@hot-updater/firebase 1.0.0-rc.40 → 1.0.0-rc.42

package/dist/firebase/functions/index.cjs

@@ -303,7 +303,7 @@ function normalizeFull(version, options = {}) {
 	const parsed = tryParse$1(version, options);
 	return parsed ? formatFullVersion(parsed) : null;
 }
-function coerce(value, options = {}) {
+function coerce$1(value, options = {}) {
 	if (typeof value === "object") return value;
 	const input = typeof value === "number" ? String(value) : value;
 	let match = null;
@@ -326,7 +326,7 @@ function coerce(value, options = {}) {
 * dropped.
 */
 function canonicalizeAppVersion(appVersion) {
-	const version = coerce(appVersion);
+	const version = coerce$1(appVersion);
 	return version ? normalizeFull(version) : null;
 }
 const stripBundleArtifactMetadata = (metadata) => metadata;
@@ -427,10 +427,22 @@ function normalizeCohortValue(cohort) {
 function getNumericCohortValue(cohort) {
 	return parseNumericCohortValue(normalizeCohortValue(cohort));
 }
+function isNumericCohort(cohort) {
+	return getNumericCohortValue(cohort) !== null;
+}
 function isCustomCohort(cohort) {
 	const normalized = normalizeCohortValue(cohort);
 	return normalized.length > 0 && normalized.length <= 64 && !/^\d+$/.test(normalized) && CUSTOM_COHORT_PATTERN.test(normalized);
 }
+function isValidCohort(cohort) {
+	const normalized = normalizeCohortValue(cohort);
+	return isNumericCohort(normalized) || isCustomCohort(normalized);
+}
+function getNumericCohortRolloutPosition(bundleId, cohortValue) {
+	if (cohortValue < 1 || cohortValue > 1e3) throw new Error(`Invalid numeric cohort: ${cohortValue}`);
+	const { offset, inverseMultiplier } = getRolloutShuffleParameters(bundleId);
+	return positiveMod(inverseMultiplier * (cohortValue - 1 - offset), NUMERIC_COHORT_SIZE);
+}
 function getRolledOutNumericCohorts(bundleId, rolloutCohortCount) {
 	const normalizedRolloutCount = normalizeRolloutCohortCount(rolloutCohortCount);
 	if (normalizedRolloutCount <= 0) return [];
@@ -768,6 +780,25 @@ function parseComparator$1(comparator, options = {}) {
 		version
 	};
 }
+function testParsedComparator$1(comparator, version) {
+	if (!comparator.version) return true;
+	const comparison = compareParsed$1(version, comparator.version);
+	switch (comparator.operator) {
+		case "": return comparison === 0;
+		case ">": return comparison > 0;
+		case ">=": return comparison >= 0;
+		case "<": return comparison < 0;
+		case "<=": return comparison <= 0;
+	}
+}
+function comparatorAllowsPrerelease$1(comparator, version) {
+	const allowed = comparator.version;
+	return allowed !== null && !!allowed.prerelease?.length && allowed.major === version.major && allowed.minor === version.minor && allowed.patch === version.patch;
+}
+function testComparatorSet$1(set, version, options) {
+	if (set.some((comparator) => !testParsedComparator$1(comparator, version))) return false;
+	return !version.prerelease?.length || !!options.includePrerelease || set.some((comparator) => comparatorAllowsPrerelease$1(comparator, version));
+}
 //#endregion
 //#region ../plugin-core/dist/node_modules/.pnpm/verkit@0.4.0/node_modules/verkit/dist/range-DvX-Y6iv.mjs
 function formatRange(range) {
@@ -915,25 +946,61 @@ function parseRange$1(range, options = {}) {
 		sets
 	};
 }
-function tryParseRange(range, options = {}) {
+function tryParseRange$1(range, options = {}) {
 	try {
 		return parseRange$1(range, options);
 	} catch {
 		return null;
 	}
 }
+function testParsedRange(range, version) {
+	return range.sets.some((set) => testComparatorSet$1(set, version, range.options));
+}
+function testRangeVersion(range, version) {
+	const parsed = tryParse(version, range.options);
+	return parsed ? testParsedRange(range, parsed) : false;
+}
 function normalizeRange(range, options = {}) {
-	const parsed = tryParseRange(range, options);
+	const parsed = tryParseRange$1(range, options);
 	return parsed ? formatRange(parsed) || "*" : null;
 }
-safeRegex$1(COERCE$1);
-safeRegex$1(COERCE_FULL$1);
+function satisfies(version, range, options = {}) {
+	const parsed = tryParseRange$1(range, options);
+	return parsed ? testRangeVersion(parsed, version) : false;
+}
+//#endregion
+//#region ../plugin-core/dist/node_modules/.pnpm/verkit@0.4.0/node_modules/verkit/dist/version-CQ98ZBpL.mjs
+const COERCE_EXACT = safeRegex$1(COERCE$1);
+const COERCE_FULL_EXACT = safeRegex$1(COERCE_FULL$1);
 safeRegex$1(`^${PRERELEASE$1}$`);
 safeRegex$1(`^${PRERELEASE_LOOSE$1}$`);
 function normalize(version, options = {}) {
 	const parsed = tryParse(version, options);
 	return parsed ? formatComparableVersion$1(parsed) : null;
 }
+function coerce(value, options = {}) {
+	if (typeof value === "object") return value;
+	const input = typeof value === "number" ? String(value) : value;
+	let match = null;
+	if (options.rtl) {
+		const expression = safeRegex$1(options.includePrerelease ? COERCE_FULL$1 : COERCE$1, "g");
+		let next;
+		while ((next = expression.exec(input)) && (!match || match.index + match[0].length !== input.length)) {
+			if (!match || next.index + next[0].length !== match.index + match[0].length) match = next;
+			expression.lastIndex = next.index + next[1].length + next[2].length;
+		}
+	} else match = (options.includePrerelease ? COERCE_FULL_EXACT : COERCE_EXACT).exec(input);
+	if (!match) return null;
+	const major = match[2];
+	return tryParse(`${major}.${match[3] || "0"}.${match[4] || "0"}${options.includePrerelease && match[5] ? `-${match[5]}` : ""}${options.includePrerelease && match[6] ? `+${match[6]}` : ""}`, options);
+}
+//#endregion
+//#region ../plugin-core/dist/semverSatisfies.mjs
+const semverSatisfies = (targetAppVersion, currentVersion) => {
+	const currentCoerce = coerce(currentVersion);
+	if (!currentCoerce) return false;
+	return satisfies(currentCoerce, targetAppVersion);
+};
 //#endregion
 //#region ../plugin-core/dist/uuidv7.mjs
 const extractTimestampFromUUIDv7 = (uuid) => {
@@ -4524,7 +4591,7 @@ const createKvAdapter = ({ store, tablePrefix = "" }) => {
 };
 //#endregion
 //#region ../../packages/server/dist/version.mjs
-const HOT_UPDATER_SERVER_VERSION = "1.0.0-rc.40";
+const HOT_UPDATER_SERVER_VERSION = "1.0.0-rc.42";
 //#endregion
 //#region ../../packages/server/dist/handlerVersionRoutes.mjs
 /**
@@ -4558,14 +4625,18 @@ const createVersionRouteHandlers = (plugins = []) => {
 * another's internals for it. It guards Hot Updater's ids against a
 * clash, not against a determined impostor.
 */
-const OFFICIAL$2 = Symbol.for("@hot-updater/server/official-plugin");
+const OFFICIAL$3 = Symbol.for("@hot-updater/server/official-plugin");
 /**
 * The ids of Hot Updater's own plugins. The console and tooling tell
 * features apart by plugin id, so no other plugin may take one.
 */
-const OFFICIAL_IDS = /* @__PURE__ */ new Set(["insights", "apiKeys"]);
+const OFFICIAL_IDS = /* @__PURE__ */ new Set([
+	"insights",
+	"apiKeys",
+	"remoteConfig"
+]);
 /** Whether one of Hot Updater's own factories made `plugin`. */
-const isOfficialPlugin = (plugin) => typeof plugin === "object" && plugin !== null && Reflect.get(plugin, OFFICIAL$2) === true;
+const isOfficialPlugin = (plugin) => typeof plugin === "object" && plugin !== null && Reflect.get(plugin, OFFICIAL$3) === true;
 /**
 * Refuses a plugin that takes one of Hot Updater's own ids without being
 * that plugin: `at` names it in the error, such as `plugins[0]`.
@@ -4633,7 +4704,7 @@ const UNAVAILABLE_NAMES = /* @__PURE__ */ new Set([
 	"with",
 	"yield"
 ]);
-const isRecord$6 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isRecord$7 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 /**
 * The client plugins an app adds for the plugins, each once, in plugin
 * order: what init prints in `HotUpdater.init`'s `plugins`. A malformed one,
@@ -4644,11 +4715,11 @@ const clientPluginsOf = (plugins) => {
 	const found = [];
 	plugins.forEach((plugin, position) => checkReservedId(plugin, `plugins[${position}]`));
 	for (const plugin of plugins) {
-		if (!isRecord$6(plugin) || !isRecord$6(plugin.cli)) continue;
+		if (!isRecord$7(plugin) || !isRecord$7(plugin.cli)) continue;
 		const value = plugin.cli.clientPlugin;
 		if (value === void 0) continue;
 		const id = String(plugin.id);
-		if (!isRecord$6(value) || typeof value.module !== "string" || value.module === "" || typeof value.name !== "string" || !EXPORT_NAME.test(value.name) || UNAVAILABLE_NAMES.has(value.name)) throw new HotUpdaterConfigError(`Plugin "${id}" cli.clientPlugin needs a module and an export name the app can import: an identifier other than a reserved word, App, or HotUpdater.`);
+		if (!isRecord$7(value) || typeof value.module !== "string" || value.module === "" || typeof value.name !== "string" || !EXPORT_NAME.test(value.name) || UNAVAILABLE_NAMES.has(value.name)) throw new HotUpdaterConfigError(`Plugin "${id}" cli.clientPlugin needs a module and an export name the app can import: an identifier other than a reserved word, App, or HotUpdater.`);
 		const { module, name } = value;
 		const named = found.find((entry) => entry.name === name);
 		if (named === void 0) found.push({
@@ -5144,6 +5215,13 @@ function parseRange(range, options = {}) {
 		sets
 	};
 }
+function tryParseRange(range, options = {}) {
+	try {
+		return parseRange(range, options);
+	} catch {
+		return null;
+	}
+}
 function exactVersion(set) {
 	for (const comparator of set) if (comparator.operator === "" && comparator.version) return comparator.version;
 	return null;
@@ -5169,6 +5247,9 @@ function setsIntersect(left, right, options) {
 function parsedRangesIntersect(left, right, options = {}) {
 	return left.sets.some((leftSet) => isSatisfiable(leftSet, options) && right.sets.some((rightSet) => isSatisfiable(rightSet, options) && setsIntersect(leftSet, rightSet, options)));
 }
+function isValidRange(range, options = {}) {
+	return tryParseRange(range, options) !== null;
+}
 function rangesIntersect(left, right, options = {}) {
 	const parsedLeft = parseRange(left, options);
 	const parsedRight = parseRange(right, options);
@@ -6161,9 +6242,9 @@ const PATH = /^(\/(:?[A-Za-z0-9_.~-]+))+$/u;
 const fail = (message) => {
 	throw new HotUpdaterConfigError(message);
 };
-const isRecord$5 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isRecord$6 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const checkPlugin = (value, at) => {
-	if (!isRecord$5(value)) return fail(`${at} is not a plugin.`);
+	if (!isRecord$6(value)) return fail(`${at} is not a plugin.`);
 	if ("kind" in value) fail(`${at} has a kind; core is built in and is never passed as a plugin.`);
 	const unknown = Object.keys(value).find((key) => !PLUGIN_KEYS.has(key));
 	if (unknown !== void 0) fail(`${at} has an unknown key "${unknown}".`);
@@ -6173,18 +6254,18 @@ const checkPlugin = (value, at) => {
 	if (typeof plugin.id !== "string" || !pattern.test(plugin.id)) fail(`${at} needs an id matching ${pattern.source}.`);
 	if (plugin.id === "core") fail(`${at} uses the id "core", which is core's own.`);
 	checkReservedId(value, at);
-	if (typeof plugin.schemaVersion !== "string" || !isRecord$5(plugin.schema) || typeof plugin.init !== "function") fail(`Plugin "${plugin.id}" needs a schemaVersion, a schema, and init.`);
+	if (typeof plugin.schemaVersion !== "string" || !isRecord$6(plugin.schema) || typeof plugin.init !== "function") fail(`Plugin "${plugin.id}" needs a schemaVersion, a schema, and init.`);
 	const provides = plugin.provides;
-	if (provides !== void 0 && (!isRecord$5(provides) || Object.entries(provides).some(([key, flag]) => key !== "clientAuth" || flag !== true))) fail(`Plugin "${plugin.id}" may only declare provides: { clientAuth: true }.`);
+	if (provides !== void 0 && (!isRecord$6(provides) || Object.entries(provides).some(([key, flag]) => key !== "clientAuth" || flag !== true))) fail(`Plugin "${plugin.id}" may only declare provides: { clientAuth: true }.`);
 	const cli = value.cli;
 	if (cli !== void 0) {
-		if (!isRecord$5(cli) || Object.keys(cli).some((key) => !CLI_KEYS.has(key))) fail(`Plugin "${plugin.id}" cli may only hold clientCredential and clientPlugin.`);
+		if (!isRecord$6(cli) || Object.keys(cli).some((key) => !CLI_KEYS.has(key))) fail(`Plugin "${plugin.id}" cli may only hold clientCredential and clientPlugin.`);
 		if (cli.clientCredential !== void 0 && plugin.provides?.clientAuth !== true) fail(`Plugin "${plugin.id}" adds cli.clientCredential without declaring provides: { clientAuth: true }.`);
 	}
 	return plugin;
 };
 const checkEndpoint = (id, value) => {
-	const endpoint = isRecord$5(value) ? value : {};
+	const endpoint = isRecord$6(value) ? value : {};
 	if (!METHODS.has(endpoint.method) || typeof endpoint.path !== "string" || !PATH.test(endpoint.path) || endpoint.access !== "client" && endpoint.access !== "admin" || typeof endpoint.handler !== "function") fail(`Plugin "${id}" has an endpoint that needs a method, a path like /name/:param, access "client" or "admin", and a handler.`);
 	return {
 		...endpoint,
@@ -6193,7 +6274,7 @@ const checkEndpoint = (id, value) => {
 };
 const checkInstance = (plugin, instance) => {
 	const { id } = plugin;
-	if (!isRecord$5(instance)) return fail(`Plugin "${id}" init returned no instance.`);
+	if (!isRecord$6(instance)) return fail(`Plugin "${id}" init returned no instance.`);
 	if (typeof instance.then === "function") fail(`Plugin "${id}" init returned a promise; init must be synchronous.`);
 	const unknown = Object.keys(instance).find((key) => !INSTANCE_KEYS.has(key));
 	if (unknown !== void 0 || !("api" in instance)) fail(`Plugin "${id}" init must return { api, endpoints?, clientAuth? }${unknown === void 0 ? "" : `, not "${unknown}"`}.`);
@@ -6300,8 +6381,8 @@ const parseBooleanSearchParam = (url, key) => {
 };
 //#endregion
 //#region ../../packages/server/dist/handlerAdminRoutes.mjs
-const json$1 = (body, status = 200) => Response.json(body, { status });
-const notFound = () => json$1({ error: "Not found" }, 404);
+const json$2 = (body, status = 200) => Response.json(body, { status });
+const notFound = () => json$2({ error: "Not found" }, 404);
 const noContent = () => new Response(null, { status: 204 });
 /** Runs `route` on core, answering its refusals. */
 const onCore = (route) => async (params, request, api) => answer(() => route(api.core, request, params));
@@ -6312,16 +6393,16 @@ const answer = async (operation) => {
 	} catch (error) {
 		if (error instanceof ReleaseManagementError || error instanceof ReleaseCatalogMutationError) {
 			const status = error.code === "RELEASE_NOT_FOUND" ? 404 : error.code === "VERSION_CONFLICT" ? 409 : 400;
-			return json$1({
+			return json$2({
 				code: error.code,
 				error: error.message
 			}, status);
 		}
-		if (error instanceof DatabaseBundleNotFoundError) return json$1({
+		if (error instanceof DatabaseBundleNotFoundError) return json$2({
 			code: "BUNDLE_NOT_FOUND",
 			error: error.message
 		}, 404);
-		if (error instanceof DatabaseRowReferencedError) return json$1({
+		if (error instanceof DatabaseRowReferencedError) return json$2({
 			code: "REFERENCED",
 			error: error.message
 		}, 409);
@@ -6347,7 +6428,7 @@ const keyset = (url, maxValue = LIMITS.maxValue) => {
 	};
 };
 /** A page and the cursor of the next one, when the page is full. */
-const page = (rows, { limit }, keyOf, extra = {}) => json$1({
+const page = (rows, { limit }, keyOf, extra = {}) => json$2({
 	data: rows,
 	...rows.length === limit && rows.length > 0 ? { next: keyOf(rows.at(-1)) } : {},
 	...extra
@@ -6391,18 +6472,18 @@ const releaseFilter = (url) => {
 	};
 	throw new HandlerBadRequestError("Releases filter by none, channelId and platform (with enabled), bundleId, or scopeKey (with enabled).");
 };
-const isRecord$4 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isRecord$5 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const body = async (request) => {
 	const value = await request.json();
-	if (!isRecord$4(value)) throw new HandlerBadRequestError("Invalid body");
+	if (!isRecord$5(value)) throw new HandlerBadRequestError("Invalid body");
 	return value;
 };
 const isText$2 = (value) => typeof value === "string" && value.length > 0;
 const isTextOrNull$1 = (value) => value === null || isText$2(value);
-const isBundle = (bundle) => isRecord$4(bundle) && isText$2(bundle.id) && typeof bundle.platform === "string" && isPlatform(bundle.platform) && isTextOrNull$1(bundle.gitCommitHash) && isText$2(bundle.manifestStorageUri) && isText$2(bundle.manifestFileHash) && isText$2(bundle.assetBaseStorageUri) && (bundle.metadata === void 0 || isRecord$4(bundle.metadata)) && (bundle.patches === void 0 || bundle.patches === null || Array.isArray(bundle.patches));
-const isReleasePolicy = (release) => isRecord$4(release) && isText$2(release.channel) && typeof release.enabled === "boolean" && typeof release.shouldForceUpdate === "boolean" && isTextOrNull$1(release.fingerprintHash) && isTextOrNull$1(release.targetAppVersion) && (release.message === null || typeof release.message === "string") && (release.rolloutCohortCount === void 0 || Number.isSafeInteger(release.rolloutCohortCount) && release.rolloutCohortCount >= 0 && release.rolloutCohortCount <= 1e3) && (release.targetCohorts === void 0 || Array.isArray(release.targetCohorts) && release.targetCohorts.every(isText$2));
+const isBundle = (bundle) => isRecord$5(bundle) && isText$2(bundle.id) && typeof bundle.platform === "string" && isPlatform(bundle.platform) && isTextOrNull$1(bundle.gitCommitHash) && isText$2(bundle.manifestStorageUri) && isText$2(bundle.manifestFileHash) && isText$2(bundle.assetBaseStorageUri) && (bundle.metadata === void 0 || isRecord$5(bundle.metadata)) && (bundle.patches === void 0 || bundle.patches === null || Array.isArray(bundle.patches));
+const isReleasePolicy = (release) => isRecord$5(release) && isText$2(release.channel) && typeof release.enabled === "boolean" && typeof release.shouldForceUpdate === "boolean" && isTextOrNull$1(release.fingerprintHash) && isTextOrNull$1(release.targetAppVersion) && (release.message === null || typeof release.message === "string") && (release.rolloutCohortCount === void 0 || Number.isSafeInteger(release.rolloutCohortCount) && release.rolloutCohortCount >= 0 && release.rolloutCohortCount <= 1e3) && (release.targetCohorts === void 0 || Array.isArray(release.targetCohorts) && release.targetCohorts.every(isText$2));
 /** A deployment's shape: a new bundle or a stored bundle's id, and its release policy. */
-const isDeployment = (value) => isRecord$4(value) && isReleasePolicy(value.release) && ("bundleId" in value ? isText$2(value.bundleId) && !("bundle" in value) : isBundle(value.bundle));
+const isDeployment = (value) => isRecord$5(value) && isReleasePolicy(value.release) && ("bundleId" in value ? isText$2(value.bundleId) && !("bundle" in value) : isBundle(value.bundle));
 /** An expected release revision from a body number or a query string. */
 const revisionOf = (value) => {
 	if (value === void 0 || value === null || value === "") return void 0;
@@ -6413,7 +6494,7 @@ const revisionOf = (value) => {
 /** A policy change's body: `{ expectedRevision?, patch }`. */
 const policyInput = async (request) => {
 	const input = await body(request);
-	if (!isRecord$4(input.patch)) throw new HandlerBadRequestError("Invalid Release policy mutation");
+	if (!isRecord$5(input.patch)) throw new HandlerBadRequestError("Invalid Release policy mutation");
 	const expectedRevision = revisionOf(input.expectedRevision);
 	return {
 		patch: input.patch,
@@ -6422,7 +6503,7 @@ const policyInput = async (request) => {
 };
 /** A bundle update's body: the fields it changes, never another bundle's id. */
 const bundleUpdateOf = (value, bundleId) => {
-	if (!isRecord$4(value)) throw new HandlerBadRequestError("Invalid bundle payload");
+	if (!isRecord$5(value)) throw new HandlerBadRequestError("Invalid bundle payload");
 	const { id, ...update } = value;
 	if (id !== void 0 && id !== bundleId) throw new HandlerBadRequestError("Bundle id mismatch");
 	return update;
@@ -6443,7 +6524,7 @@ const createAdminRouteHandlers = () => ({
 	}),
 	getBundle: onCore(async (core, _request, params) => {
 		const detail = await core.getBundle(requireRouteParam(params, "id"));
-		return detail === null ? notFound() : json$1({ data: detail });
+		return detail === null ? notFound() : json$2({ data: detail });
 	}),
 	listReleases: onCore(async (core, request) => {
 		const url = new URL(request.url);
@@ -6462,31 +6543,31 @@ const createAdminRouteHandlers = () => ({
 	/** With `name`, the one channel of that name: 1 read. */
 	getChannels: onCore(async (core, request) => {
 		const name = new URL(request.url).searchParams.get("name");
-		if (name === null) return json$1({ data: await core.listChannels() });
+		if (name === null) return json$2({ data: await core.listChannels() });
 		const channel = await core.findChannelByName(name);
-		return channel === null ? notFound() : json$1({ data: channel });
+		return channel === null ? notFound() : json$2({ data: channel });
 	}),
 	/** The channel named in the body, created when missing. */
 	createChannel: onCore(async (core, request) => {
 		const { name } = await body(request);
 		if (typeof name !== "string" || name.trim().length === 0) throw new HandlerBadRequestError("Invalid channel name");
-		return json$1({ data: await core.ensureChannel(name) });
+		return json$2({ data: await core.ensureChannel(name) });
 	}),
 	/** 204 when deleted; 404 or 409 with the reason otherwise. */
 	deleteChannel: onCore(async (core, _request, params) => {
 		const result = await core.deleteChannel(decodeMaybe(requireRouteParam(params, "id")) ?? "");
 		if (result.deleted) return noContent();
-		return json$1({ data: result }, result.reason === "not_found" ? 404 : 409);
+		return json$2({ data: result }, result.reason === "not_found" ? 404 : 409);
 	}),
 	getRelease: onCore(async (core, _request, params) => {
 		const row = await core.getRelease(requireRouteParam(params, "id"));
-		return row === null ? notFound() : json$1({ data: row });
+		return row === null ? notFound() : json$2({ data: row });
 	}),
-	updateRelease: onCore(async (core, request, params) => json$1({ data: await core.updateReleasePolicy({
+	updateRelease: onCore(async (core, request, params) => json$2({ data: await core.updateReleasePolicy({
 		...await policyInput(request),
 		releaseId: requireRouteParam(params, "id")
 	}) })),
-	preflightRelease: onCore(async (core, request, params) => json$1({ data: await core.preflightReleasePolicy({
+	preflightRelease: onCore(async (core, request, params) => json$2({ data: await core.preflightReleasePolicy({
 		...await policyInput(request),
 		releaseId: requireRouteParam(params, "id")
 	}) })),
@@ -6496,26 +6577,26 @@ const createAdminRouteHandlers = () => ({
 		const url = new URL(request.url);
 		if (url.searchParams.get("confirm") !== releaseId) throw new HandlerBadRequestError("Release hard deletion requires confirm=<release-id>");
 		const expectedRevision = revisionOf(url.searchParams.get("expectedRevision"));
-		return json$1({ data: await core.deleteRelease({
+		return json$2({ data: await core.deleteRelease({
 			releaseId,
 			...expectedRevision === void 0 ? {} : { expectedRevision }
 		}) });
 	}),
 	getReleaseCatalogRow: onCore(async (core, _request, params) => {
 		const row = await core.getReleaseCatalogRow(scopeKeyOf(params));
-		return row === null ? notFound() : json$1({ data: row });
+		return row === null ? notFound() : json$2({ data: row });
 	}),
-	rebuildReleaseCatalog: onCore(async (core, _request, params) => json$1({ data: await core.rebuildReleaseCatalog(scopeKeyOf(params)) })),
+	rebuildReleaseCatalog: onCore(async (core, _request, params) => json$2({ data: await core.rebuildReleaseCatalog(scopeKeyOf(params)) })),
 	updateBundle: onCore(async (core, request, params) => {
 		const bundleId = requireRouteParam(params, "id");
 		await core.updateBundle(bundleId, bundleUpdateOf(await request.json(), bundleId));
 		return noContent();
 	}),
-	countBundles: onCore(async (core, request) => json$1({ data: await core.countBundles(platformOf(new URL(request.url))) })),
+	countBundles: onCore(async (core, request) => json$2({ data: await core.countBundles(platformOf(new URL(request.url))) })),
 	countBundleChildren: onCore(async (core, request) => {
 		const ids = (new URL(request.url).searchParams.get("ids") ?? "").split(",").filter((id) => id.length > 0);
 		if (ids.length === 0 || ids.length > 100) throw new HandlerBadRequestError("Bundle child counts take ids=<bundle id>,... with 1 to 100 ids.");
-		return json$1({ data: await core.countBundleChildren(ids) });
+		return json$2({ data: await core.countBundleChildren(ids) });
 	}),
 	listBundleChildren: onCore(async (core, request, params) => {
 		const input = keyset(new URL(request.url));
@@ -6527,25 +6608,25 @@ const createAdminRouteHandlers = () => ({
 		const before = url.searchParams.get("before");
 		const limit = Number(url.searchParams.get("limit") ?? "3");
 		if (before === null || !Number.isSafeInteger(limit) || limit < 1 || limit > 100) throw new HandlerBadRequestError("Base candidates need before=<bundle id> and a limit between 1 and 100.");
-		return json$1({ data: await core.findBaseBundleIds(decodeMaybe(requireRouteParam(params, "candidateKey")) ?? "", before, limit) });
+		return json$2({ data: await core.findBaseBundleIds(decodeMaybe(requireRouteParam(params, "candidateKey")) ?? "", before, limit) });
 	}),
 	deployReleases: onCore(async (core, request) => {
 		const { deployments } = await body(request);
 		if (!Array.isArray(deployments) || deployments.length === 0 || !deployments.every(isDeployment)) throw new HandlerBadRequestError("Deploy needs deployments, each a bundle and its release policy.");
-		return json$1({ data: await core.deploy(deployments) }, 201);
+		return json$2({ data: await core.deploy(deployments) }, 201);
 	}),
 	promoteRelease: onCore(async (core, request, params) => {
 		const input = await body(request);
 		if (typeof input.targetChannel !== "string" || input.action !== void 0 && input.action !== "copy" && input.action !== "move") throw new HandlerBadRequestError("Invalid Release promotion");
 		const expectedRevision = revisionOf(input.expectedRevision);
-		return json$1({ data: await core.promoteRelease({
+		return json$2({ data: await core.promoteRelease({
 			releaseId: requireRouteParam(params, "id"),
 			targetChannel: input.targetChannel,
 			...input.action === void 0 ? {} : { action: input.action },
 			...expectedRevision === void 0 ? {} : { expectedRevision }
 		}) });
 	}),
-	preflightReleaseCatalogRebuild: onCore(async (core, _request, params) => json$1({ data: await core.preflightReleaseCatalogRebuild(scopeKeyOf(params)) })),
+	preflightReleaseCatalogRebuild: onCore(async (core, _request, params) => json$2({ data: await core.preflightReleaseCatalogRebuild(scopeKeyOf(params)) })),
 	deleteBundles: onCore(async (core, request) => {
 		const { ids } = await body(request);
 		if (!Array.isArray(ids) || !ids.every((id) => typeof id === "string" && id.length > 0)) throw new HandlerBadRequestError("Bundle deletion needs ids");
@@ -7060,8 +7141,8 @@ const createStorageAccess = (storageAdapters) => {
 };
 //#endregion
 //#region ../../packages/server/dist/createHotUpdaterCore.mjs
-const isRecord$3 = (value) => typeof value === "object" && value !== null;
-const isAdapter = (value) => isRecord$3(value) && [
+const isRecord$4 = (value) => typeof value === "object" && value !== null;
+const isAdapter = (value) => isRecord$4(value) && [
 	"fits",
 	"get",
 	"query",
@@ -7069,7 +7150,7 @@ const isAdapter = (value) => isRecord$3(value) && [
 ].every((method) => typeof value[method] === "function");
 /** The configured database, when it runs on the storage engine. */
 const databaseOf = (value) => {
-	if (isRecord$3(value) && typeof value.name === "string") {
+	if (isRecord$4(value) && typeof value.name === "string") {
 		if (isAdapter(value.adapter)) return value;
 		if ("core" in value && "fetchAdmin" in value) throw new HotUpdaterConfigError("standaloneRepository reaches a server's admin API from the CLI and console. createHotUpdater needs the server's own database, such as kyselyAdapter(...).");
 	}
@@ -7079,7 +7160,7 @@ const databaseOf = (value) => {
 const isPublic = (value) => {
 	if (value === void 0) return false;
 	if (value === "public") return true;
-	throw new HotUpdaterConfigError(isRecord$3(value) ? "clientAccess objects were removed in 1.0. Set clientAccess: \"public\", or add a plugin that provides clientAuth to plugins." : "clientAccess must be \"public\"; to protect client routes, add a plugin that provides clientAuth to plugins.");
+	throw new HotUpdaterConfigError(isRecord$4(value) ? "clientAccess objects were removed in 1.0. Set clientAccess: \"public\", or add a plugin that provides clientAuth to plugins." : "clientAccess must be \"public\"; to protect client routes, add a plugin that provides clientAuth to plugins.");
 };
 function createHotUpdater(options) {
 	for (const key of ["authorityId", "catalogId"]) if (Object.hasOwn(options, key)) throw new TypeError(`Remove ${key} from createHotUpdater options. Catalog identity is managed internally.`);
@@ -7596,9 +7677,9 @@ const createApiKeyModel = (db) => ({
 * Each official plugin package keeps this copy, so none imports another's
 * internals for it.
 */
-const OFFICIAL$1 = Symbol.for("@hot-updater/server/official-plugin");
+const OFFICIAL$2 = Symbol.for("@hot-updater/server/official-plugin");
 /** Marks a plugin one of Hot Updater's own factories made. */
-const markOfficial$1 = (plugin) => Object.defineProperty(plugin, OFFICIAL$1, { value: true });
+const markOfficial$2 = (plugin) => Object.defineProperty(plugin, OFFICIAL$2, { value: true });
 //#endregion
 //#region ../api-keys/dist/server/schema.mjs
 /** v1's `api_keys` columns; the plaintext key is never stored, only its SHA-256 digest. */
@@ -7678,7 +7759,7 @@ const apiKeys = (options = {}) => {
 		},
 		cli: apiKeysCli(headerName)
 	});
-	return markOfficial$1(plugin);
+	return markOfficial$2(plugin);
 };
 //#endregion
 //#region ../insights/dist/server/schema.mjs
@@ -8260,7 +8341,7 @@ const isDatabaseHttpResponse = (value) => isDatabaseJsonObject(value) && (value.
 /** An `UPDATE_FAILED` report's stored failure: a stage and a reason, and what else the client knew. */
 const isDatabaseBundleEventFailure = (value) => isDatabaseJsonObject(value) && isString(value.stage) && isString(value.reason) && isOptional(value, "resource", isString) && isOptional(value, "http_status", (status) => Number.isSafeInteger(status)) && isOptional(value, "transport", isString) && isOptional(value, "origin_code", isString) && isOptional(value, "error_message", isString) && isOptional(value, "error_stack", isString);
 const isDatabaseBundleEventMetadata = (value) => isDatabaseJsonObject(value) && typeof value.cohort === "string" && (value.update_strategy === null || value.update_strategy === "fingerprint" || value.update_strategy === "appVersion") && (value.fingerprint_hash === null || typeof value.fingerprint_hash === "string") && (value.sdk_version === null || typeof value.sdk_version === "string") && isOptional(value, "min_bundle_id", isString) && isOptional(value, "failure", isDatabaseBundleEventFailure) && isOptional(value, "http_response", isDatabaseHttpResponse) && isOptional(value, "delivery", isString) && isOptional(value, "patch_fallback", (flag) => typeof flag === "boolean") && isOptional(value, "change", isBundleEventChange) && isOptional(value, "late", (flag) => flag === true) && isOptional(value, "implied_download", (flag) => flag === true);
-const isRecord$2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isRecord$3 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 /**
 * The built-in bundle a report says its installation runs: the running
 * bundle, which a download leaves at its source, when it is the native
@@ -8269,7 +8350,7 @@ const isRecord$2 = (value) => typeof value === "object" && value !== null && !Ar
 */
 const runningBuiltinBundleId = (row) => {
 	const running = row.type === "UPDATE_DOWNLOADED" ? row.from_bundle_id : row.to_bundle_id;
-	const builtin = isRecord$2(row.metadata) ? row.metadata.min_bundle_id : null;
+	const builtin = isRecord$3(row.metadata) ? row.metadata.min_bundle_id : null;
 	return typeof builtin === "string" && running === builtin ? builtin : null;
 };
 const isIdentity$1 = (value) => typeof value === "string" && value.length > 0 && value.length <= 255;
@@ -8290,21 +8371,21 @@ const BUNDLE_EVENT_FIELDS = {
 	metadata: isDatabaseBundleEventMetadata,
 	received_at_ms: (value) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0
 };
-const hasMetadata = (row, key) => isRecord$2(row.metadata) && Object.hasOwn(row.metadata, key);
-const updateStrategyOf = (row) => isRecord$2(row.metadata) ? row.metadata.update_strategy : void 0;
+const hasMetadata = (row, key) => isRecord$3(row.metadata) && Object.hasOwn(row.metadata, key);
+const updateStrategyOf = (row) => isRecord$3(row.metadata) ? row.metadata.update_strategy : void 0;
 /**
 * A movement, or a failed update, names the bundle it left and how the
 * device updates, and a failed update says what failed; an unchanged report
 * names neither.
 */
-const hasEventInvariants = (row) => (row.type === "UPDATE_DOWNLOADED" || row.type === "UPDATE_APPLIED" || row.type === "RECOVERED" || row.type === "UPDATE_FAILED") && typeof row.from_bundle_id === "string" && (updateStrategyOf(row) === "fingerprint" || updateStrategyOf(row) === "appVersion") && (row.type !== "UPDATE_FAILED" || isRecord$2(row.metadata) && isRecord$2(row.metadata.failure)) && !hasMetadata(row, "change") && (!hasMetadata(row, "late") || row.type === "UPDATE_DOWNLOADED" || row.type === "UPDATE_APPLIED") && (!hasMetadata(row, "implied_download") || row.type === "UPDATE_APPLIED" || row.type === "RECOVERED") || row.type === "UNCHANGED" && !hasMetadata(row, "late") && row.from_bundle_id === null && updateStrategyOf(row) === null;
+const hasEventInvariants = (row) => (row.type === "UPDATE_DOWNLOADED" || row.type === "UPDATE_APPLIED" || row.type === "RECOVERED" || row.type === "UPDATE_FAILED") && typeof row.from_bundle_id === "string" && (updateStrategyOf(row) === "fingerprint" || updateStrategyOf(row) === "appVersion") && (row.type !== "UPDATE_FAILED" || isRecord$3(row.metadata) && isRecord$3(row.metadata.failure)) && !hasMetadata(row, "change") && (!hasMetadata(row, "late") || row.type === "UPDATE_DOWNLOADED" || row.type === "UPDATE_APPLIED") && (!hasMetadata(row, "implied_download") || row.type === "UPDATE_APPLIED" || row.type === "RECOVERED") || row.type === "UNCHANGED" && !hasMetadata(row, "late") && row.from_bundle_id === null && updateStrategyOf(row) === null;
 /**
 * Throws unless `row` has exactly the bundle event fields, each of its type,
 * and the invariants of its event type: `invalid-field` for an unknown field,
 * `invalid-data` for anything else.
 */
 const validateBundleEventFields = (row) => {
-	if (!isRecord$2(row)) throw new DatabaseAdapterInputError("invalid-data");
+	if (!isRecord$3(row)) throw new DatabaseAdapterInputError("invalid-data");
 	for (const field of Object.keys(row)) if (!Object.hasOwn(BUNDLE_EVENT_FIELDS, field)) throw new DatabaseAdapterInputError("invalid-field");
 	for (const [field, valid] of Object.entries(BUNDLE_EVENT_FIELDS)) if (!Object.hasOwn(row, field) || !valid(row[field])) throw new DatabaseAdapterInputError("invalid-data");
 	if (!hasEventInvariants(row)) throw new DatabaseAdapterInputError("invalid-data");
@@ -8333,7 +8414,7 @@ const isLimit = (value) => isTimestamp(value) && value >= 1 && value <= 101;
 const hasOnlyKeys = (value, keys) => Object.keys(value).every((key) => keys.includes(key));
 const hasScope = (value) => (value.platform === "ios" || value.platform === "android") && isText$1(value.channel);
 const isBundleFilter = (value, withKind = false) => {
-	if (!isRecord$2(value) || !hasScope(value)) return false;
+	if (!isRecord$3(value) || !hasScope(value)) return false;
 	const keys = [
 		"platform",
 		"channel",
@@ -8343,7 +8424,7 @@ const isBundleFilter = (value, withKind = false) => {
 	return value.type === "RECOVERED" ? isText$1(value.fromBundleId) && hasOnlyKeys(value, [...keys, "fromBundleId"]) : (value.type === "UPDATE_DOWNLOADED" || value.type === "UPDATE_APPLIED" || value.type === "UPDATE_FAILED" || value.type === "UNCHANGED") && isText$1(value.toBundleId) && hasOnlyKeys(value, [...keys, "toBundleId"]);
 };
 const isEventFilter = (value) => {
-	if (!isRecord$2(value)) return false;
+	if (!isRecord$3(value)) return false;
 	if (value.kind === "all") return hasOnlyKeys(value, ["kind"]);
 	if (value.kind === "installationMovement") return isIdentity(value.installId) && hasOnlyKeys(value, ["kind", "installId"]);
 	return value.kind === "bundle" && isBundleFilter(value, true);
@@ -8351,7 +8432,7 @@ const isEventFilter = (value) => {
 const validateRow = (model, row, result = false) => {
 	try {
 		validateBundleEventFields(row);
-		if (!isRecord$2(row) || typeof row.id !== "string" || !isUUIDv7(row.id) || [...Object.values(row), ...isRecord$2(row.metadata) ? Object.values(row.metadata) : []].some((value) => typeof value === "string" && !isWellFormedText(value))) throw new DatabaseAdapterInputError("invalid-data");
+		if (!isRecord$3(row) || typeof row.id !== "string" || !isUUIDv7(row.id) || [...Object.values(row), ...isRecord$3(row.metadata) ? Object.values(row.metadata) : []].some((value) => typeof value === "string" && !isWellFormedText(value))) throw new DatabaseAdapterInputError("invalid-data");
 	} catch (error) {
 		if (result) throw new DatabaseAdapterInputError("invalid-result");
 		throw error;
@@ -8376,27 +8457,27 @@ const invalidResult = () => {
 	throw new DatabaseAdapterInputError("invalid-result");
 };
 const validateCount = (count) => isTimestamp(count) ? count : invalidResult();
-const isTimeRange = (value) => isRecord$2(value) && hasOnlyKeys(value, ["start", "end"]) && isTimestamp(value.start) && isTimestamp(value.end) && value.start < value.end;
-const isReleaseReference = (value) => isRecord$2(value) && hasOnlyKeys(value, [
+const isTimeRange = (value) => isRecord$3(value) && hasOnlyKeys(value, ["start", "end"]) && isTimestamp(value.start) && isTimestamp(value.end) && value.start < value.end;
+const isReleaseReference = (value) => isRecord$3(value) && hasOnlyKeys(value, [
 	"releaseId",
 	"platform",
 	"channel"
 ]) && isIdentity(value.releaseId) && hasScope(value);
 const validateAggregateResult = (value) => {
-	const result = isRecord$2(value) ? value : invalidResult();
+	const result = isRecord$3(value) ? value : invalidResult();
 	if (!isTimestamp(result.measuredAtMs)) invalidResult();
 	const coverage = result.coverage;
-	if (!isRecord$2(coverage) || coverage.kind !== "complete" && coverage.kind !== "partial" || coverage.sinceMs !== null && !isTimestamp(coverage.sinceMs)) invalidResult();
+	if (!isRecord$3(coverage) || coverage.kind !== "complete" && coverage.kind !== "partial" || coverage.sinceMs !== null && !isTimestamp(coverage.sinceMs)) invalidResult();
 };
 /** Validate custom and bundled providers at the same public boundary. */
 const createValidatedInsightsModel = (model) => ({
 	async recordEvent(input) {
-		if (!isRecord$2(input) || !hasOnlyKeys(input, ["event"])) throw new DatabaseAdapterInputError("invalid-data");
+		if (!isRecord$3(input) || !hasOnlyKeys(input, ["event"])) throw new DatabaseAdapterInputError("invalid-data");
 		validateRow("bundle_events", input.event);
 		await model.recordEvent(input);
 	},
 	async listEvents(input) {
-		if (!isRecord$2(input) || !hasOnlyKeys(input, [
+		if (!isRecord$3(input) || !hasOnlyKeys(input, [
 			"filter",
 			"sinceMs",
 			"beforeReceivedAtMs",
@@ -8404,7 +8485,7 @@ const createValidatedInsightsModel = (model) => ({
 			"limit"
 		]) || !isEventFilter(input.filter) || !isLimit(input.limit) || !isTimestamp(input.beforeReceivedAtMs) || input.sinceMs !== void 0 && !isTimestamp(input.sinceMs)) invalidQuery();
 		const sinceMs = input.sinceMs ?? 0;
-		if (sinceMs > input.beforeReceivedAtMs || input.after !== void 0 && (!isRecord$2(input.after) || !hasOnlyKeys(input.after, ["receivedAtMs", "id"]) || !isTimestamp(input.after.receivedAtMs) || typeof input.after.id !== "string" || !isUUIDv7(input.after.id) || input.after.receivedAtMs < sinceMs || input.after.receivedAtMs >= input.beforeReceivedAtMs)) invalidQuery();
+		if (sinceMs > input.beforeReceivedAtMs || input.after !== void 0 && (!isRecord$3(input.after) || !hasOnlyKeys(input.after, ["receivedAtMs", "id"]) || !isTimestamp(input.after.receivedAtMs) || typeof input.after.id !== "string" || !isUUIDv7(input.after.id) || input.after.receivedAtMs < sinceMs || input.after.receivedAtMs >= input.beforeReceivedAtMs)) invalidQuery();
 		const rows = await model.listEvents(input);
 		if (!Array.isArray(rows) || rows.length > input.limit) invalidResult();
 		let previous = input.after;
@@ -8419,7 +8500,7 @@ const createValidatedInsightsModel = (model) => ({
 		return rows;
 	},
 	async findLatestEvents(input) {
-		if (!isRecord$2(input)) invalidQuery();
+		if (!isRecord$3(input)) invalidQuery();
 		if ("installId" in input) {
 			if (!hasOnlyKeys(input, ["installId"]) || !isIdentity(input.installId)) invalidQuery();
 		} else if (!hasOnlyKeys(input, [
@@ -8438,12 +8519,12 @@ const createValidatedInsightsModel = (model) => ({
 		return rows;
 	},
 	async countLatestEvents(input) {
-		if (!isRecord$2(input) || !hasOnlyKeys(input, [
+		if (!isRecord$3(input) || !hasOnlyKeys(input, [
 			"platform",
 			"channel",
 			"sinceMs",
 			"bundle"
-		]) || !hasScope(input) || !isTimestamp(input.sinceMs) || input.bundle !== void 0 && (!Array.isArray(input.bundle) || input.bundle.length < 1 || input.bundle.length > 2 || input.bundle.some((bundle) => !isRecord$2(bundle) || !hasOnlyKeys(bundle, [
+		]) || !hasScope(input) || !isTimestamp(input.sinceMs) || input.bundle !== void 0 && (!Array.isArray(input.bundle) || input.bundle.length < 1 || input.bundle.length > 2 || input.bundle.some((bundle) => !isRecord$3(bundle) || !hasOnlyKeys(bundle, [
 			"field",
 			"value",
 			"types"
@@ -8456,7 +8537,7 @@ const createValidatedInsightsModel = (model) => ({
 		return validateCount(await model.countLatestEvents(input));
 	},
 	async countEvents(input) {
-		if (!isRecord$2(input) || !hasOnlyKeys(input, [
+		if (!isRecord$3(input) || !hasOnlyKeys(input, [
 			"filter",
 			"sinceMs",
 			"beforeReceivedAtMs"
@@ -8464,7 +8545,7 @@ const createValidatedInsightsModel = (model) => ({
 		return validateCount(await model.countEvents(input));
 	},
 	async countEventSeries(input) {
-		if (!isRecord$2(input) || !hasOnlyKeys(input, [
+		if (!isRecord$3(input) || !hasOnlyKeys(input, [
 			"filter",
 			"timeRange",
 			"intervalMs"
@@ -8473,17 +8554,17 @@ const createValidatedInsightsModel = (model) => ({
 		const { intervalMs } = input;
 		if (intervalMs === 0 || intervalMs % 36e5 !== 0 || start % 36e5 !== 0 || (end - start) % intervalMs !== 0 || end - start > 7776e6) invalidQuery();
 		const points = await model.countEventSeries(input);
-		if (!Array.isArray(points) || points.length !== (end - start) / intervalMs || points.some((point, index) => !isRecord$2(point) || !hasOnlyKeys(point, ["startMs", "events"]) || point.startMs !== start + index * intervalMs || !isTimestamp(point.events))) invalidResult();
+		if (!Array.isArray(points) || points.length !== (end - start) / intervalMs || points.some((point, index) => !isRecord$3(point) || !hasOnlyKeys(point, ["startMs", "events"]) || point.startMs !== start + index * intervalMs || !isTimestamp(point.events))) invalidResult();
 		return points;
 	},
 	async getReleaseActivity(input) {
-		if (!isRecord$2(input) || !hasOnlyKeys(input, ["releases"]) || !Array.isArray(input.releases) || input.releases.length < 1 || input.releases.length > 100 || !input.releases.every(isReleaseReference)) invalidQuery();
+		if (!isRecord$3(input) || !hasOnlyKeys(input, ["releases"]) || !Array.isArray(input.releases) || input.releases.length < 1 || input.releases.length > 100 || !input.releases.every(isReleaseReference)) invalidQuery();
 		const result = await model.getReleaseActivity(input);
-		if (!isRecord$2(result) || !isTimestamp(result.measuredAtMs) || !Array.isArray(result.data) || result.data.some((item) => !isRecord$2(item) || !isReleaseReference(item.release) || !isRecord$2(item.metrics) || !isTimestamp(item.metrics.downloads) || !isTimestamp(item.metrics.applies) || !isTimestamp(item.metrics.failedLaunches))) invalidResult();
+		if (!isRecord$3(result) || !isTimestamp(result.measuredAtMs) || !Array.isArray(result.data) || result.data.some((item) => !isRecord$3(item) || !isReleaseReference(item.release) || !isRecord$3(item.metrics) || !isTimestamp(item.metrics.downloads) || !isTimestamp(item.metrics.applies) || !isTimestamp(item.metrics.failedLaunches))) invalidResult();
 		return result;
 	},
 	async getAppUsage(input) {
-		if (!isRecord$2(input) || !hasOnlyKeys(input, [
+		if (!isRecord$3(input) || !hasOnlyKeys(input, [
 			"channel",
 			"platform",
 			"appVersion",
@@ -8524,9 +8605,9 @@ const createInsightsModel = (api) => createValidatedInsightsModel({
 * Each official plugin package keeps this copy, so none imports another's
 * internals for it.
 */
-const OFFICIAL = Symbol.for("@hot-updater/server/official-plugin");
+const OFFICIAL$1 = Symbol.for("@hot-updater/server/official-plugin");
 /** Marks a plugin one of Hot Updater's own factories made. */
-const markOfficial = (plugin) => Object.defineProperty(plugin, OFFICIAL, { value: true });
+const markOfficial$1 = (plugin) => Object.defineProperty(plugin, OFFICIAL$1, { value: true });
 //#endregion
 //#region ../insights/dist/server/errors.mjs
 /**
@@ -8549,7 +8630,7 @@ var InsightsPayloadTooLargeError = class extends Error {
 const MAX_EVENT_STRING_LENGTH = 1024;
 const MAX_IDENTITY_LENGTH$2 = 255;
 const EVENT_BODY_MAX_BYTES = 16384;
-function isRecord$1(value) {
+function isRecord$2(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function requireStringField(payload, key) {
@@ -8622,7 +8703,7 @@ const DELIVERIES = [
 /** A storage error code: letters, digits, and `._-`. */
 const CODE = /^[A-Za-z0-9._-]{1,64}$/;
 const readCode = (value) => typeof value === "string" && CODE.test(value) ? value : void 0;
-const readMetadata = (payload) => isRecord$1(payload.metadata) ? payload.metadata : {};
+const readMetadata = (payload) => isRecord$2(payload.metadata) ? payload.metadata : {};
 /**
 * What an UPDATE_FAILED report says failed. It never refuses the report: an
 * unknown value of a set reads as `unknown`, a missing or malformed failure
@@ -8630,7 +8711,7 @@ const readMetadata = (payload) => isRecord$1(payload.metadata) ? payload.metadat
 * as is a null one.
 */
 function readFailure(value) {
-	const failure = isRecord$1(value) ? value : {};
+	const failure = isRecord$2(value) ? value : {};
 	const httpStatus = failure.httpStatus;
 	const originCode = readCode(failure.originCode);
 	const errorMessage = typeof failure.errorMessage === "string" && failure.errorMessage.length <= 2048 ? failure.errorMessage : void 0;
@@ -8647,7 +8728,7 @@ function readFailure(value) {
 	};
 }
 function readHttpResponse(value) {
-	if (!isRecord$1(value) || value.resource !== "catalog" && value.resource !== "artifact" || typeof value.path !== "string" || value.path.length > 1024 || !Number.isSafeInteger(value.status) || value.status < 100 || value.status > 599 || value.body !== null && (typeof value.body !== "string" || new TextEncoder().encode(JSON.stringify(value.body)).byteLength > 4096) || typeof value.bodyTruncated !== "boolean" || !Number.isSafeInteger(value.receivedAtMs) || value.receivedAtMs < 0) throw new InsightsBadRequestError("Invalid HTTP response details");
+	if (!isRecord$2(value) || value.resource !== "catalog" && value.resource !== "artifact" || typeof value.path !== "string" || value.path.length > 1024 || !Number.isSafeInteger(value.status) || value.status < 100 || value.status > 599 || value.body !== null && (typeof value.body !== "string" || new TextEncoder().encode(JSON.stringify(value.body)).byteLength > 4096) || typeof value.bodyTruncated !== "boolean" || !Number.isSafeInteger(value.receivedAtMs) || value.receivedAtMs < 0) throw new InsightsBadRequestError("Invalid HTTP response details");
 	return {
 		resource: value.resource,
 		path: value.path,
@@ -8688,7 +8769,7 @@ async function parseJson(request) {
 	}
 }
 function requireEvent(payload) {
-	if (!isRecord$1(payload)) throw new InsightsBadRequestError("Invalid event payload");
+	if (!isRecord$2(payload)) throw new InsightsBadRequestError("Invalid event payload");
 	const platform = requireStringField(payload, "platform");
 	if (platform !== "ios" && platform !== "android") throw new InsightsBadRequestError("Invalid event field: platform");
 	const eventId = readEventId(payload);
@@ -8863,7 +8944,7 @@ const WINDOW_MS = {
 * history is one index range and reads back to `sinceMs`.
 */
 const EVENT_LIST_RANGE_MS = 2160 * HOUR_MS;
-const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const isRecord$1 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const requireString = (value, label, maximumLength) => {
 	if (typeof value !== "string" || value.length === 0 || value.length > maximumLength || new TextDecoder("utf-8", { ignoreBOM: true }).decode(new TextEncoder().encode(value)) !== value) throw new InsightsBadRequestError(`Invalid ${label}.`);
 	return value;
@@ -8939,7 +9020,7 @@ const bundleFilter = (input) => {
 	}
 };
 const sameFilter = (left, right) => {
-	if (!isRecord(left) || left.kind !== right.kind) return false;
+	if (!isRecord$1(left) || left.kind !== right.kind) return false;
 	switch (right.kind) {
 		case "all": return true;
 		case "installationMovement": return left.installId === right.installId;
@@ -8948,7 +9029,7 @@ const sameFilter = (left, right) => {
 };
 const readEventCursor = (value, filter) => {
 	const cursor = decodeCursor(value);
-	if (!isRecord(cursor) || cursor.version !== 2 || cursor.kind !== "events" || !isRecord(cursor.filter) || !isRecord(cursor.after)) throw new InsightsBadRequestError("Invalid Insights cursor.");
+	if (!isRecord$1(cursor) || cursor.version !== 2 || cursor.kind !== "events" || !isRecord$1(cursor.filter) || !isRecord$1(cursor.after)) throw new InsightsBadRequestError("Invalid Insights cursor.");
 	if (!sameFilter(cursor.filter, filter)) throw new InsightsBadRequestError("Insights cursor does not match the requested events.");
 	if (typeof cursor.after.id !== "string" || !isUUIDv7(cursor.after.id)) throw new InsightsBadRequestError("Invalid Insights event cursor ID.");
 	return {
@@ -8965,7 +9046,7 @@ const readEventCursor = (value, filter) => {
 };
 const readUserInstallationCursor = (value, userId) => {
 	const cursor = decodeCursor(value);
-	if (!isRecord(cursor) || cursor.version !== 1 || cursor.kind !== "user-installations" || cursor.userId !== userId) throw new InsightsBadRequestError("Insights cursor does not match the requested user ID.");
+	if (!isRecord$1(cursor) || cursor.version !== 1 || cursor.kind !== "user-installations" || cursor.userId !== userId) throw new InsightsBadRequestError("Insights cursor does not match the requested user ID.");
 	return {
 		afterInstallId: requireString(cursor.afterInstallId, "installation cursor", MAX_IDENTITY_LENGTH$1),
 		kind: "user-installations",
@@ -10530,8 +10611,8 @@ const parseReportingOverviewInput = (request) => {
 //#endregion
 //#region ../insights/dist/server/routes.mjs
 /** Seconds a client waits before it resends a request the busy database refused. */
-const RETRY_AFTER_SECONDS = 5;
-const json = (body, status, headers = {}) => Response.json(body, {
+const RETRY_AFTER_SECONDS$1 = 5;
+const json$1 = (body, status, headers = {}) => Response.json(body, {
 	headers: {
 		"cache-control": "private, no-store",
 		...headers
@@ -10547,20 +10628,20 @@ const requireParam = (params, key) => {
 		throw new InsightsBadRequestError(`Invalid route parameter: ${key}`);
 	}
 };
-const run = async (operation) => {
+const run$1 = async (operation) => {
 	try {
 		return await operation();
 	} catch (error) {
-		if (error instanceof InsightsBadRequestError) return json({ error: error.message }, 400);
-		if (error instanceof InsightsPayloadTooLargeError) return json({ error: error.message }, 413);
+		if (error instanceof InsightsBadRequestError) return json$1({ error: error.message }, 400);
+		if (error instanceof InsightsPayloadTooLargeError) return json$1({ error: error.message }, 413);
 		if (isDatabaseBusyError(error)) {
 			console.warn("[hot-updater] Insights answered 503: the database is busy.", error);
-			return json({ error: "Service unavailable" }, 503, { "retry-after": String(RETRY_AFTER_SECONDS) });
+			return json$1({ error: "Service unavailable" }, 503, { "retry-after": String(RETRY_AFTER_SECONDS$1) });
 		}
 		throw error;
 	}
 };
-const query = (operation) => run(async () => json(await operation(), 200));
+const query = (operation) => run$1(async () => json$1(await operation(), 200));
 /** Every Insights route: where it mounts, and the handler it runs. */
 const INSIGHTS_ROUTES = [
 	{
@@ -10601,14 +10682,14 @@ const INSIGHTS_ROUTES = [
 	}
 ];
 const createInsightsRouteHandlers = (provider) => ({
-	appendBundleEvent: async (_params, request) => run(async () => {
+	appendBundleEvent: async (_params, request) => run$1(async () => {
 		await provider.appendBundleEvent(await parseBundleEventRequest(request));
 		return new Response(null, { status: 204 });
 	}),
 	getReportingOverview: (_params, request) => query(() => provider.getReportingOverview(parseReportingOverviewInput(request))),
-	getInstallation: (params) => run(async () => {
+	getInstallation: (params) => run$1(async () => {
 		const installation = await provider.getInstallation({ installId: requireParam(params, "installId") });
-		return installation === null ? json({ error: "Installation not found" }, 404) : json(installation, 200);
+		return installation === null ? json$1({ error: "Installation not found" }, 404) : json$1(installation, 200);
 	}),
 	listEvents: (_params, request) => query(() => provider.listEvents(parseEventPageInput(request))),
 	listInstallationEvents: (params, request) => query(() => provider.listInstallationEvents({
@@ -10727,15 +10808,833 @@ const insights = (options = {}) => {
 			name: "insights"
 		} }
 	});
+	return markOfficial$1(plugin);
+};
+//#endregion
+//#region ../remote-config/dist/shared/ownEntry.mjs
+/**
+* A record's own entry. Parameter keys and condition names come from users,
+* so `constructor` or `__proto__` must name theirs, never Object.prototype's.
+*/
+const ownEntry = (record, key) => record !== void 0 && Object.prototype.hasOwnProperty.call(record, key) ? record[key] : void 0;
+//#endregion
+//#region ../remote-config/dist/server/template.mjs
+const EMPTY_REMOTE_CONFIG_TEMPLATE = Object.freeze({
+	conditions: Object.freeze([]),
+	parameters: Object.freeze({})
+});
+/**
+* A template's JSON stays under this many characters, so a device's values
+* always fit the 64 KB a client plugin may store under one key.
+*/
+const REMOTE_CONFIG_MAX_TEMPLATE_LENGTH = 6e4;
+const REMOTE_CONFIG_MAX_PARAMETERS = 2e3;
+const MAX_RULE_VALUES = 100;
+const MAX_DESCRIPTION_LENGTH$1 = 256;
+const MAX_CONDITION_NAME_LENGTH = 100;
+const MAX_RULE_TEXT_LENGTH = 128;
+const PARAMETER_KEY_PATTERN = /^[A-Za-z_][A-Za-z0-9_]{0,255}$/u;
+const SEED_PATTERN = /^[A-Za-z0-9_-]{1,64}$/u;
+/** A date-time with its time zone, so it names one instant. */
+const DATE_TIME_PATTERN = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}(?::\d{2}(?:\.\d{1,3})?)?(?:Z|[+-]\d{2}:\d{2})$/u;
+const VALUE_TYPES = /* @__PURE__ */ new Set([
+	"STRING",
+	"NUMBER",
+	"BOOLEAN",
+	"JSON"
+]);
+const PLATFORMS = /* @__PURE__ */ new Set(["ios", "android"]);
+/** A template that cannot be published; `issues` lists every problem found. */
+var RemoteConfigValidationError = class extends Error {
+	issues;
+	name = "RemoteConfigValidationError";
+	constructor(issues) {
+		super(`The Remote Config template is invalid: ${issues.slice(0, 3).map(({ path, message }) => path ? `${path}: ${message}` : message).join("; ")}${issues.length > 3 ? ` (and ${issues.length - 3} more)` : ""}`);
+		this.issues = issues;
+	}
+};
+const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const visibleText = (value, max) => typeof value === "string" && value.trim().length > 0 && value.length <= max && !/[\p{Cc}]/u.test(value);
+/** Whether a value's text suits its type; the problem otherwise. */
+const checkValueText = (valueType, text) => {
+	switch (valueType) {
+		case "NUMBER": return text.trim().length > 0 && Number.isFinite(Number(text)) ? null : "must be a number.";
+		case "BOOLEAN": return text === "true" || text === "false" ? null : "must be \"true\" or \"false\".";
+		case "JSON": try {
+			JSON.parse(text);
+			return null;
+		} catch {
+			return "must be valid JSON.";
+		}
+		default: return null;
+	}
+};
+/**
+* Checks a template and returns it with only its declared fields, or throws
+* `RemoteConfigValidationError` with every problem it finds.
+*/
+const validateRemoteConfigTemplate = (input) => {
+	const issues = [];
+	const issue = (path, message) => {
+		issues.push({
+			path,
+			message
+		});
+	};
+	const unknownKeys = (value, allowed, path) => {
+		for (const key of Object.keys(value)) if (!allowed.includes(key)) issue(path ? `${path}.${key}` : key, "is not a template field.");
+	};
+	if (!isRecord(input)) throw new RemoteConfigValidationError([{
+		path: "",
+		message: "A template is an object."
+	}]);
+	unknownKeys(input, ["conditions", "parameters"], "");
+	const conditions = [];
+	const conditionNames = /* @__PURE__ */ new Set();
+	const rawConditions = input.conditions ?? [];
+	if (!Array.isArray(rawConditions)) issue("conditions", "must be a list.");
+	else {
+		if (rawConditions.length > 500) issue("conditions", `holds at most 500 conditions.`);
+		rawConditions.forEach((raw, index) => {
+			const path = `conditions[${index}]`;
+			if (!isRecord(raw)) {
+				issue(path, "must be an object.");
+				return;
+			}
+			unknownKeys(raw, ["name", "rules"], path);
+			const { name } = raw;
+			if (!visibleText(name, MAX_CONDITION_NAME_LENGTH)) issue(`${path}.name`, `must be 1-${MAX_CONDITION_NAME_LENGTH} visible characters.`);
+			else if (conditionNames.has(name)) issue(`${path}.name`, `"${name}" names another condition too.`);
+			else conditionNames.add(name);
+			const rules = validateRules(raw.rules, `${path}.rules`, issue);
+			if (typeof name === "string") conditions.push({
+				name,
+				rules
+			});
+		});
+	}
+	const parameters = [];
+	const rawParameters = input.parameters ?? {};
+	if (!isRecord(rawParameters)) issue("parameters", "must be an object keyed by parameter.");
+	else {
+		const keys = Object.keys(rawParameters);
+		if (keys.length > 2e3) issue("parameters", `holds at most ${REMOTE_CONFIG_MAX_PARAMETERS} parameters.`);
+		for (const key of keys) {
+			const path = `parameters.${key}`;
+			if (!PARAMETER_KEY_PATTERN.test(key)) issue(path, "Parameter keys start with a letter or _, and hold up to 256 letters, digits, and _.");
+			const raw = rawParameters[key];
+			if (!isRecord(raw)) {
+				issue(path, "must be an object.");
+				continue;
+			}
+			unknownKeys(raw, [
+				"valueType",
+				"defaultValue",
+				"conditionalValues",
+				"description"
+			], path);
+			const valueType = raw.valueType;
+			if (typeof valueType !== "string" || !VALUE_TYPES.has(valueType)) {
+				issue(`${path}.valueType`, "must be STRING, NUMBER, BOOLEAN, or JSON.");
+				continue;
+			}
+			const type = valueType;
+			const readValue = (value, valuePath) => {
+				if (!isRecord(value)) {
+					issue(valuePath, "must be { value } or { useInAppDefault: true }.");
+					return null;
+				}
+				if ("useInAppDefault" in value) {
+					unknownKeys(value, ["useInAppDefault"], valuePath);
+					if (value.useInAppDefault !== true) {
+						issue(`${valuePath}.useInAppDefault`, "must be true.");
+						return null;
+					}
+					return { useInAppDefault: true };
+				}
+				unknownKeys(value, ["value"], valuePath);
+				if (typeof value.value !== "string") {
+					issue(`${valuePath}.value`, "must be text.");
+					return null;
+				}
+				const problem = checkValueText(type, value.value);
+				if (problem !== null) {
+					issue(`${valuePath}.value`, problem);
+					return null;
+				}
+				return { value: value.value };
+			};
+			const defaultValue = readValue(raw.defaultValue, `${path}.defaultValue`);
+			const conditionalValues = [];
+			if (raw.conditionalValues !== void 0) {
+				if (!isRecord(raw.conditionalValues)) issue(`${path}.conditionalValues`, "must be an object keyed by condition.");
+				else for (const [conditionName, value] of Object.entries(raw.conditionalValues)) {
+					const valuePath = `${path}.conditionalValues.${conditionName}`;
+					if (!conditionNames.has(conditionName)) {
+						issue(valuePath, `No condition is named "${conditionName}".`);
+						continue;
+					}
+					const read = readValue(value, valuePath);
+					if (read !== null) conditionalValues.push([conditionName, read]);
+				}
+			}
+			let description;
+			if (raw.description !== void 0) {
+				const text = typeof raw.description === "string" ? raw.description.trim() : null;
+				if (text === null || text.length > MAX_DESCRIPTION_LENGTH$1) issue(`${path}.description`, `must be text of up to ${MAX_DESCRIPTION_LENGTH$1} characters.`);
+				else if (text.length > 0) description = text;
+			}
+			if (defaultValue !== null) parameters.push([key, {
+				valueType: type,
+				defaultValue,
+				...conditionalValues.length === 0 ? {} : { conditionalValues: Object.fromEntries(conditionalValues) },
+				...description === void 0 ? {} : { description }
+			}]);
+		}
+	}
+	if (issues.length > 0) throw new RemoteConfigValidationError(issues);
+	const template = {
+		conditions,
+		parameters: Object.fromEntries(parameters)
+	};
+	const length = JSON.stringify(template).length;
+	if (length > 6e4) throw new RemoteConfigValidationError([{
+		path: "",
+		message: `The template takes ${length.toLocaleString("en-US")} characters of JSON; the limit is ${REMOTE_CONFIG_MAX_TEMPLATE_LENGTH.toLocaleString("en-US")}.`
+	}]);
+	return template;
+};
+const textList = (value, path, issue, check, describe) => {
+	if (!Array.isArray(value) || value.length === 0 || value.length > MAX_RULE_VALUES) {
+		issue(path, `must list 1-${MAX_RULE_VALUES} values.`);
+		return [];
+	}
+	const list = [];
+	value.forEach((entry, index) => {
+		if (typeof entry !== "string" || !check(entry)) issue(`${path}[${index}]`, describe);
+		else if (!list.includes(entry)) list.push(entry);
+	});
+	return list;
+};
+const RULE_FIELDS = {
+	platform: ["type", "platforms"],
+	channel: ["type", "channels"],
+	appVersion: ["type", "range"],
+	cohort: ["type", "cohorts"],
+	percent: [
+		"type",
+		"seed",
+		"from",
+		"to"
+	],
+	fingerprint: ["type", "hashes"],
+	dateTime: [
+		"type",
+		"from",
+		"to"
+	]
+};
+const validateRules = (value, path, issue) => {
+	if (!Array.isArray(value) || value.length === 0) {
+		issue(path, "must list at least one rule.");
+		return [];
+	}
+	const rules = [];
+	value.forEach((raw, index) => {
+		const rulePath = `${path}[${index}]`;
+		if (!isRecord(raw) || typeof raw.type !== "string") {
+			issue(rulePath, "must be a rule object with a type.");
+			return;
+		}
+		const type = raw.type;
+		const fields = ownEntry(RULE_FIELDS, type);
+		if (fields === void 0) {
+			issue(`${rulePath}.type`, "must be platform, channel, appVersion, cohort, percent, fingerprint, or dateTime.");
+			return;
+		}
+		for (const key of Object.keys(raw)) if (!fields.includes(key)) issue(`${rulePath}.${key}`, `is not a field of a ${type} rule.`);
+		switch (type) {
+			case "platform": {
+				const platforms = textList(raw.platforms, `${rulePath}.platforms`, issue, (text) => PLATFORMS.has(text), "must be \"ios\" or \"android\".");
+				rules.push({
+					type,
+					platforms
+				});
+				return;
+			}
+			case "channel": {
+				const channels = textList(raw.channels, `${rulePath}.channels`, issue, (text) => visibleText(text, MAX_RULE_TEXT_LENGTH), `must be a channel name of 1-${MAX_RULE_TEXT_LENGTH} characters.`);
+				rules.push({
+					type,
+					channels
+				});
+				return;
+			}
+			case "appVersion": {
+				const range = raw.range;
+				if (!visibleText(range, MAX_RULE_TEXT_LENGTH) || !isValidRange(range.trim())) {
+					issue(`${rulePath}.range`, "must be a semver range, such as >=1.4.0 or 2.x.");
+					return;
+				}
+				rules.push({
+					type,
+					range: range.trim()
+				});
+				return;
+			}
+			case "cohort": {
+				const cohorts = textList(raw.cohorts, `${rulePath}.cohorts`, issue, isValidCohort, "must be a cohort from 1 to 1000, or a lowercase slug.").map(normalizeCohortValue);
+				rules.push({
+					type,
+					cohorts: [...new Set(cohorts)]
+				});
+				return;
+			}
+			case "percent": {
+				const { seed, from, to } = raw;
+				if (typeof seed !== "string" || !SEED_PATTERN.test(seed)) {
+					issue(`${rulePath}.seed`, "must be 1-64 letters, digits, _, and -.");
+					return;
+				}
+				const isPercent = (value) => typeof value === "number" && value >= 0 && value <= 100 && Math.abs(value * 10 - Math.round(value * 10)) < 1e-9;
+				if (!isPercent(from) || !isPercent(to) || from >= to) {
+					issue(rulePath, "takes from < to, each a percentage from 0 to 100 in steps of 0.1.");
+					return;
+				}
+				rules.push({
+					type,
+					seed,
+					from,
+					to
+				});
+				return;
+			}
+			case "fingerprint": {
+				const hashes = textList(raw.hashes, `${rulePath}.hashes`, issue, (text) => visibleText(text, MAX_RULE_TEXT_LENGTH), `must be a fingerprint of 1-${MAX_RULE_TEXT_LENGTH} characters.`);
+				rules.push({
+					type,
+					hashes
+				});
+				return;
+			}
+			case "dateTime": {
+				const instant = (field) => {
+					const value = raw[field];
+					if (value === void 0) return void 0;
+					const ms = typeof value === "string" ? Date.parse(value) : NaN;
+					if (typeof value !== "string" || !DATE_TIME_PATTERN.test(value) || !Number.isFinite(ms)) {
+						issue(`${rulePath}.${field}`, "must be an ISO 8601 date-time with a time zone, such as 2026-10-08T10:00:00Z.");
+						return null;
+					}
+					return new Date(ms).toISOString();
+				};
+				const from = instant("from");
+				const to = instant("to");
+				if (from === null || to === null) return;
+				if (from === void 0 && to === void 0) {
+					issue(rulePath, "takes from, to, or both.");
+					return;
+				}
+				if (from !== void 0 && to !== void 0 && from >= to) {
+					issue(rulePath, "takes a from before its to.");
+					return;
+				}
+				rules.push({
+					type,
+					...from === void 0 ? {} : { from },
+					...to === void 0 ? {} : { to }
+				});
+				return;
+			}
+		}
+	});
+	return rules;
+};
+/** Whether one rule matches a device. */
+const matchesRemoteConfigRule = (rule, context) => {
+	switch (rule.type) {
+		case "platform": return context.platform !== void 0 && context.platform !== null && rule.platforms.includes(context.platform);
+		case "channel": return typeof context.channel === "string" && rule.channels.includes(context.channel);
+		case "appVersion": return typeof context.appVersion === "string" && semverSatisfies(rule.range, context.appVersion);
+		case "cohort": return typeof context.cohort === "string" && rule.cohorts.includes(normalizeCohortValue(context.cohort));
+		case "percent": {
+			if (typeof context.cohort !== "string") return false;
+			const cohort = getNumericCohortValue(context.cohort);
+			if (cohort === null) return false;
+			const position = getNumericCohortRolloutPosition(rule.seed, cohort);
+			return position >= Math.round(rule.from * 10) && position < Math.round(rule.to * 10);
+		}
+		case "fingerprint": return typeof context.fingerprintHash === "string" && rule.hashes.includes(context.fingerprintHash);
+		case "dateTime": return typeof context.now === "number" && (rule.from === void 0 || context.now >= Date.parse(rule.from)) && (rule.to === void 0 || context.now < Date.parse(rule.to));
+	}
+};
+/** Whether every rule of a condition matches a device. */
+const matchesRemoteConfigCondition = (condition, context) => condition.rules.every((rule) => matchesRemoteConfigRule(rule, context));
+/**
+* Every parameter's value for one device: the value of the first condition,
+* in the template's order, that matches and that the parameter has a value
+* for; otherwise its default value.
+*/
+const evaluateRemoteConfig = (template, context) => {
+	const matched = template.conditions.filter((condition) => matchesRemoteConfigCondition(condition, context)).map(({ name }) => name);
+	return Object.fromEntries(Object.entries(template.parameters).map(([key, parameter]) => {
+		let condition = null;
+		let chosen = parameter.defaultValue;
+		for (const name of matched) {
+			const value = ownEntry(parameter.conditionalValues, name);
+			if (value !== void 0) {
+				condition = name;
+				chosen = value;
+				break;
+			}
+		}
+		return [key, {
+			value: "value" in chosen ? chosen.value : null,
+			condition
+		}];
+	}));
+};
+/** The values a device receives: each parameter's text, without in-app defaults. */
+const resolveRemoteConfigValues = (template, context) => {
+	return Object.fromEntries(Object.entries(evaluateRemoteConfig(template, context)).flatMap(([key, { value }]) => value === null ? [] : [[key, value]]));
+};
+//#endregion
+//#region ../remote-config/dist/server/api.mjs
+const ACTIVE_ID = "active";
+/** How long a server answers fetches from the active template it read last. */
+const ACTIVE_CACHE_TTL_MS = 5e3;
+const MAX_DESCRIPTION_LENGTH = 256;
+const MAX_VERSIONS_PAGE = 100;
+/**
+* An argument the API refuses, such as a negative `baseVersion`; the admin
+* routes answer it with `400`.
+*/
+var RemoteConfigInputError = class extends TypeError {
+	name = "RemoteConfigInputError";
+};
+const normalizeDescription = (description) => {
+	if (description === void 0 || description === null) return null;
+	if (typeof description !== "string") throw new RemoteConfigInputError("A version description is text.");
+	const trimmed = description.trim();
+	if (trimmed.length > MAX_DESCRIPTION_LENGTH) throw new RemoteConfigInputError(`A version description holds up to ${MAX_DESCRIPTION_LENGTH} characters.`);
+	return trimmed.length === 0 ? null : trimmed;
+};
+const requireVersionNumber = (value, name) => {
+	if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) throw new RemoteConfigInputError(`${name} must be a non-negative integer.`);
+	return value;
+};
+/** A template as its `json` column stores it; validation made it plain JSON. */
+const toColumn = (template) => template;
+const fromColumn = (value) => value;
+const toVersion = (row) => Object.freeze({
+	version: row.version,
+	description: row.description,
+	updateType: row.update_type === "ROLLBACK" ? "ROLLBACK" : "PUBLISH",
+	rollbackSource: row.rollback_source,
+	createdAtMs: row.created_at_ms
+});
+/** Remote Config's API over its tables. */
+const createRemoteConfigApi = ({ db, now }) => {
+	let cached = null;
+	let loading = null;
+	let generation = 0;
+	const readActive = async () => {
+		const row = await db.findOne("remote_config_active", { id: ACTIVE_ID });
+		return row === null ? {
+			version: 0,
+			template: EMPTY_REMOTE_CONFIG_TEMPLATE,
+			updatedAtMs: null
+		} : {
+			version: row.version,
+			template: fromColumn(row.template),
+			updatedAtMs: row.updated_at_ms
+		};
+	};
+	/** The active template for fetches: one read per server every few seconds at most. */
+	const servedActive = () => {
+		if (cached !== null && cached.expiresAt > now()) return Promise.resolve(cached.active);
+		if (loading !== null) return loading;
+		const started = generation;
+		const read = readActive().then((active) => {
+			if (generation === started) cached = {
+				active,
+				expiresAt: now() + ACTIVE_CACHE_TTL_MS
+			};
+			return active;
+		}).finally(() => {
+			if (loading === read) loading = null;
+		});
+		loading = read;
+		return read;
+	};
+	const commit = async (input) => {
+		const attempt = () => db.transaction(async (tx) => {
+			const active = await tx.findOne("remote_config_active", { id: ACTIVE_ID });
+			const currentVersion = active?.version ?? 0;
+			if (currentVersion !== input.baseVersion) return {
+				status: "conflict",
+				currentVersion
+			};
+			const version = currentVersion + 1;
+			const at = now();
+			const row = {
+				version,
+				template: toColumn(input.template),
+				description: input.description,
+				update_type: input.rollbackSource === null ? "PUBLISH" : "ROLLBACK",
+				rollback_source: input.rollbackSource,
+				created_at_ms: at
+			};
+			tx.create("remote_config_versions", row);
+			if (active === null) tx.create("remote_config_active", {
+				id: ACTIVE_ID,
+				version,
+				template: toColumn(input.template),
+				updated_at_ms: at
+			});
+			else tx.update("remote_config_active", active, {
+				version,
+				template: toColumn(input.template),
+				updated_at_ms: at
+			});
+			return {
+				status: "published",
+				version: toVersion(row)
+			};
+		});
+		try {
+			const result = await attempt();
+			if (result.status === "published") {
+				generation += 1;
+				cached = null;
+				loading = null;
+			}
+			return result;
+		} catch (error) {
+			if (error instanceof DatabaseConstraintError && (error.reason === "exists" || error.reason === "unique")) return {
+				status: "conflict",
+				currentVersion: (await readActive()).version
+			};
+			throw error;
+		}
+	};
+	return Object.freeze({
+		getActive: readActive,
+		publish: async ({ template, baseVersion, description }) => commit({
+			template: validateRemoteConfigTemplate(template),
+			baseVersion: requireVersionNumber(baseVersion, "baseVersion"),
+			description: normalizeDescription(description),
+			rollbackSource: null
+		}),
+		rollback: async ({ version, baseVersion, description }) => {
+			const source = await db.findOne("remote_config_versions", { version: requireVersionNumber(version, "version") });
+			if (source === null) return { status: "not_found" };
+			return commit({
+				template: fromColumn(source.template),
+				baseVersion: requireVersionNumber(baseVersion, "baseVersion"),
+				description: normalizeDescription(description) ?? `Rollback to version ${source.version}`,
+				rollbackSource: source.version
+			});
+		},
+		listVersions: async ({ limit = 20, cursor } = {}) => {
+			if (!Number.isSafeInteger(limit) || limit < 1 || limit > MAX_VERSIONS_PAGE) throw new RemoteConfigInputError(`limit must be an integer from 1 to ${MAX_VERSIONS_PAGE}.`);
+			const page = await db.findMany("remote_config_versions", {
+				index: "byVersion",
+				where: {},
+				order: "desc",
+				limit,
+				...cursor === void 0 ? {} : { cursor }
+			});
+			return Object.freeze({
+				versions: Object.freeze(page.rows.map(toVersion)),
+				...page.next === void 0 ? {} : { next: page.next }
+			});
+		},
+		getVersion: async (version) => {
+			const row = await db.findOne("remote_config_versions", { version: requireVersionNumber(version, "version") });
+			return row === null ? null : Object.freeze({
+				...toVersion(row),
+				template: fromColumn(row.template)
+			});
+		},
+		resolve: async (context) => {
+			const active = await servedActive();
+			return {
+				version: active.version,
+				values: resolveRemoteConfigValues(active.template, {
+					...context,
+					now: context.now ?? now()
+				})
+			};
+		}
+	});
+};
+//#endregion
+//#region ../remote-config/dist/server/official.mjs
+/**
+* The brand of Hot Updater's own plugins, a registered symbol that
+* `@hot-updater/server` reads to reserve the id "remoteConfig" for this plugin.
+* Each official plugin package keeps this copy, so none imports another's
+* internals for it.
+*/
+const OFFICIAL = Symbol.for("@hot-updater/server/official-plugin");
+/** Marks a plugin one of Hot Updater's own factories made. */
+const markOfficial = (plugin) => Object.defineProperty(plugin, OFFICIAL, { value: true });
+//#endregion
+//#region ../remote-config/dist/shared/wire.mjs
+/**
+* The exchange between the app's `remoteConfig()` client plugin and the
+* `remoteConfig()` server plugin: `GET /remote-config`, relative to the
+* `baseURL` the app passes to `HotUpdater.init`. The app
+* sends what conditions read as query parameters, and the server answers the
+* values the published template gives them. Both sides import this module,
+* which imports nothing, so the app's bundle never reaches server code.
+*/
+/** The path both sides use, relative to the app's `baseURL`. */
+const REMOTE_CONFIG_PATH = "remote-config";
+/** The query parameter each context field travels in. */
+const REMOTE_CONFIG_QUERY = {
+	platform: "platform",
+	appVersion: "appVersion",
+	channel: "channel",
+	cohort: "cohort",
+	fingerprintHash: "fingerprintHash"
+};
+//#endregion
+//#region ../remote-config/dist/server/routes.mjs
+/** Seconds a client waits before it resends a request the busy database refused. */
+const RETRY_AFTER_SECONDS = 5;
+/** A shared cache keeps a device's values five seconds, as it keeps a Release Catalog. */
+const FETCH_CACHE_CONTROL = "public, max-age=0, s-maxage=5";
+const MAX_CONTEXT_LENGTH = 128;
+var BadRequestError = class extends Error {};
+const json = (body, status, headers = {}) => Response.json(body, {
+	headers: {
+		"cache-control": "private, no-store",
+		...headers
+	},
+	status
+});
+const run = async (operation) => {
+	try {
+		return await operation();
+	} catch (error) {
+		if (error instanceof RemoteConfigValidationError) return json({
+			error: error.message,
+			issues: error.issues
+		}, 400);
+		if (error instanceof BadRequestError || error instanceof RemoteConfigInputError || error instanceof DatabaseCursorError) return json({ error: error.message }, 400);
+		if (isDatabaseBusyError(error)) {
+			console.warn("[hot-updater] Remote Config answered 503: the database is busy.", error);
+			return json({ error: "Service unavailable" }, 503, { "retry-after": String(RETRY_AFTER_SECONDS) });
+		}
+		throw error;
+	}
+};
+const readContext = (request) => {
+	const query = new URL(request.url).searchParams;
+	const read = (field) => {
+		const value = query.get(REMOTE_CONFIG_QUERY[field]);
+		if (value === null || value.length === 0) return null;
+		if (value.length > MAX_CONTEXT_LENGTH) throw new BadRequestError(`${field} is too long.`);
+		return value;
+	};
+	const platform = read("platform");
+	if (platform !== null && platform !== "ios" && platform !== "android") throw new BadRequestError("platform must be \"ios\" or \"android\".");
+	return {
+		platform,
+		appVersion: read("appVersion"),
+		channel: read("channel"),
+		cohort: read("cohort"),
+		fingerprintHash: read("fingerprintHash")
+	};
+};
+const bodyHash = async (body) => {
+	const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(body));
+	return [...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, "0")).join("");
+};
+const readJsonBody = async (request) => {
+	const body = await request.json().catch(() => null);
+	if (typeof body !== "object" || body === null || Array.isArray(body)) throw new BadRequestError("The request body must be a JSON object.");
+	return body;
+};
+const versionParam = (params) => {
+	const text = params.version ?? "";
+	if (!/^\d{1,15}$/u.test(text)) throw new BadRequestError("The version must be a positive integer.");
+	return Number(text);
+};
+const publishResponse = (result) => result.status === "published" ? json(result.version, 200) : json({
+	error: `Version ${result.currentVersion} was published since; reload the template and publish again.`,
+	currentVersion: result.currentVersion
+}, 409);
+/**
+* Remote Config's routes: the devices' `GET /remote-config` on
+* `handlers.client`, and template management on `handlers.admin`.
+*/
+const createRemoteConfigEndpoints = (api) => [
+	{
+		method: "GET",
+		path: `/${REMOTE_CONFIG_PATH}`,
+		access: "client",
+		handler: (request) => run(async () => {
+			const body = JSON.stringify(await api.resolve(readContext(request)));
+			const etag = `"sha256:${await bodyHash(body)}"`;
+			const headers = {
+				"cache-control": FETCH_CACHE_CONTROL,
+				"content-type": "application/json",
+				etag,
+				vary: "Accept-Encoding"
+			};
+			if (request.headers.get("if-none-match") === etag) return new Response(null, {
+				headers,
+				status: 304
+			});
+			return new Response(body, {
+				headers,
+				status: 200
+			});
+		})
+	},
+	{
+		method: "GET",
+		path: `/${REMOTE_CONFIG_PATH}/template`,
+		access: "admin",
+		handler: () => run(async () => json(await api.getActive(), 200))
+	},
+	{
+		method: "PUT",
+		path: `/${REMOTE_CONFIG_PATH}/template`,
+		access: "admin",
+		handler: (request) => run(async () => {
+			const body = await readJsonBody(request);
+			return publishResponse(await api.publish({
+				template: body.template,
+				baseVersion: body.baseVersion,
+				...body.description === void 0 ? {} : { description: body.description }
+			}));
+		})
+	},
+	{
+		method: "GET",
+		path: `/${REMOTE_CONFIG_PATH}/versions`,
+		access: "admin",
+		handler: (request) => run(async () => {
+			const query = new URL(request.url).searchParams;
+			const limit = query.get("limit");
+			const cursor = query.get("cursor");
+			return json(await api.listVersions({
+				...limit === null ? {} : { limit: Number(limit) },
+				...cursor === null ? {} : { cursor }
+			}), 200);
+		})
+	},
+	{
+		method: "GET",
+		path: `/${REMOTE_CONFIG_PATH}/versions/:version`,
+		access: "admin",
+		handler: (_request, params) => run(async () => {
+			const version = await api.getVersion(versionParam(params));
+			return version === null ? json({ error: "Version not found" }, 404) : json(version, 200);
+		})
+	},
+	{
+		method: "POST",
+		path: `/${REMOTE_CONFIG_PATH}/versions/:version/rollback`,
+		access: "admin",
+		handler: (request, params) => run(async () => {
+			const body = await readJsonBody(request);
+			const result = await api.rollback({
+				version: versionParam(params),
+				baseVersion: body.baseVersion,
+				...body.description === void 0 ? {} : { description: body.description }
+			});
+			return result.status === "not_found" ? json({ error: "Version not found" }, 404) : publishResponse(result);
+		})
+	}
+];
+//#endregion
+//#region ../remote-config/dist/server/schema.mjs
+/**
+* Remote Config's tables: the active template in one row, which a device's
+* fetch reads by key, and every published version beside it.
+*/
+const remoteConfigSchema = {
+	/** One row, `id` `"active"`: the template devices receive and its version. */
+	remote_config_active: defineTable({
+		id: {
+			type: "string",
+			maxLength: 16
+		},
+		version: { type: "integer" },
+		template: { type: "json" },
+		updated_at_ms: { type: "integer" }
+	}, { key: ["id"] }),
+	/** Each publish and rollback, kept so the Console can show and restore it. */
+	remote_config_versions: defineTable({
+		version: { type: "integer" },
+		template: { type: "json" },
+		description: {
+			type: "string",
+			maxLength: 256,
+			required: false
+		},
+		/** `PUBLISH`, or `ROLLBACK` for a copy of `rollback_source`. */
+		update_type: {
+			type: "string",
+			maxLength: 16
+		},
+		rollback_source: {
+			type: "integer",
+			required: false
+		},
+		created_at_ms: { type: "integer" }
+	}, {
+		key: ["version"],
+		indexes: { byVersion: {
+			eq: [],
+			sort: ["version"]
+		} }
+	})
+};
+//#endregion
+//#region ../remote-config/dist/server/index.mjs
+/**
+* Remote Config: parameters whose values the server picks per device by
+* conditions, published as versioned templates. Devices fetch their values
+* from `GET /remote-config` with the `remoteConfig()` client plugin; the
+* Console and `hotUpdater.api.remoteConfig` edit, publish, and roll back
+* templates.
+*/
+const remoteConfig = () => {
+	const plugin = definePlugin({
+		id: "remoteConfig",
+		namespace: false,
+		schemaVersion: "1.0.0",
+		schema: remoteConfigSchema,
+		init: ({ db, now }) => {
+			const api = createRemoteConfigApi({
+				db,
+				now
+			});
+			return {
+				api,
+				endpoints: createRemoteConfigEndpoints(api)
+			};
+		}
+	});
 	return markOfficial(plugin);
 };
 //#endregion
 //#region src/plugins.ts
 /**
-* The plugins the managed Firebase server runs: Insights, and API keys on every
-* client route. Its Cloud Function imports this list.
+* The plugins the managed Firebase server runs: Insights, API keys on every
+* client route, and Remote Config. Its Cloud Function imports this list.
 */
-const plugins = [insights(), apiKeys()];
+const plugins = [
+	insights(),
+	apiKeys(),
+	remoteConfig()
+];
 //#endregion
 //#region firebase/functions/index.ts
 const HOT_UPDATER_BASE_PATH = "/";