@absolutejs/absolute 0.20.0-beta.49 → 0.20.0-beta.50

package/dist/angular/components/core/streamingSlotRegistrar.js

@@ -1,7 +1,7 @@
 // @bun
 var __require = import.meta.require;
 
-// .angular-partial-tmp-gW9hwe/src/core/streamingSlotRegistrar.ts
+// .angular-partial-tmp-fjProX/src/core/streamingSlotRegistrar.ts
 var STREAMING_SLOT_REGISTRAR_KEY = Symbol.for("absolutejs.streamingSlotRegistrar");
 var STREAMING_SLOT_WARNING_STORAGE_KEY = Symbol.for("absolutejs.streamingSlotWarningController");
 var STREAMING_SLOT_COLLECTION_STORAGE_KEY = Symbol.for("absolutejs.streamingSlotCollectionController");

package/dist/angular/components/core/streamingSlotRegistry.js

@@ -1,7 +1,7 @@
 // @bun
 var __require = import.meta.require;
 
-// .angular-partial-tmp-gW9hwe/src/core/streamingSlotRegistrar.ts
+// .angular-partial-tmp-fjProX/src/core/streamingSlotRegistrar.ts
 var STREAMING_SLOT_REGISTRAR_KEY = Symbol.for("absolutejs.streamingSlotRegistrar");
 var STREAMING_SLOT_WARNING_STORAGE_KEY = Symbol.for("absolutejs.streamingSlotWarningController");
 var STREAMING_SLOT_COLLECTION_STORAGE_KEY = Symbol.for("absolutejs.streamingSlotCollectionController");
@@ -48,7 +48,7 @@ var warnMissingStreamingSlotCollector = (primitiveName) => {
   getWarningController()?.maybeWarn(primitiveName);
 };
 
-// .angular-partial-tmp-gW9hwe/src/core/streamingSlotRegistry.ts
+// .angular-partial-tmp-fjProX/src/core/streamingSlotRegistry.ts
 var STREAMING_SLOT_STORAGE_KEY = Symbol.for("absolutejs.streamingSlotAsyncLocalStorage");
 var isObjectRecord2 = (value) => Boolean(value) && typeof value === "object";
 var isAsyncLocalStorage = (value) => isObjectRecord2(value) && ("getStore" in value) && typeof value.getStore === "function" && ("run" in value) && typeof value.run === "function";

package/dist/cli/index.js

@@ -4791,6 +4791,45 @@ var developmentTeamArgument = (value) => {
     return entry.isDirectory() ? findByExtension(path, extension) : undefined;
   }));
   return matches.find((match) => match !== undefined);
+}, findAllByExtension = async (root, extension, options = {}) => {
+  if (!await pathExists3(root))
+    return [];
+  const entries = await readdir3(root, { withFileTypes: true });
+  const matches = await Promise.all(entries.map(async (entry) => {
+    const path = join13(root, entry.name);
+    if (entry.name.endsWith(extension))
+      return [path];
+    if (!entry.isDirectory() || options.excludedDirectories?.has(entry.name))
+      return [];
+    return findAllByExtension(path, extension, options);
+  }));
+  return matches.flat().sort();
+}, resolveAbsoluteIosXcodeProject = async (nativeDirectory, options = {}) => {
+  const requestedWorkspace = options.workspacePath ? resolve9(nativeDirectory, options.workspacePath) : undefined;
+  if (requestedWorkspace) {
+    const requestedRelative = relative5(nativeDirectory, requestedWorkspace);
+    if (requestedRelative === ".." || requestedRelative.startsWith(`..${sep3}`) || isAbsolute2(requestedRelative))
+      throw new TypeError("iOS release workspacePath must remain inside the native iOS project.");
+  }
+  const workspaces = requestedWorkspace ? [requestedWorkspace] : await findAllByExtension(nativeDirectory, ".xcworkspace", {
+    excludedDirectories: new Set(["Pods", "DerivedData", "build"])
+  });
+  if (workspaces.length !== 1)
+    throw new TypeError(workspaces.length > 1 ? `iOS release found multiple Xcode workspaces: ${workspaces.map((path) => relative5(nativeDirectory, path)).join(", ")}. Pass an explicit workspacePath.` : "iOS release could not find an Xcode workspace.");
+  const [workspacePath] = workspaces;
+  if (!workspacePath || !await pathExists3(workspacePath))
+    throw new TypeError("iOS release could not find an Xcode workspace.");
+  if (options.scheme)
+    return { scheme: options.scheme, workspacePath };
+  const schemeFiles = await findAllByExtension(nativeDirectory, ".xcscheme", {
+    excludedDirectories: new Set(["Pods", "DerivedData", "build"])
+  });
+  const schemes = [
+    ...new Set(schemeFiles.map((path) => path.slice(path.lastIndexOf(sep3) + 1, -".xcscheme".length)))
+  ];
+  if (schemes.length !== 1 || !schemes[0])
+    throw new TypeError(schemes.length > 1 ? `iOS release found multiple shared Xcode schemes: ${schemes.join(", ")}. Pass an explicit scheme.` : "iOS release could not find a shared Xcode scheme.");
+  return { scheme: schemes[0], workspacePath };
 }, exportOptions = () => `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0"><dict>
@@ -4857,6 +4896,10 @@ var developmentTeamArgument = (value) => {
   if (manifest.appId !== options.config.appId)
     throw new TypeError("Embedded mobile manifest appId does not match mobile.appId.");
   const nativeDirectory = join13(options.config.nativeProjectDirectory, "ios");
+  const xcode = await resolveAbsoluteIosXcodeProject(nativeDirectory, {
+    scheme: options.scheme,
+    workspacePath: options.workspacePath
+  });
   let buildNumber = requireBuildNumber(options.buildNumber);
   if (options.prepareBuildNumber) {
     const nativeFingerprint = await fingerprintAbsoluteIosNativeProject(nativeDirectory);
@@ -4882,9 +4925,9 @@ var developmentTeamArgument = (value) => {
     const archiveExit = await run([
       "xcodebuild",
       "-workspace",
-      join13(nativeDirectory, "App", "App.xcworkspace"),
+      xcode.workspacePath,
       "-scheme",
-      "App",
+      xcode.scheme,
       "-configuration",
       "Release",
       "-destination",
@@ -4893,7 +4936,7 @@ var developmentTeamArgument = (value) => {
       archivePath,
       ...versionArguments,
       "archive"
-    ], { cwd: nativeDirectory });
+    ], { cwd: nativeDirectory, env: options.env });
     if (archiveExit !== 0)
       throw new TypeError("Xcode failed to archive the iOS app.");
     const archivedApp = await findByExtension(join13(archivePath, "Products", "Applications"), ".app");
@@ -4916,7 +4959,7 @@ var developmentTeamArgument = (value) => {
       exportPath,
       "-exportOptionsPlist",
       exportPlist
-    ], { cwd: nativeDirectory });
+    ], { cwd: nativeDirectory, env: options.env });
     if (exportExit !== 0)
       throw new TypeError("Xcode failed to export the App Store IPA.");
     const artifactPath = await findByExtension(exportPath, ".ipa");
@@ -4932,7 +4975,7 @@ var developmentTeamArgument = (value) => {
       appId: manifest.appId,
       ...buildNumber === undefined ? {} : { buildNumber },
       bytes,
-      engine: "capacitor",
+      engine: options.config.engine,
       format: 1,
       marketingVersion,
       platform: "ios",
@@ -19888,8 +19931,8 @@ var ABSOLUTE_MOBILE_COMPLIANCE_REPORT_FORMAT = 1, HMR_ASSET_PATTERN, RELEASE_ASS
     if (!isRecord14(root.expo))
       throw new TypeError("Generated Expo application config is invalid.");
     const { expo } = root;
-    if (expo.name !== config.appName || !isRecord14(expo.android) || expo.android.package !== config.appId) {
-      throw new TypeError("Generated Expo Android identity does not match mobile config.");
+    if (expo.name !== config.appName || config.platforms.includes("android") && (!isRecord14(expo.android) || expo.android.package !== config.appId) || config.platforms.includes("ios") && (!isRecord14(expo.ios) || expo.ios.bundleIdentifier !== config.appId)) {
+      throw new TypeError("Generated Expo application identity does not match mobile config.");
     }
     if (!isRecord14(expo.runtimeVersion) || expo.runtimeVersion.policy !== "appVersion") {
       throw new TypeError("Generated Expo runtimeVersion must follow the native app version.");
@@ -19899,7 +19942,7 @@ var ABSOLUTE_MOBILE_COMPLIANCE_REPORT_FORMAT = 1, HMR_ASSET_PATTERN, RELEASE_ASS
     }
     return pass("expo.app-config", "Expo application identity and runtime policy match the production mobile config.", path);
   } catch (error) {
-    return fail5("expo.app-config", error instanceof Error ? error.message : "Generated Expo application config could not be validated.", path, "Run `absolute mobile build android`; do not edit the generated Expo project.");
+    return fail5("expo.app-config", error instanceof Error ? error.message : "Generated Expo application config could not be validated.", path, "Run `absolute mobile build <platform>`; do not edit the generated Expo project.");
   }
 }, expoEmbeddedAssetsCheck = async (config) => {
   const generated = join52(config.nativeProjectDirectory, "src", "generated", "webAssets.ts");
@@ -19936,7 +19979,7 @@ var ABSOLUTE_MOBILE_COMPLIANCE_REPORT_FORMAT = 1, HMR_ASSET_PATTERN, RELEASE_ASS
       throw new TypeError("Generated Expo asset bytes differ from the prepared mobile bundle.");
     return pass("expo.bundle-projection", `Expo embeds the complete signed mobile bundle as ${embeddedFiles.length} opaque asset(s).`, generated);
   } catch (error) {
-    return fail5("expo.bundle-projection", error instanceof Error ? error.message : "Generated Expo assets could not be validated.", generated, "Run `absolute mobile build android` to regenerate and verify the production asset projection.");
+    return fail5("expo.bundle-projection", error instanceof Error ? error.message : "Generated Expo assets could not be validated.", generated, "Run `absolute mobile build <platform>` to regenerate and verify the production asset projection.");
   }
 }, sourceFiles = async (root, extensions) => {
   if (!await pathExists6(root))
@@ -19978,15 +20021,16 @@ var ABSOLUTE_MOBILE_COMPLIANCE_REPORT_FORMAT = 1, HMR_ASSET_PATTERN, RELEASE_ASS
     return fail5("android.deep-links", error instanceof Error ? error.message : "Android deep-link projection could not be validated.", manifestPath, "Run `absolute mobile sync android` and review the AbsoluteJS-owned deep-link region.");
   }
 }, iosNativeSecurityCheck = async (iosRoot) => {
-  const entitlementsPath = join52(iosRoot, "App/AbsoluteJS.entitlements");
-  const entitlements = await readFile18(entitlementsPath, "utf8").catch(() => "");
-  if (/<key>get-task-allow<\/key>\s*<true\s*\/>/u.test(entitlements) || /<key>com\.apple\.security\.get-task-allow<\/key>\s*<true\s*\/>/u.test(entitlements))
-    return fail5("ios.native-debugging", "iOS source entitlements explicitly permit debugger attachment.", entitlementsPath, "Remove get-task-allow from source entitlements; Xcode supplies development entitlements only to debug builds.");
-  const sources = await sourceFiles(join52(iosRoot, "App"), new Set([".m", ".mm", ".swift"]));
+  const applicationFiles = async (extensions) => (await sourceFiles(iosRoot, extensions)).filter((path) => !relative26(iosRoot, path).split(/[\\/]/u).some((part) => ["Pods", "DerivedData", "build"].includes(part)));
+  const entitlementPaths = await applicationFiles(new Set([".entitlements"]));
+  const unsafeEntitlements = await containsPattern(entitlementPaths, /<key>(?:com\.apple\.security\.)?get-task-allow<\/key>\s*<true\s*\/>/u);
+  if (unsafeEntitlements)
+    return fail5("ios.native-debugging", "iOS source entitlements explicitly permit debugger attachment.", unsafeEntitlements, "Remove get-task-allow from source entitlements; Xcode supplies development entitlements only to debug builds.");
+  const sources = await applicationFiles(new Set([".m", ".mm", ".swift"]));
   const debugSource = await containsPattern(sources, /\.isInspectable\s*=\s*true|setInspectable\s*\(\s*true\s*\)/u);
   if (debugSource)
     return fail5("ios.native-debugging", "iOS application source unconditionally enables WebView inspection.", debugSource, "Remove unconditional WebView inspection from release source.");
-  return pass("ios.native-debugging", "iOS source does not enable release debugger attachment or WebView inspection.", entitlementsPath);
+  return pass("ios.native-debugging", "iOS source does not enable release debugger attachment or WebView inspection.", entitlementPaths[0] ?? iosRoot);
 }, iosDeepLinkProjectionCheck = async (config, iosRoot) => {
   const infoPath = join52(iosRoot, "App/App/Info.plist");
   const entitlementsPath = join52(iosRoot, "App/AbsoluteJS.entitlements");
@@ -20041,15 +20085,43 @@ var ABSOLUTE_MOBILE_COMPLIANCE_REPORT_FORMAT = 1, HMR_ASSET_PATTERN, RELEASE_ASS
 }, iosDevicePermissionCheck = async (config, purposes) => {
   if (!config.platforms.includes("ios") || purposes.length === 0)
     return;
-  const path = join52(config.nativeProjectDirectory, "ios/App/App/Info.plist");
+  const iosRoot = join52(config.nativeProjectDirectory, "ios");
+  const path = config.engine === "expo" ? await uniqueExpoIosFile(iosRoot, "**/Info.plist", "Info.plist") : join52(iosRoot, "App/App/Info.plist");
   const source = await readFile18(path, "utf8");
   const missing = purposes.filter((purpose) => !source.includes(`<key>${IOS_USAGE_KEYS[purpose]}</key>`));
   if (missing.length === 0)
     return;
   return fail5("mobile.device-capabilities", `iOS is missing usage descriptions for: ${missing.join(", ")}.`, path, "Run `absolute mobile sync ios` to regenerate detected device usage descriptions.");
+}, expoIosPrivacyCapabilityCheck = async (iosRoot, project, requirements) => {
+  if (requirements.iosPrivacyAccessedApis.length === 0)
+    return;
+  const privacyPath = await uniqueExpoIosFile(iosRoot, "**/PrivacyInfo.xcprivacy", "privacy manifest");
+  const privacy = await readFile18(privacyPath, "utf8");
+  const missing = requirements.iosPrivacyAccessedApis.some(({ api, reasons }) => !privacy.includes(`<string>${api}</string>`) || reasons.some((reason) => !privacy.includes(`<string>${reason}</string>`)));
+  if (!missing && project.includes(privacyPath.split(/[\\/]/u).at(-1) ?? ""))
+    return;
+  return fail5("mobile.device-capabilities", "Expo iOS privacy manifest or target membership does not match detected capabilities.", privacyPath, "Run `absolute mobile build ios` to regenerate detected Expo privacy declarations.");
+}, expoIosPushCapabilityCheck = async (iosRoot, requirements) => {
+  if (!requirements.iosPushNotifications)
+    return;
+  const entitlementsPath = await uniqueExpoIosFile(iosRoot, "**/*.entitlements", "entitlements");
+  const entitlements = await readFile18(entitlementsPath, "utf8");
+  if (entitlements.includes("<key>aps-environment</key>"))
+    return;
+  return fail5("mobile.device-capabilities", "Expo iOS push entitlement does not match detected capabilities.", entitlementsPath, "Run `absolute mobile build ios` to regenerate native push integration.");
+}, expoIosCapabilityProjectionCheck = async (config, requirements) => {
+  const iosRoot = join52(config.nativeProjectDirectory, "ios");
+  const projectPath = await uniqueExpoIosFile(iosRoot, "**/*.xcodeproj/project.pbxproj", "Xcode project");
+  const project = await readFile18(projectPath, "utf8");
+  const privacy = await expoIosPrivacyCapabilityCheck(iosRoot, project, requirements);
+  if (privacy)
+    return privacy;
+  return expoIosPushCapabilityCheck(iosRoot, requirements);
 }, iosCapabilityProjectionCheck = async (config, requirements) => {
   if (!config.platforms.includes("ios"))
     return;
+  if (config.engine === "expo")
+    return expoIosCapabilityProjectionCheck(config, requirements);
   const appRoot = join52(config.nativeProjectDirectory, "ios/App/App");
   const infoPath = join52(appRoot, "Info.plist");
   const info2 = await readFile18(infoPath, "utf8").catch(() => "");
@@ -20151,6 +20223,58 @@ var ABSOLUTE_MOBILE_COMPLIANCE_REPORT_FORMAT = 1, HMR_ASSET_PATTERN, RELEASE_ASS
     ...check2,
     path: check2.path ? relative26(projectRoot, check2.path).replaceAll("\\", "/") || "." : undefined
   }));
+}, uniqueExpoIosFile = async (iosRoot, pattern, label) => {
+  const paths = (await Array.fromAsync(new Bun.Glob(pattern).scan({ cwd: iosRoot, onlyFiles: true }))).filter((path2) => !path2.split(/[\\/]/u).some((part) => ["Pods", "DerivedData", "build"].includes(part)));
+  if (paths.length !== 1)
+    throw new TypeError(paths.length === 0 ? `Generated Expo iOS project is missing its ${label}.` : `Generated Expo iOS project contains ambiguous ${label} files.`);
+  const [path] = paths;
+  if (!path)
+    throw new TypeError(`Generated Expo iOS project is missing its ${label}.`);
+  return join52(iosRoot, path);
+}, expoIosNativeProjectionCheck = async (config, iosRoot) => {
+  try {
+    const [infoPath, entitlementsPath, projectPath] = await Promise.all([
+      uniqueExpoIosFile(iosRoot, "**/Info.plist", "Info.plist"),
+      uniqueExpoIosFile(iosRoot, "**/*.entitlements", "entitlements"),
+      uniqueExpoIosFile(iosRoot, "**/*.xcodeproj/project.pbxproj", "Xcode project")
+    ]);
+    const [info2, entitlements, project] = await Promise.all([
+      readFile18(infoPath, "utf8"),
+      readFile18(entitlementsPath, "utf8"),
+      readFile18(projectPath, "utf8")
+    ]);
+    if (/<key>NSAllowsArbitraryLoads<\/key>\s*<true\s*\/>/u.test(info2))
+      throw new TypeError("Expo iOS App Transport Security permits arbitrary network loads.");
+    if (config.deepLinkScheme && (!info2.includes("<key>CFBundleURLTypes</key>") || !info2.includes(`<string>${config.deepLinkScheme}</string>`)))
+      throw new TypeError("Expo iOS custom URL scheme does not match mobile config.");
+    if (config.deepLinkHosts.some((host2) => !entitlements.includes(`<string>applinks:${host2}</string>`)))
+      throw new TypeError("Expo iOS associated domains do not match mobile config.");
+    if (!project.includes(entitlementsPath.split(/[\\/]/u).at(-1) ?? ""))
+      throw new TypeError("Expo iOS target does not sign its generated entitlements file.");
+    return pass("ios.expo-native-projection", "Expo iOS transport security, URL schemes, universal links, and signed entitlements match mobile config.", entitlementsPath);
+  } catch (error) {
+    return fail5("ios.expo-native-projection", error instanceof Error ? error.message : "Expo iOS native projection could not be validated.", iosRoot, "Run `absolute mobile build ios` to regenerate the production Expo CNG project.");
+  }
+}, inspectExpoIosRelease = async (config, projectRoot) => {
+  const iosRoot = join52(config.nativeProjectDirectory, "ios");
+  const journalPath = join52(projectRoot, ".absolutejs", "mobile", "expo-dev-session", "journal.json");
+  const checks = [
+    await journalReleaseCheck(journalPath, "ios")
+  ];
+  checks.push(config.iosVersion ? pass("ios.marketing-version", `The iOS marketing version is ${config.iosVersion}.`) : fail5("ios.marketing-version", "iOS has no explicit App Store marketing version.", projectRoot, "Add mobile.ios.version to absolutejs.config.ts, for example 1.0.0."));
+  checks.push(...await Promise.all([
+    expoApplicationConfigCheck(config),
+    expoEmbeddedAssetsCheck(config),
+    hmrAssetsReleaseCheck(config.bundleDirectory),
+    embeddedBundleReleaseCheck(config, projectRoot, "ios", config.bundleDirectory),
+    contentSecurityPolicyCheck(config, "ios", config.bundleDirectory),
+    expoIosNativeProjectionCheck(config, iosRoot),
+    iosNativeSecurityCheck(iosRoot)
+  ]));
+  return checks.map((check2) => ({
+    ...check2,
+    path: check2.path ? relative26(projectRoot, check2.path).replaceAll("\\", "/") || "." : undefined
+  }));
 }, inspectIosRelease = async (config, projectRoot) => {
   const iosAppRoot = join52(config.nativeProjectDirectory, "ios", "App", "App");
   const nativeConfigPath = join52(iosAppRoot, "capacitor.config.json");
@@ -20219,9 +20343,7 @@ var ABSOLUTE_MOBILE_COMPLIANCE_REPORT_FORMAT = 1, HMR_ASSET_PATTERN, RELEASE_ASS
   if (config.platforms.includes("android"))
     checks.push(...config.engine === "expo" ? await inspectExpoAndroidRelease(config, projectRoot) : await inspectAndroidRelease(config, projectRoot));
   if (config.platforms.includes("ios"))
-    checks.push(...config.engine === "expo" ? [
-      fail5("expo.ios-release", "Expo iOS production release automation is not implemented yet.", config.nativeProjectDirectory, "Build Android independently or wait for the Expo iOS signing checkpoint.")
-    ] : await inspectIosRelease(config, projectRoot));
+    checks.push(...config.engine === "expo" ? await inspectExpoIosRelease(config, projectRoot) : await inspectIosRelease(config, projectRoot));
   const syncSchema = syncSchemaReleaseCheck(projectRoot);
   if (syncSchema) {
     checks.push({
@@ -21545,10 +21667,8 @@ ${releaseAuditSteps("ios")}
   ...custom
 ], createAbsoluteMobileGithubWorkflow = (options) => {
   const platforms = [
-    ...options.config.engine === "expo" ? options.config.platforms.filter((platform6) => platform6 === "android") : options.config.platforms
+    ...options.config.platforms
   ].sort();
-  if (platforms.length === 0)
-    throw new TypeError("Generated Expo production CI currently requires android in mobile.platforms; Expo iOS release automation is the next checkpoint.");
   const includePublishing = options.includePublishing === true;
   const customSecrets = normalizeSecretEnvironment(options.secretEnvironment);
   const serverEntry = projectPath(options.projectRoot, options.serverEntry ?? "server.ts", "mobile ci github server entry");
@@ -21746,13 +21866,13 @@ var NOT_FOUND4 = -1, isRecord17 = (value) => typeof value === "object" && value
   }
 }, runCapacitor = async (projectRoot, args) => {
   const executable = await capacitorExecutable(projectRoot);
-  const subprocess = Bun.spawn([executable, ...args], {
+  const process2 = Bun.spawn([executable, ...args], {
     cwd: projectRoot,
     stderr: "inherit",
     stdin: "inherit",
     stdout: "inherit"
   });
-  const exitCode = await subprocess.exited;
+  const exitCode = await process2.exited;
   if (exitCode !== 0) {
     throw new TypeError(`Capacitor exited with status ${exitCode}.`);
   }
@@ -22233,7 +22353,18 @@ Mobile release security and compliance checks failed.`);
   await ensureExpoPackages(mobile.nativeProjectDirectory, [...args, "--yes"]);
   await syncAbsoluteExpoWebAssets(mobile);
   await runExpo(mobile.nativeProjectDirectory, ["prebuild", "--clean", "--no-install", "--platform", "android"], { production: true });
-}, prepareCapacitorAndroidReleaseProject = async (mobile, projectRoot) => {
+}, prepareExpoIosReleaseProject = async (mobile, projectRoot, args) => {
+  await writeAbsoluteExpoProject(mobile, { projectRoot });
+  await ensureExpoPackages(mobile.nativeProjectDirectory, [...args, "--yes"]);
+  await syncAbsoluteExpoWebAssets(mobile);
+  await runExpo(mobile.nativeProjectDirectory, ["prebuild", "--clean", "--no-install", "--platform", "ios"], { production: true });
+}, prepareCapacitorIosReleaseProject = async (mobile, projectRoot) => {
+  await writeAbsoluteCapacitorConfig(mobile, { projectRoot });
+  await runCapacitorForPlatforms(projectRoot, "sync", ["ios"]);
+  await applyAbsoluteNativeDeepLinks(mobile, ["ios"]);
+  await applyAbsoluteNativeDeviceCapabilities(projectRoot, mobile, ["ios"]);
+  await applyAbsoluteNativeBackgroundSync(projectRoot, mobile, ["ios"]);
+}, prepareIosReleaseProject = (mobile, projectRoot, args) => mobile.engine === "expo" ? prepareExpoIosReleaseProject(mobile, projectRoot, args) : prepareCapacitorIosReleaseProject(mobile, projectRoot), prepareCapacitorAndroidReleaseProject = async (mobile, projectRoot) => {
   await writeAbsoluteCapacitorConfig(mobile, { projectRoot });
   await runCapacitorForPlatforms(projectRoot, "sync", ["android"]);
   await applyAbsoluteNativeDeepLinks(mobile, ["android"]);
@@ -22319,7 +22450,7 @@ Mobile release security and compliance checks failed.`);
   } finally {
     sendTelemetryEvent("mobile:android-release-publish", {
       durationMs: Math.round(performance.now() - startedAt),
-      engine: "capacitor",
+      engine: mobile.engine,
       platform: "android",
       provider: googlePlay ? "google-play" : "registry-module",
       reused,
@@ -22344,27 +22475,22 @@ Mobile release security and compliance checks failed.`);
 }, buildIos = async (args, prepareBuildNumber) => {
   const configPath2 = valueAfter(args, "--config");
   const { mobile, projectRoot } = await loadMobile(configPath2);
-  requireCapacitorEngine(mobile, "mobile build ios");
   if (!mobile.platforms.includes("ios")) {
     throw new TypeError("mobile build ios requires ios in mobile.platforms.");
   }
   const startedAt = performance.now();
   let success = false;
   try {
-    await repairAbsoluteIosDevSession(projectRoot);
+    if (mobile.engine === "capacitor")
+      await repairAbsoluteIosDevSession(projectRoot);
     await start(mobileBuildServerEntry(args), valueAfter(args, "--web-outdir"), configPath2, { prepareOnly: true });
-    await writeAbsoluteCapacitorConfig(mobile, { projectRoot });
-    await runCapacitorForPlatforms(projectRoot, "sync", ["ios"]);
-    await applyAbsoluteNativeDeepLinks(mobile, ["ios"]);
-    await applyAbsoluteNativeDeviceCapabilities(projectRoot, mobile, [
-      "ios"
-    ]);
-    await applyAbsoluteNativeBackgroundSync(projectRoot, mobile, ["ios"]);
+    await prepareIosReleaseProject(mobile, projectRoot, args);
     await requireIosReleaseReady(mobile, projectRoot);
     const release = await buildAbsoluteIosRelease({
       allowUnsigned: args.includes("--unsigned"),
       config: mobile,
       developmentTeam: process.env.ABSOLUTE_IOS_DEVELOPMENT_TEAM,
+      ...mobile.engine === "expo" ? { env: expoProductionEnvironment() } : {},
       outputDirectory: valueAfter(args, "--outdir"),
       ...prepareBuildNumber === undefined ? {} : { prepareBuildNumber },
       projectRoot
@@ -22378,7 +22504,7 @@ Mobile release security and compliance checks failed.`);
   } finally {
     sendTelemetryEvent("mobile:ios-release-build", {
       durationMs: Math.round(performance.now() - startedAt),
-      engine: "capacitor",
+      engine: mobile.engine,
       platform: "ios",
       success,
       type: "ipa",
@@ -22391,7 +22517,6 @@ Mobile release security and compliance checks failed.`);
   const configPath2 = valueAfter(args, "--config");
   const appStoreConnect = appStoreConnectTarget(args);
   const { mobile, projectRoot } = await loadMobile(configPath2);
-  requireCapacitorEngine(mobile, "mobile publish ios");
   const startedAt = performance.now();
   let reused = false;
   let success = false;
@@ -22427,7 +22552,7 @@ Mobile release security and compliance checks failed.`);
   } finally {
     sendTelemetryEvent("mobile:ios-release-publish", {
       durationMs: Math.round(performance.now() - startedAt),
-      engine: "capacitor",
+      engine: mobile.engine,
       platform: "ios",
       provider: appStoreConnect ? "app-store-connect" : "registry-module",
       reused,

package/dist/mobile/index.js

@@ -2649,6 +2649,47 @@ var findByExtension = async (root, extension) => {
   }));
   return matches.find((match) => match !== undefined);
 };
+var findAllByExtension = async (root, extension, options = {}) => {
+  if (!await pathExists4(root))
+    return [];
+  const entries = await readdir3(root, { withFileTypes: true });
+  const matches = await Promise.all(entries.map(async (entry) => {
+    const path = join5(root, entry.name);
+    if (entry.name.endsWith(extension))
+      return [path];
+    if (!entry.isDirectory() || options.excludedDirectories?.has(entry.name))
+      return [];
+    return findAllByExtension(path, extension, options);
+  }));
+  return matches.flat().sort();
+};
+var resolveAbsoluteIosXcodeProject = async (nativeDirectory, options = {}) => {
+  const requestedWorkspace = options.workspacePath ? resolve4(nativeDirectory, options.workspacePath) : undefined;
+  if (requestedWorkspace) {
+    const requestedRelative = relative4(nativeDirectory, requestedWorkspace);
+    if (requestedRelative === ".." || requestedRelative.startsWith(`..${sep3}`) || isAbsolute3(requestedRelative))
+      throw new TypeError("iOS release workspacePath must remain inside the native iOS project.");
+  }
+  const workspaces = requestedWorkspace ? [requestedWorkspace] : await findAllByExtension(nativeDirectory, ".xcworkspace", {
+    excludedDirectories: new Set(["Pods", "DerivedData", "build"])
+  });
+  if (workspaces.length !== 1)
+    throw new TypeError(workspaces.length > 1 ? `iOS release found multiple Xcode workspaces: ${workspaces.map((path) => relative4(nativeDirectory, path)).join(", ")}. Pass an explicit workspacePath.` : "iOS release could not find an Xcode workspace.");
+  const [workspacePath] = workspaces;
+  if (!workspacePath || !await pathExists4(workspacePath))
+    throw new TypeError("iOS release could not find an Xcode workspace.");
+  if (options.scheme)
+    return { scheme: options.scheme, workspacePath };
+  const schemeFiles = await findAllByExtension(nativeDirectory, ".xcscheme", {
+    excludedDirectories: new Set(["Pods", "DerivedData", "build"])
+  });
+  const schemes = [
+    ...new Set(schemeFiles.map((path) => path.slice(path.lastIndexOf(sep3) + 1, -".xcscheme".length)))
+  ];
+  if (schemes.length !== 1 || !schemes[0])
+    throw new TypeError(schemes.length > 1 ? `iOS release found multiple shared Xcode schemes: ${schemes.join(", ")}. Pass an explicit scheme.` : "iOS release could not find a shared Xcode scheme.");
+  return { scheme: schemes[0], workspacePath };
+};
 var exportOptions = () => `<?xml version="1.0" encoding="UTF-8"?>
 <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 <plist version="1.0"><dict>
@@ -2718,6 +2759,10 @@ var buildAbsoluteIosRelease = async (options) => {
   if (manifest.appId !== options.config.appId)
     throw new TypeError("Embedded mobile manifest appId does not match mobile.appId.");
   const nativeDirectory = join5(options.config.nativeProjectDirectory, "ios");
+  const xcode = await resolveAbsoluteIosXcodeProject(nativeDirectory, {
+    scheme: options.scheme,
+    workspacePath: options.workspacePath
+  });
   let buildNumber = requireBuildNumber(options.buildNumber);
   if (options.prepareBuildNumber) {
     const nativeFingerprint = await fingerprintAbsoluteIosNativeProject(nativeDirectory);
@@ -2743,9 +2788,9 @@ var buildAbsoluteIosRelease = async (options) => {
     const archiveExit = await run([
       "xcodebuild",
       "-workspace",
-      join5(nativeDirectory, "App", "App.xcworkspace"),
+      xcode.workspacePath,
       "-scheme",
-      "App",
+      xcode.scheme,
       "-configuration",
       "Release",
       "-destination",
@@ -2754,7 +2799,7 @@ var buildAbsoluteIosRelease = async (options) => {
       archivePath,
       ...versionArguments,
       "archive"
-    ], { cwd: nativeDirectory });
+    ], { cwd: nativeDirectory, env: options.env });
     if (archiveExit !== 0)
       throw new TypeError("Xcode failed to archive the iOS app.");
     const archivedApp = await findByExtension(join5(archivePath, "Products", "Applications"), ".app");
@@ -2777,7 +2822,7 @@ var buildAbsoluteIosRelease = async (options) => {
       exportPath,
       "-exportOptionsPlist",
       exportPlist
-    ], { cwd: nativeDirectory });
+    ], { cwd: nativeDirectory, env: options.env });
     if (exportExit !== 0)
       throw new TypeError("Xcode failed to export the App Store IPA.");
     const artifactPath = await findByExtension(exportPath, ".ipa");
@@ -2793,7 +2838,7 @@ var buildAbsoluteIosRelease = async (options) => {
       appId: manifest.appId,
       ...buildNumber === undefined ? {} : { buildNumber },
       bytes,
-      engine: "capacitor",
+      engine: options.config.engine,
       format: 1,
       marketingVersion,
       platform: "ios",
@@ -8706,10 +8751,8 @@ var requiredSecrets = (platforms, includePublishing, custom) => [
 ];
 var createAbsoluteMobileGithubWorkflow = (options) => {
   const platforms = [
-    ...options.config.engine === "expo" ? options.config.platforms.filter((platform) => platform === "android") : options.config.platforms
+    ...options.config.platforms
   ].sort();
-  if (platforms.length === 0)
-    throw new TypeError("Generated Expo production CI currently requires android in mobile.platforms; Expo iOS release automation is the next checkpoint.");
   const includePublishing = options.includePublishing === true;
   const customSecrets = normalizeSecretEnvironment(options.secretEnvironment);
   const serverEntry = projectPath(options.projectRoot, options.serverEntry ?? "server.ts", "mobile ci github server entry");
@@ -10487,6 +10530,7 @@ export {
   removeAbsoluteRemoteMacProfile,
   repairAbsoluteIosDevSession,
   resolveAbsoluteDeviceCapabilityPlan,
+  resolveAbsoluteIosXcodeProject,
   resolveAbsoluteMobileAuthManifest,
   resolveAbsoluteMobileCompatibilityRelease,
   resolveAbsoluteMobileDeepLink,
@@ -10515,5 +10559,5 @@ export {
   writeAbsoluteMobileGithubWorkflow
 };
 
-//# debugId=9EFFDF4D91097A2464756E2164756E21
+//# debugId=25517EB0CBB1387F64756E2164756E21
 //# sourceMappingURL=index.js.map