@hot-updater/firebase 1.1.3 → 1.2.0-rc.0

package/dist/firebase/functions/index.cjs

@@ -223,7 +223,7 @@ const bundleMetadataToRow = (metadata) => {
 	return metadata;
 };
 //#endregion
-//#region ../../packages/protocol/dist/index.mjs
+//#region ../../packages/protocol/dist/uuid-kZvLA0Ly.mjs
 const LETTER_DASH_NUMBER$2 = "[a-zA-Z0-9-]";
 const NUMERIC_IDENTIFIER$2 = String.raw`0|[1-9]\d*`;
 const NUMERIC_IDENTIFIER_LOOSE$2 = String.raw`\d+`;
@@ -336,128 +336,6 @@ function canonicalizeAppVersion(appVersion) {
 	const version = coerce$1(appVersion);
 	return version ? normalizeFull(version) : null;
 }
-const getManifestStorageUri = (bundle) => bundle.manifestStorageUri;
-const getManifestFileHash = (bundle) => bundle.manifestFileHash;
-const getAssetBaseStorageUri = (bundle) => bundle.assetBaseStorageUri;
-const isBundlePatchArtifact = (value) => {
-	if (!value || typeof value !== "object" || Array.isArray(value)) return false;
-	const candidate = value;
-	return typeof candidate.baseBundleId === "string" && typeof candidate.baseFileHash === "string" && typeof candidate.patchFileHash === "string" && typeof candidate.patchStorageUri === "string";
-};
-const readBundlePatchArray = (patches) => {
-	if (!Array.isArray(patches)) return [];
-	return patches.filter(isBundlePatchArtifact);
-};
-const getBundlePatches = (bundle) => {
-	const patches = readBundlePatchArray(bundle.patches);
-	const seenBaseBundleIds = /* @__PURE__ */ new Set();
-	return patches.filter((patch) => {
-		if (seenBaseBundleIds.has(patch.baseBundleId)) return false;
-		seenBaseBundleIds.add(patch.baseBundleId);
-		return true;
-	});
-};
-const getBundlePatch = (bundle, baseBundleId) => {
-	return getBundlePatches(bundle).find((patch) => patch.baseBundleId === baseBundleId) ?? null;
-};
-const NUMERIC_COHORT_SIZE = 1e3;
-const DEFAULT_ROLLOUT_COHORT_COUNT = NUMERIC_COHORT_SIZE;
-const CUSTOM_COHORT_PATTERN = /^[a-z0-9-]+$/;
-function parseNumericCohortValue(cohort) {
-	if (!/^\d+$/.test(cohort)) return null;
-	const parsed = Number.parseInt(cohort, 10);
-	if (Number.isNaN(parsed) || parsed < 1 || parsed > 1e3) return null;
-	return parsed;
-}
-function positiveMod(value, modulus) {
-	return (value % modulus + modulus) % modulus;
-}
-function hashString(value) {
-	let hash = 0;
-	for (let i = 0; i < value.length; i++) {
-		const char = value.charCodeAt(i);
-		hash = (hash << 5) - hash + char;
-		hash |= 0;
-	}
-	return hash;
-}
-function gcd(a, b) {
-	let x = Math.abs(a);
-	let y = Math.abs(b);
-	while (y !== 0) {
-		const next = x % y;
-		x = y;
-		y = next;
-	}
-	return x;
-}
-function modularInverse(value, modulus) {
-	let t = 0;
-	let newT = 1;
-	let r = modulus;
-	let newR = positiveMod(value, modulus);
-	while (newR !== 0) {
-		const quotient = Math.floor(r / newR);
-		[t, newT] = [newT, t - quotient * newT];
-		[r, newR] = [newR, r - quotient * newR];
-	}
-	if (r > 1) throw new Error(`No modular inverse for ${value} mod ${modulus}`);
-	return positiveMod(t, modulus);
-}
-function getRolloutShuffleParameters(bundleId) {
-	let multiplier = positiveMod(hashString(`${bundleId}:multiplier`), 997);
-	if (multiplier === 0) multiplier = 1;
-	while (gcd(multiplier, NUMERIC_COHORT_SIZE) !== 1) {
-		multiplier = positiveMod(multiplier + 1, NUMERIC_COHORT_SIZE);
-		if (multiplier === 0) multiplier = 1;
-	}
-	const offset = positiveMod(hashString(`${bundleId}:offset`), NUMERIC_COHORT_SIZE);
-	return {
-		multiplier,
-		offset,
-		inverseMultiplier: modularInverse(multiplier, NUMERIC_COHORT_SIZE)
-	};
-}
-function normalizeRolloutCohortCount(rolloutCohortCount) {
-	if (rolloutCohortCount === null || rolloutCohortCount === void 0) return DEFAULT_ROLLOUT_COHORT_COUNT;
-	if (rolloutCohortCount <= 0) return 0;
-	if (rolloutCohortCount >= 1e3) return NUMERIC_COHORT_SIZE;
-	return Math.floor(rolloutCohortCount);
-}
-function normalizeCohortValue(cohort) {
-	const normalized = cohort.trim().toLowerCase();
-	const numericCohort = parseNumericCohortValue(normalized);
-	if (numericCohort !== null) return String(numericCohort);
-	return normalized;
-}
-function getNumericCohortValue(cohort) {
-	return parseNumericCohortValue(normalizeCohortValue(cohort));
-}
-function isNumericCohort(cohort) {
-	return getNumericCohortValue(cohort) !== null;
-}
-function isCustomCohort(cohort) {
-	const normalized = normalizeCohortValue(cohort);
-	return normalized.length > 0 && normalized.length <= 64 && !/^\d+$/.test(normalized) && CUSTOM_COHORT_PATTERN.test(normalized);
-}
-function isValidCohort(cohort) {
-	const normalized = normalizeCohortValue(cohort);
-	return isNumericCohort(normalized) || isCustomCohort(normalized);
-}
-function getNumericCohortRolloutPosition(bundleId, cohortValue) {
-	if (cohortValue < 1 || cohortValue > 1e3) throw new Error(`Invalid numeric cohort: ${cohortValue}`);
-	const { offset, inverseMultiplier } = getRolloutShuffleParameters(bundleId);
-	return positiveMod(inverseMultiplier * (cohortValue - 1 - offset), NUMERIC_COHORT_SIZE);
-}
-function getRolledOutNumericCohorts(bundleId, rolloutCohortCount) {
-	const normalizedRolloutCount = normalizeRolloutCohortCount(rolloutCohortCount);
-	if (normalizedRolloutCount <= 0) return [];
-	if (normalizedRolloutCount >= 1e3) return Array.from({ length: NUMERIC_COHORT_SIZE }, (_, index) => index + 1);
-	const { multiplier, offset } = getRolloutShuffleParameters(bundleId);
-	return Array.from({ length: normalizedRolloutCount }, (_, position) => positiveMod(multiplier * position + offset, NUMERIC_COHORT_SIZE)).map((zeroBasedCohort) => zeroBasedCohort + 1).sort((left, right) => left - right);
-}
-const RELEASE_CATALOG_FALLBACK_POLICY = "BUILTIN_IF_ACTIVE_INELIGIBLE";
-const MAX_COMPILED_CATALOG_BYTES = 262144;
 const BASE64URL_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
 const MAX_CATALOG_SEGMENT_LENGTH = 255;
 function assertCatalogSegment(value, name) {
@@ -582,6 +460,130 @@ const NIL_UUID = "00000000-0000-0000-0000-000000000000";
 const UUID_V7_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
 const isUUIDv7 = (value) => typeof value === "string" && UUID_V7_PATTERN.test(value);
 //#endregion
+//#region ../../packages/protocol/dist/index.mjs
+const getManifestStorageUri = (bundle) => bundle.manifestStorageUri;
+const getManifestFileHash = (bundle) => bundle.manifestFileHash;
+const getAssetBaseStorageUri = (bundle) => bundle.assetBaseStorageUri;
+const isBundlePatchArtifact = (value) => {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+	const candidate = value;
+	return typeof candidate.baseBundleId === "string" && typeof candidate.baseFileHash === "string" && typeof candidate.patchFileHash === "string" && typeof candidate.patchStorageUri === "string";
+};
+const readBundlePatchArray = (patches) => {
+	if (!Array.isArray(patches)) return [];
+	return patches.filter(isBundlePatchArtifact);
+};
+const getBundlePatches = (bundle) => {
+	const patches = readBundlePatchArray(bundle.patches);
+	const seenBaseBundleIds = /* @__PURE__ */ new Set();
+	return patches.filter((patch) => {
+		if (seenBaseBundleIds.has(patch.baseBundleId)) return false;
+		seenBaseBundleIds.add(patch.baseBundleId);
+		return true;
+	});
+};
+const getBundlePatch = (bundle, baseBundleId) => {
+	return getBundlePatches(bundle).find((patch) => patch.baseBundleId === baseBundleId) ?? null;
+};
+const NUMERIC_COHORT_SIZE = 1e3;
+const DEFAULT_ROLLOUT_COHORT_COUNT = NUMERIC_COHORT_SIZE;
+const CUSTOM_COHORT_PATTERN = /^[a-z0-9-]+$/;
+function parseNumericCohortValue(cohort) {
+	if (!/^\d+$/.test(cohort)) return null;
+	const parsed = Number.parseInt(cohort, 10);
+	if (Number.isNaN(parsed) || parsed < 1 || parsed > 1e3) return null;
+	return parsed;
+}
+function positiveMod(value, modulus) {
+	return (value % modulus + modulus) % modulus;
+}
+function hashString(value) {
+	let hash = 0;
+	for (let i = 0; i < value.length; i++) {
+		const char = value.charCodeAt(i);
+		hash = (hash << 5) - hash + char;
+		hash |= 0;
+	}
+	return hash;
+}
+function gcd(a, b) {
+	let x = Math.abs(a);
+	let y = Math.abs(b);
+	while (y !== 0) {
+		const next = x % y;
+		x = y;
+		y = next;
+	}
+	return x;
+}
+function modularInverse(value, modulus) {
+	let t = 0;
+	let newT = 1;
+	let r = modulus;
+	let newR = positiveMod(value, modulus);
+	while (newR !== 0) {
+		const quotient = Math.floor(r / newR);
+		[t, newT] = [newT, t - quotient * newT];
+		[r, newR] = [newR, r - quotient * newR];
+	}
+	if (r > 1) throw new Error(`No modular inverse for ${value} mod ${modulus}`);
+	return positiveMod(t, modulus);
+}
+function getRolloutShuffleParameters(bundleId) {
+	let multiplier = positiveMod(hashString(`${bundleId}:multiplier`), 997);
+	if (multiplier === 0) multiplier = 1;
+	while (gcd(multiplier, NUMERIC_COHORT_SIZE) !== 1) {
+		multiplier = positiveMod(multiplier + 1, NUMERIC_COHORT_SIZE);
+		if (multiplier === 0) multiplier = 1;
+	}
+	const offset = positiveMod(hashString(`${bundleId}:offset`), NUMERIC_COHORT_SIZE);
+	return {
+		multiplier,
+		offset,
+		inverseMultiplier: modularInverse(multiplier, NUMERIC_COHORT_SIZE)
+	};
+}
+function normalizeRolloutCohortCount(rolloutCohortCount) {
+	if (rolloutCohortCount === null || rolloutCohortCount === void 0) return DEFAULT_ROLLOUT_COHORT_COUNT;
+	if (rolloutCohortCount <= 0) return 0;
+	if (rolloutCohortCount >= 1e3) return NUMERIC_COHORT_SIZE;
+	return Math.floor(rolloutCohortCount);
+}
+function normalizeCohortValue(cohort) {
+	const normalized = cohort.trim().toLowerCase();
+	const numericCohort = parseNumericCohortValue(normalized);
+	if (numericCohort !== null) return String(numericCohort);
+	return normalized;
+}
+function getNumericCohortValue(cohort) {
+	return parseNumericCohortValue(normalizeCohortValue(cohort));
+}
+function isNumericCohort(cohort) {
+	return getNumericCohortValue(cohort) !== null;
+}
+function isCustomCohort(cohort) {
+	const normalized = normalizeCohortValue(cohort);
+	return normalized.length > 0 && normalized.length <= 64 && !/^\d+$/.test(normalized) && CUSTOM_COHORT_PATTERN.test(normalized);
+}
+function isValidCohort(cohort) {
+	const normalized = normalizeCohortValue(cohort);
+	return isNumericCohort(normalized) || isCustomCohort(normalized);
+}
+function getNumericCohortRolloutPosition(bundleId, cohortValue) {
+	if (cohortValue < 1 || cohortValue > 1e3) throw new Error(`Invalid numeric cohort: ${cohortValue}`);
+	const { offset, inverseMultiplier } = getRolloutShuffleParameters(bundleId);
+	return positiveMod(inverseMultiplier * (cohortValue - 1 - offset), NUMERIC_COHORT_SIZE);
+}
+function getRolledOutNumericCohorts(bundleId, rolloutCohortCount) {
+	const normalizedRolloutCount = normalizeRolloutCohortCount(rolloutCohortCount);
+	if (normalizedRolloutCount <= 0) return [];
+	if (normalizedRolloutCount >= 1e3) return Array.from({ length: NUMERIC_COHORT_SIZE }, (_, index) => index + 1);
+	const { multiplier, offset } = getRolloutShuffleParameters(bundleId);
+	return Array.from({ length: normalizedRolloutCount }, (_, position) => positiveMod(multiplier * position + offset, NUMERIC_COHORT_SIZE)).map((zeroBasedCohort) => zeroBasedCohort + 1).sort((left, right) => left - right);
+}
+const RELEASE_CATALOG_FALLBACK_POLICY = "BUILTIN_IF_ACTIVE_INELIGIBLE";
+const MAX_COMPILED_CATALOG_BYTES = 262144;
+//#endregion
 //#region ../plugin-core/dist/databaseRows.mjs
 const releaseRowToRelease = (row) => ({
 	id: row.id,
@@ -1901,12 +1903,17 @@ const SETTINGS_TABLE = {
 const ENGINE_SCHEMA_KEY = "schema.engine";
 const CORE_SCHEMA_KEY = "schema.core";
 const stored = ({ key, expected, found }) => `"${key}" is ${found === null ? "missing" : `"${found}"`}; expected "${expected}"`;
-const settingMessage = (adapterName, { key, expected, found }) => `Hot Updater schema setting "${key}" for ${adapterName} is ${found === null ? "missing" : `"${found}"`}; expected "${expected}". Run \`hot-updater db migrate\`.`;
+/**
+* How to migrate a database the fence refused: doctor names the command for
+* it, init again for a deployment init manages, or the database's own
+* tooling in the server's project.
+*/
+const MIGRATE_SCHEMA_FIX = "Run `npx hot-updater doctor` in the project whose hot-updater.config.ts names this database: it names the command that migrates it. In a server project, `hot-updater db migrate` migrates the database its server file names.";
+const settingMessage = (adapterName, { key, expected, found }) => `Hot Updater schema setting "${key}" for ${adapterName} is ${found === null ? "missing" : `"${found}"`}; expected "${expected}". ${MIGRATE_SCHEMA_FIX}`;
 /** The plugin a `schema.<id>` setting belongs to; undefined for core's and the engine's. */
 const pluginOf = ({ key }) => key.startsWith("schema.") && key !== "schema.engine" && key !== CORE_SCHEMA_KEY ? key.slice(7) : void 0;
 const listed = (items) => items.length < 2 ? items.join("") : `${items.slice(0, -1).join(", ")} and ${items.at(-1)}`;
-/** How to create plugins' tables when the fence was given no fix. */
-const PLUGIN_TABLES_FIX = "Run `hot-updater db migrate`. A managed server runs only its provider's plugins, and rerunning `hot-updater init --provider <provider>` applies the provider's migrations. Run `hot-updater db` commands in the server's project: they load the server file named on the command line, or src/hotUpdater.* or src/db.*, and don't read hot-updater.config.ts.";
+const settingsMessage = (adapterName, settings) => `Hot Updater schema settings for ${adapterName} are not migrated: ${settings.map(stored).join(", and ")}. ${MIGRATE_SCHEMA_FIX}`;
 const pluginsMessage = (adapterName, plugins, settings, fix) => `The tables of ${plugins.length === 1 ? "plugin" : "plugins"} ${listed(plugins.map((id) => `"${id}"`))} are not migrated on ${adapterName}: schema ${settings.length === 1 ? "setting" : "settings"} ${settings.map(stored).join(", and ")}. ${fix}`;
 /** The database needs `hot-updater db migrate`, or a new database; the handler answers 503. */
 var HotUpdaterSchemaMigrationRequiredError = class extends Error {
@@ -1923,7 +1930,7 @@ var HotUpdaterSchemaMigrationRequiredError = class extends Error {
 	constructor(adapterName, currentVersion, setting, options) {
 		const settings = options?.settings ?? (setting === void 0 ? [] : [setting]);
 		const plugins = settings.flatMap((mismatch) => pluginOf(mismatch) ?? []);
-		super(setting === void 0 ? currentVersion === void 0 ? `Hot Updater database schema is not initialized for ${adapterName}. Run \`hot-updater db migrate\` before using this adapter.` : `Hot Updater v1 cannot migrate schema ${currentVersion} in place. Create a new empty database and run \`hot-updater db migrate\`.` : plugins.length > 0 && plugins.length === settings.length ? pluginsMessage(adapterName, plugins, settings, options?.fix ?? PLUGIN_TABLES_FIX) : settingMessage(adapterName, setting), options?.cause === void 0 ? void 0 : { cause: options.cause });
+		super(setting === void 0 ? currentVersion === void 0 ? `Hot Updater database schema is not initialized for ${adapterName}. ${MIGRATE_SCHEMA_FIX}` : `Hot Updater v1 cannot migrate schema ${currentVersion} in place. Create a new empty database and run \`hot-updater db migrate\`.` : plugins.length > 0 && plugins.length === settings.length ? pluginsMessage(adapterName, plugins, settings, options?.fix ?? MIGRATE_SCHEMA_FIX) : settings.length > 1 && !(setting.key === "schema.engine" && setting.found === null) ? settingsMessage(adapterName, settings) : settingMessage(adapterName, setting), options?.cause === void 0 ? void 0 : { cause: options.cause });
 		this.adapterName = adapterName;
 		this.currentVersion = currentVersion;
 		this.setting = setting;
@@ -1987,17 +1994,37 @@ const checkSchemaFence = async (adapter, adapterName, expected, fix) => {
 };
 /** The database name a fenced adapter carries, so a server can fence its plugins' rows too. */
 const FENCED = Symbol.for("@hot-updater/server/schema-fence");
+/**
+* The adapter a fence reads its settings through and the settings it
+* expects, so a fence over it checks them with its own in one read. Another
+* key than `FENCED`, whose value another copy of plugin-core reads as the
+* name.
+*/
+const FENCED_SETTINGS = Symbol.for("@hot-updater/server/schema-fence-settings");
 /** The database name an adapter behind the schema fence reports under. */
 const fencedName = (adapter) => adapter[FENCED];
 /**
 * The adapter behind the schema fence: a process's first read or write
 * checks the settings first. Success is kept; a failure is checked again on
-* the next call.
+* the next call. A fence over another one, as a server's plugins' over
+* core's, checks the inner fence's settings with its own in that one read,
+* so its refusal lists every setting missing or different.
 */
 const withSchemaFence = (adapter, adapterName, expected, fix) => {
+	const inner = adapter[FENCED_SETTINGS];
+	const settings = inner === void 0 ? {
+		adapter,
+		expected
+	} : {
+		adapter: inner.adapter,
+		expected: {
+			...inner.expected,
+			...expected
+		}
+	};
 	let ready;
 	const fence = () => {
-		ready ??= checkSchemaFence(adapter, adapterName, expected, fix).catch((error) => {
+		ready ??= checkSchemaFence(settings.adapter, adapterName, settings.expected, fix).catch((error) => {
 			ready = void 0;
 			throw error;
 		});
@@ -2006,6 +2033,7 @@ const withSchemaFence = (adapter, adapterName, expected, fix) => {
 	return {
 		...adapter,
 		[FENCED]: adapterName,
+		[FENCED_SETTINGS]: settings,
 		get: (table, keys) => fence().then(() => adapter.get(table, keys)),
 		query: (table, request) => fence().then(() => adapter.query(table, request)),
 		write: (ops) => fence().then(() => adapter.write(ops)),
@@ -2064,259 +2092,388 @@ const CHANNEL_ID = {
 	maxLength: 1408,
 	ascii: true
 };
-/** Core's schema version: the `schema.core` settings row. */
-const HOT_UPDATER_SCHEMA_VERSION = "1.0.0";
+/**
+* Core's schema version: the `schema.core` settings row. Bump it when core
+* adds a table, then regenerate the managed migrations with
+* HOT_UPDATER_UPDATE_SQL=1 (the D1 and Supabase schema specs), so the next
+* release's numbered migration carries the change and `hot-updater init`
+* applies it to managed databases an earlier release created. The official
+* plugins' `schemaVersion`s follow the same rule. A bump only adds tables:
+* every database's migrator creates missing tables and then records the
+* version, and none of them changes an existing table, so changing one
+* needs a migration step of its own first. The schema fence answers 503 on
+* a database whose row differs, until it runs.
+*/
+const HOT_UPDATER_SCHEMA_VERSION = "1.2.0";
+const bundles = defineTable({
+	id: {
+		type: "string",
+		maxLength: 36
+	},
+	platform: {
+		type: "string",
+		maxLength: 16
+	},
+	git_commit_hash: {
+		type: "string",
+		maxLength: 255,
+		required: false
+	},
+	metadata: { type: "json" },
+	manifest_storage_uri: { type: "string" },
+	manifest_file_hash: { type: "string" },
+	asset_base_storage_uri: { type: "string" }
+}, {
+	key: ["id"],
+	indexes: {
+		byPlatform: {
+			eq: ["platform"],
+			sort: ["id"]
+		},
+		all: {
+			eq: [],
+			sort: ["id"]
+		}
+	}
+});
+const bundlePatches = defineTable({
+	id: {
+		type: "string",
+		maxLength: 255
+	},
+	bundle_id: {
+		type: "string",
+		maxLength: 36,
+		references: {
+			model: "bundles",
+			onDelete: "cascade"
+		}
+	},
+	base_bundle_id: {
+		type: "string",
+		maxLength: 36,
+		references: {
+			model: "bundles",
+			onDelete: "cascade"
+		}
+	},
+	base_file_hash: { type: "string" },
+	patch_file_hash: { type: "string" },
+	patch_storage_uri: { type: "string" },
+	byte_size: { type: "integer" },
+	order_index: { type: "integer" }
+}, {
+	key: ["id"],
+	indexes: {
+		pair: {
+			eq: ["bundle_id", "base_bundle_id"],
+			sort: [],
+			unique: true
+		},
+		byBundle: {
+			eq: ["bundle_id"],
+			sort: ["order_index"],
+			root: { model: "bundles" }
+		},
+		byBase: {
+			eq: ["base_bundle_id"],
+			sort: ["bundle_id"]
+		}
+	}
+});
+const releases = defineTable({
+	id: {
+		type: "string",
+		maxLength: 36
+	},
+	revision: { type: "integer" },
+	scope_key: {
+		type: "string",
+		maxLength: 2048,
+		ascii: true
+	},
+	channel_id: {
+		...CHANNEL_ID,
+		references: {
+			model: "channels",
+			onDelete: "restrict"
+		}
+	},
+	platform: {
+		type: "string",
+		maxLength: 16
+	},
+	kind: {
+		type: "string",
+		maxLength: 16
+	},
+	bundle_id: {
+		type: "string",
+		maxLength: 36,
+		required: false,
+		references: {
+			model: "bundles",
+			onDelete: "restrict"
+		}
+	},
+	strategy: {
+		type: "string",
+		maxLength: 16
+	},
+	target_app_version: {
+		type: "string",
+		required: false
+	},
+	fingerprint_hash: {
+		type: "string",
+		maxLength: 255,
+		required: false
+	},
+	enabled: { type: "boolean" },
+	should_force_update: { type: "boolean" },
+	message: {
+		type: "string",
+		required: false
+	},
+	rollout_cohort_count: { type: "integer" },
+	target_cohorts: { type: "json" },
+	operation: {
+		type: "string",
+		maxLength: 16
+	},
+	source_release_id: {
+		type: "string",
+		maxLength: 36,
+		required: false,
+		references: {
+			model: "releases",
+			onDelete: "none"
+		}
+	},
+	created_at_ms: { type: "integer" },
+	updated_at_ms: { type: "integer" }
+}, {
+	key: ["id"],
+	indexes: {
+		byScope: {
+			eq: ["scope_key"],
+			sort: ["id"],
+			root: { model: "release_catalogs" }
+		},
+		byScopeEnabled: {
+			eq: ["scope_key", "enabled"],
+			sort: ["id"],
+			root: { model: "release_catalogs" }
+		},
+		byChannelPlatform: {
+			eq: ["channel_id", "platform"],
+			sort: ["id"]
+		},
+		byChannelPlatformEnabled: {
+			eq: [
+				"channel_id",
+				"platform",
+				"enabled"
+			],
+			sort: ["id"]
+		},
+		byBundle: {
+			eq: ["bundle_id"],
+			sort: ["id"]
+		},
+		all: {
+			eq: [],
+			sort: ["id"]
+		}
+	}
+});
+/** One compiled catalog per scope; the update check reads exactly this row. */
+const releaseCatalogs = defineTable({
+	scope_key: {
+		type: "string",
+		maxLength: 2048,
+		ascii: true
+	},
+	catalog_id: {
+		type: "string",
+		maxLength: 255
+	},
+	strategy: {
+		type: "string",
+		maxLength: 16
+	},
+	channel_id: {
+		...CHANNEL_ID,
+		references: {
+			model: "channels",
+			onDelete: "none"
+		}
+	},
+	channel_key: {
+		type: "string",
+		maxLength: 1400,
+		ascii: true
+	},
+	platform: {
+		type: "string",
+		maxLength: 16
+	},
+	fingerprint_hash: {
+		type: "string",
+		maxLength: 255,
+		required: false
+	},
+	generation: { type: "integer" },
+	payload: { type: "string" },
+	catalog_hash: {
+		type: "string",
+		maxLength: 71
+	},
+	byte_size: { type: "integer" },
+	is_tombstone: { type: "boolean" },
+	updated_at_ms: { type: "integer" }
+}, {
+	key: ["scope_key"],
+	indexes: { all: {
+		eq: [],
+		sort: ["scope_key"]
+	} }
+});
+const channels = defineTable({
+	id: CHANNEL_ID,
+	name: {
+		type: "string",
+		maxLength: 255,
+		unique: true
+	}
+}, {
+	key: ["id"],
+	indexes: { all: {
+		eq: [],
+		sort: ["name"]
+	} }
+});
+/**
+* The native builds `native-build android` and `native-build ios` track, newest first
+* in each scope: a platform, a channel, and the fingerprint or app version
+* the build compiled in. `min_bundle_id` names the build's built-in bundle,
+* a `bundles` row no release publishes. Its references keep no counters, so
+* adding this table changes no existing one; a channel with builds is
+* refused deletion through `byChannel`. `build_key` is the native build key
+* of every input the artifact was built from (`nbk1:` and a SHA-256), which
+* a build with the same inputs reuses it by; a build registered without
+* one is never reused. `build_number` is the artifact's `CFBundleVersion`
+* or `versionCode`. `submitted_to`, `submitted_at_ms` and
+* `submitted_version` record the store track a build went to, when, and
+* the store's label of the build; they stay null for a build no store took.
+*/
+const nativeBuilds = defineTable({
+	id: {
+		type: "string",
+		maxLength: 36
+	},
+	scope_key: {
+		type: "string",
+		maxLength: 2048,
+		ascii: true
+	},
+	platform: {
+		type: "string",
+		maxLength: 16
+	},
+	channel_id: {
+		...CHANNEL_ID,
+		references: {
+			model: "channels",
+			onDelete: "none"
+		}
+	},
+	fingerprint_hash: {
+		type: "string",
+		maxLength: 255,
+		required: false
+	},
+	app_version: {
+		type: "string",
+		required: false
+	},
+	min_bundle_id: {
+		type: "string",
+		maxLength: 36,
+		unique: true,
+		references: {
+			model: "bundles",
+			onDelete: "none"
+		}
+	},
+	artifact_kind: {
+		type: "string",
+		maxLength: 16
+	},
+	artifact_storage_uri: { type: "string" },
+	byte_size: { type: "integer" },
+	git_commit_hash: {
+		type: "string",
+		maxLength: 255,
+		required: false
+	},
+	created_at_ms: { type: "integer" },
+	build_key: {
+		type: "string",
+		maxLength: 69,
+		ascii: true,
+		required: false
+	},
+	build_number: {
+		type: "string",
+		maxLength: 64,
+		required: false
+	},
+	submitted_to: {
+		type: "string",
+		maxLength: 16,
+		required: false
+	},
+	submitted_at_ms: {
+		type: "integer",
+		required: false
+	},
+	submitted_version: {
+		type: "string",
+		maxLength: 255,
+		required: false
+	}
+}, {
+	key: ["id"],
+	indexes: {
+		byScope: {
+			eq: ["scope_key"],
+			sort: ["id"]
+		},
+		byBuildKey: {
+			eq: ["scope_key", "build_key"],
+			sort: ["id"]
+		},
+		byChannel: {
+			eq: ["channel_id"],
+			sort: ["id"],
+			root: { model: "channels" }
+		},
+		all: {
+			eq: [],
+			sort: ["id"]
+		}
+	}
+});
 /** Core's module: always installed, never a plugin. */
 const coreModule = {
 	id: "core",
 	schema: {
-		bundles: defineTable({
-			id: {
-				type: "string",
-				maxLength: 36
-			},
-			platform: {
-				type: "string",
-				maxLength: 16
-			},
-			git_commit_hash: {
-				type: "string",
-				maxLength: 255,
-				required: false
-			},
-			metadata: { type: "json" },
-			manifest_storage_uri: { type: "string" },
-			manifest_file_hash: { type: "string" },
-			asset_base_storage_uri: { type: "string" }
-		}, {
-			key: ["id"],
-			indexes: {
-				byPlatform: {
-					eq: ["platform"],
-					sort: ["id"]
-				},
-				all: {
-					eq: [],
-					sort: ["id"]
-				}
-			}
-		}),
-		bundle_patches: defineTable({
-			id: {
-				type: "string",
-				maxLength: 255
-			},
-			bundle_id: {
-				type: "string",
-				maxLength: 36,
-				references: {
-					model: "bundles",
-					onDelete: "cascade"
-				}
-			},
-			base_bundle_id: {
-				type: "string",
-				maxLength: 36,
-				references: {
-					model: "bundles",
-					onDelete: "cascade"
-				}
-			},
-			base_file_hash: { type: "string" },
-			patch_file_hash: { type: "string" },
-			patch_storage_uri: { type: "string" },
-			byte_size: { type: "integer" },
-			order_index: { type: "integer" }
-		}, {
-			key: ["id"],
-			indexes: {
-				pair: {
-					eq: ["bundle_id", "base_bundle_id"],
-					sort: [],
-					unique: true
-				},
-				byBundle: {
-					eq: ["bundle_id"],
-					sort: ["order_index"],
-					root: { model: "bundles" }
-				},
-				byBase: {
-					eq: ["base_bundle_id"],
-					sort: ["bundle_id"]
-				}
-			}
-		}),
-		releases: defineTable({
-			id: {
-				type: "string",
-				maxLength: 36
-			},
-			revision: { type: "integer" },
-			scope_key: {
-				type: "string",
-				maxLength: 2048,
-				ascii: true
-			},
-			channel_id: {
-				...CHANNEL_ID,
-				references: {
-					model: "channels",
-					onDelete: "restrict"
-				}
-			},
-			platform: {
-				type: "string",
-				maxLength: 16
-			},
-			kind: {
-				type: "string",
-				maxLength: 16
-			},
-			bundle_id: {
-				type: "string",
-				maxLength: 36,
-				required: false,
-				references: {
-					model: "bundles",
-					onDelete: "restrict"
-				}
-			},
-			strategy: {
-				type: "string",
-				maxLength: 16
-			},
-			target_app_version: {
-				type: "string",
-				required: false
-			},
-			fingerprint_hash: {
-				type: "string",
-				maxLength: 255,
-				required: false
-			},
-			enabled: { type: "boolean" },
-			should_force_update: { type: "boolean" },
-			message: {
-				type: "string",
-				required: false
-			},
-			rollout_cohort_count: { type: "integer" },
-			target_cohorts: { type: "json" },
-			operation: {
-				type: "string",
-				maxLength: 16
-			},
-			source_release_id: {
-				type: "string",
-				maxLength: 36,
-				required: false,
-				references: {
-					model: "releases",
-					onDelete: "none"
-				}
-			},
-			created_at_ms: { type: "integer" },
-			updated_at_ms: { type: "integer" }
-		}, {
-			key: ["id"],
-			indexes: {
-				byScope: {
-					eq: ["scope_key"],
-					sort: ["id"],
-					root: { model: "release_catalogs" }
-				},
-				byScopeEnabled: {
-					eq: ["scope_key", "enabled"],
-					sort: ["id"],
-					root: { model: "release_catalogs" }
-				},
-				byChannelPlatform: {
-					eq: ["channel_id", "platform"],
-					sort: ["id"]
-				},
-				byChannelPlatformEnabled: {
-					eq: [
-						"channel_id",
-						"platform",
-						"enabled"
-					],
-					sort: ["id"]
-				},
-				byBundle: {
-					eq: ["bundle_id"],
-					sort: ["id"]
-				},
-				all: {
-					eq: [],
-					sort: ["id"]
-				}
-			}
-		}),
-		release_catalogs: defineTable({
-			scope_key: {
-				type: "string",
-				maxLength: 2048,
-				ascii: true
-			},
-			catalog_id: {
-				type: "string",
-				maxLength: 255
-			},
-			strategy: {
-				type: "string",
-				maxLength: 16
-			},
-			channel_id: {
-				...CHANNEL_ID,
-				references: {
-					model: "channels",
-					onDelete: "none"
-				}
-			},
-			channel_key: {
-				type: "string",
-				maxLength: 1400,
-				ascii: true
-			},
-			platform: {
-				type: "string",
-				maxLength: 16
-			},
-			fingerprint_hash: {
-				type: "string",
-				maxLength: 255,
-				required: false
-			},
-			generation: { type: "integer" },
-			payload: { type: "string" },
-			catalog_hash: {
-				type: "string",
-				maxLength: 71
-			},
-			byte_size: { type: "integer" },
-			is_tombstone: { type: "boolean" },
-			updated_at_ms: { type: "integer" }
-		}, {
-			key: ["scope_key"],
-			indexes: { all: {
-				eq: [],
-				sort: ["scope_key"]
-			} }
-		}),
-		channels: defineTable({
-			id: CHANNEL_ID,
-			name: {
-				type: "string",
-				maxLength: 255,
-				unique: true
-			}
-		}, {
-			key: ["id"],
-			indexes: { all: {
-				eq: [],
-				sort: ["name"]
-			} }
-		}),
+		bundles,
+		bundle_patches: bundlePatches,
+		releases,
+		release_catalogs: releaseCatalogs,
+		channels,
 		bundle_totals: defineAggregate({ platform_key: {
 			type: "string",
 			maxLength: 16
@@ -2327,7 +2484,8 @@ const coreModule = {
 				eq: ["platform_key"],
 				sort: []
 			} }
-		})
+		}),
+		native_builds: nativeBuilds
 	}
 };
 //#endregion
@@ -3442,14 +3600,14 @@ const createEngineMigrator = (options) => {
 	return {
 		getVersion,
 		getNameVariants: async () => void 0,
-		next: async () => await getVersion() === "1.0.0" ? void 0 : { version: HOT_UPDATER_SCHEMA_VERSION },
+		next: async () => await getVersion() === "1.2.0" ? void 0 : { version: HOT_UPDATER_SCHEMA_VERSION },
 		previous: async () => void 0,
 		up: makeResult,
 		down: async () => {
 			throw new Error("No previous schema to migrate to.");
 		},
 		migrateTo: async (version, migrate) => {
-			if (version !== "1.0.0") throw new Error(`Invalid version ${version}`);
+			if (version !== "1.2.0") throw new Error(`Invalid version ${version}`);
 			return makeResult(migrate);
 		},
 		migrateToLatest: makeResult
@@ -4181,9 +4339,9 @@ const createDatabaseEngine = ({ batching, now = Date.now, meter, ...options }) =
 */
 const pluginTablesFix = (database) => {
 	const { createMigrator, generateSchema } = database;
-	const managed = "A managed server runs only its provider's plugins, and rerunning `hot-updater init --provider <provider>` applies the provider's migrations.";
+	const doctor = "Run `npx hot-updater doctor` in the project whose hot-updater.config.ts names this database: it names the command that migrates it.";
 	const serverProject = "Run `hot-updater db` commands in the server's project: they load the server file named on the command line, or src/hotUpdater.* or src/db.*, and don't read hot-updater.config.ts.";
-	return createMigrator !== void 0 ? `Run \`hot-updater db migrate\`. ${managed} ${serverProject}` : generateSchema !== void 0 ? `Run \`hot-updater db generate\` and apply the file it writes. ${managed} ${serverProject}` : managed;
+	return createMigrator !== void 0 ? `${doctor} In a server project, run \`hot-updater db migrate\`. ${serverProject}` : generateSchema !== void 0 ? `${doctor} On a database \`hot-updater init\` created, that is init again with its saved inputs; for your own server, run \`hot-updater db generate\` and apply the file it writes. ${serverProject}` : `${doctor} On a database \`hot-updater init\` created, that is init again with its saved inputs.`;
 };
 /**
 * The storage engine over a database, as a server runs it: core's tables
@@ -4525,7 +4683,7 @@ const createKvAdapter = ({ store, tablePrefix = "" }) => {
 };
 //#endregion
 //#region ../../packages/server/dist/version.mjs
-const HOT_UPDATER_SERVER_VERSION = "1.1.3";
+const HOT_UPDATER_SERVER_VERSION = "1.2.0-rc.0";
 //#endregion
 //#region ../../packages/server/dist/handlerVersionRoutes.mjs
 /**
@@ -5318,8 +5476,8 @@ const baseBundleIdsOf = (row, range, bundleId, limit) => {
 //#endregion
 //#region ../../packages/server/dist/core/reads.mjs
 const PAGE$3 = 500;
-const pick = (fields) => (row) => Object.fromEntries(fields.map((field) => [field, row[field]]));
-const toBundleRow = pick([
+const pick$1 = (fields) => (row) => Object.fromEntries(fields.map((field) => [field, row[field]]));
+const toBundleRow = pick$1([
 	"id",
 	"platform",
 	"git_commit_hash",
@@ -5328,7 +5486,7 @@ const toBundleRow = pick([
 	"manifest_file_hash",
 	"asset_base_storage_uri"
 ]);
-const toPatchRow = pick([
+const toPatchRow = pick$1([
 	"id",
 	"bundle_id",
 	"base_bundle_id",
@@ -5338,7 +5496,7 @@ const toPatchRow = pick([
 	"byte_size",
 	"order_index"
 ]);
-const toReleaseRow = pick([
+const toReleaseRow = pick$1([
 	"id",
 	"revision",
 	"scope_key",
@@ -5359,7 +5517,7 @@ const toReleaseRow = pick([
 	"created_at_ms",
 	"updated_at_ms"
 ]);
-const toCatalogRow = pick([
+const toCatalogRow = pick$1([
 	"scope_key",
 	"catalog_id",
 	"strategy",
@@ -5374,7 +5532,7 @@ const toCatalogRow = pick([
 	"is_tombstone",
 	"updated_at_ms"
 ]);
-const toChannelRow = pick(["id", "name"]);
+const toChannelRow = pick$1(["id", "name"]);
 /** Every page of one read, in order. */
 const drain$1 = async (read) => {
 	const rows = [];
@@ -5386,6 +5544,8 @@ const drain$1 = async (read) => {
 	} while (cursor !== void 0);
 	return rows;
 };
+/** A keyset page's range: the keys strictly after `after`, in `order`. */
+const after = (input) => input.after === void 0 ? {} : { range: (input.order ?? "asc") === "asc" ? { gt: input.after } : { lt: input.after } };
 /** Core's reads, each through one declared index or key. */
 const createCoreReads = (db, storage) => {
 	/** A bundle row's patches, exactly as many as its reference counter holds. */
@@ -5410,7 +5570,6 @@ const createCoreReads = (db, storage) => {
 			childCount: row._refs_bundle_patches_base_bundle_id ?? 0
 		};
 	};
-	const after = (input) => input.after === void 0 ? {} : { range: (input.order ?? "asc") === "asc" ? { gt: input.after } : { lt: input.after } };
 	return {
 		/** The update check: one point read of its scope's catalog. */
 		async getReleaseCatalog(input) {
@@ -5601,9 +5760,13 @@ const insertBundle = (tx, row) => {
 	tx.create("bundles", row);
 	countBundle(tx, row.platform, 1);
 };
-const updateBundle = (tx, current, set) => {
+/**
+* Updates a bundle; a platform change moves it between platform totals,
+* except for a native build's built-in bundle, which they never count.
+*/
+const updateBundle = (tx, current, set, { counted = true } = {}) => {
 	tx.update("bundles", current, set);
-	if (set.platform !== void 0 && set.platform !== current.platform) {
+	if (counted && set.platform !== void 0 && set.platform !== current.platform) {
 		countBundle(tx, current.platform, -1);
 		countBundle(tx, set.platform, 1);
 	}
@@ -5664,7 +5827,7 @@ const insertChannel = async (db, row) => {
 		throw error;
 	}
 };
-/** Deletes a channel no release uses: 1 read + 1 write. */
+/** Deletes a channel no release or native build uses: 1 read, 1 query, 1 write. */
 const deleteChannel = (db, id) => db.transaction(async (tx) => {
 	const row = await tx.findOne("channels", { id });
 	if (row === null) return {
@@ -5675,10 +5838,243 @@ const deleteChannel = (db, id) => db.transaction(async (tx) => {
 		deleted: false,
 		reason: "not_empty"
 	};
+	const { rows: builds } = await tx.findMany("native_builds", {
+		index: "byChannel",
+		where: { channel_id: id },
+		limit: 1
+	});
+	if (builds.length > 0) return {
+		deleted: false,
+		reason: "not_empty"
+	};
 	await tx.delete("channels", row);
 	return { deleted: true };
 });
 //#endregion
+//#region ../../packages/server/dist/core/nativeBuilds.mjs
+/** The artifacts each platform's build produces. */
+const ARTIFACT_KINDS = {
+	android: ["apk", "aab"],
+	ios: ["ipa", "app"]
+};
+/** `native_builds.scope_key`'s bound in core's schema. */
+const SCOPE_KEY_MAX_LENGTH = 2048;
+/** The `git_commit_hash` bound of `bundles` and `native_builds`. */
+const GIT_COMMIT_HASH_MAX_LENGTH = 255;
+/**
+* A native build key: `nbk1:` and a SHA-256, as the CLI computes it. The
+* format is the CLI's convention, implemented here so the registry stores
+* and looks up nothing else.
+*/
+const BUILD_KEY = /^nbk1:[0-9a-f]{64}$/;
+/** A native build or scope core cannot store or look up: the caller's input. */
+var NativeBuildInputError = class extends TypeError {
+	name = "NativeBuildInputError";
+};
+const pick = (row) => ({
+	id: row.id,
+	scope_key: row.scope_key,
+	platform: row.platform,
+	channel_id: row.channel_id,
+	fingerprint_hash: row.fingerprint_hash ?? null,
+	app_version: row.app_version ?? null,
+	min_bundle_id: row.min_bundle_id,
+	artifact_kind: row.artifact_kind,
+	artifact_storage_uri: row.artifact_storage_uri,
+	byte_size: row.byte_size,
+	git_commit_hash: row.git_commit_hash ?? null,
+	created_at_ms: row.created_at_ms,
+	build_key: row.build_key ?? null,
+	build_number: row.build_number ?? null,
+	submitted_to: row.submitted_to ?? null,
+	submitted_at_ms: row.submitted_at_ms ?? null,
+	submitted_version: row.submitted_version ?? null
+});
+/** The store track each platform's builds are submitted to. */
+const SUBMISSION_DESTINATIONS = {
+	android: "play-internal",
+	ios: "testflight"
+};
+/** `native_builds.build_number`'s bound in core's schema. */
+const BUILD_NUMBER_MAX_LENGTH = 64;
+/** `native_builds.submitted_version`'s bound in core's schema. */
+const SUBMITTED_VERSION_MAX_LENGTH = 255;
+/**
+* A native build scope's key: the Release Catalog scope key of a
+* fingerprint, or of the app-version strategy followed by the exact app
+* version the build compiled in. One key serves both strategies, so one
+* index finds the newest build of either.
+*/
+const nativeBuildScopeKey = (scope) => {
+	let scopeKey;
+	try {
+		const channelKey = encodeChannelKey(scope.channel);
+		scopeKey = scope.fingerprintHash === null ? `${createReleaseCatalogScopeKey({
+			channelKey,
+			platform: scope.platform,
+			strategy: "APP_VERSION"
+		})}:${encodeURIComponent(scope.appVersion)}` : createReleaseCatalogScopeKey({
+			channelKey,
+			fingerprintHash: scope.fingerprintHash,
+			platform: scope.platform,
+			strategy: "FINGERPRINT"
+		});
+	} catch (error) {
+		throw new NativeBuildInputError(`Invalid native build scope: ${error instanceof Error ? error.message : String(error)}.`);
+	}
+	if (scopeKey.length > SCOPE_KEY_MAX_LENGTH) throw new NativeBuildInputError(`Invalid native build scope: its key is longer than ${SCOPE_KEY_MAX_LENGTH} characters; shorten the channel or app version.`);
+	return scopeKey;
+};
+/** Whether `bundleId` is a native build's built-in bundle: one unique read. */
+const isBuiltInBundle = async (db, bundleId) => await db.findOne("native_builds", { min_bundle_id: bundleId }) !== null;
+const problemOf = ({ id, minBundleId, platform, channel, fingerprintHash, appVersion, gitCommitHash, buildKey, buildNumber, artifact }) => {
+	if (!isUUIDv7(id)) return "id must be a UUIDv7";
+	if (!isUUIDv7(minBundleId)) return "minBundleId must be the UUIDv7 a release build compiles in";
+	if (platform !== "ios" && platform !== "android") return "platform must be ios or android";
+	if (channel.trim().length === 0) return "channel is required";
+	if (gitCommitHash !== null && gitCommitHash.length > GIT_COMMIT_HASH_MAX_LENGTH) return `gitCommitHash must be at most ${GIT_COMMIT_HASH_MAX_LENGTH} characters`;
+	if (fingerprintHash === null === (appVersion === null)) return "exactly one of fingerprintHash and appVersion is required";
+	if (buildKey !== null && !BUILD_KEY.test(buildKey)) return "buildKey must be nbk1: and a SHA-256, or null";
+	if (buildNumber !== void 0 && buildNumber !== null && (buildNumber.trim().length === 0 || buildNumber.length > BUILD_NUMBER_MAX_LENGTH)) return `buildNumber must be the artifact's build number, up to ${BUILD_NUMBER_MAX_LENGTH} characters, or null`;
+	const kinds = ARTIFACT_KINDS[platform];
+	if (!kinds.includes(artifact.kind)) return `artifact.kind of an ${platform} build must be ${kinds.join(" or ")}`;
+	if (!Number.isSafeInteger(artifact.byteSize) || artifact.byteSize < 0) return "artifact.byteSize must be a byte count";
+	return null;
+};
+/** The native build registry: core's `native_builds` and the built-in bundle rows. */
+const createNativeBuildApi = (db, { now = Date.now } = {}) => ({
+	async registerNativeBuild(registration) {
+		const problem = problemOf(registration);
+		if (problem !== null) throw new NativeBuildInputError(`Invalid native build: ${problem}.`);
+		const scopeKey = nativeBuildScopeKey(registration);
+		const channelId = `channel:${encodeChannelKey(registration.channel)}`;
+		const { embeddedBundle } = registration;
+		const row = {
+			id: registration.id,
+			scope_key: scopeKey,
+			platform: registration.platform,
+			channel_id: channelId,
+			fingerprint_hash: registration.fingerprintHash,
+			app_version: registration.appVersion,
+			min_bundle_id: registration.minBundleId,
+			artifact_kind: registration.artifact.kind,
+			artifact_storage_uri: registration.artifact.storageUri,
+			byte_size: registration.artifact.byteSize,
+			git_commit_hash: registration.gitCommitHash,
+			created_at_ms: now(),
+			build_key: registration.buildKey,
+			build_number: registration.buildNumber ?? null,
+			submitted_to: null,
+			submitted_at_ms: null,
+			submitted_version: null
+		};
+		for (let attempt = 1;; attempt += 1) {
+			await insertChannel(db, {
+				id: channelId,
+				name: registration.channel
+			});
+			try {
+				await db.transaction(async (tx) => {
+					tx.create("bundles", {
+						id: registration.minBundleId,
+						platform: registration.platform,
+						git_commit_hash: registration.gitCommitHash,
+						metadata: embeddedBundle.metadata ?? {},
+						manifest_storage_uri: embeddedBundle.manifestStorageUri,
+						manifest_file_hash: embeddedBundle.manifestFileHash,
+						asset_base_storage_uri: embeddedBundle.assetBaseStorageUri
+					});
+					tx.create("native_builds", row);
+				});
+				break;
+			} catch (error) {
+				if (!(error instanceof DatabaseConstraintError)) throw error;
+				if (error.reason === "exists" || error.reason === "unique") throw new DatabaseConstraintError(error.reason, "native_builds");
+				if (attempt < 3 && error.reason === "not_found" && error.model === "channels") continue;
+				throw error;
+			}
+		}
+		return row;
+	},
+	async getNativeBuild(id) {
+		const row = await db.findOne("native_builds", { id });
+		return row === null ? null : pick(row);
+	},
+	async findNativeBuild(scope, options) {
+		const scopeKey = nativeBuildScopeKey(scope);
+		const buildKey = options?.buildKey;
+		if (buildKey !== void 0 && !BUILD_KEY.test(buildKey)) throw new NativeBuildInputError("Invalid native build key: it must be nbk1: and a SHA-256.");
+		const { rows } = buildKey === void 0 ? await db.findMany("native_builds", {
+			index: "byScope",
+			where: { scope_key: scopeKey },
+			order: "desc",
+			limit: 1
+		}) : await db.findMany("native_builds", {
+			index: "byBuildKey",
+			where: {
+				scope_key: scopeKey,
+				build_key: buildKey
+			},
+			order: "desc",
+			limit: 1
+		});
+		return rows[0] === void 0 ? null : pick(rows[0]);
+	},
+	async recordNativeBuildSubmission(id, { destination, version }) {
+		if (version.trim().length === 0 || version.length > SUBMITTED_VERSION_MAX_LENGTH) throw new NativeBuildInputError(`Invalid native build submission: version must be the store's label of the build, up to ${SUBMITTED_VERSION_MAX_LENGTH} characters.`);
+		return db.transaction(async (tx) => {
+			const row = await tx.findOne("native_builds", { id });
+			if (row === null) return null;
+			const build = pick(row);
+			if (SUBMISSION_DESTINATIONS[build.platform] !== destination) throw new NativeBuildInputError(`Invalid native build submission: an ${build.platform} build is submitted to ${SUBMISSION_DESTINATIONS[build.platform]}, not ${destination}.`);
+			const set = {
+				submitted_to: destination,
+				submitted_at_ms: now(),
+				submitted_version: version
+			};
+			tx.update("native_builds", row, set);
+			return {
+				...build,
+				...set
+			};
+		});
+	},
+	async deleteNativeBuild(id) {
+		return db.transaction(async (tx) => {
+			const row = await tx.findOne("native_builds", { id });
+			if (row === null) return {
+				deleted: false,
+				reason: "not_found"
+			};
+			await tx.delete("native_builds", row);
+			const bundle = await tx.findOne("bundles", { id: row.min_bundle_id });
+			if (bundle !== null) await tx.delete("bundles", bundle);
+			return {
+				deleted: true,
+				nativeBuild: pick(row)
+			};
+		});
+	},
+	async listNativeBuilds(input) {
+		const page = {
+			order: input.order ?? "asc",
+			limit: input.limit
+		};
+		const { rows } = input.channelId === void 0 ? await db.findMany("native_builds", {
+			index: "all",
+			where: {},
+			...page,
+			...after(input)
+		}) : await db.findMany("native_builds", {
+			index: "byChannel",
+			where: { channel_id: input.channelId },
+			...page,
+			...after(input)
+		});
+		return rows.map(pick);
+	}
+});
+//#endregion
 //#region ../../packages/server/dist/core/releases.mjs
 const PAGE$1 = 500;
 const fail$1 = (code, message) => {
@@ -5992,6 +6388,7 @@ const createCoreOperations = (db, { now = Date.now } = {}) => {
 			if (!("bundleId" in deployment) || platforms.has(deployment.bundleId)) continue;
 			const row = await db.findOne("bundles", { id: deployment.bundleId });
 			if (row === null) throw new DatabaseBundleNotFoundError(deployment.bundleId);
+			if (await isBuiltInBundle(db, deployment.bundleId)) throw new ReleaseManagementError("TARGET_RELEASE_INVALID", `Bundle "${deployment.bundleId}" is a native build's built-in bundle, which no release publishes.`);
 			platforms.set(deployment.bundleId, toBundleRow(row).platform);
 		}
 		const updatedAtMs = now();
@@ -6187,7 +6584,8 @@ const createCoreOperations = (db, { now = Date.now } = {}) => {
 				id
 			};
 			const { id: _id, ...set } = bundleToRow(next);
-			updateBundle(tx, current, set);
+			const counted = set.platform === current.platform || !await isBuiltInBundle(tx, id);
+			updateBundle(tx, current, set, { counted });
 			if (patches !== void 0) await replaceBundlePatches(tx, current, bundleToPatchRows({
 				...next,
 				patches
@@ -6198,7 +6596,9 @@ const createCoreOperations = (db, { now = Date.now } = {}) => {
 				await db.transaction(async (tx) => {
 					for (const id of new Set(ids)) {
 						const current = await tx.findOne("bundles", { id });
-						if (current !== null) await deleteBundle(tx, current);
+						if (current === null) continue;
+						if (await isBuiltInBundle(tx, id)) throw new DatabaseRowReferencedError();
+						await deleteBundle(tx, current);
 					}
 				});
 			} catch (error) {
@@ -6250,6 +6650,7 @@ const createCoreApi = (db, storage, options = {}) => {
 	return {
 		...reads,
 		...createCoreOperations(purgingCachedRoutes(db, options.onCachedRoutesChange), options),
+		...createNativeBuildApi(db, options),
 		/** One read, which checks the schema settings first. */
 		ready: async () => {
 			await reads.listReleaseCatalogs({ limit: 1 });
@@ -6450,6 +6851,10 @@ const answer = async (operation) => {
 			code: "REFERENCED",
 			error: error.message
 		}, 409);
+		if (error instanceof DatabaseConstraintError && error.model === "native_builds") return json$2({
+			code: "NATIVE_BUILD_EXISTS",
+			error: "A native build with this ID or built-in bundle ID is already registered."
+		}, 409);
 		throw error;
 	}
 };
@@ -6552,6 +6957,42 @@ const bundleUpdateOf = (value, bundleId) => {
 	if (id !== void 0 && id !== bundleId) throw new HandlerBadRequestError("Bundle id mismatch");
 	return update;
 };
+const NATIVE_BUILD_ARTIFACT_KINDS = /* @__PURE__ */ new Set([
+	"apk",
+	"aab",
+	"ipa",
+	"app"
+]);
+/** A native build's scope: `fingerprintHash` or `appVersion`, never both. */
+const nativeBuildScopeOf = (url) => {
+	const params = url.searchParams;
+	const platform = platformOf(url);
+	const channel = params.get("channel");
+	const fingerprintHash = params.get("fingerprintHash");
+	const appVersion = params.get("appVersion");
+	if (platform === void 0 || !isText$2(channel) || fingerprintHash === null === (appVersion === null) || fingerprintHash === "" || appVersion === "") throw new HandlerBadRequestError("A native build lookup needs platform, channel, and fingerprintHash or appVersion.");
+	return fingerprintHash !== null ? {
+		platform,
+		channel,
+		fingerprintHash,
+		appVersion: null
+	} : {
+		platform,
+		channel,
+		fingerprintHash: null,
+		appVersion
+	};
+};
+/** A native build or scope core refuses: a bad request. */
+const refusingInvalid = async (operation) => {
+	try {
+		return await operation();
+	} catch (error) {
+		if (error instanceof NativeBuildInputError) throw new HandlerBadRequestError(error.message);
+		throw error;
+	}
+};
+const isNativeBuildRegistration = (value) => isRecord$5(value) && isText$2(value.id) && isText$2(value.minBundleId) && typeof value.platform === "string" && isPlatform(value.platform) && isText$2(value.channel) && isTextOrNull$1(value.fingerprintHash) && isTextOrNull$1(value.appVersion) && value.fingerprintHash === null !== (value.appVersion === null) && isTextOrNull$1(value.gitCommitHash) && isTextOrNull$1(value.buildKey) && (value.buildNumber === void 0 || isTextOrNull$1(value.buildNumber)) && isRecord$5(value.artifact) && typeof value.artifact.kind === "string" && NATIVE_BUILD_ARTIFACT_KINDS.has(value.artifact.kind) && isText$2(value.artifact.storageUri) && Number.isSafeInteger(value.artifact.byteSize) && value.artifact.byteSize >= 0 && isRecord$5(value.embeddedBundle) && isText$2(value.embeddedBundle.manifestStorageUri) && isText$2(value.embeddedBundle.manifestFileHash) && isText$2(value.embeddedBundle.assetBaseStorageUri) && (value.embeddedBundle.metadata === void 0 || isRecord$5(value.embeddedBundle.metadata));
 const scopeKeyOf = (params) => decodeMaybe(requireRouteParam(params, "scopeKey")) ?? "";
 /** Every admin route's handler, by the name `ADMIN_ROUTES` mounts it under. */
 const createAdminRouteHandlers = () => ({
@@ -6671,6 +7112,37 @@ const createAdminRouteHandlers = () => ({
 		}) });
 	}),
 	preflightReleaseCatalogRebuild: onCore(async (core, _request, params) => json$2({ data: await core.preflightReleaseCatalogRebuild(scopeKeyOf(params)) })),
+	registerNativeBuild: onCore(async (core, request) => {
+		const input = await body(request);
+		if (!isNativeBuildRegistration(input)) throw new HandlerBadRequestError("Invalid native build");
+		return json$2({ data: await refusingInvalid(() => core.registerNativeBuild(input)) }, 201);
+	}),
+	findNativeBuild: onCore(async (core, request) => {
+		const url = new URL(request.url);
+		const scope = nativeBuildScopeOf(url);
+		const buildKey = url.searchParams.get("buildKey");
+		return json$2({ data: await refusingInvalid(() => buildKey === null ? core.findNativeBuild(scope) : core.findNativeBuild(scope, { buildKey })) });
+	}),
+	getNativeBuild: onCore(async (core, _request, params) => json$2({ data: await core.getNativeBuild(requireRouteParam(params, "id")) })),
+	listNativeBuilds: onCore(async (core, request) => {
+		const url = new URL(request.url);
+		const input = keyset(url);
+		const channelId = url.searchParams.get("channelId");
+		return page(await core.listNativeBuilds({
+			...input,
+			...channelId === null ? {} : { channelId }
+		}), input, ({ id }) => id);
+	}),
+	recordNativeBuildSubmission: onCore(async (core, request, params) => {
+		const input = await body(request);
+		if (!isRecord$5(input) || input.destination !== "testflight" && input.destination !== "play-internal" || !isText$2(input.version)) throw new HandlerBadRequestError("A native build submission needs destination (testflight or play-internal) and version.");
+		const submission = {
+			destination: input.destination,
+			version: input.version
+		};
+		return json$2({ data: await refusingInvalid(() => core.recordNativeBuildSubmission(requireRouteParam(params, "id"), submission)) });
+	}),
+	deleteNativeBuild: onCore(async (core, _request, params) => json$2({ data: await core.deleteNativeBuild(requireRouteParam(params, "id")) })),
 	deleteBundles: onCore(async (core, request) => {
 		const { ids } = await body(request);
 		if (!Array.isArray(ids) || !ids.every((id) => typeof id === "string" && id.length > 0)) throw new HandlerBadRequestError("Bundle deletion needs ids");
@@ -6789,6 +7261,36 @@ const ADMIN_ROUTES = [
 		method: "GET",
 		path: "/base-candidates/:candidateKey",
 		handler: "findBaseCandidates"
+	},
+	{
+		method: "POST",
+		path: "/native-builds",
+		handler: "registerNativeBuild"
+	},
+	{
+		method: "GET",
+		path: "/native-builds/latest",
+		handler: "findNativeBuild"
+	},
+	{
+		method: "GET",
+		path: "/native-builds/:id",
+		handler: "getNativeBuild"
+	},
+	{
+		method: "GET",
+		path: "/native-builds",
+		handler: "listNativeBuilds"
+	},
+	{
+		method: "POST",
+		path: "/native-builds/:id/submission",
+		handler: "recordNativeBuildSubmission"
+	},
+	{
+		method: "DELETE",
+		path: "/native-builds/:id",
+		handler: "deleteNativeBuild"
 	}
 ];
 //#endregion
@@ -11618,11 +12120,20 @@ const adapterOf = ({ databaseId, collection = FIREBASE_V1_COLLECTION, aggregateB
 		collection
 	}) });
 };
+/**
+* The resource this database reaches, without credentials, under the key
+* `hot-updater doctor` reads to tell the database `hot-updater init` saved
+* from another (a convention CLAUDE.md documents).
+*/
+const DATABASE_TARGET = Symbol.for("@hot-updater/database-target");
 /** Hot Updater's database in one Firestore collection, through the storage engine. */
-const firebaseDatabase = (config) => createEngineDatabase({
-	name: "firebaseDatabase",
-	adapter: adapterOf(config),
-	aggregateBatching: config.aggregateBatching ?? {}
+const firebaseDatabase = (config) => ({
+	...createEngineDatabase({
+		name: "firebaseDatabase",
+		adapter: adapterOf(config),
+		aggregateBatching: config.aggregateBatching ?? {}
+	}),
+	...config.projectId === void 0 ? {} : { [DATABASE_TARGET]: `firestore/${config.projectId}/${config.databaseId ?? "(default)"}` }
 });
 //#endregion
 //#region src/firebaseStorage.ts
@@ -11630,7 +12141,8 @@ const firebaseDatabase = (config) => createEngineDatabase({
 const MAX_CACHED_SIGNED_URLS = 1e4;
 const firebaseStorage = (config) => {
 	const app = (0, firebase_admin_app.getApps)().length ? (0, firebase_admin_app.getApp)() : (0, firebase_admin_app.initializeApp)(config);
-	const bucket = (0, firebase_admin_storage.getStorage)(app).bucket(config.storageBucket);
+	let opened;
+	const bucket = () => opened ??= (0, firebase_admin_storage.getStorage)(app).bucket(config.storageBucket);
 	const getStorageKey = createStorageKeyBuilder(config.basePath);
 	/**
 	* Signed URLs by object. Without a private key, as in Cloud Functions, each
@@ -11641,7 +12153,7 @@ const firebaseStorage = (config) => {
 	const signedUrls = /* @__PURE__ */ new Map();
 	const signUrl = async (key) => {
 		const expiresAt = Date.now() + (config.signedUrlExpiresIn ?? 3600) * 1e3;
-		const [url] = await bucket.file(key).getSignedUrl({
+		const [url] = await bucket().file(key).getSignedUrl({
 			action: "read",
 			expires: expiresAt
 		});
@@ -11674,11 +12186,11 @@ const firebaseStorage = (config) => {
 		protocol: "gs",
 		async put({ key, body, contentType }) {
 			const storageKey = getStorageKey(key);
-			const bytes = new Uint8Array(await new Response(body).arrayBuffer());
-			await bucket.file(storageKey).save(bytes, { metadata: {
+			const [{ Readable }, { pipeline }] = await Promise.all([import("node:stream"), import("node:stream/promises")]);
+			await pipeline(Readable.fromWeb(body), bucket().file(storageKey).createWriteStream({ metadata: {
 				contentType,
 				cacheControl: "public, max-age=31536000, immutable"
-			} });
+			} }));
 			return { storageUri: createStorageUri({
 				bucket: config.storageBucket,
 				key: storageKey,
@@ -11688,7 +12200,7 @@ const firebaseStorage = (config) => {
 		async get({ storageUri }) {
 			const { key } = parseAndValidate(storageUri);
 			try {
-				const file = bucket.file(key);
+				const file = bucket().file(key);
 				const [[body], [metadata]] = await Promise.all([file.download(), file.getMetadata()]);
 				const headers = new Headers();
 				if (metadata.contentType) headers.set("content-type", metadata.contentType);
@@ -11713,12 +12225,12 @@ const firebaseStorage = (config) => {
 		},
 		async exists({ storageUri }) {
 			const { key } = parseAndValidate(storageUri);
-			const [exists] = await bucket.file(key).exists();
+			const [exists] = await bucket().file(key).exists();
 			return { exists };
 		},
 		async delete({ storageUri }) {
 			const { key } = parseAndValidate(storageUri);
-			await bucket.file(key).delete({ ignoreNotFound: true });
+			await bucket().file(key).delete({ ignoreNotFound: true });
 			return { deleted: true };
 		}
 	});