@hot-updater/cloudflare 1.0.0-rc.2 → 1.0.0-rc.3

package/worker/dist/index.js

@@ -2,7 +2,7 @@ var __defProp = Object.defineProperty;
 var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
 
 // ../../packages/server/dist/package.mjs
-var version = "1.0.0-rc.1";
+var version = "1.0.0-rc.2";
 
 // ../../packages/server/dist/version.mjs
 var HOT_UPDATER_SERVER_VERSION = version;
@@ -303,7 +303,8 @@ __name(parseStorageUri, "parseStorageUri");
 var isBrotliManifestAssetPath = /* @__PURE__ */ __name((assetPath) => /(^|\/)index\.[^/]+\.bundle$/.test(assetPath.replace(/\\/g, "/")), "isBrotliManifestAssetPath");
 var getManifestAssetDownloadPath = /* @__PURE__ */ __name((assetPath) => isBrotliManifestAssetPath(assetPath) ? `${assetPath}.br` : assetPath, "getManifestAssetDownloadPath");
 var createStorageUriWithRelativePath = /* @__PURE__ */ __name(({ baseStorageUri, relativePath }) => {
-  const parsed = parseStorageUri(baseStorageUri, new URL(baseStorageUri).protocol.replace(":", ""));
+  const protocol = new URL(baseStorageUri).protocol.replace(":", "");
+  const parsed = parseStorageUri(baseStorageUri, protocol);
   const childKey = createStorageKeyBuilder(void 0)(relativePath);
   if (!childKey) throw new Error("Relative storage key must not be empty.");
   return createStorageUri({
@@ -334,6 +335,7 @@ var DatabasePluginInputError = class extends Error {
   static {
     __name(this, "DatabasePluginInputError");
   }
+  code;
   name = "DatabasePluginInputError";
   constructor(code) {
     super(`Invalid database plugin input: ${code}`);
@@ -502,7 +504,7 @@ var RELEASE_CATALOG_SCHEMA_VERSION = 1;
 var RELEASE_CATALOG_FALLBACK_POLICY = "BUILTIN_IF_ACTIVE_INELIGIBLE";
 var MAX_TARGET_COHORTS_PER_RELEASE = 100;
 var MAX_DISTINCT_TARGET_COHORTS_PER_SCOPE = 512;
-var MAX_COMPILED_CATALOG_BYTES = 256 * 1024;
+var MAX_COMPILED_CATALOG_BYTES = 262144;
 var BASE64URL_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
 var MAX_CATALOG_SEGMENT_LENGTH = 255;
 function assertCatalogSegment(value, name) {
@@ -620,7 +622,7 @@ var isUUIDv7 = /* @__PURE__ */ __name((value) => typeof value === "string" && UU
 
 // ../plugin-core/dist/uuidv7.mjs
 function createUUIDv7FromTimestampHex(timestampHex) {
-  const randomBytes = new Uint8Array(10);
+  const randomBytes = /* @__PURE__ */ new Uint8Array(10);
   crypto.getRandomValues(randomBytes);
   const randomHex = Array.from(randomBytes).map((b) => b.toString(16).padStart(2, "0")).join("");
   const randA = randomHex.slice(0, 3);
@@ -718,6 +720,19 @@ var databaseFields = {
     "sdk_version",
     "received_at_ms"
   ],
+  bundle_installations: [
+    "id",
+    "install_id",
+    "user_id",
+    "username",
+    "to_bundle_id",
+    "type",
+    "platform",
+    "app_version",
+    "channel",
+    "cohort",
+    "received_at_ms"
+  ],
   api_keys: [
     "id",
     "hash",
@@ -740,6 +755,8 @@ var isChannelText2 = /* @__PURE__ */ __name((value) => {
   }
   return true;
 }, "isChannelText");
+var isInsightsIdentityText = /* @__PURE__ */ __name((value) => typeof value === "string" && value.length > 0 && value.length <= 255, "isInsightsIdentityText");
+var isNullableInsightsIdentityText = /* @__PURE__ */ __name((value) => value === null || isInsightsIdentityText(value), "isNullableInsightsIdentityText");
 var modelValidators = {
   bundles: {
     id: /* @__PURE__ */ __name((value) => typeof value === "string", "id"),
@@ -815,8 +832,8 @@ var modelValidators = {
   bundle_events: {
     id: /* @__PURE__ */ __name((value) => typeof value === "string", "id"),
     type: /* @__PURE__ */ __name((value) => value === "UPDATE_APPLIED" || value === "RECOVERED" || value === "RELEASE_ADOPTED" || value === "UNCHANGED", "type"),
-    install_id: /* @__PURE__ */ __name((value) => typeof value === "string", "install_id"),
-    user_id: /* @__PURE__ */ __name((value) => value === null || typeof value === "string", "user_id"),
+    install_id: isInsightsIdentityText,
+    user_id: isNullableInsightsIdentityText,
     username: /* @__PURE__ */ __name((value) => value === null || typeof value === "string", "username"),
     from_bundle_id: /* @__PURE__ */ __name((value) => value === null || typeof value === "string", "from_bundle_id"),
     from_release_id: /* @__PURE__ */ __name((value) => value === null || typeof value === "string", "from_release_id"),
@@ -831,6 +848,19 @@ var modelValidators = {
     sdk_version: /* @__PURE__ */ __name((value) => value === null || typeof value === "string", "sdk_version"),
     received_at_ms: /* @__PURE__ */ __name((value) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0, "received_at_ms")
   },
+  bundle_installations: {
+    id: /* @__PURE__ */ __name((value) => typeof value === "string", "id"),
+    install_id: isInsightsIdentityText,
+    user_id: isNullableInsightsIdentityText,
+    username: /* @__PURE__ */ __name((value) => value === null || typeof value === "string", "username"),
+    to_bundle_id: /* @__PURE__ */ __name((value) => typeof value === "string", "to_bundle_id"),
+    type: /* @__PURE__ */ __name((value) => value === "UPDATE_APPLIED" || value === "RECOVERED" || value === "RELEASE_ADOPTED" || value === "UNCHANGED", "type"),
+    platform: /* @__PURE__ */ __name((value) => value === "ios" || value === "android", "platform"),
+    app_version: /* @__PURE__ */ __name((value) => typeof value === "string", "app_version"),
+    channel: /* @__PURE__ */ __name((value) => typeof value === "string", "channel"),
+    cohort: /* @__PURE__ */ __name((value) => typeof value === "string", "cohort"),
+    received_at_ms: /* @__PURE__ */ __name((value) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0, "received_at_ms")
+  },
   api_keys: {
     id: /* @__PURE__ */ __name((value) => typeof value === "string", "id"),
     hash: /* @__PURE__ */ __name((value) => typeof value === "string", "hash"),
@@ -982,6 +1012,19 @@ var sortableFields = {
     "sdk_version",
     "received_at_ms"
   ]),
+  bundle_installations: /* @__PURE__ */ new Set([
+    "id",
+    "install_id",
+    "user_id",
+    "username",
+    "to_bundle_id",
+    "type",
+    "platform",
+    "app_version",
+    "channel",
+    "cohort",
+    "received_at_ms"
+  ]),
   api_keys: /* @__PURE__ */ new Set([
     "id",
     "hash",
@@ -1054,15 +1097,176 @@ var validateResult = /* @__PURE__ */ __name((model, row, select) => {
   ].every((field) => Object.hasOwn(row, field)) && !hasValidBundleEventInvariants(row)) throw new DatabasePluginInputError("invalid-result");
 }, "validateResult");
 
+// ../plugin-core/dist/insightsContract.mjs
+var encoder = new TextEncoder();
+var compareInsightsText = /* @__PURE__ */ __name((left, right) => {
+  const a = encoder.encode(left);
+  const b = encoder.encode(right);
+  for (let index = 0; index < Math.min(a.length, b.length); index += 1) if (a[index] !== b[index]) return a[index] - b[index];
+  return a.length - b.length;
+}, "compareInsightsText");
+var isWellFormedText = /* @__PURE__ */ __name((value) => {
+  for (const character of value) {
+    const point = character.codePointAt(0);
+    if (point >= 55296 && point <= 57343) return false;
+  }
+  return true;
+}, "isWellFormedText");
+var isIdentity = /* @__PURE__ */ __name((value) => typeof value === "string" && value.length > 0 && value.length <= 255 && isWellFormedText(value), "isIdentity");
+var isText = /* @__PURE__ */ __name((value) => typeof value === "string" && value.length > 0 && isWellFormedText(value), "isText");
+var isTimestamp = /* @__PURE__ */ __name((value) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0, "isTimestamp");
+var isLimit = /* @__PURE__ */ __name((value) => isTimestamp(value) && value >= 1 && value <= 101, "isLimit");
+var hasOnlyKeys = /* @__PURE__ */ __name((value, keys) => Object.keys(value).every((key) => keys.includes(key)), "hasOnlyKeys");
+var hasScope = /* @__PURE__ */ __name((value) => (value.platform === "ios" || value.platform === "android") && isText(value.channel), "hasScope");
+var isBundleFilter = /* @__PURE__ */ __name((value, withKind = false) => {
+  if (!isRecord(value) || !hasScope(value)) return false;
+  const keys = [
+    "platform",
+    "channel",
+    "type",
+    ...withKind ? ["kind"] : []
+  ];
+  return value.type === "RECOVERED" ? isText(value.fromBundleId) && hasOnlyKeys(value, [...keys, "fromBundleId"]) : (value.type === "UPDATE_APPLIED" || value.type === "RELEASE_ADOPTED") && isText(value.toBundleId) && hasOnlyKeys(value, [...keys, "toBundleId"]);
+}, "isBundleFilter");
+var isEventFilter = /* @__PURE__ */ __name((value) => {
+  if (!isRecord(value)) return false;
+  if (value.kind === "all") return hasOnlyKeys(value, ["kind"]);
+  if (value.kind === "installationMovement") return isIdentity(value.installId) && hasOnlyKeys(value, ["kind", "installId"]);
+  return value.kind === "bundle" && isBundleFilter(value, true);
+}, "isEventFilter");
+var validateRow = /* @__PURE__ */ __name((model, row, result = false) => {
+  try {
+    validateCreateData(model, row);
+    if (!isRecord(row) || typeof row.id !== "string" || !isUUIDv7(row.id) || Object.values(row).some((value) => typeof value === "string" && !isWellFormedText(value))) throw new DatabasePluginInputError("invalid-data");
+  } catch (error) {
+    if (result) throw new DatabasePluginInputError("invalid-result");
+    throw error;
+  }
+}, "validateRow");
+var toInsightsInstallationRow = /* @__PURE__ */ __name((event) => {
+  validateRow("bundle_events", event);
+  return {
+    id: event.id,
+    install_id: event.install_id,
+    user_id: event.user_id,
+    username: event.username,
+    to_bundle_id: event.to_bundle_id,
+    type: event.type,
+    platform: event.platform,
+    app_version: event.app_version,
+    channel: event.channel,
+    cohort: event.cohort,
+    received_at_ms: event.received_at_ms
+  };
+}, "toInsightsInstallationRow");
+var isInsightsMovementEvent = /* @__PURE__ */ __name((event) => event.type === "UPDATE_APPLIED" || event.type === "RECOVERED", "isInsightsMovementEvent");
+var matchesInsightsEventFilter = /* @__PURE__ */ __name((event, filter) => {
+  if (filter.kind === "all") return true;
+  if (filter.kind === "installationMovement") return event.install_id === filter.installId && isInsightsMovementEvent(event);
+  return event.type === filter.type && event.platform === filter.platform && event.channel === filter.channel && (filter.type === "RECOVERED" ? event.from_bundle_id === filter.fromBundleId : event.to_bundle_id === filter.toBundleId);
+}, "matchesInsightsEventFilter");
+var invalidQuery = /* @__PURE__ */ __name(() => {
+  throw new DatabasePluginInputError("invalid-query");
+}, "invalidQuery");
+var invalidResult = /* @__PURE__ */ __name(() => {
+  throw new DatabasePluginInputError("invalid-result");
+}, "invalidResult");
+var validateCount = /* @__PURE__ */ __name((count) => isTimestamp(count) ? count : invalidResult(), "validateCount");
+var createValidatedInsightsModel = /* @__PURE__ */ __name((model) => ({
+  async record(input) {
+    if (!isRecord(input) || !hasOnlyKeys(input, ["event", "installation"])) throw new DatabasePluginInputError("invalid-data");
+    const expected = toInsightsInstallationRow(input.event);
+    validateRow("bundle_installations", input.installation);
+    if (Object.entries(expected).some(([field, value]) => Reflect.get(input.installation, field) !== value)) throw new DatabasePluginInputError("invalid-data");
+    await model.record(input);
+  },
+  async listEvents(input) {
+    if (!isRecord(input) || !hasOnlyKeys(input, [
+      "filter",
+      "sinceMs",
+      "beforeReceivedAtMs",
+      "after",
+      "limit"
+    ]) || !isEventFilter(input.filter) || !isLimit(input.limit) || !isTimestamp(input.beforeReceivedAtMs) || input.sinceMs !== void 0 && !isTimestamp(input.sinceMs)) invalidQuery();
+    const sinceMs = input.sinceMs ?? 0;
+    if (sinceMs > input.beforeReceivedAtMs || input.after !== void 0 && (!isRecord(input.after) || !hasOnlyKeys(input.after, ["receivedAtMs", "id"]) || !isTimestamp(input.after.receivedAtMs) || typeof input.after.id !== "string" || !isUUIDv7(input.after.id) || input.after.receivedAtMs < sinceMs || input.after.receivedAtMs >= input.beforeReceivedAtMs)) invalidQuery();
+    const rows = await model.listEvents(input);
+    if (!Array.isArray(rows) || rows.length > input.limit) invalidResult();
+    let previous = input.after;
+    for (const row of rows) {
+      validateRow("bundle_events", row, true);
+      if (row.received_at_ms < sinceMs || row.received_at_ms >= input.beforeReceivedAtMs || !matchesInsightsEventFilter(row, input.filter) || previous !== void 0 && (row.received_at_ms > previous.receivedAtMs || row.received_at_ms === previous.receivedAtMs && row.id >= previous.id)) invalidResult();
+      previous = {
+        receivedAtMs: row.received_at_ms,
+        id: row.id
+      };
+    }
+    return rows;
+  },
+  async findInstallations(input) {
+    if (!isRecord(input)) invalidQuery();
+    if ("installId" in input) {
+      if (!hasOnlyKeys(input, ["installId"]) || !isIdentity(input.installId)) invalidQuery();
+    } else if (!hasOnlyKeys(input, [
+      "userId",
+      "afterInstallId",
+      "limit"
+    ]) || !isIdentity(input.userId) || !isLimit(input.limit) || input.afterInstallId !== void 0 && !isIdentity(input.afterInstallId)) invalidQuery();
+    const rows = await model.findInstallations(input);
+    if (!Array.isArray(rows) || rows.length > ("installId" in input ? 1 : input.limit)) invalidResult();
+    let previous = "installId" in input ? void 0 : input.afterInstallId;
+    for (const row of rows) {
+      validateRow("bundle_installations", row, true);
+      if ("installId" in input ? row.install_id !== input.installId : row.user_id !== input.userId || previous !== void 0 && compareInsightsText(row.install_id, previous) <= 0) invalidResult();
+      previous = row.install_id;
+    }
+    return rows;
+  },
+  async countInstallations(input) {
+    if (!isRecord(input) || !hasOnlyKeys(input, [
+      "platform",
+      "channel",
+      "sinceMs",
+      "bundleId"
+    ]) || !hasScope(input) || !isTimestamp(input.sinceMs) || input.bundleId !== void 0 && !isText(input.bundleId)) invalidQuery();
+    return validateCount(await model.countInstallations(input));
+  },
+  async countEvents(input) {
+    if (!isRecord(input) || !hasOnlyKeys(input, [
+      "filter",
+      "sinceMs",
+      "beforeReceivedAtMs"
+    ]) || !isBundleFilter(input.filter) || !isTimestamp(input.sinceMs) || !isTimestamp(input.beforeReceivedAtMs) || input.sinceMs > input.beforeReceivedAtMs) invalidQuery();
+    return validateCount(await model.countEvents(input));
+  }
+}), "createValidatedInsightsModel");
+
 // ../plugin-core/dist/databasePluginCrudValidationMutations.mjs
 var validateMutationWhere = /* @__PURE__ */ __name((where) => {
   if (where.length === 0) throw new DatabasePluginInputError("empty-mutation-where");
 }, "validateMutationWhere");
 var validateUpdateWhere = /* @__PURE__ */ __name((model, where) => {
+  if (model === "bundle_installations") {
+    const [install, receivedAt, id] = where;
+    const exactInstall = isRecord(install) && install.field === "install_id" && (install.operator === void 0 || install.operator === "eq") && typeof install.value === "string" && install.connector === void 0 && install.mode === void 0;
+    const receivedBefore = isRecord(receivedAt) && receivedAt.field === "received_at_ms" && (receivedAt.operator === "lt" || receivedAt.operator === "eq") && typeof receivedAt.value === "number" && Number.isSafeInteger(receivedAt.value) && receivedAt.value >= 0 && receivedAt.connector === void 0 && receivedAt.mode === void 0;
+    const idBefore = isRecord(id) && id.field === "id" && id.operator === "lt" && typeof id.value === "string" && id.connector === void 0 && id.mode === void 0;
+    if (!exactInstall || !receivedBefore || !(where.length === 2 && receivedAt.operator === "lt" || where.length === 3 && receivedAt.operator === "eq" && idBefore)) throw new DatabasePluginInputError("invalid-update-selector");
+    return;
+  }
   const selector = where[0];
   const primaryField = model === "release_catalogs" ? "scope_key" : "id";
   if (where.length !== 1 || !isRecord(selector) || selector.field !== primaryField || selector.operator !== void 0 && selector.operator !== "eq" || typeof selector.value !== "string" || selector.connector !== void 0 || selector.mode !== void 0) throw new DatabasePluginInputError("invalid-update-selector");
 }, "validateUpdateWhere");
+var validateInsightsInstallationUpdateData = /* @__PURE__ */ __name((update) => {
+  if (!isRecord(update)) throw new DatabasePluginInputError("invalid-data");
+  const fields = databaseFields.bundle_installations.filter((field) => field !== "install_id");
+  if (Reflect.ownKeys(update).length !== fields.length || fields.some((field) => !Object.hasOwn(update, field))) throw new DatabasePluginInputError("invalid-data");
+  for (const field of fields) {
+    const validator = modelValidators.bundle_installations[field];
+    if (!validator?.(Reflect.get(update, field))) throw new DatabasePluginInputError("invalid-data");
+  }
+}, "validateInsightsInstallationUpdateData");
 var validateBundleUpdateData = /* @__PURE__ */ __name((update) => {
   if (!isRecord(update)) throw new DatabasePluginInputError("invalid-data");
   for (const [field, value] of Object.entries(update)) {
@@ -1232,7 +1436,7 @@ var createDatabasePluginCrud = /* @__PURE__ */ __name((implementation) => {
   async function create(input) {
     validateModel(input.model);
     validateCreateData(input.model, input.data);
-    if (input.onConflict !== void 0 && !(input.onConflict === "ignore" && (input.model === "channels" || input.model === "api_keys"))) throw new DatabasePluginInputError("invalid-operation");
+    if (input.onConflict !== void 0 && !(input.onConflict === "ignore" && (input.model === "channels" || input.model === "api_keys" || input.model === "bundle_installations"))) throw new DatabasePluginInputError("invalid-operation");
     validateSelect(input.model, input.select);
     const row = await implementation.create(input);
     validateResult(input.model, row, input.select);
@@ -1247,6 +1451,7 @@ var createDatabasePluginCrud = /* @__PURE__ */ __name((implementation) => {
     if (input.model === "bundles") validateBundleUpdateData(input.update);
     else if (input.model === "releases") validateReleaseUpdateData(input.update);
     else if (input.model === "release_catalogs") validateReleaseCatalogUpdateData(input.update);
+    else if (input.model === "bundle_installations") validateInsightsInstallationUpdateData(input.update);
     else if (input.model === "api_keys") validateApiKeyUpdateData(input.update);
     else throw new DatabasePluginInputError("invalid-operation");
     validateSelect(input.model, input.select);
@@ -1322,10 +1527,90 @@ var createTransactionDatabasePlugin = /* @__PURE__ */ __name((implementation) =>
 // ../plugin-core/dist/createDatabasePlugin.mjs
 var PAGE_SIZE = 100;
 var compareChannelRows = /* @__PURE__ */ __name((left, right) => left.name < right.name ? -1 : left.name > right.name ? 1 : 0, "compareChannelRows");
+var toInsightsBundleWhere = /* @__PURE__ */ __name((filter) => [
+  {
+    field: "platform",
+    value: filter.platform
+  },
+  {
+    field: "channel",
+    value: filter.channel
+  },
+  {
+    field: "type",
+    value: filter.type
+  },
+  filter.type === "RECOVERED" ? {
+    field: "from_bundle_id",
+    value: filter.fromBundleId
+  } : {
+    field: "to_bundle_id",
+    value: filter.toBundleId
+  }
+], "toInsightsBundleWhere");
+var toInsightsEventRanges = /* @__PURE__ */ __name((filter) => {
+  if (filter.kind === "all") return [[]];
+  if (filter.kind === "bundle") return [toInsightsBundleWhere(filter)];
+  return ["UPDATE_APPLIED", "RECOVERED"].map((type) => [{
+    field: "install_id",
+    value: filter.installId
+  }, {
+    field: "type",
+    value: type
+  }]);
+}, "toInsightsEventRanges");
+var listInsightsEventRange = /* @__PURE__ */ __name(async (crud, input, filterWhere) => {
+  const where = [...filterWhere, {
+    field: "received_at_ms",
+    operator: "gte",
+    value: input.sinceMs ?? 0
+  }];
+  const sameTimestamp = input.after === void 0 ? [] : await crud.findMany({
+    model: "bundle_events",
+    where: [
+      ...filterWhere,
+      {
+        field: "received_at_ms",
+        value: input.after.receivedAtMs
+      },
+      {
+        field: "id",
+        operator: "lt",
+        value: input.after.id
+      }
+    ],
+    orderBy: [{
+      field: "id",
+      direction: "desc"
+    }],
+    limit: input.limit,
+    offset: 0
+  });
+  if (sameTimestamp.length === input.limit) return sameTimestamp;
+  const older = await crud.findMany({
+    model: "bundle_events",
+    where: [...where, {
+      field: "received_at_ms",
+      operator: "lt",
+      value: input.after?.receivedAtMs ?? input.beforeReceivedAtMs
+    }],
+    orderBy: [{
+      field: "received_at_ms",
+      direction: "desc"
+    }, {
+      field: "id",
+      direction: "desc"
+    }],
+    limit: input.limit - sameTimestamp.length,
+    offset: 0
+  });
+  return [...sameTimestamp, ...older];
+}, "listInsightsEventRange");
 var DatabaseAtomicCommitUnsupportedError = class extends Error {
   static {
     __name(this, "DatabaseAtomicCommitUnsupportedError");
   }
+  pluginName;
   name = "DatabaseAtomicCommitUnsupportedError";
   constructor(pluginName) {
     super(`Database plugin "${pluginName}" cannot atomically commit changes across models.`);
@@ -1345,6 +1630,7 @@ var DatabaseCommitConflictError = class extends Error {
   static {
     __name(this, "DatabaseCommitConflictError");
   }
+  result;
   name = "DatabaseCommitConflictError";
   constructor(result) {
     super("Database commit precondition failed.");
@@ -1576,12 +1862,6 @@ var applyChange = /* @__PURE__ */ __name(async (database, change, changeIndex) =
           }
           return;
       }
-    case "insights":
-      await database.create({
-        model: "bundle_events",
-        data: change.row
-      });
-      return;
     case "apiKeys":
       switch (change.operation) {
         case "insert":
@@ -1650,11 +1930,11 @@ var applyChanges = /* @__PURE__ */ __name(async (database, input) => {
   for (const [changeIndex, change] of input.changes.entries()) await applyChange(database, change, changeIndex);
   return { committed: true };
 }, "applyChanges");
-var hasOnlyKeys = /* @__PURE__ */ __name((value, keys) => {
+var hasOnlyKeys2 = /* @__PURE__ */ __name((value, keys) => {
   return Reflect.ownKeys(value).length === keys.length && keys.every((key) => Object.hasOwn(value, key));
 }, "hasOnlyKeys");
 var validateWhere2 = /* @__PURE__ */ __name((where, field, validateValue = (value) => typeof value === "string") => {
-  if (!isRecord(where) || !hasOnlyKeys(where, [field]) || !validateValue(Reflect.get(where, field))) throw new DatabasePluginInputError("invalid-data");
+  if (!isRecord(where) || !hasOnlyKeys2(where, [field]) || !validateValue(Reflect.get(where, field))) throw new DatabasePluginInputError("invalid-data");
 }, "validateWhere");
 var validateDatabaseChange = /* @__PURE__ */ __name((change) => {
   if (!isRecord(change)) throw new DatabasePluginInputError("invalid-data");
@@ -1662,7 +1942,7 @@ var validateDatabaseChange = /* @__PURE__ */ __name((change) => {
     case "bundles":
       switch (change.operation) {
         case "insert":
-          if (!hasOnlyKeys(change, [
+          if (!hasOnlyKeys2(change, [
             "model",
             "operation",
             "row"
@@ -1670,7 +1950,7 @@ var validateDatabaseChange = /* @__PURE__ */ __name((change) => {
           validateCreateData("bundles", change.row);
           return;
         case "update":
-          if (!hasOnlyKeys(change, [
+          if (!hasOnlyKeys2(change, [
             "model",
             "operation",
             "where",
@@ -1680,7 +1960,7 @@ var validateDatabaseChange = /* @__PURE__ */ __name((change) => {
           validateBundleUpdateData(change.update);
           return;
         case "delete":
-          if (!hasOnlyKeys(change, [
+          if (!hasOnlyKeys2(change, [
             "model",
             "operation",
             "where"
@@ -1693,7 +1973,7 @@ var validateDatabaseChange = /* @__PURE__ */ __name((change) => {
     case "bundlePatches":
       switch (change.operation) {
         case "insert":
-          if (!hasOnlyKeys(change, [
+          if (!hasOnlyKeys2(change, [
             "model",
             "operation",
             "row"
@@ -1701,7 +1981,7 @@ var validateDatabaseChange = /* @__PURE__ */ __name((change) => {
           validateCreateData("bundle_patches", change.row);
           return;
         case "delete":
-          if (!hasOnlyKeys(change, [
+          if (!hasOnlyKeys2(change, [
             "model",
             "operation",
             "where"
@@ -1714,7 +1994,7 @@ var validateDatabaseChange = /* @__PURE__ */ __name((change) => {
     case "releases":
       switch (change.operation) {
         case "insert":
-          if (!hasOnlyKeys(change, [
+          if (!hasOnlyKeys2(change, [
             "model",
             "operation",
             "row"
@@ -1722,7 +2002,7 @@ var validateDatabaseChange = /* @__PURE__ */ __name((change) => {
           validateCreateData("releases", change.row);
           return;
         case "update":
-          if (!hasOnlyKeys(change, [
+          if (!hasOnlyKeys2(change, [
             "model",
             "operation",
             "where",
@@ -1732,7 +2012,7 @@ var validateDatabaseChange = /* @__PURE__ */ __name((change) => {
           validateReleaseUpdateData(change.update);
           return;
         case "delete":
-          if (!hasOnlyKeys(change, [
+          if (!hasOnlyKeys2(change, [
             "model",
             "operation",
             "where"
@@ -1743,7 +2023,7 @@ var validateDatabaseChange = /* @__PURE__ */ __name((change) => {
           throw new DatabasePluginInputError("invalid-operation");
       }
     case "releaseCatalogs":
-      if (change.operation !== "put" || !hasOnlyKeys(change, [
+      if (change.operation !== "put" || !hasOnlyKeys2(change, [
         "model",
         "operation",
         "row"
@@ -1753,7 +2033,7 @@ var validateDatabaseChange = /* @__PURE__ */ __name((change) => {
     case "channels":
       switch (change.operation) {
         case "insert":
-          if (!hasOnlyKeys(change, [
+          if (!hasOnlyKeys2(change, [
             "model",
             "operation",
             "row",
@@ -1762,7 +2042,7 @@ var validateDatabaseChange = /* @__PURE__ */ __name((change) => {
           validateCreateData("channels", change.row);
           return;
         case "delete":
-          if (!hasOnlyKeys(change, [
+          if (!hasOnlyKeys2(change, [
             "model",
             "operation",
             "where"
@@ -1772,18 +2052,10 @@ var validateDatabaseChange = /* @__PURE__ */ __name((change) => {
         default:
           throw new DatabasePluginInputError("invalid-operation");
       }
-    case "insights":
-      if (change.operation !== "insert" || !hasOnlyKeys(change, [
-        "model",
-        "operation",
-        "row"
-      ])) throw new DatabasePluginInputError("invalid-operation");
-      validateCreateData("bundle_events", change.row);
-      return;
     case "apiKeys":
       switch (change.operation) {
         case "insert":
-          if (!hasOnlyKeys(change, [
+          if (!hasOnlyKeys2(change, [
             "model",
             "operation",
             "row",
@@ -1792,7 +2064,7 @@ var validateDatabaseChange = /* @__PURE__ */ __name((change) => {
           validateCreateData("api_keys", change.row);
           return;
         case "update":
-          if (!hasOnlyKeys(change, [
+          if (!hasOnlyKeys2(change, [
             "model",
             "operation",
             "where",
@@ -1800,7 +2072,7 @@ var validateDatabaseChange = /* @__PURE__ */ __name((change) => {
           ])) throw new DatabasePluginInputError("invalid-data");
           validateWhere2(change.where, "id");
           if (!isRecord(change.update)) throw new DatabasePluginInputError("invalid-data");
-          if (!hasOnlyKeys(change.update, ["revokedAtMs"])) throw new DatabasePluginInputError("invalid-data");
+          if (!hasOnlyKeys2(change.update, ["revokedAtMs"])) throw new DatabasePluginInputError("invalid-data");
           validateApiKeyUpdateData({ revoked_at_ms: change.update.revokedAtMs });
           return;
         default:
@@ -1813,7 +2085,7 @@ var validateDatabaseChange = /* @__PURE__ */ __name((change) => {
 var validateDatabaseCommitExpectation = /* @__PURE__ */ __name((expectation) => {
   if (!isRecord(expectation)) throw new DatabasePluginInputError("invalid-data");
   if (expectation.model === "releases") {
-    if (!hasOnlyKeys(expectation, [
+    if (!hasOnlyKeys2(expectation, [
       "model",
       "id",
       "revision"
@@ -1821,7 +2093,7 @@ var validateDatabaseCommitExpectation = /* @__PURE__ */ __name((expectation) =>
     return;
   }
   if (expectation.model === "releaseCatalogs") {
-    if (!hasOnlyKeys(expectation, [
+    if (!hasOnlyKeys2(expectation, [
       "model",
       "scopeKey",
       "generation"
@@ -1831,7 +2103,7 @@ var validateDatabaseCommitExpectation = /* @__PURE__ */ __name((expectation) =>
   throw new DatabasePluginInputError("invalid-model");
 }, "validateDatabaseCommitExpectation");
 function validateDatabaseCommit(input) {
-  if (!isRecord(input) || !Array.isArray(input.changes) || (Object.hasOwn(input, "expectations") ? !hasOnlyKeys(input, ["changes", "expectations"]) || !Array.isArray(input.expectations) : !hasOnlyKeys(input, ["changes"]))) throw new DatabasePluginInputError("invalid-data");
+  if (!isRecord(input) || !Array.isArray(input.changes) || (Object.hasOwn(input, "expectations") ? !hasOnlyKeys2(input, ["changes", "expectations"]) || !Array.isArray(input.expectations) : !hasOnlyKeys2(input, ["changes"]))) throw new DatabasePluginInputError("invalid-data");
   input.changes.forEach(validateDatabaseChange);
   if (Array.isArray(input.expectations)) input.expectations.forEach(validateDatabaseCommitExpectation);
 }
@@ -2052,36 +2324,82 @@ var createDatabasePluginAdapter = /* @__PURE__ */ __name((name, implementation)
         }
       },
       insights: {
-        async append(row) {
-          await crud.create({
-            model: "bundle_events",
-            data: row
-          });
+        record: /* @__PURE__ */ __name((input) => implementation.recordInsights(input), "record"),
+        async listEvents(input) {
+          const ranges = await Promise.all(toInsightsEventRanges(input.filter).map((where) => listInsightsEventRange(crud, input, where)));
+          if (ranges.length === 1) return ranges[0];
+          return ranges.flat().sort((left, right) => right.received_at_ms - left.received_at_ms || compareInsightsText(right.id, left.id)).slice(0, input.limit);
         },
-        async scan(input) {
-          const rows = [];
-          for (let offset = 0; rows.length < input.limit; offset += PAGE_SIZE) {
-            const page = await crud.findMany({
-              model: "bundle_events",
+        async findInstallations(input) {
+          if ("installId" in input) {
+            const row = await crud.findOne({
+              model: "bundle_installations",
               where: [{
+                field: "install_id",
+                value: input.installId
+              }]
+            });
+            return row === null ? [] : [row];
+          }
+          return crud.findMany({
+            model: "bundle_installations",
+            where: [{
+              field: "user_id",
+              value: input.userId
+            }, ...input.afterInstallId === void 0 ? [] : [{
+              field: "install_id",
+              operator: "gt",
+              value: input.afterInstallId
+            }]],
+            orderBy: [{
+              field: "install_id",
+              direction: "asc"
+            }],
+            limit: input.limit,
+            offset: 0
+          });
+        },
+        countInstallations(input) {
+          return crud.count({
+            model: "bundle_installations",
+            where: [
+              {
+                field: "platform",
+                value: input.platform
+              },
+              {
+                field: "channel",
+                value: input.channel
+              },
+              {
+                field: "received_at_ms",
+                operator: "gte",
+                value: input.sinceMs
+              },
+              ...input.bundleId === void 0 ? [] : [{
+                field: "to_bundle_id",
+                value: input.bundleId
+              }]
+            ]
+          });
+        },
+        countEvents(input) {
+          return crud.count({
+            model: "bundle_events",
+            where: [
+              ...toInsightsBundleWhere(input.filter),
+              {
+                field: "received_at_ms",
+                operator: "gte",
+                value: input.sinceMs
+              },
+              {
                 field: "received_at_ms",
                 operator: "lt",
                 value: input.beforeReceivedAtMs
-              }],
-              orderBy: [{
-                field: "received_at_ms",
-                direction: "asc"
-              }, {
-                field: "id",
-                direction: "asc"
-              }],
-              limit: PAGE_SIZE,
-              offset
-            });
-            rows.push(...page.filter((row) => input.after === void 0 || row.received_at_ms > input.after.receivedAtMs || row.received_at_ms === input.after.receivedAtMs && row.id > input.after.id));
-            if (page.length < PAGE_SIZE) break;
-          }
-          return rows.slice(0, input.limit);
+              }
+            ]
+          });
         }
       },
       apiKeys: {
@@ -2125,7 +2443,13 @@ var createDatabasePluginAdapter = /* @__PURE__ */ __name((name, implementation)
     ...implementation.dispose ? { dispose: implementation.dispose } : {}
   };
 }, "createDatabasePluginAdapter");
-var createDatabasePlugin = /* @__PURE__ */ __name((options) => ({ ...options }), "createDatabasePlugin");
+var createDatabasePlugin = /* @__PURE__ */ __name((options) => ({
+  ...options,
+  models: {
+    ...options.models,
+    insights: createValidatedInsightsModel(options.models.insights)
+  }
+}), "createDatabasePlugin");
 
 // ../plugin-core/dist/createStoragePlugin.mjs
 var createStoragePlugin = /* @__PURE__ */ __name((options) => ({ ...options }), "createStoragePlugin");
@@ -2267,6 +2591,8 @@ var DatabasePatchUpdateUnsupportedError = class extends Error {
   static {
     __name(this, "DatabasePatchUpdateUnsupportedError");
   }
+  bundleId;
+  pluginName;
   name = "DatabasePatchUpdateUnsupportedError";
   constructor(bundleId, pluginName) {
     super(`Database plugin "${pluginName}" cannot atomically replace patches for bundle "${bundleId}".`);
@@ -2355,7 +2681,8 @@ var hydrateRows = /* @__PURE__ */ __name(async (database, ownerRows) => {
   const patchRows = await database.models.bundlePatches.findByBundleIds(ownerRows.map(({ id }) => id));
   const ownerIds = new Set(ownerRows.map(({ id }) => id));
   const referencedIds = [...new Set(patchRows.map(({ base_bundle_id }) => base_bundle_id).filter((id) => !ownerIds.has(id)))];
-  return rowsToBundles(ownerRows, patchRows, referencedIds.length === 0 ? [] : await loadBundleRows(database, { id: { in: referencedIds } }));
+  const referencedRows = referencedIds.length === 0 ? [] : await loadBundleRows(database, { id: { in: referencedIds } });
+  return rowsToBundles(ownerRows, patchRows, referencedRows);
 }, "hydrateRows");
 var cursorIdFilter = /* @__PURE__ */ __name((cursor, direction) => {
   if (cursor?.after) return { [direction === "desc" ? "lt" : "gt"]: cursor.after };
@@ -2410,6 +2737,7 @@ var DatabaseBundleNotFoundError = class extends Error {
   static {
     __name(this, "DatabaseBundleNotFoundError");
   }
+  bundleId;
   name = "DatabaseBundleNotFoundError";
   constructor(bundleId) {
     super(`Bundle "${bundleId}" was not found.`);
@@ -2420,6 +2748,8 @@ var DatabasePatchInsertUnsupportedError = class extends Error {
   static {
     __name(this, "DatabasePatchInsertUnsupportedError");
   }
+  bundleId;
+  pluginName;
   name = "DatabasePatchInsertUnsupportedError";
   constructor(bundleId, pluginName) {
     super(`Database plugin "${pluginName}" cannot atomically insert patches for bundle "${bundleId}".`);
@@ -2438,12 +2768,13 @@ var insertChanges = /* @__PURE__ */ __name((bundle) => [{
 }))], "insertChanges");
 var updateChanges = /* @__PURE__ */ __name((bundleId, update) => {
   const rowUpdate = bundleUpdateToRow(update);
+  const patchesPresent = Object.hasOwn(update, "patches");
   return [{
     model: "bundles",
     operation: "update",
     where: { id: bundleId },
     update: rowUpdate
-  }, ...Object.hasOwn(update, "patches") ? [{
+  }, ...patchesPresent ? [{
     model: "bundlePatches",
     operation: "delete",
     where: { bundleId }
@@ -2516,7 +2847,7 @@ var createDatabaseClient = /* @__PURE__ */ __name((plugin) => {
   };
 }, "createDatabaseClient");
 
-// ../plugin-core/dist/node_modules/.pnpm/verkit@0.3.2/node_modules/verkit/dist/index.mjs
+// ../plugin-core/dist/node_modules/.pnpm/verkit@0.4.0/node_modules/verkit/dist/comparison-DenM3wCn.mjs
 var LETTER_DASH_NUMBER = "[a-zA-Z0-9-]";
 var NUMERIC_IDENTIFIER = String.raw`0|[1-9]\d*`;
 var NUMERIC_IDENTIFIER_LOOSE = String.raw`\d+`;
@@ -2555,23 +2886,9 @@ function safeRegex(source, flags) {
   return new RegExp(makeSafeRegexSource(source), flags);
 }
 __name(safeRegex, "safeRegex");
-var NUMERIC$1 = /^\d+$/;
-function compareIdentifiers(left, right) {
-  if (typeof left === "number" && typeof right === "number") return left === right ? 0 : left < right ? -1 : 1;
-  const leftNumeric = NUMERIC$1.test(String(left));
-  const rightNumeric = NUMERIC$1.test(String(right));
-  const normalizedLeft = leftNumeric ? Number(left) : left;
-  const normalizedRight = rightNumeric ? Number(right) : right;
-  return normalizedLeft === normalizedRight ? 0 : leftNumeric && !rightNumeric ? -1 : rightNumeric && !leftNumeric ? 1 : normalizedLeft < normalizedRight ? -1 : 1;
-}
-__name(compareIdentifiers, "compareIdentifiers");
 var FULL = safeRegex(`^${FULL_PLAIN}$`);
 var LOOSE = safeRegex(`^${LOOSE_PLAIN}$`);
-safeRegex(`^${PRERELEASE}$`);
-safeRegex(`^${PRERELEASE_LOOSE}$`);
-var COERCE_EXACT = safeRegex(COERCE);
-var COERCE_FULL_EXACT = safeRegex(COERCE_FULL);
-var NUMERIC = /^\d+$/;
+var NUMERIC$1 = /^\d+$/;
 function formatComparableVersion(version2) {
   const base = `${version2.major}.${version2.minor}.${version2.patch}`;
   return version2.prerelease?.length ? `${base}-${version2.prerelease.join(".")}` : base;
@@ -2594,7 +2911,7 @@ function parse(version2, options = {}) {
   if (minor > Number.MAX_SAFE_INTEGER || minor < 0) throw new TypeError(`Invalid minor version: ${match2[2]}`);
   if (patch > Number.MAX_SAFE_INTEGER || patch < 0) throw new TypeError(`Invalid patch version: ${match2[3]}`);
   const prerelease = match2[4] ? match2[4].split(".").map((identifier) => {
-    if (NUMERIC.test(identifier)) {
+    if (NUMERIC$1.test(identifier)) {
       const numeric = Number(identifier);
       if (numeric >= 0 && numeric < Number.MAX_SAFE_INTEGER) return numeric;
     }
@@ -2617,6 +2934,16 @@ function tryParse(version2, options = {}) {
   }
 }
 __name(tryParse, "tryParse");
+var NUMERIC = /^\d+$/;
+function compareIdentifiers(left, right) {
+  if (typeof left === "number" && typeof right === "number") return left === right ? 0 : left < right ? -1 : 1;
+  const leftNumeric = NUMERIC.test(String(left));
+  const rightNumeric = NUMERIC.test(String(right));
+  const normalizedLeft = leftNumeric ? Number(left) : left;
+  const normalizedRight = rightNumeric ? Number(right) : right;
+  return normalizedLeft === normalizedRight ? 0 : leftNumeric && !rightNumeric ? -1 : rightNumeric && !leftNumeric ? 1 : normalizedLeft < normalizedRight ? -1 : 1;
+}
+__name(compareIdentifiers, "compareIdentifiers");
 function compareMainParsed(left, right) {
   return left.major === right.major ? left.minor === right.minor ? left.patch === right.patch ? 0 : left.patch < right.patch ? -1 : 1 : left.minor < right.minor ? -1 : 1 : left.major < right.major ? -1 : 1;
 }
@@ -2641,29 +2968,18 @@ function compareParsed(left, right) {
   return compareMainParsed(left, right) || comparePrereleaseParsed(left, right);
 }
 __name(compareParsed, "compareParsed");
-function coerceParsedVersion(value, options = {}) {
-  if (typeof value === "object") return value;
-  const input = typeof value === "number" ? String(value) : value;
-  if (typeof input !== "string") return null;
-  let match2 = null;
-  if (options.rtl) {
-    const expression = safeRegex(options.includePrerelease ? COERCE_FULL : COERCE, "g");
-    let next;
-    while ((next = expression.exec(input)) && (!match2 || match2.index + match2[0].length !== input.length)) {
-      if (!match2 || next.index + next[0].length !== match2.index + match2[0].length) match2 = next;
-      expression.lastIndex = next.index + next[1].length + next[2].length;
-    }
-  } else match2 = (options.includePrerelease ? COERCE_FULL_EXACT : COERCE_EXACT).exec(input);
-  if (!match2) return null;
-  const major = match2[2];
-  return tryParse(`${major}.${match2[3] || "0"}.${match2[4] || "0"}${options.includePrerelease && match2[5] ? `-${match2[5]}` : ""}${options.includePrerelease && match2[6] ? `+${match2[6]}` : ""}`, options);
+function compare(left, right, options = {}) {
+  return compareParsed(parse(left, options), parse(right, options));
 }
-__name(coerceParsedVersion, "coerceParsedVersion");
+__name(compare, "compare");
+
+// ../plugin-core/dist/node_modules/.pnpm/verkit@0.4.0/node_modules/verkit/dist/set-CC5YeoYX.mjs
 var STRICT_COMPARATOR = safeRegex(String.raw`^${GREATER_LESS_THAN}\s*(${FULL_PLAIN})$|^$`);
-var LOOSE_COMPARATOR$1 = safeRegex(String.raw`^${GREATER_LESS_THAN}\s*(${LOOSE_PLAIN})$|^$`);
+var LOOSE_COMPARATOR = safeRegex(String.raw`^${GREATER_LESS_THAN}\s*(${LOOSE_PLAIN})$|^$`);
 function parseComparator(comparator, options = {}) {
+  if (typeof comparator !== "string") return comparator;
   const normalized = comparator.trim().replaceAll(/\s+/g, " ");
-  const match2 = normalized.match(options.loose ? LOOSE_COMPARATOR$1 : STRICT_COMPARATOR);
+  const match2 = normalized.match(options.loose ? LOOSE_COMPARATOR : STRICT_COMPARATOR);
   if (!match2) throw new TypeError(`Invalid comparator: ${normalized}`);
   const operator = match2[1] === "=" ? "" : match2[1] || "";
   const version2 = match2[2] ? parse(match2[2], options) : null;
@@ -2675,10 +2991,8 @@ function parseComparator(comparator, options = {}) {
   };
 }
 __name(parseComparator, "parseComparator");
-function compare(left, right, options = {}) {
-  return compareParsed(parse(left, options), parse(right, options));
-}
-__name(compare, "compare");
+
+// ../plugin-core/dist/node_modules/.pnpm/verkit@0.4.0/node_modules/verkit/dist/range-DvX-Y6iv.mjs
 var BUILD_STRIP = new RegExp(BUILD, "g");
 var BUILD_SAFE = safeRegex(BUILD);
 var STRICT_HYPHEN = safeRegex(String.raw`^\s*(${XRANGE_PLAIN})\s+-\s+(${XRANGE_PLAIN})\s*$`);
@@ -2695,7 +3009,7 @@ var LOOSE_XRANGE = safeRegex(String.raw`^${GREATER_LESS_THAN}\s*${XRANGE_PLAIN_L
 var STAR = safeRegex(String.raw`(<|>)?=?\s*\*`);
 var GTE_ZERO = /^\s*>=\s*0\.0\.0\s*$/;
 var GTE_ZERO_PRERELEASE = /^\s*>=\s*0\.0\.0-0\s*$/;
-var LOOSE_COMPARATOR = safeRegex(String.raw`^${GREATER_LESS_THAN}\s*(${LOOSE_PLAIN})$|^$`);
+var LOOSE_COMPARATOR2 = safeRegex(String.raw`^${GREATER_LESS_THAN}\s*(${LOOSE_PLAIN})$|^$`);
 function isWildcard(value) {
   return !value || String(value).toLowerCase() === "x" || String(value) === "*";
 }
@@ -2802,7 +3116,7 @@ function expandComparator(comparator, options) {
 __name(expandComparator, "expandComparator");
 function parseSimpleRange(input, options) {
   let parts = replaceHyphenRange(input.replace(BUILD_STRIP, ""), options).replace(COMPARATOR_TRIM, "$1$2$3").replace(TILDE_TRIM, "$1~").replace(CARET_TRIM, "$1^").split(" ").map((part) => expandComparator(part, options)).join(" ").split(/\s+/).map((part) => part.trim().replace(options.includePrerelease ? GTE_ZERO_PRERELEASE : GTE_ZERO, ""));
-  if (options.loose) parts = parts.filter((part) => LOOSE_COMPARATOR.test(part));
+  if (options.loose) parts = parts.filter((part) => LOOSE_COMPARATOR2.test(part));
   const unique = /* @__PURE__ */ new Map();
   for (const comparator of parts.map((part) => parseComparator(part, options))) {
     if (comparator.value === "<0.0.0-0") return [comparator];
@@ -2815,9 +3129,9 @@ __name(parseSimpleRange, "parseSimpleRange");
 function parseRange(range, options = {}) {
   if (typeof range !== "string") return range;
   const parsedOptions = { ...options };
-  const raw2 = range.trim().replaceAll(/\s+/g, " ");
-  let sets = raw2.split("||").map((part) => parseSimpleRange(part.trim(), parsedOptions)).filter((set) => set.length);
-  if (!sets.length) throw new TypeError(`Range contains no valid comparator sets: ${raw2}`);
+  const normalizedRange = range.trim().replaceAll(/\s+/g, " ");
+  let sets = normalizedRange.split("||").map((part) => parseSimpleRange(part.trim(), parsedOptions)).filter((set) => set.length);
+  if (!sets.length) throw new TypeError(`Range contains no valid comparator sets: ${normalizedRange}`);
   if (sets.length > 1) {
     const first = sets[0];
     sets = sets.filter((set) => set[0]?.value !== "<0.0.0-0");
@@ -2828,21 +3142,47 @@ function parseRange(range, options = {}) {
     }
   }
   return {
-    normalized: sets.map((set) => set.map((comparator) => comparator.value).join(" ")).join("||"),
     options: parsedOptions,
-    raw: raw2,
     sets
   };
 }
 __name(parseRange, "parseRange");
+
+// ../plugin-core/dist/node_modules/.pnpm/verkit@0.4.0/node_modules/verkit/dist/version-CQ98ZBpL.mjs
+var COERCE_EXACT = safeRegex(COERCE);
+var COERCE_FULL_EXACT = safeRegex(COERCE_FULL);
+safeRegex(`^${PRERELEASE}$`);
+safeRegex(`^${PRERELEASE_LOOSE}$`);
+function normalizeFull(version2, options = {}) {
+  const parsed = tryParse(version2, options);
+  return parsed ? formatFullVersion(parsed) : null;
+}
+__name(normalizeFull, "normalizeFull");
 function normalize(version2, options = {}) {
   const parsed = tryParse(version2, options);
   return parsed ? formatComparableVersion(parsed) : null;
 }
 __name(normalize, "normalize");
 function coerce(value, options = {}) {
-  const parsed = coerceParsedVersion(value, options);
-  return parsed ? formatFullVersion(parsed) : null;
+  if (typeof value === "object") return value;
+  const input = typeof value === "number" ? String(value) : value;
+  let match2 = null;
+  if (options.rtl) {
+    const source = options.includePrerelease ? COERCE_FULL : COERCE;
+    const expression = safeRegex(source, "g");
+    let next;
+    while ((next = expression.exec(input)) && (!match2 || match2.index + match2[0].length !== input.length)) {
+      if (!match2 || next.index + next[0].length !== match2.index + match2[0].length) match2 = next;
+      expression.lastIndex = next.index + next[1].length + next[2].length;
+    }
+  } else match2 = (options.includePrerelease ? COERCE_FULL_EXACT : COERCE_EXACT).exec(input);
+  if (!match2) return null;
+  const major = match2[2];
+  const minor = match2[3] || "0";
+  const patch = match2[4] || "0";
+  const prerelease = options.includePrerelease && match2[5] ? `-${match2[5]}` : "";
+  const build = options.includePrerelease && match2[6] ? `+${match2[6]}` : "";
+  return tryParse(`${major}.${minor}.${patch}${prerelease}${build}`, options);
 }
 __name(coerce, "coerce");
 
@@ -3139,15 +3479,16 @@ function compileAppVersion(releases) {
   const retainedIds = new Set(segmentReleases.flatMap(({ retainedIds: retainedIds2, rollbackIds }) => [...retainedIds2, ...rollbackIds]));
   const retainedReleases = releases.filter((release) => retainedIds.has(release.id));
   const descriptorIndex = new Map(retainedReleases.map((release, index) => [release.id, index]));
+  const segments = mergeSegments(segmentReleases.map(({ segment, retainedIds: retainedIds2, rollbackIds }) => ({
+    ...segment,
+    releaseIndexes: releases.filter((release) => retainedIds2.has(release.id)).map((release) => descriptorIndex.get(release.id)).filter((index) => index !== void 0),
+    rollbackReleaseIndexes: releases.filter((release) => rollbackIds.has(release.id)).map((release) => descriptorIndex.get(release.id)).filter((index) => index !== void 0)
+  })).filter((segment) => segment.releaseIndexes.length > 0 || segment.rollbackReleaseIndexes.length > 0));
   return {
     envelope: {
       fallbackPolicy: RELEASE_CATALOG_FALLBACK_POLICY,
       schemaVersion: RELEASE_CATALOG_SCHEMA_VERSION,
-      segments: mergeSegments(segmentReleases.map(({ segment, retainedIds: retainedIds2, rollbackIds }) => ({
-        ...segment,
-        releaseIndexes: releases.filter((release) => retainedIds2.has(release.id)).map((release) => descriptorIndex.get(release.id)).filter((index) => index !== void 0),
-        rollbackReleaseIndexes: releases.filter((release) => rollbackIds.has(release.id)).map((release) => descriptorIndex.get(release.id)).filter((index) => index !== void 0)
-      })).filter((segment) => segment.releaseIndexes.length > 0 || segment.rollbackReleaseIndexes.length > 0)),
+      segments,
       strategy: "APP_VERSION"
     },
     retainedReleases
@@ -3221,7 +3562,8 @@ function versionInSegment(version2, segment) {
 }
 __name(versionInSegment, "versionInSegment");
 function canonicalizeAppVersion(appVersion) {
-  return coerce(appVersion);
+  const version2 = coerce(appVersion);
+  return version2 ? normalizeFull(version2) : null;
 }
 __name(canonicalizeAppVersion, "canonicalizeAppVersion");
 function projectCompiledCatalog(catalog, appVersion) {
@@ -3255,6 +3597,7 @@ var ReleaseCatalogMutationError = class extends Error {
   static {
     __name(this, "ReleaseCatalogMutationError");
   }
+  code;
   name = "ReleaseCatalogMutationError";
   constructor(code, message) {
     super(message);
@@ -3521,6 +3864,7 @@ var ReleaseManagementError = class extends Error {
   static {
     __name(this, "ReleaseManagementError");
   }
+  code;
   name = "ReleaseManagementError";
   constructor(code, message) {
     super(message);
@@ -3643,7 +3987,8 @@ var createStorageDownloadUrl = /* @__PURE__ */ __name((signingKey) => {
     name: "HMAC"
   }, false, ["sign"]);
   return async ({ storageUri }) => {
-    return { url: createStorageDownloadPath(storageUri, encodeBytes(new Uint8Array(await crypto.subtle.sign("HMAC", await key, new TextEncoder().encode(storageUri))))) };
+    const signature = encodeBytes(new Uint8Array(await crypto.subtle.sign("HMAC", await key, new TextEncoder().encode(storageUri))));
+    return { url: createStorageDownloadPath(storageUri, signature) };
   };
 }, "createStorageDownloadUrl");
 
@@ -3875,16 +4220,6 @@ var createReleaseManagementRouteHandlers = /* @__PURE__ */ __name(() => ({
 }), "createReleaseManagementRouteHandlers");
 
 // ../../packages/server/dist/insights/errors.mjs
-var InsightsScanLimitExceededError = class extends Error {
-  static {
-    __name(this, "InsightsScanLimitExceededError");
-  }
-  constructor(limit) {
-    super(`Insights event scan exceeded ${limit} rows.`);
-    this.limit = limit;
-    this.name = "InsightsScanLimitExceededError";
-  }
-};
 var InsightsBadRequestError = class extends Error {
   static {
     __name(this, "InsightsBadRequestError");
@@ -3895,6 +4230,7 @@ var InsightsPayloadTooLargeError = class extends Error {
   static {
     __name(this, "InsightsPayloadTooLargeError");
   }
+  maximumBytes;
   name = "InsightsPayloadTooLargeError";
   constructor(maximumBytes) {
     super(`Event payload exceeds ${maximumBytes} bytes`);
@@ -3904,7 +4240,8 @@ var InsightsPayloadTooLargeError = class extends Error {
 
 // ../../packages/server/dist/insights/eventInput.mjs
 var MAX_EVENT_STRING_LENGTH = 1024;
-var EVENT_BODY_MAX_BYTES = 16 * 1024;
+var MAX_IDENTITY_LENGTH = 255;
+var EVENT_BODY_MAX_BYTES = 16384;
 var eventKeys = /* @__PURE__ */ new Set([
   "type",
   "installId",
@@ -3928,7 +4265,7 @@ function isRecord3(value) {
 __name(isRecord3, "isRecord");
 function requireStringField(payload, key) {
   const value = payload[key];
-  if (typeof value !== "string" || value.length === 0 || value.length > MAX_EVENT_STRING_LENGTH) throw new InsightsBadRequestError(`Invalid event field: ${key}`);
+  if (typeof value !== "string" || value.length === 0 || value.length > MAX_EVENT_STRING_LENGTH || new TextDecoder("utf-8", { ignoreBOM: true }).decode(new TextEncoder().encode(value)) !== value) throw new InsightsBadRequestError(`Invalid event field: ${key}`);
   return value;
 }
 __name(requireStringField, "requireStringField");
@@ -3937,6 +4274,12 @@ function requireNullableStringField(payload, key) {
   return requireStringField(payload, key);
 }
 __name(requireNullableStringField, "requireNullableStringField");
+function requireIdentityField(payload, key) {
+  const value = requireStringField(payload, key);
+  if (value.length > MAX_IDENTITY_LENGTH) throw new InsightsBadRequestError(`Invalid event field: ${key}`);
+  return value;
+}
+__name(requireIdentityField, "requireIdentityField");
 async function readBoundedText(request) {
   const contentLength = request.headers.get("content-length");
   const declaredByteLength = Number(contentLength);
@@ -3974,9 +4317,9 @@ function requireEvent(payload) {
   const platform = requireStringField(payload, "platform");
   if (platform !== "ios" && platform !== "android") throw new InsightsBadRequestError("Invalid event field: platform");
   const base = {
-    installId: requireStringField(payload, "installId"),
+    installId: requireIdentityField(payload, "installId"),
     toBundleId: requireStringField(payload, "toBundleId"),
-    ...payload.userId === void 0 ? {} : { userId: requireStringField(payload, "userId") },
+    ...payload.userId === void 0 ? {} : { userId: requireIdentityField(payload, "userId") },
     ...payload.username === void 0 ? {} : { username: requireStringField(payload, "username") },
     platform,
     appVersion: requireStringField(payload, "appVersion"),
@@ -4018,60 +4361,133 @@ async function parseBundleEventRequest(request) {
   return requireEvent(await parseJson(request));
 }
 __name(parseBundleEventRequest, "parseBundleEventRequest");
+function createBundleEventRow(input) {
+  input = requireEvent(input);
+  const base = {
+    app_version: input.appVersion,
+    channel: input.channel,
+    cohort: input.cohort,
+    fingerprint_hash: input.fingerprintHash,
+    from_release_id: input.fromReleaseId,
+    id: createUUIDv7(),
+    install_id: input.installId,
+    platform: input.platform,
+    received_at_ms: Date.now(),
+    sdk_version: input.sdkVersion ?? null,
+    to_bundle_id: input.toBundleId,
+    to_release_id: input.toReleaseId,
+    user_id: input.userId ?? null,
+    username: input.username ?? null
+  };
+  switch (input.type) {
+    case "UPDATE_APPLIED":
+    case "RECOVERED":
+    case "RELEASE_ADOPTED":
+      return {
+        ...base,
+        from_bundle_id: input.fromBundleId,
+        type: input.type,
+        update_strategy: input.updateStrategy
+      };
+    case "UNCHANGED":
+      return {
+        ...base,
+        from_bundle_id: null,
+        type: input.type,
+        update_strategy: null
+      };
+  }
+}
+__name(createBundleEventRow, "createBundleEventRow");
 
 // ../../packages/server/dist/insights/queryInput.mjs
-var EVENT_LIST_BOUNDS = {
-  defaultValue: 50,
-  maximum: 100,
-  minimum: 1
-};
-var EVENT_LIST_OFFSET_BOUNDS = {
-  defaultValue: 0,
-  minimum: 0
-};
-var MAX_USER_ID_LENGTH = 1024;
-function parseInteger(url, key, bounds) {
-  const value = url.searchParams.get(key);
-  if (value === null) return bounds.defaultValue;
-  const parsed = Number(value);
-  if (!Number.isSafeInteger(parsed) || parsed < bounds.minimum || bounds.maximum !== void 0 && parsed > bounds.maximum) throw new InsightsBadRequestError(`Invalid '${key}' query parameter.`);
-  return parsed;
-}
-__name(parseInteger, "parseInteger");
-var parsePagination = /* @__PURE__ */ __name((request) => {
+var MAX_PAGE_LIMIT = 100;
+var MAX_IDENTITY_LENGTH2 = 255;
+var MAX_CURSOR_LENGTH = 8192;
+var readSingle = /* @__PURE__ */ __name((url, key) => {
+  const values = url.searchParams.getAll(key);
+  if (values.length > 1) throw new InsightsBadRequestError(`Duplicate '${key}' query parameter.`);
+  return values[0];
+}, "readSingle");
+var readPageLimit = /* @__PURE__ */ __name((url) => {
+  const value = readSingle(url, "limit");
+  if (value === void 0) return void 0;
+  const limit = Number(value);
+  if (!Number.isSafeInteger(limit) || limit < 1 || limit > MAX_PAGE_LIMIT) throw new InsightsBadRequestError("Invalid 'limit' query parameter.");
+  return limit;
+}, "readPageLimit");
+var readCursor = /* @__PURE__ */ __name((url) => {
+  const cursor = readSingle(url, "cursor");
+  if (cursor !== void 0 && (cursor.length === 0 || cursor.length > MAX_CURSOR_LENGTH)) throw new InsightsBadRequestError("Invalid 'cursor' query parameter.");
+  return cursor;
+}, "readCursor");
+var readId = /* @__PURE__ */ __name((url, key, maximumLength = MAX_IDENTITY_LENGTH2) => {
+  const value = readSingle(url, key);
+  if (value === void 0 || value.length === 0 || value.length > maximumLength) throw new InsightsBadRequestError(`Invalid '${key}' query parameter.`);
+  return value;
+}, "readId");
+var readTimestamp = /* @__PURE__ */ __name((url, key) => {
+  const raw2 = readSingle(url, key);
+  if (raw2 === void 0) return void 0;
+  const value = Number(raw2);
+  if (!raw2.length || !Number.isSafeInteger(value) || value < 0) throw new InsightsBadRequestError(`Invalid '${key}' query parameter.`);
+  return value;
+}, "readTimestamp");
+var readScope = /* @__PURE__ */ __name((url) => {
+  const platform = readSingle(url, "platform");
+  if (platform !== "ios" && platform !== "android") throw new InsightsBadRequestError("Invalid 'platform' query parameter.");
+  return {
+    platform,
+    channel: readId(url, "channel", 1024)
+  };
+}, "readScope");
+var parseEventPageInput = /* @__PURE__ */ __name((request) => {
   const url = new URL(request.url);
+  const bundleFields = [
+    "bundleId",
+    "outcome",
+    "platform",
+    "channel"
+  ];
+  let bundle;
+  if (bundleFields.some((key) => url.searchParams.has(key))) {
+    const outcome = readSingle(url, "outcome");
+    if (outcome !== "applied" && outcome !== "recovered" && outcome !== "adopted") throw new InsightsBadRequestError("Invalid 'outcome' query parameter.");
+    bundle = {
+      ...readScope(url),
+      bundleId: readId(url, "bundleId", 1024),
+      outcome
+    };
+  }
   return {
-    limit: parseInteger(url, "limit", EVENT_LIST_BOUNDS),
-    offset: parseInteger(url, "offset", EVENT_LIST_OFFSET_BOUNDS)
+    beforeReceivedAtMs: readTimestamp(url, "beforeReceivedAtMs"),
+    sinceMs: readTimestamp(url, "sinceMs"),
+    cursor: readCursor(url),
+    limit: readPageLimit(url),
+    ...bundle === void 0 ? {} : { bundle }
   };
-}, "parsePagination");
-var parseInsightsQuery = /* @__PURE__ */ __name((request) => {
-  const window = new URL(request.url).searchParams.get("window") ?? "24h";
-  if (window !== "24h" && window !== "7d" && window !== "30d" && window !== "all") throw new InsightsBadRequestError("Invalid 'window' query parameter.");
+}, "parseEventPageInput");
+var parseUserInstallationPageInput = /* @__PURE__ */ __name((request) => {
+  const url = new URL(request.url);
+  const cursor = readCursor(url);
+  const limit = readPageLimit(url);
   return {
-    ...parsePagination(request),
-    window
+    userId: readId(url, "userId"),
+    ...cursor === void 0 ? {} : { cursor },
+    ...limit === void 0 ? {} : { limit }
   };
-}, "parseInsightsQuery");
-var parseActiveInstallationInput = /* @__PURE__ */ __name((request) => {
+}, "parseUserInstallationPageInput");
+var parseReportingOverviewInput = /* @__PURE__ */ __name((request) => {
   const url = new URL(request.url);
-  const windows = url.searchParams.getAll("window");
-  if (windows.length > 1) throw new InsightsBadRequestError("Duplicate 'window' query parameter.");
-  const window = windows[0] ?? "30d";
+  const window = readSingle(url, "window") ?? "30d";
   if (window !== "24h" && window !== "7d" && window !== "30d") throw new InsightsBadRequestError("Invalid 'window' query parameter.");
-  const userIds = url.searchParams.getAll("userId");
-  if (userIds.length > 1) throw new InsightsBadRequestError("Duplicate 'userId' query parameter.");
-  const userId = userIds[0];
-  if (userId !== void 0 && (userId.length === 0 || userId.length > MAX_USER_ID_LENGTH)) throw new InsightsBadRequestError("Invalid 'userId' query parameter.");
-  return userId === void 0 ? { window } : {
+  const bundleId = readSingle(url, "bundleId");
+  return {
+    ...readScope(url),
     window,
-    userId
+    ...bundleId === void 0 ? {} : { bundleId: readId(url, "bundleId", 1024) }
   };
-}, "parseActiveInstallationInput");
-var parseSearchInput = /* @__PURE__ */ __name((request) => ({
-  ...parsePagination(request),
-  query: new URL(request.url).searchParams.get("query")?.trim() ?? ""
-}), "parseSearchInput");
+}, "parseReportingOverviewInput");
 
 // ../../packages/server/dist/insights/routes.mjs
 var json = /* @__PURE__ */ __name((body, status) => Response.json(body, {
@@ -4081,7 +4497,11 @@ var json = /* @__PURE__ */ __name((body, status) => Response.json(body, {
 var requireParam = /* @__PURE__ */ __name((params, key) => {
   const value = params[key];
   if (value === void 0 || value.length === 0) throw new InsightsBadRequestError(`Missing route parameter: ${key}`);
-  return value;
+  try {
+    return decodeURIComponent(value);
+  } catch {
+    throw new InsightsBadRequestError(`Invalid route parameter: ${key}`);
+  }
 }, "requireParam");
 var run = /* @__PURE__ */ __name(async (operation) => {
   try {
@@ -4089,10 +4509,6 @@ var run = /* @__PURE__ */ __name(async (operation) => {
   } catch (error) {
     if (error instanceof InsightsBadRequestError) return json({ error: error.message }, 400);
     if (error instanceof InsightsPayloadTooLargeError) return json({ error: error.message }, 413);
-    if (error instanceof InsightsScanLimitExceededError) return json({ error: {
-      code: "INSIGHTS_SCAN_LIMIT_EXCEEDED",
-      limit: error.limit
-    } }, 503);
     throw error;
   }
 }, "run");
@@ -4102,32 +4518,27 @@ var createInsightsRouteHandlers = /* @__PURE__ */ __name((provider) => ({
     await provider.appendBundleEvent(await parseBundleEventRequest(request));
     return new Response(null, { status: 204 });
   }), "appendBundleEvent"),
-  getBundleEventSummary: /* @__PURE__ */ __name((params) => query(() => provider.getBundleEventSummary(requireParam(params, "id"))), "getBundleEventSummary"),
-  getBundleEventInsights: /* @__PURE__ */ __name((params, request) => query(() => {
-    const input = parseInsightsQuery(request);
-    return provider.getBundleEventInsights(requireParam(params, "id"), input.window, input.limit, input.offset);
-  }), "getBundleEventInsights"),
-  getBundleEventOverview: /* @__PURE__ */ __name(() => query(() => provider.getBundleEventOverview()), "getBundleEventOverview"),
-  getActiveInstallationOverview: /* @__PURE__ */ __name((_params, request) => query(() => provider.getActiveInstallationOverview(parseActiveInstallationInput(request))), "getActiveInstallationOverview"),
-  searchInstallations: /* @__PURE__ */ __name((_params, request) => query(() => {
-    const input = parseSearchInput(request);
-    return provider.searchInstallations(input.query, input.limit, input.offset);
-  }), "searchInstallations"),
-  getInstallationHistory: /* @__PURE__ */ __name((params, request) => query(() => {
-    const input = parsePagination(request);
-    return provider.getInstallationHistory(requireParam(params, "installId"), input.limit, input.offset);
-  }), "getInstallationHistory")
+  getReportingOverview: /* @__PURE__ */ __name((_params, request) => query(() => provider.getReportingOverview(parseReportingOverviewInput(request))), "getReportingOverview"),
+  getInstallation: /* @__PURE__ */ __name((params) => run(async () => {
+    const installation = await provider.getInstallation({ installId: requireParam(params, "installId") });
+    return installation === null ? json({ error: "Installation not found" }, 404) : json(installation, 200);
+  }), "getInstallation"),
+  listEvents: /* @__PURE__ */ __name((_params, request) => query(() => provider.listEvents(parseEventPageInput(request))), "listEvents"),
+  listInstallationEvents: /* @__PURE__ */ __name((params, request) => query(() => provider.listInstallationEvents({
+    ...parseEventPageInput(request),
+    installId: requireParam(params, "installId")
+  })), "listInstallationEvents"),
+  pageInstallationsByCurrentUserId: /* @__PURE__ */ __name((_params, request) => query(() => provider.pageInstallationsByCurrentUserId(parseUserInstallationPageInput(request))), "pageInstallationsByCurrentUserId")
 }), "createInsightsRouteHandlers");
 var registerInsightsClientRoutes = /* @__PURE__ */ __name((add) => {
   add("POST", "/events", "appendBundleEvent");
 }, "registerInsightsClientRoutes");
 var registerInsightsAdminRoutes = /* @__PURE__ */ __name((add) => {
-  add("GET", "/bundles/:id/events/summary", "getBundleEventSummary");
-  add("GET", "/bundles/:id/events/insights", "getBundleEventInsights");
-  add("GET", "/installations/overview", "getBundleEventOverview");
-  add("GET", "/installations/active", "getActiveInstallationOverview");
-  add("GET", "/installations", "searchInstallations");
-  add("GET", "/installations/:installId/events", "getInstallationHistory");
+  add("GET", "/events", "listEvents");
+  add("GET", "/overview", "getReportingOverview");
+  add("GET", "/installations", "pageInstallationsByCurrentUserId");
+  add("GET", "/installations/:installId/events", "listInstallationEvents");
+  add("GET", "/installations/:installId", "getInstallation");
 }, "registerInsightsAdminRoutes");
 
 // ../../packages/server/dist/internalRouter.mjs
@@ -4293,474 +4704,318 @@ function createHotUpdaterHandlers(api, insights, apiKeyAuth, downloadStorageObje
 }
 __name(createHotUpdaterHandlers, "createHotUpdaterHandlers");
 
-// ../../packages/server/dist/insights/bounded/activeOverview.mjs
-var HOUR_MS = 3600 * 1e3;
-var DAY_MS = 24 * HOUR_MS;
-var ACTIVE_BUNDLE_EVENT_TYPES = [
-  "UPDATE_APPLIED",
-  "RECOVERED",
-  "RELEASE_ADOPTED",
-  "UNCHANGED"
-];
-var activeWindowDefinitions = {
-  "24h": {
-    bucketCount: 24,
-    bucketSizeMs: HOUR_MS
-  },
-  "7d": {
-    bucketCount: 7,
-    bucketSizeMs: DAY_MS
-  },
-  "30d": {
-    bucketCount: 30,
-    bucketSizeMs: DAY_MS
-  }
+// ../../packages/server/dist/insights/provider.mjs
+var DEFAULT_PAGE_LIMIT = 50;
+var MAX_PAGE_LIMIT2 = 100;
+var MAX_EVENT_ID_LENGTH = 1024;
+var MAX_IDENTITY_LENGTH3 = 255;
+var MAX_CURSOR_LENGTH2 = 8192;
+var WINDOW_MS = {
+  "24h": 864e5,
+  "7d": 6048e5,
+  "30d": 2592e6
 };
-function getActiveWindowDefinition(window) {
-  return activeWindowDefinitions[window];
-}
-__name(getActiveWindowDefinition, "getActiveWindowDefinition");
-function compareCodePoints(left, right) {
-  if (left < right) return -1;
-  if (left > right) return 1;
-  return 0;
-}
-__name(compareCodePoints, "compareCodePoints");
-function isNewer(candidate, current) {
-  return candidate.received_at_ms > current.received_at_ms || candidate.received_at_ms === current.received_at_ms && compareCodePoints(candidate.id, current.id) > 0;
-}
-__name(isNewer, "isNewer");
-function collectActiveInstallationOverview(request) {
-  const definition = getActiveWindowDefinition(request.window);
-  const windowStartMs = request.asOfMs - definition.bucketCount * definition.bucketSizeMs;
-  const rows = request.rows.filter((row) => row.received_at_ms >= windowStartMs && row.received_at_ms < request.asOfMs);
-  const latestByInstall = /* @__PURE__ */ new Map();
-  for (const row of rows) {
-    const current = latestByInstall.get(row.install_id);
-    if (current === void 0 || isNewer(row, current)) latestByInstall.set(row.install_id, row);
-  }
-  const selectedRows = [...latestByInstall.values()].filter((row) => request.userId === void 0 || row.user_id === request.userId);
-  const selectedInstallIds = new Set(selectedRows.map((row) => row.install_id));
-  const bundleCounts = /* @__PURE__ */ new Map();
-  for (const row of selectedRows) bundleCounts.set(row.to_bundle_id, (bundleCounts.get(row.to_bundle_id) ?? 0) + 1);
-  const latestByBucket = Array.from({ length: definition.bucketCount }, () => /* @__PURE__ */ new Map());
-  for (const row of rows) {
-    if (!selectedInstallIds.has(row.install_id)) continue;
-    const bucket = latestByBucket[Math.floor((row.received_at_ms - windowStartMs) / definition.bucketSizeMs)];
-    if (bucket === void 0) continue;
-    const current = bucket.get(row.install_id);
-    if (current === void 0 || isNewer(row, current)) bucket.set(row.install_id, row);
-  }
-  const bundleCountsByBucket = latestByBucket.map((bucket) => {
-    const counts = /* @__PURE__ */ new Map();
-    for (const row of bucket.values()) counts.set(row.to_bundle_id, (counts.get(row.to_bundle_id) ?? 0) + 1);
-    return counts;
-  });
-  const bundleObservationTotals = /* @__PURE__ */ new Map();
-  for (const counts of bundleCountsByBucket) for (const [bundleId, count] of counts) bundleObservationTotals.set(bundleId, (bundleObservationTotals.get(bundleId) ?? 0) + count);
-  return {
-    asOfMs: request.asOfMs,
-    window: request.window,
-    activeInstallations: selectedInstallIds.size,
-    series: latestByBucket.map((bucket, index) => ({
-      bucketStartMs: windowStartMs + index * definition.bucketSizeMs,
-      value: bucket.size
-    })),
-    bundleSeries: [...bundleObservationTotals].sort(([leftId, leftTotal], [rightId, rightTotal]) => rightTotal - leftTotal || compareCodePoints(leftId, rightId)).map(([bundleId]) => ({
-      bundleId,
-      series: bundleCountsByBucket.map((counts, index) => ({
-        bucketStartMs: windowStartMs + index * definition.bucketSizeMs,
-        value: counts.get(bundleId) ?? 0
-      }))
-    })),
-    bundles: [...bundleCounts].map(([bundleId, installations]) => ({
-      bundleId,
-      installations
-    })).sort((left, right) => right.installations - left.installations || compareCodePoints(left.bundleId, right.bundleId))
-  };
-}
-__name(collectActiveInstallationOverview, "collectActiveInstallationOverview");
-
-// ../../packages/server/dist/insights/bounded/scan.mjs
-var INSIGHTS_SCAN_MAX_ROWS = 5e4;
-var INSIGHTS_MATERIALIZATION_LIMIT = INSIGHTS_SCAN_MAX_ROWS + 1;
-var INSIGHTS_SCAN_PAGE_SIZE = 1e3;
-var INSIGHTS_LOWER_BOUND_ID = "00000000-0000-0000-0000-000000000000";
-var compareCodePoints2 = /* @__PURE__ */ __name((left, right) => {
-  if (left < right) return -1;
-  if (left > right) return 1;
-  return 0;
-}, "compareCodePoints");
-var compareEventNewest = /* @__PURE__ */ __name((left, right) => right.received_at_ms - left.received_at_ms || compareCodePoints2(right.id, left.id), "compareEventNewest");
-var compareEventOldest = /* @__PURE__ */ __name((left, right) => left.received_at_ms - right.received_at_ms || compareCodePoints2(left.id, right.id), "compareEventOldest");
-var materializeEventRows = /* @__PURE__ */ __name(async (scope) => {
-  const rows = [];
-  const seenIds = /* @__PURE__ */ new Set();
-  let after = scope.lowerBoundMs === void 0 ? void 0 : {
-    receivedAtMs: scope.lowerBoundMs,
-    id: INSIGHTS_LOWER_BOUND_ID
-  };
-  while (rows.length < INSIGHTS_MATERIALIZATION_LIMIT) {
-    const limit = Math.min(INSIGHTS_SCAN_PAGE_SIZE, INSIGHTS_MATERIALIZATION_LIMIT - rows.length);
-    const page = await scope.persistence.scan({
-      beforeReceivedAtMs: scope.cutoffMs,
-      ...after === void 0 ? {} : { after },
-      limit
-    });
-    if (page.length === 0) break;
-    if (page.length > limit) throw new InsightsPersistenceOrderError();
-    let previous = after === void 0 ? void 0 : {
-      received_at_ms: after.receivedAtMs,
-      id: after.id
-    };
-    for (const row of page) {
-      if (row.received_at_ms >= scope.cutoffMs || previous !== void 0 && compareEventOldest(previous, row) >= 0 || seenIds.has(row.id)) throw new InsightsPersistenceOrderError();
-      seenIds.add(row.id);
-      rows.push(row);
-      previous = row;
-    }
-    const last = page.at(-1);
-    if (last !== void 0) after = {
-      receivedAtMs: last.received_at_ms,
-      id: last.id
-    };
-    if (rows.length > 5e4) throw new InsightsScanLimitExceededError(INSIGHTS_SCAN_MAX_ROWS);
-  }
-  return rows;
-}, "materializeEventRows");
-var InsightsPersistenceOrderError = class extends Error {
-  static {
-    __name(this, "InsightsPersistenceOrderError");
-  }
-  name = "InsightsPersistenceOrderError";
-  constructor() {
-    super("Insights persistence did not advance its scan cursor.");
+var isRecord4 = /* @__PURE__ */ __name((value) => typeof value === "object" && value !== null && !Array.isArray(value), "isRecord");
+var requireString = /* @__PURE__ */ __name((value, label, maximumLength) => {
+  if (typeof value !== "string" || value.length === 0 || value.length > maximumLength || new TextDecoder("utf-8", { ignoreBOM: true }).decode(new TextEncoder().encode(value)) !== value) throw new InsightsBadRequestError(`Invalid ${label}.`);
+  return value;
+}, "requireString");
+var requireTimestamp = /* @__PURE__ */ __name((value, label) => {
+  if (!Number.isSafeInteger(value) || Number(value) < 0) throw new InsightsBadRequestError(`Invalid ${label}.`);
+  return Number(value);
+}, "requireTimestamp");
+var readLimit = /* @__PURE__ */ __name((value) => {
+  const limit = value ?? DEFAULT_PAGE_LIMIT;
+  if (!Number.isSafeInteger(limit) || limit < 1 || limit > MAX_PAGE_LIMIT2) throw new InsightsBadRequestError("Invalid page limit.");
+  return limit;
+}, "readLimit");
+var encodeBase64Url2 = /* @__PURE__ */ __name((value) => {
+  const bytes = new TextEncoder().encode(value);
+  let binary = "";
+  for (const byte of bytes) binary += String.fromCharCode(byte);
+  return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/u, "");
+}, "encodeBase64Url");
+var decodeBase64Url2 = /* @__PURE__ */ __name((value) => {
+  if (value.length === 0 || value.length > MAX_CURSOR_LENGTH2) throw new InsightsBadRequestError("Invalid Insights cursor.");
+  try {
+    const base64 = value.replaceAll("-", "+").replaceAll("_", "/");
+    const padded = base64.padEnd(Math.ceil(base64.length / 4) * 4, "=");
+    const binary = atob(padded);
+    const bytes = Uint8Array.from(binary, (character) => character.charCodeAt(0));
+    return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+  } catch {
+    throw new InsightsBadRequestError("Invalid Insights cursor.");
   }
-};
-var materializeActiveRows = /* @__PURE__ */ __name(async (scope, window) => {
-  const definition = getActiveWindowDefinition(window);
-  const durationMs = definition.bucketCount * definition.bucketSizeMs;
-  return (await materializeEventRows({
-    ...scope,
-    lowerBoundMs: scope.cutoffMs - durationMs
-  })).filter((row) => row.received_at_ms >= scope.cutoffMs - durationMs && ACTIVE_BUNDLE_EVENT_TYPES.includes(row.type));
-}, "materializeActiveRows");
-var startOfUtcHour = /* @__PURE__ */ __name((value) => {
-  const date = new Date(value);
-  return Date.UTC(date.getUTCFullYear(), date.getUTCMonth(), date.getUTCDate(), date.getUTCHours());
-}, "startOfUtcHour");
-var startOfUtcDay = /* @__PURE__ */ __name((value) => {
-  const date = new Date(value);
-  return Date.UTC(date.getUTCFullYear(), date.getUTCMonth(), date.getUTCDate());
-}, "startOfUtcDay");
-var getWindowRange = /* @__PURE__ */ __name((window, now) => {
-  if (window === "24h") return {
-    sizeMs: 3600 * 1e3,
-    rangeStart: startOfUtcHour(now) - 1380 * 60 * 1e3
-  };
-  const days = window === "7d" ? 7 : 30;
-  return {
-    sizeMs: 1440 * 60 * 1e3,
-    rangeStart: startOfUtcDay(now) - (days - 1) * 24 * 60 * 60 * 1e3
-  };
-}, "getWindowRange");
-var materializeRowsForWindow = /* @__PURE__ */ __name(async (scope, window) => {
-  if (window === "all") return materializeEventRows(scope);
-  const range = getWindowRange(window, scope.cutoffMs);
-  return (await materializeEventRows({
-    ...scope,
-    lowerBoundMs: range.rangeStart
-  })).filter(({ received_at_ms }) => received_at_ms >= range.rangeStart);
-}, "materializeRowsForWindow");
-var bucketStart = /* @__PURE__ */ __name((receivedAtMs, sizeMs) => sizeMs === 3600 * 1e3 ? startOfUtcHour(receivedAtMs) : startOfUtcDay(receivedAtMs), "bucketStart");
-var createSeries = /* @__PURE__ */ __name((request) => {
-  const range = request.window === "all" ? void 0 : getWindowRange(request.window, request.cutoffMs);
-  const sizeMs = range?.sizeMs ?? 1440 * 60 * 1e3;
-  const installIdsByBucket = /* @__PURE__ */ new Map();
-  let oldestMs = request.cutoffMs;
-  for (const row of request.rows) {
-    oldestMs = Math.min(oldestMs, row.received_at_ms);
-    const start = bucketStart(row.received_at_ms, sizeMs);
-    const installIds = installIdsByBucket.get(start) ?? /* @__PURE__ */ new Set();
-    installIds.add(row.install_id);
-    installIdsByBucket.set(start, installIds);
-  }
-  const first = range?.rangeStart ?? startOfUtcDay(oldestMs);
-  const last = bucketStart(request.cutoffMs, sizeMs);
-  return Array.from({ length: Math.floor((last - first) / sizeMs) + 1 }, (_, index) => {
-    const start = first + index * sizeMs;
-    return {
-      bucketStartMs: start,
-      value: installIdsByBucket.get(start)?.size ?? 0
-    };
-  });
-}, "createSeries");
-var collectEventActivity = /* @__PURE__ */ __name((request) => {
-  const range = request.window === "all" ? void 0 : getWindowRange(request.window, request.cutoffMs);
-  const rows = range === void 0 ? request.rows : request.rows.filter(({ received_at_ms }) => received_at_ms >= range.rangeStart && received_at_ms < request.cutoffMs);
-  const installs = /* @__PURE__ */ new Set();
-  const installsByCohort = /* @__PURE__ */ new Map();
-  for (const row of rows) {
-    installs.add(row.install_id);
-    const cohort = installsByCohort.get(row.cohort) ?? /* @__PURE__ */ new Set();
-    cohort.add(row.install_id);
-    installsByCohort.set(row.cohort, cohort);
+}, "decodeBase64Url");
+var encodeCursor = /* @__PURE__ */ __name((value) => encodeBase64Url2(JSON.stringify(value)), "encodeCursor");
+var decodeCursor = /* @__PURE__ */ __name((value) => {
+  try {
+    return JSON.parse(decodeBase64Url2(value));
+  } catch (error) {
+    if (error instanceof InsightsBadRequestError) throw error;
+    throw new InsightsBadRequestError("Invalid Insights cursor.");
   }
+}, "decodeCursor");
+var readScope2 = /* @__PURE__ */ __name((input) => {
+  if (input.platform !== "ios" && input.platform !== "android") throw new InsightsBadRequestError("Invalid Insights platform.");
   return {
-    summary: installs.size,
-    cohorts: [...installsByCohort].sort(([left], [right]) => compareCodePoints2(left, right)).map(([cohort, installIds]) => ({
-      cohort,
-      value: installIds.size
-    })),
-    series: createSeries({
-      ...request,
-      rows
-    })
-  };
-}, "collectEventActivity");
-
-// ../../packages/server/dist/insights/bounded/installationSearch.mjs
-function toSearchRow(row) {
-  return {
-    installId: row.install_id,
-    username: row.username,
-    userId: row.user_id,
-    lastKnownBundleId: row.to_bundle_id,
-    latestStatus: row.type,
-    platform: row.platform,
-    appVersion: row.app_version,
-    channel: row.channel,
-    cohort: row.cohort,
-    receivedAtMs: row.received_at_ms
-  };
-}
-__name(toSearchRow, "toSearchRow");
-function matchesIdentity(row, query2) {
-  return row.install_id.toLowerCase().includes(query2) || row.user_id?.toLowerCase().includes(query2) === true || row.username?.toLowerCase().includes(query2) === true;
-}
-__name(matchesIdentity, "matchesIdentity");
-function searchEventInstallations(request) {
-  const query2 = request.query.toLowerCase();
-  const matchingInstallIds = /* @__PURE__ */ new Set();
-  for (const row of request.rows) if (query2.length === 0 || matchesIdentity(row, query2)) matchingInstallIds.add(row.install_id);
-  const latestByInstall = /* @__PURE__ */ new Map();
-  for (const row of request.rows) {
-    if (!matchingInstallIds.has(row.install_id)) continue;
-    const current = latestByInstall.get(row.install_id);
-    if (current === void 0 || compareEventNewest(row, current) < 0) latestByInstall.set(row.install_id, row);
-  }
-  const matchingRows = [...latestByInstall.values()].sort((left, right) => compareCodePoints2(left.install_id, right.install_id));
-  const pageSize = Math.min(Math.max(request.limit, 0), 100);
-  return {
-    data: matchingRows.slice(request.offset, request.offset + pageSize).map(toSearchRow),
-    pagination: {
-      total: matchingRows.length,
-      limit: request.limit,
-      offset: request.offset
-    }
-  };
-}
-__name(searchEventInstallations, "searchEventInstallations");
-
-// ../../packages/server/dist/insights/bounded/persistence.mjs
-function createBundleEventRow(input) {
-  const base = {
-    id: createUUIDv7(),
-    install_id: input.installId,
-    user_id: input.userId ?? null,
-    username: input.username ?? null,
-    from_release_id: input.fromReleaseId,
-    to_release_id: input.toReleaseId,
-    to_bundle_id: input.toBundleId,
     platform: input.platform,
-    app_version: input.appVersion,
-    channel: input.channel,
-    cohort: input.cohort,
-    fingerprint_hash: input.fingerprintHash,
-    sdk_version: input.sdkVersion ?? null,
-    received_at_ms: Date.now()
+    channel: requireString(input.channel, "channel", MAX_EVENT_ID_LENGTH)
   };
-  switch (input.type) {
-    case "UPDATE_APPLIED":
-    case "RECOVERED":
-    case "RELEASE_ADOPTED":
+}, "readScope");
+var bundleFilter = /* @__PURE__ */ __name((input) => {
+  const scope = readScope2(input);
+  const bundleId = requireString(input.bundleId, "bundle ID", MAX_EVENT_ID_LENGTH);
+  switch (input.outcome) {
+    case "applied":
       return {
-        ...base,
-        type: input.type,
-        from_bundle_id: input.fromBundleId,
-        update_strategy: input.updateStrategy
+        ...scope,
+        type: "UPDATE_APPLIED",
+        toBundleId: bundleId
       };
-    case "UNCHANGED":
+    case "recovered":
       return {
-        ...base,
-        type: input.type,
-        from_bundle_id: null,
-        update_strategy: null
+        ...scope,
+        type: "RECOVERED",
+        fromBundleId: bundleId
       };
+    case "adopted":
+      return {
+        ...scope,
+        type: "RELEASE_ADOPTED",
+        toBundleId: bundleId
+      };
+    default:
+      throw new InsightsBadRequestError("Invalid Insights outcome.");
   }
-}
-__name(createBundleEventRow, "createBundleEventRow");
-
-// ../../packages/server/dist/insights/bounded/provider.mjs
-var isTransitionEventRow = /* @__PURE__ */ __name((row) => row.type === "UPDATE_APPLIED" || row.type === "RECOVERED", "isTransitionEventRow");
-var toHistoryRow = /* @__PURE__ */ __name((row) => ({
-  id: row.id,
-  type: row.type,
+}, "bundleFilter");
+var sameFilter = /* @__PURE__ */ __name((left, right) => {
+  if (!isRecord4(left) || left.kind !== right.kind) return false;
+  switch (right.kind) {
+    case "all":
+      return true;
+    case "installationMovement":
+      return left.installId === right.installId;
+    case "bundle":
+      return left.platform === right.platform && left.channel === right.channel && left.type === right.type && (right.type === "RECOVERED" ? left.fromBundleId === right.fromBundleId : left.toBundleId === right.toBundleId);
+  }
+}, "sameFilter");
+var readEventCursor = /* @__PURE__ */ __name((value, filter) => {
+  const cursor = decodeCursor(value);
+  if (!isRecord4(cursor) || cursor.version !== 2 || cursor.kind !== "events" || !isRecord4(cursor.filter) || !isRecord4(cursor.after)) throw new InsightsBadRequestError("Invalid Insights cursor.");
+  if (!sameFilter(cursor.filter, filter)) throw new InsightsBadRequestError("Insights cursor does not match the requested events.");
+  if (typeof cursor.after.id !== "string" || !isUUIDv7(cursor.after.id)) throw new InsightsBadRequestError("Invalid Insights event cursor ID.");
+  return {
+    after: {
+      id: cursor.after.id,
+      receivedAtMs: requireTimestamp(cursor.after.receivedAtMs, "event cursor")
+    },
+    beforeReceivedAtMs: requireTimestamp(cursor.beforeReceivedAtMs, "event cutoff"),
+    kind: "events",
+    sinceMs: requireTimestamp(cursor.sinceMs, "event start"),
+    filter,
+    version: 2
+  };
+}, "readEventCursor");
+var readUserInstallationCursor = /* @__PURE__ */ __name((value, userId) => {
+  const cursor = decodeCursor(value);
+  if (!isRecord4(cursor) || cursor.version !== 1 || cursor.kind !== "user-installations" || cursor.userId !== userId) throw new InsightsBadRequestError("Insights cursor does not match the requested user ID.");
+  return {
+    afterInstallId: requireString(cursor.afterInstallId, "installation cursor", MAX_IDENTITY_LENGTH3),
+    kind: "user-installations",
+    userId,
+    version: 1
+  };
+}, "readUserInstallationCursor");
+var compareEventNewest = /* @__PURE__ */ __name((left, right) => right.received_at_ms - left.received_at_ms || compareInsightsText(right.id, left.id), "compareEventNewest");
+var isAfterEventCursor = /* @__PURE__ */ __name((row, after) => row.received_at_ms < after.receivedAtMs || row.received_at_ms === after.receivedAtMs && compareInsightsText(row.id, after.id) < 0, "isAfterEventCursor");
+var assertEventRows = /* @__PURE__ */ __name((rows, input) => {
+  if (rows.length > input.limit) throw new Error("Insights database returned too many event rows.");
+  for (let index = 0; index < rows.length; index += 1) {
+    const row = rows[index];
+    const previous = rows[index - 1];
+    if (!row || typeof row.id !== "string" || !isUUIDv7(row.id) || !Number.isSafeInteger(row.received_at_ms) || row.received_at_ms >= input.beforeReceivedAtMs || row.received_at_ms < input.sinceMs || previous !== void 0 && compareEventNewest(previous, row) >= 0 || input.after !== void 0 && !isAfterEventCursor(row, input.after) || input.filter.kind === "installationMovement" && (row.install_id !== input.filter.installId || !isInsightsMovementEvent(row)) || input.filter.kind === "bundle" && (row.platform !== input.filter.platform || row.channel !== input.filter.channel || row.type !== input.filter.type || (input.filter.type === "RECOVERED" ? row.from_bundle_id !== input.filter.fromBundleId : row.to_bundle_id !== input.filter.toBundleId))) throw new Error("Insights database returned invalid event rows.");
+  }
+}, "assertEventRows");
+var toEventHistoryRow = /* @__PURE__ */ __name((row) => ({
+  appVersion: row.app_version,
+  channel: row.channel,
+  cohort: row.cohort,
   fromBundleId: row.from_bundle_id,
+  id: row.id,
+  installId: row.install_id,
+  platform: row.platform,
+  receivedAtMs: row.received_at_ms,
   toBundleId: row.to_bundle_id,
-  username: row.username,
+  type: row.type,
   userId: row.user_id,
-  platform: row.platform,
+  username: row.username
+}), "toEventHistoryRow");
+var toInstallationRow = /* @__PURE__ */ __name((row) => ({
   appVersion: row.app_version,
   channel: row.channel,
   cohort: row.cohort,
-  receivedAtMs: row.received_at_ms
-}), "toHistoryRow");
-var isInstalledForBundle = /* @__PURE__ */ __name((row, bundleId) => row.type === "UPDATE_APPLIED" && row.to_bundle_id === bundleId, "isInstalledForBundle");
-var isRecoveredFromBundle = /* @__PURE__ */ __name((row, bundleId) => row.type === "RECOVERED" && row.from_bundle_id === bundleId, "isRecoveredFromBundle");
-var countDistinctInstallations = /* @__PURE__ */ __name((rows) => new Set(rows.map(({ install_id }) => install_id)).size, "countDistinctInstallations");
-var getInsightsResult = /* @__PURE__ */ __name(async (persistence, bundleId, window, limit, offset) => {
-  const scope = {
-    persistence,
-    cutoffMs: Date.now()
+  installId: row.install_id,
+  lastKnownBundleId: row.to_bundle_id,
+  latestStatus: row.type,
+  platform: row.platform,
+  receivedAtMs: row.received_at_ms,
+  userId: row.user_id,
+  username: row.username
+}), "toInstallationRow");
+var pageEventRows = /* @__PURE__ */ __name(async (model, input, filter, map) => {
+  const limit = readLimit(input.limit);
+  const cursor = input.cursor === void 0 ? void 0 : readEventCursor(input.cursor, filter);
+  const beforeReceivedAtMs = cursor?.beforeReceivedAtMs ?? (input.beforeReceivedAtMs === void 0 ? Date.now() : requireTimestamp(input.beforeReceivedAtMs, "event cutoff"));
+  if (cursor !== void 0 && input.beforeReceivedAtMs !== void 0 && input.beforeReceivedAtMs !== beforeReceivedAtMs) throw new InsightsBadRequestError("Insights cursor does not match the requested event cutoff.");
+  const sinceMs = cursor?.sinceMs ?? (input.sinceMs === void 0 ? 0 : requireTimestamp(input.sinceMs, "event start"));
+  if (sinceMs > beforeReceivedAtMs || input.sinceMs !== void 0 && input.sinceMs !== sinceMs || cursor !== void 0 && (cursor.after.receivedAtMs < sinceMs || cursor.after.receivedAtMs >= beforeReceivedAtMs)) throw new InsightsBadRequestError("Insights cursor or range does not match the requested event start.");
+  const databaseInput = {
+    filter,
+    sinceMs,
+    beforeReceivedAtMs,
+    ...cursor === void 0 ? {} : { after: cursor.after },
+    limit: limit + 1
   };
-  const rows = (await materializeRowsForWindow(scope, window)).filter(isTransitionEventRow);
-  const installedRows = rows.filter((row) => isInstalledForBundle(row, bundleId));
-  const recoveredRows = rows.filter((row) => isRecoveredFromBundle(row, bundleId));
-  const installed = collectEventActivity({
-    rows: installedRows,
-    window,
-    cutoffMs: scope.cutoffMs
-  });
-  const recovered = collectEventActivity({
-    rows: recoveredRows,
-    window,
-    cutoffMs: scope.cutoffMs
-  });
-  const recentRows = [...installedRows, ...recoveredRows].sort(compareEventNewest);
+  const rows = await model.listEvents(databaseInput);
+  assertEventRows(rows, databaseInput);
+  const pageRows = rows.slice(0, limit);
+  const last = pageRows.at(-1);
   return {
-    summary: {
-      installed: installed.summary,
-      recovered: recovered.summary
-    },
-    series: {
-      installed: installed.series,
-      recovered: recovered.series
-    },
-    cohorts: {
-      installed: installed.cohorts,
-      recovered: recovered.cohorts
-    },
-    recentEvents: {
-      data: recentRows.slice(offset, offset + limit).map(toHistoryRow),
-      pagination: {
-        total: recentRows.length,
-        limit,
-        offset
-      }
-    }
+    beforeReceivedAtMs,
+    data: pageRows.map(map),
+    nextCursor: rows.length > limit && last ? encodeCursor({
+      after: {
+        id: last.id,
+        receivedAtMs: last.received_at_ms
+      },
+      beforeReceivedAtMs,
+      kind: "events",
+      filter,
+      sinceMs,
+      version: 2
+    }) : null
   };
-}, "getInsightsResult");
-var getInsightsSummaries = /* @__PURE__ */ __name(async (persistence, bundleIds, window) => {
-  const normalizedBundleIds = [...new Set(bundleIds)];
-  if (normalizedBundleIds.length === 0) return [];
-  const requestedBundleIds = new Set(normalizedBundleIds);
-  const installedByBundleId = /* @__PURE__ */ new Map();
-  const recoveredByBundleId = /* @__PURE__ */ new Map();
-  const rows = (await materializeRowsForWindow({
-    persistence,
-    cutoffMs: Date.now()
-  }, window)).filter(isTransitionEventRow);
-  for (const row of rows) {
-    const bundleId = row.type === "UPDATE_APPLIED" ? row.to_bundle_id : row.from_bundle_id;
-    if (!requestedBundleIds.has(bundleId)) continue;
-    const counts = row.type === "UPDATE_APPLIED" ? installedByBundleId : recoveredByBundleId;
-    const installIds = counts.get(bundleId) ?? /* @__PURE__ */ new Set();
-    installIds.add(row.install_id);
-    counts.set(bundleId, installIds);
-  }
-  return normalizedBundleIds.map((bundleId) => ({
-    bundleId,
-    installed: installedByBundleId.get(bundleId)?.size ?? 0,
-    recovered: recoveredByBundleId.get(bundleId)?.size ?? 0
-  }));
-}, "getInsightsSummaries");
-var createInsightsProvider = /* @__PURE__ */ __name((persistence) => Object.freeze({
-  mode: "bounded",
-  maxMatchingRows: INSIGHTS_SCAN_MAX_ROWS,
+}, "pageEventRows");
+var assertInstallationRows = /* @__PURE__ */ __name((rows, input) => {
+  if (rows.length > input.limit) throw new Error("Insights database returned too many installation rows.");
+  for (let index = 0; index < rows.length; index += 1) {
+    const row = rows[index];
+    const previous = rows[index - 1];
+    if (!row || row.user_id !== input.userId || input.afterInstallId !== void 0 && compareInsightsText(row.install_id, input.afterInstallId) <= 0 || previous !== void 0 && compareInsightsText(previous.install_id, row.install_id) >= 0) throw new Error("Insights database returned invalid installation rows.");
+  }
+}, "assertInstallationRows");
+var createInsightsProvider = /* @__PURE__ */ __name((model) => Object.freeze({
   async appendBundleEvent(input) {
-    await persistence.append(createBundleEventRow(input));
+    const event = createBundleEventRow(input);
+    await model.record({
+      event,
+      installation: toInsightsInstallationRow(event)
+    });
   },
-  async getBundleEventSummary(bundleId) {
-    const rows = (await materializeEventRows({
-      persistence,
-      cutoffMs: Date.now()
-    })).filter(isTransitionEventRow);
-    return {
-      installed: countDistinctInstallations(rows.filter((row) => isInstalledForBundle(row, bundleId))),
-      recovered: countDistinctInstallations(rows.filter((row) => isRecoveredFromBundle(row, bundleId)))
+  listEvents(input) {
+    const filter = input.bundle === void 0 ? { kind: "all" } : {
+      kind: "bundle",
+      ...bundleFilter(input.bundle)
     };
+    return pageEventRows(model, input, filter, toEventHistoryRow);
   },
-  getBundleEventSummaries(bundleIds, window) {
-    return getInsightsSummaries(persistence, bundleIds, window);
+  async listInstallationEvents(input) {
+    if ("bundle" in input && input.bundle !== void 0) throw new InsightsBadRequestError("Installation movement queries cannot include a bundle filter.");
+    const installId = requireString(input.installId, "install ID", MAX_IDENTITY_LENGTH3);
+    return pageEventRows(model, input, {
+      kind: "installationMovement",
+      installId
+    }, (row) => toEventHistoryRow(row));
   },
-  getBundleEventInsights(bundleId, window, limit, offset) {
-    return getInsightsResult(persistence, bundleId, window, limit, offset);
+  async getInstallation({ installId }) {
+    const normalizedInstallId = requireString(installId, "install ID", MAX_IDENTITY_LENGTH3);
+    const rows = await model.findInstallations({ installId: normalizedInstallId });
+    const row = rows[0] ?? null;
+    if (rows.length > 1 || row !== null && row.install_id !== normalizedInstallId) throw new Error("Insights database returned an invalid installation.");
+    return row === null ? null : toInstallationRow(row);
   },
-  async getBundleEventOverview() {
-    const rows = await materializeEventRows({
-      persistence,
-      cutoffMs: Date.now()
-    });
-    const latestByInstall = /* @__PURE__ */ new Map();
-    for (const row of rows) {
-      const current = latestByInstall.get(row.install_id);
-      if (current === void 0 || compareEventNewest(row, current) < 0) latestByInstall.set(row.install_id, row);
-    }
-    const counts = /* @__PURE__ */ new Map();
-    for (const row of latestByInstall.values()) counts.set(row.to_bundle_id, (counts.get(row.to_bundle_id) ?? 0) + 1);
+  async pageInstallationsByCurrentUserId(input) {
+    const userId = requireString(input.userId, "user ID", MAX_IDENTITY_LENGTH3);
+    const limit = readLimit(input.limit);
+    const cursor = input.cursor === void 0 ? void 0 : readUserInstallationCursor(input.cursor, userId);
+    const databaseInput = {
+      userId,
+      ...cursor === void 0 ? {} : { afterInstallId: cursor.afterInstallId },
+      limit: limit + 1
+    };
+    const rows = await model.findInstallations(databaseInput);
+    assertInstallationRows(rows, databaseInput);
+    const pageRows = rows.slice(0, limit);
+    const last = pageRows.at(-1);
     return {
-      trackedInstallations: latestByInstall.size,
-      bundles: [...counts].map(([bundleId, installations]) => ({
-        bundleId,
-        installations
-      })).sort((left, right) => right.installations - left.installations || compareCodePoints2(left.bundleId, right.bundleId))
+      data: pageRows.map(toInstallationRow),
+      nextCursor: rows.length > limit && last ? encodeCursor({
+        afterInstallId: last.install_id,
+        kind: "user-installations",
+        userId,
+        version: 1
+      }) : null
     };
   },
-  async getActiveInstallationOverview(input) {
-    const asOfMs = Date.now();
-    return collectActiveInstallationOverview({
-      rows: await materializeActiveRows({
-        persistence,
-        cutoffMs: asOfMs
-      }, input.window),
-      asOfMs,
-      window: input.window,
-      ...input.userId === void 0 ? {} : { userId: input.userId }
-    });
-  },
-  async searchInstallations(query2, limit, offset) {
-    return searchEventInstallations({
-      rows: await materializeEventRows({
-        persistence,
-        cutoffMs: Date.now()
+  async getReportingOverview(input) {
+    const scope = readScope2(input);
+    const { window } = input;
+    if (!Object.hasOwn(WINDOW_MS, window)) throw new InsightsBadRequestError("Invalid reporting installation window.");
+    const beforeReceivedAtMs = Date.now();
+    const sinceMs = Math.max(0, beforeReceivedAtMs - WINDOW_MS[window]);
+    const measure = /* @__PURE__ */ __name(async (count) => {
+      const value = await count;
+      if (!Number.isSafeInteger(value) || value < 0) throw new Error("Insights database returned an invalid count.");
+      return {
+        count: value,
+        measuredAtMs: Date.now()
+      };
+    }, "measure");
+    const bundleId = input.bundleId === void 0 ? void 0 : requireString(input.bundleId, "bundle ID", MAX_EVENT_ID_LENGTH);
+    const reporting = measure(model.countInstallations({
+      ...scope,
+      sinceMs
+    }));
+    if (bundleId === void 0) return {
+      ...scope,
+      window,
+      sinceMs,
+      beforeReceivedAtMs,
+      reportingInstallations: await reporting
+    };
+    const countOutcome = /* @__PURE__ */ __name((outcome) => measure(model.countEvents({
+      filter: bundleFilter({
+        ...scope,
+        bundleId,
+        outcome
       }),
-      query: query2,
-      limit,
-      offset
-    });
-  },
-  async getInstallationHistory(installId, limit, offset) {
-    const ordered = (await materializeEventRows({
-      persistence,
-      cutoffMs: Date.now()
-    })).filter((row) => row.install_id === installId && isTransitionEventRow(row)).toSorted(compareEventNewest);
+      sinceMs,
+      beforeReceivedAtMs
+    })), "countOutcome");
+    const [reportingInstallations, bundleInstallations, appliedReports, recoveredReports, adoptedReports] = await Promise.all([
+      reporting,
+      measure(model.countInstallations({
+        ...scope,
+        sinceMs,
+        bundleId
+      })),
+      countOutcome("applied"),
+      countOutcome("recovered"),
+      countOutcome("adopted")
+    ]);
     return {
-      data: ordered.slice(offset, offset + limit).map(toHistoryRow),
-      pagination: {
-        total: ordered.length,
-        limit,
-        offset
+      ...scope,
+      window,
+      sinceMs,
+      beforeReceivedAtMs,
+      reportingInstallations,
+      bundle: {
+        bundleId,
+        reportingInstallations: bundleInstallations,
+        appliedReports,
+        recoveredReports,
+        adoptedReports
       }
     };
   }
@@ -4801,7 +5056,7 @@ var hashApiKey = /* @__PURE__ */ __name(async (apiKey) => {
   return bytesToBase64Url(new Uint8Array(digest));
 }, "hashApiKey");
 var apiKeyId = /* @__PURE__ */ __name(() => {
-  const bytes = new Uint8Array(16);
+  const bytes = /* @__PURE__ */ new Uint8Array(16);
   crypto.getRandomValues(bytes);
   return `api-${bytesToBase64Url(bytes)}`;
 }, "apiKeyId");
@@ -4838,7 +5093,7 @@ var registerApiKey = /* @__PURE__ */ __name(async (input) => {
   });
 }, "registerApiKey");
 var createApiKey = /* @__PURE__ */ __name((input) => {
-  const bytes = new Uint8Array(32);
+  const bytes = /* @__PURE__ */ new Uint8Array(32);
   crypto.getRandomValues(bytes);
   return registerApiKey({
     apiKey: bytesToBase64Url(bytes),
@@ -5267,6 +5522,8 @@ var HotUpdaterSchemaMigrationRequiredError = class extends Error {
   static {
     __name(this, "HotUpdaterSchemaMigrationRequiredError");
   }
+  adapterName;
+  currentVersion;
   constructor(adapterName, currentVersion) {
     super(currentVersion === void 0 ? `Hot Updater database schema is not initialized for ${adapterName}. Run \`hot-updater db migrate\` before using this adapter.` : unsupportedSchemaUpgradeMessage(currentVersion));
     this.adapterName = adapterName;
@@ -5297,7 +5554,7 @@ var sqlProviders = [
 var noSqlProviders = ["mongodb"];
 [...sqlProviders, ...noSqlProviders];
 function isDatabasePlugin(plugin) {
-  return typeof plugin === "object" && plugin !== null && "name" in plugin && typeof plugin.name === "string" && "models" in plugin && typeof plugin.models === "object" && plugin.models !== null && "bundles" in plugin.models && typeof plugin.models.bundles === "object" && plugin.models.bundles !== null && "findById" in plugin.models.bundles && typeof plugin.models.bundles.findById === "function" && "findMany" in plugin.models.bundles && typeof plugin.models.bundles.findMany === "function" && "count" in plugin.models.bundles && typeof plugin.models.bundles.count === "function" && "bundlePatches" in plugin.models && typeof plugin.models.bundlePatches === "object" && plugin.models.bundlePatches !== null && "findByBundleIds" in plugin.models.bundlePatches && typeof plugin.models.bundlePatches.findByBundleIds === "function" && "channels" in plugin.models && typeof plugin.models.channels === "object" && plugin.models.channels !== null && "insert" in plugin.models.channels && typeof plugin.models.channels.insert === "function" && "list" in plugin.models.channels && typeof plugin.models.channels.list === "function" && "delete" in plugin.models.channels && typeof plugin.models.channels.delete === "function" && "insights" in plugin.models && typeof plugin.models.insights === "object" && plugin.models.insights !== null && "append" in plugin.models.insights && typeof plugin.models.insights.append === "function" && "scan" in plugin.models.insights && typeof plugin.models.insights.scan === "function" && "apiKeys" in plugin.models && typeof plugin.models.apiKeys === "object" && plugin.models.apiKeys !== null && "create" in plugin.models.apiKeys && typeof plugin.models.apiKeys.create === "function" && "findByHash" in plugin.models.apiKeys && typeof plugin.models.apiKeys.findByHash === "function" && "list" in plugin.models.apiKeys && typeof plugin.models.apiKeys.list === "function" && "revoke" in plugin.models.apiKeys && typeof plugin.models.apiKeys.revoke === "function" && "commit" in plugin && typeof plugin.commit === "function" && (!("dispose" in plugin) || plugin.dispose === void 0 || typeof plugin.dispose === "function");
+  return typeof plugin === "object" && plugin !== null && "name" in plugin && typeof plugin.name === "string" && "models" in plugin && typeof plugin.models === "object" && plugin.models !== null && "bundles" in plugin.models && typeof plugin.models.bundles === "object" && plugin.models.bundles !== null && "findById" in plugin.models.bundles && typeof plugin.models.bundles.findById === "function" && "findMany" in plugin.models.bundles && typeof plugin.models.bundles.findMany === "function" && "count" in plugin.models.bundles && typeof plugin.models.bundles.count === "function" && "bundlePatches" in plugin.models && typeof plugin.models.bundlePatches === "object" && plugin.models.bundlePatches !== null && "findByBundleIds" in plugin.models.bundlePatches && typeof plugin.models.bundlePatches.findByBundleIds === "function" && "channels" in plugin.models && typeof plugin.models.channels === "object" && plugin.models.channels !== null && "insert" in plugin.models.channels && typeof plugin.models.channels.insert === "function" && "list" in plugin.models.channels && typeof plugin.models.channels.list === "function" && "delete" in plugin.models.channels && typeof plugin.models.channels.delete === "function" && "insights" in plugin.models && typeof plugin.models.insights === "object" && plugin.models.insights !== null && "record" in plugin.models.insights && typeof plugin.models.insights.record === "function" && "listEvents" in plugin.models.insights && typeof plugin.models.insights.listEvents === "function" && "findInstallations" in plugin.models.insights && typeof plugin.models.insights.findInstallations === "function" && "countEvents" in plugin.models.insights && typeof plugin.models.insights.countEvents === "function" && "countInstallations" in plugin.models.insights && typeof plugin.models.insights.countInstallations === "function" && "apiKeys" in plugin.models && typeof plugin.models.apiKeys === "object" && plugin.models.apiKeys !== null && "create" in plugin.models.apiKeys && typeof plugin.models.apiKeys.create === "function" && "findByHash" in plugin.models.apiKeys && typeof plugin.models.apiKeys.findByHash === "function" && "list" in plugin.models.apiKeys && typeof plugin.models.apiKeys.list === "function" && "revoke" in plugin.models.apiKeys && typeof plugin.models.apiKeys.revoke === "function" && "commit" in plugin && typeof plugin.commit === "function" && (!("dispose" in plugin) || plugin.dispose === void 0 || typeof plugin.dispose === "function");
 }
 __name(isDatabasePlugin, "isDatabasePlugin");
 
@@ -5401,27 +5658,41 @@ var hotUpdaterCoreMetadata = /* @__PURE__ */ Symbol.for("@hot-updater/server/cor
 function createHotUpdaterCore(options) {
   for (const key of ["authorityId", "catalogId"]) if (Object.hasOwn(options, key)) throw new TypeError(`Remove ${key} from createHotUpdater options. Catalog identity is managed internally.`);
   const database = options.database;
-  const { downloadStorageObject, readStorageText, resolveFileUrl } = createStorageAccess((options.storage ?? []).map((storage) => {
+  const storagePlugins = (options.storage ?? []).map((storage) => {
     assertStorageOperations(storage, ["get", "getDownloadUrl"]);
     return storage;
-  }));
+  });
+  const { downloadStorageObject, readStorageText, resolveFileUrl } = createStorageAccess(storagePlugins);
   const adapterCapabilities = database;
   if (!isDatabasePlugin(database)) throw new Error("@hot-updater/server only supports database plugins.");
   const plugin = database;
-  const assertSchemaReady = createSchemaReadinessChecker(adapterCapabilities.adapterName ?? plugin.name, adapterCapabilities.createMigrator);
+  const adapterName = adapterCapabilities.adapterName ?? plugin.name;
+  const assertSchemaReady = createSchemaReadinessChecker(adapterName, adapterCapabilities.createMigrator);
   const core = createDatabasePluginCore(plugin, resolveFileUrl, {
     beforeOperation: assertSchemaReady,
     readStorageText
   });
   const clientAccess = normalizeClientAccess(options.clientAccess);
   const insights = createInsightsProvider({
-    async append(row) {
+    async record(input) {
+      await assertSchemaReady();
+      return plugin.models.insights.record(input);
+    },
+    async listEvents(input) {
       await assertSchemaReady();
-      return plugin.models.insights.append(row);
+      return plugin.models.insights.listEvents(input);
     },
-    async scan(input) {
+    async findInstallations(input) {
       await assertSchemaReady();
-      return plugin.models.insights.scan(input);
+      return plugin.models.insights.findInstallations(input);
+    },
+    async countInstallations(input) {
+      await assertSchemaReady();
+      return plugin.models.insights.countInstallations(input);
+    },
+    async countEvents(input) {
+      await assertSchemaReady();
+      return plugin.models.insights.countEvents(input);
     }
   });
   const apiKeys = createApiKeyManagement({
@@ -7626,7 +7897,7 @@ var InvalidD1RowError = class extends Error {
     this.model = model;
   }
 };
-var isRecord4 = /* @__PURE__ */ __name((value) => typeof value === "object" && value !== null && !Array.isArray(value), "isRecord");
+var isRecord5 = /* @__PURE__ */ __name((value) => typeof value === "object" && value !== null && !Array.isArray(value), "isRecord");
 var stringValue = /* @__PURE__ */ __name((row, field, model) => {
   const value = row[field];
   if (typeof value !== "string") throw new InvalidD1RowError(model);
@@ -7744,6 +8015,28 @@ var eventRow = /* @__PURE__ */ __name((row) => {
     received_at_ms: numberValue(row, "received_at_ms", "bundle_events")
   };
 }, "eventRow");
+var installationRow = /* @__PURE__ */ __name((row) => {
+  const type = stringValue(row, "type", "bundle_installations");
+  const platform = stringValue(row, "platform", "bundle_installations");
+  if (!["UPDATE_APPLIED", "RECOVERED", "RELEASE_ADOPTED", "UNCHANGED"].includes(
+    type
+  ) || platform !== "ios" && platform !== "android") {
+    throw new InvalidD1RowError("bundle_installations");
+  }
+  return {
+    id: stringValue(row, "id", "bundle_installations"),
+    install_id: stringValue(row, "install_id", "bundle_installations"),
+    user_id: nullableString(row, "user_id", "bundle_installations"),
+    username: nullableString(row, "username", "bundle_installations"),
+    to_bundle_id: stringValue(row, "to_bundle_id", "bundle_installations"),
+    type,
+    platform,
+    app_version: stringValue(row, "app_version", "bundle_installations"),
+    channel: stringValue(row, "channel", "bundle_installations"),
+    cohort: stringValue(row, "cohort", "bundle_installations"),
+    received_at_ms: numberValue(row, "received_at_ms", "bundle_installations")
+  };
+}, "installationRow");
 var apiKeyRow = /* @__PURE__ */ __name((row) => {
   const role = stringValue(row, "role", "api_keys");
   if (role !== "client") throw new InvalidD1RowError("api_keys");
@@ -7822,7 +8115,7 @@ var releaseCatalogRow = /* @__PURE__ */ __name((row) => {
   };
 }, "releaseCatalogRow");
 function parseD1Row(model, value) {
-  if (!isRecord4(value)) throw new InvalidD1RowError(model);
+  if (!isRecord5(value)) throw new InvalidD1RowError(model);
   switch (model) {
     case "bundles":
       return bundleRow(value);
@@ -7832,6 +8125,8 @@ function parseD1Row(model, value) {
       return channelRow(value);
     case "bundle_events":
       return eventRow(value);
+    case "bundle_installations":
+      return installationRow(value);
     case "api_keys":
       return apiKeyRow(value);
     case "releases":
@@ -7968,6 +8263,7 @@ var d1TableNames = {
   bundle_patches: "bundle_patches",
   channels: "channels",
   bundle_events: "bundle_events",
+  bundle_installations: "bundle_installations",
   api_keys: "api_keys",
   release_catalogs: "release_catalogs",
   releases: "releases"
@@ -8021,6 +8317,8 @@ var findManyD1Rows = /* @__PURE__ */ __name(async (executor, input) => {
       return rows.map((row) => parseD1Row("channels", row));
     case "bundle_events":
       return rows.map((row) => parseD1Row("bundle_events", row));
+    case "bundle_installations":
+      return rows.map((row) => parseD1Row("bundle_installations", row));
     case "api_keys":
       return rows.map((row) => parseD1Row("api_keys", row));
     case "releases":
@@ -8031,6 +8329,15 @@ var findManyD1Rows = /* @__PURE__ */ __name(async (executor, input) => {
 }, "findManyD1Rows");
 
 // src/d1Implementation.ts
+var D1ExecutionError = class extends Error {
+  static {
+    __name(this, "D1ExecutionError");
+  }
+  name = "D1ExecutionError";
+  constructor() {
+    super("D1 did not successfully execute every requested statement");
+  }
+};
 var EXPECTATION_CONFLICT_MARKER = "HOT_UPDATER_COMMIT_EXPECTATION_CONFLICT";
 var expectationGuard = /* @__PURE__ */ __name((expectations) => {
   const clauses = [];
@@ -8157,6 +8464,7 @@ var insertQuery = /* @__PURE__ */ __name((input, guard, conflictMode = "returnEx
       values = channelValues(input.data);
       break;
     case "bundle_events":
+    case "bundle_installations":
     case "api_keys":
     case "release_catalogs":
     case "releases":
@@ -8164,7 +8472,7 @@ var insertQuery = /* @__PURE__ */ __name((input, guard, conflictMode = "returnEx
       values = Object.values(input.data);
       break;
   }
-  const conflict = input.onConflict !== "ignore" ? "" : input.model === "channels" ? conflictMode === "ignore" ? " ON CONFLICT(name) DO NOTHING" : " ON CONFLICT(name) DO UPDATE SET name = excluded.name" : input.model === "api_keys" ? conflictMode === "ignore" ? " ON CONFLICT(hash) DO NOTHING" : " ON CONFLICT(hash) DO UPDATE SET hash = excluded.hash" : "";
+  const conflict = input.onConflict !== "ignore" ? "" : input.model === "channels" ? conflictMode === "ignore" ? " ON CONFLICT(name) DO NOTHING" : " ON CONFLICT(name) DO UPDATE SET name = excluded.name" : input.model === "api_keys" ? conflictMode === "ignore" ? " ON CONFLICT(hash) DO NOTHING" : " ON CONFLICT(hash) DO UPDATE SET hash = excluded.hash" : " ON CONFLICT(install_id) DO UPDATE SET install_id = excluded.install_id";
   return {
     sql: `INSERT INTO ${d1TableNames[input.model]} (${columns.join(", ")}) ${guard === void 0 ? `VALUES (${d1Placeholders(values.length)})` : `SELECT ${d1Placeholders(values.length)} WHERE ${guard.sql}`}${conflict} RETURNING *`,
     params: [...encodeD1Values(values), ...guard?.params ?? []]
@@ -8331,8 +8639,6 @@ var changeQuery = /* @__PURE__ */ __name((change, guard) => {
           ...guard.params
         ]
       };
-    case "insights":
-      return insertQuery({ model: "bundle_events", data: change.row }, guard);
     case "apiKeys":
       return change.operation === "insert" ? insertQuery(
         {
@@ -8503,6 +8809,28 @@ var deleteChannel = /* @__PURE__ */ __name(async (executor, input) => {
   return deletedRows.length > 0 ? { deleted: true } : { deleted: false, reason: "not_empty" };
 }, "deleteChannel");
 var createD1Implementation = /* @__PURE__ */ __name((executor) => ({
+  async recordInsights({ event, installation }) {
+    const columns = Object.keys(installation);
+    const eventInsert = insertQuery({ model: "bundle_events", data: event });
+    await executor.batch([
+      {
+        sql: `INSERT INTO bundle_installations (${columns.join(", ")})
+          SELECT ${d1Placeholders(columns.length)}
+          WHERE NOT EXISTS (SELECT 1 FROM bundle_events WHERE id = json_extract(?, '$'))
+          ON CONFLICT(install_id) DO UPDATE SET ${columns.filter((column) => column !== "install_id").map((column) => `${column} = excluded.${column}`).join(", ")}
+          WHERE (excluded.received_at_ms, excluded.id) >
+            (bundle_installations.received_at_ms, bundle_installations.id)`,
+        params: encodeD1Values([...Object.values(installation), event.id])
+      },
+      {
+        ...eventInsert,
+        sql: eventInsert.sql.replace(
+          " RETURNING *",
+          " ON CONFLICT(id) DO NOTHING"
+        )
+      }
+    ]);
+  },
   async create(input) {
     const query2 = insertQuery(input);
     const rows = await executor.query(query2.sql, query2.params);
@@ -8515,6 +8843,8 @@ var createD1Implementation = /* @__PURE__ */ __name((executor) => ({
         return parseD1Row("channels", rows[0]);
       case "bundle_events":
         return parseD1Row("bundle_events", rows[0]);
+      case "bundle_installations":
+        return parseD1Row("bundle_installations", rows[0]);
       case "api_keys":
         return parseD1Row("api_keys", rows[0]);
       case "releases":
@@ -8536,6 +8866,8 @@ var createD1Implementation = /* @__PURE__ */ __name((executor) => ({
         return parseD1Row("releases", rows[0]);
       case "release_catalogs":
         return parseD1Row("release_catalogs", rows[0]);
+      case "bundle_installations":
+        return parseD1Row("bundle_installations", rows[0]);
     }
   },
   async delete(input) {
@@ -8563,6 +8895,8 @@ var createD1Implementation = /* @__PURE__ */ __name((executor) => ({
         return parseD1Row("releases", rows[0]);
       case "release_catalogs":
         return parseD1Row("release_catalogs", rows[0]);
+      case "bundle_installations":
+        return parseD1Row("bundle_installations", rows[0]);
     }
   },
   findMany: /* @__PURE__ */ __name((input) => findManyD1Rows(executor, input), "findMany"),
@@ -8600,6 +8934,7 @@ var d1Database = /* @__PURE__ */ __name((database) => {
   const implementation = createD1Implementation({
     async query(sql, params) {
       const result = await database.prepare(sql).bind(...params).all();
+      if (result.success === false) throw new D1ExecutionError();
       return result.results ?? [];
     },
     async batch(statements) {
@@ -8608,6 +8943,9 @@ var d1Database = /* @__PURE__ */ __name((database) => {
           ({ sql, params }) => database.prepare(sql).bind(...params)
         )
       );
+      if (results.length !== statements.length || results.some(({ success }) => success === false)) {
+        throw new D1ExecutionError();
+      }
       return results.map(({ results: results2 }) => results2 ?? []);
     }
   });