@absolutejs/absolute 0.20.0-beta.80 → 0.20.0-beta.82

package/dist/cli/{compile-x4hfth3p.js → compile-t73ac1zb.js}

@@ -12,7 +12,7 @@ import {
   createIslandRegistryDefinitionPlugin,
   finalizeAbsoluteMobileCompatibilityBuild,
   resolveServerBundleExternals
-} from "./index-w5y7wxn9.js";
+} from "./index-8gksmws3.js";
 import {
   loadIslandRegistryBuildInfo
 } from "./index-bzs19w3r.js";
@@ -35,7 +35,7 @@ import {
 import"./index-w5vswatm.js";
 import {
   normalizeAbsoluteMobileConfig
-} from "./index-6fb7k6dg.js";
+} from "./index-czw3jd8f.js";
 import"./index-p8ezgd5e.js";
 import {
   ABSOLUTE_NATIVE_AUTH_CLIENTS_ENV,

package/dist/cli/{config-z8wwxatc.js → config-naw5fer4.js}

@@ -1,7 +1,7 @@
 // @bun
 import {
   normalizeAbsoluteMobileConfig
-} from "./index-6fb7k6dg.js";
+} from "./index-czw3jd8f.js";
 import"./index-mywsk201.js";
 export {
   normalizeAbsoluteMobileConfig

package/dist/cli/{dev-8vv459ty.js → dev-skb8dz33.js}

@@ -1281,7 +1281,7 @@ var loadAbsoluteMobileDevModules = async () => {
     remoteMacProtocol,
     iosNativeWatcher
   ] = await Promise.all([
-    import("./config-z8wwxatc.js"),
+    import("./config-naw5fer4.js"),
     import("./expoProject-3mmwtemn.js"),
     import("./expoDevController-n19kb5fr.js"),
     import("./nativeAuth-zx4tsb1f.js"),

package/dist/cli/{index-w5y7wxn9.js → index-8gksmws3.js}

@@ -4,7 +4,7 @@ import {
 } from "./index-s2tazax7.js";
 import {
   normalizeAbsoluteMobileConfig
-} from "./index-6fb7k6dg.js";
+} from "./index-czw3jd8f.js";
 import {
   assertAbsoluteDeviceCapabilityPackages,
   resolveAbsoluteMobileUpdateRuntime,

package/dist/cli/{index-6fb7k6dg.js → index-czw3jd8f.js}

@@ -9,6 +9,7 @@ var APPLE_APP_ID_PREFIX_PATTERN = /^[A-Z0-9]{10}$/;
 var CERTIFICATE_FINGERPRINT_PATTERN = /^[0-9A-F]{64}$/;
 var UPDATE_NAME_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/u;
 var UPDATE_PUBLIC_KEY_PATTERN = /^[A-Za-z0-9+/]+={0,2}$/u;
+var ENVIRONMENT_NAME_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/u;
 var DEFAULT_UPDATE_BOOT_TIMEOUT_MS = 20000;
 var MINIMUM_UPDATE_BOOT_TIMEOUT_MS = 5000;
 var MAXIMUM_UPDATE_BOOT_TIMEOUT_MS = 120000;
@@ -220,6 +221,49 @@ var normalizeUpdates = (config, productionOrigin, projectRoot) => {
     ...expoCodeSigning ? { expoCodeSigning } : {}
   };
 };
+var normalizeUpdateServer = (config, productionOrigin, projectRoot, updates) => {
+  if (!updates || !config.updates)
+    return;
+  const registryModule = requireText(config.updates.server?.registry ?? "mobile.update.ts", "mobile.updates.server.registry");
+  resolveProjectPath(projectRoot, registryModule, "mobile.updates.server.registry");
+  const expoPrivateKeyEnv = requireText(config.updates.server?.expoPrivateKeyEnv ?? "ABSOLUTE_EXPO_UPDATE_PRIVATE_KEY", "mobile.updates.server.expoPrivateKeyEnv");
+  if (!ENVIRONMENT_NAME_PATTERN.test(expoPrivateKeyEnv))
+    throw new TypeError("mobile.updates.server.expoPrivateKeyEnv must be a valid environment variable name.");
+  const autoMount = config.updates.server?.autoMount ?? true;
+  if (autoMount) {
+    const manifest = new URL(updates.manifestUrl);
+    if (manifest.origin !== productionOrigin)
+      throw new TypeError("mobile.updates.manifestUrl must use mobile.server.productionOrigin while mobile.updates.server.autoMount is enabled.");
+    if (!manifest.pathname.endsWith("/update.json"))
+      throw new TypeError("mobile.updates.manifestUrl must end in /update.json while mobile.updates.server.autoMount is enabled.");
+  }
+  const expoCodeSigningKeys = {};
+  if (updates.expoCodeSigning)
+    expoCodeSigningKeys[updates.expoCodeSigning.keyId] = {
+      certificatePem: updates.expoCodeSigning.certificatePem,
+      privateKeyEnv: expoPrivateKeyEnv
+    };
+  for (const [keyId, key] of Object.entries(config.updates.server?.expoCodeSigningKeys ?? {}).sort(([left], [right]) => left.localeCompare(right))) {
+    if (!updates.expoCodeSigning)
+      throw new TypeError("mobile.updates.server.expoCodeSigningKeys requires the Expo engine and expoCodeSigning.");
+    if (!UPDATE_NAME_PATTERN.test(keyId))
+      throw new TypeError("mobile.updates.server.expoCodeSigningKeys contains an invalid key ID.");
+    if (expoCodeSigningKeys[keyId])
+      throw new TypeError(`mobile.updates.server.expoCodeSigningKeys.${keyId} duplicates the active Expo key.`);
+    const privateKeyEnv = requireText(key.privateKeyEnv, `mobile.updates.server.expoCodeSigningKeys.${keyId}.privateKeyEnv`);
+    if (!ENVIRONMENT_NAME_PATTERN.test(privateKeyEnv))
+      throw new TypeError(`mobile.updates.server.expoCodeSigningKeys.${keyId}.privateKeyEnv must be a valid environment variable name.`);
+    const certificatePath = resolveProjectPath(projectRoot, requireText(key.certificatePath, `mobile.updates.server.expoCodeSigningKeys.${keyId}.certificatePath`), `mobile.updates.server.expoCodeSigningKeys.${keyId}.certificatePath`);
+    const { certificate, certificatePem } = readExpoCodeSigningCertificate(certificatePath);
+    if (certificate.publicKey.asymmetricKeyType !== "rsa" || certificate.issuer !== certificate.subject || !certificate.verify(certificate.publicKey))
+      throw new TypeError(`mobile.updates.server.expoCodeSigningKeys.${keyId} certificate must be a self-signed RSA root.`);
+    const now = Date.now();
+    if (now < Date.parse(certificate.validFrom) || now > Date.parse(certificate.validTo))
+      throw new TypeError(`mobile.updates.server.expoCodeSigningKeys.${keyId} certificate is not currently valid.`);
+    expoCodeSigningKeys[keyId] = { certificatePem, privateKeyEnv };
+  }
+  return { autoMount, expoCodeSigningKeys, registryModule };
+};
 var validateExpoNativeRouteSegment = (path, segment, index, count, parameters) => {
   if (segment === "*" && (index !== count - 1 || count === 1)) {
     throw new TypeError(`mobile.routes.native route ${path} must use * once, as the final segment after a static or parameterized prefix.`);
@@ -281,6 +325,7 @@ var normalizeAbsoluteMobileConfig = (config, projectRoot) => {
     throw new TypeError("mobile.deepLinks.scheme is not a valid URL scheme.");
   }
   const updates = normalizeUpdates(config, productionOrigin, projectRoot);
+  const updateServer = normalizeUpdateServer(config, productionOrigin, projectRoot, updates);
   const observability = normalizeObservability(config, productionOrigin);
   return {
     androidCertificateFingerprints: normalizeCertificateFingerprints(config.deepLinks?.android?.sha256CertificateFingerprints),
@@ -300,7 +345,8 @@ var normalizeAbsoluteMobileConfig = (config, projectRoot) => {
     platforms: normalizePlatforms(config.platforms),
     productionOrigin,
     pushAndroidGoogleServicesFile: resolveProjectPath(projectRoot, config.pushNotifications?.android?.googleServicesFile ?? "google-services.json", "mobile.pushNotifications.android.googleServicesFile"),
-    ...updates ? { updates } : {}
+    ...updates ? { updates } : {},
+    ...updateServer ? { updateServer } : {}
   };
 };
 

package/dist/cli/{index-d4ar3mwd.js → index-q78x1k9q.js}

@@ -6,7 +6,7 @@ import {
   createIslandRegistryDefinitionPlugin,
   finalizeAbsoluteMobileCompatibilityBuild,
   resolveServerBundleExternals
-} from "./index-w5y7wxn9.js";
+} from "./index-8gksmws3.js";
 import {
   loadIslandRegistryBuildInfo
 } from "./index-bzs19w3r.js";
@@ -26,7 +26,7 @@ import {
 } from "./index-9kwmb3c0.js";
 import {
   normalizeAbsoluteMobileConfig
-} from "./index-6fb7k6dg.js";
+} from "./index-czw3jd8f.js";
 import {
   installAbsoluteMobileAuthEnvironment
 } from "./index-ar4gz15x.js";

package/dist/cli/index.js

@@ -58,7 +58,7 @@ if (command === "dev") {
   }
   const positionalArgs = stripNamedArgs("--config", "--android-device", "--ios-device").filter((arg) => arg !== "--no-mobile" && arg !== "--eager");
   const serverEntry = positionalArgs[0] ?? DEFAULT_SERVER_ENTRY;
-  const { dev } = await import("./dev-8vv459ty.js");
+  const { dev } = await import("./dev-skb8dz33.js");
   await dev(serverEntry, configPath, {
     androidDevice,
     eager: args.includes("--eager"),
@@ -71,7 +71,7 @@ if (command === "dev") {
   const configPath = parseNamedArg("--config");
   const positionalArgs = stripNamedArgs("--outdir", "--config").filter((arg) => arg !== "--prebuilt");
   const serverEntry = positionalArgs[0] ?? DEFAULT_SERVER_ENTRY;
-  const { start } = await import("./start-dtrp1pry.js");
+  const { start } = await import("./start-jbgfw27x.js");
   await start(serverEntry, outdir, configPath, {
     prebuilt: args.includes("--prebuilt")
   });
@@ -81,7 +81,7 @@ if (command === "dev") {
   const configPath = parseNamedArg("--config");
   const positionalArgs = stripNamedArgs("--outdir", "--config");
   const serverEntry = positionalArgs[0] ?? DEFAULT_SERVER_ENTRY;
-  const { start } = await import("./start-dtrp1pry.js");
+  const { start } = await import("./start-jbgfw27x.js");
   await start(serverEntry, outdir, configPath, { prepareOnly: true });
 } else if (command === "build") {
   sendTelemetryEvent("cli:command", { command });
@@ -197,13 +197,13 @@ if (command === "dev") {
   const configPath = parseNamedArg("--config");
   const positionalArgs = stripNamedArgs("--outdir", "--outfile", "--config");
   const serverEntry = positionalArgs[0] ?? DEFAULT_SERVER_ENTRY;
-  const { compile } = await import("./compile-x4hfth3p.js");
+  const { compile } = await import("./compile-t73ac1zb.js");
   await compile(serverEntry, outdir, outfile, configPath);
 } else if (command === "mobile") {
   sendTelemetryEvent("cli:command", {
     command: `mobile:${workspaceCommand ?? "unknown"}`
   });
-  const { runMobile } = await import("./mobile-mfp26v2d.js");
+  const { runMobile } = await import("./mobile-hkxh2ab5.js");
   try {
     await runMobile(args);
   } catch (error) {