@hot-updater/server 1.0.0-rc.2 → 1.0.0-rc.21

package/dist/db/updateArtifacts.cjs

@@ -1,20 +1,8 @@
 let _hot_updater_plugin_core = require("@hot-updater/plugin-core");
-let _hot_updater_core = require("@hot-updater/core");
+let _hot_updater_protocol = require("@hot-updater/protocol");
 //#region src/db/updateArtifacts.ts
 const HBC_ASSET_PATH_RE = /\.bundle$/;
 const asByteSize = (value) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0 ? value : null;
-const sumByteSizes = (byteSizes) => {
-	let total = 0;
-	for (const byteSize of byteSizes) {
-		if (byteSize === null || total > Number.MAX_SAFE_INTEGER - byteSize) return null;
-		total += byteSize;
-	}
-	return total;
-};
-const shouldUseArchive = (targetBundle, downloadByteSize) => {
-	const archiveByteSize = asByteSize(targetBundle.archiveByteSize);
-	return archiveByteSize !== null && downloadByteSize !== null && downloadByteSize >= archiveByteSize;
-};
 const resolveUniqueHbcAssetPath = (manifest) => {
 	const candidates = Object.keys(manifest.assets).sort((left, right) => left.localeCompare(right)).filter((candidate) => HBC_ASSET_PATH_RE.test(candidate));
 	return candidates.length === 1 ? candidates[0] : null;
@@ -40,13 +28,10 @@ async function fetchBundleManifest(storageUri, readStorageText) {
 		return null;
 	}
 	if (!isBundleManifest(payload)) return null;
-	return {
-		byteSize: asByteSize(new TextEncoder().encode(storageText).byteLength),
-		manifest: payload
-	};
+	return payload;
 }
 function resolveHbcPatchPlan({ currentBundle, targetBundle, targetManifest }) {
-	const matchingPatch = currentBundle ? (0, _hot_updater_core.getBundlePatch)(targetBundle, currentBundle.id) : null;
+	const matchingPatch = currentBundle ? (0, _hot_updater_protocol.getBundlePatch)(targetBundle, currentBundle.id) : null;
 	const patchAssetPath = resolveUniqueHbcAssetPath(targetManifest);
 	if (!currentBundle || !matchingPatch || !patchAssetPath || !matchingPatch.patchStorageUri || !matchingPatch.patchFileHash || !matchingPatch.baseFileHash) return null;
 	return {
@@ -60,14 +45,13 @@ function resolveHbcPatchPlan({ currentBundle, targetBundle, targetManifest }) {
 		}
 	};
 }
-function createManifestArtifactPlan({ assetBaseStorageUri, currentManifest, currentBundle, targetBundle, targetManifest, targetManifestByteSize }) {
+function createManifestArtifactPlan({ assetBaseStorageUri, currentBundle, targetBundle, targetManifest }) {
 	const patchCandidate = resolveHbcPatchPlan({
 		currentBundle,
 		targetBundle,
 		targetManifest
 	});
-	const changedAssets = Object.entries(targetManifest.assets).flatMap(([assetPath, asset]) => {
-		if ((currentManifest?.assets[assetPath])?.fileHash === asset.fileHash) return [];
+	return { assets: Object.entries(targetManifest.assets).map(([assetPath, asset]) => {
 		const downloadByteSize = asByteSize(asset.downloadByteSize);
 		const downloadPath = (0, _hot_updater_plugin_core.getManifestAssetDownloadPath)(assetPath);
 		const isTransformedDownload = downloadPath !== assetPath;
@@ -83,28 +67,16 @@ function createManifestArtifactPlan({ assetBaseStorageUri, currentManifest, curr
 		};
 		if (isTransformedDownload) file.compression = "br";
 		const patch = patchCandidate?.assetPath === assetPath ? patchCandidate.patch : null;
-		return [{
+		return {
 			assetPath,
 			file,
 			fileHash: asset.fileHash,
 			patch
-		}];
-	});
-	const allPossibleByteSizesKnown = targetManifestByteSize !== null && changedAssets.every((asset) => asset.file.byteSize !== null && (asset.patch === null || asset.patch.byteSize !== null));
-	const primaryByteSizes = changedAssets.map((asset) => {
-		if (!asset.patch) return asset.file.byteSize;
-		if (asset.patch.byteSize === null || asset.file.byteSize === null) return null;
-		return Math.min(asset.patch.byteSize, asset.file.byteSize);
-	});
-	return {
-		allPossibleByteSizesKnown,
-		changedAssets,
-		manifestByteSize: targetManifestByteSize,
-		minimumDownloadByteSize: allPossibleByteSizesKnown ? sumByteSizes([targetManifestByteSize, ...primaryByteSizes]) : null
-	};
+		};
+	}) };
 }
-async function resolveChangedAssets(plan, resolveFileUrl) {
-	const patchAsset = plan.changedAssets.find((asset) => asset.patch !== null);
+async function resolveAssets(plan, resolveFileUrl) {
+	const patchAsset = plan.assets.find((asset) => asset.patch !== null);
 	let resolvedPatch = null;
 	if (patchAsset?.patch) {
 		const patchUrl = await resolveFileUrl(patchAsset.patch.storageUri);
@@ -115,11 +87,12 @@ async function resolveChangedAssets(plan, resolveFileUrl) {
 				baseBundleId: patchAsset.patch.baseBundleId,
 				baseFileHash: patchAsset.patch.baseFileHash,
 				patchFileHash: patchAsset.patch.patchFileHash,
-				patchUrl
+				patchUrl,
+				...patchAsset.patch.byteSize === null ? {} : { byteSize: patchAsset.patch.byteSize }
 			}
 		};
 	}
-	const changedEntries = await Promise.all(plan.changedAssets.map(async (asset) => {
+	const entries = await Promise.all(plan.assets.map(async (asset) => {
 		let patch = resolvedPatch?.assetPath === asset.assetPath ? resolvedPatch.patch : null;
 		let fileUrl = null;
 		try {
@@ -128,52 +101,50 @@ async function resolveChangedAssets(plan, resolveFileUrl) {
 			if (!patch) throw error;
 		}
 		if (fileUrl && patch && asset.file.byteSize !== null && asset.patch !== null && asset.patch.byteSize !== null && asset.patch.byteSize >= asset.file.byteSize) patch = null;
-		if (!fileUrl && !patch) return null;
-		const changedAsset = { fileHash: asset.fileHash };
-		if (fileUrl) {
-			changedAsset.file = { url: fileUrl };
-			if (asset.file.compression) changedAsset.file.compression = asset.file.compression;
-		}
-		if (patch) changedAsset.patch = patch;
-		return {
-			asset: [asset.assetPath, changedAsset],
-			primaryByteSize: patch ? asset.patch?.byteSize ?? null : asset.file.byteSize
+		if (!fileUrl) return null;
+		const changedAsset = {
+			file: { url: fileUrl },
+			fileHash: asset.fileHash
 		};
+		if (asset.file.compression) changedAsset.file.compression = asset.file.compression;
+		if (patch) changedAsset.patch = patch;
+		return { asset: [asset.assetPath, changedAsset] };
 	}));
-	if (changedEntries.some((entry) => entry === null)) return null;
-	const resolvedEntries = changedEntries.filter((entry) => entry !== null);
-	return {
-		changedAssets: Object.fromEntries(resolvedEntries.map((entry) => entry.asset)),
-		primaryByteSizes: resolvedEntries.map((entry) => entry.primaryByteSize)
-	};
+	if (entries.some((entry) => entry === null)) return null;
+	const resolvedEntries = entries.filter((entry) => entry !== null);
+	return { assets: Object.fromEntries(resolvedEntries.map((entry) => entry.asset)) };
 }
-async function resolveManifestArtifacts({ archiveUrlUsable, currentBundle, resolveFileUrl, readStorageText, targetBundle }) {
-	const manifestStorageUri = targetBundle ? (0, _hot_updater_core.getManifestStorageUri)(targetBundle) : null;
-	const manifestFileHash = targetBundle ? (0, _hot_updater_core.getManifestFileHash)(targetBundle) : null;
-	const assetBaseStorageUri = targetBundle ? (0, _hot_updater_core.getAssetBaseStorageUri)(targetBundle) : null;
+async function resolveManifestArtifacts({ currentBundle, resolveFileUrl, readStorageText, targetBundle }) {
+	const manifestStorageUri = targetBundle ? (0, _hot_updater_protocol.getManifestStorageUri)(targetBundle) : null;
+	const manifestFileHash = targetBundle ? (0, _hot_updater_protocol.getManifestFileHash)(targetBundle) : null;
+	const assetBaseStorageUri = targetBundle ? (0, _hot_updater_protocol.getAssetBaseStorageUri)(targetBundle) : null;
 	if (!targetBundle || !manifestStorageUri || !manifestFileHash || !assetBaseStorageUri) return null;
-	const currentManifestStorageUri = currentBundle ? (0, _hot_updater_core.getManifestStorageUri)(currentBundle) : null;
-	const [targetManifestResult, currentManifestResult] = await Promise.all([fetchBundleManifest(manifestStorageUri, readStorageText), currentManifestStorageUri ? fetchBundleManifest(currentManifestStorageUri, readStorageText) : null]);
-	if (!targetManifestResult) return null;
+	const targetManifest = await fetchBundleManifest(manifestStorageUri, readStorageText);
+	if (!targetManifest) return null;
 	const plan = createManifestArtifactPlan({
 		assetBaseStorageUri,
-		currentManifest: currentManifestResult?.manifest ?? null,
 		currentBundle,
 		targetBundle,
-		targetManifest: targetManifestResult.manifest,
-		targetManifestByteSize: targetManifestResult.byteSize
+		targetManifest
 	});
-	if (archiveUrlUsable && plan.allPossibleByteSizesKnown && shouldUseArchive(targetBundle, plan.minimumDownloadByteSize)) return null;
 	const manifestUrl = await resolveFileUrl(manifestStorageUri);
 	if (!manifestUrl) return null;
-	const resolved = await resolveChangedAssets(plan, resolveFileUrl);
+	const resolved = await resolveAssets(plan, resolveFileUrl);
 	if (!resolved) return null;
-	const resolvedDownloadByteSize = sumByteSizes([plan.manifestByteSize, ...resolved.primaryByteSizes]);
-	if (archiveUrlUsable && shouldUseArchive(targetBundle, resolvedDownloadByteSize)) return null;
+	let archiveUrl = null;
+	const archive = targetManifest.archive;
+	if (archive && (0, _hot_updater_plugin_core.isContentAddressedAssetFileHash)(archive.downloadFileHash) && (asByteSize(archive.downloadByteSize) ?? 0) > 0 && (asByteSize(archive.tarByteSize) ?? 0) > 0) try {
+		archiveUrl = await resolveFileUrl((0, _hot_updater_plugin_core.getBundleArchiveStorageUri)({
+			manifestStorageUri,
+			bundleId: targetBundle.id
+		}));
+	} catch {}
 	return {
-		changedAssets: resolved.changedAssets,
+		artifactProtocolVersion: _hot_updater_protocol.ARTIFACT_PROTOCOL_VERSION,
+		assets: resolved.assets,
 		manifestFileHash,
-		manifestUrl
+		manifestUrl,
+		...archiveUrl ? { archiveUrl } : {}
 	};
 }
 //#endregion

package/dist/db/updateArtifacts.mjs

@@ -1,20 +1,8 @@
-import { getManifestAssetDownloadPath, isContentAddressedAssetFileHash, resolveManifestAssetStorageUri } from "@hot-updater/plugin-core";
-import { getAssetBaseStorageUri, getBundlePatch, getManifestFileHash, getManifestStorageUri } from "@hot-updater/core";
+import { getBundleArchiveStorageUri, getManifestAssetDownloadPath, isContentAddressedAssetFileHash, resolveManifestAssetStorageUri } from "@hot-updater/plugin-core";
+import { ARTIFACT_PROTOCOL_VERSION, getAssetBaseStorageUri, getBundlePatch, getManifestFileHash, getManifestStorageUri } from "@hot-updater/protocol";
 //#region src/db/updateArtifacts.ts
 const HBC_ASSET_PATH_RE = /\.bundle$/;
 const asByteSize = (value) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0 ? value : null;
-const sumByteSizes = (byteSizes) => {
-	let total = 0;
-	for (const byteSize of byteSizes) {
-		if (byteSize === null || total > Number.MAX_SAFE_INTEGER - byteSize) return null;
-		total += byteSize;
-	}
-	return total;
-};
-const shouldUseArchive = (targetBundle, downloadByteSize) => {
-	const archiveByteSize = asByteSize(targetBundle.archiveByteSize);
-	return archiveByteSize !== null && downloadByteSize !== null && downloadByteSize >= archiveByteSize;
-};
 const resolveUniqueHbcAssetPath = (manifest) => {
 	const candidates = Object.keys(manifest.assets).sort((left, right) => left.localeCompare(right)).filter((candidate) => HBC_ASSET_PATH_RE.test(candidate));
 	return candidates.length === 1 ? candidates[0] : null;
@@ -40,10 +28,7 @@ async function fetchBundleManifest(storageUri, readStorageText) {
 		return null;
 	}
 	if (!isBundleManifest(payload)) return null;
-	return {
-		byteSize: asByteSize(new TextEncoder().encode(storageText).byteLength),
-		manifest: payload
-	};
+	return payload;
 }
 function resolveHbcPatchPlan({ currentBundle, targetBundle, targetManifest }) {
 	const matchingPatch = currentBundle ? getBundlePatch(targetBundle, currentBundle.id) : null;
@@ -60,14 +45,13 @@ function resolveHbcPatchPlan({ currentBundle, targetBundle, targetManifest }) {
 		}
 	};
 }
-function createManifestArtifactPlan({ assetBaseStorageUri, currentManifest, currentBundle, targetBundle, targetManifest, targetManifestByteSize }) {
+function createManifestArtifactPlan({ assetBaseStorageUri, currentBundle, targetBundle, targetManifest }) {
 	const patchCandidate = resolveHbcPatchPlan({
 		currentBundle,
 		targetBundle,
 		targetManifest
 	});
-	const changedAssets = Object.entries(targetManifest.assets).flatMap(([assetPath, asset]) => {
-		if ((currentManifest?.assets[assetPath])?.fileHash === asset.fileHash) return [];
+	return { assets: Object.entries(targetManifest.assets).map(([assetPath, asset]) => {
 		const downloadByteSize = asByteSize(asset.downloadByteSize);
 		const downloadPath = getManifestAssetDownloadPath(assetPath);
 		const isTransformedDownload = downloadPath !== assetPath;
@@ -83,28 +67,16 @@ function createManifestArtifactPlan({ assetBaseStorageUri, currentManifest, curr
 		};
 		if (isTransformedDownload) file.compression = "br";
 		const patch = patchCandidate?.assetPath === assetPath ? patchCandidate.patch : null;
-		return [{
+		return {
 			assetPath,
 			file,
 			fileHash: asset.fileHash,
 			patch
-		}];
-	});
-	const allPossibleByteSizesKnown = targetManifestByteSize !== null && changedAssets.every((asset) => asset.file.byteSize !== null && (asset.patch === null || asset.patch.byteSize !== null));
-	const primaryByteSizes = changedAssets.map((asset) => {
-		if (!asset.patch) return asset.file.byteSize;
-		if (asset.patch.byteSize === null || asset.file.byteSize === null) return null;
-		return Math.min(asset.patch.byteSize, asset.file.byteSize);
-	});
-	return {
-		allPossibleByteSizesKnown,
-		changedAssets,
-		manifestByteSize: targetManifestByteSize,
-		minimumDownloadByteSize: allPossibleByteSizesKnown ? sumByteSizes([targetManifestByteSize, ...primaryByteSizes]) : null
-	};
+		};
+	}) };
 }
-async function resolveChangedAssets(plan, resolveFileUrl) {
-	const patchAsset = plan.changedAssets.find((asset) => asset.patch !== null);
+async function resolveAssets(plan, resolveFileUrl) {
+	const patchAsset = plan.assets.find((asset) => asset.patch !== null);
 	let resolvedPatch = null;
 	if (patchAsset?.patch) {
 		const patchUrl = await resolveFileUrl(patchAsset.patch.storageUri);
@@ -115,11 +87,12 @@ async function resolveChangedAssets(plan, resolveFileUrl) {
 				baseBundleId: patchAsset.patch.baseBundleId,
 				baseFileHash: patchAsset.patch.baseFileHash,
 				patchFileHash: patchAsset.patch.patchFileHash,
-				patchUrl
+				patchUrl,
+				...patchAsset.patch.byteSize === null ? {} : { byteSize: patchAsset.patch.byteSize }
 			}
 		};
 	}
-	const changedEntries = await Promise.all(plan.changedAssets.map(async (asset) => {
+	const entries = await Promise.all(plan.assets.map(async (asset) => {
 		let patch = resolvedPatch?.assetPath === asset.assetPath ? resolvedPatch.patch : null;
 		let fileUrl = null;
 		try {
@@ -128,52 +101,50 @@ async function resolveChangedAssets(plan, resolveFileUrl) {
 			if (!patch) throw error;
 		}
 		if (fileUrl && patch && asset.file.byteSize !== null && asset.patch !== null && asset.patch.byteSize !== null && asset.patch.byteSize >= asset.file.byteSize) patch = null;
-		if (!fileUrl && !patch) return null;
-		const changedAsset = { fileHash: asset.fileHash };
-		if (fileUrl) {
-			changedAsset.file = { url: fileUrl };
-			if (asset.file.compression) changedAsset.file.compression = asset.file.compression;
-		}
-		if (patch) changedAsset.patch = patch;
-		return {
-			asset: [asset.assetPath, changedAsset],
-			primaryByteSize: patch ? asset.patch?.byteSize ?? null : asset.file.byteSize
+		if (!fileUrl) return null;
+		const changedAsset = {
+			file: { url: fileUrl },
+			fileHash: asset.fileHash
 		};
+		if (asset.file.compression) changedAsset.file.compression = asset.file.compression;
+		if (patch) changedAsset.patch = patch;
+		return { asset: [asset.assetPath, changedAsset] };
 	}));
-	if (changedEntries.some((entry) => entry === null)) return null;
-	const resolvedEntries = changedEntries.filter((entry) => entry !== null);
-	return {
-		changedAssets: Object.fromEntries(resolvedEntries.map((entry) => entry.asset)),
-		primaryByteSizes: resolvedEntries.map((entry) => entry.primaryByteSize)
-	};
+	if (entries.some((entry) => entry === null)) return null;
+	const resolvedEntries = entries.filter((entry) => entry !== null);
+	return { assets: Object.fromEntries(resolvedEntries.map((entry) => entry.asset)) };
 }
-async function resolveManifestArtifacts({ archiveUrlUsable, currentBundle, resolveFileUrl, readStorageText, targetBundle }) {
+async function resolveManifestArtifacts({ currentBundle, resolveFileUrl, readStorageText, targetBundle }) {
 	const manifestStorageUri = targetBundle ? getManifestStorageUri(targetBundle) : null;
 	const manifestFileHash = targetBundle ? getManifestFileHash(targetBundle) : null;
 	const assetBaseStorageUri = targetBundle ? getAssetBaseStorageUri(targetBundle) : null;
 	if (!targetBundle || !manifestStorageUri || !manifestFileHash || !assetBaseStorageUri) return null;
-	const currentManifestStorageUri = currentBundle ? getManifestStorageUri(currentBundle) : null;
-	const [targetManifestResult, currentManifestResult] = await Promise.all([fetchBundleManifest(manifestStorageUri, readStorageText), currentManifestStorageUri ? fetchBundleManifest(currentManifestStorageUri, readStorageText) : null]);
-	if (!targetManifestResult) return null;
+	const targetManifest = await fetchBundleManifest(manifestStorageUri, readStorageText);
+	if (!targetManifest) return null;
 	const plan = createManifestArtifactPlan({
 		assetBaseStorageUri,
-		currentManifest: currentManifestResult?.manifest ?? null,
 		currentBundle,
 		targetBundle,
-		targetManifest: targetManifestResult.manifest,
-		targetManifestByteSize: targetManifestResult.byteSize
+		targetManifest
 	});
-	if (archiveUrlUsable && plan.allPossibleByteSizesKnown && shouldUseArchive(targetBundle, plan.minimumDownloadByteSize)) return null;
 	const manifestUrl = await resolveFileUrl(manifestStorageUri);
 	if (!manifestUrl) return null;
-	const resolved = await resolveChangedAssets(plan, resolveFileUrl);
+	const resolved = await resolveAssets(plan, resolveFileUrl);
 	if (!resolved) return null;
-	const resolvedDownloadByteSize = sumByteSizes([plan.manifestByteSize, ...resolved.primaryByteSizes]);
-	if (archiveUrlUsable && shouldUseArchive(targetBundle, resolvedDownloadByteSize)) return null;
+	let archiveUrl = null;
+	const archive = targetManifest.archive;
+	if (archive && isContentAddressedAssetFileHash(archive.downloadFileHash) && (asByteSize(archive.downloadByteSize) ?? 0) > 0 && (asByteSize(archive.tarByteSize) ?? 0) > 0) try {
+		archiveUrl = await resolveFileUrl(getBundleArchiveStorageUri({
+			manifestStorageUri,
+			bundleId: targetBundle.id
+		}));
+	} catch {}
 	return {
-		changedAssets: resolved.changedAssets,
+		artifactProtocolVersion: ARTIFACT_PROTOCOL_VERSION,
+		assets: resolved.assets,
 		manifestFileHash,
-		manifestUrl
+		manifestUrl,
+		...archiveUrl ? { archiveUrl } : {}
 	};
 }
 //#endregion

package/dist/handler.cjs

@@ -1,10 +1,9 @@
 const require_handlerErrors = require("./handlerErrors.cjs");
-const require_handlerBundleRoutes = require("./handlerBundleRoutes.cjs");
+const require_handlerAdminRoutes = require("./handlerAdminRoutes.cjs");
 const require_handlerReleaseCatalogRoutes = require("./handlerReleaseCatalogRoutes.cjs");
-const require_handlerReleaseManagementRoutes = require("./handlerReleaseManagementRoutes.cjs");
 const require_handlerVersionRoutes = require("./handlerVersionRoutes.cjs");
-const require_routes = require("./insights/routes.cjs");
 const require_internalRouter = require("./internalRouter.cjs");
+let _hot_updater_plugin_core = require("@hot-updater/plugin-core");
 //#region src/handler.ts
 const withPrivateNoStore = (response) => {
 	const headers = new Headers(response.headers);
@@ -19,15 +18,29 @@ const errorResponse = (error, status) => Response.json({ error }, {
 	headers: { "cache-control": "private, no-store" },
 	status
 });
-const requiresApiKey = (handlerName) => handlerName === "appVersionReleaseCatalog" || handlerName === "fingerprintReleaseCatalog" || handlerName === "artifact" || handlerName === "appendBundleEvent";
-const createRequestHandler = ({ api, apiKeyAuth, privateResponses = false, routeHandlers, router }) => async (request) => {
+/** `/version` and storage downloads never pass through the client policy. */
+const PUBLIC_CLIENT_ROUTES = /* @__PURE__ */ new Set(["version", "downloadStorageObject"]);
+const routesOf = Symbol.for("@hot-updater/server/routes");
+const withVary = (response, varyHeaders) => {
+	const cacheControl = response.headers.get("cache-control") ?? "";
+	if (varyHeaders.length === 0 || cacheControl === "" || /private|no-store/u.test(cacheControl)) return response;
+	const headers = new Headers(response.headers);
+	headers.set("vary", [response.headers.get("vary"), ...varyHeaders].filter(Boolean).join(", "));
+	return new Response(response.body, {
+		headers,
+		status: response.status,
+		statusText: response.statusText
+	});
+};
+const createRequestHandler = ({ api, clientPolicy, privateResponses = false, routeHandlers, router }) => async (request) => {
 	try {
 		const match = require_internalRouter.findRoute(router, request.method, new URL(request.url).pathname);
 		if (!match) return errorResponse("Not found", 404);
-		if (apiKeyAuth !== void 0 && requiresApiKey(match.data)) {
+		const guarded = clientPolicy !== void 0 && !PUBLIC_CLIENT_ROUTES.has(match.data);
+		if (guarded) {
 			let authenticated;
 			try {
-				authenticated = await apiKeyAuth.authenticate(request);
+				authenticated = await clientPolicy.authenticate(request);
 			} catch {
 				return errorResponse("Service unavailable", 503);
 			}
@@ -36,9 +49,14 @@ const createRequestHandler = ({ api, apiKeyAuth, privateResponses = false, route
 		const handler = routeHandlers[match.data];
 		if (!handler) return errorResponse("Handler not found", 500);
 		const response = await handler(match.params, request, api);
-		return privateResponses ? withPrivateNoStore(response) : response;
+		if (privateResponses) return withPrivateNoStore(response);
+		return guarded ? withVary(response, clientPolicy.varyHeaders) : response;
 	} catch (error) {
 		if (error instanceof require_handlerErrors.HandlerBadRequestError) return errorResponse(error.message, 400);
+		if (error instanceof _hot_updater_plugin_core.HotUpdaterSchemaMigrationRequiredError) {
+			console.error(error.message);
+			return errorResponse("Service unavailable", 503);
+		}
 		console.error("Hot Updater handler error:", error);
 		return Response.json({ error: "Internal server error" }, {
 			headers: { "cache-control": "private, no-store" },
@@ -60,50 +78,47 @@ const createDownloadStorageRouteHandler = (downloadStorageObject) => async (para
 		statusText: response.statusText
 	});
 };
-function createHandlers(api) {
-	return createHotUpdaterHandlers(api);
-}
-function createHotUpdaterHandlers(api, insights, apiKeyAuth, downloadStorageObject) {
+function createHotUpdaterHandlers({ api, clientPolicy, downloadStorageObject, endpoints = [], plugins = [] }) {
 	const routeHandlers = {
-		...require_handlerVersionRoutes.createVersionRouteHandlers(),
-		...require_handlerReleaseCatalogRoutes.createReleaseCatalogRouteHandlers(apiKeyAuth?.headerName),
-		...require_handlerReleaseManagementRoutes.createReleaseManagementRouteHandlers(),
-		...require_handlerBundleRoutes.createBundleRouteHandlers(),
-		...insights === void 0 ? {} : require_routes.createInsightsRouteHandlers(insights),
+		...require_handlerVersionRoutes.createVersionRouteHandlers(plugins),
+		...require_handlerReleaseCatalogRoutes.createReleaseCatalogRouteHandlers(),
+		...require_handlerAdminRoutes.createAdminRouteHandlers(),
 		...downloadStorageObject === void 0 ? {} : { downloadStorageObject: createDownloadStorageRouteHandler(downloadStorageObject) }
 	};
+	const routes = [];
+	const shapes = /* @__PURE__ */ new Map();
+	const mount = (router, admin) => (method, path, handler) => {
+		const shape = `${admin ? "admin" : "client"} ${method} ${path.replaceAll(/:[^/]+/gu, ":")}`;
+		const taken = shapes.get(shape);
+		if (taken !== void 0) throw new _hot_updater_plugin_core.HotUpdaterConfigError(`${handler} (${method} ${path}) collides with ${taken} on handlers.${admin ? "admin" : "client"}.`);
+		shapes.set(shape, handler);
+		require_internalRouter.addRoute(router, method, path, handler);
+		routes.push({
+			method,
+			path,
+			access: admin ? "admin" : PUBLIC_CLIENT_ROUTES.has(handler) ? "public" : "client"
+		});
+	};
 	const clientRouter = require_internalRouter.createRouter();
-	const addClientRoute = (method, path, handler) => require_internalRouter.addRoute(clientRouter, method, path, handler);
+	const addClientRoute = mount(clientRouter, false);
 	addClientRoute("GET", "/version", "version");
 	if (downloadStorageObject !== void 0) addClientRoute("GET", "/storage/:token/:signature", "downloadStorageObject");
 	addClientRoute("GET", "/release-catalogs/app-version/:platform/:channelKey/:appVersion", "appVersionReleaseCatalog");
 	addClientRoute("GET", "/release-catalogs/fingerprint/:platform/:channelKey/:fingerprintHash", "fingerprintReleaseCatalog");
-	addClientRoute("GET", "/artifacts/:targetBundleId/from/:currentBundleId", "artifact");
-	if (insights !== void 0) require_routes.registerInsightsClientRoutes(addClientRoute);
+	addClientRoute("GET", "/artifacts/v1/:targetBundleId/from/:currentBundleId", "artifactV1");
 	const adminRouter = require_internalRouter.createRouter();
-	const addAdminRoute = (method, path, handler) => require_internalRouter.addRoute(adminRouter, method, path, handler);
-	addAdminRoute("GET", "/releases/:id", "getRelease");
-	addAdminRoute("GET", "/releases", "getReleases");
-	addAdminRoute("PATCH", "/releases/:id", "updateRelease");
-	addAdminRoute("POST", "/releases/:id/preflight", "preflightRelease");
-	addAdminRoute("DELETE", "/releases/:id", "deleteRelease");
-	addAdminRoute("GET", "/release-catalogs/:scopeKey", "getReleaseCatalogRow");
-	addAdminRoute("GET", "/release-catalogs", "getReleaseCatalogs");
-	addAdminRoute("POST", "/release-catalogs/:scopeKey/rebuild", "rebuildReleaseCatalog");
-	addAdminRoute("POST", "/database/commit", "commitDatabase");
-	addAdminRoute("GET", "/channels", "getChannels");
-	addAdminRoute("POST", "/channels", "createChannel");
-	addAdminRoute("DELETE", "/channels/:id", "deleteChannel");
-	addAdminRoute("GET", "/bundles/:id", "getBundle");
-	addAdminRoute("GET", "/bundles", "getBundles");
-	addAdminRoute("POST", "/bundles", "createBundles");
-	addAdminRoute("PATCH", "/bundles/:id", "updateBundle");
-	addAdminRoute("DELETE", "/bundles/:id", "deleteBundle");
-	if (insights !== void 0) require_routes.registerInsightsAdminRoutes(addAdminRoute);
-	return Object.freeze({
+	const addAdminRoute = mount(adminRouter, true);
+	addAdminRoute("GET", "/version", "adminVersion");
+	for (const route of require_handlerAdminRoutes.ADMIN_ROUTES) addAdminRoute(route.method, route.path, route.handler);
+	for (const endpoint of endpoints) {
+		const name = `plugin ${endpoint.plugin}: ${endpoint.method} ${endpoint.path}`;
+		routeHandlers[name] = (params, request) => endpoint.handler(request, params);
+		(endpoint.access === "admin" ? addAdminRoute : addClientRoute)(endpoint.method, endpoint.path, name);
+	}
+	const handlers = {
 		client: createRequestHandler({
 			api,
-			apiKeyAuth,
+			...clientPolicy === void 0 ? {} : { clientPolicy },
 			routeHandlers,
 			router: clientRouter
 		}),
@@ -113,8 +128,9 @@ function createHotUpdaterHandlers(api, insights, apiKeyAuth, downloadStorageObje
 			routeHandlers,
 			router: adminRouter
 		})
-	});
+	};
+	Object.defineProperty(handlers, routesOf, { value: Object.freeze(routes) });
+	return Object.freeze(handlers);
 }
 //#endregion
-exports.createHandlers = createHandlers;
 exports.createHotUpdaterHandlers = createHotUpdaterHandlers;

package/dist/handler.d.cts

@@ -1,5 +1,3 @@
-import { HandlerAPI, HotUpdaterHandler, HotUpdaterHandlers } from "./handlerTypes.cjs";
-//#region src/handler.d.ts
-declare function createHandlers(api: HandlerAPI): HotUpdaterHandlers;
-//#endregion
-export { type HandlerAPI, type HotUpdaterHandler, type HotUpdaterHandlers, createHandlers };
+import "./assembly/assemblePlugins.cjs";
+import { HotUpdaterHandler, HotUpdaterHandlers } from "./handlerTypes.cjs";
+export type { HotUpdaterHandler, HotUpdaterHandlers };

package/dist/handler.d.mts

@@ -1,5 +1,3 @@
-import { HandlerAPI, HotUpdaterHandler, HotUpdaterHandlers } from "./handlerTypes.mjs";
-//#region src/handler.d.ts
-declare function createHandlers(api: HandlerAPI): HotUpdaterHandlers;
-//#endregion
-export { type HandlerAPI, type HotUpdaterHandler, type HotUpdaterHandlers, createHandlers };
+import "./assembly/assemblePlugins.mjs";
+import { HotUpdaterHandler, HotUpdaterHandlers } from "./handlerTypes.mjs";
+export type { HotUpdaterHandler, HotUpdaterHandlers };