@hot-updater/firebase 1.2.0-rc.13 → 1.2.0-rc.14

package/dist/firebase/functions/index.cjs

@@ -4603,7 +4603,7 @@ const createKvAdapter = ({ store, tablePrefix = "" }) => {
 };
 //#endregion
 //#region ../../packages/server/dist/version.mjs
-const HOT_UPDATER_SERVER_VERSION = "1.2.0-rc.13";
+const HOT_UPDATER_SERVER_VERSION = "1.2.0-rc.14";
 //#endregion
 //#region ../../packages/server/dist/handlerVersionRoutes.mjs
 /**

package/dist/index.cjs

@@ -658,10 +658,11 @@ const secretManager = ({ projectId, prefix = "hot-updater-", credentials }) => {
 		/**
 		* Adds `value` as the secret's newest version, creating the secret when
 		* it is missing, and waits until the `latest` alias resolves to it. Then
-		* it destroys the older versions this adapter added, which the secret's
-		* `hot-updater-versions` annotation lists: versions added any other way
-		* are never touched. The permissions this needs are checked before
-		* anything is written. A version that could not be destroyed stays
+		* it destroys the versions this adapter added before the previous one,
+		* which the secret's `hot-updater-versions` annotation lists, keeping
+		* the previous value: versions added any other way are never touched.
+		* The permissions this needs are checked on the secret, once it exists,
+		* before any version is added. A version that could not be destroyed stays
 		* listed for the next `set`. The annotation is updated against the
 		* secret's etag, so a concurrent `set` loses no listed version. When
 		* `latest` does not resolve to the new version in time, or the
@@ -684,10 +685,12 @@ const secretManager = ({ projectId, prefix = "hot-updater-", credentials }) => {
 			} });
 			const version = versionOf(isRecord(added.body) ? added.body.name : void 0);
 			if (!added.ok || !VERSION_ID_PATTERN.test(version)) throw requestError("add a version", secret, added, "secretmanager.versions.add on the secret");
+			const own = trackedVersions(current).filter((entry) => Number(entry) < Number(version));
+			const previous = own.reduce((newest, entry) => newest === void 0 || Number(entry) > Number(newest) ? entry : newest, void 0);
 			const visible = await waitForLatest(token, secret, version);
 			const destroyed = /* @__PURE__ */ new Set();
 			if (visible) {
-				const older = trackedVersions(current).filter((entry) => Number(entry) < Number(version));
+				const older = own.filter((entry) => entry !== previous);
 				const results = await Promise.all(older.map((entry) => destroy(token, secret, entry)));
 				older.forEach((entry, index) => {
 					if (results[index]) destroyed.add(entry);
@@ -703,7 +706,11 @@ const secretManager = ({ projectId, prefix = "hot-updater-", credentials }) => {
 						await delay(LATEST_RETRY_DELAYS_MS[attempt - 1] ?? 0);
 						base = await readSecret(token, secret) ?? {};
 					}
-					const listed = [.../* @__PURE__ */ new Set([version, ...trackedVersions(base)])].filter((entry) => !destroyed.has(entry));
+					const listed = [.../* @__PURE__ */ new Set([
+						version,
+						...previous === void 0 ? [] : [previous],
+						...trackedVersions(base)
+					])].filter((entry) => !destroyed.has(entry));
 					updated = await request(token, "PATCH", `${secret}?updateMask=annotations`, {
 						...base.etag === void 0 ? {} : { etag: base.etag },
 						annotations: {

package/dist/index.mjs

@@ -657,10 +657,11 @@ const secretManager = ({ projectId, prefix = "hot-updater-", credentials }) => {
 		/**
 		* Adds `value` as the secret's newest version, creating the secret when
 		* it is missing, and waits until the `latest` alias resolves to it. Then
-		* it destroys the older versions this adapter added, which the secret's
-		* `hot-updater-versions` annotation lists: versions added any other way
-		* are never touched. The permissions this needs are checked before
-		* anything is written. A version that could not be destroyed stays
+		* it destroys the versions this adapter added before the previous one,
+		* which the secret's `hot-updater-versions` annotation lists, keeping
+		* the previous value: versions added any other way are never touched.
+		* The permissions this needs are checked on the secret, once it exists,
+		* before any version is added. A version that could not be destroyed stays
 		* listed for the next `set`. The annotation is updated against the
 		* secret's etag, so a concurrent `set` loses no listed version. When
 		* `latest` does not resolve to the new version in time, or the
@@ -683,10 +684,12 @@ const secretManager = ({ projectId, prefix = "hot-updater-", credentials }) => {
 			} });
 			const version = versionOf(isRecord(added.body) ? added.body.name : void 0);
 			if (!added.ok || !VERSION_ID_PATTERN.test(version)) throw requestError("add a version", secret, added, "secretmanager.versions.add on the secret");
+			const own = trackedVersions(current).filter((entry) => Number(entry) < Number(version));
+			const previous = own.reduce((newest, entry) => newest === void 0 || Number(entry) > Number(newest) ? entry : newest, void 0);
 			const visible = await waitForLatest(token, secret, version);
 			const destroyed = /* @__PURE__ */ new Set();
 			if (visible) {
-				const older = trackedVersions(current).filter((entry) => Number(entry) < Number(version));
+				const older = own.filter((entry) => entry !== previous);
 				const results = await Promise.all(older.map((entry) => destroy(token, secret, entry)));
 				older.forEach((entry, index) => {
 					if (results[index]) destroyed.add(entry);
@@ -702,7 +705,11 @@ const secretManager = ({ projectId, prefix = "hot-updater-", credentials }) => {
 						await delay(LATEST_RETRY_DELAYS_MS[attempt - 1] ?? 0);
 						base = await readSecret(token, secret) ?? {};
 					}
-					const listed = [.../* @__PURE__ */ new Set([version, ...trackedVersions(base)])].filter((entry) => !destroyed.has(entry));
+					const listed = [.../* @__PURE__ */ new Set([
+						version,
+						...previous === void 0 ? [] : [previous],
+						...trackedVersions(base)
+					])].filter((entry) => !destroyed.has(entry));
 					updated = await request(token, "PATCH", `${secret}?updateMask=annotations`, {
 						...base.etag === void 0 ? {} : { etag: base.etag },
 						annotations: {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hot-updater/firebase",
   "type": "module",
-  "version": "1.2.0-rc.13",
+  "version": "1.2.0-rc.14",
   "description": "React Native OTA solution for self-hosted",
   "main": "dist/index.cjs",
   "types": "dist/index.d.cts",
@@ -38,10 +38,10 @@
   "dependencies": {
     "hono": "4.12.34",
     "google-auth-library": "10.7.0",
-    "@hot-updater/cli-tools": "1.2.0-rc.13",
-    "@hot-updater/plugin-core": "1.2.0-rc.13",
-    "@hot-updater/server": "1.2.0-rc.13",
-    "@hot-updater/protocol": "1.2.0-rc.13"
+    "@hot-updater/cli-tools": "1.2.0-rc.14",
+    "@hot-updater/protocol": "1.2.0-rc.14",
+    "@hot-updater/plugin-core": "1.2.0-rc.14",
+    "@hot-updater/server": "1.2.0-rc.14"
   },
   "publishConfig": {
     "access": "public"
@@ -56,8 +56,8 @@
     "firebase-tools": "15.29.0",
     "fkill": "^9.0.0",
     "mime": "^4.0.4",
-    "@hot-updater/mock": "1.2.0-rc.13",
-    "@hot-updater/test-utils": "1.2.0-rc.13"
+    "@hot-updater/mock": "1.2.0-rc.14",
+    "@hot-updater/test-utils": "1.2.0-rc.14"
   },
   "peerDependencies": {
     "firebase-admin": ">=11.10.0",