@absolutejs/absolute 0.20.0-beta.60 → 0.20.0-beta.61

package/dist/mobile/index.js

@@ -168,7 +168,7 @@ var init_startupBanner = __esm(() => {
 // src/mobile/config.ts
 import { resolve as resolve6 } from "path";
 import { createPublicKey } from "crypto";
-var APP_ID_PATTERN, SCHEME_PATTERN, APPLE_APP_ID_PREFIX_PATTERN, CERTIFICATE_FINGERPRINT_PATTERN, UPDATE_NAME_PATTERN, UPDATE_PUBLIC_KEY_PATTERN, HOSTNAME_PATTERN, EXPO_RESERVED_ROUTE_PREFIXES, resolveProjectPath = (projectRoot, value, field2) => {
+var APP_ID_PATTERN, SCHEME_PATTERN, APPLE_APP_ID_PREFIX_PATTERN, CERTIFICATE_FINGERPRINT_PATTERN, UPDATE_NAME_PATTERN, UPDATE_PUBLIC_KEY_PATTERN, DEFAULT_UPDATE_BOOT_TIMEOUT_MS = 20000, MINIMUM_UPDATE_BOOT_TIMEOUT_MS = 5000, MAXIMUM_UPDATE_BOOT_TIMEOUT_MS = 120000, HOSTNAME_PATTERN, EXPO_RESERVED_ROUTE_PREFIXES, resolveProjectPath = (projectRoot, value, field2) => {
   const root = resolve6(projectRoot);
   const path = resolve6(root, value);
   if (path !== root && !path.startsWith(`${root}/`)) {
@@ -244,6 +244,9 @@ var APP_ID_PATTERN, SCHEME_PATTERN, APPLE_APP_ID_PREFIX_PATTERN, CERTIFICATE_FIN
 ].sort(), normalizeUpdates = (config, productionOrigin) => {
   if (!config.updates)
     return;
+  const bootTimeoutMs = config.updates.bootTimeoutMs ?? DEFAULT_UPDATE_BOOT_TIMEOUT_MS;
+  if (!Number.isSafeInteger(bootTimeoutMs) || bootTimeoutMs < MINIMUM_UPDATE_BOOT_TIMEOUT_MS || bootTimeoutMs > MAXIMUM_UPDATE_BOOT_TIMEOUT_MS)
+    throw new TypeError("mobile.updates.bootTimeoutMs must be an integer from 5000 through 120000.");
   const channel = requireText(config.updates.channel ?? "production", "mobile.updates.channel");
   if (!UPDATE_NAME_PATTERN.test(channel))
     throw new TypeError("mobile.updates.channel contains unsupported characters.");
@@ -285,7 +288,12 @@ var APP_ID_PATTERN, SCHEME_PATTERN, APPLE_APP_ID_PREFIX_PATTERN, CERTIFICATE_FIN
       throw new TypeError(`mobile.updates.publicKeys.${keyId} is not an ECDSA P-256 SPKI public key.`);
     return [keyId, normalized];
   }));
-  return { channel, manifestUrl: manifestUrl.href, publicKeys };
+  return {
+    bootTimeoutMs,
+    channel,
+    manifestUrl: manifestUrl.href,
+    publicKeys
+  };
 }, validateExpoNativeRouteSegment = (path, segment, index, count, parameters) => {
   if (segment === "*" && (index !== count - 1 || count === 1)) {
     throw new TypeError(`mobile.routes.native route ${path} must use * once, as the final segment after a static or parameterized prefix.`);
@@ -9451,7 +9459,7 @@ var unsignedAbsoluteMobileUpdate = (manifest) => {
 };
 
 // src/mobile/updateRuntime.ts
-var ABSOLUTE_MOBILE_SHELL_ABI = 1;
+var ABSOLUTE_MOBILE_SHELL_ABI = 2;
 var ABSOLUTE_MOBILE_UPDATE_RUNTIME_FORMAT = 1;
 var createAbsoluteMobileUpdateRuntimeDescriptor = (options) => ({
   appId: options.config.appId,
@@ -11507,63 +11515,498 @@ var applyAbsoluteNativeDeviceCapabilities = async (projectRoot, config, platform
 init_nativeAuth();
 
 // src/mobile/nativeUpdates.ts
-import { readFile as readFile19, rename as rename14, writeFile as writeFile16 } from "fs/promises";
-import { join as join21 } from "path";
+import {
+  mkdir as mkdir13,
+  readFile as readFile19,
+  readdir as readdir5,
+  rename as rename14,
+  rm as rm11,
+  writeFile as writeFile16
+} from "fs/promises";
+import { dirname as dirname13, join as join21 } from "path";
 var START = "// absolutejs:mobile-updates:start";
 var END = "// absolutejs:mobile-updates:end";
+var PLUGIN_START = "// absolutejs:mobile-update-plugin:start";
+var PLUGIN_END = "// absolutejs:mobile-update-plugin:end";
+var ANDROID_PLUGIN = "AbsoluteMobileUpdateWatchdogPlugin.java";
+var optionalSource2 = async (path) => {
+  try {
+    return await readFile19(path, "utf8");
+  } catch (error) {
+    if (typeof error === "object" && error !== null && Reflect.get(error, "code") === "ENOENT")
+      return null;
+    throw error;
+  }
+};
+var isRecord11 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var writeChanged = async (path, source) => {
-  const current = await readFile19(path, "utf8");
+  const current = await optionalSource2(path);
   if (current === source)
     return false;
+  await mkdir13(dirname13(path), { recursive: true });
+  if (current === null) {
+    await writeFile16(path, source, { flag: "wx" });
+    return true;
+  }
   const temporary = `${path}.${crypto.randomUUID()}.tmp`;
   await writeFile16(temporary, source, { flag: "wx" });
   await rename14(temporary, path);
   return true;
 };
-var replaceRegion = (source, region) => {
-  const start = source.indexOf(START);
-  const end = source.indexOf(END);
-  if (start < 0 !== end < 0 || end < start)
+var removeOwnedFile = async (path) => {
+  if (await optionalSource2(path) === null)
+    return false;
+  await rm11(path);
+  return true;
+};
+var replaceMarkedRegion = (source, start, end, region, insertion, error) => {
+  const existingStart = source.indexOf(start);
+  const existingEnd = source.indexOf(end);
+  if (existingStart < 0 !== existingEnd < 0 || existingStart >= 0 && existingEnd < existingStart)
     throw new TypeError("AbsoluteJS mobile update markers are malformed.");
-  if (start >= 0) {
+  if (existingStart >= 0) {
     const from = source.lastIndexOf(`
-`, start) + 1;
+`, existingStart) + 1;
     const newline = source.indexOf(`
-`, end + END.length);
+`, existingEnd + end.length);
     return `${source.slice(0, from)}${region}${source.slice(newline < 0 ? source.length : newline + 1)}`;
   }
   if (!region)
     return source;
+  if (insertion < 0)
+    throw new TypeError(error);
+  return `${source.slice(0, insertion)}${region}${source.slice(insertion)}`;
+};
+var iosPluginRegion = (timeoutMs) => `${PLUGIN_START}
+@objc(AbsoluteMobileUpdateWatchdogPlugin)
+public final class AbsoluteMobileUpdateWatchdogPlugin: CAPPlugin, CAPBridgedPlugin {
+    public let identifier = "AbsoluteMobileUpdateWatchdogPlugin"
+    public let jsName = "AbsoluteMobileUpdateWatchdog"
+    public let pluginMethods: [CAPPluginMethod] = [
+        CAPPluginMethod(name: "arm", returnType: CAPPluginReturnPromise),
+        CAPPluginMethod(name: "confirm", returnType: CAPPluginReturnPromise)
+    ]
+
+    private static let stateKey = "CapacitorStorage.absolute.mobile.update.state.v1"
+    private static let releasePattern = try! NSRegularExpression(pattern: "^amu_[a-f0-9]{64}$")
+    private var deadline: DispatchWorkItem?
+
+    private static func state() -> [String: Any] {
+        guard let encoded = UserDefaults.standard.string(forKey: stateKey),
+              let data = encoded.data(using: .utf8),
+              let object = try? JSONSerialization.jsonObject(with: data),
+              let value = object as? [String: Any] else { return [:] }
+        return value
+    }
+
+    private static func write(_ state: [String: Any]) {
+        guard let data = try? JSONSerialization.data(withJSONObject: state),
+              let encoded = String(data: data, encoding: .utf8) else { return }
+        UserDefaults.standard.set(encoded, forKey: stateKey)
+    }
+
+    private static func validRelease(_ value: String) -> Bool {
+        releasePattern.firstMatch(in: value, range: NSRange(value.startIndex..., in: value)) != nil
+    }
+
+    private static func snapshotRoot() -> URL? {
+        FileManager.default.urls(for: .libraryDirectory, in: .userDomainMask).first?
+            .appendingPathComponent("NoCloud/ionic_built_snapshots", isDirectory: true)
+    }
+
+    @discardableResult
+    private static func recover(_ reason: String) -> (String, String?, Bool)? {
+        var value = state()
+        guard let release = value["pendingRelease"] as? String, validRelease(release) else { return nil }
+        let previous = value["previousPath"] as? String
+        let active = value["activeRelease"] as? String
+        let hasActive = active.map(validRelease) ?? false
+        let started = value["pendingStartedAt"] as? Double ?? Date().timeIntervalSince1970 * 1000
+        let duration = max(0, Date().timeIntervalSince1970 * 1000 - started)
+        value.removeValue(forKey: "pendingRelease")
+        value.removeValue(forKey: "pendingStartedAt")
+        value.removeValue(forKey: "previousPath")
+        value.removeValue(forKey: "readyRelease")
+        var quarantined = value["quarantinedReleases"] as? [String] ?? []
+        quarantined.removeAll(where: { $0 == release })
+        quarantined.append(release)
+        value["quarantinedReleases"] = Array(quarantined.suffix(8))
+        value["recovery"] = ["durationMs": duration, "reason": reason, "releaseId": release]
+        write(value)
+
+        if hasActive, let previous, let root = snapshotRoot(),
+           URL(fileURLWithPath: previous).standardizedFileURL.path.hasPrefix(root.standardizedFileURL.path + "/") {
+            UserDefaults.standard.set(previous, forKey: "serverBasePath")
+        } else {
+            UserDefaults.standard.removeObject(forKey: "serverBasePath")
+        }
+        if let root = snapshotRoot() {
+            try? FileManager.default.removeItem(at: root.appendingPathComponent(release, isDirectory: true))
+        }
+
+        return (release, previous, hasActive)
+    }
+
+    public static func recoverInterruptedBoot() {
+        if recover("boot-interrupted") != nil { return }
+        guard let persisted = UserDefaults.standard.string(forKey: "serverBasePath"),
+              let root = snapshotRoot() else { return }
+        let path = URL(fileURLWithPath: persisted).standardizedFileURL.path
+        if path.hasPrefix(root.standardizedFileURL.path + "/") &&
+           !FileManager.default.fileExists(atPath: path) {
+            UserDefaults.standard.removeObject(forKey: "serverBasePath")
+        }
+    }
+
+    @objc public func arm(_ call: CAPPluginCall) {
+        guard let requested = call.getString("releaseId"),
+              Self.validRelease(requested),
+              Self.state()["pendingRelease"] as? String == requested else {
+            call.reject("Mobile update watchdog cannot arm an unknown release.")
+            return
+        }
+        deadline?.cancel()
+        let work = DispatchWorkItem { [weak self] in
+            guard let self, let recovery = Self.recover("boot-timeout") else { return }
+            if recovery.2, let previous = recovery.1,
+               let root = Self.snapshotRoot(),
+               URL(fileURLWithPath: previous).standardizedFileURL.path.hasPrefix(root.standardizedFileURL.path + "/") {
+                (self.bridge?.viewController as? CAPBridgeViewController)?.setServerBasePath(path: previous)
+            } else if let embedded = Bundle.main.url(forResource: "public", withExtension: nil)?.path {
+                (self.bridge?.viewController as? CAPBridgeViewController)?.setServerBasePath(path: embedded)
+            }
+        }
+        deadline = work
+        DispatchQueue.main.asyncAfter(deadline: .now() + .milliseconds(${timeoutMs}), execute: work)
+        call.resolve()
+    }
+
+    @objc public func confirm(_ call: CAPPluginCall) {
+        deadline?.cancel()
+        deadline = nil
+        call.resolve()
+    }
+}
+${PLUGIN_END}
+`;
+var configureIos3 = async (config, enabled) => {
+  const path = join21(config.nativeProjectDirectory, "ios/App/App/AppDelegate.swift");
+  const capacitorConfigPath = join21(config.nativeProjectDirectory, "ios/App/App/capacitor.config.json");
+  let source = await readFile19(path, "utf8");
   const launch = source.indexOf("didFinishLaunchingWithOptions");
   const brace = launch < 0 ? -1 : source.indexOf("{", launch);
-  const insert = brace < 0 ? -1 : source.indexOf(`
-`, brace) + 1;
-  if (insert <= 0)
-    throw new TypeError("Could not find a safe iOS location for mobile update recovery.");
-  return `${source.slice(0, insert)}${region}${source.slice(insert)}`;
-};
-var iosRecoveryRegion = `        ${START}
-        // A confirmed Capacitor snapshot lives in Library/NoCloud and is not
-        // restored during device migration. Clear only a dangling pointer so
-        // Capacitor falls back to the store-signed embedded bundle.
-        if let persisted = UserDefaults.standard.string(forKey: "serverBasePath"), !persisted.isEmpty,
-           let library = FileManager.default.urls(for: .libraryDirectory, in: .userDomainMask).first {
-            let snapshot = library
-                .appendingPathComponent("NoCloud/ionic_built_snapshots", isDirectory: true)
-                .appendingPathComponent(URL(fileURLWithPath: persisted).lastPathComponent, isDirectory: true)
-            if !FileManager.default.fileExists(atPath: snapshot.path) {
-                UserDefaults.standard.removeObject(forKey: "serverBasePath")
+  const launchRegion = enabled ? `        ${START}
+        AbsoluteMobileUpdateWatchdogPlugin.recoverInterruptedBoot()
+        ${END}
+` : "";
+  source = replaceMarkedRegion(source, START, END, launchRegion, brace < 0 ? -1 : source.indexOf(`
+`, brace) + 1, "Could not find a safe iOS location for mobile update recovery.");
+  const plugin = enabled ? iosPluginRegion(config.updates?.bootTimeoutMs ?? 20000) : "";
+  source = replaceMarkedRegion(source, PLUGIN_START, PLUGIN_END, plugin, source.length, "Could not find a safe iOS location for the mobile update watchdog.");
+  const capacitorConfigSource2 = await readFile19(capacitorConfigPath, "utf8");
+  let capacitorConfig;
+  try {
+    const value = JSON.parse(capacitorConfigSource2);
+    if (!isRecord11(value))
+      throw new TypeError;
+    capacitorConfig = value;
+  } catch {
+    throw new TypeError("iOS capacitor.config.json is invalid; run Capacitor sync before projecting mobile updates.");
+  }
+  const packageClassList = Reflect.get(capacitorConfig, "packageClassList");
+  if (!Array.isArray(packageClassList))
+    throw new TypeError("iOS capacitor.config.json has no packageClassList; run Capacitor sync before projecting mobile updates.");
+  const classes = packageClassList.filter((value) => typeof value === "string");
+  const nextClasses = enabled ? [...new Set([...classes, "AbsoluteMobileUpdateWatchdogPlugin"])] : classes.filter((value) => value !== "AbsoluteMobileUpdateWatchdogPlugin");
+  const nextCapacitorConfig = `${JSON.stringify({ ...capacitorConfig, packageClassList: nextClasses }, null, "\t")}
+`;
+  const changed = await Promise.all([
+    writeChanged(path, source),
+    writeChanged(capacitorConfigPath, nextCapacitorConfig)
+  ]);
+  return changed.some(Boolean);
+};
+var androidPluginSource = (packageName, timeoutMs) => `package ${packageName};
+
+import android.app.Activity;
+import android.content.Context;
+import android.content.SharedPreferences;
+import android.os.Handler;
+import android.os.Looper;
+import com.getcapacitor.JSObject;
+import com.getcapacitor.Plugin;
+import com.getcapacitor.PluginCall;
+import com.getcapacitor.PluginMethod;
+import com.getcapacitor.annotation.CapacitorPlugin;
+import java.io.File;
+import org.json.JSONArray;
+import org.json.JSONObject;
+
+@CapacitorPlugin(name = "AbsoluteMobileUpdateWatchdog")
+public final class AbsoluteMobileUpdateWatchdogPlugin extends Plugin {
+    private static final String STATE_KEY = "absolute.mobile.update.state.v1";
+    private static final String RELEASE_PATTERN = "^amu_[a-f0-9]{64}$";
+    private final Handler handler = new Handler(Looper.getMainLooper());
+    private Runnable deadline;
+
+    private static SharedPreferences statePreferences(Context context) {
+        return context.getSharedPreferences("CapacitorStorage", Activity.MODE_PRIVATE);
+    }
+
+    private static JSONObject state(Context context) {
+        try {
+            return new JSONObject(statePreferences(context).getString(STATE_KEY, "{}"));
+        } catch (Exception ignored) {
+            return new JSONObject();
+        }
+    }
+
+    private static void write(Context context, JSONObject state) {
+        statePreferences(context).edit().putString(STATE_KEY, state.toString()).commit();
+    }
+
+    private static File snapshotRoot(Context context) {
+        return new File(context.getFilesDir(), "NoCloud/ionic_built_snapshots");
+    }
+
+    private static boolean validRelease(String release) {
+        return release != null && release.matches(RELEASE_PATTERN);
+    }
+
+    private static boolean inside(File root, String path) {
+        try {
+            String base = root.getCanonicalPath() + File.separator;
+            return new File(path).getCanonicalPath().startsWith(base);
+        } catch (Exception ignored) {
+            return false;
+        }
+    }
+
+    private static void deleteTree(File file) {
+        File[] children = file.listFiles();
+        if (children != null) for (File child : children) deleteTree(child);
+        file.delete();
+    }
+
+    private static Recovery recover(Context context, String reason) {
+        JSONObject value = state(context);
+        String release = value.optString("pendingRelease", "");
+        if (!validRelease(release)) return null;
+        String previous = value.optString("previousPath", "");
+        boolean hasActive = validRelease(value.optString("activeRelease", ""));
+        long started = value.optLong("pendingStartedAt", System.currentTimeMillis());
+        long duration = Math.max(0, System.currentTimeMillis() - started);
+        value.remove("pendingRelease");
+        value.remove("pendingStartedAt");
+        value.remove("previousPath");
+        value.remove("readyRelease");
+        try {
+            JSONArray prior = value.optJSONArray("quarantinedReleases");
+            JSONArray quarantined = new JSONArray();
+            if (prior != null) {
+                int start = Math.max(0, prior.length() - 7);
+                for (int index = start; index < prior.length(); index++) {
+                    String candidate = prior.optString(index, "");
+                    if (validRelease(candidate) && !release.equals(candidate)) quarantined.put(candidate);
+                }
             }
+            quarantined.put(release);
+            value.put("quarantinedReleases", quarantined);
+            value.put("recovery", new JSONObject()
+                .put("durationMs", duration)
+                .put("reason", reason)
+                .put("releaseId", release));
+        } catch (Exception ignored) {}
+        write(context, value);
+
+        SharedPreferences webView = context.getSharedPreferences("CapWebViewSettings", Activity.MODE_PRIVATE);
+        if (hasActive && inside(snapshotRoot(context), previous)) {
+            webView.edit().putString("serverBasePath", previous).commit();
+        } else {
+            webView.edit().remove("serverBasePath").commit();
         }
+        deleteTree(new File(snapshotRoot(context), release));
+        return new Recovery(previous, hasActive);
+    }
+
+    public static void recoverInterruptedBoot(Context context) {
+        recover(context, "boot-interrupted");
+    }
+
+    @PluginMethod
+    public void arm(PluginCall call) {
+        String requested = call.getString("releaseId");
+        if (!validRelease(requested) || !requested.equals(state(getContext()).optString("pendingRelease", ""))) {
+            call.reject("Mobile update watchdog cannot arm an unknown release.");
+            return;
+        }
+        if (deadline != null) handler.removeCallbacks(deadline);
+        deadline = () -> {
+            Recovery recovery = recover(getContext(), "boot-timeout");
+            if (recovery == null || bridge == null) return;
+            if (recovery.hasActive && inside(snapshotRoot(getContext()), recovery.previousPath)) {
+                bridge.setServerBasePath(recovery.previousPath);
+            } else {
+                bridge.setServerAssetPath("public");
+            }
+        };
+        handler.postDelayed(deadline, ${timeoutMs}L);
+        call.resolve(new JSObject());
+    }
+
+    @PluginMethod
+    public void confirm(PluginCall call) {
+        if (deadline != null) handler.removeCallbacks(deadline);
+        deadline = null;
+        call.resolve(new JSObject());
+    }
+
+    private static final class Recovery {
+        final String previousPath;
+        final boolean hasActive;
+        Recovery(String previousPath, boolean hasActive) {
+            this.previousPath = previousPath;
+            this.hasActive = hasActive;
+        }
+    }
+}
+`;
+var androidActivityInRoot = async (root) => {
+  let entries;
+  try {
+    entries = await readdir5(root, { recursive: true });
+  } catch (error) {
+    if (typeof error === "object" && error !== null && Reflect.get(error, "code") === "ENOENT")
+      return;
+    throw error;
+  }
+  const candidate = entries.find((entry) => entry.endsWith("/MainActivity.java") || entry.endsWith("/MainActivity.kt") || entry === "MainActivity.java" || entry === "MainActivity.kt");
+  return candidate ? join21(root, candidate) : undefined;
+};
+var androidActivity = async (config) => {
+  const roots = [
+    join21(config.nativeProjectDirectory, "android/app/src/main/java"),
+    join21(config.nativeProjectDirectory, "android/app/src/main/kotlin")
+  ];
+  const candidates = await Promise.all(roots.map(androidActivityInRoot));
+  const candidate = candidates.find((value) => value !== undefined);
+  if (candidate)
+    return candidate;
+  throw new TypeError("Android MainActivity.java or MainActivity.kt was not found.");
+};
+var androidManagedRegion = (kotlin, generatedMethod) => {
+  if (generatedMethod)
+    return kotlin ? `    ${START}
+    override fun onCreate(savedInstanceState: android.os.Bundle?) {
+        AbsoluteMobileUpdateWatchdogPlugin.recoverInterruptedBoot(this)
+        registerPlugin(AbsoluteMobileUpdateWatchdogPlugin::class.java)
+        super.onCreate(savedInstanceState)
+    }
+    ${END}
+` : `    ${START}
+    @Override
+    public void onCreate(android.os.Bundle savedInstanceState) {
+        AbsoluteMobileUpdateWatchdogPlugin.recoverInterruptedBoot(this);
+        registerPlugin(AbsoluteMobileUpdateWatchdogPlugin.class);
+        super.onCreate(savedInstanceState);
+    }
+    ${END}
+`;
+  return kotlin ? `        ${START}
+        AbsoluteMobileUpdateWatchdogPlugin.recoverInterruptedBoot(this)
+        registerPlugin(AbsoluteMobileUpdateWatchdogPlugin::class.java)
+        ${END}
+` : `        ${START}
+        AbsoluteMobileUpdateWatchdogPlugin.recoverInterruptedBoot(this);
+        registerPlugin(AbsoluteMobileUpdateWatchdogPlugin.class);
+        ${END}
+`;
+};
+var injectAndroidActivity = (source, enabled) => {
+  const kotlin = /\bfun\s+onCreate\s*\(/u.test(source) || source.includes("BridgeActivity()");
+  const existingStart = source.indexOf(START);
+  const existingEnd = source.indexOf(END);
+  if (existingStart < 0 !== existingEnd < 0)
+    throw new TypeError("AbsoluteJS mobile update markers are malformed.");
+  if (existingStart >= 0) {
+    const from = source.lastIndexOf(`
+`, existingStart) + 1;
+    const newline = source.indexOf(`
+`, existingEnd + END.length);
+    const through = newline < 0 ? source.length : newline + 1;
+    const owned = source.slice(from, through);
+    const generatedMethod = owned.includes("onCreate(");
+    if (!enabled)
+      return `${source.slice(0, from)}${source.slice(through)}`;
+    const region2 = androidManagedRegion(kotlin, generatedMethod);
+    return `${source.slice(0, from)}${region2}${source.slice(through)}`;
+  }
+  if (!enabled)
+    return source;
+  const onCreate = kotlin ? source.search(/\boverride\s+fun\s+onCreate\s*\([^)]*\)\s*\{/u) : source.search(/\b(?:public|protected)\s+void\s+onCreate\s*\([^)]*\)\s*\{/u);
+  if (onCreate >= 0) {
+    const brace = source.indexOf("{", onCreate);
+    const insert = source.indexOf(`
+`, brace) + 1;
+    const region2 = kotlin ? `        ${START}
+        AbsoluteMobileUpdateWatchdogPlugin.recoverInterruptedBoot(this)
+        registerPlugin(AbsoluteMobileUpdateWatchdogPlugin::class.java)
+        ${END}
+` : `        ${START}
+        AbsoluteMobileUpdateWatchdogPlugin.recoverInterruptedBoot(this);
+        registerPlugin(AbsoluteMobileUpdateWatchdogPlugin.class);
         ${END}
 `;
+    return `${source.slice(0, insert)}${region2}${source.slice(insert)}`;
+  }
+  const close = source.lastIndexOf("}");
+  if (close < 0)
+    throw new TypeError("Could not find the Android MainActivity class body.");
+  const region = kotlin ? `    ${START}
+    override fun onCreate(savedInstanceState: android.os.Bundle?) {
+        AbsoluteMobileUpdateWatchdogPlugin.recoverInterruptedBoot(this)
+        registerPlugin(AbsoluteMobileUpdateWatchdogPlugin::class.java)
+        super.onCreate(savedInstanceState)
+    }
+    ${END}
+` : `    ${START}
+    @Override
+    public void onCreate(android.os.Bundle savedInstanceState) {
+        AbsoluteMobileUpdateWatchdogPlugin.recoverInterruptedBoot(this);
+        registerPlugin(AbsoluteMobileUpdateWatchdogPlugin.class);
+        super.onCreate(savedInstanceState);
+    }
+    ${END}
+`;
+  const separator = source[close - 1] === `
+` ? "" : `
+`;
+  return `${source.slice(0, close)}${separator}${region}${source.slice(close)}`;
+};
+var configureAndroid3 = async (config, enabled) => {
+  const activityPath = await androidActivity(config);
+  const activity = await readFile19(activityPath, "utf8");
+  const packageName = activity.match(/^\s*package\s+([A-Za-z0-9_.]+)\s*[;\n]/mu)?.[1];
+  if (!packageName)
+    throw new TypeError("Android MainActivity package declaration was not found.");
+  const packagePath = packageName.replaceAll(".", "/");
+  const pluginPath = join21(config.nativeProjectDirectory, "android/app/src/main/java", packagePath, ANDROID_PLUGIN);
+  const changed = await Promise.all([
+    writeChanged(activityPath, injectAndroidActivity(activity, enabled)),
+    enabled ? writeChanged(pluginPath, androidPluginSource(packageName, config.updates?.bootTimeoutMs ?? 20000)) : removeOwnedFile(pluginPath)
+  ]);
+  return changed.some(Boolean);
+};
 var applyAbsoluteNativeUpdates = async (config, platforms = config.platforms) => {
-  if (config.engine !== "capacitor" || !platforms.includes("ios"))
+  if (config.engine !== "capacitor")
     return { changed: false };
-  const path = join21(config.nativeProjectDirectory, "ios/App/App/AppDelegate.swift");
-  const source = await readFile19(path, "utf8");
-  const updated = replaceRegion(source, config.updates ? iosRecoveryRegion : "");
-  return { changed: await writeChanged(path, updated) };
+  const enabled = config.updates !== undefined;
+  const changed = [];
+  if (platforms.includes("ios"))
+    changed.push(await configureIos3(config, enabled));
+  if (platforms.includes("android"))
+    changed.push(await configureAndroid3(config, enabled));
+  return { changed: changed.some(Boolean) };
 };
 // src/mobile/releasePublisher.ts
 import { access as access12 } from "fs/promises";
@@ -11590,8 +12033,8 @@ var prepareAbsoluteAndroidRelease = async (publisher, options) => {
   }
   return versionCode;
 };
-var isRecord11 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
-var isPublisher = (value) => isRecord11(value) && typeof value.publish === "function";
+var isRecord12 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var isPublisher = (value) => isRecord12(value) && typeof value.publish === "function";
 var publisherModulePath = (projectRoot, requested) => {
   const root = resolve15(projectRoot);
   const path = resolve15(root, requested);
@@ -11607,7 +12050,7 @@ var loadAbsoluteNativeReleasePublisher = async (projectRoot, requestedModulePath
     throw new TypeError(`Native release registry module does not exist: ${modulePath}`);
   });
   const loaded = await import(pathToFileURL3(modulePath).href);
-  const publisher = isRecord11(loaded) ? loaded.default ?? loaded.registry : undefined;
+  const publisher = isRecord12(loaded) ? loaded.default ?? loaded.registry : undefined;
   if (!isPublisher(publisher)) {
     throw new TypeError("Native release registry module must default-export a registry with publish(options).");
   }
@@ -11665,7 +12108,7 @@ var publishAbsoluteIosRelease = async (options) => {
 };
 // src/mobile/routeMetadataTransform.ts
 import { existsSync as existsSync7, readFileSync as readFileSync7 } from "fs";
-import { dirname as dirname13, extname as extname5, relative as relative13, resolve as resolve16 } from "path";
+import { dirname as dirname14, extname as extname5, relative as relative13, resolve as resolve16 } from "path";
 import ts2 from "typescript";
 var ROUTE_METHODS = new Set(["get", "head"]);
 var SOURCE_FILTER = /\.[cm]?[jt]sx?$/;
@@ -11716,7 +12159,7 @@ var PAGE_HANDLERS = new Map([
   ]
 ]);
 var posixPath = (value) => value.replace(/\\/g, "/");
-var findTsconfig = (entry, projectRoot) => ts2.findConfigFile(dirname13(entry), existsSync7, "tsconfig.json") ?? ts2.findConfigFile(projectRoot, existsSync7, "tsconfig.json");
+var findTsconfig = (entry, projectRoot) => ts2.findConfigFile(dirname14(entry), existsSync7, "tsconfig.json") ?? ts2.findConfigFile(projectRoot, existsSync7, "tsconfig.json");
 var createProgram = (entry, projectRoot) => {
   const configPath2 = findTsconfig(entry, projectRoot);
   if (!configPath2) {
@@ -11728,7 +12171,7 @@ var createProgram = (entry, projectRoot) => {
       target: ts2.ScriptTarget.ESNext
     });
   }
-  const parsed = ts2.parseJsonConfigFileContent(ts2.readConfigFile(configPath2, (path) => readFileSync7(path, "utf8")).config, ts2.sys, dirname13(configPath2));
+  const parsed = ts2.parseJsonConfigFileContent(ts2.readConfigFile(configPath2, (path) => readFileSync7(path, "utf8")).config, ts2.sys, dirname14(configPath2));
   if (!parsed.fileNames.includes(entry))
     parsed.fileNames.push(entry);
   return ts2.createProgram(parsed.fileNames, parsed.options);
@@ -12769,6 +13212,8 @@ var createAbsoluteMobileUpdateClient = (options) => {
       throw new TypeError("Mobile update signature verification failed.");
     if (manifest.releaseId === options.config.currentReleaseId)
       return { kind: "current" };
+    if (options.config.blockedReleaseIds?.includes(manifest.releaseId))
+      return { kind: "quarantined", releaseId: manifest.releaseId };
     if (!download)
       return { kind: "update-available", manifest };
     await options.store.begin(manifest);
@@ -12796,21 +13241,21 @@ import { pathToFileURL as pathToFileURL4 } from "url";
 import { createHash as createHash12, sign, verify } from "crypto";
 import {
   cp as cp3,
-  mkdir as mkdir13,
+  mkdir as mkdir14,
   mkdtemp as mkdtemp8,
-  readdir as readdir5,
+  readdir as readdir6,
   readFile as readFile20,
   rename as rename15,
-  rm as rm11,
+  rm as rm12,
   stat as stat4,
   writeFile as writeFile17
 } from "fs/promises";
-import { dirname as dirname14, join as join22, relative as relative14, resolve as resolve17 } from "path";
+import { dirname as dirname15, join as join22, relative as relative14, resolve as resolve17 } from "path";
 var UPDATE_MANIFEST_FILE = "update.json";
 var UPDATE_FILES_DIRECTORY = "files";
 var sha2562 = (value) => createHash12("sha256").update(value).digest("hex");
 var listFiles = async (root, directory = root) => {
-  const entries = await readdir5(directory, { withFileTypes: true });
+  const entries = await readdir6(directory, { withFileTypes: true });
   const paths = await Promise.all(entries.map(async (entry) => {
     const path = join22(directory, entry.name);
     if (entry.isDirectory())
@@ -12860,7 +13305,7 @@ var buildAbsoluteMobileUpdate = async (options) => {
       value: signature.toString("base64")
     }
   });
-  await mkdir13(outputRoot, { recursive: true });
+  await mkdir14(outputRoot, { recursive: true });
   const outputDirectory = join22(outputRoot, manifest.releaseId);
   const staging = await mkdtemp8(join22(outputRoot, ".stage-"));
   try {
@@ -12872,7 +13317,7 @@ var buildAbsoluteMobileUpdate = async (options) => {
 `);
     await rename15(staging, outputDirectory);
   } catch (error) {
-    await rm11(staging, { force: true, recursive: true });
+    await rm12(staging, { force: true, recursive: true });
     if (typeof error === "object" && error !== null && Reflect.get(error, "code") === "EEXIST")
       throw new TypeError(`Mobile update ${manifest.releaseId} already exists.`, { cause: error });
     throw error;
@@ -12888,7 +13333,7 @@ var copyAbsoluteMobileUpdateFile = async (updateDirectory, path, destination) =>
   const root = resolve17(updateDirectory, UPDATE_FILES_DIRECTORY);
   if (!source.startsWith(`${root}/`))
     throw new TypeError("Update file escaped its release.");
-  await mkdir13(dirname14(destination), { recursive: true });
+  await mkdir14(dirname15(destination), { recursive: true });
   await cp3(source, destination, { force: true });
 };
 var readAbsoluteMobileUpdate = async (directory) => parseAbsoluteMobileUpdateManifest(JSON.parse(await readFile20(join22(resolve17(directory), UPDATE_MANIFEST_FILE), "utf8")));
@@ -13196,5 +13641,5 @@ export {
   writeAbsoluteMobileGithubWorkflow
 };
 
-//# debugId=FA0645035026C26B64756E2164756E21
+//# debugId=15870DEEAD912CA464756E2164756E21
 //# sourceMappingURL=index.js.map