@absolutejs/absolute 0.20.0-beta.24 → 0.20.0-beta.26

package/dist/mobile/index.js

@@ -589,6 +589,263 @@ var init_syncSchema = __esm(() => {
   init_client();
 });
 
+// src/mobile/deviceCapabilities.ts
+import { readFileSync as readFileSync4 } from "fs";
+import { extname as extname3, join as join13, relative as relative9, resolve as resolve11 } from "path";
+import ts from "typescript";
+var DEVICES_PACKAGE = "@absolutejs/devices", CAPACITOR_ADAPTER = "@absolutejs/devices-capacitor", SOURCE_GLOB, IGNORED_DIRECTORIES, IDENTIFIER_PATTERN, CAPACITOR_MODULE_PATTERN, CAPACITOR_PACKAGE_PATTERN, ANDROID_PERMISSION_PATTERN, IOS_USAGE_DESCRIPTIONS, IOS_PRIVACY_ACCESSED_API_REASONS, IOS_PRIVACY_ACCESSED_APIS, object2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value), readJson = (path) => {
+  const value = JSON.parse(readFileSync4(path, "utf8"));
+  if (!object2(value))
+    throw new TypeError(`${path} must contain an object.`);
+  return value;
+}, text = (value, field) => {
+  if (typeof value !== "string" || value.length === 0)
+    throw new TypeError(`${field} must be a non-empty string.`);
+  return value;
+}, androidPermissions = (value, field) => {
+  if (value === undefined)
+    return;
+  if (!object2(value))
+    throw new TypeError(`${field} must be an object.`);
+  const { permissions } = value;
+  if (!Array.isArray(permissions) || !permissions.every((permission) => typeof permission === "string" && ANDROID_PERMISSION_PATTERN.test(permission)))
+    throw new TypeError(`${field}.permissions must contain Android permission names.`);
+  return [...permissions];
+}, iosPrivacyAccessedApis = (value, field) => {
+  if (value === undefined)
+    return;
+  if (!object2(value))
+    throw new TypeError(`${field} must be an object.`);
+  const privacy = {};
+  for (const api of IOS_PRIVACY_ACCESSED_APIS) {
+    const reasons = value[api];
+    if (reasons === undefined)
+      continue;
+    const supported = IOS_PRIVACY_ACCESSED_API_REASONS[api];
+    if (!Array.isArray(reasons) || reasons.length === 0 || !reasons.every((reason) => typeof reason === "string" && supported.has(reason)))
+      throw new TypeError(`${field} contains an unsupported API or reason.`);
+    privacy[api] = [...reasons];
+  }
+  if (Object.keys(value).some((api) => !IOS_PRIVACY_ACCESSED_APIS.some((known) => known === api)))
+    throw new TypeError(`${field} contains an unsupported API or reason.`);
+  return privacy;
+}, iosNativeRequirements = (value, field) => {
+  if (value === undefined)
+    return;
+  if (!object2(value))
+    throw new TypeError(`${field} must be an object.`);
+  const { privacyAccessedApis, pushNotifications, usageDescriptions } = value;
+  if (pushNotifications !== undefined && pushNotifications !== true)
+    throw new TypeError(`${field}.pushNotifications must be true.`);
+  if (usageDescriptions !== undefined && (!Array.isArray(usageDescriptions) || !usageDescriptions.every((purpose) => typeof purpose === "string" && IOS_USAGE_DESCRIPTIONS.has(purpose))))
+    throw new TypeError(`${field}.usageDescriptions contains an unsupported purpose.`);
+  const privacy = iosPrivacyAccessedApis(privacyAccessedApis, `${field}.privacyAccessedApis`);
+  return {
+    ...privacy === undefined ? {} : { privacyAccessedApis: privacy },
+    ...pushNotifications === true ? { pushNotifications: true } : {},
+    ...usageDescriptions === undefined ? {} : { usageDescriptions: [...usageDescriptions] }
+  };
+}, parseProvider = (name, value) => {
+  if (!IDENTIFIER_PATTERN.test(name))
+    throw new TypeError("Device capability names must be identifiers.");
+  if (!object2(value))
+    throw new TypeError(`Device capability ${name} must be an object.`);
+  const factory = text(value.factory, `${name}.factory`);
+  const module = text(value.module, `${name}.module`);
+  if (!IDENTIFIER_PATTERN.test(factory))
+    throw new TypeError(`${name}.factory must be a JavaScript identifier.`);
+  if (!CAPACITOR_MODULE_PATTERN.test(module))
+    throw new TypeError(`${name}.module must be an official devices-capacitor subpath.`);
+  if (!Array.isArray(value.packages) || !value.packages.every((spec) => typeof spec === "string" && CAPACITOR_PACKAGE_PATTERN.test(spec)))
+    throw new TypeError(`${name}.packages must contain exact official Capacitor package versions.`);
+  let native;
+  const { native: nativeMetadata } = value;
+  if (nativeMetadata !== undefined) {
+    if (!object2(nativeMetadata))
+      throw new TypeError(`${name}.native must be an object.`);
+    const { android, ios } = nativeMetadata;
+    const permissions = androidPermissions(android, `${name}.native.android`);
+    const iosRequirements = iosNativeRequirements(ios, `${name}.native.ios`);
+    native = {
+      ...permissions === undefined ? {} : { android: { permissions } },
+      ...iosRequirements === undefined ? {} : { ios: iosRequirements }
+    };
+  }
+  return {
+    factory,
+    module,
+    ...native === undefined ? {} : { native },
+    packages: [...value.packages]
+  };
+}, absoluteDeviceNativeRequirements = (plan) => {
+  const privacy = plan.capabilities.reduce((requirements, name) => {
+    for (const api of IOS_PRIVACY_ACCESSED_APIS) {
+      const reasons = plan.providers[name]?.native?.ios?.privacyAccessedApis?.[api] ?? [];
+      if (reasons.length === 0)
+        continue;
+      const current = requirements[api] ?? new Set;
+      for (const reason of reasons)
+        current.add(reason);
+      requirements[api] = current;
+    }
+    return requirements;
+  }, {});
+  return {
+    androidPermissions: [
+      ...new Set(plan.capabilities.flatMap((name) => plan.providers[name]?.native?.android?.permissions ?? []))
+    ].sort(),
+    iosPrivacyAccessedApis: IOS_PRIVACY_ACCESSED_APIS.flatMap((api) => {
+      const reasons = privacy[api];
+      return reasons ? [{ api, reasons: [...reasons].sort() }] : [];
+    }),
+    iosPushNotifications: plan.capabilities.some((name) => plan.providers[name]?.native?.ios?.pushNotifications === true),
+    iosUsageDescriptions: [
+      ...new Set(plan.capabilities.flatMap((name) => plan.providers[name]?.native?.ios?.usageDescriptions ?? []))
+    ].sort()
+  };
+}, loadAbsoluteDeviceCapabilityProviders = (projectRoot) => {
+  const path = join13(resolve11(projectRoot), "node_modules", CAPACITOR_ADAPTER, "package.json");
+  const manifest = readJson(path);
+  const { absolutejs } = manifest;
+  const devices = object2(absolutejs) ? absolutejs.devices : undefined;
+  if (!object2(devices) || devices.format !== 1 || devices.provider !== "capacitor" || !object2(devices.capabilities))
+    throw new TypeError(`${CAPACITOR_ADAPTER} does not publish supported capability metadata.`);
+  const entries = Object.entries(devices.capabilities).map(([name, provider]) => ({
+    name,
+    provider: parseProvider(name, provider)
+  }));
+  return Object.fromEntries(entries.sort((left, right) => left.name.localeCompare(right.name)).map(({ name, provider }) => [name, provider]));
+}, isIgnored = (path) => path.split("/").some((segment) => IGNORED_DIRECTORIES.has(segment)), importedCapabilities = (source, file) => {
+  const names = new Set;
+  const namespaces = new Set;
+  const visit = (node) => {
+    if (ts.isImportDeclaration(node) && ts.isStringLiteral(node.moduleSpecifier) && node.moduleSpecifier.text === DEVICES_PACKAGE && !node.importClause?.isTypeOnly) {
+      const bindings = node.importClause?.namedBindings;
+      if (bindings && ts.isNamedImports(bindings)) {
+        for (const element of bindings.elements)
+          if (!element.isTypeOnly)
+            names.add((element.propertyName ?? element.name).text);
+      }
+      if (bindings && ts.isNamespaceImport(bindings))
+        namespaces.add(bindings.name.text);
+    }
+    if (ts.isExportDeclaration(node) && !node.isTypeOnly && node.moduleSpecifier !== undefined && ts.isStringLiteral(node.moduleSpecifier) && node.moduleSpecifier.text === DEVICES_PACKAGE && node.exportClause && ts.isNamedExports(node.exportClause)) {
+      for (const element of node.exportClause.elements)
+        if (!element.isTypeOnly)
+          names.add((element.propertyName ?? element.name).text);
+    }
+    if (ts.isPropertyAccessExpression(node) && ts.isIdentifier(node.expression) && namespaces.has(node.expression.text))
+      names.add(node.name.text);
+    ts.forEachChild(node, visit);
+  };
+  const extension = extname3(file).toLowerCase();
+  const sources = extension === ".svelte" || extension === ".vue" ? [...source.matchAll(/<script\b[^>]*>([\s\S]*?)<\/script\s*>/giu)].map((match) => match[1]).filter((value) => value !== undefined) : [source];
+  for (const [index, script] of sources.entries())
+    visit(ts.createSourceFile(`${file}#script-${index}`, script, ts.ScriptTarget.Latest, true, ts.ScriptKind.TSX));
+  return names;
+}, assertAbsoluteDeviceCapabilityPackages = (projectRoot, plan) => {
+  const missing = missingAbsoluteDeviceCapabilityPackages(plan, directAbsoluteProjectPackages(projectRoot));
+  const mismatched = plan.requiredPackages.filter((spec) => {
+    const separator = spec.lastIndexOf("@");
+    const packageName = spec.slice(0, separator);
+    if (missing.includes(spec))
+      return false;
+    try {
+      return readJson(join13(resolve11(projectRoot), "node_modules", packageName, "package.json")).version !== spec.slice(separator + 1);
+    } catch {
+      return true;
+    }
+  });
+  const unmet = [...missing, ...mismatched];
+  if (unmet.length > 0)
+    throw new TypeError(`Device capabilities ${plan.capabilities.join(", ")} require ${unmet.join(", ")}. Run absolute mobile sync and approve the detected capability plugins.`);
+}, directAbsoluteProjectPackages = (projectRoot) => {
+  const manifest = readJson(join13(resolve11(projectRoot), "package.json"));
+  const packages = new Set;
+  for (const field of ["dependencies", "devDependencies"]) {
+    const dependencies = manifest[field];
+    if (object2(dependencies))
+      for (const name of Object.keys(dependencies))
+        packages.add(name);
+  }
+  return packages;
+}, discoverAbsoluteDeviceCapabilities = (projectRoot, providers = loadAbsoluteDeviceCapabilityProviders(projectRoot)) => {
+  const root = resolve11(projectRoot);
+  const known = new Set(Object.keys(providers));
+  const capabilities = new Set;
+  for (const path of SOURCE_GLOB.scanSync({ cwd: root })) {
+    const portable = relative9(root, resolve11(root, path)).replaceAll("\\", "/");
+    if (isIgnored(portable))
+      continue;
+    const source = readFileSync4(resolve11(root, portable), "utf8");
+    for (const name of importedCapabilities(source, portable))
+      if (known.has(name))
+        capabilities.add(name);
+  }
+  return [...capabilities].sort();
+}, missingAbsoluteDeviceCapabilityPackages = (plan, directPackages) => plan.requiredPackages.filter((spec) => {
+  const packageName = spec.slice(0, spec.lastIndexOf("@"));
+  return !directPackages.has(packageName);
+}), projectImportsAbsoluteDeviceCapability = (projectRoot, capability) => {
+  const root = resolve11(projectRoot);
+  for (const path of SOURCE_GLOB.scanSync({ cwd: root })) {
+    const portable = relative9(root, resolve11(root, path)).replaceAll("\\", "/");
+    if (isIgnored(portable))
+      continue;
+    const source = readFileSync4(resolve11(root, portable), "utf8");
+    if (importedCapabilities(source, portable).has(capability))
+      return true;
+  }
+  return false;
+}, resolveAbsoluteDeviceCapabilityPlan = (projectRoot) => {
+  const allProviders = loadAbsoluteDeviceCapabilityProviders(projectRoot);
+  const capabilities = discoverAbsoluteDeviceCapabilities(projectRoot, allProviders);
+  const providers = {};
+  for (const name of capabilities) {
+    const provider = allProviders[name];
+    if (provider)
+      providers[name] = provider;
+  }
+  return {
+    capabilities,
+    providers,
+    requiredPackages: [
+      ...new Set(capabilities.flatMap((name) => providers[name]?.packages ?? []))
+    ].sort()
+  };
+};
+var init_deviceCapabilities = __esm(() => {
+  SOURCE_GLOB = new Bun.Glob("**/*.{js,jsx,ts,tsx,svelte,vue}");
+  IGNORED_DIRECTORIES = new Set([
+    ".absolutejs",
+    ".git",
+    ".test-builds",
+    ".test-shards",
+    "build",
+    "dist",
+    "node_modules",
+    "test",
+    "tests"
+  ]);
+  IDENTIFIER_PATTERN = /^[A-Za-z_$][\w$]*$/u;
+  CAPACITOR_MODULE_PATTERN = /^@absolutejs\/devices-capacitor\/[a-z][a-z0-9-]*$/u;
+  CAPACITOR_PACKAGE_PATTERN = /^@capacitor\/[a-z][a-z0-9-]*@\d+\.\d+\.\d+$/u;
+  ANDROID_PERMISSION_PATTERN = /^android\.permission\.[A-Z][A-Z0-9_]*$/u;
+  IOS_USAGE_DESCRIPTIONS = new Set([
+    "camera",
+    "location-always",
+    "location-when-in-use",
+    "photo-library",
+    "photo-library-add"
+  ]);
+  IOS_PRIVACY_ACCESSED_API_REASONS = {
+    NSPrivacyAccessedAPICategoryFileTimestamp: new Set(["C617.1"])
+  };
+  IOS_PRIVACY_ACCESSED_APIS = [
+    "NSPrivacyAccessedAPICategoryFileTimestamp"
+  ];
+});
+
 // src/mobile/artifactStore.ts
 import { createHash as createHash2 } from "crypto";
 import {
@@ -3680,7 +3937,8 @@ var normalizeAbsoluteMobileConfig = (config, projectRoot) => {
     iosVersion: normalizeIosVersion(config.ios?.version),
     nativeProjectDirectory: resolveProjectPath(projectRoot, config.nativeProject?.directory ?? "mobile", "mobile.nativeProject.directory"),
     platforms: normalizePlatforms(config.platforms),
-    productionOrigin
+    productionOrigin,
+    pushAndroidGoogleServicesFile: resolveProjectPath(projectRoot, config.pushNotifications?.android?.googleServicesFile ?? "google-services.json", "mobile.pushNotifications.android.googleServicesFile")
   };
 };
 
@@ -4575,6 +4833,12 @@ var shellSyncModule = () => {
     return candidate;
   throw new TypeError("AbsoluteJS mobile Sync shell module is missing.");
 };
+var shellPushModule = () => {
+  const candidate = ["js", "ts"].map((extension) => join9(import.meta.dir, `shellPush.${extension}`)).find(existsSync2);
+  if (candidate)
+    return candidate;
+  throw new TypeError("AbsoluteJS mobile push shell module is missing.");
+};
 var escapeHtml = (value) => value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;");
 var indexHtml = (appName) => `<!doctype html>
 <html>
@@ -4627,6 +4891,10 @@ var buildShellBootstrap = async (staging, auth, sync, storagePrefix, deviceCapab
 ` : "";
   const options = auth ? `{ createAuth: createAbsoluteMobileShellAuth${sync ? ", installSync: installAbsoluteMobileShellSync" : ""} }` : "";
   const syncImport = sync ? `import { installAbsoluteMobileShellSync } from ${JSON.stringify(shellSyncModule())};
+` : "";
+  const pushIndex = deviceCapabilities.capabilities.indexOf("pushNotifications");
+  const push = pushIndex !== -1;
+  const pushImport = push ? `import { createAbsoluteMobileShellPush } from ${JSON.stringify(shellPushModule())};
 ` : "";
   const capabilityImports = (await Promise.all(deviceCapabilities.capabilities.map(async (name, index) => {
     const provider = deviceCapabilities.providers[name];
@@ -4635,14 +4903,17 @@ var buildShellBootstrap = async (staging, auth, sync, storagePrefix, deviceCapab
     return `import { ${provider.factory} as absoluteDeviceCapability${index} } from ${JSON.stringify(await resolveProjectImport(projectRoot, provider.module))};`;
   }))).join(`
 `);
-  const capabilityOptions = deviceCapabilities.capabilities.map((name, index) => `${JSON.stringify(name)}: absoluteDeviceCapability${index}()`).join(", ");
+  const pushSetup = push ? `const absoluteMobilePush = createAbsoluteMobileShellPush();
+const absoluteMobilePushCapability = absoluteDeviceCapability${pushIndex}(absoluteMobilePush.capabilityOptions);
+` : "";
+  const capabilityOptions = deviceCapabilities.capabilities.map((name, index) => `${JSON.stringify(name)}: ${name === "pushNotifications" ? "absoluteMobilePushCapability" : `absoluteDeviceCapability${index}()`}`).join(", ");
   const entryPath = join9(staging, ".absolute-mobile-entry.ts");
   const baseAdapterModule = await resolveProjectImport(projectRoot, "@absolutejs/devices-capacitor");
   await writeFile10(entryPath, `import { startAbsoluteMobileShell } from ${JSON.stringify(modulePath)};
 import { installCapacitorDeviceAdapterIfNative } from ${JSON.stringify(baseAdapterModule)};
-${authImport}${syncImport}${capabilityImports}
-installCapacitorDeviceAdapterIfNative({ storagePrefix: ${JSON.stringify(storagePrefix)}${capabilityOptions ? `, ${capabilityOptions}` : ""} });
-void startAbsoluteMobileShell(${options});
+${authImport}${syncImport}${pushImport}${capabilityImports}
+${pushSetup}installCapacitorDeviceAdapterIfNative({ storagePrefix: ${JSON.stringify(storagePrefix)}${capabilityOptions ? `, ${capabilityOptions}` : ""} });
+void startAbsoluteMobileShell(${push ? `{ createAuth: (config, options) => createAbsoluteMobileShellAuth(config, options), beforeSignOut: absoluteMobilePush.beforeSignOut, connectPush: (auth) => absoluteMobilePush.connect(auth, absoluteMobilePushCapability)${sync ? ", installSync: installAbsoluteMobileShellSync" : ""} }` : options});
 `);
   const build = await Bun.build({
     entrypoints: [entryPath],
@@ -5047,265 +5318,7 @@ var serializeAbsoluteMobileAuthEnvironment = (config, auth) => auth === undefine
 
 // src/mobile/buildPipeline.ts
 init_syncSchema();
-
-// src/mobile/deviceCapabilities.ts
-import { readFileSync as readFileSync4 } from "fs";
-import { extname as extname3, join as join13, relative as relative9, resolve as resolve11 } from "path";
-import ts from "typescript";
-var DEVICES_PACKAGE = "@absolutejs/devices";
-var CAPACITOR_ADAPTER = "@absolutejs/devices-capacitor";
-var SOURCE_GLOB = new Bun.Glob("**/*.{js,jsx,ts,tsx,svelte,vue}");
-var IGNORED_DIRECTORIES = new Set([
-  ".absolutejs",
-  ".git",
-  ".test-builds",
-  ".test-shards",
-  "build",
-  "dist",
-  "node_modules",
-  "test",
-  "tests"
-]);
-var IDENTIFIER_PATTERN = /^[A-Za-z_$][\w$]*$/u;
-var CAPACITOR_MODULE_PATTERN = /^@absolutejs\/devices-capacitor\/[a-z][a-z0-9-]*$/u;
-var CAPACITOR_PACKAGE_PATTERN = /^@capacitor\/[a-z][a-z0-9-]*@\d+\.\d+\.\d+$/u;
-var ANDROID_PERMISSION_PATTERN = /^android\.permission\.[A-Z][A-Z0-9_]*$/u;
-var IOS_USAGE_DESCRIPTIONS = new Set([
-  "camera",
-  "location-always",
-  "location-when-in-use",
-  "photo-library",
-  "photo-library-add"
-]);
-var IOS_PRIVACY_ACCESSED_API_REASONS = {
-  NSPrivacyAccessedAPICategoryFileTimestamp: new Set(["C617.1"])
-};
-var IOS_PRIVACY_ACCESSED_APIS = [
-  "NSPrivacyAccessedAPICategoryFileTimestamp"
-];
-var object2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
-var readJson = (path) => {
-  const value = JSON.parse(readFileSync4(path, "utf8"));
-  if (!object2(value))
-    throw new TypeError(`${path} must contain an object.`);
-  return value;
-};
-var text = (value, field) => {
-  if (typeof value !== "string" || value.length === 0)
-    throw new TypeError(`${field} must be a non-empty string.`);
-  return value;
-};
-var androidPermissions = (value, field) => {
-  if (value === undefined)
-    return;
-  if (!object2(value))
-    throw new TypeError(`${field} must be an object.`);
-  const { permissions } = value;
-  if (!Array.isArray(permissions) || !permissions.every((permission) => typeof permission === "string" && ANDROID_PERMISSION_PATTERN.test(permission)))
-    throw new TypeError(`${field}.permissions must contain Android permission names.`);
-  return [...permissions];
-};
-var iosPrivacyAccessedApis = (value, field) => {
-  if (value === undefined)
-    return;
-  if (!object2(value))
-    throw new TypeError(`${field} must be an object.`);
-  const privacy = {};
-  for (const api of IOS_PRIVACY_ACCESSED_APIS) {
-    const reasons = value[api];
-    if (reasons === undefined)
-      continue;
-    const supported = IOS_PRIVACY_ACCESSED_API_REASONS[api];
-    if (!Array.isArray(reasons) || reasons.length === 0 || !reasons.every((reason) => typeof reason === "string" && supported.has(reason)))
-      throw new TypeError(`${field} contains an unsupported API or reason.`);
-    privacy[api] = [...reasons];
-  }
-  if (Object.keys(value).some((api) => !IOS_PRIVACY_ACCESSED_APIS.some((known) => known === api)))
-    throw new TypeError(`${field} contains an unsupported API or reason.`);
-  return privacy;
-};
-var iosNativeRequirements = (value, field) => {
-  if (value === undefined)
-    return;
-  if (!object2(value))
-    throw new TypeError(`${field} must be an object.`);
-  const { privacyAccessedApis, usageDescriptions } = value;
-  if (usageDescriptions !== undefined && (!Array.isArray(usageDescriptions) || !usageDescriptions.every((purpose) => typeof purpose === "string" && IOS_USAGE_DESCRIPTIONS.has(purpose))))
-    throw new TypeError(`${field}.usageDescriptions contains an unsupported purpose.`);
-  const privacy = iosPrivacyAccessedApis(privacyAccessedApis, `${field}.privacyAccessedApis`);
-  return {
-    ...privacy === undefined ? {} : { privacyAccessedApis: privacy },
-    ...usageDescriptions === undefined ? {} : { usageDescriptions: [...usageDescriptions] }
-  };
-};
-var parseProvider = (name, value) => {
-  if (!IDENTIFIER_PATTERN.test(name))
-    throw new TypeError("Device capability names must be identifiers.");
-  if (!object2(value))
-    throw new TypeError(`Device capability ${name} must be an object.`);
-  const factory = text(value.factory, `${name}.factory`);
-  const module = text(value.module, `${name}.module`);
-  if (!IDENTIFIER_PATTERN.test(factory))
-    throw new TypeError(`${name}.factory must be a JavaScript identifier.`);
-  if (!CAPACITOR_MODULE_PATTERN.test(module))
-    throw new TypeError(`${name}.module must be an official devices-capacitor subpath.`);
-  if (!Array.isArray(value.packages) || !value.packages.every((spec) => typeof spec === "string" && CAPACITOR_PACKAGE_PATTERN.test(spec)))
-    throw new TypeError(`${name}.packages must contain exact official Capacitor package versions.`);
-  let native;
-  const { native: nativeMetadata } = value;
-  if (nativeMetadata !== undefined) {
-    if (!object2(nativeMetadata))
-      throw new TypeError(`${name}.native must be an object.`);
-    const { android, ios } = nativeMetadata;
-    const permissions = androidPermissions(android, `${name}.native.android`);
-    const iosRequirements = iosNativeRequirements(ios, `${name}.native.ios`);
-    native = {
-      ...permissions === undefined ? {} : { android: { permissions } },
-      ...iosRequirements === undefined ? {} : { ios: iosRequirements }
-    };
-  }
-  return {
-    factory,
-    module,
-    ...native === undefined ? {} : { native },
-    packages: [...value.packages]
-  };
-};
-var absoluteDeviceNativeRequirements = (plan) => {
-  const privacy = plan.capabilities.reduce((requirements, name) => {
-    for (const api of IOS_PRIVACY_ACCESSED_APIS) {
-      const reasons = plan.providers[name]?.native?.ios?.privacyAccessedApis?.[api] ?? [];
-      if (reasons.length === 0)
-        continue;
-      const current = requirements[api] ?? new Set;
-      for (const reason of reasons)
-        current.add(reason);
-      requirements[api] = current;
-    }
-    return requirements;
-  }, {});
-  return {
-    androidPermissions: [
-      ...new Set(plan.capabilities.flatMap((name) => plan.providers[name]?.native?.android?.permissions ?? []))
-    ].sort(),
-    iosPrivacyAccessedApis: IOS_PRIVACY_ACCESSED_APIS.flatMap((api) => {
-      const reasons = privacy[api];
-      return reasons ? [{ api, reasons: [...reasons].sort() }] : [];
-    }),
-    iosUsageDescriptions: [
-      ...new Set(plan.capabilities.flatMap((name) => plan.providers[name]?.native?.ios?.usageDescriptions ?? []))
-    ].sort()
-  };
-};
-var loadAbsoluteDeviceCapabilityProviders = (projectRoot) => {
-  const path = join13(resolve11(projectRoot), "node_modules", CAPACITOR_ADAPTER, "package.json");
-  const manifest = readJson(path);
-  const { absolutejs } = manifest;
-  const devices = object2(absolutejs) ? absolutejs.devices : undefined;
-  if (!object2(devices) || devices.format !== 1 || devices.provider !== "capacitor" || !object2(devices.capabilities))
-    throw new TypeError(`${CAPACITOR_ADAPTER} does not publish supported capability metadata.`);
-  const entries = Object.entries(devices.capabilities).map(([name, provider]) => ({
-    name,
-    provider: parseProvider(name, provider)
-  }));
-  return Object.fromEntries(entries.sort((left, right) => left.name.localeCompare(right.name)).map(({ name, provider }) => [name, provider]));
-};
-var isIgnored = (path) => path.split("/").some((segment) => IGNORED_DIRECTORIES.has(segment));
-var importedCapabilities = (source, file) => {
-  const names = new Set;
-  const namespaces = new Set;
-  const visit = (node) => {
-    if (ts.isImportDeclaration(node) && ts.isStringLiteral(node.moduleSpecifier) && node.moduleSpecifier.text === DEVICES_PACKAGE && !node.importClause?.isTypeOnly) {
-      const bindings = node.importClause?.namedBindings;
-      if (bindings && ts.isNamedImports(bindings)) {
-        for (const element of bindings.elements)
-          if (!element.isTypeOnly)
-            names.add((element.propertyName ?? element.name).text);
-      }
-      if (bindings && ts.isNamespaceImport(bindings))
-        namespaces.add(bindings.name.text);
-    }
-    if (ts.isExportDeclaration(node) && !node.isTypeOnly && node.moduleSpecifier !== undefined && ts.isStringLiteral(node.moduleSpecifier) && node.moduleSpecifier.text === DEVICES_PACKAGE && node.exportClause && ts.isNamedExports(node.exportClause)) {
-      for (const element of node.exportClause.elements)
-        if (!element.isTypeOnly)
-          names.add((element.propertyName ?? element.name).text);
-    }
-    if (ts.isPropertyAccessExpression(node) && ts.isIdentifier(node.expression) && namespaces.has(node.expression.text))
-      names.add(node.name.text);
-    ts.forEachChild(node, visit);
-  };
-  const extension = extname3(file).toLowerCase();
-  const sources = extension === ".svelte" || extension === ".vue" ? [...source.matchAll(/<script\b[^>]*>([\s\S]*?)<\/script\s*>/giu)].map((match) => match[1]).filter((value) => value !== undefined) : [source];
-  for (const [index, script] of sources.entries())
-    visit(ts.createSourceFile(`${file}#script-${index}`, script, ts.ScriptTarget.Latest, true, ts.ScriptKind.TSX));
-  return names;
-};
-var assertAbsoluteDeviceCapabilityPackages = (projectRoot, plan) => {
-  const missing = missingAbsoluteDeviceCapabilityPackages(plan, directAbsoluteProjectPackages(projectRoot));
-  const mismatched = plan.requiredPackages.filter((spec) => {
-    const separator = spec.lastIndexOf("@");
-    const packageName = spec.slice(0, separator);
-    if (missing.includes(spec))
-      return false;
-    try {
-      return readJson(join13(resolve11(projectRoot), "node_modules", packageName, "package.json")).version !== spec.slice(separator + 1);
-    } catch {
-      return true;
-    }
-  });
-  const unmet = [...missing, ...mismatched];
-  if (unmet.length > 0)
-    throw new TypeError(`Device capabilities ${plan.capabilities.join(", ")} require ${unmet.join(", ")}. Run absolute mobile sync and approve the detected capability plugins.`);
-};
-var directAbsoluteProjectPackages = (projectRoot) => {
-  const manifest = readJson(join13(resolve11(projectRoot), "package.json"));
-  const packages = new Set;
-  for (const field of ["dependencies", "devDependencies"]) {
-    const dependencies = manifest[field];
-    if (object2(dependencies))
-      for (const name of Object.keys(dependencies))
-        packages.add(name);
-  }
-  return packages;
-};
-var discoverAbsoluteDeviceCapabilities = (projectRoot, providers = loadAbsoluteDeviceCapabilityProviders(projectRoot)) => {
-  const root = resolve11(projectRoot);
-  const known = new Set(Object.keys(providers));
-  const capabilities = new Set;
-  for (const path of SOURCE_GLOB.scanSync({ cwd: root })) {
-    const portable = relative9(root, resolve11(root, path)).replaceAll("\\", "/");
-    if (isIgnored(portable))
-      continue;
-    const source = readFileSync4(resolve11(root, portable), "utf8");
-    for (const name of importedCapabilities(source, portable))
-      if (known.has(name))
-        capabilities.add(name);
-  }
-  return [...capabilities].sort();
-};
-var missingAbsoluteDeviceCapabilityPackages = (plan, directPackages) => plan.requiredPackages.filter((spec) => {
-  const packageName = spec.slice(0, spec.lastIndexOf("@"));
-  return !directPackages.has(packageName);
-});
-var resolveAbsoluteDeviceCapabilityPlan = (projectRoot) => {
-  const allProviders = loadAbsoluteDeviceCapabilityProviders(projectRoot);
-  const capabilities = discoverAbsoluteDeviceCapabilities(projectRoot, allProviders);
-  const providers = {};
-  for (const name of capabilities) {
-    const provider = allProviders[name];
-    if (provider)
-      providers[name] = provider;
-  }
-  return {
-    capabilities,
-    providers,
-    requiredPackages: [
-      ...new Set(capabilities.flatMap((name) => providers[name]?.packages ?? []))
-    ].sort()
-  };
-};
-
-// src/mobile/buildPipeline.ts
+init_deviceCapabilities();
 var isElysiaApp = (value) => typeof value === "object" && value !== null && typeof Reflect.get(value, "compile") === "function" && Array.isArray(Reflect.get(value, "routes"));
 var isStringRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value) && Object.values(value).every((entry) => typeof entry === "string");
 var serverExportName = (loaded, app) => {
@@ -5380,6 +5393,11 @@ var finalizeAbsoluteMobileCompatibilityBuild = async (options) => {
   const sync = auth !== undefined && projectUsesAbsoluteSync(options.projectRoot);
   const syncSchema = sync ? discoverAbsoluteSyncSchema(options.projectRoot) : undefined;
   const deviceCapabilities = resolveAbsoluteDeviceCapabilityPlan(options.projectRoot);
+  const usesPush = deviceCapabilities.capabilities.includes("pushNotifications");
+  if (usesPush && !auth)
+    throw new TypeError("Portable push notifications require @absolutejs/auth so provider tokens can be registered without exposing identity controls to page code.");
+  if (usesPush && !loaded.app.routes.some((route) => route.path === "/auth/push" || route.path === "/auth/mobile/push"))
+    throw new TypeError("@absolutejs/devices pushNotifications is used, but Auth push is not configured. Pass a trusted server-side registrar to auth({ push: ... }).");
   assertAbsoluteDeviceCapabilityPackages(options.projectRoot, deviceCapabilities);
   if (auth && !loaded.app.routes.some((route) => route.path === "/.well-known/openid-configuration")) {
     throw new TypeError("@absolutejs/auth is installed, but its OIDC provider is not mounted. Native authentication requires the auth oidc configuration so AbsoluteJS can provision a public PKCE client.");
@@ -5517,6 +5535,10 @@ var installAbsoluteMobileSyncRemediation = (bridge = {
       registry3.installations.splice(index, 1);
   };
 };
+
+// src/mobile/index.ts
+init_deviceCapabilities();
+
 // src/mobile/compatibilityDispatcher.ts
 import { Elysia as Elysia2 } from "elysia";
 
@@ -5822,6 +5844,7 @@ var applyAbsoluteNativeDeepLinks = async (config, platforms = config.platforms)
   };
 };
 // src/mobile/nativeDeviceCapabilities.ts
+init_deviceCapabilities();
 import { readFile as readFile15, rename as rename12, writeFile as writeFile13 } from "fs/promises";
 import { join as join16 } from "path";
 var START_MARKER2 = "<!-- absolutejs:device-capabilities:start -->";
@@ -5829,6 +5852,8 @@ var END_MARKER2 = "<!-- absolutejs:device-capabilities:end -->";
 var NOT_FOUND2 = -1;
 var IOS_PRIVACY_FILE_REFERENCE = "A85D0C000000000000000001";
 var IOS_PRIVACY_BUILD_FILE = "A85D0C000000000000000002";
+var PUSH_START_MARKER = "absolutejs:push-notifications:start";
+var PUSH_END_MARKER = "absolutejs:push-notifications:end";
 var escapeXml2 = (value) => value.replaceAll("&", "&amp;").replaceAll('"', "&quot;").replaceAll("'", "&apos;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
 var writeChangedFile2 = async (path, source) => {
   const current = await readFile15(path, "utf8");
@@ -5839,6 +5864,16 @@ var writeChangedFile2 = async (path, source) => {
   await rename12(temporary, path);
   return true;
 };
+var writeOptionalChangedFile = async (path, source) => {
+  const current = await optionalSource(path);
+  if (current === source)
+    return false;
+  if (current === null) {
+    await writeFile13(path, source, { flag: "wx" });
+    return true;
+  }
+  return writeChangedFile2(path, source);
+};
 var optionalSource = async (path) => {
   try {
     return await readFile15(path, "utf8");
@@ -6028,11 +6063,73 @@ ${content}
   const privacyPath = join16(config.nativeProjectDirectory, "ios/App/App/PrivacyInfo.xcprivacy");
   const privacyCurrent = await optionalSource(privacyPath);
   const privacySource = privacyManifestSource(privacyCurrent, requirements);
-  const [privacyChanged, projectChanged] = await Promise.all([
+  const [privacyChanged, projectChanged, pushChanged] = await Promise.all([
     writeIosPrivacyManifest(privacyPath, privacyCurrent, privacySource),
-    configureIosPrivacyProject(config, requirements)
+    configureIosPrivacyProject(config, requirements),
+    configureIosPushNotifications(config, requirements.iosPushNotifications)
   ]);
-  return infoChanged || privacyChanged || projectChanged;
+  return infoChanged || privacyChanged || projectChanged || pushChanged;
+};
+var configureIosPushNotifications = async (config, enabled) => {
+  const entitlementsPath = join16(config.nativeProjectDirectory, "ios/App/AbsoluteJS.entitlements");
+  const entitlements = await optionalSource(entitlementsPath);
+  if (entitlements === null && !enabled)
+    return false;
+  if (entitlements === null)
+    throw new TypeError("AbsoluteJS iOS entitlements are missing. Run native deep-link projection before device capabilities.");
+  const entitlementRegion = enabled ? `	<!-- ${PUSH_START_MARKER} -->
+	<key>aps-environment</key>
+	<string>development</string>
+	<!-- ${PUSH_END_MARKER} -->
+` : "";
+  const nextEntitlements = replacePushRegion(entitlements, entitlementRegion, entitlements.lastIndexOf("</dict>"));
+  const delegatePath = join16(config.nativeProjectDirectory, "ios/App/App/AppDelegate.swift");
+  const delegate = await optionalSource(delegatePath);
+  if (delegate === null && !enabled)
+    return false;
+  if (delegate === null)
+    throw new TypeError("Capacitor AppDelegate.swift is missing for iOS push notifications.");
+  const hasSuccess = delegate.includes("didRegisterForRemoteNotificationsWithDeviceToken");
+  const hasFailure = delegate.includes("didFailToRegisterForRemoteNotificationsWithError");
+  if (enabled && hasSuccess !== hasFailure && !delegate.includes(PUSH_START_MARKER))
+    throw new TypeError("iOS AppDelegate has a partial custom remote-notification registration implementation.");
+  const alreadyForwarded = enabled && hasSuccess && hasFailure && delegate.includes("capacitorDidRegisterForRemoteNotifications") && delegate.includes("capacitorDidFailToRegisterForRemoteNotifications");
+  const swiftRegion = enabled && !alreadyForwarded ? `
+    // ${PUSH_START_MARKER}
+    func application(_ application: UIApplication, didRegisterForRemoteNotificationsWithDeviceToken deviceToken: Data) {
+        NotificationCenter.default.post(name: .capacitorDidRegisterForRemoteNotifications, object: deviceToken)
+    }
+
+    func application(_ application: UIApplication, didFailToRegisterForRemoteNotificationsWithError error: Error) {
+        NotificationCenter.default.post(name: .capacitorDidFailToRegisterForRemoteNotifications, object: error)
+    }
+    // ${PUSH_END_MARKER}
+` : "";
+  const nextDelegate = alreadyForwarded ? delegate : replacePushRegion(delegate, swiftRegion, delegate.lastIndexOf("}"));
+  const changed = await Promise.all([
+    writeChangedFile2(entitlementsPath, nextEntitlements),
+    writeChangedFile2(delegatePath, nextDelegate)
+  ]);
+  return changed.some(Boolean);
+};
+var replacePushRegion = (source, region, insertion) => {
+  const start = source.indexOf(PUSH_START_MARKER);
+  const end = source.indexOf(PUSH_END_MARKER);
+  if (start < 0 !== end < 0 || start >= 0 && end < start)
+    throw new TypeError("AbsoluteJS push-notification ownership markers are malformed.");
+  if (start >= 0) {
+    const lineStart = source.lastIndexOf(`
+`, start) + 1;
+    const nextLine = source.indexOf(`
+`, end + PUSH_END_MARKER.length);
+    const lineEnd = nextLine < 0 ? source.length : nextLine + 1;
+    return `${source.slice(0, lineStart)}${region}${source.slice(lineEnd)}`;
+  }
+  if (!region)
+    return source;
+  if (insertion < 0)
+    throw new TypeError("Could not find a safe native project location for push notifications.");
+  return `${source.slice(0, insertion)}${region}${source.slice(insertion)}`;
 };
 var configureAndroid2 = async (config, plan) => {
   const path = join16(config.nativeProjectDirectory, "android/app/src/main/AndroidManifest.xml");
@@ -6047,7 +6144,33 @@ ${content}
   const application = source.indexOf("<application");
   const insertion = application === NOT_FOUND2 ? NOT_FOUND2 : source.lastIndexOf(`
 `, application) + 1;
-  return writeChangedFile2(path, managed(source, region, insertion));
+  const nextManifest = managed(source, region, insertion);
+  if (!plan.capabilities.includes("pushNotifications"))
+    return writeChangedFile2(path, nextManifest);
+  const firebaseSource = await optionalSource(config.pushAndroidGoogleServicesFile);
+  if (firebaseSource === null)
+    throw new TypeError(`Push notifications require Firebase config at ${config.pushAndroidGoogleServicesFile}. Set mobile.pushNotifications.android.googleServicesFile to override it.`);
+  let firebase;
+  try {
+    firebase = JSON.parse(firebaseSource);
+  } catch (error) {
+    throw new TypeError("Android google-services.json is invalid JSON.", {
+      cause: error
+    });
+  }
+  const clients = typeof firebase === "object" && firebase !== null ? Reflect.get(firebase, "client") : undefined;
+  const matchesApp = Array.isArray(clients) && clients.some((client) => {
+    const info = typeof client === "object" && client !== null ? Reflect.get(client, "client_info") : undefined;
+    const android = typeof info === "object" && info !== null ? Reflect.get(info, "android_client_info") : undefined;
+    return typeof android === "object" && android !== null && Reflect.get(android, "package_name") === config.appId;
+  });
+  if (!matchesApp)
+    throw new TypeError(`Android google-services.json does not contain package ${config.appId}.`);
+  const [manifestChanged, firebaseChanged] = await Promise.all([
+    writeChangedFile2(path, nextManifest),
+    writeOptionalChangedFile(join16(config.nativeProjectDirectory, "android/app/google-services.json"), firebaseSource)
+  ]);
+  return manifestChanged || firebaseChanged;
 };
 var applyAbsoluteNativeDeviceCapabilities = async (projectRoot, config, platforms = config.platforms, plan = resolveAbsoluteDeviceCapabilityPlan(projectRoot)) => {
   const results = await Promise.all(platforms.map(async (platform) => ({
@@ -6714,6 +6837,7 @@ export {
   publishAbsoluteAndroidRelease,
   projectUsesAbsoluteSync,
   projectUsesAbsoluteAuth,
+  projectImportsAbsoluteDeviceCapability,
   prepareAbsoluteIosRelease,
   prepareAbsoluteIosDevProject,
   prepareAbsoluteAndroidRelease,
@@ -6808,5 +6932,5 @@ export {
   ABSOLUTE_ANDROID_RELEASE_FORMAT
 };
 
-//# debugId=443011A81611F30D64756E2164756E21
+//# debugId=17F8DCA356CF789D64756E2164756E21
 //# sourceMappingURL=index.js.map