Embed HTTP server for React Native applications for Android, iOS, Mac (Catalyst), and Windows platforms. Powered by Lighttpd server, supports both new and old RN architectures.
Luna4 Enterprises Inc. — The support for Windows and Mac Catalyst systems would not happen any time soon without their interest and financial contribution. |
- Getting Started
- API Reference
- Project History and Roadmap
- Documentation for Older Library Versions (v0.6, v0.5)
- Migration from Older Versions (v0.6, v0.5) to v0.7
Note: In addition to these instructions, have a look at the example project included into the library repository.
-
CMake is required on the build host.
-
When building for Android, CMake should be installed as a part of your Android SDK (open SDK Manager, and look for CMake within the SDK Tools tab).
-
On MacOS, the
pkg-config
dependency is also needed. You can install both via Homebrew, by executing:$ brew install cmake pkg-config
IMPORTANT: Homebrew should have added
eval "$(/opt/homebrew/bin/brew shellenv)"'
command to your.zshrc
or.bashrc
. Although this works for interactive terminals, it might not work for sessions inside of other apps, such as XCode, therefore you might need to manually create symbolic links:$ sudo ln -s $(which cmake) /usr/local/bin/cmake $ sudo ln -s $(which pkg-config) /usr/local/bin/pkg-config
For details read: https://earthly.dev/blog/homebrew-on-m1, and Issue#29.
-
-
Install the package:
$ npm install --save @dr.pogodin/react-native-static-server
Note: In case you prefer to install this library from its source code (i.e. directly from its GitHub repo, or a local folder), mind that it depends on several Git sub-modules, which should be clonned and checked out by this command in the library's codebase root:
$ git submodule update --init --recursive
. Released NPM packages of the library have correct versions of the code from these sub-modules bundled into the package, thus no need to clone and check them out after installation from NPM. -
For Android:
-
In the
build.gradle
file setminSdkVersion
equal28
(SDK 28 — Android 9, released in August 2018), or larger.Note: Support of older SDKs is technically possible, but it is not a priority now.
-
-
For iOS:
- After installing the package, enter
ios
folder of the app's codebase and execute$ pod install
- After installing the package, enter
-
For Expo:
It probably works with some additional setup (see Issue#8), however at the moment we don't support it officially. If anybody wants to help with this, contributions to the documentation / codebase are welcome. -
For Mac Catalyst:
-
Disable Flipper in your app's Podfile.
-
Add Incoming Connections (Server) entitlement to the App Sandbox (
com.apple.security.network.server
entitlement). -
If you bundle inside your app the assets to serve by the server, keep in mind that in Mac Catalyst build they'll end up in a different path, compared to the regular iOS bundle (see example app):
iOS: "MainBundlePath/webroot
";
Mac Catalyst: "MainBundlePath/Content/Resources/webroot
".Also keep in mind that
Platform.OS
value equals "iOS
" both for the normal iOS and for the Mac Catalyst builds, and you should use different methods to distinguish them; for example relying on getDeviceType() method of react-native-device-info library, which returns 'Desktop' in case of Catalyst build.
-
-
For Windows:
-
Add Internet (Client & Server), Internet (Client), and Private Networks (Client & Server) capabilities to your app.
NOTE: It seems, the core server functionality is able to work without these capabilities, however some functions might be affected, and the error reporting in the current Windows implementation probably won't make it clear that something failed due to the lack of declared capabilities.
-
-
Create and run a server instance:
import { useEffect, useState } from 'react'; import { Text, View } from 'react-native'; import Server from '@dr.pogodin/react-native-static-server'; // We assume no more than one instance of this component is mounted in the App // at any given time; otherwise some additional logic will be needed to ensure // no more than a single server instance can be launched at a time. // // Also, keep in mind, the call to "server.stop()" without "await" does not // guarantee that the server has shut down immediately after that call, thus // if such component is unmounted and immediately re-mounted again, the new // server instance may fail to launch because of it. export default function ExampleComponent() { const [origin, setOrigin] = useState(''); useEffect(() => { let server = new Server({ // See further in the docs how to statically bundle assets into the App, // alernatively assets to serve might be created or downloaded during // the app's runtime. fileDir: '/path/to/static/assets/on/target/device', }); (async () => { // You can do additional async preparations here; e.g. on Android // it is a good place to extract bundled assets into an accessible // location. // Note, on unmount this hook resets "server" variable to "undefined", // thus if "undefined" the hook has unmounted while we were doing // async operations above, and we don't need to launch // the server anymore. if (server) setOrigin(await server.start()); })(); return () => { setOrigin(''); // No harm to trigger .stop() even if server has not been launched yet. server.stop(); server = undefined; } }, []); return ( <View> <Text>Hello World!</Text> <Text>Server is up at: {origin}</Text> </View> ); }
The assets to be served by the server may come to the target device in different ways, for example, they may be generated during the app's runtime, or downloaded to the device by the app from a remote location. They also may be statically bundled-in into the app's bundle at the build time, and it is this option covered in this section.
Let's assume the assets to be served by the server are located in the app's
codebase inside the folder assets/webroot
(the path relative to the codebase
root), outside android
, ios
, and windows
project folders, as we presumably want
to reuse the same assets in both projects, thus it makes sense to keep them
outside platform-specific sub-folders.
-
Android
- Inside
android/app/build.gradle
file look forandroid.sourceSets
section, or create one if it does no exist. To bundle-in our assets for server, it should look like this (note, this way we'll also bundle-in all other content of ourassets
folder, if there is anything besidewebroot
subfolder).android { sourceSets { main { assets.srcDirs = [ '../../assets' // This array may contain additional asset folders to bundle-in. // Paths in this array are relative to "build.gradle" file, and // should be comma-separated. ] } } // ... Other stuff. }
- On Android the server cannot access bundled assets as regular files, thus
before starting the server to serve them, these assets should be extracted
into a folder accessible to the server (e.g. app's document folder).
To facilitate it, this library provides extractBundledAssets() function.
You want to use it in this manner:
// TODO: To be updated, see a better code inside the example app. import { DocumentDirectoryPath, exists, unlink, } from '@dr.pogodin/react-native-fs'; import {extractBundledAssets} from '@dr.pogodin/react-native-static-server'; async function prepareAssets() { const targetWebrootPathOnDevice = `${DocumentDirectoryPath}/webroot`; // It is use-case specific, but in general if target webroot path exists // on the device, probably these assets have been extracted in a previous // app launch, and there is no need to extract them again. However, in most // locations these extracted files won't be delected automatically on // the apps's update, thus you'll need to check it and act accordingly, // which is abstracted as needsOverwrite() function in the condition. const alreadyExtracted = await exists(targetWebrootPathOnDevice); // TODO: Give an example of needsOverwrite(), relying on app version // stored in local files. Maybe we should provide with the library // an utility function which writes to disk a version fingerprint of // the app, thus allowing to detect app updates. For now, have // a look at the example project in the repo, which demonstrates more // realistic code. if (!alreadyExtracted || needsOverwrite()) { // TODO: Careful here, as on platforms different from Android we do not // need to extract assets, we also should not remove them, thus we need // a guard when entering this clean-up / re-extract block. if (alreadyExtracted) await unlink(targetWebrootPathOnDevice); // This function is a noop on other platforms than Android, thus no need // to guard against the platform. await extractBundledAssets(targetWebrootPathOnDevice, 'webroot'); } // "webroot" assets have been extracted into the target folder, which now // can be served by the server. }
- Inside
-
iOS
- Open you project's workspace in XCode. In the «Project
Navigator» panel right-click on the project name and select
«Add Files to "YOUR-PROJECT-NAME"...» (alternatively,
you can find this option in the XCode head menu under Files >
Add Files to "YOUR-PROJECT-NAME"...). In the opened menu uncheck
«Copy items if needed», then select our
webroot
folder, and press «Add» button to add "webroot" assets to the project target.
- Open you project's workspace in XCode. In the «Project
Navigator» panel right-click on the project name and select
«Add Files to "YOUR-PROJECT-NAME"...» (alternatively,
you can find this option in the XCode head menu under Files >
Add Files to "YOUR-PROJECT-NAME"...). In the opened menu uncheck
«Copy items if needed», then select our
-
Mac Catalyst
- The bundling for iOS explained above also bundles assets for Mac Catalyst; beware, however, the bundled assets end up in a slightly different location inside the bundle in this case (see details earlier in the Getting Started section).
-
Windows
- Edit
PropertySheet.props
file inside your app'swindows/YOUR_PROJECT_NAME
folder, adding the following nodes into its root<Project>
element:<ItemGroup> <_CustomResource Include="..\..\assets\webroot\**\*"> <Link>webroot\%(RecursiveDir)%(FileName)%(Extension)</Link> <DeploymentContent>true</DeploymentContent> </_CustomResource> </ItemGroup> <Target Name="_CollectCustomResources" BeforeTargets="AssignTargetPaths"> <Message Text="Adding resource: %(_CustomResource.Identity) -> %(_CustomResource.Link)" /> <ItemGroup> <None Include="@(_CustomResource)" /> </ItemGroup> </Target>
- Edit
- Server — Represents a server instance.
- constructor() — Creates a new Server instance.
- .addStateListener() — Adds state listener to the server instance.
- .removeAllStateListeners() — Removes all state listeners from this server instance.
- .removeStateListener() — Removes specified state listener from this server instance.
- .start() — Launches the server.
- .stop() — Stops the server.
- .errorLog — Holds
errorLog
configuration. - .fileDir — Holds absolute path to static assets on target device.
- .hostname — Holds the hostname used by server.
- .id — Hold unique ID of the server instance.
- .nonLocal — Holds
nonLocal
value provided to constructor(). - .origin — Holds server origin.
- .port — Holds the port used by server.
- .state — Holds the current server state.
- .stopInBackground — Holds
stopInBackground
value provided to constructor().
- extractBundledAssets() — Extracts bundled assets into a regular folder (Android-specific).
- getActiveServer() — Gets currently active, starting, or stopping server instance, if any.
- resolveAssetsPath() — Resolves relative paths for bundled assets.
- ERROR_LOG_FILE — Location of the error log file.
- STATES — Enumerates possible states of Server instance.
- UPLOADS_DIR — Location for uploads.
- WORK_DIR — Location of the working files.
- ErrorLogOptions — Options for error logging.
import Server from '@dr.pogodin/react-native-static-server';
The Server class represents individual server instances.
BEWARE: At most one server instance can be active within an app at the same time. Attempts to start a new server instance will result in the crash of that new instance. That means, although you may have multiple instances of Server class created, you should not call .start() method of an instance unless all other server instances are stopped. You may use getActiveServer() function to check if there is any active server instance in the app, including a starting or stopping instance.
const server = new Server(options: object);
Creates a new, inactive server instance. The following settings are supported
within options
argument:
-
fileDir
— string — The root path on target device from where static assets should be served. Relative paths (those not starting with/
, neitherfile:///
) are automatically prepended by the platform-dependent base path (document directory on Android, or main bundle directory on other platforms); however, emptyfileDir
value is forbidden — if you really want to serve all content from the base directory, provide it its absolute path explicitly. -
errorLog
— boolean | ErrorLogOptions — Optional. If set true (treated equivalent to{}
) the server instance will output basic server state and error logs from the Lighttpd native core into the ERROR_LOG_FILE. Passing in an ErrorLogOptions object with additional flags allows to add additional debug output from Lighttpd core into the log file. Default value is false, in which case the server instance only outputs basic server state and error logs into the OS system log; note that enabling the file logging with this option disables the logging into the system log.BEWARE: If you opt for file logging with this option, it is up to you to control and purge the ERROR_LOG_FILE as needed.
-
hostname
— string — Optional. Sets the address for server to bind to.- By default, when
nonLocal
option is false,hostname
is set equal "127.0.0.1
" — the server binds to the loopback address, and it is accessible only from within the host app. - If
nonLocal
option is true, andhostname
was not given, it is initialized with empty string, and later assigned to a library-selected non-local IP address, at the first launch of the server. - If
hostname
value is provided, the server will bind to the given address, and it will ignorenonLocal
option.
NOTE: In future we'll deprecate
nonLocal
option, and instead will use specialhostname
values to ask the library to automatically select appropriate non-local address. - By default, when
-
nonLocal
— boolean — Optional. By default, ifhostname
option was not provided, the server starts at the "127.0.0.1
" (loopback) address, and it is only accessible within the host app. With this flag set true the server will be started on an IP address also accessible from outside the app.NOTE: When
hostname
option is provided, thenonLocal
option is ignored. The plan is to deprecatenonLocal
option in future, in favour of specialhostname
values supporting the currentnonLocal
functionality. -
port
— number — Optional. The port at which to start the server. If 0 (default) an available port will be automatically selected. -
stopInBackground
— boolean — Optional.By default, the server continues to work as usual when its host app enters the background / returns to the foreground (better say, by default, it does not attempt anything special in these situations, but the host OS may kill or restrict it in the background forcefully, depending on OS and app configs).
With this flag set true, an active server will stop automatically each time the app enters the background, and then automatically launch again each time the app re-enters the foreground. Note that calling .stop() explicitly will stop the server for good — no matter
stopInBackground
value, once .stop() is called the server won't restart automatically unless you explicitly .start() it again.To faciliate debugging, when a server starts / stops automatically because of the
stopInBackground
option and app transitions between the foreground and the background; the correspondingSTARTING
andSTOPPING
messages emitted to the server state listeners (see .addStateListener()) will have theirdetails
values set equal "App entered background", and "App entered foreground" strings.
server.addStateListener(listener: StateListener): Unsubscribe;
// where StateListener and Unsubscribe signatures are:
type StateListener = (state: string, details: string, error?: Error) => void;
type UnsubscribeFunction = () => void;
Adds given state listener to the server instance. The listener will be called each time the server state changes, with the following arguments:
state
— string — The new state, one of STATES values.details
— string — Additional details about the state change, if any can be provided; an empty string otherwise.error
— Error — If server instance crashes, this will be the related error object; otherwise undefined.
This method returns "unsubscribe" function, call it to remove added listener from the server instance.
server.removeAllStateListeners()
Removes all state listeners connected to the server instance.
server.removeStateListener(listener: StateListener)
Removes given state listener
if it is connected to the server instance;
does nothing otherwise.
server.start(details?: string): Promise<string>
Starts Server instance. It returns a Promise, which resolves
to the server's origin once the server reaches ACTIVE
state, thus becomes ready to handle requests. The promise rejects
in case of start failure, i.e. if server ends up in the CRASHED
state before
becoming ACTIVE
.
This method is safe to call no matter the current state of this server instance.
If it is ACTIVE
, the method just resolves to origin right away;
if CRASHED
, it attempts a new start of the server; otherwise (STARTING
or
STOPPING
), it will wait until the server reaches one of resulting states
(ACTIVE
, CRASHED
, or INACTIVE
), then acts accordingly.
The optional details
argument, if provided, will be added to
the STARTING
message emitted to the server state change listeners
(see .addStateListener()) in the beginning of this method, if the server
launch is necessary.
BEWARE: With the current library version, at most one server instance can be
active within an app at any time. Calling .start() when another server instance
is running will result in the start failure and CRASHED
state. See also
getActiveServer().
server.stop(details?: string): Promise<>
Gracefully shuts down the server. It returns a Promise which resolve once
the server is shut down, i.e. reached INACTIVE
state. The promise
rejects if an error happens during shutdown, and server ends up in the CRASHED
state.
If server was created with pauseInBackground
option, calling
.stop()
will also ensure that the stopped server won't be restarted when
the app re-enters foreground. Once stopped, the server only can be re-launched
by an explicit call of .start().
It is safe to call this method no matter the current state of this server.
If it is INACTIVE
or CRASHED
, the call will just cancel automatic restart
of the server, if one is scheduled by pauseInBackground
option, as mentioned
above. If it is STARTING
or STOPPING
, this method will wait till server
reaching another state (ACTIVE
, INACTIVE
or CRASHED
), then it will act
accordingly.
The optional details
argument, if provided, will be added to
the STARTING
message emitted to the server state change listeners
(see .addStateListener()) in the beginning of this method, if the server
launch is necessary.
server.errorLog: false | ErrorLogOptions;
Readonly property. It holds the error log configuration (see ErrorLogOptions),
opted for at the time of this server instance construction.
Note, it will be {}
if errorLog
option of constructor() was set true;
and it will be false (default) if errorLog
option was omitted in
the constructor() call.
server.fileDir: string;
Readonly property. It holds fileDir
value — the absolute path
on target device from which static assets are served by the server.
server.hostname: string;
Readonly property. It holds the hostname used by the server. If no hostname
value was provided to the server's constructor(), this property will be:
- Without
nonLocal
option it will be equal127.0.0.1
(the loopback address) from the very beginning; - Otherwise, it will be an empty string until the first launch of the server instance, after which it will become equal to the IP address selected by the server automatically, and won't change upon subsequent server re-starts.
server.id: number;
Readonly. It holds unique ID number of the server instance, which is used internally for communication between JS an native layers, and also exposed to the library consumer, for debug.
BEWARE: In the current library implementation, this ID is generated simply
as Date.now() % 65535
, which is not random, and not truly unique —
the ID collision probability across different server instances is high.
This should be fine as long as you don't create many server instances in your
app, and don't rely on the uniqueness of these IDs across different app launches.
Switching to real UUIDs is on radar, but not the highest priority for now.
server.nonLocal: boolean;
Readonly property. It holds nonLocal
value provided to server constructor().
server.origin: string;
Readonly property. It holds server origin. Initially it equals empty string,
and after the first launch of server instance it becomes equal to its origin,
i.e. "http://HOSTNAME:PORT
", where HOSTNAME
and PORT
are selected
hostname and port, also accessible via .hostname and .port properties.
server.port: number;
Readonly property. It holds the port used by the server. Initially it equals
the port
value provided to constructor(), or 0 (default value), if it was
not provided. If it is 0, it will change to the automatically selected port
number once the server is started the first time. The selected port number
does not change upon subsequent re-starts of the server.
server.state: STATES;
Readonly property. It holds current server state, which is one of STATES values. Use .addStateListener() method to watch for server state changes.
server.stopInBackground: boolean;
Readonly property. It holds stopInBackground
value provided to constructor().
import {extractBundledAssets} from '@dr.pogodin/react-native-static-server';
extractBundledAssets(into, from): Promise<>;
Extracts bundled assets into the specified regular folder, preserving asset folder structure, and overwriting any conflicting files in the destination.
This is an Android-specific function; it does nothing on other platforms.
Arguments
into
— string — Optional. The destination folder for extracted assets. By default assets are extracted into the app's document folder.from
— string — Optional. Relative path to the root asset folder, starting from which all assets contained in that folder and its sub-folders will be extracted into the destination folder, preserving asset folder structure. By default all bundled assets are extracted.
Returns Promise which resolves once the extraction is completed.
import {getActiveServer} from '@dr.pogodin/react-native-static-server';
getActiveServer(): Server;
Returns currently active, starting, or stopping Server instance, if any exist
in the app. It does not return, however, any inactive server instance which has
been stopped automatically because of stopInBackground
option, when the app
entered background, and might be automatically started in future if the app
enters foreground again prior to an explicit .stop() call for that instance.
import {resolveAssetsPath} from '@dr.pogodin/react-native-static-server';
resolveAssetsPath(path: string): string;
If given path
is relative, it returns the corresponding absolute path,
resolved relative to the platform-specific base location (document folder
on Android; or main bundle folder on other platforms) for bundled assets;
otherwise, it just returns given absolute path
as is.
In other words, it exposes the same path resolution logic used by Server's
constructor() for its fileDir
argument.
Arguments
path
— string — Absolute or relative path.
Returns string — The corresponding absolute path.
import {ERROR_LOG_FILE} from '@dr.pogodin/react-native-static-server';
Constant string. It holds the filesystem location of the error log file
(see errorLog
option of Server's constructor()). The actual value is
"WORK_DIR/errorlog.txt
" — all server instances within an app output
their logs, when opted, into the same file; and it is up to the host app
to purge this file when needed.
import {STATES} from '@dr.pogodin/react-native-static-server';
The STATES enumerator provides possible states of a server instance:
STATES.ACTIVE
— Up and running.STATES.CRASHED
— Crashed and inactive.STATES.INACTIVE
— Yet not started, or gracefully shut down.STATES.STARTING
— Starting up.STATES.STOPPING
— Shutting down.
It also contains the backward mapping between state numeric values and their human-readable names used above, i.e.
console.log(STATES.ACTIVE); // Logs: 0
console.log(STATES[0]); // Logs: ACTIVE
import {UPLOADS_DIR} from '@dr.pogodin/react-native-static-server';
Constant string. It holds the filesystem location where all server instances
within an app keep any uploads to the server. The actual value is
"WORK_DIR/uploads
".
import {WORK_DIR} from '@dr.pogodin/react-native-static-server';
Constant string. It holds the filesystem location where all server instances
within an app keep their working files (configs, logs, uploads). The actual
value is "TemporaryDirectoryPath/__rn-static-server__
",
where TemporaryDirectoryPath is the temporary directory path for
the app as reported by the @dr.pogodin/react-native-fs library.
import {type ErrorLogOptions} from '@dr.pogodin/react-native-static-server';
The type of errorLog
option of the Server's constructor(). It describes an
object with the following optional boolean flags; each of them enables
the similarly named
Lighttpd debug option:
conditionHandling
— boolean — Optional.fileNotFound
— boolean — Optional.requestHandling
— boolean — Optional.requestHeader
— boolean — Optional.requestHeaderOnError
— boolean — Optional.responseHeader
— boolean — Optional.timeouts
— boolean — Optional.
Without any flag set the server instance will still output very basic state and error messages into the log file.
This project started as a fork of the original
react-native-static-server
library, abandoned by its creators.
It is published to NPM as
@dr.pogodin/react-native-static-server,
and it aims to provide a well-maintained embed HTTP server for React Native (RN)
applications.
NOTE: With an appropriate financial contribution you can influence the roadmap — the aims, priorities, and timelines for this library — everything can be adjusted for the needs of a paying customer.
These are future development aims, ordered by their current priority (from the top priority, to the least priority):
- Support of custom configuration of HTTP server, and inclusion of additional Lighttpd plugins (only three plugins for serving static assets are included now by default on all platforms).
- Support of Expo.
- Better documentation (migration of the documentation to a Docusaurus website.
-
See Releases Page on GitHub for details on latest library versions, which did not deserve a special mention here.
-
v0.7.0 — The new version of the library. Reworked API, powered by Lighttpd v1.4.69 and latest React Native v0.71.2 on both Android and iOS, supports both new and old RN Architectures.
-
v0.6.0-alpha.8 — The aim for v0.6 release was to refactor the library to support React Native's New Architecture, while keeping backward compatibility with RN's Old Architecture, and the original library API. The aim was mostly achieved as of v0.6.0-alpha.8, but as development focus shifted into v0.7 development, the v0.6 was effectively abandoned.
As of the latest alpha v0.6 version, the status was:
- The code refactoring was completed.
- Android: relied on NanoHttpd, tested with React Native v0.70.0 for both RN's old and new architectures.
- iOS: relied on GCDWebServer, tested with React Native v0.70.0 for
RN's Old Architecture.
NOT TESTED with RN's New Architecture, it likely required minor fixes to support it.
-
v0.5.5 — The latest version of the original library, patched to work with React Native v0.67–0.68, and with all dependencies updated (as of May 17, 2022). Relies on NanoHttpd on Android, and GCDWebServer on iOS; only supports RN's Old Architecture, and was not tested with RN v0.69+.
See OLD-README.md
-
On Android it now requires
minSdkVersion
to be set in equal 28 or larger (inbuild.gradle
file). Also, now it is not supported to start more than one server instance a time (previously started server instance, if any, must be stopped before starting another one). -
Server's constructor() signature was changed, as well as default behavior:
- constructor() now accepts a single required argument: an object holding all available server options:
fileDir
option replaces oldroot
argument, and now it MUST BE a non-empty string (to prevent any mistakes due to wrong assumptions what folder is served by default).nonLocal
option replaces the oldlocalOnly
option, with the opposite meaning and default behavior. Now, by default the server is started on "127.0.0.1
" (the loopback address) and is only accessible from within the app. SettingnonLocal
flag will start it on an automatically assigned IP, accessible from outside the app as well. This is the opposite to behavior in previous versions, and it feels more secure (prevents exposing server outside the app due to overlooking the default behavior).stopInBackground
option replaces the oldkeepAlive
option, with the opposite meaning and behavior. Now, by default the server does not do anything special when the app goes into background / returns to foreground. SettingstopInBackground
true will cause automatic stop of the server each time the app enters background, with subsequent automatic server restart when the app returns to foreground. This is opposite to behavior in previous versions, and the rationale is: it is easy to handle the server without stopping in background (in this case there is no need to watch server state and synchronize possible requests with current server state), thus new default behavior allows for easier server usage, while the opt-in stopping of server in background allows more advanced usage scenario.
-
The new server implementation relies on app's temporary data folder to store internal files (all within its WORK_DIR), don't mess with it if you do anything special with the temporary folder.