@hot-updater/server 1.0.0-rc.18 → 1.0.0-rc.21

package/dist/createHotUpdaterCore.d.mts

@@ -1,15 +1,43 @@
-import { ToolingDatabase } from "./db/types.mjs";
-import { AnyHotUpdaterPlugin, PluginApis } from "./plugins/definePlugin.mjs";
 import { CoreApi } from "./core/api.mjs";
+import { AnyHotUpdaterPlugin, PluginApis } from "./plugins/definePlugin.mjs";
 import { HotUpdaterHandlers } from "./handlerTypes.mjs";
 import "./handler.mjs";
-import { StoragePlugin } from "@hot-updater/plugin-core";
+import { PluginClientPlugin, StorageAdapter, ToolingDatabase } from "@hot-updater/plugin-core";
 //#region src/createHotUpdaterCore.d.ts
+/** A plugin's endpoint on `handlers.client`. */
+interface ClientEndpoint {
+  /** The id of the plugin that adds it. */
+  readonly plugin: string;
+  readonly method: string;
+  /** Relative to the handler's mount; `:name` segments are parameters. */
+  readonly path: string;
+}
+/** The plugin that decides who may call client routes. */
+interface ClientAuthProvider {
+  /** Its id. */
+  readonly plugin: string;
+  /**
+   * The request headers its decision reads, lowercase: what a cache in
+   * front of the server, such as a CDN, keys client routes on.
+   */
+  readonly varyHeaders: readonly string[];
+}
 type RuntimeHotUpdaterAPI<TPlugins extends readonly AnyHotUpdaterPlugin[] = readonly AnyHotUpdaterPlugin[]> = {
+  /**
+   * The routes a host mounts. On first access every storage adapter must
+   * serve downloads (`get` and `getDownloadUrl`), so a server fails where it
+   * mounts them, while tooling that only reads the definition, such as the
+   * CLI, can list storage that only uploads.
+   */
   readonly handlers: HotUpdaterHandlers;
-  /** Core's reads and typed writes: bundles, Releases, Catalogs, and channels. */
+  /**
+   * Core's reads and typed writes: bundles, Releases, Catalogs, and
+   * channels. The CLI and the console write through it, so their writes
+   * take the server's path: the plugins' schema fence, pruning during
+   * writes, the storage's file URLs, and the database's CDN purge.
+   */
   readonly core: CoreApi;
-  /** Each plugin's API by plugin id. */
+  /** Each plugin's API by plugin id, which the CLI's and the console's plugin features call. */
   readonly api: PluginApis<TPlugins>;
   /** The database's name, which `hot-updater db` commands read. */
   readonly adapterName: string;
@@ -20,6 +48,28 @@ type RuntimeHotUpdaterAPI<TPlugins extends readonly AnyHotUpdaterPlugin[] = read
    * it before it exits.
    */
   readonly flush: () => Promise<void>;
+  /**
+   * The database as configured. `hot-updater db` runs its tooling
+   * (`createMigrator`, `generateSchema`), and tooling done with the server
+   * closes it (`dispose`).
+   */
+  readonly database: ToolingDatabase;
+  /** The storage as configured, in order, as a frozen copy. */
+  readonly storage: readonly StorageAdapter[];
+  /** The plugins as configured, as a frozen copy, whose tables tooling creates. */
+  readonly plugins: TPlugins;
+  /**
+   * The client plugins an app adds to `HotUpdater.init`'s `plugins` for
+   * these plugins, each once, in plugin order: what init prints.
+   */
+  readonly clientPlugins: readonly PluginClientPlugin[];
+  /**
+   * The plugins' endpoints on `handlers.client`, which a host that routes
+   * by path, such as a CDN in front of the server, sends to it.
+   */
+  readonly clientEndpoints: readonly ClientEndpoint[];
+  /** The plugin that guards client routes; absent when they are public. */
+  readonly clientAuth?: ClientAuthProvider;
 };
 type HotUpdaterAPI = RuntimeHotUpdaterAPI;
 declare const REMOVED_CLIENT_ACCESS = "clientAccess objects were removed in 1.0: set clientAccess: \"public\", or add a plugin that provides clientAuth";
@@ -62,11 +112,14 @@ type ClientAccessRule<TPlugins extends readonly AnyHotUpdaterPlugin[]> = number
 type CreateHotUpdaterOptions<TPlugins extends readonly AnyHotUpdaterPlugin[] = readonly []> = {
   /** A provider's database on the storage engine, such as `kyselyAdapter(...)` or `postgres(...)`. */
   readonly database: ToolingDatabase;
-  /** Storage implementations used to read provider-specific storage URIs. */
-  readonly storage?: readonly StoragePlugin[];
+  /**
+   * Where bundles are stored: the server reads and signs the URIs of each
+   * adapter's protocol.
+   */
+  readonly storage?: readonly StorageAdapter[];
   /** The plugins the server runs; at most one provides clientAuth. Defaults to none. */
   readonly plugins?: TPlugins;
 } & ClientAccessRule<TPlugins>;
 declare function createHotUpdater<const TPlugins extends readonly AnyHotUpdaterPlugin[] = readonly []>(options: CreateHotUpdaterOptions<TPlugins>): RuntimeHotUpdaterAPI<NoInfer<TPlugins>>;
 //#endregion
-export { ClientAccessPolicy, ClientAccessRule, CreateHotUpdaterOptions, HotUpdaterAPI, RemovedClientAccess, RuntimeHotUpdaterAPI, createHotUpdater };
+export { ClientAccessPolicy, ClientAccessRule, ClientAuthProvider, ClientEndpoint, CreateHotUpdaterOptions, HotUpdaterAPI, RemovedClientAccess, RuntimeHotUpdaterAPI, createHotUpdater };

package/dist/createHotUpdaterCore.mjs

@@ -1,5 +1,5 @@
-import { toolingTargetOf } from "./db/coreDatabase.mjs";
 import { HotUpdaterConfigError } from "./assembly/configError.mjs";
+import { clientPluginsOf } from "./assembly/clientPlugins.mjs";
 import { assemblePlugins } from "./assembly/assemblePlugins.mjs";
 import { createHotUpdaterHandlers } from "./handler.mjs";
 import { createStorageAccess } from "./storageAccess.mjs";
@@ -26,32 +26,24 @@ const isPublic = (value) => {
 	if (value === "public") return true;
 	throw new HotUpdaterConfigError(isRecord(value) ? "clientAccess objects were removed in 1.0. Set clientAccess: \"public\", or add a plugin that provides clientAuth to plugins." : "clientAccess must be \"public\"; to protect client routes, add a plugin that provides clientAuth to plugins.");
 };
-const hotUpdaterCoreMetadata = Symbol.for("@hot-updater/server/core-metadata");
-function getHotUpdaterCoreMetadata(hotUpdater) {
-	return hotUpdater[hotUpdaterCoreMetadata];
-}
 function createHotUpdater(options) {
 	for (const key of ["authorityId", "catalogId"]) if (Object.hasOwn(options, key)) throw new TypeError(`Remove ${key} from createHotUpdater options. Catalog identity is managed internally.`);
 	const database = databaseOf(options.database);
-	const storagePlugins = (options.storage ?? []).map((storage) => {
-		assertStorageOperations(storage, ["get", "getDownloadUrl"]);
-		return storage;
-	});
-	const { downloadStorageObject, readStorageText, resolveFileUrl } = createStorageAccess(storagePlugins);
+	const storage = Object.freeze([...options.storage ?? []]);
+	const { downloadStorageObject, readStorageText, resolveFileUrl } = createStorageAccess(storage);
 	const publicClients = isPublic(options.clientAccess);
-	const plugins = assemblePlugins(options.plugins ?? [], database.adapter, {
-		storage: {
-			readStorageText,
-			resolveFileUrl
-		},
-		...database.onCachedRoutesChange === void 0 ? {} : { onCachedRoutesChange: () => database.onCachedRoutesChange() },
-		...database.aggregateBatching === void 0 ? {} : { batching: database.aggregateBatching }
-	});
+	const configured = Object.freeze([...options.plugins ?? []]);
+	const plugins = assemblePlugins(configured, database, { storage: {
+		readStorageText,
+		resolveFileUrl
+	} });
+	const clientPlugins = Object.freeze(clientPluginsOf(configured));
 	const clientAuth = plugins.clientAuth;
 	if (clientAuth !== void 0 && publicClients) throw new HotUpdaterConfigError(`Plugin "${clientAuth.plugin}" provides clientAuth, so remove clientAccess.`);
 	if (clientAuth === void 0 && !publicClients) throw new HotUpdaterConfigError("Set clientAccess to \"public\", or add a plugin that provides clientAuth.");
+	const varyHeaders = Object.freeze((clientAuth?.varyHeaders ?? []).map((header) => header.toLowerCase()));
 	const clientPolicy = clientAuth === void 0 ? void 0 : {
-		varyHeaders: clientAuth.varyHeaders.map((header) => header.toLowerCase()),
+		varyHeaders,
 		authenticate: (request) => clientAuth.authenticate(request.headers)
 	};
 	const handlers = createHotUpdaterHandlers({
@@ -61,22 +53,33 @@ function createHotUpdater(options) {
 		endpoints: plugins.endpoints,
 		plugins: Object.keys(plugins.api)
 	});
-	const api = {
+	let serving = false;
+	return {
 		adapterName: database.name,
-		handlers,
+		get handlers() {
+			if (!serving) {
+				for (const adapter of storage) assertStorageOperations(adapter, ["get", "getDownloadUrl"]);
+				serving = true;
+			}
+			return handlers;
+		},
 		core: plugins.core,
 		api: plugins.api,
-		flush: plugins.flush
+		flush: plugins.flush,
+		database,
+		storage,
+		plugins: configured,
+		clientPlugins,
+		clientEndpoints: Object.freeze(plugins.endpoints.filter((endpoint) => endpoint.access === "client").map(({ plugin, method, path }) => Object.freeze({
+			plugin,
+			method,
+			path
+		}))),
+		...clientAuth === void 0 ? {} : { clientAuth: Object.freeze({
+			plugin: clientAuth.plugin,
+			varyHeaders
+		}) }
 	};
-	Object.defineProperty(api, hotUpdaterCoreMetadata, {
-		enumerable: false,
-		value: {
-			database,
-			target: toolingTargetOf(options.plugins ?? []),
-			plugins: options.plugins ?? []
-		}
-	});
-	return api;
 }
 //#endregion
-export { createHotUpdater, getHotUpdaterCoreMetadata, hotUpdaterCoreMetadata };
+export { createHotUpdater };

package/dist/db/engineDrizzleSchema.cjs

@@ -1,5 +1,4 @@
-const require_fence = require("../database/fence.cjs");
-const require_sqlSchema = require("../database/sql/sqlSchema.cjs");
+let _hot_updater_plugin_core = require("@hot-updater/plugin-core");
 //#region src/db/engineDrizzleSchema.ts
 const drizzle = {
 	postgresql: {
@@ -24,7 +23,7 @@ const literal = (value) => JSON.stringify(value);
 */
 const generateDrizzleEngineSchema = (dialect, schema) => {
 	const { module, table: tableFunction } = drizzle[dialect];
-	const tables = [...schema.tables, require_fence.SETTINGS_TABLE];
+	const tables = [...schema.tables, _hot_updater_plugin_core.SETTINGS_TABLE];
 	const blocks = [];
 	const emit = (shape) => {
 		const columns = shape.columns.map((column) => `  ${literal(column.name)}: column(${literal(column.type)})(${literal(column.name)})${column.notNull ? ".notNull()" : ""}${column.default === void 0 ? "" : `.default(${column.default})`},`);
@@ -33,7 +32,7 @@ const generateDrizzleEngineSchema = (dialect, schema) => {
 		blocks.push(`export const ${shape.name} = ${tableFunction}(${literal(shape.name)}, {\n${columns.join("\n")}\n}, (table) => [\n${extras.map((extra) => `  ${extra},`).join("\n")}\n]);`);
 		for (const index of shape.indexes) if (index.kind === "table") emit(index.table);
 	};
-	for (const shape of require_sqlSchema.sqlTableShapes(dialect, tables)) emit(shape);
+	for (const shape of (0, _hot_updater_plugin_core.sqlTableShapes)(dialect, tables)) emit(shape);
 	return [
 		"// Generated by `hot-updater db generate` from Hot Updater's schema. Do not edit.",
 		`import { ${[

package/dist/db/engineDrizzleSchema.mjs

@@ -1,5 +1,4 @@
-import { SETTINGS_TABLE } from "../database/fence.mjs";
-import { sqlTableShapes } from "../database/sql/sqlSchema.mjs";
+import { SETTINGS_TABLE, sqlTableShapes } from "@hot-updater/plugin-core";
 //#region src/db/engineDrizzleSchema.ts
 const drizzle = {
 	postgresql: {

package/dist/db/enginePrismaSchema.cjs

@@ -1,5 +1,4 @@
-const require_fence = require("../database/fence.cjs");
-const require_sqlSchema = require("../database/sql/sqlSchema.cjs");
+let _hot_updater_plugin_core = require("@hot-updater/plugin-core");
 //#region src/db/enginePrismaSchema.ts
 const SCALARS = {
 	TEXT: "String",
@@ -41,7 +40,7 @@ const prismaColumn = (provider, { type }) => {
 const fieldName = (column) => column.startsWith("_") ? `hu${column}` : column;
 const list = (columns) => `[${columns.map(fieldName).join(", ")}]`;
 const flatten = (shapes) => shapes.flatMap((shape) => [shape, ...flatten(shape.indexes.flatMap((index) => index.kind === "table" ? [index.table] : []))]);
-const shapesOf = (provider, schema) => flatten(require_sqlSchema.sqlTableShapes(provider, [...schema.tables, require_fence.SETTINGS_TABLE]));
+const shapesOf = (provider, schema) => flatten((0, _hot_updater_plugin_core.sqlTableShapes)(provider, [...schema.tables, _hot_updater_plugin_core.SETTINGS_TABLE]));
 const renderField = (provider, column) => {
 	const { scalar, native } = prismaColumn(provider, column);
 	const name = fieldName(column.name);
@@ -74,8 +73,8 @@ const generatePrismaEngineSchema = (provider, schema) => shapesOf(provider, sche
 */
 const prismaCollationStatements = (provider, schema) => {
 	if (provider !== "postgresql" && provider !== "mysql") return [];
-	const quote = (name) => require_sqlSchema.quoteSql(provider, name);
-	return shapesOf(provider, schema).filter((shape) => shape.name !== require_fence.SETTINGS_TABLE.name).flatMap((shape) => {
+	const quote = (name) => (0, _hot_updater_plugin_core.quoteSql)(provider, name);
+	return shapesOf(provider, schema).filter((shape) => shape.name !== _hot_updater_plugin_core.SETTINGS_TABLE.name).flatMap((shape) => {
 		const changes = shape.columns.filter((column) => prismaColumn(provider, column).collate).map((column) => provider === "postgresql" ? `ALTER COLUMN ${quote(column.name)} TYPE ${column.type}` : `MODIFY ${quote(column.name)} ${column.type}${column.notNull ? " NOT NULL" : " NULL"}`);
 		return changes.length === 0 ? [] : [`ALTER TABLE ${quote(shape.name)} ${changes.join(", ")}`];
 	});

package/dist/db/enginePrismaSchema.d.cts

@@ -1,4 +1,4 @@
-import "../database/resolveSchema.cjs";
+import "@hot-updater/plugin-core";
 //#region src/db/enginePrismaSchema.d.ts
 type PrismaProvider = "postgresql" | "mysql" | "sqlite";
 //#endregion

package/dist/db/enginePrismaSchema.d.mts

@@ -1,4 +1,4 @@
-import "../database/resolveSchema.mjs";
+import "@hot-updater/plugin-core";
 //#region src/db/enginePrismaSchema.d.ts
 type PrismaProvider = "postgresql" | "mysql" | "sqlite";
 //#endregion

package/dist/db/enginePrismaSchema.mjs

@@ -1,5 +1,4 @@
-import { SETTINGS_TABLE } from "../database/fence.mjs";
-import { quoteSql, sqlTableShapes } from "../database/sql/sqlSchema.mjs";
+import { SETTINGS_TABLE, quoteSql, sqlTableShapes } from "@hot-updater/plugin-core";
 //#region src/db/enginePrismaSchema.ts
 const SCALARS = {
 	TEXT: "String",

package/dist/db/releaseCatalog.cjs

@@ -1,20 +1,20 @@
 let _hot_updater_plugin_core = require("@hot-updater/plugin-core");
-let _hot_updater_core = require("@hot-updater/core");
+let _hot_updater_protocol = require("@hot-updater/protocol");
 //#region src/db/releaseCatalog.ts
 /** A stored catalog payload, checked against its strategy's shape. */
 const parseCompiledCatalog = (payload, strategy) => {
 	const parsed = JSON.parse(payload);
-	if (typeof parsed !== "object" || parsed === null || Reflect.get(parsed, "schemaVersion") !== _hot_updater_core.RELEASE_CATALOG_SCHEMA_VERSION || Reflect.get(parsed, "strategy") !== strategy || Reflect.get(parsed, "fallbackPolicy") !== _hot_updater_core.RELEASE_CATALOG_FALLBACK_POLICY || !Array.isArray(Reflect.get(parsed, "releaseDescriptors"))) throw new Error("Stored Release catalog payload is invalid");
+	if (typeof parsed !== "object" || parsed === null || Reflect.get(parsed, "schemaVersion") !== _hot_updater_protocol.RELEASE_CATALOG_SCHEMA_VERSION || Reflect.get(parsed, "strategy") !== strategy || Reflect.get(parsed, "fallbackPolicy") !== _hot_updater_protocol.RELEASE_CATALOG_FALLBACK_POLICY || !Array.isArray(Reflect.get(parsed, "releaseDescriptors"))) throw new Error("Stored Release catalog payload is invalid");
 	if (strategy === "APP_VERSION" && !Array.isArray(Reflect.get(parsed, "segments"))) throw new Error("Stored app-version Release catalog is invalid");
 	if (strategy === "FINGERPRINT" && !Array.isArray(Reflect.get(parsed, "releaseIndexes"))) throw new Error("Stored fingerprint Release catalog is invalid");
 	return parsed;
 };
 /** The scope key an update check reads. */
-const releaseCatalogScopeKeyOf = (input) => input.strategy === "APP_VERSION" ? (0, _hot_updater_core.createReleaseCatalogScopeKey)({
+const releaseCatalogScopeKeyOf = (input) => input.strategy === "APP_VERSION" ? (0, _hot_updater_protocol.createReleaseCatalogScopeKey)({
 	channelKey: input.channelKey,
 	platform: input.platform,
 	strategy: "APP_VERSION"
-}) : (0, _hot_updater_core.createReleaseCatalogScopeKey)({
+}) : (0, _hot_updater_protocol.createReleaseCatalogScopeKey)({
 	channelKey: input.channelKey,
 	fingerprintHash: input.fingerprintHash,
 	platform: input.platform,
@@ -28,11 +28,11 @@ const projectReleaseCatalogRow = (row, input, scopeKey = releaseCatalogScopeKeyO
 	return {
 		catalogId: row.catalog_id,
 		catalogHash: row.catalog_hash,
-		fallbackPolicy: _hot_updater_core.RELEASE_CATALOG_FALLBACK_POLICY,
+		fallbackPolicy: _hot_updater_protocol.RELEASE_CATALOG_FALLBACK_POLICY,
 		generation: row.generation,
 		releases: (0, _hot_updater_plugin_core.projectCompiledCatalog)(compiled, appVersion),
 		rollbackReleases: (0, _hot_updater_plugin_core.projectCompiledRollbackCatalog)(compiled, appVersion),
-		schemaVersion: _hot_updater_core.RELEASE_CATALOG_SCHEMA_VERSION,
+		schemaVersion: _hot_updater_protocol.RELEASE_CATALOG_SCHEMA_VERSION,
 		scopeKey
 	};
 };

package/dist/db/releaseCatalog.mjs

@@ -1,5 +1,5 @@
 import { projectCompiledCatalog, projectCompiledRollbackCatalog } from "@hot-updater/plugin-core";
-import { RELEASE_CATALOG_FALLBACK_POLICY, RELEASE_CATALOG_SCHEMA_VERSION, createReleaseCatalogScopeKey } from "@hot-updater/core";
+import { RELEASE_CATALOG_FALLBACK_POLICY, RELEASE_CATALOG_SCHEMA_VERSION, createReleaseCatalogScopeKey } from "@hot-updater/protocol";
 //#region src/db/releaseCatalog.ts
 /** A stored catalog payload, checked against its strategy's shape. */
 const parseCompiledCatalog = (payload, strategy) => {

package/dist/db/updateArtifacts.cjs

@@ -1,5 +1,5 @@
 let _hot_updater_plugin_core = require("@hot-updater/plugin-core");
-let _hot_updater_core = require("@hot-updater/core");
+let _hot_updater_protocol = require("@hot-updater/protocol");
 //#region src/db/updateArtifacts.ts
 const HBC_ASSET_PATH_RE = /\.bundle$/;
 const asByteSize = (value) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0 ? value : null;
@@ -31,7 +31,7 @@ async function fetchBundleManifest(storageUri, readStorageText) {
 	return payload;
 }
 function resolveHbcPatchPlan({ currentBundle, targetBundle, targetManifest }) {
-	const matchingPatch = currentBundle ? (0, _hot_updater_core.getBundlePatch)(targetBundle, currentBundle.id) : null;
+	const matchingPatch = currentBundle ? (0, _hot_updater_protocol.getBundlePatch)(targetBundle, currentBundle.id) : null;
 	const patchAssetPath = resolveUniqueHbcAssetPath(targetManifest);
 	if (!currentBundle || !matchingPatch || !patchAssetPath || !matchingPatch.patchStorageUri || !matchingPatch.patchFileHash || !matchingPatch.baseFileHash) return null;
 	return {
@@ -115,9 +115,9 @@ async function resolveAssets(plan, resolveFileUrl) {
 	return { assets: Object.fromEntries(resolvedEntries.map((entry) => entry.asset)) };
 }
 async function resolveManifestArtifacts({ currentBundle, resolveFileUrl, readStorageText, targetBundle }) {
-	const manifestStorageUri = targetBundle ? (0, _hot_updater_core.getManifestStorageUri)(targetBundle) : null;
-	const manifestFileHash = targetBundle ? (0, _hot_updater_core.getManifestFileHash)(targetBundle) : null;
-	const assetBaseStorageUri = targetBundle ? (0, _hot_updater_core.getAssetBaseStorageUri)(targetBundle) : null;
+	const manifestStorageUri = targetBundle ? (0, _hot_updater_protocol.getManifestStorageUri)(targetBundle) : null;
+	const manifestFileHash = targetBundle ? (0, _hot_updater_protocol.getManifestFileHash)(targetBundle) : null;
+	const assetBaseStorageUri = targetBundle ? (0, _hot_updater_protocol.getAssetBaseStorageUri)(targetBundle) : null;
 	if (!targetBundle || !manifestStorageUri || !manifestFileHash || !assetBaseStorageUri) return null;
 	const targetManifest = await fetchBundleManifest(manifestStorageUri, readStorageText);
 	if (!targetManifest) return null;
@@ -140,7 +140,7 @@ async function resolveManifestArtifacts({ currentBundle, resolveFileUrl, readSto
 		}));
 	} catch {}
 	return {
-		artifactProtocolVersion: _hot_updater_core.ARTIFACT_PROTOCOL_VERSION,
+		artifactProtocolVersion: _hot_updater_protocol.ARTIFACT_PROTOCOL_VERSION,
 		assets: resolved.assets,
 		manifestFileHash,
 		manifestUrl,

package/dist/db/updateArtifacts.mjs

@@ -1,5 +1,5 @@
 import { getBundleArchiveStorageUri, getManifestAssetDownloadPath, isContentAddressedAssetFileHash, resolveManifestAssetStorageUri } from "@hot-updater/plugin-core";
-import { ARTIFACT_PROTOCOL_VERSION, getAssetBaseStorageUri, getBundlePatch, getManifestFileHash, getManifestStorageUri } from "@hot-updater/core";
+import { ARTIFACT_PROTOCOL_VERSION, getAssetBaseStorageUri, getBundlePatch, getManifestFileHash, getManifestStorageUri } from "@hot-updater/protocol";
 //#region src/db/updateArtifacts.ts
 const HBC_ASSET_PATH_RE = /\.bundle$/;
 const asByteSize = (value) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0 ? value : null;

package/dist/handler.cjs

@@ -1,10 +1,9 @@
-const require_fence = require("./database/fence.cjs");
-const require_configError = require("./assembly/configError.cjs");
 const require_handlerErrors = require("./handlerErrors.cjs");
 const require_handlerAdminRoutes = require("./handlerAdminRoutes.cjs");
 const require_handlerReleaseCatalogRoutes = require("./handlerReleaseCatalogRoutes.cjs");
 const require_handlerVersionRoutes = require("./handlerVersionRoutes.cjs");
 const require_internalRouter = require("./internalRouter.cjs");
+let _hot_updater_plugin_core = require("@hot-updater/plugin-core");
 //#region src/handler.ts
 const withPrivateNoStore = (response) => {
 	const headers = new Headers(response.headers);
@@ -54,7 +53,7 @@ const createRequestHandler = ({ api, clientPolicy, privateResponses = false, rou
 		return guarded ? withVary(response, clientPolicy.varyHeaders) : response;
 	} catch (error) {
 		if (error instanceof require_handlerErrors.HandlerBadRequestError) return errorResponse(error.message, 400);
-		if (error instanceof require_fence.HotUpdaterSchemaMigrationRequiredError) {
+		if (error instanceof _hot_updater_plugin_core.HotUpdaterSchemaMigrationRequiredError) {
 			console.error(error.message);
 			return errorResponse("Service unavailable", 503);
 		}
@@ -91,7 +90,7 @@ function createHotUpdaterHandlers({ api, clientPolicy, downloadStorageObject, en
 	const mount = (router, admin) => (method, path, handler) => {
 		const shape = `${admin ? "admin" : "client"} ${method} ${path.replaceAll(/:[^/]+/gu, ":")}`;
 		const taken = shapes.get(shape);
-		if (taken !== void 0) throw new require_configError.HotUpdaterConfigError(`${handler} (${method} ${path}) collides with ${taken} on handlers.${admin ? "admin" : "client"}.`);
+		if (taken !== void 0) throw new _hot_updater_plugin_core.HotUpdaterConfigError(`${handler} (${method} ${path}) collides with ${taken} on handlers.${admin ? "admin" : "client"}.`);
 		shapes.set(shape, handler);
 		require_internalRouter.addRoute(router, method, path, handler);
 		routes.push({

package/dist/handler.mjs

@@ -1,10 +1,10 @@
-import { HotUpdaterSchemaMigrationRequiredError } from "./database/fence.mjs";
 import { HotUpdaterConfigError } from "./assembly/configError.mjs";
 import { HandlerBadRequestError } from "./handlerErrors.mjs";
 import { ADMIN_ROUTES, createAdminRouteHandlers } from "./handlerAdminRoutes.mjs";
 import { createReleaseCatalogRouteHandlers } from "./handlerReleaseCatalogRoutes.mjs";
 import { createVersionRouteHandlers } from "./handlerVersionRoutes.mjs";
 import { addRoute, createRouter, findRoute } from "./internalRouter.mjs";
+import { HotUpdaterSchemaMigrationRequiredError } from "@hot-updater/plugin-core";
 //#region src/handler.ts
 const withPrivateNoStore = (response) => {
 	const headers = new Headers(response.headers);

package/dist/handlerAdminRoutes.cjs

@@ -1,7 +1,6 @@
 const require_handlerErrors = require("./handlerErrors.cjs");
 const require_handlerParameters = require("./handlerParameters.cjs");
 let _hot_updater_plugin_core = require("@hot-updater/plugin-core");
-let _hot_updater_plugin_core_internal = require("@hot-updater/plugin-core/internal");
 //#region src/handlerAdminRoutes.ts
 const json = (body, status = 200) => Response.json(body, { status });
 const notFound = () => json({ error: "Not found" }, 404);
@@ -24,7 +23,7 @@ const answer = async (operation) => {
 			code: "BUNDLE_NOT_FOUND",
 			error: error.message
 		}, 404);
-		if (error instanceof _hot_updater_plugin_core_internal.DatabaseRowReferencedError) return json({
+		if (error instanceof _hot_updater_plugin_core.DatabaseRowReferencedError) return json({
 			code: "REFERENCED",
 			error: error.message
 		}, 409);

package/dist/handlerAdminRoutes.mjs

@@ -1,7 +1,6 @@
 import { HandlerBadRequestError } from "./handlerErrors.mjs";
 import { decodeMaybe, isPlatform, parseBooleanSearchParam, requireRouteParam } from "./handlerParameters.mjs";
-import { DatabaseBundleNotFoundError, ReleaseCatalogMutationError, ReleaseManagementError } from "@hot-updater/plugin-core";
-import { DatabaseRowReferencedError } from "@hot-updater/plugin-core/internal";
+import { DatabaseBundleNotFoundError, DatabaseRowReferencedError, ReleaseCatalogMutationError, ReleaseManagementError } from "@hot-updater/plugin-core";
 //#region src/handlerAdminRoutes.ts
 const json = (body, status = 200) => Response.json(body, { status });
 const notFound = () => json({ error: "Not found" }, 404);

package/dist/handlerVersionRoutes.cjs

@@ -3,8 +3,8 @@ const require_version = require("./version.cjs");
 const HOT_UPDATER_INFRASTRUCTURE_GENERATION = 1;
 /**
 * `/version` on both mounts. The admin mount also lists the ids of the
-* plugins the server runs, sorted, so a console shows only the features they
-* serve; apps never learn which plugins a server runs.
+* plugins the server runs, sorted; apps never learn which plugins a server
+* runs.
 */
 const createVersionRouteHandlers = (plugins = []) => {
 	const version = {

package/dist/handlerVersionRoutes.mjs

@@ -3,8 +3,8 @@ import { HOT_UPDATER_SERVER_VERSION } from "./version.mjs";
 const HOT_UPDATER_INFRASTRUCTURE_GENERATION = 1;
 /**
 * `/version` on both mounts. The admin mount also lists the ids of the
-* plugins the server runs, sorted, so a console shows only the features they
-* serve; apps never learn which plugins a server runs.
+* plugins the server runs, sorted; apps never learn which plugins a server
+* runs.
 */
 const createVersionRouteHandlers = (plugins = []) => {
 	const version = {

package/dist/index.cjs

@@ -1,9 +1,16 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_configError = require("./assembly/configError.cjs");
 const require_version = require("./version.cjs");
 const require_handlerVersionRoutes = require("./handlerVersionRoutes.cjs");
 const require_createHotUpdaterCore = require("./createHotUpdaterCore.cjs");
+const require_node = require("./node.cjs");
+let _hot_updater_plugin_core = require("@hot-updater/plugin-core");
 exports.HOT_UPDATER_INFRASTRUCTURE_GENERATION = require_handlerVersionRoutes.HOT_UPDATER_INFRASTRUCTURE_GENERATION;
 exports.HOT_UPDATER_SERVER_VERSION = require_version.HOT_UPDATER_SERVER_VERSION;
-exports.HotUpdaterConfigError = require_configError.HotUpdaterConfigError;
+Object.defineProperty(exports, "HotUpdaterConfigError", {
+	enumerable: true,
+	get: function() {
+		return _hot_updater_plugin_core.HotUpdaterConfigError;
+	}
+});
 exports.createHotUpdater = require_createHotUpdaterCore.createHotUpdater;
+exports.toNodeHandler = require_node.toNodeHandler;

package/dist/index.d.cts

@@ -1,9 +1,10 @@
-import { HOT_UPDATER_SERVER_VERSION } from "./version.cjs";
 import { HotUpdaterConfigError } from "./assembly/configError.cjs";
 import "./assembly/assemblePlugins.cjs";
 import { HotUpdaterHandler, HotUpdaterHandlers } from "./handlerTypes.cjs";
 import "./handler.cjs";
-import { ClientAccessPolicy, ClientAccessRule, CreateHotUpdaterOptions, HotUpdaterAPI, RuntimeHotUpdaterAPI, createHotUpdater } from "./createHotUpdaterCore.cjs";
+import { ClientAccessPolicy, ClientAccessRule, ClientAuthProvider, ClientEndpoint, CreateHotUpdaterOptions, HotUpdaterAPI, RuntimeHotUpdaterAPI, createHotUpdater } from "./createHotUpdaterCore.cjs";
 import { Bundle } from "./types/index.cjs";
+import { HOT_UPDATER_SERVER_VERSION } from "./version.cjs";
 import { HOT_UPDATER_INFRASTRUCTURE_GENERATION } from "./handlerVersionRoutes.cjs";
-export { type Bundle, type ClientAccessPolicy, type ClientAccessRule, type CreateHotUpdaterOptions, HOT_UPDATER_INFRASTRUCTURE_GENERATION, HOT_UPDATER_SERVER_VERSION, type HotUpdaterAPI, HotUpdaterConfigError, type HotUpdaterHandler, type HotUpdaterHandlers, type RuntimeHotUpdaterAPI, createHotUpdater };
+import { toNodeHandler } from "./node.cjs";
+export { type Bundle, type ClientAccessPolicy, type ClientAccessRule, type ClientAuthProvider, type ClientEndpoint, type CreateHotUpdaterOptions, HOT_UPDATER_INFRASTRUCTURE_GENERATION, HOT_UPDATER_SERVER_VERSION, type HotUpdaterAPI, HotUpdaterConfigError, type HotUpdaterHandler, type HotUpdaterHandlers, type RuntimeHotUpdaterAPI, createHotUpdater, toNodeHandler };

package/dist/index.d.mts

@@ -1,9 +1,10 @@
-import { HOT_UPDATER_SERVER_VERSION } from "./version.mjs";
 import { HotUpdaterConfigError } from "./assembly/configError.mjs";
 import "./assembly/assemblePlugins.mjs";
 import { HotUpdaterHandler, HotUpdaterHandlers } from "./handlerTypes.mjs";
 import "./handler.mjs";
-import { ClientAccessPolicy, ClientAccessRule, CreateHotUpdaterOptions, HotUpdaterAPI, RuntimeHotUpdaterAPI, createHotUpdater } from "./createHotUpdaterCore.mjs";
+import { ClientAccessPolicy, ClientAccessRule, ClientAuthProvider, ClientEndpoint, CreateHotUpdaterOptions, HotUpdaterAPI, RuntimeHotUpdaterAPI, createHotUpdater } from "./createHotUpdaterCore.mjs";
 import { Bundle } from "./types/index.mjs";
+import { HOT_UPDATER_SERVER_VERSION } from "./version.mjs";
 import { HOT_UPDATER_INFRASTRUCTURE_GENERATION } from "./handlerVersionRoutes.mjs";
-export { type Bundle, type ClientAccessPolicy, type ClientAccessRule, type CreateHotUpdaterOptions, HOT_UPDATER_INFRASTRUCTURE_GENERATION, HOT_UPDATER_SERVER_VERSION, type HotUpdaterAPI, HotUpdaterConfigError, type HotUpdaterHandler, type HotUpdaterHandlers, type RuntimeHotUpdaterAPI, createHotUpdater };
+import { toNodeHandler } from "./node.mjs";
+export { type Bundle, type ClientAccessPolicy, type ClientAccessRule, type ClientAuthProvider, type ClientEndpoint, type CreateHotUpdaterOptions, HOT_UPDATER_INFRASTRUCTURE_GENERATION, HOT_UPDATER_SERVER_VERSION, type HotUpdaterAPI, HotUpdaterConfigError, type HotUpdaterHandler, type HotUpdaterHandlers, type RuntimeHotUpdaterAPI, createHotUpdater, toNodeHandler };

package/dist/index.mjs

@@ -2,4 +2,5 @@ import { HotUpdaterConfigError } from "./assembly/configError.mjs";
 import { HOT_UPDATER_SERVER_VERSION } from "./version.mjs";
 import { HOT_UPDATER_INFRASTRUCTURE_GENERATION } from "./handlerVersionRoutes.mjs";
 import { createHotUpdater } from "./createHotUpdaterCore.mjs";
-export { HOT_UPDATER_INFRASTRUCTURE_GENERATION, HOT_UPDATER_SERVER_VERSION, HotUpdaterConfigError, createHotUpdater };
+import { toNodeHandler } from "./node.mjs";
+export { HOT_UPDATER_INFRASTRUCTURE_GENERATION, HOT_UPDATER_SERVER_VERSION, HotUpdaterConfigError, createHotUpdater, toNodeHandler };

package/dist/node.cjs

@@ -1,6 +1,5 @@
-Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_version = require("./version.cjs");
-const require_handlerVersionRoutes = require("./handlerVersionRoutes.cjs");
+require("./version.cjs");
+require("./handlerVersionRoutes.cjs");
 //#region src/node.ts
 /**
 * Converts a Hot Updater handler to a Node.js-compatible middleware
@@ -8,7 +7,7 @@ const require_handlerVersionRoutes = require("./handlerVersionRoutes.cjs");
 *
 * @example
 * ```typescript
-* import { toNodeHandler } from "@hot-updater/server/node";
+* import { toNodeHandler } from "@hot-updater/server";
 * import express from "express";
 *
 * const app = express();
@@ -54,6 +53,4 @@ function toNodeHandler(handler) {
 	};
 }
 //#endregion
-exports.HOT_UPDATER_INFRASTRUCTURE_GENERATION = require_handlerVersionRoutes.HOT_UPDATER_INFRASTRUCTURE_GENERATION;
-exports.HOT_UPDATER_SERVER_VERSION = require_version.HOT_UPDATER_SERVER_VERSION;
 exports.toNodeHandler = toNodeHandler;

package/dist/node.d.cts

@@ -1,5 +1,5 @@
-import { HOT_UPDATER_SERVER_VERSION } from "./version.cjs";
 import { HotUpdaterHandler } from "./handlerTypes.cjs";
+import { HOT_UPDATER_SERVER_VERSION } from "./version.cjs";
 import { HOT_UPDATER_INFRASTRUCTURE_GENERATION } from "./handlerVersionRoutes.cjs";
 //#region src/node.d.ts
 /**
@@ -8,7 +8,7 @@ import { HOT_UPDATER_INFRASTRUCTURE_GENERATION } from "./handlerVersionRoutes.cj
  *
  * @example
  * ```typescript
- * import { toNodeHandler } from "@hot-updater/server/node";
+ * import { toNodeHandler } from "@hot-updater/server";
  * import express from "express";
  *
  * const app = express();
@@ -28,4 +28,4 @@ import { HOT_UPDATER_INFRASTRUCTURE_GENERATION } from "./handlerVersionRoutes.cj
  */
 declare function toNodeHandler(handler: HotUpdaterHandler): (req: any, res: any, next?: any) => Promise<void>;
 //#endregion
-export { HOT_UPDATER_INFRASTRUCTURE_GENERATION, HOT_UPDATER_SERVER_VERSION, toNodeHandler };
+export { toNodeHandler };

package/dist/node.d.mts

@@ -1,5 +1,5 @@
-import { HOT_UPDATER_SERVER_VERSION } from "./version.mjs";
 import { HotUpdaterHandler } from "./handlerTypes.mjs";
+import { HOT_UPDATER_SERVER_VERSION } from "./version.mjs";
 import { HOT_UPDATER_INFRASTRUCTURE_GENERATION } from "./handlerVersionRoutes.mjs";
 //#region src/node.d.ts
 /**
@@ -8,7 +8,7 @@ import { HOT_UPDATER_INFRASTRUCTURE_GENERATION } from "./handlerVersionRoutes.mj
  *
  * @example
  * ```typescript
- * import { toNodeHandler } from "@hot-updater/server/node";
+ * import { toNodeHandler } from "@hot-updater/server";
  * import express from "express";
  *
  * const app = express();
@@ -28,4 +28,4 @@ import { HOT_UPDATER_INFRASTRUCTURE_GENERATION } from "./handlerVersionRoutes.mj
  */
 declare function toNodeHandler(handler: HotUpdaterHandler): (req: any, res: any, next?: any) => Promise<void>;
 //#endregion
-export { HOT_UPDATER_INFRASTRUCTURE_GENERATION, HOT_UPDATER_SERVER_VERSION, toNodeHandler };
+export { toNodeHandler };

package/dist/node.mjs

@@ -1,5 +1,5 @@
-import { HOT_UPDATER_SERVER_VERSION } from "./version.mjs";
-import { HOT_UPDATER_INFRASTRUCTURE_GENERATION } from "./handlerVersionRoutes.mjs";
+import "./version.mjs";
+import "./handlerVersionRoutes.mjs";
 //#region src/node.ts
 /**
 * Converts a Hot Updater handler to a Node.js-compatible middleware
@@ -7,7 +7,7 @@ import { HOT_UPDATER_INFRASTRUCTURE_GENERATION } from "./handlerVersionRoutes.mj
 *
 * @example
 * ```typescript
-* import { toNodeHandler } from "@hot-updater/server/node";
+* import { toNodeHandler } from "@hot-updater/server";
 * import express from "express";
 *
 * const app = express();
@@ -53,4 +53,4 @@ function toNodeHandler(handler) {
 	};
 }
 //#endregion
-export { HOT_UPDATER_INFRASTRUCTURE_GENERATION, HOT_UPDATER_SERVER_VERSION, toNodeHandler };
+export { toNodeHandler };

package/dist/package.cjs

@@ -1,5 +1,5 @@
 //#region package.json
-var version = "1.0.0-rc.18";
+var version = "1.0.0-rc.21";
 //#endregion
 Object.defineProperty(exports, "version", {
 	enumerable: true,