@hot-updater/azure 1.1.4 → 1.2.0-rc.1

package/dist/functions/index.mjs

@@ -4039,7 +4039,7 @@ const bundleMetadataToRow = (metadata) => {
 	return metadata;
 };
 //#endregion
-//#region ../../packages/protocol/dist/index.mjs
+//#region ../../packages/protocol/dist/uuid-kZvLA0Ly.mjs
 const LETTER_DASH_NUMBER$2 = "[a-zA-Z0-9-]";
 const NUMERIC_IDENTIFIER$2 = String.raw`0|[1-9]\d*`;
 const NUMERIC_IDENTIFIER_LOOSE$2 = String.raw`\d+`;
@@ -4146,128 +4146,6 @@ function canonicalizeAppVersion(appVersion) {
 	const version = coerce$1(appVersion);
 	return version ? normalizeFull(version) : null;
 }
-const getManifestStorageUri = (bundle) => bundle.manifestStorageUri;
-const getManifestFileHash = (bundle) => bundle.manifestFileHash;
-const getAssetBaseStorageUri = (bundle) => bundle.assetBaseStorageUri;
-const isBundlePatchArtifact = (value) => {
-	if (!value || typeof value !== "object" || Array.isArray(value)) return false;
-	const candidate = value;
-	return typeof candidate.baseBundleId === "string" && typeof candidate.baseFileHash === "string" && typeof candidate.patchFileHash === "string" && typeof candidate.patchStorageUri === "string";
-};
-const readBundlePatchArray = (patches) => {
-	if (!Array.isArray(patches)) return [];
-	return patches.filter(isBundlePatchArtifact);
-};
-const getBundlePatches = (bundle) => {
-	const patches = readBundlePatchArray(bundle.patches);
-	const seenBaseBundleIds = /* @__PURE__ */ new Set();
-	return patches.filter((patch) => {
-		if (seenBaseBundleIds.has(patch.baseBundleId)) return false;
-		seenBaseBundleIds.add(patch.baseBundleId);
-		return true;
-	});
-};
-const getBundlePatch = (bundle, baseBundleId) => {
-	return getBundlePatches(bundle).find((patch) => patch.baseBundleId === baseBundleId) ?? null;
-};
-const NUMERIC_COHORT_SIZE = 1e3;
-const DEFAULT_ROLLOUT_COHORT_COUNT = NUMERIC_COHORT_SIZE;
-const CUSTOM_COHORT_PATTERN = /^[a-z0-9-]+$/;
-function parseNumericCohortValue(cohort) {
-	if (!/^\d+$/.test(cohort)) return null;
-	const parsed = Number.parseInt(cohort, 10);
-	if (Number.isNaN(parsed) || parsed < 1 || parsed > 1e3) return null;
-	return parsed;
-}
-function positiveMod(value, modulus) {
-	return (value % modulus + modulus) % modulus;
-}
-function hashString(value) {
-	let hash = 0;
-	for (let i = 0; i < value.length; i++) {
-		const char = value.charCodeAt(i);
-		hash = (hash << 5) - hash + char;
-		hash |= 0;
-	}
-	return hash;
-}
-function gcd(a, b) {
-	let x = Math.abs(a);
-	let y = Math.abs(b);
-	while (y !== 0) {
-		const next = x % y;
-		x = y;
-		y = next;
-	}
-	return x;
-}
-function modularInverse(value, modulus) {
-	let t = 0;
-	let newT = 1;
-	let r = modulus;
-	let newR = positiveMod(value, modulus);
-	while (newR !== 0) {
-		const quotient = Math.floor(r / newR);
-		[t, newT] = [newT, t - quotient * newT];
-		[r, newR] = [newR, r - quotient * newR];
-	}
-	if (r > 1) throw new Error(`No modular inverse for ${value} mod ${modulus}`);
-	return positiveMod(t, modulus);
-}
-function getRolloutShuffleParameters(bundleId) {
-	let multiplier = positiveMod(hashString(`${bundleId}:multiplier`), 997);
-	if (multiplier === 0) multiplier = 1;
-	while (gcd(multiplier, NUMERIC_COHORT_SIZE) !== 1) {
-		multiplier = positiveMod(multiplier + 1, NUMERIC_COHORT_SIZE);
-		if (multiplier === 0) multiplier = 1;
-	}
-	const offset = positiveMod(hashString(`${bundleId}:offset`), NUMERIC_COHORT_SIZE);
-	return {
-		multiplier,
-		offset,
-		inverseMultiplier: modularInverse(multiplier, NUMERIC_COHORT_SIZE)
-	};
-}
-function normalizeRolloutCohortCount(rolloutCohortCount) {
-	if (rolloutCohortCount === null || rolloutCohortCount === void 0) return DEFAULT_ROLLOUT_COHORT_COUNT;
-	if (rolloutCohortCount <= 0) return 0;
-	if (rolloutCohortCount >= 1e3) return NUMERIC_COHORT_SIZE;
-	return Math.floor(rolloutCohortCount);
-}
-function normalizeCohortValue(cohort) {
-	const normalized = cohort.trim().toLowerCase();
-	const numericCohort = parseNumericCohortValue(normalized);
-	if (numericCohort !== null) return String(numericCohort);
-	return normalized;
-}
-function getNumericCohortValue(cohort) {
-	return parseNumericCohortValue(normalizeCohortValue(cohort));
-}
-function isNumericCohort(cohort) {
-	return getNumericCohortValue(cohort) !== null;
-}
-function isCustomCohort(cohort) {
-	const normalized = normalizeCohortValue(cohort);
-	return normalized.length > 0 && normalized.length <= 64 && !/^\d+$/.test(normalized) && CUSTOM_COHORT_PATTERN.test(normalized);
-}
-function isValidCohort(cohort) {
-	const normalized = normalizeCohortValue(cohort);
-	return isNumericCohort(normalized) || isCustomCohort(normalized);
-}
-function getNumericCohortRolloutPosition(bundleId, cohortValue) {
-	if (cohortValue < 1 || cohortValue > 1e3) throw new Error(`Invalid numeric cohort: ${cohortValue}`);
-	const { offset, inverseMultiplier } = getRolloutShuffleParameters(bundleId);
-	return positiveMod(inverseMultiplier * (cohortValue - 1 - offset), NUMERIC_COHORT_SIZE);
-}
-function getRolledOutNumericCohorts(bundleId, rolloutCohortCount) {
-	const normalizedRolloutCount = normalizeRolloutCohortCount(rolloutCohortCount);
-	if (normalizedRolloutCount <= 0) return [];
-	if (normalizedRolloutCount >= 1e3) return Array.from({ length: NUMERIC_COHORT_SIZE }, (_, index) => index + 1);
-	const { multiplier, offset } = getRolloutShuffleParameters(bundleId);
-	return Array.from({ length: normalizedRolloutCount }, (_, position) => positiveMod(multiplier * position + offset, NUMERIC_COHORT_SIZE)).map((zeroBasedCohort) => zeroBasedCohort + 1).sort((left, right) => left - right);
-}
-const RELEASE_CATALOG_FALLBACK_POLICY = "BUILTIN_IF_ACTIVE_INELIGIBLE";
-const MAX_COMPILED_CATALOG_BYTES = 262144;
 const BASE64URL_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
 const MAX_CATALOG_SEGMENT_LENGTH = 255;
 function assertCatalogSegment(value, name) {
@@ -4392,6 +4270,130 @@ const NIL_UUID = "00000000-0000-0000-0000-000000000000";
 const UUID_V7_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
 const isUUIDv7 = (value) => typeof value === "string" && UUID_V7_PATTERN.test(value);
 //#endregion
+//#region ../../packages/protocol/dist/index.mjs
+const getManifestStorageUri = (bundle) => bundle.manifestStorageUri;
+const getManifestFileHash = (bundle) => bundle.manifestFileHash;
+const getAssetBaseStorageUri = (bundle) => bundle.assetBaseStorageUri;
+const isBundlePatchArtifact = (value) => {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+	const candidate = value;
+	return typeof candidate.baseBundleId === "string" && typeof candidate.baseFileHash === "string" && typeof candidate.patchFileHash === "string" && typeof candidate.patchStorageUri === "string";
+};
+const readBundlePatchArray = (patches) => {
+	if (!Array.isArray(patches)) return [];
+	return patches.filter(isBundlePatchArtifact);
+};
+const getBundlePatches = (bundle) => {
+	const patches = readBundlePatchArray(bundle.patches);
+	const seenBaseBundleIds = /* @__PURE__ */ new Set();
+	return patches.filter((patch) => {
+		if (seenBaseBundleIds.has(patch.baseBundleId)) return false;
+		seenBaseBundleIds.add(patch.baseBundleId);
+		return true;
+	});
+};
+const getBundlePatch = (bundle, baseBundleId) => {
+	return getBundlePatches(bundle).find((patch) => patch.baseBundleId === baseBundleId) ?? null;
+};
+const NUMERIC_COHORT_SIZE = 1e3;
+const DEFAULT_ROLLOUT_COHORT_COUNT = NUMERIC_COHORT_SIZE;
+const CUSTOM_COHORT_PATTERN = /^[a-z0-9-]+$/;
+function parseNumericCohortValue(cohort) {
+	if (!/^\d+$/.test(cohort)) return null;
+	const parsed = Number.parseInt(cohort, 10);
+	if (Number.isNaN(parsed) || parsed < 1 || parsed > 1e3) return null;
+	return parsed;
+}
+function positiveMod(value, modulus) {
+	return (value % modulus + modulus) % modulus;
+}
+function hashString(value) {
+	let hash = 0;
+	for (let i = 0; i < value.length; i++) {
+		const char = value.charCodeAt(i);
+		hash = (hash << 5) - hash + char;
+		hash |= 0;
+	}
+	return hash;
+}
+function gcd(a, b) {
+	let x = Math.abs(a);
+	let y = Math.abs(b);
+	while (y !== 0) {
+		const next = x % y;
+		x = y;
+		y = next;
+	}
+	return x;
+}
+function modularInverse(value, modulus) {
+	let t = 0;
+	let newT = 1;
+	let r = modulus;
+	let newR = positiveMod(value, modulus);
+	while (newR !== 0) {
+		const quotient = Math.floor(r / newR);
+		[t, newT] = [newT, t - quotient * newT];
+		[r, newR] = [newR, r - quotient * newR];
+	}
+	if (r > 1) throw new Error(`No modular inverse for ${value} mod ${modulus}`);
+	return positiveMod(t, modulus);
+}
+function getRolloutShuffleParameters(bundleId) {
+	let multiplier = positiveMod(hashString(`${bundleId}:multiplier`), 997);
+	if (multiplier === 0) multiplier = 1;
+	while (gcd(multiplier, NUMERIC_COHORT_SIZE) !== 1) {
+		multiplier = positiveMod(multiplier + 1, NUMERIC_COHORT_SIZE);
+		if (multiplier === 0) multiplier = 1;
+	}
+	const offset = positiveMod(hashString(`${bundleId}:offset`), NUMERIC_COHORT_SIZE);
+	return {
+		multiplier,
+		offset,
+		inverseMultiplier: modularInverse(multiplier, NUMERIC_COHORT_SIZE)
+	};
+}
+function normalizeRolloutCohortCount(rolloutCohortCount) {
+	if (rolloutCohortCount === null || rolloutCohortCount === void 0) return DEFAULT_ROLLOUT_COHORT_COUNT;
+	if (rolloutCohortCount <= 0) return 0;
+	if (rolloutCohortCount >= 1e3) return NUMERIC_COHORT_SIZE;
+	return Math.floor(rolloutCohortCount);
+}
+function normalizeCohortValue(cohort) {
+	const normalized = cohort.trim().toLowerCase();
+	const numericCohort = parseNumericCohortValue(normalized);
+	if (numericCohort !== null) return String(numericCohort);
+	return normalized;
+}
+function getNumericCohortValue(cohort) {
+	return parseNumericCohortValue(normalizeCohortValue(cohort));
+}
+function isNumericCohort(cohort) {
+	return getNumericCohortValue(cohort) !== null;
+}
+function isCustomCohort(cohort) {
+	const normalized = normalizeCohortValue(cohort);
+	return normalized.length > 0 && normalized.length <= 64 && !/^\d+$/.test(normalized) && CUSTOM_COHORT_PATTERN.test(normalized);
+}
+function isValidCohort(cohort) {
+	const normalized = normalizeCohortValue(cohort);
+	return isNumericCohort(normalized) || isCustomCohort(normalized);
+}
+function getNumericCohortRolloutPosition(bundleId, cohortValue) {
+	if (cohortValue < 1 || cohortValue > 1e3) throw new Error(`Invalid numeric cohort: ${cohortValue}`);
+	const { offset, inverseMultiplier } = getRolloutShuffleParameters(bundleId);
+	return positiveMod(inverseMultiplier * (cohortValue - 1 - offset), NUMERIC_COHORT_SIZE);
+}
+function getRolledOutNumericCohorts(bundleId, rolloutCohortCount) {
+	const normalizedRolloutCount = normalizeRolloutCohortCount(rolloutCohortCount);
+	if (normalizedRolloutCount <= 0) return [];
+	if (normalizedRolloutCount >= 1e3) return Array.from({ length: NUMERIC_COHORT_SIZE }, (_, index) => index + 1);
+	const { multiplier, offset } = getRolloutShuffleParameters(bundleId);
+	return Array.from({ length: normalizedRolloutCount }, (_, position) => positiveMod(multiplier * position + offset, NUMERIC_COHORT_SIZE)).map((zeroBasedCohort) => zeroBasedCohort + 1).sort((left, right) => left - right);
+}
+const RELEASE_CATALOG_FALLBACK_POLICY = "BUILTIN_IF_ACTIVE_INELIGIBLE";
+const MAX_COMPILED_CATALOG_BYTES = 262144;
+//#endregion
 //#region ../plugin-core/dist/databaseRows.mjs
 const releaseRowToRelease = (row) => ({
 	id: row.id,
@@ -5631,10 +5633,11 @@ const SETTINGS_TABLE = {
 const ENGINE_SCHEMA_KEY = "schema.engine";
 const CORE_SCHEMA_KEY = "schema.core";
 const stored = ({ key, expected, found }) => `"${key}" is ${found === null ? "missing" : `"${found}"`}; expected "${expected}"`;
-const settingMessage = (adapterName, { key, expected, found }) => `Hot Updater schema setting "${key}" for ${adapterName} is ${found === null ? "missing" : `"${found}"`}; expected "${expected}". Run \`hot-updater db migrate\`.`;
+const MIGRATE_SCHEMA_FIX = "Run `npx hot-updater doctor` in the project whose hot-updater.config.ts names this database: it names the command that migrates it. In a server project, `hot-updater db migrate` migrates the database its server file names.";
+const settingMessage = (adapterName, { key, expected, found }) => `Hot Updater schema setting "${key}" for ${adapterName} is ${found === null ? "missing" : `"${found}"`}; expected "${expected}". ${MIGRATE_SCHEMA_FIX}`;
 const pluginOf = ({ key }) => key.startsWith("schema.") && key !== "schema.engine" && key !== CORE_SCHEMA_KEY ? key.slice(7) : void 0;
 const listed = (items) => items.length < 2 ? items.join("") : `${items.slice(0, -1).join(", ")} and ${items.at(-1)}`;
-const PLUGIN_TABLES_FIX = "Run `hot-updater db migrate`. A managed server runs only its provider's plugins, and rerunning `hot-updater init --provider <provider>` applies the provider's migrations. Run `hot-updater db` commands in the server's project: they load the server file named on the command line, or src/hotUpdater.* or src/db.*, and don't read hot-updater.config.ts.";
+const settingsMessage = (adapterName, settings) => `Hot Updater schema settings for ${adapterName} are not migrated: ${settings.map(stored).join(", and ")}. ${MIGRATE_SCHEMA_FIX}`;
 const pluginsMessage = (adapterName, plugins, settings, fix) => `The tables of ${plugins.length === 1 ? "plugin" : "plugins"} ${listed(plugins.map((id) => `"${id}"`))} are not migrated on ${adapterName}: schema ${settings.length === 1 ? "setting" : "settings"} ${settings.map(stored).join(", and ")}. ${fix}`;
 var HotUpdaterSchemaMigrationRequiredError = class extends Error {
 	adapterName;
@@ -5645,7 +5648,7 @@ var HotUpdaterSchemaMigrationRequiredError = class extends Error {
 	constructor(adapterName, currentVersion, setting, options) {
 		const settings = options?.settings ?? (setting === void 0 ? [] : [setting]);
 		const plugins = settings.flatMap((mismatch) => pluginOf(mismatch) ?? []);
-		super(setting === void 0 ? currentVersion === void 0 ? `Hot Updater database schema is not initialized for ${adapterName}. Run \`hot-updater db migrate\` before using this adapter.` : `Hot Updater v1 cannot migrate schema ${currentVersion} in place. Create a new empty database and run \`hot-updater db migrate\`.` : plugins.length > 0 && plugins.length === settings.length ? pluginsMessage(adapterName, plugins, settings, options?.fix ?? PLUGIN_TABLES_FIX) : settingMessage(adapterName, setting), options?.cause === void 0 ? void 0 : { cause: options.cause });
+		super(setting === void 0 ? currentVersion === void 0 ? `Hot Updater database schema is not initialized for ${adapterName}. ${MIGRATE_SCHEMA_FIX}` : `Hot Updater v1 cannot migrate schema ${currentVersion} in place. Create a new empty database and run \`hot-updater db migrate\`.` : plugins.length > 0 && plugins.length === settings.length ? pluginsMessage(adapterName, plugins, settings, options?.fix ?? MIGRATE_SCHEMA_FIX) : settings.length > 1 && !(setting.key === "schema.engine" && setting.found === null) ? settingsMessage(adapterName, settings) : settingMessage(adapterName, setting), options?.cause === void 0 ? void 0 : { cause: options.cause });
 		this.adapterName = adapterName;
 		this.currentVersion = currentVersion;
 		this.setting = setting;
@@ -5698,11 +5701,23 @@ const checkSchemaFence = async (adapter, adapterName, expected, fix) => {
 	});
 };
 const FENCED = Symbol.for("@hot-updater/server/schema-fence");
+const FENCED_SETTINGS = Symbol.for("@hot-updater/server/schema-fence-settings");
 const fencedName = (adapter) => adapter[FENCED];
 const withSchemaFence = (adapter, adapterName, expected, fix) => {
+	const inner = adapter[FENCED_SETTINGS];
+	const settings = inner === void 0 ? {
+		adapter,
+		expected
+	} : {
+		adapter: inner.adapter,
+		expected: {
+			...inner.expected,
+			...expected
+		}
+	};
 	let ready;
 	const fence = () => {
-		ready ??= checkSchemaFence(adapter, adapterName, expected, fix).catch((error) => {
+		ready ??= checkSchemaFence(settings.adapter, adapterName, settings.expected, fix).catch((error) => {
 			ready = void 0;
 			throw error;
 		});
@@ -5711,6 +5726,7 @@ const withSchemaFence = (adapter, adapterName, expected, fix) => {
 	return {
 		...adapter,
 		[FENCED]: adapterName,
+		[FENCED_SETTINGS]: settings,
 		get: (table, keys) => fence().then(() => adapter.get(table, keys)),
 		query: (table, request) => fence().then(() => adapter.query(table, request)),
 		write: (ops) => fence().then(() => adapter.write(ops)),
@@ -5765,257 +5781,360 @@ const CHANNEL_ID = {
 	maxLength: 1408,
 	ascii: true
 };
-const HOT_UPDATER_SCHEMA_VERSION = "1.0.0";
+const HOT_UPDATER_SCHEMA_VERSION = "1.2.0";
+const bundles = defineTable({
+	id: {
+		type: "string",
+		maxLength: 36
+	},
+	platform: {
+		type: "string",
+		maxLength: 16
+	},
+	git_commit_hash: {
+		type: "string",
+		maxLength: 255,
+		required: false
+	},
+	metadata: { type: "json" },
+	manifest_storage_uri: { type: "string" },
+	manifest_file_hash: { type: "string" },
+	asset_base_storage_uri: { type: "string" }
+}, {
+	key: ["id"],
+	indexes: {
+		byPlatform: {
+			eq: ["platform"],
+			sort: ["id"]
+		},
+		all: {
+			eq: [],
+			sort: ["id"]
+		}
+	}
+});
+const bundlePatches = defineTable({
+	id: {
+		type: "string",
+		maxLength: 255
+	},
+	bundle_id: {
+		type: "string",
+		maxLength: 36,
+		references: {
+			model: "bundles",
+			onDelete: "cascade"
+		}
+	},
+	base_bundle_id: {
+		type: "string",
+		maxLength: 36,
+		references: {
+			model: "bundles",
+			onDelete: "cascade"
+		}
+	},
+	base_file_hash: { type: "string" },
+	patch_file_hash: { type: "string" },
+	patch_storage_uri: { type: "string" },
+	byte_size: { type: "integer" },
+	order_index: { type: "integer" }
+}, {
+	key: ["id"],
+	indexes: {
+		pair: {
+			eq: ["bundle_id", "base_bundle_id"],
+			sort: [],
+			unique: true
+		},
+		byBundle: {
+			eq: ["bundle_id"],
+			sort: ["order_index"],
+			root: { model: "bundles" }
+		},
+		byBase: {
+			eq: ["base_bundle_id"],
+			sort: ["bundle_id"]
+		}
+	}
+});
+const releases = defineTable({
+	id: {
+		type: "string",
+		maxLength: 36
+	},
+	revision: { type: "integer" },
+	scope_key: {
+		type: "string",
+		maxLength: 2048,
+		ascii: true
+	},
+	channel_id: {
+		...CHANNEL_ID,
+		references: {
+			model: "channels",
+			onDelete: "restrict"
+		}
+	},
+	platform: {
+		type: "string",
+		maxLength: 16
+	},
+	kind: {
+		type: "string",
+		maxLength: 16
+	},
+	bundle_id: {
+		type: "string",
+		maxLength: 36,
+		required: false,
+		references: {
+			model: "bundles",
+			onDelete: "restrict"
+		}
+	},
+	strategy: {
+		type: "string",
+		maxLength: 16
+	},
+	target_app_version: {
+		type: "string",
+		required: false
+	},
+	fingerprint_hash: {
+		type: "string",
+		maxLength: 255,
+		required: false
+	},
+	enabled: { type: "boolean" },
+	should_force_update: { type: "boolean" },
+	message: {
+		type: "string",
+		required: false
+	},
+	rollout_cohort_count: { type: "integer" },
+	target_cohorts: { type: "json" },
+	operation: {
+		type: "string",
+		maxLength: 16
+	},
+	source_release_id: {
+		type: "string",
+		maxLength: 36,
+		required: false,
+		references: {
+			model: "releases",
+			onDelete: "none"
+		}
+	},
+	created_at_ms: { type: "integer" },
+	updated_at_ms: { type: "integer" }
+}, {
+	key: ["id"],
+	indexes: {
+		byScope: {
+			eq: ["scope_key"],
+			sort: ["id"],
+			root: { model: "release_catalogs" }
+		},
+		byScopeEnabled: {
+			eq: ["scope_key", "enabled"],
+			sort: ["id"],
+			root: { model: "release_catalogs" }
+		},
+		byChannelPlatform: {
+			eq: ["channel_id", "platform"],
+			sort: ["id"]
+		},
+		byChannelPlatformEnabled: {
+			eq: [
+				"channel_id",
+				"platform",
+				"enabled"
+			],
+			sort: ["id"]
+		},
+		byBundle: {
+			eq: ["bundle_id"],
+			sort: ["id"]
+		},
+		all: {
+			eq: [],
+			sort: ["id"]
+		}
+	}
+});
+const releaseCatalogs = defineTable({
+	scope_key: {
+		type: "string",
+		maxLength: 2048,
+		ascii: true
+	},
+	catalog_id: {
+		type: "string",
+		maxLength: 255
+	},
+	strategy: {
+		type: "string",
+		maxLength: 16
+	},
+	channel_id: {
+		...CHANNEL_ID,
+		references: {
+			model: "channels",
+			onDelete: "none"
+		}
+	},
+	channel_key: {
+		type: "string",
+		maxLength: 1400,
+		ascii: true
+	},
+	platform: {
+		type: "string",
+		maxLength: 16
+	},
+	fingerprint_hash: {
+		type: "string",
+		maxLength: 255,
+		required: false
+	},
+	generation: { type: "integer" },
+	payload: { type: "string" },
+	catalog_hash: {
+		type: "string",
+		maxLength: 71
+	},
+	byte_size: { type: "integer" },
+	is_tombstone: { type: "boolean" },
+	updated_at_ms: { type: "integer" }
+}, {
+	key: ["scope_key"],
+	indexes: { all: {
+		eq: [],
+		sort: ["scope_key"]
+	} }
+});
+const channels = defineTable({
+	id: CHANNEL_ID,
+	name: {
+		type: "string",
+		maxLength: 255,
+		unique: true
+	}
+}, {
+	key: ["id"],
+	indexes: { all: {
+		eq: [],
+		sort: ["name"]
+	} }
+});
+const nativeBuilds = defineTable({
+	id: {
+		type: "string",
+		maxLength: 36
+	},
+	scope_key: {
+		type: "string",
+		maxLength: 2048,
+		ascii: true
+	},
+	platform: {
+		type: "string",
+		maxLength: 16
+	},
+	channel_id: {
+		...CHANNEL_ID,
+		references: {
+			model: "channels",
+			onDelete: "none"
+		}
+	},
+	fingerprint_hash: {
+		type: "string",
+		maxLength: 255,
+		required: false
+	},
+	app_version: {
+		type: "string",
+		required: false
+	},
+	min_bundle_id: {
+		type: "string",
+		maxLength: 36,
+		unique: true,
+		references: {
+			model: "bundles",
+			onDelete: "none"
+		}
+	},
+	artifact_kind: {
+		type: "string",
+		maxLength: 16
+	},
+	artifact_storage_uri: { type: "string" },
+	byte_size: { type: "integer" },
+	git_commit_hash: {
+		type: "string",
+		maxLength: 255,
+		required: false
+	},
+	created_at_ms: { type: "integer" },
+	build_key: {
+		type: "string",
+		maxLength: 69,
+		ascii: true,
+		required: false
+	},
+	build_number: {
+		type: "string",
+		maxLength: 64,
+		required: false
+	},
+	submitted_to: {
+		type: "string",
+		maxLength: 16,
+		required: false
+	},
+	submitted_at_ms: {
+		type: "integer",
+		required: false
+	},
+	submitted_version: {
+		type: "string",
+		maxLength: 255,
+		required: false
+	}
+}, {
+	key: ["id"],
+	indexes: {
+		byScope: {
+			eq: ["scope_key"],
+			sort: ["id"]
+		},
+		byBuildKey: {
+			eq: ["scope_key", "build_key"],
+			sort: ["id"]
+		},
+		byChannel: {
+			eq: ["channel_id"],
+			sort: ["id"],
+			root: { model: "channels" }
+		},
+		all: {
+			eq: [],
+			sort: ["id"]
+		}
+	}
+});
 const coreModule = {
 	id: "core",
 	schema: {
-		bundles: defineTable({
-			id: {
-				type: "string",
-				maxLength: 36
-			},
-			platform: {
-				type: "string",
-				maxLength: 16
-			},
-			git_commit_hash: {
-				type: "string",
-				maxLength: 255,
-				required: false
-			},
-			metadata: { type: "json" },
-			manifest_storage_uri: { type: "string" },
-			manifest_file_hash: { type: "string" },
-			asset_base_storage_uri: { type: "string" }
-		}, {
-			key: ["id"],
-			indexes: {
-				byPlatform: {
-					eq: ["platform"],
-					sort: ["id"]
-				},
-				all: {
-					eq: [],
-					sort: ["id"]
-				}
-			}
-		}),
-		bundle_patches: defineTable({
-			id: {
-				type: "string",
-				maxLength: 255
-			},
-			bundle_id: {
-				type: "string",
-				maxLength: 36,
-				references: {
-					model: "bundles",
-					onDelete: "cascade"
-				}
-			},
-			base_bundle_id: {
-				type: "string",
-				maxLength: 36,
-				references: {
-					model: "bundles",
-					onDelete: "cascade"
-				}
-			},
-			base_file_hash: { type: "string" },
-			patch_file_hash: { type: "string" },
-			patch_storage_uri: { type: "string" },
-			byte_size: { type: "integer" },
-			order_index: { type: "integer" }
-		}, {
-			key: ["id"],
-			indexes: {
-				pair: {
-					eq: ["bundle_id", "base_bundle_id"],
-					sort: [],
-					unique: true
-				},
-				byBundle: {
-					eq: ["bundle_id"],
-					sort: ["order_index"],
-					root: { model: "bundles" }
-				},
-				byBase: {
-					eq: ["base_bundle_id"],
-					sort: ["bundle_id"]
-				}
-			}
-		}),
-		releases: defineTable({
-			id: {
-				type: "string",
-				maxLength: 36
-			},
-			revision: { type: "integer" },
-			scope_key: {
-				type: "string",
-				maxLength: 2048,
-				ascii: true
-			},
-			channel_id: {
-				...CHANNEL_ID,
-				references: {
-					model: "channels",
-					onDelete: "restrict"
-				}
-			},
-			platform: {
-				type: "string",
-				maxLength: 16
-			},
-			kind: {
-				type: "string",
-				maxLength: 16
-			},
-			bundle_id: {
-				type: "string",
-				maxLength: 36,
-				required: false,
-				references: {
-					model: "bundles",
-					onDelete: "restrict"
-				}
-			},
-			strategy: {
-				type: "string",
-				maxLength: 16
-			},
-			target_app_version: {
-				type: "string",
-				required: false
-			},
-			fingerprint_hash: {
-				type: "string",
-				maxLength: 255,
-				required: false
-			},
-			enabled: { type: "boolean" },
-			should_force_update: { type: "boolean" },
-			message: {
-				type: "string",
-				required: false
-			},
-			rollout_cohort_count: { type: "integer" },
-			target_cohorts: { type: "json" },
-			operation: {
-				type: "string",
-				maxLength: 16
-			},
-			source_release_id: {
-				type: "string",
-				maxLength: 36,
-				required: false,
-				references: {
-					model: "releases",
-					onDelete: "none"
-				}
-			},
-			created_at_ms: { type: "integer" },
-			updated_at_ms: { type: "integer" }
-		}, {
-			key: ["id"],
-			indexes: {
-				byScope: {
-					eq: ["scope_key"],
-					sort: ["id"],
-					root: { model: "release_catalogs" }
-				},
-				byScopeEnabled: {
-					eq: ["scope_key", "enabled"],
-					sort: ["id"],
-					root: { model: "release_catalogs" }
-				},
-				byChannelPlatform: {
-					eq: ["channel_id", "platform"],
-					sort: ["id"]
-				},
-				byChannelPlatformEnabled: {
-					eq: [
-						"channel_id",
-						"platform",
-						"enabled"
-					],
-					sort: ["id"]
-				},
-				byBundle: {
-					eq: ["bundle_id"],
-					sort: ["id"]
-				},
-				all: {
-					eq: [],
-					sort: ["id"]
-				}
-			}
-		}),
-		release_catalogs: defineTable({
-			scope_key: {
-				type: "string",
-				maxLength: 2048,
-				ascii: true
-			},
-			catalog_id: {
-				type: "string",
-				maxLength: 255
-			},
-			strategy: {
-				type: "string",
-				maxLength: 16
-			},
-			channel_id: {
-				...CHANNEL_ID,
-				references: {
-					model: "channels",
-					onDelete: "none"
-				}
-			},
-			channel_key: {
-				type: "string",
-				maxLength: 1400,
-				ascii: true
-			},
-			platform: {
-				type: "string",
-				maxLength: 16
-			},
-			fingerprint_hash: {
-				type: "string",
-				maxLength: 255,
-				required: false
-			},
-			generation: { type: "integer" },
-			payload: { type: "string" },
-			catalog_hash: {
-				type: "string",
-				maxLength: 71
-			},
-			byte_size: { type: "integer" },
-			is_tombstone: { type: "boolean" },
-			updated_at_ms: { type: "integer" }
-		}, {
-			key: ["scope_key"],
-			indexes: { all: {
-				eq: [],
-				sort: ["scope_key"]
-			} }
-		}),
-		channels: defineTable({
-			id: CHANNEL_ID,
-			name: {
-				type: "string",
-				maxLength: 255,
-				unique: true
-			}
-		}, {
-			key: ["id"],
-			indexes: { all: {
-				eq: [],
-				sort: ["name"]
-			} }
-		}),
+		bundles,
+		bundle_patches: bundlePatches,
+		releases,
+		release_catalogs: releaseCatalogs,
+		channels,
 		bundle_totals: defineAggregate({ platform_key: {
 			type: "string",
 			maxLength: 16
@@ -6026,7 +6145,8 @@ const coreModule = {
 				eq: ["platform_key"],
 				sort: []
 			} }
-		})
+		}),
+		native_builds: nativeBuilds
 	}
 };
 //#endregion
@@ -6995,14 +7115,14 @@ const createEngineMigrator = (options) => {
 	return {
 		getVersion,
 		getNameVariants: async () => void 0,
-		next: async () => await getVersion() === "1.0.0" ? void 0 : { version: HOT_UPDATER_SCHEMA_VERSION },
+		next: async () => await getVersion() === "1.2.0" ? void 0 : { version: HOT_UPDATER_SCHEMA_VERSION },
 		previous: async () => void 0,
 		up: makeResult,
 		down: async () => {
 			throw new Error("No previous schema to migrate to.");
 		},
 		migrateTo: async (version, migrate) => {
-			if (version !== "1.0.0") throw new Error(`Invalid version ${version}`);
+			if (version !== "1.2.0") throw new Error(`Invalid version ${version}`);
 			return makeResult(migrate);
 		},
 		migrateToLatest: makeResult
@@ -7697,9 +7817,9 @@ const createDatabaseEngine = ({ batching, now = Date.now, meter, ...options }) =
 //#region ../plugin-core/dist/engine/createEngine.mjs
 const pluginTablesFix = (database) => {
 	const { createMigrator, generateSchema } = database;
-	const managed = "A managed server runs only its provider's plugins, and rerunning `hot-updater init --provider <provider>` applies the provider's migrations.";
+	const doctor = "Run `npx hot-updater doctor` in the project whose hot-updater.config.ts names this database: it names the command that migrates it.";
 	const serverProject = "Run `hot-updater db` commands in the server's project: they load the server file named on the command line, or src/hotUpdater.* or src/db.*, and don't read hot-updater.config.ts.";
-	return createMigrator !== void 0 ? `Run \`hot-updater db migrate\`. ${managed} ${serverProject}` : generateSchema !== void 0 ? `Run \`hot-updater db generate\` and apply the file it writes. ${managed} ${serverProject}` : managed;
+	return createMigrator !== void 0 ? `${doctor} In a server project, run \`hot-updater db migrate\`. ${serverProject}` : generateSchema !== void 0 ? `${doctor} On a database \`hot-updater init\` created, that is init again with its saved inputs; for your own server, run \`hot-updater db generate\` and apply the file it writes. ${serverProject}` : `${doctor} On a database \`hot-updater init\` created, that is init again with its saved inputs.`;
 };
 const createEngine = (database, { plugins = [], now = Date.now } = {}) => {
 	const modules = /* @__PURE__ */ new Map();
@@ -7998,7 +8118,7 @@ const createKvAdapter = ({ store, tablePrefix = "" }) => {
 };
 //#endregion
 //#region ../../packages/server/dist/version.mjs
-const HOT_UPDATER_SERVER_VERSION = "1.1.4";
+const HOT_UPDATER_SERVER_VERSION = "1.2.0-rc.1";
 //#endregion
 //#region ../../packages/server/dist/handlerVersionRoutes.mjs
 const createVersionRouteHandlers = (plugins = []) => {
@@ -8731,8 +8851,8 @@ const baseBundleIdsOf = (row, range, bundleId, limit) => {
 //#endregion
 //#region ../../packages/server/dist/core/reads.mjs
 const PAGE$3 = 500;
-const pick = (fields) => (row) => Object.fromEntries(fields.map((field) => [field, row[field]]));
-const toBundleRow = pick([
+const pick$1 = (fields) => (row) => Object.fromEntries(fields.map((field) => [field, row[field]]));
+const toBundleRow = pick$1([
 	"id",
 	"platform",
 	"git_commit_hash",
@@ -8741,7 +8861,7 @@ const toBundleRow = pick([
 	"manifest_file_hash",
 	"asset_base_storage_uri"
 ]);
-const toPatchRow = pick([
+const toPatchRow = pick$1([
 	"id",
 	"bundle_id",
 	"base_bundle_id",
@@ -8751,7 +8871,7 @@ const toPatchRow = pick([
 	"byte_size",
 	"order_index"
 ]);
-const toReleaseRow = pick([
+const toReleaseRow = pick$1([
 	"id",
 	"revision",
 	"scope_key",
@@ -8772,7 +8892,7 @@ const toReleaseRow = pick([
 	"created_at_ms",
 	"updated_at_ms"
 ]);
-const toCatalogRow = pick([
+const toCatalogRow = pick$1([
 	"scope_key",
 	"catalog_id",
 	"strategy",
@@ -8787,7 +8907,7 @@ const toCatalogRow = pick([
 	"is_tombstone",
 	"updated_at_ms"
 ]);
-const toChannelRow = pick(["id", "name"]);
+const toChannelRow = pick$1(["id", "name"]);
 const drain$1 = async (read) => {
 	const rows = [];
 	let cursor;
@@ -8798,6 +8918,7 @@ const drain$1 = async (read) => {
 	} while (cursor !== void 0);
 	return rows;
 };
+const after = (input) => input.after === void 0 ? {} : { range: (input.order ?? "asc") === "asc" ? { gt: input.after } : { lt: input.after } };
 const createCoreReads = (db, storage) => {
 	const detail = async (row) => {
 		const count = row._refs_bundle_patches_bundle_id ?? 0;
@@ -8820,7 +8941,6 @@ const createCoreReads = (db, storage) => {
 			childCount: row._refs_bundle_patches_base_bundle_id ?? 0
 		};
 	};
-	const after = (input) => input.after === void 0 ? {} : { range: (input.order ?? "asc") === "asc" ? { gt: input.after } : { lt: input.after } };
 	return {
 		async getReleaseCatalog(input) {
 			const scopeKey = releaseCatalogScopeKeyOf(input);
@@ -8998,9 +9118,9 @@ const insertBundle = (tx, row) => {
 	tx.create("bundles", row);
 	countBundle(tx, row.platform, 1);
 };
-const updateBundle = (tx, current, set) => {
+const updateBundle = (tx, current, set, { counted = true } = {}) => {
 	tx.update("bundles", current, set);
-	if (set.platform !== void 0 && set.platform !== current.platform) {
+	if (counted && set.platform !== void 0 && set.platform !== current.platform) {
 		countBundle(tx, current.platform, -1);
 		countBundle(tx, set.platform, 1);
 	}
@@ -9065,10 +9185,223 @@ const deleteChannel = (db, id) => db.transaction(async (tx) => {
 		deleted: false,
 		reason: "not_empty"
 	};
+	const { rows: builds } = await tx.findMany("native_builds", {
+		index: "byChannel",
+		where: { channel_id: id },
+		limit: 1
+	});
+	if (builds.length > 0) return {
+		deleted: false,
+		reason: "not_empty"
+	};
 	await tx.delete("channels", row);
 	return { deleted: true };
 });
 //#endregion
+//#region ../../packages/server/dist/core/nativeBuilds.mjs
+const ARTIFACT_KINDS = {
+	android: ["apk", "aab"],
+	ios: ["ipa", "app"]
+};
+const SCOPE_KEY_MAX_LENGTH = 2048;
+const GIT_COMMIT_HASH_MAX_LENGTH = 255;
+const BUILD_KEY = /^nbk1:[0-9a-f]{64}$/;
+var NativeBuildInputError = class extends TypeError {
+	name = "NativeBuildInputError";
+};
+const pick = (row) => ({
+	id: row.id,
+	scope_key: row.scope_key,
+	platform: row.platform,
+	channel_id: row.channel_id,
+	fingerprint_hash: row.fingerprint_hash ?? null,
+	app_version: row.app_version ?? null,
+	min_bundle_id: row.min_bundle_id,
+	artifact_kind: row.artifact_kind,
+	artifact_storage_uri: row.artifact_storage_uri,
+	byte_size: row.byte_size,
+	git_commit_hash: row.git_commit_hash ?? null,
+	created_at_ms: row.created_at_ms,
+	build_key: row.build_key ?? null,
+	build_number: row.build_number ?? null,
+	submitted_to: row.submitted_to ?? null,
+	submitted_at_ms: row.submitted_at_ms ?? null,
+	submitted_version: row.submitted_version ?? null
+});
+const SUBMISSION_DESTINATIONS = {
+	android: "play-internal",
+	ios: "testflight"
+};
+const BUILD_NUMBER_MAX_LENGTH = 64;
+const SUBMITTED_VERSION_MAX_LENGTH = 255;
+const nativeBuildScopeKey = (scope) => {
+	let scopeKey;
+	try {
+		const channelKey = encodeChannelKey(scope.channel);
+		scopeKey = scope.fingerprintHash === null ? `${createReleaseCatalogScopeKey({
+			channelKey,
+			platform: scope.platform,
+			strategy: "APP_VERSION"
+		})}:${encodeURIComponent(scope.appVersion)}` : createReleaseCatalogScopeKey({
+			channelKey,
+			fingerprintHash: scope.fingerprintHash,
+			platform: scope.platform,
+			strategy: "FINGERPRINT"
+		});
+	} catch (error) {
+		throw new NativeBuildInputError(`Invalid native build scope: ${error instanceof Error ? error.message : String(error)}.`);
+	}
+	if (scopeKey.length > SCOPE_KEY_MAX_LENGTH) throw new NativeBuildInputError(`Invalid native build scope: its key is longer than ${SCOPE_KEY_MAX_LENGTH} characters; shorten the channel or app version.`);
+	return scopeKey;
+};
+const isBuiltInBundle = async (db, bundleId) => await db.findOne("native_builds", { min_bundle_id: bundleId }) !== null;
+const problemOf = ({ id, minBundleId, platform, channel, fingerprintHash, appVersion, gitCommitHash, buildKey, buildNumber, artifact }) => {
+	if (!isUUIDv7(id)) return "id must be a UUIDv7";
+	if (!isUUIDv7(minBundleId)) return "minBundleId must be the UUIDv7 a release build compiles in";
+	if (platform !== "ios" && platform !== "android") return "platform must be ios or android";
+	if (channel.trim().length === 0) return "channel is required";
+	if (gitCommitHash !== null && gitCommitHash.length > GIT_COMMIT_HASH_MAX_LENGTH) return `gitCommitHash must be at most ${GIT_COMMIT_HASH_MAX_LENGTH} characters`;
+	if (fingerprintHash === null === (appVersion === null)) return "exactly one of fingerprintHash and appVersion is required";
+	if (buildKey !== null && !BUILD_KEY.test(buildKey)) return "buildKey must be nbk1: and a SHA-256, or null";
+	if (buildNumber !== void 0 && buildNumber !== null && (buildNumber.trim().length === 0 || buildNumber.length > BUILD_NUMBER_MAX_LENGTH)) return `buildNumber must be the artifact's build number, up to ${BUILD_NUMBER_MAX_LENGTH} characters, or null`;
+	const kinds = ARTIFACT_KINDS[platform];
+	if (!kinds.includes(artifact.kind)) return `artifact.kind of an ${platform} build must be ${kinds.join(" or ")}`;
+	if (!Number.isSafeInteger(artifact.byteSize) || artifact.byteSize < 0) return "artifact.byteSize must be a byte count";
+	return null;
+};
+const createNativeBuildApi = (db, { now = Date.now } = {}) => ({
+	async registerNativeBuild(registration) {
+		const problem = problemOf(registration);
+		if (problem !== null) throw new NativeBuildInputError(`Invalid native build: ${problem}.`);
+		const scopeKey = nativeBuildScopeKey(registration);
+		const channelId = `channel:${encodeChannelKey(registration.channel)}`;
+		const { embeddedBundle } = registration;
+		const row = {
+			id: registration.id,
+			scope_key: scopeKey,
+			platform: registration.platform,
+			channel_id: channelId,
+			fingerprint_hash: registration.fingerprintHash,
+			app_version: registration.appVersion,
+			min_bundle_id: registration.minBundleId,
+			artifact_kind: registration.artifact.kind,
+			artifact_storage_uri: registration.artifact.storageUri,
+			byte_size: registration.artifact.byteSize,
+			git_commit_hash: registration.gitCommitHash,
+			created_at_ms: now(),
+			build_key: registration.buildKey,
+			build_number: registration.buildNumber ?? null,
+			submitted_to: null,
+			submitted_at_ms: null,
+			submitted_version: null
+		};
+		for (let attempt = 1;; attempt += 1) {
+			await insertChannel(db, {
+				id: channelId,
+				name: registration.channel
+			});
+			try {
+				await db.transaction(async (tx) => {
+					tx.create("bundles", {
+						id: registration.minBundleId,
+						platform: registration.platform,
+						git_commit_hash: registration.gitCommitHash,
+						metadata: embeddedBundle.metadata ?? {},
+						manifest_storage_uri: embeddedBundle.manifestStorageUri,
+						manifest_file_hash: embeddedBundle.manifestFileHash,
+						asset_base_storage_uri: embeddedBundle.assetBaseStorageUri
+					});
+					tx.create("native_builds", row);
+				});
+				break;
+			} catch (error) {
+				if (!(error instanceof DatabaseConstraintError)) throw error;
+				if (error.reason === "exists" || error.reason === "unique") throw new DatabaseConstraintError(error.reason, "native_builds");
+				if (attempt < 3 && error.reason === "not_found" && error.model === "channels") continue;
+				throw error;
+			}
+		}
+		return row;
+	},
+	async getNativeBuild(id) {
+		const row = await db.findOne("native_builds", { id });
+		return row === null ? null : pick(row);
+	},
+	async findNativeBuild(scope, options) {
+		const scopeKey = nativeBuildScopeKey(scope);
+		const buildKey = options?.buildKey;
+		if (buildKey !== void 0 && !BUILD_KEY.test(buildKey)) throw new NativeBuildInputError("Invalid native build key: it must be nbk1: and a SHA-256.");
+		const { rows } = buildKey === void 0 ? await db.findMany("native_builds", {
+			index: "byScope",
+			where: { scope_key: scopeKey },
+			order: "desc",
+			limit: 1
+		}) : await db.findMany("native_builds", {
+			index: "byBuildKey",
+			where: {
+				scope_key: scopeKey,
+				build_key: buildKey
+			},
+			order: "desc",
+			limit: 1
+		});
+		return rows[0] === void 0 ? null : pick(rows[0]);
+	},
+	async recordNativeBuildSubmission(id, { destination, version }) {
+		if (version.trim().length === 0 || version.length > SUBMITTED_VERSION_MAX_LENGTH) throw new NativeBuildInputError(`Invalid native build submission: version must be the store's label of the build, up to ${SUBMITTED_VERSION_MAX_LENGTH} characters.`);
+		return db.transaction(async (tx) => {
+			const row = await tx.findOne("native_builds", { id });
+			if (row === null) return null;
+			const build = pick(row);
+			if (SUBMISSION_DESTINATIONS[build.platform] !== destination) throw new NativeBuildInputError(`Invalid native build submission: an ${build.platform} build is submitted to ${SUBMISSION_DESTINATIONS[build.platform]}, not ${destination}.`);
+			const set = {
+				submitted_to: destination,
+				submitted_at_ms: now(),
+				submitted_version: version
+			};
+			tx.update("native_builds", row, set);
+			return {
+				...build,
+				...set
+			};
+		});
+	},
+	async deleteNativeBuild(id) {
+		return db.transaction(async (tx) => {
+			const row = await tx.findOne("native_builds", { id });
+			if (row === null) return {
+				deleted: false,
+				reason: "not_found"
+			};
+			await tx.delete("native_builds", row);
+			const bundle = await tx.findOne("bundles", { id: row.min_bundle_id });
+			if (bundle !== null) await tx.delete("bundles", bundle);
+			return {
+				deleted: true,
+				nativeBuild: pick(row)
+			};
+		});
+	},
+	async listNativeBuilds(input) {
+		const page = {
+			order: input.order ?? "asc",
+			limit: input.limit
+		};
+		const { rows } = input.channelId === void 0 ? await db.findMany("native_builds", {
+			index: "all",
+			where: {},
+			...page,
+			...after(input)
+		}) : await db.findMany("native_builds", {
+			index: "byChannel",
+			where: { channel_id: input.channelId },
+			...page,
+			...after(input)
+		});
+		return rows.map(pick);
+	}
+});
+//#endregion
 //#region ../../packages/server/dist/core/releases.mjs
 const PAGE$1 = 500;
 const fail$1 = (code, message) => {
@@ -9355,6 +9688,7 @@ const createCoreOperations = (db, { now = Date.now } = {}) => {
 			if (!("bundleId" in deployment) || platforms.has(deployment.bundleId)) continue;
 			const row = await db.findOne("bundles", { id: deployment.bundleId });
 			if (row === null) throw new DatabaseBundleNotFoundError(deployment.bundleId);
+			if (await isBuiltInBundle(db, deployment.bundleId)) throw new ReleaseManagementError("TARGET_RELEASE_INVALID", `Bundle "${deployment.bundleId}" is a native build's built-in bundle, which no release publishes.`);
 			platforms.set(deployment.bundleId, toBundleRow(row).platform);
 		}
 		const updatedAtMs = now();
@@ -9550,7 +9884,8 @@ const createCoreOperations = (db, { now = Date.now } = {}) => {
 				id
 			};
 			const { id: _id, ...set } = bundleToRow(next);
-			updateBundle(tx, current, set);
+			const counted = set.platform === current.platform || !await isBuiltInBundle(tx, id);
+			updateBundle(tx, current, set, { counted });
 			if (patches !== void 0) await replaceBundlePatches(tx, current, bundleToPatchRows({
 				...next,
 				patches
@@ -9561,7 +9896,9 @@ const createCoreOperations = (db, { now = Date.now } = {}) => {
 				await db.transaction(async (tx) => {
 					for (const id of new Set(ids)) {
 						const current = await tx.findOne("bundles", { id });
-						if (current !== null) await deleteBundle(tx, current);
+						if (current === null) continue;
+						if (await isBuiltInBundle(tx, id)) throw new DatabaseRowReferencedError();
+						await deleteBundle(tx, current);
 					}
 				});
 			} catch (error) {
@@ -9607,6 +9944,7 @@ const createCoreApi = (db, storage, options = {}) => {
 	return {
 		...reads,
 		...createCoreOperations(purgingCachedRoutes(db, options.onCachedRoutesChange), options),
+		...createNativeBuildApi(db, options),
 		ready: async () => {
 			await reads.listReleaseCatalogs({ limit: 1 });
 		}
@@ -9798,6 +10136,10 @@ const answer = async (operation) => {
 			code: "REFERENCED",
 			error: error.message
 		}, 409);
+		if (error instanceof DatabaseConstraintError && error.model === "native_builds") return json$2({
+			code: "NATIVE_BUILD_EXISTS",
+			error: "A native build with this ID or built-in bundle ID is already registered."
+		}, 409);
 		throw error;
 	}
 };
@@ -9893,6 +10235,40 @@ const bundleUpdateOf = (value, bundleId) => {
 	if (id !== void 0 && id !== bundleId) throw new HandlerBadRequestError("Bundle id mismatch");
 	return update;
 };
+const NATIVE_BUILD_ARTIFACT_KINDS = /* @__PURE__ */ new Set([
+	"apk",
+	"aab",
+	"ipa",
+	"app"
+]);
+const nativeBuildScopeOf = (url) => {
+	const params = url.searchParams;
+	const platform = platformOf(url);
+	const channel = params.get("channel");
+	const fingerprintHash = params.get("fingerprintHash");
+	const appVersion = params.get("appVersion");
+	if (platform === void 0 || !isText$2(channel) || fingerprintHash === null === (appVersion === null) || fingerprintHash === "" || appVersion === "") throw new HandlerBadRequestError("A native build lookup needs platform, channel, and fingerprintHash or appVersion.");
+	return fingerprintHash !== null ? {
+		platform,
+		channel,
+		fingerprintHash,
+		appVersion: null
+	} : {
+		platform,
+		channel,
+		fingerprintHash: null,
+		appVersion
+	};
+};
+const refusingInvalid = async (operation) => {
+	try {
+		return await operation();
+	} catch (error) {
+		if (error instanceof NativeBuildInputError) throw new HandlerBadRequestError(error.message);
+		throw error;
+	}
+};
+const isNativeBuildRegistration = (value) => isRecord$5(value) && isText$2(value.id) && isText$2(value.minBundleId) && typeof value.platform === "string" && isPlatform(value.platform) && isText$2(value.channel) && isTextOrNull$1(value.fingerprintHash) && isTextOrNull$1(value.appVersion) && value.fingerprintHash === null !== (value.appVersion === null) && isTextOrNull$1(value.gitCommitHash) && isTextOrNull$1(value.buildKey) && (value.buildNumber === void 0 || isTextOrNull$1(value.buildNumber)) && isRecord$5(value.artifact) && typeof value.artifact.kind === "string" && NATIVE_BUILD_ARTIFACT_KINDS.has(value.artifact.kind) && isText$2(value.artifact.storageUri) && Number.isSafeInteger(value.artifact.byteSize) && value.artifact.byteSize >= 0 && isRecord$5(value.embeddedBundle) && isText$2(value.embeddedBundle.manifestStorageUri) && isText$2(value.embeddedBundle.manifestFileHash) && isText$2(value.embeddedBundle.assetBaseStorageUri) && (value.embeddedBundle.metadata === void 0 || isRecord$5(value.embeddedBundle.metadata));
 const scopeKeyOf = (params) => decodeMaybe(requireRouteParam(params, "scopeKey")) ?? "";
 const createAdminRouteHandlers = () => ({
 	listBundles: onCore(async (core, request) => {
@@ -10007,6 +10383,37 @@ const createAdminRouteHandlers = () => ({
 		}) });
 	}),
 	preflightReleaseCatalogRebuild: onCore(async (core, _request, params) => json$2({ data: await core.preflightReleaseCatalogRebuild(scopeKeyOf(params)) })),
+	registerNativeBuild: onCore(async (core, request) => {
+		const input = await body$1(request);
+		if (!isNativeBuildRegistration(input)) throw new HandlerBadRequestError("Invalid native build");
+		return json$2({ data: await refusingInvalid(() => core.registerNativeBuild(input)) }, 201);
+	}),
+	findNativeBuild: onCore(async (core, request) => {
+		const url = new URL(request.url);
+		const scope = nativeBuildScopeOf(url);
+		const buildKey = url.searchParams.get("buildKey");
+		return json$2({ data: await refusingInvalid(() => buildKey === null ? core.findNativeBuild(scope) : core.findNativeBuild(scope, { buildKey })) });
+	}),
+	getNativeBuild: onCore(async (core, _request, params) => json$2({ data: await core.getNativeBuild(requireRouteParam(params, "id")) })),
+	listNativeBuilds: onCore(async (core, request) => {
+		const url = new URL(request.url);
+		const input = keyset(url);
+		const channelId = url.searchParams.get("channelId");
+		return page(await core.listNativeBuilds({
+			...input,
+			...channelId === null ? {} : { channelId }
+		}), input, ({ id }) => id);
+	}),
+	recordNativeBuildSubmission: onCore(async (core, request, params) => {
+		const input = await body$1(request);
+		if (!isRecord$5(input) || input.destination !== "testflight" && input.destination !== "play-internal" || !isText$2(input.version)) throw new HandlerBadRequestError("A native build submission needs destination (testflight or play-internal) and version.");
+		const submission = {
+			destination: input.destination,
+			version: input.version
+		};
+		return json$2({ data: await refusingInvalid(() => core.recordNativeBuildSubmission(requireRouteParam(params, "id"), submission)) });
+	}),
+	deleteNativeBuild: onCore(async (core, _request, params) => json$2({ data: await core.deleteNativeBuild(requireRouteParam(params, "id")) })),
 	deleteBundles: onCore(async (core, request) => {
 		const { ids } = await body$1(request);
 		if (!Array.isArray(ids) || !ids.every((id) => typeof id === "string" && id.length > 0)) throw new HandlerBadRequestError("Bundle deletion needs ids");
@@ -10124,6 +10531,36 @@ const ADMIN_ROUTES = [
 		method: "GET",
 		path: "/base-candidates/:candidateKey",
 		handler: "findBaseCandidates"
+	},
+	{
+		method: "POST",
+		path: "/native-builds",
+		handler: "registerNativeBuild"
+	},
+	{
+		method: "GET",
+		path: "/native-builds/latest",
+		handler: "findNativeBuild"
+	},
+	{
+		method: "GET",
+		path: "/native-builds/:id",
+		handler: "getNativeBuild"
+	},
+	{
+		method: "GET",
+		path: "/native-builds",
+		handler: "listNativeBuilds"
+	},
+	{
+		method: "POST",
+		path: "/native-builds/:id/submission",
+		handler: "recordNativeBuildSubmission"
+	},
+	{
+		method: "DELETE",
+		path: "/native-builds/:id",
+		handler: "deleteNativeBuild"
 	}
 ];
 //#endregion
@@ -56981,8 +57418,9 @@ const isNotFound = (error) => error instanceof RestError && error.statusCode ===
 const serviceOf = (config) => "connectionString" in config ? BlobServiceClient.fromConnectionString(config.connectionString) : new BlobServiceClient(config.accountUrl, config.credential);
 function azureBlobStorage(config) {
 	const { containerName, basePath, getDownloadUrl } = config;
-	const service = serviceOf(config);
-	const container = service.getContainerClient(containerName);
+	let client;
+	const service = () => client ??= serviceOf(config);
+	const container = () => service().getContainerClient(containerName);
 	const normalizedBasePath = basePath?.replace(/^\/+|\/+$/g, "") ?? "";
 	const getStorageKey = createStorageKeyBuilder(normalizedBasePath);
 	const getListPrefix = (prefix = "") => {
@@ -57013,7 +57451,7 @@ function azureBlobStorage(config) {
 	const delegationKey = () => {
 		const now = Date.now();
 		if (delegation === void 0 || delegation.renewAt <= now) {
-			const key = service.getUserDelegationKey(/* @__PURE__ */ new Date(now - 3e5), new Date(now + DELEGATION_KEY_LIFETIME_MS));
+			const key = service().getUserDelegationKey(/* @__PURE__ */ new Date(now - 3e5), new Date(now + DELEGATION_KEY_LIFETIME_MS));
 			key.catch(() => {
 				delegation = void 0;
 			});
@@ -57025,7 +57463,7 @@ function azureBlobStorage(config) {
 		return delegation.key;
 	};
 	const signedUrl = async (key) => {
-		const blob = container.getBlobClient(key);
+		const blob = container().getBlobClient(key);
 		const expiresOn = new Date(Date.now() + SAS_EXPIRES_IN_MS);
 		const permissions = BlobSASPermissions.parse("r");
 		if (blob.credential instanceof StorageSharedKeyCredential) return blob.generateSasUrl({
@@ -57046,7 +57484,7 @@ function azureBlobStorage(config) {
 		protocol: PROTOCOL,
 		async listObjects(prefix) {
 			const objects = [];
-			for await (const blob of container.listBlobsFlat({ prefix: getListPrefix(prefix) })) {
+			for await (const blob of container().listBlobsFlat({ prefix: getListPrefix(prefix) })) {
 				const storageUri = getListedStorageUri(blob.name);
 				if (storageUri === null) continue;
 				objects.push({
@@ -57063,17 +57501,36 @@ function azureBlobStorage(config) {
 			for (let offset = 0; offset < keys.length; offset += 256) {
 				const batch = keys.slice(offset, offset + 256);
 				if (batch.length === 0) continue;
-				const failed = (await container.getBlobBatchClient().deleteBlobs(batch.map((key) => container.getBlobClient(key)))).subResponses.filter(({ status }) => status >= 300 && status !== 404);
+				const failed = (await container().getBlobBatchClient().deleteBlobs(batch.map((key) => container().getBlobClient(key)))).subResponses.filter(({ status }) => status >= 300 && status !== 404);
 				if (failed.length > 0) throw new Error(`Failed to delete ${failed.length} Azure blob(s).`);
 			}
 		},
-		async put({ key, body, contentType }) {
+		async put({ key, body, contentLength, contentType }) {
 			const storageKey = getStorageKey(key);
-			const bytes = new Uint8Array(await new Response(body).arrayBuffer());
-			await container.getBlockBlobClient(storageKey).uploadData(bytes, { blobHTTPHeaders: {
+			const options = { blobHTTPHeaders: {
 				blobContentType: contentType,
 				blobCacheControl: "max-age=31536000"
-			} });
+			} };
+			const blob = container().getBlockBlobClient(storageKey);
+			if (contentLength === void 0) await blob.uploadData(new Uint8Array(await new Response(body).arrayBuffer()), options);
+			else {
+				const { Readable } = await import("node:stream");
+				const source = Readable.fromWeb(body);
+				const aborted = new AbortController();
+				let failure;
+				source.once("error", (error) => {
+					failure = error;
+					aborted.abort(error);
+				});
+				try {
+					await blob.upload(source, contentLength, {
+						...options,
+						abortSignal: aborted.signal
+					});
+				} catch (error) {
+					throw failure ?? error;
+				}
+			}
 			return { storageUri: createStorageUri({
 				bucket: containerName,
 				key: storageKey,
@@ -57083,7 +57540,7 @@ function azureBlobStorage(config) {
 		async get({ storageUri }) {
 			const { key } = parseAndValidate(storageUri);
 			try {
-				const download = await container.getBlobClient(key).download();
+				const download = await container().getBlobClient(key).download();
 				const body = download.readableStreamBody;
 				if (body === void 0) return { response: null };
 				const headers = new Headers();
@@ -57103,11 +57560,11 @@ function azureBlobStorage(config) {
 		},
 		async exists({ storageUri }) {
 			const { key } = parseAndValidate(storageUri);
-			return { exists: await container.getBlobClient(key).exists() };
+			return { exists: await container().getBlobClient(key).exists() };
 		},
 		async delete({ storageUri }) {
 			const { key } = parseAndValidate(storageUri);
-			await container.getBlobClient(key).deleteIfExists();
+			await container().getBlobClient(key).deleteIfExists();
 			return { deleted: true };
 		}
 	});
@@ -70399,11 +70856,19 @@ const assertCosmosContainerReusable = async (container, expected) => {
 const isWideAdd = (op) => op.type === "add" && Object.keys(op.by).length + (op.expiresAt === void 0 ? 0 : 2) > PATCH_OPERATIONS;
 const emulatorAborted = (error) => statusOf(error) === 500 && /PostgresError\(SqlState\(E(25P02|40001|40P01)\)/.test(String(error instanceof Error ? error.message : error));
 const createCosmosStore = ({ client, databaseId, containerId, engine, nativePageSize }) => {
-	const container = client.database(databaseId).container(containerId);
+	let opened;
+	const open = () => opened ??= (() => {
+		const account = typeof client === "function" ? client() : client;
+		return {
+			client: account,
+			container: account.database(databaseId).container(containerId)
+		};
+	})();
+	const container = () => open().container;
 	const readStates = async (ids, rowIds) => {
 		const states = /* @__PURE__ */ new Map();
 		for (const [group, projection] of [[ids.filter((id) => !rowIds.has(id)), ""], [ids.filter((id) => rowIds.has(id)), ", c.row"]]) for (let at = 0; at < group.length; at += GET_BATCH) {
-			const { resources } = await container.items.query(`SELECT c.id, c._etag AS etag, c.row._v AS v, c.expireAt${projection} FROM c WHERE c.id IN (${idList(group.slice(at, at + GET_BATCH))})`, { partitionKey: COSMOS_PARTITION }).fetchAll().catch(missingContainer);
+			const { resources } = await container().items.query(`SELECT c.id, c._etag AS etag, c.row._v AS v, c.expireAt${projection} FROM c WHERE c.id IN (${idList(group.slice(at, at + GET_BATCH))})`, { partitionKey: COSMOS_PARTITION }).fetchAll().catch(missingContainer);
 			for (const { id, etag, v, expireAt, row } of resources) states.set(id, {
 				etag,
 				v,
@@ -70535,7 +71000,7 @@ const createCosmosStore = ({ client, databaseId, containerId, engine, nativePage
 			const found = /* @__PURE__ */ new Map();
 			const ids = [...new Set(keys.map(cosmosItemId))];
 			for (let at = 0; at < ids.length; at += GET_BATCH) {
-				const { resources } = await container.items.query(`SELECT c.id, c.row FROM c WHERE c.id IN (${idList(ids.slice(at, at + GET_BATCH))})`, { partitionKey: COSMOS_PARTITION }).fetchAll().catch(missingContainer);
+				const { resources } = await container().items.query(`SELECT c.id, c.row FROM c WHERE c.id IN (${idList(ids.slice(at, at + GET_BATCH))})`, { partitionKey: COSMOS_PARTITION }).fetchAll().catch(missingContainer);
 				for (const resource of resources) found.set(resource.id, toRow(resource.row));
 			}
 			return keys.map((key) => found.get(cosmosItemId(key)) ?? null);
@@ -70571,7 +71036,7 @@ const createCosmosStore = ({ client, databaseId, containerId, engine, nativePage
 					value: after
 				});
 			}
-			const { resources } = await container.items.query({
+			const { resources } = await container().items.query({
 				query: `SELECT TOP @size c.sk, c.row FROM c WHERE ${filters.join(" AND ")} ORDER BY c.pk ${order === "asc" ? "ASC" : "DESC"}, c.sk ${order === "asc" ? "ASC" : "DESC"}`,
 				parameters
 			}, {
@@ -70621,7 +71086,7 @@ const createCosmosStore = ({ client, databaseId, containerId, engine, nativePage
 				if (planned.length > BATCH_OPERATIONS) throw new Error(`A Cosmos DB batch takes ${BATCH_OPERATIONS} operations; this write needs ${planned.length}.`);
 				let results;
 				try {
-					const response = await container.items.batch(planned.map(({ operation }) => operation), COSMOS_PARTITION);
+					const response = await container().items.batch(planned.map(({ operation }) => operation), COSMOS_PARTITION);
 					if (response.result === void 0) throw Object.assign(/* @__PURE__ */ new Error(`Cosmos DB refused the batch with status ${response.code}`), { code: response.code });
 					results = response.result;
 				} catch (error) {
@@ -70654,7 +71119,7 @@ const createCosmosStore = ({ client, databaseId, containerId, engine, nativePage
 		async deleteConsumed(keys) {
 			let remaining = [...new Set(keys.map(cosmosItemId))];
 			for (let attempt = 0; remaining.length > 0; attempt += 1) {
-				const failed = (await container.items.executeBulkOperations(remaining.map((id) => ({
+				const failed = (await container().items.executeBulkOperations(remaining.map((id) => ({
 					operationType: "Delete",
 					id,
 					partitionKey: COSMOS_PARTITION
@@ -70673,8 +71138,8 @@ const createCosmosStore = ({ client, databaseId, containerId, engine, nativePage
 			}
 		},
 		migrations: { async apply() {
-			if (engine !== void 0) await assertCosmosContainerReusable(container, engine);
-			const { database } = await client.databases.createIfNotExists({ id: databaseId });
+			if (engine !== void 0) await assertCosmosContainerReusable(container(), engine);
+			const { database } = await open().client.databases.createIfNotExists({ id: databaseId });
 			const { resource } = await database.containers.createIfNotExists({
 				id: containerId,
 				partitionKey: { paths: [COSMOS_PARTITION_KEY_PATH] },
@@ -70710,29 +71175,40 @@ const createCosmosStore = ({ client, databaseId, containerId, engine, nativePage
 const adapterOf = (config) => {
 	const { databaseId = AZURE_COSMOS_V1_DATABASE, containerId = AZURE_COSMOS_V1_CONTAINER, aggregateBatching: _, ...connection } = config;
 	if (connection.consistencyLevel !== void 0 && connection.consistencyLevel !== "Strong") throw new Error(`cosmosDatabase reads with strong consistency; consistencyLevel "${String(connection.consistencyLevel)}" is weaker.`);
-	const client = new CosmosClient(connection);
+	let client;
 	const store = createCosmosStore({
-		client,
+		client: () => client ??= new CosmosClient(connection),
 		databaseId,
 		containerId,
 		engine: currentCosmosEngine()
 	});
 	return {
-		client,
+		dispose: () => client?.dispose(),
 		adapter: createKvAdapter({ store })
 	};
 };
+const DATABASE_TARGET = Symbol.for("@hot-updater/database-target");
+const accountHostOf = ({ endpoint, connectionString }) => {
+	const url = endpoint ?? connectionString?.match(/AccountEndpoint=([^;]+)/iu)?.[1];
+	try {
+		return url === void 0 ? void 0 : new URL(url).hostname;
+	} catch {
+		return;
+	}
+};
 const cosmosDatabase = (config) => {
-	const { client, adapter } = adapterOf(config);
+	const { dispose, adapter } = adapterOf(config);
+	const host = accountHostOf(config);
 	return {
 		...createEngineDatabase({
 			name: "cosmosDatabase",
 			adapter,
 			aggregateBatching: config.aggregateBatching ?? {}
 		}),
+		...host === void 0 ? {} : { [DATABASE_TARGET]: `cosmos/${host}` },
 		async dispose() {
 			await adapter.dispose?.();
-			client.dispose();
+			dispose();
 		}
 	};
 };