@absolutejs/absolute 0.20.0-beta.111 → 0.20.0-beta.113

package/dist/mobile/index.js

@@ -19401,7 +19401,7 @@ var init_compatibilityDispatcher = __esm(() => {
 // src/cli/scripts/telemetry.ts
 import { existsSync as existsSync5, mkdirSync, readFileSync as readFileSync6, writeFileSync } from "fs";
 import { homedir as homedir4 } from "os";
-import { join as join25 } from "path";
+import { join as join26 } from "path";
 var configDir, configPath, getTelemetryConfig = () => {
   try {
     if (!existsSync5(configPath))
@@ -19414,14 +19414,14 @@ var configDir, configPath, getTelemetryConfig = () => {
   }
 };
 var init_telemetry = __esm(() => {
-  configDir = join25(homedir4(), ".absolutejs");
-  configPath = join25(configDir, "telemetry.json");
+  configDir = join26(homedir4(), ".absolutejs");
+  configPath = join26(configDir, "telemetry.json");
 });
 
 // src/cli/telemetryEvent.ts
 import { existsSync as existsSync6, readFileSync as readFileSync7 } from "fs";
 import { arch, platform as platform3 } from "os";
-import { dirname as dirname18, join as join26, parse } from "path";
+import { dirname as dirname19, join as join27, parse } from "path";
 var checkCandidate = (candidate) => {
   if (!existsSync6(candidate)) {
     return null;
@@ -19441,12 +19441,12 @@ var checkCandidate = (candidate) => {
 }, findPackageVersion = () => {
   let { dir } = import.meta;
   while (dir !== parse(dir).root) {
-    const candidate = join26(dir, "package.json");
+    const candidate = join27(dir, "package.json");
     const version = checkCandidate(candidate);
     if (version) {
       return version;
     }
-    dir = dirname18(dir);
+    dir = dirname19(dir);
   }
   return "unknown";
 }, sendTelemetryEvent = (event, payload) => {
@@ -19487,7 +19487,7 @@ __export(exports_mobilePreview, {
   createAbsoluteMobilePreviewPlugin: () => createAbsoluteMobilePreviewPlugin
 });
 import { Elysia as Elysia3 } from "elysia";
-var ABSOLUTE_MOBILE_PREVIEW_PATH = "/__absolute/mobile-preview", escapeHtml2 = (value) => value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;"), isRecord14 = (value) => typeof value === "object" && value !== null, normalizeEntry2 = (entry) => {
+var ABSOLUTE_MOBILE_PREVIEW_PATH = "/__absolute/mobile-preview", escapeHtml2 = (value) => value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;"), isRecord15 = (value) => typeof value === "object" && value !== null, normalizeEntry2 = (entry) => {
   const parsed = new URL(entry ?? "/", "https://absolute.invalid");
   return `${parsed.pathname}${parsed.search}${parsed.hash}`;
 }, absoluteMobilePreviewDocument = (mobile) => {
@@ -19535,7 +19535,7 @@ var ABSOLUTE_MOBILE_PREVIEW_PATH = "/__absolute/mobile-preview", escapeHtml2 = (
       "X-Robots-Tag": "noindex, nofollow"
     }
   })).post("/__absolute/mobile-preview-telemetry", ({ body, status }) => {
-    const value = isRecord14(body) ? body : undefined;
+    const value = isRecord15(body) ? body : undefined;
     const durationMs = value?.durationMs;
     const platform4 = value?.platform;
     if (typeof durationMs !== "number" || !Number.isFinite(durationMs) || durationMs < 0 || durationMs > 300000 || platform4 !== "android" && platform4 !== "ios") {
@@ -20086,13 +20086,13 @@ import {
   createHmac,
   createPrivateKey,
   createPublicKey as createPublicKey2,
-  randomUUID as randomUUID5,
+  randomUUID as randomUUID6,
   sign as sign2,
   timingSafeEqual,
   verify as verify2,
   X509Certificate as X509Certificate3
 } from "crypto";
-import { readFile as readFile30, stat as stat9 } from "fs/promises";
+import { readFile as readFile31, stat as stat9 } from "fs/promises";
 import path from "path";
 var MOBILE_UPDATE_REGISTRY_FORMAT = 1, DEFAULT_PREFIX = "absolutejs/mobile-updates", MAX_FILE_BYTES, MAX_TOTAL_BYTES, DAY_MS, DEFAULT_MIN_AGE_MS, DEFAULT_GRACE_PERIOD_MS, DEFAULT_RETAIN_RECENT = 5, HASH, RELEASE, APP_ID, NAME, EXPO_DESCRIPTOR = "_absolute/expo-update.json", EXPO_CODE_SIGNING_ALGORITHM = "rsa-v1_5-sha256", HEALTH_TOKEN_VERSION = 1, HEALTH_KINDS, FAILURE_HEALTH_KINDS, MobileUpdateRegistryError, object6 = (value) => typeof value === "object" && value !== null && !Array.isArray(value), text2 = (value, field2) => {
   if (typeof value !== "string" || value.length === 0)
@@ -20446,7 +20446,7 @@ var MOBILE_UPDATE_REGISTRY_FORMAT = 1, DEFAULT_PREFIX = "absolutejs/mobile-updat
       ...input,
       format: MOBILE_UPDATE_REGISTRY_FORMAT,
       promotedAt,
-      promotionId: digest(new TextEncoder().encode(`${input.appId}\x00${input.channel}\x00${input.releaseId ?? "embedded"}\x00${promotedAt}\x00${randomUUID5()}`))
+      promotionId: digest(new TextEncoder().encode(`${input.appId}\x00${input.channel}\x00${input.releaseId ?? "embedded"}\x00${promotedAt}\x00${randomUUID6()}`))
     };
     await beforeWrite?.(value);
     const bytes = json(value);
@@ -20548,7 +20548,7 @@ var MOBILE_UPDATE_REGISTRY_FORMAT = 1, DEFAULT_PREFIX = "absolutejs/mobile-updat
     if (!releaseId)
       throw new MobileUpdateRegistryError("Mobile update channel does not have an active release");
     const createdAt = clock().toISOString();
-    const id = randomUUID5();
+    const id = randomUUID6();
     const event = {
       action,
       createdAt,
@@ -21125,7 +21125,7 @@ var MOBILE_UPDATE_REGISTRY_FORMAT = 1, DEFAULT_PREFIX = "absolutejs/mobile-updat
       verifyManifestSignature(manifest, options.publicKeys);
       await assertNotMarked(manifest.appId, manifest.releaseId);
       const localRoot = path.resolve(input.releaseDirectory);
-      const localManifest = parseMobileUpdateManifest(JSON.parse(await readFile30(path.join(localRoot, "update.json"), "utf8")));
+      const localManifest = parseMobileUpdateManifest(JSON.parse(await readFile31(path.join(localRoot, "update.json"), "utf8")));
       if (JSON.stringify(localManifest) !== JSON.stringify(manifest))
         throw new MobileUpdateRegistryError("Local mobile update manifest changed");
       const existing = await readManifest(manifest.appId, manifest.releaseId);
@@ -21411,8 +21411,8 @@ var MOBILE_UPDATE_REGISTRY_FORMAT = 1, DEFAULT_PREFIX = "absolutejs/mobile-updat
       });
     }
     const pathname = new URL(request.url).pathname.replace(/^\/+/, "");
-    const relative23 = pathname.startsWith(`${route}/`) ? pathname.slice(route.length + 1) : "";
-    if (request.method === "POST" && relative23 === "health") {
+    const relative24 = pathname.startsWith(`${route}/`) ? pathname.slice(route.length + 1) : "";
+    if (request.method === "POST" && relative24 === "health") {
       if (!options.registry.recordUpdateHealth)
         return new Response(null, { status: 404 });
       const appId = request.headers.get("x-absolute-mobile-app");
@@ -21455,7 +21455,7 @@ var MOBILE_UPDATE_REGISTRY_FORMAT = 1, DEFAULT_PREFIX = "absolutejs/mobile-updat
     }
     if (request.method !== "GET")
       return new Response(null, { status: 405 });
-    if (relative23 === "update.json") {
+    if (relative24 === "update.json") {
       const expoProtocolVersion = request.headers.get("expo-protocol-version");
       const expoProtocol = expoProtocolVersion !== null;
       if (expoProtocol && expoProtocolVersion !== "1")
@@ -21573,7 +21573,7 @@ var MOBILE_UPDATE_REGISTRY_FORMAT = 1, DEFAULT_PREFIX = "absolutejs/mobile-updat
         }
       });
     }
-    const match = /^(amu_[a-f0-9]{64})\/files\/(.+)$/.exec(relative23);
+    const match = /^(amu_[a-f0-9]{64})\/files\/(.+)$/.exec(relative24);
     if (!match?.[1] || !match[2])
       return new Response(null, { status: 404 });
     const file = await options.registry.readUpdateFile({
@@ -21666,15 +21666,15 @@ import {
   createPublicKey as createPublicKey3,
   X509Certificate as X509Certificate4
 } from "crypto";
-import { access as access22, mkdir as mkdir24 } from "fs/promises";
-import { dirname as dirname24, isAbsolute as isAbsolute14, relative as relative23, resolve as resolve25, sep as sep16 } from "path";
+import { access as access23, mkdir as mkdir25 } from "fs/promises";
+import { dirname as dirname25, isAbsolute as isAbsolute15, relative as relative24, resolve as resolve26, sep as sep17 } from "path";
 import { pathToFileURL as pathToFileURL5 } from "url";
 import { Elysia as Elysia4 } from "elysia";
 var ABSOLUTE_MOBILE_UPDATE_SERVER_FORMAT = 1, DEFAULT_MOBILE_UPDATE_REGISTRY_MODULE = "mobile.update.ts", object7 = (value) => typeof value === "object" && value !== null && !Array.isArray(value), projectPath4 = (projectRoot, requested) => {
-  const root = resolve25(projectRoot);
-  const path2 = resolve25(root, requested);
-  const projectRelative = relative23(root, path2);
-  if (projectRelative === ".." || projectRelative.startsWith(`..${sep16}`) || isAbsolute14(projectRelative))
+  const root = resolve26(projectRoot);
+  const path2 = resolve26(root, requested);
+  const projectRelative = relative24(root, path2);
+  if (projectRelative === ".." || projectRelative.startsWith(`..${sep17}`) || isAbsolute15(projectRelative))
     throw new TypeError("mobile.updates.server.registry must remain inside the project.");
   return path2;
 }, isRegistry4 = (value) => object7(value) && [
@@ -21697,7 +21697,7 @@ var ABSOLUTE_MOBILE_UPDATE_SERVER_FORMAT = 1, DEFAULT_MOBILE_UPDATE_REGISTRY_MOD
   return metadata;
 }, loadAbsoluteMobileUpdateServerModule = async (projectRoot, requestedModulePath = DEFAULT_MOBILE_UPDATE_REGISTRY_MODULE) => {
   const modulePath = projectPath4(projectRoot, requestedModulePath);
-  await access22(modulePath).catch(() => {
+  await access23(modulePath).catch(() => {
     throw new TypeError(`Mobile update server registry does not exist: ${modulePath}. Run \`absolute mobile update provision\`.`);
   });
   const loaded = await import(pathToFileURL5(modulePath).href);
@@ -21886,13 +21886,13 @@ ${generated}`);
 }, writeAbsoluteMobileUpdateRegistry = async (options) => {
   const path2 = projectPath4(options.projectRoot, options.modulePath ?? DEFAULT_MOBILE_UPDATE_REGISTRY_MODULE);
   if (!options.force) {
-    await access22(path2).then(() => {
+    await access23(path2).then(() => {
       throw new TypeError(`Mobile update registry already exists: ${path2}. Pass --force to replace it.`);
     }, () => {
       return;
     });
   }
-  await mkdir24(dirname24(path2), { recursive: true });
+  await mkdir25(dirname25(path2), { recursive: true });
   await Bun.write(path2, renderAbsoluteMobileUpdateRegistry({
     ...options.health ? { health: options.health } : {},
     ...options.rollout ? { rollout: options.rollout } : {},
@@ -33560,12 +33560,15 @@ var writeAbsoluteMobileReleaseCertification = async (projectRoot, certification,
 
 // src/mobile/ciPromotionAudit.ts
 var ABSOLUTE_MOBILE_CI_PROMOTION_AUDIT_FORMAT = 1;
-var ABSOLUTE_MOBILE_CI_PROMOTION_CONTEXT_FORMAT = 1;
+var ABSOLUTE_MOBILE_CI_PROMOTION_CONTEXT_FORMAT = 2;
 var MAX_GITHUB_OUTPUT_BYTES = 1048576;
 var MAX_AUDIT_JSON_BYTES = 1048576;
 var MAX_SEARCH_FILES = 20000;
 var RUN_ID_PATTERN = /^[1-9][0-9]*$/u;
 var REPOSITORY_PATTERN2 = /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/u;
+var DISPATCH_ID_PATTERN = /^amp_[a-f0-9]{32}$/u;
+var PROMOTION_DISCOVERY_ATTEMPTS = 60;
+var PROMOTION_DISCOVERY_INTERVAL_MS = 1000;
 var isRecord13 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var requiredString = (value, name) => {
   if (typeof value !== "string" || value.trim() === "")
@@ -33582,6 +33585,26 @@ var runId = (value, name) => {
     throw new TypeError(`${name} is invalid.`);
   return value;
 };
+var dispatchId = (value) => {
+  if (!DISPATCH_ID_PATTERN.test(value))
+    throw new TypeError("Mobile promotion dispatch ID is invalid.");
+  return value;
+};
+var promotionRunTitle = (value) => `AbsoluteJS mobile promotion [${dispatchId(value)}]`;
+var promotionDiscoveryCommand = (workflow, repository) => [
+  "gh",
+  "run",
+  "list",
+  "--workflow",
+  workflow,
+  "--event",
+  "workflow_dispatch",
+  "--limit",
+  "50",
+  ...repositoryArgs(repository),
+  "--json",
+  "databaseId,displayTitle,event,url"
+];
 var repositoryArgs = (repository) => {
   if (repository === undefined)
     return [];
@@ -33629,6 +33652,27 @@ var parseJob = (value) => {
     status: requiredString(value.status, "GitHub job status")
   };
 };
+var discoverAbsoluteMobilePromotionRun = async (options) => {
+  const requestedDispatchId = dispatchId(options.dispatchId);
+  const attempts = options.attempts ?? PROMOTION_DISCOVERY_ATTEMPTS;
+  if (!Number.isSafeInteger(attempts) || attempts < 1 || attempts > 300)
+    throw new TypeError("Mobile promotion discovery attempts are invalid.");
+  const pollIntervalMs = options.pollIntervalMs ?? PROMOTION_DISCOVERY_INTERVAL_MS;
+  if (!Number.isSafeInteger(pollIntervalMs) || pollIntervalMs < 0 || pollIntervalMs > 1e4)
+    throw new TypeError("Mobile promotion discovery interval is invalid.");
+  const sleep = options.sleep ?? Bun.sleep;
+  const discover = async (attempt) => {
+    const result = await requireCommand(options.run ?? defaultRunner, promotionDiscoveryCommand(options.workflow, options.repository), { cwd: options.projectRoot }, "GitHub promotion run discovery");
+    const discovered = parseAbsoluteMobilePromotionRunList(JSON.parse(result.stdout), requestedDispatchId);
+    if (discovered)
+      return discovered;
+    if (attempt >= attempts)
+      throw new TypeError(`GitHub did not expose promotion dispatch ${requestedDispatchId} within ${attempts} attempts.`);
+    await sleep(pollIntervalMs);
+    return discover(attempt + 1);
+  };
+  return discover(1);
+};
 var inspectAbsoluteMobileCiRun = async (options) => {
   const requestedRunId = runId(options.runId, "GitHub run ID");
   const result = await requireCommand(options.run ?? defaultRunner, [
@@ -33638,7 +33682,7 @@ var inspectAbsoluteMobileCiRun = async (options) => {
     requestedRunId,
     ...repositoryArgs(options.repository),
     "--json",
-    "conclusion,createdAt,databaseId,headBranch,headSha,jobs,startedAt,status,updatedAt,url,workflowName"
+    "conclusion,createdAt,databaseId,displayTitle,headBranch,headSha,jobs,startedAt,status,updatedAt,url,workflowName"
   ], { cwd: options.projectRoot }, "GitHub workflow inspection");
   return parseAbsoluteMobileCiRunStatus(JSON.parse(result.stdout), requestedRunId);
 };
@@ -33651,6 +33695,7 @@ var parseAbsoluteMobileCiRunStatus = (value, requestedRunId) => {
   return {
     conclusion: optionalString(value.conclusion, "GitHub run conclusion"),
     createdAt: requiredString(value.createdAt, "GitHub run createdAt"),
+    displayTitle: requiredString(value.displayTitle, "GitHub run displayTitle"),
     headBranch: requiredString(value.headBranch, "GitHub run headBranch"),
     headSha: requiredString(value.headSha, "GitHub run headSha"),
     jobs: value.jobs.map(parseJob),
@@ -33663,20 +33708,44 @@ var parseAbsoluteMobileCiRunStatus = (value, requestedRunId) => {
   };
 };
 var parseAbsoluteMobilePromotionContext = (value) => {
-  if (!isRecord13(value) || value.format !== ABSOLUTE_MOBILE_CI_PROMOTION_CONTEXT_FORMAT || value.platform !== "android" && value.platform !== "ios")
+  if (!isRecord13(value) || value.format !== 1 && value.format !== ABSOLUTE_MOBILE_CI_PROMOTION_CONTEXT_FORMAT || value.platform !== "android" && value.platform !== "ios")
     throw new TypeError("Mobile promotion context is invalid.");
   const { platform: platform3 } = value;
   const sourceArtifact = requiredString(value.sourceArtifact, "promotion source artifact");
   if (sourceArtifact !== `absolute-mobile-${platform3}`)
     throw new TypeError("Mobile promotion source artifact is invalid.");
   return {
-    format: ABSOLUTE_MOBILE_CI_PROMOTION_CONTEXT_FORMAT,
+    dispatchId: value.format === 1 ? null : dispatchId(requiredString(value.dispatchId, "promotion dispatch ID")),
+    format: value.format,
     platform: platform3,
     promotionRunId: runId(requiredString(value.promotionRunId, "promotion run ID"), "promotion run ID"),
     sourceArtifact,
     sourceRunId: runId(requiredString(value.sourceRunId, "source run ID"), "source run ID")
   };
 };
+var parseAbsoluteMobilePromotionRunList = (value, requestedDispatchId) => {
+  if (!Array.isArray(value))
+    throw new TypeError("GitHub workflow run list response is invalid.");
+  const expectedTitle = promotionRunTitle(requestedDispatchId);
+  const matches2 = value.filter((candidate) => isRecord13(candidate) && candidate.displayTitle === expectedTitle);
+  if (matches2.length === 0)
+    return null;
+  if (matches2.length !== 1)
+    throw new TypeError("GitHub returned multiple runs for one promotion dispatch identity.");
+  const [match] = matches2;
+  if (!isRecord13(match) || match.event !== "workflow_dispatch")
+    throw new TypeError("GitHub promotion run identity is invalid.");
+  const databaseId = typeof match.databaseId === "number" || typeof match.databaseId === "string" ? String(match.databaseId) : "";
+  const requestedRunId = runId(databaseId, "GitHub promotion run ID");
+  const url = requiredString(match.url, "GitHub promotion run URL");
+  if (!url.endsWith(`/actions/runs/${requestedRunId}`))
+    throw new TypeError("GitHub promotion run URL does not match its ID.");
+  return {
+    dispatchId: requestedDispatchId,
+    runId: requestedRunId,
+    url
+  };
+};
 var watchAbsoluteMobileCiRun = async (options) => {
   const requestedRunId = runId(options.runId, "GitHub run ID");
   await requireCommand(options.run ?? defaultRunner, [
@@ -33795,6 +33864,7 @@ var renderAuditMarkdown = (audit) => `# AbsoluteJS mobile promotion audit
 - Artifact SHA-256: \`${audit.release.sha256}\`
 - Source workflow run: ${audit.github.sourceRunId}
 - Promotion workflow run: ${audit.github.promotionRunId}
+- Dispatch correlation: ${audit.github.dispatchId ?? "legacy workflow (not recorded)"}
 - Workflow: ${audit.github.workflowName}
 - GitHub identity: \`${audit.provenance.repository}/${audit.provenance.workflowPath}@${audit.provenance.ref}\`
 - Certification: \`${audit.certification.certificationId}\` (${audit.certification.strength})
@@ -33844,6 +33914,8 @@ var auditAbsoluteMobileCiPromotion = async (options) => {
       throw new TypeError("Promotion context run identity does not match.");
     if (context && context.platform !== platform3)
       throw new TypeError("Promotion context platform does not match.");
+    if (context?.dispatchId && status.displayTitle !== promotionRunTitle(context.dispatchId))
+      throw new TypeError("Promotion dispatch identity does not match the GitHub run.");
     const sourceRunId = options.sourceRunId ? runId(options.sourceRunId, "GitHub source run ID") : context?.sourceRunId;
     if (!sourceRunId)
       throw new TypeError("Promotion artifact predates source-run context; pass --source-run-id.");
@@ -33912,6 +33984,7 @@ var auditAbsoluteMobileCiPromotion = async (options) => {
       format: ABSOLUTE_MOBILE_CI_PROMOTION_AUDIT_FORMAT,
       github: {
         conclusion: status.conclusion,
+        dispatchId: context?.dispatchId ?? null,
         promotionRunId,
         repository: verification.identity.repository,
         sourceRunId,
@@ -33946,11 +34019,229 @@ var auditAbsoluteMobileCiPromotion = async (options) => {
     throw error;
   }
 };
+// src/mobile/ciPromotionLedger.ts
+import {
+  access as access19,
+  link,
+  lstat as lstat2,
+  mkdir as mkdir19,
+  open,
+  readFile as readFile23,
+  readdir as readdir8,
+  rename as rename15,
+  rm as rm15
+} from "fs/promises";
+import { dirname as dirname17, isAbsolute as isAbsolute12, join as join25, relative as relative18, resolve as resolve20, sep as sep13 } from "path";
+import { randomUUID as randomUUID5 } from "crypto";
+var ABSOLUTE_MOBILE_CI_PROMOTION_OPERATION_FORMAT = 1;
+var MAX_OPERATION_BYTES = 65536;
+var MAX_OPERATIONS = 1000;
+var DISPATCH_ID_PATTERN2 = /^amp_[a-f0-9]{32}$/u;
+var RUN_ID_PATTERN2 = /^[1-9][0-9]*$/u;
+var SHA256_PATTERN = /^[a-f0-9]{64}$/u;
+var CERTIFICATION_ID_PATTERN = /^amobile_cert_[a-f0-9]{64}$/u;
+var RELEASE_ID_PATTERN2 = /^amobile_(?:android|ios)_[a-f0-9]{64}$/u;
+var REPOSITORY_PATTERN3 = /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/u;
+var LAST_ASCII_CONTROL = 31;
+var DELETE_CHARACTER = 127;
+var PHASES = [
+  "dispatching",
+  "dispatched",
+  "discovered",
+  "completed",
+  "audited"
+];
+var isRecord14 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var requiredString2 = (value, label, max = 512) => {
+  const hasControlCharacter = typeof value === "string" && Array.from(value).some((character) => {
+    const code = character.codePointAt(0);
+    return code !== undefined && (code <= LAST_ASCII_CONTROL || code === DELETE_CHARACTER);
+  });
+  if (typeof value !== "string" || value.trim() === "" || value !== value.trim() || value.length > max || hasControlCharacter)
+    throw new TypeError(`${label} is invalid.`);
+  return value;
+};
+var optionalString2 = (value, label, max = 512) => {
+  if (value === null)
+    return null;
+  return requiredString2(value, label, max);
+};
+var boolean = (value, label) => {
+  if (typeof value !== "boolean")
+    throw new TypeError(`${label} is invalid.`);
+  return value;
+};
+var timestamp = (value, label) => {
+  const parsed = requiredString2(value, label, 64);
+  if (!Number.isFinite(Date.parse(parsed)))
+    throw new TypeError(`${label} is invalid.`);
+  return parsed;
+};
+var projectRelativePath = (value, label) => {
+  const parsed = requiredString2(value, label, 512);
+  if (isAbsolute12(parsed) || parsed === ".." || parsed.startsWith(`..${sep13}`) || parsed.split(/[\\/]/u).includes(".."))
+    throw new TypeError(`${label} must be project-relative.`);
+  return parsed.replaceAll("\\", "/");
+};
+var nullableProjectRelativePath = (value, label) => value === null ? null : projectRelativePath(value, label);
+var dispatchId2 = (value) => {
+  const parsed = requiredString2(value, "Promotion dispatch ID", 36);
+  if (!DISPATCH_ID_PATTERN2.test(parsed))
+    throw new TypeError("Promotion dispatch ID is invalid.");
+  return parsed;
+};
+var runId2 = (value, label) => {
+  const parsed = requiredString2(value, label, 32);
+  if (!RUN_ID_PATTERN2.test(parsed))
+    throw new TypeError(`${label} is invalid.`);
+  return parsed;
+};
+var nullableRunId = (value, label) => value === null ? null : runId2(value, label);
+var operationRoot = (projectRoot) => join25(resolve20(projectRoot), ".absolutejs", "mobile-ci", "promotions");
+var absoluteMobilePromotionOperationPath = (projectRoot, requestedDispatchId) => join25(operationRoot(projectRoot), dispatchId2(requestedDispatchId), "operation.json");
+var operationPhase = (value) => {
+  const phase = PHASES.find((candidate) => candidate === value);
+  if (!phase)
+    throw new TypeError("Mobile promotion operation phase is invalid.");
+  return phase;
+};
+var parseAbsoluteMobilePromotionOperation = (value) => {
+  if (!isRecord14(value) || value.format !== ABSOLUTE_MOBILE_CI_PROMOTION_OPERATION_FORMAT || value.platform !== "android" && value.platform !== "ios")
+    throw new TypeError("Mobile promotion operation is invalid.");
+  const parsed = {
+    auditDirectory: nullableProjectRelativePath(value.auditDirectory, "Promotion audit directory"),
+    auditOutputDirectory: nullableProjectRelativePath(value.auditOutputDirectory, "Promotion requested audit directory"),
+    auditRequested: boolean(value.auditRequested, "Promotion audit request"),
+    certificationId: requiredString2(value.certificationId, "Promotion certification ID", 256),
+    certificationSha256: requiredString2(value.certificationSha256, "Promotion certification digest", 64),
+    channel: optionalString2(value.channel, "Promotion channel", 128),
+    conclusion: optionalString2(value.conclusion, "Promotion conclusion", 64),
+    createdAt: timestamp(value.createdAt, "Promotion creation time"),
+    dispatchId: dispatchId2(value.dispatchId),
+    format: ABSOLUTE_MOBILE_CI_PROMOTION_OPERATION_FORMAT,
+    githubStatus: optionalString2(value.githubStatus, "Promotion GitHub status", 64),
+    phase: operationPhase(value.phase),
+    platform: value.platform,
+    playTrack: optionalString2(value.playTrack, "Promotion Play track", 128),
+    ref: optionalString2(value.ref, "Promotion ref", 256),
+    releaseId: requiredString2(value.releaseId, "Promotion release ID", 256),
+    repository: optionalString2(value.repository, "Promotion repository", 256),
+    runId: nullableRunId(value.runId, "Promotion run ID"),
+    sourceRunId: runId2(value.sourceRunId, "Promotion source run ID"),
+    testflightGroup: optionalString2(value.testflightGroup, "Promotion TestFlight group", 128),
+    testflightSubmitReview: boolean(value.testflightSubmitReview, "Promotion TestFlight review setting"),
+    updatedAt: timestamp(value.updatedAt, "Promotion update time"),
+    url: optionalString2(value.url, "Promotion run URL", 1024),
+    watchRequested: boolean(value.watchRequested, "Promotion watch request"),
+    workflow: projectRelativePath(value.workflow, "Promotion workflow")
+  };
+  if (!SHA256_PATTERN.test(parsed.certificationSha256))
+    throw new TypeError("Promotion certification digest is invalid.");
+  if (!CERTIFICATION_ID_PATTERN.test(parsed.certificationId))
+    throw new TypeError("Promotion certification ID is invalid.");
+  if (!RELEASE_ID_PATTERN2.test(parsed.releaseId))
+    throw new TypeError("Promotion release ID is invalid.");
+  if (parsed.repository !== null && !REPOSITORY_PATTERN3.test(parsed.repository))
+    throw new TypeError("Promotion repository is invalid.");
+  const discovered = PHASES.indexOf(parsed.phase) >= PHASES.indexOf("discovered");
+  const completed = PHASES.indexOf(parsed.phase) >= PHASES.indexOf("completed");
+  if (discovered && (!parsed.runId || !parsed.url) || !discovered && (parsed.runId || parsed.url) || completed && (parsed.githubStatus !== "completed" || !parsed.conclusion) || !completed && (parsed.githubStatus || parsed.conclusion) || parsed.phase === "audited" && !parsed.auditDirectory || parsed.phase !== "audited" && parsed.auditDirectory)
+    throw new TypeError("Mobile promotion operation phase is incomplete.");
+  if (parsed.url && parsed.runId) {
+    const url = new URL(parsed.url);
+    if (url.protocol !== "https:" || url.username !== "" || url.password !== "" || url.search !== "" || url.hash !== "" || !url.pathname.endsWith(`/actions/runs/${parsed.runId}`))
+      throw new TypeError("Promotion run URL is invalid.");
+  }
+  if (Date.parse(parsed.updatedAt) < Date.parse(parsed.createdAt))
+    throw new TypeError("Promotion operation time moved backwards.");
+  return parsed;
+};
+var serialize = (operation2) => `${JSON.stringify(parseAbsoluteMobilePromotionOperation(operation2), null, 2)}
+`;
+var writeSynced = async (path, source) => {
+  const handle = await open(path, "wx", 384);
+  try {
+    await handle.writeFile(source);
+    await handle.sync();
+  } finally {
+    await handle.close();
+  }
+};
+var atomicWrite = async (path, source, exclusive) => {
+  await mkdir19(dirname17(path), { recursive: true });
+  const temporary = join25(dirname17(path), `.operation-${randomUUID5()}.tmp`);
+  try {
+    await writeSynced(temporary, source);
+    if (exclusive)
+      await link(temporary, path);
+    else
+      await rename15(temporary, path);
+  } finally {
+    await rm15(temporary, { force: true });
+  }
+};
+var advanceAbsoluteMobilePromotionOperation = async (projectRoot, requestedDispatchId, options, now = () => new Date) => {
+  const current = await readAbsoluteMobilePromotionOperation(projectRoot, requestedDispatchId);
+  if (PHASES.indexOf(options.phase) < PHASES.indexOf(current.phase))
+    throw new TypeError("Mobile promotion operation cannot move backwards.");
+  if (current.runId && options.runId && current.runId !== options.runId || current.url && options.url && current.url !== options.url || current.auditDirectory && options.auditDirectory && current.auditDirectory !== options.auditDirectory)
+    throw new TypeError("Mobile promotion operation identity is immutable.");
+  const next = parseAbsoluteMobilePromotionOperation({
+    ...current,
+    auditDirectory: options.auditDirectory === undefined ? current.auditDirectory : options.auditDirectory,
+    conclusion: options.conclusion === undefined ? current.conclusion : options.conclusion,
+    githubStatus: options.githubStatus === undefined ? current.githubStatus : options.githubStatus,
+    phase: options.phase,
+    runId: options.runId === undefined ? current.runId : options.runId,
+    updatedAt: now().toISOString(),
+    url: options.url === undefined ? current.url : options.url
+  });
+  await atomicWrite(absoluteMobilePromotionOperationPath(projectRoot, requestedDispatchId), serialize(next), false);
+  return next;
+};
+var createAbsoluteMobilePromotionOperation = async (projectRoot, options) => {
+  const now = (options.now ?? (() => new Date))().toISOString();
+  const operation2 = parseAbsoluteMobilePromotionOperation({
+    ...options,
+    auditDirectory: null,
+    conclusion: null,
+    createdAt: now,
+    format: ABSOLUTE_MOBILE_CI_PROMOTION_OPERATION_FORMAT,
+    githubStatus: null,
+    phase: "dispatching",
+    runId: null,
+    updatedAt: now,
+    url: null
+  });
+  await atomicWrite(absoluteMobilePromotionOperationPath(projectRoot, operation2.dispatchId), serialize(operation2), true);
+  return operation2;
+};
+var listAbsoluteMobilePromotionOperations = async (projectRoot) => {
+  const root = operationRoot(projectRoot);
+  if (!await access19(root).then(() => true).catch(() => false))
+    return [];
+  const entries = await readdir8(root, { withFileTypes: true });
+  if (entries.length > MAX_OPERATIONS)
+    throw new TypeError("Mobile promotion operation count exceeds the limit.");
+  const operations = await Promise.all(entries.filter((entry) => entry.isDirectory() && DISPATCH_ID_PATTERN2.test(entry.name)).map((entry) => readAbsoluteMobilePromotionOperation(projectRoot, entry.name)));
+  return operations.sort((left, right) => right.updatedAt.localeCompare(left.updatedAt));
+};
+var readAbsoluteMobilePromotionOperation = async (projectRoot, requestedDispatchId) => {
+  const path = absoluteMobilePromotionOperationPath(projectRoot, requestedDispatchId);
+  const metadata = await lstat2(path).catch(() => null);
+  if (!metadata?.isFile() || metadata.size > MAX_OPERATION_BYTES)
+    throw new TypeError(`Mobile promotion operation ${requestedDispatchId} was not found or is invalid.`);
+  const operation2 = parseAbsoluteMobilePromotionOperation(JSON.parse(await readFile23(path, "utf8")));
+  if (operation2.dispatchId !== requestedDispatchId)
+    throw new TypeError("Mobile promotion operation identity does not match.");
+  return operation2;
+};
+var relativeAbsoluteMobilePromotionOperationPath = (projectRoot, dispatchIdValue) => relative18(resolve20(projectRoot), absoluteMobilePromotionOperationPath(projectRoot, dispatchIdValue)).replaceAll("\\", "/");
 // src/mobile/ciWorkflow.ts
 import { existsSync as existsSync4 } from "fs";
-import { access as access19, mkdir as mkdir19, readFile as readFile23, writeFile as writeFile19 } from "fs/promises";
-import { dirname as dirname17, extname as extname5, relative as relative18, resolve as resolve20, sep as sep13 } from "path";
-var ABSOLUTE_MOBILE_CI_WORKFLOW_FORMAT = 3;
+import { access as access20, mkdir as mkdir20, readFile as readFile24, writeFile as writeFile19 } from "fs/promises";
+import { dirname as dirname18, extname as extname5, relative as relative19, resolve as resolve21, sep as sep14 } from "path";
+var ABSOLUTE_MOBILE_CI_WORKFLOW_FORMAT = 4;
 var SECRET_NAME_PATTERN = /^[A-Z][A-Z0-9_]*$/u;
 var CI_ENV_INDENTATION = 6;
 var RESERVED_SECRET_NAMES = new Set([
@@ -33970,7 +34261,7 @@ var RESERVED_SECRET_NAMES = new Set([
 ]);
 var exists9 = async (path) => {
   try {
-    await access19(path);
+    await access20(path);
     return true;
   } catch {
     return false;
@@ -33978,10 +34269,10 @@ var exists9 = async (path) => {
 };
 var yamlString = (value) => `'${value.replaceAll("'", "''")}'`;
 var projectPath2 = (projectRoot, value, field2, options = {}) => {
-  const root = resolve20(projectRoot);
-  const path = resolve20(root, value);
-  const portable = relative18(root, path).replaceAll("\\", "/");
-  if (portable === ".." || portable.startsWith(`..${sep13}`) || portable.startsWith("../") || portable === "") {
+  const root = resolve21(projectRoot);
+  const path = resolve21(root, value);
+  const portable = relative19(root, path).replaceAll("\\", "/");
+  if (portable === ".." || portable.startsWith(`..${sep14}`) || portable.startsWith("../") || portable === "") {
     throw new TypeError(`${field2} must remain inside the project root.`);
   }
   if (/\r|\n/u.test(portable) || portable.startsWith("-"))
@@ -33991,11 +34282,11 @@ var projectPath2 = (projectRoot, value, field2, options = {}) => {
   return portable;
 };
 var workflowOutputPath = (projectRoot, value) => {
-  const root = resolve20(projectRoot);
-  const workflows = resolve20(root, ".github/workflows");
-  const path = resolve20(root, value ?? ".github/workflows/absolute-mobile.yml");
-  const portable = relative18(workflows, path);
-  if (portable === ".." || portable.startsWith(`..${sep13}`) || extname5(path) !== ".yml" && extname5(path) !== ".yaml") {
+  const root = resolve21(projectRoot);
+  const workflows = resolve21(root, ".github/workflows");
+  const path = resolve21(root, value ?? ".github/workflows/absolute-mobile.yml");
+  const portable = relative19(workflows, path);
+  if (portable === ".." || portable.startsWith(`..${sep14}`) || extname5(path) !== ".yml" && extname5(path) !== ".yaml") {
     throw new TypeError("mobile ci github --output must be a .yml or .yaml file inside .github/workflows.");
   }
   return path;
@@ -34109,6 +34400,10 @@ var publishingInputs = (platforms, includePublishing) => {
         description: Source workflow run ID for promotion without rebuilding
         required: false
         type: string`,
+    `      dispatch_id:
+        description: Unique promotion correlation ID supplied by the AbsoluteJS CLI
+        required: false
+        type: string`,
     `      certification_base64:
         description: AbsoluteJS certification supplied by the promotion CLI
         required: false
@@ -34481,6 +34776,10 @@ var promotionValidationSteps = `      - name: Validate promotion handoff
             echo "Promotion requires a numeric source workflow run ID." >&2
             exit 1
           fi
+          if [[ ! "$ABSOLUTE_PROMOTION_DISPATCH_ID" =~ ^amp_[a-f0-9]{32}$ ]]; then
+            echo "Promotion requires a valid AbsoluteJS dispatch correlation ID." >&2
+            exit 1
+          fi
           if [[ -z "$ABSOLUTE_CERTIFICATION_BASE64" ]]; then
             echo "Promotion requires certification supplied by absolute mobile ci promote." >&2
             exit 1
@@ -34495,7 +34794,7 @@ var promotionSharedSteps = (platform3) => `      - name: Restore exact ${platfor
       - name: Record bounded promotion context
         shell: bash
         run: |
-          bun -e 'const sourceRunId = process.env.ABSOLUTE_SOURCE_RUN_ID; const promotionRunId = process.env.GITHUB_RUN_ID; if (!sourceRunId?.match(/^[1-9][0-9]*$/) || !promotionRunId?.match(/^[1-9][0-9]*$/)) throw new Error("Invalid promotion run identity"); await Bun.write(".absolutejs/mobile-ci/promotion-context.json", JSON.stringify({ format: 1, platform: ${JSON.stringify(platform3)}, promotionRunId, sourceArtifact: ${JSON.stringify(`absolute-mobile-${platform3}`)}, sourceRunId }, null, 2) + "\\n");'
+          bun -e 'const dispatchId = process.env.ABSOLUTE_PROMOTION_DISPATCH_ID; const sourceRunId = process.env.ABSOLUTE_SOURCE_RUN_ID; const promotionRunId = process.env.GITHUB_RUN_ID; if (!dispatchId?.match(/^amp_[a-f0-9]{32}$/) || !sourceRunId?.match(/^[1-9][0-9]*$/) || !promotionRunId?.match(/^[1-9][0-9]*$/)) throw new Error("Invalid promotion run identity"); await Bun.write(".absolutejs/mobile-ci/promotion-context.json", JSON.stringify({ dispatchId, format: 2, platform: ${JSON.stringify(platform3)}, promotionRunId, sourceArtifact: ${JSON.stringify(`absolute-mobile-${platform3}`)}, sourceRunId }, null, 2) + "\\n");'
       - name: Import and verify exact certification
         shell: bash
         run: |
@@ -34533,6 +34832,7 @@ var androidPromotionJob = (options) => {
       id-token: write
     env:
       ABSOLUTE_CERTIFICATION_BASE64: \${{ inputs.certification_base64 }}
+      ABSOLUTE_PROMOTION_DISPATCH_ID: \${{ inputs.dispatch_id }}
       ABSOLUTE_RELEASE_CHANNEL: \${{ inputs.channel }}
       ABSOLUTE_SOURCE_RUN_ID: \${{ inputs.source_run_id }}
       ABSOLUTE_PLAY_TRACK: \${{ inputs.play_track }}
@@ -34598,6 +34898,7 @@ var iosPromotionJob = (options) => {
       id-token: write
     env:
       ABSOLUTE_CERTIFICATION_BASE64: \${{ inputs.certification_base64 }}
+      ABSOLUTE_PROMOTION_DISPATCH_ID: \${{ inputs.dispatch_id }}
       ABSOLUTE_RELEASE_CHANNEL: \${{ inputs.channel }}
       ABSOLUTE_SOURCE_RUN_ID: \${{ inputs.source_run_id }}
       ABSOLUTE_TESTFLIGHT_GROUP: \${{ inputs.testflight_group }}
@@ -34688,6 +34989,7 @@ var createAbsoluteMobileGithubWorkflow = (options) => {
   });
   let workflow = `# Generated by AbsoluteJS. Regenerate with: absolute mobile ci github${includePublishing ? " --publish" : ""}
 name: AbsoluteJS Mobile
+run-name: \${{ inputs.operation == 'promote' && format('AbsoluteJS mobile promotion [{0}]', inputs.dispatch_id) || format('AbsoluteJS mobile {0}', github.event_name) }}
 
 on:
   pull_request:
@@ -34713,6 +35015,7 @@ jobs:
     env:
 ${environment}${includePublishing ? `
       ABSOLUTE_PROMOTION_PLATFORM: \${{ inputs.platform }}
+      ABSOLUTE_PROMOTION_DISPATCH_ID: \${{ inputs.dispatch_id }}
       ABSOLUTE_SOURCE_RUN_ID: \${{ inputs.source_run_id }}
       ABSOLUTE_CERTIFICATION_BASE64: \${{ inputs.certification_base64 }}` : ""}
     steps:
@@ -34744,11 +35047,11 @@ ${bundleAuditSteps}${platforms.includes("android") ? androidJob({ customSecrets,
 var writeAbsoluteMobileGithubWorkflow = async (options) => {
   const path = workflowOutputPath(options.projectRoot, options.outputPath);
   const generated = createAbsoluteMobileGithubWorkflow(options);
-  const previous = await exists9(path) ? await readFile23(path, "utf8") : undefined;
+  const previous = await exists9(path) ? await readFile24(path, "utf8") : undefined;
   if (previous !== undefined && previous !== generated.workflow && !options.force)
-    throw new TypeError(`${relative18(options.projectRoot, path)} already exists and differs. Rerun with --force to replace the generated workflow.`);
+    throw new TypeError(`${relative19(options.projectRoot, path)} already exists and differs. Rerun with --force to replace the generated workflow.`);
   if (previous !== generated.workflow) {
-    await mkdir19(dirname17(path), { recursive: true });
+    await mkdir20(dirname18(path), { recursive: true });
     await writeFile19(path, generated.workflow);
   }
   return {
@@ -34767,20 +35070,20 @@ init_materializedBundle();
 init_mobilePreview();
 
 // src/mobile/nativeDeepLinks.ts
-import { readFile as readFile24, rename as rename15, writeFile as writeFile20 } from "fs/promises";
-import { join as join27 } from "path";
+import { readFile as readFile25, rename as rename16, writeFile as writeFile20 } from "fs/promises";
+import { join as join28 } from "path";
 var START_MARKER = "<!-- absolutejs:deep-links:start -->";
 var END_MARKER = "<!-- absolutejs:deep-links:end -->";
 var IOS_ENTITLEMENTS = "App/AbsoluteJS.entitlements";
 var NOT_FOUND = -1;
 var escapeXml = (value) => value.replaceAll("&", "&amp;").replaceAll('"', "&quot;").replaceAll("'", "&apos;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
 var writeChangedFile = async (path, source) => {
-  const current = await readFile24(path, "utf8");
+  const current = await readFile25(path, "utf8");
   if (current === source)
     return false;
   const temporary = `${path}.${crypto.randomUUID()}.tmp`;
   await writeFile20(temporary, source, { flag: "wx" });
-  await rename15(temporary, path);
+  await rename16(temporary, path);
   return true;
 };
 var replaceManagedRegion = (source, region, insertAt) => {
@@ -34825,8 +35128,8 @@ ${hosts}
 `;
 };
 var configureAndroid = async (config) => {
-  const path = join27(config.nativeProjectDirectory, "android/app/src/main/AndroidManifest.xml");
-  const source = await readFile24(path, "utf8");
+  const path = join28(config.nativeProjectDirectory, "android/app/src/main/AndroidManifest.xml");
+  const source = await readFile25(path, "utf8");
   const mainActivity = source.indexOf('android:name=".MainActivity"');
   if (mainActivity === NOT_FOUND) {
     throw new TypeError("Android MainActivity was not found.");
@@ -34851,8 +35154,8 @@ var iosSchemeRegion = (scheme) => `	${START_MARKER}
 	${END_MARKER}
 `;
 var configureIosInfo = async (config) => {
-  const path = join27(config.nativeProjectDirectory, "ios/App/App/Info.plist");
-  const source = await readFile24(path, "utf8");
+  const path = join28(config.nativeProjectDirectory, "ios/App/App/Info.plist");
+  const source = await readFile25(path, "utf8");
   const region = config.deepLinkScheme ? iosSchemeRegion(config.deepLinkScheme) : `	${START_MARKER}
 	${END_MARKER}
 `;
@@ -34875,10 +35178,10 @@ ${domains}
 `;
 };
 var configureIosEntitlements = async (config) => {
-  const path = join27(config.nativeProjectDirectory, "ios/App/AbsoluteJS.entitlements");
+  const path = join28(config.nativeProjectDirectory, "ios/App/AbsoluteJS.entitlements");
   let current = "";
   try {
-    current = await readFile24(path, "utf8");
+    current = await readFile25(path, "utf8");
   } catch (error) {
     if (!(error instanceof Error) || !("code" in error) || error.code !== "ENOENT") {
       throw error;
@@ -34889,12 +35192,12 @@ var configureIosEntitlements = async (config) => {
     return false;
   const temporary = `${path}.${crypto.randomUUID()}.tmp`;
   await writeFile20(temporary, source, { flag: "wx" });
-  await rename15(temporary, path);
+  await rename16(temporary, path);
   return true;
 };
 var configureIosProject = async (config) => {
-  const path = join27(config.nativeProjectDirectory, "ios/App/App.xcodeproj/project.pbxproj");
-  const source = await readFile24(path, "utf8");
+  const path = join28(config.nativeProjectDirectory, "ios/App/App.xcodeproj/project.pbxproj");
+  const source = await readFile25(path, "utf8");
   const declarations = [
     ...source.matchAll(/CODE_SIGN_ENTITLEMENTS = ([^;]+);/g)
   ].map((match) => match[1]);
@@ -34933,8 +35236,8 @@ var applyAbsoluteNativeDeepLinks = async (config, platforms = config.platforms)
 };
 // src/mobile/nativeDeviceCapabilities.ts
 init_deviceCapabilities();
-import { readFile as readFile25, rename as rename16, writeFile as writeFile21 } from "fs/promises";
-import { join as join28 } from "path";
+import { readFile as readFile26, rename as rename17, writeFile as writeFile21 } from "fs/promises";
+import { join as join29 } from "path";
 var START_MARKER2 = "<!-- absolutejs:device-capabilities:start -->";
 var END_MARKER2 = "<!-- absolutejs:device-capabilities:end -->";
 var NOT_FOUND2 = -1;
@@ -34944,12 +35247,12 @@ var PUSH_START_MARKER = "absolutejs:push-notifications:start";
 var PUSH_END_MARKER = "absolutejs:push-notifications:end";
 var escapeXml2 = (value) => value.replaceAll("&", "&amp;").replaceAll('"', "&quot;").replaceAll("'", "&apos;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
 var writeChangedFile2 = async (path, source) => {
-  const current = await readFile25(path, "utf8");
+  const current = await readFile26(path, "utf8");
   if (current === source)
     return false;
   const temporary = `${path}.${crypto.randomUUID()}.tmp`;
   await writeFile21(temporary, source, { flag: "wx" });
-  await rename16(temporary, path);
+  await rename17(temporary, path);
   return true;
 };
 var writeOptionalChangedFile = async (path, source) => {
@@ -34964,7 +35267,7 @@ var writeOptionalChangedFile = async (path, source) => {
 };
 var optionalSource = async (path) => {
   try {
-    return await readFile25(path, "utf8");
+    return await readFile26(path, "utf8");
   } catch (error) {
     if (typeof error === "object" && error !== null && Reflect.get(error, "code") === "ENOENT")
       return null;
@@ -35084,8 +35387,8 @@ var writeIosPrivacyManifest = async (path, current, source) => {
 var configureIosPrivacyProject = async (config, requirements) => {
   if (requirements.iosPrivacyAccessedApis.length === 0)
     return false;
-  const projectPath3 = join28(config.nativeProjectDirectory, "ios/App/App.xcodeproj/project.pbxproj");
-  const project = await readFile25(projectPath3, "utf8");
+  const projectPath3 = join29(config.nativeProjectDirectory, "ios/App/App.xcodeproj/project.pbxproj");
+  const project = await readFile26(projectPath3, "utf8");
   return writeChangedFile2(projectPath3, addIosPrivacyProjectReference(project));
 };
 var addIosPrivacyProjectReference = (source) => {
@@ -35137,8 +35440,8 @@ ${next.slice(index)}`;
   return next;
 };
 var configureIos2 = async (config, plan) => {
-  const path = join28(config.nativeProjectDirectory, "ios/App/App/Info.plist");
-  const source = await readFile25(path, "utf8");
+  const path = join29(config.nativeProjectDirectory, "ios/App/App/Info.plist");
+  const source = await readFile26(path, "utf8");
   const requirements = absoluteDeviceNativeRequirements(plan);
   const existingSystemBars = source.match(/<key>UIViewControllerBasedStatusBarAppearance<\/key>\s*<(true|false)\s*\/>/u);
   const ownedStart = source.indexOf(START_MARKER2);
@@ -35158,7 +35461,7 @@ ${content}
 	${END_MARKER2}
 ` : "";
   const infoChanged = await writeChangedFile2(path, managed(source, region, source.lastIndexOf("</dict>")));
-  const privacyPath = join28(config.nativeProjectDirectory, "ios/App/App/PrivacyInfo.xcprivacy");
+  const privacyPath = join29(config.nativeProjectDirectory, "ios/App/App/PrivacyInfo.xcprivacy");
   const privacyCurrent = await optionalSource(privacyPath);
   const privacySource = privacyManifestSource(privacyCurrent, requirements);
   const [privacyChanged, projectChanged, pushChanged] = await Promise.all([
@@ -35169,7 +35472,7 @@ ${content}
   return infoChanged || privacyChanged || projectChanged || pushChanged;
 };
 var configureIosPushNotifications = async (config, enabled) => {
-  const entitlementsPath = join28(config.nativeProjectDirectory, "ios/App/AbsoluteJS.entitlements");
+  const entitlementsPath = join29(config.nativeProjectDirectory, "ios/App/AbsoluteJS.entitlements");
   const entitlements = await optionalSource(entitlementsPath);
   if (entitlements === null && !enabled)
     return false;
@@ -35181,7 +35484,7 @@ var configureIosPushNotifications = async (config, enabled) => {
 	<!-- ${PUSH_END_MARKER} -->
 ` : "";
   const nextEntitlements = replacePushRegion(entitlements, entitlementRegion, entitlements.lastIndexOf("</dict>"));
-  const delegatePath = join28(config.nativeProjectDirectory, "ios/App/App/AppDelegate.swift");
+  const delegatePath = join29(config.nativeProjectDirectory, "ios/App/App/AppDelegate.swift");
   const delegate = await optionalSource(delegatePath);
   if (delegate === null && !enabled)
     return false;
@@ -35230,8 +35533,8 @@ var replacePushRegion = (source, region, insertion) => {
   return `${source.slice(0, insertion)}${region}${source.slice(insertion)}`;
 };
 var configureAndroid2 = async (config, plan) => {
-  const path = join28(config.nativeProjectDirectory, "android/app/src/main/AndroidManifest.xml");
-  const source = await readFile25(path, "utf8");
+  const path = join29(config.nativeProjectDirectory, "android/app/src/main/AndroidManifest.xml");
+  const source = await readFile26(path, "utf8");
   const permissions = absoluteDeviceNativeRequirements(plan).androidPermissions;
   const content = permissions.map((permission) => `    <uses-permission android:name="${escapeXml2(permission)}" />`).join(`
 `);
@@ -35266,7 +35569,7 @@ ${content}
     throw new TypeError(`Android google-services.json does not contain package ${config.appId}.`);
   const [manifestChanged, firebaseChanged] = await Promise.all([
     writeChangedFile2(path, nextManifest),
-    writeOptionalChangedFile(join28(config.nativeProjectDirectory, "android/app/google-services.json"), firebaseSource)
+    writeOptionalChangedFile(join29(config.nativeProjectDirectory, "android/app/google-services.json"), firebaseSource)
   ]);
   return manifestChanged || firebaseChanged;
 };
@@ -35285,14 +35588,14 @@ init_nativeAuth();
 
 // src/mobile/nativeUpdates.ts
 import {
-  mkdir as mkdir20,
-  readFile as readFile26,
-  readdir as readdir8,
-  rename as rename17,
-  rm as rm15,
+  mkdir as mkdir21,
+  readFile as readFile27,
+  readdir as readdir9,
+  rename as rename18,
+  rm as rm16,
   writeFile as writeFile22
 } from "fs/promises";
-import { dirname as dirname19, join as join29 } from "path";
+import { dirname as dirname20, join as join30 } from "path";
 var START = "// absolutejs:mobile-updates:start";
 var END = "// absolutejs:mobile-updates:end";
 var PLUGIN_START = "// absolutejs:mobile-update-plugin:start";
@@ -35300,32 +35603,32 @@ var PLUGIN_END = "// absolutejs:mobile-update-plugin:end";
 var ANDROID_PLUGIN = "AbsoluteMobileUpdateWatchdogPlugin.java";
 var optionalSource2 = async (path) => {
   try {
-    return await readFile26(path, "utf8");
+    return await readFile27(path, "utf8");
   } catch (error) {
     if (typeof error === "object" && error !== null && Reflect.get(error, "code") === "ENOENT")
       return null;
     throw error;
   }
 };
-var isRecord15 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var isRecord16 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var writeChanged = async (path, source) => {
   const current = await optionalSource2(path);
   if (current === source)
     return false;
-  await mkdir20(dirname19(path), { recursive: true });
+  await mkdir21(dirname20(path), { recursive: true });
   if (current === null) {
     await writeFile22(path, source, { flag: "wx" });
     return true;
   }
   const temporary = `${path}.${crypto.randomUUID()}.tmp`;
   await writeFile22(temporary, source, { flag: "wx" });
-  await rename17(temporary, path);
+  await rename18(temporary, path);
   return true;
 };
 var removeOwnedFile = async (path) => {
   if (await optionalSource2(path) === null)
     return false;
-  await rm15(path);
+  await rm16(path);
   return true;
 };
 var replaceMarkedRegion = (source, start, end, region, insertion, error) => {
@@ -35462,9 +35765,9 @@ public final class AbsoluteMobileUpdateWatchdogPlugin: CAPPlugin, CAPBridgedPlug
 ${PLUGIN_END}
 `;
 var configureIos3 = async (config, enabled) => {
-  const path = join29(config.nativeProjectDirectory, "ios/App/App/AppDelegate.swift");
-  const capacitorConfigPath = join29(config.nativeProjectDirectory, "ios/App/App/capacitor.config.json");
-  let source = await readFile26(path, "utf8");
+  const path = join30(config.nativeProjectDirectory, "ios/App/App/AppDelegate.swift");
+  const capacitorConfigPath = join30(config.nativeProjectDirectory, "ios/App/App/capacitor.config.json");
+  let source = await readFile27(path, "utf8");
   const launch2 = source.indexOf("didFinishLaunchingWithOptions");
   const brace = launch2 < 0 ? -1 : source.indexOf("{", launch2);
   const launchRegion = enabled ? `        ${START}
@@ -35475,11 +35778,11 @@ var configureIos3 = async (config, enabled) => {
 `, brace) + 1, "Could not find a safe iOS location for mobile update recovery.");
   const plugin = enabled ? iosPluginRegion(config.updates?.bootTimeoutMs ?? 20000) : "";
   source = replaceMarkedRegion(source, PLUGIN_START, PLUGIN_END, plugin, source.length, "Could not find a safe iOS location for the mobile update watchdog.");
-  const capacitorConfigSource2 = await readFile26(capacitorConfigPath, "utf8");
+  const capacitorConfigSource2 = await readFile27(capacitorConfigPath, "utf8");
   let capacitorConfig;
   try {
     const value = JSON.parse(capacitorConfigSource2);
-    if (!isRecord15(value))
+    if (!isRecord16(value))
       throw new TypeError;
     capacitorConfig = value;
   } catch {
@@ -35648,19 +35951,19 @@ public final class AbsoluteMobileUpdateWatchdogPlugin extends Plugin {
 var androidActivityInRoot = async (root) => {
   let entries;
   try {
-    entries = await readdir8(root, { recursive: true });
+    entries = await readdir9(root, { recursive: true });
   } catch (error) {
     if (typeof error === "object" && error !== null && Reflect.get(error, "code") === "ENOENT")
       return;
     throw error;
   }
   const candidate = entries.find((entry) => entry.endsWith("/MainActivity.java") || entry.endsWith("/MainActivity.kt") || entry === "MainActivity.java" || entry === "MainActivity.kt");
-  return candidate ? join29(root, candidate) : undefined;
+  return candidate ? join30(root, candidate) : undefined;
 };
 var androidActivity = async (config) => {
   const roots = [
-    join29(config.nativeProjectDirectory, "android/app/src/main/java"),
-    join29(config.nativeProjectDirectory, "android/app/src/main/kotlin")
+    join30(config.nativeProjectDirectory, "android/app/src/main/java"),
+    join30(config.nativeProjectDirectory, "android/app/src/main/kotlin")
   ];
   const candidates = await Promise.all(roots.map(androidActivityInRoot));
   const candidate = candidates.find((value) => value !== undefined);
@@ -35759,12 +36062,12 @@ var injectAndroidActivity = (source, enabled) => {
 };
 var configureAndroid3 = async (config, enabled) => {
   const activityPath = await androidActivity(config);
-  const activity = await readFile26(activityPath, "utf8");
+  const activity = await readFile27(activityPath, "utf8");
   const packageName = activity.match(/^\s*package\s+([A-Za-z0-9_.]+)\s*[;\n]/mu)?.[1];
   if (!packageName)
     throw new TypeError("Android MainActivity package declaration was not found.");
   const packagePath = packageName.replaceAll(".", "/");
-  const pluginPath = join29(config.nativeProjectDirectory, "android/app/src/main/java", packagePath, ANDROID_PLUGIN);
+  const pluginPath = join30(config.nativeProjectDirectory, "android/app/src/main/java", packagePath, ANDROID_PLUGIN);
   const changed = await Promise.all([
     writeChanged(activityPath, injectAndroidActivity(activity, enabled)),
     enabled ? writeChanged(pluginPath, androidPluginSource(packageName, config.updates?.bootTimeoutMs ?? 20000)) : removeOwnedFile(pluginPath)
@@ -35784,14 +36087,14 @@ var applyAbsoluteNativeUpdates = async (config, platforms = config.platforms) =>
 };
 // src/mobile/nativeObservability.ts
 import {
-  mkdir as mkdir21,
-  readFile as readFile27,
-  readdir as readdir9,
-  rename as rename18,
-  rm as rm16,
+  mkdir as mkdir22,
+  readFile as readFile28,
+  readdir as readdir10,
+  rename as rename19,
+  rm as rm17,
   writeFile as writeFile23
 } from "fs/promises";
-import { dirname as dirname20, join as join30 } from "path";
+import { dirname as dirname21, join as join31 } from "path";
 var START2 = "// absolutejs:native-observability:start";
 var END2 = "// absolutejs:native-observability:end";
 var PLUGIN_START2 = "// absolutejs:native-observability-plugin:start";
@@ -35799,7 +36102,7 @@ var PLUGIN_END2 = "// absolutejs:native-observability-plugin:end";
 var ANDROID_PLUGIN2 = "AbsoluteMobileObservabilityPlugin.java";
 var optionalSource3 = async (path) => {
   try {
-    return await readFile27(path, "utf8");
+    return await readFile28(path, "utf8");
   } catch (error) {
     if (typeof error === "object" && error !== null && Reflect.get(error, "code") === "ENOENT")
       return null;
@@ -35810,23 +36113,23 @@ var writeChanged2 = async (path, source) => {
   const current = await optionalSource3(path);
   if (current === source)
     return false;
-  await mkdir21(dirname20(path), { recursive: true });
+  await mkdir22(dirname21(path), { recursive: true });
   if (current === null) {
     await writeFile23(path, source, { flag: "wx" });
     return true;
   }
   const temporary = `${path}.${crypto.randomUUID()}.tmp`;
   await writeFile23(temporary, source, { flag: "wx" });
-  await rename18(temporary, path);
+  await rename19(temporary, path);
   return true;
 };
 var removeOwnedFile2 = async (path) => {
   if (await optionalSource3(path) === null)
     return false;
-  await rm16(path);
+  await rm17(path);
   return true;
 };
-var isRecord16 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var isRecord17 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var replaceMarkedRegion2 = (source, start, end, region, insertion, error) => {
   const existingStart = source.indexOf(start);
   const existingEnd = source.indexOf(end);
@@ -35959,9 +36262,9 @@ public final class AbsoluteMobileObservabilityPlugin: CAPPlugin, CAPBridgedPlugi
 ${PLUGIN_END2}
 `;
 var configureIos4 = async (config, enabled) => {
-  const path = join30(config.nativeProjectDirectory, "ios/App/App/AppDelegate.swift");
-  const capacitorConfigPath = join30(config.nativeProjectDirectory, "ios/App/App/capacitor.config.json");
-  let source = await readFile27(path, "utf8");
+  const path = join31(config.nativeProjectDirectory, "ios/App/App/AppDelegate.swift");
+  const capacitorConfigPath = join31(config.nativeProjectDirectory, "ios/App/App/capacitor.config.json");
+  let source = await readFile28(path, "utf8");
   if (enabled && !source.includes("import MetricKit")) {
     const capacitorImport = source.lastIndexOf("import Capacitor");
     if (capacitorImport < 0)
@@ -35975,11 +36278,11 @@ ${source.slice(newline + 1)}`;
     source = source.replace(`import MetricKit
 `, "");
   source = replaceMarkedRegion2(source, PLUGIN_START2, PLUGIN_END2, enabled ? iosPluginRegion2 : "", source.length, "Could not find a safe iOS location for native observability.");
-  const capacitorConfigSource2 = await readFile27(capacitorConfigPath, "utf8");
+  const capacitorConfigSource2 = await readFile28(capacitorConfigPath, "utf8");
   let capacitorConfig;
   try {
     const value = JSON.parse(capacitorConfigSource2);
-    if (!isRecord16(value))
+    if (!isRecord17(value))
       throw new TypeError;
     capacitorConfig = value;
   } catch {
@@ -36213,19 +36516,19 @@ public final class AbsoluteMobileObservabilityPlugin extends Plugin {
 var androidActivityInRoot2 = async (root) => {
   let entries;
   try {
-    entries = await readdir9(root, { recursive: true });
+    entries = await readdir10(root, { recursive: true });
   } catch (error) {
     if (typeof error === "object" && error !== null && Reflect.get(error, "code") === "ENOENT")
       return;
     throw error;
   }
   const candidate = entries.find((entry) => entry.endsWith("/MainActivity.java") || entry.endsWith("/MainActivity.kt") || entry === "MainActivity.java" || entry === "MainActivity.kt");
-  return candidate ? join30(root, candidate) : undefined;
+  return candidate ? join31(root, candidate) : undefined;
 };
 var androidActivity2 = async (config) => {
   const roots = [
-    join30(config.nativeProjectDirectory, "android/app/src/main/java"),
-    join30(config.nativeProjectDirectory, "android/app/src/main/kotlin")
+    join31(config.nativeProjectDirectory, "android/app/src/main/java"),
+    join31(config.nativeProjectDirectory, "android/app/src/main/kotlin")
   ];
   const candidates = await Promise.all(roots.map(androidActivityInRoot2));
   const candidate = candidates.find((value) => value !== undefined);
@@ -36293,11 +36596,11 @@ var injectAndroidActivity2 = (source, enabled) => {
 };
 var configureAndroid4 = async (config, enabled) => {
   const activityPath = await androidActivity2(config);
-  const activity = await readFile27(activityPath, "utf8");
+  const activity = await readFile28(activityPath, "utf8");
   const packageName = activity.match(/^\s*package\s+([A-Za-z0-9_.]+)\s*[;\n]/mu)?.[1];
   if (!packageName)
     throw new TypeError("Android MainActivity package declaration was not found.");
-  const pluginPath = join30(config.nativeProjectDirectory, "android/app/src/main/java", packageName.replaceAll(".", "/"), ANDROID_PLUGIN2);
+  const pluginPath = join31(config.nativeProjectDirectory, "android/app/src/main/java", packageName.replaceAll(".", "/"), ANDROID_PLUGIN2);
   const changed = await Promise.all([
     writeChanged2(activityPath, injectAndroidActivity2(activity, enabled)),
     enabled ? writeChanged2(pluginPath, androidPluginSource2(packageName)) : removeOwnedFile2(pluginPath)
@@ -36316,8 +36619,8 @@ var applyAbsoluteNativeObservability = async (config, platforms = config.platfor
   return { changed: changed.some(Boolean) };
 };
 // src/mobile/nativeReleaseReadiness.ts
-import { mkdir as mkdir22, readFile as readFile28, readdir as readdir10, rename as rename19, writeFile as writeFile24 } from "fs/promises";
-import { dirname as dirname21, join as join31 } from "path";
+import { mkdir as mkdir23, readFile as readFile29, readdir as readdir11, rename as rename20, writeFile as writeFile24 } from "fs/promises";
+import { dirname as dirname22, join as join32 } from "path";
 var START3 = "// absolutejs:release-readiness:start";
 var END3 = "// absolutejs:release-readiness:end";
 var IOS_PLUGIN_START = "// absolutejs:release-readiness-plugin:start";
@@ -36325,7 +36628,7 @@ var IOS_PLUGIN_END = "// absolutejs:release-readiness-plugin:end";
 var ANDROID_PLUGIN3 = "AbsoluteReleaseReadinessPlugin.java";
 var optionalSource4 = async (path) => {
   try {
-    return await readFile28(path, "utf8");
+    return await readFile29(path, "utf8");
   } catch (error) {
     if (typeof error === "object" && error !== null && Reflect.get(error, "code") === "ENOENT")
       return null;
@@ -36336,32 +36639,32 @@ var writeChanged3 = async (path, source) => {
   const current = await optionalSource4(path);
   if (current === source)
     return false;
-  await mkdir22(dirname21(path), { recursive: true });
+  await mkdir23(dirname22(path), { recursive: true });
   if (current === null) {
     await writeFile24(path, source, { flag: "wx" });
     return true;
   }
   const temporary = `${path}.${crypto.randomUUID()}.tmp`;
   await writeFile24(temporary, source, { flag: "wx" });
-  await rename19(temporary, path);
+  await rename20(temporary, path);
   return true;
 };
 var activityInRoot = async (root) => {
   let entries;
   try {
-    entries = await readdir10(root, { recursive: true });
+    entries = await readdir11(root, { recursive: true });
   } catch (error) {
     if (typeof error === "object" && error !== null && Reflect.get(error, "code") === "ENOENT")
       return;
     throw error;
   }
   const candidate = entries.find((entry) => entry.endsWith("/MainActivity.java") || entry.endsWith("/MainActivity.kt") || entry === "MainActivity.java" || entry === "MainActivity.kt");
-  return candidate ? join31(root, candidate) : undefined;
+  return candidate ? join32(root, candidate) : undefined;
 };
 var activityPath = async (config) => {
   const roots = [
-    join31(config.nativeProjectDirectory, "android/app/src/main/java"),
-    join31(config.nativeProjectDirectory, "android/app/src/main/kotlin")
+    join32(config.nativeProjectDirectory, "android/app/src/main/java"),
+    join32(config.nativeProjectDirectory, "android/app/src/main/kotlin")
   ];
   const candidates = await Promise.all(roots.map(activityInRoot));
   const candidate = candidates.find((value) => value !== undefined);
@@ -36471,9 +36774,9 @@ var replaceIosPluginRegion = (appDelegate, existingStart, existingEnd) => {
   return `${appDelegate.slice(0, from)}${iosPluginRegion3}${appDelegate.slice(through)}`;
 };
 var configureIos5 = async (config) => {
-  const appDelegatePath = join31(config.nativeProjectDirectory, "ios/App/App/AppDelegate.swift");
-  const capacitorConfigPath = join31(config.nativeProjectDirectory, "ios/App/App/capacitor.config.json");
-  const appDelegate = await readFile28(appDelegatePath, "utf8");
+  const appDelegatePath = join32(config.nativeProjectDirectory, "ios/App/App/AppDelegate.swift");
+  const capacitorConfigPath = join32(config.nativeProjectDirectory, "ios/App/App/capacitor.config.json");
+  const appDelegate = await readFile29(appDelegatePath, "utf8");
   const existingStart = appDelegate.indexOf(IOS_PLUGIN_START);
   const existingEnd = appDelegate.indexOf(IOS_PLUGIN_END);
   if (existingStart < 0 !== existingEnd < 0 || existingStart >= 0 && existingEnd < existingStart)
@@ -36483,7 +36786,7 @@ var configureIos5 = async (config) => {
 ${iosPluginRegion3}` : replaceIosPluginRegion(appDelegate, existingStart, existingEnd);
   let capacitorConfig;
   try {
-    capacitorConfig = JSON.parse(await readFile28(capacitorConfigPath, "utf8"));
+    capacitorConfig = JSON.parse(await readFile29(capacitorConfigPath, "utf8"));
   } catch {
     throw new TypeError("iOS capacitor.config.json is invalid; run Capacitor sync before projecting release readiness.");
   }
@@ -36508,11 +36811,11 @@ ${iosPluginRegion3}` : replaceIosPluginRegion(appDelegate, existingStart, existi
 };
 var configureAndroid5 = async (config) => {
   const mainActivityPath = await activityPath(config);
-  const activity = await readFile28(mainActivityPath, "utf8");
+  const activity = await readFile29(mainActivityPath, "utf8");
   const packageName = activity.match(/^\s*package\s+([A-Za-z0-9_.]+)\s*[;\n]/mu)?.[1];
   if (!packageName)
     throw new TypeError("Android MainActivity package declaration was not found.");
-  const pluginPath = join31(config.nativeProjectDirectory, "android/app/src/main/java", packageName.replaceAll(".", "/"), ANDROID_PLUGIN3);
+  const pluginPath = join32(config.nativeProjectDirectory, "android/app/src/main/java", packageName.replaceAll(".", "/"), ANDROID_PLUGIN3);
   const changed = await Promise.all([
     writeChanged3(mainActivityPath, injectRegistration(activity)),
     writeChanged3(pluginPath, pluginSource(packageName))
@@ -36535,8 +36838,8 @@ init_producerContext();
 init_releaseArtifact();
 
 // src/mobile/releasePublisher.ts
-import { access as access20 } from "fs/promises";
-import { isAbsolute as isAbsolute12, relative as relative19, resolve as resolve21, sep as sep14 } from "path";
+import { access as access21 } from "fs/promises";
+import { isAbsolute as isAbsolute13, relative as relative20, resolve as resolve22, sep as sep15 } from "path";
 import { pathToFileURL as pathToFileURL3 } from "url";
 var prepareAbsoluteIosRelease = async (publisher, options) => {
   if (typeof publisher.prepareIosRelease !== "function") {
@@ -36570,24 +36873,24 @@ var requireCertificationReceipt = (publication, certification, requirement, rele
   if (verification && (!receipt.provenance || receipt.provenance.subject !== releaseId))
     throw new TypeError("Native release registry did not retain trusted certification provenance.");
 };
-var isRecord17 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
-var isPublisher = (value) => isRecord17(value) && typeof value.publish === "function";
+var isRecord18 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var isPublisher = (value) => isRecord18(value) && typeof value.publish === "function";
 var publisherModulePath = (projectRoot, requested) => {
-  const root = resolve21(projectRoot);
-  const path = resolve21(root, requested);
-  const projectRelative = relative19(root, path);
-  if (projectRelative === ".." || projectRelative.startsWith(`..${sep14}`) || isAbsolute12(projectRelative)) {
+  const root = resolve22(projectRoot);
+  const path = resolve22(root, requested);
+  const projectRelative = relative20(root, path);
+  if (projectRelative === ".." || projectRelative.startsWith(`..${sep15}`) || isAbsolute13(projectRelative)) {
     throw new TypeError("mobile publish --registry must remain inside the project.");
   }
   return path;
 };
 var loadAbsoluteNativeReleasePublisher = async (projectRoot, requestedModulePath) => {
   const modulePath = publisherModulePath(projectRoot, requestedModulePath);
-  await access20(modulePath).catch(() => {
+  await access21(modulePath).catch(() => {
     throw new TypeError(`Native release registry module does not exist: ${modulePath}`);
   });
   const loaded = await import(pathToFileURL3(modulePath).href);
-  const publisher = isRecord17(loaded) ? loaded.default ?? loaded.registry : undefined;
+  const publisher = isRecord18(loaded) ? loaded.default ?? loaded.registry : undefined;
   if (!isPublisher(publisher)) {
     throw new TypeError("Native release registry module must default-export a registry with publish(options).");
   }
@@ -36669,7 +36972,7 @@ var publishAbsoluteIosRelease = async (options) => {
 init_pageProtocol();
 init_releaseArtifact();
 import { existsSync as existsSync7, readFileSync as readFileSync8 } from "fs";
-import { dirname as dirname22, extname as extname6, relative as relative20, resolve as resolve22 } from "path";
+import { dirname as dirname23, extname as extname6, relative as relative21, resolve as resolve23 } from "path";
 import ts2 from "typescript";
 var ROUTE_METHODS = new Set(["get", "head"]);
 var SOURCE_FILTER = /\.[cm]?[jt]sx?$/;
@@ -36720,7 +37023,7 @@ var PAGE_HANDLERS = new Map([
   ]
 ]);
 var posixPath = (value) => value.replace(/\\/g, "/");
-var findTsconfig = (entry, projectRoot) => ts2.findConfigFile(dirname22(entry), existsSync7, "tsconfig.json") ?? ts2.findConfigFile(projectRoot, existsSync7, "tsconfig.json");
+var findTsconfig = (entry, projectRoot) => ts2.findConfigFile(dirname23(entry), existsSync7, "tsconfig.json") ?? ts2.findConfigFile(projectRoot, existsSync7, "tsconfig.json");
 var createProgram = (entry, projectRoot) => {
   const configPath2 = findTsconfig(entry, projectRoot);
   if (!configPath2) {
@@ -36732,7 +37035,7 @@ var createProgram = (entry, projectRoot) => {
       target: ts2.ScriptTarget.ESNext
     });
   }
-  const parsed = ts2.parseJsonConfigFileContent(ts2.readConfigFile(configPath2, (path) => readFileSync8(path, "utf8")).config, ts2.sys, dirname22(configPath2));
+  const parsed = ts2.parseJsonConfigFileContent(ts2.readConfigFile(configPath2, (path) => readFileSync8(path, "utf8")).config, ts2.sys, dirname23(configPath2));
   if (!parsed.fileNames.includes(entry))
     parsed.fileNames.push(entry);
   return ts2.createProgram(parsed.fileNames, parsed.options);
@@ -36838,7 +37141,7 @@ var resolvePageIdentity = (expression, sourceFile, checker, projectRoot) => {
   const declaration = symbol?.declarations?.[0];
   const file = declaration?.getSourceFile().fileName ?? sourceFile.fileName;
   const exportedName = symbol?.name ?? expression.getText(sourceFile);
-  const source = posixPath(relative20(projectRoot, file));
+  const source = posixPath(relative21(projectRoot, file));
   return `${source}#${exportedName}`;
 };
 var resolveAlias = (symbol, checker) => {
@@ -37077,7 +37380,7 @@ var analyzeProgram = (program, projectRoot) => {
   const checker = program.getTypeChecker();
   const analyzed = new Map;
   for (const sourceFile of program.getSourceFiles()) {
-    const resolvedFile = resolve22(sourceFile.fileName);
+    const resolvedFile = resolve23(sourceFile.fileName);
     if (!isProjectSource(sourceFile, resolvedFile, projectRoot))
       continue;
     const analysis = analyzeSourceFile(sourceFile, checker, projectRoot);
@@ -37170,14 +37473,14 @@ var transformFile = (source, fileName, analysis) => {
 };
 var ABSOLUTE_MOBILE_TRANSFORM_PROTOCOL = ABSOLUTE_MOBILE_PAGE_PROTOCOL_VERSION;
 var createAbsoluteMobileRouteMetadataPlugin = (options) => {
-  const projectRoot = resolve22(options.projectRoot ?? process.cwd());
-  const entry = resolve22(options.entry);
+  const projectRoot = resolve23(options.projectRoot ?? process.cwd());
+  const entry = resolve23(options.entry);
   const analyzed = analyzeProgram(createProgram(entry, projectRoot), projectRoot);
   return {
     name: "absolute-mobile-route-metadata",
     setup(build) {
       build.onLoad({ filter: SOURCE_FILTER }, async ({ path }) => {
-        const analysis = analyzed.get(resolve22(path));
+        const analysis = analyzed.get(resolve23(path));
         if (!analysis)
           return;
         const source = await Bun.file(path).text();
@@ -37190,11 +37493,11 @@ var createAbsoluteMobileRouteMetadataPlugin = (options) => {
   };
 };
 var inspectAbsoluteMobileRouteMetadata = (options) => {
-  const projectRoot = resolve22(options.projectRoot ?? process.cwd());
-  const entry = resolve22(options.entry);
+  const projectRoot = resolve23(options.projectRoot ?? process.cwd());
+  const entry = resolve23(options.entry);
   const analyzed = analyzeProgram(createProgram(entry, projectRoot), projectRoot);
   return [...analyzed.entries()].flatMap(([file, analysis]) => [...analysis.byRouteCall.values()].map(({ metadata }) => ({
-    file: posixPath(relative20(projectRoot, file)),
+    file: posixPath(relative21(projectRoot, file)),
     metadata
   })));
 };
@@ -37528,7 +37831,7 @@ var createCapacitor = (win) => {
           callbackId
         }, callback);
       };
-      const p = new Promise((resolve23) => call.then(() => resolve23({ remove })));
+      const p = new Promise((resolve24) => call.then(() => resolve24({ remove })));
       p.remove = async () => {
         console.warn(`Using addListener() without 'await' is deprecated.`);
         await remove();
@@ -37733,11 +38036,11 @@ class CapacitorCookiesPluginWeb extends WebPlugin {
 var CapacitorCookies = registerPlugin("CapacitorCookies", {
   web: () => new CapacitorCookiesPluginWeb
 });
-var readBlobAsBase64 = async (blob) => new Promise((resolve23, reject) => {
+var readBlobAsBase64 = async (blob) => new Promise((resolve24, reject) => {
   const reader = new FileReader;
   reader.onload = () => {
     const base64String = reader.result;
-    resolve23(base64String.indexOf(",") >= 0 ? base64String.split(",")[1] : base64String);
+    resolve24(base64String.indexOf(",") >= 0 ? base64String.split(",")[1] : base64String);
   };
   reader.onerror = (error) => reject(error);
   reader.readAsDataURL(blob);
@@ -37913,7 +38216,7 @@ var REPORT_KINDS = new Set([
   "signal"
 ]);
 var nativeObservability = registerPlugin("AbsoluteMobileObservability");
-var isRecord18 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var isRecord19 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var redactText = (value) => value.slice(0, MAX_STRING_LENGTH).replace(/\b(Bearer)\s+[A-Za-z0-9._~+/-]+=*/giu, "$1 [REDACTED]").replace(/([?&](?:access_token|api_?key|authorization|code|id_token|password|refresh_token|secret|token)=)[^&#\s]*/giu, "$1[REDACTED]").replace(/\b((?:access_?token|api_?key|authorization|client_?secret|cookie|id_?token|password|passwd|refresh_?token|secret|token)\s*[:=]\s*)[^,\s;]+/giu, "$1[REDACTED]").replace(/\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/gu, "[REDACTED]");
 var redactValue = (value, depth = 0) => {
   if (depth >= MAX_REDACTION_DEPTH)
@@ -37924,7 +38227,7 @@ var redactValue = (value, depth = 0) => {
     return value;
   if (Array.isArray(value))
     return value.slice(0, 64).map((entry) => redactValue(entry, depth + 1));
-  if (!isRecord18(value))
+  if (!isRecord19(value))
     return String(value).slice(0, MAX_STRING_LENGTH);
   return Object.fromEntries(Object.entries(value).slice(0, 128).map(([key, entry]) => [
     key,
@@ -37932,7 +38235,7 @@ var redactValue = (value, depth = 0) => {
   ]));
 };
 var parseReport = (value) => {
-  if (!isRecord18(value) || !isRecord18(value.details))
+  if (!isRecord19(value) || !isRecord19(value.details))
     return;
   if (typeof value.id !== "string" || !REPORT_ID.test(value.id))
     return;
@@ -37943,7 +38246,7 @@ var parseReport = (value) => {
   if (value.platform !== "android" && value.platform !== "ios")
     return;
   const details = redactValue(value.details);
-  if (!isRecord18(details))
+  if (!isRecord19(details))
     return;
   if (new TextEncoder().encode(JSON.stringify(details)).byteLength > MAX_DETAIL_BYTES)
     return;
@@ -40755,13 +41058,13 @@ var createBeacon = (options) => {
       }
     };
     const documentStylesAreReady = () => {
-      const stylesheets = Array.from(document.querySelectorAll('link[rel~="stylesheet"]')).filter((link) => {
-        if (link.disabled)
+      const stylesheets = Array.from(document.querySelectorAll('link[rel~="stylesheet"]')).filter((link2) => {
+        if (link2.disabled)
           return false;
-        const media = link.media.trim();
+        const media = link2.media.trim();
         return media === "" || typeof window.matchMedia !== "function" || window.matchMedia(media).matches;
       });
-      if (!stylesheets.every((link) => link.sheet !== null))
+      if (!stylesheets.every((link2) => link2.sheet !== null))
         return false;
       if (stylesheets.length === 0)
         return true;
@@ -42397,8 +42700,8 @@ var createBeacon = (options) => {
         if (await fontAvailable(element))
           return;
         if (confirmationMs > 0) {
-          await new Promise((resolve23) => {
-            const timer2 = window.setTimeout(resolve23, confirmationMs);
+          await new Promise((resolve24) => {
+            const timer2 = window.setTimeout(resolve24, confirmationMs);
             cleanups.push(() => window.clearTimeout(timer2));
           });
           if (document.visibilityState === "hidden")
@@ -42891,8 +43194,8 @@ var sheetById = (id) => {
   const target = document.getElementById(id);
   return target instanceof HTMLDialogElement && target.dataset.absoluteSheet !== undefined ? target : undefined;
 };
-var dispatchSheet = (sheet, open) => dispatchEvent(new CustomEvent(SHEET_EVENT, {
-  detail: { id: sheet.id, open }
+var dispatchSheet = (sheet, open2) => dispatchEvent(new CustomEvent(SHEET_EVENT, {
+  detail: { id: sheet.id, open: open2 }
 }));
 var focusSheet = (sheet) => {
   const target = sheet.querySelector('[autofocus], button, [href], input, select, textarea, [tabindex]:not([tabindex="-1"])');
@@ -43386,51 +43689,51 @@ var createAbsoluteMobileUpdateClient = (options) => {
   };
 };
 // src/mobile/updatePublisher.ts
-import { access as access21 } from "fs/promises";
-import { isAbsolute as isAbsolute13, relative as relative22, resolve as resolve24, sep as sep15 } from "path";
+import { access as access22 } from "fs/promises";
+import { isAbsolute as isAbsolute14, relative as relative23, resolve as resolve25, sep as sep16 } from "path";
 import { pathToFileURL as pathToFileURL4 } from "url";
 
 // src/mobile/updateSigning.ts
 import { createHash as createHash17, sign, verify } from "crypto";
 import {
   cp as cp2,
-  mkdir as mkdir23,
+  mkdir as mkdir24,
   mkdtemp as mkdtemp12,
-  readdir as readdir11,
-  readFile as readFile29,
-  rename as rename20,
-  rm as rm17,
+  readdir as readdir12,
+  readFile as readFile30,
+  rename as rename21,
+  rm as rm18,
   stat as stat8,
   writeFile as writeFile25
 } from "fs/promises";
-import { dirname as dirname23, join as join32, relative as relative21, resolve as resolve23 } from "path";
+import { dirname as dirname24, join as join33, relative as relative22, resolve as resolve24 } from "path";
 var UPDATE_MANIFEST_FILE = "update.json";
 var UPDATE_FILES_DIRECTORY = "files";
 var sha2565 = (value) => createHash17("sha256").update(value).digest("hex");
 var listFiles = async (root, directory = root) => {
-  const entries = await readdir11(directory, { withFileTypes: true });
+  const entries = await readdir12(directory, { withFileTypes: true });
   const paths = await Promise.all(entries.map(async (entry) => {
-    const path = join32(directory, entry.name);
+    const path = join33(directory, entry.name);
     if (entry.isDirectory())
       return listFiles(root, path);
     if (!entry.isFile())
       throw new TypeError("Mobile updates cannot contain links or special files.");
-    return [relative21(root, path).replaceAll("\\", "/")];
+    return [relative22(root, path).replaceAll("\\", "/")];
   }));
   return paths.flat().sort((left, right) => left.localeCompare(right));
 };
 var inspectFiles = async (root, paths) => Promise.all(paths.map(async (path) => {
-  const source = join32(root, path);
+  const source = join33(root, path);
   const [metadata, contents] = await Promise.all([
     stat8(source),
-    readFile29(source)
+    readFile30(source)
   ]);
   return { bytes: metadata.size, path, sha256: sha2565(contents) };
 }));
 var releaseIdFor = (value) => `amu_${sha2565(canonicalizeAbsoluteMobileUpdate(value))}`;
 var buildAbsoluteMobileUpdate = async (options) => {
-  const bundleDirectory = resolve23(options.bundleDirectory);
-  const outputRoot = resolve23(options.outputDirectory);
+  const bundleDirectory = resolve24(options.bundleDirectory);
+  const outputRoot = resolve24(options.outputDirectory);
   if (outputRoot === bundleDirectory || outputRoot.startsWith(`${bundleDirectory}/`))
     throw new TypeError("Mobile update output must be outside the embedded bundle.");
   const paths = await listFiles(bundleDirectory);
@@ -43458,38 +43761,38 @@ var buildAbsoluteMobileUpdate = async (options) => {
       value: signature.toString("base64")
     }
   });
-  await mkdir23(outputRoot, { recursive: true });
-  const outputDirectory = join32(outputRoot, manifest.releaseId);
-  const staging = await mkdtemp12(join32(outputRoot, ".stage-"));
+  await mkdir24(outputRoot, { recursive: true });
+  const outputDirectory = join33(outputRoot, manifest.releaseId);
+  const staging = await mkdtemp12(join33(outputRoot, ".stage-"));
   try {
-    await cp2(bundleDirectory, join32(staging, UPDATE_FILES_DIRECTORY), {
+    await cp2(bundleDirectory, join33(staging, UPDATE_FILES_DIRECTORY), {
       force: true,
       recursive: true
     });
-    await writeFile25(join32(staging, UPDATE_MANIFEST_FILE), `${JSON.stringify(manifest, null, "\t")}
+    await writeFile25(join33(staging, UPDATE_MANIFEST_FILE), `${JSON.stringify(manifest, null, "\t")}
 `);
-    await rename20(staging, outputDirectory);
+    await rename21(staging, outputDirectory);
   } catch (error) {
-    await rm17(staging, { force: true, recursive: true });
+    await rm18(staging, { force: true, recursive: true });
     if (typeof error === "object" && error !== null && Reflect.get(error, "code") === "EEXIST")
       throw new TypeError(`Mobile update ${manifest.releaseId} already exists.`, { cause: error });
     throw error;
   }
   return {
     manifest,
-    manifestPath: join32(outputDirectory, UPDATE_MANIFEST_FILE),
+    manifestPath: join33(outputDirectory, UPDATE_MANIFEST_FILE),
     outputDirectory
   };
 };
 var copyAbsoluteMobileUpdateFile = async (updateDirectory, path, destination) => {
-  const source = resolve23(updateDirectory, UPDATE_FILES_DIRECTORY, path);
-  const root = resolve23(updateDirectory, UPDATE_FILES_DIRECTORY);
+  const source = resolve24(updateDirectory, UPDATE_FILES_DIRECTORY, path);
+  const root = resolve24(updateDirectory, UPDATE_FILES_DIRECTORY);
   if (!source.startsWith(`${root}/`))
     throw new TypeError("Update file escaped its release.");
-  await mkdir23(dirname23(destination), { recursive: true });
+  await mkdir24(dirname24(destination), { recursive: true });
   await cp2(source, destination, { force: true });
 };
-var readAbsoluteMobileUpdate = async (directory) => parseAbsoluteMobileUpdateManifest(JSON.parse(await readFile29(join32(resolve23(directory), UPDATE_MANIFEST_FILE), "utf8")));
+var readAbsoluteMobileUpdate = async (directory) => parseAbsoluteMobileUpdateManifest(JSON.parse(await readFile30(join33(resolve24(directory), UPDATE_MANIFEST_FILE), "utf8")));
 var verifyAbsoluteMobileUpdateSignature = (manifestValue, publicKey) => {
   const manifest = parseAbsoluteMobileUpdateManifest(manifestValue);
   const valid = verify("sha256", absoluteMobileUpdateSigningPayload(unsignedAbsoluteMobileUpdate(manifest)), { dsaEncoding: "ieee-p1363", key: publicKey }, Buffer.from(manifest.signature.value, "base64"));
@@ -43606,16 +43909,16 @@ var pruneAbsoluteMobileUpdates = async (options) => {
 var object5 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var isPublisher2 = (value) => object5(value) && typeof value.publishUpdate === "function" && typeof value.promoteUpdate === "function" && typeof value.rollbackUpdate === "function";
 var projectPath3 = (projectRoot, requested, label) => {
-  const root = resolve24(projectRoot);
-  const path = resolve24(root, requested);
-  const projectRelative = relative22(root, path);
-  if (projectRelative === ".." || projectRelative.startsWith(`..${sep15}`) || isAbsolute13(projectRelative))
+  const root = resolve25(projectRoot);
+  const path = resolve25(root, requested);
+  const projectRelative = relative23(root, path);
+  if (projectRelative === ".." || projectRelative.startsWith(`..${sep16}`) || isAbsolute14(projectRelative))
     throw new TypeError(`${label} must remain inside the project.`);
   return path;
 };
 var loadAbsoluteMobileUpdatePublisher = async (projectRoot, requestedModulePath) => {
   const modulePath = projectPath3(projectRoot, requestedModulePath, "mobile update registry");
-  await access21(modulePath).catch(() => {
+  await access22(modulePath).catch(() => {
     throw new TypeError(`Mobile update registry does not exist: ${modulePath}`);
   });
   const loaded = await import(pathToFileURL4(modulePath).href);
@@ -43724,6 +44027,7 @@ export {
   ABSOLUTE_MOBILE_CERTIFICATION_VERIFICATION_FORMAT,
   ABSOLUTE_MOBILE_CI_PROMOTION_AUDIT_FORMAT,
   ABSOLUTE_MOBILE_CI_PROMOTION_CONTEXT_FORMAT,
+  ABSOLUTE_MOBILE_CI_PROMOTION_OPERATION_FORMAT,
   ABSOLUTE_MOBILE_CI_WORKFLOW_FORMAT,
   ABSOLUTE_MOBILE_CLIENT_MANIFEST_FORMAT,
   ABSOLUTE_MOBILE_COMPATIBILITY_FORMAT,
@@ -43767,6 +44071,7 @@ export {
   absoluteExpoNativeObservabilityPaths,
   absoluteIosDeviceAcceptanceCommands,
   absoluteMobilePreviewDocument,
+  absoluteMobilePromotionOperationPath,
   absoluteMobileUpdateSigningPayload,
   absolutePercentile,
   absolutePssMiB,
@@ -43778,6 +44083,7 @@ export {
   acceptsAbsoluteRouteData,
   acquireAbsoluteRemoteMacReleaseLease,
   activateAbsoluteMobilePage,
+  advanceAbsoluteMobilePromotionOperation,
   advanceAbsoluteMobileUpdateRollout,
   applyAbsoluteNativeDeepLinks,
   applyAbsoluteNativeDeviceCapabilities,
@@ -43819,6 +44125,7 @@ export {
   createAbsoluteMobilePageErrorResponse,
   createAbsoluteMobilePageRequest,
   createAbsoluteMobilePreviewPlugin,
+  createAbsoluteMobilePromotionOperation,
   createAbsoluteMobileReleaseCertification,
   createAbsoluteMobileRouteMetadataPlugin,
   createAbsoluteMobileUpdateClient,
@@ -43829,6 +44136,7 @@ export {
   createAbsoluteRemoteIosDevProject,
   directAbsoluteProjectPackages,
   discoverAbsoluteDeviceCapabilities,
+  discoverAbsoluteMobilePromotionRun,
   discoverAbsoluteSyncSchema,
   disposeAbsoluteMobilePage,
   drainAbsoluteMobileNativeObservability,
@@ -43873,6 +44181,7 @@ export {
   isAbsoluteExpoNativeRootInput,
   isAbsoluteIosNativeRootInput,
   isAbsoluteMobileUpdateRolloutMember,
+  listAbsoluteMobilePromotionOperations,
   listAbsoluteRemoteMacProfiles,
   loadAbsoluteDeviceCapabilityProviders,
   loadAbsoluteMobileMaterializedBundle,
@@ -43909,6 +44218,8 @@ export {
   parseAbsoluteMobilePageEnvelope,
   parseAbsoluteMobilePageRequest,
   parseAbsoluteMobilePromotionContext,
+  parseAbsoluteMobilePromotionOperation,
+  parseAbsoluteMobilePromotionRunList,
   parseAbsoluteMobileUnsignedUpdateManifest,
   parseAbsoluteMobileUpdateManifest,
   parseAbsoluteMobileUpdateRequest,
@@ -43934,11 +44245,13 @@ export {
   readAbsoluteMobileCertificationVerification,
   readAbsoluteMobileLinkIntent,
   readAbsoluteMobileMaterializedReleases,
+  readAbsoluteMobilePromotionOperation,
   readAbsoluteMobileReleaseCertification,
   readAbsoluteMobileUpdate,
   readAbsoluteSigstoreBundle,
   reconcileAbsoluteMobileUpdateRollout,
   redactAbsoluteIosLog,
+  relativeAbsoluteMobilePromotionOperationPath,
   removeAbsoluteRemoteMacProfile,
   renderAbsoluteMobileReleaseCertification,
   renderAbsoluteMobileUpdateRegistry,
@@ -43994,5 +44307,5 @@ export {
   writeAbsoluteMobileUpdateRegistry
 };
 
-//# debugId=1FBA634844700C1464756E2164756E21
+//# debugId=8439B99573B3AFB964756E2164756E21
 //# sourceMappingURL=index.js.map