@hot-updater/firebase 1.0.0-rc.1 → 1.0.0-rc.3

package/dist/firebase/functions/index.cjs

@@ -6,7 +6,7 @@ let firebase_admin_firestore = require("firebase-admin/firestore");
 let firebase_admin_storage = require("firebase-admin/storage");
 //#endregion
 //#region ../../packages/server/dist/version.mjs
-const HOT_UPDATER_SERVER_VERSION = "1.0.0-rc.1";
+const HOT_UPDATER_SERVER_VERSION = "1.0.0-rc.2";
 //#endregion
 //#region ../../packages/server/dist/handlerVersionRoutes.mjs
 const createVersionRouteHandlers = () => ({ version: async () => Response.json({
@@ -339,6 +339,7 @@ const resolveManifestAssetStorageUri = ({ assetBaseStorageUri, assetPath, downlo
 //#endregion
 //#region ../plugin-core/dist/databasePluginCrudValidationErrors.mjs
 var DatabasePluginInputError = class extends Error {
+	code;
 	name = "DatabasePluginInputError";
 	constructor(code) {
 		super(`Invalid database plugin input: ${code}`);
@@ -493,7 +494,7 @@ function getRolledOutNumericCohorts(bundleId, rolloutCohortCount) {
 	return Array.from({ length: normalizedRolloutCount }, (_, position) => positiveMod(multiplier * position + offset, NUMERIC_COHORT_SIZE)).map((zeroBasedCohort) => zeroBasedCohort + 1).sort((left, right) => left - right);
 }
 const RELEASE_CATALOG_FALLBACK_POLICY = "BUILTIN_IF_ACTIVE_INELIGIBLE";
-const MAX_COMPILED_CATALOG_BYTES = 256 * 1024;
+const MAX_COMPILED_CATALOG_BYTES = 262144;
 const BASE64URL_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
 const MAX_CATALOG_SEGMENT_LENGTH = 255;
 function assertCatalogSegment(value, name) {
@@ -600,7 +601,7 @@ const isUUIDv7 = (value) => typeof value === "string" && UUID_V7_PATTERN.test(va
 //#endregion
 //#region ../plugin-core/dist/uuidv7.mjs
 function createUUIDv7FromTimestampHex(timestampHex) {
-	const randomBytes = new Uint8Array(10);
+	const randomBytes = /* @__PURE__ */ new Uint8Array(10);
 	crypto.getRandomValues(randomBytes);
 	const randomHex = Array.from(randomBytes).map((b) => b.toString(16).padStart(2, "0")).join("");
 	const randA = randomHex.slice(0, 3);
@@ -697,6 +698,19 @@ const databaseFields = {
 		"sdk_version",
 		"received_at_ms"
 	],
+	bundle_installations: [
+		"id",
+		"install_id",
+		"user_id",
+		"username",
+		"to_bundle_id",
+		"type",
+		"platform",
+		"app_version",
+		"channel",
+		"cohort",
+		"received_at_ms"
+	],
 	api_keys: [
 		"id",
 		"hash",
@@ -709,7 +723,7 @@ const databaseFields = {
 };
 //#endregion
 //#region ../plugin-core/dist/databasePluginCrudValidationFields.mjs
-const isRecord$2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isRecord$3 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const isChannelText = (value) => {
 	if (typeof value !== "string" || value.length === 0) return false;
 	let codePointCount = 0;
@@ -719,6 +733,8 @@ const isChannelText = (value) => {
 	}
 	return true;
 };
+const isInsightsIdentityText = (value) => typeof value === "string" && value.length > 0 && value.length <= 255;
+const isNullableInsightsIdentityText = (value) => value === null || isInsightsIdentityText(value);
 const modelValidators = {
 	bundles: {
 		id: (value) => typeof value === "string",
@@ -794,8 +810,8 @@ const modelValidators = {
 	bundle_events: {
 		id: (value) => typeof value === "string",
 		type: (value) => value === "UPDATE_APPLIED" || value === "RECOVERED" || value === "RELEASE_ADOPTED" || value === "UNCHANGED",
-		install_id: (value) => typeof value === "string",
-		user_id: (value) => value === null || typeof value === "string",
+		install_id: isInsightsIdentityText,
+		user_id: isNullableInsightsIdentityText,
 		username: (value) => value === null || typeof value === "string",
 		from_bundle_id: (value) => value === null || typeof value === "string",
 		from_release_id: (value) => value === null || typeof value === "string",
@@ -810,6 +826,19 @@ const modelValidators = {
 		sdk_version: (value) => value === null || typeof value === "string",
 		received_at_ms: (value) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0
 	},
+	bundle_installations: {
+		id: (value) => typeof value === "string",
+		install_id: isInsightsIdentityText,
+		user_id: isNullableInsightsIdentityText,
+		username: (value) => value === null || typeof value === "string",
+		to_bundle_id: (value) => typeof value === "string",
+		type: (value) => value === "UPDATE_APPLIED" || value === "RECOVERED" || value === "RELEASE_ADOPTED" || value === "UNCHANGED",
+		platform: (value) => value === "ios" || value === "android",
+		app_version: (value) => typeof value === "string",
+		channel: (value) => typeof value === "string",
+		cohort: (value) => typeof value === "string",
+		received_at_ms: (value) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0
+	},
 	api_keys: {
 		id: (value) => typeof value === "string",
 		hash: (value) => typeof value === "string",
@@ -820,7 +849,7 @@ const modelValidators = {
 		revoked_at_ms: (value) => value === null || typeof value === "number" && Number.isSafeInteger(value) && value >= 0
 	}
 };
-const stringFields = new Set([
+const stringFields = /* @__PURE__ */ new Set([
 	"id",
 	"platform",
 	"file_hash",
@@ -861,7 +890,7 @@ const stringFields = new Set([
 	"prefix",
 	"role"
 ]);
-const numberFields = new Set([
+const numberFields = /* @__PURE__ */ new Set([
 	"archive_byte_size",
 	"byte_size",
 	"rollout_cohort_count",
@@ -874,13 +903,13 @@ const numberFields = new Set([
 	"created_at_ms",
 	"revoked_at_ms"
 ]);
-const booleanFields = new Set([
+const booleanFields = /* @__PURE__ */ new Set([
 	"should_force_update",
 	"enabled",
 	"is_tombstone"
 ]);
 const sortableFields = {
-	bundles: new Set([
+	bundles: /* @__PURE__ */ new Set([
 		"id",
 		"platform",
 		"file_hash",
@@ -897,7 +926,7 @@ const sortableFields = {
 		"manifest_file_hash",
 		"asset_base_storage_uri"
 	]),
-	bundle_patches: new Set([
+	bundle_patches: /* @__PURE__ */ new Set([
 		"id",
 		"bundle_id",
 		"base_bundle_id",
@@ -907,7 +936,7 @@ const sortableFields = {
 		"byte_size",
 		"order_index"
 	]),
-	releases: new Set([
+	releases: /* @__PURE__ */ new Set([
 		"id",
 		"revision",
 		"scope_key",
@@ -927,7 +956,7 @@ const sortableFields = {
 		"created_at_ms",
 		"updated_at_ms"
 	]),
-	release_catalogs: new Set([
+	release_catalogs: /* @__PURE__ */ new Set([
 		"scope_key",
 		"catalog_id",
 		"strategy",
@@ -941,8 +970,8 @@ const sortableFields = {
 		"is_tombstone",
 		"updated_at_ms"
 	]),
-	channels: new Set(["id", "name"]),
-	bundle_events: new Set([
+	channels: /* @__PURE__ */ new Set(["id", "name"]),
+	bundle_events: /* @__PURE__ */ new Set([
 		"id",
 		"type",
 		"install_id",
@@ -961,7 +990,20 @@ const sortableFields = {
 		"sdk_version",
 		"received_at_ms"
 	]),
-	api_keys: new Set([
+	bundle_installations: /* @__PURE__ */ new Set([
+		"id",
+		"install_id",
+		"user_id",
+		"username",
+		"to_bundle_id",
+		"type",
+		"platform",
+		"app_version",
+		"channel",
+		"cohort",
+		"received_at_ms"
+	]),
+	api_keys: /* @__PURE__ */ new Set([
 		"id",
 		"hash",
 		"name",
@@ -995,7 +1037,7 @@ const hasValidReleaseInvariants = (data) => {
 };
 const hasValidBundleEventInvariants = (data) => (data.type === "UPDATE_APPLIED" || data.type === "RECOVERED" || data.type === "RELEASE_ADOPTED") && typeof data.from_bundle_id === "string" && (data.update_strategy === "fingerprint" || data.update_strategy === "appVersion") || data.type === "UNCHANGED" && data.from_bundle_id === null && data.update_strategy === null;
 const validateCreateData = (model, data) => {
-	if (!isRecord$2(data)) throw new DatabasePluginInputError("invalid-data");
+	if (!isRecord$3(data)) throw new DatabasePluginInputError("invalid-data");
 	validateFields(model, Object.keys(data));
 	for (const field of databaseFields[model]) {
 		const validator = modelValidators[model][field];
@@ -1012,7 +1054,7 @@ const selectRow = (row, input) => {
 	return Object.fromEntries(select.map((field) => [field, Reflect.get(row, field)]));
 };
 const validateResult = (model, row, select) => {
-	if (!isRecord$2(row)) throw new DatabasePluginInputError("invalid-result");
+	if (!isRecord$3(row)) throw new DatabasePluginInputError("invalid-result");
 	const fields = select ?? databaseFields[model];
 	for (const field of fields) {
 		const validator = modelValidators[model][field];
@@ -1033,17 +1075,182 @@ const validateResult = (model, row, select) => {
 	].every((field) => Object.hasOwn(row, field)) && !hasValidBundleEventInvariants(row)) throw new DatabasePluginInputError("invalid-result");
 };
 //#endregion
+//#region ../plugin-core/dist/insightsContract.mjs
+const encoder = new TextEncoder();
+/** Exact UTF-8 byte ordering, without case folding or Unicode normalization. */
+const compareInsightsText = (left, right) => {
+	const a = encoder.encode(left);
+	const b = encoder.encode(right);
+	for (let index = 0; index < Math.min(a.length, b.length); index += 1) if (a[index] !== b[index]) return a[index] - b[index];
+	return a.length - b.length;
+};
+const isWellFormedText = (value) => {
+	for (const character of value) {
+		const point = character.codePointAt(0);
+		if (point >= 55296 && point <= 57343) return false;
+	}
+	return true;
+};
+const isIdentity = (value) => typeof value === "string" && value.length > 0 && value.length <= 255 && isWellFormedText(value);
+const isText = (value) => typeof value === "string" && value.length > 0 && isWellFormedText(value);
+const isTimestamp = (value) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
+const isLimit = (value) => isTimestamp(value) && value >= 1 && value <= 101;
+const hasOnlyKeys$1 = (value, keys) => Object.keys(value).every((key) => keys.includes(key));
+const hasScope = (value) => (value.platform === "ios" || value.platform === "android") && isText(value.channel);
+const isBundleFilter = (value, withKind = false) => {
+	if (!isRecord$3(value) || !hasScope(value)) return false;
+	const keys = [
+		"platform",
+		"channel",
+		"type",
+		...withKind ? ["kind"] : []
+	];
+	return value.type === "RECOVERED" ? isText(value.fromBundleId) && hasOnlyKeys$1(value, [...keys, "fromBundleId"]) : (value.type === "UPDATE_APPLIED" || value.type === "RELEASE_ADOPTED") && isText(value.toBundleId) && hasOnlyKeys$1(value, [...keys, "toBundleId"]);
+};
+const isEventFilter = (value) => {
+	if (!isRecord$3(value)) return false;
+	if (value.kind === "all") return hasOnlyKeys$1(value, ["kind"]);
+	if (value.kind === "installationMovement") return isIdentity(value.installId) && hasOnlyKeys$1(value, ["kind", "installId"]);
+	return value.kind === "bundle" && isBundleFilter(value, true);
+};
+const validateRow = (model, row, result = false) => {
+	try {
+		validateCreateData(model, row);
+		if (!isRecord$3(row) || typeof row.id !== "string" || !isUUIDv7(row.id) || Object.values(row).some((value) => typeof value === "string" && !isWellFormedText(value))) throw new DatabasePluginInputError("invalid-data");
+	} catch (error) {
+		if (result) throw new DatabasePluginInputError("invalid-result");
+		throw error;
+	}
+};
+/** Prepare the full latest-state candidate; the provider owns winning writes. */
+const toInsightsInstallationRow = (event) => {
+	validateRow("bundle_events", event);
+	return {
+		id: event.id,
+		install_id: event.install_id,
+		user_id: event.user_id,
+		username: event.username,
+		to_bundle_id: event.to_bundle_id,
+		type: event.type,
+		platform: event.platform,
+		app_version: event.app_version,
+		channel: event.channel,
+		cohort: event.cohort,
+		received_at_ms: event.received_at_ms
+	};
+};
+/** Release adoption and unchanged lifecycle reports are not bundle movements. */
+const isInsightsMovementEvent = (event) => event.type === "UPDATE_APPLIED" || event.type === "RECOVERED";
+const matchesInsightsEventFilter = (event, filter) => {
+	if (filter.kind === "all") return true;
+	if (filter.kind === "installationMovement") return event.install_id === filter.installId && isInsightsMovementEvent(event);
+	return event.type === filter.type && event.platform === filter.platform && event.channel === filter.channel && (filter.type === "RECOVERED" ? event.from_bundle_id === filter.fromBundleId : event.to_bundle_id === filter.toBundleId);
+};
+const invalidQuery = () => {
+	throw new DatabasePluginInputError("invalid-query");
+};
+const invalidResult = () => {
+	throw new DatabasePluginInputError("invalid-result");
+};
+const validateCount = (count) => isTimestamp(count) ? count : invalidResult();
+/** Validate custom and bundled providers at the same public boundary. */
+const createValidatedInsightsModel = (model) => ({
+	async record(input) {
+		if (!isRecord$3(input) || !hasOnlyKeys$1(input, ["event", "installation"])) throw new DatabasePluginInputError("invalid-data");
+		const expected = toInsightsInstallationRow(input.event);
+		validateRow("bundle_installations", input.installation);
+		if (Object.entries(expected).some(([field, value]) => Reflect.get(input.installation, field) !== value)) throw new DatabasePluginInputError("invalid-data");
+		await model.record(input);
+	},
+	async listEvents(input) {
+		if (!isRecord$3(input) || !hasOnlyKeys$1(input, [
+			"filter",
+			"sinceMs",
+			"beforeReceivedAtMs",
+			"after",
+			"limit"
+		]) || !isEventFilter(input.filter) || !isLimit(input.limit) || !isTimestamp(input.beforeReceivedAtMs) || input.sinceMs !== void 0 && !isTimestamp(input.sinceMs)) invalidQuery();
+		const sinceMs = input.sinceMs ?? 0;
+		if (sinceMs > input.beforeReceivedAtMs || input.after !== void 0 && (!isRecord$3(input.after) || !hasOnlyKeys$1(input.after, ["receivedAtMs", "id"]) || !isTimestamp(input.after.receivedAtMs) || typeof input.after.id !== "string" || !isUUIDv7(input.after.id) || input.after.receivedAtMs < sinceMs || input.after.receivedAtMs >= input.beforeReceivedAtMs)) invalidQuery();
+		const rows = await model.listEvents(input);
+		if (!Array.isArray(rows) || rows.length > input.limit) invalidResult();
+		let previous = input.after;
+		for (const row of rows) {
+			validateRow("bundle_events", row, true);
+			if (row.received_at_ms < sinceMs || row.received_at_ms >= input.beforeReceivedAtMs || !matchesInsightsEventFilter(row, input.filter) || previous !== void 0 && (row.received_at_ms > previous.receivedAtMs || row.received_at_ms === previous.receivedAtMs && row.id >= previous.id)) invalidResult();
+			previous = {
+				receivedAtMs: row.received_at_ms,
+				id: row.id
+			};
+		}
+		return rows;
+	},
+	async findInstallations(input) {
+		if (!isRecord$3(input)) invalidQuery();
+		if ("installId" in input) {
+			if (!hasOnlyKeys$1(input, ["installId"]) || !isIdentity(input.installId)) invalidQuery();
+		} else if (!hasOnlyKeys$1(input, [
+			"userId",
+			"afterInstallId",
+			"limit"
+		]) || !isIdentity(input.userId) || !isLimit(input.limit) || input.afterInstallId !== void 0 && !isIdentity(input.afterInstallId)) invalidQuery();
+		const rows = await model.findInstallations(input);
+		if (!Array.isArray(rows) || rows.length > ("installId" in input ? 1 : input.limit)) invalidResult();
+		let previous = "installId" in input ? void 0 : input.afterInstallId;
+		for (const row of rows) {
+			validateRow("bundle_installations", row, true);
+			if ("installId" in input ? row.install_id !== input.installId : row.user_id !== input.userId || previous !== void 0 && compareInsightsText(row.install_id, previous) <= 0) invalidResult();
+			previous = row.install_id;
+		}
+		return rows;
+	},
+	async countInstallations(input) {
+		if (!isRecord$3(input) || !hasOnlyKeys$1(input, [
+			"platform",
+			"channel",
+			"sinceMs",
+			"bundleId"
+		]) || !hasScope(input) || !isTimestamp(input.sinceMs) || input.bundleId !== void 0 && !isText(input.bundleId)) invalidQuery();
+		return validateCount(await model.countInstallations(input));
+	},
+	async countEvents(input) {
+		if (!isRecord$3(input) || !hasOnlyKeys$1(input, [
+			"filter",
+			"sinceMs",
+			"beforeReceivedAtMs"
+		]) || !isBundleFilter(input.filter) || !isTimestamp(input.sinceMs) || !isTimestamp(input.beforeReceivedAtMs) || input.sinceMs > input.beforeReceivedAtMs) invalidQuery();
+		return validateCount(await model.countEvents(input));
+	}
+});
+//#endregion
 //#region ../plugin-core/dist/databasePluginCrudValidationMutations.mjs
 const validateMutationWhere = (where) => {
 	if (where.length === 0) throw new DatabasePluginInputError("empty-mutation-where");
 };
 const validateUpdateWhere = (model, where) => {
+	if (model === "bundle_installations") {
+		const [install, receivedAt, id] = where;
+		const exactInstall = isRecord$3(install) && install.field === "install_id" && (install.operator === void 0 || install.operator === "eq") && typeof install.value === "string" && install.connector === void 0 && install.mode === void 0;
+		const receivedBefore = isRecord$3(receivedAt) && receivedAt.field === "received_at_ms" && (receivedAt.operator === "lt" || receivedAt.operator === "eq") && typeof receivedAt.value === "number" && Number.isSafeInteger(receivedAt.value) && receivedAt.value >= 0 && receivedAt.connector === void 0 && receivedAt.mode === void 0;
+		const idBefore = isRecord$3(id) && id.field === "id" && id.operator === "lt" && typeof id.value === "string" && id.connector === void 0 && id.mode === void 0;
+		if (!exactInstall || !receivedBefore || !(where.length === 2 && receivedAt.operator === "lt" || where.length === 3 && receivedAt.operator === "eq" && idBefore)) throw new DatabasePluginInputError("invalid-update-selector");
+		return;
+	}
 	const selector = where[0];
 	const primaryField = model === "release_catalogs" ? "scope_key" : "id";
-	if (where.length !== 1 || !isRecord$2(selector) || selector.field !== primaryField || selector.operator !== void 0 && selector.operator !== "eq" || typeof selector.value !== "string" || selector.connector !== void 0 || selector.mode !== void 0) throw new DatabasePluginInputError("invalid-update-selector");
+	if (where.length !== 1 || !isRecord$3(selector) || selector.field !== primaryField || selector.operator !== void 0 && selector.operator !== "eq" || typeof selector.value !== "string" || selector.connector !== void 0 || selector.mode !== void 0) throw new DatabasePluginInputError("invalid-update-selector");
+};
+const validateInsightsInstallationUpdateData = (update) => {
+	if (!isRecord$3(update)) throw new DatabasePluginInputError("invalid-data");
+	const fields = databaseFields.bundle_installations.filter((field) => field !== "install_id");
+	if (Reflect.ownKeys(update).length !== fields.length || fields.some((field) => !Object.hasOwn(update, field))) throw new DatabasePluginInputError("invalid-data");
+	for (const field of fields) {
+		const validator = modelValidators.bundle_installations[field];
+		if (!validator?.(Reflect.get(update, field))) throw new DatabasePluginInputError("invalid-data");
+	}
 };
 const validateBundleUpdateData = (update) => {
-	if (!isRecord$2(update)) throw new DatabasePluginInputError("invalid-data");
+	if (!isRecord$3(update)) throw new DatabasePluginInputError("invalid-data");
 	for (const [field, value] of Object.entries(update)) {
 		if (field === "id") throw new DatabasePluginInputError("invalid-data");
 		validateField("bundles", field);
@@ -1052,9 +1259,9 @@ const validateBundleUpdateData = (update) => {
 	}
 };
 const validateApiKeyUpdateData = (update) => {
-	if (!isRecord$2(update) || Reflect.ownKeys(update).length !== 1 || !Object.hasOwn(update, "revoked_at_ms") || !modelValidators.api_keys.revoked_at_ms(Reflect.get(update, "revoked_at_ms"))) throw new DatabasePluginInputError("invalid-data");
+	if (!isRecord$3(update) || Reflect.ownKeys(update).length !== 1 || !Object.hasOwn(update, "revoked_at_ms") || !modelValidators.api_keys.revoked_at_ms(Reflect.get(update, "revoked_at_ms"))) throw new DatabasePluginInputError("invalid-data");
 };
-const RELEASE_MUTABLE_FIELDS = new Set([
+const RELEASE_MUTABLE_FIELDS = /* @__PURE__ */ new Set([
 	"revision",
 	"scope_key",
 	"target_app_version",
@@ -1067,7 +1274,7 @@ const RELEASE_MUTABLE_FIELDS = new Set([
 	"updated_at_ms"
 ]);
 const validateReleaseUpdateData = (update) => {
-	if (!isRecord$2(update) || Reflect.ownKeys(update).length === 0) throw new DatabasePluginInputError("invalid-data");
+	if (!isRecord$3(update) || Reflect.ownKeys(update).length === 0) throw new DatabasePluginInputError("invalid-data");
 	for (const [field, value] of Object.entries(update)) {
 		if (!RELEASE_MUTABLE_FIELDS.has(field)) throw new DatabasePluginInputError("invalid-data");
 		const validator = modelValidators.releases[field];
@@ -1075,7 +1282,7 @@ const validateReleaseUpdateData = (update) => {
 	}
 };
 const validateReleaseCatalogUpdateData = (update) => {
-	if (!isRecord$2(update)) throw new DatabasePluginInputError("invalid-data");
+	if (!isRecord$3(update)) throw new DatabasePluginInputError("invalid-data");
 	const expectedFields = Object.keys(modelValidators.release_catalogs).filter((field) => field !== "scope_key");
 	if (Reflect.ownKeys(update).length !== expectedFields.length || expectedFields.some((field) => !Object.hasOwn(update, field))) throw new DatabasePluginInputError("invalid-data");
 	for (const [field, value] of Object.entries(update)) {
@@ -1155,7 +1362,7 @@ const validateWhere$1 = (model, where) => {
 	if (where === void 0) return;
 	if (!Array.isArray(where)) throw new DatabasePluginInputError("invalid-query");
 	for (const item of where) {
-		if (!isRecord$2(item)) throw new DatabasePluginInputError("invalid-query");
+		if (!isRecord$3(item)) throw new DatabasePluginInputError("invalid-query");
 		if (item.connector !== void 0 && item.connector !== "AND" && item.connector !== "OR") throw new DatabasePluginInputError("invalid-query");
 		validateWhereValue(model, item);
 	}
@@ -1172,7 +1379,7 @@ const validateOrderBy = (model, orderBy) => {
 	if (!Array.isArray(orderBy) || orderBy.length === 0) throw new DatabasePluginInputError("invalid-query");
 	const fields = /* @__PURE__ */ new Set();
 	return orderBy.map((clause) => {
-		if (!isRecord$2(clause) || typeof clause.field !== "string") throw new DatabasePluginInputError("invalid-query");
+		if (!isRecord$3(clause) || typeof clause.field !== "string") throw new DatabasePluginInputError("invalid-query");
 		validateField(model, clause.field);
 		if (!sortableFields[model].has(clause.field)) throw new DatabasePluginInputError("invalid-query");
 		if (clause.direction !== "asc" && clause.direction !== "desc") throw new DatabasePluginInputError("invalid-query");
@@ -1184,7 +1391,7 @@ const validateOrderBy = (model, orderBy) => {
 };
 const validateDistinctOn = (model, distinctOn, orderBy) => {
 	if (distinctOn === void 0) return;
-	if (!isRecord$2(distinctOn)) throw new DatabasePluginInputError("invalid-distinct");
+	if (!isRecord$3(distinctOn)) throw new DatabasePluginInputError("invalid-distinct");
 	const fields = validateDistinctFields(model, distinctOn.fields);
 	if (fields === void 0 || orderBy === void 0) throw new DatabasePluginInputError("invalid-distinct");
 	for (const [index, field] of fields.entries()) if (orderBy[index]?.field !== field) throw new DatabasePluginInputError("invalid-distinct");
@@ -1198,7 +1405,7 @@ const validateBundlePagination = (options) => {
 	if (!Number.isSafeInteger(options.limit) || options.limit <= 0 || options.page !== void 0 && (!Number.isSafeInteger(options.page) || options.page <= 0) || options.page !== void 0 && options.cursor !== void 0) throw new DatabasePluginInputError("invalid-pagination");
 	const cursor = options.cursor;
 	if (cursor === void 0) return;
-	if (!isRecord$2(cursor)) throw new DatabasePluginInputError("invalid-pagination");
+	if (!isRecord$3(cursor)) throw new DatabasePluginInputError("invalid-pagination");
 	const hasAfter = Object.hasOwn(cursor, "after");
 	if (hasAfter === Object.hasOwn(cursor, "before")) throw new DatabasePluginInputError("invalid-pagination");
 	const value = hasAfter ? cursor.after : cursor.before;
@@ -1210,7 +1417,7 @@ const createDatabasePluginCrud = (implementation) => {
 	async function create(input) {
 		validateModel(input.model);
 		validateCreateData(input.model, input.data);
-		if (input.onConflict !== void 0 && !(input.onConflict === "ignore" && (input.model === "channels" || input.model === "api_keys"))) throw new DatabasePluginInputError("invalid-operation");
+		if (input.onConflict !== void 0 && !(input.onConflict === "ignore" && (input.model === "channels" || input.model === "api_keys" || input.model === "bundle_installations"))) throw new DatabasePluginInputError("invalid-operation");
 		validateSelect(input.model, input.select);
 		const row = await implementation.create(input);
 		validateResult(input.model, row, input.select);
@@ -1224,6 +1431,7 @@ const createDatabasePluginCrud = (implementation) => {
 		if (input.model === "bundles") validateBundleUpdateData(input.update);
 		else if (input.model === "releases") validateReleaseUpdateData(input.update);
 		else if (input.model === "release_catalogs") validateReleaseCatalogUpdateData(input.update);
+		else if (input.model === "bundle_installations") validateInsightsInstallationUpdateData(input.update);
 		else if (input.model === "api_keys") validateApiKeyUpdateData(input.update);
 		else throw new DatabasePluginInputError("invalid-operation");
 		validateSelect(input.model, input.select);
@@ -1293,7 +1501,87 @@ const createTransactionDatabasePlugin = (implementation) => {
 //#region ../plugin-core/dist/createDatabasePlugin.mjs
 const PAGE_SIZE$1 = 100;
 const compareChannelRows = (left, right) => left.name < right.name ? -1 : left.name > right.name ? 1 : 0;
+const toInsightsBundleWhere = (filter) => [
+	{
+		field: "platform",
+		value: filter.platform
+	},
+	{
+		field: "channel",
+		value: filter.channel
+	},
+	{
+		field: "type",
+		value: filter.type
+	},
+	filter.type === "RECOVERED" ? {
+		field: "from_bundle_id",
+		value: filter.fromBundleId
+	} : {
+		field: "to_bundle_id",
+		value: filter.toBundleId
+	}
+];
+const toInsightsEventRanges = (filter) => {
+	if (filter.kind === "all") return [[]];
+	if (filter.kind === "bundle") return [toInsightsBundleWhere(filter)];
+	return ["UPDATE_APPLIED", "RECOVERED"].map((type) => [{
+		field: "install_id",
+		value: filter.installId
+	}, {
+		field: "type",
+		value: type
+	}]);
+};
+const listInsightsEventRange = async (crud, input, filterWhere) => {
+	const where = [...filterWhere, {
+		field: "received_at_ms",
+		operator: "gte",
+		value: input.sinceMs ?? 0
+	}];
+	const sameTimestamp = input.after === void 0 ? [] : await crud.findMany({
+		model: "bundle_events",
+		where: [
+			...filterWhere,
+			{
+				field: "received_at_ms",
+				value: input.after.receivedAtMs
+			},
+			{
+				field: "id",
+				operator: "lt",
+				value: input.after.id
+			}
+		],
+		orderBy: [{
+			field: "id",
+			direction: "desc"
+		}],
+		limit: input.limit,
+		offset: 0
+	});
+	if (sameTimestamp.length === input.limit) return sameTimestamp;
+	const older = await crud.findMany({
+		model: "bundle_events",
+		where: [...where, {
+			field: "received_at_ms",
+			operator: "lt",
+			value: input.after?.receivedAtMs ?? input.beforeReceivedAtMs
+		}],
+		orderBy: [{
+			field: "received_at_ms",
+			direction: "desc"
+		}, {
+			field: "id",
+			direction: "desc"
+		}],
+		limit: input.limit - sameTimestamp.length,
+		offset: 0
+	});
+	return [...sameTimestamp, ...older];
+};
 var DatabaseAtomicCommitUnsupportedError = class extends Error {
+	pluginName;
 	name = "DatabaseAtomicCommitUnsupportedError";
 	constructor(pluginName) {
 		super(`Database plugin "${pluginName}" cannot atomically commit changes across models.`);
@@ -1314,6 +1602,7 @@ var DatabaseRowReferencedError = class extends Error {
 	}
 };
 var DatabaseCommitConflictError = class extends Error {
+	result;
 	name = "DatabaseCommitConflictError";
 	constructor(result) {
 		super("Database commit precondition failed.");
@@ -1541,12 +1830,6 @@ const applyChange = async (database, change, changeIndex) => {
 				}
 				return;
 		}
-		case "insights":
-			await database.create({
-				model: "bundle_events",
-				data: change.row
-			});
-			return;
 		case "apiKeys": switch (change.operation) {
 			case "insert":
 				await database.create({
@@ -1618,10 +1901,10 @@ const hasOnlyKeys = (value, keys) => {
 	return Reflect.ownKeys(value).length === keys.length && keys.every((key) => Object.hasOwn(value, key));
 };
 const validateWhere = (where, field, validateValue = (value) => typeof value === "string") => {
-	if (!isRecord$2(where) || !hasOnlyKeys(where, [field]) || !validateValue(Reflect.get(where, field))) throw new DatabasePluginInputError("invalid-data");
+	if (!isRecord$3(where) || !hasOnlyKeys(where, [field]) || !validateValue(Reflect.get(where, field))) throw new DatabasePluginInputError("invalid-data");
 };
 const validateDatabaseChange = (change) => {
-	if (!isRecord$2(change)) throw new DatabasePluginInputError("invalid-data");
+	if (!isRecord$3(change)) throw new DatabasePluginInputError("invalid-data");
 	switch (change.model) {
 		case "bundles": switch (change.operation) {
 			case "insert":
@@ -1728,14 +2011,6 @@ const validateDatabaseChange = (change) => {
 				return;
 			default: throw new DatabasePluginInputError("invalid-operation");
 		}
-		case "insights":
-			if (change.operation !== "insert" || !hasOnlyKeys(change, [
-				"model",
-				"operation",
-				"row"
-			])) throw new DatabasePluginInputError("invalid-operation");
-			validateCreateData("bundle_events", change.row);
-			return;
 		case "apiKeys": switch (change.operation) {
 			case "insert":
 				if (!hasOnlyKeys(change, [
@@ -1754,7 +2029,7 @@ const validateDatabaseChange = (change) => {
 					"update"
 				])) throw new DatabasePluginInputError("invalid-data");
 				validateWhere(change.where, "id");
-				if (!isRecord$2(change.update)) throw new DatabasePluginInputError("invalid-data");
+				if (!isRecord$3(change.update)) throw new DatabasePluginInputError("invalid-data");
 				if (!hasOnlyKeys(change.update, ["revokedAtMs"])) throw new DatabasePluginInputError("invalid-data");
 				validateApiKeyUpdateData({ revoked_at_ms: change.update.revokedAtMs });
 				return;
@@ -1764,7 +2039,7 @@ const validateDatabaseChange = (change) => {
 	}
 };
 const validateDatabaseCommitExpectation = (expectation) => {
-	if (!isRecord$2(expectation)) throw new DatabasePluginInputError("invalid-data");
+	if (!isRecord$3(expectation)) throw new DatabasePluginInputError("invalid-data");
 	if (expectation.model === "releases") {
 		if (!hasOnlyKeys(expectation, [
 			"model",
@@ -1784,7 +2059,7 @@ const validateDatabaseCommitExpectation = (expectation) => {
 	throw new DatabasePluginInputError("invalid-model");
 };
 function validateDatabaseCommit(input) {
-	if (!isRecord$2(input) || !Array.isArray(input.changes) || (Object.hasOwn(input, "expectations") ? !hasOnlyKeys(input, ["changes", "expectations"]) || !Array.isArray(input.expectations) : !hasOnlyKeys(input, ["changes"]))) throw new DatabasePluginInputError("invalid-data");
+	if (!isRecord$3(input) || !Array.isArray(input.changes) || (Object.hasOwn(input, "expectations") ? !hasOnlyKeys(input, ["changes", "expectations"]) || !Array.isArray(input.expectations) : !hasOnlyKeys(input, ["changes"]))) throw new DatabasePluginInputError("invalid-data");
 	input.changes.forEach(validateDatabaseChange);
 	if (Array.isArray(input.expectations)) input.expectations.forEach(validateDatabaseCommitExpectation);
 }
@@ -2004,36 +2279,82 @@ const createDatabasePluginAdapter = (name, implementation) => {
 				}
 			},
 			insights: {
-				async append(row) {
-					await crud.create({
-						model: "bundle_events",
-						data: row
-					});
+				record: (input) => implementation.recordInsights(input),
+				async listEvents(input) {
+					const ranges = await Promise.all(toInsightsEventRanges(input.filter).map((where) => listInsightsEventRange(crud, input, where)));
+					if (ranges.length === 1) return ranges[0];
+					return ranges.flat().sort((left, right) => right.received_at_ms - left.received_at_ms || compareInsightsText(right.id, left.id)).slice(0, input.limit);
 				},
-				async scan(input) {
-					const rows = [];
-					for (let offset = 0; rows.length < input.limit; offset += PAGE_SIZE$1) {
-						const page = await crud.findMany({
-							model: "bundle_events",
+				async findInstallations(input) {
+					if ("installId" in input) {
+						const row = await crud.findOne({
+							model: "bundle_installations",
 							where: [{
+								field: "install_id",
+								value: input.installId
+							}]
+						});
+						return row === null ? [] : [row];
+					}
+					return crud.findMany({
+						model: "bundle_installations",
+						where: [{
+							field: "user_id",
+							value: input.userId
+						}, ...input.afterInstallId === void 0 ? [] : [{
+							field: "install_id",
+							operator: "gt",
+							value: input.afterInstallId
+						}]],
+						orderBy: [{
+							field: "install_id",
+							direction: "asc"
+						}],
+						limit: input.limit,
+						offset: 0
+					});
+				},
+				countInstallations(input) {
+					return crud.count({
+						model: "bundle_installations",
+						where: [
+							{
+								field: "platform",
+								value: input.platform
+							},
+							{
+								field: "channel",
+								value: input.channel
+							},
+							{
+								field: "received_at_ms",
+								operator: "gte",
+								value: input.sinceMs
+							},
+							...input.bundleId === void 0 ? [] : [{
+								field: "to_bundle_id",
+								value: input.bundleId
+							}]
+						]
+					});
+				},
+				countEvents(input) {
+					return crud.count({
+						model: "bundle_events",
+						where: [
+							...toInsightsBundleWhere(input.filter),
+							{
+								field: "received_at_ms",
+								operator: "gte",
+								value: input.sinceMs
+							},
+							{
 								field: "received_at_ms",
 								operator: "lt",
 								value: input.beforeReceivedAtMs
-							}],
-							orderBy: [{
-								field: "received_at_ms",
-								direction: "asc"
-							}, {
-								field: "id",
-								direction: "asc"
-							}],
-							limit: PAGE_SIZE$1,
-							offset
-						});
-						rows.push(...page.filter((row) => input.after === void 0 || row.received_at_ms > input.after.receivedAtMs || row.received_at_ms === input.after.receivedAtMs && row.id > input.after.id));
-						if (page.length < PAGE_SIZE$1) break;
-					}
-					return rows.slice(0, input.limit);
+							}
+						]
+					});
 				}
 			},
 			apiKeys: {
@@ -2077,7 +2398,13 @@ const createDatabasePluginAdapter = (name, implementation) => {
 		...implementation.dispose ? { dispose: implementation.dispose } : {}
 	};
 };
-const createDatabasePlugin = (options) => ({ ...options });
+const createDatabasePlugin = (options) => ({
+	...options,
+	models: {
+		...options.models,
+		insights: createValidatedInsightsModel(options.models.insights)
+	}
+});
 //#endregion
 //#region ../plugin-core/dist/createStoragePlugin.mjs
 const createStoragePlugin = (options) => ({ ...options });
@@ -2212,6 +2539,8 @@ const rowsToBundles = (bundleRows, patchRows, referencedBundleRows) => {
 //#endregion
 //#region ../plugin-core/dist/databaseClientUpdates.mjs
 var DatabasePatchUpdateUnsupportedError = class extends Error {
+	bundleId;
+	pluginName;
 	name = "DatabasePatchUpdateUnsupportedError";
 	constructor(bundleId, pluginName) {
 		super(`Database plugin "${pluginName}" cannot atomically replace patches for bundle "${bundleId}".`);
@@ -2300,7 +2629,8 @@ const hydrateRows = async (database, ownerRows) => {
 	const patchRows = await database.models.bundlePatches.findByBundleIds(ownerRows.map(({ id }) => id));
 	const ownerIds = new Set(ownerRows.map(({ id }) => id));
 	const referencedIds = [...new Set(patchRows.map(({ base_bundle_id }) => base_bundle_id).filter((id) => !ownerIds.has(id)))];
-	return rowsToBundles(ownerRows, patchRows, referencedIds.length === 0 ? [] : await loadBundleRows(database, { id: { in: referencedIds } }));
+	const referencedRows = referencedIds.length === 0 ? [] : await loadBundleRows(database, { id: { in: referencedIds } });
+	return rowsToBundles(ownerRows, patchRows, referencedRows);
 };
 const cursorIdFilter = (cursor, direction) => {
 	if (cursor?.after) return { [direction === "desc" ? "lt" : "gt"]: cursor.after };
@@ -2352,6 +2682,7 @@ const responsePage = async (database, options) => {
 //#endregion
 //#region ../plugin-core/dist/databaseClient.mjs
 var DatabaseBundleNotFoundError = class extends Error {
+	bundleId;
 	name = "DatabaseBundleNotFoundError";
 	constructor(bundleId) {
 		super(`Bundle "${bundleId}" was not found.`);
@@ -2359,6 +2690,8 @@ var DatabaseBundleNotFoundError = class extends Error {
 	}
 };
 var DatabasePatchInsertUnsupportedError = class extends Error {
+	bundleId;
+	pluginName;
 	name = "DatabasePatchInsertUnsupportedError";
 	constructor(bundleId, pluginName) {
 		super(`Database plugin "${pluginName}" cannot atomically insert patches for bundle "${bundleId}".`);
@@ -2377,12 +2710,13 @@ const insertChanges = (bundle) => [{
 }))];
 const updateChanges = (bundleId, update) => {
 	const rowUpdate = bundleUpdateToRow(update);
+	const patchesPresent = Object.hasOwn(update, "patches");
 	return [{
 		model: "bundles",
 		operation: "update",
 		where: { id: bundleId },
 		update: rowUpdate
-	}, ...Object.hasOwn(update, "patches") ? [{
+	}, ...patchesPresent ? [{
 		model: "bundlePatches",
 		operation: "delete",
 		where: { bundleId }
@@ -2455,7 +2789,7 @@ const createDatabaseClient = (plugin) => {
 	};
 };
 //#endregion
-//#region ../plugin-core/dist/node_modules/.pnpm/verkit@0.3.2/node_modules/verkit/dist/index.mjs
+//#region ../plugin-core/dist/node_modules/.pnpm/verkit@0.4.0/node_modules/verkit/dist/comparison-DenM3wCn.mjs
 const LETTER_DASH_NUMBER = "[a-zA-Z0-9-]";
 const NUMERIC_IDENTIFIER = String.raw`0|[1-9]\d*`;
 const NUMERIC_IDENTIFIER_LOOSE = String.raw`\d+`;
@@ -2492,22 +2826,9 @@ function makeSafeRegexSource(source) {
 function safeRegex(source, flags) {
 	return new RegExp(makeSafeRegexSource(source), flags);
 }
-const NUMERIC$1 = /^\d+$/;
-function compareIdentifiers(left, right) {
-	if (typeof left === "number" && typeof right === "number") return left === right ? 0 : left < right ? -1 : 1;
-	const leftNumeric = NUMERIC$1.test(String(left));
-	const rightNumeric = NUMERIC$1.test(String(right));
-	const normalizedLeft = leftNumeric ? Number(left) : left;
-	const normalizedRight = rightNumeric ? Number(right) : right;
-	return normalizedLeft === normalizedRight ? 0 : leftNumeric && !rightNumeric ? -1 : rightNumeric && !leftNumeric ? 1 : normalizedLeft < normalizedRight ? -1 : 1;
-}
 const FULL = safeRegex(`^${FULL_PLAIN}$`);
 const LOOSE = safeRegex(`^${LOOSE_PLAIN}$`);
-safeRegex(`^${PRERELEASE}$`);
-safeRegex(`^${PRERELEASE_LOOSE}$`);
-const COERCE_EXACT = safeRegex(COERCE);
-const COERCE_FULL_EXACT = safeRegex(COERCE_FULL);
-const NUMERIC = /^\d+$/;
+const NUMERIC$1 = /^\d+$/;
 function formatComparableVersion(version) {
 	const base = `${version.major}.${version.minor}.${version.patch}`;
 	return version.prerelease?.length ? `${base}-${version.prerelease.join(".")}` : base;
@@ -2528,7 +2849,7 @@ function parse(version, options = {}) {
 	if (minor > Number.MAX_SAFE_INTEGER || minor < 0) throw new TypeError(`Invalid minor version: ${match[2]}`);
 	if (patch > Number.MAX_SAFE_INTEGER || patch < 0) throw new TypeError(`Invalid patch version: ${match[3]}`);
 	const prerelease = match[4] ? match[4].split(".").map((identifier) => {
-		if (NUMERIC.test(identifier)) {
+		if (NUMERIC$1.test(identifier)) {
 			const numeric = Number(identifier);
 			if (numeric >= 0 && numeric < Number.MAX_SAFE_INTEGER) return numeric;
 		}
@@ -2549,6 +2870,15 @@ function tryParse(version, options = {}) {
 		return null;
 	}
 }
+const NUMERIC = /^\d+$/;
+function compareIdentifiers(left, right) {
+	if (typeof left === "number" && typeof right === "number") return left === right ? 0 : left < right ? -1 : 1;
+	const leftNumeric = NUMERIC.test(String(left));
+	const rightNumeric = NUMERIC.test(String(right));
+	const normalizedLeft = leftNumeric ? Number(left) : left;
+	const normalizedRight = rightNumeric ? Number(right) : right;
+	return normalizedLeft === normalizedRight ? 0 : leftNumeric && !rightNumeric ? -1 : rightNumeric && !leftNumeric ? 1 : normalizedLeft < normalizedRight ? -1 : 1;
+}
 function compareMainParsed(left, right) {
 	return left.major === right.major ? left.minor === right.minor ? left.patch === right.patch ? 0 : left.patch < right.patch ? -1 : 1 : left.minor < right.minor ? -1 : 1 : left.major < right.major ? -1 : 1;
 }
@@ -2570,26 +2900,15 @@ function comparePrereleaseParsed(left, right) {
 function compareParsed(left, right) {
 	return compareMainParsed(left, right) || comparePrereleaseParsed(left, right);
 }
-function coerceParsedVersion(value, options = {}) {
-	if (typeof value === "object") return value;
-	const input = typeof value === "number" ? String(value) : value;
-	if (typeof input !== "string") return null;
-	let match = null;
-	if (options.rtl) {
-		const expression = safeRegex(options.includePrerelease ? COERCE_FULL : COERCE, "g");
-		let next;
-		while ((next = expression.exec(input)) && (!match || match.index + match[0].length !== input.length)) {
-			if (!match || next.index + next[0].length !== match.index + match[0].length) match = next;
-			expression.lastIndex = next.index + next[1].length + next[2].length;
-		}
-	} else match = (options.includePrerelease ? COERCE_FULL_EXACT : COERCE_EXACT).exec(input);
-	if (!match) return null;
-	const major = match[2];
-	return tryParse(`${major}.${match[3] || "0"}.${match[4] || "0"}${options.includePrerelease && match[5] ? `-${match[5]}` : ""}${options.includePrerelease && match[6] ? `+${match[6]}` : ""}`, options);
+function compare$1(left, right, options = {}) {
+	return compareParsed(parse(left, options), parse(right, options));
 }
+//#endregion
+//#region ../plugin-core/dist/node_modules/.pnpm/verkit@0.4.0/node_modules/verkit/dist/set-CC5YeoYX.mjs
 const STRICT_COMPARATOR = safeRegex(String.raw`^${GREATER_LESS_THAN}\s*(${FULL_PLAIN})$|^$`);
 const LOOSE_COMPARATOR$1 = safeRegex(String.raw`^${GREATER_LESS_THAN}\s*(${LOOSE_PLAIN})$|^$`);
 function parseComparator(comparator, options = {}) {
+	if (typeof comparator !== "string") return comparator;
 	const normalized = comparator.trim().replaceAll(/\s+/g, " ");
 	const match = normalized.match(options.loose ? LOOSE_COMPARATOR$1 : STRICT_COMPARATOR);
 	if (!match) throw new TypeError(`Invalid comparator: ${normalized}`);
@@ -2602,9 +2921,8 @@ function parseComparator(comparator, options = {}) {
 		version
 	};
 }
-function compare$1(left, right, options = {}) {
-	return compareParsed(parse(left, options), parse(right, options));
-}
+//#endregion
+//#region ../plugin-core/dist/node_modules/.pnpm/verkit@0.4.0/node_modules/verkit/dist/range-DvX-Y6iv.mjs
 const BUILD_STRIP = new RegExp(BUILD, "g");
 const BUILD_SAFE = safeRegex(BUILD);
 const STRICT_HYPHEN = safeRegex(String.raw`^\s*(${XRANGE_PLAIN})\s+-\s+(${XRANGE_PLAIN})\s*$`);
@@ -2730,9 +3048,9 @@ function parseSimpleRange(input, options) {
 function parseRange(range, options = {}) {
 	if (typeof range !== "string") return range;
 	const parsedOptions = { ...options };
-	const raw = range.trim().replaceAll(/\s+/g, " ");
-	let sets = raw.split("||").map((part) => parseSimpleRange(part.trim(), parsedOptions)).filter((set) => set.length);
-	if (!sets.length) throw new TypeError(`Range contains no valid comparator sets: ${raw}`);
+	const normalizedRange = range.trim().replaceAll(/\s+/g, " ");
+	let sets = normalizedRange.split("||").map((part) => parseSimpleRange(part.trim(), parsedOptions)).filter((set) => set.length);
+	if (!sets.length) throw new TypeError(`Range contains no valid comparator sets: ${normalizedRange}`);
 	if (sets.length > 1) {
 		const first = sets[0];
 		sets = sets.filter((set) => set[0]?.value !== "<0.0.0-0");
@@ -2743,19 +3061,39 @@ function parseRange(range, options = {}) {
 		}
 	}
 	return {
-		normalized: sets.map((set) => set.map((comparator) => comparator.value).join(" ")).join("||"),
 		options: parsedOptions,
-		raw,
 		sets
 	};
 }
+//#endregion
+//#region ../plugin-core/dist/node_modules/.pnpm/verkit@0.4.0/node_modules/verkit/dist/version-CQ98ZBpL.mjs
+const COERCE_EXACT = safeRegex(COERCE);
+const COERCE_FULL_EXACT = safeRegex(COERCE_FULL);
+safeRegex(`^${PRERELEASE}$`);
+safeRegex(`^${PRERELEASE_LOOSE}$`);
+function normalizeFull(version, options = {}) {
+	const parsed = tryParse(version, options);
+	return parsed ? formatFullVersion(parsed) : null;
+}
 function normalize(version, options = {}) {
 	const parsed = tryParse(version, options);
 	return parsed ? formatComparableVersion(parsed) : null;
 }
 function coerce(value, options = {}) {
-	const parsed = coerceParsedVersion(value, options);
-	return parsed ? formatFullVersion(parsed) : null;
+	if (typeof value === "object") return value;
+	const input = typeof value === "number" ? String(value) : value;
+	let match = null;
+	if (options.rtl) {
+		const expression = safeRegex(options.includePrerelease ? COERCE_FULL : COERCE, "g");
+		let next;
+		while ((next = expression.exec(input)) && (!match || match.index + match[0].length !== input.length)) {
+			if (!match || next.index + next[0].length !== match.index + match[0].length) match = next;
+			expression.lastIndex = next.index + next[1].length + next[2].length;
+		}
+	} else match = (options.includePrerelease ? COERCE_FULL_EXACT : COERCE_EXACT).exec(input);
+	if (!match) return null;
+	const major = match[2];
+	return tryParse(`${major}.${match[3] || "0"}.${match[4] || "0"}${options.includePrerelease && match[5] ? `-${match[5]}` : ""}${options.includePrerelease && match[6] ? `+${match[6]}` : ""}`, options);
 }
 //#endregion
 //#region ../plugin-core/dist/releaseCatalogCompiler.mjs
@@ -3035,15 +3373,16 @@ function compileAppVersion(releases) {
 	const retainedIds = new Set(segmentReleases.flatMap(({ retainedIds, rollbackIds }) => [...retainedIds, ...rollbackIds]));
 	const retainedReleases = releases.filter((release) => retainedIds.has(release.id));
 	const descriptorIndex = new Map(retainedReleases.map((release, index) => [release.id, index]));
+	const segments = mergeSegments(segmentReleases.map(({ segment, retainedIds, rollbackIds }) => ({
+		...segment,
+		releaseIndexes: releases.filter((release) => retainedIds.has(release.id)).map((release) => descriptorIndex.get(release.id)).filter((index) => index !== void 0),
+		rollbackReleaseIndexes: releases.filter((release) => rollbackIds.has(release.id)).map((release) => descriptorIndex.get(release.id)).filter((index) => index !== void 0)
+	})).filter((segment) => segment.releaseIndexes.length > 0 || segment.rollbackReleaseIndexes.length > 0));
 	return {
 		envelope: {
 			fallbackPolicy: RELEASE_CATALOG_FALLBACK_POLICY,
 			schemaVersion: 1,
-			segments: mergeSegments(segmentReleases.map(({ segment, retainedIds, rollbackIds }) => ({
-				...segment,
-				releaseIndexes: releases.filter((release) => retainedIds.has(release.id)).map((release) => descriptorIndex.get(release.id)).filter((index) => index !== void 0),
-				rollbackReleaseIndexes: releases.filter((release) => rollbackIds.has(release.id)).map((release) => descriptorIndex.get(release.id)).filter((index) => index !== void 0)
-			})).filter((segment) => segment.releaseIndexes.length > 0 || segment.rollbackReleaseIndexes.length > 0)),
+			segments,
 			strategy: "APP_VERSION"
 		},
 		retainedReleases
@@ -3111,7 +3450,8 @@ function versionInSegment(version, segment) {
 	return true;
 }
 function canonicalizeAppVersion(appVersion) {
-	return coerce(appVersion);
+	const version = coerce(appVersion);
+	return version ? normalizeFull(version) : null;
 }
 function projectCompiledCatalog(catalog, appVersion) {
 	let indexes;
@@ -3139,6 +3479,7 @@ function projectCompiledRollbackCatalog(catalog, appVersion) {
 const RELEASE_PAGE_SIZE = 1e3;
 const DEFAULT_MAX_ATTEMPTS = 3;
 var ReleaseCatalogMutationError = class extends Error {
+	code;
 	name = "ReleaseCatalogMutationError";
 	constructor(code, message) {
 		super(message);
@@ -3398,6 +3739,7 @@ async function rebuildReleaseCatalog(input) {
 //#endregion
 //#region ../plugin-core/dist/releaseManagement.mjs
 var ReleaseManagementError = class extends Error {
+	code;
 	name = "ReleaseManagementError";
 	constructor(code, message) {
 		super(message);
@@ -3477,7 +3819,7 @@ async function deleteRelease(input) {
 }
 //#endregion
 //#region ../plugin-core/dist/storageDownloadPath.mjs
-const decodeBase64Url = (value) => {
+const decodeBase64Url$1 = (value) => {
 	try {
 		const base64 = value.replaceAll("-", "+").replaceAll("_", "/");
 		const binary = atob(base64.padEnd(Math.ceil(base64.length / 4) * 4, "="));
@@ -3489,7 +3831,7 @@ const decodeBase64Url = (value) => {
 const parseStorageDownloadPath = (path) => {
 	const match = /^\/storage\/([^/]+)\/([^/]+)$/.exec(path);
 	if (!match) return null;
-	const storageUri = decodeBase64Url(match[1]);
+	const storageUri = decodeBase64Url$1(match[1]);
 	if (storageUri === null) return null;
 	try {
 		return {
@@ -3610,7 +3952,7 @@ const createReleaseCatalogRouteHandlers = (clientAccessHeaderName = "x-api-key")
 //#endregion
 //#region ../../packages/server/dist/handlerReleaseManagementRoutes.mjs
 const unavailable = () => Response.json({ error: "Not found" }, { status: 404 });
-const isRecord$1 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isRecord$2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const parseRevision = (value) => {
 	if (value === void 0 || value === null || value === "") return void 0;
 	const revision = typeof value === "number" ? value : Number(value);
@@ -3619,7 +3961,7 @@ const parseRevision = (value) => {
 };
 const parsePolicyInput = async (request) => {
 	const body = await request.json();
-	if (!isRecord$1(body) || !isRecord$1(body.patch)) throw new HandlerBadRequestError("Invalid Release policy mutation");
+	if (!isRecord$2(body) || !isRecord$2(body.patch)) throw new HandlerBadRequestError("Invalid Release policy mutation");
 	return {
 		expectedRevision: parseRevision(body.expectedRevision),
 		patch: body.patch
@@ -3729,17 +4071,11 @@ const createReleaseManagementRouteHandlers = () => ({
 });
 //#endregion
 //#region ../../packages/server/dist/insights/errors.mjs
-var InsightsScanLimitExceededError = class extends Error {
-	constructor(limit) {
-		super(`Insights event scan exceeded ${limit} rows.`);
-		this.limit = limit;
-		this.name = "InsightsScanLimitExceededError";
-	}
-};
 var InsightsBadRequestError = class extends Error {
 	name = "InsightsBadRequestError";
 };
 var InsightsPayloadTooLargeError = class extends Error {
+	maximumBytes;
 	name = "InsightsPayloadTooLargeError";
 	constructor(maximumBytes) {
 		super(`Event payload exceeds ${maximumBytes} bytes`);
@@ -3749,8 +4085,9 @@ var InsightsPayloadTooLargeError = class extends Error {
 //#endregion
 //#region ../../packages/server/dist/insights/eventInput.mjs
 const MAX_EVENT_STRING_LENGTH = 1024;
-const EVENT_BODY_MAX_BYTES = 16 * 1024;
-const eventKeys = new Set([
+const MAX_IDENTITY_LENGTH$2 = 255;
+const EVENT_BODY_MAX_BYTES = 16384;
+const eventKeys = /* @__PURE__ */ new Set([
 	"type",
 	"installId",
 	"toBundleId",
@@ -3767,18 +4104,23 @@ const eventKeys = new Set([
 	"updateStrategy",
 	"sdkVersion"
 ]);
-function isRecord(value) {
+function isRecord$1(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function requireStringField(payload, key) {
 	const value = payload[key];
-	if (typeof value !== "string" || value.length === 0 || value.length > MAX_EVENT_STRING_LENGTH) throw new InsightsBadRequestError(`Invalid event field: ${key}`);
+	if (typeof value !== "string" || value.length === 0 || value.length > MAX_EVENT_STRING_LENGTH || new TextDecoder("utf-8", { ignoreBOM: true }).decode(new TextEncoder().encode(value)) !== value) throw new InsightsBadRequestError(`Invalid event field: ${key}`);
 	return value;
 }
 function requireNullableStringField(payload, key) {
 	if (payload[key] === null) return null;
 	return requireStringField(payload, key);
 }
+function requireIdentityField(payload, key) {
+	const value = requireStringField(payload, key);
+	if (value.length > MAX_IDENTITY_LENGTH$2) throw new InsightsBadRequestError(`Invalid event field: ${key}`);
+	return value;
+}
 async function readBoundedText(request) {
 	const contentLength = request.headers.get("content-length");
 	const declaredByteLength = Number(contentLength);
@@ -3810,13 +4152,13 @@ async function parseJson(request) {
 	}
 }
 function requireEvent(payload) {
-	if (!isRecord(payload) || Object.keys(payload).some((key) => !eventKeys.has(key))) throw new InsightsBadRequestError("Invalid event payload");
+	if (!isRecord$1(payload) || Object.keys(payload).some((key) => !eventKeys.has(key))) throw new InsightsBadRequestError("Invalid event payload");
 	const platform = requireStringField(payload, "platform");
 	if (platform !== "ios" && platform !== "android") throw new InsightsBadRequestError("Invalid event field: platform");
 	const base = {
-		installId: requireStringField(payload, "installId"),
+		installId: requireIdentityField(payload, "installId"),
 		toBundleId: requireStringField(payload, "toBundleId"),
-		...payload.userId === void 0 ? {} : { userId: requireStringField(payload, "userId") },
+		...payload.userId === void 0 ? {} : { userId: requireIdentityField(payload, "userId") },
 		...payload.username === void 0 ? {} : { username: requireStringField(payload, "username") },
 		platform,
 		appVersion: requireStringField(payload, "appVersion"),
@@ -3855,59 +4197,130 @@ function requireEvent(payload) {
 async function parseBundleEventRequest(request) {
 	return requireEvent(await parseJson(request));
 }
+function createBundleEventRow(input) {
+	input = requireEvent(input);
+	const base = {
+		app_version: input.appVersion,
+		channel: input.channel,
+		cohort: input.cohort,
+		fingerprint_hash: input.fingerprintHash,
+		from_release_id: input.fromReleaseId,
+		id: createUUIDv7(),
+		install_id: input.installId,
+		platform: input.platform,
+		received_at_ms: Date.now(),
+		sdk_version: input.sdkVersion ?? null,
+		to_bundle_id: input.toBundleId,
+		to_release_id: input.toReleaseId,
+		user_id: input.userId ?? null,
+		username: input.username ?? null
+	};
+	switch (input.type) {
+		case "UPDATE_APPLIED":
+		case "RECOVERED":
+		case "RELEASE_ADOPTED": return {
+			...base,
+			from_bundle_id: input.fromBundleId,
+			type: input.type,
+			update_strategy: input.updateStrategy
+		};
+		case "UNCHANGED": return {
+			...base,
+			from_bundle_id: null,
+			type: input.type,
+			update_strategy: null
+		};
+	}
+}
 //#endregion
 //#region ../../packages/server/dist/insights/queryInput.mjs
-const EVENT_LIST_BOUNDS = {
-	defaultValue: 50,
-	maximum: 100,
-	minimum: 1
+const MAX_PAGE_LIMIT$1 = 100;
+const MAX_IDENTITY_LENGTH$1 = 255;
+const MAX_CURSOR_LENGTH$1 = 8192;
+const readSingle = (url, key) => {
+	const values = url.searchParams.getAll(key);
+	if (values.length > 1) throw new InsightsBadRequestError(`Duplicate '${key}' query parameter.`);
+	return values[0];
 };
-const EVENT_LIST_OFFSET_BOUNDS = {
-	defaultValue: 0,
-	minimum: 0
+const readPageLimit = (url) => {
+	const value = readSingle(url, "limit");
+	if (value === void 0) return void 0;
+	const limit = Number(value);
+	if (!Number.isSafeInteger(limit) || limit < 1 || limit > MAX_PAGE_LIMIT$1) throw new InsightsBadRequestError("Invalid 'limit' query parameter.");
+	return limit;
+};
+const readCursor = (url) => {
+	const cursor = readSingle(url, "cursor");
+	if (cursor !== void 0 && (cursor.length === 0 || cursor.length > MAX_CURSOR_LENGTH$1)) throw new InsightsBadRequestError("Invalid 'cursor' query parameter.");
+	return cursor;
+};
+const readId = (url, key, maximumLength = MAX_IDENTITY_LENGTH$1) => {
+	const value = readSingle(url, key);
+	if (value === void 0 || value.length === 0 || value.length > maximumLength) throw new InsightsBadRequestError(`Invalid '${key}' query parameter.`);
+	return value;
 };
-const MAX_USER_ID_LENGTH = 1024;
-function parseInteger(url, key, bounds) {
-	const value = url.searchParams.get(key);
-	if (value === null) return bounds.defaultValue;
-	const parsed = Number(value);
-	if (!Number.isSafeInteger(parsed) || parsed < bounds.minimum || bounds.maximum !== void 0 && parsed > bounds.maximum) throw new InsightsBadRequestError(`Invalid '${key}' query parameter.`);
-	return parsed;
-}
-const parsePagination = (request) => {
+const readTimestamp = (url, key) => {
+	const raw = readSingle(url, key);
+	if (raw === void 0) return void 0;
+	const value = Number(raw);
+	if (!raw.length || !Number.isSafeInteger(value) || value < 0) throw new InsightsBadRequestError(`Invalid '${key}' query parameter.`);
+	return value;
+};
+const readScope$1 = (url) => {
+	const platform = readSingle(url, "platform");
+	if (platform !== "ios" && platform !== "android") throw new InsightsBadRequestError("Invalid 'platform' query parameter.");
+	return {
+		platform,
+		channel: readId(url, "channel", 1024)
+	};
+};
+const parseEventPageInput = (request) => {
 	const url = new URL(request.url);
+	const bundleFields = [
+		"bundleId",
+		"outcome",
+		"platform",
+		"channel"
+	];
+	let bundle;
+	if (bundleFields.some((key) => url.searchParams.has(key))) {
+		const outcome = readSingle(url, "outcome");
+		if (outcome !== "applied" && outcome !== "recovered" && outcome !== "adopted") throw new InsightsBadRequestError("Invalid 'outcome' query parameter.");
+		bundle = {
+			...readScope$1(url),
+			bundleId: readId(url, "bundleId", 1024),
+			outcome
+		};
+	}
 	return {
-		limit: parseInteger(url, "limit", EVENT_LIST_BOUNDS),
-		offset: parseInteger(url, "offset", EVENT_LIST_OFFSET_BOUNDS)
+		beforeReceivedAtMs: readTimestamp(url, "beforeReceivedAtMs"),
+		sinceMs: readTimestamp(url, "sinceMs"),
+		cursor: readCursor(url),
+		limit: readPageLimit(url),
+		...bundle === void 0 ? {} : { bundle }
 	};
 };
-const parseInsightsQuery = (request) => {
-	const window = new URL(request.url).searchParams.get("window") ?? "24h";
-	if (window !== "24h" && window !== "7d" && window !== "30d" && window !== "all") throw new InsightsBadRequestError("Invalid 'window' query parameter.");
+const parseUserInstallationPageInput = (request) => {
+	const url = new URL(request.url);
+	const cursor = readCursor(url);
+	const limit = readPageLimit(url);
 	return {
-		...parsePagination(request),
-		window
+		userId: readId(url, "userId"),
+		...cursor === void 0 ? {} : { cursor },
+		...limit === void 0 ? {} : { limit }
 	};
 };
-const parseActiveInstallationInput = (request) => {
+const parseReportingOverviewInput = (request) => {
 	const url = new URL(request.url);
-	const windows = url.searchParams.getAll("window");
-	if (windows.length > 1) throw new InsightsBadRequestError("Duplicate 'window' query parameter.");
-	const window = windows[0] ?? "30d";
+	const window = readSingle(url, "window") ?? "30d";
 	if (window !== "24h" && window !== "7d" && window !== "30d") throw new InsightsBadRequestError("Invalid 'window' query parameter.");
-	const userIds = url.searchParams.getAll("userId");
-	if (userIds.length > 1) throw new InsightsBadRequestError("Duplicate 'userId' query parameter.");
-	const userId = userIds[0];
-	if (userId !== void 0 && (userId.length === 0 || userId.length > MAX_USER_ID_LENGTH)) throw new InsightsBadRequestError("Invalid 'userId' query parameter.");
-	return userId === void 0 ? { window } : {
+	const bundleId = readSingle(url, "bundleId");
+	return {
+		...readScope$1(url),
 		window,
-		userId
+		...bundleId === void 0 ? {} : { bundleId: readId(url, "bundleId", 1024) }
 	};
 };
-const parseSearchInput = (request) => ({
-	...parsePagination(request),
-	query: new URL(request.url).searchParams.get("query")?.trim() ?? ""
-});
 //#endregion
 //#region ../../packages/server/dist/insights/routes.mjs
 const json = (body, status) => Response.json(body, {
@@ -3917,7 +4330,11 @@ const json = (body, status) => Response.json(body, {
 const requireParam = (params, key) => {
 	const value = params[key];
 	if (value === void 0 || value.length === 0) throw new InsightsBadRequestError(`Missing route parameter: ${key}`);
-	return value;
+	try {
+		return decodeURIComponent(value);
+	} catch {
+		throw new InsightsBadRequestError(`Invalid route parameter: ${key}`);
+	}
 };
 const run = async (operation) => {
 	try {
@@ -3925,10 +4342,6 @@ const run = async (operation) => {
 	} catch (error) {
 		if (error instanceof InsightsBadRequestError) return json({ error: error.message }, 400);
 		if (error instanceof InsightsPayloadTooLargeError) return json({ error: error.message }, 413);
-		if (error instanceof InsightsScanLimitExceededError) return json({ error: {
-			code: "INSIGHTS_SCAN_LIMIT_EXCEEDED",
-			limit: error.limit
-		} }, 503);
 		throw error;
 	}
 };
@@ -3938,32 +4351,27 @@ const createInsightsRouteHandlers = (provider) => ({
 		await provider.appendBundleEvent(await parseBundleEventRequest(request));
 		return new Response(null, { status: 204 });
 	}),
-	getBundleEventSummary: (params) => query(() => provider.getBundleEventSummary(requireParam(params, "id"))),
-	getBundleEventInsights: (params, request) => query(() => {
-		const input = parseInsightsQuery(request);
-		return provider.getBundleEventInsights(requireParam(params, "id"), input.window, input.limit, input.offset);
+	getReportingOverview: (_params, request) => query(() => provider.getReportingOverview(parseReportingOverviewInput(request))),
+	getInstallation: (params) => run(async () => {
+		const installation = await provider.getInstallation({ installId: requireParam(params, "installId") });
+		return installation === null ? json({ error: "Installation not found" }, 404) : json(installation, 200);
 	}),
-	getBundleEventOverview: () => query(() => provider.getBundleEventOverview()),
-	getActiveInstallationOverview: (_params, request) => query(() => provider.getActiveInstallationOverview(parseActiveInstallationInput(request))),
-	searchInstallations: (_params, request) => query(() => {
-		const input = parseSearchInput(request);
-		return provider.searchInstallations(input.query, input.limit, input.offset);
-	}),
-	getInstallationHistory: (params, request) => query(() => {
-		const input = parsePagination(request);
-		return provider.getInstallationHistory(requireParam(params, "installId"), input.limit, input.offset);
-	})
+	listEvents: (_params, request) => query(() => provider.listEvents(parseEventPageInput(request))),
+	listInstallationEvents: (params, request) => query(() => provider.listInstallationEvents({
+		...parseEventPageInput(request),
+		installId: requireParam(params, "installId")
+	})),
+	pageInstallationsByCurrentUserId: (_params, request) => query(() => provider.pageInstallationsByCurrentUserId(parseUserInstallationPageInput(request)))
 });
 const registerInsightsClientRoutes = (add) => {
 	add("POST", "/events", "appendBundleEvent");
 };
 const registerInsightsAdminRoutes = (add) => {
-	add("GET", "/bundles/:id/events/summary", "getBundleEventSummary");
-	add("GET", "/bundles/:id/events/insights", "getBundleEventInsights");
-	add("GET", "/installations/overview", "getBundleEventOverview");
-	add("GET", "/installations/active", "getActiveInstallationOverview");
-	add("GET", "/installations", "searchInstallations");
-	add("GET", "/installations/:installId/events", "getInstallationHistory");
+	add("GET", "/events", "listEvents");
+	add("GET", "/overview", "getReportingOverview");
+	add("GET", "/installations", "pageInstallationsByCurrentUserId");
+	add("GET", "/installations/:installId/events", "listInstallationEvents");
+	add("GET", "/installations/:installId", "getInstallation");
 };
 //#endregion
 //#region ../../packages/server/dist/internalRouter.mjs
@@ -4125,461 +4533,311 @@ function createHotUpdaterHandlers(api, insights, apiKeyAuth, downloadStorageObje
 	});
 }
 //#endregion
-//#region ../../packages/server/dist/insights/bounded/activeOverview.mjs
-const HOUR_MS = 3600 * 1e3;
-const DAY_MS = 24 * HOUR_MS;
-const ACTIVE_BUNDLE_EVENT_TYPES = [
-	"UPDATE_APPLIED",
-	"RECOVERED",
-	"RELEASE_ADOPTED",
-	"UNCHANGED"
-];
-const activeWindowDefinitions = {
-	"24h": {
-		bucketCount: 24,
-		bucketSizeMs: HOUR_MS
-	},
-	"7d": {
-		bucketCount: 7,
-		bucketSizeMs: DAY_MS
-	},
-	"30d": {
-		bucketCount: 30,
-		bucketSizeMs: DAY_MS
-	}
+//#region ../../packages/server/dist/insights/provider.mjs
+const DEFAULT_PAGE_LIMIT = 50;
+const MAX_PAGE_LIMIT = 100;
+const MAX_EVENT_ID_LENGTH = 1024;
+const MAX_IDENTITY_LENGTH = 255;
+const MAX_CURSOR_LENGTH = 8192;
+const WINDOW_MS = {
+	"24h": 864e5,
+	"7d": 6048e5,
+	"30d": 2592e6
+};
+const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const requireString = (value, label, maximumLength) => {
+	if (typeof value !== "string" || value.length === 0 || value.length > maximumLength || new TextDecoder("utf-8", { ignoreBOM: true }).decode(new TextEncoder().encode(value)) !== value) throw new InsightsBadRequestError(`Invalid ${label}.`);
+	return value;
 };
-function getActiveWindowDefinition(window) {
-	return activeWindowDefinitions[window];
-}
-function compareCodePoints$1(left, right) {
-	if (left < right) return -1;
-	if (left > right) return 1;
-	return 0;
-}
-function isNewer(candidate, current) {
-	return candidate.received_at_ms > current.received_at_ms || candidate.received_at_ms === current.received_at_ms && compareCodePoints$1(candidate.id, current.id) > 0;
-}
-function collectActiveInstallationOverview(request) {
-	const definition = getActiveWindowDefinition(request.window);
-	const windowStartMs = request.asOfMs - definition.bucketCount * definition.bucketSizeMs;
-	const rows = request.rows.filter((row) => row.received_at_ms >= windowStartMs && row.received_at_ms < request.asOfMs);
-	const latestByInstall = /* @__PURE__ */ new Map();
-	for (const row of rows) {
-		const current = latestByInstall.get(row.install_id);
-		if (current === void 0 || isNewer(row, current)) latestByInstall.set(row.install_id, row);
+const requireTimestamp = (value, label) => {
+	if (!Number.isSafeInteger(value) || Number(value) < 0) throw new InsightsBadRequestError(`Invalid ${label}.`);
+	return Number(value);
+};
+const readLimit = (value) => {
+	const limit = value ?? DEFAULT_PAGE_LIMIT;
+	if (!Number.isSafeInteger(limit) || limit < 1 || limit > MAX_PAGE_LIMIT) throw new InsightsBadRequestError("Invalid page limit.");
+	return limit;
+};
+const encodeBase64Url = (value) => {
+	const bytes = new TextEncoder().encode(value);
+	let binary = "";
+	for (const byte of bytes) binary += String.fromCharCode(byte);
+	return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/u, "");
+};
+const decodeBase64Url = (value) => {
+	if (value.length === 0 || value.length > MAX_CURSOR_LENGTH) throw new InsightsBadRequestError("Invalid Insights cursor.");
+	try {
+		const base64 = value.replaceAll("-", "+").replaceAll("_", "/");
+		const padded = base64.padEnd(Math.ceil(base64.length / 4) * 4, "=");
+		const binary = atob(padded);
+		const bytes = Uint8Array.from(binary, (character) => character.charCodeAt(0));
+		return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+	} catch {
+		throw new InsightsBadRequestError("Invalid Insights cursor.");
 	}
-	const selectedRows = [...latestByInstall.values()].filter((row) => request.userId === void 0 || row.user_id === request.userId);
-	const selectedInstallIds = new Set(selectedRows.map((row) => row.install_id));
-	const bundleCounts = /* @__PURE__ */ new Map();
-	for (const row of selectedRows) bundleCounts.set(row.to_bundle_id, (bundleCounts.get(row.to_bundle_id) ?? 0) + 1);
-	const latestByBucket = Array.from({ length: definition.bucketCount }, () => /* @__PURE__ */ new Map());
-	for (const row of rows) {
-		if (!selectedInstallIds.has(row.install_id)) continue;
-		const bucket = latestByBucket[Math.floor((row.received_at_ms - windowStartMs) / definition.bucketSizeMs)];
-		if (bucket === void 0) continue;
-		const current = bucket.get(row.install_id);
-		if (current === void 0 || isNewer(row, current)) bucket.set(row.install_id, row);
+};
+const encodeCursor = (value) => encodeBase64Url(JSON.stringify(value));
+const decodeCursor = (value) => {
+	try {
+		return JSON.parse(decodeBase64Url(value));
+	} catch (error) {
+		if (error instanceof InsightsBadRequestError) throw error;
+		throw new InsightsBadRequestError("Invalid Insights cursor.");
 	}
-	const bundleCountsByBucket = latestByBucket.map((bucket) => {
-		const counts = /* @__PURE__ */ new Map();
-		for (const row of bucket.values()) counts.set(row.to_bundle_id, (counts.get(row.to_bundle_id) ?? 0) + 1);
-		return counts;
-	});
-	const bundleObservationTotals = /* @__PURE__ */ new Map();
-	for (const counts of bundleCountsByBucket) for (const [bundleId, count] of counts) bundleObservationTotals.set(bundleId, (bundleObservationTotals.get(bundleId) ?? 0) + count);
+};
+const readScope = (input) => {
+	if (input.platform !== "ios" && input.platform !== "android") throw new InsightsBadRequestError("Invalid Insights platform.");
 	return {
-		asOfMs: request.asOfMs,
-		window: request.window,
-		activeInstallations: selectedInstallIds.size,
-		series: latestByBucket.map((bucket, index) => ({
-			bucketStartMs: windowStartMs + index * definition.bucketSizeMs,
-			value: bucket.size
-		})),
-		bundleSeries: [...bundleObservationTotals].sort(([leftId, leftTotal], [rightId, rightTotal]) => rightTotal - leftTotal || compareCodePoints$1(leftId, rightId)).map(([bundleId]) => ({
-			bundleId,
-			series: bundleCountsByBucket.map((counts, index) => ({
-				bucketStartMs: windowStartMs + index * definition.bucketSizeMs,
-				value: counts.get(bundleId) ?? 0
-			}))
-		})),
-		bundles: [...bundleCounts].map(([bundleId, installations]) => ({
-			bundleId,
-			installations
-		})).sort((left, right) => right.installations - left.installations || compareCodePoints$1(left.bundleId, right.bundleId))
-	};
-}
-//#endregion
-//#region ../../packages/server/dist/insights/bounded/scan.mjs
-const INSIGHTS_SCAN_MAX_ROWS = 5e4;
-const INSIGHTS_MATERIALIZATION_LIMIT = INSIGHTS_SCAN_MAX_ROWS + 1;
-const INSIGHTS_SCAN_PAGE_SIZE = 1e3;
-const INSIGHTS_LOWER_BOUND_ID = "00000000-0000-0000-0000-000000000000";
-const compareCodePoints = (left, right) => {
-	if (left < right) return -1;
-	if (left > right) return 1;
-	return 0;
-};
-const compareEventNewest = (left, right) => right.received_at_ms - left.received_at_ms || compareCodePoints(right.id, left.id);
-const compareEventOldest = (left, right) => left.received_at_ms - right.received_at_ms || compareCodePoints(left.id, right.id);
-const materializeEventRows = async (scope) => {
-	const rows = [];
-	const seenIds = /* @__PURE__ */ new Set();
-	let after = scope.lowerBoundMs === void 0 ? void 0 : {
-		receivedAtMs: scope.lowerBoundMs,
-		id: INSIGHTS_LOWER_BOUND_ID
+		platform: input.platform,
+		channel: requireString(input.channel, "channel", MAX_EVENT_ID_LENGTH)
 	};
-	while (rows.length < INSIGHTS_MATERIALIZATION_LIMIT) {
-		const limit = Math.min(INSIGHTS_SCAN_PAGE_SIZE, INSIGHTS_MATERIALIZATION_LIMIT - rows.length);
-		const page = await scope.persistence.scan({
-			beforeReceivedAtMs: scope.cutoffMs,
-			...after === void 0 ? {} : { after },
-			limit
-		});
-		if (page.length === 0) break;
-		if (page.length > limit) throw new InsightsPersistenceOrderError();
-		let previous = after === void 0 ? void 0 : {
-			received_at_ms: after.receivedAtMs,
-			id: after.id
+};
+const bundleFilter = (input) => {
+	const scope = readScope(input);
+	const bundleId = requireString(input.bundleId, "bundle ID", MAX_EVENT_ID_LENGTH);
+	switch (input.outcome) {
+		case "applied": return {
+			...scope,
+			type: "UPDATE_APPLIED",
+			toBundleId: bundleId
 		};
-		for (const row of page) {
-			if (row.received_at_ms >= scope.cutoffMs || previous !== void 0 && compareEventOldest(previous, row) >= 0 || seenIds.has(row.id)) throw new InsightsPersistenceOrderError();
-			seenIds.add(row.id);
-			rows.push(row);
-			previous = row;
-		}
-		const last = page.at(-1);
-		if (last !== void 0) after = {
-			receivedAtMs: last.received_at_ms,
-			id: last.id
+		case "recovered": return {
+			...scope,
+			type: "RECOVERED",
+			fromBundleId: bundleId
+		};
+		case "adopted": return {
+			...scope,
+			type: "RELEASE_ADOPTED",
+			toBundleId: bundleId
 		};
-		if (rows.length > 5e4) throw new InsightsScanLimitExceededError(INSIGHTS_SCAN_MAX_ROWS);
+		default: throw new InsightsBadRequestError("Invalid Insights outcome.");
 	}
-	return rows;
 };
-var InsightsPersistenceOrderError = class extends Error {
-	name = "InsightsPersistenceOrderError";
-	constructor() {
-		super("Insights persistence did not advance its scan cursor.");
+const sameFilter = (left, right) => {
+	if (!isRecord(left) || left.kind !== right.kind) return false;
+	switch (right.kind) {
+		case "all": return true;
+		case "installationMovement": return left.installId === right.installId;
+		case "bundle": return left.platform === right.platform && left.channel === right.channel && left.type === right.type && (right.type === "RECOVERED" ? left.fromBundleId === right.fromBundleId : left.toBundleId === right.toBundleId);
 	}
 };
-const materializeActiveRows = async (scope, window) => {
-	const definition = getActiveWindowDefinition(window);
-	const durationMs = definition.bucketCount * definition.bucketSizeMs;
-	return (await materializeEventRows({
-		...scope,
-		lowerBoundMs: scope.cutoffMs - durationMs
-	})).filter((row) => row.received_at_ms >= scope.cutoffMs - durationMs && ACTIVE_BUNDLE_EVENT_TYPES.includes(row.type));
-};
-const startOfUtcHour = (value) => {
-	const date = new Date(value);
-	return Date.UTC(date.getUTCFullYear(), date.getUTCMonth(), date.getUTCDate(), date.getUTCHours());
-};
-const startOfUtcDay = (value) => {
-	const date = new Date(value);
-	return Date.UTC(date.getUTCFullYear(), date.getUTCMonth(), date.getUTCDate());
-};
-const getWindowRange = (window, now) => {
-	if (window === "24h") return {
-		sizeMs: 3600 * 1e3,
-		rangeStart: startOfUtcHour(now) - 1380 * 60 * 1e3
-	};
-	const days = window === "7d" ? 7 : 30;
+const readEventCursor = (value, filter) => {
+	const cursor = decodeCursor(value);
+	if (!isRecord(cursor) || cursor.version !== 2 || cursor.kind !== "events" || !isRecord(cursor.filter) || !isRecord(cursor.after)) throw new InsightsBadRequestError("Invalid Insights cursor.");
+	if (!sameFilter(cursor.filter, filter)) throw new InsightsBadRequestError("Insights cursor does not match the requested events.");
+	if (typeof cursor.after.id !== "string" || !isUUIDv7(cursor.after.id)) throw new InsightsBadRequestError("Invalid Insights event cursor ID.");
 	return {
-		sizeMs: 1440 * 60 * 1e3,
-		rangeStart: startOfUtcDay(now) - (days - 1) * 24 * 60 * 60 * 1e3
+		after: {
+			id: cursor.after.id,
+			receivedAtMs: requireTimestamp(cursor.after.receivedAtMs, "event cursor")
+		},
+		beforeReceivedAtMs: requireTimestamp(cursor.beforeReceivedAtMs, "event cutoff"),
+		kind: "events",
+		sinceMs: requireTimestamp(cursor.sinceMs, "event start"),
+		filter,
+		version: 2
 	};
 };
-const materializeRowsForWindow = async (scope, window) => {
-	if (window === "all") return materializeEventRows(scope);
-	const range = getWindowRange(window, scope.cutoffMs);
-	return (await materializeEventRows({
-		...scope,
-		lowerBoundMs: range.rangeStart
-	})).filter(({ received_at_ms }) => received_at_ms >= range.rangeStart);
-};
-const bucketStart = (receivedAtMs, sizeMs) => sizeMs === 3600 * 1e3 ? startOfUtcHour(receivedAtMs) : startOfUtcDay(receivedAtMs);
-const createSeries = (request) => {
-	const range = request.window === "all" ? void 0 : getWindowRange(request.window, request.cutoffMs);
-	const sizeMs = range?.sizeMs ?? 1440 * 60 * 1e3;
-	const installIdsByBucket = /* @__PURE__ */ new Map();
-	let oldestMs = request.cutoffMs;
-	for (const row of request.rows) {
-		oldestMs = Math.min(oldestMs, row.received_at_ms);
-		const start = bucketStart(row.received_at_ms, sizeMs);
-		const installIds = installIdsByBucket.get(start) ?? /* @__PURE__ */ new Set();
-		installIds.add(row.install_id);
-		installIdsByBucket.set(start, installIds);
-	}
-	const first = range?.rangeStart ?? startOfUtcDay(oldestMs);
-	const last = bucketStart(request.cutoffMs, sizeMs);
-	return Array.from({ length: Math.floor((last - first) / sizeMs) + 1 }, (_, index) => {
-		const start = first + index * sizeMs;
-		return {
-			bucketStartMs: start,
-			value: installIdsByBucket.get(start)?.size ?? 0
-		};
-	});
-};
-const collectEventActivity = (request) => {
-	const range = request.window === "all" ? void 0 : getWindowRange(request.window, request.cutoffMs);
-	const rows = range === void 0 ? request.rows : request.rows.filter(({ received_at_ms }) => received_at_ms >= range.rangeStart && received_at_ms < request.cutoffMs);
-	const installs = /* @__PURE__ */ new Set();
-	const installsByCohort = /* @__PURE__ */ new Map();
-	for (const row of rows) {
-		installs.add(row.install_id);
-		const cohort = installsByCohort.get(row.cohort) ?? /* @__PURE__ */ new Set();
-		cohort.add(row.install_id);
-		installsByCohort.set(row.cohort, cohort);
-	}
+const readUserInstallationCursor = (value, userId) => {
+	const cursor = decodeCursor(value);
+	if (!isRecord(cursor) || cursor.version !== 1 || cursor.kind !== "user-installations" || cursor.userId !== userId) throw new InsightsBadRequestError("Insights cursor does not match the requested user ID.");
 	return {
-		summary: installs.size,
-		cohorts: [...installsByCohort].sort(([left], [right]) => compareCodePoints(left, right)).map(([cohort, installIds]) => ({
-			cohort,
-			value: installIds.size
-		})),
-		series: createSeries({
-			...request,
-			rows
-		})
+		afterInstallId: requireString(cursor.afterInstallId, "installation cursor", MAX_IDENTITY_LENGTH),
+		kind: "user-installations",
+		userId,
+		version: 1
 	};
 };
-//#endregion
-//#region ../../packages/server/dist/insights/bounded/installationSearch.mjs
-function toSearchRow(row) {
-	return {
-		installId: row.install_id,
-		username: row.username,
-		userId: row.user_id,
-		lastKnownBundleId: row.to_bundle_id,
-		latestStatus: row.type,
-		platform: row.platform,
-		appVersion: row.app_version,
-		channel: row.channel,
-		cohort: row.cohort,
-		receivedAtMs: row.received_at_ms
-	};
-}
-function matchesIdentity(row, query) {
-	return row.install_id.toLowerCase().includes(query) || row.user_id?.toLowerCase().includes(query) === true || row.username?.toLowerCase().includes(query) === true;
-}
-function searchEventInstallations(request) {
-	const query = request.query.toLowerCase();
-	const matchingInstallIds = /* @__PURE__ */ new Set();
-	for (const row of request.rows) if (query.length === 0 || matchesIdentity(row, query)) matchingInstallIds.add(row.install_id);
-	const latestByInstall = /* @__PURE__ */ new Map();
-	for (const row of request.rows) {
-		if (!matchingInstallIds.has(row.install_id)) continue;
-		const current = latestByInstall.get(row.install_id);
-		if (current === void 0 || compareEventNewest(row, current) < 0) latestByInstall.set(row.install_id, row);
-	}
-	const matchingRows = [...latestByInstall.values()].sort((left, right) => compareCodePoints(left.install_id, right.install_id));
-	const pageSize = Math.min(Math.max(request.limit, 0), 100);
-	return {
-		data: matchingRows.slice(request.offset, request.offset + pageSize).map(toSearchRow),
-		pagination: {
-			total: matchingRows.length,
-			limit: request.limit,
-			offset: request.offset
-		}
-	};
-}
-//#endregion
-//#region ../../packages/server/dist/insights/bounded/persistence.mjs
-function createBundleEventRow(input) {
-	const base = {
-		id: createUUIDv7(),
-		install_id: input.installId,
-		user_id: input.userId ?? null,
-		username: input.username ?? null,
-		from_release_id: input.fromReleaseId,
-		to_release_id: input.toReleaseId,
-		to_bundle_id: input.toBundleId,
-		platform: input.platform,
-		app_version: input.appVersion,
-		channel: input.channel,
-		cohort: input.cohort,
-		fingerprint_hash: input.fingerprintHash,
-		sdk_version: input.sdkVersion ?? null,
-		received_at_ms: Date.now()
-	};
-	switch (input.type) {
-		case "UPDATE_APPLIED":
-		case "RECOVERED":
-		case "RELEASE_ADOPTED": return {
-			...base,
-			type: input.type,
-			from_bundle_id: input.fromBundleId,
-			update_strategy: input.updateStrategy
-		};
-		case "UNCHANGED": return {
-			...base,
-			type: input.type,
-			from_bundle_id: null,
-			update_strategy: null
-		};
+const compareEventNewest = (left, right) => right.received_at_ms - left.received_at_ms || compareInsightsText(right.id, left.id);
+const isAfterEventCursor = (row, after) => row.received_at_ms < after.receivedAtMs || row.received_at_ms === after.receivedAtMs && compareInsightsText(row.id, after.id) < 0;
+const assertEventRows = (rows, input) => {
+	if (rows.length > input.limit) throw new Error("Insights database returned too many event rows.");
+	for (let index = 0; index < rows.length; index += 1) {
+		const row = rows[index];
+		const previous = rows[index - 1];
+		if (!row || typeof row.id !== "string" || !isUUIDv7(row.id) || !Number.isSafeInteger(row.received_at_ms) || row.received_at_ms >= input.beforeReceivedAtMs || row.received_at_ms < input.sinceMs || previous !== void 0 && compareEventNewest(previous, row) >= 0 || input.after !== void 0 && !isAfterEventCursor(row, input.after) || input.filter.kind === "installationMovement" && (row.install_id !== input.filter.installId || !isInsightsMovementEvent(row)) || input.filter.kind === "bundle" && (row.platform !== input.filter.platform || row.channel !== input.filter.channel || row.type !== input.filter.type || (input.filter.type === "RECOVERED" ? row.from_bundle_id !== input.filter.fromBundleId : row.to_bundle_id !== input.filter.toBundleId))) throw new Error("Insights database returned invalid event rows.");
 	}
-}
-//#endregion
-//#region ../../packages/server/dist/insights/bounded/provider.mjs
-const isTransitionEventRow = (row) => row.type === "UPDATE_APPLIED" || row.type === "RECOVERED";
-const toHistoryRow = (row) => ({
-	id: row.id,
-	type: row.type,
+};
+const toEventHistoryRow = (row) => ({
+	appVersion: row.app_version,
+	channel: row.channel,
+	cohort: row.cohort,
 	fromBundleId: row.from_bundle_id,
+	id: row.id,
+	installId: row.install_id,
+	platform: row.platform,
+	receivedAtMs: row.received_at_ms,
 	toBundleId: row.to_bundle_id,
-	username: row.username,
+	type: row.type,
 	userId: row.user_id,
-	platform: row.platform,
+	username: row.username
+});
+const toInstallationRow = (row) => ({
 	appVersion: row.app_version,
 	channel: row.channel,
 	cohort: row.cohort,
-	receivedAtMs: row.received_at_ms
+	installId: row.install_id,
+	lastKnownBundleId: row.to_bundle_id,
+	latestStatus: row.type,
+	platform: row.platform,
+	receivedAtMs: row.received_at_ms,
+	userId: row.user_id,
+	username: row.username
 });
-const isInstalledForBundle = (row, bundleId) => row.type === "UPDATE_APPLIED" && row.to_bundle_id === bundleId;
-const isRecoveredFromBundle = (row, bundleId) => row.type === "RECOVERED" && row.from_bundle_id === bundleId;
-const countDistinctInstallations = (rows) => new Set(rows.map(({ install_id }) => install_id)).size;
-const getInsightsResult = async (persistence, bundleId, window, limit, offset) => {
-	const scope = {
-		persistence,
-		cutoffMs: Date.now()
+const pageEventRows = async (model, input, filter, map) => {
+	const limit = readLimit(input.limit);
+	const cursor = input.cursor === void 0 ? void 0 : readEventCursor(input.cursor, filter);
+	const beforeReceivedAtMs = cursor?.beforeReceivedAtMs ?? (input.beforeReceivedAtMs === void 0 ? Date.now() : requireTimestamp(input.beforeReceivedAtMs, "event cutoff"));
+	if (cursor !== void 0 && input.beforeReceivedAtMs !== void 0 && input.beforeReceivedAtMs !== beforeReceivedAtMs) throw new InsightsBadRequestError("Insights cursor does not match the requested event cutoff.");
+	const sinceMs = cursor?.sinceMs ?? (input.sinceMs === void 0 ? 0 : requireTimestamp(input.sinceMs, "event start"));
+	if (sinceMs > beforeReceivedAtMs || input.sinceMs !== void 0 && input.sinceMs !== sinceMs || cursor !== void 0 && (cursor.after.receivedAtMs < sinceMs || cursor.after.receivedAtMs >= beforeReceivedAtMs)) throw new InsightsBadRequestError("Insights cursor or range does not match the requested event start.");
+	const databaseInput = {
+		filter,
+		sinceMs,
+		beforeReceivedAtMs,
+		...cursor === void 0 ? {} : { after: cursor.after },
+		limit: limit + 1
 	};
-	const rows = (await materializeRowsForWindow(scope, window)).filter(isTransitionEventRow);
-	const installedRows = rows.filter((row) => isInstalledForBundle(row, bundleId));
-	const recoveredRows = rows.filter((row) => isRecoveredFromBundle(row, bundleId));
-	const installed = collectEventActivity({
-		rows: installedRows,
-		window,
-		cutoffMs: scope.cutoffMs
-	});
-	const recovered = collectEventActivity({
-		rows: recoveredRows,
-		window,
-		cutoffMs: scope.cutoffMs
-	});
-	const recentRows = [...installedRows, ...recoveredRows].sort(compareEventNewest);
+	const rows = await model.listEvents(databaseInput);
+	assertEventRows(rows, databaseInput);
+	const pageRows = rows.slice(0, limit);
+	const last = pageRows.at(-1);
 	return {
-		summary: {
-			installed: installed.summary,
-			recovered: recovered.summary
-		},
-		series: {
-			installed: installed.series,
-			recovered: recovered.series
-		},
-		cohorts: {
-			installed: installed.cohorts,
-			recovered: recovered.cohorts
-		},
-		recentEvents: {
-			data: recentRows.slice(offset, offset + limit).map(toHistoryRow),
-			pagination: {
-				total: recentRows.length,
-				limit,
-				offset
-			}
-		}
+		beforeReceivedAtMs,
+		data: pageRows.map(map),
+		nextCursor: rows.length > limit && last ? encodeCursor({
+			after: {
+				id: last.id,
+				receivedAtMs: last.received_at_ms
+			},
+			beforeReceivedAtMs,
+			kind: "events",
+			filter,
+			sinceMs,
+			version: 2
+		}) : null
 	};
 };
-const getInsightsSummaries = async (persistence, bundleIds, window) => {
-	const normalizedBundleIds = [...new Set(bundleIds)];
-	if (normalizedBundleIds.length === 0) return [];
-	const requestedBundleIds = new Set(normalizedBundleIds);
-	const installedByBundleId = /* @__PURE__ */ new Map();
-	const recoveredByBundleId = /* @__PURE__ */ new Map();
-	const rows = (await materializeRowsForWindow({
-		persistence,
-		cutoffMs: Date.now()
-	}, window)).filter(isTransitionEventRow);
-	for (const row of rows) {
-		const bundleId = row.type === "UPDATE_APPLIED" ? row.to_bundle_id : row.from_bundle_id;
-		if (!requestedBundleIds.has(bundleId)) continue;
-		const counts = row.type === "UPDATE_APPLIED" ? installedByBundleId : recoveredByBundleId;
-		const installIds = counts.get(bundleId) ?? /* @__PURE__ */ new Set();
-		installIds.add(row.install_id);
-		counts.set(bundleId, installIds);
+const assertInstallationRows = (rows, input) => {
+	if (rows.length > input.limit) throw new Error("Insights database returned too many installation rows.");
+	for (let index = 0; index < rows.length; index += 1) {
+		const row = rows[index];
+		const previous = rows[index - 1];
+		if (!row || row.user_id !== input.userId || input.afterInstallId !== void 0 && compareInsightsText(row.install_id, input.afterInstallId) <= 0 || previous !== void 0 && compareInsightsText(previous.install_id, row.install_id) >= 0) throw new Error("Insights database returned invalid installation rows.");
 	}
-	return normalizedBundleIds.map((bundleId) => ({
-		bundleId,
-		installed: installedByBundleId.get(bundleId)?.size ?? 0,
-		recovered: recoveredByBundleId.get(bundleId)?.size ?? 0
-	}));
 };
-const createInsightsProvider = (persistence) => Object.freeze({
-	mode: "bounded",
-	maxMatchingRows: INSIGHTS_SCAN_MAX_ROWS,
+const createInsightsProvider = (model) => Object.freeze({
 	async appendBundleEvent(input) {
-		await persistence.append(createBundleEventRow(input));
+		const event = createBundleEventRow(input);
+		await model.record({
+			event,
+			installation: toInsightsInstallationRow(event)
+		});
 	},
-	async getBundleEventSummary(bundleId) {
-		const rows = (await materializeEventRows({
-			persistence,
-			cutoffMs: Date.now()
-		})).filter(isTransitionEventRow);
-		return {
-			installed: countDistinctInstallations(rows.filter((row) => isInstalledForBundle(row, bundleId))),
-			recovered: countDistinctInstallations(rows.filter((row) => isRecoveredFromBundle(row, bundleId)))
+	listEvents(input) {
+		const filter = input.bundle === void 0 ? { kind: "all" } : {
+			kind: "bundle",
+			...bundleFilter(input.bundle)
 		};
+		return pageEventRows(model, input, filter, toEventHistoryRow);
 	},
-	getBundleEventSummaries(bundleIds, window) {
-		return getInsightsSummaries(persistence, bundleIds, window);
+	async listInstallationEvents(input) {
+		if ("bundle" in input && input.bundle !== void 0) throw new InsightsBadRequestError("Installation movement queries cannot include a bundle filter.");
+		const installId = requireString(input.installId, "install ID", MAX_IDENTITY_LENGTH);
+		return pageEventRows(model, input, {
+			kind: "installationMovement",
+			installId
+		}, (row) => toEventHistoryRow(row));
 	},
-	getBundleEventInsights(bundleId, window, limit, offset) {
-		return getInsightsResult(persistence, bundleId, window, limit, offset);
+	async getInstallation({ installId }) {
+		const normalizedInstallId = requireString(installId, "install ID", MAX_IDENTITY_LENGTH);
+		const rows = await model.findInstallations({ installId: normalizedInstallId });
+		const row = rows[0] ?? null;
+		if (rows.length > 1 || row !== null && row.install_id !== normalizedInstallId) throw new Error("Insights database returned an invalid installation.");
+		return row === null ? null : toInstallationRow(row);
 	},
-	async getBundleEventOverview() {
-		const rows = await materializeEventRows({
-			persistence,
-			cutoffMs: Date.now()
-		});
-		const latestByInstall = /* @__PURE__ */ new Map();
-		for (const row of rows) {
-			const current = latestByInstall.get(row.install_id);
-			if (current === void 0 || compareEventNewest(row, current) < 0) latestByInstall.set(row.install_id, row);
-		}
-		const counts = /* @__PURE__ */ new Map();
-		for (const row of latestByInstall.values()) counts.set(row.to_bundle_id, (counts.get(row.to_bundle_id) ?? 0) + 1);
+	async pageInstallationsByCurrentUserId(input) {
+		const userId = requireString(input.userId, "user ID", MAX_IDENTITY_LENGTH);
+		const limit = readLimit(input.limit);
+		const cursor = input.cursor === void 0 ? void 0 : readUserInstallationCursor(input.cursor, userId);
+		const databaseInput = {
+			userId,
+			...cursor === void 0 ? {} : { afterInstallId: cursor.afterInstallId },
+			limit: limit + 1
+		};
+		const rows = await model.findInstallations(databaseInput);
+		assertInstallationRows(rows, databaseInput);
+		const pageRows = rows.slice(0, limit);
+		const last = pageRows.at(-1);
 		return {
-			trackedInstallations: latestByInstall.size,
-			bundles: [...counts].map(([bundleId, installations]) => ({
-				bundleId,
-				installations
-			})).sort((left, right) => right.installations - left.installations || compareCodePoints(left.bundleId, right.bundleId))
+			data: pageRows.map(toInstallationRow),
+			nextCursor: rows.length > limit && last ? encodeCursor({
+				afterInstallId: last.install_id,
+				kind: "user-installations",
+				userId,
+				version: 1
+			}) : null
 		};
 	},
-	async getActiveInstallationOverview(input) {
-		const asOfMs = Date.now();
-		return collectActiveInstallationOverview({
-			rows: await materializeActiveRows({
-				persistence,
-				cutoffMs: asOfMs
-			}, input.window),
-			asOfMs,
-			window: input.window,
-			...input.userId === void 0 ? {} : { userId: input.userId }
-		});
-	},
-	async searchInstallations(query, limit, offset) {
-		return searchEventInstallations({
-			rows: await materializeEventRows({
-				persistence,
-				cutoffMs: Date.now()
+	async getReportingOverview(input) {
+		const scope = readScope(input);
+		const { window } = input;
+		if (!Object.hasOwn(WINDOW_MS, window)) throw new InsightsBadRequestError("Invalid reporting installation window.");
+		const beforeReceivedAtMs = Date.now();
+		const sinceMs = Math.max(0, beforeReceivedAtMs - WINDOW_MS[window]);
+		const measure = async (count) => {
+			const value = await count;
+			if (!Number.isSafeInteger(value) || value < 0) throw new Error("Insights database returned an invalid count.");
+			return {
+				count: value,
+				measuredAtMs: Date.now()
+			};
+		};
+		const bundleId = input.bundleId === void 0 ? void 0 : requireString(input.bundleId, "bundle ID", MAX_EVENT_ID_LENGTH);
+		const reporting = measure(model.countInstallations({
+			...scope,
+			sinceMs
+		}));
+		if (bundleId === void 0) return {
+			...scope,
+			window,
+			sinceMs,
+			beforeReceivedAtMs,
+			reportingInstallations: await reporting
+		};
+		const countOutcome = (outcome) => measure(model.countEvents({
+			filter: bundleFilter({
+				...scope,
+				bundleId,
+				outcome
 			}),
-			query,
-			limit,
-			offset
-		});
-	},
-	async getInstallationHistory(installId, limit, offset) {
-		const ordered = (await materializeEventRows({
-			persistence,
-			cutoffMs: Date.now()
-		})).filter((row) => row.install_id === installId && isTransitionEventRow(row)).toSorted(compareEventNewest);
+			sinceMs,
+			beforeReceivedAtMs
+		}));
+		const [reportingInstallations, bundleInstallations, appliedReports, recoveredReports, adoptedReports] = await Promise.all([
+			reporting,
+			measure(model.countInstallations({
+				...scope,
+				sinceMs,
+				bundleId
+			})),
+			countOutcome("applied"),
+			countOutcome("recovered"),
+			countOutcome("adopted")
+		]);
 		return {
-			data: ordered.slice(offset, offset + limit).map(toHistoryRow),
-			pagination: {
-				total: ordered.length,
-				limit,
-				offset
+			...scope,
+			window,
+			sinceMs,
+			beforeReceivedAtMs,
+			reportingInstallations,
+			bundle: {
+				bundleId,
+				reportingInstallations: bundleInstallations,
+				appliedReports,
+				recoveredReports,
+				adoptedReports
 			}
 		};
 	}
@@ -4620,7 +4878,7 @@ const hashApiKey = async (apiKey) => {
 	return bytesToBase64Url(new Uint8Array(digest));
 };
 const apiKeyId = () => {
-	const bytes = new Uint8Array(16);
+	const bytes = /* @__PURE__ */ new Uint8Array(16);
 	crypto.getRandomValues(bytes);
 	return `api-${bytesToBase64Url(bytes)}`;
 };
@@ -4657,7 +4915,7 @@ const registerApiKey = async (input) => {
 	});
 };
 const createApiKey = (input) => {
-	const bytes = new Uint8Array(32);
+	const bytes = /* @__PURE__ */ new Uint8Array(32);
 	crypto.getRandomValues(bytes);
 	return registerApiKey({
 		apiKey: bytesToBase64Url(bytes),
@@ -5077,6 +5335,8 @@ const unsupportedSchemaUpgradeMessage = (version) => `Hot Updater v1 cannot migr
 //#endregion
 //#region ../../packages/server/dist/db/schemaReadiness.mjs
 var HotUpdaterSchemaMigrationRequiredError = class extends Error {
+	adapterName;
+	currentVersion;
 	constructor(adapterName, currentVersion) {
 		super(currentVersion === void 0 ? `Hot Updater database schema is not initialized for ${adapterName}. Run \`hot-updater db migrate\` before using this adapter.` : unsupportedSchemaUpgradeMessage(currentVersion));
 		this.adapterName = adapterName;
@@ -5106,7 +5366,7 @@ const sqlProviders = [
 const noSqlProviders = ["mongodb"];
 [...sqlProviders, ...noSqlProviders];
 function isDatabasePlugin(plugin) {
-	return typeof plugin === "object" && plugin !== null && "name" in plugin && typeof plugin.name === "string" && "models" in plugin && typeof plugin.models === "object" && plugin.models !== null && "bundles" in plugin.models && typeof plugin.models.bundles === "object" && plugin.models.bundles !== null && "findById" in plugin.models.bundles && typeof plugin.models.bundles.findById === "function" && "findMany" in plugin.models.bundles && typeof plugin.models.bundles.findMany === "function" && "count" in plugin.models.bundles && typeof plugin.models.bundles.count === "function" && "bundlePatches" in plugin.models && typeof plugin.models.bundlePatches === "object" && plugin.models.bundlePatches !== null && "findByBundleIds" in plugin.models.bundlePatches && typeof plugin.models.bundlePatches.findByBundleIds === "function" && "channels" in plugin.models && typeof plugin.models.channels === "object" && plugin.models.channels !== null && "insert" in plugin.models.channels && typeof plugin.models.channels.insert === "function" && "list" in plugin.models.channels && typeof plugin.models.channels.list === "function" && "delete" in plugin.models.channels && typeof plugin.models.channels.delete === "function" && "insights" in plugin.models && typeof plugin.models.insights === "object" && plugin.models.insights !== null && "append" in plugin.models.insights && typeof plugin.models.insights.append === "function" && "scan" in plugin.models.insights && typeof plugin.models.insights.scan === "function" && "apiKeys" in plugin.models && typeof plugin.models.apiKeys === "object" && plugin.models.apiKeys !== null && "create" in plugin.models.apiKeys && typeof plugin.models.apiKeys.create === "function" && "findByHash" in plugin.models.apiKeys && typeof plugin.models.apiKeys.findByHash === "function" && "list" in plugin.models.apiKeys && typeof plugin.models.apiKeys.list === "function" && "revoke" in plugin.models.apiKeys && typeof plugin.models.apiKeys.revoke === "function" && "commit" in plugin && typeof plugin.commit === "function" && (!("dispose" in plugin) || plugin.dispose === void 0 || typeof plugin.dispose === "function");
+	return typeof plugin === "object" && plugin !== null && "name" in plugin && typeof plugin.name === "string" && "models" in plugin && typeof plugin.models === "object" && plugin.models !== null && "bundles" in plugin.models && typeof plugin.models.bundles === "object" && plugin.models.bundles !== null && "findById" in plugin.models.bundles && typeof plugin.models.bundles.findById === "function" && "findMany" in plugin.models.bundles && typeof plugin.models.bundles.findMany === "function" && "count" in plugin.models.bundles && typeof plugin.models.bundles.count === "function" && "bundlePatches" in plugin.models && typeof plugin.models.bundlePatches === "object" && plugin.models.bundlePatches !== null && "findByBundleIds" in plugin.models.bundlePatches && typeof plugin.models.bundlePatches.findByBundleIds === "function" && "channels" in plugin.models && typeof plugin.models.channels === "object" && plugin.models.channels !== null && "insert" in plugin.models.channels && typeof plugin.models.channels.insert === "function" && "list" in plugin.models.channels && typeof plugin.models.channels.list === "function" && "delete" in plugin.models.channels && typeof plugin.models.channels.delete === "function" && "insights" in plugin.models && typeof plugin.models.insights === "object" && plugin.models.insights !== null && "record" in plugin.models.insights && typeof plugin.models.insights.record === "function" && "listEvents" in plugin.models.insights && typeof plugin.models.insights.listEvents === "function" && "findInstallations" in plugin.models.insights && typeof plugin.models.insights.findInstallations === "function" && "countEvents" in plugin.models.insights && typeof plugin.models.insights.countEvents === "function" && "countInstallations" in plugin.models.insights && typeof plugin.models.insights.countInstallations === "function" && "apiKeys" in plugin.models && typeof plugin.models.apiKeys === "object" && plugin.models.apiKeys !== null && "create" in plugin.models.apiKeys && typeof plugin.models.apiKeys.create === "function" && "findByHash" in plugin.models.apiKeys && typeof plugin.models.apiKeys.findByHash === "function" && "list" in plugin.models.apiKeys && typeof plugin.models.apiKeys.list === "function" && "revoke" in plugin.models.apiKeys && typeof plugin.models.apiKeys.revoke === "function" && "commit" in plugin && typeof plugin.commit === "function" && (!("dispose" in plugin) || plugin.dispose === void 0 || typeof plugin.dispose === "function");
 }
 //#endregion
 //#region ../../packages/server/dist/storageAccess.mjs
@@ -5209,27 +5469,41 @@ const hotUpdaterCoreMetadata = Symbol.for("@hot-updater/server/core-metadata");
 function createHotUpdaterCore(options) {
 	for (const key of ["authorityId", "catalogId"]) if (Object.hasOwn(options, key)) throw new TypeError(`Remove ${key} from createHotUpdater options. Catalog identity is managed internally.`);
 	const database = options.database;
-	const { downloadStorageObject, readStorageText, resolveFileUrl } = createStorageAccess((options.storage ?? []).map((storage) => {
+	const storagePlugins = (options.storage ?? []).map((storage) => {
 		assertStorageOperations(storage, ["get", "getDownloadUrl"]);
 		return storage;
-	}));
+	});
+	const { downloadStorageObject, readStorageText, resolveFileUrl } = createStorageAccess(storagePlugins);
 	const adapterCapabilities = database;
 	if (!isDatabasePlugin(database)) throw new Error("@hot-updater/server only supports database plugins.");
 	const plugin = database;
-	const assertSchemaReady = createSchemaReadinessChecker(adapterCapabilities.adapterName ?? plugin.name, adapterCapabilities.createMigrator);
+	const adapterName = adapterCapabilities.adapterName ?? plugin.name;
+	const assertSchemaReady = createSchemaReadinessChecker(adapterName, adapterCapabilities.createMigrator);
 	const core = createDatabasePluginCore(plugin, resolveFileUrl, {
 		beforeOperation: assertSchemaReady,
 		readStorageText
 	});
 	const clientAccess = normalizeClientAccess(options.clientAccess);
 	const insights = createInsightsProvider({
-		async append(row) {
+		async record(input) {
+			await assertSchemaReady();
+			return plugin.models.insights.record(input);
+		},
+		async listEvents(input) {
 			await assertSchemaReady();
-			return plugin.models.insights.append(row);
+			return plugin.models.insights.listEvents(input);
 		},
-		async scan(input) {
+		async findInstallations(input) {
 			await assertSchemaReady();
-			return plugin.models.insights.scan(input);
+			return plugin.models.insights.findInstallations(input);
+		},
+		async countInstallations(input) {
+			await assertSchemaReady();
+			return plugin.models.insights.countInstallations(input);
+		},
+		async countEvents(input) {
+			await assertSchemaReady();
+			return plugin.models.insights.countEvents(input);
 		}
 	});
 	const apiKeys = createApiKeyManagement({
@@ -5270,6 +5544,7 @@ function createHotUpdater(options) {
 //#endregion
 //#region src/firebaseDatabaseParserShared.ts
 var FirebaseDatabaseDataError = class extends Error {
+	source;
 	name = "FirebaseDatabaseDataError";
 	constructor(source) {
 		super(`Invalid Firebase database data at "${source}".`);
@@ -5381,6 +5656,24 @@ const parseFirebaseBundleEventRow = (value, source) => {
 		received_at_ms: number(property(input, "received_at_ms"), source)
 	};
 };
+const parseFirebaseInsightsInstallationRow = (value, source) => {
+	const input = record(value, source);
+	const type = string(property(input, "type"), source);
+	if (type !== "UPDATE_APPLIED" && type !== "RECOVERED" && type !== "RELEASE_ADOPTED" && type !== "UNCHANGED") throw new FirebaseDatabaseDataError(source);
+	return {
+		id: string(property(input, "id"), source),
+		type,
+		install_id: string(property(input, "install_id"), source),
+		user_id: nullableString(property(input, "user_id"), source),
+		username: nullableString(property(input, "username"), source),
+		to_bundle_id: string(property(input, "to_bundle_id"), source),
+		platform: platform(property(input, "platform"), source),
+		app_version: string(property(input, "app_version"), source),
+		channel: string(property(input, "channel"), source),
+		cohort: string(property(input, "cohort"), source),
+		received_at_ms: number(property(input, "received_at_ms"), source)
+	};
+};
 const parseFirebaseApiKeyRow = (value, source) => {
 	const input = record(value, source);
 	const role = string(property(input, "role"), source);
@@ -5461,13 +5754,15 @@ const matchesCondition = (row, condition) => {
 	switch (condition.operator ?? "eq") {
 		case "eq": {
 			if (typeof expected !== "string") return actual === expected;
-			const comparison = normalizeStringComparison(actual, expected, "mode" in condition ? condition.mode : void 0);
+			const mode = "mode" in condition ? condition.mode : void 0;
+			const comparison = normalizeStringComparison(actual, expected, mode);
 			return comparison !== null && comparison[0] === comparison[1];
 		}
 		case "ne": {
 			if (actual === null || actual === void 0) return false;
 			if (typeof expected !== "string") return actual !== expected;
-			const comparison = normalizeStringComparison(actual, expected, "mode" in condition ? condition.mode : void 0);
+			const mode = "mode" in condition ? condition.mode : void 0;
+			const comparison = normalizeStringComparison(actual, expected, mode);
 			return comparison === null || comparison[0] !== comparison[1];
 		}
 		case "gt":
@@ -5492,17 +5787,20 @@ const matchesCondition = (row, condition) => {
 		}
 		case "contains": {
 			if (typeof expected !== "string") return false;
-			const comparison = normalizeStringComparison(actual, expected, "mode" in condition ? condition.mode : void 0);
+			const mode = "mode" in condition ? condition.mode : void 0;
+			const comparison = normalizeStringComparison(actual, expected, mode);
 			return comparison?.[0].includes(comparison[1]) ?? false;
 		}
 		case "starts_with": {
 			if (typeof expected !== "string") return false;
-			const comparison = normalizeStringComparison(actual, expected, "mode" in condition ? condition.mode : void 0);
+			const mode = "mode" in condition ? condition.mode : void 0;
+			const comparison = normalizeStringComparison(actual, expected, mode);
 			return comparison?.[0].startsWith(comparison[1]) ?? false;
 		}
 		case "ends_with": {
 			if (typeof expected !== "string") return false;
-			const comparison = normalizeStringComparison(actual, expected, "mode" in condition ? condition.mode : void 0);
+			const mode = "mode" in condition ? condition.mode : void 0;
+			const comparison = normalizeStringComparison(actual, expected, mode);
 			return comparison?.[0].endsWith(comparison[1]) ?? false;
 		}
 	}
@@ -5547,6 +5845,7 @@ const queryFirebaseDatabaseRows = (rows, input) => {
 //#endregion
 //#region src/firebaseDatabaseState.ts
 var FirebaseDatabaseConstraintError = class extends Error {
+	constraint;
 	name = "FirebaseDatabaseConstraintError";
 	constructor(constraint) {
 		super(`Firebase database constraint failed: ${constraint}`);
@@ -5557,6 +5856,7 @@ const cloneFirebaseDatabaseSnapshot = (snapshot) => ({
 	bundles: new Map(snapshot.bundles),
 	bundlePatches: new Map(snapshot.bundlePatches),
 	bundleEvents: new Map(snapshot.bundleEvents),
+	bundleInstallations: new Map(snapshot.bundleInstallations),
 	channels: new Map(snapshot.channels),
 	apiKeys: new Map(snapshot.apiKeys),
 	releaseCatalogs: new Map(snapshot.releaseCatalogs),
@@ -5586,6 +5886,13 @@ const createFirebaseDatabaseState = (snapshot) => ({
 				requireUnique(snapshot.bundleEvents, input.data.id, input.model);
 				snapshot.bundleEvents.set(input.data.id, input.data);
 				return input.data;
+			case "bundle_installations": {
+				const current = snapshot.bundleInstallations.get(input.data.install_id);
+				if (current && input.onConflict === "ignore") return current;
+				if (current) throw new FirebaseDatabaseConstraintError("bundle_installations.install_id.unique");
+				snapshot.bundleInstallations.set(input.data.install_id, input.data);
+				return input.data;
+			}
 			case "releases":
 				requireUnique(snapshot.releases, input.data.id, input.model);
 				if (!snapshot.channels.has(input.data.channel_id)) throw new FirebaseDatabaseConstraintError("releases.channel_id.foreign-key");
@@ -5615,6 +5922,16 @@ const createFirebaseDatabaseState = (snapshot) => ({
 		}
 	},
 	async update(input) {
+		if (input.model === "bundle_installations") {
+			const current = [...snapshot.bundleInstallations.values()].find((row) => matchesFirebaseDatabaseWhere(row, input.where));
+			if (!current) return null;
+			const updated = {
+				...current,
+				...input.update
+			};
+			snapshot.bundleInstallations.set(current.install_id, updated);
+			return updated;
+		}
 		if (input.model === "api_keys") {
 			const current = [...snapshot.apiKeys.values()].find((row) => matchesFirebaseDatabaseWhere(row, input.where));
 			if (!current) return null;
@@ -5676,6 +5993,8 @@ const createFirebaseDatabaseState = (snapshot) => ({
 			case "bundles": return distinctCount([...snapshot.bundles.values()].filter((row) => matchesFirebaseDatabaseWhere(row, input.where)), input.distinct);
 			case "bundle_patches": return distinctCount([...snapshot.bundlePatches.values()].filter((row) => matchesFirebaseDatabaseWhere(row, input.where)), input.distinct);
 			case "releases": return distinctCount([...snapshot.releases.values()].filter((row) => matchesFirebaseDatabaseWhere(row, input.where)), input.distinct);
+			case "bundle_installations": return distinctCount([...snapshot.bundleInstallations.values()].filter((row) => matchesFirebaseDatabaseWhere(row, input.where)), input.distinct);
+			case "bundle_events": return distinctCount([...snapshot.bundleEvents.values()].filter((row) => matchesFirebaseDatabaseWhere(row, input.where)), input.distinct);
 		}
 	},
 	async findOne(input) {
@@ -5686,6 +6005,7 @@ const createFirebaseDatabaseState = (snapshot) => ({
 			case "bundle_patches": return [...snapshot.bundlePatches.values()].find((row) => matchesFirebaseDatabaseWhere(row, input.where)) ?? null;
 			case "releases": return [...snapshot.releases.values()].find((row) => matchesFirebaseDatabaseWhere(row, input.where)) ?? null;
 			case "release_catalogs": return [...snapshot.releaseCatalogs.values()].find((row) => matchesFirebaseDatabaseWhere(row, input.where)) ?? null;
+			case "bundle_installations": return [...snapshot.bundleInstallations.values()].find((row) => matchesFirebaseDatabaseWhere(row, input.where)) ?? null;
 		}
 	},
 	async findMany(input) {
@@ -5693,6 +6013,7 @@ const createFirebaseDatabaseState = (snapshot) => ({
 			case "bundles": return queryFirebaseDatabaseRows([...snapshot.bundles.values()], input);
 			case "bundle_patches": return queryFirebaseDatabaseRows([...snapshot.bundlePatches.values()], input);
 			case "bundle_events": return queryFirebaseDatabaseRows([...snapshot.bundleEvents.values()], input);
+			case "bundle_installations": return queryFirebaseDatabaseRows([...snapshot.bundleInstallations.values()], input);
 			case "channels": return queryFirebaseDatabaseRows([...snapshot.channels.values()], input);
 			case "api_keys": return queryFirebaseDatabaseRows([...snapshot.apiKeys.values()], input);
 			case "releases": return queryFirebaseDatabaseRows([...snapshot.releases.values()], input);
@@ -5705,6 +6026,7 @@ const createFirebaseDatabaseState = (snapshot) => ({
 const FIREBASE_V1_COLLECTION_NAMES = {
 	apiKeys: "hot_updater_v1_api_keys",
 	bundleEvents: "hot_updater_v1_bundle_events",
+	bundleInstallations: "hot_updater_v1_bundle_installations",
 	bundlePatches: "hot_updater_v1_bundle_patches",
 	bundles: "hot_updater_v1_bundles",
 	channels: "hot_updater_v1_channels",
@@ -5715,6 +6037,7 @@ const FIREBASE_V1_COLLECTION_NAMES = {
 //#endregion
 //#region src/firebaseDatabasePersistence.ts
 var FirebaseDatabaseAdapterVersionError = class extends Error {
+	version;
 	name = "FirebaseDatabaseAdapterVersionError";
 	constructor(version) {
 		super(`Unsupported Firebase database adapter version: ${String(version)}`);
@@ -5725,6 +6048,7 @@ const createFirebaseDatabaseCollections = (db) => ({
 	bundles: db.collection(FIREBASE_V1_COLLECTION_NAMES.bundles),
 	bundlePatches: db.collection(FIREBASE_V1_COLLECTION_NAMES.bundlePatches),
 	bundleEvents: db.collection(FIREBASE_V1_COLLECTION_NAMES.bundleEvents),
+	bundleInstallations: db.collection(FIREBASE_V1_COLLECTION_NAMES.bundleInstallations),
 	channels: db.collection(FIREBASE_V1_COLLECTION_NAMES.channels),
 	apiKeys: db.collection(FIREBASE_V1_COLLECTION_NAMES.apiKeys),
 	releaseCatalogs: db.collection(FIREBASE_V1_COLLECTION_NAMES.releaseCatalogs),
@@ -5733,14 +6057,15 @@ const createFirebaseDatabaseCollections = (db) => ({
 });
 const firebaseChannelDocumentId = (name) => `name_${Buffer.from(name, "utf8").toString("base64url")}`;
 const firebaseChannelIdDocumentId = (id) => `channel_id_${Buffer.from(id, "utf8").toString("base64url")}`;
+const firebaseInstallationDocumentId = (id) => `install_${Buffer.from(id, "utf8").toString("base64url")}`;
 const requireFirebaseDocumentKey = (model, documentId, row) => {
-	if (documentId !== ("id" in row ? row.id : row.scope_key)) throw new FirebaseDatabaseConstraintError(`${model}.id.document-key`);
+	if (documentId !== (model === "bundle_installations" ? firebaseInstallationDocumentId(row.install_id) : "id" in row ? row.id : row.scope_key)) throw new FirebaseDatabaseConstraintError(`${model}.id.document-key`);
 	return row;
 };
 const documentMap = (model, documents) => {
 	const rows = /* @__PURE__ */ new Map();
 	for (const { row } of documents) {
-		const key = "id" in row ? row.id : row.scope_key;
+		const key = model === "bundle_installations" ? row.install_id : "id" in row ? row.id : row.scope_key;
 		if (rows.has(key)) throw new FirebaseDatabaseConstraintError(`${model}.id.unique`);
 		rows.set(key, row);
 	}
@@ -5755,10 +6080,6 @@ const patchMap = (snapshot) => documentMap("bundle_patches", snapshot.docs.map((
 	document,
 	row: parseFirebasePatchRow(document.data(), `bundle_patches/${document.id}`)
 })));
-const eventMap = (snapshot) => documentMap("bundle_events", snapshot.docs.map((document) => ({
-	document,
-	row: parseFirebaseBundleEventRow(document.data(), `bundle_events/${document.id}`)
-})));
 const channelMap = (snapshot) => {
 	const rows = /* @__PURE__ */ new Map();
 	const names = /* @__PURE__ */ new Set();
@@ -5789,18 +6110,18 @@ const toSnapshot = (documents) => {
 	return {
 		bundles: bundleMap(documents[0]),
 		bundlePatches: patchMap(documents[1]),
-		bundleEvents: eventMap(documents[2]),
-		channels: channelMap(documents[3]),
-		apiKeys: apiKeyMap(documents[4]),
-		releases: releaseMap(documents[5]),
-		releaseCatalogs: releaseCatalogMap(documents[6])
+		bundleEvents: /* @__PURE__ */ new Map(),
+		bundleInstallations: /* @__PURE__ */ new Map(),
+		channels: channelMap(documents[2]),
+		apiKeys: apiKeyMap(documents[3]),
+		releases: releaseMap(documents[4]),
+		releaseCatalogs: releaseCatalogMap(documents[5])
 	};
 };
 const loadFirebaseDatabaseSnapshot = async (collections) => {
-	const [bundles, patches, events, channels, apiKeys, releases, releaseCatalogs] = await Promise.all([
+	const [bundles, patches, channels, apiKeys, releases, releaseCatalogs] = await Promise.all([
 		collections.bundles.get(),
 		collections.bundlePatches.get(),
-		collections.bundleEvents.get(),
 		collections.channels.get(),
 		collections.apiKeys.get(),
 		collections.releases.get(),
@@ -5809,7 +6130,6 @@ const loadFirebaseDatabaseSnapshot = async (collections) => {
 	return toSnapshot([
 		bundles,
 		patches,
-		events,
 		channels,
 		apiKeys,
 		releases,
@@ -5817,10 +6137,9 @@ const loadFirebaseDatabaseSnapshot = async (collections) => {
 	]);
 };
 const loadFirebaseTransactionSnapshot = async (transaction, collections) => {
-	const [bundles, patches, events, channels, apiKeys, releases, releaseCatalogs] = await Promise.all([
+	const [bundles, patches, channels, apiKeys, releases, releaseCatalogs] = await Promise.all([
 		transaction.get(collections.bundles),
 		transaction.get(collections.bundlePatches),
-		transaction.get(collections.bundleEvents),
 		transaction.get(collections.channels),
 		transaction.get(collections.apiKeys),
 		transaction.get(collections.releases),
@@ -5829,7 +6148,6 @@ const loadFirebaseTransactionSnapshot = async (transaction, collections) => {
 	return toSnapshot([
 		bundles,
 		patches,
-		events,
 		channels,
 		apiKeys,
 		releases,
@@ -5855,13 +6173,6 @@ const persistFirebaseDatabaseSnapshot = ({ transaction, collections, before, aft
 		after: after.bundlePatches,
 		documentId: (row) => row.id
 	});
-	persistCollection({
-		transaction,
-		collection: collections.bundleEvents,
-		before: before.bundleEvents,
-		after: after.bundleEvents,
-		documentId: (row) => row.id
-	});
 	persistCollection({
 		transaction,
 		collection: collections.channels,
@@ -5893,7 +6204,7 @@ const persistFirebaseDatabaseSnapshot = ({ transaction, collections, before, aft
 		documentId: (row) => row.scope_key
 	});
 };
-const migrateFirebaseDatabase = async (_db, collections) => {
+const migrateFirebaseDatabase = async (collections) => {
 	const versionDocument = collections.settings.doc("database_adapter_version");
 	const version = await versionDocument.get();
 	const adapterVersion = version.data()?.version;
@@ -5904,7 +6215,9 @@ const migrateFirebaseDatabase = async (_db, collections) => {
 		collections.bundlePatches.limit(1).get(),
 		collections.channels.limit(1).get(),
 		collections.releases.limit(1).get(),
-		collections.releaseCatalogs.limit(1).get()
+		collections.releaseCatalogs.limit(1).get(),
+		collections.bundleInstallations.limit(1).get(),
+		collections.bundleEvents.limit(1).get()
 	])).some((snapshot) => !snapshot.empty)) throw new FirebaseDatabaseAdapterVersionError("v0");
 	try {
 		await versionDocument.create({ version: 4 });
@@ -5919,13 +6232,40 @@ const exactId = (input) => {
 	const [condition] = input.where;
 	return condition.field === "id" && (condition.operator === void 0 || condition.operator === "eq") && typeof condition.value === "string" ? condition.value : void 0;
 };
+const exactInstallId = (input) => {
+	const condition = input.where?.find(({ field, operator }) => field === "install_id" && (operator === void 0 || operator === "eq"));
+	return typeof condition?.value === "string" ? condition.value : void 0;
+};
+const firestoreOperator = (operator) => {
+	switch (operator ?? "eq") {
+		case "eq": return "==";
+		case "ne": return "!=";
+		case "gt": return ">";
+		case "gte": return ">=";
+		case "lt": return "<";
+		case "lte": return "<=";
+		case "in": return "in";
+		case "not_in": return "not-in";
+		default: return;
+	}
+};
+const applyFirebaseWhere = (initial, where) => {
+	let query = initial;
+	for (const condition of where) {
+		const operator = firestoreOperator(condition.operator);
+		if (condition.connector === "OR" || operator === void 0) throw new FirebaseDatabaseConstraintError("query.unsupported");
+		query = query.where(condition.field, operator, condition.value);
+	}
+	return query;
+};
 const firebaseDatabase = (config) => {
-	const adapter = createDatabasePluginAdapter("firebaseDatabase", (() => {
-		const db = (0, firebase_admin_firestore.getFirestore)((0, firebase_admin_app.getApps)().length ? (0, firebase_admin_app.getApp)() : (0, firebase_admin_app.initializeApp)(config));
+	const implementation = (() => {
+		const app = (0, firebase_admin_app.getApps)().length ? (0, firebase_admin_app.getApp)() : (0, firebase_admin_app.initializeApp)(config);
+		const db = (0, firebase_admin_firestore.getFirestore)(app);
 		const collections = createFirebaseDatabaseCollections(db);
 		let migration;
 		const ensureMigrated = () => {
-			migration ??= migrateFirebaseDatabase(db, collections).catch((error) => {
+			migration ??= migrateFirebaseDatabase(collections).catch((error) => {
 				migration = void 0;
 				throw error;
 			});
@@ -5948,14 +6288,74 @@ const firebaseDatabase = (config) => {
 		};
 		const read = async (operation) => {
 			await ensureMigrated();
-			return operation(createFirebaseDatabaseState(await loadFirebaseDatabaseSnapshot(collections)));
+			const snapshot = await loadFirebaseDatabaseSnapshot(collections);
+			return operation(createFirebaseDatabaseState(snapshot));
 		};
 		return {
-			create: (input) => mutate((database) => database.create(input)),
-			update: (input) => mutate((database) => database.update(input)),
+			recordInsights: async ({ event, installation }) => {
+				await ensureMigrated();
+				await db.runTransaction(async (transaction) => {
+					const eventReference = collections.bundleEvents.doc(event.id);
+					const installationReference = collections.bundleInstallations.doc(firebaseInstallationDocumentId(installation.install_id));
+					const [storedEvent, storedInstallation] = await transaction.getAll(eventReference, installationReference);
+					if (storedEvent.exists) return;
+					const current = storedInstallation.exists ? requireFirebaseDocumentKey("bundle_installations", storedInstallation.id, parseFirebaseInsightsInstallationRow(storedInstallation.data(), `bundle_installations/${storedInstallation.id}`)) : null;
+					transaction.create(eventReference, event);
+					if (current === null || installation.received_at_ms > current.received_at_ms || installation.received_at_ms === current.received_at_ms && compareInsightsText(installation.id, current.id) > 0) transaction.set(installationReference, installation);
+				});
+			},
+			create: async (input) => {
+				if (input.model !== "bundle_events" && input.model !== "bundle_installations") return mutate((database) => database.create(input));
+				await ensureMigrated();
+				return db.runTransaction(async (transaction) => {
+					const collection = input.model === "bundle_events" ? collections.bundleEvents : collections.bundleInstallations;
+					const documentId = input.model === "bundle_events" ? input.data.id : firebaseInstallationDocumentId(input.data.install_id);
+					const reference = collection.doc(documentId);
+					const document = await transaction.get(reference);
+					if (document.exists) {
+						const row = input.model === "bundle_events" ? requireFirebaseDocumentKey("bundle_events", document.id, parseFirebaseBundleEventRow(document.data(), `bundle_events/${document.id}`)) : requireFirebaseDocumentKey("bundle_installations", document.id, parseFirebaseInsightsInstallationRow(document.data(), `bundle_installations/${document.id}`));
+						if (input.onConflict === "ignore") return row;
+						throw new FirebaseDatabaseConstraintError(`${input.model}.id.unique`);
+					}
+					transaction.create(reference, input.data);
+					return input.data;
+				});
+			},
+			update: async (input) => {
+				if (input.model !== "bundle_installations") return mutate((database) => database.update(input));
+				const installId = exactInstallId(input);
+				if (installId === void 0) return mutate((database) => database.update(input));
+				await ensureMigrated();
+				return db.runTransaction(async (transaction) => {
+					const reference = collections.bundleInstallations.doc(firebaseInstallationDocumentId(installId));
+					const document = await transaction.get(reference);
+					if (!document.exists) return null;
+					const current = requireFirebaseDocumentKey("bundle_installations", document.id, parseFirebaseInsightsInstallationRow(document.data(), `bundle_installations/${document.id}`));
+					if (!matchesFirebaseDatabaseWhere(current, input.where)) return null;
+					const updated = {
+						...current,
+						...input.update
+					};
+					transaction.set(reference, updated, { merge: true });
+					return updated;
+				});
+			},
 			delete: (input) => mutate((database) => database.delete(input)),
-			count: (input) => read((database) => database.count(input)),
+			count: async (input) => {
+				if (input.model !== "bundle_installations" && input.model !== "bundle_events") return read((database) => database.count(input));
+				await ensureMigrated();
+				let query = applyFirebaseWhere(input.model === "bundle_events" ? collections.bundleEvents : collections.bundleInstallations, input.where ?? []);
+				if (input.model === "bundle_events") query = query.orderBy("received_at_ms", "desc").orderBy("id", "desc");
+				return (await query.count().get()).data().count;
+			},
 			findOne: async (input) => {
+				if (input.model === "bundle_installations") {
+					const installId = exactInstallId(input);
+					if (installId === void 0) return read((database) => database.findOne(input));
+					await ensureMigrated();
+					const document = await collections.bundleInstallations.doc(firebaseInstallationDocumentId(installId)).get();
+					return document.exists ? requireFirebaseDocumentKey("bundle_installations", document.id, parseFirebaseInsightsInstallationRow(document.data(), `bundle_installations/${document.id}`)) : null;
+				}
 				const id = exactId(input);
 				if (id === void 0) return read((database) => database.findOne(input));
 				await ensureMigrated();
@@ -5976,9 +6376,21 @@ const firebaseDatabase = (config) => {
 				}
 			},
 			findMany: async (input) => {
-				if (input.model !== "channels") return read((database) => database.findMany(input));
-				await ensureMigrated();
-				return queryFirebaseDatabaseRows(await loadFirebaseChannels(collections), input);
+				if (input.model === "bundle_events" || input.model === "bundle_installations") {
+					await ensureMigrated();
+					const collection = input.model === "bundle_events" ? collections.bundleEvents : collections.bundleInstallations;
+					let query = applyFirebaseWhere(collection, input.where ?? []);
+					for (const order of input.orderBy ?? []) {
+						if (order.nulls !== void 0) throw new FirebaseDatabaseConstraintError("query.unsupported");
+						query = query.orderBy(order.field, order.direction);
+					}
+					return (await query.offset(input.offset).limit(input.limit).get()).docs.map((document) => input.model === "bundle_events" ? requireFirebaseDocumentKey("bundle_events", document.id, parseFirebaseBundleEventRow(document.data(), `bundle_events/${document.id}`)) : requireFirebaseDocumentKey("bundle_installations", document.id, parseFirebaseInsightsInstallationRow(document.data(), `bundle_installations/${document.id}`)));
+				}
+				if (input.model === "channels") {
+					await ensureMigrated();
+					return queryFirebaseDatabaseRows(await loadFirebaseChannels(collections), input);
+				}
+				return read((database) => database.findMany(input));
 			},
 			insertChannel: async (input) => {
 				await ensureMigrated();
@@ -6030,7 +6442,8 @@ const firebaseDatabase = (config) => {
 			},
 			transaction: (callback) => mutate(callback)
 		};
-	})());
+	})();
+	const adapter = createDatabasePluginAdapter("firebaseDatabase", implementation);
 	return createDatabasePlugin({
 		name: "firebaseDatabase",
 		models: adapter.models,
@@ -6040,7 +6453,8 @@ const firebaseDatabase = (config) => {
 //#endregion
 //#region src/firebaseStorage.ts
 const firebaseStorage = (config) => {
-	const bucket = (0, firebase_admin_storage.getStorage)((0, firebase_admin_app.getApps)().length ? (0, firebase_admin_app.getApp)() : (0, firebase_admin_app.initializeApp)(config)).bucket(config.storageBucket);
+	const app = (0, firebase_admin_app.getApps)().length ? (0, firebase_admin_app.getApp)() : (0, firebase_admin_app.initializeApp)(config);
+	const bucket = (0, firebase_admin_storage.getStorage)(app).bucket(config.storageBucket);
 	const getStorageKey = createStorageKeyBuilder(config.basePath);
 	const parseAndValidate = (storageUri) => {
 		const parsed = parseStorageUri(storageUri, "gs");