@hot-updater/firebase 1.0.0-rc.44 → 1.0.0-rc.46

package/dist/firebase/functions/index.cjs

@@ -216,6 +216,13 @@ const isDatabaseJsonValue = (value) => {
 const isDatabaseJsonObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value) && isDatabaseJsonValue(value);
 const isDatabaseMetadataObject = (value) => isDatabaseJsonObject(value) && (!Object.hasOwn(value, "app_version") || typeof value["app_version"] === "string");
 //#endregion
+//#region ../plugin-core/dist/databaseMetadata.mjs
+const bundleMetadataToRow = (metadata) => {
+	if (metadata === void 0) return {};
+	if (!isDatabaseMetadataObject(metadata)) throw new DatabaseAdapterInputError("invalid-data");
+	return metadata;
+};
+//#endregion
 //#region ../../packages/protocol/dist/index.mjs
 const LETTER_DASH_NUMBER$2 = "[a-zA-Z0-9-]";
 const NUMERIC_IDENTIFIER$2 = String.raw`0|[1-9]\d*`;
@@ -329,7 +336,6 @@ function canonicalizeAppVersion(appVersion) {
 	const version = coerce$1(appVersion);
 	return version ? normalizeFull(version) : null;
 }
-const stripBundleArtifactMetadata = (metadata) => metadata;
 const getManifestStorageUri = (bundle) => bundle.manifestStorageUri;
 const getManifestFileHash = (bundle) => bundle.manifestFileHash;
 const getAssetBaseStorageUri = (bundle) => bundle.assetBaseStorageUri;
@@ -576,14 +582,6 @@ const NIL_UUID = "00000000-0000-0000-0000-000000000000";
 const UUID_V7_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
 const isUUIDv7 = (value) => typeof value === "string" && UUID_V7_PATTERN.test(value);
 //#endregion
-//#region ../plugin-core/dist/databaseMetadata.mjs
-const bundleMetadataToRow = (metadata) => {
-	const value = stripBundleArtifactMetadata(metadata);
-	if (value === void 0) return {};
-	if (!isDatabaseMetadataObject(value)) throw new DatabaseAdapterInputError("invalid-data");
-	return value;
-};
-//#endregion
 //#region ../plugin-core/dist/databaseRows.mjs
 const releaseRowToRelease = (row) => ({
 	id: row.id,
@@ -641,7 +639,7 @@ const rowToBundle = (row, patchRows = []) => {
 		id: row.id,
 		platform: row.platform,
 		gitCommitHash: row.git_commit_hash,
-		metadata: stripBundleArtifactMetadata(row.metadata),
+		metadata: row.metadata,
 		manifestStorageUri: row.manifest_storage_uri,
 		manifestFileHash: row.manifest_file_hash,
 		assetBaseStorageUri: row.asset_base_storage_uri,
@@ -649,6 +647,35 @@ const rowToBundle = (row, patchRows = []) => {
 	};
 };
 //#endregion
+//#region ../plugin-core/dist/uuidv7.mjs
+const extractTimestampFromUUIDv7 = (uuid) => {
+	if (!isUUIDv7(uuid)) throw new TypeError("Expected a canonical lowercase UUIDv7");
+	const timestampHex = uuid.split("-").join("").slice(0, 12);
+	return Number.parseInt(timestampHex, 16);
+};
+function createUUIDv7FromTimestampHex(timestampHex) {
+	const randomBytes = /* @__PURE__ */ new Uint8Array(10);
+	crypto.getRandomValues(randomBytes);
+	const randomHex = Array.from(randomBytes).map((b) => b.toString(16).padStart(2, "0")).join("");
+	const randA = randomHex.slice(0, 3);
+	const randBHex = randomHex.slice(3, 19);
+	const versionAndRandA = `7${randA}`;
+	const variantAndFirstRandB = (128 | parseInt(randBHex.slice(0, 2), 16) & 63).toString(16).padStart(2, "0");
+	return [
+		timestampHex.slice(0, 8),
+		timestampHex.slice(8, 12),
+		versionAndRandA,
+		variantAndFirstRandB + randBHex.slice(2, 4),
+		randBHex.slice(4, 16)
+	].join("-");
+}
+const createUUIDv7 = () => createUUIDv7FromTimestampHex(Date.now().toString(16).padStart(12, "0"));
+const createUUIDv7After = (floor, nowMs = Date.now()) => {
+	const timestamp = Math.max(nowMs, floor === null ? 0 : extractTimestampFromUUIDv7(floor) + 1);
+	if (!Number.isSafeInteger(timestamp) || timestamp < 0 || timestamp >= 2 ** 48) throw new RangeError("UUIDv7 timestamp is out of range");
+	return createUUIDv7FromTimestampHex(timestamp.toString(16).padStart(12, "0"));
+};
+//#endregion
 //#region ../plugin-core/dist/node_modules/.pnpm/verkit@0.4.0/node_modules/verkit/dist/comparison-DenM3wCn.mjs
 const LETTER_DASH_NUMBER$1 = "[a-zA-Z0-9-]";
 const NUMERIC_IDENTIFIER$1 = String.raw`0|[1-9]\d*`;
@@ -995,42 +1022,6 @@ function coerce(value, options = {}) {
 	return tryParse(`${major}.${match[3] || "0"}.${match[4] || "0"}${options.includePrerelease && match[5] ? `-${match[5]}` : ""}${options.includePrerelease && match[6] ? `+${match[6]}` : ""}`, options);
 }
 //#endregion
-//#region ../plugin-core/dist/semverSatisfies.mjs
-const semverSatisfies = (targetAppVersion, currentVersion) => {
-	const currentCoerce = coerce(currentVersion);
-	if (!currentCoerce) return false;
-	return satisfies(currentCoerce, targetAppVersion);
-};
-//#endregion
-//#region ../plugin-core/dist/uuidv7.mjs
-const extractTimestampFromUUIDv7 = (uuid) => {
-	if (!isUUIDv7(uuid)) throw new TypeError("Expected a canonical lowercase UUIDv7");
-	const timestampHex = uuid.split("-").join("").slice(0, 12);
-	return Number.parseInt(timestampHex, 16);
-};
-function createUUIDv7FromTimestampHex(timestampHex) {
-	const randomBytes = /* @__PURE__ */ new Uint8Array(10);
-	crypto.getRandomValues(randomBytes);
-	const randomHex = Array.from(randomBytes).map((b) => b.toString(16).padStart(2, "0")).join("");
-	const randA = randomHex.slice(0, 3);
-	const randBHex = randomHex.slice(3, 19);
-	const versionAndRandA = `7${randA}`;
-	const variantAndFirstRandB = (128 | parseInt(randBHex.slice(0, 2), 16) & 63).toString(16).padStart(2, "0");
-	return [
-		timestampHex.slice(0, 8),
-		timestampHex.slice(8, 12),
-		versionAndRandA,
-		variantAndFirstRandB + randBHex.slice(2, 4),
-		randBHex.slice(4, 16)
-	].join("-");
-}
-const createUUIDv7 = () => createUUIDv7FromTimestampHex(Date.now().toString(16).padStart(12, "0"));
-const createUUIDv7After = (floor, nowMs = Date.now()) => {
-	const timestamp = Math.max(nowMs, floor === null ? 0 : extractTimestampFromUUIDv7(floor) + 1);
-	if (!Number.isSafeInteger(timestamp) || timestamp < 0 || timestamp >= 2 ** 48) throw new RangeError("UUIDv7 timestamp is out of range");
-	return createUUIDv7FromTimestampHex(timestamp.toString(16).padStart(12, "0"));
-};
-//#endregion
 //#region ../plugin-core/dist/releaseCatalogCompiler.mjs
 var ReleaseCatalogCompilationError = class extends Error {
 	code;
@@ -1426,6 +1417,13 @@ var ReleaseCatalogMutationError = class extends Error {
 	}
 };
 //#endregion
+//#region ../plugin-core/dist/semverSatisfies.mjs
+const semverSatisfies = (targetAppVersion, currentVersion) => {
+	const currentCoerce = coerce(currentVersion);
+	if (!currentCoerce) return false;
+	return satisfies(currentCoerce, targetAppVersion);
+};
+//#endregion
 //#region ../plugin-core/dist/serverPlugin/definePlugin.mjs
 /** Declares a plugin; Hot Updater's own plugins and third-party ones use the same contract. */
 const definePlugin = (plugin) => plugin;
@@ -2373,9 +2371,6 @@ const getEmptyMigrationResult = () => ({
 	execute: async () => {},
 	getSQL: () => ""
 });
-const assertSupportedMigrationMode = (options) => {
-	if (options.mode === "from-database") throw new Error("Hot Updater migrations support only mode: 'from-schema'.");
-};
 //#endregion
 //#region ../plugin-core/dist/engine/db/settingsMigrator.mjs
 /** `schema.core`, or a v0 database's `version`. */
@@ -3459,7 +3454,6 @@ const resolveSchema = (modules) => {
 const createEngineMigrator = (options) => {
 	const getVersion = async () => storedSchemaVersion(await options.readSettings());
 	const makeResult = async (migrate = {}) => {
-		assertSupportedMigrationMode(migrate);
 		const stored = await options.readSettings();
 		refusePreEngineDatabase(options.adapterName, stored);
 		if (Object.entries(options.settings).every(([key, value]) => stored.get(key) === value)) return getEmptyMigrationResult();
@@ -4566,7 +4560,7 @@ const createKvAdapter = ({ store, tablePrefix = "" }) => {
 };
 //#endregion
 //#region ../../packages/server/dist/version.mjs
-const HOT_UPDATER_SERVER_VERSION = "1.0.0-rc.44";
+const HOT_UPDATER_SERVER_VERSION = "1.0.0-rc.46";
 //#endregion
 //#region ../../packages/server/dist/handlerVersionRoutes.mjs
 /**
@@ -7112,7 +7106,7 @@ const databaseOf = (value) => {
 		if (isAdapter(value.adapter)) return value;
 		if ("core" in value && "fetchAdmin" in value) throw new HotUpdaterConfigError("standaloneRepository reaches a server's admin API from the CLI and console. createHotUpdater needs the server's own database, such as kyselyAdapter(...).");
 	}
-	throw new HotUpdaterConfigError("database must be a Hot Updater 1.0 database, such as kyselyAdapter(...) or postgres(...). Upgrade the provider package that created it.");
+	throw new HotUpdaterConfigError("database must be a Hot Updater database adapter, such as kyselyAdapter(...) or postgres(...).");
 };
 /** The configured storage, when it is a storage adapter. */
 const storageOf = (value) => {
@@ -7179,340 +7173,92 @@ function createHotUpdater(options) {
 	};
 }
 //#endregion
-//#region src/firebaseInfrastructureNames.ts
-/**
-* The one collection the storage engine keeps every item in. It namespaces
-* the data, so item partitions are table names with no prefix.
-*/
-const FIREBASE_V1_COLLECTION = "hot_updater_v1";
-//#endregion
-//#region src/firestoreStore.ts
-/**
-* Firestore's limits: 10 MiB a request and 1 MiB a document; 500 writes a
-* transaction stays a conservative bound. Indexed values over 1,500 bytes are
-* truncated, so longer keys are refused rather than read inconsistently.
-*/
-const FIRESTORE_LIMITS = {
-	items: 500,
-	bytes: 1e7,
-	itemBytes: 1e6,
-	keyBytes: {
-		pk: 1500,
-		sk: 1500
+//#region ../api-keys/dist/server/apiKeys.mjs
+const API_KEY_HEADER_NAME = "x-api-key";
+const BASE64URL_32_PATTERN = /^[A-Za-z0-9_-]{43}$/u;
+const bytesToBase64Url = (bytes) => {
+	let binary = "";
+	for (const byte of bytes) binary += String.fromCharCode(byte);
+	return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/u, "");
+};
+const isApiKey = (value) => {
+	if (!BASE64URL_32_PATTERN.test(value)) return false;
+	try {
+		const base64 = value.replaceAll("-", "+").replaceAll("_", "/");
+		const binary = atob(`${base64}=`);
+		const bytes = Uint8Array.from(binary, (character) => character.charCodeAt(0));
+		return bytes.byteLength === 32 && bytesToBase64Url(bytes) === value;
+	} catch {
+		return false;
 	}
 };
-/** `getAll` reads at most this many documents a call. */
-const GET_BATCH = 300;
-/** A document's id: a hash of its key, since keys may hold `/` and outgrow Firestore's 1,500 bytes. */
-const firestoreDocumentId = ({ pk, sk }) => (0, node_crypto.createHash)("sha256").update(JSON.stringify([pk, sk])).digest("hex");
-/**
-* A document is `{ pk, sk, row }`. Row values that are maps or arrays become
-* JSON text inside a map, since Firestore has no nested arrays and does not
-* keep map key order; `row` is exempt from single-field indexing.
-*/
-const encode = (value) => value !== null && typeof value === "object" ? { json: JSON.stringify(value) } : value;
-const decode = (value) => value !== null && typeof value === "object" && "json" in value ? JSON.parse(String(value.json)) : value;
-/**
-* The collection's TTL field: a timestamp beside `pk` and `sk` on every item
-* of a row that expires, which Firestore's TTL policy deletes.
-*/
-const FIRESTORE_TTL_FIELD = "expireAt";
-const toDocument = (key, row, expiresAt) => ({
-	pk: key.pk,
-	sk: key.sk,
-	row: Object.fromEntries(Object.entries(row).map(([name, value]) => [name, encode(value)])),
-	...expiresAt === void 0 ? {} : { [FIRESTORE_TTL_FIELD]: firebase_admin_firestore.Timestamp.fromMillis(expiresAt) }
-});
-const toRow$1 = (data) => Object.fromEntries(Object.entries(data.row ?? {}).map(([name, value]) => [name, decode(value)]));
-const holds = (snapshot, condition) => {
-	if (condition === void 0) return true;
-	const data = snapshot?.exists ? snapshot.data() : void 0;
-	return "v" in condition ? data !== void 0 && data.row?._v === condition.v : data !== void 0 === condition.exists;
+const normalizeApiKeyHeaderName = (value = API_KEY_HEADER_NAME) => {
+	if (typeof value !== "string" || value.length === 0) throw new TypeError("apiKeys({ headerName }) must name a valid header.");
+	try {
+		const headers = new Headers();
+		headers.set(value, "");
+		return headers.keys().next().value;
+	} catch {
+		throw new TypeError("apiKeys({ headerName }) must name a valid header.");
+	}
 };
-/** gRPC codes a rerun of the whole write can clear: DEADLINE_EXCEEDED, RESOURCE_EXHAUSTED, ABORTED, INTERNAL, UNAVAILABLE. */
-const TRANSIENT = /* @__PURE__ */ new Set([
-	4,
-	8,
-	10,
-	13,
-	14
-]);
-const codeOf = (error) => error.code;
-/** Firestore reports a missing database as NOT_FOUND; it reads as a missing schema, like SQL's 42P01. */
-const missingDatabase = (error) => {
-	throw codeOf(error) === 5 ? Object.assign(new Error(error.message, { cause: error }), { code: "42P01" }) : error;
+const hashApiKey = async (apiKey) => {
+	if (!isApiKey(apiKey)) throw new TypeError("API key must be a canonical 32-byte base64url value.");
+	const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(apiKey));
+	return bytesToBase64Url(new Uint8Array(digest));
+};
+const apiKeyId = () => {
+	const bytes = /* @__PURE__ */ new Uint8Array(16);
+	crypto.getRandomValues(bytes);
+	return `api-${bytesToBase64Url(bytes)}`;
+};
+const normalizeApiKeyName = (name) => {
+	const normalized = name.trim();
+	if (normalized.length === 0 || normalized.length > 64 || /[\p{Cc}\p{Cf}]/u.test(normalized)) throw new TypeError("API key names must contain 1-64 visible characters.");
+	return normalized;
+};
+const toApiKeyMetadata = ({ hash: _hash, ...metadata }) => Object.freeze(metadata);
+const registerApiKey = async (input) => {
+	const hash = await hashApiKey(input.apiKey);
+	const createdAtMs = input.createdAtMs ?? Date.now();
+	if (!Number.isSafeInteger(createdAtMs) || createdAtMs < 0) throw new TypeError("API key creation time must be non-negative.");
+	const record = Object.freeze({
+		created_at_ms: createdAtMs,
+		hash,
+		id: apiKeyId(),
+		name: normalizeApiKeyName(input.name),
+		prefix: input.apiKey.slice(0, 6),
+		revoked_at_ms: null,
+		role: "client"
+	});
+	if (await input.apiKeys.create(record) === "existing") {
+		const existing = await input.apiKeys.findByHash(hash);
+		if (existing === null || existing.revoked_at_ms !== null) throw new Error("The API key has been revoked.");
+		return Object.freeze({
+			apiKey: input.apiKey,
+			record: toApiKeyMetadata(existing)
+		});
+	}
+	return Object.freeze({
+		apiKey: input.apiKey,
+		record: toApiKeyMetadata(record)
+	});
+};
+const createApiKey = (input) => {
+	const bytes = /* @__PURE__ */ new Uint8Array(32);
+	crypto.getRandomValues(bytes);
+	return registerApiKey({
+		apiKey: bytesToBase64Url(bytes),
+		apiKeys: input.apiKeys,
+		name: input.name
+	});
 };
 /**
-* The key-value store over one Firestore collection of `{ pk, sk, row }`
-* documents, queried through the composite indexes on (pk, sk) in both
-* directions. A write is one transaction that reads only the documents its
-* ops guard.
-*/
-const createFirestoreStore = ({ firestore, collection, nativePageSize }) => {
-	const items = firestore.collection(collection);
-	const reference = (key) => items.doc(firestoreDocumentId(key));
-	return {
-		id: "firestore",
-		limits: FIRESTORE_LIMITS,
-		async get(keys) {
-			const found = /* @__PURE__ */ new Map();
-			const ids = [...new Set(keys.map(firestoreDocumentId))];
-			for (let at = 0; at < ids.length; at += GET_BATCH) {
-				const snapshots = await firestore.getAll(...ids.slice(at, at + GET_BATCH).map((id) => items.doc(id))).catch(missingDatabase);
-				for (const snapshot of snapshots) if (snapshot.exists) found.set(snapshot.id, toRow$1(snapshot.data()));
-			}
-			return keys.map((key) => found.get(firestoreDocumentId(key)) ?? null);
-		},
-		async query({ pk, gte, lt, order, limit, after }) {
-			let query = items.where("pk", "==", pk);
-			if (gte !== void 0) query = query.where("sk", ">=", gte);
-			if (lt !== void 0) query = query.where("sk", "<", lt);
-			query = query.orderBy("sk", order);
-			if (after !== void 0) query = query.startAfter(after);
-			const size = Math.min(limit, nativePageSize ?? limit);
-			const { docs } = await query.limit(size).get().catch(missingDatabase);
-			return {
-				items: docs.map((document) => ({
-					sk: document.get("sk"),
-					value: toRow$1(document.data())
-				})),
-				more: docs.length === size
-			};
-		},
-		async write(ops) {
-			const blind = ops.map((op) => op.type === "add" && (op.condition === void 0 || "exists" in op.condition && op.condition.exists));
-			const attempt = (reading) => firestore.runTransaction(async (transaction) => {
-				const read = ops.flatMap((op, position) => (op.condition !== void 0 || op.type === "add") && (reading || !blind[position]) ? [position] : []);
-				const snapshots = /* @__PURE__ */ new Map();
-				if (read.length > 0) {
-					const found = await transaction.getAll(...read.map((position) => reference(ops[position].key)));
-					read.forEach((position, at) => snapshots.set(position, found[at]));
-				}
-				const failed = read.find((position) => !holds(snapshots.get(position), ops[position].condition));
-				if (failed !== void 0) {
-					if (!reading && blind.slice(0, failed).includes(true)) return null;
-					return {
-						ok: false,
-						failedOp: failed
-					};
-				}
-				for (const [position, op] of ops.entries()) {
-					const document = reference(op.key);
-					if (op.type === "put") transaction.set(document, toDocument(op.key, op.value, op.expiresAt));
-					else if (op.type === "delete") transaction.delete(document);
-					else if (op.type === "add") {
-						if (snapshots.get(position)?.exists === false) {
-							const created = { ...op.init };
-							for (const [name, delta] of Object.entries(op.by)) created[name] = Number(created[name] ?? 0) + delta;
-							transaction.set(document, toDocument(op.key, created, op.expiresAt));
-						} else {
-							const [[name, delta], ...more] = Object.entries(op.by);
-							const ttl = op.expiresAt === void 0 ? [] : [FIRESTORE_TTL_FIELD, firebase_admin_firestore.Timestamp.fromMillis(op.expiresAt)];
-							transaction.update(document, new firebase_admin_firestore.FieldPath("row", name), firebase_admin_firestore.FieldValue.increment(delta), ...more.flatMap(([other, by]) => [new firebase_admin_firestore.FieldPath("row", other), firebase_admin_firestore.FieldValue.increment(by)]), ...ttl);
-						}
-					}
-				}
-				return { ok: true };
-			}, { maxAttempts: 5 });
-			try {
-				try {
-					const result = await attempt(false);
-					if (result !== null) return result;
-				} catch (error) {
-					if (codeOf(error) !== 5 || !blind.includes(true)) throw error;
-				}
-				return await attempt(true);
-			} catch (error) {
-				if (TRANSIENT.has(codeOf(error))) return {
-					ok: false,
-					retry: true
-				};
-				return missingDatabase(error);
-			}
-		},
-		/** A plain batch, which reads nothing, 500 deletes at a time. */
-		async deleteConsumed(keys) {
-			for (let at = 0; at < keys.length; at += FIRESTORE_LIMITS.items) {
-				const batch = firestore.batch();
-				for (const key of keys.slice(at, at + FIRESTORE_LIMITS.items)) batch.delete(reference(key));
-				await batch.commit().catch(missingDatabase);
-			}
-		},
-		async dispose() {}
-	};
-};
-//#endregion
-//#region src/firebaseDatabase.ts
-const adapterOf = ({ collection = FIREBASE_V1_COLLECTION, aggregateBatching: _, ...appOptions }) => {
-	const app = (0, firebase_admin_app.getApps)().length ? (0, firebase_admin_app.getApp)() : (0, firebase_admin_app.initializeApp)(appOptions);
-	return createKvAdapter({ store: createFirestoreStore({
-		firestore: (0, firebase_admin_firestore.getFirestore)(app),
-		collection
-	}) });
-};
-/** Hot Updater's database in one Firestore collection, through the storage engine. */
-const firebaseDatabase = (config) => createEngineDatabase({
-	name: "firebaseDatabase",
-	adapter: adapterOf(config),
-	aggregateBatching: config.aggregateBatching ?? {}
-});
-//#endregion
-//#region src/firebaseStorage.ts
-const firebaseStorage = (config) => {
-	const app = (0, firebase_admin_app.getApps)().length ? (0, firebase_admin_app.getApp)() : (0, firebase_admin_app.initializeApp)(config);
-	const bucket = (0, firebase_admin_storage.getStorage)(app).bucket(config.storageBucket);
-	const getStorageKey = createStorageKeyBuilder(config.basePath);
-	const parseAndValidate = (storageUri) => {
-		const parsed = parseStorageUri(storageUri, "gs");
-		if (parsed.bucket !== config.storageBucket) throw new Error(`Bucket name mismatch: expected "${config.storageBucket}", but found "${parsed.bucket}".`);
-		return parsed;
-	};
-	return createStorageAdapter({
-		name: "firebaseStorage",
-		protocol: "gs",
-		async put({ key, body, contentType }) {
-			const storageKey = getStorageKey(key);
-			const bytes = new Uint8Array(await new Response(body).arrayBuffer());
-			await bucket.file(storageKey).save(bytes, { metadata: {
-				contentType,
-				cacheControl: "public, max-age=31536000, immutable"
-			} });
-			return { storageUri: createStorageUri({
-				bucket: config.storageBucket,
-				key: storageKey,
-				protocol: "gs"
-			}) };
-		},
-		async get({ storageUri }) {
-			const { key } = parseAndValidate(storageUri);
-			try {
-				const file = bucket.file(key);
-				const [[body], [metadata]] = await Promise.all([file.download(), file.getMetadata()]);
-				const headers = new Headers();
-				if (metadata.contentType) headers.set("content-type", metadata.contentType);
-				headers.set("content-length", String(metadata.size ?? body.byteLength));
-				return { response: new Response(body, { headers }) };
-			} catch (error) {
-				if (typeof error === "object" && error !== null && "code" in error && error.code === 404) return { response: null };
-				throw error;
-			}
-		},
-		async getDownloadUrl({ storageUri }) {
-			const { key } = parseAndValidate(storageUri);
-			if (config.cdnUrl) {
-				const storageUrl = new URL(storageUri);
-				const downloadUrl = new URL(config.cdnUrl);
-				downloadUrl.pathname = `${downloadUrl.pathname.replace(/\/+$/, "")}${storageUrl.pathname}`;
-				downloadUrl.search = "";
-				downloadUrl.hash = "";
-				return { url: downloadUrl.toString() };
-			}
-			const [url] = await bucket.file(key).getSignedUrl({
-				action: "read",
-				expires: Date.now() + (config.signedUrlExpiresIn ?? 3600) * 1e3
-			});
-			if (!url) throw new Error("Failed to generate Firebase download URL");
-			return { url };
-		},
-		async exists({ storageUri }) {
-			const { key } = parseAndValidate(storageUri);
-			const [exists] = await bucket.file(key).exists();
-			return { exists };
-		},
-		async delete({ storageUri }) {
-			const { key } = parseAndValidate(storageUri);
-			await bucket.file(key).delete({ ignoreNotFound: true });
-			return { deleted: true };
-		}
-	});
-};
-//#endregion
-//#region ../api-keys/dist/server/apiKeys.mjs
-const API_KEY_HEADER_NAME = "x-api-key";
-const BASE64URL_32_PATTERN = /^[A-Za-z0-9_-]{43}$/u;
-const bytesToBase64Url = (bytes) => {
-	let binary = "";
-	for (const byte of bytes) binary += String.fromCharCode(byte);
-	return btoa(binary).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/u, "");
-};
-const isApiKey = (value) => {
-	if (!BASE64URL_32_PATTERN.test(value)) return false;
-	try {
-		const base64 = value.replaceAll("-", "+").replaceAll("_", "/");
-		const binary = atob(`${base64}=`);
-		const bytes = Uint8Array.from(binary, (character) => character.charCodeAt(0));
-		return bytes.byteLength === 32 && bytesToBase64Url(bytes) === value;
-	} catch {
-		return false;
-	}
-};
-const normalizeApiKeyHeaderName = (value = API_KEY_HEADER_NAME) => {
-	if (typeof value !== "string" || value.length === 0) throw new TypeError("apiKeys({ headerName }) must name a valid header.");
-	try {
-		const headers = new Headers();
-		headers.set(value, "");
-		return headers.keys().next().value;
-	} catch {
-		throw new TypeError("apiKeys({ headerName }) must name a valid header.");
-	}
-};
-const hashApiKey = async (apiKey) => {
-	if (!isApiKey(apiKey)) throw new TypeError("API key must be a canonical 32-byte base64url value.");
-	const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(apiKey));
-	return bytesToBase64Url(new Uint8Array(digest));
-};
-const apiKeyId = () => {
-	const bytes = /* @__PURE__ */ new Uint8Array(16);
-	crypto.getRandomValues(bytes);
-	return `api-${bytesToBase64Url(bytes)}`;
-};
-const normalizeApiKeyName = (name) => {
-	const normalized = name.trim();
-	if (normalized.length === 0 || normalized.length > 64 || /[\p{Cc}\p{Cf}]/u.test(normalized)) throw new TypeError("API key names must contain 1-64 visible characters.");
-	return normalized;
-};
-const toApiKeyMetadata = ({ hash: _hash, ...metadata }) => Object.freeze(metadata);
-const registerApiKey = async (input) => {
-	const hash = await hashApiKey(input.apiKey);
-	const createdAtMs = input.createdAtMs ?? Date.now();
-	if (!Number.isSafeInteger(createdAtMs) || createdAtMs < 0) throw new TypeError("API key creation time must be non-negative.");
-	const record = Object.freeze({
-		created_at_ms: createdAtMs,
-		hash,
-		id: apiKeyId(),
-		name: normalizeApiKeyName(input.name),
-		prefix: input.apiKey.slice(0, 6),
-		revoked_at_ms: null,
-		role: "client"
-	});
-	if (await input.apiKeys.create(record) === "existing") {
-		const existing = await input.apiKeys.findByHash(hash);
-		if (existing === null || existing.revoked_at_ms !== null) throw new Error("The API key has been revoked.");
-		return Object.freeze({
-			apiKey: input.apiKey,
-			record: toApiKeyMetadata(existing)
-		});
-	}
-	return Object.freeze({
-		apiKey: input.apiKey,
-		record: toApiKeyMetadata(record)
-	});
-};
-const createApiKey = (input) => {
-	const bytes = /* @__PURE__ */ new Uint8Array(32);
-	crypto.getRandomValues(bytes);
-	return registerApiKey({
-		apiKey: bytesToBase64Url(bytes),
-		apiKeys: input.apiKeys,
-		name: input.name
-	});
-};
-/**
-* Provisions the client API key used by managed init.
-*
-* A saved plaintext key is registered idempotently; otherwise a new key is
-* created. Callers must persist or display the returned plaintext because the
-* database stores only its hash.
+* Provisions the client API key used by managed init.
+*
+* A saved plaintext key is registered idempotently; otherwise a new key is
+* created. Callers must persist or display the returned plaintext because the
+* database stores only its hash.
 */
 const provisionApiKey = (input) => {
 	const existingApiKey = input.existingApiKey?.trim();
@@ -7576,7 +7322,7 @@ const apiKeysCli = (headerName) => ({ clientCredential: {
 } });
 //#endregion
 //#region ../api-keys/dist/server/model.mjs
-const toRow = (row) => ({
+const toRow$1 = (row) => ({
 	id: row.id,
 	hash: row.hash,
 	name: row.name,
@@ -7601,7 +7347,7 @@ const createApiKeyModel = (db) => ({
 	},
 	async findByHash(hash) {
 		const row = await db.findOne("api_keys", { hash });
-		return row === null ? null : toRow(row);
+		return row === null ? null : toRow$1(row);
 	},
 	/** Every key, newest first, then by id; the whole list is the result. */
 	async list() {
@@ -7615,7 +7361,7 @@ const createApiKeyModel = (db) => ({
 				limit: 500,
 				...cursor === void 0 ? {} : { cursor }
 			});
-			rows.push(...page.rows.map(toRow));
+			rows.push(...page.rows.map(toRow$1));
 			cursor = page.next;
 		} while (cursor !== void 0);
 		return rows.sort((left, right) => right.created_at_ms - left.created_at_ms || (left.id < right.id ? -1 : left.id > right.id ? 1 : 0));
@@ -7624,7 +7370,7 @@ const createApiKeyModel = (db) => ({
 		const row = await tx.findOne("api_keys", { id });
 		if (row === null) return null;
 		tx.update("api_keys", row, { revoked_at_ms: revokedAtMs });
-		return toRow({
+		return toRow$1({
 			...row,
 			revoked_at_ms: revokedAtMs
 		});
@@ -11586,16 +11332,253 @@ const remoteConfig = () => {
 	return markOfficial(plugin);
 };
 //#endregion
-//#region src/plugins.ts
+//#region src/firebaseInfrastructureNames.ts
 /**
-* The plugins the managed Firebase server runs: Insights, API keys on every
-* client route, and Remote Config. Its Cloud Function imports this list.
+* The one collection the storage engine keeps every item in. It namespaces
+* the data, so item partitions are table names with no prefix.
 */
-const plugins = [
-	insights(),
-	apiKeys(),
-	remoteConfig()
-];
+const FIREBASE_V1_COLLECTION = "hot_updater_v1";
+//#endregion
+//#region src/firestoreStore.ts
+/**
+* Firestore's limits: 10 MiB a request and 1 MiB a document; 500 writes a
+* transaction stays a conservative bound. Indexed values over 1,500 bytes are
+* truncated, so longer keys are refused rather than read inconsistently.
+*/
+const FIRESTORE_LIMITS = {
+	items: 500,
+	bytes: 1e7,
+	itemBytes: 1e6,
+	keyBytes: {
+		pk: 1500,
+		sk: 1500
+	}
+};
+/** `getAll` reads at most this many documents a call. */
+const GET_BATCH = 300;
+/** A document's id: a hash of its key, since keys may hold `/` and outgrow Firestore's 1,500 bytes. */
+const firestoreDocumentId = ({ pk, sk }) => (0, node_crypto.createHash)("sha256").update(JSON.stringify([pk, sk])).digest("hex");
+/**
+* A document is `{ pk, sk, row }`. Row values that are maps or arrays become
+* JSON text inside a map, since Firestore has no nested arrays and does not
+* keep map key order; `row` is exempt from single-field indexing.
+*/
+const encode = (value) => value !== null && typeof value === "object" ? { json: JSON.stringify(value) } : value;
+const decode = (value) => value !== null && typeof value === "object" && "json" in value ? JSON.parse(String(value.json)) : value;
+/**
+* The collection's TTL field: a timestamp beside `pk` and `sk` on every item
+* of a row that expires, which Firestore's TTL policy deletes.
+*/
+const FIRESTORE_TTL_FIELD = "expireAt";
+const toDocument = (key, row, expiresAt) => ({
+	pk: key.pk,
+	sk: key.sk,
+	row: Object.fromEntries(Object.entries(row).map(([name, value]) => [name, encode(value)])),
+	...expiresAt === void 0 ? {} : { [FIRESTORE_TTL_FIELD]: firebase_admin_firestore.Timestamp.fromMillis(expiresAt) }
+});
+const toRow = (data) => Object.fromEntries(Object.entries(data.row ?? {}).map(([name, value]) => [name, decode(value)]));
+const holds = (snapshot, condition) => {
+	if (condition === void 0) return true;
+	const data = snapshot?.exists ? snapshot.data() : void 0;
+	return "v" in condition ? data !== void 0 && data.row?._v === condition.v : data !== void 0 === condition.exists;
+};
+/** gRPC codes a rerun of the whole write can clear: DEADLINE_EXCEEDED, RESOURCE_EXHAUSTED, ABORTED, INTERNAL, UNAVAILABLE. */
+const TRANSIENT = /* @__PURE__ */ new Set([
+	4,
+	8,
+	10,
+	13,
+	14
+]);
+const codeOf = (error) => error.code;
+/** Firestore reports a missing database as NOT_FOUND; it reads as a missing schema, like SQL's 42P01. */
+const missingDatabase = (error) => {
+	throw codeOf(error) === 5 ? Object.assign(new Error(error.message, { cause: error }), { code: "42P01" }) : error;
+};
+/**
+* The key-value store over one Firestore collection of `{ pk, sk, row }`
+* documents, queried through the composite indexes on (pk, sk) in both
+* directions. A write is one transaction that reads only the documents its
+* ops guard.
+*/
+const createFirestoreStore = ({ firestore, collection, nativePageSize }) => {
+	const items = firestore.collection(collection);
+	const reference = (key) => items.doc(firestoreDocumentId(key));
+	return {
+		id: "firestore",
+		limits: FIRESTORE_LIMITS,
+		async get(keys) {
+			const found = /* @__PURE__ */ new Map();
+			const ids = [...new Set(keys.map(firestoreDocumentId))];
+			for (let at = 0; at < ids.length; at += GET_BATCH) {
+				const snapshots = await firestore.getAll(...ids.slice(at, at + GET_BATCH).map((id) => items.doc(id))).catch(missingDatabase);
+				for (const snapshot of snapshots) if (snapshot.exists) found.set(snapshot.id, toRow(snapshot.data()));
+			}
+			return keys.map((key) => found.get(firestoreDocumentId(key)) ?? null);
+		},
+		async query({ pk, gte, lt, order, limit, after }) {
+			let query = items.where("pk", "==", pk);
+			if (gte !== void 0) query = query.where("sk", ">=", gte);
+			if (lt !== void 0) query = query.where("sk", "<", lt);
+			query = query.orderBy("sk", order);
+			if (after !== void 0) query = query.startAfter(after);
+			const size = Math.min(limit, nativePageSize ?? limit);
+			const { docs } = await query.limit(size).get().catch(missingDatabase);
+			return {
+				items: docs.map((document) => ({
+					sk: document.get("sk"),
+					value: toRow(document.data())
+				})),
+				more: docs.length === size
+			};
+		},
+		async write(ops) {
+			const blind = ops.map((op) => op.type === "add" && (op.condition === void 0 || "exists" in op.condition && op.condition.exists));
+			const attempt = (reading) => firestore.runTransaction(async (transaction) => {
+				const read = ops.flatMap((op, position) => (op.condition !== void 0 || op.type === "add") && (reading || !blind[position]) ? [position] : []);
+				const snapshots = /* @__PURE__ */ new Map();
+				if (read.length > 0) {
+					const found = await transaction.getAll(...read.map((position) => reference(ops[position].key)));
+					read.forEach((position, at) => snapshots.set(position, found[at]));
+				}
+				const failed = read.find((position) => !holds(snapshots.get(position), ops[position].condition));
+				if (failed !== void 0) {
+					if (!reading && blind.slice(0, failed).includes(true)) return null;
+					return {
+						ok: false,
+						failedOp: failed
+					};
+				}
+				for (const [position, op] of ops.entries()) {
+					const document = reference(op.key);
+					if (op.type === "put") transaction.set(document, toDocument(op.key, op.value, op.expiresAt));
+					else if (op.type === "delete") transaction.delete(document);
+					else if (op.type === "add") {
+						if (snapshots.get(position)?.exists === false) {
+							const created = { ...op.init };
+							for (const [name, delta] of Object.entries(op.by)) created[name] = Number(created[name] ?? 0) + delta;
+							transaction.set(document, toDocument(op.key, created, op.expiresAt));
+						} else {
+							const [[name, delta], ...more] = Object.entries(op.by);
+							const ttl = op.expiresAt === void 0 ? [] : [FIRESTORE_TTL_FIELD, firebase_admin_firestore.Timestamp.fromMillis(op.expiresAt)];
+							transaction.update(document, new firebase_admin_firestore.FieldPath("row", name), firebase_admin_firestore.FieldValue.increment(delta), ...more.flatMap(([other, by]) => [new firebase_admin_firestore.FieldPath("row", other), firebase_admin_firestore.FieldValue.increment(by)]), ...ttl);
+						}
+					}
+				}
+				return { ok: true };
+			}, { maxAttempts: 5 });
+			try {
+				try {
+					const result = await attempt(false);
+					if (result !== null) return result;
+				} catch (error) {
+					if (codeOf(error) !== 5 || !blind.includes(true)) throw error;
+				}
+				return await attempt(true);
+			} catch (error) {
+				if (TRANSIENT.has(codeOf(error))) return {
+					ok: false,
+					retry: true
+				};
+				return missingDatabase(error);
+			}
+		},
+		/** A plain batch, which reads nothing, 500 deletes at a time. */
+		async deleteConsumed(keys) {
+			for (let at = 0; at < keys.length; at += FIRESTORE_LIMITS.items) {
+				const batch = firestore.batch();
+				for (const key of keys.slice(at, at + FIRESTORE_LIMITS.items)) batch.delete(reference(key));
+				await batch.commit().catch(missingDatabase);
+			}
+		},
+		async dispose() {}
+	};
+};
+//#endregion
+//#region src/firebaseDatabase.ts
+const adapterOf = ({ collection = FIREBASE_V1_COLLECTION, aggregateBatching: _, ...appOptions }) => {
+	const app = (0, firebase_admin_app.getApps)().length ? (0, firebase_admin_app.getApp)() : (0, firebase_admin_app.initializeApp)(appOptions);
+	return createKvAdapter({ store: createFirestoreStore({
+		firestore: (0, firebase_admin_firestore.getFirestore)(app),
+		collection
+	}) });
+};
+/** Hot Updater's database in one Firestore collection, through the storage engine. */
+const firebaseDatabase = (config) => createEngineDatabase({
+	name: "firebaseDatabase",
+	adapter: adapterOf(config),
+	aggregateBatching: config.aggregateBatching ?? {}
+});
+//#endregion
+//#region src/firebaseStorage.ts
+const firebaseStorage = (config) => {
+	const app = (0, firebase_admin_app.getApps)().length ? (0, firebase_admin_app.getApp)() : (0, firebase_admin_app.initializeApp)(config);
+	const bucket = (0, firebase_admin_storage.getStorage)(app).bucket(config.storageBucket);
+	const getStorageKey = createStorageKeyBuilder(config.basePath);
+	const parseAndValidate = (storageUri) => {
+		const parsed = parseStorageUri(storageUri, "gs");
+		if (parsed.bucket !== config.storageBucket) throw new Error(`Bucket name mismatch: expected "${config.storageBucket}", but found "${parsed.bucket}".`);
+		return parsed;
+	};
+	return createStorageAdapter({
+		name: "firebaseStorage",
+		protocol: "gs",
+		async put({ key, body, contentType }) {
+			const storageKey = getStorageKey(key);
+			const bytes = new Uint8Array(await new Response(body).arrayBuffer());
+			await bucket.file(storageKey).save(bytes, { metadata: {
+				contentType,
+				cacheControl: "public, max-age=31536000, immutable"
+			} });
+			return { storageUri: createStorageUri({
+				bucket: config.storageBucket,
+				key: storageKey,
+				protocol: "gs"
+			}) };
+		},
+		async get({ storageUri }) {
+			const { key } = parseAndValidate(storageUri);
+			try {
+				const file = bucket.file(key);
+				const [[body], [metadata]] = await Promise.all([file.download(), file.getMetadata()]);
+				const headers = new Headers();
+				if (metadata.contentType) headers.set("content-type", metadata.contentType);
+				headers.set("content-length", String(metadata.size ?? body.byteLength));
+				return { response: new Response(body, { headers }) };
+			} catch (error) {
+				if (typeof error === "object" && error !== null && "code" in error && error.code === 404) return { response: null };
+				throw error;
+			}
+		},
+		async getDownloadUrl({ storageUri }) {
+			const { key } = parseAndValidate(storageUri);
+			if (config.cdnUrl) {
+				const storageUrl = new URL(storageUri);
+				const downloadUrl = new URL(config.cdnUrl);
+				downloadUrl.pathname = `${downloadUrl.pathname.replace(/\/+$/, "")}${storageUrl.pathname}`;
+				downloadUrl.search = "";
+				downloadUrl.hash = "";
+				return { url: downloadUrl.toString() };
+			}
+			const [url] = await bucket.file(key).getSignedUrl({
+				action: "read",
+				expires: Date.now() + (config.signedUrlExpiresIn ?? 3600) * 1e3
+			});
+			if (!url) throw new Error("Failed to generate Firebase download URL");
+			return { url };
+		},
+		async exists({ storageUri }) {
+			const { key } = parseAndValidate(storageUri);
+			const [exists] = await bucket.file(key).exists();
+			return { exists };
+		},
+		async delete({ storageUri }) {
+			const { key } = parseAndValidate(storageUri);
+			await bucket.file(key).delete({ ignoreNotFound: true });
+			return { deleted: true };
+		}
+	});
+};
 //#endregion
 //#region firebase/functions/index.ts
 const HOT_UPDATER_BASE_PATH = "/";
@@ -11605,7 +11588,11 @@ const cdnUrl = process.env.HOT_UPDATER_CDN_URL;
 if (!storageBucket) throw new Error("Firebase runtime requires storageBucket to read bundle manifests.");
 const hotUpdater = createHotUpdater({
 	database: firebaseDatabase({ ...adminOptions }),
-	plugins,
+	plugins: [
+		insights(),
+		apiKeys(),
+		remoteConfig()
+	],
 	storage: firebaseStorage({
 		...adminOptions,
 		storageBucket,