Struct App 

pub struct App { /* private fields */ }

Builder for a fude application.

Implementations

impl App

pub fn new(identifier: impl Into<String>) -> Self

Create a new app. identifier is a reverse-DNS string used to locate the config / data directory (e.g. "com.example.editor").

pub fn title(self, title: impl Into<String>) -> Self

pub fn assets(self, root: impl Into<PathBuf>) -> Self

Directory served as the root of asset://localhost/. Typically your Vite/webpack dist/ output.

pub fn command<F>(self, name: impl Into<String>, handler: F) -> Self

where F: Fn(&Ctx, &Value) -> Result<Value, String> + Send + Sync + 'static,

Register a custom IPC command.

pub fn with_fs_sandbox(self) -> Self

Register the built-in allow-list FS commands: allow_path, allow_dir, list_directory, read_file, read_file_binary, write_file, write_file_binary, ensure_dir.

The frontend must call allow_path / allow_dir after a native dialog selection — no file I/O is permitted until then.

pub fn with_settings(self) -> Self

Register load_settings / save_settings — persist an arbitrary JSON object at <app_config_dir>/settings.json via crate::atomic_write.

load_settings() returns the parsed object, or {} if none saved. save_settings({ settings: {...} }) writes atomically. The payload must be a JSON object; arrays / scalars are rejected.

pub fn with_shell_open(self) -> Self

Register shell_open — opens URLs (http/https/mailto) or allow-listed local file paths in the OS default application.

File-path targets require App::with_fs_sandbox and must already be in the allow-list (via a dialog or manual allow_path).

pub fn with_dialogs(self) -> Self

Register native dialog commands: dialog_open, dialog_save, dialog_ask, dialog_message.

pub fn with_pty(self, allowed_tools: &[&str]) -> Self

Register PTY commands for spawning CLI agents (e.g. claude, codex).

Registers: pty_spawn, pty_write, pty_resize, pty_kill and emits pty:data / pty:exit events.

allowed_tools is the only set of binaries that may ever be spawned; anything else is rejected. Requires App::with_fs_sandbox to have been called — the PTY cwd must live inside an allow-listed directory.

pub fn with_acp( self, adapters: Vec<AcpAdapterConfig>, client_name: impl Into<String>, client_version: impl Into<String>, ) -> Self

Register ACP (Agent Client Protocol) commands.

Registers 11 acp_* commands. Requires App::with_fs_sandbox — the agent’s fs/read_text_file / fs/write_text_file calls are intercepted and reject anything outside the user’s allow-list.

pub fn run(self) -> Result<(), Box<dyn Error>>

Block on the event loop. Returns only when the window is closed.