img/sharp-linux-arm64@0.35.4':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-arm64': 1.3.3
+    optional: true
+
+  '@img/sharp-linux-arm@0.35.4':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-arm': 1.3.3
+    optional: true
+
+  '@img/sharp-linux-ppc64@0.35.4':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-ppc64': 1.3.3
+    optional: true
+
+  '@img/sharp-linux-riscv64@0.35.4':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-riscv64': 1.3.3
+    optional: true
+
+  '@img/sharp-linux-s390x@0.35.4':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-s390x': 1.3.3
+    optional: true
+
+  '@img/sharp-linux-x64@0.35.4':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-x64': 1.3.3
+    optional: true
+
+  '@img/sharp-linuxmusl-arm64@0.35.4':
+    optionalDependencies:
+      '@img/sharp-libvips-linuxmusl-arm64': 1.3.3
+    optional: true
+
+  '@img/sharp-linuxmusl-x64@0.35.4':
+    optionalDependencies:
+      '@img/sharp-libvips-linuxmusl-x64': 1.3.3
+    optional: true
+
+  '@img/sharp-wasm32@0.35.4':
+    dependencies:
+      '@emnapi/runtime': 1.11.3
+    optional: true
+
+  '@img/sharp-webcontainers-wasm32@0.35.4':
+    dependencies:
+      '@img/sharp-wasm32': 0.35.4
+    optional: true
+
+  '@img/sharp-win32-arm64@0.35.4':
+    optional: true
+
+  '@img/sharp-win32-ia32@0.35.4':
+    optional: true
+
+  '@img/sharp-win32-x64@0.35.4':
+    optional: true
+
+  '@inquirer/ansi@1.0.2': {}
+
+  '@inquirer/checkbox@4.3.2(@types/node@22.20.4)':
+    dependencies:
+      '@inquirer/ansi': 1.0.2
+      '@inquirer/core': 10.3.2(@types/node@22.20.4)
+      '@inquirer/figures': 1.0.15
+      '@inquirer/type': 3.0.10(@types/node@22.20.4)
+      yoctocolors-cjs: 2.1.3
+    optionalDependencies:
+      '@types/node': 22.20.4
+
+  '@inquirer/confirm@5.1.21(@types/node@22.20.4)':
+    dependencies:
+      '@inquirer/core': 10.3.2(@types/node@22.20.4)
+      '@inquirer/type': 3.0.10(@types/node@22.20.4)
+    optionalDependencies:
+      '@types/node': 22.20.4
+
+  '@inquirer/core@10.3.2(@types/node@22.20.4)':
+    dependencies:
+      '@inquirer/ansi': 1.0.2
+      '@inquirer/figures': 1.0.15
+      '@inquirer/type': 3.0.10(@types/node@22.20.4)
+      cli-width: 4.1.0
+      mute-stream: 2.0.0
+      signal-exit: 4.1.0
+      wrap-ansi: 6.2.0
+      yoctocolors-cjs: 2.1.3
+    optionalDependencies:
+      '@types/node': 22.20.4
+
+  '@inquirer/editor@4.2.23(@types/node@22.20.4)':
+    dependencies:
+      '@inquirer/core': 10.3.2(@types/node@22.20.4)
+      '@inquirer/external-editor': 1.0.3(@types/node@22.20.4)
+      '@inquirer/type': 3.0.10(@types/node@22.20.4)
+    optionalDependencies:
+      '@types/node': 22.20.4
+
+  '@inquirer/expand@4.0.23(@types/node@22.20.4)':
+    dependencies:
+      '@inquirer/core': 10.3.2(@types/node@22.20.4)
+      '@inquirer/type': 3.0.10(@types/node@22.20.4)
+      yoctocolors-cjs: 2.1.3
+    optionalDependencies:
+      '@types/node': 22.20.4
+
+  '@inquirer/external-editor@1.0.3(@types/node@22.20.4)':
+    dependencies:
+      chardet: 2.2.0
+      iconv-lite: 0.7.3
+    optionalDependencies:
+      '@types/node': 22.20.4
+
+  '@inquirer/figures@1.0.15': {}
+
+  '@inquirer/input@4.3.1(@types/node@22.20.4)':
+    dependencies:
+      '@inquirer/core': 10.3.2(@types/node@22.20.4)
+      '@inquirer/type': 3.0.10(@types/node@22.20.4)
+    optionalDependencies:
+      '@types/node': 22.20.4
+
+  '@inquirer/number@3.0.23(@types/node@22.20.4)':
+    dependencies:
+      '@inquirer/core': 10.3.2(@types/node@22.20.4)
+      '@inquirer/type': 3.0.10(@types/node@22.20.4)
+    optionalDependencies:
+      '@types/node': 22.20.4
+
+  '@inquirer/password@4.0.23(@types/node@22.20.4)':
+    dependencies:
+      '@inquirer/ansi': 1.0.2
+      '@inquirer/core': 10.3.2(@types/node@22.20.4)
+      '@inquirer/type': 3.0.10(@types/node@22.20.4)
+    optionalDependencies:
+      '@types/node': 22.20.4
+
+  '@inquirer/prompts@7.10.1(@types/node@22.20.4)':
+    dependencies:
+      '@inquirer/checkbox': 4.3.2(@types/node@22.20.4)
+      '@inquirer/confirm': 5.1.21(@types/node@22.20.4)
+      '@inquirer/editor': 4.2.23(@types/node@22.20.4)
+      '@inquirer/expand': 4.0.23(@types/node@22.20.4)
+      '@inquirer/input': 4.3.1(@types/node@22.20.4)
+      '@inquirer/number': 3.0.23(@types/node@22.20.4)
+      '@inquirer/password': 4.0.23(@types/node@22.20.4)
+      '@inquirer/rawlist': 4.1.11(@types/node@22.20.4)
+      '@inquirer/search': 3.2.2(@types/node@22.20.4)
+      '@inquirer/select': 4.4.2(@types/node@22.20.4)
+    optionalDependencies:
+      '@types/node': 22.20.4
+
+  '@inquirer/rawlist@4.1.11(@types/node@22.20.4)':
+    dependencies:
+      '@inquirer/core': 10.3.2(@types/node@22.20.4)
+      '@inquirer/type': 3.0.10(@types/node@22.20.4)
+      yoctocolors-cjs: 2.1.3
+    optionalDependencies:
+      '@types/node': 22.20.4
+
+  '@inquirer/search@3.2.2(@types/node@22.20.4)':
+    dependencies:
+      '@inquirer/core': 10.3.2(@types/node@22.20.4)
+      '@inquirer/figures': 1.0.15
+      '@inquirer/type': 3.0.10(@types/node@22.20.4)
+      yoctocolors-cjs: 2.1.3
+    optionalDependencies:
+      '@types/node': 22.20.4
+
+  '@inquirer/select@4.4.2(@types/node@22.20.4)':
+    dependencies:
+      '@inquirer/ansi': 1.0.2
+      '@inquirer/core': 10.3.2(@types/node@22.20.4)
+      '@inquirer/figures': 1.0.15
+      '@inquirer/type': 3.0.10(@types/node@22.20.4)
+      yoctocolors-cjs: 2.1.3
+    optionalDependencies:
+      '@types/node': 22.20.4
+
+  '@inquirer/type@3.0.10(@types/node@22.20.4)':
+    optionalDependencies:
+      '@types/node': 22.20.4
+
+  '@isaacs/cliui@8.0.2':
+    dependencies:
+      string-width: 5.1.2
+      string-width-cjs: string-width@4.2.3
+      strip-ansi: 7.2.0
+      strip-ansi-cjs: strip-ansi@6.0.1
+      wrap-ansi: 8.1.0
+      wrap-ansi-cjs: wrap-ansi@7.0.0
+
+  '@jest/diff-sequences@30.5.0': {}
+
+  '@jest/expect-utils@30.5.2':
+    dependencies:
+      '@jest/get-type': 30.5.0
+
+  '@jest/get-type@30.5.0': {}
+
+  '@jest/pattern@30.5.0':
+    dependencies:
+      '@types/node': 22.20.4
+      jest-regex-util: 30.5.0
+
+  '@jest/schemas@30.5.0':
+    dependencies:
+      '@sinclair/typebox': 0.34.52
+
+  '@jest/types@30.5.1':
+    dependencies:
+      '@jest/pattern': 30.5.0
+      '@jest/schemas': 30.5.0
+      '@types/istanbul-lib-coverage': 2.0.6
+      '@types/istanbul-reports': 3.0.4
+      '@types/node': 22.20.4
+      '@types/yargs': 17.0.35
+      chalk: 4.1.2
+
   '@jridgewell/gen-mapping@0.3.13':
     dependencies:
       '@jridgewell/sourcemap-codec': 1.5.5
@@ -2294,6 +5431,13 @@ snapshots:
       '@tybys/wasm-util': 0.10.2
     optional: true
 
+  '@napi-rs/wasm-runtime@1.1.5(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3)':
+    dependencies:
+      '@emnapi/core': 1.10.0
+      '@emnapi/runtime': 1.11.3
+      '@tybys/wasm-util': 0.10.2
+    optional: true
+
   '@oxc-parser/binding-android-arm-eabi@0.115.0':
     optional: true
 
@@ -2342,9 +5486,9 @@ snapshots:
   '@oxc-parser/binding-openharmony-arm64@0.115.0':
     optional: true
 
-  '@oxc-parser/binding-wasm32-wasi@0.115.0(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)':
+  '@oxc-parser/binding-wasm32-wasi@0.115.0(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3)':
     dependencies:
-      '@napi-rs/wasm-runtime': 1.1.5(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)
+      '@napi-rs/wasm-runtime': 1.1.5(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3)
     transitivePeerDependencies:
       - '@emnapi/core'
       - '@emnapi/runtime'
@@ -2363,8 +5507,30 @@ snapshots:
 
   '@oxc-project/types@0.133.0': {}
 
+  '@pkgjs/parseargs@0.11.0':
+    optional: true
+
   '@polka/url@1.0.0-next.29': {}
 
+  '@promptbook/utils@0.69.5':
+    dependencies:
+      spacetrim: 0.11.59
+
+  '@puppeteer/browsers@2.13.2(supports-color@8.1.1)':
+    dependencies:
+      debug: 4.4.3(supports-color@8.1.1)
+      extract-zip: 2.0.1(supports-color@8.1.1)
+      progress: 2.0.3
+      proxy-agent: 6.5.0(supports-color@8.1.1)
+      semver: 7.7.4
+      tar-fs: 3.1.3
+      yargs: 17.7.3
+    transitivePeerDependencies:
+      - bare-abort-controller
+      - bare-buffer
+      - react-native-b4a
+      - supports-color
+
   '@quansync/fs@1.0.0':
     dependencies:
       quansync: 1.0.0
@@ -2530,18 +5696,34 @@ snapshots:
   '@rollup/rollup-win32-x64-msvc@4.63.1':
     optional: true
 
+  '@sec-ant/readable-stream@0.4.1': {}
+
+  '@sidvind/better-ajv-errors@5.0.0(ajv@8.20.0)':
+    dependencies:
+      ajv: 8.20.0
+      kleur: 4.1.5
+
+  '@sinclair/typebox@0.34.52': {}
+
+  '@sindresorhus/merge-streams@4.0.0': {}
+
+  '@so-ric/colorspace@1.1.6':
+    dependencies:
+      color: 5.0.3
+      text-hex: 1.0.0
+
   '@sveltejs/acorn-typescript@1.0.9(acorn@8.16.0)':
     dependencies:
       acorn: 8.16.0
 
-  '@sveltejs/vite-plugin-svelte@7.0.0(svelte@5.55.7(@typescript-eslint/types@8.70.0))(vite@8.0.16(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1))':
+  '@sveltejs/vite-plugin-svelte@7.0.0(svelte@5.55.7(@typescript-eslint/types@8.70.0))(vite@8.0.16(@types/node@22.20.4)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1)(yaml@2.9.1))':
     dependencies:
       deepmerge: 4.3.1
       magic-string: 0.30.21
       obug: 2.1.1
       svelte: 5.55.7(@typescript-eslint/types@8.70.0)
-      vite: 8.0.16(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1)
-      vitefu: 1.1.2(vite@8.0.16(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1))
+      vite: 8.0.16(@types/node@22.20.4)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1)(yaml@2.9.1)
+      vitefu: 1.1.2(vite@8.0.16(@types/node@22.20.4)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1)(yaml@2.9.1))
 
   '@tauri-apps/api@3.0.0-alpha.1': {}
 
@@ -2592,6 +5774,8 @@ snapshots:
       '@tauri-apps/cli-win32-ia32-msvc': 3.0.0-alpha.1
       '@tauri-apps/cli-win32-x64-msvc': 3.0.0-alpha.1
 
+  '@tootallnate/quickjs-emscripten@0.23.0': {}
+
   '@tybys/wasm-util@0.10.2':
     dependencies:
       tslib: 2.8.1
@@ -2601,21 +5785,66 @@ snapshots:
 
   '@types/estree@1.0.9': {}
 
+  '@types/istanbul-lib-coverage@2.0.6': {}
+
+  '@types/istanbul-lib-report@3.0.3':
+    dependencies:
+      '@types/istanbul-lib-coverage': 2.0.6
+
+  '@types/istanbul-reports@3.0.4':
+    dependencies:
+      '@types/istanbul-lib-report': 3.0.3
+
   '@types/json-schema@7.0.15': {}
 
+  '@types/mocha@10.0.10': {}
+
+  '@types/node@20.19.43':
+    dependencies:
+      undici-types: 6.21.0
+
+  '@types/node@22.20.4':
+    dependencies:
+      undici-types: 6.21.0
+
+  '@types/normalize-package-data@2.4.4': {}
+
   '@types/resolve@1.20.2': {}
 
+  '@types/sinonjs__fake-timers@8.1.5': {}
+
+  '@types/stack-utils@2.0.3': {}
+
+  '@types/triple-beam@1.3.5': {}
+
   '@types/trusted-types@2.0.7': {}
 
-  '@typescript-eslint/eslint-plugin@8.70.0(@typescript-eslint/parser@8.70.0(eslint@10.4.0(jiti@2.6.1))(typescript@6.0.3))(eslint@10.4.0(jiti@2.6.1))(typescript@6.0.3)':
+  '@types/which@2.0.2': {}
+
+  '@types/ws@8.18.1':
+    dependencies:
+      '@types/node': 22.20.4
+
+  '@types/yargs-parser@21.0.3': {}
+
+  '@types/yargs@17.0.35':
+    dependencies:
+      '@types/yargs-parser': 21.0.3
+
+  '@types/yauzl@2.10.3':
+    dependencies:
+      '@types/node': 22.20.4
+    optional: true
+
+  '@typescript-eslint/eslint-plugin@8.70.0(@typescript-eslint/parser@8.70.0(eslint@10.4.0(jiti@2.6.1)(supports-color@8.1.1))(supports-color@8.1.1)(typescript@6.0.3))(eslint@10.4.0(jiti@2.6.1)(supports-color@8.1.1))(supports-color@8.1.1)(typescript@6.0.3)':
     dependencies:
       '@eslint-community/regexpp': 4.12.2
-      '@typescript-eslint/parser': 8.70.0(eslint@10.4.0(jiti@2.6.1))(typescript@6.0.3)
+      '@typescript-eslint/parser': 8.70.0(eslint@10.4.0(jiti@2.6.1)(supports-color@8.1.1))(supports-color@8.1.1)(typescript@6.0.3)
       '@typescript-eslint/scope-manager': 8.70.0
-      '@typescript-eslint/type-utils': 8.70.0(eslint@10.4.0(jiti@2.6.1))(typescript@6.0.3)
-      '@typescript-eslint/utils': 8.70.0(eslint@10.4.0(jiti@2.6.1))(typescript@6.0.3)
+      '@typescript-eslint/type-utils': 8.70.0(eslint@10.4.0(jiti@2.6.1)(supports-color@8.1.1))(supports-color@8.1.1)(typescript@6.0.3)
+      '@typescript-eslint/utils': 8.70.0(eslint@10.4.0(jiti@2.6.1)(supports-color@8.1.1))(supports-color@8.1.1)(typescript@6.0.3)
       '@typescript-eslint/visitor-keys': 8.70.0
-      eslint: 10.4.0(jiti@2.6.1)
+      eslint: 10.4.0(jiti@2.6.1)(supports-color@8.1.1)
       ignore: 7.0.5
       natural-compare: 1.4.0
       ts-api-utils: 2.5.0(typescript@6.0.3)
@@ -2623,23 +5852,23 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@typescript-eslint/parser@8.70.0(eslint@10.4.0(jiti@2.6.1))(typescript@6.0.3)':
+  '@typescript-eslint/parser@8.70.0(eslint@10.4.0(jiti@2.6.1)(supports-color@8.1.1))(supports-color@8.1.1)(typescript@6.0.3)':
     dependencies:
       '@typescript-eslint/scope-manager': 8.70.0
       '@typescript-eslint/types': 8.70.0
-      '@typescript-eslint/typescript-estree': 8.70.0(typescript@6.0.3)
+      '@typescript-eslint/typescript-estree': 8.70.0(supports-color@8.1.1)(typescript@6.0.3)
       '@typescript-eslint/visitor-keys': 8.70.0
-      debug: 4.4.3
-      eslint: 10.4.0(jiti@2.6.1)
+      debug: 4.4.3(supports-color@8.1.1)
+      eslint: 10.4.0(jiti@2.6.1)(supports-color@8.1.1)
       typescript: 6.0.3
     transitivePeerDependencies:
       - supports-color
 
-  '@typescript-eslint/project-service@8.70.0(typescript@6.0.3)':
+  '@typescript-eslint/project-service@8.70.0(supports-color@8.1.1)(typescript@6.0.3)':
     dependencies:
       '@typescript-eslint/tsconfig-utils': 8.70.0(typescript@6.0.3)
       '@typescript-eslint/types': 8.70.0
-      debug: 4.4.3
+      debug: 4.4.3(supports-color@8.1.1)
       typescript: 6.0.3
     transitivePeerDependencies:
       - supports-color
@@ -2653,13 +5882,13 @@ snapshots:
     dependencies:
       typescript: 6.0.3
 
-  '@typescript-eslint/type-utils@8.70.0(eslint@10.4.0(jiti@2.6.1))(typescript@6.0.3)':
+  '@typescript-eslint/type-utils@8.70.0(eslint@10.4.0(jiti@2.6.1)(supports-color@8.1.1))(supports-color@8.1.1)(typescript@6.0.3)':
     dependencies:
       '@typescript-eslint/types': 8.70.0
-      '@typescript-eslint/typescript-estree': 8.70.0(typescript@6.0.3)
-      '@typescript-eslint/utils': 8.70.0(eslint@10.4.0(jiti@2.6.1))(typescript@6.0.3)
-      debug: 4.4.3
-      eslint: 10.4.0(jiti@2.6.1)
+      '@typescript-eslint/typescript-estree': 8.70.0(supports-color@8.1.1)(typescript@6.0.3)
+      '@typescript-eslint/utils': 8.70.0(eslint@10.4.0(jiti@2.6.1)(supports-color@8.1.1))(supports-color@8.1.1)(typescript@6.0.3)
+      debug: 4.4.3(supports-color@8.1.1)
+      eslint: 10.4.0(jiti@2.6.1)(supports-color@8.1.1)
       ts-api-utils: 2.5.0(typescript@6.0.3)
       typescript: 6.0.3
     transitivePeerDependencies:
@@ -2667,13 +5896,13 @@ snapshots:
 
   '@typescript-eslint/types@8.70.0': {}
 
-  '@typescript-eslint/typescript-estree@8.70.0(typescript@6.0.3)':
+  '@typescript-eslint/typescript-estree@8.70.0(supports-color@8.1.1)(typescript@6.0.3)':
     dependencies:
-      '@typescript-eslint/project-service': 8.70.0(typescript@6.0.3)
+      '@typescript-eslint/project-service': 8.70.0(supports-color@8.1.1)(typescript@6.0.3)
       '@typescript-eslint/tsconfig-utils': 8.70.0(typescript@6.0.3)
       '@typescript-eslint/types': 8.70.0
       '@typescript-eslint/visitor-keys': 8.70.0
-      debug: 4.4.3
+      debug: 4.4.3(supports-color@8.1.1)
       minimatch: 10.2.4
       semver: 7.7.4
       tinyglobby: 0.2.17
@@ -2682,13 +5911,13 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@typescript-eslint/utils@8.70.0(eslint@10.4.0(jiti@2.6.1))(typescript@6.0.3)':
+  '@typescript-eslint/utils@8.70.0(eslint@10.4.0(jiti@2.6.1)(supports-color@8.1.1))(supports-color@8.1.1)(typescript@6.0.3)':
     dependencies:
-      '@eslint-community/eslint-utils': 4.9.1(eslint@10.4.0(jiti@2.6.1))
+      '@eslint-community/eslint-utils': 4.9.1(eslint@10.4.0(jiti@2.6.1)(supports-color@8.1.1))
       '@typescript-eslint/scope-manager': 8.70.0
       '@typescript-eslint/types': 8.70.0
-      '@typescript-eslint/typescript-estree': 8.70.0(typescript@6.0.3)
-      eslint: 10.4.0(jiti@2.6.1)
+      '@typescript-eslint/typescript-estree': 8.70.0(supports-color@8.1.1)(typescript@6.0.3)
+      eslint: 10.4.0(jiti@2.6.1)(supports-color@8.1.1)
       typescript: 6.0.3
     transitivePeerDependencies:
       - supports-color
@@ -2796,11 +6025,11 @@ snapshots:
       '@unocss/core': 66.6.7
       magic-string: 0.30.21
 
-  '@unocss/transformer-attributify-jsx@66.6.7(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)':
+  '@unocss/transformer-attributify-jsx@66.6.7(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3)':
     dependencies:
       '@unocss/core': 66.6.7
-      oxc-parser: 0.115.0(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)
-      oxc-walker: 0.7.0(oxc-parser@0.115.0(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0))
+      oxc-parser: 0.115.0(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3)
+      oxc-walker: 0.7.0(oxc-parser@0.115.0(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3))
     transitivePeerDependencies:
       - '@emnapi/core'
       - '@emnapi/runtime'
@@ -2819,7 +6048,7 @@ snapshots:
     dependencies:
       '@unocss/core': 66.6.7
 
-  '@unocss/vite@66.6.7(vite@8.0.16(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1))':
+  '@unocss/vite@66.6.7(vite@8.0.16(@types/node@22.20.4)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1)(yaml@2.9.1))':
     dependencies:
       '@jridgewell/remapping': 2.3.5
       '@unocss/config': 66.6.7
@@ -2830,18 +6059,269 @@ snapshots:
       pathe: 2.0.3
       tinyglobby: 0.2.17
       unplugin-utils: 0.3.1
-      vite: 8.0.16(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1)
+      vite: 8.0.16(@types/node@22.20.4)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1)(yaml@2.9.1)
+
+  '@vitest/pretty-format@3.2.7':
+    dependencies:
+      tinyrainbow: 2.0.0
+
+  '@vitest/pretty-format@4.1.11':
+    dependencies:
+      tinyrainbow: 3.1.1
+
+  '@vitest/snapshot@3.2.7':
+    dependencies:
+      '@vitest/pretty-format': 3.2.7
+      magic-string: 0.30.21
+      pathe: 2.0.3
+
+  '@vitest/snapshot@4.1.11':
+    dependencies:
+      '@vitest/pretty-format': 4.1.11
+      '@vitest/utils': 4.1.11
+      magic-string: 0.30.21
+      pathe: 2.0.3
+
+  '@vitest/utils@4.1.11':
+    dependencies:
+      '@vitest/pretty-format': 4.1.11
+      convert-source-map: 2.0.0
+      tinyrainbow: 3.1.1
+
+  '@wdio/appium-service@9.32.0(supports-color@8.1.1)':
+    dependencies:
+      '@wdio/config': 9.32.0(supports-color@8.1.1)
+      '@wdio/logger': 9.29.1
+      '@wdio/reporter': 9.32.0
+      '@wdio/types': 9.32.0
+      '@wdio/utils': 9.32.0(supports-color@8.1.1)
+      '@xmldom/xmldom': 0.9.12
+      change-case: 5.4.4
+      get-port: 7.2.0
+      import-meta-resolve: 4.2.0
+      tree-kill: 1.2.2
+      webdriverio: 9.32.0(supports-color@8.1.1)
+      xpath: 0.0.34
+    transitivePeerDependencies:
+      - bare-abort-controller
+      - bare-buffer
+      - bufferutil
+      - puppeteer-core
+      - react-native-b4a
+      - supports-color
+      - utf-8-validate
+
+  '@wdio/cli@9.32.0(@types/node@22.20.4)(expect-webdriverio@6.1.0)(supports-color@8.1.1)':
+    dependencies:
+      '@vitest/snapshot': 3.2.7
+      '@wdio/config': 9.32.0(supports-color@8.1.1)
+      '@wdio/globals': 9.31.3(expect-webdriverio@6.1.0)(webdriverio@9.32.0(supports-color@8.1.1))
+      '@wdio/logger': 9.29.1
+      '@wdio/protocols': 9.31.5
+      '@wdio/types': 9.32.0
+      '@wdio/utils': 9.32.0(supports-color@8.1.1)
+      async-exit-hook: 2.0.1
+      chalk: 5.6.2
+      chokidar: 4.0.3
+      create-wdio: 9.32.0(@types/node@22.20.4)
+      dotenv: 17.4.2
+      import-meta-resolve: 4.2.0
+      lodash.flattendeep: 4.4.0
+      lodash.pickby: 4.6.0
+      lodash.union: 4.6.0
+      read-pkg-up: 10.1.0
+      tsx: 4.23.1
+      webdriverio: 9.32.0(supports-color@8.1.1)
+      yargs: 17.7.3
+    transitivePeerDependencies:
+      - '@types/node'
+      - bare-abort-controller
+      - bare-buffer
+      - bufferutil
+      - expect-webdriverio
+      - puppeteer-core
+      - react-native-b4a
+      - supports-color
+      - utf-8-validate
+
+  '@wdio/config@9.32.0(supports-color@8.1.1)':
+    dependencies:
+      '@wdio/logger': 9.29.1
+      '@wdio/types': 9.32.0
+      '@wdio/utils': 9.32.0(supports-color@8.1.1)
+      deepmerge-ts: 8.0.2
+      glob: 10.5.0
+      import-meta-resolve: 4.2.0
+      jiti: 2.6.1
+    transitivePeerDependencies:
+      - bare-abort-controller
+      - bare-buffer
+      - react-native-b4a
+      - supports-color
+
+  '@wdio/dot-reporter@9.32.0':
+    dependencies:
+      '@wdio/reporter': 9.32.0
+      '@wdio/types': 9.32.0
+      chalk: 5.6.2
+
+  '@wdio/globals@9.31.3(expect-webdriverio@6.1.0)(webdriverio@9.32.0(supports-color@8.1.1))':
+    dependencies:
+      expect-webdriverio: 6.1.0(@wdio/globals@9.31.3)(@wdio/logger@9.29.1)(webdriverio@9.32.0(supports-color@8.1.1))
+      webdriverio: 9.32.0(supports-color@8.1.1)
+
+  '@wdio/local-runner@9.32.0(@wdio/globals@9.31.3)(supports-color@8.1.1)(webdriverio@9.32.0(supports-color@8.1.1))':
+    dependencies:
+      '@types/node': 20.19.43
+      '@wdio/logger': 9.29.1
+      '@wdio/repl': 9.16.2
+      '@wdio/runner': 9.32.0(expect-webdriverio@6.1.0)(supports-color@8.1.1)(webdriverio@9.32.0(supports-color@8.1.1))
+      '@wdio/types': 9.32.0
+      '@wdio/xvfb': 9.32.0
+      exit-hook: 4.0.0
+      expect-webdriverio: 6.1.0(@wdio/globals@9.31.3)(@wdio/logger@9.29.1)(webdriverio@9.32.0(supports-color@8.1.1))
+      split2: 4.2.0
+      stream-buffers: 3.0.3
+    transitivePeerDependencies:
+      - '@wdio/globals'
+      - bare-abort-controller
+      - bare-buffer
+      - bufferutil
+      - react-native-b4a
+      - supports-color
+      - utf-8-validate
+      - webdriverio
+
+  '@wdio/logger@9.29.1':
+    dependencies:
+      chalk: 5.6.2
+      loglevel: 1.9.2
+      loglevel-plugin-prefix: 0.8.4
+      safe-regex2: 5.1.1
+      strip-ansi: 7.2.0
+
+  '@wdio/mocha-framework@9.32.0(supports-color@8.1.1)':
+    dependencies:
+      '@types/mocha': 10.0.10
+      '@types/node': 20.19.43
+      '@wdio/logger': 9.29.1
+      '@wdio/types': 9.32.0
+      '@wdio/utils': 9.32.0(supports-color@8.1.1)
+      mocha: 10.8.2
+    transitivePeerDependencies:
+      - bare-abort-controller
+      - bare-buffer
+      - react-native-b4a
+      - supports-color
+
+  '@wdio/protocols@9.31.5': {}
+
+  '@wdio/repl@9.16.2':
+    dependencies:
+      '@types/node': 20.19.43
+
+  '@wdio/reporter@9.32.0':
+    dependencies:
+      '@types/node': 20.19.43
+      '@wdio/logger': 9.29.1
+      '@wdio/types': 9.32.0
+      diff: 8.0.4
+      object-inspect: 1.13.4
+
+  '@wdio/runner@9.32.0(expect-webdriverio@6.1.0)(supports-color@8.1.1)(webdriverio@9.32.0(supports-color@8.1.1))':
+    dependencies:
+      '@types/node': 20.19.43
+      '@wdio/config': 9.32.0(supports-color@8.1.1)
+      '@wdio/dot-reporter': 9.32.0
+      '@wdio/globals': 9.31.3(expect-webdriverio@6.1.0)(webdriverio@9.32.0(supports-color@8.1.1))
+      '@wdio/logger': 9.29.1
+      '@wdio/types': 9.32.0
+      '@wdio/utils': 9.32.0(supports-color@8.1.1)
+      deepmerge-ts: 8.0.2
+      expect-webdriverio: 6.1.0(@wdio/globals@9.31.3)(@wdio/logger@9.29.1)(webdriverio@9.32.0(supports-color@8.1.1))
+      webdriver: 9.32.0(supports-color@8.1.1)
+      webdriverio: 9.32.0(supports-color@8.1.1)
+    transitivePeerDependencies:
+      - bare-abort-controller
+      - bare-buffer
+      - bufferutil
+      - react-native-b4a
+      - supports-color
+      - utf-8-validate
+
+  '@wdio/spec-reporter@9.32.0':
+    dependencies:
+      '@wdio/reporter': 9.32.0
+      '@wdio/types': 9.32.0
+      chalk: 5.6.2
+      easy-table: 1.2.0
+      pretty-ms: 9.3.1
+
+  '@wdio/types@9.32.0':
+    dependencies:
+      '@types/node': 20.19.43
+
+  '@wdio/utils@9.32.0(supports-color@8.1.1)':
+    dependencies:
+      '@puppeteer/browsers': 2.13.2(supports-color@8.1.1)
+      '@wdio/logger': 9.29.1
+      '@wdio/types': 9.32.0
+      decamelize: 6.0.1
+      deepmerge-ts: 8.0.2
+      edgedriver: 6.3.1(supports-color@8.1.1)
+      geckodriver: 6.1.1(supports-color@8.1.1)
+      get-port: 7.2.0
+      import-meta-resolve: 4.2.0
+      locate-app: 2.5.0
+      mitt: 3.0.1
+      safaridriver: 1.0.1
+      split2: 4.2.0
+      wait-port: 1.1.0(supports-color@8.1.1)
+    transitivePeerDependencies:
+      - bare-abort-controller
+      - bare-buffer
+      - react-native-b4a
+      - supports-color
+
+  '@wdio/xvfb@9.32.0':
+    dependencies:
+      '@wdio/logger': 9.29.1
+
+  '@xmldom/xmldom@0.9.12': {}
 
   '@zerodevx/svelte-json-view@2.0.0(svelte@5.55.7(@typescript-eslint/types@8.70.0))':
     optionalDependencies:
       svelte: 5.55.7(@typescript-eslint/types@8.70.0)
 
+  '@zip.js/zip.js@2.18.2': {}
+
+  abort-controller@3.0.0:
+    dependencies:
+      event-target-shim: 5.0.1
+
+  accepts@2.0.0:
+    dependencies:
+      mime-types: 3.0.2
+      negotiator: 1.1.0
+
   acorn-jsx@5.3.2(acorn@8.16.0):
     dependencies:
       acorn: 8.16.0
 
   acorn@8.16.0: {}
 
+  agent-base@6.0.2(supports-color@8.1.1):
+    dependencies:
+      debug: 4.4.3(supports-color@8.1.1)
+    transitivePeerDependencies:
+      - supports-color
+
+  agent-base@7.1.4: {}
+
+  ajv-formats@3.0.1(ajv@8.20.0):
+    optionalDependencies:
+      ajv: 8.20.0
+
   ajv@6.14.0:
     dependencies:
       fast-deep-equal: 3.1.3
@@ -2849,63 +6329,632 @@ snapshots:
       json-schema-traverse: 0.4.1
       uri-js: 4.4.1
 
+  ajv@8.20.0:
+    dependencies:
+      fast-deep-equal: 3.1.3
+      fast-uri: 3.1.8
+      json-schema-traverse: 1.0.0
+      require-from-string: 2.0.2
+
+  ansi-colors@4.1.3: {}
+
+  ansi-regex@5.0.1: {}
+
+  ansi-regex@6.3.0: {}
+
+  ansi-styles@4.3.0:
+    dependencies:
+      color-convert: 2.0.1
+
+  ansi-styles@5.2.0: {}
+
+  ansi-styles@6.2.3: {}
+
+  anymatch@3.1.3:
+    dependencies:
+      normalize-path: 3.0.0
+      picomatch: 2.3.2
+
+  appium-uiautomator2-driver@8.7.0(@types/node@22.20.4)(appium@3.8.0(@types/node@22.20.4)(debug@4.4.3(supports-color@8.1.1))(supports-color@8.1.1)):
+    dependencies:
+      appium: 3.8.0(@types/node@22.20.4)(debug@4.4.3(supports-color@8.1.1))(supports-color@8.1.1)
+    optionalDependencies:
+      sharp: 0.35.4(@types/node@22.20.4)
+    transitivePeerDependencies:
+      - '@types/node'
+
+  appium-xcuitest-driver@12.13.2(@types/node@22.20.4)(appium@3.8.0(@types/node@22.20.4)(debug@4.4.3(supports-color@8.1.1))(supports-color@8.1.1)):
+    dependencies:
+      appium: 3.8.0(@types/node@22.20.4)(debug@4.4.3(supports-color@8.1.1))(supports-color@8.1.1)
+    optionalDependencies:
+      sharp: 0.35.4(@types/node@22.20.4)
+    transitivePeerDependencies:
+      - '@types/node'
+
+  appium@3.8.0(@types/node@22.20.4)(debug@4.4.3(supports-color@8.1.1))(supports-color@8.1.1):
+    dependencies:
+      '@appium/base-driver': 10.8.1(@appium/logger@2.0.12)(@types/node@22.20.4)(debug@4.4.3(supports-color@8.1.1))(supports-color@8.1.1)
+      '@appium/base-plugin': 3.3.5(@appium/logger@2.0.12)(@types/node@22.20.4)(debug@4.4.3(supports-color@8.1.1))(supports-color@8.1.1)
+      '@appium/docutils': 3.0.1(@types/node@22.20.4)(debug@4.4.3(supports-color@8.1.1))(supports-color@8.1.1)
+      '@appium/logger': 2.0.12
+      '@appium/schema': 1.3.0
+      '@appium/support': 7.2.8(@types/node@22.20.4)(debug@4.4.3(supports-color@8.1.1))(supports-color@8.1.1)
+      '@appium/types': 1.7.1(@appium/logger@2.0.12)
+      '@sidvind/better-ajv-errors': 5.0.0(ajv@8.20.0)
+      ajv: 8.20.0
+      ajv-formats: 3.0.1(ajv@8.20.0)
+      argparse: 3.0.2
+      asyncbox: 6.4.3
+      axios: 1.20.0(debug@4.4.3(supports-color@8.1.1))(supports-color@8.1.1)
+      lilconfig: 3.1.3
+      lru-cache: 11.5.3
+      ora: 5.4.1
+      semver: 7.8.5
+      teen_process: 4.2.1
+      type-fest: 5.10.0
+      winston: 3.19.0
+      ws: 8.21.3
+      yaml: 2.9.1
+    transitivePeerDependencies:
+      - '@types/node'
+      - bare-abort-controller
+      - bare-buffer
+      - bufferutil
+      - debug
+      - react-native-b4a
+      - supports-color
+      - utf-8-validate
+
+  archiver@8.0.0:
+    dependencies:
+      async: 3.2.6
+      buffer-crc32: 1.0.0
+      is-stream: 4.0.1
+      lazystream: 1.0.1
+      normalize-path: 3.0.0
+      readable-stream: 4.7.0
+      readdir-glob: 3.0.0
+      tar-stream: 3.2.1
+      zip-stream: 7.0.5
+    transitivePeerDependencies:
+      - bare-abort-controller
+      - bare-buffer
+      - react-native-b4a
+
+  argparse@2.0.1: {}
+
+  argparse@3.0.2: {}
+
   aria-query@5.3.1: {}
 
+  ast-types@0.13.4:
+    dependencies:
+      tslib: 2.8.1
+
+  async-exit-hook@2.0.1: {}
+
+  async-lock@1.4.1: {}
+
+  async@3.2.6: {}
+
+  asyncbox@6.4.3:
+    dependencies:
+      p-limit: 7.3.3
+
+  asynckit@0.4.0: {}
+
+  axios@1.20.0(debug@4.4.3(supports-color@8.1.1))(supports-color@8.1.1):
+    dependencies:
+      follow-redirects: 1.16.0(debug@4.4.3(supports-color@8.1.1))
+      form-data: 4.0.6
+      https-proxy-agent: 5.0.1(supports-color@8.1.1)
+      proxy-from-env: 2.1.0
+    transitivePeerDependencies:
+      - debug
+      - supports-color
+
   axobject-query@4.1.0: {}
 
+  b4a@1.9.0: {}
+
+  balanced-match@1.0.2: {}
+
   balanced-match@4.0.4: {}
 
+  bare-events@2.9.2: {}
+
+  bare-fs@4.8.2:
+    dependencies:
+      bare-events: 2.9.2
+      bare-path: 3.1.2
+      bare-stream: 2.13.4(bare-events@2.9.2)
+      bare-url: 2.5.4
+      fast-fifo: 1.3.2
+    transitivePeerDependencies:
+      - bare-abort-controller
+      - react-native-b4a
+
+  bare-path@3.1.2: {}
+
+  bare-stream@2.13.4(bare-events@2.9.2):
+    dependencies:
+      b4a: 1.9.0
+      streamx: 2.28.1
+      teex: 1.0.1
+    optionalDependencies:
+      bare-events: 2.9.2
+    transitivePeerDependencies:
+      - react-native-b4a
+
+  bare-url@2.5.4:
+    dependencies:
+      bare-path: 3.1.2
+
+  base64-js@1.5.1: {}
+
+  basic-auth@2.0.1:
+    dependencies:
+      safe-buffer: 5.1.2
+
+  basic-ftp@5.3.1: {}
+
+  binary-extensions@2.3.0: {}
+
+  bl@4.1.0:
+    dependencies:
+      buffer: 5.7.1
+      inherits: 2.0.4
+      readable-stream: 3.6.2
+
+  bluebird@3.7.2: {}
+
+  body-parser@2.3.0(supports-color@8.1.1):
+    dependencies:
+      bytes: 3.1.2
+      content-type: 2.1.0
+      debug: 4.4.3(supports-color@8.1.1)
+      http-errors: 2.0.1
+      iconv-lite: 0.7.3
+      on-finished: 2.4.1
+      qs: 6.16.0
+      raw-body: 3.0.2
+      type-is: 2.1.0
+    transitivePeerDependencies:
+      - supports-color
+
+  boolbase@1.0.0: {}
+
+  bplist-creator@0.3.0:
+    dependencies:
+      stream-buffers: 3.0.3
+
+  bplist-parser@0.5.0: {}
+
+  brace-expansion@1.1.21:
+    dependencies:
+      balanced-match: 1.0.2
+      concat-map: 0.0.1
+
+  brace-expansion@2.1.7:
+    dependencies:
+      balanced-match: 1.0.2
+
   brace-expansion@5.0.9:
     dependencies:
       balanced-match: 4.0.4
 
+  braces@3.0.3:
+    dependencies:
+      fill-range: 7.1.1
+
+  browser-stdout@1.3.1: {}
+
+  buffer-crc32@0.2.13: {}
+
+  buffer-crc32@1.0.0: {}
+
   buffer-from@1.1.2: {}
 
+  buffer@5.7.1:
+    dependencies:
+      base64-js: 1.5.1
+      ieee754: 1.2.1
+
+  buffer@6.0.3:
+    dependencies:
+      base64-js: 1.5.1
+      ieee754: 1.2.1
+
+  bytes@3.1.2: {}
+
   cac@6.7.14: {}
 
+  call-bind-apply-helpers@1.0.2:
+    dependencies:
+      es-errors: 1.3.0
+      function-bind: 1.1.2
+
+  call-bound@1.0.4:
+    dependencies:
+      call-bind-apply-helpers: 1.0.2
+      get-intrinsic: 1.3.0
+
+  camelcase@6.3.0: {}
+
+  chalk@4.1.2:
+    dependencies:
+      ansi-styles: 4.3.0
+      supports-color: 7.2.0
+
+  chalk@5.6.2: {}
+
+  change-case@5.4.4: {}
+
+  chardet@2.2.0: {}
+
+  cheerio-select@2.1.0:
+    dependencies:
+      boolbase: 1.0.0
+      css-select: 5.2.2
+      css-what: 6.2.2
+      domelementtype: 2.3.0
+      domhandler: 5.0.3
+      domutils: 3.2.2
+
+  cheerio@1.2.0:
+    dependencies:
+      cheerio-select: 2.1.0
+      dom-serializer: 2.0.0
+      domhandler: 5.0.3
+      domutils: 3.2.2
+      encoding-sniffer: 0.2.1
+      htmlparser2: 10.1.0
+      parse5: 7.3.0
+      parse5-htmlparser2-tree-adapter: 7.1.0
+      parse5-parser-stream: 7.1.2
+      undici: 7.30.0
+      whatwg-mimetype: 4.0.0
+
+  chokidar@3.6.0:
+    dependencies:
+      anymatch: 3.1.3
+      braces: 3.0.3
+      glob-parent: 5.1.2
+      is-binary-path: 2.1.0
+      is-glob: 4.0.3
+      normalize-path: 3.0.0
+      readdirp: 3.6.0
+    optionalDependencies:
+      fsevents: 2.3.3
+
+  chokidar@4.0.3:
+    dependencies:
+      readdirp: 4.1.2
+
   chokidar@5.0.0:
     dependencies:
       readdirp: 5.0.0
 
+  ci-info@4.4.0: {}
+
+  cli-cursor@3.1.0:
+    dependencies:
+      restore-cursor: 3.1.0
+
+  cli-spinners@2.9.2: {}
+
+  cli-width@4.1.0: {}
+
+  cliui@7.0.4:
+    dependencies:
+      string-width: 4.2.3
+      strip-ansi: 6.0.1
+      wrap-ansi: 7.0.0
+
+  cliui@8.0.1:
+    dependencies:
+      string-width: 4.2.3
+      strip-ansi: 6.0.1
+      wrap-ansi: 7.0.0
+
+  cliui@9.0.1:
+    dependencies:
+      string-width: 7.2.0
+      strip-ansi: 7.2.0
+      wrap-ansi: 9.0.2
+
+  clone@1.0.4: {}
+
   clsx@2.1.1: {}
 
+  color-convert@2.0.1:
+    dependencies:
+      color-name: 1.1.4
+
+  color-convert@3.1.3:
+    dependencies:
+      color-name: 2.1.1
+
+  color-name@1.1.4: {}
+
+  color-name@2.1.1: {}
+
+  color-string@2.1.4:
+    dependencies:
+      color-name: 2.1.1
+
+  color@5.0.3:
+    dependencies:
+      color-convert: 3.1.3
+      color-string: 2.1.4
+
   colorette@2.0.20: {}
 
+  combined-stream@1.0.8:
+    dependencies:
+      delayed-stream: 1.0.0
+
+  commander@14.0.3: {}
+
   commander@2.20.3: {}
 
+  commander@9.5.0: {}
+
+  compress-commons@7.0.1:
+    dependencies:
+      crc-32: 1.2.2
+      crc32-stream: 7.0.1
+      is-stream: 4.0.1
+      normalize-path: 3.0.0
+      readable-stream: 4.7.0
+
+  concat-map@0.0.1: {}
+
   confbox@0.1.8: {}
 
   consola@3.4.2: {}
 
+  content-disposition@1.1.0: {}
+
+  content-type@1.0.5: {}
+
+  content-type@2.1.0: {}
+
+  convert-source-map@2.0.0: {}
+
+  cookie-signature@1.2.2: {}
+
+  cookie@0.7.2: {}
+
+  core-util-is@1.0.3: {}
+
+  crc-32@1.2.2: {}
+
+  crc32-stream@7.0.1:
+    dependencies:
+      crc-32: 1.2.2
+      readable-stream: 4.7.0
+
+  create-wdio@9.32.0(@types/node@22.20.4):
+    dependencies:
+      chalk: 5.6.2
+      commander: 14.0.3
+      cross-spawn: 7.0.6
+      ejs: 3.1.10
+      execa: 9.6.1
+      import-meta-resolve: 4.2.0
+      inquirer: 12.11.1(@types/node@22.20.4)
+      normalize-package-data: 7.0.1
+      read-pkg-up: 10.1.0
+      recursive-readdir: 2.2.3
+      semver: 7.7.4
+      type-fest: 4.41.0
+      yargs: 17.7.3
+    transitivePeerDependencies:
+      - '@types/node'
+
+  cross-env@10.1.0:
+    dependencies:
+      '@epic-web/invariant': 1.0.0
+      cross-spawn: 7.0.6
+
   cross-spawn@7.0.6:
     dependencies:
       path-key: 3.1.1
       shebang-command: 2.0.0
       which: 2.0.2
 
+  css-select@5.2.2:
+    dependencies:
+      boolbase: 1.0.0
+      css-what: 6.2.2
+      domhandler: 5.0.3
+      domutils: 3.2.2
+      nth-check: 2.1.1
+
+  css-shorthand-properties@1.1.2: {}
+
   css-tree@3.2.1:
     dependencies:
       mdn-data: 2.27.1
       source-map-js: 1.2.1
 
-  debug@4.4.3:
+  css-value@0.0.1: {}
+
+  css-what@6.2.2: {}
+
+  data-uri-to-buffer@6.0.2: {}
+
+  debug@2.6.9(supports-color@8.1.1):
+    dependencies:
+      ms: 2.0.0
+    optionalDependencies:
+      supports-color: 8.1.1
+
+  debug@3.1.0(supports-color@8.1.1):
+    dependencies:
+      ms: 2.0.0
+    optionalDependencies:
+      supports-color: 8.1.1
+
+  debug@3.2.7(supports-color@8.1.1):
     dependencies:
       ms: 2.1.3
+    optionalDependencies:
+      supports-color: 8.1.1
+
+  debug@4.4.3(supports-color@8.1.1):
+    dependencies:
+      ms: 2.1.3
+    optionalDependencies:
+      supports-color: 8.1.1
+
+  decamelize@4.0.0: {}
+
+  decamelize@6.0.1: {}
+
+  deep-eql@5.0.2: {}
 
   deep-is@0.1.4: {}
 
+  deepmerge-ts@8.0.2: {}
+
   deepmerge@4.3.1: {}
 
+  defaults@1.0.4:
+    dependencies:
+      clone: 1.0.4
+
   defu@6.1.6: {}
 
+  degenerator@5.0.1:
+    dependencies:
+      ast-types: 0.13.4
+      escodegen: 2.1.0
+      esprima: 4.0.1
+
+  delayed-stream@1.0.0: {}
+
+  depd@2.0.0: {}
+
   destr@2.0.5: {}
 
   detect-libc@2.1.2: {}
 
+  detect-node@2.1.0:
+    optional: true
+
   devalue@5.9.4: {}
 
+  diff@5.2.2: {}
+
+  diff@8.0.4: {}
+
+  diff@9.0.0: {}
+
+  dom-serializer@2.0.0:
+    dependencies:
+      domelementtype: 2.3.0
+      domhandler: 5.0.3
+      entities: 4.5.0
+
+  domelementtype@2.3.0: {}
+
+  domhandler@5.0.3:
+    dependencies:
+      domelementtype: 2.3.0
+
+  domutils@3.2.2:
+    dependencies:
+      dom-serializer: 2.0.0
+      domelementtype: 2.3.0
+      domhandler: 5.0.3
+
+  dotenv@17.4.2: {}
+
+  dunder-proto@1.0.1:
+    dependencies:
+      call-bind-apply-helpers: 1.0.2
+      es-errors: 1.3.0
+      gopd: 1.2.0
+
   duplexer@0.1.2: {}
 
+  eastasianwidth@0.2.0: {}
+
+  easy-table@1.2.0:
+    dependencies:
+      ansi-regex: 5.0.1
+    optionalDependencies:
+      wcwidth: 1.0.1
+
+  edge-paths@3.0.5:
+    dependencies:
+      '@types/which': 2.0.2
+      which: 2.0.2
+
+  edgedriver@6.3.1(supports-color@8.1.1):
+    dependencies:
+      '@wdio/logger': 9.29.1
+      '@zip.js/zip.js': 2.18.2
+      decamelize: 6.0.1
+      edge-paths: 3.0.5
+      http-proxy-agent: 7.0.2(supports-color@8.1.1)
+      https-proxy-agent: 7.0.6(supports-color@8.1.1)
+      which: 6.0.1
+    transitivePeerDependencies:
+      - supports-color
+
+  ee-first@1.1.1: {}
+
+  ejs@3.1.10:
+    dependencies:
+      jake: 10.9.4
+
+  emoji-regex@10.6.0: {}
+
+  emoji-regex@8.0.0: {}
+
+  emoji-regex@9.2.2: {}
+
+  enabled@2.0.0: {}
+
+  encodeurl@2.0.0: {}
+
+  encoding-sniffer@0.2.1:
+    dependencies:
+      iconv-lite: 0.6.3
+      whatwg-encoding: 3.1.1
+
+  end-of-stream@1.4.5:
+    dependencies:
+      once: 1.4.0
+
+  entities@4.5.0: {}
+
+  entities@6.0.1: {}
+
+  entities@7.0.1: {}
+
+  error-ex@1.3.4:
+    dependencies:
+      is-arrayish: 0.2.1
+
+  es-define-property@1.0.1: {}
+
+  es-errors@1.3.0: {}
+
+  es-object-atoms@1.1.2:
+    dependencies:
+      es-errors: 1.3.0
+
+  es-set-tostringtag@2.1.0:
+    dependencies:
+      es-errors: 1.3.0
+      get-intrinsic: 1.3.0
+      has-tostringtag: 1.0.2
+      hasown: 2.0.2
+
   esbuild@0.28.1:
     optionalDependencies:
       '@esbuild/aix-ppc64': 0.28.1
@@ -2934,13 +6983,26 @@ snapshots:
       '@esbuild/win32-arm64': 0.28.1
       '@esbuild/win32-ia32': 0.28.1
       '@esbuild/win32-x64': 0.28.1
-    optional: true
+
+  escalade@3.2.0: {}
+
+  escape-html@1.0.3: {}
+
+  escape-string-regexp@2.0.0: {}
 
   escape-string-regexp@4.0.0: {}
 
-  eslint-config-prettier@10.1.8(eslint@10.4.0(jiti@2.6.1)):
+  escodegen@2.1.0:
     dependencies:
-      eslint: 10.4.0(jiti@2.6.1)
+      esprima: 4.0.1
+      estraverse: 5.3.0
+      esutils: 2.0.3
+    optionalDependencies:
+      source-map: 0.6.1
+
+  eslint-config-prettier@10.1.8(eslint@10.4.0(jiti@2.6.1)(supports-color@8.1.1)):
+    dependencies:
+      eslint: 10.4.0(jiti@2.6.1)(supports-color@8.1.1)
 
   eslint-plugin-security@4.0.1:
     dependencies:
@@ -2957,11 +7019,11 @@ snapshots:
 
   eslint-visitor-keys@5.0.1: {}
 
-  eslint@10.4.0(jiti@2.6.1):
+  eslint@10.4.0(jiti@2.6.1)(supports-color@8.1.1):
     dependencies:
-      '@eslint-community/eslint-utils': 4.9.1(eslint@10.4.0(jiti@2.6.1))
+      '@eslint-community/eslint-utils': 4.9.1(eslint@10.4.0(jiti@2.6.1)(supports-color@8.1.1))
       '@eslint-community/regexpp': 4.12.2
-      '@eslint/config-array': 0.23.5
+      '@eslint/config-array': 0.23.5(supports-color@8.1.1)
       '@eslint/config-helpers': 0.6.0
       '@eslint/core': 1.2.1
       '@eslint/plugin-kit': 0.7.1
@@ -2971,7 +7033,7 @@ snapshots:
       '@types/estree': 1.0.9
       ajv: 6.14.0
       cross-spawn: 7.0.6
-      debug: 4.4.3
+      debug: 4.4.3(supports-color@8.1.1)
       escape-string-regexp: 4.0.0
       eslint-scope: 9.1.2
       eslint-visitor-keys: 5.0.1
@@ -3002,6 +7064,8 @@ snapshots:
       acorn-jsx: 5.3.2(acorn@8.16.0)
       eslint-visitor-keys: 5.0.1
 
+  esprima@4.0.1: {}
+
   esquery@1.7.0:
     dependencies:
       estraverse: 5.3.0
@@ -3026,90 +7090,593 @@ snapshots:
 
   esutils@2.0.3: {}
 
+  etag@1.8.1: {}
+
+  event-target-shim@5.0.1: {}
+
+  events-universal@1.0.1:
+    dependencies:
+      bare-events: 2.9.2
+    transitivePeerDependencies:
+      - bare-abort-controller
+
+  events@3.3.0: {}
+
+  execa@9.6.1:
+    dependencies:
+      '@sindresorhus/merge-streams': 4.0.0
+      cross-spawn: 7.0.6
+      figures: 6.1.0
+      get-stream: 9.0.1
+      human-signals: 8.0.1
+      is-plain-obj: 4.1.0
+      is-stream: 4.0.1
+      npm-run-path: 6.0.0
+      pretty-ms: 9.3.1
+      signal-exit: 4.1.0
+      strip-final-newline: 4.0.0
+      yoctocolors: 2.2.0
+
+  exit-hook@4.0.0: {}
+
+  expect-webdriverio@6.1.0(@wdio/globals@9.31.3)(@wdio/logger@9.29.1)(webdriverio@9.32.0(supports-color@8.1.1)):
+    dependencies:
+      '@vitest/snapshot': 4.1.11
+      '@wdio/globals': 9.31.3(expect-webdriverio@6.1.0)(webdriverio@9.32.0(supports-color@8.1.1))
+      '@wdio/logger': 9.29.1
+      deep-eql: 5.0.2
+      expect: 30.5.2
+      jest-matcher-utils: 30.5.2
+      webdriverio: 9.32.0(supports-color@8.1.1)
+
+  expect@30.5.2:
+    dependencies:
+      '@jest/expect-utils': 30.5.2
+      '@jest/get-type': 30.5.0
+      jest-matcher-utils: 30.5.2
+      jest-message-util: 30.5.1
+      jest-mock: 30.5.2
+      jest-util: 30.5.1
+
+  express@5.2.1(supports-color@8.1.1):
+    dependencies:
+      accepts: 2.0.0
+      body-parser: 2.3.0(supports-color@8.1.1)
+      content-disposition: 1.1.0
+      content-type: 1.0.5
+      cookie: 0.7.2
+      cookie-signature: 1.2.2
+      debug: 4.4.3(supports-color@8.1.1)
+      depd: 2.0.0
+      encodeurl: 2.0.0
+      escape-html: 1.0.3
+      etag: 1.8.1
+      finalhandler: 2.1.1(supports-color@8.1.1)
+      fresh: 2.0.0
+      http-errors: 2.0.1
+      merge-descriptors: 2.0.0
+      mime-types: 3.0.2
+      on-finished: 2.4.1
+      once: 1.4.0
+      parseurl: 1.3.3
+      proxy-addr: 2.0.8
+      qs: 6.16.0
+      range-parser: 1.3.0
+      router: 2.2.0(supports-color@8.1.1)
+      send: 1.2.1(supports-color@8.1.1)
+      serve-static: 2.2.1(supports-color@8.1.1)
+      statuses: 2.0.2
+      type-is: 2.1.0
+      vary: 1.1.2
+    transitivePeerDependencies:
+      - supports-color
+
+  extract-zip@2.0.1(supports-color@8.1.1):
+    dependencies:
+      debug: 4.4.3(supports-color@8.1.1)
+      get-stream: 5.2.0
+      yauzl: 2.10.0
+    optionalDependencies:
+      '@types/yauzl': 2.10.3
+    transitivePeerDependencies:
+      - supports-color
+
+  fast-deep-equal@2.0.1: {}
+
   fast-deep-equal@3.1.3: {}
 
+  fast-fifo@1.3.2: {}
+
   fast-json-stable-stringify@2.1.0: {}
 
   fast-levenshtein@2.0.6: {}
 
+  fast-uri@3.1.8: {}
+
+  fastest-levenshtein@1.0.16: {}
+
+  fd-slicer@1.1.0:
+    dependencies:
+      pend: 1.2.0
+
   fdir@6.5.0(picomatch@4.0.4):
     optionalDependencies:
       picomatch: 4.0.4
 
+  fecha@4.2.3: {}
+
+  figures@6.1.0:
+    dependencies:
+      is-unicode-supported: 2.1.0
+
   file-entry-cache@8.0.0:
     dependencies:
       flat-cache: 4.0.1
 
+  filelist@1.0.6:
+    dependencies:
+      minimatch: 5.1.9
+
+  fill-range@7.1.1:
+    dependencies:
+      to-regex-range: 5.0.1
+
+  finalhandler@2.1.1(supports-color@8.1.1):
+    dependencies:
+      debug: 4.4.3(supports-color@8.1.1)
+      encodeurl: 2.0.0
+      escape-html: 1.0.3
+      on-finished: 2.4.1
+      parseurl: 1.3.3
+      statuses: 2.0.2
+    transitivePeerDependencies:
+      - supports-color
+
   find-up@5.0.0:
     dependencies:
       locate-path: 6.0.0
       path-exists: 4.0.0
 
+  find-up@6.3.0:
+    dependencies:
+      locate-path: 7.2.0
+      path-exists: 5.0.0
+
   flat-cache@4.0.1:
     dependencies:
       flatted: 3.4.2
       keyv: 4.5.4
 
+  flat@5.0.2: {}
+
   flatted@3.4.2: {}
 
+  fn.name@1.1.0: {}
+
+  follow-redirects@1.16.0(debug@4.4.3(supports-color@8.1.1)):
+    optionalDependencies:
+      debug: 4.4.3(supports-color@8.1.1)
+
+  foreground-child@3.3.1:
+    dependencies:
+      cross-spawn: 7.0.6
+      signal-exit: 4.1.0
+
+  form-data@4.0.6:
+    dependencies:
+      asynckit: 0.4.0
+      combined-stream: 1.0.8
+      es-set-tostringtag: 2.1.0
+      hasown: 2.0.4
+      mime-types: 2.1.35
+
+  forwarded@0.2.0: {}
+
+  fresh@0.5.2: {}
+
+  fresh@2.0.0: {}
+
+  fs.realpath@1.0.0: {}
+
   fsevents@2.3.3:
     optional: true
 
+  ftp-response-parser@1.0.1:
+    dependencies:
+      readable-stream: 1.1.14
+
   function-bind@1.1.2: {}
 
+  geckodriver@6.1.1(supports-color@8.1.1):
+    dependencies:
+      '@wdio/logger': 9.29.1
+      '@zip.js/zip.js': 2.18.2
+      decamelize: 6.0.1
+      http-proxy-agent: 7.0.2(supports-color@8.1.1)
+      https-proxy-agent: 7.0.6(supports-color@8.1.1)
+      modern-tar: 0.7.7
+    transitivePeerDependencies:
+      - supports-color
+
+  get-caller-file@2.0.5: {}
+
+  get-east-asian-width@1.7.0: {}
+
+  get-intrinsic@1.3.0:
+    dependencies:
+      call-bind-apply-helpers: 1.0.2
+      es-define-property: 1.0.1
+      es-errors: 1.3.0
+      es-object-atoms: 1.1.2
+      function-bind: 1.1.2
+      get-proto: 1.0.1
+      gopd: 1.2.0
+      has-symbols: 1.1.0
+      hasown: 2.0.2
+      math-intrinsics: 1.1.0
+
+  get-port@7.2.0: {}
+
+  get-proto@1.0.1:
+    dependencies:
+      dunder-proto: 1.0.1
+      es-object-atoms: 1.1.2
+
+  get-stream@5.2.0:
+    dependencies:
+      pump: 3.0.4
+
+  get-stream@9.0.1:
+    dependencies:
+      '@sec-ant/readable-stream': 0.4.1
+      is-stream: 4.0.1
+
+  get-uri@6.0.5(supports-color@8.1.1):
+    dependencies:
+      basic-ftp: 5.3.1
+      data-uri-to-buffer: 6.0.2
+      debug: 4.4.3(supports-color@8.1.1)
+    transitivePeerDependencies:
+      - supports-color
+
+  glob-parent@5.1.2:
+    dependencies:
+      is-glob: 4.0.3
+
   glob-parent@6.0.2:
     dependencies:
       is-glob: 4.0.3
 
+  glob@10.5.0:
+    dependencies:
+      foreground-child: 3.3.1
+      jackspeak: 3.4.3
+      minimatch: 9.0.9
+      minipass: 7.1.3
+      package-json-from-dist: 1.0.1
+      path-scurry: 1.11.1
+
+  glob@13.0.6:
+    dependencies:
+      minimatch: 10.2.4
+      minipass: 7.1.3
+      path-scurry: 2.0.2
+
+  glob@8.1.0:
+    dependencies:
+      fs.realpath: 1.0.0
+      inflight: 1.0.6
+      inherits: 2.0.4
+      minimatch: 5.1.9
+      once: 1.4.0
+
+  gopd@1.2.0: {}
+
+  graceful-fs@4.2.11: {}
+
+  grapheme-splitter@1.0.4: {}
+
   gzip-size@6.0.0:
     dependencies:
       duplexer: 0.1.2
 
+  handle-thing@2.0.1:
+    optional: true
+
+  has-flag@4.0.0: {}
+
+  has-symbols@1.1.0: {}
+
+  has-tostringtag@1.0.2:
+    dependencies:
+      has-symbols: 1.1.0
+
   hasown@2.0.2:
     dependencies:
       function-bind: 1.1.2
 
+  hasown@2.0.4:
+    dependencies:
+      function-bind: 1.1.2
+
+  he@1.2.0: {}
+
+  hosted-git-info@7.0.2:
+    dependencies:
+      lru-cache: 10.4.3
+
+  hosted-git-info@8.1.0:
+    dependencies:
+      lru-cache: 10.4.3
+
+  hosted-git-info@9.0.3:
+    dependencies:
+      lru-cache: 11.5.3
+
+  hpack.js@2.1.6:
+    dependencies:
+      inherits: 2.0.4
+      obuf: 1.1.2
+      readable-stream: 2.3.8
+      wbuf: 1.7.3
+    optional: true
+
+  htmlfy@0.8.1: {}
+
+  htmlparser2@10.1.0:
+    dependencies:
+      domelementtype: 2.3.0
+      domhandler: 5.0.3
+      domutils: 3.2.2
+      entities: 7.0.1
+
+  http-deceiver@1.2.7:
+    optional: true
+
+  http-errors@2.0.1:
+    dependencies:
+      depd: 2.0.0
+      inherits: 2.0.4
+      setprototypeof: 1.2.0
+      statuses: 2.0.2
+      toidentifier: 1.0.1
+
+  http-proxy-agent@7.0.2(supports-color@8.1.1):
+    dependencies:
+      agent-base: 7.1.4
+      debug: 4.4.3(supports-color@8.1.1)
+    transitivePeerDependencies:
+      - supports-color
+
+  http-status-codes@2.3.0: {}
+
+  https-proxy-agent@5.0.1(supports-color@8.1.1):
+    dependencies:
+      agent-base: 6.0.2(supports-color@8.1.1)
+      debug: 4.4.3(supports-color@8.1.1)
+    transitivePeerDependencies:
+      - supports-color
+
+  https-proxy-agent@7.0.6(supports-color@8.1.1):
+    dependencies:
+      agent-base: 7.1.4
+      debug: 4.4.3(supports-color@8.1.1)
+    transitivePeerDependencies:
+      - supports-color
+
+  human-signals@8.0.1: {}
+
+  iconv-lite@0.6.3:
+    dependencies:
+      safer-buffer: 2.1.2
+
+  iconv-lite@0.7.3:
+    dependencies:
+      safer-buffer: 2.1.2
+
+  ieee754@1.2.1: {}
+
   ignore@5.3.2: {}
 
   ignore@7.0.5: {}
 
+  immediate@3.0.6: {}
+
+  import-meta-resolve@4.2.0: {}
+
   imurmurhash@0.1.4: {}
 
+  inflight@1.0.6:
+    dependencies:
+      once: 1.4.0
+      wrappy: 1.0.2
+
+  inherits@2.0.4: {}
+
+  inquirer@12.11.1(@types/node@22.20.4):
+    dependencies:
+      '@inquirer/ansi': 1.0.2
+      '@inquirer/core': 10.3.2(@types/node@22.20.4)
+      '@inquirer/prompts': 7.10.1(@types/node@22.20.4)
+      '@inquirer/type': 3.0.10(@types/node@22.20.4)
+      mute-stream: 2.0.0
+      run-async: 4.0.6
+      rxjs: 7.8.2
+    optionalDependencies:
+      '@types/node': 22.20.4
+
+  ip-address@10.7.2: {}
+
+  ipaddr.js@1.9.1: {}
+
+  is-arrayish@0.2.1: {}
+
+  is-binary-path@2.1.0:
+    dependencies:
+      binary-extensions: 2.3.0
+
   is-core-module@2.16.1:
     dependencies:
       hasown: 2.0.2
 
   is-extglob@2.1.1: {}
 
+  is-fullwidth-code-point@3.0.0: {}
+
   is-glob@4.0.3:
     dependencies:
       is-extglob: 2.1.1
 
+  is-interactive@1.0.0: {}
+
   is-module@1.0.0: {}
 
+  is-number@7.0.0: {}
+
+  is-plain-obj@2.1.0: {}
+
+  is-plain-obj@4.1.0: {}
+
+  is-promise@4.0.0: {}
+
   is-reference@3.0.3:
     dependencies:
       '@types/estree': 1.0.9
 
+  is-stream@2.0.1: {}
+
+  is-stream@4.0.1: {}
+
+  is-unicode-supported@0.1.0: {}
+
+  is-unicode-supported@2.1.0: {}
+
+  isarray@0.0.1: {}
+
+  isarray@1.0.0: {}
+
   isexe@2.0.0: {}
 
+  isexe@4.0.0: {}
+
+  jackspeak@3.4.3:
+    dependencies:
+      '@isaacs/cliui': 8.0.2
+    optionalDependencies:
+      '@pkgjs/parseargs': 0.11.0
+
+  jake@10.9.4:
+    dependencies:
+      async: 3.2.6
+      filelist: 1.0.6
+      picocolors: 1.1.1
+
+  jest-diff@30.5.2:
+    dependencies:
+      '@jest/diff-sequences': 30.5.0
+      '@jest/get-type': 30.5.0
+      chalk: 4.1.2
+      pretty-format: 30.5.1
+
+  jest-matcher-utils@30.5.2:
+    dependencies:
+      '@jest/get-type': 30.5.0
+      chalk: 4.1.2
+      jest-diff: 30.5.2
+      pretty-format: 30.5.1
+
+  jest-message-util@30.5.1:
+    dependencies:
+      '@babel/code-frame': 7.29.7
+      '@jest/types': 30.5.1
+      '@types/stack-utils': 2.0.3
+      chalk: 4.1.2
+      graceful-fs: 4.2.11
+      jest-util: 30.5.1
+      picomatch: 4.0.4
+      pretty-format: 30.5.1
+      slash: 3.0.0
+      stack-utils: 2.0.6
+
+  jest-mock@30.5.2:
+    dependencies:
+      '@jest/expect-utils': 30.5.2
+      '@jest/types': 30.5.1
+      '@types/node': 22.20.4
+      jest-util: 30.5.1
+
+  jest-regex-util@30.5.0: {}
+
+  jest-util@30.5.1:
+    dependencies:
+      '@jest/types': 30.5.1
+      '@types/node': 22.20.4
+      chalk: 4.1.2
+      ci-info: 4.4.0
+      graceful-fs: 4.2.11
+      picomatch: 4.0.4
+
   jiti@2.6.1: {}
 
+  js-tokens@4.0.0: {}
+
+  js-yaml@4.3.2:
+    dependencies:
+      argparse: 2.0.1
+
+  jsftp@2.1.3(supports-color@8.1.1):
+    dependencies:
+      debug: 3.2.7(supports-color@8.1.1)
+      ftp-response-parser: 1.0.1
+      once: 1.4.0
+      parse-listing: 1.1.3
+      stream-combiner: 0.2.2
+      unorm: 1.6.0
+    transitivePeerDependencies:
+      - supports-color
+
   json-buffer@3.0.1: {}
 
+  json-parse-even-better-errors@3.0.2: {}
+
   json-schema-traverse@0.4.1: {}
 
+  json-schema-traverse@1.0.0: {}
+
+  json-schema@0.4.0: {}
+
   json-stable-stringify-without-jsonify@1.0.1: {}
 
+  jszip@3.10.2:
+    dependencies:
+      lie: 3.3.0
+      pako: 1.0.11
+      readable-stream: 2.3.8
+      setimmediate: 1.0.5
+
   keyv@4.5.4:
     dependencies:
       json-buffer: 3.0.1
 
+  klaw@4.1.0: {}
+
+  kleur@4.1.5: {}
+
+  kuler@2.0.0: {}
+
+  lazystream@1.0.1:
+    dependencies:
+      readable-stream: 2.3.8
+
   levn@0.4.1:
     dependencies:
       prelude-ls: 1.2.1
       type-check: 0.4.0
 
+  lie@3.3.0:
+    dependencies:
+      immediate: 3.0.6
+
   lightningcss-android-arm64@1.32.0:
     optional: true
 
@@ -3159,12 +7726,64 @@ snapshots:
       lightningcss-win32-arm64-msvc: 1.32.0
       lightningcss-win32-x64-msvc: 1.32.0
 
+  lilconfig@3.1.3: {}
+
+  lines-and-columns@2.0.4: {}
+
+  locate-app@2.5.0:
+    dependencies:
+      '@promptbook/utils': 0.69.5
+      type-fest: 4.26.0
+      userhome: 1.0.1
+
   locate-character@3.0.0: {}
 
   locate-path@6.0.0:
     dependencies:
       p-locate: 5.0.0
 
+  locate-path@7.2.0:
+    dependencies:
+      p-locate: 6.0.0
+
+  lockfile@1.0.4:
+    dependencies:
+      signal-exit: 3.0.7
+
+  lodash.clonedeep@4.5.0: {}
+
+  lodash.flattendeep@4.4.0: {}
+
+  lodash.pickby@4.6.0: {}
+
+  lodash.union@4.6.0: {}
+
+  lodash.zip@4.2.0: {}
+
+  log-symbols@4.1.0:
+    dependencies:
+      chalk: 4.1.2
+      is-unicode-supported: 0.1.0
+
+  logform@2.7.0:
+    dependencies:
+      '@colors/colors': 1.6.0
+      '@types/triple-beam': 1.3.5
+      fecha: 4.2.3
+      ms: 2.1.3
+      safe-stable-stringify: 2.5.0
+      triple-beam: 1.4.1
+
+  loglevel-plugin-prefix@0.8.4: {}
+
+  loglevel@1.9.2: {}
+
+  lru-cache@10.4.3: {}
+
+  lru-cache@11.5.3: {}
+
+  lru-cache@7.18.3: {}
+
   magic-regexp@0.10.0:
     dependencies:
       estree-walker: 3.0.3
@@ -3179,12 +7798,62 @@ snapshots:
     dependencies:
       '@jridgewell/sourcemap-codec': 1.5.5
 
+  math-intrinsics@1.1.0: {}
+
   mdn-data@2.27.1: {}
 
+  media-typer@1.1.1: {}
+
+  merge-descriptors@2.0.0: {}
+
+  method-override@3.0.0(supports-color@8.1.1):
+    dependencies:
+      debug: 3.1.0(supports-color@8.1.1)
+      methods: 1.1.2
+      parseurl: 1.3.3
+      vary: 1.1.2
+    transitivePeerDependencies:
+      - supports-color
+
+  methods@1.1.2: {}
+
+  mime-db@1.52.0: {}
+
+  mime-db@1.54.0: {}
+
+  mime-types@2.1.35:
+    dependencies:
+      mime-db: 1.52.0
+
+  mime-types@3.0.2:
+    dependencies:
+      mime-db: 1.54.0
+
+  mimic-fn@2.1.0: {}
+
+  minimalistic-assert@1.0.1:
+    optional: true
+
   minimatch@10.2.4:
     dependencies:
       brace-expansion: 5.0.9
 
+  minimatch@3.1.5:
+    dependencies:
+      brace-expansion: 1.1.21
+
+  minimatch@5.1.9:
+    dependencies:
+      brace-expansion: 2.1.7
+
+  minimatch@9.0.9:
+    dependencies:
+      brace-expansion: 2.1.7
+
+  minipass@7.1.3: {}
+
+  mitt@3.0.1: {}
+
   mlly@1.8.2:
     dependencies:
       acorn: 8.16.0
@@ -3192,16 +7861,95 @@ snapshots:
       pkg-types: 1.3.1
       ufo: 1.6.3
 
+  mocha@10.8.2:
+    dependencies:
+      ansi-colors: 4.1.3
+      browser-stdout: 1.3.1
+      chokidar: 3.6.0
+      debug: 4.4.3(supports-color@8.1.1)
+      diff: 5.2.2
+      escape-string-regexp: 4.0.0
+      find-up: 5.0.0
+      glob: 8.1.0
+      he: 1.2.0
+      js-yaml: 4.3.2
+      log-symbols: 4.1.0
+      minimatch: 5.1.9
+      ms: 2.1.3
+      serialize-javascript: 7.0.5
+      strip-json-comments: 3.1.1
+      supports-color: 8.1.1
+      workerpool: 6.5.1
+      yargs: 16.2.2
+      yargs-parser: 20.2.9
+      yargs-unparser: 2.0.0
+
+  modern-tar@0.7.7: {}
+
+  morgan@1.12.1(supports-color@8.1.1):
+    dependencies:
+      basic-auth: 2.0.1
+      debug: 2.6.9(supports-color@8.1.1)
+      depd: 2.0.0
+      on-finished: 2.4.1
+      on-headers: 1.1.0
+    transitivePeerDependencies:
+      - supports-color
+
   mrmime@2.0.1: {}
 
+  ms@2.0.0: {}
+
   ms@2.1.3: {}
 
+  mute-stream@2.0.0: {}
+
   nanoid@3.3.18: {}
 
   natural-compare@1.4.0: {}
 
+  negotiator@1.1.0:
+    dependencies:
+      content-type: 2.1.0
+
+  netmask@2.1.1: {}
+
   node-fetch-native@1.6.7: {}
 
+  normalize-package-data@6.0.2:
+    dependencies:
+      hosted-git-info: 7.0.2
+      semver: 7.7.4
+      validate-npm-package-license: 3.0.4
+
+  normalize-package-data@7.0.1:
+    dependencies:
+      hosted-git-info: 8.1.0
+      semver: 7.7.4
+      validate-npm-package-license: 3.0.4
+
+  normalize-package-data@8.0.0:
+    dependencies:
+      hosted-git-info: 9.0.3
+      semver: 7.7.4
+      validate-npm-package-license: 3.0.4
+
+  normalize-path@3.0.0: {}
+
+  npm-run-path@6.0.0:
+    dependencies:
+      path-key: 4.0.0
+      unicorn-magic: 0.3.0
+
+  nth-check@2.1.1:
+    dependencies:
+      boolbase: 1.0.0
+
+  object-inspect@1.13.4: {}
+
+  obuf@1.1.2:
+    optional: true
+
   obug@2.1.1: {}
 
   ofetch@1.5.1:
@@ -3210,6 +7958,24 @@ snapshots:
       node-fetch-native: 1.6.7
       ufo: 1.6.3
 
+  on-finished@2.4.1:
+    dependencies:
+      ee-first: 1.1.1
+
+  on-headers@1.1.0: {}
+
+  once@1.4.0:
+    dependencies:
+      wrappy: 1.0.2
+
+  one-time@1.0.0:
+    dependencies:
+      fn.name: 1.1.0
+
+  onetime@5.1.2:
+    dependencies:
+      mimic-fn: 2.1.0
+
   optionator@0.9.4:
     dependencies:
       deep-is: 0.1.4
@@ -3219,7 +7985,19 @@ snapshots:
       type-check: 0.4.0
       word-wrap: 1.2.5
 
-  oxc-parser@0.115.0(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0):
+  ora@5.4.1:
+    dependencies:
+      bl: 4.1.0
+      chalk: 4.1.2
+      cli-cursor: 3.1.0
+      cli-spinners: 2.9.2
+      is-interactive: 1.0.0
+      is-unicode-supported: 0.1.0
+      log-symbols: 4.1.0
+      strip-ansi: 6.0.1
+      wcwidth: 1.0.1
+
+  oxc-parser@0.115.0(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3):
     dependencies:
       '@oxc-project/types': 0.115.0
     optionalDependencies:
@@ -3239,7 +8017,7 @@ snapshots:
       '@oxc-parser/binding-linux-x64-gnu': 0.115.0
       '@oxc-parser/binding-linux-x64-musl': 0.115.0
       '@oxc-parser/binding-openharmony-arm64': 0.115.0
-      '@oxc-parser/binding-wasm32-wasi': 0.115.0(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)
+      '@oxc-parser/binding-wasm32-wasi': 0.115.0(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3)
       '@oxc-parser/binding-win32-arm64-msvc': 0.115.0
       '@oxc-parser/binding-win32-ia32-msvc': 0.115.0
       '@oxc-parser/binding-win32-x64-msvc': 0.115.0
@@ -3247,33 +8025,114 @@ snapshots:
       - '@emnapi/core'
       - '@emnapi/runtime'
 
-  oxc-walker@0.7.0(oxc-parser@0.115.0(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)):
+  oxc-walker@0.7.0(oxc-parser@0.115.0(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3)):
     dependencies:
       magic-regexp: 0.10.0
-      oxc-parser: 0.115.0(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)
+      oxc-parser: 0.115.0(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3)
 
   p-limit@3.1.0:
     dependencies:
       yocto-queue: 0.1.0
 
+  p-limit@4.0.0:
+    dependencies:
+      yocto-queue: 1.2.2
+
+  p-limit@7.3.3:
+    dependencies:
+      yocto-queue: 1.2.2
+
   p-locate@5.0.0:
     dependencies:
       p-limit: 3.1.0
 
+  p-locate@6.0.0:
+    dependencies:
+      p-limit: 4.0.0
+
+  pac-proxy-agent@7.2.0(supports-color@8.1.1):
+    dependencies:
+      '@tootallnate/quickjs-emscripten': 0.23.0
+      agent-base: 7.1.4
+      debug: 4.4.3(supports-color@8.1.1)
+      get-uri: 6.0.5(supports-color@8.1.1)
+      http-proxy-agent: 7.0.2(supports-color@8.1.1)
+      https-proxy-agent: 7.0.6(supports-color@8.1.1)
+      pac-resolver: 7.0.1
+      socks-proxy-agent: 8.0.5(supports-color@8.1.1)
+    transitivePeerDependencies:
+      - supports-color
+
+  pac-resolver@7.0.1:
+    dependencies:
+      degenerator: 5.0.1
+      netmask: 2.1.1
+
+  package-json-from-dist@1.0.1: {}
+
   package-manager-detector@1.6.0: {}
 
+  pako@1.0.11: {}
+
+  parse-json@7.1.1:
+    dependencies:
+      '@babel/code-frame': 7.29.7
+      error-ex: 1.3.4
+      json-parse-even-better-errors: 3.0.2
+      lines-and-columns: 2.0.4
+      type-fest: 3.13.1
+
+  parse-listing@1.1.3: {}
+
+  parse-ms@4.0.0: {}
+
+  parse5-htmlparser2-tree-adapter@7.1.0:
+    dependencies:
+      domhandler: 5.0.3
+      parse5: 7.3.0
+
+  parse5-parser-stream@7.1.2:
+    dependencies:
+      parse5: 7.3.0
+
+  parse5@7.3.0:
+    dependencies:
+      entities: 6.0.1
+
+  parseurl@1.3.3: {}
+
   path-exists@4.0.0: {}
 
+  path-exists@5.0.0: {}
+
   path-key@3.1.1: {}
 
+  path-key@4.0.0: {}
+
   path-parse@1.0.7: {}
 
+  path-scurry@1.11.1:
+    dependencies:
+      lru-cache: 10.4.3
+      minipass: 7.1.3
+
+  path-scurry@2.0.2:
+    dependencies:
+      lru-cache: 11.5.3
+      minipass: 7.1.3
+
+  path-to-regexp@8.4.2: {}
+
   pathe@2.0.3: {}
 
+  pend@1.2.0: {}
+
   perfect-debounce@2.1.0: {}
 
   picocolors@1.1.1: {}
 
+  picomatch@2.3.2: {}
+
   picomatch@4.0.4: {}
 
   pkg-types@1.3.1:
@@ -3282,6 +8141,13 @@ snapshots:
       mlly: 1.8.2
       pathe: 2.0.3
 
+  plist@4.0.0:
+    dependencies:
+      '@xmldom/xmldom': 0.9.12
+      xmlbuilder: 15.1.1
+
+  pluralize@8.0.0: {}
+
   postcss@8.5.23:
     dependencies:
       nanoid: 3.3.18
@@ -3292,20 +8158,159 @@ snapshots:
 
   prettier@3.8.3: {}
 
+  pretty-format@30.5.1:
+    dependencies:
+      '@jest/react-is-18': react-is@18.3.1
+      '@jest/react-is-19': react-is@19.3.0
+      '@jest/schemas': 30.5.0
+      ansi-styles: 5.2.0
+
+  pretty-ms@9.3.1:
+    dependencies:
+      parse-ms: 4.0.0
+
+  process-nextick-args@2.0.1: {}
+
+  process@0.11.10: {}
+
+  progress@2.0.3: {}
+
+  proxy-addr@2.0.8:
+    dependencies:
+      forwarded: 0.2.0
+      ipaddr.js: 1.9.1
+
+  proxy-agent@6.5.0(supports-color@8.1.1):
+    dependencies:
+      agent-base: 7.1.4
+      debug: 4.4.3(supports-color@8.1.1)
+      http-proxy-agent: 7.0.2(supports-color@8.1.1)
+      https-proxy-agent: 7.0.6(supports-color@8.1.1)
+      lru-cache: 7.18.3
+      pac-proxy-agent: 7.2.0(supports-color@8.1.1)
+      proxy-from-env: 1.1.0
+      socks-proxy-agent: 8.0.5(supports-color@8.1.1)
+    transitivePeerDependencies:
+      - supports-color
+
+  proxy-from-env@1.1.0: {}
+
+  proxy-from-env@2.1.0: {}
+
+  pump@3.0.4:
+    dependencies:
+      end-of-stream: 1.4.5
+      once: 1.4.0
+
   punycode@2.3.1: {}
 
+  qs@6.16.0:
+    dependencies:
+      es-define-property: 1.0.1
+      side-channel: 1.1.1
+
   quansync@1.0.0: {}
 
+  query-selector-shadow-dom@1.0.1: {}
+
+  range-parser@1.3.0: {}
+
+  raw-body@3.0.2:
+    dependencies:
+      bytes: 3.1.2
+      http-errors: 2.0.1
+      iconv-lite: 0.7.3
+      unpipe: 1.0.0
+
+  react-is@18.3.1: {}
+
+  react-is@19.3.0: {}
+
+  read-pkg-up@10.1.0:
+    dependencies:
+      find-up: 6.3.0
+      read-pkg: 8.1.0
+      type-fest: 4.41.0
+
+  read-pkg@8.1.0:
+    dependencies:
+      '@types/normalize-package-data': 2.4.4
+      normalize-package-data: 6.0.2
+      parse-json: 7.1.1
+      type-fest: 4.41.0
+
+  readable-stream@1.1.14:
+    dependencies:
+      core-util-is: 1.0.3
+      inherits: 2.0.4
+      isarray: 0.0.1
+      string_decoder: 0.10.31
+
+  readable-stream@2.3.8:
+    dependencies:
+      core-util-is: 1.0.3
+      inherits: 2.0.4
+      isarray: 1.0.0
+      process-nextick-args: 2.0.1
+      safe-buffer: 5.1.2
+      string_decoder: 1.1.1
+      util-deprecate: 1.0.2
+
+  readable-stream@3.6.2:
+    dependencies:
+      inherits: 2.0.4
+      string_decoder: 1.3.0
+      util-deprecate: 1.0.2
+
+  readable-stream@4.7.0:
+    dependencies:
+      abort-controller: 3.0.0
+      buffer: 6.0.3
+      events: 3.3.0
+      process: 0.11.10
+      string_decoder: 1.3.0
+
+  readdir-glob@3.0.0:
+    dependencies:
+      minimatch: 10.2.4
+
+  readdirp@3.6.0:
+    dependencies:
+      picomatch: 2.3.2
+
+  readdirp@4.1.2: {}
+
   readdirp@5.0.0: {}
 
+  recursive-readdir@2.2.3:
+    dependencies:
+      minimatch: 3.1.5
+
   regexp-tree@0.1.27: {}
 
+  require-directory@2.1.1: {}
+
+  require-from-string@2.0.2: {}
+
   resolve@1.22.11:
     dependencies:
       is-core-module: 2.16.1
       path-parse: 1.0.7
       supports-preserve-symlinks-flag: 1.0.0
 
+  resq@1.11.0:
+    dependencies:
+      fast-deep-equal: 2.0.1
+
+  restore-cursor@3.1.0:
+    dependencies:
+      onetime: 5.1.2
+      signal-exit: 3.0.7
+
+  ret@0.5.0: {}
+
+  rgb2hex@0.2.5: {}
+
   rolldown@1.0.3:
     dependencies:
       '@oxc-project/types': 0.133.0
@@ -3359,28 +8364,193 @@ snapshots:
       '@rollup/rollup-win32-x64-msvc': 4.63.1
       fsevents: 2.3.3
 
+  router@2.2.0(supports-color@8.1.1):
+    dependencies:
+      debug: 4.4.3(supports-color@8.1.1)
+      depd: 2.0.0
+      is-promise: 4.0.0
+      parseurl: 1.3.3
+      path-to-regexp: 8.4.2
+    transitivePeerDependencies:
+      - supports-color
+
+  run-async@4.0.6: {}
+
+  rxjs@7.8.2:
+    dependencies:
+      tslib: 2.8.1
+
+  safaridriver@1.0.1: {}
+
+  safe-buffer@5.1.2: {}
+
+  safe-buffer@5.2.1: {}
+
+  safe-regex2@5.1.1:
+    dependencies:
+      ret: 0.5.0
+
   safe-regex@2.1.1:
     dependencies:
       regexp-tree: 0.1.27
 
+  safe-stable-stringify@2.5.0: {}
+
+  safer-buffer@2.1.2: {}
+
+  sanitize-filename@1.6.4:
+    dependencies:
+      truncate-utf8-bytes: 1.0.2
+
+  select-hose@2.0.0:
+    optional: true
+
   semver@7.7.4: {}
 
+  semver@7.8.5: {}
+
+  send@1.2.1(supports-color@8.1.1):
+    dependencies:
+      debug: 4.4.3(supports-color@8.1.1)
+      encodeurl: 2.0.0
+      escape-html: 1.0.3
+      etag: 1.8.1
+      fresh: 2.0.0
+      http-errors: 2.0.1
+      mime-types: 3.0.2
+      ms: 2.1.3
+      on-finished: 2.4.1
+      range-parser: 1.3.0
+      statuses: 2.0.2
+    transitivePeerDependencies:
+      - supports-color
+
+  serialize-error@12.0.0:
+    dependencies:
+      type-fest: 4.41.0
+
   serialize-javascript@7.0.5: {}
 
+  serve-favicon@2.5.1:
+    dependencies:
+      etag: 1.8.1
+      fresh: 0.5.2
+      ms: 2.1.3
+      parseurl: 1.3.3
+      safe-buffer: 5.2.1
+
+  serve-static@2.2.1(supports-color@8.1.1):
+    dependencies:
+      encodeurl: 2.0.0
+      escape-html: 1.0.3
+      parseurl: 1.3.3
+      send: 1.2.1(supports-color@8.1.1)
+    transitivePeerDependencies:
+      - supports-color
+
+  setimmediate@1.0.5: {}
+
+  setprototypeof@1.2.0: {}
+
+  sharp@0.35.4(@types/node@22.20.4):
+    dependencies:
+      '@img/colour': 1.1.0
+      detect-libc: 2.1.2
+      semver: 7.8.5
+    optionalDependencies:
+      '@img/sharp-darwin-arm64': 0.35.4
+      '@img/sharp-darwin-x64': 0.35.4
+      '@img/sharp-freebsd-wasm32': 0.35.4
+      '@img/sharp-libvips-darwin-arm64': 1.3.3
+      '@img/sharp-libvips-darwin-x64': 1.3.3
+      '@img/sharp-libvips-linux-arm': 1.3.3
+      '@img/sharp-libvips-linux-arm64': 1.3.3
+      '@img/sharp-libvips-linux-ppc64': 1.3.3
+      '@img/sharp-libvips-linux-riscv64': 1.3.3
+      '@img/sharp-libvips-linux-s390x': 1.3.3
+      '@img/sharp-libvips-linux-x64': 1.3.3
+      '@img/sharp-libvips-linuxmusl-arm64': 1.3.3
+      '@img/sharp-libvips-linuxmusl-x64': 1.3.3
+      '@img/sharp-linux-arm': 0.35.4
+      '@img/sharp-linux-arm64': 0.35.4
+      '@img/sharp-linux-ppc64': 0.35.4
+      '@img/sharp-linux-riscv64': 0.35.4
+      '@img/sharp-linux-s390x': 0.35.4
+      '@img/sharp-linux-x64': 0.35.4
+      '@img/sharp-linuxmusl-arm64': 0.35.4
+      '@img/sharp-linuxmusl-x64': 0.35.4
+      '@img/sharp-webcontainers-wasm32': 0.35.4
+      '@img/sharp-win32-arm64': 0.35.4
+      '@img/sharp-win32-ia32': 0.35.4
+      '@img/sharp-win32-x64': 0.35.4
+      '@types/node': 22.20.4
+    optional: true
+
   shebang-command@2.0.0:
     dependencies:
       shebang-regex: 3.0.0
 
   shebang-regex@3.0.0: {}
 
+  shell-quote@1.10.0: {}
+
+  side-channel-list@1.0.1:
+    dependencies:
+      es-errors: 1.3.0
+      object-inspect: 1.13.4
+
+  side-channel-map@1.0.1:
+    dependencies:
+      call-bound: 1.0.4
+      es-errors: 1.3.0
+      get-intrinsic: 1.3.0
+      object-inspect: 1.13.4
+
+  side-channel-weakmap@1.0.2:
+    dependencies:
+      call-bound: 1.0.4
+      es-errors: 1.3.0
+      get-intrinsic: 1.3.0
+      object-inspect: 1.13.4
+      side-channel-map: 1.0.1
+
+  side-channel@1.1.1:
+    dependencies:
+      es-errors: 1.3.0
+      object-inspect: 1.13.4
+      side-channel-list: 1.0.1
+      side-channel-map: 1.0.1
+      side-channel-weakmap: 1.0.2
+
+  signal-exit@3.0.7: {}
+
+  signal-exit@4.1.0: {}
+
   sirv@3.0.2:
     dependencies:
       '@polka/url': 1.0.0-next.29
       mrmime: 2.0.1
       totalist: 3.0.1
 
+  slash@3.0.0: {}
+
+  smart-buffer@4.2.0: {}
+
   smob@1.6.1: {}
 
+  socks-proxy-agent@8.0.5(supports-color@8.1.1):
+    dependencies:
+      agent-base: 7.1.4
+      debug: 4.4.3(supports-color@8.1.1)
+      socks: 2.8.10
+    transitivePeerDependencies:
+      - supports-color
+
+  socks@2.8.10:
+    dependencies:
+      ip-address: 10.7.2
+      smart-buffer: 4.2.0
+
   source-map-js@1.2.1: {}
 
   source-map-support@0.5.21:
@@ -3390,6 +8560,124 @@ snapshots:
 
   source-map@0.6.1: {}
 
+  spacetrim@0.11.59: {}
+
+  spdx-correct@3.2.0:
+    dependencies:
+      spdx-expression-parse: 3.0.1
+      spdx-license-ids: 3.0.24
+
+  spdx-exceptions@2.5.0: {}
+
+  spdx-expression-parse@3.0.1:
+    dependencies:
+      spdx-exceptions: 2.5.0
+      spdx-license-ids: 3.0.24
+
+  spdx-license-ids@3.0.24: {}
+
+  spdy-transport@3.0.0(supports-color@8.1.1):
+    dependencies:
+      debug: 4.4.3(supports-color@8.1.1)
+      detect-node: 2.1.0
+      hpack.js: 2.1.6
+      obuf: 1.1.2
+      readable-stream: 3.6.2
+      wbuf: 1.7.3
+    transitivePeerDependencies:
+      - supports-color
+    optional: true
+
+  spdy@4.0.2(supports-color@8.1.1):
+    dependencies:
+      debug: 4.4.3(supports-color@8.1.1)
+      handle-thing: 2.0.1
+      http-deceiver: 1.2.7
+      select-hose: 2.0.0
+      spdy-transport: 3.0.0(supports-color@8.1.1)
+    transitivePeerDependencies:
+      - supports-color
+    optional: true
+
+  split2@4.2.0: {}
+
+  stack-trace@0.0.10: {}
+
+  stack-utils@2.0.6:
+    dependencies:
+      escape-string-regexp: 2.0.0
+
+  statuses@2.0.2: {}
+
+  stream-buffers@3.0.3: {}
+
+  stream-combiner@0.2.2:
+    dependencies:
+      duplexer: 0.1.2
+      through: 2.3.8
+
+  streamx@2.28.1:
+    dependencies:
+      events-universal: 1.0.1
+      fast-fifo: 1.3.2
+      text-decoder: 1.2.7
+    transitivePeerDependencies:
+      - bare-abort-controller
+      - react-native-b4a
+
+  string-width@4.2.3:
+    dependencies:
+      emoji-regex: 8.0.0
+      is-fullwidth-code-point: 3.0.0
+      strip-ansi: 6.0.1
+
+  string-width@5.1.2:
+    dependencies:
+      eastasianwidth: 0.2.0
+      emoji-regex: 9.2.2
+      strip-ansi: 7.2.0
+
+  string-width@7.2.0:
+    dependencies:
+      emoji-regex: 10.6.0
+      get-east-asian-width: 1.7.0
+      strip-ansi: 7.2.0
+
+  string-width@8.3.0:
+    dependencies:
+      get-east-asian-width: 1.7.0
+      strip-ansi: 7.2.0
+
+  string_decoder@0.10.31: {}
+
+  string_decoder@1.1.1:
+    dependencies:
+      safe-buffer: 5.1.2
+
+  string_decoder@1.3.0:
+    dependencies:
+      safe-buffer: 5.2.1
+
+  strip-ansi@6.0.1:
+    dependencies:
+      ansi-regex: 5.0.1
+
+  strip-ansi@7.2.0:
+    dependencies:
+      ansi-regex: 6.3.0
+
+  strip-final-newline@4.0.0: {}
+
+  strip-json-comments@3.1.1: {}
+
+  supports-color@7.2.0:
+    dependencies:
+      has-flag: 4.0.0
+
+  supports-color@8.1.1:
+    dependencies:
+      has-flag: 4.0.0
+
   supports-preserve-symlinks-flag@1.0.0: {}
 
   svelte@5.55.7(@typescript-eslint/types@8.70.0):
@@ -3413,6 +8701,42 @@ snapshots:
     transitivePeerDependencies:
       - '@typescript-eslint/types'
 
+  tagged-tag@1.0.0: {}
+
+  tar-fs@3.1.3:
+    dependencies:
+      pump: 3.0.4
+      tar-stream: 3.2.1
+    optionalDependencies:
+      bare-fs: 4.8.2
+      bare-path: 3.1.2
+    transitivePeerDependencies:
+      - bare-abort-controller
+      - bare-buffer
+      - react-native-b4a
+
+  tar-stream@3.2.1:
+    dependencies:
+      b4a: 1.9.0
+      bare-fs: 4.8.2
+      fast-fifo: 1.3.2
+      streamx: 2.28.1
+    transitivePeerDependencies:
+      - bare-abort-controller
+      - bare-buffer
+      - react-native-b4a
+
+  teen_process@4.2.1:
+    dependencies:
+      shell-quote: 1.10.0
+
+  teex@1.0.1:
+    dependencies:
+      streamx: 2.28.1
+    transitivePeerDependencies:
+      - bare-abort-controller
+      - react-native-b4a
+
   terser@5.46.1:
     dependencies:
       '@jridgewell/source-map': 0.3.11
@@ -3420,6 +8744,16 @@ snapshots:
       commander: 2.20.3
       source-map-support: 0.5.21
 
+  text-decoder@1.2.7:
+    dependencies:
+      b4a: 1.9.0
+    transitivePeerDependencies:
+      - react-native-b4a
+
+  text-hex@1.0.0: {}
+
+  through@2.3.8: {}
+
   tinyexec@1.0.4: {}
 
   tinyglobby@0.2.17:
@@ -3427,8 +8761,26 @@ snapshots:
       fdir: 6.5.0(picomatch@4.0.4)
       picomatch: 4.0.4
 
+  tinyrainbow@2.0.0: {}
+
+  tinyrainbow@3.1.1: {}
+
+  to-regex-range@5.0.1:
+    dependencies:
+      is-number: 7.0.0
+
+  toidentifier@1.0.1: {}
+
   totalist@3.0.1: {}
 
+  tree-kill@1.2.2: {}
+
+  triple-beam@1.4.1: {}
+
+  truncate-utf8-bytes@1.0.2:
+    dependencies:
+      utf8-byte-length: 1.0.5
+
   ts-api-utils@2.5.0(typescript@6.0.3):
     dependencies:
       typescript: 6.0.3
@@ -3440,21 +8792,36 @@ snapshots:
       esbuild: 0.28.1
     optionalDependencies:
       fsevents: 2.3.3
-    optional: true
 
   type-check@0.4.0:
     dependencies:
       prelude-ls: 1.2.1
 
+  type-fest@3.13.1: {}
+
+  type-fest@4.26.0: {}
+
+  type-fest@4.41.0: {}
+
+  type-fest@5.10.0:
+    dependencies:
+      tagged-tag: 1.0.0
+
+  type-is@2.1.0:
+    dependencies:
+      content-type: 2.1.0
+      media-typer: 1.1.1
+      mime-types: 3.0.2
+
   type-level-regexp@0.1.17: {}
 
-  typescript-eslint@8.70.0(eslint@10.4.0(jiti@2.6.1))(typescript@6.0.3):
+  typescript-eslint@8.70.0(eslint@10.4.0(jiti@2.6.1)(supports-color@8.1.1))(supports-color@8.1.1)(typescript@6.0.3):
     dependencies:
-      '@typescript-eslint/eslint-plugin': 8.70.0(@typescript-eslint/parser@8.70.0(eslint@10.4.0(jiti@2.6.1))(typescript@6.0.3))(eslint@10.4.0(jiti@2.6.1))(typescript@6.0.3)
-      '@typescript-eslint/parser': 8.70.0(eslint@10.4.0(jiti@2.6.1))(typescript@6.0.3)
-      '@typescript-eslint/typescript-estree': 8.70.0(typescript@6.0.3)
-      '@typescript-eslint/utils': 8.70.0(eslint@10.4.0(jiti@2.6.1))(typescript@6.0.3)
-      eslint: 10.4.0(jiti@2.6.1)
+      '@typescript-eslint/eslint-plugin': 8.70.0(@typescript-eslint/parser@8.70.0(eslint@10.4.0(jiti@2.6.1)(supports-color@8.1.1))(supports-color@8.1.1)(typescript@6.0.3))(eslint@10.4.0(jiti@2.6.1)(supports-color@8.1.1))(supports-color@8.1.1)(typescript@6.0.3)
+      '@typescript-eslint/parser': 8.70.0(eslint@10.4.0(jiti@2.6.1)(supports-color@8.1.1))(supports-color@8.1.1)(typescript@6.0.3)
+      '@typescript-eslint/typescript-estree': 8.70.0(supports-color@8.1.1)(typescript@6.0.3)
+      '@typescript-eslint/utils': 8.70.0(eslint@10.4.0(jiti@2.6.1)(supports-color@8.1.1))(supports-color@8.1.1)(typescript@6.0.3)
+      eslint: 10.4.0(jiti@2.6.1)(supports-color@8.1.1)
       typescript: 6.0.3
     transitivePeerDependencies:
       - supports-color
@@ -3476,7 +8843,15 @@ snapshots:
       quansync: 1.0.0
       unconfig-core: 7.5.0
 
-  unocss@66.6.7(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)(vite@8.0.16(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1)):
+  undici-types@6.21.0: {}
+
+  undici@6.29.0: {}
+
+  undici@7.30.0: {}
+
+  unicorn-magic@0.3.0: {}
+
+  unocss@66.6.7(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3)(vite@8.0.16(@types/node@22.20.4)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1)(yaml@2.9.1)):
     dependencies:
       '@unocss/cli': 66.6.7
       '@unocss/core': 66.6.7
@@ -3490,16 +8865,20 @@ snapshots:
       '@unocss/preset-wind': 66.6.7
       '@unocss/preset-wind3': 66.6.7
       '@unocss/preset-wind4': 66.6.7
-      '@unocss/transformer-attributify-jsx': 66.6.7(@emnapi/core@1.10.0)(@emnapi/runtime@1.10.0)
+      '@unocss/transformer-attributify-jsx': 66.6.7(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.3)
       '@unocss/transformer-compile-class': 66.6.7
       '@unocss/transformer-directives': 66.6.7
       '@unocss/transformer-variant-group': 66.6.7
-      '@unocss/vite': 66.6.7(vite@8.0.16(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1))
+      '@unocss/vite': 66.6.7(vite@8.0.16(@types/node@22.20.4)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1)(yaml@2.9.1))
     transitivePeerDependencies:
       - '@emnapi/core'
       - '@emnapi/runtime'
       - vite
 
+  unorm@1.6.0: {}
+
+  unpipe@1.0.0: {}
+
   unplugin-utils@0.3.1:
     dependencies:
       pathe: 2.0.3
@@ -3516,7 +8895,24 @@ snapshots:
     dependencies:
       punycode: 2.3.1
 
-  vite@8.0.16(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1):
+  urlpattern-polyfill@10.1.0: {}
+
+  userhome@1.0.1: {}
+
+  utf8-byte-length@1.0.5: {}
+
+  util-deprecate@1.0.2: {}
+
+  uuid@14.0.2: {}
+
+  validate-npm-package-license@3.0.4:
+    dependencies:
+      spdx-correct: 3.2.0
+      spdx-expression-parse: 3.0.1
+
+  vary@1.1.2: {}
+
+  vite@8.0.16(@types/node@22.20.4)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1)(yaml@2.9.1):
     dependencies:
       lightningcss: 1.32.0
       picomatch: 4.0.4
@@ -3524,24 +8920,230 @@ snapshots:
       rolldown: 1.0.3
       tinyglobby: 0.2.17
     optionalDependencies:
+      '@types/node': 22.20.4
       esbuild: 0.28.1
       fsevents: 2.3.3
       jiti: 2.6.1
       terser: 5.46.1
       tsx: 4.23.1
+      yaml: 2.9.1
 
-  vitefu@1.1.2(vite@8.0.16(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1)):
+  vitefu@1.1.2(vite@8.0.16(@types/node@22.20.4)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1)(yaml@2.9.1)):
     optionalDependencies:
-      vite: 8.0.16(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1)
+      vite: 8.0.16(@types/node@22.20.4)(esbuild@0.28.1)(jiti@2.6.1)(terser@5.46.1)(tsx@4.23.1)(yaml@2.9.1)
+
+  wait-port@1.1.0(supports-color@8.1.1):
+    dependencies:
+      chalk: 4.1.2
+      commander: 9.5.0
+      debug: 4.4.3(supports-color@8.1.1)
+    transitivePeerDependencies:
+      - supports-color
+
+  wbuf@1.7.3:
+    dependencies:
+      minimalistic-assert: 1.0.1
+    optional: true
+
+  wcwidth@1.0.1:
+    dependencies:
+      defaults: 1.0.4
+
+  webdriver@9.32.0(supports-color@8.1.1):
+    dependencies:
+      '@types/node': 20.19.43
+      '@types/ws': 8.18.1
+      '@wdio/config': 9.32.0(supports-color@8.1.1)
+      '@wdio/logger': 9.29.1
+      '@wdio/protocols': 9.31.5
+      '@wdio/types': 9.32.0
+      '@wdio/utils': 9.32.0(supports-color@8.1.1)
+      deepmerge-ts: 8.0.2
+      https-proxy-agent: 7.0.6(supports-color@8.1.1)
+      undici: 6.29.0
+      ws: 8.21.3
+    transitivePeerDependencies:
+      - bare-abort-controller
+      - bare-buffer
+      - bufferutil
+      - react-native-b4a
+      - supports-color
+      - utf-8-validate
+
+  webdriverio@9.32.0(supports-color@8.1.1):
+    dependencies:
+      '@types/node': 20.19.43
+      '@types/sinonjs__fake-timers': 8.1.5
+      '@wdio/config': 9.32.0(supports-color@8.1.1)
+      '@wdio/logger': 9.29.1
+      '@wdio/protocols': 9.31.5
+      '@wdio/repl': 9.16.2
+      '@wdio/types': 9.32.0
+      '@wdio/utils': 9.32.0(supports-color@8.1.1)
+      archiver: 8.0.0
+      aria-query: 5.3.1
+      cheerio: 1.2.0
+      css-shorthand-properties: 1.1.2
+      css-value: 0.0.1
+      grapheme-splitter: 1.0.4
+      htmlfy: 0.8.1
+      is-plain-obj: 4.1.0
+      jszip: 3.10.2
+      lodash.clonedeep: 4.5.0
+      lodash.zip: 4.2.0
+      query-selector-shadow-dom: 1.0.1
+      resq: 1.11.0
+      rgb2hex: 0.2.5
+      serialize-error: 12.0.0
+      urlpattern-polyfill: 10.1.0
+      webdriver: 9.32.0(supports-color@8.1.1)
+    transitivePeerDependencies:
+      - bare-abort-controller
+      - bare-buffer
+      - bufferutil
+      - react-native-b4a
+      - supports-color
+      - utf-8-validate
 
   webpack-virtual-modules@0.6.2: {}
 
+  whatwg-encoding@3.1.1:
+    dependencies:
+      iconv-lite: 0.6.3
+
+  whatwg-mimetype@4.0.0: {}
+
   which@2.0.2:
     dependencies:
       isexe: 2.0.0
 
+  which@6.0.1:
+    dependencies:
+      isexe: 4.0.0
+
+  winston-transport@4.9.0:
+    dependencies:
+      logform: 2.7.0
+      readable-stream: 3.6.2
+      triple-beam: 1.4.1
+
+  winston@3.19.0:
+    dependencies:
+      '@colors/colors': 1.6.1
+      '@dabh/diagnostics': 2.0.9
+      async: 3.2.6
+      is-stream: 2.0.1
+      logform: 2.7.0
+      one-time: 1.0.0
+      readable-stream: 3.6.2
+      safe-stable-stringify: 2.5.0
+      stack-trace: 0.0.10
+      triple-beam: 1.4.1
+      winston-transport: 4.9.0
+
   word-wrap@1.2.5: {}
 
+  workerpool@6.5.1: {}
+
+  wrap-ansi@6.2.0:
+    dependencies:
+      ansi-styles: 4.3.0
+      string-width: 4.2.3
+      strip-ansi: 6.0.1
+
+  wrap-ansi@7.0.0:
+    dependencies:
+      ansi-styles: 4.3.0
+      string-width: 4.2.3
+      strip-ansi: 6.0.1
+
+  wrap-ansi@8.1.0:
+    dependencies:
+      ansi-styles: 6.2.3
+      string-width: 5.1.2
+      strip-ansi: 7.2.0
+
+  wrap-ansi@9.0.2:
+    dependencies:
+      ansi-styles: 6.2.3
+      string-width: 7.2.0
+      strip-ansi: 7.2.0
+
+  wrappy@1.0.2: {}
+
+  ws@8.21.3: {}
+
+  xmlbuilder@15.1.1: {}
+
+  xpath@0.0.34: {}
+
+  y18n@5.0.8: {}
+
+  yaml@2.9.1: {}
+
+  yargs-parser@20.2.9: {}
+
+  yargs-parser@21.1.1: {}
+
+  yargs-parser@22.0.0: {}
+
+  yargs-unparser@2.0.0:
+    dependencies:
+      camelcase: 6.3.0
+      decamelize: 4.0.0
+      flat: 5.0.2
+      is-plain-obj: 2.1.0
+
+  yargs@16.2.2:
+    dependencies:
+      cliui: 7.0.4
+      escalade: 3.2.0
+      get-caller-file: 2.0.5
+      require-directory: 2.1.1
+      string-width: 4.2.3
+      y18n: 5.0.8
+      yargs-parser: 20.2.9
+
+  yargs@17.7.3:
+    dependencies:
+      cliui: 8.0.1
+      escalade: 3.2.0
+      get-caller-file: 2.0.5
+      require-directory: 2.1.1
+      string-width: 4.2.3
+      y18n: 5.0.8
+      yargs-parser: 21.1.1
+
+  yargs@18.1.0:
+    dependencies:
+      cliui: 9.0.1
+      escalade: 3.2.0
+      get-caller-file: 2.0.5
+      string-width: 8.3.0
+      y18n: 5.0.8
+      yargs-parser: 22.0.0
+
+  yauzl@2.10.0:
+    dependencies:
+      buffer-crc32: 0.2.13
+      fd-slicer: 1.1.0
+
+  yauzl@3.4.0:
+    dependencies:
+      pend: 1.2.0
+
   yocto-queue@0.1.0: {}
 
+  yocto-queue@1.2.2: {}
+
+  yoctocolors-cjs@2.1.3: {}
+
+  yoctocolors@2.2.0: {}
+
   zimmerframe@1.1.4: {}
+
+  zip-stream@7.0.5:
+    dependencies:
+      compress-commons: 7.0.1
+      normalize-path: 3.0.0
+      readable-stream: 4.7.0
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 2d5696085..9efa7386e 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -1,10 +1,19 @@
 packages:
+  - packages/*
   - plugins/*
   - plugins/*/examples/*
   - examples/*
 
 allowBuilds:
+  # appium's postinstall only auto-installs drivers for global installs; ours
+  # are regular devDependencies of packages/api-e2e, which appium picks up on
+  # its own, so there is nothing for it to do
+  appium: false
+  # transitive deps of @wdio/utils; their postinstall downloads browser drivers
+  # the desktop e2e suite never uses (it drives the app via tauri-driver)
+  edgedriver: false
   esbuild: true
+  geckodriver: false
 
 minimumReleaseAgeExclude:
   - '@tauri-apps/cli-darwin-arm64@3.0.0-alpha.0'
@@ -22,4 +31,15 @@ minimumReleaseAgeExclude:
   - '@tauri-apps/api@3.0.0-alpha.1'
 
 overrides:
+  # mocha (via @wdio/mocha-framework) pins a vulnerable range
+  serialize-javascript@<7.0.5: ^7.0.5
   devalue@<5.9.1: ^5.9.1
+  morgan@<1.12.0: ^1.12.0
+
+auditConfig:
+  ignoreGhsas:
+    # extract-zip symlink path traversal; no patched release exists (latest is
+    # still 2.0.1). Reached via @wdio/utils > @puppeteer/browsers, which only
+    # unpacks the browser drivers we never download (see allowBuilds above)
+    - GHSA-jmr9-qjv8-65gv
+    - GHSA-7pqw-9j4j-h8q3