@hot-updater/server 1.0.0-rc.2 → 1.0.0-rc.21

package/dist/core/operations.cjs

@@ -0,0 +1,351 @@
+const require_reads = require("./reads.cjs");
+const require_writes = require("./writes.cjs");
+const require_releases = require("./releases.cjs");
+let _hot_updater_plugin_core = require("@hot-updater/plugin-core");
+let _hot_updater_protocol = require("@hot-updater/protocol");
+//#region src/core/operations.ts
+/** Carries a preflight's result out of the transaction it stops, so nothing is written. */
+var Preflight = class extends Error {
+	result;
+	constructor(result) {
+		super("preflight");
+		this.result = result;
+	}
+};
+const dryRun = async (db, read) => {
+	try {
+		await db.transaction(async (tx) => {
+			throw new Preflight(await read(tx));
+		});
+	} catch (error) {
+		if (error instanceof Preflight) return error.result;
+		throw error;
+	}
+	throw new Error("A preflight transaction returned without its result.");
+};
+/** A channel's catalog scope for a platform, and a fingerprint when it has one. */
+const scopeOf = (channel, platform, fingerprintHash) => {
+	const channelKey = (0, _hot_updater_protocol.encodeChannelKey)(channel.name);
+	return fingerprintHash === null ? {
+		channelId: channel.id,
+		channelName: channel.name,
+		fingerprintHash,
+		platform,
+		scopeKey: (0, _hot_updater_protocol.createReleaseCatalogScopeKey)({
+			channelKey,
+			platform,
+			strategy: "APP_VERSION"
+		}),
+		strategy: "APP_VERSION"
+	} : {
+		channelId: channel.id,
+		channelName: channel.name,
+		fingerprintHash,
+		platform,
+		scopeKey: (0, _hot_updater_protocol.createReleaseCatalogScopeKey)({
+			channelKey,
+			fingerprintHash,
+			platform,
+			strategy: "FINGERPRINT"
+		}),
+		strategy: "FINGERPRINT"
+	};
+};
+/** A release and its scope, checked against the revision the caller saw. */
+const loadTarget = async (tx, { releaseId, expectedRevision }) => {
+	const row = await tx.findOne("releases", { id: releaseId });
+	if (row === null) throw new _hot_updater_plugin_core.ReleaseManagementError("RELEASE_NOT_FOUND", `Release "${releaseId}" was not found.`);
+	const release = require_reads.toReleaseRow(row);
+	if (expectedRevision !== void 0 && expectedRevision !== release.revision) throw new _hot_updater_plugin_core.ReleaseManagementError("VERSION_CONFLICT", `Release "${release.id}" is revision ${release.revision}; expected ${expectedRevision}.`);
+	const catalog = await tx.findOne("release_catalogs", { scope_key: release.scope_key });
+	if (catalog === null) throw new _hot_updater_plugin_core.ReleaseCatalogMutationError("INVALID_SCOPE", `Release "${release.id}" has no catalog projection.`);
+	return {
+		release,
+		scope: {
+			channelId: release.channel_id,
+			channelName: (0, _hot_updater_protocol.decodeChannelKey)(catalog.channel_key),
+			fingerprintHash: release.fingerprint_hash,
+			platform: release.platform,
+			scopeKey: release.scope_key,
+			strategy: release.strategy
+		}
+	};
+};
+const policyUpdate = (release, patch, updatedAtMs) => {
+	if (patch.fingerprintHash !== void 0 && patch.fingerprintHash !== release.fingerprint_hash) throw new _hot_updater_plugin_core.ReleaseManagementError("SCOPE_MOVE_UNSUPPORTED", "Changing a fingerprint target requires an atomic Release scope move.");
+	return {
+		...patch.enabled === void 0 ? {} : { enabled: patch.enabled },
+		...patch.message === void 0 ? {} : { message: patch.message },
+		...patch.rolloutCohortCount === void 0 ? {} : { rollout_cohort_count: patch.rolloutCohortCount },
+		...patch.shouldForceUpdate === void 0 ? {} : { should_force_update: patch.shouldForceUpdate },
+		...patch.targetAppVersion === void 0 ? {} : { target_app_version: patch.targetAppVersion },
+		...patch.targetCohorts === void 0 ? {} : { target_cohorts: [...patch.targetCohorts] },
+		updated_at_ms: updatedAtMs
+	};
+};
+const mutationResult = ({ catalog, release }) => ({
+	attempts: 1,
+	catalog,
+	release
+});
+/** The scope a catalog row names, for a rebuild. */
+const catalogScope = async (tx, scopeKey) => {
+	const row = await tx.findOne("release_catalogs", { scope_key: scopeKey });
+	if (row === null) throw new Error(`Release catalog "${scopeKey}" was not found.`);
+	return {
+		channelId: row.channel_id,
+		channelName: (0, _hot_updater_protocol.decodeChannelKey)(row.channel_key),
+		fingerprintHash: row.fingerprint_hash,
+		platform: row.platform,
+		scopeKey: row.scope_key,
+		strategy: row.strategy
+	};
+};
+/**
+* Core's typed writes: each runs in one engine transaction rooted at the
+* catalogs it changes, so a concurrent change reruns it instead of
+* publishing a stale catalog.
+*/
+const createCoreOperations = (db, { now = Date.now } = {}) => {
+	const ensureChannel = async (name) => (await require_writes.insertChannel(db, {
+		id: `channel:${(0, _hot_updater_protocol.encodeChannelKey)(name)}`,
+		name
+	})).row;
+	/**
+	* Runs a write that ensured its channels first. A channel deleted between
+	* that and the write refuses the write, so it runs again and ensures it anew.
+	*/
+	const withChannels = async (write) => {
+		for (let attempt = 1;; attempt += 1) try {
+			return await write();
+		} catch (error) {
+			if (attempt < 3 && error instanceof _hot_updater_plugin_core.DatabaseConstraintError && error.reason === "not_found" && error.model === "channels") continue;
+			throw error;
+		}
+	};
+	const deployOnce = async (deployments) => {
+		const channels = /* @__PURE__ */ new Map();
+		for (const { release } of deployments) if (!channels.has(release.channel)) channels.set(release.channel, await ensureChannel(release.channel));
+		const platforms = /* @__PURE__ */ new Map();
+		for (const deployment of deployments) {
+			if (!("bundleId" in deployment) || platforms.has(deployment.bundleId)) continue;
+			const row = await db.findOne("bundles", { id: deployment.bundleId });
+			if (row === null) throw new _hot_updater_plugin_core.DatabaseBundleNotFoundError(deployment.bundleId);
+			platforms.set(deployment.bundleId, require_reads.toBundleRow(row).platform);
+		}
+		const updatedAtMs = now();
+		return (await require_releases.changeReleases(db, deployments.map((deployment) => {
+			const { release: policy } = deployment;
+			const stored = "bundleId" in deployment;
+			const bundleId = stored ? deployment.bundleId : deployment.bundle.id;
+			const platform = stored ? platforms.get(deployment.bundleId) : deployment.bundle.platform;
+			const scope = scopeOf(channels.get(policy.channel), platform, policy.fingerprintHash);
+			return {
+				scope,
+				...stored ? {} : { bundle: {
+					row: (0, _hot_updater_plugin_core.bundleToRow)(deployment.bundle),
+					patches: (0, _hot_updater_plugin_core.bundleToPatchRows)(deployment.bundle)
+				} },
+				change: {
+					operation: "insert",
+					row: {
+						bundle_id: bundleId,
+						channel_id: scope.channelId,
+						created_at_ms: updatedAtMs,
+						enabled: policy.enabled,
+						fingerprint_hash: policy.fingerprintHash,
+						kind: "BUNDLE",
+						message: policy.message,
+						operation: "DEPLOY",
+						platform,
+						revision: 1,
+						rollout_cohort_count: policy.rolloutCohortCount ?? 1e3,
+						scope_key: scope.scopeKey,
+						should_force_update: policy.shouldForceUpdate,
+						source_release_id: null,
+						strategy: scope.strategy,
+						target_app_version: policy.targetAppVersion,
+						target_cohorts: policy.targetCohorts ?? [],
+						updated_at_ms: updatedAtMs
+					}
+				},
+				updatedAtMs
+			};
+		}))).map(mutationResult);
+	};
+	return {
+		deploy: (deployments) => withChannels(() => deployOnce(deployments)),
+		updateReleasePolicy: (input) => {
+			const updatedAtMs = now();
+			return db.transaction(async (tx) => {
+				const { release, scope } = await loadTarget(tx, input);
+				return mutationResult(await require_releases.changeRelease(tx, {
+					scope,
+					change: {
+						operation: "update",
+						id: release.id,
+						update: policyUpdate(release, input.patch, updatedAtMs)
+					},
+					updatedAtMs
+				}));
+			});
+		},
+		preflightReleasePolicy: (input) => {
+			const updatedAtMs = now();
+			return dryRun(db, async (tx) => {
+				const { release, scope } = await loadTarget(tx, input);
+				const stored = await require_releases.readCatalog(tx, scope.scopeKey);
+				const changed = await require_releases.changeRelease(tx, {
+					scope,
+					change: {
+						operation: "update",
+						id: release.id,
+						update: policyUpdate(release, input.patch, updatedAtMs)
+					},
+					updatedAtMs
+				});
+				return {
+					catalog: changed.catalog,
+					currentCatalog: stored.catalog,
+					diagnostics: changed.diagnostics,
+					expectedReleaseRevision: release.revision,
+					release: changed.release
+				};
+			});
+		},
+		deleteRelease: (input) => db.transaction(async (tx) => {
+			const { release, scope } = await loadTarget(tx, input);
+			if (release.enabled) throw new _hot_updater_plugin_core.ReleaseManagementError("ENABLED_RELEASE", `Disable Release "${release.id}" before hard deletion.`);
+			const bundle = release.bundle_id === null ? null : await tx.findOne("bundles", { id: release.bundle_id });
+			const result = mutationResult(await require_releases.changeRelease(tx, {
+				scope,
+				change: {
+					operation: "delete",
+					id: release.id
+				},
+				updatedAtMs: now()
+			}));
+			if (bundle !== null && (bundle._refs_releases_bundle_id ?? 0) <= 1) await require_writes.deleteBundle(tx, bundle);
+			return result;
+		}),
+		promoteRelease: (input) => withChannels(async () => {
+			const checkSource = (source) => {
+				if (source.kind !== "BUNDLE" || source.bundle_id === null) throw new _hot_updater_plugin_core.ReleaseManagementError("TARGET_RELEASE_INVALID", "Only a Bundle Release can be promoted.");
+			};
+			checkSource((await db.transaction((tx) => loadTarget(tx, input))).release);
+			const targetChannel = input.targetChannel.trim();
+			if (targetChannel.length === 0) throw new _hot_updater_plugin_core.ReleaseManagementError("TARGET_RELEASE_INVALID", "Promotion requires a target channel.");
+			const channel = await ensureChannel(targetChannel);
+			const updatedAtMs = now();
+			return db.transaction(async (tx) => {
+				const { release: source, scope: sourceScope } = await loadTarget(tx, input);
+				checkSource(source);
+				const targetScope = scopeOf(channel, source.platform, source.fingerprint_hash);
+				if (targetScope.scopeKey === sourceScope.scopeKey) throw new _hot_updater_plugin_core.ReleaseManagementError("TARGET_RELEASE_INVALID", "Source and target Release scopes are the same.");
+				const { rows } = await tx.findMany("releases", {
+					index: "byScope",
+					where: { scope_key: targetScope.scopeKey },
+					order: "desc",
+					limit: 1
+				});
+				const floor = [
+					rows[0]?.id ?? null,
+					source.id,
+					source.bundle_id
+				].filter((id) => id !== null && (0, _hot_updater_plugin_core.isUUIDv7)(id)).sort().at(-1);
+				const moved = input.action === "move" ? await require_releases.changeRelease(tx, {
+					scope: sourceScope,
+					change: {
+						operation: "update",
+						id: source.id,
+						update: {
+							enabled: false,
+							updated_at_ms: updatedAtMs
+						}
+					},
+					updatedAtMs
+				}) : null;
+				const target = await require_releases.changeRelease(tx, {
+					scope: targetScope,
+					change: {
+						operation: "insert",
+						row: {
+							...source,
+							id: (0, _hot_updater_plugin_core.createUUIDv7After)(floor ?? null, updatedAtMs),
+							revision: 1,
+							scope_key: targetScope.scopeKey,
+							channel_id: targetScope.channelId,
+							enabled: true,
+							rollout_cohort_count: 1e3,
+							target_cohorts: [],
+							operation: "PROMOTE",
+							source_release_id: source.id,
+							created_at_ms: updatedAtMs,
+							updated_at_ms: updatedAtMs
+						}
+					},
+					updatedAtMs
+				});
+				return {
+					source: moved === null ? null : mutationResult(moved),
+					target: mutationResult(target)
+				};
+			});
+		}),
+		rebuildReleaseCatalog: (scopeKey) => {
+			const updatedAtMs = now();
+			return db.transaction(async (tx) => {
+				const { current: _current, ...rebuilt } = await require_releases.rebuildScope(tx, await catalogScope(tx, scopeKey), updatedAtMs);
+				return {
+					attempts: 1,
+					...rebuilt
+				};
+			});
+		},
+		preflightReleaseCatalogRebuild: (scopeKey) => {
+			const updatedAtMs = now();
+			return dryRun(db, async (tx) => {
+				const rebuilt = await require_releases.rebuildScope(tx, await catalogScope(tx, scopeKey), updatedAtMs);
+				return {
+					changed: rebuilt.changed,
+					currentCatalog: rebuilt.current,
+					diagnostics: rebuilt.diagnostics,
+					projectedCatalog: rebuilt.catalog
+				};
+			});
+		},
+		ensureChannel,
+		deleteChannel: (id) => require_writes.deleteChannel(db, id),
+		updateBundle: (id, update) => db.transaction(async (tx) => {
+			const current = await tx.findOne("bundles", { id });
+			if (current === null) throw new _hot_updater_plugin_core.DatabaseBundleNotFoundError(id);
+			const { patches, ...fields } = update;
+			const next = {
+				...(0, _hot_updater_plugin_core.rowToBundle)(require_reads.toBundleRow(current)),
+				...fields,
+				id
+			};
+			const { id: _id, ...set } = (0, _hot_updater_plugin_core.bundleToRow)(next);
+			require_writes.updateBundle(tx, current, set);
+			if (patches !== void 0) await require_writes.replaceBundlePatches(tx, current, (0, _hot_updater_plugin_core.bundleToPatchRows)({
+				...next,
+				patches
+			}));
+		}),
+		deleteBundles: async (ids) => {
+			try {
+				await db.transaction(async (tx) => {
+					for (const id of new Set(ids)) {
+						const current = await tx.findOne("bundles", { id });
+						if (current !== null) await require_writes.deleteBundle(tx, current);
+					}
+				});
+			} catch (error) {
+				if (error instanceof _hot_updater_plugin_core.DatabaseConstraintError && error.reason === "referenced") throw new _hot_updater_plugin_core.DatabaseRowReferencedError();
+				throw error;
+			}
+		}
+	};
+};
+//#endregion
+exports.createCoreOperations = createCoreOperations;

package/dist/core/operations.mjs

@@ -0,0 +1,351 @@
+import { toBundleRow, toReleaseRow } from "./reads.mjs";
+import { deleteBundle, deleteChannel, insertChannel, replaceBundlePatches, updateBundle } from "./writes.mjs";
+import { changeRelease, changeReleases, readCatalog, rebuildScope } from "./releases.mjs";
+import { DatabaseBundleNotFoundError, DatabaseConstraintError, DatabaseRowReferencedError, ReleaseCatalogMutationError, ReleaseManagementError, bundleToPatchRows, bundleToRow, createUUIDv7After, isUUIDv7, rowToBundle } from "@hot-updater/plugin-core";
+import { createReleaseCatalogScopeKey, decodeChannelKey, encodeChannelKey } from "@hot-updater/protocol";
+//#region src/core/operations.ts
+/** Carries a preflight's result out of the transaction it stops, so nothing is written. */
+var Preflight = class extends Error {
+	result;
+	constructor(result) {
+		super("preflight");
+		this.result = result;
+	}
+};
+const dryRun = async (db, read) => {
+	try {
+		await db.transaction(async (tx) => {
+			throw new Preflight(await read(tx));
+		});
+	} catch (error) {
+		if (error instanceof Preflight) return error.result;
+		throw error;
+	}
+	throw new Error("A preflight transaction returned without its result.");
+};
+/** A channel's catalog scope for a platform, and a fingerprint when it has one. */
+const scopeOf = (channel, platform, fingerprintHash) => {
+	const channelKey = encodeChannelKey(channel.name);
+	return fingerprintHash === null ? {
+		channelId: channel.id,
+		channelName: channel.name,
+		fingerprintHash,
+		platform,
+		scopeKey: createReleaseCatalogScopeKey({
+			channelKey,
+			platform,
+			strategy: "APP_VERSION"
+		}),
+		strategy: "APP_VERSION"
+	} : {
+		channelId: channel.id,
+		channelName: channel.name,
+		fingerprintHash,
+		platform,
+		scopeKey: createReleaseCatalogScopeKey({
+			channelKey,
+			fingerprintHash,
+			platform,
+			strategy: "FINGERPRINT"
+		}),
+		strategy: "FINGERPRINT"
+	};
+};
+/** A release and its scope, checked against the revision the caller saw. */
+const loadTarget = async (tx, { releaseId, expectedRevision }) => {
+	const row = await tx.findOne("releases", { id: releaseId });
+	if (row === null) throw new ReleaseManagementError("RELEASE_NOT_FOUND", `Release "${releaseId}" was not found.`);
+	const release = toReleaseRow(row);
+	if (expectedRevision !== void 0 && expectedRevision !== release.revision) throw new ReleaseManagementError("VERSION_CONFLICT", `Release "${release.id}" is revision ${release.revision}; expected ${expectedRevision}.`);
+	const catalog = await tx.findOne("release_catalogs", { scope_key: release.scope_key });
+	if (catalog === null) throw new ReleaseCatalogMutationError("INVALID_SCOPE", `Release "${release.id}" has no catalog projection.`);
+	return {
+		release,
+		scope: {
+			channelId: release.channel_id,
+			channelName: decodeChannelKey(catalog.channel_key),
+			fingerprintHash: release.fingerprint_hash,
+			platform: release.platform,
+			scopeKey: release.scope_key,
+			strategy: release.strategy
+		}
+	};
+};
+const policyUpdate = (release, patch, updatedAtMs) => {
+	if (patch.fingerprintHash !== void 0 && patch.fingerprintHash !== release.fingerprint_hash) throw new ReleaseManagementError("SCOPE_MOVE_UNSUPPORTED", "Changing a fingerprint target requires an atomic Release scope move.");
+	return {
+		...patch.enabled === void 0 ? {} : { enabled: patch.enabled },
+		...patch.message === void 0 ? {} : { message: patch.message },
+		...patch.rolloutCohortCount === void 0 ? {} : { rollout_cohort_count: patch.rolloutCohortCount },
+		...patch.shouldForceUpdate === void 0 ? {} : { should_force_update: patch.shouldForceUpdate },
+		...patch.targetAppVersion === void 0 ? {} : { target_app_version: patch.targetAppVersion },
+		...patch.targetCohorts === void 0 ? {} : { target_cohorts: [...patch.targetCohorts] },
+		updated_at_ms: updatedAtMs
+	};
+};
+const mutationResult = ({ catalog, release }) => ({
+	attempts: 1,
+	catalog,
+	release
+});
+/** The scope a catalog row names, for a rebuild. */
+const catalogScope = async (tx, scopeKey) => {
+	const row = await tx.findOne("release_catalogs", { scope_key: scopeKey });
+	if (row === null) throw new Error(`Release catalog "${scopeKey}" was not found.`);
+	return {
+		channelId: row.channel_id,
+		channelName: decodeChannelKey(row.channel_key),
+		fingerprintHash: row.fingerprint_hash,
+		platform: row.platform,
+		scopeKey: row.scope_key,
+		strategy: row.strategy
+	};
+};
+/**
+* Core's typed writes: each runs in one engine transaction rooted at the
+* catalogs it changes, so a concurrent change reruns it instead of
+* publishing a stale catalog.
+*/
+const createCoreOperations = (db, { now = Date.now } = {}) => {
+	const ensureChannel = async (name) => (await insertChannel(db, {
+		id: `channel:${encodeChannelKey(name)}`,
+		name
+	})).row;
+	/**
+	* Runs a write that ensured its channels first. A channel deleted between
+	* that and the write refuses the write, so it runs again and ensures it anew.
+	*/
+	const withChannels = async (write) => {
+		for (let attempt = 1;; attempt += 1) try {
+			return await write();
+		} catch (error) {
+			if (attempt < 3 && error instanceof DatabaseConstraintError && error.reason === "not_found" && error.model === "channels") continue;
+			throw error;
+		}
+	};
+	const deployOnce = async (deployments) => {
+		const channels = /* @__PURE__ */ new Map();
+		for (const { release } of deployments) if (!channels.has(release.channel)) channels.set(release.channel, await ensureChannel(release.channel));
+		const platforms = /* @__PURE__ */ new Map();
+		for (const deployment of deployments) {
+			if (!("bundleId" in deployment) || platforms.has(deployment.bundleId)) continue;
+			const row = await db.findOne("bundles", { id: deployment.bundleId });
+			if (row === null) throw new DatabaseBundleNotFoundError(deployment.bundleId);
+			platforms.set(deployment.bundleId, toBundleRow(row).platform);
+		}
+		const updatedAtMs = now();
+		return (await changeReleases(db, deployments.map((deployment) => {
+			const { release: policy } = deployment;
+			const stored = "bundleId" in deployment;
+			const bundleId = stored ? deployment.bundleId : deployment.bundle.id;
+			const platform = stored ? platforms.get(deployment.bundleId) : deployment.bundle.platform;
+			const scope = scopeOf(channels.get(policy.channel), platform, policy.fingerprintHash);
+			return {
+				scope,
+				...stored ? {} : { bundle: {
+					row: bundleToRow(deployment.bundle),
+					patches: bundleToPatchRows(deployment.bundle)
+				} },
+				change: {
+					operation: "insert",
+					row: {
+						bundle_id: bundleId,
+						channel_id: scope.channelId,
+						created_at_ms: updatedAtMs,
+						enabled: policy.enabled,
+						fingerprint_hash: policy.fingerprintHash,
+						kind: "BUNDLE",
+						message: policy.message,
+						operation: "DEPLOY",
+						platform,
+						revision: 1,
+						rollout_cohort_count: policy.rolloutCohortCount ?? 1e3,
+						scope_key: scope.scopeKey,
+						should_force_update: policy.shouldForceUpdate,
+						source_release_id: null,
+						strategy: scope.strategy,
+						target_app_version: policy.targetAppVersion,
+						target_cohorts: policy.targetCohorts ?? [],
+						updated_at_ms: updatedAtMs
+					}
+				},
+				updatedAtMs
+			};
+		}))).map(mutationResult);
+	};
+	return {
+		deploy: (deployments) => withChannels(() => deployOnce(deployments)),
+		updateReleasePolicy: (input) => {
+			const updatedAtMs = now();
+			return db.transaction(async (tx) => {
+				const { release, scope } = await loadTarget(tx, input);
+				return mutationResult(await changeRelease(tx, {
+					scope,
+					change: {
+						operation: "update",
+						id: release.id,
+						update: policyUpdate(release, input.patch, updatedAtMs)
+					},
+					updatedAtMs
+				}));
+			});
+		},
+		preflightReleasePolicy: (input) => {
+			const updatedAtMs = now();
+			return dryRun(db, async (tx) => {
+				const { release, scope } = await loadTarget(tx, input);
+				const stored = await readCatalog(tx, scope.scopeKey);
+				const changed = await changeRelease(tx, {
+					scope,
+					change: {
+						operation: "update",
+						id: release.id,
+						update: policyUpdate(release, input.patch, updatedAtMs)
+					},
+					updatedAtMs
+				});
+				return {
+					catalog: changed.catalog,
+					currentCatalog: stored.catalog,
+					diagnostics: changed.diagnostics,
+					expectedReleaseRevision: release.revision,
+					release: changed.release
+				};
+			});
+		},
+		deleteRelease: (input) => db.transaction(async (tx) => {
+			const { release, scope } = await loadTarget(tx, input);
+			if (release.enabled) throw new ReleaseManagementError("ENABLED_RELEASE", `Disable Release "${release.id}" before hard deletion.`);
+			const bundle = release.bundle_id === null ? null : await tx.findOne("bundles", { id: release.bundle_id });
+			const result = mutationResult(await changeRelease(tx, {
+				scope,
+				change: {
+					operation: "delete",
+					id: release.id
+				},
+				updatedAtMs: now()
+			}));
+			if (bundle !== null && (bundle._refs_releases_bundle_id ?? 0) <= 1) await deleteBundle(tx, bundle);
+			return result;
+		}),
+		promoteRelease: (input) => withChannels(async () => {
+			const checkSource = (source) => {
+				if (source.kind !== "BUNDLE" || source.bundle_id === null) throw new ReleaseManagementError("TARGET_RELEASE_INVALID", "Only a Bundle Release can be promoted.");
+			};
+			checkSource((await db.transaction((tx) => loadTarget(tx, input))).release);
+			const targetChannel = input.targetChannel.trim();
+			if (targetChannel.length === 0) throw new ReleaseManagementError("TARGET_RELEASE_INVALID", "Promotion requires a target channel.");
+			const channel = await ensureChannel(targetChannel);
+			const updatedAtMs = now();
+			return db.transaction(async (tx) => {
+				const { release: source, scope: sourceScope } = await loadTarget(tx, input);
+				checkSource(source);
+				const targetScope = scopeOf(channel, source.platform, source.fingerprint_hash);
+				if (targetScope.scopeKey === sourceScope.scopeKey) throw new ReleaseManagementError("TARGET_RELEASE_INVALID", "Source and target Release scopes are the same.");
+				const { rows } = await tx.findMany("releases", {
+					index: "byScope",
+					where: { scope_key: targetScope.scopeKey },
+					order: "desc",
+					limit: 1
+				});
+				const floor = [
+					rows[0]?.id ?? null,
+					source.id,
+					source.bundle_id
+				].filter((id) => id !== null && isUUIDv7(id)).sort().at(-1);
+				const moved = input.action === "move" ? await changeRelease(tx, {
+					scope: sourceScope,
+					change: {
+						operation: "update",
+						id: source.id,
+						update: {
+							enabled: false,
+							updated_at_ms: updatedAtMs
+						}
+					},
+					updatedAtMs
+				}) : null;
+				const target = await changeRelease(tx, {
+					scope: targetScope,
+					change: {
+						operation: "insert",
+						row: {
+							...source,
+							id: createUUIDv7After(floor ?? null, updatedAtMs),
+							revision: 1,
+							scope_key: targetScope.scopeKey,
+							channel_id: targetScope.channelId,
+							enabled: true,
+							rollout_cohort_count: 1e3,
+							target_cohorts: [],
+							operation: "PROMOTE",
+							source_release_id: source.id,
+							created_at_ms: updatedAtMs,
+							updated_at_ms: updatedAtMs
+						}
+					},
+					updatedAtMs
+				});
+				return {
+					source: moved === null ? null : mutationResult(moved),
+					target: mutationResult(target)
+				};
+			});
+		}),
+		rebuildReleaseCatalog: (scopeKey) => {
+			const updatedAtMs = now();
+			return db.transaction(async (tx) => {
+				const { current: _current, ...rebuilt } = await rebuildScope(tx, await catalogScope(tx, scopeKey), updatedAtMs);
+				return {
+					attempts: 1,
+					...rebuilt
+				};
+			});
+		},
+		preflightReleaseCatalogRebuild: (scopeKey) => {
+			const updatedAtMs = now();
+			return dryRun(db, async (tx) => {
+				const rebuilt = await rebuildScope(tx, await catalogScope(tx, scopeKey), updatedAtMs);
+				return {
+					changed: rebuilt.changed,
+					currentCatalog: rebuilt.current,
+					diagnostics: rebuilt.diagnostics,
+					projectedCatalog: rebuilt.catalog
+				};
+			});
+		},
+		ensureChannel,
+		deleteChannel: (id) => deleteChannel(db, id),
+		updateBundle: (id, update) => db.transaction(async (tx) => {
+			const current = await tx.findOne("bundles", { id });
+			if (current === null) throw new DatabaseBundleNotFoundError(id);
+			const { patches, ...fields } = update;
+			const next = {
+				...rowToBundle(toBundleRow(current)),
+				...fields,
+				id
+			};
+			const { id: _id, ...set } = bundleToRow(next);
+			updateBundle(tx, current, set);
+			if (patches !== void 0) await replaceBundlePatches(tx, current, bundleToPatchRows({
+				...next,
+				patches
+			}));
+		}),
+		deleteBundles: async (ids) => {
+			try {
+				await db.transaction(async (tx) => {
+					for (const id of new Set(ids)) {
+						const current = await tx.findOne("bundles", { id });
+						if (current !== null) await deleteBundle(tx, current);
+					}
+				});
+			} catch (error) {
+				if (error instanceof DatabaseConstraintError && error.reason === "referenced") throw new DatabaseRowReferencedError();
+				throw error;
+			}
+		}
+	};
+};
+//#endregion
+export { createCoreOperations };