@absolutejs/absolute 0.20.0-beta.115 → 0.20.0-beta.117

package/dist/cli/{index-dr21p6ae.js → index-nxcwg9ma.js}

@@ -16,17 +16,80 @@ import {
   mkdir as mkdir2,
   mkdtemp,
   readdir,
-  readFile as readFile2,
+  readFile as readFile3,
   rename as rename2,
   rm as rm2,
   writeFile as writeFile2
 } from "fs/promises";
 import { createHash as createHash3 } from "crypto";
-import { basename, dirname as dirname3, join as join6, relative as relative3, resolve as resolve4, sep } from "path";
+import { basename, dirname as dirname4, join as join8, relative as relative3, resolve as resolve5, sep } from "path";
+
+// src/mobile/nativePackages.ts
+import { readFile } from "fs/promises";
+import { dirname, join, resolve } from "path";
+var ABSOLUTE_CAPACITOR_DEVICES_VERSION = "0.8.0";
+var ABSOLUTE_CAPACITOR_SYNC_VERSION = "0.9.3";
+var ABSOLUTE_DEVICES_VERSION = "0.7.0";
+var ABSOLUTE_EXPO_DEVICES_VERSION = "0.0.11";
+var ABSOLUTE_NATIVE_EXACT_PACKAGES = new Set([
+  "@absolutejs/devices",
+  "@absolutejs/devices-capacitor",
+  "@absolutejs/sync-capacitor"
+]);
+var CAPACITOR_PACKAGE_SPECS = [
+  "@capacitor/core@8.5.0",
+  "@capacitor/app@8.1.1",
+  "@capacitor/browser@8.0.4",
+  "@capacitor/network@8.0.1",
+  "@capacitor/preferences@8.0.1",
+  "@capacitor/cli@8.5.0",
+  "@capacitor/android@8.5.0",
+  "@capacitor/ios@8.5.0",
+  `@absolutejs/devices@${ABSOLUTE_DEVICES_VERSION}`,
+  `@absolutejs/devices-capacitor@${ABSOLUTE_CAPACITOR_DEVICES_VERSION}`
+];
+var CAPACITOR_SYNC_PACKAGE_SPECS = [
+  `@absolutejs/sync-capacitor@${ABSOLUTE_CAPACITOR_SYNC_VERSION}`,
+  "@capacitor-community/sqlite@8.1.1"
+];
+var resolvedPackageVersion = async (projectRoot, name) => {
+  const directory = resolve(projectRoot);
+  let source;
+  try {
+    source = await readFile(join(directory, "node_modules", name, "package.json"), "utf8");
+  } catch (error) {
+    if (!(error instanceof Error) || !("code" in error) || error.code !== "ENOENT")
+      return;
+    const parent = dirname(directory);
+    return parent === directory ? undefined : resolvedPackageVersion(parent, name);
+  }
+  try {
+    const manifest = JSON.parse(source);
+    return typeof manifest === "object" && manifest !== null ? Reflect.get(manifest, "version") : undefined;
+  } catch {
+    return;
+  }
+};
+var assertNativePackageVersions = async (projectRoot, specs, exactPackages) => {
+  const stale = await packagesNeedingExactInstall(projectRoot, specs, new Set(specs.map(packageNameFromSpec)), exactPackages);
+  if (stale.length > 0)
+    throw new TypeError(`Native dependency installation did not resolve the tested versions: ${stale.join(", ")}. A stale workspace-local installation may be shadowing hoisted packages. Restore a clean dependency installation for this app/workspace with your package manager, then retry absolute mobile init or sync. A forced install alone may leave obsolete workspace-local copies in place.`);
+};
+var packageNameFromSpec = (spec) => spec.slice(0, spec.lastIndexOf("@"));
+var packagesNeedingExactInstall = async (projectRoot, specs, installed, exactPackages) => (await Promise.all(specs.map(async (spec) => {
+  const name = packageNameFromSpec(spec);
+  if (!installed.has(name))
+    return spec;
+  if (!exactPackages.has(name))
+    return;
+  if (await resolvedPackageVersion(projectRoot, name) === spec.slice(spec.lastIndexOf("@") + 1))
+    return;
+  return spec;
+}))).filter((spec) => spec !== undefined);
 
 // src/mobile/syncSchema.ts
 import { readFileSync } from "fs";
-import { dirname, join, resolve } from "path";
+import { dirname as dirname2, join as join2, resolve as resolve2 } from "path";
 
 // node_modules/@absolutejs/sync/dist/client/index.js
 var RUNTIME_TRANSPORT = Symbol.for("@absolutejs/sync/client-runtime-transport");
@@ -183,13 +246,13 @@ var localSchemaMetadata = (manifest) => {
   return Reflect.get(sync, "localSchema");
 };
 var packageManifestPath = (projectRoot, packageName) => {
-  let directory = resolve(projectRoot);
+  let directory = resolve2(projectRoot);
   while (true) {
-    const candidate = join(directory, "node_modules", packageName, "package.json");
+    const candidate = join2(directory, "node_modules", packageName, "package.json");
     const manifest = manifestAt(candidate);
     if (manifest && Reflect.get(manifest, "name") === packageName)
       return candidate;
-    const parent = dirname(directory);
+    const parent = dirname2(directory);
     if (parent === directory)
       return;
     directory = parent;
@@ -428,7 +491,7 @@ var dependencyNames = (manifest) => [
   Reflect.get(manifest, "peerDependencies")
 ].flatMap((dependencies) => object(dependencies) ? Object.keys(dependencies) : []).filter((name, index, names) => names.indexOf(name) === index).sort();
 var discoverAbsoluteSyncSchema = (projectRoot) => {
-  const appManifestPath = join(resolve(projectRoot), "package.json");
+  const appManifestPath = join2(resolve2(projectRoot), "package.json");
   const appManifest = manifestAt(appManifestPath);
   if (!appManifest)
     return {
@@ -469,7 +532,7 @@ var discoverAbsoluteSyncSchema = (projectRoot) => {
 
 // src/mobile/deviceCapabilities.ts
 import { existsSync, readFileSync as readFileSync2 } from "fs";
-import { extname, join as join2, relative, resolve as resolve2 } from "path";
+import { extname, join as join3, relative, resolve as resolve3 } from "path";
 import { fileURLToPath } from "url";
 import ts from "typescript";
 var DEVICES_PACKAGE = "@absolutejs/devices";
@@ -644,7 +707,7 @@ var absoluteDeviceNativeRequirements = (plan) => {
 };
 var loadAbsoluteDeviceCapabilityProviders = (projectRoot, provider = "capacitor") => {
   const adapter = ADAPTERS[provider];
-  let path = join2(resolve2(projectRoot), "node_modules", adapter, "package.json");
+  let path = join3(resolve3(projectRoot), "node_modules", adapter, "package.json");
   try {
     readFileSync2(path, "utf8");
   } catch {
@@ -702,7 +765,7 @@ var assertAbsoluteDeviceCapabilityPackages = (projectRoot, plan) => {
     if (missing.includes(spec))
       return false;
     try {
-      return readJson(join2(resolve2(projectRoot), "node_modules", packageName, "package.json")).version !== spec.slice(separator + 1);
+      return readJson(join3(resolve3(projectRoot), "node_modules", packageName, "package.json")).version !== spec.slice(separator + 1);
     } catch {
       return true;
     }
@@ -712,7 +775,7 @@ var assertAbsoluteDeviceCapabilityPackages = (projectRoot, plan) => {
     throw new TypeError(`Device capabilities ${plan.capabilities.join(", ")} require ${unmet.join(", ")}. Run absolute mobile sync and approve the detected capability plugins.`);
 };
 var directAbsoluteProjectPackages = (projectRoot) => {
-  const manifest = readJson(join2(resolve2(projectRoot), "package.json"));
+  const manifest = readJson(join3(resolve3(projectRoot), "package.json"));
   const packages = new Set;
   for (const field of ["dependencies", "devDependencies"]) {
     const dependencies = manifest[field];
@@ -723,16 +786,16 @@ var directAbsoluteProjectPackages = (projectRoot) => {
   return packages;
 };
 var discoverAbsoluteDeviceCapabilities = (projectRoot, providers = loadAbsoluteDeviceCapabilityProviders(projectRoot)) => {
-  const root = resolve2(projectRoot);
+  const root = resolve3(projectRoot);
   if (!existsSync(root))
     return [];
   const known = new Set(Object.keys(providers));
   const capabilities = new Set;
   for (const path of SOURCE_GLOB.scanSync({ cwd: root })) {
-    const portable = relative(root, resolve2(root, path)).replaceAll("\\", "/");
+    const portable = relative(root, resolve3(root, path)).replaceAll("\\", "/");
     if (isIgnored(portable))
       continue;
-    const source = readFileSync2(resolve2(root, portable), "utf8");
+    const source = readFileSync2(resolve3(root, portable), "utf8");
     for (const name of importedCapabilities(source, portable))
       if (known.has(name))
         capabilities.add(name);
@@ -902,6 +965,7 @@ var createAbsoluteMobileUpdateRuntimeDescriptor = (options) => ({
   },
   deviceCapabilities: options.deviceCapabilities,
   engine: options.config.engine,
+  ...options.config.engine === "expo" ? { expoEmbeddedAssetsAbi: 1 } : {},
   format: ABSOLUTE_MOBILE_UPDATE_RUNTIME_FORMAT,
   shellAbi: ABSOLUTE_MOBILE_SHELL_ABI,
   syncSchema: options.syncSchema ?? null,
@@ -930,7 +994,7 @@ var resolveAbsoluteMobileUpdateRuntime = (config, projectRoot) => {
 };
 
 // src/mobile/expoNativeObservability.ts
-import { join as join3 } from "path";
+import { join as join4 } from "path";
 var HEADER = `// Generated by AbsoluteJS. Edit absolute.config.ts, then run absolute mobile sync.
 `;
 var XML_HEADER = `<!-- Generated by AbsoluteJS. Edit absolute.config.ts, then run absolute mobile sync. -->
@@ -1372,31 +1436,31 @@ export const enqueueAbsoluteExpoNativeObservabilityForTesting = async (testId: s
 `;
 var absoluteExpoNativeObservabilityFiles = (project) => new Map([
   [
-    join3(project, "modules/absolute-mobile-observability/expo-module.config.json"),
+    join4(project, "modules/absolute-mobile-observability/expo-module.config.json"),
     moduleConfig
   ],
   [
-    join3(project, "modules/absolute-mobile-observability/ios/AbsoluteMobileObservability.podspec"),
+    join4(project, "modules/absolute-mobile-observability/ios/AbsoluteMobileObservability.podspec"),
     podspec
   ],
   [
-    join3(project, "modules/absolute-mobile-observability/ios/AbsoluteMobileObservabilityModule.swift"),
+    join4(project, "modules/absolute-mobile-observability/ios/AbsoluteMobileObservabilityModule.swift"),
     iosModule
   ],
   [
-    join3(project, "modules/absolute-mobile-observability/android/build.gradle"),
+    join4(project, "modules/absolute-mobile-observability/android/build.gradle"),
     androidBuild
   ],
   [
-    join3(project, "modules/absolute-mobile-observability/android/src/main/AndroidManifest.xml"),
+    join4(project, "modules/absolute-mobile-observability/android/src/main/AndroidManifest.xml"),
     androidManifest
   ],
   [
-    join3(project, "modules/absolute-mobile-observability/android/src/main/java/expo/modules/absolutemobileobservability/AbsoluteMobileObservabilityModule.kt"),
+    join4(project, "modules/absolute-mobile-observability/android/src/main/java/expo/modules/absolutemobileobservability/AbsoluteMobileObservabilityModule.kt"),
     androidModule
   ],
   [
-    join3(project, "src/generated/AbsoluteNativeObservability.ts"),
+    join4(project, "src/generated/AbsoluteNativeObservability.ts"),
     expoNativeObservabilityRuntimeSource
   ]
 ]);
@@ -1405,7 +1469,7 @@ var absoluteExpoNativeObservabilityPaths = (project) => [
 ];
 
 // src/mobile/expoActivityResultRecovery.ts
-import { join as join4 } from "path";
+import { join as join5 } from "path";
 var HEADER2 = `// Generated by AbsoluteJS. Edit absolute.config.ts, then run absolute mobile sync.
 `;
 var XML_HEADER2 = `<!-- Generated by AbsoluteJS. Edit absolute.config.ts, then run absolute mobile sync. -->
@@ -1642,47 +1706,306 @@ export const takeAbsoluteActivityResultCancellation = () =>
 `;
 var absoluteExpoActivityResultRecoveryFiles = (project) => new Map([
   [
-    join4(project, "modules/absolute-activity-result-recovery/expo-module.config.json"),
+    join5(project, "modules/absolute-activity-result-recovery/expo-module.config.json"),
     moduleConfig2
   ],
   [
-    join4(project, "modules/absolute-activity-result-recovery/ios/AbsoluteActivityResultRecovery.podspec"),
+    join5(project, "modules/absolute-activity-result-recovery/ios/AbsoluteActivityResultRecovery.podspec"),
     podspec2
   ],
   [
-    join4(project, "modules/absolute-activity-result-recovery/ios/AbsoluteActivityResultRecoveryModule.swift"),
+    join5(project, "modules/absolute-activity-result-recovery/ios/AbsoluteActivityResultRecoveryModule.swift"),
     iosModule2
   ],
   [
-    join4(project, "modules/absolute-activity-result-recovery/android/build.gradle"),
+    join5(project, "modules/absolute-activity-result-recovery/android/build.gradle"),
     androidBuild2
   ],
   [
-    join4(project, "modules/absolute-activity-result-recovery/android/src/main/AndroidManifest.xml"),
+    join5(project, "modules/absolute-activity-result-recovery/android/src/main/AndroidManifest.xml"),
     androidManifest2
   ],
   [
-    join4(project, "modules/absolute-activity-result-recovery/android/src/main/java/expo/modules/absoluteactivityresultrecovery/AbsoluteActivityResultRecoveryModule.kt"),
+    join5(project, "modules/absolute-activity-result-recovery/android/src/main/java/expo/modules/absoluteactivityresultrecovery/AbsoluteActivityResultRecoveryModule.kt"),
     androidModule2
   ],
   [
-    join4(project, "src/generated/AbsoluteActivityResultRecovery.ts"),
+    join5(project, "src/generated/AbsoluteActivityResultRecovery.ts"),
     runtime
   ]
 ]);
 
+// src/mobile/expoEmbeddedAssets.ts
+import { join as join6 } from "path";
+var header = `// Generated by AbsoluteJS. Edit absolute.config.ts, then run absolute mobile sync.
+`;
+var android = `${header}package expo.modules.absoluteembeddedassets
+
+import android.content.Context
+import android.graphics.Bitmap
+import android.net.Uri
+import android.util.Log
+import android.webkit.WebResourceRequest
+import android.webkit.WebResourceResponse
+import android.webkit.WebView
+import androidx.webkit.WebViewAssetLoader
+import androidx.webkit.WebViewCompat
+import androidx.webkit.WebViewFeature
+import androidx.webkit.ScriptHandler
+import androidx.webkit.WebMessageCompat
+import com.facebook.react.ReactPackage
+import com.facebook.react.bridge.NativeModule
+import com.facebook.react.bridge.ReactApplicationContext
+import com.facebook.react.bridge.ReadableMap
+import com.facebook.react.uimanager.ThemedReactContext
+import com.facebook.react.uimanager.ViewManager
+import com.reactnativecommunity.webview.RNCWebViewClient
+import com.reactnativecommunity.webview.RNCWebViewManager
+import com.reactnativecommunity.webview.RNCWebViewWrapper
+import expo.modules.kotlin.modules.Module
+import expo.modules.kotlin.modules.ModuleDefinition
+import java.io.ByteArrayInputStream
+import java.io.File
+import java.util.concurrent.ConcurrentHashMap
+import java.util.WeakHashMap
+
+private const val HOST = "appassets.androidplatform.net"
+private const val PREFIX = "/absolutejs/"
+
+internal object AbsoluteEmbeddedAssets {
+  private val bundles = ConcurrentHashMap<String, Map<String, File>>()
+
+  fun register(context: Context, rootUri: String, paths: List<String>): String {
+    check(WebViewFeature.isFeatureSupported(WebViewFeature.DOCUMENT_START_SCRIPT) &&
+      WebViewFeature.isFeatureSupported(WebViewFeature.WEB_MESSAGE_LISTENER)) {
+      "Update Android System WebView to load this application."
+    }
+    val uri = Uri.parse(rootUri)
+    require(uri.scheme == "file" && uri.authority.isNullOrEmpty() && uri.query == null && uri.fragment == null)
+    val root = File(requireNotNull(uri.path)).canonicalFile
+    val parent = File(context.filesDir, "absolutejs-web").canonicalFile
+    require(root.parentFile == parent && root.name.matches(Regex("amexpo_[a-f0-9]{64}")))
+    require(paths.isNotEmpty() && paths.size <= 100000 && paths.distinct().size == paths.size)
+    val files = paths.associateWith { path ->
+      require(path.isNotEmpty() && !path.contains('\\\\') && !path.contains('%') &&
+        !path.contains('?') && !path.contains('#') && path.indexOf(0.toChar()) < 0 &&
+        path.split('/').all { it.isNotEmpty() && it != "." && it != ".." })
+      val file = File(root, path).canonicalFile
+      require(file.path.startsWith(root.path + File.separator) && file.isFile)
+      file
+    }
+    require(files.containsKey("index.html") && files.containsKey("absolute-mobile-manifest.json"))
+    bundles[root.name] = files
+    Log.i("AbsoluteJS", "Expo embedded web phase: asset-host-registered")
+    return "https://" + HOST + PREFIX + root.name + "/index.html"
+  }
+
+  private fun empty(status: Int, reason: String) = WebResourceResponse(
+    "text/plain", "UTF-8", status, reason,
+    mapOf("Cache-Control" to "no-store", "X-Content-Type-Options" to "nosniff"),
+    ByteArrayInputStream(ByteArray(0))
+  )
+
+  private fun resource(path: String): WebResourceResponse {
+    val bundle = path.substringBefore('/')
+    val name = path.substringAfter('/', "")
+    val file = bundles[bundle]?.get(name) ?: return empty(404, "Not Found")
+    // Recheck canonical location at read time. Never follow a replaced symlink.
+    if (file.canonicalFile != file || !file.isFile) return empty(404, "Not Found")
+    val mime = when (file.extension.lowercase()) {
+      "html", "htm" -> "text/html"
+      "js", "mjs" -> "text/javascript"
+      "json", "map" -> "application/json"
+      "css" -> "text/css"
+      "svg" -> "image/svg+xml"
+      "wasm" -> "application/wasm"
+      else -> android.webkit.MimeTypeMap.getSingleton().getMimeTypeFromExtension(file.extension.lowercase()) ?: "application/octet-stream"
+    }
+    return try {
+      WebResourceResponse(mime, "UTF-8", 200, "OK",
+        mapOf("Cache-Control" to "no-store", "X-Content-Type-Options" to "nosniff"), file.inputStream())
+    } catch (_: Exception) { empty(404, "Not Found") }
+  }
+
+  private val loader = WebViewAssetLoader.Builder()
+    .setDomain(HOST).setHttpAllowed(false)
+    .addPathHandler(PREFIX) { path -> resource(path) }.build()
+
+  fun intercept(request: WebResourceRequest, activeBundle: String?): WebResourceResponse? {
+    val uri = request.url
+    if (uri.host != HOST) return null
+    if (uri.path.orEmpty().endsWith("/index.html")) Log.i("AbsoluteJS", "Expo embedded web phase: document-request")
+    if (uri.path.orEmpty().endsWith("/absolute-mobile-bootstrap.js")) Log.i("AbsoluteJS", "Expo embedded web phase: bootstrap-request")
+    // A reserved asset host must never fall through to DNS/network, even for
+    // unknown bundles, wrong ports/schemes, methods, or malformed paths.
+    if (uri.scheme != "https" || uri.port != -1 || uri.userInfo != null ||
+      request.method != "GET") return empty(403, "Forbidden")
+    // Root-relative image/font/CSS URLs retain their web meaning. Scope them
+    // to this WebView's bundle, not the last bundle registered by another view.
+    if (!uri.path.orEmpty().startsWith(PREFIX)) {
+      if (request.isForMainFrame || activeBundle == null) return empty(404, "Not Found")
+      return resource(activeBundle + "/" + uri.path.orEmpty().removePrefix("/"))
+    }
+    return loader.shouldInterceptRequest(uri) ?: empty(404, "Not Found")
+  }
+}
+
+class AbsoluteEmbeddedAssetsModule : Module() {
+  override fun definition() = ModuleDefinition {
+    Name("AbsoluteEmbeddedAssets")
+    AsyncFunction("registerBundle") { root: String, paths: List<String> ->
+      AbsoluteEmbeddedAssets.register(requireNotNull(appContext.reactContext), root, paths)
+    }
+  }
+}
+
+class AbsoluteEmbeddedWebViewManager : RNCWebViewManager() {
+  private val scripts = WeakHashMap<RNCWebViewWrapper, ScriptHandler>()
+  override fun getName() = "AbsoluteEmbeddedWebView"
+  override fun setNewSource(view: RNCWebViewWrapper, value: ReadableMap?) {
+    Log.i("AbsoluteJS", "Expo embedded web phase: source-assigned")
+    super.setNewSource(view, value)
+  }
+  override fun setMessagingEnabled(view: RNCWebViewWrapper, value: Boolean) {
+    super.setMessagingEnabled(view, value)
+    // Upstream reports sourceOrigin as event.url and accepts subframe messages.
+    // Retain its event dispatch, but bind this bridge to our main-frame origin
+    // and attach the native-observed document URL, never a JS-supplied URL.
+    if (!WebViewFeature.isFeatureSupported(WebViewFeature.WEB_MESSAGE_LISTENER)) return
+    WebViewCompat.removeWebMessageListener(view.webView, "ReactNativeWebView")
+    if (!value) return
+    WebViewCompat.addWebMessageListener(view.webView, "ReactNativeWebView", setOf("https://" + HOST)) {
+        webView, message, sourceOrigin, isMainFrame, _ ->
+      if (isMainFrame && sourceOrigin.scheme == "https" && sourceOrigin.host == HOST &&
+          message.type == WebMessageCompat.TYPE_STRING) {
+        val url = webView.url
+        val data = message.data
+        if (url != null && data != null) view.webView.onMessage(data, url)
+      }
+    }
+  }
+  override fun setInjectedJavaScriptBeforeContentLoaded(view: RNCWebViewWrapper, value: String?) {
+    scripts.remove(view)?.remove()
+    if (value == null) return
+    // onPageStarted injection races module execution on Android. Register with
+    // Chromium before navigation, scoped to our virtual asset origin only.
+    check(WebViewFeature.isFeatureSupported(WebViewFeature.DOCUMENT_START_SCRIPT)) {
+      "AbsoluteJS requires an Android System WebView with document-start script support."
+    }
+    scripts[view] = WebViewCompat.addDocumentStartJavaScript(view.webView, value, setOf("https://" + HOST))
+  }
+  override fun onDropViewInstance(view: RNCWebViewWrapper) {
+    scripts.remove(view)?.remove()
+    if (WebViewFeature.isFeatureSupported(WebViewFeature.WEB_MESSAGE_LISTENER))
+      WebViewCompat.removeWebMessageListener(view.webView, "ReactNativeWebView")
+    super.onDropViewInstance(view)
+  }
+  override fun addEventEmitters(context: ThemedReactContext, view: RNCWebViewWrapper) {
+    Log.i("AbsoluteJS", "Expo embedded web phase: asset-host-view-created")
+    view.webView.webViewClient = object : RNCWebViewClient() {
+      @Volatile private var activeBundle: String? = null
+      override fun onPageStarted(view: WebView, url: String, favicon: Bitmap?) {
+        Log.i("AbsoluteJS", "Expo embedded web phase: document-started")
+        val uri = Uri.parse(url)
+        activeBundle = if (uri.scheme == "https" && uri.host == HOST && uri.path.orEmpty().startsWith(PREFIX))
+          uri.path!!.removePrefix(PREFIX).substringBefore('/') else null
+        super.onPageStarted(view, url, favicon)
+      }
+      override fun shouldInterceptRequest(view: WebView, request: WebResourceRequest): WebResourceResponse? =
+        AbsoluteEmbeddedAssets.intercept(request, activeBundle) ?: super.shouldInterceptRequest(view, request)
+    }
+  }
+}
+
+class AbsoluteEmbeddedWebViewPackage : ReactPackage {
+  override fun createNativeModules(context: ReactApplicationContext): List<NativeModule> = emptyList()
+  override fun createViewManagers(context: ReactApplicationContext): List<ViewManager<*, *>> = listOf(AbsoluteEmbeddedWebViewManager())
+}
+`;
+var plugin = `${header}const { withMainApplication } = require('expo/config-plugins');
+module.exports = config => withMainApplication(config, value => {
+  if (value.modResults.language !== 'kt') throw new Error('AbsoluteJS embedded assets require the managed Kotlin application.');
+  const name = 'expo.modules.absoluteembeddedassets.AbsoluteEmbeddedWebViewPackage';
+  const registration = 'add(' + name + '())';
+  const source = value.modResults.contents;
+  if (!source.includes(registration)) {
+    const anchor = 'PackageList(this).packages.apply {';
+    if (source.split(anchor).length !== 2) throw new Error('Cannot safely register AbsoluteJS embedded WebView in MainApplication.');
+    value.modResults.contents = source.replace(anchor, anchor + '\\n              ' + registration);
+  }
+  return value;
+});
+`;
+var runtime2 = `${header}import { requireNativeModule } from 'expo-modules-core';
+import { Platform, requireNativeComponent } from 'react-native';
+
+export const absoluteEmbeddedNativeConfig = Platform.OS === 'android'
+  ? { component: requireNativeComponent('AbsoluteEmbeddedWebView') }
+  : undefined;
+
+export const registerAbsoluteEmbeddedBundle = async (rootUri: string, paths: string[], indexUri: string): Promise<string> => {
+  if (Platform.OS !== 'android') return indexUri;
+  const native = requireNativeModule<{ registerBundle(root: string, paths: string[]): Promise<string> }>('AbsoluteEmbeddedAssets');
+  return native.registerBundle(rootUri, paths);
+};
+`;
+var absoluteExpoEmbeddedAssetsFiles = (project) => {
+  const root = join6(project, "modules/absolute-embedded-assets");
+  return new Map([
+    [
+      join6(root, "expo-module.config.json"),
+      `${JSON.stringify({
+        android: {
+          modules: [
+            "expo.modules.absoluteembeddedassets.AbsoluteEmbeddedAssetsModule"
+          ]
+        },
+        platforms: ["android"]
+      }, null, 2)}
+`
+    ],
+    [
+      join6(root, "android/build.gradle"),
+      `${header}plugins { id 'com.android.library'; id 'expo-module-gradle-plugin' }
+group = 'expo.modules.absoluteembeddedassets'
+version = '0.0.1'
+android {
+  namespace 'expo.modules.absoluteembeddedassets'
+  defaultConfig { versionCode 1; versionName '0.0.1' }
+}
+dependencies {
+  implementation 'com.facebook.react:react-android'
+  implementation project(':react-native-webview')
+  implementation 'androidx.webkit:webkit:1.14.0'
+}
+`
+    ],
+    [
+      join6(root, "android/src/main/AndroidManifest.xml"),
+      `<manifest xmlns:android="http://schemas.android.com/apk/res/android" />
+`
+    ],
+    [
+      join6(root, "android/src/main/java/expo/modules/absoluteembeddedassets/AbsoluteEmbeddedAssetsModule.kt"),
+      android
+    ],
+    [join6(project, "plugins/withAbsoluteEmbeddedAssets.js"), plugin],
+    [join6(project, "src/generated/AbsoluteEmbeddedAssets.ts"), runtime2]
+  ]);
+};
+
 // src/mobile/branding.ts
 import { createHash as createHash2 } from "crypto";
 import {
   access,
   copyFile,
   mkdir,
-  readFile,
+  readFile as readFile2,
   rename,
   rm,
   writeFile
 } from "fs/promises";
-import { dirname as dirname2, join as join5, relative as relative2, resolve as resolve3 } from "path";
+import { dirname as dirname3, join as join7, relative as relative2, resolve as resolve4 } from "path";
 var ABSOLUTE_MOBILE_BRANDING_FORMAT = 1;
 var ABSOLUTE_CAPACITOR_ASSETS_VERSION = "3.0.5";
 var ABSOLUTE_CAPACITOR_ASSETS_SPEC = `@capacitor/assets@${ABSOLUTE_CAPACITOR_ASSETS_VERSION}`;
@@ -1706,7 +2029,7 @@ var exists = async (path) => {
   }
 };
 var portableRelative = (root, path) => relative2(root, path).replaceAll("\\", "/");
-var absoluteMobileBrandingManifestPath = (projectRoot) => join5(resolve3(projectRoot), ".absolutejs", "mobile", "branding", "manifest.json");
+var absoluteMobileBrandingManifestPath = (projectRoot) => join7(resolve4(projectRoot), ".absolutejs", "mobile", "branding", "manifest.json");
 var brandingEntries = (branding) => [
   { kind: "icon", path: branding.icon, size: ICON_SIZE },
   branding.android.foreground ? {
@@ -1746,7 +2069,7 @@ var brandingEntries = (branding) => [
   } : undefined
 ].filter((entry) => entry !== undefined);
 var inspectSource = async (projectRoot, entry) => {
-  const buffer = await readFile(entry.path);
+  const buffer = await readFile2(entry.path);
   if (buffer.byteLength > MAX_SOURCE_BYTES)
     throw new TypeError(`mobile.branding ${entry.kind} exceeds the 32 MiB source limit.`);
   let metadata;
@@ -1799,7 +2122,7 @@ var createAbsoluteMobileBrandingManifest = async (config, projectRoot) => {
 };
 var writeManifest = async (projectRoot, manifest) => {
   const destination = absoluteMobileBrandingManifestPath(projectRoot);
-  await mkdir(dirname2(destination), { recursive: true });
+  await mkdir(dirname3(destination), { recursive: true });
   const temporary = `${destination}.${crypto.randomUUID()}.tmp`;
   await writeFile(temporary, `${JSON.stringify(manifest, null, 2)}
 `, {
@@ -1809,7 +2132,7 @@ var writeManifest = async (projectRoot, manifest) => {
   return destination;
 };
 var copyManaged = async (source, destination) => {
-  await mkdir(dirname2(destination), { recursive: true });
+  await mkdir(dirname3(destination), { recursive: true });
   await copyFile(source, destination);
 };
 var absoluteExpoBrandingConfig = (config) => {
@@ -1853,10 +2176,10 @@ var writeAbsoluteExpoBrandingInputs = async (config, projectRoot) => {
   if (!branding)
     return;
   const manifest = await createAbsoluteMobileBrandingManifest(config, projectRoot);
-  const destination = join5(config.nativeProjectDirectory, "assets", "absolute-branding");
+  const destination = join7(config.nativeProjectDirectory, "assets", "absolute-branding");
   await rm(destination, { force: true, recursive: true });
   await mkdir(destination, { recursive: true });
-  await copyManaged(branding.icon, join5(destination, "icon.png"));
+  await copyManaged(branding.icon, join7(destination, "icon.png"));
   const copies = [
     [branding.android.backgroundImage, "android-background.png"],
     [branding.android.foreground, "android-foreground.png"],
@@ -1866,19 +2189,19 @@ var writeAbsoluteExpoBrandingInputs = async (config, projectRoot) => {
     [branding.splash.image, "splash-light.png"],
     [branding.splash.darkImage, "splash-dark.png"]
   ];
-  await Promise.all(copies.map(([source, name]) => source ? copyManaged(source, join5(destination, name)) : undefined));
+  await Promise.all(copies.map(([source, name]) => source ? copyManaged(source, join7(destination, name)) : undefined));
   await writeManifest(projectRoot, manifest);
   return { manifest, path: destination };
 };
 var stageCapacitorInputs = async (branding, projectRoot) => {
-  const destination = join5(projectRoot, ".absolutejs", "mobile", "branding", "input");
+  const destination = join7(projectRoot, ".absolutejs", "mobile", "branding", "input");
   await rm(destination, { force: true, recursive: true });
   await mkdir(destination, { recursive: true });
-  await copyManaged(branding.icon, join5(destination, "logo.png"));
+  await copyManaged(branding.icon, join7(destination, "logo.png"));
   if (branding.splash.image)
-    await copyManaged(branding.splash.image, join5(destination, "splash.png"));
+    await copyManaged(branding.splash.image, join7(destination, "splash.png"));
   if (branding.splash.darkImage)
-    await copyManaged(branding.splash.darkImage, join5(destination, "splash-dark.png"));
+    await copyManaged(branding.splash.darkImage, join7(destination, "splash-dark.png"));
   return destination;
 };
 var defaultRunner = async (command, options) => {
@@ -1904,21 +2227,21 @@ ${stderr}`))
     throw new TypeError("Capacitor asset generation reported an incomplete projection.");
 };
 var resizePng = async (source, destination, size) => {
-  const output = await new Bun.Image(await readFile(source)).resize(size, size).png({ compressionLevel: 9 }).toBuffer();
-  await mkdir(dirname2(destination), { recursive: true });
+  const output = await new Bun.Image(await readFile2(source)).resize(size, size).png({ compressionLevel: 9 }).toBuffer();
+  await mkdir(dirname3(destination), { recursive: true });
   await writeFile(destination, output);
 };
 var applyAndroidLayers = async (branding, nativeDirectory) => {
-  const resources = join5(nativeDirectory, "android", "app", "src", "main", "res");
+  const resources = join7(nativeDirectory, "android", "app", "src", "main", "res");
   await Promise.all(ANDROID_ADAPTIVE_SIZES.flatMap(([density, size]) => [
     ...branding.android.foreground ? [
-      resizePng(branding.android.foreground, join5(resources, `mipmap-${density}`, "ic_launcher_foreground.png"), size)
+      resizePng(branding.android.foreground, join7(resources, `mipmap-${density}`, "ic_launcher_foreground.png"), size)
     ] : [],
     ...branding.android.backgroundImage ? [
-      resizePng(branding.android.backgroundImage, join5(resources, `mipmap-${density}`, "ic_launcher_background.png"), size)
+      resizePng(branding.android.backgroundImage, join7(resources, `mipmap-${density}`, "ic_launcher_background.png"), size)
     ] : [],
     ...branding.android.monochrome ? [
-      resizePng(branding.android.monochrome, join5(resources, `mipmap-${density}`, "ic_launcher_monochrome.png"), size)
+      resizePng(branding.android.monochrome, join7(resources, `mipmap-${density}`, "ic_launcher_monochrome.png"), size)
     ] : []
   ]));
   if (!branding.android.monochrome)
@@ -1930,14 +2253,14 @@ var applyAndroidLayers = async (branding, nativeDirectory) => {
     <monochrome android:drawable="@mipmap/ic_launcher_monochrome" />
 </adaptive-icon>
 `;
-  await Promise.all(["ic_launcher.xml", "ic_launcher_round.xml"].map((name) => writeFile(join5(resources, "mipmap-anydpi-v26", name), iconXml)));
+  await Promise.all(["ic_launcher.xml", "ic_launcher_round.xml"].map((name) => writeFile(join7(resources, "mipmap-anydpi-v26", name), iconXml)));
 };
 var applyIosAppearances = async (branding, nativeDirectory) => {
   if (!branding.ios.darkIcon && !branding.ios.tintedIcon)
     return;
-  const assetSet = join5(nativeDirectory, "ios", "App", "App", "Assets.xcassets", "AppIcon.appiconset");
-  const contentsPath = join5(assetSet, "Contents.json");
-  const contents = JSON.parse(await readFile(contentsPath, "utf8"));
+  const assetSet = join7(nativeDirectory, "ios", "App", "App", "Assets.xcassets", "AppIcon.appiconset");
+  const contentsPath = join7(assetSet, "Contents.json");
+  const contents = JSON.parse(await readFile2(contentsPath, "utf8"));
   const images = typeof contents === "object" && contents !== null ? Reflect.get(contents, "images") : undefined;
   if (typeof contents !== "object" || contents === null || !Array.isArray(images))
     throw new TypeError("Generated iOS AppIcon Contents.json is invalid.");
@@ -1949,7 +2272,7 @@ var applyIosAppearances = async (branding, nativeDirectory) => {
     if (!source)
       return;
     const filename = `AppIcon-1024-${appearance}.png`;
-    await resizePng(source, join5(assetSet, filename), ICON_SIZE);
+    await resizePng(source, join7(assetSet, filename), ICON_SIZE);
     return {
       appearances: [{ appearance: "luminosity", value: appearance }],
       filename,
@@ -1971,7 +2294,7 @@ var applyIosAppearances = async (branding, nativeDirectory) => {
   await writeFile(contentsPath, `${JSON.stringify(contents, null, 2)}
 `);
 };
-var nativeBrandingSentinels = (config, platforms) => platforms.map((platform) => platform === "android" ? join5(config.nativeProjectDirectory, "android", "app", "src", "main", "res", "mipmap-xxxhdpi", "ic_launcher.png") : join5(config.nativeProjectDirectory, "ios", "App", "App", "Assets.xcassets", "AppIcon.appiconset", "AppIcon-512@2x.png"));
+var nativeBrandingSentinels = (config, platforms) => platforms.map((platform) => platform === "android" ? join7(config.nativeProjectDirectory, "android", "app", "src", "main", "res", "mipmap-xxxhdpi", "ic_launcher.png") : join7(config.nativeProjectDirectory, "ios", "App", "App", "Assets.xcassets", "AppIcon.appiconset", "AppIcon-512@2x.png"));
 var requireGeneratedBranding = async (config, platforms) => {
   const missing = (await Promise.all(nativeBrandingSentinels(config, platforms).map(async (path) => ({
     path,
@@ -1991,7 +2314,7 @@ var reusableManifestPlatforms = (value, fingerprint) => {
 var completedManifestPlatforms = async (manifest, manifestPath, generated) => {
   let previousPlatforms = [];
   try {
-    const previous = JSON.parse(await readFile(manifestPath, "utf8"));
+    const previous = JSON.parse(await readFile2(manifestPath, "utf8"));
     previousPlatforms = reusableManifestPlatforms(previous, manifest.fingerprint);
   } catch {}
   const completed = new Set([...generated, ...previousPlatforms]);
@@ -2016,9 +2339,9 @@ var generateAbsoluteCapacitorBranding = async (config, projectRoot, options = {}
     "--assetPath",
     portableRelative(projectRoot, input),
     "--androidProject",
-    portableRelative(projectRoot, join5(config.nativeProjectDirectory, "android")),
+    portableRelative(projectRoot, join7(config.nativeProjectDirectory, "android")),
     "--iosProject",
-    portableRelative(projectRoot, join5(config.nativeProjectDirectory, "ios", "App")),
+    portableRelative(projectRoot, join7(config.nativeProjectDirectory, "ios", "App")),
     "--iconBackgroundColor",
     branding.android.backgroundColor,
     "--splashBackgroundColor",
@@ -2080,7 +2403,7 @@ var inspectAbsoluteMobileBranding = async (config, projectRoot) => {
     });
   }
   try {
-    const current = parseManifestState(JSON.parse(await readFile(manifestPath, "utf8")));
+    const current = parseManifestState(JSON.parse(await readFile2(manifestPath, "utf8")));
     if (current.fingerprint !== expected.fingerprint)
       return brandingInspection({
         configured: true,
@@ -2099,7 +2422,7 @@ var inspectAbsoluteMobileBranding = async (config, projectRoot) => {
         status: "stale"
       });
     const nativeSentinels = config.engine === "expo" ? [
-      join5(config.nativeProjectDirectory, "assets", "absolute-branding", "icon.png")
+      join7(config.nativeProjectDirectory, "assets", "absolute-branding", "icon.png")
     ] : nativeBrandingSentinels(config, config.platforms);
     if ((await Promise.all(nativeSentinels.map((path) => exists(path)))).some((present) => !present))
       return brandingInspection({
@@ -2132,8 +2455,8 @@ var renderAbsoluteMobileBrandingPreview = async (config, projectRoot) => {
   const { branding } = config;
   if (!branding)
     throw new TypeError("mobile.branding is not configured.");
-  const destination = join5(projectRoot, ".absolutejs", "mobile", "branding", "preview.html");
-  const icon = `data:image/png;base64,${(await readFile(branding.icon)).toString("base64")}`;
+  const destination = join7(projectRoot, ".absolutejs", "mobile", "branding", "preview.html");
+  const icon = `data:image/png;base64,${(await readFile2(branding.icon)).toString("base64")}`;
   const appName = escapeHtml(config.appName);
   const html = `<!doctype html>
 <meta charset="utf-8">
@@ -2142,7 +2465,7 @@ var renderAbsoluteMobileBrandingPreview = async (config, projectRoot) => {
 <style>body{font:16px system-ui;margin:2rem;background:#eee;color:#111}main{display:flex;flex-wrap:wrap;gap:2rem}.card{background:white;border-radius:20px;padding:1.5rem;box-shadow:0 8px 30px #0002}.icon{width:192px;height:192px;object-fit:cover}.circle{border-radius:50%}.squircle{border-radius:24%}.splash{width:240px;height:480px;display:grid;place-items:center;background:${branding.splash.backgroundColor}}.splash img{width:${branding.splash.logoScale * 100}%}code{display:block;margin-top:1rem}</style>
 <h1>${appName}</h1><main><section class="card"><img class="icon squircle" src="${icon}" alt="Square app icon preview"><code>Apple / legacy Android</code></section><section class="card"><img class="icon circle" src="${icon}" alt="Circular Android icon preview"><code>Android circular mask</code></section><section class="card splash"><img src="${icon}" alt="Launch screen preview"></section></main><p>Fingerprint: <code>${manifest.fingerprint}</code></p>
 `;
-  await mkdir(dirname2(destination), { recursive: true });
+  await mkdir(dirname3(destination), { recursive: true });
   await writeFile(destination, html);
   return destination;
 };
@@ -2227,15 +2550,15 @@ var routeSegments = (route) => {
     return segment;
   });
 };
-var routeFile = (project, route) => join6(project, "app", ...routeSegments(route), "index.tsx");
+var routeFile = (project, route) => join8(project, "app", ...routeSegments(route), "index.tsx");
 var packageDependencies = (plan) => Object.fromEntries(plan.requiredPackages.map((spec) => {
   const separator = spec.lastIndexOf("@");
   return [spec.slice(0, separator), spec.slice(separator + 1)];
 }));
 var expoPackage = (auth, branding, sync, devices, updates) => ({
   dependencies: {
-    "@absolutejs/devices": "0.7.0",
-    "@absolutejs/devices-expo": "0.0.11",
+    "@absolutejs/devices": ABSOLUTE_DEVICES_VERSION,
+    "@absolutejs/devices-expo": ABSOLUTE_EXPO_DEVICES_VERSION,
     ...auth ? {
       "@absolutejs/auth": ABSOLUTE_EXPO_AUTH_CORE_VERSION,
       [ABSOLUTE_EXPO_AUTH_PACKAGE]: ABSOLUTE_EXPO_AUTH_VERSION
@@ -2316,24 +2639,24 @@ var expoAppConfig = (config, auth, sync, devices, runtimeFingerprint) => {
   const devicePlugins = [
     ...new Set(devices.capabilities.flatMap((name) => devices.providers[name]?.plugins ?? []))
   ];
-  const configuredPlugins = devicePlugins.map((plugin) => {
-    if (plugin === "expo-image-picker")
+  const configuredPlugins = devicePlugins.map((plugin2) => {
+    if (plugin2 === "expo-image-picker")
       return [
-        plugin,
+        plugin2,
         {
           cameraPermission: descriptions.NSCameraUsageDescription,
           microphonePermission: false,
           photosPermission: descriptions.NSPhotoLibraryUsageDescription
         }
       ];
-    if (plugin === "expo-location")
+    if (plugin2 === "expo-location")
       return [
-        plugin,
+        plugin2,
         {
           locationWhenInUsePermission: descriptions.NSLocationWhenInUseUsageDescription
         }
       ];
-    return plugin;
+    return plugin2;
   });
   return {
     expo: {
@@ -2355,7 +2678,7 @@ var expoAppConfig = (config, auth, sync, devices, runtimeFingerprint) => {
         package: config.appId,
         permissions: requirements.androidPermissions
       },
-      experiments: { typedRoutes: true },
+      experiments: { tsconfigPaths: false, typedRoutes: true },
       ios: {
         ...branding?.ios ?? {},
         associatedDomains: config.deepLinkHosts.map((host2) => `applinks:${host2}`),
@@ -2378,6 +2701,7 @@ var expoAppConfig = (config, auth, sync, devices, runtimeFingerprint) => {
         ["expo-dev-client", { launchMode: "most-recent" }],
         ...branding ? [branding.splashPlugin] : [],
         "./plugins/withAbsoluteActivityResultRecovery",
+        "./plugins/withAbsoluteEmbeddedAssets",
         ...auth || config.updates ? ["expo-secure-store"] : [],
         ...sync ? [
           "expo-sqlite",
@@ -2835,7 +3159,7 @@ import {
 	installExpoSyncLifecycle,
 	registerExpoSyncBackgroundTask
 } from '@absolutejs/sync-expo';
-import * as Updates from 'expo-updates';
+import { reloadAppAsync } from 'expo';
 import { absoluteExpoAuth, startAbsoluteExpoAuth } from './AbsoluteAuth';
 
 const BACKGROUND_TASK = ${JSON.stringify(backgroundTask)};
@@ -2894,37 +3218,98 @@ absoluteExpoAuth.onPrincipalChange(principal => {
 	if (!started || principal?.namespace === activeNamespace) return;
 	const previousNamespace = activeNamespace;
 	installRuntimeTransport(principal);
-	if (previousNamespace !== undefined) void Updates.reloadAsync();
+	if (previousNamespace !== undefined) void reloadAppAsync('absolutejs-auth-principal-changed').catch(() => {
+		console.warn('AbsoluteJS could not reset the account runtime. Restart the app before continuing.');
+	});
 });
 
 export const createAbsoluteExpoSyncBridge = async (
 	emit: (event: 'sync.socket' | 'sync.wake', payload: Record<string, unknown>) => void
 ) => {
 	await startAbsoluteExpoSync();
-	const principal = await absoluteExpoAuth.principal();
-	if (!principal) return {
-		close: () => undefined,
-		request: async () => { throw new Error('Expo Sync requires an authenticated principal.'); }
+	const bind = (namespace: string, generation: number) => {
+		const emitCurrent = (event: 'sync.socket' | 'sync.wake', payload: Record<string, unknown>) => {
+			if (!closed && generation === revision) emit(event, payload);
+		};
+		const transactions = createExpoSyncBridgeHost({ createId: expoSyncRandomId, namespace, store });
+		const sockets = createExpoSyncSocketBridgeHost({
+			allowedOrigin: PRODUCTION_ORIGIN,
+			emit: payload => emitCurrent('sync.socket', payload),
+			socketTicket: async audience => {
+				if (closed || generation !== revision) throw new Error('Expo Sync principal changed.');
+				const ticket = await absoluteExpoAuth.socketTicket(audience);
+				if (closed || generation !== revision) throw new Error('Expo Sync principal changed.');
+				return ticket;
+			}
+		});
+		const removeLifecycle = installExpoSyncLifecycle({
+			client: { reconnect: () => emitCurrent('sync.wake', {}) }
+		});
+		return {
+			close: async () => {
+				removeLifecycle();
+				await Promise.all([transactions.close(), sockets.close()]);
+			},
+			request: (method: string, params: Record<string, unknown>) =>
+				method.startsWith('sync.socket.') ? sockets.request(method, params) : transactions.request(method, params)
+		};
 	};
-	const transactions = createExpoSyncBridgeHost({ createId: expoSyncRandomId, namespace: principal.namespace, store });
-	const sockets = createExpoSyncSocketBridgeHost({
-		allowedOrigin: PRODUCTION_ORIGIN,
-		emit: payload => emit('sync.socket', payload),
-		socketTicket: audience => absoluteExpoAuth.socketTicket(audience)
-	});
-	const removeLifecycle = installExpoSyncLifecycle({
-		client: { reconnect: () => emit('sync.wake', {}) }
-	});
+	let closed = false;
+	let revoked = false;
+	let boundNamespace: string | undefined;
+	let revision = 0;
+	let bridge: ReturnType<typeof bind> | undefined;
+	let ready = Promise.resolve();
+	const replace = (principal: Awaited<ReturnType<typeof absoluteExpoAuth.principal>>) => {
+		if (closed) return;
+		// A mounted page may bind its first login, but must never inherit another
+		// account's authority. Account changes require the existing runtime reload.
+		if (boundNamespace !== undefined && principal?.namespace !== boundNamespace) revoked = true;
+		const generation = ++revision;
+		const previous = bridge;
+		bridge = undefined;
+		ready = ready.then(async () => {
+			await previous?.close();
+			if (!closed && !revoked && generation === revision && principal) {
+				boundNamespace = principal.namespace;
+				bridge = bind(principal.namespace, generation);
+			}
+		});
+		// Keep background transitions handled; requests still observe setup failures.
+		void ready.catch(() => undefined);
+	};
+	const stop = absoluteExpoAuth.onPrincipalChange(replace);
+	try {
+		const initialRevision = revision;
+		const principal = await absoluteExpoAuth.principal();
+		if (revision === initialRevision) replace(principal);
+		await ready;
+	} catch (error) {
+		stop();
+		closed = true;
+		await bridge?.close();
+		throw error;
+	}
 
 	return {
 		close: async () => {
-			removeLifecycle();
-			await Promise.all([transactions.close(), sockets.close()]);
+			if (closed) return;
+			closed = true;
+			++revision;
+			stop();
+			const previous = bridge;
+			bridge = undefined;
+			await Promise.all([ready, previous?.close()]);
 		},
-		request: (method: string, params: Record<string, unknown>) =>
-			method.startsWith('sync.socket.')
-				? sockets.request(method, params)
-				: transactions.request(method, params)
+		request: async (method: string, params: Record<string, unknown>) => {
+			const generation = revision;
+			await ready;
+			if (closed || revoked || generation !== revision) throw new Error('Expo Sync principal changed.');
+			if (!bridge) throw new Error('Expo Sync requires an authenticated principal.');
+			const result = await bridge.request(method, params);
+			if (closed || revoked || generation !== revision) throw new Error('Expo Sync principal changed.');
+			return result;
+		}
 	};
 };
 `;
@@ -2942,6 +3327,7 @@ import { ActivityIndicator, BackHandler, Platform, Pressable, StyleSheet, Text,
 import { useSafeAreaInsets } from 'react-native-safe-area-context';
 import { WebView, type WebViewMessageEvent } from 'react-native-webview';
 import { materializeAbsoluteWebBundle } from './webAssets';
+import { absoluteEmbeddedNativeConfig } from './AbsoluteEmbeddedAssets';
 import { markAbsoluteEmbeddedWebPhase, markAbsoluteEmbeddedWebReady } from './AbsoluteActivityResultRecovery';
 import { createExpoDevicesBridgeHost } from '@absolutejs/devices-expo/bridge';
 import { absoluteExpoDevices, beforeAbsoluteExpoDeviceSignOut } from './AbsoluteDevices';
@@ -3061,7 +3447,16 @@ const bridgeBootstrap = (path: string, safeAreaInsets: { bottom: number; left: n
 		event.preventDefault();
 		send({ format: 3, kind: 'event', event: 'navigation', path: url.pathname + url.search + url.hash });
 	}, true);
-	send({ format: 3, kind: 'event', event: 'ready', path: currentPath });
+	let shellRendered = false;
+	addEventListener('absolute:shell-rendered', () => {
+		shellRendered = true;
+		send({ format: 3, kind: 'event', event: 'shell-rendered', path: currentPath });
+	});
+	const startupFailed = () => {
+		if (!shellRendered) send({ format: 3, kind: 'event', event: 'startup-failed', path: currentPath });
+	};
+	addEventListener('error', startupFailed);
+	addEventListener('unhandledrejection', startupFailed);
 })(); true;\`;
 };
 
@@ -3106,11 +3501,18 @@ export function AbsoluteWebHost({ path }: AbsoluteWebHostProps = {}) {
 	const canGoBack = useRef(false);
 	const [runtimeReady, setRuntimeReady] = useState(!AUTH_ENABLED && !SYNC_ENABLED);
 	const [devicesReady, setDevicesReady] = useState(false);
-	const [startupError, setStartupError] = useState<'assets' | 'devices'>();
+	const [startupError, setStartupError] = useState<'assets' | 'devices' | 'content'>();
 	const [startupRevision, setStartupRevision] = useState(0);
 	const activeWebPath = useRef(pathname);
 	const embeddedReadyReported = useRef(false);
 	const webSource = useMemo(() => indexUri ? { uri: indexUri } : undefined, [indexUri]);
+	useEffect(() => {
+		if (!indexUri || DEV_ORIGIN) return;
+		const timeout = setTimeout(() => {
+			if (!embeddedReadyReported.current) setStartupError('content');
+		}, 60000);
+		return () => clearTimeout(timeout);
+	}, [indexUri]);
 
 	useEffect(() => {
 		if (!AUTH_ENABLED && !SYNC_ENABLED) return;
@@ -3121,10 +3523,13 @@ export function AbsoluteWebHost({ path }: AbsoluteWebHostProps = {}) {
 			webView.current?.injectJavaScript(\`globalThis.__absoluteExpoReceive(\${JSON.stringify(source)}); true;\`);
 		});
 		void ${sync ? "startAbsoluteExpoSync" : "startAbsoluteExpoAuth"}().then(async () => {
-			${sync ? `syncBridge.current = await createAbsoluteExpoSyncBridge((event, payload) => {
+			${sync ? `const bridge = await createAbsoluteExpoSyncBridge((event, payload) => {
+				if (!active) return;
 				const source = JSON.stringify({ event, format: BRIDGE_FORMAT, kind: 'event', path: activeWebPath.current, payload });
 				webView.current?.injectJavaScript(\`globalThis.__absoluteExpoReceive(\${JSON.stringify(source)}); true;\`);
-			});` : ""}
+			});
+			if (!active) { await bridge.close(); return; }
+			syncBridge.current = bridge;` : ""}
 			if (active) setRuntimeReady(true);
 		});
 		return () => {
@@ -3146,6 +3551,7 @@ export function AbsoluteWebHost({ path }: AbsoluteWebHostProps = {}) {
 		markAbsoluteEmbeddedWebPhase('assets-start');
 		void materializeAbsoluteWebBundle().then(uri => {
 			markAbsoluteEmbeddedWebPhase('assets-ready');
+			embeddedReadyReported.current = false;
 			setIndexUri(uri + '?absolutePath=' + encodeURIComponent(pathname));
 		}).catch(error => {
 			const phase = error instanceof Error && (error.message === 'assets-root-failed' || error.message === 'assets-directory-failed' || error.message === 'assets-destination-failed' || error.message === 'assets-module-failed' || error.message === 'assets-source-failed' || error.message === 'assets-download-failed' || error.message === 'assets-copy-failed' || error.message === 'assets-read-failed' || error.message === 'assets-write-failed' || error.message === 'assets-finalize-failed')
@@ -3199,15 +3605,23 @@ export function AbsoluteWebHost({ path }: AbsoluteWebHostProps = {}) {
 		try { return new URL(source).origin === origin; } catch { return false; }
 	};
 	const onMessage = async (event: WebViewMessageEvent) => {
+		// Bridge authority belongs only to the currently loaded embedded bundle
+		// (or the explicitly configured development origin), never remote pages.
+		const sourceUrl = event.nativeEvent.url;
+		if (!indexUri || typeof sourceUrl !== 'string' || (DEV_ORIGIN ? !hasOrigin(sourceUrl, DEV_ORIGIN) : !sourceUrl.startsWith(indexUri.slice(0, indexUri.lastIndexOf('/') + 1)))) return;
 		const source = event.nativeEvent.data;
 		if (new TextEncoder().encode(source).byteLength > MAX_MESSAGE_BYTES) return;
 		let message: Record<string, unknown>;
 		try { message = JSON.parse(source); } catch { return; }
 		if (message.format !== BRIDGE_FORMAT || typeof message.path !== 'string' || !message.path.startsWith('/') || message.path.startsWith('//')) return;
-		if (message.kind === 'event' && (message.event === 'navigation' || message.event === 'ready')) {
+		if (message.kind === 'event' && message.event === 'startup-failed') {
+			if (!embeddedReadyReported.current) setStartupError('content');
+			return;
+		}
+		if (message.kind === 'event' && (message.event === 'navigation' || message.event === 'shell-rendered')) {
 			const target = new URL(message.path, PRODUCTION_ORIGIN);
 			if (target.origin !== PRODUCTION_ORIGIN) return;
-			if (message.event === 'ready' && !DEV_ORIGIN && !embeddedReadyReported.current) {
+			if (message.event === 'shell-rendered' && !DEV_ORIGIN && !embeddedReadyReported.current) {
 				embeddedReadyReported.current = true;
 				markAbsoluteEmbeddedWebReady();
 			}
@@ -3261,12 +3675,17 @@ export function AbsoluteWebHost({ path }: AbsoluteWebHostProps = {}) {
 	</View>;
 	if (!webSource || !runtimeReady || !devicesReady) return <View style={styles.loading}><ActivityIndicator /></View>;
 	return <WebView
-		allowFileAccess
-		allowFileAccessFromFileURLs
+		nativeConfig={!DEV_ORIGIN ? absoluteEmbeddedNativeConfig : undefined}
+		allowFileAccess={Platform.OS !== 'android'}
+		allowFileAccessFromFileURLs={Platform.OS !== 'android'}
 		allowUniversalAccessFromFileURLs={false}
+		originWhitelist={DEV_ORIGIN ? [DEV_ORIGIN] : [Platform.OS === 'android' ? 'https://appassets.androidplatform.net' : 'file://*']}
 		allowingReadAccessToURL={webSource.uri.slice(0, webSource.uri.lastIndexOf('/') + 1)}
 		injectedJavaScriptBeforeContentLoaded={bridgeBootstrap(pathname, safeAreaInsets)}
 		onMessage={onMessage}
+		onError={() => setStartupError('content')}
+		onRenderProcessGone={() => setStartupError('content')}
+		onContentProcessDidTerminate={() => setStartupError('content')}
 		onNavigationStateChange={state => {
 			canGoBack.current = state.canGoBack;
 			if (!DEV_ORIGIN || !hasOrigin(state.url, DEV_ORIGIN)) return;
@@ -3274,8 +3693,8 @@ export function AbsoluteWebHost({ path }: AbsoluteWebHostProps = {}) {
 			activeWebPath.current = route.pathname + route.search + route.hash;
 		}}
 		onShouldStartLoadWithRequest={request => {
-			if (request.url.startsWith('file:') || hasOrigin(request.url, PRODUCTION_ORIGIN) || DEV_ORIGIN && hasOrigin(request.url, DEV_ORIGIN)) return true;
-			void Linking.openURL(request.url);
+			if (DEV_ORIGIN ? hasOrigin(request.url, DEV_ORIGIN) : request.url.startsWith(webSource.uri.slice(0, webSource.uri.lastIndexOf('/') + 1))) return true;
+			if (/^https?:/.test(request.url)) void Linking.openURL(request.url);
 			return false;
 		}}
 		ref={webView}
@@ -3478,8 +3897,8 @@ const styles = StyleSheet.create({
 	error: { color: '#b91c1c', fontSize: 16, textAlign: 'center' }
 });
 `;
-var nativeWrapperSource = (wrapper, module, runtime2, route) => `${EXPO_GENERATED_HEADER}import ApplicationNativeRoute from ${JSON.stringify(portableRelative2(dirname3(wrapper), module).replace(/\.(?:[cm]?[jt]sx?)$/u, ""))};
-import { createAbsoluteNativeRoute, createAbsoluteNativeRouteErrorBoundary } from ${JSON.stringify(portableRelative2(dirname3(wrapper), runtime2).replace(/\.(?:[cm]?[jt]sx?)$/u, ""))};
+var nativeWrapperSource = (wrapper, module, runtime3, route) => `${EXPO_GENERATED_HEADER}import ApplicationNativeRoute from ${JSON.stringify(portableRelative2(dirname4(wrapper), module).replace(/\.(?:[cm]?[jt]sx?)$/u, ""))};
+import { createAbsoluteNativeRoute, createAbsoluteNativeRouteErrorBoundary } from ${JSON.stringify(portableRelative2(dirname4(wrapper), runtime3).replace(/\.(?:[cm]?[jt]sx?)$/u, ""))};
 
 export const ErrorBoundary = createAbsoluteNativeRouteErrorBoundary(${JSON.stringify(route)});
 export default createAbsoluteNativeRoute(ApplicationNativeRoute, ${JSON.stringify(route)});
@@ -3521,9 +3940,9 @@ var expoTsConfig = (projectRoot, project, auth, sync) => ({
   extends: "expo/tsconfig.base"
 });
 var writeManagedFile = async (path, source, force) => {
-  await mkdir2(dirname3(path), { recursive: true });
+  await mkdir2(dirname4(path), { recursive: true });
   if (await exists2(path)) {
-    const current = await readFile2(path, "utf8");
+    const current = await readFile3(path, "utf8");
     if (current === source)
       return false;
     if (!force && !current.startsWith(EXPO_GENERATED_HEADER)) {
@@ -3539,7 +3958,7 @@ var pruneManagedFiles = async (paths) => {
   const removed = await Promise.all(paths.map(async (path) => {
     if (!await exists2(path))
       return false;
-    const source = await readFile2(path, "utf8");
+    const source = await readFile3(path, "utf8");
     if (!source.startsWith(EXPO_GENERATED_HEADER) && !path.endsWith("expo-module.config.json"))
       return false;
     await rm2(path, { force: true });
@@ -3548,12 +3967,12 @@ var pruneManagedFiles = async (paths) => {
   return removed.filter(Boolean).length;
 };
 var pruneStaleManagedExpoRoutes = async (project, expected) => {
-  const appDirectory = join6(project, "app");
+  const appDirectory = join8(project, "app");
   if (!await exists2(appDirectory))
     return 0;
   const files = await walkFiles(appDirectory);
   const stale = (await Promise.all(files.map(async (path) => ({
-    managed: path.endsWith(".tsx") && (await readFile2(path, "utf8")).startsWith(EXPO_GENERATED_HEADER),
+    managed: path.endsWith(".tsx") && (await readFile3(path, "utf8")).startsWith(EXPO_GENERATED_HEADER),
     path
   })))).filter(({ managed, path }) => managed && !expected.has(path));
   await Promise.all(stale.map(({ path }) => rm2(path, { force: true })));
@@ -3579,7 +3998,7 @@ export const ABSOLUTE_MOBILE_MANIFEST: AbsoluteMobileManifest | undefined = unde
 var writeAbsoluteExpoProject = async (config, options) => {
   if (config.engine !== "expo")
     throw new TypeError("Expo project generation requires mobile.engine: expo.");
-  const projectRoot = resolve4(options.projectRoot);
+  const projectRoot = resolve5(options.projectRoot);
   const project = config.nativeProjectDirectory;
   const auth = resolveAbsoluteMobileAuthManifest(projectRoot, config);
   const devices = resolveAbsoluteDeviceCapabilityPlan(projectRoot, "expo");
@@ -3596,7 +4015,7 @@ var writeAbsoluteExpoProject = async (config, options) => {
   if (missing) {
     throw new TypeError(`Expo native route ${missing.route} references missing module ${missing.module}.`);
   }
-  const marker = join6(project, EXPO_PROJECT_MARKER);
+  const marker = join8(project, EXPO_PROJECT_MARKER);
   if (await exists2(project) && !await exists2(marker)) {
     const entries = await readdir(project);
     if (entries.length > 0 && !options.force) {
@@ -3609,7 +4028,7 @@ var writeAbsoluteExpoProject = async (config, options) => {
   const authEnabled = Boolean(auth);
   const files = new Map([
     [
-      join6(project, ".gitignore"),
+      join8(project, ".gitignore"),
       `.expo/
 android/
 ios/
@@ -3617,80 +4036,82 @@ node_modules/
 `
     ],
     [
-      join6(project, "app.json"),
+      join8(project, "app.json"),
       jsonSource(expoAppConfig(config, authEnabled, syncEnabled, devices, runtimeFingerprint))
     ],
-    [join6(project, "app.config.js"), expoDynamicAppConfig],
+    [join8(project, "app.config.js"), expoDynamicAppConfig],
     [
-      join6(project, "package.json"),
+      join8(project, "package.json"),
       jsonSource(expoPackage(authEnabled, config.branding !== undefined, syncEnabled, devices, config.updates !== undefined))
     ],
-    [join6(project, "metro.config.js"), metroConfig(projectRoot)],
+    [join8(project, "metro.config.js"), metroConfig(projectRoot)],
     [
-      join6(project, "plugins", "withAbsoluteDevelopmentCa.js"),
+      join8(project, "plugins", "withAbsoluteDevelopmentCa.js"),
       expoDevelopmentCaPlugin
     ],
     [
-      join6(project, "plugins", "withAbsoluteActivityResultRecovery.js"),
+      join8(project, "plugins", "withAbsoluteActivityResultRecovery.js"),
       expoActivityResultRecoveryPlugin
     ],
     [
-      join6(project, "tsconfig.json"),
+      join8(project, "tsconfig.json"),
       jsonSource(expoTsConfig(projectRoot, project, authEnabled, syncEnabled))
     ],
     [
-      join6(project, "app", "_layout.tsx"),
+      join8(project, "app", "_layout.tsx"),
       layoutSource(authEnabled, syncEnabled, config.updates !== undefined, config.observability !== undefined)
     ],
     [
-      join6(project, "app", "__absolute", "native", "index.tsx"),
+      join8(project, "app", "__absolute", "native", "index.tsx"),
       nativeDiagnosticSource
     ],
     [
-      join6(project, "src", "generated", "AbsoluteDevices.ts"),
+      join8(project, "src", "generated", "AbsoluteDevices.ts"),
       devicesRuntimeSource(config, devices, authEnabled)
     ],
     [
-      join6(project, "src", "generated", "AbsoluteNativeRoute.tsx"),
+      join8(project, "src", "generated", "AbsoluteNativeRoute.tsx"),
       nativeRouteRuntimeSource(authEnabled)
     ],
     [
-      join6(project, "src", "generated", "AbsoluteWebHost.tsx"),
+      join8(project, "src", "generated", "AbsoluteWebHost.tsx"),
       webHostSource(config, auth, syncEnabled)
     ]
   ]);
   for (const [path, source] of absoluteExpoActivityResultRecoveryFiles(project))
     files.set(path, source);
+  for (const [path, source] of absoluteExpoEmbeddedAssetsFiles(project))
+    files.set(path, source);
   if (config.observability) {
     for (const [path, source] of absoluteExpoNativeObservabilityFiles(project))
       files.set(path, source);
   }
   if (config.updates) {
-    files.set(join6(project, "src", "generated", "AbsoluteUpdates.ts"), updatesRuntimeSource(config));
+    files.set(join8(project, "src", "generated", "AbsoluteUpdates.ts"), updatesRuntimeSource(config));
   }
   const expoCodeSigning = config.updates?.expoCodeSigning;
   if (expoCodeSigning)
-    files.set(join6(project, "certs", "absolute-mobile-update.pem"), expoCodeSigning.certificatePem);
+    files.set(join8(project, "certs", "absolute-mobile-update.pem"), expoCodeSigning.certificatePem);
   if (auth) {
-    files.set(join6(project, "src", "generated", "AbsoluteAuth.ts"), authRuntimeSource(auth, config.appId));
+    files.set(join8(project, "src", "generated", "AbsoluteAuth.ts"), authRuntimeSource(auth, config.appId));
   }
   if (syncSchema) {
-    files.set(join6(project, "src", "generated", "AbsoluteSync.ts"), syncRuntimeSource(config, syncSchema));
+    files.set(join8(project, "src", "generated", "AbsoluteSync.ts"), syncRuntimeSource(config, syncSchema));
   }
-  const webAssetsPath = join6(project, "src", "generated", "webAssets.ts");
+  const webAssetsPath = join8(project, "src", "generated", "webAssets.ts");
   if (!await exists2(webAssetsPath)) {
     files.set(webAssetsPath, emptyWebAssetsSource);
   }
   if (!config.expoNativeRoutes["/"]) {
-    files.set(join6(project, "app", "index.tsx"), webRouteSource);
+    files.set(join8(project, "app", "index.tsx"), webRouteSource);
   }
-  files.set(join6(project, "app", "[...absolute].tsx"), catchAllRouteSource);
-  const nativeRouteRuntime = join6(project, "src", "generated", "AbsoluteNativeRoute.tsx");
+  files.set(join8(project, "app", "[...absolute].tsx"), catchAllRouteSource);
+  const nativeRouteRuntime = join8(project, "src", "generated", "AbsoluteNativeRoute.tsx");
   for (const [route, module] of routeModules) {
-    const wrapper = route === "/" ? join6(project, "app", "index.tsx") : routeFile(project, route);
+    const wrapper = route === "/" ? join8(project, "app", "index.tsx") : routeFile(project, route);
     files.set(wrapper, nativeWrapperSource(wrapper, module, nativeRouteRuntime, route));
   }
-  const removedRoutes = await pruneStaleManagedExpoRoutes(project, new Set([...files.keys()].filter((path) => path.startsWith(`${join6(project, "app")}${sep}`))));
+  const removedRoutes = await pruneStaleManagedExpoRoutes(project, new Set([...files.keys()].filter((path) => path.startsWith(`${join8(project, "app")}${sep}`))));
   const removedObservability = config.observability ? 0 : await pruneManagedFiles(absoluteExpoNativeObservabilityPaths(project));
   const changes = await Promise.all([...files].map(([path, source]) => writeManagedFile(path, source, true)));
   await writeAbsoluteExpoBrandingInputs(config, projectRoot);
@@ -3700,7 +4121,7 @@ node_modules/
 var walkFiles = async (root, directory = root) => {
   const entries = await readdir(directory, { withFileTypes: true });
   const nested = await Promise.all(entries.map((entry) => {
-    const path = join6(directory, entry.name);
+    const path = join8(directory, entry.name);
     if (entry.isDirectory())
       return walkFiles(root, path);
     if (entry.isFile())
@@ -3733,13 +4154,16 @@ var installStagedDirectory = async (staging, destination) => {
     throw error;
   }
 };
-var assetModuleSource = (assets, archiveAsset, bundleId, manifest) => `${EXPO_GENERATED_HEADER}import { Asset } from 'expo-asset';
+var assetModuleSource = (assets, archiveAsset, bundleId, archiveMd5, manifest) => `${EXPO_GENERATED_HEADER}import { Asset } from 'expo-asset';
 import { Directory, File, Paths } from 'expo-file-system';
 import { copyAsync as copyLegacyAsync } from 'expo-file-system/legacy';
+import { registerAbsoluteEmbeddedBundle } from './AbsoluteEmbeddedAssets';
 
 ${nativeDataManifestTypeSource}
 declare const require: (path: string) => number;
 const BUNDLE_ID = ${JSON.stringify(bundleId)};
+const ARCHIVE_MD5 = ${JSON.stringify(archiveMd5)};
+const ARCHIVE_LENGTH = ${assets.reduce((sum, entry) => sum + entry.length, 0)};
 export const ABSOLUTE_MOBILE_MANIFEST: AbsoluteMobileManifest = ${JSON.stringify(manifest)};
 const ARCHIVE_MODULE = require(${JSON.stringify(archiveAsset)});
 const ASSETS = [
@@ -3756,10 +4180,12 @@ export const materializeAbsoluteWebBundle = async () => {
 	let archive: File;
 	try { archive = new File(root, '.absolutejs-bundle.absasset'); }
 	catch { throw new Error('assets-destination-failed'); }
+	if (archive.exists && (archive.size !== ARCHIVE_LENGTH || archive.md5 !== ARCHIVE_MD5)) archive.delete();
 	if (!archive.exists) {
 		let asset: Asset;
 		try { asset = Asset.fromModule(ARCHIVE_MODULE); }
 		catch { throw new Error('assets-module-failed'); }
+		if (asset.type !== 'absasset' || asset.hash !== ARCHIVE_MD5) throw new Error('assets-identity-failed');
 		try { if (!asset.localUri) asset = await asset.downloadAsync(); }
 		catch { throw new Error('assets-download-failed'); }
 		if (!asset.localUri) throw new Error('assets-download-failed');
@@ -3772,9 +4198,16 @@ export const materializeAbsoluteWebBundle = async () => {
 			catch { throw new Error('assets-copy-failed'); }
 		}
 	}
+	// Checksums detect accidental corruption/registry mismatches, not authenticity;
+	// authenticity comes from the signed application/update containing this table.
+	if (archive.size !== ARCHIVE_LENGTH || archive.md5 !== ARCHIVE_MD5) {
+		archive.delete();
+		throw new Error('assets-integrity-failed');
+	}
 	let contents: Uint8Array;
 	try { contents = await archive.bytes(); }
 	catch { throw new Error('assets-read-failed'); }
+	if (contents.byteLength !== ARCHIVE_LENGTH) throw new Error('assets-integrity-failed');
 	for (const entry of ASSETS) {
 		const parts = entry.path.split('/');
 		const name = parts.pop();
@@ -3788,33 +4221,34 @@ export const materializeAbsoluteWebBundle = async () => {
 		let destination: File;
 		try {
 			destination = new File(directory, name);
-			if (destination.exists && destination.size === entry.length) continue;
+			if (destination.exists && destination.size === entry.length && destination.md5 === entry.md5) continue;
 			if (destination.exists) destination.delete();
 		} catch { throw new Error('assets-destination-failed'); }
 		try { destination.write(contents.slice(entry.offset, entry.offset + entry.length)); }
 		catch { throw new Error('assets-write-failed'); }
+		if (destination.size !== entry.length || destination.md5 !== entry.md5) throw new Error('assets-integrity-failed');
 	}
 	try { archive.delete(); }
 	catch { throw new Error('assets-finalize-failed'); }
 
-	try { return new File(root, 'index.html').uri; }
+	try { return await registerAbsoluteEmbeddedBundle(root.uri, ASSETS.map(entry => entry.path), new File(root, 'index.html').uri); }
 	catch { throw new Error('assets-finalize-failed'); }
 };
 `;
 var syncAbsoluteExpoWebAssets = async (config) => {
   if (config.engine !== "expo")
     throw new TypeError("Expo asset sync requires mobile.engine: expo.");
-  const marker = join6(config.nativeProjectDirectory, EXPO_PROJECT_MARKER);
+  const marker = join8(config.nativeProjectDirectory, EXPO_PROJECT_MARKER);
   if (!await exists2(marker)) {
     throw new TypeError("Expo asset sync requires an AbsoluteJS-managed Expo project. Run mobile init first.");
   }
-  const manifestPath = join6(config.bundleDirectory, "absolute-mobile-manifest.json");
-  const manifest = JSON.parse(await readFile2(manifestPath, "utf8"));
+  const manifestPath = join8(config.bundleDirectory, "absolute-mobile-manifest.json");
+  const manifest = JSON.parse(await readFile3(manifestPath, "utf8"));
   const nativeDataManifest = expoNativeDataManifest(manifest);
   const { appBuild } = nativeDataManifest;
   const files = await walkFiles(config.bundleDirectory);
   const bundleHash = createHash3("sha256");
-  const filesWithContents = await Promise.all(files.map(async (file) => ({ contents: await readFile2(file), file })));
+  const filesWithContents = await Promise.all(files.map(async (file) => ({ contents: await readFile3(file), file })));
   filesWithContents.forEach(({ contents, file }) => {
     bundleHash.update(relative3(config.bundleDirectory, file).replaceAll("\\", "/"));
     bundleHash.update("\x00");
@@ -3822,16 +4256,18 @@ var syncAbsoluteExpoWebAssets = async (config) => {
     bundleHash.update("\x00");
   });
   const bundleId = `amexpo_${bundleHash.digest("hex")}`;
-  const destination = join6(config.nativeProjectDirectory, "assets", "absolute");
-  await mkdir2(dirname3(destination), { recursive: true });
-  const staging = await mkdtemp(join6(dirname3(destination), `.${basename(destination)}.stage-`));
+  const destination = join8(config.nativeProjectDirectory, "assets", "absolute");
+  await mkdir2(dirname4(destination), { recursive: true });
+  const staging = await mkdtemp(join8(dirname4(destination), `.${basename(destination)}.stage-`));
   let assets;
   let archiveAsset;
+  let archiveMd5;
   try {
     let offset = 0;
     assets = filesWithContents.map(({ contents, file }) => {
       const entry = {
         length: contents.byteLength,
+        md5: createHash3("md5").update(contents).digest("hex"),
         offset,
         path: relative3(config.bundleDirectory, file).replaceAll("\\", "/")
       };
@@ -3839,16 +4275,18 @@ var syncAbsoluteExpoWebAssets = async (config) => {
       return entry;
     });
     const name = `bundle${EXPO_ASSET_EXTENSION}`;
-    await writeFile2(join6(staging, name), Buffer.concat(filesWithContents.map(({ contents }) => contents)));
-    archiveAsset = portableRelative2(join6(config.nativeProjectDirectory, "src", "generated"), join6(destination, name));
+    const archiveContents = Buffer.concat(filesWithContents.map(({ contents }) => contents));
+    archiveMd5 = createHash3("md5").update(archiveContents).digest("hex");
+    await writeFile2(join8(staging, name), archiveContents);
+    archiveAsset = portableRelative2(join8(config.nativeProjectDirectory, "src", "generated"), join8(destination, name));
     await installStagedDirectory(staging, destination);
   } catch (error) {
     await rm2(staging, { force: true, recursive: true });
     throw error;
   }
-  const generated = join6(config.nativeProjectDirectory, "src", "generated", "webAssets.ts");
-  await writeManagedFile(generated, assetModuleSource(assets, archiveAsset, bundleId, nativeDataManifest), true);
+  const generated = join8(config.nativeProjectDirectory, "src", "generated", "webAssets.ts");
+  await writeManagedFile(generated, assetModuleSource(assets, archiveAsset, bundleId, archiveMd5, nativeDataManifest), true);
   return { appBuild, assets: assets.length, bundleId, path: destination };
 };
 
-export { discoverAbsoluteSyncSchema, absoluteDeviceNativeRequirements, assertAbsoluteDeviceCapabilityPackages, resolveAbsoluteDeviceCapabilityPlan, ABSOLUTE_MOBILE_UPDATE_FORMAT, absoluteMobileUpdateSigningPayload, canonicalizeAbsoluteMobileUpdate, parseAbsoluteMobileUpdateManifest, unsignedAbsoluteMobileUpdate, resolveAbsoluteMobileUpdateRuntime, ABSOLUTE_CAPACITOR_ASSETS_SPEC, generateAbsoluteCapacitorBranding, inspectAbsoluteMobileBranding, renderAbsoluteMobileBrandingPreview, writeAbsoluteExpoProject, syncAbsoluteExpoWebAssets };
+export { ABSOLUTE_NATIVE_EXACT_PACKAGES, CAPACITOR_PACKAGE_SPECS, CAPACITOR_SYNC_PACKAGE_SPECS, assertNativePackageVersions, packageNameFromSpec, packagesNeedingExactInstall, discoverAbsoluteSyncSchema, absoluteDeviceNativeRequirements, assertAbsoluteDeviceCapabilityPackages, resolveAbsoluteDeviceCapabilityPlan, ABSOLUTE_MOBILE_UPDATE_FORMAT, absoluteMobileUpdateSigningPayload, canonicalizeAbsoluteMobileUpdate, parseAbsoluteMobileUpdateManifest, unsignedAbsoluteMobileUpdate, resolveAbsoluteMobileUpdateRuntime, ABSOLUTE_CAPACITOR_ASSETS_SPEC, generateAbsoluteCapacitorBranding, inspectAbsoluteMobileBranding, renderAbsoluteMobileBrandingPreview, writeAbsoluteExpoProject, syncAbsoluteExpoWebAssets };