@absolutejs/absolute 0.20.0-beta.33 → 0.20.0-beta.34

package/dist/mobile/index.js

@@ -2580,17 +2580,134 @@ var waitForAbsoluteIosHmrLog = async (options) => {
   return poll();
 };
 // src/mobile/iosSimulatorController.ts
-import { createHash as createHash6, randomUUID as randomUUID2 } from "crypto";
+import { createHash as createHash6, randomUUID as randomUUID3 } from "crypto";
 import {
   access as access6,
   copyFile as copyFile4,
   mkdir as mkdir5,
-  readFile as readFile7,
+  readFile as readFile8,
   rename as rename6,
   rm as rm5,
   writeFile as writeFile6
 } from "fs/promises";
+import { isIP as isIP2 } from "net";
 import { dirname as dirname4, isAbsolute as isAbsolute4, join as join6, relative as relative5, resolve as resolve5, sep as sep4 } from "path";
+
+// src/mobile/iosPhysicalDeviceTransport.ts
+import { randomUUID as randomUUID2, X509Certificate } from "crypto";
+import { createServer } from "http";
+import {
+  connect as connectTcp,
+  createServer as createTcpServer,
+  isIP
+} from "net";
+import { readFile as readFile7 } from "fs/promises";
+var closeServer = (server) => new Promise((resolve5, reject) => {
+  server.close((error) => {
+    if (error)
+      reject(error);
+    else
+      resolve5();
+  });
+});
+var listen = (server, port) => new Promise((resolve5, reject) => {
+  server.once("error", reject);
+  server.listen(port, "0.0.0.0", () => {
+    server.off("error", reject);
+    const address = server.address();
+    if (!address || typeof address === "string") {
+      reject(new Error("Could not determine the iOS device helper port."));
+      return;
+    }
+    resolve5(address.port);
+  });
+});
+var findEphemeralPort = async () => {
+  const probe = createTcpServer();
+  const port = await new Promise((resolve5, reject) => {
+    probe.once("error", reject);
+    probe.listen(0, "127.0.0.1", () => {
+      const address = probe.address();
+      if (!address || typeof address === "string") {
+        reject(new Error("Could not allocate the iOS CA enrollment port."));
+        return;
+      }
+      resolve5(address.port);
+    });
+  });
+  await closeServer(probe);
+  return port;
+};
+var normalizeAbsoluteIosDeviceHost = (value) => {
+  const normalized = value.trim();
+  if (!normalized || normalized.length > 253 || /[\0\s/?#]/u.test(normalized))
+    throw new TypeError("Physical iOS development requires a valid LAN host.");
+  return normalized;
+};
+var normalizeAbsoluteIosDeviceIdentifier = (value) => {
+  const normalized = value.trim();
+  if (!normalized || normalized.length > 256 || /[\0\r\n]/u.test(normalized))
+    throw new TypeError("--ios-device requires a valid Xcode device identifier or name.");
+  return normalized;
+};
+var urlForHost = (protocol, host, port) => {
+  const url = new URL(`${protocol}://localhost:${port}`);
+  const normalizedHost = normalizeAbsoluteIosDeviceHost(host);
+  url.hostname = isIP(normalizedHost) === 6 ? `[${normalizedHost}]` : normalizedHost;
+  return url;
+};
+var startAbsoluteIosCaEnrollmentServer = async (options) => {
+  const certificate = new X509Certificate(await readFile7(options.certificateAuthorityPath));
+  const certificateBytes = certificate.raw;
+  const token = randomUUID2().replaceAll("-", "");
+  const certificatePath = `/${token}/absolutejs-development-ca.cer`;
+  const server = createServer((request, response) => {
+    if (request.method !== "GET" || request.url !== certificatePath) {
+      response.writeHead(404, {
+        "Cache-Control": "no-store",
+        "Content-Type": "text/plain; charset=utf-8"
+      });
+      response.end("Not found.");
+      return;
+    }
+    response.writeHead(200, {
+      "Cache-Control": "no-store",
+      "Content-Disposition": 'attachment; filename="absolutejs-development-ca.cer"',
+      "Content-Length": String(certificateBytes.byteLength),
+      "Content-Type": "application/x-x509-ca-cert",
+      "X-Content-Type-Options": "nosniff"
+    });
+    response.end(certificateBytes);
+  });
+  const port = await findEphemeralPort();
+  await listen(server, port);
+  const url = urlForHost("http", options.displayHost, port);
+  url.pathname = certificatePath;
+  return {
+    url: url.href,
+    close: () => closeServer(server)
+  };
+};
+var startAbsoluteIosTcpRelay = async (options) => {
+  const server = createTcpServer((downstream) => {
+    const upstream = connectTcp({
+      host: "127.0.0.1",
+      port: options.targetPort
+    });
+    downstream.pipe(upstream);
+    upstream.pipe(downstream);
+    const closePeer = () => {
+      downstream.destroy();
+      upstream.destroy();
+    };
+    downstream.once("error", closePeer);
+    upstream.once("error", closePeer);
+  });
+  await listen(server, options.listenPort);
+  return { close: () => closeServer(server) };
+};
+
+// src/mobile/iosSimulatorController.ts
 init_getDurationString();
 var ABSOLUTE_IOS_SIMULATOR_NAME = "AbsoluteJS iPhone";
 var BOOT_TIMEOUT_MS = 180000;
@@ -2716,6 +2833,24 @@ var trustIosSimulatorDevelopmentCa = async (options, udid, run, log) => {
   ], "iOS Simulator development CA trust", run, { signal: options.signal });
   log("Installed the AbsoluteJS development CA into this iOS Simulator trust store.");
 };
+var iosLaunchCommand = (project, udid, physical) => physical ? [
+  project.xcrun,
+  "devicectl",
+  "device",
+  "process",
+  "launch",
+  "--terminate-existing",
+  "--device",
+  udid,
+  project.config.appId
+] : [
+  project.xcrun,
+  "simctl",
+  "launch",
+  "--terminate-running-process",
+  udid,
+  project.config.appId
+];
 var requireCapturedSuccess = (result, label) => {
   if (result.exitCode !== 0) {
     throw new Error(`${label} failed: ${result.stderr.trim() || result.stdout.trim() || `status ${result.exitCode}`}`);
@@ -2853,7 +2988,7 @@ var repairAbsoluteIosDevSession = async (projectRoot) => {
     await rm5(paths.root, { force: true, recursive: true });
     return false;
   }
-  const journal = await readFile7(paths.journal, "utf8").then((source) => parseJournal(JSON.parse(source))).catch(() => null);
+  const journal = await readFile8(paths.journal, "utf8").then((source) => parseJournal(JSON.parse(source))).catch(() => null);
   if (!journal || !isInside(projectRoot, journal.nativeConfigPath) || !isInside(projectRoot, journal.infoPath) || !isInside(paths.root, journal.configBackupPath) || !isInside(paths.root, journal.infoBackupPath)) {
     throw new Error(`Refusing unsafe or invalid iOS dev journal at ${paths.journal}.`);
   }
@@ -2884,14 +3019,14 @@ var iosDevelopmentInfoPlist = (source, cleartext) => {
 		<true/>
 	</dict>`);
 };
-var writeDevProjection = async (project, port, https) => {
+var writeDevProjection = async (project, port, https, serverHost = "localhost") => {
   const paths = journalPaths(project.projectRoot);
   await repairAbsoluteIosDevSession(project.projectRoot);
   const nativeConfigPath = join6(project.nativeDirectory, "App", "App", "capacitor.config.json");
   const infoPath = join6(project.nativeDirectory, "App", "App", "Info.plist");
   const [configSource, infoSource] = await Promise.all([
-    readFile7(nativeConfigPath, "utf8"),
-    readFile7(infoPath, "utf8")
+    readFile8(nativeConfigPath, "utf8"),
+    readFile8(infoPath, "utf8")
   ]);
   const parsed = JSON.parse(configSource);
   if (!isRecord3(parsed))
@@ -2913,6 +3048,7 @@ var writeDevProjection = async (project, port, https) => {
     flag: "wx"
   });
   const developmentUrl = new URL(`${https ? "https" : "http"}://localhost:${port}${project.config.entry}`);
+  developmentUrl.hostname = isIP2(serverHost) === 6 ? `[${serverHost}]` : serverHost;
   developmentUrl.searchParams.set("__absolute_target", "capacitor-ios");
   const existingServer = parsed.server;
   parsed.server = {
@@ -2942,10 +3078,10 @@ var parseNativeCache = (value) => {
     ]))
   };
 };
-var readNativeCache = (projectRoot) => readFile7(nativeCachePath(projectRoot), "utf8").then((source) => parseNativeCache(JSON.parse(source))).catch(() => null);
+var readNativeCache = (projectRoot) => readFile8(nativeCachePath(projectRoot), "utf8").then((source) => parseNativeCache(JSON.parse(source))).catch(() => null);
 var writeNativeCache = async (projectRoot, cache) => {
   const destination = nativeCachePath(projectRoot);
-  const temporary = `${destination}.${process.pid}.${randomUUID2()}.tmp`;
+  const temporary = `${destination}.${process.pid}.${randomUUID3()}.tmp`;
   await mkdir5(dirname4(destination), { recursive: true });
   try {
     await writeFile6(temporary, `${JSON.stringify(cache, null, "\t")}
@@ -3034,6 +3170,31 @@ var installedAppIdentity = (project, udid, capture) => {
   ]);
   return result.exitCode === 0 && result.stdout.trim() ? result.stdout.trim() : undefined;
 };
+var validatePhysicalIosDevice = (project, identifier, capture) => {
+  const result = capture([
+    project.xcrun,
+    "devicectl",
+    "device",
+    "info",
+    "details",
+    "--device",
+    identifier
+  ]);
+  if (result.exitCode !== 0)
+    throw new Error(`Physical iOS device ${JSON.stringify(identifier)} is unavailable: ${result.stderr.trim() || result.stdout.trim() || "pair it in Xcode Device Hub, trust this Mac, unlock it, and enable Developer Mode."}`);
+};
+var physicalIosAppIsInstalled = (project, identifier, capture) => {
+  const result = capture([
+    project.xcrun,
+    "devicectl",
+    "device",
+    "info",
+    "apps",
+    "--device",
+    identifier
+  ]);
+  return result.exitCode === 0 && result.stdout.includes(project.config.appId);
+};
 var buildIosDebugApp = async (project, udid, fingerprint, run, signal) => {
   const derivedDataPath = join6(project.projectRoot, ".absolutejs", "mobile", "ios-derived-data", createHash6("sha256").update(project.config.appId).digest("hex").slice(0, 16));
   await mkdir5(derivedDataPath, { recursive: true });
@@ -3056,6 +3217,61 @@ var buildIosDebugApp = async (project, udid, fingerprint, run, signal) => {
     throw new Error(`Xcode did not produce the simulator app at ${appPath}.`);
   return appPath;
 };
+var buildPhysicalIosDebugApp = async (project, identifier, run, signal) => {
+  const derivedDataPath = join6(project.projectRoot, ".absolutejs", "mobile", "ios-derived-data", createHash6("sha256").update(project.config.appId).digest("hex").slice(0, 16));
+  await mkdir5(derivedDataPath, { recursive: true });
+  await requireSuccess2([
+    project.xcodebuild,
+    "-workspace",
+    join6(project.nativeDirectory, "App", "App.xcworkspace"),
+    "-scheme",
+    "App",
+    "-configuration",
+    "Debug",
+    "-destination",
+    `platform=iOS,id=${identifier}`,
+    "-derivedDataPath",
+    derivedDataPath,
+    "-allowProvisioningUpdates",
+    "build"
+  ], "iOS physical-device build (configure automatic signing and a Development Team in Xcode if this is the first run)", run, { cwd: project.nativeDirectory, signal });
+  const appPath = join6(derivedDataPath, "Build", "Products", "Debug-iphoneos", "App.app");
+  if (!await pathExists5(appPath))
+    throw new Error(`Xcode did not produce the physical-device app at ${appPath}.`);
+  return appPath;
+};
+var ensurePhysicalIosDebugApp = async (options) => {
+  const cacheHit = options.cache?.appId === options.project.config.appId && options.cache.fingerprint === options.fingerprint && options.cache.installations[options.identifier] === options.fingerprint && physicalIosAppIsInstalled(options.project, options.identifier, options.capture);
+  if (cacheHit) {
+    options.log(`iOS native app is unchanged on the selected physical device; skipped Xcode build and install.`);
+    return true;
+  }
+  options.log("iOS native inputs changed or the physical-device install is stale; rebuilding.");
+  options.transition("building");
+  const appPath = await buildPhysicalIosDebugApp(options.project, options.identifier, options.run, options.signal);
+  throwIfAborted2(options.signal);
+  options.transition("installing");
+  await requireSuccess2([
+    options.project.xcrun,
+    "devicectl",
+    "device",
+    "install",
+    "app",
+    "--device",
+    options.identifier,
+    appPath
+  ], "iOS physical-device app installation", options.run, { signal: options.signal });
+  await writeNativeCache(options.project.projectRoot, {
+    appId: options.project.config.appId,
+    fingerprint: options.fingerprint,
+    format: NATIVE_CACHE_FORMAT,
+    installations: {
+      ...options.cache?.appId === options.project.config.appId ? options.cache.installations : {},
+      [options.identifier]: options.fingerprint
+    }
+  }).catch((error) => options.log(`iOS native cache could not be saved: ${error instanceof Error ? error.message : String(error)}`));
+  return false;
+};
 var ensureIosDebugApp = async (options) => {
   const installed = installedAppIdentity(options.project, options.udid, options.capture);
   const cacheHit = options.cache?.appId === options.project.config.appId && options.cache.fingerprint === options.fingerprint && installed !== undefined && options.cache.installations[options.udid] === installed;
@@ -3102,7 +3318,18 @@ var attachNativeLogs = (project, udid, options) => {
   if (!options.nativeLog)
     return null;
   const start = options.startNativeLogs ?? defaultStartNativeLogs;
-  return start([
+  const command = options.deviceIdentifier ? [
+    project.xcrun,
+    "devicectl",
+    "device",
+    "process",
+    "launch",
+    "--console",
+    "--terminate-existing",
+    "--device",
+    udid,
+    project.config.appId
+  ] : [
     project.xcrun,
     "simctl",
     "spawn",
@@ -3115,7 +3342,8 @@ var attachNativeLogs = (project, udid, options) => {
     "debug",
     "--predicate",
     'process == "App"'
-  ], { signal: options.signal }, (line) => {
+  ];
+  return start(command, { signal: options.signal }, (line) => {
     const entry = parseAbsoluteIosLogLine(line);
     if (entry)
       options.nativeLog?.(entry);
@@ -3127,6 +3355,7 @@ var IOS_TIMING_PHASES = [
   ["fingerprinting", "fingerprint"],
   ["booting", "simulator"],
   ["connecting", "device ready"],
+  ["enrolling-trust", "HTTPS trust"],
   ["checking-native", "app check"],
   ["building", "Xcode"],
   ["installing", "install"],
@@ -3139,12 +3368,13 @@ var timingSummary = (timings) => IOS_TIMING_PHASES.map(([phase, label]) => {
 }).filter((value) => value !== null).join(", ");
 var prepareAbsoluteIosDevProject = async (config, options) => {
   if (detectAbsoluteMobileHost() !== "macos")
-    throw new Error("iOS simulation requires macOS and Xcode.");
+    throw new Error("iOS development requires macOS and Xcode.");
+  const target = options.target ?? "simulator";
   const projectRoot = resolve5(options.projectRoot);
   const checks = await inspectAbsoluteMobileToolchain({ host: "macos" });
-  const failed = checks.filter((check) => check.platform === "ios" && (check.status === "fail" || check.status === "warn"));
+  const failed = checks.filter((check) => check.platform === "ios" && !(target === "device" && check.id === "ios.runtime") && (check.status === "fail" || check.status === "warn"));
   if (failed.length > 0)
-    throw new Error(`iOS simulation is not ready: ${failed.map(({ label }) => label).join(", ")}.`);
+    throw new Error(`iOS ${target} development is not ready: ${failed.map(({ label }) => label).join(", ")}.`);
   const xcrun = checks.find((check) => check.id === "ios.xcrun")?.path;
   const xcodebuild = checks.find((check) => check.id === "ios.xcodebuild")?.path;
   if (!xcrun || !xcodebuild)
@@ -3175,8 +3405,55 @@ var prepareAbsoluteIosDevProject = async (config, options) => {
     xcrun
   };
 };
+var preparePhysicalIosTarget = async (options) => {
+  options.transition("connecting");
+  validatePhysicalIosDevice(options.project, options.deviceIdentifier, options.capture);
+  if (!options.startOptions.https)
+    return {
+      caEnrollmentServer: null,
+      startedSimulator: false,
+      udid: options.deviceIdentifier
+    };
+  if (!options.startOptions.certificateAuthorityPath)
+    throw new Error("Physical iOS HTTPS development requires the AbsoluteJS development CA certificate.");
+  options.transition("enrolling-trust");
+  const startEnrollment = options.startOptions.startCaEnrollmentServer ?? startAbsoluteIosCaEnrollmentServer;
+  const caEnrollmentServer = await startEnrollment({
+    certificateAuthorityPath: options.startOptions.certificateAuthorityPath,
+    displayHost: options.serverHost
+  });
+  options.log(`On the iOS device, open ${caEnrollmentServer.url}, install the AbsoluteJS development CA profile, then enable it under Settings > General > About > Certificate Trust Settings. This public CA endpoint exists only for this dev session.`);
+  return {
+    caEnrollmentServer,
+    startedSimulator: false,
+    udid: options.deviceIdentifier
+  };
+};
+var prepareIosSimulatorTarget = async (options) => {
+  options.transition("booting");
+  const managed = await ensureManagedSimulator(options.project, options.capture);
+  const { device } = managed;
+  const startedSimulator = managed.created || device.state !== "Booted";
+  bootSimulator(options.project, device, options.capture);
+  options.spawn([
+    "open",
+    "-a",
+    "Simulator",
+    "--args",
+    "-CurrentDeviceUDID",
+    device.udid
+  ]);
+  options.transition("connecting");
+  await waitForBootedSimulator(options.project, device.udid, options.capture, options.sleep, options.startOptions.signal);
+  await requireSuccess2([options.project.xcrun, "simctl", "bootstatus", device.udid, "-b"], "iOS simulator boot readiness", options.run, { signal: options.startOptions.signal });
+  await trustIosSimulatorDevelopmentCa(options.startOptions, device.udid, options.run, options.log);
+  return { caEnrollmentServer: null, startedSimulator, udid: device.udid };
+};
 var startAbsoluteIosDevSession = async (options) => {
   const { project } = options;
+  const deviceIdentifier = options.deviceIdentifier ? normalizeAbsoluteIosDeviceIdentifier(options.deviceIdentifier) : undefined;
+  const targetKind = deviceIdentifier ? "device" : "simulator";
+  const serverHost = deviceIdentifier ? normalizeAbsoluteIosDeviceHost(options.serverHost ?? "") : "localhost";
   const capture = options.capture ?? defaultCapture3;
   const run = options.run ?? defaultRun2;
   const sleep = options.sleep ?? Bun.sleep;
@@ -3204,6 +3481,7 @@ var startAbsoluteIosDevSession = async (options) => {
     options.onStateChange?.(next);
   };
   let nativeLogs = null;
+  let caEnrollmentServer = null;
   const closeLogs = async () => {
     const stream = nativeLogs;
     nativeLogs = null;
@@ -3211,39 +3489,66 @@ var startAbsoluteIosDevSession = async (options) => {
       return;
     });
   };
+  const relaunchTarget = async (udid) => {
+    if (deviceIdentifier && options.nativeLog) {
+      await closeLogs();
+      nativeLogs = attachNativeLogs(project, udid, options);
+      return;
+    }
+    await requireSuccess2(iosLaunchCommand(project, udid, deviceIdentifier !== undefined), "iOS app relaunch", run, { signal: options.signal });
+  };
   try {
     await repairAbsoluteIosDevSession(project.projectRoot);
     throwIfAborted2(options.signal);
     transition("syncing");
     await requireSuccess2([project.cap, "sync", "ios"], "Capacitor iOS synchronization", run, { cwd: project.projectRoot, signal: options.signal });
     transition("configuring");
-    await writeDevProjection(project, options.port, options.https === true);
+    await writeDevProjection(project, options.port, options.https === true, serverHost);
     throwIfAborted2(options.signal);
     const fingerprintStartedAt = performance.now();
     const fingerprintPromise = fingerprintAbsoluteIosDevProject(project).then((fingerprint2) => {
       timings.fingerprinting = performance.now() - fingerprintStartedAt;
       return fingerprint2;
     });
-    transition("booting");
-    const { created, device } = await ensureManagedSimulator(project, capture);
-    const startedSimulator = created || device.state !== "Booted";
-    bootSimulator(project, device, capture);
-    spawn([
-      "open",
-      "-a",
-      "Simulator",
-      "--args",
-      "-CurrentDeviceUDID",
-      device.udid
-    ]);
-    transition("connecting");
-    await waitForBootedSimulator(project, device.udid, capture, sleep, options.signal);
-    await requireSuccess2([project.xcrun, "simctl", "bootstatus", device.udid, "-b"], "iOS simulator boot readiness", run, { signal: options.signal });
-    await trustIosSimulatorDevelopmentCa(options, device.udid, run, log);
+    const target = deviceIdentifier ? await preparePhysicalIosTarget({
+      capture,
+      deviceIdentifier,
+      log,
+      project,
+      serverHost,
+      startOptions: options,
+      transition
+    }) : await prepareIosSimulatorTarget({
+      capture,
+      log,
+      project,
+      run,
+      sleep,
+      spawn,
+      startOptions: options,
+      transition
+    });
+    const {
+      caEnrollmentServer: targetCaEnrollmentServer,
+      startedSimulator,
+      udid
+    } = target;
+    caEnrollmentServer = targetCaEnrollmentServer;
     const fingerprint = await fingerprintPromise;
     transition("checking-native");
-    const nativeCacheHit = await ensureIosDebugApp({
-      cache: await readNativeCache(project.projectRoot),
+    const cache = await readNativeCache(project.projectRoot);
+    const nativeCacheHit = deviceIdentifier ? await ensurePhysicalIosDebugApp({
+      cache,
+      capture,
+      fingerprint,
+      identifier: deviceIdentifier,
+      log,
+      project,
+      run,
+      signal: options.signal,
+      transition
+    }) : await ensureIosDebugApp({
+      cache,
       capture,
       fingerprint,
       log,
@@ -3251,24 +3556,18 @@ var startAbsoluteIosDevSession = async (options) => {
       run,
       signal: options.signal,
       transition,
-      udid: device.udid
+      udid
     });
     throwIfAborted2(options.signal);
     if (options.nativeLog)
       transition("streaming-logs");
-    nativeLogs = attachNativeLogs(project, device.udid, options);
+    nativeLogs = attachNativeLogs(project, udid, options);
     transition("launching");
-    await requireSuccess2([
-      project.xcrun,
-      "simctl",
-      "launch",
-      "--terminate-running-process",
-      device.udid,
-      project.config.appId
-    ], "iOS app launch", run, { signal: options.signal });
+    if (!deviceIdentifier || !nativeLogs)
+      await requireSuccess2(iosLaunchCommand(project, udid, deviceIdentifier !== undefined), "iOS app launch", run, { signal: options.signal });
     transition("ready");
     timings.total = performance.now() - startedAt;
-    log(`iOS simulator connected (${device.udid}) with HMR on port ${options.port} in ${getDurationString(timings.total)} (${nativeCacheHit ? "native cache hit" : "native build installed"}).`);
+    log(`iOS ${targetKind} connected with HMR on port ${options.port} in ${getDurationString(timings.total)} (${nativeCacheHit ? "native cache hit" : "native build installed"}).`);
     log(`iOS startup: ${timingSummary(timings)}.`);
     let closed = false;
     const close = async () => {
@@ -3277,6 +3576,10 @@ var startAbsoluteIosDevSession = async (options) => {
       closed = true;
       transition("closing");
       await closeLogs();
+      await caEnrollmentServer?.close().catch(() => {
+        return;
+      });
+      caEnrollmentServer = null;
       await repairAbsoluteIosDevSession(project.projectRoot);
       transition("closed");
     };
@@ -3284,8 +3587,9 @@ var startAbsoluteIosDevSession = async (options) => {
       close,
       nativeCacheHit,
       startedSimulator,
+      targetKind,
       timings: { ...timings },
-      udid: device.udid,
+      udid,
       rebuild: async () => {
         if (closed)
           throw new Error("iOS development session is closed.");
@@ -3298,22 +3602,17 @@ var startAbsoluteIosDevSession = async (options) => {
           throw new Error("iOS development session is closed.");
         transition("launching");
         try {
-          await requireSuccess2([
-            project.xcrun,
-            "simctl",
-            "launch",
-            "--terminate-running-process",
-            device.udid,
-            project.config.appId
-          ], "iOS app relaunch", run, { signal: options.signal });
+          await relaunchTarget(udid);
           transition("ready");
-          log(`iOS app relaunched on ${device.udid}.`);
+          log(`iOS app relaunched on the selected ${targetKind}.`);
         } catch (error) {
           transition("failed");
           throw error;
         }
       },
       screenshot: async (destination) => {
+        if (deviceIdentifier)
+          throw new Error("Physical iOS screenshots are captured in Xcode Device Hub; the CLI never records a device screen automatically.");
         const resolved = resolve5(project.projectRoot, destination);
         if (!isInside(project.projectRoot, resolved))
           throw new Error("iOS screenshot destination must remain inside the project.");
@@ -3322,7 +3621,7 @@ var startAbsoluteIosDevSession = async (options) => {
           project.xcrun,
           "simctl",
           "io",
-          device.udid,
+          udid,
           "screenshot",
           resolved
         ], "iOS simulator screenshot", run, { signal: options.signal });
@@ -3335,6 +3634,9 @@ var startAbsoluteIosDevSession = async (options) => {
   } catch (error) {
     transition("failed");
     await closeLogs();
+    await caEnrollmentServer?.close().catch(() => {
+      return;
+    });
     await repairAbsoluteIosDevSession(project.projectRoot);
     throw error;
   }
@@ -3433,9 +3735,10 @@ var createAbsoluteIosNativeWatcher = async (options) => {
 };
 var isAbsoluteIosNativeRootInput = (path) => ROOT_NATIVE_INPUTS.has(basename(path));
 // src/mobile/remoteMacProtocol.ts
-import { createHash as createHash7, randomUUID as randomUUID3 } from "crypto";
-import { chmod, mkdir as mkdir6, readFile as readFile8, rename as rename7, writeFile as writeFile7 } from "fs/promises";
+import { createHash as createHash7, randomUUID as randomUUID4 } from "crypto";
+import { chmod, mkdir as mkdir6, readFile as readFile9, rename as rename7, writeFile as writeFile7 } from "fs/promises";
 import { homedir as homedir2 } from "os";
+import { isIP as isIP3 } from "net";
 import {
   dirname as dirname5,
   isAbsolute as isAbsolute5,
@@ -3462,7 +3765,7 @@ var emptyStore = () => ({
 });
 var loadStore = async (path = defaultProfilePath()) => {
   try {
-    const parsed = JSON.parse(await readFile8(path, "utf8"));
+    const parsed = JSON.parse(await readFile9(path, "utf8"));
     if (parsed.format !== PROFILE_FORMAT || typeof parsed.profiles !== "object" || parsed.profiles === null || Array.isArray(parsed.profiles))
       throw new Error("Unsupported remote Mac profile format.");
     for (const [key, profile] of Object.entries(parsed.profiles)) {
@@ -3480,7 +3783,7 @@ var loadStore = async (path = defaultProfilePath()) => {
 };
 var saveStore = async (store, path = defaultProfilePath()) => {
   await mkdir6(dirname5(path), { recursive: true });
-  const temporary = `${path}.${randomUUID3()}.tmp`;
+  const temporary = `${path}.${randomUUID4()}.tmp`;
   await writeFile7(temporary, `${JSON.stringify(store, null, 2)}
 `, {
     mode: 384
@@ -3581,6 +3884,19 @@ var inspectAbsoluteRemoteMac = async (destination, options = {}) => {
     throw new Error("The remote Mac must have full Xcode installed and selected.");
   return { bunPath, home, os: operatingSystem, xcodeVersion };
 };
+var inspectAbsoluteRemoteMacLanHost = async (profile, transport) => {
+  const capture = transport?.capture ?? defaultTransport.capture;
+  const script = `default_interface="$(/sbin/route -n get default 2>/dev/null | /usr/bin/awk '/interface:/{print $2; exit}')"; for interface in "$default_interface" en0 en1; do [ -n "$interface" ] || continue; address="$(/usr/sbin/ipconfig getifaddr "$interface" 2>/dev/null || true)"; if [ -n "$address" ]; then printf '%s\\n' "$address"; exit 0; fi; done; exit 1`;
+  const result = await capture([
+    ...absoluteRemoteMacSshBase(profile),
+    "/bin/sh -lc",
+    shellQuote(script)
+  ]);
+  const host = requireRemoteSuccess(result, "Remote Mac LAN address discovery").trim();
+  if (isIP3(host) === 0)
+    throw new Error("The Remote Mac did not report a device-reachable LAN address.");
+  return host;
+};
 var listAbsoluteRemoteMacProfiles = async (profilePath) => {
   const store = await loadStore(profilePath);
   return {
@@ -3652,7 +3968,7 @@ var installAbsoluteRemoteMacAgent = async (project) => {
   ]);
   if (verified.exitCode === 0)
     return { ...artifact, remotePath, uploaded: false };
-  const temporary = posix.join(directory, `.agent-${randomUUID3()}.tmp`);
+  const temporary = posix.join(directory, `.agent-${randomUUID4()}.tmp`);
   const installScript = [
     "set -eu",
     "umask 077",
@@ -3743,7 +4059,7 @@ var portableMobileConfig = (project) => ({
 var absoluteRemoteProjectSyncCommands = (project) => {
   const current = project.remoteProjectRoot;
   const parent = posix.dirname(current);
-  const staging = posix.join(parent, `.incoming-${randomUUID3()}`);
+  const staging = posix.join(parent, `.incoming-${randomUUID4()}`);
   const previous = posix.join(parent, ".previous");
   const script = [
     "set -eu",
@@ -3835,7 +4151,13 @@ var startAbsoluteRemoteIosDevSession = async (options) => {
   await syncProject(options.project);
   const syncDuration = performance.now() - syncStartedAt;
   const encodedConfig = Buffer.from(JSON.stringify(portableMobileConfig(options.project))).toString("base64url");
-  const encodedCertificateAuthority = options.certificateAuthorityPath ? (await readFile8(options.certificateAuthorityPath)).toString("base64url") : undefined;
+  const encodedCertificateAuthority = options.certificateAuthorityPath ? (await readFile9(options.certificateAuthorityPath)).toString("base64url") : undefined;
+  const physicalDevice = options.deviceIdentifier !== undefined;
+  let relayPort;
+  if (physicalDevice)
+    relayPort = options.port <= 49151 ? options.port + 16384 : options.port - 16384;
+  if (physicalDevice && !options.serverHost)
+    throw new Error("Remote physical iOS development requires the Remote Mac LAN host.");
   const remoteCommand = [
     `cd ${shellQuote(options.project.remoteProjectRoot)}`,
     "&&",
@@ -3850,14 +4172,22 @@ var startAbsoluteRemoteIosDevSession = async (options) => {
       "--certificate-authority",
       shellQuote(encodedCertificateAuthority)
     ] : [],
-    ...options.https ? ["--https"] : []
+    ...options.https ? ["--https"] : [],
+    ...options.deviceIdentifier ? [
+      "--ios-device",
+      shellQuote(options.deviceIdentifier),
+      "--server-host",
+      shellQuote(options.serverHost ?? ""),
+      "--relay-port",
+      String(relayPort)
+    ] : []
   ].join(" ");
   const command = [
     ...absoluteRemoteMacSshBase(options.project.profile),
     "-o",
     "ExitOnForwardFailure=yes",
     "-R",
-    `${options.port}:127.0.0.1:${options.port}`,
+    physicalDevice ? `127.0.0.1:${relayPort}:127.0.0.1:${options.port}` : `${options.port}:127.0.0.1:${options.port}`,
     "/bin/sh -lc",
     shellQuote(remoteCommand)
   ];
@@ -3945,7 +4275,7 @@ var startAbsoluteRemoteIosDevSession = async (options) => {
   };
   options.log?.(`Remote Mac connected (${options.project.profile.name}); agent ${agent.uploaded ? "uploaded" : "cache hit"}, project synced, and iOS ready in ${totalDuration.toFixed(2)}ms.`);
   const request = (commandName) => {
-    const id = randomUUID3();
+    const id = randomUUID4();
     const response = new Promise((resolve6, reject) => pending.set(id, { reject, resolve: resolve6 }));
     process2.stdin.write(`${JSON.stringify({ command: commandName, id, v: 1 })}
 `);
@@ -3978,6 +4308,7 @@ var startAbsoluteRemoteIosDevSession = async (options) => {
     close,
     nativeCacheHit: currentReady.nativeCacheHit,
     startedSimulator: currentReady.startedSimulator,
+    targetKind: currentReady.targetKind,
     timings: currentReady.timings,
     udid: currentReady.udid,
     rebuild: async () => {
@@ -4019,7 +4350,7 @@ var startAbsoluteRemoteIosDevSession = async (options) => {
 import {
   access as access7,
   mkdir as mkdir7,
-  readFile as readFile9,
+  readFile as readFile10,
   rename as rename8,
   rm as rm6,
   writeFile as writeFile8
@@ -4225,7 +4556,7 @@ var createAbsoluteMobileAssociationPlugin = (mobile, projectRoot, options = {})
 var writeAtomic = async (path, source) => {
   let current;
   try {
-    current = await readFile9(path, "utf8");
+    current = await readFile10(path, "utf8");
   } catch (error) {
     if (!(error instanceof Error) || !("code" in error) || error.code !== "ENOENT") {
       throw error;
@@ -4250,7 +4581,7 @@ var assertOwnedOutput = async (root) => {
   const path = resolve7(root, OWNERSHIP_FILE);
   let ownership;
   try {
-    ownership = JSON.parse(await readFile9(path, "utf8"));
+    ownership = JSON.parse(await readFile10(path, "utf8"));
   } catch {
     throw new TypeError(`Association output ${root} already exists and is not owned by AbsoluteJS.`);
   }
@@ -4386,13 +4717,13 @@ var parseAbsoluteMobileBuildPageMetadata = (value) => {
   };
 };
 // src/mobile/buildPipeline.ts
-import { readFile as readFile13 } from "fs/promises";
+import { readFile as readFile14 } from "fs/promises";
 import { join as join14, resolve as resolve12 } from "path";
 import { pathToFileURL as pathToFileURL2 } from "url";
 
 // src/mobile/buildRelease.ts
 import { createHash as createHash8 } from "crypto";
-import { mkdir as mkdir8, readFile as readFile10, writeFile as writeFile9 } from "fs/promises";
+import { mkdir as mkdir8, readFile as readFile11, writeFile as writeFile9 } from "fs/promises";
 import { basename as basename2, dirname as dirname6, extname, join as join8, relative as relative7, resolve as resolve8 } from "path";
 var sha256 = (bytes) => createHash8("sha256").update(bytes).digest("hex");
 var STATIC_SCRIPT_PATTERN = /(<script\b[^>]*?\bsrc\s*=\s*["'])(\/[^"']+\.(?:js|ts))(["'][^>]*>)/giu;
@@ -4419,7 +4750,7 @@ var pageFor = async (metadata, manifest, buildDirectory) => {
   }
   let resolvedAssetPath = resolveAssetPath(buildDirectory, assetPath);
   if (metadata.framework === "html" || metadata.framework === "htmx") {
-    const source = await readFile10(resolvedAssetPath, "utf8");
+    const source = await readFile11(resolvedAssetPath, "utf8");
     const rewritten = rewriteStaticScriptPaths(source, manifest);
     const documentHash = sha256(new TextEncoder().encode(rewritten));
     resolvedAssetPath = join8(buildDirectory, ".absolutejs", "mobile-pages", `${documentHash}.html`);
@@ -4433,8 +4764,8 @@ var pageFor = async (metadata, manifest, buildDirectory) => {
   ].map((key) => manifest[key]).find((path) => typeof path === "string");
   const resolvedStylePath = styleAssetPath ? resolveAssetPath(buildDirectory, styleAssetPath) : undefined;
   const [bytes, styleBytes] = await Promise.all([
-    readFile10(resolvedAssetPath),
-    resolvedStylePath ? readFile10(resolvedStylePath) : undefined
+    readFile11(resolvedAssetPath),
+    resolvedStylePath ? readFile11(resolvedStylePath) : undefined
   ]);
   const bundlePath = `/${relative7(resolve8(buildDirectory), resolvedAssetPath).replaceAll("\\", "/")}`;
   const styleBundlePath = resolvedStylePath ? `/${relative7(resolve8(buildDirectory), resolvedStylePath).replaceAll("\\", "/")}` : undefined;
@@ -4454,7 +4785,7 @@ var pageFor = async (metadata, manifest, buildDirectory) => {
 var buildAbsoluteMobileCompatibilityRelease = async (options) => {
   const [captured, producerBytes] = await Promise.all([
     captureAbsoluteMobileRouteGraph(options.app),
-    readFile10(options.producerPath)
+    readFile11(options.producerPath)
   ]);
   if (captured.length === 0) {
     throw new TypeError("No instrumented AbsoluteJS mobile page routes were found in the finalized Elysia route graph.");
@@ -4546,7 +4877,7 @@ import {
   copyFile as copyFile5,
   mkdir as mkdir9,
   mkdtemp as mkdtemp4,
-  readFile as readFile11,
+  readFile as readFile12,
   rename as rename9,
   rm as rm7,
   writeFile as writeFile10
@@ -5076,7 +5407,7 @@ var resolveProjectImport = async (projectRoot, specifier) => {
   const packageName = specifier.startsWith("@") ? segments.slice(0, 2).join("/") : segments[0] ?? "";
   const subpath = specifier.slice(packageName.length);
   const packageDirectory = join9(resolve9(projectRoot), "node_modules", packageName);
-  const manifest = JSON.parse(await readFile11(join9(packageDirectory, "package.json"), "utf8"));
+  const manifest = JSON.parse(await readFile12(join9(packageDirectory, "package.json"), "utf8"));
   const exports = typeof manifest === "object" && manifest !== null ? Reflect.get(manifest, "exports") : undefined;
   const entry = typeof exports === "object" && exports !== null ? Reflect.get(exports, subpath ? `.${subpath}` : ".") : undefined;
   const target = importEntryTarget(entry);
@@ -5184,7 +5515,7 @@ var copyClientPage = async (page, buildDirectory, staging, copiedDependencies) =
   };
 };
 var absoluteClientImports = async (sourcePath, buildDirectory) => {
-  const source = await readFile11(sourcePath, "utf8");
+  const source = await readFile12(sourcePath, "utf8");
   const extension = extname2(sourcePath).toLowerCase();
   let scriptLoader;
   if (extension === ".tsx")
@@ -5295,7 +5626,7 @@ import {
   access as access8,
   mkdir as mkdir10,
   mkdtemp as mkdtemp5,
-  readFile as readFile12,
+  readFile as readFile13,
   rename as rename10,
   rm as rm8,
   writeFile as writeFile11
@@ -5392,7 +5723,7 @@ var resolveProducerHandler = (loaded, exportName) => {
 };
 var loadAbsoluteMobileMaterializedBundle = async (root) => {
   const resolvedRoot = resolvePath3(root);
-  const serialized = await readFile12(join10(resolvedRoot, CURRENT_BUNDLE_FILE), "utf8");
+  const serialized = await readFile13(join10(resolvedRoot, CURRENT_BUNDLE_FILE), "utf8");
   const parsed = JSON.parse(serialized);
   const index = parseBundleIndex(parsed);
   const bundleRoot = join10(resolvedRoot, BUNDLES_DIRECTORY, index.bundleId);
@@ -5447,7 +5778,7 @@ var materializeAbsoluteMobileCompatibilityBundle = async (input) => {
 var readAbsoluteMobileMaterializedReleases = async (root) => {
   const resolvedRoot = resolvePath3(root);
   try {
-    const serialized = await readFile12(join10(resolvedRoot, CURRENT_BUNDLE_FILE), "utf8");
+    const serialized = await readFile13(join10(resolvedRoot, CURRENT_BUNDLE_FILE), "utf8");
     const parsed = JSON.parse(serialized);
     const index = parseBundleIndex(parsed);
     const bundleRoot = join10(resolvedRoot, BUNDLES_DIRECTORY, index.bundleId);
@@ -5558,7 +5889,7 @@ var finalizeAbsoluteMobileCompatibilityBuild = async (options) => {
   const mobile = normalizeAbsoluteMobileConfig(options.mobile, options.projectRoot);
   const root = join14(buildDirectory, ".absolutejs", "mobile-compatibility");
   const [manifestSource, previous] = await Promise.all([
-    readFile13(join14(buildDirectory, "manifest.json"), "utf8"),
+    readFile14(join14(buildDirectory, "manifest.json"), "utf8"),
     readAbsoluteMobileMaterializedReleases(root)
   ]);
   const manifest = JSON.parse(manifestSource);
@@ -5957,7 +6288,7 @@ var createAbsoluteMobilePreviewPlugin = (mobile) => {
   });
 };
 // src/mobile/nativeDeepLinks.ts
-import { readFile as readFile14, rename as rename11, writeFile as writeFile12 } from "fs/promises";
+import { readFile as readFile15, rename as rename11, writeFile as writeFile12 } from "fs/promises";
 import { join as join17 } from "path";
 var START_MARKER = "<!-- absolutejs:deep-links:start -->";
 var END_MARKER = "<!-- absolutejs:deep-links:end -->";
@@ -5965,7 +6296,7 @@ var IOS_ENTITLEMENTS = "App/AbsoluteJS.entitlements";
 var NOT_FOUND = -1;
 var escapeXml = (value) => value.replaceAll("&", "&amp;").replaceAll('"', "&quot;").replaceAll("'", "&apos;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
 var writeChangedFile = async (path, source) => {
-  const current = await readFile14(path, "utf8");
+  const current = await readFile15(path, "utf8");
   if (current === source)
     return false;
   const temporary = `${path}.${crypto.randomUUID()}.tmp`;
@@ -6016,7 +6347,7 @@ ${hosts}
 };
 var configureAndroid = async (config) => {
   const path = join17(config.nativeProjectDirectory, "android/app/src/main/AndroidManifest.xml");
-  const source = await readFile14(path, "utf8");
+  const source = await readFile15(path, "utf8");
   const mainActivity = source.indexOf('android:name=".MainActivity"');
   if (mainActivity === NOT_FOUND) {
     throw new TypeError("Android MainActivity was not found.");
@@ -6042,7 +6373,7 @@ var iosSchemeRegion = (scheme) => `	${START_MARKER}
 `;
 var configureIosInfo = async (config) => {
   const path = join17(config.nativeProjectDirectory, "ios/App/App/Info.plist");
-  const source = await readFile14(path, "utf8");
+  const source = await readFile15(path, "utf8");
   const region = config.deepLinkScheme ? iosSchemeRegion(config.deepLinkScheme) : `	${START_MARKER}
 	${END_MARKER}
 `;
@@ -6068,7 +6399,7 @@ var configureIosEntitlements = async (config) => {
   const path = join17(config.nativeProjectDirectory, "ios/App/AbsoluteJS.entitlements");
   let current = "";
   try {
-    current = await readFile14(path, "utf8");
+    current = await readFile15(path, "utf8");
   } catch (error) {
     if (!(error instanceof Error) || !("code" in error) || error.code !== "ENOENT") {
       throw error;
@@ -6084,7 +6415,7 @@ var configureIosEntitlements = async (config) => {
 };
 var configureIosProject = async (config) => {
   const path = join17(config.nativeProjectDirectory, "ios/App/App.xcodeproj/project.pbxproj");
-  const source = await readFile14(path, "utf8");
+  const source = await readFile15(path, "utf8");
   const declarations = [
     ...source.matchAll(/CODE_SIGN_ENTITLEMENTS = ([^;]+);/g)
   ].map((match) => match[1]);
@@ -6123,7 +6454,7 @@ var applyAbsoluteNativeDeepLinks = async (config, platforms = config.platforms)
 };
 // src/mobile/nativeDeviceCapabilities.ts
 init_deviceCapabilities();
-import { readFile as readFile15, rename as rename12, writeFile as writeFile13 } from "fs/promises";
+import { readFile as readFile16, rename as rename12, writeFile as writeFile13 } from "fs/promises";
 import { join as join18 } from "path";
 var START_MARKER2 = "<!-- absolutejs:device-capabilities:start -->";
 var END_MARKER2 = "<!-- absolutejs:device-capabilities:end -->";
@@ -6134,7 +6465,7 @@ var PUSH_START_MARKER = "absolutejs:push-notifications:start";
 var PUSH_END_MARKER = "absolutejs:push-notifications:end";
 var escapeXml2 = (value) => value.replaceAll("&", "&amp;").replaceAll('"', "&quot;").replaceAll("'", "&apos;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
 var writeChangedFile2 = async (path, source) => {
-  const current = await readFile15(path, "utf8");
+  const current = await readFile16(path, "utf8");
   if (current === source)
     return false;
   const temporary = `${path}.${crypto.randomUUID()}.tmp`;
@@ -6154,7 +6485,7 @@ var writeOptionalChangedFile = async (path, source) => {
 };
 var optionalSource = async (path) => {
   try {
-    return await readFile15(path, "utf8");
+    return await readFile16(path, "utf8");
   } catch (error) {
     if (typeof error === "object" && error !== null && Reflect.get(error, "code") === "ENOENT")
       return null;
@@ -6275,7 +6606,7 @@ var configureIosPrivacyProject = async (config, requirements) => {
   if (requirements.iosPrivacyAccessedApis.length === 0)
     return false;
   const projectPath = join18(config.nativeProjectDirectory, "ios/App/App.xcodeproj/project.pbxproj");
-  const project = await readFile15(projectPath, "utf8");
+  const project = await readFile16(projectPath, "utf8");
   return writeChangedFile2(projectPath, addIosPrivacyProjectReference(project));
 };
 var addIosPrivacyProjectReference = (source) => {
@@ -6328,7 +6659,7 @@ ${next.slice(index)}`;
 };
 var configureIos2 = async (config, plan) => {
   const path = join18(config.nativeProjectDirectory, "ios/App/App/Info.plist");
-  const source = await readFile15(path, "utf8");
+  const source = await readFile16(path, "utf8");
   const requirements = absoluteDeviceNativeRequirements(plan);
   const existingSystemBars = source.match(/<key>UIViewControllerBasedStatusBarAppearance<\/key>\s*<(true|false)\s*\/>/u);
   const ownedStart = source.indexOf(START_MARKER2);
@@ -6421,7 +6752,7 @@ var replacePushRegion = (source, region, insertion) => {
 };
 var configureAndroid2 = async (config, plan) => {
   const path = join18(config.nativeProjectDirectory, "android/app/src/main/AndroidManifest.xml");
-  const source = await readFile15(path, "utf8");
+  const source = await readFile16(path, "utf8");
   const permissions = absoluteDeviceNativeRequirements(plan).androidPermissions;
   const content = permissions.map((permission) => `    <uses-permission android:name="${escapeXml2(permission)}" />`).join(`
 `);
@@ -7310,7 +7641,9 @@ export {
   validateAbsoluteRemoteMacProfileName,
   syncAbsoluteRemoteMacProject,
   startAbsoluteRemoteIosDevSession,
+  startAbsoluteIosTcpRelay,
   startAbsoluteIosDevSession,
+  startAbsoluteIosCaEnrollmentServer,
   serializeAbsoluteMobileAuthEnvironment,
   runWithAbsoluteMobileProducer,
   runAbsoluteAndroidUpgradeConformance,
@@ -7345,6 +7678,8 @@ export {
   parseAbsoluteAndroidInstalledApp,
   pairAbsoluteRemoteMac,
   normalizeAbsoluteMobileConfig,
+  normalizeAbsoluteIosDeviceIdentifier,
+  normalizeAbsoluteIosDeviceHost,
   navigateAbsoluteMobilePage,
   missingAbsoluteDeviceCapabilityPackages,
   materializeAbsoluteRemoteMacAgent,
@@ -7361,6 +7696,7 @@ export {
   installAbsoluteMobileSyncRemediation,
   installAbsoluteMobileShellHttp,
   installAbsoluteMobileAuthEnvironment,
+  inspectAbsoluteRemoteMacLanHost,
   inspectAbsoluteRemoteMac,
   inspectAbsoluteMobileRouteMetadata,
   inspectAbsoluteAndroidInstalledApp,
@@ -7430,5 +7766,5 @@ export {
   ABSOLUTE_ANDROID_RELEASE_FORMAT
 };
 
-//# debugId=558FB72C0F151C5864756E2164756E21
+//# debugId=ED7CBBBE08CD962364756E2164756E21
 //# sourceMappingURL=index.js.map