@absolutejs/absolute 0.20.0-beta.108 → 0.20.0-beta.109

package/CHANGELOG.md

@@ -6,6 +6,12 @@ This file is generated by `absolute-changelog` from the entries in
 `changelog/`. Edit an entry, not this file — and add new ones under
 `changelog/unreleased/`.
 
+## 0.20.0-beta.109 — 2026-09-17
+
+### Added
+
+- **Mobile publication promotes the exact certified AAB or IPA with secure production policies and generated acceptance CI** (`AbsoluteMobileCertifiableRelease`, `AbsoluteNativeReleasePublication`, `AbsoluteNativeReleasePublisher`, `NormalizedAbsoluteMobileConfig`, `PublishAbsoluteAndroidReleaseOptions`, `publishAbsoluteIosRelease`)
+
 ## 0.20.0-beta.108 — 2026-09-16
 
 ### Fixed

package/README.md

@@ -284,7 +284,11 @@ The generated workflow keeps signing and provider credentials behind the
 After testing the immutable Android or iOS release, bind its exact artifact and
 runtime identity to the installed, Simulator, device, or store evidence with
 `absolute mobile certify`. The content-addressed result can be checked again in
-CI without credentials or native tooling. See
+CI without credentials or native tooling, then supplied to `mobile publish
+--release ... --certification ...` so publication cannot silently rebuild or
+promote different bytes. Production channels require installed Android and
+store-delivered iOS evidence by default; production Google Play requires
+installed evidence. See
 [mobile release certification](docs/MOBILE_RELEASE_CERTIFICATION.md).
 
 An experimental Expo Router hybrid is also available behind

package/changelog.json

@@ -2,6 +2,24 @@
 	"contract": 1,
 	"name": "@absolutejs/absolute",
 	"releases": [
+		{
+			"changes": [
+				{
+					"kind": "added",
+					"summary": "Mobile publication promotes the exact certified AAB or IPA with secure production policies and generated acceptance CI",
+					"symbols": [
+						"AbsoluteMobileCertifiableRelease",
+						"AbsoluteNativeReleasePublication",
+						"AbsoluteNativeReleasePublisher",
+						"NormalizedAbsoluteMobileConfig",
+						"PublishAbsoluteAndroidReleaseOptions",
+						"publishAbsoluteIosRelease"
+					]
+				}
+			],
+			"date": "2026-09-17",
+			"version": "0.20.0-beta.109"
+		},
 		{
 			"changes": [
 				{

package/dist/angular/components/core/streamingSlotRegistrar.js

@@ -1,7 +1,7 @@
 // @bun
 var __require = import.meta.require;
 
-// .angular-partial-tmp-BqBann/src/core/streamingSlotRegistrar.ts
+// .angular-partial-tmp-nbi5HT/src/core/streamingSlotRegistrar.ts
 var STREAMING_SLOT_REGISTRAR_KEY = Symbol.for("absolutejs.streamingSlotRegistrar");
 var STREAMING_SLOT_WARNING_STORAGE_KEY = Symbol.for("absolutejs.streamingSlotWarningController");
 var STREAMING_SLOT_COLLECTION_STORAGE_KEY = Symbol.for("absolutejs.streamingSlotCollectionController");

package/dist/angular/components/core/streamingSlotRegistry.js

@@ -1,7 +1,7 @@
 // @bun
 var __require = import.meta.require;
 
-// .angular-partial-tmp-BqBann/src/core/streamingSlotRegistrar.ts
+// .angular-partial-tmp-nbi5HT/src/core/streamingSlotRegistrar.ts
 var STREAMING_SLOT_REGISTRAR_KEY = Symbol.for("absolutejs.streamingSlotRegistrar");
 var STREAMING_SLOT_WARNING_STORAGE_KEY = Symbol.for("absolutejs.streamingSlotWarningController");
 var STREAMING_SLOT_COLLECTION_STORAGE_KEY = Symbol.for("absolutejs.streamingSlotCollectionController");
@@ -48,7 +48,7 @@ var warnMissingStreamingSlotCollector = (primitiveName) => {
   getWarningController()?.maybeWarn(primitiveName);
 };
 
-// .angular-partial-tmp-BqBann/src/core/streamingSlotRegistry.ts
+// .angular-partial-tmp-nbi5HT/src/core/streamingSlotRegistry.ts
 var STREAMING_SLOT_STORAGE_KEY = Symbol.for("absolutejs.streamingSlotAsyncLocalStorage");
 var isObjectRecord2 = (value) => Boolean(value) && typeof value === "object";
 var isAsyncLocalStorage = (value) => isObjectRecord2(value) && ("getStore" in value) && typeof value.getStore === "function" && ("run" in value) && typeof value.run === "function";

package/dist/build.js

@@ -27656,7 +27656,7 @@ __export(exports_config, {
 import { readFileSync as readFileSync35 } from "fs";
 import { resolve as resolve45 } from "path";
 import { createHash as createHash5, createPublicKey, X509Certificate } from "crypto";
-var APP_ID_PATTERN, SCHEME_PATTERN, APPLE_APP_ID_PREFIX_PATTERN, CERTIFICATE_FINGERPRINT_PATTERN, UPDATE_NAME_PATTERN, UPDATE_PUBLIC_KEY_PATTERN, ENVIRONMENT_NAME_PATTERN, DEFAULT_UPDATE_BOOT_TIMEOUT_MS = 20000, DEFAULT_UPDATE_HEALTH_FAILURE_RATE = 0.2, DEFAULT_UPDATE_HEALTH_MINIMUM_REPORTS = 20, DEFAULT_UPDATE_ROLLOUT_FAILURE_RATE = 0.05, DEFAULT_UPDATE_ROLLOUT_OBSERVATION_MINUTES = 60, MINUTE_MS, DEFAULT_UPDATE_ROLLOUT_STAGES, MINIMUM_UPDATE_BOOT_TIMEOUT_MS = 5000, MAXIMUM_UPDATE_BOOT_TIMEOUT_MS = 120000, HOSTNAME_PATTERN, EXPO_RESERVED_ROUTE_PREFIXES, resolveProjectPath = (projectRoot, value, field) => {
+var APP_ID_PATTERN, SCHEME_PATTERN, APPLE_APP_ID_PREFIX_PATTERN, CERTIFICATE_FINGERPRINT_PATTERN, UPDATE_NAME_PATTERN, RELEASE_TARGET_PATTERN, UPDATE_PUBLIC_KEY_PATTERN, ENVIRONMENT_NAME_PATTERN, DEFAULT_UPDATE_BOOT_TIMEOUT_MS = 20000, DEFAULT_UPDATE_HEALTH_FAILURE_RATE = 0.2, DEFAULT_UPDATE_HEALTH_MINIMUM_REPORTS = 20, DEFAULT_UPDATE_ROLLOUT_FAILURE_RATE = 0.05, DEFAULT_UPDATE_ROLLOUT_OBSERVATION_MINUTES = 60, MINUTE_MS, DEFAULT_UPDATE_ROLLOUT_STAGES, MINIMUM_UPDATE_BOOT_TIMEOUT_MS = 5000, MAXIMUM_UPDATE_BOOT_TIMEOUT_MS = 120000, HOSTNAME_PATTERN, EXPO_RESERVED_ROUTE_PREFIXES, resolveProjectPath = (projectRoot, value, field) => {
   const root = resolve45(projectRoot);
   const path = resolve45(root, value);
   if (path !== root && !path.startsWith(`${root}/`)) {
@@ -27692,6 +27692,54 @@ var APP_ID_PATTERN, SCHEME_PATTERN, APPLE_APP_ID_PREFIX_PATTERN, CERTIFICATE_FIN
     throw new TypeError("mobile.platforms must contain at least one platform.");
   }
   return normalized;
+}, normalizeAndroidCertificationPolicy = (value) => {
+  if (value === false || value === undefined)
+    return;
+  if (value !== "installed")
+    throw new TypeError("mobile.release.certification channel Android policy must be installed or false.");
+  return value;
+}, normalizeIosCertificationPolicy = (value) => {
+  if (value === false || value === undefined)
+    return;
+  if (!["simulator", "device", "store"].includes(value))
+    throw new TypeError("mobile.release.certification channel iOS policy must be simulator, device, store, or false.");
+  return value;
+}, normalizeReleaseCertification = (config) => {
+  const configured = config.release?.certification;
+  if (configured === false)
+    return { channels: {}, googlePlayTracks: {} };
+  const channels = {
+    production: { android: "installed", ios: "store" }
+  };
+  const googlePlayTracks = {
+    production: "installed"
+  };
+  for (const [name, policy] of Object.entries(configured?.channels ?? {})) {
+    if (!RELEASE_TARGET_PATTERN.test(name))
+      throw new TypeError("mobile.release.certification.channels contains an invalid channel.");
+    const normalized = {};
+    const android = normalizeAndroidCertificationPolicy(policy.android);
+    const ios = normalizeIosCertificationPolicy(policy.ios);
+    if (android)
+      normalized.android = android;
+    if (ios)
+      normalized.ios = ios;
+    channels[name] = normalized;
+  }
+  for (const [name, requirement] of Object.entries(configured?.googlePlayTracks ?? {})) {
+    if (!RELEASE_TARGET_PATTERN.test(name))
+      throw new TypeError("mobile.release.certification.googlePlayTracks contains an invalid track.");
+    if (requirement === false)
+      delete googlePlayTracks[name];
+    else if (requirement === "installed")
+      googlePlayTracks[name] = requirement;
+    else
+      throw new TypeError("mobile.release.certification Google Play policy must be installed or false.");
+  }
+  return {
+    channels: Object.fromEntries(Object.entries(channels).sort(([left], [right]) => left.localeCompare(right))),
+    googlePlayTracks: Object.fromEntries(Object.entries(googlePlayTracks).sort(([left], [right]) => left.localeCompare(right)))
+  };
 }, normalizeHosts = (hosts, productionOrigin) => {
   const normalizeHostname = (host2) => {
     const value = requireText(host2, "mobile.deepLinks.hosts").toLowerCase();
@@ -28018,6 +28066,7 @@ var APP_ID_PATTERN, SCHEME_PATTERN, APPLE_APP_ID_PREFIX_PATTERN, CERTIFICATE_FIN
     platforms: normalizePlatforms(config.platforms),
     productionOrigin,
     pushAndroidGoogleServicesFile: resolveProjectPath(projectRoot, config.pushNotifications?.android?.googleServicesFile ?? "google-services.json", "mobile.pushNotifications.android.googleServicesFile"),
+    releaseCertification: normalizeReleaseCertification(config),
     ...updates ? { updates } : {},
     ...updateServer ? { updateServer } : {}
   };
@@ -28028,6 +28077,7 @@ var init_config = __esm(() => {
   APPLE_APP_ID_PREFIX_PATTERN = /^[A-Z0-9]{10}$/;
   CERTIFICATE_FINGERPRINT_PATTERN = /^[0-9A-F]{64}$/;
   UPDATE_NAME_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u;
+  RELEASE_TARGET_PATTERN = /^[a-z0-9][a-z0-9._-]{0,63}$/u;
   UPDATE_PUBLIC_KEY_PATTERN = /^[A-Za-z0-9+/]+={0,2}$/u;
   ENVIRONMENT_NAME_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/u;
   MINUTE_MS = 60 * 1000;
@@ -37981,5 +38031,5 @@ export {
   devBuild
 };
 
-//# debugId=AA7EE9F841862FED64756E2164756E21
+//# debugId=0E877E48913E5F9364756E2164756E21
 //# sourceMappingURL=build.js.map