From cfbec0b757b4c8bef01a09f2375a062e63548b7f Mon Sep 17 00:00:00 2001
From: Andre Padez <andre.padez@gmail.com>
Date: Wed, 19 Aug 2026 06:29:34 +0100
Subject: [PATCH] plugins: a splash is part of a plugin, like its icon
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

assets/splash.png is discovered by presence, published by the same copy that
already took the whole assets directory, and carried on DiscoveredPlugin beside
icon.

The platform draws no splash — a plugin has no launch. It is carried because the
plugin repository is where a product's artwork lives now, and the phone app that
fronts the same product needs somewhere to read it from that is not a designer's
folder. The pair is the point: the icon is a reduction of the splash's world,
and keeping them together is what stops them drifting.

Publishing no longer gates on the icon alone, which left a plugin shipping only
a splash serving nothing.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 src/servers/app-store/assets.ts          |  3 +++
 src/servers/plugins/discover.ts          |  3 +++
 src/servers/plugins/install.ts           |  4 +++-
 src/servers/plugins/manifest.ts          | 12 ++++++++++++
 src/servers/plugins/public-paths.test.ts |  1 +
 5 files changed, 22 insertions(+), 1 deletion(-)

diff --git a/src/servers/app-store/assets.ts b/src/servers/app-store/assets.ts
index 1839fd58..4ef1a281 100644
--- a/src/servers/app-store/assets.ts
+++ b/src/servers/app-store/assets.ts
@@ -32,6 +32,9 @@ export const assetPublicDir = (sidecarId: string): string => join(process.cwd(),
 /** The URL a manifest should use for a shipped icon. */
 export const iconUrl = (sidecarId: string): string => `/plugins/${sidecarId}/icon.png`;
 
+/** The URL for a shipped splash. Published by the same copy — `publishAssets` takes the whole dir. */
+export const splashUrl = (sidecarId: string): string => `/plugins/${sidecarId}/splash.png`;
+
 const exists = async (path: string): Promise<boolean> => {
   try {
     await stat(path);
diff --git a/src/servers/plugins/discover.ts b/src/servers/plugins/discover.ts
index fbdee19c..2ca3ad92 100644
--- a/src/servers/plugins/discover.ts
+++ b/src/servers/plugins/discover.ts
@@ -106,6 +106,9 @@ export async function loadPlugin(dir: string, appName: string): Promise<Discover
     // could only ever name a glyph the platform had already bundled, which is a ceiling a plugin
     // from a marketplace has no way to see coming.
     icon: fileOrNull(join(dir, 'assets', 'icon.png')),
+    // The launch scene, carried for whoever fronts this plugin on a phone. Same rule as the icon:
+    // the file's presence is the declaration, and there is no manifest field to keep in step.
+    splash: fileOrNull(join(dir, 'assets', 'splash.png')),
     api: fileOrNull(join(dir, 'api', 'router.ts')),
     schema: fileOrNull(join(dir, 'db', 'schema.ts')),
     sidecar: findSidecar(dir),
diff --git a/src/servers/plugins/install.ts b/src/servers/plugins/install.ts
index 9fcb2ca5..a63b4f49 100644
--- a/src/servers/plugins/install.ts
+++ b/src/servers/plugins/install.ts
@@ -320,7 +320,9 @@ export async function installPlugin(
     // obvious: the `/plugins/*` route is dynamic precisely so a first install does not show a broken
     // image until the next restart, and uninstall is allowed to delete these because they are copies of
     // files that still exist in the plugin's source.
-    if (plugin.icon) {
+    // Either asset is reason enough to publish — the copy takes the whole directory, and gating on
+    // the icon alone left a plugin that ships only a splash serving nothing.
+    if (plugin.icon || plugin.splash) {
       await publishAssets(appName, plugin.dir);
       await step(steps, onStep, `assets: published to /plugins/${appName}/`);
     }
diff --git a/src/servers/plugins/manifest.ts b/src/servers/plugins/manifest.ts
index 3d2a6ab7..2d1c4ca8 100644
--- a/src/servers/plugins/manifest.ts
+++ b/src/servers/plugins/manifest.ts
@@ -240,6 +240,18 @@ export type DiscoveredPlugin = {
    * naming one outside that set silently renders a neutral box.
    */
   icon: string | null;
+  /**
+   * `assets/splash.png` — the app's launch scene, published beside the icon.
+   *
+   * The platform itself draws no splash; a plugin has no launch. It is carried because the plugin
+   * repository is where a product's artwork lives now, and the mobile app that fronts the same
+   * product needs somewhere to read it from that is not a designer's folder. Presence is the
+   * declaration, exactly as with the icon.
+   *
+   * The pair is deliberate: `assets/icon.png` is a reduction of `assets/splash.png`'s world, and
+   * keeping them in one place is what stops the two drifting apart.
+   */
+  splash: string | null;
   /** `api/router.ts` — a backend router, mounted at `mountPrefix`. */
   api: string | null;
   /** `db/schema.ts` — tables, pushed on install. Every name must be prefixed `<appName>_`. */
diff --git a/src/servers/plugins/public-paths.test.ts b/src/servers/plugins/public-paths.test.ts
index 9ac0a57a..437f589d 100644
--- a/src/servers/plugins/public-paths.test.ts
+++ b/src/servers/plugins/public-paths.test.ts
@@ -30,6 +30,7 @@ const plugin = (appName: string, unauthenticatedPaths?: string[], publisher = 'o
       ...(unauthenticatedPaths ? { unauthenticatedPaths } : {}),
     },
     icon: null,
+    splash: null,
     api: null,
     schema: null,
     sidecar: null,