I think top level async is bad because won’t converge with js browser.

Node test also I dont think is great, because in isomorphic apps you’ll have 2 syntax for testing.

I think the permissions are the core thing we should do, even if we run the apps in docker/dev containers.

Aliases is nice, node:fetch but I guess will break all isomorphic code.