@hot-updater/console 1.1.4 → 1.2.0-rc.1

package/.output/server/_ssr/{auth.server-DR9zc0EU.mjs → auth.server-DYS1OJ6P.mjs}

@@ -1,12 +1,14 @@
-import { n as DatabaseBundleNotFoundError, r as DatabaseRowReferencedError } from "./databaseJsonValue-Csbuzc9Q.mjs";
-import { C as isUUIDv7, D as parseReleaseCatalogScopeKey, E as normalizeRolloutCohortCount, T as normalizeCohortValue, a as RELEASE_CATALOG_FALLBACK_POLICY, b as getRolledOutNumericCohorts, c as decodeChannelKey, d as getBundlePatch, g as getNumericCohortValue, l as encodeChannelKey, m as getManifestStorageUri, n as MAX_COMPILED_CATALOG_BYTES, o as canonicalizeAppVersion, p as getManifestFileHash, r as NIL_UUID, s as createReleaseCatalogScopeKey, u as getAssetBaseStorageUri, x as isCustomCohort } from "./dist-CbQbBIw-.mjs";
-import { i as rowToBundle, n as bundleToRow, r as releaseRowToRelease, t as bundleToPatchRows } from "./databaseRows-CPphvbag.mjs";
-import { t as ReleaseManagementError } from "./releaseManagement-DFMUnDF5.mjs";
-import { n as createUUIDv7After, t as createUUIDv7 } from "./uuidv7-C88s9jWF.mjs";
-import { a as normalize, i as defineTable, n as compare, o as normalizeRange, r as defineAggregate, s as parseRange } from "./schema-BiAVyEj2.mjs";
-import { t as isRemoteDatabase } from "./databaseConfig-C5SkAyUy.mjs";
+import { n as DatabaseBundleNotFoundError, r as DatabaseRowReferencedError } from "./databaseJsonValue-kS7cvEtz.mjs";
+import { O as parseReleaseCatalogScopeKey, a as RELEASE_CATALOG_FALLBACK_POLICY, c as createReleaseCatalogScopeKey, d as getAssetBaseStorageUri, f as getBundlePatch, h as getManifestStorageUri, l as decodeChannelKey, m as getManifestFileHash, r as NIL_UUID, s as canonicalizeAppVersion, u as encodeChannelKey, w as isUUIDv7 } from "./dist-TEpM_UAD.mjs";
+import { i as rowToBundle, n as bundleToRow, r as releaseRowToRelease, t as bundleToPatchRows } from "./databaseRows-B6H8Cmgq.mjs";
+import { t as ReleaseManagementError } from "./releaseManagement-DHUux2az.mjs";
+import { n as createUUIDv7After, t as createUUIDv7 } from "./uuidv7-BIF4nb_q.mjs";
+import { i as normalizeRange } from "./version-CQ98ZBpL-CWSkTT9J.mjs";
+import { n as projectCompiledCatalog, r as projectCompiledRollbackCatalog, t as compileReleaseCatalog } from "./releaseCatalogCompiler-DLcean2k.mjs";
+import { t as isRemoteDatabase } from "./databaseConfig-B_Bg7qS5.mjs";
+import { n as defineTable, t as defineAggregate } from "./schema-ChlRtZIo.mjs";
 import { r as rangesIntersect } from "../_libs/verkit.mjs";
-//#region node_modules/.nitro/vite/services/ssr/assets/auth.server-DR9zc0EU.js
+//#region node_modules/.nitro/vite/services/ssr/assets/auth.server-DYS1OJ6P.js
 var SHA256_FILE_HASH_RE = /^[0-9a-f]{64}$/;
 var isContentAddressedAssetFileHash = (value) => {
 	return typeof value === "string" && SHA256_FILE_HASH_RE.test(value);
@@ -136,365 +138,6 @@ var getBundleArchiveStorageUri = ({ manifestStorageUri, bundleId }) => replaceSt
 function assertStorageOperations(adapter, operations) {
 	for (const operation of operations) if (typeof adapter[operation] !== "function") throw new Error(`Storage adapter "${adapter.name}" does not implement ${operation}.`);
 }
-var ReleaseCatalogCompilationError = class extends Error {
-	code;
-	constructor(code, message) {
-		super(message);
-		this.name = "ReleaseCatalogCompilationError";
-		this.code = code;
-	}
-};
-function compareBounds(left, right) {
-	return compare(left, right);
-}
-function strongerLower(current, candidate) {
-	if (current === null) return candidate;
-	const compared = compareBounds(candidate.version, current.version);
-	if (compared > 0) return candidate;
-	if (compared < 0) return current;
-	return {
-		version: current.version,
-		inclusive: current.inclusive && candidate.inclusive
-	};
-}
-function strongerUpper(current, candidate) {
-	if (current === null) return candidate;
-	const compared = compareBounds(candidate.version, current.version);
-	if (compared < 0) return candidate;
-	if (compared > 0) return current;
-	return {
-		version: current.version,
-		inclusive: current.inclusive && candidate.inclusive
-	};
-}
-function comparatorVersion(comparator) {
-	const version = comparator.version && normalize(comparator.version);
-	if (version === null) throw new ReleaseCatalogCompilationError("INVALID_TARGET_RANGE", `Invalid comparator: ${comparator.value}`);
-	return version;
-}
-function comparatorSetToInterval(comparators) {
-	let lower = null;
-	let upper = null;
-	for (const comparator of comparators) {
-		if (comparator.version === null) continue;
-		const version = comparatorVersion(comparator);
-		if (comparator.operator === "") {
-			lower = strongerLower(lower, {
-				inclusive: true,
-				version
-			});
-			upper = strongerUpper(upper, {
-				inclusive: true,
-				version
-			});
-		} else if (comparator.operator === ">") lower = strongerLower(lower, {
-			inclusive: false,
-			version
-		});
-		else if (comparator.operator === ">=") lower = strongerLower(lower, {
-			inclusive: true,
-			version
-		});
-		else if (comparator.operator === "<") upper = strongerUpper(upper, {
-			inclusive: false,
-			version
-		});
-		else if (comparator.operator === "<=") upper = strongerUpper(upper, {
-			inclusive: true,
-			version
-		});
-	}
-	if (lower !== null && upper !== null) {
-		const compared = compareBounds(lower.version, upper.version);
-		if (compared > 0 || compared === 0 && (!lower.inclusive || !upper.inclusive)) return null;
-	}
-	return {
-		lower,
-		upper
-	};
-}
-function rangeToIntervals(range) {
-	try {
-		return parseRange(range).sets.flatMap((comparators) => {
-			const interval = comparatorSetToInterval(comparators);
-			return interval === null ? [] : [interval];
-		});
-	} catch {
-		throw new ReleaseCatalogCompilationError("INVALID_TARGET_RANGE", `Invalid target app-version range: ${range}`);
-	}
-}
-function releaseDescriptor(release) {
-	return {
-		releaseId: release.id,
-		kind: release.kind,
-		bundleId: release.bundleId,
-		rolloutCohortCount: release.rolloutCohortCount,
-		targetCohorts: [...new Set(release.targetCohorts)].sort(),
-		shouldForceUpdate: release.shouldForceUpdate,
-		message: release.message
-	};
-}
-function validateReleases(releases, strategy) {
-	const enabled = releases.filter((release) => release.enabled).sort((left, right) => right.id.localeCompare(left.id));
-	const seenIds = /* @__PURE__ */ new Set();
-	for (const release of enabled) {
-		if (!isUUIDv7(release.id)) throw new ReleaseCatalogCompilationError("INVALID_RELEASE", `Release ${release.id} must use a canonical lowercase UUIDv7 ID`);
-		if (seenIds.has(release.id)) throw new ReleaseCatalogCompilationError("INVALID_RELEASE", `Duplicate Release ID: ${release.id}`);
-		seenIds.add(release.id);
-		if (release.strategy !== strategy) throw new ReleaseCatalogCompilationError("INVALID_RELEASE", `Release ${release.id} has the wrong strategy`);
-		if (release.bundleId === null) throw new ReleaseCatalogCompilationError("INVALID_RELEASE", `Release ${release.id} has no Bundle`);
-		if (release.targetCohorts.length > 100) throw new ReleaseCatalogCompilationError("TARGET_COHORT_LIMIT", `Release ${release.id} exceeds 100 target cohorts`);
-		if (strategy === "APP_VERSION" && (release.targetAppVersion === null || release.fingerprintHash !== null)) throw new ReleaseCatalogCompilationError("INVALID_RELEASE", `Release ${release.id} has an invalid app-version target`);
-		if (strategy === "FINGERPRINT" && (release.fingerprintHash === null || release.targetAppVersion !== null)) throw new ReleaseCatalogCompilationError("INVALID_RELEASE", `Release ${release.id} has an invalid fingerprint target`);
-	}
-	return enabled;
-}
-function collectFrontierReleaseIds(releases) {
-	if (releases.every((release) => normalizeRolloutCohortCount(release.rolloutCohortCount) >= 1e3)) {
-		const retained = /* @__PURE__ */ new Set();
-		const bundleIds = /* @__PURE__ */ new Set();
-		for (const release of releases) {
-			if (release.bundleId !== null && !bundleIds.has(release.bundleId)) {
-				bundleIds.add(release.bundleId);
-				retained.add(release.id);
-			}
-			if (bundleIds.size >= 11) break;
-		}
-		return retained;
-	}
-	const explicitTargetCohorts = new Set(releases.flatMap((release) => release.targetCohorts));
-	const cohortStates = [
-		void 0,
-		...Array.from({ length: 1e3 }, (_, index) => String(index + 1)),
-		...[...explicitTargetCohorts].sort(),
-		"release-catalog-non-targeted-cohort"
-	].map((cohort) => {
-		const normalized = cohort === void 0 ? void 0 : normalizeCohortValue(cohort);
-		return {
-			isCustom: normalized !== void 0 && isCustomCohort(normalized),
-			normalized,
-			numeric: normalized === void 0 ? null : getNumericCohortValue(normalized),
-			bundleIds: /* @__PURE__ */ new Set(),
-			complete: false
-		};
-	});
-	const stateIndexesByCohort = /* @__PURE__ */ new Map();
-	const fullRolloutStateIndexes = [];
-	for (const [index, state] of cohortStates.entries()) {
-		if (state.normalized !== void 0) {
-			const indexes = stateIndexesByCohort.get(state.normalized) ?? [];
-			indexes.push(index);
-			stateIndexesByCohort.set(state.normalized, indexes);
-		}
-		if (state.normalized === void 0 || state.numeric !== null || state.isCustom) fullRolloutStateIndexes.push(index);
-	}
-	const retained = /* @__PURE__ */ new Set();
-	let incompleteStateCount = cohortStates.length;
-	for (const release of releases) {
-		const rolloutCohortCount = normalizeRolloutCohortCount(release.rolloutCohortCount);
-		const eligibleStateIndexes = /* @__PURE__ */ new Set();
-		if (rolloutCohortCount >= 1e3) for (const index of fullRolloutStateIndexes) eligibleStateIndexes.add(index);
-		else if (rolloutCohortCount > 0) for (const numericCohort of getRolledOutNumericCohorts(release.id, rolloutCohortCount)) for (const index of stateIndexesByCohort.get(String(numericCohort)) ?? []) eligibleStateIndexes.add(index);
-		for (const targetCohort of new Set(release.targetCohorts.map(normalizeCohortValue))) for (const index of stateIndexesByCohort.get(targetCohort) ?? []) eligibleStateIndexes.add(index);
-		for (const index of eligibleStateIndexes) {
-			const state = cohortStates[index];
-			if (state.complete) continue;
-			if (release.bundleId !== null && !state.bundleIds.has(release.bundleId)) {
-				state.bundleIds.add(release.bundleId);
-				retained.add(release.id);
-			}
-			if (state.bundleIds.size >= 11) {
-				state.complete = true;
-				incompleteStateCount -= 1;
-			}
-		}
-		if (incompleteStateCount === 0) break;
-	}
-	return retained;
-}
-function intervalContainsSegment(interval, segment) {
-	if (interval.lower !== null) {
-		if (segment.lower === null) return false;
-		const compared = compareBounds(segment.lower.version, interval.lower.version);
-		if (compared < 0 || compared === 0 && segment.lower.inclusive && !interval.lower.inclusive) return false;
-	}
-	if (interval.upper !== null) {
-		if (segment.upper === null) return false;
-		const compared = compareBounds(segment.upper.version, interval.upper.version);
-		if (compared > 0 || compared === 0 && segment.upper.inclusive && !interval.upper.inclusive) return false;
-	}
-	return true;
-}
-function atomicVersionSegments(intervals) {
-	const endpoints = [...new Set(intervals.flatMap((interval) => [interval.lower?.version, interval.upper?.version].filter((version) => version !== void 0)))].sort(compareBounds);
-	if (endpoints.length === 0) return [{
-		lower: null,
-		upper: null
-	}];
-	const segments = [{
-		lower: null,
-		upper: {
-			inclusive: false,
-			version: endpoints[0]
-		}
-	}];
-	for (let index = 0; index < endpoints.length; index += 1) {
-		const endpoint = endpoints[index];
-		segments.push({
-			lower: {
-				inclusive: true,
-				version: endpoint
-			},
-			upper: {
-				inclusive: true,
-				version: endpoint
-			}
-		});
-		const next = endpoints[index + 1];
-		if (next !== void 0) segments.push({
-			lower: {
-				inclusive: false,
-				version: endpoint
-			},
-			upper: {
-				inclusive: false,
-				version: next
-			}
-		});
-	}
-	segments.push({
-		lower: {
-			inclusive: false,
-			version: endpoints.at(-1)
-		},
-		upper: null
-	});
-	return segments;
-}
-function sameIndexes(left, right) {
-	return left.length === right.length && left.every((value, index) => value === right[index]);
-}
-function mergeSegments(segments) {
-	const merged = [];
-	for (const segment of segments) {
-		const previous = merged.at(-1);
-		if (previous && sameIndexes(previous.releaseIndexes, segment.releaseIndexes) && sameIndexes(previous.rollbackReleaseIndexes, segment.rollbackReleaseIndexes)) merged[merged.length - 1] = {
-			...previous,
-			upper: segment.upper
-		};
-		else merged.push(segment);
-	}
-	return merged;
-}
-function compileAppVersion(releases) {
-	const ranges = /* @__PURE__ */ new Map();
-	for (const release of releases) ranges.set(release.id, rangeToIntervals(release.targetAppVersion));
-	const segmentReleases = atomicVersionSegments([...ranges.values()].flat()).map((segment) => {
-		const applicable = releases.filter((release) => ranges.get(release.id).some((range) => intervalContainsSegment(range, segment)));
-		return {
-			rollbackIds: new Set(applicable.map(({ id }) => id)),
-			segment,
-			retainedIds: collectFrontierReleaseIds(applicable)
-		};
-	});
-	const retainedIds = new Set(segmentReleases.flatMap(({ retainedIds, rollbackIds }) => [...retainedIds, ...rollbackIds]));
-	const retainedReleases = releases.filter((release) => retainedIds.has(release.id));
-	const descriptorIndex = new Map(retainedReleases.map((release, index) => [release.id, index]));
-	return {
-		envelope: {
-			fallbackPolicy: RELEASE_CATALOG_FALLBACK_POLICY,
-			schemaVersion: 1,
-			segments: mergeSegments(segmentReleases.map(({ segment, retainedIds, rollbackIds }) => ({
-				...segment,
-				releaseIndexes: releases.filter((release) => retainedIds.has(release.id)).map((release) => descriptorIndex.get(release.id)).filter((index) => index !== void 0),
-				rollbackReleaseIndexes: releases.filter((release) => rollbackIds.has(release.id)).map((release) => descriptorIndex.get(release.id)).filter((index) => index !== void 0)
-			}))).filter((segment) => segment.releaseIndexes.length > 0 || segment.rollbackReleaseIndexes.length > 0),
-			strategy: "APP_VERSION"
-		},
-		retainedReleases
-	};
-}
-function compileFingerprint(releases) {
-	const retainedIds = collectFrontierReleaseIds(releases);
-	const retainedReleases = releases;
-	return {
-		envelope: {
-			fallbackPolicy: RELEASE_CATALOG_FALLBACK_POLICY,
-			releaseIndexes: retainedReleases.map((release, index) => retainedIds.has(release.id) ? index : -1).filter((index) => index >= 0),
-			rollbackReleaseIndexes: retainedReleases.map((_, index) => index),
-			schemaVersion: 1,
-			strategy: "FINGERPRINT"
-		},
-		retainedReleases
-	};
-}
-async function sha256(value) {
-	const digest = await globalThis.crypto.subtle.digest("SHA-256", new TextEncoder().encode(value));
-	return `sha256:${[...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, "0")).join("")}`;
-}
-function canonicalStringify(value) {
-	if (value === null || typeof value !== "object") return JSON.stringify(value);
-	if (Array.isArray(value)) return `[${value.map(canonicalStringify).join(",")}]`;
-	const record = value;
-	return `{${Object.keys(record).sort().map((key) => `${JSON.stringify(key)}:${canonicalStringify(record[key])}`).join(",")}}`;
-}
-async function compileReleaseCatalog(input) {
-	const releases = validateReleases(input.releases, input.strategy);
-	const targetCohorts = new Set(releases.flatMap((release) => release.targetCohorts));
-	if (targetCohorts.size > 512) throw new ReleaseCatalogCompilationError("DISTINCT_TARGET_COHORT_LIMIT", `Scope exceeds 512 distinct target cohorts`);
-	const { envelope, retainedReleases } = input.strategy === "APP_VERSION" ? compileAppVersion(releases) : compileFingerprint(releases);
-	const payload = {
-		...envelope,
-		releaseDescriptors: retainedReleases.map(releaseDescriptor)
-	};
-	const canonicalPayload = canonicalStringify(payload);
-	const byteSize = new TextEncoder().encode(canonicalPayload).byteLength;
-	if (byteSize > 262144) throw new ReleaseCatalogCompilationError("CATALOG_OVERSIZE", `Compiled Release catalog is ${byteSize} bytes; maximum is ${MAX_COMPILED_CATALOG_BYTES}`);
-	return {
-		byteSize,
-		canonicalPayload,
-		catalogHash: await sha256(canonicalPayload),
-		diagnostics: {
-			byteSize,
-			descriptorCount: payload.releaseDescriptors.length,
-			distinctTargetCohortCount: targetCohorts.size,
-			releaseCount: releases.length,
-			segmentCount: payload.strategy === "APP_VERSION" ? payload.segments.length : 1
-		},
-		payload
-	};
-}
-function versionInSegment(version, segment) {
-	if (segment.lower !== null) {
-		const compared = compareBounds(version, segment.lower.version);
-		if (compared < 0 || compared === 0 && !segment.lower.inclusive) return false;
-	}
-	if (segment.upper !== null) {
-		const compared = compareBounds(version, segment.upper.version);
-		if (compared > 0 || compared === 0 && !segment.upper.inclusive) return false;
-	}
-	return true;
-}
-function projectCompiledCatalog(catalog, appVersion) {
-	let indexes;
-	if (catalog.strategy === "FINGERPRINT") indexes = catalog.releaseIndexes;
-	else {
-		const canonicalVersion = appVersion && canonicalizeAppVersion(appVersion);
-		if (!canonicalVersion) return [];
-		indexes = catalog.segments.find((segment) => versionInSegment(canonicalVersion, segment))?.releaseIndexes ?? [];
-	}
-	return indexes.map((index) => catalog.releaseDescriptors[index]);
-}
-function projectCompiledRollbackCatalog(catalog, appVersion) {
-	let indexes;
-	if (catalog.strategy === "FINGERPRINT") indexes = catalog.rollbackReleaseIndexes;
-	else {
-		const canonicalVersion = appVersion && canonicalizeAppVersion(appVersion);
-		if (!canonicalVersion) return [];
-		indexes = catalog.segments.find((segment) => versionInSegment(canonicalVersion, segment))?.rollbackReleaseIndexes ?? [];
-	}
-	return indexes.map((index) => catalog.releaseDescriptors[index]);
-}
 var ReleaseCatalogMutationError = class extends Error {
 	code;
 	name = "ReleaseCatalogMutationError";
@@ -957,12 +600,17 @@ var SETTINGS_TABLE = {
 var ENGINE_SCHEMA_KEY = "schema.engine";
 var CORE_SCHEMA_KEY = "schema.core";
 var stored = ({ key, expected, found }) => `"${key}" is ${found === null ? "missing" : `"${found}"`}; expected "${expected}"`;
-var settingMessage = (adapterName, { key, expected, found }) => `Hot Updater schema setting "${key}" for ${adapterName} is ${found === null ? "missing" : `"${found}"`}; expected "${expected}". Run \`hot-updater db migrate\`.`;
+/**
+* How to migrate a database the fence refused: doctor names the command for
+* it, init again for a deployment init manages, or the database's own
+* tooling in the server's project.
+*/
+var MIGRATE_SCHEMA_FIX = "Run `npx hot-updater doctor` in the project whose hot-updater.config.ts names this database: it names the command that migrates it. In a server project, `hot-updater db migrate` migrates the database its server file names.";
+var settingMessage = (adapterName, { key, expected, found }) => `Hot Updater schema setting "${key}" for ${adapterName} is ${found === null ? "missing" : `"${found}"`}; expected "${expected}". ${MIGRATE_SCHEMA_FIX}`;
 /** The plugin a `schema.<id>` setting belongs to; undefined for core's and the engine's. */
 var pluginOf = ({ key }) => key.startsWith("schema.") && key !== "schema.engine" && key !== CORE_SCHEMA_KEY ? key.slice(7) : void 0;
 var listed = (items) => items.length < 2 ? items.join("") : `${items.slice(0, -1).join(", ")} and ${items.at(-1)}`;
-/** How to create plugins' tables when the fence was given no fix. */
-var PLUGIN_TABLES_FIX = "Run `hot-updater db migrate`. A managed server runs only its provider's plugins, and rerunning `hot-updater init --provider <provider>` applies the provider's migrations. Run `hot-updater db` commands in the server's project: they load the server file named on the command line, or src/hotUpdater.* or src/db.*, and don't read hot-updater.config.ts.";
+var settingsMessage = (adapterName, settings) => `Hot Updater schema settings for ${adapterName} are not migrated: ${settings.map(stored).join(", and ")}. ${MIGRATE_SCHEMA_FIX}`;
 var pluginsMessage = (adapterName, plugins, settings, fix) => `The tables of ${plugins.length === 1 ? "plugin" : "plugins"} ${listed(plugins.map((id) => `"${id}"`))} are not migrated on ${adapterName}: schema ${settings.length === 1 ? "setting" : "settings"} ${settings.map(stored).join(", and ")}. ${fix}`;
 /** The database needs `hot-updater db migrate`, or a new database; the handler answers 503. */
 var HotUpdaterSchemaMigrationRequiredError = class extends Error {
@@ -979,7 +627,7 @@ var HotUpdaterSchemaMigrationRequiredError = class extends Error {
 	constructor(adapterName, currentVersion, setting, options) {
 		const settings = options?.settings ?? (setting === void 0 ? [] : [setting]);
 		const plugins = settings.flatMap((mismatch) => pluginOf(mismatch) ?? []);
-		super(setting === void 0 ? currentVersion === void 0 ? `Hot Updater database schema is not initialized for ${adapterName}. Run \`hot-updater db migrate\` before using this adapter.` : `Hot Updater v1 cannot migrate schema ${currentVersion} in place. Create a new empty database and run \`hot-updater db migrate\`.` : plugins.length > 0 && plugins.length === settings.length ? pluginsMessage(adapterName, plugins, settings, options?.fix ?? PLUGIN_TABLES_FIX) : settingMessage(adapterName, setting), options?.cause === void 0 ? void 0 : { cause: options.cause });
+		super(setting === void 0 ? currentVersion === void 0 ? `Hot Updater database schema is not initialized for ${adapterName}. ${MIGRATE_SCHEMA_FIX}` : `Hot Updater v1 cannot migrate schema ${currentVersion} in place. Create a new empty database and run \`hot-updater db migrate\`.` : plugins.length > 0 && plugins.length === settings.length ? pluginsMessage(adapterName, plugins, settings, options?.fix ?? MIGRATE_SCHEMA_FIX) : settings.length > 1 && !(setting.key === "schema.engine" && setting.found === null) ? settingsMessage(adapterName, settings) : settingMessage(adapterName, setting), options?.cause === void 0 ? void 0 : { cause: options.cause });
 		this.adapterName = adapterName;
 		this.currentVersion = currentVersion;
 		this.setting = setting;
@@ -1043,17 +691,37 @@ var checkSchemaFence = async (adapter, adapterName, expected, fix) => {
 };
 /** The database name a fenced adapter carries, so a server can fence its plugins' rows too. */
 var FENCED = Symbol.for("@hot-updater/server/schema-fence");
+/**
+* The adapter a fence reads its settings through and the settings it
+* expects, so a fence over it checks them with its own in one read. Another
+* key than `FENCED`, whose value another copy of plugin-core reads as the
+* name.
+*/
+var FENCED_SETTINGS = Symbol.for("@hot-updater/server/schema-fence-settings");
 /** The database name an adapter behind the schema fence reports under. */
 var fencedName = (adapter) => adapter[FENCED];
 /**
 * The adapter behind the schema fence: a process's first read or write
 * checks the settings first. Success is kept; a failure is checked again on
-* the next call.
+* the next call. A fence over another one, as a server's plugins' over
+* core's, checks the inner fence's settings with its own in that one read,
+* so its refusal lists every setting missing or different.
 */
 var withSchemaFence = (adapter, adapterName, expected, fix) => {
+	const inner = adapter[FENCED_SETTINGS];
+	const settings = inner === void 0 ? {
+		adapter,
+		expected
+	} : {
+		adapter: inner.adapter,
+		expected: {
+			...inner.expected,
+			...expected
+		}
+	};
 	let ready;
 	const fence = () => {
-		ready ??= checkSchemaFence(adapter, adapterName, expected, fix).catch((error) => {
+		ready ??= checkSchemaFence(settings.adapter, adapterName, settings.expected, fix).catch((error) => {
 			ready = void 0;
 			throw error;
 		});
@@ -1062,6 +730,7 @@ var withSchemaFence = (adapter, adapterName, expected, fix) => {
 	return {
 		...adapter,
 		[FENCED]: adapterName,
+		[FENCED_SETTINGS]: settings,
 		get: (table, keys) => fence().then(() => adapter.get(table, keys)),
 		query: (table, request) => fence().then(() => adapter.query(table, request)),
 		write: (ops) => fence().then(() => adapter.write(ops)),
@@ -1077,257 +746,375 @@ var CHANNEL_ID = {
 	maxLength: 1408,
 	ascii: true
 };
+var bundles = defineTable({
+	id: {
+		type: "string",
+		maxLength: 36
+	},
+	platform: {
+		type: "string",
+		maxLength: 16
+	},
+	git_commit_hash: {
+		type: "string",
+		maxLength: 255,
+		required: false
+	},
+	metadata: { type: "json" },
+	manifest_storage_uri: { type: "string" },
+	manifest_file_hash: { type: "string" },
+	asset_base_storage_uri: { type: "string" }
+}, {
+	key: ["id"],
+	indexes: {
+		byPlatform: {
+			eq: ["platform"],
+			sort: ["id"]
+		},
+		all: {
+			eq: [],
+			sort: ["id"]
+		}
+	}
+});
+var bundlePatches = defineTable({
+	id: {
+		type: "string",
+		maxLength: 255
+	},
+	bundle_id: {
+		type: "string",
+		maxLength: 36,
+		references: {
+			model: "bundles",
+			onDelete: "cascade"
+		}
+	},
+	base_bundle_id: {
+		type: "string",
+		maxLength: 36,
+		references: {
+			model: "bundles",
+			onDelete: "cascade"
+		}
+	},
+	base_file_hash: { type: "string" },
+	patch_file_hash: { type: "string" },
+	patch_storage_uri: { type: "string" },
+	byte_size: { type: "integer" },
+	order_index: { type: "integer" }
+}, {
+	key: ["id"],
+	indexes: {
+		pair: {
+			eq: ["bundle_id", "base_bundle_id"],
+			sort: [],
+			unique: true
+		},
+		byBundle: {
+			eq: ["bundle_id"],
+			sort: ["order_index"],
+			root: { model: "bundles" }
+		},
+		byBase: {
+			eq: ["base_bundle_id"],
+			sort: ["bundle_id"]
+		}
+	}
+});
+var releases = defineTable({
+	id: {
+		type: "string",
+		maxLength: 36
+	},
+	revision: { type: "integer" },
+	scope_key: {
+		type: "string",
+		maxLength: 2048,
+		ascii: true
+	},
+	channel_id: {
+		...CHANNEL_ID,
+		references: {
+			model: "channels",
+			onDelete: "restrict"
+		}
+	},
+	platform: {
+		type: "string",
+		maxLength: 16
+	},
+	kind: {
+		type: "string",
+		maxLength: 16
+	},
+	bundle_id: {
+		type: "string",
+		maxLength: 36,
+		required: false,
+		references: {
+			model: "bundles",
+			onDelete: "restrict"
+		}
+	},
+	strategy: {
+		type: "string",
+		maxLength: 16
+	},
+	target_app_version: {
+		type: "string",
+		required: false
+	},
+	fingerprint_hash: {
+		type: "string",
+		maxLength: 255,
+		required: false
+	},
+	enabled: { type: "boolean" },
+	should_force_update: { type: "boolean" },
+	message: {
+		type: "string",
+		required: false
+	},
+	rollout_cohort_count: { type: "integer" },
+	target_cohorts: { type: "json" },
+	operation: {
+		type: "string",
+		maxLength: 16
+	},
+	source_release_id: {
+		type: "string",
+		maxLength: 36,
+		required: false,
+		references: {
+			model: "releases",
+			onDelete: "none"
+		}
+	},
+	created_at_ms: { type: "integer" },
+	updated_at_ms: { type: "integer" }
+}, {
+	key: ["id"],
+	indexes: {
+		byScope: {
+			eq: ["scope_key"],
+			sort: ["id"],
+			root: { model: "release_catalogs" }
+		},
+		byScopeEnabled: {
+			eq: ["scope_key", "enabled"],
+			sort: ["id"],
+			root: { model: "release_catalogs" }
+		},
+		byChannelPlatform: {
+			eq: ["channel_id", "platform"],
+			sort: ["id"]
+		},
+		byChannelPlatformEnabled: {
+			eq: [
+				"channel_id",
+				"platform",
+				"enabled"
+			],
+			sort: ["id"]
+		},
+		byBundle: {
+			eq: ["bundle_id"],
+			sort: ["id"]
+		},
+		all: {
+			eq: [],
+			sort: ["id"]
+		}
+	}
+});
+/** One compiled catalog per scope; the update check reads exactly this row. */
+var releaseCatalogs = defineTable({
+	scope_key: {
+		type: "string",
+		maxLength: 2048,
+		ascii: true
+	},
+	catalog_id: {
+		type: "string",
+		maxLength: 255
+	},
+	strategy: {
+		type: "string",
+		maxLength: 16
+	},
+	channel_id: {
+		...CHANNEL_ID,
+		references: {
+			model: "channels",
+			onDelete: "none"
+		}
+	},
+	channel_key: {
+		type: "string",
+		maxLength: 1400,
+		ascii: true
+	},
+	platform: {
+		type: "string",
+		maxLength: 16
+	},
+	fingerprint_hash: {
+		type: "string",
+		maxLength: 255,
+		required: false
+	},
+	generation: { type: "integer" },
+	payload: { type: "string" },
+	catalog_hash: {
+		type: "string",
+		maxLength: 71
+	},
+	byte_size: { type: "integer" },
+	is_tombstone: { type: "boolean" },
+	updated_at_ms: { type: "integer" }
+}, {
+	key: ["scope_key"],
+	indexes: { all: {
+		eq: [],
+		sort: ["scope_key"]
+	} }
+});
+var channels = defineTable({
+	id: CHANNEL_ID,
+	name: {
+		type: "string",
+		maxLength: 255,
+		unique: true
+	}
+}, {
+	key: ["id"],
+	indexes: { all: {
+		eq: [],
+		sort: ["name"]
+	} }
+});
+/**
+* The native builds `native-build android` and `native-build ios` track, newest first
+* in each scope: a platform, a channel, and the fingerprint or app version
+* the build compiled in. `min_bundle_id` names the build's built-in bundle,
+* a `bundles` row no release publishes. Its references keep no counters, so
+* adding this table changes no existing one; a channel with builds is
+* refused deletion through `byChannel`. `build_key` is the native build key
+* of every input the artifact was built from (`nbk1:` and a SHA-256), which
+* a build with the same inputs reuses it by; a build registered without
+* one is never reused. `build_number` is the artifact's `CFBundleVersion`
+* or `versionCode`. `submitted_to`, `submitted_at_ms` and
+* `submitted_version` record the store track a build went to, when, and
+* the store's label of the build; they stay null for a build no store took.
+*/
+var nativeBuilds = defineTable({
+	id: {
+		type: "string",
+		maxLength: 36
+	},
+	scope_key: {
+		type: "string",
+		maxLength: 2048,
+		ascii: true
+	},
+	platform: {
+		type: "string",
+		maxLength: 16
+	},
+	channel_id: {
+		...CHANNEL_ID,
+		references: {
+			model: "channels",
+			onDelete: "none"
+		}
+	},
+	fingerprint_hash: {
+		type: "string",
+		maxLength: 255,
+		required: false
+	},
+	app_version: {
+		type: "string",
+		required: false
+	},
+	min_bundle_id: {
+		type: "string",
+		maxLength: 36,
+		unique: true,
+		references: {
+			model: "bundles",
+			onDelete: "none"
+		}
+	},
+	artifact_kind: {
+		type: "string",
+		maxLength: 16
+	},
+	artifact_storage_uri: { type: "string" },
+	byte_size: { type: "integer" },
+	git_commit_hash: {
+		type: "string",
+		maxLength: 255,
+		required: false
+	},
+	created_at_ms: { type: "integer" },
+	build_key: {
+		type: "string",
+		maxLength: 69,
+		ascii: true,
+		required: false
+	},
+	build_number: {
+		type: "string",
+		maxLength: 64,
+		required: false
+	},
+	submitted_to: {
+		type: "string",
+		maxLength: 16,
+		required: false
+	},
+	submitted_at_ms: {
+		type: "integer",
+		required: false
+	},
+	submitted_version: {
+		type: "string",
+		maxLength: 255,
+		required: false
+	}
+}, {
+	key: ["id"],
+	indexes: {
+		byScope: {
+			eq: ["scope_key"],
+			sort: ["id"]
+		},
+		byBuildKey: {
+			eq: ["scope_key", "build_key"],
+			sort: ["id"]
+		},
+		byChannel: {
+			eq: ["channel_id"],
+			sort: ["id"],
+			root: { model: "channels" }
+		},
+		all: {
+			eq: [],
+			sort: ["id"]
+		}
+	}
+});
 /** Core's module: always installed, never a plugin. */
 var coreModule = {
 	id: "core",
 	schema: {
-		bundles: defineTable({
-			id: {
-				type: "string",
-				maxLength: 36
-			},
-			platform: {
-				type: "string",
-				maxLength: 16
-			},
-			git_commit_hash: {
-				type: "string",
-				maxLength: 255,
-				required: false
-			},
-			metadata: { type: "json" },
-			manifest_storage_uri: { type: "string" },
-			manifest_file_hash: { type: "string" },
-			asset_base_storage_uri: { type: "string" }
-		}, {
-			key: ["id"],
-			indexes: {
-				byPlatform: {
-					eq: ["platform"],
-					sort: ["id"]
-				},
-				all: {
-					eq: [],
-					sort: ["id"]
-				}
-			}
-		}),
-		bundle_patches: defineTable({
-			id: {
-				type: "string",
-				maxLength: 255
-			},
-			bundle_id: {
-				type: "string",
-				maxLength: 36,
-				references: {
-					model: "bundles",
-					onDelete: "cascade"
-				}
-			},
-			base_bundle_id: {
-				type: "string",
-				maxLength: 36,
-				references: {
-					model: "bundles",
-					onDelete: "cascade"
-				}
-			},
-			base_file_hash: { type: "string" },
-			patch_file_hash: { type: "string" },
-			patch_storage_uri: { type: "string" },
-			byte_size: { type: "integer" },
-			order_index: { type: "integer" }
-		}, {
-			key: ["id"],
-			indexes: {
-				pair: {
-					eq: ["bundle_id", "base_bundle_id"],
-					sort: [],
-					unique: true
-				},
-				byBundle: {
-					eq: ["bundle_id"],
-					sort: ["order_index"],
-					root: { model: "bundles" }
-				},
-				byBase: {
-					eq: ["base_bundle_id"],
-					sort: ["bundle_id"]
-				}
-			}
-		}),
-		releases: defineTable({
-			id: {
-				type: "string",
-				maxLength: 36
-			},
-			revision: { type: "integer" },
-			scope_key: {
-				type: "string",
-				maxLength: 2048,
-				ascii: true
-			},
-			channel_id: {
-				...CHANNEL_ID,
-				references: {
-					model: "channels",
-					onDelete: "restrict"
-				}
-			},
-			platform: {
-				type: "string",
-				maxLength: 16
-			},
-			kind: {
-				type: "string",
-				maxLength: 16
-			},
-			bundle_id: {
-				type: "string",
-				maxLength: 36,
-				required: false,
-				references: {
-					model: "bundles",
-					onDelete: "restrict"
-				}
-			},
-			strategy: {
-				type: "string",
-				maxLength: 16
-			},
-			target_app_version: {
-				type: "string",
-				required: false
-			},
-			fingerprint_hash: {
-				type: "string",
-				maxLength: 255,
-				required: false
-			},
-			enabled: { type: "boolean" },
-			should_force_update: { type: "boolean" },
-			message: {
-				type: "string",
-				required: false
-			},
-			rollout_cohort_count: { type: "integer" },
-			target_cohorts: { type: "json" },
-			operation: {
-				type: "string",
-				maxLength: 16
-			},
-			source_release_id: {
-				type: "string",
-				maxLength: 36,
-				required: false,
-				references: {
-					model: "releases",
-					onDelete: "none"
-				}
-			},
-			created_at_ms: { type: "integer" },
-			updated_at_ms: { type: "integer" }
-		}, {
-			key: ["id"],
-			indexes: {
-				byScope: {
-					eq: ["scope_key"],
-					sort: ["id"],
-					root: { model: "release_catalogs" }
-				},
-				byScopeEnabled: {
-					eq: ["scope_key", "enabled"],
-					sort: ["id"],
-					root: { model: "release_catalogs" }
-				},
-				byChannelPlatform: {
-					eq: ["channel_id", "platform"],
-					sort: ["id"]
-				},
-				byChannelPlatformEnabled: {
-					eq: [
-						"channel_id",
-						"platform",
-						"enabled"
-					],
-					sort: ["id"]
-				},
-				byBundle: {
-					eq: ["bundle_id"],
-					sort: ["id"]
-				},
-				all: {
-					eq: [],
-					sort: ["id"]
-				}
-			}
-		}),
-		release_catalogs: defineTable({
-			scope_key: {
-				type: "string",
-				maxLength: 2048,
-				ascii: true
-			},
-			catalog_id: {
-				type: "string",
-				maxLength: 255
-			},
-			strategy: {
-				type: "string",
-				maxLength: 16
-			},
-			channel_id: {
-				...CHANNEL_ID,
-				references: {
-					model: "channels",
-					onDelete: "none"
-				}
-			},
-			channel_key: {
-				type: "string",
-				maxLength: 1400,
-				ascii: true
-			},
-			platform: {
-				type: "string",
-				maxLength: 16
-			},
-			fingerprint_hash: {
-				type: "string",
-				maxLength: 255,
-				required: false
-			},
-			generation: { type: "integer" },
-			payload: { type: "string" },
-			catalog_hash: {
-				type: "string",
-				maxLength: 71
-			},
-			byte_size: { type: "integer" },
-			is_tombstone: { type: "boolean" },
-			updated_at_ms: { type: "integer" }
-		}, {
-			key: ["scope_key"],
-			indexes: { all: {
-				eq: [],
-				sort: ["scope_key"]
-			} }
-		}),
-		channels: defineTable({
-			id: CHANNEL_ID,
-			name: {
-				type: "string",
-				maxLength: 255,
-				unique: true
-			}
-		}, {
-			key: ["id"],
-			indexes: { all: {
-				eq: [],
-				sort: ["name"]
-			} }
-		}),
+		bundles,
+		bundle_patches: bundlePatches,
+		releases,
+		release_catalogs: releaseCatalogs,
+		channels,
 		bundle_totals: defineAggregate({ platform_key: {
 			type: "string",
 			maxLength: 16
@@ -1338,7 +1125,8 @@ var coreModule = {
 				eq: ["platform_key"],
 				sort: []
 			} }
-		})
+		}),
+		native_builds: nativeBuilds
 	}
 };
 var encoder = new TextEncoder();
@@ -3044,9 +2832,9 @@ var createDatabaseEngine = ({ batching, now = Date.now, meter, ...options }) =>
 */
 var pluginTablesFix = (database) => {
 	const { createMigrator, generateSchema } = database;
-	const managed = "A managed server runs only its provider's plugins, and rerunning `hot-updater init --provider <provider>` applies the provider's migrations.";
+	const doctor = "Run `npx hot-updater doctor` in the project whose hot-updater.config.ts names this database: it names the command that migrates it.";
 	const serverProject = "Run `hot-updater db` commands in the server's project: they load the server file named on the command line, or src/hotUpdater.* or src/db.*, and don't read hot-updater.config.ts.";
-	return createMigrator !== void 0 ? `Run \`hot-updater db migrate\`. ${managed} ${serverProject}` : generateSchema !== void 0 ? `Run \`hot-updater db generate\` and apply the file it writes. ${managed} ${serverProject}` : managed;
+	return createMigrator !== void 0 ? `${doctor} In a server project, run \`hot-updater db migrate\`. ${serverProject}` : generateSchema !== void 0 ? `${doctor} On a database \`hot-updater init\` created, that is init again with its saved inputs; for your own server, run \`hot-updater db generate\` and apply the file it writes. ${serverProject}` : `${doctor} On a database \`hot-updater init\` created, that is init again with its saved inputs.`;
 };
 /**
 * The storage engine over a database, as a server runs it: core's tables
@@ -3098,7 +2886,7 @@ var createEngine = (database, { plugins = [], now = Date.now } = {}) => {
 		dispose: () => engine.dispose()
 	};
 };
-var HOT_UPDATER_SERVER_VERSION = "1.1.4";
+var HOT_UPDATER_SERVER_VERSION = "1.2.0-rc.1";
 /**
 * `/version` on both mounts. The admin mount also lists the ids of the
 * plugins the server runs, sorted; apps never learn which plugins a server
@@ -3533,8 +3321,8 @@ var baseBundleIdsOf = (row, range, bundleId, limit) => {
 	return ids;
 };
 var PAGE$2 = 500;
-var pick = (fields) => (row) => Object.fromEntries(fields.map((field) => [field, row[field]]));
-var toBundleRow = pick([
+var pick$1 = (fields) => (row) => Object.fromEntries(fields.map((field) => [field, row[field]]));
+var toBundleRow = pick$1([
 	"id",
 	"platform",
 	"git_commit_hash",
@@ -3543,7 +3331,7 @@ var toBundleRow = pick([
 	"manifest_file_hash",
 	"asset_base_storage_uri"
 ]);
-var toPatchRow = pick([
+var toPatchRow = pick$1([
 	"id",
 	"bundle_id",
 	"base_bundle_id",
@@ -3553,7 +3341,7 @@ var toPatchRow = pick([
 	"byte_size",
 	"order_index"
 ]);
-var toReleaseRow = pick([
+var toReleaseRow = pick$1([
 	"id",
 	"revision",
 	"scope_key",
@@ -3574,7 +3362,7 @@ var toReleaseRow = pick([
 	"created_at_ms",
 	"updated_at_ms"
 ]);
-var toCatalogRow = pick([
+var toCatalogRow = pick$1([
 	"scope_key",
 	"catalog_id",
 	"strategy",
@@ -3589,7 +3377,7 @@ var toCatalogRow = pick([
 	"is_tombstone",
 	"updated_at_ms"
 ]);
-var toChannelRow = pick(["id", "name"]);
+var toChannelRow = pick$1(["id", "name"]);
 /** Every page of one read, in order. */
 var drain = async (read) => {
 	const rows = [];
@@ -3601,6 +3389,8 @@ var drain = async (read) => {
 	} while (cursor !== void 0);
 	return rows;
 };
+/** A keyset page's range: the keys strictly after `after`, in `order`. */
+var after = (input) => input.after === void 0 ? {} : { range: (input.order ?? "asc") === "asc" ? { gt: input.after } : { lt: input.after } };
 /** Core's reads, each through one declared index or key. */
 var createCoreReads = (db, storage) => {
 	/** A bundle row's patches, exactly as many as its reference counter holds. */
@@ -3625,7 +3415,6 @@ var createCoreReads = (db, storage) => {
 			childCount: row._refs_bundle_patches_base_bundle_id ?? 0
 		};
 	};
-	const after = (input) => input.after === void 0 ? {} : { range: (input.order ?? "asc") === "asc" ? { gt: input.after } : { lt: input.after } };
 	return {
 		async getReleaseCatalog(input) {
 			const scopeKey = releaseCatalogScopeKeyOf(input);
@@ -3802,9 +3591,13 @@ var insertBundle = (tx, row) => {
 	tx.create("bundles", row);
 	countBundle(tx, row.platform, 1);
 };
-var updateBundle = (tx, current, set) => {
+/**
+* Updates a bundle; a platform change moves it between platform totals,
+* except for a native build's built-in bundle, which they never count.
+*/
+var updateBundle = (tx, current, set, { counted = true } = {}) => {
 	tx.update("bundles", current, set);
-	if (set.platform !== void 0 && set.platform !== current.platform) {
+	if (counted && set.platform !== void 0 && set.platform !== current.platform) {
 		countBundle(tx, current.platform, -1);
 		countBundle(tx, set.platform, 1);
 	}
@@ -3865,7 +3658,7 @@ var insertChannel = async (db, row) => {
 		throw error;
 	}
 };
-/** Deletes a channel no release uses: 1 read + 1 write. */
+/** Deletes a channel no release or native build uses: 1 read, 1 query, 1 write. */
 var deleteChannel = (db, id) => db.transaction(async (tx) => {
 	const row = await tx.findOne("channels", { id });
 	if (row === null) return {
@@ -3876,9 +3669,240 @@ var deleteChannel = (db, id) => db.transaction(async (tx) => {
 		deleted: false,
 		reason: "not_empty"
 	};
+	const { rows: builds } = await tx.findMany("native_builds", {
+		index: "byChannel",
+		where: { channel_id: id },
+		limit: 1
+	});
+	if (builds.length > 0) return {
+		deleted: false,
+		reason: "not_empty"
+	};
 	await tx.delete("channels", row);
 	return { deleted: true };
 });
+/** The artifacts each platform's build produces. */
+var ARTIFACT_KINDS = {
+	android: ["apk", "aab"],
+	ios: ["ipa", "app"]
+};
+/** `native_builds.scope_key`'s bound in core's schema. */
+var SCOPE_KEY_MAX_LENGTH = 2048;
+/** The `git_commit_hash` bound of `bundles` and `native_builds`. */
+var GIT_COMMIT_HASH_MAX_LENGTH = 255;
+/**
+* A native build key: `nbk1:` and a SHA-256, as the CLI computes it. The
+* format is the CLI's convention, implemented here so the registry stores
+* and looks up nothing else.
+*/
+var BUILD_KEY = /^nbk1:[0-9a-f]{64}$/;
+/** A native build or scope core cannot store or look up: the caller's input. */
+var NativeBuildInputError = class extends TypeError {
+	name = "NativeBuildInputError";
+};
+var pick = (row) => ({
+	id: row.id,
+	scope_key: row.scope_key,
+	platform: row.platform,
+	channel_id: row.channel_id,
+	fingerprint_hash: row.fingerprint_hash ?? null,
+	app_version: row.app_version ?? null,
+	min_bundle_id: row.min_bundle_id,
+	artifact_kind: row.artifact_kind,
+	artifact_storage_uri: row.artifact_storage_uri,
+	byte_size: row.byte_size,
+	git_commit_hash: row.git_commit_hash ?? null,
+	created_at_ms: row.created_at_ms,
+	build_key: row.build_key ?? null,
+	build_number: row.build_number ?? null,
+	submitted_to: row.submitted_to ?? null,
+	submitted_at_ms: row.submitted_at_ms ?? null,
+	submitted_version: row.submitted_version ?? null
+});
+/** The store track each platform's builds are submitted to. */
+var SUBMISSION_DESTINATIONS = {
+	android: "play-internal",
+	ios: "testflight"
+};
+/** `native_builds.build_number`'s bound in core's schema. */
+var BUILD_NUMBER_MAX_LENGTH = 64;
+/** `native_builds.submitted_version`'s bound in core's schema. */
+var SUBMITTED_VERSION_MAX_LENGTH = 255;
+/**
+* A native build scope's key: the Release Catalog scope key of a
+* fingerprint, or of the app-version strategy followed by the exact app
+* version the build compiled in. One key serves both strategies, so one
+* index finds the newest build of either.
+*/
+var nativeBuildScopeKey = (scope) => {
+	let scopeKey;
+	try {
+		const channelKey = encodeChannelKey(scope.channel);
+		scopeKey = scope.fingerprintHash === null ? `${createReleaseCatalogScopeKey({
+			channelKey,
+			platform: scope.platform,
+			strategy: "APP_VERSION"
+		})}:${encodeURIComponent(scope.appVersion)}` : createReleaseCatalogScopeKey({
+			channelKey,
+			fingerprintHash: scope.fingerprintHash,
+			platform: scope.platform,
+			strategy: "FINGERPRINT"
+		});
+	} catch (error) {
+		throw new NativeBuildInputError(`Invalid native build scope: ${error instanceof Error ? error.message : String(error)}.`);
+	}
+	if (scopeKey.length > SCOPE_KEY_MAX_LENGTH) throw new NativeBuildInputError(`Invalid native build scope: its key is longer than ${SCOPE_KEY_MAX_LENGTH} characters; shorten the channel or app version.`);
+	return scopeKey;
+};
+/** Whether `bundleId` is a native build's built-in bundle: one unique read. */
+var isBuiltInBundle = async (db, bundleId) => await db.findOne("native_builds", { min_bundle_id: bundleId }) !== null;
+var problemOf = ({ id, minBundleId, platform, channel, fingerprintHash, appVersion, gitCommitHash, buildKey, buildNumber, artifact }) => {
+	if (!isUUIDv7(id)) return "id must be a UUIDv7";
+	if (!isUUIDv7(minBundleId)) return "minBundleId must be the UUIDv7 a release build compiles in";
+	if (platform !== "ios" && platform !== "android") return "platform must be ios or android";
+	if (channel.trim().length === 0) return "channel is required";
+	if (gitCommitHash !== null && gitCommitHash.length > GIT_COMMIT_HASH_MAX_LENGTH) return `gitCommitHash must be at most ${GIT_COMMIT_HASH_MAX_LENGTH} characters`;
+	if (fingerprintHash === null === (appVersion === null)) return "exactly one of fingerprintHash and appVersion is required";
+	if (buildKey !== null && !BUILD_KEY.test(buildKey)) return "buildKey must be nbk1: and a SHA-256, or null";
+	if (buildNumber !== void 0 && buildNumber !== null && (buildNumber.trim().length === 0 || buildNumber.length > BUILD_NUMBER_MAX_LENGTH)) return `buildNumber must be the artifact's build number, up to ${BUILD_NUMBER_MAX_LENGTH} characters, or null`;
+	const kinds = ARTIFACT_KINDS[platform];
+	if (!kinds.includes(artifact.kind)) return `artifact.kind of an ${platform} build must be ${kinds.join(" or ")}`;
+	if (!Number.isSafeInteger(artifact.byteSize) || artifact.byteSize < 0) return "artifact.byteSize must be a byte count";
+	return null;
+};
+/** The native build registry: core's `native_builds` and the built-in bundle rows. */
+var createNativeBuildApi = (db, { now = Date.now } = {}) => ({
+	async registerNativeBuild(registration) {
+		const problem = problemOf(registration);
+		if (problem !== null) throw new NativeBuildInputError(`Invalid native build: ${problem}.`);
+		const scopeKey = nativeBuildScopeKey(registration);
+		const channelId = `channel:${encodeChannelKey(registration.channel)}`;
+		const { embeddedBundle } = registration;
+		const row = {
+			id: registration.id,
+			scope_key: scopeKey,
+			platform: registration.platform,
+			channel_id: channelId,
+			fingerprint_hash: registration.fingerprintHash,
+			app_version: registration.appVersion,
+			min_bundle_id: registration.minBundleId,
+			artifact_kind: registration.artifact.kind,
+			artifact_storage_uri: registration.artifact.storageUri,
+			byte_size: registration.artifact.byteSize,
+			git_commit_hash: registration.gitCommitHash,
+			created_at_ms: now(),
+			build_key: registration.buildKey,
+			build_number: registration.buildNumber ?? null,
+			submitted_to: null,
+			submitted_at_ms: null,
+			submitted_version: null
+		};
+		for (let attempt = 1;; attempt += 1) {
+			await insertChannel(db, {
+				id: channelId,
+				name: registration.channel
+			});
+			try {
+				await db.transaction(async (tx) => {
+					tx.create("bundles", {
+						id: registration.minBundleId,
+						platform: registration.platform,
+						git_commit_hash: registration.gitCommitHash,
+						metadata: embeddedBundle.metadata ?? {},
+						manifest_storage_uri: embeddedBundle.manifestStorageUri,
+						manifest_file_hash: embeddedBundle.manifestFileHash,
+						asset_base_storage_uri: embeddedBundle.assetBaseStorageUri
+					});
+					tx.create("native_builds", row);
+				});
+				break;
+			} catch (error) {
+				if (!(error instanceof DatabaseConstraintError)) throw error;
+				if (error.reason === "exists" || error.reason === "unique") throw new DatabaseConstraintError(error.reason, "native_builds");
+				if (attempt < 3 && error.reason === "not_found" && error.model === "channels") continue;
+				throw error;
+			}
+		}
+		return row;
+	},
+	async getNativeBuild(id) {
+		const row = await db.findOne("native_builds", { id });
+		return row === null ? null : pick(row);
+	},
+	async findNativeBuild(scope, options) {
+		const scopeKey = nativeBuildScopeKey(scope);
+		const buildKey = options?.buildKey;
+		if (buildKey !== void 0 && !BUILD_KEY.test(buildKey)) throw new NativeBuildInputError("Invalid native build key: it must be nbk1: and a SHA-256.");
+		const { rows } = buildKey === void 0 ? await db.findMany("native_builds", {
+			index: "byScope",
+			where: { scope_key: scopeKey },
+			order: "desc",
+			limit: 1
+		}) : await db.findMany("native_builds", {
+			index: "byBuildKey",
+			where: {
+				scope_key: scopeKey,
+				build_key: buildKey
+			},
+			order: "desc",
+			limit: 1
+		});
+		return rows[0] === void 0 ? null : pick(rows[0]);
+	},
+	async recordNativeBuildSubmission(id, { destination, version }) {
+		if (version.trim().length === 0 || version.length > SUBMITTED_VERSION_MAX_LENGTH) throw new NativeBuildInputError(`Invalid native build submission: version must be the store's label of the build, up to ${SUBMITTED_VERSION_MAX_LENGTH} characters.`);
+		return db.transaction(async (tx) => {
+			const row = await tx.findOne("native_builds", { id });
+			if (row === null) return null;
+			const build = pick(row);
+			if (SUBMISSION_DESTINATIONS[build.platform] !== destination) throw new NativeBuildInputError(`Invalid native build submission: an ${build.platform} build is submitted to ${SUBMISSION_DESTINATIONS[build.platform]}, not ${destination}.`);
+			const set = {
+				submitted_to: destination,
+				submitted_at_ms: now(),
+				submitted_version: version
+			};
+			tx.update("native_builds", row, set);
+			return {
+				...build,
+				...set
+			};
+		});
+	},
+	async deleteNativeBuild(id) {
+		return db.transaction(async (tx) => {
+			const row = await tx.findOne("native_builds", { id });
+			if (row === null) return {
+				deleted: false,
+				reason: "not_found"
+			};
+			await tx.delete("native_builds", row);
+			const bundle = await tx.findOne("bundles", { id: row.min_bundle_id });
+			if (bundle !== null) await tx.delete("bundles", bundle);
+			return {
+				deleted: true,
+				nativeBuild: pick(row)
+			};
+		});
+	},
+	async listNativeBuilds(input) {
+		const page = {
+			order: input.order ?? "asc",
+			limit: input.limit
+		};
+		const { rows } = input.channelId === void 0 ? await db.findMany("native_builds", {
+			index: "all",
+			where: {},
+			...page,
+			...after(input)
+		}) : await db.findMany("native_builds", {
+			index: "byChannel",
+			where: { channel_id: input.channelId },
+			...page,
+			...after(input)
+		});
+		return rows.map(pick);
+	}
+});
 var PAGE = 500;
 var fail$1 = (code, message) => {
 	throw new ReleaseCatalogMutationError(code, message);
@@ -4188,6 +4212,7 @@ var createCoreOperations = (db, { now = Date.now } = {}) => {
 			if (!("bundleId" in deployment) || platforms.has(deployment.bundleId)) continue;
 			const row = await db.findOne("bundles", { id: deployment.bundleId });
 			if (row === null) throw new DatabaseBundleNotFoundError(deployment.bundleId);
+			if (await isBuiltInBundle(db, deployment.bundleId)) throw new ReleaseManagementError("TARGET_RELEASE_INVALID", `Bundle "${deployment.bundleId}" is a native build's built-in bundle, which no release publishes.`);
 			platforms.set(deployment.bundleId, toBundleRow(row).platform);
 		}
 		const updatedAtMs = now();
@@ -4383,7 +4408,7 @@ var createCoreOperations = (db, { now = Date.now } = {}) => {
 				id
 			};
 			const { id: _id, ...set } = bundleToRow(next);
-			updateBundle(tx, current, set);
+			updateBundle(tx, current, set, { counted: set.platform === current.platform || !await isBuiltInBundle(tx, id) });
 			if (patches !== void 0) await replaceBundlePatches(tx, current, bundleToPatchRows({
 				...next,
 				patches
@@ -4394,7 +4419,9 @@ var createCoreOperations = (db, { now = Date.now } = {}) => {
 				await db.transaction(async (tx) => {
 					for (const id of new Set(ids)) {
 						const current = await tx.findOne("bundles", { id });
-						if (current !== null) await deleteBundle(tx, current);
+						if (current === null) continue;
+						if (await isBuiltInBundle(tx, id)) throw new DatabaseRowReferencedError();
+						await deleteBundle(tx, current);
 					}
 				});
 			} catch (error) {
@@ -4444,6 +4471,7 @@ var createCoreApi = (db, storage, options = {}) => {
 	return {
 		...reads,
 		...createCoreOperations(purgingCachedRoutes(db, options.onCachedRoutesChange), options),
+		...createNativeBuildApi(db, options),
 		ready: async () => {
 			await reads.listReleaseCatalogs({ limit: 1 });
 		}
@@ -4635,6 +4663,10 @@ var answer = async (operation) => {
 			code: "REFERENCED",
 			error: error.message
 		}, 409);
+		if (error instanceof DatabaseConstraintError && error.model === "native_builds") return json({
+			code: "NATIVE_BUILD_EXISTS",
+			error: "A native build with this ID or built-in bundle ID is already registered."
+		}, 409);
 		throw error;
 	}
 };
@@ -4737,6 +4769,42 @@ var bundleUpdateOf = (value, bundleId) => {
 	if (id !== void 0 && id !== bundleId) throw new HandlerBadRequestError("Bundle id mismatch");
 	return update;
 };
+var NATIVE_BUILD_ARTIFACT_KINDS = /* @__PURE__ */ new Set([
+	"apk",
+	"aab",
+	"ipa",
+	"app"
+]);
+/** A native build's scope: `fingerprintHash` or `appVersion`, never both. */
+var nativeBuildScopeOf = (url) => {
+	const params = url.searchParams;
+	const platform = platformOf(url);
+	const channel = params.get("channel");
+	const fingerprintHash = params.get("fingerprintHash");
+	const appVersion = params.get("appVersion");
+	if (platform === void 0 || !isText(channel) || fingerprintHash === null === (appVersion === null) || fingerprintHash === "" || appVersion === "") throw new HandlerBadRequestError("A native build lookup needs platform, channel, and fingerprintHash or appVersion.");
+	return fingerprintHash !== null ? {
+		platform,
+		channel,
+		fingerprintHash,
+		appVersion: null
+	} : {
+		platform,
+		channel,
+		fingerprintHash: null,
+		appVersion
+	};
+};
+/** A native build or scope core refuses: a bad request. */
+var refusingInvalid = async (operation) => {
+	try {
+		return await operation();
+	} catch (error) {
+		if (error instanceof NativeBuildInputError) throw new HandlerBadRequestError(error.message);
+		throw error;
+	}
+};
+var isNativeBuildRegistration = (value) => isRecord$1(value) && isText(value.id) && isText(value.minBundleId) && typeof value.platform === "string" && isPlatform(value.platform) && isText(value.channel) && isTextOrNull(value.fingerprintHash) && isTextOrNull(value.appVersion) && value.fingerprintHash === null !== (value.appVersion === null) && isTextOrNull(value.gitCommitHash) && isTextOrNull(value.buildKey) && (value.buildNumber === void 0 || isTextOrNull(value.buildNumber)) && isRecord$1(value.artifact) && typeof value.artifact.kind === "string" && NATIVE_BUILD_ARTIFACT_KINDS.has(value.artifact.kind) && isText(value.artifact.storageUri) && Number.isSafeInteger(value.artifact.byteSize) && value.artifact.byteSize >= 0 && isRecord$1(value.embeddedBundle) && isText(value.embeddedBundle.manifestStorageUri) && isText(value.embeddedBundle.manifestFileHash) && isText(value.embeddedBundle.assetBaseStorageUri) && (value.embeddedBundle.metadata === void 0 || isRecord$1(value.embeddedBundle.metadata));
 var scopeKeyOf = (params) => decodeMaybe(requireRouteParam(params, "scopeKey")) ?? "";
 /** Every admin route's handler, by the name `ADMIN_ROUTES` mounts it under. */
 var createAdminRouteHandlers = () => ({
@@ -4849,6 +4917,37 @@ var createAdminRouteHandlers = () => ({
 		}) });
 	}),
 	preflightReleaseCatalogRebuild: onCore(async (core, _request, params) => json({ data: await core.preflightReleaseCatalogRebuild(scopeKeyOf(params)) })),
+	registerNativeBuild: onCore(async (core, request) => {
+		const input = await body(request);
+		if (!isNativeBuildRegistration(input)) throw new HandlerBadRequestError("Invalid native build");
+		return json({ data: await refusingInvalid(() => core.registerNativeBuild(input)) }, 201);
+	}),
+	findNativeBuild: onCore(async (core, request) => {
+		const url = new URL(request.url);
+		const scope = nativeBuildScopeOf(url);
+		const buildKey = url.searchParams.get("buildKey");
+		return json({ data: await refusingInvalid(() => buildKey === null ? core.findNativeBuild(scope) : core.findNativeBuild(scope, { buildKey })) });
+	}),
+	getNativeBuild: onCore(async (core, _request, params) => json({ data: await core.getNativeBuild(requireRouteParam(params, "id")) })),
+	listNativeBuilds: onCore(async (core, request) => {
+		const url = new URL(request.url);
+		const input = keyset(url);
+		const channelId = url.searchParams.get("channelId");
+		return page(await core.listNativeBuilds({
+			...input,
+			...channelId === null ? {} : { channelId }
+		}), input, ({ id }) => id);
+	}),
+	recordNativeBuildSubmission: onCore(async (core, request, params) => {
+		const input = await body(request);
+		if (!isRecord$1(input) || input.destination !== "testflight" && input.destination !== "play-internal" || !isText(input.version)) throw new HandlerBadRequestError("A native build submission needs destination (testflight or play-internal) and version.");
+		const submission = {
+			destination: input.destination,
+			version: input.version
+		};
+		return json({ data: await refusingInvalid(() => core.recordNativeBuildSubmission(requireRouteParam(params, "id"), submission)) });
+	}),
+	deleteNativeBuild: onCore(async (core, _request, params) => json({ data: await core.deleteNativeBuild(requireRouteParam(params, "id")) })),
 	deleteBundles: onCore(async (core, request) => {
 		const { ids } = await body(request);
 		if (!Array.isArray(ids) || !ids.every((id) => typeof id === "string" && id.length > 0)) throw new HandlerBadRequestError("Bundle deletion needs ids");
@@ -4967,6 +5066,36 @@ var ADMIN_ROUTES = [
 		method: "GET",
 		path: "/base-candidates/:candidateKey",
 		handler: "findBaseCandidates"
+	},
+	{
+		method: "POST",
+		path: "/native-builds",
+		handler: "registerNativeBuild"
+	},
+	{
+		method: "GET",
+		path: "/native-builds/latest",
+		handler: "findNativeBuild"
+	},
+	{
+		method: "GET",
+		path: "/native-builds/:id",
+		handler: "getNativeBuild"
+	},
+	{
+		method: "GET",
+		path: "/native-builds",
+		handler: "listNativeBuilds"
+	},
+	{
+		method: "POST",
+		path: "/native-builds/:id/submission",
+		handler: "recordNativeBuildSubmission"
+	},
+	{
+		method: "DELETE",
+		path: "/native-builds/:id",
+		handler: "deleteNativeBuild"
 	}
 ];
 var CATALOG_CONTENT_TYPE = "application/vnd.hot-updater.release-catalog+json; version=1";
@@ -5468,20 +5597,21 @@ var assemble = (database, storage, plugins) => createHotUpdater({
 	...plugins.some((plugin) => plugin.provides?.clientAuth) ? {} : { clientAccess: "public" }
 });
 var getConsoleAuthAdapter = async () => {
-	return (await import("./auth-UP0wXs4i.mjs")).default;
+	return (await import("./auth-Z-wLddzh.mjs")).default;
 };
 var resolveConsoleConfig = async (request) => {
-	const { default: source } = await import("./config-WVX4IxSR.mjs");
+	const { default: source } = await import("./config-CjIBFhJX.mjs");
 	const config = typeof source === "function" ? await source(request) : source;
 	const { database, storage, plugins = [] } = config;
-	const gitUrl = config.console?.gitUrl === void 0 ? {} : { gitUrl: config.console.gitUrl };
+	const { gitUrl } = config.console ?? {};
+	const consoleOptions = gitUrl === void 0 ? {} : { gitUrl };
 	if (isRemoteDatabase(database)) {
 		const checked = assemble({
 			name: "memory",
 			adapter: createMemoryAdapter()
 		}, storage, plugins);
 		return {
-			...gitUrl,
+			...consoleOptions,
 			database,
 			core: database.core,
 			storage,
@@ -5490,7 +5620,7 @@ var resolveConsoleConfig = async (request) => {
 	}
 	const server = assemble(database, storage, plugins);
 	return {
-		...gitUrl,
+		...consoleOptions,
 		database,
 		core: server.core,
 		storage,