@absolutejs/absolute 0.20.0-beta.63 → 0.20.0-beta.64

package/dist/mobile/index.js

@@ -401,770 +401,770 @@ var normalizeSlug = (str) => str.trim().replace(/\s+/g, "-").replace(/[^A-Za-z0-
   return normalizeSlug(str).split(/[-_]/).filter(Boolean).map((segment) => segment.charAt(0).toUpperCase() + segment.slice(1).toLowerCase()).join("");
 };
 
-// src/mobile/nativeAuth.ts
-import { readFileSync as readFileSync2 } from "fs";
-import { join as join11 } from "path";
-var ABSOLUTE_AUTH_PACKAGE = "@absolutejs/auth", ABSOLUTE_EXPO_AUTH_CORE_VERSION = "0.75.6", ABSOLUTE_EXPO_AUTH_PACKAGE = "@absolutejs/auth-expo", ABSOLUTE_EXPO_AUTH_VERSION = "0.0.2", ABSOLUTE_EXPO_SYNC_CORE_VERSION = "2.31.0", ABSOLUTE_EXPO_SYNC_PACKAGE = "@absolutejs/sync-expo", ABSOLUTE_EXPO_SYNC_VERSION = "0.0.2", ABSOLUTE_NATIVE_AUTH_CLIENTS_ENV = "ABSOLUTE_AUTH_NATIVE_CLIENTS", ABSOLUTE_NATIVE_AUTH_SCOPES, ABSOLUTE_SYNC_PACKAGE = "@absolutejs/sync", readPackageManifest = (projectRoot) => {
-  try {
-    return JSON.parse(readFileSync2(join11(projectRoot, "package.json"), "utf8"));
-  } catch {
+// src/mobile/deviceCapabilities.ts
+import { existsSync as existsSync3, readFileSync as readFileSync2 } from "fs";
+import { extname as extname3, join as join11, relative as relative9, resolve as resolve10 } from "path";
+import { fileURLToPath } from "url";
+import ts from "typescript";
+var DEVICES_PACKAGE = "@absolutejs/devices", ABSOLUTE_MOBILE_SHELL_DEVICE_CAPABILITIES, ADAPTERS, SOURCE_GLOB, IGNORED_DIRECTORIES, IDENTIFIER_PATTERN, providerModulePattern = (provider) => new RegExp(`^@absolutejs/devices-${provider}/[a-z][a-z0-9-]*$`, "u"), providerPackagePattern = (provider) => provider === "capacitor" ? /^@capacitor\/[a-z][a-z0-9-]*@\d+\.\d+\.\d+$/u : /^(?:expo-[a-z][a-z0-9-]*|@react-native-[a-z0-9-]+\/[a-z][a-z0-9-]*)@\d+\.\d+\.\d+$/u, providerLabel = (provider) => provider === "capacitor" ? "Capacitor" : "Expo", ANDROID_PERMISSION_PATTERN, IOS_USAGE_DESCRIPTIONS, IOS_PRIVACY_ACCESSED_API_REASONS, IOS_PRIVACY_ACCESSED_APIS, object = (value) => typeof value === "object" && value !== null && !Array.isArray(value), readJson = (path) => {
+  const value = JSON.parse(readFileSync2(path, "utf8"));
+  if (!object(value))
+    throw new TypeError(`${path} must contain an object.`);
+  return value;
+}, text = (value, field2) => {
+  if (typeof value !== "string" || value.length === 0)
+    throw new TypeError(`${field2} must be a non-empty string.`);
+  return value;
+}, androidPermissions = (value, field2) => {
+  if (value === undefined)
     return;
+  if (!object(value))
+    throw new TypeError(`${field2} must be an object.`);
+  const { permissions } = value;
+  if (!Array.isArray(permissions) || !permissions.every((permission) => typeof permission === "string" && ANDROID_PERMISSION_PATTERN.test(permission)))
+    throw new TypeError(`${field2}.permissions must contain Android permission names.`);
+  return [...permissions];
+}, iosPrivacyAccessedApis = (value, field2) => {
+  if (value === undefined)
+    return;
+  if (!object(value))
+    throw new TypeError(`${field2} must be an object.`);
+  const privacy = {};
+  for (const api of IOS_PRIVACY_ACCESSED_APIS) {
+    const reasons = value[api];
+    if (reasons === undefined)
+      continue;
+    const supported = IOS_PRIVACY_ACCESSED_API_REASONS[api];
+    if (!Array.isArray(reasons) || reasons.length === 0 || !reasons.every((reason) => typeof reason === "string" && supported.has(reason)))
+      throw new TypeError(`${field2} contains an unsupported API or reason.`);
+    privacy[api] = [...reasons];
   }
-}, packageManifestHas = (manifest, packageName) => {
-  if (typeof manifest !== "object" || manifest === null)
-    return false;
-  return [
-    Reflect.get(manifest, "dependencies"),
-    Reflect.get(manifest, "devDependencies"),
-    Reflect.get(manifest, "optionalDependencies"),
-    Reflect.get(manifest, "peerDependencies")
-  ].some((dependencies) => typeof dependencies === "object" && dependencies !== null && Object.hasOwn(dependencies, packageName));
-}, createAbsoluteMobileAuthManifest = (config) => {
-  const scheme = config.deepLinkScheme ?? config.appId.toLowerCase();
+  if (Object.keys(value).some((api) => !IOS_PRIVACY_ACCESSED_APIS.some((known) => known === api)))
+    throw new TypeError(`${field2} contains an unsupported API or reason.`);
+  return privacy;
+}, iosNativeRequirements = (value, field2) => {
+  if (value === undefined)
+    return;
+  if (!object(value))
+    throw new TypeError(`${field2} must be an object.`);
+  const {
+    privacyAccessedApis,
+    pushNotifications,
+    systemBars: systemBars2,
+    usageDescriptions
+  } = value;
+  if (pushNotifications !== undefined && pushNotifications !== true)
+    throw new TypeError(`${field2}.pushNotifications must be true.`);
+  if (systemBars2 !== undefined && systemBars2 !== true)
+    throw new TypeError(`${field2}.systemBars must be true.`);
+  if (usageDescriptions !== undefined && (!Array.isArray(usageDescriptions) || !usageDescriptions.every((purpose) => typeof purpose === "string" && IOS_USAGE_DESCRIPTIONS.has(purpose))))
+    throw new TypeError(`${field2}.usageDescriptions contains an unsupported purpose.`);
+  const privacy = iosPrivacyAccessedApis(privacyAccessedApis, `${field2}.privacyAccessedApis`);
   return {
-    clientId: `absolutejs-native:${config.appId}`,
-    issuer: config.productionOrigin,
-    redirectUri: `${scheme}://auth/callback`,
-    scopes: [...ABSOLUTE_NATIVE_AUTH_SCOPES]
+    ...privacy === undefined ? {} : { privacyAccessedApis: privacy },
+    ...pushNotifications === true ? { pushNotifications: true } : {},
+    ...systemBars2 === true ? { systemBars: true } : {},
+    ...usageDescriptions === undefined ? {} : { usageDescriptions: [...usageDescriptions] }
   };
-}, installAbsoluteMobileAuthEnvironment = (projectRoot, config) => {
-  const auth = resolveAbsoluteMobileAuthManifest(projectRoot, config);
-  const serialized = serializeAbsoluteMobileAuthEnvironment(config, auth);
-  if (serialized === undefined)
-    delete process.env[ABSOLUTE_NATIVE_AUTH_CLIENTS_ENV];
-  else
-    process.env[ABSOLUTE_NATIVE_AUTH_CLIENTS_ENV] = serialized;
-  return auth;
-}, projectUsesAbsoluteAuth = (projectRoot) => packageManifestHas(readPackageManifest(projectRoot), ABSOLUTE_AUTH_PACKAGE), projectUsesAbsoluteSync = (projectRoot) => packageManifestHas(readPackageManifest(projectRoot), ABSOLUTE_SYNC_PACKAGE), resolveAbsoluteMobileAuthManifest = (projectRoot, config) => projectUsesAbsoluteAuth(projectRoot) ? createAbsoluteMobileAuthManifest(config) : undefined, serializeAbsoluteMobileAuthEnvironment = (config, auth) => auth === undefined ? undefined : JSON.stringify([
-  {
-    ...auth,
-    name: `${config.appName} native app`
-  }
-]);
-var init_nativeAuth = __esm(() => {
-  ABSOLUTE_NATIVE_AUTH_SCOPES = ["openid", "profile"];
-});
-
-// node_modules/@absolutejs/sync/dist/client/index.js
-var RUNTIME_TRANSPORT, host, isRegistry = (value) => typeof value === "object" && value !== null && Array.isArray(Reflect.get(value, "installations")) && Array.isArray(Reflect.get(value, "clients")), registry, pools, SyncLocalDataPolicyError, SyncLocalStoreSchemaError, positiveVersion = (value, label) => {
-  if (!Number.isSafeInteger(value) || value < 1)
-    throw new SyncLocalStoreSchemaError("INVALID_PLAN", `${label} must be a positive safe integer`);
-  return value;
-}, isSchemaBundle = (schema) => ("components" in schema), validatePolicyMatch = (match, label) => {
-  if (match.length === 0 || match.trim() !== match || /^\*+$/.test(match) || match.includes("**"))
-    throw new SyncLocalDataPolicyError("INVALID_POLICY", `${label}.match must be an exact name or a non-empty glob without adjacent wildcards.`);
-}, validateSyncLocalDataPolicy = (policy, label = "localData") => {
-  if (policy.maxBytesPerNamespace !== undefined && (!Number.isSafeInteger(policy.maxBytesPerNamespace) || policy.maxBytesPerNamespace < 1))
-    throw new SyncLocalDataPolicyError("INVALID_POLICY", `${label}.maxBytesPerNamespace must be a positive safe integer.`);
-  for (const [index, rule] of (policy.collections ?? []).entries()) {
-    validatePolicyMatch(rule.match, `${label}.collections[${index}]`);
-    if (rule.maxAgeMs !== undefined && (!Number.isSafeInteger(rule.maxAgeMs) || rule.maxAgeMs < 1))
-      throw new SyncLocalDataPolicyError("INVALID_POLICY", `${label}.collections[${index}].maxAgeMs must be a positive safe integer.`);
-    if (rule.persistence === "memory-only" && rule.protection === "required")
-      throw new SyncLocalDataPolicyError("INVALID_POLICY", `${label}.collections[${index}] cannot require at-rest protection when it is memory-only.`);
-    if (rule.sensitivity !== undefined && rule.sensitivity !== "public" && rule.protection !== "required" && rule.persistence !== "memory-only")
-      throw new SyncLocalDataPolicyError("INVALID_POLICY", `${label}.collections[${index}] declares ${rule.sensitivity} data without required protection or memory-only persistence.`);
-  }
-  for (const [index, rule] of (policy.mutations ?? []).entries()) {
-    validatePolicyMatch(rule.match, `${label}.mutations[${index}]`);
-    if (rule.conflict !== undefined && rule.conflict.strategy !== "client-wins" && rule.conflict.strategy !== "manual" && rule.conflict.strategy !== "server-wins")
-      throw new SyncLocalDataPolicyError("INVALID_POLICY", `${label}.mutations[${index}].conflict.strategy is invalid.`);
-    if (rule.conflict?.maxAttempts !== undefined && (!Number.isSafeInteger(rule.conflict.maxAttempts) || rule.conflict.maxAttempts < 1))
-      throw new SyncLocalDataPolicyError("INVALID_POLICY", `${label}.mutations[${index}].conflict.maxAttempts must be a positive safe integer.`);
-    if (rule.conflict?.maxAttempts !== undefined && rule.conflict.strategy !== "client-wins")
-      throw new SyncLocalDataPolicyError("INVALID_POLICY", `${label}.mutations[${index}].conflict.maxAttempts is only valid for client-wins.`);
-    if (rule.persistence === "memory-only" && rule.protection === "required")
-      throw new SyncLocalDataPolicyError("INVALID_POLICY", `${label}.mutations[${index}] cannot require at-rest protection when it is memory-only.`);
-    if (rule.sensitivity !== undefined && rule.sensitivity !== "public" && rule.protection !== "required" && rule.persistence !== "memory-only")
-      throw new SyncLocalDataPolicyError("INVALID_POLICY", `${label}.mutations[${index}] declares ${rule.sensitivity} arguments without required protection.`);
-  }
-  return policy;
-}, normalizeSyncLocalSchemaComponents = (schema = { version: 1 }) => {
-  const components = isSchemaBundle(schema) ? [...schema.components] : [{ ...schema, id: "@absolutejs/app" }];
-  const ids = new Set;
-  for (const component of components) {
-    if (typeof component.id !== "string" || component.id.trim() !== component.id || component.id.length === 0)
-      throw new SyncLocalStoreSchemaError("INVALID_PLAN", "Sync schema component id must be non-empty and trimmed");
-    if (ids.has(component.id))
-      throw new SyncLocalStoreSchemaError("INVALID_PLAN", `Sync schema component "${component.id}" is declared more than once`);
-    ids.add(component.id);
-    if (component.localData)
-      validateSyncLocalDataPolicy(component.localData, `${component.id}.localData`);
-  }
-  return components.sort((a, b) => a.id.localeCompare(b.id));
-}, resolveSyncLocalSchemaComponents = (storedVersions, schema = { version: 1 }) => {
-  const components = normalizeSyncLocalSchemaComponents(schema).map((component) => {
-    const current = resolveSyncLocalMigrations(component.version, component);
-    return {
-      id: component.id,
-      ...resolveSyncLocalMigrations(storedVersions[component.id] ?? current.minimumCompatibleVersion, component)
+}, parseProvider = (name, value, providerName) => {
+  if (!IDENTIFIER_PATTERN.test(name))
+    throw new TypeError("Device capability names must be identifiers.");
+  if (!object(value))
+    throw new TypeError(`Device capability ${name} must be an object.`);
+  const factory = text(value.factory, `${name}.factory`);
+  const module = text(value.module, `${name}.module`);
+  if (!IDENTIFIER_PATTERN.test(factory))
+    throw new TypeError(`${name}.factory must be a JavaScript identifier.`);
+  if (!providerModulePattern(providerName).test(module))
+    throw new TypeError(`${name}.module must be an official devices-${providerName} subpath.`);
+  if (!Array.isArray(value.packages) || !value.packages.every((spec) => typeof spec === "string" && providerPackagePattern(providerName).test(spec)))
+    throw new TypeError(`${name}.packages must contain exact official ${providerLabel(providerName)} package versions.`);
+  const { plugins } = value;
+  if (plugins !== undefined && (!Array.isArray(plugins) || !plugins.every((plugin) => typeof plugin === "string" && /^expo-[a-z][a-z0-9-]*$/u.test(plugin))))
+    throw new TypeError(`${name}.plugins must contain Expo config plugin names.`);
+  let native;
+  const { native: nativeMetadata } = value;
+  if (nativeMetadata !== undefined) {
+    if (!object(nativeMetadata))
+      throw new TypeError(`${name}.native must be an object.`);
+    const { android, ios } = nativeMetadata;
+    const permissions = androidPermissions(android, `${name}.native.android`);
+    const iosRequirements = iosNativeRequirements(ios, `${name}.native.ios`);
+    native = {
+      ...permissions === undefined ? {} : { android: { permissions } },
+      ...iosRequirements === undefined ? {} : { ios: iosRequirements }
     };
-  });
-  const active = new Set(components.map((component) => component.id));
-  const orphanedComponents = Object.keys(storedVersions).filter((id) => !active.has(id)).sort();
-  return { components, orphanedComponents };
-}, resolveSyncLocalMigrations = (storedVersion, schema = { version: 1 }) => {
-  positiveVersion(storedVersion, "Stored Sync schema version");
-  const targetVersion = positiveVersion(schema.version, "Target Sync schema version");
-  const migrations = [...schema.migrations ?? []].sort((a, b) => a.toVersion - b.toVersion);
-  const versions = new Set;
-  for (const migration of migrations) {
-    positiveVersion(migration.toVersion, "Sync migration toVersion");
-    if (versions.has(migration.toVersion))
-      throw new SyncLocalStoreSchemaError("INVALID_PLAN", `Sync migration ${migration.toVersion} is declared more than once`);
-    versions.add(migration.toVersion);
-  }
-  const inferredMinimum = migrations[0] ? migrations[0].toVersion - 1 : targetVersion;
-  const minimumCompatibleVersion = positiveVersion(schema.minimumCompatibleVersion ?? inferredMinimum, "Minimum compatible Sync schema version");
-  if (minimumCompatibleVersion > targetVersion)
-    throw new SyncLocalStoreSchemaError("INVALID_PLAN", "Minimum compatible Sync schema version cannot exceed its target");
-  if (storedVersion > targetVersion)
-    throw new SyncLocalStoreSchemaError("SCHEMA_TOO_NEW", `Stored Sync schema ${storedVersion} is newer than this runtime's schema ${targetVersion}`, { storedVersion, targetVersion });
-  if (storedVersion < minimumCompatibleVersion)
-    throw new SyncLocalStoreSchemaError("SCHEMA_TOO_OLD", `Stored Sync schema ${storedVersion} is older than the minimum compatible schema ${minimumCompatibleVersion}`, { storedVersion, targetVersion });
-  const steps = [];
-  for (let version = storedVersion + 1;version <= targetVersion; version++) {
-    const migration = migrations.find((candidate) => candidate.toVersion === version);
-    if (migration === undefined)
-      throw new SyncLocalStoreSchemaError("MIGRATION_MISSING", `Sync migration ${version - 1} -> ${version} is missing`, { storedVersion, targetVersion });
-    steps.push(migration);
   }
-  return { minimumCompatibleVersion, steps, targetVersion };
-};
-var init_client = __esm(() => {
-  RUNTIME_TRANSPORT = Symbol.for("@absolutejs/sync/client-runtime-transport");
-  host = globalThis;
-  registry = (() => {
-    const existing = host[RUNTIME_TRANSPORT];
-    if (isRegistry(existing))
-      return existing;
-    if (typeof existing === "object" && existing !== null && Array.isArray(Reflect.get(existing, "installations"))) {
-      Reflect.set(existing, "clients", []);
-      return existing;
-    }
-    const created = { clients: [], installations: [] };
-    Object.defineProperty(host, RUNTIME_TRANSPORT, {
-      configurable: false,
-      enumerable: false,
-      value: created,
-      writable: false
-    });
-    return created;
-  })();
-  pools = new Map;
-  SyncLocalDataPolicyError = class SyncLocalDataPolicyError extends Error {
-    code;
-    constructor(code, message) {
-      super(message);
-      this.name = "SyncLocalDataPolicyError";
-      this.code = code;
-    }
-  };
-  SyncLocalStoreSchemaError = class SyncLocalStoreSchemaError extends Error {
-    code;
-    storedVersion;
-    targetVersion;
-    constructor(code, message, versions = {}) {
-      super(message);
-      this.name = "SyncLocalStoreSchemaError";
-      this.code = code;
-      this.storedVersion = versions.storedVersion;
-      this.targetVersion = versions.targetVersion;
-    }
+  return {
+    factory,
+    module,
+    ...native === undefined ? {} : { native },
+    ...plugins === undefined ? {} : { plugins: [...plugins] },
+    packages: [...value.packages]
   };
-});
-
-// src/mobile/syncSchema.ts
-import { readFileSync as readFileSync3 } from "fs";
-import { dirname as dirname9, join as join12, resolve as resolve10 } from "path";
-var object = (value) => typeof value === "object" && value !== null && !Array.isArray(value), manifestAt = (path) => {
-  try {
-    const value = JSON.parse(readFileSync3(path, "utf8"));
-    return object(value) ? value : undefined;
-  } catch {
-    return;
-  }
-}, localSchemaMetadata = (manifest) => {
-  const absolutejs = Reflect.get(manifest, "absolutejs");
-  if (!object(absolutejs))
-    return;
-  const sync = Reflect.get(absolutejs, "sync");
-  if (!object(sync))
-    return;
-  return Reflect.get(sync, "localSchema");
-}, packageManifestPath = (projectRoot, packageName) => {
-  let directory = resolve10(projectRoot);
-  while (true) {
-    const candidate = join12(directory, "node_modules", packageName, "package.json");
-    const manifest = manifestAt(candidate);
-    if (manifest && Reflect.get(manifest, "name") === packageName)
-      return candidate;
-    const parent = dirname9(directory);
-    if (parent === directory)
-      return;
-    directory = parent;
-  }
-}, metadataError = (id, detail) => new TypeError(`Invalid AbsoluteJS Sync schema metadata for ${id}: ${detail}`), positiveVersion2 = (value, id, field2) => {
-  if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 1)
-    throw metadataError(id, `${field2} must be a positive safe integer.`);
-  return value;
-}, nonEmpty = (value, id, field2) => {
-  if (typeof value !== "string" || value.trim() !== value || value.length === 0)
-    throw metadataError(id, `${field2} must be a non-empty trimmed string.`);
-  return value;
-}, requireObject = (value, id, detail) => {
-  if (!object(value))
-    throw metadataError(id, detail);
-  return value;
-}, unknownField = (record, key) => record[key], normalizeJsonValue2 = (value, id, field2) => {
-  if (value === null || typeof value === "string" || typeof value === "boolean")
-    return value;
-  if (typeof value === "number" && Number.isFinite(value))
-    return value;
-  if (Array.isArray(value))
-    return value.map((entry) => normalizeJsonValue2(entry, id, field2));
-  if (object(value))
-    return Object.fromEntries(Object.entries(value).map(([key, entry]) => [
-      key,
-      normalizeJsonValue2(entry, id, field2)
-    ]));
-  throw metadataError(id, `${field2} must be JSON-safe.`);
-}, operation = (value, id, index) => {
-  const record = requireObject(value, id, `migration operation ${index} must be an object.`);
-  const type = Reflect.get(record, "type");
-  const collection = nonEmpty(Reflect.get(record, "collection"), id, `operation ${index}.collection`);
-  if (type === "delete-collection")
-    return { collection, type };
-  if (type === "rename-field")
-    return {
-      collection,
-      from: nonEmpty(Reflect.get(record, "from"), id, `operation ${index}.from`),
-      to: nonEmpty(Reflect.get(record, "to"), id, `operation ${index}.to`),
-      type
-    };
-  const field2 = nonEmpty(Reflect.get(record, "field"), id, `operation ${index}.field`);
-  if (type === "remove-field")
-    return { collection, field: field2, type };
-  if (type === "set-default")
-    return {
-      collection,
-      field: field2,
-      type,
-      value: normalizeJsonValue2(Reflect.get(record, "value"), id, `operation ${index}.value`)
-    };
-  throw metadataError(id, `operation ${index}.type is not supported.`);
-}, migration = (value, id, index) => {
-  const record = requireObject(value, id, `migration ${index} must be an object.`);
-  const allowed = new Set(["operations", "toVersion"]);
-  const unsupported = Object.keys(record).find((key) => !allowed.has(key));
-  if (unsupported)
-    throw metadataError(id, `migration ${index}.${unsupported} is not declarative metadata.`);
-  const declaredOperations = Reflect.get(record, "operations");
-  if (declaredOperations !== undefined && !Array.isArray(declaredOperations))
-    throw metadataError(id, `migration ${index}.operations must be an array.`);
-  const operations = Array.isArray(declaredOperations) ? declaredOperations : [];
+}, absoluteDeviceNativeRequirements = (plan) => {
+  const privacy = plan.capabilities.reduce((requirements, name) => {
+    for (const api of IOS_PRIVACY_ACCESSED_APIS) {
+      const reasons = plan.providers[name]?.native?.ios?.privacyAccessedApis?.[api] ?? [];
+      if (reasons.length === 0)
+        continue;
+      const current = requirements[api] ?? new Set;
+      for (const reason of reasons)
+        current.add(reason);
+      requirements[api] = current;
+    }
+    return requirements;
+  }, {});
   return {
-    operations: operations.map((entry, operationIndex) => operation(entry, id, operationIndex)),
-    toVersion: positiveVersion2(Reflect.get(record, "toVersion"), id, `migration ${index}.toVersion`)
+    androidPermissions: [
+      ...new Set(plan.capabilities.flatMap((name) => plan.providers[name]?.native?.android?.permissions ?? []))
+    ].sort(),
+    iosPrivacyAccessedApis: IOS_PRIVACY_ACCESSED_APIS.flatMap((api) => {
+      const reasons = privacy[api];
+      return reasons ? [{ api, reasons: [...reasons].sort() }] : [];
+    }),
+    iosPushNotifications: plan.capabilities.some((name) => plan.providers[name]?.native?.ios?.pushNotifications === true),
+    iosSystemBars: plan.capabilities.some((name) => plan.providers[name]?.native?.ios?.systemBars === true),
+    iosUsageDescriptions: [
+      ...new Set(plan.capabilities.flatMap((name) => plan.providers[name]?.native?.ios?.usageDescriptions ?? []))
+    ].sort()
   };
-}, localDataPolicy = (value, id) => {
-  const record = requireObject(value, id, "localData must be an object.");
-  const allowed = new Set([
-    "collections",
-    "maxBytesPerNamespace",
-    "mutations"
-  ]);
-  const unsupported = Object.keys(record).find((key) => !allowed.has(key));
-  if (unsupported)
-    throw metadataError(id, `localData.${unsupported} is not supported.`);
-  const collectionRules = Reflect.get(record, "collections");
-  const mutationRules = Reflect.get(record, "mutations");
-  if (collectionRules !== undefined && !Array.isArray(collectionRules))
-    throw metadataError(id, "localData.collections must be an array.");
-  if (mutationRules !== undefined && !Array.isArray(mutationRules))
-    throw metadataError(id, "localData.mutations must be an array.");
-  const collections = Array.isArray(collectionRules) ? collectionRules.map((entry, index) => {
-    const rule = requireObject(entry, id, `localData.collections[${index}] must be an object.`);
-    const allowedRuleKeys = new Set([
-      "evictionPriority",
-      "match",
-      "maxAgeMs",
-      "onProtectionUnavailable",
-      "persistence",
-      "protection",
-      "sensitivity"
-    ]);
-    const unsupportedRuleKey = Object.keys(rule).find((key) => !allowedRuleKeys.has(key));
-    if (unsupportedRuleKey)
-      throw metadataError(id, `localData.collections[${index}].${unsupportedRuleKey} is not supported.`);
-    const match = nonEmpty(Reflect.get(rule, "match"), id, `localData.collections[${index}].match`);
-    const persistence = unknownField(rule, "persistence");
-    const sensitivity = unknownField(rule, "sensitivity");
-    const protection = unknownField(rule, "protection");
-    const onProtectionUnavailable = unknownField(rule, "onProtectionUnavailable");
-    const evictionPriority = unknownField(rule, "evictionPriority");
-    const maxAge = unknownField(rule, "maxAgeMs");
-    if (persistence !== undefined && persistence !== "durable" && persistence !== "memory-only")
-      throw metadataError(id, `localData.collections[${index}].persistence is invalid.`);
-    if (sensitivity !== undefined && sensitivity !== "public" && sensitivity !== "private" && sensitivity !== "secret")
-      throw metadataError(id, `localData.collections[${index}].sensitivity is invalid.`);
-    if (protection !== undefined && protection !== "none" && protection !== "required")
-      throw metadataError(id, `localData.collections[${index}].protection is invalid.`);
-    if (onProtectionUnavailable !== undefined && onProtectionUnavailable !== "error" && onProtectionUnavailable !== "memory-only")
-      throw metadataError(id, `localData.collections[${index}].onProtectionUnavailable is invalid.`);
-    if (evictionPriority !== undefined && evictionPriority !== "critical" && evictionPriority !== "normal" && evictionPriority !== "disposable")
-      throw metadataError(id, `localData.collections[${index}].evictionPriority is invalid.`);
-    return {
-      match,
-      ...sensitivity ? { sensitivity } : {},
-      ...persistence ? { persistence } : {},
-      ...protection ? { protection } : {},
-      ...onProtectionUnavailable ? {
-        onProtectionUnavailable
-      } : {},
-      ...evictionPriority ? { evictionPriority } : {},
-      ...maxAge === undefined ? {} : {
-        maxAgeMs: positiveVersion2(maxAge, id, `localData.collections[${index}].maxAgeMs`)
+}, loadAbsoluteDeviceCapabilityProviders = (projectRoot, provider = "capacitor") => {
+  const adapter = ADAPTERS[provider];
+  let path = join11(resolve10(projectRoot), "node_modules", adapter, "package.json");
+  try {
+    readFileSync2(path, "utf8");
+  } catch {
+    path = fileURLToPath(import.meta.resolve(`${adapter}/package.json`));
+  }
+  const manifest = readJson(path);
+  const { absolutejs } = manifest;
+  const devices = object(absolutejs) ? absolutejs.devices : undefined;
+  if (!object(devices) || devices.format !== 1 || devices.provider !== provider || !object(devices.capabilities))
+    throw new TypeError(`${adapter} does not publish supported capability metadata.`);
+  const entries = Object.entries(devices.capabilities).map(([name, capability]) => ({
+    name,
+    provider: parseProvider(name, capability, provider)
+  }));
+  return Object.fromEntries(entries.sort((left, right) => left.name.localeCompare(right.name)).map(({ name, provider: capabilityProvider }) => [
+    name,
+    capabilityProvider
+  ]));
+}, isIgnored = (path) => path.split("/").some((segment) => IGNORED_DIRECTORIES.has(segment)), importedCapabilities = (source, file) => {
+  const names = new Set;
+  const namespaces = new Set;
+  const visit = (node) => {
+    if (ts.isImportDeclaration(node) && ts.isStringLiteral(node.moduleSpecifier) && node.moduleSpecifier.text === DEVICES_PACKAGE && !node.importClause?.isTypeOnly) {
+      const bindings = node.importClause?.namedBindings;
+      if (bindings && ts.isNamedImports(bindings)) {
+        for (const element of bindings.elements)
+          if (!element.isTypeOnly)
+            names.add((element.propertyName ?? element.name).text);
       }
-    };
-  }) : undefined;
-  const mutations = Array.isArray(mutationRules) ? mutationRules.map((entry, index) => {
-    const rule = requireObject(entry, id, `localData.mutations[${index}] must be an object.`);
-    const allowedRuleKeys = new Set([
-      "conflict",
-      "match",
-      "onProtectionUnavailable",
-      "persistence",
-      "protection",
-      "sensitivity"
-    ]);
-    const unsupportedRuleKey = Object.keys(rule).find((key) => !allowedRuleKeys.has(key));
-    if (unsupportedRuleKey)
-      throw metadataError(id, `localData.mutations[${index}].${unsupportedRuleKey} is not supported.`);
-    const protection = unknownField(rule, "protection");
-    const sensitivity = unknownField(rule, "sensitivity");
-    const persistence = unknownField(rule, "persistence");
-    const onProtectionUnavailable = unknownField(rule, "onProtectionUnavailable");
-    const declaredConflict = unknownField(rule, "conflict");
-    let conflict;
-    if (declaredConflict !== undefined) {
-      const conflictRecord = requireObject(declaredConflict, id, `localData.mutations[${index}].conflict must be an object.`);
-      const unsupportedConflictKey = Object.keys(conflictRecord).find((key) => key !== "maxAttempts" && key !== "strategy");
-      if (unsupportedConflictKey)
-        throw metadataError(id, `localData.mutations[${index}].conflict.${unsupportedConflictKey} is not supported.`);
-      const strategy = unknownField(conflictRecord, "strategy");
-      if (strategy !== "client-wins" && strategy !== "manual" && strategy !== "server-wins")
-        throw metadataError(id, `localData.mutations[${index}].conflict.strategy is invalid.`);
-      const maxAttempts = unknownField(conflictRecord, "maxAttempts");
-      if (maxAttempts !== undefined && strategy !== "client-wins")
-        throw metadataError(id, `localData.mutations[${index}].conflict.maxAttempts requires client-wins.`);
-      conflict = {
-        strategy,
-        ...maxAttempts === undefined ? {} : {
-          maxAttempts: positiveVersion2(maxAttempts, id, `localData.mutations[${index}].conflict.maxAttempts`)
-        }
-      };
+      if (bindings && ts.isNamespaceImport(bindings))
+        namespaces.add(bindings.name.text);
     }
-    if (protection !== undefined && protection !== "none" && protection !== "required")
-      throw metadataError(id, `localData.mutations[${index}].protection is invalid.`);
-    if (sensitivity !== undefined && sensitivity !== "public" && sensitivity !== "private" && sensitivity !== "secret")
-      throw metadataError(id, `localData.mutations[${index}].sensitivity is invalid.`);
-    if (onProtectionUnavailable !== undefined && onProtectionUnavailable !== "error" && onProtectionUnavailable !== "memory-only")
-      throw metadataError(id, `localData.mutations[${index}].onProtectionUnavailable is invalid.`);
-    if (persistence !== undefined && persistence !== "durable" && persistence !== "memory-only")
-      throw metadataError(id, `localData.mutations[${index}].persistence is invalid.`);
-    return {
-      match: nonEmpty(Reflect.get(rule, "match"), id, `localData.mutations[${index}].match`),
-      ...conflict ? { conflict } : {},
-      ...sensitivity ? { sensitivity } : {},
-      ...onProtectionUnavailable ? { onProtectionUnavailable } : {},
-      ...persistence ? {
-        persistence
-      } : {},
-      ...protection ? { protection } : {}
-    };
-  }) : undefined;
-  const quota = Reflect.get(record, "maxBytesPerNamespace");
-  return {
-    ...collections ? { collections } : {},
-    ...mutations ? { mutations } : {},
-    ...quota === undefined ? {} : {
-      maxBytesPerNamespace: positiveVersion2(quota, id, "localData.maxBytesPerNamespace")
+    if (ts.isExportDeclaration(node) && !node.isTypeOnly && node.moduleSpecifier !== undefined && ts.isStringLiteral(node.moduleSpecifier) && node.moduleSpecifier.text === DEVICES_PACKAGE && node.exportClause && ts.isNamedExports(node.exportClause)) {
+      for (const element of node.exportClause.elements)
+        if (!element.isTypeOnly)
+          names.add((element.propertyName ?? element.name).text);
+    }
+    if (ts.isPropertyAccessExpression(node) && ts.isIdentifier(node.expression) && namespaces.has(node.expression.text))
+      names.add(node.name.text);
+    ts.forEachChild(node, visit);
+  };
+  const extension = extname3(file).toLowerCase();
+  const sources = extension === ".svelte" || extension === ".vue" ? [...source.matchAll(/<script\b[^>]*>([\s\S]*?)<\/script\s*>/giu)].map((match) => match[1]).filter((value) => value !== undefined) : [source];
+  for (const [index, script] of sources.entries())
+    visit(ts.createSourceFile(`${file}#script-${index}`, script, ts.ScriptTarget.Latest, true, ts.ScriptKind.TSX));
+  return names;
+}, assertAbsoluteDeviceCapabilityPackages = (projectRoot, plan) => {
+  const missing = missingAbsoluteDeviceCapabilityPackages(plan, directAbsoluteProjectPackages(projectRoot));
+  const mismatched = plan.requiredPackages.filter((spec) => {
+    const separator = spec.lastIndexOf("@");
+    const packageName = spec.slice(0, separator);
+    if (missing.includes(spec))
+      return false;
+    try {
+      return readJson(join11(resolve10(projectRoot), "node_modules", packageName, "package.json")).version !== spec.slice(separator + 1);
+    } catch {
+      return true;
     }
+  });
+  const unmet = [...missing, ...mismatched];
+  if (unmet.length > 0)
+    throw new TypeError(`Device capabilities ${plan.capabilities.join(", ")} require ${unmet.join(", ")}. Run absolute mobile sync and approve the detected capability plugins.`);
+}, directAbsoluteProjectPackages = (projectRoot) => {
+  const manifest = readJson(join11(resolve10(projectRoot), "package.json"));
+  const packages = new Set;
+  for (const field2 of ["dependencies", "devDependencies"]) {
+    const dependencies = manifest[field2];
+    if (object(dependencies))
+      for (const name of Object.keys(dependencies))
+        packages.add(name);
+  }
+  return packages;
+}, discoverAbsoluteDeviceCapabilities = (projectRoot, providers = loadAbsoluteDeviceCapabilityProviders(projectRoot)) => {
+  const root = resolve10(projectRoot);
+  if (!existsSync3(root))
+    return [];
+  const known = new Set(Object.keys(providers));
+  const capabilities = new Set;
+  for (const path of SOURCE_GLOB.scanSync({ cwd: root })) {
+    const portable = relative9(root, resolve10(root, path)).replaceAll("\\", "/");
+    if (isIgnored(portable))
+      continue;
+    const source = readFileSync2(resolve10(root, portable), "utf8");
+    for (const name of importedCapabilities(source, portable))
+      if (known.has(name))
+        capabilities.add(name);
+  }
+  return [...capabilities].sort();
+}, missingAbsoluteDeviceCapabilityPackages = (plan, directPackages) => plan.requiredPackages.filter((spec) => {
+  const packageName = spec.slice(0, spec.lastIndexOf("@"));
+  return !directPackages.has(packageName);
+}), projectImportsAbsoluteDeviceCapability = (projectRoot, capability) => {
+  const root = resolve10(projectRoot);
+  for (const path of SOURCE_GLOB.scanSync({ cwd: root })) {
+    const portable = relative9(root, resolve10(root, path)).replaceAll("\\", "/");
+    if (isIgnored(portable))
+      continue;
+    const source = readFileSync2(resolve10(root, portable), "utf8");
+    if (importedCapabilities(source, portable).has(capability))
+      return true;
+  }
+  return false;
+}, resolveAbsoluteDeviceCapabilityPlan = (projectRoot, provider = "capacitor") => {
+  const allProviders = loadAbsoluteDeviceCapabilityProviders(projectRoot, provider);
+  const capabilities = discoverAbsoluteDeviceCapabilities(projectRoot, allProviders);
+  for (const capability of ABSOLUTE_MOBILE_SHELL_DEVICE_CAPABILITIES) {
+    if (allProviders[capability] && !capabilities.includes(capability))
+      capabilities.push(capability);
+  }
+  capabilities.sort();
+  const providers = {};
+  for (const name of capabilities) {
+    const capabilityProvider = allProviders[name];
+    if (capabilityProvider)
+      providers[name] = capabilityProvider;
+  }
+  return {
+    capabilities,
+    providers,
+    requiredPackages: [
+      ...new Set(capabilities.flatMap((name) => providers[name]?.packages ?? []))
+    ].sort()
   };
-}, component = (id, value) => {
-  const record = requireObject(value, id, "localSchema must be an object.");
-  const allowed = new Set([
-    "localData",
-    "migrations",
-    "minimumCompatibleVersion",
-    "version"
+};
+var init_deviceCapabilities = __esm(() => {
+  ABSOLUTE_MOBILE_SHELL_DEVICE_CAPABILITIES = [
+    "keyboard",
+    "systemBars"
+  ];
+  ADAPTERS = {
+    capacitor: "@absolutejs/devices-capacitor",
+    expo: "@absolutejs/devices-expo"
+  };
+  SOURCE_GLOB = new Bun.Glob("**/*.{js,jsx,ts,tsx,svelte,vue}");
+  IGNORED_DIRECTORIES = new Set([
+    ".absolutejs",
+    ".git",
+    ".test-builds",
+    ".test-shards",
+    "build",
+    "dist",
+    "node_modules",
+    "test",
+    "tests"
   ]);
-  const unsupported = Object.keys(record).find((key) => !allowed.has(key));
-  if (unsupported)
-    throw metadataError(id, `${unsupported} is not supported.`);
-  const version = positiveVersion2(Reflect.get(record, "version"), id, "version");
-  const declaredMinimum = Reflect.get(record, "minimumCompatibleVersion");
-  const minimumCompatibleVersion = declaredMinimum === undefined ? Math.max(1, version - 2) : positiveVersion2(declaredMinimum, id, "minimumCompatibleVersion");
-  const declaredMigrations = Reflect.get(record, "migrations");
-  const declaredLocalData = Reflect.get(record, "localData");
-  if (declaredMigrations !== undefined && !Array.isArray(declaredMigrations))
-    throw metadataError(id, "migrations must be an array.");
-  const migrations = Array.isArray(declaredMigrations) ? declaredMigrations : undefined;
+  IDENTIFIER_PATTERN = /^[A-Za-z_$][\w$]*$/u;
+  ANDROID_PERMISSION_PATTERN = /^android\.permission\.[A-Z][A-Z0-9_]*$/u;
+  IOS_USAGE_DESCRIPTIONS = new Set([
+    "camera",
+    "location-always",
+    "location-when-in-use",
+    "photo-library",
+    "photo-library-add"
+  ]);
+  IOS_PRIVACY_ACCESSED_API_REASONS = {
+    NSPrivacyAccessedAPICategoryFileTimestamp: new Set(["C617.1"])
+  };
+  IOS_PRIVACY_ACCESSED_APIS = [
+    "NSPrivacyAccessedAPICategoryFileTimestamp"
+  ];
+});
+
+// src/mobile/nativeAuth.ts
+import { readFileSync as readFileSync3 } from "fs";
+import { join as join12 } from "path";
+var ABSOLUTE_AUTH_PACKAGE = "@absolutejs/auth", ABSOLUTE_EXPO_AUTH_CORE_VERSION = "0.75.6", ABSOLUTE_EXPO_AUTH_PACKAGE = "@absolutejs/auth-expo", ABSOLUTE_EXPO_AUTH_VERSION = "0.0.2", ABSOLUTE_EXPO_SYNC_CORE_VERSION = "2.31.0", ABSOLUTE_EXPO_SYNC_PACKAGE = "@absolutejs/sync-expo", ABSOLUTE_EXPO_SYNC_VERSION = "0.0.2", ABSOLUTE_NATIVE_AUTH_CLIENTS_ENV = "ABSOLUTE_AUTH_NATIVE_CLIENTS", ABSOLUTE_NATIVE_AUTH_SCOPES, ABSOLUTE_SYNC_PACKAGE = "@absolutejs/sync", readPackageManifest = (projectRoot) => {
+  try {
+    return JSON.parse(readFileSync3(join12(projectRoot, "package.json"), "utf8"));
+  } catch {
+    return;
+  }
+}, packageManifestHas = (manifest, packageName) => {
+  if (typeof manifest !== "object" || manifest === null)
+    return false;
+  return [
+    Reflect.get(manifest, "dependencies"),
+    Reflect.get(manifest, "devDependencies"),
+    Reflect.get(manifest, "optionalDependencies"),
+    Reflect.get(manifest, "peerDependencies")
+  ].some((dependencies) => typeof dependencies === "object" && dependencies !== null && Object.hasOwn(dependencies, packageName));
+}, createAbsoluteMobileAuthManifest = (config) => {
+  const scheme = config.deepLinkScheme ?? config.appId.toLowerCase();
   return {
-    id,
-    ...declaredLocalData === undefined ? {} : { localData: localDataPolicy(declaredLocalData, id) },
-    minimumCompatibleVersion,
-    ...Array.isArray(migrations) ? {
-      migrations: migrations.map((entry, index) => migration(entry, id, index))
-    } : {},
-    version
+    clientId: `absolutejs-native:${config.appId}`,
+    issuer: config.productionOrigin,
+    redirectUri: `${scheme}://auth/callback`,
+    scopes: [...ABSOLUTE_NATIVE_AUTH_SCOPES]
   };
-}, dependencyNames = (manifest) => [
-  Reflect.get(manifest, "dependencies"),
-  Reflect.get(manifest, "optionalDependencies"),
-  Reflect.get(manifest, "devDependencies"),
-  Reflect.get(manifest, "peerDependencies")
-].flatMap((dependencies) => object(dependencies) ? Object.keys(dependencies) : []).filter((name, index, names) => names.indexOf(name) === index).sort(), discoverAbsoluteSyncSchema = (projectRoot) => {
-  const appManifestPath = join12(resolve10(projectRoot), "package.json");
-  const appManifest = manifestAt(appManifestPath);
-  if (!appManifest)
+}, installAbsoluteMobileAuthEnvironment = (projectRoot, config) => {
+  const auth = resolveAbsoluteMobileAuthManifest(projectRoot, config);
+  const serialized = serializeAbsoluteMobileAuthEnvironment(config, auth);
+  if (serialized === undefined)
+    delete process.env[ABSOLUTE_NATIVE_AUTH_CLIENTS_ENV];
+  else
+    process.env[ABSOLUTE_NATIVE_AUTH_CLIENTS_ENV] = serialized;
+  return auth;
+}, projectUsesAbsoluteAuth = (projectRoot) => packageManifestHas(readPackageManifest(projectRoot), ABSOLUTE_AUTH_PACKAGE), projectUsesAbsoluteSync = (projectRoot) => packageManifestHas(readPackageManifest(projectRoot), ABSOLUTE_SYNC_PACKAGE), resolveAbsoluteMobileAuthManifest = (projectRoot, config) => projectUsesAbsoluteAuth(projectRoot) ? createAbsoluteMobileAuthManifest(config) : undefined, serializeAbsoluteMobileAuthEnvironment = (config, auth) => auth === undefined ? undefined : JSON.stringify([
+  {
+    ...auth,
+    name: `${config.appName} native app`
+  }
+]);
+var init_nativeAuth = __esm(() => {
+  ABSOLUTE_NATIVE_AUTH_SCOPES = ["openid", "profile"];
+});
+
+// node_modules/@absolutejs/sync/dist/client/index.js
+var RUNTIME_TRANSPORT, host, isRegistry = (value) => typeof value === "object" && value !== null && Array.isArray(Reflect.get(value, "installations")) && Array.isArray(Reflect.get(value, "clients")), registry, pools, SyncLocalDataPolicyError, SyncLocalStoreSchemaError, positiveVersion = (value, label) => {
+  if (!Number.isSafeInteger(value) || value < 1)
+    throw new SyncLocalStoreSchemaError("INVALID_PLAN", `${label} must be a positive safe integer`);
+  return value;
+}, isSchemaBundle = (schema) => ("components" in schema), validatePolicyMatch = (match, label) => {
+  if (match.length === 0 || match.trim() !== match || /^\*+$/.test(match) || match.includes("**"))
+    throw new SyncLocalDataPolicyError("INVALID_POLICY", `${label}.match must be an exact name or a non-empty glob without adjacent wildcards.`);
+}, validateSyncLocalDataPolicy = (policy, label = "localData") => {
+  if (policy.maxBytesPerNamespace !== undefined && (!Number.isSafeInteger(policy.maxBytesPerNamespace) || policy.maxBytesPerNamespace < 1))
+    throw new SyncLocalDataPolicyError("INVALID_POLICY", `${label}.maxBytesPerNamespace must be a positive safe integer.`);
+  for (const [index, rule] of (policy.collections ?? []).entries()) {
+    validatePolicyMatch(rule.match, `${label}.collections[${index}]`);
+    if (rule.maxAgeMs !== undefined && (!Number.isSafeInteger(rule.maxAgeMs) || rule.maxAgeMs < 1))
+      throw new SyncLocalDataPolicyError("INVALID_POLICY", `${label}.collections[${index}].maxAgeMs must be a positive safe integer.`);
+    if (rule.persistence === "memory-only" && rule.protection === "required")
+      throw new SyncLocalDataPolicyError("INVALID_POLICY", `${label}.collections[${index}] cannot require at-rest protection when it is memory-only.`);
+    if (rule.sensitivity !== undefined && rule.sensitivity !== "public" && rule.protection !== "required" && rule.persistence !== "memory-only")
+      throw new SyncLocalDataPolicyError("INVALID_POLICY", `${label}.collections[${index}] declares ${rule.sensitivity} data without required protection or memory-only persistence.`);
+  }
+  for (const [index, rule] of (policy.mutations ?? []).entries()) {
+    validatePolicyMatch(rule.match, `${label}.mutations[${index}]`);
+    if (rule.conflict !== undefined && rule.conflict.strategy !== "client-wins" && rule.conflict.strategy !== "manual" && rule.conflict.strategy !== "server-wins")
+      throw new SyncLocalDataPolicyError("INVALID_POLICY", `${label}.mutations[${index}].conflict.strategy is invalid.`);
+    if (rule.conflict?.maxAttempts !== undefined && (!Number.isSafeInteger(rule.conflict.maxAttempts) || rule.conflict.maxAttempts < 1))
+      throw new SyncLocalDataPolicyError("INVALID_POLICY", `${label}.mutations[${index}].conflict.maxAttempts must be a positive safe integer.`);
+    if (rule.conflict?.maxAttempts !== undefined && rule.conflict.strategy !== "client-wins")
+      throw new SyncLocalDataPolicyError("INVALID_POLICY", `${label}.mutations[${index}].conflict.maxAttempts is only valid for client-wins.`);
+    if (rule.persistence === "memory-only" && rule.protection === "required")
+      throw new SyncLocalDataPolicyError("INVALID_POLICY", `${label}.mutations[${index}] cannot require at-rest protection when it is memory-only.`);
+    if (rule.sensitivity !== undefined && rule.sensitivity !== "public" && rule.protection !== "required" && rule.persistence !== "memory-only")
+      throw new SyncLocalDataPolicyError("INVALID_POLICY", `${label}.mutations[${index}] declares ${rule.sensitivity} arguments without required protection.`);
+  }
+  return policy;
+}, normalizeSyncLocalSchemaComponents = (schema = { version: 1 }) => {
+  const components = isSchemaBundle(schema) ? [...schema.components] : [{ ...schema, id: "@absolutejs/app" }];
+  const ids = new Set;
+  for (const component of components) {
+    if (typeof component.id !== "string" || component.id.trim() !== component.id || component.id.length === 0)
+      throw new SyncLocalStoreSchemaError("INVALID_PLAN", "Sync schema component id must be non-empty and trimmed");
+    if (ids.has(component.id))
+      throw new SyncLocalStoreSchemaError("INVALID_PLAN", `Sync schema component "${component.id}" is declared more than once`);
+    ids.add(component.id);
+    if (component.localData)
+      validateSyncLocalDataPolicy(component.localData, `${component.id}.localData`);
+  }
+  return components.sort((a, b) => a.id.localeCompare(b.id));
+}, resolveSyncLocalSchemaComponents = (storedVersions, schema = { version: 1 }) => {
+  const components = normalizeSyncLocalSchemaComponents(schema).map((component) => {
+    const current = resolveSyncLocalMigrations(component.version, component);
     return {
-      components: [
-        {
-          id: "@absolutejs/app",
-          minimumCompatibleVersion: 1,
-          version: 1
-        }
-      ],
-      sources: []
-    };
-  const appMetadata = localSchemaMetadata(appManifest);
-  const components = [
-    appMetadata === undefined ? { id: "@absolutejs/app", minimumCompatibleVersion: 1, version: 1 } : component("@absolutejs/app", appMetadata)
-  ];
-  const sources = [
-    { id: "@absolutejs/app", manifestPath: appManifestPath }
-  ];
-  for (const name of dependencyNames(appManifest)) {
-    const manifestPath = packageManifestPath(projectRoot, name);
-    if (!manifestPath)
-      continue;
-    const manifest = manifestAt(manifestPath);
-    if (!manifest)
-      continue;
-    const metadata = localSchemaMetadata(manifest);
-    if (metadata === undefined)
-      continue;
-    components.push(component(name, metadata));
-    sources.push({ id: name, manifestPath });
+      id: component.id,
+      ...resolveSyncLocalMigrations(storedVersions[component.id] ?? current.minimumCompatibleVersion, component)
+    };
+  });
+  const active = new Set(components.map((component) => component.id));
+  const orphanedComponents = Object.keys(storedVersions).filter((id) => !active.has(id)).sort();
+  return { components, orphanedComponents };
+}, resolveSyncLocalMigrations = (storedVersion, schema = { version: 1 }) => {
+  positiveVersion(storedVersion, "Stored Sync schema version");
+  const targetVersion = positiveVersion(schema.version, "Target Sync schema version");
+  const migrations = [...schema.migrations ?? []].sort((a, b) => a.toVersion - b.toVersion);
+  const versions = new Set;
+  for (const migration of migrations) {
+    positiveVersion(migration.toVersion, "Sync migration toVersion");
+    if (versions.has(migration.toVersion))
+      throw new SyncLocalStoreSchemaError("INVALID_PLAN", `Sync migration ${migration.toVersion} is declared more than once`);
+    versions.add(migration.toVersion);
   }
-  components.sort((left, right) => left.id.localeCompare(right.id));
-  sources.sort((left, right) => left.id.localeCompare(right.id));
-  resolveSyncLocalSchemaComponents({}, { components });
-  return { components, sources };
+  const inferredMinimum = migrations[0] ? migrations[0].toVersion - 1 : targetVersion;
+  const minimumCompatibleVersion = positiveVersion(schema.minimumCompatibleVersion ?? inferredMinimum, "Minimum compatible Sync schema version");
+  if (minimumCompatibleVersion > targetVersion)
+    throw new SyncLocalStoreSchemaError("INVALID_PLAN", "Minimum compatible Sync schema version cannot exceed its target");
+  if (storedVersion > targetVersion)
+    throw new SyncLocalStoreSchemaError("SCHEMA_TOO_NEW", `Stored Sync schema ${storedVersion} is newer than this runtime's schema ${targetVersion}`, { storedVersion, targetVersion });
+  if (storedVersion < minimumCompatibleVersion)
+    throw new SyncLocalStoreSchemaError("SCHEMA_TOO_OLD", `Stored Sync schema ${storedVersion} is older than the minimum compatible schema ${minimumCompatibleVersion}`, { storedVersion, targetVersion });
+  const steps = [];
+  for (let version = storedVersion + 1;version <= targetVersion; version++) {
+    const migration = migrations.find((candidate) => candidate.toVersion === version);
+    if (migration === undefined)
+      throw new SyncLocalStoreSchemaError("MIGRATION_MISSING", `Sync migration ${version - 1} -> ${version} is missing`, { storedVersion, targetVersion });
+    steps.push(migration);
+  }
+  return { minimumCompatibleVersion, steps, targetVersion };
 };
-var init_syncSchema = __esm(() => {
-  init_client();
+var init_client = __esm(() => {
+  RUNTIME_TRANSPORT = Symbol.for("@absolutejs/sync/client-runtime-transport");
+  host = globalThis;
+  registry = (() => {
+    const existing = host[RUNTIME_TRANSPORT];
+    if (isRegistry(existing))
+      return existing;
+    if (typeof existing === "object" && existing !== null && Array.isArray(Reflect.get(existing, "installations"))) {
+      Reflect.set(existing, "clients", []);
+      return existing;
+    }
+    const created = { clients: [], installations: [] };
+    Object.defineProperty(host, RUNTIME_TRANSPORT, {
+      configurable: false,
+      enumerable: false,
+      value: created,
+      writable: false
+    });
+    return created;
+  })();
+  pools = new Map;
+  SyncLocalDataPolicyError = class SyncLocalDataPolicyError extends Error {
+    code;
+    constructor(code, message) {
+      super(message);
+      this.name = "SyncLocalDataPolicyError";
+      this.code = code;
+    }
+  };
+  SyncLocalStoreSchemaError = class SyncLocalStoreSchemaError extends Error {
+    code;
+    storedVersion;
+    targetVersion;
+    constructor(code, message, versions = {}) {
+      super(message);
+      this.name = "SyncLocalStoreSchemaError";
+      this.code = code;
+      this.storedVersion = versions.storedVersion;
+      this.targetVersion = versions.targetVersion;
+    }
+  };
 });
 
-// src/mobile/deviceCapabilities.ts
-import { existsSync as existsSync3, readFileSync as readFileSync4 } from "fs";
-import { extname as extname3, join as join13, relative as relative9, resolve as resolve11 } from "path";
-import { fileURLToPath } from "url";
-import ts from "typescript";
-var DEVICES_PACKAGE = "@absolutejs/devices", ABSOLUTE_MOBILE_SHELL_DEVICE_CAPABILITIES, ADAPTERS, SOURCE_GLOB, IGNORED_DIRECTORIES, IDENTIFIER_PATTERN, providerModulePattern = (provider) => new RegExp(`^@absolutejs/devices-${provider}/[a-z][a-z0-9-]*$`, "u"), providerPackagePattern = (provider) => provider === "capacitor" ? /^@capacitor\/[a-z][a-z0-9-]*@\d+\.\d+\.\d+$/u : /^(?:expo-[a-z][a-z0-9-]*|@react-native-[a-z0-9-]+\/[a-z][a-z0-9-]*)@\d+\.\d+\.\d+$/u, providerLabel = (provider) => provider === "capacitor" ? "Capacitor" : "Expo", ANDROID_PERMISSION_PATTERN, IOS_USAGE_DESCRIPTIONS, IOS_PRIVACY_ACCESSED_API_REASONS, IOS_PRIVACY_ACCESSED_APIS, object2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value), readJson = (path) => {
-  const value = JSON.parse(readFileSync4(path, "utf8"));
-  if (!object2(value))
-    throw new TypeError(`${path} must contain an object.`);
-  return value;
-}, text = (value, field2) => {
-  if (typeof value !== "string" || value.length === 0)
-    throw new TypeError(`${field2} must be a non-empty string.`);
-  return value;
-}, androidPermissions = (value, field2) => {
-  if (value === undefined)
-    return;
-  if (!object2(value))
-    throw new TypeError(`${field2} must be an object.`);
-  const { permissions } = value;
-  if (!Array.isArray(permissions) || !permissions.every((permission) => typeof permission === "string" && ANDROID_PERMISSION_PATTERN.test(permission)))
-    throw new TypeError(`${field2}.permissions must contain Android permission names.`);
-  return [...permissions];
-}, iosPrivacyAccessedApis = (value, field2) => {
-  if (value === undefined)
+// src/mobile/syncSchema.ts
+import { readFileSync as readFileSync4 } from "fs";
+import { dirname as dirname9, join as join13, resolve as resolve11 } from "path";
+var object2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value), manifestAt = (path) => {
+  try {
+    const value = JSON.parse(readFileSync4(path, "utf8"));
+    return object2(value) ? value : undefined;
+  } catch {
     return;
-  if (!object2(value))
-    throw new TypeError(`${field2} must be an object.`);
-  const privacy = {};
-  for (const api of IOS_PRIVACY_ACCESSED_APIS) {
-    const reasons = value[api];
-    if (reasons === undefined)
-      continue;
-    const supported = IOS_PRIVACY_ACCESSED_API_REASONS[api];
-    if (!Array.isArray(reasons) || reasons.length === 0 || !reasons.every((reason) => typeof reason === "string" && supported.has(reason)))
-      throw new TypeError(`${field2} contains an unsupported API or reason.`);
-    privacy[api] = [...reasons];
   }
-  if (Object.keys(value).some((api) => !IOS_PRIVACY_ACCESSED_APIS.some((known) => known === api)))
-    throw new TypeError(`${field2} contains an unsupported API or reason.`);
-  return privacy;
-}, iosNativeRequirements = (value, field2) => {
-  if (value === undefined)
+}, localSchemaMetadata = (manifest) => {
+  const absolutejs = Reflect.get(manifest, "absolutejs");
+  if (!object2(absolutejs))
     return;
+  const sync = Reflect.get(absolutejs, "sync");
+  if (!object2(sync))
+    return;
+  return Reflect.get(sync, "localSchema");
+}, packageManifestPath = (projectRoot, packageName) => {
+  let directory = resolve11(projectRoot);
+  while (true) {
+    const candidate = join13(directory, "node_modules", packageName, "package.json");
+    const manifest = manifestAt(candidate);
+    if (manifest && Reflect.get(manifest, "name") === packageName)
+      return candidate;
+    const parent = dirname9(directory);
+    if (parent === directory)
+      return;
+    directory = parent;
+  }
+}, metadataError = (id, detail) => new TypeError(`Invalid AbsoluteJS Sync schema metadata for ${id}: ${detail}`), positiveVersion2 = (value, id, field2) => {
+  if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 1)
+    throw metadataError(id, `${field2} must be a positive safe integer.`);
+  return value;
+}, nonEmpty = (value, id, field2) => {
+  if (typeof value !== "string" || value.trim() !== value || value.length === 0)
+    throw metadataError(id, `${field2} must be a non-empty trimmed string.`);
+  return value;
+}, requireObject = (value, id, detail) => {
   if (!object2(value))
-    throw new TypeError(`${field2} must be an object.`);
-  const {
-    privacyAccessedApis,
-    pushNotifications,
-    systemBars: systemBars2,
-    usageDescriptions
-  } = value;
-  if (pushNotifications !== undefined && pushNotifications !== true)
-    throw new TypeError(`${field2}.pushNotifications must be true.`);
-  if (systemBars2 !== undefined && systemBars2 !== true)
-    throw new TypeError(`${field2}.systemBars must be true.`);
-  if (usageDescriptions !== undefined && (!Array.isArray(usageDescriptions) || !usageDescriptions.every((purpose) => typeof purpose === "string" && IOS_USAGE_DESCRIPTIONS.has(purpose))))
-    throw new TypeError(`${field2}.usageDescriptions contains an unsupported purpose.`);
-  const privacy = iosPrivacyAccessedApis(privacyAccessedApis, `${field2}.privacyAccessedApis`);
-  return {
-    ...privacy === undefined ? {} : { privacyAccessedApis: privacy },
-    ...pushNotifications === true ? { pushNotifications: true } : {},
-    ...systemBars2 === true ? { systemBars: true } : {},
-    ...usageDescriptions === undefined ? {} : { usageDescriptions: [...usageDescriptions] }
-  };
-}, parseProvider = (name, value, providerName) => {
-  if (!IDENTIFIER_PATTERN.test(name))
-    throw new TypeError("Device capability names must be identifiers.");
-  if (!object2(value))
-    throw new TypeError(`Device capability ${name} must be an object.`);
-  const factory = text(value.factory, `${name}.factory`);
-  const module = text(value.module, `${name}.module`);
-  if (!IDENTIFIER_PATTERN.test(factory))
-    throw new TypeError(`${name}.factory must be a JavaScript identifier.`);
-  if (!providerModulePattern(providerName).test(module))
-    throw new TypeError(`${name}.module must be an official devices-${providerName} subpath.`);
-  if (!Array.isArray(value.packages) || !value.packages.every((spec) => typeof spec === "string" && providerPackagePattern(providerName).test(spec)))
-    throw new TypeError(`${name}.packages must contain exact official ${providerLabel(providerName)} package versions.`);
-  const { plugins } = value;
-  if (plugins !== undefined && (!Array.isArray(plugins) || !plugins.every((plugin) => typeof plugin === "string" && /^expo-[a-z][a-z0-9-]*$/u.test(plugin))))
-    throw new TypeError(`${name}.plugins must contain Expo config plugin names.`);
-  let native;
-  const { native: nativeMetadata } = value;
-  if (nativeMetadata !== undefined) {
-    if (!object2(nativeMetadata))
-      throw new TypeError(`${name}.native must be an object.`);
-    const { android, ios } = nativeMetadata;
-    const permissions = androidPermissions(android, `${name}.native.android`);
-    const iosRequirements = iosNativeRequirements(ios, `${name}.native.ios`);
-    native = {
-      ...permissions === undefined ? {} : { android: { permissions } },
-      ...iosRequirements === undefined ? {} : { ios: iosRequirements }
+    throw metadataError(id, detail);
+  return value;
+}, unknownField = (record, key) => record[key], normalizeJsonValue2 = (value, id, field2) => {
+  if (value === null || typeof value === "string" || typeof value === "boolean")
+    return value;
+  if (typeof value === "number" && Number.isFinite(value))
+    return value;
+  if (Array.isArray(value))
+    return value.map((entry) => normalizeJsonValue2(entry, id, field2));
+  if (object2(value))
+    return Object.fromEntries(Object.entries(value).map(([key, entry]) => [
+      key,
+      normalizeJsonValue2(entry, id, field2)
+    ]));
+  throw metadataError(id, `${field2} must be JSON-safe.`);
+}, operation = (value, id, index) => {
+  const record = requireObject(value, id, `migration operation ${index} must be an object.`);
+  const type = Reflect.get(record, "type");
+  const collection = nonEmpty(Reflect.get(record, "collection"), id, `operation ${index}.collection`);
+  if (type === "delete-collection")
+    return { collection, type };
+  if (type === "rename-field")
+    return {
+      collection,
+      from: nonEmpty(Reflect.get(record, "from"), id, `operation ${index}.from`),
+      to: nonEmpty(Reflect.get(record, "to"), id, `operation ${index}.to`),
+      type
     };
-  }
-  return {
-    factory,
-    module,
-    ...native === undefined ? {} : { native },
-    ...plugins === undefined ? {} : { plugins: [...plugins] },
-    packages: [...value.packages]
-  };
-}, absoluteDeviceNativeRequirements = (plan) => {
-  const privacy = plan.capabilities.reduce((requirements, name) => {
-    for (const api of IOS_PRIVACY_ACCESSED_APIS) {
-      const reasons = plan.providers[name]?.native?.ios?.privacyAccessedApis?.[api] ?? [];
-      if (reasons.length === 0)
-        continue;
-      const current = requirements[api] ?? new Set;
-      for (const reason of reasons)
-        current.add(reason);
-      requirements[api] = current;
-    }
-    return requirements;
-  }, {});
+  const field2 = nonEmpty(Reflect.get(record, "field"), id, `operation ${index}.field`);
+  if (type === "remove-field")
+    return { collection, field: field2, type };
+  if (type === "set-default")
+    return {
+      collection,
+      field: field2,
+      type,
+      value: normalizeJsonValue2(Reflect.get(record, "value"), id, `operation ${index}.value`)
+    };
+  throw metadataError(id, `operation ${index}.type is not supported.`);
+}, migration = (value, id, index) => {
+  const record = requireObject(value, id, `migration ${index} must be an object.`);
+  const allowed = new Set(["operations", "toVersion"]);
+  const unsupported = Object.keys(record).find((key) => !allowed.has(key));
+  if (unsupported)
+    throw metadataError(id, `migration ${index}.${unsupported} is not declarative metadata.`);
+  const declaredOperations = Reflect.get(record, "operations");
+  if (declaredOperations !== undefined && !Array.isArray(declaredOperations))
+    throw metadataError(id, `migration ${index}.operations must be an array.`);
+  const operations = Array.isArray(declaredOperations) ? declaredOperations : [];
   return {
-    androidPermissions: [
-      ...new Set(plan.capabilities.flatMap((name) => plan.providers[name]?.native?.android?.permissions ?? []))
-    ].sort(),
-    iosPrivacyAccessedApis: IOS_PRIVACY_ACCESSED_APIS.flatMap((api) => {
-      const reasons = privacy[api];
-      return reasons ? [{ api, reasons: [...reasons].sort() }] : [];
-    }),
-    iosPushNotifications: plan.capabilities.some((name) => plan.providers[name]?.native?.ios?.pushNotifications === true),
-    iosSystemBars: plan.capabilities.some((name) => plan.providers[name]?.native?.ios?.systemBars === true),
-    iosUsageDescriptions: [
-      ...new Set(plan.capabilities.flatMap((name) => plan.providers[name]?.native?.ios?.usageDescriptions ?? []))
-    ].sort()
+    operations: operations.map((entry, operationIndex) => operation(entry, id, operationIndex)),
+    toVersion: positiveVersion2(Reflect.get(record, "toVersion"), id, `migration ${index}.toVersion`)
   };
-}, loadAbsoluteDeviceCapabilityProviders = (projectRoot, provider = "capacitor") => {
-  const adapter = ADAPTERS[provider];
-  let path = join13(resolve11(projectRoot), "node_modules", adapter, "package.json");
-  try {
-    readFileSync4(path, "utf8");
-  } catch {
-    path = fileURLToPath(import.meta.resolve(`${adapter}/package.json`));
-  }
-  const manifest = readJson(path);
-  const { absolutejs } = manifest;
-  const devices = object2(absolutejs) ? absolutejs.devices : undefined;
-  if (!object2(devices) || devices.format !== 1 || devices.provider !== provider || !object2(devices.capabilities))
-    throw new TypeError(`${adapter} does not publish supported capability metadata.`);
-  const entries = Object.entries(devices.capabilities).map(([name, capability]) => ({
-    name,
-    provider: parseProvider(name, capability, provider)
-  }));
-  return Object.fromEntries(entries.sort((left, right) => left.name.localeCompare(right.name)).map(({ name, provider: capabilityProvider }) => [
-    name,
-    capabilityProvider
-  ]));
-}, isIgnored = (path) => path.split("/").some((segment) => IGNORED_DIRECTORIES.has(segment)), importedCapabilities = (source, file) => {
-  const names = new Set;
-  const namespaces = new Set;
-  const visit = (node) => {
-    if (ts.isImportDeclaration(node) && ts.isStringLiteral(node.moduleSpecifier) && node.moduleSpecifier.text === DEVICES_PACKAGE && !node.importClause?.isTypeOnly) {
-      const bindings = node.importClause?.namedBindings;
-      if (bindings && ts.isNamedImports(bindings)) {
-        for (const element of bindings.elements)
-          if (!element.isTypeOnly)
-            names.add((element.propertyName ?? element.name).text);
+}, localDataPolicy = (value, id) => {
+  const record = requireObject(value, id, "localData must be an object.");
+  const allowed = new Set([
+    "collections",
+    "maxBytesPerNamespace",
+    "mutations"
+  ]);
+  const unsupported = Object.keys(record).find((key) => !allowed.has(key));
+  if (unsupported)
+    throw metadataError(id, `localData.${unsupported} is not supported.`);
+  const collectionRules = Reflect.get(record, "collections");
+  const mutationRules = Reflect.get(record, "mutations");
+  if (collectionRules !== undefined && !Array.isArray(collectionRules))
+    throw metadataError(id, "localData.collections must be an array.");
+  if (mutationRules !== undefined && !Array.isArray(mutationRules))
+    throw metadataError(id, "localData.mutations must be an array.");
+  const collections = Array.isArray(collectionRules) ? collectionRules.map((entry, index) => {
+    const rule = requireObject(entry, id, `localData.collections[${index}] must be an object.`);
+    const allowedRuleKeys = new Set([
+      "evictionPriority",
+      "match",
+      "maxAgeMs",
+      "onProtectionUnavailable",
+      "persistence",
+      "protection",
+      "sensitivity"
+    ]);
+    const unsupportedRuleKey = Object.keys(rule).find((key) => !allowedRuleKeys.has(key));
+    if (unsupportedRuleKey)
+      throw metadataError(id, `localData.collections[${index}].${unsupportedRuleKey} is not supported.`);
+    const match = nonEmpty(Reflect.get(rule, "match"), id, `localData.collections[${index}].match`);
+    const persistence = unknownField(rule, "persistence");
+    const sensitivity = unknownField(rule, "sensitivity");
+    const protection = unknownField(rule, "protection");
+    const onProtectionUnavailable = unknownField(rule, "onProtectionUnavailable");
+    const evictionPriority = unknownField(rule, "evictionPriority");
+    const maxAge = unknownField(rule, "maxAgeMs");
+    if (persistence !== undefined && persistence !== "durable" && persistence !== "memory-only")
+      throw metadataError(id, `localData.collections[${index}].persistence is invalid.`);
+    if (sensitivity !== undefined && sensitivity !== "public" && sensitivity !== "private" && sensitivity !== "secret")
+      throw metadataError(id, `localData.collections[${index}].sensitivity is invalid.`);
+    if (protection !== undefined && protection !== "none" && protection !== "required")
+      throw metadataError(id, `localData.collections[${index}].protection is invalid.`);
+    if (onProtectionUnavailable !== undefined && onProtectionUnavailable !== "error" && onProtectionUnavailable !== "memory-only")
+      throw metadataError(id, `localData.collections[${index}].onProtectionUnavailable is invalid.`);
+    if (evictionPriority !== undefined && evictionPriority !== "critical" && evictionPriority !== "normal" && evictionPriority !== "disposable")
+      throw metadataError(id, `localData.collections[${index}].evictionPriority is invalid.`);
+    return {
+      match,
+      ...sensitivity ? { sensitivity } : {},
+      ...persistence ? { persistence } : {},
+      ...protection ? { protection } : {},
+      ...onProtectionUnavailable ? {
+        onProtectionUnavailable
+      } : {},
+      ...evictionPriority ? { evictionPriority } : {},
+      ...maxAge === undefined ? {} : {
+        maxAgeMs: positiveVersion2(maxAge, id, `localData.collections[${index}].maxAgeMs`)
       }
-      if (bindings && ts.isNamespaceImport(bindings))
-        namespaces.add(bindings.name.text);
-    }
-    if (ts.isExportDeclaration(node) && !node.isTypeOnly && node.moduleSpecifier !== undefined && ts.isStringLiteral(node.moduleSpecifier) && node.moduleSpecifier.text === DEVICES_PACKAGE && node.exportClause && ts.isNamedExports(node.exportClause)) {
-      for (const element of node.exportClause.elements)
-        if (!element.isTypeOnly)
-          names.add((element.propertyName ?? element.name).text);
-    }
-    if (ts.isPropertyAccessExpression(node) && ts.isIdentifier(node.expression) && namespaces.has(node.expression.text))
-      names.add(node.name.text);
-    ts.forEachChild(node, visit);
-  };
-  const extension = extname3(file).toLowerCase();
-  const sources = extension === ".svelte" || extension === ".vue" ? [...source.matchAll(/<script\b[^>]*>([\s\S]*?)<\/script\s*>/giu)].map((match) => match[1]).filter((value) => value !== undefined) : [source];
-  for (const [index, script] of sources.entries())
-    visit(ts.createSourceFile(`${file}#script-${index}`, script, ts.ScriptTarget.Latest, true, ts.ScriptKind.TSX));
-  return names;
-}, assertAbsoluteDeviceCapabilityPackages = (projectRoot, plan) => {
-  const missing = missingAbsoluteDeviceCapabilityPackages(plan, directAbsoluteProjectPackages(projectRoot));
-  const mismatched = plan.requiredPackages.filter((spec) => {
-    const separator = spec.lastIndexOf("@");
-    const packageName = spec.slice(0, separator);
-    if (missing.includes(spec))
-      return false;
-    try {
-      return readJson(join13(resolve11(projectRoot), "node_modules", packageName, "package.json")).version !== spec.slice(separator + 1);
-    } catch {
-      return true;
+    };
+  }) : undefined;
+  const mutations = Array.isArray(mutationRules) ? mutationRules.map((entry, index) => {
+    const rule = requireObject(entry, id, `localData.mutations[${index}] must be an object.`);
+    const allowedRuleKeys = new Set([
+      "conflict",
+      "match",
+      "onProtectionUnavailable",
+      "persistence",
+      "protection",
+      "sensitivity"
+    ]);
+    const unsupportedRuleKey = Object.keys(rule).find((key) => !allowedRuleKeys.has(key));
+    if (unsupportedRuleKey)
+      throw metadataError(id, `localData.mutations[${index}].${unsupportedRuleKey} is not supported.`);
+    const protection = unknownField(rule, "protection");
+    const sensitivity = unknownField(rule, "sensitivity");
+    const persistence = unknownField(rule, "persistence");
+    const onProtectionUnavailable = unknownField(rule, "onProtectionUnavailable");
+    const declaredConflict = unknownField(rule, "conflict");
+    let conflict;
+    if (declaredConflict !== undefined) {
+      const conflictRecord = requireObject(declaredConflict, id, `localData.mutations[${index}].conflict must be an object.`);
+      const unsupportedConflictKey = Object.keys(conflictRecord).find((key) => key !== "maxAttempts" && key !== "strategy");
+      if (unsupportedConflictKey)
+        throw metadataError(id, `localData.mutations[${index}].conflict.${unsupportedConflictKey} is not supported.`);
+      const strategy = unknownField(conflictRecord, "strategy");
+      if (strategy !== "client-wins" && strategy !== "manual" && strategy !== "server-wins")
+        throw metadataError(id, `localData.mutations[${index}].conflict.strategy is invalid.`);
+      const maxAttempts = unknownField(conflictRecord, "maxAttempts");
+      if (maxAttempts !== undefined && strategy !== "client-wins")
+        throw metadataError(id, `localData.mutations[${index}].conflict.maxAttempts requires client-wins.`);
+      conflict = {
+        strategy,
+        ...maxAttempts === undefined ? {} : {
+          maxAttempts: positiveVersion2(maxAttempts, id, `localData.mutations[${index}].conflict.maxAttempts`)
+        }
+      };
     }
-  });
-  const unmet = [...missing, ...mismatched];
-  if (unmet.length > 0)
-    throw new TypeError(`Device capabilities ${plan.capabilities.join(", ")} require ${unmet.join(", ")}. Run absolute mobile sync and approve the detected capability plugins.`);
-}, directAbsoluteProjectPackages = (projectRoot) => {
-  const manifest = readJson(join13(resolve11(projectRoot), "package.json"));
-  const packages = new Set;
-  for (const field2 of ["dependencies", "devDependencies"]) {
-    const dependencies = manifest[field2];
-    if (object2(dependencies))
-      for (const name of Object.keys(dependencies))
-        packages.add(name);
-  }
-  return packages;
-}, discoverAbsoluteDeviceCapabilities = (projectRoot, providers = loadAbsoluteDeviceCapabilityProviders(projectRoot)) => {
-  const root = resolve11(projectRoot);
-  if (!existsSync3(root))
-    return [];
-  const known = new Set(Object.keys(providers));
-  const capabilities = new Set;
-  for (const path of SOURCE_GLOB.scanSync({ cwd: root })) {
-    const portable = relative9(root, resolve11(root, path)).replaceAll("\\", "/");
-    if (isIgnored(portable))
-      continue;
-    const source = readFileSync4(resolve11(root, portable), "utf8");
-    for (const name of importedCapabilities(source, portable))
-      if (known.has(name))
-        capabilities.add(name);
-  }
-  return [...capabilities].sort();
-}, missingAbsoluteDeviceCapabilityPackages = (plan, directPackages) => plan.requiredPackages.filter((spec) => {
-  const packageName = spec.slice(0, spec.lastIndexOf("@"));
-  return !directPackages.has(packageName);
-}), projectImportsAbsoluteDeviceCapability = (projectRoot, capability) => {
-  const root = resolve11(projectRoot);
-  for (const path of SOURCE_GLOB.scanSync({ cwd: root })) {
-    const portable = relative9(root, resolve11(root, path)).replaceAll("\\", "/");
-    if (isIgnored(portable))
-      continue;
-    const source = readFileSync4(resolve11(root, portable), "utf8");
-    if (importedCapabilities(source, portable).has(capability))
-      return true;
-  }
-  return false;
-}, resolveAbsoluteDeviceCapabilityPlan = (projectRoot, provider = "capacitor") => {
-  const allProviders = loadAbsoluteDeviceCapabilityProviders(projectRoot, provider);
-  const capabilities = discoverAbsoluteDeviceCapabilities(projectRoot, allProviders);
-  for (const capability of ABSOLUTE_MOBILE_SHELL_DEVICE_CAPABILITIES) {
-    if (allProviders[capability] && !capabilities.includes(capability))
-      capabilities.push(capability);
-  }
-  capabilities.sort();
-  const providers = {};
-  for (const name of capabilities) {
-    const capabilityProvider = allProviders[name];
-    if (capabilityProvider)
-      providers[name] = capabilityProvider;
-  }
+    if (protection !== undefined && protection !== "none" && protection !== "required")
+      throw metadataError(id, `localData.mutations[${index}].protection is invalid.`);
+    if (sensitivity !== undefined && sensitivity !== "public" && sensitivity !== "private" && sensitivity !== "secret")
+      throw metadataError(id, `localData.mutations[${index}].sensitivity is invalid.`);
+    if (onProtectionUnavailable !== undefined && onProtectionUnavailable !== "error" && onProtectionUnavailable !== "memory-only")
+      throw metadataError(id, `localData.mutations[${index}].onProtectionUnavailable is invalid.`);
+    if (persistence !== undefined && persistence !== "durable" && persistence !== "memory-only")
+      throw metadataError(id, `localData.mutations[${index}].persistence is invalid.`);
+    return {
+      match: nonEmpty(Reflect.get(rule, "match"), id, `localData.mutations[${index}].match`),
+      ...conflict ? { conflict } : {},
+      ...sensitivity ? { sensitivity } : {},
+      ...onProtectionUnavailable ? { onProtectionUnavailable } : {},
+      ...persistence ? {
+        persistence
+      } : {},
+      ...protection ? { protection } : {}
+    };
+  }) : undefined;
+  const quota = Reflect.get(record, "maxBytesPerNamespace");
   return {
-    capabilities,
-    providers,
-    requiredPackages: [
-      ...new Set(capabilities.flatMap((name) => providers[name]?.packages ?? []))
-    ].sort()
-  };
-};
-var init_deviceCapabilities = __esm(() => {
-  ABSOLUTE_MOBILE_SHELL_DEVICE_CAPABILITIES = [
-    "keyboard",
-    "systemBars"
-  ];
-  ADAPTERS = {
-    capacitor: "@absolutejs/devices-capacitor",
-    expo: "@absolutejs/devices-expo"
+    ...collections ? { collections } : {},
+    ...mutations ? { mutations } : {},
+    ...quota === undefined ? {} : {
+      maxBytesPerNamespace: positiveVersion2(quota, id, "localData.maxBytesPerNamespace")
+    }
   };
-  SOURCE_GLOB = new Bun.Glob("**/*.{js,jsx,ts,tsx,svelte,vue}");
-  IGNORED_DIRECTORIES = new Set([
-    ".absolutejs",
-    ".git",
-    ".test-builds",
-    ".test-shards",
-    "build",
-    "dist",
-    "node_modules",
-    "test",
-    "tests"
-  ]);
-  IDENTIFIER_PATTERN = /^[A-Za-z_$][\w$]*$/u;
-  ANDROID_PERMISSION_PATTERN = /^android\.permission\.[A-Z][A-Z0-9_]*$/u;
-  IOS_USAGE_DESCRIPTIONS = new Set([
-    "camera",
-    "location-always",
-    "location-when-in-use",
-    "photo-library",
-    "photo-library-add"
+}, component = (id, value) => {
+  const record = requireObject(value, id, "localSchema must be an object.");
+  const allowed = new Set([
+    "localData",
+    "migrations",
+    "minimumCompatibleVersion",
+    "version"
   ]);
-  IOS_PRIVACY_ACCESSED_API_REASONS = {
-    NSPrivacyAccessedAPICategoryFileTimestamp: new Set(["C617.1"])
+  const unsupported = Object.keys(record).find((key) => !allowed.has(key));
+  if (unsupported)
+    throw metadataError(id, `${unsupported} is not supported.`);
+  const version = positiveVersion2(Reflect.get(record, "version"), id, "version");
+  const declaredMinimum = Reflect.get(record, "minimumCompatibleVersion");
+  const minimumCompatibleVersion = declaredMinimum === undefined ? Math.max(1, version - 2) : positiveVersion2(declaredMinimum, id, "minimumCompatibleVersion");
+  const declaredMigrations = Reflect.get(record, "migrations");
+  const declaredLocalData = Reflect.get(record, "localData");
+  if (declaredMigrations !== undefined && !Array.isArray(declaredMigrations))
+    throw metadataError(id, "migrations must be an array.");
+  const migrations = Array.isArray(declaredMigrations) ? declaredMigrations : undefined;
+  return {
+    id,
+    ...declaredLocalData === undefined ? {} : { localData: localDataPolicy(declaredLocalData, id) },
+    minimumCompatibleVersion,
+    ...Array.isArray(migrations) ? {
+      migrations: migrations.map((entry, index) => migration(entry, id, index))
+    } : {},
+    version
   };
-  IOS_PRIVACY_ACCESSED_APIS = [
-    "NSPrivacyAccessedAPICategoryFileTimestamp"
+}, dependencyNames = (manifest) => [
+  Reflect.get(manifest, "dependencies"),
+  Reflect.get(manifest, "optionalDependencies"),
+  Reflect.get(manifest, "devDependencies"),
+  Reflect.get(manifest, "peerDependencies")
+].flatMap((dependencies) => object2(dependencies) ? Object.keys(dependencies) : []).filter((name, index, names) => names.indexOf(name) === index).sort(), discoverAbsoluteSyncSchema = (projectRoot) => {
+  const appManifestPath = join13(resolve11(projectRoot), "package.json");
+  const appManifest = manifestAt(appManifestPath);
+  if (!appManifest)
+    return {
+      components: [
+        {
+          id: "@absolutejs/app",
+          minimumCompatibleVersion: 1,
+          version: 1
+        }
+      ],
+      sources: []
+    };
+  const appMetadata = localSchemaMetadata(appManifest);
+  const components = [
+    appMetadata === undefined ? { id: "@absolutejs/app", minimumCompatibleVersion: 1, version: 1 } : component("@absolutejs/app", appMetadata)
+  ];
+  const sources = [
+    { id: "@absolutejs/app", manifestPath: appManifestPath }
   ];
+  for (const name of dependencyNames(appManifest)) {
+    const manifestPath = packageManifestPath(projectRoot, name);
+    if (!manifestPath)
+      continue;
+    const manifest = manifestAt(manifestPath);
+    if (!manifest)
+      continue;
+    const metadata = localSchemaMetadata(manifest);
+    if (metadata === undefined)
+      continue;
+    components.push(component(name, metadata));
+    sources.push({ id: name, manifestPath });
+  }
+  components.sort((left, right) => left.id.localeCompare(right.id));
+  sources.sort((left, right) => left.id.localeCompare(right.id));
+  resolveSyncLocalSchemaComponents({}, { components });
+  return { components, sources };
+};
+var init_syncSchema = __esm(() => {
+  init_client();
 });
 
 // src/cli/scripts/telemetry.ts
 import { existsSync as existsSync5, mkdirSync, readFileSync as readFileSync5, writeFileSync } from "fs";
 import { homedir as homedir3 } from "os";
-import { join as join17 } from "path";
+import { join as join18 } from "path";
 var configDir, configPath, getTelemetryConfig = () => {
   try {
     if (!existsSync5(configPath))
@@ -1177,14 +1177,14 @@ var configDir, configPath, getTelemetryConfig = () => {
   }
 };
 var init_telemetry = __esm(() => {
-  configDir = join17(homedir3(), ".absolutejs");
-  configPath = join17(configDir, "telemetry.json");
+  configDir = join18(homedir3(), ".absolutejs");
+  configPath = join18(configDir, "telemetry.json");
 });
 
 // src/cli/telemetryEvent.ts
 import { existsSync as existsSync6, readFileSync as readFileSync6 } from "fs";
-import { arch, platform as platform2 } from "os";
-import { dirname as dirname12, join as join18, parse } from "path";
+import { arch, platform as platform3 } from "os";
+import { dirname as dirname13, join as join19, parse } from "path";
 var checkCandidate = (candidate) => {
   if (!existsSync6(candidate)) {
     return null;
@@ -1204,12 +1204,12 @@ var checkCandidate = (candidate) => {
 }, findPackageVersion = () => {
   let { dir } = import.meta;
   while (dir !== parse(dir).root) {
-    const candidate = join18(dir, "package.json");
+    const candidate = join19(dir, "package.json");
     const version = checkCandidate(candidate);
     if (version) {
       return version;
     }
-    dir = dirname12(dir);
+    dir = dirname13(dir);
   }
   return "unknown";
 }, sendTelemetryEvent = (event, payload) => {
@@ -1224,7 +1224,7 @@ var checkCandidate = (candidate) => {
       arch: arch(),
       bunVersion: Bun.version,
       event,
-      os: platform2(),
+      os: platform3(),
       payload,
       timestamp: new Date().toISOString(),
       version: getVersion()
@@ -8024,28 +8024,194 @@ var readAbsoluteMobileMaterializedReleases = async (root) => {
   }
 };
 
-// src/mobile/buildPipeline.ts
-init_nativeAuth();
-init_syncSchema();
-init_deviceCapabilities();
-
+// src/mobile/buildPipeline.ts
+init_deviceCapabilities();
+
+// src/mobile/expoProject.ts
+init_nativeAuth();
+init_syncSchema();
+init_deviceCapabilities();
+import {
+  access as access9,
+  cp as cp2,
+  mkdir as mkdir11,
+  mkdtemp as mkdtemp7,
+  readdir as readdir4,
+  readFile as readFile14,
+  rename as rename11,
+  rm as rm10,
+  writeFile as writeFile12
+} from "fs/promises";
+import { createHash as createHash11 } from "crypto";
+import { basename as basename4, dirname as dirname10, join as join14, relative as relative10, resolve as resolve12, sep as sep6 } from "path";
+
+// src/mobile/updateRuntime.ts
+init_deviceCapabilities();
+init_nativeAuth();
+import { createHash as createHash10 } from "crypto";
+
+// src/mobile/updateProtocol.ts
+var ABSOLUTE_MOBILE_UPDATE_FORMAT = 1;
+var ABSOLUTE_MOBILE_UPDATE_MAX_FILE_BYTES = 32 * 1024 * 1024;
+var ABSOLUTE_MOBILE_UPDATE_MAX_FILES = 1e4;
+var ABSOLUTE_MOBILE_UPDATE_MAX_TOTAL_BYTES = 128 * 1024 * 1024;
+var ABSOLUTE_MOBILE_UPDATE_SIGNATURE_ALGORITHM = "ecdsa-p256-sha256";
+var HASH_PATTERN = /^[a-f0-9]{64}$/u;
+var RELEASE_PATTERN = /^amu_[a-f0-9]{64}$/u;
+var KEY_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u;
+var CHANNEL_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u;
+var isClassification = (value) => value === "bug-fix" || value === "content" || value === "security";
+var object3 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var canonicalValue = (value) => {
+  if (Array.isArray(value))
+    return value.map(canonicalValue);
+  if (!object3(value))
+    return value;
+  return Object.fromEntries(Object.keys(value).sort().map((key) => [key, canonicalValue(value[key])]));
+};
+var absoluteMobileUpdateSigningPayload = (manifest) => new TextEncoder().encode(canonicalizeAbsoluteMobileUpdate(manifest));
+var canonicalizeAbsoluteMobileUpdate = (value) => JSON.stringify(canonicalValue(value));
+var requireText2 = (value, field2) => {
+  if (typeof value !== "string" || value.length === 0)
+    throw new TypeError(`${field2} must be a non-empty string.`);
+  return value;
+};
+var normalizeAbsoluteMobileUpdatePath = (value) => {
+  const path = requireText2(value, "Update file path").replaceAll("\\", "/");
+  if (path.startsWith("/") || path.includes("\x00") || path.split("/").some((segment) => !segment || segment === "." || segment === "..")) {
+    throw new TypeError("Update file paths must be normalized relative paths.");
+  }
+  return path;
+};
+var parseFile = (value) => {
+  if (!object3(value))
+    throw new TypeError("Update files must be objects.");
+  const path = normalizeAbsoluteMobileUpdatePath(value.path);
+  if (typeof value.bytes !== "number" || !Number.isSafeInteger(value.bytes) || value.bytes < 0 || value.bytes > ABSOLUTE_MOBILE_UPDATE_MAX_FILE_BYTES) {
+    throw new TypeError(`Update file ${path} has an invalid byte length.`);
+  }
+  if (typeof value.sha256 !== "string" || !HASH_PATTERN.test(value.sha256))
+    throw new TypeError(`Update file ${path} has an invalid SHA-256 digest.`);
+  return { bytes: value.bytes, path, sha256: value.sha256 };
+};
+var parseAbsoluteMobileUnsignedUpdateManifest = (value) => {
+  if (!object3(value) || value.format !== ABSOLUTE_MOBILE_UPDATE_FORMAT)
+    throw new TypeError("Invalid AbsoluteJS mobile update manifest.");
+  const appId = requireText2(value.appId, "Update appId");
+  const channel = requireText2(value.channel, "Update channel");
+  if (!CHANNEL_PATTERN.test(channel))
+    throw new TypeError("Update channel contains unsupported characters.");
+  if (!isClassification(value.classification))
+    throw new TypeError("Update classification is invalid.");
+  const createdAt = requireText2(value.createdAt, "Update createdAt");
+  if (!Number.isFinite(Date.parse(createdAt)) || new Date(createdAt).toISOString() !== createdAt)
+    throw new TypeError("Update createdAt must be a canonical ISO timestamp.");
+  if (!Array.isArray(value.files) || value.files.length === 0)
+    throw new TypeError("An update must contain at least one file.");
+  if (value.files.length > ABSOLUTE_MOBILE_UPDATE_MAX_FILES)
+    throw new TypeError("Update contains too many files.");
+  const files = value.files.map(parseFile);
+  const sorted = [...files].sort((left, right) => left.path.localeCompare(right.path));
+  if (files.some((file, index) => file.path !== sorted[index]?.path))
+    throw new TypeError("Update files must be sorted by path.");
+  if (new Set(files.map(({ path }) => path)).size !== files.length)
+    throw new TypeError("Update file paths must be unique.");
+  if (files.reduce((total, file) => total + file.bytes, 0) > ABSOLUTE_MOBILE_UPDATE_MAX_TOTAL_BYTES)
+    throw new TypeError("Update exceeds the maximum uncompressed size.");
+  if (typeof value.releaseId !== "string" || !RELEASE_PATTERN.test(value.releaseId))
+    throw new TypeError("Update releaseId is invalid.");
+  if (typeof value.runtimeFingerprint !== "string" || !HASH_PATTERN.test(value.runtimeFingerprint))
+    throw new TypeError("Update runtime fingerprint is invalid.");
+  if (value.withinSubmittedPurpose !== true)
+    throw new TypeError("OTA updates must attest that they remain within the submitted app purpose.");
+  return {
+    appId,
+    channel,
+    classification: value.classification,
+    createdAt,
+    files,
+    format: ABSOLUTE_MOBILE_UPDATE_FORMAT,
+    releaseId: value.releaseId,
+    runtimeFingerprint: value.runtimeFingerprint,
+    withinSubmittedPurpose: true
+  };
+};
+var parseAbsoluteMobileUpdateManifest = (value) => {
+  if (!object3(value))
+    throw new TypeError("Invalid AbsoluteJS mobile update manifest.");
+  const { signature: signatureValue, ...unsignedValue } = value;
+  const unsigned = parseAbsoluteMobileUnsignedUpdateManifest(unsignedValue);
+  if (!object3(signatureValue))
+    throw new TypeError("Update signature is missing.");
+  if (signatureValue.algorithm !== ABSOLUTE_MOBILE_UPDATE_SIGNATURE_ALGORITHM)
+    throw new TypeError("Update signature algorithm is unsupported.");
+  const keyId = requireText2(signatureValue.keyId, "Update signature keyId");
+  if (!KEY_ID_PATTERN.test(keyId))
+    throw new TypeError("Update signature keyId is invalid.");
+  const signature = requireText2(signatureValue.value, "Update signature value");
+  let signatureBytes;
+  try {
+    signatureBytes = Uint8Array.from(atob(signature), (character) => character.charCodeAt(0));
+  } catch {
+    signatureBytes = new Uint8Array;
+  }
+  if (!/^[A-Za-z0-9+/]+={0,2}$/u.test(signature) || signatureBytes.byteLength !== 64 || btoa(String.fromCharCode(...signatureBytes)) !== signature)
+    throw new TypeError("Update signature is not canonical base64.");
+  return {
+    ...unsigned,
+    signature: {
+      algorithm: ABSOLUTE_MOBILE_UPDATE_SIGNATURE_ALGORITHM,
+      keyId,
+      value: signature
+    }
+  };
+};
+var unsignedAbsoluteMobileUpdate = (manifest) => {
+  const { signature: _signature, ...unsigned } = manifest;
+  return unsigned;
+};
+
+// src/mobile/updateRuntime.ts
+init_syncSchema();
+var ABSOLUTE_MOBILE_SHELL_ABI = 2;
+var ABSOLUTE_MOBILE_UPDATE_RUNTIME_FORMAT = 1;
+var createAbsoluteMobileUpdateRuntimeDescriptor = (options) => ({
+  appId: options.config.appId,
+  auth: options.auth ?? null,
+  deepLinks: {
+    hosts: options.config.deepLinkHosts,
+    ...options.config.deepLinkScheme ? { scheme: options.config.deepLinkScheme } : {}
+  },
+  deviceCapabilities: options.deviceCapabilities,
+  engine: options.config.engine,
+  format: ABSOLUTE_MOBILE_UPDATE_RUNTIME_FORMAT,
+  shellAbi: ABSOLUTE_MOBILE_SHELL_ABI,
+  syncSchema: options.syncSchema ?? null,
+  updates: options.config.updates ?? null
+});
+var fingerprintAbsoluteMobileUpdateRuntime = (descriptor) => createHash10("sha256").update(canonicalizeAbsoluteMobileUpdate(descriptor)).digest("hex");
+var resolveAbsoluteMobileUpdateRuntime = (config, projectRoot) => {
+  const auth = resolveAbsoluteMobileAuthManifest(projectRoot, config);
+  const sync = auth !== undefined && projectUsesAbsoluteSync(projectRoot);
+  const syncSchema = sync ? discoverAbsoluteSyncSchema(projectRoot) : undefined;
+  const deviceCapabilities = resolveAbsoluteDeviceCapabilityPlan(projectRoot, config.engine);
+  const descriptor = createAbsoluteMobileUpdateRuntimeDescriptor({
+    ...auth ? { auth } : {},
+    config,
+    deviceCapabilities,
+    ...syncSchema ? { syncSchema } : {}
+  });
+  return {
+    auth,
+    descriptor,
+    deviceCapabilities,
+    fingerprint: fingerprintAbsoluteMobileUpdateRuntime(descriptor),
+    sync,
+    syncSchema
+  };
+};
+
 // src/mobile/expoProject.ts
-init_nativeAuth();
-init_syncSchema();
-init_deviceCapabilities();
-import {
-  access as access9,
-  cp as cp2,
-  mkdir as mkdir11,
-  mkdtemp as mkdtemp7,
-  readdir as readdir4,
-  readFile as readFile14,
-  rename as rename11,
-  rm as rm10,
-  writeFile as writeFile12
-} from "fs/promises";
-import { createHash as createHash10 } from "crypto";
-import { basename as basename4, dirname as dirname10, join as join14, relative as relative10, resolve as resolve12, sep as sep6 } from "path";
 var EXPO_GENERATED_HEADER = `// Generated by AbsoluteJS. Edit absolute.config.ts, then run absolute mobile sync.
 `;
 var EXPO_ASSET_EXTENSION = ".absasset";
@@ -8122,7 +8288,7 @@ var packageDependencies = (plan) => Object.fromEntries(plan.requiredPackages.map
   const separator = spec.lastIndexOf("@");
   return [spec.slice(0, separator), spec.slice(separator + 1)];
 }));
-var expoPackage = (auth, sync, devices) => ({
+var expoPackage = (auth, sync, devices, updates) => ({
   dependencies: {
     "@absolutejs/devices": "0.7.0",
     "@absolutejs/devices-expo": "0.0.2",
@@ -8137,6 +8303,7 @@ var expoPackage = (auth, sync, devices) => ({
     expo: "~57.0.9",
     "expo-asset": "~57.0.15",
     "expo-constants": "~57.0.16",
+    ...updates ? { "expo-crypto": "~57.0.1" } : {},
     "expo-dev-client": "~57.0.16",
     "expo-file-system": "~57.0.6",
     "expo-haptics": "~57.0.2",
@@ -8145,13 +8312,13 @@ var expoPackage = (auth, sync, devices) => ({
       "expo-background-task": "~57.0.14",
       "expo-network": "~57.0.1",
       "expo-sqlite": "~57.0.2",
-      "expo-task-manager": "~57.0.14",
-      "expo-updates": "~57.0.19"
+      "expo-task-manager": "~57.0.14"
     } : {},
+    ...updates || sync ? { "expo-updates": "~57.0.19" } : {},
     "expo-router": "~57.0.17",
-    ...auth ? {
+    ...auth || updates ? {
       "expo-secure-store": "~57.0.2",
-      "expo-web-browser": "~57.0.2"
+      ...auth ? { "expo-web-browser": "~57.0.2" } : {}
     } : {},
     react: "19.2.3",
     "react-native": "0.86.3",
@@ -8174,7 +8341,7 @@ var expoPackage = (auth, sync, devices) => ({
   },
   version: "0.0.0"
 });
-var expoAppConfig = (config, auth, sync, devices) => {
+var expoAppConfig = (config, auth, sync, devices, runtimeFingerprint) => {
   const requirements = absoluteDeviceNativeRequirements(devices);
   const usageKey = (purpose) => {
     if (purpose === "camera")
@@ -8260,7 +8427,7 @@ var expoAppConfig = (config, auth, sync, devices) => {
       plugins: [
         "expo-router",
         ["expo-dev-client", { launchMode: "most-recent" }],
-        ...auth ? ["expo-secure-store"] : [],
+        ...auth || config.updates ? ["expo-secure-store"] : [],
         ...sync ? [
           "expo-sqlite",
           "expo-background-task",
@@ -8268,9 +8435,20 @@ var expoAppConfig = (config, auth, sync, devices) => {
         ] : [],
         ...configuredPlugins
       ],
-      runtimeVersion: { policy: "appVersion" },
+      runtimeVersion: runtimeFingerprint,
       scheme: config.deepLinkScheme,
       slug: config.appId.toLowerCase().replaceAll(".", "-"),
+      ...config.updates ? {
+        updates: {
+          checkAutomatically: "NEVER",
+          fallbackToCacheTimeout: config.updates.bootTimeoutMs,
+          requestHeaders: {
+            "x-absolute-mobile-app": config.appId,
+            "x-absolute-mobile-channel": config.updates.channel
+          },
+          url: config.updates.manifestUrl
+        }
+      } : {},
       version: config.iosVersion ?? "0.1.0"
     }
   };
@@ -8341,13 +8519,16 @@ config.watchFolders = [appRoot];
 
 module.exports = config;
 `;
-var layoutSource = (auth, sync) => `${EXPO_GENERATED_HEADER}import { Stack } from 'expo-router';
+var layoutSource = (auth, sync, updates) => `${EXPO_GENERATED_HEADER}import { Stack } from 'expo-router';
 import '../src/generated/AbsoluteDevices';
 ${auth ? `import { useEffect, useState } from 'react';
 import { startAbsoluteExpoAuth } from '../src/generated/AbsoluteAuth';` : ""}
 ${sync ? "import { startAbsoluteExpoSync } from '../src/generated/AbsoluteSync';" : ""}
+${updates ? `import { useEffect as useUpdateEffect } from 'react';
+import { startAbsoluteExpoUpdates } from '../src/generated/AbsoluteUpdates';` : ""}
 
 export default function AbsoluteLayout() {
+	${updates ? "useUpdateEffect(() => { void startAbsoluteExpoUpdates(); }, []);" : ""}
 	${auth ? `const [ready, setReady] = useState(false);
 	useEffect(() => {
 		let active = true;
@@ -8358,6 +8539,40 @@ export default function AbsoluteLayout() {
 	return <Stack screenOptions={{ headerShown: false }} />;
 }
 `;
+var updatesRuntimeSource = (config) => `${EXPO_GENERATED_HEADER}import { randomUUID } from 'expo-crypto';
+import * as SecureStore from 'expo-secure-store';
+import * as Updates from 'expo-updates';
+
+const INSTALLATION_KEY = 'absolutejs.mobile.update.installation.v1';
+const REQUEST_HEADERS = ${JSON.stringify({
+  "x-absolute-mobile-app": config.appId,
+  "x-absolute-mobile-channel": config.updates?.channel
+})};
+
+let startPromise: Promise<void> | undefined;
+export const startAbsoluteExpoUpdates = () => {
+	startPromise ??= (async () => {
+		if (!Updates.isEnabled || __DEV__) return;
+		let installationId = await SecureStore.getItemAsync(INSTALLATION_KEY);
+		if (!installationId) {
+			installationId = randomUUID();
+			await SecureStore.setItemAsync(INSTALLATION_KEY, installationId);
+		}
+		await Updates.setUpdateRequestHeadersOverride({
+			...REQUEST_HEADERS,
+			'x-absolute-mobile-installation': installationId
+		});
+		const result = await Updates.checkForUpdateAsync();
+		if (result.isAvailable || result.isRollBackToEmbedded) {
+			await Updates.fetchUpdateAsync();
+		}
+	})().catch(error => {
+		console.warn('[absolute:mobile-update] Expo update check failed', error instanceof Error ? error.message : 'unknown error');
+	});
+
+	return startPromise;
+};
+`;
 var nativeDiagnosticSource = `${EXPO_GENERATED_HEADER}import * as Haptics from 'expo-haptics';
 import { Link } from 'expo-router';
 import { Pressable, SafeAreaView, StyleSheet, Text, View } from 'react-native';
@@ -8460,7 +8675,7 @@ ${push ? `absoluteExpoAuth.onPrincipalChange(principal => {
 `;
 };
 var authRuntimeSource = (auth, appId) => {
-  const storageIdentity = createHash10("sha256").update(appId).digest("hex").slice(0, 24);
+  const storageIdentity = createHash11("sha256").update(appId).digest("hex").slice(0, 24);
   return `${EXPO_GENERATED_HEADER}import { createAbsoluteExpoAuthClient } from '@absolutejs/auth-expo';
 import { createMobileAuthTransport, installAuthClientRuntimeTransport } from '@absolutejs/auth/client/mobile';
 
@@ -8492,7 +8707,7 @@ export const startAbsoluteExpoAuth = () => {
 `;
 };
 var syncRuntimeSource = (config, schema) => {
-  const storageIdentity = createHash10("sha256").update(config.appId).digest("hex").slice(0, 24);
+  const storageIdentity = createHash11("sha256").update(config.appId).digest("hex").slice(0, 24);
   const backgroundEndpoint = new URL("/__absolute/sync/background", config.productionOrigin).href;
   const backgroundTask = `${config.appId}.absolutejs.sync`;
   return `${EXPO_GENERATED_HEADER}import { runHeadlessSync } from '@absolutejs/sync/client/headless';
@@ -9130,6 +9345,7 @@ var writeAbsoluteExpoProject = async (config, options) => {
   const devices = resolveAbsoluteDeviceCapabilityPlan(projectRoot, "expo");
   const syncEnabled = Boolean(auth && projectUsesAbsoluteSync(projectRoot));
   const syncSchema = syncEnabled ? { components: discoverAbsoluteSyncSchema(projectRoot).components } : undefined;
+  const runtimeFingerprint = resolveAbsoluteMobileUpdateRuntime(config, projectRoot).fingerprint;
   const routeModules = Object.entries(config.expoNativeRoutes);
   const moduleChecks = await Promise.all(routeModules.map(async ([route, module]) => ({
     exists: await exists3(module),
@@ -9162,12 +9378,12 @@ node_modules/
     ],
     [
       join14(project, "app.json"),
-      jsonSource(expoAppConfig(config, authEnabled, syncEnabled, devices))
+      jsonSource(expoAppConfig(config, authEnabled, syncEnabled, devices, runtimeFingerprint))
     ],
     [join14(project, "app.config.js"), expoDynamicAppConfig],
     [
       join14(project, "package.json"),
-      jsonSource(expoPackage(authEnabled, syncEnabled, devices))
+      jsonSource(expoPackage(authEnabled, syncEnabled, devices, config.updates !== undefined))
     ],
     [join14(project, "metro.config.js"), metroConfig(projectRoot)],
     [
@@ -9180,7 +9396,7 @@ node_modules/
     ],
     [
       join14(project, "app", "_layout.tsx"),
-      layoutSource(authEnabled, syncEnabled)
+      layoutSource(authEnabled, syncEnabled, config.updates !== undefined)
     ],
     [
       join14(project, "app", "__absolute", "native", "index.tsx"),
@@ -9199,6 +9415,9 @@ node_modules/
       webHostSource(config, auth, syncEnabled)
     ]
   ]);
+  if (config.updates) {
+    files.set(join14(project, "src", "generated", "AbsoluteUpdates.ts"), updatesRuntimeSource(config));
+  }
   if (auth) {
     files.set(join14(project, "src", "generated", "AbsoluteAuth.ts"), authRuntimeSource(auth, config.appId));
   }
@@ -9302,7 +9521,7 @@ var syncAbsoluteExpoWebAssets = async (config) => {
   const nativeDataManifest = expoNativeDataManifest(manifest);
   const { appBuild } = nativeDataManifest;
   const files = await walkFiles(config.bundleDirectory);
-  const bundleHash = createHash10("sha256");
+  const bundleHash = createHash11("sha256");
   const filesWithContents = await Promise.all(files.map(async (file) => ({ contents: await readFile14(file), file })));
   filesWithContents.forEach(({ contents, file }) => {
     bundleHash.update(relative10(config.bundleDirectory, file).replaceAll("\\", "/"));
@@ -9334,149 +9553,6 @@ var syncAbsoluteExpoWebAssets = async (config) => {
   return { appBuild, assets: assets.length, bundleId, path: destination };
 };
 
-// src/mobile/updateRuntime.ts
-import { createHash as createHash11 } from "crypto";
-
-// src/mobile/updateProtocol.ts
-var ABSOLUTE_MOBILE_UPDATE_FORMAT = 1;
-var ABSOLUTE_MOBILE_UPDATE_MAX_FILE_BYTES = 32 * 1024 * 1024;
-var ABSOLUTE_MOBILE_UPDATE_MAX_FILES = 1e4;
-var ABSOLUTE_MOBILE_UPDATE_MAX_TOTAL_BYTES = 128 * 1024 * 1024;
-var ABSOLUTE_MOBILE_UPDATE_SIGNATURE_ALGORITHM = "ecdsa-p256-sha256";
-var HASH_PATTERN = /^[a-f0-9]{64}$/u;
-var RELEASE_PATTERN = /^amu_[a-f0-9]{64}$/u;
-var KEY_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u;
-var CHANNEL_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u;
-var isClassification = (value) => value === "bug-fix" || value === "content" || value === "security";
-var object3 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
-var canonicalValue = (value) => {
-  if (Array.isArray(value))
-    return value.map(canonicalValue);
-  if (!object3(value))
-    return value;
-  return Object.fromEntries(Object.keys(value).sort().map((key) => [key, canonicalValue(value[key])]));
-};
-var absoluteMobileUpdateSigningPayload = (manifest) => new TextEncoder().encode(canonicalizeAbsoluteMobileUpdate(manifest));
-var canonicalizeAbsoluteMobileUpdate = (value) => JSON.stringify(canonicalValue(value));
-var requireText2 = (value, field2) => {
-  if (typeof value !== "string" || value.length === 0)
-    throw new TypeError(`${field2} must be a non-empty string.`);
-  return value;
-};
-var normalizeAbsoluteMobileUpdatePath = (value) => {
-  const path = requireText2(value, "Update file path").replaceAll("\\", "/");
-  if (path.startsWith("/") || path.includes("\x00") || path.split("/").some((segment) => !segment || segment === "." || segment === "..")) {
-    throw new TypeError("Update file paths must be normalized relative paths.");
-  }
-  return path;
-};
-var parseFile = (value) => {
-  if (!object3(value))
-    throw new TypeError("Update files must be objects.");
-  const path = normalizeAbsoluteMobileUpdatePath(value.path);
-  if (typeof value.bytes !== "number" || !Number.isSafeInteger(value.bytes) || value.bytes < 0 || value.bytes > ABSOLUTE_MOBILE_UPDATE_MAX_FILE_BYTES) {
-    throw new TypeError(`Update file ${path} has an invalid byte length.`);
-  }
-  if (typeof value.sha256 !== "string" || !HASH_PATTERN.test(value.sha256))
-    throw new TypeError(`Update file ${path} has an invalid SHA-256 digest.`);
-  return { bytes: value.bytes, path, sha256: value.sha256 };
-};
-var parseAbsoluteMobileUnsignedUpdateManifest = (value) => {
-  if (!object3(value) || value.format !== ABSOLUTE_MOBILE_UPDATE_FORMAT)
-    throw new TypeError("Invalid AbsoluteJS mobile update manifest.");
-  const appId = requireText2(value.appId, "Update appId");
-  const channel = requireText2(value.channel, "Update channel");
-  if (!CHANNEL_PATTERN.test(channel))
-    throw new TypeError("Update channel contains unsupported characters.");
-  if (!isClassification(value.classification))
-    throw new TypeError("Update classification is invalid.");
-  const createdAt = requireText2(value.createdAt, "Update createdAt");
-  if (!Number.isFinite(Date.parse(createdAt)) || new Date(createdAt).toISOString() !== createdAt)
-    throw new TypeError("Update createdAt must be a canonical ISO timestamp.");
-  if (!Array.isArray(value.files) || value.files.length === 0)
-    throw new TypeError("An update must contain at least one file.");
-  if (value.files.length > ABSOLUTE_MOBILE_UPDATE_MAX_FILES)
-    throw new TypeError("Update contains too many files.");
-  const files = value.files.map(parseFile);
-  const sorted = [...files].sort((left, right) => left.path.localeCompare(right.path));
-  if (files.some((file, index) => file.path !== sorted[index]?.path))
-    throw new TypeError("Update files must be sorted by path.");
-  if (new Set(files.map(({ path }) => path)).size !== files.length)
-    throw new TypeError("Update file paths must be unique.");
-  if (files.reduce((total, file) => total + file.bytes, 0) > ABSOLUTE_MOBILE_UPDATE_MAX_TOTAL_BYTES)
-    throw new TypeError("Update exceeds the maximum uncompressed size.");
-  if (typeof value.releaseId !== "string" || !RELEASE_PATTERN.test(value.releaseId))
-    throw new TypeError("Update releaseId is invalid.");
-  if (typeof value.runtimeFingerprint !== "string" || !HASH_PATTERN.test(value.runtimeFingerprint))
-    throw new TypeError("Update runtime fingerprint is invalid.");
-  if (value.withinSubmittedPurpose !== true)
-    throw new TypeError("OTA updates must attest that they remain within the submitted app purpose.");
-  return {
-    appId,
-    channel,
-    classification: value.classification,
-    createdAt,
-    files,
-    format: ABSOLUTE_MOBILE_UPDATE_FORMAT,
-    releaseId: value.releaseId,
-    runtimeFingerprint: value.runtimeFingerprint,
-    withinSubmittedPurpose: true
-  };
-};
-var parseAbsoluteMobileUpdateManifest = (value) => {
-  if (!object3(value))
-    throw new TypeError("Invalid AbsoluteJS mobile update manifest.");
-  const { signature: signatureValue, ...unsignedValue } = value;
-  const unsigned = parseAbsoluteMobileUnsignedUpdateManifest(unsignedValue);
-  if (!object3(signatureValue))
-    throw new TypeError("Update signature is missing.");
-  if (signatureValue.algorithm !== ABSOLUTE_MOBILE_UPDATE_SIGNATURE_ALGORITHM)
-    throw new TypeError("Update signature algorithm is unsupported.");
-  const keyId = requireText2(signatureValue.keyId, "Update signature keyId");
-  if (!KEY_ID_PATTERN.test(keyId))
-    throw new TypeError("Update signature keyId is invalid.");
-  const signature = requireText2(signatureValue.value, "Update signature value");
-  let signatureBytes;
-  try {
-    signatureBytes = Uint8Array.from(atob(signature), (character) => character.charCodeAt(0));
-  } catch {
-    signatureBytes = new Uint8Array;
-  }
-  if (!/^[A-Za-z0-9+/]+={0,2}$/u.test(signature) || signatureBytes.byteLength !== 64 || btoa(String.fromCharCode(...signatureBytes)) !== signature)
-    throw new TypeError("Update signature is not canonical base64.");
-  return {
-    ...unsigned,
-    signature: {
-      algorithm: ABSOLUTE_MOBILE_UPDATE_SIGNATURE_ALGORITHM,
-      keyId,
-      value: signature
-    }
-  };
-};
-var unsignedAbsoluteMobileUpdate = (manifest) => {
-  const { signature: _signature, ...unsigned } = manifest;
-  return unsigned;
-};
-
-// src/mobile/updateRuntime.ts
-var ABSOLUTE_MOBILE_SHELL_ABI = 2;
-var ABSOLUTE_MOBILE_UPDATE_RUNTIME_FORMAT = 1;
-var createAbsoluteMobileUpdateRuntimeDescriptor = (options) => ({
-  appId: options.config.appId,
-  auth: options.auth ?? null,
-  deepLinks: {
-    hosts: options.config.deepLinkHosts,
-    ...options.config.deepLinkScheme ? { scheme: options.config.deepLinkScheme } : {}
-  },
-  deviceCapabilities: options.deviceCapabilities,
-  engine: options.config.engine,
-  format: ABSOLUTE_MOBILE_UPDATE_RUNTIME_FORMAT,
-  shellAbi: ABSOLUTE_MOBILE_SHELL_ABI,
-  syncSchema: options.syncSchema ?? null,
-  updates: options.config.updates ?? null
-});
-var fingerprintAbsoluteMobileUpdateRuntime = (descriptor) => createHash11("sha256").update(canonicalizeAbsoluteMobileUpdate(descriptor)).digest("hex");
-
 // src/mobile/buildPipeline.ts
 var isElysiaApp = (value) => typeof value === "object" && value !== null && typeof Reflect.get(value, "compile") === "function" && Array.isArray(Reflect.get(value, "routes"));
 var isStringRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value) && Object.values(value).every((entry) => typeof entry === "string");
@@ -9548,16 +9624,13 @@ var finalizeAbsoluteMobileCompatibilityBuild = async (options) => {
     producerPath: resolve13(options.producerPath),
     runtime: String(ABSOLUTE_MOBILE_PAGE_PROTOCOL_VERSION)
   });
-  const auth = resolveAbsoluteMobileAuthManifest(options.projectRoot, mobile);
-  const sync = auth !== undefined && projectUsesAbsoluteSync(options.projectRoot);
-  const syncSchema = sync ? discoverAbsoluteSyncSchema(options.projectRoot) : undefined;
-  const deviceCapabilities = resolveAbsoluteDeviceCapabilityPlan(options.projectRoot, mobile.engine);
-  const runtimeFingerprint = fingerprintAbsoluteMobileUpdateRuntime(createAbsoluteMobileUpdateRuntimeDescriptor({
-    ...auth ? { auth } : {},
-    config: mobile,
+  const {
+    auth,
     deviceCapabilities,
-    ...syncSchema ? { syncSchema } : {}
-  }));
+    fingerprint: runtimeFingerprint,
+    sync,
+    syncSchema
+  } = resolveAbsoluteMobileUpdateRuntime(mobile, options.projectRoot);
   const usesPush = deviceCapabilities.capabilities.includes("pushNotifications");
   if (usesPush && !auth)
     throw new TypeError("Portable push notifications require @absolutejs/auth so provider tokens can be registered without exposing identity controls to page code.");
@@ -10284,14 +10357,102 @@ var startAbsoluteExpoDevSession = async (options) => {
     throw error;
   }
 };
+// src/mobile/expoUpdate.ts
+import { access as access11, mkdir as mkdir12, readFile as readFile16, writeFile as writeFile13 } from "fs/promises";
+import { dirname as dirname11, extname as extname4, join as join17 } from "path";
+var ABSOLUTE_EXPO_UPDATE_DESCRIPTOR = "_absolute/expo-update.json";
+var ABSOLUTE_EXPO_UPDATE_FORMAT = 1;
+var object4 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var safePath = (value, field2) => {
+  if (typeof value !== "string" || value.length === 0)
+    throw new TypeError(`Expo update ${field2} is invalid.`);
+  const path = value.replaceAll("\\", "/");
+  if (path.startsWith("/") || path.split("/").some((segment) => !segment || segment === "." || segment === ".."))
+    throw new TypeError(`Expo update ${field2} must be a relative path.`);
+  return path;
+};
+var extension = (value, path) => {
+  if (value === null || value === undefined) {
+    const inferred = extname4(path);
+    return inferred ? inferred.slice(1) : undefined;
+  }
+  if (typeof value !== "string" || !/^[A-Za-z0-9]+$/u.test(value))
+    throw new TypeError("Expo update asset extension is invalid.");
+  return value;
+};
+var asset = (value) => {
+  if (!object4(value))
+    throw new TypeError("Expo update asset is invalid.");
+  const path = safePath(value.path, "asset path");
+  const normalizedExtension = extension(value.extension ?? value.ext, path);
+  return {
+    ...normalizedExtension ? { extension: normalizedExtension } : {},
+    path
+  };
+};
+var platform2 = (value) => {
+  if (!object4(value) || !Array.isArray(value.assets))
+    throw new TypeError("Expo update platform metadata is invalid.");
+  const launchValue = object4(value.launchAsset) ? value.launchAsset : { path: value.bundle };
+  const launchPath = safePath(launchValue.path, "launch bundle");
+  const launchExtension = extension(launchValue.extension ?? null, launchPath);
+  const assets = value.assets.map(asset);
+  return {
+    assets,
+    launchAsset: {
+      ...launchExtension ? { extension: launchExtension } : {},
+      path: launchPath
+    }
+  };
+};
+var parseAbsoluteExpoUpdateDescriptor = (value) => {
+  if (!object4(value) || value.engine !== "expo" || value.format !== ABSOLUTE_EXPO_UPDATE_FORMAT || !object4(value.expoConfig) || !object4(value.platforms) || typeof value.runtimeVersion !== "string" || !/^[a-f0-9]{64}$/u.test(value.runtimeVersion))
+    throw new TypeError("AbsoluteJS Expo update descriptor is invalid.");
+  const platforms = {};
+  for (const name of ["android", "ios"]) {
+    const candidate = value.platforms[name];
+    if (candidate !== undefined)
+      platforms[name] = platform2(candidate);
+  }
+  if (Object.keys(platforms).length === 0)
+    throw new TypeError("Expo update descriptor has no native platforms.");
+  return {
+    engine: "expo",
+    expoConfig: value.expoConfig,
+    format: ABSOLUTE_EXPO_UPDATE_FORMAT,
+    platforms,
+    runtimeVersion: value.runtimeVersion
+  };
+};
+var finalizeAbsoluteExpoUpdateExport = async (options) => {
+  const metadata = JSON.parse(await readFile16(join17(options.exportDirectory, "metadata.json"), "utf8"));
+  if (!object4(metadata) || !object4(metadata.fileMetadata))
+    throw new TypeError("Expo export metadata.json is invalid.");
+  const descriptor = parseAbsoluteExpoUpdateDescriptor({
+    engine: "expo",
+    expoConfig: options.expoConfig,
+    format: ABSOLUTE_EXPO_UPDATE_FORMAT,
+    platforms: metadata.fileMetadata,
+    runtimeVersion: options.runtimeVersion
+  });
+  const referenced = Object.values(descriptor.platforms).flatMap((entry) => entry ? [entry.launchAsset, ...entry.assets] : []);
+  await Promise.all(referenced.map(({ path }) => access11(join17(options.exportDirectory, path)).catch(() => {
+    throw new TypeError(`Expo export metadata references missing asset ${path}.`);
+  })));
+  const destination = join17(options.exportDirectory, ABSOLUTE_EXPO_UPDATE_DESCRIPTOR);
+  await mkdir12(dirname11(destination), { recursive: true });
+  await writeFile13(destination, `${JSON.stringify(descriptor, null, "\t")}
+`);
+  return { descriptor, path: destination };
+};
 
 // src/mobile/index.ts
 init_config();
 
 // src/mobile/ciWorkflow.ts
 import { existsSync as existsSync4 } from "fs";
-import { access as access11, mkdir as mkdir12, readFile as readFile16, writeFile as writeFile13 } from "fs/promises";
-import { dirname as dirname11, extname as extname4, relative as relative11, resolve as resolve14, sep as sep7 } from "path";
+import { access as access12, mkdir as mkdir13, readFile as readFile17, writeFile as writeFile14 } from "fs/promises";
+import { dirname as dirname12, extname as extname5, relative as relative11, resolve as resolve14, sep as sep7 } from "path";
 var ABSOLUTE_MOBILE_CI_WORKFLOW_FORMAT = 1;
 var SECRET_NAME_PATTERN = /^[A-Z][A-Z0-9_]*$/u;
 var CI_ENV_INDENTATION = 6;
@@ -10312,7 +10473,7 @@ var RESERVED_SECRET_NAMES = new Set([
 ]);
 var exists4 = async (path) => {
   try {
-    await access11(path);
+    await access12(path);
     return true;
   } catch {
     return false;
@@ -10337,7 +10498,7 @@ var workflowOutputPath = (projectRoot, value) => {
   const workflows = resolve14(root, ".github/workflows");
   const path = resolve14(root, value ?? ".github/workflows/absolute-mobile.yml");
   const portable = relative11(workflows, path);
-  if (portable === ".." || portable.startsWith(`..${sep7}`) || extname4(path) !== ".yml" && extname4(path) !== ".yaml") {
+  if (portable === ".." || portable.startsWith(`..${sep7}`) || extname5(path) !== ".yml" && extname5(path) !== ".yaml") {
     throw new TypeError("mobile ci github --output must be a .yml or .yaml file inside .github/workflows.");
   }
   return path;
@@ -10394,13 +10555,13 @@ var bundleAuditSteps = `      - name: Prepare production mobile bundle
       - name: Enforce mobile bundle audit
         if: steps.mobile-bundle-audit.outcome != 'success'
         run: exit 1`;
-var releaseAuditSteps = (platform2) => `      - name: Run redacted mobile release audit
+var releaseAuditSteps = (platform3) => `      - name: Run redacted mobile release audit
         id: mobile-release-audit
         continue-on-error: true
         shell: bash
         run: |
           mkdir -p .absolutejs/mobile-ci
-          args=(bunx absolute mobile doctor release ${platform2} --json)
+          args=(bunx absolute mobile doctor release ${platform3} --json)
           ${appendConfigArgument}
           "\${args[@]}" > .absolutejs/mobile-ci/compliance.json
       - name: Upload mobile compliance report
@@ -10467,7 +10628,7 @@ var publishingInputs = (platforms, includePublishing) => {
 ${fields.join(`
 `)}`;
 };
-var jobCondition = (platform2) => `github.event_name == 'workflow_dispatch' && (inputs.platform == 'all' || inputs.platform == '${platform2}')`;
+var jobCondition = (platform3) => `github.event_name == 'workflow_dispatch' && (inputs.platform == 'all' || inputs.platform == '${platform3}')`;
 var androidJob = (options) => {
   const custom = customSecretEnvironment(options.customSecrets);
   const publishEnvironment = options.includePublishing ? `
@@ -10766,18 +10927,18 @@ ${bundleAuditSteps}${platforms.includes("android") ? androidJob({ customSecrets,
 var writeAbsoluteMobileGithubWorkflow = async (options) => {
   const path = workflowOutputPath(options.projectRoot, options.outputPath);
   const generated = createAbsoluteMobileGithubWorkflow(options);
-  const previous = await exists4(path) ? await readFile16(path, "utf8") : undefined;
+  const previous = await exists4(path) ? await readFile17(path, "utf8") : undefined;
   if (previous !== undefined && previous !== generated.workflow && !options.force)
     throw new TypeError(`${relative11(options.projectRoot, path)} already exists and differs. Rerun with --force to replace the generated workflow.`);
   if (previous !== generated.workflow) {
-    await mkdir12(dirname11(path), { recursive: true });
-    await writeFile13(path, generated.workflow);
+    await mkdir13(dirname12(path), { recursive: true });
+    await writeFile14(path, generated.workflow);
   }
   return {
     changed: previous !== generated.workflow,
     format: ABSOLUTE_MOBILE_CI_WORKFLOW_FORMAT,
     path,
-    platforms: options.config.engine === "expo" ? options.config.platforms.filter((platform2) => platform2 === "android") : [...options.config.platforms].sort(),
+    platforms: options.config.engine === "expo" ? options.config.platforms.filter((platform3) => platform3 === "android") : [...options.config.platforms].sort(),
     publishing: options.includePublishing === true,
     requiredSecrets: generated.requiredSecrets
   };
@@ -10984,13 +11145,13 @@ var createAbsoluteMobilePreviewPlugin = (mobile) => {
   })).post("/__absolute/mobile-preview-telemetry", ({ body, status }) => {
     const value = isRecord10(body) ? body : undefined;
     const durationMs = value?.durationMs;
-    const platform3 = value?.platform;
-    if (typeof durationMs !== "number" || !Number.isFinite(durationMs) || durationMs < 0 || durationMs > 300000 || platform3 !== "android" && platform3 !== "ios") {
+    const platform4 = value?.platform;
+    if (typeof durationMs !== "number" || !Number.isFinite(durationMs) || durationMs < 0 || durationMs > 300000 || platform4 !== "android" && platform4 !== "ios") {
       return status(400, { error: "invalid-preview-telemetry" });
     }
     sendTelemetryEvent("mobile:preview-ready", {
       durationMs: Math.round(durationMs),
-      platform: platform3,
+      platform: platform4,
       provider: "capacitor",
       target: "mobile-preview"
     });
@@ -10998,19 +11159,19 @@ var createAbsoluteMobilePreviewPlugin = (mobile) => {
   });
 };
 // src/mobile/nativeDeepLinks.ts
-import { readFile as readFile17, rename as rename12, writeFile as writeFile14 } from "fs/promises";
-import { join as join19 } from "path";
+import { readFile as readFile18, rename as rename12, writeFile as writeFile15 } from "fs/promises";
+import { join as join20 } from "path";
 var START_MARKER = "<!-- absolutejs:deep-links:start -->";
 var END_MARKER = "<!-- absolutejs:deep-links:end -->";
 var IOS_ENTITLEMENTS = "App/AbsoluteJS.entitlements";
 var NOT_FOUND = -1;
 var escapeXml = (value) => value.replaceAll("&", "&amp;").replaceAll('"', "&quot;").replaceAll("'", "&apos;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
 var writeChangedFile = async (path, source) => {
-  const current = await readFile17(path, "utf8");
+  const current = await readFile18(path, "utf8");
   if (current === source)
     return false;
   const temporary = `${path}.${crypto.randomUUID()}.tmp`;
-  await writeFile14(temporary, source, { flag: "wx" });
+  await writeFile15(temporary, source, { flag: "wx" });
   await rename12(temporary, path);
   return true;
 };
@@ -11056,8 +11217,8 @@ ${hosts}
 `;
 };
 var configureAndroid = async (config) => {
-  const path = join19(config.nativeProjectDirectory, "android/app/src/main/AndroidManifest.xml");
-  const source = await readFile17(path, "utf8");
+  const path = join20(config.nativeProjectDirectory, "android/app/src/main/AndroidManifest.xml");
+  const source = await readFile18(path, "utf8");
   const mainActivity = source.indexOf('android:name=".MainActivity"');
   if (mainActivity === NOT_FOUND) {
     throw new TypeError("Android MainActivity was not found.");
@@ -11082,8 +11243,8 @@ var iosSchemeRegion = (scheme) => `	${START_MARKER}
 	${END_MARKER}
 `;
 var configureIosInfo = async (config) => {
-  const path = join19(config.nativeProjectDirectory, "ios/App/App/Info.plist");
-  const source = await readFile17(path, "utf8");
+  const path = join20(config.nativeProjectDirectory, "ios/App/App/Info.plist");
+  const source = await readFile18(path, "utf8");
   const region = config.deepLinkScheme ? iosSchemeRegion(config.deepLinkScheme) : `	${START_MARKER}
 	${END_MARKER}
 `;
@@ -11106,10 +11267,10 @@ ${domains}
 `;
 };
 var configureIosEntitlements = async (config) => {
-  const path = join19(config.nativeProjectDirectory, "ios/App/AbsoluteJS.entitlements");
+  const path = join20(config.nativeProjectDirectory, "ios/App/AbsoluteJS.entitlements");
   let current = "";
   try {
-    current = await readFile17(path, "utf8");
+    current = await readFile18(path, "utf8");
   } catch (error) {
     if (!(error instanceof Error) || !("code" in error) || error.code !== "ENOENT") {
       throw error;
@@ -11119,13 +11280,13 @@ var configureIosEntitlements = async (config) => {
   if (current === source)
     return false;
   const temporary = `${path}.${crypto.randomUUID()}.tmp`;
-  await writeFile14(temporary, source, { flag: "wx" });
+  await writeFile15(temporary, source, { flag: "wx" });
   await rename12(temporary, path);
   return true;
 };
 var configureIosProject = async (config) => {
-  const path = join19(config.nativeProjectDirectory, "ios/App/App.xcodeproj/project.pbxproj");
-  const source = await readFile17(path, "utf8");
+  const path = join20(config.nativeProjectDirectory, "ios/App/App.xcodeproj/project.pbxproj");
+  const source = await readFile18(path, "utf8");
   const declarations = [
     ...source.matchAll(/CODE_SIGN_ENTITLEMENTS = ([^;]+);/g)
   ].map((match) => match[1]);
@@ -11154,18 +11315,18 @@ var configureIos = async (config) => {
   return changed.some(Boolean);
 };
 var applyAbsoluteNativeDeepLinks = async (config, platforms = config.platforms) => {
-  const results = await Promise.all(platforms.map(async (platform3) => {
-    const didChange = platform3 === "android" ? await configureAndroid(config) : await configureIos(config);
-    return { didChange, platform: platform3 };
+  const results = await Promise.all(platforms.map(async (platform4) => {
+    const didChange = platform4 === "android" ? await configureAndroid(config) : await configureIos(config);
+    return { didChange, platform: platform4 };
   }));
   return {
-    changed: results.filter(({ didChange }) => didChange).map(({ platform: platform3 }) => platform3)
+    changed: results.filter(({ didChange }) => didChange).map(({ platform: platform4 }) => platform4)
   };
 };
 // src/mobile/nativeDeviceCapabilities.ts
 init_deviceCapabilities();
-import { readFile as readFile18, rename as rename13, writeFile as writeFile15 } from "fs/promises";
-import { join as join20 } from "path";
+import { readFile as readFile19, rename as rename13, writeFile as writeFile16 } from "fs/promises";
+import { join as join21 } from "path";
 var START_MARKER2 = "<!-- absolutejs:device-capabilities:start -->";
 var END_MARKER2 = "<!-- absolutejs:device-capabilities:end -->";
 var NOT_FOUND2 = -1;
@@ -11175,11 +11336,11 @@ var PUSH_START_MARKER = "absolutejs:push-notifications:start";
 var PUSH_END_MARKER = "absolutejs:push-notifications:end";
 var escapeXml2 = (value) => value.replaceAll("&", "&amp;").replaceAll('"', "&quot;").replaceAll("'", "&apos;").replaceAll("<", "&lt;").replaceAll(">", "&gt;");
 var writeChangedFile2 = async (path, source) => {
-  const current = await readFile18(path, "utf8");
+  const current = await readFile19(path, "utf8");
   if (current === source)
     return false;
   const temporary = `${path}.${crypto.randomUUID()}.tmp`;
-  await writeFile15(temporary, source, { flag: "wx" });
+  await writeFile16(temporary, source, { flag: "wx" });
   await rename13(temporary, path);
   return true;
 };
@@ -11188,14 +11349,14 @@ var writeOptionalChangedFile = async (path, source) => {
   if (current === source)
     return false;
   if (current === null) {
-    await writeFile15(path, source, { flag: "wx" });
+    await writeFile16(path, source, { flag: "wx" });
     return true;
   }
   return writeChangedFile2(path, source);
 };
 var optionalSource = async (path) => {
   try {
-    return await readFile18(path, "utf8");
+    return await readFile19(path, "utf8");
   } catch (error) {
     if (typeof error === "object" && error !== null && Reflect.get(error, "code") === "ENOENT")
       return null;
@@ -11309,14 +11470,14 @@ var writeIosPrivacyManifest = async (path, current, source) => {
     return false;
   if (current !== null)
     return writeChangedFile2(path, source);
-  await writeFile15(path, source, { flag: "wx" });
+  await writeFile16(path, source, { flag: "wx" });
   return true;
 };
 var configureIosPrivacyProject = async (config, requirements) => {
   if (requirements.iosPrivacyAccessedApis.length === 0)
     return false;
-  const projectPath2 = join20(config.nativeProjectDirectory, "ios/App/App.xcodeproj/project.pbxproj");
-  const project = await readFile18(projectPath2, "utf8");
+  const projectPath2 = join21(config.nativeProjectDirectory, "ios/App/App.xcodeproj/project.pbxproj");
+  const project = await readFile19(projectPath2, "utf8");
   return writeChangedFile2(projectPath2, addIosPrivacyProjectReference(project));
 };
 var addIosPrivacyProjectReference = (source) => {
@@ -11368,8 +11529,8 @@ ${next.slice(index)}`;
   return next;
 };
 var configureIos2 = async (config, plan) => {
-  const path = join20(config.nativeProjectDirectory, "ios/App/App/Info.plist");
-  const source = await readFile18(path, "utf8");
+  const path = join21(config.nativeProjectDirectory, "ios/App/App/Info.plist");
+  const source = await readFile19(path, "utf8");
   const requirements = absoluteDeviceNativeRequirements(plan);
   const existingSystemBars = source.match(/<key>UIViewControllerBasedStatusBarAppearance<\/key>\s*<(true|false)\s*\/>/u);
   const ownedStart = source.indexOf(START_MARKER2);
@@ -11389,7 +11550,7 @@ ${content}
 	${END_MARKER2}
 ` : "";
   const infoChanged = await writeChangedFile2(path, managed(source, region, source.lastIndexOf("</dict>")));
-  const privacyPath = join20(config.nativeProjectDirectory, "ios/App/App/PrivacyInfo.xcprivacy");
+  const privacyPath = join21(config.nativeProjectDirectory, "ios/App/App/PrivacyInfo.xcprivacy");
   const privacyCurrent = await optionalSource(privacyPath);
   const privacySource = privacyManifestSource(privacyCurrent, requirements);
   const [privacyChanged, projectChanged, pushChanged] = await Promise.all([
@@ -11400,7 +11561,7 @@ ${content}
   return infoChanged || privacyChanged || projectChanged || pushChanged;
 };
 var configureIosPushNotifications = async (config, enabled) => {
-  const entitlementsPath = join20(config.nativeProjectDirectory, "ios/App/AbsoluteJS.entitlements");
+  const entitlementsPath = join21(config.nativeProjectDirectory, "ios/App/AbsoluteJS.entitlements");
   const entitlements = await optionalSource(entitlementsPath);
   if (entitlements === null && !enabled)
     return false;
@@ -11412,7 +11573,7 @@ var configureIosPushNotifications = async (config, enabled) => {
 	<!-- ${PUSH_END_MARKER} -->
 ` : "";
   const nextEntitlements = replacePushRegion(entitlements, entitlementRegion, entitlements.lastIndexOf("</dict>"));
-  const delegatePath = join20(config.nativeProjectDirectory, "ios/App/App/AppDelegate.swift");
+  const delegatePath = join21(config.nativeProjectDirectory, "ios/App/App/AppDelegate.swift");
   const delegate = await optionalSource(delegatePath);
   if (delegate === null && !enabled)
     return false;
@@ -11461,8 +11622,8 @@ var replacePushRegion = (source, region, insertion) => {
   return `${source.slice(0, insertion)}${region}${source.slice(insertion)}`;
 };
 var configureAndroid2 = async (config, plan) => {
-  const path = join20(config.nativeProjectDirectory, "android/app/src/main/AndroidManifest.xml");
-  const source = await readFile18(path, "utf8");
+  const path = join21(config.nativeProjectDirectory, "android/app/src/main/AndroidManifest.xml");
+  const source = await readFile19(path, "utf8");
   const permissions = absoluteDeviceNativeRequirements(plan).androidPermissions;
   const content = permissions.map((permission) => `    <uses-permission android:name="${escapeXml2(permission)}" />`).join(`
 `);
@@ -11497,17 +11658,17 @@ ${content}
     throw new TypeError(`Android google-services.json does not contain package ${config.appId}.`);
   const [manifestChanged, firebaseChanged] = await Promise.all([
     writeChangedFile2(path, nextManifest),
-    writeOptionalChangedFile(join20(config.nativeProjectDirectory, "android/app/google-services.json"), firebaseSource)
+    writeOptionalChangedFile(join21(config.nativeProjectDirectory, "android/app/google-services.json"), firebaseSource)
   ]);
   return manifestChanged || firebaseChanged;
 };
 var applyAbsoluteNativeDeviceCapabilities = async (projectRoot, config, platforms = config.platforms, plan = resolveAbsoluteDeviceCapabilityPlan(projectRoot)) => {
-  const results = await Promise.all(platforms.map(async (platform3) => ({
-    didChange: platform3 === "ios" ? await configureIos2(config, plan) : await configureAndroid2(config, plan),
-    platform: platform3
+  const results = await Promise.all(platforms.map(async (platform4) => ({
+    didChange: platform4 === "ios" ? await configureIos2(config, plan) : await configureAndroid2(config, plan),
+    platform: platform4
   })));
   return {
-    changed: results.filter(({ didChange }) => didChange).map(({ platform: platform3 }) => platform3)
+    changed: results.filter(({ didChange }) => didChange).map(({ platform: platform4 }) => platform4)
   };
 };
 
@@ -11516,14 +11677,14 @@ init_nativeAuth();
 
 // src/mobile/nativeUpdates.ts
 import {
-  mkdir as mkdir13,
-  readFile as readFile19,
+  mkdir as mkdir14,
+  readFile as readFile20,
   readdir as readdir5,
   rename as rename14,
   rm as rm11,
-  writeFile as writeFile16
+  writeFile as writeFile17
 } from "fs/promises";
-import { dirname as dirname13, join as join21 } from "path";
+import { dirname as dirname14, join as join22 } from "path";
 var START = "// absolutejs:mobile-updates:start";
 var END = "// absolutejs:mobile-updates:end";
 var PLUGIN_START = "// absolutejs:mobile-update-plugin:start";
@@ -11531,7 +11692,7 @@ var PLUGIN_END = "// absolutejs:mobile-update-plugin:end";
 var ANDROID_PLUGIN = "AbsoluteMobileUpdateWatchdogPlugin.java";
 var optionalSource2 = async (path) => {
   try {
-    return await readFile19(path, "utf8");
+    return await readFile20(path, "utf8");
   } catch (error) {
     if (typeof error === "object" && error !== null && Reflect.get(error, "code") === "ENOENT")
       return null;
@@ -11543,13 +11704,13 @@ var writeChanged = async (path, source) => {
   const current = await optionalSource2(path);
   if (current === source)
     return false;
-  await mkdir13(dirname13(path), { recursive: true });
+  await mkdir14(dirname14(path), { recursive: true });
   if (current === null) {
-    await writeFile16(path, source, { flag: "wx" });
+    await writeFile17(path, source, { flag: "wx" });
     return true;
   }
   const temporary = `${path}.${crypto.randomUUID()}.tmp`;
-  await writeFile16(temporary, source, { flag: "wx" });
+  await writeFile17(temporary, source, { flag: "wx" });
   await rename14(temporary, path);
   return true;
 };
@@ -11690,9 +11851,9 @@ public final class AbsoluteMobileUpdateWatchdogPlugin: CAPPlugin, CAPBridgedPlug
 ${PLUGIN_END}
 `;
 var configureIos3 = async (config, enabled) => {
-  const path = join21(config.nativeProjectDirectory, "ios/App/App/AppDelegate.swift");
-  const capacitorConfigPath = join21(config.nativeProjectDirectory, "ios/App/App/capacitor.config.json");
-  let source = await readFile19(path, "utf8");
+  const path = join22(config.nativeProjectDirectory, "ios/App/App/AppDelegate.swift");
+  const capacitorConfigPath = join22(config.nativeProjectDirectory, "ios/App/App/capacitor.config.json");
+  let source = await readFile20(path, "utf8");
   const launch = source.indexOf("didFinishLaunchingWithOptions");
   const brace = launch < 0 ? -1 : source.indexOf("{", launch);
   const launchRegion = enabled ? `        ${START}
@@ -11703,7 +11864,7 @@ var configureIos3 = async (config, enabled) => {
 `, brace) + 1, "Could not find a safe iOS location for mobile update recovery.");
   const plugin = enabled ? iosPluginRegion(config.updates?.bootTimeoutMs ?? 20000) : "";
   source = replaceMarkedRegion(source, PLUGIN_START, PLUGIN_END, plugin, source.length, "Could not find a safe iOS location for the mobile update watchdog.");
-  const capacitorConfigSource2 = await readFile19(capacitorConfigPath, "utf8");
+  const capacitorConfigSource2 = await readFile20(capacitorConfigPath, "utf8");
   let capacitorConfig;
   try {
     const value = JSON.parse(capacitorConfigSource2);
@@ -11881,12 +12042,12 @@ var androidActivityInRoot = async (root) => {
     throw error;
   }
   const candidate = entries.find((entry) => entry.endsWith("/MainActivity.java") || entry.endsWith("/MainActivity.kt") || entry === "MainActivity.java" || entry === "MainActivity.kt");
-  return candidate ? join21(root, candidate) : undefined;
+  return candidate ? join22(root, candidate) : undefined;
 };
 var androidActivity = async (config) => {
   const roots = [
-    join21(config.nativeProjectDirectory, "android/app/src/main/java"),
-    join21(config.nativeProjectDirectory, "android/app/src/main/kotlin")
+    join22(config.nativeProjectDirectory, "android/app/src/main/java"),
+    join22(config.nativeProjectDirectory, "android/app/src/main/kotlin")
   ];
   const candidates = await Promise.all(roots.map(androidActivityInRoot));
   const candidate = candidates.find((value) => value !== undefined);
@@ -11985,12 +12146,12 @@ var injectAndroidActivity = (source, enabled) => {
 };
 var configureAndroid3 = async (config, enabled) => {
   const activityPath = await androidActivity(config);
-  const activity = await readFile19(activityPath, "utf8");
+  const activity = await readFile20(activityPath, "utf8");
   const packageName = activity.match(/^\s*package\s+([A-Za-z0-9_.]+)\s*[;\n]/mu)?.[1];
   if (!packageName)
     throw new TypeError("Android MainActivity package declaration was not found.");
   const packagePath = packageName.replaceAll(".", "/");
-  const pluginPath = join21(config.nativeProjectDirectory, "android/app/src/main/java", packagePath, ANDROID_PLUGIN);
+  const pluginPath = join22(config.nativeProjectDirectory, "android/app/src/main/java", packagePath, ANDROID_PLUGIN);
   const changed = await Promise.all([
     writeChanged(activityPath, injectAndroidActivity(activity, enabled)),
     enabled ? writeChanged(pluginPath, androidPluginSource(packageName, config.updates?.bootTimeoutMs ?? 20000)) : removeOwnedFile(pluginPath)
@@ -12009,7 +12170,7 @@ var applyAbsoluteNativeUpdates = async (config, platforms = config.platforms) =>
   return { changed: changed.some(Boolean) };
 };
 // src/mobile/releasePublisher.ts
-import { access as access12 } from "fs/promises";
+import { access as access13 } from "fs/promises";
 import { isAbsolute as isAbsolute6, relative as relative12, resolve as resolve15, sep as sep8 } from "path";
 import { pathToFileURL as pathToFileURL3 } from "url";
 var prepareAbsoluteIosRelease = async (publisher, options) => {
@@ -12046,7 +12207,7 @@ var publisherModulePath = (projectRoot, requested) => {
 };
 var loadAbsoluteNativeReleasePublisher = async (projectRoot, requestedModulePath) => {
   const modulePath = publisherModulePath(projectRoot, requestedModulePath);
-  await access12(modulePath).catch(() => {
+  await access13(modulePath).catch(() => {
     throw new TypeError(`Native release registry module does not exist: ${modulePath}`);
   });
   const loaded = await import(pathToFileURL3(modulePath).href);
@@ -12108,7 +12269,7 @@ var publishAbsoluteIosRelease = async (options) => {
 };
 // src/mobile/routeMetadataTransform.ts
 import { existsSync as existsSync7, readFileSync as readFileSync7 } from "fs";
-import { dirname as dirname14, extname as extname5, relative as relative13, resolve as resolve16 } from "path";
+import { dirname as dirname15, extname as extname6, relative as relative13, resolve as resolve16 } from "path";
 import ts2 from "typescript";
 var ROUTE_METHODS = new Set(["get", "head"]);
 var SOURCE_FILTER = /\.[cm]?[jt]sx?$/;
@@ -12159,7 +12320,7 @@ var PAGE_HANDLERS = new Map([
   ]
 ]);
 var posixPath = (value) => value.replace(/\\/g, "/");
-var findTsconfig = (entry, projectRoot) => ts2.findConfigFile(dirname14(entry), existsSync7, "tsconfig.json") ?? ts2.findConfigFile(projectRoot, existsSync7, "tsconfig.json");
+var findTsconfig = (entry, projectRoot) => ts2.findConfigFile(dirname15(entry), existsSync7, "tsconfig.json") ?? ts2.findConfigFile(projectRoot, existsSync7, "tsconfig.json");
 var createProgram = (entry, projectRoot) => {
   const configPath2 = findTsconfig(entry, projectRoot);
   if (!configPath2) {
@@ -12171,7 +12332,7 @@ var createProgram = (entry, projectRoot) => {
       target: ts2.ScriptTarget.ESNext
     });
   }
-  const parsed = ts2.parseJsonConfigFileContent(ts2.readConfigFile(configPath2, (path) => readFileSync7(path, "utf8")).config, ts2.sys, dirname14(configPath2));
+  const parsed = ts2.parseJsonConfigFileContent(ts2.readConfigFile(configPath2, (path) => readFileSync7(path, "utf8")).config, ts2.sys, dirname15(configPath2));
   if (!parsed.fileNames.includes(entry))
     parsed.fileNames.push(entry);
   return ts2.createProgram(parsed.fileNames, parsed.options);
@@ -12185,8 +12346,8 @@ var propertyName = (property) => {
     return property.name.text;
   return;
 };
-var objectPropertyExpression = (object4, name) => {
-  const property = object4.properties.find((candidate) => propertyName(candidate) === name);
+var objectPropertyExpression = (object5, name) => {
+  const property = object5.properties.find((candidate) => propertyName(candidate) === name);
   if (property && ts2.isPropertyAssignment(property)) {
     return property.initializer;
   }
@@ -12382,8 +12543,8 @@ var spreadObject = (expression, checker, bindings) => {
     return;
   return callableObject(expression, checker);
 };
-var objectAssetKey = (object4, name, checker, bindings = new Map) => {
-  for (const property of [...object4.properties].reverse()) {
+var objectAssetKey = (object5, name, checker, bindings = new Map) => {
+  for (const property of [...object5.properties].reverse()) {
     if (propertyName(property) === name && ts2.isShorthandPropertyAssignment(property)) {
       return assetKeyWithBindings(property.name, checker, bindings);
     }
@@ -12622,7 +12783,7 @@ var createAbsoluteMobileRouteMetadataPlugin = (options) => {
         const source = await Bun.file(path).text();
         return {
           contents: transformFile(source, path, analysis),
-          loader: extname5(path).endsWith("x") ? "tsx" : "ts"
+          loader: extname6(path).endsWith("x") ? "tsx" : "ts"
         };
       });
     }
@@ -13170,15 +13331,15 @@ var createAbsoluteMobileUpdateClient = (options) => {
     const file = manifest.files[index];
     if (!file)
       return received;
-    const asset = await request(fileUrl(manifestUrl, manifest.releaseId, file.path), {
+    const asset2 = await request(fileUrl(manifestUrl, manifest.releaseId, file.path), {
       cache: "no-store",
       credentials: "omit",
       redirect: "error",
       signal: AbortSignal.timeout(30000)
     });
-    if (!asset.ok)
-      throw new TypeError(`Mobile update asset ${file.path} failed with HTTP ${asset.status}.`);
-    const contents = await readBounded(asset, file.bytes);
+    if (!asset2.ok)
+      throw new TypeError(`Mobile update asset ${file.path} failed with HTTP ${asset2.status}.`);
+    const contents = await readBounded(asset2, file.bytes);
     const total = received + contents.byteLength;
     if (contents.byteLength !== file.bytes || total > ABSOLUTE_MOBILE_UPDATE_MAX_TOTAL_BYTES)
       throw new TypeError(`Mobile update asset ${file.path} has an invalid size.`);
@@ -13233,7 +13394,7 @@ var createAbsoluteMobileUpdateClient = (options) => {
   };
 };
 // src/mobile/updatePublisher.ts
-import { access as access13 } from "fs/promises";
+import { access as access14 } from "fs/promises";
 import { isAbsolute as isAbsolute7, relative as relative15, resolve as resolve18, sep as sep9 } from "path";
 import { pathToFileURL as pathToFileURL4 } from "url";
 
@@ -13241,23 +13402,23 @@ import { pathToFileURL as pathToFileURL4 } from "url";
 import { createHash as createHash12, sign, verify } from "crypto";
 import {
   cp as cp3,
-  mkdir as mkdir14,
+  mkdir as mkdir15,
   mkdtemp as mkdtemp8,
   readdir as readdir6,
-  readFile as readFile20,
+  readFile as readFile21,
   rename as rename15,
   rm as rm12,
   stat as stat4,
-  writeFile as writeFile17
+  writeFile as writeFile18
 } from "fs/promises";
-import { dirname as dirname15, join as join22, relative as relative14, resolve as resolve17 } from "path";
+import { dirname as dirname16, join as join23, relative as relative14, resolve as resolve17 } from "path";
 var UPDATE_MANIFEST_FILE = "update.json";
 var UPDATE_FILES_DIRECTORY = "files";
 var sha2562 = (value) => createHash12("sha256").update(value).digest("hex");
 var listFiles = async (root, directory = root) => {
   const entries = await readdir6(directory, { withFileTypes: true });
   const paths = await Promise.all(entries.map(async (entry) => {
-    const path = join22(directory, entry.name);
+    const path = join23(directory, entry.name);
     if (entry.isDirectory())
       return listFiles(root, path);
     if (!entry.isFile())
@@ -13267,10 +13428,10 @@ var listFiles = async (root, directory = root) => {
   return paths.flat().sort((left, right) => left.localeCompare(right));
 };
 var inspectFiles = async (root, paths) => Promise.all(paths.map(async (path) => {
-  const source = join22(root, path);
+  const source = join23(root, path);
   const [metadata, contents] = await Promise.all([
     stat4(source),
-    readFile20(source)
+    readFile21(source)
   ]);
   return { bytes: metadata.size, path, sha256: sha2562(contents) };
 }));
@@ -13305,15 +13466,15 @@ var buildAbsoluteMobileUpdate = async (options) => {
       value: signature.toString("base64")
     }
   });
-  await mkdir14(outputRoot, { recursive: true });
-  const outputDirectory = join22(outputRoot, manifest.releaseId);
-  const staging = await mkdtemp8(join22(outputRoot, ".stage-"));
+  await mkdir15(outputRoot, { recursive: true });
+  const outputDirectory = join23(outputRoot, manifest.releaseId);
+  const staging = await mkdtemp8(join23(outputRoot, ".stage-"));
   try {
-    await cp3(bundleDirectory, join22(staging, UPDATE_FILES_DIRECTORY), {
+    await cp3(bundleDirectory, join23(staging, UPDATE_FILES_DIRECTORY), {
       force: true,
       recursive: true
     });
-    await writeFile17(join22(staging, UPDATE_MANIFEST_FILE), `${JSON.stringify(manifest, null, "\t")}
+    await writeFile18(join23(staging, UPDATE_MANIFEST_FILE), `${JSON.stringify(manifest, null, "\t")}
 `);
     await rename15(staging, outputDirectory);
   } catch (error) {
@@ -13324,7 +13485,7 @@ var buildAbsoluteMobileUpdate = async (options) => {
   }
   return {
     manifest,
-    manifestPath: join22(outputDirectory, UPDATE_MANIFEST_FILE),
+    manifestPath: join23(outputDirectory, UPDATE_MANIFEST_FILE),
     outputDirectory
   };
 };
@@ -13333,10 +13494,10 @@ var copyAbsoluteMobileUpdateFile = async (updateDirectory, path, destination) =>
   const root = resolve17(updateDirectory, UPDATE_FILES_DIRECTORY);
   if (!source.startsWith(`${root}/`))
     throw new TypeError("Update file escaped its release.");
-  await mkdir14(dirname15(destination), { recursive: true });
+  await mkdir15(dirname16(destination), { recursive: true });
   await cp3(source, destination, { force: true });
 };
-var readAbsoluteMobileUpdate = async (directory) => parseAbsoluteMobileUpdateManifest(JSON.parse(await readFile20(join22(resolve17(directory), UPDATE_MANIFEST_FILE), "utf8")));
+var readAbsoluteMobileUpdate = async (directory) => parseAbsoluteMobileUpdateManifest(JSON.parse(await readFile21(join23(resolve17(directory), UPDATE_MANIFEST_FILE), "utf8")));
 var verifyAbsoluteMobileUpdateSignature = (manifestValue, publicKey) => {
   const manifest = parseAbsoluteMobileUpdateManifest(manifestValue);
   const valid = verify("sha256", absoluteMobileUpdateSigningPayload(unsignedAbsoluteMobileUpdate(manifest)), { dsaEncoding: "ieee-p1363", key: publicKey }, Buffer.from(manifest.signature.value, "base64"));
@@ -13346,8 +13507,8 @@ var verifyAbsoluteMobileUpdateSignature = (manifestValue, publicKey) => {
 };
 
 // src/mobile/updatePublisher.ts
-var object4 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
-var isPublisher2 = (value) => object4(value) && typeof value.publishUpdate === "function" && typeof value.promoteUpdate === "function" && typeof value.rollbackUpdate === "function";
+var object5 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var isPublisher2 = (value) => object5(value) && typeof value.publishUpdate === "function" && typeof value.promoteUpdate === "function" && typeof value.rollbackUpdate === "function";
 var projectPath2 = (projectRoot, requested, label) => {
   const root = resolve18(projectRoot);
   const path = resolve18(root, requested);
@@ -13358,11 +13519,11 @@ var projectPath2 = (projectRoot, requested, label) => {
 };
 var loadAbsoluteMobileUpdatePublisher = async (projectRoot, requestedModulePath) => {
   const modulePath = projectPath2(projectRoot, requestedModulePath, "mobile update registry");
-  await access13(modulePath).catch(() => {
+  await access14(modulePath).catch(() => {
     throw new TypeError(`Mobile update registry does not exist: ${modulePath}`);
   });
   const loaded = await import(pathToFileURL4(modulePath).href);
-  const publisher = object4(loaded) ? loaded.default ?? loaded.registry : undefined;
+  const publisher = object5(loaded) ? loaded.default ?? loaded.registry : undefined;
   if (!isPublisher2(publisher))
     throw new TypeError("Mobile update registry must implement publishUpdate, promoteUpdate, and rollbackUpdate.");
   return publisher;
@@ -13449,6 +13610,8 @@ export {
   ABSOLUTE_EXPO_SYNC_CORE_VERSION,
   ABSOLUTE_EXPO_SYNC_PACKAGE,
   ABSOLUTE_EXPO_SYNC_VERSION,
+  ABSOLUTE_EXPO_UPDATE_DESCRIPTOR,
+  ABSOLUTE_EXPO_UPDATE_FORMAT,
   ABSOLUTE_IOS_RELEASE_FORMAT,
   ABSOLUTE_IOS_SIMULATOR_NAME,
   ABSOLUTE_MOBILE_CI_WORKFLOW_FORMAT,
@@ -13533,6 +13696,7 @@ export {
   discoverAbsoluteSyncSchema,
   disposeAbsoluteMobilePage,
   fetchAbsoluteMobilePage,
+  finalizeAbsoluteExpoUpdateExport,
   finalizeAbsoluteMobileCompatibilityBuild,
   finalizeAbsoluteMobilePage,
   fingerprintAbsoluteIosDevProject,
@@ -13576,6 +13740,7 @@ export {
   pairAbsoluteRemoteMac,
   parseAbsoluteAndroidInstalledApp,
   parseAbsoluteExpoBridgeMessage,
+  parseAbsoluteExpoUpdateDescriptor,
   parseAbsoluteIosHmrLog,
   parseAbsoluteIosLogLine,
   parseAbsoluteMobileBuildPageMetadata,
@@ -13614,6 +13779,7 @@ export {
   resolveAbsoluteMobileDeepLink,
   resolveAbsoluteMobileNavigation,
   resolveAbsoluteMobileRoute,
+  resolveAbsoluteMobileUpdateRuntime,
   retainAbsoluteMobileCompatibilityArtifacts,
   rollbackAbsoluteMobileUpdate,
   runAbsoluteAndroidUpgradeConformance,
@@ -13641,5 +13807,5 @@ export {
   writeAbsoluteMobileGithubWorkflow
 };
 
-//# debugId=D63B9AFC1696EC0C64756E2164756E21
+//# debugId=CBACAEA8DBA2A4F164756E2164756E21
 //# sourceMappingURL=index.js.map