Tauri — Rust core, OS WebView, locked-down IPC, tiny binaries

Tauri builds a desktop (and, since v2, mobile) app from a Rust core plus the operating system's own WebView — not a bundled browser. That is the whole value proposition: ~12MB installers and 30-50MB idle RAM, versus Electron's ~180MB installers and 150-300MB because it ships Chromium + Node. You write your UI in any web framework, expose privileged work as Rust commands, and the WebView talks to Rust over a sandboxed IPC bridge.

Always target v2. Tauri 2.0 went stable in October 2024; the current line is 2.x (2.11.x as of mid-2026). v1 docs use a tauri > allowlist config that no longer exists — if you see allowlist, you are reading the wrong era. v2 also adds iOS/Android targets, so the same Rust core can ship to mobile.

This skill owns the shell: commands, IPC, the security ACL, the bundler, the updater. It does not own the Rust language itself (that is the rust skill), the web UI inside the window (the react/nextjs skills), a Chromium+Node shell (../electron/SKILL.md), or app-code hardening beyond the IPC boundary (../secure-coding/SKILL.md).