@absolutejs/absolute 0.20.0-beta.63 → 0.20.0-beta.64

package/dist/cli/index.js

@@ -1693,6 +1693,158 @@ var init_deviceCapabilities = __esm(() => {
   ];
 });
 
+// src/mobile/updateProtocol.ts
+var ABSOLUTE_MOBILE_UPDATE_FORMAT = 1, ABSOLUTE_MOBILE_UPDATE_MAX_FILE_BYTES, ABSOLUTE_MOBILE_UPDATE_MAX_FILES = 1e4, ABSOLUTE_MOBILE_UPDATE_MAX_TOTAL_BYTES, ABSOLUTE_MOBILE_UPDATE_SIGNATURE_ALGORITHM = "ecdsa-p256-sha256", HASH_PATTERN, RELEASE_PATTERN, KEY_ID_PATTERN, CHANNEL_PATTERN, isClassification = (value) => value === "bug-fix" || value === "content" || value === "security", object3 = (value) => typeof value === "object" && value !== null && !Array.isArray(value), canonicalValue = (value) => {
+  if (Array.isArray(value))
+    return value.map(canonicalValue);
+  if (!object3(value))
+    return value;
+  return Object.fromEntries(Object.keys(value).sort().map((key) => [key, canonicalValue(value[key])]));
+}, absoluteMobileUpdateSigningPayload = (manifest) => new TextEncoder().encode(canonicalizeAbsoluteMobileUpdate(manifest)), canonicalizeAbsoluteMobileUpdate = (value) => JSON.stringify(canonicalValue(value)), requireText2 = (value, field) => {
+  if (typeof value !== "string" || value.length === 0)
+    throw new TypeError(`${field} must be a non-empty string.`);
+  return value;
+}, normalizeAbsoluteMobileUpdatePath = (value) => {
+  const path = requireText2(value, "Update file path").replaceAll("\\", "/");
+  if (path.startsWith("/") || path.includes("\x00") || path.split("/").some((segment) => !segment || segment === "." || segment === "..")) {
+    throw new TypeError("Update file paths must be normalized relative paths.");
+  }
+  return path;
+}, parseFile = (value) => {
+  if (!object3(value))
+    throw new TypeError("Update files must be objects.");
+  const path = normalizeAbsoluteMobileUpdatePath(value.path);
+  if (typeof value.bytes !== "number" || !Number.isSafeInteger(value.bytes) || value.bytes < 0 || value.bytes > ABSOLUTE_MOBILE_UPDATE_MAX_FILE_BYTES) {
+    throw new TypeError(`Update file ${path} has an invalid byte length.`);
+  }
+  if (typeof value.sha256 !== "string" || !HASH_PATTERN.test(value.sha256))
+    throw new TypeError(`Update file ${path} has an invalid SHA-256 digest.`);
+  return { bytes: value.bytes, path, sha256: value.sha256 };
+}, parseAbsoluteMobileUnsignedUpdateManifest = (value) => {
+  if (!object3(value) || value.format !== ABSOLUTE_MOBILE_UPDATE_FORMAT)
+    throw new TypeError("Invalid AbsoluteJS mobile update manifest.");
+  const appId = requireText2(value.appId, "Update appId");
+  const channel = requireText2(value.channel, "Update channel");
+  if (!CHANNEL_PATTERN.test(channel))
+    throw new TypeError("Update channel contains unsupported characters.");
+  if (!isClassification(value.classification))
+    throw new TypeError("Update classification is invalid.");
+  const createdAt = requireText2(value.createdAt, "Update createdAt");
+  if (!Number.isFinite(Date.parse(createdAt)) || new Date(createdAt).toISOString() !== createdAt)
+    throw new TypeError("Update createdAt must be a canonical ISO timestamp.");
+  if (!Array.isArray(value.files) || value.files.length === 0)
+    throw new TypeError("An update must contain at least one file.");
+  if (value.files.length > ABSOLUTE_MOBILE_UPDATE_MAX_FILES)
+    throw new TypeError("Update contains too many files.");
+  const files = value.files.map(parseFile);
+  const sorted = [...files].sort((left, right) => left.path.localeCompare(right.path));
+  if (files.some((file, index) => file.path !== sorted[index]?.path))
+    throw new TypeError("Update files must be sorted by path.");
+  if (new Set(files.map(({ path }) => path)).size !== files.length)
+    throw new TypeError("Update file paths must be unique.");
+  if (files.reduce((total, file) => total + file.bytes, 0) > ABSOLUTE_MOBILE_UPDATE_MAX_TOTAL_BYTES)
+    throw new TypeError("Update exceeds the maximum uncompressed size.");
+  if (typeof value.releaseId !== "string" || !RELEASE_PATTERN.test(value.releaseId))
+    throw new TypeError("Update releaseId is invalid.");
+  if (typeof value.runtimeFingerprint !== "string" || !HASH_PATTERN.test(value.runtimeFingerprint))
+    throw new TypeError("Update runtime fingerprint is invalid.");
+  if (value.withinSubmittedPurpose !== true)
+    throw new TypeError("OTA updates must attest that they remain within the submitted app purpose.");
+  return {
+    appId,
+    channel,
+    classification: value.classification,
+    createdAt,
+    files,
+    format: ABSOLUTE_MOBILE_UPDATE_FORMAT,
+    releaseId: value.releaseId,
+    runtimeFingerprint: value.runtimeFingerprint,
+    withinSubmittedPurpose: true
+  };
+}, parseAbsoluteMobileUpdateManifest = (value) => {
+  if (!object3(value))
+    throw new TypeError("Invalid AbsoluteJS mobile update manifest.");
+  const { signature: signatureValue, ...unsignedValue } = value;
+  const unsigned = parseAbsoluteMobileUnsignedUpdateManifest(unsignedValue);
+  if (!object3(signatureValue))
+    throw new TypeError("Update signature is missing.");
+  if (signatureValue.algorithm !== ABSOLUTE_MOBILE_UPDATE_SIGNATURE_ALGORITHM)
+    throw new TypeError("Update signature algorithm is unsupported.");
+  const keyId = requireText2(signatureValue.keyId, "Update signature keyId");
+  if (!KEY_ID_PATTERN.test(keyId))
+    throw new TypeError("Update signature keyId is invalid.");
+  const signature = requireText2(signatureValue.value, "Update signature value");
+  let signatureBytes;
+  try {
+    signatureBytes = Uint8Array.from(atob(signature), (character) => character.charCodeAt(0));
+  } catch {
+    signatureBytes = new Uint8Array;
+  }
+  if (!/^[A-Za-z0-9+/]+={0,2}$/u.test(signature) || signatureBytes.byteLength !== 64 || btoa(String.fromCharCode(...signatureBytes)) !== signature)
+    throw new TypeError("Update signature is not canonical base64.");
+  return {
+    ...unsigned,
+    signature: {
+      algorithm: ABSOLUTE_MOBILE_UPDATE_SIGNATURE_ALGORITHM,
+      keyId,
+      value: signature
+    }
+  };
+}, unsignedAbsoluteMobileUpdate = (manifest) => {
+  const { signature: _signature, ...unsigned } = manifest;
+  return unsigned;
+};
+var init_updateProtocol = __esm(() => {
+  ABSOLUTE_MOBILE_UPDATE_MAX_FILE_BYTES = 32 * 1024 * 1024;
+  ABSOLUTE_MOBILE_UPDATE_MAX_TOTAL_BYTES = 128 * 1024 * 1024;
+  HASH_PATTERN = /^[a-f0-9]{64}$/u;
+  RELEASE_PATTERN = /^amu_[a-f0-9]{64}$/u;
+  KEY_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u;
+  CHANNEL_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u;
+});
+
+// src/mobile/updateRuntime.ts
+import { createHash } from "crypto";
+var ABSOLUTE_MOBILE_SHELL_ABI = 2, ABSOLUTE_MOBILE_UPDATE_RUNTIME_FORMAT = 1, createAbsoluteMobileUpdateRuntimeDescriptor = (options) => ({
+  appId: options.config.appId,
+  auth: options.auth ?? null,
+  deepLinks: {
+    hosts: options.config.deepLinkHosts,
+    ...options.config.deepLinkScheme ? { scheme: options.config.deepLinkScheme } : {}
+  },
+  deviceCapabilities: options.deviceCapabilities,
+  engine: options.config.engine,
+  format: ABSOLUTE_MOBILE_UPDATE_RUNTIME_FORMAT,
+  shellAbi: ABSOLUTE_MOBILE_SHELL_ABI,
+  syncSchema: options.syncSchema ?? null,
+  updates: options.config.updates ?? null
+}), fingerprintAbsoluteMobileUpdateRuntime = (descriptor) => createHash("sha256").update(canonicalizeAbsoluteMobileUpdate(descriptor)).digest("hex"), resolveAbsoluteMobileUpdateRuntime = (config, projectRoot) => {
+  const auth = resolveAbsoluteMobileAuthManifest(projectRoot, config);
+  const sync = auth !== undefined && projectUsesAbsoluteSync(projectRoot);
+  const syncSchema = sync ? discoverAbsoluteSyncSchema(projectRoot) : undefined;
+  const deviceCapabilities = resolveAbsoluteDeviceCapabilityPlan(projectRoot, config.engine);
+  const descriptor = createAbsoluteMobileUpdateRuntimeDescriptor({
+    ...auth ? { auth } : {},
+    config,
+    deviceCapabilities,
+    ...syncSchema ? { syncSchema } : {}
+  });
+  return {
+    auth,
+    descriptor,
+    deviceCapabilities,
+    fingerprint: fingerprintAbsoluteMobileUpdateRuntime(descriptor),
+    sync,
+    syncSchema
+  };
+};
+var init_updateRuntime = __esm(() => {
+  init_deviceCapabilities();
+  init_nativeAuth();
+  init_updateProtocol();
+  init_syncSchema();
+});
+
 // src/mobile/expoProject.ts
 import {
   access,
@@ -1705,7 +1857,7 @@ import {
   rm,
   writeFile
 } from "fs/promises";
-import { createHash } from "crypto";
+import { createHash as createHash2 } from "crypto";
 import { basename as basename2, dirname as dirname4, join as join8, relative as relative2, resolve as resolve5, sep } from "path";
 var EXPO_GENERATED_HEADER = `// Generated by AbsoluteJS. Edit absolute.config.ts, then run absolute mobile sync.
 `, EXPO_ASSET_EXTENSION = ".absasset", EXPO_PROJECT_MARKER = ".absolutejs-expo-project", exists = async (path) => {
@@ -1772,7 +1924,7 @@ var EXPO_GENERATED_HEADER = `// Generated by AbsoluteJS. Edit absolute.config.ts
 }, routeFile = (project, route) => join8(project, "app", ...routeSegments(route), "index.tsx"), packageDependencies = (plan) => Object.fromEntries(plan.requiredPackages.map((spec) => {
   const separator = spec.lastIndexOf("@");
   return [spec.slice(0, separator), spec.slice(separator + 1)];
-})), expoPackage = (auth, sync, devices) => ({
+})), expoPackage = (auth, sync, devices, updates) => ({
   dependencies: {
     "@absolutejs/devices": "0.7.0",
     "@absolutejs/devices-expo": "0.0.2",
@@ -1787,6 +1939,7 @@ var EXPO_GENERATED_HEADER = `// Generated by AbsoluteJS. Edit absolute.config.ts
     expo: "~57.0.9",
     "expo-asset": "~57.0.15",
     "expo-constants": "~57.0.16",
+    ...updates ? { "expo-crypto": "~57.0.1" } : {},
     "expo-dev-client": "~57.0.16",
     "expo-file-system": "~57.0.6",
     "expo-haptics": "~57.0.2",
@@ -1795,13 +1948,13 @@ var EXPO_GENERATED_HEADER = `// Generated by AbsoluteJS. Edit absolute.config.ts
       "expo-background-task": "~57.0.14",
       "expo-network": "~57.0.1",
       "expo-sqlite": "~57.0.2",
-      "expo-task-manager": "~57.0.14",
-      "expo-updates": "~57.0.19"
+      "expo-task-manager": "~57.0.14"
     } : {},
+    ...updates || sync ? { "expo-updates": "~57.0.19" } : {},
     "expo-router": "~57.0.17",
-    ...auth ? {
+    ...auth || updates ? {
       "expo-secure-store": "~57.0.2",
-      "expo-web-browser": "~57.0.2"
+      ...auth ? { "expo-web-browser": "~57.0.2" } : {}
     } : {},
     react: "19.2.3",
     "react-native": "0.86.3",
@@ -1823,7 +1976,7 @@ var EXPO_GENERATED_HEADER = `// Generated by AbsoluteJS. Edit absolute.config.ts
     start: "expo start --dev-client"
   },
   version: "0.0.0"
-}), expoAppConfig = (config, auth, sync, devices) => {
+}), expoAppConfig = (config, auth, sync, devices, runtimeFingerprint) => {
   const requirements = absoluteDeviceNativeRequirements(devices);
   const usageKey = (purpose) => {
     if (purpose === "camera")
@@ -1909,7 +2062,7 @@ var EXPO_GENERATED_HEADER = `// Generated by AbsoluteJS. Edit absolute.config.ts
       plugins: [
         "expo-router",
         ["expo-dev-client", { launchMode: "most-recent" }],
-        ...auth ? ["expo-secure-store"] : [],
+        ...auth || config.updates ? ["expo-secure-store"] : [],
         ...sync ? [
           "expo-sqlite",
           "expo-background-task",
@@ -1917,9 +2070,20 @@ var EXPO_GENERATED_HEADER = `// Generated by AbsoluteJS. Edit absolute.config.ts
         ] : [],
         ...configuredPlugins
       ],
-      runtimeVersion: { policy: "appVersion" },
+      runtimeVersion: runtimeFingerprint,
       scheme: config.deepLinkScheme,
       slug: config.appId.toLowerCase().replaceAll(".", "-"),
+      ...config.updates ? {
+        updates: {
+          checkAutomatically: "NEVER",
+          fallbackToCacheTimeout: config.updates.bootTimeoutMs,
+          requestHeaders: {
+            "x-absolute-mobile-app": config.appId,
+            "x-absolute-mobile-channel": config.updates.channel
+          },
+          url: config.updates.manifestUrl
+        }
+      } : {},
       version: config.iosVersion ?? "0.1.0"
     }
   };
@@ -1937,13 +2101,16 @@ config.resolver.nodeModulesPaths = [
 config.watchFolders = [appRoot];
 
 module.exports = config;
-`, layoutSource = (auth, sync) => `${EXPO_GENERATED_HEADER}import { Stack } from 'expo-router';
+`, layoutSource = (auth, sync, updates) => `${EXPO_GENERATED_HEADER}import { Stack } from 'expo-router';
 import '../src/generated/AbsoluteDevices';
 ${auth ? `import { useEffect, useState } from 'react';
 import { startAbsoluteExpoAuth } from '../src/generated/AbsoluteAuth';` : ""}
 ${sync ? "import { startAbsoluteExpoSync } from '../src/generated/AbsoluteSync';" : ""}
+${updates ? `import { useEffect as useUpdateEffect } from 'react';
+import { startAbsoluteExpoUpdates } from '../src/generated/AbsoluteUpdates';` : ""}
 
 export default function AbsoluteLayout() {
+	${updates ? "useUpdateEffect(() => { void startAbsoluteExpoUpdates(); }, []);" : ""}
 	${auth ? `const [ready, setReady] = useState(false);
 	useEffect(() => {
 		let active = true;
@@ -1953,6 +2120,39 @@ export default function AbsoluteLayout() {
 	if (!ready) return null;` : ""}
 	return <Stack screenOptions={{ headerShown: false }} />;
 }
+`, updatesRuntimeSource = (config) => `${EXPO_GENERATED_HEADER}import { randomUUID } from 'expo-crypto';
+import * as SecureStore from 'expo-secure-store';
+import * as Updates from 'expo-updates';
+
+const INSTALLATION_KEY = 'absolutejs.mobile.update.installation.v1';
+const REQUEST_HEADERS = ${JSON.stringify({
+  "x-absolute-mobile-app": config.appId,
+  "x-absolute-mobile-channel": config.updates?.channel
+})};
+
+let startPromise: Promise<void> | undefined;
+export const startAbsoluteExpoUpdates = () => {
+	startPromise ??= (async () => {
+		if (!Updates.isEnabled || __DEV__) return;
+		let installationId = await SecureStore.getItemAsync(INSTALLATION_KEY);
+		if (!installationId) {
+			installationId = randomUUID();
+			await SecureStore.setItemAsync(INSTALLATION_KEY, installationId);
+		}
+		await Updates.setUpdateRequestHeadersOverride({
+			...REQUEST_HEADERS,
+			'x-absolute-mobile-installation': installationId
+		});
+		const result = await Updates.checkForUpdateAsync();
+		if (result.isAvailable || result.isRollBackToEmbedded) {
+			await Updates.fetchUpdateAsync();
+		}
+	})().catch(error => {
+		console.warn('[absolute:mobile-update] Expo update check failed', error instanceof Error ? error.message : 'unknown error');
+	});
+
+	return startPromise;
+};
 `, nativeDiagnosticSource, devicesRuntimeSource = (config, plan, auth) => {
   const imports = plan.capabilities.map((name, index) => {
     const provider = plan.providers[name];
@@ -2023,7 +2223,7 @@ ${push ? `absoluteExpoAuth.onPrincipalChange(principal => {
 });` : ""}
 `;
 }, authRuntimeSource = (auth, appId) => {
-  const storageIdentity = createHash("sha256").update(appId).digest("hex").slice(0, 24);
+  const storageIdentity = createHash2("sha256").update(appId).digest("hex").slice(0, 24);
   return `${EXPO_GENERATED_HEADER}import { createAbsoluteExpoAuthClient } from '@absolutejs/auth-expo';
 import { createMobileAuthTransport, installAuthClientRuntimeTransport } from '@absolutejs/auth/client/mobile';
 
@@ -2054,7 +2254,7 @@ export const startAbsoluteExpoAuth = () => {
 };
 `;
 }, syncRuntimeSource = (config, schema) => {
-  const storageIdentity = createHash("sha256").update(config.appId).digest("hex").slice(0, 24);
+  const storageIdentity = createHash2("sha256").update(config.appId).digest("hex").slice(0, 24);
   const backgroundEndpoint = new URL("/__absolute/sync/background", config.productionOrigin).href;
   const backgroundTask = `${config.appId}.absolutejs.sync`;
   return `${EXPO_GENERATED_HEADER}import { runHeadlessSync } from '@absolutejs/sync/client/headless';
@@ -2669,6 +2869,7 @@ export default createAbsoluteNativeRoute(ApplicationNativeRoute, ${JSON.stringif
   const devices = resolveAbsoluteDeviceCapabilityPlan(projectRoot, "expo");
   const syncEnabled = Boolean(auth && projectUsesAbsoluteSync(projectRoot));
   const syncSchema = syncEnabled ? { components: discoverAbsoluteSyncSchema(projectRoot).components } : undefined;
+  const runtimeFingerprint = resolveAbsoluteMobileUpdateRuntime(config, projectRoot).fingerprint;
   const routeModules = Object.entries(config.expoNativeRoutes);
   const moduleChecks = await Promise.all(routeModules.map(async ([route, module]) => ({
     exists: await exists(module),
@@ -2701,12 +2902,12 @@ node_modules/
     ],
     [
       join8(project, "app.json"),
-      jsonSource(expoAppConfig(config, authEnabled, syncEnabled, devices))
+      jsonSource(expoAppConfig(config, authEnabled, syncEnabled, devices, runtimeFingerprint))
     ],
     [join8(project, "app.config.js"), expoDynamicAppConfig],
     [
       join8(project, "package.json"),
-      jsonSource(expoPackage(authEnabled, syncEnabled, devices))
+      jsonSource(expoPackage(authEnabled, syncEnabled, devices, config.updates !== undefined))
     ],
     [join8(project, "metro.config.js"), metroConfig(projectRoot)],
     [
@@ -2719,7 +2920,7 @@ node_modules/
     ],
     [
       join8(project, "app", "_layout.tsx"),
-      layoutSource(authEnabled, syncEnabled)
+      layoutSource(authEnabled, syncEnabled, config.updates !== undefined)
     ],
     [
       join8(project, "app", "__absolute", "native", "index.tsx"),
@@ -2738,6 +2939,9 @@ node_modules/
       webHostSource(config, auth, syncEnabled)
     ]
   ]);
+  if (config.updates) {
+    files.set(join8(project, "src", "generated", "AbsoluteUpdates.ts"), updatesRuntimeSource(config));
+  }
   if (auth) {
     files.set(join8(project, "src", "generated", "AbsoluteAuth.ts"), authRuntimeSource(auth, config.appId));
   }
@@ -2836,7 +3040,7 @@ export const materializeAbsoluteWebBundle = async () => {
   const nativeDataManifest = expoNativeDataManifest(manifest);
   const { appBuild } = nativeDataManifest;
   const files = await walkFiles(config.bundleDirectory);
-  const bundleHash = createHash("sha256");
+  const bundleHash = createHash2("sha256");
   const filesWithContents = await Promise.all(files.map(async (file) => ({ contents: await readFile(file), file })));
   filesWithContents.forEach(({ contents, file }) => {
     bundleHash.update(relative2(config.bundleDirectory, file).replaceAll("\\", "/"));
@@ -2871,6 +3075,7 @@ var init_expoProject = __esm(() => {
   init_nativeAuth();
   init_syncSchema();
   init_deviceCapabilities();
+  init_updateRuntime();
   expoDynamicAppConfig = `${EXPO_GENERATED_HEADER}const config = require('./app.json');
 
 if (process.env.ABSOLUTE_EXPO_DEVELOPMENT === '1' && process.env.ABSOLUTE_EXPO_DEVELOPMENT_CA_PATH) {
@@ -3471,7 +3676,7 @@ import {
   rm as rm2,
   writeFile as writeFile3
 } from "fs/promises";
-import { createHash as createHash2, randomUUID as randomUUID2 } from "crypto";
+import { createHash as createHash3, randomUUID as randomUUID2 } from "crypto";
 import {
   dirname as dirname5,
   isAbsolute,
@@ -3727,7 +3932,7 @@ var ANDROID_BOOT_TIMEOUT_MS = 180000, ANDROID_BOOT_POLL_MS = 1000, ANDROID_CAPTU
     lstat(path),
     readFile4(path)
   ]);
-  const contentDigest = createHash2("sha256").update(contents).digest("hex");
+  const contentDigest = createHash3("sha256").update(contents).digest("hex");
   return [
     `file\x00${identity}${metadata.mode & EXECUTABLE_MODE_MASK}\x00${contentDigest}\x00`
   ];
@@ -3739,7 +3944,7 @@ var ANDROID_BOOT_TIMEOUT_MS = 180000, ANDROID_BOOT_POLL_MS = 1000, ANDROID_CAPTU
 }, hashNativeTree = async (root, label, ignorePublicBundle) => {
   const resolvedRoot = await realpath(root);
   const records = await collectNativeDirectory(resolvedRoot, label, resolvedRoot, ignorePublicBundle);
-  return createHash2("sha256").update(records.join("")).digest("hex");
+  return createHash3("sha256").update(records.join("")).digest("hex");
 }, fingerprintAbsoluteAndroidNativeProject = async (project, options = {}) => {
   const { dependencies } = await nativeDependencySources(project.nativeDirectory);
   const roots = [
@@ -3755,7 +3960,7 @@ var ANDROID_BOOT_TIMEOUT_MS = 180000, ANDROID_BOOT_POLL_MS = 1000, ANDROID_CAPTU
     }))
   ];
   const treeDigests = await Promise.all(roots.map((root) => hashNativeTree(root.source, root.label, root.ignorePublicBundle)));
-  return createHash2("sha256").update(treeDigests.join("\x00")).digest("hex");
+  return createHash3("sha256").update(treeDigests.join("\x00")).digest("hex");
 }, parseJournal = (value) => {
   if (typeof value !== "object" || value === null)
     return null;
@@ -4476,7 +4681,7 @@ var init_androidEmulatorController = __esm(() => {
 });
 
 // src/mobile/emulatorInstaller.ts
-import { createHash as createHash3 } from "crypto";
+import { createHash as createHash4 } from "crypto";
 import { cp as cp2, mkdir as mkdir3, mkdtemp as mkdtemp2, readFile as readFile5, rm as rm3 } from "fs/promises";
 import { tmpdir } from "os";
 import { basename as basename3, join as join12 } from "path";
@@ -4581,7 +4786,7 @@ var ANDROID_API = 36, ANDROID_BUILD_TOOLS = "36.0.0", COMMAND_LINE_TOOLS_VERSION
   const release = releaseFor(plan.host, input.arch);
   input.log(`Downloading ${basename3(release.url)}...`);
   const bytes = await input.download(release.url);
-  const digest = createHash3("sha256").update(bytes).digest("hex");
+  const digest = createHash4("sha256").update(bytes).digest("hex");
   if (digest !== release.sha256) {
     throw new Error(`Android command-line-tools checksum mismatch: expected ${release.sha256}, received ${digest}.`);
   }
@@ -4782,7 +4987,7 @@ var init_emulatorInstaller = __esm(() => {
 });
 
 // src/mobile/iosRelease.ts
-import { createHash as createHash4 } from "crypto";
+import { createHash as createHash5 } from "crypto";
 import {
   access as access6,
   copyFile as copyFile2,
@@ -4863,7 +5068,7 @@ var ABSOLUTE_IOS_RELEASE_FORMAT = 1, developmentTeamArgument = (value) => {
   }));
   return nested.flat();
 }, fingerprintAbsoluteIosNativeProject = async (nativeDirectory, options = {}) => {
-  const hasher = createHash4("sha256");
+  const hasher = createHash5("sha256");
   const files = await fingerprintFiles(nativeDirectory, nativeDirectory, options);
   const contents = await Promise.all(files.map((file) => readFile6(file)));
   files.forEach((file, index) => {
@@ -4881,7 +5086,7 @@ var ABSOLUTE_IOS_RELEASE_FORMAT = 1, developmentTeamArgument = (value) => {
     throw new TypeError("mobile build --outdir must remain inside the project.");
   }
   return output;
-}, sha256File = async (path) => createHash4("sha256").update(await readFile6(path)).digest("hex"), findByExtension = async (root, extension) => {
+}, sha256File = async (path) => createHash5("sha256").update(await readFile6(path)).digest("hex"), findByExtension = async (root, extension) => {
   if (!await pathExists3(root))
     return;
   const entries = await readdir3(root, { withFileTypes: true });
@@ -5026,7 +5231,7 @@ var ABSOLUTE_IOS_RELEASE_FORMAT = 1, developmentTeamArgument = (value) => {
   let buildNumber = requireBuildNumber(options.buildNumber);
   if (options.prepareBuildNumber) {
     const nativeFingerprint = await fingerprintAbsoluteIosNativeProject(nativeDirectory);
-    const buildIdentity = createHash4("sha256").update(`${manifest.appBuild}\x00${nativeFingerprint}\x00${marketingVersion}`).digest("hex");
+    const buildIdentity = createHash5("sha256").update(`${manifest.appBuild}\x00${nativeFingerprint}\x00${marketingVersion}`).digest("hex");
     buildNumber = requireBuildNumber(await options.prepareBuildNumber(buildIdentity));
   }
   const stagingParent = resolve9(options.projectRoot, ".absolutejs/mobile");
@@ -5135,7 +5340,7 @@ var init_iosRelease = __esm(() => {
 });
 
 // src/mobile/iosSimulatorController.ts
-import { createHash as createHash5, randomUUID as randomUUID3 } from "crypto";
+import { createHash as createHash6, randomUUID as randomUUID3 } from "crypto";
 import {
   access as access7,
   copyFile as copyFile3,
@@ -5590,7 +5795,7 @@ var ABSOLUTE_IOS_SIMULATOR_NAME = "AbsoluteJS iPhone", BOOT_TIMEOUT_MS = 180000,
   ]);
   return result.exitCode === 0 && result.stdout.includes(project.config.appId);
 }, buildIosDebugApp = async (project, udid, fingerprint, run, signal) => {
-  const derivedDataPath = join14(project.projectRoot, ".absolutejs", "mobile", "ios-derived-data", createHash5("sha256").update(project.config.appId).digest("hex").slice(0, 16));
+  const derivedDataPath = join14(project.projectRoot, ".absolutejs", "mobile", "ios-derived-data", createHash6("sha256").update(project.config.appId).digest("hex").slice(0, 16));
   await mkdir5(derivedDataPath, { recursive: true });
   await requireSuccess2([
     project.xcodebuild,
@@ -5611,7 +5816,7 @@ var ABSOLUTE_IOS_SIMULATOR_NAME = "AbsoluteJS iPhone", BOOT_TIMEOUT_MS = 180000,
     throw new Error(`Xcode did not produce the simulator app at ${appPath}.`);
   return appPath;
 }, buildPhysicalIosDebugApp = async (project, identifier, run, signal) => {
-  const derivedDataPath = join14(project.projectRoot, ".absolutejs", "mobile", "ios-derived-data", createHash5("sha256").update(project.config.appId).digest("hex").slice(0, 16));
+  const derivedDataPath = join14(project.projectRoot, ".absolutejs", "mobile", "ios-derived-data", createHash6("sha256").update(project.config.appId).digest("hex").slice(0, 16));
   await mkdir5(derivedDataPath, { recursive: true });
   await requireSuccess2([
     project.xcodebuild,
@@ -6039,7 +6244,7 @@ var init_iosSimulatorController = __esm(() => {
 var ABSOLUTE_REMOTE_MAC_EVENT_PREFIX = "ABSOLUTE_REMOTE_MAC\t", ABSOLUTE_REMOTE_MAC_PROTOCOL_VERSION = 3;
 
 // src/mobile/remoteMacProtocol.ts
-import { createHash as createHash6, randomUUID as randomUUID4 } from "crypto";
+import { createHash as createHash7, randomUUID as randomUUID4 } from "crypto";
 import {
   chmod,
   mkdir as mkdir6,
@@ -6231,7 +6436,7 @@ var PROFILE_FORMAT = 1, REMOTE_STDIN_FLUSH_ATTEMPTS = 3, REMOTE_SESSION_CLOSE_TI
   }
   await saveStore(store, profilePath);
   return true;
-}, projectIdentity = (projectRoot, appId) => createHash6("sha256").update(`${resolvePath(projectRoot)}\x00${appId}`).digest("hex").slice(0, 20), createAbsoluteRemoteExpoIosDevProject = (config, projectRoot, profile) => {
+}, projectIdentity = (projectRoot, appId) => createHash7("sha256").update(`${resolvePath(projectRoot)}\x00${appId}`).digest("hex").slice(0, 20), createAbsoluteRemoteExpoIosDevProject = (config, projectRoot, profile) => {
   if (config.engine !== "expo")
     throw new TypeError("Remote Expo execution requires mobile.engine: expo.");
   return createAbsoluteRemoteIosDevProject(config, projectRoot, profile);
@@ -6420,7 +6625,7 @@ var PROFILE_FORMAT = 1, REMOTE_STDIN_FLUSH_ATTEMPTS = 3, REMOTE_SESSION_CLOSE_TI
     path = join15(outdir, "remoteMacAgentEntry.js");
   }
   const bytes = await Bun.file(path).arrayBuffer();
-  const sha256 = createHash6("sha256").update(new Uint8Array(bytes)).digest("hex");
+  const sha256 = createHash7("sha256").update(new Uint8Array(bytes)).digest("hex");
   return { bytes: bytes.byteLength, path, sha256 };
 }, portableRelativePath = (root, path) => relative7(root, path).split(sep5).join(posix.sep), portableMobileConfig = (project) => ({
   appId: project.config.appId,
@@ -7657,7 +7862,7 @@ var init_eslintChunked = __esm(() => {
 });
 
 // src/cli/scripts/eslint.ts
-import { createHash as createHash7 } from "crypto";
+import { createHash as createHash8 } from "crypto";
 import {
   existsSync as existsSync8,
   mkdirSync as mkdirSync5,
@@ -7756,7 +7961,7 @@ var DEFAULT_CACHE_LOCATION = ".absolutejs/eslint-cache", CACHE_CONTRACT_VERSION
     directory = parent;
   }
 }, createEslintCacheFingerprint = (cwd = process.cwd()) => {
-  const hash = createHash7("sha256");
+  const hash = createHash8("sha256");
   hash.update(`absolute-eslint-cache:${CACHE_CONTRACT_VERSION}\x00`);
   const configPath2 = findEslintConfigPath(cwd);
   for (const dependency of lintDependencyNames(cwd, configPath2).sort()) {
@@ -7766,7 +7971,7 @@ var DEFAULT_CACHE_LOCATION = ".absolutejs/eslint-cache", CACHE_CONTRACT_VERSION
   }
   return hash.digest("hex");
 }, createEslintConfigDigest = (cwd = process.cwd()) => {
-  const hash = createHash7("sha256");
+  const hash = createHash8("sha256");
   hash.update(`absolute-eslint-config:${CACHE_CONTRACT_VERSION}\x00`);
   const configPath2 = findEslintConfigPath(cwd);
   if (configPath2)
@@ -8630,7 +8835,7 @@ var init_buildMetadata = __esm(() => {
 });
 
 // src/mobile/releaseArtifact.ts
-import { createHash as createHash8 } from "crypto";
+import { createHash as createHash9 } from "crypto";
 var ABSOLUTE_MOBILE_COMPATIBILITY_FORMAT = 1, ABSOLUTE_MOBILE_RETAINED_GENERATIONS = 3, SHA_256 = "sha256", RELEASE_ID_PREFIX = "amc_", MODULE_SEGMENT_PARENT = "..", EXPORT_NAME_PATTERN, frameworks3, isCanonicalRecord = (value) => {
   if (typeof value !== "object" || value === null || Array.isArray(value)) {
     return false;
@@ -8667,7 +8872,7 @@ var ABSOLUTE_MOBILE_COMPATIBILITY_FORMAT = 1, ABSOLUTE_MOBILE_RETAINED_GENERATIO
     return normalizeCanonicalRecord(value, ancestors);
   }
   throw new TypeError("Compatibility metadata must contain only finite JSON values.");
-}, canonicalJson = (value) => JSON.stringify(normalizeCanonicalValue(value, new Set)), hashCanonicalValue = (value) => createHash8(SHA_256).update(canonicalJson(value)).digest("hex"), requireNonEmpty = (value, field) => {
+}, canonicalJson = (value) => JSON.stringify(normalizeCanonicalValue(value, new Set)), hashCanonicalValue = (value) => createHash9(SHA_256).update(canonicalJson(value)).digest("hex"), requireNonEmpty = (value, field) => {
   if (!value.trim()) {
     throw new TypeError(`${field} must not be empty.`);
   }
@@ -8839,10 +9044,10 @@ var normalizeSlug = (str) => str.trim().replace(/\s+/g, "-").replace(/[^A-Za-z0-
 };
 
 // src/mobile/buildRelease.ts
-import { createHash as createHash9 } from "crypto";
+import { createHash as createHash10 } from "crypto";
 import { mkdir as mkdir8, readFile as readFile9, writeFile as writeFile7 } from "fs/promises";
 import { basename as basename7, dirname as dirname11, extname as extname4, join as join20, relative as relative11, resolve as resolve15 } from "path";
-var sha256 = (bytes) => createHash9("sha256").update(bytes).digest("hex"), STATIC_SCRIPT_PATTERN, rewriteStaticScriptPaths = (source, manifest) => source.replace(STATIC_SCRIPT_PATTERN, (match, prefix, path, suffix) => {
+var sha256 = (bytes) => createHash10("sha256").update(bytes).digest("hex"), STATIC_SCRIPT_PATTERN, rewriteStaticScriptPaths = (source, manifest) => source.replace(STATIC_SCRIPT_PATTERN, (match, prefix, path, suffix) => {
   if (path.endsWith("/htmx.min.js"))
     return match;
   const key = toPascal(basename7(path, extname4(path)));
@@ -9408,10 +9613,10 @@ var init_capacitorBundle = __esm(() => {
 });
 
 // src/mobile/artifactStore.ts
-import { createHash as createHash10 } from "crypto";
+import { createHash as createHash11 } from "crypto";
 var DEFAULT_MAX_PRODUCER_BYTES = 134217728, SHA_2562 = "sha256", hashBlob = async (blob) => {
   const bytes = new Uint8Array(await blob.arrayBuffer());
-  return createHash10(SHA_2562).update(bytes).digest("hex");
+  return createHash11(SHA_2562).update(bytes).digest("hex");
 }, verifyAbsoluteMobileCompatibilityProducer = async (release, maxProducerBytes = DEFAULT_MAX_PRODUCER_BYTES) => {
   const { artifact, producer } = release;
   if (producer.size !== artifact.producer.bytes || producer.size > maxProducerBytes) {
@@ -9427,7 +9632,7 @@ var init_artifactStore = __esm(() => {
 });
 
 // src/mobile/materializedBundle.ts
-import { createHash as createHash11 } from "crypto";
+import { createHash as createHash12 } from "crypto";
 import {
   access as access8,
   mkdir as mkdir10,
@@ -9443,7 +9648,7 @@ var ABSOLUTE_MOBILE_MATERIALIZED_BUNDLE_FORMAT = 1, CURRENT_BUNDLE_FILE = "curre
     currentReleaseId,
     releases: releases.map(({ releaseId }) => releaseId)
   });
-  return `amb_${createHash11("sha256").update(identity).digest("hex")}`;
+  return `amb_${createHash12("sha256").update(identity).digest("hex")}`;
 }, parseBundleIndex = (value) => {
   if (!isRecord8(value) || value.format !== ABSOLUTE_MOBILE_MATERIALIZED_BUNDLE_FORMAT || typeof value.bundleId !== "string" || !BUNDLE_ID_PATTERN.test(value.bundleId) || typeof value.currentReleaseId !== "string" || !Array.isArray(value.releases)) {
     throw new TypeError("Invalid materialized mobile compatibility bundle.");
@@ -9556,136 +9761,6 @@ var init_materializedBundle = __esm(() => {
   BUNDLE_ID_PATTERN = /^amb_[a-f0-9]{64}$/;
 });
 
-// src/mobile/updateProtocol.ts
-var ABSOLUTE_MOBILE_UPDATE_FORMAT = 1, ABSOLUTE_MOBILE_UPDATE_MAX_FILE_BYTES, ABSOLUTE_MOBILE_UPDATE_MAX_FILES = 1e4, ABSOLUTE_MOBILE_UPDATE_MAX_TOTAL_BYTES, ABSOLUTE_MOBILE_UPDATE_SIGNATURE_ALGORITHM = "ecdsa-p256-sha256", HASH_PATTERN, RELEASE_PATTERN, KEY_ID_PATTERN, CHANNEL_PATTERN, isClassification = (value) => value === "bug-fix" || value === "content" || value === "security", object3 = (value) => typeof value === "object" && value !== null && !Array.isArray(value), canonicalValue = (value) => {
-  if (Array.isArray(value))
-    return value.map(canonicalValue);
-  if (!object3(value))
-    return value;
-  return Object.fromEntries(Object.keys(value).sort().map((key) => [key, canonicalValue(value[key])]));
-}, absoluteMobileUpdateSigningPayload = (manifest) => new TextEncoder().encode(canonicalizeAbsoluteMobileUpdate(manifest)), canonicalizeAbsoluteMobileUpdate = (value) => JSON.stringify(canonicalValue(value)), requireText2 = (value, field) => {
-  if (typeof value !== "string" || value.length === 0)
-    throw new TypeError(`${field} must be a non-empty string.`);
-  return value;
-}, normalizeAbsoluteMobileUpdatePath = (value) => {
-  const path = requireText2(value, "Update file path").replaceAll("\\", "/");
-  if (path.startsWith("/") || path.includes("\x00") || path.split("/").some((segment) => !segment || segment === "." || segment === "..")) {
-    throw new TypeError("Update file paths must be normalized relative paths.");
-  }
-  return path;
-}, parseFile = (value) => {
-  if (!object3(value))
-    throw new TypeError("Update files must be objects.");
-  const path = normalizeAbsoluteMobileUpdatePath(value.path);
-  if (typeof value.bytes !== "number" || !Number.isSafeInteger(value.bytes) || value.bytes < 0 || value.bytes > ABSOLUTE_MOBILE_UPDATE_MAX_FILE_BYTES) {
-    throw new TypeError(`Update file ${path} has an invalid byte length.`);
-  }
-  if (typeof value.sha256 !== "string" || !HASH_PATTERN.test(value.sha256))
-    throw new TypeError(`Update file ${path} has an invalid SHA-256 digest.`);
-  return { bytes: value.bytes, path, sha256: value.sha256 };
-}, parseAbsoluteMobileUnsignedUpdateManifest = (value) => {
-  if (!object3(value) || value.format !== ABSOLUTE_MOBILE_UPDATE_FORMAT)
-    throw new TypeError("Invalid AbsoluteJS mobile update manifest.");
-  const appId = requireText2(value.appId, "Update appId");
-  const channel = requireText2(value.channel, "Update channel");
-  if (!CHANNEL_PATTERN.test(channel))
-    throw new TypeError("Update channel contains unsupported characters.");
-  if (!isClassification(value.classification))
-    throw new TypeError("Update classification is invalid.");
-  const createdAt = requireText2(value.createdAt, "Update createdAt");
-  if (!Number.isFinite(Date.parse(createdAt)) || new Date(createdAt).toISOString() !== createdAt)
-    throw new TypeError("Update createdAt must be a canonical ISO timestamp.");
-  if (!Array.isArray(value.files) || value.files.length === 0)
-    throw new TypeError("An update must contain at least one file.");
-  if (value.files.length > ABSOLUTE_MOBILE_UPDATE_MAX_FILES)
-    throw new TypeError("Update contains too many files.");
-  const files = value.files.map(parseFile);
-  const sorted = [...files].sort((left, right) => left.path.localeCompare(right.path));
-  if (files.some((file, index) => file.path !== sorted[index]?.path))
-    throw new TypeError("Update files must be sorted by path.");
-  if (new Set(files.map(({ path }) => path)).size !== files.length)
-    throw new TypeError("Update file paths must be unique.");
-  if (files.reduce((total, file) => total + file.bytes, 0) > ABSOLUTE_MOBILE_UPDATE_MAX_TOTAL_BYTES)
-    throw new TypeError("Update exceeds the maximum uncompressed size.");
-  if (typeof value.releaseId !== "string" || !RELEASE_PATTERN.test(value.releaseId))
-    throw new TypeError("Update releaseId is invalid.");
-  if (typeof value.runtimeFingerprint !== "string" || !HASH_PATTERN.test(value.runtimeFingerprint))
-    throw new TypeError("Update runtime fingerprint is invalid.");
-  if (value.withinSubmittedPurpose !== true)
-    throw new TypeError("OTA updates must attest that they remain within the submitted app purpose.");
-  return {
-    appId,
-    channel,
-    classification: value.classification,
-    createdAt,
-    files,
-    format: ABSOLUTE_MOBILE_UPDATE_FORMAT,
-    releaseId: value.releaseId,
-    runtimeFingerprint: value.runtimeFingerprint,
-    withinSubmittedPurpose: true
-  };
-}, parseAbsoluteMobileUpdateManifest = (value) => {
-  if (!object3(value))
-    throw new TypeError("Invalid AbsoluteJS mobile update manifest.");
-  const { signature: signatureValue, ...unsignedValue } = value;
-  const unsigned = parseAbsoluteMobileUnsignedUpdateManifest(unsignedValue);
-  if (!object3(signatureValue))
-    throw new TypeError("Update signature is missing.");
-  if (signatureValue.algorithm !== ABSOLUTE_MOBILE_UPDATE_SIGNATURE_ALGORITHM)
-    throw new TypeError("Update signature algorithm is unsupported.");
-  const keyId = requireText2(signatureValue.keyId, "Update signature keyId");
-  if (!KEY_ID_PATTERN.test(keyId))
-    throw new TypeError("Update signature keyId is invalid.");
-  const signature = requireText2(signatureValue.value, "Update signature value");
-  let signatureBytes;
-  try {
-    signatureBytes = Uint8Array.from(atob(signature), (character) => character.charCodeAt(0));
-  } catch {
-    signatureBytes = new Uint8Array;
-  }
-  if (!/^[A-Za-z0-9+/]+={0,2}$/u.test(signature) || signatureBytes.byteLength !== 64 || btoa(String.fromCharCode(...signatureBytes)) !== signature)
-    throw new TypeError("Update signature is not canonical base64.");
-  return {
-    ...unsigned,
-    signature: {
-      algorithm: ABSOLUTE_MOBILE_UPDATE_SIGNATURE_ALGORITHM,
-      keyId,
-      value: signature
-    }
-  };
-}, unsignedAbsoluteMobileUpdate = (manifest) => {
-  const { signature: _signature, ...unsigned } = manifest;
-  return unsigned;
-};
-var init_updateProtocol = __esm(() => {
-  ABSOLUTE_MOBILE_UPDATE_MAX_FILE_BYTES = 32 * 1024 * 1024;
-  ABSOLUTE_MOBILE_UPDATE_MAX_TOTAL_BYTES = 128 * 1024 * 1024;
-  HASH_PATTERN = /^[a-f0-9]{64}$/u;
-  RELEASE_PATTERN = /^amu_[a-f0-9]{64}$/u;
-  KEY_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u;
-  CHANNEL_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u;
-});
-
-// src/mobile/updateRuntime.ts
-import { createHash as createHash12 } from "crypto";
-var ABSOLUTE_MOBILE_SHELL_ABI = 2, ABSOLUTE_MOBILE_UPDATE_RUNTIME_FORMAT = 1, createAbsoluteMobileUpdateRuntimeDescriptor = (options) => ({
-  appId: options.config.appId,
-  auth: options.auth ?? null,
-  deepLinks: {
-    hosts: options.config.deepLinkHosts,
-    ...options.config.deepLinkScheme ? { scheme: options.config.deepLinkScheme } : {}
-  },
-  deviceCapabilities: options.deviceCapabilities,
-  engine: options.config.engine,
-  format: ABSOLUTE_MOBILE_UPDATE_RUNTIME_FORMAT,
-  shellAbi: ABSOLUTE_MOBILE_SHELL_ABI,
-  syncSchema: options.syncSchema ?? null,
-  updates: options.config.updates ?? null
-}), fingerprintAbsoluteMobileUpdateRuntime = (descriptor) => createHash12("sha256").update(canonicalizeAbsoluteMobileUpdate(descriptor)).digest("hex");
-var init_updateRuntime = __esm(() => {
-  init_updateProtocol();
-});
-
 // src/mobile/buildPipeline.ts
 import { readFile as readFile12 } from "fs/promises";
 import { join as join23, resolve as resolve17 } from "path";
@@ -9754,16 +9829,13 @@ var isElysiaApp = (value) => typeof value === "object" && value !== null && type
     producerPath: resolve17(options.producerPath),
     runtime: String(ABSOLUTE_MOBILE_PAGE_PROTOCOL_VERSION)
   });
-  const auth = resolveAbsoluteMobileAuthManifest(options.projectRoot, mobile);
-  const sync = auth !== undefined && projectUsesAbsoluteSync(options.projectRoot);
-  const syncSchema = sync ? discoverAbsoluteSyncSchema(options.projectRoot) : undefined;
-  const deviceCapabilities = resolveAbsoluteDeviceCapabilityPlan(options.projectRoot, mobile.engine);
-  const runtimeFingerprint = fingerprintAbsoluteMobileUpdateRuntime(createAbsoluteMobileUpdateRuntimeDescriptor({
-    ...auth ? { auth } : {},
-    config: mobile,
+  const {
+    auth,
     deviceCapabilities,
-    ...syncSchema ? { syncSchema } : {}
-  }));
+    fingerprint: runtimeFingerprint,
+    sync,
+    syncSchema
+  } = resolveAbsoluteMobileUpdateRuntime(mobile, options.projectRoot);
   const usesPush = deviceCapabilities.capabilities.includes("pushNotifications");
   if (usesPush && !auth)
     throw new TypeError("Portable push notifications require @absolutejs/auth so provider tokens can be registered without exposing identity controls to page code.");
@@ -9811,8 +9883,6 @@ var init_buildPipeline = __esm(() => {
   init_materializedBundle();
   init_pageProtocol();
   init_releaseArtifact();
-  init_nativeAuth();
-  init_syncSchema();
   init_deviceCapabilities();
   init_expoProject();
   init_updateRuntime();
@@ -21099,7 +21169,7 @@ var ABSOLUTE_MOBILE_COMPLIANCE_REPORT_FORMAT = 1, HMR_ASSET_PATTERN, RELEASE_ASS
   } catch (error) {
     return fail5(`${platform6}.content-security-policy`, error instanceof Error ? error.message : "Packaged shell CSP could not be validated.", path, "Rebuild the production mobile bundle with the AbsoluteJS-generated shell.");
   }
-}, expoApplicationConfigCheck = async (config) => {
+}, expoApplicationConfigCheck = async (config, projectRoot) => {
   const path = join53(config.nativeProjectDirectory, "app.json");
   try {
     const root = await readJsonObject(path);
@@ -21109,13 +21179,14 @@ var ABSOLUTE_MOBILE_COMPLIANCE_REPORT_FORMAT = 1, HMR_ASSET_PATTERN, RELEASE_ASS
     if (expo.name !== config.appName || config.platforms.includes("android") && (!isRecord15(expo.android) || expo.android.package !== config.appId) || config.platforms.includes("ios") && (!isRecord15(expo.ios) || expo.ios.bundleIdentifier !== config.appId)) {
       throw new TypeError("Generated Expo application identity does not match mobile config.");
     }
-    if (!isRecord15(expo.runtimeVersion) || expo.runtimeVersion.policy !== "appVersion") {
-      throw new TypeError("Generated Expo runtimeVersion must follow the native app version.");
+    const expectedRuntime = resolveAbsoluteMobileUpdateRuntime(config, projectRoot).fingerprint;
+    if (expo.runtimeVersion !== expectedRuntime) {
+      throw new TypeError("Generated Expo runtimeVersion does not match the AbsoluteJS native contract.");
     }
     if (Array.isArray(expo.plugins) && expo.plugins.some((plugin) => typeof plugin === "string" && plugin.includes("withAbsoluteDevelopmentCa"))) {
       throw new TypeError("Generated Expo production config includes the development CA plugin.");
     }
-    return pass("expo.app-config", "Expo application identity and runtime policy match the production mobile config.", path);
+    return pass("expo.app-config", "Expo application identity and generated native runtime match the production mobile config.", path);
   } catch (error) {
     return fail5("expo.app-config", error instanceof Error ? error.message : "Generated Expo application config could not be validated.", path, "Run `absolute mobile build <platform>`; do not edit the generated Expo project.");
   }
@@ -21405,7 +21476,7 @@ var ABSOLUTE_MOBILE_COMPLIANCE_REPORT_FORMAT = 1, HMR_ASSET_PATTERN, RELEASE_ASS
   const journalPath = join53(projectRoot, ".absolutejs", "mobile", "expo-dev-session", "journal.json");
   const checks = await Promise.all([
     journalReleaseCheck(journalPath, "android"),
-    expoApplicationConfigCheck(config),
+    expoApplicationConfigCheck(config, projectRoot),
     expoEmbeddedAssetsCheck(config),
     manifestReleaseCheck(manifestPath),
     hmrAssetsReleaseCheck(config.bundleDirectory),
@@ -21459,7 +21530,7 @@ var ABSOLUTE_MOBILE_COMPLIANCE_REPORT_FORMAT = 1, HMR_ASSET_PATTERN, RELEASE_ASS
   ];
   checks.push(config.iosVersion ? pass("ios.marketing-version", `The iOS marketing version is ${config.iosVersion}.`) : fail5("ios.marketing-version", "iOS has no explicit App Store marketing version.", projectRoot, "Add mobile.ios.version to absolutejs.config.ts, for example 1.0.0."));
   checks.push(...await Promise.all([
-    expoApplicationConfigCheck(config),
+    expoApplicationConfigCheck(config, projectRoot),
     expoEmbeddedAssetsCheck(config),
     hmrAssetsReleaseCheck(config.bundleDirectory),
     embeddedBundleReleaseCheck(config, projectRoot, "ios", config.bundleDirectory),
@@ -21565,6 +21636,7 @@ var init_releaseDoctor = __esm(() => {
   init_nativeAuth();
   init_syncSchema();
   init_deviceCapabilities();
+  init_updateRuntime();
   HMR_ASSET_PATTERN = /(?:__HMR_WS__|hmr-timing|__absolute_target|absolutejs-error-overlay)/u;
   RELEASE_ASSET_EXTENSIONS = new Set([".html", ".js", ".mjs"]);
   EXACT_VERSION_PATTERN = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/u;
@@ -23136,11 +23208,93 @@ var init_updateSigning = __esm(() => {
   init_updateProtocol();
 });
 
+// src/mobile/expoUpdate.ts
+import { access as access16, mkdir as mkdir18, readFile as readFile26, writeFile as writeFile20 } from "fs/promises";
+import { dirname as dirname35, extname as extname10, join as join58 } from "path";
+var ABSOLUTE_EXPO_UPDATE_DESCRIPTOR = "_absolute/expo-update.json", ABSOLUTE_EXPO_UPDATE_FORMAT = 1, object4 = (value) => typeof value === "object" && value !== null && !Array.isArray(value), safePath = (value, field) => {
+  if (typeof value !== "string" || value.length === 0)
+    throw new TypeError(`Expo update ${field} is invalid.`);
+  const path = value.replaceAll("\\", "/");
+  if (path.startsWith("/") || path.split("/").some((segment) => !segment || segment === "." || segment === ".."))
+    throw new TypeError(`Expo update ${field} must be a relative path.`);
+  return path;
+}, extension = (value, path) => {
+  if (value === null || value === undefined) {
+    const inferred = extname10(path);
+    return inferred ? inferred.slice(1) : undefined;
+  }
+  if (typeof value !== "string" || !/^[A-Za-z0-9]+$/u.test(value))
+    throw new TypeError("Expo update asset extension is invalid.");
+  return value;
+}, asset = (value) => {
+  if (!object4(value))
+    throw new TypeError("Expo update asset is invalid.");
+  const path = safePath(value.path, "asset path");
+  const normalizedExtension = extension(value.extension ?? value.ext, path);
+  return {
+    ...normalizedExtension ? { extension: normalizedExtension } : {},
+    path
+  };
+}, platform6 = (value) => {
+  if (!object4(value) || !Array.isArray(value.assets))
+    throw new TypeError("Expo update platform metadata is invalid.");
+  const launchValue = object4(value.launchAsset) ? value.launchAsset : { path: value.bundle };
+  const launchPath = safePath(launchValue.path, "launch bundle");
+  const launchExtension = extension(launchValue.extension ?? null, launchPath);
+  const assets = value.assets.map(asset);
+  return {
+    assets,
+    launchAsset: {
+      ...launchExtension ? { extension: launchExtension } : {},
+      path: launchPath
+    }
+  };
+}, parseAbsoluteExpoUpdateDescriptor = (value) => {
+  if (!object4(value) || value.engine !== "expo" || value.format !== ABSOLUTE_EXPO_UPDATE_FORMAT || !object4(value.expoConfig) || !object4(value.platforms) || typeof value.runtimeVersion !== "string" || !/^[a-f0-9]{64}$/u.test(value.runtimeVersion))
+    throw new TypeError("AbsoluteJS Expo update descriptor is invalid.");
+  const platforms = {};
+  for (const name of ["android", "ios"]) {
+    const candidate = value.platforms[name];
+    if (candidate !== undefined)
+      platforms[name] = platform6(candidate);
+  }
+  if (Object.keys(platforms).length === 0)
+    throw new TypeError("Expo update descriptor has no native platforms.");
+  return {
+    engine: "expo",
+    expoConfig: value.expoConfig,
+    format: ABSOLUTE_EXPO_UPDATE_FORMAT,
+    platforms,
+    runtimeVersion: value.runtimeVersion
+  };
+}, finalizeAbsoluteExpoUpdateExport = async (options) => {
+  const metadata = JSON.parse(await readFile26(join58(options.exportDirectory, "metadata.json"), "utf8"));
+  if (!object4(metadata) || !object4(metadata.fileMetadata))
+    throw new TypeError("Expo export metadata.json is invalid.");
+  const descriptor = parseAbsoluteExpoUpdateDescriptor({
+    engine: "expo",
+    expoConfig: options.expoConfig,
+    format: ABSOLUTE_EXPO_UPDATE_FORMAT,
+    platforms: metadata.fileMetadata,
+    runtimeVersion: options.runtimeVersion
+  });
+  const referenced = Object.values(descriptor.platforms).flatMap((entry) => entry ? [entry.launchAsset, ...entry.assets] : []);
+  await Promise.all(referenced.map(({ path }) => access16(join58(options.exportDirectory, path)).catch(() => {
+    throw new TypeError(`Expo export metadata references missing asset ${path}.`);
+  })));
+  const destination = join58(options.exportDirectory, ABSOLUTE_EXPO_UPDATE_DESCRIPTOR);
+  await mkdir18(dirname35(destination), { recursive: true });
+  await writeFile20(destination, `${JSON.stringify(descriptor, null, "\t")}
+`);
+  return { descriptor, path: destination };
+};
+var init_expoUpdate = () => {};
+
 // src/mobile/updatePublisher.ts
-import { access as access16 } from "fs/promises";
+import { access as access17 } from "fs/promises";
 import { isAbsolute as isAbsolute9, relative as relative32, resolve as resolve45, sep as sep10 } from "path";
 import { pathToFileURL as pathToFileURL3 } from "url";
-var object4 = (value) => typeof value === "object" && value !== null && !Array.isArray(value), isPublisher2 = (value) => object4(value) && typeof value.publishUpdate === "function" && typeof value.promoteUpdate === "function" && typeof value.rollbackUpdate === "function", projectPath2 = (projectRoot, requested, label) => {
+var object5 = (value) => typeof value === "object" && value !== null && !Array.isArray(value), isPublisher2 = (value) => object5(value) && typeof value.publishUpdate === "function" && typeof value.promoteUpdate === "function" && typeof value.rollbackUpdate === "function", projectPath2 = (projectRoot, requested, label) => {
   const root = resolve45(projectRoot);
   const path = resolve45(root, requested);
   const projectRelative = relative32(root, path);
@@ -23149,11 +23303,11 @@ var object4 = (value) => typeof value === "object" && value !== null && !Array.i
   return path;
 }, loadAbsoluteMobileUpdatePublisher = async (projectRoot, requestedModulePath) => {
   const modulePath = projectPath2(projectRoot, requestedModulePath, "mobile update registry");
-  await access16(modulePath).catch(() => {
+  await access17(modulePath).catch(() => {
     throw new TypeError(`Mobile update registry does not exist: ${modulePath}`);
   });
   const loaded = await import(pathToFileURL3(modulePath).href);
-  const publisher = object4(loaded) ? loaded.default ?? loaded.registry : undefined;
+  const publisher = object5(loaded) ? loaded.default ?? loaded.registry : undefined;
   if (!isPublisher2(publisher))
     throw new TypeError("Mobile update registry must implement publishUpdate, promoteUpdate, and rollbackUpdate.");
   return publisher;
@@ -23200,12 +23354,19 @@ var exports_mobile = {};
 __export(exports_mobile, {
   runMobile: () => runMobile
 });
-import { access as access17, mkdir as mkdir18, readFile as readFile26, writeFile as writeFile20 } from "fs/promises";
+import {
+  access as access18,
+  mkdir as mkdir19,
+  mkdtemp as mkdtemp9,
+  readFile as readFile27,
+  rm as rm13,
+  writeFile as writeFile21
+} from "fs/promises";
 import { createPublicKey as createPublicKey3 } from "crypto";
-import { join as join58, relative as relative33, resolve as resolve46 } from "path";
+import { join as join59, relative as relative33, resolve as resolve46 } from "path";
 import { createInterface } from "readline/promises";
 var NOT_FOUND4 = -1, isRecord18 = (value) => typeof value === "object" && value !== null && !Array.isArray(value), CAPACITOR_PACKAGES, CAPACITOR_PACKAGE_SPECS, CAPACITOR_SYNC_PACKAGE_SPECS, packageNameFromSpec = (spec) => spec.slice(0, spec.lastIndexOf("@")), directProjectPackages = async (projectRoot) => {
-  const manifest = JSON.parse(await readFile26(join58(projectRoot, "package.json"), "utf8"));
+  const manifest = JSON.parse(await readFile27(join59(projectRoot, "package.json"), "utf8"));
   if (!isRecord18(manifest))
     throw new TypeError("Application package.json must contain an object.");
   const names = new Set;
@@ -23218,7 +23379,7 @@ var NOT_FOUND4 = -1, isRecord18 = (value) => typeof value === "object" && value
   return names;
 }, resolvedPackageVersion = async (projectRoot, packageName) => {
   try {
-    const manifest = JSON.parse(await readFile26(join58(projectRoot, "node_modules", packageName, "package.json"), "utf8"));
+    const manifest = JSON.parse(await readFile27(join59(projectRoot, "node_modules", packageName, "package.json"), "utf8"));
     return isRecord18(manifest) && typeof manifest.version === "string" ? manifest.version : undefined;
   } catch {
     return;
@@ -23260,9 +23421,9 @@ var NOT_FOUND4 = -1, isRecord18 = (value) => typeof value === "object" && value
   }
   return value;
 }, capacitorExecutable = async (projectRoot) => {
-  const executable = join58(projectRoot, "node_modules", ".bin", "cap");
+  const executable = join59(projectRoot, "node_modules", ".bin", "cap");
   try {
-    await access17(executable);
+    await access18(executable);
     return executable;
   } catch {
     throw new TypeError(`Capacitor is not installed in this app. Run: bun add ${CAPACITOR_PACKAGES.join(" ")}`);
@@ -23279,10 +23440,10 @@ var NOT_FOUND4 = -1, isRecord18 = (value) => typeof value === "object" && value
   if (exitCode !== 0) {
     throw new TypeError(`Capacitor exited with status ${exitCode}.`);
   }
-}, runCapacitorForPlatforms = (projectRoot, command, platforms) => platforms.reduce((pending, platform6) => pending.then(() => runCapacitor(projectRoot, [command, platform6])), Promise.resolve()), expoExecutable = async (project) => {
-  const executable = join58(project, "node_modules", ".bin", "expo");
+}, runCapacitorForPlatforms = (projectRoot, command, platforms) => platforms.reduce((pending, platform7) => pending.then(() => runCapacitor(projectRoot, [command, platform7])), Promise.resolve()), expoExecutable = async (project) => {
+  const executable = join59(project, "node_modules", ".bin", "expo");
   try {
-    await access17(executable);
+    await access18(executable);
     return executable;
   } catch {
     throw new TypeError("Expo dependencies are not installed in the generated shell. Run `absolute mobile init --yes`.");
@@ -23311,14 +23472,14 @@ var NOT_FOUND4 = -1, isRecord18 = (value) => typeof value === "object" && value
     throw new TypeError(`Expo exited with status ${exitCode}.`);
 }, ensureExpoPackages = async (project, args) => {
   try {
-    const manifest = JSON.parse(await readFile26(join58(project, "package.json"), "utf8"));
+    const manifest = JSON.parse(await readFile27(join59(project, "package.json"), "utf8"));
     const dependencies = typeof manifest === "object" && manifest !== null ? Reflect.get(manifest, "dependencies") : undefined;
     if (typeof dependencies !== "object" || dependencies === null || Array.isArray(dependencies))
       throw new TypeError("Generated Expo dependencies are invalid.");
     await Promise.all(Object.entries(dependencies).map(async ([name, expected]) => {
       if (typeof expected !== "string")
         throw new TypeError("Generated Expo dependency version is invalid.");
-      const installed = JSON.parse(await readFile26(join58(project, "node_modules", name, "package.json"), "utf8"));
+      const installed = JSON.parse(await readFile27(join59(project, "node_modules", name, "package.json"), "utf8"));
       const actual = typeof installed === "object" && installed !== null ? Reflect.get(installed, "version") : undefined;
       if (typeof actual !== "string")
         throw new TypeError("Installed Expo dependency version is invalid.");
@@ -23478,8 +23639,8 @@ var NOT_FOUND4 = -1, isRecord18 = (value) => typeof value === "object" && value
     await ensureExpoPackages(mobile.nativeProjectDirectory, args);
     const assets = await syncAbsoluteExpoWebAssets(mobile);
     console.log(`Synced ${assets.assets} embedded AbsoluteJS assets for ${assets.appBuild}.`);
-    const platform7 = args.find((value) => value === "android" || value === "ios");
-    const platforms2 = platform7 ? [platform7] : mobile.platforms;
+    const platform8 = args.find((value) => value === "android" || value === "ios");
+    const platforms2 = platform8 ? [platform8] : mobile.platforms;
     await runExpo(mobile.nativeProjectDirectory, [
       "prebuild",
       "--no-install",
@@ -23489,8 +23650,8 @@ var NOT_FOUND4 = -1, isRecord18 = (value) => typeof value === "object" && value
     return;
   }
   await ensureCapacitorPackages(projectRoot, args, mobile);
-  const platform6 = args.find((value) => value === "android" || value === "ios");
-  const platforms = platform6 ? [platform6] : mobile.platforms;
+  const platform7 = args.find((value) => value === "android" || value === "ios");
+  const platforms = platform7 ? [platform7] : mobile.platforms;
   if (platforms.includes("android"))
     await repairAbsoluteAndroidDevSession(projectRoot);
   if (platforms.includes("ios"))
@@ -23598,8 +23759,8 @@ var NOT_FOUND4 = -1, isRecord18 = (value) => typeof value === "object" && value
   }
 }, runReleaseDoctor = async (args) => {
   const { mobile, projectRoot } = await loadMobile(valueAfter(args, "--config"));
-  const platform6 = args.find((value) => value === "android" || value === "ios");
-  const effectiveMobile = platform6 ? { ...mobile, platforms: [platform6] } : mobile;
+  const platform7 = args.find((value) => value === "android" || value === "ios");
+  const effectiveMobile = platform7 ? { ...mobile, platforms: [platform7] } : mobile;
   const result = await inspectAbsoluteMobileRelease(effectiveMobile, projectRoot);
   if (args.includes("--json")) {
     console.log(JSON.stringify(createAbsoluteMobileComplianceReport(effectiveMobile, result), null, 2));
@@ -23648,10 +23809,51 @@ Mobile release security and compliance checks failed.`);
   if (value === "bug-fix" || value === "content" || value === "security")
     return value;
   throw new TypeError("mobile update build requires --classification bug-fix|content|security.");
+}, prepareExpoMobileUpdateExport = async (options) => {
+  const { mobile } = options;
+  if (mobile.engine !== "expo")
+    return {
+      bundleDirectory: mobile.bundleDirectory,
+      temporaryDirectory: undefined
+    };
+  await ensureExpoPackages(mobile.nativeProjectDirectory, options.args);
+  const temporaryParent = join59(options.projectRoot, ".absolutejs", "mobile", "expo-update-exports");
+  await mkdir19(temporaryParent, { recursive: true });
+  const temporaryDirectory = await mkdtemp9(join59(temporaryParent, ".stage-"));
+  try {
+    await runExpo(mobile.nativeProjectDirectory, [
+      "export",
+      "--platform",
+      "ios",
+      "--platform",
+      "android",
+      "--output-dir",
+      temporaryDirectory,
+      "--clear"
+    ], { production: true });
+    const generatedApp = JSON.parse(await readFile27(join59(mobile.nativeProjectDirectory, "app.json"), "utf8"));
+    const expoConfig = isRecord18(generatedApp) ? generatedApp.expo : undefined;
+    if (!isRecord18(expoConfig))
+      throw new TypeError("Generated Expo app configuration is invalid.");
+    const computedRuntime = resolveAbsoluteMobileUpdateRuntime(mobile, options.projectRoot).fingerprint;
+    if (computedRuntime !== options.runtimeFingerprint)
+      throw new TypeError("Expo native runtime changed while exporting the update.");
+    await finalizeAbsoluteExpoUpdateExport({
+      expoConfig,
+      exportDirectory: temporaryDirectory,
+      runtimeVersion: options.runtimeFingerprint
+    });
+    return {
+      bundleDirectory: temporaryDirectory,
+      temporaryDirectory
+    };
+  } catch (error) {
+    await rm13(temporaryDirectory, { force: true, recursive: true });
+    throw error;
+  }
 }, buildMobileUpdate = async (args) => {
   const configPath2 = valueAfter(args, "--config");
   const { mobile, projectRoot } = await loadMobile(configPath2);
-  requireCapacitorEngine(mobile, "mobile update build");
   if (!mobile.updates)
     throw new TypeError("mobile update build requires mobile.updates.publicKeys in absolute.config.ts.");
   if (!args.includes("--within-submitted-purpose"))
@@ -23665,13 +23867,14 @@ Mobile release security and compliance checks failed.`);
     throw new TypeError("mobile update build requires --signing-key <private-key.pem>.");
   const startedAt = performance.now();
   let success = false;
+  let expoExportDirectory;
   try {
     await start(mobileBuildServerEntry(args), valueAfter(args, "--web-outdir"), configPath2, { prepareOnly: true });
-    const embedded = JSON.parse(await readFile26(join58(mobile.bundleDirectory, "absolute-mobile-manifest.json"), "utf8"));
+    const embedded = JSON.parse(await readFile27(join59(mobile.bundleDirectory, "absolute-mobile-manifest.json"), "utf8"));
     const runtimeFingerprint = isRecord18(embedded) ? embedded.nativeRuntime : undefined;
     if (typeof runtimeFingerprint !== "string" || !/^[a-f0-9]{64}$/u.test(runtimeFingerprint))
       throw new TypeError("Prepared mobile bundle is missing its native runtime fingerprint.");
-    const privateKey = await readFile26(resolve46(projectRoot, signingKeyPath));
+    const privateKey = await readFile27(resolve46(projectRoot, signingKeyPath));
     const configuredPublicKey = Buffer.from(mobile.updates.publicKeys[keyId], "base64");
     const derivedPublicKey = createPublicKey3(privateKey).export({
       format: "der",
@@ -23679,13 +23882,20 @@ Mobile release security and compliance checks failed.`);
     });
     if (!configuredPublicKey.equals(derivedPublicKey))
       throw new TypeError(`The private key does not match mobile.updates.publicKeys.${keyId}.`);
+    const expoExport = await prepareExpoMobileUpdateExport({
+      args,
+      mobile,
+      projectRoot,
+      runtimeFingerprint
+    });
+    expoExportDirectory = expoExport.temporaryDirectory;
     const result = await buildAbsoluteMobileUpdate({
       appId: mobile.appId,
-      bundleDirectory: mobile.bundleDirectory,
+      bundleDirectory: expoExport.bundleDirectory,
       channel: mobile.updates.channel,
       classification,
       keyId,
-      outputDirectory: valueAfter(args, "--outdir") ?? join58(projectRoot, ".absolutejs", "mobile", "updates"),
+      outputDirectory: valueAfter(args, "--outdir") ?? join59(projectRoot, ".absolutejs", "mobile", "updates"),
       privateKey,
       runtimeFingerprint
     });
@@ -23696,6 +23906,8 @@ Mobile release security and compliance checks failed.`);
     console.log(`Manifest: ${result.manifestPath}`);
     return result;
   } finally {
+    if (expoExportDirectory)
+      await rm13(expoExportDirectory, { force: true, recursive: true });
     sendTelemetryEvent("mobile:update-build", {
       classification: classification ?? "invalid",
       durationMs: Math.round(performance.now() - startedAt),
@@ -23962,7 +24174,7 @@ Mobile release security and compliance checks failed.`);
     const durationMs = Math.round(performance.now() - startedAt);
     console.log(`Built ${release.metadata.signed ? "signed" : "unsigned"} Android App Bundle in ${getDurationString(durationMs)}.`);
     console.log(`Artifact: ${release.artifactPath}`);
-    console.log(`Metadata: ${join58(release.releaseRoot, "release.json")}`);
+    console.log(`Metadata: ${join59(release.releaseRoot, "release.json")}`);
     return release;
   } finally {
     sendTelemetryEvent("mobile:android-release-build", {
@@ -24110,7 +24322,7 @@ Mobile release security and compliance checks failed.`);
     const durationMs = Math.round(performance.now() - startedAt);
     console.log(`Built ${release.metadata.signed ? "signed" : "unsigned"} iOS IPA ${release.metadata.marketingVersion}${release.metadata.buildNumber ? ` (${release.metadata.buildNumber})` : ""} in ${getDurationString(durationMs)}.`);
     console.log(`Artifact: ${release.artifactPath}`);
-    console.log(`Metadata: ${join58(release.releaseRoot, "release.json")}`);
+    console.log(`Metadata: ${join59(release.releaseRoot, "release.json")}`);
     return release;
   } finally {
     stopListeningForCancellation();
@@ -24219,7 +24431,7 @@ Mobile release security and compliance checks failed.`);
     checks.push({
       id: "sync.storage-schema",
       label: `Offline schema ${schema.components.map((component2) => `${component2.id}@${component2.version}`).join(", ")}`,
-      path: join58(projectRoot, "package.json"),
+      path: join59(projectRoot, "package.json"),
       platform: "host",
       status: "pass"
     });
@@ -24227,7 +24439,7 @@ Mobile release security and compliance checks failed.`);
     checks.push({
       id: "sync.storage-schema",
       label: "Offline schema metadata is invalid",
-      path: join58(projectRoot, "package.json"),
+      path: join59(projectRoot, "package.json"),
       platform: "host",
       remediation: error instanceof Error ? error.message : String(error),
       status: "fail"
@@ -24238,9 +24450,9 @@ Mobile release security and compliance checks failed.`);
     await runReleaseDoctor(args);
     return;
   }
-  const platform6 = args.find((value) => value === "android" || value === "ios");
+  const platform7 = args.find((value) => value === "android" || value === "ios");
   const requestedRemote = valueAfter(args, "--remote");
-  const remoteProfile = platform6 === "ios" && (requestedRemote !== undefined || process.platform !== "darwin") ? await getAbsoluteRemoteMacProfile(requestedRemote, remoteProfilePath()) : undefined;
+  const remoteProfile = platform7 === "ios" && (requestedRemote !== undefined || process.platform !== "darwin") ? await getAbsoluteRemoteMacProfile(requestedRemote, remoteProfilePath()) : undefined;
   if (remoteProfile) {
     if (args.includes("--fix"))
       throw new TypeError("Remote Mac doctor is read-only. Configure Xcode or Bun on the Mac, then rerun doctor.");
@@ -24253,7 +24465,7 @@ Mobile release security and compliance checks failed.`);
   }
   const checks = await inspectAbsoluteMobileToolchain();
   appendSyncSchemaDoctorCheck(checks, process.cwd());
-  const selected = platform6 ? checks.filter((check2) => check2.platform === "host" || check2.platform === platform6) : checks;
+  const selected = platform7 ? checks.filter((check2) => check2.platform === "host" || check2.platform === platform7) : checks;
   if (args.includes("--json")) {
     if (args.includes("--fix")) {
       throw new TypeError("mobile doctor --json cannot be combined with --fix.");
@@ -24264,7 +24476,7 @@ Mobile release security and compliance checks failed.`);
   printDoctorChecks(selected);
   if (!args.includes("--fix"))
     return;
-  const installPlatform = platform6 ?? "android";
+  const installPlatform = platform7 ?? "android";
   const relevantFailures = selected.filter((check2) => check2.platform === installPlatform && (check2.status === "fail" || check2.status === "warn"));
   if (relevantFailures.length === 0) {
     console.log(`
@@ -24380,12 +24592,12 @@ Emulator setup verification:`);
     timeoutMs
   });
 }, writeAndroidFailureArtifacts = async (options) => {
-  await mkdir18(options.artifactRoot, { recursive: true });
-  const screenshot = options.session ? await options.session.screenshot(join58(options.artifactRoot, "android-failure.png")).catch(() => {
+  await mkdir19(options.artifactRoot, { recursive: true });
+  const screenshot = options.session ? await options.session.screenshot(join59(options.artifactRoot, "android-failure.png")).catch(() => {
     return;
   }) : undefined;
-  const diagnosticPath = join58(options.artifactRoot, "android-failure.json");
-  await writeFile20(diagnosticPath, `${JSON.stringify({
+  const diagnosticPath = join59(options.artifactRoot, "android-failure.json");
+  await writeFile21(diagnosticPath, `${JSON.stringify({
     diagnostics: options.session?.diagnostics ?? [],
     error: options.error instanceof Error ? options.error.message : String(options.error),
     platform: "android",
@@ -24449,7 +24661,7 @@ Emulator setup verification:`);
       console.log(JSON.stringify(report, null, 2));
     else
       printAndroidTestReport(report);
-    const screenshot = reportRoot ? await session.screenshot(join58(artifactRoot, "android-emulator.png")) : undefined;
+    const screenshot = reportRoot ? await session.screenshot(join59(artifactRoot, "android-emulator.png")) : undefined;
     await writeRequestedAndroidReport({
       adb,
       args,
@@ -24638,8 +24850,8 @@ Emulator setup verification:`);
     throw new Error(`${label} failed: ${result.stderr.trim() || result.stdout.trim() || `status ${result.exitCode}`}`);
   return result;
 }, writeIosFailureArtifacts = async (options) => {
-  await mkdir18(options.artifactRoot, { recursive: true });
-  const screenshot = join58(options.artifactRoot, "ios-failure.png");
+  await mkdir19(options.artifactRoot, { recursive: true });
+  const screenshot = join59(options.artifactRoot, "ios-failure.png");
   const screenshotResult = captureCommand4([
     options.xcrun,
     "simctl",
@@ -24648,8 +24860,8 @@ Emulator setup verification:`);
     "screenshot",
     screenshot
   ]);
-  const diagnosticPath = join58(options.artifactRoot, "ios-failure.json");
-  await writeFile20(diagnosticPath, `${JSON.stringify({
+  const diagnosticPath = join59(options.artifactRoot, "ios-failure.json");
+  await writeFile21(diagnosticPath, `${JSON.stringify({
     appId: options.appId,
     error: options.error instanceof Error ? options.error.message : String(options.error),
     platform: "ios",
@@ -24663,14 +24875,14 @@ Emulator setup verification:`);
     diagnosticPath,
     screenshot: screenshotResult.exitCode === 0 ? screenshot : undefined
   };
-}, nativeReportRoot = (args, projectRoot, platform6) => {
+}, nativeReportRoot = (args, projectRoot, platform7) => {
   const index = args.indexOf("--report");
   if (index === NOT_FOUND4)
     return;
   const candidate = args[index + 1];
   const explicit = candidate?.startsWith("--") ? undefined : candidate;
   const timestamp = new Date().toISOString().replaceAll(":", "-");
-  return safeArtifactRoot(projectRoot, explicit ?? `.absolutejs/mobile/test-reports/${platform6}-${timestamp}`);
+  return safeArtifactRoot(projectRoot, explicit ?? `.absolutejs/mobile/test-reports/${platform7}-${timestamp}`);
 }, absolutejsVersionForReport = async () => {
   let absolutejsVersion = process.env.ABSOLUTE_VERSION ?? "unknown";
   const versions = await Promise.all([
@@ -24894,8 +25106,8 @@ Emulator setup verification:`);
       mobile.appId
     ], "iOS app launch");
     await waitForIosHmrClient({ https, port, timeoutMs });
-    await mkdir18(artifactRoot, { recursive: true });
-    const screenshot = join58(artifactRoot, "ios-simulator.png");
+    await mkdir19(artifactRoot, { recursive: true });
+    const screenshot = join59(artifactRoot, "ios-simulator.png");
     requireCapturedCommand([xcrun, "simctl", "io", simulator.udid, "screenshot", screenshot], "iOS simulator screenshot");
     const hmrApply = await waitForRequestedIosHmr(args, instance, timeoutMs);
     const report = {
@@ -25095,6 +25307,8 @@ var init_mobile = __esm(() => {
   init_mobileInspect();
   init_ciWorkflow();
   init_updateSigning();
+  init_expoUpdate();
+  init_updateRuntime();
   init_updatePublisher();
   CAPACITOR_PACKAGES = [
     "@capacitor/core",
@@ -25131,9 +25345,9 @@ var exports_typecheck = {};
 __export(exports_typecheck, {
   typecheck: () => typecheck
 });
-import { resolve as resolve47, join as join59 } from "path";
+import { resolve as resolve47, join as join60 } from "path";
 import { existsSync as existsSync44, readFileSync as readFileSync40 } from "fs";
-import { mkdir as mkdir19, writeFile as writeFile21 } from "fs/promises";
+import { mkdir as mkdir20, writeFile as writeFile22 } from "fs/promises";
 var isCommandService3 = (service) => service.kind === "command" || Array.isArray(service.command), resolveConfigPath = (configPath2) => resolve47(configPath2 ?? process.env.ABSOLUTE_CONFIG ?? "absolute.config.ts"), getTypecheckTargets = async (configPath2) => {
   if (!existsSync44(resolveConfigPath(configPath2))) {
     const defaultService = {};
@@ -25240,8 +25454,8 @@ Found ${errorCount} error${suffix}.`;
     console.error("\x1B[31m\u2717\x1B[0m vue-tsc is required for Vue type checking. Install it: bun add -d vue-tsc");
     process.exit(1);
   }
-  const vueTsconfigPath = join59(cacheDir, "tsconfig.vue-check.json");
-  await writeFile21(vueTsconfigPath, JSON.stringify({
+  const vueTsconfigPath = join60(cacheDir, "tsconfig.vue-check.json");
+  await writeFile22(vueTsconfigPath, JSON.stringify({
     compilerOptions: {
       rootDir: ".."
     },
@@ -25260,7 +25474,7 @@ Found ${errorCount} error${suffix}.`;
     ...base,
     "--incremental",
     "--tsBuildInfoFile",
-    join59(cacheDir, "vue-tsc.tsbuildinfo")
+    join60(cacheDir, "vue-tsc.tsbuildinfo")
   ]);
   if (cached.exitCode === 0 || cached.output.length > 0)
     return cached;
@@ -25271,8 +25485,8 @@ Found ${errorCount} error${suffix}.`;
     console.error("\x1B[31m\u2717\x1B[0m @angular/compiler-cli is required for Angular type checking. Install it: bun add -d @angular/compiler-cli");
     process.exit(1);
   }
-  const angularTsconfigPath = join59(cacheDir, "tsconfig.angular-check.json");
-  await writeFile21(angularTsconfigPath, JSON.stringify({
+  const angularTsconfigPath = join60(cacheDir, "tsconfig.angular-check.json");
+  await writeFile22(angularTsconfigPath, JSON.stringify({
     angularCompilerOptions: {
       strictTemplates: true
     },
@@ -25291,8 +25505,8 @@ Found ${errorCount} error${suffix}.`;
     console.error("\x1B[31m\u2717\x1B[0m typescript is required for type checking. Install it: bun add -d typescript");
     process.exit(1);
   }
-  const tscConfigPath = join59(cacheDir, "tsconfig.typecheck.json");
-  return writeFile21(tscConfigPath, JSON.stringify({
+  const tscConfigPath = join60(cacheDir, "tsconfig.typecheck.json");
+  return writeFile22(tscConfigPath, JSON.stringify({
     compilerOptions: {
       rootDir: ".."
     },
@@ -25306,7 +25520,7 @@ Found ${errorCount} error${suffix}.`;
     resolve47(tscConfigPath),
     "--incremental",
     "--tsBuildInfoFile",
-    join59(cacheDir, "tsc.tsbuildinfo"),
+    join60(cacheDir, "tsc.tsbuildinfo"),
     "--pretty"
   ]));
 }, buildSvelteCheck = async (cacheDir, svelteDir) => {
@@ -25315,8 +25529,8 @@ Found ${errorCount} error${suffix}.`;
     console.error("\x1B[31m\u2717\x1B[0m svelte-check is required for Svelte type checking. Install it: bun add -d svelte-check");
     process.exit(1);
   }
-  const svelteTsconfigPath = join59(cacheDir, "tsconfig.svelte-check.json");
-  await writeFile21(svelteTsconfigPath, JSON.stringify({
+  const svelteTsconfigPath = join60(cacheDir, "tsconfig.svelte-check.json");
+  await writeFile22(svelteTsconfigPath, JSON.stringify({
     extends: resolve47("tsconfig.json"),
     files: ABSOLUTE_TYPECHECK_FILES,
     include: [`../${svelteDir}/**/*`]
@@ -25345,7 +25559,7 @@ Found ${errorCount} error${suffix}.`;
     ...new Set(targets.map((config) => config.angularDirectory).filter((dir) => typeof dir === "string" && dir.length > 0))
   ];
   const cacheDir = ".absolutejs";
-  await mkdir19(cacheDir, { recursive: true });
+  await mkdir20(cacheDir, { recursive: true });
   const checks = [];
   checks.push(hasVue ? buildVueTscCheck(cacheDir) : buildTscCheck(cacheDir));
   for (const svelteDir of hasSvelte ? svelteDirs : []) {