@absolutejs/absolute 0.20.0-beta.115 → 0.20.0-beta.116

package/dist/cli/{index-dr21p6ae.js → index-bhcxtf1x.js}

@@ -22,7 +22,7 @@ import {
   writeFile as writeFile2
 } from "fs/promises";
 import { createHash as createHash3 } from "crypto";
-import { basename, dirname as dirname3, join as join6, relative as relative3, resolve as resolve4, sep } from "path";
+import { basename, dirname as dirname3, join as join7, relative as relative3, resolve as resolve4, sep } from "path";
 
 // src/mobile/syncSchema.ts
 import { readFileSync } from "fs";
@@ -902,6 +902,7 @@ var createAbsoluteMobileUpdateRuntimeDescriptor = (options) => ({
   },
   deviceCapabilities: options.deviceCapabilities,
   engine: options.config.engine,
+  ...options.config.engine === "expo" ? { expoEmbeddedAssetsAbi: 1 } : {},
   format: ABSOLUTE_MOBILE_UPDATE_RUNTIME_FORMAT,
   shellAbi: ABSOLUTE_MOBILE_SHELL_ABI,
   syncSchema: options.syncSchema ?? null,
@@ -1671,6 +1672,265 @@ var absoluteExpoActivityResultRecoveryFiles = (project) => new Map([
   ]
 ]);
 
+// src/mobile/expoEmbeddedAssets.ts
+import { join as join5 } from "path";
+var header = `// Generated by AbsoluteJS. Edit absolute.config.ts, then run absolute mobile sync.
+`;
+var android = `${header}package expo.modules.absoluteembeddedassets
+
+import android.content.Context
+import android.graphics.Bitmap
+import android.net.Uri
+import android.util.Log
+import android.webkit.WebResourceRequest
+import android.webkit.WebResourceResponse
+import android.webkit.WebView
+import androidx.webkit.WebViewAssetLoader
+import androidx.webkit.WebViewCompat
+import androidx.webkit.WebViewFeature
+import androidx.webkit.ScriptHandler
+import androidx.webkit.WebMessageCompat
+import com.facebook.react.ReactPackage
+import com.facebook.react.bridge.NativeModule
+import com.facebook.react.bridge.ReactApplicationContext
+import com.facebook.react.bridge.ReadableMap
+import com.facebook.react.uimanager.ThemedReactContext
+import com.facebook.react.uimanager.ViewManager
+import com.reactnativecommunity.webview.RNCWebViewClient
+import com.reactnativecommunity.webview.RNCWebViewManager
+import com.reactnativecommunity.webview.RNCWebViewWrapper
+import expo.modules.kotlin.modules.Module
+import expo.modules.kotlin.modules.ModuleDefinition
+import java.io.ByteArrayInputStream
+import java.io.File
+import java.util.concurrent.ConcurrentHashMap
+import java.util.WeakHashMap
+
+private const val HOST = "appassets.androidplatform.net"
+private const val PREFIX = "/absolutejs/"
+
+internal object AbsoluteEmbeddedAssets {
+  private val bundles = ConcurrentHashMap<String, Map<String, File>>()
+
+  fun register(context: Context, rootUri: String, paths: List<String>): String {
+    check(WebViewFeature.isFeatureSupported(WebViewFeature.DOCUMENT_START_SCRIPT) &&
+      WebViewFeature.isFeatureSupported(WebViewFeature.WEB_MESSAGE_LISTENER)) {
+      "Update Android System WebView to load this application."
+    }
+    val uri = Uri.parse(rootUri)
+    require(uri.scheme == "file" && uri.authority.isNullOrEmpty() && uri.query == null && uri.fragment == null)
+    val root = File(requireNotNull(uri.path)).canonicalFile
+    val parent = File(context.filesDir, "absolutejs-web").canonicalFile
+    require(root.parentFile == parent && root.name.matches(Regex("amexpo_[a-f0-9]{64}")))
+    require(paths.isNotEmpty() && paths.size <= 100000 && paths.distinct().size == paths.size)
+    val files = paths.associateWith { path ->
+      require(path.isNotEmpty() && !path.contains('\\\\') && !path.contains('%') &&
+        !path.contains('?') && !path.contains('#') && path.indexOf(0.toChar()) < 0 &&
+        path.split('/').all { it.isNotEmpty() && it != "." && it != ".." })
+      val file = File(root, path).canonicalFile
+      require(file.path.startsWith(root.path + File.separator) && file.isFile)
+      file
+    }
+    require(files.containsKey("index.html") && files.containsKey("absolute-mobile-manifest.json"))
+    bundles[root.name] = files
+    Log.i("AbsoluteJS", "Expo embedded web phase: asset-host-registered")
+    return "https://" + HOST + PREFIX + root.name + "/index.html"
+  }
+
+  private fun empty(status: Int, reason: String) = WebResourceResponse(
+    "text/plain", "UTF-8", status, reason,
+    mapOf("Cache-Control" to "no-store", "X-Content-Type-Options" to "nosniff"),
+    ByteArrayInputStream(ByteArray(0))
+  )
+
+  private fun resource(path: String): WebResourceResponse {
+    val bundle = path.substringBefore('/')
+    val name = path.substringAfter('/', "")
+    val file = bundles[bundle]?.get(name) ?: return empty(404, "Not Found")
+    // Recheck canonical location at read time. Never follow a replaced symlink.
+    if (file.canonicalFile != file || !file.isFile) return empty(404, "Not Found")
+    val mime = when (file.extension.lowercase()) {
+      "html", "htm" -> "text/html"
+      "js", "mjs" -> "text/javascript"
+      "json", "map" -> "application/json"
+      "css" -> "text/css"
+      "svg" -> "image/svg+xml"
+      "wasm" -> "application/wasm"
+      else -> android.webkit.MimeTypeMap.getSingleton().getMimeTypeFromExtension(file.extension.lowercase()) ?: "application/octet-stream"
+    }
+    return try {
+      WebResourceResponse(mime, "UTF-8", 200, "OK",
+        mapOf("Cache-Control" to "no-store", "X-Content-Type-Options" to "nosniff"), file.inputStream())
+    } catch (_: Exception) { empty(404, "Not Found") }
+  }
+
+  private val loader = WebViewAssetLoader.Builder()
+    .setDomain(HOST).setHttpAllowed(false)
+    .addPathHandler(PREFIX) { path -> resource(path) }.build()
+
+  fun intercept(request: WebResourceRequest, activeBundle: String?): WebResourceResponse? {
+    val uri = request.url
+    if (uri.host != HOST) return null
+    if (uri.path.orEmpty().endsWith("/index.html")) Log.i("AbsoluteJS", "Expo embedded web phase: document-request")
+    if (uri.path.orEmpty().endsWith("/absolute-mobile-bootstrap.js")) Log.i("AbsoluteJS", "Expo embedded web phase: bootstrap-request")
+    // A reserved asset host must never fall through to DNS/network, even for
+    // unknown bundles, wrong ports/schemes, methods, or malformed paths.
+    if (uri.scheme != "https" || uri.port != -1 || uri.userInfo != null ||
+      request.method != "GET") return empty(403, "Forbidden")
+    // Root-relative image/font/CSS URLs retain their web meaning. Scope them
+    // to this WebView's bundle, not the last bundle registered by another view.
+    if (!uri.path.orEmpty().startsWith(PREFIX)) {
+      if (request.isForMainFrame || activeBundle == null) return empty(404, "Not Found")
+      return resource(activeBundle + "/" + uri.path.orEmpty().removePrefix("/"))
+    }
+    return loader.shouldInterceptRequest(uri) ?: empty(404, "Not Found")
+  }
+}
+
+class AbsoluteEmbeddedAssetsModule : Module() {
+  override fun definition() = ModuleDefinition {
+    Name("AbsoluteEmbeddedAssets")
+    AsyncFunction("registerBundle") { root: String, paths: List<String> ->
+      AbsoluteEmbeddedAssets.register(requireNotNull(appContext.reactContext), root, paths)
+    }
+  }
+}
+
+class AbsoluteEmbeddedWebViewManager : RNCWebViewManager() {
+  private val scripts = WeakHashMap<RNCWebViewWrapper, ScriptHandler>()
+  override fun getName() = "AbsoluteEmbeddedWebView"
+  override fun setNewSource(view: RNCWebViewWrapper, value: ReadableMap?) {
+    Log.i("AbsoluteJS", "Expo embedded web phase: source-assigned")
+    super.setNewSource(view, value)
+  }
+  override fun setMessagingEnabled(view: RNCWebViewWrapper, value: Boolean) {
+    super.setMessagingEnabled(view, value)
+    // Upstream reports sourceOrigin as event.url and accepts subframe messages.
+    // Retain its event dispatch, but bind this bridge to our main-frame origin
+    // and attach the native-observed document URL, never a JS-supplied URL.
+    if (!WebViewFeature.isFeatureSupported(WebViewFeature.WEB_MESSAGE_LISTENER)) return
+    WebViewCompat.removeWebMessageListener(view.webView, "ReactNativeWebView")
+    if (!value) return
+    WebViewCompat.addWebMessageListener(view.webView, "ReactNativeWebView", setOf("https://" + HOST)) {
+        webView, message, sourceOrigin, isMainFrame, _ ->
+      if (isMainFrame && sourceOrigin.scheme == "https" && sourceOrigin.host == HOST &&
+          message.type == WebMessageCompat.TYPE_STRING) {
+        val url = webView.url
+        val data = message.data
+        if (url != null && data != null) view.webView.onMessage(data, url)
+      }
+    }
+  }
+  override fun setInjectedJavaScriptBeforeContentLoaded(view: RNCWebViewWrapper, value: String?) {
+    scripts.remove(view)?.remove()
+    if (value == null) return
+    // onPageStarted injection races module execution on Android. Register with
+    // Chromium before navigation, scoped to our virtual asset origin only.
+    check(WebViewFeature.isFeatureSupported(WebViewFeature.DOCUMENT_START_SCRIPT)) {
+      "AbsoluteJS requires an Android System WebView with document-start script support."
+    }
+    scripts[view] = WebViewCompat.addDocumentStartJavaScript(view.webView, value, setOf("https://" + HOST))
+  }
+  override fun onDropViewInstance(view: RNCWebViewWrapper) {
+    scripts.remove(view)?.remove()
+    if (WebViewFeature.isFeatureSupported(WebViewFeature.WEB_MESSAGE_LISTENER))
+      WebViewCompat.removeWebMessageListener(view.webView, "ReactNativeWebView")
+    super.onDropViewInstance(view)
+  }
+  override fun addEventEmitters(context: ThemedReactContext, view: RNCWebViewWrapper) {
+    Log.i("AbsoluteJS", "Expo embedded web phase: asset-host-view-created")
+    view.webView.webViewClient = object : RNCWebViewClient() {
+      @Volatile private var activeBundle: String? = null
+      override fun onPageStarted(view: WebView, url: String, favicon: Bitmap?) {
+        Log.i("AbsoluteJS", "Expo embedded web phase: document-started")
+        val uri = Uri.parse(url)
+        activeBundle = if (uri.scheme == "https" && uri.host == HOST && uri.path.orEmpty().startsWith(PREFIX))
+          uri.path!!.removePrefix(PREFIX).substringBefore('/') else null
+        super.onPageStarted(view, url, favicon)
+      }
+      override fun shouldInterceptRequest(view: WebView, request: WebResourceRequest): WebResourceResponse? =
+        AbsoluteEmbeddedAssets.intercept(request, activeBundle) ?: super.shouldInterceptRequest(view, request)
+    }
+  }
+}
+
+class AbsoluteEmbeddedWebViewPackage : ReactPackage {
+  override fun createNativeModules(context: ReactApplicationContext): List<NativeModule> = emptyList()
+  override fun createViewManagers(context: ReactApplicationContext): List<ViewManager<*, *>> = listOf(AbsoluteEmbeddedWebViewManager())
+}
+`;
+var plugin = `${header}const { withMainApplication } = require('expo/config-plugins');
+module.exports = config => withMainApplication(config, value => {
+  if (value.modResults.language !== 'kt') throw new Error('AbsoluteJS embedded assets require the managed Kotlin application.');
+  const name = 'expo.modules.absoluteembeddedassets.AbsoluteEmbeddedWebViewPackage';
+  const registration = 'add(' + name + '())';
+  const source = value.modResults.contents;
+  if (!source.includes(registration)) {
+    const anchor = 'PackageList(this).packages.apply {';
+    if (source.split(anchor).length !== 2) throw new Error('Cannot safely register AbsoluteJS embedded WebView in MainApplication.');
+    value.modResults.contents = source.replace(anchor, anchor + '\\n              ' + registration);
+  }
+  return value;
+});
+`;
+var runtime2 = `${header}import { requireNativeModule } from 'expo-modules-core';
+import { Platform, requireNativeComponent } from 'react-native';
+
+export const absoluteEmbeddedNativeConfig = Platform.OS === 'android'
+  ? { component: requireNativeComponent('AbsoluteEmbeddedWebView') }
+  : undefined;
+
+export const registerAbsoluteEmbeddedBundle = async (rootUri: string, paths: string[], indexUri: string): Promise<string> => {
+  if (Platform.OS !== 'android') return indexUri;
+  const native = requireNativeModule<{ registerBundle(root: string, paths: string[]): Promise<string> }>('AbsoluteEmbeddedAssets');
+  return native.registerBundle(rootUri, paths);
+};
+`;
+var absoluteExpoEmbeddedAssetsFiles = (project) => {
+  const root = join5(project, "modules/absolute-embedded-assets");
+  return new Map([
+    [
+      join5(root, "expo-module.config.json"),
+      `${JSON.stringify({
+        android: {
+          modules: [
+            "expo.modules.absoluteembeddedassets.AbsoluteEmbeddedAssetsModule"
+          ]
+        },
+        platforms: ["android"]
+      }, null, 2)}
+`
+    ],
+    [
+      join5(root, "android/build.gradle"),
+      `${header}plugins { id 'com.android.library'; id 'expo-module-gradle-plugin' }
+group = 'expo.modules.absoluteembeddedassets'
+version = '0.0.1'
+android {
+  namespace 'expo.modules.absoluteembeddedassets'
+  defaultConfig { versionCode 1; versionName '0.0.1' }
+}
+dependencies {
+  implementation 'com.facebook.react:react-android'
+  implementation project(':react-native-webview')
+  implementation 'androidx.webkit:webkit:1.14.0'
+}
+`
+    ],
+    [
+      join5(root, "android/src/main/AndroidManifest.xml"),
+      `<manifest xmlns:android="http://schemas.android.com/apk/res/android" />
+`
+    ],
+    [
+      join5(root, "android/src/main/java/expo/modules/absoluteembeddedassets/AbsoluteEmbeddedAssetsModule.kt"),
+      android
+    ],
+    [join5(project, "plugins/withAbsoluteEmbeddedAssets.js"), plugin],
+    [join5(project, "src/generated/AbsoluteEmbeddedAssets.ts"), runtime2]
+  ]);
+};
+
 // src/mobile/branding.ts
 import { createHash as createHash2 } from "crypto";
 import {
@@ -1682,7 +1942,7 @@ import {
   rm,
   writeFile
 } from "fs/promises";
-import { dirname as dirname2, join as join5, relative as relative2, resolve as resolve3 } from "path";
+import { dirname as dirname2, join as join6, relative as relative2, resolve as resolve3 } from "path";
 var ABSOLUTE_MOBILE_BRANDING_FORMAT = 1;
 var ABSOLUTE_CAPACITOR_ASSETS_VERSION = "3.0.5";
 var ABSOLUTE_CAPACITOR_ASSETS_SPEC = `@capacitor/assets@${ABSOLUTE_CAPACITOR_ASSETS_VERSION}`;
@@ -1706,7 +1966,7 @@ var exists = async (path) => {
   }
 };
 var portableRelative = (root, path) => relative2(root, path).replaceAll("\\", "/");
-var absoluteMobileBrandingManifestPath = (projectRoot) => join5(resolve3(projectRoot), ".absolutejs", "mobile", "branding", "manifest.json");
+var absoluteMobileBrandingManifestPath = (projectRoot) => join6(resolve3(projectRoot), ".absolutejs", "mobile", "branding", "manifest.json");
 var brandingEntries = (branding) => [
   { kind: "icon", path: branding.icon, size: ICON_SIZE },
   branding.android.foreground ? {
@@ -1853,10 +2113,10 @@ var writeAbsoluteExpoBrandingInputs = async (config, projectRoot) => {
   if (!branding)
     return;
   const manifest = await createAbsoluteMobileBrandingManifest(config, projectRoot);
-  const destination = join5(config.nativeProjectDirectory, "assets", "absolute-branding");
+  const destination = join6(config.nativeProjectDirectory, "assets", "absolute-branding");
   await rm(destination, { force: true, recursive: true });
   await mkdir(destination, { recursive: true });
-  await copyManaged(branding.icon, join5(destination, "icon.png"));
+  await copyManaged(branding.icon, join6(destination, "icon.png"));
   const copies = [
     [branding.android.backgroundImage, "android-background.png"],
     [branding.android.foreground, "android-foreground.png"],
@@ -1866,19 +2126,19 @@ var writeAbsoluteExpoBrandingInputs = async (config, projectRoot) => {
     [branding.splash.image, "splash-light.png"],
     [branding.splash.darkImage, "splash-dark.png"]
   ];
-  await Promise.all(copies.map(([source, name]) => source ? copyManaged(source, join5(destination, name)) : undefined));
+  await Promise.all(copies.map(([source, name]) => source ? copyManaged(source, join6(destination, name)) : undefined));
   await writeManifest(projectRoot, manifest);
   return { manifest, path: destination };
 };
 var stageCapacitorInputs = async (branding, projectRoot) => {
-  const destination = join5(projectRoot, ".absolutejs", "mobile", "branding", "input");
+  const destination = join6(projectRoot, ".absolutejs", "mobile", "branding", "input");
   await rm(destination, { force: true, recursive: true });
   await mkdir(destination, { recursive: true });
-  await copyManaged(branding.icon, join5(destination, "logo.png"));
+  await copyManaged(branding.icon, join6(destination, "logo.png"));
   if (branding.splash.image)
-    await copyManaged(branding.splash.image, join5(destination, "splash.png"));
+    await copyManaged(branding.splash.image, join6(destination, "splash.png"));
   if (branding.splash.darkImage)
-    await copyManaged(branding.splash.darkImage, join5(destination, "splash-dark.png"));
+    await copyManaged(branding.splash.darkImage, join6(destination, "splash-dark.png"));
   return destination;
 };
 var defaultRunner = async (command, options) => {
@@ -1909,16 +2169,16 @@ var resizePng = async (source, destination, size) => {
   await writeFile(destination, output);
 };
 var applyAndroidLayers = async (branding, nativeDirectory) => {
-  const resources = join5(nativeDirectory, "android", "app", "src", "main", "res");
+  const resources = join6(nativeDirectory, "android", "app", "src", "main", "res");
   await Promise.all(ANDROID_ADAPTIVE_SIZES.flatMap(([density, size]) => [
     ...branding.android.foreground ? [
-      resizePng(branding.android.foreground, join5(resources, `mipmap-${density}`, "ic_launcher_foreground.png"), size)
+      resizePng(branding.android.foreground, join6(resources, `mipmap-${density}`, "ic_launcher_foreground.png"), size)
     ] : [],
     ...branding.android.backgroundImage ? [
-      resizePng(branding.android.backgroundImage, join5(resources, `mipmap-${density}`, "ic_launcher_background.png"), size)
+      resizePng(branding.android.backgroundImage, join6(resources, `mipmap-${density}`, "ic_launcher_background.png"), size)
     ] : [],
     ...branding.android.monochrome ? [
-      resizePng(branding.android.monochrome, join5(resources, `mipmap-${density}`, "ic_launcher_monochrome.png"), size)
+      resizePng(branding.android.monochrome, join6(resources, `mipmap-${density}`, "ic_launcher_monochrome.png"), size)
     ] : []
   ]));
   if (!branding.android.monochrome)
@@ -1930,13 +2190,13 @@ var applyAndroidLayers = async (branding, nativeDirectory) => {
     <monochrome android:drawable="@mipmap/ic_launcher_monochrome" />
 </adaptive-icon>
 `;
-  await Promise.all(["ic_launcher.xml", "ic_launcher_round.xml"].map((name) => writeFile(join5(resources, "mipmap-anydpi-v26", name), iconXml)));
+  await Promise.all(["ic_launcher.xml", "ic_launcher_round.xml"].map((name) => writeFile(join6(resources, "mipmap-anydpi-v26", name), iconXml)));
 };
 var applyIosAppearances = async (branding, nativeDirectory) => {
   if (!branding.ios.darkIcon && !branding.ios.tintedIcon)
     return;
-  const assetSet = join5(nativeDirectory, "ios", "App", "App", "Assets.xcassets", "AppIcon.appiconset");
-  const contentsPath = join5(assetSet, "Contents.json");
+  const assetSet = join6(nativeDirectory, "ios", "App", "App", "Assets.xcassets", "AppIcon.appiconset");
+  const contentsPath = join6(assetSet, "Contents.json");
   const contents = JSON.parse(await readFile(contentsPath, "utf8"));
   const images = typeof contents === "object" && contents !== null ? Reflect.get(contents, "images") : undefined;
   if (typeof contents !== "object" || contents === null || !Array.isArray(images))
@@ -1949,7 +2209,7 @@ var applyIosAppearances = async (branding, nativeDirectory) => {
     if (!source)
       return;
     const filename = `AppIcon-1024-${appearance}.png`;
-    await resizePng(source, join5(assetSet, filename), ICON_SIZE);
+    await resizePng(source, join6(assetSet, filename), ICON_SIZE);
     return {
       appearances: [{ appearance: "luminosity", value: appearance }],
       filename,
@@ -1971,7 +2231,7 @@ var applyIosAppearances = async (branding, nativeDirectory) => {
   await writeFile(contentsPath, `${JSON.stringify(contents, null, 2)}
 `);
 };
-var nativeBrandingSentinels = (config, platforms) => platforms.map((platform) => platform === "android" ? join5(config.nativeProjectDirectory, "android", "app", "src", "main", "res", "mipmap-xxxhdpi", "ic_launcher.png") : join5(config.nativeProjectDirectory, "ios", "App", "App", "Assets.xcassets", "AppIcon.appiconset", "AppIcon-512@2x.png"));
+var nativeBrandingSentinels = (config, platforms) => platforms.map((platform) => platform === "android" ? join6(config.nativeProjectDirectory, "android", "app", "src", "main", "res", "mipmap-xxxhdpi", "ic_launcher.png") : join6(config.nativeProjectDirectory, "ios", "App", "App", "Assets.xcassets", "AppIcon.appiconset", "AppIcon-512@2x.png"));
 var requireGeneratedBranding = async (config, platforms) => {
   const missing = (await Promise.all(nativeBrandingSentinels(config, platforms).map(async (path) => ({
     path,
@@ -2016,9 +2276,9 @@ var generateAbsoluteCapacitorBranding = async (config, projectRoot, options = {}
     "--assetPath",
     portableRelative(projectRoot, input),
     "--androidProject",
-    portableRelative(projectRoot, join5(config.nativeProjectDirectory, "android")),
+    portableRelative(projectRoot, join6(config.nativeProjectDirectory, "android")),
     "--iosProject",
-    portableRelative(projectRoot, join5(config.nativeProjectDirectory, "ios", "App")),
+    portableRelative(projectRoot, join6(config.nativeProjectDirectory, "ios", "App")),
     "--iconBackgroundColor",
     branding.android.backgroundColor,
     "--splashBackgroundColor",
@@ -2099,7 +2359,7 @@ var inspectAbsoluteMobileBranding = async (config, projectRoot) => {
         status: "stale"
       });
     const nativeSentinels = config.engine === "expo" ? [
-      join5(config.nativeProjectDirectory, "assets", "absolute-branding", "icon.png")
+      join6(config.nativeProjectDirectory, "assets", "absolute-branding", "icon.png")
     ] : nativeBrandingSentinels(config, config.platforms);
     if ((await Promise.all(nativeSentinels.map((path) => exists(path)))).some((present) => !present))
       return brandingInspection({
@@ -2132,7 +2392,7 @@ var renderAbsoluteMobileBrandingPreview = async (config, projectRoot) => {
   const { branding } = config;
   if (!branding)
     throw new TypeError("mobile.branding is not configured.");
-  const destination = join5(projectRoot, ".absolutejs", "mobile", "branding", "preview.html");
+  const destination = join6(projectRoot, ".absolutejs", "mobile", "branding", "preview.html");
   const icon = `data:image/png;base64,${(await readFile(branding.icon)).toString("base64")}`;
   const appName = escapeHtml(config.appName);
   const html = `<!doctype html>
@@ -2227,7 +2487,7 @@ var routeSegments = (route) => {
     return segment;
   });
 };
-var routeFile = (project, route) => join6(project, "app", ...routeSegments(route), "index.tsx");
+var routeFile = (project, route) => join7(project, "app", ...routeSegments(route), "index.tsx");
 var packageDependencies = (plan) => Object.fromEntries(plan.requiredPackages.map((spec) => {
   const separator = spec.lastIndexOf("@");
   return [spec.slice(0, separator), spec.slice(separator + 1)];
@@ -2316,24 +2576,24 @@ var expoAppConfig = (config, auth, sync, devices, runtimeFingerprint) => {
   const devicePlugins = [
     ...new Set(devices.capabilities.flatMap((name) => devices.providers[name]?.plugins ?? []))
   ];
-  const configuredPlugins = devicePlugins.map((plugin) => {
-    if (plugin === "expo-image-picker")
+  const configuredPlugins = devicePlugins.map((plugin2) => {
+    if (plugin2 === "expo-image-picker")
       return [
-        plugin,
+        plugin2,
         {
           cameraPermission: descriptions.NSCameraUsageDescription,
           microphonePermission: false,
           photosPermission: descriptions.NSPhotoLibraryUsageDescription
         }
       ];
-    if (plugin === "expo-location")
+    if (plugin2 === "expo-location")
       return [
-        plugin,
+        plugin2,
         {
           locationWhenInUsePermission: descriptions.NSLocationWhenInUseUsageDescription
         }
       ];
-    return plugin;
+    return plugin2;
   });
   return {
     expo: {
@@ -2355,7 +2615,7 @@ var expoAppConfig = (config, auth, sync, devices, runtimeFingerprint) => {
         package: config.appId,
         permissions: requirements.androidPermissions
       },
-      experiments: { typedRoutes: true },
+      experiments: { tsconfigPaths: false, typedRoutes: true },
       ios: {
         ...branding?.ios ?? {},
         associatedDomains: config.deepLinkHosts.map((host2) => `applinks:${host2}`),
@@ -2378,6 +2638,7 @@ var expoAppConfig = (config, auth, sync, devices, runtimeFingerprint) => {
         ["expo-dev-client", { launchMode: "most-recent" }],
         ...branding ? [branding.splashPlugin] : [],
         "./plugins/withAbsoluteActivityResultRecovery",
+        "./plugins/withAbsoluteEmbeddedAssets",
         ...auth || config.updates ? ["expo-secure-store"] : [],
         ...sync ? [
           "expo-sqlite",
@@ -2942,6 +3203,7 @@ import { ActivityIndicator, BackHandler, Platform, Pressable, StyleSheet, Text,
 import { useSafeAreaInsets } from 'react-native-safe-area-context';
 import { WebView, type WebViewMessageEvent } from 'react-native-webview';
 import { materializeAbsoluteWebBundle } from './webAssets';
+import { absoluteEmbeddedNativeConfig } from './AbsoluteEmbeddedAssets';
 import { markAbsoluteEmbeddedWebPhase, markAbsoluteEmbeddedWebReady } from './AbsoluteActivityResultRecovery';
 import { createExpoDevicesBridgeHost } from '@absolutejs/devices-expo/bridge';
 import { absoluteExpoDevices, beforeAbsoluteExpoDeviceSignOut } from './AbsoluteDevices';
@@ -3061,7 +3323,16 @@ const bridgeBootstrap = (path: string, safeAreaInsets: { bottom: number; left: n
 		event.preventDefault();
 		send({ format: 3, kind: 'event', event: 'navigation', path: url.pathname + url.search + url.hash });
 	}, true);
-	send({ format: 3, kind: 'event', event: 'ready', path: currentPath });
+	let shellRendered = false;
+	addEventListener('absolute:shell-rendered', () => {
+		shellRendered = true;
+		send({ format: 3, kind: 'event', event: 'shell-rendered', path: currentPath });
+	});
+	const startupFailed = () => {
+		if (!shellRendered) send({ format: 3, kind: 'event', event: 'startup-failed', path: currentPath });
+	};
+	addEventListener('error', startupFailed);
+	addEventListener('unhandledrejection', startupFailed);
 })(); true;\`;
 };
 
@@ -3106,11 +3377,18 @@ export function AbsoluteWebHost({ path }: AbsoluteWebHostProps = {}) {
 	const canGoBack = useRef(false);
 	const [runtimeReady, setRuntimeReady] = useState(!AUTH_ENABLED && !SYNC_ENABLED);
 	const [devicesReady, setDevicesReady] = useState(false);
-	const [startupError, setStartupError] = useState<'assets' | 'devices'>();
+	const [startupError, setStartupError] = useState<'assets' | 'devices' | 'content'>();
 	const [startupRevision, setStartupRevision] = useState(0);
 	const activeWebPath = useRef(pathname);
 	const embeddedReadyReported = useRef(false);
 	const webSource = useMemo(() => indexUri ? { uri: indexUri } : undefined, [indexUri]);
+	useEffect(() => {
+		if (!indexUri || DEV_ORIGIN) return;
+		const timeout = setTimeout(() => {
+			if (!embeddedReadyReported.current) setStartupError('content');
+		}, 60000);
+		return () => clearTimeout(timeout);
+	}, [indexUri]);
 
 	useEffect(() => {
 		if (!AUTH_ENABLED && !SYNC_ENABLED) return;
@@ -3146,6 +3424,7 @@ export function AbsoluteWebHost({ path }: AbsoluteWebHostProps = {}) {
 		markAbsoluteEmbeddedWebPhase('assets-start');
 		void materializeAbsoluteWebBundle().then(uri => {
 			markAbsoluteEmbeddedWebPhase('assets-ready');
+			embeddedReadyReported.current = false;
 			setIndexUri(uri + '?absolutePath=' + encodeURIComponent(pathname));
 		}).catch(error => {
 			const phase = error instanceof Error && (error.message === 'assets-root-failed' || error.message === 'assets-directory-failed' || error.message === 'assets-destination-failed' || error.message === 'assets-module-failed' || error.message === 'assets-source-failed' || error.message === 'assets-download-failed' || error.message === 'assets-copy-failed' || error.message === 'assets-read-failed' || error.message === 'assets-write-failed' || error.message === 'assets-finalize-failed')
@@ -3199,15 +3478,23 @@ export function AbsoluteWebHost({ path }: AbsoluteWebHostProps = {}) {
 		try { return new URL(source).origin === origin; } catch { return false; }
 	};
 	const onMessage = async (event: WebViewMessageEvent) => {
+		// Bridge authority belongs only to the currently loaded embedded bundle
+		// (or the explicitly configured development origin), never remote pages.
+		const sourceUrl = event.nativeEvent.url;
+		if (!indexUri || typeof sourceUrl !== 'string' || (DEV_ORIGIN ? !hasOrigin(sourceUrl, DEV_ORIGIN) : !sourceUrl.startsWith(indexUri.slice(0, indexUri.lastIndexOf('/') + 1)))) return;
 		const source = event.nativeEvent.data;
 		if (new TextEncoder().encode(source).byteLength > MAX_MESSAGE_BYTES) return;
 		let message: Record<string, unknown>;
 		try { message = JSON.parse(source); } catch { return; }
 		if (message.format !== BRIDGE_FORMAT || typeof message.path !== 'string' || !message.path.startsWith('/') || message.path.startsWith('//')) return;
-		if (message.kind === 'event' && (message.event === 'navigation' || message.event === 'ready')) {
+		if (message.kind === 'event' && message.event === 'startup-failed') {
+			if (!embeddedReadyReported.current) setStartupError('content');
+			return;
+		}
+		if (message.kind === 'event' && (message.event === 'navigation' || message.event === 'shell-rendered')) {
 			const target = new URL(message.path, PRODUCTION_ORIGIN);
 			if (target.origin !== PRODUCTION_ORIGIN) return;
-			if (message.event === 'ready' && !DEV_ORIGIN && !embeddedReadyReported.current) {
+			if (message.event === 'shell-rendered' && !DEV_ORIGIN && !embeddedReadyReported.current) {
 				embeddedReadyReported.current = true;
 				markAbsoluteEmbeddedWebReady();
 			}
@@ -3261,12 +3548,17 @@ export function AbsoluteWebHost({ path }: AbsoluteWebHostProps = {}) {
 	</View>;
 	if (!webSource || !runtimeReady || !devicesReady) return <View style={styles.loading}><ActivityIndicator /></View>;
 	return <WebView
-		allowFileAccess
-		allowFileAccessFromFileURLs
+		nativeConfig={!DEV_ORIGIN ? absoluteEmbeddedNativeConfig : undefined}
+		allowFileAccess={Platform.OS !== 'android'}
+		allowFileAccessFromFileURLs={Platform.OS !== 'android'}
 		allowUniversalAccessFromFileURLs={false}
+		originWhitelist={DEV_ORIGIN ? [DEV_ORIGIN] : [Platform.OS === 'android' ? 'https://appassets.androidplatform.net' : 'file://*']}
 		allowingReadAccessToURL={webSource.uri.slice(0, webSource.uri.lastIndexOf('/') + 1)}
 		injectedJavaScriptBeforeContentLoaded={bridgeBootstrap(pathname, safeAreaInsets)}
 		onMessage={onMessage}
+		onError={() => setStartupError('content')}
+		onRenderProcessGone={() => setStartupError('content')}
+		onContentProcessDidTerminate={() => setStartupError('content')}
 		onNavigationStateChange={state => {
 			canGoBack.current = state.canGoBack;
 			if (!DEV_ORIGIN || !hasOrigin(state.url, DEV_ORIGIN)) return;
@@ -3274,8 +3566,8 @@ export function AbsoluteWebHost({ path }: AbsoluteWebHostProps = {}) {
 			activeWebPath.current = route.pathname + route.search + route.hash;
 		}}
 		onShouldStartLoadWithRequest={request => {
-			if (request.url.startsWith('file:') || hasOrigin(request.url, PRODUCTION_ORIGIN) || DEV_ORIGIN && hasOrigin(request.url, DEV_ORIGIN)) return true;
-			void Linking.openURL(request.url);
+			if (DEV_ORIGIN ? hasOrigin(request.url, DEV_ORIGIN) : request.url.startsWith(webSource.uri.slice(0, webSource.uri.lastIndexOf('/') + 1))) return true;
+			if (/^https?:/.test(request.url)) void Linking.openURL(request.url);
 			return false;
 		}}
 		ref={webView}
@@ -3478,8 +3770,8 @@ const styles = StyleSheet.create({
 	error: { color: '#b91c1c', fontSize: 16, textAlign: 'center' }
 });
 `;
-var nativeWrapperSource = (wrapper, module, runtime2, route) => `${EXPO_GENERATED_HEADER}import ApplicationNativeRoute from ${JSON.stringify(portableRelative2(dirname3(wrapper), module).replace(/\.(?:[cm]?[jt]sx?)$/u, ""))};
-import { createAbsoluteNativeRoute, createAbsoluteNativeRouteErrorBoundary } from ${JSON.stringify(portableRelative2(dirname3(wrapper), runtime2).replace(/\.(?:[cm]?[jt]sx?)$/u, ""))};
+var nativeWrapperSource = (wrapper, module, runtime3, route) => `${EXPO_GENERATED_HEADER}import ApplicationNativeRoute from ${JSON.stringify(portableRelative2(dirname3(wrapper), module).replace(/\.(?:[cm]?[jt]sx?)$/u, ""))};
+import { createAbsoluteNativeRoute, createAbsoluteNativeRouteErrorBoundary } from ${JSON.stringify(portableRelative2(dirname3(wrapper), runtime3).replace(/\.(?:[cm]?[jt]sx?)$/u, ""))};
 
 export const ErrorBoundary = createAbsoluteNativeRouteErrorBoundary(${JSON.stringify(route)});
 export default createAbsoluteNativeRoute(ApplicationNativeRoute, ${JSON.stringify(route)});
@@ -3548,7 +3840,7 @@ var pruneManagedFiles = async (paths) => {
   return removed.filter(Boolean).length;
 };
 var pruneStaleManagedExpoRoutes = async (project, expected) => {
-  const appDirectory = join6(project, "app");
+  const appDirectory = join7(project, "app");
   if (!await exists2(appDirectory))
     return 0;
   const files = await walkFiles(appDirectory);
@@ -3596,7 +3888,7 @@ var writeAbsoluteExpoProject = async (config, options) => {
   if (missing) {
     throw new TypeError(`Expo native route ${missing.route} references missing module ${missing.module}.`);
   }
-  const marker = join6(project, EXPO_PROJECT_MARKER);
+  const marker = join7(project, EXPO_PROJECT_MARKER);
   if (await exists2(project) && !await exists2(marker)) {
     const entries = await readdir(project);
     if (entries.length > 0 && !options.force) {
@@ -3609,7 +3901,7 @@ var writeAbsoluteExpoProject = async (config, options) => {
   const authEnabled = Boolean(auth);
   const files = new Map([
     [
-      join6(project, ".gitignore"),
+      join7(project, ".gitignore"),
       `.expo/
 android/
 ios/
@@ -3617,80 +3909,82 @@ node_modules/
 `
     ],
     [
-      join6(project, "app.json"),
+      join7(project, "app.json"),
       jsonSource(expoAppConfig(config, authEnabled, syncEnabled, devices, runtimeFingerprint))
     ],
-    [join6(project, "app.config.js"), expoDynamicAppConfig],
+    [join7(project, "app.config.js"), expoDynamicAppConfig],
     [
-      join6(project, "package.json"),
+      join7(project, "package.json"),
       jsonSource(expoPackage(authEnabled, config.branding !== undefined, syncEnabled, devices, config.updates !== undefined))
     ],
-    [join6(project, "metro.config.js"), metroConfig(projectRoot)],
+    [join7(project, "metro.config.js"), metroConfig(projectRoot)],
     [
-      join6(project, "plugins", "withAbsoluteDevelopmentCa.js"),
+      join7(project, "plugins", "withAbsoluteDevelopmentCa.js"),
       expoDevelopmentCaPlugin
     ],
     [
-      join6(project, "plugins", "withAbsoluteActivityResultRecovery.js"),
+      join7(project, "plugins", "withAbsoluteActivityResultRecovery.js"),
       expoActivityResultRecoveryPlugin
     ],
     [
-      join6(project, "tsconfig.json"),
+      join7(project, "tsconfig.json"),
       jsonSource(expoTsConfig(projectRoot, project, authEnabled, syncEnabled))
     ],
     [
-      join6(project, "app", "_layout.tsx"),
+      join7(project, "app", "_layout.tsx"),
       layoutSource(authEnabled, syncEnabled, config.updates !== undefined, config.observability !== undefined)
     ],
     [
-      join6(project, "app", "__absolute", "native", "index.tsx"),
+      join7(project, "app", "__absolute", "native", "index.tsx"),
       nativeDiagnosticSource
     ],
     [
-      join6(project, "src", "generated", "AbsoluteDevices.ts"),
+      join7(project, "src", "generated", "AbsoluteDevices.ts"),
       devicesRuntimeSource(config, devices, authEnabled)
     ],
     [
-      join6(project, "src", "generated", "AbsoluteNativeRoute.tsx"),
+      join7(project, "src", "generated", "AbsoluteNativeRoute.tsx"),
       nativeRouteRuntimeSource(authEnabled)
     ],
     [
-      join6(project, "src", "generated", "AbsoluteWebHost.tsx"),
+      join7(project, "src", "generated", "AbsoluteWebHost.tsx"),
       webHostSource(config, auth, syncEnabled)
     ]
   ]);
   for (const [path, source] of absoluteExpoActivityResultRecoveryFiles(project))
     files.set(path, source);
+  for (const [path, source] of absoluteExpoEmbeddedAssetsFiles(project))
+    files.set(path, source);
   if (config.observability) {
     for (const [path, source] of absoluteExpoNativeObservabilityFiles(project))
       files.set(path, source);
   }
   if (config.updates) {
-    files.set(join6(project, "src", "generated", "AbsoluteUpdates.ts"), updatesRuntimeSource(config));
+    files.set(join7(project, "src", "generated", "AbsoluteUpdates.ts"), updatesRuntimeSource(config));
   }
   const expoCodeSigning = config.updates?.expoCodeSigning;
   if (expoCodeSigning)
-    files.set(join6(project, "certs", "absolute-mobile-update.pem"), expoCodeSigning.certificatePem);
+    files.set(join7(project, "certs", "absolute-mobile-update.pem"), expoCodeSigning.certificatePem);
   if (auth) {
-    files.set(join6(project, "src", "generated", "AbsoluteAuth.ts"), authRuntimeSource(auth, config.appId));
+    files.set(join7(project, "src", "generated", "AbsoluteAuth.ts"), authRuntimeSource(auth, config.appId));
   }
   if (syncSchema) {
-    files.set(join6(project, "src", "generated", "AbsoluteSync.ts"), syncRuntimeSource(config, syncSchema));
+    files.set(join7(project, "src", "generated", "AbsoluteSync.ts"), syncRuntimeSource(config, syncSchema));
   }
-  const webAssetsPath = join6(project, "src", "generated", "webAssets.ts");
+  const webAssetsPath = join7(project, "src", "generated", "webAssets.ts");
   if (!await exists2(webAssetsPath)) {
     files.set(webAssetsPath, emptyWebAssetsSource);
   }
   if (!config.expoNativeRoutes["/"]) {
-    files.set(join6(project, "app", "index.tsx"), webRouteSource);
+    files.set(join7(project, "app", "index.tsx"), webRouteSource);
   }
-  files.set(join6(project, "app", "[...absolute].tsx"), catchAllRouteSource);
-  const nativeRouteRuntime = join6(project, "src", "generated", "AbsoluteNativeRoute.tsx");
+  files.set(join7(project, "app", "[...absolute].tsx"), catchAllRouteSource);
+  const nativeRouteRuntime = join7(project, "src", "generated", "AbsoluteNativeRoute.tsx");
   for (const [route, module] of routeModules) {
-    const wrapper = route === "/" ? join6(project, "app", "index.tsx") : routeFile(project, route);
+    const wrapper = route === "/" ? join7(project, "app", "index.tsx") : routeFile(project, route);
     files.set(wrapper, nativeWrapperSource(wrapper, module, nativeRouteRuntime, route));
   }
-  const removedRoutes = await pruneStaleManagedExpoRoutes(project, new Set([...files.keys()].filter((path) => path.startsWith(`${join6(project, "app")}${sep}`))));
+  const removedRoutes = await pruneStaleManagedExpoRoutes(project, new Set([...files.keys()].filter((path) => path.startsWith(`${join7(project, "app")}${sep}`))));
   const removedObservability = config.observability ? 0 : await pruneManagedFiles(absoluteExpoNativeObservabilityPaths(project));
   const changes = await Promise.all([...files].map(([path, source]) => writeManagedFile(path, source, true)));
   await writeAbsoluteExpoBrandingInputs(config, projectRoot);
@@ -3700,7 +3994,7 @@ node_modules/
 var walkFiles = async (root, directory = root) => {
   const entries = await readdir(directory, { withFileTypes: true });
   const nested = await Promise.all(entries.map((entry) => {
-    const path = join6(directory, entry.name);
+    const path = join7(directory, entry.name);
     if (entry.isDirectory())
       return walkFiles(root, path);
     if (entry.isFile())
@@ -3733,13 +4027,16 @@ var installStagedDirectory = async (staging, destination) => {
     throw error;
   }
 };
-var assetModuleSource = (assets, archiveAsset, bundleId, manifest) => `${EXPO_GENERATED_HEADER}import { Asset } from 'expo-asset';
+var assetModuleSource = (assets, archiveAsset, bundleId, archiveMd5, manifest) => `${EXPO_GENERATED_HEADER}import { Asset } from 'expo-asset';
 import { Directory, File, Paths } from 'expo-file-system';
 import { copyAsync as copyLegacyAsync } from 'expo-file-system/legacy';
+import { registerAbsoluteEmbeddedBundle } from './AbsoluteEmbeddedAssets';
 
 ${nativeDataManifestTypeSource}
 declare const require: (path: string) => number;
 const BUNDLE_ID = ${JSON.stringify(bundleId)};
+const ARCHIVE_MD5 = ${JSON.stringify(archiveMd5)};
+const ARCHIVE_LENGTH = ${assets.reduce((sum, entry) => sum + entry.length, 0)};
 export const ABSOLUTE_MOBILE_MANIFEST: AbsoluteMobileManifest = ${JSON.stringify(manifest)};
 const ARCHIVE_MODULE = require(${JSON.stringify(archiveAsset)});
 const ASSETS = [
@@ -3756,10 +4053,12 @@ export const materializeAbsoluteWebBundle = async () => {
 	let archive: File;
 	try { archive = new File(root, '.absolutejs-bundle.absasset'); }
 	catch { throw new Error('assets-destination-failed'); }
+	if (archive.exists && (archive.size !== ARCHIVE_LENGTH || archive.md5 !== ARCHIVE_MD5)) archive.delete();
 	if (!archive.exists) {
 		let asset: Asset;
 		try { asset = Asset.fromModule(ARCHIVE_MODULE); }
 		catch { throw new Error('assets-module-failed'); }
+		if (asset.type !== 'absasset' || asset.hash !== ARCHIVE_MD5) throw new Error('assets-identity-failed');
 		try { if (!asset.localUri) asset = await asset.downloadAsync(); }
 		catch { throw new Error('assets-download-failed'); }
 		if (!asset.localUri) throw new Error('assets-download-failed');
@@ -3772,9 +4071,16 @@ export const materializeAbsoluteWebBundle = async () => {
 			catch { throw new Error('assets-copy-failed'); }
 		}
 	}
+	// Checksums detect accidental corruption/registry mismatches, not authenticity;
+	// authenticity comes from the signed application/update containing this table.
+	if (archive.size !== ARCHIVE_LENGTH || archive.md5 !== ARCHIVE_MD5) {
+		archive.delete();
+		throw new Error('assets-integrity-failed');
+	}
 	let contents: Uint8Array;
 	try { contents = await archive.bytes(); }
 	catch { throw new Error('assets-read-failed'); }
+	if (contents.byteLength !== ARCHIVE_LENGTH) throw new Error('assets-integrity-failed');
 	for (const entry of ASSETS) {
 		const parts = entry.path.split('/');
 		const name = parts.pop();
@@ -3788,27 +4094,28 @@ export const materializeAbsoluteWebBundle = async () => {
 		let destination: File;
 		try {
 			destination = new File(directory, name);
-			if (destination.exists && destination.size === entry.length) continue;
+			if (destination.exists && destination.size === entry.length && destination.md5 === entry.md5) continue;
 			if (destination.exists) destination.delete();
 		} catch { throw new Error('assets-destination-failed'); }
 		try { destination.write(contents.slice(entry.offset, entry.offset + entry.length)); }
 		catch { throw new Error('assets-write-failed'); }
+		if (destination.size !== entry.length || destination.md5 !== entry.md5) throw new Error('assets-integrity-failed');
 	}
 	try { archive.delete(); }
 	catch { throw new Error('assets-finalize-failed'); }
 
-	try { return new File(root, 'index.html').uri; }
+	try { return await registerAbsoluteEmbeddedBundle(root.uri, ASSETS.map(entry => entry.path), new File(root, 'index.html').uri); }
 	catch { throw new Error('assets-finalize-failed'); }
 };
 `;
 var syncAbsoluteExpoWebAssets = async (config) => {
   if (config.engine !== "expo")
     throw new TypeError("Expo asset sync requires mobile.engine: expo.");
-  const marker = join6(config.nativeProjectDirectory, EXPO_PROJECT_MARKER);
+  const marker = join7(config.nativeProjectDirectory, EXPO_PROJECT_MARKER);
   if (!await exists2(marker)) {
     throw new TypeError("Expo asset sync requires an AbsoluteJS-managed Expo project. Run mobile init first.");
   }
-  const manifestPath = join6(config.bundleDirectory, "absolute-mobile-manifest.json");
+  const manifestPath = join7(config.bundleDirectory, "absolute-mobile-manifest.json");
   const manifest = JSON.parse(await readFile2(manifestPath, "utf8"));
   const nativeDataManifest = expoNativeDataManifest(manifest);
   const { appBuild } = nativeDataManifest;
@@ -3822,16 +4129,18 @@ var syncAbsoluteExpoWebAssets = async (config) => {
     bundleHash.update("\x00");
   });
   const bundleId = `amexpo_${bundleHash.digest("hex")}`;
-  const destination = join6(config.nativeProjectDirectory, "assets", "absolute");
+  const destination = join7(config.nativeProjectDirectory, "assets", "absolute");
   await mkdir2(dirname3(destination), { recursive: true });
-  const staging = await mkdtemp(join6(dirname3(destination), `.${basename(destination)}.stage-`));
+  const staging = await mkdtemp(join7(dirname3(destination), `.${basename(destination)}.stage-`));
   let assets;
   let archiveAsset;
+  let archiveMd5;
   try {
     let offset = 0;
     assets = filesWithContents.map(({ contents, file }) => {
       const entry = {
         length: contents.byteLength,
+        md5: createHash3("md5").update(contents).digest("hex"),
         offset,
         path: relative3(config.bundleDirectory, file).replaceAll("\\", "/")
       };
@@ -3839,15 +4148,17 @@ var syncAbsoluteExpoWebAssets = async (config) => {
       return entry;
     });
     const name = `bundle${EXPO_ASSET_EXTENSION}`;
-    await writeFile2(join6(staging, name), Buffer.concat(filesWithContents.map(({ contents }) => contents)));
-    archiveAsset = portableRelative2(join6(config.nativeProjectDirectory, "src", "generated"), join6(destination, name));
+    const archiveContents = Buffer.concat(filesWithContents.map(({ contents }) => contents));
+    archiveMd5 = createHash3("md5").update(archiveContents).digest("hex");
+    await writeFile2(join7(staging, name), archiveContents);
+    archiveAsset = portableRelative2(join7(config.nativeProjectDirectory, "src", "generated"), join7(destination, name));
     await installStagedDirectory(staging, destination);
   } catch (error) {
     await rm2(staging, { force: true, recursive: true });
     throw error;
   }
-  const generated = join6(config.nativeProjectDirectory, "src", "generated", "webAssets.ts");
-  await writeManagedFile(generated, assetModuleSource(assets, archiveAsset, bundleId, nativeDataManifest), true);
+  const generated = join7(config.nativeProjectDirectory, "src", "generated", "webAssets.ts");
+  await writeManagedFile(generated, assetModuleSource(assets, archiveAsset, bundleId, archiveMd5, nativeDataManifest), true);
   return { appBuild, assets: assets.length, bundleId, path: destination };
 };