@absolutejs/absolute 0.20.0-beta.60 → 0.20.0-beta.61

package/dist/cli/index.js

@@ -719,7 +719,7 @@ var init_portScan = () => {};
 // src/mobile/config.ts
 import { resolve as resolve2 } from "path";
 import { createPublicKey } from "crypto";
-var APP_ID_PATTERN, SCHEME_PATTERN, APPLE_APP_ID_PREFIX_PATTERN, CERTIFICATE_FINGERPRINT_PATTERN, UPDATE_NAME_PATTERN, UPDATE_PUBLIC_KEY_PATTERN, HOSTNAME_PATTERN, EXPO_RESERVED_ROUTE_PREFIXES, resolveProjectPath = (projectRoot, value, field) => {
+var APP_ID_PATTERN, SCHEME_PATTERN, APPLE_APP_ID_PREFIX_PATTERN, CERTIFICATE_FINGERPRINT_PATTERN, UPDATE_NAME_PATTERN, UPDATE_PUBLIC_KEY_PATTERN, DEFAULT_UPDATE_BOOT_TIMEOUT_MS = 20000, MINIMUM_UPDATE_BOOT_TIMEOUT_MS = 5000, MAXIMUM_UPDATE_BOOT_TIMEOUT_MS = 120000, HOSTNAME_PATTERN, EXPO_RESERVED_ROUTE_PREFIXES, resolveProjectPath = (projectRoot, value, field) => {
   const root = resolve2(projectRoot);
   const path = resolve2(root, value);
   if (path !== root && !path.startsWith(`${root}/`)) {
@@ -795,6 +795,9 @@ var APP_ID_PATTERN, SCHEME_PATTERN, APPLE_APP_ID_PREFIX_PATTERN, CERTIFICATE_FIN
 ].sort(), normalizeUpdates = (config, productionOrigin) => {
   if (!config.updates)
     return;
+  const bootTimeoutMs = config.updates.bootTimeoutMs ?? DEFAULT_UPDATE_BOOT_TIMEOUT_MS;
+  if (!Number.isSafeInteger(bootTimeoutMs) || bootTimeoutMs < MINIMUM_UPDATE_BOOT_TIMEOUT_MS || bootTimeoutMs > MAXIMUM_UPDATE_BOOT_TIMEOUT_MS)
+    throw new TypeError("mobile.updates.bootTimeoutMs must be an integer from 5000 through 120000.");
   const channel = requireText(config.updates.channel ?? "production", "mobile.updates.channel");
   if (!UPDATE_NAME_PATTERN.test(channel))
     throw new TypeError("mobile.updates.channel contains unsupported characters.");
@@ -836,7 +839,12 @@ var APP_ID_PATTERN, SCHEME_PATTERN, APPLE_APP_ID_PREFIX_PATTERN, CERTIFICATE_FIN
       throw new TypeError(`mobile.updates.publicKeys.${keyId} is not an ECDSA P-256 SPKI public key.`);
     return [keyId, normalized];
   }));
-  return { channel, manifestUrl: manifestUrl.href, publicKeys };
+  return {
+    bootTimeoutMs,
+    channel,
+    manifestUrl: manifestUrl.href,
+    publicKeys
+  };
 }, validateExpoNativeRouteSegment = (path, segment, index, count, parameters) => {
   if (segment === "*" && (index !== count - 1 || count === 1)) {
     throw new TypeError(`mobile.routes.native route ${path} must use * once, as the final segment after a static or parameterized prefix.`);
@@ -9660,7 +9668,7 @@ var init_updateProtocol = __esm(() => {
 
 // src/mobile/updateRuntime.ts
 import { createHash as createHash12 } from "crypto";
-var ABSOLUTE_MOBILE_SHELL_ABI = 1, ABSOLUTE_MOBILE_UPDATE_RUNTIME_FORMAT = 1, createAbsoluteMobileUpdateRuntimeDescriptor = (options) => ({
+var ABSOLUTE_MOBILE_SHELL_ABI = 2, ABSOLUTE_MOBILE_UPDATE_RUNTIME_FORMAT = 1, createAbsoluteMobileUpdateRuntimeDescriptor = (options) => ({
   appId: options.config.appId,
   auth: options.auth ?? null,
   deepLinks: {
@@ -19664,70 +19672,490 @@ var init_nativeBackgroundSync = __esm(() => {
 });
 
 // src/mobile/nativeUpdates.ts
-import { readFile as readFile16, rename as rename12, writeFile as writeFile13 } from "fs/promises";
-import { join as join51 } from "path";
-var START = "// absolutejs:mobile-updates:start", END = "// absolutejs:mobile-updates:end", writeChanged2 = async (path, source) => {
-  const current = await readFile16(path, "utf8");
+import {
+  mkdir as mkdir11,
+  readFile as readFile16,
+  readdir as readdir5,
+  rename as rename12,
+  rm as rm9,
+  writeFile as writeFile13
+} from "fs/promises";
+import { dirname as dirname29, join as join51 } from "path";
+var START = "// absolutejs:mobile-updates:start", END = "// absolutejs:mobile-updates:end", PLUGIN_START = "// absolutejs:mobile-update-plugin:start", PLUGIN_END = "// absolutejs:mobile-update-plugin:end", ANDROID_PLUGIN = "AbsoluteMobileUpdateWatchdogPlugin.java", optionalSource2 = async (path) => {
+  try {
+    return await readFile16(path, "utf8");
+  } catch (error) {
+    if (typeof error === "object" && error !== null && Reflect.get(error, "code") === "ENOENT")
+      return null;
+    throw error;
+  }
+}, isRecord14 = (value) => typeof value === "object" && value !== null && !Array.isArray(value), writeChanged2 = async (path, source) => {
+  const current = await optionalSource2(path);
   if (current === source)
     return false;
+  await mkdir11(dirname29(path), { recursive: true });
+  if (current === null) {
+    await writeFile13(path, source, { flag: "wx" });
+    return true;
+  }
   const temporary = `${path}.${crypto.randomUUID()}.tmp`;
   await writeFile13(temporary, source, { flag: "wx" });
   await rename12(temporary, path);
   return true;
-}, replaceRegion2 = (source, region) => {
-  const start2 = source.indexOf(START);
-  const end = source.indexOf(END);
-  if (start2 < 0 !== end < 0 || end < start2)
+}, removeOwnedFile = async (path) => {
+  if (await optionalSource2(path) === null)
+    return false;
+  await rm9(path);
+  return true;
+}, replaceMarkedRegion = (source, start2, end, region, insertion, error) => {
+  const existingStart = source.indexOf(start2);
+  const existingEnd = source.indexOf(end);
+  if (existingStart < 0 !== existingEnd < 0 || existingStart >= 0 && existingEnd < existingStart)
     throw new TypeError("AbsoluteJS mobile update markers are malformed.");
-  if (start2 >= 0) {
+  if (existingStart >= 0) {
     const from = source.lastIndexOf(`
-`, start2) + 1;
+`, existingStart) + 1;
     const newline = source.indexOf(`
-`, end + END.length);
+`, existingEnd + end.length);
     return `${source.slice(0, from)}${region}${source.slice(newline < 0 ? source.length : newline + 1)}`;
   }
   if (!region)
     return source;
+  if (insertion < 0)
+    throw new TypeError(error);
+  return `${source.slice(0, insertion)}${region}${source.slice(insertion)}`;
+}, iosPluginRegion = (timeoutMs) => `${PLUGIN_START}
+@objc(AbsoluteMobileUpdateWatchdogPlugin)
+public final class AbsoluteMobileUpdateWatchdogPlugin: CAPPlugin, CAPBridgedPlugin {
+    public let identifier = "AbsoluteMobileUpdateWatchdogPlugin"
+    public let jsName = "AbsoluteMobileUpdateWatchdog"
+    public let pluginMethods: [CAPPluginMethod] = [
+        CAPPluginMethod(name: "arm", returnType: CAPPluginReturnPromise),
+        CAPPluginMethod(name: "confirm", returnType: CAPPluginReturnPromise)
+    ]
+
+    private static let stateKey = "CapacitorStorage.absolute.mobile.update.state.v1"
+    private static let releasePattern = try! NSRegularExpression(pattern: "^amu_[a-f0-9]{64}$")
+    private var deadline: DispatchWorkItem?
+
+    private static func state() -> [String: Any] {
+        guard let encoded = UserDefaults.standard.string(forKey: stateKey),
+              let data = encoded.data(using: .utf8),
+              let object = try? JSONSerialization.jsonObject(with: data),
+              let value = object as? [String: Any] else { return [:] }
+        return value
+    }
+
+    private static func write(_ state: [String: Any]) {
+        guard let data = try? JSONSerialization.data(withJSONObject: state),
+              let encoded = String(data: data, encoding: .utf8) else { return }
+        UserDefaults.standard.set(encoded, forKey: stateKey)
+    }
+
+    private static func validRelease(_ value: String) -> Bool {
+        releasePattern.firstMatch(in: value, range: NSRange(value.startIndex..., in: value)) != nil
+    }
+
+    private static func snapshotRoot() -> URL? {
+        FileManager.default.urls(for: .libraryDirectory, in: .userDomainMask).first?
+            .appendingPathComponent("NoCloud/ionic_built_snapshots", isDirectory: true)
+    }
+
+    @discardableResult
+    private static func recover(_ reason: String) -> (String, String?, Bool)? {
+        var value = state()
+        guard let release = value["pendingRelease"] as? String, validRelease(release) else { return nil }
+        let previous = value["previousPath"] as? String
+        let active = value["activeRelease"] as? String
+        let hasActive = active.map(validRelease) ?? false
+        let started = value["pendingStartedAt"] as? Double ?? Date().timeIntervalSince1970 * 1000
+        let duration = max(0, Date().timeIntervalSince1970 * 1000 - started)
+        value.removeValue(forKey: "pendingRelease")
+        value.removeValue(forKey: "pendingStartedAt")
+        value.removeValue(forKey: "previousPath")
+        value.removeValue(forKey: "readyRelease")
+        var quarantined = value["quarantinedReleases"] as? [String] ?? []
+        quarantined.removeAll(where: { $0 == release })
+        quarantined.append(release)
+        value["quarantinedReleases"] = Array(quarantined.suffix(8))
+        value["recovery"] = ["durationMs": duration, "reason": reason, "releaseId": release]
+        write(value)
+
+        if hasActive, let previous, let root = snapshotRoot(),
+           URL(fileURLWithPath: previous).standardizedFileURL.path.hasPrefix(root.standardizedFileURL.path + "/") {
+            UserDefaults.standard.set(previous, forKey: "serverBasePath")
+        } else {
+            UserDefaults.standard.removeObject(forKey: "serverBasePath")
+        }
+        if let root = snapshotRoot() {
+            try? FileManager.default.removeItem(at: root.appendingPathComponent(release, isDirectory: true))
+        }
+
+        return (release, previous, hasActive)
+    }
+
+    public static func recoverInterruptedBoot() {
+        if recover("boot-interrupted") != nil { return }
+        guard let persisted = UserDefaults.standard.string(forKey: "serverBasePath"),
+              let root = snapshotRoot() else { return }
+        let path = URL(fileURLWithPath: persisted).standardizedFileURL.path
+        if path.hasPrefix(root.standardizedFileURL.path + "/") &&
+           !FileManager.default.fileExists(atPath: path) {
+            UserDefaults.standard.removeObject(forKey: "serverBasePath")
+        }
+    }
+
+    @objc public func arm(_ call: CAPPluginCall) {
+        guard let requested = call.getString("releaseId"),
+              Self.validRelease(requested),
+              Self.state()["pendingRelease"] as? String == requested else {
+            call.reject("Mobile update watchdog cannot arm an unknown release.")
+            return
+        }
+        deadline?.cancel()
+        let work = DispatchWorkItem { [weak self] in
+            guard let self, let recovery = Self.recover("boot-timeout") else { return }
+            if recovery.2, let previous = recovery.1,
+               let root = Self.snapshotRoot(),
+               URL(fileURLWithPath: previous).standardizedFileURL.path.hasPrefix(root.standardizedFileURL.path + "/") {
+                (self.bridge?.viewController as? CAPBridgeViewController)?.setServerBasePath(path: previous)
+            } else if let embedded = Bundle.main.url(forResource: "public", withExtension: nil)?.path {
+                (self.bridge?.viewController as? CAPBridgeViewController)?.setServerBasePath(path: embedded)
+            }
+        }
+        deadline = work
+        DispatchQueue.main.asyncAfter(deadline: .now() + .milliseconds(${timeoutMs}), execute: work)
+        call.resolve()
+    }
+
+    @objc public func confirm(_ call: CAPPluginCall) {
+        deadline?.cancel()
+        deadline = nil
+        call.resolve()
+    }
+}
+${PLUGIN_END}
+`, configureIos3 = async (config, enabled) => {
+  const path = join51(config.nativeProjectDirectory, "ios/App/App/AppDelegate.swift");
+  const capacitorConfigPath = join51(config.nativeProjectDirectory, "ios/App/App/capacitor.config.json");
+  let source = await readFile16(path, "utf8");
   const launch = source.indexOf("didFinishLaunchingWithOptions");
   const brace = launch < 0 ? -1 : source.indexOf("{", launch);
-  const insert = brace < 0 ? -1 : source.indexOf(`
-`, brace) + 1;
-  if (insert <= 0)
-    throw new TypeError("Could not find a safe iOS location for mobile update recovery.");
-  return `${source.slice(0, insert)}${region}${source.slice(insert)}`;
-}, iosRecoveryRegion, applyAbsoluteNativeUpdates = async (config, platforms = config.platforms) => {
-  if (config.engine !== "capacitor" || !platforms.includes("ios"))
-    return { changed: false };
-  const path = join51(config.nativeProjectDirectory, "ios/App/App/AppDelegate.swift");
-  const source = await readFile16(path, "utf8");
-  const updated = replaceRegion2(source, config.updates ? iosRecoveryRegion : "");
-  return { changed: await writeChanged2(path, updated) };
-};
-var init_nativeUpdates = __esm(() => {
-  iosRecoveryRegion = `        ${START}
-        // A confirmed Capacitor snapshot lives in Library/NoCloud and is not
-        // restored during device migration. Clear only a dangling pointer so
-        // Capacitor falls back to the store-signed embedded bundle.
-        if let persisted = UserDefaults.standard.string(forKey: "serverBasePath"), !persisted.isEmpty,
-           let library = FileManager.default.urls(for: .libraryDirectory, in: .userDomainMask).first {
-            let snapshot = library
-                .appendingPathComponent("NoCloud/ionic_built_snapshots", isDirectory: true)
-                .appendingPathComponent(URL(fileURLWithPath: persisted).lastPathComponent, isDirectory: true)
-            if !FileManager.default.fileExists(atPath: snapshot.path) {
-                UserDefaults.standard.removeObject(forKey: "serverBasePath")
+  const launchRegion = enabled ? `        ${START}
+        AbsoluteMobileUpdateWatchdogPlugin.recoverInterruptedBoot()
+        ${END}
+` : "";
+  source = replaceMarkedRegion(source, START, END, launchRegion, brace < 0 ? -1 : source.indexOf(`
+`, brace) + 1, "Could not find a safe iOS location for mobile update recovery.");
+  const plugin = enabled ? iosPluginRegion(config.updates?.bootTimeoutMs ?? 20000) : "";
+  source = replaceMarkedRegion(source, PLUGIN_START, PLUGIN_END, plugin, source.length, "Could not find a safe iOS location for the mobile update watchdog.");
+  const capacitorConfigSource2 = await readFile16(capacitorConfigPath, "utf8");
+  let capacitorConfig;
+  try {
+    const value = JSON.parse(capacitorConfigSource2);
+    if (!isRecord14(value))
+      throw new TypeError;
+    capacitorConfig = value;
+  } catch {
+    throw new TypeError("iOS capacitor.config.json is invalid; run Capacitor sync before projecting mobile updates.");
+  }
+  const packageClassList = Reflect.get(capacitorConfig, "packageClassList");
+  if (!Array.isArray(packageClassList))
+    throw new TypeError("iOS capacitor.config.json has no packageClassList; run Capacitor sync before projecting mobile updates.");
+  const classes = packageClassList.filter((value) => typeof value === "string");
+  const nextClasses = enabled ? [...new Set([...classes, "AbsoluteMobileUpdateWatchdogPlugin"])] : classes.filter((value) => value !== "AbsoluteMobileUpdateWatchdogPlugin");
+  const nextCapacitorConfig = `${JSON.stringify({ ...capacitorConfig, packageClassList: nextClasses }, null, "\t")}
+`;
+  const changed = await Promise.all([
+    writeChanged2(path, source),
+    writeChanged2(capacitorConfigPath, nextCapacitorConfig)
+  ]);
+  return changed.some(Boolean);
+}, androidPluginSource = (packageName, timeoutMs) => `package ${packageName};
+
+import android.app.Activity;
+import android.content.Context;
+import android.content.SharedPreferences;
+import android.os.Handler;
+import android.os.Looper;
+import com.getcapacitor.JSObject;
+import com.getcapacitor.Plugin;
+import com.getcapacitor.PluginCall;
+import com.getcapacitor.PluginMethod;
+import com.getcapacitor.annotation.CapacitorPlugin;
+import java.io.File;
+import org.json.JSONArray;
+import org.json.JSONObject;
+
+@CapacitorPlugin(name = "AbsoluteMobileUpdateWatchdog")
+public final class AbsoluteMobileUpdateWatchdogPlugin extends Plugin {
+    private static final String STATE_KEY = "absolute.mobile.update.state.v1";
+    private static final String RELEASE_PATTERN = "^amu_[a-f0-9]{64}$";
+    private final Handler handler = new Handler(Looper.getMainLooper());
+    private Runnable deadline;
+
+    private static SharedPreferences statePreferences(Context context) {
+        return context.getSharedPreferences("CapacitorStorage", Activity.MODE_PRIVATE);
+    }
+
+    private static JSONObject state(Context context) {
+        try {
+            return new JSONObject(statePreferences(context).getString(STATE_KEY, "{}"));
+        } catch (Exception ignored) {
+            return new JSONObject();
+        }
+    }
+
+    private static void write(Context context, JSONObject state) {
+        statePreferences(context).edit().putString(STATE_KEY, state.toString()).commit();
+    }
+
+    private static File snapshotRoot(Context context) {
+        return new File(context.getFilesDir(), "NoCloud/ionic_built_snapshots");
+    }
+
+    private static boolean validRelease(String release) {
+        return release != null && release.matches(RELEASE_PATTERN);
+    }
+
+    private static boolean inside(File root, String path) {
+        try {
+            String base = root.getCanonicalPath() + File.separator;
+            return new File(path).getCanonicalPath().startsWith(base);
+        } catch (Exception ignored) {
+            return false;
+        }
+    }
+
+    private static void deleteTree(File file) {
+        File[] children = file.listFiles();
+        if (children != null) for (File child : children) deleteTree(child);
+        file.delete();
+    }
+
+    private static Recovery recover(Context context, String reason) {
+        JSONObject value = state(context);
+        String release = value.optString("pendingRelease", "");
+        if (!validRelease(release)) return null;
+        String previous = value.optString("previousPath", "");
+        boolean hasActive = validRelease(value.optString("activeRelease", ""));
+        long started = value.optLong("pendingStartedAt", System.currentTimeMillis());
+        long duration = Math.max(0, System.currentTimeMillis() - started);
+        value.remove("pendingRelease");
+        value.remove("pendingStartedAt");
+        value.remove("previousPath");
+        value.remove("readyRelease");
+        try {
+            JSONArray prior = value.optJSONArray("quarantinedReleases");
+            JSONArray quarantined = new JSONArray();
+            if (prior != null) {
+                int start = Math.max(0, prior.length() - 7);
+                for (int index = start; index < prior.length(); index++) {
+                    String candidate = prior.optString(index, "");
+                    if (validRelease(candidate) && !release.equals(candidate)) quarantined.put(candidate);
+                }
             }
+            quarantined.put(release);
+            value.put("quarantinedReleases", quarantined);
+            value.put("recovery", new JSONObject()
+                .put("durationMs", duration)
+                .put("reason", reason)
+                .put("releaseId", release));
+        } catch (Exception ignored) {}
+        write(context, value);
+
+        SharedPreferences webView = context.getSharedPreferences("CapWebViewSettings", Activity.MODE_PRIVATE);
+        if (hasActive && inside(snapshotRoot(context), previous)) {
+            webView.edit().putString("serverBasePath", previous).commit();
+        } else {
+            webView.edit().remove("serverBasePath").commit();
+        }
+        deleteTree(new File(snapshotRoot(context), release));
+        return new Recovery(previous, hasActive);
+    }
+
+    public static void recoverInterruptedBoot(Context context) {
+        recover(context, "boot-interrupted");
+    }
+
+    @PluginMethod
+    public void arm(PluginCall call) {
+        String requested = call.getString("releaseId");
+        if (!validRelease(requested) || !requested.equals(state(getContext()).optString("pendingRelease", ""))) {
+            call.reject("Mobile update watchdog cannot arm an unknown release.");
+            return;
         }
+        if (deadline != null) handler.removeCallbacks(deadline);
+        deadline = () -> {
+            Recovery recovery = recover(getContext(), "boot-timeout");
+            if (recovery == null || bridge == null) return;
+            if (recovery.hasActive && inside(snapshotRoot(getContext()), recovery.previousPath)) {
+                bridge.setServerBasePath(recovery.previousPath);
+            } else {
+                bridge.setServerAssetPath("public");
+            }
+        };
+        handler.postDelayed(deadline, ${timeoutMs}L);
+        call.resolve(new JSObject());
+    }
+
+    @PluginMethod
+    public void confirm(PluginCall call) {
+        if (deadline != null) handler.removeCallbacks(deadline);
+        deadline = null;
+        call.resolve(new JSObject());
+    }
+
+    private static final class Recovery {
+        final String previousPath;
+        final boolean hasActive;
+        Recovery(String previousPath, boolean hasActive) {
+            this.previousPath = previousPath;
+            this.hasActive = hasActive;
+        }
+    }
+}
+`, androidActivityInRoot = async (root) => {
+  let entries;
+  try {
+    entries = await readdir5(root, { recursive: true });
+  } catch (error) {
+    if (typeof error === "object" && error !== null && Reflect.get(error, "code") === "ENOENT")
+      return;
+    throw error;
+  }
+  const candidate = entries.find((entry) => entry.endsWith("/MainActivity.java") || entry.endsWith("/MainActivity.kt") || entry === "MainActivity.java" || entry === "MainActivity.kt");
+  return candidate ? join51(root, candidate) : undefined;
+}, androidActivity = async (config) => {
+  const roots = [
+    join51(config.nativeProjectDirectory, "android/app/src/main/java"),
+    join51(config.nativeProjectDirectory, "android/app/src/main/kotlin")
+  ];
+  const candidates = await Promise.all(roots.map(androidActivityInRoot));
+  const candidate = candidates.find((value) => value !== undefined);
+  if (candidate)
+    return candidate;
+  throw new TypeError("Android MainActivity.java or MainActivity.kt was not found.");
+}, androidManagedRegion = (kotlin, generatedMethod) => {
+  if (generatedMethod)
+    return kotlin ? `    ${START}
+    override fun onCreate(savedInstanceState: android.os.Bundle?) {
+        AbsoluteMobileUpdateWatchdogPlugin.recoverInterruptedBoot(this)
+        registerPlugin(AbsoluteMobileUpdateWatchdogPlugin::class.java)
+        super.onCreate(savedInstanceState)
+    }
+    ${END}
+` : `    ${START}
+    @Override
+    public void onCreate(android.os.Bundle savedInstanceState) {
+        AbsoluteMobileUpdateWatchdogPlugin.recoverInterruptedBoot(this);
+        registerPlugin(AbsoluteMobileUpdateWatchdogPlugin.class);
+        super.onCreate(savedInstanceState);
+    }
+    ${END}
+`;
+  return kotlin ? `        ${START}
+        AbsoluteMobileUpdateWatchdogPlugin.recoverInterruptedBoot(this)
+        registerPlugin(AbsoluteMobileUpdateWatchdogPlugin::class.java)
+        ${END}
+` : `        ${START}
+        AbsoluteMobileUpdateWatchdogPlugin.recoverInterruptedBoot(this);
+        registerPlugin(AbsoluteMobileUpdateWatchdogPlugin.class);
         ${END}
 `;
-});
+}, injectAndroidActivity = (source, enabled) => {
+  const kotlin = /\bfun\s+onCreate\s*\(/u.test(source) || source.includes("BridgeActivity()");
+  const existingStart = source.indexOf(START);
+  const existingEnd = source.indexOf(END);
+  if (existingStart < 0 !== existingEnd < 0)
+    throw new TypeError("AbsoluteJS mobile update markers are malformed.");
+  if (existingStart >= 0) {
+    const from = source.lastIndexOf(`
+`, existingStart) + 1;
+    const newline = source.indexOf(`
+`, existingEnd + END.length);
+    const through = newline < 0 ? source.length : newline + 1;
+    const owned = source.slice(from, through);
+    const generatedMethod = owned.includes("onCreate(");
+    if (!enabled)
+      return `${source.slice(0, from)}${source.slice(through)}`;
+    const region2 = androidManagedRegion(kotlin, generatedMethod);
+    return `${source.slice(0, from)}${region2}${source.slice(through)}`;
+  }
+  if (!enabled)
+    return source;
+  const onCreate = kotlin ? source.search(/\boverride\s+fun\s+onCreate\s*\([^)]*\)\s*\{/u) : source.search(/\b(?:public|protected)\s+void\s+onCreate\s*\([^)]*\)\s*\{/u);
+  if (onCreate >= 0) {
+    const brace = source.indexOf("{", onCreate);
+    const insert = source.indexOf(`
+`, brace) + 1;
+    const region2 = kotlin ? `        ${START}
+        AbsoluteMobileUpdateWatchdogPlugin.recoverInterruptedBoot(this)
+        registerPlugin(AbsoluteMobileUpdateWatchdogPlugin::class.java)
+        ${END}
+` : `        ${START}
+        AbsoluteMobileUpdateWatchdogPlugin.recoverInterruptedBoot(this);
+        registerPlugin(AbsoluteMobileUpdateWatchdogPlugin.class);
+        ${END}
+`;
+    return `${source.slice(0, insert)}${region2}${source.slice(insert)}`;
+  }
+  const close = source.lastIndexOf("}");
+  if (close < 0)
+    throw new TypeError("Could not find the Android MainActivity class body.");
+  const region = kotlin ? `    ${START}
+    override fun onCreate(savedInstanceState: android.os.Bundle?) {
+        AbsoluteMobileUpdateWatchdogPlugin.recoverInterruptedBoot(this)
+        registerPlugin(AbsoluteMobileUpdateWatchdogPlugin::class.java)
+        super.onCreate(savedInstanceState)
+    }
+    ${END}
+` : `    ${START}
+    @Override
+    public void onCreate(android.os.Bundle savedInstanceState) {
+        AbsoluteMobileUpdateWatchdogPlugin.recoverInterruptedBoot(this);
+        registerPlugin(AbsoluteMobileUpdateWatchdogPlugin.class);
+        super.onCreate(savedInstanceState);
+    }
+    ${END}
+`;
+  const separator = source[close - 1] === `
+` ? "" : `
+`;
+  return `${source.slice(0, close)}${separator}${region}${source.slice(close)}`;
+}, configureAndroid3 = async (config, enabled) => {
+  const activityPath = await androidActivity(config);
+  const activity = await readFile16(activityPath, "utf8");
+  const packageName = activity.match(/^\s*package\s+([A-Za-z0-9_.]+)\s*[;\n]/mu)?.[1];
+  if (!packageName)
+    throw new TypeError("Android MainActivity package declaration was not found.");
+  const packagePath = packageName.replaceAll(".", "/");
+  const pluginPath = join51(config.nativeProjectDirectory, "android/app/src/main/java", packagePath, ANDROID_PLUGIN);
+  const changed = await Promise.all([
+    writeChanged2(activityPath, injectAndroidActivity(activity, enabled)),
+    enabled ? writeChanged2(pluginPath, androidPluginSource(packageName, config.updates?.bootTimeoutMs ?? 20000)) : removeOwnedFile(pluginPath)
+  ]);
+  return changed.some(Boolean);
+}, applyAbsoluteNativeUpdates = async (config, platforms = config.platforms) => {
+  if (config.engine !== "capacitor")
+    return { changed: false };
+  const enabled = config.updates !== undefined;
+  const changed = [];
+  if (platforms.includes("ios"))
+    changed.push(await configureIos3(config, enabled));
+  if (platforms.includes("android"))
+    changed.push(await configureAndroid3(config, enabled));
+  return { changed: changed.some(Boolean) };
+};
+var init_nativeUpdates = () => {};
 
 // src/mobile/associationFiles.ts
 import {
   access as access9,
-  mkdir as mkdir11,
+  mkdir as mkdir12,
   readFile as readFile17,
   rename as rename13,
-  rm as rm9,
+  rm as rm10,
   writeFile as writeFile14
 } from "fs/promises";
 import { resolve as resolve37 } from "path";
@@ -19828,10 +20256,10 @@ var OWNERSHIP_FILE = ".absolutejs-mobile-associations.json", HTTP_OK = 200, VERI
     throw error;
   }
   if (hasCurrent)
-    await rm9(backup, { force: true, recursive: true });
+    await rm10(backup, { force: true, recursive: true });
 }, materializeHost = async (root, host2, files) => {
   const directory = resolve37(root, host2, ".well-known");
-  await mkdir11(directory, { recursive: true });
+  await mkdir12(directory, { recursive: true });
   return Promise.all(files.map(async ([name, document]) => {
     const path = resolve37(directory, name);
     await writeAtomic(path, `${JSON.stringify(document, null, 2)}
@@ -19867,7 +20295,7 @@ var OWNERSHIP_FILE = ".absolutejs-mobile-associations.json", HTTP_OK = 200, VERI
   if (documents.apple) {
     files.push(["apple-app-site-association", documents.apple]);
   }
-  await mkdir11(temporary, { recursive: true });
+  await mkdir12(temporary, { recursive: true });
   try {
     const temporaryPaths = (await Promise.all(config.deepLinkHosts.map((host2) => materializeHost(temporary, host2, files)))).flat();
     await writeAtomic(resolve37(temporary, OWNERSHIP_FILE), `${JSON.stringify({ format: 1, hosts: config.deepLinkHosts }, null, 2)}
@@ -19876,7 +20304,7 @@ var OWNERSHIP_FILE = ".absolutejs-mobile-associations.json", HTTP_OK = 200, VERI
     const written = temporaryPaths.map((path) => resolve37(root, path.slice(temporary.length + 1)));
     return { root, written };
   } catch (error) {
-    await rm9(temporary, { force: true, recursive: true });
+    await rm10(temporary, { force: true, recursive: true });
     throw error;
   }
 }, verifyAbsoluteMobileAssociationFiles = async (config, request = globalThis.fetch) => {
@@ -19914,8 +20342,8 @@ var init_associationFiles = __esm(() => {
 });
 
 // src/mobile/androidWebView.ts
-import { mkdir as mkdir12, writeFile as writeFile15 } from "fs/promises";
-import { dirname as dirname29, resolve as resolve38 } from "path";
+import { mkdir as mkdir13, writeFile as writeFile15 } from "fs/promises";
+import { dirname as dirname30, resolve as resolve38 } from "path";
 
 class CdpConnection {
   #closed;
@@ -20189,7 +20617,7 @@ var CDP_COMMAND_TIMEOUT_MS = 1e4, WEBVIEW_ATTACH_TIMEOUT_MS = 30000, WEBVIEW_POL
         throw new Error("Android WebView screenshot returned no image data.");
       }
       const absolutePath = resolve38(path);
-      await mkdir12(dirname29(absolutePath), { recursive: true });
+      await mkdir13(dirname30(absolutePath), { recursive: true });
       await writeFile15(absolutePath, Buffer.from(data, "base64"));
       return absolutePath;
     },
@@ -20473,8 +20901,8 @@ var init_mobileBundleInspection = __esm(() => {
 });
 
 // src/mobile/releaseDoctor.ts
-import { access as access11, readFile as readFile19, readdir as readdir5 } from "fs/promises";
-import { dirname as dirname30, extname as extname8, join as join53, relative as relative26 } from "path";
+import { access as access11, readFile as readFile19, readdir as readdir6 } from "fs/promises";
+import { dirname as dirname31, extname as extname8, join as join53, relative as relative26 } from "path";
 var ABSOLUTE_MOBILE_COMPLIANCE_REPORT_FORMAT = 1, HMR_ASSET_PATTERN, RELEASE_ASSET_EXTENSIONS, EXACT_VERSION_PATTERN, NOT_FOUND3 = -1, LOCK_FILES, MANUAL_REVIEW, pathExists6 = async (path) => {
   try {
     await access11(path);
@@ -20492,7 +20920,7 @@ var ABSOLUTE_MOBILE_COMPLIANCE_REPORT_FORMAT = 1, HMR_ASSET_PATTERN, RELEASE_ASS
 }, findHmrAsset = async (root) => {
   if (!await pathExists6(root))
     return;
-  const entries = await readdir5(root, { withFileTypes: true });
+  const entries = await readdir6(root, { withFileTypes: true });
   const matches = await Promise.all(entries.map((entry) => inspectReleaseAsset(join53(root, entry.name), entry.isDirectory(), entry.isFile())));
   return matches.find((match) => match !== undefined);
 }, pass = (id, detail, path) => ({ detail, id, path, status: "pass" }), fail5 = (id, detail, path, remediation) => ({
@@ -20507,7 +20935,7 @@ var ABSOLUTE_MOBILE_COMPLIANCE_REPORT_FORMAT = 1, HMR_ASSET_PATTERN, RELEASE_ASS
   path,
   remediation,
   status: "warn"
-}), isRecord14 = (value) => typeof value === "object" && value !== null && !Array.isArray(value), readJsonObject = async (path) => {
+}), isRecord15 = (value) => typeof value === "object" && value !== null && !Array.isArray(value), readJsonObject = async (path) => {
   const value = JSON.parse(await readFile19(path, "utf8"));
   if (typeof value !== "object" || value === null || Array.isArray(value))
     throw new TypeError("JSON root must be an object.");
@@ -20638,7 +21066,7 @@ var ABSOLUTE_MOBILE_COMPLIANCE_REPORT_FORMAT = 1, HMR_ASSET_PATTERN, RELEASE_ASS
   const source = await readFile19(manifestPath, "utf8");
   const cleartext = /android:usesCleartextTraffic=["']true["']/u.test(source);
   const networkConfigName = source.match(/android:networkSecurityConfig=["']@xml\/([a-z0-9_]+)["']/u)?.[1];
-  const networkConfigPath = networkConfigName ? join53(dirname30(manifestPath), "res", "xml", `${networkConfigName}.xml`) : undefined;
+  const networkConfigPath = networkConfigName ? join53(dirname31(manifestPath), "res", "xml", `${networkConfigName}.xml`) : undefined;
   const developmentTrustReference = /android:networkSecurityConfig=["']@xml\/absolutejs_dev_network_security["']/u.test(source);
   const developmentTrustContents = networkConfigPath ? await readFile19(networkConfigPath, "utf8").then((value) => value.includes("@raw/absolutejs_dev_ca")).catch(() => false) : false;
   const developmentTrust = developmentTrustReference || developmentTrustContents;
@@ -20675,13 +21103,13 @@ var ABSOLUTE_MOBILE_COMPLIANCE_REPORT_FORMAT = 1, HMR_ASSET_PATTERN, RELEASE_ASS
   const path = join53(config.nativeProjectDirectory, "app.json");
   try {
     const root = await readJsonObject(path);
-    if (!isRecord14(root.expo))
+    if (!isRecord15(root.expo))
       throw new TypeError("Generated Expo application config is invalid.");
     const { expo } = root;
-    if (expo.name !== config.appName || config.platforms.includes("android") && (!isRecord14(expo.android) || expo.android.package !== config.appId) || config.platforms.includes("ios") && (!isRecord14(expo.ios) || expo.ios.bundleIdentifier !== config.appId)) {
+    if (expo.name !== config.appName || config.platforms.includes("android") && (!isRecord15(expo.android) || expo.android.package !== config.appId) || config.platforms.includes("ios") && (!isRecord15(expo.ios) || expo.ios.bundleIdentifier !== config.appId)) {
       throw new TypeError("Generated Expo application identity does not match mobile config.");
     }
-    if (!isRecord14(expo.runtimeVersion) || expo.runtimeVersion.policy !== "appVersion") {
+    if (!isRecord15(expo.runtimeVersion) || expo.runtimeVersion.policy !== "appVersion") {
       throw new TypeError("Generated Expo runtimeVersion must follow the native app version.");
     }
     if (Array.isArray(expo.plugins) && expo.plugins.some((plugin) => typeof plugin === "string" && plugin.includes("withAbsoluteDevelopmentCa"))) {
@@ -20767,6 +21195,26 @@ var ABSOLUTE_MOBILE_COMPLIANCE_REPORT_FORMAT = 1, HMR_ASSET_PATTERN, RELEASE_ASS
   } catch (error) {
     return fail5("android.deep-links", error instanceof Error ? error.message : "Android deep-link projection could not be validated.", manifestPath, "Run `absolute mobile sync android` and review the AbsoluteJS-owned deep-link region.");
   }
+}, nativeUpdateWatchdogCheck = async (config, platform6) => {
+  if (!config.updates)
+    return;
+  const timeout = String(config.updates.bootTimeoutMs);
+  if (platform6 === "ios") {
+    const path = join53(config.nativeProjectDirectory, "ios/App/App/AppDelegate.swift");
+    const configPath2 = join53(config.nativeProjectDirectory, "ios/App/App/capacitor.config.json");
+    const [source, nativeConfig] = await Promise.all([
+      readFile19(path, "utf8").catch(() => ""),
+      readFile19(configPath2, "utf8").catch(() => "")
+    ]);
+    return source.includes("AbsoluteMobileUpdateWatchdogPlugin") && source.includes("recoverInterruptedBoot()") && source.includes(`.milliseconds(${timeout})`) && source.includes("quarantinedReleases") && nativeConfig.includes("AbsoluteMobileUpdateWatchdogPlugin") ? pass("ios.update-watchdog", `The native update boot watchdog is projected with a ${timeout}ms deadline.`, path) : fail5("ios.update-watchdog", "The iOS update boot watchdog does not match mobile config.", path, "Run `absolute mobile sync ios` before building the release.");
+  }
+  const sourceRoot = join53(config.nativeProjectDirectory, "android/app/src/main");
+  const sources = await sourceFiles(sourceRoot, new Set([".java", ".kt"]));
+  const [activity, plugin] = await Promise.all([
+    containsPattern(sources, /recoverInterruptedBoot\s*\(\s*this\s*\)/u),
+    containsPattern(sources, new RegExp(`handler\\.postDelayed\\(deadline,\\s*${timeout}L\\)`, "u"))
+  ]);
+  return activity && plugin ? pass("android.update-watchdog", `The native update boot watchdog is projected with a ${timeout}ms deadline.`, plugin) : fail5("android.update-watchdog", "The Android update boot watchdog does not match mobile config.", plugin ?? sourceRoot, "Run `absolute mobile sync android` before building the release.");
 }, iosNativeSecurityCheck = async (iosRoot) => {
   const applicationFiles = async (extensions) => (await sourceFiles(iosRoot, extensions)).filter((path) => !relative26(iosRoot, path).split(/[\\/]/u).some((part) => ["Pods", "DerivedData", "build"].includes(part)));
   const entitlementPaths = await applicationFiles(new Set([".entitlements"]));
@@ -20944,9 +21392,10 @@ var ABSOLUTE_MOBILE_COMPLIANCE_REPORT_FORMAT = 1, HMR_ASSET_PATTERN, RELEASE_ASS
     contentSecurityPolicyCheck(config, "android", publicRoot),
     androidNativeSecurityCheck(androidRoot),
     androidExportedComponentsCheck(manifestPath),
-    androidDeepLinkProjectionCheck(config, manifestPath)
+    androidDeepLinkProjectionCheck(config, manifestPath),
+    nativeUpdateWatchdogCheck(config, "android")
   ]);
-  return checks.map((check2) => ({
+  return checks.filter((check2) => check2 !== undefined).map((check2) => ({
     ...check2,
     path: check2.path ? relative26(projectRoot, check2.path).replaceAll("\\", "/") || "." : undefined
   }));
@@ -21031,6 +21480,7 @@ var ABSOLUTE_MOBILE_COMPLIANCE_REPORT_FORMAT = 1, HMR_ASSET_PATTERN, RELEASE_ASS
   const checks = [
     await journalReleaseCheck(journalPath, "ios")
   ];
+  const updateWatchdog = config.updates ? await nativeUpdateWatchdogCheck(config, "ios") : undefined;
   if (!config.iosVersion) {
     checks.push(fail5("ios.marketing-version", "iOS has no explicit App Store marketing version.", projectRoot, "Add mobile.ios.version to absolutejs.config.ts, for example 1.0.0."));
   } else {
@@ -21053,6 +21503,8 @@ var ABSOLUTE_MOBILE_COMPLIANCE_REPORT_FORMAT = 1, HMR_ASSET_PATTERN, RELEASE_ASS
   const hmrAsset = await findHmrAsset(publicRoot);
   checks.push(hmrAsset ? fail5("ios.hmr-assets", "A packaged iOS asset contains the development HMR client.", hmrAsset, "Rebuild the production mobile bundle and run Capacitor sync again.") : pass("ios.hmr-assets", "Packaged iOS assets contain no development HMR markers.", publicRoot));
   checks.push(await embeddedBundleReleaseCheck(config, projectRoot, "ios", publicRoot), await contentSecurityPolicyCheck(config, "ios", publicRoot), await iosNativeSecurityCheck(join53(config.nativeProjectDirectory, "ios")), await iosDeepLinkProjectionCheck(config, join53(config.nativeProjectDirectory, "ios")));
+  if (updateWatchdog)
+    checks.push(updateWatchdog);
   return checks.map((check2) => ({
     ...check2,
     path: check2.path ? relative26(projectRoot, check2.path).replaceAll("\\", "/") || "." : undefined
@@ -21144,18 +21596,18 @@ import { createHash as createHash15 } from "crypto";
 import {
   access as access12,
   copyFile as copyFile5,
-  mkdir as mkdir13,
+  mkdir as mkdir14,
   mkdtemp as mkdtemp7,
   readFile as readFile20,
   realpath as realpath2,
   rename as rename14,
-  rm as rm10,
+  rm as rm11,
   stat as stat3,
   writeFile as writeFile16
 } from "fs/promises";
-import { dirname as dirname31, isAbsolute as isAbsolute7, join as join54, relative as relative27, resolve as resolve40, sep as sep7 } from "path";
-var ABSOLUTE_ANDROID_RELEASE_FORMAT = 1, isRecord15 = (value) => typeof value === "object" && value !== null && !Array.isArray(value), requireManifest2 = (value) => {
-  if (!isRecord15(value) || typeof value.appBuild !== "string" || typeof value.appId !== "string" || typeof value.runtime !== "string") {
+import { dirname as dirname32, isAbsolute as isAbsolute7, join as join54, relative as relative27, resolve as resolve40, sep as sep7 } from "path";
+var ABSOLUTE_ANDROID_RELEASE_FORMAT = 1, isRecord16 = (value) => typeof value === "object" && value !== null && !Array.isArray(value), requireManifest2 = (value) => {
+  if (!isRecord16(value) || typeof value.appBuild !== "string" || typeof value.appId !== "string" || typeof value.runtime !== "string") {
     throw new TypeError("Invalid embedded AbsoluteJS mobile manifest.");
   }
   return {
@@ -21251,8 +21703,8 @@ var ABSOLUTE_ANDROID_RELEASE_FORMAT = 1, isRecord15 = (value) => typeof value ==
     }
     return { artifactPath: destination, metadata: existing, releaseRoot };
   }
-  await mkdir13(dirname31(releaseRoot), { recursive: true });
-  const staging = await mkdtemp7(join54(dirname31(releaseRoot), ".android-stage-"));
+  await mkdir14(dirname32(releaseRoot), { recursive: true });
+  const staging = await mkdtemp7(join54(dirname32(releaseRoot), ".android-stage-"));
   try {
     await copyFile5(artifactPath, join54(staging, artifactName));
     const complete = {
@@ -21264,12 +21716,12 @@ var ABSOLUTE_ANDROID_RELEASE_FORMAT = 1, isRecord15 = (value) => typeof value ==
     await rename14(staging, releaseRoot);
     return { artifactPath: destination, metadata: complete, releaseRoot };
   } finally {
-    await rm10(staging, { force: true, recursive: true }).catch(() => {
+    await rm11(staging, { force: true, recursive: true }).catch(() => {
       return;
     });
   }
 }, requireManifestIdentity = (value, expected) => {
-  if (!isRecord15(value)) {
+  if (!isRecord16(value)) {
     throw new TypeError("Existing Android release metadata is invalid.");
   }
   const { artifact } = value;
@@ -21464,7 +21916,7 @@ var init_iosConformance = __esm(() => {
 });
 
 // src/mobile/nativeTestReport.ts
-import { mkdir as mkdir14, readFile as readFile22, writeFile as writeFile17 } from "fs/promises";
+import { mkdir as mkdir15, readFile as readFile22, writeFile as writeFile17 } from "fs/promises";
 import { join as join55 } from "path";
 var secretPattern, bearerPattern, coordinatePattern, nativeCredentialPattern, sanitizeNativeReportText = (value) => value.replace(nativeCredentialPattern, "[REDACTED]").replace(bearerPattern, "Bearer [REDACTED]").replace(secretPattern, "$1$2[REDACTED]").replace(coordinatePattern, "$1$2[REDACTED]").replace(/(https?:\/\/[^\s?#]+)[?#][^\s]*/giu, "$1?[REDACTED]"), markdownCell = (value) => sanitizeNativeReportText(value).replaceAll("|", "\\|").replaceAll(`
 `, "<br>"), createAbsoluteNativeAutomatedChecks = (run) => {
@@ -21603,7 +22055,7 @@ Replace each \`NOT_RUN\` with \`PASS\`, \`FAIL\`, or \`SKIPPED\` after completin
 ${table(report.manualChecks)}
 `;
 }, writeAbsoluteNativeTestReport = async (directory, report) => {
-  await mkdir14(directory, { recursive: true });
+  await mkdir15(directory, { recursive: true });
   const jsonPath = join55(directory, "report.json");
   const markdownPath = join55(directory, "report.md");
   await Promise.all([
@@ -21893,7 +22345,7 @@ var prepareAbsoluteIosRelease = async (publisher, options) => {
     throw new TypeError("Google Play publisher returned an invalid Android versionCode.");
   }
   return versionCode;
-}, isRecord16 = (value) => typeof value === "object" && value !== null && !Array.isArray(value), isPublisher = (value) => isRecord16(value) && typeof value.publish === "function", publisherModulePath = (projectRoot, requested) => {
+}, isRecord17 = (value) => typeof value === "object" && value !== null && !Array.isArray(value), isPublisher = (value) => isRecord17(value) && typeof value.publish === "function", publisherModulePath = (projectRoot, requested) => {
   const root = resolve41(projectRoot);
   const path = resolve41(root, requested);
   const projectRelative = relative28(root, path);
@@ -21907,7 +22359,7 @@ var prepareAbsoluteIosRelease = async (publisher, options) => {
     throw new TypeError(`Native release registry module does not exist: ${modulePath}`);
   });
   const loaded = await import(pathToFileURL2(modulePath).href);
-  const publisher = isRecord16(loaded) ? loaded.default ?? loaded.registry : undefined;
+  const publisher = isRecord17(loaded) ? loaded.default ?? loaded.registry : undefined;
   if (!isPublisher(publisher)) {
     throw new TypeError("Native release registry module must default-export a registry with publish(options).");
   }
@@ -22113,8 +22565,8 @@ var init_mobileInspect = __esm(() => {
 
 // src/mobile/ciWorkflow.ts
 import { existsSync as existsSync43 } from "fs";
-import { access as access15, mkdir as mkdir15, readFile as readFile24, writeFile as writeFile18 } from "fs/promises";
-import { dirname as dirname32, extname as extname9, relative as relative30, resolve as resolve43, sep as sep9 } from "path";
+import { access as access15, mkdir as mkdir16, readFile as readFile24, writeFile as writeFile18 } from "fs/promises";
+import { dirname as dirname33, extname as extname9, relative as relative30, resolve as resolve43, sep as sep9 } from "path";
 var ABSOLUTE_MOBILE_CI_WORKFLOW_FORMAT = 1, SECRET_NAME_PATTERN, CI_ENV_INDENTATION = 6, RESERVED_SECRET_NAMES, exists4 = async (path) => {
   try {
     await access15(path);
@@ -22531,7 +22983,7 @@ ${bundleAuditSteps}${platforms.includes("android") ? androidJob({ customSecrets,
   if (previous !== undefined && previous !== generated.workflow && !options.force)
     throw new TypeError(`${relative30(options.projectRoot, path)} already exists and differs. Rerun with --force to replace the generated workflow.`);
   if (previous !== generated.workflow) {
-    await mkdir15(dirname32(path), { recursive: true });
+    await mkdir16(dirname33(path), { recursive: true });
     await writeFile18(path, generated.workflow);
   }
   return {
@@ -22593,18 +23045,18 @@ var init_ciWorkflow = __esm(() => {
 import { createHash as createHash16, sign as sign2, verify as verify2 } from "crypto";
 import {
   cp as cp4,
-  mkdir as mkdir16,
+  mkdir as mkdir17,
   mkdtemp as mkdtemp8,
-  readdir as readdir6,
+  readdir as readdir7,
   readFile as readFile25,
   rename as rename15,
-  rm as rm11,
+  rm as rm12,
   stat as stat5,
   writeFile as writeFile19
 } from "fs/promises";
-import { dirname as dirname33, join as join57, relative as relative31, resolve as resolve44 } from "path";
+import { dirname as dirname34, join as join57, relative as relative31, resolve as resolve44 } from "path";
 var UPDATE_MANIFEST_FILE = "update.json", UPDATE_FILES_DIRECTORY = "files", sha2562 = (value) => createHash16("sha256").update(value).digest("hex"), listFiles = async (root, directory = root) => {
-  const entries = await readdir6(directory, { withFileTypes: true });
+  const entries = await readdir7(directory, { withFileTypes: true });
   const paths = await Promise.all(entries.map(async (entry) => {
     const path = join57(directory, entry.name);
     if (entry.isDirectory())
@@ -22651,7 +23103,7 @@ var UPDATE_MANIFEST_FILE = "update.json", UPDATE_FILES_DIRECTORY = "files", sha2
       value: signature.toString("base64")
     }
   });
-  await mkdir16(outputRoot, { recursive: true });
+  await mkdir17(outputRoot, { recursive: true });
   const outputDirectory = join57(outputRoot, manifest.releaseId);
   const staging = await mkdtemp8(join57(outputRoot, ".stage-"));
   try {
@@ -22663,7 +23115,7 @@ var UPDATE_MANIFEST_FILE = "update.json", UPDATE_FILES_DIRECTORY = "files", sha2
 `);
     await rename15(staging, outputDirectory);
   } catch (error) {
-    await rm11(staging, { force: true, recursive: true });
+    await rm12(staging, { force: true, recursive: true });
     if (typeof error === "object" && error !== null && Reflect.get(error, "code") === "EEXIST")
       throw new TypeError(`Mobile update ${manifest.releaseId} already exists.`, { cause: error });
     throw error;
@@ -22748,18 +23200,18 @@ var exports_mobile = {};
 __export(exports_mobile, {
   runMobile: () => runMobile
 });
-import { access as access17, mkdir as mkdir17, readFile as readFile26, writeFile as writeFile20 } from "fs/promises";
+import { access as access17, mkdir as mkdir18, readFile as readFile26, writeFile as writeFile20 } from "fs/promises";
 import { createPublicKey as createPublicKey3 } from "crypto";
 import { join as join58, relative as relative33, resolve as resolve46 } from "path";
 import { createInterface } from "readline/promises";
-var NOT_FOUND4 = -1, isRecord17 = (value) => typeof value === "object" && value !== null && !Array.isArray(value), CAPACITOR_PACKAGES, CAPACITOR_PACKAGE_SPECS, CAPACITOR_SYNC_PACKAGE_SPECS, packageNameFromSpec = (spec) => spec.slice(0, spec.lastIndexOf("@")), directProjectPackages = async (projectRoot) => {
+var NOT_FOUND4 = -1, isRecord18 = (value) => typeof value === "object" && value !== null && !Array.isArray(value), CAPACITOR_PACKAGES, CAPACITOR_PACKAGE_SPECS, CAPACITOR_SYNC_PACKAGE_SPECS, packageNameFromSpec = (spec) => spec.slice(0, spec.lastIndexOf("@")), directProjectPackages = async (projectRoot) => {
   const manifest = JSON.parse(await readFile26(join58(projectRoot, "package.json"), "utf8"));
-  if (!isRecord17(manifest))
+  if (!isRecord18(manifest))
     throw new TypeError("Application package.json must contain an object.");
   const names = new Set;
   for (const field of ["dependencies", "devDependencies"]) {
     const dependencies = Reflect.get(manifest, field);
-    if (isRecord17(dependencies))
+    if (isRecord18(dependencies))
       for (const name of Object.keys(dependencies))
         names.add(name);
   }
@@ -22767,7 +23219,7 @@ var NOT_FOUND4 = -1, isRecord17 = (value) => typeof value === "object" && value
 }, resolvedPackageVersion = async (projectRoot, packageName) => {
   try {
     const manifest = JSON.parse(await readFile26(join58(projectRoot, "node_modules", packageName, "package.json"), "utf8"));
-    return isRecord17(manifest) && typeof manifest.version === "string" ? manifest.version : undefined;
+    return isRecord18(manifest) && typeof manifest.version === "string" ? manifest.version : undefined;
   } catch {
     return;
   }
@@ -23216,7 +23668,7 @@ Mobile release security and compliance checks failed.`);
   try {
     await start(mobileBuildServerEntry(args), valueAfter(args, "--web-outdir"), configPath2, { prepareOnly: true });
     const embedded = JSON.parse(await readFile26(join58(mobile.bundleDirectory, "absolute-mobile-manifest.json"), "utf8"));
-    const runtimeFingerprint = isRecord17(embedded) ? embedded.nativeRuntime : undefined;
+    const runtimeFingerprint = isRecord18(embedded) ? embedded.nativeRuntime : undefined;
     if (typeof runtimeFingerprint !== "string" || !/^[a-f0-9]{64}$/u.test(runtimeFingerprint))
       throw new TypeError("Prepared mobile bundle is missing its native runtime fingerprint.");
     const privateKey = await readFile26(resolve46(projectRoot, signingKeyPath));
@@ -23482,6 +23934,7 @@ Mobile release security and compliance checks failed.`);
     "android"
   ]);
   await applyAbsoluteNativeBackgroundSync(projectRoot, mobile, ["android"]);
+  await applyAbsoluteNativeUpdates(mobile, ["android"]);
 }, prepareAndroidReleaseProject = (mobile, projectRoot, args) => mobile.engine === "expo" ? prepareExpoAndroidReleaseProject(mobile, projectRoot, args) : prepareCapacitorAndroidReleaseProject(mobile, projectRoot), buildAndroid = async (args, prepareVersionCode) => {
   const configPath2 = valueAfter(args, "--config");
   const { mobile, projectRoot } = await loadMobile(configPath2);
@@ -23927,7 +24380,7 @@ Emulator setup verification:`);
     timeoutMs
   });
 }, writeAndroidFailureArtifacts = async (options) => {
-  await mkdir17(options.artifactRoot, { recursive: true });
+  await mkdir18(options.artifactRoot, { recursive: true });
   const screenshot = options.session ? await options.session.screenshot(join58(options.artifactRoot, "android-failure.png")).catch(() => {
     return;
   }) : undefined;
@@ -24088,7 +24541,7 @@ Emulator setup verification:`);
       return;
     });
     const status2 = response?.ok ? await response.json().catch(() => null) : null;
-    const targets = isRecord17(status2) && isRecord17(status2.connectedTargets) ? status2.connectedTargets : undefined;
+    const targets = isRecord18(status2) && isRecord18(status2.connectedTargets) ? status2.connectedTargets : undefined;
     if (targets && typeof targets["capacitor-ios"] === "number" && targets["capacitor-ios"] > 0)
       return;
     await Bun.sleep(100);
@@ -24185,7 +24638,7 @@ Emulator setup verification:`);
     throw new Error(`${label} failed: ${result.stderr.trim() || result.stdout.trim() || `status ${result.exitCode}`}`);
   return result;
 }, writeIosFailureArtifacts = async (options) => {
-  await mkdir17(options.artifactRoot, { recursive: true });
+  await mkdir18(options.artifactRoot, { recursive: true });
   const screenshot = join58(options.artifactRoot, "ios-failure.png");
   const screenshotResult = captureCommand4([
     options.xcrun,
@@ -24441,7 +24894,7 @@ Emulator setup verification:`);
       mobile.appId
     ], "iOS app launch");
     await waitForIosHmrClient({ https, port, timeoutMs });
-    await mkdir17(artifactRoot, { recursive: true });
+    await mkdir18(artifactRoot, { recursive: true });
     const screenshot = join58(artifactRoot, "ios-simulator.png");
     requireCapturedCommand([xcrun, "simctl", "io", simulator.udid, "screenshot", screenshot], "iOS simulator screenshot");
     const hmrApply = await waitForRequestedIosHmr(args, instance, timeoutMs);
@@ -24680,7 +25133,7 @@ __export(exports_typecheck, {
 });
 import { resolve as resolve47, join as join59 } from "path";
 import { existsSync as existsSync44, readFileSync as readFileSync40 } from "fs";
-import { mkdir as mkdir18, writeFile as writeFile21 } from "fs/promises";
+import { mkdir as mkdir19, writeFile as writeFile21 } from "fs/promises";
 var isCommandService3 = (service) => service.kind === "command" || Array.isArray(service.command), resolveConfigPath = (configPath2) => resolve47(configPath2 ?? process.env.ABSOLUTE_CONFIG ?? "absolute.config.ts"), getTypecheckTargets = async (configPath2) => {
   if (!existsSync44(resolveConfigPath(configPath2))) {
     const defaultService = {};
@@ -24892,7 +25345,7 @@ Found ${errorCount} error${suffix}.`;
     ...new Set(targets.map((config) => config.angularDirectory).filter((dir) => typeof dir === "string" && dir.length > 0))
   ];
   const cacheDir = ".absolutejs";
-  await mkdir18(cacheDir, { recursive: true });
+  await mkdir19(cacheDir, { recursive: true });
   const checks = [];
   checks.push(hasVue ? buildVueTscCheck(cacheDir) : buildTscCheck(cacheDir));
   for (const svelteDir of hasSvelte ? svelteDirs : []) {