@livx.cc/appwrap 0.19.0

package/runtime/App_Resources/iOS/Assets.xcassets/LaunchScreen.Center.imageset/Contents.json

@@ -0,0 +1,23 @@
+{
+  "images" : [
+    {
+      "idiom" : "universal",
+      "filename" : "LaunchScreen-Center.png",
+      "scale" : "1x"
+    },
+    {
+      "idiom" : "universal",
+      "filename" : "LaunchScreen-Center@2x.png",
+      "scale" : "2x"
+    },
+    {
+      "idiom" : "universal",
+      "filename" : "LaunchScreen-Center@3x.png",
+      "scale" : "3x"
+    }
+  ],
+  "info" : {
+    "version" : 1,
+    "author" : "xcode"
+  }
+}

package/runtime/App_Resources/iOS/Info.plist

@@ -0,0 +1,60 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+	<key>CFBundleDevelopmentRegion</key>
+	<string>en</string>
+	<key>CFBundleDisplayName</key>
+	<string>${PRODUCT_NAME}</string>
+	<key>CFBundleExecutable</key>
+	<string>${EXECUTABLE_NAME}</string>
+	<key>CFBundleInfoDictionaryVersion</key>
+	<string>6.0</string>
+	<key>CFBundleName</key>
+	<string>${PRODUCT_NAME}</string>
+	<key>CFBundlePackageType</key>
+	<string>APPL</string>
+	<key>CFBundleShortVersionString</key>
+	<string>1.0.3</string>
+	<key>CFBundleSignature</key>
+	<string>????</string>
+	<key>CFBundleVersion</key>
+	<string>1.0.3</string>
+	<key>LSRequiresIPhoneOS</key>
+	<true/>
+	<key>UILaunchStoryboardName</key>
+	<string>LaunchScreen</string>
+	<key>UIRequiresFullScreen</key>
+	<true/>
+	<key>UIRequiredDeviceCapabilities</key>
+	<array>
+		<string>armv7</string>
+	</array>
+	<key>UISupportedInterfaceOrientations</key>
+	<array>
+		<string>UIInterfaceOrientationPortrait</string>
+		<string>UIInterfaceOrientationLandscapeLeft</string>
+		<string>UIInterfaceOrientationLandscapeRight</string>
+	</array>
+	<key>UISupportedInterfaceOrientations~ipad</key>
+	<array>
+		<string>UIInterfaceOrientationPortrait</string>
+		<string>UIInterfaceOrientationPortraitUpsideDown</string>
+		<string>UIInterfaceOrientationLandscapeLeft</string>
+		<string>UIInterfaceOrientationLandscapeRight</string>
+	</array>
+	<!-- URL scheme + permission usage strings are stamped per-app by `appwrap init`
+	     from appwrap.json (urlScheme / permissions) — do not hardcode them here. -->
+	<key>NSAppTransportSecurity</key>
+	<dict>
+		<key>NSAllowsLocalNetworking</key>
+		<true/>
+	</dict>
+	<!-- Background audio so music-player PWAs keep playing when backgrounded /
+	     screen-locked. Remove for apps that never play audio in the background. -->
+	<key>UIBackgroundModes</key>
+	<array>
+		<string>audio</string>
+	</array>
+</dict>
+</plist>

package/runtime/App_Resources/iOS/LaunchScreen.storyboard

@@ -0,0 +1,53 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<document type="com.apple.InterfaceBuilder3.CocoaTouch.Storyboard.XIB" version="3.0" toolsVersion="13771" targetRuntime="iOS.CocoaTouch" propertyAccessControl="none" useAutolayout="YES" launchScreen="YES" useTraitCollections="YES" colorMatched="YES" initialViewController="01J-lp-oVM">
+    <device id="retina5_9" orientation="portrait">
+        <adaptation id="fullscreen"/>
+    </device>
+    <dependencies>
+        <deployment identifier="iOS"/>
+        <plugIn identifier="com.apple.InterfaceBuilder.IBCocoaTouchPlugin" version="13772"/>
+        <capability name="documents saved in the Xcode 8 format" minToolsVersion="8.0"/>
+    </dependencies>
+    <scenes>
+        <!--View Controller-->
+        <scene sceneID="EHf-IW-A2E">
+            <objects>
+                <viewController id="01J-lp-oVM" sceneMemberID="viewController">
+                    <layoutGuides>
+                        <viewControllerLayoutGuide type="top" id="Llm-lL-Icb"/>
+                        <viewControllerLayoutGuide type="bottom" id="xb3-aO-Qok"/>
+                    </layoutGuides>
+                    <view key="view" contentMode="scaleToFill" id="Ze5-6b-2t3">
+                        <rect key="frame" x="0.0" y="0.0" width="375" height="812"/>
+                        <autoresizingMask key="autoresizingMask" widthSizable="YES" heightSizable="YES"/>
+                        <subviews>
+                            <imageView userInteractionEnabled="NO" contentMode="scaleAspectFill" horizontalHuggingPriority="251" verticalHuggingPriority="251" image="LaunchScreen.AspectFill" translatesAutoresizingMaskIntoConstraints="NO" id="wtH-rr-YfP">
+                                <rect key="frame" x="0.0" y="0.0" width="375" height="812"/>
+                            </imageView>
+                            <imageView userInteractionEnabled="NO" contentMode="center" horizontalHuggingPriority="251" verticalHuggingPriority="251" image="LaunchScreen.Center" translatesAutoresizingMaskIntoConstraints="NO" id="s1z-aa-wYv">
+                                <rect key="frame" x="0.0" y="150" width="375" height="512"/>
+                            </imageView>
+                        </subviews>
+                        <color key="backgroundColor" red="1" green="1" blue="1" alpha="1" colorSpace="custom" customColorSpace="sRGB"/>
+                        <constraints>
+                            <constraint firstAttribute="trailing" secondItem="s1z-aa-wYv" secondAttribute="trailing" id="4Rf-kf-vql"/>
+                            <constraint firstAttribute="bottom" secondItem="wtH-rr-YfP" secondAttribute="bottom" id="5CS-At-4ka"/>
+                            <constraint firstItem="wtH-rr-YfP" firstAttribute="top" secondItem="Ze5-6b-2t3" secondAttribute="top" id="Awn-b8-xf1"/>
+                            <constraint firstItem="s1z-aa-wYv" firstAttribute="leading" secondItem="Ze5-6b-2t3" secondAttribute="leading" id="BpJ-vb-eKA"/>
+                            <constraint firstItem="s1z-aa-wYv" firstAttribute="trailing" secondItem="wtH-rr-YfP" secondAttribute="trailing" id="QIM-7J-OZz"/>
+                            <constraint firstAttribute="trailing" secondItem="wtH-rr-YfP" secondAttribute="trailing" id="RXg-rW-UK8"/>
+                            <constraint firstItem="s1z-aa-wYv" firstAttribute="centerY" secondItem="Ze5-6b-2t3" secondAttribute="centerY" id="Rcp-LG-48z"/>
+                            <constraint firstItem="wtH-rr-YfP" firstAttribute="leading" secondItem="Ze5-6b-2t3" secondAttribute="leading" id="cch-8E-tYu"/>
+                        </constraints>
+                    </view>
+                </viewController>
+                <placeholder placeholderIdentifier="IBFirstResponder" id="iYj-Kq-Ea1" userLabel="First Responder" sceneMemberID="firstResponder"/>
+            </objects>
+            <point key="canvasLocation" x="509.60000000000002" y="237.93103448275863"/>
+        </scene>
+    </scenes>
+    <resources>
+        <image name="LaunchScreen.AspectFill" width="768" height="1024"/>
+        <image name="LaunchScreen.Center" width="384" height="512"/>
+    </resources>
+</document>

package/runtime/App_Resources/iOS/Podfile

@@ -0,0 +1,13 @@
+# Silence CocoaPods' "no platform specified" warning; matches the post_install target below.
+platform :ios, '13.0'
+
+# Bump every pod's deployment target. Xcode 15+ removed `libarclite`, so pods that
+# declare an old IPHONEOS_DEPLOYMENT_TARGET (e.g. SAMKeychain via @nativescript/
+# secure-storage) fail device builds with "SDK does not contain 'libarclite'".
+post_install do |installer|
+  installer.pods_project.targets.each do |target|
+    target.build_configurations.each do |config|
+      config.build_settings['IPHONEOS_DEPLOYMENT_TARGET'] = '13.0'
+    end
+  end
+end

package/runtime/App_Resources/iOS/PrivacyInfo.xcprivacy

@@ -0,0 +1,59 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<!--
+  Apple Privacy Manifest. REQUIRED for App Store upload since May 2024 (hard reject otherwise).
+  Declares the "required-reason APIs" the appwrap shell + NativeScript runtime touch, none of which
+  are used for tracking:
+    - UserDefaults (CA92.1)   — kit.storage / ApplicationSettings (NSUserDefaults)
+    - FileTimestamp (C617.1)  — NativeScript reads bundle/app file metadata at runtime
+    - SystemBootTime (35F9.1) — NativeScript timers/uptime
+    - DiskSpace (E174.1)      — NativeScript file I/O
+  NSPrivacyTracking is false and no data types are collected BY THE SHELL. If your PWA collects user
+  data (account, analytics, location) or uses tracking, add the matching NSPrivacyCollectedDataTypes /
+  NSPrivacyTracking entries here — see tracking-analytics + store-readiness.
+-->
+<plist version="1.0">
+<dict>
+	<key>NSPrivacyTracking</key>
+	<false/>
+	<key>NSPrivacyTrackingDomains</key>
+	<array/>
+	<key>NSPrivacyCollectedDataTypes</key>
+	<array/>
+	<key>NSPrivacyAccessedAPITypes</key>
+	<array>
+		<dict>
+			<key>NSPrivacyAccessedAPIType</key>
+			<string>NSPrivacyAccessedAPICategoryUserDefaults</string>
+			<key>NSPrivacyAccessedAPITypeReasons</key>
+			<array>
+				<string>CA92.1</string>
+			</array>
+		</dict>
+		<dict>
+			<key>NSPrivacyAccessedAPIType</key>
+			<string>NSPrivacyAccessedAPICategoryFileTimestamp</string>
+			<key>NSPrivacyAccessedAPITypeReasons</key>
+			<array>
+				<string>C617.1</string>
+			</array>
+		</dict>
+		<dict>
+			<key>NSPrivacyAccessedAPIType</key>
+			<string>NSPrivacyAccessedAPICategorySystemBootTime</string>
+			<key>NSPrivacyAccessedAPITypeReasons</key>
+			<array>
+				<string>35F9.1</string>
+			</array>
+		</dict>
+		<dict>
+			<key>NSPrivacyAccessedAPIType</key>
+			<string>NSPrivacyAccessedAPICategoryDiskSpace</string>
+			<key>NSPrivacyAccessedAPITypeReasons</key>
+			<array>
+				<string>E174.1</string>
+			</array>
+		</dict>
+	</array>
+</dict>
+</plist>

package/runtime/App_Resources/iOS/build.xcconfig

@@ -0,0 +1,7 @@
+// You can add custom settings here
+// for example you can uncomment the following line to force distribution code signing
+// CODE_SIGN_IDENTITY = iPhone Distribution 
+// To build for device with XCode you need to specify your development team.
+// DEVELOPMENT_TEAM is stamped by appwrap init/sync from appwrap.json.teamId
+ASSETCATALOG_COMPILER_APPICON_NAME = AppIcon;
+IPHONEOS_DEPLOYMENT_TARGET = 16.0;

package/runtime/app/app.ts

@@ -0,0 +1,58 @@
+import { Application, isIOS } from '@nativescript/core';
+import { onDeepLink } from './shell/events';
+import { iosOrientationMask } from './shell/orientation';
+import { installForegroundNotificationDelegate } from './shell/handlers-extended';
+import { onApnsToken, onApnsError, onRemoteMessage } from './shell/handlers-push';
+
+/** APNs device token (NSData) → lowercase hex string the push backend expects. */
+function apnsTokenToHex(deviceToken: NSData): string {
+  const bytes = new Uint8Array(interop.bufferFromData(deviceToken));
+  let hex = '';
+  for (let i = 0; i < bytes.length; i++) hex += bytes[i].toString(16).padStart(2, '0');
+  return hex;
+}
+
+if (isIOS) {
+  // Custom delegate for URL-scheme opens. NativeScript tracks lifecycle via
+  // UIApplication notifications, so adding a delegate only extends behavior.
+  const DelegateClass = (UIResponder as any).extend(
+    {
+      applicationDidFinishLaunchingWithOptions(_app: UIApplication, launchOptions: NSDictionary<string, any>) {
+        // Set the notification delegate NOW so a cold-launch tap's deep link is delivered.
+        installForegroundNotificationDelegate();
+        const url = launchOptions?.objectForKey(UIApplicationLaunchOptionsURLKey);
+        if (url) onDeepLink(url.absoluteString ?? String(url));
+        return true;
+      },
+      applicationOpenURLOptions(_app: UIApplication, url: NSURL, _options: NSDictionary<string, any>) {
+        console.log('AppWrap: openURL', url.absoluteString);
+        onDeepLink(url.absoluteString);
+        return true;
+      },
+      // Drives `kit.screen.orientation.lock` — UIKit reads this on every rotation.
+      applicationSupportedInterfaceOrientationsForWindow(_app: UIApplication, _window: any) {
+        return iosOrientationMask();
+      },
+      // ── Remote push (APNs) — delivered to the AppDelegate, bridged to kit.push. ──
+      applicationDidRegisterForRemoteNotificationsWithDeviceToken(_app: UIApplication, deviceToken: NSData) {
+        onApnsToken(apnsTokenToHex(deviceToken));
+      },
+      applicationDidFailToRegisterForRemoteNotificationsWithError(_app: UIApplication, error: NSError) {
+        onApnsError(error?.localizedDescription ?? 'APNs registration failed');
+      },
+      // Background/silent + content-available pushes (a tapped alert routes via the UN delegate).
+      applicationDidReceiveRemoteNotificationFetchCompletionHandler(
+        _app: UIApplication,
+        userInfo: NSDictionary<any, any>,
+        completionHandler: (result: UIBackgroundFetchResult) => void
+      ) {
+        onRemoteMessage(userInfo, false);
+        completionHandler(UIBackgroundFetchResult.NewData);
+      },
+    },
+    { protocols: [UIApplicationDelegate] }
+  );
+  Application.ios.delegate = DelegateClass;
+}
+
+Application.run({ moduleName: 'main-page' });

package/runtime/app/main-page.ts

@@ -0,0 +1,116 @@
+import { Application, AndroidApplication, EventData, Page, isAndroid, isIOS, knownFolders, path } from '@nativescript/core';
+import { bridge } from './shell/bridge';
+import { registerHandlers } from './shell/handlers';
+import { registerExtendedHandlers } from './shell/handlers-extended';
+import { registerParityHandlers } from './shell/handlers-parity';
+import { registerSystemHandlers } from './shell/handlers-system';
+import { registerBillingHandlers } from './shell/handlers-billing';
+import { registerMediaHandlers } from './shell/handlers-media';
+import { registerPushHandlers } from './shell/handlers-push';
+import { registerAndroidHandlers } from './shell/handlers-android';
+import { registerOptionalHandlers } from './shell/optional-handlers.generated';
+import './shell/fcm-bootstrap.generated'; // side-effect: registers the FCM service when push is wired
+import { startEventForwarding } from './shell/events';
+import { SHELL_CONFIG } from './shell/config';
+import { bindStatusBarPage, setStatusBarStyle, enableAndroidEdgeToEdge, wireAndroidSafeArea } from './shell/status-bar';
+import { CustomWebView } from './shell/custom-webview';
+
+let initialized = false;
+
+export function onPageLoaded(args: EventData): void {
+  const page = args.object as Page;
+  page.bindingContext = { backgroundColor: SHELL_CONFIG.backgroundColor };
+  bindStatusBarPage(page);
+  if (isAndroid) enableAndroidEdgeToEdge();
+  setStatusBarStyle(SHELL_CONFIG.statusBarStyle);
+
+  if (initialized) return;
+  initialized = true;
+
+  // Debug mode: keep the screen awake (no auto-lock while foreground) so the dev/inspect session
+  // and the iterate loop stay alive. iOS via the idle timer; Android via WebView keepScreenOn.
+  if (isIOS && SHELL_CONFIG.debug) {
+    try { UIApplication.sharedApplication.idleTimerDisabled = true; } catch (e) { /* no-op */ }
+  }
+
+  registerHandlers();
+  registerExtendedHandlers();
+  registerParityHandlers();
+  registerSystemHandlers();
+  registerBillingHandlers();
+  registerMediaHandlers();
+  registerPushHandlers();
+  // Last on purpose: overrides the iOS-only placeholders with Android impls
+  if (isAndroid) registerAndroidHandlers();
+  // Opt-in modules that own their own handler file (health, …) — generated to only the active set.
+  registerOptionalHandlers();
+
+  const webView = page.getViewById<CustomWebView>('webview');
+  bridge.attach(webView);
+  if (isAndroid) wireAndroidSafeArea(webView); // experimental edge-to-edge (no-op unless config on)
+  startEventForwarding();
+  loadBundle(webView);
+
+  // Halt the WebView render + JS-timer pipeline while backgrounded so a page running a continuous
+  // animation (Android doesn't auto-pause rAF off-screen) stops burning CPU/battery. No-op on iOS.
+  Application.on(Application.suspendEvent, () => webView.setRenderingActive(false));
+  Application.on(Application.resumeEvent, () => webView.setRenderingActive(true));
+
+  // Android system back → WebView history (iOS gets this via the edge-swipe
+  // gesture). Only swallow the press when there's history to pop; otherwise let
+  // the OS default through so the app can still be backgrounded/exited.
+  if (isAndroid) {
+    Application.android.on(AndroidApplication.activityBackPressedEvent, (data: any) => {
+      const wk = webView.android as android.webkit.WebView;
+      if (wk?.canGoBack()) {
+        data.cancel = true;
+        wk.goBack();
+      }
+    });
+  }
+}
+
+function loadBundle(webView: CustomWebView): void {
+  const wwwPath = path.join(knownFolders.currentApp().path, 'www');
+  const entryPath = path.join(wwwPath, SHELL_CONFIG.entry);
+
+  if (isIOS) {
+    // Wait for the native WKWebView to exist, then load. Default: app:// custom
+    // scheme (stable origin, ES modules work). 'file' loader kept for debugging.
+    const tryLoad = () => {
+      const wk = webView.ios as WKWebView;
+      if (!wk) {
+        setTimeout(tryLoad, 50);
+        return;
+      }
+      if (SHELL_CONFIG.loader === 'server' && SHELL_CONFIG.serverUrl) {
+        // Live URL (dev HMR / deployed). Bridge (WKUserScript + message handler) still injects.
+        const url = NSURL.URLWithString(SHELL_CONFIG.serverUrl);
+        wk.loadRequest(NSURLRequest.requestWithURL(url));
+      } else if (SHELL_CONFIG.loader === 'file') {
+        const entryURL = NSURL.fileURLWithPath(entryPath);
+        const readAccessURL = NSURL.fileURLWithPathIsDirectory(wwwPath, true);
+        wk.loadFileURLAllowingReadAccessToURL(entryURL, readAccessURL);
+      } else {
+        const url = NSURL.URLWithString(`app://local/${SHELL_CONFIG.entry}`);
+        wk.loadRequest(NSURLRequest.requestWithURL(url));
+      }
+    };
+    tryLoad();
+  } else if (isAndroid) {
+    // Settings, transport (onJsPrompt) and the appwrap.local asset interceptor
+    // are wired in CustomWebView.initNativeView (custom-webview.android.ts).
+    const tryLoad = () => {
+      if (!webView.android) {
+        setTimeout(tryLoad, 50);
+        return;
+      }
+      webView.src = SHELL_CONFIG.loader === 'server' && SHELL_CONFIG.serverUrl
+        ? SHELL_CONFIG.serverUrl
+        : SHELL_CONFIG.loader === 'file'
+          ? `file://${entryPath}`
+          : `https://appwrap.local/${SHELL_CONFIG.entry}`;
+    };
+    tryLoad();
+  }
+}

package/runtime/app/main-page.xml

@@ -0,0 +1,10 @@
+<Page
+  xmlns="http://schemas.nativescript.org/tns.xsd"
+  xmlns:shell="shell/custom-webview"
+  actionBarHidden="true"
+  loaded="onPageLoaded"
+  backgroundColor="{{ backgroundColor }}">
+  <GridLayout rows="*">
+    <shell:CustomWebView id="webview" row="0" />
+  </GridLayout>
+</Page>

package/runtime/app/shell/active-modules.generated.ts

@@ -0,0 +1,9 @@
+/**
+ * Generated by `appwrap init`/`sync` from appwrap.json `modules`. Do not edit.
+ * Committed DEFAULT = every opt-in capability active (back-compat: matches pre-modules behavior).
+ * The CLI overwrites this with the resolved active set for the app being built.
+ */
+export const ACTIVE_MODULE_NAMES: string[] = [
+  'notifications', 'biometrics', 'geo', 'photos', 'camera', 'media',
+  'motion', 'contacts', 'calendar', 'reviews', 'billing',
+];

package/runtime/app/shell/android-helpers.ts

@@ -0,0 +1,76 @@
+import { Application, Utils } from '@nativescript/core';
+
+declare const android: any, java: any;
+
+let nextCode = 7300;
+
+function foregroundActivity(): any {
+  return Application.android.foregroundActivity ?? Application.android.startActivity;
+}
+
+/** Request runtime permissions; resolves true when ALL are granted. Pre-granted short-circuits. */
+export function requestPermissions(permissions: string[]): Promise<boolean> {
+  const context = Utils.android.getApplicationContext();
+  const granted = (p: string) =>
+    context.checkSelfPermission(p) === android.content.pm.PackageManager.PERMISSION_GRANTED;
+  if (permissions.every(granted)) return Promise.resolve(true);
+
+  const activity = foregroundActivity();
+  if (!activity) return Promise.resolve(false);
+
+  const code = nextCode++;
+  return new Promise((resolve) => {
+    const onResult = (args: any) => {
+      if (args.requestCode !== code) return;
+      Application.android.off(Application.android.activityRequestPermissionsEvent as any, onResult);
+      const results: number[] = Array.from(args.grantResults ?? []);
+      resolve(results.length > 0 && results.every((r) => r === android.content.pm.PackageManager.PERMISSION_GRANTED));
+    };
+    Application.android.on(Application.android.activityRequestPermissionsEvent as any, onResult);
+    activity.requestPermissions(permissions, code);
+  });
+}
+
+/** Decode a content Uri (downscaled to `maxSize` longest edge) into a JPEG data URL. */
+export function uriToDataUrl(uri: any, maxSize: number): string | null {
+  const cr = Utils.android.getApplicationContext().getContentResolver();
+  const bounds = new android.graphics.BitmapFactory.Options();
+  bounds.inJustDecodeBounds = true;
+  let stream = cr.openInputStream(uri);
+  android.graphics.BitmapFactory.decodeStream(stream, null, bounds);
+  stream.close();
+
+  const opts = new android.graphics.BitmapFactory.Options();
+  let sample = 1;
+  while (Math.max(bounds.outWidth, bounds.outHeight) / sample > maxSize) sample *= 2;
+  opts.inSampleSize = sample;
+  stream = cr.openInputStream(uri);
+  const bmp = android.graphics.BitmapFactory.decodeStream(stream, null, opts);
+  stream.close();
+  return bmp ? bitmapToDataUrl(bmp) : null;
+}
+
+/** Compress an Android Bitmap to a JPEG data URL. */
+export function bitmapToDataUrl(bmp: any): string {
+  const baos = new java.io.ByteArrayOutputStream();
+  bmp.compress(android.graphics.Bitmap.CompressFormat.JPEG, 85, baos);
+  const b64 = android.util.Base64.encodeToString(baos.toByteArray(), android.util.Base64.NO_WRAP);
+  return `data:image/jpeg;base64,${b64}`;
+}
+
+/** Launch an intent and resolve with its activity result. */
+export function startActivityForResult(intent: any): Promise<{ resultCode: number; intent: any }> {
+  const activity = foregroundActivity();
+  if (!activity) return Promise.reject(Object.assign(new Error('no foreground activity'), { code: 'NOT_READY' }));
+
+  const code = nextCode++;
+  return new Promise((resolve) => {
+    const onResult = (args: any) => {
+      if (args.requestCode !== code) return;
+      Application.android.off(Application.android.activityResultEvent as any, onResult);
+      resolve({ resultCode: args.resultCode, intent: args.intent });
+    };
+    Application.android.on(Application.android.activityResultEvent as any, onResult);
+    activity.startActivityForResult(intent, code);
+  });
+}

package/runtime/app/shell/bridge.ts

@@ -0,0 +1,99 @@
+import { isAndroid, isIOS } from '@nativescript/core';
+import { CustomWebView } from './custom-webview';
+
+export type HandlerFn = (params: any) => unknown | Promise<unknown>;
+
+interface RequestEnvelope {
+  v: 1;
+  id: string;
+  kind: 'request';
+  method: string;
+  params?: unknown;
+}
+
+/**
+ * AppWrap bridge — protocol v1 dispatcher.
+ * Handlers are registered by method name ('haptics.impact'); requests arrive as
+ * JSON strings, responses/events go back via `window.__appwrapDeliver(json)`.
+ */
+export class Bridge {
+  private handlers = new Map<string, HandlerFn>();
+  private webView: CustomWebView | null = null;
+
+  register(method: string, handler: HandlerFn): void {
+    this.handlers.set(method, handler);
+  }
+
+  /**
+   * Both platforms push envelopes in: iOS via WKScriptMessageHandler 'appwrap',
+   * Android via the prompt() tunnel intercepted in WebChromeClient.onJsPrompt
+   * (see custom-webview.android.ts) — no polling on either side.
+   */
+  attach(webView: CustomWebView): void {
+    this.webView = webView;
+    webView.onAppwrapMessage = (json) => this.onMessage(json);
+  }
+
+  detach(): void {
+    if (this.webView) this.webView.onAppwrapMessage = null;
+    this.webView = null;
+  }
+
+  emit(event: string, payload?: unknown): void {
+    this.deliver(JSON.stringify({ v: 1, kind: 'event', event, payload }));
+  }
+
+  private async onMessage(json: string): Promise<void> {
+    let req: RequestEnvelope;
+    try {
+      req = JSON.parse(json);
+    } catch {
+      console.error('Bridge: unparseable envelope', json?.slice(0, 200));
+      return;
+    }
+    if (req.kind !== 'request' || !req.id || !req.method) return;
+
+    const handler = this.handlers.get(req.method);
+    if (!handler) {
+      this.respond(req.id, undefined, { code: 'UNSUPPORTED', message: `No handler for ${req.method}` });
+      return;
+    }
+    try {
+      const result = await handler(req.params ?? {});
+      this.respond(req.id, result);
+    } catch (e: any) {
+      this.respond(req.id, undefined, { code: e?.code ?? 'NATIVE_ERROR', message: e?.message ?? String(e) });
+    }
+  }
+
+  private respond(id: string, result?: unknown, error?: { code: string; message: string }): void {
+    this.deliver(JSON.stringify({ v: 1, id, kind: 'response', result, error }));
+  }
+
+  private deliver(envelopeJson: string): void {
+    const js = `window.__appwrapDeliver && window.__appwrapDeliver(${JSON.stringify(envelopeJson)})`;
+    this.evalJs(js).catch((e) => console.error('Bridge: deliver failed', e));
+  }
+
+  private evalJs(script: string): Promise<any> {
+    const wv = this.webView;
+    return new Promise((resolve, reject) => {
+      if (!wv) return reject(new Error('no webview'));
+      if (isIOS && wv.ios) {
+        (wv.ios as WKWebView).evaluateJavaScriptCompletionHandler(script, (result, error) => {
+          if (error) reject(new Error(error.localizedDescription));
+          else resolve(result);
+        });
+      } else if (isAndroid && wv.android) {
+        wv.android.evaluateJavascript(
+          script,
+          new android.webkit.ValueCallback({ onReceiveValue: (r: string) => resolve(r ? JSON.parse(r) : null) })
+        );
+      } else {
+        reject(new Error('webview not ready'));
+      }
+    });
+  }
+}
+
+export const bridge = new Bridge();