@hot-updater/firebase 1.0.0-rc.43 → 1.0.0-rc.45

package/dist/firebase/functions/index.cjs

@@ -1426,31 +1426,6 @@ var ReleaseCatalogMutationError = class extends Error {
 	}
 };
 //#endregion
-//#region ../plugin-core/dist/storageDownloadPath.mjs
-const decodeBase64Url$1 = (value) => {
-	try {
-		const base64 = value.replaceAll("-", "+").replaceAll("_", "/");
-		const binary = atob(base64.padEnd(Math.ceil(base64.length / 4) * 4, "="));
-		return new TextDecoder(void 0, { fatal: true }).decode(Uint8Array.from(binary, (character) => character.charCodeAt(0)));
-	} catch {
-		return null;
-	}
-};
-const parseStorageDownloadPath = (path) => {
-	const match = /^\/storage\/([^/]+)\/([^/]+)$/.exec(path);
-	if (!match) return null;
-	const storageUri = decodeBase64Url$1(match[1]);
-	if (storageUri === null) return null;
-	try {
-		return {
-			signature: decodeURIComponent(match[2]),
-			storageUri
-		};
-	} catch {
-		return null;
-	}
-};
-//#endregion
 //#region ../plugin-core/dist/serverPlugin/definePlugin.mjs
 /** Declares a plugin; Hot Updater's own plugins and third-party ones use the same contract. */
 const definePlugin = (plugin) => plugin;
@@ -4591,7 +4566,7 @@ const createKvAdapter = ({ store, tablePrefix = "" }) => {
 };
 //#endregion
 //#region ../../packages/server/dist/version.mjs
-const HOT_UPDATER_SERVER_VERSION = "1.0.0-rc.43";
+const HOT_UPDATER_SERVER_VERSION = "1.0.0-rc.45";
 //#endregion
 //#region ../../packages/server/dist/handlerVersionRoutes.mjs
 /**
@@ -6777,6 +6752,22 @@ const privateNotFound = () => Response.json({ error: "Not found" }, {
 	status: 404,
 	headers: { "cache-control": "private, no-store" }
 });
+const badRequest = (error) => Response.json({ error }, {
+	status: 400,
+	headers: { "cache-control": "private, no-store" }
+});
+/**
+* A 400 for a catalog path whose scope is malformed, such as a channel name
+* where its base64url key belongs; null for a well-formed scope.
+*/
+const invalidScope = (input) => {
+	try {
+		createReleaseCatalogScopeKey(input);
+		return null;
+	} catch (error) {
+		return badRequest(error instanceof Error ? error.message : "Invalid Release Catalog scope");
+	}
+};
 /**
 * A scope with no catalog yet, such as a store version before its first
 * OTA release: cached like a catalog, so its update checks don't all reach
@@ -6855,16 +6846,15 @@ const createReleaseCatalogRouteHandlers = () => {
 		appVersionReleaseCatalog: async (params, request, { core }) => {
 			const rawAppVersion = requireRouteParam(params, "appVersion");
 			const appVersion = canonicalizeAppVersion(rawAppVersion);
-			if (appVersion === null || appVersion !== rawAppVersion) return Response.json({ error: "Invalid app version" }, {
-				status: 400,
-				headers: { "cache-control": "private, no-store" }
-			});
+			if (appVersion === null || appVersion !== rawAppVersion) return badRequest("Invalid app version");
 			const input = {
 				appVersion,
 				channelKey: requireRouteParam(params, "channelKey"),
 				platform: requirePlatformParam(params),
 				strategy: "APP_VERSION"
 			};
+			const invalid = invalidScope(input);
+			if (invalid) return invalid;
 			return catalogResponse(await loadCatalog(`app-version:${JSON.stringify(input)}`, () => core.getReleaseCatalog(input)), request);
 		},
 		fingerprintReleaseCatalog: async (params, request, { core }) => {
@@ -6874,6 +6864,8 @@ const createReleaseCatalogRouteHandlers = () => {
 				platform: requirePlatformParam(params),
 				strategy: "FINGERPRINT"
 			};
+			const invalid = invalidScope(input);
+			if (invalid) return invalid;
 			return catalogResponse(await loadCatalog(`fingerprint:${JSON.stringify(input)}`, () => core.getReleaseCatalog(input)), request);
 		},
 		artifactV1: async (params, _request, { core }) => {
@@ -6955,8 +6947,8 @@ const errorResponse = (error, status) => Response.json({ error }, {
 	headers: { "cache-control": "private, no-store" },
 	status
 });
-/** `/version` and storage downloads never pass through the client policy. */
-const PUBLIC_CLIENT_ROUTES = /* @__PURE__ */ new Set(["version", "downloadStorageObject"]);
+/** `/version` never passes through the client policy. */
+const PUBLIC_CLIENT_ROUTES = /* @__PURE__ */ new Set(["version"]);
 const routesOf = Symbol.for("@hot-updater/server/routes");
 const withVary = (response, varyHeaders) => {
 	const cacheControl = response.headers.get("cache-control") ?? "";
@@ -7001,26 +6993,11 @@ const createRequestHandler = ({ api, clientPolicy, privateResponses = false, rou
 		});
 	}
 };
-const createDownloadStorageRouteHandler = (downloadStorageObject) => async (params) => {
-	const token = params.token;
-	const signature = params.signature;
-	if (!token || !signature) return errorResponse("Not found", 404);
-	const response = await downloadStorageObject(token, signature);
-	if (!response) return errorResponse("Not found", 404);
-	const headers = new Headers(response.headers);
-	if (!headers.has("cache-control")) headers.set("cache-control", "public, max-age=31536000, immutable");
-	return new Response(response.body, {
-		headers,
-		status: response.status,
-		statusText: response.statusText
-	});
-};
-function createHotUpdaterHandlers({ api, clientPolicy, downloadStorageObject, endpoints = [], plugins = [] }) {
+function createHotUpdaterHandlers({ api, clientPolicy, endpoints = [], plugins = [] }) {
 	const routeHandlers = {
 		...createVersionRouteHandlers(plugins),
 		...createReleaseCatalogRouteHandlers(),
-		...createAdminRouteHandlers(),
-		...downloadStorageObject === void 0 ? {} : { downloadStorageObject: createDownloadStorageRouteHandler(downloadStorageObject) }
+		...createAdminRouteHandlers()
 	};
 	const routes = [];
 	const shapes = /* @__PURE__ */ new Map();
@@ -7039,7 +7016,6 @@ function createHotUpdaterHandlers({ api, clientPolicy, downloadStorageObject, en
 	const clientRouter = createRouter();
 	const addClientRoute = mount(clientRouter, false);
 	addClientRoute("GET", "/version", "version");
-	if (downloadStorageObject !== void 0) addClientRoute("GET", "/storage/:token/:signature", "downloadStorageObject");
 	addClientRoute("GET", "/release-catalogs/app-version/:platform/:channelKey/:appVersion", "appVersionReleaseCatalog");
 	addClientRoute("GET", "/release-catalogs/fingerprint/:platform/:channelKey/:fingerprintHash", "fingerprintReleaseCatalog");
 	addClientRoute("GET", "/artifacts/v1/:targetBundleId/from/:currentBundleId", "artifactV1");
@@ -7071,33 +7047,23 @@ function createHotUpdaterHandlers({ api, clientPolicy, downloadStorageObject, en
 }
 //#endregion
 //#region ../../packages/server/dist/storageAccess.mjs
+/** A URL devices download from, which only an absolute HTTP(S) URL can be. */
 const assertRemoteUrl = (value) => {
-	const protocol = new URL(value).protocol;
-	if (protocol !== "http:" && protocol !== "https:") throw new Error("Storage getDownloadUrl must resolve to an HTTP(S) URL.");
+	let protocol;
+	try {
+		protocol = new URL(value).protocol;
+	} catch {}
+	if (protocol !== "http:" && protocol !== "https:") throw new Error("Storage getDownloadUrl must resolve to an absolute HTTP(S) URL.");
 	return value;
 };
 const getStorageProtocol = (storageUri) => new URL(storageUri).protocol.replace(":", "");
 const isRemoteUrlProtocol = (protocol) => protocol === "http" || protocol === "https";
-const resolveDownloadPath = (value, storageUri) => {
-	const parsed = parseStorageDownloadPath(value);
-	if (!parsed || parsed.storageUri !== storageUri) throw new Error("Storage getDownloadUrl must return an HTTP(S) URL or a valid storage download path.");
-	return value;
-};
-const tokensEqual = (left, right) => {
-	const leftBytes = new TextEncoder().encode(left);
-	const rightBytes = new TextEncoder().encode(right);
-	let difference = leftBytes.length ^ rightBytes.length;
-	const length = Math.max(leftBytes.length, rightBytes.length);
-	for (let index = 0; index < length; index += 1) difference |= (leftBytes[index] ?? 0) ^ (rightBytes[index] ?? 0);
-	return difference === 0;
-};
-const createStorageAccess = (storageAdapters) => {
-	const protocols = /* @__PURE__ */ new Set();
-	for (const storage of storageAdapters) {
-		if (protocols.has(storage.protocol)) throw new Error(`Multiple storage adapters handle protocol: ${storage.protocol}`);
-		protocols.add(storage.protocol);
-	}
-	const findStorage = (protocol) => storageAdapters.find((item) => item.protocol === protocol);
+/**
+* Reads and download URLs over the server's storage, for the URIs of its
+* protocol; an HTTP(S) URI is used as it is.
+*/
+const createStorageAccess = (storageAdapter) => {
+	const findStorage = (protocol) => storageAdapter.protocol === protocol ? storageAdapter : void 0;
 	const readStorageResponse = async (storageUri) => {
 		const protocol = getStorageProtocol(storageUri);
 		const storage = findStorage(protocol);
@@ -7121,38 +7087,12 @@ const createStorageAccess = (storageAdapters) => {
 		}
 		if (!storage.getDownloadUrl) return null;
 		const { url: downloadUrl } = await storage.getDownloadUrl({ storageUri });
-		try {
-			return assertRemoteUrl(downloadUrl);
-		} catch (error) {
-			if (/^[a-z][a-z\d+.-]*:/i.test(downloadUrl)) throw error;
-		}
-		return resolveDownloadPath(downloadUrl, storageUri);
+		return assertRemoteUrl(downloadUrl);
 	};
 	const readStorageText = async (storageUri) => {
 		return (await readStorageResponse(storageUri))?.text() ?? null;
 	};
 	return {
-		downloadStorageObject: storageAdapters.some((storage) => storage.getDownloadUrl !== void 0) ? async (storageUriToken, encodedSignature) => {
-			const requestedPath = `/storage/${storageUriToken}/${encodedSignature}`;
-			const requested = parseStorageDownloadPath(requestedPath);
-			if (!requested) return null;
-			let storage;
-			try {
-				storage = findStorage(getStorageProtocol(requested.storageUri));
-			} catch {
-				return null;
-			}
-			if (!storage?.getDownloadUrl || !storage.get) return null;
-			const { url: downloadUrl } = await storage.getDownloadUrl({ storageUri: requested.storageUri });
-			try {
-				new URL(downloadUrl);
-				return null;
-			} catch {
-				if (/^[a-z][a-z\d+.-]*:/i.test(downloadUrl)) return null;
-			}
-			if (!tokensEqual(downloadUrl, requestedPath)) return null;
-			return (await storage.get({ storageUri: requested.storageUri })).response;
-		} : void 0,
 		readStorageText,
 		resolveFileUrl
 	};
@@ -7174,17 +7114,21 @@ const databaseOf = (value) => {
 	}
 	throw new HotUpdaterConfigError("database must be a Hot Updater 1.0 database, such as kyselyAdapter(...) or postgres(...). Upgrade the provider package that created it.");
 };
-/** `"public"`, or nothing; a `clientAccess` object says what replaced it. */
+/** The configured storage, when it is a storage adapter. */
+const storageOf = (value) => {
+	if (isRecord$4(value) && typeof value.name === "string" && typeof value.protocol === "string") return value;
+	throw new HotUpdaterConfigError("storage must be a storage adapter, such as s3Storage(...): the one hot-updater.config.ts uploads with.");
+};
+/** `"public"`, or nothing. */
 const isPublic = (value) => {
 	if (value === void 0) return false;
 	if (value === "public") return true;
-	throw new HotUpdaterConfigError(isRecord$4(value) ? "clientAccess objects were removed in 1.0. Set clientAccess: \"public\", or add a plugin that provides clientAuth to plugins." : "clientAccess must be \"public\"; to protect client routes, add a plugin that provides clientAuth to plugins.");
+	throw new HotUpdaterConfigError("clientAccess must be \"public\"; to protect client routes, add a plugin that provides clientAuth to plugins.");
 };
 function createHotUpdater(options) {
-	for (const key of ["authorityId", "catalogId"]) if (Object.hasOwn(options, key)) throw new TypeError(`Remove ${key} from createHotUpdater options. Catalog identity is managed internally.`);
 	const database = databaseOf(options.database);
-	const storage = Object.freeze([...options.storage ?? []]);
-	const { downloadStorageObject, readStorageText, resolveFileUrl } = createStorageAccess(storage);
+	const storage = storageOf(options.storage);
+	const { readStorageText, resolveFileUrl } = createStorageAccess(storage);
 	const publicClients = isPublic(options.clientAccess);
 	const configured = Object.freeze([...options.plugins ?? []]);
 	const plugins = assemblePlugins(configured, database, { storage: {
@@ -7203,7 +7147,6 @@ function createHotUpdater(options) {
 	const handlers = createHotUpdaterHandlers({
 		api: { core: plugins.core },
 		...clientPolicy === void 0 ? {} : { clientPolicy },
-		downloadStorageObject,
 		endpoints: plugins.endpoints,
 		plugins: Object.keys(plugins.api)
 	});
@@ -7212,7 +7155,7 @@ function createHotUpdater(options) {
 		adapterName: database.name,
 		get handlers() {
 			if (!serving) {
-				for (const adapter of storage) assertStorageOperations(adapter, ["get", "getDownloadUrl"]);
+				assertStorageOperations(storage, ["get", "getDownloadUrl"]);
 				serving = true;
 			}
 			return handlers;
@@ -7236,297 +7179,49 @@ function createHotUpdater(options) {
 	};
 }
 //#endregion
-//#region src/firebaseInfrastructureNames.ts
-/**
-* The one collection the storage engine keeps every item in. It namespaces
-* the data, so item partitions are table names with no prefix.
-*/
-const FIREBASE_V1_COLLECTION = "hot_updater_v1";
-//#endregion
-//#region src/firestoreStore.ts
-/**
-* Firestore's limits: 10 MiB a request and 1 MiB a document; 500 writes a
-* transaction stays a conservative bound. Indexed values over 1,500 bytes are
-* truncated, so longer keys are refused rather than read inconsistently.
-*/
-const FIRESTORE_LIMITS = {
-	items: 500,
-	bytes: 1e7,
-	itemBytes: 1e6,
-	keyBytes: {
-		pk: 1500,
-		sk: 1500
+//#region ../api-keys/dist/server/apiKeys.mjs
+const API_KEY_HEADER_NAME = "x-api-key";
+const BASE64URL_32_PATTERN = /^[A-Za-z0-9_-]{43}$/u;
+const bytesToBase64Url = (bytes) => {
+	let binary = "";
+	for (const byte of bytes) binary += String.fromCharCode(byte);
+	return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/u, "");
+};
+const isApiKey = (value) => {
+	if (!BASE64URL_32_PATTERN.test(value)) return false;
+	try {
+		const base64 = value.replaceAll("-", "+").replaceAll("_", "/");
+		const binary = atob(`${base64}=`);
+		const bytes = Uint8Array.from(binary, (character) => character.charCodeAt(0));
+		return bytes.byteLength === 32 && bytesToBase64Url(bytes) === value;
+	} catch {
+		return false;
 	}
 };
-/** `getAll` reads at most this many documents a call. */
-const GET_BATCH = 300;
-/** A document's id: a hash of its key, since keys may hold `/` and outgrow Firestore's 1,500 bytes. */
-const firestoreDocumentId = ({ pk, sk }) => (0, node_crypto.createHash)("sha256").update(JSON.stringify([pk, sk])).digest("hex");
-/**
-* A document is `{ pk, sk, row }`. Row values that are maps or arrays become
-* JSON text inside a map, since Firestore has no nested arrays and does not
-* keep map key order; `row` is exempt from single-field indexing.
-*/
-const encode = (value) => value !== null && typeof value === "object" ? { json: JSON.stringify(value) } : value;
-const decode = (value) => value !== null && typeof value === "object" && "json" in value ? JSON.parse(String(value.json)) : value;
-/**
-* The collection's TTL field: a timestamp beside `pk` and `sk` on every item
-* of a row that expires, which Firestore's TTL policy deletes.
-*/
-const FIRESTORE_TTL_FIELD = "expireAt";
-const toDocument = (key, row, expiresAt) => ({
-	pk: key.pk,
-	sk: key.sk,
-	row: Object.fromEntries(Object.entries(row).map(([name, value]) => [name, encode(value)])),
-	...expiresAt === void 0 ? {} : { [FIRESTORE_TTL_FIELD]: firebase_admin_firestore.Timestamp.fromMillis(expiresAt) }
-});
-const toRow$1 = (data) => Object.fromEntries(Object.entries(data.row ?? {}).map(([name, value]) => [name, decode(value)]));
-const holds = (snapshot, condition) => {
-	if (condition === void 0) return true;
-	const data = snapshot?.exists ? snapshot.data() : void 0;
-	return "v" in condition ? data !== void 0 && data.row?._v === condition.v : data !== void 0 === condition.exists;
+const normalizeApiKeyHeaderName = (value = API_KEY_HEADER_NAME) => {
+	if (typeof value !== "string" || value.length === 0) throw new TypeError("apiKeys({ headerName }) must name a valid header.");
+	try {
+		const headers = new Headers();
+		headers.set(value, "");
+		return headers.keys().next().value;
+	} catch {
+		throw new TypeError("apiKeys({ headerName }) must name a valid header.");
+	}
 };
-/** gRPC codes a rerun of the whole write can clear: DEADLINE_EXCEEDED, RESOURCE_EXHAUSTED, ABORTED, INTERNAL, UNAVAILABLE. */
-const TRANSIENT = /* @__PURE__ */ new Set([
-	4,
-	8,
-	10,
-	13,
-	14
-]);
-const codeOf = (error) => error.code;
-/** Firestore reports a missing database as NOT_FOUND; it reads as a missing schema, like SQL's 42P01. */
-const missingDatabase = (error) => {
-	throw codeOf(error) === 5 ? Object.assign(new Error(error.message, { cause: error }), { code: "42P01" }) : error;
+const hashApiKey = async (apiKey) => {
+	if (!isApiKey(apiKey)) throw new TypeError("API key must be a canonical 32-byte base64url value.");
+	const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(apiKey));
+	return bytesToBase64Url(new Uint8Array(digest));
 };
-/**
-* The key-value store over one Firestore collection of `{ pk, sk, row }`
-* documents, queried through the composite indexes on (pk, sk) in both
-* directions. A write is one transaction that reads only the documents its
-* ops guard.
-*/
-const createFirestoreStore = ({ firestore, collection, nativePageSize }) => {
-	const items = firestore.collection(collection);
-	const reference = (key) => items.doc(firestoreDocumentId(key));
-	return {
-		id: "firestore",
-		limits: FIRESTORE_LIMITS,
-		async get(keys) {
-			const found = /* @__PURE__ */ new Map();
-			const ids = [...new Set(keys.map(firestoreDocumentId))];
-			for (let at = 0; at < ids.length; at += GET_BATCH) {
-				const snapshots = await firestore.getAll(...ids.slice(at, at + GET_BATCH).map((id) => items.doc(id))).catch(missingDatabase);
-				for (const snapshot of snapshots) if (snapshot.exists) found.set(snapshot.id, toRow$1(snapshot.data()));
-			}
-			return keys.map((key) => found.get(firestoreDocumentId(key)) ?? null);
-		},
-		async query({ pk, gte, lt, order, limit, after }) {
-			let query = items.where("pk", "==", pk);
-			if (gte !== void 0) query = query.where("sk", ">=", gte);
-			if (lt !== void 0) query = query.where("sk", "<", lt);
-			query = query.orderBy("sk", order);
-			if (after !== void 0) query = query.startAfter(after);
-			const size = Math.min(limit, nativePageSize ?? limit);
-			const { docs } = await query.limit(size).get().catch(missingDatabase);
-			return {
-				items: docs.map((document) => ({
-					sk: document.get("sk"),
-					value: toRow$1(document.data())
-				})),
-				more: docs.length === size
-			};
-		},
-		async write(ops) {
-			const blind = ops.map((op) => op.type === "add" && (op.condition === void 0 || "exists" in op.condition && op.condition.exists));
-			const attempt = (reading) => firestore.runTransaction(async (transaction) => {
-				const read = ops.flatMap((op, position) => (op.condition !== void 0 || op.type === "add") && (reading || !blind[position]) ? [position] : []);
-				const snapshots = /* @__PURE__ */ new Map();
-				if (read.length > 0) {
-					const found = await transaction.getAll(...read.map((position) => reference(ops[position].key)));
-					read.forEach((position, at) => snapshots.set(position, found[at]));
-				}
-				const failed = read.find((position) => !holds(snapshots.get(position), ops[position].condition));
-				if (failed !== void 0) {
-					if (!reading && blind.slice(0, failed).includes(true)) return null;
-					return {
-						ok: false,
-						failedOp: failed
-					};
-				}
-				for (const [position, op] of ops.entries()) {
-					const document = reference(op.key);
-					if (op.type === "put") transaction.set(document, toDocument(op.key, op.value, op.expiresAt));
-					else if (op.type === "delete") transaction.delete(document);
-					else if (op.type === "add") {
-						if (snapshots.get(position)?.exists === false) {
-							const created = { ...op.init };
-							for (const [name, delta] of Object.entries(op.by)) created[name] = Number(created[name] ?? 0) + delta;
-							transaction.set(document, toDocument(op.key, created, op.expiresAt));
-						} else {
-							const [[name, delta], ...more] = Object.entries(op.by);
-							const ttl = op.expiresAt === void 0 ? [] : [FIRESTORE_TTL_FIELD, firebase_admin_firestore.Timestamp.fromMillis(op.expiresAt)];
-							transaction.update(document, new firebase_admin_firestore.FieldPath("row", name), firebase_admin_firestore.FieldValue.increment(delta), ...more.flatMap(([other, by]) => [new firebase_admin_firestore.FieldPath("row", other), firebase_admin_firestore.FieldValue.increment(by)]), ...ttl);
-						}
-					}
-				}
-				return { ok: true };
-			}, { maxAttempts: 5 });
-			try {
-				try {
-					const result = await attempt(false);
-					if (result !== null) return result;
-				} catch (error) {
-					if (codeOf(error) !== 5 || !blind.includes(true)) throw error;
-				}
-				return await attempt(true);
-			} catch (error) {
-				if (TRANSIENT.has(codeOf(error))) return {
-					ok: false,
-					retry: true
-				};
-				return missingDatabase(error);
-			}
-		},
-		/** A plain batch, which reads nothing, 500 deletes at a time. */
-		async deleteConsumed(keys) {
-			for (let at = 0; at < keys.length; at += FIRESTORE_LIMITS.items) {
-				const batch = firestore.batch();
-				for (const key of keys.slice(at, at + FIRESTORE_LIMITS.items)) batch.delete(reference(key));
-				await batch.commit().catch(missingDatabase);
-			}
-		},
-		async dispose() {}
-	};
+const apiKeyId = () => {
+	const bytes = /* @__PURE__ */ new Uint8Array(16);
+	crypto.getRandomValues(bytes);
+	return `api-${bytesToBase64Url(bytes)}`;
 };
-//#endregion
-//#region src/firebaseDatabase.ts
-const adapterOf = ({ collection = FIREBASE_V1_COLLECTION, aggregateBatching: _, ...appOptions }) => {
-	const app = (0, firebase_admin_app.getApps)().length ? (0, firebase_admin_app.getApp)() : (0, firebase_admin_app.initializeApp)(appOptions);
-	return createKvAdapter({ store: createFirestoreStore({
-		firestore: (0, firebase_admin_firestore.getFirestore)(app),
-		collection
-	}) });
-};
-/** Hot Updater's database in one Firestore collection, through the storage engine. */
-const firebaseDatabase = (config) => createEngineDatabase({
-	name: "firebaseDatabase",
-	adapter: adapterOf(config),
-	aggregateBatching: config.aggregateBatching ?? {}
-});
-//#endregion
-//#region src/firebaseStorage.ts
-const firebaseStorage = (config) => {
-	const app = (0, firebase_admin_app.getApps)().length ? (0, firebase_admin_app.getApp)() : (0, firebase_admin_app.initializeApp)(config);
-	const bucket = (0, firebase_admin_storage.getStorage)(app).bucket(config.storageBucket);
-	const getStorageKey = createStorageKeyBuilder(config.basePath);
-	const parseAndValidate = (storageUri) => {
-		const parsed = parseStorageUri(storageUri, "gs");
-		if (parsed.bucket !== config.storageBucket) throw new Error(`Bucket name mismatch: expected "${config.storageBucket}", but found "${parsed.bucket}".`);
-		return parsed;
-	};
-	return createStorageAdapter({
-		name: "firebaseStorage",
-		protocol: "gs",
-		async put({ key, body, contentType }) {
-			const storageKey = getStorageKey(key);
-			const bytes = new Uint8Array(await new Response(body).arrayBuffer());
-			await bucket.file(storageKey).save(bytes, { metadata: {
-				contentType,
-				cacheControl: "public, max-age=31536000, immutable"
-			} });
-			return { storageUri: createStorageUri({
-				bucket: config.storageBucket,
-				key: storageKey,
-				protocol: "gs"
-			}) };
-		},
-		async get({ storageUri }) {
-			const { key } = parseAndValidate(storageUri);
-			try {
-				const file = bucket.file(key);
-				const [[body], [metadata]] = await Promise.all([file.download(), file.getMetadata()]);
-				const headers = new Headers();
-				if (metadata.contentType) headers.set("content-type", metadata.contentType);
-				headers.set("content-length", String(metadata.size ?? body.byteLength));
-				return { response: new Response(body, { headers }) };
-			} catch (error) {
-				if (typeof error === "object" && error !== null && "code" in error && error.code === 404) return { response: null };
-				throw error;
-			}
-		},
-		async getDownloadUrl({ storageUri }) {
-			const { key } = parseAndValidate(storageUri);
-			if (config.cdnUrl) {
-				const storageUrl = new URL(storageUri);
-				const downloadUrl = new URL(config.cdnUrl);
-				downloadUrl.pathname = `${downloadUrl.pathname.replace(/\/+$/, "")}${storageUrl.pathname}`;
-				downloadUrl.search = "";
-				downloadUrl.hash = "";
-				return { url: downloadUrl.toString() };
-			}
-			const [url] = await bucket.file(key).getSignedUrl({
-				action: "read",
-				expires: Date.now() + (config.signedUrlExpiresIn ?? 3600) * 1e3
-			});
-			if (!url) throw new Error("Failed to generate Firebase download URL");
-			return { url };
-		},
-		async exists({ storageUri }) {
-			const { key } = parseAndValidate(storageUri);
-			const [exists] = await bucket.file(key).exists();
-			return { exists };
-		},
-		async delete({ storageUri }) {
-			const { key } = parseAndValidate(storageUri);
-			await bucket.file(key).delete({ ignoreNotFound: true });
-			return { deleted: true };
-		}
-	});
-};
-//#endregion
-//#region ../api-keys/dist/server/apiKeys.mjs
-const API_KEY_HEADER_NAME = "x-api-key";
-const BASE64URL_32_PATTERN = /^[A-Za-z0-9_-]{43}$/u;
-const bytesToBase64Url = (bytes) => {
-	let binary = "";
-	for (const byte of bytes) binary += String.fromCharCode(byte);
-	return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/u, "");
-};
-const isApiKey = (value) => {
-	if (!BASE64URL_32_PATTERN.test(value)) return false;
-	try {
-		const base64 = value.replaceAll("-", "+").replaceAll("_", "/");
-		const binary = atob(`${base64}=`);
-		const bytes = Uint8Array.from(binary, (character) => character.charCodeAt(0));
-		return bytes.byteLength === 32 && bytesToBase64Url(bytes) === value;
-	} catch {
-		return false;
-	}
-};
-const normalizeApiKeyHeaderName = (value = API_KEY_HEADER_NAME) => {
-	if (typeof value !== "string" || value.length === 0) throw new TypeError("apiKeys({ headerName }) must name a valid header.");
-	try {
-		const headers = new Headers();
-		headers.set(value, "");
-		return headers.keys().next().value;
-	} catch {
-		throw new TypeError("apiKeys({ headerName }) must name a valid header.");
-	}
-};
-const hashApiKey = async (apiKey) => {
-	if (!isApiKey(apiKey)) throw new TypeError("API key must be a canonical 32-byte base64url value.");
-	const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(apiKey));
-	return bytesToBase64Url(new Uint8Array(digest));
-};
-const apiKeyId = () => {
-	const bytes = /* @__PURE__ */ new Uint8Array(16);
-	crypto.getRandomValues(bytes);
-	return `api-${bytesToBase64Url(bytes)}`;
-};
-const normalizeApiKeyName = (name) => {
-	const normalized = name.trim();
-	if (normalized.length === 0 || normalized.length > 64 || /[\p{Cc}\p{Cf}]/u.test(normalized)) throw new TypeError("API key names must contain 1-64 visible characters.");
-	return normalized;
+const normalizeApiKeyName = (name) => {
+	const normalized = name.trim();
+	if (normalized.length === 0 || normalized.length > 64 || /[\p{Cc}\p{Cf}]/u.test(normalized)) throw new TypeError("API key names must contain 1-64 visible characters.");
+	return normalized;
 };
 const toApiKeyMetadata = ({ hash: _hash, ...metadata }) => Object.freeze(metadata);
 const registerApiKey = async (input) => {
@@ -7633,7 +7328,7 @@ const apiKeysCli = (headerName) => ({ clientCredential: {
 } });
 //#endregion
 //#region ../api-keys/dist/server/model.mjs
-const toRow = (row) => ({
+const toRow$1 = (row) => ({
 	id: row.id,
 	hash: row.hash,
 	name: row.name,
@@ -7658,7 +7353,7 @@ const createApiKeyModel = (db) => ({
 	},
 	async findByHash(hash) {
 		const row = await db.findOne("api_keys", { hash });
-		return row === null ? null : toRow(row);
+		return row === null ? null : toRow$1(row);
 	},
 	/** Every key, newest first, then by id; the whole list is the result. */
 	async list() {
@@ -7672,7 +7367,7 @@ const createApiKeyModel = (db) => ({
 				limit: 500,
 				...cursor === void 0 ? {} : { cursor }
 			});
-			rows.push(...page.rows.map(toRow));
+			rows.push(...page.rows.map(toRow$1));
 			cursor = page.next;
 		} while (cursor !== void 0);
 		return rows.sort((left, right) => right.created_at_ms - left.created_at_ms || (left.id < right.id ? -1 : left.id > right.id ? 1 : 0));
@@ -7681,7 +7376,7 @@ const createApiKeyModel = (db) => ({
 		const row = await tx.findOne("api_keys", { id });
 		if (row === null) return null;
 		tx.update("api_keys", row, { revoked_at_ms: revokedAtMs });
-		return toRow({
+		return toRow$1({
 			...row,
 			revoked_at_ms: revokedAtMs
 		});
@@ -11643,16 +11338,253 @@ const remoteConfig = () => {
 	return markOfficial(plugin);
 };
 //#endregion
-//#region src/plugins.ts
+//#region src/firebaseInfrastructureNames.ts
 /**
-* The plugins the managed Firebase server runs: Insights, API keys on every
-* client route, and Remote Config. Its Cloud Function imports this list.
+* The one collection the storage engine keeps every item in. It namespaces
+* the data, so item partitions are table names with no prefix.
 */
-const plugins = [
-	insights(),
-	apiKeys(),
-	remoteConfig()
-];
+const FIREBASE_V1_COLLECTION = "hot_updater_v1";
+//#endregion
+//#region src/firestoreStore.ts
+/**
+* Firestore's limits: 10 MiB a request and 1 MiB a document; 500 writes a
+* transaction stays a conservative bound. Indexed values over 1,500 bytes are
+* truncated, so longer keys are refused rather than read inconsistently.
+*/
+const FIRESTORE_LIMITS = {
+	items: 500,
+	bytes: 1e7,
+	itemBytes: 1e6,
+	keyBytes: {
+		pk: 1500,
+		sk: 1500
+	}
+};
+/** `getAll` reads at most this many documents a call. */
+const GET_BATCH = 300;
+/** A document's id: a hash of its key, since keys may hold `/` and outgrow Firestore's 1,500 bytes. */
+const firestoreDocumentId = ({ pk, sk }) => (0, node_crypto.createHash)("sha256").update(JSON.stringify([pk, sk])).digest("hex");
+/**
+* A document is `{ pk, sk, row }`. Row values that are maps or arrays become
+* JSON text inside a map, since Firestore has no nested arrays and does not
+* keep map key order; `row` is exempt from single-field indexing.
+*/
+const encode = (value) => value !== null && typeof value === "object" ? { json: JSON.stringify(value) } : value;
+const decode = (value) => value !== null && typeof value === "object" && "json" in value ? JSON.parse(String(value.json)) : value;
+/**
+* The collection's TTL field: a timestamp beside `pk` and `sk` on every item
+* of a row that expires, which Firestore's TTL policy deletes.
+*/
+const FIRESTORE_TTL_FIELD = "expireAt";
+const toDocument = (key, row, expiresAt) => ({
+	pk: key.pk,
+	sk: key.sk,
+	row: Object.fromEntries(Object.entries(row).map(([name, value]) => [name, encode(value)])),
+	...expiresAt === void 0 ? {} : { [FIRESTORE_TTL_FIELD]: firebase_admin_firestore.Timestamp.fromMillis(expiresAt) }
+});
+const toRow = (data) => Object.fromEntries(Object.entries(data.row ?? {}).map(([name, value]) => [name, decode(value)]));
+const holds = (snapshot, condition) => {
+	if (condition === void 0) return true;
+	const data = snapshot?.exists ? snapshot.data() : void 0;
+	return "v" in condition ? data !== void 0 && data.row?._v === condition.v : data !== void 0 === condition.exists;
+};
+/** gRPC codes a rerun of the whole write can clear: DEADLINE_EXCEEDED, RESOURCE_EXHAUSTED, ABORTED, INTERNAL, UNAVAILABLE. */
+const TRANSIENT = /* @__PURE__ */ new Set([
+	4,
+	8,
+	10,
+	13,
+	14
+]);
+const codeOf = (error) => error.code;
+/** Firestore reports a missing database as NOT_FOUND; it reads as a missing schema, like SQL's 42P01. */
+const missingDatabase = (error) => {
+	throw codeOf(error) === 5 ? Object.assign(new Error(error.message, { cause: error }), { code: "42P01" }) : error;
+};
+/**
+* The key-value store over one Firestore collection of `{ pk, sk, row }`
+* documents, queried through the composite indexes on (pk, sk) in both
+* directions. A write is one transaction that reads only the documents its
+* ops guard.
+*/
+const createFirestoreStore = ({ firestore, collection, nativePageSize }) => {
+	const items = firestore.collection(collection);
+	const reference = (key) => items.doc(firestoreDocumentId(key));
+	return {
+		id: "firestore",
+		limits: FIRESTORE_LIMITS,
+		async get(keys) {
+			const found = /* @__PURE__ */ new Map();
+			const ids = [...new Set(keys.map(firestoreDocumentId))];
+			for (let at = 0; at < ids.length; at += GET_BATCH) {
+				const snapshots = await firestore.getAll(...ids.slice(at, at + GET_BATCH).map((id) => items.doc(id))).catch(missingDatabase);
+				for (const snapshot of snapshots) if (snapshot.exists) found.set(snapshot.id, toRow(snapshot.data()));
+			}
+			return keys.map((key) => found.get(firestoreDocumentId(key)) ?? null);
+		},
+		async query({ pk, gte, lt, order, limit, after }) {
+			let query = items.where("pk", "==", pk);
+			if (gte !== void 0) query = query.where("sk", ">=", gte);
+			if (lt !== void 0) query = query.where("sk", "<", lt);
+			query = query.orderBy("sk", order);
+			if (after !== void 0) query = query.startAfter(after);
+			const size = Math.min(limit, nativePageSize ?? limit);
+			const { docs } = await query.limit(size).get().catch(missingDatabase);
+			return {
+				items: docs.map((document) => ({
+					sk: document.get("sk"),
+					value: toRow(document.data())
+				})),
+				more: docs.length === size
+			};
+		},
+		async write(ops) {
+			const blind = ops.map((op) => op.type === "add" && (op.condition === void 0 || "exists" in op.condition && op.condition.exists));
+			const attempt = (reading) => firestore.runTransaction(async (transaction) => {
+				const read = ops.flatMap((op, position) => (op.condition !== void 0 || op.type === "add") && (reading || !blind[position]) ? [position] : []);
+				const snapshots = /* @__PURE__ */ new Map();
+				if (read.length > 0) {
+					const found = await transaction.getAll(...read.map((position) => reference(ops[position].key)));
+					read.forEach((position, at) => snapshots.set(position, found[at]));
+				}
+				const failed = read.find((position) => !holds(snapshots.get(position), ops[position].condition));
+				if (failed !== void 0) {
+					if (!reading && blind.slice(0, failed).includes(true)) return null;
+					return {
+						ok: false,
+						failedOp: failed
+					};
+				}
+				for (const [position, op] of ops.entries()) {
+					const document = reference(op.key);
+					if (op.type === "put") transaction.set(document, toDocument(op.key, op.value, op.expiresAt));
+					else if (op.type === "delete") transaction.delete(document);
+					else if (op.type === "add") {
+						if (snapshots.get(position)?.exists === false) {
+							const created = { ...op.init };
+							for (const [name, delta] of Object.entries(op.by)) created[name] = Number(created[name] ?? 0) + delta;
+							transaction.set(document, toDocument(op.key, created, op.expiresAt));
+						} else {
+							const [[name, delta], ...more] = Object.entries(op.by);
+							const ttl = op.expiresAt === void 0 ? [] : [FIRESTORE_TTL_FIELD, firebase_admin_firestore.Timestamp.fromMillis(op.expiresAt)];
+							transaction.update(document, new firebase_admin_firestore.FieldPath("row", name), firebase_admin_firestore.FieldValue.increment(delta), ...more.flatMap(([other, by]) => [new firebase_admin_firestore.FieldPath("row", other), firebase_admin_firestore.FieldValue.increment(by)]), ...ttl);
+						}
+					}
+				}
+				return { ok: true };
+			}, { maxAttempts: 5 });
+			try {
+				try {
+					const result = await attempt(false);
+					if (result !== null) return result;
+				} catch (error) {
+					if (codeOf(error) !== 5 || !blind.includes(true)) throw error;
+				}
+				return await attempt(true);
+			} catch (error) {
+				if (TRANSIENT.has(codeOf(error))) return {
+					ok: false,
+					retry: true
+				};
+				return missingDatabase(error);
+			}
+		},
+		/** A plain batch, which reads nothing, 500 deletes at a time. */
+		async deleteConsumed(keys) {
+			for (let at = 0; at < keys.length; at += FIRESTORE_LIMITS.items) {
+				const batch = firestore.batch();
+				for (const key of keys.slice(at, at + FIRESTORE_LIMITS.items)) batch.delete(reference(key));
+				await batch.commit().catch(missingDatabase);
+			}
+		},
+		async dispose() {}
+	};
+};
+//#endregion
+//#region src/firebaseDatabase.ts
+const adapterOf = ({ collection = FIREBASE_V1_COLLECTION, aggregateBatching: _, ...appOptions }) => {
+	const app = (0, firebase_admin_app.getApps)().length ? (0, firebase_admin_app.getApp)() : (0, firebase_admin_app.initializeApp)(appOptions);
+	return createKvAdapter({ store: createFirestoreStore({
+		firestore: (0, firebase_admin_firestore.getFirestore)(app),
+		collection
+	}) });
+};
+/** Hot Updater's database in one Firestore collection, through the storage engine. */
+const firebaseDatabase = (config) => createEngineDatabase({
+	name: "firebaseDatabase",
+	adapter: adapterOf(config),
+	aggregateBatching: config.aggregateBatching ?? {}
+});
+//#endregion
+//#region src/firebaseStorage.ts
+const firebaseStorage = (config) => {
+	const app = (0, firebase_admin_app.getApps)().length ? (0, firebase_admin_app.getApp)() : (0, firebase_admin_app.initializeApp)(config);
+	const bucket = (0, firebase_admin_storage.getStorage)(app).bucket(config.storageBucket);
+	const getStorageKey = createStorageKeyBuilder(config.basePath);
+	const parseAndValidate = (storageUri) => {
+		const parsed = parseStorageUri(storageUri, "gs");
+		if (parsed.bucket !== config.storageBucket) throw new Error(`Bucket name mismatch: expected "${config.storageBucket}", but found "${parsed.bucket}".`);
+		return parsed;
+	};
+	return createStorageAdapter({
+		name: "firebaseStorage",
+		protocol: "gs",
+		async put({ key, body, contentType }) {
+			const storageKey = getStorageKey(key);
+			const bytes = new Uint8Array(await new Response(body).arrayBuffer());
+			await bucket.file(storageKey).save(bytes, { metadata: {
+				contentType,
+				cacheControl: "public, max-age=31536000, immutable"
+			} });
+			return { storageUri: createStorageUri({
+				bucket: config.storageBucket,
+				key: storageKey,
+				protocol: "gs"
+			}) };
+		},
+		async get({ storageUri }) {
+			const { key } = parseAndValidate(storageUri);
+			try {
+				const file = bucket.file(key);
+				const [[body], [metadata]] = await Promise.all([file.download(), file.getMetadata()]);
+				const headers = new Headers();
+				if (metadata.contentType) headers.set("content-type", metadata.contentType);
+				headers.set("content-length", String(metadata.size ?? body.byteLength));
+				return { response: new Response(body, { headers }) };
+			} catch (error) {
+				if (typeof error === "object" && error !== null && "code" in error && error.code === 404) return { response: null };
+				throw error;
+			}
+		},
+		async getDownloadUrl({ storageUri }) {
+			const { key } = parseAndValidate(storageUri);
+			if (config.cdnUrl) {
+				const storageUrl = new URL(storageUri);
+				const downloadUrl = new URL(config.cdnUrl);
+				downloadUrl.pathname = `${downloadUrl.pathname.replace(/\/+$/, "")}${storageUrl.pathname}`;
+				downloadUrl.search = "";
+				downloadUrl.hash = "";
+				return { url: downloadUrl.toString() };
+			}
+			const [url] = await bucket.file(key).getSignedUrl({
+				action: "read",
+				expires: Date.now() + (config.signedUrlExpiresIn ?? 3600) * 1e3
+			});
+			if (!url) throw new Error("Failed to generate Firebase download URL");
+			return { url };
+		},
+		async exists({ storageUri }) {
+			const { key } = parseAndValidate(storageUri);
+			const [exists] = await bucket.file(key).exists();
+			return { exists };
+		},
+		async delete({ storageUri }) {
+			const { key } = parseAndValidate(storageUri);
+			await bucket.file(key).delete({ ignoreNotFound: true });
+			return { deleted: true };
+		}
+	});
+};
 //#endregion
 //#region firebase/functions/index.ts
 const HOT_UPDATER_BASE_PATH = "/";
@@ -11662,12 +11594,16 @@ const cdnUrl = process.env.HOT_UPDATER_CDN_URL;
 if (!storageBucket) throw new Error("Firebase runtime requires storageBucket to read bundle manifests.");
 const hotUpdater = createHotUpdater({
 	database: firebaseDatabase({ ...adminOptions }),
-	plugins,
-	storage: [firebaseStorage({
+	plugins: [
+		insights(),
+		apiKeys(),
+		remoteConfig()
+	],
+	storage: firebaseStorage({
 		...adminOptions,
 		storageBucket,
 		cdnUrl
-	})]
+	})
 });
 const app = new hono.Hono();
 app.get("/ping", (c) => {